[Tue Nov 11 06:21:40.114411 2025] [proxy_fcgi:error] [pid 33931:tid 33941] [client 165.85.56.95:28591] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Tue Nov 11 06:21:41.679263 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:28591] AH01071: Got error 'PHP message: start 1762813301.1143', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:21:42.122862 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:28591] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813302.1224-1762813301.1143', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:22:52.549469 2025] [proxy_fcgi:error] [pid 33932:tid 33980] [client 165.85.56.95:31041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44614
[Tue Nov 11 06:22:54.008239 2025] [proxy_fcgi:error] [pid 33932:tid 33979] [client 165.85.56.95:31041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formBookingID in /home/pumpbooking/public_html/booking.php on line 184', referer: https://pumpbooking.com/booking.php?bookingID=44614
[Tue Nov 11 06:23:10.092346 2025] [proxy_fcgi:error] [pid 34002:tid 34009] [client 165.85.56.95:30073] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?reschedule=44614
[Tue Nov 11 06:23:19.812403 2025] [proxy_fcgi:error] [pid 33888:tid 33909] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:21.441398 2025] [proxy_fcgi:error] [pid 33888:tid 33912] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: start 1762813400.7427', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:21.740433 2025] [proxy_fcgi:error] [pid 33888:tid 33912] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813401.7396-1762813400.7427', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:27.620087 2025] [proxy_fcgi:error] [pid 33888:tid 33900] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:28.693229 2025] [proxy_fcgi:error] [pid 33888:tid 33903] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: start 1762813408.3557', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:29.212779 2025] [proxy_fcgi:error] [pid 33888:tid 33903] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813409.2124-1762813408.3557', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:34.163649 2025] [proxy_fcgi:error] [pid 33888:tid 33912] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44615
[Tue Nov 11 06:23:35.477157 2025] [proxy_fcgi:error] [pid 33888:tid 33897] [client 165.85.56.95:41033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formBookingID in /home/pumpbooking/public_html/booking.php on line 184', referer: https://pumpbooking.com/booking.php?bookingID=44615
[Tue Nov 11 06:23:50.464989 2025] [proxy_fcgi:error] [pid 33932:tid 33985] [client 165.85.56.95:53972] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?reschedule=44615
[Tue Nov 11 06:23:54.377423 2025] [proxy_fcgi:error] [pid 33932:tid 33972] [client 165.85.56.95:53972] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44625
[Tue Nov 11 06:23:55.029202 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:53972] AH01071: Got error 'PHP message: start 1762813434.8177', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:23:55.214249 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:53972] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813435.2139-1762813434.8177', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:24:03.907527 2025] [proxy_fcgi:error] [pid 34002:tid 34028] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:24:04.670578 2025] [proxy_fcgi:error] [pid 34002:tid 34025] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: start 1762813444.3812', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:24:04.837358 2025] [proxy_fcgi:error] [pid 34002:tid 34025] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813444.8369-1762813444.3812', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:24:09.992625 2025] [proxy_fcgi:error] [pid 34002:tid 34020] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44616
[Tue Nov 11 06:24:14.174041 2025] [proxy_fcgi:error] [pid 34002:tid 34015] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44616
[Tue Nov 11 06:24:14.994838 2025] [proxy_fcgi:error] [pid 34002:tid 34026] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: start 1762813454.5692', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:24:15.141173 2025] [proxy_fcgi:error] [pid 34002:tid 34026] [client 165.85.56.95:38184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813455.1407-1762813454.5692', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:26:16.387149 2025] [proxy_fcgi:error] [pid 34002:tid 34019] [client 165.85.56.95:22020] AH01071: Got error 'PHP message: start 1762813575.6615', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:26:16.504417 2025] [proxy_fcgi:error] [pid 34002:tid 34019] [client 165.85.56.95:22020] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813576.5037-1762813575.6615', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:26:18.867182 2025] [proxy_fcgi:error] [pid 34002:tid 34017] [client 165.85.56.95:22020] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:26:19.877418 2025] [proxy_fcgi:error] [pid 34002:tid 34022] [client 165.85.56.95:22020] AH01071: Got error 'PHP message: start 1762813579.4678', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:26:20.100153 2025] [proxy_fcgi:error] [pid 34002:tid 34022] [client 165.85.56.95:22020] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813580.0998-1762813579.4678', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:28:21.449934 2025] [proxy_fcgi:error] [pid 34002:tid 34014] [client 165.85.56.95:14954] AH01071: Got error 'PHP message: start 1762813700.5973', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:28:21.742111 2025] [proxy_fcgi:error] [pid 34002:tid 34014] [client 165.85.56.95:14954] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813701.7415-1762813700.5973', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:29:16.018493 2025] [proxy_fcgi:error] [pid 34002:tid 34013] [client 165.85.56.95:48014] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:29:17.766780 2025] [proxy_fcgi:error] [pid 34002:tid 34027] [client 165.85.56.95:48014] AH01071: Got error 'PHP message: start 1762813757.061', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:29:17.950953 2025] [proxy_fcgi:error] [pid 34002:tid 34027] [client 165.85.56.95:48014] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813757.9506-1762813757.061', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:31:18.987240 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:45093] AH01071: Got error 'PHP message: start 1762813878.2353', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:31:19.155645 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:45093] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762813879.155-1762813878.2353', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:33:20.311894 2025] [proxy_fcgi:error] [pid 33931:tid 33947] [client 165.85.56.95:64871] AH01071: Got error 'PHP message: start 1762813999.4527', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:33:20.546595 2025] [proxy_fcgi:error] [pid 33931:tid 33947] [client 165.85.56.95:64871] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814000.5459-1762813999.4527', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:35:04.045258 2025] [proxy_fcgi:error] [pid 34002:tid 34020] [client 165.85.56.95:16708] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:35:06.294169 2025] [proxy_fcgi:error] [pid 34002:tid 34021] [client 165.85.56.95:16708] AH01071: Got error 'PHP message: start 1762814105.245', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:35:06.563965 2025] [proxy_fcgi:error] [pid 34002:tid 34021] [client 165.85.56.95:16708] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814106.5632-1762814105.245', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:35:24.627716 2025] [proxy_fcgi:error] [pid 57437:tid 57460] [client 165.85.56.95:26012] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:35:27.567464 2025] [proxy_fcgi:error] [pid 57437:tid 57447] [client 165.85.56.95:26012] AH01071: Got error 'PHP message: start 1762814125.997', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:35:27.776478 2025] [proxy_fcgi:error] [pid 57437:tid 57447] [client 165.85.56.95:26012] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814127.7757-1762814125.997', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:36:25.349465 2025] [proxy_fcgi:error] [pid 57437:tid 57452] [client 165.85.56.95:61275] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:36:28.638597 2025] [proxy_fcgi:error] [pid 57437:tid 57464] [client 165.85.56.95:61275] AH01071: Got error 'PHP message: start 1762814186.9347', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:36:28.840327 2025] [proxy_fcgi:error] [pid 57437:tid 57464] [client 165.85.56.95:61275] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814188.8397-1762814186.9347', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:37:03.925552 2025] [proxy_fcgi:error] [pid 34002:tid 34029] [client 165.85.56.95:29987] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:37:05.583320 2025] [proxy_fcgi:error] [pid 34002:tid 34026] [client 165.85.56.95:29987] AH01071: Got error 'PHP message: start 1762814224.8235', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:37:05.845324 2025] [proxy_fcgi:error] [pid 34002:tid 34026] [client 165.85.56.95:29987] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814225.8447-1762814224.8235', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:37:16.266448 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:40126] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:37:17.404704 2025] [proxy_fcgi:error] [pid 33932:tid 33973] [client 165.85.56.95:40126] AH01071: Got error 'PHP message: start 1762814236.8894', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:37:17.405513 2025] [proxy_fcgi:error] [pid 33932:tid 33973] [client 165.85.56.95:40126] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814237.4051-1762814236.8894', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:39:18.926500 2025] [proxy_fcgi:error] [pid 57437:tid 57457] [client 165.85.56.95:33456] AH01071: Got error 'PHP message: start 1762814357.8248', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:39:18.929188 2025] [proxy_fcgi:error] [pid 57437:tid 57457] [client 165.85.56.95:33456] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814358.9285-1762814357.8248', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:41:20.344418 2025] [proxy_fcgi:error] [pid 57437:tid 57448] [client 165.85.56.95:62857] AH01071: Got error 'PHP message: start 1762814479.484', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:41:20.345108 2025] [proxy_fcgi:error] [pid 57437:tid 57448] [client 165.85.56.95:62857] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814480.3441-1762814479.484', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:43:21.681668 2025] [proxy_fcgi:error] [pid 33888:tid 33907] [client 165.85.56.95:6034] AH01071: Got error 'PHP message: start 1762814600.9641', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:43:21.682211 2025] [proxy_fcgi:error] [pid 33888:tid 33907] [client 165.85.56.95:6034] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814601.6817-1762814600.9641', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:45:22.757216 2025] [proxy_fcgi:error] [pid 33932:tid 33976] [client 165.85.56.95:38576] AH01071: Got error 'PHP message: start 1762814722.134', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:45:22.758384 2025] [proxy_fcgi:error] [pid 33932:tid 33976] [client 165.85.56.95:38576] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814722.7579-1762814722.134', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:47:23.733051 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:49728] AH01071: Got error 'PHP message: start 1762814843.0548', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:47:23.734232 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:49728] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814843.7337-1762814843.0548', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:49:25.133397 2025] [proxy_fcgi:error] [pid 57437:tid 57441] [client 165.85.56.95:55668] AH01071: Got error 'PHP message: start 1762814964.4131', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:49:25.134488 2025] [proxy_fcgi:error] [pid 57437:tid 57441] [client 165.85.56.95:55668] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762814965.1339-1762814964.4131', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:51:26.356386 2025] [proxy_fcgi:error] [pid 57437:tid 57453] [client 165.85.56.95:7341] AH01071: Got error 'PHP message: start 1762815085.5844', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:51:26.357605 2025] [proxy_fcgi:error] [pid 57437:tid 57453] [client 165.85.56.95:7341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815086.357-1762815085.5844', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:53:27.447456 2025] [proxy_fcgi:error] [pid 33931:tid 33955] [client 165.85.56.95:33114] AH01071: Got error 'PHP message: start 1762815206.7317', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:53:27.449511 2025] [proxy_fcgi:error] [pid 33931:tid 33955] [client 165.85.56.95:33114] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815207.4478-1762815206.7317', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:55:28.466280 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:9863] AH01071: Got error 'PHP message: start 1762815327.7575', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:55:28.467487 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:9863] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815328.467-1762815327.7575', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:56:24.267782 2025] [proxy_fcgi:error] [pid 33931:tid 33952] [client 165.85.56.95:16579] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:56:25.634431 2025] [proxy_fcgi:error] [pid 33931:tid 33946] [client 165.85.56.95:16579] AH01071: Got error 'PHP message: start 1762815384.9542', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:56:25.832804 2025] [proxy_fcgi:error] [pid 33931:tid 33946] [client 165.85.56.95:16579] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815385.8323-1762815384.9542', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 06:58:27.025397 2025] [proxy_fcgi:error] [pid 33888:tid 33899] [client 165.85.56.95:50332] AH01071: Got error 'PHP message: start 1762815506.3636', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 06:58:27.200261 2025] [proxy_fcgi:error] [pid 33888:tid 33899] [client 165.85.56.95:50332] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815507.1998-1762815506.3636', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:00:28.354179 2025] [proxy_fcgi:error] [pid 57437:tid 57458] [client 165.85.56.95:64059] AH01071: Got error 'PHP message: start 1762815627.692', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:00:28.548562 2025] [proxy_fcgi:error] [pid 57437:tid 57458] [client 165.85.56.95:64059] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815628.5482-1762815627.692', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:02:29.746915 2025] [proxy_fcgi:error] [pid 57437:tid 57460] [client 165.85.56.95:28228] AH01071: Got error 'PHP message: start 1762815749.0405', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:02:30.033546 2025] [proxy_fcgi:error] [pid 57437:tid 57460] [client 165.85.56.95:28228] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815750.033-1762815749.0405', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:04:30.885203 2025] [proxy_fcgi:error] [pid 33932:tid 33983] [client 165.85.56.95:30982] AH01071: Got error 'PHP message: start 1762815870.3718', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:04:31.044339 2025] [proxy_fcgi:error] [pid 33932:tid 33983] [client 165.85.56.95:30982] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815871.0439-1762815870.3718', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:06:32.743146 2025] [proxy_fcgi:error] [pid 33931:tid 33961] [client 165.85.56.95:33421] AH01071: Got error 'PHP message: start 1762815991.3784', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:06:33.030683 2025] [proxy_fcgi:error] [pid 33931:tid 33961] [client 165.85.56.95:33421] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762815993.0297-1762815991.3784', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:08:34.056320 2025] [proxy_fcgi:error] [pid 34002:tid 34006] [client 165.85.56.95:29795] AH01071: Got error 'PHP message: start 1762816113.503', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:08:34.241763 2025] [proxy_fcgi:error] [pid 34002:tid 34006] [client 165.85.56.95:29795] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816114.2411-1762816113.503', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:10:35.290424 2025] [proxy_fcgi:error] [pid 33888:tid 33913] [client 165.85.56.95:11218] AH01071: Got error 'PHP message: start 1762816234.5832', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:10:35.477775 2025] [proxy_fcgi:error] [pid 33888:tid 33913] [client 165.85.56.95:11218] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816235.4773-1762816234.5832', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:12:36.605565 2025] [proxy_fcgi:error] [pid 33932:tid 33975] [client 165.85.56.95:44842] AH01071: Got error 'PHP message: start 1762816355.7898', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:12:36.769428 2025] [proxy_fcgi:error] [pid 33932:tid 33975] [client 165.85.56.95:44842] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816356.7689-1762816355.7898', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:14:02.686981 2025] [proxy_fcgi:error] [pid 33931:tid 33957] [client 165.85.56.95:60755] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 07:14:05.091698 2025] [proxy_fcgi:error] [pid 33931:tid 33949] [client 165.85.56.95:60755] AH01071: Got error 'PHP message: start 1762816444.2356', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 07:14:06.118516 2025] [proxy_fcgi:error] [pid 33931:tid 33949] [client 165.85.56.95:60755] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816446.1181-1762816444.2356', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 07:16:07.208573 2025] [proxy_fcgi:error] [pid 57437:tid 57459] [client 165.85.56.95:41221] AH01071: Got error 'PHP message: start 1762816566.5985', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:16:08.177093 2025] [proxy_fcgi:error] [pid 57437:tid 57459] [client 165.85.56.95:41221] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816568.1764-1762816566.5985', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:18:09.159275 2025] [proxy_fcgi:error] [pid 33932:tid 33988] [client 165.85.56.95:18631] AH01071: Got error 'PHP message: start 1762816688.5128', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:18:10.162844 2025] [proxy_fcgi:error] [pid 33932:tid 33988] [client 165.85.56.95:18631] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816690.1622-1762816688.5128', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:19:10.452729 2025] [proxy_fcgi:error] [pid 33931:tid 33949] [client 165.85.56.95:30055] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 07:19:12.230091 2025] [proxy_fcgi:error] [pid 33931:tid 33947] [client 165.85.56.95:30055] AH01071: Got error 'PHP message: start 1762816751.5662', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 07:19:12.618258 2025] [proxy_fcgi:error] [pid 33931:tid 33947] [client 165.85.56.95:30055] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816752.6179-1762816751.5662', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 07:21:13.481390 2025] [proxy_fcgi:error] [pid 33931:tid 33954] [client 165.85.56.95:33946] AH01071: Got error 'PHP message: start 1762816872.9187', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:21:13.643234 2025] [proxy_fcgi:error] [pid 33931:tid 33954] [client 165.85.56.95:33946] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816873.6429-1762816872.9187', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:23:14.671319 2025] [proxy_fcgi:error] [pid 33932:tid 33979] [client 165.85.56.95:52727] AH01071: Got error 'PHP message: start 1762816993.9838', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:23:14.925045 2025] [proxy_fcgi:error] [pid 33932:tid 33979] [client 165.85.56.95:52727] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762816994.9247-1762816993.9838', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:25:15.833235 2025] [proxy_fcgi:error] [pid 33932:tid 33989] [client 165.85.56.95:52773] AH01071: Got error 'PHP message: start 1762817115.2713', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:25:16.113557 2025] [proxy_fcgi:error] [pid 33932:tid 33989] [client 165.85.56.95:52773] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817116.1132-1762817115.2713', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:27:17.178149 2025] [proxy_fcgi:error] [pid 33932:tid 33977] [client 165.85.56.95:43395] AH01071: Got error 'PHP message: start 1762817236.5907', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:27:17.441871 2025] [proxy_fcgi:error] [pid 33932:tid 33977] [client 165.85.56.95:43395] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817237.4412-1762817236.5907', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:29:18.254359 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:27978] AH01071: Got error 'PHP message: start 1762817357.7407', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:29:18.420468 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:27978] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817358.4201-1762817357.7407', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:31:19.333903 2025] [proxy_fcgi:error] [pid 34002:tid 34008] [client 165.85.56.95:62195] AH01071: Got error 'PHP message: start 1762817478.7348', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:31:19.506409 2025] [proxy_fcgi:error] [pid 34002:tid 34008] [client 165.85.56.95:62195] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817479.5057-1762817478.7348', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:33:20.470853 2025] [proxy_fcgi:error] [pid 33932:tid 33986] [client 165.85.56.95:22633] AH01071: Got error 'PHP message: start 1762817599.8096', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:33:20.770093 2025] [proxy_fcgi:error] [pid 33932:tid 33986] [client 165.85.56.95:22633] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817600.7695-1762817599.8096', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:35:21.725665 2025] [proxy_fcgi:error] [pid 57437:tid 57464] [client 165.85.56.95:43333] AH01071: Got error 'PHP message: start 1762817721.0887', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:35:21.992000 2025] [proxy_fcgi:error] [pid 57437:tid 57464] [client 165.85.56.95:43333] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817721.9916-1762817721.0887', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:37:23.028032 2025] [proxy_fcgi:error] [pid 33888:tid 33909] [client 165.85.56.95:15989] AH01071: Got error 'PHP message: start 1762817842.2876', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:37:23.207570 2025] [proxy_fcgi:error] [pid 33888:tid 33909] [client 165.85.56.95:15989] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817843.2072-1762817842.2876', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:39:24.606073 2025] [proxy_fcgi:error] [pid 33932:tid 33989] [client 165.85.56.95:62683] AH01071: Got error 'PHP message: start 1762817963.6966', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:39:24.780009 2025] [proxy_fcgi:error] [pid 33932:tid 33989] [client 165.85.56.95:62683] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762817964.7795-1762817963.6966', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:41:26.015839 2025] [proxy_fcgi:error] [pid 33932:tid 33990] [client 165.85.56.95:17148] AH01071: Got error 'PHP message: start 1762818085.2935', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:41:26.269563 2025] [proxy_fcgi:error] [pid 33932:tid 33990] [client 165.85.56.95:17148] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818086.2684-1762818085.2935', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:43:27.287392 2025] [proxy_fcgi:error] [pid 33931:tid 33946] [client 165.85.56.95:31488] AH01071: Got error 'PHP message: start 1762818206.5821', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:43:27.639665 2025] [proxy_fcgi:error] [pid 33931:tid 33946] [client 165.85.56.95:31488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818207.638-1762818206.5821', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:45:28.758425 2025] [proxy_fcgi:error] [pid 33932:tid 33973] [client 165.85.56.95:42179] AH01071: Got error 'PHP message: start 1762818328.1458', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:45:28.919348 2025] [proxy_fcgi:error] [pid 33932:tid 33973] [client 165.85.56.95:42179] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818328.9187-1762818328.1458', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:47:30.060681 2025] [proxy_fcgi:error] [pid 57437:tid 57450] [client 165.85.56.95:54732] AH01071: Got error 'PHP message: start 1762818449.48', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:47:30.275157 2025] [proxy_fcgi:error] [pid 57437:tid 57450] [client 165.85.56.95:54732] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818450.2747-1762818449.48', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:49:31.189230 2025] [proxy_fcgi:error] [pid 34002:tid 34017] [client 165.85.56.95:54647] AH01071: Got error 'PHP message: start 1762818570.5728', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:49:31.394732 2025] [proxy_fcgi:error] [pid 34002:tid 34017] [client 165.85.56.95:54647] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818571.3943-1762818570.5728', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:51:32.361382 2025] [proxy_fcgi:error] [pid 33888:tid 33914] [client 165.85.56.95:44001] AH01071: Got error 'PHP message: start 1762818691.7385', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:51:32.581128 2025] [proxy_fcgi:error] [pid 33888:tid 33914] [client 165.85.56.95:44001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818692.5802-1762818691.7385', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:53:33.826271 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:47274] AH01071: Got error 'PHP message: start 1762818813.2013', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:53:34.047054 2025] [proxy_fcgi:error] [pid 33932:tid 33987] [client 165.85.56.95:47274] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818814.0466-1762818813.2013', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:55:38.377390 2025] [proxy_fcgi:error] [pid 33888:tid 33908] [client 165.85.56.95:21160] AH01071: Got error 'PHP message: start 1762818934.5709', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:55:46.466638 2025] [proxy_fcgi:error] [pid 33888:tid 33908] [client 165.85.56.95:21160] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762818946.4656-1762818934.5709', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:57:51.198514 2025] [proxy_fcgi:error] [pid 18828:tid 18836] [client 165.85.56.95:25749] AH01071: Got error 'PHP message: start 1762819067.0268', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 07:57:51.663587 2025] [proxy_fcgi:error] [pid 18828:tid 18836] [client 165.85.56.95:25749] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819071.6624-1762819067.0268', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:00:07.117484 2025] [proxy_fcgi:error] [pid 20101:tid 20112] [client 165.85.56.95:11054] AH01071: Got error 'PHP message: start 1762819192.3669', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:00:07.546541 2025] [proxy_fcgi:error] [pid 20101:tid 20112] [client 165.85.56.95:11054] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819207.5457-1762819192.3669', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:02:12.806067 2025] [proxy_fcgi:error] [pid 57437:tid 57452] [client 165.85.56.95:56634] AH01071: Got error 'PHP message: start 1762819327.9941', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:02:13.194499 2025] [proxy_fcgi:error] [pid 57437:tid 57452] [client 165.85.56.95:56634] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819333.1939-1762819327.9941', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:04:18.075386 2025] [proxy_fcgi:error] [pid 33931:tid 33951] [client 165.85.56.95:34130] AH01071: Got error 'PHP message: start 1762819453.6336', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:04:18.587789 2025] [proxy_fcgi:error] [pid 33931:tid 33951] [client 165.85.56.95:34130] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819458.5874-1762819453.6336', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:06:45.822442 2025] [proxy_fcgi:error] [pid 57437:tid 57442] [client 165.85.56.95:4392] AH01071: Got error 'PHP message: start 1762819579.2639', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:06:47.241510 2025] [proxy_fcgi:error] [pid 57437:tid 57442] [client 165.85.56.95:4392] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819607.2408-1762819579.2639', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:08:51.554883 2025] [proxy_fcgi:error] [pid 19756:tid 19768] [client 165.85.56.95:47571] AH01071: Got error 'PHP message: start 1762819728.0906', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:08:51.910968 2025] [proxy_fcgi:error] [pid 19756:tid 19768] [client 165.85.56.95:47571] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819731.9098-1762819728.0906', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:10:59.433407 2025] [proxy_fcgi:error] [pid 19909:tid 19916] [client 165.85.56.95:30757] AH01071: Got error 'PHP message: start 1762819852.3237', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:10:59.771331 2025] [proxy_fcgi:error] [pid 19909:tid 19916] [client 165.85.56.95:30757] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762819859.771-1762819852.3237', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:13:20.589391 2025] [proxy_fcgi:error] [pid 33932:tid 33968] [client 165.85.56.95:3536] AH01071: Got error 'PHP message: start 1762819980.3803', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:13:21.232571 2025] [proxy_fcgi:error] [pid 33932:tid 33968] [client 165.85.56.95:3536] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820001.2316-1762819980.3803', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:15:26.253381 2025] [proxy_fcgi:error] [pid 33931:tid 33949] [client 165.85.56.95:54318] AH01071: Got error 'PHP message: start 1762820121.6263', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:15:26.484451 2025] [proxy_fcgi:error] [pid 33931:tid 33949] [client 165.85.56.95:54318] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820126.484-1762820121.6263', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:17:34.802399 2025] [proxy_fcgi:error] [pid 19909:tid 19915] [client 165.85.56.95:27731] AH01071: Got error 'PHP message: start 1762820246.8826', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:17:35.452524 2025] [proxy_fcgi:error] [pid 19909:tid 19915] [client 165.85.56.95:27731] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820255.4516-1762820246.8826', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:19:43.772376 2025] [proxy_fcgi:error] [pid 33931:tid 33945] [client 165.85.56.95:13070] AH01071: Got error 'PHP message: start 1762820375.7867', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:19:44.138403 2025] [proxy_fcgi:error] [pid 33931:tid 33945] [client 165.85.56.95:13070] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820384.138-1762820375.7867', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:21:48.392401 2025] [proxy_fcgi:error] [pid 18828:tid 18831] [client 165.85.56.95:55148] AH01071: Got error 'PHP message: start 1762820504.7036', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:21:48.809536 2025] [proxy_fcgi:error] [pid 18828:tid 18831] [client 165.85.56.95:55148] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820508.8076-1762820504.7036', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:23:53.207047 2025] [proxy_fcgi:error] [pid 18828:tid 18854] [client 165.85.56.95:5050] AH01071: Got error 'PHP message: start 1762820629.336', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:23:53.655670 2025] [proxy_fcgi:error] [pid 18828:tid 18854] [client 165.85.56.95:5050] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820633.6546-1762820629.336', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:25:58.398736 2025] [proxy_fcgi:error] [pid 18828:tid 18831] [client 165.85.56.95:56818] AH01071: Got error 'PHP message: start 1762820754.0793', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:25:59.170569 2025] [proxy_fcgi:error] [pid 18828:tid 18831] [client 165.85.56.95:56818] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820759.1696-1762820754.0793', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:28:04.973585 2025] [proxy_fcgi:error] [pid 19756:tid 19768] [client 165.85.56.95:54417] AH01071: Got error 'PHP message: start 1762820879.8008', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:28:05.381759 2025] [proxy_fcgi:error] [pid 19756:tid 19768] [client 165.85.56.95:54417] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762820885.3804-1762820879.8008', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:30:08.891569 2025] [proxy_fcgi:error] [pid 19183:tid 19190] [client 165.85.56.95:45809] AH01071: Got error 'PHP message: start 1762821005.7528', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:30:09.268813 2025] [proxy_fcgi:error] [pid 19183:tid 19190] [client 165.85.56.95:45809] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821009.2683-1762821005.7528', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:32:15.429060 2025] [proxy_fcgi:error] [pid 19183:tid 19187] [client 165.85.56.95:35561] AH01071: Got error 'PHP message: start 1762821129.6338', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:32:16.051521 2025] [proxy_fcgi:error] [pid 19183:tid 19187] [client 165.85.56.95:35561] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821136.0507-1762821129.6338', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:34:19.858384 2025] [proxy_fcgi:error] [pid 33888:tid 33895] [client 165.85.56.95:38061] AH01071: Got error 'PHP message: start 1762821256.6115', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:34:20.515623 2025] [proxy_fcgi:error] [pid 33888:tid 33895] [client 165.85.56.95:38061] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821260.5149-1762821256.6115', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:36:25.441396 2025] [proxy_fcgi:error] [pid 19559:tid 19587] [client 165.85.56.95:54194] AH01071: Got error 'PHP message: start 1762821380.8927', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:36:26.053605 2025] [proxy_fcgi:error] [pid 19559:tid 19587] [client 165.85.56.95:54194] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821386.0531-1762821380.8927', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:38:31.115578 2025] [proxy_fcgi:error] [pid 34002:tid 34010] [client 165.85.56.95:41172] AH01071: Got error 'PHP message: start 1762821506.477', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:38:31.496762 2025] [proxy_fcgi:error] [pid 34002:tid 34010] [client 165.85.56.95:41172] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821511.4956-1762821506.477', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:40:35.812453 2025] [proxy_fcgi:error] [pid 20101:tid 20121] [client 165.85.56.95:12731] AH01071: Got error 'PHP message: start 1762821632.1918', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:40:36.339382 2025] [proxy_fcgi:error] [pid 20101:tid 20121] [client 165.85.56.95:12731] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821636.339-1762821632.1918', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:42:40.585782 2025] [proxy_fcgi:error] [pid 19909:tid 19923] [client 165.85.56.95:34936] AH01071: Got error 'PHP message: start 1762821756.7089', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:42:40.894545 2025] [proxy_fcgi:error] [pid 19909:tid 19923] [client 165.85.56.95:34936] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821760.8942-1762821756.7089', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:44:42.098223 2025] [proxy_fcgi:error] [pid 43398:tid 43413] [client 165.85.56.95:2201] AH01071: Got error 'PHP message: start 1762821881.3707', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:44:42.392056 2025] [proxy_fcgi:error] [pid 43398:tid 43413] [client 165.85.56.95:2201] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762821882.3917-1762821881.3707', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:46:43.446374 2025] [proxy_fcgi:error] [pid 43301:tid 43349] [client 165.85.56.95:59047] AH01071: Got error 'PHP message: start 1762822002.8619', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:46:43.706551 2025] [proxy_fcgi:error] [pid 43301:tid 43349] [client 165.85.56.95:59047] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822003.706-1762822002.8619', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:48:44.596527 2025] [proxy_fcgi:error] [pid 43302:tid 43379] [client 165.85.56.95:45780] AH01071: Got error 'PHP message: start 1762822124.008', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:48:44.797797 2025] [proxy_fcgi:error] [pid 43302:tid 43379] [client 165.85.56.95:45780] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822124.7972-1762822124.008', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:50:45.712231 2025] [proxy_fcgi:error] [pid 43398:tid 43410] [client 165.85.56.95:56672] AH01071: Got error 'PHP message: start 1762822245.1339', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:50:45.880533 2025] [proxy_fcgi:error] [pid 43398:tid 43410] [client 165.85.56.95:56672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822245.8797-1762822245.1339', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:52:47.342541 2025] [proxy_fcgi:error] [pid 43398:tid 43404] [client 165.85.56.95:15369] AH01071: Got error 'PHP message: start 1762822366.4999', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:52:47.510000 2025] [proxy_fcgi:error] [pid 43398:tid 43404] [client 165.85.56.95:15369] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822367.5093-1762822366.4999', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:54:48.511388 2025] [proxy_fcgi:error] [pid 43300:tid 43307] [client 165.85.56.95:6872] AH01071: Got error 'PHP message: start 1762822487.993', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:54:48.721996 2025] [proxy_fcgi:error] [pid 43300:tid 43307] [client 165.85.56.95:6872] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822488.7216-1762822487.993', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:56:50.006499 2025] [proxy_fcgi:error] [pid 43302:tid 43374] [client 165.85.56.95:35349] AH01071: Got error 'PHP message: start 1762822609.0401', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:56:50.261920 2025] [proxy_fcgi:error] [pid 43302:tid 43374] [client 165.85.56.95:35349] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822610.2615-1762822609.0401', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:58:51.108072 2025] [proxy_fcgi:error] [pid 43300:tid 43317] [client 165.85.56.95:53786] AH01071: Got error 'PHP message: start 1762822730.5652', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 08:58:51.348659 2025] [proxy_fcgi:error] [pid 43300:tid 43317] [client 165.85.56.95:53786] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822731.3482-1762822730.5652', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:00:52.591334 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 165.85.56.95:6091] AH01071: Got error 'PHP message: start 1762822851.685', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:00:52.773192 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 165.85.56.95:6091] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822852.7728-1762822851.685', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:00:57.917155 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 1.146.234.179:1861] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/index.php
[Tue Nov 11 09:00:59.060866 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 165.85.56.95:39003] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Tue Nov 11 09:01:01.290638 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 165.85.56.95:39003] AH01071: Got error 'PHP message: start 1762822860.5671', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:01:01.292513 2025] [proxy_fcgi:error] [pid 53414:tid 53435] [client 1.146.234.179:1861] AH01071: Got error 'PHP message: start 1762822860.4059', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:01:01.640106 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 165.85.56.95:39003] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822861.6397-1762822860.5671', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:01:01.649004 2025] [proxy_fcgi:error] [pid 53414:tid 53435] [client 1.146.234.179:1861] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822861.6486-1762822860.4059', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:02:53.859400 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 165.85.56.95:62182] AH01071: Got error 'PHP message: start 1762822973.2725', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:02:54.173085 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 165.85.56.95:62182] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822974.1724-1762822973.2725', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:03:02.859237 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 165.85.56.95:23196] AH01071: Got error 'PHP message: start 1762822981.9761', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:03:03.180658 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 165.85.56.95:23196] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762822983.1803-1762822981.9761', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:03:27.687077 2025] [proxy_fcgi:error] [pid 53414:tid 53418] [client 1.146.234.179:1875] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://www.pumpbooking.com/booking.php?bookingDate=2025-11-11
[Tue Nov 11 09:03:37.887864 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 1.146.234.179:1879] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/booking.php?bookingID=44626
[Tue Nov 11 09:03:39.754296 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 1.146.234.179:1879] AH01071: Got error 'PHP message: start 1762823019.0065', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:03:40.094498 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 1.146.234.179:1879] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823020.094-1762823019.0065', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:03:45.435037 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 1.146.234.179:1880] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:03:47.352042 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 1.146.234.179:1880] AH01071: Got error 'PHP message: start 1762823026.7112', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:03:47.706730 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 1.146.234.179:1880] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823027.7064-1762823026.7112', referer: https://www.pumpbooking.com/dashboard.php
[Tue Nov 11 09:04:55.020594 2025] [proxy_fcgi:error] [pid 53414:tid 53437] [client 165.85.56.95:51202] AH01071: Got error 'PHP message: start 1762823094.4849', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:04:55.410485 2025] [proxy_fcgi:error] [pid 53414:tid 53437] [client 165.85.56.95:51202] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823095.4099-1762823094.4849', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:05:04.619840 2025] [proxy_fcgi:error] [pid 53356:tid 53403] [client 165.85.56.95:49026] AH01071: Got error 'PHP message: start 1762823103.7395', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:05:04.892578 2025] [proxy_fcgi:error] [pid 53356:tid 53403] [client 165.85.56.95:49026] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823104.8922-1762823103.7395', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:06:56.266449 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:63544] AH01071: Got error 'PHP message: start 1762823215.7082', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:06:56.655775 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:63544] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823216.6552-1762823215.7082', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:07:06.468071 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 165.85.56.95:12831] AH01071: Got error 'PHP message: start 1762823225.7175', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:07:06.710516 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 165.85.56.95:12831] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823226.7101-1762823225.7175', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:08:57.632708 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:64072] AH01071: Got error 'PHP message: start 1762823336.9662', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:08:58.076333 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:64072] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823338.0758-1762823336.9662', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:09:08.684957 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 165.85.56.95:9774] AH01071: Got error 'PHP message: start 1762823347.2011', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:09:08.972354 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 165.85.56.95:9774] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823348.972-1762823347.2011', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:10:59.556557 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 165.85.56.95:3590] AH01071: Got error 'PHP message: start 1762823458.5243', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:10:59.850518 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 165.85.56.95:3590] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823459.8499-1762823458.5243', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:11:10.850990 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 165.85.56.95:42386] AH01071: Got error 'PHP message: start 1762823469.4401', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:11:11.021437 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 165.85.56.95:42386] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823471.021-1762823469.4401', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:13:01.450975 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:51407] AH01071: Got error 'PHP message: start 1762823580.5338', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:13:01.727557 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:51407] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823581.7271-1762823580.5338', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:13:12.310102 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 165.85.56.95:55814] AH01071: Got error 'PHP message: start 1762823591.4833', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:13:12.501432 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 165.85.56.95:55814] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823592.5003-1762823591.4833', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:15:02.858110 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 165.85.56.95:14383] AH01071: Got error 'PHP message: start 1762823702.2062', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:15:03.291629 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 165.85.56.95:14383] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823703.291-1762823702.2062', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:15:14.271388 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 165.85.56.95:64990] AH01071: Got error 'PHP message: start 1762823713.3278', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:15:14.585288 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 165.85.56.95:64990] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823714.5849-1762823713.3278', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:17:04.191553 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 165.85.56.95:11772] AH01071: Got error 'PHP message: start 1762823823.5962', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:17:04.529407 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 165.85.56.95:11772] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823824.529-1762823823.5962', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:17:15.889098 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 165.85.56.95:7586] AH01071: Got error 'PHP message: start 1762823835.0588', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:17:16.171545 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 165.85.56.95:7586] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823836.1711-1762823835.0588', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:19:05.615495 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 165.85.56.95:59869] AH01071: Got error 'PHP message: start 1762823944.9743', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:19:06.024811 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 165.85.56.95:59869] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823946.0243-1762823944.9743', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:19:17.243094 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:13475] AH01071: Got error 'PHP message: start 1762823956.6144', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:19:17.425903 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:13475] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762823957.4255-1762823956.6144', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:20:00.478192 2025] [proxy_fcgi:error] [pid 53356:tid 53409] [client 165.85.56.95:22537] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:20:01.721843 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 165.85.56.95:22537] AH01071: Got error 'PHP message: start 1762824000.8922', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:20:01.722747 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 165.85.56.95:22537] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824001.7224-1762824000.8922', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:20:13.376110 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 165.85.56.95:2098] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-10
[Tue Nov 11 09:21:07.233593 2025] [proxy_fcgi:error] [pid 53356:tid 53391] [client 165.85.56.95:47823] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:07.350220 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:51582] AH01071: Got error 'PHP message: start 1762824066.5258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:21:07.829686 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:51582] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824067.8291-1762824066.5258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:21:08.105407 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 165.85.56.95:47823] AH01071: Got error 'PHP message: start 1762824067.7995', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:08.275138 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 165.85.56.95:47823] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824068.2748-1762824067.7995', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:16.971963 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:27671] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:17.640380 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 165.85.56.95:27671] AH01071: Got error 'PHP message: start 1762824077.4703', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:17.733420 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 165.85.56.95:27671] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824077.733-1762824077.4703', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:41.574984 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:58961] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:42.408951 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 165.85.56.95:58961] AH01071: Got error 'PHP message: start 1762824102.0326', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:21:42.409559 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 165.85.56.95:58961] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824102.4087-1762824102.0326', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:23:08.730399 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 165.85.56.95:50472] AH01071: Got error 'PHP message: start 1762824188.1434', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:23:09.023114 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 165.85.56.95:50472] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824189.0227-1762824188.1434', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:23:43.335422 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 165.85.56.95:55290] AH01071: Got error 'PHP message: start 1762824222.6854', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:23:43.335953 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 165.85.56.95:55290] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824223.3352-1762824222.6854', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:25:10.056402 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 165.85.56.95:6299] AH01071: Got error 'PHP message: start 1762824309.4751', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:25:10.336168 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 165.85.56.95:6299] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824310.3357-1762824309.4751', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:25:44.395519 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 165.85.56.95:56460] AH01071: Got error 'PHP message: start 1762824343.8343', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:25:44.396142 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 165.85.56.95:56460] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824344.3952-1762824343.8343', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:26:27.157185 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 165.85.56.95:35191] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:26:29.142144 2025] [proxy_fcgi:error] [pid 53356:tid 53387] [client 165.85.56.95:35191] AH01071: Got error 'PHP message: start 1762824388.3629', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:26:30.296493 2025] [proxy_fcgi:error] [pid 53356:tid 53387] [client 165.85.56.95:35191] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824390.2959-1762824388.3629', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 09:27:11.372837 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 165.85.56.95:14834] AH01071: Got error 'PHP message: start 1762824430.7678', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:27:11.802582 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 165.85.56.95:14834] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824431.8019-1762824430.7678', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:27:49.346216 2025] [proxy_fcgi:error] [pid 53449:tid 53464] [client 165.85.56.95:14672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-08-01
[Tue Nov 11 09:29:12.986170 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 165.85.56.95:52384] AH01071: Got error 'PHP message: start 1762824552.2892', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 09:29:13.310455 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 165.85.56.95:52384] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762824553.3092-1762824552.2892', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:29:40.222030 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:21391] AH01071: Got error 'PHP message: start 1762831779.1201', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:29:40.689113 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:21391] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762831780.6886-1762831779.1201', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:29:47.040630 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 165.85.56.95:23665] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 11:29:49.816100 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 165.85.56.95:23665] AH01071: Got error 'PHP message: start 1762831788.8987', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 11:29:50.123656 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 165.85.56.95:23665] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762831790.1232-1762831788.8987', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 11:31:51.243271 2025] [proxy_fcgi:error] [pid 59670:tid 59696] [client 165.85.56.95:12667] AH01071: Got error 'PHP message: start 1762831910.4107', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:31:51.500194 2025] [proxy_fcgi:error] [pid 59670:tid 59696] [client 165.85.56.95:12667] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762831911.4997-1762831910.4107', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:33:52.745196 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:29487] AH01071: Got error 'PHP message: start 1762832032.0255', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:33:53.088690 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:29487] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832033.0881-1762832032.0255', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:35:54.158084 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 165.85.56.95:25817] AH01071: Got error 'PHP message: start 1762832153.6159', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:35:54.319588 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 165.85.56.95:25817] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832154.3191-1762832153.6159', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:37:55.189911 2025] [proxy_fcgi:error] [pid 53356:tid 53400] [client 165.85.56.95:29567] AH01071: Got error 'PHP message: start 1762832274.6147', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:37:55.348687 2025] [proxy_fcgi:error] [pid 53356:tid 53400] [client 165.85.56.95:29567] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832275.3482-1762832274.6147', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:39:56.413811 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 165.85.56.95:7388] AH01071: Got error 'PHP message: start 1762832395.6758', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:39:56.611004 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 165.85.56.95:7388] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832396.6103-1762832395.6758', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:41:57.590158 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 165.85.56.95:24586] AH01071: Got error 'PHP message: start 1762832516.9347', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:41:57.819406 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 165.85.56.95:24586] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832517.8188-1762832516.9347', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:43:58.835149 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 165.85.56.95:63060] AH01071: Got error 'PHP message: start 1762832638.175', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:43:59.106267 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 165.85.56.95:63060] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832639.1057-1762832638.175', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:46:00.256371 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 165.85.56.95:9785] AH01071: Got error 'PHP message: start 1762832759.5482', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:46:00.587646 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 165.85.56.95:9785] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832760.5871-1762832759.5482', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:48:01.641588 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 165.85.56.95:19231] AH01071: Got error 'PHP message: start 1762832881.0533', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:48:01.795061 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 165.85.56.95:19231] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762832881.7946-1762832881.0533', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:50:02.839492 2025] [proxy_fcgi:error] [pid 59670:tid 59677] [client 165.85.56.95:59112] AH01071: Got error 'PHP message: start 1762833002.1033', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:50:03.081020 2025] [proxy_fcgi:error] [pid 59670:tid 59677] [client 165.85.56.95:59112] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833003.0805-1762833002.1033', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:52:04.089509 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 165.85.56.95:26963] AH01071: Got error 'PHP message: start 1762833123.4287', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:52:04.318695 2025] [proxy_fcgi:error] [pid 53356:tid 53390] [client 165.85.56.95:26963] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833124.3179-1762833123.4287', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:54:05.180783 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 165.85.56.95:1390] AH01071: Got error 'PHP message: start 1762833244.6306', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:54:05.337880 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 165.85.56.95:1390] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833245.3374-1762833244.6306', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:56:06.422583 2025] [proxy_fcgi:error] [pid 53355:tid 53366] [client 165.85.56.95:41831] AH01071: Got error 'PHP message: start 1762833365.6681', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:56:06.732533 2025] [proxy_fcgi:error] [pid 53355:tid 53366] [client 165.85.56.95:41831] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833366.732-1762833365.6681', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:58:07.754329 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 165.85.56.95:18577] AH01071: Got error 'PHP message: start 1762833487.0521', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 11:58:07.988595 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 165.85.56.95:18577] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833487.988-1762833487.0521', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:00:09.459586 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 165.85.56.95:8826] AH01071: Got error 'PHP message: start 1762833608.2966', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:00:09.627107 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 165.85.56.95:8826] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833609.6265-1762833608.2966', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:02:10.669049 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:11228] AH01071: Got error 'PHP message: start 1762833730.0974', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:02:10.846482 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:11228] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833730.846-1762833730.0974', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:04:12.333421 2025] [proxy_fcgi:error] [pid 53356:tid 53407] [client 165.85.56.95:60851] AH01071: Got error 'PHP message: start 1762833851.3508', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:04:12.620227 2025] [proxy_fcgi:error] [pid 53356:tid 53407] [client 165.85.56.95:60851] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762833852.6197-1762833851.3508', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:07:43.585770 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 165.85.56.95:57709] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Tue Nov 11 12:07:49.395749 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 165.85.56.95:57709] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44627
[Tue Nov 11 12:07:50.308200 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 165.85.56.95:57709] AH01071: Got error 'PHP message: start 1762834069.9311', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:07:50.571413 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 165.85.56.95:57709] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834070.5711-1762834069.9311', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:09:05.669102 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 165.85.56.95:8770] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:09:06.602724 2025] [proxy_fcgi:error] [pid 53414:tid 53438] [client 165.85.56.95:8770] AH01071: Got error 'PHP message: start 1762834146.3257', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:09:07.138056 2025] [proxy_fcgi:error] [pid 53414:tid 53438] [client 165.85.56.95:8770] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834147.1376-1762834146.3257', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:09:37.249752 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 165.85.56.95:23174] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44608
[Tue Nov 11 12:10:19.730072 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 165.85.56.95:17802] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44608
[Tue Nov 11 12:10:20.969531 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 165.85.56.95:17802] AH01071: Got error 'PHP message: start 1762834220.5031', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:10:21.486038 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 165.85.56.95:17802] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834221.4855-1762834220.5031', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:12:22.450855 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 165.85.56.95:42253] AH01071: Got error 'PHP message: start 1762834341.9796', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:12:22.793035 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 165.85.56.95:42253] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834342.7926-1762834341.9796', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:13:37.219829 2025] [proxy_fcgi:error] [pid 59670:tid 59691] [client 165.85.56.95:45483] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:13:38.781388 2025] [proxy_fcgi:error] [pid 59670:tid 59684] [client 165.85.56.95:45483] AH01071: Got error 'PHP message: start 1762834418.2736', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:13:39.259460 2025] [proxy_fcgi:error] [pid 59670:tid 59684] [client 165.85.56.95:45483] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834419.2575-1762834418.2736', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:14:04.354391 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 165.85.56.95:48122] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44512
[Tue Nov 11 12:14:11.177989 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 165.85.56.95:48122] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44512
[Tue Nov 11 12:14:12.424477 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 165.85.56.95:48122] AH01071: Got error 'PHP message: start 1762834451.9011', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:14:12.735128 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 165.85.56.95:48122] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834452.7347-1762834451.9011', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:14:33.388066 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 165.85.56.95:63590] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:14:34.181788 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:63590] AH01071: Got error 'PHP message: start 1762834473.8082', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:14:34.317778 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:63590] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834474.3172-1762834473.8082', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:16:35.483170 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 165.85.56.95:14174] AH01071: Got error 'PHP message: start 1762834594.7847', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:16:35.568358 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 165.85.56.95:14174] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834595.5677-1762834594.7847', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:18:36.504760 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:11565] AH01071: Got error 'PHP message: start 1762834715.9007', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:18:36.605118 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:11565] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834716.6046-1762834715.9007', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:20:37.601065 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 165.85.56.95:18659] AH01071: Got error 'PHP message: start 1762834836.9052', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:20:37.729473 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 165.85.56.95:18659] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834837.7287-1762834836.9052', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:22:39.031428 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 165.85.56.95:32787] AH01071: Got error 'PHP message: start 1762834958.258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:22:39.133478 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 165.85.56.95:32787] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762834959.132-1762834958.258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:24:40.380390 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 165.85.56.95:42054] AH01071: Got error 'PHP message: start 1762835079.6231', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:24:40.525890 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 165.85.56.95:42054] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835080.5253-1762835079.6231', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:26:41.603512 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 165.85.56.95:2809] AH01071: Got error 'PHP message: start 1762835200.8155', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:26:41.702145 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 165.85.56.95:2809] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835201.7016-1762835200.8155', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:28:42.663398 2025] [proxy_fcgi:error] [pid 53356:tid 53393] [client 165.85.56.95:26715] AH01071: Got error 'PHP message: start 1762835321.9808', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:28:42.788437 2025] [proxy_fcgi:error] [pid 53356:tid 53393] [client 165.85.56.95:26715] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835322.7871-1762835321.9808', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:30:44.020418 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:53545] AH01071: Got error 'PHP message: start 1762835443.2805', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:30:44.112147 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:53545] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835444.1114-1762835443.2805', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:32:44.985178 2025] [proxy_fcgi:error] [pid 59670:tid 59697] [client 165.85.56.95:32852] AH01071: Got error 'PHP message: start 1762835564.3932', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:32:45.063443 2025] [proxy_fcgi:error] [pid 59670:tid 59697] [client 165.85.56.95:32852] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835565.0628-1762835564.3932', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:34:45.971621 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 165.85.56.95:40213] AH01071: Got error 'PHP message: start 1762835685.3646', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:34:46.046996 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 165.85.56.95:40213] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835686.0464-1762835685.3646', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:36:47.153241 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 165.85.56.95:34796] AH01071: Got error 'PHP message: start 1762835806.5237', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:36:47.235199 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 165.85.56.95:34796] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835807.2345-1762835806.5237', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:38:48.219453 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 165.85.56.95:12322] AH01071: Got error 'PHP message: start 1762835927.5149', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:38:48.362461 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 165.85.56.95:12322] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762835928.3613-1762835927.5149', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:40:49.561588 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 165.85.56.95:1664] AH01071: Got error 'PHP message: start 1762836048.6817', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:40:49.706022 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 165.85.56.95:1664] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836049.7054-1762836048.6817', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:42:11.739389 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 165.85.56.95:6091] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:42:13.149371 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 165.85.56.95:6091] AH01071: Got error 'PHP message: start 1762836132.4654', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:42:13.595792 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 165.85.56.95:6091] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836133.595-1762836132.4654', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:44:14.531354 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 165.85.56.95:25202] AH01071: Got error 'PHP message: start 1762836253.9228', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:44:14.808919 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 165.85.56.95:25202] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836254.8084-1762836253.9228', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:46:15.733414 2025] [proxy_fcgi:error] [pid 59670:tid 59691] [client 165.85.56.95:23295] AH01071: Got error 'PHP message: start 1762836375.1281', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:46:16.043670 2025] [proxy_fcgi:error] [pid 59670:tid 59691] [client 165.85.56.95:23295] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836376.0431-1762836375.1281', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:48:16.992044 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 165.85.56.95:37862] AH01071: Got error 'PHP message: start 1762836496.3421', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:48:17.276859 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 165.85.56.95:37862] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836497.2764-1762836496.3421', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:48:29.619652 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:44668] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:48:31.446415 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 165.85.56.95:44668] AH01071: Got error 'PHP message: start 1762836511.03', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:48:31.941518 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 165.85.56.95:44668] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836511.941-1762836511.03', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:51:46.008016 2025] [proxy_fcgi:error] [pid 53355:tid 53380] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Tue Nov 11 12:51:50.083338 2025] [proxy_fcgi:error] [pid 53355:tid 53378] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44628
[Tue Nov 11 12:51:51.370129 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: start 1762836711.0302', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:51:51.813886 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836711.8134-1762836711.0302', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:51:56.963377 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:51:57.940543 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: start 1762836717.5973', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:51:58.336404 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 165.85.56.95:34579] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836718.3358-1762836717.5973', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:52:22.434393 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:51468] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:52:24.975246 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:51468] AH01071: Got error 'PHP message: start 1762836744.2549', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:52:25.629435 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:51468] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836745.6288-1762836744.2549', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 12:54:26.668574 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 165.85.56.95:20483] AH01071: Got error 'PHP message: start 1762836866.0578', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:54:27.202077 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 165.85.56.95:20483] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836867.2014-1762836866.0578', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:56:28.101165 2025] [proxy_fcgi:error] [pid 53355:tid 53377] [client 165.85.56.95:1208] AH01071: Got error 'PHP message: start 1762836987.5445', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:56:28.531453 2025] [proxy_fcgi:error] [pid 53355:tid 53377] [client 165.85.56.95:1208] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762836988.5309-1762836987.5445', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:58:29.553704 2025] [proxy_fcgi:error] [pid 59670:tid 59680] [client 165.85.56.95:56003] AH01071: Got error 'PHP message: start 1762837108.8512', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 12:58:29.994380 2025] [proxy_fcgi:error] [pid 59670:tid 59680] [client 165.85.56.95:56003] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762837109.9938-1762837108.8512', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:00:30.806802 2025] [proxy_fcgi:error] [pid 53449:tid 53456] [client 165.85.56.95:15250] AH01071: Got error 'PHP message: start 1762837230.2881', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:00:31.160818 2025] [proxy_fcgi:error] [pid 53449:tid 53456] [client 165.85.56.95:15250] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762837231.1604-1762837230.2881', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:02:32.039654 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 165.85.56.95:41230] AH01071: Got error 'PHP message: start 1762837351.4838', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:02:32.513123 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 165.85.56.95:41230] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762837352.5126-1762837351.4838', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:04:33.463931 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:19564] AH01071: Got error 'PHP message: start 1762837472.8458', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:04:33.998529 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:19564] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762837473.9977-1762837472.8458', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:16:45.627386 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 165.85.56.95:44869] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Tue Nov 11 13:16:49.485380 2025] [proxy_fcgi:error] [pid 53356:tid 53393] [client 165.85.56.95:44869] AH01071: Got error 'PHP message: start 1762838207.738', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 13:16:50.049928 2025] [proxy_fcgi:error] [pid 53356:tid 53393] [client 165.85.56.95:44869] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838210.0494-1762838207.738', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 13:18:51.013603 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:50768] AH01071: Got error 'PHP message: start 1762838330.3586', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:18:51.339514 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:50768] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838331.3389-1762838330.3586', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:20:52.752459 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 165.85.56.95:40106] AH01071: Got error 'PHP message: start 1762838451.6874', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:20:53.282450 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 165.85.56.95:40106] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838453.2819-1762838451.6874', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:22:54.845277 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 165.85.56.95:10411] AH01071: Got error 'PHP message: start 1762838574.199', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:22:55.113522 2025] [proxy_fcgi:error] [pid 53356:tid 53385] [client 165.85.56.95:10411] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838575.1129-1762838574.199', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:24:56.772546 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 165.85.56.95:9901] AH01071: Got error 'PHP message: start 1762838696.0344', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:24:57.164878 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 165.85.56.95:9901] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838697.1643-1762838696.0344', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:26:58.622416 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:62544] AH01071: Got error 'PHP message: start 1762838818.0547', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:26:58.863202 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:62544] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838818.8627-1762838818.0547', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:29:00.486861 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 165.85.56.95:42571] AH01071: Got error 'PHP message: start 1762838939.7913', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:29:00.751246 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 165.85.56.95:42571] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762838940.7507-1762838939.7913', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:31:02.007354 2025] [proxy_fcgi:error] [pid 59670:tid 59682] [client 165.85.56.95:16835] AH01071: Got error 'PHP message: start 1762839061.2755', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:31:02.270530 2025] [proxy_fcgi:error] [pid 59670:tid 59682] [client 165.85.56.95:16835] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839062.2699-1762839061.2755', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:33:03.362823 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 165.85.56.95:41551] AH01071: Got error 'PHP message: start 1762839182.7558', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:33:03.605876 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 165.85.56.95:41551] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839183.6052-1762839182.7558', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:35:04.811629 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:43647] AH01071: Got error 'PHP message: start 1762839304.1057', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:35:05.134215 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:43647] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839305.1336-1762839304.1057', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:37:06.343762 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:34294] AH01071: Got error 'PHP message: start 1762839425.6569', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:37:06.640656 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:34294] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839426.64-1762839425.6569', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:39:07.864385 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 165.85.56.95:40932] AH01071: Got error 'PHP message: start 1762839547.122', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:39:08.245177 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 165.85.56.95:40932] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839548.2446-1762839547.122', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:41:09.560081 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 165.85.56.95:6458] AH01071: Got error 'PHP message: start 1762839668.7327', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:41:09.943900 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 165.85.56.95:6458] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839669.9433-1762839668.7327', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:43:11.568698 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 165.85.56.95:57291] AH01071: Got error 'PHP message: start 1762839790.7699', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:43:11.973171 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 165.85.56.95:57291] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839791.9725-1762839790.7699', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:45:13.212389 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:17964] AH01071: Got error 'PHP message: start 1762839912.5034', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:45:13.668916 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 165.85.56.95:17964] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762839913.6683-1762839912.5034', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:47:15.118111 2025] [proxy_fcgi:error] [pid 53356:tid 53397] [client 165.85.56.95:30976] AH01071: Got error 'PHP message: start 1762840034.1581', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:47:15.583488 2025] [proxy_fcgi:error] [pid 53356:tid 53397] [client 165.85.56.95:30976] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840035.5823-1762840034.1581', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:49:17.244434 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 165.85.56.95:22801] AH01071: Got error 'PHP message: start 1762840156.6305', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:49:17.486359 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 165.85.56.95:22801] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840157.485-1762840156.6305', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:51:18.679662 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:32122] AH01071: Got error 'PHP message: start 1762840278.0541', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:51:18.908446 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:32122] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840278.9075-1762840278.0541', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:53:20.094396 2025] [proxy_fcgi:error] [pid 53414:tid 53430] [client 165.85.56.95:48099] AH01071: Got error 'PHP message: start 1762840399.4285', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:53:20.466102 2025] [proxy_fcgi:error] [pid 53414:tid 53430] [client 165.85.56.95:48099] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840400.4655-1762840399.4285', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:55:22.351540 2025] [proxy_fcgi:error] [pid 59670:tid 59690] [client 165.85.56.95:5324] AH01071: Got error 'PHP message: start 1762840521.6065', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:55:22.934758 2025] [proxy_fcgi:error] [pid 59670:tid 59690] [client 165.85.56.95:5324] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840522.9343-1762840521.6065', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:56:25.177902 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:25.367740 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:25.549510 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:25.747836 2025] [proxy_fcgi:error] [pid 59670:tid 59682] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:25.972365 2025] [proxy_fcgi:error] [pid 59670:tid 59694] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:26.100183 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:26.310507 2025] [proxy_fcgi:error] [pid 59670:tid 59675] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:26.477775 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:26.656952 2025] [proxy_fcgi:error] [pid 59670:tid 59680] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:26.850108 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:28.482290 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:28.687387 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 194.5.82.100:43085] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:28.824662 2025] [:error] [pid 59670:tid 59675] [client 194.5.82.100:43085] [client 194.5.82.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aRLQDKk2Cnts0y-hpfrpKgAAAII"]
[Tue Nov 11 13:56:29.383262 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.54:20189] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:29.582169 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 194.5.82.54:20189] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:29.771650 2025] [proxy_fcgi:error] [pid 53449:tid 53478] [client 194.5.82.54:20189] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:30.019244 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 194.5.82.54:20189] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:30.212129 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 194.5.82.54:20189] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:30.363523 2025] [:error] [pid 53449:tid 53462] [client 194.5.82.54:20189] [client 194.5.82.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aRLQDtpz08j5NoUSzp8WdAAAAUg"]
[Tue Nov 11 13:56:30.789938 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:31.107591 2025] [proxy_fcgi:error] [pid 53449:tid 53477] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:31.539781 2025] [proxy_fcgi:error] [pid 53449:tid 53464] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:31.734374 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:31.952050 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:32.132038 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:32.331028 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:32.525366 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:32.722833 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:33.718300 2025] [proxy_fcgi:error] [pid 53449:tid 53470] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:34.268283 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:34.550762 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:34.746071 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:34.955218 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:35.109293 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:35.327074 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:35.686679 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:35.828552 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.61:24827] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:36.272859 2025] [:error] [pid 53449:tid 53460] [client 194.5.82.61:24827] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRLQFNpz08j5NoUSzp8WoAAAAUY"]
[Tue Nov 11 13:56:36.703037 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:37.130038 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:37.295508 2025] [proxy_fcgi:error] [pid 53449:tid 53463] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:38.933898 2025] [proxy_fcgi:error] [pid 53449:tid 53464] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:39.175729 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:39.336457 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:39.538047 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:40.309645 2025] [proxy_fcgi:error] [pid 53449:tid 53470] [client 194.5.82.62:49803] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:40.501577 2025] [:error] [pid 53449:tid 53454] [client 194.5.82.62:49803] [client 194.5.82.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRLQGNpz08j5NoUSzp8WtAAAAUA"]
[Tue Nov 11 13:56:40.941245 2025] [proxy_fcgi:error] [pid 53355:tid 53363] [client 194.5.82.74:44105] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:41.175453 2025] [proxy_fcgi:error] [pid 53355:tid 53380] [client 194.5.82.74:44105] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:41.378709 2025] [proxy_fcgi:error] [pid 53355:tid 53364] [client 194.5.82.74:44105] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:41.598445 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 194.5.82.74:44105] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:41.766559 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 194.5.82.74:44105] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:41.941048 2025] [:error] [pid 53355:tid 53375] [client 194.5.82.74:44105] [client 194.5.82.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aRLQGYB5X5A3rMc4_nAezwAAABE"]
[Tue Nov 11 13:56:42.604000 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:42.817134 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:43.036411 2025] [proxy_fcgi:error] [pid 53414:tid 53432] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:43.229580 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:43.410104 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:43.631473 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:43.899429 2025] [proxy_fcgi:error] [pid 53414:tid 53428] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:44.061828 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:44.464362 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:44.635721 2025] [proxy_fcgi:error] [pid 53414:tid 53418] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:45.041934 2025] [proxy_fcgi:error] [pid 53414:tid 53435] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:45.257816 2025] [proxy_fcgi:error] [pid 53414:tid 53422] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:47.153170 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:47.316357 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:47.628461 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:47.831529 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:48.009202 2025] [proxy_fcgi:error] [pid 53414:tid 53418] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:48.640901 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:48.824328 2025] [proxy_fcgi:error] [pid 53414:tid 53436] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:49.013376 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:49.236721 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:49.404574 2025] [proxy_fcgi:error] [pid 53414:tid 53432] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:50.071142 2025] [proxy_fcgi:error] [pid 53414:tid 53438] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:50.329684 2025] [proxy_fcgi:error] [pid 53414:tid 53437] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:50.481406 2025] [:error] [pid 53414:tid 53440] [client 194.5.82.65:39915] [client 194.5.82.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.65, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRLQIgs6pHd_Z5oc1eda6gAAARg"]
[Tue Nov 11 13:56:50.485165 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:51.136280 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:51.359371 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:51.529507 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:51.925405 2025] [proxy_fcgi:error] [pid 53414:tid 53433] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:52.133182 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 194.5.82.65:39915] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:52.471321 2025] [:error] [pid 53414:tid 53440] [client 194.5.82.65:39915] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/chosen.php"] [unique_id "aRLQJAs6pHd_Z5oc1eda-gAAARg"]
[Tue Nov 11 13:56:53.214214 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 194.5.82.104:49163] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:53.612166 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 194.5.82.104:49163] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:54.398398 2025] [:error] [pid 53414:tid 53428] [client 194.5.82.104:49163] [client 194.5.82.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRLQJgs6pHd_Z5oc1edbBgAAAQw"]
[Tue Nov 11 13:56:55.232839 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:55.417415 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:55.612918 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:55.795354 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:56.010694 2025] [proxy_fcgi:error] [pid 53449:tid 53470] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:56.438046 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:56.560843 2025] [proxy_fcgi:error] [pid 53449:tid 53464] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:56.739391 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:56.894791 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:57.123494 2025] [proxy_fcgi:error] [pid 53449:tid 53461] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:57.286846 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:57.463375 2025] [proxy_fcgi:error] [pid 53449:tid 53478] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:57.910930 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:58.187562 2025] [proxy_fcgi:error] [pid 53449:tid 53456] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:59.078773 2025] [proxy_fcgi:error] [pid 53449:tid 53458] [client 194.5.82.69:55013] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:56:59.608428 2025] [:error] [pid 53449:tid 53462] [client 194.5.82.69:55013] [client 194.5.82.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRLQK9pz08j5NoUSzp8W-QAAAUg"]
[Tue Nov 11 13:57:00.204710 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 194.5.82.92:62959] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:00.376098 2025] [proxy_fcgi:error] [pid 53449:tid 53475] [client 194.5.82.92:62959] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:00.518629 2025] [proxy_fcgi:error] [pid 53449:tid 53476] [client 194.5.82.92:62959] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:00.915072 2025] [:error] [pid 53449:tid 53456] [client 194.5.82.92:62959] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "aRLQLNpz08j5NoUSzp8XAQAAAUI"]
[Tue Nov 11 13:57:01.561248 2025] [proxy_fcgi:error] [pid 59670:tid 59684] [client 194.5.82.61:36563] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:01.760685 2025] [proxy_fcgi:error] [pid 59670:tid 59678] [client 194.5.82.61:36563] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:01.913405 2025] [proxy_fcgi:error] [pid 59670:tid 59677] [client 194.5.82.61:36563] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:02.088610 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 194.5.82.61:36563] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:02.554692 2025] [:error] [pid 59670:tid 59676] [client 194.5.82.61:36563] [client 194.5.82.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRLQLqk2Cnts0y-hpfrpfQAAAIM"]
[Tue Nov 11 13:57:03.291188 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 194.5.82.79:52123] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:03.477325 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 194.5.82.79:52123] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:03.692467 2025] [proxy_fcgi:error] [pid 53449:tid 53478] [client 194.5.82.79:52123] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:03.842881 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 194.5.82.79:52123] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:04.029566 2025] [:error] [pid 53449:tid 53464] [client 194.5.82.79:52123] [client 194.5.82.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aRLQMNpz08j5NoUSzp8XDQAAAUo"]
[Tue Nov 11 13:57:04.763933 2025] [proxy_fcgi:error] [pid 59670:tid 59694] [client 194.5.82.93:38255] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:05.084236 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 194.5.82.93:38255] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:05.430556 2025] [proxy_fcgi:error] [pid 59670:tid 59680] [client 194.5.82.93:38255] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:06.220599 2025] [proxy_fcgi:error] [pid 59670:tid 59697] [client 194.5.82.93:38255] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:06.439840 2025] [:error] [pid 59670:tid 59691] [client 194.5.82.93:38255] [client 194.5.82.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aRLQMqk2Cnts0y-hpfrpkAAAAJI"]
[Tue Nov 11 13:57:07.006586 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:07.206369 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:08.270974 2025] [proxy_fcgi:error] [pid 53355:tid 53366] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:08.883268 2025] [proxy_fcgi:error] [pid 53355:tid 53365] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:09.316031 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:09.562931 2025] [proxy_fcgi:error] [pid 53355:tid 53379] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:09.750894 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:10.376152 2025] [proxy_fcgi:error] [pid 53355:tid 53363] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:10.539170 2025] [proxy_fcgi:error] [pid 53355:tid 53377] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:10.808085 2025] [proxy_fcgi:error] [pid 53355:tid 53378] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:10.995045 2025] [proxy_fcgi:error] [pid 53355:tid 53380] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:11.240816 2025] [proxy_fcgi:error] [pid 53355:tid 53374] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:11.451071 2025] [proxy_fcgi:error] [pid 53355:tid 53382] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:11.689686 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 194.5.82.57:62349] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:12.185894 2025] [:error] [pid 53355:tid 53361] [client 194.5.82.57:62349] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRLQOIB5X5A3rMc4_nAfJgAAAAM"]
[Tue Nov 11 13:57:12.552684 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:12.743098 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:12.989252 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:13.516121 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:13.696010 2025] [proxy_fcgi:error] [pid 53355:tid 53375] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:13.921121 2025] [proxy_fcgi:error] [pid 53355:tid 53380] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:14.388063 2025] [proxy_fcgi:error] [pid 53355:tid 53368] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:14.730784 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:15.205558 2025] [proxy_fcgi:error] [pid 53355:tid 53369] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:17.108758 2025] [proxy_fcgi:error] [pid 53355:tid 53361] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:17.340099 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:17.698921 2025] [proxy_fcgi:error] [pid 53355:tid 53370] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:17.919986 2025] [proxy_fcgi:error] [pid 53355:tid 53369] [client 194.5.82.82:52731] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:18.367424 2025] [:error] [pid 53355:tid 53377] [client 194.5.82.82:52731] [client 194.5.82.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aRLQPoB5X5A3rMc4_nAfWgAAABM"]
[Tue Nov 11 13:57:18.743944 2025] [:error] [pid 53356:tid 53405] [client 194.5.82.57:27057] [client 194.5.82.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aRLQPukdmt0kzjVcUN-L4gAAAFQ"]
[Tue Nov 11 13:57:19.121445 2025] [proxy_fcgi:error] [pid 53355:tid 53372] [client 194.5.82.71:35165] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:19.292177 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 194.5.82.71:35165] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:19.517403 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 194.5.82.71:35165] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:19.770011 2025] [proxy_fcgi:error] [pid 53355:tid 53371] [client 194.5.82.71:35165] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:20.051282 2025] [:error] [pid 53355:tid 53364] [client 194.5.82.71:35165] [client 194.5.82.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRLQQIB5X5A3rMc4_nAfZwAAAAY"]
[Tue Nov 11 13:57:20.395497 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 194.5.82.68:41643] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:20.594134 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 194.5.82.68:41643] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:20.946817 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 194.5.82.68:41643] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:21.136911 2025] [:error] [pid 53414:tid 53431] [client 194.5.82.68:41643] [client 194.5.82.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aRLQQQs6pHd_Z5oc1edbSAAAAQ8"]
[Tue Nov 11 13:57:21.536049 2025] [proxy_fcgi:error] [pid 59670:tid 59688] [client 194.5.82.103:26339] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:22.095114 2025] [:error] [pid 59670:tid 59674] [client 194.5.82.103:26339] [client 194.5.82.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRLQQqk2Cnts0y-hpfrpuQAAAIE"]
[Tue Nov 11 13:57:22.436685 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 194.5.82.81:57357] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:22.630827 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 194.5.82.81:57357] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:22.772542 2025] [:error] [pid 59670:tid 59685] [client 194.5.82.81:57357] [client 194.5.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRLQQqk2Cnts0y-hpfrpvgAAAIw"]
[Tue Nov 11 13:57:23.239703 2025] [proxy_fcgi:error] [pid 53356:tid 53389] [client 194.5.82.167:31635] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:23.410904 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 194.5.82.167:31635] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:23.565479 2025] [:error] [pid 53356:tid 53385] [client 194.5.82.167:31635] [client 194.5.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aRLQQ-kdmt0kzjVcUN-L7gAAAEA"]
[Tue Nov 11 13:57:24.424892 2025] [proxy_fcgi:error] [pid 53355:tid 53364] [client 165.85.56.95:58575] AH01071: Got error 'PHP message: start 1762840643.471', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:57:24.908221 2025] [proxy_fcgi:error] [pid 53355:tid 53364] [client 165.85.56.95:58575] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840644.9076-1762840643.471', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:57:26.447019 2025] [proxy_fcgi:error] [pid 53356:tid 53401] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:26.905732 2025] [proxy_fcgi:error] [pid 53356:tid 53396] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:27.286138 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:27.477527 2025] [proxy_fcgi:error] [pid 53356:tid 53406] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:27.635644 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:28.428446 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:28.675508 2025] [proxy_fcgi:error] [pid 53356:tid 53408] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:29.088785 2025] [proxy_fcgi:error] [pid 53356:tid 53404] [client 194.5.82.60:24611] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:57:29.233983 2025] [:error] [pid 53356:tid 53389] [client 194.5.82.60:24611] [client 194.5.82.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aRLQSekdmt0kzjVcUN-MDAAAAEQ"]
[Tue Nov 11 13:57:42.509853 2025] [autoindex:error] [pid 53449:tid 53470] [client 194.5.82.63:53073] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 13:57:50.740848 2025] [autoindex:error] [pid 53449:tid 53462] [client 194.5.82.63:53073] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 13:57:53.222859 2025] [autoindex:error] [pid 53449:tid 53477] [client 194.5.82.63:53073] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 13:58:02.423403 2025] [proxy_fcgi:error] [pid 53449:tid 53474] [client 194.5.82.63:53073] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 13:59:26.226326 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:55827] AH01071: Got error 'PHP message: start 1762840765.5216', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 13:59:26.534467 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:55827] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840766.5338-1762840765.5216', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:00:20.707049 2025] [proxy_fcgi:error] [pid 53414:tid 53435] [client 165.85.56.95:10381] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Tue Nov 11 14:00:22.570402 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:10381] AH01071: Got error 'PHP message: start 1762840821.8584', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:00:22.863451 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:10381] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840822.8624-1762840821.8584', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:00:34.172063 2025] [proxy_fcgi:error] [pid 53356:tid 53394] [client 165.85.56.95:25727] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:00:35.300483 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 165.85.56.95:25727] AH01071: Got error 'PHP message: start 1762840835.0229', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:00:35.865390 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 165.85.56.95:25727] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840835.865-1762840835.0229', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:01:28.105616 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 165.85.56.95:33732] AH01071: Got error 'PHP message: start 1762840887.404', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:01:28.402570 2025] [proxy_fcgi:error] [pid 53449:tid 53454] [client 165.85.56.95:33732] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840888.402-1762840887.404', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:02:36.903612 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 165.85.56.95:36769] AH01071: Got error 'PHP message: start 1762840956.1612', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:02:37.464883 2025] [proxy_fcgi:error] [pid 53414:tid 53416] [client 165.85.56.95:36769] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762840957.4645-1762840956.1612', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:03:30.256388 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 165.85.56.95:32988] AH01071: Got error 'PHP message: start 1762841008.8664', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:03:30.564459 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 165.85.56.95:32988] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841010.5637-1762841008.8664', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:04:38.497189 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 165.85.56.95:45635] AH01071: Got error 'PHP message: start 1762841077.8495', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:04:38.955900 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 165.85.56.95:45635] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841078.9555-1762841077.8495', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:05:32.107349 2025] [proxy_fcgi:error] [pid 53356:tid 53387] [client 165.85.56.95:41125] AH01071: Got error 'PHP message: start 1762841131.4256', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:05:32.492528 2025] [proxy_fcgi:error] [pid 53356:tid 53387] [client 165.85.56.95:41125] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841132.4918-1762841131.4256', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:06:40.308686 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 165.85.56.95:38859] AH01071: Got error 'PHP message: start 1762841199.2907', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:06:40.690015 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 165.85.56.95:38859] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841200.6894-1762841199.2907', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:07:34.022409 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 165.85.56.95:16844] AH01071: Got error 'PHP message: start 1762841252.952', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:07:34.339081 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 165.85.56.95:16844] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841254.3384-1762841252.952', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:08:41.528446 2025] [proxy_fcgi:error] [pid 53356:tid 53398] [client 165.85.56.95:17185] AH01071: Got error 'PHP message: start 1762841320.977', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:08:41.877658 2025] [proxy_fcgi:error] [pid 53356:tid 53398] [client 165.85.56.95:17185] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841321.8767-1762841320.977', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:09:35.763124 2025] [proxy_fcgi:error] [pid 59670:tid 59679] [client 165.85.56.95:35935] AH01071: Got error 'PHP message: start 1762841375.1842', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:09:36.039124 2025] [proxy_fcgi:error] [pid 59670:tid 59679] [client 165.85.56.95:35935] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841376.0386-1762841375.1842', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:10:42.725394 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 165.85.56.95:30264] AH01071: Got error 'PHP message: start 1762841442.1786', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:10:43.241511 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 165.85.56.95:30264] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841443.241-1762841442.1786', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:11:37.306201 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:59304] AH01071: Got error 'PHP message: start 1762841496.491', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:11:37.776111 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:59304] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841497.7752-1762841496.491', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:12:44.048847 2025] [proxy_fcgi:error] [pid 59670:tid 59688] [client 165.85.56.95:1324] AH01071: Got error 'PHP message: start 1762841563.5427', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:12:44.438092 2025] [proxy_fcgi:error] [pid 59670:tid 59688] [client 165.85.56.95:1324] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841564.4376-1762841563.5427', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:13:38.914634 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 165.85.56.95:14345] AH01071: Got error 'PHP message: start 1762841618.2273', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:13:39.279950 2025] [proxy_fcgi:error] [pid 53356:tid 53386] [client 165.85.56.95:14345] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841619.2794-1762841618.2273', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:14:45.558640 2025] [proxy_fcgi:error] [pid 59670:tid 59682] [client 165.85.56.95:25693] AH01071: Got error 'PHP message: start 1762841684.7533', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:14:46.013581 2025] [proxy_fcgi:error] [pid 59670:tid 59682] [client 165.85.56.95:25693] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841686.0124-1762841684.7533', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:15:40.475074 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:5099] AH01071: Got error 'PHP message: start 1762841739.7368', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:15:40.826854 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:5099] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841740.8261-1762841739.7368', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:16:46.851671 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 165.85.56.95:7445] AH01071: Got error 'PHP message: start 1762841806.3258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:16:47.244899 2025] [proxy_fcgi:error] [pid 53449:tid 53462] [client 165.85.56.95:7445] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841807.2445-1762841806.3258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:17:42.461472 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 165.85.56.95:13851] AH01071: Got error 'PHP message: start 1762841861.6547', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:17:42.859826 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 165.85.56.95:13851] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841862.8593-1762841861.6547', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:18:48.193008 2025] [proxy_fcgi:error] [pid 53356:tid 53397] [client 165.85.56.95:14322] AH01071: Got error 'PHP message: start 1762841927.5459', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:18:48.706171 2025] [proxy_fcgi:error] [pid 53356:tid 53397] [client 165.85.56.95:14322] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762841928.7056-1762841927.5459', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:20:49.699130 2025] [proxy_fcgi:error] [pid 59670:tid 59678] [client 165.85.56.95:23332] AH01071: Got error 'PHP message: start 1762842048.9968', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:20:50.305863 2025] [proxy_fcgi:error] [pid 59670:tid 59678] [client 165.85.56.95:23332] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842050.3054-1762842048.9968', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:22:51.298456 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:47031] AH01071: Got error 'PHP message: start 1762842170.6128', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:22:51.917973 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:47031] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842171.9176-1762842170.6128', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:24:52.816636 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 165.85.56.95:46966] AH01071: Got error 'PHP message: start 1762842292.2469', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:24:53.200749 2025] [proxy_fcgi:error] [pid 59670:tid 59681] [client 165.85.56.95:46966] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842293.2002-1762842292.2469', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:26:54.078765 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:31529] AH01071: Got error 'PHP message: start 1762842413.5077', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:26:54.449039 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:31529] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842414.4486-1762842413.5077', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:28:55.336370 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:40415] AH01071: Got error 'PHP message: start 1762842534.7629', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:28:55.696798 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:40415] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842535.6964-1762842534.7629', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:30:56.685712 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 165.85.56.95:24240] AH01071: Got error 'PHP message: start 1762842655.9897', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:30:57.191566 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 165.85.56.95:24240] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842657.191-1762842655.9897', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:32:58.146494 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 165.85.56.95:8637] AH01071: Got error 'PHP message: start 1762842777.5237', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:32:58.814899 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 165.85.56.95:8637] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842778.8145-1762842777.5237', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:34:59.642332 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:58273] AH01071: Got error 'PHP message: start 1762842899.1347', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:35:00.014814 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:58273] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762842900.0143-1762842899.1347', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:37:00.935388 2025] [proxy_fcgi:error] [pid 53414:tid 53437] [client 165.85.56.95:18038] AH01071: Got error 'PHP message: start 1762843020.33', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:37:01.339229 2025] [proxy_fcgi:error] [pid 53414:tid 53437] [client 165.85.56.95:18038] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843021.338-1762843020.33', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:39:02.454906 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:55481] AH01071: Got error 'PHP message: start 1762843141.6628', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:39:03.045817 2025] [proxy_fcgi:error] [pid 53449:tid 53457] [client 165.85.56.95:55481] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843143.0451-1762843141.6628', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:41:03.916051 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 165.85.56.95:41296] AH01071: Got error 'PHP message: start 1762843263.341', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:41:04.279406 2025] [proxy_fcgi:error] [pid 53449:tid 53472] [client 165.85.56.95:41296] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843264.2789-1762843263.341', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:42:58.972234 2025] [proxy_fcgi:error] [pid 53449:tid 53467] [client 165.85.56.95:9739] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:43:07.697103 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 165.85.56.95:38367] AH01071: Got error 'PHP message: start 1762843385.2138', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:43:08.028247 2025] [proxy_fcgi:error] [pid 53414:tid 53429] [client 165.85.56.95:38367] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843388.0275-1762843385.2138', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:43:10.065915 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 165.85.56.95:9739] AH01071: Got error 'PHP message: start 1762843388.029', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:43:10.290110 2025] [proxy_fcgi:error] [pid 53449:tid 53468] [client 165.85.56.95:9739] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843390.2896-1762843388.029', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:45:11.181385 2025] [proxy_fcgi:error] [pid 53414:tid 53422] [client 165.85.56.95:3135] AH01071: Got error 'PHP message: start 1762843510.603', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:45:11.427611 2025] [proxy_fcgi:error] [pid 53414:tid 53422] [client 165.85.56.95:3135] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843511.427-1762843510.603', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:45:49.109453 2025] [proxy_fcgi:error] [pid 53414:tid 53422] [client 165.85.56.95:50706] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:45:51.054301 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 165.85.56.95:50706] AH01071: Got error 'PHP message: start 1762843550.4754', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:45:51.416731 2025] [proxy_fcgi:error] [pid 53414:tid 53424] [client 165.85.56.95:50706] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843551.4162-1762843550.4754', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:47:52.291541 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:11084] AH01071: Got error 'PHP message: start 1762843671.737', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:47:52.921427 2025] [proxy_fcgi:error] [pid 53414:tid 53420] [client 165.85.56.95:11084] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843672.9209-1762843671.737', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:49:53.764102 2025] [proxy_fcgi:error] [pid 53414:tid 53432] [client 165.85.56.95:12163] AH01071: Got error 'PHP message: start 1762843793.2471', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:49:54.100810 2025] [proxy_fcgi:error] [pid 53414:tid 53432] [client 165.85.56.95:12163] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843794.1002-1762843793.2471', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:51:55.005216 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 165.85.56.95:26786] AH01071: Got error 'PHP message: start 1762843914.4314', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:51:55.328278 2025] [proxy_fcgi:error] [pid 53356:tid 53392] [client 165.85.56.95:26786] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762843915.3277-1762843914.4314', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:53:56.289612 2025] [proxy_fcgi:error] [pid 59670:tid 59691] [client 165.85.56.95:56554] AH01071: Got error 'PHP message: start 1762844035.6452', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:53:56.802195 2025] [proxy_fcgi:error] [pid 59670:tid 59691] [client 165.85.56.95:56554] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844036.8017-1762844035.6452', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 14:54:00.807695 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:56554] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:54:01.851524 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 165.85.56.95:56554] AH01071: Got error 'PHP message: start 1762844041.4242', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:54:02.253805 2025] [proxy_fcgi:error] [pid 59670:tid 59686] [client 165.85.56.95:56554] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844042.2535-1762844041.4242', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:55:28.917005 2025] [proxy_fcgi:error] [pid 53356:tid 53395] [client 165.85.56.95:16000] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:55:30.450327 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 165.85.56.95:16000] AH01071: Got error 'PHP message: start 1762844129.8309', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:55:31.041258 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 165.85.56.95:16000] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844131.0408-1762844129.8309', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:57:16.590061 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:39349] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:57:17.806277 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 165.85.56.95:39349] AH01071: Got error 'PHP message: start 1762844237.3117', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:57:18.058365 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 165.85.56.95:39349] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844238.058-1762844237.3117', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:58:19.483443 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 165.85.56.95:11650] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44511
[Tue Nov 11 14:58:23.788715 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:11650] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44511
[Tue Nov 11 14:58:24.800597 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 165.85.56.95:11650] AH01071: Got error 'PHP message: start 1762844304.3612', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:58:25.128638 2025] [proxy_fcgi:error] [pid 53414:tid 53423] [client 165.85.56.95:11650] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844305.1282-1762844304.3612', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:59:04.288084 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:65309] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:59:05.903775 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 165.85.56.95:65309] AH01071: Got error 'PHP message: start 1762844345.0297', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 14:59:06.362724 2025] [proxy_fcgi:error] [pid 53414:tid 53440] [client 165.85.56.95:65309] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844346.3622-1762844345.0297', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:00:13.288202 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 165.85.56.95:30808] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:00:13.992641 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 165.85.56.95:30808] AH01071: Got error 'PHP message: start 1762844413.8069', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:00:13.993093 2025] [proxy_fcgi:error] [pid 53355:tid 53359] [client 165.85.56.95:30808] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844413.9924-1762844413.8069', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:02:14.997427 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 165.85.56.95:16033] AH01071: Got error 'PHP message: start 1762844534.2996', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:02:14.997866 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 165.85.56.95:16033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844534.9968-1762844534.2996', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:04:15.835386 2025] [proxy_fcgi:error] [pid 59670:tid 59688] [client 165.85.56.95:51176] AH01071: Got error 'PHP message: start 1762844655.2841', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:04:15.835922 2025] [proxy_fcgi:error] [pid 59670:tid 59688] [client 165.85.56.95:51176] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844655.8351-1762844655.2841', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:06:16.664604 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 165.85.56.95:34215] AH01071: Got error 'PHP message: start 1762844776.1106', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:06:16.664944 2025] [proxy_fcgi:error] [pid 53449:tid 53465] [client 165.85.56.95:34215] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844776.6644-1762844776.1106', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:06:26.910513 2025] [proxy_fcgi:error] [pid 59670:tid 59694] [client 165.85.56.95:41048] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:06:27.890752 2025] [proxy_fcgi:error] [pid 59670:tid 59677] [client 165.85.56.95:41048] AH01071: Got error 'PHP message: start 1762844787.6588', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:06:28.255419 2025] [proxy_fcgi:error] [pid 59670:tid 59677] [client 165.85.56.95:41048] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844788.2549-1762844787.6588', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:08:29.040977 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 165.85.56.95:10743] AH01071: Got error 'PHP message: start 1762844908.5396', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:08:29.370369 2025] [proxy_fcgi:error] [pid 53449:tid 53469] [client 165.85.56.95:10743] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762844909.3695-1762844908.5396', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:10:30.161396 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 165.85.56.95:47041] AH01071: Got error 'PHP message: start 1762845029.7007', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:10:30.460306 2025] [proxy_fcgi:error] [pid 59670:tid 59695] [client 165.85.56.95:47041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845030.4599-1762845029.7007', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:12:31.281858 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 165.85.56.95:65411] AH01071: Got error 'PHP message: start 1762845150.7667', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:12:31.691271 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 165.85.56.95:65411] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845151.6909-1762845150.7667', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:14:32.586553 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:8309] AH01071: Got error 'PHP message: start 1762845272.0234', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:14:33.101099 2025] [proxy_fcgi:error] [pid 53449:tid 53460] [client 165.85.56.95:8309] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845273.1001-1762845272.0234', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:16:34.066890 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:8548] AH01071: Got error 'PHP message: start 1762845393.4189', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:16:34.591326 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:8548] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845394.5907-1762845393.4189', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:18:35.476291 2025] [proxy_fcgi:error] [pid 53356:tid 53388] [client 165.85.56.95:41823] AH01071: Got error 'PHP message: start 1762845514.8822', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:18:35.804480 2025] [proxy_fcgi:error] [pid 53356:tid 53388] [client 165.85.56.95:41823] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845515.804-1762845514.8822', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:20:36.758741 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 165.85.56.95:4404] AH01071: Got error 'PHP message: start 1762845636.1142', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:20:37.368245 2025] [proxy_fcgi:error] [pid 59670:tid 59674] [client 165.85.56.95:4404] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845637.3677-1762845636.1142', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:22:38.188270 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 165.85.56.95:49856] AH01071: Got error 'PHP message: start 1762845757.6701', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:22:38.648564 2025] [proxy_fcgi:error] [pid 53355:tid 53376] [client 165.85.56.95:49856] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845758.6481-1762845757.6701', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:24:39.581269 2025] [proxy_fcgi:error] [pid 59670:tid 59679] [client 165.85.56.95:14387] AH01071: Got error 'PHP message: start 1762845878.9876', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:24:40.050374 2025] [proxy_fcgi:error] [pid 59670:tid 59679] [client 165.85.56.95:14387] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762845880.0499-1762845878.9876', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:26:41.013272 2025] [proxy_fcgi:error] [pid 59670:tid 59694] [client 165.85.56.95:53733] AH01071: Got error 'PHP message: start 1762846000.376', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:26:41.482267 2025] [proxy_fcgi:error] [pid 59670:tid 59694] [client 165.85.56.95:53733] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846001.4818-1762846000.376', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:28:42.324819 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 165.85.56.95:21077] AH01071: Got error 'PHP message: start 1762846121.7699', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:28:42.635679 2025] [proxy_fcgi:error] [pid 53355:tid 53360] [client 165.85.56.95:21077] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846122.6352-1762846121.7699', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:30:43.926688 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:29069] AH01071: Got error 'PHP message: start 1762846243.2789', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:30:44.378628 2025] [proxy_fcgi:error] [pid 59670:tid 59692] [client 165.85.56.95:29069] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846244.3782-1762846243.2789', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:32:45.199089 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:52204] AH01071: Got error 'PHP message: start 1762846364.673', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:32:45.499053 2025] [proxy_fcgi:error] [pid 53355:tid 53373] [client 165.85.56.95:52204] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846365.4986-1762846364.673', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:36:11.669190 2025] [proxy_fcgi:error] [pid 53414:tid 53439] [client 165.85.56.95:51419] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Tue Nov 11 15:36:14.996995 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 165.85.56.95:51419] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44629
[Tue Nov 11 15:36:15.754107 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:51419] AH01071: Got error 'PHP message: start 1762846575.5085', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:36:16.484155 2025] [proxy_fcgi:error] [pid 53414:tid 53431] [client 165.85.56.95:51419] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846576.4837-1762846575.5085', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:38:17.228761 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:20337] AH01071: Got error 'PHP message: start 1762846696.753', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:38:17.624791 2025] [proxy_fcgi:error] [pid 59670:tid 59687] [client 165.85.56.95:20337] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846697.6244-1762846696.753', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:40:18.496441 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 165.85.56.95:10822] AH01071: Got error 'PHP message: start 1762846817.9645', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:40:19.216977 2025] [proxy_fcgi:error] [pid 59670:tid 59676] [client 165.85.56.95:10822] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846819.2167-1762846817.9645', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:42:20.041188 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 165.85.56.95:60006] AH01071: Got error 'PHP message: start 1762846939.5001', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:42:20.697455 2025] [proxy_fcgi:error] [pid 53356:tid 53402] [client 165.85.56.95:60006] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762846940.6962-1762846939.5001', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:44:21.578921 2025] [proxy_fcgi:error] [pid 53449:tid 53478] [client 165.85.56.95:26429] AH01071: Got error 'PHP message: start 1762847061.0043', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:44:22.228607 2025] [proxy_fcgi:error] [pid 53449:tid 53478] [client 165.85.56.95:26429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847062.2281-1762847061.0043', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:46:23.654088 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 165.85.56.95:63015] AH01071: Got error 'PHP message: start 1762847182.5328', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:46:24.273867 2025] [proxy_fcgi:error] [pid 53355:tid 53381] [client 165.85.56.95:63015] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847184.2735-1762847182.5328', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:48:25.093918 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 165.85.56.95:21953] AH01071: Got error 'PHP message: start 1762847304.5668', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:48:25.677600 2025] [proxy_fcgi:error] [pid 53449:tid 53466] [client 165.85.56.95:21953] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847305.6772-1762847304.5668', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:48:27.743048 2025] [proxy_fcgi:error] [pid 53449:tid 53471] [client 165.85.56.95:21953] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:48:29.140802 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 165.85.56.95:21953] AH01071: Got error 'PHP message: start 1762847308.4636', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:48:29.541682 2025] [proxy_fcgi:error] [pid 53449:tid 53455] [client 165.85.56.95:21953] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847309.5412-1762847308.4636', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:49:00.083296 2025] [proxy_fcgi:error] [pid 53414:tid 53419] [client 165.85.56.95:35929] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44468
[Tue Nov 11 15:49:04.584104 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 165.85.56.95:35929] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44468
[Tue Nov 11 15:49:05.882091 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 165.85.56.95:35929] AH01071: Got error 'PHP message: start 1762847345.2346', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:49:06.269570 2025] [proxy_fcgi:error] [pid 53414:tid 53421] [client 165.85.56.95:35929] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847346.2692-1762847345.2346', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:50:37.316981 2025] [proxy_fcgi:error] [pid 53356:tid 53396] [client 165.85.56.95:26565] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:50:38.216014 2025] [proxy_fcgi:error] [pid 53356:tid 53407] [client 165.85.56.95:26565] AH01071: Got error 'PHP message: start 1762847438.0412', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:50:38.549587 2025] [proxy_fcgi:error] [pid 53356:tid 53407] [client 165.85.56.95:26565] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847438.5491-1762847438.0412', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:52:33.810547 2025] [proxy_fcgi:error] [pid 53414:tid 53435] [client 165.85.56.95:56055] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Tue Nov 11 15:52:41.187130 2025] [proxy_fcgi:error] [pid 59670:tid 59685] [client 165.85.56.95:37021] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44630
[Tue Nov 11 15:53:20.701809 2025] [proxy_fcgi:error] [pid 59670:tid 59693] [client 165.85.56.95:56790] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44631
[Tue Nov 11 15:53:30.690414 2025] [proxy_fcgi:error] [pid 53449:tid 53470] [client 165.85.56.95:57967] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44631
[Tue Nov 11 15:53:31.914092 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 165.85.56.95:57967] AH01071: Got error 'PHP message: start 1762847611.6317', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:53:32.233997 2025] [proxy_fcgi:error] [pid 53449:tid 53473] [client 165.85.56.95:57967] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847612.2336-1762847611.6317', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:54:04.285590 2025] [proxy_fcgi:error] [pid 53414:tid 53434] [client 165.85.56.95:61469] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:54:05.632970 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 165.85.56.95:61469] AH01071: Got error 'PHP message: start 1762847645.3418', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:54:06.052465 2025] [proxy_fcgi:error] [pid 53414:tid 53417] [client 165.85.56.95:61469] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847646.0521-1762847645.3418', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:56:06.968923 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:50420] AH01071: Got error 'PHP message: start 1762847766.3689', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:56:07.466032 2025] [proxy_fcgi:error] [pid 53355:tid 53362] [client 165.85.56.95:50420] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847767.4654-1762847766.3689', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 11 15:57:03.168328 2025] [proxy_fcgi:error] [pid 53414:tid 53426] [client 165.85.56.95:29043] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:57:04.478711 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:29043] AH01071: Got error 'PHP message: start 1762847824.0461', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 15:57:05.093864 2025] [proxy_fcgi:error] [pid 53414:tid 53425] [client 165.85.56.95:29043] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762847825.0934-1762847824.0461', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 11 19:53:33.693628 2025] [proxy_fcgi:error] [pid 36673:tid 36680] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:33.894156 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:34.054445 2025] [proxy_fcgi:error] [pid 36673:tid 36696] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:34.359967 2025] [proxy_fcgi:error] [pid 36673:tid 36687] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:34.466414 2025] [proxy_fcgi:error] [pid 36673:tid 36691] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:34.603817 2025] [proxy_fcgi:error] [pid 36673:tid 36699] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:34.875127 2025] [proxy_fcgi:error] [pid 36673:tid 36679] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:35.027813 2025] [proxy_fcgi:error] [pid 36673:tid 36676] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:35.154849 2025] [proxy_fcgi:error] [pid 36673:tid 36692] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:35.274905 2025] [proxy_fcgi:error] [pid 36673:tid 36684] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:35.413176 2025] [proxy_fcgi:error] [pid 36673:tid 36682] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:35.627844 2025] [proxy_fcgi:error] [pid 36673:tid 36695] [client 156.146.56.136:33146] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:35.896903 2025] [:error] [pid 36673:tid 36698] [client 156.146.56.136:33146] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aRMjvyvASiSDHs9bkfcOiwAAAJc"]
[Tue Nov 11 19:53:36.557600 2025] [proxy_fcgi:error] [pid 36578:tid 36602] [client 156.146.56.136:37144] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:36.671857 2025] [proxy_fcgi:error] [pid 36578:tid 36601] [client 156.146.56.136:37144] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:36.826747 2025] [proxy_fcgi:error] [pid 36578:tid 36604] [client 156.146.56.136:37144] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:36.973887 2025] [proxy_fcgi:error] [pid 36578:tid 36590] [client 156.146.56.136:37144] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:37.139921 2025] [proxy_fcgi:error] [pid 36578:tid 36591] [client 156.146.56.136:37144] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:37.255678 2025] [:error] [pid 36578:tid 36597] [client 156.146.56.136:37144] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aRMjwUMi03XeylcOo5XUPgAAAM4"]
[Tue Nov 11 19:53:37.494398 2025] [proxy_fcgi:error] [pid 36673:tid 36690] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:37.649479 2025] [proxy_fcgi:error] [pid 36673:tid 36677] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:37.895970 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:38.116671 2025] [proxy_fcgi:error] [pid 36673:tid 36696] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:38.227353 2025] [proxy_fcgi:error] [pid 36673:tid 36678] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:38.380368 2025] [proxy_fcgi:error] [pid 36673:tid 36685] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:38.548210 2025] [proxy_fcgi:error] [pid 36673:tid 36689] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:39.098709 2025] [proxy_fcgi:error] [pid 36673:tid 36687] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:39.233163 2025] [proxy_fcgi:error] [pid 36673:tid 36691] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:40.162937 2025] [proxy_fcgi:error] [pid 36673:tid 36682] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:40.507632 2025] [proxy_fcgi:error] [pid 36673:tid 36683] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:41.063938 2025] [proxy_fcgi:error] [pid 36673:tid 36681] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:41.333874 2025] [proxy_fcgi:error] [pid 36673:tid 36690] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:41.864929 2025] [proxy_fcgi:error] [pid 36673:tid 36680] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:42.034037 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:42.231282 2025] [proxy_fcgi:error] [pid 36673:tid 36696] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:43.693567 2025] [proxy_fcgi:error] [pid 36673:tid 36685] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:43.888123 2025] [proxy_fcgi:error] [pid 36673:tid 36689] [client 156.146.56.136:37158] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:44.430549 2025] [:error] [pid 36673:tid 36687] [client 156.146.56.136:37158] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRMjyCvASiSDHs9bkfcOqAAAAIw"]
[Tue Nov 11 19:53:44.671338 2025] [proxy_fcgi:error] [pid 36579:tid 36629] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:44.910141 2025] [proxy_fcgi:error] [pid 36579:tid 36619] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:45.019226 2025] [proxy_fcgi:error] [pid 36579:tid 36611] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:45.125065 2025] [proxy_fcgi:error] [pid 36579:tid 36626] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:45.231409 2025] [proxy_fcgi:error] [pid 36579:tid 36632] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:45.378783 2025] [proxy_fcgi:error] [pid 36579:tid 36617] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:45.588281 2025] [proxy_fcgi:error] [pid 36579:tid 36613] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:47.511425 2025] [proxy_fcgi:error] [pid 36579:tid 36633] [client 156.146.56.136:37162] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:47.653876 2025] [:error] [pid 36579:tid 36625] [client 156.146.56.136:37162] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRMjy-muedRSntjwLw6EGAAAAA4"]
[Tue Nov 11 19:53:47.932355 2025] [proxy_fcgi:error] [pid 43205:tid 43226] [client 156.146.56.136:41435] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:48.250331 2025] [proxy_fcgi:error] [pid 43205:tid 43217] [client 156.146.56.136:41435] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:48.363262 2025] [proxy_fcgi:error] [pid 43205:tid 43221] [client 156.146.56.136:41435] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:48.482422 2025] [proxy_fcgi:error] [pid 43205:tid 43213] [client 156.146.56.136:41435] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:48.606167 2025] [proxy_fcgi:error] [pid 43205:tid 43230] [client 156.146.56.136:41435] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:48.732667 2025] [:error] [pid 43205:tid 43211] [client 156.146.56.136:41435] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aRMjzL48SbhIkX6TjwOOdQAAAQM"]
[Tue Nov 11 19:53:49.322120 2025] [proxy_fcgi:error] [pid 36578:tid 36592] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:49.448115 2025] [proxy_fcgi:error] [pid 36578:tid 36607] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:49.561254 2025] [proxy_fcgi:error] [pid 36578:tid 36602] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:49.675703 2025] [proxy_fcgi:error] [pid 36578:tid 36601] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:49.853469 2025] [proxy_fcgi:error] [pid 36578:tid 36604] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:50.082690 2025] [proxy_fcgi:error] [pid 36578:tid 36590] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:50.263430 2025] [proxy_fcgi:error] [pid 36578:tid 36591] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:50.372055 2025] [proxy_fcgi:error] [pid 36578:tid 36585] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:50.669409 2025] [proxy_fcgi:error] [pid 36578:tid 36605] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:50.788837 2025] [proxy_fcgi:error] [pid 36578:tid 36596] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.042228 2025] [proxy_fcgi:error] [pid 36578:tid 36593] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.166464 2025] [proxy_fcgi:error] [pid 36578:tid 36584] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.345825 2025] [proxy_fcgi:error] [pid 36578:tid 36600] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.471813 2025] [proxy_fcgi:error] [pid 36578:tid 36599] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.592052 2025] [proxy_fcgi:error] [pid 36578:tid 36603] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.711473 2025] [proxy_fcgi:error] [pid 36578:tid 36606] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:51.829342 2025] [proxy_fcgi:error] [pid 36578:tid 36588] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:52.175470 2025] [proxy_fcgi:error] [pid 36578:tid 36587] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:52.287878 2025] [proxy_fcgi:error] [pid 36578:tid 36592] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:52.395167 2025] [proxy_fcgi:error] [pid 36578:tid 36607] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:52.506976 2025] [proxy_fcgi:error] [pid 36578:tid 36602] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:52.650845 2025] [proxy_fcgi:error] [pid 36578:tid 36601] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:53.248807 2025] [proxy_fcgi:error] [pid 36578:tid 36589] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:53.391551 2025] [proxy_fcgi:error] [pid 36578:tid 36590] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:53.580490 2025] [:error] [pid 36578:tid 36591] [client 156.146.56.136:35774] [client 156.146.56.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.146.56.136, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRMj0UMi03XeylcOo5XUYgAAAMg"]
[Tue Nov 11 19:53:53.586921 2025] [proxy_fcgi:error] [pid 36578:tid 36591] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:54.052549 2025] [proxy_fcgi:error] [pid 36578:tid 36605] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:54.167561 2025] [proxy_fcgi:error] [pid 36578:tid 36596] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:54.286721 2025] [proxy_fcgi:error] [pid 36578:tid 36583] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:55.801582 2025] [proxy_fcgi:error] [pid 36578:tid 36599] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:56.411899 2025] [proxy_fcgi:error] [pid 36578:tid 36603] [client 156.146.56.136:35774] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:56.823534 2025] [:error] [pid 36578:tid 36586] [client 156.146.56.136:35774] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/chosen.php"] [unique_id "aRMj1EMi03XeylcOo5XUbAAAAMM"]
[Tue Nov 11 19:53:57.161079 2025] [proxy_fcgi:error] [pid 43205:tid 43222] [client 156.146.56.136:35534] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:57.524342 2025] [proxy_fcgi:error] [pid 43205:tid 43208] [client 156.146.56.136:35534] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:58.009272 2025] [:error] [pid 43205:tid 43214] [client 156.146.56.136:35534] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRMj1r48SbhIkX6TjwOOiQAAAQY"]
[Tue Nov 11 19:53:58.777306 2025] [proxy_fcgi:error] [pid 36673:tid 36695] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:58.900752 2025] [proxy_fcgi:error] [pid 36673:tid 36698] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:59.073504 2025] [proxy_fcgi:error] [pid 36673:tid 36683] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:59.255784 2025] [proxy_fcgi:error] [pid 36673:tid 36693] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:59.381780 2025] [proxy_fcgi:error] [pid 36673:tid 36688] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:59.857836 2025] [proxy_fcgi:error] [pid 36673:tid 36680] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:53:59.996748 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:00.133031 2025] [proxy_fcgi:error] [pid 36673:tid 36696] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:00.247996 2025] [proxy_fcgi:error] [pid 36673:tid 36678] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:00.358910 2025] [proxy_fcgi:error] [pid 36673:tid 36685] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:00.488811 2025] [proxy_fcgi:error] [pid 36673:tid 36689] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:00.650994 2025] [proxy_fcgi:error] [pid 36673:tid 36687] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:01.024814 2025] [proxy_fcgi:error] [pid 36673:tid 36679] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:01.159162 2025] [proxy_fcgi:error] [pid 36673:tid 36676] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:02.922000 2025] [proxy_fcgi:error] [pid 36673:tid 36695] [client 156.146.56.136:35538] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:03.193804 2025] [:error] [pid 36673:tid 36683] [client 156.146.56.136:35538] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRMj2yvASiSDHs9bkfcOxQAAAIg"]
[Tue Nov 11 19:54:03.622587 2025] [proxy_fcgi:error] [pid 43205:tid 43214] [client 156.146.56.136:35552] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:03.876369 2025] [proxy_fcgi:error] [pid 43205:tid 43217] [client 156.146.56.136:35552] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:04.223852 2025] [proxy_fcgi:error] [pid 43205:tid 43213] [client 156.146.56.136:35552] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:04.327298 2025] [:error] [pid 43205:tid 43215] [client 156.146.56.136:35552] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "aRMj3L48SbhIkX6TjwOOzQAAAQc"]
[Tue Nov 11 19:54:05.277798 2025] [proxy_fcgi:error] [pid 36673:tid 36690] [client 156.146.56.136:35556] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:05.467608 2025] [proxy_fcgi:error] [pid 36673:tid 36677] [client 156.146.56.136:35556] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:05.589059 2025] [proxy_fcgi:error] [pid 36673:tid 36680] [client 156.146.56.136:35556] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:05.728344 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:35556] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:06.416189 2025] [:error] [pid 36673:tid 36689] [client 156.146.56.136:35556] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRMj3ivASiSDHs9bkfcOzgAAAI4"]
[Tue Nov 11 19:54:06.696093 2025] [proxy_fcgi:error] [pid 43205:tid 43208] [client 156.146.56.136:56190] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:06.862885 2025] [proxy_fcgi:error] [pid 43205:tid 43223] [client 156.146.56.136:56190] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:07.087444 2025] [proxy_fcgi:error] [pid 43205:tid 43232] [client 156.146.56.136:56190] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:07.194820 2025] [proxy_fcgi:error] [pid 43205:tid 43209] [client 156.146.56.136:56190] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:07.305778 2025] [:error] [pid 43205:tid 43212] [client 156.146.56.136:56190] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aRMj3748SbhIkX6TjwOO1QAAAQQ"]
[Tue Nov 11 19:54:07.651704 2025] [proxy_fcgi:error] [pid 43205:tid 43229] [client 156.146.56.136:56196] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:07.952939 2025] [proxy_fcgi:error] [pid 43205:tid 43229] [client 156.146.56.136:56196] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:08.665749 2025] [proxy_fcgi:error] [pid 43205:tid 43217] [client 156.146.56.136:56196] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:09.813777 2025] [proxy_fcgi:error] [pid 43205:tid 43220] [client 156.146.56.136:56196] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:10.177693 2025] [:error] [pid 43205:tid 43218] [client 156.146.56.136:56196] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aRMj4r48SbhIkX6TjwOO5AAAAQo"]
[Tue Nov 11 19:54:10.619718 2025] [proxy_fcgi:error] [pid 36673:tid 36695] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:10.756324 2025] [proxy_fcgi:error] [pid 36673:tid 36698] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:11.013904 2025] [proxy_fcgi:error] [pid 36673:tid 36693] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:11.389228 2025] [proxy_fcgi:error] [pid 36673:tid 36677] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:11.641892 2025] [proxy_fcgi:error] [pid 36673:tid 36685] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:12.117865 2025] [proxy_fcgi:error] [pid 36673:tid 36689] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:12.237583 2025] [proxy_fcgi:error] [pid 36673:tid 36686] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:12.619071 2025] [proxy_fcgi:error] [pid 36673:tid 36676] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:12.797145 2025] [proxy_fcgi:error] [pid 36673:tid 36684] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:12.921475 2025] [proxy_fcgi:error] [pid 36673:tid 36692] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:13.148103 2025] [proxy_fcgi:error] [pid 36673:tid 36695] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:13.577983 2025] [proxy_fcgi:error] [pid 36673:tid 36698] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:13.719859 2025] [proxy_fcgi:error] [pid 36673:tid 36683] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:14.020052 2025] [proxy_fcgi:error] [pid 36673:tid 36693] [client 156.146.56.136:56198] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:14.603256 2025] [:error] [pid 36673:tid 36690] [client 156.146.56.136:56198] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRMj5ivASiSDHs9bkfcO6AAAAI8"]
[Tue Nov 11 19:54:14.875894 2025] [proxy_fcgi:error] [pid 36673:tid 36680] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:14.987302 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:15.108231 2025] [proxy_fcgi:error] [pid 36673:tid 36678] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:15.453059 2025] [proxy_fcgi:error] [pid 36673:tid 36696] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:15.568853 2025] [proxy_fcgi:error] [pid 36673:tid 36687] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:15.827682 2025] [proxy_fcgi:error] [pid 36673:tid 36689] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:16.192145 2025] [proxy_fcgi:error] [pid 36673:tid 36679] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:16.438712 2025] [proxy_fcgi:error] [pid 36673:tid 36684] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:16.626181 2025] [proxy_fcgi:error] [pid 36673:tid 36692] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:17.060856 2025] [proxy_fcgi:error] [pid 36673:tid 36683] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:17.253260 2025] [proxy_fcgi:error] [pid 36673:tid 36693] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:17.475086 2025] [proxy_fcgi:error] [pid 36673:tid 36681] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:17.611868 2025] [proxy_fcgi:error] [pid 36673:tid 36690] [client 156.146.56.136:56210] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:18.725842 2025] [:error] [pid 36673:tid 36675] [client 156.146.56.136:56210] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aRMj6ivASiSDHs9bkfcO_wAAAIA"]
[Tue Nov 11 19:54:18.988078 2025] [:error] [pid 36578:tid 36589] [client 156.146.56.136:14160] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aRMj6kMi03XeylcOo5XUfAAAAMY"]
[Tue Nov 11 19:54:19.652937 2025] [proxy_fcgi:error] [pid 36673:tid 36685] [client 156.146.56.136:56574] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:19.808606 2025] [proxy_fcgi:error] [pid 36673:tid 36696] [client 156.146.56.136:56574] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:20.040229 2025] [proxy_fcgi:error] [pid 36673:tid 36687] [client 156.146.56.136:56574] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:20.192554 2025] [proxy_fcgi:error] [pid 36673:tid 36688] [client 156.146.56.136:56574] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:20.315163 2025] [:error] [pid 36673:tid 36689] [client 156.146.56.136:56574] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRMj7CvASiSDHs9bkfcPBAAAAI4"]
[Tue Nov 11 19:54:20.550865 2025] [proxy_fcgi:error] [pid 36673:tid 36679] [client 156.146.56.136:56576] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:20.684108 2025] [proxy_fcgi:error] [pid 36673:tid 36692] [client 156.146.56.136:56576] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:20.930189 2025] [proxy_fcgi:error] [pid 36673:tid 36698] [client 156.146.56.136:56576] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:21.033868 2025] [:error] [pid 36673:tid 36683] [client 156.146.56.136:56576] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aRMj7SvASiSDHs9bkfcPCQAAAIg"]
[Tue Nov 11 19:54:21.270716 2025] [proxy_fcgi:error] [pid 36578:tid 36591] [client 156.146.56.136:56586] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:22.402258 2025] [:error] [pid 36578:tid 36595] [client 156.146.56.136:56586] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRMj7kMi03XeylcOo5XUigAAAMw"]
[Tue Nov 11 19:54:22.663955 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:56598] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:22.820439 2025] [proxy_fcgi:error] [pid 36673:tid 36678] [client 156.146.56.136:56598] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:23.149890 2025] [:error] [pid 36673:tid 36696] [client 156.146.56.136:56598] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRMj7yvASiSDHs9bkfcPDwAAAJU"]
[Tue Nov 11 19:54:23.481266 2025] [proxy_fcgi:error] [pid 36673:tid 36689] [client 156.146.56.136:56604] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:23.594686 2025] [proxy_fcgi:error] [pid 36673:tid 36677] [client 156.146.56.136:56604] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:23.700753 2025] [:error] [pid 36673:tid 36682] [client 156.146.56.136:56604] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aRMj7yvASiSDHs9bkfcPEgAAAIc"]
[Tue Nov 11 19:54:24.484157 2025] [proxy_fcgi:error] [pid 43205:tid 43213] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:25.273197 2025] [proxy_fcgi:error] [pid 43205:tid 43210] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:25.693158 2025] [proxy_fcgi:error] [pid 43205:tid 43208] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:25.815191 2025] [proxy_fcgi:error] [pid 43205:tid 43222] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:25.944459 2025] [proxy_fcgi:error] [pid 43205:tid 43226] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:26.558993 2025] [proxy_fcgi:error] [pid 43205:tid 43227] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:26.694607 2025] [proxy_fcgi:error] [pid 43205:tid 43231] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:26.911835 2025] [proxy_fcgi:error] [pid 43205:tid 43223] [client 156.146.56.136:56612] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:27.039888 2025] [:error] [pid 43205:tid 43229] [client 156.146.56.136:56612] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aRMj8748SbhIkX6TjwOPBAAAARU"]
[Tue Nov 11 19:54:27.279388 2025] [proxy_fcgi:error] [pid 36673:tid 36695] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:27.448240 2025] [proxy_fcgi:error] [pid 36673:tid 36698] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:27.996457 2025] [proxy_fcgi:error] [pid 36673:tid 36693] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:28.205660 2025] [proxy_fcgi:error] [pid 36673:tid 36675] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:28.331787 2025] [proxy_fcgi:error] [pid 36673:tid 36678] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:28.460449 2025] [proxy_fcgi:error] [pid 36673:tid 36690] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:28.630455 2025] [proxy_fcgi:error] [pid 36673:tid 36685] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:28.940923 2025] [proxy_fcgi:error] [pid 36673:tid 36677] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:29.229170 2025] [proxy_fcgi:error] [pid 36673:tid 36682] [client 156.146.56.136:43728] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:29.722755 2025] [:error] [pid 36673:tid 36679] [client 156.146.56.136:43728] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "aRMj9SvASiSDHs9bkfcPIgAAAIQ"]
[Tue Nov 11 19:54:30.172116 2025] [proxy_fcgi:error] [pid 43205:tid 43210] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:30.288058 2025] [proxy_fcgi:error] [pid 43205:tid 43218] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:30.543219 2025] [proxy_fcgi:error] [pid 43205:tid 43222] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:30.658941 2025] [proxy_fcgi:error] [pid 43205:tid 43226] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:31.597249 2025] [proxy_fcgi:error] [pid 43205:tid 43229] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:31.706122 2025] [proxy_fcgi:error] [pid 43205:tid 43214] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:31.811421 2025] [proxy_fcgi:error] [pid 43205:tid 43211] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:31.936118 2025] [proxy_fcgi:error] [pid 43205:tid 43228] [client 156.146.56.136:43738] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:32.054583 2025] [:error] [pid 43205:tid 43220] [client 156.146.56.136:43738] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aRMj-L48SbhIkX6TjwOPGwAAAQw"]
[Tue Nov 11 19:54:32.274217 2025] [proxy_fcgi:error] [pid 36579:tid 36632] [client 156.146.56.136:43742] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:32.385619 2025] [proxy_fcgi:error] [pid 36579:tid 36622] [client 156.146.56.136:43742] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:32.486877 2025] [:error] [pid 36579:tid 36627] [client 156.146.56.136:43742] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRMj-OmuedRSntjwLw6EQQAAABA"]
[Tue Nov 11 19:54:32.708802 2025] [proxy_fcgi:error] [pid 36578:tid 36603] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:32.836955 2025] [proxy_fcgi:error] [pid 36578:tid 36586] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:33.176383 2025] [proxy_fcgi:error] [pid 36578:tid 36598] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:33.471871 2025] [proxy_fcgi:error] [pid 36578:tid 36584] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:33.682828 2025] [proxy_fcgi:error] [pid 36578:tid 36595] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:34.083148 2025] [proxy_fcgi:error] [pid 36578:tid 36601] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:34.548700 2025] [proxy_fcgi:error] [pid 36578:tid 36604] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:34.773423 2025] [proxy_fcgi:error] [pid 36578:tid 36596] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:34.885123 2025] [proxy_fcgi:error] [pid 36578:tid 36583] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:35.211267 2025] [proxy_fcgi:error] [pid 36578:tid 36603] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:35.565350 2025] [proxy_fcgi:error] [pid 36578:tid 36606] [client 156.146.56.136:43752] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:35.842125 2025] [:error] [pid 36578:tid 36600] [client 156.146.56.136:43752] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aRMj-0Mi03XeylcOo5XUpQAAANE"]
[Tue Nov 11 19:54:36.136705 2025] [proxy_fcgi:error] [pid 43205:tid 43211] [client 156.146.56.136:45338] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:36.286152 2025] [proxy_fcgi:error] [pid 43205:tid 43230] [client 156.146.56.136:45338] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:36.596111 2025] [proxy_fcgi:error] [pid 43205:tid 43210] [client 156.146.56.136:45338] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:38.996794 2025] [proxy_fcgi:error] [pid 43205:tid 43217] [client 156.146.56.136:45338] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:39.237906 2025] [:error] [pid 43205:tid 43212] [client 156.146.56.136:45338] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/ff2.php"] [unique_id "aRMj_748SbhIkX6TjwOPLgAAAQQ"]
[Tue Nov 11 19:54:39.658038 2025] [proxy_fcgi:error] [pid 36580:tid 36661] [client 156.146.56.136:45344] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:39.765319 2025] [proxy_fcgi:error] [pid 36580:tid 36643] [client 156.146.56.136:45344] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:39.876184 2025] [proxy_fcgi:error] [pid 36580:tid 36642] [client 156.146.56.136:45344] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:40.096230 2025] [proxy_fcgi:error] [pid 36580:tid 36657] [client 156.146.56.136:45344] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:40.243103 2025] [:error] [pid 36580:tid 36654] [client 156.146.56.136:45344] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRMkAJaaFQZGE3H9yOHSuQAAAFA"]
[Tue Nov 11 19:54:40.707989 2025] [proxy_fcgi:error] [pid 36578:tid 36607] [client 156.146.56.136:45356] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:54:41.752887 2025] [:error] [pid 36578:tid 36599] [client 156.146.56.136:45356] [client 156.146.56.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRMkAUMi03XeylcOo5XUrAAAANA"]
[Tue Nov 11 19:54:41.980566 2025] [:error] [pid 36580:tid 36644] [client 156.146.56.136:45362] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/dropdown.php"] [unique_id "aRMkAZaaFQZGE3H9yOHSvAAAAEY"]
[Tue Nov 11 19:54:42.202085 2025] [:error] [pid 43205:tid 43213] [client 156.146.56.136:45368] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/dropdown.php"] [unique_id "aRMkAr48SbhIkX6TjwOPMwAAAQU"]
[Tue Nov 11 19:54:42.452754 2025] [:error] [pid 36673:tid 36688] [client 156.146.56.136:45380] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/dropdown.php"] [unique_id "aRMkAivASiSDHs9bkfcPOQAAAI0"]
[Tue Nov 11 19:54:42.941153 2025] [:error] [pid 43205:tid 43219] [client 156.146.56.136:45384] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/dropdown.php"] [unique_id "aRMkAr48SbhIkX6TjwOPNQAAAQs"]
[Tue Nov 11 19:54:45.429654 2025] [:error] [pid 43205:tid 43211] [client 156.146.56.136:45388] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aRMkBb48SbhIkX6TjwOPQAAAAQM"]
[Tue Nov 11 19:54:45.765846 2025] [:error] [pid 36580:tid 36643] [client 156.146.56.136:51524] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aRMkBZaaFQZGE3H9yOHSwwAAAEU"]
[Tue Nov 11 19:54:45.982019 2025] [:error] [pid 36579:tid 36624] [client 156.146.56.136:51536] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aRMkBemuedRSntjwLw6ETwAAAA0"]
[Tue Nov 11 19:54:46.187229 2025] [:error] [pid 36578:tid 36593] [client 156.146.56.136:27133] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aRMkBkMi03XeylcOo5XUtQAAAMo"]
[Tue Nov 11 19:54:46.395230 2025] [:error] [pid 36578:tid 36602] [client 156.146.56.136:51558] [client 156.146.56.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aRMkBkMi03XeylcOo5XUtgAAANM"]
[Tue Nov 11 22:54:14.271986 2025] [:error] [pid 47859:tid 47883] [client 159.203.76.199:55868] [client 159.203.76.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRNOFqRzLR7egYHK_4eK4AAAABM"]
[Wed Nov 12 00:43:36.893642 2025] [:error] [pid 54702:tid 55024] [client 159.203.76.199:34026] [client 159.203.76.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRNnuICgou0IW-jKFfmNQwAAAYo"]
[Wed Nov 12 03:20:50.232926 2025] [:error] [pid 54518:tid 54529] [client 209.38.17.94:45156] [client 209.38.17.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aROMkqZo3QGSqi1oDHlkOwAAAQk"]
[Wed Nov 12 03:20:50.301452 2025] [:error] [pid 54518:tid 54539] [client 209.38.17.94:37348] [client 209.38.17.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aROMkqZo3QGSqi1oDHlkPQAAARM"]
[Wed Nov 12 04:54:03.590096 2025] [:error] [pid 32959:tid 32967] [client 209.38.17.94:38810] [client 209.38.17.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aROia3oyrq7OJfcFnDimgQAAAQQ"]
[Wed Nov 12 04:54:04.174128 2025] [:error] [pid 57224:tid 57299] [client 209.38.17.94:39390] [client 209.38.17.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aROibBs7oZ7imwCSdAnzfQAAAI8"]
[Wed Nov 12 05:34:44.313411 2025] [proxy_fcgi:error] [pid 32959:tid 32987] [client 165.85.56.95:49818] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Wed Nov 12 05:34:46.127873 2025] [proxy_fcgi:error] [pid 32959:tid 32976] [client 165.85.56.95:49818] AH01071: Got error 'PHP message: start 1762896885.6288', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:34:46.839497 2025] [proxy_fcgi:error] [pid 32959:tid 32976] [client 165.85.56.95:49818] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762896886.839-1762896885.6288', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:36:47.603259 2025] [proxy_fcgi:error] [pid 57312:tid 57333] [client 165.85.56.95:33699] AH01071: Got error 'PHP message: start 1762897007.1151', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:36:47.985093 2025] [proxy_fcgi:error] [pid 57312:tid 57333] [client 165.85.56.95:33699] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897007.9847-1762897007.1151', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:37:30.398955 2025] [proxy_fcgi:error] [pid 57222:tid 57235] [client 165.85.56.95:28555] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:37:31.495047 2025] [proxy_fcgi:error] [pid 57222:tid 57228] [client 165.85.56.95:28555] AH01071: Got error 'PHP message: start 1762897051.0908', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:37:31.916704 2025] [proxy_fcgi:error] [pid 57222:tid 57228] [client 165.85.56.95:28555] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897051.9161-1762897051.0908', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:39:32.924739 2025] [proxy_fcgi:error] [pid 32959:tid 32978] [client 165.85.56.95:44120] AH01071: Got error 'PHP message: start 1762897172.2275', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:39:33.331436 2025] [proxy_fcgi:error] [pid 32959:tid 32978] [client 165.85.56.95:44120] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897173.3308-1762897172.2275', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:41:34.254485 2025] [proxy_fcgi:error] [pid 32959:tid 32967] [client 165.85.56.95:10309] AH01071: Got error 'PHP message: start 1762897293.6331', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:41:34.589493 2025] [proxy_fcgi:error] [pid 32959:tid 32967] [client 165.85.56.95:10309] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897294.5888-1762897293.6331', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:43:33.371661 2025] [proxy_fcgi:error] [pid 57223:tid 57273] [client 165.85.56.95:12689] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:43:34.946334 2025] [proxy_fcgi:error] [pid 57223:tid 57261] [client 165.85.56.95:12689] AH01071: Got error 'PHP message: start 1762897414.1935', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:43:34.947328 2025] [proxy_fcgi:error] [pid 57223:tid 57261] [client 165.85.56.95:12689] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897414.9469-1762897414.1935', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:43:43.616128 2025] [proxy_fcgi:error] [pid 57224:tid 57289] [client 165.85.56.95:24945] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:43:44.560828 2025] [proxy_fcgi:error] [pid 57224:tid 57296] [client 165.85.56.95:24945] AH01071: Got error 'PHP message: start 1762897424.1941', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:43:44.931549 2025] [proxy_fcgi:error] [pid 57224:tid 57296] [client 165.85.56.95:24945] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897424.9308-1762897424.1941', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:45:45.257562 2025] [proxy_fcgi:error] [pid 32959:tid 32984] [client 165.85.56.95:14938] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:45:45.595168 2025] [proxy_fcgi:error] [pid 57222:tid 57246] [client 165.85.56.95:7221] AH01071: Got error 'PHP message: start 1762897545.4004', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:45:46.211757 2025] [proxy_fcgi:error] [pid 57222:tid 57246] [client 165.85.56.95:7221] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897546.2111-1762897545.4004', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:45:46.486381 2025] [proxy_fcgi:error] [pid 32959:tid 32968] [client 165.85.56.95:14938] AH01071: Got error 'PHP message: start 1762897546.2123', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:45:46.857675 2025] [proxy_fcgi:error] [pid 32959:tid 32968] [client 165.85.56.95:14938] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897546.8572-1762897546.2123', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:46:08.258258 2025] [proxy_fcgi:error] [pid 32959:tid 32987] [client 165.85.56.95:42724] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:46:09.446687 2025] [proxy_fcgi:error] [pid 32959:tid 32976] [client 165.85.56.95:42724] AH01071: Got error 'PHP message: start 1762897569.0371', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:46:09.925186 2025] [proxy_fcgi:error] [pid 32959:tid 32976] [client 165.85.56.95:42724] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897569.9247-1762897569.0371', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:48:10.866983 2025] [proxy_fcgi:error] [pid 57224:tid 57287] [client 165.85.56.95:21709] AH01071: Got error 'PHP message: start 1762897690.1928', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:48:11.304080 2025] [proxy_fcgi:error] [pid 57224:tid 57287] [client 165.85.56.95:21709] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897691.3034-1762897690.1928', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:50:12.421466 2025] [proxy_fcgi:error] [pid 57312:tid 57340] [client 165.85.56.95:55200] AH01071: Got error 'PHP message: start 1762897811.724', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:50:12.852714 2025] [proxy_fcgi:error] [pid 57312:tid 57340] [client 165.85.56.95:55200] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897812.8522-1762897811.724', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:52:13.813709 2025] [proxy_fcgi:error] [pid 32959:tid 32986] [client 165.85.56.95:14364] AH01071: Got error 'PHP message: start 1762897933.1705', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:52:14.117858 2025] [proxy_fcgi:error] [pid 32959:tid 32986] [client 165.85.56.95:14364] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762897934.1174-1762897933.1705', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:54:15.102778 2025] [proxy_fcgi:error] [pid 32959:tid 32965] [client 165.85.56.95:39727] AH01071: Got error 'PHP message: start 1762898054.4356', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:54:15.449135 2025] [proxy_fcgi:error] [pid 32959:tid 32965] [client 165.85.56.95:39727] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898055.4486-1762898054.4356', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:54:57.804856 2025] [proxy_fcgi:error] [pid 57224:tid 57295] [client 165.85.56.95:50453] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:54:58.659563 2025] [proxy_fcgi:error] [pid 57224:tid 57293] [client 165.85.56.95:50453] AH01071: Got error 'PHP message: start 1762898098.3925', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:54:59.442498 2025] [proxy_fcgi:error] [pid 57224:tid 57293] [client 165.85.56.95:50453] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898099.4421-1762898098.3925', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 05:57:00.356555 2025] [proxy_fcgi:error] [pid 57312:tid 57341] [client 165.85.56.95:36646] AH01071: Got error 'PHP message: start 1762898219.7409', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:57:00.875277 2025] [proxy_fcgi:error] [pid 57312:tid 57341] [client 165.85.56.95:36646] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898220.8748-1762898219.7409', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:59:01.871015 2025] [proxy_fcgi:error] [pid 57224:tid 57290] [client 165.85.56.95:26006] AH01071: Got error 'PHP message: start 1762898341.2076', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 05:59:02.517295 2025] [proxy_fcgi:error] [pid 57224:tid 57290] [client 165.85.56.95:26006] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898342.517-1762898341.2076', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:01:03.390106 2025] [proxy_fcgi:error] [pid 32959:tid 32977] [client 165.85.56.95:8078] AH01071: Got error 'PHP message: start 1762898462.8289', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:01:03.822229 2025] [proxy_fcgi:error] [pid 32959:tid 32977] [client 165.85.56.95:8078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898463.8219-1762898462.8289', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:03:04.651456 2025] [proxy_fcgi:error] [pid 57312:tid 57322] [client 165.85.56.95:35636] AH01071: Got error 'PHP message: start 1762898584.1369', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:03:05.047748 2025] [proxy_fcgi:error] [pid 57312:tid 57322] [client 165.85.56.95:35636] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898585.0474-1762898584.1369', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:05:06.116616 2025] [proxy_fcgi:error] [pid 57224:tid 57308] [client 165.85.56.95:63839] AH01071: Got error 'PHP message: start 1762898705.553', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:05:06.637503 2025] [proxy_fcgi:error] [pid 57224:tid 57308] [client 165.85.56.95:63839] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898706.637-1762898705.553', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:07:07.412114 2025] [proxy_fcgi:error] [pid 32959:tid 32984] [client 165.85.56.95:22777] AH01071: Got error 'PHP message: start 1762898826.944', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:07:07.852548 2025] [proxy_fcgi:error] [pid 32959:tid 32984] [client 165.85.56.95:22777] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898827.8514-1762898826.944', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:09:08.717122 2025] [proxy_fcgi:error] [pid 57223:tid 57268] [client 165.85.56.95:56078] AH01071: Got error 'PHP message: start 1762898948.1442', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:09:09.279664 2025] [proxy_fcgi:error] [pid 57223:tid 57268] [client 165.85.56.95:56078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762898949.2791-1762898948.1442', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:11:10.167136 2025] [proxy_fcgi:error] [pid 57224:tid 57293] [client 165.85.56.95:54489] AH01071: Got error 'PHP message: start 1762899069.594', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:11:10.870288 2025] [proxy_fcgi:error] [pid 57224:tid 57293] [client 165.85.56.95:54489] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899070.8698-1762899069.594', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:13:11.694762 2025] [proxy_fcgi:error] [pid 57312:tid 57336] [client 165.85.56.95:42940] AH01071: Got error 'PHP message: start 1762899191.1499', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:13:12.362738 2025] [proxy_fcgi:error] [pid 57312:tid 57336] [client 165.85.56.95:42940] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899192.3624-1762899191.1499', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:15:13.198567 2025] [proxy_fcgi:error] [pid 57223:tid 57257] [client 165.85.56.95:53687] AH01071: Got error 'PHP message: start 1762899312.6552', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:15:13.920840 2025] [proxy_fcgi:error] [pid 57223:tid 57257] [client 165.85.56.95:53687] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899313.9204-1762899312.6552', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:17:14.725035 2025] [proxy_fcgi:error] [pid 32959:tid 32969] [client 165.85.56.95:11807] AH01071: Got error 'PHP message: start 1762899434.2195', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:17:15.132974 2025] [proxy_fcgi:error] [pid 32959:tid 32969] [client 165.85.56.95:11807] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899435.1326-1762899434.2195', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:19:15.953896 2025] [proxy_fcgi:error] [pid 57223:tid 57258] [client 165.85.56.95:14090] AH01071: Got error 'PHP message: start 1762899555.4326', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:19:16.361458 2025] [proxy_fcgi:error] [pid 57223:tid 57258] [client 165.85.56.95:14090] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899556.361-1762899555.4326', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:21:17.164757 2025] [proxy_fcgi:error] [pid 57312:tid 57321] [client 165.85.56.95:24059] AH01071: Got error 'PHP message: start 1762899676.669', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:21:17.606650 2025] [proxy_fcgi:error] [pid 57312:tid 57321] [client 165.85.56.95:24059] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899677.6061-1762899676.669', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:23:18.493457 2025] [proxy_fcgi:error] [pid 57312:tid 57335] [client 165.85.56.95:59081] AH01071: Got error 'PHP message: start 1762899797.8971', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:23:18.938157 2025] [proxy_fcgi:error] [pid 57312:tid 57335] [client 165.85.56.95:59081] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899798.9377-1762899797.8971', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:25:19.823159 2025] [proxy_fcgi:error] [pid 32959:tid 32983] [client 165.85.56.95:60416] AH01071: Got error 'PHP message: start 1762899919.2466', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:25:20.271017 2025] [proxy_fcgi:error] [pid 32959:tid 32983] [client 165.85.56.95:60416] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762899920.2706-1762899919.2466', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:27:21.132447 2025] [proxy_fcgi:error] [pid 57224:tid 57297] [client 165.85.56.95:9848] AH01071: Got error 'PHP message: start 1762900040.5596', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:27:21.751443 2025] [proxy_fcgi:error] [pid 57224:tid 57297] [client 165.85.56.95:9848] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900041.7509-1762900040.5596', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:29:22.618329 2025] [proxy_fcgi:error] [pid 32959:tid 32982] [client 165.85.56.95:16098] AH01071: Got error 'PHP message: start 1762900162.0717', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:29:23.053679 2025] [proxy_fcgi:error] [pid 32959:tid 32982] [client 165.85.56.95:16098] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900163.0533-1762900162.0717', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:31:24.119466 2025] [proxy_fcgi:error] [pid 57312:tid 57326] [client 165.85.56.95:43118] AH01071: Got error 'PHP message: start 1762900283.3662', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:31:24.570816 2025] [proxy_fcgi:error] [pid 57312:tid 57326] [client 165.85.56.95:43118] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900284.5704-1762900283.3662', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:33:25.507278 2025] [proxy_fcgi:error] [pid 57222:tid 57228] [client 165.85.56.95:53897] AH01071: Got error 'PHP message: start 1762900404.9183', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:33:26.211000 2025] [proxy_fcgi:error] [pid 57222:tid 57228] [client 165.85.56.95:53897] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900406.2107-1762900404.9183', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:35:27.092322 2025] [proxy_fcgi:error] [pid 57223:tid 57263] [client 165.85.56.95:59078] AH01071: Got error 'PHP message: start 1762900526.5134', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:35:27.725869 2025] [proxy_fcgi:error] [pid 57223:tid 57263] [client 165.85.56.95:59078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900527.7255-1762900526.5134', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:37:28.646292 2025] [proxy_fcgi:error] [pid 57224:tid 57294] [client 165.85.56.95:22617] AH01071: Got error 'PHP message: start 1762900648.0678', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:37:29.446502 2025] [proxy_fcgi:error] [pid 57224:tid 57294] [client 165.85.56.95:22617] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900649.4459-1762900648.0678', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:39:30.306607 2025] [proxy_fcgi:error] [pid 57223:tid 57272] [client 165.85.56.95:11483] AH01071: Got error 'PHP message: start 1762900769.7503', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:39:30.876170 2025] [proxy_fcgi:error] [pid 57223:tid 57272] [client 165.85.56.95:11483] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900770.8758-1762900769.7503', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:41:31.651823 2025] [proxy_fcgi:error] [pid 57224:tid 57306] [client 165.85.56.95:61652] AH01071: Got error 'PHP message: start 1762900891.1721', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:41:32.038926 2025] [proxy_fcgi:error] [pid 57224:tid 57306] [client 165.85.56.95:61652] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762900892.0386-1762900891.1721', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:43:32.885494 2025] [proxy_fcgi:error] [pid 57222:tid 57233] [client 165.85.56.95:38827] AH01071: Got error 'PHP message: start 1762901012.392', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:43:33.305486 2025] [proxy_fcgi:error] [pid 57222:tid 57233] [client 165.85.56.95:38827] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901013.305-1762901012.392', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:45:34.331506 2025] [proxy_fcgi:error] [pid 32959:tid 32971] [client 165.85.56.95:49654] AH01071: Got error 'PHP message: start 1762901133.7848', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:45:34.894657 2025] [proxy_fcgi:error] [pid 32959:tid 32971] [client 165.85.56.95:49654] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901134.8942-1762901133.7848', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:47:35.915820 2025] [proxy_fcgi:error] [pid 57222:tid 57239] [client 165.85.56.95:20512] AH01071: Got error 'PHP message: start 1762901255.3859', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:47:36.343715 2025] [proxy_fcgi:error] [pid 57222:tid 57239] [client 165.85.56.95:20512] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901256.3433-1762901255.3859', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:49:37.288884 2025] [proxy_fcgi:error] [pid 57224:tid 57289] [client 165.85.56.95:17203] AH01071: Got error 'PHP message: start 1762901376.6824', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:49:37.987941 2025] [proxy_fcgi:error] [pid 57224:tid 57289] [client 165.85.56.95:17203] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901377.9874-1762901376.6824', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:51:38.847924 2025] [proxy_fcgi:error] [pid 57222:tid 57241] [client 165.85.56.95:51305] AH01071: Got error 'PHP message: start 1762901498.2965', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:51:39.308217 2025] [proxy_fcgi:error] [pid 57222:tid 57241] [client 165.85.56.95:51305] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901499.3078-1762901498.2965', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:53:40.363170 2025] [proxy_fcgi:error] [pid 32959:tid 32967] [client 165.85.56.95:44972] AH01071: Got error 'PHP message: start 1762901619.791', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:53:41.033924 2025] [proxy_fcgi:error] [pid 32959:tid 32967] [client 165.85.56.95:44972] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901621.0334-1762901619.791', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:55:41.913523 2025] [proxy_fcgi:error] [pid 57223:tid 57271] [client 165.85.56.95:37043] AH01071: Got error 'PHP message: start 1762901741.3638', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:55:42.404944 2025] [proxy_fcgi:error] [pid 57223:tid 57271] [client 165.85.56.95:37043] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901742.4045-1762901741.3638', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:57:43.280930 2025] [proxy_fcgi:error] [pid 57223:tid 57277] [client 165.85.56.95:16174] AH01071: Got error 'PHP message: start 1762901862.7014', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:57:43.948722 2025] [proxy_fcgi:error] [pid 57223:tid 57277] [client 165.85.56.95:16174] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901863.9483-1762901862.7014', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:59:45.080382 2025] [proxy_fcgi:error] [pid 57222:tid 57236] [client 165.85.56.95:37045] AH01071: Got error 'PHP message: start 1762901984.4148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 06:59:45.863135 2025] [proxy_fcgi:error] [pid 57222:tid 57236] [client 165.85.56.95:37045] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762901985.8623-1762901984.4148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:01:46.674224 2025] [proxy_fcgi:error] [pid 57222:tid 57241] [client 165.85.56.95:16034] AH01071: Got error 'PHP message: start 1762902106.1622', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:01:47.071680 2025] [proxy_fcgi:error] [pid 57222:tid 57241] [client 165.85.56.95:16034] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902107.071-1762902106.1622', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:03:48.073274 2025] [proxy_fcgi:error] [pid 57222:tid 57238] [client 165.85.56.95:46659] AH01071: Got error 'PHP message: start 1762902227.5145', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:03:48.811888 2025] [proxy_fcgi:error] [pid 57222:tid 57238] [client 165.85.56.95:46659] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902228.8116-1762902227.5145', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:05:49.809364 2025] [proxy_fcgi:error] [pid 57222:tid 57247] [client 165.85.56.95:41307] AH01071: Got error 'PHP message: start 1762902349.2621', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:05:50.284735 2025] [proxy_fcgi:error] [pid 57222:tid 57247] [client 165.85.56.95:41307] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902350.2844-1762902349.2621', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:07:51.097996 2025] [proxy_fcgi:error] [pid 32959:tid 32970] [client 165.85.56.95:1519] AH01071: Got error 'PHP message: start 1762902470.588', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:07:51.789401 2025] [proxy_fcgi:error] [pid 32959:tid 32970] [client 165.85.56.95:1519] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902471.789-1762902470.588', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:09:52.651640 2025] [proxy_fcgi:error] [pid 57223:tid 57258] [client 165.85.56.95:33625] AH01071: Got error 'PHP message: start 1762902592.1001', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:09:53.103954 2025] [proxy_fcgi:error] [pid 57223:tid 57258] [client 165.85.56.95:33625] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902593.1035-1762902592.1001', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:11:53.945477 2025] [proxy_fcgi:error] [pid 57224:tid 57301] [client 165.85.56.95:64981] AH01071: Got error 'PHP message: start 1762902713.4037', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:11:54.355361 2025] [proxy_fcgi:error] [pid 57224:tid 57301] [client 165.85.56.95:64981] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902714.355-1762902713.4037', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:12:20.900912 2025] [proxy_fcgi:error] [pid 32959:tid 32973] [client 165.85.56.95:1300] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 07:12:21.716205 2025] [proxy_fcgi:error] [pid 32959:tid 32978] [client 165.85.56.95:1300] AH01071: Got error 'PHP message: start 1762902741.4614', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 07:12:22.372936 2025] [proxy_fcgi:error] [pid 32959:tid 32978] [client 165.85.56.95:1300] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902742.3725-1762902741.4614', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 07:13:08.066504 2025] [proxy_fcgi:error] [pid 57312:tid 57319] [client 165.85.56.95:41635] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 07:13:08.888350 2025] [proxy_fcgi:error] [pid 57312:tid 57336] [client 165.85.56.95:41635] AH01071: Got error 'PHP message: start 1762902788.6814', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 07:13:09.567427 2025] [proxy_fcgi:error] [pid 57312:tid 57336] [client 165.85.56.95:41635] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902789.5669-1762902788.6814', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 07:15:10.264028 2025] [proxy_fcgi:error] [pid 32959:tid 32981] [client 165.85.56.95:51290] AH01071: Got error 'PHP message: start 1762902909.8386', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:15:10.632232 2025] [proxy_fcgi:error] [pid 32959:tid 32981] [client 165.85.56.95:51290] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762902910.6316-1762902909.8386', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:17:11.463446 2025] [proxy_fcgi:error] [pid 32959:tid 32978] [client 165.85.56.95:24152] AH01071: Got error 'PHP message: start 1762903030.9388', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:17:12.115743 2025] [proxy_fcgi:error] [pid 32959:tid 32978] [client 165.85.56.95:24152] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903032.1152-1762903030.9388', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:19:12.932241 2025] [proxy_fcgi:error] [pid 57223:tid 57258] [client 165.85.56.95:18353] AH01071: Got error 'PHP message: start 1762903152.399', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:19:13.583603 2025] [proxy_fcgi:error] [pid 57223:tid 57258] [client 165.85.56.95:18353] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903153.5829-1762903152.399', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:21:14.352702 2025] [proxy_fcgi:error] [pid 57223:tid 57277] [client 165.85.56.95:23682] AH01071: Got error 'PHP message: start 1762903273.9128', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:21:14.769981 2025] [proxy_fcgi:error] [pid 57223:tid 57277] [client 165.85.56.95:23682] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903274.7694-1762903273.9128', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:23:15.545479 2025] [proxy_fcgi:error] [pid 57312:tid 57324] [client 165.85.56.95:44801] AH01071: Got error 'PHP message: start 1762903395.0709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:23:15.988891 2025] [proxy_fcgi:error] [pid 57312:tid 57324] [client 165.85.56.95:44801] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903395.9883-1762903395.0709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:25:16.768803 2025] [proxy_fcgi:error] [pid 57312:tid 57324] [client 165.85.56.95:58526] AH01071: Got error 'PHP message: start 1762903516.3029', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:25:17.154604 2025] [proxy_fcgi:error] [pid 57312:tid 57324] [client 165.85.56.95:58526] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903517.1538-1762903516.3029', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:27:18.017862 2025] [proxy_fcgi:error] [pid 32959:tid 32963] [client 165.85.56.95:34877] AH01071: Got error 'PHP message: start 1762903637.4637', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:27:18.576468 2025] [proxy_fcgi:error] [pid 32959:tid 32963] [client 165.85.56.95:34877] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903638.5757-1762903637.4637', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:29:19.366885 2025] [proxy_fcgi:error] [pid 57312:tid 57338] [client 165.85.56.95:32206] AH01071: Got error 'PHP message: start 1762903758.8495', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:29:19.901025 2025] [proxy_fcgi:error] [pid 57312:tid 57338] [client 165.85.56.95:32206] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903759.9004-1762903758.8495', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:31:20.670752 2025] [proxy_fcgi:error] [pid 57312:tid 57317] [client 165.85.56.95:65286] AH01071: Got error 'PHP message: start 1762903880.1966', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:31:21.229286 2025] [proxy_fcgi:error] [pid 57312:tid 57317] [client 165.85.56.95:65286] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762903881.2286-1762903880.1966', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:33:22.009203 2025] [proxy_fcgi:error] [pid 57312:tid 57321] [client 165.85.56.95:13650] AH01071: Got error 'PHP message: start 1762904001.5364', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:33:22.622305 2025] [proxy_fcgi:error] [pid 57312:tid 57321] [client 165.85.56.95:13650] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904002.6217-1762904001.5364', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:35:23.470776 2025] [proxy_fcgi:error] [pid 32959:tid 32982] [client 165.85.56.95:33341] AH01071: Got error 'PHP message: start 1762904122.9298', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:35:24.009063 2025] [proxy_fcgi:error] [pid 32959:tid 32982] [client 165.85.56.95:33341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904124.0085-1762904122.9298', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:37:24.977195 2025] [proxy_fcgi:error] [pid 57312:tid 57334] [client 165.85.56.95:52225] AH01071: Got error 'PHP message: start 1762904244.4965', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:37:25.393203 2025] [proxy_fcgi:error] [pid 57312:tid 57334] [client 165.85.56.95:52225] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904245.3926-1762904244.4965', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:39:26.437095 2025] [proxy_fcgi:error] [pid 57224:tid 57284] [client 165.85.56.95:58255] AH01071: Got error 'PHP message: start 1762904365.7071', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:39:27.089418 2025] [proxy_fcgi:error] [pid 57224:tid 57284] [client 165.85.56.95:58255] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904367.0888-1762904365.7071', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:41:28.037374 2025] [proxy_fcgi:error] [pid 57222:tid 57230] [client 165.85.56.95:51773] AH01071: Got error 'PHP message: start 1762904487.5749', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:41:28.620787 2025] [proxy_fcgi:error] [pid 57222:tid 57230] [client 165.85.56.95:51773] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904488.62-1762904487.5749', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:43:29.821235 2025] [proxy_fcgi:error] [pid 57312:tid 57334] [client 165.85.56.95:42767] AH01071: Got error 'PHP message: start 1762904609.3717', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:43:30.193211 2025] [proxy_fcgi:error] [pid 57312:tid 57334] [client 165.85.56.95:42767] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904610.1927-1762904609.3717', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:45:30.988921 2025] [proxy_fcgi:error] [pid 57224:tid 57301] [client 165.85.56.95:4788] AH01071: Got error 'PHP message: start 1762904730.5284', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:45:31.528692 2025] [proxy_fcgi:error] [pid 57224:tid 57301] [client 165.85.56.95:4788] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904731.528-1762904730.5284', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:47:32.465139 2025] [proxy_fcgi:error] [pid 57224:tid 57304] [client 165.85.56.95:32781] AH01071: Got error 'PHP message: start 1762904852.0043', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:47:32.993385 2025] [proxy_fcgi:error] [pid 57224:tid 57304] [client 165.85.56.95:32781] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904852.9927-1762904852.0043', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:49:33.748499 2025] [proxy_fcgi:error] [pid 57224:tid 57294] [client 165.85.56.95:5459] AH01071: Got error 'PHP message: start 1762904973.2983', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 07:49:34.302883 2025] [proxy_fcgi:error] [pid 57224:tid 57294] [client 165.85.56.95:5459] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762904974.3022-1762904973.2983', referer: https://pumpbooking.com/dashboard-bookings.php
2025/11/12 08:12:35 [error] 57098#57098: *783 openat() "/home/pumpbooking/public_html/slot999.aspx" failed (2: No such file or directory), client: 94.23.188.202, server: pumpbooking.com, request: "GET /slot999.aspx HTTP/1.1", host: "pumpbooking.com"
2025/11/12 08:13:09 [crit] 57098#57098: *878 openat() "/home/pumpbooking/public_html/dashboard.php" failed (13: Permission denied), client: 165.85.56.95, server: pumpbooking.com, request: "POST /dashboard.php HTTP/1.1", host: "pumpbooking.com", referrer: "https://pumpbooking.com/dashboard.php"
2025/11/12 08:19:44 [error] 2194#2194: *498 openat() "/home/pumpbooking/public_html/ios/เว็บ สล็อต pg แจก เครดิต ฟรี.html" failed (2: No such file or directory), client: 66.249.70.35, server: pumpbooking.com, request: "GET /ios/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%88%E0%B8%81%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.html HTTP/1.1", host: "pumpbooking.com"
2025/11/12 08:19:44 [error] 2198#2198: *501 openat() "/home/pumpbooking/public_html/nohu/pgสล็อตเครดิตฟรี.html" failed (2: No such file or directory), client: 66.249.70.35, server: pumpbooking.com, request: "GET /nohu/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.html HTTP/1.1", host: "pumpbooking.com"
2025/11/12 08:19:49 [error] 2198#2198: *501 openat() "/home/pumpbooking/public_html/nohu/สล็อตค่ายpgเว็บตรง.html" failed (2: No such file or directory), client: 66.249.70.35, server: pumpbooking.com, request: "GET /nohu/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html HTTP/1.1", host: "pumpbooking.com"
2025/11/12 08:19:59 [error] 2193#2193: *539 openat() "/home/pumpbooking/public_html/fishing/ทดลองเกมสล็อต ค่าย pg ใหม่ล่าสุด.html" failed (2: No such file or directory), client: 66.249.70.34, server: pumpbooking.com, request: "GET /fishing/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.html HTTP/1.1", host: "pumpbooking.com"
2025/11/12 08:20:04 [error] 2193#2193: *539 openat() "/home/pumpbooking/public_html/ios/ทีวี ผลบอลสดgoal 3 วันนี้.html" failed (2: No such file or directory), client: 66.249.70.34, server: pumpbooking.com, request: "GET /ios/%E0%B8%97%E0%B8%B5%E0%B8%A7%E0%B8%B5%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94goal%203%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.html HTTP/1.1", host: "pumpbooking.com"
2025/11/12 08:42:53 [error] 24801#24801: *146 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.95, server: pumpbooking.com, request: "GET /dashboard.php?setDay=2025-11-15 HTTP/1.1", upstream: "http://103.4.122.14:8181/dashboard.php?setDay=2025-11-15", host: "pumpbooking.com", referrer: "https://pumpbooking.com/dashboard.php"
2025/11/12 08:54:28 [error] 24797#24797: *3231 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.95, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 08:54:28 [error] 24797#24797: *3231 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.95, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 08:54:48 [error] 24797#24797: *3231 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.95, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 08:54:48 [error] 24797#24797: *3231 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.95, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 08:57:08 [error] 24805#24805: *4724 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 08:57:08 [error] 24805#24805: *4724 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 08:57:20 [error] 24805#24805: *4724 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 08:57:21 [error] 24805#24805: *4724 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 09:00:33 [error] 24803#24803: *7961 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 09:00:33 [error] 24803#24803: *7961 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 09:00:35 [error] 24803#24803: *7961 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 09:00:36 [error] 24803#24803: *7961 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 09:01:10 [error] 24803#24803: *7961 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "pumpbooking.com"
2025/11/12 09:01:10 [error] 24803#24803: *7961 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.6, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://103.4.122.14:8181/favicon.ico", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2025/11/12 09:04:14 [error] 24801#24801: *9174 connect() failed (111: Connection refused) while connecting to upstream, client: 165.85.56.95, server: pumpbooking.com, request: "GET /dashboard.php HTTP/1.1", upstream: "http://103.4.122.14:8181/dashboard.php", host: "pumpbooking.com"
2025/11/12 09:04:49 [error] 24793#24793: *9400 connect() failed (111: Connection refused) while connecting to upstream, client: 5.39.109.188, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", upstream: "http://103.4.122.14:8181/robots.txt", host: "pumpbooking.com"
[Wed Nov 12 09:30:26.747978 2025] [proxy_fcgi:error] [pid 41829:tid 41878] [client 165.85.56.95:14167] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85'
[Wed Nov 12 09:30:28.479627 2025] [proxy_fcgi:error] [pid 41829:tid 41889] [client 165.85.56.95:14167] AH01071: Got error 'PHP message: start 1762911027.9543', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:30:29.132368 2025] [proxy_fcgi:error] [pid 41829:tid 41889] [client 165.85.56.95:14167] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911029.1319-1762911027.9543', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:30:35.701165 2025] [proxy_fcgi:error] [pid 41828:tid 41856] [client 165.85.56.95:35331] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:30:36.512853 2025] [proxy_fcgi:error] [pid 41828:tid 41861] [client 165.85.56.95:35331] AH01071: Got error 'PHP message: start 1762911036.2506', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:30:36.600287 2025] [proxy_fcgi:error] [pid 41828:tid 41861] [client 165.85.56.95:35331] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911036.5998-1762911036.2506', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:32:26.922023 2025] [proxy_fcgi:error] [pid 42109:tid 42118] [client 165.85.56.95:11677] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:32:37.428425 2025] [proxy_fcgi:error] [pid 42109:tid 42124] [client 165.85.56.95:23760] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:32:42.675317 2025] [proxy_fcgi:error] [pid 42109:tid 42112] [client 165.85.56.95:25971] AH01071: Got error 'PHP message: start 1762911161.5396', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:32:42.875989 2025] [proxy_fcgi:error] [pid 42109:tid 42112] [client 165.85.56.95:25971] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911162.8754-1762911161.5396', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:32:45.161811 2025] [proxy_fcgi:error] [pid 41829:tid 41887] [client 165.85.56.95:23199] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:32:47.079117 2025] [proxy_fcgi:error] [pid 41829:tid 41875] [client 165.85.56.95:23199] AH01071: Got error 'PHP message: start 1762911166.0882', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:32:47.265335 2025] [proxy_fcgi:error] [pid 41829:tid 41875] [client 165.85.56.95:23199] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911167.265-1762911166.0882', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:34:48.279168 2025] [proxy_fcgi:error] [pid 41829:tid 41889] [client 165.85.56.95:29606] AH01071: Got error 'PHP message: start 1762911287.5809', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:34:48.426309 2025] [proxy_fcgi:error] [pid 41829:tid 41889] [client 165.85.56.95:29606] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911288.4255-1762911287.5809', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:36:34.746136 2025] [proxy_fcgi:error] [pid 41830:tid 41901] [client 165.85.56.95:55005] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Wed Nov 12 09:36:35.338555 2025] [proxy_fcgi:error] [pid 41830:tid 41915] [client 165.85.56.6:26557] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Wed Nov 12 09:36:41.672324 2025] [proxy_fcgi:error] [pid 41830:tid 41902] [client 165.85.56.6:26557] AH01071: Got error 'PHP message: start 1762911400.9946', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:36:42.441681 2025] [proxy_fcgi:error] [pid 41830:tid 41902] [client 165.85.56.6:26557] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911402.4412-1762911400.9946', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:37:44.641939 2025] [proxy_fcgi:error] [pid 41828:tid 41847] [client 165.85.56.95:45569] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44632
[Wed Nov 12 09:38:07.676038 2025] [proxy_fcgi:error] [pid 41828:tid 41857] [client 165.85.56.95:10901] AH01071: Got error 'PHP message: mysql error: The total number of locks exceeds the lock table sizePHP message: query: UPDATE bookings SET bookingPartnerID='0',bookingClientID='594',bookingStockID='0',bookingContact='Phil Prowest',bookingPhone='0412 115 230',bookingDateTime='2025-11-22 08:00:00',bookingAddrLotNo='4',bookingAddrStreetNo='1',bookingAddrStreet='Rudge st',bookingAddrSuburb='Willagee',bookingClientPurchaseOrder='20349', bookingConcreteTime='08:30:00', bookingClockIn='08:30:00', bookingContractorID='0', bookingLat='0',bookingLng='0',bookingInfo='0',bookingExtraMen='0',bookingWashout='1',bookingJobTypeOther='',bookingMinSize='26.0',bookingMaxSize='0.0',bookingQuantityPlus='0',bookingPumpType='BOOM',bookingConcreteQuantity='14.99',bookingConcreteMix='',bookingConcreteSupplier='',bookingSiteContact='',bookingCopiedNew='0',bookingConcreteConfirmed='0',bookingSiteContactPhone='',bookingProblem='0',bookingJobCheck='0',bookingInductedSite='0',bookingExtraLine='0.0', bookingTentative='0', bookingConcreteUsed='0.00', bookingActualStart='08:00:00', bookingActualEnd='08:00:00', bookingAmountInv...PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44633
[Wed Nov 12 09:38:35.742584 2025] [proxy_fcgi:error] [pid 41920:tid 41924] [client 165.85.56.95:21163] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44633
[Wed Nov 12 09:38:37.158234 2025] [proxy_fcgi:error] [pid 41920:tid 41929] [client 165.85.56.95:21163] AH01071: Got error 'PHP message: start 1762911516.6943', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:38:37.481224 2025] [proxy_fcgi:error] [pid 41920:tid 41929] [client 165.85.56.95:21163] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911517.4807-1762911516.6943', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:38:42.092486 2025] [proxy_fcgi:error] [pid 41920:tid 41943] [client 165.85.56.95:21163] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:38:42.941712 2025] [proxy_fcgi:error] [pid 41920:tid 41932] [client 165.85.56.95:21163] AH01071: Got error 'PHP message: start 1762911522.7347', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:38:43.603760 2025] [proxy_fcgi:error] [pid 41920:tid 41932] [client 165.85.56.95:21163] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911523.6034-1762911522.7347', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:38:43.868372 2025] [proxy_fcgi:error] [pid 41920:tid 41928] [client 165.85.56.6:5516] AH01071: Got error 'PHP message: start 1762911523.7499', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:38:44.175661 2025] [proxy_fcgi:error] [pid 41920:tid 41928] [client 165.85.56.6:5516] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911524.1753-1762911523.7499', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:40:08.609177 2025] [proxy_fcgi:error] [pid 42109:tid 42131] [client 165.85.56.6:12436] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:40:10.565414 2025] [proxy_fcgi:error] [pid 42109:tid 42132] [client 165.85.56.6:12436] AH01071: Got error 'PHP message: start 1762911609.6881', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:40:11.012801 2025] [proxy_fcgi:error] [pid 42109:tid 42132] [client 165.85.56.6:12436] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911611.0124-1762911609.6881', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:40:12.792118 2025] [proxy_fcgi:error] [pid 41920:tid 41941] [client 165.85.56.95:27650] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:40:13.999226 2025] [proxy_fcgi:error] [pid 41920:tid 41938] [client 165.85.56.95:27650] AH01071: Got error 'PHP message: start 1762911613.3709', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:40:14.454131 2025] [proxy_fcgi:error] [pid 41920:tid 41938] [client 165.85.56.95:27650] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911614.4535-1762911613.3709', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 09:40:41.321215 2025] [proxy_fcgi:error] [pid 41920:tid 41945] [client 165.85.56.6:56763] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-11
[Wed Nov 12 09:42:15.399623 2025] [proxy_fcgi:error] [pid 42109:tid 42135] [client 165.85.56.95:36533] AH01071: Got error 'PHP message: start 1762911734.7422', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:42:16.115989 2025] [proxy_fcgi:error] [pid 42109:tid 42135] [client 165.85.56.95:36533] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911736.1156-1762911734.7422', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:44:17.040254 2025] [proxy_fcgi:error] [pid 41830:tid 41906] [client 165.85.56.95:23022] AH01071: Got error 'PHP message: start 1762911856.421', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:44:17.549454 2025] [proxy_fcgi:error] [pid 41830:tid 41906] [client 165.85.56.95:23022] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911857.5491-1762911856.421', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:46:18.543886 2025] [proxy_fcgi:error] [pid 41829:tid 41878] [client 165.85.56.95:27318] AH01071: Got error 'PHP message: start 1762911977.8757', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:46:19.316618 2025] [proxy_fcgi:error] [pid 41829:tid 41878] [client 165.85.56.95:27318] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762911979.3162-1762911977.8757', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:48:20.185911 2025] [proxy_fcgi:error] [pid 42109:tid 42118] [client 165.85.56.95:33739] AH01071: Got error 'PHP message: start 1762912099.6183', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:48:20.845096 2025] [proxy_fcgi:error] [pid 42109:tid 42118] [client 165.85.56.95:33739] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912100.8447-1762912099.6183', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:50:21.830608 2025] [proxy_fcgi:error] [pid 41828:tid 41840] [client 165.85.56.95:16827] AH01071: Got error 'PHP message: start 1762912221.2387', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:50:22.530651 2025] [proxy_fcgi:error] [pid 41828:tid 41840] [client 165.85.56.95:16827] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912222.5302-1762912221.2387', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:52:23.617447 2025] [proxy_fcgi:error] [pid 41830:tid 41916] [client 165.85.56.95:42224] AH01071: Got error 'PHP message: start 1762912342.8704', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:52:24.157228 2025] [proxy_fcgi:error] [pid 41830:tid 41916] [client 165.85.56.95:42224] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912344.1567-1762912342.8704', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:54:25.262140 2025] [proxy_fcgi:error] [pid 42109:tid 42119] [client 165.85.56.95:22237] AH01071: Got error 'PHP message: start 1762912464.6568', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:54:25.924854 2025] [proxy_fcgi:error] [pid 42109:tid 42119] [client 165.85.56.95:22237] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912465.9245-1762912464.6568', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:56:26.817144 2025] [proxy_fcgi:error] [pid 41828:tid 41860] [client 165.85.56.95:20468] AH01071: Got error 'PHP message: start 1762912586.2455', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:56:27.240250 2025] [proxy_fcgi:error] [pid 41828:tid 41860] [client 165.85.56.95:20468] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912587.2398-1762912586.2455', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:58:28.398117 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.95:4272] AH01071: Got error 'PHP message: start 1762912707.5766', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 09:58:28.933914 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.95:4272] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912708.933-1762912707.5766', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:00:30.071400 2025] [proxy_fcgi:error] [pid 60096:tid 60143] [client 165.85.56.95:22986] AH01071: Got error 'PHP message: start 1762912829.454', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:00:30.800735 2025] [proxy_fcgi:error] [pid 60096:tid 60143] [client 165.85.56.95:22986] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912830.8004-1762912829.454', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:02:32.616142 2025] [proxy_fcgi:error] [pid 60095:tid 60113] [client 165.85.56.95:21489] AH01071: Got error 'PHP message: start 1762912951.2894', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:02:33.023012 2025] [proxy_fcgi:error] [pid 60095:tid 60113] [client 165.85.56.95:21489] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762912953.0225-1762912951.2894', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:04:34.215640 2025] [proxy_fcgi:error] [pid 60180:tid 60187] [client 165.85.56.95:62936] AH01071: Got error 'PHP message: start 1762913073.5254', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:04:34.886204 2025] [proxy_fcgi:error] [pid 60180:tid 60187] [client 165.85.56.95:62936] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913074.8856-1762913073.5254', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:06:35.815186 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:52166] AH01071: Got error 'PHP message: start 1762913195.1943', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:06:36.323250 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:52166] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913196.3228-1762913195.1943', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:08:37.587779 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:2294] AH01071: Got error 'PHP message: start 1762913316.8396', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:08:38.156917 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:2294] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913318.1564-1762913316.8396', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:10:39.207472 2025] [proxy_fcgi:error] [pid 60405:tid 60425] [client 165.85.56.95:22095] AH01071: Got error 'PHP message: start 1762913438.6468', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:10:39.867995 2025] [proxy_fcgi:error] [pid 60405:tid 60425] [client 165.85.56.95:22095] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913439.8676-1762913438.6468', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:12:41.428062 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:27563] AH01071: Got error 'PHP message: start 1762913560.2044', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:12:42.118993 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:27563] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913562.1184-1762913560.2044', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:14:42.925225 2025] [proxy_fcgi:error] [pid 60405:tid 60416] [client 165.85.56.95:5860] AH01071: Got error 'PHP message: start 1762913682.4337', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:14:43.504386 2025] [proxy_fcgi:error] [pid 60405:tid 60416] [client 165.85.56.95:5860] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913683.5039-1762913682.4337', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:16:44.380974 2025] [proxy_fcgi:error] [pid 60180:tid 60182] [client 165.85.56.95:42526] AH01071: Got error 'PHP message: start 1762913803.8037', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:16:45.009469 2025] [proxy_fcgi:error] [pid 60180:tid 60182] [client 165.85.56.95:42526] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913805.0091-1762913803.8037', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:18:45.926868 2025] [proxy_fcgi:error] [pid 60096:tid 60135] [client 165.85.56.95:2488] AH01071: Got error 'PHP message: start 1762913925.3461', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:18:46.329254 2025] [proxy_fcgi:error] [pid 60096:tid 60135] [client 165.85.56.95:2488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762913926.3288-1762913925.3461', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:20:47.209215 2025] [proxy_fcgi:error] [pid 60096:tid 60133] [client 165.85.56.95:25453] AH01071: Got error 'PHP message: start 1762914046.6443', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:20:47.663843 2025] [proxy_fcgi:error] [pid 60096:tid 60133] [client 165.85.56.95:25453] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914047.6634-1762914046.6443', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:22:48.494107 2025] [proxy_fcgi:error] [pid 60180:tid 60182] [client 165.85.56.95:21755] AH01071: Got error 'PHP message: start 1762914167.9925', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:22:48.885153 2025] [proxy_fcgi:error] [pid 60180:tid 60182] [client 165.85.56.95:21755] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914168.8847-1762914167.9925', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:24:49.793430 2025] [proxy_fcgi:error] [pid 60097:tid 60150] [client 165.85.56.95:7853] AH01071: Got error 'PHP message: start 1762914289.1811', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:24:50.582898 2025] [proxy_fcgi:error] [pid 60097:tid 60150] [client 165.85.56.95:7853] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914290.5825-1762914289.1811', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:26:51.485810 2025] [proxy_fcgi:error] [pid 60097:tid 60168] [client 165.85.56.95:41500] AH01071: Got error 'PHP message: start 1762914410.9035', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:26:52.086362 2025] [proxy_fcgi:error] [pid 60097:tid 60168] [client 165.85.56.95:41500] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914412.086-1762914410.9035', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:28:53.068896 2025] [proxy_fcgi:error] [pid 60405:tid 60431] [client 165.85.56.95:20895] AH01071: Got error 'PHP message: start 1762914532.5273', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:28:53.520158 2025] [proxy_fcgi:error] [pid 60405:tid 60431] [client 165.85.56.95:20895] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914533.5197-1762914532.5273', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:29:54.242242 2025] [proxy_fcgi:error] [pid 60095:tid 60102] [client 165.85.56.95:60588] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:29:55.517816 2025] [proxy_fcgi:error] [pid 60095:tid 60108] [client 165.85.56.95:60588] AH01071: Got error 'PHP message: start 1762914595.1236', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:29:55.902713 2025] [proxy_fcgi:error] [pid 60095:tid 60108] [client 165.85.56.95:60588] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914595.9022-1762914595.1236', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:31:06.912521 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:50266] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44630
[Wed Nov 12 10:32:34.262571 2025] [proxy_fcgi:error] [pid 60096:tid 60140] [client 165.85.56.95:23230] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44630
[Wed Nov 12 10:32:36.425386 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.95:23230] AH01071: Got error 'PHP message: start 1762914755.6972', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:32:36.948264 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.95:23230] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762914756.9479-1762914755.6972', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:40:04.701084 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:35841] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Wed Nov 12 10:40:10.843119 2025] [proxy_fcgi:error] [pid 60095:tid 60102] [client 165.85.56.95:35841] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44634
[Wed Nov 12 10:40:11.910141 2025] [proxy_fcgi:error] [pid 60095:tid 60123] [client 165.85.56.95:35841] AH01071: Got error 'PHP message: start 1762915211.5117', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:40:12.743368 2025] [proxy_fcgi:error] [pid 60095:tid 60123] [client 165.85.56.95:35841] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915212.7427-1762915211.5117', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:42:14.292461 2025] [proxy_fcgi:error] [pid 60095:tid 60119] [client 165.85.56.95:32852] AH01071: Got error 'PHP message: start 1762915333.0405', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:42:15.190305 2025] [proxy_fcgi:error] [pid 60095:tid 60119] [client 165.85.56.95:32852] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915335.1892-1762915333.0405', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:44:16.102444 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:20112] AH01071: Got error 'PHP message: start 1762915455.5605', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:44:16.643583 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:20112] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915456.6429-1762915455.5605', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:46:17.500298 2025] [proxy_fcgi:error] [pid 60097:tid 60171] [client 165.85.56.95:14135] AH01071: Got error 'PHP message: start 1762915576.9677', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:46:18.122916 2025] [proxy_fcgi:error] [pid 60097:tid 60171] [client 165.85.56.95:14135] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915578.1222-1762915576.9677', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:48:19.798758 2025] [proxy_fcgi:error] [pid 12744:tid 12772] [client 165.85.56.95:27262] AH01071: Got error 'PHP message: start 1762915698.4206', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:48:20.376546 2025] [proxy_fcgi:error] [pid 12744:tid 12772] [client 165.85.56.95:27262] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915700.3757-1762915698.4206', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:50:21.233598 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.95:45866] AH01071: Got error 'PHP message: start 1762915820.7007', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:50:21.991886 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.95:45866] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915821.9912-1762915820.7007', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:52:22.902070 2025] [proxy_fcgi:error] [pid 60180:tid 60198] [client 165.85.56.95:64876] AH01071: Got error 'PHP message: start 1762915942.3044', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:52:23.347418 2025] [proxy_fcgi:error] [pid 60180:tid 60198] [client 165.85.56.95:64876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762915943.3465-1762915942.3044', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:54:24.195764 2025] [proxy_fcgi:error] [pid 60097:tid 60164] [client 165.85.56.95:8198] AH01071: Got error 'PHP message: start 1762916063.6397', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:54:24.903847 2025] [proxy_fcgi:error] [pid 60097:tid 60164] [client 165.85.56.95:8198] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916064.9031-1762916063.6397', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:56:25.790780 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.95:58520] AH01071: Got error 'PHP message: start 1762916185.2188', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:56:26.268501 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.95:58520] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916186.2676-1762916185.2188', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:58:26.084483 2025] [proxy_fcgi:error] [pid 60095:tid 60104] [client 165.85.56.95:10683] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:58:27.224078 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.95:13831] AH01071: Got error 'PHP message: start 1762916306.7062', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:58:27.429693 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.95:13831] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916307.4292-1762916306.7062', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 10:58:27.932983 2025] [proxy_fcgi:error] [pid 60095:tid 60112] [client 165.85.56.95:10683] AH01071: Got error 'PHP message: start 1762916307.4315', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 10:58:28.236329 2025] [proxy_fcgi:error] [pid 60095:tid 60112] [client 165.85.56.95:10683] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916308.2354-1762916307.4315', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:00:30.440647 2025] [proxy_fcgi:error] [pid 60096:tid 60127] [client 165.85.56.95:62132] AH01071: Got error 'PHP message: start 1762916428.5727', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:00:30.590842 2025] [proxy_fcgi:error] [pid 60096:tid 60127] [client 165.85.56.95:62132] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916430.5906-1762916428.5727', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:00:38.059399 2025] [proxy_fcgi:error] [pid 60096:tid 60138] [client 165.85.56.95:62132] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44078
[Wed Nov 12 11:01:14.464233 2025] [proxy_fcgi:error] [pid 60405:tid 60426] [client 165.85.56.95:31892] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44078
[Wed Nov 12 11:01:18.443640 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:31892] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44078
[Wed Nov 12 11:01:19.390413 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:31892] AH01071: Got error 'PHP message: start 1762916478.8559', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:01:19.482202 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:31892] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916479.4817-1762916478.8559', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:01:28.113301 2025] [proxy_fcgi:error] [pid 60180:tid 60195] [client 165.85.56.95:22955] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:01:30.636268 2025] [proxy_fcgi:error] [pid 60180:tid 60198] [client 165.85.56.95:22955] AH01071: Got error 'PHP message: start 1762916490.2863', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:01:31.390428 2025] [proxy_fcgi:error] [pid 60180:tid 60198] [client 165.85.56.95:22955] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916491.3898-1762916490.2863', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:03:32.141069 2025] [proxy_fcgi:error] [pid 60095:tid 60111] [client 165.85.56.95:22181] AH01071: Got error 'PHP message: start 1762916611.6757', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:03:32.604981 2025] [proxy_fcgi:error] [pid 60095:tid 60111] [client 165.85.56.95:22181] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916612.6042-1762916611.6757', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:05:33.619800 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:60433] AH01071: Got error 'PHP message: start 1762916732.941', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:05:34.449885 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:60433] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916734.4492-1762916732.941', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:07:35.719923 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.95:25464] AH01071: Got error 'PHP message: start 1762916854.7588', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:07:36.495322 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.95:25464] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762916856.4945-1762916854.7588', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:12:14.476000 2025] [proxy_fcgi:error] [pid 60405:tid 60411] [client 165.85.56.95:5505] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Wed Nov 12 11:12:20.897052 2025] [proxy_fcgi:error] [pid 60405:tid 60424] [client 165.85.56.95:5505] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44635
[Wed Nov 12 11:12:21.757346 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:5505] AH01071: Got error 'PHP message: start 1762917141.5603', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:12:22.546370 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:5505] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917142.5457-1762917141.5603', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 11:14:23.368316 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:29172] AH01071: Got error 'PHP message: start 1762917262.8347', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:14:24.085298 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:29172] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917264.0844-1762917262.8347', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:16:24.955447 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:7244] AH01071: Got error 'PHP message: start 1762917384.4481', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:16:25.635967 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:7244] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917385.6353-1762917384.4481', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:18:28.784798 2025] [proxy_fcgi:error] [pid 60095:tid 60120] [client 165.85.56.95:20797] AH01071: Got error 'PHP message: start 1762917505.9734', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:18:29.452237 2025] [proxy_fcgi:error] [pid 60095:tid 60120] [client 165.85.56.95:20797] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917509.4513-1762917505.9734', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:20:30.486507 2025] [proxy_fcgi:error] [pid 60180:tid 60187] [client 165.85.56.95:63287] AH01071: Got error 'PHP message: start 1762917629.7736', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:20:31.027408 2025] [proxy_fcgi:error] [pid 60180:tid 60187] [client 165.85.56.95:63287] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917631.0265-1762917629.7736', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:22:31.989306 2025] [proxy_fcgi:error] [pid 60096:tid 60130] [client 165.85.56.95:4311] AH01071: Got error 'PHP message: start 1762917751.3868', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:22:32.534444 2025] [proxy_fcgi:error] [pid 60096:tid 60130] [client 165.85.56.95:4311] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917752.5336-1762917751.3868', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:24:33.730523 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:1977] AH01071: Got error 'PHP message: start 1762917873.0397', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:24:34.241842 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:1977] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917874.2408-1762917873.0397', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:26:35.355470 2025] [proxy_fcgi:error] [pid 60097:tid 60150] [client 165.85.56.95:6014] AH01071: Got error 'PHP message: start 1762917994.5886', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:26:35.863644 2025] [proxy_fcgi:error] [pid 60097:tid 60150] [client 165.85.56.95:6014] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762917995.8629-1762917994.5886', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:28:37.008955 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.95:59340] AH01071: Got error 'PHP message: start 1762918116.2037', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:28:37.514974 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.95:59340] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918117.5141-1762918116.2037', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:30:38.445064 2025] [proxy_fcgi:error] [pid 60095:tid 60104] [client 165.85.56.95:9377] AH01071: Got error 'PHP message: start 1762918237.7864', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:30:39.289792 2025] [proxy_fcgi:error] [pid 60095:tid 60104] [client 165.85.56.95:9377] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918239.2888-1762918237.7864', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:32:40.126187 2025] [proxy_fcgi:error] [pid 12744:tid 12760] [client 165.85.56.95:60667] AH01071: Got error 'PHP message: start 1762918359.5885', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:32:40.598218 2025] [proxy_fcgi:error] [pid 12744:tid 12760] [client 165.85.56.95:60667] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918360.5974-1762918359.5885', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:34:41.429858 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:13823] AH01071: Got error 'PHP message: start 1762918480.9346', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:34:41.941965 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:13823] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918481.9413-1762918480.9346', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:36:42.733186 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:7501] AH01071: Got error 'PHP message: start 1762918602.2307', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:36:43.361212 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:7501] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918603.3605-1762918602.2307', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:38:44.168405 2025] [proxy_fcgi:error] [pid 60405:tid 60426] [client 165.85.56.95:50396] AH01071: Got error 'PHP message: start 1762918723.6709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:38:44.914073 2025] [proxy_fcgi:error] [pid 60405:tid 60426] [client 165.85.56.95:50396] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918724.9134-1762918723.6709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:40:45.967053 2025] [proxy_fcgi:error] [pid 60095:tid 60121] [client 165.85.56.95:25257] AH01071: Got error 'PHP message: start 1762918845.2206', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:40:46.633552 2025] [proxy_fcgi:error] [pid 60095:tid 60121] [client 165.85.56.95:25257] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918846.6325-1762918845.2206', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:42:47.779111 2025] [proxy_fcgi:error] [pid 12744:tid 12749] [client 165.85.56.95:54905] AH01071: Got error 'PHP message: start 1762918966.9413', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:42:48.441823 2025] [proxy_fcgi:error] [pid 12744:tid 12749] [client 165.85.56.95:54905] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762918968.4409-1762918966.9413', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:44:49.915149 2025] [proxy_fcgi:error] [pid 60095:tid 60109] [client 165.85.56.95:56642] AH01071: Got error 'PHP message: start 1762919089.0484', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:44:50.825253 2025] [proxy_fcgi:error] [pid 60095:tid 60109] [client 165.85.56.95:56642] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919090.8243-1762919089.0484', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:46:51.911297 2025] [proxy_fcgi:error] [pid 12744:tid 12763] [client 165.85.56.95:26943] AH01071: Got error 'PHP message: start 1762919211.1422', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:46:52.649761 2025] [proxy_fcgi:error] [pid 12744:tid 12763] [client 165.85.56.95:26943] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919212.6491-1762919211.1422', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:48:53.941510 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:11402] AH01071: Got error 'PHP message: start 1762919332.9655', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:48:54.765349 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:11402] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919334.7647-1762919332.9655', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:50:56.085486 2025] [proxy_fcgi:error] [pid 60096:tid 60128] [client 165.85.56.95:21693] AH01071: Got error 'PHP message: start 1762919455.2712', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:50:56.653323 2025] [proxy_fcgi:error] [pid 60096:tid 60128] [client 165.85.56.95:21693] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919456.6525-1762919455.2712', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:52:57.515781 2025] [proxy_fcgi:error] [pid 60180:tid 60190] [client 165.85.56.95:25464] AH01071: Got error 'PHP message: start 1762919576.9833', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:52:58.010014 2025] [proxy_fcgi:error] [pid 60180:tid 60190] [client 165.85.56.95:25464] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919578.0093-1762919576.9833', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:54:58.891521 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:1550] AH01071: Got error 'PHP message: start 1762919698.3277', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:54:59.616927 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:1550] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919699.6161-1762919698.3277', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:57:00.451157 2025] [proxy_fcgi:error] [pid 12744:tid 12763] [client 165.85.56.95:25502] AH01071: Got error 'PHP message: start 1762919819.9157', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:57:01.197437 2025] [proxy_fcgi:error] [pid 12744:tid 12763] [client 165.85.56.95:25502] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919821.1966-1762919819.9157', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:59:02.185641 2025] [proxy_fcgi:error] [pid 12744:tid 12761] [client 165.85.56.95:52431] AH01071: Got error 'PHP message: start 1762919941.691', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 11:59:02.945286 2025] [proxy_fcgi:error] [pid 12744:tid 12761] [client 165.85.56.95:52431] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762919942.9437-1762919941.691', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:01:04.036554 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:5424] AH01071: Got error 'PHP message: start 1762920063.2666', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:01:04.517085 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:5424] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920064.5164-1762920063.2666', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:03:05.627744 2025] [proxy_fcgi:error] [pid 60405:tid 60432] [client 165.85.56.95:38386] AH01071: Got error 'PHP message: start 1762920184.8125', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:03:06.393726 2025] [proxy_fcgi:error] [pid 60405:tid 60432] [client 165.85.56.95:38386] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920186.3931-1762920184.8125', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:05:07.816665 2025] [proxy_fcgi:error] [pid 60095:tid 60121] [client 165.85.56.95:64889] AH01071: Got error 'PHP message: start 1762920306.8773', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:05:08.413925 2025] [proxy_fcgi:error] [pid 60095:tid 60121] [client 165.85.56.95:64889] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920308.4131-1762920306.8773', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:07:09.342187 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.95:14938] AH01071: Got error 'PHP message: start 1762920428.7363', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:07:09.862111 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.95:14938] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920429.8612-1762920428.7363', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:09:11.084586 2025] [proxy_fcgi:error] [pid 12744:tid 12771] [client 165.85.56.95:48979] AH01071: Got error 'PHP message: start 1762920550.1895', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:09:12.020874 2025] [proxy_fcgi:error] [pid 12744:tid 12771] [client 165.85.56.95:48979] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920552.0202-1762920550.1895', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:11:13.809569 2025] [proxy_fcgi:error] [pid 60096:tid 60136] [client 165.85.56.95:38720] AH01071: Got error 'PHP message: start 1762920672.475', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:11:14.839603 2025] [proxy_fcgi:error] [pid 60096:tid 60136] [client 165.85.56.95:38720] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920674.8388-1762920672.475', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:13:16.148851 2025] [proxy_fcgi:error] [pid 60180:tid 60205] [client 165.85.56.95:55484] AH01071: Got error 'PHP message: start 1762920795.1934', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:13:16.732893 2025] [proxy_fcgi:error] [pid 60180:tid 60205] [client 165.85.56.95:55484] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920796.7322-1762920795.1934', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:15:19.262900 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.95:25105] AH01071: Got error 'PHP message: start 1762920917.2199', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:15:19.910276 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.95:25105] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762920919.9094-1762920917.2199', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:17:20.962247 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:17937] AH01071: Got error 'PHP message: start 1762921040.228', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:17:21.826103 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.95:17937] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921041.8253-1762921040.228', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:19:26.158445 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.95:4819] AH01071: Got error 'PHP message: start 1762921162.2948', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:19:48.953850 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.95:4819] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921188.9529-1762921162.2948', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:21:49.869313 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.95:43226] AH01071: Got error 'PHP message: start 1762921309.2632', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:21:50.466911 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.95:43226] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921310.4661-1762921309.2632', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:23:52.095824 2025] [proxy_fcgi:error] [pid 12744:tid 12751] [client 165.85.56.95:15232] AH01071: Got error 'PHP message: start 1762921430.8025', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:23:52.763064 2025] [proxy_fcgi:error] [pid 12744:tid 12751] [client 165.85.56.95:15232] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921432.7623-1762921430.8025', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:25:54.800308 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:54070] AH01071: Got error 'PHP message: start 1762921553.2331', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:25:55.350460 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:54070] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921555.3497-1762921553.2331', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:28:00.756542 2025] [proxy_fcgi:error] [pid 60097:tid 60170] [client 165.85.56.95:23718] AH01071: Got error 'PHP message: start 1762921675.6536', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:28:01.481371 2025] [proxy_fcgi:error] [pid 60097:tid 60170] [client 165.85.56.95:23718] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921681.4806-1762921675.6536', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:30:02.768983 2025] [proxy_fcgi:error] [pid 60097:tid 60177] [client 165.85.56.95:59943] AH01071: Got error 'PHP message: start 1762921801.9481', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:30:03.229880 2025] [proxy_fcgi:error] [pid 60097:tid 60177] [client 165.85.56.95:59943] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921803.2291-1762921801.9481', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:32:04.302941 2025] [proxy_fcgi:error] [pid 60405:tid 60422] [client 165.85.56.95:16457] AH01071: Got error 'PHP message: start 1762921923.5336', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:32:04.816089 2025] [proxy_fcgi:error] [pid 60405:tid 60422] [client 165.85.56.95:16457] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762921924.8154-1762921923.5336', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:34:06.289849 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:24963] AH01071: Got error 'PHP message: start 1762922045.1517', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:34:06.864871 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:24963] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762922046.8642-1762922045.1517', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:36:08.196847 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.95:55967] AH01071: Got error 'PHP message: start 1762922167.3362', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:36:08.928467 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.95:55967] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762922168.9277-1762922167.3362', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:38:10.225460 2025] [proxy_fcgi:error] [pid 12744:tid 12768] [client 165.85.56.95:1879] AH01071: Got error 'PHP message: start 1762922289.2555', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:38:10.729297 2025] [proxy_fcgi:error] [pid 12744:tid 12768] [client 165.85.56.95:1879] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762922290.7287-1762922289.2555', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:40:12.338160 2025] [proxy_fcgi:error] [pid 60180:tid 60188] [client 165.85.56.95:39829] AH01071: Got error 'PHP message: start 1762922411.1561', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:40:13.117052 2025] [proxy_fcgi:error] [pid 60180:tid 60188] [client 165.85.56.95:39829] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762922413.1164-1762922411.1561', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:42:14.254245 2025] [proxy_fcgi:error] [pid 60405:tid 60423] [client 165.85.56.95:56874] AH01071: Got error 'PHP message: start 1762922533.6218', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:42:14.880308 2025] [proxy_fcgi:error] [pid 60405:tid 60423] [client 165.85.56.95:56874] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762922534.8795-1762922533.6218', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:44:15.984442 2025] [proxy_fcgi:error] [pid 60095:tid 60102] [client 165.85.56.95:64448] AH01071: Got error 'PHP message: start 1762922655.2432', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 12:44:16.741009 2025] [proxy_fcgi:error] [pid 60095:tid 60102] [client 165.85.56.95:64448] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762922656.7403-1762922655.2432', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:32:04.291320 2025] [proxy_fcgi:error] [pid 60180:tid 60191] [client 165.85.56.95:2050] AH01071: Got error 'PHP message: start 1762925523.6643', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:32:04.960090 2025] [proxy_fcgi:error] [pid 60180:tid 60191] [client 165.85.56.95:2050] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762925524.9594-1762925523.6643', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:34:06.006095 2025] [proxy_fcgi:error] [pid 60096:tid 60140] [client 165.85.56.95:17373] AH01071: Got error 'PHP message: start 1762925645.4192', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:34:06.844580 2025] [proxy_fcgi:error] [pid 60096:tid 60140] [client 165.85.56.95:17373] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762925646.8436-1762925645.4192', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:36:08.056824 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:16876] AH01071: Got error 'PHP message: start 1762925767.2741', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:36:08.599252 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:16876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762925768.5977-1762925767.2741', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:38:09.431746 2025] [proxy_fcgi:error] [pid 60097:tid 60163] [client 165.85.56.95:60938] AH01071: Got error 'PHP message: start 1762925888.9146', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:38:10.105890 2025] [proxy_fcgi:error] [pid 60097:tid 60163] [client 165.85.56.95:60938] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762925890.1052-1762925888.9146', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:40:10.949203 2025] [proxy_fcgi:error] [pid 60405:tid 60417] [client 165.85.56.95:15638] AH01071: Got error 'PHP message: start 1762926010.4143', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:40:11.671718 2025] [proxy_fcgi:error] [pid 60405:tid 60417] [client 165.85.56.95:15638] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926011.6709-1762926010.4143', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:42:12.486451 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:2861] AH01071: Got error 'PHP message: start 1762926131.9323', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:42:12.996078 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:2861] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926132.9954-1762926131.9323', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:44:13.829398 2025] [proxy_fcgi:error] [pid 60405:tid 60431] [client 165.85.56.95:2109] AH01071: Got error 'PHP message: start 1762926253.2634', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:44:14.716309 2025] [proxy_fcgi:error] [pid 60405:tid 60431] [client 165.85.56.95:2109] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926254.7155-1762926253.2634', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:46:15.539621 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.95:25302] AH01071: Got error 'PHP message: start 1762926375.0284', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:46:16.132590 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.95:25302] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926376.1319-1762926375.0284', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:48:17.112588 2025] [proxy_fcgi:error] [pid 60097:tid 60172] [client 165.85.56.95:23850] AH01071: Got error 'PHP message: start 1762926496.4699', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:48:17.592996 2025] [proxy_fcgi:error] [pid 60097:tid 60172] [client 165.85.56.95:23850] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926497.5922-1762926496.4699', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:50:18.389009 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:32872] AH01071: Got error 'PHP message: start 1762926617.9126', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:50:18.857538 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:32872] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926618.8569-1762926617.9126', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:52:19.763960 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:36998] AH01071: Got error 'PHP message: start 1762926739.1762', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:52:20.365520 2025] [proxy_fcgi:error] [pid 60405:tid 60414] [client 165.85.56.95:36998] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926740.3648-1762926739.1762', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:54:21.193226 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.95:15899] AH01071: Got error 'PHP message: start 1762926860.6519', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:54:21.992011 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.95:15899] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926861.9913-1762926860.6519', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:56:22.829056 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:17365] AH01071: Got error 'PHP message: start 1762926982.295', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:56:23.337087 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:17365] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762926983.3364-1762926982.295', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:58:24.316550 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.95:62666] AH01071: Got error 'PHP message: start 1762927103.8117', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 13:58:24.801893 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.95:62666] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927104.801-1762927103.8117', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:00:26.324117 2025] [proxy_fcgi:error] [pid 60097:tid 60171] [client 165.85.56.95:54054] AH01071: Got error 'PHP message: start 1762927225.8305', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:00:26.764283 2025] [proxy_fcgi:error] [pid 60097:tid 60171] [client 165.85.56.95:54054] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927226.7636-1762927225.8305', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:02:27.652336 2025] [proxy_fcgi:error] [pid 60095:tid 60123] [client 165.85.56.95:44196] AH01071: Got error 'PHP message: start 1762927347.0828', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:02:28.377391 2025] [proxy_fcgi:error] [pid 60095:tid 60123] [client 165.85.56.95:44196] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927348.3766-1762927347.0828', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:04:29.213656 2025] [proxy_fcgi:error] [pid 60405:tid 60428] [client 165.85.56.95:55945] AH01071: Got error 'PHP message: start 1762927468.6873', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:04:29.957330 2025] [proxy_fcgi:error] [pid 60405:tid 60428] [client 165.85.56.95:55945] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927469.9564-1762927468.6873', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:06:30.903058 2025] [proxy_fcgi:error] [pid 60096:tid 60151] [client 165.85.56.95:50452] AH01071: Got error 'PHP message: start 1762927590.4267', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:06:31.536237 2025] [proxy_fcgi:error] [pid 60096:tid 60151] [client 165.85.56.95:50452] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927591.5356-1762927590.4267', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:08:32.577433 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:31327] AH01071: Got error 'PHP message: start 1762927711.8723', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:08:33.053529 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:31327] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927713.0527-1762927711.8723', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:10:33.897091 2025] [proxy_fcgi:error] [pid 60096:tid 60140] [client 165.85.56.95:31536] AH01071: Got error 'PHP message: start 1762927833.3631', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:10:34.581164 2025] [proxy_fcgi:error] [pid 60096:tid 60140] [client 165.85.56.95:31536] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927834.5804-1762927833.3631', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:12:35.513760 2025] [proxy_fcgi:error] [pid 60097:tid 60149] [client 165.85.56.95:43555] AH01071: Got error 'PHP message: start 1762927954.8677', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:12:36.091275 2025] [proxy_fcgi:error] [pid 60097:tid 60149] [client 165.85.56.95:43555] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762927956.0907-1762927954.8677', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:14:37.206311 2025] [proxy_fcgi:error] [pid 60180:tid 60189] [client 165.85.56.95:7645] AH01071: Got error 'PHP message: start 1762928076.4629', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:14:37.749195 2025] [proxy_fcgi:error] [pid 60180:tid 60189] [client 165.85.56.95:7645] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928077.7485-1762928076.4629', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:16:40.854936 2025] [proxy_fcgi:error] [pid 60405:tid 60430] [client 165.85.56.95:41840] AH01071: Got error 'PHP message: start 1762928198.2235', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:16:41.411092 2025] [proxy_fcgi:error] [pid 60405:tid 60430] [client 165.85.56.95:41840] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928201.4105-1762928198.2235', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:18:42.322335 2025] [proxy_fcgi:error] [pid 60097:tid 60160] [client 165.85.56.95:18011] AH01071: Got error 'PHP message: start 1762928321.7353', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:18:42.797080 2025] [proxy_fcgi:error] [pid 60097:tid 60160] [client 165.85.56.95:18011] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928322.7964-1762928321.7353', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:20:43.794931 2025] [proxy_fcgi:error] [pid 60180:tid 60200] [client 165.85.56.95:65125] AH01071: Got error 'PHP message: start 1762928443.0767', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:20:44.267457 2025] [proxy_fcgi:error] [pid 60180:tid 60200] [client 165.85.56.95:65125] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928444.2666-1762928443.0767', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:22:45.682109 2025] [proxy_fcgi:error] [pid 60097:tid 60164] [client 165.85.56.95:36270] AH01071: Got error 'PHP message: start 1762928564.5559', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:22:46.510751 2025] [proxy_fcgi:error] [pid 60097:tid 60164] [client 165.85.56.95:36270] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928566.51-1762928564.5559', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:24:47.522966 2025] [proxy_fcgi:error] [pid 60097:tid 60168] [client 165.85.56.95:33015] AH01071: Got error 'PHP message: start 1762928686.8096', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:24:48.105616 2025] [proxy_fcgi:error] [pid 60097:tid 60168] [client 165.85.56.95:33015] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928688.1049-1762928686.8096', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:26:49.395692 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.95:25172] AH01071: Got error 'PHP message: start 1762928808.4052', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:26:50.092247 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.95:25172] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928810.0911-1762928808.4052', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:28:51.169058 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.95:22521] AH01071: Got error 'PHP message: start 1762928930.408', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:28:51.659295 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.95:22521] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762928931.6585-1762928930.408', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:30:52.390328 2025] [proxy_fcgi:error] [pid 60096:tid 60143] [client 165.85.56.95:40933] AH01071: Got error 'PHP message: start 1762929051.9505', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:30:52.809384 2025] [proxy_fcgi:error] [pid 60096:tid 60143] [client 165.85.56.95:40933] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929052.8087-1762929051.9505', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:32:53.727897 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.95:27341] AH01071: Got error 'PHP message: start 1762929173.168', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:32:54.492232 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.95:27341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929174.4913-1762929173.168', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:34:55.551916 2025] [proxy_fcgi:error] [pid 60097:tid 60166] [client 165.85.56.95:25728] AH01071: Got error 'PHP message: start 1762929294.8007', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:34:56.337802 2025] [proxy_fcgi:error] [pid 60097:tid 60166] [client 165.85.56.95:25728] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929296.3371-1762929294.8007', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:36:57.169065 2025] [proxy_fcgi:error] [pid 60095:tid 60107] [client 165.85.56.95:41759] AH01071: Got error 'PHP message: start 1762929416.6329', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:36:57.642399 2025] [proxy_fcgi:error] [pid 60095:tid 60107] [client 165.85.56.95:41759] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929417.6418-1762929416.6329', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:38:58.434637 2025] [proxy_fcgi:error] [pid 60180:tid 60195] [client 165.85.56.95:2704] AH01071: Got error 'PHP message: start 1762929537.948', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:38:59.187829 2025] [proxy_fcgi:error] [pid 60180:tid 60195] [client 165.85.56.95:2704] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929539.1872-1762929537.948', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:40:59.945256 2025] [proxy_fcgi:error] [pid 60095:tid 60100] [client 165.85.56.95:35323] AH01071: Got error 'PHP message: start 1762929659.4975', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:41:00.437225 2025] [proxy_fcgi:error] [pid 60095:tid 60100] [client 165.85.56.95:35323] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929660.4365-1762929659.4975', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:43:03.684752 2025] [proxy_fcgi:error] [pid 12744:tid 12764] [client 165.85.56.95:35504] AH01071: Got error 'PHP message: start 1762929780.7286', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:43:04.474586 2025] [proxy_fcgi:error] [pid 12744:tid 12764] [client 165.85.56.95:35504] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929784.4738-1762929780.7286', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:45:05.245001 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:18876] AH01071: Got error 'PHP message: start 1762929904.7747', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:45:05.700260 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:18876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762929905.6996-1762929904.7747', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:47:06.534914 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:51614] AH01071: Got error 'PHP message: start 1762930026.0141', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:47:07.180015 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:51614] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930027.1793-1762930026.0141', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:49:08.231582 2025] [proxy_fcgi:error] [pid 60180:tid 60204] [client 165.85.56.95:54168] AH01071: Got error 'PHP message: start 1762930147.4642', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:49:08.830704 2025] [proxy_fcgi:error] [pid 60180:tid 60204] [client 165.85.56.95:54168] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930148.8299-1762930147.4642', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:49:29.855331 2025] [proxy_fcgi:error] [pid 60405:tid 60428] [client 165.85.56.6:27451] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Wed Nov 12 14:49:37.554025 2025] [proxy_fcgi:error] [pid 60405:tid 60419] [client 165.85.56.6:63059] AH01071: Got error 'PHP message: start 1762930173.0114', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 14:49:38.006963 2025] [proxy_fcgi:error] [pid 60405:tid 60419] [client 165.85.56.6:63059] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930178.0065-1762930173.0114', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 14:51:10.008138 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:40947] AH01071: Got error 'PHP message: start 1762930269.1398', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:51:10.921195 2025] [proxy_fcgi:error] [pid 60095:tid 60105] [client 165.85.56.95:40947] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930270.9204-1762930269.1398', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:51:39.153211 2025] [proxy_fcgi:error] [pid 60405:tid 60427] [client 165.85.56.6:22398] AH01071: Got error 'PHP message: start 1762930298.3616', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:51:39.629991 2025] [proxy_fcgi:error] [pid 60405:tid 60427] [client 165.85.56.6:22398] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930299.6296-1762930298.3616', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:53:41.340350 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.6:61939] AH01071: Got error 'PHP message: start 1762930420.3524', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:53:41.997198 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.6:61939] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930421.9964-1762930420.3524', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:55:07.369689 2025] [proxy_fcgi:error] [pid 60097:tid 60149] [client 165.85.56.6:48167] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 14:55:16.788804 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.6:6984] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/calendar.php
[Wed Nov 12 14:55:17.581874 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.6:55156] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/calendar.php
[Wed Nov 12 14:55:22.616188 2025] [proxy_fcgi:error] [pid 12744:tid 12754] [client 165.85.56.6:55156] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/calendar.php
[Wed Nov 12 14:55:23.670284 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.6:55156] AH01071: Got error 'PHP message: start 1762930523.2252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 14:55:24.347843 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.6:55156] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930524.3475-1762930523.2252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 14:55:41.966974 2025] [proxy_fcgi:error] [pid 60096:tid 60143] [client 165.85.56.95:64678] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Wed Nov 12 14:55:52.518512 2025] [proxy_fcgi:error] [pid 60097:tid 60147] [client 165.85.56.95:46797] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44636
[Wed Nov 12 14:56:14.253629 2025] [proxy_fcgi:error] [pid 60096:tid 60128] [client 165.85.56.95:18926] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44637
[Wed Nov 12 14:57:25.621495 2025] [proxy_fcgi:error] [pid 60180:tid 60201] [client 165.85.56.6:55844] AH01071: Got error 'PHP message: start 1762930644.692', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:57:26.270589 2025] [proxy_fcgi:error] [pid 60180:tid 60201] [client 165.85.56.6:55844] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930646.2702-1762930644.692', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:59:28.623866 2025] [proxy_fcgi:error] [pid 60096:tid 60129] [client 165.85.56.6:50559] AH01071: Got error 'PHP message: start 1762930767.6251', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 14:59:29.027934 2025] [proxy_fcgi:error] [pid 60096:tid 60129] [client 165.85.56.6:50559] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930769.0275-1762930767.6251', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:01:30.608672 2025] [proxy_fcgi:error] [pid 12744:tid 12758] [client 165.85.56.6:2107] AH01071: Got error 'PHP message: start 1762930889.7476', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:01:31.027637 2025] [proxy_fcgi:error] [pid 12744:tid 12758] [client 165.85.56.6:2107] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930891.0273-1762930889.7476', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:01:33.919731 2025] [proxy_fcgi:error] [pid 60097:tid 60165] [client 165.85.56.95:25468] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Wed Nov 12 15:01:41.392152 2025] [proxy_fcgi:error] [pid 60097:tid 60166] [client 165.85.56.95:15210] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44638
[Wed Nov 12 15:02:02.897883 2025] [proxy_fcgi:error] [pid 12744:tid 12756] [client 165.85.56.95:14741] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44639
[Wed Nov 12 15:02:07.517774 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:14741] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44639
[Wed Nov 12 15:02:07.518050 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.6:10482] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:08.439324 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.95:14741] AH01071: Got error 'PHP message: start 1762930928.1806', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:08.728672 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.6:10482] AH01071: Got error 'PHP message: start 1762930928.2052', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:09.341031 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.95:14741] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930929.3403-1762930928.1806', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:09.461218 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.6:10482] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930929.4608-1762930928.2052', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:25.420848 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 165.85.56.6:50751] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:26.525705 2025] [proxy_fcgi:error] [pid 60096:tid 60153] [client 165.85.56.6:50751] AH01071: Got error 'PHP message: start 1762930946.0981', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:02:27.401240 2025] [proxy_fcgi:error] [pid 60096:tid 60153] [client 165.85.56.6:50751] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762930947.4006-1762930946.0981', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:04:11.383644 2025] [proxy_fcgi:error] [pid 12744:tid 12751] [client 165.85.56.95:2597] AH01071: Got error 'PHP message: start 1762931049.5987', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:04:11.982841 2025] [proxy_fcgi:error] [pid 12744:tid 12751] [client 165.85.56.95:2597] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931051.9822-1762931049.5987', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:04:28.686116 2025] [proxy_fcgi:error] [pid 60096:tid 60129] [client 165.85.56.6:22182] AH01071: Got error 'PHP message: start 1762931067.7114', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:04:29.261753 2025] [proxy_fcgi:error] [pid 60096:tid 60129] [client 165.85.56.6:22182] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931069.2612-1762931067.7114', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:06:12.803385 2025] [proxy_fcgi:error] [pid 60097:tid 60163] [client 165.85.56.95:29152] AH01071: Got error 'PHP message: start 1762931172.3445', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:06:13.290627 2025] [proxy_fcgi:error] [pid 60097:tid 60163] [client 165.85.56.95:29152] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931173.2897-1762931172.3445', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:06:26.627687 2025] [proxy_fcgi:error] [pid 60405:tid 60409] [client 165.85.56.6:26162] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:06:27.575734 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.6:26162] AH01071: Got error 'PHP message: start 1762931187.1958', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:06:28.371337 2025] [proxy_fcgi:error] [pid 60405:tid 60418] [client 165.85.56.6:26162] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931188.3709-1762931187.1958', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:08:14.106236 2025] [proxy_fcgi:error] [pid 60180:tid 60202] [client 165.85.56.95:17916] AH01071: Got error 'PHP message: start 1762931293.6021', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:08:14.622543 2025] [proxy_fcgi:error] [pid 60180:tid 60202] [client 165.85.56.95:17916] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931294.6218-1762931293.6021', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:08:29.744136 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.6:20420] AH01071: Got error 'PHP message: start 1762931308.8665', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:08:30.478208 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.6:20420] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931310.4776-1762931308.8665', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:10:15.416970 2025] [proxy_fcgi:error] [pid 60405:tid 60423] [client 165.85.56.95:29308] AH01071: Got error 'PHP message: start 1762931414.897', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:10:15.886022 2025] [proxy_fcgi:error] [pid 60405:tid 60423] [client 165.85.56.95:29308] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931415.8852-1762931414.897', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:10:32.741686 2025] [proxy_fcgi:error] [pid 60097:tid 60174] [client 165.85.56.6:5215] AH01071: Got error 'PHP message: start 1762931431.5045', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:10:33.319382 2025] [proxy_fcgi:error] [pid 60097:tid 60174] [client 165.85.56.6:5215] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931433.3182-1762931431.5045', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:12:16.713650 2025] [proxy_fcgi:error] [pid 60097:tid 60154] [client 165.85.56.95:2300] AH01071: Got error 'PHP message: start 1762931536.2134', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:12:17.190618 2025] [proxy_fcgi:error] [pid 60097:tid 60154] [client 165.85.56.95:2300] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931537.19-1762931536.2134', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:12:34.667048 2025] [proxy_fcgi:error] [pid 60097:tid 60172] [client 165.85.56.6:45486] AH01071: Got error 'PHP message: start 1762931553.9148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:12:35.147821 2025] [proxy_fcgi:error] [pid 60097:tid 60172] [client 165.85.56.6:45486] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931555.1474-1762931553.9148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:14:18.108586 2025] [proxy_fcgi:error] [pid 60405:tid 60425] [client 165.85.56.95:5469] AH01071: Got error 'PHP message: start 1762931657.4812', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:14:18.787628 2025] [proxy_fcgi:error] [pid 60405:tid 60425] [client 165.85.56.95:5469] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931658.7869-1762931657.4812', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:14:37.232117 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.6:35263] AH01071: Got error 'PHP message: start 1762931676.3015', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:14:37.889576 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.6:35263] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931677.8891-1762931676.3015', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:16:19.699231 2025] [proxy_fcgi:error] [pid 60097:tid 60161] [client 165.85.56.95:26515] AH01071: Got error 'PHP message: start 1762931779.0815', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:16:20.353783 2025] [proxy_fcgi:error] [pid 60097:tid 60161] [client 165.85.56.95:26515] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931780.353-1762931779.0815', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:16:39.655329 2025] [proxy_fcgi:error] [pid 60097:tid 60144] [client 165.85.56.6:43948] AH01071: Got error 'PHP message: start 1762931798.8662', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:16:40.337655 2025] [proxy_fcgi:error] [pid 60097:tid 60144] [client 165.85.56.6:43948] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931800.3371-1762931798.8662', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:18:21.169185 2025] [proxy_fcgi:error] [pid 60095:tid 60123] [client 165.85.56.95:26177] AH01071: Got error 'PHP message: start 1762931900.6801', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:18:21.831594 2025] [proxy_fcgi:error] [pid 60095:tid 60123] [client 165.85.56.95:26177] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931901.831-1762931900.6801', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:18:41.580556 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.6:34499] AH01071: Got error 'PHP message: start 1762931920.9607', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:18:42.086687 2025] [proxy_fcgi:error] [pid 12744:tid 12766] [client 165.85.56.6:34499] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762931922.0863-1762931920.9607', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:20:22.623192 2025] [proxy_fcgi:error] [pid 60097:tid 60147] [client 165.85.56.95:17598] AH01071: Got error 'PHP message: start 1762932022.1547', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:20:23.259817 2025] [proxy_fcgi:error] [pid 60097:tid 60147] [client 165.85.56.95:17598] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932023.259-1762932022.1547', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:20:43.984815 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.6:40389] AH01071: Got error 'PHP message: start 1762932043.2336', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:20:44.738880 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.6:40389] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932044.7382-1762932043.2336', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:22:25.846501 2025] [proxy_fcgi:error] [pid 60180:tid 60187] [client 165.85.56.95:9782] AH01071: Got error 'PHP message: start 1762932143.5712', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:22:26.658432 2025] [proxy_fcgi:error] [pid 60180:tid 60187] [client 165.85.56.95:9782] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932146.6574-1762932143.5712', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:22:46.192647 2025] [proxy_fcgi:error] [pid 12744:tid 12748] [client 165.85.56.6:30023] AH01071: Got error 'PHP message: start 1762932165.3807', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:22:46.656288 2025] [proxy_fcgi:error] [pid 12744:tid 12748] [client 165.85.56.6:30023] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932166.6558-1762932165.3807', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:24:27.572508 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:57268] AH01071: Got error 'PHP message: start 1762932266.9646', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:24:28.048895 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:57268] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932268.0482-1762932266.9646', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:24:48.365649 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.6:13608] AH01071: Got error 'PHP message: start 1762932287.3299', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:24:48.935635 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.6:13608] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932288.9352-1762932287.3299', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:26:29.178099 2025] [proxy_fcgi:error] [pid 60096:tid 60155] [client 165.85.56.95:13283] AH01071: Got error 'PHP message: start 1762932388.5293', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:26:29.949086 2025] [proxy_fcgi:error] [pid 60096:tid 60155] [client 165.85.56.95:13283] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932389.9484-1762932388.5293', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:26:50.327169 2025] [proxy_fcgi:error] [pid 12744:tid 12756] [client 165.85.56.6:18065] AH01071: Got error 'PHP message: start 1762932409.6754', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:26:51.025906 2025] [proxy_fcgi:error] [pid 12744:tid 12756] [client 165.85.56.6:18065] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932411.0254-1762932409.6754', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:28:30.895821 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.95:7562] AH01071: Got error 'PHP message: start 1762932510.2527', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:28:31.336179 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.95:7562] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932511.3353-1762932510.2527', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:28:52.220176 2025] [proxy_fcgi:error] [pid 60096:tid 60130] [client 165.85.56.6:52961] AH01071: Got error 'PHP message: start 1762932531.6292', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:28:52.689140 2025] [proxy_fcgi:error] [pid 60096:tid 60130] [client 165.85.56.6:52961] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932532.6886-1762932531.6292', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:30:32.177015 2025] [proxy_fcgi:error] [pid 60180:tid 60192] [client 165.85.56.95:26565] AH01071: Got error 'PHP message: start 1762932631.6289', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:30:32.662475 2025] [proxy_fcgi:error] [pid 60180:tid 60192] [client 165.85.56.95:26565] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932632.6619-1762932631.6289', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:30:54.237964 2025] [proxy_fcgi:error] [pid 60096:tid 60134] [client 165.85.56.6:28334] AH01071: Got error 'PHP message: start 1762932653.3335', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:30:54.991367 2025] [proxy_fcgi:error] [pid 60096:tid 60134] [client 165.85.56.6:28334] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932654.9905-1762932653.3335', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:32:33.520616 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:16031] AH01071: Got error 'PHP message: start 1762932752.962', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:32:33.957324 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:16031] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932753.956-1762932752.962', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:32:57.104384 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.6:33031] AH01071: Got error 'PHP message: start 1762932775.7694', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:32:57.766296 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.6:33031] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932777.7657-1762932775.7694', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:33:06.934871 2025] [proxy_fcgi:error] [pid 60405:tid 60428] [client 165.85.56.95:6117] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:33:09.190108 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:6117] AH01071: Got error 'PHP message: start 1762932788.6573', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:33:09.958986 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:6117] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932789.9585-1762932788.6573', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:34:59.035966 2025] [proxy_fcgi:error] [pid 12744:tid 12755] [client 165.85.56.6:16628] AH01071: Got error 'PHP message: start 1762932898.3945', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:34:59.782157 2025] [proxy_fcgi:error] [pid 12744:tid 12755] [client 165.85.56.6:16628] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932899.7817-1762932898.3945', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:35:10.843950 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:29236] AH01071: Got error 'PHP message: start 1762932910.2667', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:35:11.335379 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:29236] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762932911.3349-1762932910.2667', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:37:01.084689 2025] [proxy_fcgi:error] [pid 60096:tid 60134] [client 165.85.56.6:11399] AH01071: Got error 'PHP message: start 1762933020.3679', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:37:01.914850 2025] [proxy_fcgi:error] [pid 60096:tid 60134] [client 165.85.56.6:11399] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933021.9143-1762933020.3679', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:37:12.250266 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.95:24147] AH01071: Got error 'PHP message: start 1762933031.6358', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:37:12.800171 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.95:24147] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933032.7997-1762933031.6358', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:39:04.055663 2025] [proxy_fcgi:error] [pid 60097:tid 60152] [client 165.85.56.6:24447] AH01071: Got error 'PHP message: start 1762933143.0908', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:39:04.600054 2025] [proxy_fcgi:error] [pid 60097:tid 60152] [client 165.85.56.6:24447] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933144.5997-1762933143.0908', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:39:14.580107 2025] [proxy_fcgi:error] [pid 60180:tid 60184] [client 165.85.56.95:4247] AH01071: Got error 'PHP message: start 1762933153.2648', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:39:15.446060 2025] [proxy_fcgi:error] [pid 60180:tid 60184] [client 165.85.56.95:4247] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933155.4456-1762933153.2648', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:41:06.132145 2025] [proxy_fcgi:error] [pid 60180:tid 60183] [client 165.85.56.6:38478] AH01071: Got error 'PHP message: start 1762933265.2706', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:41:06.842639 2025] [proxy_fcgi:error] [pid 60180:tid 60183] [client 165.85.56.6:38478] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933266.8422-1762933265.2706', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:41:17.033688 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.95:36215] AH01071: Got error 'PHP message: start 1762933275.7791', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:41:17.576053 2025] [proxy_fcgi:error] [pid 60096:tid 60132] [client 165.85.56.95:36215] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933277.5756-1762933275.7791', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:43:08.853200 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.6:20009] AH01071: Got error 'PHP message: start 1762933387.5491', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:43:09.492659 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.6:20009] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933389.4921-1762933387.5491', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:43:18.832850 2025] [proxy_fcgi:error] [pid 60096:tid 60155] [client 165.85.56.95:52063] AH01071: Got error 'PHP message: start 1762933397.8744', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:43:19.599174 2025] [proxy_fcgi:error] [pid 60096:tid 60155] [client 165.85.56.95:52063] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933399.5983-1762933397.8744', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:43:39.762109 2025] [proxy_fcgi:error] [pid 12744:tid 12758] [client 165.85.56.95:63372] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:43:41.500301 2025] [proxy_fcgi:error] [pid 12744:tid 12772] [client 165.85.56.95:63372] AH01071: Got error 'PHP message: start 1762933420.6891', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:43:42.198708 2025] [proxy_fcgi:error] [pid 12744:tid 12772] [client 165.85.56.95:63372] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933422.1982-1762933420.6891', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:45:11.311495 2025] [proxy_fcgi:error] [pid 60097:tid 60160] [client 165.85.56.6:54113] AH01071: Got error 'PHP message: start 1762933510.2266', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:45:12.007338 2025] [proxy_fcgi:error] [pid 60097:tid 60160] [client 165.85.56.6:54113] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933512.0068-1762933510.2266', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:45:20.547357 2025] [proxy_fcgi:error] [pid 12744:tid 12762] [client 165.85.56.95:2555] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44578
[Wed Nov 12 15:45:27.552193 2025] [proxy_fcgi:error] [pid 12744:tid 12763] [client 165.85.56.95:2555] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44578
[Wed Nov 12 15:45:28.906717 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:2555] AH01071: Got error 'PHP message: start 1762933528.1378', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:45:29.528450 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:2555] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933529.528-1762933528.1378', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:45:47.181149 2025] [proxy_fcgi:error] [pid 60180:tid 60189] [client 165.85.56.95:24108] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44579
[Wed Nov 12 15:45:52.477373 2025] [proxy_fcgi:error] [pid 60180:tid 60194] [client 165.85.56.95:24108] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44579
[Wed Nov 12 15:45:53.264116 2025] [proxy_fcgi:error] [pid 60180:tid 60204] [client 165.85.56.95:24108] AH01071: Got error 'PHP message: start 1762933552.9769', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:45:54.005168 2025] [proxy_fcgi:error] [pid 60180:tid 60204] [client 165.85.56.95:24108] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933554.0047-1762933552.9769', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:46:01.620362 2025] [proxy_fcgi:error] [pid 12744:tid 12769] [client 165.85.56.95:2434] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:46:03.028879 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:2434] AH01071: Got error 'PHP message: start 1762933562.2026', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:46:03.369466 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:2434] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933563.3691-1762933562.2026', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:47:13.787952 2025] [proxy_fcgi:error] [pid 60405:tid 60409] [client 165.85.56.6:64562] AH01071: Got error 'PHP message: start 1762933633.1028', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:47:14.394592 2025] [proxy_fcgi:error] [pid 60405:tid 60409] [client 165.85.56.6:64562] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933634.3941-1762933633.1028', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:47:21.014063 2025] [proxy_fcgi:error] [pid 60180:tid 60196] [client 165.85.56.95:20264] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:47:23.719147 2025] [proxy_fcgi:error] [pid 60180:tid 60185] [client 165.85.56.95:20264] AH01071: Got error 'PHP message: start 1762933642.6687', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:47:24.447309 2025] [proxy_fcgi:error] [pid 60180:tid 60185] [client 165.85.56.95:20264] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933644.4468-1762933642.6687', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:49:15.783167 2025] [proxy_fcgi:error] [pid 60097:tid 60167] [client 165.85.56.6:4930] AH01071: Got error 'PHP message: start 1762933754.9622', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:49:16.555928 2025] [proxy_fcgi:error] [pid 60097:tid 60167] [client 165.85.56.6:4930] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933756.5555-1762933754.9622', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:50:02.462877 2025] [proxy_fcgi:error] [pid 60095:tid 60121] [client 165.85.56.95:27420] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44081
[Wed Nov 12 15:50:03.932089 2025] [proxy_fcgi:error] [pid 60095:tid 60118] [client 165.85.56.95:27420] AH01071: Got error 'PHP message: start 1762933803.3056', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:50:04.526469 2025] [proxy_fcgi:error] [pid 60095:tid 60118] [client 165.85.56.95:27420] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933804.5259-1762933803.3056', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:50:08.945090 2025] [proxy_fcgi:error] [pid 60095:tid 60112] [client 165.85.56.95:27420] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:50:09.634067 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:27420] AH01071: Got error 'PHP message: start 1762933809.5371', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:50:10.055502 2025] [proxy_fcgi:error] [pid 60095:tid 60114] [client 165.85.56.95:27420] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933810.0549-1762933809.5371', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:51:18.811612 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.6:4936] AH01071: Got error 'PHP message: start 1762933877.6956', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:51:19.525510 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.6:4936] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933879.5249-1762933877.6956', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:52:11.059657 2025] [proxy_fcgi:error] [pid 60405:tid 60410] [client 165.85.56.95:21286] AH01071: Got error 'PHP message: start 1762933930.3324', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:52:11.711220 2025] [proxy_fcgi:error] [pid 60405:tid 60410] [client 165.85.56.95:21286] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762933931.7106-1762933930.3324', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:53:20.733544 2025] [proxy_fcgi:error] [pid 60096:tid 60133] [client 165.85.56.6:59134] AH01071: Got error 'PHP message: start 1762934000.1488', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:53:21.217537 2025] [proxy_fcgi:error] [pid 60096:tid 60133] [client 165.85.56.6:59134] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934001.2172-1762934000.1488', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:54:12.383443 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.95:56293] AH01071: Got error 'PHP message: start 1762934051.9296', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:54:12.809845 2025] [proxy_fcgi:error] [pid 12744:tid 12767] [client 165.85.56.95:56293] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934052.8094-1762934051.9296', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:55:10.004106 2025] [proxy_fcgi:error] [pid 12744:tid 12760] [client 165.85.56.95:3310] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:55:11.136204 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:3310] AH01071: Got error 'PHP message: start 1762934110.5782', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:55:11.616620 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:3310] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934111.6143-1762934110.5782', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:55:23.121301 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.6:19167] AH01071: Got error 'PHP message: start 1762934122.3709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:55:23.620343 2025] [proxy_fcgi:error] [pid 60097:tid 60142] [client 165.85.56.6:19167] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934123.6192-1762934122.3709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:55:49.503208 2025] [proxy_fcgi:error] [pid 12744:tid 12765] [client 165.85.56.95:65527] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:55:50.187730 2025] [proxy_fcgi:error] [pid 12744:tid 12749] [client 165.85.56.95:65527] AH01071: Got error 'PHP message: start 1762934149.9395', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:55:50.274126 2025] [proxy_fcgi:error] [pid 12744:tid 12749] [client 165.85.56.95:65527] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934150.2737-1762934149.9395', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:56:25.869065 2025] [proxy_fcgi:error] [pid 60405:tid 60419] [client 165.85.56.95:5025] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/availability.php
[Wed Nov 12 15:56:27.841672 2025] [proxy_fcgi:error] [pid 60405:tid 60421] [client 165.85.56.95:5025] AH01071: Got error 'PHP message: start 1762934186.9431', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:56:27.922756 2025] [proxy_fcgi:error] [pid 60405:tid 60421] [client 165.85.56.95:5025] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934187.9223-1762934186.9431', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:57:25.566160 2025] [proxy_fcgi:error] [pid 60405:tid 60423] [client 165.85.56.6:5078] AH01071: Got error 'PHP message: start 1762934244.8114', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:57:26.277472 2025] [proxy_fcgi:error] [pid 60405:tid 60423] [client 165.85.56.6:5078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934246.277-1762934244.8114', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:58:28.873795 2025] [proxy_fcgi:error] [pid 12744:tid 12758] [client 165.85.56.95:50256] AH01071: Got error 'PHP message: start 1762934308.1985', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:58:28.991970 2025] [proxy_fcgi:error] [pid 12744:tid 12758] [client 165.85.56.95:50256] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934308.9913-1762934308.1985', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:59:27.643627 2025] [proxy_fcgi:error] [pid 60405:tid 60431] [client 165.85.56.6:41019] AH01071: Got error 'PHP message: start 1762934366.8862', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:59:28.394261 2025] [proxy_fcgi:error] [pid 60405:tid 60431] [client 165.85.56.6:41019] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934368.3938-1762934366.8862', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 15:59:55.164868 2025] [proxy_fcgi:error] [pid 60405:tid 60410] [client 165.85.56.95:20785] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:59:57.735778 2025] [proxy_fcgi:error] [pid 60405:tid 60420] [client 165.85.56.95:20785] AH01071: Got error 'PHP message: start 1762934396.7944', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 15:59:58.500087 2025] [proxy_fcgi:error] [pid 60405:tid 60420] [client 165.85.56.95:20785] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934398.4996-1762934396.7944', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:01:30.156152 2025] [proxy_fcgi:error] [pid 60097:tid 60172] [client 165.85.56.6:31013] AH01071: Got error 'PHP message: start 1762934488.9702', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:01:30.905254 2025] [proxy_fcgi:error] [pid 60097:tid 60172] [client 165.85.56.6:31013] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934490.9044-1762934488.9702', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:02:15.275825 2025] [proxy_fcgi:error] [pid 60097:tid 60175] [client 165.85.56.95:56572] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44478
[Wed Nov 12 16:02:16.352712 2025] [proxy_fcgi:error] [pid 60097:tid 60162] [client 165.85.56.95:56572] AH01071: Got error 'PHP message: start 1762934535.8536', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:02:16.824391 2025] [proxy_fcgi:error] [pid 60097:tid 60162] [client 165.85.56.95:56572] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934536.8238-1762934535.8536', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:03:32.276608 2025] [proxy_fcgi:error] [pid 60180:tid 60189] [client 165.85.56.6:11429] AH01071: Got error 'PHP message: start 1762934611.6144', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:03:32.910305 2025] [proxy_fcgi:error] [pid 60180:tid 60189] [client 165.85.56.6:11429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934612.9094-1762934611.6144', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:04:17.830906 2025] [proxy_fcgi:error] [pid 12744:tid 12757] [client 165.85.56.95:52367] AH01071: Got error 'PHP message: start 1762934657.0984', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:04:18.329086 2025] [proxy_fcgi:error] [pid 12744:tid 12757] [client 165.85.56.95:52367] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934658.3285-1762934657.0984', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:05:34.324381 2025] [proxy_fcgi:error] [pid 60180:tid 60190] [client 165.85.56.6:10991] AH01071: Got error 'PHP message: start 1762934733.5311', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:05:35.060664 2025] [proxy_fcgi:error] [pid 60180:tid 60190] [client 165.85.56.6:10991] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934735.0604-1762934733.5311', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:06:19.454747 2025] [proxy_fcgi:error] [pid 60095:tid 60109] [client 165.85.56.95:51788] AH01071: Got error 'PHP message: start 1762934778.6382', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:06:20.195609 2025] [proxy_fcgi:error] [pid 60095:tid 60109] [client 165.85.56.95:51788] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934780.195-1762934778.6382', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:06:47.926655 2025] [proxy_fcgi:error] [pid 60180:tid 60199] [client 165.85.56.95:5517] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:06:50.826082 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:5517] AH01071: Got error 'PHP message: start 1762934809.5544', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:06:51.154528 2025] [proxy_fcgi:error] [pid 60180:tid 60193] [client 165.85.56.95:5517] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934811.1541-1762934809.5544', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:07:03.066057 2025] [proxy_fcgi:error] [pid 60096:tid 60126] [client 165.85.56.95:64759] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44612
[Wed Nov 12 16:07:33.846788 2025] [proxy_fcgi:error] [pid 60096:tid 60151] [client 165.85.56.95:62989] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44640
[Wed Nov 12 16:07:36.082187 2025] [proxy_fcgi:error] [pid 60180:tid 60188] [client 165.85.56.6:47736] AH01071: Got error 'PHP message: start 1762934855.6419', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:07:36.786589 2025] [proxy_fcgi:error] [pid 60180:tid 60188] [client 165.85.56.6:47736] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934856.7862-1762934855.6419', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:07:59.175252 2025] [proxy_fcgi:error] [pid 60096:tid 60158] [client 165.85.56.95:46383] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44640
[Wed Nov 12 16:08:00.061596 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.95:46383] AH01071: Got error 'PHP message: start 1762934879.6769', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:08:00.484122 2025] [proxy_fcgi:error] [pid 60096:tid 60146] [client 165.85.56.95:46383] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934880.4836-1762934879.6769', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:01.503155 2025] [proxy_fcgi:error] [pid 60405:tid 60425] [client 165.85.56.95:16721] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:02.930563 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:16721] AH01071: Got error 'PHP message: start 1762934942.3868', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:03.663429 2025] [proxy_fcgi:error] [pid 60405:tid 60408] [client 165.85.56.95:16721] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934943.6628-1762934942.3868', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:13.541859 2025] [proxy_fcgi:error] [pid 60405:tid 60417] [client 165.85.56.95:27050] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:14.739165 2025] [proxy_fcgi:error] [pid 60405:tid 60412] [client 165.85.56.95:27050] AH01071: Got error 'PHP message: start 1762934954.3264', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:15.374262 2025] [proxy_fcgi:error] [pid 60405:tid 60412] [client 165.85.56.95:27050] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934955.3738-1762934954.3264', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:09:38.250670 2025] [proxy_fcgi:error] [pid 60180:tid 60205] [client 165.85.56.6:10103] AH01071: Got error 'PHP message: start 1762934977.4805', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:09:38.727285 2025] [proxy_fcgi:error] [pid 60180:tid 60205] [client 165.85.56.6:10103] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762934978.7266-1762934977.4805', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:11:16.310209 2025] [proxy_fcgi:error] [pid 60180:tid 60185] [client 165.85.56.95:54280] AH01071: Got error 'PHP message: start 1762935075.6372', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:11:16.758366 2025] [proxy_fcgi:error] [pid 60180:tid 60185] [client 165.85.56.95:54280] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935076.7578-1762935075.6372', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:11:40.322505 2025] [proxy_fcgi:error] [pid 60095:tid 60122] [client 165.85.56.6:14282] AH01071: Got error 'PHP message: start 1762935099.2999', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:11:40.957006 2025] [proxy_fcgi:error] [pid 60095:tid 60122] [client 165.85.56.6:14282] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935100.9564-1762935099.2999', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:13:17.940350 2025] [proxy_fcgi:error] [pid 60405:tid 60421] [client 165.85.56.95:60738] AH01071: Got error 'PHP message: start 1762935197.0946', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:13:18.492702 2025] [proxy_fcgi:error] [pid 60405:tid 60421] [client 165.85.56.95:60738] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935198.492-1762935197.0946', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:13:20.794060 2025] [proxy_fcgi:error] [pid 60405:tid 60416] [client 165.85.56.95:60738] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:13:22.166235 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:60738] AH01071: Got error 'PHP message: start 1762935201.5018', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:13:22.875939 2025] [proxy_fcgi:error] [pid 60405:tid 60413] [client 165.85.56.95:60738] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935202.8754-1762935201.5018', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:15:23.594555 2025] [proxy_fcgi:error] [pid 60180:tid 60192] [client 165.85.56.95:14358] AH01071: Got error 'PHP message: start 1762935323.1473', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:15:24.190329 2025] [proxy_fcgi:error] [pid 60180:tid 60192] [client 165.85.56.95:14358] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935324.1898-1762935323.1473', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:16:00.945951 2025] [proxy_fcgi:error] [pid 12744:tid 12754] [client 165.85.56.95:11437] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44631
[Wed Nov 12 16:16:06.024450 2025] [proxy_fcgi:error] [pid 12744:tid 12748] [client 165.85.56.95:11437] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44631
[Wed Nov 12 16:16:06.852911 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.95:11437] AH01071: Got error 'PHP message: start 1762935366.6455', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:16:07.653767 2025] [proxy_fcgi:error] [pid 12744:tid 12759] [client 165.85.56.95:11437] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935367.6532-1762935366.6455', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:18:08.538707 2025] [proxy_fcgi:error] [pid 60095:tid 60102] [client 165.85.56.95:2045] AH01071: Got error 'PHP message: start 1762935487.9135', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:18:09.200404 2025] [proxy_fcgi:error] [pid 60095:tid 60102] [client 165.85.56.95:2045] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935489.1996-1762935487.9135', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:20:47.801301 2025] [proxy_fcgi:error] [pid 60180:tid 60200] [client 165.85.56.95:7538] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44478
[Wed Nov 12 16:20:48.827953 2025] [proxy_fcgi:error] [pid 60180:tid 60194] [client 165.85.56.95:7538] AH01071: Got error 'PHP message: start 1762935648.683', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:20:49.638873 2025] [proxy_fcgi:error] [pid 60180:tid 60194] [client 165.85.56.95:7538] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935649.6385-1762935648.683', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 12 16:22:50.597172 2025] [proxy_fcgi:error] [pid 60095:tid 60108] [client 165.85.56.95:55826] AH01071: Got error 'PHP message: start 1762935769.931', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:22:51.243165 2025] [proxy_fcgi:error] [pid 60095:tid 60108] [client 165.85.56.95:55826] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935771.2424-1762935769.931', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:24:52.026177 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:35691] AH01071: Got error 'PHP message: start 1762935891.5449', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:24:52.491732 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 165.85.56.95:35691] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762935892.4909-1762935891.5449', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:26:53.343065 2025] [proxy_fcgi:error] [pid 60180:tid 60196] [client 165.85.56.95:62596] AH01071: Got error 'PHP message: start 1762936012.7845', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:26:54.002385 2025] [proxy_fcgi:error] [pid 60180:tid 60196] [client 165.85.56.95:62596] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762936014.0018-1762936012.7845', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:28:54.921736 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:25529] AH01071: Got error 'PHP message: start 1762936134.2961', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:28:55.383866 2025] [proxy_fcgi:error] [pid 12744:tid 12753] [client 165.85.56.95:25529] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762936135.3832-1762936134.2961', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:30:56.149823 2025] [proxy_fcgi:error] [pid 60180:tid 60202] [client 165.85.56.95:20599] AH01071: Got error 'PHP message: start 1762936255.6695', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:30:56.795673 2025] [proxy_fcgi:error] [pid 60180:tid 60202] [client 165.85.56.95:20599] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762936256.795-1762936255.6695', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:32:57.512023 2025] [proxy_fcgi:error] [pid 12744:tid 12770] [client 165.85.56.95:22817] AH01071: Got error 'PHP message: start 1762936377.0802', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 16:32:57.912865 2025] [proxy_fcgi:error] [pid 12744:tid 12770] [client 165.85.56.95:22817] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762936377.9122-1762936377.0802', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 12 18:34:37.008221 2025] [proxy_fcgi:error] [pid 60405:tid 60417] [client 49.194.27.197:63007] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/index.php
[Wed Nov 12 18:34:39.135330 2025] [proxy_fcgi:error] [pid 60096:tid 60145] [client 49.194.27.197:63019] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/index.php
[Wed Nov 12 18:34:42.254510 2025] [proxy_fcgi:error] [pid 60096:tid 60134] [client 49.194.27.197:63019] AH01071: Got error 'PHP message: start 1762943681.725', referer: https://www.pumpbooking.com/dashboard.php
[Wed Nov 12 18:34:42.850783 2025] [proxy_fcgi:error] [pid 60096:tid 60134] [client 49.194.27.197:63019] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762943682.8504-1762943681.725', referer: https://www.pumpbooking.com/dashboard.php
[Wed Nov 12 18:35:00.085273 2025] [proxy_fcgi:error] [pid 12744:tid 12771] [client 49.194.27.197:63025] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/dashboard.php
[Wed Nov 12 18:35:01.672808 2025] [proxy_fcgi:error] [pid 12744:tid 12757] [client 49.194.27.197:63025] AH01071: Got error 'PHP message: start 1762943701.0496', referer: https://www.pumpbooking.com/dashboard.php
[Wed Nov 12 18:35:01.988458 2025] [proxy_fcgi:error] [pid 12744:tid 12757] [client 49.194.27.197:63025] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762943701.9881-1762943701.0496', referer: https://www.pumpbooking.com/dashboard.php
[Thu Nov 13 02:11:51.233475 2025] [:error] [pid 60095:tid 60113] [client 45.153.34.41:41998] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRTN53lw2elroagFF1qAZgAAAE4"]
[Thu Nov 13 03:04:25.154953 2025] [:error] [pid 60405:tid 60427] [client 45.153.34.41:44086] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRTaOXMGv_mlVi6mf5pnGAAAABM"]
[Thu Nov 13 04:48:12.180022 2025] [:error] [pid 18960:tid 18980] [client 93.123.109.7:46812] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRTyjIvOP-uT_KFAcQNo7QAAARI"]
[Thu Nov 13 06:26:03.173159 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:44329] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Thu Nov 13 06:26:05.708369 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 165.85.56.95:44329] AH01071: Got error 'PHP message: start 1762986365.0491', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:26:06.384373 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 165.85.56.95:44329] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762986366.3839-1762986365.0491', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:27:06.868707 2025] [proxy_fcgi:error] [pid 22224:tid 22304] [client 165.85.56.95:61175] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:27:08.390403 2025] [proxy_fcgi:error] [pid 22224:tid 22280] [client 165.85.56.95:61175] AH01071: Got error 'PHP message: start 1762986427.6465', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:27:08.782714 2025] [proxy_fcgi:error] [pid 22224:tid 22280] [client 165.85.56.95:61175] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762986428.7814-1762986427.6465', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:28:55.112229 2025] [proxy_fcgi:error] [pid 22224:tid 22298] [client 165.85.56.95:31332] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:28:56.242140 2025] [proxy_fcgi:error] [pid 22224:tid 22295] [client 165.85.56.95:31332] AH01071: Got error 'PHP message: start 1762986535.7751', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:28:56.928487 2025] [proxy_fcgi:error] [pid 22224:tid 22295] [client 165.85.56.95:31332] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762986536.9281-1762986535.7751', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:30:35.595232 2025] [proxy_fcgi:error] [pid 22307:tid 22321] [client 165.85.56.95:29109] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44583
[Thu Nov 13 06:38:44.374873 2025] [proxy_fcgi:error] [pid 22224:tid 22287] [client 165.85.56.95:14185] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44583
[Thu Nov 13 06:38:45.662620 2025] [proxy_fcgi:error] [pid 22224:tid 22285] [client 165.85.56.95:14185] AH01071: Got error 'PHP message: start 1762987125.3008', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:38:46.015097 2025] [proxy_fcgi:error] [pid 22224:tid 22285] [client 165.85.56.95:14185] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987126.0146-1762987125.3008', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:40:46.924051 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 165.85.56.95:45754] AH01071: Got error 'PHP message: start 1762987246.3054', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:40:47.272693 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 165.85.56.95:45754] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987247.2722-1762987246.3054', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:42:48.127947 2025] [proxy_fcgi:error] [pid 22224:tid 22298] [client 165.85.56.95:5837] AH01071: Got error 'PHP message: start 1762987367.5497', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:42:48.468834 2025] [proxy_fcgi:error] [pid 22224:tid 22298] [client 165.85.56.95:5837] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987368.4684-1762987367.5497', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:44:49.575319 2025] [proxy_fcgi:error] [pid 34451:tid 34456] [client 165.85.56.95:49031] AH01071: Got error 'PHP message: start 1762987488.7885', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:44:50.038452 2025] [proxy_fcgi:error] [pid 34451:tid 34456] [client 165.85.56.95:49031] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987490.038-1762987488.7885', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:46:50.916630 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:45486] AH01071: Got error 'PHP message: start 1762987610.3284', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:46:51.237666 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:45486] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987611.2369-1762987610.3284', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:48:52.236038 2025] [proxy_fcgi:error] [pid 22566:tid 22576] [client 165.85.56.95:45358] AH01071: Got error 'PHP message: start 1762987731.544', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:48:52.740466 2025] [proxy_fcgi:error] [pid 22566:tid 22576] [client 165.85.56.95:45358] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987732.7397-1762987731.544', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:50:53.981641 2025] [proxy_fcgi:error] [pid 22222:tid 22249] [client 165.85.56.95:43945] AH01071: Got error 'PHP message: start 1762987853.1196', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:50:54.561345 2025] [proxy_fcgi:error] [pid 22222:tid 22249] [client 165.85.56.95:43945] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987854.5609-1762987853.1196', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:52:46.956246 2025] [proxy_fcgi:error] [pid 22224:tid 22292] [client 165.85.56.95:48011] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:52:48.277378 2025] [proxy_fcgi:error] [pid 22224:tid 22285] [client 165.85.56.95:48011] AH01071: Got error 'PHP message: start 1762987967.8231', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:52:48.929993 2025] [proxy_fcgi:error] [pid 22224:tid 22285] [client 165.85.56.95:48011] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762987968.9295-1762987967.8231', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 06:54:49.731792 2025] [proxy_fcgi:error] [pid 22566:tid 22579] [client 165.85.56.95:1653] AH01071: Got error 'PHP message: start 1762988089.2493', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:54:50.400340 2025] [proxy_fcgi:error] [pid 22566:tid 22579] [client 165.85.56.95:1653] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988090.3997-1762988089.2493', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:56:51.167219 2025] [proxy_fcgi:error] [pid 22224:tid 22303] [client 165.85.56.95:20599] AH01071: Got error 'PHP message: start 1762988210.713', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:56:51.618983 2025] [proxy_fcgi:error] [pid 22224:tid 22303] [client 165.85.56.95:20599] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988211.6182-1762988210.713', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:58:52.329388 2025] [proxy_fcgi:error] [pid 22223:tid 22268] [client 165.85.56.95:33289] AH01071: Got error 'PHP message: start 1762988331.9286', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 06:58:52.726148 2025] [proxy_fcgi:error] [pid 22223:tid 22268] [client 165.85.56.95:33289] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988332.7256-1762988331.9286', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:00:11.243411 2025] [proxy_fcgi:error] [pid 22224:tid 22295] [client 165.85.56.95:25705] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:00:12.228351 2025] [proxy_fcgi:error] [pid 22224:tid 22286] [client 165.85.56.95:25705] AH01071: Got error 'PHP message: start 1762988412.0013', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:00:12.886390 2025] [proxy_fcgi:error] [pid 22224:tid 22286] [client 165.85.56.95:25705] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988412.886-1762988412.0013', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:00:30.082715 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:13493] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/client.php?clientID=443
[Thu Nov 13 07:00:30.697628 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 165.85.56.95:13493] AH01071: Got error 'PHP message: start 1762988430.5467', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:00:31.091696 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 165.85.56.95:13493] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988431.0913-1762988430.5467', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:00:54.420406 2025] [proxy_fcgi:error] [pid 22566:tid 22576] [client 165.85.56.95:2889] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44599
[Thu Nov 13 07:00:55.281255 2025] [proxy_fcgi:error] [pid 22566:tid 22571] [client 165.85.56.95:2889] AH01071: Got error 'PHP message: start 1762988454.9897', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:00:55.883611 2025] [proxy_fcgi:error] [pid 22566:tid 22571] [client 165.85.56.95:2889] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988455.8832-1762988454.9897', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:02:56.726229 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 165.85.56.95:41362] AH01071: Got error 'PHP message: start 1762988576.1653', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:02:57.393113 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 165.85.56.95:41362] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988577.3927-1762988576.1653', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:03:51.760402 2025] [proxy_fcgi:error] [pid 34451:tid 34462] [client 165.85.56.95:55731] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:03:54.146642 2025] [proxy_fcgi:error] [pid 34451:tid 34458] [client 165.85.56.95:55731] AH01071: Got error 'PHP message: start 1762988633.5298', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:03:54.823131 2025] [proxy_fcgi:error] [pid 34451:tid 34458] [client 165.85.56.95:55731] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988634.8227-1762988633.5298', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:05:55.553882 2025] [proxy_fcgi:error] [pid 34451:tid 34476] [client 165.85.56.95:33884] AH01071: Got error 'PHP message: start 1762988755.1271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:05:56.122296 2025] [proxy_fcgi:error] [pid 34451:tid 34476] [client 165.85.56.95:33884] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988756.1215-1762988755.1271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:07:56.886697 2025] [proxy_fcgi:error] [pid 34451:tid 34458] [client 165.85.56.95:54652] AH01071: Got error 'PHP message: start 1762988876.4301', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:07:57.333700 2025] [proxy_fcgi:error] [pid 34451:tid 34458] [client 165.85.56.95:54652] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988877.3325-1762988876.4301', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:09:58.100120 2025] [proxy_fcgi:error] [pid 22566:tid 22584] [client 165.85.56.95:16815] AH01071: Got error 'PHP message: start 1762988997.6159', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:09:58.730527 2025] [proxy_fcgi:error] [pid 22566:tid 22584] [client 165.85.56.95:16815] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762988998.7298-1762988997.6159', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:11:13.921494 2025] [proxy_fcgi:error] [pid 22307:tid 22317] [client 165.85.56.95:14968] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44631
[Thu Nov 13 07:11:22.536620 2025] [proxy_fcgi:error] [pid 34451:tid 34474] [client 165.85.56.95:7017] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44631
[Thu Nov 13 07:11:45.795906 2025] [proxy_fcgi:error] [pid 34451:tid 34461] [client 165.85.56.95:48456] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44641
[Thu Nov 13 07:11:56.267528 2025] [proxy_fcgi:error] [pid 22224:tid 22302] [client 165.85.56.95:2078] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44641
[Thu Nov 13 07:11:57.542639 2025] [proxy_fcgi:error] [pid 22224:tid 22296] [client 165.85.56.95:2078] AH01071: Got error 'PHP message: start 1762989117.2714', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:11:58.037046 2025] [proxy_fcgi:error] [pid 22224:tid 22296] [client 165.85.56.95:2078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989118.0366-1762989117.2714', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:12:25.216734 2025] [proxy_fcgi:error] [pid 22307:tid 22309] [client 165.85.56.95:8814] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:12:26.474891 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 165.85.56.95:8814] AH01071: Got error 'PHP message: start 1762989145.9433', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:12:27.153355 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 165.85.56.95:8814] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989147.1529-1762989145.9433', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:14:28.147641 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 165.85.56.95:9587] AH01071: Got error 'PHP message: start 1762989267.4559', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:14:28.819513 2025] [proxy_fcgi:error] [pid 22223:tid 22271] [client 165.85.56.95:9587] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989268.8191-1762989267.4559', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:16:29.823151 2025] [proxy_fcgi:error] [pid 22566:tid 22569] [client 165.85.56.95:45891] AH01071: Got error 'PHP message: start 1762989389.1493', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:16:30.448188 2025] [proxy_fcgi:error] [pid 22566:tid 22569] [client 165.85.56.95:45891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989390.4479-1762989389.1493', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:18:31.328701 2025] [proxy_fcgi:error] [pid 22307:tid 22333] [client 165.85.56.95:24536] AH01071: Got error 'PHP message: start 1762989510.7464', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:18:31.959482 2025] [proxy_fcgi:error] [pid 22307:tid 22333] [client 165.85.56.95:24536] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989511.9592-1762989510.7464', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:20:34.252206 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 165.85.56.95:38612] AH01071: Got error 'PHP message: start 1762989632.2652', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:20:34.782652 2025] [proxy_fcgi:error] [pid 22566:tid 22568] [client 165.85.56.95:38612] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989634.7817-1762989632.2652', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:22:35.977602 2025] [proxy_fcgi:error] [pid 34451:tid 34475] [client 165.85.56.95:61524] AH01071: Got error 'PHP message: start 1762989755.0976', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:22:36.644633 2025] [proxy_fcgi:error] [pid 34451:tid 34475] [client 165.85.56.95:61524] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989756.6441-1762989755.0976', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:24:37.721602 2025] [proxy_fcgi:error] [pid 34451:tid 34465] [client 165.85.56.95:47670] AH01071: Got error 'PHP message: start 1762989876.9436', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:24:38.484854 2025] [proxy_fcgi:error] [pid 34451:tid 34465] [client 165.85.56.95:47670] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762989878.4843-1762989876.9436', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:26:39.484873 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 165.85.56.95:27643] AH01071: Got error 'PHP message: start 1762989998.8016', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:26:40.097335 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 165.85.56.95:27643] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990000.0968-1762989998.8016', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:28:41.158572 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 165.85.56.95:13338] AH01071: Got error 'PHP message: start 1762990120.4237', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:28:41.919089 2025] [proxy_fcgi:error] [pid 22222:tid 22226] [client 165.85.56.95:13338] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990121.9187-1762990120.4237', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:29:19.254798 2025] [proxy_fcgi:error] [pid 34451:tid 34455] [client 165.85.56.95:9341] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:29:20.526093 2025] [proxy_fcgi:error] [pid 34451:tid 34453] [client 165.85.56.95:9341] AH01071: Got error 'PHP message: start 1762990160.1594', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:29:21.138922 2025] [proxy_fcgi:error] [pid 34451:tid 34453] [client 165.85.56.95:9341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990161.1384-1762990160.1594', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 07:31:21.892521 2025] [proxy_fcgi:error] [pid 34451:tid 34458] [client 165.85.56.95:13429] AH01071: Got error 'PHP message: start 1762990281.4401', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:31:22.486874 2025] [proxy_fcgi:error] [pid 34451:tid 34458] [client 165.85.56.95:13429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990282.4863-1762990281.4401', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:33:23.364321 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:24354] AH01071: Got error 'PHP message: start 1762990402.804', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:33:24.048215 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:24354] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990404.0476-1762990402.804', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:35:24.800814 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 165.85.56.95:46635] AH01071: Got error 'PHP message: start 1762990524.3526', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:35:25.414316 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 165.85.56.95:46635] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990525.4135-1762990524.3526', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:37:26.131224 2025] [proxy_fcgi:error] [pid 22566:tid 22574] [client 165.85.56.95:42212] AH01071: Got error 'PHP message: start 1762990645.7249', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:37:26.637194 2025] [proxy_fcgi:error] [pid 22566:tid 22574] [client 165.85.56.95:42212] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990646.6366-1762990645.7249', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:38:21.783237 2025] [:error] [pid 22223:tid 22267] [client 85.203.36.159:53707] [client 85.203.36.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aRUabd6it_tNBGH9EAE4QgAAAE4"]
[Thu Nov 13 07:39:27.374270 2025] [proxy_fcgi:error] [pid 22307:tid 22333] [client 165.85.56.95:11178] AH01071: Got error 'PHP message: start 1762990766.9493', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:39:27.777093 2025] [proxy_fcgi:error] [pid 22307:tid 22333] [client 165.85.56.95:11178] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990767.7765-1762990766.9493', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:41:30.936568 2025] [proxy_fcgi:error] [pid 22224:tid 22302] [client 165.85.56.95:44571] AH01071: Got error 'PHP message: start 1762990888.1002', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:41:31.542205 2025] [proxy_fcgi:error] [pid 22224:tid 22302] [client 165.85.56.95:44571] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762990891.5415-1762990888.1002', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:43:32.229475 2025] [proxy_fcgi:error] [pid 34451:tid 34459] [client 165.85.56.95:57262] AH01071: Got error 'PHP message: start 1762991011.8456', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:43:32.798209 2025] [proxy_fcgi:error] [pid 34451:tid 34459] [client 165.85.56.95:57262] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991012.7975-1762991011.8456', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:45:33.637768 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 165.85.56.95:51102] AH01071: Got error 'PHP message: start 1762991133.1057', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:45:34.473473 2025] [proxy_fcgi:error] [pid 22307:tid 22314] [client 165.85.56.95:51102] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991134.4727-1762991133.1057', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:47:35.254673 2025] [proxy_fcgi:error] [pid 22307:tid 22331] [client 165.85.56.95:62462] AH01071: Got error 'PHP message: start 1762991254.7722', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:47:35.881712 2025] [proxy_fcgi:error] [pid 22307:tid 22331] [client 165.85.56.95:62462] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991255.8809-1762991254.7722', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:49:36.686827 2025] [proxy_fcgi:error] [pid 34451:tid 34459] [client 165.85.56.95:52408] AH01071: Got error 'PHP message: start 1762991376.1899', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:49:37.358090 2025] [proxy_fcgi:error] [pid 34451:tid 34459] [client 165.85.56.95:52408] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991377.3575-1762991376.1899', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:51:38.119851 2025] [proxy_fcgi:error] [pid 34451:tid 34464] [client 165.85.56.95:55568] AH01071: Got error 'PHP message: start 1762991497.6791', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:51:38.527244 2025] [proxy_fcgi:error] [pid 34451:tid 34464] [client 165.85.56.95:55568] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991498.5267-1762991497.6791', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:53:39.367007 2025] [proxy_fcgi:error] [pid 22223:tid 22267] [client 165.85.56.95:35630] AH01071: Got error 'PHP message: start 1762991618.8636', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:53:39.802206 2025] [proxy_fcgi:error] [pid 22223:tid 22267] [client 165.85.56.95:35630] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991619.8017-1762991618.8636', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:55:40.517258 2025] [proxy_fcgi:error] [pid 22307:tid 22321] [client 165.85.56.95:47427] AH01071: Got error 'PHP message: start 1762991740.0994', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:55:40.973831 2025] [proxy_fcgi:error] [pid 22307:tid 22321] [client 165.85.56.95:47427] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991740.9732-1762991740.0994', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:57:41.932285 2025] [proxy_fcgi:error] [pid 34451:tid 34470] [client 165.85.56.95:57623] AH01071: Got error 'PHP message: start 1762991861.4782', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:57:42.490298 2025] [proxy_fcgi:error] [pid 34451:tid 34470] [client 165.85.56.95:57623] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991862.4897-1762991861.4782', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:59:43.258213 2025] [proxy_fcgi:error] [pid 22223:tid 22259] [client 165.85.56.95:52860] AH01071: Got error 'PHP message: start 1762991982.7971', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 07:59:43.882411 2025] [proxy_fcgi:error] [pid 22223:tid 22259] [client 165.85.56.95:52860] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762991983.8818-1762991982.7971', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:01:44.648484 2025] [proxy_fcgi:error] [pid 34451:tid 34469] [client 165.85.56.95:59341] AH01071: Got error 'PHP message: start 1762992104.2061', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:01:45.291562 2025] [proxy_fcgi:error] [pid 34451:tid 34469] [client 165.85.56.95:59341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992105.2909-1762992104.2061', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:03:46.252330 2025] [proxy_fcgi:error] [pid 34451:tid 34457] [client 165.85.56.95:20649] AH01071: Got error 'PHP message: start 1762992225.8045', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:03:46.669316 2025] [proxy_fcgi:error] [pid 34451:tid 34457] [client 165.85.56.95:20649] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992226.6687-1762992225.8045', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:05:47.624724 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 165.85.56.95:34023] AH01071: Got error 'PHP message: start 1762992347.1649', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:05:48.208244 2025] [proxy_fcgi:error] [pid 22307:tid 22326] [client 165.85.56.95:34023] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992348.2075-1762992347.1649', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:07:49.273884 2025] [proxy_fcgi:error] [pid 34451:tid 34477] [client 165.85.56.95:17940] AH01071: Got error 'PHP message: start 1762992468.8425', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:07:49.698884 2025] [proxy_fcgi:error] [pid 34451:tid 34477] [client 165.85.56.95:17940] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992469.6983-1762992468.8425', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:09:50.522405 2025] [proxy_fcgi:error] [pid 22223:tid 22272] [client 165.85.56.95:50358] AH01071: Got error 'PHP message: start 1762992590.0761', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:09:51.087927 2025] [proxy_fcgi:error] [pid 22223:tid 22272] [client 165.85.56.95:50358] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992591.0874-1762992590.0761', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:11:52.048522 2025] [proxy_fcgi:error] [pid 22307:tid 22332] [client 165.85.56.95:34384] AH01071: Got error 'PHP message: start 1762992711.5814', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:11:52.678778 2025] [proxy_fcgi:error] [pid 22307:tid 22332] [client 165.85.56.95:34384] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992712.6782-1762992711.5814', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:13:53.412082 2025] [proxy_fcgi:error] [pid 22222:tid 22248] [client 165.85.56.95:38324] AH01071: Got error 'PHP message: start 1762992832.9719', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:13:54.078124 2025] [proxy_fcgi:error] [pid 22222:tid 22248] [client 165.85.56.95:38324] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992834.0773-1762992832.9719', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:15:55.042467 2025] [proxy_fcgi:error] [pid 22566:tid 22584] [client 165.85.56.95:43111] AH01071: Got error 'PHP message: start 1762992954.5738', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:15:55.495294 2025] [proxy_fcgi:error] [pid 22566:tid 22584] [client 165.85.56.95:43111] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762992955.4945-1762992954.5738', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:17:56.410683 2025] [proxy_fcgi:error] [pid 22224:tid 22290] [client 165.85.56.95:13186] AH01071: Got error 'PHP message: start 1762993075.9562', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:17:56.854751 2025] [proxy_fcgi:error] [pid 22224:tid 22290] [client 165.85.56.95:13186] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993076.8533-1762993075.9562', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:19:57.768639 2025] [proxy_fcgi:error] [pid 22223:tid 22261] [client 165.85.56.95:8439] AH01071: Got error 'PHP message: start 1762993197.1409', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:19:58.556714 2025] [proxy_fcgi:error] [pid 22223:tid 22261] [client 165.85.56.95:8439] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993198.5552-1762993197.1409', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:21:59.380452 2025] [proxy_fcgi:error] [pid 22224:tid 22297] [client 165.85.56.95:44486] AH01071: Got error 'PHP message: start 1762993318.8714', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:22:00.147100 2025] [proxy_fcgi:error] [pid 22224:tid 22297] [client 165.85.56.95:44486] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993320.1464-1762993318.8714', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:24:00.927845 2025] [proxy_fcgi:error] [pid 22566:tid 22577] [client 165.85.56.95:44522] AH01071: Got error 'PHP message: start 1762993440.462', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:24:01.450996 2025] [proxy_fcgi:error] [pid 22566:tid 22577] [client 165.85.56.95:44522] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993441.4502-1762993440.462', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:26:02.411191 2025] [proxy_fcgi:error] [pid 22307:tid 22323] [client 165.85.56.95:63244] AH01071: Got error 'PHP message: start 1762993561.9091', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:26:03.051986 2025] [proxy_fcgi:error] [pid 22307:tid 22323] [client 165.85.56.95:63244] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993563.0514-1762993561.9091', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:28:04.088456 2025] [proxy_fcgi:error] [pid 22566:tid 22582] [client 165.85.56.95:23691] AH01071: Got error 'PHP message: start 1762993683.5382', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:28:04.709652 2025] [proxy_fcgi:error] [pid 22566:tid 22582] [client 165.85.56.95:23691] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993684.7091-1762993683.5382', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:30:05.584877 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 165.85.56.95:39152] AH01071: Got error 'PHP message: start 1762993805.0142', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:30:06.434675 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 165.85.56.95:39152] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993806.4341-1762993805.0142', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:32:07.183404 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 165.85.56.95:40332] AH01071: Got error 'PHP message: start 1762993926.7548', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:32:07.602999 2025] [proxy_fcgi:error] [pid 22307:tid 22316] [client 165.85.56.95:40332] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762993927.6023-1762993926.7548', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:34:08.538962 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:60588] AH01071: Got error 'PHP message: start 1762994048.0476', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:34:09.200140 2025] [proxy_fcgi:error] [pid 22223:tid 22274] [client 165.85.56.95:60588] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994049.1994-1762994048.0476', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:36:09.991053 2025] [proxy_fcgi:error] [pid 34451:tid 34459] [client 165.85.56.95:18921] AH01071: Got error 'PHP message: start 1762994169.5271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:36:10.632899 2025] [proxy_fcgi:error] [pid 34451:tid 34459] [client 165.85.56.95:18921] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994170.6323-1762994169.5271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:38:11.625570 2025] [proxy_fcgi:error] [pid 34451:tid 34455] [client 165.85.56.95:15771] AH01071: Got error 'PHP message: start 1762994290.9534', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:38:12.180876 2025] [proxy_fcgi:error] [pid 34451:tid 34455] [client 165.85.56.95:15771] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994292.18-1762994290.9534', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:40:13.248802 2025] [proxy_fcgi:error] [pid 22566:tid 22583] [client 165.85.56.95:64753] AH01071: Got error 'PHP message: start 1762994412.6693', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:40:13.708684 2025] [proxy_fcgi:error] [pid 22566:tid 22583] [client 165.85.56.95:64753] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994413.7078-1762994412.6693', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:42:14.486116 2025] [proxy_fcgi:error] [pid 22223:tid 22259] [client 165.85.56.95:19330] AH01071: Got error 'PHP message: start 1762994534.0509', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:42:14.912944 2025] [proxy_fcgi:error] [pid 22223:tid 22259] [client 165.85.56.95:19330] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994534.9123-1762994534.0509', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:44:15.894917 2025] [proxy_fcgi:error] [pid 34451:tid 34476] [client 165.85.56.95:14745] AH01071: Got error 'PHP message: start 1762994655.3619', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:44:16.366031 2025] [proxy_fcgi:error] [pid 34451:tid 34476] [client 165.85.56.95:14745] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994656.3654-1762994655.3619', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:46:17.285519 2025] [proxy_fcgi:error] [pid 22224:tid 22300] [client 165.85.56.95:57272] AH01071: Got error 'PHP message: start 1762994776.6892', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:46:17.945484 2025] [proxy_fcgi:error] [pid 22224:tid 22300] [client 165.85.56.95:57272] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762994777.9446-1762994776.6892', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:54:02.303000 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 165.85.56.95:16863] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Thu Nov 13 08:54:04.636254 2025] [proxy_fcgi:error] [pid 22566:tid 22583] [client 165.85.56.95:16863] AH01071: Got error 'PHP message: start 1762995244.0547', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 08:54:05.077703 2025] [proxy_fcgi:error] [pid 22566:tid 22583] [client 165.85.56.95:16863] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762995245.0771-1762995244.0547', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 08:56:06.115313 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 165.85.56.95:64432] AH01071: Got error 'PHP message: start 1762995365.609', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:56:06.740946 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 165.85.56.95:64432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762995366.7403-1762995365.609', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:58:07.585302 2025] [proxy_fcgi:error] [pid 22307:tid 22317] [client 165.85.56.95:53980] AH01071: Got error 'PHP message: start 1762995487.1154', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 08:58:08.024172 2025] [proxy_fcgi:error] [pid 22307:tid 22317] [client 165.85.56.95:53980] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762995488.0235-1762995487.1154', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:00:08.886410 2025] [proxy_fcgi:error] [pid 22224:tid 22300] [client 165.85.56.95:14564] AH01071: Got error 'PHP message: start 1762995608.422', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:00:09.373126 2025] [proxy_fcgi:error] [pid 22224:tid 22300] [client 165.85.56.95:14564] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762995609.3725-1762995608.422', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:02:10.208225 2025] [proxy_fcgi:error] [pid 22307:tid 22319] [client 165.85.56.95:53672] AH01071: Got error 'PHP message: start 1762995729.7159', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:02:10.870632 2025] [proxy_fcgi:error] [pid 22307:tid 22319] [client 165.85.56.95:53672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762995730.8699-1762995729.7159', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:09:45.402368 2025] [proxy_fcgi:error] [pid 22224:tid 22302] [client 165.85.56.95:28520] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Thu Nov 13 09:09:48.719783 2025] [proxy_fcgi:error] [pid 22224:tid 22299] [client 165.85.56.95:28520] AH01071: Got error 'PHP message: start 1762996186.8398', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:09:49.544515 2025] [proxy_fcgi:error] [pid 22224:tid 22299] [client 165.85.56.95:28520] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996189.5439-1762996186.8398', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:11:36.883947 2025] [proxy_fcgi:error] [pid 22224:tid 22282] [client 165.85.56.95:18657] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:11:38.163035 2025] [proxy_fcgi:error] [pid 22224:tid 22296] [client 165.85.56.95:18657] AH01071: Got error 'PHP message: start 1762996297.488', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:11:38.611012 2025] [proxy_fcgi:error] [pid 22224:tid 22296] [client 165.85.56.95:18657] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996298.6106-1762996297.488', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:11:59.441296 2025] [proxy_fcgi:error] [pid 22307:tid 22324] [client 165.85.56.95:26851] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-12
[Thu Nov 13 09:20:40.485133 2025] [proxy_fcgi:error] [pid 22222:tid 22240] [client 165.85.56.95:47725] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:20:41.765777 2025] [proxy_fcgi:error] [pid 22223:tid 22260] [client 165.85.56.95:11397] AH01071: Got error 'PHP message: start 1762996841.1555', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:20:42.506804 2025] [proxy_fcgi:error] [pid 22223:tid 22260] [client 165.85.56.95:11397] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996842.5064-1762996841.1555', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:20:43.092966 2025] [proxy_fcgi:error] [pid 22222:tid 22246] [client 165.85.56.95:47725] AH01071: Got error 'PHP message: start 1762996842.5085', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:20:43.804242 2025] [proxy_fcgi:error] [pid 22222:tid 22246] [client 165.85.56.95:47725] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996843.8039-1762996842.5085', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:21:13.093545 2025] [proxy_fcgi:error] [pid 22222:tid 22249] [client 165.85.56.95:34622] AH01071: Got error 'PHP message: start 1762996872.4704', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:21:13.758404 2025] [proxy_fcgi:error] [pid 22222:tid 22249] [client 165.85.56.95:34622] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996873.7574-1762996872.4704', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:22:44.644786 2025] [proxy_fcgi:error] [pid 22223:tid 22268] [client 165.85.56.95:30421] AH01071: Got error 'PHP message: start 1762996964.086', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:22:45.272980 2025] [proxy_fcgi:error] [pid 22223:tid 22268] [client 165.85.56.95:30421] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996965.2726-1762996964.086', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:23:14.766606 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 165.85.56.95:43664] AH01071: Got error 'PHP message: start 1762996994.2836', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:23:15.453140 2025] [proxy_fcgi:error] [pid 22566:tid 22590] [client 165.85.56.95:43664] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762996995.4525-1762996994.2836', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:25:16.298471 2025] [proxy_fcgi:error] [pid 22222:tid 22234] [client 165.85.56.95:2072] AH01071: Got error 'PHP message: start 1762997115.7737', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:25:17.029658 2025] [proxy_fcgi:error] [pid 22222:tid 22234] [client 165.85.56.95:2072] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997117.029-1762997115.7737', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:26:25.075936 2025] [proxy_fcgi:error] [pid 22224:tid 22284] [client 165.85.56.95:62800] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/search.php
[Thu Nov 13 09:26:25.976776 2025] [proxy_fcgi:error] [pid 22224:tid 22288] [client 165.85.56.95:62800] AH01071: Got error 'PHP message: start 1762997185.5109', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:26:26.621652 2025] [proxy_fcgi:error] [pid 22224:tid 22288] [client 165.85.56.95:62800] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997186.6212-1762997185.5109', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:27:18.445068 2025] [proxy_fcgi:error] [pid 34451:tid 34466] [client 165.85.56.95:26201] AH01071: Got error 'PHP message: start 1762997237.3435', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:27:19.228449 2025] [proxy_fcgi:error] [pid 34451:tid 34466] [client 165.85.56.95:26201] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997239.2277-1762997237.3435', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:28:27.680711 2025] [proxy_fcgi:error] [pid 22307:tid 22321] [client 165.85.56.95:3673] AH01071: Got error 'PHP message: start 1762997306.9374', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:28:28.454078 2025] [proxy_fcgi:error] [pid 22307:tid 22321] [client 165.85.56.95:3673] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997308.4516-1762997306.9374', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:29:20.002343 2025] [proxy_fcgi:error] [pid 34451:tid 34474] [client 165.85.56.95:45465] AH01071: Got error 'PHP message: start 1762997359.5251', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:29:20.423567 2025] [proxy_fcgi:error] [pid 34451:tid 34474] [client 165.85.56.95:45465] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997360.4229-1762997359.5251', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:30:29.549236 2025] [proxy_fcgi:error] [pid 34451:tid 34462] [client 165.85.56.95:14440] AH01071: Got error 'PHP message: start 1762997428.9424', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:30:29.967869 2025] [proxy_fcgi:error] [pid 34451:tid 34462] [client 165.85.56.95:14440] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997429.9674-1762997428.9424', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:31:21.382487 2025] [proxy_fcgi:error] [pid 22222:tid 22235] [client 165.85.56.95:26376] AH01071: Got error 'PHP message: start 1762997480.7691', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:31:22.172254 2025] [proxy_fcgi:error] [pid 22222:tid 22235] [client 165.85.56.95:26376] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997482.1715-1762997480.7691', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:32:31.069677 2025] [proxy_fcgi:error] [pid 34451:tid 34472] [client 165.85.56.95:26621] AH01071: Got error 'PHP message: start 1762997550.4463', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:32:31.684076 2025] [proxy_fcgi:error] [pid 34451:tid 34472] [client 165.85.56.95:26621] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997551.6825-1762997550.4463', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:33:23.285650 2025] [proxy_fcgi:error] [pid 30618:tid 30662] [client 165.85.56.95:11562] AH01071: Got error 'PHP message: start 1762997602.4685', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:33:23.890606 2025] [proxy_fcgi:error] [pid 30618:tid 30662] [client 165.85.56.95:11562] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997603.8892-1762997602.4685', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:34:32.663193 2025] [proxy_fcgi:error] [pid 32823:tid 32865] [client 165.85.56.95:27494] AH01071: Got error 'PHP message: start 1762997672.13', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:34:33.134694 2025] [proxy_fcgi:error] [pid 32823:tid 32865] [client 165.85.56.95:27494] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997673.1343-1762997672.13', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:35:24.763299 2025] [proxy_fcgi:error] [pid 32882:tid 32901] [client 165.85.56.95:46578] AH01071: Got error 'PHP message: start 1762997724.181', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:35:25.565697 2025] [proxy_fcgi:error] [pid 32882:tid 32901] [client 165.85.56.95:46578] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997725.5643-1762997724.181', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:36:34.155289 2025] [proxy_fcgi:error] [pid 32822:tid 32829] [client 165.85.56.95:50499] AH01071: Got error 'PHP message: start 1762997793.5759', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:36:34.706808 2025] [proxy_fcgi:error] [pid 32822:tid 32829] [client 165.85.56.95:50499] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997794.7064-1762997793.5759', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:37:26.346719 2025] [proxy_fcgi:error] [pid 32882:tid 32890] [client 165.85.56.95:37529] AH01071: Got error 'PHP message: start 1762997845.8564', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:37:27.030311 2025] [proxy_fcgi:error] [pid 32882:tid 32890] [client 165.85.56.95:37529] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997847.0296-1762997845.8564', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:38:36.062624 2025] [proxy_fcgi:error] [pid 32822:tid 32829] [client 165.85.56.95:39633] AH01071: Got error 'PHP message: start 1762997915.2051', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:38:36.876224 2025] [proxy_fcgi:error] [pid 32822:tid 32829] [client 165.85.56.95:39633] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997916.875-1762997915.2051', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:39:27.821728 2025] [proxy_fcgi:error] [pid 32742:tid 32761] [client 165.85.56.95:22652] AH01071: Got error 'PHP message: start 1762997967.3397', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:39:28.473364 2025] [proxy_fcgi:error] [pid 32742:tid 32761] [client 165.85.56.95:22652] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762997968.4727-1762997967.3397', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:40:38.353451 2025] [proxy_fcgi:error] [pid 32742:tid 32757] [client 165.85.56.95:64953] AH01071: Got error 'PHP message: start 1762998037.7642', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:40:38.929874 2025] [proxy_fcgi:error] [pid 32742:tid 32757] [client 165.85.56.95:64953] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998038.9293-1762998037.7642', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:41:29.344123 2025] [proxy_fcgi:error] [pid 32882:tid 32902] [client 165.85.56.95:29461] AH01071: Got error 'PHP message: start 1762998088.7934', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:41:30.166095 2025] [proxy_fcgi:error] [pid 32882:tid 32902] [client 165.85.56.95:29461] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998090.1654-1762998088.7934', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:42:40.169297 2025] [proxy_fcgi:error] [pid 32823:tid 32870] [client 165.85.56.95:39542] AH01071: Got error 'PHP message: start 1762998159.4329', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:42:41.032770 2025] [proxy_fcgi:error] [pid 32823:tid 32870] [client 165.85.56.95:39542] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998161.0321-1762998159.4329', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:43:31.174310 2025] [proxy_fcgi:error] [pid 32822:tid 32846] [client 165.85.56.95:63284] AH01071: Got error 'PHP message: start 1762998210.4844', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:43:31.698750 2025] [proxy_fcgi:error] [pid 32822:tid 32846] [client 165.85.56.95:63284] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998211.6971-1762998210.4844', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:44:42.367983 2025] [proxy_fcgi:error] [pid 32822:tid 32847] [client 165.85.56.95:24868] AH01071: Got error 'PHP message: start 1762998281.5341', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:44:43.402902 2025] [proxy_fcgi:error] [pid 32822:tid 32847] [client 165.85.56.95:24868] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998283.4021-1762998281.5341', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:45:32.851699 2025] [proxy_fcgi:error] [pid 32822:tid 32846] [client 165.85.56.95:49638] AH01071: Got error 'PHP message: start 1762998332.0003', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:45:33.698733 2025] [proxy_fcgi:error] [pid 32822:tid 32846] [client 165.85.56.95:49638] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998333.6982-1762998332.0003', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:46:44.876020 2025] [proxy_fcgi:error] [pid 32882:tid 32900] [client 165.85.56.95:22796] AH01071: Got error 'PHP message: start 1762998404.2911', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:46:45.354206 2025] [proxy_fcgi:error] [pid 32882:tid 32900] [client 165.85.56.95:22796] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998405.3537-1762998404.2911', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:46:53.723058 2025] [proxy_fcgi:error] [pid 32823:tid 32864] [client 165.85.56.95:25969] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:46:55.285745 2025] [proxy_fcgi:error] [pid 32742:tid 32752] [client 165.85.56.95:39162] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:46:57.351656 2025] [proxy_fcgi:error] [pid 32742:tid 32746] [client 165.85.56.95:39162] AH01071: Got error 'PHP message: start 1762998416.7112', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:46:57.823413 2025] [proxy_fcgi:error] [pid 32742:tid 32746] [client 165.85.56.95:39162] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998417.8229-1762998416.7112', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:47:13.379299 2025] [proxy_fcgi:error] [pid 32882:tid 32886] [client 165.85.56.95:49057] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:47:15.283564 2025] [proxy_fcgi:error] [pid 32882:tid 32897] [client 165.85.56.95:49057] AH01071: Got error 'PHP message: start 1762998434.5892', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:47:16.013395 2025] [proxy_fcgi:error] [pid 32882:tid 32897] [client 165.85.56.95:49057] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998436.0129-1762998434.5892', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 09:47:34.500729 2025] [proxy_fcgi:error] [pid 32742:tid 32752] [client 165.85.56.95:50437] AH01071: Got error 'PHP message: start 1762998454.012', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:47:35.066670 2025] [proxy_fcgi:error] [pid 32742:tid 32752] [client 165.85.56.95:50437] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998455.0659-1762998454.012', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:49:17.097369 2025] [proxy_fcgi:error] [pid 32822:tid 32843] [client 165.85.56.95:13892] AH01071: Got error 'PHP message: start 1762998556.2881', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:49:18.095178 2025] [proxy_fcgi:error] [pid 32822:tid 32843] [client 165.85.56.95:13892] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998558.0945-1762998556.2881', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:49:35.878495 2025] [proxy_fcgi:error] [pid 32823:tid 32875] [client 165.85.56.95:5801] AH01071: Got error 'PHP message: start 1762998575.3744', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:49:36.417037 2025] [proxy_fcgi:error] [pid 32823:tid 32875] [client 165.85.56.95:5801] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998576.4162-1762998575.3744', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:51:18.896834 2025] [proxy_fcgi:error] [pid 32882:tid 32902] [client 165.85.56.95:33345] AH01071: Got error 'PHP message: start 1762998678.3914', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:51:19.326932 2025] [proxy_fcgi:error] [pid 32882:tid 32902] [client 165.85.56.95:33345] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998679.3264-1762998678.3914', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:51:37.146925 2025] [proxy_fcgi:error] [pid 32823:tid 32871] [client 165.85.56.95:17687] AH01071: Got error 'PHP message: start 1762998696.7193', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:51:37.568992 2025] [proxy_fcgi:error] [pid 32823:tid 32871] [client 165.85.56.95:17687] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998697.5681-1762998696.7193', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:53:20.297015 2025] [proxy_fcgi:error] [pid 32822:tid 32834] [client 165.85.56.95:53143] AH01071: Got error 'PHP message: start 1762998799.7958', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:53:20.764894 2025] [proxy_fcgi:error] [pid 32822:tid 32834] [client 165.85.56.95:53143] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998800.7643-1762998799.7958', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:53:38.327267 2025] [proxy_fcgi:error] [pid 32882:tid 32892] [client 165.85.56.95:12956] AH01071: Got error 'PHP message: start 1762998817.8654', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:53:38.793509 2025] [proxy_fcgi:error] [pid 32882:tid 32892] [client 165.85.56.95:12956] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998818.7927-1762998817.8654', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:55:21.750113 2025] [proxy_fcgi:error] [pid 32823:tid 32860] [client 165.85.56.95:44764] AH01071: Got error 'PHP message: start 1762998921.2606', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:55:22.217175 2025] [proxy_fcgi:error] [pid 32823:tid 32860] [client 165.85.56.95:44764] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998922.2165-1762998921.2606', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:55:39.938646 2025] [proxy_fcgi:error] [pid 32882:tid 32902] [client 165.85.56.95:51975] AH01071: Got error 'PHP message: start 1762998939.0798', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:55:40.612497 2025] [proxy_fcgi:error] [pid 32882:tid 32902] [client 165.85.56.95:51975] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762998940.6117-1762998939.0798', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:57:23.844339 2025] [proxy_fcgi:error] [pid 32882:tid 32898] [client 165.85.56.95:46011] AH01071: Got error 'PHP message: start 1762999043.0795', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:57:24.563040 2025] [proxy_fcgi:error] [pid 32882:tid 32898] [client 165.85.56.95:46011] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999044.5625-1762999043.0795', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:57:41.756170 2025] [proxy_fcgi:error] [pid 32822:tid 32840] [client 165.85.56.95:5923] AH01071: Got error 'PHP message: start 1762999060.9064', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:57:42.446873 2025] [proxy_fcgi:error] [pid 32822:tid 32840] [client 165.85.56.95:5923] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999062.4462-1762999060.9064', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:59:25.950356 2025] [proxy_fcgi:error] [pid 32882:tid 32890] [client 165.85.56.95:37192] AH01071: Got error 'PHP message: start 1762999165.4271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:59:26.716080 2025] [proxy_fcgi:error] [pid 32882:tid 32890] [client 165.85.56.95:37192] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999166.7155-1762999165.4271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:59:43.637463 2025] [proxy_fcgi:error] [pid 32882:tid 32899] [client 165.85.56.95:49066] AH01071: Got error 'PHP message: start 1762999182.7582', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 09:59:44.553440 2025] [proxy_fcgi:error] [pid 32882:tid 32899] [client 165.85.56.95:49066] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999184.5522-1762999182.7582', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:01:27.710292 2025] [proxy_fcgi:error] [pid 32882:tid 32887] [client 165.85.56.95:20538] AH01071: Got error 'PHP message: start 1762999287.1983', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:01:28.313828 2025] [proxy_fcgi:error] [pid 32882:tid 32887] [client 165.85.56.95:20538] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999288.3131-1762999287.1983', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:01:45.470896 2025] [proxy_fcgi:error] [pid 32823:tid 32854] [client 165.85.56.95:43258] AH01071: Got error 'PHP message: start 1762999304.8608', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:01:46.157753 2025] [proxy_fcgi:error] [pid 32823:tid 32854] [client 165.85.56.95:43258] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999306.1569-1762999304.8608', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:03:29.430305 2025] [proxy_fcgi:error] [pid 32882:tid 32908] [client 165.85.56.95:4345] AH01071: Got error 'PHP message: start 1762999408.7879', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:03:30.082463 2025] [proxy_fcgi:error] [pid 32882:tid 32908] [client 165.85.56.95:4345] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999410.0817-1762999408.7879', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:03:47.056914 2025] [proxy_fcgi:error] [pid 32822:tid 32837] [client 165.85.56.95:63109] AH01071: Got error 'PHP message: start 1762999426.4767', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:03:47.832301 2025] [proxy_fcgi:error] [pid 32822:tid 32837] [client 165.85.56.95:63109] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999427.8315-1762999426.4767', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:05:31.038447 2025] [proxy_fcgi:error] [pid 32882:tid 32893] [client 165.85.56.95:47437] AH01071: Got error 'PHP message: start 1762999530.5382', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:05:31.494943 2025] [proxy_fcgi:error] [pid 32882:tid 32893] [client 165.85.56.95:47437] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999531.4942-1762999530.5382', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:05:48.611870 2025] [proxy_fcgi:error] [pid 53582:tid 53605] [client 165.85.56.95:37424] AH01071: Got error 'PHP message: start 1762999548.1492', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:05:49.096058 2025] [proxy_fcgi:error] [pid 53582:tid 53605] [client 165.85.56.95:37424] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999549.0954-1762999548.1492', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:07:32.489626 2025] [proxy_fcgi:error] [pid 53582:tid 53604] [client 165.85.56.95:28704] AH01071: Got error 'PHP message: start 1762999651.9582', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:07:33.229038 2025] [proxy_fcgi:error] [pid 53582:tid 53604] [client 165.85.56.95:28704] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999653.2283-1762999651.9582', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:07:49.910833 2025] [proxy_fcgi:error] [pid 32882:tid 32901] [client 165.85.56.95:23385] AH01071: Got error 'PHP message: start 1762999669.3879', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:07:50.448008 2025] [proxy_fcgi:error] [pid 32882:tid 32901] [client 165.85.56.95:23385] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999670.4476-1762999669.3879', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:09:34.171753 2025] [proxy_fcgi:error] [pid 32882:tid 32898] [client 165.85.56.95:46752] AH01071: Got error 'PHP message: start 1762999773.6708', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:09:34.922490 2025] [proxy_fcgi:error] [pid 32882:tid 32898] [client 165.85.56.95:46752] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999774.9219-1762999773.6708', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:09:51.191726 2025] [proxy_fcgi:error] [pid 32882:tid 32891] [client 165.85.56.95:37900] AH01071: Got error 'PHP message: start 1762999790.7235', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:09:51.899723 2025] [proxy_fcgi:error] [pid 32882:tid 32891] [client 165.85.56.95:37900] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999791.8992-1762999790.7235', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:11:35.903386 2025] [proxy_fcgi:error] [pid 32882:tid 32904] [client 165.85.56.95:27649] AH01071: Got error 'PHP message: start 1762999895.3662', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:11:36.697678 2025] [proxy_fcgi:error] [pid 32882:tid 32904] [client 165.85.56.95:27649] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999896.6967-1762999895.3662', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:11:52.732412 2025] [proxy_fcgi:error] [pid 53582:tid 53607] [client 165.85.56.95:43684] AH01071: Got error 'PHP message: start 1762999912.2022', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:11:53.167112 2025] [proxy_fcgi:error] [pid 53582:tid 53607] [client 165.85.56.95:43684] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1762999913.1666-1762999912.2022', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:13:37.646149 2025] [proxy_fcgi:error] [pid 32742:tid 32749] [client 165.85.56.95:35079] AH01071: Got error 'PHP message: start 1763000017.1957', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:13:38.163265 2025] [proxy_fcgi:error] [pid 32742:tid 32749] [client 165.85.56.95:35079] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000018.1623-1763000017.1957', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:13:53.993790 2025] [proxy_fcgi:error] [pid 53582:tid 53599] [client 165.85.56.95:21977] AH01071: Got error 'PHP message: start 1763000033.4657', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:13:54.441679 2025] [proxy_fcgi:error] [pid 53582:tid 53599] [client 165.85.56.95:21977] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000034.4409-1763000033.4657', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:15:39.110653 2025] [proxy_fcgi:error] [pid 32882:tid 32884] [client 165.85.56.95:26891] AH01071: Got error 'PHP message: start 1763000138.611', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:15:39.830606 2025] [proxy_fcgi:error] [pid 32882:tid 32884] [client 165.85.56.95:26891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000139.8298-1763000138.611', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:15:55.221669 2025] [proxy_fcgi:error] [pid 32882:tid 32887] [client 165.85.56.95:30001] AH01071: Got error 'PHP message: start 1763000154.7106', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:15:55.931919 2025] [proxy_fcgi:error] [pid 32882:tid 32887] [client 165.85.56.95:30001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000155.9314-1763000154.7106', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:17:40.972962 2025] [proxy_fcgi:error] [pid 32742:tid 32751] [client 165.85.56.95:48567] AH01071: Got error 'PHP message: start 1763000260.3198', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:17:41.733084 2025] [proxy_fcgi:error] [pid 32742:tid 32751] [client 165.85.56.95:48567] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000261.7325-1763000260.3198', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:17:56.645816 2025] [proxy_fcgi:error] [pid 32742:tid 32747] [client 165.85.56.95:9509] AH01071: Got error 'PHP message: start 1763000276.2201', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:17:57.296850 2025] [proxy_fcgi:error] [pid 32742:tid 32747] [client 165.85.56.95:9509] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000277.2963-1763000276.2201', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:18:53.465336 2025] [proxy_fcgi:error] [pid 32822:tid 32831] [client 165.85.56.95:58803] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:18:55.667499 2025] [proxy_fcgi:error] [pid 32822:tid 32838] [client 165.85.56.95:58803] AH01071: Got error 'PHP message: start 1763000334.8849', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:18:56.193054 2025] [proxy_fcgi:error] [pid 32822:tid 32838] [client 165.85.56.95:58803] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000336.1925-1763000334.8849', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:19:42.917865 2025] [proxy_fcgi:error] [pid 32742:tid 32745] [client 165.85.56.95:31382] AH01071: Got error 'PHP message: start 1763000382.1861', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:19:43.534775 2025] [proxy_fcgi:error] [pid 32742:tid 32745] [client 165.85.56.95:31382] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000383.534-1763000382.1861', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:20:57.292490 2025] [proxy_fcgi:error] [pid 32742:tid 32750] [client 165.85.56.95:37574] AH01071: Got error 'PHP message: start 1763000456.5209', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:20:57.968358 2025] [proxy_fcgi:error] [pid 32742:tid 32750] [client 165.85.56.95:37574] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000457.9679-1763000456.5209', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:21:45.106908 2025] [proxy_fcgi:error] [pid 32823:tid 32855] [client 165.85.56.95:2480] AH01071: Got error 'PHP message: start 1763000504.5958', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:21:45.771893 2025] [proxy_fcgi:error] [pid 32823:tid 32855] [client 165.85.56.95:2480] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000505.7712-1763000504.5958', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:22:59.008535 2025] [proxy_fcgi:error] [pid 32742:tid 32745] [client 165.85.56.95:15047] AH01071: Got error 'PHP message: start 1763000578.3008', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:22:59.498937 2025] [proxy_fcgi:error] [pid 32742:tid 32745] [client 165.85.56.95:15047] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000579.4985-1763000578.3008', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:23:46.824907 2025] [proxy_fcgi:error] [pid 53582:tid 53602] [client 165.85.56.95:60199] AH01071: Got error 'PHP message: start 1763000626.3234', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:23:47.515825 2025] [proxy_fcgi:error] [pid 53582:tid 53602] [client 165.85.56.95:60199] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000627.5152-1763000626.3234', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:25:00.631917 2025] [proxy_fcgi:error] [pid 32882:tid 32894] [client 165.85.56.95:34149] AH01071: Got error 'PHP message: start 1763000699.7908', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:25:01.327445 2025] [proxy_fcgi:error] [pid 32882:tid 32894] [client 165.85.56.95:34149] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000701.327-1763000699.7908', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:25:48.997520 2025] [proxy_fcgi:error] [pid 32822:tid 32828] [client 165.85.56.95:8694] AH01071: Got error 'PHP message: start 1763000748.5271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:25:49.698976 2025] [proxy_fcgi:error] [pid 32822:tid 32828] [client 165.85.56.95:8694] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000749.6984-1763000748.5271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:27:02.641572 2025] [proxy_fcgi:error] [pid 62216:tid 62248] [client 165.85.56.95:16676] AH01071: Got error 'PHP message: start 1763000821.8772', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:27:03.326713 2025] [proxy_fcgi:error] [pid 62216:tid 62248] [client 165.85.56.95:16676] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000823.3262-1763000821.8772', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:27:51.363604 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 165.85.56.95:16450] AH01071: Got error 'PHP message: start 1763000870.8748', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:27:51.903802 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 165.85.56.95:16450] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000871.9031-1763000870.8748', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:29:04.444833 2025] [proxy_fcgi:error] [pid 62215:tid 62234] [client 165.85.56.95:58323] AH01071: Got error 'PHP message: start 1763000943.6555', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:29:05.160087 2025] [proxy_fcgi:error] [pid 62215:tid 62234] [client 165.85.56.95:58323] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000945.1597-1763000943.6555', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:29:53.248399 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:48077] AH01071: Got error 'PHP message: start 1763000992.7144', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:29:53.664529 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:48077] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763000993.6638-1763000992.7144', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:31:06.201139 2025] [proxy_fcgi:error] [pid 62215:tid 62223] [client 165.85.56.95:43158] AH01071: Got error 'PHP message: start 1763001065.4633', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:31:06.669378 2025] [proxy_fcgi:error] [pid 62215:tid 62223] [client 165.85.56.95:43158] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001066.6689-1763001065.4633', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:31:55.056996 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:37766] AH01071: Got error 'PHP message: start 1763001114.5299', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:31:55.721415 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:37766] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001115.7207-1763001114.5299', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:33:04.312695 2025] [:error] [pid 62216:tid 62252] [client 85.204.70.90:35020] [client 85.204.70.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.90, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRVDYOpyFB9M2aVQhwOn0AAAAAU"]
[Thu Nov 13 10:33:04.319434 2025] [proxy_fcgi:error] [pid 62216:tid 62252] [client 85.204.70.90:35020] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 10:33:06.931470 2025] [:error] [pid 62216:tid 62250] [client 85.204.70.90:35020] [client 85.204.70.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRVDYupyFB9M2aVQhwOn2gAAAAM"]
[Thu Nov 13 10:33:07.481669 2025] [:error] [pid 62217:tid 62281] [client 85.204.70.90:35028] [client 85.204.70.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRVDYxjGU3T9wKBmdNebzQAAAEc"]
[Thu Nov 13 10:33:07.818956 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:54213] AH01071: Got error 'PHP message: start 1763001186.9794', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:33:08.096169 2025] [:error] [pid 62303:tid 62330] [client 85.204.70.90:35040] [client 85.204.70.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRVDZL-hlFTtVrZw8jA6QAAAAJc"]
[Thu Nov 13 10:33:08.340744 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:54213] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001188.3402-1763001186.9794', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:33:08.631383 2025] [:error] [pid 62217:tid 62288] [client 85.204.70.90:35044] [client 85.204.70.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRVDZBjGU3T9wKBmdNebzwAAAE4"]
[Thu Nov 13 10:33:56.691244 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:2318] AH01071: Got error 'PHP message: start 1763001236.1786', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:33:57.387043 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:2318] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001237.3862-1763001236.1786', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:35:09.367568 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:63215] AH01071: Got error 'PHP message: start 1763001308.66', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:35:09.800193 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:63215] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001309.7998-1763001308.66', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:35:58.351162 2025] [proxy_fcgi:error] [pid 62303:tid 62323] [client 165.85.56.95:28904] AH01071: Got error 'PHP message: start 1763001357.899', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:35:58.835001 2025] [proxy_fcgi:error] [pid 62303:tid 62323] [client 165.85.56.95:28904] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001358.8343-1763001357.899', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:37:10.950279 2025] [proxy_fcgi:error] [pid 62215:tid 62238] [client 165.85.56.95:52215] AH01071: Got error 'PHP message: start 1763001430.1135', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:37:11.649847 2025] [proxy_fcgi:error] [pid 62215:tid 62238] [client 165.85.56.95:52215] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001431.649-1763001430.1135', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:37:28.413373 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:19836] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:37:29.636084 2025] [proxy_fcgi:error] [pid 62303:tid 62309] [client 165.85.56.95:19836] AH01071: Got error 'PHP message: start 1763001449.0041', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:37:29.833919 2025] [proxy_fcgi:error] [pid 62303:tid 62309] [client 165.85.56.95:19836] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001449.8334-1763001449.0041', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:37:59.731499 2025] [proxy_fcgi:error] [pid 62215:tid 62231] [client 165.85.56.95:43815] AH01071: Got error 'PHP message: start 1763001479.2812', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:38:00.180349 2025] [proxy_fcgi:error] [pid 62215:tid 62231] [client 165.85.56.95:43815] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001480.1797-1763001479.2812', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:38:21.388718 2025] [proxy_fcgi:error] [pid 62217:tid 62287] [client 165.85.56.95:39804] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:38:22.951701 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:39804] AH01071: Got error 'PHP message: start 1763001502.4688', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:38:23.680871 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:39804] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001503.6789-1763001502.4688', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:39:30.816998 2025] [proxy_fcgi:error] [pid 62303:tid 62326] [client 165.85.56.95:43697] AH01071: Got error 'PHP message: start 1763001570.1263', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:39:30.950437 2025] [proxy_fcgi:error] [pid 62303:tid 62326] [client 165.85.56.95:43697] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001570.9499-1763001570.1263', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:39:53.822205 2025] [proxy_fcgi:error] [pid 62303:tid 62324] [client 165.85.56.95:60854] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:39:55.615258 2025] [proxy_fcgi:error] [pid 62303:tid 62308] [client 165.85.56.95:60854] AH01071: Got error 'PHP message: start 1763001594.8638', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:39:55.900432 2025] [proxy_fcgi:error] [pid 62303:tid 62308] [client 165.85.56.95:60854] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001595.9001-1763001594.8638', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:40:24.771612 2025] [proxy_fcgi:error] [pid 62217:tid 62298] [client 165.85.56.95:4529] AH01071: Got error 'PHP message: start 1763001624.0177', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:40:25.526560 2025] [proxy_fcgi:error] [pid 62217:tid 62298] [client 165.85.56.95:4529] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001625.526-1763001624.0177', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:40:38.693267 2025] [:error] [pid 62217:tid 62283] [client 43.167.157.80:44058] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRVFJhjGU3T9wKBmdNeepgAAAEk"]
[Thu Nov 13 10:41:56.973943 2025] [proxy_fcgi:error] [pid 62216:tid 62265] [client 165.85.56.95:30553] AH01071: Got error 'PHP message: start 1763001716.2647', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:41:57.387758 2025] [proxy_fcgi:error] [pid 62216:tid 62265] [client 165.85.56.95:30553] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001717.387-1763001716.2647', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:42:26.572881 2025] [proxy_fcgi:error] [pid 62303:tid 62307] [client 165.85.56.95:43383] AH01071: Got error 'PHP message: start 1763001745.8272', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:42:27.279620 2025] [proxy_fcgi:error] [pid 62303:tid 62307] [client 165.85.56.95:43383] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001747.2791-1763001745.8272', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:43:58.392150 2025] [proxy_fcgi:error] [pid 62303:tid 62320] [client 165.85.56.95:62661] AH01071: Got error 'PHP message: start 1763001837.7037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:43:58.752406 2025] [proxy_fcgi:error] [pid 62303:tid 62320] [client 165.85.56.95:62661] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001838.752-1763001837.7037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:44:28.642629 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:9390] AH01071: Got error 'PHP message: start 1763001867.6117', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:44:29.395756 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:9390] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001869.3952-1763001867.6117', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:46:30.599704 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:30339] AH01071: Got error 'PHP message: start 1763001989.7336', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:46:31.283703 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:30339] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763001991.2827-1763001989.7336', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:48:26.042686 2025] [proxy_fcgi:error] [pid 62215:tid 62239] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Thu Nov 13 10:48:31.005684 2025] [proxy_fcgi:error] [pid 62215:tid 62221] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44642
[Thu Nov 13 10:48:32.290820 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:5261] AH01071: Got error 'PHP message: start 1763002111.7033', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:48:32.292667 2025] [proxy_fcgi:error] [pid 62215:tid 62233] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: start 1763002111.8661', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:48:32.941695 2025] [proxy_fcgi:error] [pid 62215:tid 62233] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002112.9413-1763002111.8661', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:48:33.020685 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:5261] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002113.0203-1763002111.7033', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:48:41.567037 2025] [proxy_fcgi:error] [pid 62215:tid 62234] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:48:44.222538 2025] [proxy_fcgi:error] [pid 62215:tid 62236] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: start 1763002123.4307', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:48:45.069741 2025] [proxy_fcgi:error] [pid 62215:tid 62236] [client 165.85.56.95:51141] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002125.0689-1763002123.4307', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:49:36.014623 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:17201] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:49:37.456619 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:17201] AH01071: Got error 'PHP message: start 1763002176.9423', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:49:38.235098 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:17201] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002178.2347-1763002176.9423', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:50:35.297900 2025] [proxy_fcgi:error] [pid 62303:tid 62324] [client 165.85.56.95:30673] AH01071: Got error 'PHP message: start 1763002233.4644', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:50:35.953910 2025] [proxy_fcgi:error] [pid 62303:tid 62324] [client 165.85.56.95:30673] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002235.9532-1763002233.4644', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:51:39.188986 2025] [proxy_fcgi:error] [pid 62217:tid 62281] [client 165.85.56.95:49899] AH01071: Got error 'PHP message: start 1763002298.5258', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:51:39.751364 2025] [proxy_fcgi:error] [pid 62217:tid 62281] [client 165.85.56.95:49899] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002299.7509-1763002298.5258', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:52:37.689780 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:59839] AH01071: Got error 'PHP message: start 1763002356.7806', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:52:38.466181 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:59839] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002358.4655-1763002356.7806', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:52:38.927475 2025] [proxy_fcgi:error] [pid 62217:tid 62298] [client 165.85.56.95:52973] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:52:40.392756 2025] [proxy_fcgi:error] [pid 62217:tid 62277] [client 165.85.56.95:52973] AH01071: Got error 'PHP message: start 1763002359.81', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:52:40.469198 2025] [proxy_fcgi:error] [pid 62217:tid 62277] [client 165.85.56.95:52973] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002360.4688-1763002359.81', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:53:46.622963 2025] [proxy_fcgi:error] [pid 62217:tid 62274] [client 165.85.56.95:40474] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:53:47.590140 2025] [proxy_fcgi:error] [pid 62217:tid 62298] [client 165.85.56.95:40474] AH01071: Got error 'PHP message: start 1763002427.266', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:53:48.071885 2025] [proxy_fcgi:error] [pid 62217:tid 62298] [client 165.85.56.95:40474] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002428.0712-1763002427.266', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:54:27.407950 2025] [proxy_fcgi:error] [pid 62215:tid 62230] [client 165.85.56.95:18271] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:54:28.439521 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:18271] AH01071: Got error 'PHP message: start 1763002467.9713', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:54:28.667105 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:18271] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002468.6667-1763002467.9713', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:54:39.667793 2025] [proxy_fcgi:error] [pid 62217:tid 62288] [client 165.85.56.95:46036] AH01071: Got error 'PHP message: start 1763002478.9151', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:54:40.107960 2025] [proxy_fcgi:error] [pid 62217:tid 62288] [client 165.85.56.95:46036] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002480.1075-1763002478.9151', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:54:51.938114 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:19893] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:54:53.675372 2025] [proxy_fcgi:error] [pid 62217:tid 62275] [client 165.85.56.95:19893] AH01071: Got error 'PHP message: start 1763002492.8277', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:54:54.352652 2025] [proxy_fcgi:error] [pid 62217:tid 62275] [client 165.85.56.95:19893] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002494.352-1763002492.8277', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:55:34.893891 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:1629] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/availability.php
[Thu Nov 13 10:55:36.729263 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:1629] AH01071: Got error 'PHP message: start 1763002535.8575', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:55:37.394717 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:1629] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002537.3943-1763002535.8575', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:55:47.888636 2025] [proxy_fcgi:error] [pid 62217:tid 62291] [client 165.85.56.95:25938] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:55:48.579094 2025] [proxy_fcgi:error] [pid 62217:tid 62276] [client 165.85.56.95:25938] AH01071: Got error 'PHP message: start 1763002548.2668', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:55:48.579504 2025] [proxy_fcgi:error] [pid 62217:tid 62276] [client 165.85.56.95:25938] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002548.5789-1763002548.2668', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:56:13.615369 2025] [proxy_fcgi:error] [pid 62303:tid 62317] [client 165.85.56.95:11269] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:56:14.562465 2025] [proxy_fcgi:error] [pid 62303:tid 62321] [client 165.85.56.95:11269] AH01071: Got error 'PHP message: start 1763002574.0224', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:56:14.563058 2025] [proxy_fcgi:error] [pid 62303:tid 62321] [client 165.85.56.95:11269] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002574.5622-1763002574.0224', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:56:40.537495 2025] [proxy_fcgi:error] [pid 62303:tid 62321] [client 165.85.56.95:28226] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: start 1763002600.5364PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/dashboard-bookings.php(109): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:56:40.674658 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:19369] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:56:41.167348 2025] [proxy_fcgi:error] [pid 62303:tid 62327] [client 165.85.56.95:19369] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:56:41.167978 2025] [proxy_fcgi:error] [pid 62303:tid 62327] [client 165.85.56.95:19369] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/includes/sqlstore.php(85): SQLStore->Query()\n#1 /home/pumpbooking/public_html/dashboard.php(149): SQLStore->QuerySingleResult()\n#2 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:57:00.703322 2025] [proxy_fcgi:error] [pid 62217:tid 62279] [client 165.85.56.95:44344] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:57:01.697661 2025] [proxy_fcgi:error] [pid 62217:tid 62291] [client 165.85.56.95:44344] AH01071: Got error 'PHP message: start 1763002621.484PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002621.697-1763002621.484', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:58:41.807482 2025] [proxy_fcgi:error] [pid 62303:tid 62328] [client 165.85.56.95:18201] AH01071: Got error 'PHP message: start 1763002720.9597', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:58:42.460899 2025] [proxy_fcgi:error] [pid 62303:tid 62328] [client 165.85.56.95:18201] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002722.4602-1763002720.9597', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 10:58:45.002203 2025] [proxy_fcgi:error] [pid 6086:tid 6113] [client 165.85.56.95:46220] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:58:45.888762 2025] [proxy_fcgi:error] [pid 6086:tid 6111] [client 165.85.56.95:46220] AH01071: Got error 'PHP message: start 1763002725.6288', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:58:46.469584 2025] [proxy_fcgi:error] [pid 6086:tid 6111] [client 165.85.56.95:46220] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002726.469-1763002725.6288', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 10:59:45.179983 2025] [:error] [pid 62217:tid 62274] [client 125.94.144.102:58786] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRVJoRjGU3T9wKBmdNemfAAAAEA"]
[Thu Nov 13 11:00:44.945641 2025] [proxy_fcgi:error] [pid 62216:tid 62259] [client 165.85.56.95:21880] AH01071: Got error 'PHP message: start 1763002842.936', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:00:45.609648 2025] [proxy_fcgi:error] [pid 62216:tid 62259] [client 165.85.56.95:21880] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002845.6089-1763002842.936', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:00:47.398005 2025] [proxy_fcgi:error] [pid 62217:tid 62276] [client 165.85.56.95:64104] AH01071: Got error 'PHP message: start 1763002846.7759', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:00:47.840258 2025] [proxy_fcgi:error] [pid 62217:tid 62276] [client 165.85.56.95:64104] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002847.8398-1763002846.7759', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:02:46.939316 2025] [proxy_fcgi:error] [pid 62216:tid 62263] [client 165.85.56.95:8118] AH01071: Got error 'PHP message: start 1763002966.127', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:02:47.630827 2025] [proxy_fcgi:error] [pid 62216:tid 62263] [client 165.85.56.95:8118] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002967.6301-1763002966.127', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:02:48.641482 2025] [proxy_fcgi:error] [pid 62216:tid 62248] [client 165.85.56.95:56891] AH01071: Got error 'PHP message: start 1763002968.1399', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:02:48.973280 2025] [proxy_fcgi:error] [pid 62216:tid 62248] [client 165.85.56.95:56891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763002968.9729-1763002968.1399', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:04:48.715959 2025] [proxy_fcgi:error] [pid 62216:tid 62269] [client 165.85.56.95:30756] AH01071: Got error 'PHP message: start 1763003088.0162', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:04:49.313432 2025] [proxy_fcgi:error] [pid 62216:tid 62269] [client 165.85.56.95:30756] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003089.3127-1763003088.0162', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:04:49.898157 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:1607] AH01071: Got error 'PHP message: start 1763003089.2835', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:04:50.469543 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:1607] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003090.4689-1763003089.2835', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:04:55.077907 2025] [proxy_fcgi:error] [pid 62303:tid 62307] [client 165.85.56.95:1607] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:04:56.486676 2025] [proxy_fcgi:error] [pid 62303:tid 62326] [client 165.85.56.95:1607] AH01071: Got error 'PHP message: start 1763003095.5499', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:04:56.653637 2025] [proxy_fcgi:error] [pid 62303:tid 62326] [client 165.85.56.95:1607] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003096.6531-1763003095.5499', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:06:51.037590 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:50491] AH01071: Got error 'PHP message: start 1763003210.1775', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:06:51.879696 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:50491] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003211.8792-1763003210.1775', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:06:57.955617 2025] [proxy_fcgi:error] [pid 62217:tid 62284] [client 165.85.56.95:61239] AH01071: Got error 'PHP message: start 1763003216.9339', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:06:58.116902 2025] [proxy_fcgi:error] [pid 62217:tid 62284] [client 165.85.56.95:61239] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003218.1164-1763003216.9339', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:06:59.802697 2025] [proxy_fcgi:error] [pid 62216:tid 62260] [client 165.85.56.95:20398] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:07:01.460099 2025] [proxy_fcgi:error] [pid 62216:tid 62263] [client 165.85.56.95:20398] AH01071: Got error 'PHP message: start 1763003220.8515', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:07:02.224723 2025] [proxy_fcgi:error] [pid 62216:tid 62263] [client 165.85.56.95:20398] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003222.2243-1763003220.8515', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:07:33.176556 2025] [proxy_fcgi:error] [pid 6086:tid 6094] [client 165.85.56.95:3329] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44629
[Thu Nov 13 11:08:35.349310 2025] [proxy_fcgi:error] [pid 62303:tid 62326] [client 165.85.56.95:12634] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44643
[Thu Nov 13 11:08:53.012638 2025] [proxy_fcgi:error] [pid 62217:tid 62288] [client 165.85.56.95:30425] AH01071: Got error 'PHP message: start 1763003332.3173', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:08:53.717153 2025] [proxy_fcgi:error] [pid 62217:tid 62288] [client 165.85.56.95:30425] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003333.7169-1763003332.3173', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:09:01.343469 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:20657] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44643
[Thu Nov 13 11:09:02.487378 2025] [proxy_fcgi:error] [pid 6086:tid 6097] [client 165.85.56.95:20657] AH01071: Got error 'PHP message: start 1763003341.9352', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:09:02.882345 2025] [proxy_fcgi:error] [pid 6086:tid 6097] [client 165.85.56.95:20657] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003342.882-1763003341.9352', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:09:09.964924 2025] [proxy_fcgi:error] [pid 62217:tid 62295] [client 165.85.56.95:3151] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:09:11.273820 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:3151] AH01071: Got error 'PHP message: start 1763003350.4632', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:09:11.558521 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:3151] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003351.5579-1763003350.4632', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 11:10:54.921123 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:54021] AH01071: Got error 'PHP message: start 1763003454.2228', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:10:55.432396 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:54021] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003455.4318-1763003454.2228', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:11:15.488832 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:33779] AH01071: Got error 'PHP message: start 1763003471.8188', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:11:15.792470 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:33779] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003475.792-1763003471.8188', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:12:57.438481 2025] [proxy_fcgi:error] [pid 62303:tid 62307] [client 165.85.56.95:11813] AH01071: Got error 'PHP message: start 1763003576.2761', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:12:58.182982 2025] [proxy_fcgi:error] [pid 62303:tid 62307] [client 165.85.56.95:11813] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003578.1824-1763003576.2761', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:13:16.865641 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:41751] AH01071: Got error 'PHP message: start 1763003596.2497', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:13:17.023504 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:41751] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003597.0232-1763003596.2497', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:14:59.327229 2025] [proxy_fcgi:error] [pid 62303:tid 62331] [client 165.85.56.95:42450] AH01071: Got error 'PHP message: start 1763003698.6153', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:15:00.032928 2025] [proxy_fcgi:error] [pid 62303:tid 62331] [client 165.85.56.95:42450] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003700.0321-1763003698.6153', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:15:18.029721 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:27588] AH01071: Got error 'PHP message: start 1763003717.3449', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:15:18.279388 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:27588] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003718.2789-1763003717.3449', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:17:01.279534 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:14298] AH01071: Got error 'PHP message: start 1763003820.532', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:17:01.970062 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:14298] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003821.9695-1763003820.532', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:17:19.527413 2025] [proxy_fcgi:error] [pid 6086:tid 6099] [client 165.85.56.95:57429] AH01071: Got error 'PHP message: start 1763003838.5711', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:17:19.774124 2025] [proxy_fcgi:error] [pid 6086:tid 6099] [client 165.85.56.95:57429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003839.7738-1763003838.5711', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:19:03.201647 2025] [proxy_fcgi:error] [pid 6086:tid 6111] [client 165.85.56.95:53446] AH01071: Got error 'PHP message: start 1763003942.4099', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:19:03.924885 2025] [proxy_fcgi:error] [pid 6086:tid 6111] [client 165.85.56.95:53446] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003943.9242-1763003942.4099', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:19:21.590224 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:7578] AH01071: Got error 'PHP message: start 1763003960.0806', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:19:21.925284 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:7578] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763003961.9245-1763003960.0806', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:21:08.951032 2025] [proxy_fcgi:error] [pid 62215:tid 62233] [client 165.85.56.95:51685] AH01071: Got error 'PHP message: start 1763004064.7957', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:21:09.502752 2025] [proxy_fcgi:error] [pid 62215:tid 62233] [client 165.85.56.95:51685] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004069.5022-1763004064.7957', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:21:23.360757 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:16741] AH01071: Got error 'PHP message: start 1763004082.2139', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:21:23.679107 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:16741] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004083.6787-1763004082.2139', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:23:10.605642 2025] [proxy_fcgi:error] [pid 62217:tid 62297] [client 165.85.56.95:51013] AH01071: Got error 'PHP message: start 1763004189.9738', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:23:11.057892 2025] [proxy_fcgi:error] [pid 62217:tid 62297] [client 165.85.56.95:51013] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004191.0572-1763004189.9738', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:25:12.345139 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:64264] AH01071: Got error 'PHP message: start 1763004311.5999', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:25:12.993344 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:64264] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004312.9929-1763004311.5999', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:27:14.449619 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:61717] AH01071: Got error 'PHP message: start 1763004433.5059', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:27:15.143153 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:61717] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004435.1425-1763004433.5059', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:29:16.290664 2025] [proxy_fcgi:error] [pid 6086:tid 6108] [client 165.85.56.95:34674] AH01071: Got error 'PHP message: start 1763004555.6275', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:29:16.748922 2025] [proxy_fcgi:error] [pid 6086:tid 6108] [client 165.85.56.95:34674] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004556.7484-1763004555.6275', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:31:18.025756 2025] [proxy_fcgi:error] [pid 62216:tid 62262] [client 165.85.56.95:48632] AH01071: Got error 'PHP message: start 1763004677.2039', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:31:18.501117 2025] [proxy_fcgi:error] [pid 62216:tid 62262] [client 165.85.56.95:48632] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004678.5006-1763004677.2039', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:33:20.320656 2025] [proxy_fcgi:error] [pid 62303:tid 62312] [client 165.85.56.95:19657] AH01071: Got error 'PHP message: start 1763004799.0159', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:33:20.906974 2025] [proxy_fcgi:error] [pid 62303:tid 62312] [client 165.85.56.95:19657] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004800.9063-1763004799.0159', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:35:22.063178 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:41614] AH01071: Got error 'PHP message: start 1763004921.3714', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:35:22.757853 2025] [proxy_fcgi:error] [pid 62217:tid 62278] [client 165.85.56.95:41614] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763004922.7573-1763004921.3714', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:37:23.975410 2025] [proxy_fcgi:error] [pid 62215:tid 62237] [client 165.85.56.95:62838] AH01071: Got error 'PHP message: start 1763005043.3048', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:37:24.503169 2025] [proxy_fcgi:error] [pid 62215:tid 62237] [client 165.85.56.95:62838] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763005044.502-1763005043.3048', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:39:26.113571 2025] [proxy_fcgi:error] [pid 6086:tid 6093] [client 165.85.56.95:26626] AH01071: Got error 'PHP message: start 1763005165.2799', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:39:26.839712 2025] [proxy_fcgi:error] [pid 6086:tid 6093] [client 165.85.56.95:26626] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763005166.8394-1763005165.2799', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:41:28.579641 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:38770] AH01071: Got error 'PHP message: start 1763005287.656', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:41:29.283126 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:38770] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763005289.2827-1763005287.656', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:43:30.458623 2025] [proxy_fcgi:error] [pid 6086:tid 6105] [client 165.85.56.95:48796] AH01071: Got error 'PHP message: start 1763005409.8184', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:43:31.211661 2025] [proxy_fcgi:error] [pid 6086:tid 6105] [client 165.85.56.95:48796] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763005411.211-1763005409.8184', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 11:59:12.240454 2025] [:error] [pid 62216:tid 62269] [client 170.106.179.68:55916] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRVXkOpyFB9M2aVQhwPHZQAAABY"]
[Thu Nov 13 12:28:27.445080 2025] [:error] [pid 62217:tid 62293] [client 221.121.101.21:38534] [client 221.121.101.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 221.121.101.21, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRVeaxjGU3T9wKBmdNfKSQAAAFM"]
[Thu Nov 13 12:28:27.457451 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 221.121.101.21:38534] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 12:32:14.371137 2025] [proxy_fcgi:error] [pid 62215:tid 62241] [client 165.85.56.95:10318] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Thu Nov 13 12:32:16.991794 2025] [proxy_fcgi:error] [pid 62215:tid 62237] [client 165.85.56.95:10318] AH01071: Got error 'PHP message: start 1763008336.4799', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:32:17.634328 2025] [proxy_fcgi:error] [pid 62215:tid 62237] [client 165.85.56.95:10318] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008337.6339-1763008336.4799', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:36:02.747997 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:35637] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Thu Nov 13 12:36:05.030809 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:35637] AH01071: Got error 'PHP message: start 1763008564.587', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:36:05.517887 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:35637] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008565.5174-1763008564.587', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:37:43.164347 2025] [proxy_fcgi:error] [pid 6086:tid 6113] [client 165.85.56.95:3682] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:37:45.455427 2025] [proxy_fcgi:error] [pid 6086:tid 6097] [client 165.85.56.95:3682] AH01071: Got error 'PHP message: start 1763008664.8309', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:37:45.934994 2025] [proxy_fcgi:error] [pid 6086:tid 6097] [client 165.85.56.95:3682] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008665.9345-1763008664.8309', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:39:35.286267 2025] [proxy_fcgi:error] [pid 62303:tid 62309] [client 165.85.56.95:38444] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44176
[Thu Nov 13 12:39:37.254648 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:38444] AH01071: Got error 'PHP message: start 1763008776.61', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:39:37.693511 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:38444] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008777.693-1763008776.61', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:39:50.498565 2025] [proxy_fcgi:error] [pid 62303:tid 62328] [client 165.85.56.95:29928] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:39:52.399642 2025] [proxy_fcgi:error] [pid 62303:tid 62310] [client 165.85.56.95:29928] AH01071: Got error 'PHP message: start 1763008791.9166', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:39:53.348001 2025] [proxy_fcgi:error] [pid 62303:tid 62310] [client 165.85.56.95:29928] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008793.3467-1763008791.9166', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:42:43.031308 2025] [proxy_fcgi:error] [pid 62216:tid 62261] [client 165.85.56.95:61965] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44189
[Thu Nov 13 12:42:45.183166 2025] [proxy_fcgi:error] [pid 62216:tid 62268] [client 165.85.56.95:61965] AH01071: Got error 'PHP message: start 1763008964.5222', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:42:45.863754 2025] [proxy_fcgi:error] [pid 62216:tid 62268] [client 165.85.56.95:61965] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008965.8633-1763008964.5222', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:43:07.654921 2025] [proxy_fcgi:error] [pid 62217:tid 62296] [client 165.85.56.95:8471] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:43:09.652696 2025] [proxy_fcgi:error] [pid 62217:tid 62280] [client 165.85.56.95:8471] AH01071: Got error 'PHP message: start 1763008989.0098', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:43:10.650102 2025] [proxy_fcgi:error] [pid 62217:tid 62280] [client 165.85.56.95:8471] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763008990.6496-1763008989.0098', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:43:29.410187 2025] [proxy_fcgi:error] [pid 6086:tid 6108] [client 165.85.56.95:12208] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:43:30.994399 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:12208] AH01071: Got error 'PHP message: start 1763009010.6113', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:43:32.004919 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:12208] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009012.0045-1763009010.6113', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:45:24.830341 2025] [proxy_fcgi:error] [pid 62303:tid 62321] [client 165.85.56.95:31966] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:45:26.242137 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:31966] AH01071: Got error 'PHP message: start 1763009125.8504', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:45:27.257401 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:31966] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009127.2571-1763009125.8504', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:46:54.274941 2025] [proxy_fcgi:error] [pid 62217:tid 62287] [client 165.85.56.95:28324] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:46:56.517615 2025] [proxy_fcgi:error] [pid 62217:tid 62296] [client 165.85.56.95:28324] AH01071: Got error 'PHP message: start 1763009215.6887', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:46:56.969920 2025] [proxy_fcgi:error] [pid 62217:tid 62296] [client 165.85.56.95:28324] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009216.9696-1763009215.6887', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:48:01.859386 2025] [proxy_fcgi:error] [pid 62217:tid 62290] [client 165.85.56.95:33483] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44524
[Thu Nov 13 12:48:03.431646 2025] [proxy_fcgi:error] [pid 62217:tid 62297] [client 165.85.56.95:33483] AH01071: Got error 'PHP message: start 1763009282.597', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:48:03.883782 2025] [proxy_fcgi:error] [pid 62217:tid 62297] [client 165.85.56.95:33483] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009283.8834-1763009282.597', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:48:19.442469 2025] [proxy_fcgi:error] [pid 62217:tid 62285] [client 165.85.56.95:7296] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:48:21.502212 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:7296] AH01071: Got error 'PHP message: start 1763009300.6617', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:48:22.285002 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:7296] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009302.284-1763009300.6617', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:48:58.163634 2025] [proxy_fcgi:error] [pid 62216:tid 62253] [client 165.85.56.95:6119] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44420
[Thu Nov 13 12:48:59.546639 2025] [proxy_fcgi:error] [pid 62216:tid 62255] [client 165.85.56.95:6119] AH01071: Got error 'PHP message: start 1763009339.0582', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:49:00.256085 2025] [proxy_fcgi:error] [pid 62216:tid 62255] [client 165.85.56.95:6119] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009340.2558-1763009339.0582', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:50:14.487412 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 165.85.56.95:18433] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44420
[Thu Nov 13 12:50:27.665660 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:56546] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44420
[Thu Nov 13 12:50:29.195683 2025] [proxy_fcgi:error] [pid 6086:tid 6096] [client 165.85.56.95:56546] AH01071: Got error 'PHP message: start 1763009428.4195', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:50:29.598203 2025] [proxy_fcgi:error] [pid 6086:tid 6096] [client 165.85.56.95:56546] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009429.5978-1763009428.4195', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:50:42.375775 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:41927] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:50:44.018279 2025] [proxy_fcgi:error] [pid 6086:tid 6103] [client 165.85.56.95:41927] AH01071: Got error 'PHP message: start 1763009443.3217', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:50:44.774845 2025] [proxy_fcgi:error] [pid 6086:tid 6103] [client 165.85.56.95:41927] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009444.7741-1763009443.3217', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:10.265716 2025] [proxy_fcgi:error] [pid 62215:tid 62232] [client 165.85.56.95:7310] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:11.139866 2025] [proxy_fcgi:error] [pid 62215:tid 62237] [client 165.85.56.95:49231] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:12.357609 2025] [proxy_fcgi:error] [pid 62215:tid 62239] [client 165.85.56.95:49231] AH01071: Got error 'PHP message: start 1763009471.9441', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:13.074859 2025] [proxy_fcgi:error] [pid 62215:tid 62239] [client 165.85.56.95:49231] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009473.074-1763009471.9441', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:32.169230 2025] [proxy_fcgi:error] [pid 62217:tid 62279] [client 165.85.56.95:58654] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:33.734967 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:58654] AH01071: Got error 'PHP message: start 1763009493.1891', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:51:34.064843 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:58654] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009494.0642-1763009493.1891', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:52:48.234615 2025] [proxy_fcgi:error] [pid 62303:tid 62331] [client 165.85.56.95:1497] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44424
[Thu Nov 13 12:52:49.546706 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:1497] AH01071: Got error 'PHP message: start 1763009569.0607', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:52:50.095885 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:1497] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009570.0956-1763009569.0607', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:54:11.605251 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:54500] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:54:12.506859 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:54500] AH01071: Got error 'PHP message: start 1763009652.1991', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:54:12.645539 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:54500] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009652.6451-1763009652.1991', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:55:19.718374 2025] [proxy_fcgi:error] [pid 62303:tid 62317] [client 165.85.56.95:64841] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:55:21.003592 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:64841] AH01071: Got error 'PHP message: start 1763009720.5315', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:55:21.511183 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:64841] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009721.5109-1763009720.5315', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:56:25.534148 2025] [proxy_fcgi:error] [pid 62216:tid 62262] [client 165.85.56.95:12399] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44524
[Thu Nov 13 12:56:26.510284 2025] [proxy_fcgi:error] [pid 62216:tid 62259] [client 165.85.56.95:3574] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44524
[Thu Nov 13 12:56:27.586693 2025] [proxy_fcgi:error] [pid 62216:tid 62248] [client 165.85.56.95:3574] AH01071: Got error 'PHP message: start 1763009787.1025', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:56:27.999470 2025] [proxy_fcgi:error] [pid 62216:tid 62248] [client 165.85.56.95:3574] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009787.9991-1763009787.1025', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:56:33.614355 2025] [proxy_fcgi:error] [pid 62216:tid 62266] [client 165.85.56.95:3574] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:56:34.576303 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:3574] AH01071: Got error 'PHP message: start 1763009794.1221', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:56:34.817850 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:3574] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009794.8152-1763009794.1221', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:57:01.711316 2025] [proxy_fcgi:error] [pid 6086:tid 6107] [client 165.85.56.95:26267] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44530
[Thu Nov 13 12:57:02.679229 2025] [proxy_fcgi:error] [pid 6086:tid 6103] [client 165.85.56.95:26267] AH01071: Got error 'PHP message: start 1763009822.3817', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:57:03.030504 2025] [proxy_fcgi:error] [pid 6086:tid 6103] [client 165.85.56.95:26267] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009823.03-1763009822.3817', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:57:34.592509 2025] [proxy_fcgi:error] [pid 6086:tid 6100] [client 165.85.56.95:26279] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:57:35.740322 2025] [proxy_fcgi:error] [pid 6086:tid 6098] [client 165.85.56.95:26279] AH01071: Got error 'PHP message: start 1763009855.3616', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:57:36.468280 2025] [proxy_fcgi:error] [pid 6086:tid 6098] [client 165.85.56.95:26279] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009856.4679-1763009855.3616', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 12:59:37.664070 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:39027] AH01071: Got error 'PHP message: start 1763009976.9675', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 12:59:38.308263 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:39027] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763009978.3078-1763009976.9675', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:01:00.920301 2025] [proxy_fcgi:error] [pid 6086:tid 6104] [client 165.85.56.95:21619] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:01:01.669841 2025] [proxy_fcgi:error] [pid 6086:tid 6093] [client 165.85.56.95:21619] AH01071: Got error 'PHP message: start 1763010061.6089', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:01:02.710821 2025] [proxy_fcgi:error] [pid 6086:tid 6093] [client 165.85.56.95:21619] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010062.7104-1763010061.6089', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:01:29.428608 2025] [proxy_fcgi:error] [pid 62217:tid 62291] [client 165.85.56.95:2142] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:01:30.224280 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:2142] AH01071: Got error 'PHP message: start 1763010090.1849', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:01:31.194274 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:2142] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010091.1938-1763010090.1849', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:01:58.348131 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:61028] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:02:00.000202 2025] [proxy_fcgi:error] [pid 62303:tid 62321] [client 165.85.56.95:61028] AH01071: Got error 'PHP message: start 1763010119.4542', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:02:00.891875 2025] [proxy_fcgi:error] [pid 62303:tid 62321] [client 165.85.56.95:61028] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010120.8914-1763010119.4542', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:03:17.471611 2025] [proxy_fcgi:error] [pid 62217:tid 62276] [client 165.85.56.95:4485] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=41764
[Thu Nov 13 13:03:18.903221 2025] [proxy_fcgi:error] [pid 62217:tid 62294] [client 165.85.56.95:4485] AH01071: Got error 'PHP message: start 1763010198.4886', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:03:19.807827 2025] [proxy_fcgi:error] [pid 62217:tid 62294] [client 165.85.56.95:4485] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010199.8072-1763010198.4886', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:05:20.869556 2025] [proxy_fcgi:error] [pid 62215:tid 62240] [client 165.85.56.95:38753] AH01071: Got error 'PHP message: start 1763010320.181', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:05:21.790959 2025] [proxy_fcgi:error] [pid 62215:tid 62240] [client 165.85.56.95:38753] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010321.7903-1763010320.181', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:07:22.937629 2025] [proxy_fcgi:error] [pid 6086:tid 6096] [client 165.85.56.95:64449] AH01071: Got error 'PHP message: start 1763010442.1719', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:07:23.747322 2025] [proxy_fcgi:error] [pid 6086:tid 6096] [client 165.85.56.95:64449] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010443.7468-1763010442.1719', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:08:25.209631 2025] [proxy_fcgi:error] [pid 6086:tid 6094] [client 165.85.56.95:33032] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:08:27.042401 2025] [proxy_fcgi:error] [pid 6086:tid 6099] [client 165.85.56.95:33032] AH01071: Got error 'PHP message: start 1763010506.5297', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:08:27.992617 2025] [proxy_fcgi:error] [pid 6086:tid 6099] [client 165.85.56.95:33032] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010507.992-1763010506.5297', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:09:12.495126 2025] [proxy_fcgi:error] [pid 62217:tid 62282] [client 165.85.56.95:38898] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=41546
[Thu Nov 13 13:09:14.198003 2025] [proxy_fcgi:error] [pid 62217:tid 62292] [client 165.85.56.95:38898] AH01071: Got error 'PHP message: start 1763010553.6828', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:09:15.165119 2025] [proxy_fcgi:error] [pid 62217:tid 62292] [client 165.85.56.95:38898] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010555.1646-1763010553.6828', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:10:10.924215 2025] [proxy_fcgi:error] [pid 6086:tid 6105] [client 165.85.56.95:53269] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:10:12.253691 2025] [proxy_fcgi:error] [pid 6086:tid 6101] [client 165.85.56.95:53269] AH01071: Got error 'PHP message: start 1763010611.8374', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:10:12.519259 2025] [proxy_fcgi:error] [pid 6086:tid 6101] [client 165.85.56.95:53269] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010612.5184-1763010611.8374', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:11:16.769218 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:39949] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=42050
[Thu Nov 13 13:11:19.067178 2025] [proxy_fcgi:error] [pid 62303:tid 62320] [client 165.85.56.95:39949] AH01071: Got error 'PHP message: start 1763010678.1188', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:11:19.520141 2025] [proxy_fcgi:error] [pid 62303:tid 62320] [client 165.85.56.95:39949] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010679.5197-1763010678.1188', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:12:15.591634 2025] [proxy_fcgi:error] [pid 6086:tid 6101] [client 165.85.56.95:45118] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=42050
[Thu Nov 13 13:12:17.430629 2025] [proxy_fcgi:error] [pid 62215:tid 62235] [client 165.85.56.95:35401] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=42050
[Thu Nov 13 13:12:19.221780 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:35401] AH01071: Got error 'PHP message: start 1763010738.4714', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:12:19.504477 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:35401] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010739.5041-1763010738.4714', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:14:20.562290 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:38647] AH01071: Got error 'PHP message: start 1763010859.9012', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:14:20.961060 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:38647] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010860.9604-1763010859.9012', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:15:51.234545 2025] [proxy_fcgi:error] [pid 62216:tid 62257] [client 165.85.56.95:32189] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:15:52.639199 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:32189] AH01071: Got error 'PHP message: start 1763010952.2203', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:15:53.320143 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:32189] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010953.3197-1763010952.2203', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:16:08.068637 2025] [proxy_fcgi:error] [pid 62303:tid 62314] [client 165.85.56.95:45001] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:16:09.059802 2025] [proxy_fcgi:error] [pid 62303:tid 62312] [client 165.85.56.95:45001] AH01071: Got error 'PHP message: start 1763010968.712', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:16:09.806644 2025] [proxy_fcgi:error] [pid 62303:tid 62312] [client 165.85.56.95:45001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763010969.8063-1763010968.712', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:16:59.331297 2025] [proxy_fcgi:error] [pid 62216:tid 62257] [client 165.85.56.95:39131] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:17:00.665569 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:39131] AH01071: Got error 'PHP message: start 1763011020.2063', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:17:01.366842 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:39131] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011021.3664-1763011020.2063', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:19:02.358634 2025] [proxy_fcgi:error] [pid 62216:tid 62271] [client 165.85.56.95:31128] AH01071: Got error 'PHP message: start 1763011141.7621', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:19:02.866039 2025] [proxy_fcgi:error] [pid 62216:tid 62271] [client 165.85.56.95:31128] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011142.8654-1763011141.7621', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:21:04.067627 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:38513] AH01071: Got error 'PHP message: start 1763011263.3143', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:21:04.772727 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:38513] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011264.7723-1763011263.3143', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:23:06.129511 2025] [proxy_fcgi:error] [pid 62215:tid 62236] [client 165.85.56.95:17587] AH01071: Got error 'PHP message: start 1763011385.2443', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:23:06.829276 2025] [proxy_fcgi:error] [pid 62215:tid 62236] [client 165.85.56.95:17587] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011386.8289-1763011385.2443', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:25:07.979735 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:38878] AH01071: Got error 'PHP message: start 1763011507.2484', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:25:08.690485 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:38878] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011508.6895-1763011507.2484', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:27:09.768417 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 165.85.56.95:54184] AH01071: Got error 'PHP message: start 1763011629.1471', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:27:10.230418 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 165.85.56.95:54184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011630.23-1763011629.1471', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:27:54.258141 2025] [proxy_fcgi:error] [pid 62216:tid 62255] [client 165.85.56.95:40470] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:27:55.369793 2025] [proxy_fcgi:error] [pid 62216:tid 62263] [client 165.85.56.95:40470] AH01071: Got error 'PHP message: start 1763011675.0258', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:27:56.076238 2025] [proxy_fcgi:error] [pid 62216:tid 62263] [client 165.85.56.95:40470] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011676.0758-1763011675.0258', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:28:45.543833 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:49710] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=42370
[Thu Nov 13 13:28:47.359794 2025] [proxy_fcgi:error] [pid 62303:tid 62331] [client 165.85.56.95:49710] AH01071: Got error 'PHP message: start 1763011726.7656', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:28:48.158583 2025] [proxy_fcgi:error] [pid 62303:tid 62331] [client 165.85.56.95:49710] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011728.1583-1763011726.7656', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:30:36.775021 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:64915] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:30:38.590745 2025] [proxy_fcgi:error] [pid 62216:tid 62251] [client 165.85.56.95:64915] AH01071: Got error 'PHP message: start 1763011837.9493', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:30:39.370365 2025] [proxy_fcgi:error] [pid 62216:tid 62251] [client 165.85.56.95:64915] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011839.37-1763011837.9493', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:32:23.452655 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:45275] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:32:25.014586 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:45275] AH01071: Got error 'PHP message: start 1763011944.5523', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:32:26.053104 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:45275] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763011946.0526-1763011944.5523', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:33:24.210829 2025] [proxy_fcgi:error] [pid 62215:tid 62220] [client 165.85.56.95:48876] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:33:25.764357 2025] [proxy_fcgi:error] [pid 62215:tid 62225] [client 165.85.56.95:48876] AH01071: Got error 'PHP message: start 1763012005.2969', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:33:26.744988 2025] [proxy_fcgi:error] [pid 62215:tid 62225] [client 165.85.56.95:48876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012006.7445-1763012005.2969', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:33:31.779315 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:48876] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:33:32.687802 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:48876] AH01071: Got error 'PHP message: start 1763012012.51', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:33:33.019191 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:48876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012013.0185-1763012012.51', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:34:42.077415 2025] [proxy_fcgi:error] [pid 62215:tid 62239] [client 165.85.56.95:52653] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:34:43.338577 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:52653] AH01071: Got error 'PHP message: start 1763012083.0288', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:34:43.947667 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:52653] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012083.9472-1763012083.0288', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:35:20.737461 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 165.85.56.95:62129] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:35:22.934676 2025] [proxy_fcgi:error] [pid 62217:tid 62290] [client 165.85.56.95:62129] AH01071: Got error 'PHP message: start 1763012122.0271', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:35:23.668678 2025] [proxy_fcgi:error] [pid 62217:tid 62290] [client 165.85.56.95:62129] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012123.6682-1763012122.0271', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:36:33.686288 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:62608] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:36:35.425623 2025] [proxy_fcgi:error] [pid 6086:tid 6091] [client 165.85.56.95:62608] AH01071: Got error 'PHP message: start 1763012194.6939', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:36:35.561765 2025] [proxy_fcgi:error] [pid 6086:tid 6091] [client 165.85.56.95:62608] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012195.5614-1763012194.6939', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:37:16.358651 2025] [proxy_fcgi:error] [pid 62215:tid 62241] [client 165.85.56.95:14684] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:37:17.692512 2025] [proxy_fcgi:error] [pid 62215:tid 62226] [client 165.85.56.95:14684] AH01071: Got error 'PHP message: start 1763012237.2114', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:37:18.421508 2025] [proxy_fcgi:error] [pid 62215:tid 62226] [client 165.85.56.95:14684] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012238.421-1763012237.2114', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:07.126398 2025] [proxy_fcgi:error] [pid 62303:tid 62309] [client 165.85.56.95:35136] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=43340
[Thu Nov 13 13:38:08.341962 2025] [proxy_fcgi:error] [pid 62303:tid 62317] [client 165.85.56.95:35136] AH01071: Got error 'PHP message: start 1763012288.0503', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:08.752412 2025] [proxy_fcgi:error] [pid 62303:tid 62317] [client 165.85.56.95:35136] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012288.752-1763012288.0503', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:22.388248 2025] [proxy_fcgi:error] [pid 6086:tid 6105] [client 165.85.56.95:24151] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:23.363888 2025] [proxy_fcgi:error] [pid 6086:tid 6098] [client 165.85.56.95:24151] AH01071: Got error 'PHP message: start 1763012303.079', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:23.453044 2025] [proxy_fcgi:error] [pid 6086:tid 6098] [client 165.85.56.95:24151] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012303.4526-1763012303.079', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:52.996568 2025] [proxy_fcgi:error] [pid 62215:tid 62220] [client 165.85.56.95:17986] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=43395
[Thu Nov 13 13:38:53.782800 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:17986] AH01071: Got error 'PHP message: start 1763012333.5039', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:38:53.932682 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:17986] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012333.9322-1763012333.5039', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:39:48.421901 2025] [proxy_fcgi:error] [pid 6086:tid 6105] [client 165.85.56.95:2949] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:39:49.732751 2025] [proxy_fcgi:error] [pid 6086:tid 6099] [client 165.85.56.95:2949] AH01071: Got error 'PHP message: start 1763012389.174', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:39:50.439182 2025] [proxy_fcgi:error] [pid 6086:tid 6099] [client 165.85.56.95:2949] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012390.4387-1763012389.174', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:41:13.710854 2025] [proxy_fcgi:error] [pid 62215:tid 62221] [client 165.85.56.95:21626] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:41:15.169658 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:21626] AH01071: Got error 'PHP message: start 1763012474.6612', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:41:16.128228 2025] [proxy_fcgi:error] [pid 62215:tid 62219] [client 165.85.56.95:21626] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012476.1278-1763012474.6612', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:42:45.009433 2025] [proxy_fcgi:error] [pid 62303:tid 62316] [client 165.85.56.95:47461] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=43461
[Thu Nov 13 13:42:46.677932 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:47461] AH01071: Got error 'PHP message: start 1763012566.0992', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:42:47.618974 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:47461] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012567.6185-1763012566.0992', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:44:46.339638 2025] [proxy_fcgi:error] [pid 62215:tid 62223] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:44:48.524631 2025] [proxy_fcgi:error] [pid 62215:tid 62234] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: start 1763012687.78', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:44:49.585039 2025] [proxy_fcgi:error] [pid 62215:tid 62234] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012689.5844-1763012687.78', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:45:12.849588 2025] [proxy_fcgi:error] [pid 6086:tid 6113] [client 165.85.56.95:3750] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:45:14.380791 2025] [proxy_fcgi:error] [pid 6086:tid 6089] [client 165.85.56.95:3750] AH01071: Got error 'PHP message: start 1763012713.8657', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:45:14.850434 2025] [proxy_fcgi:error] [pid 6086:tid 6089] [client 165.85.56.95:3750] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012714.8496-1763012713.8657', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:47:16.123096 2025] [proxy_fcgi:error] [pid 62303:tid 62317] [client 165.85.56.95:42326] AH01071: Got error 'PHP message: start 1763012835.2531', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:47:16.704386 2025] [proxy_fcgi:error] [pid 62303:tid 62317] [client 165.85.56.95:42326] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012836.7037-1763012835.2531', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:47:43.232675 2025] [proxy_fcgi:error] [pid 62217:tid 62293] [client 165.85.56.95:11455] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:47:44.771989 2025] [proxy_fcgi:error] [pid 62217:tid 62291] [client 165.85.56.95:11455] AH01071: Got error 'PHP message: start 1763012863.9831', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:47:45.334090 2025] [proxy_fcgi:error] [pid 62217:tid 62291] [client 165.85.56.95:11455] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012865.3332-1763012863.9831', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:48:16.501317 2025] [proxy_fcgi:error] [pid 62217:tid 62289] [client 165.85.56.95:36593] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:48:19.146825 2025] [proxy_fcgi:error] [pid 62217:tid 62287] [client 165.85.56.95:36593] AH01071: Got error 'PHP message: start 1763012898.0522', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:48:20.097399 2025] [proxy_fcgi:error] [pid 62217:tid 62287] [client 165.85.56.95:36593] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763012900.0969-1763012898.0522', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 13:50:21.146274 2025] [proxy_fcgi:error] [pid 62217:tid 62277] [client 165.85.56.95:25597] AH01071: Got error 'PHP message: start 1763013020.5114', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:50:21.604803 2025] [proxy_fcgi:error] [pid 62217:tid 62277] [client 165.85.56.95:25597] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013021.6042-1763013020.5114', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:50:47.066279 2025] [proxy_fcgi:error] [pid 62216:tid 62261] [client 165.85.56.95:42488] AH01071: Got error 'PHP message: start 1763013046.3192', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:50:47.674254 2025] [proxy_fcgi:error] [pid 62216:tid 62261] [client 165.85.56.95:42488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013047.6738-1763013046.3192', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:52:22.804642 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:58513] AH01071: Got error 'PHP message: start 1763013142.1354', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:52:23.359502 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:58513] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013143.3591-1763013142.1354', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:54:24.517488 2025] [proxy_fcgi:error] [pid 62303:tid 62310] [client 165.85.56.95:5475] AH01071: Got error 'PHP message: start 1763013263.8388', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:54:25.151846 2025] [proxy_fcgi:error] [pid 62303:tid 62310] [client 165.85.56.95:5475] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013265.1513-1763013263.8388', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:56:26.120689 2025] [proxy_fcgi:error] [pid 62215:tid 62238] [client 165.85.56.95:30510] AH01071: Got error 'PHP message: start 1763013385.5904', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:56:26.540950 2025] [proxy_fcgi:error] [pid 62215:tid 62238] [client 165.85.56.95:30510] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013386.5405-1763013385.5904', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:58:27.636293 2025] [proxy_fcgi:error] [pid 6086:tid 6111] [client 165.85.56.95:16801] AH01071: Got error 'PHP message: start 1763013506.9792', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 13:58:28.116794 2025] [proxy_fcgi:error] [pid 6086:tid 6111] [client 165.85.56.95:16801] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013508.1163-1763013506.9792', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:00:29.209977 2025] [proxy_fcgi:error] [pid 62215:tid 62235] [client 165.85.56.95:52921] AH01071: Got error 'PHP message: start 1763013628.5182', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:00:29.916958 2025] [proxy_fcgi:error] [pid 62215:tid 62235] [client 165.85.56.95:52921] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013629.9167-1763013628.5182', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:02:31.068710 2025] [proxy_fcgi:error] [pid 6086:tid 6095] [client 165.85.56.95:59943] AH01071: Got error 'PHP message: start 1763013750.3893', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:02:31.771460 2025] [proxy_fcgi:error] [pid 6086:tid 6095] [client 165.85.56.95:59943] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013751.7712-1763013750.3893', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:04:32.865219 2025] [proxy_fcgi:error] [pid 62216:tid 62258] [client 165.85.56.95:26115] AH01071: Got error 'PHP message: start 1763013872.2236', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:04:33.387886 2025] [proxy_fcgi:error] [pid 62216:tid 62258] [client 165.85.56.95:26115] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013873.3874-1763013872.2236', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:06:34.486815 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:30208] AH01071: Got error 'PHP message: start 1763013993.8898', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:06:34.900167 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:30208] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763013994.8995-1763013993.8898', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:08:36.007024 2025] [proxy_fcgi:error] [pid 6086:tid 6095] [client 165.85.56.95:28303] AH01071: Got error 'PHP message: start 1763014115.3709', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:08:36.626733 2025] [proxy_fcgi:error] [pid 6086:tid 6095] [client 165.85.56.95:28303] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763014116.6264-1763014115.3709', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:10:39.133136 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:12606] AH01071: Got error 'PHP message: start 1763014238.1625', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 14:10:39.650870 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:12606] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763014239.6501-1763014238.1625', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:42:52.370808 2025] [proxy_fcgi:error] [pid 6086:tid 6110] [client 165.85.56.95:8352] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 15:42:55.286807 2025] [proxy_fcgi:error] [pid 6086:tid 6113] [client 165.85.56.95:8352] AH01071: Got error 'PHP message: start 1763019774.5046', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 15:42:56.025278 2025] [proxy_fcgi:error] [pid 6086:tid 6113] [client 165.85.56.95:8352] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763019776.0249-1763019774.5046', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 15:43:04.771983 2025] [proxy_fcgi:error] [pid 62217:tid 62279] [client 165.85.56.95:22726] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44641
[Thu Nov 13 15:43:14.502259 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 165.85.56.95:31830] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44641
[Thu Nov 13 15:43:15.696904 2025] [proxy_fcgi:error] [pid 6086:tid 6089] [client 165.85.56.95:31830] AH01071: Got error 'PHP message: start 1763019795.0114', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 15:43:16.088231 2025] [proxy_fcgi:error] [pid 6086:tid 6089] [client 165.85.56.95:31830] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763019796.0877-1763019795.0114', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 15:45:16.971607 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:42907] AH01071: Got error 'PHP message: start 1763019916.3461', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:45:17.349893 2025] [proxy_fcgi:error] [pid 62303:tid 62315] [client 165.85.56.95:42907] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763019917.3489-1763019916.3461', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:47:18.335778 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:10467] AH01071: Got error 'PHP message: start 1763020037.6798', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:47:18.935252 2025] [proxy_fcgi:error] [pid 62303:tid 62319] [client 165.85.56.95:10467] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020038.9348-1763020037.6798', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:49:19.796968 2025] [proxy_fcgi:error] [pid 62216:tid 62271] [client 165.85.56.95:44002] AH01071: Got error 'PHP message: start 1763020159.2301', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:49:20.124985 2025] [proxy_fcgi:error] [pid 62216:tid 62271] [client 165.85.56.95:44002] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020160.1246-1763020159.2301', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:51:21.016324 2025] [proxy_fcgi:error] [pid 62216:tid 62251] [client 165.85.56.95:64605] AH01071: Got error 'PHP message: start 1763020280.4265', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:51:21.365750 2025] [proxy_fcgi:error] [pid 62216:tid 62251] [client 165.85.56.95:64605] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020281.365-1763020280.4265', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:53:22.275811 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:19768] AH01071: Got error 'PHP message: start 1763020401.6543', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:53:22.772384 2025] [proxy_fcgi:error] [pid 62216:tid 62256] [client 165.85.56.95:19768] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020402.772-1763020401.6543', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:55:23.752270 2025] [proxy_fcgi:error] [pid 62303:tid 62314] [client 165.85.56.95:38613] AH01071: Got error 'PHP message: start 1763020523.0677', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:55:24.279938 2025] [proxy_fcgi:error] [pid 62303:tid 62314] [client 165.85.56.95:38613] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020524.2795-1763020523.0677', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:57:25.100301 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:53860] AH01071: Got error 'PHP message: start 1763020644.5783', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:57:25.429199 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:53860] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020645.4288-1763020644.5783', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:59:26.335606 2025] [proxy_fcgi:error] [pid 62303:tid 62323] [client 165.85.56.95:17913] AH01071: Got error 'PHP message: start 1763020765.7363', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 15:59:26.796685 2025] [proxy_fcgi:error] [pid 62303:tid 62323] [client 165.85.56.95:17913] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020766.7962-1763020765.7363', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:01:27.845862 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:65071] AH01071: Got error 'PHP message: start 1763020887.1069', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:01:28.420299 2025] [proxy_fcgi:error] [pid 62303:tid 62325] [client 165.85.56.95:65071] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763020888.4196-1763020887.1069', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:03:29.514647 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:34183] AH01071: Got error 'PHP message: start 1763021008.7143', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:03:30.042804 2025] [proxy_fcgi:error] [pid 62216:tid 62250] [client 165.85.56.95:34183] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021010.0422-1763021008.7143', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:05:30.909385 2025] [proxy_fcgi:error] [pid 62303:tid 62322] [client 165.85.56.95:12418] AH01071: Got error 'PHP message: start 1763021130.3395', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:05:31.236351 2025] [proxy_fcgi:error] [pid 62303:tid 62322] [client 165.85.56.95:12418] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021131.2359-1763021130.3395', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:07:32.271596 2025] [proxy_fcgi:error] [pid 6086:tid 6110] [client 165.85.56.95:62887] AH01071: Got error 'PHP message: start 1763021251.5108', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:07:32.823585 2025] [proxy_fcgi:error] [pid 6086:tid 6110] [client 165.85.56.95:62887] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021252.823-1763021251.5108', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:09:33.779979 2025] [proxy_fcgi:error] [pid 6086:tid 6091] [client 165.85.56.95:21493] AH01071: Got error 'PHP message: start 1763021373.1327', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:09:34.323497 2025] [proxy_fcgi:error] [pid 6086:tid 6091] [client 165.85.56.95:21493] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021374.323-1763021373.1327', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:11:35.139642 2025] [proxy_fcgi:error] [pid 6086:tid 6108] [client 165.85.56.95:61170] AH01071: Got error 'PHP message: start 1763021494.5949', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:11:35.485463 2025] [proxy_fcgi:error] [pid 6086:tid 6108] [client 165.85.56.95:61170] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021495.4846-1763021494.5949', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:13:36.459124 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:51462] AH01071: Got error 'PHP message: start 1763021615.7815', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:13:37.075465 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:51462] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021617.0749-1763021615.7815', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:15:37.971405 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:52465] AH01071: Got error 'PHP message: start 1763021737.3859', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:15:38.332564 2025] [proxy_fcgi:error] [pid 62217:tid 62286] [client 165.85.56.95:52465] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021738.3321-1763021737.3859', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:17:39.503323 2025] [proxy_fcgi:error] [pid 62216:tid 62261] [client 165.85.56.95:60429] AH01071: Got error 'PHP message: start 1763021858.8227', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:17:39.847880 2025] [proxy_fcgi:error] [pid 62216:tid 62261] [client 165.85.56.95:60429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021859.8469-1763021858.8227', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:19:40.937037 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:38472] AH01071: Got error 'PHP message: start 1763021980.335', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:19:41.279196 2025] [proxy_fcgi:error] [pid 62215:tid 62224] [client 165.85.56.95:38472] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763021981.2786-1763021980.335', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:21:43.518564 2025] [proxy_fcgi:error] [pid 44245:tid 44251] [client 165.85.56.95:59183] AH01071: Got error 'PHP message: start 1763022101.5958', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:21:44.060870 2025] [proxy_fcgi:error] [pid 44245:tid 44251] [client 165.85.56.95:59183] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022104.0603-1763022101.5958', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:23:45.005653 2025] [proxy_fcgi:error] [pid 44354:tid 44373] [client 165.85.56.95:36554] AH01071: Got error 'PHP message: start 1763022224.368', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:23:45.526794 2025] [proxy_fcgi:error] [pid 44354:tid 44373] [client 165.85.56.95:36554] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022225.5263-1763022224.368', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:25:46.468068 2025] [proxy_fcgi:error] [pid 44354:tid 44378] [client 165.85.56.95:58271] AH01071: Got error 'PHP message: start 1763022345.8286', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:25:47.045437 2025] [proxy_fcgi:error] [pid 44354:tid 44378] [client 165.85.56.95:58271] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022347.0449-1763022345.8286', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:27:48.171279 2025] [proxy_fcgi:error] [pid 62215:tid 62240] [client 165.85.56.95:46732] AH01071: Got error 'PHP message: start 1763022467.5158', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:27:48.535365 2025] [proxy_fcgi:error] [pid 62215:tid 62240] [client 165.85.56.95:46732] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022468.5348-1763022467.5158', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:29:49.438035 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:50620] AH01071: Got error 'PHP message: start 1763022588.8192', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:29:49.756608 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:50620] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022589.7562-1763022588.8192', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:31:50.612963 2025] [proxy_fcgi:error] [pid 44245:tid 44271] [client 165.85.56.95:10499] AH01071: Got error 'PHP message: start 1763022710.0255', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:31:50.937763 2025] [proxy_fcgi:error] [pid 44245:tid 44271] [client 165.85.56.95:10499] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022710.9369-1763022710.0255', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:33:51.848637 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:42499] AH01071: Got error 'PHP message: start 1763022831.2702', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:33:52.222231 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:42499] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022832.2215-1763022831.2702', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:35:53.139404 2025] [proxy_fcgi:error] [pid 44354:tid 44366] [client 165.85.56.95:30111] AH01071: Got error 'PHP message: start 1763022952.4989', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:35:53.597977 2025] [proxy_fcgi:error] [pid 44354:tid 44366] [client 165.85.56.95:30111] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763022953.5975-1763022952.4989', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:37:54.519457 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:15354] AH01071: Got error 'PHP message: start 1763023073.8931', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:37:55.101776 2025] [proxy_fcgi:error] [pid 62303:tid 62313] [client 165.85.56.95:15354] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023075.1014-1763023073.8931', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:43:59.381705 2025] [proxy_fcgi:error] [pid 44354:tid 44379] [client 165.85.56.95:25527] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Thu Nov 13 16:44:33.452148 2025] [proxy_fcgi:error] [pid 6086:tid 6090] [client 165.85.56.95:27056] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44644
[Thu Nov 13 16:44:34.453849 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:27056] AH01071: Got error 'PHP message: start 1763023474.09', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:44:34.960022 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:27056] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023474.9596-1763023474.09', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:44:44.767356 2025] [proxy_fcgi:error] [pid 62303:tid 62331] [client 165.85.56.95:60253] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:44:45.531518 2025] [proxy_fcgi:error] [pid 62303:tid 62327] [client 165.85.56.95:60253] AH01071: Got error 'PHP message: start 1763023485.3179', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:44:46.001742 2025] [proxy_fcgi:error] [pid 62303:tid 62327] [client 165.85.56.95:60253] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023486.0008-1763023485.3179', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:45:21.775497 2025] [proxy_fcgi:error] [pid 44245:tid 44256] [client 165.85.56.95:60211] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:45:22.672656 2025] [proxy_fcgi:error] [pid 44245:tid 44252] [client 165.85.56.95:60211] AH01071: Got error 'PHP message: start 1763023522.3142', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:45:23.215666 2025] [proxy_fcgi:error] [pid 44245:tid 44252] [client 165.85.56.95:60211] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023523.2152-1763023522.3142', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:46:29.381726 2025] [proxy_fcgi:error] [pid 6086:tid 6091] [client 165.85.56.95:53744] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:46:30.682284 2025] [proxy_fcgi:error] [pid 6086:tid 6096] [client 165.85.56.95:53744] AH01071: Got error 'PHP message: start 1763023590.2553', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:46:30.945081 2025] [proxy_fcgi:error] [pid 6086:tid 6096] [client 165.85.56.95:53744] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023590.9445-1763023590.2553', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:48:28.630512 2025] [proxy_fcgi:error] [pid 62216:tid 62267] [client 165.85.56.95:50280] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:48:29.912777 2025] [proxy_fcgi:error] [pid 62216:tid 62255] [client 165.85.56.95:50280] AH01071: Got error 'PHP message: start 1763023709.2882', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:48:30.240741 2025] [proxy_fcgi:error] [pid 62216:tid 62255] [client 165.85.56.95:50280] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023710.2403-1763023709.2882', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:50:31.039429 2025] [proxy_fcgi:error] [pid 62215:tid 62225] [client 165.85.56.95:54901] AH01071: Got error 'PHP message: start 1763023830.5163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:50:31.385700 2025] [proxy_fcgi:error] [pid 62215:tid 62225] [client 165.85.56.95:54901] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023831.385-1763023830.5163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:52:32.376846 2025] [proxy_fcgi:error] [pid 44245:tid 44264] [client 165.85.56.95:12145] AH01071: Got error 'PHP message: start 1763023951.667', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:52:32.888273 2025] [proxy_fcgi:error] [pid 44245:tid 44264] [client 165.85.56.95:12145] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763023952.8879-1763023951.667', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:54:33.931669 2025] [proxy_fcgi:error] [pid 6086:tid 6095] [client 165.85.56.95:21945] AH01071: Got error 'PHP message: start 1763024073.1741', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:54:34.527744 2025] [proxy_fcgi:error] [pid 6086:tid 6095] [client 165.85.56.95:21945] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024074.5273-1763024073.1741', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:55:36.787795 2025] [proxy_fcgi:error] [pid 44354:tid 44382] [client 165.85.56.95:36422] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44512
[Thu Nov 13 16:57:35.462116 2025] [proxy_fcgi:error] [pid 62215:tid 62238] [client 165.85.56.95:12490] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44512
[Thu Nov 13 16:57:36.871730 2025] [proxy_fcgi:error] [pid 62215:tid 62230] [client 165.85.56.95:12490] AH01071: Got error 'PHP message: start 1763024256.4146', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:57:37.241206 2025] [proxy_fcgi:error] [pid 62215:tid 62230] [client 165.85.56.95:12490] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024257.2407-1763024256.4146', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 13 16:59:38.320411 2025] [proxy_fcgi:error] [pid 62217:tid 62292] [client 165.85.56.95:61523] AH01071: Got error 'PHP message: start 1763024377.516', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 16:59:38.865625 2025] [proxy_fcgi:error] [pid 62217:tid 62292] [client 165.85.56.95:61523] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024378.8652-1763024377.516', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:01:39.722460 2025] [proxy_fcgi:error] [pid 62216:tid 62253] [client 165.85.56.95:31438] AH01071: Got error 'PHP message: start 1763024499.1722', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:01:40.206448 2025] [proxy_fcgi:error] [pid 62216:tid 62253] [client 165.85.56.95:31438] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024500.206-1763024499.1722', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:03:40.490893 2025] [proxy_fcgi:error] [pid 44354:tid 44363] [client 165.85.56.95:45981] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: start 1763024620.4903PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/dashboard-bookings.php(109): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:05:41.329189 2025] [proxy_fcgi:error] [pid 6086:tid 6110] [client 165.85.56.95:23383] AH01071: Got error 'PHP message: start 1763024740.7735', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:05:41.709076 2025] [proxy_fcgi:error] [pid 6086:tid 6110] [client 165.85.56.95:23383] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024741.7087-1763024740.7735', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:07:42.600650 2025] [proxy_fcgi:error] [pid 44245:tid 44271] [client 165.85.56.95:14145] AH01071: Got error 'PHP message: start 1763024862.0137', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:07:43.012205 2025] [proxy_fcgi:error] [pid 44245:tid 44271] [client 165.85.56.95:14145] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024863.0117-1763024862.0137', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:09:44.102623 2025] [proxy_fcgi:error] [pid 62215:tid 62235] [client 165.85.56.95:27459] AH01071: Got error 'PHP message: start 1763024983.3033', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:09:44.762340 2025] [proxy_fcgi:error] [pid 62215:tid 62235] [client 165.85.56.95:27459] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763024984.7614-1763024983.3033', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:11:45.603643 2025] [proxy_fcgi:error] [pid 44354:tid 44367] [client 165.85.56.95:44575] AH01071: Got error 'PHP message: start 1763025105.0537', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:11:45.944830 2025] [proxy_fcgi:error] [pid 44354:tid 44367] [client 165.85.56.95:44575] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025105.9442-1763025105.0537', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:13:46.925538 2025] [proxy_fcgi:error] [pid 62217:tid 62283] [client 165.85.56.95:26438] AH01071: Got error 'PHP message: start 1763025226.2567', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:13:47.393462 2025] [proxy_fcgi:error] [pid 62217:tid 62283] [client 165.85.56.95:26438] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025227.393-1763025226.2567', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:15:48.323935 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:60092] AH01071: Got error 'PHP message: start 1763025347.6861', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:15:48.805242 2025] [proxy_fcgi:error] [pid 6086:tid 6092] [client 165.85.56.95:60092] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025348.8048-1763025347.6861', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:17:49.706659 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:19710] AH01071: Got error 'PHP message: start 1763025469.0882', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:17:50.213014 2025] [proxy_fcgi:error] [pid 62215:tid 62243] [client 165.85.56.95:19710] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025470.2124-1763025469.0882', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:19:51.217864 2025] [proxy_fcgi:error] [pid 6086:tid 6104] [client 165.85.56.95:23841] AH01071: Got error 'PHP message: start 1763025590.5235', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:19:51.749327 2025] [proxy_fcgi:error] [pid 6086:tid 6104] [client 165.85.56.95:23841] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025591.7489-1763025590.5235', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:21:52.785609 2025] [proxy_fcgi:error] [pid 62216:tid 62252] [client 165.85.56.95:17831] AH01071: Got error 'PHP message: start 1763025712.074', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:21:53.349063 2025] [proxy_fcgi:error] [pid 62216:tid 62252] [client 165.85.56.95:17831] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025713.3484-1763025712.074', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:23:54.282101 2025] [proxy_fcgi:error] [pid 62216:tid 62251] [client 165.85.56.95:39386] AH01071: Got error 'PHP message: start 1763025833.6551', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:23:54.786271 2025] [proxy_fcgi:error] [pid 62216:tid 62251] [client 165.85.56.95:39386] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025834.7858-1763025833.6551', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:25:55.640964 2025] [proxy_fcgi:error] [pid 44245:tid 44274] [client 165.85.56.95:43506] AH01071: Got error 'PHP message: start 1763025955.0907', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:25:55.957725 2025] [proxy_fcgi:error] [pid 44245:tid 44274] [client 165.85.56.95:43506] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763025955.9572-1763025955.0907', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:27:57.057819 2025] [proxy_fcgi:error] [pid 44354:tid 44380] [client 165.85.56.95:62602] AH01071: Got error 'PHP message: start 1763026076.2734', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:27:57.657469 2025] [proxy_fcgi:error] [pid 44354:tid 44380] [client 165.85.56.95:62602] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026077.657-1763026076.2734', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:29:58.561413 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 165.85.56.95:1432] AH01071: Got error 'PHP message: start 1763026197.9513', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:29:59.029336 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 165.85.56.95:1432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026199.0289-1763026197.9513', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:32:00.154818 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:29539] AH01071: Got error 'PHP message: start 1763026319.5371', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:32:00.659351 2025] [proxy_fcgi:error] [pid 62215:tid 62222] [client 165.85.56.95:29539] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026320.6588-1763026319.5371', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:34:01.718647 2025] [proxy_fcgi:error] [pid 44245:tid 44255] [client 165.85.56.95:28085] AH01071: Got error 'PHP message: start 1763026440.9929', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:34:02.100234 2025] [proxy_fcgi:error] [pid 44245:tid 44255] [client 165.85.56.95:28085] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026442.0993-1763026440.9929', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:36:03.150433 2025] [proxy_fcgi:error] [pid 44245:tid 44273] [client 165.85.56.95:65281] AH01071: Got error 'PHP message: start 1763026562.4094', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:36:03.744586 2025] [proxy_fcgi:error] [pid 44245:tid 44273] [client 165.85.56.95:65281] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026563.7438-1763026562.4094', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:38:04.776487 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:28261] AH01071: Got error 'PHP message: start 1763026684.0552', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:38:05.178397 2025] [proxy_fcgi:error] [pid 62303:tid 62330] [client 165.85.56.95:28261] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026685.1778-1763026684.0552', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:40:06.117110 2025] [proxy_fcgi:error] [pid 6086:tid 6103] [client 165.85.56.95:53373] AH01071: Got error 'PHP message: start 1763026805.4757', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:40:06.630068 2025] [proxy_fcgi:error] [pid 6086:tid 6103] [client 165.85.56.95:53373] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026806.6297-1763026805.4757', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:42:07.523751 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:15488] AH01071: Got error 'PHP message: start 1763026926.914', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:42:07.909082 2025] [proxy_fcgi:error] [pid 6086:tid 6112] [client 165.85.56.95:15488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763026927.9087-1763026926.914', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:44:08.950630 2025] [proxy_fcgi:error] [pid 44245:tid 44256] [client 165.85.56.95:50547] AH01071: Got error 'PHP message: start 1763027048.2287', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:44:09.306049 2025] [proxy_fcgi:error] [pid 44245:tid 44256] [client 165.85.56.95:50547] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027049.3054-1763027048.2287', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:46:10.142874 2025] [proxy_fcgi:error] [pid 62217:tid 62294] [client 165.85.56.95:42667] AH01071: Got error 'PHP message: start 1763027169.5978', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:46:10.519419 2025] [proxy_fcgi:error] [pid 62217:tid 62294] [client 165.85.56.95:42667] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027170.519-1763027169.5978', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:48:11.478921 2025] [proxy_fcgi:error] [pid 62216:tid 62265] [client 165.85.56.95:24054] AH01071: Got error 'PHP message: start 1763027290.8407', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:48:11.977321 2025] [proxy_fcgi:error] [pid 62216:tid 62265] [client 165.85.56.95:24054] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027291.9768-1763027290.8407', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:50:12.806951 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 165.85.56.95:19188] AH01071: Got error 'PHP message: start 1763027412.2678', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:50:13.137749 2025] [proxy_fcgi:error] [pid 6086:tid 6102] [client 165.85.56.95:19188] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027413.1371-1763027412.2678', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:52:14.241643 2025] [proxy_fcgi:error] [pid 62215:tid 62232] [client 165.85.56.95:27123] AH01071: Got error 'PHP message: start 1763027533.5972', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:52:14.787040 2025] [proxy_fcgi:error] [pid 62215:tid 62232] [client 165.85.56.95:27123] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027534.7864-1763027533.5972', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:54:15.812161 2025] [proxy_fcgi:error] [pid 44245:tid 44274] [client 165.85.56.95:22301] AH01071: Got error 'PHP message: start 1763027655.2399', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:54:16.204118 2025] [proxy_fcgi:error] [pid 44245:tid 44274] [client 165.85.56.95:22301] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027656.2037-1763027655.2399', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:55:43.450815 2025] [:error] [pid 44354:tid 44359] [client 150.241.107.255:56027] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRWrH3qKopQhy3G4s3l0ZgAAAYA"]
[Thu Nov 13 17:55:43.995896 2025] [:error] [pid 62216:tid 62268] [client 150.241.107.255:56523] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRWrH-pyFB9M2aVQhwM0jgAAABU"]
[Thu Nov 13 17:55:44.545499 2025] [:error] [pid 6086:tid 6093] [client 150.241.107.255:56707] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIH9_6CRZzjZnAe0zWAAAAQQ"]
[Thu Nov 13 17:55:45.097324 2025] [:error] [pid 62216:tid 62269] [client 150.241.107.255:56918] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIepyFB9M2aVQhwM0rAAAABY"]
[Thu Nov 13 17:55:45.645728 2025] [:error] [pid 62303:tid 62324] [client 150.241.107.255:57348] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIb-hlFTtVrZw8jDoOAAAAJE"]
[Thu Nov 13 17:55:46.192828 2025] [:error] [pid 62303:tid 62307] [client 150.241.107.255:57623] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIr-hlFTtVrZw8jDoTQAAAIA"]
[Thu Nov 13 17:55:46.740824 2025] [:error] [pid 62303:tid 62330] [client 150.241.107.255:57812] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIr-hlFTtVrZw8jDoUwAAAJc"]
[Thu Nov 13 17:55:47.287046 2025] [:error] [pid 62216:tid 62265] [client 150.241.107.255:57970] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aRWrI-pyFB9M2aVQhwM0vgAAABI"]
[Thu Nov 13 17:55:47.842702 2025] [:error] [pid 62216:tid 62257] [client 150.241.107.255:58244] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aRWrI-pyFB9M2aVQhwM0wgAAAAo"]
[Thu Nov 13 17:55:48.388768 2025] [:error] [pid 62303:tid 62331] [client 150.241.107.255:58683] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJL-hlFTtVrZw8jDobQAAAJg"]
[Thu Nov 13 17:55:48.934661 2025] [:error] [pid 44245:tid 44260] [client 150.241.107.255:58851] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJIk7r-HKZdqw-dXPVwAAAUk"]
[Thu Nov 13 17:55:49.481058 2025] [:error] [pid 62217:tid 62288] [client 150.241.107.255:58971] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJRjGU3T9wKBmdNc3GgAAAE4"]
[Thu Nov 13 17:55:50.025884 2025] [:error] [pid 44354:tid 44368] [client 150.241.107.255:59144] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJnqKopQhy3G4s3l0nwAAAYk"]
[Thu Nov 13 17:55:50.571754 2025] [:error] [pid 44245:tid 44271] [client 150.241.107.255:59305] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJok7r-HKZdqw-dXPaAAAAVQ"]
[Thu Nov 13 17:55:51.116833 2025] [:error] [pid 6086:tid 6113] [client 150.241.107.255:59416] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJ39_6CRZzjZnAe0zjAAAARg"]
[Thu Nov 13 17:55:51.662851 2025] [:error] [pid 44245:tid 44267] [client 150.241.107.255:59601] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRWrJ4k7r-HKZdqw-dXPeQAAAVA"]
[Thu Nov 13 17:55:52.209987 2025] [:error] [pid 62216:tid 62268] [client 150.241.107.255:59743] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRWrKOpyFB9M2aVQhwM02gAAABU"]
[Thu Nov 13 17:55:52.758855 2025] [:error] [pid 62303:tid 62316] [client 150.241.107.255:59868] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aRWrKL-hlFTtVrZw8jDojAAAAIk"]
[Thu Nov 13 17:56:17.307250 2025] [proxy_fcgi:error] [pid 62215:tid 62229] [client 165.85.56.95:58391] AH01071: Got error 'PHP message: start 1763027776.5143', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:56:17.801269 2025] [proxy_fcgi:error] [pid 62215:tid 62229] [client 165.85.56.95:58391] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027777.8009-1763027776.5143', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:58:18.631164 2025] [proxy_fcgi:error] [pid 62217:tid 62274] [client 165.85.56.95:40184] AH01071: Got error 'PHP message: start 1763027898.093', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 17:58:18.956150 2025] [proxy_fcgi:error] [pid 62217:tid 62274] [client 165.85.56.95:40184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763027898.9555-1763027898.093', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:00:19.785759 2025] [proxy_fcgi:error] [pid 62215:tid 62240] [client 165.85.56.95:6078] AH01071: Got error 'PHP message: start 1763028019.252', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:00:20.134356 2025] [proxy_fcgi:error] [pid 62215:tid 62240] [client 165.85.56.95:6078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028020.1334-1763028019.252', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:02:21.311688 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:5680] AH01071: Got error 'PHP message: start 1763028140.5882', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:02:21.876275 2025] [proxy_fcgi:error] [pid 62303:tid 62318] [client 165.85.56.95:5680] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028141.8757-1763028140.5882', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:04:22.881637 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:40764] AH01071: Got error 'PHP message: start 1763028262.1692', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:04:23.431821 2025] [proxy_fcgi:error] [pid 62303:tid 62329] [client 165.85.56.95:40764] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028263.4313-1763028262.1692', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:06:25.003130 2025] [proxy_fcgi:error] [pid 44245:tid 44275] [client 165.85.56.95:57327] AH01071: Got error 'PHP message: start 1763028383.7457', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:06:25.398006 2025] [proxy_fcgi:error] [pid 44245:tid 44275] [client 165.85.56.95:57327] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028385.3971-1763028383.7457', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:08:26.527586 2025] [proxy_fcgi:error] [pid 44245:tid 44262] [client 165.85.56.95:25500] AH01071: Got error 'PHP message: start 1763028505.8634', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:08:27.053162 2025] [proxy_fcgi:error] [pid 44245:tid 44262] [client 165.85.56.95:25500] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028507.0526-1763028505.8634', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:10:27.915308 2025] [proxy_fcgi:error] [pid 44245:tid 44251] [client 165.85.56.95:17550] AH01071: Got error 'PHP message: start 1763028627.3525', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:10:28.322786 2025] [proxy_fcgi:error] [pid 44245:tid 44251] [client 165.85.56.95:17550] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028628.3218-1763028627.3525', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:12:29.366824 2025] [proxy_fcgi:error] [pid 44354:tid 44367] [client 165.85.56.95:28263] AH01071: Got error 'PHP message: start 1763028748.7602', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:12:29.896282 2025] [proxy_fcgi:error] [pid 44354:tid 44367] [client 165.85.56.95:28263] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028749.8956-1763028748.7602', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:14:30.982476 2025] [proxy_fcgi:error] [pid 62215:tid 62223] [client 165.85.56.95:7780] AH01071: Got error 'PHP message: start 1763028870.3396', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:14:31.473379 2025] [proxy_fcgi:error] [pid 62215:tid 62223] [client 165.85.56.95:7780] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028871.4729-1763028870.3396', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:16:32.378028 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:49068] AH01071: Got error 'PHP message: start 1763028991.7906', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:16:32.715351 2025] [proxy_fcgi:error] [pid 62303:tid 62311] [client 165.85.56.95:49068] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763028992.7147-1763028991.7906', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:18:33.653337 2025] [proxy_fcgi:error] [pid 62215:tid 62231] [client 165.85.56.95:25672] AH01071: Got error 'PHP message: start 1763029112.9943', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:18:34.076301 2025] [proxy_fcgi:error] [pid 62215:tid 62231] [client 165.85.56.95:25672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763029114.0758-1763029112.9943', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 13 18:54:53.038485 2025] [:error] [pid 62215:tid 62243] [client 43.153.102.138:38348] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRW4_UvClof1c6XaOBXC_gAAANg"]
[Thu Nov 13 21:08:26.785537 2025] [proxy_fcgi:error] [pid 62215:tid 62223] [client 145.239.10.137:37021] AH01071: Got error 'Primary script unknown', referer: http://pumpbooking.com/13.php
[Thu Nov 13 22:51:43.306090 2025] [:error] [pid 4992:tid 5012] [client 45.138.16.29:60581] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aRXwfymsutP7nusdj-CV9gAAANA"]
[Thu Nov 13 22:51:43.835197 2025] [:error] [pid 5086:tid 5091] [client 45.138.16.29:60654] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/postnews.php"] [unique_id "aRXwfx_dsYLFCHw574jBlwAAAQI"]
[Thu Nov 13 22:51:44.362356 2025] [:error] [pid 4993:tid 5032] [client 45.138.16.29:60752] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgMl_cC0Js5xNCU1X5wAAAAY"]
[Fri Nov 14 00:17:36.336283 2025] [:error] [pid 56495:tid 56513] [client 222.79.103.59:42651] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRYEoFwO8wZZL5WJceWmHwAAAM4"]
[Fri Nov 14 01:47:10.746886 2025] [:error] [pid 49246:tid 49274] [client 170.106.163.48:56226] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRYZnt-hdG_ZJBT6alPkqgAAAFg"]
[Fri Nov 14 05:09:37.468472 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:36932] AH01071: Got error 'PHP message: start 1763068175.9967', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:09:37.650892 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:36932] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763068177.6504-1763068175.9967', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:11:38.936562 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:57819] AH01071: Got error 'PHP message: start 1763068298.3064', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:11:39.202055 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:57819] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763068299.2017-1763068298.3064', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:13:40.366842 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:57205] AH01071: Got error 'PHP message: start 1763068419.4768', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:13:40.638960 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:57205] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763068420.6385-1763068419.4768', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:15:41.598407 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:42127] AH01071: Got error 'PHP message: start 1763068540.9297', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:15:41.850635 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:42127] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763068541.8503-1763068540.9297', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:17:42.747971 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:27489] AH01071: Got error 'PHP message: start 1763068662.1384', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:17:42.939456 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:27489] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763068662.939-1763068662.1384', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:18:48.356007 2025] [proxy_fcgi:error] [pid 47156:tid 47225] [client 165.85.56.95:37657] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:18:50.088508 2025] [proxy_fcgi:error] [pid 47156:tid 47223] [client 165.85.56.95:37657] AH01071: Got error 'PHP message: start 1763068729.7259', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:18:50.849210 2025] [proxy_fcgi:error] [pid 47156:tid 47223] [client 165.85.56.95:37657] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763068730.8488-1763068729.7259', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:30:00.507963 2025] [proxy_fcgi:error] [pid 47242:tid 47257] [client 165.85.56.95:27375] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=42858
[Fri Nov 14 05:30:01.961958 2025] [proxy_fcgi:error] [pid 47242:tid 47263] [client 165.85.56.95:27375] AH01071: Got error 'PHP message: start 1763069401.4639', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:30:02.702211 2025] [proxy_fcgi:error] [pid 47242:tid 47263] [client 165.85.56.95:27375] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069402.7017-1763069401.4639', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:30:05.840202 2025] [proxy_fcgi:error] [pid 47242:tid 47265] [client 165.85.56.95:27375] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:30:06.492270 2025] [proxy_fcgi:error] [pid 47242:tid 47247] [client 165.85.56.95:27375] AH01071: Got error 'PHP message: start 1763069406.265', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:30:06.621239 2025] [proxy_fcgi:error] [pid 47242:tid 47247] [client 165.85.56.95:27375] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069406.6208-1763069406.265', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:32:07.583811 2025] [proxy_fcgi:error] [pid 47630:tid 47656] [client 165.85.56.95:58788] AH01071: Got error 'PHP message: start 1763069526.887', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:32:07.784442 2025] [proxy_fcgi:error] [pid 47630:tid 47656] [client 165.85.56.95:58788] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069527.7839-1763069526.887', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:34:09.098950 2025] [proxy_fcgi:error] [pid 47242:tid 47269] [client 165.85.56.95:2648] AH01071: Got error 'PHP message: start 1763069648.4718', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:34:09.256217 2025] [proxy_fcgi:error] [pid 47242:tid 47269] [client 165.85.56.95:2648] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069649.256-1763069648.4718', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:36:10.210752 2025] [proxy_fcgi:error] [pid 47630:tid 47655] [client 165.85.56.95:17008] AH01071: Got error 'PHP message: start 1763069769.5399', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:36:10.484154 2025] [proxy_fcgi:error] [pid 47630:tid 47655] [client 165.85.56.95:17008] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069770.4838-1763069769.5399', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:36:44.984243 2025] [proxy_fcgi:error] [pid 47154:tid 47179] [client 165.85.56.95:12395] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:36:45.867435 2025] [proxy_fcgi:error] [pid 47154:tid 47171] [client 165.85.56.95:12395] AH01071: Got error 'PHP message: start 1763069805.5661', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:36:46.630918 2025] [proxy_fcgi:error] [pid 47154:tid 47171] [client 165.85.56.95:12395] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069806.6303-1763069805.5661', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:37:18.888137 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:6935] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:37:20.376964 2025] [proxy_fcgi:error] [pid 47154:tid 47181] [client 165.85.56.95:6935] AH01071: Got error 'PHP message: start 1763069840.0976', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:37:21.261770 2025] [proxy_fcgi:error] [pid 47154:tid 47181] [client 165.85.56.95:6935] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069841.2614-1763069840.0976', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:38:18.997896 2025] [proxy_fcgi:error] [pid 47155:tid 47207] [client 165.85.56.95:24770] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:38:21.110793 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:24770] AH01071: Got error 'PHP message: start 1763069900.1457', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:38:21.761625 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:24770] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069901.761-1763069900.1457', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:39:27.779889 2025] [proxy_fcgi:error] [pid 47155:tid 47192] [client 165.85.56.95:51486] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:39:29.611238 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:51486] AH01071: Got error 'PHP message: start 1763069969.0459', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:39:30.231557 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:51486] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763069970.2312-1763069969.0459', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:39:49.492574 2025] [proxy_fcgi:error] [pid 47242:tid 47254] [client 165.85.56.95:14939] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formBookingID in /home/pumpbooking/public_html/booking.php on line 184', referer: https://pumpbooking.com/booking.php?bookingID=44579
[Fri Nov 14 05:40:20.615114 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:33555] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?reschedule=44579
[Fri Nov 14 05:40:24.616086 2025] [proxy_fcgi:error] [pid 47630:tid 47638] [client 165.85.56.95:33555] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44645
[Fri Nov 14 05:40:25.402062 2025] [proxy_fcgi:error] [pid 47630:tid 47634] [client 165.85.56.95:33555] AH01071: Got error 'PHP message: start 1763070025.2677', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:40:26.151073 2025] [proxy_fcgi:error] [pid 47630:tid 47634] [client 165.85.56.95:33555] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070026.1507-1763070025.2677', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:40:35.255661 2025] [proxy_fcgi:error] [pid 47154:tid 47168] [client 165.85.56.95:38779] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:40:36.543740 2025] [proxy_fcgi:error] [pid 47154:tid 47179] [client 165.85.56.95:38779] AH01071: Got error 'PHP message: start 1763070036.0813', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:40:37.208167 2025] [proxy_fcgi:error] [pid 47154:tid 47179] [client 165.85.56.95:38779] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070037.2076-1763070036.0813', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:41:50.653742 2025] [proxy_fcgi:error] [pid 47154:tid 47181] [client 165.85.56.95:9514] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:41:51.969624 2025] [proxy_fcgi:error] [pid 47154:tid 47175] [client 165.85.56.95:9514] AH01071: Got error 'PHP message: start 1763070111.595', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:41:52.557453 2025] [proxy_fcgi:error] [pid 47154:tid 47175] [client 165.85.56.95:9514] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070112.557-1763070111.595', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:44:58.745313 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:42785] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 05:45:09.830177 2025] [proxy_fcgi:error] [pid 47630:tid 47634] [client 165.85.56.95:62227] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44646
[Fri Nov 14 05:45:11.148931 2025] [proxy_fcgi:error] [pid 47630:tid 47649] [client 165.85.56.95:62227] AH01071: Got error 'PHP message: start 1763070310.6936', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:45:11.738450 2025] [proxy_fcgi:error] [pid 47630:tid 47649] [client 165.85.56.95:62227] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070311.738-1763070310.6936', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:47:04.737673 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:61267] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 05:48:36.095633 2025] [proxy_fcgi:error] [pid 47154:tid 47177] [client 165.85.56.95:28975] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44647
[Fri Nov 14 05:49:19.237934 2025] [proxy_fcgi:error] [pid 47630:tid 47645] [client 165.85.56.95:14535] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44647
[Fri Nov 14 05:49:20.243187 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:14535] AH01071: Got error 'PHP message: start 1763070559.8887', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:49:20.812406 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:14535] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070560.8117-1763070559.8887', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:49:35.240641 2025] [proxy_fcgi:error] [pid 47242:tid 47263] [client 165.85.56.95:31730] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:49:36.203747 2025] [proxy_fcgi:error] [pid 47242:tid 47249] [client 165.85.56.95:31730] AH01071: Got error 'PHP message: start 1763070575.91', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:49:36.734971 2025] [proxy_fcgi:error] [pid 47242:tid 47249] [client 165.85.56.95:31730] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070576.7343-1763070575.91', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:51:37.775452 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:18677] AH01071: Got error 'PHP message: start 1763070697.1611', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:51:38.197032 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:18677] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070698.1965-1763070697.1611', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:53:39.211647 2025] [proxy_fcgi:error] [pid 47154:tid 47165] [client 165.85.56.95:64365] AH01071: Got error 'PHP message: start 1763070818.5845', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:53:39.673338 2025] [proxy_fcgi:error] [pid 47154:tid 47165] [client 165.85.56.95:64365] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070819.6727-1763070818.5845', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:55:40.834370 2025] [proxy_fcgi:error] [pid 47242:tid 47252] [client 165.85.56.95:37192] AH01071: Got error 'PHP message: start 1763070940.1626', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:55:41.335447 2025] [proxy_fcgi:error] [pid 47242:tid 47252] [client 165.85.56.95:37192] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763070941.3349-1763070940.1626', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:57:42.377466 2025] [proxy_fcgi:error] [pid 47154:tid 47172] [client 165.85.56.95:62928] AH01071: Got error 'PHP message: start 1763071061.7879', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:57:42.702978 2025] [proxy_fcgi:error] [pid 47154:tid 47172] [client 165.85.56.95:62928] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071062.7023-1763071061.7879', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 05:58:27.455167 2025] [:error] [pid 47156:tid 47219] [client 191.177.193.101:6358] [client 191.177.193.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.193.101, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRZUg9jrQX_P-kC7M_7ukAAAAIU"]
[Fri Nov 14 05:58:27.468595 2025] [proxy_fcgi:error] [pid 47156:tid 47219] [client 191.177.193.101:6358] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 05:58:29.194494 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:63408] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:58:31.401653 2025] [proxy_fcgi:error] [pid 47155:tid 47198] [client 165.85.56.95:63408] AH01071: Got error 'PHP message: start 1763071110.916', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 05:58:32.326518 2025] [proxy_fcgi:error] [pid 47155:tid 47198] [client 165.85.56.95:63408] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071112.3258-1763071110.916', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:00:33.296174 2025] [proxy_fcgi:error] [pid 47154:tid 47182] [client 165.85.56.95:42990] AH01071: Got error 'PHP message: start 1763071232.7553', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:00:34.191971 2025] [proxy_fcgi:error] [pid 47154:tid 47182] [client 165.85.56.95:42990] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071234.1912-1763071232.7553', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:02:35.270190 2025] [proxy_fcgi:error] [pid 47242:tid 47261] [client 165.85.56.95:2791] AH01071: Got error 'PHP message: start 1763071354.6437', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:02:36.180221 2025] [proxy_fcgi:error] [pid 47242:tid 47261] [client 165.85.56.95:2791] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071356.1799-1763071354.6437', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:04:37.032431 2025] [proxy_fcgi:error] [pid 47630:tid 47642] [client 165.85.56.95:39452] AH01071: Got error 'PHP message: start 1763071476.4657', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:04:37.956114 2025] [proxy_fcgi:error] [pid 47630:tid 47642] [client 165.85.56.95:39452] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071477.9552-1763071476.4657', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:06:39.022161 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:39797] AH01071: Got error 'PHP message: start 1763071598.3882', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:06:39.779829 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:39797] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071599.7794-1763071598.3882', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:08:40.873705 2025] [proxy_fcgi:error] [pid 47155:tid 47194] [client 165.85.56.95:28942] AH01071: Got error 'PHP message: start 1763071720.2188', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:08:41.622085 2025] [proxy_fcgi:error] [pid 47155:tid 47194] [client 165.85.56.95:28942] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071721.6216-1763071720.2188', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:10:42.820418 2025] [proxy_fcgi:error] [pid 47154:tid 47174] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: start 1763071842.1193', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:10:43.633893 2025] [proxy_fcgi:error] [pid 47154:tid 47174] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071843.6334-1763071842.1193', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:10:47.711687 2025] [proxy_fcgi:error] [pid 47154:tid 47177] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:10:49.894144 2025] [proxy_fcgi:error] [pid 47154:tid 47169] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: start 1763071848.897', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:10:50.575776 2025] [proxy_fcgi:error] [pid 47154:tid 47169] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071850.5753-1763071848.897', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:10:53.340958 2025] [proxy_fcgi:error] [pid 47154:tid 47166] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:10:55.172977 2025] [proxy_fcgi:error] [pid 47154:tid 47176] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: start 1763071854.3406', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:10:55.470698 2025] [proxy_fcgi:error] [pid 47154:tid 47176] [client 165.85.56.95:12942] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071855.4701-1763071854.3406', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:12:56.664481 2025] [proxy_fcgi:error] [pid 47155:tid 47208] [client 165.85.56.95:53336] AH01071: Got error 'PHP message: start 1763071975.9451', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:12:56.911528 2025] [proxy_fcgi:error] [pid 47155:tid 47208] [client 165.85.56.95:53336] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071976.911-1763071975.9451', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:13:06.594745 2025] [proxy_fcgi:error] [pid 47242:tid 47255] [client 165.85.56.95:62487] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:13:08.933059 2025] [proxy_fcgi:error] [pid 47242:tid 47268] [client 165.85.56.95:62487] AH01071: Got error 'PHP message: start 1763071987.6899', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:13:09.363395 2025] [proxy_fcgi:error] [pid 47242:tid 47268] [client 165.85.56.95:62487] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763071989.363-1763071987.6899', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:13:28.040393 2025] [proxy_fcgi:error] [pid 47156:tid 47220] [client 165.85.56.95:62958] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/purchase-orders-prn.php(27): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:14:32.529659 2025] [proxy_fcgi:error] [pid 47242:tid 47268] [client 1.146.194.31:1111] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/index.php
[Fri Nov 14 06:14:33.975564 2025] [proxy_fcgi:error] [pid 47630:tid 47654] [client 1.146.194.31:1113] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://www.pumpbooking.com/index.php
[Fri Nov 14 06:14:36.141377 2025] [proxy_fcgi:error] [pid 47156:tid 47214] [client 1.146.194.31:1116] AH01071: Got error 'PHP message: start 1763072075.6144', referer: https://www.pumpbooking.com/dashboard.php
[Fri Nov 14 06:14:36.680104 2025] [proxy_fcgi:error] [pid 47156:tid 47214] [client 1.146.194.31:1116] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072076.6796-1763072075.6144', referer: https://www.pumpbooking.com/dashboard.php
[Fri Nov 14 06:15:10.292943 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:25290] AH01071: Got error 'PHP message: start 1763072109.6256', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:15:10.603881 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:25290] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072110.6033-1763072109.6256', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:16:56.066368 2025] [proxy_fcgi:error] [pid 47242:tid 47252] [client 165.85.56.95:59793] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44593
[Fri Nov 14 06:16:57.447583 2025] [proxy_fcgi:error] [pid 47242:tid 47261] [client 165.85.56.95:59793] AH01071: Got error 'PHP message: start 1763072217.079', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:16:57.737607 2025] [proxy_fcgi:error] [pid 47242:tid 47261] [client 165.85.56.95:59793] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072217.7373-1763072217.079', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:18:58.024355 2025] [proxy_fcgi:error] [pid 47630:tid 47635] [client 165.85.56.95:5050] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: start 1763072338.0237PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/dashboard-bookings.php(109): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:20:59.282605 2025] [proxy_fcgi:error] [pid 47242:tid 47267] [client 165.85.56.95:34613] AH01071: Got error 'PHP message: start 1763072458.5336', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:20:59.576959 2025] [proxy_fcgi:error] [pid 47242:tid 47267] [client 165.85.56.95:34613] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072459.5765-1763072458.5336', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:23:00.564686 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:22172] AH01071: Got error 'PHP message: start 1763072579.8516', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:23:00.825439 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:22172] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072580.8248-1763072579.8516', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:25:01.803594 2025] [proxy_fcgi:error] [pid 47630:tid 47635] [client 165.85.56.95:23239] AH01071: Got error 'PHP message: start 1763072701.1284', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:25:02.031514 2025] [proxy_fcgi:error] [pid 47630:tid 47635] [client 165.85.56.95:23239] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072702.0311-1763072701.1284', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:26:45.892778 2025] [proxy_fcgi:error] [pid 47155:tid 47186] [client 165.85.56.95:9316] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:26:47.795140 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:9316] AH01071: Got error 'PHP message: start 1763072807.1109', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:26:48.221981 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:9316] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072808.2215-1763072807.1109', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:02.129472 2025] [proxy_fcgi:error] [pid 47155:tid 47191] [client 165.85.56.95:18460] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:02.614679 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:18460] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:02.615320 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:18460] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/includes/sqlstore.php(85): SQLStore->Query()\n#1 /home/pumpbooking/public_html/dashboard.php(149): SQLStore->QuerySingleResult()\n#2 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:14.563491 2025] [proxy_fcgi:error] [pid 47242:tid 47266] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:15.392648 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:18988] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:16.034649 2025] [proxy_fcgi:error] [pid 47156:tid 47215] [client 165.85.56.95:18988] AH01071: Got error 'PHP message: start 1763072835.8045PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072836.0342-1763072835.8045', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:25.176573 2025] [proxy_fcgi:error] [pid 47155:tid 47196] [client 165.85.56.95:10388] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:26.562646 2025] [proxy_fcgi:error] [pid 47155:tid 47195] [client 165.85.56.95:10388] AH01071: Got error 'PHP message: start 1763072845.893', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:27.108784 2025] [proxy_fcgi:error] [pid 47155:tid 47195] [client 165.85.56.95:10388] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072847.1083-1763072845.893', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:35.037339 2025] [proxy_fcgi:error] [pid 47242:tid 47263] [client 165.85.56.95:59057] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:36.906080 2025] [proxy_fcgi:error] [pid 47242:tid 47258] [client 165.85.56.95:59057] AH01071: Got error 'PHP message: start 1763072856.1466', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:37.126741 2025] [proxy_fcgi:error] [pid 47242:tid 47258] [client 165.85.56.95:59057] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072857.1253-1763072856.1466', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:52.993184 2025] [proxy_fcgi:error] [pid 47154:tid 47179] [client 165.85.56.95:52111] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:54.484922 2025] [proxy_fcgi:error] [pid 47154:tid 47180] [client 165.85.56.95:52111] AH01071: Got error 'PHP message: start 1763072873.9744', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:27:55.042889 2025] [proxy_fcgi:error] [pid 47154:tid 47180] [client 165.85.56.95:52111] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072875.0424-1763072873.9744', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 06:29:56.155325 2025] [proxy_fcgi:error] [pid 47630:tid 47656] [client 165.85.56.95:35485] AH01071: Got error 'PHP message: start 1763072995.4951', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:29:56.640663 2025] [proxy_fcgi:error] [pid 47630:tid 47656] [client 165.85.56.95:35485] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763072996.64-1763072995.4951', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:30:09.496488 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 1.146.235.243:1060] AH01071: Got error 'PHP message: start 1763073008.9166', referer: https://www.pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:30:09.859559 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 1.146.235.243:1060] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073009.8591-1763073008.9166', referer: https://www.pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:31:57.733047 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:36738] AH01071: Got error 'PHP message: start 1763073117.1554', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:31:58.019967 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:36738] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073118.0194-1763073117.1554', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:33:59.096978 2025] [proxy_fcgi:error] [pid 47154:tid 47178] [client 165.85.56.95:1155] AH01071: Got error 'PHP message: start 1763073238.472', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:33:59.697239 2025] [proxy_fcgi:error] [pid 47154:tid 47178] [client 165.85.56.95:1155] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073239.6965-1763073238.472', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:36:00.664839 2025] [proxy_fcgi:error] [pid 47154:tid 47162] [client 165.85.56.95:22028] AH01071: Got error 'PHP message: start 1763073360.0092', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:36:01.021501 2025] [proxy_fcgi:error] [pid 47154:tid 47162] [client 165.85.56.95:22028] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073361.0207-1763073360.0092', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:38:02.189973 2025] [proxy_fcgi:error] [pid 47630:tid 47652] [client 165.85.56.95:12532] AH01071: Got error 'PHP message: start 1763073481.5496', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:38:02.583635 2025] [proxy_fcgi:error] [pid 47630:tid 47652] [client 165.85.56.95:12532] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073482.583-1763073481.5496', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:40:03.650742 2025] [proxy_fcgi:error] [pid 47242:tid 47246] [client 165.85.56.95:6589] AH01071: Got error 'PHP message: start 1763073602.9134', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:40:04.259663 2025] [proxy_fcgi:error] [pid 47242:tid 47246] [client 165.85.56.95:6589] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073604.2589-1763073602.9134', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:42:05.243903 2025] [proxy_fcgi:error] [pid 47242:tid 47267] [client 165.85.56.95:21751] AH01071: Got error 'PHP message: start 1763073724.5641', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:42:05.723355 2025] [proxy_fcgi:error] [pid 47242:tid 47267] [client 165.85.56.95:21751] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073725.7228-1763073724.5641', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:44:06.788667 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:25221] AH01071: Got error 'PHP message: start 1763073846.0384', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:44:07.396756 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:25221] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073847.396-1763073846.0384', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:46:08.461882 2025] [proxy_fcgi:error] [pid 47630:tid 47639] [client 165.85.56.95:65431] AH01071: Got error 'PHP message: start 1763073967.6969', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:46:09.066712 2025] [proxy_fcgi:error] [pid 47630:tid 47639] [client 165.85.56.95:65431] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763073969.0659-1763073967.6969', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:48:10.262646 2025] [proxy_fcgi:error] [pid 47156:tid 47233] [client 165.85.56.95:18794] AH01071: Got error 'PHP message: start 1763074089.5138', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:48:10.669152 2025] [proxy_fcgi:error] [pid 47156:tid 47233] [client 165.85.56.95:18794] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074090.6685-1763074089.5138', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:50:11.864749 2025] [proxy_fcgi:error] [pid 47155:tid 47194] [client 165.85.56.95:65072] AH01071: Got error 'PHP message: start 1763074211.1373', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:50:12.576023 2025] [proxy_fcgi:error] [pid 47155:tid 47194] [client 165.85.56.95:65072] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074212.5755-1763074211.1373', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:52:13.587818 2025] [proxy_fcgi:error] [pid 47242:tid 47264] [client 165.85.56.95:59645] AH01071: Got error 'PHP message: start 1763074333.0504', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:52:13.885711 2025] [proxy_fcgi:error] [pid 47242:tid 47264] [client 165.85.56.95:59645] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074333.8851-1763074333.0504', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:54:15.067635 2025] [proxy_fcgi:error] [pid 47155:tid 47207] [client 165.85.56.95:38735] AH01071: Got error 'PHP message: start 1763074454.381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:54:15.644464 2025] [proxy_fcgi:error] [pid 47155:tid 47207] [client 165.85.56.95:38735] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074455.6437-1763074454.381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:56:16.633270 2025] [proxy_fcgi:error] [pid 47154:tid 47161] [client 165.85.56.95:34766] AH01071: Got error 'PHP message: start 1763074576.1235', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:56:16.929822 2025] [proxy_fcgi:error] [pid 47154:tid 47161] [client 165.85.56.95:34766] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074576.9292-1763074576.1235', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:58:18.184287 2025] [proxy_fcgi:error] [pid 47156:tid 47229] [client 165.85.56.95:43854] AH01071: Got error 'PHP message: start 1763074697.5699', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 06:58:18.534661 2025] [proxy_fcgi:error] [pid 47156:tid 47229] [client 165.85.56.95:43854] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074698.5337-1763074697.5699', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:00:19.662394 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:9440] AH01071: Got error 'PHP message: start 1763074819.0196', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:00:20.197589 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:9440] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074820.1969-1763074819.0196', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:02:21.067660 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:6832] AH01071: Got error 'PHP message: start 1763074940.4913', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:02:21.543946 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:6832] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763074941.5433-1763074940.4913', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:04:22.408656 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:36853] AH01071: Got error 'PHP message: start 1763075061.8337', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:04:22.683881 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:36853] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075062.6832-1763075061.8337', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:06:23.731134 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:26320] AH01071: Got error 'PHP message: start 1763075183.1338', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:06:24.195377 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:26320] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075184.1948-1763075183.1338', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:08:25.452114 2025] [proxy_fcgi:error] [pid 47630:tid 47644] [client 165.85.56.95:5488] AH01071: Got error 'PHP message: start 1763075304.8637', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:08:25.755819 2025] [proxy_fcgi:error] [pid 47630:tid 47644] [client 165.85.56.95:5488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075305.7552-1763075304.8637', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:10:26.761338 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:63913] AH01071: Got error 'PHP message: start 1763075426.2', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:10:27.075850 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:63913] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075427.0753-1763075426.2', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:12:28.187030 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:32041] AH01071: Got error 'PHP message: start 1763075547.566', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:12:28.623826 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:32041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075548.6232-1763075547.566', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:14:04.617957 2025] [proxy_fcgi:error] [pid 47630:tid 47654] [client 1.146.224.227:1906] AH01071: Got error 'PHP message: start 1763075643.8513', referer: https://www.pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:14:05.222965 2025] [proxy_fcgi:error] [pid 47630:tid 47654] [client 1.146.224.227:1906] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075645.2223-1763075643.8513', referer: https://www.pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:14:29.491667 2025] [proxy_fcgi:error] [pid 47154:tid 47168] [client 165.85.56.95:5041] AH01071: Got error 'PHP message: start 1763075668.932', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:14:29.821430 2025] [proxy_fcgi:error] [pid 47154:tid 47168] [client 165.85.56.95:5041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075669.8207-1763075668.932', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:16:30.716143 2025] [proxy_fcgi:error] [pid 59105:tid 59110] [client 165.85.56.95:23399] AH01071: Got error 'PHP message: start 1763075790.1049', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:16:31.177807 2025] [proxy_fcgi:error] [pid 59105:tid 59110] [client 165.85.56.95:23399] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075791.1772-1763075790.1049', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:18:32.023624 2025] [proxy_fcgi:error] [pid 47155:tid 47188] [client 165.85.56.95:53719] AH01071: Got error 'PHP message: start 1763075911.4646', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:18:32.339787 2025] [proxy_fcgi:error] [pid 47155:tid 47188] [client 165.85.56.95:53719] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763075912.3391-1763075911.4646', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:20:33.361950 2025] [proxy_fcgi:error] [pid 47242:tid 47254] [client 165.85.56.95:40034] AH01071: Got error 'PHP message: start 1763076032.7742', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:20:33.800209 2025] [proxy_fcgi:error] [pid 47242:tid 47254] [client 165.85.56.95:40034] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076033.7997-1763076032.7742', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:22:34.620788 2025] [proxy_fcgi:error] [pid 47630:tid 47650] [client 165.85.56.95:5761] AH01071: Got error 'PHP message: start 1763076154.0824', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:22:34.901231 2025] [proxy_fcgi:error] [pid 47630:tid 47650] [client 165.85.56.95:5761] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076154.9007-1763076154.0824', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:24:35.806815 2025] [proxy_fcgi:error] [pid 47156:tid 47217] [client 165.85.56.95:35134] AH01071: Got error 'PHP message: start 1763076275.1954', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:24:36.282224 2025] [proxy_fcgi:error] [pid 47156:tid 47217] [client 165.85.56.95:35134] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076276.2817-1763076275.1954', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:26:37.183934 2025] [proxy_fcgi:error] [pid 47154:tid 47179] [client 165.85.56.95:39764] AH01071: Got error 'PHP message: start 1763076396.5815', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:26:37.477898 2025] [proxy_fcgi:error] [pid 47154:tid 47179] [client 165.85.56.95:39764] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076397.4771-1763076396.5815', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:28:38.281739 2025] [proxy_fcgi:error] [pid 47630:tid 47645] [client 165.85.56.95:6992] AH01071: Got error 'PHP message: start 1763076517.7651', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:28:38.582905 2025] [proxy_fcgi:error] [pid 47630:tid 47645] [client 165.85.56.95:6992] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076518.5822-1763076517.7651', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:30:39.507169 2025] [proxy_fcgi:error] [pid 47242:tid 47260] [client 165.85.56.95:5328] AH01071: Got error 'PHP message: start 1763076638.8958', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:30:39.900783 2025] [proxy_fcgi:error] [pid 47242:tid 47260] [client 165.85.56.95:5328] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076639.9-1763076638.8958', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:32:41.023333 2025] [proxy_fcgi:error] [pid 47242:tid 47268] [client 165.85.56.95:63303] AH01071: Got error 'PHP message: start 1763076760.5008', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:32:41.383013 2025] [proxy_fcgi:error] [pid 47242:tid 47268] [client 165.85.56.95:63303] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076761.382-1763076760.5008', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:34:42.288335 2025] [proxy_fcgi:error] [pid 47155:tid 47207] [client 165.85.56.95:4491] AH01071: Got error 'PHP message: start 1763076881.7074', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:34:42.637033 2025] [proxy_fcgi:error] [pid 47155:tid 47207] [client 165.85.56.95:4491] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763076882.6364-1763076881.7074', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:37:29.750407 2025] [proxy_fcgi:error] [pid 59105:tid 59120] [client 165.85.56.95:59738] AH01071: Got error 'PHP message: start 1763077049.155', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:37:30.109266 2025] [proxy_fcgi:error] [pid 59105:tid 59120] [client 165.85.56.95:59738] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077050.1085-1763077049.155', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:39:31.178989 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:17879] AH01071: Got error 'PHP message: start 1763077170.5819', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:39:31.581719 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:17879] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077171.5805-1763077170.5819', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:41:37.575785 2025] [proxy_fcgi:error] [pid 47154:tid 47163] [client 165.85.56.95:36969] AH01071: Got error 'PHP message: start 1763077292.0297', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:41:38.170851 2025] [proxy_fcgi:error] [pid 47154:tid 47163] [client 165.85.56.95:36969] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077298.17-1763077292.0297', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:43:39.167967 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:46543] AH01071: Got error 'PHP message: start 1763077418.6585', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:43:39.461480 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:46543] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077419.4609-1763077418.6585', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:45:40.420625 2025] [proxy_fcgi:error] [pid 47154:tid 47175] [client 165.85.56.95:19148] AH01071: Got error 'PHP message: start 1763077539.8005', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:45:40.723693 2025] [proxy_fcgi:error] [pid 47154:tid 47175] [client 165.85.56.95:19148] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077540.7223-1763077539.8005', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:47:41.639944 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:17346] AH01071: Got error 'PHP message: start 1763077661.0381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:47:42.086474 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:17346] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077662.0859-1763077661.0381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:49:43.117079 2025] [proxy_fcgi:error] [pid 47242:tid 47256] [client 165.85.56.95:44816] AH01071: Got error 'PHP message: start 1763077782.5574', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:49:43.424538 2025] [proxy_fcgi:error] [pid 47242:tid 47256] [client 165.85.56.95:44816] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077783.4238-1763077782.5574', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:51:44.409240 2025] [proxy_fcgi:error] [pid 47154:tid 47162] [client 165.85.56.95:51265] AH01071: Got error 'PHP message: start 1763077903.7083', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:51:44.876674 2025] [proxy_fcgi:error] [pid 47154:tid 47162] [client 165.85.56.95:51265] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763077904.8758-1763077903.7083', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:53:19.874774 2025] [proxy_fcgi:error] [pid 47242:tid 47268] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:53:21.142115 2025] [proxy_fcgi:error] [pid 47242:tid 47255] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: start 1763078000.6951', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:53:21.941959 2025] [proxy_fcgi:error] [pid 47242:tid 47255] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078001.9415-1763078000.6951', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:53:30.317792 2025] [proxy_fcgi:error] [pid 47242:tid 47255] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44176
[Fri Nov 14 07:53:34.642762 2025] [proxy_fcgi:error] [pid 47242:tid 47253] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44176
[Fri Nov 14 07:53:36.279430 2025] [proxy_fcgi:error] [pid 47242:tid 47269] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: start 1763078015.595', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:53:36.914666 2025] [proxy_fcgi:error] [pid 47242:tid 47269] [client 165.85.56.95:19005] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078016.9143-1763078015.595', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:53:45.216035 2025] [proxy_fcgi:error] [pid 47155:tid 47210] [client 165.85.56.95:26722] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44204
[Fri Nov 14 07:53:47.524973 2025] [proxy_fcgi:error] [pid 47155:tid 47189] [client 165.85.56.95:26722] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44204
[Fri Nov 14 07:53:48.358434 2025] [proxy_fcgi:error] [pid 47155:tid 47205] [client 165.85.56.95:26722] AH01071: Got error 'PHP message: start 1763078028.0891', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:53:48.885390 2025] [proxy_fcgi:error] [pid 47155:tid 47205] [client 165.85.56.95:26722] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078028.8849-1763078028.0891', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 07:55:50.046065 2025] [proxy_fcgi:error] [pid 47630:tid 47632] [client 165.85.56.95:31907] AH01071: Got error 'PHP message: start 1763078149.3407', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:55:50.668041 2025] [proxy_fcgi:error] [pid 47630:tid 47632] [client 165.85.56.95:31907] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078150.6667-1763078149.3407', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:57:51.717441 2025] [proxy_fcgi:error] [pid 47155:tid 47187] [client 165.85.56.95:2108] AH01071: Got error 'PHP message: start 1763078271.0341', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:57:52.202396 2025] [proxy_fcgi:error] [pid 47155:tid 47187] [client 165.85.56.95:2108] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078272.2016-1763078271.0341', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:59:53.038978 2025] [proxy_fcgi:error] [pid 47242:tid 47247] [client 165.85.56.95:53124] AH01071: Got error 'PHP message: start 1763078392.4919', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 07:59:53.471013 2025] [proxy_fcgi:error] [pid 47242:tid 47247] [client 165.85.56.95:53124] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078393.4706-1763078392.4919', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:01:54.653656 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:21491] AH01071: Got error 'PHP message: start 1763078513.9252', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:01:55.203831 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:21491] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078515.2033-1763078513.9252', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:03:56.041429 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:57544] AH01071: Got error 'PHP message: start 1763078635.4921', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:03:56.390672 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:57544] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078636.3902-1763078635.4921', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:04:16.922397 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:15136] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:04:19.857668 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:15136] AH01071: Got error 'PHP message: start 1763078659.2379', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:04:20.690590 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:15136] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078660.6902-1763078659.2379', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:06:22.011042 2025] [proxy_fcgi:error] [pid 47154:tid 47175] [client 165.85.56.95:11211] AH01071: Got error 'PHP message: start 1763078780.9786', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:06:22.934690 2025] [proxy_fcgi:error] [pid 47154:tid 47175] [client 165.85.56.95:11211] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078782.9341-1763078780.9786', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:08:24.052671 2025] [proxy_fcgi:error] [pid 47154:tid 47162] [client 165.85.56.95:48918] AH01071: Got error 'PHP message: start 1763078903.2532', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:08:24.955751 2025] [proxy_fcgi:error] [pid 47154:tid 47162] [client 165.85.56.95:48918] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763078904.9547-1763078903.2532', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:10:26.027045 2025] [proxy_fcgi:error] [pid 47630:tid 47655] [client 165.85.56.95:62161] AH01071: Got error 'PHP message: start 1763079025.4173', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:10:26.874871 2025] [proxy_fcgi:error] [pid 47630:tid 47655] [client 165.85.56.95:62161] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079026.8743-1763079025.4173', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:12:27.748028 2025] [proxy_fcgi:error] [pid 59105:tid 59112] [client 165.85.56.95:49171] AH01071: Got error 'PHP message: start 1763079147.17', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:12:28.407880 2025] [proxy_fcgi:error] [pid 59105:tid 59112] [client 165.85.56.95:49171] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079148.4069-1763079147.17', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:14:29.379662 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:19046] AH01071: Got error 'PHP message: start 1763079268.7071', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:14:30.083179 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:19046] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079270.0827-1763079268.7071', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:16:31.060501 2025] [proxy_fcgi:error] [pid 59105:tid 59126] [client 165.85.56.95:49365] AH01071: Got error 'PHP message: start 1763079390.3999', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:16:31.958836 2025] [proxy_fcgi:error] [pid 59105:tid 59126] [client 165.85.56.95:49365] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079391.958-1763079390.3999', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:18:32.882908 2025] [proxy_fcgi:error] [pid 47630:tid 47654] [client 165.85.56.95:1608] AH01071: Got error 'PHP message: start 1763079512.2337', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:18:33.715248 2025] [proxy_fcgi:error] [pid 47630:tid 47654] [client 165.85.56.95:1608] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079513.7147-1763079512.2337', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:19:52.487014 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:38643] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:19:53.651605 2025] [proxy_fcgi:error] [pid 47156:tid 47222] [client 165.85.56.95:38643] AH01071: Got error 'PHP message: start 1763079593.188', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:19:53.918916 2025] [proxy_fcgi:error] [pid 47156:tid 47222] [client 165.85.56.95:38643] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079593.9186-1763079593.188', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:21:54.767617 2025] [proxy_fcgi:error] [pid 47154:tid 47172] [client 165.85.56.95:31951] AH01071: Got error 'PHP message: start 1763079714.1867', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:21:54.935930 2025] [proxy_fcgi:error] [pid 47154:tid 47172] [client 165.85.56.95:31951] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079714.9355-1763079714.1867', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:23:55.815099 2025] [proxy_fcgi:error] [pid 59105:tid 59129] [client 165.85.56.95:4911] AH01071: Got error 'PHP message: start 1763079835.2332', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:23:55.966445 2025] [proxy_fcgi:error] [pid 59105:tid 59129] [client 165.85.56.95:4911] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079835.966-1763079835.2332', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:25:56.818892 2025] [proxy_fcgi:error] [pid 47154:tid 47161] [client 165.85.56.95:28373] AH01071: Got error 'PHP message: start 1763079956.2615', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:25:57.003242 2025] [proxy_fcgi:error] [pid 47154:tid 47161] [client 165.85.56.95:28373] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763079957.0026-1763079956.2615', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:27:01.841917 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:1420] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44606
[Fri Nov 14 08:27:56.712033 2025] [proxy_fcgi:error] [pid 47155:tid 47188] [client 165.85.56.95:57313] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44606
[Fri Nov 14 08:27:58.044535 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:57313] AH01071: Got error 'PHP message: start 1763080077.3648', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:27:58.311095 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:57313] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080078.3105-1763080077.3648', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:29:59.386747 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:14089] AH01071: Got error 'PHP message: start 1763080198.7384', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:29:59.606351 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:14089] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080199.606-1763080198.7384', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:30:25.347663 2025] [proxy_fcgi:error] [pid 59105:tid 59129] [client 165.85.56.95:36429] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:30:26.801864 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:36429] AH01071: Got error 'PHP message: start 1763080226.0712', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:30:27.411597 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:36429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080227.411-1763080226.0712', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:32:28.537183 2025] [proxy_fcgi:error] [pid 47156:tid 47226] [client 165.85.56.95:62779] AH01071: Got error 'PHP message: start 1763080347.8893', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:32:28.910876 2025] [proxy_fcgi:error] [pid 47156:tid 47226] [client 165.85.56.95:62779] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080348.9102-1763080347.8893', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:34:30.059226 2025] [proxy_fcgi:error] [pid 47154:tid 47160] [client 165.85.56.95:38253] AH01071: Got error 'PHP message: start 1763080469.3529', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:34:30.654819 2025] [proxy_fcgi:error] [pid 47154:tid 47160] [client 165.85.56.95:38253] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080470.6542-1763080469.3529', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:36:31.637020 2025] [proxy_fcgi:error] [pid 47156:tid 47236] [client 165.85.56.95:40770] AH01071: Got error 'PHP message: start 1763080590.9456', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:36:32.140909 2025] [proxy_fcgi:error] [pid 47156:tid 47236] [client 165.85.56.95:40770] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080592.1402-1763080590.9456', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:38:33.203082 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:52322] AH01071: Got error 'PHP message: start 1763080712.4564', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:38:33.820364 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:52322] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080713.8195-1763080712.4564', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:40:34.824683 2025] [proxy_fcgi:error] [pid 47630:tid 47640] [client 165.85.56.95:4262] AH01071: Got error 'PHP message: start 1763080834.111', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:40:35.463561 2025] [proxy_fcgi:error] [pid 47630:tid 47640] [client 165.85.56.95:4262] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763080835.4626-1763080834.111', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:49:40.192383 2025] [proxy_fcgi:error] [pid 47154:tid 47163] [client 165.85.56.95:62501] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 08:49:51.667469 2025] [proxy_fcgi:error] [pid 47154:tid 47177] [client 165.85.56.95:20255] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44648
[Fri Nov 14 08:50:06.424816 2025] [proxy_fcgi:error] [pid 47156:tid 47222] [client 165.85.56.95:16616] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44649
[Fri Nov 14 08:50:14.475985 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:10698] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44649
[Fri Nov 14 08:50:28.768359 2025] [proxy_fcgi:error] [pid 47156:tid 47226] [client 165.85.56.95:27857] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44650
[Fri Nov 14 08:50:37.064429 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:1713] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44650
[Fri Nov 14 08:50:47.347343 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:42486] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44651
[Fri Nov 14 08:52:45.300879 2025] [proxy_fcgi:error] [pid 59105:tid 59130] [client 165.85.56.95:2843] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Fri Nov 14 08:52:47.188424 2025] [proxy_fcgi:error] [pid 59105:tid 59113] [client 165.85.56.95:2843] AH01071: Got error 'PHP message: start 1763081566.5246', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:52:47.715900 2025] [proxy_fcgi:error] [pid 59105:tid 59113] [client 165.85.56.95:2843] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081567.7153-1763081566.5246', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:53:12.658013 2025] [proxy_fcgi:error] [pid 47154:tid 47181] [client 165.85.56.95:24281] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44651
[Fri Nov 14 08:53:24.498320 2025] [proxy_fcgi:error] [pid 47630:tid 47649] [client 165.85.56.95:4124] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44652
[Fri Nov 14 08:53:31.278588 2025] [proxy_fcgi:error] [pid 47630:tid 47644] [client 165.85.56.95:4124] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44652
[Fri Nov 14 08:53:32.903582 2025] [proxy_fcgi:error] [pid 47630:tid 47647] [client 165.85.56.95:4124] AH01071: Got error 'PHP message: start 1763081612.2197', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:53:33.574248 2025] [proxy_fcgi:error] [pid 47630:tid 47647] [client 165.85.56.95:4124] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081613.5737-1763081612.2197', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 08:54:48.903171 2025] [proxy_fcgi:error] [pid 47242:tid 47266] [client 165.85.56.95:32010] AH01071: Got error 'PHP message: start 1763081688.3848', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:54:49.254224 2025] [proxy_fcgi:error] [pid 47242:tid 47266] [client 165.85.56.95:32010] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081689.2537-1763081688.3848', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:55:34.832989 2025] [proxy_fcgi:error] [pid 47630:tid 47637] [client 165.85.56.95:14368] AH01071: Got error 'PHP message: start 1763081734.0809', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:55:35.431694 2025] [proxy_fcgi:error] [pid 47630:tid 47637] [client 165.85.56.95:14368] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081735.4311-1763081734.0809', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:56:50.971672 2025] [proxy_fcgi:error] [pid 47155:tid 47193] [client 165.85.56.95:14699] AH01071: Got error 'PHP message: start 1763081810.1571', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:56:51.430836 2025] [proxy_fcgi:error] [pid 47155:tid 47193] [client 165.85.56.95:14699] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081811.4302-1763081810.1571', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:57:36.903191 2025] [proxy_fcgi:error] [pid 47242:tid 47260] [client 165.85.56.95:48096] AH01071: Got error 'PHP message: start 1763081855.9821', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:57:37.579236 2025] [proxy_fcgi:error] [pid 47242:tid 47260] [client 165.85.56.95:48096] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081857.5787-1763081855.9821', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:58:53.694945 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:32155] AH01071: Got error 'PHP message: start 1763081932.576', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:58:54.346620 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:32155] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081934.3461-1763081932.576', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:59:38.935641 2025] [proxy_fcgi:error] [pid 47242:tid 47246] [client 165.85.56.95:5245] AH01071: Got error 'PHP message: start 1763081978.0501', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 08:59:39.612115 2025] [proxy_fcgi:error] [pid 47242:tid 47246] [client 165.85.56.95:5245] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763081979.6113-1763081978.0501', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:00:55.880218 2025] [proxy_fcgi:error] [pid 47156:tid 47221] [client 165.85.56.95:14402] AH01071: Got error 'PHP message: start 1763082055.2317', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:00:56.318461 2025] [proxy_fcgi:error] [pid 47156:tid 47221] [client 165.85.56.95:14402] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082056.3179-1763082055.2317', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:01:40.676376 2025] [proxy_fcgi:error] [pid 59105:tid 59116] [client 165.85.56.95:18750] AH01071: Got error 'PHP message: start 1763082099.9033', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:01:41.257568 2025] [proxy_fcgi:error] [pid 59105:tid 59116] [client 165.85.56.95:18750] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082101.2566-1763082099.9033', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:02:57.890737 2025] [proxy_fcgi:error] [pid 59105:tid 59107] [client 165.85.56.95:41921] AH01071: Got error 'PHP message: start 1763082177.2381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:02:58.284698 2025] [proxy_fcgi:error] [pid 59105:tid 59107] [client 165.85.56.95:41921] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082178.2837-1763082177.2381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:03:42.333873 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:41788] AH01071: Got error 'PHP message: start 1763082221.5628', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:03:42.930723 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:41788] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082222.93-1763082221.5628', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:04:11.804557 2025] [proxy_fcgi:error] [pid 47156:tid 47220] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:13.081355 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: start 1763082252.5775', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:13.262125 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082253.2618-1763082252.5775', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:19.103660 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:20.688878 2025] [proxy_fcgi:error] [pid 47156:tid 47220] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: start 1763082259.9211', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:20.959106 2025] [proxy_fcgi:error] [pid 47156:tid 47220] [client 165.85.56.95:47672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082260.9588-1763082259.9211', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:27.869828 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:49962] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:28.861801 2025] [proxy_fcgi:error] [pid 59105:tid 59117] [client 165.85.56.95:49962] AH01071: Got error 'PHP message: start 1763082268.446', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:29.345699 2025] [proxy_fcgi:error] [pid 59105:tid 59117] [client 165.85.56.95:49962] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082269.3452-1763082268.446', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:04:59.503648 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:64057] AH01071: Got error 'PHP message: start 1763082298.8041', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:04:59.964257 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:64057] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082299.9637-1763082298.8041', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:05:24.972419 2025] [proxy_fcgi:error] [pid 47154:tid 47165] [client 165.85.56.95:44427] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:05:26.106564 2025] [proxy_fcgi:error] [pid 47154:tid 47166] [client 165.85.56.95:44427] AH01071: Got error 'PHP message: start 1763082325.6684', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:05:26.651914 2025] [proxy_fcgi:error] [pid 47154:tid 47166] [client 165.85.56.95:44427] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082326.6513-1763082325.6684', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:07:01.648326 2025] [proxy_fcgi:error] [pid 47156:tid 47234] [client 165.85.56.95:64488] AH01071: Got error 'PHP message: start 1763082420.8786', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:07:02.232442 2025] [proxy_fcgi:error] [pid 47156:tid 47234] [client 165.85.56.95:64488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082422.2305-1763082420.8786', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:07:27.758084 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:2156] AH01071: Got error 'PHP message: start 1763082447.0979', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:07:28.406152 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:2156] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082448.4055-1763082447.0979', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:07:48.410496 2025] [proxy_fcgi:error] [pid 47242:tid 47252] [client 165.85.56.95:10014] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:07:49.706615 2025] [proxy_fcgi:error] [pid 47242:tid 47254] [client 165.85.56.95:10014] AH01071: Got error 'PHP message: start 1763082469.0593', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:07:50.129176 2025] [proxy_fcgi:error] [pid 47242:tid 47254] [client 165.85.56.95:10014] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082470.1287-1763082469.0593', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:09:03.429755 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:62222] AH01071: Got error 'PHP message: start 1763082542.7567', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:09:03.825064 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:62222] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082543.8245-1763082542.7567', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:09:51.074127 2025] [proxy_fcgi:error] [pid 47155:tid 47200] [client 165.85.56.95:22703] AH01071: Got error 'PHP message: start 1763082590.4259', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:09:51.604267 2025] [proxy_fcgi:error] [pid 47155:tid 47200] [client 165.85.56.95:22703] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082591.6037-1763082590.4259', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:11:05.087183 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:64733] AH01071: Got error 'PHP message: start 1763082664.3066', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:11:05.641525 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:64733] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082665.641-1763082664.3066', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:11:52.452465 2025] [proxy_fcgi:error] [pid 47156:tid 47239] [client 165.85.56.95:35127] AH01071: Got error 'PHP message: start 1763082711.8962', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:11:52.803320 2025] [proxy_fcgi:error] [pid 47156:tid 47239] [client 165.85.56.95:35127] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082712.8028-1763082711.8962', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:13:06.728060 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:16625] AH01071: Got error 'PHP message: start 1763082786.0204', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:13:07.099925 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:16625] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082787.0994-1763082786.0204', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:13:53.012774 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:7877] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:13:53.589646 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:36534] AH01071: Got error 'PHP message: start 1763082833.2377', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:13:53.790648 2025] [proxy_fcgi:error] [pid 47156:tid 47221] [client 165.85.56.95:7877] AH01071: Got error 'PHP message: start 1763082833.6171', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:13:54.173685 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:36534] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082834.1732-1763082833.2377', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:13:54.516544 2025] [proxy_fcgi:error] [pid 47156:tid 47221] [client 165.85.56.95:7877] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082834.5161-1763082833.6171', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:14:06.880029 2025] [proxy_fcgi:error] [pid 59105:tid 59130] [client 165.85.56.95:8512] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-13
[Fri Nov 14 09:15:55.727983 2025] [proxy_fcgi:error] [pid 59105:tid 59123] [client 165.85.56.95:4574] AH01071: Got error 'PHP message: start 1763082954.461', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:15:56.253299 2025] [proxy_fcgi:error] [pid 59105:tid 59123] [client 165.85.56.95:4574] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763082956.2526-1763082954.461', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:17:57.294651 2025] [proxy_fcgi:error] [pid 47242:tid 47253] [client 165.85.56.95:29546] AH01071: Got error 'PHP message: start 1763083076.6749', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:17:57.607445 2025] [proxy_fcgi:error] [pid 47242:tid 47253] [client 165.85.56.95:29546] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083077.6068-1763083076.6749', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:19:58.454450 2025] [proxy_fcgi:error] [pid 47154:tid 47164] [client 165.85.56.95:15642] AH01071: Got error 'PHP message: start 1763083197.9051', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:19:58.748650 2025] [proxy_fcgi:error] [pid 47154:tid 47164] [client 165.85.56.95:15642] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083198.7481-1763083197.9051', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:21:59.657093 2025] [proxy_fcgi:error] [pid 47154:tid 47169] [client 165.85.56.95:33711] AH01071: Got error 'PHP message: start 1763083319.0398', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:21:59.990130 2025] [proxy_fcgi:error] [pid 47154:tid 47169] [client 165.85.56.95:33711] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083319.9895-1763083319.0398', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:24:00.983198 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:15851] AH01071: Got error 'PHP message: start 1763083440.2948', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:24:01.302594 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:15851] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083441.3019-1763083440.2948', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:24:19.502612 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:46384] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:20.347904 2025] [proxy_fcgi:error] [pid 47156:tid 47219] [client 165.85.56.95:40143] AH01071: Got error 'PHP message: start 1763083459.8518', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:21.152839 2025] [proxy_fcgi:error] [pid 47156:tid 47219] [client 165.85.56.95:40143] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083461.1523-1763083459.8518', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:21.695682 2025] [proxy_fcgi:error] [pid 47156:tid 47224] [client 165.85.56.95:46384] AH01071: Got error 'PHP message: start 1763083461.1549', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:22.420108 2025] [proxy_fcgi:error] [pid 47156:tid 47224] [client 165.85.56.95:46384] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083462.4197-1763083461.1549', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:34.535887 2025] [proxy_fcgi:error] [pid 47156:tid 47234] [client 165.85.56.95:56478] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:35.529368 2025] [proxy_fcgi:error] [pid 47156:tid 47221] [client 165.85.56.95:56478] AH01071: Got error 'PHP message: start 1763083475.1363', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:24:35.920401 2025] [proxy_fcgi:error] [pid 47156:tid 47221] [client 165.85.56.95:56478] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083475.92-1763083475.1363', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:26:02.395038 2025] [proxy_fcgi:error] [pid 47630:tid 47645] [client 165.85.56.95:10593] AH01071: Got error 'PHP message: start 1763083561.7942', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:26:02.717622 2025] [proxy_fcgi:error] [pid 47630:tid 47645] [client 165.85.56.95:10593] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083562.7169-1763083561.7942', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:26:36.867091 2025] [proxy_fcgi:error] [pid 47154:tid 47165] [client 165.85.56.95:51419] AH01071: Got error 'PHP message: start 1763083596.1991', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:26:37.075428 2025] [proxy_fcgi:error] [pid 47154:tid 47165] [client 165.85.56.95:51419] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083597.075-1763083596.1991', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:28:03.899962 2025] [proxy_fcgi:error] [pid 59105:tid 59126] [client 165.85.56.95:37117] AH01071: Got error 'PHP message: start 1763083683.0338', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:28:04.496159 2025] [proxy_fcgi:error] [pid 59105:tid 59126] [client 165.85.56.95:37117] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083684.4952-1763083683.0338', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:28:38.262666 2025] [proxy_fcgi:error] [pid 47630:tid 47644] [client 165.85.56.95:17764] AH01071: Got error 'PHP message: start 1763083717.5761', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:28:38.558527 2025] [proxy_fcgi:error] [pid 47630:tid 47644] [client 165.85.56.95:17764] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083718.5581-1763083717.5761', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:30:05.680821 2025] [proxy_fcgi:error] [pid 47630:tid 47640] [client 165.85.56.95:32883] AH01071: Got error 'PHP message: start 1763083805.0102', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:30:06.163472 2025] [proxy_fcgi:error] [pid 47630:tid 47640] [client 165.85.56.95:32883] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083806.1629-1763083805.0102', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:30:40.126452 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:30689] AH01071: Got error 'PHP message: start 1763083839.4625', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:30:40.516501 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:30689] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083840.516-1763083839.4625', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:32:07.120295 2025] [proxy_fcgi:error] [pid 47242:tid 47249] [client 165.85.56.95:39098] AH01071: Got error 'PHP message: start 1763083926.4797', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:32:07.494866 2025] [proxy_fcgi:error] [pid 47242:tid 47249] [client 165.85.56.95:39098] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083927.4941-1763083926.4797', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:32:42.254414 2025] [proxy_fcgi:error] [pid 59105:tid 59109] [client 165.85.56.95:8376] AH01071: Got error 'PHP message: start 1763083961.4068', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:32:42.534903 2025] [proxy_fcgi:error] [pid 59105:tid 59109] [client 165.85.56.95:8376] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763083962.534-1763083961.4068', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:34:08.575661 2025] [proxy_fcgi:error] [pid 59105:tid 59107] [client 165.85.56.95:47701] AH01071: Got error 'PHP message: start 1763084048.011', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:34:08.876847 2025] [proxy_fcgi:error] [pid 59105:tid 59107] [client 165.85.56.95:47701] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084048.8762-1763084048.011', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:34:43.634681 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:46159] AH01071: Got error 'PHP message: start 1763084083.0144', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:34:43.843708 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:46159] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084083.8432-1763084083.0144', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:35:34.052120 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:10476] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:35:35.868869 2025] [proxy_fcgi:error] [pid 47630:tid 47636] [client 165.85.56.95:10476] AH01071: Got error 'PHP message: start 1763084135.3554', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:35:36.665794 2025] [proxy_fcgi:error] [pid 47630:tid 47636] [client 165.85.56.95:10476] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084136.6653-1763084135.3554', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 09:36:10.046645 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:56527] AH01071: Got error 'PHP message: start 1763084169.363', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:36:10.668033 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:56527] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084170.6675-1763084169.363', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:37:37.414516 2025] [proxy_fcgi:error] [pid 47242:tid 47260] [client 165.85.56.95:16741] AH01071: Got error 'PHP message: start 1763084256.9628', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:37:38.275185 2025] [proxy_fcgi:error] [pid 47242:tid 47260] [client 165.85.56.95:16741] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084258.2747-1763084256.9628', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:38:11.821743 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:10135] AH01071: Got error 'PHP message: start 1763084291.1761', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:38:12.175682 2025] [proxy_fcgi:error] [pid 47156:tid 47227] [client 165.85.56.95:10135] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084292.1748-1763084291.1761', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:39:39.002761 2025] [proxy_fcgi:error] [pid 47630:tid 47632] [client 165.85.56.95:63489] AH01071: Got error 'PHP message: start 1763084378.5665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:39:39.787259 2025] [proxy_fcgi:error] [pid 47630:tid 47632] [client 165.85.56.95:63489] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084379.7869-1763084378.5665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:40:13.390518 2025] [proxy_fcgi:error] [pid 59105:tid 59124] [client 165.85.56.95:23368] AH01071: Got error 'PHP message: start 1763084412.6862', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:40:14.051350 2025] [proxy_fcgi:error] [pid 59105:tid 59124] [client 165.85.56.95:23368] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084414.0507-1763084412.6862', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:41:40.739734 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:37491] AH01071: Got error 'PHP message: start 1763084500.1058', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:41:41.378770 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:37491] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084501.3776-1763084500.1058', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:42:15.450070 2025] [proxy_fcgi:error] [pid 47155:tid 47197] [client 165.85.56.95:59664] AH01071: Got error 'PHP message: start 1763084534.7213', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:42:15.995676 2025] [proxy_fcgi:error] [pid 47155:tid 47197] [client 165.85.56.95:59664] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084535.9951-1763084534.7213', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:43:42.113183 2025] [proxy_fcgi:error] [pid 59105:tid 59112] [client 165.85.56.95:14161] AH01071: Got error 'PHP message: start 1763084621.6923', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:43:42.607754 2025] [proxy_fcgi:error] [pid 59105:tid 59112] [client 165.85.56.95:14161] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084622.6061-1763084621.6923', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:44:17.085876 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:8127] AH01071: Got error 'PHP message: start 1763084656.5036', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:44:17.476504 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:8127] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084657.4759-1763084656.5036', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:45:43.837017 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:15731] AH01071: Got error 'PHP message: start 1763084743.1152', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:45:44.664953 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:15731] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084744.6646-1763084743.1152', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:46:18.430748 2025] [proxy_fcgi:error] [pid 59105:tid 59119] [client 165.85.56.95:8237] AH01071: Got error 'PHP message: start 1763084777.7589', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:46:18.940446 2025] [proxy_fcgi:error] [pid 59105:tid 59119] [client 165.85.56.95:8237] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084778.9399-1763084777.7589', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:47:45.676658 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:41154] AH01071: Got error 'PHP message: start 1763084865.177', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:47:46.481096 2025] [proxy_fcgi:error] [pid 47156:tid 47238] [client 165.85.56.95:41154] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084866.4805-1763084865.177', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:48:20.060746 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:2429] AH01071: Got error 'PHP message: start 1763084899.4077', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:48:20.550311 2025] [proxy_fcgi:error] [pid 47156:tid 47237] [client 165.85.56.95:2429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763084900.5496-1763084899.4077', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:50:21.461627 2025] [proxy_fcgi:error] [pid 47156:tid 47214] [client 165.85.56.95:20706] AH01071: Got error 'PHP message: start 1763085020.8775', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:50:21.883669 2025] [proxy_fcgi:error] [pid 47156:tid 47214] [client 165.85.56.95:20706] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085021.883-1763085020.8775', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:52:23.148011 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:26240] AH01071: Got error 'PHP message: start 1763085142.5245', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:52:23.501434 2025] [proxy_fcgi:error] [pid 59105:tid 59128] [client 165.85.56.95:26240] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085143.5008-1763085142.5245', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:54:24.654868 2025] [proxy_fcgi:error] [pid 47630:tid 47639] [client 165.85.56.95:9672] AH01071: Got error 'PHP message: start 1763085263.9953', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:54:24.980343 2025] [proxy_fcgi:error] [pid 47630:tid 47639] [client 165.85.56.95:9672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085264.9798-1763085263.9953', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:56:26.522471 2025] [proxy_fcgi:error] [pid 47242:tid 47264] [client 165.85.56.95:50126] AH01071: Got error 'PHP message: start 1763085385.2946', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:56:27.149035 2025] [proxy_fcgi:error] [pid 47242:tid 47264] [client 165.85.56.95:50126] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085387.1483-1763085385.2946', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:58:28.204824 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:9505] AH01071: Got error 'PHP message: start 1763085507.5883', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 09:58:28.655560 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:9505] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085508.6548-1763085507.5883', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:00:29.800278 2025] [proxy_fcgi:error] [pid 59105:tid 59131] [client 165.85.56.95:4922] AH01071: Got error 'PHP message: start 1763085628.9578', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:00:30.232318 2025] [proxy_fcgi:error] [pid 59105:tid 59131] [client 165.85.56.95:4922] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085630.2317-1763085628.9578', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:02:31.516943 2025] [proxy_fcgi:error] [pid 47155:tid 47192] [client 165.85.56.95:59100] AH01071: Got error 'PHP message: start 1763085750.7143', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:02:32.042716 2025] [proxy_fcgi:error] [pid 47155:tid 47192] [client 165.85.56.95:59100] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085752.0413-1763085750.7143', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:04:33.215627 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:13501] AH01071: Got error 'PHP message: start 1763085872.5373', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:04:33.618028 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:13501] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085873.6173-1763085872.5373', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:06:34.825027 2025] [proxy_fcgi:error] [pid 47156:tid 47215] [client 165.85.56.95:7544] AH01071: Got error 'PHP message: start 1763085994.0714', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:06:35.354647 2025] [proxy_fcgi:error] [pid 47156:tid 47215] [client 165.85.56.95:7544] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763085995.3539-1763085994.0714', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:08:36.745114 2025] [proxy_fcgi:error] [pid 59105:tid 59118] [client 165.85.56.95:28009] AH01071: Got error 'PHP message: start 1763086115.8012', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:08:37.294234 2025] [proxy_fcgi:error] [pid 59105:tid 59118] [client 165.85.56.95:28009] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086117.2935-1763086115.8012', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:10:38.777640 2025] [proxy_fcgi:error] [pid 47242:tid 47266] [client 165.85.56.95:44990] AH01071: Got error 'PHP message: start 1763086237.769', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:10:39.468406 2025] [proxy_fcgi:error] [pid 47242:tid 47266] [client 165.85.56.95:44990] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086239.4677-1763086237.769', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:12:40.424339 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:6410] AH01071: Got error 'PHP message: start 1763086359.7647', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:12:40.807166 2025] [proxy_fcgi:error] [pid 47155:tid 47201] [client 165.85.56.95:6410] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086360.8065-1763086359.7647', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:14:41.861834 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:37602] AH01071: Got error 'PHP message: start 1763086481.2499', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:14:42.414605 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:37602] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086482.4139-1763086481.2499', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:16:43.271598 2025] [proxy_fcgi:error] [pid 47630:tid 47647] [client 165.85.56.95:31234] AH01071: Got error 'PHP message: start 1763086602.7089', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:16:43.606173 2025] [proxy_fcgi:error] [pid 47630:tid 47647] [client 165.85.56.95:31234] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086603.6055-1763086602.7089', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:18:44.634462 2025] [proxy_fcgi:error] [pid 59105:tid 59113] [client 165.85.56.95:32531] AH01071: Got error 'PHP message: start 1763086724.0413', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:18:44.918256 2025] [proxy_fcgi:error] [pid 59105:tid 59113] [client 165.85.56.95:32531] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086724.9175-1763086724.0413', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:20:46.064614 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:60737] AH01071: Got error 'PHP message: start 1763086845.5103', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:20:46.401874 2025] [proxy_fcgi:error] [pid 59105:tid 59127] [client 165.85.56.95:60737] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086846.4012-1763086845.5103', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:22:47.796084 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:21462] AH01071: Got error 'PHP message: start 1763086966.8438', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:22:48.122118 2025] [proxy_fcgi:error] [pid 59105:tid 59114] [client 165.85.56.95:21462] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763086968.1215-1763086966.8438', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:24:49.167731 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:45901] AH01071: Got error 'PHP message: start 1763087088.5462', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:24:49.656440 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:45901] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763087089.6559-1763087088.5462', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:42:44.432882 2025] [proxy_fcgi:error] [pid 47155:tid 47202] [client 165.85.56.95:43690] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/clients.php
[Fri Nov 14 10:42:45.529784 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:43690] AH01071: Got error 'PHP message: start 1763088165.1846', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 10:42:46.271816 2025] [proxy_fcgi:error] [pid 47155:tid 47209] [client 165.85.56.95:43690] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088166.2714-1763088165.1846', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 10:44:47.027849 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:51676] AH01071: Got error 'PHP message: start 1763088286.5697', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:44:47.561423 2025] [proxy_fcgi:error] [pid 47630:tid 47646] [client 165.85.56.95:51676] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088287.5609-1763088286.5697', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:46:48.577963 2025] [proxy_fcgi:error] [pid 59105:tid 59112] [client 165.85.56.95:43369] AH01071: Got error 'PHP message: start 1763088408.092', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:46:49.150098 2025] [proxy_fcgi:error] [pid 59105:tid 59112] [client 165.85.56.95:43369] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088409.1497-1763088408.092', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:48:50.313264 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:55789] AH01071: Got error 'PHP message: start 1763088529.6351', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:48:51.137635 2025] [proxy_fcgi:error] [pid 47156:tid 47216] [client 165.85.56.95:55789] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088531.1371-1763088529.6351', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:50:52.460134 2025] [proxy_fcgi:error] [pid 47156:tid 47224] [client 165.85.56.95:5078] AH01071: Got error 'PHP message: start 1763088652.023', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:50:53.030067 2025] [proxy_fcgi:error] [pid 47156:tid 47224] [client 165.85.56.95:5078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088653.0296-1763088652.023', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:52:53.999440 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:20386] AH01071: Got error 'PHP message: start 1763088773.5361', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:52:54.928681 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:20386] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088774.928-1763088773.5361', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:54:56.001885 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:3521] AH01071: Got error 'PHP message: start 1763088895.5635', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 10:54:56.764765 2025] [proxy_fcgi:error] [pid 47156:tid 47218] [client 165.85.56.95:3521] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763088896.7641-1763088895.5635', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:15:24.315113 2025] [proxy_fcgi:error] [pid 59105:tid 59107] [client 165.85.56.95:43190] AH01071: Got error 'PHP message: start 1763090123.6627', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:15:24.828914 2025] [proxy_fcgi:error] [pid 59105:tid 59107] [client 165.85.56.95:43190] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090124.8283-1763090123.6627', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:17:26.235019 2025] [proxy_fcgi:error] [pid 47156:tid 47236] [client 165.85.56.95:34182] AH01071: Got error 'PHP message: start 1763090245.5269', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:17:26.791072 2025] [proxy_fcgi:error] [pid 47156:tid 47236] [client 165.85.56.95:34182] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090246.7905-1763090245.5269', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:19:27.854156 2025] [proxy_fcgi:error] [pid 47156:tid 47225] [client 165.85.56.95:6338] AH01071: Got error 'PHP message: start 1763090367.237', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:19:28.394799 2025] [proxy_fcgi:error] [pid 47156:tid 47225] [client 165.85.56.95:6338] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090368.3919-1763090367.237', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:21:29.272354 2025] [proxy_fcgi:error] [pid 59105:tid 59119] [client 165.85.56.95:22551] AH01071: Got error 'PHP message: start 1763090488.6759', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:21:29.608072 2025] [proxy_fcgi:error] [pid 59105:tid 59119] [client 165.85.56.95:22551] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090489.6075-1763090488.6759', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:22:45.881881 2025] [proxy_fcgi:error] [pid 47156:tid 47239] [client 165.85.56.95:25034] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:22:46.764247 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:25034] AH01071: Got error 'PHP message: start 1763090566.4093', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:22:47.071812 2025] [proxy_fcgi:error] [pid 47156:tid 47230] [client 165.85.56.95:25034] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090567.0713-1763090566.4093', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:27:32.255615 2025] [proxy_fcgi:error] [pid 47630:tid 47642] [client 165.85.56.95:30744] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 11:27:35.801790 2025] [proxy_fcgi:error] [pid 47630:tid 47640] [client 165.85.56.95:30744] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44653
[Fri Nov 14 11:27:37.512184 2025] [proxy_fcgi:error] [pid 47630:tid 47636] [client 165.85.56.95:30744] AH01071: Got error 'PHP message: start 1763090856.9177', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:27:37.827597 2025] [proxy_fcgi:error] [pid 47630:tid 47636] [client 165.85.56.95:30744] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090857.8271-1763090856.9177', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:28:12.139823 2025] [proxy_fcgi:error] [pid 47155:tid 47196] [client 165.85.56.95:23888] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:28:14.193639 2025] [proxy_fcgi:error] [pid 47155:tid 47200] [client 165.85.56.95:23888] AH01071: Got error 'PHP message: start 1763090893.3909', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:28:14.944991 2025] [proxy_fcgi:error] [pid 47155:tid 47200] [client 165.85.56.95:23888] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763090894.9444-1763090893.3909', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:29:10.970265 2025] [proxy_fcgi:error] [pid 47242:tid 47259] [client 165.85.56.95:47875] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44653
[Fri Nov 14 11:30:57.787323 2025] [proxy_fcgi:error] [pid 47156:tid 47217] [client 165.85.56.95:28894] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44653
[Fri Nov 14 11:30:59.784750 2025] [proxy_fcgi:error] [pid 47156:tid 47225] [client 165.85.56.95:28894] AH01071: Got error 'PHP message: start 1763091059.1273', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:31:00.314373 2025] [proxy_fcgi:error] [pid 47156:tid 47225] [client 165.85.56.95:28894] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091060.3138-1763091059.1273', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:31:20.881720 2025] [proxy_fcgi:error] [pid 47155:tid 47198] [client 165.85.56.95:38293] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:31:22.095731 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:38293] AH01071: Got error 'PHP message: start 1763091081.4366', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:31:22.297736 2025] [proxy_fcgi:error] [pid 47155:tid 47190] [client 165.85.56.95:38293] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091082.2974-1763091081.4366', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:33:23.423631 2025] [proxy_fcgi:error] [pid 47242:tid 47245] [client 165.85.56.95:10393] AH01071: Got error 'PHP message: start 1763091202.7239', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:33:23.680381 2025] [proxy_fcgi:error] [pid 47242:tid 47245] [client 165.85.56.95:10393] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091203.6797-1763091202.7239', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:35:24.873687 2025] [proxy_fcgi:error] [pid 47630:tid 47655] [client 165.85.56.95:11903] AH01071: Got error 'PHP message: start 1763091324.2502', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:35:25.034972 2025] [proxy_fcgi:error] [pid 47630:tid 47655] [client 165.85.56.95:11903] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091325.0345-1763091324.2502', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:37:26.403260 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:3349] AH01071: Got error 'PHP message: start 1763091445.3312', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:37:26.791765 2025] [proxy_fcgi:error] [pid 47154:tid 47183] [client 165.85.56.95:3349] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091446.7912-1763091445.3312', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:39:27.650565 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:9737] AH01071: Got error 'PHP message: start 1763091567.0645', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:39:27.828912 2025] [proxy_fcgi:error] [pid 47154:tid 47170] [client 165.85.56.95:9737] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091567.8286-1763091567.0645', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:41:29.341338 2025] [proxy_fcgi:error] [pid 47155:tid 47191] [client 165.85.56.95:46167] AH01071: Got error 'PHP message: start 1763091688.1394', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:41:29.621506 2025] [proxy_fcgi:error] [pid 47155:tid 47191] [client 165.85.56.95:46167] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091689.621-1763091688.1394', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:43:30.698197 2025] [proxy_fcgi:error] [pid 47156:tid 47215] [client 165.85.56.95:56788] AH01071: Got error 'PHP message: start 1763091810.0587', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:43:30.861772 2025] [proxy_fcgi:error] [pid 47156:tid 47215] [client 165.85.56.95:56788] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091810.8614-1763091810.0587', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:45:31.986613 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:36973] AH01071: Got error 'PHP message: start 1763091931.3058', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:45:32.225637 2025] [proxy_fcgi:error] [pid 47630:tid 47641] [client 165.85.56.95:36973] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763091932.225-1763091931.3058', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:47:33.575261 2025] [proxy_fcgi:error] [pid 47154:tid 47169] [client 165.85.56.95:37678] AH01071: Got error 'PHP message: start 1763092052.6897', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:47:33.839240 2025] [proxy_fcgi:error] [pid 47154:tid 47169] [client 165.85.56.95:37678] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092053.8389-1763092052.6897', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:49:35.079322 2025] [proxy_fcgi:error] [pid 47155:tid 47187] [client 165.85.56.95:25876] AH01071: Got error 'PHP message: start 1763092174.3002', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:49:35.301711 2025] [proxy_fcgi:error] [pid 47155:tid 47187] [client 165.85.56.95:25876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092175.3008-1763092174.3002', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:51:36.207286 2025] [proxy_fcgi:error] [pid 16671:tid 16694] [client 165.85.56.95:58427] AH01071: Got error 'PHP message: start 1763092295.6124', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:51:36.390413 2025] [proxy_fcgi:error] [pid 16671:tid 16694] [client 165.85.56.95:58427] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092296.3898-1763092295.6124', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:53:37.607758 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:10708] AH01071: Got error 'PHP message: start 1763092416.9521', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:53:37.767364 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:10708] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092417.7667-1763092416.9521', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:55:18.621101 2025] [proxy_fcgi:error] [pid 16573:tid 16600] [client 165.85.56.95:55649] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:55:20.091646 2025] [proxy_fcgi:error] [pid 16573:tid 16596] [client 165.85.56.95:55649] AH01071: Got error 'PHP message: start 1763092519.5795', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:55:20.502327 2025] [proxy_fcgi:error] [pid 16573:tid 16596] [client 165.85.56.95:55649] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092520.502-1763092519.5795', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 11:57:21.530723 2025] [proxy_fcgi:error] [pid 16671:tid 16679] [client 165.85.56.95:3368] AH01071: Got error 'PHP message: start 1763092640.9722', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:57:21.896643 2025] [proxy_fcgi:error] [pid 16671:tid 16679] [client 165.85.56.95:3368] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092641.8961-1763092640.9722', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:59:22.789966 2025] [proxy_fcgi:error] [pid 16709:tid 16733] [client 165.85.56.95:40136] AH01071: Got error 'PHP message: start 1763092762.2056', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 11:59:23.141155 2025] [proxy_fcgi:error] [pid 16709:tid 16733] [client 165.85.56.95:40136] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092763.1407-1763092762.2056', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:01:24.071131 2025] [proxy_fcgi:error] [pid 16575:tid 16637] [client 165.85.56.95:9178] AH01071: Got error 'PHP message: start 1763092883.4423', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:01:24.403195 2025] [proxy_fcgi:error] [pid 16575:tid 16637] [client 165.85.56.95:9178] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763092884.4028-1763092883.4423', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:03:25.263975 2025] [proxy_fcgi:error] [pid 16573:tid 16600] [client 165.85.56.95:50423] AH01071: Got error 'PHP message: start 1763093004.6867', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:03:25.514047 2025] [proxy_fcgi:error] [pid 16573:tid 16600] [client 165.85.56.95:50423] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093005.5138-1763093004.6867', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:05:14.320583 2025] [proxy_fcgi:error] [pid 16709:tid 16713] [client 165.85.56.95:43029] AH01071: Got error 'PHP message: start 1763093113.6824', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:05:15.108377 2025] [proxy_fcgi:error] [pid 16709:tid 16713] [client 165.85.56.95:43029] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093115.1081-1763093113.6824', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:05:26.503244 2025] [proxy_fcgi:error] [pid 16575:tid 16648] [client 165.85.56.95:42699] AH01071: Got error 'PHP message: start 1763093125.9282', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:05:26.829783 2025] [proxy_fcgi:error] [pid 16575:tid 16648] [client 165.85.56.95:42699] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093126.8293-1763093125.9282', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:07:17.067745 2025] [proxy_fcgi:error] [pid 16574:tid 16615] [client 165.85.56.95:24323] AH01071: Got error 'PHP message: start 1763093236.2592', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:07:18.084155 2025] [proxy_fcgi:error] [pid 16574:tid 16615] [client 165.85.56.95:24323] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093238.0838-1763093236.2592', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:07:27.733187 2025] [proxy_fcgi:error] [pid 16574:tid 16631] [client 165.85.56.95:35774] AH01071: Got error 'PHP message: start 1763093247.0915', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:07:27.997733 2025] [proxy_fcgi:error] [pid 16574:tid 16631] [client 165.85.56.95:35774] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093247.9972-1763093247.0915', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:09:18.996731 2025] [proxy_fcgi:error] [pid 16574:tid 16625] [client 165.85.56.95:25432] AH01071: Got error 'PHP message: start 1763093358.573', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:09:19.775802 2025] [proxy_fcgi:error] [pid 16574:tid 16625] [client 165.85.56.95:25432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093359.775-1763093358.573', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:09:29.010646 2025] [proxy_fcgi:error] [pid 16671:tid 16698] [client 165.85.56.95:46622] AH01071: Got error 'PHP message: start 1763093368.2779', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:09:29.406824 2025] [proxy_fcgi:error] [pid 16671:tid 16698] [client 165.85.56.95:46622] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093369.4064-1763093368.2779', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:11:21.177276 2025] [proxy_fcgi:error] [pid 16709:tid 16715] [client 165.85.56.95:11495] AH01071: Got error 'PHP message: start 1763093480.6945', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:11:21.956434 2025] [proxy_fcgi:error] [pid 16709:tid 16715] [client 165.85.56.95:11495] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093481.9559-1763093480.6945', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:11:30.382736 2025] [proxy_fcgi:error] [pid 16574:tid 16619] [client 165.85.56.95:35016] AH01071: Got error 'PHP message: start 1763093489.682', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:11:30.711621 2025] [proxy_fcgi:error] [pid 16574:tid 16619] [client 165.85.56.95:35016] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093490.711-1763093489.682', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:13:22.886200 2025] [proxy_fcgi:error] [pid 16573:tid 16578] [client 165.85.56.95:8970] AH01071: Got error 'PHP message: start 1763093602.4447', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:13:23.642182 2025] [proxy_fcgi:error] [pid 16573:tid 16578] [client 165.85.56.95:8970] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093603.6417-1763093602.4447', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:13:31.892689 2025] [proxy_fcgi:error] [pid 16575:tid 16647] [client 165.85.56.95:8801] AH01071: Got error 'PHP message: start 1763093611.1579', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:13:32.302562 2025] [proxy_fcgi:error] [pid 16575:tid 16647] [client 165.85.56.95:8801] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093612.302-1763093611.1579', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:15:25.042659 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:51612] AH01071: Got error 'PHP message: start 1763093724.5287', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:15:25.573857 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:51612] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093725.5731-1763093724.5287', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:15:33.272084 2025] [proxy_fcgi:error] [pid 16574:tid 16617] [client 165.85.56.95:54286] AH01071: Got error 'PHP message: start 1763093732.6116', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:15:33.530347 2025] [proxy_fcgi:error] [pid 16574:tid 16617] [client 165.85.56.95:54286] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093733.5299-1763093732.6116', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:17:12.613155 2025] [proxy_fcgi:error] [pid 16671:tid 16686] [client 139.162.186.178:45512] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 12:17:26.633671 2025] [proxy_fcgi:error] [pid 16709:tid 16733] [client 165.85.56.95:50649] AH01071: Got error 'PHP message: start 1763093846.0946', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:17:27.650137 2025] [proxy_fcgi:error] [pid 16709:tid 16733] [client 165.85.56.95:50649] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093847.6499-1763093846.0946', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:17:34.503946 2025] [proxy_fcgi:error] [pid 16575:tid 16640] [client 165.85.56.95:61171] AH01071: Got error 'PHP message: start 1763093853.8289', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:17:34.905224 2025] [proxy_fcgi:error] [pid 16575:tid 16640] [client 165.85.56.95:61171] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093854.9049-1763093853.8289', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:19:28.997194 2025] [proxy_fcgi:error] [pid 16575:tid 16641] [client 165.85.56.95:25295] AH01071: Got error 'PHP message: start 1763093968.513', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:19:29.609213 2025] [proxy_fcgi:error] [pid 16575:tid 16641] [client 165.85.56.95:25295] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093969.6088-1763093968.513', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:19:35.885236 2025] [proxy_fcgi:error] [pid 16709:tid 16724] [client 165.85.56.95:6510] AH01071: Got error 'PHP message: start 1763093975.1899', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:19:36.286161 2025] [proxy_fcgi:error] [pid 16709:tid 16724] [client 165.85.56.95:6510] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763093976.2857-1763093975.1899', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:21:30.884157 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:17000] AH01071: Got error 'PHP message: start 1763094090.4574', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:21:31.668722 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:17000] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094091.6681-1763094090.4574', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:21:37.619866 2025] [proxy_fcgi:error] [pid 16671:tid 16685] [client 165.85.56.95:60011] AH01071: Got error 'PHP message: start 1763094096.9467', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:21:37.989303 2025] [proxy_fcgi:error] [pid 16671:tid 16685] [client 165.85.56.95:60011] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094097.9889-1763094096.9467', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:23:32.612491 2025] [proxy_fcgi:error] [pid 16671:tid 16697] [client 165.85.56.95:28610] AH01071: Got error 'PHP message: start 1763094212.1516', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:23:33.179174 2025] [proxy_fcgi:error] [pid 16671:tid 16697] [client 165.85.56.95:28610] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094213.1788-1763094212.1516', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:23:39.035636 2025] [proxy_fcgi:error] [pid 16573:tid 16578] [client 165.85.56.95:39727] AH01071: Got error 'PHP message: start 1763094218.4644', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:23:39.297600 2025] [proxy_fcgi:error] [pid 16573:tid 16578] [client 165.85.56.95:39727] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094219.2968-1763094218.4644', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:25:34.192101 2025] [proxy_fcgi:error] [pid 16575:tid 16657] [client 165.85.56.95:8211] AH01071: Got error 'PHP message: start 1763094333.7131', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:25:35.052144 2025] [proxy_fcgi:error] [pid 16575:tid 16657] [client 165.85.56.95:8211] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094335.0518-1763094333.7131', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:25:40.635483 2025] [proxy_fcgi:error] [pid 16671:tid 16696] [client 165.85.56.95:11380] AH01071: Got error 'PHP message: start 1763094339.9607', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:25:41.016685 2025] [proxy_fcgi:error] [pid 16671:tid 16696] [client 165.85.56.95:11380] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094341.0163-1763094339.9607', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:27:35.964799 2025] [proxy_fcgi:error] [pid 16575:tid 16636] [client 165.85.56.95:1686] AH01071: Got error 'PHP message: start 1763094455.5144', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:27:36.855726 2025] [proxy_fcgi:error] [pid 16575:tid 16636] [client 165.85.56.95:1686] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094456.8551-1763094455.5144', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:27:42.029573 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:17001] AH01071: Got error 'PHP message: start 1763094461.3304', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:27:42.441099 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:17001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094462.4389-1763094461.3304', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:29:38.300373 2025] [proxy_fcgi:error] [pid 16573:tid 16597] [client 165.85.56.95:46125] AH01071: Got error 'PHP message: start 1763094577.7171', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:29:39.180765 2025] [proxy_fcgi:error] [pid 16573:tid 16597] [client 165.85.56.95:46125] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094579.1798-1763094577.7171', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:29:43.413134 2025] [proxy_fcgi:error] [pid 16573:tid 16591] [client 165.85.56.95:24218] AH01071: Got error 'PHP message: start 1763094582.9053', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:29:43.773008 2025] [proxy_fcgi:error] [pid 16573:tid 16591] [client 165.85.56.95:24218] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094583.7727-1763094582.9053', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:31:40.441269 2025] [proxy_fcgi:error] [pid 16709:tid 16726] [client 165.85.56.95:30821] AH01071: Got error 'PHP message: start 1763094700.0196', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:31:40.932494 2025] [proxy_fcgi:error] [pid 16709:tid 16726] [client 165.85.56.95:30821] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094700.9321-1763094700.0196', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:31:44.845789 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:37762] AH01071: Got error 'PHP message: start 1763094704.2088', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:31:45.058484 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:37762] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094705.0579-1763094704.2088', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:33:41.865952 2025] [proxy_fcgi:error] [pid 16573:tid 16601] [client 165.85.56.95:6607] AH01071: Got error 'PHP message: start 1763094821.3797', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:33:42.366522 2025] [proxy_fcgi:error] [pid 16573:tid 16601] [client 165.85.56.95:6607] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094822.3661-1763094821.3797', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:33:45.900742 2025] [proxy_fcgi:error] [pid 16709:tid 16717] [client 165.85.56.95:54805] AH01071: Got error 'PHP message: start 1763094825.3375', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:33:46.126099 2025] [proxy_fcgi:error] [pid 16709:tid 16717] [client 165.85.56.95:54805] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094826.1258-1763094825.3375', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:34:10.246769 2025] [proxy_fcgi:error] [pid 16573:tid 16591] [client 165.85.56.95:11088] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:34:12.865024 2025] [proxy_fcgi:error] [pid 16573:tid 16586] [client 165.85.56.95:11088] AH01071: Got error 'PHP message: start 1763094852.064', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:34:13.144206 2025] [proxy_fcgi:error] [pid 16573:tid 16586] [client 165.85.56.95:11088] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094853.1438-1763094852.064', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:35:43.340230 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:52420] AH01071: Got error 'PHP message: start 1763094942.8718', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:35:44.077078 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:52420] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094944.0766-1763094942.8718', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:36:14.046199 2025] [proxy_fcgi:error] [pid 16574:tid 16611] [client 165.85.56.95:57664] AH01071: Got error 'PHP message: start 1763094973.4112', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:36:14.299255 2025] [proxy_fcgi:error] [pid 16574:tid 16611] [client 165.85.56.95:57664] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763094974.2989-1763094973.4112', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:37:45.023754 2025] [proxy_fcgi:error] [pid 16671:tid 16680] [client 165.85.56.95:25580] AH01071: Got error 'PHP message: start 1763095064.5569', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:37:45.771789 2025] [proxy_fcgi:error] [pid 16671:tid 16680] [client 165.85.56.95:25580] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095065.7715-1763095064.5569', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:38:08.885032 2025] [proxy_fcgi:error] [pid 16709:tid 16720] [client 165.85.56.95:6399] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44585
[Fri Nov 14 12:38:12.754140 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:6399] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44585
[Fri Nov 14 12:38:13.858783 2025] [proxy_fcgi:error] [pid 16709:tid 16731] [client 165.85.56.95:6399] AH01071: Got error 'PHP message: start 1763095093.275', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:38:14.063726 2025] [proxy_fcgi:error] [pid 16709:tid 16731] [client 165.85.56.95:6399] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095094.0633-1763095093.275', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:39:47.063221 2025] [proxy_fcgi:error] [pid 16573:tid 16584] [client 165.85.56.95:59210] AH01071: Got error 'PHP message: start 1763095186.6361', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:39:47.658010 2025] [proxy_fcgi:error] [pid 16573:tid 16584] [client 165.85.56.95:59210] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095187.6577-1763095186.6361', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:40:15.195617 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:51730] AH01071: Got error 'PHP message: start 1763095214.5174', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:40:15.393742 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:51730] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095215.3933-1763095214.5174', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:41:48.584902 2025] [proxy_fcgi:error] [pid 16575:tid 16649] [client 165.85.56.95:37385] AH01071: Got error 'PHP message: start 1763095308.1392', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:41:49.365097 2025] [proxy_fcgi:error] [pid 16575:tid 16649] [client 165.85.56.95:37385] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095309.3647-1763095308.1392', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:42:16.600451 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:27199] AH01071: Got error 'PHP message: start 1763095335.9249', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:42:16.844079 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:27199] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095336.8438-1763095335.9249', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:43:50.633399 2025] [proxy_fcgi:error] [pid 16575:tid 16646] [client 165.85.56.95:15823] AH01071: Got error 'PHP message: start 1763095430.1888', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:43:51.463717 2025] [proxy_fcgi:error] [pid 16575:tid 16646] [client 165.85.56.95:15823] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095431.4634-1763095430.1888', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:44:17.934925 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:50803] AH01071: Got error 'PHP message: start 1763095457.355', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:44:18.100179 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:50803] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095458.0998-1763095457.355', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:44:29.809842 2025] [proxy_fcgi:error] [pid 16575:tid 16634] [client 165.85.56.95:56974] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:44:31.773623 2025] [proxy_fcgi:error] [pid 16575:tid 16647] [client 165.85.56.95:56974] AH01071: Got error 'PHP message: start 1763095470.9079', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:44:31.975806 2025] [proxy_fcgi:error] [pid 16575:tid 16647] [client 165.85.56.95:56974] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095471.9749-1763095470.9079', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:45:52.367320 2025] [proxy_fcgi:error] [pid 16671:tid 16698] [client 165.85.56.95:11227] AH01071: Got error 'PHP message: start 1763095551.9252', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:45:53.206036 2025] [proxy_fcgi:error] [pid 16671:tid 16698] [client 165.85.56.95:11227] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095553.2056-1763095551.9252', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:46:33.385121 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:49171] AH01071: Got error 'PHP message: start 1763095592.3994', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:46:33.709306 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:49171] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095593.7089-1763095592.3994', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:47:54.188064 2025] [proxy_fcgi:error] [pid 16709:tid 16723] [client 165.85.56.95:21978] AH01071: Got error 'PHP message: start 1763095673.6944', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:47:54.830071 2025] [proxy_fcgi:error] [pid 16709:tid 16723] [client 165.85.56.95:21978] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095674.8297-1763095673.6944', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:48:34.701901 2025] [proxy_fcgi:error] [pid 16575:tid 16640] [client 165.85.56.95:44750] AH01071: Got error 'PHP message: start 1763095714.0643', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:48:34.903892 2025] [proxy_fcgi:error] [pid 16575:tid 16640] [client 165.85.56.95:44750] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095714.9034-1763095714.0643', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:49:55.758508 2025] [proxy_fcgi:error] [pid 16574:tid 16630] [client 165.85.56.95:51158] AH01071: Got error 'PHP message: start 1763095795.2958', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:49:56.237077 2025] [proxy_fcgi:error] [pid 16574:tid 16630] [client 165.85.56.95:51158] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095796.2367-1763095795.2958', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:50:35.899770 2025] [proxy_fcgi:error] [pid 16575:tid 16639] [client 165.85.56.95:26764] AH01071: Got error 'PHP message: start 1763095835.3536', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:50:36.086643 2025] [proxy_fcgi:error] [pid 16575:tid 16639] [client 165.85.56.95:26764] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095836.0863-1763095835.3536', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:51:29.271682 2025] [proxy_fcgi:error] [pid 16575:tid 16638] [client 165.85.56.95:25037] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:51:30.055132 2025] [proxy_fcgi:error] [pid 16575:tid 16635] [client 165.85.56.95:25037] AH01071: Got error 'PHP message: start 1763095889.9326', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:51:30.892950 2025] [proxy_fcgi:error] [pid 16575:tid 16635] [client 165.85.56.95:25037] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095890.8925-1763095889.9326', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:51:57.499447 2025] [proxy_fcgi:error] [pid 16709:tid 16729] [client 165.85.56.95:21081] AH01071: Got error 'PHP message: start 1763095917.029', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:51:58.362528 2025] [proxy_fcgi:error] [pid 16709:tid 16729] [client 165.85.56.95:21081] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763095918.3621-1763095917.029', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:53:59.420793 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:5891] AH01071: Got error 'PHP message: start 1763096038.9638', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:54:00.150464 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:5891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096040.1501-1763096038.9638', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:55:22.488878 2025] [proxy_fcgi:error] [pid 16671:tid 16684] [client 165.85.56.95:5391] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 12:56:00.987512 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:11127] AH01071: Got error 'PHP message: start 1763096160.5843', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:56:01.541536 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:11127] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096161.5412-1763096160.5843', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:56:01.761898 2025] [proxy_fcgi:error] [pid 16709:tid 16720] [client 165.85.56.95:50829] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formExtendBy in /home/pumpbooking/public_html/booking.php on line 239', referer: https://pumpbooking.com/booking.php?bookingID=44654
[Fri Nov 14 12:56:24.212823 2025] [proxy_fcgi:error] [pid 16671:tid 16684] [client 165.85.56.95:2313] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44655
[Fri Nov 14 12:56:28.383749 2025] [proxy_fcgi:error] [pid 16671:tid 16692] [client 165.85.56.95:2313] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44655
[Fri Nov 14 12:56:29.204816 2025] [proxy_fcgi:error] [pid 16671:tid 16696] [client 165.85.56.95:2313] AH01071: Got error 'PHP message: start 1763096189.0881', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:56:30.054159 2025] [proxy_fcgi:error] [pid 16671:tid 16696] [client 165.85.56.95:2313] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096190.0539-1763096189.0881', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 12:58:02.816394 2025] [proxy_fcgi:error] [pid 16574:tid 16627] [client 165.85.56.95:30154] AH01071: Got error 'PHP message: start 1763096282.3361', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:58:03.392277 2025] [proxy_fcgi:error] [pid 16574:tid 16627] [client 165.85.56.95:30154] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096283.3919-1763096282.3361', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:58:30.981974 2025] [proxy_fcgi:error] [pid 16575:tid 16637] [client 165.85.56.95:37707] AH01071: Got error 'PHP message: start 1763096310.5155', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 12:58:31.538970 2025] [proxy_fcgi:error] [pid 16575:tid 16637] [client 165.85.56.95:37707] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096311.5384-1763096310.5155', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:00:04.442203 2025] [proxy_fcgi:error] [pid 16573:tid 16596] [client 165.85.56.95:2468] AH01071: Got error 'PHP message: start 1763096403.9123', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:00:05.040311 2025] [proxy_fcgi:error] [pid 16573:tid 16596] [client 165.85.56.95:2468] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096405.0397-1763096403.9123', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:00:32.554822 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:5848] AH01071: Got error 'PHP message: start 1763096432.0381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:00:33.359803 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:5848] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096433.3593-1763096432.0381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:02:06.298002 2025] [proxy_fcgi:error] [pid 16573:tid 16584] [client 165.85.56.95:9129] AH01071: Got error 'PHP message: start 1763096525.8359', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:02:07.094908 2025] [proxy_fcgi:error] [pid 16573:tid 16584] [client 165.85.56.95:9129] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096527.0945-1763096525.8359', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:02:34.364917 2025] [proxy_fcgi:error] [pid 16709:tid 16714] [client 165.85.56.95:12190] AH01071: Got error 'PHP message: start 1763096553.8524', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:02:34.961634 2025] [proxy_fcgi:error] [pid 16709:tid 16714] [client 165.85.56.95:12190] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096554.9613-1763096553.8524', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:03:50.822808 2025] [proxy_fcgi:error] [pid 16573:tid 16587] [client 165.85.56.95:60380] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:03:51.820688 2025] [proxy_fcgi:error] [pid 16573:tid 16586] [client 165.85.56.95:60380] AH01071: Got error 'PHP message: start 1763096631.4061', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:03:52.094853 2025] [proxy_fcgi:error] [pid 16573:tid 16586] [client 165.85.56.95:60380] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096632.0945-1763096631.4061', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:04:08.029672 2025] [proxy_fcgi:error] [pid 16573:tid 16587] [client 165.85.56.95:46639] AH01071: Got error 'PHP message: start 1763096647.5929', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:04:08.525261 2025] [proxy_fcgi:error] [pid 16573:tid 16587] [client 165.85.56.95:46639] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096648.5249-1763096647.5929', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:05:53.337562 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:6378] AH01071: Got error 'PHP message: start 1763096752.5763', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:05:53.635746 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:6378] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096753.6354-1763096752.5763', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:07:54.614813 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:21570] AH01071: Got error 'PHP message: start 1763096873.9331', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:07:54.862913 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:21570] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096874.8626-1763096873.9331', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:08:07.091140 2025] [proxy_fcgi:error] [pid 16574:tid 16619] [client 165.85.56.95:31688] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Fri Nov 14 13:08:11.792173 2025] [proxy_fcgi:error] [pid 16574:tid 16607] [client 165.85.56.95:51641] AH01071: Got error 'PHP message: start 1763096891.1947', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:08:12.191622 2025] [proxy_fcgi:error] [pid 16574:tid 16607] [client 165.85.56.95:51641] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096892.191-1763096891.1947', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:09:55.757374 2025] [proxy_fcgi:error] [pid 16709:tid 16713] [client 165.85.56.95:33563] AH01071: Got error 'PHP message: start 1763096995.1894', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:09:55.926559 2025] [proxy_fcgi:error] [pid 16709:tid 16713] [client 165.85.56.95:33563] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763096995.9262-1763096995.1894', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:10:17.930303 2025] [proxy_fcgi:error] [pid 16574:tid 16610] [client 165.85.56.95:55822] AH01071: Got error 'PHP message: start 1763097017.2964', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:10:18.355174 2025] [proxy_fcgi:error] [pid 16574:tid 16610] [client 165.85.56.95:55822] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097018.3547-1763097017.2964', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:11:56.963202 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:14284] AH01071: Got error 'PHP message: start 1763097116.2482', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:11:57.206200 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:14284] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097117.2058-1763097116.2482', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:12:42.826956 2025] [proxy_fcgi:error] [pid 16575:tid 16642] [client 165.85.56.95:65070] AH01071: Got error 'PHP message: start 1763097162.1427', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:12:43.283338 2025] [proxy_fcgi:error] [pid 16575:tid 16642] [client 165.85.56.95:65070] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097163.2828-1763097162.1427', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:13:58.135773 2025] [proxy_fcgi:error] [pid 16709:tid 16720] [client 165.85.56.95:42717] AH01071: Got error 'PHP message: start 1763097237.4951', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:13:58.373560 2025] [proxy_fcgi:error] [pid 16709:tid 16720] [client 165.85.56.95:42717] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097238.3732-1763097237.4951', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:14:46.617524 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:28506] AH01071: Got error 'PHP message: start 1763097285.9291', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:14:47.144820 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:28506] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097287.1437-1763097285.9291', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:15:59.390381 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:9460] AH01071: Got error 'PHP message: start 1763097358.6784', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:15:59.708181 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:9460] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097359.7077-1763097358.6784', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:16:49.380635 2025] [proxy_fcgi:error] [pid 16573:tid 16585] [client 165.85.56.95:34459] AH01071: Got error 'PHP message: start 1763097408.6414', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:16:49.923832 2025] [proxy_fcgi:error] [pid 16573:tid 16585] [client 165.85.56.95:34459] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097409.9231-1763097408.6414', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:18:01.011442 2025] [proxy_fcgi:error] [pid 16575:tid 16649] [client 165.85.56.95:61760] AH01071: Got error 'PHP message: start 1763097480.1459', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:18:01.359891 2025] [proxy_fcgi:error] [pid 16575:tid 16649] [client 165.85.56.95:61760] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097481.3596-1763097480.1459', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:18:53.011645 2025] [proxy_fcgi:error] [pid 16574:tid 16631] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: start 1763097532.3513', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:18:53.486827 2025] [proxy_fcgi:error] [pid 16574:tid 16631] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097533.4863-1763097532.3513', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:20:02.730634 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:4614] AH01071: Got error 'PHP message: start 1763097601.9154', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:20:03.022802 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:4614] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097603.0225-1763097601.9154', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:20:57.001142 2025] [proxy_fcgi:error] [pid 16573:tid 16602] [client 165.85.56.95:37740] AH01071: Got error 'PHP message: start 1763097656.1973', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:20:57.605251 2025] [proxy_fcgi:error] [pid 16573:tid 16602] [client 165.85.56.95:37740] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097657.6047-1763097656.1973', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:21:50.840833 2025] [proxy_fcgi:error] [pid 16575:tid 16656] [client 165.85.56.95:2749] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:21:51.465294 2025] [proxy_fcgi:error] [pid 16574:tid 16626] [client 165.85.56.95:36932] AH01071: Got error 'PHP message: start 1763097711.0939', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:21:51.645028 2025] [proxy_fcgi:error] [pid 16574:tid 16626] [client 165.85.56.95:36932] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097711.6446-1763097711.0939', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:21:51.850007 2025] [proxy_fcgi:error] [pid 16575:tid 16640] [client 165.85.56.95:2749] AH01071: Got error 'PHP message: start 1763097711.6464', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:21:52.007733 2025] [proxy_fcgi:error] [pid 16575:tid 16640] [client 165.85.56.95:2749] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097712.0073-1763097711.6464', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:21:59.357628 2025] [proxy_fcgi:error] [pid 16671:tid 16699] [client 165.85.56.95:27891] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:22:00.599139 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:27891] AH01071: Got error 'PHP message: start 1763097719.9542', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:22:01.120242 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 165.85.56.95:27891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097721.1198-1763097719.9542', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:22:59.375630 2025] [proxy_fcgi:error] [pid 16575:tid 16650] [client 165.85.56.95:24083] AH01071: Got error 'PHP message: start 1763097778.773', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:22:59.748351 2025] [proxy_fcgi:error] [pid 16575:tid 16650] [client 165.85.56.95:24083] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097779.7478-1763097778.773', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:24:02.061177 2025] [proxy_fcgi:error] [pid 16573:tid 16593] [client 165.85.56.95:11370] AH01071: Got error 'PHP message: start 1763097841.3908', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:24:02.356475 2025] [proxy_fcgi:error] [pid 16573:tid 16593] [client 165.85.56.95:11370] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097842.3558-1763097841.3908', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:25:01.799852 2025] [proxy_fcgi:error] [pid 16709:tid 16732] [client 165.85.56.95:35618] AH01071: Got error 'PHP message: start 1763097901.1633', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:25:02.227153 2025] [proxy_fcgi:error] [pid 16709:tid 16732] [client 165.85.56.95:35618] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097902.2266-1763097901.1633', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:26:03.315169 2025] [proxy_fcgi:error] [pid 16575:tid 16636] [client 165.85.56.95:36159] AH01071: Got error 'PHP message: start 1763097962.7511', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:26:03.753029 2025] [proxy_fcgi:error] [pid 16575:tid 16636] [client 165.85.56.95:36159] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763097963.7524-1763097962.7511', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:26:08.753167 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:36159] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44561
[Fri Nov 14 13:26:17.743064 2025] [proxy_fcgi:error] [pid 16671:tid 16687] [client 165.85.56.95:5582] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formBookingID in /home/pumpbooking/public_html/booking.php on line 184', referer: https://pumpbooking.com/booking.php?bookingID=44561
[Fri Nov 14 13:26:32.412194 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:7138] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?reschedule=44561
[Fri Nov 14 13:26:47.771867 2025] [proxy_fcgi:error] [pid 16709:tid 16730] [client 165.85.56.95:12152] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44656
[Fri Nov 14 13:26:49.600641 2025] [proxy_fcgi:error] [pid 16709:tid 16731] [client 165.85.56.95:12152] AH01071: Got error 'PHP message: start 1763098009.03', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:26:50.150447 2025] [proxy_fcgi:error] [pid 16709:tid 16731] [client 165.85.56.95:12152] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098010.15-1763098009.03', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:27:04.790312 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:9512] AH01071: Got error 'PHP message: start 1763098024.0106', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:27:05.228944 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:9512] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098025.2284-1763098024.0106', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:28:33.578431 2025] [proxy_fcgi:error] [pid 16671:tid 16684] [client 165.85.56.95:44720] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 13:29:03.512275 2025] [proxy_fcgi:error] [pid 16575:tid 16641] [client 165.85.56.95:46237] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44657
[Fri Nov 14 13:29:05.171153 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:46237] AH01071: Got error 'PHP message: start 1763098144.6076', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:29:05.522042 2025] [proxy_fcgi:error] [pid 16575:tid 16644] [client 165.85.56.95:46237] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098145.5216-1763098144.6076', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:29:07.614836 2025] [proxy_fcgi:error] [pid 16709:tid 16728] [client 165.85.56.95:38182] AH01071: Got error 'PHP message: start 1763098146.3748', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:29:07.998756 2025] [proxy_fcgi:error] [pid 16709:tid 16728] [client 165.85.56.95:38182] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098147.9982-1763098146.3748', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:31:10.240601 2025] [proxy_fcgi:error] [pid 16709:tid 16729] [client 165.85.56.95:11400] AH01071: Got error 'PHP message: start 1763098269.3937', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:31:10.830900 2025] [proxy_fcgi:error] [pid 16709:tid 16729] [client 165.85.56.95:11400] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098270.8304-1763098269.3937', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:33:20.852822 2025] [proxy_fcgi:error] [pid 16709:tid 16724] [client 165.85.56.95:55747] AH01071: Got error 'PHP message: start 1763098400.1803', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:33:21.274079 2025] [proxy_fcgi:error] [pid 16709:tid 16724] [client 165.85.56.95:55747] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098401.2735-1763098400.1803', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:35:01.541221 2025] [proxy_fcgi:error] [pid 16709:tid 16720] [client 165.85.56.95:4307] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 13:35:06.175873 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:4307] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44658
[Fri Nov 14 13:35:07.132701 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:4307] AH01071: Got error 'PHP message: start 1763098506.9839', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:35:07.493960 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:4307] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098507.4935-1763098506.9839', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:35:18.243137 2025] [proxy_fcgi:error] [pid 16709:tid 16718] [client 165.85.56.95:5442] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:35:19.451562 2025] [proxy_fcgi:error] [pid 16709:tid 16732] [client 165.85.56.95:5442] AH01071: Got error 'PHP message: start 1763098519.031', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:35:19.452138 2025] [proxy_fcgi:error] [pid 16709:tid 16732] [client 165.85.56.95:5442] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098519.4513-1763098519.031', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:35:23.859507 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:58530] AH01071: Got error 'PHP message: start 1763098523.2305', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:35:24.271021 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:58530] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098524.2705-1763098523.2305', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:37:33.430105 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:53906] AH01071: Got error 'PHP message: start 1763098652.3403', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:37:34.241610 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:53906] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098654.241-1763098652.3403', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:39:51.874724 2025] [proxy_fcgi:error] [pid 16671:tid 16697] [client 165.85.56.95:21209] AH01071: Got error 'PHP message: start 1763098791.1876', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:39:52.513474 2025] [proxy_fcgi:error] [pid 16671:tid 16697] [client 165.85.56.95:21209] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098792.5131-1763098791.1876', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:41:49.859618 2025] [proxy_fcgi:error] [pid 16574:tid 16629] [client 165.85.56.95:14489] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php
[Fri Nov 14 13:41:51.497371 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:14489] AH01071: Got error 'PHP message: start 1763098910.8085', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:41:51.498035 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:14489] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098911.497-1763098910.8085', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:41:55.693737 2025] [proxy_fcgi:error] [pid 16574:tid 16629] [client 165.85.56.95:23343] AH01071: Got error 'PHP message: start 1763098915.016', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:41:56.150214 2025] [proxy_fcgi:error] [pid 16574:tid 16629] [client 165.85.56.95:23343] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763098916.1498-1763098915.016', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:43:52.339422 2025] [proxy_fcgi:error] [pid 16573:tid 16588] [client 165.85.56.95:9276] AH01071: Got error 'PHP message: start 1763099031.778', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:43:52.340019 2025] [proxy_fcgi:error] [pid 16573:tid 16588] [client 165.85.56.95:9276] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099032.3392-1763099031.778', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:43:59.341392 2025] [proxy_fcgi:error] [pid 16671:tid 16682] [client 165.85.56.95:17086] AH01071: Got error 'PHP message: start 1763099038.5297', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:44:00.169333 2025] [proxy_fcgi:error] [pid 16671:tid 16682] [client 165.85.56.95:17086] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099040.1689-1763099038.5297', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:45:53.335663 2025] [proxy_fcgi:error] [pid 16575:tid 16642] [client 165.85.56.95:6355] AH01071: Got error 'PHP message: start 1763099152.7918', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:45:53.336140 2025] [proxy_fcgi:error] [pid 16575:tid 16642] [client 165.85.56.95:6355] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099153.3351-1763099152.7918', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:46:05.175131 2025] [proxy_fcgi:error] [pid 16671:tid 16700] [client 165.85.56.95:42520] AH01071: Got error 'PHP message: start 1763099164.5553', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:46:05.642152 2025] [proxy_fcgi:error] [pid 16671:tid 16700] [client 165.85.56.95:42520] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099165.6418-1763099164.5553', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:46:22.928970 2025] [proxy_fcgi:error] [pid 16709:tid 16731] [client 165.85.56.95:48208] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:46:23.937651 2025] [proxy_fcgi:error] [pid 16709:tid 16730] [client 165.85.56.95:48208] AH01071: Got error 'PHP message: start 1763099183.6461', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:46:24.356803 2025] [proxy_fcgi:error] [pid 16709:tid 16730] [client 165.85.56.95:48208] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099184.3557-1763099183.6461', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:46:45.205783 2025] [proxy_fcgi:error] [pid 16709:tid 16730] [client 165.85.56.95:64183] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: bookingID in /home/pumpbooking/public_html/booking.php on line 205PHP message: mysql error: Incorrect integer value: '' for column `pumpbook_booking`.`booking_notes`.`noteBookingID` at row 1PHP message: query: INSERT INTO booking_notes (noteUserID,noteBookingID,noteText) VALUES ('44','','Booking cancelled by Peter Batty');', referer: https://pumpbooking.com/booking.php?bookingID=44658
[Fri Nov 14 13:46:47.084946 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:64183] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: formBookingID in /home/pumpbooking/public_html/booking.php on line 184', referer: https://pumpbooking.com/booking.php?bookingID=44658
[Fri Nov 14 13:47:04.474899 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:62767] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?reschedule=44658
[Fri Nov 14 13:47:47.739531 2025] [proxy_fcgi:error] [pid 16575:tid 16653] [client 165.85.56.95:33811] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44659
[Fri Nov 14 13:47:48.805159 2025] [proxy_fcgi:error] [pid 16575:tid 16655] [client 165.85.56.95:33811] AH01071: Got error 'PHP message: start 1763099268.433', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:47:49.385308 2025] [proxy_fcgi:error] [pid 16575:tid 16655] [client 165.85.56.95:33811] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099269.3849-1763099268.433', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:47:57.843535 2025] [proxy_fcgi:error] [pid 16709:tid 16714] [client 165.85.56.95:55578] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:47:58.863154 2025] [proxy_fcgi:error] [pid 16709:tid 16718] [client 165.85.56.95:55578] AH01071: Got error 'PHP message: start 1763099278.4841', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:47:59.105264 2025] [proxy_fcgi:error] [pid 16709:tid 16718] [client 165.85.56.95:55578] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099279.105-1763099278.4841', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:48:11.148065 2025] [proxy_fcgi:error] [pid 16575:tid 16657] [client 165.85.56.95:35029] AH01071: Got error 'PHP message: start 1763099290.597', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:48:11.688951 2025] [proxy_fcgi:error] [pid 16575:tid 16657] [client 165.85.56.95:35029] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099291.6887-1763099290.597', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:50:00.071467 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:52884] AH01071: Got error 'PHP message: start 1763099399.3628', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:50:00.386184 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:52884] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099400.3857-1763099399.3628', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:50:18.075970 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:58646] AH01071: Got error 'PHP message: start 1763099417.2928', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:50:18.592894 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:58646] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099418.5925-1763099417.2928', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:52:01.477485 2025] [proxy_fcgi:error] [pid 16709:tid 16717] [client 165.85.56.95:11286] AH01071: Got error 'PHP message: start 1763099520.912', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:52:01.632183 2025] [proxy_fcgi:error] [pid 16709:tid 16717] [client 165.85.56.95:11286] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099521.6317-1763099520.912', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:52:38.395760 2025] [proxy_fcgi:error] [pid 16575:tid 16652] [client 165.85.56.95:21654] AH01071: Got error 'PHP message: start 1763099557.6441', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:52:38.978762 2025] [proxy_fcgi:error] [pid 16575:tid 16652] [client 165.85.56.95:21654] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099558.9784-1763099557.6441', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:54:02.878143 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:4884] AH01071: Got error 'PHP message: start 1763099642.0929', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:54:03.147851 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:4884] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099643.147-1763099642.0929', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:55:38.068927 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:28922] AH01071: Got error 'PHP message: start 1763099737.2879', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:55:38.628134 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:28922] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099738.6277-1763099737.2879', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:56:04.212114 2025] [proxy_fcgi:error] [pid 16573:tid 16594] [client 165.85.56.95:38427] AH01071: Got error 'PHP message: start 1763099763.4452', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:56:04.544809 2025] [proxy_fcgi:error] [pid 16573:tid 16594] [client 165.85.56.95:38427] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099764.5443-1763099763.4452', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:57:57.154877 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:31063] AH01071: Got error 'PHP message: start 1763099876.5165', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:57:57.664824 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:31063] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099877.664-1763099876.5165', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:58:05.793363 2025] [proxy_fcgi:error] [pid 16671:tid 16688] [client 165.85.56.95:7517] AH01071: Got error 'PHP message: start 1763099884.9781', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:58:06.045007 2025] [proxy_fcgi:error] [pid 16671:tid 16688] [client 165.85.56.95:7517] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099886.0447-1763099884.9781', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:59:24.951812 2025] [proxy_fcgi:error] [pid 16575:tid 16648] [client 165.85.56.95:59901] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:59:26.502483 2025] [proxy_fcgi:error] [pid 16574:tid 16624] [client 165.85.56.95:56156] AH01071: Got error 'PHP message: start 1763099965.7239', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:59:26.779390 2025] [proxy_fcgi:error] [pid 16574:tid 16624] [client 165.85.56.95:56156] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099966.7789-1763099965.7239', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 13:59:27.509133 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:59901] AH01071: Got error 'PHP message: start 1763099966.7803', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 13:59:27.669204 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:59901] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763099967.6688-1763099966.7803', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:00:19.549407 2025] [proxy_fcgi:error] [pid 16573:tid 16589] [client 165.85.56.95:1667] AH01071: Got error 'PHP message: start 1763100018.8121', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:00:19.958940 2025] [proxy_fcgi:error] [pid 16573:tid 16589] [client 165.85.56.95:1667] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100019.9584-1763100018.8121', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:01:28.828405 2025] [proxy_fcgi:error] [pid 16575:tid 16642] [client 165.85.56.95:61003] AH01071: Got error 'PHP message: start 1763100088.0966', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:01:29.075758 2025] [proxy_fcgi:error] [pid 16575:tid 16642] [client 165.85.56.95:61003] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100089.0751-1763100088.0966', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:02:30.527855 2025] [proxy_fcgi:error] [pid 16574:tid 16608] [client 165.85.56.95:21519] AH01071: Got error 'PHP message: start 1763100149.9514', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:02:30.874157 2025] [proxy_fcgi:error] [pid 16574:tid 16608] [client 165.85.56.95:21519] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100150.8737-1763100149.9514', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:03:29.931567 2025] [proxy_fcgi:error] [pid 16573:tid 16585] [client 165.85.56.95:34029] AH01071: Got error 'PHP message: start 1763100209.39', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:03:30.156160 2025] [proxy_fcgi:error] [pid 16573:tid 16585] [client 165.85.56.95:34029] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100210.1557-1763100209.39', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:04:35.565809 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:54574] AH01071: Got error 'PHP message: start 1763100274.8711', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:04:36.099005 2025] [proxy_fcgi:error] [pid 16574:tid 16620] [client 165.85.56.95:54574] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100276.0985-1763100274.8711', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:05:31.246367 2025] [proxy_fcgi:error] [pid 16575:tid 16655] [client 165.85.56.95:38059] AH01071: Got error 'PHP message: start 1763100330.6517', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:05:31.430768 2025] [proxy_fcgi:error] [pid 16575:tid 16655] [client 165.85.56.95:38059] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100331.4298-1763100330.6517', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:06:40.964615 2025] [proxy_fcgi:error] [pid 16574:tid 16618] [client 165.85.56.95:6861] AH01071: Got error 'PHP message: start 1763100399.7849', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:06:41.547851 2025] [proxy_fcgi:error] [pid 16574:tid 16618] [client 165.85.56.95:6861] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100401.5474-1763100399.7849', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:07:35.916657 2025] [proxy_fcgi:error] [pid 16574:tid 16609] [client 165.85.56.95:22899] AH01071: Got error 'PHP message: start 1763100451.786', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:07:36.208808 2025] [proxy_fcgi:error] [pid 16574:tid 16609] [client 165.85.56.95:22899] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100456.2081-1763100451.786', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:08:47.253219 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:12374] AH01071: Got error 'PHP message: start 1763100526.6059', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:08:47.729883 2025] [proxy_fcgi:error] [pid 16709:tid 16716] [client 165.85.56.95:12374] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100527.7293-1763100526.6059', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:09:37.313699 2025] [proxy_fcgi:error] [pid 16709:tid 16734] [client 165.85.56.95:19554] AH01071: Got error 'PHP message: start 1763100576.6443', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:09:37.567102 2025] [proxy_fcgi:error] [pid 16709:tid 16734] [client 165.85.56.95:19554] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100577.5667-1763100576.6443', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:10:49.417614 2025] [proxy_fcgi:error] [pid 16709:tid 16727] [client 165.85.56.95:55313] AH01071: Got error 'PHP message: start 1763100648.7846', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:10:49.916070 2025] [proxy_fcgi:error] [pid 16709:tid 16727] [client 165.85.56.95:55313] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100649.9156-1763100648.7846', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:11:38.435587 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:41759] AH01071: Got error 'PHP message: start 1763100697.8381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:11:38.598161 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:41759] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100698.5977-1763100697.8381', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:12:53.257655 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:57573] AH01071: Got error 'PHP message: start 1763100772.3923', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:12:53.903766 2025] [proxy_fcgi:error] [pid 16575:tid 16643] [client 165.85.56.95:57573] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100773.9031-1763100772.3923', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:13:39.519774 2025] [proxy_fcgi:error] [pid 16574:tid 16609] [client 165.85.56.95:4716] AH01071: Got error 'PHP message: start 1763100818.8811', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:13:39.763651 2025] [proxy_fcgi:error] [pid 16574:tid 16609] [client 165.85.56.95:4716] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100819.7632-1763100818.8811', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:14:55.970228 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:34049] AH01071: Got error 'PHP message: start 1763100895.281', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:14:56.512074 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 165.85.56.95:34049] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100896.5117-1763100895.281', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:15:41.092217 2025] [proxy_fcgi:error] [pid 16671:tid 16693] [client 165.85.56.95:48106] AH01071: Got error 'PHP message: start 1763100940.3927', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:15:41.289050 2025] [proxy_fcgi:error] [pid 16671:tid 16693] [client 165.85.56.95:48106] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763100941.2885-1763100940.3927', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:16:58.420623 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:45118] AH01071: Got error 'PHP message: start 1763101017.7113', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:16:58.957235 2025] [proxy_fcgi:error] [pid 16575:tid 16645] [client 165.85.56.95:45118] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101018.9568-1763101017.7113', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:17:42.142617 2025] [proxy_fcgi:error] [pid 16671:tid 16694] [client 165.85.56.95:10280] AH01071: Got error 'PHP message: start 1763101061.5846', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:17:42.326941 2025] [proxy_fcgi:error] [pid 16671:tid 16694] [client 165.85.56.95:10280] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101062.3265-1763101061.5846', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:19:00.744083 2025] [proxy_fcgi:error] [pid 16574:tid 16627] [client 165.85.56.95:39770] AH01071: Got error 'PHP message: start 1763101140.0094', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:19:01.380970 2025] [proxy_fcgi:error] [pid 16574:tid 16627] [client 165.85.56.95:39770] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101141.3802-1763101140.0094', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:19:43.525432 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:34100] AH01071: Got error 'PHP message: start 1763101182.7597', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:19:43.786778 2025] [proxy_fcgi:error] [pid 16671:tid 16701] [client 165.85.56.95:34100] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101183.7858-1763101182.7597', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:21:03.029259 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:20560] AH01071: Got error 'PHP message: start 1763101262.3084', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:21:03.564181 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:20560] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101263.5637-1763101262.3084', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:21:44.762126 2025] [proxy_fcgi:error] [pid 16575:tid 16650] [client 165.85.56.95:63793] AH01071: Got error 'PHP message: start 1763101304.101', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:21:44.973398 2025] [proxy_fcgi:error] [pid 16575:tid 16650] [client 165.85.56.95:63793] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101304.9727-1763101304.101', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:23:14.991428 2025] [proxy_fcgi:error] [pid 16573:tid 16594] [client 165.85.56.95:12115] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: start 1763101394.9908PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/dashboard-bookings.php(109): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:25:30.593899 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:41009] AH01071: Got error 'PHP message: start 1763101529.886', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:25:31.133859 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:41009] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763101531.1334-1763101529.886', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:50:57.732350 2025] [:error] [pid 16574:tid 16616] [client 49.51.39.209:40910] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRbRUf6XQqe4NqaoE9L5QgAAAIk"]
[Fri Nov 14 14:59:23.927476 2025] [proxy_fcgi:error] [pid 16671:tid 16686] [client 165.85.56.95:22617] AH01071: Got error 'PHP message: start 1763103563.4317', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:59:24.528320 2025] [proxy_fcgi:error] [pid 16671:tid 16686] [client 165.85.56.95:22617] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103564.528-1763103563.4317', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 14:59:33.257860 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:36065] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:59:35.877668 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:36065] AH01071: Got error 'PHP message: start 1763103575.2214', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:59:36.044663 2025] [proxy_fcgi:error] [pid 16709:tid 16711] [client 165.85.56.95:36065] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103576.0441-1763103575.2214', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:59:43.650453 2025] [proxy_fcgi:error] [pid 16574:tid 16617] [client 165.85.56.95:20085] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:59:44.642316 2025] [proxy_fcgi:error] [pid 16574:tid 16608] [client 165.85.56.95:20085] AH01071: Got error 'PHP message: start 1763103584.1974', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:59:44.910110 2025] [proxy_fcgi:error] [pid 16574:tid 16608] [client 165.85.56.95:20085] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103584.9097-1763103584.1974', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 14:59:59.893730 2025] [proxy_fcgi:error] [pid 16574:tid 16613] [client 165.85.56.95:3655] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:00:00.770822 2025] [proxy_fcgi:error] [pid 16574:tid 16607] [client 165.85.56.95:3655] AH01071: Got error 'PHP message: start 1763103600.3904', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:00:00.962973 2025] [proxy_fcgi:error] [pid 16574:tid 16607] [client 165.85.56.95:3655] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103600.9626-1763103600.3904', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:00:12.986108 2025] [proxy_fcgi:error] [pid 16709:tid 16735] [client 165.85.56.95:10446] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:00:14.447727 2025] [proxy_fcgi:error] [pid 16709:tid 16732] [client 165.85.56.95:10446] AH01071: Got error 'PHP message: start 1763103614.0234', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:00:14.689459 2025] [proxy_fcgi:error] [pid 16709:tid 16732] [client 165.85.56.95:10446] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103614.6891-1763103614.0234', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:02:15.874460 2025] [proxy_fcgi:error] [pid 16709:tid 16722] [client 165.85.56.95:41282] AH01071: Got error 'PHP message: start 1763103734.9789', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:02:16.180202 2025] [proxy_fcgi:error] [pid 16709:tid 16722] [client 165.85.56.95:41282] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103736.1797-1763103734.9789', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:04:02.445342 2025] [proxy_fcgi:error] [pid 16671:tid 16691] [client 165.85.56.95:36648] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:04:04.263963 2025] [proxy_fcgi:error] [pid 16671:tid 16697] [client 165.85.56.95:36648] AH01071: Got error 'PHP message: start 1763103843.5076', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:04:04.661383 2025] [proxy_fcgi:error] [pid 16671:tid 16697] [client 165.85.56.95:36648] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103844.6609-1763103843.5076', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 14 15:06:05.646792 2025] [proxy_fcgi:error] [pid 16574:tid 16617] [client 165.85.56.95:38466] AH01071: Got error 'PHP message: start 1763103964.963', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:06:06.135121 2025] [proxy_fcgi:error] [pid 16574:tid 16617] [client 165.85.56.95:38466] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763103966.1345-1763103964.963', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:08:07.335334 2025] [proxy_fcgi:error] [pid 16575:tid 16646] [client 165.85.56.95:55890] AH01071: Got error 'PHP message: start 1763104086.6108', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:08:07.912613 2025] [proxy_fcgi:error] [pid 16575:tid 16646] [client 165.85.56.95:55890] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104087.9117-1763104086.6108', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:10:09.602360 2025] [proxy_fcgi:error] [pid 16671:tid 16681] [client 165.85.56.95:13349] AH01071: Got error 'PHP message: start 1763104208.7943', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:10:10.194626 2025] [proxy_fcgi:error] [pid 16671:tid 16681] [client 165.85.56.95:13349] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104210.1942-1763104208.7943', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:12:11.377629 2025] [proxy_fcgi:error] [pid 16709:tid 16717] [client 165.85.56.95:6298] AH01071: Got error 'PHP message: start 1763104330.6804', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:12:11.951853 2025] [proxy_fcgi:error] [pid 16709:tid 16717] [client 165.85.56.95:6298] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104331.9514-1763104330.6804', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:14:12.972283 2025] [proxy_fcgi:error] [pid 16575:tid 16637] [client 165.85.56.95:46758] AH01071: Got error 'PHP message: start 1763104452.4418', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:14:13.317879 2025] [proxy_fcgi:error] [pid 16575:tid 16637] [client 165.85.56.95:46758] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104453.3172-1763104452.4418', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:16:14.767173 2025] [proxy_fcgi:error] [pid 16575:tid 16658] [client 165.85.56.95:55756] AH01071: Got error 'PHP message: start 1763104574.1693', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:16:15.114759 2025] [proxy_fcgi:error] [pid 16575:tid 16658] [client 165.85.56.95:55756] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104575.1142-1763104574.1693', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:18:16.656631 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:12138] AH01071: Got error 'PHP message: start 1763104695.9994', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:18:17.176210 2025] [proxy_fcgi:error] [pid 16573:tid 16590] [client 165.85.56.95:12138] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104697.1759-1763104695.9994', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:20:18.347626 2025] [proxy_fcgi:error] [pid 16671:tid 16698] [client 165.85.56.95:20014] AH01071: Got error 'PHP message: start 1763104817.6981', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:20:18.890300 2025] [proxy_fcgi:error] [pid 16671:tid 16698] [client 165.85.56.95:20014] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104818.8899-1763104817.6981', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:22:19.896294 2025] [proxy_fcgi:error] [pid 16574:tid 16629] [client 165.85.56.95:54416] AH01071: Got error 'PHP message: start 1763104939.3665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:22:20.243675 2025] [proxy_fcgi:error] [pid 16574:tid 16629] [client 165.85.56.95:54416] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763104940.2432-1763104939.3665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:24:21.752621 2025] [proxy_fcgi:error] [pid 16671:tid 16681] [client 165.85.56.95:52366] AH01071: Got error 'PHP message: start 1763105061.1327', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:24:22.315228 2025] [proxy_fcgi:error] [pid 16671:tid 16681] [client 165.85.56.95:52366] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763105062.3146-1763105061.1327', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:26:23.860392 2025] [proxy_fcgi:error] [pid 16573:tid 16595] [client 165.85.56.95:60792] AH01071: Got error 'PHP message: start 1763105183.208', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:26:24.424783 2025] [proxy_fcgi:error] [pid 16573:tid 16595] [client 165.85.56.95:60792] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763105184.4238-1763105183.208', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:28:25.618199 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:50600] AH01071: Got error 'PHP message: start 1763105304.9319', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:28:26.246249 2025] [proxy_fcgi:error] [pid 16709:tid 16719] [client 165.85.56.95:50600] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763105306.2457-1763105304.9319', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 14 15:50:53.367351 2025] [:error] [pid 16709:tid 16713] [client 94.247.172.129:37738] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRbfXaNdzfVNC4oipLUmGAAAAUI"]
[Fri Nov 14 21:02:25.852393 2025] [:error] [pid 16574:tid 16629] [client 43.135.133.241:57904] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRcoYf6XQqe4NqaoE9JivQAAAJY"]
[Fri Nov 14 21:08:28.961967 2025] [:error] [pid 16709:tid 16725] [client 43.133.14.237:47440] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRcpzKNdzfVNC4oipLWeEQAAAU4"]
[Fri Nov 14 22:58:59.318150 2025] [autoindex:error] [pid 16574:tid 16620] [client 134.209.221.235:51343] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 15 01:34:22.545744 2025] [:error] [pid 45909:tid 45977] [client 49.43.154.81:51713] [client 49.43.154.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.154.81, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRdoHsZqItrYybG86kiZdQAAAcw"]
[Sat Nov 15 01:34:22.557434 2025] [proxy_fcgi:error] [pid 45909:tid 45977] [client 49.43.154.81:51713] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 01:37:28.335841 2025] [:error] [pid 45907:tid 45924] [client 49.145.201.211:33504] [client 49.145.201.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.201.211, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRdo2FAqmYxCpnT9gJGIpgAAAU0"]
[Sat Nov 15 01:37:28.346871 2025] [proxy_fcgi:error] [pid 45907:tid 45924] [client 49.145.201.211:33504] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 01:45:44.041641 2025] [:error] [pid 45908:tid 45950] [client 182.42.111.213:55821] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRdqyGWG19mWwZX7KatpXAAAAAw"]
[Sat Nov 15 02:14:14.006767 2025] [proxy_fcgi:error] [pid 45909:tid 45984] [client 45.8.17.219:54971] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:14.961859 2025] [proxy_fcgi:error] [pid 45909:tid 45970] [client 45.8.17.219:54971] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:15.409950 2025] [:error] [pid 45909:tid 45985] [client 45.8.17.219:54971] [client 45.8.17.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRdxd8ZqItrYybG86kim7wAAAdQ"]
[Sat Nov 15 02:14:16.385012 2025] [proxy_fcgi:error] [pid 45995:tid 46012] [client 45.128.199.134:27083] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:16.849130 2025] [:error] [pid 45995:tid 46013] [client 45.128.199.134:27083] [client 45.128.199.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aRdxeMfhZrb6EV4SvFvVbAAAAg0"]
[Sat Nov 15 02:14:17.713837 2025] [proxy_fcgi:error] [pid 18513:tid 18542] [client 45.128.199.114:61379] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:18.659673 2025] [proxy_fcgi:error] [pid 18513:tid 18523] [client 45.128.199.114:61379] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:19.178670 2025] [proxy_fcgi:error] [pid 18513:tid 18521] [client 45.128.199.114:61379] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:19.615868 2025] [proxy_fcgi:error] [pid 18513:tid 18531] [client 45.128.199.114:61379] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:20.583916 2025] [:error] [pid 18513:tid 18534] [client 45.128.199.114:61379] [client 45.128.199.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aRdxfPc94upQFzRWlUngXgAAAFA"]
[Sat Nov 15 02:14:21.545589 2025] [proxy_fcgi:error] [pid 18513:tid 18538] [client 45.8.17.46:45289] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:21.967888 2025] [proxy_fcgi:error] [pid 18513:tid 18531] [client 45.8.17.46:45289] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 02:14:22.397260 2025] [:error] [pid 18513:tid 18529] [client 45.8.17.46:45289] [client 45.8.17.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aRdxfvc94upQFzRWlUngZAAAAEs"]
[Sat Nov 15 02:14:23.326297 2025] [:error] [pid 18513:tid 18521] [client 45.128.199.252:54843] [client 45.128.199.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aRdxf_c94upQFzRWlUngaAAAAEM"]
[Sat Nov 15 02:14:24.234677 2025] [:error] [pid 45909:tid 45984] [client 45.8.17.28:53159] [client 45.8.17.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRdxgMZqItrYybG86kim-AAAAdM"]
[Sat Nov 15 02:14:25.591912 2025] [:error] [pid 45909:tid 45966] [client 45.8.17.29:52355] [client 45.8.17.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aRdxgcZqItrYybG86kim_wAAAcE"]
[Sat Nov 15 02:14:41.551213 2025] [autoindex:error] [pid 45995:tid 46002] [client 45.8.17.27:22483] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 02:14:41.983353 2025] [autoindex:error] [pid 45995:tid 46000] [client 45.8.17.27:22483] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 02:14:42.415417 2025] [autoindex:error] [pid 45995:tid 46008] [client 45.8.17.27:22483] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 02:15:01.213891 2025] [autoindex:error] [pid 45995:tid 46022] [client 45.8.17.27:22483] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 02:16:09.480845 2025] [autoindex:error] [pid 45908:tid 45945] [client 45.128.199.107:61791] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 02:17:41.174767 2025] [autoindex:error] [pid 45907:tid 45932] [client 45.128.199.117:26133] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 03:53:26.223347 2025] [proxy_fcgi:error] [pid 48374:tid 48433] [client 180.150.80.122:12891] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Sat Nov 15 03:53:30.526305 2025] [proxy_fcgi:error] [pid 48374:tid 48429] [client 180.150.80.122:12891] AH01071: Got error 'PHP message: start 1763150009.7468', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 03:53:30.797082 2025] [proxy_fcgi:error] [pid 48374:tid 48429] [client 180.150.80.122:12891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763150010.7966-1763150009.7468', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 03:54:24.935479 2025] [proxy_fcgi:error] [pid 48374:tid 48438] [client 180.150.80.122:13219] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 03:54:26.385711 2025] [proxy_fcgi:error] [pid 48374:tid 48430] [client 180.150.80.122:13219] AH01071: Got error 'PHP message: start 1763150065.7063', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 03:54:26.756865 2025] [proxy_fcgi:error] [pid 48374:tid 48430] [client 180.150.80.122:13219] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763150066.7564-1763150065.7063', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 03:56:28.533519 2025] [proxy_fcgi:error] [pid 48480:tid 48486] [client 165.85.56.6:14102] AH01071: Got error 'PHP message: start 1763150188.0255', referer: https://pumpbooking.com/dashboard-bookings.php
[Sat Nov 15 03:56:28.769988 2025] [proxy_fcgi:error] [pid 48480:tid 48486] [client 165.85.56.6:14102] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763150188.7696-1763150188.0255', referer: https://pumpbooking.com/dashboard-bookings.php
[Sat Nov 15 03:58:39.258435 2025] [proxy_fcgi:error] [pid 48373:tid 48395] [client 165.85.56.6:12316] AH01071: Got error 'PHP message: start 1763150318.6051', referer: https://pumpbooking.com/dashboard-bookings.php
[Sat Nov 15 03:58:39.535443 2025] [proxy_fcgi:error] [pid 48373:tid 48395] [client 165.85.56.6:12316] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763150319.5351-1763150318.6051', referer: https://pumpbooking.com/dashboard-bookings.php
[Sat Nov 15 04:05:28.088247 2025] [proxy_fcgi:error] [pid 27997:tid 28011] [client 165.85.56.6:31448] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 04:05:30.066518 2025] [proxy_fcgi:error] [pid 27911:tid 27969] [client 165.85.56.6:8346] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 04:05:30.719369 2025] [proxy_fcgi:error] [pid 27911:tid 27983] [client 165.85.56.6:8346] AH01071: Got error 'PHP message: start 1763150730.678PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763150730.719-1763150730.678', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 04:05:52.149170 2025] [proxy_fcgi:error] [pid 27997:tid 28007] [client 165.85.56.6:25567] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 04:05:54.955735 2025] [proxy_fcgi:error] [pid 27997:tid 28016] [client 165.85.56.6:25567] AH01071: Got error 'PHP message: start 1763150753.8589', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 04:05:55.116338 2025] [proxy_fcgi:error] [pid 27997:tid 28016] [client 165.85.56.6:25567] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763150755.1159-1763150753.8589', referer: https://pumpbooking.com/dashboard.php
[Sat Nov 15 05:30:01.245096 2025] [:error] [pid 27910:tid 27950] [client 136.112.223.165:52878] [client 136.112.223.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRefWY6e1LusHMYkS7ZOFQAAAEk"]
[Sat Nov 15 11:18:23.549180 2025] [:error] [pid 20313:tid 20336] [client 3.121.223.94:54486] [client 3.121.223.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRfw_xI9DXIgPadBLUZK0AAAAtQ"]
[Sat Nov 15 11:28:13.059962 2025] [:error] [pid 27997:tid 28012] [client 44.223.67.162:36152] [client 44.223.67.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRfzTdpja_6cDxKbxFmGqgAAAM0"]
[Sat Nov 15 11:40:47.430613 2025] [:error] [pid 20346:tid 20349] [client 13.235.255.132:45566] [client 13.235.255.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRf2P57hsydZdIoVTlvGMwAAAwA"]
[Sat Nov 15 11:46:26.175732 2025] [:error] [pid 20346:tid 20349] [client 15.229.30.33:37454] [client 15.229.30.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRf3kp7hsydZdIoVTlvH3wAAAwA"]
[Sat Nov 15 12:09:26.327056 2025] [:error] [pid 27911:tid 27985] [client 138.197.23.42:64610] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRf89sGzUdrhGBIfiKQmCAAAAJE"]
[Sat Nov 15 12:09:26.749605 2025] [:error] [pid 27909:tid 27925] [client 138.197.23.42:64766] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRf89iTfZ6B57n8HepXtLQAAAAw"]
[Sat Nov 15 12:09:27.176567 2025] [:error] [pid 22765:tid 22785] [client 138.197.23.42:64918] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRf896brQzjuZmPIWDafGQAAAo8"]
[Sat Nov 15 12:09:27.608686 2025] [:error] [pid 20313:tid 20316] [client 138.197.23.42:65087] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRf89xI9DXIgPadBLUZSPQAAAsA"]
[Sat Nov 15 12:09:28.031726 2025] [:error] [pid 22613:tid 22639] [client 138.197.23.42:65255] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRf8-CoyR3cDsIRGPRl8jgAAAhg"]
[Sat Nov 15 12:42:00.018998 2025] [:error] [pid 19961:tid 20009] [client 65.2.48.136:54072] [client 65.2.48.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRgEmDar7Si-84EApVQ72wAAAdA"]
[Sat Nov 15 12:45:12.803315 2025] [:error] [pid 20654:tid 20674] [client 3.73.158.20:59994] [client 3.73.158.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRgFWHcS7eC8vO76_yd5bQAAA5E"]
[Sat Nov 15 20:15:59.613942 2025] [:error] [pid 27909:tid 27917] [client 45.138.16.215:52391] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aRhu_yTfZ6B57n8HepU8TAAAAAQ"]
[Sat Nov 15 20:16:00.155851 2025] [:error] [pid 20654:tid 20674] [client 45.138.16.215:52541] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/postnews.php"] [unique_id "aRhvAHcS7eC8vO76_ycGUAAAA5E"]
[Sat Nov 15 20:16:00.697670 2025] [:error] [pid 22765:tid 22794] [client 45.138.16.215:52667] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvAKbrQzjuZmPIWDb8-gAAApg"]
[Sat Nov 15 20:26:27.441615 2025] [:error] [pid 19961:tid 20009] [client 45.134.79.103:63857] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRhxczar7Si-84EApVSFmgAAAdA"]
[Sat Nov 15 20:26:28.100498 2025] [:error] [pid 20654:tid 20658] [client 45.134.79.103:64099] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRhxdHcS7eC8vO76_ycI7gAAA4E"]
[Sat Nov 15 20:26:28.740654 2025] [:error] [pid 27911:tid 27978] [client 45.134.79.103:64295] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdMGzUdrhGBIfiKR2CAAAAIo"]
[Sat Nov 15 22:26:49.295706 2025] [:error] [pid 22613:tid 22629] [client 63.178.194.95:50168] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aRiNqSoyR3cDsIRGPRnhJwAAAg4"]
[Sat Nov 15 22:26:53.017183 2025] [:error] [pid 22765:tid 22785] [client 63.178.194.95:50202] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aRiNrabrQzjuZmPIWDYVRQAAAo8"]
[Sat Nov 15 22:26:53.038174 2025] [:error] [pid 22765:tid 22775] [client 63.178.194.95:50180] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev"] [unique_id "aRiNrabrQzjuZmPIWDYVRgAAAoU"]
[Sat Nov 15 22:26:53.043184 2025] [:error] [pid 20654:tid 20670] [client 63.178.194.95:50172] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod"] [unique_id "aRiNrXcS7eC8vO76_ycgmQAAA40"]
[Sat Nov 15 22:26:53.105836 2025] [:error] [pid 22765:tid 22790] [client 63.178.194.95:50186] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aRiNrabrQzjuZmPIWDYVSAAAApQ"]
[Sat Nov 15 22:27:04.643084 2025] [:error] [pid 27911:tid 27970] [client 63.178.194.95:46538] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development"] [unique_id "aRiNuMGzUdrhGBIfiKSE6AAAAII"]
[Sat Nov 15 22:27:04.756251 2025] [:error] [pid 20346:tid 20358] [client 63.178.194.95:46546] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aRiNuJ7hsydZdIoVTltj4QAAAwk"]
[Sat Nov 15 22:27:04.768101 2025] [:error] [pid 20346:tid 20357] [client 63.178.194.95:46532] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aRiNuJ7hsydZdIoVTltj4gAAAwg"]
[Sat Nov 15 22:27:04.828199 2025] [:error] [pid 27909:tid 27930] [client 63.178.194.95:46540] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test"] [unique_id "aRiNuCTfZ6B57n8HepVMRQAAABE"]
[Sat Nov 15 22:27:16.347297 2025] [:error] [pid 22613:tid 22632] [client 63.178.194.95:57312] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aRiNxCoyR3cDsIRGPRnhNQAAAhE"]
[Sat Nov 15 22:27:16.407641 2025] [:error] [pid 22765:tid 22769] [client 63.178.194.95:57334] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.sample"] [unique_id "aRiNxKbrQzjuZmPIWDYVVQAAAoE"]
[Sat Nov 15 22:27:16.716203 2025] [:error] [pid 20313:tid 20317] [client 63.178.194.95:57338] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aRiNxBI9DXIgPadBLUarZgAAAsE"]
[Sat Nov 15 22:27:16.783118 2025] [:error] [pid 27909:tid 27918] [client 63.178.194.95:57326] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env~"] [unique_id "aRiNxCTfZ6B57n8HepVMSgAAAAU"]
[Sat Nov 15 22:27:16.911169 2025] [:error] [pid 27997:tid 28020] [client 63.178.194.95:57354] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aRiNxNpja_6cDxKbxFn7pQAAANU"]
[Sat Nov 15 22:27:17.111966 2025] [:error] [pid 27909:tid 27920] [client 63.178.194.95:57358] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.orig"] [unique_id "aRiNxSTfZ6B57n8HepVMTAAAAAc"]
[Sat Nov 15 22:27:33.785206 2025] [:error] [pid 19961:tid 19998] [client 63.178.194.95:49384] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dist"] [unique_id "aRiN1Tar7Si-84EApVSTBwAAAcU"]
[Sat Nov 15 22:27:33.851485 2025] [:error] [pid 20313:tid 20338] [client 63.178.194.95:49398] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env"] [unique_id "aRiN1RI9DXIgPadBLUaragAAAtY"]
[Sat Nov 15 22:27:33.909897 2025] [:error] [pid 19959:tid 19982] [client 63.178.194.95:49412] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.tmp"] [unique_id "aRiN1cjejiTUP1-IawMAVwAAAZA"]
[Sat Nov 15 22:27:33.916343 2025] [:error] [pid 22765:tid 22793] [client 63.178.194.95:49378] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.swp"] [unique_id "aRiN1abrQzjuZmPIWDYVeAAAApc"]
[Sat Nov 15 22:27:52.243487 2025] [:error] [pid 22613:tid 22621] [client 63.178.194.95:42048] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env.save"] [unique_id "aRiN6CoyR3cDsIRGPRnhRQAAAgY"]
[Sat Nov 15 22:27:54.064874 2025] [:error] [pid 20346:tid 20351] [client 63.178.194.95:42060] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env.old"] [unique_id "aRiN6p7hsydZdIoVTltkFAAAAwI"]
[Sat Nov 15 22:27:54.114171 2025] [:error] [pid 20346:tid 20370] [client 63.178.194.95:42050] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env.bak"] [unique_id "aRiN6p7hsydZdIoVTltkFQAAAxU"]
[Sat Nov 15 22:27:54.170587 2025] [:error] [pid 22765:tid 22794] [client 63.178.194.95:42066] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aRiN6qbrQzjuZmPIWDYVgwAAApg"]
[Sat Nov 15 22:27:55.194706 2025] [:error] [pid 27997:tid 28015] [client 63.178.194.95:42126] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env.bak"] [unique_id "aRiN69pja_6cDxKbxFn7uAAAANA"]
[Sat Nov 15 22:27:55.200419 2025] [:error] [pid 20313:tid 20323] [client 63.178.194.95:42110] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env.save"] [unique_id "aRiN6xI9DXIgPadBLUarbwAAAsc"]
[Sat Nov 15 22:27:55.213264 2025] [:error] [pid 27997:tid 28019] [client 63.178.194.95:42086] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env.save"] [unique_id "aRiN69pja_6cDxKbxFn7uQAAANQ"]
[Sat Nov 15 22:27:55.232374 2025] [:error] [pid 22613:tid 22620] [client 63.178.194.95:42094] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env.bak"] [unique_id "aRiN6yoyR3cDsIRGPRnhRwAAAgU"]
[Sat Nov 15 22:27:55.256679 2025] [:error] [pid 20346:tid 20353] [client 63.178.194.95:42078] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env.old"] [unique_id "aRiN657hsydZdIoVTltkFwAAAwQ"]
[Sat Nov 15 22:27:55.262019 2025] [:error] [pid 20346:tid 20362] [client 63.178.194.95:42106] [client 63.178.194.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aRiN657hsydZdIoVTltkGAAAAw0"]
[Sun Nov 16 02:54:52.119441 2025] [:error] [pid 22613:tid 22629] [client 45.148.10.158:47760] [client 45.148.10.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRjMfCoyR3cDsIRGPRkBbQAAAg4"]
[Sun Nov 16 02:54:54.388295 2025] [:error] [pid 27911:tid 27971] [client 45.148.10.158:38626] [client 45.148.10.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRjMfsGzUdrhGBIfiKSi0gAAAIM"]
[Sun Nov 16 03:14:27.776214 2025] [autoindex:error] [pid 27814:tid 27931] [client 20.2.83.141:61804] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 03:42:58.970760 2025] [:error] [pid 8300:tid 8323] [client 167.99.73.138:45718] [client 167.99.73.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aRjXwr4U9_qUKfUcXjOmtAAAAAk"]
[Sun Nov 16 03:42:59.995852 2025] [:error] [pid 8302:tid 8370] [client 167.99.73.138:45730] [client 167.99.73.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aRjXw0yOrgPIiTAI46540QAAAII"]
[Sun Nov 16 03:54:28.292239 2025] [:error] [pid 52469:tid 52492] [client 125.75.66.97:47123] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRjadE6HaXpHeEZ98Z30agAAAA8"]
[Sun Nov 16 10:20:08.518883 2025] [:error] [pid 52471:tid 52536] [client 114.96.103.33:38145] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRk02NmWsFzjR5CEgDXntgAAAIQ"]
[Sun Nov 16 15:22:57.690177 2025] [:error] [pid 20556:tid 20558] [client 3.101.38.95:36524] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aRl70UkbyEckbWtBcCJXxQAAAQA"]
[Sun Nov 16 15:23:02.285511 2025] [:error] [pid 52471:tid 52554] [client 3.101.38.95:36540] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev"] [unique_id "aRl71tmWsFzjR5CEgDUtlwAAAJY"]
[Sun Nov 16 15:23:02.693235 2025] [:error] [pid 34133:tid 34148] [client 3.101.38.95:36652] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.sample"] [unique_id "aRl71vSAB3iwXVRY0gF06AAAAU0"]
[Sun Nov 16 15:23:02.698823 2025] [:error] [pid 34133:tid 34139] [client 3.101.38.95:36596] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dist"] [unique_id "aRl71vSAB3iwXVRY0gF06QAAAUQ"]
[Sun Nov 16 15:23:02.701453 2025] [:error] [pid 52471:tid 52539] [client 3.101.38.95:36592] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aRl71tmWsFzjR5CEgDUtmgAAAIc"]
[Sun Nov 16 15:23:02.711689 2025] [:error] [pid 52469:tid 52486] [client 3.101.38.95:36548] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod"] [unique_id "aRl71k6HaXpHeEZ98Z2cjQAAAAk"]
[Sun Nov 16 15:23:02.718508 2025] [:error] [pid 52471:tid 52549] [client 3.101.38.95:36638] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.tmp"] [unique_id "aRl71tmWsFzjR5CEgDUtmwAAAJE"]
[Sun Nov 16 15:23:02.724736 2025] [:error] [pid 34227:tid 34238] [client 3.101.38.95:36608] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test"] [unique_id "aRl71n108zGLYs9eMugW3AAAAgk"]
[Sun Nov 16 15:23:02.725295 2025] [:error] [pid 20556:tid 20566] [client 3.101.38.95:36564] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env~"] [unique_id "aRl71kkbyEckbWtBcCJXyAAAAQg"]
[Sun Nov 16 15:23:02.729295 2025] [:error] [pid 34133:tid 34158] [client 3.101.38.95:36620] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aRl71vSAB3iwXVRY0gF06gAAAVc"]
[Sun Nov 16 15:23:02.732955 2025] [:error] [pid 34227:tid 34229] [client 3.101.38.95:36566] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aRl71n108zGLYs9eMugW3QAAAgA"]
[Sun Nov 16 15:23:02.735433 2025] [:error] [pid 52471:tid 52553] [client 3.101.38.95:36688] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env.bak"] [unique_id "aRl71tmWsFzjR5CEgDUtnAAAAJU"]
[Sun Nov 16 15:23:02.737030 2025] [:error] [pid 52469:tid 52484] [client 3.101.38.95:36552] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development"] [unique_id "aRl71k6HaXpHeEZ98Z2cjgAAAAc"]
[Sun Nov 16 15:23:02.740036 2025] [:error] [pid 34227:tid 34231] [client 3.101.38.95:36576] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aRl71n108zGLYs9eMugW3gAAAgI"]
[Sun Nov 16 15:23:02.742067 2025] [:error] [pid 34271:tid 34289] [client 3.101.38.95:36664] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env.old"] [unique_id "aRl71kNmlZhoZZV1BUCYwAAAAlA"]
[Sun Nov 16 15:23:02.742294 2025] [:error] [pid 34133:tid 34153] [client 3.101.38.95:36616] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.swp"] [unique_id "aRl71vSAB3iwXVRY0gF06wAAAVI"]
[Sun Nov 16 15:23:02.742856 2025] [:error] [pid 52471:tid 52550] [client 3.101.38.95:36654] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aRl71tmWsFzjR5CEgDUtnQAAAJI"]
[Sun Nov 16 15:23:02.886358 2025] [:error] [pid 52469:tid 52497] [client 3.101.38.95:36714] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env.old"] [unique_id "aRl71k6HaXpHeEZ98Z2cjwAAABQ"]
[Sun Nov 16 15:23:02.915276 2025] [:error] [pid 52563:tid 52573] [client 3.101.38.95:36628] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aRl71s-l3ey-hVJ5AuuImwAAAMc"]
[Sun Nov 16 15:23:02.932471 2025] [:error] [pid 34165:tid 34202] [client 3.101.38.95:36700] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env.bak"] [unique_id "aRl71nhG2YTKEjXchwkIKAAAAcc"]
[Sun Nov 16 15:23:02.966187 2025] [:error] [pid 20556:tid 20565] [client 3.101.38.95:36792] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/src/.env.old"] [unique_id "aRl71kkbyEckbWtBcCJXyQAAAQc"]
[Sun Nov 16 15:23:02.979958 2025] [:error] [pid 52469:tid 52498] [client 3.101.38.95:36672] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env.save"] [unique_id "aRl71k6HaXpHeEZ98Z2ckAAAABU"]
[Sun Nov 16 15:23:02.982383 2025] [:error] [pid 34271:tid 34276] [client 3.101.38.95:36656] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env"] [unique_id "aRl71kNmlZhoZZV1BUCYwQAAAkM"]
[Sun Nov 16 15:23:03.027173 2025] [:error] [pid 52471:tid 52534] [client 3.101.38.95:36622] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aRl719mWsFzjR5CEgDUtnwAAAII"]
[Sun Nov 16 15:23:03.039918 2025] [:error] [pid 52469:tid 52482] [client 3.101.38.95:36680] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env.save"] [unique_id "aRl7106HaXpHeEZ98Z2ckQAAAAU"]
[Sun Nov 16 15:23:03.067372 2025] [:error] [pid 34165:tid 34199] [client 3.101.38.95:36806] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env.bak"] [unique_id "aRl713hG2YTKEjXchwkIKQAAAcQ"]
[Sun Nov 16 15:23:03.092265 2025] [:error] [pid 34227:tid 34247] [client 3.101.38.95:36678] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aRl713108zGLYs9eMugW3wAAAhI"]
[Sun Nov 16 15:23:03.111168 2025] [:error] [pid 52471:tid 52543] [client 3.101.38.95:36780] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/src/.env.save"] [unique_id "aRl719mWsFzjR5CEgDUtoAAAAIs"]
[Sun Nov 16 15:23:03.123930 2025] [:error] [pid 52563:tid 52577] [client 3.101.38.95:36650] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.orig"] [unique_id "aRl718-l3ey-hVJ5AuuInAAAAMs"]
[Sun Nov 16 15:23:03.142902 2025] [:error] [pid 52469:tid 52481] [client 3.101.38.95:36738] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env.bak"] [unique_id "aRl7106HaXpHeEZ98Z2ckgAAAAQ"]
[Sun Nov 16 15:23:03.147737 2025] [:error] [pid 52469:tid 52489] [client 3.101.38.95:36756] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aRl7106HaXpHeEZ98Z2ckwAAAAw"]
[Sun Nov 16 15:23:03.150731 2025] [:error] [pid 52471:tid 52556] [client 3.101.38.95:36716] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aRl719mWsFzjR5CEgDUtoQAAAJg"]
[Sun Nov 16 15:23:03.195657 2025] [:error] [pid 52471:tid 52538] [client 3.101.38.95:36768] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env.save"] [unique_id "aRl719mWsFzjR5CEgDUtogAAAIY"]
[Sun Nov 16 15:23:03.208657 2025] [:error] [pid 52471:tid 52537] [client 3.101.38.95:36820] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env.old"] [unique_id "aRl719mWsFzjR5CEgDUtowAAAIU"]
[Sun Nov 16 15:23:03.215821 2025] [:error] [pid 34227:tid 34230] [client 3.101.38.95:36752] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env.old"] [unique_id "aRl713108zGLYs9eMugW4AAAAgE"]
[Sun Nov 16 15:23:03.225949 2025] [:error] [pid 52471:tid 52536] [client 3.101.38.95:36830] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/src/.env.bak"] [unique_id "aRl719mWsFzjR5CEgDUtpAAAAIQ"]
[Sun Nov 16 15:23:03.253281 2025] [:error] [pid 52471:tid 52551] [client 3.101.38.95:36728] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env.save"] [unique_id "aRl719mWsFzjR5CEgDUtpQAAAJM"]
[Sun Nov 16 15:23:03.437912 2025] [:error] [pid 34133:tid 34146] [client 3.101.38.95:36804] [client 3.101.38.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/src/.env"] [unique_id "aRl71_SAB3iwXVRY0gF07AAAAUs"]
[Sun Nov 16 17:14:34.819401 2025] [:error] [pid 34133:tid 34155] [client 101.91.148.219:40667] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRmV-vSAB3iwXVRY0gGE3QAAAVQ"]
[Sun Nov 16 18:56:09.613042 2025] [autoindex:error] [pid 34165:tid 34215] [client 155.94.163.116:61681] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 20:47:29.918313 2025] [:error] [pid 34301:tid 34325] [client 170.106.82.209:60884] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRnH4bGPoZwUGuFNREvmHQAAApU"]
[Mon Nov 17 05:53:58.001021 2025] [proxy_fcgi:error] [pid 39450:tid 39497] [client 165.85.56.95:44419] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Mon Nov 17 05:53:59.728491 2025] [proxy_fcgi:error] [pid 39450:tid 39504] [client 165.85.56.95:61838] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Mon Nov 17 05:54:03.375968 2025] [proxy_fcgi:error] [pid 39450:tid 39501] [client 165.85.56.95:61838] AH01071: Got error 'PHP message: start 1763330042.3079', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:54:03.768243 2025] [proxy_fcgi:error] [pid 39450:tid 39501] [client 165.85.56.95:61838] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330043.7678-1763330042.3079', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:34.452477 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.95:34041] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Mon Nov 17 05:56:35.963572 2025] [proxy_fcgi:error] [pid 39450:tid 39488] [client 165.85.56.95:42998] AH01071: Got error 'PHP message: start 1763330195.1081', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:36.210349 2025] [proxy_fcgi:error] [pid 39450:tid 39488] [client 165.85.56.95:42998] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330196.2099-1763330195.1081', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:36.842515 2025] [proxy_fcgi:error] [pid 39537:tid 39557] [client 165.85.56.95:34041] AH01071: Got error 'PHP message: start 1763330196.212', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:37.163854 2025] [proxy_fcgi:error] [pid 39537:tid 39557] [client 165.85.56.95:34041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330197.1634-1763330196.212', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:42.023307 2025] [proxy_fcgi:error] [pid 39537:tid 39552] [client 165.85.56.95:34041] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:42.802061 2025] [proxy_fcgi:error] [pid 39537:tid 39551] [client 165.85.56.95:34041] AH01071: Got error 'PHP message: start 1763330202.6027', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:56:43.169950 2025] [proxy_fcgi:error] [pid 39537:tid 39551] [client 165.85.56.95:34041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330203.1692-1763330202.6027', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:29.918456 2025] [proxy_fcgi:error] [pid 39450:tid 39498] [client 165.85.56.95:35916] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:30.881460 2025] [proxy_fcgi:error] [pid 39449:tid 39455] [client 165.85.56.95:7033] AH01071: Got error 'PHP message: start 1763330310.4322', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:31.253798 2025] [proxy_fcgi:error] [pid 39449:tid 39455] [client 165.85.56.95:7033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330311.2533-1763330310.4322', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:31.798440 2025] [proxy_fcgi:error] [pid 39450:tid 39491] [client 165.85.56.95:35916] AH01071: Got error 'PHP message: start 1763330311.2553', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:32.306811 2025] [proxy_fcgi:error] [pid 39450:tid 39491] [client 165.85.56.95:35916] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330312.3061-1763330311.2553', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:49.211353 2025] [proxy_fcgi:error] [pid 39450:tid 39485] [client 165.85.56.95:2256] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:50.961947 2025] [proxy_fcgi:error] [pid 39450:tid 39502] [client 165.85.56.95:2256] AH01071: Got error 'PHP message: start 1763330330.2374', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:58:51.592760 2025] [proxy_fcgi:error] [pid 39450:tid 39502] [client 165.85.56.95:2256] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330331.5925-1763330330.2374', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:59:33.160848 2025] [proxy_fcgi:error] [pid 39450:tid 39502] [client 165.85.56.95:22014] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:59:34.878655 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.95:22014] AH01071: Got error 'PHP message: start 1763330374', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 05:59:34.929700 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.95:22014] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330374.9263-1763330374', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:00:24.928685 2025] [proxy_fcgi:error] [pid 39451:tid 39524] [client 165.85.56.95:5151] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:00:25.881206 2025] [proxy_fcgi:error] [pid 39451:tid 39527] [client 165.85.56.95:5151] AH01071: Got error 'PHP message: start 1763330425.5915', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:00:25.881607 2025] [proxy_fcgi:error] [pid 39451:tid 39527] [client 165.85.56.95:5151] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330425.881-1763330425.5915', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:01:15.040408 2025] [proxy_fcgi:error] [pid 39450:tid 39489] [client 165.85.56.95:19185] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:01:15.971225 2025] [proxy_fcgi:error] [pid 39450:tid 39501] [client 165.85.56.95:19185] AH01071: Got error 'PHP message: start 1763330475.4212', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:01:15.971722 2025] [proxy_fcgi:error] [pid 39450:tid 39501] [client 165.85.56.95:19185] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330475.9702-1763330475.4212', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:14.872844 2025] [proxy_fcgi:error] [pid 39451:tid 39528] [client 165.85.56.95:54993] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:15.300246 2025] [proxy_fcgi:error] [pid 39451:tid 39512] [client 165.85.56.95:54993] AH01071: Got error 'PHP message: start 1763330715.1205', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:15.300734 2025] [proxy_fcgi:error] [pid 39451:tid 39512] [client 165.85.56.95:54993] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330715.3001-1763330715.1205', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:15.536235 2025] [proxy_fcgi:error] [pid 40548:tid 40554] [client 165.85.56.95:50329] AH01071: Got error 'PHP message: start 1763330715.3018', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:15.536769 2025] [proxy_fcgi:error] [pid 40548:tid 40554] [client 165.85.56.95:50329] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330715.536-1763330715.3018', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:49.790445 2025] [proxy_fcgi:error] [pid 39537:tid 39553] [client 165.85.56.95:37106] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:50.713406 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.95:37106] AH01071: Got error 'PHP message: start 1763330750.2409', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:05:50.758661 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.95:37106] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330750.7581-1763330750.2409', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:06:26.169273 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.95:65142] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:06:27.348446 2025] [proxy_fcgi:error] [pid 39450:tid 39485] [client 165.85.56.95:65142] AH01071: Got error 'PHP message: start 1763330786.7264', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:06:28.163269 2025] [proxy_fcgi:error] [pid 39450:tid 39485] [client 165.85.56.95:65142] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330788.1628-1763330786.7264', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:06:57.058676 2025] [proxy_fcgi:error] [pid 39537:tid 39560] [client 165.85.56.95:13474] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:06:57.816031 2025] [proxy_fcgi:error] [pid 39537:tid 39551] [client 165.85.56.95:13474] AH01071: Got error 'PHP message: start 1763330817.6143', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:06:58.327868 2025] [proxy_fcgi:error] [pid 39537:tid 39551] [client 165.85.56.95:13474] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330818.3269-1763330817.6143', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:07:33.094807 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.95:2997] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:07:33.934513 2025] [proxy_fcgi:error] [pid 39449:tid 39457] [client 165.85.56.95:2997] AH01071: Got error 'PHP message: start 1763330853.5704', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:07:34.258749 2025] [proxy_fcgi:error] [pid 39449:tid 39457] [client 165.85.56.95:2997] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330854.2578-1763330853.5704', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:09:49.401130 2025] [proxy_fcgi:error] [pid 39537:tid 39556] [client 165.85.56.95:39227] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85'
[Mon Nov 17 06:09:50.413946 2025] [proxy_fcgi:error] [pid 39537:tid 39548] [client 165.85.56.95:39227] AH01071: Got error 'PHP message: start 1763330990.0265', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:09:50.717930 2025] [proxy_fcgi:error] [pid 39537:tid 39548] [client 165.85.56.95:39227] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763330990.7176-1763330990.0265', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:11:28.979278 2025] [proxy_fcgi:error] [pid 39451:tid 39526] [client 165.85.56.95:2401] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:11:30.655907 2025] [proxy_fcgi:error] [pid 39451:tid 39531] [client 165.85.56.95:2401] AH01071: Got error 'PHP message: start 1763331089.8989', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:11:30.879784 2025] [proxy_fcgi:error] [pid 39451:tid 39531] [client 165.85.56.95:2401] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331090.8795-1763331089.8989', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:12:17.771824 2025] [proxy_fcgi:error] [pid 39451:tid 39527] [client 165.85.56.95:22372] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:12:18.359389 2025] [proxy_fcgi:error] [pid 39451:tid 39519] [client 165.85.56.95:22372] AH01071: Got error 'PHP message: start 1763331138.1133', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:12:18.360017 2025] [proxy_fcgi:error] [pid 39451:tid 39519] [client 165.85.56.95:22372] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331138.3592-1763331138.1133', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:14:19.202656 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 165.85.56.95:49598] AH01071: Got error 'PHP message: start 1763331258.5825', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:14:19.203160 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 165.85.56.95:49598] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331259.202-1763331258.5825', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:16:20.039342 2025] [proxy_fcgi:error] [pid 39450:tid 39484] [client 165.85.56.95:22703] AH01071: Got error 'PHP message: start 1763331379.4952', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:16:20.039952 2025] [proxy_fcgi:error] [pid 39450:tid 39484] [client 165.85.56.95:22703] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331380.0392-1763331379.4952', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:17:08.147429 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.95:23343] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:09.363027 2025] [proxy_fcgi:error] [pid 39449:tid 39475] [client 165.85.56.95:56146] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:09.882343 2025] [proxy_fcgi:error] [pid 39449:tid 39459] [client 165.85.56.95:56146] AH01071: Got error 'PHP message: start 1763331429.67', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:09.882986 2025] [proxy_fcgi:error] [pid 39449:tid 39459] [client 165.85.56.95:56146] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331429.882-1763331429.67', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:24.491171 2025] [proxy_fcgi:error] [pid 39537:tid 39561] [client 165.85.56.95:63250] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:26.132664 2025] [proxy_fcgi:error] [pid 39537:tid 39560] [client 165.85.56.95:63250] AH01071: Got error 'PHP message: start 1763331445.4483', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:26.383371 2025] [proxy_fcgi:error] [pid 39537:tid 39560] [client 165.85.56.95:63250] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331446.3828-1763331445.4483', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:27.494849 2025] [proxy_fcgi:error] [pid 39451:tid 39523] [client 165.85.56.95:37393] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:28.512638 2025] [proxy_fcgi:error] [pid 39451:tid 39521] [client 165.85.56.95:37393] AH01071: Got error 'PHP message: start 1763331447.9642', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:17:28.724698 2025] [proxy_fcgi:error] [pid 39451:tid 39521] [client 165.85.56.95:37393] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331448.724-1763331447.9642', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 06:19:29.582801 2025] [proxy_fcgi:error] [pid 39451:tid 39532] [client 165.85.56.95:56376] AH01071: Got error 'PHP message: start 1763331568.9426', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:19:29.788856 2025] [proxy_fcgi:error] [pid 39451:tid 39532] [client 165.85.56.95:56376] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331569.7885-1763331568.9426', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:21:30.791739 2025] [proxy_fcgi:error] [pid 40548:tid 40573] [client 165.85.56.95:30836] AH01071: Got error 'PHP message: start 1763331690.08', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:21:31.062000 2025] [proxy_fcgi:error] [pid 40548:tid 40573] [client 165.85.56.95:30836] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331691.0617-1763331690.08', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:23:32.011994 2025] [proxy_fcgi:error] [pid 39449:tid 39478] [client 165.85.56.95:34056] AH01071: Got error 'PHP message: start 1763331811.3025', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:23:32.358861 2025] [proxy_fcgi:error] [pid 39449:tid 39478] [client 165.85.56.95:34056] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331812.3583-1763331811.3025', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:25:34.292327 2025] [proxy_fcgi:error] [pid 39449:tid 39461] [client 165.85.56.95:22168] AH01071: Got error 'PHP message: start 1763331933.7481', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:25:34.484503 2025] [proxy_fcgi:error] [pid 39449:tid 39461] [client 165.85.56.95:22168] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763331934.4841-1763331933.7481', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:27:35.453262 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 165.85.56.95:25158] AH01071: Got error 'PHP message: start 1763332054.7666', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:27:35.770939 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 165.85.56.95:25158] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332055.7706-1763332054.7666', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:29:37.316860 2025] [proxy_fcgi:error] [pid 40548:tid 40554] [client 165.85.56.95:45176] AH01071: Got error 'PHP message: start 1763332176.7806', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:29:37.505292 2025] [proxy_fcgi:error] [pid 40548:tid 40554] [client 165.85.56.95:45176] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332177.503-1763332176.7806', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:31:38.893720 2025] [proxy_fcgi:error] [pid 39537:tid 39550] [client 165.85.56.95:21216] AH01071: Got error 'PHP message: start 1763332298.3174', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:31:39.078436 2025] [proxy_fcgi:error] [pid 39537:tid 39550] [client 165.85.56.95:21216] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332299.078-1763332298.3174', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:33:40.468631 2025] [proxy_fcgi:error] [pid 39449:tid 39463] [client 165.85.56.95:54506] AH01071: Got error 'PHP message: start 1763332419.7944', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:33:40.715744 2025] [proxy_fcgi:error] [pid 39449:tid 39463] [client 165.85.56.95:54506] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332420.7154-1763332419.7944', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:35:45.852328 2025] [proxy_fcgi:error] [pid 39451:tid 39523] [client 165.85.56.95:12466] AH01071: Got error 'PHP message: start 1763332545.2804', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:35:46.075340 2025] [proxy_fcgi:error] [pid 39451:tid 39523] [client 165.85.56.95:12466] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332546.0749-1763332545.2804', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:37:25.183599 2025] [:error] [pid 39449:tid 39478] [client 182.42.111.213:32968] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRpSJaUCymTA3MDfzLOiVQAAABg"]
[Mon Nov 17 06:37:54.797774 2025] [proxy_fcgi:error] [pid 39451:tid 39530] [client 165.85.56.95:62727] AH01071: Got error 'PHP message: start 1763332674.045', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:37:55.131913 2025] [proxy_fcgi:error] [pid 39451:tid 39530] [client 165.85.56.95:62727] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332675.1315-1763332674.045', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:39:59.341156 2025] [proxy_fcgi:error] [pid 39537:tid 39556] [client 165.85.56.95:30444] AH01071: Got error 'PHP message: start 1763332798.6504', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:39:59.658968 2025] [proxy_fcgi:error] [pid 39537:tid 39556] [client 165.85.56.95:30444] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332799.6586-1763332798.6504', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:42:01.415699 2025] [proxy_fcgi:error] [pid 39537:tid 39546] [client 165.85.56.95:52636] AH01071: Got error 'PHP message: start 1763332920.5352', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:42:01.790789 2025] [proxy_fcgi:error] [pid 39537:tid 39546] [client 165.85.56.95:52636] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763332921.7901-1763332920.5352', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:44:07.693471 2025] [proxy_fcgi:error] [pid 39537:tid 39559] [client 165.85.56.95:59510] AH01071: Got error 'PHP message: start 1763333046.9647', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:44:08.007271 2025] [proxy_fcgi:error] [pid 39537:tid 39559] [client 165.85.56.95:59510] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333048.0069-1763333046.9647', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:46:09.352584 2025] [proxy_fcgi:error] [pid 39537:tid 39541] [client 165.85.56.95:1255] AH01071: Got error 'PHP message: start 1763333168.6084', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:46:09.595274 2025] [proxy_fcgi:error] [pid 39537:tid 39541] [client 165.85.56.95:1255] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333169.5949-1763333168.6084', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:48:10.845397 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.95:63487] AH01071: Got error 'PHP message: start 1763333290.1593', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:48:11.157664 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.95:63487] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333291.1572-1763333290.1593', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:50:12.367056 2025] [proxy_fcgi:error] [pid 39449:tid 39456] [client 165.85.56.95:61000] AH01071: Got error 'PHP message: start 1763333411.6984', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:50:12.596920 2025] [proxy_fcgi:error] [pid 39449:tid 39456] [client 165.85.56.95:61000] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333412.5964-1763333411.6984', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:52:13.823129 2025] [proxy_fcgi:error] [pid 39450:tid 39492] [client 165.85.56.95:55106] AH01071: Got error 'PHP message: start 1763333533.1318', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:52:14.046938 2025] [proxy_fcgi:error] [pid 39450:tid 39492] [client 165.85.56.95:55106] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333534.0464-1763333533.1318', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:54:15.442221 2025] [proxy_fcgi:error] [pid 39537:tid 39543] [client 165.85.56.95:64793] AH01071: Got error 'PHP message: start 1763333654.7369', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:54:15.837099 2025] [proxy_fcgi:error] [pid 39537:tid 39543] [client 165.85.56.95:64793] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333655.8365-1763333654.7369', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:56:16.991867 2025] [proxy_fcgi:error] [pid 39449:tid 39462] [client 165.85.56.95:17207] AH01071: Got error 'PHP message: start 1763333776.4409', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:56:17.188862 2025] [proxy_fcgi:error] [pid 39449:tid 39462] [client 165.85.56.95:17207] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333777.1884-1763333776.4409', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:58:19.096626 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.95:22860] AH01071: Got error 'PHP message: start 1763333898.5311', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 06:58:19.300653 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.95:22860] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763333899.3002-1763333898.5311', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:00:20.718691 2025] [proxy_fcgi:error] [pid 40548:tid 40552] [client 165.85.56.95:33541] AH01071: Got error 'PHP message: start 1763334020.0152', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:00:21.002021 2025] [proxy_fcgi:error] [pid 40548:tid 40552] [client 165.85.56.95:33541] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334021.0016-1763334020.0152', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:02:22.357811 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.95:50273] AH01071: Got error 'PHP message: start 1763334141.6878', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:02:22.685890 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.95:50273] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334142.6855-1763334141.6878', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:04:25.832660 2025] [proxy_fcgi:error] [pid 39451:tid 39510] [client 165.85.56.95:55301] AH01071: Got error 'PHP message: start 1763334265.2159', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:04:26.020950 2025] [proxy_fcgi:error] [pid 39451:tid 39510] [client 165.85.56.95:55301] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334266.0206-1763334265.2159', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:06:28.310374 2025] [proxy_fcgi:error] [pid 39537:tid 39563] [client 165.85.56.95:34871] AH01071: Got error 'PHP message: start 1763334387.6523', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:06:28.588370 2025] [proxy_fcgi:error] [pid 39537:tid 39563] [client 165.85.56.95:34871] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334388.5879-1763334387.6523', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:08:30.616536 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 165.85.56.95:43443] AH01071: Got error 'PHP message: start 1763334509.8013', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:08:31.010187 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 165.85.56.95:43443] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334511.0098-1763334509.8013', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:10:32.257138 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 165.85.56.95:55474] AH01071: Got error 'PHP message: start 1763334631.6634', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:10:32.469333 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 165.85.56.95:55474] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334632.4689-1763334631.6634', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:12:33.747081 2025] [proxy_fcgi:error] [pid 39537:tid 39554] [client 165.85.56.95:11975] AH01071: Got error 'PHP message: start 1763334753.0692', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:12:34.038751 2025] [proxy_fcgi:error] [pid 39537:tid 39554] [client 165.85.56.95:11975] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334754.0376-1763334753.0692', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:14:35.136371 2025] [proxy_fcgi:error] [pid 39537:tid 39550] [client 165.85.56.95:22379] AH01071: Got error 'PHP message: start 1763334874.527', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:14:35.354809 2025] [proxy_fcgi:error] [pid 39537:tid 39550] [client 165.85.56.95:22379] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334875.3544-1763334874.527', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:16:37.134743 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.95:65427] AH01071: Got error 'PHP message: start 1763334996.5343', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:16:37.339853 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.95:65427] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763334997.3394-1763334996.5343', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:18:38.645872 2025] [proxy_fcgi:error] [pid 39537:tid 39547] [client 165.85.56.95:63947] AH01071: Got error 'PHP message: start 1763335117.8923', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:18:38.984632 2025] [proxy_fcgi:error] [pid 39537:tid 39547] [client 165.85.56.95:63947] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335118.9843-1763335117.8923', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:20:40.227327 2025] [proxy_fcgi:error] [pid 39537:tid 39549] [client 165.85.56.95:49624] AH01071: Got error 'PHP message: start 1763335239.5142', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:20:40.557949 2025] [proxy_fcgi:error] [pid 39537:tid 39549] [client 165.85.56.95:49624] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335240.5573-1763335239.5142', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:22:41.703001 2025] [proxy_fcgi:error] [pid 40548:tid 40553] [client 165.85.56.95:55412] AH01071: Got error 'PHP message: start 1763335361.0717', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:22:41.965923 2025] [proxy_fcgi:error] [pid 40548:tid 40553] [client 165.85.56.95:55412] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335361.9655-1763335361.0717', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:24:43.103908 2025] [proxy_fcgi:error] [pid 39451:tid 39517] [client 165.85.56.95:4791] AH01071: Got error 'PHP message: start 1763335482.5054', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:24:43.294927 2025] [proxy_fcgi:error] [pid 39451:tid 39517] [client 165.85.56.95:4791] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335483.2944-1763335482.5054', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:26:44.480836 2025] [proxy_fcgi:error] [pid 39450:tid 39498] [client 165.85.56.95:31583] AH01071: Got error 'PHP message: start 1763335603.825', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:26:44.770419 2025] [proxy_fcgi:error] [pid 39450:tid 39498] [client 165.85.56.95:31583] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335604.77-1763335603.825', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:28:46.350047 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.95:7307] AH01071: Got error 'PHP message: start 1763335725.7712', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:28:46.542149 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.95:7307] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335726.5417-1763335725.7712', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:30:48.280132 2025] [proxy_fcgi:error] [pid 40548:tid 40560] [client 165.85.56.95:58786] AH01071: Got error 'PHP message: start 1763335847.614', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:30:48.601365 2025] [proxy_fcgi:error] [pid 40548:tid 40560] [client 165.85.56.95:58786] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335848.6011-1763335847.614', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:32:49.849470 2025] [proxy_fcgi:error] [pid 39451:tid 39527] [client 165.85.56.95:57723] AH01071: Got error 'PHP message: start 1763335969.2487', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:32:50.045947 2025] [proxy_fcgi:error] [pid 39451:tid 39527] [client 165.85.56.95:57723] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763335970.0451-1763335969.2487', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:34:51.530898 2025] [proxy_fcgi:error] [pid 39449:tid 39472] [client 165.85.56.95:59677] AH01071: Got error 'PHP message: start 1763336090.8648', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:34:51.847494 2025] [proxy_fcgi:error] [pid 39449:tid 39472] [client 165.85.56.95:59677] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336091.8469-1763336090.8648', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:36:53.021400 2025] [proxy_fcgi:error] [pid 39449:tid 39475] [client 165.85.56.95:39259] AH01071: Got error 'PHP message: start 1763336212.4512', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:36:53.281202 2025] [proxy_fcgi:error] [pid 39449:tid 39475] [client 165.85.56.95:39259] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336213.2808-1763336212.4512', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:38:55.582300 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.95:7906] AH01071: Got error 'PHP message: start 1763336334.9547', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:38:55.784942 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.95:7906] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336335.7842-1763336334.9547', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:41:37.178661 2025] [proxy_fcgi:error] [pid 39537:tid 39546] [client 165.85.56.95:28135] AH01071: Got error 'PHP message: start 1763336496.5853', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:41:37.404683 2025] [proxy_fcgi:error] [pid 39537:tid 39546] [client 165.85.56.95:28135] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336497.4041-1763336496.5853', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:43:40.290949 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.95:21177] AH01071: Got error 'PHP message: start 1763336619.3692', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:43:40.593599 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.95:21177] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336620.5931-1763336619.3692', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:45:42.390068 2025] [proxy_fcgi:error] [pid 39449:tid 39468] [client 165.85.56.95:58904] AH01071: Got error 'PHP message: start 1763336741.699', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:45:42.676310 2025] [proxy_fcgi:error] [pid 39449:tid 39468] [client 165.85.56.95:58904] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336742.6753-1763336741.699', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:47:44.432441 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.95:2067] AH01071: Got error 'PHP message: start 1763336863.8251', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:47:44.627509 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.95:2067] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336864.6271-1763336863.8251', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:49:46.454911 2025] [proxy_fcgi:error] [pid 40548:tid 40561] [client 165.85.56.95:13714] AH01071: Got error 'PHP message: start 1763336985.8642', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:49:46.674365 2025] [proxy_fcgi:error] [pid 40548:tid 40561] [client 165.85.56.95:13714] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763336986.6739-1763336985.8642', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:51:47.946076 2025] [proxy_fcgi:error] [pid 39451:tid 39525] [client 165.85.56.95:26572] AH01071: Got error 'PHP message: start 1763337107.2462', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:51:48.144698 2025] [proxy_fcgi:error] [pid 39451:tid 39525] [client 165.85.56.95:26572] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337108.1443-1763337107.2462', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:53:50.364313 2025] [proxy_fcgi:error] [pid 40548:tid 40560] [client 165.85.56.95:47731] AH01071: Got error 'PHP message: start 1763337229.7566', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:53:50.572639 2025] [proxy_fcgi:error] [pid 40548:tid 40560] [client 165.85.56.95:47731] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337230.5722-1763337229.7566', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:55:52.343113 2025] [proxy_fcgi:error] [pid 39451:tid 39519] [client 165.85.56.95:37077] AH01071: Got error 'PHP message: start 1763337351.7857', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:55:52.539854 2025] [proxy_fcgi:error] [pid 39451:tid 39519] [client 165.85.56.95:37077] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337352.5394-1763337351.7857', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:57:53.796429 2025] [proxy_fcgi:error] [pid 39451:tid 39524] [client 165.85.56.95:24697] AH01071: Got error 'PHP message: start 1763337473.1173', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:57:54.087366 2025] [proxy_fcgi:error] [pid 39451:tid 39524] [client 165.85.56.95:24697] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337474.087-1763337473.1173', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:59:55.258032 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.95:56274] AH01071: Got error 'PHP message: start 1763337594.6831', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 07:59:55.455226 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.95:56274] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337595.4543-1763337594.6831', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:01:57.452493 2025] [proxy_fcgi:error] [pid 40548:tid 40552] [client 165.85.56.95:63728] AH01071: Got error 'PHP message: start 1763337716.7601', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:01:57.738092 2025] [proxy_fcgi:error] [pid 40548:tid 40552] [client 165.85.56.95:63728] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337717.7378-1763337716.7601', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:03:59.805478 2025] [proxy_fcgi:error] [pid 39451:tid 39525] [client 165.85.56.95:37796] AH01071: Got error 'PHP message: start 1763337839.0699', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:04:00.158504 2025] [proxy_fcgi:error] [pid 39451:tid 39525] [client 165.85.56.95:37796] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337840.1574-1763337839.0699', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:06:01.492716 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.95:37091] AH01071: Got error 'PHP message: start 1763337960.7851', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:06:01.737386 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.95:37091] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763337961.7367-1763337960.7851', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:08:02.947650 2025] [proxy_fcgi:error] [pid 39537:tid 39564] [client 165.85.56.95:8617] AH01071: Got error 'PHP message: start 1763338082.2515', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:08:03.213259 2025] [proxy_fcgi:error] [pid 39537:tid 39564] [client 165.85.56.95:8617] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338083.2128-1763338082.2515', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:10:05.317962 2025] [proxy_fcgi:error] [pid 39450:tid 39503] [client 165.85.56.95:56074] AH01071: Got error 'PHP message: start 1763338204.5307', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:10:05.662795 2025] [proxy_fcgi:error] [pid 39450:tid 39503] [client 165.85.56.95:56074] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338205.6623-1763338204.5307', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:12:06.935517 2025] [proxy_fcgi:error] [pid 39451:tid 39508] [client 165.85.56.95:43896] AH01071: Got error 'PHP message: start 1763338326.2145', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:12:07.232435 2025] [proxy_fcgi:error] [pid 39451:tid 39508] [client 165.85.56.95:43896] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338327.2314-1763338326.2145', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:14:08.517703 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.95:17616] AH01071: Got error 'PHP message: start 1763338447.8355', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:14:08.800239 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.95:17616] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338448.7998-1763338447.8355', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:16:10.020288 2025] [proxy_fcgi:error] [pid 39449:tid 39468] [client 165.85.56.95:48142] AH01071: Got error 'PHP message: start 1763338569.3162', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:16:10.241821 2025] [proxy_fcgi:error] [pid 39449:tid 39468] [client 165.85.56.95:48142] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338570.241-1763338569.3162', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:18:11.509963 2025] [proxy_fcgi:error] [pid 39450:tid 39489] [client 165.85.56.95:41219] AH01071: Got error 'PHP message: start 1763338690.8969', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:18:11.728713 2025] [proxy_fcgi:error] [pid 39450:tid 39489] [client 165.85.56.95:41219] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338691.7282-1763338690.8969', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:20:12.875733 2025] [proxy_fcgi:error] [pid 65302:tid 65321] [client 165.85.56.95:14250] AH01071: Got error 'PHP message: start 1763338812.252', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:20:13.078728 2025] [proxy_fcgi:error] [pid 65302:tid 65321] [client 165.85.56.95:14250] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338813.0784-1763338812.252', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:22:14.933642 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 165.85.56.95:11395] AH01071: Got error 'PHP message: start 1763338934.1699', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:22:15.286837 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 165.85.56.95:11395] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763338935.2863-1763338934.1699', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:24:16.521893 2025] [proxy_fcgi:error] [pid 39449:tid 39467] [client 165.85.56.95:29092] AH01071: Got error 'PHP message: start 1763339055.8941', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:24:16.720357 2025] [proxy_fcgi:error] [pid 39449:tid 39467] [client 165.85.56.95:29092] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763339056.72-1763339055.8941', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:47:14.652285 2025] [:error] [pid 39450:tid 39504] [client 43.135.133.194:52600] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRpwkuoZqPB4_7vNEDTOtAAAAFc"]
[Mon Nov 17 08:52:41.037816 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 165.85.56.95:60695] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Mon Nov 17 08:52:43.749015 2025] [proxy_fcgi:error] [pid 39537:tid 39549] [client 165.85.56.95:60695] AH01071: Got error 'PHP message: start 1763340762.9784', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 08:52:44.056763 2025] [proxy_fcgi:error] [pid 39537:tid 39549] [client 165.85.56.95:60695] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763340764.0563-1763340762.9784', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 08:54:46.184876 2025] [proxy_fcgi:error] [pid 65302:tid 65315] [client 165.85.56.6:7971] AH01071: Got error 'PHP message: start 1763340885.6467', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:54:46.384606 2025] [proxy_fcgi:error] [pid 65302:tid 65315] [client 165.85.56.6:7971] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763340886.3842-1763340885.6467', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:56:50.171564 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.6:27618] AH01071: Got error 'PHP message: start 1763341009.5611', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:56:50.387444 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.6:27618] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341010.3871-1763341009.5611', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:58:51.681951 2025] [proxy_fcgi:error] [pid 39450:tid 39496] [client 165.85.56.6:26990] AH01071: Got error 'PHP message: start 1763341131.01', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 08:58:51.908341 2025] [proxy_fcgi:error] [pid 39450:tid 39496] [client 165.85.56.6:26990] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341131.9079-1763341131.01', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:00:54.741655 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.6:14620] AH01071: Got error 'PHP message: start 1763341253.5764', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:00:55.070867 2025] [proxy_fcgi:error] [pid 39450:tid 39483] [client 165.85.56.6:14620] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341255.0704-1763341253.5764', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:02:56.396524 2025] [proxy_fcgi:error] [pid 39449:tid 39460] [client 165.85.56.6:33359] AH01071: Got error 'PHP message: start 1763341375.6696', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:02:56.606686 2025] [proxy_fcgi:error] [pid 39449:tid 39460] [client 165.85.56.6:33359] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341376.6061-1763341375.6696', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:04:31.600248 2025] [:error] [pid 65302:tid 65321] [client 170.106.165.186:57112] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRp0nwPMSx2v85r8y7xtwAAAAVE"]
[Mon Nov 17 09:04:57.706709 2025] [proxy_fcgi:error] [pid 39450:tid 39504] [client 165.85.56.6:28877] AH01071: Got error 'PHP message: start 1763341497.0523', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:04:57.943689 2025] [proxy_fcgi:error] [pid 39450:tid 39504] [client 165.85.56.6:28877] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341497.943-1763341497.0523', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:06:59.731631 2025] [proxy_fcgi:error] [pid 15150:tid 15155] [client 165.85.56.6:52315] AH01071: Got error 'PHP message: start 1763341618.9514', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:07:00.065518 2025] [proxy_fcgi:error] [pid 15150:tid 15155] [client 165.85.56.6:52315] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341620.0646-1763341618.9514', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:09:02.703803 2025] [proxy_fcgi:error] [pid 65302:tid 65320] [client 165.85.56.6:63922] AH01071: Got error 'PHP message: start 1763341741.5499', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:09:02.993819 2025] [proxy_fcgi:error] [pid 65302:tid 65320] [client 165.85.56.6:63922] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341742.9934-1763341741.5499', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:11:05.293215 2025] [proxy_fcgi:error] [pid 39449:tid 39472] [client 165.85.56.6:28024] AH01071: Got error 'PHP message: start 1763341864.5566', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:11:05.601043 2025] [proxy_fcgi:error] [pid 39449:tid 39472] [client 165.85.56.6:28024] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341865.6004-1763341864.5566', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:13:10.964676 2025] [proxy_fcgi:error] [pid 40548:tid 40574] [client 165.85.56.6:58918] AH01071: Got error 'PHP message: start 1763341990.2537', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:13:11.167808 2025] [proxy_fcgi:error] [pid 40548:tid 40574] [client 165.85.56.6:58918] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763341991.1669-1763341990.2537', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:15:13.723992 2025] [proxy_fcgi:error] [pid 39450:tid 39489] [client 165.85.56.6:46434] AH01071: Got error 'PHP message: start 1763342113.013', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:15:14.108700 2025] [proxy_fcgi:error] [pid 39450:tid 39489] [client 165.85.56.6:46434] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342114.108-1763342113.013', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:17:08.780465 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.6:8320] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:17:11.724628 2025] [proxy_fcgi:error] [pid 40548:tid 40571] [client 165.85.56.6:8320] AH01071: Got error 'PHP message: start 1763342231.0812', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:17:12.171883 2025] [proxy_fcgi:error] [pid 40548:tid 40571] [client 165.85.56.6:8320] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342232.1713-1763342231.0812', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:17:43.128727 2025] [proxy_fcgi:error] [pid 39537:tid 39540] [client 165.85.56.6:15470] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-14
[Mon Nov 17 09:20:05.864957 2025] [proxy_fcgi:error] [pid 40548:tid 40570] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:06.759234 2025] [proxy_fcgi:error] [pid 39449:tid 39456] [client 165.85.56.6:34246] AH01071: Got error 'PHP message: start 1763342406.2222', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:07.166389 2025] [proxy_fcgi:error] [pid 39449:tid 39456] [client 165.85.56.6:34246] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342407.166-1763342406.2222', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:07.811674 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: start 1763342407.1676', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:08.218468 2025] [proxy_fcgi:error] [pid 40548:tid 40562] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342408.2179-1763342407.1676', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:13.717799 2025] [proxy_fcgi:error] [pid 40548:tid 40569] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:14.623002 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: start 1763342414.1522', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:14.923821 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342414.9222-1763342414.1522', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:20:19.639492 2025] [proxy_fcgi:error] [pid 40548:tid 40560] [client 165.85.56.6:33328] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-15
[Mon Nov 17 09:22:17.217633 2025] [proxy_fcgi:error] [pid 65302:tid 65309] [client 165.85.56.6:51994] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:19.093646 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 165.85.56.6:51807] AH01071: Got error 'PHP message: start 1763342538.1551', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:19.420814 2025] [proxy_fcgi:error] [pid 40548:tid 40568] [client 165.85.56.6:51807] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342539.4204-1763342538.1551', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:20.119020 2025] [proxy_fcgi:error] [pid 65302:tid 65320] [client 165.85.56.6:51994] AH01071: Got error 'PHP message: start 1763342539.4266', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:20.291032 2025] [proxy_fcgi:error] [pid 65302:tid 65320] [client 165.85.56.6:51994] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342540.2907-1763342539.4266', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:26.702119 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.6:51994] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:28.331523 2025] [proxy_fcgi:error] [pid 65302:tid 65309] [client 165.85.56.6:51994] AH01071: Got error 'PHP message: start 1763342547.5449', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:22:28.332305 2025] [proxy_fcgi:error] [pid 65302:tid 65309] [client 165.85.56.6:51994] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342548.3319-1763342547.5449', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 09:24:29.340955 2025] [proxy_fcgi:error] [pid 65302:tid 65314] [client 165.85.56.6:56617] AH01071: Got error 'PHP message: start 1763342668.6249', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:24:29.342225 2025] [proxy_fcgi:error] [pid 65302:tid 65314] [client 165.85.56.6:56617] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342669.3416-1763342668.6249', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:26:30.564790 2025] [proxy_fcgi:error] [pid 40548:tid 40570] [client 165.85.56.6:57080] AH01071: Got error 'PHP message: start 1763342789.9486', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:26:30.565763 2025] [proxy_fcgi:error] [pid 40548:tid 40570] [client 165.85.56.6:57080] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342790.5652-1763342789.9486', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:28:31.649666 2025] [proxy_fcgi:error] [pid 65302:tid 65319] [client 165.85.56.6:34839] AH01071: Got error 'PHP message: start 1763342911.0418', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:28:31.650802 2025] [proxy_fcgi:error] [pid 65302:tid 65319] [client 165.85.56.6:34839] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763342911.6502-1763342911.0418', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:30:33.887850 2025] [proxy_fcgi:error] [pid 39537:tid 39563] [client 165.85.56.6:29146] AH01071: Got error 'PHP message: start 1763343033.206', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:30:33.888957 2025] [proxy_fcgi:error] [pid 39537:tid 39563] [client 165.85.56.6:29146] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343033.8884-1763343033.206', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:32:35.091291 2025] [proxy_fcgi:error] [pid 15150:tid 15158] [client 165.85.56.6:60813] AH01071: Got error 'PHP message: start 1763343154.505', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:32:35.092005 2025] [proxy_fcgi:error] [pid 15150:tid 15158] [client 165.85.56.6:60813] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343155.0913-1763343154.505', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:34:36.242312 2025] [proxy_fcgi:error] [pid 39451:tid 39531] [client 165.85.56.6:55155] AH01071: Got error 'PHP message: start 1763343275.5765', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:34:36.242992 2025] [proxy_fcgi:error] [pid 39451:tid 39531] [client 165.85.56.6:55155] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343276.2425-1763343275.5765', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:36:37.463759 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.6:3230] AH01071: Got error 'PHP message: start 1763343396.7223', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:36:37.464997 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.6:3230] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343397.4644-1763343396.7223', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:38:38.710673 2025] [proxy_fcgi:error] [pid 40548:tid 40550] [client 165.85.56.6:37112] AH01071: Got error 'PHP message: start 1763343518.0774', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:38:38.711730 2025] [proxy_fcgi:error] [pid 40548:tid 40550] [client 165.85.56.6:37112] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343518.7112-1763343518.0774', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:40:40.205669 2025] [proxy_fcgi:error] [pid 40548:tid 40572] [client 165.85.56.6:1794] AH01071: Got error 'PHP message: start 1763343639.6011', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:40:40.206685 2025] [proxy_fcgi:error] [pid 40548:tid 40572] [client 165.85.56.6:1794] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343640.2061-1763343639.6011', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:42:41.747974 2025] [proxy_fcgi:error] [pid 39537:tid 39555] [client 165.85.56.6:39435] AH01071: Got error 'PHP message: start 1763343761.0937', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:42:41.748944 2025] [proxy_fcgi:error] [pid 39537:tid 39555] [client 165.85.56.6:39435] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343761.7485-1763343761.0937', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:44:43.036602 2025] [proxy_fcgi:error] [pid 39449:tid 39469] [client 165.85.56.6:24918] AH01071: Got error 'PHP message: start 1763343882.3921', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:44:43.037342 2025] [proxy_fcgi:error] [pid 39449:tid 39469] [client 165.85.56.6:24918] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763343883.0368-1763343882.3921', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:46:44.098699 2025] [proxy_fcgi:error] [pid 65302:tid 65305] [client 165.85.56.6:6001] AH01071: Got error 'PHP message: start 1763344003.5019', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:46:44.099301 2025] [proxy_fcgi:error] [pid 65302:tid 65305] [client 165.85.56.6:6001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344004.0986-1763344003.5019', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:48:45.236632 2025] [proxy_fcgi:error] [pid 65302:tid 65317] [client 165.85.56.6:21814] AH01071: Got error 'PHP message: start 1763344124.6418', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:48:45.238661 2025] [proxy_fcgi:error] [pid 65302:tid 65317] [client 165.85.56.6:21814] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344125.2371-1763344124.6418', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:50:46.480615 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 165.85.56.6:53929] AH01071: Got error 'PHP message: start 1763344245.7984', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:50:46.481717 2025] [proxy_fcgi:error] [pid 39537:tid 39544] [client 165.85.56.6:53929] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344246.4806-1763344245.7984', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:52:48.124974 2025] [proxy_fcgi:error] [pid 39450:tid 39504] [client 165.85.56.6:40038] AH01071: Got error 'PHP message: start 1763344367.5072', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:52:48.128455 2025] [proxy_fcgi:error] [pid 39450:tid 39504] [client 165.85.56.6:40038] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344368.1267-1763344367.5072', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:54:49.332588 2025] [proxy_fcgi:error] [pid 39449:tid 39461] [client 165.85.56.6:19364] AH01071: Got error 'PHP message: start 1763344488.592', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:54:49.333712 2025] [proxy_fcgi:error] [pid 39449:tid 39461] [client 165.85.56.6:19364] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344489.3331-1763344488.592', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:56:51.699587 2025] [proxy_fcgi:error] [pid 65302:tid 65320] [client 165.85.56.6:36845] AH01071: Got error 'PHP message: start 1763344610.3606', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:56:51.700017 2025] [proxy_fcgi:error] [pid 65302:tid 65320] [client 165.85.56.6:36845] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344611.6995-1763344610.3606', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:58:53.176944 2025] [proxy_fcgi:error] [pid 39449:tid 39468] [client 165.85.56.6:12765] AH01071: Got error 'PHP message: start 1763344732.5359', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 09:58:53.177922 2025] [proxy_fcgi:error] [pid 39449:tid 39468] [client 165.85.56.6:12765] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344733.1774-1763344732.5359', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:00:54.176531 2025] [proxy_fcgi:error] [pid 39450:tid 39497] [client 165.85.56.6:60197] AH01071: Got error 'PHP message: start 1763344853.6262', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:00:54.177142 2025] [proxy_fcgi:error] [pid 39450:tid 39497] [client 165.85.56.6:60197] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344854.1759-1763344853.6262', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:02:55.978383 2025] [proxy_fcgi:error] [pid 39450:tid 39492] [client 165.85.56.6:24651] AH01071: Got error 'PHP message: start 1763344975.1422', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:02:55.979631 2025] [proxy_fcgi:error] [pid 39450:tid 39492] [client 165.85.56.6:24651] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763344975.9791-1763344975.1422', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:04:57.156018 2025] [proxy_fcgi:error] [pid 39451:tid 39528] [client 165.85.56.6:39344] AH01071: Got error 'PHP message: start 1763345096.4436', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:04:57.157301 2025] [proxy_fcgi:error] [pid 39451:tid 39528] [client 165.85.56.6:39344] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345097.1567-1763345096.4436', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:06:58.367394 2025] [proxy_fcgi:error] [pid 40548:tid 40569] [client 165.85.56.6:9228] AH01071: Got error 'PHP message: start 1763345217.6185', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:06:58.368794 2025] [proxy_fcgi:error] [pid 40548:tid 40569] [client 165.85.56.6:9228] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345218.3681-1763345217.6185', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:08:59.791774 2025] [proxy_fcgi:error] [pid 65302:tid 65315] [client 165.85.56.6:53954] AH01071: Got error 'PHP message: start 1763345338.9358', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:08:59.792989 2025] [proxy_fcgi:error] [pid 65302:tid 65315] [client 165.85.56.6:53954] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345339.7925-1763345338.9358', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:11:01.026989 2025] [proxy_fcgi:error] [pid 39537:tid 39553] [client 165.85.56.6:37587] AH01071: Got error 'PHP message: start 1763345460.256', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:11:01.028316 2025] [proxy_fcgi:error] [pid 39537:tid 39553] [client 165.85.56.6:37587] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345461.0278-1763345460.256', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:13:02.609223 2025] [proxy_fcgi:error] [pid 15150:tid 15167] [client 165.85.56.6:51474] AH01071: Got error 'PHP message: start 1763345581.8587', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:13:02.610155 2025] [proxy_fcgi:error] [pid 15150:tid 15167] [client 165.85.56.6:51474] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345582.6096-1763345581.8587', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:15:04.023145 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.6:60551] AH01071: Got error 'PHP message: start 1763345703.189', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:15:04.024431 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.6:60551] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345704.0238-1763345703.189', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:17:05.890536 2025] [proxy_fcgi:error] [pid 40548:tid 40567] [client 165.85.56.6:41041] AH01071: Got error 'PHP message: start 1763345824.874', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:17:05.891790 2025] [proxy_fcgi:error] [pid 40548:tid 40567] [client 165.85.56.6:41041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345825.8911-1763345824.874', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:19:07.308858 2025] [proxy_fcgi:error] [pid 39451:tid 39511] [client 165.85.56.6:7080] AH01071: Got error 'PHP message: start 1763345946.3415', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:19:07.309611 2025] [proxy_fcgi:error] [pid 39451:tid 39511] [client 165.85.56.6:7080] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763345947.3083-1763345946.3415', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:21:10.118495 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.6:53864] AH01071: Got error 'PHP message: start 1763346069.1526', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 10:21:10.119448 2025] [proxy_fcgi:error] [pid 65302:tid 65316] [client 165.85.56.6:53864] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763346070.119-1763346069.1526', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 11:59:01.271352 2025] [proxy_fcgi:error] [pid 39450:tid 39493] [client 165.85.56.6:18083] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 11:59:02.360663 2025] [proxy_fcgi:error] [pid 39450:tid 39497] [client 165.85.56.6:18083] AH01071: Got error 'PHP message: start 1763351941.8066', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 11:59:02.361378 2025] [proxy_fcgi:error] [pid 39450:tid 39497] [client 165.85.56.6:18083] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763351942.3609-1763351941.8066', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 11:59:03.289737 2025] [proxy_fcgi:error] [pid 39451:tid 39529] [client 165.85.56.6:43700] AH01071: Got error 'PHP message: start 1763351942.3634', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 11:59:03.290775 2025] [proxy_fcgi:error] [pid 39451:tid 39529] [client 165.85.56.6:43700] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763351943.2903-1763351942.3634', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 17 12:01:04.268643 2025] [proxy_fcgi:error] [pid 40548:tid 40555] [client 165.85.56.6:14432] AH01071: Got error 'PHP message: start 1763352063.6019', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:01:04.271374 2025] [proxy_fcgi:error] [pid 40548:tid 40555] [client 165.85.56.6:14432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352064.2689-1763352063.6019', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:03:05.505665 2025] [proxy_fcgi:error] [pid 15150:tid 15164] [client 165.85.56.6:10890] AH01071: Got error 'PHP message: start 1763352184.7733', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:03:05.506383 2025] [proxy_fcgi:error] [pid 15150:tid 15164] [client 165.85.56.6:10890] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352185.5059-1763352184.7733', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:05:06.963855 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.6:34084] AH01071: Got error 'PHP message: start 1763352306.1414', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:05:06.965007 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.6:34084] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352306.9644-1763352306.1414', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:07:08.425621 2025] [proxy_fcgi:error] [pid 65302:tid 65313] [client 165.85.56.6:18279] AH01071: Got error 'PHP message: start 1763352427.796', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:07:08.426019 2025] [proxy_fcgi:error] [pid 65302:tid 65313] [client 165.85.56.6:18279] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352428.4255-1763352427.796', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:09:10.954222 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.6:35390] AH01071: Got error 'PHP message: start 1763352550.2827', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:09:10.956129 2025] [proxy_fcgi:error] [pid 39537:tid 39562] [client 165.85.56.6:35390] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352550.9557-1763352550.2827', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:11:12.548969 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.6:28732] AH01071: Got error 'PHP message: start 1763352671.975', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:11:12.549974 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.6:28732] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352672.5494-1763352671.975', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:13:14.237389 2025] [proxy_fcgi:error] [pid 39449:tid 39474] [client 165.85.56.6:19054] AH01071: Got error 'PHP message: start 1763352793.4221', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:13:14.238494 2025] [proxy_fcgi:error] [pid 39449:tid 39474] [client 165.85.56.6:19054] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352794.238-1763352793.4221', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:15:15.445282 2025] [proxy_fcgi:error] [pid 15888:tid 15912] [client 165.85.56.6:41987] AH01071: Got error 'PHP message: start 1763352914.728', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:15:15.446146 2025] [proxy_fcgi:error] [pid 15888:tid 15912] [client 165.85.56.6:41987] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763352915.4456-1763352914.728', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:17:17.105187 2025] [proxy_fcgi:error] [pid 39451:tid 39510] [client 165.85.56.6:43986] AH01071: Got error 'PHP message: start 1763353036.4858', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:17:17.106179 2025] [proxy_fcgi:error] [pid 39451:tid 39510] [client 165.85.56.6:43986] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353037.1057-1763353036.4858', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:19:18.230865 2025] [proxy_fcgi:error] [pid 39451:tid 39515] [client 165.85.56.6:61953] AH01071: Got error 'PHP message: start 1763353157.6098', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:19:18.232668 2025] [proxy_fcgi:error] [pid 39451:tid 39515] [client 165.85.56.6:61953] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353158.231-1763353157.6098', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:21:19.745012 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.6:27516] AH01071: Got error 'PHP message: start 1763353279.0602', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:21:19.746376 2025] [proxy_fcgi:error] [pid 39449:tid 39473] [client 165.85.56.6:27516] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353279.7459-1763353279.0602', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:23:21.072464 2025] [proxy_fcgi:error] [pid 17857:tid 17871] [client 165.85.56.6:44556] AH01071: Got error 'PHP message: start 1763353400.3663', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:23:21.073847 2025] [proxy_fcgi:error] [pid 17857:tid 17871] [client 165.85.56.6:44556] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353401.0732-1763353400.3663', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:25:22.181075 2025] [proxy_fcgi:error] [pid 19303:tid 19315] [client 165.85.56.6:21538] AH01071: Got error 'PHP message: start 1763353521.4897', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:25:22.182221 2025] [proxy_fcgi:error] [pid 19303:tid 19315] [client 165.85.56.6:21538] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353522.1816-1763353521.4897', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:27:23.386294 2025] [proxy_fcgi:error] [pid 39449:tid 39477] [client 165.85.56.6:28374] AH01071: Got error 'PHP message: start 1763353642.7169', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:27:23.387205 2025] [proxy_fcgi:error] [pid 39449:tid 39477] [client 165.85.56.6:28374] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353643.3867-1763353642.7169', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:29:24.963514 2025] [proxy_fcgi:error] [pid 19303:tid 19326] [client 165.85.56.6:16692] AH01071: Got error 'PHP message: start 1763353764.3029', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:29:24.965293 2025] [proxy_fcgi:error] [pid 19303:tid 19326] [client 165.85.56.6:16692] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353764.9648-1763353764.3029', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:31:26.029484 2025] [proxy_fcgi:error] [pid 19303:tid 19315] [client 165.85.56.6:22435] AH01071: Got error 'PHP message: start 1763353885.4149', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:31:26.030354 2025] [proxy_fcgi:error] [pid 19303:tid 19315] [client 165.85.56.6:22435] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763353886.0299-1763353885.4149', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:33:27.644271 2025] [proxy_fcgi:error] [pid 19303:tid 19326] [client 165.85.56.6:36684] AH01071: Got error 'PHP message: start 1763354006.9685', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:33:27.645456 2025] [proxy_fcgi:error] [pid 19303:tid 19326] [client 165.85.56.6:36684] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354007.6449-1763354006.9685', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:35:28.957614 2025] [proxy_fcgi:error] [pid 16993:tid 17004] [client 165.85.56.6:53135] AH01071: Got error 'PHP message: start 1763354128.2472', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:35:28.958487 2025] [proxy_fcgi:error] [pid 16993:tid 17004] [client 165.85.56.6:53135] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354128.958-1763354128.2472', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:37:30.501127 2025] [proxy_fcgi:error] [pid 39449:tid 39463] [client 165.85.56.6:44494] AH01071: Got error 'PHP message: start 1763354249.8017', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:37:30.502082 2025] [proxy_fcgi:error] [pid 39449:tid 39463] [client 165.85.56.6:44494] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354250.5016-1763354249.8017', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:39:31.661088 2025] [proxy_fcgi:error] [pid 39451:tid 39515] [client 165.85.56.6:49036] AH01071: Got error 'PHP message: start 1763354370.9971', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:39:31.662144 2025] [proxy_fcgi:error] [pid 39451:tid 39515] [client 165.85.56.6:49036] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354371.6615-1763354370.9971', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:41:33.546170 2025] [proxy_fcgi:error] [pid 15888:tid 15906] [client 165.85.56.6:32559] AH01071: Got error 'PHP message: start 1763354492.5571', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:41:33.546996 2025] [proxy_fcgi:error] [pid 15888:tid 15906] [client 165.85.56.6:32559] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354493.5465-1763354492.5571', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:43:34.665746 2025] [proxy_fcgi:error] [pid 65302:tid 65318] [client 165.85.56.6:41005] AH01071: Got error 'PHP message: start 1763354613.9998', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:43:34.666313 2025] [proxy_fcgi:error] [pid 65302:tid 65318] [client 165.85.56.6:41005] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354614.6659-1763354613.9998', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:45:36.092815 2025] [proxy_fcgi:error] [pid 19303:tid 19307] [client 165.85.56.6:27619] AH01071: Got error 'PHP message: start 1763354735.4273', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:45:36.093811 2025] [proxy_fcgi:error] [pid 19303:tid 19307] [client 165.85.56.6:27619] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354736.0932-1763354735.4273', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:47:37.234063 2025] [proxy_fcgi:error] [pid 16993:tid 17016] [client 165.85.56.6:42683] AH01071: Got error 'PHP message: start 1763354856.636', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:47:37.235194 2025] [proxy_fcgi:error] [pid 16993:tid 17016] [client 165.85.56.6:42683] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354857.2347-1763354856.636', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:49:38.349963 2025] [proxy_fcgi:error] [pid 65302:tid 65305] [client 165.85.56.6:46093] AH01071: Got error 'PHP message: start 1763354977.6828', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:49:38.351260 2025] [proxy_fcgi:error] [pid 65302:tid 65305] [client 165.85.56.6:46093] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763354978.3506-1763354977.6828', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:51:39.797696 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.6:44375] AH01071: Got error 'PHP message: start 1763355099.0644', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:51:39.798854 2025] [proxy_fcgi:error] [pid 40548:tid 40558] [client 165.85.56.6:44375] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763355099.7983-1763355099.0644', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:53:41.292559 2025] [proxy_fcgi:error] [pid 39449:tid 39455] [client 165.85.56.6:32538] AH01071: Got error 'PHP message: start 1763355220.4447', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:53:41.293569 2025] [proxy_fcgi:error] [pid 39449:tid 39455] [client 165.85.56.6:32538] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763355221.2931-1763355220.4447', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:55:42.895845 2025] [proxy_fcgi:error] [pid 39451:tid 39526] [client 165.85.56.6:51856] AH01071: Got error 'PHP message: start 1763355342.2457', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:55:42.896733 2025] [proxy_fcgi:error] [pid 39451:tid 39526] [client 165.85.56.6:51856] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763355342.8963-1763355342.2457', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:57:44.024817 2025] [proxy_fcgi:error] [pid 15888:tid 15894] [client 165.85.56.6:62605] AH01071: Got error 'PHP message: start 1763355463.3121', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 12:57:44.025782 2025] [proxy_fcgi:error] [pid 15888:tid 15894] [client 165.85.56.6:62605] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763355464.0252-1763355463.3121', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 13:16:41.908989 2025] [:error] [pid 19120:tid 19122] [client 125.75.66.97:44354] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRqvuYO1H08wfYmhCh-27wAAAsA"]
[Mon Nov 17 14:39:05.424092 2025] [proxy_fcgi:error] [pid 39537:tid 39543] [client 165.85.56.6:7690] AH01071: Got error 'PHP message: start 1763361544.7863', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 14:39:05.425039 2025] [proxy_fcgi:error] [pid 39537:tid 39543] [client 165.85.56.6:7690] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763361545.4246-1763361544.7863', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 17 18:57:10.110636 2025] [:error] [pid 31419:tid 31440] [client 71.47.28.125:57524] [client 71.47.28.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 71.47.28.125, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRr_hgHQ5Sbp7elmDZiL2AAAApM"]
[Mon Nov 17 18:57:10.125566 2025] [proxy_fcgi:error] [pid 31419:tid 31440] [client 71.47.28.125:57524] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 18:57:20.889750 2025] [:error] [pid 20913:tid 20931] [client 117.196.90.235:50256] [client 117.196.90.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.196.90.235, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRr_kOkafGNeN3nY1bdOkQAAA1A"]
[Mon Nov 17 18:57:20.894792 2025] [proxy_fcgi:error] [pid 20913:tid 20931] [client 117.196.90.235:50256] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 19:01:22.368624 2025] [:error] [pid 39537:tid 39553] [client 103.248.222.116:51710] [client 103.248.222.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.248.222.116, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRsAgoZRrh1pcrdcLB-0CAAAAM0"]
[Mon Nov 17 19:01:22.381489 2025] [proxy_fcgi:error] [pid 39537:tid 39553] [client 103.248.222.116:51710] AH01071: Got error 'Primary script unknown'
[Mon Nov 17 20:35:09.995826 2025] [:error] [pid 31419:tid 31421] [client 43.131.243.61:41238] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRsWfQHQ5Sbp7elmDZieYQAAAoA"]
[Tue Nov 18 01:49:25.397257 2025] [:error] [pid 39189:tid 39213] [client 64.227.151.89:29656] [client 64.227.151.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aRtgJZJJLi753QwyqGzmpAAAAJQ"]
[Tue Nov 18 01:49:27.617182 2025] [:error] [pid 40793:tid 40859] [client 64.227.151.89:60874] [client 64.227.151.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aRtgJwzccxeNeH-NUVg2lQAAAEk"]
[Tue Nov 18 02:16:41.839970 2025] [proxy_fcgi:error] [pid 40793:tid 40857] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:41.985441 2025] [proxy_fcgi:error] [pid 40793:tid 40859] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.103032 2025] [proxy_fcgi:error] [pid 40793:tid 40856] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.229663 2025] [proxy_fcgi:error] [pid 40793:tid 40850] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.351123 2025] [proxy_fcgi:error] [pid 40793:tid 40855] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.566990 2025] [proxy_fcgi:error] [pid 40793:tid 40871] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.701414 2025] [proxy_fcgi:error] [pid 40793:tid 40873] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.819515 2025] [proxy_fcgi:error] [pid 40793:tid 40862] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:42.955221 2025] [proxy_fcgi:error] [pid 40793:tid 40866] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:43.109978 2025] [proxy_fcgi:error] [pid 40793:tid 40863] [client 130.33.77.13:54277] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:16:43.229154 2025] [:error] [pid 40793:tid 40859] [client 130.33.77.13:54277] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/filei.php"] [unique_id "aRtmiwzccxeNeH-NUVhBQAAAAEk"]
[Tue Nov 18 02:16:44.942408 2025] [:error] [pid 40561:tid 40618] [client 130.33.77.13:63023] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/filei.php"] [unique_id "aRtmjJdU597fIdQPRD_SMAAAANY"]
[Tue Nov 18 02:16:54.752815 2025] [:error] [pid 39189:tid 39210] [client 130.33.77.13:54321] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/filei.php"] [unique_id "aRtmlpJJLi753QwyqGz0bgAAAJE"]
[Tue Nov 18 02:16:56.374441 2025] [:error] [pid 39189:tid 39207] [client 130.33.77.13:15423] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/filei.php"] [unique_id "aRtmmJJJLi753QwyqGz0cwAAAI4"]
[Tue Nov 18 02:16:57.251733 2025] [:error] [pid 40553:tid 40591] [client 130.33.77.13:58352] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v2.php"] [unique_id "aRtmmduLE1BqoX0RcsL5cQAAABY"]
[Tue Nov 18 02:17:03.009761 2025] [:error] [pid 40562:tid 40637] [client 130.33.77.13:15407] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v2.php"] [unique_id "aRtmnx18kaCmPuHE4a8guAAAAU4"]
[Tue Nov 18 02:17:07.530745 2025] [:error] [pid 39189:tid 39207] [client 130.33.77.13:54298] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v2.php"] [unique_id "aRtmo5JJLi753QwyqGz0gwAAAI4"]
[Tue Nov 18 02:17:11.858384 2025] [:error] [pid 40793:tid 40855] [client 130.33.77.13:63033] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v2.php"] [unique_id "aRtmpwzccxeNeH-NUVhBXAAAAEU"]
[Tue Nov 18 02:17:15.483028 2025] [:error] [pid 40553:tid 40581] [client 130.33.77.13:15404] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aRtmq9uLE1BqoX0RcsL5fwAAAAw"]
[Tue Nov 18 02:17:23.439610 2025] [:error] [pid 40562:tid 40647] [client 130.33.77.13:15366] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aRtmsx18kaCmPuHE4a8g0AAAAVg"]
[Tue Nov 18 02:17:24.621332 2025] [:error] [pid 40562:tid 40639] [client 130.33.77.13:15480] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aRtmtB18kaCmPuHE4a8g2AAAAVA"]
[Tue Nov 18 02:18:01.080851 2025] [proxy_fcgi:error] [pid 39189:tid 39210] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:01.210929 2025] [proxy_fcgi:error] [pid 39189:tid 39206] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:01.557311 2025] [proxy_fcgi:error] [pid 39189:tid 39208] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:01.705170 2025] [proxy_fcgi:error] [pid 39189:tid 39207] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:01.823261 2025] [proxy_fcgi:error] [pid 39189:tid 39212] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:01.941578 2025] [proxy_fcgi:error] [pid 39189:tid 39196] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:02.197808 2025] [proxy_fcgi:error] [pid 39189:tid 39209] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:02.331741 2025] [proxy_fcgi:error] [pid 39189:tid 39215] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:02.453921 2025] [proxy_fcgi:error] [pid 39189:tid 39211] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:02.580957 2025] [proxy_fcgi:error] [pid 39189:tid 39204] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:02.706484 2025] [proxy_fcgi:error] [pid 39189:tid 39203] [client 130.33.77.13:61208] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:18:02.821018 2025] [:error] [pid 39189:tid 39210] [client 130.33.77.13:61208] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asasx.php"] [unique_id "aRtm2pJJLi753QwyqGz1EgAAAJE"]
[Tue Nov 18 02:18:09.028630 2025] [:error] [pid 39189:tid 39211] [client 130.33.77.13:56368] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asasx.php"] [unique_id "aRtm4ZJJLi753QwyqGz1HgAAAJI"]
[Tue Nov 18 02:18:22.207625 2025] [:error] [pid 40562:tid 40646] [client 130.33.77.13:62666] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lc.php"] [unique_id "aRtm7h18kaCmPuHE4a8hQgAAAVc"]
[Tue Nov 18 02:18:56.111625 2025] [:error] [pid 40562:tid 40625] [client 130.33.77.13:59805] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nij.php"] [unique_id "aRtnEB18kaCmPuHE4a8hYQAAAUI"]
[Tue Nov 18 02:19:22.916811 2025] [proxy_fcgi:error] [pid 40793:tid 40872] [client 130.33.77.13:61718] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:23.036006 2025] [proxy_fcgi:error] [pid 40793:tid 40864] [client 130.33.77.13:61718] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:23.154111 2025] [:error] [pid 40793:tid 40862] [client 130.33.77.13:61718] [client 130.33.77.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aRtnKwzccxeNeH-NUVhB7AAAAEw"]
[Tue Nov 18 02:19:44.504222 2025] [proxy_fcgi:error] [pid 39189:tid 39217] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:44.805434 2025] [proxy_fcgi:error] [pid 39189:tid 39213] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:44.943609 2025] [proxy_fcgi:error] [pid 39189:tid 39214] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:45.061930 2025] [proxy_fcgi:error] [pid 39189:tid 39205] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:45.181427 2025] [proxy_fcgi:error] [pid 39189:tid 39210] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:45.611898 2025] [proxy_fcgi:error] [pid 39189:tid 39215] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:45.926289 2025] [proxy_fcgi:error] [pid 39189:tid 39212] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:46.061372 2025] [proxy_fcgi:error] [pid 39189:tid 39198] [client 130.33.77.13:55144] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:46.229885 2025] [:error] [pid 39189:tid 39216] [client 130.33.77.13:55144] [client 130.33.77.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aRtnQpJJLi753QwyqGz2NQAAAJc"]
[Tue Nov 18 02:19:47.980235 2025] [proxy_fcgi:error] [pid 40793:tid 40870] [client 130.33.77.13:54358] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:19:48.105184 2025] [:error] [pid 40793:tid 40869] [client 130.33.77.13:54358] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRtnRAzccxeNeH-NUVhCOAAAAFM"]
[Tue Nov 18 02:19:48.831300 2025] [:error] [pid 39189:tid 39215] [client 130.33.77.13:61705] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRtnRJJJLi753QwyqGz2OQAAAJY"]
[Tue Nov 18 02:20:13.787309 2025] [:error] [pid 39189:tid 39200] [client 130.33.77.13:55111] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cf.php"] [unique_id "aRtnXZJJLi753QwyqGz2sgAAAIc"]
[Tue Nov 18 02:20:15.955378 2025] [:error] [pid 40793:tid 40865] [client 130.33.77.13:55166] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cf.php"] [unique_id "aRtnXwzccxeNeH-NUVhCbgAAAE8"]
[Tue Nov 18 02:20:16.979188 2025] [:error] [pid 40793:tid 40855] [client 130.33.77.13:54344] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cf.php"] [unique_id "aRtnYAzccxeNeH-NUVhCcgAAAEU"]
[Tue Nov 18 02:20:27.018007 2025] [:error] [pid 40562:tid 40635] [client 130.33.77.13:55089] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/get.php"] [unique_id "aRtnax18kaCmPuHE4a8h8QAAAUw"]
[Tue Nov 18 02:20:28.885906 2025] [:error] [pid 40561:tid 40620] [client 130.33.77.13:64890] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/get.php"] [unique_id "aRtnbJdU597fIdQPRD_TPwAAANg"]
[Tue Nov 18 02:20:33.922486 2025] [:error] [pid 40793:tid 40853] [client 130.33.77.13:55100] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/get.php"] [unique_id "aRtncQzccxeNeH-NUVhCiwAAAEM"]
[Tue Nov 18 02:20:39.155312 2025] [:error] [pid 39189:tid 39198] [client 130.33.77.13:55104] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/get.php"] [unique_id "aRtnd5JJLi753QwyqGz23gAAAIU"]
[Tue Nov 18 02:20:40.665809 2025] [:error] [pid 40561:tid 40610] [client 130.33.77.13:55139] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aRtneJdU597fIdQPRD_TSgAAAM4"]
[Tue Nov 18 02:21:04.960288 2025] [proxy_fcgi:error] [pid 40562:tid 40642] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:05.078901 2025] [proxy_fcgi:error] [pid 40562:tid 40628] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:05.220786 2025] [proxy_fcgi:error] [pid 40562:tid 40630] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:05.340506 2025] [proxy_fcgi:error] [pid 40562:tid 40637] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:05.591936 2025] [proxy_fcgi:error] [pid 40562:tid 40629] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:05.788665 2025] [proxy_fcgi:error] [pid 40562:tid 40634] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:05.906123 2025] [proxy_fcgi:error] [pid 40562:tid 40624] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:06.033679 2025] [proxy_fcgi:error] [pid 40562:tid 40647] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:06.153888 2025] [proxy_fcgi:error] [pid 40562:tid 40625] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:06.281773 2025] [proxy_fcgi:error] [pid 40562:tid 40641] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:06.446119 2025] [proxy_fcgi:error] [pid 40562:tid 40626] [client 130.33.77.13:15574] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:21:06.563005 2025] [:error] [pid 40562:tid 40635] [client 130.33.77.13:15574] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xojryvch.php"] [unique_id "aRtnkh18kaCmPuHE4a8iEwAAAUw"]
[Tue Nov 18 02:21:07.934046 2025] [:error] [pid 40793:tid 40867] [client 130.33.77.13:55095] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xojryvch.php"] [unique_id "aRtnkwzccxeNeH-NUVhC1gAAAFE"]
[Tue Nov 18 02:21:09.252257 2025] [:error] [pid 39189:tid 39217] [client 130.33.77.13:15807] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xojryvch.php"] [unique_id "aRtnlZJJLi753QwyqGz3GQAAAJg"]
[Tue Nov 18 02:21:13.270301 2025] [:error] [pid 40562:tid 40646] [client 130.33.77.13:15571] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xojryvch.php"] [unique_id "aRtnmR18kaCmPuHE4a8iMAAAAVc"]
[Tue Nov 18 02:21:14.681741 2025] [:error] [pid 40561:tid 40605] [client 130.33.77.13:15569] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/reyna.php"] [unique_id "aRtnmpdU597fIdQPRD_TjgAAAMk"]
[Tue Nov 18 02:21:18.505418 2025] [:error] [pid 40793:tid 40865] [client 130.33.77.13:59851] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/reyna.php"] [unique_id "aRtnngzccxeNeH-NUVhC7wAAAE8"]
[Tue Nov 18 02:21:22.483254 2025] [:error] [pid 39189:tid 39206] [client 130.33.77.13:15789] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/reyna.php"] [unique_id "aRtnopJJLi753QwyqGz3LgAAAI0"]
[Tue Nov 18 02:21:27.132757 2025] [:error] [pid 40561:tid 40620] [client 130.33.77.13:15747] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/reyna.php"] [unique_id "aRtnp5dU597fIdQPRD_TmQAAANg"]
[Tue Nov 18 02:21:30.648359 2025] [:error] [pid 39189:tid 39198] [client 130.33.77.13:61309] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/css/index.php"] [unique_id "aRtnqpJJLi753QwyqGz3UQAAAIU"]
[Tue Nov 18 02:21:31.587316 2025] [:error] [pid 39189:tid 39202] [client 130.33.77.13:61264] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/css/index.php"] [unique_id "aRtnq5JJLi753QwyqGz3VgAAAIk"]
[Tue Nov 18 02:21:32.811563 2025] [:error] [pid 40793:tid 40874] [client 130.33.77.13:15744] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/css/index.php"] [unique_id "aRtnrAzccxeNeH-NUVhDFwAAAFg"]
[Tue Nov 18 02:21:34.392427 2025] [:error] [pid 39189:tid 39199] [client 130.33.77.13:59860] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/css/index.php"] [unique_id "aRtnrpJJLi753QwyqGz3YQAAAIY"]
[Tue Nov 18 02:21:38.390530 2025] [:error] [pid 39189:tid 39206] [client 130.33.77.13:55072] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/unzip.php"] [unique_id "aRtnspJJLi753QwyqGz3bgAAAI0"]
[Tue Nov 18 02:21:46.770294 2025] [:error] [pid 40793:tid 40859] [client 130.33.77.13:15790] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/unzip.php"] [unique_id "aRtnugzccxeNeH-NUVhDJgAAAEk"]
[Tue Nov 18 02:21:48.960449 2025] [:error] [pid 40793:tid 40867] [client 130.33.77.13:59896] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/unzip.php"] [unique_id "aRtnvAzccxeNeH-NUVhDKwAAAFE"]
[Tue Nov 18 02:21:53.861780 2025] [:error] [pid 40553:tid 40591] [client 130.33.77.13:59884] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cool.php"] [unique_id "aRtnwduLE1BqoX0RcsL7AAAAABY"]
[Tue Nov 18 02:21:55.314086 2025] [:error] [pid 39189:tid 39202] [client 130.33.77.13:55041] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cool.php"] [unique_id "aRtnw5JJLi753QwyqGz3kQAAAIk"]
[Tue Nov 18 02:21:57.259647 2025] [:error] [pid 39189:tid 39216] [client 130.33.77.13:55057] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cool.php"] [unique_id "aRtnxZJJLi753QwyqGz3kgAAAJc"]
[Tue Nov 18 02:22:06.619750 2025] [proxy_fcgi:error] [pid 40561:tid 40620] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:06.739143 2025] [proxy_fcgi:error] [pid 40561:tid 40618] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:07.295469 2025] [proxy_fcgi:error] [pid 40561:tid 40599] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:07.412313 2025] [proxy_fcgi:error] [pid 40561:tid 40614] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:07.575577 2025] [proxy_fcgi:error] [pid 40561:tid 40602] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:07.705625 2025] [proxy_fcgi:error] [pid 40561:tid 40616] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:07.914136 2025] [proxy_fcgi:error] [pid 40561:tid 40615] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:08.032956 2025] [proxy_fcgi:error] [pid 40561:tid 40607] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:08.172985 2025] [proxy_fcgi:error] [pid 40561:tid 40606] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:10.939832 2025] [proxy_fcgi:error] [pid 40561:tid 40601] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:11.057777 2025] [proxy_fcgi:error] [pid 40561:tid 40613] [client 130.33.77.13:59848] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:22:11.400455 2025] [:error] [pid 40561:tid 40604] [client 130.33.77.13:59848] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aRtn05dU597fIdQPRD_T8QAAAMg"]
[Tue Nov 18 02:22:13.823951 2025] [:error] [pid 40553:tid 40592] [client 130.33.77.13:15759] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aRtn1duLE1BqoX0RcsL7EAAAABc"]
[Tue Nov 18 02:22:15.283244 2025] [:error] [pid 39189:tid 39214] [client 130.33.77.13:64844] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aRtn15JJLi753QwyqGz3swAAAJU"]
[Tue Nov 18 02:22:17.197174 2025] [:error] [pid 40561:tid 40608] [client 130.33.77.13:15777] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aRtn2ZdU597fIdQPRD_T_wAAAMw"]
[Tue Nov 18 02:22:20.168737 2025] [:error] [pid 40562:tid 40634] [client 130.33.77.13:61271] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ahax.php"] [unique_id "aRtn3B18kaCmPuHE4a8isgAAAUs"]
[Tue Nov 18 02:22:22.916257 2025] [:error] [pid 40793:tid 40850] [client 130.33.77.13:15775] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ahax.php"] [unique_id "aRtn3gzccxeNeH-NUVhDYgAAAEA"]
[Tue Nov 18 02:22:25.336431 2025] [:error] [pid 40793:tid 40874] [client 130.33.77.13:55081] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ahax.php"] [unique_id "aRtn4QzccxeNeH-NUVhDYwAAAFg"]
[Tue Nov 18 02:22:27.370928 2025] [:error] [pid 40562:tid 40630] [client 130.33.77.13:59852] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ahax.php"] [unique_id "aRtn4x18kaCmPuHE4a8ivAAAAUc"]
[Tue Nov 18 02:22:28.615504 2025] [:error] [pid 40561:tid 40619] [client 130.33.77.13:56704] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cache.php"] [unique_id "aRtn5JdU597fIdQPRD_UCAAAANc"]
[Tue Nov 18 02:22:29.125946 2025] [:error] [pid 40793:tid 40859] [client 130.33.77.13:61281] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cache.php"] [unique_id "aRtn5QzccxeNeH-NUVhDaQAAAEk"]
[Tue Nov 18 02:22:30.401468 2025] [:error] [pid 40553:tid 40570] [client 130.33.77.13:15746] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cache.php"] [unique_id "aRtn5tuLE1BqoX0RcsL7HwAAAAI"]
[Tue Nov 18 02:22:31.655077 2025] [:error] [pid 40561:tid 40605] [client 130.33.77.13:15766] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cache.php"] [unique_id "aRtn55dU597fIdQPRD_UCwAAAMk"]
[Tue Nov 18 02:22:33.754769 2025] [:error] [pid 40562:tid 40630] [client 130.33.77.13:61278] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ffile.php"] [unique_id "aRtn6R18kaCmPuHE4a8iwgAAAUc"]
[Tue Nov 18 02:22:35.703435 2025] [:error] [pid 40793:tid 40858] [client 130.33.77.13:56725] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ffile.php"] [unique_id "aRtn6wzccxeNeH-NUVhDbwAAAEg"]
[Tue Nov 18 02:22:39.496661 2025] [:error] [pid 40793:tid 40872] [client 130.33.77.13:61253] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ffile.php"] [unique_id "aRtn7wzccxeNeH-NUVhDdAAAAFY"]
[Tue Nov 18 02:22:40.733088 2025] [:error] [pid 40553:tid 40593] [client 130.33.77.13:55092] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ffile.php"] [unique_id "aRtn8NuLE1BqoX0RcsL7KwAAABg"]
[Tue Nov 18 02:22:41.802312 2025] [:error] [pid 40562:tid 40643] [client 130.33.77.13:15737] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nxac.php"] [unique_id "aRtn8R18kaCmPuHE4a8i0AAAAVQ"]
[Tue Nov 18 02:23:02.638162 2025] [:error] [pid 40793:tid 40863] [client 130.33.77.13:59840] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/thh.php"] [unique_id "aRtoBgzccxeNeH-NUVhDlQAAAE0"]
[Tue Nov 18 02:23:10.301892 2025] [:error] [pid 39189:tid 39195] [client 130.33.77.13:56710] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/thh.php"] [unique_id "aRtoDpJJLi753QwyqGz38gAAAII"]
[Tue Nov 18 02:23:11.037626 2025] [proxy_fcgi:error] [pid 40793:tid 40864] [client 130.33.77.13:15792] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:11.203017 2025] [:error] [pid 40793:tid 40851] [client 130.33.77.13:15792] [client 130.33.77.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/buy.php"] [unique_id "aRtoDwzccxeNeH-NUVhDnwAAAEE"]
[Tue Nov 18 02:23:16.524344 2025] [proxy_fcgi:error] [pid 40553:tid 40593] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:16.654290 2025] [proxy_fcgi:error] [pid 40553:tid 40585] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:16.793773 2025] [proxy_fcgi:error] [pid 40553:tid 40579] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:16.912687 2025] [proxy_fcgi:error] [pid 40553:tid 40583] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:17.046268 2025] [proxy_fcgi:error] [pid 40553:tid 40576] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:17.164986 2025] [proxy_fcgi:error] [pid 40553:tid 40573] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:17.416592 2025] [proxy_fcgi:error] [pid 40553:tid 40578] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:17.570843 2025] [proxy_fcgi:error] [pid 40553:tid 40591] [client 130.33.77.13:56747] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:23:17.708161 2025] [:error] [pid 40553:tid 40588] [client 130.33.77.13:56747] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ar.php"] [unique_id "aRtoFduLE1BqoX0RcsL7YAAAABM"]
[Tue Nov 18 02:23:22.337474 2025] [:error] [pid 40793:tid 40862] [client 130.33.77.13:56722] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ar.php"] [unique_id "aRtoGgzccxeNeH-NUVhDsQAAAEw"]
[Tue Nov 18 02:23:23.483316 2025] [:error] [pid 40562:tid 40630] [client 130.33.77.13:59890] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ar.php"] [unique_id "aRtoGx18kaCmPuHE4a8i_gAAAUc"]
[Tue Nov 18 02:23:24.405799 2025] [:error] [pid 40793:tid 40855] [client 130.33.77.13:61282] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ar.php"] [unique_id "aRtoHAzccxeNeH-NUVhDtQAAAEU"]
[Tue Nov 18 02:23:28.383292 2025] [:error] [pid 40561:tid 40613] [client 130.33.77.13:15696] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bv3.php"] [unique_id "aRtoIJdU597fIdQPRD_UbgAAANE"]
[Tue Nov 18 02:23:31.375027 2025] [:error] [pid 40553:tid 40591] [client 130.33.77.13:61250] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bv3.php"] [unique_id "aRtoI9uLE1BqoX0RcsL7ZgAAABY"]
[Tue Nov 18 02:23:32.940470 2025] [:error] [pid 40553:tid 40580] [client 130.33.77.13:56760] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bv3.php"] [unique_id "aRtoJNuLE1BqoX0RcsL7ZwAAAAs"]
[Tue Nov 18 02:23:36.411691 2025] [:error] [pid 40562:tid 40633] [client 130.33.77.13:61283] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bv3.php"] [unique_id "aRtoKB18kaCmPuHE4a8jDQAAAUo"]
[Tue Nov 18 02:23:38.321983 2025] [:error] [pid 39189:tid 39211] [client 130.33.77.13:56744] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aa.php"] [unique_id "aRtoKpJJLi753QwyqGz4CwAAAJI"]
[Tue Nov 18 02:23:40.571730 2025] [:error] [pid 40553:tid 40584] [client 130.33.77.13:15700] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aa.php"] [unique_id "aRtoLNuLE1BqoX0RcsL7dgAAAA8"]
[Tue Nov 18 02:23:42.175208 2025] [:error] [pid 40793:tid 40866] [client 130.33.77.13:56759] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aa.php"] [unique_id "aRtoLgzccxeNeH-NUVhDxgAAAFA"]
[Tue Nov 18 02:23:42.970086 2025] [:error] [pid 40553:tid 40569] [client 130.33.77.13:59867] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aa.php"] [unique_id "aRtoLtuLE1BqoX0RcsL7eAAAAAE"]
[Tue Nov 18 02:23:44.015652 2025] [:error] [pid 40553:tid 40578] [client 130.33.77.13:59859] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/racs3.php"] [unique_id "aRtoMNuLE1BqoX0RcsL7egAAAAk"]
[Tue Nov 18 02:23:47.411461 2025] [:error] [pid 39189:tid 39203] [client 130.33.77.13:15741] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/racs3.php"] [unique_id "aRtoM5JJLi753QwyqGz4FwAAAIo"]
[Tue Nov 18 02:24:00.662358 2025] [:error] [pid 40793:tid 40854] [client 130.33.77.13:56753] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content.php"] [unique_id "aRtoQAzccxeNeH-NUVhD8QAAAEQ"]
[Tue Nov 18 02:24:02.625504 2025] [:error] [pid 40553:tid 40570] [client 130.33.77.13:16091] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content.php"] [unique_id "aRtoQtuLE1BqoX0RcsL7ngAAAAI"]
[Tue Nov 18 02:24:04.034610 2025] [:error] [pid 39189:tid 39214] [client 130.33.77.13:16108] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content.php"] [unique_id "aRtoRJJJLi753QwyqGz4QQAAAJU"]
[Tue Nov 18 02:24:08.348960 2025] [:error] [pid 40561:tid 40615] [client 130.33.77.13:15680] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content.php"] [unique_id "aRtoSJdU597fIdQPRD_UzQAAANM"]
[Tue Nov 18 02:24:14.369499 2025] [:error] [pid 40562:tid 40627] [client 130.33.77.13:15896] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lufix.php"] [unique_id "aRtoTh18kaCmPuHE4a8jNgAAAUQ"]
[Tue Nov 18 02:24:22.332577 2025] [proxy_fcgi:error] [pid 39189:tid 39199] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:22.647183 2025] [proxy_fcgi:error] [pid 39189:tid 39206] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:22.778423 2025] [proxy_fcgi:error] [pid 39189:tid 39197] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:22.898965 2025] [proxy_fcgi:error] [pid 39189:tid 39194] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:23.038939 2025] [proxy_fcgi:error] [pid 39189:tid 39201] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:23.481683 2025] [proxy_fcgi:error] [pid 39189:tid 39207] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:23.598543 2025] [proxy_fcgi:error] [pid 39189:tid 39204] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:23.716604 2025] [proxy_fcgi:error] [pid 39189:tid 39217] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:23.837635 2025] [proxy_fcgi:error] [pid 39189:tid 39203] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:23.954610 2025] [proxy_fcgi:error] [pid 39189:tid 39209] [client 130.33.77.13:15872] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:24:24.079091 2025] [:error] [pid 39189:tid 39202] [client 130.33.77.13:15872] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aRtoWJJJLi753QwyqGz4WwAAAIk"]
[Tue Nov 18 02:24:28.051779 2025] [:error] [pid 40562:tid 40642] [client 130.33.77.13:56742] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aRtoXB18kaCmPuHE4a8jRQAAAVM"]
[Tue Nov 18 02:24:33.738508 2025] [:error] [pid 39189:tid 39210] [client 130.33.77.13:15733] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aRtoYZJJLi753QwyqGz4aAAAAJE"]
[Tue Nov 18 02:24:40.688425 2025] [:error] [pid 39189:tid 39215] [client 130.33.77.13:59846] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo.php"] [unique_id "aRtoaJJJLi753QwyqGz4ewAAAJY"]
[Tue Nov 18 02:24:42.937113 2025] [:error] [pid 40793:tid 40871] [client 130.33.77.13:15915] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo.php"] [unique_id "aRtoagzccxeNeH-NUVhEHgAAAFU"]
[Tue Nov 18 02:24:45.748645 2025] [:error] [pid 40562:tid 40638] [client 130.33.77.13:64781] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo.php"] [unique_id "aRtobR18kaCmPuHE4a8jVQAAAU8"]
[Tue Nov 18 02:24:48.636267 2025] [:error] [pid 40562:tid 40626] [client 130.33.77.13:15907] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo.php"] [unique_id "aRtocB18kaCmPuHE4a8jVwAAAUM"]
[Tue Nov 18 02:24:51.227593 2025] [:error] [pid 40793:tid 40852] [client 130.33.77.13:15932] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ggs.php"] [unique_id "aRtocwzccxeNeH-NUVhEKwAAAEI"]
[Tue Nov 18 02:24:51.753745 2025] [:error] [pid 40561:tid 40614] [client 130.33.77.13:16076] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ggs.php"] [unique_id "aRtoc5dU597fIdQPRD_U5gAAANI"]
[Tue Nov 18 02:24:56.945640 2025] [:error] [pid 39189:tid 39212] [client 130.33.77.13:15935] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ggs.php"] [unique_id "aRtoeJJJLi753QwyqGz4mQAAAJM"]
[Tue Nov 18 02:24:58.638791 2025] [:error] [pid 39189:tid 39215] [client 130.33.77.13:56779] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ggs.php"] [unique_id "aRtoepJJLi753QwyqGz4oQAAAJY"]
[Tue Nov 18 02:25:06.170611 2025] [:error] [pid 39189:tid 39197] [client 130.33.77.13:56742] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsr2.php"] [unique_id "aRtogpJJLi753QwyqGz4uAAAAIQ"]
[Tue Nov 18 02:25:08.026227 2025] [:error] [pid 40793:tid 40866] [client 130.33.77.13:64825] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsr2.php"] [unique_id "aRtohAzccxeNeH-NUVhEQAAAAFA"]
[Tue Nov 18 02:25:18.814946 2025] [:error] [pid 40561:tid 40601] [client 130.33.77.13:64782] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class9.php"] [unique_id "aRtojpdU597fIdQPRD_VCQAAAMU"]
[Tue Nov 18 02:25:22.619112 2025] [:error] [pid 40553:tid 40568] [client 130.33.77.13:56830] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class9.php"] [unique_id "aRtoktuLE1BqoX0RcsL79AAAAAA"]
[Tue Nov 18 02:25:27.846894 2025] [proxy_fcgi:error] [pid 40553:tid 40583] [client 130.33.77.13:56811] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:28.230261 2025] [proxy_fcgi:error] [pid 40553:tid 40569] [client 130.33.77.13:56811] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:28.479620 2025] [proxy_fcgi:error] [pid 40553:tid 40576] [client 130.33.77.13:56811] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:28.593701 2025] [:error] [pid 40553:tid 40578] [client 130.33.77.13:56811] [client 130.33.77.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aRtomNuLE1BqoX0RcsL7_QAAAAk"]
[Tue Nov 18 02:25:30.886314 2025] [proxy_fcgi:error] [pid 39189:tid 39195] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.004480 2025] [proxy_fcgi:error] [pid 39189:tid 39217] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.139150 2025] [proxy_fcgi:error] [pid 39189:tid 39197] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.271105 2025] [proxy_fcgi:error] [pid 39189:tid 39193] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.389172 2025] [proxy_fcgi:error] [pid 39189:tid 39207] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.506047 2025] [proxy_fcgi:error] [pid 39189:tid 39211] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.755528 2025] [proxy_fcgi:error] [pid 39189:tid 39194] [client 130.33.77.13:62637] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:25:31.869316 2025] [:error] [pid 39189:tid 39200] [client 130.33.77.13:62637] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sad.php"] [unique_id "aRtom5JJLi753QwyqGz5AQAAAIc"]
[Tue Nov 18 02:25:32.433374 2025] [:error] [pid 39189:tid 39203] [client 130.33.77.13:56802] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sad.php"] [unique_id "aRtonJJJLi753QwyqGz5AgAAAIo"]
[Tue Nov 18 02:25:35.459274 2025] [:error] [pid 40562:tid 40637] [client 130.33.77.13:62649] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sad.php"] [unique_id "aRtonx18kaCmPuHE4a8jlAAAAU4"]
[Tue Nov 18 02:25:39.640890 2025] [:error] [pid 40553:tid 40587] [client 130.33.77.13:64814] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sad.php"] [unique_id "aRtoo9uLE1BqoX0RcsL8BQAAABI"]
[Tue Nov 18 02:25:41.087515 2025] [:error] [pid 39189:tid 39212] [client 130.33.77.13:56792] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aRtopZJJLi753QwyqGz5DQAAAJM"]
[Tue Nov 18 02:25:43.479006 2025] [:error] [pid 40553:tid 40569] [client 130.33.77.13:62645] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aRtop9uLE1BqoX0RcsL8CQAAAAE"]
[Tue Nov 18 02:25:44.762025 2025] [:error] [pid 40553:tid 40576] [client 130.33.77.13:56785] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aRtoqNuLE1BqoX0RcsL8CwAAAAc"]
[Tue Nov 18 02:25:48.939513 2025] [:error] [pid 39189:tid 39215] [client 130.33.77.13:62612] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aRtorJJJLi753QwyqGz5FgAAAJY"]
[Tue Nov 18 02:25:50.018827 2025] [:error] [pid 40562:tid 40625] [client 130.33.77.13:15909] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-gr.php"] [unique_id "aRtorh18kaCmPuHE4a8jrQAAAUI"]
[Tue Nov 18 02:25:50.922339 2025] [:error] [pid 40562:tid 40629] [client 130.33.77.13:64808] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-gr.php"] [unique_id "aRtorh18kaCmPuHE4a8jrgAAAUY"]
[Tue Nov 18 02:25:51.826219 2025] [:error] [pid 40562:tid 40636] [client 130.33.77.13:56818] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-gr.php"] [unique_id "aRtorx18kaCmPuHE4a8jsAAAAU0"]
[Tue Nov 18 02:25:54.625683 2025] [:error] [pid 40793:tid 40855] [client 130.33.77.13:62605] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-gr.php"] [unique_id "aRtosgzccxeNeH-NUVhEbgAAAEU"]
[Tue Nov 18 02:25:55.880841 2025] [:error] [pid 39189:tid 39205] [client 130.33.77.13:62648] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cfile.php"] [unique_id "aRtos5JJLi753QwyqGz5MAAAAIw"]
[Tue Nov 18 02:25:56.724709 2025] [:error] [pid 40793:tid 40862] [client 130.33.77.13:56775] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cfile.php"] [unique_id "aRtotAzccxeNeH-NUVhEdQAAAEw"]
[Tue Nov 18 02:26:01.019642 2025] [:error] [pid 40553:tid 40591] [client 130.33.77.13:56795] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cfile.php"] [unique_id "aRtouduLE1BqoX0RcsL8JQAAABY"]
[Tue Nov 18 02:26:03.052631 2025] [:error] [pid 39189:tid 39204] [client 130.33.77.13:62609] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cfile.php"] [unique_id "aRtou5JJLi753QwyqGz5PwAAAIs"]
[Tue Nov 18 02:26:09.131694 2025] [:error] [pid 40562:tid 40634] [client 130.33.77.13:56748] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sder52u.php"] [unique_id "aRtowR18kaCmPuHE4a8jvwAAAUs"]
[Tue Nov 18 02:26:12.853795 2025] [:error] [pid 40562:tid 40632] [client 130.33.77.13:15928] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sder52u.php"] [unique_id "aRtoxB18kaCmPuHE4a8jxAAAAUk"]
[Tue Nov 18 02:26:17.919452 2025] [:error] [pid 40562:tid 40634] [client 130.33.77.13:56813] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sder52u.php"] [unique_id "aRtoyR18kaCmPuHE4a8jxwAAAUs"]
[Tue Nov 18 02:26:26.162899 2025] [:error] [pid 40553:tid 40591] [client 130.33.77.13:15874] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asserter.php"] [unique_id "aRto0tuLE1BqoX0RcsL8OwAAABY"]
[Tue Nov 18 02:26:39.136230 2025] [proxy_fcgi:error] [pid 40553:tid 40568] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:39.253943 2025] [proxy_fcgi:error] [pid 40553:tid 40590] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:39.513610 2025] [proxy_fcgi:error] [pid 40553:tid 40592] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:39.721112 2025] [proxy_fcgi:error] [pid 40553:tid 40586] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:39.861519 2025] [proxy_fcgi:error] [pid 40553:tid 40579] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:39.982138 2025] [proxy_fcgi:error] [pid 40553:tid 40569] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:40.098961 2025] [proxy_fcgi:error] [pid 40553:tid 40571] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:40.254040 2025] [proxy_fcgi:error] [pid 40553:tid 40573] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:40.375015 2025] [proxy_fcgi:error] [pid 40553:tid 40583] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:40.539399 2025] [proxy_fcgi:error] [pid 40553:tid 40572] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:40.659836 2025] [proxy_fcgi:error] [pid 40553:tid 40593] [client 130.33.77.13:64780] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:26:42.041953 2025] [:error] [pid 40553:tid 40570] [client 130.33.77.13:64780] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ef.php"] [unique_id "aRto4tuLE1BqoX0RcsL8TgAAAAI"]
[Tue Nov 18 02:26:44.832124 2025] [:error] [pid 39189:tid 39196] [client 130.33.77.13:15884] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ef.php"] [unique_id "aRto5JJJLi753QwyqGz5bQAAAIM"]
[Tue Nov 18 02:26:56.100634 2025] [:error] [pid 40562:tid 40639] [client 130.33.77.13:15887] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ef.php"] [unique_id "aRto8B18kaCmPuHE4a8j9wAAAVA"]
[Tue Nov 18 02:26:57.734516 2025] [:error] [pid 40553:tid 40570] [client 130.33.77.13:64804] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aRto8duLE1BqoX0RcsL8YQAAAAI"]
[Tue Nov 18 02:27:02.474910 2025] [:error] [pid 40793:tid 40869] [client 130.33.77.13:62628] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aRto9gzccxeNeH-NUVhExAAAAFM"]
[Tue Nov 18 02:27:04.740820 2025] [:error] [pid 40793:tid 40869] [client 130.33.77.13:62627] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aRto-AzccxeNeH-NUVhE7QAAAFM"]
[Tue Nov 18 02:27:05.588819 2025] [:error] [pid 40561:tid 40608] [client 130.33.77.13:64772] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aRto-ZdU597fIdQPRD_VdwAAAMw"]
[Tue Nov 18 02:27:12.330438 2025] [:error] [pid 40793:tid 40871] [client 130.33.77.13:61261] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/667.php"] [unique_id "aRtpAAzccxeNeH-NUVhE9wAAAFU"]
[Tue Nov 18 02:27:15.575670 2025] [:error] [pid 40562:tid 40639] [client 130.33.77.13:64323] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/667.php"] [unique_id "aRtpAx18kaCmPuHE4a8kOgAAAVA"]
[Tue Nov 18 02:27:18.891974 2025] [:error] [pid 40561:tid 40614] [client 130.33.77.13:64330] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/667.php"] [unique_id "aRtpBpdU597fIdQPRD_VhgAAANI"]
[Tue Nov 18 02:27:24.310949 2025] [:error] [pid 40553:tid 40578] [client 130.33.77.13:64779] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aRtpDNuLE1BqoX0RcsL8kgAAAAk"]
[Tue Nov 18 02:27:28.022955 2025] [:error] [pid 39189:tid 39201] [client 130.33.77.13:15699] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aRtpEJJJLi753QwyqGz5qQAAAIg"]
[Tue Nov 18 02:27:31.139020 2025] [:error] [pid 40553:tid 40581] [client 130.33.77.13:62624] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aRtpE9uLE1BqoX0RcsL8lwAAAAw"]
[Tue Nov 18 02:27:33.767528 2025] [:error] [pid 40553:tid 40578] [client 130.33.77.13:64383] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aRtpFduLE1BqoX0RcsL8nAAAAAk"]
[Tue Nov 18 02:27:37.338692 2025] [:error] [pid 40553:tid 40576] [client 130.33.77.13:64799] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aRtpGduLE1BqoX0RcsL8nwAAAAc"]
[Tue Nov 18 02:27:46.876501 2025] [proxy_fcgi:error] [pid 40562:tid 40630] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:47.004081 2025] [proxy_fcgi:error] [pid 40562:tid 40647] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:47.204950 2025] [proxy_fcgi:error] [pid 40562:tid 40625] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:47.383665 2025] [proxy_fcgi:error] [pid 40562:tid 40633] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:47.501629 2025] [proxy_fcgi:error] [pid 40562:tid 40623] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:47.619429 2025] [proxy_fcgi:error] [pid 40562:tid 40626] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:47.916145 2025] [proxy_fcgi:error] [pid 40562:tid 40628] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:48.067768 2025] [proxy_fcgi:error] [pid 40562:tid 40632] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:48.192902 2025] [proxy_fcgi:error] [pid 40562:tid 40636] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:48.311217 2025] [proxy_fcgi:error] [pid 40562:tid 40624] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:48.452217 2025] [proxy_fcgi:error] [pid 40562:tid 40634] [client 130.33.77.13:15878] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:27:48.566697 2025] [:error] [pid 40562:tid 40635] [client 130.33.77.13:15878] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ant.php"] [unique_id "aRtpJB18kaCmPuHE4a8kXgAAAUw"]
[Tue Nov 18 02:27:50.254984 2025] [:error] [pid 40793:tid 40850] [client 130.33.77.13:64340] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ant.php"] [unique_id "aRtpJgzccxeNeH-NUVhFKwAAAEA"]
[Tue Nov 18 02:27:52.383713 2025] [:error] [pid 40793:tid 40856] [client 130.33.77.13:64324] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ant.php"] [unique_id "aRtpKAzccxeNeH-NUVhFLgAAAEY"]
[Tue Nov 18 02:27:53.967386 2025] [:error] [pid 40562:tid 40633] [client 130.33.77.13:64823] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ant.php"] [unique_id "aRtpKR18kaCmPuHE4a8kaAAAAUo"]
[Tue Nov 18 02:27:55.156285 2025] [:error] [pid 40562:tid 40636] [client 130.33.77.13:64329] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bb5.php"] [unique_id "aRtpKx18kaCmPuHE4a8kbQAAAU0"]
[Tue Nov 18 02:27:59.364205 2025] [:error] [pid 40553:tid 40582] [client 130.33.77.13:64379] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bb5.php"] [unique_id "aRtpL9uLE1BqoX0RcsL8swAAAA0"]
[Tue Nov 18 02:28:02.400130 2025] [:error] [pid 40561:tid 40616] [client 130.33.77.13:64831] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bb5.php"] [unique_id "aRtpMpdU597fIdQPRD_VswAAANQ"]
[Tue Nov 18 02:28:08.580912 2025] [:error] [pid 39189:tid 39209] [client 130.33.77.13:56798] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bb5.php"] [unique_id "aRtpOJJJLi753QwyqGz6AQAAAJA"]
[Tue Nov 18 02:28:09.933727 2025] [:error] [pid 40562:tid 40641] [client 130.33.77.13:62640] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/akc.php"] [unique_id "aRtpOR18kaCmPuHE4a8kfQAAAVI"]
[Tue Nov 18 02:28:11.187567 2025] [:error] [pid 40793:tid 40858] [client 130.33.77.13:64326] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/akc.php"] [unique_id "aRtpOwzccxeNeH-NUVhFYAAAAEg"]
[Tue Nov 18 02:28:17.754984 2025] [:error] [pid 40561:tid 40618] [client 130.33.77.13:62620] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/akc.php"] [unique_id "aRtpQZdU597fIdQPRD_VxAAAANY"]
[Tue Nov 18 02:28:21.160930 2025] [:error] [pid 40561:tid 40613] [client 130.33.77.13:64824] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/akc.php"] [unique_id "aRtpRZdU597fIdQPRD_VzQAAANE"]
[Tue Nov 18 02:28:33.459208 2025] [:error] [pid 40561:tid 40602] [client 130.33.77.13:62638] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/s.php"] [unique_id "aRtpUZdU597fIdQPRD_V0wAAAMY"]
[Tue Nov 18 02:28:57.327509 2025] [proxy_fcgi:error] [pid 40553:tid 40593] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:57.451828 2025] [proxy_fcgi:error] [pid 40553:tid 40576] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:57.770387 2025] [proxy_fcgi:error] [pid 40553:tid 40591] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:57.887915 2025] [proxy_fcgi:error] [pid 40553:tid 40574] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:58.022372 2025] [proxy_fcgi:error] [pid 40553:tid 40581] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:58.144055 2025] [proxy_fcgi:error] [pid 40553:tid 40590] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:58.453408 2025] [proxy_fcgi:error] [pid 40553:tid 40579] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:58.720959 2025] [proxy_fcgi:error] [pid 40553:tid 40573] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:58.865089 2025] [proxy_fcgi:error] [pid 40553:tid 40568] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:58.981647 2025] [proxy_fcgi:error] [pid 40553:tid 40570] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:59.236725 2025] [proxy_fcgi:error] [pid 40553:tid 40586] [client 130.33.77.13:56799] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:28:59.374889 2025] [:error] [pid 40553:tid 40577] [client 130.33.77.13:56799] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aRtpa9uLE1BqoX0RcsL9FAAAAAg"]
[Tue Nov 18 02:29:01.229254 2025] [:error] [pid 40561:tid 40615] [client 130.33.77.13:64331] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aRtpbZdU597fIdQPRD_WFgAAANM"]
[Tue Nov 18 02:29:10.549037 2025] [:error] [pid 40561:tid 40606] [client 130.33.77.13:56772] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aRtpdpdU597fIdQPRD_WHgAAAMo"]
[Tue Nov 18 02:29:20.512287 2025] [:error] [pid 40793:tid 40862] [client 130.33.77.13:63094] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/great.php"] [unique_id "aRtpgAzccxeNeH-NUVhFqQAAAEw"]
[Tue Nov 18 02:29:22.255783 2025] [:error] [pid 40562:tid 40643] [client 130.33.77.13:64338] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/great.php"] [unique_id "aRtpgh18kaCmPuHE4a8k0AAAAVQ"]
[Tue Nov 18 02:29:26.819345 2025] [:error] [pid 40553:tid 40592] [client 130.33.77.13:15987] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/great.php"] [unique_id "aRtphtuLE1BqoX0RcsL9MAAAABc"]
[Tue Nov 18 02:29:28.565656 2025] [:error] [pid 39189:tid 39200] [client 130.33.77.13:63010] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/great.php"] [unique_id "aRtpiJJJLi753QwyqGz6sgAAAIc"]
[Tue Nov 18 02:29:43.199476 2025] [:error] [pid 40793:tid 40871] [client 130.33.77.13:63039] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fifii.php"] [unique_id "aRtplwzccxeNeH-NUVhFwAAAAFU"]
[Tue Nov 18 02:29:45.518295 2025] [:error] [pid 39189:tid 39207] [client 130.33.77.13:63037] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aRtpmZJJLi753QwyqGz6yQAAAI4"]
[Tue Nov 18 02:29:47.239829 2025] [:error] [pid 39189:tid 39206] [client 130.33.77.13:62985] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aRtpm5JJLi753QwyqGz6zwAAAI0"]
[Tue Nov 18 02:30:07.031621 2025] [proxy_fcgi:error] [pid 40793:tid 40873] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:07.162582 2025] [proxy_fcgi:error] [pid 40793:tid 40872] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:07.566288 2025] [proxy_fcgi:error] [pid 40793:tid 40866] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:07.697217 2025] [proxy_fcgi:error] [pid 40793:tid 40856] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:07.998810 2025] [proxy_fcgi:error] [pid 40793:tid 40851] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:08.289949 2025] [proxy_fcgi:error] [pid 40793:tid 40854] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:08.500626 2025] [proxy_fcgi:error] [pid 40793:tid 40857] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:08.812283 2025] [proxy_fcgi:error] [pid 40793:tid 40871] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:09.011218 2025] [proxy_fcgi:error] [pid 40793:tid 40874] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:09.138234 2025] [proxy_fcgi:error] [pid 40793:tid 40865] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:09.256360 2025] [proxy_fcgi:error] [pid 40793:tid 40864] [client 130.33.77.13:15849] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 02:30:09.419835 2025] [:error] [pid 40793:tid 40852] [client 130.33.77.13:15849] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsr2.php"] [unique_id "aRtpsQzccxeNeH-NUVhGAQAAAEI"]
[Tue Nov 18 02:30:10.378299 2025] [:error] [pid 40562:tid 40644] [client 130.33.77.13:16013] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsr2.php"] [unique_id "aRtpsh18kaCmPuHE4a8lAQAAAVU"]
[Tue Nov 18 02:30:17.850683 2025] [:error] [pid 40553:tid 40569] [client 130.33.77.13:15869] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsr2.php"] [unique_id "aRtpuduLE1BqoX0RcsL9WgAAAAE"]
[Tue Nov 18 02:30:29.586716 2025] [:error] [pid 40553:tid 40593] [client 130.33.77.13:63867] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shlo.php"] [unique_id "aRtpxduLE1BqoX0RcsL9ZwAAABg"]
[Tue Nov 18 02:30:31.752219 2025] [:error] [pid 40553:tid 40582] [client 130.33.77.13:58256] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shlo.php"] [unique_id "aRtpx9uLE1BqoX0RcsL9agAAAA0"]
[Tue Nov 18 02:30:41.259210 2025] [:error] [pid 39189:tid 39203] [client 130.33.77.13:58262] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shlo.php"] [unique_id "aRtp0ZJJLi753QwyqGz7FAAAAIo"]
[Tue Nov 18 02:30:51.809371 2025] [:error] [pid 40553:tid 40572] [client 130.33.77.13:58243] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/CLA.php"] [unique_id "aRtp29uLE1BqoX0RcsL9fQAAAAQ"]
[Tue Nov 18 02:31:05.431268 2025] [:error] [pid 40553:tid 40587] [client 130.33.77.13:15450] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kill-9-1.php"] [unique_id "aRtp6duLE1BqoX0RcsL9owAAABI"]
[Tue Nov 18 02:31:06.666011 2025] [:error] [pid 40561:tid 40607] [client 130.33.77.13:16197] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kill-9-1.php"] [unique_id "aRtp6pdU597fIdQPRD_WmAAAAMs"]
[Tue Nov 18 02:31:08.564174 2025] [:error] [pid 40562:tid 40637] [client 130.33.77.13:58356] [client 130.33.77.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kill-9-1.php"] [unique_id "aRtp7B18kaCmPuHE4a8lQgAAAU4"]
[Tue Nov 18 02:31:12.950705 2025] [proxy_fcgi:error] [pid 40793:tid 40874] [client 130.33.77.13:58253] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 06:02:42.553747 2025] [:error] [pid 61392:tid 61440] [client 101.32.15.141:47328] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRubgnSmvb496zZxueLLBQAAAEs"]
[Tue Nov 18 08:51:44.894923 2025] [:error] [pid 28635:tid 28656] [client 223.244.35.77:60206] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aRvDIGB61AnWhG54Xz3SVQAAAdI"]
[Tue Nov 18 09:05:22.275664 2025] [proxy_fcgi:error] [pid 9935:tid 9942] [client 165.85.56.95:16665] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/includes/sqlstore.php(70): SQLStore->Query()\n#1 /home/pumpbooking/public_html/index.php(11): SQLStore->QuerySingleRow()\n#2 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/
[Tue Nov 18 09:05:32.836372 2025] [proxy_fcgi:error] [pid 9935:tid 9957] [client 165.85.56.95:15812] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Tue Nov 18 09:05:35.607771 2025] [proxy_fcgi:error] [pid 9935:tid 9942] [client 165.85.56.95:15812] AH01071: Got error 'PHP message: start 1763427934.8967', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:05:36.350559 2025] [proxy_fcgi:error] [pid 9935:tid 9942] [client 165.85.56.95:15812] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763427936.3501-1763427934.8967', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:07:37.247237 2025] [proxy_fcgi:error] [pid 61482:tid 61505] [client 165.85.56.95:3713] AH01071: Got error 'PHP message: start 1763428056.7198', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:07:37.716898 2025] [proxy_fcgi:error] [pid 61482:tid 61505] [client 165.85.56.95:3713] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428057.7162-1763428056.7198', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:09:38.959629 2025] [proxy_fcgi:error] [pid 29195:tid 29198] [client 165.85.56.95:49341] AH01071: Got error 'PHP message: start 1763428178.2278', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:09:39.504429 2025] [proxy_fcgi:error] [pid 29195:tid 29198] [client 165.85.56.95:49341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428179.5038-1763428178.2278', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:11:41.293064 2025] [proxy_fcgi:error] [pid 29195:tid 29201] [client 165.85.56.95:4650] AH01071: Got error 'PHP message: start 1763428300.3955', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:11:41.750312 2025] [proxy_fcgi:error] [pid 29195:tid 29201] [client 165.85.56.95:4650] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428301.7496-1763428300.3955', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:13:43.368076 2025] [proxy_fcgi:error] [pid 42804:tid 42807] [client 165.85.56.95:43206] AH01071: Got error 'PHP message: start 1763428422.7151', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:13:44.042057 2025] [proxy_fcgi:error] [pid 42804:tid 42807] [client 165.85.56.95:43206] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428424.0415-1763428422.7151', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:15:45.030572 2025] [proxy_fcgi:error] [pid 9935:tid 9953] [client 165.85.56.95:42742] AH01071: Got error 'PHP message: start 1763428544.5631', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:15:45.630800 2025] [proxy_fcgi:error] [pid 9935:tid 9953] [client 165.85.56.95:42742] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428545.6301-1763428544.5631', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:17:46.639877 2025] [proxy_fcgi:error] [pid 9935:tid 9943] [client 165.85.56.95:49024] AH01071: Got error 'PHP message: start 1763428666.0721', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:17:47.161473 2025] [proxy_fcgi:error] [pid 9935:tid 9943] [client 165.85.56.95:49024] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428667.161-1763428666.0721', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:19:48.549213 2025] [proxy_fcgi:error] [pid 61392:tid 61448] [client 165.85.56.95:18081] AH01071: Got error 'PHP message: start 1763428788.0359', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:19:48.914746 2025] [proxy_fcgi:error] [pid 61392:tid 61448] [client 165.85.56.95:18081] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428788.9141-1763428788.0359', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:21:49.866123 2025] [proxy_fcgi:error] [pid 9935:tid 9948] [client 165.85.56.95:39160] AH01071: Got error 'PHP message: start 1763428909.3863', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:21:50.217255 2025] [proxy_fcgi:error] [pid 9935:tid 9948] [client 165.85.56.95:39160] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763428910.2166-1763428909.3863', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:23:51.776629 2025] [proxy_fcgi:error] [pid 9935:tid 9946] [client 165.85.56.95:51973] AH01071: Got error 'PHP message: start 1763429031.2411', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:23:52.375959 2025] [proxy_fcgi:error] [pid 9935:tid 9946] [client 165.85.56.95:51973] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429032.375-1763429031.2411', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:25:53.944302 2025] [proxy_fcgi:error] [pid 61482:tid 61508] [client 165.85.56.95:49443] AH01071: Got error 'PHP message: start 1763429153.3496', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:25:54.397149 2025] [proxy_fcgi:error] [pid 61482:tid 61508] [client 165.85.56.95:49443] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429154.3961-1763429153.3496', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:27:55.357983 2025] [proxy_fcgi:error] [pid 28635:tid 28645] [client 165.85.56.95:62188] AH01071: Got error 'PHP message: start 1763429274.8941', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:27:55.810773 2025] [proxy_fcgi:error] [pid 28635:tid 28645] [client 165.85.56.95:62188] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429275.8101-1763429274.8941', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:29:57.226638 2025] [proxy_fcgi:error] [pid 28635:tid 28656] [client 165.85.56.95:30864] AH01071: Got error 'PHP message: start 1763429396.6987', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:29:57.654389 2025] [proxy_fcgi:error] [pid 28635:tid 28656] [client 165.85.56.95:30864] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429397.6539-1763429396.6987', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:31:58.634801 2025] [proxy_fcgi:error] [pid 61391:tid 61402] [client 165.85.56.95:8757] AH01071: Got error 'PHP message: start 1763429518.1278', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:31:59.021061 2025] [proxy_fcgi:error] [pid 61391:tid 61402] [client 165.85.56.95:8757] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429519.0206-1763429518.1278', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:34:00.138411 2025] [proxy_fcgi:error] [pid 9935:tid 9943] [client 165.85.56.95:22249] AH01071: Got error 'PHP message: start 1763429639.5067', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:34:00.811148 2025] [proxy_fcgi:error] [pid 9935:tid 9943] [client 165.85.56.95:22249] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429640.8106-1763429639.5067', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:36:01.846082 2025] [proxy_fcgi:error] [pid 61482:tid 61493] [client 165.85.56.95:49969] AH01071: Got error 'PHP message: start 1763429761.2365', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:36:02.426657 2025] [proxy_fcgi:error] [pid 61482:tid 61493] [client 165.85.56.95:49969] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429762.426-1763429761.2365', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:38:03.893768 2025] [proxy_fcgi:error] [pid 61392:tid 61435] [client 165.85.56.95:15747] AH01071: Got error 'PHP message: start 1763429883.274', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:38:04.581387 2025] [proxy_fcgi:error] [pid 61392:tid 61435] [client 165.85.56.95:15747] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763429884.5807-1763429883.274', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:40:05.592870 2025] [proxy_fcgi:error] [pid 61482:tid 61499] [client 165.85.56.95:41917] AH01071: Got error 'PHP message: start 1763430005.067', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:40:05.951067 2025] [proxy_fcgi:error] [pid 61482:tid 61499] [client 165.85.56.95:41917] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763430005.9505-1763430005.067', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:42:06.953619 2025] [proxy_fcgi:error] [pid 28635:tid 28639] [client 165.85.56.95:48805] AH01071: Got error 'PHP message: start 1763430126.4819', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:42:07.300347 2025] [proxy_fcgi:error] [pid 28635:tid 28639] [client 165.85.56.95:48805] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763430127.2998-1763430126.4819', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:44:08.215002 2025] [proxy_fcgi:error] [pid 42804:tid 42824] [client 165.85.56.95:63031] AH01071: Got error 'PHP message: start 1763430247.7424', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:44:08.666094 2025] [proxy_fcgi:error] [pid 42804:tid 42824] [client 165.85.56.95:63031] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763430248.6656-1763430247.7424', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 09:44:29.077094 2025] [proxy_fcgi:error] [pid 61391:tid 61414] [client 165.85.56.95:51798] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:44:30.090469 2025] [proxy_fcgi:error] [pid 61391:tid 61424] [client 165.85.56.95:51798] AH01071: Got error 'PHP message: start 1763430269.6426', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:44:30.527490 2025] [proxy_fcgi:error] [pid 61391:tid 61424] [client 165.85.56.95:51798] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763430270.5271-1763430269.6426', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:44:43.995941 2025] [proxy_fcgi:error] [pid 61391:tid 61405] [client 165.85.56.95:43740] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:44:45.286985 2025] [proxy_fcgi:error] [pid 61391:tid 61411] [client 165.85.56.95:43740] AH01071: Got error 'PHP message: start 1763430284.5504', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:44:45.624417 2025] [proxy_fcgi:error] [pid 61391:tid 61411] [client 165.85.56.95:43740] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763430285.6241-1763430284.5504', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 09:44:50.411569 2025] [proxy_fcgi:error] [pid 61391:tid 61421] [client 165.85.56.95:43740] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-17
[Tue Nov 18 11:09:09.161835 2025] [proxy_fcgi:error] [pid 9935:tid 9947] [client 165.85.56.95:6059] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:09:10.239634 2025] [proxy_fcgi:error] [pid 9935:tid 9941] [client 165.85.56.95:5134] AH01071: Got error 'PHP message: start 1763435349.5009', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:09:10.450643 2025] [proxy_fcgi:error] [pid 9935:tid 9941] [client 165.85.56.95:5134] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435350.4496-1763435349.5009', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:09:10.753762 2025] [proxy_fcgi:error] [pid 9935:tid 9946] [client 165.85.56.95:6059] AH01071: Got error 'PHP message: start 1763435350.4513', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:09:10.973092 2025] [proxy_fcgi:error] [pid 9935:tid 9946] [client 165.85.56.95:6059] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435350.9726-1763435350.4513', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:11:12.078879 2025] [proxy_fcgi:error] [pid 61392:tid 61448] [client 165.85.56.95:5827] AH01071: Got error 'PHP message: start 1763435471.44', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:11:12.339216 2025] [proxy_fcgi:error] [pid 61392:tid 61448] [client 165.85.56.95:5827] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435472.3388-1763435471.44', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:13:13.560754 2025] [proxy_fcgi:error] [pid 28635:tid 28638] [client 165.85.56.95:45745] AH01071: Got error 'PHP message: start 1763435592.8264', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:13:13.859001 2025] [proxy_fcgi:error] [pid 28635:tid 28638] [client 165.85.56.95:45745] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435593.8586-1763435592.8264', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:15:15.392709 2025] [proxy_fcgi:error] [pid 9935:tid 9955] [client 165.85.56.95:15088] AH01071: Got error 'PHP message: start 1763435714.7185', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:15:15.699445 2025] [proxy_fcgi:error] [pid 9935:tid 9955] [client 165.85.56.95:15088] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435715.699-1763435714.7185', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:17:16.900052 2025] [proxy_fcgi:error] [pid 61393:tid 61466] [client 165.85.56.95:43611] AH01071: Got error 'PHP message: start 1763435836.1713', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:17:17.152592 2025] [proxy_fcgi:error] [pid 61393:tid 61466] [client 165.85.56.95:43611] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435837.1519-1763435836.1713', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:19:18.289679 2025] [proxy_fcgi:error] [pid 28635:tid 28657] [client 165.85.56.95:20252] AH01071: Got error 'PHP message: start 1763435957.6424', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:19:18.529693 2025] [proxy_fcgi:error] [pid 28635:tid 28657] [client 165.85.56.95:20252] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763435958.5292-1763435957.6424', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:21:20.113023 2025] [proxy_fcgi:error] [pid 61391:tid 61405] [client 165.85.56.95:49568] AH01071: Got error 'PHP message: start 1763436079.4488', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:21:20.392751 2025] [proxy_fcgi:error] [pid 61391:tid 61405] [client 165.85.56.95:49568] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436080.3918-1763436079.4488', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:23:47.668167 2025] [proxy_fcgi:error] [pid 33327:tid 33341] [client 165.85.56.95:50553] AH01071: Got error 'PHP message: start 1763436227.085', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:23:47.867750 2025] [proxy_fcgi:error] [pid 33327:tid 33341] [client 165.85.56.95:50553] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436227.8668-1763436227.085', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:25:50.236684 2025] [proxy_fcgi:error] [pid 61392:tid 61447] [client 165.85.56.95:60773] AH01071: Got error 'PHP message: start 1763436348.8663', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:25:50.666749 2025] [proxy_fcgi:error] [pid 61392:tid 61447] [client 165.85.56.95:60773] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436350.6649-1763436348.8663', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:27:53.579055 2025] [proxy_fcgi:error] [pid 61392:tid 61435] [client 165.85.56.95:17326] AH01071: Got error 'PHP message: start 1763436471.52', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:27:53.866515 2025] [proxy_fcgi:error] [pid 61392:tid 61435] [client 165.85.56.95:17326] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436473.8661-1763436471.52', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:29:55.413971 2025] [proxy_fcgi:error] [pid 33327:tid 33343] [client 165.85.56.95:60842] AH01071: Got error 'PHP message: start 1763436594.7304', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:29:55.720079 2025] [proxy_fcgi:error] [pid 33327:tid 33343] [client 165.85.56.95:60842] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436595.7196-1763436594.7304', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:31:56.791432 2025] [proxy_fcgi:error] [pid 33327:tid 33354] [client 165.85.56.95:56780] AH01071: Got error 'PHP message: start 1763436716.1774', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:31:57.053238 2025] [proxy_fcgi:error] [pid 33327:tid 33354] [client 165.85.56.95:56780] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436717.0529-1763436716.1774', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:33:58.290633 2025] [proxy_fcgi:error] [pid 42804:tid 42806] [client 165.85.56.95:22108] AH01071: Got error 'PHP message: start 1763436837.5201', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:33:58.554781 2025] [proxy_fcgi:error] [pid 42804:tid 42806] [client 165.85.56.95:22108] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436838.5543-1763436837.5201', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:35:59.713573 2025] [proxy_fcgi:error] [pid 33444:tid 33455] [client 165.85.56.95:32593] AH01071: Got error 'PHP message: start 1763436959.0527', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:35:59.920219 2025] [proxy_fcgi:error] [pid 33444:tid 33455] [client 165.85.56.95:32593] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763436959.9198-1763436959.0527', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:38:01.476065 2025] [proxy_fcgi:error] [pid 33444:tid 33474] [client 165.85.56.95:35835] AH01071: Got error 'PHP message: start 1763437080.732', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:38:01.714887 2025] [proxy_fcgi:error] [pid 33444:tid 33474] [client 165.85.56.95:35835] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763437081.7144-1763437080.732', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:40:02.829385 2025] [proxy_fcgi:error] [pid 33444:tid 33463] [client 165.85.56.95:14406] AH01071: Got error 'PHP message: start 1763437202.1394', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:40:03.035647 2025] [proxy_fcgi:error] [pid 33444:tid 33463] [client 165.85.56.95:14406] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763437203.0352-1763437202.1394', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:42:04.267891 2025] [proxy_fcgi:error] [pid 33444:tid 33455] [client 165.85.56.95:41822] AH01071: Got error 'PHP message: start 1763437323.4949', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:42:04.516126 2025] [proxy_fcgi:error] [pid 33444:tid 33455] [client 165.85.56.95:41822] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763437324.5157-1763437323.4949', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:42:44.593675 2025] [proxy_fcgi:error] [pid 28635:tid 28659] [client 165.85.56.95:47268] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:42:45.625721 2025] [proxy_fcgi:error] [pid 28635:tid 28647] [client 165.85.56.95:47268] AH01071: Got error 'PHP message: start 1763437365.051', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:42:45.626498 2025] [proxy_fcgi:error] [pid 28635:tid 28647] [client 165.85.56.95:47268] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763437365.6261-1763437365.051', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:51:44.245654 2025] [proxy_fcgi:error] [pid 44624:tid 44630] [client 165.85.56.95:44377] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:51:44.896618 2025] [proxy_fcgi:error] [pid 44624:tid 44642] [client 165.85.56.95:44377] AH01071: Got error 'PHP message: start 1763437904.6224', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:51:44.897168 2025] [proxy_fcgi:error] [pid 44624:tid 44642] [client 165.85.56.95:44377] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763437904.8965-1763437904.6224', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:51:45.226736 2025] [proxy_fcgi:error] [pid 44470:tid 44493] [client 165.85.56.95:57517] AH01071: Got error 'PHP message: start 1763437904.899', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:51:45.227833 2025] [proxy_fcgi:error] [pid 44470:tid 44493] [client 165.85.56.95:57517] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763437905.2273-1763437904.899', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 11:53:46.281912 2025] [proxy_fcgi:error] [pid 44470:tid 44479] [client 165.85.56.95:41818] AH01071: Got error 'PHP message: start 1763438025.512', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:53:46.282709 2025] [proxy_fcgi:error] [pid 44470:tid 44479] [client 165.85.56.95:41818] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438026.2822-1763438025.512', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:55:47.609079 2025] [proxy_fcgi:error] [pid 44470:tid 44483] [client 165.85.56.95:49480] AH01071: Got error 'PHP message: start 1763438146.7725', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:55:47.609812 2025] [proxy_fcgi:error] [pid 44470:tid 44483] [client 165.85.56.95:49480] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438147.6091-1763438146.7725', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:57:48.712413 2025] [proxy_fcgi:error] [pid 44470:tid 44486] [client 165.85.56.95:32771] AH01071: Got error 'PHP message: start 1763438268.0949', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:57:48.713878 2025] [proxy_fcgi:error] [pid 44470:tid 44486] [client 165.85.56.95:32771] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438268.7131-1763438268.0949', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:59:49.801746 2025] [proxy_fcgi:error] [pid 44471:tid 44521] [client 165.85.56.95:2976] AH01071: Got error 'PHP message: start 1763438389.1645', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 11:59:49.803047 2025] [proxy_fcgi:error] [pid 44471:tid 44521] [client 165.85.56.95:2976] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438389.8024-1763438389.1645', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:01:51.050099 2025] [proxy_fcgi:error] [pid 44470:tid 44499] [client 165.85.56.95:31486] AH01071: Got error 'PHP message: start 1763438510.2648', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:01:51.050880 2025] [proxy_fcgi:error] [pid 44470:tid 44499] [client 165.85.56.95:31486] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438511.0503-1763438510.2648', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:03:52.068781 2025] [proxy_fcgi:error] [pid 44470:tid 44495] [client 165.85.56.95:10918] AH01071: Got error 'PHP message: start 1763438631.3415', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:03:52.069907 2025] [proxy_fcgi:error] [pid 44470:tid 44495] [client 165.85.56.95:10918] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438632.0694-1763438631.3415', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:05:53.344890 2025] [proxy_fcgi:error] [pid 44471:tid 44527] [client 165.85.56.95:23595] AH01071: Got error 'PHP message: start 1763438752.5581', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:05:53.346502 2025] [proxy_fcgi:error] [pid 44471:tid 44527] [client 165.85.56.95:23595] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438753.346-1763438752.5581', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:07:54.547289 2025] [proxy_fcgi:error] [pid 44624:tid 44634] [client 165.85.56.95:19599] AH01071: Got error 'PHP message: start 1763438873.8123', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:07:54.548251 2025] [proxy_fcgi:error] [pid 44624:tid 44634] [client 165.85.56.95:19599] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438874.5477-1763438873.8123', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:09:55.783798 2025] [proxy_fcgi:error] [pid 44624:tid 44631] [client 165.85.56.95:37806] AH01071: Got error 'PHP message: start 1763438994.9946', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:09:55.785452 2025] [proxy_fcgi:error] [pid 44624:tid 44631] [client 165.85.56.95:37806] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763438995.785-1763438994.9946', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:11:57.200587 2025] [proxy_fcgi:error] [pid 44471:tid 44511] [client 165.85.56.95:21576] AH01071: Got error 'PHP message: start 1763439116.6563', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:11:57.201588 2025] [proxy_fcgi:error] [pid 44471:tid 44511] [client 165.85.56.95:21576] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439117.2011-1763439116.6563', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:13:58.705055 2025] [proxy_fcgi:error] [pid 44624:tid 44634] [client 165.85.56.95:55084] AH01071: Got error 'PHP message: start 1763439238.0047', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:13:58.706188 2025] [proxy_fcgi:error] [pid 44624:tid 44634] [client 165.85.56.95:55084] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439238.7055-1763439238.0047', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:16:00.106666 2025] [proxy_fcgi:error] [pid 44472:tid 44533] [client 165.85.56.95:12687] AH01071: Got error 'PHP message: start 1763439359.3717', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:16:00.109533 2025] [proxy_fcgi:error] [pid 44472:tid 44533] [client 165.85.56.95:12687] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439360.1088-1763439359.3717', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:18:01.201212 2025] [proxy_fcgi:error] [pid 44560:tid 44584] [client 165.85.56.95:59025] AH01071: Got error 'PHP message: start 1763439480.5985', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:18:01.201978 2025] [proxy_fcgi:error] [pid 44560:tid 44584] [client 165.85.56.95:59025] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439481.2014-1763439480.5985', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:20:02.353052 2025] [proxy_fcgi:error] [pid 44624:tid 44638] [client 165.85.56.95:16559] AH01071: Got error 'PHP message: start 1763439601.6334', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:20:02.353979 2025] [proxy_fcgi:error] [pid 44624:tid 44638] [client 165.85.56.95:16559] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439602.3535-1763439601.6334', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:22:03.386070 2025] [proxy_fcgi:error] [pid 44560:tid 44580] [client 165.85.56.95:13512] AH01071: Got error 'PHP message: start 1763439722.7912', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:22:03.387095 2025] [proxy_fcgi:error] [pid 44560:tid 44580] [client 165.85.56.95:13512] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439723.3865-1763439722.7912', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:24:04.803243 2025] [proxy_fcgi:error] [pid 44471:tid 44513] [client 165.85.56.95:45358] AH01071: Got error 'PHP message: start 1763439844.1299', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:24:04.804401 2025] [proxy_fcgi:error] [pid 44471:tid 44513] [client 165.85.56.95:45358] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439844.8039-1763439844.1299', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:26:06.341401 2025] [proxy_fcgi:error] [pid 44624:tid 44651] [client 165.85.56.95:60590] AH01071: Got error 'PHP message: start 1763439965.4822', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:26:06.343396 2025] [proxy_fcgi:error] [pid 44624:tid 44651] [client 165.85.56.95:60590] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763439966.3427-1763439965.4822', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:28:07.761984 2025] [proxy_fcgi:error] [pid 44471:tid 44523] [client 165.85.56.95:7043] AH01071: Got error 'PHP message: start 1763440087.1065', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:28:07.762953 2025] [proxy_fcgi:error] [pid 44471:tid 44523] [client 165.85.56.95:7043] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440087.7624-1763440087.1065', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:30:09.335213 2025] [proxy_fcgi:error] [pid 44470:tid 44477] [client 165.85.56.95:36226] AH01071: Got error 'PHP message: start 1763440208.586', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:30:09.336294 2025] [proxy_fcgi:error] [pid 44470:tid 44477] [client 165.85.56.95:36226] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440209.3357-1763440208.586', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:32:10.426572 2025] [proxy_fcgi:error] [pid 44470:tid 44484] [client 165.85.56.95:22596] AH01071: Got error 'PHP message: start 1763440329.743', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:32:10.427446 2025] [proxy_fcgi:error] [pid 44470:tid 44484] [client 165.85.56.95:22596] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440330.4269-1763440329.743', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:34:11.857382 2025] [proxy_fcgi:error] [pid 44471:tid 44508] [client 165.85.56.95:63937] AH01071: Got error 'PHP message: start 1763440451.1902', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:34:11.858028 2025] [proxy_fcgi:error] [pid 44471:tid 44508] [client 165.85.56.95:63937] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440451.8576-1763440451.1902', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:36:13.012168 2025] [proxy_fcgi:error] [pid 44471:tid 44514] [client 165.85.56.95:12621] AH01071: Got error 'PHP message: start 1763440572.2942', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:36:13.013073 2025] [proxy_fcgi:error] [pid 44471:tid 44514] [client 165.85.56.95:12621] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440573.0125-1763440572.2942', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:38:14.136402 2025] [proxy_fcgi:error] [pid 44560:tid 44586] [client 165.85.56.95:64197] AH01071: Got error 'PHP message: start 1763440693.5376', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:38:14.137015 2025] [proxy_fcgi:error] [pid 44560:tid 44586] [client 165.85.56.95:64197] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440694.1366-1763440693.5376', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:40:15.312088 2025] [proxy_fcgi:error] [pid 44471:tid 44527] [client 165.85.56.95:28754] AH01071: Got error 'PHP message: start 1763440814.6071', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:40:15.313056 2025] [proxy_fcgi:error] [pid 44471:tid 44527] [client 165.85.56.95:28754] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440815.3125-1763440814.6071', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:42:16.441654 2025] [proxy_fcgi:error] [pid 44471:tid 44528] [client 165.85.56.95:61925] AH01071: Got error 'PHP message: start 1763440935.7733', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:42:16.442903 2025] [proxy_fcgi:error] [pid 44471:tid 44528] [client 165.85.56.95:61925] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763440936.4421-1763440935.7733', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:44:17.663358 2025] [proxy_fcgi:error] [pid 44470:tid 44484] [client 165.85.56.95:41335] AH01071: Got error 'PHP message: start 1763441056.918', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:44:17.664459 2025] [proxy_fcgi:error] [pid 44470:tid 44484] [client 165.85.56.95:41335] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763441057.6639-1763441056.918', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:46:18.748503 2025] [proxy_fcgi:error] [pid 44470:tid 44479] [client 165.85.56.95:11572] AH01071: Got error 'PHP message: start 1763441178.1081', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:46:18.749638 2025] [proxy_fcgi:error] [pid 44470:tid 44479] [client 165.85.56.95:11572] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763441178.7491-1763441178.1081', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:48:20.880727 2025] [proxy_fcgi:error] [pid 44470:tid 44477] [client 165.85.56.95:43143] AH01071: Got error 'PHP message: start 1763441299.2065', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 12:48:20.881539 2025] [proxy_fcgi:error] [pid 44470:tid 44477] [client 165.85.56.95:43143] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763441300.881-1763441299.2065', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 18 14:54:39.856789 2025] [:error] [pid 44472:tid 44531] [client 222.127.188.157:1606] [client 222.127.188.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 222.127.188.157, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aRwYL4KhGwkiLjv8BQypVwAAAUA"]
[Tue Nov 18 14:54:39.869298 2025] [proxy_fcgi:error] [pid 44472:tid 44531] [client 222.127.188.157:1606] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 15:21:06.071142 2025] [:error] [pid 44560:tid 44588] [client 182.42.110.255:42324] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRweYgnbP7etF3q5-5tWOgAAANE"]
[Tue Nov 18 15:46:10.789180 2025] [proxy_fcgi:error] [pid 44470:tid 44497] [client 165.85.56.95:60720] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Tue Nov 18 15:46:13.968715 2025] [proxy_fcgi:error] [pid 44470:tid 44478] [client 165.85.56.95:60720] AH01071: Got error 'PHP message: start 1763451973.4507', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:46:14.378734 2025] [proxy_fcgi:error] [pid 44470:tid 44478] [client 165.85.56.95:60720] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763451974.3781-1763451973.4507', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:47:00.940111 2025] [proxy_fcgi:error] [pid 44624:tid 44650] [client 165.85.56.95:8398] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:47:02.328149 2025] [proxy_fcgi:error] [pid 44624:tid 44628] [client 165.85.56.95:8398] AH01071: Got error 'PHP message: start 1763452021.8378PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452022.3277-1763452021.8378', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:47:54.287794 2025] [proxy_fcgi:error] [pid 1387:tid 1392] [client 165.85.56.95:64575] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:47:55.545626 2025] [proxy_fcgi:error] [pid 1387:tid 1393] [client 165.85.56.95:51970] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:47:56.249717 2025] [proxy_fcgi:error] [pid 1387:tid 1395] [client 165.85.56.95:51970] AH01071: Got error 'PHP message: start 1763452075.8719', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:47:56.250135 2025] [proxy_fcgi:error] [pid 1387:tid 1395] [client 165.85.56.95:51970] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452076.2493-1763452075.8719', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:48:22.409854 2025] [proxy_fcgi:error] [pid 44470:tid 44496] [client 165.85.56.95:62628] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:48:23.310216 2025] [proxy_fcgi:error] [pid 44470:tid 44481] [client 165.85.56.95:62628] AH01071: Got error 'PHP message: start 1763452103.1006PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452103.3098-1763452103.1006', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:48:40.100330 2025] [proxy_fcgi:error] [pid 44624:tid 44651] [client 165.85.56.95:45394] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:48:40.535900 2025] [proxy_fcgi:error] [pid 44624:tid 44648] [client 165.85.56.95:45394] AH01071: Got error 'PHP message: start 1763452120.3975PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452120.5355-1763452120.3975', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:49:37.503466 2025] [proxy_fcgi:error] [pid 44624:tid 44630] [client 165.85.56.95:32664] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:49:39.015951 2025] [proxy_fcgi:error] [pid 44624:tid 44633] [client 165.85.56.95:32664] AH01071: Got error 'PHP message: start 1763452178.1901', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:49:39.016364 2025] [proxy_fcgi:error] [pid 44624:tid 44633] [client 165.85.56.95:32664] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452179.0155-1763452178.1901', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:50:12.727728 2025] [proxy_fcgi:error] [pid 44624:tid 44649] [client 165.85.56.95:20848] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:50:13.666176 2025] [proxy_fcgi:error] [pid 44624:tid 44648] [client 165.85.56.95:20848] AH01071: Got error 'PHP message: start 1763452213.1516', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:50:13.666631 2025] [proxy_fcgi:error] [pid 44624:tid 44648] [client 165.85.56.95:20848] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452213.6658-1763452213.1516', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:16.098689 2025] [proxy_fcgi:error] [pid 44560:tid 44580] [client 165.85.56.95:9575] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:16.515425 2025] [proxy_fcgi:error] [pid 44560:tid 44590] [client 165.85.56.95:9575] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:16.515953 2025] [proxy_fcgi:error] [pid 44560:tid 44590] [client 165.85.56.95:9575] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/includes/sqlstore.php(85): SQLStore->Query()\n#1 /home/pumpbooking/public_html/dashboard.php(149): SQLStore->QuerySingleResult()\n#2 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:32.785620 2025] [proxy_fcgi:error] [pid 1387:tid 1410] [client 165.85.56.95:48984] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:33.075802 2025] [proxy_fcgi:error] [pid 1387:tid 1399] [client 165.85.56.95:48984] AH01071: Got error 'PHP message: start 1763452293.0349PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452293.0754-1763452293.0349', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:33.121400 2025] [proxy_fcgi:error] [pid 44471:tid 44505] [client 165.85.56.95:32019] AH01071: Got error 'PHP message: start 1763452293.0845PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452293.121-1763452293.0845', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:34.006510 2025] [proxy_fcgi:error] [pid 44471:tid 44523] [client 165.85.56.95:32019] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:34.260973 2025] [proxy_fcgi:error] [pid 44471:tid 44508] [client 165.85.56.95:32019] AH01071: Got error 'PHP message: start 1763452294.2258PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452294.2606-1763452294.2258', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:34.319804 2025] [proxy_fcgi:error] [pid 44472:tid 44540] [client 165.85.56.95:48242] AH01071: Got error 'PHP message: start 1763452294.2765PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452294.3194-1763452294.2765', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:45.622964 2025] [proxy_fcgi:error] [pid 1387:tid 1407] [client 165.85.56.95:21414] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:51:46.859041 2025] [proxy_fcgi:error] [pid 1387:tid 1412] [client 165.85.56.95:21414] AH01071: Got error 'PHP message: start 1763452306.3622PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452306.8586-1763452306.3622', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:52:27.938293 2025] [proxy_fcgi:error] [pid 44560:tid 44577] [client 165.85.56.95:16637] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:52:28.544303 2025] [proxy_fcgi:error] [pid 44560:tid 44593] [client 165.85.56.95:16637] AH01071: Got error 'PHP message: start 1763452348.3437', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:52:28.544907 2025] [proxy_fcgi:error] [pid 44560:tid 44593] [client 165.85.56.95:16637] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452348.5441-1763452348.3437', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:53:19.090797 2025] [proxy_fcgi:error] [pid 44624:tid 44632] [client 165.85.56.95:19693] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:53:19.810883 2025] [proxy_fcgi:error] [pid 44624:tid 44627] [client 165.85.56.95:19693] AH01071: Got error 'PHP message: start 1763452399.5646PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452399.8104-1763452399.5646', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:54:37.831266 2025] [proxy_fcgi:error] [pid 44624:tid 44649] [client 165.85.56.95:63199] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 15:54:38.221097 2025] [proxy_fcgi:error] [pid 44624:tid 44642] [client 165.85.56.95:63199] AH01071: Got error 'PHP message: start 1763452478.185PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763452478.2207-1763452478.185', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 18 16:09:01.529638 2025] [proxy_fcgi:error] [pid 44560:tid 44581] [client 141.98.11.16:49953] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 17:45:26.674472 2025] [:error] [pid 44471:tid 44519] [client 43.130.14.245:38806] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRxANu_6m0bQO14XwtNGKQAAAQ8"]
[Tue Nov 18 20:36:18.502510 2025] [autoindex:error] [pid 44471:tid 44518] [client 84.247.191.22:49839] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 21:37:31.231473 2025] [:error] [pid 44560:tid 44585] [client 45.134.79.103:52539] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRx2mwnbP7etF3q5-5vI7QAAAM4"]
[Tue Nov 18 21:37:31.889919 2025] [:error] [pid 3500:tid 3521] [client 45.134.79.103:60937] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aRx2m_CbRC7k2D7mjbST0gAAAdM"]
[Tue Nov 18 21:37:32.564371 2025] [:error] [pid 44471:tid 44513] [client 45.134.79.103:54275] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nO_6m0bQO14XwtOC9QAAAQk"]
[Wed Nov 19 02:48:03.463148 2025] [proxy_fcgi:error] [pid 14439:tid 14441] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:03.777129 2025] [proxy_fcgi:error] [pid 14439:tid 14464] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:04.075588 2025] [proxy_fcgi:error] [pid 14439:tid 14459] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:04.378288 2025] [proxy_fcgi:error] [pid 14439:tid 14463] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:04.674470 2025] [proxy_fcgi:error] [pid 14439:tid 14452] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:04.956136 2025] [proxy_fcgi:error] [pid 14439:tid 14445] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:05.246397 2025] [proxy_fcgi:error] [pid 14439:tid 14455] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:05.526097 2025] [proxy_fcgi:error] [pid 14439:tid 14458] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:05.853988 2025] [proxy_fcgi:error] [pid 14439:tid 14450] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:06.388727 2025] [proxy_fcgi:error] [pid 14439:tid 14448] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:07.095495 2025] [proxy_fcgi:error] [pid 14439:tid 14459] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:07.365293 2025] [proxy_fcgi:error] [pid 14439:tid 14451] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:07.666841 2025] [proxy_fcgi:error] [pid 14439:tid 14454] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:07.968264 2025] [proxy_fcgi:error] [pid 14439:tid 14455] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:08.246973 2025] [proxy_fcgi:error] [pid 14439:tid 14458] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:08.522189 2025] [proxy_fcgi:error] [pid 14439:tid 14443] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:08.890643 2025] [proxy_fcgi:error] [pid 14439:tid 14459] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:09.164337 2025] [proxy_fcgi:error] [pid 14439:tid 14451] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:09.512180 2025] [proxy_fcgi:error] [pid 14439:tid 14456] [client 172.93.148.166:54644] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:14.119652 2025] [:error] [pid 14439:tid 14450] [client 172.93.148.166:54644] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRy_blat0cKFYVAxpdDwEQAAAQk"]
[Wed Nov 19 02:48:15.533661 2025] [:error] [pid 43882:tid 43956] [client 172.93.148.166:60868] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aRy_b95CQQLff3maRMIGMwAAABA"]
[Wed Nov 19 02:48:18.925224 2025] [proxy_fcgi:error] [pid 44063:tid 44123] [client 172.93.148.166:60936] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:19.745774 2025] [:error] [pid 44063:tid 44124] [client 172.93.148.166:60936] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aRy_c0VOSC7H33BBqQ0VIAAAAIc"]
[Wed Nov 19 02:48:20.563771 2025] [proxy_fcgi:error] [pid 14439:tid 14444] [client 172.93.148.166:47670] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:20.842617 2025] [proxy_fcgi:error] [pid 14439:tid 14445] [client 172.93.148.166:47670] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 02:48:21.158872 2025] [:error] [pid 14439:tid 14462] [client 172.93.148.166:47670] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aRy_dVat0cKFYVAxpdDwKQAAARU"]
[Wed Nov 19 02:48:54.064220 2025] [autoindex:error] [pid 3052:tid 3151] [client 172.93.148.190:44110] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 02:49:17.146890 2025] [:error] [pid 14439:tid 14448] [client 172.93.148.190:47480] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aRy_rVat0cKFYVAxpdDxJAAAAQc"]
[Wed Nov 19 02:49:17.590913 2025] [:error] [pid 3052:tid 3139] [client 172.93.148.190:34158] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aRy_rVNM6bOMTTuJnz2tbgAAAMo"]
[Wed Nov 19 02:49:18.227858 2025] [:error] [pid 43880:tid 43891] [client 172.93.148.190:34184] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aRy_ru1q1HNbKyNr9SaF8gAAAEY"]
[Wed Nov 19 02:49:18.669641 2025] [:error] [pid 43880:tid 43888] [client 172.93.148.190:34212] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aRy_ru1q1HNbKyNr9SaF9gAAAEM"]
[Wed Nov 19 02:49:19.159349 2025] [:error] [pid 43881:tid 43919] [client 172.93.148.190:34228] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aRy_r3_TrIND5buvEyf2KwAAAUY"]
[Wed Nov 19 07:30:38.704049 2025] [:error] [pid 6644:tid 6668] [client 18.191.165.250:56501] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZsQAAANY"]
[Wed Nov 19 07:30:39.101121 2025] [:error] [pid 6919:tid 6933] [client 18.191.165.250:56653] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR0Bn0YFdN1s_9xJVUmrEQAAAQs"]
[Wed Nov 19 07:30:39.499761 2025] [:error] [pid 6919:tid 6928] [client 18.191.165.250:56749] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR0Bn0YFdN1s_9xJVUmrLQAAAQY"]
[Wed Nov 19 07:30:39.898323 2025] [:error] [pid 26664:tid 26678] [client 18.191.165.250:56833] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR0Bn4pWc1yoj2P7MeAR9wAAAUs"]
[Wed Nov 19 07:30:40.391897 2025] [:error] [pid 26664:tid 26681] [client 18.191.165.250:56919] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR0BoIpWc1yoj2P7MeASEgAAAU4"]
[Wed Nov 19 08:44:34.711948 2025] [:error] [pid 6919:tid 6944] [client 43.166.246.180:41360] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR0S8kYFdN1s_9xJVUnEygAAARY"]
[Wed Nov 19 08:52:37.819784 2025] [proxy_fcgi:error] [pid 6644:tid 6650] [client 165.85.56.95:16642] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Wed Nov 19 08:52:39.871346 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 165.85.56.95:16642] AH01071: Got error 'PHP message: start 1763513559.0772', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 08:52:40.446262 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 165.85.56.95:16642] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763513560.4459-1763513559.0772', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 08:54:40.764298 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:23944] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: start 1763513680.7636PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/dashboard-bookings.php(109): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 08:56:41.975374 2025] [proxy_fcgi:error] [pid 6556:tid 6619] [client 165.85.56.95:59840] AH01071: Got error 'PHP message: start 1763513801.3752', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 08:56:42.736573 2025] [proxy_fcgi:error] [pid 6556:tid 6619] [client 165.85.56.95:59840] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763513802.7361-1763513801.3752', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 08:58:44.345244 2025] [proxy_fcgi:error] [pid 6644:tid 6662] [client 165.85.56.95:43585] AH01071: Got error 'PHP message: start 1763513923.6844', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 08:58:44.993514 2025] [proxy_fcgi:error] [pid 6644:tid 6662] [client 165.85.56.95:43585] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763513924.9931-1763513923.6844', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:00:46.844472 2025] [proxy_fcgi:error] [pid 6555:tid 6609] [client 165.85.56.95:1117] AH01071: Got error 'PHP message: start 1763514046.0794', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:00:47.636655 2025] [proxy_fcgi:error] [pid 6555:tid 6609] [client 165.85.56.95:1117] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514047.6363-1763514046.0794', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:02:48.973804 2025] [proxy_fcgi:error] [pid 6556:tid 6624] [client 165.85.56.95:32929] AH01071: Got error 'PHP message: start 1763514168.1895', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:02:49.809985 2025] [proxy_fcgi:error] [pid 6556:tid 6624] [client 165.85.56.95:32929] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514169.8094-1763514168.1895', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:04:51.084723 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 165.85.56.95:11312] AH01071: Got error 'PHP message: start 1763514290.4812', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:04:51.663355 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 165.85.56.95:11312] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514291.6628-1763514290.4812', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:06:53.021035 2025] [proxy_fcgi:error] [pid 6555:tid 6608] [client 165.85.56.95:52572] AH01071: Got error 'PHP message: start 1763514412.2784', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:06:53.598111 2025] [proxy_fcgi:error] [pid 6555:tid 6608] [client 165.85.56.95:52572] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514413.5976-1763514412.2784', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:08:55.659719 2025] [proxy_fcgi:error] [pid 6556:tid 6632] [client 165.85.56.95:18816] AH01071: Got error 'PHP message: start 1763514534.7137', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:08:56.508296 2025] [proxy_fcgi:error] [pid 6556:tid 6632] [client 165.85.56.95:18816] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514536.5077-1763514534.7137', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:10:05.837749 2025] [proxy_fcgi:error] [pid 6554:tid 6575] [client 165.85.56.95:16323] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:10:07.517009 2025] [proxy_fcgi:error] [pid 6554:tid 6560] [client 165.85.56.95:16323] AH01071: Got error 'PHP message: start 1763514607.0252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:10:07.922108 2025] [proxy_fcgi:error] [pid 6554:tid 6560] [client 165.85.56.95:16323] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514607.9217-1763514607.0252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:10:12.436838 2025] [proxy_fcgi:error] [pid 6554:tid 6582] [client 165.85.56.95:16323] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/overview-prn.php(93): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:10:25.799609 2025] [proxy_fcgi:error] [pid 6556:tid 6642] [client 165.85.56.95:57206] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-18
[Wed Nov 19 09:12:08.667331 2025] [proxy_fcgi:error] [pid 6556:tid 6621] [client 165.85.56.95:7942] AH01071: Got error 'PHP message: start 1763514728.2125', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:12:09.170076 2025] [proxy_fcgi:error] [pid 6556:tid 6621] [client 165.85.56.95:7942] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514729.1695-1763514728.2125', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:14:10.218359 2025] [proxy_fcgi:error] [pid 6644:tid 6660] [client 165.85.56.95:54632] AH01071: Got error 'PHP message: start 1763514849.7607', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:14:10.661938 2025] [proxy_fcgi:error] [pid 6644:tid 6660] [client 165.85.56.95:54632] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514850.6614-1763514849.7607', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:16:12.928840 2025] [proxy_fcgi:error] [pid 6554:tid 6580] [client 165.85.56.95:40720] AH01071: Got error 'PHP message: start 1763514971.7974', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:16:13.429820 2025] [proxy_fcgi:error] [pid 6554:tid 6580] [client 165.85.56.95:40720] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763514973.4289-1763514971.7974', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:18:14.591279 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 165.85.56.95:65072] AH01071: Got error 'PHP message: start 1763515094.1199', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:18:15.108274 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 165.85.56.95:65072] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515095.1078-1763515094.1199', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:20:16.173659 2025] [proxy_fcgi:error] [pid 26664:tid 26677] [client 165.85.56.95:62753] AH01071: Got error 'PHP message: start 1763515215.6021', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:20:16.797883 2025] [proxy_fcgi:error] [pid 26664:tid 26677] [client 165.85.56.95:62753] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515216.7973-1763515215.6021', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:22:18.043413 2025] [proxy_fcgi:error] [pid 6554:tid 6572] [client 165.85.56.95:4184] AH01071: Got error 'PHP message: start 1763515337.5148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:22:18.673976 2025] [proxy_fcgi:error] [pid 6554:tid 6572] [client 165.85.56.95:4184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515338.6733-1763515337.5148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:24:19.688207 2025] [proxy_fcgi:error] [pid 6556:tid 6634] [client 165.85.56.95:46116] AH01071: Got error 'PHP message: start 1763515459.1888', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:24:20.098979 2025] [proxy_fcgi:error] [pid 6556:tid 6634] [client 165.85.56.95:46116] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515460.0983-1763515459.1888', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:26:21.167889 2025] [proxy_fcgi:error] [pid 6555:tid 6611] [client 165.85.56.95:50245] AH01071: Got error 'PHP message: start 1763515580.6953', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:26:21.543249 2025] [proxy_fcgi:error] [pid 6555:tid 6611] [client 165.85.56.95:50245] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515581.5426-1763515580.6953', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:28:22.691217 2025] [proxy_fcgi:error] [pid 6554:tid 6584] [client 165.85.56.95:32498] AH01071: Got error 'PHP message: start 1763515702.1485', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:28:23.226549 2025] [proxy_fcgi:error] [pid 6554:tid 6584] [client 165.85.56.95:32498] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515703.226-1763515702.1485', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:30:24.136367 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:2691] AH01071: Got error 'PHP message: start 1763515823.6638', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:30:24.477441 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:2691] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515824.4768-1763515823.6638', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:32:25.452568 2025] [proxy_fcgi:error] [pid 6554:tid 6572] [client 165.85.56.95:1539] AH01071: Got error 'PHP message: start 1763515944.9427', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:32:26.019502 2025] [proxy_fcgi:error] [pid 6554:tid 6572] [client 165.85.56.95:1539] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763515946.019-1763515944.9427', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:34:26.975712 2025] [proxy_fcgi:error] [pid 26664:tid 26670] [client 165.85.56.95:41854] AH01071: Got error 'PHP message: start 1763516066.5484', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:34:27.349424 2025] [proxy_fcgi:error] [pid 26664:tid 26670] [client 165.85.56.95:41854] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516067.349-1763516066.5484', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:36:28.372418 2025] [proxy_fcgi:error] [pid 6555:tid 6609] [client 165.85.56.95:8984] AH01071: Got error 'PHP message: start 1763516187.8632', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:36:28.891873 2025] [proxy_fcgi:error] [pid 6555:tid 6609] [client 165.85.56.95:8984] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516188.8913-1763516187.8632', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:38:30.258933 2025] [proxy_fcgi:error] [pid 6556:tid 6632] [client 165.85.56.95:26965] AH01071: Got error 'PHP message: start 1763516309.7086', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:38:30.646657 2025] [proxy_fcgi:error] [pid 6556:tid 6632] [client 165.85.56.95:26965] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516310.646-1763516309.7086', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:40:31.534368 2025] [proxy_fcgi:error] [pid 6644:tid 6667] [client 165.85.56.95:33110] AH01071: Got error 'PHP message: start 1763516431.0829', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:40:31.872793 2025] [proxy_fcgi:error] [pid 6644:tid 6667] [client 165.85.56.95:33110] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516431.8722-1763516431.0829', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:42:32.775443 2025] [proxy_fcgi:error] [pid 6554:tid 6567] [client 165.85.56.95:17321] AH01071: Got error 'PHP message: start 1763516552.3309', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:42:33.222781 2025] [proxy_fcgi:error] [pid 6554:tid 6567] [client 165.85.56.95:17321] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516553.2222-1763516552.3309', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:44:34.610706 2025] [proxy_fcgi:error] [pid 6644:tid 6657] [client 165.85.56.95:43544] AH01071: Got error 'PHP message: start 1763516674.1244', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:44:34.946184 2025] [proxy_fcgi:error] [pid 6644:tid 6657] [client 165.85.56.95:43544] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516674.9453-1763516674.1244', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:46:36.248997 2025] [proxy_fcgi:error] [pid 6919:tid 6931] [client 165.85.56.95:21184] AH01071: Got error 'PHP message: start 1763516795.5295', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:46:36.742831 2025] [proxy_fcgi:error] [pid 6919:tid 6931] [client 165.85.56.95:21184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516796.7422-1763516795.5295', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:48:37.847244 2025] [proxy_fcgi:error] [pid 6644:tid 6654] [client 165.85.56.95:13153] AH01071: Got error 'PHP message: start 1763516917.3143', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:48:38.413508 2025] [proxy_fcgi:error] [pid 6644:tid 6654] [client 165.85.56.95:13153] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763516918.413-1763516917.3143', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:50:39.333757 2025] [proxy_fcgi:error] [pid 26664:tid 26673] [client 165.85.56.95:10455] AH01071: Got error 'PHP message: start 1763517038.8705', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:50:39.820861 2025] [proxy_fcgi:error] [pid 26664:tid 26673] [client 165.85.56.95:10455] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517039.8202-1763517038.8705', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:52:40.849606 2025] [proxy_fcgi:error] [pid 26664:tid 26687] [client 165.85.56.95:29590] AH01071: Got error 'PHP message: start 1763517160.2999', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:52:41.315135 2025] [proxy_fcgi:error] [pid 26664:tid 26687] [client 165.85.56.95:29590] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517161.3146-1763517160.2999', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:54:42.737467 2025] [proxy_fcgi:error] [pid 6919:tid 6932] [client 165.85.56.95:21226] AH01071: Got error 'PHP message: start 1763517281.7853', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:54:43.279755 2025] [proxy_fcgi:error] [pid 6919:tid 6932] [client 165.85.56.95:21226] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517283.2792-1763517281.7853', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:56:07.054088 2025] [:error] [pid 6554:tid 6582] [client 120.28.138.117:58892] [client 120.28.138.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.138.117, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aR0jt98rvPWLafJFqmV8zgAAABY"]
[Wed Nov 19 09:56:07.067117 2025] [proxy_fcgi:error] [pid 6554:tid 6582] [client 120.28.138.117:58892] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 09:56:45.123684 2025] [proxy_fcgi:error] [pid 26664:tid 26677] [client 165.85.56.95:30036] AH01071: Got error 'PHP message: start 1763517403.7807', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:56:45.832808 2025] [proxy_fcgi:error] [pid 26664:tid 26677] [client 165.85.56.95:30036] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517405.8323-1763517403.7807', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 09:58:33.186342 2025] [proxy_fcgi:error] [pid 6554:tid 6572] [client 165.85.56.95:40704] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:58:34.896464 2025] [proxy_fcgi:error] [pid 6554:tid 6579] [client 165.85.56.95:40704] AH01071: Got error 'PHP message: start 1763517514.1489', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:58:34.897709 2025] [proxy_fcgi:error] [pid 6554:tid 6579] [client 165.85.56.95:40704] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517514.8973-1763517514.1489', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:59:07.053453 2025] [proxy_fcgi:error] [pid 6644:tid 6667] [client 165.85.56.95:8148] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:59:08.081380 2025] [proxy_fcgi:error] [pid 6644:tid 6655] [client 165.85.56.95:8148] AH01071: Got error 'PHP message: start 1763517547.6855', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 09:59:08.469887 2025] [proxy_fcgi:error] [pid 6644:tid 6655] [client 165.85.56.95:8148] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517548.4693-1763517547.6855', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 10:01:09.557329 2025] [proxy_fcgi:error] [pid 6554:tid 6573] [client 165.85.56.95:9605] AH01071: Got error 'PHP message: start 1763517668.75', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:01:09.863850 2025] [proxy_fcgi:error] [pid 6554:tid 6573] [client 165.85.56.95:9605] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517669.8633-1763517668.75', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:03:11.023479 2025] [proxy_fcgi:error] [pid 6644:tid 6664] [client 165.85.56.95:14994] AH01071: Got error 'PHP message: start 1763517790.338', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:03:11.350513 2025] [proxy_fcgi:error] [pid 6644:tid 6664] [client 165.85.56.95:14994] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517791.3499-1763517790.338', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:05:12.435900 2025] [proxy_fcgi:error] [pid 26664:tid 26676] [client 165.85.56.95:23043] AH01071: Got error 'PHP message: start 1763517911.8148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:05:12.700066 2025] [proxy_fcgi:error] [pid 26664:tid 26676] [client 165.85.56.95:23043] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763517912.6994-1763517911.8148', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:07:13.991490 2025] [proxy_fcgi:error] [pid 6554:tid 6578] [client 165.85.56.95:12959] AH01071: Got error 'PHP message: start 1763518033.1698', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:07:14.547255 2025] [proxy_fcgi:error] [pid 6554:tid 6578] [client 165.85.56.95:12959] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518034.5463-1763518033.1698', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:09:16.019333 2025] [proxy_fcgi:error] [pid 26664:tid 26668] [client 165.85.56.95:52816] AH01071: Got error 'PHP message: start 1763518155.408', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:09:16.346160 2025] [proxy_fcgi:error] [pid 26664:tid 26668] [client 165.85.56.95:52816] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518156.3453-1763518155.408', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:11:17.637106 2025] [proxy_fcgi:error] [pid 6919:tid 6937] [client 165.85.56.95:27841] AH01071: Got error 'PHP message: start 1763518276.8341', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:11:17.990694 2025] [proxy_fcgi:error] [pid 6919:tid 6937] [client 165.85.56.95:27841] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518277.99-1763518276.8341', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:13:19.537140 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:43034] AH01071: Got error 'PHP message: start 1763518398.8609', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:13:19.880121 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:43034] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518399.8794-1763518398.8609', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:15:21.204005 2025] [proxy_fcgi:error] [pid 26664:tid 26680] [client 165.85.56.95:1458] AH01071: Got error 'PHP message: start 1763518520.399', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:15:21.608699 2025] [proxy_fcgi:error] [pid 26664:tid 26680] [client 165.85.56.95:1458] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518521.608-1763518520.399', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:17:22.915498 2025] [proxy_fcgi:error] [pid 6644:tid 6647] [client 165.85.56.95:55435] AH01071: Got error 'PHP message: start 1763518642.0916', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:17:23.380544 2025] [proxy_fcgi:error] [pid 6644:tid 6647] [client 165.85.56.95:55435] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518643.3799-1763518642.0916', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:19:24.678924 2025] [proxy_fcgi:error] [pid 6554:tid 6584] [client 165.85.56.95:49997] AH01071: Got error 'PHP message: start 1763518763.851', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:19:25.021365 2025] [proxy_fcgi:error] [pid 6554:tid 6584] [client 165.85.56.95:49997] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518765.0207-1763518763.851', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:21:26.484421 2025] [proxy_fcgi:error] [pid 6644:tid 6654] [client 165.85.56.95:37644] AH01071: Got error 'PHP message: start 1763518885.4691', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:21:26.957515 2025] [proxy_fcgi:error] [pid 6644:tid 6654] [client 165.85.56.95:37644] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763518886.9567-1763518885.4691', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:23:28.618093 2025] [proxy_fcgi:error] [pid 26664:tid 26669] [client 165.85.56.95:51736] AH01071: Got error 'PHP message: start 1763519007.8254', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:23:28.937270 2025] [proxy_fcgi:error] [pid 26664:tid 26669] [client 165.85.56.95:51736] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519008.9367-1763519007.8254', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:25:30.762241 2025] [proxy_fcgi:error] [pid 6644:tid 6650] [client 165.85.56.95:47929] AH01071: Got error 'PHP message: start 1763519129.8085', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:25:31.234265 2025] [proxy_fcgi:error] [pid 6644:tid 6650] [client 165.85.56.95:47929] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519131.2336-1763519129.8085', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:27:32.915560 2025] [proxy_fcgi:error] [pid 6554:tid 6564] [client 165.85.56.95:13786] AH01071: Got error 'PHP message: start 1763519251.6778', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:27:33.480649 2025] [proxy_fcgi:error] [pid 6554:tid 6564] [client 165.85.56.95:13786] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519253.4793-1763519251.6778', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:29:34.748811 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:22885] AH01071: Got error 'PHP message: start 1763519373.945', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:29:35.149243 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:22885] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519375.1487-1763519373.945', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:31:36.601753 2025] [proxy_fcgi:error] [pid 6919:tid 6923] [client 165.85.56.95:32395] AH01071: Got error 'PHP message: start 1763519495.5965', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:31:36.961929 2025] [proxy_fcgi:error] [pid 6919:tid 6923] [client 165.85.56.95:32395] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519496.9613-1763519495.5965', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:33:38.270019 2025] [proxy_fcgi:error] [pid 6919:tid 6926] [client 165.85.56.95:20395] AH01071: Got error 'PHP message: start 1763519617.4209', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:33:38.638410 2025] [proxy_fcgi:error] [pid 6919:tid 6926] [client 165.85.56.95:20395] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519618.6377-1763519617.4209', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:35:39.755601 2025] [proxy_fcgi:error] [pid 6919:tid 6933] [client 165.85.56.95:36068] AH01071: Got error 'PHP message: start 1763519739.0589', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:35:40.068848 2025] [proxy_fcgi:error] [pid 6919:tid 6933] [client 165.85.56.95:36068] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519740.0682-1763519739.0589', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:37:41.352768 2025] [proxy_fcgi:error] [pid 6554:tid 6570] [client 165.85.56.95:6078] AH01071: Got error 'PHP message: start 1763519860.5573', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:37:41.847133 2025] [proxy_fcgi:error] [pid 6554:tid 6570] [client 165.85.56.95:6078] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519861.8464-1763519860.5573', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:39:43.208657 2025] [proxy_fcgi:error] [pid 6644:tid 6661] [client 165.85.56.95:37839] AH01071: Got error 'PHP message: start 1763519982.2927', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:39:43.773856 2025] [proxy_fcgi:error] [pid 6644:tid 6661] [client 165.85.56.95:37839] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763519983.7733-1763519982.2927', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:41:45.108652 2025] [proxy_fcgi:error] [pid 6554:tid 6581] [client 165.85.56.95:9019] AH01071: Got error 'PHP message: start 1763520104.2478', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:41:45.523668 2025] [proxy_fcgi:error] [pid 6554:tid 6581] [client 165.85.56.95:9019] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520105.5227-1763520104.2478', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:43:47.052475 2025] [proxy_fcgi:error] [pid 6554:tid 6559] [client 165.85.56.95:53417] AH01071: Got error 'PHP message: start 1763520226.3262', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:43:47.462433 2025] [proxy_fcgi:error] [pid 6554:tid 6559] [client 165.85.56.95:53417] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520227.4618-1763520226.3262', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:45:48.490643 2025] [proxy_fcgi:error] [pid 6554:tid 6567] [client 165.85.56.95:32430] AH01071: Got error 'PHP message: start 1763520347.8921', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:45:48.732623 2025] [proxy_fcgi:error] [pid 6554:tid 6567] [client 165.85.56.95:32430] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520348.7319-1763520347.8921', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:47:50.185810 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:17584] AH01071: Got error 'PHP message: start 1763520469.2063', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:47:50.750664 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:17584] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520470.7492-1763520469.2063', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:49:51.929197 2025] [proxy_fcgi:error] [pid 6644:tid 6663] [client 165.85.56.95:4543] AH01071: Got error 'PHP message: start 1763520591.1631', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:49:52.381901 2025] [proxy_fcgi:error] [pid 6644:tid 6663] [client 165.85.56.95:4543] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520592.3809-1763520591.1631', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:51:53.581107 2025] [proxy_fcgi:error] [pid 6644:tid 6662] [client 165.85.56.95:63029] AH01071: Got error 'PHP message: start 1763520712.8591', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:51:53.840661 2025] [proxy_fcgi:error] [pid 6644:tid 6662] [client 165.85.56.95:63029] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520713.8399-1763520712.8591', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:53:55.051849 2025] [proxy_fcgi:error] [pid 26664:tid 26686] [client 165.85.56.95:14874] AH01071: Got error 'PHP message: start 1763520834.2815', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:53:55.462903 2025] [proxy_fcgi:error] [pid 26664:tid 26686] [client 165.85.56.95:14874] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520835.4623-1763520834.2815', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:55:56.489648 2025] [proxy_fcgi:error] [pid 6555:tid 6606] [client 165.85.56.95:18173] AH01071: Got error 'PHP message: start 1763520955.924', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:55:56.742114 2025] [proxy_fcgi:error] [pid 6555:tid 6606] [client 165.85.56.95:18173] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763520956.7415-1763520955.924', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:57:58.342676 2025] [proxy_fcgi:error] [pid 6554:tid 6581] [client 165.85.56.95:64734] AH01071: Got error 'PHP message: start 1763521077.5565', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 10:57:58.660012 2025] [proxy_fcgi:error] [pid 6554:tid 6581] [client 165.85.56.95:64734] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521078.6595-1763521077.5565', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:01:32.327150 2025] [proxy_fcgi:error] [pid 6919:tid 6928] [client 165.85.56.95:41746] AH01071: Got error 'PHP message: start 1763521291.6697', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:01:32.668684 2025] [proxy_fcgi:error] [pid 6919:tid 6928] [client 165.85.56.95:41746] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521292.6678-1763521291.6697', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:01:44.864875 2025] [proxy_fcgi:error] [pid 26664:tid 26677] [client 165.85.56.95:30729] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:01:45.567997 2025] [proxy_fcgi:error] [pid 6555:tid 6603] [client 165.85.56.95:24949] AH01071: Got error 'PHP message: start 1763521305.2775', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:01:45.818251 2025] [proxy_fcgi:error] [pid 6555:tid 6603] [client 165.85.56.95:24949] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521305.8177-1763521305.2775', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:01:46.836687 2025] [proxy_fcgi:error] [pid 6555:tid 6602] [client 165.85.56.95:24949] AH01071: Got error 'PHP message: start 1763521306.2106', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:01:47.058783 2025] [proxy_fcgi:error] [pid 6555:tid 6602] [client 165.85.56.95:24949] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521307.0583-1763521306.2106', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:03:45.735024 2025] [proxy_fcgi:error] [pid 26664:tid 26674] [client 165.85.56.95:44131] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:03:46.767095 2025] [proxy_fcgi:error] [pid 26664:tid 26667] [client 165.85.56.95:44131] AH01071: Got error 'PHP message: start 1763521426.2964', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:03:46.767882 2025] [proxy_fcgi:error] [pid 26664:tid 26667] [client 165.85.56.95:44131] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521426.7675-1763521426.2964', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:06.141453 2025] [proxy_fcgi:error] [pid 6555:tid 6593] [client 165.85.56.95:39624] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:07.136032 2025] [proxy_fcgi:error] [pid 6555:tid 6596] [client 165.85.56.95:39624] AH01071: Got error 'PHP message: start 1763521446.6457', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:07.563542 2025] [proxy_fcgi:error] [pid 6555:tid 6596] [client 165.85.56.95:39624] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521447.5632-1763521446.6457', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:20.274627 2025] [proxy_fcgi:error] [pid 6919:tid 6937] [client 165.85.56.95:23826] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:22.524946 2025] [proxy_fcgi:error] [pid 6919:tid 6928] [client 165.85.56.95:23826] AH01071: Got error 'PHP message: start 1763521461.4465', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:22.983632 2025] [proxy_fcgi:error] [pid 6919:tid 6928] [client 165.85.56.95:23826] AH01071: Got error 'PHP message: mysql error: MySQL server has gone awayPHP message: query: SELECT stockID,stockName,stockType,partnerName,availabilityState,partnerInternal FROM stock LEFT JOIN partners ON stockPartnerID=partnerID LEFT JOIN availability ON stockID=availabilityStockID AND availabilityDate='2025-11-12' WHERE (lower(stockType) LIKE '%BOOM%') AND (partnerActive='1') ORDER BY partnerName ASC, stockName ASCPHP message: PHP Fatal error:  Uncaught Error: Call to a member function fetch_assoc() on bool in /home/pumpbooking/public_html/dashboard-bookings.php:274\nStack trace:\n#0 {main}\n  thrown in /home/pumpbooking/public_html/dashboard-bookings.php on line 274', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:43.836051 2025] [proxy_fcgi:error] [pid 6555:tid 6594] [client 165.85.56.95:2592] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:44.689122 2025] [proxy_fcgi:error] [pid 6555:tid 6614] [client 165.85.56.95:2592] AH01071: Got error 'PHP message: start 1763521484.3642', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:04:44.689883 2025] [proxy_fcgi:error] [pid 6555:tid 6614] [client 165.85.56.95:2592] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521484.6895-1763521484.3642', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:11:11.071741 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:37194] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:11:11.790221 2025] [proxy_fcgi:error] [pid 6644:tid 6662] [client 165.85.56.95:37194] AH01071: Got error 'PHP message: start 1763521871.476', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:11:11.791168 2025] [proxy_fcgi:error] [pid 6644:tid 6662] [client 165.85.56.95:37194] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521871.7908-1763521871.476', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:11:12.367344 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:5778] AH01071: Got error 'PHP message: start 1763521871.7923', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:11:12.368288 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:5778] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521872.3679-1763521871.7923', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:11:29.508526 2025] [proxy_fcgi:error] [pid 6919:tid 6942] [client 165.85.56.95:21171] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:11:30.492816 2025] [proxy_fcgi:error] [pid 6919:tid 6928] [client 165.85.56.95:21171] AH01071: Got error 'PHP message: start 1763521890.0484', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:11:30.919712 2025] [proxy_fcgi:error] [pid 6919:tid 6928] [client 165.85.56.95:21171] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763521890.9192-1763521890.0484', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 19 11:13:32.142565 2025] [proxy_fcgi:error] [pid 6556:tid 6634] [client 165.85.56.95:53205] AH01071: Got error 'PHP message: start 1763522011.1961', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:13:32.434304 2025] [proxy_fcgi:error] [pid 6556:tid 6634] [client 165.85.56.95:53205] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522012.4338-1763522011.1961', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:15:34.116393 2025] [proxy_fcgi:error] [pid 6555:tid 6608] [client 165.85.56.95:46809] AH01071: Got error 'PHP message: start 1763522132.8435', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:15:34.417620 2025] [proxy_fcgi:error] [pid 6555:tid 6608] [client 165.85.56.95:46809] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522134.4169-1763522132.8435', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:17:35.462511 2025] [proxy_fcgi:error] [pid 26664:tid 26687] [client 165.85.56.95:20143] AH01071: Got error 'PHP message: start 1763522254.7341', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:17:35.879072 2025] [proxy_fcgi:error] [pid 26664:tid 26687] [client 165.85.56.95:20143] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522255.8783-1763522254.7341', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:19:36.948060 2025] [proxy_fcgi:error] [pid 6919:tid 6940] [client 165.85.56.95:26432] AH01071: Got error 'PHP message: start 1763522376.2189', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:19:37.374847 2025] [proxy_fcgi:error] [pid 6919:tid 6940] [client 165.85.56.95:26432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522377.3742-1763522376.2189', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:21:38.266888 2025] [proxy_fcgi:error] [pid 6919:tid 6933] [client 165.85.56.95:35246] AH01071: Got error 'PHP message: start 1763522497.6558', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:21:38.511040 2025] [proxy_fcgi:error] [pid 6919:tid 6933] [client 165.85.56.95:35246] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522498.5104-1763522497.6558', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:23:39.642999 2025] [proxy_fcgi:error] [pid 6919:tid 6938] [client 165.85.56.95:60010] AH01071: Got error 'PHP message: start 1763522618.8271', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:23:40.074020 2025] [proxy_fcgi:error] [pid 6919:tid 6938] [client 165.85.56.95:60010] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522620.0732-1763522618.8271', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:25:41.165696 2025] [proxy_fcgi:error] [pid 26664:tid 26675] [client 165.85.56.95:42175] AH01071: Got error 'PHP message: start 1763522740.4162', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:25:41.526438 2025] [proxy_fcgi:error] [pid 26664:tid 26675] [client 165.85.56.95:42175] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522741.5257-1763522740.4162', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:27:42.831371 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:19133] AH01071: Got error 'PHP message: start 1763522862.0256', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:27:43.216699 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:19133] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522863.216-1763522862.0256', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:29:44.828842 2025] [proxy_fcgi:error] [pid 6644:tid 6654] [client 165.85.56.95:24068] AH01071: Got error 'PHP message: start 1763522984.1397', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:29:45.254518 2025] [proxy_fcgi:error] [pid 6644:tid 6654] [client 165.85.56.95:24068] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763522985.254-1763522984.1397', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:31:46.327538 2025] [proxy_fcgi:error] [pid 6644:tid 6648] [client 165.85.56.95:21112] AH01071: Got error 'PHP message: start 1763523105.7219', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:31:46.566057 2025] [proxy_fcgi:error] [pid 6644:tid 6648] [client 165.85.56.95:21112] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523106.5655-1763523105.7219', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:33:47.663036 2025] [proxy_fcgi:error] [pid 26664:tid 26671] [client 165.85.56.95:57923] AH01071: Got error 'PHP message: start 1763523227.0304', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:33:47.997216 2025] [proxy_fcgi:error] [pid 26664:tid 26671] [client 165.85.56.95:57923] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523227.9965-1763523227.0304', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:35:48.980470 2025] [proxy_fcgi:error] [pid 6644:tid 6646] [client 165.85.56.95:34770] AH01071: Got error 'PHP message: start 1763523348.2985', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:35:49.258497 2025] [proxy_fcgi:error] [pid 6644:tid 6646] [client 165.85.56.95:34770] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523349.2578-1763523348.2985', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:37:50.203903 2025] [proxy_fcgi:error] [pid 26664:tid 26667] [client 165.85.56.95:8394] AH01071: Got error 'PHP message: start 1763523469.5789', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:37:50.588284 2025] [proxy_fcgi:error] [pid 26664:tid 26667] [client 165.85.56.95:8394] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523470.5878-1763523469.5789', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:39:51.774315 2025] [proxy_fcgi:error] [pid 6554:tid 6564] [client 165.85.56.95:3915] AH01071: Got error 'PHP message: start 1763523591.0639', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:39:52.165345 2025] [proxy_fcgi:error] [pid 6554:tid 6564] [client 165.85.56.95:3915] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523592.1647-1763523591.0639', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:41:53.280673 2025] [proxy_fcgi:error] [pid 6555:tid 6607] [client 165.85.56.95:59293] AH01071: Got error 'PHP message: start 1763523712.6535', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:41:53.519323 2025] [proxy_fcgi:error] [pid 6555:tid 6607] [client 165.85.56.95:59293] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523713.5188-1763523712.6535', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:43:55.190617 2025] [proxy_fcgi:error] [pid 6919:tid 6938] [client 165.85.56.95:19061] AH01071: Got error 'PHP message: start 1763523834.4252', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:43:55.580135 2025] [proxy_fcgi:error] [pid 6919:tid 6938] [client 165.85.56.95:19061] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523835.5796-1763523834.4252', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:45:56.713183 2025] [proxy_fcgi:error] [pid 26664:tid 26680] [client 165.85.56.95:36579] AH01071: Got error 'PHP message: start 1763523956.0589', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:45:56.987105 2025] [proxy_fcgi:error] [pid 26664:tid 26680] [client 165.85.56.95:36579] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763523956.9864-1763523956.0589', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:47:58.181148 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 165.85.56.95:53348] AH01071: Got error 'PHP message: start 1763524077.4523', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:47:58.597713 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 165.85.56.95:53348] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524078.597-1763524077.4523', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:50:00.075806 2025] [proxy_fcgi:error] [pid 6554:tid 6560] [client 165.85.56.95:14366] AH01071: Got error 'PHP message: start 1763524199.4496', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:50:00.372965 2025] [proxy_fcgi:error] [pid 6554:tid 6560] [client 165.85.56.95:14366] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524200.3723-1763524199.4496', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:52:01.595400 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 165.85.56.95:58766] AH01071: Got error 'PHP message: start 1763524320.8868', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:52:01.922292 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 165.85.56.95:58766] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524321.9217-1763524320.8868', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:54:02.984655 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 165.85.56.95:58683] AH01071: Got error 'PHP message: start 1763524442.2115', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:54:03.410724 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 165.85.56.95:58683] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524443.4099-1763524442.2115', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:56:04.578282 2025] [proxy_fcgi:error] [pid 6644:tid 6665] [client 165.85.56.95:47361] AH01071: Got error 'PHP message: start 1763524563.7364', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:56:04.976118 2025] [proxy_fcgi:error] [pid 6644:tid 6665] [client 165.85.56.95:47361] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524564.9754-1763524563.7364', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:58:06.647655 2025] [proxy_fcgi:error] [pid 26664:tid 26670] [client 165.85.56.95:58043] AH01071: Got error 'PHP message: start 1763524685.8969', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 11:58:07.015790 2025] [proxy_fcgi:error] [pid 26664:tid 26670] [client 165.85.56.95:58043] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524687.0151-1763524685.8969', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:00:08.189393 2025] [proxy_fcgi:error] [pid 26664:tid 26669] [client 165.85.56.95:47536] AH01071: Got error 'PHP message: start 1763524807.5073', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:00:08.471053 2025] [proxy_fcgi:error] [pid 26664:tid 26669] [client 165.85.56.95:47536] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524808.4703-1763524807.5073', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:02:09.865755 2025] [proxy_fcgi:error] [pid 6919:tid 6930] [client 165.85.56.95:44786] AH01071: Got error 'PHP message: start 1763524928.9378', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:02:10.361722 2025] [proxy_fcgi:error] [pid 6919:tid 6930] [client 165.85.56.95:44786] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763524930.3609-1763524928.9378', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:03:46.169420 2025] [:error] [pid 6644:tid 6668] [client 167.71.247.246:43060] [client 167.71.247.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/js/modernizr-2.6.2.min.js"] [unique_id "aR1Bok0i6Rf788MB6sYyugAAANY"]
[Wed Nov 19 12:04:11.458791 2025] [proxy_fcgi:error] [pid 6555:tid 6612] [client 165.85.56.95:25715] AH01071: Got error 'PHP message: start 1763525050.8069', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:04:11.717252 2025] [proxy_fcgi:error] [pid 6555:tid 6612] [client 165.85.56.95:25715] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525051.7167-1763525050.8069', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:06:13.367704 2025] [proxy_fcgi:error] [pid 6644:tid 6665] [client 165.85.56.95:37992] AH01071: Got error 'PHP message: start 1763525172.607', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:06:13.665525 2025] [proxy_fcgi:error] [pid 6644:tid 6665] [client 165.85.56.95:37992] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525173.6648-1763525172.607', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:08:14.813326 2025] [proxy_fcgi:error] [pid 26664:tid 26668] [client 165.85.56.95:30319] AH01071: Got error 'PHP message: start 1763525294.1574', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:08:15.142029 2025] [proxy_fcgi:error] [pid 26664:tid 26668] [client 165.85.56.95:30319] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525295.1413-1763525294.1574', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:10:16.421568 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 165.85.56.95:56137] AH01071: Got error 'PHP message: start 1763525415.6033', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:10:16.864098 2025] [proxy_fcgi:error] [pid 6556:tid 6625] [client 165.85.56.95:56137] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525416.8633-1763525415.6033', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:12:18.051665 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 165.85.56.95:8678] AH01071: Got error 'PHP message: start 1763525537.3402', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:12:18.474244 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 165.85.56.95:8678] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525538.4736-1763525537.3402', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:14:19.803001 2025] [proxy_fcgi:error] [pid 26664:tid 26692] [client 165.85.56.95:58349] AH01071: Got error 'PHP message: start 1763525658.9586', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:14:20.186197 2025] [proxy_fcgi:error] [pid 26664:tid 26692] [client 165.85.56.95:58349] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525660.1856-1763525658.9586', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:16:21.286309 2025] [proxy_fcgi:error] [pid 6919:tid 6926] [client 165.85.56.95:28108] AH01071: Got error 'PHP message: start 1763525780.6338', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:16:21.538126 2025] [proxy_fcgi:error] [pid 6919:tid 6926] [client 165.85.56.95:28108] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525781.5374-1763525780.6338', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:18:22.666153 2025] [proxy_fcgi:error] [pid 6555:tid 6604] [client 165.85.56.95:53902] AH01071: Got error 'PHP message: start 1763525901.9873', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:18:23.034658 2025] [proxy_fcgi:error] [pid 6555:tid 6604] [client 165.85.56.95:53902] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763525903.034-1763525901.9873', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:20:24.623032 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:6326] AH01071: Got error 'PHP message: start 1763526023.8901', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:20:25.003454 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:6326] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526025.003-1763526023.8901', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:22:26.054035 2025] [proxy_fcgi:error] [pid 6556:tid 6623] [client 165.85.56.95:53696] AH01071: Got error 'PHP message: start 1763526145.465', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:22:26.379194 2025] [proxy_fcgi:error] [pid 6556:tid 6623] [client 165.85.56.95:53696] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526146.3785-1763526145.465', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:24:27.582012 2025] [proxy_fcgi:error] [pid 6556:tid 6637] [client 165.85.56.95:60501] AH01071: Got error 'PHP message: start 1763526266.813', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:24:28.176925 2025] [proxy_fcgi:error] [pid 6556:tid 6637] [client 165.85.56.95:60501] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526268.1761-1763526266.813', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:26:29.841850 2025] [proxy_fcgi:error] [pid 26664:tid 26669] [client 165.85.56.95:30432] AH01071: Got error 'PHP message: start 1763526389.0709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:26:30.242920 2025] [proxy_fcgi:error] [pid 26664:tid 26669] [client 165.85.56.95:30432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526390.2423-1763526389.0709', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:28:31.768533 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:30318] AH01071: Got error 'PHP message: start 1763526511.0349', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:28:32.241133 2025] [proxy_fcgi:error] [pid 26664:tid 26678] [client 165.85.56.95:30318] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526512.2405-1763526511.0349', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:30:33.761770 2025] [proxy_fcgi:error] [pid 6556:tid 6637] [client 165.85.56.95:28326] AH01071: Got error 'PHP message: start 1763526633.1278', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:30:34.014503 2025] [proxy_fcgi:error] [pid 6556:tid 6637] [client 165.85.56.95:28326] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526634.0139-1763526633.1278', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:32:35.670483 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 165.85.56.95:1204] AH01071: Got error 'PHP message: start 1763526754.8431', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:32:36.032025 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 165.85.56.95:1204] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526756.0314-1763526754.8431', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:34:37.102114 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:45265] AH01071: Got error 'PHP message: start 1763526876.4742', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:34:37.362827 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:45265] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526877.3621-1763526876.4742', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:36:38.594338 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:55306] AH01071: Got error 'PHP message: start 1763526997.82', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:36:38.997569 2025] [proxy_fcgi:error] [pid 6554:tid 6576] [client 165.85.56.95:55306] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763526998.9969-1763526997.82', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:38:40.096167 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 165.85.56.95:14346] AH01071: Got error 'PHP message: start 1763527119.4261', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:38:40.375693 2025] [proxy_fcgi:error] [pid 6556:tid 6627] [client 165.85.56.95:14346] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527120.375-1763527119.4261', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:40:41.560735 2025] [proxy_fcgi:error] [pid 6555:tid 6599] [client 165.85.56.95:19508] AH01071: Got error 'PHP message: start 1763527240.8361', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:40:41.924741 2025] [proxy_fcgi:error] [pid 6555:tid 6599] [client 165.85.56.95:19508] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527241.924-1763527240.8361', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:42:43.466616 2025] [proxy_fcgi:error] [pid 6919:tid 6944] [client 165.85.56.95:57878] AH01071: Got error 'PHP message: start 1763527362.7471', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:42:43.808779 2025] [proxy_fcgi:error] [pid 6919:tid 6944] [client 165.85.56.95:57878] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527363.8081-1763527362.7471', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:44:44.868908 2025] [proxy_fcgi:error] [pid 6919:tid 6939] [client 165.85.56.95:28039] AH01071: Got error 'PHP message: start 1763527484.2519', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:44:45.128422 2025] [proxy_fcgi:error] [pid 6919:tid 6939] [client 165.85.56.95:28039] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527485.1277-1763527484.2519', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:46:46.360811 2025] [proxy_fcgi:error] [pid 6919:tid 6937] [client 165.85.56.95:45348] AH01071: Got error 'PHP message: start 1763527605.6287', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:46:46.689574 2025] [proxy_fcgi:error] [pid 6919:tid 6937] [client 165.85.56.95:45348] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527606.689-1763527605.6287', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:48:47.851626 2025] [proxy_fcgi:error] [pid 6644:tid 6658] [client 165.85.56.95:7373] AH01071: Got error 'PHP message: start 1763527727.1646', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:48:48.217960 2025] [proxy_fcgi:error] [pid 6644:tid 6658] [client 165.85.56.95:7373] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527728.2174-1763527727.1646', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:50:49.318311 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:16090] AH01071: Got error 'PHP message: start 1763527848.7073', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:50:49.594715 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:16090] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527849.5939-1763527848.7073', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:52:51.090627 2025] [proxy_fcgi:error] [pid 6555:tid 6596] [client 165.85.56.95:63432] AH01071: Got error 'PHP message: start 1763527970.5373', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:52:51.350322 2025] [proxy_fcgi:error] [pid 6555:tid 6596] [client 165.85.56.95:63432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763527971.3496-1763527970.5373', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:54:53.056525 2025] [proxy_fcgi:error] [pid 6919:tid 6934] [client 165.85.56.95:1292] AH01071: Got error 'PHP message: start 1763528092.2429', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:54:53.490327 2025] [proxy_fcgi:error] [pid 6919:tid 6934] [client 165.85.56.95:1292] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528093.4897-1763528092.2429', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:56:54.860568 2025] [proxy_fcgi:error] [pid 6919:tid 6942] [client 165.85.56.95:44937] AH01071: Got error 'PHP message: start 1763528214.0283', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:56:55.299541 2025] [proxy_fcgi:error] [pid 6919:tid 6942] [client 165.85.56.95:44937] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528215.299-1763528214.0283', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:58:56.561780 2025] [proxy_fcgi:error] [pid 6555:tid 6591] [client 165.85.56.95:32403] AH01071: Got error 'PHP message: start 1763528335.7574', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 12:58:56.995679 2025] [proxy_fcgi:error] [pid 6555:tid 6591] [client 165.85.56.95:32403] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528336.9947-1763528335.7574', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:00:58.141376 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:16173] AH01071: Got error 'PHP message: start 1763528457.5213', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:00:58.382023 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:16173] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528458.3814-1763528457.5213', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:02:59.968783 2025] [proxy_fcgi:error] [pid 6554:tid 6581] [client 165.85.56.95:27822] AH01071: Got error 'PHP message: start 1763528579.3451', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:03:00.325262 2025] [proxy_fcgi:error] [pid 6554:tid 6581] [client 165.85.56.95:27822] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528580.3246-1763528579.3451', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:05:01.454665 2025] [proxy_fcgi:error] [pid 6555:tid 6605] [client 165.85.56.95:33190] AH01071: Got error 'PHP message: start 1763528700.7761', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:05:01.750656 2025] [proxy_fcgi:error] [pid 6555:tid 6605] [client 165.85.56.95:33190] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528701.7499-1763528700.7761', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:07:02.937657 2025] [proxy_fcgi:error] [pid 6554:tid 6574] [client 165.85.56.95:13126] AH01071: Got error 'PHP message: start 1763528822.2143', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:07:03.250415 2025] [proxy_fcgi:error] [pid 6554:tid 6574] [client 165.85.56.95:13126] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528823.2498-1763528822.2143', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:09:04.928343 2025] [proxy_fcgi:error] [pid 6554:tid 6561] [client 165.85.56.95:53270] AH01071: Got error 'PHP message: start 1763528944.0992', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:09:05.454163 2025] [proxy_fcgi:error] [pid 6554:tid 6561] [client 165.85.56.95:53270] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763528945.4535-1763528944.0992', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:11:06.633679 2025] [proxy_fcgi:error] [pid 6555:tid 6597] [client 165.85.56.95:33181] AH01071: Got error 'PHP message: start 1763529065.9189', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:11:06.993340 2025] [proxy_fcgi:error] [pid 6555:tid 6597] [client 165.85.56.95:33181] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529066.9927-1763529065.9189', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:13:08.584239 2025] [proxy_fcgi:error] [pid 26664:tid 26667] [client 165.85.56.95:45934] AH01071: Got error 'PHP message: start 1763529187.834', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:13:08.958929 2025] [proxy_fcgi:error] [pid 26664:tid 26667] [client 165.85.56.95:45934] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529188.9582-1763529187.834', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:15:10.820338 2025] [proxy_fcgi:error] [pid 26664:tid 26690] [client 165.85.56.95:60515] AH01071: Got error 'PHP message: start 1763529309.8237', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:15:11.373640 2025] [proxy_fcgi:error] [pid 26664:tid 26690] [client 165.85.56.95:60515] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529311.3728-1763529309.8237', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:17:12.737765 2025] [proxy_fcgi:error] [pid 6919:tid 6944] [client 165.85.56.95:51670] AH01071: Got error 'PHP message: start 1763529431.8461', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:17:13.100891 2025] [proxy_fcgi:error] [pid 6919:tid 6944] [client 165.85.56.95:51670] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529433.1003-1763529431.8461', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:19:14.409102 2025] [proxy_fcgi:error] [pid 6555:tid 6591] [client 165.85.56.95:34154] AH01071: Got error 'PHP message: start 1763529553.5863', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:19:14.870729 2025] [proxy_fcgi:error] [pid 6555:tid 6591] [client 165.85.56.95:34154] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529554.87-1763529553.5863', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:21:15.922340 2025] [proxy_fcgi:error] [pid 6554:tid 6575] [client 165.85.56.95:54288] AH01071: Got error 'PHP message: start 1763529675.2948', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:21:16.255900 2025] [proxy_fcgi:error] [pid 6554:tid 6575] [client 165.85.56.95:54288] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529676.2552-1763529675.2948', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:23:17.494368 2025] [proxy_fcgi:error] [pid 6556:tid 6618] [client 165.85.56.95:58665] AH01071: Got error 'PHP message: start 1763529796.7117', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:23:17.800463 2025] [proxy_fcgi:error] [pid 6556:tid 6618] [client 165.85.56.95:58665] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529797.7999-1763529796.7117', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:25:19.120906 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:12455] AH01071: Got error 'PHP message: start 1763529918.3072', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:25:19.563875 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:12455] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763529919.5632-1763529918.3072', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:27:20.713758 2025] [proxy_fcgi:error] [pid 6919:tid 6942] [client 165.85.56.95:33065] AH01071: Got error 'PHP message: start 1763530040.0103', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:27:21.008360 2025] [proxy_fcgi:error] [pid 6919:tid 6942] [client 165.85.56.95:33065] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530041.0077-1763530040.0103', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:29:22.262294 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:59407] AH01071: Got error 'PHP message: start 1763530161.5112', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:29:22.622833 2025] [proxy_fcgi:error] [pid 6919:tid 6922] [client 165.85.56.95:59407] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530162.6221-1763530161.5112', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:31:23.761649 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:19913] AH01071: Got error 'PHP message: start 1763530283.0878', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:31:24.116301 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:19913] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530284.1155-1763530283.0878', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:33:25.189958 2025] [proxy_fcgi:error] [pid 26664:tid 26683] [client 165.85.56.95:57432] AH01071: Got error 'PHP message: start 1763530404.5842', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:33:25.477735 2025] [proxy_fcgi:error] [pid 26664:tid 26683] [client 165.85.56.95:57432] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530405.4771-1763530404.5842', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:35:26.523321 2025] [proxy_fcgi:error] [pid 6556:tid 6635] [client 165.85.56.95:54202] AH01071: Got error 'PHP message: start 1763530525.8794', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:35:26.801813 2025] [proxy_fcgi:error] [pid 6556:tid 6635] [client 165.85.56.95:54202] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530526.8013-1763530525.8794', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:37:28.033316 2025] [proxy_fcgi:error] [pid 6919:tid 6936] [client 165.85.56.95:6754] AH01071: Got error 'PHP message: start 1763530647.266', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:37:28.417672 2025] [proxy_fcgi:error] [pid 6919:tid 6936] [client 165.85.56.95:6754] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530648.4171-1763530647.266', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:39:29.577676 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:52065] AH01071: Got error 'PHP message: start 1763530768.8774', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:39:29.884170 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:52065] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530769.8835-1763530768.8774', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:41:30.962881 2025] [proxy_fcgi:error] [pid 6644:tid 6659] [client 165.85.56.95:29407] AH01071: Got error 'PHP message: start 1763530890.2581', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:41:31.397109 2025] [proxy_fcgi:error] [pid 6644:tid 6659] [client 165.85.56.95:29407] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763530891.3962-1763530890.2581', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:43:32.862895 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 165.85.56.95:60799] AH01071: Got error 'PHP message: start 1763531012.2631', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:43:33.128159 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 165.85.56.95:60799] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531013.1275-1763531012.2631', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:45:34.330984 2025] [proxy_fcgi:error] [pid 12643:tid 12646] [client 165.85.56.95:36332] AH01071: Got error 'PHP message: start 1763531133.6581', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:45:34.701041 2025] [proxy_fcgi:error] [pid 12643:tid 12646] [client 165.85.56.95:36332] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531134.7004-1763531133.6581', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:47:36.078620 2025] [proxy_fcgi:error] [pid 6556:tid 6619] [client 165.85.56.95:61646] AH01071: Got error 'PHP message: start 1763531255.5305', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:47:36.324773 2025] [proxy_fcgi:error] [pid 6556:tid 6619] [client 165.85.56.95:61646] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531256.3241-1763531255.5305', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:49:37.490642 2025] [proxy_fcgi:error] [pid 12643:tid 12658] [client 165.85.56.95:62168] AH01071: Got error 'PHP message: start 1763531376.8236', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:49:37.836547 2025] [proxy_fcgi:error] [pid 12643:tid 12658] [client 165.85.56.95:62168] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531377.8359-1763531376.8236', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:51:39.073836 2025] [proxy_fcgi:error] [pid 6644:tid 6650] [client 165.85.56.95:5442] AH01071: Got error 'PHP message: start 1763531498.2521', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:51:39.387673 2025] [proxy_fcgi:error] [pid 6644:tid 6650] [client 165.85.56.95:5442] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531499.3871-1763531498.2521', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:53:40.785206 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:31013] AH01071: Got error 'PHP message: start 1763531620.2685', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:53:41.045776 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:31013] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531621.0452-1763531620.2685', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:55:42.569710 2025] [proxy_fcgi:error] [pid 12673:tid 12706] [client 165.85.56.95:59748] AH01071: Got error 'PHP message: start 1763531741.9111', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:55:42.831532 2025] [proxy_fcgi:error] [pid 12673:tid 12706] [client 165.85.56.95:59748] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531742.8308-1763531741.9111', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:57:43.988168 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 165.85.56.95:42128] AH01071: Got error 'PHP message: start 1763531863.3027', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:57:44.354085 2025] [proxy_fcgi:error] [pid 6644:tid 6669] [client 165.85.56.95:42128] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531864.3535-1763531863.3027', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:59:45.827610 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:42144] AH01071: Got error 'PHP message: start 1763531985.1597', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 13:59:46.099216 2025] [proxy_fcgi:error] [pid 6644:tid 6651] [client 165.85.56.95:42144] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763531986.0987-1763531985.1597', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:01:47.276235 2025] [proxy_fcgi:error] [pid 6644:tid 6647] [client 165.85.56.95:12173] AH01071: Got error 'PHP message: start 1763532106.5586', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:01:47.714251 2025] [proxy_fcgi:error] [pid 6644:tid 6647] [client 165.85.56.95:12173] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532107.7135-1763532106.5586', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:03:48.897831 2025] [proxy_fcgi:error] [pid 12673:tid 12712] [client 165.85.56.95:18554] AH01071: Got error 'PHP message: start 1763532228.2445', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:03:49.263009 2025] [proxy_fcgi:error] [pid 12673:tid 12712] [client 165.85.56.95:18554] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532229.2623-1763532228.2445', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:05:50.553182 2025] [proxy_fcgi:error] [pid 6555:tid 6611] [client 165.85.56.95:48845] AH01071: Got error 'PHP message: start 1763532349.7017', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:05:50.774844 2025] [proxy_fcgi:error] [pid 6555:tid 6611] [client 165.85.56.95:48845] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532350.7743-1763532349.7017', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:07:52.656124 2025] [proxy_fcgi:error] [pid 6644:tid 6663] [client 165.85.56.95:4525] AH01071: Got error 'PHP message: start 1763532471.9641', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:07:52.964160 2025] [proxy_fcgi:error] [pid 6644:tid 6663] [client 165.85.56.95:4525] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532472.9634-1763532471.9641', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:09:54.562405 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:27589] AH01071: Got error 'PHP message: start 1763532593.7851', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:09:55.020899 2025] [proxy_fcgi:error] [pid 6644:tid 6652] [client 165.85.56.95:27589] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532595.0202-1763532593.7851', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:11:56.096457 2025] [proxy_fcgi:error] [pid 12673:tid 12723] [client 165.85.56.95:12060] AH01071: Got error 'PHP message: start 1763532715.469', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:11:56.470470 2025] [proxy_fcgi:error] [pid 12673:tid 12723] [client 165.85.56.95:12060] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532716.4698-1763532715.469', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:13:57.599627 2025] [proxy_fcgi:error] [pid 12673:tid 12718] [client 165.85.56.95:5476] AH01071: Got error 'PHP message: start 1763532836.7898', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 14:13:58.084702 2025] [proxy_fcgi:error] [pid 12673:tid 12718] [client 165.85.56.95:5476] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763532838.084-1763532836.7898', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 19 16:45:54.946111 2025] [:error] [pid 6554:tid 6571] [client 222.79.103.59:43894] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR2Dwt8rvPWLafJFqmXZJwAAAAs"]
[Wed Nov 19 20:35:57.976416 2025] [:error] [pid 6919:tid 6935] [client 104.196.176.201:58235] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/system/js/core.js"] [unique_id "aR25rUYFdN1s_9xJVUmBhAAAAQ0"]
[Wed Nov 19 22:09:17.009177 2025] [:error] [pid 12643:tid 12657] [client 15.235.50.172:46310] [client 15.235.50.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.50.172, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aR3PjcaLCNSdLHNAGt4FAgAAAYs"]
[Wed Nov 19 22:09:17.021704 2025] [proxy_fcgi:error] [pid 12643:tid 12657] [client 15.235.50.172:46310] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 22:09:24.055801 2025] [:error] [pid 12673:tid 12723] [client 91.219.237.163:13858] [client 91.219.237.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.219.237.163, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aR3PlMab1F0fb062dH2D7AAAAhM"]
[Wed Nov 19 22:09:24.063419 2025] [proxy_fcgi:error] [pid 12673:tid 12723] [client 91.219.237.163:13858] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:39:57.748892 2025] [proxy_fcgi:error] [pid 50210:tid 50314] [client 217.9.247.196:36832] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:39:58.777593 2025] [proxy_fcgi:error] [pid 50210:tid 50318] [client 217.9.247.196:36832] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:39:59.285643 2025] [:error] [pid 50210:tid 50308] [client 217.9.247.196:36832] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aR3y399KVfTGhSw-ebumnAAAAAI"]
[Thu Nov 20 00:40:00.306365 2025] [proxy_fcgi:error] [pid 50236:tid 50382] [client 217.9.247.196:36838] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:00.814890 2025] [:error] [pid 50236:tid 50364] [client 217.9.247.196:36838] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aR3y4GT-l-atWVKihhsQpQAAAII"]
[Thu Nov 20 00:40:01.839241 2025] [proxy_fcgi:error] [pid 50210:tid 50312] [client 217.9.247.196:36842] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:02.866659 2025] [proxy_fcgi:error] [pid 50210:tid 50319] [client 217.9.247.196:36842] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:03.379207 2025] [proxy_fcgi:error] [pid 50210:tid 50318] [client 217.9.247.196:36842] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:03.900699 2025] [proxy_fcgi:error] [pid 50210:tid 50313] [client 217.9.247.196:36842] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:04.928169 2025] [:error] [pid 50210:tid 50329] [client 217.9.247.196:36842] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR3y5N9KVfTGhSw-ebumrgAAABc"]
[Thu Nov 20 00:40:05.949531 2025] [proxy_fcgi:error] [pid 50475:tid 50524] [client 217.9.247.196:36858] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:06.468068 2025] [proxy_fcgi:error] [pid 50475:tid 50535] [client 217.9.247.196:36858] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:07.024702 2025] [:error] [pid 50475:tid 50526] [client 217.9.247.196:36858] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aR3y51zRy2BTBjqrUmkXNwAAAQQ"]
[Thu Nov 20 00:40:08.044897 2025] [:error] [pid 50236:tid 50385] [client 217.9.247.196:34762] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aR3y6GT-l-atWVKihhsQsQAAAJc"]
[Thu Nov 20 00:40:09.077917 2025] [:error] [pid 50223:tid 50358] [client 217.9.247.196:34778] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aR3y6T4iSUKl66cdvvbIVAAAAFc"]
[Thu Nov 20 00:40:10.612379 2025] [:error] [pid 50223:tid 50355] [client 217.9.247.196:34784] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aR3y6j4iSUKl66cdvvbIVgAAAFQ"]
[Thu Nov 20 00:40:12.169558 2025] [:error] [pid 50223:tid 50351] [client 217.9.247.196:34796] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aR3y7D4iSUKl66cdvvbIWQAAAFA"]
[Thu Nov 20 00:40:14.216564 2025] [proxy_fcgi:error] [pid 50210:tid 50328] [client 217.9.247.196:34812] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:15.766381 2025] [proxy_fcgi:error] [pid 50210:tid 50316] [client 217.9.247.196:34812] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:16.274811 2025] [:error] [pid 50210:tid 50307] [client 217.9.247.196:34812] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aR3y8N9KVfTGhSw-ebumuQAAAAE"]
[Thu Nov 20 00:40:17.348666 2025] [:error] [pid 50223:tid 50344] [client 217.9.247.196:54162] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aR3y8T4iSUKl66cdvvbIcwAAAEk"]
[Thu Nov 20 00:40:18.893419 2025] [proxy_fcgi:error] [pid 50210:tid 50328] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:19.404252 2025] [proxy_fcgi:error] [pid 50210:tid 50329] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:19.916444 2025] [proxy_fcgi:error] [pid 50210:tid 50316] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:20.431862 2025] [proxy_fcgi:error] [pid 50210:tid 50315] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:20.948940 2025] [proxy_fcgi:error] [pid 50210:tid 50312] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:21.473983 2025] [proxy_fcgi:error] [pid 50210:tid 50306] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:21.988827 2025] [proxy_fcgi:error] [pid 50210:tid 50323] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:22.500965 2025] [proxy_fcgi:error] [pid 50210:tid 50324] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:23.013709 2025] [proxy_fcgi:error] [pid 50210:tid 50308] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:23.530463 2025] [proxy_fcgi:error] [pid 50210:tid 50316] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:24.045124 2025] [proxy_fcgi:error] [pid 50210:tid 50306] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:24.557274 2025] [proxy_fcgi:error] [pid 50210:tid 50320] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:25.069825 2025] [proxy_fcgi:error] [pid 50210:tid 50324] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:25.584388 2025] [proxy_fcgi:error] [pid 50210:tid 50318] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:26.098955 2025] [proxy_fcgi:error] [pid 50210:tid 50308] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:26.615879 2025] [proxy_fcgi:error] [pid 50210:tid 50313] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:27.127482 2025] [proxy_fcgi:error] [pid 50210:tid 50329] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:27.641947 2025] [proxy_fcgi:error] [pid 50210:tid 50316] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:28.153494 2025] [proxy_fcgi:error] [pid 50210:tid 50319] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:28.665199 2025] [proxy_fcgi:error] [pid 50210:tid 50312] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:29.177443 2025] [proxy_fcgi:error] [pid 50210:tid 50310] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:29.692015 2025] [proxy_fcgi:error] [pid 50210:tid 50320] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:30.204759 2025] [proxy_fcgi:error] [pid 50210:tid 50324] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:30.718017 2025] [proxy_fcgi:error] [pid 50210:tid 50322] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:31.229662 2025] [proxy_fcgi:error] [pid 50210:tid 50311] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:31.741893 2025] [proxy_fcgi:error] [pid 50210:tid 50318] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:32.255149 2025] [proxy_fcgi:error] [pid 50210:tid 50326] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:32.767672 2025] [proxy_fcgi:error] [pid 50210:tid 50317] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:33.280825 2025] [proxy_fcgi:error] [pid 50210:tid 50308] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:33.795070 2025] [proxy_fcgi:error] [pid 50210:tid 50313] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:34.306778 2025] [proxy_fcgi:error] [pid 50210:tid 50328] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:34.817883 2025] [proxy_fcgi:error] [pid 50210:tid 50315] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:35.330129 2025] [proxy_fcgi:error] [pid 50210:tid 50307] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:35.839661 2025] [:error] [pid 50210:tid 50321] [client 217.9.247.196:54178] [client 217.9.247.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.9.247.196, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aR3zA99KVfTGhSw-ebunDgAAAA8"]
[Thu Nov 20 00:40:35.845386 2025] [proxy_fcgi:error] [pid 50210:tid 50321] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:36.870239 2025] [proxy_fcgi:error] [pid 50210:tid 50330] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:37.392937 2025] [proxy_fcgi:error] [pid 50210:tid 50328] [client 217.9.247.196:54178] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:37.902067 2025] [:error] [pid 50210:tid 50319] [client 217.9.247.196:54178] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aR3zBd9KVfTGhSw-ebunFwAAAA0"]
[Thu Nov 20 00:40:38.926530 2025] [proxy_fcgi:error] [pid 50475:tid 50532] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:39.438860 2025] [proxy_fcgi:error] [pid 50475:tid 50541] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:40.463820 2025] [proxy_fcgi:error] [pid 50475:tid 50522] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:41.049985 2025] [proxy_fcgi:error] [pid 50475:tid 50546] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:41.566227 2025] [proxy_fcgi:error] [pid 50475:tid 50526] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:42.078593 2025] [proxy_fcgi:error] [pid 50475:tid 50536] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:42.592422 2025] [proxy_fcgi:error] [pid 50475:tid 50539] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:43.106596 2025] [proxy_fcgi:error] [pid 50475:tid 50530] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:43.617851 2025] [proxy_fcgi:error] [pid 50475:tid 50544] [client 217.9.247.196:43070] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:44.639946 2025] [:error] [pid 50475:tid 50529] [client 217.9.247.196:43070] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aR3zDFzRy2BTBjqrUmkXrQAAAQc"]
[Thu Nov 20 00:40:45.665950 2025] [proxy_fcgi:error] [pid 50475:tid 50542] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:46.180734 2025] [proxy_fcgi:error] [pid 50475:tid 50540] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:48.747968 2025] [proxy_fcgi:error] [pid 50475:tid 50535] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:49.268730 2025] [proxy_fcgi:error] [pid 50475:tid 50539] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:49.785678 2025] [proxy_fcgi:error] [pid 50475:tid 50526] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:50.297744 2025] [proxy_fcgi:error] [pid 50475:tid 50534] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:50.812753 2025] [proxy_fcgi:error] [pid 50475:tid 50524] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:52.353683 2025] [proxy_fcgi:error] [pid 50475:tid 50527] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:52.866031 2025] [proxy_fcgi:error] [pid 50475:tid 50540] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:53.378712 2025] [proxy_fcgi:error] [pid 50475:tid 50522] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:53.891303 2025] [proxy_fcgi:error] [pid 50475:tid 50531] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:54.404649 2025] [proxy_fcgi:error] [pid 50475:tid 50536] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:54.915882 2025] [proxy_fcgi:error] [pid 50475:tid 50523] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:55.428169 2025] [proxy_fcgi:error] [pid 50475:tid 50539] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:56.487277 2025] [proxy_fcgi:error] [pid 50475:tid 50546] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:57.001292 2025] [proxy_fcgi:error] [pid 50475:tid 50528] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:58.026539 2025] [proxy_fcgi:error] [pid 50475:tid 50530] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:58.537659 2025] [proxy_fcgi:error] [pid 50475:tid 50535] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:59.050334 2025] [proxy_fcgi:error] [pid 50475:tid 50533] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:40:59.567187 2025] [proxy_fcgi:error] [pid 50475:tid 50522] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:00.079658 2025] [proxy_fcgi:error] [pid 50475:tid 50539] [client 217.9.247.196:43074] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:00.587868 2025] [:error] [pid 50475:tid 50546] [client 217.9.247.196:43074] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aR3zHFzRy2BTBjqrUmkX4gAAARg"]
[Thu Nov 20 00:41:02.645659 2025] [proxy_fcgi:error] [pid 50210:tid 50329] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:03.159585 2025] [proxy_fcgi:error] [pid 50210:tid 50306] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:03.678469 2025] [proxy_fcgi:error] [pid 50210:tid 50318] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:04.190743 2025] [proxy_fcgi:error] [pid 50210:tid 50330] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:04.702640 2025] [proxy_fcgi:error] [pid 50210:tid 50317] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:05.214846 2025] [proxy_fcgi:error] [pid 50210:tid 50326] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:05.727449 2025] [proxy_fcgi:error] [pid 50210:tid 50309] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:06.239450 2025] [proxy_fcgi:error] [pid 50210:tid 50314] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:06.752730 2025] [proxy_fcgi:error] [pid 50210:tid 50320] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:07.268706 2025] [proxy_fcgi:error] [pid 50210:tid 50329] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:07.781052 2025] [proxy_fcgi:error] [pid 50210:tid 50311] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:08.294650 2025] [proxy_fcgi:error] [pid 50210:tid 50318] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:08.805873 2025] [proxy_fcgi:error] [pid 50210:tid 50330] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:09.320768 2025] [proxy_fcgi:error] [pid 50210:tid 50309] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:09.836209 2025] [proxy_fcgi:error] [pid 50210:tid 50313] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:10.349395 2025] [proxy_fcgi:error] [pid 50210:tid 50319] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:10.960358 2025] [proxy_fcgi:error] [pid 50210:tid 50328] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:11.472672 2025] [proxy_fcgi:error] [pid 50210:tid 50320] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:11.985024 2025] [proxy_fcgi:error] [pid 50210:tid 50307] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:12.498376 2025] [proxy_fcgi:error] [pid 50210:tid 50321] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:13.010211 2025] [proxy_fcgi:error] [pid 50210:tid 50324] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:13.522394 2025] [proxy_fcgi:error] [pid 50210:tid 50323] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:14.194917 2025] [proxy_fcgi:error] [pid 50210:tid 50330] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:14.708664 2025] [proxy_fcgi:error] [pid 50210:tid 50317] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:15.221295 2025] [proxy_fcgi:error] [pid 50210:tid 50310] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:15.731062 2025] [proxy_fcgi:error] [pid 50210:tid 50312] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:16.242125 2025] [proxy_fcgi:error] [pid 50210:tid 50328] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:16.757108 2025] [proxy_fcgi:error] [pid 50210:tid 50308] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:17.269267 2025] [proxy_fcgi:error] [pid 50210:tid 50327] [client 217.9.247.196:54560] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:27.522945 2025] [:error] [pid 50210:tid 50317] [client 217.9.247.196:54560] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aR3zN99KVfTGhSw-ebuneQAAAAs"]
[Thu Nov 20 00:41:29.057779 2025] [proxy_fcgi:error] [pid 50475:tid 50545] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:33.664043 2025] [proxy_fcgi:error] [pid 50475:tid 50533] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:34.176698 2025] [proxy_fcgi:error] [pid 50475:tid 50522] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:34.687612 2025] [proxy_fcgi:error] [pid 50475:tid 50531] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:36.225237 2025] [proxy_fcgi:error] [pid 50475:tid 50523] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:39.315425 2025] [proxy_fcgi:error] [pid 50475:tid 50531] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:39.828906 2025] [proxy_fcgi:error] [pid 50475:tid 50546] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:40.342042 2025] [proxy_fcgi:error] [pid 50475:tid 50545] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:40.855206 2025] [proxy_fcgi:error] [pid 50475:tid 50536] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:41.367060 2025] [proxy_fcgi:error] [pid 50475:tid 50530] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:41.879996 2025] [proxy_fcgi:error] [pid 50475:tid 50523] [client 217.9.247.196:55394] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:42.899481 2025] [:error] [pid 50475:tid 50538] [client 217.9.247.196:55394] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aR3zRlzRy2BTBjqrUmkYVwAAARA"]
[Thu Nov 20 00:41:43.918847 2025] [:error] [pid 50475:tid 50539] [client 217.9.247.196:37462] [client 217.9.247.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.9.247.196, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aR3zR1zRy2BTBjqrUmkYXwAAARE"]
[Thu Nov 20 00:41:43.923614 2025] [proxy_fcgi:error] [pid 50475:tid 50539] [client 217.9.247.196:37462] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:44.437893 2025] [proxy_fcgi:error] [pid 50475:tid 50534] [client 217.9.247.196:37462] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:45.458201 2025] [:error] [pid 50475:tid 50527] [client 217.9.247.196:37462] [client 217.9.247.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aR3zSVzRy2BTBjqrUmkYYwAAAQU"]
[Thu Nov 20 00:41:46.996878 2025] [proxy_fcgi:error] [pid 50223:tid 50349] [client 217.9.247.196:53542] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:41:49.556053 2025] [proxy_fcgi:error] [pid 50223:tid 50339] [client 217.9.247.196:53542] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 00:42:06.090950 2025] [autoindex:error] [pid 50236:tid 50369] [client 217.9.247.196:34644] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 00:42:06.627404 2025] [autoindex:error] [pid 50236:tid 50362] [client 217.9.247.196:34644] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 00:42:07.144718 2025] [autoindex:error] [pid 50236:tid 50375] [client 217.9.247.196:34644] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 00:42:27.563986 2025] [autoindex:error] [pid 50236:tid 50364] [client 217.9.247.196:34644] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 00:43:41.444718 2025] [autoindex:error] [pid 50223:tid 50354] [client 217.9.247.253:37266] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 00:45:21.573346 2025] [autoindex:error] [pid 50475:tid 50546] [client 217.9.247.253:59252] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 04:02:19.792818 2025] [proxy_fcgi:error] [pid 7245:tid 7268] [client 172.161.141.235:32742] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:02:20.055446 2025] [proxy_fcgi:error] [pid 7245:tid 7258] [client 172.161.141.235:32742] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:02:20.557449 2025] [proxy_fcgi:error] [pid 7245:tid 7265] [client 172.161.141.235:32742] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:02:20.800644 2025] [proxy_fcgi:error] [pid 7245:tid 7280] [client 172.161.141.235:32742] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:02:21.283479 2025] [:error] [pid 7245:tid 7257] [client 172.161.141.235:32742] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mgsl.php"] [unique_id "aR4iTb0gPLSIbFosl3BjPAAAAAA"]
[Thu Nov 20 04:02:23.718818 2025] [:error] [pid 7247:tid 7325] [client 172.161.141.235:26070] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mgsl.php"] [unique_id "aR4iTylgX4WZllK9HmnYKgAAAIs"]
[Thu Nov 20 04:02:40.437241 2025] [:error] [pid 7247:tid 7330] [client 172.161.141.235:25516] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-pano.php"] [unique_id "aR4iYClgX4WZllK9HmnYPgAAAJA"]
[Thu Nov 20 04:02:43.018363 2025] [:error] [pid 7245:tid 7266] [client 172.161.141.235:27029] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-pano.php"] [unique_id "aR4iY70gPLSIbFosl3BjVAAAAAk"]
[Thu Nov 20 04:02:44.733382 2025] [:error] [pid 7246:tid 7302] [client 172.161.141.235:30744] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-pano.php"] [unique_id "aR4iZEhPkS1NczY9JqvQWgAAAE8"]
[Thu Nov 20 04:02:48.388609 2025] [:error] [pid 7345:tid 7350] [client 172.161.141.235:30777] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-pano.php"] [unique_id "aR4iaISb7kC-gwisOotdKgAAAMM"]
[Thu Nov 20 04:02:50.082066 2025] [:error] [pid 7345:tid 7367] [client 172.161.141.235:25578] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/glmiiqmk.php"] [unique_id "aR4iaoSb7kC-gwisOotdMwAAANQ"]
[Thu Nov 20 04:02:54.723681 2025] [:error] [pid 7345:tid 7351] [client 172.161.141.235:32722] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/glmiiqmk.php"] [unique_id "aR4iboSb7kC-gwisOotdQQAAAMQ"]
[Thu Nov 20 04:03:15.124635 2025] [:error] [pid 7345:tid 7361] [client 172.161.141.235:33129] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-poose.php"] [unique_id "aR4ig4Sb7kC-gwisOotdYwAAAM4"]
[Thu Nov 20 04:03:18.689037 2025] [:error] [pid 7345:tid 7362] [client 172.161.141.235:29238] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-poose.php"] [unique_id "aR4ihoSb7kC-gwisOotdbAAAAM8"]
[Thu Nov 20 04:04:01.255129 2025] [proxy_fcgi:error] [pid 7245:tid 7280] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:01.510971 2025] [proxy_fcgi:error] [pid 7245:tid 7258] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:02.019763 2025] [proxy_fcgi:error] [pid 7245:tid 7268] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:02.277806 2025] [proxy_fcgi:error] [pid 7245:tid 7259] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:02.521036 2025] [proxy_fcgi:error] [pid 7245:tid 7274] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:02.772770 2025] [proxy_fcgi:error] [pid 7245:tid 7275] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:03.013107 2025] [proxy_fcgi:error] [pid 7245:tid 7279] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:03.256718 2025] [proxy_fcgi:error] [pid 7245:tid 7269] [client 172.161.141.235:26026] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:04:03.493880 2025] [:error] [pid 7245:tid 7260] [client 172.161.141.235:26026] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hel.php"] [unique_id "aR4is70gPLSIbFosl3Bj-wAAAAM"]
[Thu Nov 20 04:04:08.979244 2025] [:error] [pid 7245:tid 7259] [client 172.161.141.235:31146] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hel.php"] [unique_id "aR4iuL0gPLSIbFosl3Bj_wAAAAI"]
[Thu Nov 20 04:04:12.513526 2025] [:error] [pid 7246:tid 7297] [client 172.161.141.235:23526] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hel.php"] [unique_id "aR4ivEhPkS1NczY9JqvQxAAAAEo"]
[Thu Nov 20 04:04:15.912179 2025] [:error] [pid 7345:tid 7361] [client 172.161.141.235:18551] [client 172.161.141.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hel.php"] [unique_id "aR4iv4Sb7kC-gwisOotdyAAAAM4"]
[Thu Nov 20 04:05:28.520422 2025] [proxy_fcgi:error] [pid 38097:tid 38163] [client 172.161.141.235:23023] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:05:28.762952 2025] [proxy_fcgi:error] [pid 38097:tid 38164] [client 172.161.141.235:23023] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 04:05:29.248134 2025] [proxy_fcgi:error] [pid 38097:tid 38166] [client 172.161.141.235:23023] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 05:35:21.519043 2025] [:error] [pid 55342:tid 55378] [client 113.219.218.197:42766] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR44Gbg6x32Tvk7fIG80GwAAAEY"]
[Thu Nov 20 08:54:14.943227 2025] [proxy_fcgi:error] [pid 55342:tid 55394] [client 165.85.56.95:14640] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Thu Nov 20 08:54:17.092231 2025] [proxy_fcgi:error] [pid 55342:tid 55395] [client 165.85.56.95:14640] AH01071: Got error 'PHP message: start 1763600056.2445', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 08:54:17.159120 2025] [proxy_fcgi:error] [pid 55342:tid 55395] [client 165.85.56.95:14640] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763600057.1586-1763600056.2445', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 08:56:18.459434 2025] [proxy_fcgi:error] [pid 34444:tid 34451] [client 165.85.56.95:17338] AH01071: Got error 'PHP message: start 1763600177.7925', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 08:56:18.497650 2025] [proxy_fcgi:error] [pid 34444:tid 34451] [client 165.85.56.95:17338] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763600178.4971-1763600177.7925', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 08:58:19.969871 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 165.85.56.95:45039] AH01071: Got error 'PHP message: start 1763600299.3535', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 08:58:20.002870 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 165.85.56.95:45039] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763600300.0023-1763600299.3535', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:00:21.087987 2025] [proxy_fcgi:error] [pid 55430:tid 55438] [client 165.85.56.95:30349] AH01071: Got error 'PHP message: start 1763600420.5343', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:00:21.129655 2025] [proxy_fcgi:error] [pid 55430:tid 55438] [client 165.85.56.95:30349] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763600421.129-1763600420.5343', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:02:22.189003 2025] [proxy_fcgi:error] [pid 804:tid 834] [client 165.85.56.95:62966] AH01071: Got error 'PHP message: start 1763600541.5628', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:02:22.245310 2025] [proxy_fcgi:error] [pid 804:tid 834] [client 165.85.56.95:62966] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763600542.2447-1763600541.5628', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:03:01.511662 2025] [proxy_fcgi:error] [pid 34405:tid 34408] [client 165.85.56.95:22023] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:03:03.236022 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 165.85.56.95:22023] AH01071: Got error 'PHP message: start 1763600582.5369', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:03:03.925939 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 165.85.56.95:22023] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763600583.9253-1763600582.5369', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:03:22.504061 2025] [proxy_fcgi:error] [pid 34444:tid 34459] [client 165.85.56.95:34284] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-19
[Thu Nov 20 09:37:13.316842 2025] [proxy_fcgi:error] [pid 55342:tid 55395] [client 165.85.56.95:13785] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:14.002185 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 165.85.56.95:31796] AH01071: Got error 'PHP message: start 1763602633.579', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:14.802393 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 165.85.56.95:31796] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763602634.8018-1763602633.579', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:15.070596 2025] [proxy_fcgi:error] [pid 55342:tid 55377] [client 165.85.56.95:13785] AH01071: Got error 'PHP message: start 1763602634.8032', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:15.470872 2025] [proxy_fcgi:error] [pid 55342:tid 55377] [client 165.85.56.95:13785] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763602635.4702-1763602634.8032', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:20.189796 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 165.85.56.95:13785] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:20.816173 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 165.85.56.95:13785] AH01071: Got error 'PHP message: start 1763602640.654', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:37:21.361232 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 165.85.56.95:13785] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763602641.3607-1763602640.654', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:39:18.506321 2025] [proxy_fcgi:error] [pid 55342:tid 55394] [client 165.85.56.95:11401] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44636
[Thu Nov 20 09:39:27.832570 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 165.85.56.95:28267] AH01071: Got error 'PHP message: start 1763602767.7027', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:39:28.357947 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 165.85.56.95:28267] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763602768.3576-1763602767.7027', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:39:32.110402 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 165.85.56.95:28267] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:39:32.663773 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 165.85.56.95:28267] AH01071: Got error 'PHP message: start 1763602772.5435', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:39:33.193474 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 165.85.56.95:28267] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763602773.1929-1763602772.5435', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:40:15.740639 2025] [proxy_fcgi:error] [pid 55430:tid 55457] [client 165.85.56.95:17646] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: stockContractor in /home/pumpbooking/public_html/booking.php on line 62PHP message: PHP Notice:  Undefined index: stockContractor in /home/pumpbooking/public_html/booking.php on line 62PHP message: PHP Notice:  Undefined index: stockContractor in /home/pumpbooking/public_html/booking.php on line 62', referer: https://pumpbooking.com/booking.php?bookingID=44636
[Thu Nov 20 09:40:22.025950 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 165.85.56.95:32688] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44636
[Thu Nov 20 09:41:07.947922 2025] [proxy_fcgi:error] [pid 55342:tid 55383] [client 165.85.56.95:64706] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44636
[Thu Nov 20 09:41:23.585601 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 165.85.56.95:56572] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44636
[Thu Nov 20 09:41:25.012202 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.95:56572] AH01071: Got error 'PHP message: start 1763602884.5943', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:41:25.417722 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.95:56572] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763602885.4171-1763602884.5943', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 09:43:26.215060 2025] [proxy_fcgi:error] [pid 55343:tid 55416] [client 165.85.56.95:31033] AH01071: Got error 'PHP message: start 1763603005.7044', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:43:26.760021 2025] [proxy_fcgi:error] [pid 55343:tid 55416] [client 165.85.56.95:31033] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603006.7594-1763603005.7044', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:45:28.247836 2025] [proxy_fcgi:error] [pid 55340:tid 55367] [client 165.85.56.95:15577] AH01071: Got error 'PHP message: start 1763603127.461', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:45:28.926706 2025] [proxy_fcgi:error] [pid 55340:tid 55367] [client 165.85.56.95:15577] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603128.9258-1763603127.461', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:47:30.242053 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 165.85.56.95:36339] AH01071: Got error 'PHP message: start 1763603249.7841', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:47:30.628847 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 165.85.56.95:36339] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603250.6282-1763603249.7841', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:49:31.648924 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.95:30963] AH01071: Got error 'PHP message: start 1763603371.1364', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:49:32.017230 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.95:30963] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603372.0166-1763603371.1364', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:51:33.434604 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 165.85.56.95:23015] AH01071: Got error 'PHP message: start 1763603492.9026', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:51:33.814925 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 165.85.56.95:23015] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603493.8144-1763603492.9026', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:53:35.292672 2025] [proxy_fcgi:error] [pid 55340:tid 55351] [client 165.85.56.95:36858] AH01071: Got error 'PHP message: start 1763603614.7438', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:53:35.664705 2025] [proxy_fcgi:error] [pid 55340:tid 55351] [client 165.85.56.95:36858] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603615.664-1763603614.7438', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:55:36.519252 2025] [proxy_fcgi:error] [pid 55342:tid 55382] [client 165.85.56.95:15893] AH01071: Got error 'PHP message: start 1763603736.1206', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:55:36.814905 2025] [proxy_fcgi:error] [pid 55342:tid 55382] [client 165.85.56.95:15893] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603736.8144-1763603736.1206', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:57:37.795001 2025] [proxy_fcgi:error] [pid 55340:tid 55364] [client 165.85.56.95:25573] AH01071: Got error 'PHP message: start 1763603857.2853', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:57:38.204387 2025] [proxy_fcgi:error] [pid 55340:tid 55364] [client 165.85.56.95:25573] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603858.2039-1763603857.2853', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:58:21.224839 2025] [:error] [pid 55340:tid 55348] [client 89.185.82.43:59546] [client 89.185.82.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aR51vfOxD-NeMydTybAXlwAAAAM"]
[Thu Nov 20 09:59:39.098150 2025] [proxy_fcgi:error] [pid 55342:tid 55393] [client 165.85.56.95:60750] AH01071: Got error 'PHP message: start 1763603978.6472', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 09:59:39.596126 2025] [proxy_fcgi:error] [pid 55342:tid 55393] [client 165.85.56.95:60750] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763603979.5956-1763603978.6472', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:01:41.154915 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 165.85.56.95:42390] AH01071: Got error 'PHP message: start 1763604100.4639', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:01:41.649743 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 165.85.56.95:42390] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604101.6485-1763604100.4639', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:03:42.903932 2025] [proxy_fcgi:error] [pid 804:tid 844] [client 165.85.56.95:18979] AH01071: Got error 'PHP message: start 1763604222.4832', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:03:43.352906 2025] [proxy_fcgi:error] [pid 804:tid 844] [client 165.85.56.95:18979] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604223.3519-1763604222.4832', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:05:44.780631 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 165.85.56.95:62300] AH01071: Got error 'PHP message: start 1763604344.1756', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:05:45.281464 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 165.85.56.95:62300] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604345.281-1763604344.1756', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:07:46.766884 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 165.85.56.95:62656] AH01071: Got error 'PHP message: start 1763604466.07', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:07:47.174676 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 165.85.56.95:62656] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604467.1739-1763604466.07', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:09:48.427362 2025] [proxy_fcgi:error] [pid 55340:tid 55366] [client 165.85.56.95:29588] AH01071: Got error 'PHP message: start 1763604587.943', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:09:48.747468 2025] [proxy_fcgi:error] [pid 55340:tid 55366] [client 165.85.56.95:29588] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604588.7467-1763604587.943', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:11:50.814512 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 165.85.56.95:20758] AH01071: Got error 'PHP message: start 1763604709.5197', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:11:51.254726 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 165.85.56.95:20758] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604711.2541-1763604709.5197', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:13:52.098616 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 165.85.56.95:22356] AH01071: Got error 'PHP message: start 1763604831.6822', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:13:52.553057 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 165.85.56.95:22356] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604832.5523-1763604831.6822', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:15:53.826910 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 165.85.56.95:30671] AH01071: Got error 'PHP message: start 1763604953.3821', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:15:54.168630 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 165.85.56.95:30671] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763604954.1681-1763604953.3821', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:17:55.133008 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 165.85.56.95:36184] AH01071: Got error 'PHP message: start 1763605074.6141', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:17:55.622432 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 165.85.56.95:36184] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605075.6218-1763605074.6141', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:19:56.476010 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 165.85.56.95:12163] AH01071: Got error 'PHP message: start 1763605196.0701', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:19:56.840200 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 165.85.56.95:12163] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605196.8397-1763605196.0701', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:21:58.034633 2025] [proxy_fcgi:error] [pid 34444:tid 34454] [client 165.85.56.95:63176] AH01071: Got error 'PHP message: start 1763605317.2407', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:21:58.518544 2025] [proxy_fcgi:error] [pid 34444:tid 34454] [client 165.85.56.95:63176] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605318.518-1763605317.2407', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:23:59.982668 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 165.85.56.95:38357] AH01071: Got error 'PHP message: start 1763605439.3192', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:24:00.336893 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 165.85.56.95:38357] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605440.3363-1763605439.3192', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:26:01.214587 2025] [proxy_fcgi:error] [pid 55342:tid 55393] [client 165.85.56.95:2707] AH01071: Got error 'PHP message: start 1763605560.7645', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:26:01.741278 2025] [proxy_fcgi:error] [pid 55342:tid 55393] [client 165.85.56.95:2707] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605561.7407-1763605560.7645', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:28:02.989935 2025] [proxy_fcgi:error] [pid 55342:tid 55381] [client 165.85.56.95:27225] AH01071: Got error 'PHP message: start 1763605682.5124', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:28:03.559015 2025] [proxy_fcgi:error] [pid 55342:tid 55381] [client 165.85.56.95:27225] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605683.5584-1763605682.5124', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:30:04.488362 2025] [proxy_fcgi:error] [pid 55340:tid 55356] [client 165.85.56.95:44456] AH01071: Got error 'PHP message: start 1763605804.0394', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:30:04.961711 2025] [proxy_fcgi:error] [pid 55340:tid 55356] [client 165.85.56.95:44456] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605804.9611-1763605804.0394', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:32:06.266882 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 165.85.56.95:51919] AH01071: Got error 'PHP message: start 1763605925.811', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:32:06.644238 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 165.85.56.95:51919] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763605926.6436-1763605925.811', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 10:33:42.892639 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 165.85.56.95:62745] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 10:33:45.219979 2025] [proxy_fcgi:error] [pid 55340:tid 55362] [client 165.85.56.95:62745] AH01071: Got error 'PHP message: start 1763606024.5834', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 10:33:45.627383 2025] [proxy_fcgi:error] [pid 55340:tid 55362] [client 165.85.56.95:62745] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763606025.6269-1763606024.5834', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 11:00:23.685611 2025] [:error] [pid 55343:tid 55405] [client 89.185.82.43:41160] [client 89.185.82.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aR6ER1WlO3EnyVMV7w5TAQAAAIY"]
[Thu Nov 20 12:10:22.339887 2025] [:error] [pid 55343:tid 55413] [client 98.81.111.26:53414] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6UrlWlO3EnyVMV7w5lIgAAAI4"]
[Thu Nov 20 12:10:22.749676 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:50355] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6UrjFpvu8oRK7ATfvJSAAAARc"]
[Thu Nov 20 12:10:23.158062 2025] [:error] [pid 804:tid 843] [client 98.81.111.26:55831] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6Ur_aRHpUlPL9O0Lk13QAAAZM"]
[Thu Nov 20 12:10:23.581343 2025] [:error] [pid 55343:tid 55401] [client 98.81.111.26:61299] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6Ur1WlO3EnyVMV7w5lXAAAAII"]
[Thu Nov 20 12:10:24.042881 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:63963] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6UsPPZXaIMEU4pE7uhMAAAAMI"]
[Thu Nov 20 12:14:30.966069 2025] [proxy_fcgi:error] [pid 55430:tid 55433] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:14:31.742801 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:14:32.009751 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:14:32.223943 2025] [proxy_fcgi:error] [pid 55430:tid 55457] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:32.472955 2025] [proxy_fcgi:error] [pid 55430:tid 55456] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:32.699766 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:32.913507 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:14:33.130961 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:33.346223 2025] [proxy_fcgi:error] [pid 55430:tid 55452] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:14:33.611649 2025] [proxy_fcgi:error] [pid 55430:tid 55454] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:33.873279 2025] [proxy_fcgi:error] [pid 55430:tid 55447] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:34.087683 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:14:35.004970 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:35.221690 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:35.688078 2025] [proxy_fcgi:error] [pid 55430:tid 55457] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:36.310851 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:36.684060 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:36.902238 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:37.132453 2025] [proxy_fcgi:error] [pid 55430:tid 55454] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:37.356979 2025] [proxy_fcgi:error] [pid 55430:tid 55438] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:38.410209 2025] [proxy_fcgi:error] [pid 55430:tid 55433] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:14:38.623525 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:14:39.024583 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:39.301810 2025] [proxy_fcgi:error] [pid 55430:tid 55453] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:39.555007 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:40.612793 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:40.839295 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:41.052829 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:41.292207 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:41.743982 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:42.509005 2025] [proxy_fcgi:error] [pid 55430:tid 55438] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:42.734262 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:14:45.704404 2025] [proxy_fcgi:error] [pid 55430:tid 55457] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:45.917409 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:14:46.154429 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:46.367376 2025] [proxy_fcgi:error] [pid 55430:tid 55453] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:46.593772 2025] [proxy_fcgi:error] [pid 55430:tid 55455] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:46.820412 2025] [proxy_fcgi:error] [pid 55430:tid 55438] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:47.828105 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:14:48.299090 2025] [proxy_fcgi:error] [pid 55430:tid 55433] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:48.787864 2025] [proxy_fcgi:error] [pid 55430:tid 55457] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:49.000767 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:14:49.236082 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:49.453628 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:49.663921 2025] [:error] [pid 55430:tid 55446] [client 20.1.171.223:4634] [client 20.1.171.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.1.171.223, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aR6VufPZXaIMEU4pE7ulaQAAAM0"], referer: https://duckduckgo.com/
[Thu Nov 20 12:14:49.667841 2025] [proxy_fcgi:error] [pid 55430:tid 55446] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:50.100017 2025] [proxy_fcgi:error] [pid 55430:tid 55454] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:51.737974 2025] [proxy_fcgi:error] [pid 55430:tid 55437] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:51.962817 2025] [proxy_fcgi:error] [pid 55430:tid 55445] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:52.180174 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 20.1.171.223:4634] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:52.390123 2025] [:error] [pid 55430:tid 55449] [client 20.1.171.223:4634] [client 20.1.171.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aR6VvPPZXaIMEU4pE7ulcgAAANA"], referer: https://www.google.fr/
[Thu Nov 20 12:14:54.895144 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 20.1.171.223:9049] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:14:55.781042 2025] [proxy_fcgi:error] [pid 55430:tid 55446] [client 20.1.171.223:9049] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:14:55.999648 2025] [proxy_fcgi:error] [pid 55430:tid 55454] [client 20.1.171.223:9049] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:14:56.420790 2025] [:error] [pid 55430:tid 55438] [client 20.1.171.223:9049] [client 20.1.171.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR6VwPPZXaIMEU4pE7ulfgAAAMU"], referer: https://www.google.com/
[Thu Nov 20 12:14:57.826480 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 20.1.171.223:3468] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:14:59.484747 2025] [proxy_fcgi:error] [pid 55343:tid 55402] [client 20.1.171.223:3468] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:14:59.698484 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 20.1.171.223:3468] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:00.361402 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 20.1.171.223:3468] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:01.219875 2025] [:error] [pid 55343:tid 55418] [client 20.1.171.223:3468] [client 20.1.171.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR6VxVWlO3EnyVMV7w5oLQAAAJM"], referer: https://www.google.fr/
[Thu Nov 20 12:15:02.760597 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:02.973885 2025] [proxy_fcgi:error] [pid 55342:tid 55394] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:03.422617 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:03.647592 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:03.989543 2025] [proxy_fcgi:error] [pid 55342:tid 55395] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:04.207981 2025] [proxy_fcgi:error] [pid 55342:tid 55374] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:04.421116 2025] [proxy_fcgi:error] [pid 55342:tid 55383] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:04.643558 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:04.854947 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:05.078779 2025] [proxy_fcgi:error] [pid 55342:tid 55376] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:06.051243 2025] [proxy_fcgi:error] [pid 55342:tid 55390] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:06.260412 2025] [:error] [pid 55342:tid 55372] [client 20.1.171.223:4061] [client 20.1.171.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.1.171.223, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aR6Vyrg6x32Tvk7fIG-OgAAAAEA"], referer: https://www.yahoo.com/
[Thu Nov 20 12:15:06.265210 2025] [proxy_fcgi:error] [pid 55342:tid 55372] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:06.503234 2025] [proxy_fcgi:error] [pid 55342:tid 55377] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:07.089653 2025] [proxy_fcgi:error] [pid 55342:tid 55389] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:07.312721 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:07.597414 2025] [proxy_fcgi:error] [pid 55342:tid 55379] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:15:07.809670 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:08.022169 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:08.235172 2025] [proxy_fcgi:error] [pid 55342:tid 55375] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:08.449089 2025] [proxy_fcgi:error] [pid 55342:tid 55374] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:08.664530 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:09.090245 2025] [proxy_fcgi:error] [pid 55342:tid 55383] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:09.305012 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:09.529677 2025] [proxy_fcgi:error] [pid 55342:tid 55380] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:09.761406 2025] [proxy_fcgi:error] [pid 55342:tid 55376] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:10.116391 2025] [proxy_fcgi:error] [pid 55342:tid 55393] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:10.487269 2025] [proxy_fcgi:error] [pid 55342:tid 55382] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:10.727118 2025] [proxy_fcgi:error] [pid 55342:tid 55390] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:10.956208 2025] [proxy_fcgi:error] [pid 55342:tid 55372] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:11.170961 2025] [proxy_fcgi:error] [pid 55342:tid 55391] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:11.395254 2025] [proxy_fcgi:error] [pid 55342:tid 55377] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:15:11.609903 2025] [proxy_fcgi:error] [pid 55342:tid 55381] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:12.511427 2025] [proxy_fcgi:error] [pid 55342:tid 55389] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:15:13.050786 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:13.264235 2025] [proxy_fcgi:error] [pid 55342:tid 55379] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:13.480819 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:14.300807 2025] [proxy_fcgi:error] [pid 55342:tid 55373] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:15.817512 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:15:16.049199 2025] [proxy_fcgi:error] [pid 55342:tid 55383] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:15:16.263001 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:16.478901 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:15:16.696224 2025] [proxy_fcgi:error] [pid 55342:tid 55380] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:15:16.946986 2025] [proxy_fcgi:error] [pid 55342:tid 55376] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:15:17.188874 2025] [proxy_fcgi:error] [pid 55342:tid 55382] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:17.412700 2025] [proxy_fcgi:error] [pid 55342:tid 55390] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:17.630152 2025] [proxy_fcgi:error] [pid 55342:tid 55391] [client 20.1.171.223:4061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:25.585733 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:25.816095 2025] [proxy_fcgi:error] [pid 55342:tid 55379] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:26.032177 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:26.244362 2025] [proxy_fcgi:error] [pid 55342:tid 55373] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:26.497919 2025] [proxy_fcgi:error] [pid 55342:tid 55375] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 12:15:26.713592 2025] [proxy_fcgi:error] [pid 55342:tid 55374] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:26.926828 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:27.241247 2025] [proxy_fcgi:error] [pid 55342:tid 55383] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 12:15:27.657255 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 12:15:28.114466 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:28.617108 2025] [proxy_fcgi:error] [pid 55342:tid 55380] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 12:15:28.858852 2025] [proxy_fcgi:error] [pid 55342:tid 55376] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 12:15:29.079987 2025] [proxy_fcgi:error] [pid 55342:tid 55382] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 12:15:29.704686 2025] [proxy_fcgi:error] [pid 55342:tid 55390] [client 20.1.171.223:1185] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 12:15:52.045728 2025] [:error] [pid 804:tid 845] [client 98.81.111.26:60015] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6V-PaRHpUlPL9O0Lk5LwAAAZU"]
[Thu Nov 20 12:15:52.453871 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:62235] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6V-POxD-NeMydTybBNaQAAABM"]
[Thu Nov 20 12:15:52.860142 2025] [:error] [pid 55343:tid 55420] [client 98.81.111.26:64546] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6V-FWlO3EnyVMV7w5ovQAAAJU"]
[Thu Nov 20 12:15:53.269927 2025] [:error] [pid 55342:tid 55394] [client 98.81.111.26:50266] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6V-bg6x32Tvk7fIG-PUAAAAFY"]
[Thu Nov 20 12:15:53.682965 2025] [:error] [pid 55430:tid 55456] [client 98.81.111.26:52377] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR6V-fPZXaIMEU4pE7umPQAAANc"]
[Thu Nov 20 13:08:53.862057 2025] [proxy_fcgi:error] [pid 804:tid 834] [client 165.85.56.95:20775] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Thu Nov 20 13:08:56.769803 2025] [proxy_fcgi:error] [pid 55340:tid 55352] [client 165.85.56.95:33064] AH01071: Got error 'PHP message: start 1763615335.9915', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:08:56.812799 2025] [proxy_fcgi:error] [pid 55340:tid 55352] [client 165.85.56.95:33064] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615336.8123-1763615335.9915', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:08:57.694659 2025] [proxy_fcgi:error] [pid 804:tid 848] [client 165.85.56.95:38977] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Thu Nov 20 13:09:00.106779 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 165.85.56.95:54029] AH01071: Got error 'PHP message: start 1763615339.4106', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:09:00.157057 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 165.85.56.95:54029] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615340.1566-1763615339.4106', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:09:03.389748 2025] [proxy_fcgi:error] [pid 55342:tid 55389] [client 165.85.56.95:31932] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:09:08.485649 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 165.85.56.95:31932] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:09:15.314298 2025] [proxy_fcgi:error] [pid 804:tid 839] [client 165.85.56.95:34752] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:09:16.775548 2025] [proxy_fcgi:error] [pid 804:tid 843] [client 165.85.56.95:34752] AH01071: Got error 'PHP message: start 1763615356.1758', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:09:17.151188 2025] [proxy_fcgi:error] [pid 804:tid 843] [client 165.85.56.95:34752] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615357.1506-1763615356.1758', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:09:33.064575 2025] [proxy_fcgi:error] [pid 34405:tid 34428] [client 165.85.56.95:57396] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:09:34.930323 2025] [proxy_fcgi:error] [pid 34405:tid 34426] [client 165.85.56.95:57396] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:11:18.485457 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 165.85.56.95:37475] AH01071: Got error 'PHP message: start 1763615477.7735', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:11:18.847934 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 165.85.56.95:37475] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615478.8472-1763615477.7735', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:13:20.459810 2025] [proxy_fcgi:error] [pid 55340:tid 55354] [client 165.85.56.95:1207] AH01071: Got error 'PHP message: start 1763615599.7339', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:13:20.975027 2025] [proxy_fcgi:error] [pid 55340:tid 55354] [client 165.85.56.95:1207] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615600.9744-1763615599.7339', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:15:22.388963 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 165.85.56.95:16615] AH01071: Got error 'PHP message: start 1763615721.7821', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:15:22.634290 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 165.85.56.95:16615] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615722.6337-1763615721.7821', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:17:24.020187 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 165.85.56.95:13170] AH01071: Got error 'PHP message: start 1763615843.4555', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:17:24.262970 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 165.85.56.95:13170] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615844.2623-1763615843.4555', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:19:26.392540 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 165.85.56.95:46154] AH01071: Got error 'PHP message: start 1763615965.7163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:19:26.779844 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 165.85.56.95:46154] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763615966.7792-1763615965.7163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:21:28.490375 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 165.85.56.95:44885] AH01071: Got error 'PHP message: start 1763616087.6173', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:21:28.801880 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 165.85.56.95:44885] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616088.8012-1763616087.6173', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:23:30.299286 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 165.85.56.95:43696] AH01071: Got error 'PHP message: start 1763616209.6246', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:23:30.538130 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 165.85.56.95:43696] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616210.5376-1763616209.6246', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:25:31.941650 2025] [proxy_fcgi:error] [pid 55340:tid 55352] [client 165.85.56.95:19195] AH01071: Got error 'PHP message: start 1763616331.2617', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:25:32.224924 2025] [proxy_fcgi:error] [pid 55340:tid 55352] [client 165.85.56.95:19195] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616332.2243-1763616331.2617', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:27:33.641564 2025] [proxy_fcgi:error] [pid 55430:tid 55440] [client 165.85.56.95:25619] AH01071: Got error 'PHP message: start 1763616452.9092', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:27:34.016009 2025] [proxy_fcgi:error] [pid 55430:tid 55440] [client 165.85.56.95:25619] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616454.0154-1763616452.9092', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:28:50.043801 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44628
[Thu Nov 20 13:28:51.533376 2025] [proxy_fcgi:error] [pid 55430:tid 55446] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: start 1763616530.7763', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:28:51.570684 2025] [proxy_fcgi:error] [pid 55430:tid 55446] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616531.5702-1763616530.7763', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:28:55.106296 2025] [proxy_fcgi:error] [pid 55430:tid 55440] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:28:55.834850 2025] [proxy_fcgi:error] [pid 34444:tid 34470] [client 165.85.56.95:22763] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:28:57.047973 2025] [proxy_fcgi:error] [pid 34444:tid 34462] [client 165.85.56.95:22763] AH01071: Got error 'PHP message: start 1763616536.7828', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:28:57.606387 2025] [proxy_fcgi:error] [pid 34444:tid 34462] [client 165.85.56.95:22763] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616537.6061-1763616536.7828', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:29:03.147063 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 165.85.56.95:45072] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:29:44.821647 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 165.85.56.95:27820] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:29:46.522777 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 165.85.56.95:27820] AH01071: Got error 'PHP message: start 1763616586.0795', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:29:47.487207 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 165.85.56.95:27820] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616587.4869-1763616586.0795', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:29:52.539194 2025] [proxy_fcgi:error] [pid 55340:tid 55368] [client 165.85.56.95:27820] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:29:53.778701 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 165.85.56.95:27820] AH01071: Got error 'PHP message: start 1763616593.6685', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:29:54.402895 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 165.85.56.95:27820] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616594.4025-1763616593.6685', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:30:14.780828 2025] [proxy_fcgi:error] [pid 34444:tid 34465] [client 165.85.56.95:31341] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:31:55.502114 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 165.85.56.95:51172] AH01071: Got error 'PHP message: start 1763616714.9605', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:31:56.388198 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 165.85.56.95:51172] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616716.3876-1763616714.9605', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:33:57.919820 2025] [proxy_fcgi:error] [pid 55430:tid 55456] [client 165.85.56.95:3374] AH01071: Got error 'PHP message: start 1763616837.2719', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:33:58.898057 2025] [proxy_fcgi:error] [pid 55430:tid 55456] [client 165.85.56.95:3374] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616838.8975-1763616837.2719', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:36:00.308034 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 165.85.56.95:20747] AH01071: Got error 'PHP message: start 1763616959.6236', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:36:01.214628 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 165.85.56.95:20747] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763616961.2138-1763616959.6236', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:38:02.848779 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 165.85.56.95:7508] AH01071: Got error 'PHP message: start 1763617082.0868', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:38:04.001493 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 165.85.56.95:7508] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617084.0009-1763617082.0868', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:39:26.326413 2025] [proxy_fcgi:error] [pid 34405:tid 34427] [client 165.85.56.95:25443] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:39:27.419128 2025] [proxy_fcgi:error] [pid 34405:tid 34413] [client 165.85.56.95:25443] AH01071: Got error 'PHP message: start 1763617167.075', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:39:28.009248 2025] [proxy_fcgi:error] [pid 34405:tid 34413] [client 165.85.56.95:25443] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617168.0088-1763617167.075', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:39:28.214909 2025] [proxy_fcgi:error] [pid 40415:tid 40428] [client 165.85.56.95:2674] AH01071: Got error 'PHP message: start 1763617168.0101', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:39:28.526615 2025] [proxy_fcgi:error] [pid 40415:tid 40428] [client 165.85.56.95:2674] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617168.5261-1763617168.0101', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:40:05.727510 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 165.85.56.95:49036] AH01071: Got error 'PHP message: start 1763617205.1012', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:40:06.629798 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 165.85.56.95:49036] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617206.6293-1763617205.1012', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:41:22.811397 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 165.85.56.95:65253] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/booking.php?bookingID=43644
[Thu Nov 20 13:41:29.179702 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 165.85.56.95:65253] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:41:29.445520 2025] [proxy_fcgi:error] [pid 55340:tid 55346] [client 165.85.56.95:60206] AH01071: Got error 'PHP message: start 1763617289.0005', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:41:30.165949 2025] [proxy_fcgi:error] [pid 55340:tid 55346] [client 165.85.56.95:60206] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617290.1654-1763617289.0005', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:41:33.173621 2025] [proxy_fcgi:error] [pid 55340:tid 55365] [client 165.85.56.95:60206] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:41:34.035204 2025] [proxy_fcgi:error] [pid 55340:tid 55354] [client 165.85.56.95:60206] AH01071: Got error 'PHP message: start 1763617293.8307', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:41:34.797433 2025] [proxy_fcgi:error] [pid 55340:tid 55354] [client 165.85.56.95:60206] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617294.7968-1763617293.8307', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:41:53.933942 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 165.85.56.95:3867] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/booking.php?bookingID=43644
[Thu Nov 20 13:42:01.060064 2025] [proxy_fcgi:error] [pid 55340:tid 55366] [client 165.85.56.95:3867] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 13:42:07.883558 2025] [proxy_fcgi:error] [pid 40537:tid 40556] [client 165.85.56.95:24493] AH01071: Got error 'PHP message: start 1763617327.5649', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:42:09.011922 2025] [proxy_fcgi:error] [pid 40537:tid 40556] [client 165.85.56.95:24493] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617329.0115-1763617327.5649', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:42:33.615639 2025] [proxy_fcgi:error] [pid 40445:tid 40478] [client 165.85.56.95:48257] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:42:34.416635 2025] [proxy_fcgi:error] [pid 40445:tid 40489] [client 165.85.56.95:48257] AH01071: Got error 'PHP message: start 1763617354.2641', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:42:34.651798 2025] [proxy_fcgi:error] [pid 40445:tid 40489] [client 165.85.56.95:48257] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617354.6513-1763617354.2641', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:44:10.431858 2025] [proxy_fcgi:error] [pid 40415:tid 40432] [client 165.85.56.95:7246] AH01071: Got error 'PHP message: start 1763617449.8359', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:44:11.506790 2025] [proxy_fcgi:error] [pid 40415:tid 40432] [client 165.85.56.95:7246] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617451.5062-1763617449.8359', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:44:35.596974 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 165.85.56.95:40781] AH01071: Got error 'PHP message: start 1763617475.1352', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:44:35.981415 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 165.85.56.95:40781] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617475.9808-1763617475.1352', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:46:12.902079 2025] [proxy_fcgi:error] [pid 34405:tid 34407] [client 165.85.56.95:49934] AH01071: Got error 'PHP message: start 1763617572.3155', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:46:13.839907 2025] [proxy_fcgi:error] [pid 34405:tid 34407] [client 165.85.56.95:49934] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617573.8392-1763617572.3155', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:46:36.760288 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 165.85.56.95:58225] AH01071: Got error 'PHP message: start 1763617596.3386', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:46:36.986723 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 165.85.56.95:58225] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617596.986-1763617596.3386', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:48:15.547034 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 165.85.56.95:15905] AH01071: Got error 'PHP message: start 1763617694.8899', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:48:16.457515 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 165.85.56.95:15905] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617696.4568-1763617694.8899', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:48:37.871102 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 165.85.56.95:43412] AH01071: Got error 'PHP message: start 1763617717.4366', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:48:38.147460 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 165.85.56.95:43412] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617718.1468-1763617717.4366', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:49:09.612362 2025] [proxy_fcgi:error] [pid 40636:tid 40656] [client 165.85.56.95:24510] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:49:11.345643 2025] [proxy_fcgi:error] [pid 40636:tid 40661] [client 165.85.56.95:24510] AH01071: Got error 'PHP message: start 1763617751.2017', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:49:11.783314 2025] [proxy_fcgi:error] [pid 40636:tid 40661] [client 165.85.56.95:24510] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617751.7828-1763617751.2017', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 13:50:39.035989 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 165.85.56.95:59666] AH01071: Got error 'PHP message: start 1763617838.603', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:50:39.428216 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 165.85.56.95:59666] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617839.4277-1763617838.603', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:51:12.912718 2025] [proxy_fcgi:error] [pid 55343:tid 55415] [client 165.85.56.95:35578] AH01071: Got error 'PHP message: start 1763617872.4532', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:51:13.291562 2025] [proxy_fcgi:error] [pid 55343:tid 55415] [client 165.85.56.95:35578] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617873.2909-1763617872.4532', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:52:40.329369 2025] [proxy_fcgi:error] [pid 40508:tid 40528] [client 165.85.56.95:50350] AH01071: Got error 'PHP message: start 1763617959.9339', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:52:40.583675 2025] [proxy_fcgi:error] [pid 40508:tid 40528] [client 165.85.56.95:50350] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617960.583-1763617959.9339', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:53:14.535089 2025] [proxy_fcgi:error] [pid 40445:tid 40487] [client 165.85.56.95:40341] AH01071: Got error 'PHP message: start 1763617994.1106', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:53:14.803971 2025] [proxy_fcgi:error] [pid 40445:tid 40487] [client 165.85.56.95:40341] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763617994.8032-1763617994.1106', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:54:41.569089 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 165.85.56.95:20390] AH01071: Got error 'PHP message: start 1763618081.0989', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:54:41.877091 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 165.85.56.95:20390] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618081.8764-1763618081.0989', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:55:16.172776 2025] [proxy_fcgi:error] [pid 40537:tid 40543] [client 165.85.56.95:10775] AH01071: Got error 'PHP message: start 1763618115.758', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:55:16.509732 2025] [proxy_fcgi:error] [pid 40537:tid 40543] [client 165.85.56.95:10775] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618116.5091-1763618115.758', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:56:42.812970 2025] [proxy_fcgi:error] [pid 40508:tid 40517] [client 165.85.56.95:39794] AH01071: Got error 'PHP message: start 1763618202.3589', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:56:43.060086 2025] [proxy_fcgi:error] [pid 40508:tid 40517] [client 165.85.56.95:39794] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618203.0596-1763618202.3589', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:57:17.846346 2025] [proxy_fcgi:error] [pid 55340:tid 55364] [client 165.85.56.95:1924] AH01071: Got error 'PHP message: start 1763618237.4134', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:57:18.199719 2025] [proxy_fcgi:error] [pid 55340:tid 55364] [client 165.85.56.95:1924] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618238.1991-1763618237.4134', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:58:43.929404 2025] [proxy_fcgi:error] [pid 40415:tid 40426] [client 165.85.56.95:19332] AH01071: Got error 'PHP message: start 1763618323.54', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:58:44.199810 2025] [proxy_fcgi:error] [pid 40415:tid 40426] [client 165.85.56.95:19332] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618324.1991-1763618323.54', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:59:20.161035 2025] [proxy_fcgi:error] [pid 55342:tid 55372] [client 165.85.56.95:18606] AH01071: Got error 'PHP message: start 1763618359.7728', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 13:59:20.502038 2025] [proxy_fcgi:error] [pid 55342:tid 55372] [client 165.85.56.95:18606] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618360.5014-1763618359.7728', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:00:45.247820 2025] [proxy_fcgi:error] [pid 34405:tid 34431] [client 165.85.56.95:6520] AH01071: Got error 'PHP message: start 1763618444.8571', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:00:45.507974 2025] [proxy_fcgi:error] [pid 34405:tid 34431] [client 165.85.56.95:6520] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618445.5073-1763618444.8571', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:01:21.979768 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 165.85.56.95:6272] AH01071: Got error 'PHP message: start 1763618481.5351', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:01:22.212074 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 165.85.56.95:6272] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618482.2113-1763618481.5351', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:02:46.473745 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 165.85.56.95:62697] AH01071: Got error 'PHP message: start 1763618566.0684', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:02:46.794211 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 165.85.56.95:62697] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618566.7936-1763618566.0684', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:03:25.156343 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 165.85.56.95:16479] AH01071: Got error 'PHP message: start 1763618604.7303', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:03:25.533667 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 165.85.56.95:16479] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618605.5329-1763618604.7303', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:04:47.778173 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 165.85.56.95:10394] AH01071: Got error 'PHP message: start 1763618687.3832', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:04:48.079488 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 165.85.56.95:10394] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618688.0788-1763618687.3832', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:05:27.566280 2025] [proxy_fcgi:error] [pid 40636:tid 40655] [client 165.85.56.95:7167] AH01071: Got error 'PHP message: start 1763618727.0037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:05:27.910943 2025] [proxy_fcgi:error] [pid 40636:tid 40655] [client 165.85.56.95:7167] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618727.9103-1763618727.0037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:06:50.095940 2025] [proxy_fcgi:error] [pid 40415:tid 40421] [client 165.85.56.95:62211] AH01071: Got error 'PHP message: start 1763618809.5001', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:06:50.441414 2025] [proxy_fcgi:error] [pid 40415:tid 40421] [client 165.85.56.95:62211] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618810.4408-1763618809.5001', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:07:29.322295 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 165.85.56.95:8151] AH01071: Got error 'PHP message: start 1763618848.8598', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:07:29.695862 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 165.85.56.95:8151] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618849.6953-1763618848.8598', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:08:51.495117 2025] [proxy_fcgi:error] [pid 40445:tid 40482] [client 165.85.56.95:29647] AH01071: Got error 'PHP message: start 1763618931.0788', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:08:51.720339 2025] [proxy_fcgi:error] [pid 40445:tid 40482] [client 165.85.56.95:29647] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618931.7197-1763618931.0788', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:09:30.808604 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 165.85.56.95:1397] AH01071: Got error 'PHP message: start 1763618970.3871', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:09:31.143296 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 165.85.56.95:1397] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763618971.1425-1763618970.3871', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:10:52.612666 2025] [proxy_fcgi:error] [pid 40508:tid 40512] [client 165.85.56.95:51039] AH01071: Got error 'PHP message: start 1763619052.1789', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:10:52.930662 2025] [proxy_fcgi:error] [pid 40508:tid 40512] [client 165.85.56.95:51039] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619052.93-1763619052.1789', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:11:32.259453 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 165.85.56.95:65204] AH01071: Got error 'PHP message: start 1763619091.8556', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:11:32.496657 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 165.85.56.95:65204] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619092.496-1763619091.8556', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:12:53.754885 2025] [proxy_fcgi:error] [pid 40537:tid 40552] [client 165.85.56.95:25376] AH01071: Got error 'PHP message: start 1763619173.325', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:12:54.074246 2025] [proxy_fcgi:error] [pid 40537:tid 40552] [client 165.85.56.95:25376] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619174.0736-1763619173.325', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:13:33.893877 2025] [proxy_fcgi:error] [pid 55430:tid 55433] [client 165.85.56.95:3604] AH01071: Got error 'PHP message: start 1763619213.4556', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:13:34.227216 2025] [proxy_fcgi:error] [pid 55430:tid 55433] [client 165.85.56.95:3604] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619214.2264-1763619213.4556', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:14:55.654043 2025] [proxy_fcgi:error] [pid 55340:tid 55354] [client 165.85.56.95:64836] AH01071: Got error 'PHP message: start 1763619295.2272', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:14:56.017585 2025] [proxy_fcgi:error] [pid 55340:tid 55354] [client 165.85.56.95:64836] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619296.0168-1763619295.2272', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:15:35.302127 2025] [proxy_fcgi:error] [pid 55340:tid 55355] [client 165.85.56.95:44224] AH01071: Got error 'PHP message: start 1763619334.8789', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:15:35.530482 2025] [proxy_fcgi:error] [pid 55340:tid 55355] [client 165.85.56.95:44224] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619335.5297-1763619334.8789', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:16:57.007045 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 165.85.56.95:11026] AH01071: Got error 'PHP message: start 1763619416.6073', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:16:57.337649 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 165.85.56.95:11026] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619417.337-1763619416.6073', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:17:37.287591 2025] [proxy_fcgi:error] [pid 40537:tid 40556] [client 165.85.56.95:17459] AH01071: Got error 'PHP message: start 1763619456.8878', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:17:37.632786 2025] [proxy_fcgi:error] [pid 40537:tid 40556] [client 165.85.56.95:17459] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619457.6321-1763619456.8878', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:17:45.251722 2025] [proxy_fcgi:error] [pid 40537:tid 40558] [client 165.85.56.95:27664] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/booking.php?bookingID=44252
[Thu Nov 20 14:17:53.570479 2025] [proxy_fcgi:error] [pid 40537:tid 40559] [client 165.85.56.95:27664] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Thu Nov 20 14:18:58.400893 2025] [proxy_fcgi:error] [pid 40415:tid 40434] [client 165.85.56.95:3807] AH01071: Got error 'PHP message: start 1763619538.0121', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:18:58.737548 2025] [proxy_fcgi:error] [pid 40415:tid 40434] [client 165.85.56.95:3807] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619538.7367-1763619538.0121', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:19:38.881370 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:60636] AH01071: Got error 'PHP message: start 1763619578.5128', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:19:39.158252 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:60636] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619579.1577-1763619578.5128', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:20:59.756486 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 165.85.56.95:61398] AH01071: Got error 'PHP message: start 1763619659.3163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:21:00.048707 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 165.85.56.95:61398] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619660.048-1763619659.3163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:21:40.816396 2025] [proxy_fcgi:error] [pid 40445:tid 40498] [client 165.85.56.95:64917] AH01071: Got error 'PHP message: start 1763619700.4009', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:21:41.142957 2025] [proxy_fcgi:error] [pid 40445:tid 40498] [client 165.85.56.95:64917] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619701.1424-1763619700.4009', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:23:01.135590 2025] [proxy_fcgi:error] [pid 40537:tid 40565] [client 165.85.56.95:24267] AH01071: Got error 'PHP message: start 1763619780.6768', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:23:01.511123 2025] [proxy_fcgi:error] [pid 40537:tid 40565] [client 165.85.56.95:24267] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619781.5105-1763619780.6768', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:23:43.095148 2025] [proxy_fcgi:error] [pid 34405:tid 34428] [client 165.85.56.95:35011] AH01071: Got error 'PHP message: start 1763619822.6718', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:23:43.435580 2025] [proxy_fcgi:error] [pid 34405:tid 34428] [client 165.85.56.95:35011] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619823.435-1763619822.6718', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:25:02.513128 2025] [proxy_fcgi:error] [pid 40537:tid 40548] [client 165.85.56.95:45992] AH01071: Got error 'PHP message: start 1763619902.0095', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:25:02.860998 2025] [proxy_fcgi:error] [pid 40537:tid 40548] [client 165.85.56.95:45992] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619902.8605-1763619902.0095', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:25:44.672031 2025] [proxy_fcgi:error] [pid 40415:tid 40440] [client 165.85.56.95:29196] AH01071: Got error 'PHP message: start 1763619944.2804', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:25:44.985379 2025] [proxy_fcgi:error] [pid 40415:tid 40440] [client 165.85.56.95:29196] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763619944.9848-1763619944.2804', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:27:04.361581 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 165.85.56.95:36663] AH01071: Got error 'PHP message: start 1763620023.915', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:27:04.660474 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 165.85.56.95:36663] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620024.6599-1763620023.915', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:27:46.643134 2025] [proxy_fcgi:error] [pid 55340:tid 55358] [client 165.85.56.95:4799] AH01071: Got error 'PHP message: start 1763620066.2566', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:27:46.973446 2025] [proxy_fcgi:error] [pid 55340:tid 55358] [client 165.85.56.95:4799] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620066.9728-1763620066.2566', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:29:06.088007 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 165.85.56.95:51228] AH01071: Got error 'PHP message: start 1763620145.6821', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:29:06.371121 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 165.85.56.95:51228] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620146.3705-1763620145.6821', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:31:07.562907 2025] [proxy_fcgi:error] [pid 40508:tid 40522] [client 165.85.56.95:46545] AH01071: Got error 'PHP message: start 1763620267.1164', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:31:07.790216 2025] [proxy_fcgi:error] [pid 40508:tid 40522] [client 165.85.56.95:46545] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620267.7895-1763620267.1164', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:33:09.695818 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 165.85.56.95:8080] AH01071: Got error 'PHP message: start 1763620389.224', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:33:09.926699 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 165.85.56.95:8080] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620389.9259-1763620389.224', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:35:10.931630 2025] [proxy_fcgi:error] [pid 34405:tid 34412] [client 165.85.56.95:29929] AH01071: Got error 'PHP message: start 1763620510.5078', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:35:11.300930 2025] [proxy_fcgi:error] [pid 34405:tid 34412] [client 165.85.56.95:29929] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620511.3003-1763620510.5078', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:37:12.423657 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 165.85.56.95:13760] AH01071: Got error 'PHP message: start 1763620632.0037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:37:12.654837 2025] [proxy_fcgi:error] [pid 34405:tid 34418] [client 165.85.56.95:13760] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620632.6541-1763620632.0037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:39:14.447806 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 165.85.56.95:12880] AH01071: Got error 'PHP message: start 1763620754.0039', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:39:14.763148 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 165.85.56.95:12880] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620754.7624-1763620754.0039', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:40:25.660950 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 165.85.56.95:29743] AH01071: Got error 'PHP message: start 1763620825.2037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:40:25.892199 2025] [proxy_fcgi:error] [pid 34405:tid 34411] [client 165.85.56.95:29743] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620825.8915-1763620825.2037', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:42:14.363428 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:25679] AH01071: Got error 'PHP message: start 1763620931.3032', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:42:14.717777 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:25679] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620934.7171-1763620931.3032', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:42:16.584608 2025] [proxy_fcgi:error] [pid 40508:tid 40531] [client 165.85.56.95:25679] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 14:42:19.298828 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 165.85.56.95:25679] AH01071: Got error 'PHP message: start 1763620938.3704', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 14:42:19.657086 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 165.85.56.95:25679] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620939.6567-1763620938.3704', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 14:42:27.221311 2025] [proxy_fcgi:error] [pid 55342:tid 55379] [client 165.85.56.95:50886] AH01071: Got error 'PHP message: start 1763620946.7485', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:42:27.414659 2025] [proxy_fcgi:error] [pid 55342:tid 55379] [client 165.85.56.95:50886] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763620947.4142-1763620946.7485', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:43:26.163261 2025] [proxy_fcgi:error] [pid 34405:tid 34420] [client 165.85.56.95:61871] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 14:43:29.430822 2025] [proxy_fcgi:error] [pid 34405:tid 34409] [client 165.85.56.95:61871] AH01071: Got error 'PHP message: start 1763621008.7152', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 14:43:29.974738 2025] [proxy_fcgi:error] [pid 34405:tid 34409] [client 165.85.56.95:61871] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621009.9744-1763621008.7152', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 14:44:20.667298 2025] [proxy_fcgi:error] [pid 40445:tid 40481] [client 165.85.56.95:42546] AH01071: Got error 'PHP message: start 1763621060.1494', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:44:21.018029 2025] [proxy_fcgi:error] [pid 40445:tid 40481] [client 165.85.56.95:42546] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621061.0175-1763621060.1494', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:45:30.975362 2025] [proxy_fcgi:error] [pid 40508:tid 40526] [client 165.85.56.95:26768] AH01071: Got error 'PHP message: start 1763621130.452', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:45:31.399122 2025] [proxy_fcgi:error] [pid 40508:tid 40526] [client 165.85.56.95:26768] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621131.3988-1763621130.452', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:46:22.294232 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 165.85.56.95:35181] AH01071: Got error 'PHP message: start 1763621181.4969', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:46:22.744799 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 165.85.56.95:35181] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621182.7443-1763621181.4969', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:47:32.669125 2025] [proxy_fcgi:error] [pid 34405:tid 34430] [client 165.85.56.95:32688] AH01071: Got error 'PHP message: start 1763621252.1144', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:47:33.022159 2025] [proxy_fcgi:error] [pid 34405:tid 34430] [client 165.85.56.95:32688] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621253.0214-1763621252.1144', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:48:23.815326 2025] [proxy_fcgi:error] [pid 40636:tid 40644] [client 165.85.56.95:27827] AH01071: Got error 'PHP message: start 1763621303.2666', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:48:24.171467 2025] [proxy_fcgi:error] [pid 40636:tid 40644] [client 165.85.56.95:27827] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621304.1709-1763621303.2666', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:49:34.642628 2025] [proxy_fcgi:error] [pid 40636:tid 40653] [client 165.85.56.95:6013] AH01071: Got error 'PHP message: start 1763621373.8994', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:49:35.189585 2025] [proxy_fcgi:error] [pid 40636:tid 40653] [client 165.85.56.95:6013] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621375.1887-1763621373.8994', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:50:25.161133 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 165.85.56.95:21712] AH01071: Got error 'PHP message: start 1763621424.63', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:50:25.548634 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 165.85.56.95:21712] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621425.5483-1763621424.63', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:51:36.368455 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 165.85.56.95:14211] AH01071: Got error 'PHP message: start 1763621495.8548', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:51:36.735357 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 165.85.56.95:14211] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621496.735-1763621495.8548', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:51:37.073019 2025] [:error] [pid 40537:tid 40561] [client 43.131.32.36:59790] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aR66eaKlsL5kxTa3c1y_-AAAAtQ"]
[Thu Nov 20 14:52:26.624174 2025] [proxy_fcgi:error] [pid 40636:tid 40654] [client 165.85.56.95:41657] AH01071: Got error 'PHP message: start 1763621546.0918', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:52:26.999427 2025] [proxy_fcgi:error] [pid 40636:tid 40654] [client 165.85.56.95:41657] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621546.999-1763621546.0918', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:53:38.059528 2025] [proxy_fcgi:error] [pid 40415:tid 40424] [client 165.85.56.95:2735] AH01071: Got error 'PHP message: start 1763621617.5637', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:53:38.417033 2025] [proxy_fcgi:error] [pid 40415:tid 40424] [client 165.85.56.95:2735] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621618.4163-1763621617.5637', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:54:28.933031 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 165.85.56.95:7858] AH01071: Got error 'PHP message: start 1763621668.2329', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:54:29.512805 2025] [proxy_fcgi:error] [pid 55430:tid 55435] [client 165.85.56.95:7858] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621669.512-1763621668.2329', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:55:39.891021 2025] [proxy_fcgi:error] [pid 40537:tid 40545] [client 165.85.56.95:56248] AH01071: Got error 'PHP message: start 1763621739.3427', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:55:40.410766 2025] [proxy_fcgi:error] [pid 40537:tid 40545] [client 165.85.56.95:56248] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621740.4104-1763621739.3427', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:56:30.771223 2025] [proxy_fcgi:error] [pid 40636:tid 40657] [client 165.85.56.95:58375] AH01071: Got error 'PHP message: start 1763621790.1967', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:56:31.262325 2025] [proxy_fcgi:error] [pid 40636:tid 40657] [client 165.85.56.95:58375] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621791.2619-1763621790.1967', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:57:42.156565 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 165.85.56.95:27595] AH01071: Got error 'PHP message: start 1763621861.3772', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:57:42.784614 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 165.85.56.95:27595] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621862.7841-1763621861.3772', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:58:32.770698 2025] [proxy_fcgi:error] [pid 40415:tid 40431] [client 165.85.56.95:26656] AH01071: Got error 'PHP message: start 1763621912.1561', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:58:33.301658 2025] [proxy_fcgi:error] [pid 40415:tid 40431] [client 165.85.56.95:26656] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621913.3012-1763621912.1561', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:59:44.227924 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 165.85.56.95:31870] AH01071: Got error 'PHP message: start 1763621983.5476', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 14:59:44.787780 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 165.85.56.95:31870] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763621984.7874-1763621983.5476', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:00:34.372298 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 165.85.56.95:3704] AH01071: Got error 'PHP message: start 1763622033.8197', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:00:34.773730 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 165.85.56.95:3704] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622034.7734-1763622033.8197', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:01:46.009628 2025] [proxy_fcgi:error] [pid 55342:tid 55381] [client 165.85.56.95:46386] AH01071: Got error 'PHP message: start 1763622105.4528', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:01:46.421879 2025] [proxy_fcgi:error] [pid 55342:tid 55381] [client 165.85.56.95:46386] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622106.4214-1763622105.4528', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:02:35.958092 2025] [proxy_fcgi:error] [pid 40508:tid 40534] [client 165.85.56.95:49318] AH01071: Got error 'PHP message: start 1763622155.2303', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:02:36.496178 2025] [proxy_fcgi:error] [pid 40508:tid 40534] [client 165.85.56.95:49318] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622156.4957-1763622155.2303', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:03:47.910817 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 165.85.56.95:11893] AH01071: Got error 'PHP message: start 1763622227.1792', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:03:48.451281 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 165.85.56.95:11893] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622228.4509-1763622227.1792', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:04:37.543386 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 165.85.56.95:36729] AH01071: Got error 'PHP message: start 1763622276.9885', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:04:37.946618 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 165.85.56.95:36729] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622277.9462-1763622276.9885', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:05:49.732635 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 165.85.56.95:25012] AH01071: Got error 'PHP message: start 1763622349.1112', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:05:50.257457 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 165.85.56.95:25012] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622350.257-1763622349.1112', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:06:39.139576 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.95:7028] AH01071: Got error 'PHP message: start 1763622398.4478', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:06:39.672194 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.95:7028] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622399.6718-1763622398.4478', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:08:40.791753 2025] [proxy_fcgi:error] [pid 40415:tid 40421] [client 165.85.56.95:31339] AH01071: Got error 'PHP message: start 1763622520.1361', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:08:41.359811 2025] [proxy_fcgi:error] [pid 40415:tid 40421] [client 165.85.56.95:31339] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622521.3589-1763622520.1361', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:10:42.509502 2025] [proxy_fcgi:error] [pid 40636:tid 40647] [client 165.85.56.95:3216] AH01071: Got error 'PHP message: start 1763622641.8197', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:10:43.032219 2025] [proxy_fcgi:error] [pid 40636:tid 40647] [client 165.85.56.95:3216] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622643.0318-1763622641.8197', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:12:44.156742 2025] [proxy_fcgi:error] [pid 40537:tid 40557] [client 165.85.56.95:9193] AH01071: Got error 'PHP message: start 1763622763.5302', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:12:44.724764 2025] [proxy_fcgi:error] [pid 40537:tid 40557] [client 165.85.56.95:9193] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622764.724-1763622763.5302', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:14:45.812914 2025] [proxy_fcgi:error] [pid 55342:tid 55375] [client 165.85.56.95:59760] AH01071: Got error 'PHP message: start 1763622885.2337', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:14:46.367765 2025] [proxy_fcgi:error] [pid 55342:tid 55375] [client 165.85.56.95:59760] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763622886.3674-1763622885.2337', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:16:47.507353 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 165.85.56.95:57705] AH01071: Got error 'PHP message: start 1763623006.8701', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:16:47.861825 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 165.85.56.95:57705] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623007.8614-1763623006.8701', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:18:49.274101 2025] [proxy_fcgi:error] [pid 40508:tid 40532] [client 165.85.56.95:27037] AH01071: Got error 'PHP message: start 1763623128.7367', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:18:49.627172 2025] [proxy_fcgi:error] [pid 40508:tid 40532] [client 165.85.56.95:27037] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623129.6268-1763623128.7367', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:20:50.707099 2025] [proxy_fcgi:error] [pid 40415:tid 40437] [client 165.85.56.95:65227] AH01071: Got error 'PHP message: start 1763623250.134', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:20:51.088102 2025] [proxy_fcgi:error] [pid 40415:tid 40437] [client 165.85.56.95:65227] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623251.0877-1763623250.134', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:22:52.183427 2025] [proxy_fcgi:error] [pid 40537:tid 40560] [client 165.85.56.95:13386] AH01071: Got error 'PHP message: start 1763623371.5638', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:22:52.716322 2025] [proxy_fcgi:error] [pid 40537:tid 40560] [client 165.85.56.95:13386] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623372.7158-1763623371.5638', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:24:54.232842 2025] [proxy_fcgi:error] [pid 40415:tid 40442] [client 165.85.56.95:46576] AH01071: Got error 'PHP message: start 1763623493.5897', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:24:54.716802 2025] [proxy_fcgi:error] [pid 40415:tid 40442] [client 165.85.56.95:46576] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623494.7163-1763623493.5897', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:26:56.285649 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:1160] AH01071: Got error 'PHP message: start 1763623615.6685', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:26:56.855109 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:1160] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623616.8546-1763623615.6685', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:28:57.982604 2025] [proxy_fcgi:error] [pid 34405:tid 34425] [client 165.85.56.95:26911] AH01071: Got error 'PHP message: start 1763623737.3276', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:28:58.729603 2025] [proxy_fcgi:error] [pid 34405:tid 34425] [client 165.85.56.95:26911] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623738.7292-1763623737.3276', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:30:59.594019 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:34647] AH01071: Got error 'PHP message: start 1763623859.0163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 15:30:59.972043 2025] [proxy_fcgi:error] [pid 40508:tid 40519] [client 165.85.56.95:34647] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763623859.9716-1763623859.0163', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 18:07:16.954535 2025] [:error] [pid 40636:tid 40642] [client 182.44.12.37:45371] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR7oVAK8BWUoW3xq0HAEtQAAA4I"]
[Thu Nov 20 19:26:48.683839 2025] [:error] [pid 40445:tid 40482] [client 35.185.69.171:53347] [client 35.185.69.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.171, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aR76-FH-MuFcoWRjXpZiKAAAAkc"]
[Thu Nov 20 19:26:48.687991 2025] [proxy_fcgi:error] [pid 40445:tid 40482] [client 35.185.69.171:53347] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:26:51.931202 2025] [:error] [pid 40445:tid 40488] [client 35.185.69.171:53347] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR76-1H-MuFcoWRjXpZiPQAAAk0"]
[Thu Nov 20 19:26:52.456976 2025] [:error] [pid 40537:tid 40558] [client 35.185.69.171:63447] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR76_KKlsL5kxTa3c1zpOQAAAtE"]
[Thu Nov 20 19:26:52.941760 2025] [:error] [pid 40415:tid 40441] [client 35.185.69.171:55225] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR76_KhjIyLSv09svwOwQAAAAdc"]
[Thu Nov 20 19:26:53.407979 2025] [:error] [pid 40445:tid 40484] [client 35.185.69.171:52803] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR76_VH-MuFcoWRjXpZiSAAAAkk"]
[Thu Nov 20 19:26:53.881395 2025] [:error] [pid 55340:tid 55368] [client 35.185.69.171:52453] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR76_fOxD-NeMydTybCkbQAAABc"]
[Thu Nov 20 19:26:54.385542 2025] [:error] [pid 40537:tid 40562] [client 35.185.69.171:58324] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR76_qKlsL5kxTa3c1zpOgAAAtU"]
[Thu Nov 20 19:26:54.873235 2025] [:error] [pid 55342:tid 55379] [client 35.185.69.171:55910] [client 35.185.69.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR76_rg6x32Tvk7fIG_kiwAAAEc"]
[Thu Nov 20 20:13:28.679582 2025] [proxy_fcgi:error] [pid 40537:tid 40561] [client 165.85.56.6:3675] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Thu Nov 20 20:13:31.387206 2025] [proxy_fcgi:error] [pid 40537:tid 40542] [client 165.85.56.6:3675] AH01071: Got error 'PHP message: start 1763640810.7624', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 20:13:31.445389 2025] [proxy_fcgi:error] [pid 40537:tid 40542] [client 165.85.56.6:3675] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763640811.4449-1763640810.7624', referer: https://pumpbooking.com/dashboard.php
[Thu Nov 20 20:15:32.754140 2025] [proxy_fcgi:error] [pid 40508:tid 40522] [client 165.85.56.6:17190] AH01071: Got error 'PHP message: start 1763640932.0836', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:15:32.796367 2025] [proxy_fcgi:error] [pid 40508:tid 40522] [client 165.85.56.6:17190] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763640932.7957-1763640932.0836', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:17:33.912367 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 165.85.56.6:6041] AH01071: Got error 'PHP message: start 1763641053.3754', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:17:33.948845 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 165.85.56.6:6041] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641053.9483-1763641053.3754', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:19:35.192503 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 165.85.56.6:56076] AH01071: Got error 'PHP message: start 1763641174.6362', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:19:35.223466 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 165.85.56.6:56076] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641175.2229-1763641174.6362', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:21:36.362997 2025] [proxy_fcgi:error] [pid 40537:tid 40562] [client 165.85.56.6:48661] AH01071: Got error 'PHP message: start 1763641295.8101', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:21:36.395676 2025] [proxy_fcgi:error] [pid 40537:tid 40562] [client 165.85.56.6:48661] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641296.3951-1763641295.8101', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:23:37.527423 2025] [proxy_fcgi:error] [pid 34405:tid 34410] [client 165.85.56.6:16900] AH01071: Got error 'PHP message: start 1763641416.9802', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:23:37.556320 2025] [proxy_fcgi:error] [pid 34405:tid 34410] [client 165.85.56.6:16900] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641417.5558-1763641416.9802', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:25:38.884713 2025] [proxy_fcgi:error] [pid 40508:tid 40528] [client 165.85.56.6:63697] AH01071: Got error 'PHP message: start 1763641538.229', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:25:38.932851 2025] [proxy_fcgi:error] [pid 40508:tid 40528] [client 165.85.56.6:63697] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641538.9318-1763641538.229', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:27:40.234807 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 165.85.56.6:48122] AH01071: Got error 'PHP message: start 1763641659.5599', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:27:40.282728 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 165.85.56.6:48122] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641660.2821-1763641659.5599', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:29:41.423300 2025] [proxy_fcgi:error] [pid 40508:tid 40530] [client 165.85.56.6:54876] AH01071: Got error 'PHP message: start 1763641780.7928', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:29:41.467860 2025] [proxy_fcgi:error] [pid 40508:tid 40530] [client 165.85.56.6:54876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641781.4672-1763641780.7928', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:31:43.145510 2025] [proxy_fcgi:error] [pid 34405:tid 34422] [client 165.85.56.6:50399] AH01071: Got error 'PHP message: start 1763641902.5057', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:31:43.186724 2025] [proxy_fcgi:error] [pid 34405:tid 34422] [client 165.85.56.6:50399] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763641903.1861-1763641902.5057', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:33:44.784868 2025] [proxy_fcgi:error] [pid 40508:tid 40529] [client 165.85.56.6:39319] AH01071: Got error 'PHP message: start 1763642024.1512', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:33:44.828425 2025] [proxy_fcgi:error] [pid 40508:tid 40529] [client 165.85.56.6:39319] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642024.8279-1763642024.1512', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:35:45.981217 2025] [proxy_fcgi:error] [pid 40636:tid 40645] [client 165.85.56.6:18843] AH01071: Got error 'PHP message: start 1763642145.3887', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:35:46.020964 2025] [proxy_fcgi:error] [pid 40636:tid 40645] [client 165.85.56.6:18843] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642146.0203-1763642145.3887', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:37:47.250609 2025] [proxy_fcgi:error] [pid 40508:tid 40516] [client 165.85.56.6:34911] AH01071: Got error 'PHP message: start 1763642266.6489', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:37:47.283032 2025] [proxy_fcgi:error] [pid 40508:tid 40516] [client 165.85.56.6:34911] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642267.2824-1763642266.6489', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:39:48.449135 2025] [proxy_fcgi:error] [pid 40636:tid 40647] [client 165.85.56.6:23133] AH01071: Got error 'PHP message: start 1763642387.854', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:39:48.494308 2025] [proxy_fcgi:error] [pid 40636:tid 40647] [client 165.85.56.6:23133] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642388.4937-1763642387.854', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:41:49.603116 2025] [proxy_fcgi:error] [pid 40415:tid 40442] [client 165.85.56.6:10357] AH01071: Got error 'PHP message: start 1763642508.955', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:41:49.648809 2025] [proxy_fcgi:error] [pid 40415:tid 40442] [client 165.85.56.6:10357] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642509.6483-1763642508.955', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:43:50.901072 2025] [proxy_fcgi:error] [pid 55343:tid 55420] [client 165.85.56.6:51892] AH01071: Got error 'PHP message: start 1763642630.2553', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:43:50.942319 2025] [proxy_fcgi:error] [pid 55343:tid 55420] [client 165.85.56.6:51892] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642630.9418-1763642630.2553', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:45:52.510992 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 165.85.56.6:36077] AH01071: Got error 'PHP message: start 1763642751.9271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:45:52.541176 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 165.85.56.6:36077] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642752.5407-1763642751.9271', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:47:54.224564 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 165.85.56.6:47637] AH01071: Got error 'PHP message: start 1763642873.6254', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:47:54.262001 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 165.85.56.6:47637] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642874.2614-1763642873.6254', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:49:55.654810 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 165.85.56.6:35672] AH01071: Got error 'PHP message: start 1763642995.0032', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:49:55.697345 2025] [proxy_fcgi:error] [pid 40415:tid 40427] [client 165.85.56.6:35672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763642995.6968-1763642995.0032', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:51:57.529611 2025] [proxy_fcgi:error] [pid 40445:tid 40489] [client 165.85.56.6:59429] AH01071: Got error 'PHP message: start 1763643116.7757', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:51:57.574055 2025] [proxy_fcgi:error] [pid 40445:tid 40489] [client 165.85.56.6:59429] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763643117.5734-1763643116.7757', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:53:59.331506 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.6:23050] AH01071: Got error 'PHP message: start 1763643238.6347', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:53:59.390161 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 165.85.56.6:23050] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763643239.3895-1763643238.6347', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:56:01.112261 2025] [proxy_fcgi:error] [pid 40636:tid 40648] [client 165.85.56.6:61054] AH01071: Got error 'PHP message: start 1763643360.4788', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:56:01.155480 2025] [proxy_fcgi:error] [pid 40636:tid 40648] [client 165.85.56.6:61054] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763643361.1549-1763643360.4788', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:58:02.276630 2025] [proxy_fcgi:error] [pid 40537:tid 40550] [client 165.85.56.6:23742] AH01071: Got error 'PHP message: start 1763643481.6862', referer: https://pumpbooking.com/dashboard-bookings.php
[Thu Nov 20 20:58:02.309679 2025] [proxy_fcgi:error] [pid 40537:tid 40550] [client 165.85.56.6:23742] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763643482.3087-1763643481.6862', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 01:02:39.415475 2025] [:error] [pid 13536:tid 13743] [client 93.123.109.7:43096] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aR9Jr6wnCU8z6PX3-ZmnsgAAAJA"]
[Fri Nov 21 04:15:40.386642 2025] [proxy_fcgi:error] [pid 13327:tid 13399] [client 165.85.56.6:29780] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Fri Nov 21 04:15:44.159060 2025] [proxy_fcgi:error] [pid 13327:tid 13403] [client 165.85.56.6:29780] AH01071: Got error 'PHP message: start 1763669743.5202', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:15:44.159597 2025] [proxy_fcgi:error] [pid 13327:tid 13403] [client 165.85.56.6:29780] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763669744.1586-1763669743.5202', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:15:57.271656 2025] [proxy_fcgi:error] [pid 13325:tid 13337] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:57.833808 2025] [proxy_fcgi:error] [pid 13325:tid 13344] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:58.009300 2025] [proxy_fcgi:error] [pid 13325:tid 13330] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:58.182832 2025] [proxy_fcgi:error] [pid 13325:tid 13338] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:58.358228 2025] [proxy_fcgi:error] [pid 13325:tid 13354] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:58.530904 2025] [proxy_fcgi:error] [pid 13325:tid 13339] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:58.702814 2025] [proxy_fcgi:error] [pid 13325:tid 13349] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:58.877249 2025] [proxy_fcgi:error] [pid 13325:tid 13345] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:59.050921 2025] [proxy_fcgi:error] [pid 13325:tid 13342] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:59.223659 2025] [proxy_fcgi:error] [pid 13325:tid 13331] [client 156.146.54.197:55806] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:15:59.564973 2025] [:error] [pid 13325:tid 13335] [client 156.146.54.197:55806] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/core.php"] [unique_id "aR92_yBUXj9tD75On3CKyAAAAAU"]
[Fri Nov 21 04:15:59.903231 2025] [:error] [pid 13326:tid 13376] [client 156.146.54.197:48734] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/core.php"] [unique_id "aR92_9h942-HkDIkOWrK3wAAAFI"]
[Fri Nov 21 04:16:00.245326 2025] [:error] [pid 13326:tid 13374] [client 156.146.54.197:48754] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/core.php"] [unique_id "aR93ANh942-HkDIkOWrK4AAAAFA"]
[Fri Nov 21 04:16:00.584976 2025] [:error] [pid 13326:tid 13382] [client 156.146.54.197:48766] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/core.php"] [unique_id "aR93ANh942-HkDIkOWrK4QAAAFg"]
[Fri Nov 21 04:16:00.922234 2025] [:error] [pid 13326:tid 13367] [client 156.146.54.197:48782] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/core.php"] [unique_id "aR93ANh942-HkDIkOWrK4wAAAEk"]
[Fri Nov 21 04:16:12.659865 2025] [:error] [pid 13327:tid 13386] [client 156.146.54.197:48794] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aR93DPBXf-8B6mFkLeN9MQAAAIE"]
[Fri Nov 21 04:16:13.002619 2025] [:error] [pid 13412:tid 13425] [client 156.146.54.197:45186] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aR93DX3-knz3ZB6HogGaLwAAAMg"]
[Fri Nov 21 04:16:13.344717 2025] [:error] [pid 13326:tid 13377] [client 156.146.54.197:45192] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aR93Ddh942-HkDIkOWrK7QAAAFM"]
[Fri Nov 21 04:16:13.685349 2025] [:error] [pid 13325:tid 13349] [client 156.146.54.197:45208] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aR93DSBUXj9tD75On3CK0AAAABM"]
[Fri Nov 21 04:16:14.023415 2025] [:error] [pid 13325:tid 13345] [client 156.146.54.197:21527] [client 156.146.54.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aR93DiBUXj9tD75On3CK0QAAAA8"]
[Fri Nov 21 04:16:38.017711 2025] [proxy_fcgi:error] [pid 13327:tid 13405] [client 165.85.56.6:5381] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:16:38.999911 2025] [proxy_fcgi:error] [pid 13327:tid 13390] [client 165.85.56.6:5381] AH01071: Got error 'PHP message: start 1763669798.7868', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:16:39.791653 2025] [proxy_fcgi:error] [pid 13327:tid 13390] [client 165.85.56.6:5381] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763669799.7913-1763669798.7868', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:17:43.800062 2025] [proxy_fcgi:error] [pid 13325:tid 13334] [client 165.85.56.6:31009] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:17:45.961150 2025] [proxy_fcgi:error] [pid 13325:tid 13336] [client 165.85.56.6:31009] AH01071: Got error 'PHP message: start 1763669865.6484', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:17:46.185658 2025] [proxy_fcgi:error] [pid 13325:tid 13336] [client 165.85.56.6:31009] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763669866.1851-1763669865.6484', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 04:37:53.616277 2025] [:error] [pid 51434:tid 51448] [client 93.123.109.7:40166] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aR98IfU96liplEDkw_TQsgAAAQw"]
[Fri Nov 21 05:06:40.736446 2025] [:error] [pid 13327:tid 13402] [client 170.106.35.153:54846] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aR-C4PBXf-8B6mFkLeOPLgAAAJE"]
[Fri Nov 21 07:12:12.514730 2025] [proxy_fcgi:error] [pid 17882:tid 17889] [client 176.100.9.102:55880] AH01071: Got error 'Primary script unknown', referer: http://pumpbooking.com/archivarix.cms.php
[Fri Nov 21 09:20:57.371642 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:61708] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Fri Nov 21 09:20:59.089647 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 165.85.56.95:61708] AH01071: Got error 'PHP message: start 1763688058.7921', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:20:59.090281 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 165.85.56.95:61708] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688059.0893-1763688058.7921', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:26.709628 2025] [proxy_fcgi:error] [pid 17882:tid 17897] [client 165.85.56.95:61221] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:27.453284 2025] [proxy_fcgi:error] [pid 17882:tid 17903] [client 165.85.56.95:61221] AH01071: Got error 'PHP message: start 1763688087.042', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:27.503613 2025] [proxy_fcgi:error] [pid 17882:tid 17903] [client 165.85.56.95:61221] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688087.503-1763688087.042', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:33.493225 2025] [proxy_fcgi:error] [pid 46276:tid 46294] [client 165.85.56.95:46049] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:34.296265 2025] [proxy_fcgi:error] [pid 46276:tid 46289] [client 165.85.56.95:46049] AH01071: Got error 'PHP message: start 1763688093.9977', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:35.115295 2025] [proxy_fcgi:error] [pid 46276:tid 46289] [client 165.85.56.95:46049] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688095.1149-1763688093.9977', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:41.860022 2025] [proxy_fcgi:error] [pid 51434:tid 51440] [client 165.85.56.95:32062] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:42.385085 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:32062] AH01071: Got error 'PHP message: start 1763688102.1771', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:21:42.410282 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:32062] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688102.4098-1763688102.1771', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:22:04.240023 2025] [proxy_fcgi:error] [pid 46276:tid 46293] [client 165.85.56.95:55720] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:22:04.821445 2025] [proxy_fcgi:error] [pid 46276:tid 46296] [client 165.85.56.95:55720] AH01071: Got error 'PHP message: start 1763688124.6218', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:22:04.821898 2025] [proxy_fcgi:error] [pid 46276:tid 46296] [client 165.85.56.95:55720] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688124.8212-1763688124.6218', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:24:05.690072 2025] [proxy_fcgi:error] [pid 46194:tid 46210] [client 165.85.56.95:46001] AH01071: Got error 'PHP message: start 1763688245.1164', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:24:05.690779 2025] [proxy_fcgi:error] [pid 46194:tid 46210] [client 165.85.56.95:46001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688245.6898-1763688245.1164', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:26:06.549635 2025] [proxy_fcgi:error] [pid 13325:tid 13342] [client 165.85.56.95:40258] AH01071: Got error 'PHP message: start 1763688366.0473', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:26:06.550101 2025] [proxy_fcgi:error] [pid 13325:tid 13342] [client 165.85.56.95:40258] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688366.5489-1763688366.0473', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:28:07.705613 2025] [proxy_fcgi:error] [pid 13327:tid 13395] [client 165.85.56.95:60273] AH01071: Got error 'PHP message: start 1763688487.1433', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:28:07.706049 2025] [proxy_fcgi:error] [pid 13327:tid 13395] [client 165.85.56.95:60273] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688487.7054-1763688487.1433', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:29:25.721071 2025] [proxy_fcgi:error] [pid 46276:tid 46296] [client 165.85.56.95:5920] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:26.937241 2025] [proxy_fcgi:error] [pid 46276:tid 46292] [client 165.85.56.95:5920] AH01071: Got error 'PHP message: start 1763688566.2645', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:26.937864 2025] [proxy_fcgi:error] [pid 46276:tid 46292] [client 165.85.56.95:5920] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688566.937-1763688566.2645', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:38.954055 2025] [proxy_fcgi:error] [pid 46194:tid 46209] [client 165.85.56.95:60542] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:40.143939 2025] [proxy_fcgi:error] [pid 46194:tid 46204] [client 165.85.56.95:60542] AH01071: Got error 'PHP message: start 1763688579.7701', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:40.939523 2025] [proxy_fcgi:error] [pid 46194:tid 46204] [client 165.85.56.95:60542] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688580.9388-1763688579.7701', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:46.897268 2025] [proxy_fcgi:error] [pid 51434:tid 51457] [client 165.85.56.95:65012] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:47.471830 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:65012] AH01071: Got error 'PHP message: start 1763688587.2941', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:29:47.493484 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:65012] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688587.493-1763688587.2941', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:17.251642 2025] [proxy_fcgi:error] [pid 13412:tid 13431] [client 165.85.56.95:64555] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:18.359692 2025] [proxy_fcgi:error] [pid 13412:tid 13417] [client 165.85.56.95:64555] AH01071: Got error 'PHP message: start 1763688618.1194', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:18.360103 2025] [proxy_fcgi:error] [pid 13412:tid 13417] [client 165.85.56.95:64555] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688618.3594-1763688618.1194', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:31.709528 2025] [proxy_fcgi:error] [pid 13327:tid 13394] [client 165.85.56.95:18107] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:32.452749 2025] [proxy_fcgi:error] [pid 13327:tid 13393] [client 165.85.56.95:18107] AH01071: Got error 'PHP message: start 1763688632.1259', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:32.492791 2025] [proxy_fcgi:error] [pid 13327:tid 13393] [client 165.85.56.95:18107] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688632.4923-1763688632.1259', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:41.865038 2025] [proxy_fcgi:error] [pid 13327:tid 13398] [client 165.85.56.95:29791] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:43.371602 2025] [proxy_fcgi:error] [pid 13327:tid 13387] [client 165.85.56.95:29791] AH01071: Got error 'PHP message: start 1763688642.7936', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:44.128999 2025] [proxy_fcgi:error] [pid 13327:tid 13387] [client 165.85.56.95:29791] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688644.1285-1763688642.7936', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:47.681054 2025] [proxy_fcgi:error] [pid 13327:tid 13403] [client 165.85.56.95:29791] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:48.174105 2025] [proxy_fcgi:error] [pid 13327:tid 13385] [client 165.85.56.95:29791] AH01071: Got error 'PHP message: start 1763688648.0505PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688648.1736-1763688648.0505', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:57.595392 2025] [proxy_fcgi:error] [pid 13327:tid 13389] [client 165.85.56.95:13681] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:30:58.089846 2025] [proxy_fcgi:error] [pid 13327:tid 13408] [client 165.85.56.95:13681] AH01071: Got error 'PHP message: start 1763688658.035PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688658.0894-1763688658.035', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:11.242727 2025] [proxy_fcgi:error] [pid 46276:tid 46286] [client 165.85.56.95:40456] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:11.984105 2025] [proxy_fcgi:error] [pid 46276:tid 46302] [client 165.85.56.95:40456] AH01071: Got error 'PHP message: start 1763688671.9424PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688671.9838-1763688671.9424', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:20.595578 2025] [proxy_fcgi:error] [pid 13326:tid 13368] [client 165.85.56.95:57950] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:21.144609 2025] [proxy_fcgi:error] [pid 13326:tid 13361] [client 165.85.56.95:57950] AH01071: Got error 'PHP message: start 1763688680.9412', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:21.145237 2025] [proxy_fcgi:error] [pid 13326:tid 13361] [client 165.85.56.95:57950] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688681.1444-1763688680.9412', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:33.673976 2025] [proxy_fcgi:error] [pid 13412:tid 13428] [client 165.85.56.95:34352] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:35.276679 2025] [proxy_fcgi:error] [pid 13412:tid 13424] [client 165.85.56.95:34352] AH01071: Got error 'PHP message: start 1763688694.5524', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:31:35.277118 2025] [proxy_fcgi:error] [pid 13412:tid 13424] [client 165.85.56.95:34352] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688695.2764-1763688694.5524', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:32:25.805803 2025] [proxy_fcgi:error] [pid 17882:tid 17906] [client 165.85.56.95:32671] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:32:26.980653 2025] [proxy_fcgi:error] [pid 17882:tid 17901] [client 165.85.56.95:32671] AH01071: Got error 'PHP message: start 1763688746.4275', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:32:27.522633 2025] [proxy_fcgi:error] [pid 17882:tid 17901] [client 165.85.56.95:32671] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688747.522-1763688746.4275', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:32:37.900905 2025] [proxy_fcgi:error] [pid 13326:tid 13373] [client 165.85.56.95:43651] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:32:38.639097 2025] [proxy_fcgi:error] [pid 13326:tid 13362] [client 165.85.56.95:43651] AH01071: Got error 'PHP message: start 1763688758.3974', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:32:38.639701 2025] [proxy_fcgi:error] [pid 13326:tid 13362] [client 165.85.56.95:43651] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688758.6389-1763688758.3974', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 09:34:39.555621 2025] [proxy_fcgi:error] [pid 13326:tid 13358] [client 165.85.56.95:48061] AH01071: Got error 'PHP message: start 1763688878.9138', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:34:39.556174 2025] [proxy_fcgi:error] [pid 13326:tid 13358] [client 165.85.56.95:48061] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763688879.5551-1763688878.9138', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:36:40.698941 2025] [proxy_fcgi:error] [pid 13326:tid 13369] [client 165.85.56.95:6610] AH01071: Got error 'PHP message: start 1763689000.1483', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:36:40.699420 2025] [proxy_fcgi:error] [pid 13326:tid 13369] [client 165.85.56.95:6610] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689000.6987-1763689000.1483', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:38:41.930739 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 165.85.56.95:52409] AH01071: Got error 'PHP message: start 1763689121.4107', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:38:41.931318 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 165.85.56.95:52409] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689121.9304-1763689121.4107', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:40:43.398729 2025] [proxy_fcgi:error] [pid 13325:tid 13333] [client 165.85.56.95:10622] AH01071: Got error 'PHP message: start 1763689242.8252', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:40:43.399087 2025] [proxy_fcgi:error] [pid 13325:tid 13333] [client 165.85.56.95:10622] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689243.3985-1763689242.8252', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:42:44.634846 2025] [proxy_fcgi:error] [pid 13325:tid 13353] [client 165.85.56.95:36235] AH01071: Got error 'PHP message: start 1763689363.9933', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:42:44.635376 2025] [proxy_fcgi:error] [pid 13325:tid 13353] [client 165.85.56.95:36235] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689364.6347-1763689363.9933', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:44:45.715689 2025] [proxy_fcgi:error] [pid 46237:tid 46249] [client 165.85.56.95:30976] AH01071: Got error 'PHP message: start 1763689485.1665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:44:45.716292 2025] [proxy_fcgi:error] [pid 46237:tid 46249] [client 165.85.56.95:30976] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689485.7154-1763689485.1665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:46:46.862647 2025] [proxy_fcgi:error] [pid 46276:tid 46288] [client 165.85.56.95:26898] AH01071: Got error 'PHP message: start 1763689606.1733', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:46:46.863068 2025] [proxy_fcgi:error] [pid 46276:tid 46288] [client 165.85.56.95:26898] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689606.862-1763689606.1733', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:48:48.263405 2025] [proxy_fcgi:error] [pid 46194:tid 46199] [client 165.85.56.95:47765] AH01071: Got error 'PHP message: start 1763689727.6906', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:48:48.263867 2025] [proxy_fcgi:error] [pid 46194:tid 46199] [client 165.85.56.95:47765] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689728.2631-1763689727.6906', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:50:49.313999 2025] [proxy_fcgi:error] [pid 51434:tid 51441] [client 165.85.56.95:5905] AH01071: Got error 'PHP message: start 1763689848.7317', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:50:49.314584 2025] [proxy_fcgi:error] [pid 51434:tid 51441] [client 165.85.56.95:5905] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689849.3138-1763689848.7317', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:52:50.351592 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 165.85.56.95:1120] AH01071: Got error 'PHP message: start 1763689969.7761', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:52:50.352072 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 165.85.56.95:1120] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763689970.3514-1763689969.7761', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:54:51.445478 2025] [proxy_fcgi:error] [pid 17882:tid 17886] [client 165.85.56.95:48981] AH01071: Got error 'PHP message: start 1763690090.8071', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:54:51.445962 2025] [proxy_fcgi:error] [pid 17882:tid 17886] [client 165.85.56.95:48981] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690091.4453-1763690090.8071', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:56:52.787481 2025] [proxy_fcgi:error] [pid 51434:tid 51444] [client 165.85.56.95:26197] AH01071: Got error 'PHP message: start 1763690211.9001', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:56:52.787950 2025] [proxy_fcgi:error] [pid 51434:tid 51444] [client 165.85.56.95:26197] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690212.7868-1763690211.9001', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:58:54.179243 2025] [proxy_fcgi:error] [pid 13325:tid 13350] [client 165.85.56.95:5563] AH01071: Got error 'PHP message: start 1763690333.6577', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 09:58:54.179651 2025] [proxy_fcgi:error] [pid 13325:tid 13350] [client 165.85.56.95:5563] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690334.179-1763690333.6577', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:00:55.168487 2025] [proxy_fcgi:error] [pid 17882:tid 17884] [client 165.85.56.95:50734] AH01071: Got error 'PHP message: start 1763690454.6449', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:00:55.169064 2025] [proxy_fcgi:error] [pid 17882:tid 17884] [client 165.85.56.95:50734] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690455.1683-1763690454.6449', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:02:56.087832 2025] [proxy_fcgi:error] [pid 46194:tid 46216] [client 165.85.56.95:22545] AH01071: Got error 'PHP message: start 1763690575.5772', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:02:56.088330 2025] [proxy_fcgi:error] [pid 46194:tid 46216] [client 165.85.56.95:22545] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690576.0875-1763690575.5772', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:04:57.059790 2025] [proxy_fcgi:error] [pid 51434:tid 51453] [client 165.85.56.95:3980] AH01071: Got error 'PHP message: start 1763690696.5348', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:04:57.060244 2025] [proxy_fcgi:error] [pid 51434:tid 51453] [client 165.85.56.95:3980] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690697.0594-1763690696.5348', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:06:58.018003 2025] [proxy_fcgi:error] [pid 17882:tid 17887] [client 165.85.56.95:54440] AH01071: Got error 'PHP message: start 1763690817.4975', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:06:58.018679 2025] [proxy_fcgi:error] [pid 17882:tid 17887] [client 165.85.56.95:54440] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690818.0178-1763690817.4975', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:08:59.315922 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 165.85.56.95:19890] AH01071: Got error 'PHP message: start 1763690938.8408', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:08:59.316381 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 165.85.56.95:19890] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763690939.3157-1763690938.8408', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:11:00.398766 2025] [proxy_fcgi:error] [pid 51434:tid 51457] [client 165.85.56.95:33405] AH01071: Got error 'PHP message: start 1763691059.7495', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:11:00.399380 2025] [proxy_fcgi:error] [pid 51434:tid 51457] [client 165.85.56.95:33405] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691060.3985-1763691059.7495', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:13:01.520966 2025] [proxy_fcgi:error] [pid 46276:tid 46287] [client 165.85.56.95:64454] AH01071: Got error 'PHP message: start 1763691180.8572', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:13:01.521620 2025] [proxy_fcgi:error] [pid 46276:tid 46287] [client 165.85.56.95:64454] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691181.5203-1763691180.8572', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:15:03.207045 2025] [proxy_fcgi:error] [pid 13327:tid 13400] [client 165.85.56.95:24221] AH01071: Got error 'PHP message: start 1763691302.6173', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:15:03.207663 2025] [proxy_fcgi:error] [pid 13327:tid 13400] [client 165.85.56.95:24221] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691303.2068-1763691302.6173', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:17:04.664183 2025] [proxy_fcgi:error] [pid 51434:tid 51460] [client 165.85.56.95:64936] AH01071: Got error 'PHP message: start 1763691424.1012', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:17:04.664729 2025] [proxy_fcgi:error] [pid 51434:tid 51460] [client 165.85.56.95:64936] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691424.6635-1763691424.1012', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:19:06.317321 2025] [proxy_fcgi:error] [pid 13326:tid 13359] [client 165.85.56.95:54861] AH01071: Got error 'PHP message: start 1763691545.7049', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:19:06.318012 2025] [proxy_fcgi:error] [pid 13326:tid 13359] [client 165.85.56.95:54861] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691546.317-1763691545.7049', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:21:07.539778 2025] [proxy_fcgi:error] [pid 13326:tid 13381] [client 165.85.56.95:16861] AH01071: Got error 'PHP message: start 1763691666.884', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:21:07.540316 2025] [proxy_fcgi:error] [pid 13326:tid 13381] [client 165.85.56.95:16861] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691667.5393-1763691666.884', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:23:08.613839 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 165.85.56.95:51652] AH01071: Got error 'PHP message: start 1763691788.0781', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:23:08.614284 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 165.85.56.95:51652] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691788.6136-1763691788.0781', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:25:16.017089 2025] [proxy_fcgi:error] [pid 46194:tid 46212] [client 165.85.56.95:7475] AH01071: Got error 'PHP message: start 1763691909.1088', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:25:16.017633 2025] [proxy_fcgi:error] [pid 46194:tid 46212] [client 165.85.56.95:7475] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691916.0169-1763691909.1088', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:26:04.661331 2025] [proxy_fcgi:error] [pid 51434:tid 51447] [client 165.85.56.95:53242] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 10:26:06.219791 2025] [proxy_fcgi:error] [pid 51434:tid 51452] [client 165.85.56.95:53242] AH01071: Got error 'PHP message: start 1763691965.7364', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 10:26:06.264243 2025] [proxy_fcgi:error] [pid 51434:tid 51452] [client 165.85.56.95:53242] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763691966.2637-1763691965.7364', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 10:27:40.595526 2025] [proxy_fcgi:error] [pid 13326:tid 13365] [client 165.85.56.95:13465] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-20
[Fri Nov 21 10:28:43.642287 2025] [proxy_fcgi:error] [pid 17882:tid 17898] [client 165.85.56.95:45576] AH01071: Got error 'PHP message: start 1763692123.0352', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:28:43.672502 2025] [proxy_fcgi:error] [pid 17882:tid 17898] [client 165.85.56.95:45576] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763692123.6719-1763692123.0352', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:30:44.557671 2025] [proxy_fcgi:error] [pid 51434:tid 51459] [client 165.85.56.95:50785] AH01071: Got error 'PHP message: start 1763692243.9703', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:30:44.585272 2025] [proxy_fcgi:error] [pid 51434:tid 51459] [client 165.85.56.95:50785] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763692244.5846-1763692243.9703', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:32:45.849639 2025] [proxy_fcgi:error] [pid 13325:tid 13340] [client 165.85.56.95:61114] AH01071: Got error 'PHP message: start 1763692365.1883', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:32:45.894588 2025] [proxy_fcgi:error] [pid 13325:tid 13340] [client 165.85.56.95:61114] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763692365.8939-1763692365.1883', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:34:47.172636 2025] [proxy_fcgi:error] [pid 13412:tid 13422] [client 165.85.56.95:19108] AH01071: Got error 'PHP message: start 1763692486.4671', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:34:47.228101 2025] [proxy_fcgi:error] [pid 13412:tid 13422] [client 165.85.56.95:19108] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763692487.2274-1763692486.4671', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:36:48.510798 2025] [proxy_fcgi:error] [pid 13326:tid 13366] [client 165.85.56.95:13328] AH01071: Got error 'PHP message: start 1763692607.8121', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:36:48.560018 2025] [proxy_fcgi:error] [pid 13326:tid 13366] [client 165.85.56.95:13328] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763692608.5592-1763692607.8121', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:38:49.875647 2025] [proxy_fcgi:error] [pid 51434:tid 51459] [client 165.85.56.95:48697] AH01071: Got error 'PHP message: start 1763692729.1419', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 10:38:49.933469 2025] [proxy_fcgi:error] [pid 51434:tid 51459] [client 165.85.56.95:48697] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763692729.9327-1763692729.1419', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 11:24:02.389623 2025] [proxy_fcgi:error] [pid 51434:tid 51441] [client 165.85.56.95:12241] AH01071: Got error 'PHP message: start 1763695441.666', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 11:24:02.444948 2025] [proxy_fcgi:error] [pid 51434:tid 51441] [client 165.85.56.95:12241] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763695442.4442-1763695441.666', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 11:26:03.913417 2025] [proxy_fcgi:error] [pid 13327:tid 13404] [client 165.85.56.95:18048] AH01071: Got error 'PHP message: start 1763695563.3649', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 11:26:03.944990 2025] [proxy_fcgi:error] [pid 13327:tid 13404] [client 165.85.56.95:18048] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763695563.9443-1763695563.3649', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 11:28:04.959948 2025] [proxy_fcgi:error] [pid 46276:tid 46292] [client 165.85.56.95:60789] AH01071: Got error 'PHP message: start 1763695684.3975', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 11:28:04.989617 2025] [proxy_fcgi:error] [pid 46276:tid 46292] [client 165.85.56.95:60789] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763695684.989-1763695684.3975', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:25:19.680855 2025] [:error] [pid 13412:tid 13427] [client 43.130.102.7:42292] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aR_pr33-knz3ZB6HogEL_gAAAMo"]
[Fri Nov 21 12:35:11.906656 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 165.85.56.95:24808] AH01071: Got error 'PHP message: start 1763699711.2634', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:35:11.955208 2025] [proxy_fcgi:error] [pid 17882:tid 17895] [client 165.85.56.95:24808] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763699711.9546-1763699711.2634', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:37:13.012475 2025] [proxy_fcgi:error] [pid 13327:tid 13392] [client 165.85.56.95:30493] AH01071: Got error 'PHP message: start 1763699832.382', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:37:13.057641 2025] [proxy_fcgi:error] [pid 13327:tid 13392] [client 165.85.56.95:30493] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763699833.0569-1763699832.382', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:39:14.188726 2025] [proxy_fcgi:error] [pid 46194:tid 46219] [client 165.85.56.95:35609] AH01071: Got error 'PHP message: start 1763699953.607', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:39:14.218664 2025] [proxy_fcgi:error] [pid 46194:tid 46219] [client 165.85.56.95:35609] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763699954.2182-1763699953.607', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:41:15.274146 2025] [proxy_fcgi:error] [pid 46276:tid 46301] [client 165.85.56.95:8416] AH01071: Got error 'PHP message: start 1763700074.7122', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:41:15.310247 2025] [proxy_fcgi:error] [pid 46276:tid 46301] [client 165.85.56.95:8416] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700075.3097-1763700074.7122', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:43:16.800241 2025] [proxy_fcgi:error] [pid 46237:tid 46254] [client 165.85.56.95:51209] AH01071: Got error 'PHP message: start 1763700196.153', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:43:16.840781 2025] [proxy_fcgi:error] [pid 46237:tid 46254] [client 165.85.56.95:51209] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700196.8402-1763700196.153', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:45:17.955639 2025] [proxy_fcgi:error] [pid 13326:tid 13379] [client 165.85.56.95:23891] AH01071: Got error 'PHP message: start 1763700317.3052', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:45:17.997345 2025] [proxy_fcgi:error] [pid 13326:tid 13379] [client 165.85.56.95:23891] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700317.9968-1763700317.3052', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:47:19.034191 2025] [proxy_fcgi:error] [pid 17882:tid 17893] [client 165.85.56.95:39414] AH01071: Got error 'PHP message: start 1763700438.4819', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:47:19.065567 2025] [proxy_fcgi:error] [pid 17882:tid 17893] [client 165.85.56.95:39414] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700439.0649-1763700438.4819', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:49:20.041182 2025] [proxy_fcgi:error] [pid 17882:tid 17896] [client 165.85.56.95:34177] AH01071: Got error 'PHP message: start 1763700559.5173', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:49:20.069406 2025] [proxy_fcgi:error] [pid 17882:tid 17896] [client 165.85.56.95:34177] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700560.0687-1763700559.5173', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:51:21.599106 2025] [proxy_fcgi:error] [pid 51434:tid 51442] [client 165.85.56.95:48541] AH01071: Got error 'PHP message: start 1763700680.9728', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:51:21.626326 2025] [proxy_fcgi:error] [pid 51434:tid 51442] [client 165.85.56.95:48541] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700681.6257-1763700680.9728', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:53:23.246400 2025] [proxy_fcgi:error] [pid 17882:tid 17903] [client 165.85.56.95:1131] AH01071: Got error 'PHP message: start 1763700802.6838', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:53:23.279382 2025] [proxy_fcgi:error] [pid 17882:tid 17903] [client 165.85.56.95:1131] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700803.2789-1763700802.6838', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:55:24.454074 2025] [proxy_fcgi:error] [pid 46194:tid 46201] [client 165.85.56.95:18113] AH01071: Got error 'PHP message: start 1763700923.89', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:55:24.485983 2025] [proxy_fcgi:error] [pid 46194:tid 46201] [client 165.85.56.95:18113] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763700924.4855-1763700923.89', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:57:25.619133 2025] [proxy_fcgi:error] [pid 17882:tid 17891] [client 165.85.56.95:4905] AH01071: Got error 'PHP message: start 1763701044.9832', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:57:25.663447 2025] [proxy_fcgi:error] [pid 17882:tid 17891] [client 165.85.56.95:4905] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701045.663-1763701044.9832', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:59:27.110474 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 165.85.56.95:65248] AH01071: Got error 'PHP message: start 1763701166.1299', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 12:59:27.157059 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 165.85.56.95:65248] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701167.1565-1763701166.1299', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:01:28.193621 2025] [proxy_fcgi:error] [pid 13412:tid 13428] [client 165.85.56.95:30406] AH01071: Got error 'PHP message: start 1763701287.5663', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:01:28.225229 2025] [proxy_fcgi:error] [pid 13412:tid 13428] [client 165.85.56.95:30406] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701288.2246-1763701287.5663', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:03:29.335972 2025] [proxy_fcgi:error] [pid 13327:tid 13409] [client 165.85.56.95:36540] AH01071: Got error 'PHP message: start 1763701408.7103', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:03:29.372222 2025] [proxy_fcgi:error] [pid 13327:tid 13409] [client 165.85.56.95:36540] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701409.3716-1763701408.7103', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:05:30.678267 2025] [proxy_fcgi:error] [pid 17882:tid 17898] [client 165.85.56.95:45882] AH01071: Got error 'PHP message: start 1763701530.1188', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:05:30.707839 2025] [proxy_fcgi:error] [pid 17882:tid 17898] [client 165.85.56.95:45882] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701530.7072-1763701530.1188', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:07:32.185002 2025] [proxy_fcgi:error] [pid 46194:tid 46213] [client 165.85.56.95:47455] AH01071: Got error 'PHP message: start 1763701651.516', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:07:32.237509 2025] [proxy_fcgi:error] [pid 46194:tid 46213] [client 165.85.56.95:47455] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701652.2368-1763701651.516', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:09:33.670142 2025] [proxy_fcgi:error] [pid 46276:tid 46304] [client 165.85.56.95:61498] AH01071: Got error 'PHP message: start 1763701773.0815', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:09:33.702399 2025] [proxy_fcgi:error] [pid 46276:tid 46304] [client 165.85.56.95:61498] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701773.7018-1763701773.0815', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:11:34.813167 2025] [proxy_fcgi:error] [pid 13325:tid 13349] [client 165.85.56.95:4331] AH01071: Got error 'PHP message: start 1763701894.1745', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:11:34.845832 2025] [proxy_fcgi:error] [pid 13325:tid 13349] [client 165.85.56.95:4331] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763701894.8453-1763701894.1745', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:13:36.027212 2025] [proxy_fcgi:error] [pid 46237:tid 46245] [client 165.85.56.95:53687] AH01071: Got error 'PHP message: start 1763702015.3337', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:13:36.073506 2025] [proxy_fcgi:error] [pid 46237:tid 46245] [client 165.85.56.95:53687] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702016.0728-1763702015.3337', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:15:37.250302 2025] [proxy_fcgi:error] [pid 46237:tid 46250] [client 165.85.56.95:22529] AH01071: Got error 'PHP message: start 1763702136.5273', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:15:37.294421 2025] [proxy_fcgi:error] [pid 46237:tid 46250] [client 165.85.56.95:22529] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702137.2938-1763702136.5273', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:17:38.468210 2025] [proxy_fcgi:error] [pid 46237:tid 46251] [client 165.85.56.95:45201] AH01071: Got error 'PHP message: start 1763702257.7758', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:17:38.501199 2025] [proxy_fcgi:error] [pid 46237:tid 46251] [client 165.85.56.95:45201] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702258.5006-1763702257.7758', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:19:39.553649 2025] [proxy_fcgi:error] [pid 46237:tid 46252] [client 165.85.56.95:43743] AH01071: Got error 'PHP message: start 1763702378.9209', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:19:39.596190 2025] [proxy_fcgi:error] [pid 46237:tid 46252] [client 165.85.56.95:43743] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702379.5956-1763702378.9209', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:21:40.754696 2025] [proxy_fcgi:error] [pid 46237:tid 46262] [client 165.85.56.95:24247] AH01071: Got error 'PHP message: start 1763702500.1938', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:21:40.785889 2025] [proxy_fcgi:error] [pid 46237:tid 46262] [client 165.85.56.95:24247] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702500.7851-1763702500.1938', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:23:42.298782 2025] [proxy_fcgi:error] [pid 17882:tid 17905] [client 165.85.56.95:50225] AH01071: Got error 'PHP message: start 1763702621.5977', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:23:42.347508 2025] [proxy_fcgi:error] [pid 17882:tid 17905] [client 165.85.56.95:50225] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702622.347-1763702621.5977', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:24:32.150882 2025] [:error] [pid 13412:tid 13428] [client 60.188.57.0:34058] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aR_3kH3-knz3ZB6HogEXmAAAAMs"]
[Fri Nov 21 13:25:43.597321 2025] [proxy_fcgi:error] [pid 17882:tid 17884] [client 165.85.56.95:64321] AH01071: Got error 'PHP message: start 1763702742.8155', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:25:43.641364 2025] [proxy_fcgi:error] [pid 17882:tid 17884] [client 165.85.56.95:64321] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702743.6408-1763702742.8155', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:27:45.175028 2025] [proxy_fcgi:error] [pid 46276:tid 46293] [client 165.85.56.95:26345] AH01071: Got error 'PHP message: start 1763702864.4513', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:27:45.224375 2025] [proxy_fcgi:error] [pid 46276:tid 46293] [client 165.85.56.95:26345] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702865.2237-1763702864.4513', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:29:46.643220 2025] [proxy_fcgi:error] [pid 46237:tid 46246] [client 165.85.56.95:26601] AH01071: Got error 'PHP message: start 1763702986.0643', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:29:46.676353 2025] [proxy_fcgi:error] [pid 46237:tid 46246] [client 165.85.56.95:26601] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763702986.6758-1763702986.0643', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:31:48.096902 2025] [proxy_fcgi:error] [pid 46237:tid 46254] [client 165.85.56.95:47155] AH01071: Got error 'PHP message: start 1763703107.4443', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:31:48.143451 2025] [proxy_fcgi:error] [pid 46237:tid 46254] [client 165.85.56.95:47155] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703108.1424-1763703107.4443', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:33:49.220658 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 165.85.56.95:2836] AH01071: Got error 'PHP message: start 1763703228.6672', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:33:49.249612 2025] [proxy_fcgi:error] [pid 46237:tid 46258] [client 165.85.56.95:2836] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703229.249-1763703228.6672', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:35:50.363349 2025] [proxy_fcgi:error] [pid 46237:tid 46239] [client 165.85.56.95:55150] AH01071: Got error 'PHP message: start 1763703349.7038', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:35:50.394931 2025] [proxy_fcgi:error] [pid 46237:tid 46239] [client 165.85.56.95:55150] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703350.3942-1763703349.7038', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:37:51.505801 2025] [proxy_fcgi:error] [pid 13326:tid 13379] [client 165.85.56.95:19183] AH01071: Got error 'PHP message: start 1763703470.88', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:37:51.546315 2025] [proxy_fcgi:error] [pid 13326:tid 13379] [client 165.85.56.95:19183] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703471.5457-1763703470.88', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:39:52.649251 2025] [proxy_fcgi:error] [pid 46194:tid 46201] [client 165.85.56.95:6258] AH01071: Got error 'PHP message: start 1763703591.9942', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:39:52.687685 2025] [proxy_fcgi:error] [pid 46194:tid 46201] [client 165.85.56.95:6258] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703592.6868-1763703591.9942', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:41:53.833202 2025] [proxy_fcgi:error] [pid 46194:tid 46219] [client 165.85.56.95:53057] AH01071: Got error 'PHP message: start 1763703713.1503', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:41:53.868089 2025] [proxy_fcgi:error] [pid 46194:tid 46219] [client 165.85.56.95:53057] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703713.8674-1763703713.1503', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:43:55.397995 2025] [proxy_fcgi:error] [pid 46276:tid 46289] [client 165.85.56.95:25826] AH01071: Got error 'PHP message: start 1763703834.7402', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:43:55.441709 2025] [proxy_fcgi:error] [pid 46276:tid 46289] [client 165.85.56.95:25826] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703835.4407-1763703834.7402', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:45:56.579959 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:44470] AH01071: Got error 'PHP message: start 1763703955.9299', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:45:56.622308 2025] [proxy_fcgi:error] [pid 51434:tid 51439] [client 165.85.56.95:44470] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763703956.6217-1763703955.9299', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:47:57.856690 2025] [proxy_fcgi:error] [pid 13327:tid 13391] [client 165.85.56.95:64532] AH01071: Got error 'PHP message: start 1763704077.0665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:47:57.904350 2025] [proxy_fcgi:error] [pid 13327:tid 13391] [client 165.85.56.95:64532] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704077.9037-1763704077.0665', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:48:07.127862 2025] [proxy_fcgi:error] [pid 13326:tid 13372] [client 165.85.56.95:10390] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Fri Nov 21 13:48:09.498758 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 165.85.56.95:10390] AH01071: Got error 'PHP message: start 1763704088.8873', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 13:48:09.499353 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 165.85.56.95:10390] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704089.4985-1763704088.8873', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 13:48:17.027939 2025] [proxy_fcgi:error] [pid 13326:tid 13368] [client 165.85.56.95:45263] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/dashboard.php
[Fri Nov 21 13:48:31.731600 2025] [proxy_fcgi:error] [pid 13325:tid 13352] [client 165.85.56.95:43034] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/ajaxListBookingDay.php on line 21', referer: https://pumpbooking.com/calendar.php
[Fri Nov 21 13:49:59.288567 2025] [proxy_fcgi:error] [pid 46194:tid 46208] [client 165.85.56.95:62855] AH01071: Got error 'PHP message: start 1763704198.3489', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:49:59.343748 2025] [proxy_fcgi:error] [pid 46194:tid 46208] [client 165.85.56.95:62855] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704199.343-1763704198.3489', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:52:00.942654 2025] [proxy_fcgi:error] [pid 46276:tid 46292] [client 165.85.56.95:16761] AH01071: Got error 'PHP message: start 1763704320.1936', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:52:00.989842 2025] [proxy_fcgi:error] [pid 46276:tid 46292] [client 165.85.56.95:16761] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704320.9891-1763704320.1936', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:54:02.245115 2025] [proxy_fcgi:error] [pid 13327:tid 13396] [client 165.85.56.95:45877] AH01071: Got error 'PHP message: start 1763704441.4904', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:54:02.309660 2025] [proxy_fcgi:error] [pid 13327:tid 13396] [client 165.85.56.95:45877] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704442.3091-1763704441.4904', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:56:03.287935 2025] [proxy_fcgi:error] [pid 17882:tid 17890] [client 165.85.56.95:1357] AH01071: Got error 'PHP message: start 1763704562.7115', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:56:03.321975 2025] [proxy_fcgi:error] [pid 17882:tid 17890] [client 165.85.56.95:1357] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704563.3213-1763704562.7115', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:58:04.422272 2025] [proxy_fcgi:error] [pid 13325:tid 13331] [client 165.85.56.95:65095] AH01071: Got error 'PHP message: start 1763704683.7767', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 13:58:04.466454 2025] [proxy_fcgi:error] [pid 13325:tid 13331] [client 165.85.56.95:65095] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704684.4657-1763704683.7767', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:00:06.027708 2025] [proxy_fcgi:error] [pid 13325:tid 13343] [client 165.85.56.95:51766] AH01071: Got error 'PHP message: start 1763704805.3248', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:00:06.064461 2025] [proxy_fcgi:error] [pid 13325:tid 13343] [client 165.85.56.95:51766] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704806.0638-1763704805.3248', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:02:07.129672 2025] [proxy_fcgi:error] [pid 46276:tid 46295] [client 165.85.56.95:28487] AH01071: Got error 'PHP message: start 1763704926.4872', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:02:07.157800 2025] [proxy_fcgi:error] [pid 46276:tid 46295] [client 165.85.56.95:28487] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763704927.1572-1763704926.4872', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:04:08.214759 2025] [proxy_fcgi:error] [pid 46194:tid 46202] [client 165.85.56.95:32920] AH01071: Got error 'PHP message: start 1763705047.652', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:04:08.245489 2025] [proxy_fcgi:error] [pid 46194:tid 46202] [client 165.85.56.95:32920] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705048.2448-1763705047.652', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:06:09.362656 2025] [proxy_fcgi:error] [pid 46276:tid 46283] [client 165.85.56.95:41978] AH01071: Got error 'PHP message: start 1763705168.6533', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:06:09.406729 2025] [proxy_fcgi:error] [pid 46276:tid 46283] [client 165.85.56.95:41978] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705169.4061-1763705168.6533', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:08:17.067407 2025] [proxy_fcgi:error] [pid 13327:tid 13404] [client 165.85.56.95:32714] AH01071: Got error 'PHP message: start 1763705289.8344', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:08:17.109056 2025] [proxy_fcgi:error] [pid 13327:tid 13404] [client 165.85.56.95:32714] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705297.1085-1763705289.8344', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:10:18.580029 2025] [proxy_fcgi:error] [pid 46194:tid 46207] [client 165.85.56.95:64407] AH01071: Got error 'PHP message: start 1763705417.8812', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:10:18.620199 2025] [proxy_fcgi:error] [pid 46194:tid 46207] [client 165.85.56.95:64407] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705418.6197-1763705417.8812', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:12:19.640313 2025] [proxy_fcgi:error] [pid 13325:tid 13338] [client 165.85.56.95:8382] AH01071: Got error 'PHP message: start 1763705539.078', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:12:19.681211 2025] [proxy_fcgi:error] [pid 13325:tid 13338] [client 165.85.56.95:8382] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705539.6807-1763705539.078', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:14:20.796320 2025] [proxy_fcgi:error] [pid 46194:tid 46213] [client 165.85.56.95:55717] AH01071: Got error 'PHP message: start 1763705660.131', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:14:20.831516 2025] [proxy_fcgi:error] [pid 46194:tid 46213] [client 165.85.56.95:55717] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705660.831-1763705660.131', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:16:22.240710 2025] [proxy_fcgi:error] [pid 46276:tid 46307] [client 165.85.56.95:38722] AH01071: Got error 'PHP message: start 1763705781.6835', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:16:22.276091 2025] [proxy_fcgi:error] [pid 46276:tid 46307] [client 165.85.56.95:38722] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705782.2755-1763705781.6835', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:18:23.260300 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 165.85.56.95:29681] AH01071: Got error 'PHP message: start 1763705902.7154', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:18:23.288470 2025] [proxy_fcgi:error] [pid 13326:tid 13370] [client 165.85.56.95:29681] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763705903.2879-1763705902.7154', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:20:24.397572 2025] [proxy_fcgi:error] [pid 46237:tid 46256] [client 165.85.56.95:6601] AH01071: Got error 'PHP message: start 1763706023.7523', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:20:24.441865 2025] [proxy_fcgi:error] [pid 46237:tid 46256] [client 165.85.56.95:6601] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706024.4413-1763706023.7523', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:22:25.908264 2025] [proxy_fcgi:error] [pid 13327:tid 13406] [client 165.85.56.95:55812] AH01071: Got error 'PHP message: start 1763706145.2593', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:22:25.950613 2025] [proxy_fcgi:error] [pid 13327:tid 13406] [client 165.85.56.95:55812] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706145.95-1763706145.2593', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:24:26.955014 2025] [proxy_fcgi:error] [pid 13327:tid 13401] [client 165.85.56.95:62346] AH01071: Got error 'PHP message: start 1763706266.4019', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:24:26.990242 2025] [proxy_fcgi:error] [pid 13327:tid 13401] [client 165.85.56.95:62346] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706266.9897-1763706266.4019', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:26:28.412763 2025] [proxy_fcgi:error] [pid 13412:tid 13426] [client 165.85.56.95:9877] AH01071: Got error 'PHP message: start 1763706387.7847', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:26:28.459031 2025] [proxy_fcgi:error] [pid 13412:tid 13426] [client 165.85.56.95:9877] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706388.4584-1763706387.7847', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:28:29.549637 2025] [proxy_fcgi:error] [pid 13412:tid 13431] [client 165.85.56.95:39280] AH01071: Got error 'PHP message: start 1763706508.876', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:28:29.589661 2025] [proxy_fcgi:error] [pid 13412:tid 13431] [client 165.85.56.95:39280] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706509.5888-1763706508.876', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:30:30.529061 2025] [proxy_fcgi:error] [pid 13327:tid 13399] [client 165.85.56.95:43564] AH01071: Got error 'PHP message: start 1763706630.0009', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:30:30.560081 2025] [proxy_fcgi:error] [pid 13327:tid 13399] [client 165.85.56.95:43564] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706630.5595-1763706630.0009', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:32:31.689982 2025] [proxy_fcgi:error] [pid 25430:tid 25478] [client 165.85.56.95:37121] AH01071: Got error 'PHP message: start 1763706751.089', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:32:31.733779 2025] [proxy_fcgi:error] [pid 25430:tid 25478] [client 165.85.56.95:37121] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706751.7332-1763706751.089', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:34:33.097121 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 165.85.56.95:9899] AH01071: Got error 'PHP message: start 1763706872.4809', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:34:33.140347 2025] [proxy_fcgi:error] [pid 25431:tid 25500] [client 165.85.56.95:9899] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706873.1398-1763706872.4809', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:36:34.273183 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 165.85.56.95:59569] AH01071: Got error 'PHP message: start 1763706993.6458', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:36:34.303644 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 165.85.56.95:59569] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763706994.303-1763706993.6458', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:38:35.318593 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 165.85.56.95:26833] AH01071: Got error 'PHP message: start 1763707114.7411', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:38:35.348031 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 165.85.56.95:26833] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707115.3474-1763707114.7411', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:40:36.723623 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 165.85.56.95:33113] AH01071: Got error 'PHP message: start 1763707236.1555', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:40:36.753924 2025] [proxy_fcgi:error] [pid 25431:tid 25494] [client 165.85.56.95:33113] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707236.7532-1763707236.1555', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:42:41.288059 2025] [proxy_fcgi:error] [pid 25554:tid 25581] [client 165.85.56.95:43448] AH01071: Got error 'PHP message: start 1763707357.5669', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:42:41.338556 2025] [proxy_fcgi:error] [pid 25554:tid 25581] [client 165.85.56.95:43448] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707361.3378-1763707357.5669', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:44:42.847863 2025] [proxy_fcgi:error] [pid 25521:tid 25530] [client 165.85.56.95:23619] AH01071: Got error 'PHP message: start 1763707482.2172', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:44:42.890551 2025] [proxy_fcgi:error] [pid 25521:tid 25530] [client 165.85.56.95:23619] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707482.89-1763707482.2172', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:46:44.187411 2025] [proxy_fcgi:error] [pid 25554:tid 25578] [client 165.85.56.95:20125] AH01071: Got error 'PHP message: start 1763707603.4872', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:46:44.233403 2025] [proxy_fcgi:error] [pid 25554:tid 25578] [client 165.85.56.95:20125] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707604.2326-1763707603.4872', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:48:45.285710 2025] [proxy_fcgi:error] [pid 25554:tid 25574] [client 165.85.56.95:40876] AH01071: Got error 'PHP message: start 1763707724.654', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:48:45.316363 2025] [proxy_fcgi:error] [pid 25554:tid 25574] [client 165.85.56.95:40876] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707725.3158-1763707724.654', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:50:46.910963 2025] [proxy_fcgi:error] [pid 25429:tid 25434] [client 165.85.56.95:27244] AH01071: Got error 'PHP message: start 1763707846.1969', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:50:46.948585 2025] [proxy_fcgi:error] [pid 25429:tid 25434] [client 165.85.56.95:27244] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707846.948-1763707846.1969', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:52:48.059256 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 165.85.56.95:46442] AH01071: Got error 'PHP message: start 1763707967.4398', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:52:48.088379 2025] [proxy_fcgi:error] [pid 25431:tid 25488] [client 165.85.56.95:46442] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763707968.0878-1763707967.4398', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:54:49.802436 2025] [proxy_fcgi:error] [pid 25554:tid 25572] [client 165.85.56.95:57361] AH01071: Got error 'PHP message: start 1763708089.1767', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:54:49.842425 2025] [proxy_fcgi:error] [pid 25554:tid 25572] [client 165.85.56.95:57361] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708089.8419-1763708089.1767', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:56:50.908280 2025] [proxy_fcgi:error] [pid 25429:tid 25455] [client 165.85.56.95:36956] AH01071: Got error 'PHP message: start 1763708210.319', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:56:50.948742 2025] [proxy_fcgi:error] [pid 25429:tid 25455] [client 165.85.56.95:36956] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708210.9483-1763708210.319', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:58:52.031425 2025] [proxy_fcgi:error] [pid 25554:tid 25561] [client 165.85.56.95:12001] AH01071: Got error 'PHP message: start 1763708331.4329', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 14:58:52.061351 2025] [proxy_fcgi:error] [pid 25554:tid 25561] [client 165.85.56.95:12001] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708332.0608-1763708331.4329', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:00:53.058625 2025] [proxy_fcgi:error] [pid 25521:tid 25535] [client 165.85.56.95:5717] AH01071: Got error 'PHP message: start 1763708452.4706', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:00:53.093636 2025] [proxy_fcgi:error] [pid 25521:tid 25535] [client 165.85.56.95:5717] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708453.0928-1763708452.4706', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:02:54.061990 2025] [proxy_fcgi:error] [pid 25521:tid 25531] [client 165.85.56.95:56659] AH01071: Got error 'PHP message: start 1763708573.5183', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:02:54.091580 2025] [proxy_fcgi:error] [pid 25521:tid 25531] [client 165.85.56.95:56659] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708574.091-1763708573.5183', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:04:55.108784 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 165.85.56.95:5394] AH01071: Got error 'PHP message: start 1763708694.5318', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:04:55.137364 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 165.85.56.95:5394] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708695.1367-1763708694.5318', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:06:56.124803 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 165.85.56.95:52896] AH01071: Got error 'PHP message: start 1763708815.5122', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:06:56.168139 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 165.85.56.95:52896] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708816.1676-1763708815.5122', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:08:57.384915 2025] [proxy_fcgi:error] [pid 25554:tid 25568] [client 165.85.56.95:50484] AH01071: Got error 'PHP message: start 1763708936.6363', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:08:57.434740 2025] [proxy_fcgi:error] [pid 25554:tid 25568] [client 165.85.56.95:50484] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763708937.4342-1763708936.6363', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:10:58.341167 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 165.85.56.95:65469] AH01071: Got error 'PHP message: start 1763709057.8237', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:10:58.372076 2025] [proxy_fcgi:error] [pid 25554:tid 25571] [client 165.85.56.95:65469] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709058.3714-1763709057.8237', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:12:59.818401 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 165.85.56.95:15407] AH01071: Got error 'PHP message: start 1763709179.1669', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:12:59.860368 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 165.85.56.95:15407] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709179.8597-1763709179.1669', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:15:00.864097 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 165.85.56.95:57672] AH01071: Got error 'PHP message: start 1763709300.292', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:15:00.892791 2025] [proxy_fcgi:error] [pid 25429:tid 25448] [client 165.85.56.95:57672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709300.8921-1763709300.292', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:17:02.074501 2025] [proxy_fcgi:error] [pid 25521:tid 25542] [client 165.85.56.95:38744] AH01071: Got error 'PHP message: start 1763709421.3234', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:17:02.124938 2025] [proxy_fcgi:error] [pid 25521:tid 25542] [client 165.85.56.95:38744] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709422.1244-1763709421.3234', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:19:03.241192 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 165.85.56.95:31431] AH01071: Got error 'PHP message: start 1763709542.5307', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:19:03.288763 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 165.85.56.95:31431] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709543.2881-1763709542.5307', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:21:04.323416 2025] [proxy_fcgi:error] [pid 25429:tid 25435] [client 165.85.56.95:24177] AH01071: Got error 'PHP message: start 1763709663.724', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:21:04.351421 2025] [proxy_fcgi:error] [pid 25429:tid 25435] [client 165.85.56.95:24177] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709664.3508-1763709663.724', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:23:05.399723 2025] [proxy_fcgi:error] [pid 25429:tid 25455] [client 165.85.56.95:27544] AH01071: Got error 'PHP message: start 1763709784.7607', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:23:05.428577 2025] [proxy_fcgi:error] [pid 25429:tid 25455] [client 165.85.56.95:27544] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709785.428-1763709784.7607', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:25:06.456729 2025] [proxy_fcgi:error] [pid 25430:tid 25483] [client 165.85.56.95:19657] AH01071: Got error 'PHP message: start 1763709905.8686', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:25:06.492242 2025] [proxy_fcgi:error] [pid 25430:tid 25483] [client 165.85.56.95:19657] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763709906.4917-1763709905.8686', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:27:07.481480 2025] [proxy_fcgi:error] [pid 25554:tid 25582] [client 165.85.56.95:50964] AH01071: Got error 'PHP message: start 1763710026.893', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:27:07.528420 2025] [proxy_fcgi:error] [pid 25554:tid 25582] [client 165.85.56.95:50964] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763710027.5278-1763710026.893', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:29:08.875698 2025] [proxy_fcgi:error] [pid 25554:tid 25565] [client 165.85.56.95:14370] AH01071: Got error 'PHP message: start 1763710148.303', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 15:29:08.907273 2025] [proxy_fcgi:error] [pid 25554:tid 25565] [client 165.85.56.95:14370] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763710148.9068-1763710148.303', referer: https://pumpbooking.com/dashboard-bookings.php
[Fri Nov 21 18:45:45.933112 2025] [:error] [pid 25430:tid 25479] [client 104.28.208.84:11675] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSBC2apnWJcWt_4foXl0RAAAAFM"]
[Fri Nov 21 18:45:45.954635 2025] [proxy_fcgi:error] [pid 25430:tid 25479] [client 104.28.208.84:11675] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 20:56:48.505415 2025] [:error] [pid 25429:tid 25451] [client 104.28.201.236:20233] [client 104.28.201.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.201.236, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSBhkD4rZbRSr7vu-NP7AAAAABI"]
[Fri Nov 21 20:56:48.518779 2025] [proxy_fcgi:error] [pid 25429:tid 25451] [client 104.28.201.236:20233] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 22:56:45.836214 2025] [:error] [pid 25554:tid 25578] [client 173.239.254.56:55109] [client 173.239.254.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.56, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSB9rR-NtB-9AzFZrk7NiQAAARQ"]
[Fri Nov 21 22:56:45.845976 2025] [proxy_fcgi:error] [pid 25554:tid 25578] [client 173.239.254.56:55109] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:14:15.623253 2025] [proxy_fcgi:error] [pid 50057:tid 50079] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:16.387026 2025] [proxy_fcgi:error] [pid 50057:tid 50071] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:16.624728 2025] [proxy_fcgi:error] [pid 50057:tid 50061] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:16.833817 2025] [proxy_fcgi:error] [pid 50057:tid 50083] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:17.044763 2025] [proxy_fcgi:error] [pid 50057:tid 50073] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:17.342818 2025] [:error] [pid 50057:tid 50066] [client 104.209.220.233:2733] [client 104.209.220.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.209.220.233, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSCr-Vb9j9fTBoI0sRVc9gAAAQc"], referer: https://duckduckgo.com/
[Sat Nov 22 02:14:17.347294 2025] [proxy_fcgi:error] [pid 50057:tid 50066] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:17.837088 2025] [proxy_fcgi:error] [pid 50057:tid 50068] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:18.047037 2025] [proxy_fcgi:error] [pid 50057:tid 50082] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:19.518762 2025] [proxy_fcgi:error] [pid 50057:tid 50059] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:19.736463 2025] [proxy_fcgi:error] [pid 50057:tid 50067] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:19.952002 2025] [proxy_fcgi:error] [pid 50057:tid 50070] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:20.341374 2025] [proxy_fcgi:error] [pid 50057:tid 50065] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:20.554158 2025] [proxy_fcgi:error] [pid 50057:tid 50069] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:20.769810 2025] [proxy_fcgi:error] [pid 50057:tid 50072] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:21.292773 2025] [proxy_fcgi:error] [pid 50057:tid 50060] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:21.511061 2025] [proxy_fcgi:error] [pid 50057:tid 50061] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:21.724602 2025] [proxy_fcgi:error] [pid 50057:tid 50083] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:21.935944 2025] [proxy_fcgi:error] [pid 50057:tid 50073] [client 104.209.220.233:2733] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:22.479240 2025] [:error] [pid 50057:tid 50066] [client 104.209.220.233:2733] [client 104.209.220.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aSCr_lb9j9fTBoI0sRVdCgAAAQc"], referer: https://www.google.co.uk/
[Sat Nov 22 02:14:24.582463 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 104.209.220.233:3761] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:25.841484 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 104.209.220.233:3761] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:26.076542 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 104.209.220.233:3761] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:26.300289 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 104.209.220.233:3761] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:26.514082 2025] [proxy_fcgi:error] [pid 9180:tid 9182] [client 104.209.220.233:3761] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:27.444041 2025] [:error] [pid 9180:tid 9200] [client 104.209.220.233:3761] [client 104.209.220.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSCsA7rk9msixUFV2i-tjQAAAFI"], referer: https://www.google.co.uk/
[Sat Nov 22 02:14:32.499356 2025] [proxy_fcgi:error] [pid 14291:tid 14308] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:33.153247 2025] [proxy_fcgi:error] [pid 14291:tid 14316] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:33.804442 2025] [proxy_fcgi:error] [pid 14291:tid 14305] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:34.041793 2025] [proxy_fcgi:error] [pid 14291:tid 14302] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:35.039682 2025] [proxy_fcgi:error] [pid 14291:tid 14303] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:35.244092 2025] [proxy_fcgi:error] [pid 14291:tid 14313] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:35.698764 2025] [proxy_fcgi:error] [pid 14291:tid 14296] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:37.194717 2025] [proxy_fcgi:error] [pid 14291:tid 14293] [client 104.209.220.233:5952] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:38.701698 2025] [:error] [pid 14291:tid 14317] [client 104.209.220.233:5952] [client 104.209.220.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSCsDkEjlvzqoJBTM9gKTAAAAVg"], referer: https://www.google.co.uk/
[Sat Nov 22 02:14:42.039387 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:42.269198 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:42.482968 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:42.691439 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:43.153531 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:43.445964 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:43.683157 2025] [proxy_fcgi:error] [pid 9180:tid 9197] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:44.127975 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:44.356153 2025] [proxy_fcgi:error] [pid 9180:tid 9186] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:44.566451 2025] [proxy_fcgi:error] [pid 9180:tid 9202] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:44.837240 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:45.347812 2025] [proxy_fcgi:error] [pid 9180:tid 9190] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:45.591499 2025] [proxy_fcgi:error] [pid 9180:tid 9198] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:45.840174 2025] [:error] [pid 9180:tid 9195] [client 104.209.220.233:3061] [client 104.209.220.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.209.220.233, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSCsFbrk9msixUFV2i-tsgAAAE0"], referer: https://www.google.de/
[Sat Nov 22 02:14:45.844475 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:46.083630 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:46.808139 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:47.062977 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:47.303143 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:47.513650 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:48.026013 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:48.234817 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:48.585015 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:49.336981 2025] [proxy_fcgi:error] [pid 9180:tid 9188] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:49.727724 2025] [proxy_fcgi:error] [pid 9180:tid 9206] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:50.017281 2025] [proxy_fcgi:error] [pid 9180:tid 9183] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:50.297577 2025] [proxy_fcgi:error] [pid 9180:tid 9202] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:50.526466 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:50.765491 2025] [proxy_fcgi:error] [pid 9180:tid 9198] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:50.981508 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:51.197154 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:51.406848 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:51.618942 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:51.833235 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:52.044838 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:52.255623 2025] [proxy_fcgi:error] [pid 9180:tid 9206] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:52.515654 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:52.793729 2025] [proxy_fcgi:error] [pid 9180:tid 9192] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:53.001914 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:53.210515 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:14:54.310457 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:54.621766 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:54.837809 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:55.099202 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:55.443091 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:14:56.486954 2025] [proxy_fcgi:error] [pid 9180:tid 9200] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:56.700888 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:57.223980 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:57.434800 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:14:57.660118 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:57.899471 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:14:58.110007 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:14:58.322034 2025] [proxy_fcgi:error] [pid 9180:tid 9186] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:14:59.722460 2025] [proxy_fcgi:error] [pid 9180:tid 9182] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:14:59.966902 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:15:01.169376 2025] [proxy_fcgi:error] [pid 9180:tid 9184] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Nov 22 02:15:01.391591 2025] [proxy_fcgi:error] [pid 9180:tid 9190] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:15:01.625291 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:15:01.841882 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 02:15:02.074715 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 22 02:15:02.294248 2025] [proxy_fcgi:error] [pid 9180:tid 9197] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:15:02.511468 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sat Nov 22 02:15:02.774815 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sat Nov 22 02:15:02.986210 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:15:03.208134 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 22 02:15:03.456500 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:15:03.666650 2025] [proxy_fcgi:error] [pid 9180:tid 9186] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sat Nov 22 02:15:03.875113 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 104.209.220.233:3061] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sat Nov 22 03:53:10.592923 2025] [:error] [pid 53566:tid 53587] [client 103.167.150.158:64466] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/system/js/core.js"] [unique_id "aSDDJsbSHDBkRbwMbd7w4wAAANM"]
[Sat Nov 22 04:06:37.798318 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:38.236667 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:38.545061 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:39.018221 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:39.369634 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:39.981485 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:40.369542 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:40.637488 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:40.937166 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:41.180365 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:41.561700 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 128.24.46.142:12699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:06:41.971532 2025] [:error] [pid 53477:tid 53484] [client 128.24.46.142:12699] [client 128.24.46.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSDGUX7Lu30Ku9O40aKm-QAAAAM"]
[Sat Nov 22 04:06:42.942005 2025] [:error] [pid 53478:tid 53512] [client 128.24.46.142:12646] [client 128.24.46.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSDGUghUYdXBbQswAdTY3wAAAEM"]
[Sat Nov 22 04:06:43.852982 2025] [:error] [pid 53479:tid 53541] [client 128.24.46.142:12713] [client 128.24.46.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSDGU26cicFF3Aas-oRAuQAAAIU"]
[Sat Nov 22 04:06:44.840083 2025] [:error] [pid 53478:tid 53528] [client 128.24.46.142:12689] [client 128.24.46.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSDGVAhUYdXBbQswAdTY4wAAAFM"]
[Sat Nov 22 04:36:29.733255 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 4.219.6.248:27987] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:36:30.010773 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 4.219.6.248:27987] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:36:30.278714 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 4.219.6.248:27987] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:36:31.268081 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 4.219.6.248:27987] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:36:31.532246 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 4.219.6.248:27987] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:36:31.847901 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 4.219.6.248:27987] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:36:32.217755 2025] [:error] [pid 53479:tid 53548] [client 4.219.6.248:27987] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSDNUG6cicFF3Aas-oROVgAAAIw"]
[Sat Nov 22 04:37:02.764602 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 4.219.6.248:6761] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:37:03.299361 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 4.219.6.248:6761] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:37:03.569748 2025] [:error] [pid 53566:tid 53576] [client 4.219.6.248:6761] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aSDNb8bSHDBkRbwMbd4JoAAAAMg"]
[Sat Nov 22 04:37:17.641133 2025] [:error] [pid 53477:tid 53489] [client 4.219.6.248:6764] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aSDNfX7Lu30Ku9O40aK0MwAAAAg"]
[Sat Nov 22 04:37:21.232739 2025] [:error] [pid 53477:tid 53482] [client 4.219.6.248:26101] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDNgX7Lu30Ku9O40aK0NQAAAAE"]
[Sat Nov 22 04:37:25.496017 2025] [:error] [pid 53477:tid 53494] [client 4.219.6.248:37553] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDNhX7Lu30Ku9O40aK0OwAAAA0"]
[Sat Nov 22 04:37:27.933762 2025] [:error] [pid 25856:tid 25863] [client 4.219.6.248:50108] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDNhxsTP0wy94zKUvF5IQAAAQU"]
[Sat Nov 22 04:37:29.495446 2025] [:error] [pid 53478:tid 53516] [client 4.219.6.248:41327] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDNiQhUYdXBbQswAdTnAgAAAEc"]
[Sat Nov 22 04:37:35.281543 2025] [:error] [pid 53478:tid 53522] [client 4.219.6.248:41334] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer.php"] [unique_id "aSDNjwhUYdXBbQswAdTnCAAAAE0"]
[Sat Nov 22 04:37:37.407354 2025] [:error] [pid 53478:tid 53531] [client 4.219.6.248:26088] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer.php"] [unique_id "aSDNkQhUYdXBbQswAdTnDAAAAFY"]
[Sat Nov 22 04:37:57.375178 2025] [:error] [pid 53477:tid 53481] [client 4.219.6.248:49856] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSDNpX7Lu30Ku9O40aK0UwAAAAA"]
[Sat Nov 22 04:38:00.461401 2025] [:error] [pid 53477:tid 53499] [client 4.219.6.248:26060] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSDNqH7Lu30Ku9O40aK0WgAAABI"]
[Sat Nov 22 04:38:06.721591 2025] [:error] [pid 53566:tid 53570] [client 4.219.6.248:28687] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSDNrsbSHDBkRbwMbd4J6AAAAMI"]
[Sat Nov 22 04:38:10.288737 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 4.219.6.248:26069] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:10.559696 2025] [:error] [pid 53566:tid 53585] [client 4.219.6.248:26069] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/0.php"] [unique_id "aSDNssbSHDBkRbwMbd4J8QAAANE"]
[Sat Nov 22 04:38:18.312764 2025] [:error] [pid 53479:tid 53536] [client 4.219.6.248:26070] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSDNum6cicFF3Aas-oRPPAAAAIA"]
[Sat Nov 22 04:38:23.198791 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 4.219.6.248:26108] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:24.622227 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 4.219.6.248:26108] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:25.334658 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 4.219.6.248:26108] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:26.440007 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 4.219.6.248:26108] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:26.747835 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 4.219.6.248:26108] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:27.020294 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 4.219.6.248:26108] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:38:27.284713 2025] [:error] [pid 53566:tid 53569] [client 4.219.6.248:26108] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/17.php"] [unique_id "aSDNw8bSHDBkRbwMbd4KDQAAAME"]
[Sat Nov 22 04:38:29.560881 2025] [:error] [pid 53479:tid 53554] [client 4.219.6.248:6365] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/17.php"] [unique_id "aSDNxW6cicFF3Aas-oRPSwAAAJI"]
[Sat Nov 22 04:38:32.375739 2025] [:error] [pid 53566:tid 53581] [client 4.219.6.248:38755] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/17.php"] [unique_id "aSDNyMbSHDBkRbwMbd4KEwAAAM0"]
[Sat Nov 22 04:38:36.060165 2025] [:error] [pid 53477:tid 53487] [client 4.219.6.248:50112] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/17.php"] [unique_id "aSDNzH7Lu30Ku9O40aK0jwAAAAY"]
[Sat Nov 22 04:40:33.248795 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:33.513992 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:34.158785 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:36.034910 2025] [proxy_fcgi:error] [pid 53478:tid 53511] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:36.576216 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:36.848613 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:37.398711 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 4.219.6.248:42590] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:40:37.956339 2025] [:error] [pid 53478:tid 53515] [client 4.219.6.248:42590] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3.php"] [unique_id "aSDORQhUYdXBbQswAdToKQAAAEY"]
[Sat Nov 22 04:40:41.190047 2025] [:error] [pid 53477:tid 53487] [client 4.219.6.248:26763] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3.php"] [unique_id "aSDOSX7Lu30Ku9O40aK1hQAAAAY"]
[Sat Nov 22 04:40:50.535128 2025] [:error] [pid 53478:tid 53513] [client 4.219.6.248:6535] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3.php"] [unique_id "aSDOUghUYdXBbQswAdToRQAAAEQ"]
[Sat Nov 22 04:41:00.145111 2025] [:error] [pid 53479:tid 53550] [client 4.219.6.248:7113] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSDOXG6cicFF3Aas-oRQogAAAI4"]
[Sat Nov 22 04:41:02.427407 2025] [:error] [pid 53479:tid 53555] [client 4.219.6.248:40697] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSDOXm6cicFF3Aas-oRQrAAAAJM"]
[Sat Nov 22 04:41:05.179523 2025] [:error] [pid 53478:tid 53523] [client 4.219.6.248:6561] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSDOYQhUYdXBbQswAdTocAAAAE4"]
[Sat Nov 22 04:41:06.570507 2025] [:error] [pid 53566:tid 53590] [client 4.219.6.248:7106] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSDOYsbSHDBkRbwMbd4LTQAAANY"]
[Sat Nov 22 04:41:13.651254 2025] [:error] [pid 53566:tid 53591] [client 4.219.6.248:7124] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sk.php"] [unique_id "aSDOacbSHDBkRbwMbd4LYwAAANc"]
[Sat Nov 22 04:41:19.660162 2025] [:error] [pid 25856:tid 25875] [client 4.219.6.248:25990] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sk.php"] [unique_id "aSDObxsTP0wy94zKUvF7XQAAARE"]
[Sat Nov 22 04:41:23.392031 2025] [:error] [pid 53478:tid 53517] [client 4.219.6.248:26779] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-crom.php"] [unique_id "aSDOcwhUYdXBbQswAdToiAAAAEg"]
[Sat Nov 22 04:41:25.403712 2025] [:error] [pid 25856:tid 25862] [client 4.219.6.248:6562] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-crom.php"] [unique_id "aSDOdRsTP0wy94zKUvF7bAAAAQQ"]
[Sat Nov 22 04:41:28.463395 2025] [:error] [pid 25856:tid 25869] [client 4.219.6.248:39343] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-crom.php"] [unique_id "aSDOeBsTP0wy94zKUvF7dAAAAQs"]
[Sat Nov 22 04:41:30.979712 2025] [:error] [pid 53477:tid 53482] [client 4.219.6.248:7064] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-crom.php"] [unique_id "aSDOen7Lu30Ku9O40aK1xQAAAAE"]
[Sat Nov 22 04:41:40.049439 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:40.587562 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:41.116622 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:41.390876 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:41.659197 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:41.925784 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:42.193995 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:42.459241 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:42.811492 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 4.219.6.248:6534] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:41:43.081108 2025] [:error] [pid 53477:tid 53494] [client 4.219.6.248:6534] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSDOh37Lu30Ku9O40aK18AAAAA0"]
[Sat Nov 22 04:41:45.536964 2025] [:error] [pid 25856:tid 25874] [client 4.219.6.248:6701] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSDOiRsTP0wy94zKUvF7mQAAARA"]
[Sat Nov 22 04:41:50.921566 2025] [:error] [pid 25856:tid 25880] [client 4.219.6.248:6699] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSDOjhsTP0wy94zKUvF7qAAAARY"]
[Sat Nov 22 04:42:29.785155 2025] [:error] [pid 53477:tid 53498] [client 4.219.6.248:28699] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ll.php"] [unique_id "aSDOtX7Lu30Ku9O40aK2SQAAABE"]
[Sat Nov 22 04:42:33.043838 2025] [:error] [pid 53566:tid 53589] [client 4.219.6.248:50063] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ll.php"] [unique_id "aSDOucbSHDBkRbwMbd4MCgAAANU"]
[Sat Nov 22 04:42:36.488647 2025] [:error] [pid 53479:tid 53536] [client 4.219.6.248:6835] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ll.php"] [unique_id "aSDOvG6cicFF3Aas-oRRlwAAAIA"]
[Sat Nov 22 04:42:40.749461 2025] [:error] [pid 53478:tid 53517] [client 4.219.6.248:36888] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ll.php"] [unique_id "aSDOwAhUYdXBbQswAdTpCwAAAEg"]
[Sat Nov 22 04:42:44.239396 2025] [:error] [pid 53477:tid 53490] [client 4.219.6.248:49917] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSDOxH7Lu30Ku9O40aK2aAAAAAk"]
[Sat Nov 22 04:42:47.917960 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 4.219.6.248:49864] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:48.463163 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 4.219.6.248:49864] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:48.743940 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 4.219.6.248:49864] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:49.014030 2025] [:error] [pid 53479:tid 53560] [client 4.219.6.248:49864] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDOyW6cicFF3Aas-oRRsgAAAJg"]
[Sat Nov 22 04:42:52.873945 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 4.219.6.248:26091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:53.144777 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 4.219.6.248:26091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:53.427565 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 4.219.6.248:26091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:54.159179 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 4.219.6.248:26091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:54.509682 2025] [:error] [pid 25856:tid 25860] [client 4.219.6.248:26091] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDOzhsTP0wy94zKUvF8WAAAAQI"]
[Sat Nov 22 04:42:56.964064 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 4.219.6.248:27456] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:57.240448 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 4.219.6.248:27456] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:42:57.504084 2025] [:error] [pid 53477:tid 53487] [client 4.219.6.248:27456] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSDO0X7Lu30Ku9O40aK2fwAAAAY"]
[Sat Nov 22 04:42:59.406807 2025] [:error] [pid 53566:tid 53578] [client 4.219.6.248:6345] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSDO08bSHDBkRbwMbd4MYgAAAMo"]
[Sat Nov 22 04:43:06.581732 2025] [:error] [pid 25856:tid 25869] [client 4.219.6.248:6349] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSDO2hsTP0wy94zKUvF8rAAAAQs"]
[Sat Nov 22 04:43:08.803045 2025] [:error] [pid 53477:tid 53494] [client 4.219.6.248:39372] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSDO3H7Lu30Ku9O40aK2nAAAAA0"]
[Sat Nov 22 04:43:12.048376 2025] [:error] [pid 53479:tid 53538] [client 4.219.6.248:39370] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usage-file.php"] [unique_id "aSDO4G6cicFF3Aas-oRR3QAAAII"]
[Sat Nov 22 04:43:14.588120 2025] [:error] [pid 25856:tid 25876] [client 4.219.6.248:26818] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usage-file.php"] [unique_id "aSDO4hsTP0wy94zKUvF84wAAARI"]
[Sat Nov 22 04:43:16.745587 2025] [:error] [pid 53477:tid 53502] [client 4.219.6.248:39406] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usage-file.php"] [unique_id "aSDO5H7Lu30Ku9O40aK2pQAAABU"]
[Sat Nov 22 04:43:20.048982 2025] [:error] [pid 53479:tid 53559] [client 4.219.6.248:26842] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usage-file.php"] [unique_id "aSDO6G6cicFF3Aas-oRR6gAAAJc"]
[Sat Nov 22 04:43:22.320968 2025] [:error] [pid 25856:tid 25860] [client 4.219.6.248:6986] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/assets/js/wp-config.php"] [unique_id "aSDO6hsTP0wy94zKUvF9HAAAAQI"]
[Sat Nov 22 04:43:23.982709 2025] [:error] [pid 53477:tid 53495] [client 4.219.6.248:26817] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Js.php"] [unique_id "aSDO637Lu30Ku9O40aK2sAAAAA4"]
[Sat Nov 22 04:43:28.400276 2025] [:error] [pid 53566:tid 53589] [client 4.219.6.248:7015] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Js.php"] [unique_id "aSDO8MbSHDBkRbwMbd4MxQAAANU"]
[Sat Nov 22 04:43:30.676371 2025] [:error] [pid 53566:tid 53591] [client 4.219.6.248:6980] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Js.php"] [unique_id "aSDO8sbSHDBkRbwMbd4MygAAANc"]
[Sat Nov 22 04:44:10.231995 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 4.219.6.248:6311] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:44:10.498968 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 4.219.6.248:6311] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:44:10.991644 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 4.219.6.248:6311] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:37:05.219433 2025] [:error] [pid 25856:tid 25881] [client 43.130.102.7:54662] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aSDbgRsTP0wy94zKUvGnugAAARc"]
[Sat Nov 22 06:56:16.363606 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:16.789008 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:17.213769 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:17.656611 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:18.081602 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:18.503022 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:18.925714 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:19.352612 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:19.779633 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:20.205739 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:21.076957 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:21.500601 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:21.933614 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:22.367626 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:22.794694 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:23.223612 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:23.657925 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:24.087613 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:24.515739 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 212.116.231.26:43832] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:56:30.438529 2025] [:error] [pid 53477:tid 53490] [client 212.116.231.26:43832] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDuHn7Lu30Ku9O40aIGNgAAAAk"]
[Sat Nov 22 06:56:32.494601 2025] [:error] [pid 53566:tid 53582] [client 212.116.231.26:58480] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDuIMbSHDBkRbwMbd5m5wAAAM4"]
[Sat Nov 22 06:56:33.328666 2025] [:error] [pid 9547:tid 9557] [client 212.116.231.26:58900] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aSDuIdClOR5qk7DoMeGk_wAAAUQ"]
[Sat Nov 22 06:56:34.154381 2025] [:error] [pid 9547:tid 9558] [client 212.116.231.26:59090] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aSDuItClOR5qk7DoMeGlAwAAAUU"]
[Sat Nov 22 06:56:34.970031 2025] [:error] [pid 9547:tid 9556] [client 212.116.231.26:59346] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aSDuItClOR5qk7DoMeGlCwAAAUM"]
[Sat Nov 22 06:56:35.782711 2025] [:error] [pid 53477:tid 53497] [client 212.116.231.26:59548] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aSDuI37Lu30Ku9O40aIGgAAAABA"]
[Sat Nov 22 06:56:37.021698 2025] [:error] [pid 25856:tid 25862] [client 212.116.231.26:59840] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJRsTP0wy94zKUvHmtgAAAQQ"]
[Sat Nov 22 06:56:37.836722 2025] [:error] [pid 53477:tid 53497] [client 212.116.231.26:60318] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJX7Lu30Ku9O40aIGjgAAABA"]
[Sat Nov 22 06:56:38.655275 2025] [:error] [pid 9547:tid 9565] [client 212.116.231.26:60760] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJtClOR5qk7DoMeGlMQAAAUw"]
[Sat Nov 22 06:56:39.468882 2025] [:error] [pid 53478:tid 53513] [client 212.116.231.26:47380] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJwhUYdXBbQswAdQ_vwAAAEQ"]
[Sat Nov 22 06:56:40.317285 2025] [:error] [pid 53478:tid 53529] [client 212.116.231.26:47790] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuKAhUYdXBbQswAdQ_ygAAAFQ"]
[Sat Nov 22 07:32:18.503699 2025] [:error] [pid 25856:tid 25878] [client 4.255.247.224:58108] [client 4.255.247.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSD2ghsTP0wy94zKUvHzigAAARQ"]
[Sat Nov 22 07:32:18.848267 2025] [:error] [pid 53478:tid 53530] [client 4.255.247.224:58136] [client 4.255.247.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSD2gghUYdXBbQswAdRJjgAAAFU"]
[Sat Nov 22 07:32:19.193149 2025] [:error] [pid 53566:tid 53573] [client 4.255.247.224:58172] [client 4.255.247.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSD2g8bSHDBkRbwMbd5yFwAAAMU"]
[Sat Nov 22 07:32:47.149254 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 31.171.130.91:37045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:48.111121 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 31.171.130.91:37045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:48.578866 2025] [:error] [pid 53478:tid 53519] [client 31.171.130.91:37045] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSD2oAhUYdXBbQswAdRJpgAAAEo"]
[Sat Nov 22 07:32:49.763601 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 31.171.130.99:39347] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:50.293817 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.99:39347] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSD2oghUYdXBbQswAdRJqwAAAFA"]
[Sat Nov 22 07:32:51.237056 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 31.171.130.88:35173] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:52.197604 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 31.171.130.88:35173] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:52.671879 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 31.171.130.88:35173] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:53.722612 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 31.171.130.88:35173] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:54.735108 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.88:35173] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSD2pm6cicFF3Aas-oSqoAAAAIA"]
[Sat Nov 22 07:32:55.821532 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 31.171.130.64:58343] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:56.311744 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 31.171.130.64:58343] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:32:57.730752 2025] [:error] [pid 53478:tid 53526] [client 31.171.130.64:58343] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSD2qQhUYdXBbQswAdRJtwAAAFE"]
[Sat Nov 22 07:32:58.717505 2025] [:error] [pid 53566:tid 53572] [client 31.171.130.97:53041] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSD2qsbSHDBkRbwMbd5yUwAAAMQ"]
[Sat Nov 22 07:32:59.673747 2025] [:error] [pid 9547:tid 9556] [client 31.171.130.77:35235] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSD2q9ClOR5qk7DoMeGzRgAAAUM"]
[Sat Nov 22 07:33:01.192501 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.72:55315] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSD2rRsTP0wy94zKUvHzpQAAARE"]
[Sat Nov 22 07:33:02.605675 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.72:24537] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSD2rtClOR5qk7DoMeGzSwAAAVc"]
[Sat Nov 22 07:33:05.614054 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 31.171.130.82:21777] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:07.022127 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 31.171.130.82:21777] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:07.488386 2025] [:error] [pid 25856:tid 25878] [client 31.171.130.82:21777] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSD2sxsTP0wy94zKUvHzrwAAARQ"]
[Sat Nov 22 07:33:08.427072 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.96:38417] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSD2tBsTP0wy94zKUvHzsAAAAQE"]
[Sat Nov 22 07:33:10.789897 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:11.287818 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:11.734601 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:12.188454 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:12.694231 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:13.274290 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:14.326200 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:14.808658 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:15.279608 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:15.716650 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:16.190725 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:16.689224 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:17.694466 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:18.129401 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:18.604971 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:19.130021 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:19.602359 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:20.191760 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:22.931760 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.67:22869] [client 31.171.130.67] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "194.5.82.130_6ff433984ead67b368dec33e0e3e699096ee01fa"): Internal error (specific information not available) [hostname "www.pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aSD2wH7Lu30Ku9O40aIQIwAAAAk"]
[Sat Nov 22 07:33:22.935258 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:23.390862 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:23.829670 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:24.290038 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:24.777355 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:25.334674 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:25.791003 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:26.281237 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:26.820729 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:28.218802 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:28.695398 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:29.180183 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:29.679613 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:30.148936 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:30.599491 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:31.035876 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.67:22869] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSD2y37Lu30Ku9O40aIQNQAAAAc"]
[Sat Nov 22 07:33:31.040108 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:31.925257 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:32.404877 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 31.171.130.67:22869] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:32.871435 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.67:22869] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aSD2zH7Lu30Ku9O40aIQOQAAAAE"]
[Sat Nov 22 07:33:37.351177 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:38.421461 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:39.329617 2025] [proxy_fcgi:error] [pid 53478:tid 53519] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:39.800794 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:40.288527 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:40.729294 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:41.199597 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:41.689043 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:42.172497 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 31.171.130.87:53061] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:43.581401 2025] [:error] [pid 53478:tid 53511] [client 31.171.130.87:53061] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSD21whUYdXBbQswAdRJ3QAAAEI"]
[Sat Nov 22 07:33:44.485828 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:44.980497 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:47.391083 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:47.878435 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:48.319637 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:48.808547 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:49.312507 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:50.802614 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:51.276865 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:52.683151 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:53.618746 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:54.111641 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:54.596612 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:55.109689 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:56.110920 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:56.700881 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:57.707948 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:58.180480 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:58.625051 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:59.107149 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:33:59.581020 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 31.171.130.105:35995] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:00.082571 2025] [:error] [pid 9547:tid 9565] [client 31.171.130.105:35995] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aSD26NClOR5qk7DoMeGzxQAAAUw"]
[Sat Nov 22 07:34:02.107392 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:02.599683 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:03.086005 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:04.324684 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:04.791482 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:05.285001 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:06.419309 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:06.898671 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:07.376311 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:07.829074 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:08.327437 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:08.820363 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:09.306732 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:09.775678 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:10.262676 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:10.728873 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:11.225454 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:11.709073 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:12.191912 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:12.694944 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:13.180179 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:13.684492 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:14.174303 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:15.107062 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:15.625495 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:16.077991 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:16.524505 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:17.010460 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:17.491132 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 31.171.130.74:39353] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:27.293625 2025] [:error] [pid 53566:tid 53586] [client 31.171.130.74:39353] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSD3A8bSHDBkRbwMbd5y9QAAANI"]
[Sat Nov 22 07:34:28.726059 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:34.301976 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:34.778946 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:35.220630 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:36.685112 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:40.004713 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:40.507856 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:40.977948 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:41.498588 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:41.991657 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:42.489645 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 31.171.130.74:38083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:44.089422 2025] [:error] [pid 53479:tid 53556] [client 31.171.130.74:38083] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSD3FG6cicFF3Aas-oSq-QAAAJQ"]
[Sat Nov 22 07:34:45.042938 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.59:30493] [client 31.171.130.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.59, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSD3FdClOR5qk7DoMeGz-wAAAUo"]
[Sat Nov 22 07:34:45.046772 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 31.171.130.59:30493] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:45.512085 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 31.171.130.59:30493] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:46.486907 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.59:30493] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSD3FtClOR5qk7DoMeGz_wAAAUg"]
[Sat Nov 22 07:34:47.910295 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.104:58053] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:50.296445 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 31.171.130.104:58053] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:51.677660 2025] [:error] [pid 9547:tid 9554] [client 31.171.130.104:58053] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSD3G9ClOR5qk7DoMeG0DAAAAUE"]
[Sat Nov 22 07:34:53.474173 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:53.998400 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:54.474700 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:57.073697 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:58.098153 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:58.582893 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:34:59.034116 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:00.985683 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.60:36169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:02.459602 2025] [:error] [pid 25856:tid 25880] [client 31.171.130.60:36169] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSD3JhsTP0wy94zKUvH0UgAAARY"]
[Sat Nov 22 07:35:03.521462 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.77:57089] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSD3JwhUYdXBbQswAdRKHgAAAE4"]
[Sat Nov 22 07:35:04.462951 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.82:58085] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSD3KNClOR5qk7DoMeG0FgAAAU8"]
[Sat Nov 22 07:35:06.765717 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.69:49259] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSD3KtClOR5qk7DoMeG0GQAAAUg"]
[Sat Nov 22 07:35:07.715931 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 31.171.130.63:61533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:08.201427 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 31.171.130.63:61533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:09.188113 2025] [:error] [pid 53477:tid 53496] [client 31.171.130.63:61533] [client 31.171.130.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.63, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSD3LX7Lu30Ku9O40aIQZAAAAA8"]
[Sat Nov 22 07:35:13.710129 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 31.171.130.63:61533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:14.636491 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 31.171.130.63:61533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:17.484083 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.63:61533] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSD3NX7Lu30Ku9O40aIQeAAAAAk"]
[Sat Nov 22 07:35:18.462649 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 31.171.130.67:21599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:19.823629 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.67:21599] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSD3N37Lu30Ku9O40aIQfAAAABQ"]
[Sat Nov 22 07:35:20.288205 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.67:21599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:21.234455 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 31.171.130.67:21599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:21.711023 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 31.171.130.67:21599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:22.673307 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 31.171.130.67:21599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:23.626999 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 31.171.130.67:21599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:24.130341 2025] [:error] [pid 53477:tid 53500] [client 31.171.130.67:21599] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSD3PH7Lu30Ku9O40aIQhAAAABM"]
[Sat Nov 22 07:35:26.110977 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.54:35235] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSD3Pm6cicFF3Aas-oSrDwAAAIA"]
[Sat Nov 22 07:35:27.067537 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:28.977169 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:30.129018 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:30.600455 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:31.626369 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:33.603513 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:38.484793 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:38.925318 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:39.401264 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 31.171.130.85:45697] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:40.374185 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.85:45697] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSD3TBsTP0wy94zKUvH0kwAAAQE"]
[Sat Nov 22 07:35:44.184306 2025] [:error] [pid 9547:tid 9566] [client 31.171.130.62:56079] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aSD3UNClOR5qk7DoMeG0QAAAAU0"]
[Sat Nov 22 07:35:45.224185 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 31.171.130.61:39511] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:45.702776 2025] [:error] [pid 53478:tid 53519] [client 31.171.130.61:39511] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSD3UQhUYdXBbQswAdRKKgAAAEo"]
[Sat Nov 22 07:35:47.685934 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 31.171.130.94:22773] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:48.592078 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 31.171.130.94:22773] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:49.069820 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.94:22773] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aSD3VW6cicFF3Aas-oSrHgAAAJY"]
[Sat Nov 22 07:35:50.015605 2025] [:error] [pid 25856:tid 25860] [client 31.171.130.80:46503] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSD3VhsTP0wy94zKUvH0mgAAAQI"]
[Sat Nov 22 07:35:50.946691 2025] [:error] [pid 53479:tid 53560] [client 31.171.130.82:35659] [client 31.171.130.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.82, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSD3Vm6cicFF3Aas-oSrHwAAAJg"]
[Sat Nov 22 07:35:51.400355 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 31.171.130.82:35659] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:52.328612 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.82:35659] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aSD3WG6cicFF3Aas-oSrJAAAAIo"]
[Sat Nov 22 07:35:53.341892 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 31.171.130.85:32051] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:54.311006 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 31.171.130.85:32051] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:56.910802 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.85:32051] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSD3XG6cicFF3Aas-oSrLgAAAJY"]
[Sat Nov 22 07:35:57.856702 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 31.171.130.72:38511] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:35:58.784786 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.72:38511] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSD3Xn7Lu30Ku9O40aIQmQAAAAE"]
[Sat Nov 22 07:36:00.217646 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 31.171.130.99:29929] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:00.692191 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.99:29929] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSD3YH7Lu30Ku9O40aIQnQAAAA4"]
[Sat Nov 22 07:36:03.342144 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 31.171.130.77:23077] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:03.870972 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.77:23077] [client 31.171.130.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.77, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSD3Y26cicFF3Aas-oSrNAAAAI0"]
[Sat Nov 22 07:36:06.001382 2025] [:error] [pid 53479:tid 53555] [client 31.171.130.77:23077] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSD3Zm6cicFF3Aas-oSrNwAAAJM"]
[Sat Nov 22 07:36:07.960351 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.91:48167] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSD3Z37Lu30Ku9O40aIQogAAABI"]
[Sat Nov 22 07:36:14.594352 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.104:41623] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:15.076083 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 31.171.130.104:41623] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:16.793854 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.104:41623] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:18.701514 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.104:41623] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:19.196222 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 31.171.130.104:41623] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:20.171693 2025] [:error] [pid 9547:tid 9571] [client 31.171.130.104:41623] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSD3dNClOR5qk7DoMeG0ZAAAAVI"]
[Sat Nov 22 07:36:23.103522 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.90:59153] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSD3d26cicFF3Aas-oSrQAAAAIE"]
[Sat Nov 22 07:36:25.114046 2025] [:error] [pid 9547:tid 9558] [client 31.171.130.92:20055] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSD3edClOR5qk7DoMeG0ZQAAAUU"]
[Sat Nov 22 07:36:26.038727 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.59:39365] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSD3ehsTP0wy94zKUvH0tgAAAQQ"]
[Sat Nov 22 07:36:28.158878 2025] [:error] [pid 25856:tid 25869] [client 31.171.130.65:63625] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSD3fBsTP0wy94zKUvH0ugAAAQs"]
[Sat Nov 22 07:36:30.917290 2025] [autoindex:error] [pid 9547:tid 9561] [client 31.171.130.73:33993] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:36:33.181529 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 31.171.130.73:33993] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:33.670787 2025] [:error] [pid 9547:tid 9570] [client 31.171.130.73:33993] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSD3gdClOR5qk7DoMeG0cAAAAVE"]
[Sat Nov 22 07:36:36.208036 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 31.171.130.63:38739] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:36.694470 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 31.171.130.63:38739] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:37.181950 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.63:38739] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSD3hRsTP0wy94zKUvH0wgAAAQU"]
[Sat Nov 22 07:36:38.062390 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 31.171.130.74:23899] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:39.808984 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 31.171.130.74:23899] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:40.295578 2025] [:error] [pid 25856:tid 25872] [client 31.171.130.74:23899] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSD3iBsTP0wy94zKUvH0xQAAAQ4"]
[Sat Nov 22 07:36:41.219352 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.82:58725] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:41.682274 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.82:58725] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSD3iX7Lu30Ku9O40aIQuwAAABA"]
[Sat Nov 22 07:36:44.172176 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.89:25687] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSD3jNClOR5qk7DoMeG0fgAAAU8"]
[Sat Nov 22 07:36:45.156022 2025] [:error] [pid 9547:tid 9569] [client 31.171.130.95:34333] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSD3jdClOR5qk7DoMeG0gAAAAVA"]
[Sat Nov 22 07:36:46.598069 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.65:64817] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSD3jm6cicFF3Aas-oSrSwAAAIE"]
[Sat Nov 22 07:36:47.533984 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 31.171.130.76:32261] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:48.419810 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 31.171.130.76:32261] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:48.897828 2025] [:error] [pid 25856:tid 25865] [client 31.171.130.76:32261] [client 31.171.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.76, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSD3kBsTP0wy94zKUvH0zgAAAQc"]
[Sat Nov 22 07:36:49.808189 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.76:32261] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSD3kRsTP0wy94zKUvH00QAAAQY"]
[Sat Nov 22 07:36:50.770896 2025] [:error] [pid 25856:tid 25868] [client 31.171.130.101:57815] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSD3khsTP0wy94zKUvH01AAAAQo"]
[Sat Nov 22 07:36:51.738297 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 31.171.130.76:36897] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:52.218970 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 31.171.130.76:36897] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:54.703239 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.76:36897] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:36:56.171050 2025] [:error] [pid 25856:tid 25860] [client 31.171.130.76:36897] [client 31.171.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.76, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSD3mBsTP0wy94zKUvH04AAAAQI"]
[Sat Nov 22 07:36:57.166689 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.76:36897] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSD3mRsTP0wy94zKUvH04QAAAQQ"]
[Sat Nov 22 07:36:59.559782 2025] [:error] [pid 25856:tid 25881] [client 31.171.130.62:45255] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aSD3mxsTP0wy94zKUvH04gAAARc"]
[Sat Nov 22 07:37:00.540979 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.95:43407] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSD3nNClOR5qk7DoMeG0jwAAAUA"]
[Sat Nov 22 07:37:02.982695 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 31.171.130.88:33795] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:03.425263 2025] [:error] [pid 9547:tid 9558] [client 31.171.130.88:33795] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSD3n9ClOR5qk7DoMeG0mgAAAUU"]
[Sat Nov 22 07:37:04.365714 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 31.171.130.93:60373] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:04.821155 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 31.171.130.93:60373] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:07.121654 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 31.171.130.93:60373] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:08.594945 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 31.171.130.93:60373] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:09.098133 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.93:60373] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSD3pRsTP0wy94zKUvH08AAAAQ0"]
[Sat Nov 22 07:37:10.513397 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 31.171.130.90:37691] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:11.476543 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.90:37691] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSD3pwhUYdXBbQswAdRKSwAAAEQ"]
[Sat Nov 22 07:37:14.194503 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 31.171.130.53:60541] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:16.190508 2025] [:error] [pid 53566:tid 53587] [client 31.171.130.53:60541] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSD3rMbSHDBkRbwMbd5zvAAAANM"]
[Sat Nov 22 07:37:17.589692 2025] [:error] [pid 53566:tid 53580] [client 31.171.130.78:24923] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSD3rcbSHDBkRbwMbd5zvgAAAMw"]
[Sat Nov 22 07:37:19.004792 2025] [:error] [pid 53566:tid 53576] [client 31.171.130.80:22871] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSD3r8bSHDBkRbwMbd5zwQAAAMg"]
[Sat Nov 22 07:37:21.101449 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.69:51067] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSD3sX7Lu30Ku9O40aIQxgAAAAc"]
[Sat Nov 22 07:37:22.482995 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.71:64319] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSD3ssbSHDBkRbwMbd5zwwAAAM0"]
[Sat Nov 22 07:37:26.410880 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.62:38373] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSD3tn7Lu30Ku9O40aIQygAAAAg"]
[Sat Nov 22 07:37:27.810083 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 31.171.130.75:43845] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:28.971350 2025] [:error] [pid 53566:tid 53586] [client 31.171.130.75:43845] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSD3uMbSHDBkRbwMbd5zyQAAANI"]
[Sat Nov 22 07:37:32.050347 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 31.171.130.54:58961] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:32.492131 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 31.171.130.54:58961] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:32.975662 2025] [proxy_fcgi:error] [pid 53566:tid 53582] [client 31.171.130.54:58961] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:33.416934 2025] [:error] [pid 53566:tid 53585] [client 31.171.130.54:58961] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSD3vcbSHDBkRbwMbd5z0AAAANE"]
[Sat Nov 22 07:37:35.407904 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.70:35399] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSD3v8bSHDBkRbwMbd5z1AAAAM0"]
[Sat Nov 22 07:37:37.361788 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 31.171.130.101:35393] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:38.888953 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 31.171.130.101:35393] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:39.326495 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 31.171.130.101:35393] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:40.299258 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 31.171.130.101:35393] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:40.796605 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.101:35393] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSD3xG6cicFF3Aas-oSrXQAAAIo"]
[Sat Nov 22 07:37:42.989817 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.92:25211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:44.380207 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 31.171.130.92:25211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:44.829475 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.92:25211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:46.278595 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 31.171.130.92:25211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:46.730319 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 31.171.130.92:25211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:48.687735 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 31.171.130.92:25211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:49.189481 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.92:25211] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSD3zX7Lu30Ku9O40aIQ9gAAAAs"]
[Sat Nov 22 07:37:50.163036 2025] [:error] [pid 53477:tid 53491] [client 31.171.130.81:57489] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSD3zn7Lu30Ku9O40aIQ-gAAAAo"]
[Sat Nov 22 07:37:52.117782 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 31.171.130.75:43149] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:52.580367 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 31.171.130.75:43149] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:53.094021 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 31.171.130.75:43149] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:53.577130 2025] [:error] [pid 53566:tid 53582] [client 31.171.130.75:43149] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSD30cbSHDBkRbwMbd5z3wAAAM4"]
[Sat Nov 22 07:37:55.639325 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.82:52059] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSD30xsTP0wy94zKUvH1CAAAAQ0"]
[Sat Nov 22 07:37:57.572007 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 31.171.130.67:44717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:37:58.888138 2025] [:error] [pid 9547:tid 9570] [client 31.171.130.67:44717] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSD31tClOR5qk7DoMeG0xwAAAVE"]
[Sat Nov 22 07:37:59.848607 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 31.171.130.55:30367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:00.390804 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 31.171.130.55:30367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:01.030453 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 31.171.130.55:30367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:02.282537 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 31.171.130.55:30367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:02.770842 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 31.171.130.55:30367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:03.222914 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.55:30367] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSD3226cicFF3Aas-oSrawAAAJE"]
[Sat Nov 22 07:38:05.285814 2025] [:error] [pid 9547:tid 9566] [client 31.171.130.65:27045] [client 31.171.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.65, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSD33dClOR5qk7DoMeG0zgAAAU0"]
[Sat Nov 22 07:38:05.742818 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.65:27045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:06.192854 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.65:27045] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSD33tClOR5qk7DoMeG00AAAAU8"]
[Sat Nov 22 07:38:07.155723 2025] [:error] [pid 9547:tid 9569] [client 31.171.130.78:32945] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSD339ClOR5qk7DoMeG00QAAAVA"]
[Sat Nov 22 07:38:09.129286 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 31.171.130.77:21431] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:09.588765 2025] [proxy_fcgi:error] [pid 53566:tid 53582] [client 31.171.130.77:21431] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:10.084845 2025] [:error] [pid 53566:tid 53587] [client 31.171.130.77:21431] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSD34sbSHDBkRbwMbd5z6gAAANM"]
[Sat Nov 22 07:38:11.649299 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.97:50859] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:12.102912 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.97:50859] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSD35H7Lu30Ku9O40aIREAAAABQ"]
[Sat Nov 22 07:38:13.582371 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:14.083573 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:15.226346 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:15.701328 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:16.176247 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:17.582369 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:18.075771 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 31.171.130.105:50423] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:19.501268 2025] [:error] [pid 9547:tid 9558] [client 31.171.130.105:50423] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSD369ClOR5qk7DoMeG03QAAAUU"]
[Sat Nov 22 07:38:20.444578 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 31.171.130.103:63383] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:21.624152 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 31.171.130.103:63383] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:22.103683 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.103:63383] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSD37ghUYdXBbQswAdRKXQAAAFU"]
[Sat Nov 22 07:38:23.049053 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 31.171.130.59:52585] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:24.200107 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 31.171.130.59:52585] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:24.707965 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 31.171.130.59:52585] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:25.180346 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.59:52585] [client 31.171.130.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.59, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSD38RsTP0wy94zKUvH1JwAAARE"]
[Sat Nov 22 07:38:25.185253 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 31.171.130.59:52585] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:27.286483 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 31.171.130.59:52585] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:27.721846 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 31.171.130.59:52585] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:28.618977 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.59:52585] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aSD39BsTP0wy94zKUvH1SgAAAQA"]
[Sat Nov 22 07:38:30.454175 2025] [:error] [pid 25856:tid 25878] [client 31.171.130.91:39969] [client 31.171.130.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.91, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSD39hsTP0wy94zKUvH1UAAAARQ"]
[Sat Nov 22 07:38:30.935724 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.91:39969] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSD39hsTP0wy94zKUvH1UwAAARg"]
[Sat Nov 22 07:38:32.912046 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 31.171.130.56:64555] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:33.386828 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 31.171.130.56:64555] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:34.393353 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 31.171.130.56:64555] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:34.900682 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 31.171.130.56:64555] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:35.414109 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 31.171.130.56:64555] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:36.365598 2025] [:error] [pid 53566:tid 53580] [client 31.171.130.56:64555] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSD3_MbSHDBkRbwMbd50HQAAAMw"]
[Sat Nov 22 07:38:38.412026 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 31.171.130.89:28033] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:39.323476 2025] [:error] [pid 9547:tid 9557] [client 31.171.130.89:28033] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSD3_9ClOR5qk7DoMeG1CAAAAUQ"]
[Sat Nov 22 07:38:40.258224 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:40.715459 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.67:29937] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSD4AH7Lu30Ku9O40aIRPQAAAAs"]
[Sat Nov 22 07:38:41.219195 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:42.194374 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:42.638931 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:43.103703 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:43.594521 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:44.077660 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.67:29937] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:44.523734 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.67:29937] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSD4BH7Lu30Ku9O40aIRSQAAABc"]
[Sat Nov 22 07:38:46.996840 2025] [:error] [pid 9547:tid 9571] [client 31.171.130.97:21367] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/packed.php"] [unique_id "aSD4BtClOR5qk7DoMeG1EwAAAVI"]
[Sat Nov 22 07:38:47.955765 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:48.606710 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:49.095992 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:50.037293 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:50.504066 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:51.030868 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:51.505803 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 31.171.130.60:33121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:51.977604 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.60:33121] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aSD4CxsTP0wy94zKUvH1bwAAAQA"]
[Sat Nov 22 07:38:53.399377 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.82:34609] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSD4DRsTP0wy94zKUvH1dQAAAQY"]
[Sat Nov 22 07:38:54.917926 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.104:37917] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSD4Dm6cicFF3Aas-oSrnwAAAIY"]
[Sat Nov 22 07:38:55.853157 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 31.171.130.53:41955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:57.279882 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 31.171.130.53:41955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:38:57.769075 2025] [:error] [pid 25856:tid 25868] [client 31.171.130.53:41955] [client 31.171.130.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.53, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSD4ERsTP0wy94zKUvH1fgAAAQo"]
[Sat Nov 22 07:38:58.809681 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.53:41955] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSD4EhsTP0wy94zKUvH1fwAAAQY"]
[Sat Nov 22 07:39:04.112222 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 31.171.130.77:45935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:04.606067 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 31.171.130.77:45935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:05.601705 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.77:45935] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSD4GdClOR5qk7DoMeG1NwAAAU8"]
[Sat Nov 22 07:39:06.568840 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.64:43103] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSD4GtClOR5qk7DoMeG1OgAAAU4"]
[Sat Nov 22 07:39:08.823905 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 31.171.130.102:59117] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:09.306045 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 31.171.130.102:59117] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:10.374381 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 31.171.130.102:59117] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:11.486336 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 31.171.130.102:59117] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:12.926767 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 31.171.130.102:59117] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:13.389273 2025] [:error] [pid 53566:tid 53576] [client 31.171.130.102:59117] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aSD4IcbSHDBkRbwMbd50MgAAAMg"]
[Sat Nov 22 07:39:14.351860 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 31.171.130.74:61581] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:14.824868 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 31.171.130.74:61581] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:15.730639 2025] [:error] [pid 9547:tid 9566] [client 31.171.130.74:61581] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aSD4I9ClOR5qk7DoMeG1TAAAAU0"]
[Sat Nov 22 07:39:19.371648 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.55:30035] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:20.997728 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 31.171.130.55:30035] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:22.773503 2025] [:error] [pid 53477:tid 53496] [client 31.171.130.55:30035] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSD4Kn7Lu30Ku9O40aIRawAAAA8"]
[Sat Nov 22 07:39:24.794966 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 31.171.130.82:37765] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:26.396751 2025] [:error] [pid 53566:tid 53580] [client 31.171.130.82:37765] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSD4LsbSHDBkRbwMbd50OwAAAMw"]
[Sat Nov 22 07:39:27.350180 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:27.826321 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:28.788000 2025] [proxy_fcgi:error] [pid 53478:tid 53525] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:30.297515 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:30.873218 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:31.382242 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:31.827314 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 31.171.130.64:55267] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:32.283952 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.64:55267] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSD4NAhUYdXBbQswAdRKyQAAAFc"]
[Sat Nov 22 07:39:33.234706 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 31.171.130.90:51303] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:34.024060 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 31.171.130.90:51303] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:35.413253 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 31.171.130.90:51303] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:35.889805 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.90:51303] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSD4NxsTP0wy94zKUvH1mQAAAQA"]
[Sat Nov 22 07:39:36.846861 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 31.171.130.88:40907] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:37.320984 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 31.171.130.88:40907] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:38.246164 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 31.171.130.88:40907] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:39.281697 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 31.171.130.88:40907] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:41.013424 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.88:40907] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/item.php"] [unique_id "aSD4PRsTP0wy94zKUvH1pwAAAQU"]
[Sat Nov 22 07:39:43.892589 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 31.171.130.54:44545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:44.875905 2025] [:error] [pid 53566:tid 53569] [client 31.171.130.54:44545] [client 31.171.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSD4QMbSHDBkRbwMbd50VAAAAME"]
[Sat Nov 22 07:39:44.880420 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 31.171.130.54:44545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:45.399260 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.54:44545] [client 31.171.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSD4QcbSHDBkRbwMbd50VgAAAMk"]
[Sat Nov 22 07:39:45.901979 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.54:44545] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mani.php"] [unique_id "aSD4QcbSHDBkRbwMbd50WAAAANQ"]
[Sat Nov 22 07:39:46.839817 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 31.171.130.75:60781] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:47.585211 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 31.171.130.75:60781] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:49.005751 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 31.171.130.75:60781] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:50.966210 2025] [:error] [pid 53479:tid 53548] [client 31.171.130.75:60781] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aSD4Rm6cicFF3Aas-oSr0gAAAIw"]
[Sat Nov 22 07:39:53.871932 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 31.171.130.83:65477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:54.371509 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 31.171.130.83:65477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:54.814227 2025] [:error] [pid 53479:tid 53544] [client 31.171.130.83:65477] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSD4Sm6cicFF3Aas-oSr1wAAAIg"]
[Sat Nov 22 07:39:57.179978 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 31.171.130.97:52831] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:57.636471 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 31.171.130.97:52831] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:59.022090 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 31.171.130.97:52831] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:39:59.973375 2025] [:error] [pid 53478:tid 53509] [client 31.171.130.97:52831] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSD4TwhUYdXBbQswAdRK9QAAAEA"]
[Sat Nov 22 07:40:01.866949 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.62:45519] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSD4UX7Lu30Ku9O40aIRgwAAAA4"]
[Sat Nov 22 07:40:03.297330 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 31.171.130.53:55083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:05.404355 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.53:55083] [client 31.171.130.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.53, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/wp-login.php"] [unique_id "aSD4VQhUYdXBbQswAdRLGwAAAEk"]
[Sat Nov 22 07:40:05.904133 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 31.171.130.53:55083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:06.883464 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 31.171.130.53:55083] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:07.371784 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.53:55083] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSD4VwhUYdXBbQswAdRLJgAAAE8"]
[Sat Nov 22 07:40:09.406611 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 31.171.130.93:38579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:09.886319 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.93:38579] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSD4WRsTP0wy94zKUvH2DAAAAQ0"]
[Sat Nov 22 07:40:10.842193 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.83:23295] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSD4WsbSHDBkRbwMbd50YwAAANQ"]
[Sat Nov 22 07:40:12.274810 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.54:65483] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSD4XG6cicFF3Aas-oSr9QAAAIY"]
[Sat Nov 22 07:40:16.808730 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 31.171.130.94:62649] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:17.784076 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.94:62649] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSD4YdClOR5qk7DoMeG12QAAAUA"]
[Sat Nov 22 07:40:18.718220 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:19.177295 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:19.623813 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:21.127102 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:21.606014 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:23.207296 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:23.678983 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:26.295090 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:27.293604 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 31.171.130.82:32909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:32.701595 2025] [:error] [pid 9547:tid 9574] [client 31.171.130.82:32909] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aSD4cNClOR5qk7DoMeG16wAAAVU"]
[Sat Nov 22 07:40:34.119419 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 31.171.130.86:52169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:34.580833 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 31.171.130.86:52169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:35.088401 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 31.171.130.86:52169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:35.518311 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 31.171.130.86:52169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:36.498054 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 31.171.130.86:52169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:37.019332 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.86:52169] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:38.085601 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.86:52169] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSD4dn7Lu30Ku9O40aIRnAAAAAI"]
[Sat Nov 22 07:40:42.177672 2025] [:error] [pid 53478:tid 53515] [client 31.171.130.79:23765] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSD4eghUYdXBbQswAdRLOgAAAEY"]
[Sat Nov 22 07:40:44.797238 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.53:31817] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSD4fMbSHDBkRbwMbd50cwAAAMA"]
[Sat Nov 22 07:40:45.762167 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.66:42579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:46.216610 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.66:42579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:46.700565 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 31.171.130.66:42579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:47.644492 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 31.171.130.66:42579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:48.136119 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 31.171.130.66:42579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:49.181256 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.66:42579] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:50.209096 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.66:42579] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSD4gtClOR5qk7DoMeG2RgAAAUo"]
[Sat Nov 22 07:40:51.137437 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.80:41409] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSD4gwhUYdXBbQswAdRLPwAAAEc"]
[Sat Nov 22 07:40:54.090276 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.96:45745] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSD4htClOR5qk7DoMeG2SwAAAUA"]
[Sat Nov 22 07:40:55.502504 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:55.989828 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:56.478541 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:57.517454 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:57.994467 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:58.473120 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:40:58.973452 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:00.424645 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:00.940915 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:01.942599 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:02.504170 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:03.497503 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:04.080812 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:04.575891 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:05.026303 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:05.486635 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:05.922611 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:06.400742 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:06.877823 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:07.327758 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:07.797522 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:08.279908 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:08.775488 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:09.280760 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:09.812896 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:10.288063 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:10.784985 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:11.287200 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:11.806002 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.92:34397] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:12.418643 2025] [:error] [pid 9547:tid 9555] [client 31.171.130.92:34397] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSD4mNClOR5qk7DoMeG2kgAAAUI"]
[Sat Nov 22 07:41:13.572477 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:14.019044 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:14.488904 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:14.975806 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:15.423703 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:15.913359 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:16.388588 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:16.817877 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:17.278960 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:17.779963 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 31.171.130.76:62717] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:18.299502 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.76:62717] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSD4nhsTP0wy94zKUvH2dgAAAQM"]
[Sat Nov 22 07:41:21.324705 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 31.171.130.85:46863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:26.317512 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.85:46863] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aSD4psbSHDBkRbwMbd50lwAAAMk"]
[Sat Nov 22 07:41:27.331962 2025] [:error] [pid 53566:tid 53569] [client 31.171.130.67:42021] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSD4p8bSHDBkRbwMbd50mAAAAME"]
[Sat Nov 22 07:41:29.246244 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.99:35381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:31.140237 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.99:35381] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aSD4q9ClOR5qk7DoMeG2owAAAUA"]
[Sat Nov 22 07:41:32.585893 2025] [:error] [pid 9547:tid 9574] [client 31.171.130.57:56695] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/repeater.php"] [unique_id "aSD4rNClOR5qk7DoMeG2pwAAAVU"]
[Sat Nov 22 07:41:35.095645 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 31.171.130.62:34399] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:35.599606 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 31.171.130.62:34399] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:36.576681 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 31.171.130.62:34399] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:40.824966 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.62:34399] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSD4tNClOR5qk7DoMeG2uwAAAVc"]
[Sat Nov 22 07:41:41.817840 2025] [:error] [pid 53478:tid 53527] [client 31.171.130.101:45769] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSD4tQhUYdXBbQswAdRLVgAAAFI"]
[Sat Nov 22 07:41:43.198044 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.86:54057] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/options.php"] [unique_id "aSD4t26cicFF3Aas-oSsTgAAAIE"]
[Sat Nov 22 07:41:44.149192 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 31.171.130.100:46369] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:45.087176 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.100:46369] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSD4udClOR5qk7DoMeG2wQAAAUA"]
[Sat Nov 22 07:41:46.013244 2025] [:error] [pid 9547:tid 9569] [client 31.171.130.72:37569] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSD4utClOR5qk7DoMeG2wgAAAVA"]
[Sat Nov 22 07:41:47.407633 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 31.171.130.84:60429] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:47.909385 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.84:60429] [client 31.171.130.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.84, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/images/wp-login.php"] [unique_id "aSD4u37Lu30Ku9O40aIR-gAAABE"]
[Sat Nov 22 07:41:48.409575 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 31.171.130.84:60429] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:49.916366 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.84:60429] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSD4vX7Lu30Ku9O40aISAgAAAAE"]
[Sat Nov 22 07:41:50.848924 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 31.171.130.55:60221] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:52.779038 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.55:60221] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSD4wNClOR5qk7DoMeG2zAAAAVc"]
[Sat Nov 22 07:41:53.660084 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.73:30033] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSD4wX7Lu30Ku9O40aISEAAAABI"]
[Sat Nov 22 07:41:54.612039 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 31.171.130.66:31699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:55.123976 2025] [:error] [pid 53566:tid 53592] [client 31.171.130.66:31699] [client 31.171.130.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.66, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSD4w8bSHDBkRbwMbd50qwAAANg"]
[Sat Nov 22 07:41:55.637897 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 31.171.130.66:31699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:56.112604 2025] [:error] [pid 53566:tid 53578] [client 31.171.130.66:31699] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSD4xMbSHDBkRbwMbd50rgAAAMo"]
[Sat Nov 22 07:41:57.066131 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 31.171.130.82:56513] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:41:58.986618 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 31.171.130.82:56513] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:00.392269 2025] [:error] [pid 53478:tid 53519] [client 31.171.130.82:56513] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSD4yAhUYdXBbQswAdRLYwAAAEo"]
[Sat Nov 22 07:42:02.369522 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:04.876048 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:05.323831 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:05.807791 2025] [proxy_fcgi:error] [pid 25856:tid 25882] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:06.301943 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:06.790767 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:07.294466 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:07.774266 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:08.304216 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:08.801310 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:09.301134 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:09.786441 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:10.294877 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:10.728275 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:11.180890 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:12.124061 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:12.594970 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:13.089292 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:13.535411 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:13.993993 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:14.482909 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:14.972938 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:17.747266 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:18.221960 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:18.689424 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:19.174408 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:20.091594 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:20.580638 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:21.070356 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:22.002975 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:22.508801 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:23.075621 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:24.027842 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:24.528351 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:26.016426 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:26.976334 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:28.884022 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:29.369134 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.69:59863] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSD45RsTP0wy94zKUvH21gAAAQ0"]
[Sat Nov 22 07:42:29.886874 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:31.378357 2025] [:error] [pid 25856:tid 25877] [client 31.171.130.69:59863] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.tmb/wp-login.php"] [unique_id "aSD45xsTP0wy94zKUvH23AAAARM"]
[Sat Nov 22 07:42:32.929692 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 31.171.130.69:59863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:33.422833 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.69:59863] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSD46RsTP0wy94zKUvH25AAAAQg"]
[Sat Nov 22 07:42:34.428007 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.77:34179] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSD46tClOR5qk7DoMeG3CgAAAVc"]
[Sat Nov 22 07:42:36.406981 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.68:53645] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aSD47G6cicFF3Aas-oSsmAAAAIY"]
[Sat Nov 22 07:42:37.339761 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 31.171.130.105:38833] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:41.887112 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.105:38833] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:42.322454 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 31.171.130.105:38833] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:44.210658 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.105:38833] [client 31.171.130.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.105, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSD49NClOR5qk7DoMeG3LAAAAUo"]
[Sat Nov 22 07:42:44.681079 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.105:38833] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSD49NClOR5qk7DoMeG3LQAAAU4"]
[Sat Nov 22 07:42:47.098211 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:47.582822 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.69:32655] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSD49whUYdXBbQswAdRL2wAAAEc"]
[Sat Nov 22 07:42:48.607376 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:50.077262 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:51.125530 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:51.597788 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:52.094608 2025] [proxy_fcgi:error] [pid 53478:tid 53525] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:52.579999 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:54.098800 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:54.573860 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:55.589669 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 31.171.130.69:32655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:57.469884 2025] [:error] [pid 53478:tid 53522] [client 31.171.130.69:32655] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSD5AQhUYdXBbQswAdRL-QAAAE0"]
[Sat Nov 22 07:42:59.521198 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:42:59.989126 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:00.479468 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:00.971404 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:02.107729 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:02.572795 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:05.155605 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:05.617681 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:06.085258 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:06.601185 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.103:47797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:07.071987 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.103:47797] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSD5CxsTP0wy94zKUvH3FQAAARE"]
[Sat Nov 22 07:43:09.025218 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:10.508699 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:10.979512 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:12.426723 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:13.015411 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:13.491036 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:14.589527 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:16.077261 2025] [:error] [pid 9547:tid 9560] [client 31.171.130.94:53539] [client 31.171.130.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.94, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSD5FNClOR5qk7DoMeG3wQAAAUc"]
[Sat Nov 22 07:43:16.580878 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:17.518568 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:17.991236 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:18.983929 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:19.507237 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:20.424759 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:20.911863 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 31.171.130.94:53539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:43:21.890997 2025] [autoindex:error] [pid 9547:tid 9560] [client 31.171.130.94:53539] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:43:22.380061 2025] [autoindex:error] [pid 9547:tid 9554] [client 31.171.130.94:53539] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:43:22.886797 2025] [autoindex:error] [pid 9547:tid 9572] [client 31.171.130.94:53539] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:43:43.991324 2025] [autoindex:error] [pid 9547:tid 9553] [client 31.171.130.94:53539] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:44:56.628837 2025] [autoindex:error] [pid 53477:tid 53494] [client 31.171.130.85:65397] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:46:44.202127 2025] [autoindex:error] [pid 53479:tid 53554] [client 31.171.130.71:60953] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 09:14:26.069473 2025] [autoindex:error] [pid 53478:tid 53517] [client 139.59.37.180:59594] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 17:52:02.686125 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 212.30.36.196:34567] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:07.604302 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 212.30.36.196:34567] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:14.831322 2025] [:error] [pid 25856:tid 25864] [client 212.30.36.209:22953] [client 212.30.36.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSGHzhsTP0wy94zKUvGoqAAAAQY"]
[Sat Nov 22 17:52:16.397291 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 212.30.36.200:50273] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:16.813217 2025] [:error] [pid 9547:tid 9559] [client 212.30.36.200:50273] [client 212.30.36.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSGH0NClOR5qk7DoMeGdigAAAUY"]
[Sat Nov 22 17:52:20.642808 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.175:40055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:21.621889 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 212.30.36.175:40055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:22.297621 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 212.30.36.175:40055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:22.700277 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.175:40055] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:25.118064 2025] [:error] [pid 25856:tid 25864] [client 212.30.36.175:40055] [client 212.30.36.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSGH2RsTP0wy94zKUvGotQAAAQY"]
[Sat Nov 22 17:52:26.407521 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 212.30.36.198:54711] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:27.016241 2025] [proxy_fcgi:error] [pid 53478:tid 53525] [client 212.30.36.198:54711] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:27.795715 2025] [:error] [pid 53478:tid 53530] [client 212.30.36.198:54711] [client 212.30.36.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSGH2whUYdXBbQswAdToUwAAAFU"]
[Sat Nov 22 17:52:31.552253 2025] [:error] [pid 53477:tid 53504] [client 212.30.36.219:56921] [client 212.30.36.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSGH337Lu30Ku9O40aKqbwAAABc"]
[Sat Nov 22 17:52:32.542815 2025] [:error] [pid 44259:tid 44276] [client 212.30.36.190:48211] [client 212.30.36.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSGH4HXe1xL-_YOdRmRYTQAAAY4"]
[Sat Nov 22 17:52:34.850487 2025] [:error] [pid 25856:tid 25873] [client 212.30.36.198:55795] [client 212.30.36.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSGH4hsTP0wy94zKUvGowQAAAQ8"]
[Sat Nov 22 17:52:36.759389 2025] [:error] [pid 53479:tid 53546] [client 212.30.36.201:53759] [client 212.30.36.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSGH5G6cicFF3Aas-oR8oQAAAIo"]
[Sat Nov 22 17:52:39.933915 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 212.30.36.174:25225] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:42.465307 2025] [proxy_fcgi:error] [pid 53566:tid 53582] [client 212.30.36.174:25225] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:43.349651 2025] [:error] [pid 53566:tid 53581] [client 212.30.36.174:25225] [client 212.30.36.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSGH68bSHDBkRbwMbd4a8gAAAM0"]
[Sat Nov 22 17:52:45.034874 2025] [:error] [pid 44259:tid 44283] [client 212.30.36.204:42113] [client 212.30.36.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSGH7XXe1xL-_YOdRmRYcwAAAZU"]
[Sat Nov 22 17:52:46.367952 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:46.887683 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:47.288456 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:47.824755 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:48.289404 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:48.811982 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:49.249976 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:49.779649 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:50.407873 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:51.396752 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:52.839497 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:53.465121 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:53.929858 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:54.977439 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:55.438983 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:55.921875 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:56.955971 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:57.358190 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:57.890899 2025] [proxy_fcgi:error] [pid 53566:tid 53588] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:52:58.980736 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:00.118086 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:00.694330 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:01.197375 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:01.830794 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:02.330972 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:03.463914 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:04.032812 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:04.471312 2025] [proxy_fcgi:error] [pid 53566:tid 53582] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:04.956466 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:05.390481 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:06.403509 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 212.30.36.198:50313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:16.094071 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 212.30.36.198:53449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:16.551163 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 212.30.36.198:53449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:17.137537 2025] [:error] [pid 53479:tid 53544] [client 212.30.36.198:53449] [client 212.30.36.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.198, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSGIDW6cicFF3Aas-oR87AAAAIg"]
[Sat Nov 22 17:53:17.141666 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 212.30.36.198:53449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:18.046268 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 212.30.36.198:53449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:18.637023 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 212.30.36.198:53449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:19.107801 2025] [:error] [pid 53479:tid 53540] [client 212.30.36.198:53449] [client 212.30.36.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aSGID26cicFF3Aas-oR88AAAAIQ"]
[Sat Nov 22 17:53:20.187239 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:20.738664 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:22.605847 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:23.060407 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:24.429426 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:24.862308 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:25.448943 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:25.926834 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:26.437906 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.30.36.226:39803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:29.127994 2025] [:error] [pid 25856:tid 25861] [client 212.30.36.226:39803] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSGIGRsTP0wy94zKUvGpCQAAAQM"]
[Sat Nov 22 17:53:30.015931 2025] [proxy_fcgi:error] [pid 44259:tid 44272] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:30.689627 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:34.164510 2025] [proxy_fcgi:error] [pid 44259:tid 44271] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:34.698558 2025] [proxy_fcgi:error] [pid 44259:tid 44281] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:35.112983 2025] [proxy_fcgi:error] [pid 44259:tid 44268] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:35.555425 2025] [proxy_fcgi:error] [pid 44259:tid 44262] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:36.121848 2025] [proxy_fcgi:error] [pid 44259:tid 44270] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:37.640818 2025] [proxy_fcgi:error] [pid 44259:tid 44276] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:38.559331 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:39.606344 2025] [proxy_fcgi:error] [pid 44259:tid 44280] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:40.045725 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:40.964165 2025] [proxy_fcgi:error] [pid 44259:tid 44283] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:42.354397 2025] [proxy_fcgi:error] [pid 44259:tid 44267] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:43.009054 2025] [proxy_fcgi:error] [pid 44259:tid 44274] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:44.659937 2025] [proxy_fcgi:error] [pid 44259:tid 44268] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:45.074512 2025] [proxy_fcgi:error] [pid 44259:tid 44270] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:46.017708 2025] [proxy_fcgi:error] [pid 44259:tid 44273] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:47.140806 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:47.587091 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:48.008731 2025] [proxy_fcgi:error] [pid 44259:tid 44274] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:48.479331 2025] [proxy_fcgi:error] [pid 44259:tid 44279] [client 212.30.36.199:57125] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:49.519437 2025] [:error] [pid 44259:tid 44273] [client 212.30.36.199:57125] [client 212.30.36.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aSGILXXe1xL-_YOdRmRY8QAAAYs"]
[Sat Nov 22 17:53:52.069541 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:52.551498 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:53.010700 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:53.452404 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:53.943632 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:54.918435 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:55.386832 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:55.851246 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:56.935352 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:57.383316 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:57.790655 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:58.546735 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:59.069258 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:53:59.938340 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:00.652844 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:01.119375 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:01.960750 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:02.918144 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:03.449993 2025] [proxy_fcgi:error] [pid 9547:tid 9555] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:04.273158 2025] [proxy_fcgi:error] [pid 9547:tid 9574] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:04.953025 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:05.453045 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:05.951706 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:06.473638 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:07.010144 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:07.948410 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:09.232585 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:09.778465 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:10.242180 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 212.30.36.228:53195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:22.957708 2025] [:error] [pid 9547:tid 9576] [client 212.30.36.228:53195] [client 212.30.36.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSGITtClOR5qk7DoMeGeQgAAAVc"]
[Sat Nov 22 17:54:24.537508 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:30.694312 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:31.097660 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:31.767758 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:33.502651 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:37.184878 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:37.668691 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:38.087287 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:38.482380 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:39.962414 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:43.950624 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 212.30.36.222:26475] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:45.597623 2025] [:error] [pid 9547:tid 9560] [client 212.30.36.222:26475] [client 212.30.36.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSGIZdClOR5qk7DoMeGedwAAAUc"]
[Sat Nov 22 17:54:46.718973 2025] [:error] [pid 44259:tid 44284] [client 212.30.36.228:32983] [client 212.30.36.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.30.36.228, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSGIZnXe1xL-_YOdRmRZWgAAAZY"]
[Sat Nov 22 17:54:46.722998 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 212.30.36.228:32983] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:48.434247 2025] [proxy_fcgi:error] [pid 44259:tid 44273] [client 212.30.36.228:32983] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:49.474783 2025] [:error] [pid 44259:tid 44269] [client 212.30.36.228:32983] [client 212.30.36.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSGIaXXe1xL-_YOdRmRZXQAAAYc"]
[Sat Nov 22 17:54:50.917229 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 212.30.36.199:36929] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:53.175010 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 212.30.36.199:36929] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:55.907904 2025] [:error] [pid 9547:tid 9571] [client 212.30.36.199:36929] [client 212.30.36.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGIb9ClOR5qk7DoMeGekwAAAVI"]
[Sat Nov 22 17:54:56.993762 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 212.30.36.204:50565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:58.365857 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 212.30.36.204:50565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:54:58.887091 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 212.30.36.204:50565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:11.491870 2025] [proxy_fcgi:error] [pid 44259:tid 44268] [client 212.30.36.222:64641] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:11.933766 2025] [proxy_fcgi:error] [pid 44259:tid 44276] [client 212.30.36.222:64641] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:12.641923 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 212.30.36.222:64641] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:13.178512 2025] [proxy_fcgi:error] [pid 44259:tid 44265] [client 212.30.36.222:64641] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:15.902237 2025] [proxy_fcgi:error] [pid 44259:tid 44278] [client 212.30.36.222:64641] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:18.928581 2025] [:error] [pid 44259:tid 44273] [client 212.30.36.222:64641] [client 212.30.36.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSGIhnXe1xL-_YOdRmRZhAAAAYs"]
[Sat Nov 22 17:55:21.705742 2025] [:error] [pid 53566:tid 53575] [client 212.30.36.223:35457] [client 212.30.36.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSGIicbSHDBkRbwMbd4bpQAAAMc"]
[Sat Nov 22 17:55:23.005206 2025] [:error] [pid 25856:tid 25881] [client 212.30.36.179:36171] [client 212.30.36.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSGIixsTP0wy94zKUvGpgwAAARc"]
[Sat Nov 22 17:55:23.859403 2025] [:error] [pid 25856:tid 25877] [client 212.30.36.214:45863] [client 212.30.36.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSGIixsTP0wy94zKUvGphQAAARM"]
[Sat Nov 22 17:55:28.363736 2025] [proxy_fcgi:error] [pid 44259:tid 44262] [client 212.30.36.199:28097] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:29.845005 2025] [proxy_fcgi:error] [pid 44259:tid 44267] [client 212.30.36.199:28097] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:33.913284 2025] [:error] [pid 44259:tid 44263] [client 212.30.36.199:28097] [client 212.30.36.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.199, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSGIlXXe1xL-_YOdRmRZmwAAAYE"]
[Sat Nov 22 17:55:38.456129 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 212.30.36.199:28097] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:39.425517 2025] [proxy_fcgi:error] [pid 44259:tid 44263] [client 212.30.36.199:28097] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:45.083663 2025] [:error] [pid 44259:tid 44263] [client 212.30.36.199:28097] [client 212.30.36.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSGIoXXe1xL-_YOdRmRZtQAAAYE"]
[Sat Nov 22 17:55:46.076361 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 212.30.36.209:41269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:48.432436 2025] [:error] [pid 9547:tid 9576] [client 212.30.36.209:41269] [client 212.30.36.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.209, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSGIpNClOR5qk7DoMeGe4AAAAVc"]
[Sat Nov 22 17:55:49.073651 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 212.30.36.209:41269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:51.026442 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 212.30.36.209:41269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:52.803014 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 212.30.36.209:41269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:53.738528 2025] [proxy_fcgi:error] [pid 9547:tid 9572] [client 212.30.36.209:41269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:55.162917 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 212.30.36.209:41269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:55:55.646126 2025] [:error] [pid 9547:tid 9561] [client 212.30.36.209:41269] [client 212.30.36.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSGIq9ClOR5qk7DoMeGe8AAAAUg"]
[Sat Nov 22 17:55:59.640276 2025] [:error] [pid 53479:tid 53539] [client 212.30.36.188:61637] [client 212.30.36.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSGIr26cicFF3Aas-oR9xwAAAIM"]
[Sat Nov 22 17:56:00.568288 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:02.123015 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:03.960188 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:04.755603 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:05.750783 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:08.912809 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:18.508363 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:19.044685 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:19.690664 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 212.30.36.215:49333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:20.703061 2025] [:error] [pid 53479:tid 53539] [client 212.30.36.215:49333] [client 212.30.36.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSGIxG6cicFF3Aas-oR-AwAAAIM"]
[Sat Nov 22 17:56:24.841376 2025] [:error] [pid 25856:tid 25879] [client 212.30.36.171:25651] [client 212.30.36.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aSGIyBsTP0wy94zKUvGpwAAAARU"]
[Sat Nov 22 17:56:28.167753 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 212.30.36.174:49745] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:29.918219 2025] [:error] [pid 44259:tid 44284] [client 212.30.36.174:49745] [client 212.30.36.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSGIzXXe1xL-_YOdRmRZ4wAAAZY"]
[Sat Nov 22 17:56:32.309298 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 212.30.36.205:65045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:33.953478 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 212.30.36.205:65045] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:35.213987 2025] [:error] [pid 53566:tid 53568] [client 212.30.36.205:65045] [client 212.30.36.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aSGI08bSHDBkRbwMbd4b1wAAAMA"]
[Sat Nov 22 17:56:36.417851 2025] [:error] [pid 9547:tid 9561] [client 212.30.36.176:34855] [client 212.30.36.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSGI1NClOR5qk7DoMeGfJAAAAUg"]
[Sat Nov 22 17:56:40.296700 2025] [:error] [pid 53479:tid 53538] [client 212.30.36.200:23969] [client 212.30.36.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.200, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSGI2G6cicFF3Aas-oR-FQAAAII"]
[Sat Nov 22 17:56:41.751140 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 212.30.36.200:23969] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:43.108698 2025] [:error] [pid 53479:tid 53556] [client 212.30.36.200:23969] [client 212.30.36.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aSGI226cicFF3Aas-oR-GwAAAJQ"]
[Sat Nov 22 17:56:44.045791 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 212.30.36.210:38387] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:45.106305 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 212.30.36.210:38387] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:49.429650 2025] [:error] [pid 9547:tid 9567] [client 212.30.36.210:38387] [client 212.30.36.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSGI4dClOR5qk7DoMeGfPQAAAU4"]
[Sat Nov 22 17:56:51.669479 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 212.30.36.226:20933] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:52.719493 2025] [:error] [pid 25856:tid 25864] [client 212.30.36.226:20933] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSGI5BsTP0wy94zKUvGp2QAAAQY"]
[Sat Nov 22 17:56:54.402472 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 212.30.36.173:56081] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:54.851807 2025] [:error] [pid 53566:tid 53579] [client 212.30.36.173:56081] [client 212.30.36.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSGI5sbSHDBkRbwMbd4b7QAAAMs"]
[Sat Nov 22 17:56:57.944593 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 212.30.36.183:31811] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:56:58.460699 2025] [:error] [pid 53477:tid 53504] [client 212.30.36.183:31811] [client 212.30.36.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.183, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSGI6n7Lu30Ku9O40aKrXQAAABc"]
[Sat Nov 22 17:57:00.110901 2025] [:error] [pid 53477:tid 53499] [client 212.30.36.183:31811] [client 212.30.36.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSGI7H7Lu30Ku9O40aKrYQAAABI"]
[Sat Nov 22 17:57:01.220771 2025] [:error] [pid 53477:tid 53501] [client 212.30.36.229:33295] [client 212.30.36.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSGI7X7Lu30Ku9O40aKrYgAAABQ"]
[Sat Nov 22 17:57:12.616015 2025] [proxy_fcgi:error] [pid 44259:tid 44281] [client 212.30.36.198:23599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:13.214280 2025] [proxy_fcgi:error] [pid 44259:tid 44271] [client 212.30.36.198:23599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:15.210220 2025] [proxy_fcgi:error] [pid 44259:tid 44268] [client 212.30.36.198:23599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:16.515446 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 212.30.36.198:23599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:18.086734 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.198:23599] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:19.109829 2025] [:error] [pid 44259:tid 44283] [client 212.30.36.198:23599] [client 212.30.36.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSGI_3Xe1xL-_YOdRmRadQAAAZU"]
[Sat Nov 22 17:57:22.138788 2025] [:error] [pid 9547:tid 9562] [client 212.30.36.217:52763] [client 212.30.36.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSGJAtClOR5qk7DoMeGfaAAAAUk"]
[Sat Nov 22 17:57:23.041131 2025] [:error] [pid 53477:tid 53503] [client 212.30.36.219:56185] [client 212.30.36.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSGJA37Lu30Ku9O40aKrdwAAABY"]
[Sat Nov 22 17:57:24.125065 2025] [:error] [pid 44259:tid 44286] [client 212.30.36.194:34773] [client 212.30.36.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSGJBHXe1xL-_YOdRmRaiwAAAZg"]
[Sat Nov 22 17:57:26.475396 2025] [:error] [pid 53477:tid 53497] [client 212.30.36.199:52219] [client 212.30.36.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSGJBn7Lu30Ku9O40aKreQAAABA"]
[Sat Nov 22 17:57:30.638175 2025] [autoindex:error] [pid 9547:tid 9564] [client 212.30.36.172:53209] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 17:57:32.476102 2025] [proxy_fcgi:error] [pid 9547:tid 9563] [client 212.30.36.172:53209] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:33.020684 2025] [:error] [pid 9547:tid 9577] [client 212.30.36.172:53209] [client 212.30.36.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSGJDdClOR5qk7DoMeGffgAAAVg"]
[Sat Nov 22 17:57:34.578580 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 212.30.36.214:34037] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:35.910358 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 212.30.36.214:34037] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:36.338359 2025] [:error] [pid 53479:tid 53542] [client 212.30.36.214:34037] [client 212.30.36.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSGJEG6cicFF3Aas-oR-ZgAAAIY"]
[Sat Nov 22 17:57:38.556201 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 212.30.36.185:38947] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:39.584166 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 212.30.36.185:38947] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:40.604188 2025] [:error] [pid 53479:tid 53539] [client 212.30.36.185:38947] [client 212.30.36.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSGJFG6cicFF3Aas-oR-cAAAAIM"]
[Sat Nov 22 17:57:44.811643 2025] [proxy_fcgi:error] [pid 44259:tid 44272] [client 212.30.36.199:62195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:45.275436 2025] [:error] [pid 44259:tid 44282] [client 212.30.36.199:62195] [client 212.30.36.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSGJGXXe1xL-_YOdRmRazgAAAZQ"]
[Sat Nov 22 17:57:48.406291 2025] [:error] [pid 53566:tid 53570] [client 212.30.36.176:55595] [client 212.30.36.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSGJHMbSHDBkRbwMbd4cFwAAAMI"]
[Sat Nov 22 17:57:49.300869 2025] [:error] [pid 53478:tid 53521] [client 212.30.36.214:46203] [client 212.30.36.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSGJHQhUYdXBbQswAdTpcAAAAEw"]
[Sat Nov 22 17:57:51.469737 2025] [:error] [pid 44259:tid 44267] [client 212.30.36.188:62163] [client 212.30.36.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSGJH3Xe1xL-_YOdRmRa5AAAAYU"]
[Sat Nov 22 17:57:52.482332 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 212.30.36.196:50371] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:54.507599 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 212.30.36.196:50371] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:57:55.958400 2025] [:error] [pid 9547:tid 9561] [client 212.30.36.196:50371] [client 212.30.36.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.196, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSGJI9ClOR5qk7DoMeGfoQAAAUg"]
[Sat Nov 22 17:57:56.978744 2025] [:error] [pid 9547:tid 9572] [client 212.30.36.196:50371] [client 212.30.36.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSGJJNClOR5qk7DoMeGfpAAAAVM"]
[Sat Nov 22 17:57:58.583244 2025] [:error] [pid 44259:tid 44286] [client 212.30.36.226:56575] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSGJJnXe1xL-_YOdRmRbBQAAAZg"]
[Sat Nov 22 17:58:00.567504 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 212.30.36.222:52745] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:01.088776 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.222:52745] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:05.738253 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 212.30.36.222:52745] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:08.660604 2025] [:error] [pid 25856:tid 25875] [client 212.30.36.222:52745] [client 212.30.36.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.222, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSGJMBsTP0wy94zKUvGqHQAAARE"]
[Sat Nov 22 17:58:09.251689 2025] [:error] [pid 25856:tid 25862] [client 212.30.36.222:52745] [client 212.30.36.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSGJMRsTP0wy94zKUvGqHgAAAQQ"]
[Sat Nov 22 17:58:10.301318 2025] [:error] [pid 44259:tid 44278] [client 212.30.36.206:21733] [client 212.30.36.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aSGJMnXe1xL-_YOdRmRbMAAAAZA"]
[Sat Nov 22 17:58:11.792041 2025] [:error] [pid 53566:tid 53575] [client 212.30.36.226:55625] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSGJM8bSHDBkRbwMbd4cJAAAAMc"]
[Sat Nov 22 17:58:19.488805 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 212.30.36.214:27635] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:20.225898 2025] [:error] [pid 53479:tid 53537] [client 212.30.36.214:27635] [client 212.30.36.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSGJPG6cicFF3Aas-oR-2AAAAIE"]
[Sat Nov 22 17:58:21.484704 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 212.30.36.191:49675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:21.945776 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 212.30.36.191:49675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:29.345354 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 212.30.36.191:49675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:32.750632 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 212.30.36.191:49675] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:33.308309 2025] [:error] [pid 53478:tid 53515] [client 212.30.36.191:49675] [client 212.30.36.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSGJSQhUYdXBbQswAdTprgAAAEY"]
[Sat Nov 22 17:58:36.530098 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 212.30.36.201:37411] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:37.602827 2025] [:error] [pid 9547:tid 9557] [client 212.30.36.201:37411] [client 212.30.36.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSGJTdClOR5qk7DoMeGf5QAAAUQ"]
[Sat Nov 22 17:58:39.778132 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 212.30.36.219:30305] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:42.934657 2025] [:error] [pid 53479:tid 53549] [client 212.30.36.219:30305] [client 212.30.36.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSGJUm6cicFF3Aas-oR--gAAAI0"]
[Sat Nov 22 17:58:44.803157 2025] [:error] [pid 53477:tid 53502] [client 212.30.36.185:65041] [client 212.30.36.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSGJVH7Lu30Ku9O40aKrsAAAABU"]
[Sat Nov 22 17:58:49.865848 2025] [:error] [pid 53566:tid 53569] [client 212.30.36.183:33921] [client 212.30.36.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSGJWcbSHDBkRbwMbd4cYQAAAME"]
[Sat Nov 22 17:58:51.459831 2025] [:error] [pid 53479:tid 53544] [client 212.30.36.207:39919] [client 212.30.36.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSGJW26cicFF3Aas-oR-_gAAAIg"]
[Sat Nov 22 17:58:52.749880 2025] [:error] [pid 53479:tid 53537] [client 212.30.36.222:21301] [client 212.30.36.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSGJXG6cicFF3Aas-oR_AQAAAIE"]
[Sat Nov 22 17:58:54.873271 2025] [:error] [pid 53479:tid 53542] [client 212.30.36.171:48753] [client 212.30.36.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSGJXm6cicFF3Aas-oR_FQAAAIY"]
[Sat Nov 22 17:58:57.618706 2025] [proxy_fcgi:error] [pid 44259:tid 44278] [client 212.30.36.209:60449] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:58:59.830891 2025] [:error] [pid 44259:tid 44276] [client 212.30.36.209:60449] [client 212.30.36.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSGJY3Xe1xL-_YOdRmRbrQAAAY4"]
[Sat Nov 22 17:59:00.935520 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 212.30.36.177:51451] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:03.229010 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.177:51451] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:03.935701 2025] [proxy_fcgi:error] [pid 44259:tid 44271] [client 212.30.36.177:51451] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:04.549788 2025] [:error] [pid 44259:tid 44270] [client 212.30.36.177:51451] [client 212.30.36.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSGJaHXe1xL-_YOdRmRbvAAAAYg"]
[Sat Nov 22 17:59:06.522743 2025] [:error] [pid 53478:tid 53514] [client 212.30.36.180:41691] [client 212.30.36.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSGJaghUYdXBbQswAdTpyAAAAEU"]
[Sat Nov 22 17:59:07.671033 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.181:53067] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:08.479418 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 212.30.36.181:53067] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:09.686901 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 212.30.36.181:53067] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:10.701407 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 212.30.36.181:53067] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:11.166646 2025] [:error] [pid 25856:tid 25872] [client 212.30.36.181:53067] [client 212.30.36.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSGJbxsTP0wy94zKUvGqkwAAAQ4"]
[Sat Nov 22 17:59:13.848900 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 212.30.36.206:51545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:15.970092 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 212.30.36.206:51545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:17.369914 2025] [proxy_fcgi:error] [pid 44259:tid 44270] [client 212.30.36.206:51545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:19.152306 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 212.30.36.206:51545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:19.848466 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.206:51545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:22.517787 2025] [proxy_fcgi:error] [pid 44259:tid 44276] [client 212.30.36.206:51545] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:22.996900 2025] [:error] [pid 44259:tid 44281] [client 212.30.36.206:51545] [client 212.30.36.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSGJenXe1xL-_YOdRmRb-wAAAZM"]
[Sat Nov 22 17:59:24.211774 2025] [:error] [pid 53477:tid 53494] [client 212.30.36.178:63017] [client 212.30.36.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSGJfH7Lu30Ku9O40aKr_AAAAA0"]
[Sat Nov 22 17:59:26.285605 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 212.30.36.225:52721] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:26.837002 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 212.30.36.225:52721] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:28.225039 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 212.30.36.225:52721] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:28.759119 2025] [:error] [pid 53478:tid 53528] [client 212.30.36.225:52721] [client 212.30.36.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSGJgAhUYdXBbQswAdTp2AAAAFM"]
[Sat Nov 22 17:59:29.635591 2025] [:error] [pid 9547:tid 9573] [client 212.30.36.218:63329] [client 212.30.36.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSGJgdClOR5qk7DoMeGgJAAAAVQ"]
[Sat Nov 22 17:59:30.607439 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 212.30.36.187:43593] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:31.266248 2025] [:error] [pid 53479:tid 53560] [client 212.30.36.187:43593] [client 212.30.36.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSGJg26cicFF3Aas-oR_TwAAAJg"]
[Sat Nov 22 17:59:32.429191 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 212.30.36.210:30705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:33.002639 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 212.30.36.210:30705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:35.759725 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 212.30.36.210:30705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:36.785695 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 212.30.36.210:30705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:37.242457 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 212.30.36.210:30705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:37.886853 2025] [:error] [pid 53566:tid 53587] [client 212.30.36.210:30705] [client 212.30.36.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSGJicbSHDBkRbwMbd4clAAAANM"]
[Sat Nov 22 17:59:39.329870 2025] [:error] [pid 53477:tid 53504] [client 212.30.36.174:60877] [client 212.30.36.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.174, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSGJi37Lu30Ku9O40aKsGgAAABc"]
[Sat Nov 22 17:59:39.749908 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 212.30.36.174:60877] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:40.278325 2025] [:error] [pid 53477:tid 53488] [client 212.30.36.174:60877] [client 212.30.36.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSGJjH7Lu30Ku9O40aKsHAAAAAc"]
[Sat Nov 22 17:59:43.444453 2025] [:error] [pid 25856:tid 25878] [client 212.30.36.190:61081] [client 212.30.36.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSGJjxsTP0wy94zKUvGqwAAAARQ"]
[Sat Nov 22 17:59:45.356214 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 212.30.36.218:31721] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:46.222892 2025] [proxy_fcgi:error] [pid 53478:tid 53524] [client 212.30.36.218:31721] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:47.490647 2025] [:error] [pid 53478:tid 53528] [client 212.30.36.218:31721] [client 212.30.36.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSGJkwhUYdXBbQswAdTp5gAAAFM"]
[Sat Nov 22 17:59:48.409054 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 212.30.36.200:54019] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:49.047233 2025] [:error] [pid 53566:tid 53588] [client 212.30.36.200:54019] [client 212.30.36.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSGJlcbSHDBkRbwMbd4cmgAAANQ"]
[Sat Nov 22 17:59:50.793883 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:51.197166 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:51.667483 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:53.259357 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:53.811291 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:56.954340 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:58.469900 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 212.30.36.203:52699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 17:59:59.464754 2025] [:error] [pid 53479:tid 53536] [client 212.30.36.203:52699] [client 212.30.36.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSGJn26cicFF3Aas-oR_fQAAAIA"]
[Sat Nov 22 18:00:01.169693 2025] [proxy_fcgi:error] [pid 53478:tid 53510] [client 212.30.36.197:32409] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:04.922902 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 212.30.36.197:32409] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:05.903044 2025] [:error] [pid 53478:tid 53531] [client 212.30.36.197:32409] [client 212.30.36.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSGJpQhUYdXBbQswAdTp8AAAAFY"]
[Sat Nov 22 18:00:06.861324 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 212.30.36.198:58815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:08.711440 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 212.30.36.198:58815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:18.916973 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 212.30.36.198:47101] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:19.969202 2025] [:error] [pid 9547:tid 9577] [client 212.30.36.198:47101] [client 212.30.36.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.198, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSGJs9ClOR5qk7DoMeGgUQAAAVg"]
[Sat Nov 22 18:00:19.973665 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 212.30.36.198:47101] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:21.881841 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 212.30.36.198:47101] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:22.750942 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 212.30.36.198:47101] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:26.218710 2025] [:error] [pid 9547:tid 9554] [client 212.30.36.198:47101] [client 212.30.36.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aSGJutClOR5qk7DoMeGgXAAAAUE"]
[Sat Nov 22 18:00:27.764044 2025] [:error] [pid 25856:tid 25874] [client 212.30.36.173:37767] [client 212.30.36.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.173, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSGJuxsTP0wy94zKUvGrLAAAARA"]
[Sat Nov 22 18:00:29.461077 2025] [:error] [pid 25856:tid 25866] [client 212.30.36.173:37767] [client 212.30.36.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSGJvRsTP0wy94zKUvGrMAAAAQg"]
[Sat Nov 22 18:00:31.468362 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 212.30.36.213:52481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:31.881126 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 212.30.36.213:52481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:33.958781 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 212.30.36.213:52481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:35.257792 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 212.30.36.213:52481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:35.812384 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 212.30.36.213:52481] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:37.883205 2025] [:error] [pid 53478:tid 53524] [client 212.30.36.213:52481] [client 212.30.36.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSGJxQhUYdXBbQswAdTqUgAAAE8"]
[Sat Nov 22 18:00:39.275044 2025] [proxy_fcgi:error] [pid 44259:tid 44275] [client 212.30.36.226:54651] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:41.986055 2025] [:error] [pid 44259:tid 44272] [client 212.30.36.226:54651] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSGJyXXe1xL-_YOdRmRc5QAAAYo"]
[Sat Nov 22 18:00:43.342631 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:43.882493 2025] [:error] [pid 53479:tid 53539] [client 212.30.36.231:48141] [client 212.30.36.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.231, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSGJy26cicFF3Aas-oR_xQAAAIM"]
[Sat Nov 22 18:00:46.066399 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:49.788340 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:50.337608 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:50.894739 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:51.340086 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:52.120463 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 212.30.36.231:48141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:00:53.311405 2025] [:error] [pid 53479:tid 53556] [client 212.30.36.231:48141] [client 212.30.36.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSGJ1W6cicFF3Aas-oR_9AAAAJQ"]
[Sat Nov 22 18:00:56.458506 2025] [:error] [pid 44259:tid 44266] [client 212.30.36.196:62573] [client 212.30.36.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/packed.php"] [unique_id "aSGJ2HXe1xL-_YOdRmRdAgAAAYQ"]
[Sat Nov 22 18:01:09.017093 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:09.478468 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:10.102065 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:11.890289 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:12.590191 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:13.134299 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:14.171145 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 212.30.36.204:49791] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:14.776789 2025] [:error] [pid 53478:tid 53530] [client 212.30.36.204:49791] [client 212.30.36.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aSGJ6ghUYdXBbQswAdTqjwAAAFU"]
[Sat Nov 22 18:01:16.770760 2025] [:error] [pid 9547:tid 9572] [client 212.30.36.210:49199] [client 212.30.36.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSGJ7NClOR5qk7DoMeGgpgAAAVM"]
[Sat Nov 22 18:01:19.334052 2025] [:error] [pid 9547:tid 9559] [client 212.30.36.189:30351] [client 212.30.36.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSGJ79ClOR5qk7DoMeGgrQAAAUY"]
[Sat Nov 22 18:01:20.300639 2025] [proxy_fcgi:error] [pid 44259:tid 44275] [client 212.30.36.229:59183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:22.209279 2025] [proxy_fcgi:error] [pid 44259:tid 44279] [client 212.30.36.229:59183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:23.690826 2025] [:error] [pid 44259:tid 44276] [client 212.30.36.229:59183] [client 212.30.36.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.229, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSGJ83Xe1xL-_YOdRmRdLQAAAY4"]
[Sat Nov 22 18:01:24.449706 2025] [:error] [pid 44259:tid 44286] [client 212.30.36.229:59183] [client 212.30.36.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSGJ9HXe1xL-_YOdRmRdMAAAAZg"]
[Sat Nov 22 18:01:27.658177 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 212.30.36.174:60285] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:28.563695 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 212.30.36.174:60285] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:29.636314 2025] [:error] [pid 25856:tid 25866] [client 212.30.36.174:60285] [client 212.30.36.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSGJ-RsTP0wy94zKUvGrcAAAAQg"]
[Sat Nov 22 18:01:31.110302 2025] [:error] [pid 53477:tid 53485] [client 212.30.36.206:54355] [client 212.30.36.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSGJ-37Lu30Ku9O40aKsrgAAAAQ"]
[Sat Nov 22 18:01:32.391115 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.225:27459] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:33.799383 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 212.30.36.225:27459] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:36.070026 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.225:27459] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:36.585129 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 212.30.36.225:27459] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:39.437267 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 212.30.36.225:27459] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:39.919982 2025] [:error] [pid 25856:tid 25872] [client 212.30.36.225:27459] [client 212.30.36.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aSGKAxsTP0wy94zKUvGriQAAAQ4"]
[Sat Nov 22 18:01:41.059665 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 212.30.36.227:61409] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:42.331665 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 212.30.36.227:61409] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:45.105715 2025] [:error] [pid 53479:tid 53544] [client 212.30.36.227:61409] [client 212.30.36.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aSGKCW6cicFF3Aas-oSAFgAAAIg"]
[Sat Nov 22 18:01:51.000111 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 212.30.36.209:26513] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:52.628425 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 212.30.36.209:26513] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:01:55.807822 2025] [:error] [pid 25856:tid 25876] [client 212.30.36.209:26513] [client 212.30.36.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSGKExsTP0wy94zKUvGrtgAAARI"]
[Sat Nov 22 18:02:00.020741 2025] [proxy_fcgi:error] [pid 44259:tid 44264] [client 212.30.36.178:27315] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:03.472687 2025] [:error] [pid 44259:tid 44274] [client 212.30.36.178:27315] [client 212.30.36.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSGKG3Xe1xL-_YOdRmRdcAAAAYw"]
[Sat Nov 22 18:02:04.405970 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:04.798831 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:06.223391 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:07.602180 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:08.321831 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:09.420930 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:09.872671 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 212.30.36.218:23533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:10.324232 2025] [:error] [pid 53477:tid 53504] [client 212.30.36.218:23533] [client 212.30.36.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSGKIn7Lu30Ku9O40aKs7AAAABc"]
[Sat Nov 22 18:02:11.517428 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 212.30.36.180:23499] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:12.222819 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 212.30.36.180:23499] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:15.656359 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 212.30.36.180:23499] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:16.350359 2025] [:error] [pid 53479:tid 53554] [client 212.30.36.180:23499] [client 212.30.36.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSGKKG6cicFF3Aas-oSAYgAAAJI"]
[Sat Nov 22 18:02:17.722850 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 212.30.36.189:47823] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:18.443726 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 212.30.36.189:47823] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:20.256490 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 212.30.36.189:47823] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:22.225752 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 212.30.36.189:47823] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:24.261791 2025] [:error] [pid 53477:tid 53495] [client 212.30.36.189:47823] [client 212.30.36.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/item.php"] [unique_id "aSGKMH7Lu30Ku9O40aKtBAAAAA4"]
[Sat Nov 22 18:02:27.496605 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 212.30.36.226:30411] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:29.278990 2025] [:error] [pid 53479:tid 53555] [client 212.30.36.226:30411] [client 212.30.36.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.226, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSGKNW6cicFF3Aas-oSAhgAAAJM"]
[Sat Nov 22 18:02:29.283389 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 212.30.36.226:30411] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:30.648319 2025] [:error] [pid 53479:tid 53545] [client 212.30.36.226:30411] [client 212.30.36.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.226, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGKNm6cicFF3Aas-oSAiAAAAIk"]
[Sat Nov 22 18:02:31.220812 2025] [:error] [pid 53479:tid 53548] [client 212.30.36.226:30411] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mani.php"] [unique_id "aSGKN26cicFF3Aas-oSAiQAAAIw"]
[Sat Nov 22 18:02:32.324883 2025] [proxy_fcgi:error] [pid 44259:tid 44281] [client 212.30.36.190:44225] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:32.750159 2025] [proxy_fcgi:error] [pid 44259:tid 44272] [client 212.30.36.190:44225] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:34.156258 2025] [proxy_fcgi:error] [pid 44259:tid 44278] [client 212.30.36.190:44225] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:38.802096 2025] [:error] [pid 44259:tid 44280] [client 212.30.36.190:44225] [client 212.30.36.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aSGKPnXe1xL-_YOdRmRdqgAAAZI"]
[Sat Nov 22 18:02:39.727765 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 212.30.36.216:25583] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:40.786733 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 212.30.36.216:25583] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:41.359258 2025] [:error] [pid 53566:tid 53586] [client 212.30.36.216:25583] [client 212.30.36.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSGKQcbSHDBkRbwMbd4dQgAAANI"]
[Sat Nov 22 18:02:44.464333 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 212.30.36.213:53425] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:44.962481 2025] [proxy_fcgi:error] [pid 44259:tid 44269] [client 212.30.36.213:53425] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:47.606670 2025] [proxy_fcgi:error] [pid 44259:tid 44285] [client 212.30.36.213:53425] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:48.607703 2025] [:error] [pid 44259:tid 44275] [client 212.30.36.213:53425] [client 212.30.36.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSGKSHXe1xL-_YOdRmRdvwAAAY0"]
[Sat Nov 22 18:02:51.215672 2025] [:error] [pid 44259:tid 44266] [client 212.30.36.206:27993] [client 212.30.36.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSGKS3Xe1xL-_YOdRmRdwwAAAYQ"]
[Sat Nov 22 18:02:53.729510 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 212.30.36.199:44917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:55.486405 2025] [:error] [pid 53566:tid 53590] [client 212.30.36.199:44917] [client 212.30.36.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.199, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-login.php"] [unique_id "aSGKT8bSHDBkRbwMbd4dYAAAANY"]
[Sat Nov 22 18:02:57.567961 2025] [proxy_fcgi:error] [pid 53566:tid 53588] [client 212.30.36.199:44917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:59.059688 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 212.30.36.199:44917] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:02:59.593321 2025] [:error] [pid 53566:tid 53585] [client 212.30.36.199:44917] [client 212.30.36.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSGKU8bSHDBkRbwMbd4dagAAANE"]
[Sat Nov 22 18:03:01.692949 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 212.30.36.203:47211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:02.421368 2025] [:error] [pid 25856:tid 25863] [client 212.30.36.203:47211] [client 212.30.36.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSGKVhsTP0wy94zKUvGsCAAAAQU"]
[Sat Nov 22 18:03:04.666699 2025] [:error] [pid 53566:tid 53588] [client 212.30.36.188:41417] [client 212.30.36.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSGKWMbSHDBkRbwMbd4dcAAAANQ"]
[Sat Nov 22 18:03:06.608966 2025] [:error] [pid 53566:tid 53568] [client 212.30.36.214:50635] [client 212.30.36.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSGKWsbSHDBkRbwMbd4ddQAAAMA"]
[Sat Nov 22 18:03:11.633713 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 212.30.36.204:48187] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:12.812728 2025] [:error] [pid 44259:tid 44279] [client 212.30.36.204:48187] [client 212.30.36.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSGKYHXe1xL-_YOdRmRd6AAAAZE"]
[Sat Nov 22 18:03:13.896114 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:14.355416 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:15.808616 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:17.980394 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:19.815129 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:20.464269 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:21.799657 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:23.397246 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:25.067512 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 212.30.36.227:30197] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:27.130429 2025] [:error] [pid 53477:tid 53481] [client 212.30.36.227:30197] [client 212.30.36.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aSGKb37Lu30Ku9O40aKtSAAAAAA"]
[Sat Nov 22 18:03:30.778127 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 212.30.36.177:22195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:32.229711 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 212.30.36.177:22195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:32.791146 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 212.30.36.177:22195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:33.370526 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 212.30.36.177:22195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:35.071774 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 212.30.36.177:22195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:35.545529 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 212.30.36.177:22195] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:36.420120 2025] [:error] [pid 53478:tid 53532] [client 212.30.36.177:22195] [client 212.30.36.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSGKeAhUYdXBbQswAdTrRAAAAFc"]
[Sat Nov 22 18:03:41.779047 2025] [:error] [pid 25856:tid 25870] [client 212.30.36.173:24969] [client 212.30.36.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSGKfRsTP0wy94zKUvGsWQAAAQw"]
[Sat Nov 22 18:03:43.427018 2025] [:error] [pid 53479:tid 53542] [client 212.30.36.187:41945] [client 212.30.36.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSGKf26cicFF3Aas-oSA9AAAAIY"]
[Sat Nov 22 18:03:45.641909 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 212.30.36.228:21861] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:46.091680 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 212.30.36.228:21861] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:47.160524 2025] [proxy_fcgi:error] [pid 53566:tid 53578] [client 212.30.36.228:21861] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:48.080988 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 212.30.36.228:21861] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:48.815449 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 212.30.36.228:21861] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:52.474448 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 212.30.36.228:21861] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:52.886234 2025] [:error] [pid 53566:tid 53578] [client 212.30.36.228:21861] [client 212.30.36.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSGKiMbSHDBkRbwMbd4dtQAAAMo"]
[Sat Nov 22 18:03:53.741698 2025] [:error] [pid 53479:tid 53560] [client 212.30.36.170:32413] [client 212.30.36.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSGKiW6cicFF3Aas-oSBBQAAAJg"]
[Sat Nov 22 18:03:56.685816 2025] [:error] [pid 25856:tid 25865] [client 212.30.36.181:33717] [client 212.30.36.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSGKjBsTP0wy94zKUvGseQAAAQc"]
[Sat Nov 22 18:03:58.363319 2025] [proxy_fcgi:error] [pid 53478:tid 53510] [client 212.30.36.183:44357] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:59.165216 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 212.30.36.183:44357] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:03:59.673641 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 212.30.36.183:44357] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:06.872168 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:07.579867 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:08.124847 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:09.967330 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:10.379326 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:10.819303 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:11.279684 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:11.793627 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:13.143473 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:13.657237 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:14.221952 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:14.975795 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:15.459518 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:15.883282 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:16.478177 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:18.732874 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:19.155487 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:19.682514 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:20.642858 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:21.546172 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:22.091172 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:22.535503 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:22.952652 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:27.734751 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:28.231761 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:28.743535 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 212.30.36.191:50821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:29.151859 2025] [:error] [pid 25856:tid 25874] [client 212.30.36.191:50821] [client 212.30.36.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSGKrRsTP0wy94zKUvGswAAAARA"]
[Sat Nov 22 18:04:31.124397 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:31.662813 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:32.176936 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:32.793217 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:34.124618 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:34.754045 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:35.301524 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:35.793398 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:36.215855 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:36.679744 2025] [proxy_fcgi:error] [pid 53478:tid 53533] [client 212.30.36.218:20477] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:37.176950 2025] [:error] [pid 53478:tid 53513] [client 212.30.36.218:20477] [client 212.30.36.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSGKtQhUYdXBbQswAdTrowAAAEQ"]
[Sat Nov 22 18:04:39.674393 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 212.30.36.177:22649] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:47.330340 2025] [:error] [pid 53477:tid 53500] [client 212.30.36.177:22649] [client 212.30.36.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aSGKv37Lu30Ku9O40aKtnQAAABM"]
[Sat Nov 22 18:04:48.245198 2025] [:error] [pid 25856:tid 25864] [client 212.30.36.218:55223] [client 212.30.36.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSGKwBsTP0wy94zKUvGs8QAAAQY"]
[Sat Nov 22 18:04:49.389069 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 212.30.36.217:27541] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:50.463279 2025] [:error] [pid 53479:tid 53544] [client 212.30.36.217:27541] [client 212.30.36.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aSGKwm6cicFF3Aas-oSBSwAAAIg"]
[Sat Nov 22 18:04:54.680402 2025] [:error] [pid 53566:tid 53592] [client 212.30.36.226:48153] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/repeater.php"] [unique_id "aSGKxsbSHDBkRbwMbd4d2gAAANg"]
[Sat Nov 22 18:04:58.018397 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 212.30.36.172:23001] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:58.647790 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 212.30.36.172:23001] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:04:59.599425 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 212.30.36.172:23001] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:13.796803 2025] [:error] [pid 9547:tid 9564] [client 212.30.36.225:58229] [client 212.30.36.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSGK2dClOR5qk7DoMeGiOgAAAUs"]
[Sat Nov 22 18:05:14.698740 2025] [:error] [pid 9547:tid 9573] [client 212.30.36.201:23423] [client 212.30.36.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSGK2tClOR5qk7DoMeGiPAAAAVQ"]
[Sat Nov 22 18:05:17.923996 2025] [:error] [pid 25856:tid 25879] [client 212.30.36.210:48809] [client 212.30.36.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/options.php"] [unique_id "aSGK3RsTP0wy94zKUvGtPQAAARU"]
[Sat Nov 22 18:05:19.142043 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.194:29253] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:20.426945 2025] [:error] [pid 44259:tid 44279] [client 212.30.36.194:29253] [client 212.30.36.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSGK4HXe1xL-_YOdRmRexQAAAZE"]
[Sat Nov 22 18:05:23.355429 2025] [:error] [pid 25856:tid 25861] [client 212.30.36.187:27343] [client 212.30.36.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSGK4xsTP0wy94zKUvGtQwAAAQM"]
[Sat Nov 22 18:05:25.363897 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 212.30.36.214:24129] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:26.417694 2025] [:error] [pid 53477:tid 53483] [client 212.30.36.214:24129] [client 212.30.36.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.214, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/images/wp-login.php"] [unique_id "aSGK5n7Lu30Ku9O40aKttQAAAAI"]
[Sat Nov 22 18:05:27.021800 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 212.30.36.214:24129] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:28.819788 2025] [:error] [pid 53477:tid 53498] [client 212.30.36.214:24129] [client 212.30.36.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSGK6H7Lu30Ku9O40aKtuQAAABE"]
[Sat Nov 22 18:05:31.077736 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 212.30.36.205:24121] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:34.392210 2025] [:error] [pid 9547:tid 9563] [client 212.30.36.205:24121] [client 212.30.36.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSGK7tClOR5qk7DoMeGiUwAAAUo"]
[Sat Nov 22 18:05:35.447576 2025] [:error] [pid 9547:tid 9560] [client 212.30.36.226:28519] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSGK79ClOR5qk7DoMeGiVQAAAUc"]
[Sat Nov 22 18:05:36.560385 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 212.30.36.207:21701] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:38.047594 2025] [:error] [pid 53479:tid 53559] [client 212.30.36.207:21701] [client 212.30.36.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.207, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSGK8m6cicFF3Aas-oSBagAAAJc"]
[Sat Nov 22 18:05:38.475420 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 212.30.36.207:21701] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:38.932614 2025] [:error] [pid 53479:tid 53551] [client 212.30.36.207:21701] [client 212.30.36.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSGK8m6cicFF3Aas-oSBbQAAAI8"]
[Sat Nov 22 18:05:39.853955 2025] [proxy_fcgi:error] [pid 9547:tid 9559] [client 212.30.36.216:33425] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:41.987179 2025] [proxy_fcgi:error] [pid 9547:tid 9573] [client 212.30.36.216:33425] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:43.664943 2025] [:error] [pid 9547:tid 9555] [client 212.30.36.216:33425] [client 212.30.36.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSGK99ClOR5qk7DoMeGiYQAAAUI"]
[Sat Nov 22 18:05:45.838052 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:47.379823 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:47.886965 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:48.384746 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:48.927445 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:49.461386 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:50.927806 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:51.349376 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:05:51.764312 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 212.30.36.217:34023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:01.258521 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:04.606525 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:06.103803 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:06.734608 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:08.202438 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:09.760969 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:10.269939 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:10.690693 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:11.166493 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:12.088810 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:12.992973 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:13.503127 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:14.142749 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:15.571499 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:16.383624 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:16.865065 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:18.973921 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:20.016641 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:20.591104 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:21.217135 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:22.715713 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:23.152503 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:23.747431 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:24.275235 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:24.763793 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:27.769263 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:29.418509 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:33.279099 2025] [proxy_fcgi:error] [pid 25856:tid 25876] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:34.433682 2025] [:error] [pid 25856:tid 25882] [client 212.30.36.194:21815] [client 212.30.36.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.194, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGLKhsTP0wy94zKUvGtlwAAARg"]
[Sat Nov 22 18:06:35.044050 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:36.532333 2025] [:error] [pid 25856:tid 25875] [client 212.30.36.194:21815] [client 212.30.36.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.194, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.tmb/wp-login.php"] [unique_id "aSGLLBsTP0wy94zKUvGtmwAAARE"]
[Sat Nov 22 18:06:37.717059 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 212.30.36.194:21815] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:38.169885 2025] [:error] [pid 25856:tid 25872] [client 212.30.36.194:21815] [client 212.30.36.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSGLLhsTP0wy94zKUvGtngAAAQ4"]
[Sat Nov 22 18:06:39.256606 2025] [:error] [pid 44259:tid 44284] [client 212.30.36.213:49739] [client 212.30.36.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSGLL3Xe1xL-_YOdRmRfJwAAAZY"]
[Sat Nov 22 18:06:42.207962 2025] [:error] [pid 9547:tid 9555] [client 212.30.36.201:28657] [client 212.30.36.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aSGLMtClOR5qk7DoMeGijQAAAUI"]
[Sat Nov 22 18:06:44.406979 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 212.30.36.184:61575] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:49.136331 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 212.30.36.184:61575] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:49.562769 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 212.30.36.184:61575] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:06:51.721249 2025] [:error] [pid 53478:tid 53510] [client 212.30.36.184:61575] [client 212.30.36.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.184, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSGLOwhUYdXBbQswAdTsCQAAAEE"]
[Sat Nov 22 18:06:53.359317 2025] [:error] [pid 53478:tid 53516] [client 212.30.36.184:61575] [client 212.30.36.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGLPQhUYdXBbQswAdTsCwAAAEc"]
[Sat Nov 22 18:07:01.149614 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:02.223178 2025] [:error] [pid 44259:tid 44267] [client 212.30.36.180:24107] [client 212.30.36.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.180, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSGLRnXe1xL-_YOdRmRfTAAAAYU"]
[Sat Nov 22 18:07:03.508607 2025] [proxy_fcgi:error] [pid 44259:tid 44280] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:06.695418 2025] [proxy_fcgi:error] [pid 44259:tid 44279] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:07.383959 2025] [proxy_fcgi:error] [pid 44259:tid 44273] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:08.554307 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:09.117883 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:11.103873 2025] [proxy_fcgi:error] [pid 44259:tid 44265] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:11.538894 2025] [proxy_fcgi:error] [pid 44259:tid 44272] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:12.287124 2025] [proxy_fcgi:error] [pid 44259:tid 44264] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:12.706791 2025] [proxy_fcgi:error] [pid 44259:tid 44273] [client 212.30.36.180:24107] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:15.787793 2025] [:error] [pid 44259:tid 44283] [client 212.30.36.180:24107] [client 212.30.36.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSGLU3Xe1xL-_YOdRmRffAAAAZU"]
[Sat Nov 22 18:07:18.747738 2025] [proxy_fcgi:error] [pid 44259:tid 44272] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:19.321086 2025] [proxy_fcgi:error] [pid 44259:tid 44264] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:20.601287 2025] [proxy_fcgi:error] [pid 44259:tid 44273] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:21.201002 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:21.823536 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:22.503844 2025] [proxy_fcgi:error] [pid 44259:tid 44274] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:23.467937 2025] [proxy_fcgi:error] [pid 44259:tid 44268] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:23.963661 2025] [proxy_fcgi:error] [pid 44259:tid 44264] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:24.433498 2025] [proxy_fcgi:error] [pid 44259:tid 44269] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:24.885384 2025] [proxy_fcgi:error] [pid 44259:tid 44279] [client 212.30.36.203:30031] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:25.453298 2025] [:error] [pid 44259:tid 44281] [client 212.30.36.203:30031] [client 212.30.36.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSGLXXXe1xL-_YOdRmRfuAAAAZM"]
[Sat Nov 22 18:07:26.650730 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:28.371042 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:28.850782 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:31.026070 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:31.581376 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:31.987260 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:33.247736 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:34.980995 2025] [:error] [pid 25856:tid 25869] [client 212.30.36.187:53683] [client 212.30.36.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.187, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSGLZhsTP0wy94zKUvGt6AAAAQs"]
[Sat Nov 22 18:07:35.475678 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:37.613176 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:38.634274 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:40.229588 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:40.651700 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:42.270745 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:42.682454 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 212.30.36.187:53683] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:07:43.542742 2025] [autoindex:error] [pid 25856:tid 25874] [client 212.30.36.187:53683] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 18:07:44.627287 2025] [autoindex:error] [pid 25856:tid 25872] [client 212.30.36.187:53683] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 18:07:45.059584 2025] [autoindex:error] [pid 25856:tid 25861] [client 212.30.36.187:53683] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 18:08:12.656480 2025] [autoindex:error] [pid 25856:tid 25868] [client 212.30.36.187:53683] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 18:09:47.434481 2025] [autoindex:error] [pid 53478:tid 53519] [client 212.30.36.172:55483] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 18:12:18.783179 2025] [autoindex:error] [pid 9547:tid 9567] [client 212.30.36.225:60363] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:28:35.306198 2025] [:error] [pid 53479:tid 53543] [client 49.7.227.204:58380] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSG6g26cicFF3Aas-oTL4QAAAIc"]
[Sat Nov 22 23:12:31.428232 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 63.135.161.148:28527] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:32.520307 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 63.135.161.148:28527] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:33.039770 2025] [:error] [pid 53479:tid 53550] [client 63.135.161.148:28527] [client 63.135.161.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSHS4W6cicFF3Aas-oTmvgAAAI4"]
[Sat Nov 22 23:12:34.068125 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 63.135.161.131:42925] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:34.563424 2025] [:error] [pid 53478:tid 53529] [client 63.135.161.131:42925] [client 63.135.161.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSHS4ghUYdXBbQswAdRBdAAAAFQ"]
[Sat Nov 22 23:12:35.638208 2025] [proxy_fcgi:error] [pid 44259:tid 44274] [client 63.135.161.152:56935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:36.700806 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 63.135.161.152:56935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:37.219125 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 63.135.161.152:56935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:37.696687 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 63.135.161.152:56935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:38.737107 2025] [:error] [pid 44259:tid 44266] [client 63.135.161.152:56935] [client 63.135.161.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSHS5nXe1xL-_YOdRmT0agAAAYQ"]
[Sat Nov 22 23:12:39.756629 2025] [proxy_fcgi:error] [pid 53478:tid 53517] [client 63.135.161.155:57161] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:40.332202 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 63.135.161.155:57161] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:40.823781 2025] [:error] [pid 53478:tid 53533] [client 63.135.161.155:57161] [client 63.135.161.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSHS6AhUYdXBbQswAdRBgQAAAFg"]
[Sat Nov 22 23:12:41.799068 2025] [:error] [pid 53477:tid 53501] [client 63.135.161.146:49749] [client 63.135.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSHS6X7Lu30Ku9O40aIHigAAABQ"]
[Sat Nov 22 23:12:42.832910 2025] [:error] [pid 44259:tid 44268] [client 63.135.161.147:23463] [client 63.135.161.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSHS6nXe1xL-_YOdRmT0cgAAAYY"]
[Sat Nov 22 23:12:45.418773 2025] [:error] [pid 53478:tid 53527] [client 173.239.211.73:36127] [client 173.239.211.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSHS7QhUYdXBbQswAdRBgwAAAFI"]
[Sat Nov 22 23:12:48.058805 2025] [:error] [pid 53477:tid 53483] [client 63.135.161.136:40947] [client 63.135.161.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSHS8H7Lu30Ku9O40aIHkAAAAAI"]
[Sat Nov 22 23:12:50.203504 2025] [proxy_fcgi:error] [pid 53478:tid 53526] [client 63.135.161.138:44843] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:51.758150 2025] [proxy_fcgi:error] [pid 53478:tid 53518] [client 63.135.161.138:44843] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:52.289138 2025] [:error] [pid 53478:tid 53532] [client 63.135.161.138:44843] [client 63.135.161.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSHS9AhUYdXBbQswAdRBiwAAAFc"]
[Sat Nov 22 23:12:53.305055 2025] [:error] [pid 9547:tid 9564] [client 63.135.161.133:24025] [client 63.135.161.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSHS9dClOR5qk7DoMeEYpAAAAUs"]
[Sat Nov 22 23:12:55.890025 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:56.401891 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:56.942562 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:57.448063 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:57.925567 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:58.415757 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:12:59.689997 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:00.312901 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:00.890997 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:01.429980 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:02.723235 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:03.256337 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:03.842492 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:05.079168 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:05.696920 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:06.231404 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:07.328571 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:07.918026 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:09.001696 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:09.515144 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:10.455892 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:11.007050 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:11.563984 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:12.233335 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:13.935527 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:14.530907 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:15.058790 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:15.607318 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:16.139585 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:17.283281 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:17.951769 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:19.775661 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:20.321370 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:20.820000 2025] [:error] [pid 53479:tid 53541] [client 63.135.161.132:20307] [client 63.135.161.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.132, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSHTEG6cicFF3Aas-oTnRwAAAIU"]
[Sat Nov 22 23:13:20.824131 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:22.590759 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:23.254152 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 63.135.161.132:20307] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:24.426792 2025] [:error] [pid 53479:tid 53543] [client 63.135.161.132:20307] [client 63.135.161.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aSHTFG6cicFF3Aas-oTnhgAAAIc"]
[Sat Nov 22 23:13:26.111852 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:26.607723 2025] [proxy_fcgi:error] [pid 53478:tid 53525] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:27.662040 2025] [proxy_fcgi:error] [pid 53478:tid 53523] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:28.351634 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:28.916764 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:30.150964 2025] [proxy_fcgi:error] [pid 53478:tid 53514] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:30.687457 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:31.191121 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:32.420246 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 63.135.161.133:57655] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:33.435708 2025] [:error] [pid 53478:tid 53527] [client 63.135.161.133:57655] [client 63.135.161.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSHTHQhUYdXBbQswAdRB0AAAAFI"]
[Sat Nov 22 23:13:34.423402 2025] [proxy_fcgi:error] [pid 53566:tid 53578] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:36.565130 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:40.104078 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:40.618267 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:41.105497 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:41.626983 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:42.204229 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:43.851705 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:44.342154 2025] [proxy_fcgi:error] [pid 53566:tid 53574] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:44.889741 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:45.376446 2025] [proxy_fcgi:error] [pid 53566:tid 53586] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:47.005564 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:47.464186 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:47.997255 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:49.102833 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:49.606322 2025] [proxy_fcgi:error] [pid 53566:tid 53578] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:50.626876 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:51.063666 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:51.539787 2025] [proxy_fcgi:error] [pid 53566:tid 53577] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:52.051203 2025] [proxy_fcgi:error] [pid 53566:tid 53591] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:53.085238 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 173.239.211.75:39435] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:53.551290 2025] [:error] [pid 53566:tid 53588] [client 173.239.211.75:39435] [client 173.239.211.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aSHTMcbSHDBkRbwMbd552AAAANQ"]
[Sat Nov 22 23:13:56.653519 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:57.206845 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:57.746671 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:58.290419 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:58.805830 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:59.444933 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:13:59.966498 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:00.520938 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:01.487518 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:02.055223 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:02.555602 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:03.035249 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:03.609103 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:04.348363 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:04.861505 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:05.376841 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:05.879332 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:06.988417 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:07.489785 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:07.999243 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:08.493864 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:09.069113 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:09.580331 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:10.185831 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:10.706030 2025] [proxy_fcgi:error] [pid 53479:tid 53551] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:11.278040 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:11.800936 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:12.334975 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:12.845068 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 63.135.161.139:60445] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:23.842657 2025] [:error] [pid 53479:tid 53557] [client 63.135.161.139:60445] [client 63.135.161.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSHTT26cicFF3Aas-oToEAAAAJU"]
[Sat Nov 22 23:14:25.378367 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:30.614798 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:31.154628 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:31.642113 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:33.736995 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:37.848815 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:38.386829 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:38.917156 2025] [proxy_fcgi:error] [pid 25856:tid 25875] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:39.434558 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:40.025880 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:40.513598 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 63.135.161.131:62905] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:41.515802 2025] [:error] [pid 25856:tid 25881] [client 63.135.161.131:62905] [client 63.135.161.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSHTYRsTP0wy94zKUvEMTQAAARc"]
[Sat Nov 22 23:14:42.848889 2025] [:error] [pid 44259:tid 44269] [client 173.239.211.74:55903] [client 173.239.211.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.211.74, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSHTYnXe1xL-_YOdRmT1YAAAAYc"]
[Sat Nov 22 23:14:42.852944 2025] [proxy_fcgi:error] [pid 44259:tid 44269] [client 173.239.211.74:55903] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:44.193031 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 173.239.211.74:55903] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:45.217125 2025] [:error] [pid 44259:tid 44267] [client 173.239.211.74:55903] [client 173.239.211.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSHTZXXe1xL-_YOdRmT1ZAAAAYU"]
[Sat Nov 22 23:14:46.733518 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 63.135.161.133:60223] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:49.355530 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 63.135.161.133:60223] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:51.182616 2025] [:error] [pid 9547:tid 9564] [client 63.135.161.133:60223] [client 63.135.161.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSHTa9ClOR5qk7DoMeEZZQAAAUs"]
[Sat Nov 22 23:14:52.189018 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:52.685934 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:53.204390 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:56.051105 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:57.268107 2025] [proxy_fcgi:error] [pid 53477:tid 53498] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:57.787984 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:14:58.339093 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:01.815982 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 63.135.161.133:38909] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:04.048668 2025] [:error] [pid 53477:tid 53493] [client 63.135.161.133:38909] [client 63.135.161.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSHTeH7Lu30Ku9O40aIIcwAAAAw"]
[Sat Nov 22 23:15:05.283438 2025] [:error] [pid 44259:tid 44286] [client 173.239.211.60:27255] [client 173.239.211.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSHTeXXe1xL-_YOdRmT1igAAAZg"]
[Sat Nov 22 23:15:09.365961 2025] [:error] [pid 44259:tid 44266] [client 173.239.211.62:32915] [client 173.239.211.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSHTfXXe1xL-_YOdRmT1jgAAAYQ"]
[Sat Nov 22 23:15:10.342398 2025] [:error] [pid 9547:tid 9575] [client 173.239.211.73:24681] [client 173.239.211.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSHTftClOR5qk7DoMeEZewAAAVY"]
[Sat Nov 22 23:15:11.369473 2025] [proxy_fcgi:error] [pid 44259:tid 44263] [client 63.135.161.154:38601] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:11.908223 2025] [proxy_fcgi:error] [pid 44259:tid 44267] [client 63.135.161.154:38601] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:12.988678 2025] [:error] [pid 44259:tid 44270] [client 63.135.161.154:38601] [client 63.135.161.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.154, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSHTgHXe1xL-_YOdRmT1lgAAAYg"]
[Sat Nov 22 23:15:16.939781 2025] [proxy_fcgi:error] [pid 44259:tid 44271] [client 63.135.161.154:38601] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:18.305449 2025] [proxy_fcgi:error] [pid 44259:tid 44270] [client 63.135.161.154:38601] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:24.362648 2025] [:error] [pid 44259:tid 44271] [client 63.135.161.154:38601] [client 63.135.161.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSHTjHXe1xL-_YOdRmT1yAAAAYk"]
[Sat Nov 22 23:15:25.477133 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 63.135.161.135:22949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:26.995133 2025] [:error] [pid 53477:tid 53494] [client 63.135.161.135:22949] [client 63.135.161.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.135, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSHTjn7Lu30Ku9O40aIIkwAAAA0"]
[Sat Nov 22 23:15:28.290633 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 63.135.161.135:22949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:29.284951 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 63.135.161.135:22949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:29.825627 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 63.135.161.135:22949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:30.914732 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 63.135.161.135:22949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:31.466493 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 63.135.161.135:22949] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:32.745125 2025] [:error] [pid 53477:tid 53495] [client 63.135.161.135:22949] [client 63.135.161.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSHTlH7Lu30Ku9O40aIIoQAAAA4"]
[Sat Nov 22 23:15:33.728075 2025] [:error] [pid 53566:tid 53581] [client 63.135.161.153:56157] [client 63.135.161.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSHTlcbSHDBkRbwMbd56tAAAAM0"]
[Sat Nov 22 23:15:34.974031 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:35.459945 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:35.934922 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:38.448752 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:40.482013 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:42.532817 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:48.037716 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:48.529869 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:49.074520 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 63.135.161.152:47135] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:51.265635 2025] [:error] [pid 53477:tid 53486] [client 63.135.161.152:47135] [client 63.135.161.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSHTp37Lu30Ku9O40aIIywAAAAU"]
[Sat Nov 22 23:15:55.246405 2025] [:error] [pid 44259:tid 44274] [client 63.135.161.140:57807] [client 63.135.161.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aSHTq3Xe1xL-_YOdRmT17gAAAYw"]
[Sat Nov 22 23:15:58.040895 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 63.135.161.146:56341] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:15:59.442488 2025] [:error] [pid 53478:tid 53525] [client 63.135.161.146:56341] [client 63.135.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSHTrwhUYdXBbQswAdRCOAAAAFA"]
[Sat Nov 22 23:16:03.179787 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 173.239.211.67:23379] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:04.999617 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 173.239.211.67:23379] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:05.439631 2025] [:error] [pid 53566:tid 53577] [client 173.239.211.67:23379] [client 173.239.211.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aSHTtcbSHDBkRbwMbd560AAAAMk"]
[Sat Nov 22 23:16:06.619463 2025] [:error] [pid 53566:tid 53574] [client 173.239.211.74:54967] [client 173.239.211.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSHTtsbSHDBkRbwMbd560QAAAMY"]
[Sat Nov 22 23:16:07.681751 2025] [:error] [pid 25856:tid 25875] [client 63.135.161.139:52151] [client 63.135.161.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.139, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSHTtxsTP0wy94zKUvENBgAAARE"]
[Sat Nov 22 23:16:09.204095 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 63.135.161.139:52151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:11.023608 2025] [:error] [pid 25856:tid 25869] [client 63.135.161.139:52151] [client 63.135.161.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aSHTuxsTP0wy94zKUvENDAAAAQs"]
[Sat Nov 22 23:16:12.001858 2025] [proxy_fcgi:error] [pid 44259:tid 44276] [client 173.239.211.68:29825] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:13.179587 2025] [proxy_fcgi:error] [pid 44259:tid 44267] [client 173.239.211.68:29825] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:15.829885 2025] [:error] [pid 44259:tid 44262] [client 173.239.211.68:29825] [client 173.239.211.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSHTv3Xe1xL-_YOdRmT2CQAAAYA"]
[Sat Nov 22 23:16:16.934357 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 63.135.161.150:30761] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:17.968558 2025] [:error] [pid 53566:tid 53569] [client 63.135.161.150:30761] [client 63.135.161.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSHTwcbSHDBkRbwMbd562AAAAME"]
[Sat Nov 22 23:16:19.547338 2025] [proxy_fcgi:error] [pid 44259:tid 44269] [client 173.239.211.61:51525] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:20.020800 2025] [:error] [pid 44259:tid 44265] [client 173.239.211.61:51525] [client 173.239.211.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSHTxHXe1xL-_YOdRmT2EQAAAYM"]
[Sat Nov 22 23:16:22.036160 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 173.239.211.61:30395] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:22.524789 2025] [:error] [pid 53479:tid 53540] [client 173.239.211.61:30395] [client 173.239.211.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.211.61, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSHTxm6cicFF3Aas-oToogAAAIQ"]
[Sat Nov 22 23:16:24.802138 2025] [:error] [pid 53479:tid 53544] [client 173.239.211.61:30395] [client 173.239.211.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSHTyG6cicFF3Aas-oToqgAAAIg"]
[Sat Nov 22 23:16:25.769469 2025] [:error] [pid 44259:tid 44281] [client 63.135.161.151:64581] [client 63.135.161.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSHTyXXe1xL-_YOdRmT2GgAAAZM"]
[Sat Nov 22 23:16:27.911428 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 63.135.161.137:22973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:28.444795 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 63.135.161.137:22973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:29.983866 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 63.135.161.137:22973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:31.016368 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 63.135.161.137:22973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:31.546940 2025] [proxy_fcgi:error] [pid 53479:tid 53543] [client 63.135.161.137:22973] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:32.548417 2025] [:error] [pid 53479:tid 53555] [client 63.135.161.137:22973] [client 63.135.161.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSHT0G6cicFF3Aas-oTozQAAAJM"]
[Sat Nov 22 23:16:35.715038 2025] [:error] [pid 25856:tid 25866] [client 63.135.161.139:20289] [client 63.135.161.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSHT0xsTP0wy94zKUvENPwAAAQg"]
[Sat Nov 22 23:16:36.758806 2025] [:error] [pid 44259:tid 44285] [client 63.135.161.133:46505] [client 63.135.161.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSHT1HXe1xL-_YOdRmT2MwAAAZc"]
[Sat Nov 22 23:16:38.754152 2025] [:error] [pid 53477:tid 53498] [client 63.135.161.137:49581] [client 63.135.161.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSHT1n7Lu30Ku9O40aIJPwAAABE"]
[Sat Nov 22 23:16:39.786498 2025] [:error] [pid 53566:tid 53585] [client 63.135.161.153:53923] [client 63.135.161.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSHT18bSHDBkRbwMbd565wAAANE"]
[Sat Nov 22 23:16:41.402519 2025] [autoindex:error] [pid 9547:tid 9567] [client 173.239.211.65:37895] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:16:42.924048 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 173.239.211.65:37895] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:43.501806 2025] [:error] [pid 9547:tid 9558] [client 173.239.211.65:37895] [client 173.239.211.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSHT29ClOR5qk7DoMeEalQAAAUU"]
[Sat Nov 22 23:16:46.701723 2025] [proxy_fcgi:error] [pid 44259:tid 44269] [client 63.135.161.151:48517] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:47.216496 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 63.135.161.151:48517] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:47.737358 2025] [:error] [pid 44259:tid 44265] [client 63.135.161.151:48517] [client 63.135.161.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSHT33Xe1xL-_YOdRmT2UAAAAYM"]
[Sat Nov 22 23:16:48.754734 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 63.135.161.156:29227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:49.269854 2025] [proxy_fcgi:error] [pid 53478:tid 53527] [client 63.135.161.156:29227] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:49.801085 2025] [:error] [pid 53478:tid 53522] [client 63.135.161.156:29227] [client 63.135.161.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSHT4QhUYdXBbQswAdRCUQAAAE0"]
[Sat Nov 22 23:16:50.803969 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 63.135.161.134:54635] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:16:51.313213 2025] [:error] [pid 25856:tid 25878] [client 63.135.161.134:54635] [client 63.135.161.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSHT4xsTP0wy94zKUvENbgAAARQ"]
[Sat Nov 22 23:16:54.829775 2025] [:error] [pid 44259:tid 44276] [client 63.135.161.131:29515] [client 63.135.161.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSHT5nXe1xL-_YOdRmT2WwAAAY4"]
[Sat Nov 22 23:16:55.902349 2025] [:error] [pid 25856:tid 25869] [client 63.135.161.151:28025] [client 63.135.161.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSHT5xsTP0wy94zKUvENcwAAAQs"]
[Sat Nov 22 23:16:57.509876 2025] [:error] [pid 53479:tid 53559] [client 63.135.161.140:27819] [client 63.135.161.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSHT6W6cicFF3Aas-oTpCwAAAJc"]
[Sat Nov 22 23:16:59.674611 2025] [proxy_fcgi:error] [pid 53479:tid 53544] [client 63.135.161.149:32797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:02.462710 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 63.135.161.149:32797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:02.995718 2025] [:error] [pid 53479:tid 53538] [client 63.135.161.149:32797] [client 63.135.161.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.149, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSHT7m6cicFF3Aas-oTpGAAAAII"]
[Sat Nov 22 23:17:05.545964 2025] [:error] [pid 53479:tid 53539] [client 63.135.161.149:32797] [client 63.135.161.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSHT8W6cicFF3Aas-oTpHAAAAIM"]
[Sat Nov 22 23:17:07.731457 2025] [:error] [pid 53566:tid 53592] [client 63.135.161.137:29521] [client 63.135.161.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSHT88bSHDBkRbwMbd569AAAANg"]
[Sat Nov 22 23:17:08.885838 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 63.135.161.146:64855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:09.338209 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 63.135.161.146:64855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:11.471327 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 63.135.161.146:64855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:13.023449 2025] [:error] [pid 25856:tid 25863] [client 63.135.161.146:64855] [client 63.135.161.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.146, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSHT-RsTP0wy94zKUvENkQAAAQU"]
[Sat Nov 22 23:17:13.487679 2025] [:error] [pid 25856:tid 25877] [client 63.135.161.146:64855] [client 63.135.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSHT-RsTP0wy94zKUvENkgAAARM"]
[Sat Nov 22 23:17:14.552422 2025] [:error] [pid 9547:tid 9567] [client 63.135.161.138:52177] [client 63.135.161.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aSHT-tClOR5qk7DoMeEatQAAAU4"]
[Sat Nov 22 23:17:15.661719 2025] [:error] [pid 53477:tid 53481] [client 63.135.161.146:43813] [client 63.135.161.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSHT-37Lu30Ku9O40aIJXAAAAAA"]
[Sat Nov 22 23:17:18.267925 2025] [proxy_fcgi:error] [pid 53566:tid 53588] [client 173.239.211.75:30921] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:18.761564 2025] [:error] [pid 53566:tid 53572] [client 173.239.211.75:30921] [client 173.239.211.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSHT_sbSHDBkRbwMbd56_QAAAMQ"]
[Sat Nov 22 23:17:20.871771 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 63.135.161.147:30769] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:21.428223 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 63.135.161.147:30769] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:24.078186 2025] [proxy_fcgi:error] [pid 9547:tid 9556] [client 63.135.161.147:30769] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:25.724577 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 63.135.161.147:30769] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:26.233867 2025] [:error] [pid 9547:tid 9559] [client 63.135.161.147:30769] [client 63.135.161.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSHUBtClOR5qk7DoMeEawwAAAUY"]
[Sat Nov 22 23:17:27.821105 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 63.135.161.149:27641] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:28.948461 2025] [:error] [pid 53566:tid 53577] [client 63.135.161.149:27641] [client 63.135.161.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSHUCMbSHDBkRbwMbd57BAAAAMk"]
[Sat Nov 22 23:17:30.616521 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 63.135.161.154:44537] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 23:17:32.144637 2025] [:error] [pid 9547:tid 9573] [client 63.135.161.154:44537] [client 63.135.161.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSHUDNClOR5qk7DoMeEayQAAAVQ"]
[Sat Nov 22 23:17:33.768235 2025] [:error] [pid 53477:tid 53484] [client 173.239.211.59:22055] [client 173.239.211.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSHUDX7Lu30Ku9O40aIJaAAAAAM"]
[Sat Nov 22 23:17:35.284082 2025] [:error] [pid 44259:tid 44276] [client 63.135.161.139:55215] [client 63.135.161.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSHUD3Xe1xL-_YOdRmT2mgAAAY4"]
[Sat Nov 22 23:17:40.908594 2025] [:error] [pid 25856:tid 25871] [client 63.135.161.155:49869] [client 63.135.161.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSHUFBsTP0wy94zKUvENwQAAAQ0"]
[Sat Nov 22 23:17:42.435150 2025] [:error] [pid 44259:tid 44286] [client 173.239.211.74:62529] [client 173.239.211.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSHUFnXe1xL-_YOdRmT2owAAAZg"]
[Sat Nov 22 23:17:44.463946 2025] [:error] [pid 53566:tid 53583] [client 173.239.211.61:33661] [client 173.239.211.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSHUGMbSHDBkRbwMbd57EAAAAM8"]
[Sat Nov 22 23:18:02.783801 2025] [autoindex:error] [pid 53566:tid 53579] [client 63.135.161.153:55385] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:18:03.572606 2025] [autoindex:error] [pid 53566:tid 53576] [client 63.135.161.153:55385] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:18:05.317654 2025] [autoindex:error] [pid 53566:tid 53585] [client 63.135.161.153:55385] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:18:31.471346 2025] [autoindex:error] [pid 53566:tid 53575] [client 63.135.161.153:55385] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:18:46.866719 2025] [proxy_fcgi:error] [pid 53477:tid 53494] (70007)The timeout specified has expired: [client 63.135.161.155:38185] AH01075: Error dispatching request to : (polling)
[Sat Nov 22 23:19:50.613216 2025] [autoindex:error] [pid 44259:tid 44286] [client 63.135.161.137:44089] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:22:07.191294 2025] [autoindex:error] [pid 25856:tid 25873] [client 173.239.211.64:25171] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 04:02:58.352472 2025] [:error] [pid 56181:tid 56264] [client 222.79.104.23:44109] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aSIW8skLwhNGnt-ns6aV1QAAAJc"]
[Sun Nov 23 05:37:21.107395 2025] [:error] [pid 38824:tid 38842] [client 216.126.225.91:45392] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aSItEU8WZjXLvbHTHPfJVwAAAM8"]
[Sun Nov 23 10:07:37.005639 2025] [:error] [pid 38739:tid 38792] [client 222.79.104.23:36714] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSJsaAdvEgJm2n2cDmqEoQAAAFc"]
[Sun Nov 23 14:37:48.264624 2025] [:error] [pid 38738:tid 38764] [client 43.157.52.37:54128] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSKrvAytc6TL9XavPmOZdQAAABY"]
[Sun Nov 23 15:56:51.021418 2025] [:error] [pid 38740:tid 38817] [client 176.65.132.18:39588] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aSK-Qw13QPZSi6O8umVYgwAAAJU"]
[Sun Nov 23 16:34:18.132676 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.260632 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.358342 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.483274 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.606091 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.739147 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.836894 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:18.946414 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:19.100875 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:19.564835 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:19.797303 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:19.896378 2025] [proxy_fcgi:error] [pid 38738:tid 38742] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.023111 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.215937 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.352299 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.454177 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.548973 2025] [proxy_fcgi:error] [pid 38738:tid 38764] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.650257 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:20.867818 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.39:38763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:22.808487 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.39:38763] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLHDgytc6TL9XavPmPJzAAAAAE"]
[Sun Nov 23 16:34:23.380785 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.74:64245] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLHDw13QPZSi6O8umVlggAAAI0"]
[Sun Nov 23 16:34:23.993192 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.17:45485] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:24.305698 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.17:45485] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aSLHEA13QPZSi6O8umVljwAAAJU"]
[Sun Nov 23 16:34:25.679418 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.10:60069] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:25.780683 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.10:60069] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:25.909723 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.10:60069] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSLHEQ13QPZSi6O8umVlqwAAAII"]
[Sun Nov 23 16:34:26.260716 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 140.99.1.69:56763] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:26.899224 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.69:56763] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLHEgytc6TL9XavPmPKJwAAABA"]
[Sun Nov 23 16:34:27.192702 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.49:28011] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLHEwdvEgJm2n2cDmr8LwAAAFE"]
[Sun Nov 23 16:34:27.434174 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.69:35805] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLHEw13QPZSi6O8umVlwQAAAJI"]
[Sun Nov 23 16:34:27.973987 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.3:32075] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLHEwytc6TL9XavPmPKOQAAABE"]
[Sun Nov 23 16:34:28.177709 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.13:28403] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLHFNiQFwsyXQDhwyCDqAAAARQ"]
[Sun Nov 23 16:34:28.360658 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.15:48603] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLHFA13QPZSi6O8umVl1AAAAIQ"]
[Sun Nov 23 16:34:28.812193 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.77:25699] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLHFNiQFwsyXQDhwyCDtgAAAQk"]
[Sun Nov 23 16:34:29.020603 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.30:44071] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:29.304965 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.30:44071] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aSLHFQdvEgJm2n2cDmr8VQAAAEw"]
[Sun Nov 23 16:34:29.623626 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.26:26169] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:29.715037 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.26:26169] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLHFQ13QPZSi6O8umVl8QAAAIo"]
[Sun Nov 23 16:34:30.071052 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.24:64691] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLHFgdvEgJm2n2cDmr8XAAAAEM"]
[Sun Nov 23 16:34:30.300637 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.16:50377] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:30.420292 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.16:50377] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLHFg13QPZSi6O8umVmAgAAAIQ"]
[Sun Nov 23 16:34:30.622615 2025] [proxy_fcgi:error] [pid 44652:tid 44724] [client 140.99.1.77:59155] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:31.083603 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 140.99.1.77:59155] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:31.399463 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.77:59155] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLHF9iQFwsyXQDhwyCD2QAAAQ8"]
[Sun Nov 23 16:34:31.584216 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.7:44137] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:31.753244 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.7:44137] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLHF9iQFwsyXQDhwyCD3wAAAQ4"]
[Sun Nov 23 16:34:32.069607 2025] [proxy_fcgi:error] [pid 44652:tid 44707] [client 140.99.1.53:45461] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:32.303048 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.53:45461] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSLHGNiQFwsyXQDhwyCD5AAAARA"]
[Sun Nov 23 16:34:32.660563 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.49:50201] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLHGNiQFwsyXQDhwyCD6gAAARM"]
[Sun Nov 23 16:34:33.115608 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 140.99.1.10:54435] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:33.217616 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.10:54435] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:33.444998 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.10:54435] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLHGdiQFwsyXQDhwyCEAAAAAQ8"]
[Sun Nov 23 16:34:33.828333 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.6:45611] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLHGdiQFwsyXQDhwyCEDAAAAQI"]
[Sun Nov 23 16:34:34.240869 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.74:25247] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLHGg13QPZSi6O8umVmVAAAAJY"]
[Sun Nov 23 16:34:36.956444 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.6:34407] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLHHA13QPZSi6O8umVmjQAAAIE"]
[Sun Nov 23 16:34:37.166464 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.70:38323] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLHHQdvEgJm2n2cDmr80QAAAFU"]
[Sun Nov 23 16:34:37.726614 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 140.99.1.67:59175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:37.895724 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.67:59175] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLHHU8WZjXLvbHTHPeLDQAAANE"]
[Sun Nov 23 16:34:38.143977 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.68:22907] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSLHHk8WZjXLvbHTHPeLDwAAAMs"]
[Sun Nov 23 16:34:38.332070 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.74:39445] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLHHg13QPZSi6O8umVmngAAAIY"]
[Sun Nov 23 16:34:38.839018 2025] [proxy_fcgi:error] [pid 38824:tid 38844] [client 140.99.1.67:52139] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:39.139584 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.67:52139] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:39.243621 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.67:52139] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:39.647409 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.67:52139] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aSLHH08WZjXLvbHTHPeLKwAAAM8"]
[Sun Nov 23 16:34:40.422663 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.44:51191] [client 140.99.1.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.44, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLHIE8WZjXLvbHTHPeLOgAAAMw"]
[Sun Nov 23 16:34:40.536634 2025] [proxy_fcgi:error] [pid 38824:tid 38833] [client 140.99.1.44:51191] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:42.012637 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 140.99.1.44:51191] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:42.112000 2025] [proxy_fcgi:error] [pid 38824:tid 38833] [client 140.99.1.44:51191] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:42.712806 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.44:51191] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLHIk8WZjXLvbHTHPeLXQAAAM4"]
[Sun Nov 23 16:34:43.048629 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 140.99.1.10:33625] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:43.172010 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.10:33625] [client 140.99.1.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.10, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLHI08WZjXLvbHTHPeLZgAAAMs"]
[Sun Nov 23 16:34:43.466192 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.10:33625] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aSLHI08WZjXLvbHTHPeLaQAAAM8"]
[Sun Nov 23 16:34:43.696946 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.62:39605] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:43.843001 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 140.99.1.62:39605] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:44.217726 2025] [proxy_fcgi:error] [pid 38739:tid 38783] [client 140.99.1.62:39605] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:44.420613 2025] [proxy_fcgi:error] [pid 38739:tid 38770] [client 140.99.1.62:39605] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:44.669575 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.62:39605] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLHJAdvEgJm2n2cDmr9igAAAEc"]
[Sun Nov 23 16:34:44.884080 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.14:53475] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:45.308132 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.14:53475] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:45.526616 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.14:53475] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:45.786625 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.14:53475] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:45.895723 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.14:53475] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLHJQytc6TL9XavPmPLowAAAAU"]
[Sun Nov 23 16:34:46.191615 2025] [proxy_fcgi:error] [pid 38824:tid 38835] [client 140.99.1.17:58363] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:46.301566 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.17:58363] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:46.399019 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.17:58363] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLHJk8WZjXLvbHTHPeLnwAAAMs"]
[Sun Nov 23 16:34:46.847092 2025] [proxy_fcgi:error] [pid 38824:tid 38829] [client 140.99.1.50:24043] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:47.111183 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.50:24043] [client 140.99.1.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.50, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLHJ08WZjXLvbHTHPeLsAAAAMM"]
[Sun Nov 23 16:34:47.217201 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.50:24043] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLHJ08WZjXLvbHTHPeLsQAAAM4"]
[Sun Nov 23 16:34:48.659807 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 140.99.1.72:60617] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:49.138324 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.72:60617] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:49.381393 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 140.99.1.72:60617] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:49.474247 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.72:60617] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLHKU8WZjXLvbHTHPeL2gAAANE"]
[Sun Nov 23 16:34:49.681390 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.39:26941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:50.020267 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.39:26941] [client 140.99.1.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.39, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLHKtiQFwsyXQDhwyCGIQAAAQU"]
[Sun Nov 23 16:34:50.145648 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.39:26941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:50.241862 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 140.99.1.39:26941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:50.384099 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.39:26941] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:50.477201 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.39:26941] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLHKtiQFwsyXQDhwyCGMAAAAQg"]
[Sun Nov 23 16:34:50.684595 2025] [proxy_fcgi:error] [pid 44652:tid 44707] [client 140.99.1.76:21911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:50.835884 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.76:21911] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aSLHKtiQFwsyXQDhwyCGOQAAAQ0"]
[Sun Nov 23 16:34:51.706287 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 140.99.1.74:33151] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:51.920906 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.74:33151] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLHK08WZjXLvbHTHPeMCAAAANc"]
[Sun Nov 23 16:34:52.307457 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.30:60275] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:52.402527 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.30:60275] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLHLAytc6TL9XavPmPMcQAAABc"]
[Sun Nov 23 16:34:52.610322 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.71:23087] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLHLNiQFwsyXQDhwyCGVQAAAQg"]
[Sun Nov 23 16:34:52.806083 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 140.99.1.10:58915] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:52.903236 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.10:58915] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:52.997831 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.10:58915] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:53.452068 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.10:58915] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLHLdiQFwsyXQDhwyCGbQAAARU"]
[Sun Nov 23 16:34:53.746744 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.2:57689] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLHLQytc6TL9XavPmPMrQAAAAQ"]
[Sun Nov 23 16:34:54.378414 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.71:34557] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aSLHLgdvEgJm2n2cDmr-nwAAAE0"]
[Sun Nov 23 16:34:54.573614 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 140.99.1.11:20289] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:54.788327 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 140.99.1.11:20289] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:54.933771 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.11:20289] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLHLk8WZjXLvbHTHPeMWAAAANY"]
[Sun Nov 23 16:34:55.154755 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 140.99.1.17:32813] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:55.444238 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.17:32813] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aSLHLwdvEgJm2n2cDmr-sAAAAFE"]
[Sun Nov 23 16:34:55.771518 2025] [proxy_fcgi:error] [pid 38738:tid 38766] [client 140.99.1.33:52179] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:56.138033 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.33:52179] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLHMAytc6TL9XavPmPM-gAAABg"]
[Sun Nov 23 16:34:56.548874 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.38:50771] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:57.034620 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.38:50771] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:57.337601 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.38:50771] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:57.432843 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.38:50771] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLHMQ13QPZSi6O8umVoFQAAAJg"]
[Sun Nov 23 16:34:57.756050 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.10:56723] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLHMU8WZjXLvbHTHPeMkAAAAMI"]
[Sun Nov 23 16:34:58.060028 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.75:62783] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLHMtiQFwsyXQDhwyCGxwAAARE"]
[Sun Nov 23 16:34:58.314167 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.24:45889] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLHMg13QPZSi6O8umVoJgAAAI4"]
[Sun Nov 23 16:34:58.567643 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 140.99.1.5:41679] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:58.753867 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.5:41679] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLHMk8WZjXLvbHTHPeMpAAAANU"]
[Sun Nov 23 16:34:58.941564 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.63:64349] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLHMgytc6TL9XavPmPNXgAAAAU"]
[Sun Nov 23 16:34:59.183858 2025] [proxy_fcgi:error] [pid 38739:tid 38781] [client 140.99.1.20:56091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:59.469834 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.20:56091] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSLHMwdvEgJm2n2cDmr_DAAAAEc"]
[Sun Nov 23 16:34:59.686118 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.78:57559] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLHMwdvEgJm2n2cDmr_EwAAAFg"]
[Sun Nov 23 16:34:59.889970 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.3:30379] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLHMwdvEgJm2n2cDmr_FAAAAFc"]
[Sun Nov 23 16:35:00.182469 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.69:44025] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLHNA13QPZSi6O8umVocgAAAIU"]
[Sun Nov 23 16:35:00.477613 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.32:39353] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLHNAdvEgJm2n2cDmr_IQAAAEI"]
[Sun Nov 23 16:35:01.129379 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.38:25083] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLHNQ13QPZSi6O8umVomQAAAIM"]
[Sun Nov 23 16:35:01.387946 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.14:37027] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:01.865137 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 140.99.1.14:37027] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:02.049518 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.14:37027] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLHNtiQFwsyXQDhwyCG-gAAAQ4"]
[Sun Nov 23 16:35:02.430003 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.42:59069] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:02.534617 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 140.99.1.42:59069] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:03.006276 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.42:59069] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:03.195223 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.42:59069] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLHNw13QPZSi6O8umVo5QAAAIg"]
[Sun Nov 23 16:35:03.784071 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.77:63379] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLHNwytc6TL9XavPmPNsgAAAAU"]
[Sun Nov 23 16:35:03.993565 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.15:40439] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLHNwdvEgJm2n2cDmr_aQAAAEY"]
[Sun Nov 23 16:35:05.002692 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.9:34599] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLHOU8WZjXLvbHTHPeNOQAAAMM"]
[Sun Nov 23 16:35:05.414661 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 140.99.1.62:63505] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:05.602915 2025] [proxy_fcgi:error] [pid 38740:tid 38799] [client 140.99.1.62:63505] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:05.735277 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.62:63505] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:05.859708 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.62:63505] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:06.414631 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.62:63505] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLHOg13QPZSi6O8umVpNwAAAIM"]
[Sun Nov 23 16:35:06.608871 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.62:58199] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLHOgdvEgJm2n2cDmr_sAAAAFQ"]
[Sun Nov 23 16:35:06.842569 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.63:25121] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLHOtiQFwsyXQDhwyCHXAAAARc"]
[Sun Nov 23 16:35:07.180307 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.6:56305] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLHO9iQFwsyXQDhwyCHYQAAAQc"]
[Sun Nov 23 16:35:07.367189 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.63:58233] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLHOw13QPZSi6O8umVpXwAAAJQ"]
[Sun Nov 23 16:35:07.608399 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.32:44639] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLHO9iQFwsyXQDhwyCHbAAAARA"]
[Sun Nov 23 16:35:08.029894 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.75:29147] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLHPAdvEgJm2n2cDmr_0gAAAEc"]
[Sun Nov 23 16:35:08.246868 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.5:36623] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLHPAdvEgJm2n2cDmr_2QAAAEo"]
[Sun Nov 23 16:35:08.467864 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.52:25109] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLHPAytc6TL9XavPmPODAAAAAg"]
[Sun Nov 23 16:35:08.742816 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.3:29709] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLHPAdvEgJm2n2cDmr_7AAAAEQ"]
[Sun Nov 23 16:35:09.137089 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.11:53141] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLHPQytc6TL9XavPmPOGQAAAA4"]
[Sun Nov 23 16:35:09.546009 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.26:43961] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLHPQytc6TL9XavPmPOHgAAABQ"]
[Sun Nov 23 16:35:09.763859 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 140.99.1.9:33109] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:10.048194 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.9:33109] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLHPgdvEgJm2n2cDmoAEAAAAEE"]
[Sun Nov 23 16:35:10.457866 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.53:49051] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSLHPgytc6TL9XavPmPOPQAAAAI"]
[Sun Nov 23 16:35:11.023786 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 140.99.1.49:46169] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:11.177308 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.49:46169] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLHPwytc6TL9XavPmPOVgAAAAY"]
[Sun Nov 23 16:35:11.516630 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.75:38473] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:11.642608 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.75:38473] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:11.767630 2025] [proxy_fcgi:error] [pid 38740:tid 38812] [client 140.99.1.75:38473] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:12.222228 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.75:38473] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLHQA13QPZSi6O8umVp4AAAAJQ"]
[Sun Nov 23 16:35:12.416369 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.50:60327] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:12.517560 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.50:60327] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLHQAytc6TL9XavPmPOgQAAAAY"]
[Sun Nov 23 16:35:13.127692 2025] [proxy_fcgi:error] [pid 38738:tid 38752] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:13.263083 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:13.418145 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:13.669625 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:14.008597 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:14.119374 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:14.223631 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:14.393213 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:14.717800 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.78:35559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:14.861568 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.78:35559] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLHQgytc6TL9XavPmPOzAAAAAk"]
[Sun Nov 23 16:35:15.051670 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.42:25347] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLHQ9iQFwsyXQDhwyCIOgAAAQg"]
[Sun Nov 23 16:35:15.303177 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.13:37347] [client 140.99.1.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.13, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSLHQ08WZjXLvbHTHPeOPgAAAME"]
[Sun Nov 23 16:35:15.313613 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 140.99.1.13:37347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:15.449613 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.13:37347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:15.645657 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.13:37347] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLHQ08WZjXLvbHTHPeORAAAAMA"]
[Sun Nov 23 16:35:15.990752 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.24:61789] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:16.087736 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.24:61789] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLHRA13QPZSi6O8umVqcwAAAIA"]
[Sun Nov 23 16:35:16.374497 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.69:48707] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLHRA13QPZSi6O8umVqgAAAAI8"]
[Sun Nov 23 16:35:17.076729 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.73:35539] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLHRQytc6TL9XavPmPPLQAAAA4"]
[Sun Nov 23 16:35:17.268817 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.15:57827] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aSLHRQdvEgJm2n2cDmoAmAAAAFI"]
[Sun Nov 23 16:35:18.033602 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.78:37555] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:18.232872 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.78:37555] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLHRg13QPZSi6O8umVq0gAAAI4"]
[Sun Nov 23 16:35:18.754422 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.10:64975] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:18.962567 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.10:64975] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aSLHRtiQFwsyXQDhwyCInQAAAQg"]
[Sun Nov 23 16:35:19.192430 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.14:23521] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aSLHR9iQFwsyXQDhwyCIoAAAARU"]
[Sun Nov 23 16:35:19.492887 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 140.99.1.52:62981] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:19.644602 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.52:62981] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLHR08WZjXLvbHTHPeOqQAAANM"]
[Sun Nov 23 16:35:20.009178 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.47:63773] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLHSAdvEgJm2n2cDmoA3QAAAE8"]
[Sun Nov 23 16:35:20.474261 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.43:63013] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:20.631797 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.43:63013] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:20.854656 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.43:63013] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:21.048526 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.43:63013] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLHSdiQFwsyXQDhwyCIwgAAARE"]
[Sun Nov 23 16:35:21.267033 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.26:20381] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLHSQdvEgJm2n2cDmoBBAAAAFM"]
[Sun Nov 23 16:35:21.467638 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 140.99.1.65:47067] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:21.584636 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 140.99.1.65:47067] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:21.796126 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.65:47067] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:21.912857 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.65:47067] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSLHSQdvEgJm2n2cDmoBFgAAAE4"]
[Sun Nov 23 16:35:22.104695 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.44:61125] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLHStiQFwsyXQDhwyCI0AAAAQ4"]
[Sun Nov 23 16:35:22.309094 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.20:30271] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLHSk8WZjXLvbHTHPeO6AAAANU"]
[Sun Nov 23 16:35:22.925618 2025] [proxy_fcgi:error] [pid 38824:tid 38829] [client 140.99.1.71:53729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:23.021656 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.71:53729] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSLHS08WZjXLvbHTHPePBwAAANA"]
[Sun Nov 23 16:35:23.300863 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.33:60027] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSLHSwdvEgJm2n2cDmoBOAAAAFE"]
[Sun Nov 23 16:35:23.524624 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.76:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:23.627046 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.76:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:23.848149 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 140.99.1.76:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:24.264983 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.76:48049] [client 140.99.1.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.76, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aSLHTNiQFwsyXQDhwyCI-AAAARY"]
[Sun Nov 23 16:35:24.464308 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.76:48049] File does not exist: /home/pumpbooking/public_html/worm.PhP
[Sun Nov 23 16:35:24.584959 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.76:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:24.719630 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.76:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:24.823619 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 140.99.1.76:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:24.915858 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.76:48049] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLHTNiQFwsyXQDhwyCJAgAAAQA"]
[Sun Nov 23 16:35:25.102020 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.10:35707] [client 140.99.1.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.10, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSLHTQ13QPZSi6O8umVr5wAAAJE"]
[Sun Nov 23 16:35:25.208391 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:25.412623 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:25.547716 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:25.753954 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:25.963206 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:26.305662 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:27.186660 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:27.292037 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:27.397439 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:27.775629 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:27.996971 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:28.107619 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.10:35707] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:28.296094 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.10:35707] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSLHUA13QPZSi6O8umVsVwAAAIo"]
[Sun Nov 23 16:35:28.655638 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.20:53877] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:28.766629 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 140.99.1.20:53877] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:28.878080 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.20:53877] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSLHUAytc6TL9XavPmPQrgAAAA8"]
[Sun Nov 23 16:35:29.283610 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.68:36545] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:29.460965 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.68:36545] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSLHUQytc6TL9XavPmPQyQAAAA8"]
[Sun Nov 23 16:35:30.042630 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 140.99.1.69:47183] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:30.288611 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.69:47183] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:30.395723 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.69:47183] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:30.747607 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 140.99.1.69:47183] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:30.866605 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.69:47183] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:31.065630 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.69:47183] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSLHUwytc6TL9XavPmPRCQAAAAc"]
[Sun Nov 23 16:35:31.424621 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 140.99.1.37:60029] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:31.570161 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 140.99.1.37:60029] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:31.663310 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.37:60029] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSLHU08WZjXLvbHTHPeQKAAAAME"]
[Sun Nov 23 16:35:31.975440 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.17:27327] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSLHUw13QPZSi6O8umVsugAAAJg"]
[Sun Nov 23 16:35:32.368085 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.11:22723] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:32.723613 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.11:22723] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:32.839626 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.11:22723] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:32.954914 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.11:22723] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSLHVA13QPZSi6O8umVsxgAAAIM"]
[Sun Nov 23 16:35:33.169139 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.16:42365] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSLHVU8WZjXLvbHTHPeQPgAAAMQ"]
[Sun Nov 23 16:35:34.054614 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.39:64307] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:34.260216 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.39:64307] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSLHVgytc6TL9XavPmPRfwAAABY"]
[Sun Nov 23 16:35:34.673794 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.26:34379] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aSLHVk8WZjXLvbHTHPeQbwAAAMU"]
[Sun Nov 23 16:35:35.035631 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 140.99.1.74:25397] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:35.187830 2025] [proxy_fcgi:error] [pid 44652:tid 44713] [client 140.99.1.74:25397] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:35.292259 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.74:25397] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSLHV9iQFwsyXQDhwyCKMQAAARE"]
[Sun Nov 23 16:35:35.624618 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.27:22713] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:35.883645 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 140.99.1.27:22713] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:36.165756 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.27:22713] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:36.547813 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.27:22713] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSLHWAytc6TL9XavPmPR0AAAABg"]
[Sun Nov 23 16:35:36.844612 2025] [proxy_fcgi:error] [pid 38824:tid 38845] [client 140.99.1.32:40153] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:37.142140 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.32:40153] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSLHWU8WZjXLvbHTHPeQrwAAAMU"]
[Sun Nov 23 16:35:37.568862 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 140.99.1.8:64979] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:37.897902 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 140.99.1.8:64979] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:38.022606 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 140.99.1.8:64979] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:38.240077 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.8:64979] [client 140.99.1.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.8, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSLHWk8WZjXLvbHTHPeQ2AAAANc"]
[Sun Nov 23 16:35:38.497956 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 140.99.1.8:64979] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:38.787332 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.8:64979] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSLHWk8WZjXLvbHTHPeQ7gAAANE"]
[Sun Nov 23 16:35:39.129121 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.3:57085] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:39.257374 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.3:57085] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSLHW9iQFwsyXQDhwyCKnAAAAQg"]
[Sun Nov 23 16:35:39.458083 2025] [proxy_fcgi:error] [pid 44652:tid 44713] [client 140.99.1.48:65073] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:39.732613 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.48:65073] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:39.924530 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.48:65073] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSLHW9iQFwsyXQDhwyCKsgAAARI"]
[Sun Nov 23 16:35:40.316627 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.69:53355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:40.440023 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 140.99.1.69:53355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:40.663410 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.69:53355] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSLHXNiQFwsyXQDhwyCKwgAAARU"]
[Sun Nov 23 16:35:41.021123 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.49:26801] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSLHXQ13QPZSi6O8umVuAgAAAJE"]
[Sun Nov 23 16:35:41.243613 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.67:53453] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:41.375604 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.67:53453] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:41.656132 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.67:53453] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSLHXQdvEgJm2n2cDmoC-wAAAEg"]
[Sun Nov 23 16:35:41.891644 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 140.99.1.15:33883] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:42.243896 2025] [proxy_fcgi:error] [pid 44652:tid 44724] [client 140.99.1.15:33883] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:42.341834 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.15:33883] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSLHXtiQFwsyXQDhwyCK6wAAAQc"]
[Sun Nov 23 16:35:42.642536 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.74:36161] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aSLHXtiQFwsyXQDhwyCK9gAAAQ8"]
[Sun Nov 23 16:35:42.879181 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.65:38225] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSLHXk8WZjXLvbHTHPeRRgAAAMM"]
[Sun Nov 23 16:35:43.172742 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.7:21065] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSLHX08WZjXLvbHTHPeRSwAAAM0"]
[Sun Nov 23 16:35:43.425746 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.73:44225] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSLHXw13QPZSi6O8umVuUgAAAJE"]
[Sun Nov 23 16:35:43.617524 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.30:40969] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSLHX08WZjXLvbHTHPeRVwAAAMw"]
[Sun Nov 23 16:35:43.805337 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.7:46403] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSLHX9iQFwsyXQDhwyCLCAAAAQA"]
[Sun Nov 23 16:35:44.294654 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.5:50555] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSLHYA13QPZSi6O8umVubQAAAIo"]
[Sun Nov 23 16:35:44.509697 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.73:52621] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSLHYNiQFwsyXQDhwyCLGwAAAQI"]
[Sun Nov 23 16:35:44.788167 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.76:36751] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSLHYAytc6TL9XavPmPTFAAAAAQ"]
[Sun Nov 23 16:35:45.130076 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.68:61575] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSLHYU8WZjXLvbHTHPeRdAAAAMc"]
[Sun Nov 23 16:35:46.714593 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.3:25009] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aSLHYgdvEgJm2n2cDmoDhgAAAFQ"]
[Sun Nov 23 16:35:46.955610 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.9:55637] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:47.440702 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.9:55637] [client 140.99.1.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.9, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSLHYw13QPZSi6O8umVu0QAAAIs"]
[Sun Nov 23 16:35:47.999607 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.9:55637] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:48.094643 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.9:55637] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSLHZA13QPZSi6O8umVu6QAAAI8"]
[Sun Nov 23 16:35:48.286854 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.46:60165] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSLHZNiQFwsyXQDhwyCLZAAAAQM"]
[Sun Nov 23 16:35:48.986610 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:49.132944 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:49.671603 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:49.777619 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:50.276765 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:50.381632 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:50.480612 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:50.597600 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 140.99.1.5:57559] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:51.033366 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.5:57559] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLHZw13QPZSi6O8umVvUQAAAIk"]
[Sun Nov 23 16:35:51.216454 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.38:45131] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSLHZwytc6TL9XavPmPTtQAAABY"]
[Sun Nov 23 16:35:51.407366 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.27:61099] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSLHZw13QPZSi6O8umVvXAAAAIc"]
[Sun Nov 23 16:35:51.907966 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 140.99.1.32:32607] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:52.021779 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 140.99.1.32:32607] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:52.265605 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 140.99.1.32:32607] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:52.554242 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.32:32607] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSLHaE8WZjXLvbHTHPeSawAAAMM"]
[Sun Nov 23 16:35:52.747595 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.3:61057] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSLHaNiQFwsyXQDhwyCL8QAAAQk"]
[Sun Nov 23 16:35:52.947942 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.73:54551] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSLHaNiQFwsyXQDhwyCL_AAAAQE"]
[Sun Nov 23 16:35:58.463881 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.77:38705] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSLHbgdvEgJm2n2cDmoEywAAAEY"]
[Sun Nov 23 16:35:58.818220 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.31:31919] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSLHbg13QPZSi6O8umVv_AAAAJA"]
[Sun Nov 23 16:35:59.345624 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.2:51231] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSLHb9iQFwsyXQDhwyCMsgAAARY"]
[Sun Nov 23 16:35:59.752502 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 140.99.1.67:23945] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:00.038611 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.67:23945] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:00.943638 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.67:23945] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSLHcAytc6TL9XavPmPU1AAAAA0"]
[Sun Nov 23 16:36:01.159633 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.73:29085] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:04.013370 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.73:29085] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSLHdA13QPZSi6O8umVwfAAAAIs"]
[Sun Nov 23 16:36:04.441638 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.48:37391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:05.009717 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.48:37391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:05.131003 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.48:37391] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSLHdQytc6TL9XavPmPVbAAAAA0"]
[Sun Nov 23 16:36:05.636547 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.3:42123] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSLHdQdvEgJm2n2cDmoFbQAAAEc"]
[Sun Nov 23 16:36:06.016199 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.71:37545] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:06.450752 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.71:37545] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSLHdg13QPZSi6O8umVw3gAAAIc"]
[Sun Nov 23 16:36:07.392983 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.72:20471] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSLHdw13QPZSi6O8umVxBQAAAIM"]
[Sun Nov 23 16:36:07.618299 2025] [proxy_fcgi:error] [pid 38739:tid 38785] [client 140.99.1.53:49963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:07.759611 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 140.99.1.53:49963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:07.883879 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.53:49963] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSLHdwdvEgJm2n2cDmoFzwAAAEo"]
[Sun Nov 23 16:36:08.088832 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.26:23967] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSLHeE8WZjXLvbHTHPeUkgAAANQ"]
[Sun Nov 23 16:36:08.775632 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 140.99.1.11:53057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:09.090747 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.11:53057] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSLHeQ13QPZSi6O8umVxNgAAAII"]
[Sun Nov 23 16:36:09.306908 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.67:55865] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:09.837954 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 140.99.1.67:55865] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:09.931296 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.67:55865] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSLHeU8WZjXLvbHTHPeU2gAAAMs"]
[Sun Nov 23 16:36:10.486731 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.44:45719] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:10.758104 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.44:45719] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLHetiQFwsyXQDhwyCN5gAAAQ8"]
[Sun Nov 23 16:36:10.944565 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.67:44505] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSLHegdvEgJm2n2cDmoGPQAAAEY"]
[Sun Nov 23 16:36:11.484058 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.9:34909] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSLHe08WZjXLvbHTHPeU9gAAANY"]
[Sun Nov 23 16:36:12.039074 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.15:32073] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aSLHfE8WZjXLvbHTHPeVCQAAANI"]
[Sun Nov 23 16:36:12.237369 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.24:25201] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSLHfE8WZjXLvbHTHPeVFQAAANA"]
[Sun Nov 23 16:36:12.616103 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 140.99.1.32:28303] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:13.319131 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.32:28303] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aSLHfdiQFwsyXQDhwyCOPgAAAQA"]
[Sun Nov 23 16:36:13.714475 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.72:20501] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aSLHfdiQFwsyXQDhwyCOTAAAARM"]
[Sun Nov 23 16:36:13.934985 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.26:45197] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSLHfQytc6TL9XavPmPWhQAAABI"]
[Sun Nov 23 16:36:14.282650 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 140.99.1.77:55831] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:14.382324 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.77:55831] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSLHfgytc6TL9XavPmPWnQAAAAU"]
[Sun Nov 23 16:36:14.731995 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.67:52225] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSLHfg13QPZSi6O8umVxyAAAAIc"]
[Sun Nov 23 16:36:15.590932 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.49:65459] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSLHfw13QPZSi6O8umVx3wAAAIo"]
[Sun Nov 23 16:36:16.510092 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.77:62241] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:16.621002 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.77:62241] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSLHgA13QPZSi6O8umVx-QAAAJQ"]
[Sun Nov 23 16:36:17.069493 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.33:20767] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSLHgQ13QPZSi6O8umVyGwAAAJA"]
[Sun Nov 23 16:36:17.372192 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.71:32307] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aSLHgQdvEgJm2n2cDmoHUgAAAFg"]
[Sun Nov 23 16:36:17.692264 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.27:21021] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSLHgU8WZjXLvbHTHPeV4wAAAMo"]
[Sun Nov 23 16:36:17.895444 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.15:34499] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aSLHgdiQFwsyXQDhwyCOogAAARY"]
[Sun Nov 23 16:36:18.192650 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.37:39167] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aSLHgk8WZjXLvbHTHPeV8gAAAMI"]
[Sun Nov 23 16:36:19.197112 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.16:57841] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSLHg9iQFwsyXQDhwyCOwwAAAQw"]
[Sun Nov 23 16:36:19.964142 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.68:36165] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSLHg08WZjXLvbHTHPeWEwAAAMo"]
[Sun Nov 23 16:36:20.319981 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 140.99.1.10:28791] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:20.448616 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.10:28791] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:20.556950 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.10:28791] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSLHhAdvEgJm2n2cDmoHvQAAAEU"]
[Sun Nov 23 16:36:21.197812 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.78:54399] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSLHhQytc6TL9XavPmPXYgAAABY"]
[Sun Nov 23 16:36:21.436892 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.75:21741] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:22.145653 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.75:21741] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSLHhgdvEgJm2n2cDmoH6AAAAEA"]
[Sun Nov 23 16:36:26.291628 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.31:44411] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSLHig13QPZSi6O8umVzNAAAAIY"]
[Sun Nov 23 16:36:26.573439 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.13:58151] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSLHik8WZjXLvbHTHPeWzAAAANU"]
[Sun Nov 23 16:36:26.926223 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.49:32059] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:27.063399 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.49:32059] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSLHiw13QPZSi6O8umVzUAAAAJU"]
[Sun Nov 23 16:36:28.162628 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.20:36893] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSLHjNiQFwsyXQDhwyCPiQAAARQ"]
[Sun Nov 23 16:36:28.361049 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.73:53393] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSLHjAdvEgJm2n2cDmoI1wAAAEU"]
[Sun Nov 23 16:36:29.049214 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.16:46275] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSLHjdiQFwsyXQDhwyCPlwAAAQc"]
[Sun Nov 23 16:36:29.266070 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.72:61971] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLHjU8WZjXLvbHTHPeW8AAAAMs"]
[Sun Nov 23 16:36:29.777970 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.50:58167] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSLHjQ13QPZSi6O8umVzngAAAJc"]
[Sun Nov 23 16:36:29.966796 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.68:57613] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aSLHjU8WZjXLvbHTHPeXBAAAAMo"]
[Sun Nov 23 16:36:30.238119 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.27:25687] [client 140.99.1.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.27, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSLHjgdvEgJm2n2cDmoJMAAAAEA"]
[Sun Nov 23 16:36:30.248606 2025] [proxy_fcgi:error] [pid 38739:tid 38769] [client 140.99.1.27:25687] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:30.382828 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.27:25687] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSLHjgdvEgJm2n2cDmoJNgAAAFE"]
[Sun Nov 23 16:36:30.914261 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.68:38071] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:31.124785 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.68:38071] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSLHjw13QPZSi6O8umVzuwAAAIQ"]
[Sun Nov 23 16:36:31.329959 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.73:52801] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aSLHjw13QPZSi6O8umVzwQAAAJA"]
[Sun Nov 23 16:36:31.526286 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 140.99.1.69:34049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:32.506124 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 140.99.1.69:34049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:32.602594 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.69:34049] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSLHkE8WZjXLvbHTHPeXVAAAAMg"]
[Sun Nov 23 16:36:32.846003 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.33:25639] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSLHkA13QPZSi6O8umVz7QAAAIg"]
[Sun Nov 23 16:36:36.250807 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.75:21967] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSLHlNiQFwsyXQDhwyCQTgAAARc"]
[Sun Nov 23 16:36:36.453229 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.3:22737] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aSLHlNiQFwsyXQDhwyCQVQAAAQI"]
[Sun Nov 23 16:36:36.824668 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.33:45963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:36.926081 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.33:45963] [client 140.99.1.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.33, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSLHlNiQFwsyXQDhwyCQaQAAARQ"]
[Sun Nov 23 16:36:37.137446 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.33:45963] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSLHldiQFwsyXQDhwyCQcAAAARI"]
[Sun Nov 23 16:36:37.784365 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.78:41973] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSLHlQytc6TL9XavPmPZjgAAABA"]
[Sun Nov 23 16:36:37.998647 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.72:36901] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:38.148750 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.72:36901] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSLHlgytc6TL9XavPmPZnAAAABM"]
[Sun Nov 23 16:36:38.338603 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.43:48273] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSLHlg13QPZSi6O8umV0mgAAAIg"]
[Sun Nov 23 16:36:38.639247 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.44:64435] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:39.005277 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.44:64435] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSLHlwdvEgJm2n2cDmoKbgAAAEw"]
[Sun Nov 23 16:36:39.544227 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.2:38571] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSLHl08WZjXLvbHTHPeYPQAAAMA"]
[Sun Nov 23 16:36:39.807668 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 140.99.1.31:42479] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:40.155637 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.31:42479] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:40.360029 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.31:42479] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSLHmAytc6TL9XavPmPZ4wAAAAg"]
[Sun Nov 23 16:36:40.588897 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.50:32555] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aSLHmA13QPZSi6O8umV04AAAAJY"]
[Sun Nov 23 16:36:41.066486 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.76:33235] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aSLHmQytc6TL9XavPmPZ-AAAAAc"]
[Sun Nov 23 16:36:41.279618 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.65:63187] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:41.396602 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 140.99.1.65:63187] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:42.070904 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.65:63187] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSLHmgdvEgJm2n2cDmoKnwAAAE4"]
[Sun Nov 23 16:36:42.403619 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.32:36463] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:42.613832 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.32:36463] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aSLHmg13QPZSi6O8umV1GAAAAIk"]
[Sun Nov 23 16:36:42.844996 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.32:36463] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSLHmg13QPZSi6O8umV1GgAAAIw"]
[Sun Nov 23 16:36:43.338979 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.15:55247] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSLHm08WZjXLvbHTHPeYfwAAAMk"]
[Sun Nov 23 16:36:43.570722 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.77:21651] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSLHmw13QPZSi6O8umV1OQAAAIs"]
[Sun Nov 23 16:36:44.062617 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 140.99.1.73:50855] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:44.600312 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.73:50855] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSLHnA13QPZSi6O8umV1YwAAAIE"]
[Sun Nov 23 16:36:45.188810 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.50:40333] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSLHnU8WZjXLvbHTHPeYogAAAM4"]
[Sun Nov 23 16:36:45.900528 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.8:29539] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSLHnQ13QPZSi6O8umV1cQAAAI0"]
[Sun Nov 23 16:36:46.126606 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 140.99.1.9:46725] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:46.868199 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.9:46725] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSLHngytc6TL9XavPmPavAAAABI"]
[Sun Nov 23 16:36:47.157316 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.76:21085] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aSLHnwdvEgJm2n2cDmoK-wAAAEM"]
[Sun Nov 23 16:36:47.371764 2025] [proxy_fcgi:error] [pid 44652:tid 44722] [client 140.99.1.8:29521] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:47.513851 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.8:29521] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSLHn9iQFwsyXQDhwyCRfgAAAQ4"]
[Sun Nov 23 16:36:47.831741 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.62:45481] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSLHn9iQFwsyXQDhwyCRkAAAARY"]
[Sun Nov 23 16:36:48.267521 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.78:63893] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSLHoAytc6TL9XavPmPa_QAAABc"]
[Sun Nov 23 16:36:48.823708 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 140.99.1.38:31297] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:48.964592 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.38:31297] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSLHoE8WZjXLvbHTHPeY5QAAANc"]
[Sun Nov 23 16:36:49.156982 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.70:55423] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSLHodiQFwsyXQDhwyCR1wAAAQc"]
[Sun Nov 23 16:36:49.778785 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.11:22561] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:50.139565 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.11:22561] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSLHog13QPZSi6O8umV1zQAAAII"]
[Sun Nov 23 16:36:50.615982 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.48:36547] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSLHotiQFwsyXQDhwyCSDQAAAQk"]
[Sun Nov 23 16:36:50.818627 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.15:44335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:54.971648 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.15:44335] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSLHpg13QPZSi6O8umV2NAAAAJg"]
[Sun Nov 23 16:36:55.219654 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.46:33153] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSLHp08WZjXLvbHTHPeZfQAAANI"]
[Sun Nov 23 16:36:55.523100 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.27:60361] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSLHpw13QPZSi6O8umV2PAAAAJA"]
[Sun Nov 23 16:36:55.752623 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.31:25905] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:56.114772 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.31:25905] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSLHqAdvEgJm2n2cDmoL2gAAAEo"]
[Sun Nov 23 16:36:56.352633 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 140.99.1.14:40249] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:56.542439 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.14:40249] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSLHqAytc6TL9XavPmPb3wAAABM"]
[Sun Nov 23 16:36:56.822602 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.11:35983] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSLHqAdvEgJm2n2cDmoL-QAAAFY"]
[Sun Nov 23 16:36:57.252868 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.28:63503] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSLHqQdvEgJm2n2cDmoMBgAAAEM"]
[Sun Nov 23 16:36:57.456278 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.7:59467] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aSLHqU8WZjXLvbHTHPeZrwAAAMQ"]
[Sun Nov 23 16:36:57.924943 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.77:35321] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSLHqQytc6TL9XavPmPcCwAAAA8"]
[Sun Nov 23 16:36:58.217889 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.68:61585] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSLHqgdvEgJm2n2cDmoMIwAAAFY"]
[Sun Nov 23 16:36:58.494462 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.7:57283] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSLHqgytc6TL9XavPmPcFwAAAAU"]
[Sun Nov 23 16:36:58.724914 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.28:60503] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSLHqg13QPZSi6O8umV2dgAAAIo"]
[Sun Nov 23 16:36:59.268928 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.7:56283] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSLHq08WZjXLvbHTHPeZ8AAAAMg"]
[Sun Nov 23 16:36:59.682028 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.13:50615] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSLHqw13QPZSi6O8umV2jAAAAIg"]
[Sun Nov 23 16:37:00.123651 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.42:60265] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSLHrNiQFwsyXQDhwyCTIAAAARE"]
[Sun Nov 23 16:37:00.434614 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.33:44055] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSLHrAytc6TL9XavPmPcVAAAAAY"]
[Sun Nov 23 16:37:01.021194 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 140.99.1.6:32831] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:01.439771 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.6:32831] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSLHrQ13QPZSi6O8umV2wAAAAJg"]
[Sun Nov 23 16:37:01.668976 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.2:32981] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSLHrQdvEgJm2n2cDmoMmAAAAEw"]
[Sun Nov 23 16:37:02.090631 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.11:65001] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:02.195349 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.11:65001] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSLHrg13QPZSi6O8umV21gAAAII"]
[Sun Nov 23 16:37:02.831669 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 140.99.1.20:33537] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:02.942047 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 140.99.1.20:33537] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:03.038376 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.20:33537] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSLHr9iQFwsyXQDhwyCTdAAAARU"]
[Sun Nov 23 16:37:03.441191 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.13:55373] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:03.538121 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.13:55373] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSLHrwdvEgJm2n2cDmoMzQAAAFc"]
[Sun Nov 23 16:37:03.949676 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.38:34097] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSLHr08WZjXLvbHTHPeaSAAAANc"]
[Sun Nov 23 16:37:04.185616 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.30:39225] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:04.283945 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.30:39225] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSLHsA13QPZSi6O8umV3DQAAAIk"]
[Sun Nov 23 16:37:04.600625 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.77:38125] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSLHsNiQFwsyXQDhwyCTrQAAAQM"]
[Sun Nov 23 16:37:05.079669 2025] [proxy_fcgi:error] [pid 38738:tid 38752] [client 140.99.1.37:33665] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:05.292662 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.37:33665] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:05.417688 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.37:33665] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSLHsQytc6TL9XavPmPc5wAAABc"]
[Sun Nov 23 16:37:06.040659 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.26:22511] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSLHsg13QPZSi6O8umV3PQAAAIM"]
[Sun Nov 23 16:37:06.281625 2025] [proxy_fcgi:error] [pid 38738:tid 38751] [client 140.99.1.46:34695] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:06.376897 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.46:34695] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSLHsgytc6TL9XavPmPdCAAAAA0"]
[Sun Nov 23 16:37:06.661168 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.2:40689] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSLHsgytc6TL9XavPmPdDwAAAA4"]
[Sun Nov 23 16:37:06.932611 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.65:38919] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:07.142873 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.65:38919] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSLHswytc6TL9XavPmPdIQAAABA"]
[Sun Nov 23 16:37:07.406839 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.17:44779] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSLHsw13QPZSi6O8umV3WgAAAII"]
[Sun Nov 23 16:37:08.151718 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.3:27001] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:08.472946 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.3:27001] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSLHtNiQFwsyXQDhwyCUNAAAARM"]
[Sun Nov 23 16:37:08.699027 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.46:22387] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSLHtAytc6TL9XavPmPdRwAAABE"]
[Sun Nov 23 16:37:09.003810 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.15:44783] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aSLHtQ13QPZSi6O8umV3fQAAAJI"]
[Sun Nov 23 16:37:09.226665 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.7:38267] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSLHtQytc6TL9XavPmPdZAAAABQ"]
[Sun Nov 23 16:37:09.434535 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.76:53445] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSLHtQ13QPZSi6O8umV3gwAAAI0"]
[Sun Nov 23 16:37:09.625621 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.2:40013] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aSLHtQytc6TL9XavPmPddwAAAAI"]
[Sun Nov 23 16:37:10.324046 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.71:45903] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSLHttiQFwsyXQDhwyCUeQAAAQE"]
[Sun Nov 23 16:37:10.537673 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.52:60751] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aSLHtgdvEgJm2n2cDmoNtQAAAFE"]
[Sun Nov 23 16:37:10.857603 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.46:45753] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:11.016504 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.46:45753] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSLHtw13QPZSi6O8umV3oQAAAJg"]
[Sun Nov 23 16:37:12.366303 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.73:51625] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSLHuA13QPZSi6O8umV3sgAAAII"]
[Sun Nov 23 16:37:12.883589 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.6:64751] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aSLHuNiQFwsyXQDhwyCUvAAAAQE"]
[Sun Nov 23 16:37:13.091064 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.28:49651] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSLHudiQFwsyXQDhwyCUwgAAAQ4"]
[Sun Nov 23 16:37:14.166201 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.31:56093] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aSLHugdvEgJm2n2cDmoOHgAAAFA"]
[Sun Nov 23 16:37:14.385935 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.76:26395] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSLHuk8WZjXLvbHTHPebPgAAAMk"]
[Sun Nov 23 16:37:14.793525 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.68:55415] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aSLHugdvEgJm2n2cDmoOMAAAAEI"]
[Sun Nov 23 16:37:15.207940 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.67:21935] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSLHu08WZjXLvbHTHPebUwAAAME"]
[Sun Nov 23 16:37:15.624916 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.16:39263] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aSLHu08WZjXLvbHTHPebWgAAAMA"]
[Sun Nov 23 16:37:16.477657 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.62:51259] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSLHvNiQFwsyXQDhwyCVDgAAARY"]
[Sun Nov 23 16:37:16.672757 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.62:37451] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSLHvA13QPZSi6O8umV4KAAAAIA"]
[Sun Nov 23 16:37:17.265856 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.62:46779] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSLHvdiQFwsyXQDhwyCVHQAAAQ8"]
[Sun Nov 23 16:37:17.493622 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 140.99.1.7:62925] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:17.587460 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.7:62925] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSLHvQdvEgJm2n2cDmoOgAAAAEU"]
[Sun Nov 23 16:37:18.081460 2025] [proxy_fcgi:error] [pid 38740:tid 38799] [client 140.99.1.53:42885] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:18.172656 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.53:42885] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSLHvg13QPZSi6O8umV4XQAAAIc"]
[Sun Nov 23 16:37:18.387690 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.14:65087] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSLHvtiQFwsyXQDhwyCVQQAAARE"]
[Sun Nov 23 16:37:18.804755 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.17:32471] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSLHvgdvEgJm2n2cDmoOlgAAAEI"]
[Sun Nov 23 16:37:19.827647 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 140.99.1.50:31653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:20.264636 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.50:31653] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aSLHwA13QPZSi6O8umV4sgAAAJI"]
[Sun Nov 23 16:37:20.593903 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.44:65025] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSLHwAytc6TL9XavPmPekAAAAAE"]
[Sun Nov 23 16:37:23.974683 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.70:42629] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSLHwwdvEgJm2n2cDmoPFwAAAFI"]
[Sun Nov 23 16:37:24.177340 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.15:46195] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSLHxA13QPZSi6O8umV5WQAAAJc"]
[Sun Nov 23 16:37:24.390204 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.6:52945] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSLHxAytc6TL9XavPmPfAAAAAAQ"]
[Sun Nov 23 16:37:31.732280 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.27:64715] [client 140.99.1.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aSLHy9iQFwsyXQDhwyCWigAAARg"]
[Sun Nov 23 16:37:34.801178 2025] [autoindex:error] [pid 38738:tid 38760] [client 140.99.1.62:33529] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:37:42.516896 2025] [:error] [pid 14602:tid 14636] [client 203.33.203.148:43067] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aSLH1h-I77jdD81pU-l9NgAAAU8"]
[Sun Nov 23 16:37:45.389985 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.62:33529] [client 140.99.1.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-freeform/"] [unique_id "aSLH2Qytc6TL9XavPmPhgAAAAAQ"]
[Sun Nov 23 16:37:55.729613 2025] [autoindex:error] [pid 38739:tid 38783] [client 140.99.1.13:42585] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:40:00.373003 2025] [proxy_fcgi:error] [pid 14602:tid 14633] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:00.966619 2025] [proxy_fcgi:error] [pid 14602:tid 14631] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.080619 2025] [proxy_fcgi:error] [pid 14602:tid 14635] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.179600 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.283985 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.419622 2025] [proxy_fcgi:error] [pid 14602:tid 14635] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.602044 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.711704 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.868966 2025] [proxy_fcgi:error] [pid 14602:tid 14640] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:01.979618 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.173629 2025] [proxy_fcgi:error] [pid 14602:tid 14645] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.329630 2025] [proxy_fcgi:error] [pid 14602:tid 14642] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.442621 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.547724 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.656634 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:02.917614 2025] [proxy_fcgi:error] [pid 14602:tid 14627] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:03.216663 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:03.371613 2025] [proxy_fcgi:error] [pid 14602:tid 14642] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:03.555578 2025] [proxy_fcgi:error] [pid 14602:tid 14640] [client 140.99.1.67:64631] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:05.481968 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.67:64631] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLIZR-I77jdD81pU-mJugAAAVY"]
[Sun Nov 23 16:40:06.302418 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.37:26085] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLIZtiQFwsyXQDhwyCgFQAAARY"]
[Sun Nov 23 16:40:07.070837 2025] [proxy_fcgi:error] [pid 44652:tid 44730] [client 140.99.1.38:22299] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:07.490800 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.38:22299] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aSLIZ9iQFwsyXQDhwyCgJAAAARM"]
[Sun Nov 23 16:40:07.827532 2025] [proxy_fcgi:error] [pid 14602:tid 14625] [client 140.99.1.20:45207] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:07.965955 2025] [proxy_fcgi:error] [pid 14602:tid 14632] [client 140.99.1.20:45207] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:08.075582 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.20:45207] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSLIaB-I77jdD81pU-mJ-wAAAU8"]
[Sun Nov 23 16:40:08.488624 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.11:44701] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:09.071627 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.11:44701] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLIaQ13QPZSi6O8umWHTwAAAIk"]
[Sun Nov 23 16:40:09.448274 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.8:41767] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLIadiQFwsyXQDhwyCgOQAAARU"]
[Sun Nov 23 16:40:09.687838 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.28:37109] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLIaQdvEgJm2n2cDmobjAAAAEc"]
[Sun Nov 23 16:40:13.206783 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.11:52111] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLIbQytc6TL9XavPmPrsgAAAA4"]
[Sun Nov 23 16:40:13.398831 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.11:50871] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLIbU8WZjXLvbHTHPenowAAANA"]
[Sun Nov 23 16:40:13.660677 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.14:56821] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLIbQ13QPZSi6O8umWHkwAAAIE"]
[Sun Nov 23 16:40:14.035756 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.39:37675] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLIbgytc6TL9XavPmPrwAAAAAo"]
[Sun Nov 23 16:40:14.260607 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 140.99.1.31:63971] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:14.520369 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.31:63971] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aSLIbk8WZjXLvbHTHPensQAAAMo"]
[Sun Nov 23 16:40:14.858626 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 140.99.1.3:40741] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:14.992764 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.3:40741] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLIbk8WZjXLvbHTHPentgAAANI"]
[Sun Nov 23 16:40:15.382796 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.75:28103] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLIb9iQFwsyXQDhwyCgugAAARc"]
[Sun Nov 23 16:40:15.680629 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.5:28459] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:15.878727 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.5:28459] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLIbwytc6TL9XavPmPr0wAAABg"]
[Sun Nov 23 16:40:16.211922 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 140.99.1.13:55301] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:16.521653 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 140.99.1.13:55301] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:17.042667 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.13:55301] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLIcdiQFwsyXQDhwyCg4AAAAQY"]
[Sun Nov 23 16:40:17.231976 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.13:34781] [client 140.99.1.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-l0gin.php"] [unique_id "aSLIcU8WZjXLvbHTHPenzgAAAMQ"]
[Sun Nov 23 16:40:17.524645 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 140.99.1.24:44495] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:17.735657 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.24:44495] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLIcQdvEgJm2n2cDmob6QAAAFE"]
[Sun Nov 23 16:40:17.994603 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.74:50703] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:18.196143 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.74:50703] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSLIcgytc6TL9XavPmPr8wAAAAM"]
[Sun Nov 23 16:40:18.607789 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.15:65157] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLIcgdvEgJm2n2cDmob-AAAAEk"]
[Sun Nov 23 16:40:18.927634 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.9:58009] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:19.046738 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 140.99.1.9:58009] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:19.409831 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.9:58009] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLIc9iQFwsyXQDhwyChEAAAAQY"]
[Sun Nov 23 16:40:19.769738 2025] [:error] [pid 14602:tid 14623] [client 140.99.1.24:62303] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLIcx-I77jdD81pU-mK-wAAAUI"]
[Sun Nov 23 16:40:20.193750 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.26:41223] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLIdAdvEgJm2n2cDmocJwAAAEo"]
[Sun Nov 23 16:40:20.533029 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.9:65403] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLIdNiQFwsyXQDhwyChJQAAARM"]
[Sun Nov 23 16:40:20.728065 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.15:40257] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLIdAdvEgJm2n2cDmocMAAAAEI"]
[Sun Nov 23 16:40:21.311092 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.20:53587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:21.407142 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.20:53587] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLIdQytc6TL9XavPmPsMAAAABI"]
[Sun Nov 23 16:40:21.666697 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.62:21013] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSLIdQytc6TL9XavPmPsNgAAAAI"]
[Sun Nov 23 16:40:21.953034 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.69:36753] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLIdR-I77jdD81pU-mLDgAAAVY"]
[Sun Nov 23 16:40:22.383611 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 140.99.1.49:51171] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:23.062810 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.49:51171] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:23.184846 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.49:51171] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:23.515434 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.49:51171] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aSLIdw13QPZSi6O8umWIZAAAAJA"]
[Sun Nov 23 16:40:24.201706 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.75:37507] [client 140.99.1.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.75, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLIeAytc6TL9XavPmPsbgAAABU"]
[Sun Nov 23 16:40:24.316883 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.75:37507] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:24.982650 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 140.99.1.75:37507] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:25.106585 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 140.99.1.75:37507] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:26.021089 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.75:37507] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLIegytc6TL9XavPmPsuQAAABI"]
[Sun Nov 23 16:40:26.454625 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.30:35215] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:26.566517 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.30:35215] [client 140.99.1.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.30, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLIegdvEgJm2n2cDmocgwAAAEs"]
[Sun Nov 23 16:40:26.793862 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.30:35215] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aSLIegdvEgJm2n2cDmociAAAAEI"]
[Sun Nov 23 16:40:27.142759 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 140.99.1.18:38785] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:27.292613 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.18:38785] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:27.627604 2025] [proxy_fcgi:error] [pid 38739:tid 38781] [client 140.99.1.18:38785] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:27.836616 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.18:38785] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:28.391042 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.18:38785] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLIfAdvEgJm2n2cDmoclgAAAFM"]
[Sun Nov 23 16:40:28.722300 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.33:24611] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:29.272557 2025] [proxy_fcgi:error] [pid 38740:tid 38813] [client 140.99.1.33:24611] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:29.473679 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.33:24611] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:29.776663 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.33:24611] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:29.877436 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.33:24611] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLIfQ13QPZSi6O8umWI3AAAAIw"]
[Sun Nov 23 16:40:30.089922 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.74:47463] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:30.208614 2025] [proxy_fcgi:error] [pid 38739:tid 38785] [client 140.99.1.74:47463] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:30.312134 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.74:47463] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLIfgdvEgJm2n2cDmocsgAAAFY"]
[Sun Nov 23 16:40:31.042058 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.70:46249] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:31.313309 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.70:46249] [client 140.99.1.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.70, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLIfw13QPZSi6O8umWJDQAAAIc"]
[Sun Nov 23 16:40:31.434784 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.70:46249] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLIfw13QPZSi6O8umWJFAAAAJg"]
[Sun Nov 23 16:40:33.631607 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.5:47873] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:34.452672 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 140.99.1.5:47873] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:34.821632 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 140.99.1.5:47873] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:34.943901 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.5:47873] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLIggdvEgJm2n2cDmodFQAAAFE"]
[Sun Nov 23 16:40:35.157607 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 140.99.1.18:50525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:35.627897 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.18:50525] [client 140.99.1.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.18, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLIgwdvEgJm2n2cDmodHwAAAEA"]
[Sun Nov 23 16:40:35.741603 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 140.99.1.18:50525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:35.846631 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.18:50525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:35.952644 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 140.99.1.18:50525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:36.054682 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.18:50525] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLIhAdvEgJm2n2cDmodKgAAAFA"]
[Sun Nov 23 16:40:37.532672 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.77:23677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:37.717399 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.77:23677] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aSLIhQ13QPZSi6O8umWJhwAAAJc"]
[Sun Nov 23 16:40:38.052618 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.73:62331] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:38.191736 2025] [:error] [pid 14602:tid 14634] [client 140.99.1.73:62331] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLIhh-I77jdD81pU-mMOgAAAU0"]
[Sun Nov 23 16:40:38.450826 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.42:20161] [client 140.99.1.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/css/index.php"] [unique_id "aSLIhk8WZjXLvbHTHPepIgAAAMw"]
[Sun Nov 23 16:40:38.944635 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 140.99.1.13:36585] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:39.040629 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.13:36585] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLIhx-I77jdD81pU-mMYwAAAUc"]
[Sun Nov 23 16:40:39.343409 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.68:63515] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLIh08WZjXLvbHTHPepOQAAANQ"]
[Sun Nov 23 16:40:39.591686 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.73:61911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:39.715634 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.73:61911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:39.820606 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.73:61911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:40.407532 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.73:61911] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLIiAdvEgJm2n2cDmodbwAAAE4"]
[Sun Nov 23 16:40:40.736765 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.37:26175] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLIiAdvEgJm2n2cDmoddQAAAFc"]
[Sun Nov 23 16:40:45.467107 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.2:50451] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aSLIjU8WZjXLvbHTHPeppAAAANI"]
[Sun Nov 23 16:40:45.875818 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.75:43151] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.117639 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.75:43151] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.219891 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.75:43151] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLIjtiQFwsyXQDhwyCixAAAAQQ"]
[Sun Nov 23 16:40:46.571629 2025] [proxy_fcgi:error] [pid 14602:tid 14640] [client 140.99.1.74:53403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:46.831766 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.74:53403] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aSLIjh-I77jdD81pU-mNEwAAAVY"]
[Sun Nov 23 16:40:47.128806 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 140.99.1.68:28315] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:47.586613 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.68:28315] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLIjwytc6TL9XavPmPuZQAAAA4"]
[Sun Nov 23 16:40:48.053631 2025] [proxy_fcgi:error] [pid 38740:tid 38805] [client 140.99.1.49:64489] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:48.510639 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 140.99.1.49:64489] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:48.746622 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 140.99.1.49:64489] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:48.877844 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.49:64489] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLIkA13QPZSi6O8umWKQAAAAIs"]
[Sun Nov 23 16:40:49.114864 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.78:41147] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLIkQdvEgJm2n2cDmod9QAAAEo"]
[Sun Nov 23 16:40:49.376884 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.11:22099] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLIkU8WZjXLvbHTHPeqAwAAAMY"]
[Sun Nov 23 16:40:49.563237 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.30:54135] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLIkQdvEgJm2n2cDmod-AAAAFU"]
[Sun Nov 23 16:40:49.815611 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 140.99.1.15:41493] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:49.967941 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.15:41493] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLIkQ13QPZSi6O8umWKRQAAAJY"]
[Sun Nov 23 16:40:50.181529 2025] [:error] [pid 14602:tid 14624] [client 140.99.1.2:24955] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLIkh-I77jdD81pU-mNXgAAAUM"]
[Sun Nov 23 16:40:50.394650 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.5:64535] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:50.664430 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.5:64535] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSLIkgdvEgJm2n2cDmoeEgAAAFU"]
[Sun Nov 23 16:40:50.901681 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.26:57479] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLIkh-I77jdD81pU-mNZwAAAVM"]
[Sun Nov 23 16:40:51.978127 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.33:63727] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLIkw13QPZSi6O8umWKbQAAAJA"]
[Sun Nov 23 16:40:52.243318 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.15:43547] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLIlAytc6TL9XavPmPu2gAAAAM"]
[Sun Nov 23 16:40:52.559401 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.33:47101] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLIlE8WZjXLvbHTHPeqQgAAAMY"]
[Sun Nov 23 16:40:53.059740 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.7:52739] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLIldiQFwsyXQDhwyCjJAAAAQw"]
[Sun Nov 23 16:40:53.288604 2025] [proxy_fcgi:error] [pid 14602:tid 14633] [client 140.99.1.18:31567] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:53.647019 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.18:31567] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:53.833440 2025] [:error] [pid 14602:tid 14623] [client 140.99.1.18:31567] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLIlR-I77jdD81pU-mNngAAAUI"]
[Sun Nov 23 16:40:54.696616 2025] [proxy_fcgi:error] [pid 38740:tid 38812] [client 140.99.1.75:29677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:55.180613 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.75:29677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:55.707095 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 140.99.1.75:29677] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:40:55.920482 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.75:29677] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLIlw13QPZSi6O8umWKxwAAAIY"]
[Sun Nov 23 16:41:00.300964 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.27:31835] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLInA13QPZSi6O8umWLGgAAAJA"]
[Sun Nov 23 16:41:00.497565 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.9:59307] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLInA13QPZSi6O8umWLJgAAAJU"]
[Sun Nov 23 16:41:01.522395 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.63:41361] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLIndiQFwsyXQDhwyCjuQAAARQ"]
[Sun Nov 23 16:41:01.949618 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.62:64587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:02.089610 2025] [proxy_fcgi:error] [pid 14602:tid 14630] [client 140.99.1.62:64587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:02.222631 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.62:64587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:02.345797 2025] [proxy_fcgi:error] [pid 14602:tid 14629] [client 140.99.1.62:64587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:03.133142 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.62:64587] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLInx-I77jdD81pU-mOmwAAAUg"]
[Sun Nov 23 16:41:03.330029 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.24:42627] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLInw13QPZSi6O8umWLdwAAAIo"]
[Sun Nov 23 16:41:03.640527 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.8:28481] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLIn9iQFwsyXQDhwyCj5QAAARE"]
[Sun Nov 23 16:41:03.834967 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.33:35763] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLIn08WZjXLvbHTHPerAQAAANU"]
[Sun Nov 23 16:41:04.039836 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.33:51733] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLIoAytc6TL9XavPmPv2wAAABE"]
[Sun Nov 23 16:41:04.272162 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.43:49659] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLIoE8WZjXLvbHTHPerEQAAAMc"]
[Sun Nov 23 16:41:04.616047 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.48:64643] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLIoA13QPZSi6O8umWLogAAAJg"]
[Sun Nov 23 16:41:04.858933 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.7:35779] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLIoA13QPZSi6O8umWLqgAAAJg"]
[Sun Nov 23 16:41:05.089991 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.7:21523] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLIoQdvEgJm2n2cDmofPgAAAFg"]
[Sun Nov 23 16:41:05.304993 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.78:43067] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLIodiQFwsyXQDhwyCkIQAAAQI"]
[Sun Nov 23 16:41:05.805264 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.47:59835] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLIoR-I77jdD81pU-mOyQAAAU8"]
[Sun Nov 23 16:41:07.208931 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.32:32831] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLIo9iQFwsyXQDhwyCkSAAAARg"]
[Sun Nov 23 16:41:07.562599 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.28:33843] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:07.800815 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.28:33843] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLIow13QPZSi6O8umWL9gAAAIk"]
[Sun Nov 23 16:41:08.681149 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.75:28439] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSLIpE8WZjXLvbHTHPeregAAAM8"]
[Sun Nov 23 16:41:09.186986 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.78:28109] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.321451 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.78:28109] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLIpU8WZjXLvbHTHPerkQAAAMA"]
[Sun Nov 23 16:41:09.703616 2025] [proxy_fcgi:error] [pid 14602:tid 14637] [client 140.99.1.76:48659] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.802623 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.76:48659] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:09.905602 2025] [proxy_fcgi:error] [pid 14602:tid 14641] [client 140.99.1.76:48659] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:10.060858 2025] [:error] [pid 14602:tid 14638] [client 140.99.1.76:48659] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLIph-I77jdD81pU-mPFgAAAVE"]
[Sun Nov 23 16:41:10.279623 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.74:58367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:10.431940 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.74:58367] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLIptiQFwsyXQDhwyCkegAAARE"]
[Sun Nov 23 16:41:11.641623 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:11.770610 2025] [proxy_fcgi:error] [pid 14602:tid 14635] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:11.888613 2025] [proxy_fcgi:error] [pid 14602:tid 14624] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.175647 2025] [proxy_fcgi:error] [pid 14602:tid 14639] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.664378 2025] [proxy_fcgi:error] [pid 14602:tid 14625] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.772831 2025] [proxy_fcgi:error] [pid 14602:tid 14640] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:12.932620 2025] [proxy_fcgi:error] [pid 14602:tid 14622] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:13.121646 2025] [proxy_fcgi:error] [pid 14602:tid 14633] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:13.674620 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.42:38837] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:13.764589 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.42:38837] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLIqR-I77jdD81pU-mPWAAAAVM"]
[Sun Nov 23 16:41:14.019173 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.27:25181] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLIqgdvEgJm2n2cDmof_AAAAFA"]
[Sun Nov 23 16:41:14.204809 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.65:29761] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSLIqh-I77jdD81pU-mPXQAAAVI"]
[Sun Nov 23 16:41:14.217755 2025] [proxy_fcgi:error] [pid 14602:tid 14639] [client 140.99.1.65:29761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:14.391833 2025] [proxy_fcgi:error] [pid 14602:tid 14631] [client 140.99.1.65:29761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:14.569753 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.65:29761] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLIqh-I77jdD81pU-mPYwAAAVU"]
[Sun Nov 23 16:41:14.981630 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.31:55829] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:15.082722 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.31:55829] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLIqwytc6TL9XavPmPwpAAAABM"]
[Sun Nov 23 16:41:15.275529 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.16:43047] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLIqwytc6TL9XavPmPwpwAAABQ"]
[Sun Nov 23 16:41:16.002104 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.46:21037] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLIrAytc6TL9XavPmPwvgAAAAI"]
[Sun Nov 23 16:41:16.264521 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.73:25887] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aSLIrB-I77jdD81pU-mPdQAAAUo"]
[Sun Nov 23 16:41:19.045775 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.20:43147] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:19.238730 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.20:43147] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLIrwytc6TL9XavPmPw7wAAAAU"]
[Sun Nov 23 16:41:19.817640 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.11:29425] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:20.060330 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.11:29425] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aSLIsAytc6TL9XavPmPxDAAAAAc"]
[Sun Nov 23 16:41:20.249068 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.27:20759] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aSLIsE8WZjXLvbHTHPesbgAAAMU"]
[Sun Nov 23 16:41:25.829900 2025] [proxy_fcgi:error] [pid 38738:tid 38762] [client 140.99.1.33:39349] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:25.991529 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.33:39349] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLItQytc6TL9XavPmPxlAAAAAM"]
[Sun Nov 23 16:41:26.361566 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.76:64125] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLItk8WZjXLvbHTHPes5AAAAMo"]
[Sun Nov 23 16:41:27.135911 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.7:48917] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.312865 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.7:48917] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.688675 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 140.99.1.7:48917] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:27.928999 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.7:48917] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLItw13QPZSi6O8umWNgQAAAIA"]
[Sun Nov 23 16:41:28.180194 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.65:33827] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLIuA13QPZSi6O8umWNhgAAAIo"]
[Sun Nov 23 16:41:28.478604 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 140.99.1.6:33211] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:28.619805 2025] [proxy_fcgi:error] [pid 38739:tid 38770] [client 140.99.1.6:33211] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:28.969630 2025] [proxy_fcgi:error] [pid 38739:tid 38790] [client 140.99.1.6:33211] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:29.093617 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.6:33211] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSLIuQdvEgJm2n2cDmoheQAAAEk"]
[Sun Nov 23 16:41:29.348444 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.72:38099] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLIuQdvEgJm2n2cDmohfgAAAEY"]
[Sun Nov 23 16:41:29.558908 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.26:20393] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLIuU8WZjXLvbHTHPetIgAAAME"]
[Sun Nov 23 16:41:31.186657 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 140.99.1.17:46739] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:31.287991 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.17:46739] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSLIu08WZjXLvbHTHPetQwAAAMQ"]
[Sun Nov 23 16:41:31.725412 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.20:40515] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSLIu9iQFwsyXQDhwyCm2AAAAQw"]
[Sun Nov 23 16:41:32.189605 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.16:22381] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:32.306647 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 140.99.1.16:22381] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:32.496606 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.16:22381] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:33.093093 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.16:22381] [client 140.99.1.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.16, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aSLIvQ13QPZSi6O8umWN6wAAAIg"]
[Sun Nov 23 16:41:33.458214 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.16:22381] File does not exist: /home/pumpbooking/public_html/worm.PhP
[Sun Nov 23 16:41:40.316624 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.16:22381] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.485609 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 140.99.1.16:22381] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.616434 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 140.99.1.16:22381] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:40.727667 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.16:22381] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLIxA13QPZSi6O8umWOggAAAJc"]
[Sun Nov 23 16:41:40.938544 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.18:55091] [client 140.99.1.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.18, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSLIxAdvEgJm2n2cDmoiQQAAAFY"]
[Sun Nov 23 16:41:41.160621 2025] [proxy_fcgi:error] [pid 38739:tid 38771] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.490028 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.655658 2025] [proxy_fcgi:error] [pid 38739:tid 38774] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:42.286603 2025] [proxy_fcgi:error] [pid 38739:tid 38783] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:42.538619 2025] [proxy_fcgi:error] [pid 38739:tid 38785] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:43.008603 2025] [proxy_fcgi:error] [pid 38739:tid 38774] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:44.077641 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:44.260693 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:44.394108 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 140.99.1.18:55091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:44.538143 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.18:55091] [client 140.99.1.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/hello-element/footer.php"] [unique_id "aSLIyAdvEgJm2n2cDmoiigAAAE0"]
[Sun Nov 23 16:41:45.830062 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 140.99.1.48:42949] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:46.071610 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 140.99.1.48:42949] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:46.286407 2025] [proxy_fcgi:error] [pid 38824:tid 38841] [client 140.99.1.48:42949] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:46.963924 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.48:42949] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSLIyk8WZjXLvbHTHPeulAAAAMs"]
[Sun Nov 23 16:41:47.405629 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.37:52351] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:47.517606 2025] [proxy_fcgi:error] [pid 38738:tid 38742] [client 140.99.1.37:52351] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:47.707135 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.37:52351] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSLIywytc6TL9XavPmPziQAAAAU"]
[Sun Nov 23 16:41:48.104708 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.68:52237] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:48.229704 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.68:52237] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSLIzA13QPZSi6O8umWPAwAAAJQ"]
[Sun Nov 23 16:41:48.817624 2025] [proxy_fcgi:error] [pid 14602:tid 14643] [client 140.99.1.2:41595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.150655 2025] [proxy_fcgi:error] [pid 14602:tid 14635] [client 140.99.1.2:41595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.288640 2025] [proxy_fcgi:error] [pid 14602:tid 14634] [client 140.99.1.2:41595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.447963 2025] [proxy_fcgi:error] [pid 14602:tid 14637] [client 140.99.1.2:41595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.624162 2025] [proxy_fcgi:error] [pid 14602:tid 14642] [client 140.99.1.2:41595] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:49.970615 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.2:41595] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSLIzR-I77jdD81pU-mSUAAAAVY"]
[Sun Nov 23 16:41:50.339824 2025] [proxy_fcgi:error] [pid 38738:tid 38749] [client 140.99.1.28:51653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:50.469618 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.28:51653] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:50.607637 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.28:51653] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSLIzgytc6TL9XavPmPzvQAAABI"]
[Sun Nov 23 16:41:51.044433 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.24:24827] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSLIz08WZjXLvbHTHPevAAAAAMs"]
[Sun Nov 23 16:41:51.515853 2025] [proxy_fcgi:error] [pid 16066:tid 16079] [client 140.99.1.47:31791] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:51.767771 2025] [:error] [pid 16066:tid 16069] [client 140.99.1.47:31791] [client 140.99.1.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/maint/file.php"] [unique_id "aSLIz_q-c47Q5mW5E9FjSAAAAYA"]
[Sun Nov 23 16:41:52.280959 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 140.99.1.49:64409] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:52.416017 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.49:64409] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:52.548644 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.49:64409] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSLI0NiQFwsyXQDhwyCoIAAAAQA"]
[Sun Nov 23 16:41:52.927993 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.42:26617] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSLI0Pq-c47Q5mW5E9FjZQAAAZE"]
[Sun Nov 23 16:41:53.965051 2025] [proxy_fcgi:error] [pid 16066:tid 16084] [client 140.99.1.33:40437] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:54.206624 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.33:40437] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSLI0vq-c47Q5mW5E9FjlAAAAYI"]
[Sun Nov 23 16:41:54.624504 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.53:39107] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aSLI0tiQFwsyXQDhwyCoTAAAARA"]
[Sun Nov 23 16:41:55.014607 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 140.99.1.70:62587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:55.159200 2025] [proxy_fcgi:error] [pid 38740:tid 38800] [client 140.99.1.70:62587] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:55.397227 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.70:62587] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSLI0w13QPZSi6O8umWQBAAAAJY"]
[Sun Nov 23 16:41:55.805622 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.46:54347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:55.912278 2025] [proxy_fcgi:error] [pid 38740:tid 38809] [client 140.99.1.46:54347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:56.158163 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 140.99.1.46:54347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:56.538458 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.46:54347] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSLI1A13QPZSi6O8umWQOQAAAJY"]
[Sun Nov 23 16:41:57.301381 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.53:62445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:57.735471 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.53:62445] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSLI1diQFwsyXQDhwyCojAAAAQ0"]
[Sun Nov 23 16:41:58.046614 2025] [proxy_fcgi:error] [pid 16066:tid 16086] [client 140.99.1.2:56613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:58.438618 2025] [proxy_fcgi:error] [pid 16066:tid 16075] [client 140.99.1.2:56613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:58.570622 2025] [proxy_fcgi:error] [pid 16066:tid 16070] [client 140.99.1.2:56613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:59.237020 2025] [:error] [pid 16066:tid 16080] [client 140.99.1.2:56613] [client 140.99.1.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.2, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSLI1_q-c47Q5mW5E9FkGAAAAYs"]
[Sun Nov 23 16:41:59.500664 2025] [proxy_fcgi:error] [pid 16066:tid 16087] [client 140.99.1.2:56613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:00.336993 2025] [:error] [pid 16066:tid 16075] [client 140.99.1.2:56613] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSLI2Pq-c47Q5mW5E9FkLwAAAYY"]
[Sun Nov 23 16:42:00.549628 2025] [proxy_fcgi:error] [pid 16066:tid 16080] [client 140.99.1.8:24101] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:02.207796 2025] [:error] [pid 16066:tid 16082] [client 140.99.1.8:24101] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSLI2vq-c47Q5mW5E9FkcQAAAY0"]
[Sun Nov 23 16:42:02.418286 2025] [proxy_fcgi:error] [pid 38738:tid 38747] [client 140.99.1.17:55335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:02.671682 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 140.99.1.17:55335] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:11.587780 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.17:55335] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSLI4wytc6TL9XavPmP1wAAAAAE"]
[Sun Nov 23 16:42:12.611620 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.48:20541] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:12.772856 2025] [proxy_fcgi:error] [pid 38738:tid 38762] [client 140.99.1.48:20541] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:13.124257 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.48:20541] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSLI5Qytc6TL9XavPmP2DAAAAA4"]
[Sun Nov 23 16:42:13.475950 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.49:62881] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSLI5Q13QPZSi6O8umWRtwAAAIM"]
[Sun Nov 23 16:42:13.794621 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 140.99.1.27:33037] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:13.986706 2025] [proxy_fcgi:error] [pid 38824:tid 38841] [client 140.99.1.27:33037] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:14.304917 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.27:33037] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSLI5k8WZjXLvbHTHPewnwAAAMQ"]
[Sun Nov 23 16:42:14.561653 2025] [proxy_fcgi:error] [pid 16066:tid 16088] [client 140.99.1.9:39841] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:14.951948 2025] [proxy_fcgi:error] [pid 16066:tid 16069] [client 140.99.1.9:39841] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:15.079731 2025] [:error] [pid 16066:tid 16088] [client 140.99.1.9:39841] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSLI5_q-c47Q5mW5E9Fl1gAAAZM"]
[Sun Nov 23 16:42:15.424664 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.38:43163] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aSLI5w13QPZSi6O8umWRygAAAIA"]
[Sun Nov 23 16:42:16.272796 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.26:26089] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSLI6A13QPZSi6O8umWR2wAAAI4"]
[Sun Nov 23 16:42:16.597954 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.67:34375] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSLI6Pq-c47Q5mW5E9Fl9QAAAZE"]
[Sun Nov 23 16:42:16.861347 2025] [:error] [pid 14602:tid 14638] [client 140.99.1.68:25305] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSLI6B-I77jdD81pU-mUlAAAAVE"]
[Sun Nov 23 16:42:17.818504 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.20:64227] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSLI6fq-c47Q5mW5E9FmDgAAAY4"]
[Sun Nov 23 16:42:18.126178 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.76:59407] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSLI6g13QPZSi6O8umWSAAAAAJg"]
[Sun Nov 23 16:42:19.037980 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.77:63031] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSLI6w13QPZSi6O8umWSIgAAAJY"]
[Sun Nov 23 16:42:19.248032 2025] [:error] [pid 16066:tid 16069] [client 140.99.1.13:53801] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSLI6_q-c47Q5mW5E9FmLgAAAYA"]
[Sun Nov 23 16:42:19.570056 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.42:46937] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSLI6w13QPZSi6O8umWSNgAAAIM"]
[Sun Nov 23 16:42:19.963579 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.42:53991] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSLI6w13QPZSi6O8umWSQgAAAJU"]
[Sun Nov 23 16:42:20.659787 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.37:56163] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aSLI7A13QPZSi6O8umWSVQAAAJE"]
[Sun Nov 23 16:42:20.863682 2025] [proxy_fcgi:error] [pid 14602:tid 14623] [client 140.99.1.14:44101] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:21.474869 2025] [:error] [pid 14602:tid 14638] [client 140.99.1.14:44101] [client 140.99.1.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.14, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSLI7R-I77jdD81pU-mU6QAAAVE"]
[Sun Nov 23 16:42:22.377067 2025] [proxy_fcgi:error] [pid 14602:tid 14628] [client 140.99.1.14:44101] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:22.544625 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.14:44101] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSLI7h-I77jdD81pU-mVBgAAAUc"]
[Sun Nov 23 16:42:22.867855 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.32:38239] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSLI7gdvEgJm2n2cDmolugAAAEo"]
[Sun Nov 23 16:42:23.459665 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:23.713176 2025] [proxy_fcgi:error] [pid 38739:tid 38783] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:24.527014 2025] [proxy_fcgi:error] [pid 38739:tid 38790] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:24.700631 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:25.392110 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:25.533623 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:25.674630 2025] [proxy_fcgi:error] [pid 38739:tid 38789] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:25.802612 2025] [proxy_fcgi:error] [pid 38739:tid 38783] [client 140.99.1.10:38525] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:26.025974 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.10:38525] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLI8gdvEgJm2n2cDmomAgAAAFM"]
[Sun Nov 23 16:42:26.352326 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.6:48295] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSLI8gdvEgJm2n2cDmomBQAAAEw"]
[Sun Nov 23 16:42:26.535633 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.72:43887] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSLI8g13QPZSi6O8umWSwQAAAJE"]
[Sun Nov 23 16:42:26.920630 2025] [proxy_fcgi:error] [pid 14602:tid 14629] [client 140.99.1.26:50245] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:27.099667 2025] [proxy_fcgi:error] [pid 14602:tid 14639] [client 140.99.1.26:50245] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:27.376751 2025] [proxy_fcgi:error] [pid 14602:tid 14629] [client 140.99.1.26:50245] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:27.722413 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.26:50245] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSLI8x-I77jdD81pU-mVowAAAVI"]
[Sun Nov 23 16:42:27.935962 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.43:53995] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSLI8wdvEgJm2n2cDmomLAAAAFY"]
[Sun Nov 23 16:42:28.254039 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.71:52819] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSLI9Aytc6TL9XavPmP4EQAAAAA"]
[Sun Nov 23 16:42:28.999021 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.44:47221] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSLI9A13QPZSi6O8umWTDgAAAIg"]
[Sun Nov 23 16:42:29.448008 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.31:28065] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSLI9Q13QPZSi6O8umWTHgAAAIo"]
[Sun Nov 23 16:42:30.001376 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.20:53659] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSLI9QdvEgJm2n2cDmomawAAAEw"]
[Sun Nov 23 16:42:30.718971 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 140.99.1.62:33047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:31.002823 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 140.99.1.62:33047] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:32.152655 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.62:33047] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSLI-NiQFwsyXQDhwyCrcQAAARE"]
[Sun Nov 23 16:42:32.366631 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 140.99.1.2:43063] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:32.729688 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.2:43063] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSLI-Aytc6TL9XavPmP4sQAAAAc"]
[Sun Nov 23 16:42:33.319225 2025] [proxy_fcgi:error] [pid 16066:tid 16072] [client 140.99.1.49:34905] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:33.794858 2025] [proxy_fcgi:error] [pid 16066:tid 16093] [client 140.99.1.49:34905] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:33.984157 2025] [:error] [pid 16066:tid 16089] [client 140.99.1.49:34905] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSLI-fq-c47Q5mW5E9FnqwAAAZQ"]
[Sun Nov 23 16:42:34.588958 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.14:38077] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSLI-k8WZjXLvbHTHPex2AAAAMI"]
[Sun Nov 23 16:42:35.017774 2025] [proxy_fcgi:error] [pid 38738:tid 38754] [client 140.99.1.6:61853] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:35.330373 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.6:61853] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSLI-wytc6TL9XavPmP5IAAAAA8"]
[Sun Nov 23 16:42:36.351625 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.32:34961] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSLI_E8WZjXLvbHTHPex_wAAANA"]
[Sun Nov 23 16:42:36.595985 2025] [proxy_fcgi:error] [pid 38824:tid 38833] [client 140.99.1.11:53575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:36.717613 2025] [proxy_fcgi:error] [pid 38824:tid 38829] [client 140.99.1.11:53575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:37.292143 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.11:53575] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSLI_U8WZjXLvbHTHPeyEQAAANc"]
[Sun Nov 23 16:42:37.527495 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.20:40737] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSLI_Q13QPZSi6O8umWT8AAAAIE"]
[Sun Nov 23 16:42:38.208469 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.2:26745] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:38.574699 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.2:26745] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSLI_gytc6TL9XavPmP5jAAAAA8"]
[Sun Nov 23 16:42:38.798613 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.26:36597] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:39.370651 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 140.99.1.26:36597] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:39.489933 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.26:36597] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSLI_w13QPZSi6O8umWUPQAAAIw"]
[Sun Nov 23 16:42:40.473621 2025] [proxy_fcgi:error] [pid 44652:tid 44706] [client 140.99.1.77:22331] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:40.772979 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.77:22331] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLJANiQFwsyXQDhwyCsbgAAARU"]
[Sun Nov 23 16:42:41.103502 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.14:53337] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSLJAdiQFwsyXQDhwyCscwAAARA"]
[Sun Nov 23 16:42:41.688472 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.67:62051] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSLJAQdvEgJm2n2cDmonYwAAAEc"]
[Sun Nov 23 16:42:42.367905 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.3:48709] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aSLJAtiQFwsyXQDhwyCslAAAAQc"]
[Sun Nov 23 16:42:42.673922 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.53:33825] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSLJAgytc6TL9XavPmP51QAAAAc"]
[Sun Nov 23 16:42:43.432646 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.33:23377] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:54.494178 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.33:23377] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aSLJDgytc6TL9XavPmP66gAAAAc"]
[Sun Nov 23 16:43:28.078879 2025] [autoindex:error] [pid 38824:tid 38848] [client 140.99.1.63:60601] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:44:01.942817 2025] [autoindex:error] [pid 14602:tid 14631] [client 140.99.1.50:49843] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 17:24:48.218996 2025] [:error] [pid 38824:tid 38844] [client 176.65.132.18:49156] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aSLS4E8WZjXLvbHTHPfd9gAAANE"]
[Sun Nov 23 18:05:10.842852 2025] [:error] [pid 38738:tid 38748] [client 43.248.13.170:47611] [client 43.248.13.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.248.13.170, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSLcVgytc6TL9XavPmMx9QAAAAY"]
[Sun Nov 23 18:05:10.854696 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 43.248.13.170:47611] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 00:09:55.884979 2025] [:error] [pid 16066:tid 16089] [client 176.65.132.18:52576] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aSMx0_q-c47Q5mW5E9Hn6gAAAZQ"]
[Mon Nov 24 01:42:18.858589 2025] [:error] [pid 8337:tid 8360] [client 176.65.132.18:37234] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aSNHeuSmps4S2j95D5iBLAAAABU"]
[Mon Nov 24 07:13:40.224596 2025] [proxy_fcgi:error] [pid 12910:tid 12920] [client 165.85.56.95:14381] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Mon Nov 24 07:13:43.073399 2025] [proxy_fcgi:error] [pid 12910:tid 12928] [client 165.85.56.95:14381] AH01071: Got error 'PHP message: start 1763939622.5783PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763939623.0729-1763939622.5783', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 07:13:51.676695 2025] [proxy_fcgi:error] [pid 53508:tid 53524] [client 165.85.56.95:25144] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 07:13:52.628636 2025] [proxy_fcgi:error] [pid 53508:tid 53517] [client 165.85.56.95:25144] AH01071: Got error 'PHP message: start 1763939632.0961', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 07:13:53.320461 2025] [proxy_fcgi:error] [pid 53508:tid 53517] [client 165.85.56.95:25144] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763939633.32-1763939632.0961', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 07:15:54.074130 2025] [proxy_fcgi:error] [pid 12910:tid 12922] [client 165.85.56.95:45585] AH01071: Got error 'PHP message: start 1763939753.5732', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:15:54.493459 2025] [proxy_fcgi:error] [pid 12910:tid 12922] [client 165.85.56.95:45585] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763939754.4931-1763939753.5732', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:17:55.455005 2025] [proxy_fcgi:error] [pid 53508:tid 53511] [client 165.85.56.95:52161] AH01071: Got error 'PHP message: start 1763939874.7761', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:17:56.254877 2025] [proxy_fcgi:error] [pid 53508:tid 53511] [client 165.85.56.95:52161] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763939876.2543-1763939874.7761', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:19:57.255625 2025] [proxy_fcgi:error] [pid 12912:tid 12986] [client 165.85.56.95:25870] AH01071: Got error 'PHP message: start 1763939996.5261', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:19:57.984717 2025] [proxy_fcgi:error] [pid 12912:tid 12986] [client 165.85.56.95:25870] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763939997.9837-1763939996.5261', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:24:03.386528 2025] [proxy_fcgi:error] [pid 12999:tid 13012] [client 165.85.56.95:11431] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85'
[Mon Nov 24 07:24:04.606226 2025] [proxy_fcgi:error] [pid 12999:tid 13008] [client 165.85.56.95:11431] AH01071: Got error 'PHP message: start 1763940244.3275', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 07:24:05.123846 2025] [proxy_fcgi:error] [pid 12999:tid 13008] [client 165.85.56.95:11431] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763940245.1232-1763940244.3275', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 07:26:05.901846 2025] [proxy_fcgi:error] [pid 53508:tid 53522] [client 165.85.56.95:47331] AH01071: Got error 'PHP message: start 1763940365.3751', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 07:26:06.296532 2025] [proxy_fcgi:error] [pid 53508:tid 53522] [client 165.85.56.95:47331] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763940366.296-1763940365.3751', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 08:21:20.034606 2025] [:error] [pid 48599:tid 48620] [client 103.65.237.124:59166] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aSOlAJzvu6PDJiRKE3KraAAAAZE"]
[Mon Nov 24 08:21:20.284708 2025] [:error] [pid 48688:tid 48712] [client 103.65.237.124:59158] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aSOlABm2q1FkzLam7A0ViwAAAlQ"]
[Mon Nov 24 08:58:41.888435 2025] [proxy_fcgi:error] [pid 48601:tid 48673] [client 165.85.56.95:51185] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Mon Nov 24 08:58:43.683575 2025] [proxy_fcgi:error] [pid 48601:tid 48661] [client 165.85.56.95:51185] AH01071: Got error 'PHP message: start 1763945923.1325PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763945923.6828-1763945923.1325', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:00:44.716624 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 165.85.56.95:54811] AH01071: Got error 'PHP message: start 1763946044.2328PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946044.7158-1763946044.2328', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:02:46.037143 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 165.85.56.95:53030] AH01071: Got error 'PHP message: start 1763946165.5677PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946166.0366-1763946165.5677', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:04:47.279640 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 165.85.56.95:22378] AH01071: Got error 'PHP message: start 1763946286.8795PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946287.2782-1763946286.8795', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:06:48.551619 2025] [proxy_fcgi:error] [pid 48688:tid 48699] [client 165.85.56.95:54984] AH01071: Got error 'PHP message: start 1763946407.8072PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946408.5508-1763946407.8072', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:08:52.744898 2025] [proxy_fcgi:error] [pid 48688:tid 48701] [client 165.85.56.95:44293] AH01071: Got error 'PHP message: start 1763946532.0703PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946532.7442-1763946532.0703', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:10:54.154682 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 165.85.56.95:50949] AH01071: Got error 'PHP message: start 1763946653.627PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946654.1539-1763946653.627', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:12:56.130656 2025] [proxy_fcgi:error] [pid 48600:tid 48644] [client 165.85.56.95:9986] AH01071: Got error 'PHP message: start 1763946775.0714PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946776.1298-1763946775.0714', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:14:57.758568 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 165.85.56.95:47557] AH01071: Got error 'PHP message: start 1763946897.0176PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763946897.7578-1763946897.0176', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:16:59.085946 2025] [proxy_fcgi:error] [pid 48688:tid 48714] [client 165.85.56.95:54726] AH01071: Got error 'PHP message: start 1763947018.6495PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947019.0853-1763947018.6495', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:19:00.650717 2025] [proxy_fcgi:error] [pid 48600:tid 48654] [client 165.85.56.95:44208] AH01071: Got error 'PHP message: start 1763947140.0031PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947140.6494-1763947140.0031', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:20:01.090425 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 165.85.56.95:63662] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:20:04.832438 2025] [proxy_fcgi:error] [pid 48600:tid 48640] [client 165.85.56.95:63662] AH01071: Got error 'PHP message: start 1763947202.6562', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:20:04.832952 2025] [proxy_fcgi:error] [pid 48600:tid 48640] [client 165.85.56.95:63662] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947204.832-1763947202.6562', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:20:23.338783 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 165.85.56.95:61430] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:20:25.025564 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 165.85.56.95:61430] AH01071: Got error 'PHP message: start 1763947224.2992', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:20:25.026098 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 165.85.56.95:61430] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947225.0253-1763947224.2992', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:20:42.524022 2025] [proxy_fcgi:error] [pid 48688:tid 48705] [client 165.85.56.95:37860] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-21
[Mon Nov 24 09:21:24.911352 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 165.85.56.95:47185] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:26.022954 2025] [proxy_fcgi:error] [pid 48601:tid 48660] [client 165.85.56.95:47185] AH01071: Got error 'PHP message: start 1763947285.3024', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:26.023464 2025] [proxy_fcgi:error] [pid 48601:tid 48660] [client 165.85.56.95:47185] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947286.0227-1763947285.3024', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:26.730628 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 165.85.56.95:48226] AH01071: Got error 'PHP message: start 1763947286.0261', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:26.731065 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 165.85.56.95:48226] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947286.7301-1763947286.0261', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:34.826465 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 165.85.56.95:56174] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:36.508646 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 165.85.56.95:56174] AH01071: Got error 'PHP message: start 1763947295.7352', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:36.509216 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 165.85.56.95:56174] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947296.5084-1763947295.7352', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:21:41.870927 2025] [proxy_fcgi:error] [pid 48599:tid 48617] [client 165.85.56.95:56174] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-22
[Mon Nov 24 09:22:34.611637 2025] [proxy_fcgi:error] [pid 49900:tid 49915] [client 165.85.56.95:32823] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:22:35.697291 2025] [proxy_fcgi:error] [pid 49900:tid 49910] [client 165.85.56.95:32823] AH01071: Got error 'PHP message: start 1763947355.1102', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:22:35.697853 2025] [proxy_fcgi:error] [pid 49900:tid 49910] [client 165.85.56.95:32823] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947355.697-1763947355.1102', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:22:36.010394 2025] [proxy_fcgi:error] [pid 49900:tid 49908] [client 165.85.56.95:11144] AH01071: Got error 'PHP message: start 1763947355.6993', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:22:36.010842 2025] [proxy_fcgi:error] [pid 49900:tid 49908] [client 165.85.56.95:11144] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947356.0102-1763947355.6993', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:23:56.070095 2025] [proxy_fcgi:error] [pid 49900:tid 49916] [client 165.85.56.95:27674] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:23:57.641666 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 165.85.56.95:27674] AH01071: Got error 'PHP message: start 1763947437.0195', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:23:57.642086 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 165.85.56.95:27674] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947437.641-1763947437.0195', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:23:57.934624 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:36329] AH01071: Got error 'PHP message: start 1763947437.6457', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:23:57.935075 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:36329] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947437.9334-1763947437.6457', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 09:25:59.089630 2025] [proxy_fcgi:error] [pid 48688:tid 48706] [client 165.85.56.95:35035] AH01071: Got error 'PHP message: start 1763947558.3539', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:25:59.090097 2025] [proxy_fcgi:error] [pid 48688:tid 48706] [client 165.85.56.95:35035] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947559.0889-1763947558.3539', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:28:00.406657 2025] [proxy_fcgi:error] [pid 49900:tid 49915] [client 165.85.56.95:47084] AH01071: Got error 'PHP message: start 1763947679.6612', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:28:00.407284 2025] [proxy_fcgi:error] [pid 49900:tid 49915] [client 165.85.56.95:47084] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947680.4062-1763947679.6612', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:30:01.779499 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 165.85.56.95:8696] AH01071: Got error 'PHP message: start 1763947800.9413', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:30:01.780060 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 165.85.56.95:8696] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947801.7793-1763947800.9413', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:32:03.027145 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 165.85.56.95:42916] AH01071: Got error 'PHP message: start 1763947922.2659', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:32:03.027757 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 165.85.56.95:42916] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763947923.0267-1763947922.2659', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:34:04.115424 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 165.85.56.95:36741] AH01071: Got error 'PHP message: start 1763948043.5294', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:34:04.116039 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 165.85.56.95:36741] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948044.1152-1763948043.5294', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:36:05.240660 2025] [proxy_fcgi:error] [pid 48601:tid 48680] [client 165.85.56.95:14797] AH01071: Got error 'PHP message: start 1763948164.5807', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:36:05.241258 2025] [proxy_fcgi:error] [pid 48601:tid 48680] [client 165.85.56.95:14797] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948165.2402-1763948164.5807', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:37:48.110250 2025] [proxy_fcgi:error] [pid 48599:tid 48614] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:48.313998 2025] [proxy_fcgi:error] [pid 48599:tid 48610] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:48.427917 2025] [proxy_fcgi:error] [pid 48599:tid 48613] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:48.530084 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:48.652410 2025] [proxy_fcgi:error] [pid 48599:tid 48605] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:48.762455 2025] [proxy_fcgi:error] [pid 48599:tid 48617] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.003172 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.116617 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.231693 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.334009 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.563234 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.676161 2025] [proxy_fcgi:error] [pid 48599:tid 48621] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.785786 2025] [proxy_fcgi:error] [pid 48599:tid 48611] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.894787 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:49.996063 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:50.097872 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:50.199190 2025] [proxy_fcgi:error] [pid 48599:tid 48614] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:50.595207 2025] [proxy_fcgi:error] [pid 48599:tid 48613] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:50.694535 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 140.99.1.30:36793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:52.429564 2025] [:error] [pid 48599:tid 48604] [client 140.99.1.30:36793] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSO28Jzvu6PDJiRKE3LRuwAAAYE"]
[Mon Nov 24 09:37:53.020445 2025] [:error] [pid 9630:tid 9641] [client 140.99.1.2:55041] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSO28SrSgUgPGkizt2poBQAAAEk"]
[Mon Nov 24 09:37:53.594256 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 140.99.1.71:36187] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:53.946096 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.71:36187] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aSO28YMM4MaVTk74-AZSCwAAAgs"]
[Mon Nov 24 09:37:54.263719 2025] [proxy_fcgi:error] [pid 48688:tid 48709] [client 140.99.1.47:41733] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:54.372330 2025] [proxy_fcgi:error] [pid 48688:tid 48702] [client 140.99.1.47:41733] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:54.468972 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.47:41733] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSO28hm2q1FkzLam7A1E5gAAAkY"]
[Mon Nov 24 09:37:54.850625 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 140.99.1.32:25281] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:55.495954 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.32:25281] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSO28zCyPLrvg06aormeBAAAABM"]
[Mon Nov 24 09:37:55.852100 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.8:29057] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSO28xm2q1FkzLam7A1E6gAAAlQ"]
[Mon Nov 24 09:37:56.103438 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.72:57191] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSO29PtOzSUAQvWVjBcyowAAAdA"]
[Mon Nov 24 09:37:56.325202 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.71:43299] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSO29Bm2q1FkzLam7A1E7AAAAlI"]
[Mon Nov 24 09:37:56.521953 2025] [:error] [pid 48601:tid 48664] [client 140.99.1.77:50319] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSO29IMM4MaVTk74-AZSEQAAAgc"]
[Mon Nov 24 09:37:56.761094 2025] [:error] [pid 48688:tid 48695] [client 140.99.1.5:33427] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSO29Bm2q1FkzLam7A1E7QAAAkM"]
[Mon Nov 24 09:37:57.070466 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.48:30771] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSO29YMM4MaVTk74-AZSEwAAAhM"]
[Mon Nov 24 09:37:57.324410 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 140.99.1.67:23493] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:57.559845 2025] [:error] [pid 48600:tid 48651] [client 140.99.1.67:23493] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aSO29ftOzSUAQvWVjBcypwAAAdU"]
[Mon Nov 24 09:37:57.909675 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 140.99.1.39:39107] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:58.393205 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.39:39107] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSO29oMM4MaVTk74-AZSGgAAAgU"]
[Mon Nov 24 09:37:58.759701 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.16:38909] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSO29pzvu6PDJiRKE3LRwQAAAZU"]
[Mon Nov 24 09:37:58.945382 2025] [proxy_fcgi:error] [pid 9630:tid 9646] [client 140.99.1.69:21511] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:59.049479 2025] [:error] [pid 9630:tid 9644] [client 140.99.1.69:21511] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSO29yrSgUgPGkizt2poDAAAAEw"]
[Mon Nov 24 09:37:59.302817 2025] [proxy_fcgi:error] [pid 9630:tid 9645] [client 140.99.1.75:48481] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:37:59.655090 2025] [proxy_fcgi:error] [pid 9630:tid 9648] [client 140.99.1.75:48481] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:00.007842 2025] [:error] [pid 9630:tid 9632] [client 140.99.1.75:48481] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSO2-CrSgUgPGkizt2poFQAAAEA"]
[Mon Nov 24 09:38:00.221770 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 140.99.1.37:44577] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:00.326159 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.37:44577] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSO2-DCyPLrvg06aormeDgAAAAM"]
[Mon Nov 24 09:38:00.525545 2025] [proxy_fcgi:error] [pid 48599:tid 48616] [client 140.99.1.11:30971] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:00.751303 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.11:30971] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSO2-Jzvu6PDJiRKE3LRyAAAAZg"]
[Mon Nov 24 09:38:01.045162 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.24:32165] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSO2-Zzvu6PDJiRKE3LRygAAAYs"]
[Mon Nov 24 09:38:01.650367 2025] [proxy_fcgi:error] [pid 48688:tid 48696] [client 140.99.1.3:29787] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:01.818267 2025] [proxy_fcgi:error] [pid 48688:tid 48697] [client 140.99.1.3:29787] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:02.290639 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.3:29787] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSO2-hm2q1FkzLam7A1E9wAAAk8"]
[Mon Nov 24 09:38:02.652201 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.2:36947] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSO2-hm2q1FkzLam7A1E-gAAAk4"]
[Mon Nov 24 09:38:03.214390 2025] [:error] [pid 9630:tid 9637] [client 140.99.1.18:50095] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSO2-yrSgUgPGkizt2poGgAAAEU"]
[Mon Nov 24 09:38:03.469508 2025] [:error] [pid 48599:tid 48609] [client 140.99.1.16:62121] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSO2-5zvu6PDJiRKE3LRywAAAYY"]
[Mon Nov 24 09:38:03.687019 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.48:53737] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSO2-zCyPLrvg06aormeEQAAAAA"]
[Mon Nov 24 09:38:04.215182 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 140.99.1.52:33395] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:04.355494 2025] [:error] [pid 48601:tid 48672] [client 140.99.1.52:33395] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSO2_IMM4MaVTk74-AZSJgAAAg8"]
[Mon Nov 24 09:38:04.565194 2025] [:error] [pid 49900:tid 49912] [client 140.99.1.8:56543] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSO2_DCyPLrvg06aormeEwAAAAo"]
[Mon Nov 24 09:38:04.766145 2025] [:error] [pid 9630:tid 9644] [client 140.99.1.30:54145] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSO2_CrSgUgPGkizt2poGwAAAEw"]
[Mon Nov 24 09:38:06.701708 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:30160] AH01071: Got error 'PHP message: start 1763948285.6793', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:38:06.702288 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:30160] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948286.7011-1763948285.6793', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:38:06.839169 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 140.99.1.48:39657] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:07.104776 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 140.99.1.48:39657] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:07.213820 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 140.99.1.48:39657] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:07.649428 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.48:39657] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aSO2__tOzSUAQvWVjBcytAAAAdg"]
[Mon Nov 24 09:38:08.167823 2025] [:error] [pid 48688:tid 48699] [client 140.99.1.38:53251] [client 140.99.1.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.38, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSO3ABm2q1FkzLam7A1FAQAAAkc"]
[Mon Nov 24 09:38:08.272763 2025] [proxy_fcgi:error] [pid 48688:tid 48709] [client 140.99.1.38:53251] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:08.905795 2025] [proxy_fcgi:error] [pid 48688:tid 48700] [client 140.99.1.38:53251] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:09.017684 2025] [proxy_fcgi:error] [pid 48688:tid 48714] [client 140.99.1.38:53251] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:09.577679 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.38:53251] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSO3ARm2q1FkzLam7A1FDgAAAk8"]
[Mon Nov 24 09:38:09.895664 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 140.99.1.33:50105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:09.990299 2025] [:error] [pid 9630:tid 9637] [client 140.99.1.33:50105] [client 140.99.1.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.33, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSO3ASrSgUgPGkizt2poKAAAAEU"]
[Mon Nov 24 09:38:10.236094 2025] [:error] [pid 9630:tid 9635] [client 140.99.1.33:50105] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aSO3AirSgUgPGkizt2poKgAAAEM"]
[Mon Nov 24 09:38:10.453489 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 140.99.1.5:56727] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:10.547649 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 140.99.1.5:56727] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:10.862674 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 140.99.1.5:56727] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:11.077032 2025] [proxy_fcgi:error] [pid 48600:tid 48639] [client 140.99.1.5:56727] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:11.268816 2025] [:error] [pid 48600:tid 48633] [client 140.99.1.5:56727] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSO3A_tOzSUAQvWVjBcyvQAAAcM"]
[Mon Nov 24 09:38:11.566185 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 140.99.1.71:41053] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:11.871224 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 140.99.1.71:41053] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:12.092695 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 140.99.1.71:41053] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:12.296145 2025] [proxy_fcgi:error] [pid 48599:tid 48608] [client 140.99.1.71:41053] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:12.425388 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.71:41053] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSO3BJzvu6PDJiRKE3LR4gAAAYM"]
[Mon Nov 24 09:38:12.622001 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 140.99.1.53:40993] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:12.762476 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 140.99.1.53:40993] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:12.859757 2025] [:error] [pid 48600:tid 48640] [client 140.99.1.53:40993] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSO3BPtOzSUAQvWVjBcywAAAAco"]
[Mon Nov 24 09:38:13.284970 2025] [proxy_fcgi:error] [pid 48599:tid 48619] [client 140.99.1.31:26395] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:13.484649 2025] [:error] [pid 48599:tid 48604] [client 140.99.1.31:26395] [client 140.99.1.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSO3BZzvu6PDJiRKE3LR5wAAAYE"]
[Mon Nov 24 09:38:13.582190 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.31:26395] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSO3BZzvu6PDJiRKE3LR6AAAAZg"]
[Mon Nov 24 09:38:14.858761 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 140.99.1.49:57769] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:15.380133 2025] [proxy_fcgi:error] [pid 48601:tid 48659] [client 140.99.1.49:57769] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:15.584294 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 140.99.1.49:57769] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:15.679742 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.49:57769] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSO3B4MM4MaVTk74-AZSYwAAAhM"]
[Mon Nov 24 09:38:15.964973 2025] [proxy_fcgi:error] [pid 48599:tid 48613] [client 140.99.1.18:53379] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:16.282390 2025] [:error] [pid 48599:tid 48626] [client 140.99.1.18:53379] [client 140.99.1.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.18, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSO3CJzvu6PDJiRKE3LR7AAAAZc"]
[Mon Nov 24 09:38:16.426298 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 140.99.1.18:53379] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:16.529865 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 140.99.1.18:53379] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:16.641749 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 140.99.1.18:53379] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:16.734350 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.18:53379] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSO3CJzvu6PDJiRKE3LR8gAAAYI"]
[Mon Nov 24 09:38:16.941912 2025] [proxy_fcgi:error] [pid 48601:tid 48662] [client 140.99.1.74:42045] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:17.041435 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.74:42045] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aSO3CYMM4MaVTk74-AZSagAAAgY"]
[Mon Nov 24 09:38:17.424826 2025] [proxy_fcgi:error] [pid 48600:tid 48638] [client 140.99.1.13:31105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:17.521377 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.13:31105] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSO3CftOzSUAQvWVjBcyzAAAAdc"]
[Mon Nov 24 09:38:18.011801 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 140.99.1.6:25539] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:18.110821 2025] [:error] [pid 48600:tid 48649] [client 140.99.1.6:25539] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSO3CvtOzSUAQvWVjBcy0QAAAdM"]
[Mon Nov 24 09:38:18.329514 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.65:60209] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSO3CvtOzSUAQvWVjBcy0gAAAdI"]
[Mon Nov 24 09:38:18.556173 2025] [proxy_fcgi:error] [pid 48601:tid 48660] [client 140.99.1.76:38931] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:18.656152 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 140.99.1.76:38931] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:18.766258 2025] [proxy_fcgi:error] [pid 48601:tid 48681] [client 140.99.1.76:38931] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:19.222657 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.76:38931] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSO3C4MM4MaVTk74-AZScwAAAhM"]
[Mon Nov 24 09:38:20.654012 2025] [:error] [pid 9630:tid 9643] [client 140.99.1.9:35831] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSO3DCrSgUgPGkizt2poNgAAAEs"]
[Mon Nov 24 09:38:21.268828 2025] [:error] [pid 9630:tid 9645] [client 140.99.1.9:36435] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aSO3DSrSgUgPGkizt2poOwAAAE0"]
[Mon Nov 24 09:38:21.482353 2025] [proxy_fcgi:error] [pid 9630:tid 9656] [client 140.99.1.7:37763] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:21.734081 2025] [proxy_fcgi:error] [pid 9630:tid 9652] [client 140.99.1.7:37763] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:21.832203 2025] [:error] [pid 9630:tid 9639] [client 140.99.1.7:37763] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSO3DSrSgUgPGkizt2poQAAAAEc"]
[Mon Nov 24 09:38:22.025167 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 140.99.1.49:38049] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:22.235166 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.49:38049] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aSO3DirSgUgPGkizt2poQwAAAFA"]
[Mon Nov 24 09:38:22.442388 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 140.99.1.15:31007] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:22.909823 2025] [:error] [pid 9630:tid 9633] [client 140.99.1.15:31007] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSO3DirSgUgPGkizt2poRwAAAEE"]
[Mon Nov 24 09:38:23.220854 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 140.99.1.50:33333] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:23.607019 2025] [proxy_fcgi:error] [pid 9630:tid 9642] [client 140.99.1.50:33333] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:23.824773 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 140.99.1.50:33333] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:23.926055 2025] [:error] [pid 9630:tid 9656] [client 140.99.1.50:33333] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSO3DyrSgUgPGkizt2poZAAAAFg"]
[Mon Nov 24 09:38:24.144872 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.48:36189] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aSO3ECrSgUgPGkizt2pobAAAAFA"]
[Mon Nov 24 09:38:24.341742 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.10:55613] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSO3EIMM4MaVTk74-AZSfAAAAgA"]
[Mon Nov 24 09:38:24.544308 2025] [:error] [pid 49900:tid 49924] [client 140.99.1.5:35501] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSO3EDCyPLrvg06aormeJgAAABY"]
[Mon Nov 24 09:38:24.818062 2025] [proxy_fcgi:error] [pid 48688:tid 48716] [client 140.99.1.5:60481] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:24.921466 2025] [:error] [pid 48688:tid 48692] [client 140.99.1.5:60481] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSO3EBm2q1FkzLam7A1FKQAAAkA"]
[Mon Nov 24 09:38:25.121001 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.15:43137] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSO3ETCyPLrvg06aormeJwAAABM"]
[Mon Nov 24 09:38:25.333042 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 140.99.1.15:55247] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:25.566308 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.15:55247] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSO3ESrSgUgPGkizt2pokwAAAFA"]
[Mon Nov 24 09:38:25.761343 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.33:46693] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSO3ETCyPLrvg06aormeKQAAAA4"]
[Mon Nov 24 09:38:25.960115 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.73:55189] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSO3ETCyPLrvg06aormeKgAAAA0"]
[Mon Nov 24 09:38:26.308406 2025] [:error] [pid 49900:tid 49911] [client 140.99.1.10:41939] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSO3EjCyPLrvg06aormeKwAAAAk"]
[Mon Nov 24 09:38:26.594519 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.18:44987] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSO3EjCyPLrvg06aormeLgAAAAM"]
[Mon Nov 24 09:38:27.123232 2025] [:error] [pid 49900:tid 49918] [client 140.99.1.74:57197] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSO3EzCyPLrvg06aormeMQAAABA"]
[Mon Nov 24 09:38:27.310400 2025] [proxy_fcgi:error] [pid 49900:tid 49916] [client 140.99.1.37:46103] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:27.634919 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 140.99.1.37:46103] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:27.764685 2025] [:error] [pid 49900:tid 49911] [client 140.99.1.37:46103] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSO3EzCyPLrvg06aormeNwAAAAk"]
[Mon Nov 24 09:38:28.097236 2025] [proxy_fcgi:error] [pid 9630:tid 9642] [client 140.99.1.71:29833] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:28.232961 2025] [proxy_fcgi:error] [pid 9630:tid 9640] [client 140.99.1.71:29833] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:28.705426 2025] [proxy_fcgi:error] [pid 9630:tid 9656] [client 140.99.1.71:29833] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:28.890184 2025] [:error] [pid 9630:tid 9652] [client 140.99.1.71:29833] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aSO3FCrSgUgPGkizt2pongAAAFQ"]
[Mon Nov 24 09:38:29.464167 2025] [:error] [pid 9630:tid 9635] [client 140.99.1.42:43339] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSO3FSrSgUgPGkizt2poogAAAEM"]
[Mon Nov 24 09:38:29.664209 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.24:31073] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSO3FftOzSUAQvWVjBcy6QAAAcI"]
[Mon Nov 24 09:38:30.313990 2025] [:error] [pid 49900:tid 49920] [client 140.99.1.43:58877] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSO3FjCyPLrvg06aormePQAAABI"]
[Mon Nov 24 09:38:30.732642 2025] [proxy_fcgi:error] [pid 9630:tid 9643] [client 140.99.1.9:37095] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:30.841146 2025] [proxy_fcgi:error] [pid 9630:tid 9642] [client 140.99.1.9:37095] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:30.979773 2025] [proxy_fcgi:error] [pid 9630:tid 9640] [client 140.99.1.9:37095] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:31.075422 2025] [proxy_fcgi:error] [pid 9630:tid 9651] [client 140.99.1.9:37095] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:31.743443 2025] [:error] [pid 9630:tid 9652] [client 140.99.1.9:37095] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSO3FyrSgUgPGkizt2porwAAAFQ"]
[Mon Nov 24 09:38:31.951798 2025] [:error] [pid 9630:tid 9654] [client 140.99.1.15:60791] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSO3FyrSgUgPGkizt2posAAAAFY"]
[Mon Nov 24 09:38:32.163248 2025] [:error] [pid 48599:tid 48616] [client 140.99.1.18:33013] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSO3GJzvu6PDJiRKE3LSDAAAAY0"]
[Mon Nov 24 09:38:32.386965 2025] [:error] [pid 48600:tid 48638] [client 140.99.1.44:27709] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSO3GPtOzSUAQvWVjBcy6wAAAcg"]
[Mon Nov 24 09:38:32.747344 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.73:57365] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSO3GPtOzSUAQvWVjBcy7AAAAdc"]
[Mon Nov 24 09:38:32.981831 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.32:30339] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSO3GPtOzSUAQvWVjBcy7QAAAc0"]
[Mon Nov 24 09:38:33.330474 2025] [:error] [pid 9630:tid 9634] [client 140.99.1.8:24383] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSO3GSrSgUgPGkizt2poswAAAEI"]
[Mon Nov 24 09:38:33.584260 2025] [:error] [pid 9630:tid 9647] [client 140.99.1.71:45769] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSO3GSrSgUgPGkizt2pouAAAAE8"]
[Mon Nov 24 09:38:33.798985 2025] [:error] [pid 9630:tid 9642] [client 140.99.1.30:27903] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSO3GSrSgUgPGkizt2pouQAAAEo"]
[Mon Nov 24 09:38:34.043803 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.72:44875] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSO3GoMM4MaVTk74-AZSigAAAgY"]
[Mon Nov 24 09:38:34.520676 2025] [:error] [pid 9630:tid 9636] [client 140.99.1.68:59927] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSO3GirSgUgPGkizt2povgAAAEQ"]
[Mon Nov 24 09:38:34.845349 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.17:45401] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSO3Ghm2q1FkzLam7A1FNQAAAkk"]
[Mon Nov 24 09:38:35.047158 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 140.99.1.65:52829] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:35.247276 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.65:52829] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSO3G5zvu6PDJiRKE3LSFQAAAY8"]
[Mon Nov 24 09:38:35.701398 2025] [:error] [pid 9630:tid 9635] [client 140.99.1.7:38879] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSO3GyrSgUgPGkizt2powgAAAEM"]
[Mon Nov 24 09:38:36.162453 2025] [proxy_fcgi:error] [pid 48688:tid 48709] [client 140.99.1.15:48537] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:36.257486 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.15:48537] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSO3HBm2q1FkzLam7A1FOgAAAkY"]
[Mon Nov 24 09:38:37.692064 2025] [proxy_fcgi:error] [pid 48688:tid 48708] [client 140.99.1.63:58593] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:37.829600 2025] [proxy_fcgi:error] [pid 48688:tid 48696] [client 140.99.1.63:58593] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:37.929606 2025] [proxy_fcgi:error] [pid 48688:tid 48711] [client 140.99.1.63:58593] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:38.277036 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.63:58593] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSO3Hhm2q1FkzLam7A1FQwAAAks"]
[Mon Nov 24 09:38:38.613707 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 140.99.1.70:39093] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:38.713019 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.70:39093] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSO3Hpzvu6PDJiRKE3LSHgAAAYA"]
[Mon Nov 24 09:38:39.345095 2025] [proxy_fcgi:error] [pid 9630:tid 9656] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:39.465780 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:39.574621 2025] [proxy_fcgi:error] [pid 9630:tid 9654] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:39.831014 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:40.215058 2025] [proxy_fcgi:error] [pid 9630:tid 9634] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:40.322521 2025] [proxy_fcgi:error] [pid 9630:tid 9648] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:40.443505 2025] [proxy_fcgi:error] [pid 9630:tid 9641] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:40.543167 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:40.873926 2025] [proxy_fcgi:error] [pid 9630:tid 9642] [client 140.99.1.38:56637] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:40.972271 2025] [:error] [pid 9630:tid 9650] [client 140.99.1.38:56637] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSO3ICrSgUgPGkizt2po2QAAAFI"]
[Mon Nov 24 09:38:41.162846 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.47:46359] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSO3IRm2q1FkzLam7A1FRQAAAlg"]
[Mon Nov 24 09:38:41.356161 2025] [:error] [pid 48600:tid 48649] [client 140.99.1.48:46363] [client 140.99.1.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.48, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSO3IftOzSUAQvWVjBcy8AAAAdM"]
[Mon Nov 24 09:38:41.362487 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 140.99.1.48:46363] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:41.468747 2025] [proxy_fcgi:error] [pid 48600:tid 48630] [client 140.99.1.48:46363] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:41.594222 2025] [:error] [pid 48600:tid 48641] [client 140.99.1.48:46363] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSO3IftOzSUAQvWVjBcy8gAAAcs"]
[Mon Nov 24 09:38:41.975565 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 140.99.1.42:29505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:42.115925 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.42:29505] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSO3IjCyPLrvg06aormeSQAAAAM"]
[Mon Nov 24 09:38:42.340030 2025] [:error] [pid 49900:tid 49903] [client 140.99.1.53:45075] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSO3IjCyPLrvg06aormeSgAAAAE"]
[Mon Nov 24 09:38:42.986773 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.8:59279] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSO3IoMM4MaVTk74-AZSngAAAgU"]
[Mon Nov 24 09:38:43.235727 2025] [:error] [pid 48600:tid 48652] [client 140.99.1.6:40719] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aSO3I_tOzSUAQvWVjBcy8wAAAdY"]
[Mon Nov 24 09:38:43.980276 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 140.99.1.78:57969] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:44.233648 2025] [:error] [pid 9630:tid 9637] [client 140.99.1.78:57969] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSO3JCrSgUgPGkizt2po4wAAAEU"]
[Mon Nov 24 09:38:44.681899 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 140.99.1.75:54269] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:44.925324 2025] [:error] [pid 9630:tid 9642] [client 140.99.1.75:54269] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aSO3JCrSgUgPGkizt2po6gAAAEo"]
[Mon Nov 24 09:38:45.184992 2025] [:error] [pid 48688:tid 48697] [client 140.99.1.68:44521] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aSO3JRm2q1FkzLam7A1FSgAAAkU"]
[Mon Nov 24 09:38:45.584917 2025] [proxy_fcgi:error] [pid 49900:tid 49908] [client 140.99.1.52:46477] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:45.695040 2025] [:error] [pid 49900:tid 49925] [client 140.99.1.52:46477] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSO3JTCyPLrvg06aormeUAAAABc"]
[Mon Nov 24 09:38:45.935370 2025] [:error] [pid 9630:tid 9652] [client 140.99.1.48:40195] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSO3JSrSgUgPGkizt2po7QAAAFQ"]
[Mon Nov 24 09:38:46.379820 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 140.99.1.28:24569] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:46.492862 2025] [proxy_fcgi:error] [pid 9630:tid 9637] [client 140.99.1.28:24569] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:46.691760 2025] [proxy_fcgi:error] [pid 9630:tid 9640] [client 140.99.1.28:24569] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:46.899531 2025] [:error] [pid 9630:tid 9645] [client 140.99.1.28:24569] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aSO3JirSgUgPGkizt2po9gAAAE0"]
[Mon Nov 24 09:38:47.193271 2025] [:error] [pid 48599:tid 48615] [client 140.99.1.53:61889] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSO3J5zvu6PDJiRKE3LSLAAAAYw"]
[Mon Nov 24 09:38:47.504136 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 140.99.1.70:36491] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:47.604405 2025] [proxy_fcgi:error] [pid 48688:tid 48708] [client 140.99.1.70:36491] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:47.931646 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 140.99.1.70:36491] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:48.102378 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.70:36491] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSO3KBm2q1FkzLam7A1FUgAAAlU"]
[Mon Nov 24 09:38:48.343707 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.46:58513] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSO3KBm2q1FkzLam7A1FUwAAAks"]
[Mon Nov 24 09:38:48.624005 2025] [:error] [pid 9630:tid 9650] [client 140.99.1.16:60253] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSO3KCrSgUgPGkizt2po_AAAAFI"]
[Mon Nov 24 09:38:49.275918 2025] [proxy_fcgi:error] [pid 48599:tid 48614] [client 140.99.1.17:62467] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:49.381930 2025] [:error] [pid 48599:tid 48610] [client 140.99.1.17:62467] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSO3KZzvu6PDJiRKE3LSNQAAAYc"]
[Mon Nov 24 09:38:49.738606 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.13:28055] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSO3KTCyPLrvg06aormeXAAAABE"]
[Mon Nov 24 09:38:50.066288 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 140.99.1.65:48465] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:50.185873 2025] [proxy_fcgi:error] [pid 48601:tid 48659] [client 140.99.1.65:48465] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:50.380504 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 140.99.1.65:48465] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:51.220300 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.65:48465] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aSO3K4MM4MaVTk74-AZSrgAAAg4"]
[Mon Nov 24 09:38:51.448043 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.65:48465] File does not exist: /home/pumpbooking/public_html/worm.PhP
[Mon Nov 24 09:38:52.008149 2025] [proxy_fcgi:error] [pid 48601:tid 48663] [client 140.99.1.65:48465] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:52.205127 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 140.99.1.65:48465] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:52.309318 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 140.99.1.65:48465] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:52.402758 2025] [:error] [pid 48601:tid 48677] [client 140.99.1.65:48465] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSO3LIMM4MaVTk74-AZStgAAAhQ"]
[Mon Nov 24 09:38:52.616271 2025] [:error] [pid 48688:tid 48695] [client 140.99.1.47:53945] [client 140.99.1.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.47, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSO3LBm2q1FkzLam7A1FWQAAAkM"]
[Mon Nov 24 09:38:52.724250 2025] [proxy_fcgi:error] [pid 48688:tid 48699] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:52.921370 2025] [proxy_fcgi:error] [pid 48688:tid 48697] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:53.023273 2025] [proxy_fcgi:error] [pid 48688:tid 48702] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:53.279597 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:53.493664 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:53.897669 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:54.620515 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:54.722720 2025] [proxy_fcgi:error] [pid 48688:tid 48701] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:54.821129 2025] [proxy_fcgi:error] [pid 48688:tid 48699] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:55.123749 2025] [proxy_fcgi:error] [pid 48688:tid 48697] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:55.347401 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:55.465336 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 140.99.1.47:53945] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:55.622285 2025] [:error] [pid 48688:tid 48704] [client 140.99.1.47:53945] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSO3Lxm2q1FkzLam7A1FdwAAAkw"]
[Mon Nov 24 09:38:55.921990 2025] [proxy_fcgi:error] [pid 49900:tid 49912] [client 140.99.1.7:30311] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:56.018513 2025] [proxy_fcgi:error] [pid 49900:tid 49907] [client 140.99.1.7:30311] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:56.116973 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.7:30311] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSO3MDCyPLrvg06aormecQAAAA8"]
[Mon Nov 24 09:38:56.546278 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 140.99.1.65:35657] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:56.639297 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.65:35657] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSO3MJzvu6PDJiRKE3LSRAAAAZU"]
[Mon Nov 24 09:38:57.161798 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 140.99.1.50:43179] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:57.360868 2025] [proxy_fcgi:error] [pid 49900:tid 49926] [client 140.99.1.50:43179] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:57.472168 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 140.99.1.50:43179] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:57.569333 2025] [proxy_fcgi:error] [pid 49900:tid 49905] [client 140.99.1.50:43179] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:57.673152 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 140.99.1.50:43179] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:57.937765 2025] [:error] [pid 49900:tid 49912] [client 140.99.1.50:43179] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSO3MTCyPLrvg06aormehAAAAAo"]
[Mon Nov 24 09:38:58.127759 2025] [proxy_fcgi:error] [pid 9630:tid 9655] [client 140.99.1.72:38629] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:58.230839 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 140.99.1.72:38629] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:58.346603 2025] [:error] [pid 9630:tid 9633] [client 140.99.1.72:38629] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSO3MirSgUgPGkizt2ppNwAAAEE"]
[Mon Nov 24 09:38:58.772516 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.13:44965] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSO3Mhm2q1FkzLam7A1FfQAAAlg"]
[Mon Nov 24 09:38:59.204386 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 140.99.1.32:32127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:59.514338 2025] [proxy_fcgi:error] [pid 49900:tid 49908] [client 140.99.1.32:32127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:59.610090 2025] [proxy_fcgi:error] [pid 49900:tid 49925] [client 140.99.1.32:32127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:38:59.708831 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.32:32127] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSO3MzCyPLrvg06aormejQAAABU"]
[Mon Nov 24 09:38:59.927229 2025] [:error] [pid 9630:tid 9654] [client 140.99.1.50:33833] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSO3MyrSgUgPGkizt2ppPAAAAFY"]
[Mon Nov 24 09:39:00.626018 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 140.99.1.38:25427] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:00.886819 2025] [:error] [pid 9630:tid 9641] [client 140.99.1.38:25427] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSO3NCrSgUgPGkizt2ppSwAAAEk"]
[Mon Nov 24 09:39:01.249960 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.17:40197] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aSO3NSrSgUgPGkizt2ppTQAAAFA"]
[Mon Nov 24 09:39:01.634253 2025] [proxy_fcgi:error] [pid 9630:tid 9640] [client 140.99.1.2:38505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:01.828835 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 140.99.1.2:38505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:01.939840 2025] [:error] [pid 9630:tid 9639] [client 140.99.1.2:38505] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSO3NSrSgUgPGkizt2ppUgAAAEc"]
[Mon Nov 24 09:39:02.387262 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 140.99.1.13:48953] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:02.502531 2025] [proxy_fcgi:error] [pid 49900:tid 49905] [client 140.99.1.13:48953] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:02.931105 2025] [proxy_fcgi:error] [pid 49900:tid 49906] [client 140.99.1.13:48953] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:03.325707 2025] [:error] [pid 49900:tid 49918] [client 140.99.1.13:48953] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSO3NzCyPLrvg06aormelwAAABA"]
[Mon Nov 24 09:39:04.735589 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 140.99.1.70:39541] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:05.158085 2025] [:error] [pid 9630:tid 9638] [client 140.99.1.70:39541] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSO3OSrSgUgPGkizt2ppWAAAAEY"]
[Mon Nov 24 09:39:06.716926 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 140.99.1.39:54291] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:07.116456 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 140.99.1.39:54291] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:07.238125 2025] [proxy_fcgi:error] [pid 48600:tid 48633] [client 140.99.1.39:54291] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:07.452753 2025] [:error] [pid 48600:tid 48630] [client 140.99.1.39:54291] [client 140.99.1.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.39, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSO3O_tOzSUAQvWVjBczSAAAAcA"]
[Mon Nov 24 09:39:07.680257 2025] [proxy_fcgi:error] [pid 48600:tid 48653] [client 140.99.1.39:54291] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:08.046477 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.39:54291] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSO3PPtOzSUAQvWVjBczTQAAAc8"]
[Mon Nov 24 09:39:08.337767 2025] [proxy_fcgi:error] [pid 9630:tid 9649] [client 140.99.1.72:42399] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:08.439250 2025] [:error] [pid 9630:tid 9640] [client 140.99.1.72:42399] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSO3PCrSgUgPGkizt2ppXgAAAEg"]
[Mon Nov 24 09:39:08.677432 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 140.99.1.33:58405] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:08.917160 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 140.99.1.33:58405] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:09.350874 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.33:58405] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSO3PZzvu6PDJiRKE3LSUQAAAZU"]
[Mon Nov 24 09:39:09.857240 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 140.99.1.71:26093] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:09.972749 2025] [proxy_fcgi:error] [pid 49900:tid 49921] [client 140.99.1.71:26093] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:10.223501 2025] [:error] [pid 49900:tid 49926] [client 140.99.1.71:26093] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSO3PjCyPLrvg06aormepAAAABg"]
[Mon Nov 24 09:39:10.753013 2025] [:error] [pid 9630:tid 9642] [client 140.99.1.49:32063] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSO3PirSgUgPGkizt2ppYgAAAEo"]
[Mon Nov 24 09:39:10.975251 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 140.99.1.33:22255] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:11.152762 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 140.99.1.33:22255] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:11.365055 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.33:22255] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSO3Pxm2q1FkzLam7A1FggAAAkQ"]
[Mon Nov 24 09:39:11.561692 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 140.99.1.10:64177] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:11.805279 2025] [proxy_fcgi:error] [pid 49900:tid 49903] [client 140.99.1.10:64177] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:11.918592 2025] [:error] [pid 49900:tid 49912] [client 140.99.1.10:64177] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSO3PzCyPLrvg06aormeqAAAAAo"]
[Mon Nov 24 09:39:12.259733 2025] [:error] [pid 48600:tid 48647] [client 140.99.1.26:49561] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aSO3QPtOzSUAQvWVjBczVwAAAdE"]
[Mon Nov 24 09:39:12.678601 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.78:36203] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSO3QJzvu6PDJiRKE3LSUwAAAYM"]
[Mon Nov 24 09:39:12.907412 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.67:63673] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSO3QJzvu6PDJiRKE3LSVQAAAZg"]
[Mon Nov 24 09:39:13.371045 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.73:24885] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSO3QYMM4MaVTk74-AZSzQAAAhg"]
[Mon Nov 24 09:39:13.582029 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.68:37923] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSO3QftOzSUAQvWVjBczWgAAAck"]
[Mon Nov 24 09:39:13.903098 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.75:53343] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSO3QTCyPLrvg06aormeqQAAABU"]
[Mon Nov 24 09:39:16.180446 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.67:58863] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSO3RBm2q1FkzLam7A1FhgAAAk4"]
[Mon Nov 24 09:39:16.457016 2025] [:error] [pid 48600:tid 48636] [client 140.99.1.78:23891] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSO3RPtOzSUAQvWVjBczXwAAAcY"]
[Mon Nov 24 09:39:16.656782 2025] [:error] [pid 48600:tid 48644] [client 140.99.1.72:47901] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSO3RPtOzSUAQvWVjBczYAAAAc4"]
[Mon Nov 24 09:39:17.137892 2025] [:error] [pid 48601:tid 48678] [client 140.99.1.28:34713] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSO3RYMM4MaVTk74-AZS0wAAAhU"]
[Mon Nov 24 09:39:17.610253 2025] [:error] [pid 9630:tid 9634] [client 140.99.1.10:31653] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aSO3RSrSgUgPGkizt2ppbwAAAEI"]
[Mon Nov 24 09:39:17.863104 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 140.99.1.50:63589] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:18.499972 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.50:63589] [client 140.99.1.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.50, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSO3Rpzvu6PDJiRKE3LSkgAAAY8"]
[Mon Nov 24 09:39:19.154035 2025] [proxy_fcgi:error] [pid 48599:tid 48613] [client 140.99.1.50:63589] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:19.252889 2025] [:error] [pid 48599:tid 48615] [client 140.99.1.50:63589] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSO3R5zvu6PDJiRKE3LSmgAAAYw"]
[Mon Nov 24 09:39:19.470983 2025] [:error] [pid 48601:tid 48680] [client 140.99.1.33:51171] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSO3R4MM4MaVTk74-AZS1QAAAhc"]
[Mon Nov 24 09:39:20.074920 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:20.223263 2025] [proxy_fcgi:error] [pid 48688:tid 48698] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:20.734713 2025] [proxy_fcgi:error] [pid 48688:tid 48702] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:20.843147 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:21.357329 2025] [proxy_fcgi:error] [pid 48688:tid 48696] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:21.464504 2025] [proxy_fcgi:error] [pid 48688:tid 48694] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:21.560804 2025] [proxy_fcgi:error] [pid 48688:tid 48708] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:21.716856 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 140.99.1.27:40597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:21.846086 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.27:40597] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSO3SRm2q1FkzLam7A1FmAAAAlc"]
[Mon Nov 24 09:39:22.052983 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.44:42963] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSO3SoMM4MaVTk74-AZS1wAAAgU"]
[Mon Nov 24 09:39:22.287967 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.53:57357] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSO3SirSgUgPGkizt2ppggAAAFA"]
[Mon Nov 24 09:39:22.776420 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 140.99.1.24:23803] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:22.878318 2025] [proxy_fcgi:error] [pid 48601:tid 48659] [client 140.99.1.24:23803] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:23.111731 2025] [proxy_fcgi:error] [pid 48601:tid 48665] [client 140.99.1.24:23803] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:23.373505 2025] [:error] [pid 48601:tid 48672] [client 140.99.1.24:23803] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSO3S4MM4MaVTk74-AZS4AAAAg8"]
[Mon Nov 24 09:39:23.570810 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.49:31693] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSO3Sxm2q1FkzLam7A1FmQAAAk4"]
[Mon Nov 24 09:39:23.817543 2025] [:error] [pid 48601:tid 48661] [client 140.99.1.37:47357] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSO3S4MM4MaVTk74-AZS4QAAAgQ"]
[Mon Nov 24 09:39:24.769466 2025] [:error] [pid 49900:tid 49903] [client 140.99.1.63:38275] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSO3TDCyPLrvg06aormetAAAAAE"]
[Mon Nov 24 09:39:25.133807 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.38:54793] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSO3TftOzSUAQvWVjBczdgAAAc0"]
[Mon Nov 24 09:39:25.576720 2025] [:error] [pid 9630:tid 9655] [client 140.99.1.70:49857] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSO3TSrSgUgPGkizt2ppiQAAAFc"]
[Mon Nov 24 09:39:26.086633 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 140.99.1.73:30307] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:26.320564 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 140.99.1.73:30307] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:27.157690 2025] [:error] [pid 48600:tid 48636] [client 140.99.1.73:30307] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSO3T_tOzSUAQvWVjBczggAAAcY"]
[Mon Nov 24 09:39:27.376650 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 140.99.1.5:54241] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:27.603231 2025] [:error] [pid 48599:tid 48616] [client 140.99.1.5:54241] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSO3T5zvu6PDJiRKE3LSpgAAAY0"]
[Mon Nov 24 09:39:28.025090 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 140.99.1.75:28763] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:28.377059 2025] [proxy_fcgi:error] [pid 48688:tid 48694] [client 140.99.1.75:28763] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:28.494860 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.75:28763] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSO3UBm2q1FkzLam7A1FpQAAAkk"]
[Mon Nov 24 09:39:29.033405 2025] [:error] [pid 48600:tid 48642] [client 140.99.1.5:20399] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSO3UftOzSUAQvWVjBczhgAAAcw"]
[Mon Nov 24 09:39:29.596151 2025] [proxy_fcgi:error] [pid 9630:tid 9653] [client 140.99.1.48:38709] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:30.089565 2025] [:error] [pid 9630:tid 9649] [client 140.99.1.48:38709] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSO3UirSgUgPGkizt2pplgAAAFE"]
[Mon Nov 24 09:39:30.871738 2025] [:error] [pid 9630:tid 9637] [client 140.99.1.13:62759] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSO3UirSgUgPGkizt2ppnQAAAEU"]
[Mon Nov 24 09:39:31.077890 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 140.99.1.47:31595] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:31.203382 2025] [proxy_fcgi:error] [pid 48601:tid 48663] [client 140.99.1.47:31595] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:31.305028 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.47:31595] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSO3U4MM4MaVTk74-AZS5gAAAgU"]
[Mon Nov 24 09:39:31.550253 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.5:44035] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSO3U4MM4MaVTk74-AZS5wAAAgM"]
[Mon Nov 24 09:39:32.071415 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 140.99.1.74:40269] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:32.321960 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.74:40269] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSO3VIMM4MaVTk74-AZS7QAAAg4"]
[Mon Nov 24 09:39:32.555893 2025] [proxy_fcgi:error] [pid 48688:tid 48700] [client 140.99.1.75:24953] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:33.062477 2025] [proxy_fcgi:error] [pid 48688:tid 48702] [client 140.99.1.75:24953] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:33.200913 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.75:24953] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSO3VRm2q1FkzLam7A1FsAAAAlI"]
[Mon Nov 24 09:39:33.647168 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 140.99.1.53:29901] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:33.866534 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.53:29901] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSO3VftOzSUAQvWVjBczjgAAAdc"]
[Mon Nov 24 09:39:34.294423 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.7:54721] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSO3Vhm2q1FkzLam7A1FsgAAAkQ"]
[Mon Nov 24 09:39:34.732192 2025] [:error] [pid 9630:tid 9652] [client 140.99.1.70:20641] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSO3VirSgUgPGkizt2pppAAAAFQ"]
[Mon Nov 24 09:39:35.266272 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.13:37251] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aSO3Vxm2q1FkzLam7A1FtwAAAk8"]
[Mon Nov 24 09:39:35.466615 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.62:34641] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSO3V5zvu6PDJiRKE3LSqgAAAZU"]
[Mon Nov 24 09:39:35.800452 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 140.99.1.71:29939] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:36.421033 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.71:29939] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aSO3WIMM4MaVTk74-AZS9QAAAhA"]
[Mon Nov 24 09:39:36.873837 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.5:47235] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aSO3WDCyPLrvg06aormevQAAABM"]
[Mon Nov 24 09:39:37.083717 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.50:60101] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSO3WTCyPLrvg06aormevgAAAAA"]
[Mon Nov 24 09:39:37.434113 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 140.99.1.68:25483] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:37.588662 2025] [:error] [pid 48599:tid 48621] [client 140.99.1.68:25483] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSO3WZzvu6PDJiRKE3LStAAAAZI"]
[Mon Nov 24 09:39:37.940988 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.8:42089] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSO3WYMM4MaVTk74-AZS9wAAAgA"]
[Mon Nov 24 09:39:38.724522 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.49:50457] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSO3Whm2q1FkzLam7A1FwQAAAlU"]
[Mon Nov 24 09:39:39.161380 2025] [proxy_fcgi:error] [pid 9630:tid 9643] [client 140.99.1.78:57095] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:39.258283 2025] [:error] [pid 9630:tid 9635] [client 140.99.1.78:57095] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSO3WyrSgUgPGkizt2pprgAAAEM"]
[Mon Nov 24 09:39:39.827426 2025] [:error] [pid 9630:tid 9646] [client 140.99.1.75:54209] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSO3WyrSgUgPGkizt2ppsgAAAE4"]
[Mon Nov 24 09:39:40.474680 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.43:46205] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aSO3XBm2q1FkzLam7A1FxAAAAks"]
[Mon Nov 24 09:39:40.824030 2025] [:error] [pid 49900:tid 49908] [client 140.99.1.70:56259] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSO3XDCyPLrvg06aormexAAAAAY"]
[Mon Nov 24 09:39:41.054090 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.77:21125] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aSO3XSrSgUgPGkizt2pptQAAAFA"]
[Mon Nov 24 09:39:41.305245 2025] [:error] [pid 9630:tid 9639] [client 140.99.1.67:28979] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aSO3XSrSgUgPGkizt2pptgAAAEc"]
[Mon Nov 24 09:39:42.334846 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.74:46419] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSO3Xhm2q1FkzLam7A1FzAAAAkg"]
[Mon Nov 24 09:39:42.912253 2025] [:error] [pid 9630:tid 9632] [client 140.99.1.9:27393] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSO3XirSgUgPGkizt2ppuwAAAEA"]
[Mon Nov 24 09:39:43.224662 2025] [proxy_fcgi:error] [pid 48600:tid 48653] [client 140.99.1.16:56397] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:43.328445 2025] [proxy_fcgi:error] [pid 48600:tid 48633] [client 140.99.1.16:56397] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:43.456085 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.16:56397] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSO3X_tOzSUAQvWVjBczmwAAAcQ"]
[Mon Nov 24 09:39:44.056403 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.28:47829] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSO3YIMM4MaVTk74-AZS_QAAAhM"]
[Mon Nov 24 09:39:44.277340 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 140.99.1.16:60673] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:44.968511 2025] [:error] [pid 9630:tid 9640] [client 140.99.1.16:60673] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSO3YCrSgUgPGkizt2ppxgAAAEg"]
[Mon Nov 24 09:39:45.265733 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.6:22897] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSO3YTCyPLrvg06aormeyAAAAA4"]
[Mon Nov 24 09:39:45.602790 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.65:30125] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSO3YTCyPLrvg06aormeygAAAAA"]
[Mon Nov 24 09:39:45.928219 2025] [proxy_fcgi:error] [pid 48601:tid 48669] [client 140.99.1.76:43563] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:46.064098 2025] [:error] [pid 48601:tid 48658] [client 140.99.1.76:43563] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSO3YoMM4MaVTk74-AZTAQAAAgE"]
[Mon Nov 24 09:39:47.616233 2025] [:error] [pid 48600:tid 48650] [client 140.99.1.16:26753] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSO3Y_tOzSUAQvWVjBczqQAAAdQ"]
[Mon Nov 24 09:39:47.844504 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.72:40279] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSO3Y5zvu6PDJiRKE3LSvQAAAYA"]
[Mon Nov 24 09:39:48.433505 2025] [:error] [pid 9630:tid 9654] [client 140.99.1.26:53283] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSO3ZCrSgUgPGkizt2ppzgAAAFY"]
[Mon Nov 24 09:39:48.673311 2025] [:error] [pid 48599:tid 48623] [client 140.99.1.11:47697] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSO3ZJzvu6PDJiRKE3LSvgAAAZQ"]
[Mon Nov 24 09:39:50.316937 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.7:60151] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSO3Zpzvu6PDJiRKE3LSwQAAAYU"]
[Mon Nov 24 09:39:50.536086 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.6:64075] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aSO3Zpzvu6PDJiRKE3LSwgAAAZU"]
[Mon Nov 24 09:39:50.751734 2025] [:error] [pid 48599:tid 48611] [client 140.99.1.74:34127] [client 140.99.1.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.74, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSO3Zpzvu6PDJiRKE3LSwwAAAYg"]
[Mon Nov 24 09:39:50.757148 2025] [proxy_fcgi:error] [pid 48599:tid 48611] [client 140.99.1.74:34127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:50.855728 2025] [:error] [pid 48599:tid 48610] [client 140.99.1.74:34127] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSO3Zpzvu6PDJiRKE3LSxQAAAYc"]
[Mon Nov 24 09:39:51.358797 2025] [proxy_fcgi:error] [pid 49900:tid 49924] [client 140.99.1.16:49511] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:51.468489 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.16:49511] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSO3ZzCyPLrvg06aorme1AAAAAU"]
[Mon Nov 24 09:39:51.683482 2025] [:error] [pid 9630:tid 9651] [client 140.99.1.18:41555] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aSO3ZyrSgUgPGkizt2pp0wAAAFM"]
[Mon Nov 24 09:39:51.932444 2025] [proxy_fcgi:error] [pid 9630:tid 9646] [client 140.99.1.53:27061] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:52.656613 2025] [proxy_fcgi:error] [pid 9630:tid 9647] [client 140.99.1.53:27061] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:52.796180 2025] [:error] [pid 9630:tid 9648] [client 140.99.1.53:27061] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSO3aCrSgUgPGkizt2pp3gAAAFA"]
[Mon Nov 24 09:39:52.991620 2025] [:error] [pid 49900:tid 49926] [client 140.99.1.53:23971] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSO3aDCyPLrvg06aorme1wAAABg"]
[Mon Nov 24 09:39:53.468169 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.75:40089] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSO3aTCyPLrvg06aorme2gAAABM"]
[Mon Nov 24 09:39:53.681367 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.46:61505] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aSO3aYMM4MaVTk74-AZTBQAAAgM"]
[Mon Nov 24 09:39:53.882262 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 140.99.1.65:38245] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:53.977447 2025] [:error] [pid 9630:tid 9649] [client 140.99.1.65:38245] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSO3aSrSgUgPGkizt2pp4AAAAFE"]
[Mon Nov 24 09:39:54.201710 2025] [:error] [pid 9630:tid 9632] [client 140.99.1.65:38245] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSO3airSgUgPGkizt2pp4gAAAEA"]
[Mon Nov 24 09:39:54.932914 2025] [:error] [pid 49900:tid 49925] [client 140.99.1.78:34061] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSO3ajCyPLrvg06aorme3wAAABc"]
[Mon Nov 24 09:39:55.234788 2025] [proxy_fcgi:error] [pid 49900:tid 49907] [client 140.99.1.62:40159] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:55.833288 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.62:40159] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSO3azCyPLrvg06aorme4QAAABU"]
[Mon Nov 24 09:39:56.031503 2025] [:error] [pid 9630:tid 9651] [client 140.99.1.62:45305] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSO3bCrSgUgPGkizt2pp5QAAAFM"]
[Mon Nov 24 09:39:56.306647 2025] [proxy_fcgi:error] [pid 9630:tid 9644] [client 140.99.1.20:64233] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:56.637594 2025] [:error] [pid 9630:tid 9640] [client 140.99.1.20:64233] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSO3bCrSgUgPGkizt2pp6wAAAEg"]
[Mon Nov 24 09:39:57.131634 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.70:42995] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSO3bRm2q1FkzLam7A1F3wAAAlI"]
[Mon Nov 24 09:39:57.385132 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 140.99.1.28:28879] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:57.585723 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 140.99.1.28:28879] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:57.880595 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.28:28879] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSO3bRm2q1FkzLam7A1F5QAAAlA"]
[Mon Nov 24 09:39:58.082982 2025] [:error] [pid 48688:tid 48714] [client 140.99.1.38:29007] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aSO3bhm2q1FkzLam7A1F5gAAAlY"]
[Mon Nov 24 09:39:58.553397 2025] [:error] [pid 49900:tid 49914] [client 140.99.1.68:33061] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aSO3bjCyPLrvg06aorme4wAAAAw"]
[Mon Nov 24 09:39:58.757826 2025] [proxy_fcgi:error] [pid 9630:tid 9654] [client 140.99.1.71:40571] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:58.864435 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 140.99.1.71:40571] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:59.436841 2025] [:error] [pid 9630:tid 9645] [client 140.99.1.71:40571] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSO3byrSgUgPGkizt2pp9wAAAE0"]
[Mon Nov 24 09:39:59.657611 2025] [proxy_fcgi:error] [pid 9630:tid 9644] [client 140.99.1.7:45583] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:39:59.909481 2025] [:error] [pid 9630:tid 9653] [client 140.99.1.7:45583] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aSO3byrSgUgPGkizt2pp-wAAAFU"]
[Mon Nov 24 09:40:00.052537 2025] [:error] [pid 9630:tid 9640] [client 140.99.1.7:45583] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSO3cCrSgUgPGkizt2pp_AAAAEg"]
[Mon Nov 24 09:40:00.482884 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.67:60215] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSO3cDCyPLrvg06aorme5wAAAAQ"]
[Mon Nov 24 09:40:00.833443 2025] [:error] [pid 49900:tid 49912] [client 140.99.1.67:25607] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSO3cDCyPLrvg06aorme6QAAAAo"]
[Mon Nov 24 09:40:01.542668 2025] [proxy_fcgi:error] [pid 9630:tid 9633] [client 140.99.1.28:31647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:02.751930 2025] [:error] [pid 9630:tid 9649] [client 140.99.1.28:31647] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSO3cirSgUgPGkizt2pqBAAAAFE"]
[Mon Nov 24 09:40:03.319683 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.18:57047] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSO3czCyPLrvg06aorme7wAAAAU"]
[Mon Nov 24 09:40:05.161085 2025] [:error] [pid 48688:tid 48705] [client 140.99.1.52:44539] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSO3dRm2q1FkzLam7A1F7gAAAk0"]
[Mon Nov 24 09:40:05.659112 2025] [proxy_fcgi:error] [pid 9630:tid 9646] [client 140.99.1.16:54831] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:07.330256 2025] [:error] [pid 9630:tid 9634] [client 140.99.1.16:54831] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSO3dyrSgUgPGkizt2pqDQAAAEI"]
[Mon Nov 24 09:40:07.682675 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.46:20787] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aSO3dzCyPLrvg06aorme9AAAAAQ"]
[Mon Nov 24 09:40:07.819855 2025] [proxy_fcgi:error] [pid 48688:tid 48715] [client 165.85.56.95:25006] AH01071: Got error 'PHP message: start 1763948407.1601', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:40:07.820244 2025] [proxy_fcgi:error] [pid 48688:tid 48715] [client 165.85.56.95:25006] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948407.8197-1763948407.1601', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:40:08.153243 2025] [proxy_fcgi:error] [pid 9630:tid 9641] [client 140.99.1.10:48087] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:08.375396 2025] [:error] [pid 9630:tid 9633] [client 140.99.1.10:48087] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSO3eCrSgUgPGkizt2pqEAAAAEE"]
[Mon Nov 24 09:40:08.775196 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.18:58179] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSO3eBm2q1FkzLam7A1F9gAAAlQ"]
[Mon Nov 24 09:40:10.614118 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.71:54267] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSO3evtOzSUAQvWVjBczuwAAAcQ"]
[Mon Nov 24 09:40:11.182000 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 140.99.1.13:53327] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:11.310246 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.13:53327] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSO3e4MM4MaVTk74-AZTEAAAAgA"]
[Mon Nov 24 09:40:11.712907 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.70:30759] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSO3ezCyPLrvg06aormfBgAAABM"]
[Mon Nov 24 09:40:12.302237 2025] [proxy_fcgi:error] [pid 49900:tid 49903] [client 140.99.1.74:24329] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:12.615258 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.74:24329] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSO3fDCyPLrvg06aormfDwAAABU"]
[Mon Nov 24 09:40:13.212592 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.46:23813] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSO3fTCyPLrvg06aormfEgAAAA0"]
[Mon Nov 24 09:40:13.540518 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 140.99.1.6:21647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:13.935365 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.6:21647] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSO3fTCyPLrvg06aormfGAAAABM"]
[Mon Nov 24 09:40:14.192465 2025] [:error] [pid 49900:tid 49912] [client 140.99.1.75:48985] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSO3fjCyPLrvg06aormfGQAAAAo"]
[Mon Nov 24 09:40:14.501818 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.7:40267] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSO3foMM4MaVTk74-AZTEwAAAhg"]
[Mon Nov 24 09:40:14.733236 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 140.99.1.31:28759] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:14.976808 2025] [:error] [pid 48600:tid 48644] [client 140.99.1.31:28759] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSO3fvtOzSUAQvWVjBczwwAAAc4"]
[Mon Nov 24 09:40:15.465155 2025] [proxy_fcgi:error] [pid 49900:tid 49919] [client 140.99.1.15:61963] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:15.769660 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.15:61963] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSO3fzCyPLrvg06aormfHAAAABQ"]
[Mon Nov 24 09:40:16.004942 2025] [:error] [pid 49900:tid 49920] [client 140.99.1.33:32369] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSO3gDCyPLrvg06aormfHQAAABI"]
[Mon Nov 24 09:40:16.424480 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.14:56717] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSO3gDCyPLrvg06aormfIAAAAAU"]
[Mon Nov 24 09:40:16.951490 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.53:24249] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aSO3gDCyPLrvg06aormfIgAAAA0"]
[Mon Nov 24 09:40:18.078277 2025] [:error] [pid 49900:tid 49918] [client 140.99.1.2:21857] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSO3gjCyPLrvg06aormfJgAAABA"]
[Mon Nov 24 09:40:18.400490 2025] [:error] [pid 9630:tid 9635] [client 140.99.1.42:54277] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSO3girSgUgPGkizt2pqKQAAAEM"]
[Mon Nov 24 09:40:18.617698 2025] [:error] [pid 48599:tid 48617] [client 140.99.1.76:58313] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSO3gpzvu6PDJiRKE3LS2AAAAY4"]
[Mon Nov 24 09:40:18.945150 2025] [:error] [pid 9630:tid 9646] [client 140.99.1.47:54669] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSO3girSgUgPGkizt2pqKwAAAE4"]
[Mon Nov 24 09:40:19.546449 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.28:33009] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSO3g4MM4MaVTk74-AZTHAAAAgs"]
[Mon Nov 24 09:40:20.111011 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.8:33261] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSO3hPtOzSUAQvWVjBczygAAAc8"]
[Mon Nov 24 09:40:20.580456 2025] [:error] [pid 9630:tid 9641] [client 140.99.1.30:37075] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSO3hCrSgUgPGkizt2pqMgAAAEk"]
[Mon Nov 24 09:40:20.909787 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.30:47467] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSO3hJzvu6PDJiRKE3LS3AAAAZU"]
[Mon Nov 24 09:40:21.377503 2025] [proxy_fcgi:error] [pid 49900:tid 49903] [client 140.99.1.3:44175] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:21.955007 2025] [:error] [pid 49900:tid 49909] [client 140.99.1.3:44175] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSO3hTCyPLrvg06aormfNQAAAAc"]
[Mon Nov 24 09:40:22.166843 2025] [:error] [pid 48688:tid 48702] [client 140.99.1.50:62265] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSO3hhm2q1FkzLam7A1GFAAAAko"]
[Mon Nov 24 09:40:22.492687 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 140.99.1.47:43471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:22.596463 2025] [:error] [pid 48600:tid 48640] [client 140.99.1.47:43471] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSO3hvtOzSUAQvWVjBczzgAAAco"]
[Mon Nov 24 09:40:23.071636 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 140.99.1.9:30801] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:23.237155 2025] [proxy_fcgi:error] [pid 9630:tid 9656] [client 140.99.1.9:30801] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:23.375344 2025] [:error] [pid 9630:tid 9646] [client 140.99.1.9:30801] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSO3hyrSgUgPGkizt2pqOwAAAE4"]
[Mon Nov 24 09:40:23.777048 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 140.99.1.26:32947] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:23.880657 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.26:32947] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSO3hxm2q1FkzLam7A1GGwAAAlA"]
[Mon Nov 24 09:40:24.515520 2025] [:error] [pid 48688:tid 48695] [client 140.99.1.74:37735] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSO3iBm2q1FkzLam7A1GHwAAAkM"]
[Mon Nov 24 09:40:24.767440 2025] [proxy_fcgi:error] [pid 48599:tid 48621] [client 140.99.1.37:62217] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:24.940799 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.37:62217] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSO3iJzvu6PDJiRKE3LS4QAAAZg"]
[Mon Nov 24 09:40:25.402620 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.78:61699] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSO3iZzvu6PDJiRKE3LS5QAAAYs"]
[Mon Nov 24 09:40:25.921049 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 140.99.1.26:38991] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:26.126628 2025] [proxy_fcgi:error] [pid 48600:tid 48638] [client 140.99.1.26:38991] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:26.363446 2025] [:error] [pid 48600:tid 48644] [client 140.99.1.26:38991] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSO3ivtOzSUAQvWVjBcz0wAAAc4"]
[Mon Nov 24 09:40:28.410916 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.30:52199] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSO3jIMM4MaVTk74-AZTJAAAAhg"]
[Mon Nov 24 09:40:28.756009 2025] [proxy_fcgi:error] [pid 48688:tid 48702] [client 140.99.1.62:20355] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:28.866921 2025] [:error] [pid 48688:tid 48705] [client 140.99.1.62:20355] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSO3jBm2q1FkzLam7A1GJQAAAk0"]
[Mon Nov 24 09:40:29.119789 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.10:37811] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSO3jRm2q1FkzLam7A1GJgAAAlI"]
[Mon Nov 24 09:40:29.344757 2025] [proxy_fcgi:error] [pid 9630:tid 9641] [client 140.99.1.49:55105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:29.543729 2025] [:error] [pid 9630:tid 9643] [client 140.99.1.49:55105] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSO3jSrSgUgPGkizt2pqQwAAAEs"]
[Mon Nov 24 09:40:29.785462 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.11:56907] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSO3jTCyPLrvg06aormfOAAAABE"]
[Mon Nov 24 09:40:30.315063 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 140.99.1.62:49613] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:30.929347 2025] [:error] [pid 48601:tid 48669] [client 140.99.1.62:49613] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSO3joMM4MaVTk74-AZTKwAAAgw"]
[Mon Nov 24 09:40:31.386069 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.31:46997] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSO3j5zvu6PDJiRKE3LS6wAAAYU"]
[Mon Nov 24 09:40:31.765227 2025] [:error] [pid 48599:tid 48615] [client 140.99.1.7:31815] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aSO3j5zvu6PDJiRKE3LS7wAAAYw"]
[Mon Nov 24 09:40:31.988172 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.77:45991] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSO3j_tOzSUAQvWVjBcz1AAAAdA"]
[Mon Nov 24 09:40:32.174126 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.68:27863] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSO3kDCyPLrvg06aormfOgAAABQ"]
[Mon Nov 24 09:40:32.433841 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.33:45817] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aSO3kPtOzSUAQvWVjBcz1wAAAck"]
[Mon Nov 24 09:40:34.205817 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.76:53139] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSO3kjCyPLrvg06aormfPwAAABU"]
[Mon Nov 24 09:40:34.534082 2025] [:error] [pid 9630:tid 9636] [client 140.99.1.38:24687] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aSO3kirSgUgPGkizt2pqRwAAAEQ"]
[Mon Nov 24 09:40:34.850602 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 140.99.1.13:46237] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:34.961754 2025] [:error] [pid 48688:tid 48692] [client 140.99.1.13:46237] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSO3khm2q1FkzLam7A1GLgAAAkA"]
[Mon Nov 24 09:40:35.309873 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.5:41873] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSO3kxm2q1FkzLam7A1GLwAAAk4"]
[Mon Nov 24 09:40:35.917879 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.26:62649] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aSO3kzCyPLrvg06aormfQwAAAAQ"]
[Mon Nov 24 09:40:36.196234 2025] [:error] [pid 48600:tid 48635] [client 140.99.1.16:29795] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSO3lPtOzSUAQvWVjBcz2gAAAcU"]
[Mon Nov 24 09:40:37.411251 2025] [:error] [pid 48688:tid 48714] [client 140.99.1.31:45523] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aSO3lRm2q1FkzLam7A1GPQAAAlY"]
[Mon Nov 24 09:40:37.604244 2025] [:error] [pid 48599:tid 48612] [client 140.99.1.53:64085] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSO3lZzvu6PDJiRKE3LS8QAAAYk"]
[Mon Nov 24 09:40:38.098276 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.73:29067] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aSO3lvtOzSUAQvWVjBcz3gAAAcE"]
[Mon Nov 24 09:40:38.597868 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.73:44451] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSO3lvtOzSUAQvWVjBcz4AAAAcI"]
[Mon Nov 24 09:40:38.907156 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.2:29325] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aSO3lvtOzSUAQvWVjBcz4gAAAdA"]
[Mon Nov 24 09:40:39.164093 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.65:32793] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSO3lxm2q1FkzLam7A1GQAAAAk4"]
[Mon Nov 24 09:40:39.560459 2025] [:error] [pid 48688:tid 48711] [client 140.99.1.71:23149] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSO3lxm2q1FkzLam7A1GQgAAAlM"]
[Mon Nov 24 09:40:40.557556 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.67:46033] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSO3mDCyPLrvg06aormfTAAAAA8"]
[Mon Nov 24 09:40:40.903942 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 140.99.1.53:29009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:41.081080 2025] [:error] [pid 48688:tid 48693] [client 140.99.1.53:29009] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSO3mRm2q1FkzLam7A1GRgAAAkE"]
[Mon Nov 24 09:40:41.767709 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 140.99.1.7:62125] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:41.881824 2025] [:error] [pid 9630:tid 9637] [client 140.99.1.7:62125] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSO3mSrSgUgPGkizt2pqUgAAAEU"]
[Mon Nov 24 09:40:42.102816 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.26:44403] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSO3moMM4MaVTk74-AZTMQAAAgY"]
[Mon Nov 24 09:40:42.563354 2025] [:error] [pid 48599:tid 48610] [client 140.99.1.44:58163] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSO3mpzvu6PDJiRKE3LS9gAAAYc"]
[Mon Nov 24 09:40:43.437356 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 140.99.1.43:34673] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:40:43.945667 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.43:34673] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aSO3m5zvu6PDJiRKE3LTAAAAAYo"]
[Mon Nov 24 09:40:44.297669 2025] [:error] [pid 48601:tid 48659] [client 140.99.1.20:49065] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSO3nIMM4MaVTk74-AZTNgAAAgI"]
[Mon Nov 24 09:40:44.760630 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.30:51721] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSO3nDCyPLrvg06aormfUwAAAAU"]
[Mon Nov 24 09:40:45.021883 2025] [:error] [pid 48600:tid 48652] [client 140.99.1.74:26779] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSO3nftOzSUAQvWVjBcz6QAAAdY"]
[Mon Nov 24 09:40:45.246777 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.31:23321] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSO3nftOzSUAQvWVjBcz6gAAAcE"]
[Mon Nov 24 09:40:56.399295 2025] [autoindex:error] [pid 48600:tid 48633] [client 140.99.1.31:41633] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 09:41:12.853412 2025] [autoindex:error] [pid 9630:tid 9640] [client 140.99.1.73:24155] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 09:42:09.508046 2025] [proxy_fcgi:error] [pid 48688:tid 48693] [client 165.85.56.95:35950] AH01071: Got error 'PHP message: start 1763948528.9451', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:42:09.508469 2025] [proxy_fcgi:error] [pid 48688:tid 48693] [client 165.85.56.95:35950] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948529.5077-1763948528.9451', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:44:10.771755 2025] [proxy_fcgi:error] [pid 49900:tid 49923] [client 165.85.56.95:39948] AH01071: Got error 'PHP message: start 1763948649.9727', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:44:10.772289 2025] [proxy_fcgi:error] [pid 49900:tid 49923] [client 165.85.56.95:39948] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948650.7714-1763948649.9727', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:46:12.293625 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 165.85.56.95:63530] AH01071: Got error 'PHP message: start 1763948771.6611', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:46:12.294307 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 165.85.56.95:63530] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948772.2934-1763948771.6611', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:48:13.763273 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 165.85.56.95:60689] AH01071: Got error 'PHP message: start 1763948893.151', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:48:13.763737 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 165.85.56.95:60689] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763948893.763-1763948893.151', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:50:14.803524 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 165.85.56.95:57492] AH01071: Got error 'PHP message: start 1763949014.2767', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:50:14.804135 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 165.85.56.95:57492] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949014.8032-1763949014.2767', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:52:15.922640 2025] [proxy_fcgi:error] [pid 48601:tid 48664] [client 165.85.56.95:65366] AH01071: Got error 'PHP message: start 1763949135.2764', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:52:15.923281 2025] [proxy_fcgi:error] [pid 48601:tid 48664] [client 165.85.56.95:65366] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949135.9223-1763949135.2764', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:54:17.438080 2025] [proxy_fcgi:error] [pid 48688:tid 48711] [client 165.85.56.95:18134] AH01071: Got error 'PHP message: start 1763949256.8259', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:54:17.438498 2025] [proxy_fcgi:error] [pid 48688:tid 48711] [client 165.85.56.95:18134] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949257.4378-1763949256.8259', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:56:19.344395 2025] [proxy_fcgi:error] [pid 48600:tid 48648] [client 165.85.56.95:51179] AH01071: Got error 'PHP message: start 1763949377.933', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:56:19.344867 2025] [proxy_fcgi:error] [pid 48600:tid 48648] [client 165.85.56.95:51179] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949379.3442-1763949377.933', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:58:20.783202 2025] [proxy_fcgi:error] [pid 48600:tid 48639] [client 165.85.56.95:17913] AH01071: Got error 'PHP message: start 1763949500.22', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 09:58:20.783632 2025] [proxy_fcgi:error] [pid 48600:tid 48639] [client 165.85.56.95:17913] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949500.7829-1763949500.22', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:00:22.882259 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 165.85.56.95:23933] AH01071: Got error 'PHP message: start 1763949621.6393', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:00:22.882774 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 165.85.56.95:23933] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949622.8818-1763949621.6393', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:02:24.880866 2025] [proxy_fcgi:error] [pid 16675:tid 16692] [client 165.85.56.95:12007] AH01071: Got error 'PHP message: start 1763949743.7275', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:02:24.881435 2025] [proxy_fcgi:error] [pid 16675:tid 16692] [client 165.85.56.95:12007] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949744.8801-1763949743.7275', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:04:26.081632 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 165.85.56.95:16273] AH01071: Got error 'PHP message: start 1763949865.3692', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:04:26.082034 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 165.85.56.95:16273] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949866.0811-1763949865.3692', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:06:27.943964 2025] [proxy_fcgi:error] [pid 49900:tid 49917] [client 165.85.56.95:12979] AH01071: Got error 'PHP message: start 1763949986.9289', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:06:27.944440 2025] [proxy_fcgi:error] [pid 49900:tid 49917] [client 165.85.56.95:12979] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763949987.9438-1763949986.9289', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:08:29.747924 2025] [proxy_fcgi:error] [pid 49900:tid 49906] [client 165.85.56.95:3032] AH01071: Got error 'PHP message: start 1763950108.7818', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:08:29.748384 2025] [proxy_fcgi:error] [pid 49900:tid 49906] [client 165.85.56.95:3032] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950109.7472-1763950108.7818', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:10:30.965001 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 165.85.56.95:45298] AH01071: Got error 'PHP message: start 1763950230.2364', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:10:30.965300 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 165.85.56.95:45298] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950230.9644-1763950230.2364', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:12:32.180638 2025] [proxy_fcgi:error] [pid 48600:tid 48651] [client 165.85.56.95:42263] AH01071: Got error 'PHP message: start 1763950351.3905', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:12:32.181052 2025] [proxy_fcgi:error] [pid 48600:tid 48651] [client 165.85.56.95:42263] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950352.1798-1763950351.3905', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:14:33.154275 2025] [proxy_fcgi:error] [pid 16549:tid 16573] [client 165.85.56.95:41556] AH01071: Got error 'PHP message: start 1763950472.578', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:14:33.154758 2025] [proxy_fcgi:error] [pid 16549:tid 16573] [client 165.85.56.95:41556] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950473.154-1763950472.578', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:16:34.362178 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 165.85.56.95:3109] AH01071: Got error 'PHP message: start 1763950593.6552', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:16:34.362760 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 165.85.56.95:3109] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950594.3616-1763950593.6552', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:18:35.583785 2025] [proxy_fcgi:error] [pid 48599:tid 48616] [client 165.85.56.95:65093] AH01071: Got error 'PHP message: start 1763950714.788', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:18:35.584391 2025] [proxy_fcgi:error] [pid 48599:tid 48616] [client 165.85.56.95:65093] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950715.5832-1763950714.788', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:20:36.679032 2025] [proxy_fcgi:error] [pid 48688:tid 48693] [client 165.85.56.95:55894] AH01071: Got error 'PHP message: start 1763950836.0801', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:20:36.679693 2025] [proxy_fcgi:error] [pid 48688:tid 48693] [client 165.85.56.95:55894] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950836.6788-1763950836.0801', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:22:38.156162 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 165.85.56.95:40839] AH01071: Got error 'PHP message: start 1763950957.5339', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:22:38.156778 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 165.85.56.95:40839] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763950958.1558-1763950957.5339', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:24:39.573112 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 165.85.56.95:38832] AH01071: Got error 'PHP message: start 1763951078.9502', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:24:39.573613 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 165.85.56.95:38832] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951079.5728-1763951078.9502', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:26:40.732943 2025] [proxy_fcgi:error] [pid 49900:tid 49924] [client 165.85.56.95:64451] AH01071: Got error 'PHP message: start 1763951200.0128', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:26:40.733419 2025] [proxy_fcgi:error] [pid 49900:tid 49924] [client 165.85.56.95:64451] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951200.7327-1763951200.0128', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:28:41.918370 2025] [proxy_fcgi:error] [pid 16549:tid 16573] [client 165.85.56.95:53416] AH01071: Got error 'PHP message: start 1763951321.2172', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:28:41.918799 2025] [proxy_fcgi:error] [pid 16549:tid 16573] [client 165.85.56.95:53416] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951321.9182-1763951321.2172', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:30:42.870899 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 165.85.56.95:2024] AH01071: Got error 'PHP message: start 1763951442.3566', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:30:42.871290 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 165.85.56.95:2024] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951442.8707-1763951442.3566', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:32:44.246390 2025] [proxy_fcgi:error] [pid 16441:tid 16458] [client 165.85.56.95:62992] AH01071: Got error 'PHP message: start 1763951563.6947', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:32:44.246875 2025] [proxy_fcgi:error] [pid 16441:tid 16458] [client 165.85.56.95:62992] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951564.2461-1763951563.6947', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:34:45.644343 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 165.85.56.95:62497] AH01071: Got error 'PHP message: start 1763951685.0838', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:34:45.644807 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 165.85.56.95:62497] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951685.6442-1763951685.0838', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:36:46.768288 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 165.85.56.95:28523] AH01071: Got error 'PHP message: start 1763951806.0903', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:36:46.768908 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 165.85.56.95:28523] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951806.768-1763951806.0903', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:38:47.801243 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 165.85.56.95:5659] AH01071: Got error 'PHP message: start 1763951927.2173', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:38:47.801733 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 165.85.56.95:5659] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763951927.801-1763951927.2173', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:40:48.774565 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 165.85.56.95:47498] AH01071: Got error 'PHP message: start 1763952048.2321', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:40:48.775045 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 165.85.56.95:47498] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763952048.7742-1763952048.2321', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:42:50.168608 2025] [proxy_fcgi:error] [pid 49900:tid 49925] [client 165.85.56.95:38635] AH01071: Got error 'PHP message: start 1763952169.5425', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:42:50.169136 2025] [proxy_fcgi:error] [pid 49900:tid 49925] [client 165.85.56.95:38635] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763952170.1684-1763952169.5425', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:44:51.116589 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 165.85.56.95:58340] AH01071: Got error 'PHP message: start 1763952290.5893', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:44:51.116972 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 165.85.56.95:58340] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763952291.1163-1763952290.5893', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:46:52.526651 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 165.85.56.95:45220] AH01071: Got error 'PHP message: start 1763952411.8735', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:46:52.527154 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 165.85.56.95:45220] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763952412.5261-1763952411.8735', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:58:03.004651 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:30952] AH01071: Got error 'PHP message: start 1763953082.4234', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 10:58:03.005102 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:30952] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763953083.0043-1763953082.4234', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:00:04.002441 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 165.85.56.95:27509] AH01071: Got error 'PHP message: start 1763953203.4391', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:00:04.002953 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 165.85.56.95:27509] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763953204.0021-1763953203.4391', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:24:57.095784 2025] [proxy_fcgi:error] [pid 48600:tid 48636] [client 165.85.56.95:63336] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:24:57.645544 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 165.85.56.95:63336] AH01071: Got error 'PHP message: start 1763954697.3921', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:24:57.646194 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 165.85.56.95:63336] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954697.6452-1763954697.3921', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:24:57.945833 2025] [proxy_fcgi:error] [pid 16593:tid 16597] [client 165.85.56.95:52402] AH01071: Got error 'PHP message: start 1763954697.6468', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:24:57.946271 2025] [proxy_fcgi:error] [pid 16593:tid 16597] [client 165.85.56.95:52402] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954697.9456-1763954697.6468', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:04.918349 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:05.219995 2025] [proxy_fcgi:error] [pid 48601:tid 48679] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: start 1763954705.1765PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954705.2196-1763954705.1765', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:10.662378 2025] [proxy_fcgi:error] [pid 48601:tid 48669] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:11.310297 2025] [proxy_fcgi:error] [pid 48601:tid 48677] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: start 1763954710.9534', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:11.310893 2025] [proxy_fcgi:error] [pid 48601:tid 48677] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954711.3101-1763954710.9534', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:16.897772 2025] [proxy_fcgi:error] [pid 48601:tid 48671] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:17.395417 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: start 1763954717.1768', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:17.396040 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954717.3952-1763954717.1768', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:21.913425 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:22.462211 2025] [proxy_fcgi:error] [pid 48601:tid 48681] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: start 1763954722.1954', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:22.462699 2025] [proxy_fcgi:error] [pid 48601:tid 48681] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954722.462-1763954722.1954', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:27.282317 2025] [proxy_fcgi:error] [pid 48601:tid 48671] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:27.737899 2025] [proxy_fcgi:error] [pid 48601:tid 48674] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: start 1763954727.5657', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:27.738268 2025] [proxy_fcgi:error] [pid 48601:tid 48674] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954727.7375-1763954727.5657', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:32.872343 2025] [proxy_fcgi:error] [pid 48601:tid 48661] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:25:33.227317 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 165.85.56.95:12813] AH01071: Got error 'PHP message: start 1763954733.1924PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954733.2269-1763954733.1924', referer: https://pumpbooking.com/dashboard.php
[Mon Nov 24 11:27:33.944737 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 165.85.56.95:55373] AH01071: Got error 'PHP message: start 1763954853.504PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954853.9442-1763954853.504', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:29:34.882932 2025] [proxy_fcgi:error] [pid 9630:tid 9647] [client 165.85.56.95:3228] AH01071: Got error 'PHP message: start 1763954974.5225PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763954974.8824-1763954974.5225', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:31:36.165543 2025] [proxy_fcgi:error] [pid 16441:tid 16468] [client 165.85.56.95:55418] AH01071: Got error 'PHP message: start 1763955095.7766PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955096.165-1763955095.7766', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:33:37.036244 2025] [proxy_fcgi:error] [pid 48600:tid 48651] [client 165.85.56.95:38940] AH01071: Got error 'PHP message: start 1763955216.6307PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955217.0357-1763955216.6307', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:35:37.998794 2025] [proxy_fcgi:error] [pid 16549:tid 16569] [client 165.85.56.95:41973] AH01071: Got error 'PHP message: start 1763955337.5489PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955337.9982-1763955337.5489', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:37:38.860368 2025] [proxy_fcgi:error] [pid 48599:tid 48606] [client 165.85.56.95:21018] AH01071: Got error 'PHP message: start 1763955458.4774PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955458.8597-1763955458.4774', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:39:39.697722 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 165.85.56.95:60605] AH01071: Got error 'PHP message: start 1763955579.327PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955579.6972-1763955579.327', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:41:40.568609 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 165.85.56.95:61580] AH01071: Got error 'PHP message: start 1763955700.1861PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955700.5679-1763955700.1861', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:43:41.435320 2025] [proxy_fcgi:error] [pid 48601:tid 48674] [client 165.85.56.95:20745] AH01071: Got error 'PHP message: start 1763955821.0322PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955821.4346-1763955821.0322', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:45:42.737620 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 165.85.56.95:49822] AH01071: Got error 'PHP message: start 1763955942.3542PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763955942.7369-1763955942.3542', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:47:43.572724 2025] [proxy_fcgi:error] [pid 16549:tid 16563] [client 165.85.56.95:34963] AH01071: Got error 'PHP message: start 1763956063.2393PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956063.572-1763956063.2393', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:49:44.389135 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 165.85.56.95:36635] AH01071: Got error 'PHP message: start 1763956184.036PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956184.3885-1763956184.036', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:51:45.365294 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 165.85.56.95:34983] AH01071: Got error 'PHP message: start 1763956304.8582PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956305.3647-1763956304.8582', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:53:46.232090 2025] [proxy_fcgi:error] [pid 16549:tid 16554] [client 165.85.56.95:23133] AH01071: Got error 'PHP message: start 1763956425.842PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956426.2314-1763956425.842', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:55:46.704397 2025] [proxy_fcgi:error] [pid 16441:tid 16468] [client 165.85.56.95:59076] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23PHP message: start 1763956546.7039PHP message: PHP Fatal error:  Uncaught Error: Call to a member function query() on bool in /home/pumpbooking/public_html/includes/sqlstore.php:40\nStack trace:\n#0 /home/pumpbooking/public_html/dashboard-bookings.php(109): SQLStore->Query()\n#1 {main}\n  thrown in /home/pumpbooking/public_html/includes/sqlstore.php on line 40', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:57:47.747021 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 165.85.56.95:37383] AH01071: Got error 'PHP message: start 1763956667.2054PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956667.7463-1763956667.2054', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 11:59:49.064453 2025] [proxy_fcgi:error] [pid 48601:tid 48671] [client 165.85.56.95:8643] AH01071: Got error 'PHP message: start 1763956788.6293PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956789.0639-1763956788.6293', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:01:50.390196 2025] [proxy_fcgi:error] [pid 16549:tid 16556] [client 165.85.56.95:34020] AH01071: Got error 'PHP message: start 1763956910.0104PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763956910.3897-1763956910.0104', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:03:51.495363 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 165.85.56.95:56056] AH01071: Got error 'PHP message: start 1763957031.1376PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957031.4947-1763957031.1376', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:05:52.780450 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 165.85.56.95:14306] AH01071: Got error 'PHP message: start 1763957152.3385PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957152.7799-1763957152.3385', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:07:53.981645 2025] [proxy_fcgi:error] [pid 16593:tid 16608] [client 165.85.56.95:26911] AH01071: Got error 'PHP message: start 1763957273.6302PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957273.9811-1763957273.6302', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:09:54.789696 2025] [proxy_fcgi:error] [pid 48601:tid 48665] [client 165.85.56.95:23428] AH01071: Got error 'PHP message: start 1763957394.4257PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957394.7891-1763957394.4257', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:11:55.595336 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 165.85.56.95:62370] AH01071: Got error 'PHP message: start 1763957515.229PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957515.5949-1763957515.229', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:13:56.782179 2025] [proxy_fcgi:error] [pid 49900:tid 49915] [client 165.85.56.95:15113] AH01071: Got error 'PHP message: start 1763957636.4643PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957636.7816-1763957636.4643', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:15:57.959781 2025] [proxy_fcgi:error] [pid 16549:tid 16565] [client 165.85.56.95:54313] AH01071: Got error 'PHP message: start 1763957757.6211PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957757.9592-1763957757.6211', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:17:58.788560 2025] [proxy_fcgi:error] [pid 49900:tid 49924] [client 165.85.56.95:3619] AH01071: Got error 'PHP message: start 1763957878.4567PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957878.7879-1763957878.4567', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:19:59.632315 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 165.85.56.95:42460] AH01071: Got error 'PHP message: start 1763957999.2099PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763957999.6317-1763957999.2099', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:22:00.533040 2025] [proxy_fcgi:error] [pid 48601:tid 48663] [client 165.85.56.95:31408] AH01071: Got error 'PHP message: start 1763958120.0805PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958120.5324-1763958120.0805', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:24:01.710005 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 165.85.56.95:31305] AH01071: Got error 'PHP message: start 1763958241.3821PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958241.7094-1763958241.3821', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:26:02.594224 2025] [proxy_fcgi:error] [pid 16516:tid 16541] [client 165.85.56.95:31807] AH01071: Got error 'PHP message: start 1763958362.1167PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958362.5938-1763958362.1167', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:28:03.545820 2025] [proxy_fcgi:error] [pid 16516:tid 16539] [client 165.85.56.95:52760] AH01071: Got error 'PHP message: start 1763958483.0893PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958483.5452-1763958483.0893', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:30:04.377086 2025] [proxy_fcgi:error] [pid 16549:tid 16554] [client 165.85.56.95:1093] AH01071: Got error 'PHP message: start 1763958603.9495PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958604.3764-1763958603.9495', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:32:05.271920 2025] [proxy_fcgi:error] [pid 48601:tid 48674] [client 165.85.56.95:31683] AH01071: Got error 'PHP message: start 1763958724.8286PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958725.2713-1763958724.8286', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:34:06.053254 2025] [proxy_fcgi:error] [pid 16549:tid 16558] [client 165.85.56.95:1955] AH01071: Got error 'PHP message: start 1763958845.6924PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958846.0527-1763958845.6924', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:36:07.292735 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 165.85.56.95:54901] AH01071: Got error 'PHP message: start 1763958966.8714PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763958967.2921-1763958966.8714', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:38:08.454254 2025] [proxy_fcgi:error] [pid 48688:tid 48714] [client 165.85.56.95:50673] AH01071: Got error 'PHP message: start 1763959088.0787PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959088.4537-1763959088.0787', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:40:09.323833 2025] [proxy_fcgi:error] [pid 16593:tid 16596] [client 165.85.56.95:60452] AH01071: Got error 'PHP message: start 1763959208.8903PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959209.3232-1763959208.8903', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:42:10.133466 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 165.85.56.95:2348] AH01071: Got error 'PHP message: start 1763959329.786PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959330.1329-1763959329.786', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:44:11.313451 2025] [proxy_fcgi:error] [pid 16549:tid 16565] [client 165.85.56.95:35437] AH01071: Got error 'PHP message: start 1763959450.924PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959451.3128-1763959450.924', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:46:12.141049 2025] [proxy_fcgi:error] [pid 9630:tid 9640] [client 165.85.56.95:40627] AH01071: Got error 'PHP message: start 1763959571.7768PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959572.1404-1763959571.7768', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:48:13.486770 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 165.85.56.95:22524] AH01071: Got error 'PHP message: start 1763959692.5978PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959693.4861-1763959692.5978', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:50:14.328679 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 165.85.56.95:17851] AH01071: Got error 'PHP message: start 1763959813.9235PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959814.3276-1763959813.9235', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 12:52:15.146625 2025] [proxy_fcgi:error] [pid 16516:tid 16519] [client 165.85.56.95:14404] AH01071: Got error 'PHP message: start 1763959934.7417PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1763959935.146-1763959934.7417', referer: https://pumpbooking.com/dashboard-bookings.php
[Mon Nov 24 16:46:05.018730 2025] [:error] [pid 16593:tid 16599] [client 49.144.135.16:11576] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSQbTRVGznHBJI2LKpQ3yAAAAoQ"]
[Mon Nov 24 16:46:05.030968 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 49.144.135.16:11576] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:24:54.260055 2025] [:error] [pid 16593:tid 16600] [client 4.233.64.129:19220] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQydhVGznHBJI2LKpRIxwAAAoU"]
[Mon Nov 24 18:24:56.359034 2025] [:error] [pid 16593:tid 16614] [client 4.233.64.129:19236] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQyeBVGznHBJI2LKpRIyAAAApM"]
[Mon Nov 24 18:24:59.604002 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:19244] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQye4q_bc5MOa9HfllJEQAAAJU"]
[Mon Nov 24 18:25:05.241626 2025] [:error] [pid 49900:tid 49904] [client 4.233.64.129:19257] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQygTCyPLrvg06aorkbmAAAAAI"]
[Mon Nov 24 20:36:21.386517 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 212.30.36.62:23835] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:22.871687 2025] [proxy_fcgi:error] [pid 49900:tid 49923] [client 212.30.36.62:23835] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:23.307519 2025] [:error] [pid 49900:tid 49910] [client 212.30.36.62:23835] [client 212.30.36.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSRRRzCyPLrvg06aork7IQAAAAg"]
[Mon Nov 24 20:36:25.121223 2025] [proxy_fcgi:error] [pid 9630:tid 9643] [client 212.30.36.100:39117] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:25.565688 2025] [:error] [pid 9630:tid 9645] [client 212.30.36.100:39117] [client 212.30.36.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSRRSSrSgUgPGkizt2omnAAAAE0"]
[Mon Nov 24 20:36:26.390632 2025] [proxy_fcgi:error] [pid 16593:tid 16596] [client 212.30.36.73:59127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:27.779489 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 212.30.36.73:59127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:28.260087 2025] [proxy_fcgi:error] [pid 16593:tid 16597] [client 212.30.36.73:59127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:28.719191 2025] [proxy_fcgi:error] [pid 16593:tid 16605] [client 212.30.36.73:59127] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:29.613765 2025] [:error] [pid 16593:tid 16604] [client 212.30.36.73:59127] [client 212.30.36.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSRRTRVGznHBJI2LKpRg3QAAAok"]
[Mon Nov 24 20:36:34.098226 2025] [proxy_fcgi:error] [pid 49900:tid 49918] [client 212.30.36.55:43043] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:34.580450 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 212.30.36.55:43043] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:35.008098 2025] [:error] [pid 49900:tid 49925] [client 212.30.36.55:43043] [client 212.30.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSRRUzCyPLrvg06aork7JwAAABc"]
[Mon Nov 24 20:36:36.895645 2025] [:error] [pid 48688:tid 48707] [client 212.30.36.102:43947] [client 212.30.36.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSRRVBm2q1FkzLam7A3CZAAAAk8"]
[Mon Nov 24 20:36:37.718984 2025] [:error] [pid 48599:tid 48613] [client 212.30.36.82:32725] [client 212.30.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSRRVZzvu6PDJiRKE3JFeAAAAYo"]
[Mon Nov 24 20:36:39.044124 2025] [:error] [pid 48599:tid 48609] [client 212.30.36.61:51857] [client 212.30.36.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSRRV5zvu6PDJiRKE3JFewAAAYY"]
[Mon Nov 24 20:36:40.365198 2025] [:error] [pid 16516:tid 16530] [client 212.30.36.96:51835] [client 212.30.36.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSRRWPqZbniwaNwL8XkBsQAAAQs"]
[Mon Nov 24 20:36:42.769866 2025] [proxy_fcgi:error] [pid 48600:tid 48630] [client 212.30.36.94:32143] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:44.193870 2025] [proxy_fcgi:error] [pid 48600:tid 48640] [client 212.30.36.94:32143] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:44.595679 2025] [:error] [pid 48600:tid 48643] [client 212.30.36.94:32143] [client 212.30.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSRRXPtOzSUAQvWVjBeYfwAAAc0"]
[Mon Nov 24 20:36:45.413118 2025] [:error] [pid 16516:tid 16537] [client 212.30.36.95:65421] [client 212.30.36.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSRRXfqZbniwaNwL8XkBugAAARI"]
[Mon Nov 24 20:36:46.768423 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:47.268892 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:47.839573 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:48.265440 2025] [proxy_fcgi:error] [pid 48599:tid 48608] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:48.667120 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:49.078127 2025] [proxy_fcgi:error] [pid 48599:tid 48605] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:49.527989 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:49.969144 2025] [proxy_fcgi:error] [pid 48599:tid 48621] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:50.378761 2025] [proxy_fcgi:error] [pid 48599:tid 48617] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:50.818222 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:51.689680 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:52.109735 2025] [proxy_fcgi:error] [pid 48599:tid 48619] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:52.524028 2025] [proxy_fcgi:error] [pid 48599:tid 48616] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:52.959090 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:53.381767 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:53.857148 2025] [proxy_fcgi:error] [pid 48599:tid 48623] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:54.283758 2025] [proxy_fcgi:error] [pid 48599:tid 48614] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:54.695820 2025] [proxy_fcgi:error] [pid 48599:tid 48606] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:55.103030 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:55.592382 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:55.984902 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:56.450377 2025] [proxy_fcgi:error] [pid 48599:tid 48610] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:56.901475 2025] [proxy_fcgi:error] [pid 48599:tid 48611] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:57.422773 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:57.881886 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:58.310433 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:58.756387 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:59.246424 2025] [proxy_fcgi:error] [pid 48599:tid 48605] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:36:59.721089 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:00.159390 2025] [proxy_fcgi:error] [pid 48599:tid 48621] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:00.567475 2025] [proxy_fcgi:error] [pid 48599:tid 48617] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:01.050475 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:01.490782 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:01.963476 2025] [:error] [pid 48599:tid 48619] [client 212.30.36.80:64497] [client 212.30.36.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.80, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSRRbZzvu6PDJiRKE3JFoAAAAZA"]
[Mon Nov 24 20:37:01.969533 2025] [proxy_fcgi:error] [pid 48599:tid 48619] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:03.358632 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:03.769581 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 212.30.36.80:64497] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:04.191142 2025] [:error] [pid 48599:tid 48613] [client 212.30.36.80:64497] [client 212.30.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aSRRcJzvu6PDJiRKE3JFpAAAAYo"]
[Mon Nov 24 20:37:05.154448 2025] [proxy_fcgi:error] [pid 16441:tid 16468] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:05.830867 2025] [proxy_fcgi:error] [pid 16441:tid 16453] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:06.654363 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:07.091404 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:07.617091 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:08.058048 2025] [proxy_fcgi:error] [pid 16441:tid 16453] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:08.494135 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:09.413661 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:09.874004 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.89:25745] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:10.748492 2025] [:error] [pid 16441:tid 16456] [client 212.30.36.89:25745] [client 212.30.36.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSRRdoq_bc5MOa9Hfll8QgAAAIw"]
[Mon Nov 24 20:37:11.622900 2025] [proxy_fcgi:error] [pid 16593:tid 16616] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:12.754409 2025] [proxy_fcgi:error] [pid 16593:tid 16619] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:14.836591 2025] [proxy_fcgi:error] [pid 16593:tid 16615] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:15.281706 2025] [proxy_fcgi:error] [pid 16593:tid 16595] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:15.693797 2025] [proxy_fcgi:error] [pid 16593:tid 16597] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:16.122035 2025] [proxy_fcgi:error] [pid 16593:tid 16605] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:16.555431 2025] [proxy_fcgi:error] [pid 16593:tid 16604] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:17.885796 2025] [proxy_fcgi:error] [pid 16593:tid 16601] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:18.339745 2025] [proxy_fcgi:error] [pid 16593:tid 16617] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:18.767839 2025] [proxy_fcgi:error] [pid 16593:tid 16610] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:19.187529 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:19.600740 2025] [proxy_fcgi:error] [pid 16593:tid 16618] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:20.036017 2025] [proxy_fcgi:error] [pid 16593:tid 16603] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:20.440663 2025] [proxy_fcgi:error] [pid 16593:tid 16598] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:21.318906 2025] [proxy_fcgi:error] [pid 16593:tid 16602] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:21.721273 2025] [proxy_fcgi:error] [pid 16593:tid 16619] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:22.984458 2025] [proxy_fcgi:error] [pid 16593:tid 16596] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:23.420117 2025] [proxy_fcgi:error] [pid 16593:tid 16606] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:23.814996 2025] [proxy_fcgi:error] [pid 16593:tid 16613] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:24.229174 2025] [proxy_fcgi:error] [pid 16593:tid 16607] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:24.659660 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 212.30.36.79:44115] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:25.070368 2025] [:error] [pid 16593:tid 16597] [client 212.30.36.79:44115] [client 212.30.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aSRRhRVGznHBJI2LKpRhGAAAAoI"]
[Mon Nov 24 20:37:26.839114 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:27.259779 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:27.670452 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:28.148609 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:28.599630 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:29.037150 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:29.472814 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:29.876744 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:30.319384 2025] [proxy_fcgi:error] [pid 16441:tid 16458] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:30.790045 2025] [proxy_fcgi:error] [pid 16441:tid 16462] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:31.199578 2025] [proxy_fcgi:error] [pid 16441:tid 16463] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:31.642091 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:32.061904 2025] [proxy_fcgi:error] [pid 16441:tid 16450] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:32.517860 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:32.959990 2025] [proxy_fcgi:error] [pid 16441:tid 16452] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:33.387846 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:34.136229 2025] [proxy_fcgi:error] [pid 16441:tid 16446] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:34.545341 2025] [proxy_fcgi:error] [pid 16441:tid 16453] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:35.414402 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:35.858710 2025] [proxy_fcgi:error] [pid 16441:tid 16466] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:36.305727 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:36.736130 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:37.137159 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:37.549472 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:37.970926 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:38.436089 2025] [proxy_fcgi:error] [pid 16441:tid 16458] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:38.883685 2025] [proxy_fcgi:error] [pid 16441:tid 16462] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:39.320642 2025] [proxy_fcgi:error] [pid 16441:tid 16463] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:39.777357 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 212.30.36.93:26505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:48.570020 2025] [:error] [pid 16441:tid 16459] [client 212.30.36.93:26505] [client 212.30.36.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSRRnIq_bc5MOa9Hfll8mAAAAI8"]
[Mon Nov 24 20:37:50.652146 2025] [proxy_fcgi:error] [pid 48599:tid 48617] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:54.531648 2025] [proxy_fcgi:error] [pid 48599:tid 48614] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:54.928939 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:55.428961 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:57.198072 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:37:59.928392 2025] [proxy_fcgi:error] [pid 48599:tid 48619] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:00.372374 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:00.879480 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:01.751625 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:02.160984 2025] [proxy_fcgi:error] [pid 48599:tid 48613] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:02.579024 2025] [proxy_fcgi:error] [pid 48599:tid 48623] [client 212.30.36.86:44647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:03.455984 2025] [:error] [pid 48599:tid 48624] [client 212.30.36.86:44647] [client 212.30.36.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSRRq5zvu6PDJiRKE3JF0gAAAZU"]
[Mon Nov 24 20:38:05.154844 2025] [:error] [pid 49900:tid 49910] [client 212.30.36.77:32505] [client 212.30.36.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.30.36.77, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSRRrTCyPLrvg06aork7aAAAAAg"]
[Mon Nov 24 20:38:05.158612 2025] [proxy_fcgi:error] [pid 49900:tid 49910] [client 212.30.36.77:32505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:05.608398 2025] [proxy_fcgi:error] [pid 49900:tid 49919] [client 212.30.36.77:32505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:06.484565 2025] [:error] [pid 49900:tid 49908] [client 212.30.36.77:32505] [client 212.30.36.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSRRrjCyPLrvg06aork7cQAAAAY"]
[Mon Nov 24 20:38:07.867155 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.68:26999] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:09.942809 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.68:26999] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:11.793835 2025] [:error] [pid 16441:tid 16453] [client 212.30.36.68:26999] [client 212.30.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSRRs4q_bc5MOa9Hfll8swAAAIk"]
[Mon Nov 24 20:38:12.702124 2025] [proxy_fcgi:error] [pid 16549:tid 16566] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:13.126018 2025] [proxy_fcgi:error] [pid 16549:tid 16562] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:13.590618 2025] [proxy_fcgi:error] [pid 16549:tid 16561] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:15.283094 2025] [proxy_fcgi:error] [pid 16549:tid 16575] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:15.714534 2025] [proxy_fcgi:error] [pid 16549:tid 16571] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:16.166227 2025] [proxy_fcgi:error] [pid 16549:tid 16563] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:16.570562 2025] [proxy_fcgi:error] [pid 16549:tid 16577] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:18.365183 2025] [proxy_fcgi:error] [pid 16549:tid 16557] [client 212.30.36.76:57319] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:19.236282 2025] [:error] [pid 16549:tid 16566] [client 212.30.36.76:57319] [client 212.30.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSRRu6eWW19A99PUw_ddfAAAAU4"]
[Mon Nov 24 20:38:20.981791 2025] [:error] [pid 9630:tid 9649] [client 212.30.36.74:22319] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSRRvCrSgUgPGkizt2onUQAAAFE"]
[Mon Nov 24 20:38:21.831050 2025] [:error] [pid 48599:tid 48626] [client 212.30.36.80:53763] [client 212.30.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSRRvZzvu6PDJiRKE3JF5wAAAZc"]
[Mon Nov 24 20:38:22.698809 2025] [:error] [pid 48601:tid 48669] [client 212.30.36.69:52861] [client 212.30.36.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSRRvoMM4MaVTk74-AbadQAAAgw"]
[Mon Nov 24 20:38:23.565737 2025] [proxy_fcgi:error] [pid 48600:tid 48653] [client 212.30.36.92:59243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:24.001473 2025] [proxy_fcgi:error] [pid 48600:tid 48644] [client 212.30.36.92:59243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:24.894872 2025] [:error] [pid 48600:tid 48650] [client 212.30.36.92:59243] [client 212.30.36.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.92, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSRRwPtOzSUAQvWVjBeYxwAAAdQ"]
[Mon Nov 24 20:38:28.370237 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 212.30.36.92:59243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:29.683563 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 212.30.36.92:59243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:32.333215 2025] [:error] [pid 48600:tid 48631] [client 212.30.36.92:59243] [client 212.30.36.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSRRyPtOzSUAQvWVjBeY2QAAAcE"]
[Mon Nov 24 20:38:33.227145 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 212.30.36.70:28865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:35.520290 2025] [:error] [pid 48599:tid 48608] [client 212.30.36.70:28865] [client 212.30.36.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.70, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSRRy5zvu6PDJiRKE3JGAQAAAYU"]
[Mon Nov 24 20:38:35.957404 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 212.30.36.70:28865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:36.802733 2025] [proxy_fcgi:error] [pid 48599:tid 48605] [client 212.30.36.70:28865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:37.247379 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 212.30.36.70:28865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:38.070475 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 212.30.36.70:28865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:38.526438 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 212.30.36.70:28865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:38.973590 2025] [:error] [pid 48599:tid 48613] [client 212.30.36.70:28865] [client 212.30.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSRRzpzvu6PDJiRKE3JGDAAAAYo"]
[Mon Nov 24 20:38:39.835825 2025] [:error] [pid 48601:tid 48679] [client 212.30.36.57:46293] [client 212.30.36.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aSRRz4MM4MaVTk74-AbajQAAAhY"]
[Mon Nov 24 20:38:41.771133 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:42.170031 2025] [proxy_fcgi:error] [pid 48688:tid 48699] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:42.648021 2025] [proxy_fcgi:error] [pid 48688:tid 48700] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:43.232355 2025] [proxy_fcgi:error] [pid 48688:tid 48716] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:44.113102 2025] [proxy_fcgi:error] [pid 48688:tid 48709] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:45.841300 2025] [proxy_fcgi:error] [pid 48688:tid 48713] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:50.879586 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:51.328943 2025] [proxy_fcgi:error] [pid 48688:tid 48706] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:51.735382 2025] [proxy_fcgi:error] [pid 48688:tid 48698] [client 212.30.36.97:33119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:52.556153 2025] [:error] [pid 48688:tid 48712] [client 212.30.36.97:33119] [client 212.30.36.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSRR3Bm2q1FkzLam7A3DLwAAAlQ"]
[Mon Nov 24 20:38:55.101935 2025] [:error] [pid 16549:tid 16558] [client 212.30.36.63:29847] [client 212.30.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aSRR36eWW19A99PUw_ddigAAAUY"]
[Mon Nov 24 20:38:57.355751 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 212.30.36.62:43597] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:38:57.767685 2025] [:error] [pid 16441:tid 16446] [client 212.30.36.62:43597] [client 212.30.36.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSRR4Yq_bc5MOa9Hfll8_QAAAII"]
[Mon Nov 24 20:38:59.521373 2025] [proxy_fcgi:error] [pid 48601:tid 48677] [client 212.30.36.79:48441] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:00.429471 2025] [proxy_fcgi:error] [pid 48601:tid 48680] [client 212.30.36.79:48441] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:00.909517 2025] [:error] [pid 48601:tid 48665] [client 212.30.36.79:48441] [client 212.30.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aSRR5IMM4MaVTk74-AbaoQAAAgg"]
[Mon Nov 24 20:39:01.862176 2025] [:error] [pid 48600:tid 48642] [client 212.30.36.83:46803] [client 212.30.36.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSRR5ftOzSUAQvWVjBeY7QAAAcw"]
[Mon Nov 24 20:39:02.758971 2025] [:error] [pid 49900:tid 49916] [client 212.30.36.80:26253] [client 212.30.36.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.80, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSRR5jCyPLrvg06aork7uwAAAA4"]
[Mon Nov 24 20:39:03.887735 2025] [proxy_fcgi:error] [pid 49900:tid 49913] [client 212.30.36.80:26253] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:04.810089 2025] [:error] [pid 49900:tid 49903] [client 212.30.36.80:26253] [client 212.30.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aSRR6DCyPLrvg06aork7vwAAAAE"]
[Mon Nov 24 20:39:06.697107 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 212.30.36.67:63447] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:08.275039 2025] [proxy_fcgi:error] [pid 48688:tid 48708] [client 212.30.36.67:63447] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:10.437058 2025] [:error] [pid 48688:tid 48694] [client 212.30.36.67:63447] [client 212.30.36.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSRR7hm2q1FkzLam7A3DTAAAAkI"]
[Mon Nov 24 20:39:11.275867 2025] [proxy_fcgi:error] [pid 16516:tid 16533] [client 212.30.36.100:30875] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:12.149796 2025] [:error] [pid 16516:tid 16539] [client 212.30.36.100:30875] [client 212.30.36.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSRR8PqZbniwaNwL8XkCIgAAARQ"]
[Mon Nov 24 20:39:13.459006 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 212.30.36.80:36401] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:13.886204 2025] [:error] [pid 48601:tid 48674] [client 212.30.36.80:36401] [client 212.30.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSRR8YMM4MaVTk74-AbarwAAAhE"]
[Mon Nov 24 20:39:15.644334 2025] [proxy_fcgi:error] [pid 16516:tid 16521] [client 212.30.36.57:37939] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:16.068722 2025] [:error] [pid 16516:tid 16527] [client 212.30.36.57:37939] [client 212.30.36.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.57, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSRR9PqZbniwaNwL8XkCKQAAAQg"]
[Mon Nov 24 20:39:18.013232 2025] [:error] [pid 16516:tid 16535] [client 212.30.36.57:37939] [client 212.30.36.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSRR9vqZbniwaNwL8XkCLAAAARA"]
[Mon Nov 24 20:39:18.898404 2025] [:error] [pid 16441:tid 16453] [client 212.30.36.59:56143] [client 212.30.36.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSRR9oq_bc5MOa9Hfll9DgAAAIk"]
[Mon Nov 24 20:39:20.581601 2025] [proxy_fcgi:error] [pid 16516:tid 16538] [client 212.30.36.90:44561] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:21.017449 2025] [proxy_fcgi:error] [pid 16516:tid 16524] [client 212.30.36.90:44561] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:22.501191 2025] [proxy_fcgi:error] [pid 16516:tid 16520] [client 212.30.36.90:44561] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:23.373663 2025] [proxy_fcgi:error] [pid 16516:tid 16540] [client 212.30.36.90:44561] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:23.823585 2025] [proxy_fcgi:error] [pid 16516:tid 16527] [client 212.30.36.90:44561] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:24.757525 2025] [:error] [pid 16516:tid 16529] [client 212.30.36.90:44561] [client 212.30.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSRR_PqZbniwaNwL8XkCOgAAAQo"]
[Mon Nov 24 20:39:28.198649 2025] [:error] [pid 16441:tid 16451] [client 212.30.36.99:26209] [client 212.30.36.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSRSAIq_bc5MOa9Hfll9HQAAAIc"]
[Mon Nov 24 20:39:29.047926 2025] [:error] [pid 48599:tid 48620] [client 212.30.36.70:39001] [client 212.30.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSRSAZzvu6PDJiRKE3JGQQAAAZE"]
[Mon Nov 24 20:39:30.924055 2025] [:error] [pid 48688:tid 48701] [client 212.30.36.92:45415] [client 212.30.36.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSRSAhm2q1FkzLam7A3DkQAAAkk"]
[Mon Nov 24 20:39:31.787418 2025] [:error] [pid 16593:tid 16602] [client 212.30.36.92:20489] [client 212.30.36.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSRSAxVGznHBJI2LKpRhhgAAAoc"]
[Mon Nov 24 20:39:33.673109 2025] [autoindex:error] [pid 48599:tid 48623] [client 212.30.36.68:53939] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 20:39:34.985701 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 212.30.36.68:53939] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:35.411980 2025] [:error] [pid 48599:tid 48617] [client 212.30.36.68:53939] [client 212.30.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSRSB5zvu6PDJiRKE3JGUAAAAY4"]
[Mon Nov 24 20:39:36.778479 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 212.30.36.75:33783] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:37.223802 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 212.30.36.75:33783] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:37.671156 2025] [:error] [pid 16441:tid 16449] [client 212.30.36.75:33783] [client 212.30.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSRSCYq_bc5MOa9Hfll9TQAAAIU"]
[Mon Nov 24 20:39:38.551522 2025] [proxy_fcgi:error] [pid 48688:tid 48692] [client 212.30.36.103:40543] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:38.967628 2025] [proxy_fcgi:error] [pid 48688:tid 48701] [client 212.30.36.103:40543] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:39.410766 2025] [:error] [pid 48688:tid 48699] [client 212.30.36.103:40543] [client 212.30.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSRSCxm2q1FkzLam7A3DpAAAAkc"]
[Mon Nov 24 20:39:40.232048 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 212.30.36.63:24093] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:41.720658 2025] [:error] [pid 48601:tid 48674] [client 212.30.36.63:24093] [client 212.30.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSRSDYMM4MaVTk74-AbayAAAAhE"]
[Mon Nov 24 20:39:43.913840 2025] [:error] [pid 16593:tid 16610] [client 212.30.36.103:65097] [client 212.30.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSRSDxVGznHBJI2LKpRhkQAAAo8"]
[Mon Nov 24 20:39:44.798580 2025] [:error] [pid 48599:tid 48623] [client 212.30.36.94:20555] [client 212.30.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSRSEJzvu6PDJiRKE3JGWQAAAZQ"]
[Mon Nov 24 20:39:46.015942 2025] [:error] [pid 48688:tid 48695] [client 212.30.36.73:58233] [client 212.30.36.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSRSEhm2q1FkzLam7A3DqgAAAkM"]
[Mon Nov 24 20:39:46.892467 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 212.30.36.95:30119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:47.728869 2025] [proxy_fcgi:error] [pid 9630:tid 9637] [client 212.30.36.95:30119] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:48.158956 2025] [:error] [pid 9630:tid 9645] [client 212.30.36.95:30119] [client 212.30.36.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.95, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSRSFCrSgUgPGkizt2ooGQAAAE0"]
[Mon Nov 24 20:39:48.989595 2025] [:error] [pid 9630:tid 9656] [client 212.30.36.95:30119] [client 212.30.36.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSRSFCrSgUgPGkizt2ooHgAAAFg"]
[Mon Nov 24 20:39:49.911776 2025] [:error] [pid 48688:tid 48712] [client 212.30.36.60:55531] [client 212.30.36.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSRSFRm2q1FkzLam7A3DvQAAAlQ"]
[Mon Nov 24 20:39:50.789841 2025] [proxy_fcgi:error] [pid 16549:tid 16567] [client 212.30.36.72:64135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:51.256131 2025] [proxy_fcgi:error] [pid 16549:tid 16575] [client 212.30.36.72:64135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:52.946415 2025] [proxy_fcgi:error] [pid 16549:tid 16574] [client 212.30.36.72:64135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:39:54.336486 2025] [:error] [pid 16549:tid 16557] [client 212.30.36.72:64135] [client 212.30.36.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.72, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSRSGqeWW19A99PUw_ddrgAAAUU"]
[Mon Nov 24 20:39:54.791395 2025] [:error] [pid 16549:tid 16556] [client 212.30.36.72:64135] [client 212.30.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSRSGqeWW19A99PUw_ddrwAAAUQ"]
[Mon Nov 24 20:39:55.653710 2025] [:error] [pid 48600:tid 48652] [client 212.30.36.101:33359] [client 212.30.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aSRSG_tOzSUAQvWVjBeZIQAAAdY"]
[Mon Nov 24 20:39:57.553137 2025] [:error] [pid 16549:tid 16573] [client 212.30.36.57:23619] [client 212.30.36.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSRSHaeWW19A99PUw_ddsQAAAVQ"]
[Mon Nov 24 20:39:59.737937 2025] [proxy_fcgi:error] [pid 49900:tid 49915] [client 212.30.36.75:64097] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:00.178009 2025] [:error] [pid 49900:tid 49909] [client 212.30.36.75:64097] [client 212.30.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSRSIDCyPLrvg06aork79QAAAAc"]
[Mon Nov 24 20:40:01.090947 2025] [proxy_fcgi:error] [pid 48601:tid 48669] [client 212.30.36.80:32909] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:01.570443 2025] [proxy_fcgi:error] [pid 48601:tid 48662] [client 212.30.36.80:32909] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:04.065011 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 212.30.36.80:32909] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:05.500953 2025] [proxy_fcgi:error] [pid 48601:tid 48664] [client 212.30.36.80:32909] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:05.948171 2025] [:error] [pid 48601:tid 48665] [client 212.30.36.80:32909] [client 212.30.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSRSJYMM4MaVTk74-Aba2wAAAgg"]
[Mon Nov 24 20:40:07.326510 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 212.30.36.57:45251] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:08.176179 2025] [:error] [pid 48599:tid 48608] [client 212.30.36.57:45251] [client 212.30.36.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSRSKJzvu6PDJiRKE3JGewAAAYU"]
[Mon Nov 24 20:40:11.031581 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 212.30.36.102:62281] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:12.350855 2025] [:error] [pid 48599:tid 48605] [client 212.30.36.102:62281] [client 212.30.36.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSRSLJzvu6PDJiRKE3JGgQAAAYI"]
[Mon Nov 24 20:40:13.653029 2025] [:error] [pid 48688:tid 48699] [client 212.30.36.55:22259] [client 212.30.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSRSLRm2q1FkzLam7A3D0AAAAkc"]
[Mon Nov 24 20:40:14.967837 2025] [:error] [pid 9630:tid 9641] [client 212.30.36.95:65427] [client 212.30.36.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSRSLirSgUgPGkizt2ooMwAAAEk"]
[Mon Nov 24 20:40:16.237704 2025] [:error] [pid 48688:tid 48716] [client 212.30.36.69:56069] [client 212.30.36.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSRSMBm2q1FkzLam7A3D0gAAAlg"]
[Mon Nov 24 20:40:17.500109 2025] [:error] [pid 9630:tid 9647] [client 212.30.36.82:34877] [client 212.30.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSRSMSrSgUgPGkizt2ooOAAAAE8"]
[Mon Nov 24 20:40:19.286238 2025] [:error] [pid 16441:tid 16458] [client 212.30.36.88:37141] [client 212.30.36.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSRSM4q_bc5MOa9Hfll9nQAAAI4"]
[Mon Nov 24 20:40:20.504977 2025] [proxy_fcgi:error] [pid 48688:tid 48709] [client 212.30.36.62:27131] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:21.378755 2025] [:error] [pid 48688:tid 48713] [client 212.30.36.62:27131] [client 212.30.36.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSRSNRm2q1FkzLam7A3D2wAAAlU"]
[Mon Nov 24 20:40:22.246320 2025] [proxy_fcgi:error] [pid 16516:tid 16538] [client 212.30.36.64:38713] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:22.694468 2025] [proxy_fcgi:error] [pid 16516:tid 16521] [client 212.30.36.64:38713] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:23.098546 2025] [proxy_fcgi:error] [pid 16516:tid 16529] [client 212.30.36.64:38713] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:23.560368 2025] [:error] [pid 16516:tid 16527] [client 212.30.36.64:38713] [client 212.30.36.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSRSN_qZbniwaNwL8XkCjgAAAQg"]
[Mon Nov 24 20:40:25.311240 2025] [:error] [pid 49900:tid 49918] [client 212.30.36.90:60477] [client 212.30.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSRSOTCyPLrvg06aork8BwAAABA"]
[Mon Nov 24 20:40:26.192765 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 212.30.36.95:43815] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:26.633750 2025] [proxy_fcgi:error] [pid 16593:tid 16618] [client 212.30.36.95:43815] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:27.048493 2025] [proxy_fcgi:error] [pid 16593:tid 16598] [client 212.30.36.95:43815] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:27.873751 2025] [proxy_fcgi:error] [pid 16593:tid 16619] [client 212.30.36.95:43815] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:28.325077 2025] [:error] [pid 16593:tid 16596] [client 212.30.36.95:43815] [client 212.30.36.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSRSPBVGznHBJI2LKpRhxAAAAoE"]
[Mon Nov 24 20:40:30.852834 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 212.30.36.101:64535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:32.189809 2025] [proxy_fcgi:error] [pid 48601:tid 48661] [client 212.30.36.101:64535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:32.624120 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 212.30.36.101:64535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:34.861510 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 212.30.36.101:64535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:35.372303 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 212.30.36.101:64535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:37.104399 2025] [proxy_fcgi:error] [pid 48601:tid 48663] [client 212.30.36.101:64535] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:37.772397 2025] [:error] [pid 48601:tid 48678] [client 212.30.36.101:64535] [client 212.30.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSRSRYMM4MaVTk74-Aba_AAAAhU"]
[Mon Nov 24 20:40:39.591403 2025] [:error] [pid 48599:tid 48624] [client 212.30.36.78:51761] [client 212.30.36.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSRSR5zvu6PDJiRKE3JGlgAAAZU"]
[Mon Nov 24 20:40:40.452767 2025] [proxy_fcgi:error] [pid 16549:tid 16568] [client 212.30.36.83:33651] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:40.901798 2025] [proxy_fcgi:error] [pid 16549:tid 16555] [client 212.30.36.83:33651] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:41.320169 2025] [proxy_fcgi:error] [pid 16549:tid 16553] [client 212.30.36.83:33651] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:41.818080 2025] [:error] [pid 16549:tid 16560] [client 212.30.36.83:33651] [client 212.30.36.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSRSSaeWW19A99PUw_ddwwAAAUg"]
[Mon Nov 24 20:40:42.697112 2025] [:error] [pid 16516:tid 16542] [client 212.30.36.57:46183] [client 212.30.36.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSRSSvqZbniwaNwL8XkClwAAARc"]
[Mon Nov 24 20:40:43.796305 2025] [proxy_fcgi:error] [pid 49900:tid 49921] [client 212.30.36.97:63345] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:44.213385 2025] [:error] [pid 49900:tid 49905] [client 212.30.36.97:63345] [client 212.30.36.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSRSTDCyPLrvg06aork8GgAAAAM"]
[Mon Nov 24 20:40:45.145542 2025] [proxy_fcgi:error] [pid 16593:tid 16609] [client 212.30.36.71:25695] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:46.268365 2025] [proxy_fcgi:error] [pid 16593:tid 16606] [client 212.30.36.71:25695] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:46.698937 2025] [proxy_fcgi:error] [pid 16593:tid 16619] [client 212.30.36.71:25695] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:47.543760 2025] [proxy_fcgi:error] [pid 16593:tid 16598] [client 212.30.36.71:25695] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:47.981042 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 212.30.36.71:25695] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:48.441306 2025] [:error] [pid 16593:tid 16610] [client 212.30.36.71:25695] [client 212.30.36.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSRSUBVGznHBJI2LKpRh6QAAAo8"]
[Mon Nov 24 20:40:49.726821 2025] [:error] [pid 16441:tid 16462] [client 212.30.36.101:65129] [client 212.30.36.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.101, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSRSUYq_bc5MOa9Hfll9xAAAAJI"]
[Mon Nov 24 20:40:50.207853 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 212.30.36.101:65129] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:50.647948 2025] [:error] [pid 16441:tid 16450] [client 212.30.36.101:65129] [client 212.30.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSRSUoq_bc5MOa9Hfll9xwAAAIY"]
[Mon Nov 24 20:40:51.558058 2025] [:error] [pid 16593:tid 16601] [client 212.30.36.59:42167] [client 212.30.36.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSRSUxVGznHBJI2LKpRh7AAAAoY"]
[Mon Nov 24 20:40:52.911287 2025] [proxy_fcgi:error] [pid 16593:tid 16604] [client 212.30.36.103:32647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:53.406874 2025] [proxy_fcgi:error] [pid 16593:tid 16608] [client 212.30.36.103:32647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:54.499428 2025] [:error] [pid 16593:tid 16599] [client 212.30.36.103:32647] [client 212.30.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSRSVhVGznHBJI2LKpRh8wAAAoQ"]
[Mon Nov 24 20:40:55.384944 2025] [proxy_fcgi:error] [pid 16549:tid 16558] [client 212.30.36.92:57575] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:55.906843 2025] [:error] [pid 16549:tid 16554] [client 212.30.36.92:57575] [client 212.30.36.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSRSV6eWW19A99PUw_ddygAAAUI"]
[Mon Nov 24 20:40:57.954889 2025] [proxy_fcgi:error] [pid 48601:tid 48664] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:59.357493 2025] [proxy_fcgi:error] [pid 48601:tid 48673] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:40:59.792211 2025] [proxy_fcgi:error] [pid 48601:tid 48658] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:00.231208 2025] [proxy_fcgi:error] [pid 48601:tid 48679] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:00.718784 2025] [proxy_fcgi:error] [pid 48601:tid 48671] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:02.119199 2025] [proxy_fcgi:error] [pid 48601:tid 48672] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:02.566874 2025] [proxy_fcgi:error] [pid 48601:tid 48680] [client 212.30.36.69:49009] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:04.088335 2025] [:error] [pid 48601:tid 48676] [client 212.30.36.69:49009] [client 212.30.36.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSRSYIMM4MaVTk74-AbbDwAAAhM"]
[Mon Nov 24 20:41:04.916480 2025] [proxy_fcgi:error] [pid 9630:tid 9647] [client 212.30.36.74:36449] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:05.773738 2025] [proxy_fcgi:error] [pid 9630:tid 9643] [client 212.30.36.74:36449] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:06.206802 2025] [:error] [pid 9630:tid 9644] [client 212.30.36.74:36449] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSRSYirSgUgPGkizt2ooYwAAAEw"]
[Mon Nov 24 20:41:07.112234 2025] [proxy_fcgi:error] [pid 9630:tid 9633] [client 212.30.36.76:29955] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:07.566270 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 212.30.36.76:29955] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:08.016012 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 212.30.36.76:29955] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:08.450086 2025] [:error] [pid 9630:tid 9655] [client 212.30.36.76:29955] [client 212.30.36.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.76, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSRSZCrSgUgPGkizt2ooaAAAAFc"]
[Mon Nov 24 20:41:08.454230 2025] [proxy_fcgi:error] [pid 9630:tid 9655] [client 212.30.36.76:29955] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:09.739943 2025] [proxy_fcgi:error] [pid 9630:tid 9634] [client 212.30.36.76:29955] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:10.230154 2025] [proxy_fcgi:error] [pid 9630:tid 9647] [client 212.30.36.76:29955] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:11.093228 2025] [:error] [pid 9630:tid 9638] [client 212.30.36.76:29955] [client 212.30.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aSRSZyrSgUgPGkizt2oocQAAAEY"]
[Mon Nov 24 20:41:11.947205 2025] [:error] [pid 48601:tid 48657] [client 212.30.36.65:60279] [client 212.30.36.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.65, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSRSZ4MM4MaVTk74-AbbEwAAAgA"]
[Mon Nov 24 20:41:12.403642 2025] [:error] [pid 48601:tid 48681] [client 212.30.36.65:60279] [client 212.30.36.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSRSaIMM4MaVTk74-AbbFQAAAhg"]
[Mon Nov 24 20:41:15.174996 2025] [proxy_fcgi:error] [pid 48601:tid 48674] [client 212.30.36.94:20377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:16.190765 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 212.30.36.94:20377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:17.142276 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 212.30.36.94:20377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:17.581731 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 212.30.36.94:20377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:17.986563 2025] [proxy_fcgi:error] [pid 48601:tid 48659] [client 212.30.36.94:20377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:18.878473 2025] [:error] [pid 48601:tid 48667] [client 212.30.36.94:20377] [client 212.30.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSRSboMM4MaVTk74-AbbIwAAAgo"]
[Mon Nov 24 20:41:19.710303 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 212.30.36.66:44781] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:21.144099 2025] [:error] [pid 48599:tid 48608] [client 212.30.36.66:44781] [client 212.30.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSRScZzvu6PDJiRKE3JGpwAAAYU"]
[Mon Nov 24 20:41:22.585978 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:23.023034 2025] [:error] [pid 16441:tid 16456] [client 212.30.36.62:53433] [client 212.30.36.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.62, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSRSc4q_bc5MOa9Hfll98AAAAIw"]
[Mon Nov 24 20:41:23.478163 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:24.403676 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:24.799755 2025] [proxy_fcgi:error] [pid 16441:tid 16462] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:25.261290 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:25.741474 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:26.138994 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 212.30.36.62:53433] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:26.572173 2025] [:error] [pid 16441:tid 16451] [client 212.30.36.62:53433] [client 212.30.36.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSRSdoq_bc5MOa9Hfll-AgAAAIc"]
[Mon Nov 24 20:41:27.904122 2025] [:error] [pid 48600:tid 48645] [client 212.30.36.70:53859] [client 212.30.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/packed.php"] [unique_id "aSRSd_tOzSUAQvWVjBeZXAAAAc8"]
[Mon Nov 24 20:41:28.810355 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:29.316180 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:29.775944 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:30.710967 2025] [proxy_fcgi:error] [pid 16441:tid 16462] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:31.205831 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:31.651350 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:32.085957 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.79:28243] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:32.509602 2025] [:error] [pid 16441:tid 16468] [client 212.30.36.79:28243] [client 212.30.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aSRSfIq_bc5MOa9Hfll-CwAAAJg"]
[Mon Nov 24 20:41:34.358553 2025] [:error] [pid 16441:tid 16458] [client 212.30.36.65:21233] [client 212.30.36.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSRSfoq_bc5MOa9Hfll-EwAAAI4"]
[Mon Nov 24 20:41:35.688322 2025] [:error] [pid 16593:tid 16596] [client 212.30.36.101:45327] [client 212.30.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSRSfxVGznHBJI2LKpRiSAAAAoE"]
[Mon Nov 24 20:41:36.541438 2025] [proxy_fcgi:error] [pid 48600:tid 48641] [client 212.30.36.61:24167] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:37.781401 2025] [proxy_fcgi:error] [pid 48600:tid 48650] [client 212.30.36.61:24167] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:38.215680 2025] [:error] [pid 48600:tid 48643] [client 212.30.36.61:24167] [client 212.30.36.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.61, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSRSgvtOzSUAQvWVjBeZZAAAAc0"]
[Mon Nov 24 20:41:38.648735 2025] [:error] [pid 48600:tid 48636] [client 212.30.36.61:24167] [client 212.30.36.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSRSgvtOzSUAQvWVjBeZZQAAAcY"]
[Mon Nov 24 20:41:40.833375 2025] [proxy_fcgi:error] [pid 16516:tid 16537] [client 212.30.36.93:60875] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:41.290495 2025] [proxy_fcgi:error] [pid 16516:tid 16530] [client 212.30.36.93:60875] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:42.118519 2025] [:error] [pid 16516:tid 16522] [client 212.30.36.93:60875] [client 212.30.36.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSRShvqZbniwaNwL8XkCxgAAAQM"]
[Mon Nov 24 20:41:43.023627 2025] [:error] [pid 16441:tid 16454] [client 212.30.36.91:60963] [client 212.30.36.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSRSh4q_bc5MOa9Hfll-HwAAAIo"]
[Mon Nov 24 20:41:43.922018 2025] [proxy_fcgi:error] [pid 49900:tid 49912] [client 212.30.36.85:39105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:44.356800 2025] [proxy_fcgi:error] [pid 49900:tid 49917] [client 212.30.36.85:39105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:45.211795 2025] [proxy_fcgi:error] [pid 49900:tid 49907] [client 212.30.36.85:39105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:45.632034 2025] [proxy_fcgi:error] [pid 49900:tid 49923] [client 212.30.36.85:39105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:46.933036 2025] [proxy_fcgi:error] [pid 49900:tid 49904] [client 212.30.36.85:39105] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:47.364265 2025] [:error] [pid 49900:tid 49914] [client 212.30.36.85:39105] [client 212.30.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aSRSizCyPLrvg06aork8pwAAAAw"]
[Mon Nov 24 20:41:48.252483 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.75:20089] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:48.666263 2025] [proxy_fcgi:error] [pid 16441:tid 16452] [client 212.30.36.75:20089] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:49.563493 2025] [:error] [pid 16441:tid 16445] [client 212.30.36.75:20089] [client 212.30.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aSRSjYq_bc5MOa9Hfll-MwAAAIE"]
[Mon Nov 24 20:41:52.030821 2025] [proxy_fcgi:error] [pid 48601:tid 48658] [client 212.30.36.90:61059] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:52.875107 2025] [proxy_fcgi:error] [pid 48601:tid 48677] [client 212.30.36.90:61059] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:53.741329 2025] [:error] [pid 48601:tid 48669] [client 212.30.36.90:61059] [client 212.30.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSRSkYMM4MaVTk74-AbbOAAAAgw"]
[Mon Nov 24 20:41:55.469617 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 212.30.36.70:20741] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:56.358312 2025] [:error] [pid 9630:tid 9655] [client 212.30.36.70:20741] [client 212.30.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSRSlCrSgUgPGkizt2oopwAAAFc"]
[Mon Nov 24 20:41:57.429313 2025] [proxy_fcgi:error] [pid 16549:tid 16560] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:57.893317 2025] [proxy_fcgi:error] [pid 16549:tid 16555] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:41:59.304110 2025] [proxy_fcgi:error] [pid 16549:tid 16564] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:00.149507 2025] [proxy_fcgi:error] [pid 16549:tid 16572] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:00.604978 2025] [proxy_fcgi:error] [pid 16549:tid 16576] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:01.022979 2025] [proxy_fcgi:error] [pid 16549:tid 16556] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:01.457290 2025] [proxy_fcgi:error] [pid 16549:tid 16569] [client 212.30.36.70:34169] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:01.925811 2025] [:error] [pid 16549:tid 16577] [client 212.30.36.70:34169] [client 212.30.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSRSmaeWW19A99PUw_deEAAAAVg"]
[Mon Nov 24 20:42:02.874657 2025] [proxy_fcgi:error] [pid 48601:tid 48660] [client 212.30.36.70:58411] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:03.328399 2025] [proxy_fcgi:error] [pid 48601:tid 48674] [client 212.30.36.70:58411] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:04.667759 2025] [proxy_fcgi:error] [pid 48601:tid 48670] [client 212.30.36.70:58411] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:05.641612 2025] [:error] [pid 48601:tid 48677] [client 212.30.36.70:58411] [client 212.30.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSRSnYMM4MaVTk74-AbbRgAAAhQ"]
[Mon Nov 24 20:42:06.575194 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 212.30.36.97:63545] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:06.991434 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 212.30.36.97:63545] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:07.896810 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 212.30.36.97:63545] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:09.353752 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 212.30.36.97:63545] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:10.789900 2025] [:error] [pid 48599:tid 48617] [client 212.30.36.97:63545] [client 212.30.36.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/item.php"] [unique_id "aSRSopzvu6PDJiRKE3JGygAAAY4"]
[Mon Nov 24 20:42:14.032624 2025] [proxy_fcgi:error] [pid 16593:tid 16595] [client 212.30.36.55:24233] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:15.864721 2025] [:error] [pid 16593:tid 16604] [client 212.30.36.55:24233] [client 212.30.36.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.55, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSRSpxVGznHBJI2LKpRibAAAAok"]
[Mon Nov 24 20:42:15.869121 2025] [proxy_fcgi:error] [pid 16593:tid 16604] [client 212.30.36.55:24233] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:16.311993 2025] [:error] [pid 16593:tid 16600] [client 212.30.36.55:24233] [client 212.30.36.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.55, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSRSqBVGznHBJI2LKpRibQAAAoU"]
[Mon Nov 24 20:42:16.754771 2025] [:error] [pid 16593:tid 16608] [client 212.30.36.55:24233] [client 212.30.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mani.php"] [unique_id "aSRSqBVGznHBJI2LKpRibgAAAo0"]
[Mon Nov 24 20:42:17.646828 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 212.30.36.56:42503] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:18.061963 2025] [proxy_fcgi:error] [pid 48599:tid 48609] [client 212.30.36.56:42503] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:19.338174 2025] [proxy_fcgi:error] [pid 48599:tid 48605] [client 212.30.36.56:42503] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:24.549148 2025] [:error] [pid 48599:tid 48616] [client 212.30.36.56:42503] [client 212.30.36.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aSRSsJzvu6PDJiRKE3JG1gAAAY0"]
[Mon Nov 24 20:42:25.430021 2025] [proxy_fcgi:error] [pid 9630:tid 9653] [client 212.30.36.58:28563] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:25.922433 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 212.30.36.58:28563] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:26.380719 2025] [:error] [pid 9630:tid 9656] [client 212.30.36.58:28563] [client 212.30.36.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSRSsirSgUgPGkizt2ooyQAAAFg"]
[Mon Nov 24 20:42:28.472851 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.58:34299] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:28.896342 2025] [proxy_fcgi:error] [pid 16441:tid 16462] [client 212.30.36.58:34299] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:30.186136 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 212.30.36.58:34299] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:31.227010 2025] [:error] [pid 16441:tid 16467] [client 212.30.36.58:34299] [client 212.30.36.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSRSt4q_bc5MOa9Hfll-fAAAAJc"]
[Mon Nov 24 20:42:32.160108 2025] [:error] [pid 16441:tid 16454] [client 212.30.36.75:52553] [client 212.30.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSRSuIq_bc5MOa9Hfll-gAAAAIo"]
[Mon Nov 24 20:42:33.610769 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 212.30.36.62:62715] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:34.894694 2025] [:error] [pid 9630:tid 9643] [client 212.30.36.62:62715] [client 212.30.36.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.62, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/wp-login.php"] [unique_id "aSRSuirSgUgPGkizt2oo0QAAAEs"]
[Mon Nov 24 20:42:36.406722 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 212.30.36.62:62715] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:37.251651 2025] [proxy_fcgi:error] [pid 9630:tid 9653] [client 212.30.36.62:62715] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:37.719787 2025] [:error] [pid 9630:tid 9644] [client 212.30.36.62:62715] [client 212.30.36.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSRSvSrSgUgPGkizt2oo1QAAAEw"]
[Mon Nov 24 20:42:38.567465 2025] [proxy_fcgi:error] [pid 16516:tid 16520] [client 212.30.36.85:58897] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:39.004315 2025] [:error] [pid 16516:tid 16526] [client 212.30.36.85:58897] [client 212.30.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSRSv_qZbniwaNwL8XkC9wAAAQc"]
[Mon Nov 24 20:42:39.925319 2025] [:error] [pid 16441:tid 16453] [client 212.30.36.68:56275] [client 212.30.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSRSv4q_bc5MOa9Hfll-jgAAAIk"]
[Mon Nov 24 20:42:41.317389 2025] [:error] [pid 16593:tid 16606] [client 212.30.36.78:30183] [client 212.30.36.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSRSwRVGznHBJI2LKpRidwAAAos"]
[Mon Nov 24 20:42:44.918690 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 212.30.36.85:40415] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:45.799249 2025] [:error] [pid 48599:tid 48620] [client 212.30.36.85:40415] [client 212.30.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSRSxZzvu6PDJiRKE3JHBwAAAZE"]
[Mon Nov 24 20:42:46.671786 2025] [proxy_fcgi:error] [pid 49900:tid 49920] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:47.133691 2025] [proxy_fcgi:error] [pid 49900:tid 49922] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:47.611441 2025] [proxy_fcgi:error] [pid 49900:tid 49921] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:49.065391 2025] [proxy_fcgi:error] [pid 49900:tid 49909] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:49.535449 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:49.980744 2025] [proxy_fcgi:error] [pid 49900:tid 49922] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:50.917716 2025] [proxy_fcgi:error] [pid 49900:tid 49919] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:51.376517 2025] [proxy_fcgi:error] [pid 49900:tid 49906] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:52.246610 2025] [proxy_fcgi:error] [pid 49900:tid 49912] [client 212.30.36.66:65377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:53.693209 2025] [:error] [pid 49900:tid 49920] [client 212.30.36.66:65377] [client 212.30.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aSRSzTCyPLrvg06aork9BgAAABI"]
[Mon Nov 24 20:42:55.025365 2025] [proxy_fcgi:error] [pid 9630:tid 9651] [client 212.30.36.56:58471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:55.439609 2025] [proxy_fcgi:error] [pid 9630:tid 9648] [client 212.30.36.56:58471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:55.905840 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 212.30.36.56:58471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:56.831372 2025] [proxy_fcgi:error] [pid 9630:tid 9639] [client 212.30.36.56:58471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:57.747721 2025] [proxy_fcgi:error] [pid 9630:tid 9655] [client 212.30.36.56:58471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:58.167056 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 212.30.36.56:58471] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:42:59.493243 2025] [:error] [pid 9630:tid 9649] [client 212.30.36.56:58471] [client 212.30.36.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSRS0yrSgUgPGkizt2oo9AAAAFE"]
[Mon Nov 24 20:43:04.231321 2025] [:error] [pid 16441:tid 16449] [client 212.30.36.85:59441] [client 212.30.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSRS2Iq_bc5MOa9Hfll-vwAAAIU"]
[Mon Nov 24 20:43:06.641911 2025] [:error] [pid 48599:tid 48627] [client 212.30.36.94:43549] [client 212.30.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSRS2pzvu6PDJiRKE3JHLQAAAZg"]
[Mon Nov 24 20:43:07.538949 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 212.30.36.77:40755] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:07.997041 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 212.30.36.77:40755] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:08.450686 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.77:40755] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:09.285318 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 212.30.36.77:40755] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:09.715529 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 212.30.36.77:40755] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:10.161651 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 212.30.36.77:40755] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:10.593745 2025] [:error] [pid 16441:tid 16445] [client 212.30.36.77:40755] [client 212.30.36.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSRS3oq_bc5MOa9Hfll-1wAAAIE"]
[Mon Nov 24 20:43:11.494662 2025] [:error] [pid 48688:tid 48699] [client 212.30.36.89:52855] [client 212.30.36.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSRS3xm2q1FkzLam7A3EggAAAkc"]
[Mon Nov 24 20:43:13.347382 2025] [:error] [pid 48688:tid 48706] [client 212.30.36.68:64569] [client 212.30.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSRS4Rm2q1FkzLam7A3EiQAAAk4"]
[Mon Nov 24 20:43:14.676928 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:15.092574 2025] [proxy_fcgi:error] [pid 16441:tid 16458] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:15.529734 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:16.258067 2025] [proxy_fcgi:error] [pid 16441:tid 16464] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:16.669505 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:17.098120 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:18.006881 2025] [proxy_fcgi:error] [pid 16441:tid 16453] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:18.468416 2025] [proxy_fcgi:error] [pid 16441:tid 16468] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:18.909332 2025] [proxy_fcgi:error] [pid 16441:tid 16464] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:19.303358 2025] [proxy_fcgi:error] [pid 16441:tid 16466] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:19.737292 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:20.151034 2025] [proxy_fcgi:error] [pid 16441:tid 16446] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:20.588697 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:21.028787 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:21.450627 2025] [proxy_fcgi:error] [pid 16441:tid 16458] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:21.902628 2025] [proxy_fcgi:error] [pid 16441:tid 16453] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:22.750977 2025] [proxy_fcgi:error] [pid 16441:tid 16450] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:23.254590 2025] [proxy_fcgi:error] [pid 16441:tid 16463] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:23.726139 2025] [proxy_fcgi:error] [pid 16441:tid 16464] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:24.625429 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:25.525528 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:25.971340 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:26.426765 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:26.927002 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:27.421227 2025] [proxy_fcgi:error] [pid 16441:tid 16463] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:27.892684 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:28.403467 2025] [proxy_fcgi:error] [pid 16441:tid 16466] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:28.814984 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:29.269257 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 212.30.36.63:54141] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:29.752288 2025] [:error] [pid 16441:tid 16459] [client 212.30.36.63:54141] [client 212.30.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSRS8Yq_bc5MOa9Hfll_MQAAAI8"]
[Mon Nov 24 20:43:30.711575 2025] [proxy_fcgi:error] [pid 48688:tid 48705] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:31.185145 2025] [proxy_fcgi:error] [pid 48688:tid 48710] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:31.628779 2025] [proxy_fcgi:error] [pid 48688:tid 48714] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:32.080182 2025] [proxy_fcgi:error] [pid 48688:tid 48696] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:32.538255 2025] [proxy_fcgi:error] [pid 48688:tid 48706] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:32.975089 2025] [proxy_fcgi:error] [pid 48688:tid 48698] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:33.912358 2025] [proxy_fcgi:error] [pid 48688:tid 48694] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:34.353399 2025] [proxy_fcgi:error] [pid 48688:tid 48693] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:34.802149 2025] [proxy_fcgi:error] [pid 48688:tid 48711] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:35.205498 2025] [proxy_fcgi:error] [pid 48688:tid 48709] [client 212.30.36.80:39135] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:35.659686 2025] [:error] [pid 48688:tid 48701] [client 212.30.36.80:39135] [client 212.30.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSRS9xm2q1FkzLam7A3E1QAAAkk"]
[Mon Nov 24 20:43:37.928620 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 212.30.36.73:54103] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:42.667463 2025] [:error] [pid 16441:tid 16447] [client 212.30.36.73:54103] [client 212.30.36.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aSRS_oq_bc5MOa9Hfll_YwAAAIM"]
[Mon Nov 24 20:43:43.527311 2025] [:error] [pid 16441:tid 16453] [client 212.30.36.75:22605] [client 212.30.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSRS_4q_bc5MOa9Hfll_ZwAAAIk"]
[Mon Nov 24 20:43:45.665290 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 212.30.36.81:56231] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:46.554029 2025] [:error] [pid 16593:tid 16607] [client 212.30.36.81:56231] [client 212.30.36.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aSRTAhVGznHBJI2LKpRiqwAAAow"]
[Mon Nov 24 20:43:47.903281 2025] [:error] [pid 48599:tid 48618] [client 212.30.36.69:37253] [client 212.30.36.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/repeater.php"] [unique_id "aSRTA5zvu6PDJiRKE3JHSwAAAY8"]
[Mon Nov 24 20:43:50.186587 2025] [proxy_fcgi:error] [pid 16516:tid 16534] [client 212.30.36.65:47739] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:50.610591 2025] [proxy_fcgi:error] [pid 16516:tid 16540] [client 212.30.36.65:47739] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:51.454908 2025] [proxy_fcgi:error] [pid 16516:tid 16519] [client 212.30.36.65:47739] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:43:55.157729 2025] [:error] [pid 16516:tid 16525] [client 212.30.36.65:47739] [client 212.30.36.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSRTC_qZbniwaNwL8XkDzAAAAQY"]
[Mon Nov 24 20:43:56.955862 2025] [:error] [pid 16549:tid 16559] [client 212.30.36.68:54755] [client 212.30.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSRTDKeWW19A99PUw_decAAAAUc"]
[Mon Nov 24 20:43:58.340853 2025] [:error] [pid 48601:tid 48678] [client 212.30.36.87:48433] [client 212.30.36.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/options.php"] [unique_id "aSRTDoMM4MaVTk74-Abb8wAAAhU"]
[Mon Nov 24 20:43:59.203386 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 212.30.36.98:59647] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:00.073251 2025] [:error] [pid 16441:tid 16451] [client 212.30.36.98:59647] [client 212.30.36.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSRTEIq_bc5MOa9Hfll_oQAAAIc"]
[Mon Nov 24 20:44:01.058709 2025] [:error] [pid 48599:tid 48607] [client 212.30.36.97:24881] [client 212.30.36.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSRTEZzvu6PDJiRKE3JHaAAAAYQ"]
[Mon Nov 24 20:44:02.523471 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 212.30.36.85:49687] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:02.993833 2025] [:error] [pid 48600:tid 48632] [client 212.30.36.85:49687] [client 212.30.36.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.85, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/images/wp-login.php"] [unique_id "aSRTEvtOzSUAQvWVjBeZuwAAAcI"]
[Mon Nov 24 20:44:03.448791 2025] [proxy_fcgi:error] [pid 48600:tid 48639] [client 212.30.36.85:49687] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:04.846735 2025] [:error] [pid 48600:tid 48653] [client 212.30.36.85:49687] [client 212.30.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSRTFPtOzSUAQvWVjBeZwQAAAdc"]
[Mon Nov 24 20:44:05.733498 2025] [proxy_fcgi:error] [pid 16441:tid 16453] [client 212.30.36.90:25567] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:07.542206 2025] [:error] [pid 16441:tid 16467] [client 212.30.36.90:25567] [client 212.30.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSRTF4q_bc5MOa9Hfll_ugAAAJc"]
[Mon Nov 24 20:44:08.515756 2025] [:error] [pid 48688:tid 48705] [client 212.30.36.100:50301] [client 212.30.36.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSRTGBm2q1FkzLam7A3E5gAAAk0"]
[Mon Nov 24 20:44:09.413239 2025] [proxy_fcgi:error] [pid 48688:tid 48711] [client 212.30.36.58:22001] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:09.886176 2025] [:error] [pid 48688:tid 48709] [client 212.30.36.58:22001] [client 212.30.36.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.58, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSRTGRm2q1FkzLam7A3E6AAAAlE"]
[Mon Nov 24 20:44:10.302026 2025] [proxy_fcgi:error] [pid 48688:tid 48692] [client 212.30.36.58:22001] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:10.769706 2025] [:error] [pid 48688:tid 48701] [client 212.30.36.58:22001] [client 212.30.36.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSRTGhm2q1FkzLam7A3E6gAAAkk"]
[Mon Nov 24 20:44:11.649161 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.68:23185] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:12.129563 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 212.30.36.68:23185] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:13.470313 2025] [:error] [pid 16441:tid 16455] [client 212.30.36.68:23185] [client 212.30.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSRTHYq_bc5MOa9Hfll_0gAAAIs"]
[Mon Nov 24 20:44:14.333945 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:15.179669 2025] [proxy_fcgi:error] [pid 48600:tid 48641] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:15.647094 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:16.088003 2025] [proxy_fcgi:error] [pid 48600:tid 48644] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:16.512612 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:16.965396 2025] [proxy_fcgi:error] [pid 48600:tid 48639] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:17.418034 2025] [proxy_fcgi:error] [pid 48600:tid 48643] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:17.845450 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:18.300721 2025] [proxy_fcgi:error] [pid 48600:tid 48648] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:18.716002 2025] [proxy_fcgi:error] [pid 48600:tid 48650] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:19.148492 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:19.603593 2025] [proxy_fcgi:error] [pid 48600:tid 48636] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:20.109012 2025] [proxy_fcgi:error] [pid 48600:tid 48653] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:20.532835 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:20.990029 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:21.392910 2025] [proxy_fcgi:error] [pid 48600:tid 48635] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:21.843988 2025] [proxy_fcgi:error] [pid 48600:tid 48654] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:22.290403 2025] [proxy_fcgi:error] [pid 48600:tid 48638] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:22.860405 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:23.327894 2025] [proxy_fcgi:error] [pid 48600:tid 48640] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:23.771674 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:24.187916 2025] [proxy_fcgi:error] [pid 48600:tid 48641] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:24.638066 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:25.059721 2025] [proxy_fcgi:error] [pid 48600:tid 48632] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:25.556026 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:25.990057 2025] [proxy_fcgi:error] [pid 48600:tid 48646] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:26.398186 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:26.822720 2025] [proxy_fcgi:error] [pid 48600:tid 48648] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:27.247263 2025] [proxy_fcgi:error] [pid 48600:tid 48650] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:27.709298 2025] [proxy_fcgi:error] [pid 48600:tid 48637] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:28.536953 2025] [proxy_fcgi:error] [pid 48600:tid 48636] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:29.818707 2025] [proxy_fcgi:error] [pid 48600:tid 48653] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:30.254721 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:30.691323 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:31.993799 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:32.879942 2025] [proxy_fcgi:error] [pid 48600:tid 48641] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:34.664099 2025] [proxy_fcgi:error] [pid 48600:tid 48644] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:35.128441 2025] [:error] [pid 48600:tid 48643] [client 212.30.36.94:48881] [client 212.30.36.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.94, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSRTM_tOzSUAQvWVjBeZ9gAAAc0"]
[Mon Nov 24 20:44:35.655133 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:37.503591 2025] [:error] [pid 48600:tid 48649] [client 212.30.36.94:48881] [client 212.30.36.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.94, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.tmb/wp-login.php"] [unique_id "aSRTNftOzSUAQvWVjBeZ-gAAAdM"]
[Mon Nov 24 20:44:38.845012 2025] [proxy_fcgi:error] [pid 48600:tid 48650] [client 212.30.36.94:48881] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:39.291081 2025] [:error] [pid 48600:tid 48637] [client 212.30.36.94:48881] [client 212.30.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSRTN_tOzSUAQvWVjBeZ_QAAAcc"]
[Mon Nov 24 20:44:40.097177 2025] [:error] [pid 16593:tid 16607] [client 212.30.36.82:30085] [client 212.30.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSRTOBVGznHBJI2LKpRi6wAAAow"]
[Mon Nov 24 20:44:41.001258 2025] [:error] [pid 49900:tid 49908] [client 212.30.36.73:32745] [client 212.30.36.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aSRTOTCyPLrvg06aork9SwAAAAY"]
[Mon Nov 24 20:44:43.085611 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 212.30.36.74:25565] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:46.238381 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.74:25565] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:46.700073 2025] [proxy_fcgi:error] [pid 16441:tid 16450] [client 212.30.36.74:25565] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:48.442407 2025] [:error] [pid 16441:tid 16465] [client 212.30.36.74:25565] [client 212.30.36.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.74, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSRTQIq_bc5MOa9Hfll__wAAAJU"]
[Mon Nov 24 20:44:48.885832 2025] [:error] [pid 16441:tid 16457] [client 212.30.36.74:25565] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSRTQIq_bc5MOa9HflmAAgAAAI0"]
[Mon Nov 24 20:44:50.269685 2025] [proxy_fcgi:error] [pid 16593:tid 16616] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:50.674295 2025] [:error] [pid 16593:tid 16601] [client 212.30.36.76:21085] [client 212.30.36.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.76, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSRTQhVGznHBJI2LKpRi8gAAAoY"]
[Mon Nov 24 20:44:51.553267 2025] [proxy_fcgi:error] [pid 16593:tid 16598] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:52.843542 2025] [proxy_fcgi:error] [pid 16593:tid 16613] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:53.275906 2025] [proxy_fcgi:error] [pid 16593:tid 16602] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:53.688159 2025] [proxy_fcgi:error] [pid 16593:tid 16619] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:54.136192 2025] [proxy_fcgi:error] [pid 16593:tid 16610] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:54.567050 2025] [proxy_fcgi:error] [pid 16593:tid 16607] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:55.030156 2025] [proxy_fcgi:error] [pid 16593:tid 16609] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:55.481478 2025] [proxy_fcgi:error] [pid 16593:tid 16600] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:55.933757 2025] [proxy_fcgi:error] [pid 16593:tid 16617] [client 212.30.36.76:21085] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:44:57.788858 2025] [:error] [pid 16593:tid 16615] [client 212.30.36.76:21085] [client 212.30.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSRTSRVGznHBJI2LKpRjBAAAApQ"]
[Mon Nov 24 20:44:59.681228 2025] [proxy_fcgi:error] [pid 16441:tid 16468] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:00.123178 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:00.529023 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:01.083028 2025] [proxy_fcgi:error] [pid 16441:tid 16446] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:01.539185 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:02.045538 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:02.987380 2025] [proxy_fcgi:error] [pid 16441:tid 16452] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:03.444985 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:03.893156 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:04.354234 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 212.30.36.90:55587] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:04.832403 2025] [:error] [pid 16441:tid 16462] [client 212.30.36.90:55587] [client 212.30.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSRTUIq_bc5MOa9HflmAGwAAAJI"]
[Mon Nov 24 20:45:05.987102 2025] [proxy_fcgi:error] [pid 16593:tid 16614] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:07.311882 2025] [proxy_fcgi:error] [pid 16593:tid 16610] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:07.767364 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:10.354649 2025] [proxy_fcgi:error] [pid 16593:tid 16600] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:10.783238 2025] [proxy_fcgi:error] [pid 16593:tid 16617] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:11.250051 2025] [proxy_fcgi:error] [pid 16593:tid 16604] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:12.111977 2025] [proxy_fcgi:error] [pid 16593:tid 16608] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:12.961816 2025] [:error] [pid 16593:tid 16605] [client 212.30.36.102:42297] [client 212.30.36.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.102, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSRTWBVGznHBJI2LKpRjFQAAAoo"]
[Mon Nov 24 20:45:13.849879 2025] [proxy_fcgi:error] [pid 16593:tid 16615] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:14.864058 2025] [proxy_fcgi:error] [pid 16593:tid 16606] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:15.311781 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:16.176519 2025] [proxy_fcgi:error] [pid 16593:tid 16601] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:17.073257 2025] [proxy_fcgi:error] [pid 16593:tid 16618] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:18.433168 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:18.926522 2025] [proxy_fcgi:error] [pid 16593:tid 16607] [client 212.30.36.102:42297] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:45:19.875290 2025] [autoindex:error] [pid 16593:tid 16617] [client 212.30.36.102:42297] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 20:45:20.296925 2025] [autoindex:error] [pid 16593:tid 16604] [client 212.30.36.102:42297] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 20:45:20.755674 2025] [autoindex:error] [pid 16593:tid 16597] [client 212.30.36.102:42297] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 20:45:38.472316 2025] [autoindex:error] [pid 16593:tid 16608] [client 212.30.36.102:42297] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 20:46:48.249888 2025] [autoindex:error] [pid 48599:tid 48621] [client 212.30.36.66:25523] AH01276: Cannot serve directory /home/pumpbooking/public_html/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 20:48:32.278893 2025] [autoindex:error] [pid 16516:tid 16527] [client 212.30.36.75:48835] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:58:25.059451 2025] [:error] [pid 16516:tid 16532] [client 40.70.219.96:7163] [client 40.70.219.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSSq0fqZbniwaNwL8Xk5VwAAAQ0"]
[Tue Nov 25 02:58:25.901666 2025] [:error] [pid 48600:tid 48631] [client 40.70.219.96:7104] [client 40.70.219.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSSq0ftOzSUAQvWVjBfLYwAAAcE"]
[Tue Nov 25 02:58:26.930256 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 40.70.219.96:7057] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:27.173010 2025] [proxy_fcgi:error] [pid 16441:tid 16468] [client 40.70.219.96:7057] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:27.457132 2025] [proxy_fcgi:error] [pid 16441:tid 16460] [client 40.70.219.96:7057] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:27.685887 2025] [:error] [pid 16441:tid 16459] [client 40.70.219.96:7057] [client 40.70.219.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSSq04q_bc5MOa9Hfln6-wAAAI8"]
[Tue Nov 25 02:58:29.825474 2025] [proxy_fcgi:error] [pid 16441:tid 16452] [client 40.70.219.96:7047] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:30.043103 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 40.70.219.96:7047] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:30.261497 2025] [proxy_fcgi:error] [pid 16441:tid 16450] [client 40.70.219.96:7047] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:58:30.686085 2025] [:error] [pid 16441:tid 16454] [client 40.70.219.96:7047] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aSSq1oq_bc5MOa9Hfln7AQAAAIo"]
[Tue Nov 25 02:58:31.936853 2025] [:error] [pid 48600:tid 48653] [client 40.70.219.96:7167] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aSSq1_tOzSUAQvWVjBfLZAAAAdc"]
[Tue Nov 25 02:58:34.358640 2025] [:error] [pid 48600:tid 48633] [client 40.70.219.96:7159] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aSSq2vtOzSUAQvWVjBfLZQAAAcM"]
[Tue Nov 25 02:58:36.021086 2025] [:error] [pid 16441:tid 16449] [client 40.70.219.96:7113] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aSSq3Iq_bc5MOa9Hfln7BgAAAIU"]
[Tue Nov 25 02:58:37.506098 2025] [:error] [pid 16593:tid 16613] [client 40.70.219.96:7080] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aSSq3RVGznHBJI2LKpSaIwAAApI"]
[Tue Nov 25 02:58:39.484469 2025] [:error] [pid 49900:tid 49915] [client 40.70.219.96:7165] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aSSq3zCyPLrvg06aormLpQAAAA0"]
[Tue Nov 25 02:58:40.229257 2025] [:error] [pid 16516:tid 16520] [client 40.70.219.96:7148] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aSSq4PqZbniwaNwL8Xk5YAAAAQE"]
[Tue Nov 25 02:58:41.926979 2025] [:error] [pid 16593:tid 16603] [client 40.70.219.96:7056] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aSSq4RVGznHBJI2LKpSaJQAAAog"]
[Tue Nov 25 02:58:42.929302 2025] [:error] [pid 48601:tid 48674] [client 40.70.219.96:7050] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aSSq4oMM4MaVTk74-AYjaQAAAhE"]
[Tue Nov 25 02:58:44.162179 2025] [:error] [pid 49900:tid 49922] [client 40.70.219.96:7045] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aSSq5DCyPLrvg06aormLpgAAABQ"]
[Tue Nov 25 02:58:45.772038 2025] [:error] [pid 16516:tid 16536] [client 40.70.219.96:7138] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aSSq5fqZbniwaNwL8Xk5ZQAAARE"]
[Tue Nov 25 02:58:46.775630 2025] [:error] [pid 16593:tid 16616] [client 40.70.219.96:7139] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aSSq5hVGznHBJI2LKpSaKAAAApU"]
[Tue Nov 25 02:58:47.780209 2025] [:error] [pid 49900:tid 49909] [client 40.70.219.96:7082] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aSSq5zCyPLrvg06aormLqgAAAAc"]
[Tue Nov 25 02:58:48.912093 2025] [:error] [pid 16549:tid 16572] [client 40.70.219.96:7049] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aSSq6KeWW19A99PUw_eUuAAAAVM"]
[Tue Nov 25 02:58:50.585945 2025] [:error] [pid 48600:tid 48643] [client 40.70.219.96:7143] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aSSq6vtOzSUAQvWVjBfLbgAAAc0"]
[Tue Nov 25 02:58:52.819808 2025] [:error] [pid 16593:tid 16610] [client 40.70.219.96:7162] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aSSq7BVGznHBJI2LKpSaKQAAAo8"]
[Tue Nov 25 02:58:54.421333 2025] [:error] [pid 16593:tid 16597] [client 40.70.219.96:7073] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aSSq7hVGznHBJI2LKpSaLAAAAoI"]
[Tue Nov 25 02:58:56.751781 2025] [:error] [pid 48600:tid 48638] [client 40.70.219.96:7133] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aSSq8PtOzSUAQvWVjBfLcAAAAcg"]
[Tue Nov 25 02:59:00.252864 2025] [:error] [pid 16441:tid 16466] [client 40.70.219.96:7135] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aSSq9Iq_bc5MOa9Hfln7FgAAAJY"]
[Tue Nov 25 02:59:02.520533 2025] [:error] [pid 48688:tid 48707] [client 40.70.219.96:7117] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aSSq9hm2q1FkzLam7A0FqAAAAk8"]
[Tue Nov 25 02:59:03.173456 2025] [:error] [pid 48688:tid 48700] [client 40.70.219.96:7128] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aSSq9xm2q1FkzLam7A0FqgAAAkg"]
[Tue Nov 25 02:59:04.156900 2025] [:error] [pid 48600:tid 48641] [client 40.70.219.96:7043] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aSSq-PtOzSUAQvWVjBfLcwAAAcs"]
[Tue Nov 25 02:59:05.213233 2025] [:error] [pid 48599:tid 48622] [client 40.70.219.96:7118] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aSSq-Zzvu6PDJiRKE3KEsgAAAZM"]
[Tue Nov 25 02:59:07.415640 2025] [:error] [pid 48688:tid 48696] [client 40.70.219.96:7164] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aSSq-xm2q1FkzLam7A0FrgAAAkQ"]
[Tue Nov 25 02:59:09.982240 2025] [:error] [pid 9630:tid 9636] [client 40.70.219.96:7130] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aSSq_SrSgUgPGkizt2qEgQAAAEQ"]
[Tue Nov 25 02:59:11.286708 2025] [:error] [pid 16441:tid 16454] [client 40.70.219.96:6986] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aSSq_4q_bc5MOa9Hfln7NwAAAIo"]
[Tue Nov 25 02:59:12.008637 2025] [:error] [pid 48601:tid 48663] [client 40.70.219.96:7068] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aSSrAIMM4MaVTk74-AYjcQAAAgY"]
[Tue Nov 25 02:59:12.629215 2025] [:error] [pid 48599:tid 48618] [client 40.70.219.96:7119] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aSSrAJzvu6PDJiRKE3KEuAAAAY8"]
[Tue Nov 25 02:59:14.145426 2025] [:error] [pid 49900:tid 49911] [client 40.70.219.96:7111] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSSrAjCyPLrvg06aormLtAAAAAk"]
[Tue Nov 25 02:59:14.823399 2025] [:error] [pid 16549:tid 16575] [client 40.70.219.96:7040] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSSrAqeWW19A99PUw_eUzwAAAVY"]
[Tue Nov 25 02:59:15.403700 2025] [:error] [pid 48601:tid 48668] [client 40.70.219.96:7145] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSSrA4MM4MaVTk74-AYjdwAAAgs"]
[Tue Nov 25 02:59:16.486277 2025] [:error] [pid 48599:tid 48623] [client 40.70.219.96:7142] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSSrBJzvu6PDJiRKE3KEvgAAAZQ"]
[Tue Nov 25 02:59:17.944747 2025] [:error] [pid 16516:tid 16530] [client 40.70.219.96:6990] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aSSrBfqZbniwaNwL8Xk5eQAAAQs"]
[Tue Nov 25 02:59:18.914215 2025] [:error] [pid 16516:tid 16539] [client 40.70.219.96:7124] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aSSrBvqZbniwaNwL8Xk5egAAARQ"]
[Tue Nov 25 02:59:20.071383 2025] [:error] [pid 16516:tid 16542] [client 40.70.219.96:7121] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aSSrCPqZbniwaNwL8Xk5fAAAARc"]
[Tue Nov 25 02:59:20.769866 2025] [:error] [pid 16441:tid 16449] [client 40.70.219.96:7157] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aSSrCIq_bc5MOa9Hfln7SwAAAIU"]
[Tue Nov 25 02:59:21.730732 2025] [:error] [pid 48599:tid 48608] [client 40.70.219.96:7075] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aSSrCZzvu6PDJiRKE3KEwQAAAYU"]
[Tue Nov 25 02:59:22.457028 2025] [:error] [pid 16549:tid 16565] [client 40.70.219.96:7019] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aSSrCqeWW19A99PUw_eU1QAAAU0"]
[Tue Nov 25 02:59:23.140820 2025] [:error] [pid 16549:tid 16576] [client 40.70.219.96:7122] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aSSrC6eWW19A99PUw_eU1gAAAVc"]
[Tue Nov 25 02:59:23.951949 2025] [:error] [pid 9630:tid 9641] [client 40.70.219.96:7093] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aSSrCyrSgUgPGkizt2qEjAAAAEk"]
[Tue Nov 25 02:59:24.494980 2025] [:error] [pid 49900:tid 49909] [client 40.70.219.96:7059] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aSSrDDCyPLrvg06aormLuwAAAAc"]
[Tue Nov 25 02:59:25.130436 2025] [:error] [pid 48599:tid 48609] [client 40.70.219.96:7078] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aSSrDZzvu6PDJiRKE3KExQAAAYY"]
[Tue Nov 25 02:59:26.076950 2025] [:error] [pid 16516:tid 16533] [client 40.70.219.96:7149] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aSSrDvqZbniwaNwL8Xk5gAAAAQ4"]
[Tue Nov 25 02:59:27.105565 2025] [:error] [pid 48688:tid 48696] [client 40.70.219.96:7110] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aSSrDxm2q1FkzLam7A0FygAAAkQ"]
[Tue Nov 25 02:59:27.955448 2025] [:error] [pid 9630:tid 9637] [client 40.70.219.96:7141] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aSSrDyrSgUgPGkizt2qEkgAAAEU"]
[Tue Nov 25 02:59:28.833324 2025] [:error] [pid 49900:tid 49910] [client 40.70.219.96:7166] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aSSrEDCyPLrvg06aormLvQAAAAg"]
[Tue Nov 25 02:59:29.767898 2025] [:error] [pid 49900:tid 49921] [client 40.70.219.96:6994] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aSSrETCyPLrvg06aormLvwAAABM"]
[Tue Nov 25 02:59:30.888997 2025] [proxy_fcgi:error] [pid 48600:tid 48649] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:31.122146 2025] [proxy_fcgi:error] [pid 48600:tid 48640] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:31.345367 2025] [proxy_fcgi:error] [pid 48600:tid 48654] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:31.565969 2025] [proxy_fcgi:error] [pid 48600:tid 48647] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:31.798316 2025] [proxy_fcgi:error] [pid 48600:tid 48639] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:32.016426 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:32.235578 2025] [proxy_fcgi:error] [pid 48600:tid 48643] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:32.454874 2025] [proxy_fcgi:error] [pid 48600:tid 48645] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:32.674005 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:33.174758 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 40.70.219.96:7085] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 02:59:33.579454 2025] [:error] [pid 48600:tid 48641] [client 40.70.219.96:7085] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aSSrFftOzSUAQvWVjBfLlQAAAcs"]
[Tue Nov 25 02:59:35.162364 2025] [:error] [pid 16549:tid 16561] [client 40.70.219.96:7048] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aSSrF6eWW19A99PUw_eU4wAAAUk"]
[Tue Nov 25 02:59:36.397996 2025] [:error] [pid 16549:tid 16574] [client 40.70.219.96:7046] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aSSrGKeWW19A99PUw_eU5AAAAVU"]
[Tue Nov 25 02:59:37.360446 2025] [:error] [pid 48600:tid 48637] [client 40.70.219.96:6982] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aSSrGftOzSUAQvWVjBfLlwAAAcc"]
[Tue Nov 25 02:59:39.559545 2025] [:error] [pid 9630:tid 9635] [client 40.70.219.96:7136] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSSrGyrSgUgPGkizt2qEpAAAAEM"]
[Tue Nov 25 02:59:41.426646 2025] [:error] [pid 48600:tid 48633] [client 40.70.219.96:7098] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSSrHftOzSUAQvWVjBfLmAAAAcM"]
[Tue Nov 25 02:59:43.499525 2025] [:error] [pid 49900:tid 49909] [client 40.70.219.96:7127] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSSrHzCyPLrvg06aormLyAAAAAc"]
[Tue Nov 25 02:59:44.899459 2025] [:error] [pid 16549:tid 16568] [client 40.70.219.96:7156] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSSrIKeWW19A99PUw_eU6QAAAVA"]
[Tue Nov 25 02:59:46.051859 2025] [:error] [pid 49900:tid 49913] [client 40.70.219.96:7084] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/css_compare.php"] [unique_id "aSSrIjCyPLrvg06aormLygAAAAs"]
[Tue Nov 25 02:59:47.695072 2025] [:error] [pid 49900:tid 49921] [client 40.70.219.96:7146] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/css_compare.php"] [unique_id "aSSrIzCyPLrvg06aormLzQAAABM"]
[Tue Nov 25 02:59:49.177398 2025] [:error] [pid 16549:tid 16569] [client 40.70.219.96:7062] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/css_compare.php"] [unique_id "aSSrJaeWW19A99PUw_eU7gAAAVE"]
[Tue Nov 25 02:59:50.729381 2025] [:error] [pid 48688:tid 48693] [client 40.70.219.96:7066] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/css_compare.php"] [unique_id "aSSrJhm2q1FkzLam7A0F0gAAAkE"]
[Tue Nov 25 02:59:51.429636 2025] [:error] [pid 48688:tid 48704] [client 40.70.219.96:7066] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aSSrJxm2q1FkzLam7A0F0wAAAkw"]
[Tue Nov 25 02:59:52.412795 2025] [:error] [pid 16593:tid 16617] [client 40.70.219.96:6983] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aSSrKBVGznHBJI2LKpSaVwAAApY"]
[Tue Nov 25 02:59:53.513001 2025] [:error] [pid 48688:tid 48699] [client 40.70.219.96:6934] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aSSrKRm2q1FkzLam7A0F2AAAAkc"]
[Tue Nov 25 02:59:54.868963 2025] [:error] [pid 16549:tid 16573] [client 40.70.219.96:7101] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aSSrKqeWW19A99PUw_eU9AAAAVQ"]
[Tue Nov 25 02:59:56.163505 2025] [:error] [pid 49900:tid 49906] [client 40.70.219.96:7083] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aSSrLDCyPLrvg06aormL4wAAAAQ"]
[Tue Nov 25 02:59:57.426305 2025] [:error] [pid 49900:tid 49922] [client 40.70.219.96:7074] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aSSrLTCyPLrvg06aormL5QAAABQ"]
[Tue Nov 25 02:59:58.234828 2025] [:error] [pid 16549:tid 16566] [client 40.70.219.96:7112] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aSSrLqeWW19A99PUw_eVBgAAAU4"]
[Tue Nov 25 02:59:58.785880 2025] [:error] [pid 9630:tid 9637] [client 40.70.219.96:6985] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aSSrLirSgUgPGkizt2qErAAAAEU"]
[Tue Nov 25 02:59:59.759167 2025] [:error] [pid 48600:tid 48645] [client 40.70.219.96:7054] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duck.php"] [unique_id "aSSrL_tOzSUAQvWVjBfLoQAAAc8"]
[Tue Nov 25 03:00:01.331828 2025] [:error] [pid 16441:tid 16459] [client 40.70.219.96:7147] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duck.php"] [unique_id "aSSrMYq_bc5MOa9Hfln7gAAAAI8"]
[Tue Nov 25 03:00:02.459896 2025] [:error] [pid 48688:tid 48714] [client 40.70.219.96:7125] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duck.php"] [unique_id "aSSrMhm2q1FkzLam7A0F8QAAAlY"]
[Tue Nov 25 03:00:03.079675 2025] [:error] [pid 48600:tid 48631] [client 40.70.219.96:7055] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duck.php"] [unique_id "aSSrM_tOzSUAQvWVjBfLpAAAAcE"]
[Tue Nov 25 03:00:04.024255 2025] [:error] [pid 9630:tid 9644] [client 40.70.219.96:7052] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSSrNCrSgUgPGkizt2qErgAAAEw"]
[Tue Nov 25 03:00:04.827181 2025] [:error] [pid 48600:tid 48635] [client 40.70.219.96:7131] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSSrNPtOzSUAQvWVjBfLqgAAAcU"]
[Tue Nov 25 03:00:06.361031 2025] [:error] [pid 49900:tid 49903] [client 40.70.219.96:7007] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSSrNjCyPLrvg06aormL7AAAAAE"]
[Tue Nov 25 03:00:07.409332 2025] [:error] [pid 16549:tid 16565] [client 40.70.219.96:6988] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSSrN6eWW19A99PUw_eVHQAAAU0"]
[Tue Nov 25 03:00:09.193778 2025] [:error] [pid 48601:tid 48669] [client 40.70.219.96:7004] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aSSrOYMM4MaVTk74-AYjoQAAAgw"]
[Tue Nov 25 03:00:10.462349 2025] [:error] [pid 16516:tid 16524] [client 40.70.219.96:7081] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aSSrOvqZbniwaNwL8Xk5ogAAAQU"]
[Tue Nov 25 03:00:12.289700 2025] [:error] [pid 16441:tid 16449] [client 40.70.219.96:7058] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aSSrPIq_bc5MOa9Hfln7jQAAAIU"]
[Tue Nov 25 03:00:13.571769 2025] [:error] [pid 16516:tid 16542] [client 40.70.219.96:7090] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aSSrPfqZbniwaNwL8Xk5pwAAARc"]
[Tue Nov 25 03:00:14.726676 2025] [:error] [pid 16549:tid 16572] [client 40.70.219.96:7109] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrPqeWW19A99PUw_eVHwAAAVM"]
[Tue Nov 25 03:00:15.900745 2025] [:error] [pid 48601:tid 48663] [client 40.70.219.96:6936] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrP4MM4MaVTk74-AYjpQAAAgY"]
[Tue Nov 25 03:00:17.414898 2025] [:error] [pid 48601:tid 48657] [client 40.70.219.96:7144] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrQYMM4MaVTk74-AYjpwAAAgA"]
[Tue Nov 25 03:00:18.242675 2025] [:error] [pid 49900:tid 49916] [client 40.70.219.96:7069] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrQjCyPLrvg06aormL8QAAAA4"]
[Tue Nov 25 03:00:19.504120 2025] [:error] [pid 49900:tid 49925] [client 40.70.219.96:7012] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aSSrQzCyPLrvg06aormL9AAAABc"]
[Tue Nov 25 03:00:20.780088 2025] [:error] [pid 16516:tid 16526] [client 40.70.219.96:7152] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aSSrRPqZbniwaNwL8Xk5sAAAAQc"]
[Tue Nov 25 03:00:22.508146 2025] [:error] [pid 9630:tid 9650] [client 40.70.219.96:7044] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aSSrRirSgUgPGkizt2qEugAAAFI"]
[Tue Nov 25 03:00:23.099410 2025] [:error] [pid 49900:tid 49926] [client 40.70.219.96:7064] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aSSrRzCyPLrvg06aormL9QAAABg"]
[Tue Nov 25 03:00:23.994991 2025] [:error] [pid 16516:tid 16531] [client 40.70.219.96:7132] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/siteheads.php"] [unique_id "aSSrR_qZbniwaNwL8Xk5sgAAAQw"]
[Tue Nov 25 03:00:25.101258 2025] [:error] [pid 48599:tid 48606] [client 40.70.219.96:7051] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/siteheads.php"] [unique_id "aSSrSZzvu6PDJiRKE3KE8wAAAYM"]
[Tue Nov 25 03:00:26.456179 2025] [:error] [pid 16441:tid 16457] [client 40.70.219.96:7158] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/siteheads.php"] [unique_id "aSSrSoq_bc5MOa9Hfln7mwAAAI0"]
[Tue Nov 25 03:00:28.444355 2025] [:error] [pid 48688:tid 48710] [client 40.70.219.96:7102] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/siteheads.php"] [unique_id "aSSrTBm2q1FkzLam7A0F_QAAAlI"]
[Tue Nov 25 03:00:29.260704 2025] [:error] [pid 49900:tid 49917] [client 40.70.219.96:7137] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aSSrTTCyPLrvg06aormL-wAAAA8"]
[Tue Nov 25 03:00:30.239619 2025] [:error] [pid 48599:tid 48627] [client 40.70.219.96:7105] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aSSrTpzvu6PDJiRKE3KE9gAAAZg"]
[Tue Nov 25 03:00:31.520413 2025] [:error] [pid 49900:tid 49911] [client 40.70.219.96:7160] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aSSrTzCyPLrvg06aormMAAAAAAk"]
[Tue Nov 25 03:00:32.937255 2025] [:error] [pid 48601:tid 48679] [client 40.70.219.96:7001] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aSSrUIMM4MaVTk74-AYjsAAAAhY"]
[Tue Nov 25 03:00:33.978099 2025] [proxy_fcgi:error] [pid 9630:tid 9641] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:34.787564 2025] [proxy_fcgi:error] [pid 9630:tid 9646] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:35.005472 2025] [proxy_fcgi:error] [pid 9630:tid 9648] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:35.780416 2025] [proxy_fcgi:error] [pid 9630:tid 9642] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:36.008497 2025] [proxy_fcgi:error] [pid 9630:tid 9637] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:36.526637 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:37.841168 2025] [proxy_fcgi:error] [pid 9630:tid 9644] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:38.057358 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 40.70.219.96:6932] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:00:38.271175 2025] [:error] [pid 9630:tid 9645] [client 40.70.219.96:6932] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/categories.php"] [unique_id "aSSrVirSgUgPGkizt2qE1QAAAE0"]
[Tue Nov 25 03:00:39.243167 2025] [:error] [pid 16593:tid 16610] [client 40.70.219.96:7027] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/categories.php"] [unique_id "aSSrVxVGznHBJI2LKpSafQAAAo8"]
[Tue Nov 25 03:00:41.504169 2025] [:error] [pid 16516:tid 16538] [client 40.70.219.96:7071] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/categories.php"] [unique_id "aSSrWfqZbniwaNwL8Xk5uwAAARM"]
[Tue Nov 25 03:00:42.644931 2025] [:error] [pid 48601:tid 48676] [client 40.70.219.96:7005] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/categories.php"] [unique_id "aSSrWoMM4MaVTk74-AYjugAAAhM"]
[Tue Nov 25 03:00:44.550236 2025] [:error] [pid 9630:tid 9649] [client 40.70.219.96:6976] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aSSrXCrSgUgPGkizt2qE2AAAAFE"]
[Tue Nov 25 03:00:45.556877 2025] [:error] [pid 48600:tid 48647] [client 40.70.219.96:7115] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aSSrXftOzSUAQvWVjBfL6AAAAdE"]
[Tue Nov 25 03:00:46.758362 2025] [:error] [pid 9630:tid 9642] [client 40.70.219.96:7095] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aSSrXirSgUgPGkizt2qE3QAAAEo"]
[Tue Nov 25 03:00:48.053282 2025] [:error] [pid 16549:tid 16577] [client 40.70.219.96:6930] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aSSrYKeWW19A99PUw_eVJwAAAVg"]
[Tue Nov 25 03:00:49.021000 2025] [:error] [pid 16441:tid 16462] [client 40.70.219.96:7088] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/refund.php"] [unique_id "aSSrYYq_bc5MOa9Hfln7sQAAAJI"]
[Tue Nov 25 03:00:49.831823 2025] [:error] [pid 48688:tid 48692] [client 40.70.219.96:7024] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/refund.php"] [unique_id "aSSrYRm2q1FkzLam7A0GDgAAAkA"]
[Tue Nov 25 03:00:51.130190 2025] [:error] [pid 48688:tid 48707] [client 40.70.219.96:7060] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/refund.php"] [unique_id "aSSrYxm2q1FkzLam7A0GEQAAAk8"]
[Tue Nov 25 03:00:52.293805 2025] [:error] [pid 48599:tid 48608] [client 40.70.219.96:6987] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/refund.php"] [unique_id "aSSrZJzvu6PDJiRKE3KFAgAAAYU"]
[Tue Nov 25 03:00:52.931045 2025] [:error] [pid 16549:tid 16576] [client 40.70.219.96:7077] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aSSrZKeWW19A99PUw_eVMgAAAVc"]
[Tue Nov 25 03:00:54.091113 2025] [:error] [pid 16549:tid 16572] [client 40.70.219.96:6981] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aSSrZqeWW19A99PUw_eVNAAAAVM"]
[Tue Nov 25 03:00:54.944334 2025] [:error] [pid 16441:tid 16449] [client 40.70.219.96:7072] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aSSrZoq_bc5MOa9Hfln7xQAAAIU"]
[Tue Nov 25 03:00:55.694314 2025] [:error] [pid 49900:tid 49916] [client 40.70.219.96:7097] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aSSrZzCyPLrvg06aormMCwAAAA4"]
[Tue Nov 25 03:00:56.532802 2025] [:error] [pid 48601:tid 48660] [client 40.70.219.96:6948] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wishlist.php"] [unique_id "aSSraIMM4MaVTk74-AYj0QAAAgM"]
[Tue Nov 25 03:00:57.167838 2025] [:error] [pid 49900:tid 49919] [client 40.70.219.96:7063] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wishlist.php"] [unique_id "aSSraTCyPLrvg06aormMDAAAABE"]
[Tue Nov 25 03:00:57.890558 2025] [:error] [pid 16593:tid 16609] [client 40.70.219.96:7096] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wishlist.php"] [unique_id "aSSraRVGznHBJI2LKpSaiAAAAo4"]
[Tue Nov 25 03:00:58.865599 2025] [:error] [pid 16549:tid 16558] [client 40.70.219.96:7126] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wishlist.php"] [unique_id "aSSraqeWW19A99PUw_eVOgAAAUY"]
[Tue Nov 25 03:00:59.692128 2025] [:error] [pid 49900:tid 49923] [client 40.70.219.96:7087] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/results.php"] [unique_id "aSSrazCyPLrvg06aormMEAAAABU"]
[Tue Nov 25 03:01:01.025363 2025] [:error] [pid 9630:tid 9635] [client 40.70.219.96:7018] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/results.php"] [unique_id "aSSrbSrSgUgPGkizt2qE9AAAAEM"]
[Tue Nov 25 03:01:01.993491 2025] [:error] [pid 49900:tid 49911] [client 40.70.219.96:7014] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/results.php"] [unique_id "aSSrbTCyPLrvg06aormMGwAAAAk"]
[Tue Nov 25 03:01:05.083995 2025] [:error] [pid 48599:tid 48609] [client 40.70.219.96:6959] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/results.php"] [unique_id "aSSrcZzvu6PDJiRKE3KFBwAAAYY"]
[Tue Nov 25 03:01:06.309394 2025] [:error] [pid 49900:tid 49926] [client 40.70.219.96:6918] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrcjCyPLrvg06aormMJgAAABg"]
[Tue Nov 25 03:01:08.271426 2025] [:error] [pid 49900:tid 49910] [client 40.70.219.96:7079] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrdDCyPLrvg06aormMJwAAAAg"]
[Tue Nov 25 03:01:09.189478 2025] [:error] [pid 16593:tid 16613] [client 40.70.219.96:6977] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrdRVGznHBJI2LKpSamQAAApI"]
[Tue Nov 25 03:01:10.285611 2025] [:error] [pid 16549:tid 16556] [client 40.70.219.96:6916] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aSSrdqeWW19A99PUw_eVUgAAAUQ"]
[Tue Nov 25 03:01:11.671910 2025] [:error] [pid 16549:tid 16554] [client 40.70.219.96:6914] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aSSrd6eWW19A99PUw_eVWwAAAUI"]
[Tue Nov 25 03:01:13.326441 2025] [:error] [pid 49900:tid 49904] [client 40.70.219.96:7013] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aSSreTCyPLrvg06aormMKwAAAAI"]
[Tue Nov 25 03:01:14.327651 2025] [:error] [pid 9630:tid 9643] [client 40.70.219.96:7150] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aSSreirSgUgPGkizt2qFBQAAAEs"]
[Tue Nov 25 03:01:15.252015 2025] [:error] [pid 48599:tid 48616] [client 40.70.219.96:7106] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aSSre5zvu6PDJiRKE3KFDAAAAY0"]
[Tue Nov 25 03:01:16.055493 2025] [:error] [pid 16593:tid 16607] [client 40.70.219.96:7017] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aSSrfBVGznHBJI2LKpSangAAAow"]
[Tue Nov 25 03:01:16.611718 2025] [:error] [pid 16549:tid 16553] [client 40.70.219.96:6956] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aSSrfKeWW19A99PUw_eVdQAAAUE"]
[Tue Nov 25 03:01:17.435614 2025] [:error] [pid 9630:tid 9637] [client 40.70.219.96:7025] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aSSrfSrSgUgPGkizt2qFCAAAAEU"]
[Tue Nov 25 03:01:18.911122 2025] [:error] [pid 48599:tid 48623] [client 40.70.219.96:7103] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aSSrfpzvu6PDJiRKE3KFEAAAAZQ"]
[Tue Nov 25 03:01:19.987898 2025] [:error] [pid 16593:tid 16608] [client 40.70.219.96:6975] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aSSrfxVGznHBJI2LKpSaoQAAAo0"]
[Tue Nov 25 03:01:20.724279 2025] [:error] [pid 9630:tid 9635] [client 40.70.219.96:6996] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aSSrgCrSgUgPGkizt2qFCwAAAEM"]
[Tue Nov 25 03:01:21.399799 2025] [:error] [pid 16549:tid 16562] [client 40.70.219.96:7116] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aSSrgaeWW19A99PUw_eVjwAAAUo"]
[Tue Nov 25 03:01:22.439583 2025] [:error] [pid 48688:tid 48693] [client 40.70.219.96:6978] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aSSrghm2q1FkzLam7A0GLgAAAkE"]
[Tue Nov 25 03:01:23.786193 2025] [:error] [pid 49900:tid 49913] [client 40.70.219.96:6933] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aSSrgzCyPLrvg06aormMMQAAAAs"]
[Tue Nov 25 03:01:25.981619 2025] [:error] [pid 49900:tid 49924] [client 40.70.219.96:7092] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aSSrhTCyPLrvg06aormMNgAAABY"]
[Tue Nov 25 03:01:27.129186 2025] [:error] [pid 48599:tid 48626] [client 40.70.219.96:6999] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aSSrh5zvu6PDJiRKE3KFEwAAAZc"]
[Tue Nov 25 03:01:27.931256 2025] [:error] [pid 16593:tid 16599] [client 40.70.219.96:7151] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aSSrhxVGznHBJI2LKpSaqQAAAoQ"]
[Tue Nov 25 03:01:28.888116 2025] [:error] [pid 9630:tid 9646] [client 40.70.219.96:7020] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aSSriCrSgUgPGkizt2qFEgAAAE4"]
[Tue Nov 25 03:01:30.202645 2025] [:error] [pid 48599:tid 48609] [client 40.70.219.96:7037] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aSSripzvu6PDJiRKE3KFFQAAAYY"]
[Tue Nov 25 03:01:30.846004 2025] [:error] [pid 16516:tid 16530] [client 40.70.219.96:7089] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aSSrivqZbniwaNwL8Xk53AAAAQs"]
[Tue Nov 25 03:01:32.069560 2025] [:error] [pid 48599:tid 48605] [client 40.70.219.96:7008] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aSSrjJzvu6PDJiRKE3KFGgAAAYI"]
[Tue Nov 25 03:01:33.419853 2025] [:error] [pid 48600:tid 48649] [client 40.70.219.96:6995] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aSSrjftOzSUAQvWVjBfL_wAAAdM"]
[Tue Nov 25 03:01:34.431503 2025] [:error] [pid 16441:tid 16450] [client 40.70.219.96:6989] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aSSrjoq_bc5MOa9Hfln72wAAAIY"]
[Tue Nov 25 03:01:35.529774 2025] [:error] [pid 48601:tid 48671] [client 40.70.219.96:7129] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aSSrj4MM4MaVTk74-AYj5wAAAg4"]
[Tue Nov 25 03:01:36.440828 2025] [:error] [pid 9630:tid 9635] [client 40.70.219.96:6931] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aSSrkCrSgUgPGkizt2qFGwAAAEM"]
[Tue Nov 25 03:01:37.048161 2025] [:error] [pid 49900:tid 49906] [client 40.70.219.96:7107] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aSSrkTCyPLrvg06aormMPAAAAAQ"]
[Tue Nov 25 03:01:37.816620 2025] [:error] [pid 48599:tid 48614] [client 40.70.219.96:6991] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aSSrkZzvu6PDJiRKE3KFHwAAAYs"]
[Tue Nov 25 03:01:38.638065 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:38.852749 2025] [proxy_fcgi:error] [pid 48599:tid 48613] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:39.191982 2025] [proxy_fcgi:error] [pid 48599:tid 48606] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:39.433547 2025] [proxy_fcgi:error] [pid 48599:tid 48620] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:39.649344 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:39.978717 2025] [proxy_fcgi:error] [pid 48599:tid 48611] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:40.298343 2025] [proxy_fcgi:error] [pid 48599:tid 48626] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:40.521017 2025] [proxy_fcgi:error] [pid 48599:tid 48621] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:40.842511 2025] [proxy_fcgi:error] [pid 48599:tid 48618] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:41.107270 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:41.350753 2025] [proxy_fcgi:error] [pid 48599:tid 48605] [client 40.70.219.96:7155] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:01:41.562487 2025] [:error] [pid 48599:tid 48622] [client 40.70.219.96:7155] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aSSrlZzvu6PDJiRKE3KFKwAAAZM"]
[Tue Nov 25 03:01:42.359328 2025] [:error] [pid 16516:tid 16531] [client 40.70.219.96:6862] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aSSrlvqZbniwaNwL8Xk54gAAAQw"]
[Tue Nov 25 03:01:42.945276 2025] [:error] [pid 48688:tid 48714] [client 40.70.219.96:6942] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aSSrlhm2q1FkzLam7A0GTQAAAlY"]
[Tue Nov 25 03:01:43.762904 2025] [:error] [pid 49900:tid 49924] [client 40.70.219.96:6853] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aSSrlzCyPLrvg06aormMQAAAABY"]
[Tue Nov 25 03:01:44.393975 2025] [:error] [pid 48688:tid 48692] [client 40.70.219.96:7100] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aSSrmBm2q1FkzLam7A0GUQAAAkA"]
[Tue Nov 25 03:01:45.208304 2025] [:error] [pid 48688:tid 48702] [client 40.70.219.96:7032] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aSSrmRm2q1FkzLam7A0GVgAAAko"]
[Tue Nov 25 03:01:45.976371 2025] [:error] [pid 16441:tid 16444] [client 40.70.219.96:7065] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aSSrmYq_bc5MOa9Hfln75AAAAIA"]
[Tue Nov 25 03:01:46.555727 2025] [:error] [pid 48599:tid 48607] [client 40.70.219.96:6935] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aSSrmpzvu6PDJiRKE3KFLQAAAYQ"]
[Tue Nov 25 03:01:47.214829 2025] [:error] [pid 48599:tid 48612] [client 40.70.219.96:6886] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aSSrm5zvu6PDJiRKE3KFLgAAAYk"]
[Tue Nov 25 03:01:47.812116 2025] [:error] [pid 48599:tid 48616] [client 40.70.219.96:7086] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aSSrm5zvu6PDJiRKE3KFMAAAAY0"]
[Tue Nov 25 03:01:48.933024 2025] [:error] [pid 16516:tid 16530] [client 40.70.219.96:6939] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aSSrnPqZbniwaNwL8Xk56AAAAQs"]
[Tue Nov 25 03:01:49.914908 2025] [:error] [pid 16441:tid 16461] [client 40.70.219.96:7029] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aSSrnYq_bc5MOa9Hfln76gAAAJE"]
[Tue Nov 25 03:01:50.772913 2025] [:error] [pid 49900:tid 49914] [client 40.70.219.96:6921] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aSSrnjCyPLrvg06aormMQgAAAAw"]
[Tue Nov 25 03:01:51.438784 2025] [:error] [pid 48600:tid 48633] [client 40.70.219.96:6921] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aSSrn_tOzSUAQvWVjBfMCgAAAcM"]
[Tue Nov 25 03:01:52.261179 2025] [:error] [pid 16516:tid 16531] [client 40.70.219.96:7070] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aSSroPqZbniwaNwL8Xk58QAAAQw"]
[Tue Nov 25 03:01:52.868925 2025] [:error] [pid 16593:tid 16606] [client 40.70.219.96:6949] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aSSroBVGznHBJI2LKpSauwAAAos"]
[Tue Nov 25 03:01:53.512721 2025] [:error] [pid 48688:tid 48693] [client 40.70.219.96:7140] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aSSroRm2q1FkzLam7A0GYgAAAkE"]
[Tue Nov 25 03:01:55.233355 2025] [:error] [pid 49900:tid 49902] [client 40.70.219.96:7094] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aSSrozCyPLrvg06aormMRwAAAAA"]
[Tue Nov 25 03:01:56.466306 2025] [:error] [pid 9630:tid 9653] [client 40.70.219.96:7021] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aSSrpCrSgUgPGkizt2qFJwAAAFU"]
[Tue Nov 25 03:01:57.497895 2025] [:error] [pid 48601:tid 48678] [client 40.70.219.96:6929] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aSSrpYMM4MaVTk74-AYkBQAAAhU"]
[Tue Nov 25 03:01:58.338962 2025] [:error] [pid 9630:tid 9649] [client 40.70.219.96:7034] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aSSrpirSgUgPGkizt2qFMgAAAFE"]
[Tue Nov 25 03:01:59.219984 2025] [:error] [pid 16441:tid 16467] [client 40.70.219.96:7120] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aSSrp4q_bc5MOa9Hfln78AAAAJc"]
[Tue Nov 25 03:02:00.048370 2025] [:error] [pid 49900:tid 49924] [client 40.70.219.96:6951] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aSSrqDCyPLrvg06aormMUAAAABY"]
[Tue Nov 25 03:02:01.432466 2025] [:error] [pid 48688:tid 48703] [client 40.70.219.96:6993] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aSSrqRm2q1FkzLam7A0GfgAAAks"]
[Tue Nov 25 03:02:02.137210 2025] [:error] [pid 48688:tid 48699] [client 40.70.219.96:6920] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aSSrqhm2q1FkzLam7A0GggAAAkc"]
[Tue Nov 25 03:02:02.694589 2025] [:error] [pid 48688:tid 48710] [client 40.70.219.96:6998] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aSSrqhm2q1FkzLam7A0GhAAAAlI"]
[Tue Nov 25 03:02:04.320705 2025] [:error] [pid 48601:tid 48671] [client 40.70.219.96:7161] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aSSrrIMM4MaVTk74-AYkCQAAAg4"]
[Tue Nov 25 03:02:05.409753 2025] [:error] [pid 16549:tid 16571] [client 40.70.219.96:6923] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aSSrraeWW19A99PUw_eVrAAAAVI"]
[Tue Nov 25 03:02:06.405824 2025] [:error] [pid 48688:tid 48709] [client 40.70.219.96:6984] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aSSrrhm2q1FkzLam7A0GkAAAAlE"]
[Tue Nov 25 03:02:08.137772 2025] [:error] [pid 48599:tid 48616] [client 40.70.219.96:6969] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aSSrsJzvu6PDJiRKE3KFQQAAAY0"]
[Tue Nov 25 03:02:09.043818 2025] [:error] [pid 48599:tid 48603] [client 40.70.219.96:6937] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aSSrsZzvu6PDJiRKE3KFQgAAAYA"]
[Tue Nov 25 03:02:09.781769 2025] [:error] [pid 9630:tid 9634] [client 40.70.219.96:7076] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aSSrsSrSgUgPGkizt2qFPQAAAEI"]
[Tue Nov 25 03:02:10.570386 2025] [:error] [pid 49900:tid 49919] [client 40.70.219.96:7011] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aSSrsjCyPLrvg06aormMZgAAABE"]
[Tue Nov 25 03:02:12.153009 2025] [:error] [pid 48601:tid 48666] [client 40.70.219.96:7061] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aSSrtIMM4MaVTk74-AYkDwAAAgk"]
[Tue Nov 25 03:02:13.280624 2025] [:error] [pid 16516:tid 16529] [client 40.70.219.96:7033] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aSSrtfqZbniwaNwL8Xk5_AAAAQo"]
[Tue Nov 25 03:02:15.528570 2025] [:error] [pid 16441:tid 16447] [client 40.70.219.96:6952] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aSSrt4q_bc5MOa9Hfln7_QAAAIM"]
[Tue Nov 25 03:02:17.053100 2025] [:error] [pid 16549:tid 16569] [client 40.70.219.96:6955] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aSSruaeWW19A99PUw_eVtgAAAVE"]
[Tue Nov 25 03:02:17.978318 2025] [:error] [pid 16593:tid 16619] [client 40.70.219.96:7108] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aSSruRVGznHBJI2LKpSa0AAAApg"]
[Tue Nov 25 03:02:19.246351 2025] [:error] [pid 9630:tid 9653] [client 40.70.219.96:6850] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aSSruyrSgUgPGkizt2qFQgAAAFU"]
[Tue Nov 25 03:02:20.127917 2025] [:error] [pid 48688:tid 48699] [client 40.70.219.96:6973] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aSSrvBm2q1FkzLam7A0GowAAAkc"]
[Tue Nov 25 03:02:21.404431 2025] [:error] [pid 16441:tid 16456] [client 40.70.219.96:6980] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/el.php"] [unique_id "aSSrvYq_bc5MOa9Hfln8CAAAAIw"]
[Tue Nov 25 03:02:23.308599 2025] [:error] [pid 16441:tid 16468] [client 40.70.219.96:7099] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/el.php"] [unique_id "aSSrv4q_bc5MOa9Hfln8DgAAAJg"]
[Tue Nov 25 03:02:24.972837 2025] [:error] [pid 16549:tid 16554] [client 40.70.219.96:6868] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/el.php"] [unique_id "aSSrwKeWW19A99PUw_eVuwAAAUI"]
[Tue Nov 25 03:02:26.180801 2025] [:error] [pid 9630:tid 9634] [client 40.70.219.96:6817] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/el.php"] [unique_id "aSSrwirSgUgPGkizt2qFSgAAAEI"]
[Tue Nov 25 03:02:27.403789 2025] [:error] [pid 16441:tid 16444] [client 40.70.219.96:7134] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aSSrw4q_bc5MOa9Hfln8FgAAAIA"]
[Tue Nov 25 03:02:29.348539 2025] [:error] [pid 16441:tid 16464] [client 40.70.219.96:6915] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aSSrxYq_bc5MOa9Hfln8HAAAAJQ"]
[Tue Nov 25 03:02:31.324068 2025] [:error] [pid 48599:tid 48625] [client 40.70.219.96:7016] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aSSrx5zvu6PDJiRKE3KFSwAAAZY"]
[Tue Nov 25 03:02:32.286957 2025] [:error] [pid 48599:tid 48603] [client 40.70.219.96:7009] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aSSryJzvu6PDJiRKE3KFTQAAAYA"]
[Tue Nov 25 03:02:33.414738 2025] [:error] [pid 48599:tid 48624] [client 40.70.219.96:6925] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aSSryZzvu6PDJiRKE3KFTgAAAZU"]
[Tue Nov 25 03:02:34.615336 2025] [:error] [pid 16441:tid 16455] [client 40.70.219.96:7042] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aSSryoq_bc5MOa9Hfln8IgAAAIs"]
[Tue Nov 25 03:02:35.502399 2025] [:error] [pid 48599:tid 48613] [client 40.70.219.96:6990] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aSSry5zvu6PDJiRKE3KFUAAAAYo"]
[Tue Nov 25 03:02:37.245481 2025] [:error] [pid 9630:tid 9648] [client 40.70.219.96:6848] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aSSrzSrSgUgPGkizt2qFUQAAAFA"]
[Tue Nov 25 03:02:37.970771 2025] [:error] [pid 16593:tid 16603] [client 40.70.219.96:7035] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aSSrzRVGznHBJI2LKpSa2QAAAog"]
[Tue Nov 25 03:02:39.535216 2025] [:error] [pid 48599:tid 48604] [client 40.70.219.96:7039] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aSSrz5zvu6PDJiRKE3KFVgAAAYE"]
[Tue Nov 25 03:02:40.468354 2025] [:error] [pid 48601:tid 48670] [client 40.70.219.96:7153] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aSSr0IMM4MaVTk74-AYkGQAAAg0"]
[Tue Nov 25 03:02:42.436654 2025] [proxy_fcgi:error] [pid 16441:tid 16449] [client 40.70.219.96:6876] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:02:42.649672 2025] [proxy_fcgi:error] [pid 16441:tid 16451] [client 40.70.219.96:6876] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 07:24:17.396787 2025] [:error] [pid 1103:tid 1123] [client 113.141.91.58:42096] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aSTpIY0LETdqOlq63sQkmQAAAU4"]
[Tue Nov 25 09:22:08.084985 2025] [proxy_fcgi:error] [pid 14168:tid 14193] [client 165.85.56.95:10603] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Tue Nov 25 09:22:10.924856 2025] [proxy_fcgi:error] [pid 14168:tid 14177] [client 165.85.56.95:10603] AH01071: Got error 'PHP message: start 1764033730.0488', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:22:10.925451 2025] [proxy_fcgi:error] [pid 14168:tid 14177] [client 165.85.56.95:10603] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764033730.9247-1764033730.0488', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:24:12.090233 2025] [proxy_fcgi:error] [pid 14688:tid 14698] [client 165.85.56.95:41499] AH01071: Got error 'PHP message: start 1764033851.2861', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:24:12.090592 2025] [proxy_fcgi:error] [pid 14688:tid 14698] [client 165.85.56.95:41499] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764033852.0901-1764033851.2861', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:24:40.173181 2025] [proxy_fcgi:error] [pid 1103:tid 1127] [client 165.85.56.95:64295] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:24:41.989395 2025] [proxy_fcgi:error] [pid 1103:tid 1110] [client 165.85.56.95:64295] AH01071: Got error 'PHP message: start 1764033881.3996', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:24:43.115509 2025] [proxy_fcgi:error] [pid 1103:tid 1110] [client 165.85.56.95:64295] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764033883.1151-1764033881.3996', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:26:43.976673 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 165.85.56.95:37866] AH01071: Got error 'PHP message: start 1764034003.4338', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:26:45.038899 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 165.85.56.95:37866] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034005.0383-1764034003.4338', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:26:53.949892 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:54.207338 2025] [proxy_fcgi:error] [pid 14076:tid 14093] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:54.462791 2025] [proxy_fcgi:error] [pid 14076:tid 14089] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:54.716348 2025] [proxy_fcgi:error] [pid 14076:tid 14092] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:54.973763 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:55.228785 2025] [proxy_fcgi:error] [pid 14076:tid 14081] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:55.483654 2025] [proxy_fcgi:error] [pid 14076:tid 14094] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:55.737281 2025] [proxy_fcgi:error] [pid 14076:tid 14086] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:55.994340 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:56.248724 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 13.74.149.244:10900] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:26:56.502293 2025] [:error] [pid 14076:tid 14084] [client 13.74.149.244:10900] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSUF4HsB4Gz6Qw-pvBtEwQAAAAM"]
[Tue Nov 25 09:26:57.002391 2025] [:error] [pid 14688:tid 14700] [client 13.74.149.244:3852] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSUF4W9vYrBoEsiDniwj8wAAAQo"]
[Tue Nov 25 09:26:57.506944 2025] [:error] [pid 14076:tid 14096] [client 13.74.149.244:10711] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSUF4XsB4Gz6Qw-pvBtExQAAAA8"]
[Tue Nov 25 09:26:58.079114 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:10718] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSUF4hG9n7UHEkwDTyihEwAAAFg"]
[Tue Nov 25 09:26:58.722791 2025] [:error] [pid 14168:tid 14182] [client 13.74.149.244:6923] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSUF4vR-ZDU0QEgAIIu2sQAAAMs"]
[Tue Nov 25 09:26:59.432999 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:6936] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSUF4xG9n7UHEkwDTyihHgAAAEk"]
[Tue Nov 25 09:27:00.174963 2025] [:error] [pid 14078:tid 14137] [client 13.74.149.244:3681] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSUF5NVXYbb0ii_rVoKNQQAAAIA"]
[Tue Nov 25 09:27:00.976696 2025] [:error] [pid 14168:tid 14174] [client 13.74.149.244:6919] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSUF5PR-ZDU0QEgAIIu2swAAAMM"]
[Tue Nov 25 09:27:01.768074 2025] [:error] [pid 14078:tid 14155] [client 13.74.149.244:6963] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSUF5dVXYbb0ii_rVoKNRAAAAJI"]
[Tue Nov 25 09:27:02.541499 2025] [:error] [pid 1103:tid 1128] [client 13.74.149.244:3694] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSUF5o0LETdqOlq63sRK7AAAAVM"]
[Tue Nov 25 09:27:03.252720 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:6938] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSUF53sB4Gz6Qw-pvBtE0gAAAAc"]
[Tue Nov 25 09:27:03.951397 2025] [:error] [pid 14168:tid 14172] [client 13.74.149.244:3868] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSUF5_R-ZDU0QEgAIIu2tgAAAME"]
[Tue Nov 25 09:27:04.631488 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:6916] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/011i.php"] [unique_id "aSUF6HsB4Gz6Qw-pvBtE0wAAABg"]
[Tue Nov 25 09:27:05.308205 2025] [:error] [pid 14076:tid 14089] [client 13.74.149.244:3680] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/011i.php"] [unique_id "aSUF6XsB4Gz6Qw-pvBtE1AAAAAg"]
[Tue Nov 25 09:27:05.866453 2025] [:error] [pid 14076:tid 14087] [client 13.74.149.244:3698] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/011i.php"] [unique_id "aSUF6XsB4Gz6Qw-pvBtE1gAAAAY"]
[Tue Nov 25 09:27:06.407194 2025] [:error] [pid 14078:tid 14144] [client 13.74.149.244:3683] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/011i.php"] [unique_id "aSUF6tVXYbb0ii_rVoKNSgAAAIc"]
[Tue Nov 25 09:27:06.943592 2025] [:error] [pid 14168:tid 14185] [client 13.74.149.244:6935] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSUF6vR-ZDU0QEgAIIu2uQAAAM4"]
[Tue Nov 25 09:27:07.445353 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:3702] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSUF63sB4Gz6Qw-pvBtE2QAAABA"]
[Tue Nov 25 09:27:07.950542 2025] [:error] [pid 14076:tid 14094] [client 13.74.149.244:6942] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSUF63sB4Gz6Qw-pvBtE2gAAAA0"]
[Tue Nov 25 09:27:08.452462 2025] [:error] [pid 14078:tid 14160] [client 13.74.149.244:3840] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSUF7NVXYbb0ii_rVoKNTQAAAJc"]
[Tue Nov 25 09:27:08.955496 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:13071] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSUF7BG9n7UHEkwDTyihLAAAAEE"]
[Tue Nov 25 09:27:09.456738 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:1222] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSUF7RG9n7UHEkwDTyihMwAAAEA"]
[Tue Nov 25 09:27:09.961317 2025] [:error] [pid 14078:tid 14140] [client 13.74.149.244:12181] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSUF7dVXYbb0ii_rVoKNUgAAAIM"]
[Tue Nov 25 09:27:10.478217 2025] [:error] [pid 14168:tid 14190] [client 13.74.149.244:13086] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSUF7vR-ZDU0QEgAIIu2vAAAANM"]
[Tue Nov 25 09:27:10.984250 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:13338] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSUF7hG9n7UHEkwDTyihOAAAAEk"]
[Tue Nov 25 09:27:11.485446 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:12169] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSUF7xG9n7UHEkwDTyihOwAAAE8"]
[Tue Nov 25 09:27:11.987910 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:13082] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSUF7xG9n7UHEkwDTyihPAAAAEA"]
[Tue Nov 25 09:27:12.491984 2025] [:error] [pid 1103:tid 1129] [client 13.74.149.244:6108] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSUF8I0LETdqOlq63sRK9gAAAVQ"]
[Tue Nov 25 09:27:12.994430 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:12160] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xc.php"] [unique_id "aSUF8NVXYbb0ii_rVoKNVAAAAIY"]
[Tue Nov 25 09:27:13.504904 2025] [:error] [pid 1103:tid 1123] [client 13.74.149.244:11872] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xc.php"] [unique_id "aSUF8Y0LETdqOlq63sRK-QAAAU4"]
[Tue Nov 25 09:27:14.007447 2025] [:error] [pid 14076:tid 14093] [client 13.74.149.244:13347] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xc.php"] [unique_id "aSUF8nsB4Gz6Qw-pvBtE3gAAAAw"]
[Tue Nov 25 09:27:14.509912 2025] [:error] [pid 14688:tid 14694] [client 13.74.149.244:13079] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xc.php"] [unique_id "aSUF8m9vYrBoEsiDniwkBwAAAQQ"]
[Tue Nov 25 09:27:15.012000 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:11598] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g.php"] [unique_id "aSUF8xG9n7UHEkwDTyihQQAAAFM"]
[Tue Nov 25 09:27:15.514507 2025] [:error] [pid 14077:tid 14120] [client 13.74.149.244:13418] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g.php"] [unique_id "aSUF8xG9n7UHEkwDTyihRAAAAEo"]
[Tue Nov 25 09:27:16.017189 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:3742] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g.php"] [unique_id "aSUF9BG9n7UHEkwDTyihRQAAAEk"]
[Tue Nov 25 09:27:16.519033 2025] [:error] [pid 1103:tid 1109] [client 13.74.149.244:12200] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g.php"] [unique_id "aSUF9I0LETdqOlq63sRK-gAAAUA"]
[Tue Nov 25 09:27:17.020979 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:13024] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nx1.php"] [unique_id "aSUF9XsB4Gz6Qw-pvBtE4gAAAAA"]
[Tue Nov 25 09:27:17.523763 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:10885] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nx1.php"] [unique_id "aSUF9dVXYbb0ii_rVoKNVwAAAIs"]
[Tue Nov 25 09:27:18.025867 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:10910] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nx1.php"] [unique_id "aSUF9hG9n7UHEkwDTyihSQAAAFM"]
[Tue Nov 25 09:27:18.529933 2025] [:error] [pid 14077:tid 14113] [client 13.74.149.244:5595] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nx1.php"] [unique_id "aSUF9hG9n7UHEkwDTyihSwAAAEM"]
[Tue Nov 25 09:27:19.032238 2025] [:error] [pid 14168:tid 14193] [client 13.74.149.244:13088] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ii.php"] [unique_id "aSUF9_R-ZDU0QEgAIIu2yAAAANY"]
[Tue Nov 25 09:27:19.534652 2025] [:error] [pid 14168:tid 14195] [client 13.74.149.244:13327] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ii.php"] [unique_id "aSUF9_R-ZDU0QEgAIIu2ywAAANg"]
[Tue Nov 25 09:27:20.037465 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:5570] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ii.php"] [unique_id "aSUF-BG9n7UHEkwDTyihUQAAAE8"]
[Tue Nov 25 09:27:20.541130 2025] [:error] [pid 14688:tid 14704] [client 13.74.149.244:5602] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ii.php"] [unique_id "aSUF-G9vYrBoEsiDniwkCwAAAQ4"]
[Tue Nov 25 09:27:21.044788 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:10911] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kr.php"] [unique_id "aSUF-dVXYbb0ii_rVoKNcAAAAI8"]
[Tue Nov 25 09:27:21.545463 2025] [:error] [pid 14077:tid 14116] [client 13.74.149.244:10903] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kr.php"] [unique_id "aSUF-RG9n7UHEkwDTyihWAAAAEY"]
[Tue Nov 25 09:27:22.046611 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:5616] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kr.php"] [unique_id "aSUF-tVXYbb0ii_rVoKNcQAAAJE"]
[Tue Nov 25 09:27:22.549008 2025] [:error] [pid 14077:tid 14113] [client 13.74.149.244:3106] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kr.php"] [unique_id "aSUF-hG9n7UHEkwDTyihXQAAAEM"]
[Tue Nov 25 09:27:23.048077 2025] [:error] [pid 14076:tid 14086] [client 13.74.149.244:2835] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/18299.php"] [unique_id "aSUF-3sB4Gz6Qw-pvBtE6QAAAAU"]
[Tue Nov 25 09:27:23.548795 2025] [:error] [pid 1103:tid 1110] [client 13.74.149.244:11459] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/18299.php"] [unique_id "aSUF-40LETdqOlq63sRLAwAAAUE"]
[Tue Nov 25 09:27:24.048565 2025] [:error] [pid 14688:tid 14714] [client 13.74.149.244:5588] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/18299.php"] [unique_id "aSUF_G9vYrBoEsiDniwkEAAAARg"]
[Tue Nov 25 09:27:24.549109 2025] [:error] [pid 1103:tid 1119] [client 13.74.149.244:8831] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/18299.php"] [unique_id "aSUF_I0LETdqOlq63sRLBAAAAUo"]
[Tue Nov 25 09:27:25.049823 2025] [:error] [pid 14077:tid 14131] [client 13.74.149.244:5074] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aSUF_RG9n7UHEkwDTyihYQAAAFU"]
[Tue Nov 25 09:27:25.550658 2025] [:error] [pid 14077:tid 14126] [client 13.74.149.244:2832] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aSUF_RG9n7UHEkwDTyihYgAAAFA"]
[Tue Nov 25 09:27:26.051682 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:2879] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aSUF_tVXYbb0ii_rVoKNdgAAAJQ"]
[Tue Nov 25 09:27:26.552857 2025] [:error] [pid 14168:tid 14178] [client 13.74.149.244:2837] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/3.php"] [unique_id "aSUF_vR-ZDU0QEgAIIu21wAAAMc"]
[Tue Nov 25 09:27:27.054525 2025] [:error] [pid 14688:tid 14697] [client 13.74.149.244:2823] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chati.php"] [unique_id "aSUF_29vYrBoEsiDniwkEwAAAQc"]
[Tue Nov 25 09:27:27.557358 2025] [:error] [pid 14688:tid 14709] [client 13.74.149.244:13391] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chati.php"] [unique_id "aSUF_29vYrBoEsiDniwkFAAAARM"]
[Tue Nov 25 09:27:28.056748 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:5615] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chati.php"] [unique_id "aSUGANVXYbb0ii_rVoKNegAAAJM"]
[Tue Nov 25 09:27:28.558848 2025] [:error] [pid 14078:tid 14144] [client 13.74.149.244:1227] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chati.php"] [unique_id "aSUGANVXYbb0ii_rVoKNewAAAIc"]
[Tue Nov 25 09:27:29.061050 2025] [:error] [pid 14078:tid 14159] [client 13.74.149.244:13423] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content-over.php"] [unique_id "aSUGAdVXYbb0ii_rVoKNfQAAAJY"]
[Tue Nov 25 09:27:29.561872 2025] [:error] [pid 14688:tid 14698] [client 13.74.149.244:13377] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content-over.php"] [unique_id "aSUGAW9vYrBoEsiDniwkIQAAAQg"]
[Tue Nov 25 09:27:30.063344 2025] [:error] [pid 14168:tid 14177] [client 13.74.149.244:13416] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content-over.php"] [unique_id "aSUGAvR-ZDU0QEgAIIu24wAAAMY"]
[Tue Nov 25 09:27:30.566218 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:1226] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/content-over.php"] [unique_id "aSUGAhG9n7UHEkwDTyihcgAAAFg"]
[Tue Nov 25 09:27:31.066748 2025] [:error] [pid 14688:tid 14696] [client 13.74.149.244:1255] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aSUGA29vYrBoEsiDniwkKAAAAQY"]
[Tue Nov 25 09:27:31.568325 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:1252] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aSUGAxG9n7UHEkwDTyihegAAAFI"]
[Tue Nov 25 09:27:32.071005 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:1265] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aSUGBNVXYbb0ii_rVoKNigAAAII"]
[Tue Nov 25 09:27:32.572396 2025] [:error] [pid 14688:tid 14695] [client 13.74.149.244:9650] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aSUGBG9vYrBoEsiDniwkNAAAAQU"]
[Tue Nov 25 09:27:33.072503 2025] [:error] [pid 14168:tid 14190] [client 13.74.149.244:2660] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/naxc.php"] [unique_id "aSUGBfR-ZDU0QEgAIIu27AAAANM"]
[Tue Nov 25 09:27:33.574033 2025] [:error] [pid 14077:tid 14123] [client 13.74.149.244:12258] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/naxc.php"] [unique_id "aSUGBRG9n7UHEkwDTyihmQAAAE0"]
[Tue Nov 25 09:27:34.073330 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:2672] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/naxc.php"] [unique_id "aSUGBhG9n7UHEkwDTyihogAAAEI"]
[Tue Nov 25 09:27:34.572959 2025] [:error] [pid 14168:tid 14194] [client 13.74.149.244:2654] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/naxc.php"] [unique_id "aSUGBvR-ZDU0QEgAIIu28AAAANc"]
[Tue Nov 25 09:27:35.074735 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:11887] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSUGB9VXYbb0ii_rVoKNkQAAAJU"]
[Tue Nov 25 09:27:35.583985 2025] [:error] [pid 14688:tid 14710] [client 13.74.149.244:12249] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSUGB29vYrBoEsiDniwkNgAAARQ"]
[Tue Nov 25 09:27:36.088303 2025] [:error] [pid 14688:tid 14709] [client 13.74.149.244:2664] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSUGCG9vYrBoEsiDniwkNwAAARM"]
[Tue Nov 25 09:27:36.593044 2025] [:error] [pid 14077:tid 14132] [client 13.74.149.244:12259] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSUGCBG9n7UHEkwDTyihvgAAAFY"]
[Tue Nov 25 09:27:37.094916 2025] [:error] [pid 14077:tid 14120] [client 13.74.149.244:1269] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSUGCRG9n7UHEkwDTyihxwAAAEo"]
[Tue Nov 25 09:27:37.597578 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:5461] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSUGCRG9n7UHEkwDTyihyQAAAEE"]
[Tue Nov 25 09:27:38.098776 2025] [:error] [pid 14688:tid 14704] [client 13.74.149.244:12236] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSUGCm9vYrBoEsiDniwkPQAAAQ4"]
[Tue Nov 25 09:27:38.601653 2025] [:error] [pid 14077:tid 14132] [client 13.74.149.244:1760] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSUGChG9n7UHEkwDTyih0AAAAFY"]
[Tue Nov 25 09:27:39.104562 2025] [:error] [pid 14688:tid 14702] [client 13.74.149.244:2644] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSUGC29vYrBoEsiDniwkQAAAAQw"]
[Tue Nov 25 09:27:39.605882 2025] [:error] [pid 14078:tid 14137] [client 13.74.149.244:2634] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSUGC9VXYbb0ii_rVoKNlwAAAIA"]
[Tue Nov 25 09:27:40.107066 2025] [:error] [pid 14168:tid 14195] [client 13.74.149.244:5570] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSUGDPR-ZDU0QEgAIIu29wAAANg"]
[Tue Nov 25 09:27:40.609366 2025] [:error] [pid 14688:tid 14712] [client 13.74.149.244:2680] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSUGDG9vYrBoEsiDniwkQgAAARY"]
[Tue Nov 25 09:27:41.112890 2025] [:error] [pid 14076:tid 14093] [client 13.74.149.244:1234] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSUGDXsB4Gz6Qw-pvBtFIwAAAAw"]
[Tue Nov 25 09:27:41.614780 2025] [:error] [pid 14168:tid 14194] [client 13.74.149.244:2648] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSUGDfR-ZDU0QEgAIIu2-wAAANc"]
[Tue Nov 25 09:27:42.114643 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:2633] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSUGDo0LETdqOlq63sRLSwAAAVI"]
[Tue Nov 25 09:27:42.624144 2025] [:error] [pid 1103:tid 1115] [client 13.74.149.244:2626] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSUGDo0LETdqOlq63sRLTgAAAUY"]
[Tue Nov 25 09:27:43.124419 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:2643] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSUGD3sB4Gz6Qw-pvBtFJgAAAAA"]
[Tue Nov 25 09:27:43.625904 2025] [:error] [pid 1103:tid 1126] [client 13.74.149.244:2624] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSUGD40LETdqOlq63sRLUAAAAVE"]
[Tue Nov 25 09:27:44.125599 2025] [:error] [pid 14688:tid 14694] [client 13.74.149.244:2671] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSUGEG9vYrBoEsiDniwkSgAAAQQ"]
[Tue Nov 25 09:27:44.626591 2025] [:error] [pid 1103:tid 1130] [client 13.74.149.244:11011] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSUGEI0LETdqOlq63sRLUQAAAVU"]
[Tue Nov 25 09:27:45.127962 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:2659] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSUGEdVXYbb0ii_rVoKNnAAAAIs"]
[Tue Nov 25 09:27:45.627805 2025] [:error] [pid 1103:tid 1125] [client 13.74.149.244:6903] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSUGEY0LETdqOlq63sRLVAAAAVA"]
[Tue Nov 25 09:27:46.132408 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:5710] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSUGEtVXYbb0ii_rVoKNnQAAAIg"]
[Tue Nov 25 09:27:46.634438 2025] [:error] [pid 14076:tid 14087] [client 13.74.149.244:12235] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSUGEnsB4Gz6Qw-pvBtFKQAAAAY"]
[Tue Nov 25 09:27:47.135433 2025] [:error] [pid 14078:tid 14149] [client 13.74.149.244:2638] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSUGE9VXYbb0ii_rVoKNoAAAAIw"]
[Tue Nov 25 09:27:47.635774 2025] [:error] [pid 1103:tid 1115] [client 13.74.149.244:12257] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSUGE40LETdqOlq63sRLWQAAAUY"]
[Tue Nov 25 09:27:48.135726 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:15072] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSUGFBG9n7UHEkwDTyih2wAAAFE"]
[Tue Nov 25 09:27:48.636085 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:12225] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSUGFHsB4Gz6Qw-pvBtFKwAAABg"]
[Tue Nov 25 09:27:49.137250 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:2658] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSUGFdVXYbb0ii_rVoKNogAAAI8"]
[Tue Nov 25 09:27:49.641187 2025] [:error] [pid 14076:tid 14096] [client 13.74.149.244:15049] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSUGFXsB4Gz6Qw-pvBtFLAAAAA8"]
[Tue Nov 25 09:27:50.141453 2025] [:error] [pid 1103:tid 1131] [client 13.74.149.244:8271] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSUGFo0LETdqOlq63sRLYgAAAVY"]
[Tue Nov 25 09:27:50.642032 2025] [:error] [pid 14077:tid 14126] [client 13.74.149.244:2666] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSUGFhG9n7UHEkwDTyih3gAAAFA"]
[Tue Nov 25 09:27:51.142735 2025] [:error] [pid 1103:tid 1122] [client 13.74.149.244:12257] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl6.php"] [unique_id "aSUGF40LETdqOlq63sRLZAAAAU0"]
[Tue Nov 25 09:27:51.644679 2025] [:error] [pid 14168:tid 14171] [client 13.74.149.244:5761] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl6.php"] [unique_id "aSUGF_R-ZDU0QEgAIIu2_wAAAMA"]
[Tue Nov 25 09:27:52.146456 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:2674] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl6.php"] [unique_id "aSUGGI0LETdqOlq63sRLZgAAAVI"]
[Tue Nov 25 09:27:52.647144 2025] [:error] [pid 14168:tid 14193] [client 13.74.149.244:12227] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl6.php"] [unique_id "aSUGGPR-ZDU0QEgAIIu3AQAAANY"]
[Tue Nov 25 09:27:53.148327 2025] [:error] [pid 14078:tid 14161] [client 13.74.149.244:10140] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aSUGGdVXYbb0ii_rVoKNpwAAAJg"]
[Tue Nov 25 09:27:53.648783 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:6464] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aSUGGRG9n7UHEkwDTyih-gAAAEg"]
[Tue Nov 25 09:27:54.150703 2025] [:error] [pid 1103:tid 1131] [client 13.74.149.244:2655] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aSUGGo0LETdqOlq63sRLZwAAAVY"]
[Tue Nov 25 09:27:54.653925 2025] [:error] [pid 14168:tid 14190] [client 13.74.149.244:15070] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aSUGGvR-ZDU0QEgAIIu3AwAAANM"]
[Tue Nov 25 09:27:55.155777 2025] [:error] [pid 1103:tid 1130] [client 13.74.149.244:6465] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/zc-706.php"] [unique_id "aSUGG40LETdqOlq63sRLaQAAAVU"]
[Tue Nov 25 09:27:55.658045 2025] [:error] [pid 14076:tid 14090] [client 13.74.149.244:12606] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/zc-706.php"] [unique_id "aSUGG3sB4Gz6Qw-pvBtFLgAAAAk"]
[Tue Nov 25 09:27:56.167581 2025] [proxy_fcgi:error] [pid 14077:tid 14122] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:56.423763 2025] [proxy_fcgi:error] [pid 14077:tid 14129] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:56.679744 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:56.933406 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:57.445044 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:57.699646 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:57.953706 2025] [proxy_fcgi:error] [pid 14077:tid 14128] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:58.208197 2025] [proxy_fcgi:error] [pid 14077:tid 14133] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:58.464977 2025] [proxy_fcgi:error] [pid 14077:tid 14120] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:58.719740 2025] [proxy_fcgi:error] [pid 14077:tid 14134] [client 13.74.149.244:2665] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:27:58.969213 2025] [:error] [pid 14077:tid 14126] [client 13.74.149.244:2665] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSUGHhG9n7UHEkwDTyiiOgAAAFA"]
[Tue Nov 25 09:27:59.981612 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:15095] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSUGHxG9n7UHEkwDTyiiOwAAAEA"]
[Tue Nov 25 09:28:00.482527 2025] [:error] [pid 14688:tid 14691] [client 13.74.149.244:15085] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSUGIG9vYrBoEsiDniwkYwAAAQE"]
[Tue Nov 25 09:28:00.981891 2025] [:error] [pid 14076:tid 14093] [client 13.74.149.244:12261] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSUGIHsB4Gz6Qw-pvBtFLwAAAAw"]
[Tue Nov 25 09:28:01.482943 2025] [:error] [pid 14168:tid 14183] [client 13.74.149.244:15075] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSUGIfR-ZDU0QEgAIIu3BQAAAMw"]
[Tue Nov 25 09:28:01.983409 2025] [:error] [pid 14688:tid 14693] [client 13.74.149.244:12233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSUGIW9vYrBoEsiDniwkZAAAAQM"]
[Tue Nov 25 09:28:02.485588 2025] [:error] [pid 14168:tid 14180] [client 13.74.149.244:12253] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSUGIvR-ZDU0QEgAIIu3BgAAAMk"]
[Tue Nov 25 09:28:02.986494 2025] [:error] [pid 14688:tid 14705] [client 13.74.149.244:15101] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSUGIm9vYrBoEsiDniwkZgAAAQ8"]
[Tue Nov 25 09:28:03.487628 2025] [:error] [pid 14688:tid 14714] [client 13.74.149.244:1220] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSUGI29vYrBoEsiDniwkaQAAARg"]
[Tue Nov 25 09:28:03.989896 2025] [:error] [pid 14168:tid 14172] [client 13.74.149.244:15087] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSUGI_R-ZDU0QEgAIIu3BwAAAME"]
[Tue Nov 25 09:28:04.490837 2025] [:error] [pid 14076:tid 14103] [client 13.74.149.244:2290] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSUGJHsB4Gz6Qw-pvBtFMgAAABY"]
[Tue Nov 25 09:28:04.991638 2025] [:error] [pid 14688:tid 14694] [client 13.74.149.244:12243] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSUGJG9vYrBoEsiDniwkbQAAAQQ"]
[Tue Nov 25 09:28:05.491140 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:11865] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSUGJdVXYbb0ii_rVoKNrwAAAJE"]
[Tue Nov 25 09:28:05.991304 2025] [:error] [pid 14077:tid 14121] [client 13.74.149.244:7213] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSUGJRG9n7UHEkwDTyiiQwAAAEs"]
[Tue Nov 25 09:28:06.492863 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:1244] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSUGJhG9n7UHEkwDTyiiRAAAAEA"]
[Tue Nov 25 09:28:06.994439 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:12230] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSUGJhG9n7UHEkwDTyiiRgAAAFI"]
[Tue Nov 25 09:28:07.495670 2025] [:error] [pid 1103:tid 1115] [client 13.74.149.244:2642] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/4.php"] [unique_id "aSUGJ40LETdqOlq63sRLbwAAAUY"]
[Tue Nov 25 09:28:07.996161 2025] [:error] [pid 14688:tid 14704] [client 13.74.149.244:6472] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/4.php"] [unique_id "aSUGJ29vYrBoEsiDniwkcgAAAQ4"]
[Tue Nov 25 09:28:08.500719 2025] [:error] [pid 14078:tid 14140] [client 13.74.149.244:8376] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/4.php"] [unique_id "aSUGKNVXYbb0ii_rVoKNsgAAAIM"]
[Tue Nov 25 09:28:09.002146 2025] [:error] [pid 14688:tid 14702] [client 13.74.149.244:15068] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/4.php"] [unique_id "aSUGKW9vYrBoEsiDniwkdwAAAQw"]
[Tue Nov 25 09:28:09.504048 2025] [:error] [pid 14688:tid 14698] [client 13.74.149.244:12244] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/X7x.php"] [unique_id "aSUGKW9vYrBoEsiDniwkeQAAAQg"]
[Tue Nov 25 09:28:10.006863 2025] [:error] [pid 14078:tid 14150] [client 13.74.149.244:2670] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/X7x.php"] [unique_id "aSUGKtVXYbb0ii_rVoKNtwAAAI0"]
[Tue Nov 25 09:28:10.509648 2025] [:error] [pid 1103:tid 1125] [client 13.74.149.244:2645] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/X7x.php"] [unique_id "aSUGKo0LETdqOlq63sRLdQAAAVA"]
[Tue Nov 25 09:28:11.016443 2025] [:error] [pid 14078:tid 14153] [client 13.74.149.244:2646] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/X7x.php"] [unique_id "aSUGK9VXYbb0ii_rVoKNuwAAAJA"]
[Tue Nov 25 09:28:11.519102 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:11320] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about.php"] [unique_id "aSUGKxG9n7UHEkwDTyiiSwAAAFE"]
[Tue Nov 25 09:28:12.021195 2025] [:error] [pid 14688:tid 14697] [client 13.74.149.244:14233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about.php"] [unique_id "aSUGLG9vYrBoEsiDniwkegAAAQc"]
[Tue Nov 25 09:28:12.523533 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:13415] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about.php"] [unique_id "aSUGLI0LETdqOlq63sRLeAAAAVI"]
[Tue Nov 25 09:28:13.025215 2025] [:error] [pid 14688:tid 14710] [client 13.74.149.244:1228] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about.php"] [unique_id "aSUGLW9vYrBoEsiDniwkfAAAARQ"]
[Tue Nov 25 09:28:13.526388 2025] [:error] [pid 1103:tid 1128] [client 13.74.149.244:15090] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/r.php"] [unique_id "aSUGLY0LETdqOlq63sRLeQAAAVM"]
[Tue Nov 25 09:28:14.028830 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:15078] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/r.php"] [unique_id "aSUGLhG9n7UHEkwDTyiiUAAAAFI"]
[Tue Nov 25 09:28:14.529803 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:14737] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/r.php"] [unique_id "aSUGLhG9n7UHEkwDTyiiUgAAAEI"]
[Tue Nov 25 09:28:15.030052 2025] [:error] [pid 1103:tid 1110] [client 13.74.149.244:6466] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/r.php"] [unique_id "aSUGL40LETdqOlq63sRLewAAAUE"]
[Tue Nov 25 09:28:15.531217 2025] [:error] [pid 1103:tid 1112] [client 13.74.149.244:2686] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v4.php"] [unique_id "aSUGL40LETdqOlq63sRLfQAAAUM"]
[Tue Nov 25 09:28:16.033266 2025] [:error] [pid 1103:tid 1130] [client 13.74.149.244:6468] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v4.php"] [unique_id "aSUGMI0LETdqOlq63sRLfwAAAVU"]
[Tue Nov 25 09:28:16.533976 2025] [:error] [pid 1103:tid 1119] [client 13.74.149.244:12246] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v4.php"] [unique_id "aSUGMI0LETdqOlq63sRLgAAAAUo"]
[Tue Nov 25 09:28:17.034899 2025] [:error] [pid 1103:tid 1118] [client 13.74.149.244:15043] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v4.php"] [unique_id "aSUGMY0LETdqOlq63sRLgwAAAUk"]
[Tue Nov 25 09:28:17.536104 2025] [:error] [pid 1103:tid 1121] [client 13.74.149.244:15092] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-22.php"] [unique_id "aSUGMY0LETdqOlq63sRLhQAAAUw"]
[Tue Nov 25 09:28:18.037023 2025] [:error] [pid 14076:tid 14102] [client 13.74.149.244:10367] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-22.php"] [unique_id "aSUGMnsB4Gz6Qw-pvBtFNgAAABU"]
[Tue Nov 25 09:28:18.537239 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:12255] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-22.php"] [unique_id "aSUGMnsB4Gz6Qw-pvBtFOAAAABg"]
[Tue Nov 25 09:28:19.037852 2025] [:error] [pid 14077:tid 14130] [client 13.74.149.244:1475] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-22.php"] [unique_id "aSUGMxG9n7UHEkwDTyiiVAAAAFQ"]
[Tue Nov 25 09:28:19.538819 2025] [:error] [pid 14168:tid 14187] [client 13.74.149.244:12232] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aSUGM_R-ZDU0QEgAIIu3DgAAANA"]
[Tue Nov 25 09:28:20.040618 2025] [:error] [pid 14077:tid 14117] [client 13.74.149.244:1535] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aSUGNBG9n7UHEkwDTyiiWAAAAEc"]
[Tue Nov 25 09:28:20.540428 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:12247] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aSUGNPR-ZDU0QEgAIIu3DwAAAMI"]
[Tue Nov 25 09:28:21.041029 2025] [:error] [pid 14688:tid 14705] [client 13.74.149.244:12242] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aSUGNW9vYrBoEsiDniwkgQAAAQ8"]
[Tue Nov 25 09:28:21.541732 2025] [:error] [pid 14076:tid 14096] [client 13.74.149.244:1500] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/system_log.php"] [unique_id "aSUGNXsB4Gz6Qw-pvBtFOQAAAA8"]
[Tue Nov 25 09:28:22.041948 2025] [:error] [pid 14076:tid 14095] [client 13.74.149.244:4146] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/system_log.php"] [unique_id "aSUGNnsB4Gz6Qw-pvBtFOgAAAA4"]
[Tue Nov 25 09:28:22.543826 2025] [:error] [pid 1103:tid 1130] [client 13.74.149.244:10340] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/system_log.php"] [unique_id "aSUGNo0LETdqOlq63sRLigAAAVU"]
[Tue Nov 25 09:28:23.043880 2025] [:error] [pid 14168:tid 14179] [client 13.74.149.244:1476] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/system_log.php"] [unique_id "aSUGN_R-ZDU0QEgAIIu3EQAAAMg"]
[Tue Nov 25 09:28:23.545225 2025] [:error] [pid 14076:tid 14101] [client 13.74.149.244:15092] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aSUGN3sB4Gz6Qw-pvBtFOwAAABQ"]
[Tue Nov 25 09:28:24.048804 2025] [:error] [pid 14688:tid 14714] [client 13.74.149.244:15040] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aSUGOG9vYrBoEsiDniwkhgAAARg"]
[Tue Nov 25 09:28:24.554975 2025] [:error] [pid 14168:tid 14192] [client 13.74.149.244:12264] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aSUGOPR-ZDU0QEgAIIu3FAAAANU"]
[Tue Nov 25 09:28:25.056637 2025] [:error] [pid 14077:tid 14132] [client 13.74.149.244:13163] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aSUGORG9n7UHEkwDTyiiWwAAAFY"]
[Tue Nov 25 09:28:25.557843 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:1494] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/t.php"] [unique_id "aSUGORG9n7UHEkwDTyiiXQAAAE8"]
[Tue Nov 25 09:28:26.059321 2025] [:error] [pid 14076:tid 14083] [client 13.74.149.244:1486] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/t.php"] [unique_id "aSUGOnsB4Gz6Qw-pvBtFPQAAAAI"]
[Tue Nov 25 09:28:26.561106 2025] [:error] [pid 1103:tid 1118] [client 13.74.149.244:1483] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/t.php"] [unique_id "aSUGOo0LETdqOlq63sRLjAAAAUk"]
[Tue Nov 25 09:28:27.062865 2025] [:error] [pid 1103:tid 1131] [client 13.74.149.244:12278] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/t.php"] [unique_id "aSUGO40LETdqOlq63sRLjwAAAVY"]
[Tue Nov 25 09:28:27.568919 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:12268] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ee.php"] [unique_id "aSUGO40LETdqOlq63sRLkAAAAVI"]
[Tue Nov 25 09:28:28.070601 2025] [:error] [pid 14688:tid 14713] [client 13.74.149.244:12273] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ee.php"] [unique_id "aSUGPG9vYrBoEsiDniwkiwAAARc"]
[Tue Nov 25 09:28:28.570618 2025] [:error] [pid 14076:tid 14090] [client 13.74.149.244:12224] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ee.php"] [unique_id "aSUGPHsB4Gz6Qw-pvBtFPgAAAAk"]
[Tue Nov 25 09:28:29.071382 2025] [:error] [pid 14078:tid 14142] [client 13.74.149.244:2637] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ee.php"] [unique_id "aSUGPdVXYbb0ii_rVoKNxAAAAIU"]
[Tue Nov 25 09:28:29.572722 2025] [:error] [pid 14688:tid 14702] [client 13.74.149.244:2673] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSUGPW9vYrBoEsiDniwkjAAAAQw"]
[Tue Nov 25 09:28:30.077201 2025] [:error] [pid 14688:tid 14691] [client 13.74.149.244:12262] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSUGPm9vYrBoEsiDniwkjQAAAQE"]
[Tue Nov 25 09:28:30.578157 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:1259] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSUGPnsB4Gz6Qw-pvBtFRAAAAAc"]
[Tue Nov 25 09:28:31.087217 2025] [:error] [pid 14076:tid 14082] [client 13.74.149.244:10132] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSUGP3sB4Gz6Qw-pvBtFRgAAAAE"]
[Tue Nov 25 09:28:31.588016 2025] [:error] [pid 14168:tid 14189] [client 13.74.149.244:12256] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSUGP_R-ZDU0QEgAIIu3FgAAANI"]
[Tue Nov 25 09:28:32.088442 2025] [:error] [pid 14168:tid 14175] [client 13.74.149.244:6486] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSUGQPR-ZDU0QEgAIIu3FwAAAMQ"]
[Tue Nov 25 09:28:32.589486 2025] [:error] [pid 1103:tid 1125] [client 13.74.149.244:1497] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSUGQI0LETdqOlq63sRLmAAAAVA"]
[Tue Nov 25 09:28:33.090957 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:9982] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSUGQXsB4Gz6Qw-pvBtFSAAAABA"]
[Tue Nov 25 09:28:33.592801 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:4381] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSUGQdVXYbb0ii_rVoKNywAAAJU"]
[Tue Nov 25 09:28:34.097470 2025] [:error] [pid 14078:tid 14140] [client 13.74.149.244:11817] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSUGQtVXYbb0ii_rVoKNzgAAAIM"]
[Tue Nov 25 09:28:34.598310 2025] [:error] [pid 1103:tid 1118] [client 13.74.149.244:9929] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSUGQo0LETdqOlq63sRLmwAAAUk"]
[Tue Nov 25 09:28:35.100028 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:11800] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSUGQxG9n7UHEkwDTyiiYAAAAFg"]
[Tue Nov 25 09:28:35.602296 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:1483] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSUGQxG9n7UHEkwDTyiiYgAAAFE"]
[Tue Nov 25 09:28:36.104623 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:15058] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSUGRNVXYbb0ii_rVoKNzwAAAIg"]
[Tue Nov 25 09:28:36.604371 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:11826] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSUGRNVXYbb0ii_rVoKN0QAAAII"]
[Tue Nov 25 09:28:37.107085 2025] [:error] [pid 14168:tid 14187] [client 13.74.149.244:11839] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSUGRfR-ZDU0QEgAIIu3HAAAANA"]
[Tue Nov 25 09:28:37.607772 2025] [:error] [pid 14076:tid 14104] [client 13.74.149.244:15076] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSUGRXsB4Gz6Qw-pvBtFSwAAABc"]
[Tue Nov 25 09:28:38.108764 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:6485] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSUGRhG9n7UHEkwDTyiiZwAAAEA"]
[Tue Nov 25 09:28:38.609196 2025] [:error] [pid 1103:tid 1129] [client 13.74.149.244:14799] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSUGRo0LETdqOlq63sRLoAAAAVQ"]
[Tue Nov 25 09:28:39.108885 2025] [:error] [pid 14078:tid 14153] [client 13.74.149.244:11823] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSUGR9VXYbb0ii_rVoKN0gAAAJA"]
[Tue Nov 25 09:28:39.607791 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:9933] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSUGR_R-ZDU0QEgAIIu3HQAAAMI"]
[Tue Nov 25 09:28:40.106049 2025] [:error] [pid 14168:tid 14183] [client 13.74.149.244:9964] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSUGSPR-ZDU0QEgAIIu3HwAAAMw"]
[Tue Nov 25 09:28:40.605086 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:11818] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSUGSBG9n7UHEkwDTyiibQAAAEI"]
[Tue Nov 25 09:28:41.106375 2025] [:error] [pid 14688:tid 14704] [client 13.74.149.244:14810] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSUGSW9vYrBoEsiDniwkmwAAAQ4"]
[Tue Nov 25 09:28:41.607647 2025] [:error] [pid 14168:tid 14184] [client 13.74.149.244:9977] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSUGSfR-ZDU0QEgAIIu3IQAAAM0"]
[Tue Nov 25 09:28:42.108584 2025] [:error] [pid 14688:tid 14711] [client 13.74.149.244:9956] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSUGSm9vYrBoEsiDniwknQAAARU"]
[Tue Nov 25 09:28:42.610256 2025] [:error] [pid 14688:tid 14701] [client 13.74.149.244:11813] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSUGSm9vYrBoEsiDniwkoAAAAQs"]
[Tue Nov 25 09:28:43.109749 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:14809] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSUGSxG9n7UHEkwDTyiicAAAAEg"]
[Tue Nov 25 09:28:43.610241 2025] [:error] [pid 14077:tid 14122] [client 13.74.149.244:14844] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/go.php"] [unique_id "aSUGSxG9n7UHEkwDTyiicwAAAEw"]
[Tue Nov 25 09:28:44.109936 2025] [:error] [pid 1103:tid 1126] [client 13.74.149.244:14801] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/go.php"] [unique_id "aSUGTI0LETdqOlq63sRLowAAAVE"]
[Tue Nov 25 09:28:44.609615 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:14815] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/go.php"] [unique_id "aSUGTBG9n7UHEkwDTyiigQAAAEE"]
[Tue Nov 25 09:28:45.111274 2025] [:error] [pid 14168:tid 14195] [client 13.74.149.244:14806] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/go.php"] [unique_id "aSUGTfR-ZDU0QEgAIIu3JwAAANg"]
[Tue Nov 25 09:28:45.612733 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:14808] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aSUGTRG9n7UHEkwDTyiiggAAAEA"]
[Tue Nov 25 09:28:46.113685 2025] [:error] [pid 14077:tid 14116] [client 13.74.149.244:9968] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aSUGThG9n7UHEkwDTyiiigAAAEY"]
[Tue Nov 25 09:28:46.470802 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 165.85.56.95:8021] AH01071: Got error 'PHP message: start 1764034125.9307', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:28:46.613303 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:14843] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aSUGThG9n7UHEkwDTyiijQAAAEA"]
[Tue Nov 25 09:28:47.114756 2025] [:error] [pid 14076:tid 14098] [client 13.74.149.244:3272] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aSUGT3sB4Gz6Qw-pvBtFTQAAABE"]
[Tue Nov 25 09:28:47.413995 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 165.85.56.95:8021] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034127.4134-1764034125.9307', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:28:47.619202 2025] [:error] [pid 14078:tid 14141] [client 13.74.149.244:11782] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aSUGT9VXYbb0ii_rVoKN2AAAAIQ"]
[Tue Nov 25 09:28:48.121475 2025] [:error] [pid 14688:tid 14699] [client 13.74.149.244:9967] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aSUGUG9vYrBoEsiDniwkwAAAAQk"]
[Tue Nov 25 09:28:48.623861 2025] [:error] [pid 14077:tid 14113] [client 13.74.149.244:11827] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aSUGUBG9n7UHEkwDTyiimQAAAEM"]
[Tue Nov 25 09:28:49.124530 2025] [:error] [pid 14078:tid 14146] [client 13.74.149.244:9981] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aSUGUdVXYbb0ii_rVoKN3AAAAIk"]
[Tue Nov 25 09:28:49.624195 2025] [:error] [pid 1103:tid 1131] [client 13.74.149.244:11814] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGUY0LETdqOlq63sRLqQAAAVY"]
[Tue Nov 25 09:28:50.123849 2025] [:error] [pid 14688:tid 14692] [client 13.74.149.244:11830] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGUm9vYrBoEsiDniwkxAAAAQI"]
[Tue Nov 25 09:28:50.624184 2025] [:error] [pid 14688:tid 14701] [client 13.74.149.244:14793] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGUm9vYrBoEsiDniwkxwAAAQs"]
[Tue Nov 25 09:28:51.125243 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:9954] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGU9VXYbb0ii_rVoKN3wAAAJU"]
[Tue Nov 25 09:28:51.626641 2025] [:error] [pid 1103:tid 1128] [client 13.74.149.244:14818] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGU40LETdqOlq63sRLrgAAAVM"]
[Tue Nov 25 09:28:52.126050 2025] [:error] [pid 14076:tid 14094] [client 13.74.149.244:3159] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGVHsB4Gz6Qw-pvBtFWgAAAA0"]
[Tue Nov 25 09:28:52.627719 2025] [:error] [pid 14168:tid 14188] [client 13.74.149.244:9935] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGVPR-ZDU0QEgAIIu3MgAAANE"]
[Tue Nov 25 09:28:53.129075 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:11787] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aSUGVdVXYbb0ii_rVoKN4QAAAJM"]
[Tue Nov 25 09:28:53.631788 2025] [:error] [pid 14078:tid 14159] [client 13.74.149.244:1491] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSUGVdVXYbb0ii_rVoKN4gAAAJY"]
[Tue Nov 25 09:28:54.132178 2025] [:error] [pid 14168:tid 14182] [client 13.74.149.244:11810] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/function.php"] [unique_id "aSUGVvR-ZDU0QEgAIIu3NgAAAMs"]
[Tue Nov 25 09:28:54.632613 2025] [:error] [pid 14076:tid 14100] [client 13.74.149.244:9966] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/function.php"] [unique_id "aSUGVnsB4Gz6Qw-pvBtFXgAAABM"]
[Tue Nov 25 09:28:55.137238 2025] [:error] [pid 14077:tid 14113] [client 13.74.149.244:12282] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/function.php"] [unique_id "aSUGVxG9n7UHEkwDTyiiowAAAEM"]
[Tue Nov 25 09:28:55.642624 2025] [:error] [pid 14077:tid 14133] [client 13.74.149.244:9950] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSUGVxG9n7UHEkwDTyiipQAAAFc"]
[Tue Nov 25 09:28:55.882348 2025] [:error] [pid 14077:tid 14131] [client 43.165.69.68:58876] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSUGVxG9n7UHEkwDTyiipgAAAFU"]
[Tue Nov 25 09:28:56.148495 2025] [:error] [pid 14168:tid 14171] [client 13.74.149.244:10113] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/license.php"] [unique_id "aSUGWPR-ZDU0QEgAIIu3OgAAAMA"]
[Tue Nov 25 09:28:56.649292 2025] [:error] [pid 14688:tid 14704] [client 13.74.149.244:12761] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/license.php"] [unique_id "aSUGWG9vYrBoEsiDniwkygAAAQ4"]
[Tue Nov 25 09:28:57.150622 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:11793] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/license.php"] [unique_id "aSUGWRG9n7UHEkwDTyiiqAAAAFM"]
[Tue Nov 25 09:28:57.652712 2025] [:error] [pid 14077:tid 14120] [client 13.74.149.244:15103] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/radio.php"] [unique_id "aSUGWRG9n7UHEkwDTyiiqQAAAEo"]
[Tue Nov 25 09:28:58.160698 2025] [proxy_fcgi:error] [pid 1103:tid 1111] [client 13.74.149.244:11814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:28:58.416994 2025] [proxy_fcgi:error] [pid 1103:tid 1125] [client 13.74.149.244:11814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:28:58.671938 2025] [proxy_fcgi:error] [pid 1103:tid 1119] [client 13.74.149.244:11814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:28:58.928360 2025] [proxy_fcgi:error] [pid 1103:tid 1110] [client 13.74.149.244:11814] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:28:59.689624 2025] [:error] [pid 1103:tid 1121] [client 13.74.149.244:11814] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSUGW40LETdqOlq63sRLuwAAAUw"]
[Tue Nov 25 09:29:00.454933 2025] [proxy_fcgi:error] [pid 1103:tid 1123] [client 13.74.149.244:11318] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:29:00.712971 2025] [proxy_fcgi:error] [pid 1103:tid 1126] [client 13.74.149.244:11318] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:29:01.225172 2025] [proxy_fcgi:error] [pid 1103:tid 1117] [client 13.74.149.244:11318] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:29:02.680614 2025] [:error] [pid 1103:tid 1114] [client 13.74.149.244:11318] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSUGXo0LETdqOlq63sRLxgAAAUU"]
[Tue Nov 25 09:29:03.182512 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:14805] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/403.php"] [unique_id "aSUGX40LETdqOlq63sRLxwAAAVI"]
[Tue Nov 25 09:29:03.683468 2025] [:error] [pid 1103:tid 1121] [client 13.74.149.244:14829] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/403.php"] [unique_id "aSUGX40LETdqOlq63sRLyAAAAUw"]
[Tue Nov 25 09:29:04.186325 2025] [:error] [pid 14688:tid 14701] [client 13.74.149.244:6476] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/403.php"] [unique_id "aSUGYG9vYrBoEsiDniwkzAAAAQs"]
[Tue Nov 25 09:29:04.686934 2025] [:error] [pid 14168:tid 14178] [client 13.74.149.244:2946] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSUGYPR-ZDU0QEgAIIu3QAAAAMc"]
[Tue Nov 25 09:29:05.188809 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:9291] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSUGYRG9n7UHEkwDTyiitQAAAFg"]
[Tue Nov 25 09:29:05.690771 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:9308] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSUGYdVXYbb0ii_rVoKN7AAAAJM"]
[Tue Nov 25 09:29:06.191152 2025] [:error] [pid 14078:tid 14159] [client 13.74.149.244:6473] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSUGYtVXYbb0ii_rVoKN7QAAAJY"]
[Tue Nov 25 09:29:06.691513 2025] [:error] [pid 1103:tid 1124] [client 13.74.149.244:9338] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSUGYo0LETdqOlq63sRLygAAAU8"]
[Tue Nov 25 09:29:07.191850 2025] [:error] [pid 1103:tid 1115] [client 13.74.149.244:2962] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSUGY40LETdqOlq63sRLywAAAUY"]
[Tue Nov 25 09:29:07.692153 2025] [:error] [pid 14077:tid 14126] [client 13.74.149.244:9333] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSUGYxG9n7UHEkwDTyiiugAAAFA"]
[Tue Nov 25 09:29:08.192648 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:9296] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSUGZBG9n7UHEkwDTyiiuwAAAFE"]
[Tue Nov 25 09:29:08.691964 2025] [:error] [pid 14077:tid 14133] [client 13.74.149.244:3004] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSUGZBG9n7UHEkwDTyiivQAAAFc"]
[Tue Nov 25 09:29:09.192317 2025] [:error] [pid 14168:tid 14185] [client 13.74.149.244:2394] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSUGZfR-ZDU0QEgAIIu3RAAAAM4"]
[Tue Nov 25 09:29:09.698101 2025] [:error] [pid 14168:tid 14187] [client 13.74.149.244:2967] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSUGZfR-ZDU0QEgAIIu3RQAAANA"]
[Tue Nov 25 09:29:10.199440 2025] [:error] [pid 14688:tid 14698] [client 13.74.149.244:9342] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSUGZm9vYrBoEsiDniwk0AAAAQg"]
[Tue Nov 25 09:29:10.702668 2025] [:error] [pid 14078:tid 14142] [client 13.74.149.244:10312] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about/function.php"] [unique_id "aSUGZtVXYbb0ii_rVoKN8gAAAIU"]
[Tue Nov 25 09:29:11.204953 2025] [:error] [pid 14078:tid 14153] [client 13.74.149.244:3002] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about/function.php"] [unique_id "aSUGZ9VXYbb0ii_rVoKN9AAAAJA"]
[Tue Nov 25 09:29:11.704720 2025] [:error] [pid 14688:tid 14702] [client 13.74.149.244:2984] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about/function.php"] [unique_id "aSUGZ29vYrBoEsiDniwk0wAAAQw"]
[Tue Nov 25 09:29:12.206337 2025] [:error] [pid 1103:tid 1133] [client 13.74.149.244:2971] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/about/function.php"] [unique_id "aSUGaI0LETdqOlq63sRLzQAAAVg"]
[Tue Nov 25 09:29:12.707127 2025] [:error] [pid 14168:tid 14183] [client 13.74.149.244:2957] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/simple.php"] [unique_id "aSUGaPR-ZDU0QEgAIIu3RgAAAMw"]
[Tue Nov 25 09:29:13.208811 2025] [:error] [pid 14168:tid 14186] [client 13.74.149.244:2956] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/simple.php"] [unique_id "aSUGafR-ZDU0QEgAIIu3SAAAAM8"]
[Tue Nov 25 09:29:13.715331 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:10251] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/simple.php"] [unique_id "aSUGaXsB4Gz6Qw-pvBtFZQAAAAA"]
[Tue Nov 25 09:29:14.216926 2025] [:error] [pid 14688:tid 14699] [client 13.74.149.244:2406] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/simple.php"] [unique_id "aSUGam9vYrBoEsiDniwk1gAAAQk"]
[Tue Nov 25 09:29:14.718223 2025] [:error] [pid 1103:tid 1125] [client 13.74.149.244:10250] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/goat1.php"] [unique_id "aSUGao0LETdqOlq63sRL0AAAAVA"]
[Tue Nov 25 09:29:15.220195 2025] [:error] [pid 14077:tid 14130] [client 13.74.149.244:2991] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/goat1.php"] [unique_id "aSUGaxG9n7UHEkwDTyiixgAAAFQ"]
[Tue Nov 25 09:29:15.722052 2025] [:error] [pid 14076:tid 14101] [client 13.74.149.244:10272] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/goat1.php"] [unique_id "aSUGa3sB4Gz6Qw-pvBtFaAAAABQ"]
[Tue Nov 25 09:29:16.221605 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:10289] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/goat1.php"] [unique_id "aSUGbNVXYbb0ii_rVoKN-AAAAIg"]
[Tue Nov 25 09:29:16.722625 2025] [:error] [pid 1103:tid 1110] [client 13.74.149.244:10284] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSUGbI0LETdqOlq63sRL0wAAAUE"]
[Tue Nov 25 09:29:17.222627 2025] [:error] [pid 14078:tid 14142] [client 13.74.149.244:2988] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSUGbdVXYbb0ii_rVoKN-wAAAIU"]
[Tue Nov 25 09:29:17.723611 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:10273] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSUGbY0LETdqOlq63sRL1wAAAVI"]
[Tue Nov 25 09:29:18.259070 2025] [:error] [pid 1103:tid 1115] [client 13.74.149.244:10255] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aSUGbo0LETdqOlq63sRL2AAAAUY"]
[Tue Nov 25 09:29:18.763287 2025] [:error] [pid 1103:tid 1116] [client 13.74.149.244:6545] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSUGbo0LETdqOlq63sRL2gAAAUc"]
[Tue Nov 25 09:29:19.268322 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:10240] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSUGbxG9n7UHEkwDTyiiyAAAAEg"]
[Tue Nov 25 09:29:19.768768 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:9281] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSUGbxG9n7UHEkwDTyiiygAAAFM"]
[Tue Nov 25 09:29:20.269649 2025] [:error] [pid 14688:tid 14709] [client 13.74.149.244:10279] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aSUGcG9vYrBoEsiDniwk3QAAARM"]
[Tue Nov 25 09:29:20.770029 2025] [:error] [pid 1103:tid 1120] [client 13.74.149.244:11544] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yanz.php"] [unique_id "aSUGcI0LETdqOlq63sRL3QAAAUs"]
[Tue Nov 25 09:29:21.270537 2025] [:error] [pid 14078:tid 14137] [client 13.74.149.244:2966] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yanz.php"] [unique_id "aSUGcdVXYbb0ii_rVoKN_gAAAIA"]
[Tue Nov 25 09:29:21.772626 2025] [:error] [pid 1103:tid 1114] [client 13.74.149.244:1843] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yanz.php"] [unique_id "aSUGcY0LETdqOlq63sRL3gAAAUU"]
[Tue Nov 25 09:29:22.274069 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:6489] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yanz.php"] [unique_id "aSUGctVXYbb0ii_rVoKOAgAAAJM"]
[Tue Nov 25 09:29:22.774634 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:2999] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aSUGco0LETdqOlq63sRL4QAAAVI"]
[Tue Nov 25 09:29:23.278777 2025] [:error] [pid 14168:tid 14172] [client 13.74.149.244:2944] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aSUGc_R-ZDU0QEgAIIu3TAAAAME"]
[Tue Nov 25 09:29:23.785294 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:10254] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aSUGcxG9n7UHEkwDTyii0AAAAEk"]
[Tue Nov 25 09:29:24.285292 2025] [:error] [pid 14168:tid 14178] [client 13.74.149.244:1808] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aSUGdPR-ZDU0QEgAIIu3TQAAAMc"]
[Tue Nov 25 09:29:24.785614 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:10276] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSUGdNVXYbb0ii_rVoKOBQAAAIg"]
[Tue Nov 25 09:29:25.290249 2025] [:error] [pid 14078:tid 14150] [client 13.74.149.244:1850] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSUGddVXYbb0ii_rVoKOCAAAAI0"]
[Tue Nov 25 09:29:25.790732 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:2389] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSUGdRG9n7UHEkwDTyii0gAAAFE"]
[Tue Nov 25 09:29:26.291773 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:2973] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSUGdtVXYbb0ii_rVoKOCQAAAJQ"]
[Tue Nov 25 09:29:26.798393 2025] [:error] [pid 14688:tid 14697] [client 13.74.149.244:10245] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSUGdm9vYrBoEsiDniwk4gAAAQc"]
[Tue Nov 25 09:29:27.300070 2025] [:error] [pid 14076:tid 14099] [client 13.74.149.244:1815] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSUGd3sB4Gz6Qw-pvBtFcAAAABI"]
[Tue Nov 25 09:29:27.814890 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:6494] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSUGd3sB4Gz6Qw-pvBtFcgAAAAc"]
[Tue Nov 25 09:29:28.315561 2025] [:error] [pid 14688:tid 14690] [client 13.74.149.244:6469] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSUGeG9vYrBoEsiDniwk5QAAAQA"]
[Tue Nov 25 09:29:28.815755 2025] [:error] [pid 14076:tid 14092] [client 13.74.149.244:6496] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSUGeHsB4Gz6Qw-pvBtFdQAAAAs"]
[Tue Nov 25 09:29:29.316864 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:6482] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSUGeRG9n7UHEkwDTyii1wAAAFI"]
[Tue Nov 25 09:29:29.816748 2025] [:error] [pid 14688:tid 14704] [client 13.74.149.244:1822] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSUGeW9vYrBoEsiDniwk7AAAAQ4"]
[Tue Nov 25 09:29:30.317196 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:10248] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSUGehG9n7UHEkwDTyii2gAAAFg"]
[Tue Nov 25 09:29:30.819581 2025] [:error] [pid 1103:tid 1110] [client 13.74.149.244:6467] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSUGeo0LETdqOlq63sRL6wAAAUE"]
[Tue Nov 25 09:29:31.326179 2025] [:error] [pid 14076:tid 14086] [client 13.74.149.244:1837] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSUGe3sB4Gz6Qw-pvBtFeAAAAAU"]
[Tue Nov 25 09:29:31.828230 2025] [:error] [pid 14688:tid 14696] [client 13.74.149.244:8232] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aSUGe29vYrBoEsiDniwk8QAAAQY"]
[Tue Nov 25 09:29:32.330203 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:8251] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSUGfBG9n7UHEkwDTyii3AAAAEk"]
[Tue Nov 25 09:29:32.829949 2025] [:error] [pid 14688:tid 14690] [client 13.74.149.244:1795] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSUGfG9vYrBoEsiDniwk9AAAAQA"]
[Tue Nov 25 09:29:33.332219 2025] [:error] [pid 14168:tid 14194] [client 13.74.149.244:1798] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSUGffR-ZDU0QEgAIIu3UgAAANc"]
[Tue Nov 25 09:29:33.837076 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:1824] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSUGfXsB4Gz6Qw-pvBtFewAAABg"]
[Tue Nov 25 09:29:34.338410 2025] [:error] [pid 1103:tid 1116] [client 13.74.149.244:8216] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSUGfo0LETdqOlq63sRL7gAAAUc"]
[Tue Nov 25 09:29:34.840645 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:10264] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSUGfhG9n7UHEkwDTyii3wAAAE8"]
[Tue Nov 25 09:29:35.347139 2025] [:error] [pid 14168:tid 14172] [client 13.74.149.244:8228] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSUGf_R-ZDU0QEgAIIu3WwAAAME"]
[Tue Nov 25 09:29:35.857968 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:8219] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSUGfxG9n7UHEkwDTyii6wAAAFg"]
[Tue Nov 25 09:29:36.358423 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:2560] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSUGgBG9n7UHEkwDTyii7AAAAEI"]
[Tue Nov 25 09:29:36.858905 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:5813] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSUGgBG9n7UHEkwDTyii7gAAAEk"]
[Tue Nov 25 09:29:37.362512 2025] [:error] [pid 14078:tid 14159] [client 13.74.149.244:8238] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSUGgdVXYbb0ii_rVoKOKgAAAJY"]
[Tue Nov 25 09:29:37.862289 2025] [:error] [pid 1103:tid 1117] [client 13.74.149.244:10128] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSUGgY0LETdqOlq63sRL_wAAAUg"]
[Tue Nov 25 09:29:38.362755 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:8218] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file.php"] [unique_id "aSUGgnsB4Gz6Qw-pvBtFigAAABA"]
[Tue Nov 25 09:29:38.863702 2025] [:error] [pid 14077:tid 14117] [client 13.74.149.244:1802] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file.php"] [unique_id "aSUGghG9n7UHEkwDTyii9AAAAEc"]
[Tue Nov 25 09:29:39.365072 2025] [:error] [pid 14077:tid 14121] [client 13.74.149.244:8235] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file.php"] [unique_id "aSUGgxG9n7UHEkwDTyii9gAAAEs"]
[Tue Nov 25 09:29:39.874103 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:1846] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file.php"] [unique_id "aSUGg9VXYbb0ii_rVoKOKwAAAII"]
[Tue Nov 25 09:29:40.377740 2025] [:error] [pid 14688:tid 14707] [client 13.74.149.244:6478] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/as.php"] [unique_id "aSUGhG9vYrBoEsiDniwlAQAAARE"]
[Tue Nov 25 09:29:40.877959 2025] [:error] [pid 14168:tid 14190] [client 13.74.149.244:6484] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/as.php"] [unique_id "aSUGhPR-ZDU0QEgAIIu3YwAAANM"]
[Tue Nov 25 09:29:41.378874 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:9268] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/as.php"] [unique_id "aSUGhdVXYbb0ii_rVoKOLAAAAI4"]
[Tue Nov 25 09:29:41.879006 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:10295] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/as.php"] [unique_id "aSUGhdVXYbb0ii_rVoKOLgAAAIY"]
[Tue Nov 25 09:29:42.385647 2025] [:error] [pid 14688:tid 14700] [client 13.74.149.244:8197] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSUGhm9vYrBoEsiDniwlAgAAAQo"]
[Tue Nov 25 09:29:42.885258 2025] [:error] [pid 14688:tid 14693] [client 13.74.149.244:6607] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSUGhm9vYrBoEsiDniwlAwAAAQM"]
[Tue Nov 25 09:29:43.386730 2025] [:error] [pid 14688:tid 14697] [client 13.74.149.244:6615] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSUGh29vYrBoEsiDniwlBAAAAQc"]
[Tue Nov 25 09:29:43.888408 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:8212] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSUGh9VXYbb0ii_rVoKOMQAAAJM"]
[Tue Nov 25 09:29:44.388821 2025] [:error] [pid 14168:tid 14183] [client 13.74.149.244:8233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSUGiPR-ZDU0QEgAIIu3ZgAAAMw"]
[Tue Nov 25 09:29:44.893380 2025] [:error] [pid 14078:tid 14144] [client 13.74.149.244:6623] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSUGiNVXYbb0ii_rVoKOMgAAAIc"]
[Tue Nov 25 09:29:45.394188 2025] [:error] [pid 14168:tid 14188] [client 13.74.149.244:8210] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSUGifR-ZDU0QEgAIIu3ZwAAANE"]
[Tue Nov 25 09:29:45.894579 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:10276] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSUGidVXYbb0ii_rVoKOMwAAAJU"]
[Tue Nov 25 09:29:46.395189 2025] [:error] [pid 14076:tid 14102] [client 13.74.149.244:8198] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSUGinsB4Gz6Qw-pvBtFjQAAABU"]
[Tue Nov 25 09:29:46.895457 2025] [:error] [pid 14076:tid 14092] [client 13.74.149.244:8224] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSUGinsB4Gz6Qw-pvBtFkQAAAAs"]
[Tue Nov 25 09:29:47.395626 2025] [:error] [pid 14076:tid 14089] [client 13.74.149.244:6606] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSUGi3sB4Gz6Qw-pvBtFkwAAAAg"]
[Tue Nov 25 09:29:47.896036 2025] [:error] [pid 14076:tid 14104] [client 13.74.149.244:6622] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSUGi3sB4Gz6Qw-pvBtFlAAAABc"]
[Tue Nov 25 09:29:48.397872 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:6626] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aSUGjHsB4Gz6Qw-pvBtFlgAAABA"]
[Tue Nov 25 09:29:48.899240 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:13945] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aSUGjNVXYbb0ii_rVoKOOAAAAIs"]
[Tue Nov 25 09:29:49.399939 2025] [:error] [pid 14076:tid 14100] [client 13.74.149.244:6499] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aSUGjXsB4Gz6Qw-pvBtFmAAAABM"]
[Tue Nov 25 09:29:49.901219 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:13916] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aSUGjXsB4Gz6Qw-pvBtFmQAAABg"]
[Tue Nov 25 09:29:50.403165 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:12638] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSUGjhG9n7UHEkwDTyii-wAAAE8"]
[Tue Nov 25 09:29:50.905878 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:13936] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSUGjtVXYbb0ii_rVoKOOgAAAJQ"]
[Tue Nov 25 09:29:51.408830 2025] [:error] [pid 14076:tid 14090] [client 13.74.149.244:13925] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSUGj3sB4Gz6Qw-pvBtFmwAAAAk"]
[Tue Nov 25 09:29:51.909953 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:12639] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSUGjxG9n7UHEkwDTyii_wAAAEg"]
[Tue Nov 25 09:29:52.414695 2025] [:error] [pid 14168:tid 14190] [client 13.74.149.244:13920] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSUGkPR-ZDU0QEgAIIu3bgAAANM"]
[Tue Nov 25 09:29:52.915656 2025] [:error] [pid 14078:tid 14161] [client 13.74.149.244:13904] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSUGkNVXYbb0ii_rVoKOPgAAAJg"]
[Tue Nov 25 09:29:53.416031 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:13890] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSUGkdVXYbb0ii_rVoKOPwAAAJE"]
[Tue Nov 25 09:29:53.918607 2025] [:error] [pid 14688:tid 14712] [client 13.74.149.244:13899] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSUGkW9vYrBoEsiDniwlEwAAARY"]
[Tue Nov 25 09:29:54.419730 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:6620] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/fucku.php"] [unique_id "aSUGktVXYbb0ii_rVoKOQQAAAI8"]
[Tue Nov 25 09:29:54.920062 2025] [:error] [pid 1103:tid 1127] [client 13.74.149.244:13910] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/fucku.php"] [unique_id "aSUGko0LETdqOlq63sRMBgAAAVI"]
[Tue Nov 25 09:29:55.421502 2025] [:error] [pid 1103:tid 1113] [client 13.74.149.244:6505] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/fucku.php"] [unique_id "aSUGk40LETdqOlq63sRMCgAAAUQ"]
[Tue Nov 25 09:29:55.921953 2025] [:error] [pid 14168:tid 14176] [client 13.74.149.244:13905] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index/fucku.php"] [unique_id "aSUGk_R-ZDU0QEgAIIu3egAAAMU"]
[Tue Nov 25 09:29:56.423871 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:13889] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/upload/wp-info.php"] [unique_id "aSUGlBG9n7UHEkwDTyijCQAAAE8"]
[Tue Nov 25 09:29:56.926081 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:12622] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/upload/wp-info.php"] [unique_id "aSUGlHsB4Gz6Qw-pvBtFoQAAABA"]
[Tue Nov 25 09:29:57.426189 2025] [:error] [pid 14076:tid 14082] [client 13.74.149.244:6482] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/upload/wp-info.php"] [unique_id "aSUGlXsB4Gz6Qw-pvBtFowAAAAE"]
[Tue Nov 25 09:29:57.930838 2025] [:error] [pid 14688:tid 14702] [client 13.74.149.244:13901] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/upload/wp-info.php"] [unique_id "aSUGlW9vYrBoEsiDniwlMAAAAQw"]
[Tue Nov 25 09:29:58.432024 2025] [:error] [pid 14077:tid 14124] [client 13.74.149.244:6648] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/post.php"] [unique_id "aSUGlhG9n7UHEkwDTyijEQAAAE4"]
[Tue Nov 25 09:29:58.934270 2025] [:error] [pid 1103:tid 1124] [client 13.74.149.244:12621] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/post.php"] [unique_id "aSUGlo0LETdqOlq63sRMIQAAAU8"]
[Tue Nov 25 09:29:59.436167 2025] [:error] [pid 1103:tid 1111] [client 13.74.149.244:13915] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/post.php"] [unique_id "aSUGl40LETdqOlq63sRMIgAAAUI"]
[Tue Nov 25 09:29:59.937782 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:11321] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/post.php"] [unique_id "aSUGl9VXYbb0ii_rVoKOQwAAAIs"]
[Tue Nov 25 09:30:00.439448 2025] [:error] [pid 14078:tid 14160] [client 13.74.149.244:6510] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSUGmNVXYbb0ii_rVoKORAAAAJc"]
[Tue Nov 25 09:30:00.940682 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:6506] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSUGmHsB4Gz6Qw-pvBtFrwAAAAc"]
[Tue Nov 25 09:30:01.453761 2025] [proxy_fcgi:error] [pid 14168:tid 14175] [client 13.74.149.244:13939] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 09:30:48.585618 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 165.85.56.95:38412] AH01071: Got error 'PHP message: start 1764034247.9452', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:30:49.762888 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 165.85.56.95:38412] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034249.7624-1764034247.9452', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:32:50.792511 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 165.85.56.95:6418] AH01071: Got error 'PHP message: start 1764034370.2319', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:32:52.026283 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 165.85.56.95:6418] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034372.0258-1764034370.2319', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:34:53.024740 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 165.85.56.95:6326] AH01071: Got error 'PHP message: start 1764034492.5077', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:34:54.090695 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 165.85.56.95:6326] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034494.0893-1764034492.5077', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:36:55.330114 2025] [proxy_fcgi:error] [pid 14076:tid 14085] [client 165.85.56.95:63615] AH01071: Got error 'PHP message: start 1764034614.6468', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:36:56.403829 2025] [proxy_fcgi:error] [pid 14076:tid 14085] [client 165.85.56.95:63615] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034616.4033-1764034614.6468', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:38:57.442110 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:3714] AH01071: Got error 'PHP message: start 1764034736.8718', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:38:58.578254 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:3714] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034738.5777-1764034736.8718', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:40:59.661604 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 165.85.56.95:13260] AH01071: Got error 'PHP message: start 1764034859.0242', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:41:00.643381 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 165.85.56.95:13260] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034860.643-1764034859.0242', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:43:01.792203 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 165.85.56.95:51243] AH01071: Got error 'PHP message: start 1764034981.1199', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:43:02.855026 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 165.85.56.95:51243] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764034982.8545-1764034981.1199', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:45:03.917926 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 165.85.56.95:42653] AH01071: Got error 'PHP message: start 1764035103.3072', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:45:04.900009 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 165.85.56.95:42653] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035104.8994-1764035103.3072', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:47:06.175087 2025] [proxy_fcgi:error] [pid 14078:tid 14139] [client 165.85.56.95:14462] AH01071: Got error 'PHP message: start 1764035225.5697', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:47:07.310246 2025] [proxy_fcgi:error] [pid 14078:tid 14139] [client 165.85.56.95:14462] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035227.3092-1764035225.5697', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:49:08.391040 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 165.85.56.95:7780] AH01071: Got error 'PHP message: start 1764035347.825', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:49:09.407614 2025] [proxy_fcgi:error] [pid 14168:tid 14183] [client 165.85.56.95:7780] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035349.4071-1764035347.825', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:49:36.352088 2025] [proxy_fcgi:error] [pid 14077:tid 14134] [client 165.85.56.95:57307] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:49:38.017334 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:57307] AH01071: Got error 'PHP message: start 1764035377.1951', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:49:38.017861 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:57307] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035378.0171-1764035377.1951', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:50:21.889972 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 165.85.56.95:5029] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:50:23.085771 2025] [proxy_fcgi:error] [pid 14077:tid 14133] [client 165.85.56.95:5029] AH01071: Got error 'PHP message: start 1764035422.6795PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035423.0852-1764035422.6795', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 09:52:23.898441 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 165.85.56.95:25547] AH01071: Got error 'PHP message: start 1764035543.375PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035543.8978-1764035543.375', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 09:54:24.822260 2025] [proxy_fcgi:error] [pid 14076:tid 14105] [client 165.85.56.95:37085] AH01071: Got error 'PHP message: start 1764035664.3775PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764035664.8216-1764035664.3775', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:12:16.918505 2025] [proxy_fcgi:error] [pid 14688:tid 14691] [client 165.85.56.95:10908] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Tue Nov 25 11:12:19.340395 2025] [proxy_fcgi:error] [pid 14688:tid 14713] [client 165.85.56.95:10908] AH01071: Got error 'PHP message: start 1764040338.5716', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:12:19.340846 2025] [proxy_fcgi:error] [pid 14688:tid 14713] [client 165.85.56.95:10908] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764040339.3402-1764040338.5716', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:12:26.864101 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 165.85.56.95:32525] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:12:27.819792 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:32525] AH01071: Got error 'PHP message: start 1764040347.5381', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:12:28.678801 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:32525] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764040348.6776-1764040347.5381', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:18:39.680435 2025] [proxy_fcgi:error] [pid 28740:tid 28812] [client 165.85.56.95:36421] AH01071: Got error 'PHP message: PHP Warning:  mysqli_connect(): (HY000/2002): No such file or directory in /home/pumpbooking/public_html/includes/sqlstore.php on line 17PHP message: PHP Notice:  Trying to get property 'connect_errno' of non-object in /home/pumpbooking/public_html/includes/sqlstore.php on line 23', referer: https://pumpbooking.com/client-bookings.php?clientID=570&daysBack=30
[Tue Nov 25 11:25:23.456870 2025] [proxy_fcgi:error] [pid 14688:tid 14708] [client 165.85.56.95:15992] AH01071: Got error 'PHP message: start 1764041123.1053PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041123.4562-1764041123.1053', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:25:31.765868 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 165.85.56.95:13327] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:25:33.422075 2025] [proxy_fcgi:error] [pid 14078:tid 14151] [client 165.85.56.95:13327] AH01071: Got error 'PHP message: start 1764041132.6881', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:25:33.597708 2025] [proxy_fcgi:error] [pid 14078:tid 14151] [client 165.85.56.95:13327] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041133.5972-1764041132.6881', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 11:27:34.706600 2025] [proxy_fcgi:error] [pid 14076:tid 14104] [client 165.85.56.95:61937] AH01071: Got error 'PHP message: start 1764041253.8745', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:27:34.991121 2025] [proxy_fcgi:error] [pid 14076:tid 14104] [client 165.85.56.95:61937] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041254.9907-1764041253.8745', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:29:36.171525 2025] [proxy_fcgi:error] [pid 14168:tid 14172] [client 165.85.56.95:13687] AH01071: Got error 'PHP message: start 1764041375.451', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:29:36.481999 2025] [proxy_fcgi:error] [pid 14168:tid 14172] [client 165.85.56.95:13687] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041376.4815-1764041375.451', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:31:37.966336 2025] [proxy_fcgi:error] [pid 28836:tid 28958] [client 165.85.56.95:16309] AH01071: Got error 'PHP message: start 1764041497.3221', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:31:38.141452 2025] [proxy_fcgi:error] [pid 28836:tid 28958] [client 165.85.56.95:16309] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041498.1411-1764041497.3221', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:33:39.686969 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 165.85.56.95:13294] AH01071: Got error 'PHP message: start 1764041619.0253', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:33:39.927751 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 165.85.56.95:13294] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041619.9274-1764041619.0253', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:35:41.132987 2025] [proxy_fcgi:error] [pid 28740:tid 28804] [client 165.85.56.95:32521] AH01071: Got error 'PHP message: start 1764041740.3887', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:35:41.404956 2025] [proxy_fcgi:error] [pid 28740:tid 28804] [client 165.85.56.95:32521] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041741.4046-1764041740.3887', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:37:42.505172 2025] [proxy_fcgi:error] [pid 14076:tid 14092] [client 165.85.56.95:43071] AH01071: Got error 'PHP message: start 1764041861.877', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:37:42.683298 2025] [proxy_fcgi:error] [pid 14076:tid 14092] [client 165.85.56.95:43071] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041862.6829-1764041861.877', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:39:44.758038 2025] [proxy_fcgi:error] [pid 14076:tid 14082] [client 165.85.56.95:50488] AH01071: Got error 'PHP message: start 1764041983.1602', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:39:44.943830 2025] [proxy_fcgi:error] [pid 14076:tid 14082] [client 165.85.56.95:50488] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764041984.9434-1764041983.1602', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:41:46.617754 2025] [proxy_fcgi:error] [pid 14077:tid 14110] [client 165.85.56.95:9978] AH01071: Got error 'PHP message: start 1764042105.8495', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:41:46.881181 2025] [proxy_fcgi:error] [pid 14077:tid 14110] [client 165.85.56.95:9978] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042106.8803-1764042105.8495', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:41:50.705632 2025] [:error] [pid 28836:tid 28964] [client 45.130.203.180:60935] [client 45.130.203.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "aSUlfpwNRsoxcLQGkTdHfAAAAsk"]
[Tue Nov 25 11:43:48.391037 2025] [proxy_fcgi:error] [pid 28739:tid 28781] [client 165.85.56.95:14650] AH01071: Got error 'PHP message: start 1764042227.7689', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:43:48.565590 2025] [proxy_fcgi:error] [pid 28739:tid 28781] [client 165.85.56.95:14650] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042228.5651-1764042227.7689', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:45:50.260021 2025] [proxy_fcgi:error] [pid 14076:tid 14104] [client 165.85.56.95:3263] AH01071: Got error 'PHP message: start 1764042349.4256', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:45:50.532938 2025] [proxy_fcgi:error] [pid 14076:tid 14104] [client 165.85.56.95:3263] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042350.5324-1764042349.4256', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:47:52.087623 2025] [proxy_fcgi:error] [pid 28842:tid 28995] [client 165.85.56.95:34311] AH01071: Got error 'PHP message: start 1764042471.4107', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:47:52.257545 2025] [proxy_fcgi:error] [pid 28842:tid 28995] [client 165.85.56.95:34311] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042472.2567-1764042471.4107', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:49:53.810221 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 165.85.56.95:6225] AH01071: Got error 'PHP message: start 1764042593.1551', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:49:53.974132 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 165.85.56.95:6225] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042593.9738-1764042593.1551', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:51:55.047293 2025] [proxy_fcgi:error] [pid 14688:tid 14692] [client 165.85.56.95:45983] AH01071: Got error 'PHP message: start 1764042714.4622', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:51:55.214192 2025] [proxy_fcgi:error] [pid 14688:tid 14692] [client 165.85.56.95:45983] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042715.2138-1764042714.4622', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:53:56.706324 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.95:29415] AH01071: Got error 'PHP message: start 1764042836.1577', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:53:56.855311 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.95:29415] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042836.8548-1764042836.1577', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:55:57.883239 2025] [proxy_fcgi:error] [pid 14076:tid 14094] [client 165.85.56.95:9629] AH01071: Got error 'PHP message: start 1764042957.3261', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:55:58.043687 2025] [proxy_fcgi:error] [pid 14076:tid 14094] [client 165.85.56.95:9629] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764042958.0432-1764042957.3261', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:57:59.213747 2025] [proxy_fcgi:error] [pid 14078:tid 14148] [client 165.85.56.95:45337] AH01071: Got error 'PHP message: start 1764043078.5462', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 11:57:59.491664 2025] [proxy_fcgi:error] [pid 14078:tid 14148] [client 165.85.56.95:45337] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043079.4913-1764043078.5462', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:00:01.056192 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 165.85.56.95:35383] AH01071: Got error 'PHP message: start 1764043200.3258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:00:01.322758 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 165.85.56.95:35383] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043201.3222-1764043200.3258', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:02:03.517758 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 165.85.56.95:29984] AH01071: Got error 'PHP message: start 1764043322.1624', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:02:03.777931 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 165.85.56.95:29984] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043323.7775-1764043322.1624', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:04:04.899898 2025] [proxy_fcgi:error] [pid 28836:tid 29006] [client 165.85.56.95:52576] AH01071: Got error 'PHP message: start 1764043444.2236', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:04:05.174836 2025] [proxy_fcgi:error] [pid 28836:tid 29006] [client 165.85.56.95:52576] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043445.1745-1764043444.2236', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:06:06.669653 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 165.85.56.95:42905] AH01071: Got error 'PHP message: start 1764043565.957', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:06:06.909712 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 165.85.56.95:42905] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043566.9092-1764043565.957', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:08:08.062907 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 165.85.56.95:39708] AH01071: Got error 'PHP message: start 1764043687.3876', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:08:08.313427 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 165.85.56.95:39708] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043688.3128-1764043687.3876', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:10:09.388368 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 165.85.56.95:58860] AH01071: Got error 'PHP message: start 1764043808.7899', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:10:09.570769 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 165.85.56.95:58860] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043809.5704-1764043808.7899', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:12:10.768788 2025] [proxy_fcgi:error] [pid 14077:tid 14134] [client 165.85.56.95:23614] AH01071: Got error 'PHP message: start 1764043930.0022', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:12:11.058477 2025] [proxy_fcgi:error] [pid 14077:tid 14134] [client 165.85.56.95:23614] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764043931.0581-1764043930.0022', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:14:12.204633 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 165.85.56.95:44003] AH01071: Got error 'PHP message: start 1764044051.5034', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:14:12.395903 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 165.85.56.95:44003] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764044052.3953-1764044051.5034', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:16:13.498541 2025] [proxy_fcgi:error] [pid 14688:tid 14705] [client 165.85.56.95:39249] AH01071: Got error 'PHP message: start 1764044172.8705', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:16:13.671028 2025] [proxy_fcgi:error] [pid 14688:tid 14705] [client 165.85.56.95:39249] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764044173.6706-1764044172.8705', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:18:14.914141 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 165.85.56.95:12317] AH01071: Got error 'PHP message: start 1764044294.135', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:18:15.197478 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 165.85.56.95:12317] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764044295.197-1764044294.135', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:20:16.657976 2025] [proxy_fcgi:error] [pid 28836:tid 29010] [client 165.85.56.95:14556] AH01071: Got error 'PHP message: start 1764044415.9917', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:20:16.897381 2025] [proxy_fcgi:error] [pid 28836:tid 29010] [client 165.85.56.95:14556] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764044416.8968-1764044415.9917', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:22:18.202792 2025] [proxy_fcgi:error] [pid 28609:tid 28634] [client 165.85.56.95:38267] AH01071: Got error 'PHP message: start 1764044537.4641', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:22:18.479279 2025] [proxy_fcgi:error] [pid 28609:tid 28634] [client 165.85.56.95:38267] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764044538.4787-1764044537.4641', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:24:19.530683 2025] [proxy_fcgi:error] [pid 28836:tid 28965] [client 165.85.56.95:37692] AH01071: Got error 'PHP message: start 1764044658.9103', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 12:24:19.726891 2025] [proxy_fcgi:error] [pid 28836:tid 28965] [client 165.85.56.95:37692] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764044659.7265-1764044658.9103', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:11:56.473983 2025] [proxy_fcgi:error] [pid 14168:tid 14191] [client 165.85.56.95:57447] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Tue Nov 25 13:11:57.303041 2025] [proxy_fcgi:error] [pid 28842:tid 29025] [client 165.85.56.95:31196] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Tue Nov 25 13:12:00.579765 2025] [proxy_fcgi:error] [pid 28842:tid 29002] [client 165.85.56.95:31196] AH01071: Got error 'PHP message: start 1764047519.603', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 13:12:00.580175 2025] [proxy_fcgi:error] [pid 28842:tid 29002] [client 165.85.56.95:31196] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764047520.5792-1764047519.603', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 13:12:34.115639 2025] [proxy_fcgi:error] [pid 28739:tid 28771] [client 165.85.56.95:23215] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 13:12:35.297765 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 165.85.56.95:23215] AH01071: Got error 'PHP message: start 1764047555.0037', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 13:12:35.298369 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 165.85.56.95:23215] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764047555.2975-1764047555.0037', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 13:14:36.233966 2025] [proxy_fcgi:error] [pid 14078:tid 14151] [client 165.85.56.95:19142] AH01071: Got error 'PHP message: start 1764047675.5429', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:14:36.234474 2025] [proxy_fcgi:error] [pid 14078:tid 14151] [client 165.85.56.95:19142] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764047676.2337-1764047675.5429', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:16:37.293095 2025] [proxy_fcgi:error] [pid 28609:tid 28627] [client 165.85.56.95:63498] AH01071: Got error 'PHP message: start 1764047796.6763', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:16:37.293697 2025] [proxy_fcgi:error] [pid 28609:tid 28627] [client 165.85.56.95:63498] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764047797.2927-1764047796.6763', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:18:38.108007 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 165.85.56.95:54336] AH01071: Got error 'PHP message: start 1764047917.6111', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:18:38.108670 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 165.85.56.95:54336] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764047918.1078-1764047917.6111', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:20:38.948013 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 165.85.56.95:52808] AH01071: Got error 'PHP message: start 1764048038.4', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:20:38.948616 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 165.85.56.95:52808] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048038.9478-1764048038.4', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:22:39.898359 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 165.85.56.95:38113] AH01071: Got error 'PHP message: start 1764048159.2551', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:22:39.898885 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 165.85.56.95:38113] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048159.898-1764048159.2551', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:24:40.860525 2025] [proxy_fcgi:error] [pid 28836:tid 28968] [client 165.85.56.95:26285] AH01071: Got error 'PHP message: start 1764048280.1778', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:24:40.861113 2025] [proxy_fcgi:error] [pid 28836:tid 28968] [client 165.85.56.95:26285] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048280.8602-1764048280.1778', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:26:41.909652 2025] [proxy_fcgi:error] [pid 28836:tid 28964] [client 165.85.56.95:53381] AH01071: Got error 'PHP message: start 1764048401.1487', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:26:41.910138 2025] [proxy_fcgi:error] [pid 28836:tid 28964] [client 165.85.56.95:53381] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048401.909-1764048401.1487', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:28:42.903055 2025] [proxy_fcgi:error] [pid 14078:tid 14153] [client 165.85.56.95:38936] AH01071: Got error 'PHP message: start 1764048522.2482', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:28:42.903710 2025] [proxy_fcgi:error] [pid 14078:tid 14153] [client 165.85.56.95:38936] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048522.9027-1764048522.2482', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:30:44.826985 2025] [proxy_fcgi:error] [pid 14078:tid 14155] [client 165.85.56.95:33217] AH01071: Got error 'PHP message: start 1764048644.2609', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:30:44.827415 2025] [proxy_fcgi:error] [pid 14078:tid 14155] [client 165.85.56.95:33217] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048644.8267-1764048644.2609', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:32:46.042222 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 165.85.56.95:63672] AH01071: Got error 'PHP message: start 1764048765.3848', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:32:46.042609 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 165.85.56.95:63672] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048766.0419-1764048765.3848', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:34:47.248359 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 165.85.56.95:20036] AH01071: Got error 'PHP message: start 1764048886.6294', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:34:47.248969 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 165.85.56.95:20036] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764048887.2481-1764048886.6294', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:36:48.481574 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 165.85.56.95:29950] AH01071: Got error 'PHP message: start 1764049007.814', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:36:48.482141 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 165.85.56.95:29950] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049008.4811-1764049007.814', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:38:49.677569 2025] [proxy_fcgi:error] [pid 28836:tid 28966] [client 165.85.56.95:5234] AH01071: Got error 'PHP message: start 1764049129.0578', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:38:49.678058 2025] [proxy_fcgi:error] [pid 28836:tid 28966] [client 165.85.56.95:5234] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049129.6773-1764049129.0578', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:40:50.788232 2025] [proxy_fcgi:error] [pid 14168:tid 14179] [client 165.85.56.95:44182] AH01071: Got error 'PHP message: start 1764049250.2405', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:40:50.788908 2025] [proxy_fcgi:error] [pid 14168:tid 14179] [client 165.85.56.95:44182] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049250.788-1764049250.2405', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:41:06.845842 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 165.85.56.95:21863] AH01071: Got error 'PHP message: start 1764049266.1727', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:41:07.017213 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 165.85.56.95:21863] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049267.0168-1764049266.1727', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:42:03.938957 2025] [:error] [pid 14168:tid 14173] [client 49.205.37.84:49106] [client 49.205.37.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.37.84, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSVBq_R-ZDU0QEgAIIsQFQAAAMI"]
[Tue Nov 25 13:42:03.951038 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 49.205.37.84:49106] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 13:42:51.958115 2025] [proxy_fcgi:error] [pid 28836:tid 28986] [client 165.85.56.95:26575] AH01071: Got error 'PHP message: start 1764049371.38', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:42:51.958749 2025] [proxy_fcgi:error] [pid 28836:tid 28986] [client 165.85.56.95:26575] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049371.9577-1764049371.38', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:44:02.223599 2025] [:error] [pid 28609:tid 28636] [client 182.40.104.255:40204] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSVCIiGGdT-nZJVs3x10pgAAAZI"]
[Tue Nov 25 13:44:53.142168 2025] [proxy_fcgi:error] [pid 28836:tid 28967] [client 165.85.56.95:24191] AH01071: Got error 'PHP message: start 1764049492.6076', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:44:53.142689 2025] [proxy_fcgi:error] [pid 28836:tid 28967] [client 165.85.56.95:24191] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049493.142-1764049492.6076', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:46:54.299851 2025] [proxy_fcgi:error] [pid 28740:tid 28809] [client 165.85.56.95:29727] AH01071: Got error 'PHP message: start 1764049613.71', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:46:54.300467 2025] [proxy_fcgi:error] [pid 28740:tid 28809] [client 165.85.56.95:29727] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049614.299-1764049613.71', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:48:56.174156 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 165.85.56.95:14482] AH01071: Got error 'PHP message: start 1764049735.5909', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:48:56.174638 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 165.85.56.95:14482] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049736.1739-1764049735.5909', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:50:59.089623 2025] [proxy_fcgi:error] [pid 14076:tid 14105] [client 165.85.56.95:42841] AH01071: Got error 'PHP message: start 1764049858.4861', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:50:59.090222 2025] [proxy_fcgi:error] [pid 14076:tid 14105] [client 165.85.56.95:42841] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049859.0891-1764049858.4861', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:53:01.520972 2025] [proxy_fcgi:error] [pid 28740:tid 28791] [client 165.85.56.95:44126] AH01071: Got error 'PHP message: start 1764049980.9169', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:53:01.521509 2025] [proxy_fcgi:error] [pid 28740:tid 28791] [client 165.85.56.95:44126] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764049981.5208-1764049980.9169', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:55:02.653336 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 165.85.56.95:6060] AH01071: Got error 'PHP message: start 1764050102.0005', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:55:02.653829 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 165.85.56.95:6060] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050102.6531-1764050102.0005', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:57:03.647154 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 165.85.56.95:61487] AH01071: Got error 'PHP message: start 1764050223.1311', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:57:03.647765 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 165.85.56.95:61487] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050223.6469-1764050223.1311', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:59:04.703999 2025] [proxy_fcgi:error] [pid 28842:tid 29001] [client 165.85.56.95:31816] AH01071: Got error 'PHP message: start 1764050344.1971', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 13:59:04.704609 2025] [proxy_fcgi:error] [pid 28842:tid 29001] [client 165.85.56.95:31816] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050344.7038-1764050344.1971', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:01:07.277095 2025] [proxy_fcgi:error] [pid 28842:tid 29022] [client 165.85.56.95:44489] AH01071: Got error 'PHP message: start 1764050466.7739', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:01:07.277518 2025] [proxy_fcgi:error] [pid 28842:tid 29022] [client 165.85.56.95:44489] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050467.2768-1764050466.7739', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:02:53.957915 2025] [proxy_fcgi:error] [pid 28739:tid 28762] [client 165.85.56.95:38425] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:02:55.058642 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 165.85.56.95:18991] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:02:56.339517 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 165.85.56.95:18991] AH01071: Got error 'PHP message: start 1764050575.6569', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:02:56.340090 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 165.85.56.95:18991] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050576.3391-1764050575.6569', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:18.232276 2025] [proxy_fcgi:error] [pid 28836:tid 29007] [client 165.85.56.95:54936] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:18.932904 2025] [proxy_fcgi:error] [pid 28740:tid 28814] [client 165.85.56.95:41228] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:19.967287 2025] [proxy_fcgi:error] [pid 28740:tid 28797] [client 165.85.56.95:41228] AH01071: Got error 'PHP message: start 1764050599.5835', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:19.967738 2025] [proxy_fcgi:error] [pid 28740:tid 28797] [client 165.85.56.95:41228] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050599.967-1764050599.5835', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:35.328350 2025] [proxy_fcgi:error] [pid 14168:tid 14193] [client 165.85.56.95:51995] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:35.911287 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 165.85.56.95:51995] AH01071: Got error 'PHP message: start 1764050615.7466PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050615.9109-1764050615.7466', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:58.723647 2025] [proxy_fcgi:error] [pid 14688:tid 14705] [client 165.85.56.95:40762] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:59.446623 2025] [proxy_fcgi:error] [pid 14688:tid 14702] [client 165.85.56.95:40762] AH01071: Got error 'PHP message: start 1764050639.1025', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:03:59.447126 2025] [proxy_fcgi:error] [pid 14688:tid 14702] [client 165.85.56.95:40762] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050639.4462-1764050639.1025', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:22.865835 2025] [proxy_fcgi:error] [pid 28842:tid 29020] [client 165.85.56.95:62902] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:24.789120 2025] [proxy_fcgi:error] [pid 28842:tid 28998] [client 165.85.56.95:62902] AH01071: Got error 'PHP message: start 1764050723.8897', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:24.789461 2025] [proxy_fcgi:error] [pid 28842:tid 28998] [client 165.85.56.95:62902] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050724.789-1764050723.8897', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:25.528706 2025] [proxy_fcgi:error] [pid 28740:tid 28800] [client 165.85.56.95:65241] AH01071: Got error 'PHP message: start 1764050724.833', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:25.529077 2025] [proxy_fcgi:error] [pid 28740:tid 28800] [client 165.85.56.95:65241] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050725.5285-1764050724.833', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:32.342314 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 165.85.56.95:45408] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:33.597438 2025] [proxy_fcgi:error] [pid 14077:tid 14131] [client 165.85.56.95:45408] AH01071: Got error 'PHP message: start 1764050733.2769', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:05:33.597881 2025] [proxy_fcgi:error] [pid 14077:tid 14131] [client 165.85.56.95:45408] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050733.5972-1764050733.2769', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:15.669877 2025] [proxy_fcgi:error] [pid 14077:tid 14116] [client 165.85.56.95:33568] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:18.360380 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 165.85.56.95:60927] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:19.448810 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 165.85.56.95:60927] AH01071: Got error 'PHP message: start 1764050778.8123', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:19.449261 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 165.85.56.95:60927] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050779.4484-1764050778.8123', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:22.844621 2025] [proxy_fcgi:error] [pid 28739:tid 28779] [client 165.85.56.95:3482] AH01071: Got error 'PHP message: start 1764050782.0384', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:06:23.106937 2025] [proxy_fcgi:error] [pid 28739:tid 28779] [client 165.85.56.95:3482] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050783.1058-1764050782.0384', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:06:49.386859 2025] [proxy_fcgi:error] [pid 14688:tid 14713] [client 165.85.56.95:13144] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:52.571612 2025] [proxy_fcgi:error] [pid 14688:tid 14697] [client 165.85.56.95:13144] AH01071: Got error 'PHP message: start 1764050810.6814', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:06:52.572032 2025] [proxy_fcgi:error] [pid 14688:tid 14697] [client 165.85.56.95:13144] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050812.5714-1764050810.6814', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:07:56.001116 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 165.85.56.95:56269] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:07:57.133608 2025] [proxy_fcgi:error] [pid 28609:tid 28636] [client 165.85.56.95:56269] AH01071: Got error 'PHP message: start 1764050876.5397', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:07:57.134330 2025] [proxy_fcgi:error] [pid 28609:tid 28636] [client 165.85.56.95:56269] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050877.1333-1764050876.5397', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:08:07.656698 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 165.85.56.95:23914] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:08:08.723567 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 165.85.56.95:23914] AH01071: Got error 'PHP message: start 1764050888.2407', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:08:08.724187 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 165.85.56.95:23914] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050888.7233-1764050888.2407', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:08:24.853597 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 165.85.56.95:44477] AH01071: Got error 'PHP message: start 1764050904.1619', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:08:25.136240 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 165.85.56.95:44477] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050905.1359-1764050904.1619', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:08:48.094506 2025] [proxy_fcgi:error] [pid 28842:tid 29001] [client 165.85.56.95:27174] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:08:48.630792 2025] [proxy_fcgi:error] [pid 28842:tid 29023] [client 165.85.56.95:27174] AH01071: Got error 'PHP message: start 1764050928.5908PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050928.6305-1764050928.5908', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:02.199899 2025] [proxy_fcgi:error] [pid 28739:tid 28781] [client 165.85.56.95:20854] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:03.094618 2025] [proxy_fcgi:error] [pid 28739:tid 28771] [client 165.85.56.95:20854] AH01071: Got error 'PHP message: start 1764050942.7022PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050943.0934-1764050942.7022', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:23.340909 2025] [proxy_fcgi:error] [pid 28740:tid 28805] [client 165.85.56.95:43555] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:23.854173 2025] [proxy_fcgi:error] [pid 28740:tid 28799] [client 165.85.56.95:43555] AH01071: Got error 'PHP message: start 1764050963.8154PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050963.8537-1764050963.8154', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:33.974656 2025] [proxy_fcgi:error] [pid 14078:tid 14143] [client 165.85.56.95:20424] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:34.964654 2025] [proxy_fcgi:error] [pid 14078:tid 14142] [client 165.85.56.95:20424] AH01071: Got error 'PHP message: start 1764050974.8233PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050974.9642-1764050974.8233', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:46.588529 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 165.85.56.95:8643] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:47.325794 2025] [proxy_fcgi:error] [pid 14077:tid 14110] [client 165.85.56.95:8643] AH01071: Got error 'PHP message: start 1764050987.274PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764050987.3253-1764050987.274', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:09:59.656640 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 165.85.56.95:10905] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:01.196233 2025] [proxy_fcgi:error] [pid 14168:tid 14190] [client 165.85.56.95:10905] AH01071: Got error 'PHP message: start 1764051000.6218PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051001.196-1764051000.6218', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:08.716705 2025] [proxy_fcgi:error] [pid 28609:tid 28633] [client 165.85.56.95:27703] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:10.276430 2025] [proxy_fcgi:error] [pid 28609:tid 28627] [client 165.85.56.95:27703] AH01071: Got error 'PHP message: start 1764051009.7749PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051010.276-1764051009.7749', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:26.862682 2025] [proxy_fcgi:error] [pid 28836:tid 28958] [client 165.85.56.95:22653] AH01071: Got error 'PHP message: start 1764051026.206', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:10:27.183265 2025] [proxy_fcgi:error] [pid 28836:tid 28958] [client 165.85.56.95:22653] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051027.1828-1764051026.206', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:10:27.694863 2025] [proxy_fcgi:error] [pid 14168:tid 14193] [client 165.85.56.95:4002] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:28.619938 2025] [proxy_fcgi:error] [pid 14168:tid 14171] [client 165.85.56.95:4002] AH01071: Got error 'PHP message: start 1764051028.1762PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051028.6195-1764051028.1762', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:35.713458 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 165.85.56.95:42763] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:36.775362 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 165.85.56.95:31782] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:37.284119 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 165.85.56.95:31782] AH01071: Got error 'PHP message: start 1764051037.2376PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051037.2836-1764051037.2376', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:52.743893 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 165.85.56.95:61265] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:10:53.388186 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 165.85.56.95:61265] AH01071: Got error 'PHP message: start 1764051053.3446PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051053.3876-1764051053.3446', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:03.684053 2025] [proxy_fcgi:error] [pid 14077:tid 14114] [client 165.85.56.95:31710] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:04.436202 2025] [proxy_fcgi:error] [pid 14077:tid 14128] [client 165.85.56.95:31710] AH01071: Got error 'PHP message: start 1764051064.0889PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051064.4358-1764051064.0889', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:15.728489 2025] [proxy_fcgi:error] [pid 14076:tid 14105] [client 165.85.56.95:49998] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:16.910297 2025] [proxy_fcgi:error] [pid 14076:tid 14103] [client 165.85.56.95:49998] AH01071: Got error 'PHP message: start 1764051076.4866PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051076.9099-1764051076.4866', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:20.942330 2025] [proxy_fcgi:error] [pid 14076:tid 14083] [client 165.85.56.95:49998] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:22.312622 2025] [proxy_fcgi:error] [pid 14076:tid 14093] [client 165.85.56.95:49998] AH01071: Got error 'PHP message: start 1764051081.8378PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051082.3122-1764051081.8378', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:28.703875 2025] [proxy_fcgi:error] [pid 28609:tid 28619] [client 165.85.56.95:51672] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:30.007665 2025] [proxy_fcgi:error] [pid 28609:tid 28633] [client 165.85.56.95:51672] AH01071: Got error 'PHP message: start 1764051089.5955PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051090.007-1764051089.5955', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:38.603623 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 165.85.56.95:37713] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:39.937394 2025] [proxy_fcgi:error] [pid 14078:tid 14138] [client 165.85.56.95:37713] AH01071: Got error 'PHP message: start 1764051099.4902PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051099.937-1764051099.4902', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:50.280040 2025] [proxy_fcgi:error] [pid 28739:tid 28783] [client 165.85.56.95:34182] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:11:50.970140 2025] [proxy_fcgi:error] [pid 28739:tid 28786] [client 165.85.56.95:34182] AH01071: Got error 'PHP message: start 1764051110.9289PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051110.9697-1764051110.9289', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:06.696642 2025] [proxy_fcgi:error] [pid 28842:tid 29021] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:07.653593 2025] [proxy_fcgi:error] [pid 28842:tid 29004] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: start 1764051127.569PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051127.6532-1764051127.569', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:11.475158 2025] [proxy_fcgi:error] [pid 28842:tid 28999] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:12.489830 2025] [proxy_fcgi:error] [pid 28842:tid 29025] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: start 1764051132.071PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051132.4894-1764051132.071', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:18.261383 2025] [proxy_fcgi:error] [pid 28842:tid 28990] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:19.015365 2025] [proxy_fcgi:error] [pid 28842:tid 29003] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: start 1764051138.9657PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051139.015-1764051138.9657', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:23.906529 2025] [proxy_fcgi:error] [pid 28842:tid 28992] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:24.385045 2025] [proxy_fcgi:error] [pid 28842:tid 28990] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: start 1764051144.3413PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051144.3846-1764051144.3413', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:28.475417 2025] [proxy_fcgi:error] [pid 14688:tid 14708] [client 165.85.56.95:10219] AH01071: Got error 'PHP message: start 1764051147.6952', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:12:28.570243 2025] [proxy_fcgi:error] [pid 28842:tid 28998] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:12:28.792255 2025] [proxy_fcgi:error] [pid 14688:tid 14708] [client 165.85.56.95:10219] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051148.7918-1764051147.6952', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:12:29.514049 2025] [proxy_fcgi:error] [pid 28842:tid 28996] [client 165.85.56.95:14591] AH01071: Got error 'PHP message: start 1764051149.0025PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051149.5136-1764051149.0025', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:13:10.197845 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 165.85.56.95:49525] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:13:10.813151 2025] [proxy_fcgi:error] [pid 14168:tid 14179] [client 165.85.56.95:49525] AH01071: Got error 'PHP message: start 1764051190.7634PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051190.8127-1764051190.7634', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:13:18.294302 2025] [proxy_fcgi:error] [pid 28836:tid 28967] [client 165.85.56.95:26226] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:13:18.741020 2025] [proxy_fcgi:error] [pid 28836:tid 28969] [client 165.85.56.95:26226] AH01071: Got error 'PHP message: start 1764051198.6988PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051198.7407-1764051198.6988', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 14:14:29.923902 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 165.85.56.95:58031] AH01071: Got error 'PHP message: start 1764051269.333', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:14:30.073817 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 165.85.56.95:58031] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051270.0734-1764051269.333', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:15:19.502273 2025] [proxy_fcgi:error] [pid 28836:tid 29009] [client 165.85.56.95:38801] AH01071: Got error 'PHP message: start 1764051319.1011PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051319.5015-1764051319.1011', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:16:31.428217 2025] [proxy_fcgi:error] [pid 28842:tid 28996] [client 165.85.56.95:16305] AH01071: Got error 'PHP message: start 1764051390.8214', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:16:31.594188 2025] [proxy_fcgi:error] [pid 28842:tid 28996] [client 165.85.56.95:16305] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051391.5937-1764051390.8214', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:17:20.632690 2025] [proxy_fcgi:error] [pid 14688:tid 14694] [client 165.85.56.95:35508] AH01071: Got error 'PHP message: start 1764051440.204PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051440.632-1764051440.204', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:18:32.754900 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.95:61231] AH01071: Got error 'PHP message: start 1764051512.0202', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:18:33.003252 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.95:61231] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051513.0028-1764051512.0202', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:19:21.522342 2025] [proxy_fcgi:error] [pid 14078:tid 14140] [client 165.85.56.95:42140] AH01071: Got error 'PHP message: start 1764051561.0953PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051561.5217-1764051561.0953', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:20:34.463004 2025] [proxy_fcgi:error] [pid 28842:tid 29022] [client 165.85.56.95:45959] AH01071: Got error 'PHP message: start 1764051633.7087', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:20:34.660581 2025] [proxy_fcgi:error] [pid 28842:tid 29022] [client 165.85.56.95:45959] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051634.6602-1764051633.7087', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:21:22.548620 2025] [proxy_fcgi:error] [pid 28609:tid 28618] [client 165.85.56.95:4293] AH01071: Got error 'PHP message: start 1764051681.9032PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051682.548-1764051681.9032', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:22:36.140076 2025] [proxy_fcgi:error] [pid 14688:tid 14712] [client 165.85.56.95:40790] AH01071: Got error 'PHP message: start 1764051755.4007', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:22:36.404307 2025] [proxy_fcgi:error] [pid 14688:tid 14712] [client 165.85.56.95:40790] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051756.4038-1764051755.4007', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:23:23.418108 2025] [proxy_fcgi:error] [pid 28609:tid 28638] [client 165.85.56.95:53974] AH01071: Got error 'PHP message: start 1764051803.0451PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051803.4176-1764051803.0451', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:24:37.418585 2025] [proxy_fcgi:error] [pid 28739:tid 28765] [client 165.85.56.95:33823] AH01071: Got error 'PHP message: start 1764051876.797', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:24:37.649143 2025] [proxy_fcgi:error] [pid 28739:tid 28765] [client 165.85.56.95:33823] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051877.6485-1764051876.797', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:25:24.157284 2025] [proxy_fcgi:error] [pid 14077:tid 14125] [client 165.85.56.95:22377] AH01071: Got error 'PHP message: start 1764051923.814PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051924.1566-1764051923.814', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:26:38.718178 2025] [proxy_fcgi:error] [pid 14076:tid 14090] [client 165.85.56.95:23499] AH01071: Got error 'PHP message: start 1764051998.0308', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:26:38.937032 2025] [proxy_fcgi:error] [pid 14076:tid 14090] [client 165.85.56.95:23499] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764051998.9366-1764051998.0308', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:27:25.028127 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 165.85.56.95:13074] AH01071: Got error 'PHP message: start 1764052044.6989PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052045.0274-1764052044.6989', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:28:40.316945 2025] [proxy_fcgi:error] [pid 28609:tid 28629] [client 165.85.56.95:58342] AH01071: Got error 'PHP message: start 1764052119.582', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:28:40.553495 2025] [proxy_fcgi:error] [pid 28609:tid 28629] [client 165.85.56.95:58342] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052120.5527-1764052119.582', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:29:25.707082 2025] [proxy_fcgi:error] [pid 28836:tid 28957] [client 165.85.56.95:62849] AH01071: Got error 'PHP message: start 1764052165.3649PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052165.7065-1764052165.3649', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:30:41.606141 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 165.85.56.95:28654] AH01071: Got error 'PHP message: start 1764052240.9881', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:30:41.775323 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 165.85.56.95:28654] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052241.7749-1764052240.9881', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:32:43.008339 2025] [proxy_fcgi:error] [pid 28609:tid 28635] [client 165.85.56.95:13667] AH01071: Got error 'PHP message: start 1764052362.445', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:32:43.158318 2025] [proxy_fcgi:error] [pid 28609:tid 28635] [client 165.85.56.95:13667] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052363.1579-1764052362.445', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:34:44.132228 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 165.85.56.95:15711] AH01071: Got error 'PHP message: start 1764052483.5438', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:34:44.276276 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 165.85.56.95:15711] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052484.2759-1764052483.5438', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:36:45.518561 2025] [proxy_fcgi:error] [pid 28842:tid 29025] [client 165.85.56.95:37929] AH01071: Got error 'PHP message: start 1764052604.9173', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:36:45.735003 2025] [proxy_fcgi:error] [pid 28842:tid 29025] [client 165.85.56.95:37929] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052605.7346-1764052604.9173', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:38:46.733989 2025] [proxy_fcgi:error] [pid 14168:tid 14181] [client 165.85.56.95:37905] AH01071: Got error 'PHP message: start 1764052726.108', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:38:46.915307 2025] [proxy_fcgi:error] [pid 14168:tid 14181] [client 165.85.56.95:37905] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052726.9149-1764052726.108', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:40:48.219445 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 165.85.56.95:3356] AH01071: Got error 'PHP message: start 1764052847.5518', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 14:40:48.365982 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 165.85.56.95:3356] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764052848.3656-1764052847.5518', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 15:05:33.360397 2025] [proxy_fcgi:error] [pid 14076:tid 14088] [client 165.85.56.95:64036] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:05:36.478666 2025] [proxy_fcgi:error] [pid 28836:tid 29014] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: start 1764054335.9249', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 15:05:36.749183 2025] [proxy_fcgi:error] [pid 28836:tid 29014] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054336.7489-1764054335.9249', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 15:05:37.665079 2025] [proxy_fcgi:error] [pid 28836:tid 28955] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: start 1764054337.1165', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:05:37.926364 2025] [proxy_fcgi:error] [pid 28836:tid 28955] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054337.926-1764054337.1165', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:05:41.855969 2025] [proxy_fcgi:error] [pid 28836:tid 28969] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:05:42.379405 2025] [proxy_fcgi:error] [pid 28836:tid 28967] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: start 1764054342.1224', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:05:42.380375 2025] [proxy_fcgi:error] [pid 28836:tid 28967] [client 165.85.56.95:9139] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054342.3792-1764054342.1224', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:08:27.387876 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 165.85.56.95:15156] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-22
[Tue Nov 25 15:08:28.726042 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 165.85.56.95:15156] AH01071: Got error 'PHP message: start 1764054508.1738', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:08:28.726492 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 165.85.56.95:15156] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054508.7259-1764054508.1738', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:10:29.655420 2025] [proxy_fcgi:error] [pid 14168:tid 14174] [client 165.85.56.95:4932] AH01071: Got error 'PHP message: start 1764054629.0643', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 15:10:29.655984 2025] [proxy_fcgi:error] [pid 14168:tid 14174] [client 165.85.56.95:4932] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054629.6552-1764054629.0643', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 15:12:39.950829 2025] [proxy_fcgi:error] [pid 14168:tid 14195] [client 165.85.56.95:11881] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php
[Tue Nov 25 15:12:44.267362 2025] [proxy_fcgi:error] [pid 14168:tid 14185] [client 165.85.56.95:11881] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44660
[Tue Nov 25 15:12:44.778170 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 165.85.56.95:11881] AH01071: Got error 'PHP message: start 1764054764.5792', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:12:44.778755 2025] [proxy_fcgi:error] [pid 14168:tid 14173] [client 165.85.56.95:11881] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054764.7777-1764054764.5792', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:12:51.260309 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 165.85.56.95:38944] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:12:52.137373 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 165.85.56.95:38944] AH01071: Got error 'PHP message: start 1764054771.8316', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:12:52.299162 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 165.85.56.95:38944] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054772.2988-1764054771.8316', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:13:11.571700 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 165.85.56.95:4036] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44660
[Tue Nov 25 15:13:12.355295 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.95:4036] AH01071: Got error 'PHP message: start 1764054792.0491', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:13:12.494411 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.95:4036] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764054792.4938-1764054792.0491', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 15:13:23.678908 2025] [proxy_fcgi:error] [pid 28836:tid 28962] [client 165.85.56.95:40773] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-20
[Tue Nov 25 15:50:07.208017 2025] [proxy_fcgi:error] [pid 28740:tid 28811] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:07.424869 2025] [proxy_fcgi:error] [pid 28740:tid 28799] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:07.642983 2025] [proxy_fcgi:error] [pid 28740:tid 28807] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:07.872708 2025] [proxy_fcgi:error] [pid 28740:tid 28809] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:08.106604 2025] [proxy_fcgi:error] [pid 28740:tid 28812] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:08.497919 2025] [proxy_fcgi:error] [pid 28740:tid 28806] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:09.182521 2025] [proxy_fcgi:error] [pid 28740:tid 28808] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:09.512596 2025] [proxy_fcgi:error] [pid 28740:tid 28797] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:09.983138 2025] [proxy_fcgi:error] [pid 28740:tid 28794] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:10.531157 2025] [proxy_fcgi:error] [pid 28740:tid 28796] [client 20.10.154.253:10103] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:50:11.027139 2025] [:error] [pid 28740:tid 28795] [client 20.10.154.253:10103] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSVfs1ppQCoYxWW6V0U9SgAAAkQ"]
[Tue Nov 25 15:50:18.194445 2025] [:error] [pid 14077:tid 14114] [client 20.10.154.253:2472] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSVfuhG9n7UHEkwDTygwYAAAAEQ"]
[Tue Nov 25 15:50:20.454362 2025] [:error] [pid 2987:tid 3004] [client 20.10.154.253:9842] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSVfvM-djEt-pTzPxnxlqQAAAU8"]
[Tue Nov 25 15:50:21.723851 2025] [:error] [pid 28609:tid 28633] [client 20.10.154.253:3556] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v.php"] [unique_id "aSVfvSGGdT-nZJVs3x2TzgAAAY8"]
[Tue Nov 25 15:50:24.699397 2025] [:error] [pid 14077:tid 14115] [client 20.10.154.253:3047] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSVfwBG9n7UHEkwDTygwZwAAAEU"]
[Tue Nov 25 15:50:25.458455 2025] [:error] [pid 14077:tid 14129] [client 20.10.154.253:8461] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSVfwRG9n7UHEkwDTygwaAAAAFM"]
[Tue Nov 25 15:50:27.085611 2025] [:error] [pid 28740:tid 28803] [client 20.10.154.253:1372] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSVfw1ppQCoYxWW6V0U9WwAAAkw"]
[Tue Nov 25 15:50:29.172376 2025] [:error] [pid 28836:tid 28967] [client 20.10.154.253:2540] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d2.php"] [unique_id "aSVfxZwNRsoxcLQGkTeOLQAAAsw"]
[Tue Nov 25 15:50:30.567252 2025] [:error] [pid 14077:tid 14127] [client 20.10.154.253:4235] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSVfxhG9n7UHEkwDTygwcAAAAFE"]
[Tue Nov 25 15:50:31.929252 2025] [:error] [pid 14077:tid 14115] [client 20.10.154.253:2516] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSVfxxG9n7UHEkwDTygwcgAAAEU"]
[Tue Nov 25 15:50:33.019322 2025] [:error] [pid 28842:tid 28992] [client 20.10.154.253:9848] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSVfydNmoaPf6T4-6C1G3wAAA0I"]
[Tue Nov 25 15:50:33.974281 2025] [:error] [pid 2987:tid 3001] [client 20.10.154.253:6425] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/snus.php"] [unique_id "aSVfyc-djEt-pTzPxnxlrwAAAUw"]
[Tue Nov 25 15:50:40.037136 2025] [:error] [pid 14168:tid 14175] [client 20.10.154.253:10884] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/011i.php"] [unique_id "aSVf0PR-ZDU0QEgAIIs3lAAAAMQ"]
[Tue Nov 25 15:50:43.579422 2025] [:error] [pid 28739:tid 28782] [client 20.10.154.253:4808] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/011i.php"] [unique_id "aSVf0xxGpKmlkG4FexRKxQAAAhQ"]
[Tue Nov 25 15:50:51.092281 2025] [:error] [pid 28609:tid 28625] [client 20.10.154.253:8389] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSVf2yGGdT-nZJVs3x2UAQAAAYc"]
[Tue Nov 25 15:50:52.072649 2025] [:error] [pid 28836:tid 28964] [client 20.10.154.253:5816] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSVf3JwNRsoxcLQGkTeONQAAAsk"]
[Tue Nov 25 15:50:53.313383 2025] [:error] [pid 14077:tid 14130] [client 20.10.154.253:4970] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSVf3RG9n7UHEkwDTygwkgAAAFQ"]
[Tue Nov 25 15:50:54.440807 2025] [:error] [pid 28836:tid 29012] [client 20.10.154.253:5813] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/disaos.php"] [unique_id "aSVf3pwNRsoxcLQGkTeONwAAAtY"]
[Tue Nov 25 15:50:56.172427 2025] [:error] [pid 2987:tid 2999] [client 20.10.154.253:10939] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSVf4M-djEt-pTzPxnxlwQAAAUo"]
[Tue Nov 25 15:50:57.429949 2025] [:error] [pid 28836:tid 28959] [client 20.10.154.253:4942] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSVf4ZwNRsoxcLQGkTeOOgAAAsQ"]
[Tue Nov 25 15:50:58.306397 2025] [:error] [pid 28740:tid 28801] [client 20.10.154.253:8398] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSVf4lppQCoYxWW6V0U9kgAAAko"]
[Tue Nov 25 15:51:00.379280 2025] [:error] [pid 2987:tid 3003] [client 20.10.154.253:8403] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gdn.php"] [unique_id "aSVf5M-djEt-pTzPxnxlwwAAAU4"]
[Tue Nov 25 15:51:03.106951 2025] [:error] [pid 14077:tid 14117] [client 20.10.154.253:10063] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSVf5xG9n7UHEkwDTygwnwAAAEc"]
[Tue Nov 25 15:51:05.262288 2025] [:error] [pid 14078:tid 14158] [client 20.10.154.253:2434] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSVf6dVXYbb0ii_rVoIIQgAAAJU"]
[Tue Nov 25 15:51:06.928651 2025] [:error] [pid 28842:tid 28997] [client 20.10.154.253:8430] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSVf6tNmoaPf6T4-6C1HHAAAA0c"]
[Tue Nov 25 15:51:09.660212 2025] [:error] [pid 28609:tid 28639] [client 20.10.154.253:4989] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ww4.php"] [unique_id "aSVf7SGGdT-nZJVs3x2UEwAAAZU"]
[Tue Nov 25 15:51:12.710839 2025] [proxy_fcgi:error] [pid 14077:tid 14114] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:13.009001 2025] [proxy_fcgi:error] [pid 14077:tid 14111] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:13.354439 2025] [proxy_fcgi:error] [pid 14077:tid 14124] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:13.588787 2025] [proxy_fcgi:error] [pid 14077:tid 14129] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:13.804655 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:14.067440 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:14.295251 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:14.508288 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:14.740819 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:14.955471 2025] [proxy_fcgi:error] [pid 14077:tid 14114] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:15.188193 2025] [proxy_fcgi:error] [pid 14077:tid 14110] [client 20.10.154.253:5793] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:51:15.875202 2025] [:error] [pid 14077:tid 14111] [client 20.10.154.253:5793] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSVf8xG9n7UHEkwDTygwywAAAEE"]
[Tue Nov 25 15:51:16.892921 2025] [:error] [pid 28740:tid 28798] [client 20.10.154.253:3457] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSVf9FppQCoYxWW6V0U97gAAAkc"]
[Tue Nov 25 15:51:18.142627 2025] [:error] [pid 14078:tid 14137] [client 20.10.154.253:8417] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSVf9tVXYbb0ii_rVoIIeQAAAIA"]
[Tue Nov 25 15:51:19.111214 2025] [:error] [pid 28609:tid 28633] [client 20.10.154.253:2734] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we.php"] [unique_id "aSVf9yGGdT-nZJVs3x2UGQAAAY8"]
[Tue Nov 25 15:51:19.905703 2025] [:error] [pid 14077:tid 14120] [client 20.10.154.253:5026] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSVf9xG9n7UHEkwDTygw0AAAAEo"]
[Tue Nov 25 15:51:21.675138 2025] [:error] [pid 14076:tid 14093] [client 20.10.154.253:5773] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSVf-XsB4Gz6Qw-pvBvgcwAAAAw"]
[Tue Nov 25 15:51:23.241540 2025] [:error] [pid 28842:tid 29020] [client 20.10.154.253:4993] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSVf-9NmoaPf6T4-6C1HOwAAA1I"]
[Tue Nov 25 15:51:27.018827 2025] [:error] [pid 14078:tid 14151] [client 20.10.154.253:9477] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/size.php"] [unique_id "aSVf_9VXYbb0ii_rVoIIhQAAAI4"]
[Tue Nov 25 15:51:28.173276 2025] [:error] [pid 14077:tid 14118] [client 20.10.154.253:2526] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSVgABG9n7UHEkwDTygw6QAAAEg"]
[Tue Nov 25 15:51:29.929265 2025] [:error] [pid 14077:tid 14133] [client 20.10.154.253:9526] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSVgARG9n7UHEkwDTygw9wAAAFc"]
[Tue Nov 25 15:51:32.309260 2025] [:error] [pid 2987:tid 3009] [client 20.10.154.253:1115] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSVgBM-djEt-pTzPxnxmDQAAAVQ"]
[Tue Nov 25 15:51:33.268911 2025] [:error] [pid 14077:tid 14114] [client 20.10.154.253:1120] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rsjlrria.php"] [unique_id "aSVgBRG9n7UHEkwDTygxFAAAAEQ"]
[Tue Nov 25 15:51:37.940434 2025] [:error] [pid 2987:tid 3000] [client 20.10.154.253:9521] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSVgCc-djEt-pTzPxnxmEwAAAUs"]
[Tue Nov 25 15:51:38.931286 2025] [:error] [pid 14076:tid 14083] [client 20.10.154.253:9503] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSVgCnsB4Gz6Qw-pvBvgfAAAAAI"]
[Tue Nov 25 15:51:40.488104 2025] [:error] [pid 28740:tid 28801] [client 20.10.154.253:8385] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSVgDFppQCoYxWW6V0U-DwAAAko"]
[Tue Nov 25 15:51:43.329053 2025] [:error] [pid 14168:tid 14183] [client 20.10.154.253:2995] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSVgD_R-ZDU0QEgAIIs3_gAAAMw"]
[Tue Nov 25 15:51:44.973250 2025] [:error] [pid 2987:tid 3010] [client 20.10.154.253:9519] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gec.php"] [unique_id "aSVgEM-djEt-pTzPxnxmFQAAAVU"]
[Tue Nov 25 15:51:46.499427 2025] [:error] [pid 28739:tid 28780] [client 20.10.154.253:5356] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSVgEhxGpKmlkG4FexRK3wAAAhI"]
[Tue Nov 25 15:51:48.640372 2025] [:error] [pid 14078:tid 14146] [client 20.10.154.253:3469] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSVgFNVXYbb0ii_rVoIItQAAAIk"]
[Tue Nov 25 15:51:49.489386 2025] [:error] [pid 28740:tid 28795] [client 20.10.154.253:3475] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSVgFVppQCoYxWW6V0U-KwAAAkQ"]
[Tue Nov 25 15:51:50.746673 2025] [:error] [pid 14078:tid 14157] [client 20.10.154.253:9488] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/gec.php"] [unique_id "aSVgFtVXYbb0ii_rVoIIzAAAAJQ"]
[Tue Nov 25 15:51:51.855262 2025] [:error] [pid 2987:tid 2990] [client 20.10.154.253:3165] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSVgF8-djEt-pTzPxnxmJwAAAUE"]
[Tue Nov 25 15:51:54.219774 2025] [:error] [pid 14077:tid 14110] [client 20.10.154.253:3188] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSVgGhG9n7UHEkwDTygxWwAAAEA"]
[Tue Nov 25 15:51:56.013627 2025] [:error] [pid 14077:tid 14115] [client 20.10.154.253:5052] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSVgHBG9n7UHEkwDTygxYAAAAEU"]
[Tue Nov 25 15:51:57.099323 2025] [:error] [pid 28740:tid 28805] [client 20.10.154.253:3508] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nfu.php"] [unique_id "aSVgHVppQCoYxWW6V0U-SAAAAk4"]
[Tue Nov 25 15:51:59.831162 2025] [:error] [pid 28739:tid 28780] [client 20.10.154.253:5896] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSVgHxxGpKmlkG4FexRK7AAAAhI"]
[Tue Nov 25 15:52:00.424387 2025] [:error] [pid 14077:tid 14130] [client 20.10.154.253:5912] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSVgIBG9n7UHEkwDTygxZwAAAFQ"]
[Tue Nov 25 15:52:01.828231 2025] [:error] [pid 14168:tid 14190] [client 20.10.154.253:5331] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSVgIfR-ZDU0QEgAIIs4PgAAANM"]
[Tue Nov 25 15:52:04.611853 2025] [:error] [pid 28740:tid 28815] [client 20.10.154.253:6934] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/update/nfu.php"] [unique_id "aSVgJFppQCoYxWW6V0U-XgAAAlg"]
[Tue Nov 25 15:52:07.341678 2025] [:error] [pid 28842:tid 29003] [client 20.10.154.253:4592] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSVgJ9NmoaPf6T4-6C1HugAAA00"]
[Tue Nov 25 15:52:08.419224 2025] [:error] [pid 14078:tid 14161] [client 20.10.154.253:5325] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSVgKNVXYbb0ii_rVoII8QAAAJg"]
[Tue Nov 25 15:52:12.282177 2025] [:error] [pid 28609:tid 28621] [client 20.10.154.253:3047] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSVgLCGGdT-nZJVs3x2UQwAAAYM"]
[Tue Nov 25 15:52:13.760239 2025] [:error] [pid 2987:tid 3010] [client 20.10.154.253:4120] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xl8.php"] [unique_id "aSVgLc-djEt-pTzPxnxmUQAAAVU"]
[Tue Nov 25 15:52:15.010938 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:15.226444 2025] [proxy_fcgi:error] [pid 14078:tid 14160] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:15.440792 2025] [proxy_fcgi:error] [pid 14078:tid 14152] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:15.654147 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:17.090315 2025] [proxy_fcgi:error] [pid 14078:tid 14140] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:17.302779 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:17.868991 2025] [proxy_fcgi:error] [pid 14078:tid 14161] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:18.092332 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:18.307778 2025] [proxy_fcgi:error] [pid 14078:tid 14159] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:18.520229 2025] [proxy_fcgi:error] [pid 14078:tid 14137] [client 20.10.154.253:4573] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:52:18.763465 2025] [:error] [pid 14078:tid 14139] [client 20.10.154.253:4573] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/20.php"] [unique_id "aSVgMtVXYbb0ii_rVoIJAwAAAII"]
[Tue Nov 25 15:52:19.970084 2025] [:error] [pid 14168:tid 14178] [client 20.10.154.253:9085] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/20.php"] [unique_id "aSVgM_R-ZDU0QEgAIIs4RgAAAMc"]
[Tue Nov 25 15:52:20.802998 2025] [:error] [pid 14077:tid 14130] [client 20.10.154.253:4370] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/20.php"] [unique_id "aSVgNBG9n7UHEkwDTygxcQAAAFQ"]
[Tue Nov 25 15:52:28.703826 2025] [:error] [pid 28842:tid 28996] [client 20.10.154.253:4106] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/20.php"] [unique_id "aSVgPNNmoaPf6T4-6C1H9wAAA0Y"]
[Tue Nov 25 15:52:29.911957 2025] [:error] [pid 14076:tid 14105] [client 20.10.154.253:9871] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSVgPXsB4Gz6Qw-pvBvg0gAAABg"]
[Tue Nov 25 15:52:31.234708 2025] [:error] [pid 28739:tid 28764] [client 20.10.154.253:3626] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSVgPxxGpKmlkG4FexRLKAAAAgI"]
[Tue Nov 25 15:52:32.895333 2025] [:error] [pid 14077:tid 14128] [client 20.10.154.253:5572] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSVgQBG9n7UHEkwDTygxiAAAAFI"]
[Tue Nov 25 15:52:36.181266 2025] [:error] [pid 28740:tid 28811] [client 20.10.154.253:4315] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1.php"] [unique_id "aSVgRFppQCoYxWW6V0U-igAAAlQ"]
[Tue Nov 25 15:52:37.752192 2025] [:error] [pid 28609:tid 28640] [client 20.10.154.253:11137] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSVgRSGGdT-nZJVs3x2UagAAAZY"]
[Tue Nov 25 15:52:40.843254 2025] [:error] [pid 28609:tid 28633] [client 20.10.154.253:7252] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSVgSCGGdT-nZJVs3x2UcAAAAY8"]
[Tue Nov 25 15:52:42.919106 2025] [:error] [pid 28739:tid 28765] [client 20.10.154.253:9009] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSVgShxGpKmlkG4FexRLMQAAAgM"]
[Tue Nov 25 15:52:44.347182 2025] [:error] [pid 14076:tid 14089] [client 20.10.154.253:7868] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/c.php"] [unique_id "aSVgTHsB4Gz6Qw-pvBvg3QAAAAg"]
[Tue Nov 25 15:52:46.413235 2025] [:error] [pid 28609:tid 28620] [client 20.10.154.253:5258] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSVgTiGGdT-nZJVs3x2UdgAAAYI"]
[Tue Nov 25 15:52:50.566083 2025] [:error] [pid 14077:tid 14129] [client 20.10.154.253:3420] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSVgUhG9n7UHEkwDTygxoQAAAFM"]
[Tue Nov 25 15:52:59.854079 2025] [:error] [pid 14076:tid 14082] [client 20.10.154.253:11518] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aSVgW3sB4Gz6Qw-pvBvg9AAAAAE"]
[Tue Nov 25 15:53:01.495938 2025] [:error] [pid 14168:tid 14174] [client 20.10.154.253:3945] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSVgXfR-ZDU0QEgAIIs4VQAAAMM"]
[Tue Nov 25 15:53:02.991554 2025] [:error] [pid 28740:tid 28807] [client 20.10.154.253:11216] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSVgXlppQCoYxWW6V0U-nQAAAlA"]
[Tue Nov 25 15:53:05.839412 2025] [:error] [pid 14168:tid 14181] [client 20.10.154.253:11116] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSVgYfR-ZDU0QEgAIIs4WQAAAMo"]
[Tue Nov 25 15:53:10.056185 2025] [:error] [pid 2987:tid 2991] [client 20.10.154.253:2785] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aSVgZs-djEt-pTzPxnxmkwAAAUI"]
[Tue Nov 25 15:53:12.162514 2025] [:error] [pid 14076:tid 14105] [client 20.10.154.253:5961] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSVgaHsB4Gz6Qw-pvBvg_gAAABg"]
[Tue Nov 25 15:53:14.215401 2025] [:error] [pid 28740:tid 28804] [client 20.10.154.253:1298] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSVgalppQCoYxWW6V0U-qgAAAk0"]
[Tue Nov 25 15:53:15.920394 2025] [:error] [pid 28842:tid 28991] [client 20.10.154.253:3936] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSVga9NmoaPf6T4-6C1IOAAAA0E"]
[Tue Nov 25 15:53:17.293995 2025] [:error] [pid 14077:tid 14130] [client 20.10.154.253:11048] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aSVgbRG9n7UHEkwDTygxugAAAFQ"]
[Tue Nov 25 15:53:18.390944 2025] [proxy_fcgi:error] [pid 2987:tid 2997] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:18.599104 2025] [proxy_fcgi:error] [pid 2987:tid 3009] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:19.331984 2025] [proxy_fcgi:error] [pid 2987:tid 3011] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:19.631891 2025] [proxy_fcgi:error] [pid 2987:tid 2999] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:19.859863 2025] [proxy_fcgi:error] [pid 2987:tid 2993] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:20.068379 2025] [proxy_fcgi:error] [pid 2987:tid 2996] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:20.468710 2025] [proxy_fcgi:error] [pid 2987:tid 3012] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:20.684309 2025] [proxy_fcgi:error] [pid 2987:tid 2994] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:20.904402 2025] [proxy_fcgi:error] [pid 2987:tid 3007] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:21.150564 2025] [proxy_fcgi:error] [pid 2987:tid 3002] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:21.387144 2025] [proxy_fcgi:error] [pid 2987:tid 2990] [client 20.10.154.253:3250] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:53:21.613842 2025] [:error] [pid 2987:tid 3000] [client 20.10.154.253:3250] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSVgcc-djEt-pTzPxnxmuQAAAUs"]
[Tue Nov 25 15:53:26.076212 2025] [:error] [pid 28842:tid 29001] [client 20.10.154.253:1871] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSVgdtNmoaPf6T4-6C1IRAAAA0s"]
[Tue Nov 25 15:53:27.202586 2025] [:error] [pid 2987:tid 3004] [client 20.10.154.253:11111] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSVgd8-djEt-pTzPxnxm0gAAAU8"]
[Tue Nov 25 15:53:28.873107 2025] [:error] [pid 2987:tid 3000] [client 20.10.154.253:1914] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2.php"] [unique_id "aSVgeM-djEt-pTzPxnxm1wAAAUs"]
[Tue Nov 25 15:53:30.488847 2025] [:error] [pid 28842:tid 28996] [client 20.10.154.253:1280] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSVgetNmoaPf6T4-6C1ISgAAA0Y"]
[Tue Nov 25 15:53:32.597622 2025] [:error] [pid 28739:tid 28772] [client 20.10.154.253:2942] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSVgfBxGpKmlkG4FexRLSQAAAgo"]
[Tue Nov 25 15:53:34.569068 2025] [:error] [pid 14168:tid 14174] [client 20.10.154.253:5570] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSVgfvR-ZDU0QEgAIIs4aQAAAMM"]
[Tue Nov 25 15:53:40.548970 2025] [:error] [pid 2987:tid 2993] [client 20.10.154.253:11074] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/6.php"] [unique_id "aSVghM-djEt-pTzPxnxm7wAAAUQ"]
[Tue Nov 25 15:53:41.804479 2025] [:error] [pid 28740:tid 28791] [client 20.10.154.253:3096] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSVghVppQCoYxWW6V0U-xgAAAkA"]
[Tue Nov 25 15:53:44.915710 2025] [:error] [pid 28836:tid 28967] [client 20.10.154.253:2883] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSVgiJwNRsoxcLQGkTeOwQAAAsw"]
[Tue Nov 25 15:53:46.122221 2025] [:error] [pid 28739:tid 28778] [client 20.10.154.253:11024] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSVgihxGpKmlkG4FexRLXwAAAhA"]
[Tue Nov 25 15:53:48.648172 2025] [:error] [pid 28842:tid 29002] [client 20.10.154.253:10768] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/12.php"] [unique_id "aSVgjNNmoaPf6T4-6C1IbAAAA0w"]
[Tue Nov 25 15:53:50.538539 2025] [:error] [pid 14168:tid 14176] [client 20.10.154.253:2927] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSVgjvR-ZDU0QEgAIIs4cgAAAMU"]
[Tue Nov 25 15:53:54.317903 2025] [:error] [pid 2987:tid 3005] [client 20.10.154.253:11324] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSVgks-djEt-pTzPxnxnBAAAAVA"]
[Tue Nov 25 15:53:56.213851 2025] [:error] [pid 28739:tid 28770] [client 20.10.154.253:1329] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSVglBxGpKmlkG4FexRLbwAAAgg"]
[Tue Nov 25 15:53:57.800361 2025] [:error] [pid 14078:tid 14161] [client 20.10.154.253:1240] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/0.php"] [unique_id "aSVgldVXYbb0ii_rVoIJYAAAAJg"]
[Tue Nov 25 15:54:00.698641 2025] [:error] [pid 14168:tid 14185] [client 20.10.154.253:1226] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVgmPR-ZDU0QEgAIIs4fQAAAM4"]
[Tue Nov 25 15:54:02.169284 2025] [:error] [pid 28836:tid 28961] [client 20.10.154.253:4048] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVgmpwNRsoxcLQGkTeO1AAAAsY"]
[Tue Nov 25 15:54:04.312547 2025] [:error] [pid 28842:tid 28999] [client 20.10.154.253:10754] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVgnNNmoaPf6T4-6C1IfAAAA0k"]
[Tue Nov 25 15:54:05.435934 2025] [:error] [pid 28739:tid 28772] [client 20.10.154.253:10840] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVgnRxGpKmlkG4FexRLgwAAAgo"]
[Tue Nov 25 15:54:06.572862 2025] [:error] [pid 14077:tid 14115] [client 20.10.154.253:2199] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSVgnhG9n7UHEkwDTygyBQAAAEU"]
[Tue Nov 25 15:54:07.752038 2025] [:error] [pid 14076:tid 14096] [client 20.10.154.253:2934] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSVgn3sB4Gz6Qw-pvBvhUAAAAA8"]
[Tue Nov 25 15:54:08.840520 2025] [:error] [pid 14077:tid 14129] [client 20.10.154.253:11265] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSVgoBG9n7UHEkwDTygyCwAAAFM"]
[Tue Nov 25 15:54:12.502926 2025] [:error] [pid 14077:tid 14128] [client 20.10.154.253:5592] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/02.php"] [unique_id "aSVgpBG9n7UHEkwDTygyGwAAAFI"]
[Tue Nov 25 15:54:13.454966 2025] [:error] [pid 28609:tid 28625] [client 20.10.154.253:1224] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSVgpSGGdT-nZJVs3x2UyQAAAYc"]
[Tue Nov 25 15:54:15.514563 2025] [:error] [pid 14076:tid 14093] [client 20.10.154.253:1295] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSVgp3sB4Gz6Qw-pvBvhYgAAAAw"]
[Tue Nov 25 15:54:17.230830 2025] [:error] [pid 28609:tid 28637] [client 20.10.154.253:5616] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSVgqSGGdT-nZJVs3x2UzwAAAZM"]
[Tue Nov 25 15:54:18.137658 2025] [:error] [pid 2987:tid 3004] [client 20.10.154.253:10871] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w.php"] [unique_id "aSVgqs-djEt-pTzPxnxnGQAAAU8"]
[Tue Nov 25 15:54:20.689567 2025] [:error] [pid 14077:tid 14133] [client 20.10.154.253:1312] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/go.php"] [unique_id "aSVgrBG9n7UHEkwDTygyKQAAAFc"]
[Tue Nov 25 15:54:24.555855 2025] [proxy_fcgi:error] [pid 28836:tid 28966] [client 20.10.154.253:1303] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:24.770848 2025] [proxy_fcgi:error] [pid 28836:tid 29010] [client 20.10.154.253:1303] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:24.999019 2025] [proxy_fcgi:error] [pid 28836:tid 28986] [client 20.10.154.253:1303] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:25.217280 2025] [proxy_fcgi:error] [pid 28836:tid 28959] [client 20.10.154.253:1303] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:25.431002 2025] [proxy_fcgi:error] [pid 28836:tid 29006] [client 20.10.154.253:1303] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:26.818361 2025] [:error] [pid 28836:tid 28968] [client 20.10.154.253:1303] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSVgspwNRsoxcLQGkTeO-wAAAs0"]
[Tue Nov 25 15:54:27.821967 2025] [:error] [pid 28740:tid 28796] [client 20.10.154.253:6154] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSVgs1ppQCoYxWW6V0U_MQAAAkU"]
[Tue Nov 25 15:54:29.864276 2025] [proxy_fcgi:error] [pid 28842:tid 28992] [client 20.10.154.253:10870] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:30.119304 2025] [proxy_fcgi:error] [pid 28842:tid 29004] [client 20.10.154.253:10870] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:30.343852 2025] [proxy_fcgi:error] [pid 28842:tid 28997] [client 20.10.154.253:10870] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:30.548916 2025] [proxy_fcgi:error] [pid 28842:tid 28994] [client 20.10.154.253:10870] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:30.757661 2025] [proxy_fcgi:error] [pid 28842:tid 29020] [client 20.10.154.253:10870] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:54:30.961410 2025] [:error] [pid 28842:tid 28990] [client 20.10.154.253:10870] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVgttNmoaPf6T4-6C1ItQAAA0A"]
[Tue Nov 25 15:54:32.166849 2025] [:error] [pid 14076:tid 14091] [client 20.10.154.253:5580] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVguHsB4Gz6Qw-pvBvhdwAAAAo"]
[Tue Nov 25 15:54:33.830448 2025] [:error] [pid 28836:tid 28959] [client 20.10.154.253:4474] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVguZwNRsoxcLQGkTeO_gAAAsQ"]
[Tue Nov 25 15:54:34.891464 2025] [:error] [pid 28842:tid 28998] [client 20.10.154.253:2207] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSVgutNmoaPf6T4-6C1IugAAA0g"]
[Tue Nov 25 15:54:36.824813 2025] [:error] [pid 2987:tid 3009] [client 20.10.154.253:1154] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aSVgvM-djEt-pTzPxnxnKQAAAVQ"]
[Tue Nov 25 15:54:38.270578 2025] [:error] [pid 28609:tid 28634] [client 20.10.154.253:10546] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aSVgviGGdT-nZJVs3x2U3AAAAZA"]
[Tue Nov 25 15:54:42.605791 2025] [:error] [pid 14077:tid 14118] [client 20.10.154.253:2423] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aSVgwhG9n7UHEkwDTygyVgAAAEg"]
[Tue Nov 25 15:54:45.780673 2025] [:error] [pid 2987:tid 2992] [client 20.10.154.253:11497] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aSVgxc-djEt-pTzPxnxnLgAAAUM"]
[Tue Nov 25 15:54:47.607107 2025] [:error] [pid 2987:tid 3007] [client 20.10.154.253:7119] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSVgx8-djEt-pTzPxnxnMAAAAVI"]
[Tue Nov 25 15:54:48.395999 2025] [:error] [pid 14076:tid 14095] [client 20.10.154.253:11499] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSVgyHsB4Gz6Qw-pvBvhiwAAAA4"]
[Tue Nov 25 15:54:50.159170 2025] [:error] [pid 14077:tid 14129] [client 20.10.154.253:5879] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSVgyhG9n7UHEkwDTygycAAAAFM"]
[Tue Nov 25 15:54:52.615147 2025] [:error] [pid 28609:tid 28628] [client 20.10.154.253:5852] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSVgzCGGdT-nZJVs3x2U6AAAAYo"]
[Tue Nov 25 15:55:01.347006 2025] [:error] [pid 28739:tid 28783] [client 20.10.154.253:1169] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSVg1RxGpKmlkG4FexRLrgAAAhU"]
[Tue Nov 25 15:55:02.845931 2025] [:error] [pid 14077:tid 14112] [client 20.10.154.253:6364] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/default.php"] [unique_id "aSVg1hG9n7UHEkwDTygymgAAAEI"]
[Tue Nov 25 15:55:04.053201 2025] [:error] [pid 28740:tid 28792] [client 20.10.154.253:7131] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/default.php"] [unique_id "aSVg2FppQCoYxWW6V0U_WwAAAkE"]
[Tue Nov 25 15:55:07.772152 2025] [:error] [pid 14077:tid 14120] [client 20.10.154.253:5739] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/default.php"] [unique_id "aSVg2xG9n7UHEkwDTygypAAAAEo"]
[Tue Nov 25 15:55:08.741386 2025] [:error] [pid 28740:tid 28804] [client 20.10.154.253:1600] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/default.php"] [unique_id "aSVg3FppQCoYxWW6V0U_XwAAAk0"]
[Tue Nov 25 15:55:10.689679 2025] [:error] [pid 28740:tid 28807] [client 20.10.154.253:1618] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aSVg3lppQCoYxWW6V0U_YgAAAlA"]
[Tue Nov 25 15:55:11.998320 2025] [:error] [pid 14076:tid 14087] [client 20.10.154.253:9826] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aSVg33sB4Gz6Qw-pvBvhpQAAAAY"]
[Tue Nov 25 15:55:13.180515 2025] [:error] [pid 14077:tid 14131] [client 20.10.154.253:9815] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aSVg4RG9n7UHEkwDTygysgAAAFU"]
[Tue Nov 25 15:55:13.937846 2025] [:error] [pid 2987:tid 2994] [client 20.10.154.253:11178] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aSVg4c-djEt-pTzPxnxnVAAAAUU"]
[Tue Nov 25 15:55:15.203483 2025] [:error] [pid 14077:tid 14116] [client 20.10.154.253:2354] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVg4xG9n7UHEkwDTygyugAAAEY"]
[Tue Nov 25 15:55:16.996867 2025] [:error] [pid 28836:tid 29009] [client 20.10.154.253:5732] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVg5JwNRsoxcLQGkTePPAAAAtM"]
[Tue Nov 25 15:55:19.096302 2025] [:error] [pid 14077:tid 14130] [client 20.10.154.253:5699] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVg5xG9n7UHEkwDTygyxAAAAFQ"]
[Tue Nov 25 15:55:20.341265 2025] [:error] [pid 28836:tid 29011] [client 20.10.154.253:4642] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSVg6JwNRsoxcLQGkTePPQAAAtU"]
[Tue Nov 25 15:55:21.769261 2025] [:error] [pid 28842:tid 29004] [client 20.10.154.253:8483] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSVg6dNmoaPf6T4-6C1JMgAAA04"]
[Tue Nov 25 15:55:23.114308 2025] [:error] [pid 28842:tid 29026] [client 20.10.154.253:8467] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSVg69NmoaPf6T4-6C1JNgAAA1g"]
[Tue Nov 25 15:55:23.900633 2025] [:error] [pid 28740:tid 28800] [client 20.10.154.253:6031] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSVg61ppQCoYxWW6V0U_egAAAkk"]
[Tue Nov 25 15:55:25.222046 2025] [:error] [pid 14077:tid 14122] [client 20.10.154.253:2345] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/marijuana.php"] [unique_id "aSVg7RG9n7UHEkwDTygy0wAAAEw"]
[Tue Nov 25 15:55:27.810239 2025] [:error] [pid 2987:tid 2995] [client 20.10.154.253:9603] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSVg78-djEt-pTzPxnxnWgAAAUY"]
[Tue Nov 25 15:55:32.778530 2025] [proxy_fcgi:error] [pid 28842:tid 29026] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:32.994858 2025] [proxy_fcgi:error] [pid 28842:tid 29003] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:33.628877 2025] [proxy_fcgi:error] [pid 28842:tid 28995] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:33.837232 2025] [proxy_fcgi:error] [pid 28842:tid 29023] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:34.050902 2025] [proxy_fcgi:error] [pid 28842:tid 29020] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:34.299146 2025] [proxy_fcgi:error] [pid 28842:tid 28998] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:34.512880 2025] [proxy_fcgi:error] [pid 28842:tid 29005] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:34.722540 2025] [proxy_fcgi:error] [pid 28842:tid 29024] [client 20.10.154.253:6426] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:55:36.136067 2025] [:error] [pid 28842:tid 28999] [client 20.10.154.253:6426] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSVg-NNmoaPf6T4-6C1JXgAAA0k"]
[Tue Nov 25 15:55:37.429036 2025] [:error] [pid 14076:tid 14099] [client 20.10.154.253:3038] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSVg-XsB4Gz6Qw-pvBvhyQAAABI"]
[Tue Nov 25 15:55:39.369350 2025] [:error] [pid 28842:tid 29026] [client 20.10.154.253:3060] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSVg-9NmoaPf6T4-6C1JZAAAA1g"]
[Tue Nov 25 15:55:40.128243 2025] [:error] [pid 2987:tid 2990] [client 20.10.154.253:5539] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/network.php"] [unique_id "aSVg_M-djEt-pTzPxnxncAAAAUE"]
[Tue Nov 25 15:55:42.675746 2025] [:error] [pid 14077:tid 14120] [client 20.10.154.253:8480] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSVg_hG9n7UHEkwDTygy-gAAAEo"]
[Tue Nov 25 15:55:44.483209 2025] [:error] [pid 28842:tid 28992] [client 20.10.154.253:1711] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSVhANNmoaPf6T4-6C1JbgAAA0I"]
[Tue Nov 25 15:55:46.855116 2025] [:error] [pid 14077:tid 14113] [client 20.10.154.253:6421] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSVhAhG9n7UHEkwDTygzAgAAAEM"]
[Tue Nov 25 15:55:48.968274 2025] [:error] [pid 14076:tid 14091] [client 20.10.154.253:10104] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aSVhBHsB4Gz6Qw-pvBvh0gAAAAo"]
[Tue Nov 25 15:55:49.960606 2025] [:error] [pid 14076:tid 14089] [client 20.10.154.253:10051] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSVhBXsB4Gz6Qw-pvBvh1QAAAAg"]
[Tue Nov 25 15:55:53.923412 2025] [:error] [pid 2987:tid 3001] [client 20.10.154.253:10936] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSVhCc-djEt-pTzPxnxnfAAAAUw"]
[Tue Nov 25 15:55:54.796486 2025] [:error] [pid 14077:tid 14123] [client 20.10.154.253:5820] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSVhChG9n7UHEkwDTygzGgAAAE0"]
[Tue Nov 25 15:55:56.368341 2025] [:error] [pid 14076:tid 14082] [client 20.10.154.253:2567] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bypass.php"] [unique_id "aSVhDHsB4Gz6Qw-pvBvh2wAAAAE"]
[Tue Nov 25 15:55:59.325711 2025] [:error] [pid 14168:tid 14176] [client 20.10.154.253:4173] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSVhD_R-ZDU0QEgAIIs5CQAAAMU"]
[Tue Nov 25 15:56:00.289272 2025] [:error] [pid 2987:tid 3009] [client 20.10.154.253:5806] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSVhEM-djEt-pTzPxnxnggAAAVQ"]
[Tue Nov 25 15:56:01.986790 2025] [:error] [pid 28836:tid 28968] [client 20.10.154.253:10100] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aSVhEZwNRsoxcLQGkTePbQAAAs0"]
[Tue Nov 25 15:56:04.524767 2025] [:error] [pid 28740:tid 28804] [client 20.10.154.253:2951] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSVhFFppQCoYxWW6V0U_pgAAAk0"]
[Tue Nov 25 15:56:06.138636 2025] [:error] [pid 14168:tid 14191] [client 20.10.154.253:2837] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSVhFvR-ZDU0QEgAIIs5EQAAANQ"]
[Tue Nov 25 15:56:07.621886 2025] [:error] [pid 14077:tid 14123] [client 20.10.154.253:8429] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock.php"] [unique_id "aSVhFxG9n7UHEkwDTygzLgAAAE0"]
[Tue Nov 25 15:56:10.510709 2025] [:error] [pid 2987:tid 2993] [client 20.10.154.253:9476] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSVhGs-djEt-pTzPxnxnigAAAUQ"]
[Tue Nov 25 15:56:11.528922 2025] [:error] [pid 14078:tid 14138] [client 20.10.154.253:3507] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSVhG9VXYbb0ii_rVoIJ6QAAAIE"]
[Tue Nov 25 15:56:12.884498 2025] [:error] [pid 28836:tid 29010] [client 20.10.154.253:3179] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSVhHJwNRsoxcLQGkTePdQAAAtQ"]
[Tue Nov 25 15:56:14.251961 2025] [:error] [pid 28740:tid 28798] [client 20.10.154.253:4211] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mail.php"] [unique_id "aSVhHlppQCoYxWW6V0U_swAAAkc"]
[Tue Nov 25 15:56:16.683966 2025] [:error] [pid 2987:tid 2996] [client 20.10.154.253:4839] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSVhIM-djEt-pTzPxnxnkQAAAUc"]
[Tue Nov 25 15:56:17.679055 2025] [:error] [pid 28740:tid 28792] [client 20.10.154.253:3136] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSVhIVppQCoYxWW6V0U_twAAAkE"]
[Tue Nov 25 15:56:18.927807 2025] [:error] [pid 28739:tid 28763] [client 20.10.154.253:2820] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSVhIhxGpKmlkG4FexRMDAAAAgE"]
[Tue Nov 25 15:56:24.088870 2025] [:error] [pid 14077:tid 14110] [client 20.10.154.253:3515] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSVhKBG9n7UHEkwDTygzRQAAAEA"]
[Tue Nov 25 15:56:31.696356 2025] [:error] [pid 14078:tid 14140] [client 20.10.154.253:2134] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file.php"] [unique_id "aSVhL9VXYbb0ii_rVoIJ-AAAAIM"]
[Tue Nov 25 15:56:33.109368 2025] [:error] [pid 14168:tid 14189] [client 20.10.154.253:5910] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file.php"] [unique_id "aSVhMfR-ZDU0QEgAIIs5MgAAANI"]
[Tue Nov 25 15:56:36.433142 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 20.10.154.253:4835] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:56:36.657885 2025] [proxy_fcgi:error] [pid 14076:tid 14086] [client 20.10.154.253:4835] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:56:36.872909 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 20.10.154.253:4835] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:56:37.625910 2025] [proxy_fcgi:error] [pid 14076:tid 14094] [client 20.10.154.253:4835] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:56:38.064994 2025] [:error] [pid 14076:tid 14095] [client 20.10.154.253:4835] [client 20.10.154.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSVhNnsB4Gz6Qw-pvBviAgAAAA4"]
[Tue Nov 25 15:56:39.870913 2025] [proxy_fcgi:error] [pid 28842:tid 29023] [client 20.10.154.253:6273] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:56:40.246618 2025] [:error] [pid 28842:tid 29024] [client 20.10.154.253:6273] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVhONNmoaPf6T4-6C1JzgAAA1Y"]
[Tue Nov 25 15:56:42.309095 2025] [:error] [pid 14077:tid 14130] [client 20.10.154.253:5001] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVhOhG9n7UHEkwDTygzVQAAAFQ"]
[Tue Nov 25 15:56:44.404530 2025] [:error] [pid 14077:tid 14133] [client 20.10.154.253:6892] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVhPBG9n7UHEkwDTygzVgAAAFc"]
[Tue Nov 25 15:56:47.223767 2025] [:error] [pid 14168:tid 14192] [client 20.10.154.253:4332] [client 20.10.154.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSVhP_R-ZDU0QEgAIIs5OAAAANU"]
[Tue Nov 25 16:00:41.086904 2025] [:error] [pid 14076:tid 14097] [client 64.227.159.35:62709] [client 64.227.159.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.159.35, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aSViKXsB4Gz6Qw-pvBvihAAAABA"]
[Tue Nov 25 16:00:41.098097 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 64.227.159.35:62709] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:36:26.312257 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 165.85.56.95:19159] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85'
[Tue Nov 25 16:36:27.364020 2025] [proxy_fcgi:error] [pid 14077:tid 14133] [client 165.85.56.95:19159] AH01071: Got error 'PHP message: start 1764059786.9102PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764059787.3635-1764059786.9102', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:36:55.312615 2025] [proxy_fcgi:error] [pid 28836:tid 29011] [client 165.85.56.95:43205] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:36:56.156263 2025] [proxy_fcgi:error] [pid 28836:tid 29007] [client 165.85.56.95:43205] AH01071: Got error 'PHP message: start 1764059815.7373', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:36:56.383728 2025] [proxy_fcgi:error] [pid 28836:tid 29007] [client 165.85.56.95:43205] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764059816.3834-1764059815.7373', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:38:57.237902 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:47810] AH01071: Got error 'PHP message: start 1764059936.6619', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:38:57.413850 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:47810] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764059937.4122-1764059936.6619', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:40:58.462847 2025] [proxy_fcgi:error] [pid 28740:tid 28794] [client 165.85.56.95:20430] AH01071: Got error 'PHP message: start 1764060057.7578', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:40:58.694844 2025] [proxy_fcgi:error] [pid 28740:tid 28794] [client 165.85.56.95:20430] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060058.6943-1764060057.7578', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:43:06.482988 2025] [proxy_fcgi:error] [pid 2987:tid 2998] [client 165.85.56.95:29105] AH01071: Got error 'PHP message: start 1764060178.9671', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:43:06.763793 2025] [proxy_fcgi:error] [pid 2987:tid 2998] [client 165.85.56.95:29105] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060186.7635-1764060178.9671', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:45:07.740957 2025] [proxy_fcgi:error] [pid 14076:tid 14081] [client 165.85.56.95:18695] AH01071: Got error 'PHP message: start 1764060307.0667', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:45:07.917255 2025] [proxy_fcgi:error] [pid 14076:tid 14081] [client 165.85.56.95:18695] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060307.9169-1764060307.0667', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:46:40.347811 2025] [proxy_fcgi:error] [pid 28842:tid 29000] [client 165.85.56.95:54957] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:46:41.976353 2025] [proxy_fcgi:error] [pid 28842:tid 28993] [client 165.85.56.95:54957] AH01071: Got error 'PHP message: start 1764060401.7608', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:46:42.788679 2025] [proxy_fcgi:error] [pid 28842:tid 28993] [client 165.85.56.95:54957] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060402.7883-1764060401.7608', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:47:31.766388 2025] [proxy_fcgi:error] [pid 28740:tid 28810] [client 165.85.56.95:61599] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:47:33.390562 2025] [proxy_fcgi:error] [pid 28740:tid 28809] [client 165.85.56.95:61599] AH01071: Got error 'PHP message: start 1764060452.7912', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:47:33.840385 2025] [proxy_fcgi:error] [pid 28740:tid 28809] [client 165.85.56.95:61599] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060453.84-1764060452.7912', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:47:48.997499 2025] [proxy_fcgi:error] [pid 2987:tid 3012] [client 165.85.56.95:9963] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:47:50.975630 2025] [proxy_fcgi:error] [pid 2987:tid 3001] [client 165.85.56.95:9963] AH01071: Got error 'PHP message: start 1764060470.6328', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:47:51.363074 2025] [proxy_fcgi:error] [pid 2987:tid 3001] [client 165.85.56.95:9963] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060471.3627-1764060470.6328', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:49:53.011444 2025] [proxy_fcgi:error] [pid 28836:tid 28956] [client 165.85.56.95:16183] AH01071: Got error 'PHP message: start 1764060591.6196', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:49:53.235352 2025] [proxy_fcgi:error] [pid 28836:tid 28956] [client 165.85.56.95:16183] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060593.2348-1764060591.6196', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:51:42.654623 2025] [proxy_fcgi:error] [pid 2987:tid 3011] [client 165.85.56.95:44532] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:51:43.927429 2025] [proxy_fcgi:error] [pid 2987:tid 3008] [client 165.85.56.95:30940] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:51:44.941432 2025] [proxy_fcgi:error] [pid 2987:tid 2989] [client 165.85.56.95:30940] AH01071: Got error 'PHP message: start 1764060704.3874', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:51:45.406348 2025] [proxy_fcgi:error] [pid 2987:tid 2989] [client 165.85.56.95:30940] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060705.4056-1764060704.3874', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:53:46.366087 2025] [proxy_fcgi:error] [pid 28740:tid 28807] [client 165.85.56.95:22103] AH01071: Got error 'PHP message: start 1764060825.6745', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:53:46.849114 2025] [proxy_fcgi:error] [pid 28740:tid 28807] [client 165.85.56.95:22103] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060826.8485-1764060825.6745', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:55:47.721055 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 165.85.56.95:18039] AH01071: Got error 'PHP message: start 1764060947.1247', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:55:48.018773 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 165.85.56.95:18039] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764060948.0182-1764060947.1247', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:57:49.011300 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 165.85.56.95:17472] AH01071: Got error 'PHP message: start 1764061068.3192', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:57:49.531258 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 165.85.56.95:17472] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061069.5308-1764061068.3192', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 16:59:18.346049 2025] [:error] [pid 2987:tid 3003] [client 20.161.8.95:5560] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSVv5s-djEt-pTzPxnx07gAAAU4"]
[Tue Nov 25 16:59:19.595450 2025] [proxy_fcgi:error] [pid 28609:tid 28620] [client 165.85.56.95:13450] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:59:20.603252 2025] [proxy_fcgi:error] [pid 28609:tid 28640] [client 165.85.56.95:13450] AH01071: Got error 'PHP message: start 1764061160.0744', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:59:20.851852 2025] [:error] [pid 14077:tid 14131] [client 20.161.8.95:5513] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSVv6BG9n7UHEkwDTyhMVAAAAFU"]
[Tue Nov 25 16:59:21.306174 2025] [proxy_fcgi:error] [pid 28609:tid 28640] [client 165.85.56.95:13450] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061161.3058-1764061160.0744', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:59:24.166618 2025] [:error] [pid 14076:tid 14097] [client 20.161.8.95:4972] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSVv7HsB4Gz6Qw-pvBvu_wAAABA"]
[Tue Nov 25 16:59:26.353017 2025] [:error] [pid 28739:tid 28769] [client 20.161.8.95:7890] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSVv7hxGpKmlkG4FexRXEAAAAgc"]
[Tue Nov 25 16:59:28.419060 2025] [proxy_fcgi:error] [pid 28740:tid 28792] [client 20.161.8.95:1061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 16:59:29.495674 2025] [:error] [pid 28740:tid 28804] [client 20.161.8.95:1061] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aSVv8VppQCoYxWW6V0VP5AAAAk0"]
[Tue Nov 25 16:59:31.537150 2025] [:error] [pid 14078:tid 14138] [client 20.161.8.95:6551] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aSVv89VXYbb0ii_rVoIY1wAAAIE"]
[Tue Nov 25 16:59:33.356959 2025] [:error] [pid 14168:tid 14186] [client 20.161.8.95:1049] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aSVv9fR-ZDU0QEgAIItD7gAAAM8"]
[Tue Nov 25 16:59:36.335246 2025] [:error] [pid 28609:tid 28631] [client 20.161.8.95:4469] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aSVv-CGGdT-nZJVs3x2gqwAAAY0"]
[Tue Nov 25 16:59:40.768199 2025] [:error] [pid 28740:tid 28801] [client 20.161.8.95:4468] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVv_FppQCoYxWW6V0VP5wAAAko"]
[Tue Nov 25 16:59:41.649777 2025] [:error] [pid 28739:tid 28774] [client 20.161.8.95:4976] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVv_RxGpKmlkG4FexRXHgAAAgw"]
[Tue Nov 25 16:59:47.317760 2025] [:error] [pid 14078:tid 14145] [client 20.161.8.95:7522] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVwA9VXYbb0ii_rVoIY6QAAAIg"]
[Tue Nov 25 16:59:49.269879 2025] [:error] [pid 28842:tid 28992] [client 20.161.8.95:5517] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVwBdNmoaPf6T4-6C1djQAAA0I"]
[Tue Nov 25 16:59:53.432630 2025] [:error] [pid 28740:tid 28804] [client 20.161.8.95:5543] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aSVwCVppQCoYxWW6V0VQGgAAAk0"]
[Tue Nov 25 16:59:54.445986 2025] [:error] [pid 28609:tid 28622] [client 20.161.8.95:7525] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aSVwCiGGdT-nZJVs3x2gugAAAYQ"]
[Tue Nov 25 16:59:55.300926 2025] [proxy_fcgi:error] [pid 14168:tid 14193] [client 165.85.56.95:32966] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:59:55.894013 2025] [:error] [pid 28609:tid 28639] [client 20.161.8.95:8191] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aSVwCyGGdT-nZJVs3x2guwAAAZU"]
[Tue Nov 25 16:59:56.296381 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 165.85.56.95:32966] AH01071: Got error 'PHP message: start 1764061195.9341', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 16:59:56.717617 2025] [proxy_fcgi:error] [pid 14168:tid 14189] [client 165.85.56.95:32966] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061196.7146-1764061195.9341', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 17:00:00.228025 2025] [:error] [pid 28609:tid 28640] [client 20.161.8.95:8187] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aSVwECGGdT-nZJVs3x2gwwAAAZY"]
[Tue Nov 25 17:00:06.141255 2025] [:error] [pid 14077:tid 14120] [client 20.161.8.95:2992] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aSVwFhG9n7UHEkwDTyhMtQAAAEo"]
[Tue Nov 25 17:00:07.805797 2025] [:error] [pid 28739:tid 28774] [client 20.161.8.95:2984] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aSVwFxxGpKmlkG4FexRXQgAAAgw"]
[Tue Nov 25 17:00:10.414888 2025] [:error] [pid 14168:tid 14192] [client 20.161.8.95:1028] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aSVwGvR-ZDU0QEgAIItEEQAAANU"]
[Tue Nov 25 17:00:11.485348 2025] [:error] [pid 14078:tid 14149] [client 20.161.8.95:8150] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aSVwG9VXYbb0ii_rVoIZEAAAAIw"]
[Tue Nov 25 17:00:13.093460 2025] [:error] [pid 14077:tid 14118] [client 20.161.8.95:1077] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/admin.php"] [unique_id "aSVwHRG9n7UHEkwDTyhMzAAAAEg"]
[Tue Nov 25 17:00:20.862184 2025] [:error] [pid 28842:tid 29004] [client 20.161.8.95:7344] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aSVwJNNmoaPf6T4-6C1dpQAAA04"]
[Tue Nov 25 17:00:26.474778 2025] [:error] [pid 14077:tid 14121] [client 20.161.8.95:5603] [client 20.161.8.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aSVwKhG9n7UHEkwDTyhM6gAAAEs"]
[Tue Nov 25 17:00:32.075169 2025] [:error] [pid 28609:tid 28618] [client 20.161.8.95:5579] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aSVwMCGGdT-nZJVs3x2g4wAAAYA"]
[Tue Nov 25 17:00:35.271742 2025] [:error] [pid 14078:tid 14155] [client 20.161.8.95:7879] [client 20.161.8.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php"] [unique_id "aSVwM9VXYbb0ii_rVoIZIQAAAJI"]
[Tue Nov 25 17:01:57.543146 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 165.85.56.95:40159] AH01071: Got error 'PHP message: start 1764061316.978', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:01:57.930622 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 165.85.56.95:40159] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061317.93-1764061316.978', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:02:07.759344 2025] [proxy_fcgi:error] [pid 28836:tid 29013] [client 165.85.56.95:45430] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 17:02:09.047169 2025] [proxy_fcgi:error] [pid 14077:tid 14113] [client 165.85.56.95:35466] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 17:02:10.218327 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 165.85.56.95:35466] AH01071: Got error 'PHP message: start 1764061329.8194', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 17:02:11.287810 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 165.85.56.95:35466] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061331.2874-1764061329.8194', referer: https://pumpbooking.com/dashboard.php
[Tue Nov 25 17:04:12.097498 2025] [proxy_fcgi:error] [pid 28842:tid 29004] [client 165.85.56.95:15412] AH01071: Got error 'PHP message: start 1764061451.5617', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:04:13.157893 2025] [proxy_fcgi:error] [pid 28842:tid 29004] [client 165.85.56.95:15412] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061453.1573-1764061451.5617', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:06:14.959910 2025] [proxy_fcgi:error] [pid 28739:tid 28775] [client 165.85.56.95:57774] AH01071: Got error 'PHP message: start 1764061574.4143', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:06:15.793280 2025] [proxy_fcgi:error] [pid 28739:tid 28775] [client 165.85.56.95:57774] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061575.7928-1764061574.4143', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:08:17.626582 2025] [proxy_fcgi:error] [pid 14168:tid 14190] [client 165.85.56.95:30105] AH01071: Got error 'PHP message: start 1764061697.0532', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:08:18.529753 2025] [proxy_fcgi:error] [pid 14168:tid 14190] [client 165.85.56.95:30105] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061698.5292-1764061697.0532', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:10:19.295634 2025] [proxy_fcgi:error] [pid 14077:tid 14129] [client 165.85.56.95:37099] AH01071: Got error 'PHP message: start 1764061818.8208', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:10:20.143814 2025] [proxy_fcgi:error] [pid 14077:tid 14129] [client 165.85.56.95:37099] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061820.1433-1764061818.8208', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:12:21.193929 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 165.85.56.95:15776] AH01071: Got error 'PHP message: start 1764061940.7101', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:12:22.035682 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 165.85.56.95:15776] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764061942.0349-1764061940.7101', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:14:22.825343 2025] [proxy_fcgi:error] [pid 28609:tid 28624] [client 165.85.56.95:11866] AH01071: Got error 'PHP message: start 1764062062.326', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:14:23.730376 2025] [proxy_fcgi:error] [pid 28609:tid 28624] [client 165.85.56.95:11866] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764062063.7298-1764062062.326', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:16:24.582656 2025] [proxy_fcgi:error] [pid 14077:tid 14118] [client 165.85.56.95:54201] AH01071: Got error 'PHP message: start 1764062184.0413', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:16:25.684387 2025] [proxy_fcgi:error] [pid 14077:tid 14118] [client 165.85.56.95:54201] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764062185.6839-1764062184.0413', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:18:26.475866 2025] [proxy_fcgi:error] [pid 2987:tid 2993] [client 165.85.56.95:38157] AH01071: Got error 'PHP message: start 1764062305.9753', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:18:27.339785 2025] [proxy_fcgi:error] [pid 2987:tid 2993] [client 165.85.56.95:38157] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764062307.3393-1764062305.9753', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:20:28.221873 2025] [proxy_fcgi:error] [pid 28609:tid 28628] [client 165.85.56.95:12720] AH01071: Got error 'PHP message: start 1764062427.6356', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:20:29.139573 2025] [proxy_fcgi:error] [pid 28609:tid 28628] [client 165.85.56.95:12720] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764062429.1389-1764062427.6356', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:22:30.282726 2025] [proxy_fcgi:error] [pid 28609:tid 28634] [client 165.85.56.95:61300] AH01071: Got error 'PHP message: start 1764062549.7905', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:22:31.211749 2025] [proxy_fcgi:error] [pid 28609:tid 28634] [client 165.85.56.95:61300] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764062551.2111-1764062549.7905', referer: https://pumpbooking.com/dashboard-bookings.php
[Tue Nov 25 17:32:51.522459 2025] [:error] [pid 14078:tid 14147] [client 101.32.49.171:38996] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aSV3w9VXYbb0ii_rVoIgiAAAAIo"]
[Tue Nov 25 18:25:21.114740 2025] [:error] [pid 28740:tid 28801] [client 54.173.250.15:45660] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aSWEEVppQCoYxWW6V0VqdwAAAko"]
[Tue Nov 25 18:52:41.830293 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:41.969605 2025] [proxy_fcgi:error] [pid 28739:tid 28771] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:42.121238 2025] [proxy_fcgi:error] [pid 28739:tid 28778] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:42.277560 2025] [proxy_fcgi:error] [pid 28739:tid 28769] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:42.434680 2025] [proxy_fcgi:error] [pid 28739:tid 28782] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:42.584629 2025] [proxy_fcgi:error] [pid 28739:tid 28786] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:42.707628 2025] [proxy_fcgi:error] [pid 28739:tid 28780] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:42.845639 2025] [proxy_fcgi:error] [pid 28739:tid 28774] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:43.002604 2025] [proxy_fcgi:error] [pid 28739:tid 28768] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:43.139045 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:43.424618 2025] [proxy_fcgi:error] [pid 28739:tid 28778] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:43.569174 2025] [proxy_fcgi:error] [pid 28739:tid 28769] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:43.714628 2025] [proxy_fcgi:error] [pid 28739:tid 28765] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:43.853480 2025] [proxy_fcgi:error] [pid 28739:tid 28777] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:44.010597 2025] [proxy_fcgi:error] [pid 28739:tid 28772] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:44.408627 2025] [proxy_fcgi:error] [pid 28739:tid 28785] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:44.552627 2025] [proxy_fcgi:error] [pid 28739:tid 28778] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:44.727746 2025] [proxy_fcgi:error] [pid 28739:tid 28773] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:44.873169 2025] [proxy_fcgi:error] [pid 28739:tid 28769] [client 138.199.60.187:35190] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:46.843089 2025] [:error] [pid 28739:tid 28769] [client 138.199.60.187:35190] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSWKfhxGpKmlkG4FexRv4gAAAgc"]
[Tue Nov 25 18:52:47.536898 2025] [:error] [pid 28740:tid 28812] [client 138.199.60.187:35646] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSWKf1ppQCoYxWW6V0VxtAAAAlU"]
[Tue Nov 25 18:52:48.452187 2025] [proxy_fcgi:error] [pid 14077:tid 14114] [client 138.199.60.187:35710] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:48.842803 2025] [:error] [pid 14077:tid 14134] [client 138.199.60.187:35710] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aSWKgBG9n7UHEkwDTyh9TQAAAFg"]
[Tue Nov 25 18:52:49.249816 2025] [proxy_fcgi:error] [pid 14078:tid 14139] [client 138.199.60.187:60330] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:49.373723 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 138.199.60.187:60330] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:52:49.522823 2025] [:error] [pid 14078:tid 14156] [client 138.199.60.187:60330] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSWKgdVXYbb0ii_rVoI3OAAAAJM"]
[Tue Nov 25 18:52:49.784217 2025] [:error] [pid 2987:tid 3004] [client 138.199.60.187:60462] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/item.php"] [unique_id "aSWKgc-djEt-pTzPxnyTUgAAAU8"]
[Tue Nov 25 18:52:50.043868 2025] [:error] [pid 14168:tid 14185] [client 138.199.60.187:60486] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/item.php"] [unique_id "aSWKgvR-ZDU0QEgAIItbkAAAAM4"]
[Tue Nov 25 18:52:50.327432 2025] [:error] [pid 28609:tid 28640] [client 138.199.60.187:60548] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/item.php"] [unique_id "aSWKgiGGdT-nZJVs3x24cQAAAZY"]
[Tue Nov 25 18:52:50.576979 2025] [:error] [pid 28836:tid 29008] [client 138.199.60.187:60568] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/item.php"] [unique_id "aSWKgpwNRsoxcLQGkTe2ygAAAtI"]
[Tue Nov 25 18:52:50.801811 2025] [:error] [pid 2987:tid 2997] [client 138.199.60.187:60588] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKgs-djEt-pTzPxnyTYwAAAUg"]
[Tue Nov 25 18:52:51.084275 2025] [:error] [pid 28739:tid 28783] [client 138.199.60.187:60630] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKgxxGpKmlkG4FexRv5wAAAhU"]
[Tue Nov 25 18:52:51.335043 2025] [:error] [pid 28739:tid 28776] [client 138.199.60.187:60644] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKgxxGpKmlkG4FexRv6QAAAg4"]
[Tue Nov 25 18:52:51.611957 2025] [:error] [pid 28842:tid 28992] [client 138.199.60.187:60664] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKg9NmoaPf6T4-6C2DFQAAA0I"]
[Tue Nov 25 18:52:51.952906 2025] [:error] [pid 28609:tid 28619] [client 138.199.60.187:60698] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKgyGGdT-nZJVs3x24dAAAAYE"]
[Tue Nov 25 19:38:56.775897 2025] [:error] [pid 14077:tid 14122] [client 43.157.188.74:33808] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSWVUBG9n7UHEkwDTyiS7gAAAEw"]
[Tue Nov 25 21:20:07.499865 2025] [proxy_fcgi:error] [pid 28739:tid 28767] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:07.641585 2025] [proxy_fcgi:error] [pid 28739:tid 28779] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:07.759999 2025] [proxy_fcgi:error] [pid 28739:tid 28776] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:07.894745 2025] [proxy_fcgi:error] [pid 28739:tid 28782] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.039235 2025] [proxy_fcgi:error] [pid 28739:tid 28770] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.162956 2025] [proxy_fcgi:error] [pid 28739:tid 28781] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.282894 2025] [proxy_fcgi:error] [pid 28739:tid 28768] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.419664 2025] [proxy_fcgi:error] [pid 28739:tid 28775] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.538155 2025] [proxy_fcgi:error] [pid 28739:tid 28769] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.657758 2025] [proxy_fcgi:error] [pid 28739:tid 28765] [client 48.210.250.238:65088] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:20:08.772418 2025] [:error] [pid 28739:tid 28764] [client 48.210.250.238:65088] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cyanamids.php"] [unique_id "aSWtCBxGpKmlkG4FexSdxQAAAgI"]
[Tue Nov 25 21:20:10.729671 2025] [:error] [pid 14078:tid 14138] [client 48.210.250.238:65128] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cyanamids.php"] [unique_id "aSWtCtVXYbb0ii_rVoJvSwAAAIE"]
[Tue Nov 25 21:20:11.824330 2025] [:error] [pid 28739:tid 28784] [client 48.210.250.238:63996] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cyanamids.php"] [unique_id "aSWtCxxGpKmlkG4FexSdxgAAAhY"]
[Tue Nov 25 21:20:14.327498 2025] [:error] [pid 14077:tid 14128] [client 48.210.250.238:63943] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cyanamids.php"] [unique_id "aSWtDhG9n7UHEkwDTyjCbgAAAFI"]
[Tue Nov 25 21:20:18.584071 2025] [:error] [pid 14078:tid 14155] [client 48.210.250.238:65125] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disengaging.php"] [unique_id "aSWtEtVXYbb0ii_rVoJvWgAAAJI"]
[Tue Nov 25 21:20:25.012170 2025] [:error] [pid 2987:tid 3007] [client 48.210.250.238:63990] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disengaging.php"] [unique_id "aSWtGc-djEt-pTzPxnzDQgAAAVI"]
[Tue Nov 25 21:20:27.167720 2025] [:error] [pid 2987:tid 2997] [client 48.210.250.238:63954] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disengaging.php"] [unique_id "aSWtG8-djEt-pTzPxnzDSAAAAUg"]
[Tue Nov 25 21:20:29.268833 2025] [:error] [pid 43843:tid 43860] [client 48.210.250.238:63953] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disengaging.php"] [unique_id "aSWtHRhx4v3NUNdMKDPuRQAAAc8"]
[Tue Nov 25 21:20:32.896705 2025] [:error] [pid 43843:tid 43869] [client 48.210.250.238:65130] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disquiet.php"] [unique_id "aSWtIBhx4v3NUNdMKDPuRwAAAdg"]
[Tue Nov 25 21:20:34.550195 2025] [:error] [pid 28739:tid 28768] [client 48.210.250.238:63985] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disquiet.php"] [unique_id "aSWtIhxGpKmlkG4FexSd5AAAAgY"]
[Tue Nov 25 21:20:36.900261 2025] [:error] [pid 28609:tid 28635] [client 48.210.250.238:65106] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disquiet.php"] [unique_id "aSWtJCGGdT-nZJVs3x3jSwAAAZE"]
[Tue Nov 25 21:20:38.284962 2025] [:error] [pid 2987:tid 3008] [client 48.210.250.238:65141] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/disquiet.php"] [unique_id "aSWtJs-djEt-pTzPxnzDWQAAAVM"]
[Tue Nov 25 21:20:39.204235 2025] [:error] [pid 14078:tid 14147] [client 48.210.250.238:63994] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duplicand.php"] [unique_id "aSWtJ9VXYbb0ii_rVoJviwAAAIo"]
[Tue Nov 25 21:20:41.281545 2025] [:error] [pid 43843:tid 43866] [client 48.210.250.238:65095] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duplicand.php"] [unique_id "aSWtKRhx4v3NUNdMKDPuUQAAAdU"]
[Tue Nov 25 21:20:43.049685 2025] [:error] [pid 2987:tid 3013] [client 48.210.250.238:65120] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duplicand.php"] [unique_id "aSWtK8-djEt-pTzPxnzDYQAAAVg"]
[Tue Nov 25 21:20:44.909045 2025] [:error] [pid 14168:tid 14193] [client 48.210.250.238:63927] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/duplicand.php"] [unique_id "aSWtLPR-ZDU0QEgAIIuFtAAAANY"]
[Tue Nov 25 21:20:48.523008 2025] [:error] [pid 28836:tid 28967] [client 48.210.250.238:63968] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/parturiency.php"] [unique_id "aSWtMJwNRsoxcLQGkTfhkgAAAsw"]
[Tue Nov 25 21:20:50.589195 2025] [:error] [pid 43981:tid 43984] [client 48.210.250.238:65123] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/parturiency.php"] [unique_id "aSWtMggZn97m_qh_RaFfXwAAAwE"]
[Tue Nov 25 21:20:52.326685 2025] [:error] [pid 14076:tid 14081] [client 48.210.250.238:65149] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/parturiency.php"] [unique_id "aSWtNHsB4Gz6Qw-pvBs3_QAAAAA"]
[Tue Nov 25 21:20:54.144425 2025] [:error] [pid 43981:tid 43983] [client 48.210.250.238:63993] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/parturiency.php"] [unique_id "aSWtNggZn97m_qh_RaFfaQAAAwA"]
[Tue Nov 25 21:20:56.227589 2025] [:error] [pid 43843:tid 43865] [client 48.210.250.238:65137] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tithings.php"] [unique_id "aSWtOBhx4v3NUNdMKDPuYwAAAdQ"]
[Tue Nov 25 21:20:57.907945 2025] [:error] [pid 2987:tid 2999] [client 48.210.250.238:63970] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tithings.php"] [unique_id "aSWtOc-djEt-pTzPxnzDcwAAAUo"]
[Tue Nov 25 21:20:59.786174 2025] [:error] [pid 14168:tid 14185] [client 48.210.250.238:65096] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tithings.php"] [unique_id "aSWtO_R-ZDU0QEgAIIuFxQAAAM4"]
[Tue Nov 25 21:21:04.057715 2025] [:error] [pid 28739:tid 28771] [client 48.210.250.238:63881] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tithings.php"] [unique_id "aSWtQBxGpKmlkG4FexSeCgAAAgk"]
[Tue Nov 25 21:21:10.767109 2025] [proxy_fcgi:error] [pid 28609:tid 28638] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:11.754240 2025] [proxy_fcgi:error] [pid 28609:tid 28636] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:11.881531 2025] [proxy_fcgi:error] [pid 28609:tid 28619] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:12.006789 2025] [proxy_fcgi:error] [pid 28609:tid 28640] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:12.125728 2025] [proxy_fcgi:error] [pid 28609:tid 28631] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:12.767706 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:13.377877 2025] [proxy_fcgi:error] [pid 28609:tid 28626] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:14.221399 2025] [proxy_fcgi:error] [pid 28609:tid 28641] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:14.340467 2025] [proxy_fcgi:error] [pid 28609:tid 28623] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:14.458375 2025] [proxy_fcgi:error] [pid 28609:tid 28642] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:14.576974 2025] [proxy_fcgi:error] [pid 28609:tid 28627] [client 48.210.250.238:65117] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:21:14.692356 2025] [:error] [pid 28609:tid 28639] [client 48.210.250.238:65117] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unprecipitously.php"] [unique_id "aSWtSiGGdT-nZJVs3x3jkQAAAZU"]
[Tue Nov 25 21:21:19.333890 2025] [:error] [pid 14168:tid 14194] [client 48.210.250.238:63967] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unprecipitously.php"] [unique_id "aSWtT_R-ZDU0QEgAIIuF0gAAANc"]
[Tue Nov 25 21:21:22.836412 2025] [:error] [pid 2987:tid 3010] [client 48.210.250.238:63311] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unprecipitously.php"] [unique_id "aSWtUs-djEt-pTzPxnzDjgAAAVU"]
[Tue Nov 25 21:21:26.806245 2025] [:error] [pid 14078:tid 14160] [client 48.210.250.238:63977] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unprecipitously.php"] [unique_id "aSWtVtVXYbb0ii_rVoJv7gAAAJc"]
[Tue Nov 25 21:21:29.447765 2025] [:error] [pid 14077:tid 14119] [client 48.210.250.238:63937] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unbefittingly.php"] [unique_id "aSWtWRG9n7UHEkwDTyjCrwAAAEk"]
[Tue Nov 25 21:21:33.805232 2025] [:error] [pid 14078:tid 14137] [client 48.210.250.238:63924] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unbefittingly.php"] [unique_id "aSWtXdVXYbb0ii_rVoJv_AAAAIA"]
[Tue Nov 25 21:21:36.078754 2025] [:error] [pid 28609:tid 28636] [client 48.210.250.238:65114] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unbefittingly.php"] [unique_id "aSWtYCGGdT-nZJVs3x3jqQAAAZI"]
[Tue Nov 25 21:21:40.154311 2025] [:error] [pid 28739:tid 28773] [client 48.210.250.238:65089] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/unbefittingly.php"] [unique_id "aSWtZBxGpKmlkG4FexSeLQAAAgs"]
[Tue Nov 25 21:21:42.351308 2025] [:error] [pid 43981:tid 43985] [client 48.210.250.238:63951] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aSWtZggZn97m_qh_RaFflgAAAwI"]
[Tue Nov 25 21:21:42.937000 2025] [:error] [pid 43981:tid 43996] [client 48.210.250.238:65093] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aSWtZggZn97m_qh_RaFflwAAAw0"]
[Tue Nov 25 21:21:43.583857 2025] [:error] [pid 14168:tid 14194] [client 48.210.250.238:63965] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aSWtZ_R-ZDU0QEgAIIuF3wAAANc"]
[Tue Nov 25 21:21:44.614023 2025] [:error] [pid 28836:tid 28961] [client 48.210.250.238:63940] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aSWtaJwNRsoxcLQGkTfhwwAAAsY"]
[Tue Nov 25 21:21:45.909679 2025] [:error] [pid 28739:tid 28782] [client 48.210.250.238:63944] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-securitiy.php"] [unique_id "aSWtaRxGpKmlkG4FexSeMQAAAhQ"]
[Tue Nov 25 21:21:47.196728 2025] [:error] [pid 28609:tid 28618] [client 48.210.250.238:63875] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-securitiy.php"] [unique_id "aSWtayGGdT-nZJVs3x3jtAAAAYA"]
[Tue Nov 25 21:21:50.338754 2025] [:error] [pid 14168:tid 14180] [client 48.210.250.238:63960] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-securitiy.php"] [unique_id "aSWtbvR-ZDU0QEgAIIuF5gAAAMk"]
[Tue Nov 25 21:21:51.414948 2025] [:error] [pid 14076:tid 14084] [client 48.210.250.238:63981] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-securitiy.php"] [unique_id "aSWtb3sB4Gz6Qw-pvBs4OQAAAAM"]
[Tue Nov 25 21:21:53.604975 2025] [:error] [pid 14168:tid 14190] [client 48.210.250.238:63991] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-ac.php"] [unique_id "aSWtcfR-ZDU0QEgAIIuF5wAAANM"]
[Tue Nov 25 21:21:59.106662 2025] [:error] [pid 43843:tid 43869] [client 48.210.250.238:65147] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-ac.php"] [unique_id "aSWtdxhx4v3NUNdMKDPukAAAAdg"]
[Tue Nov 25 21:22:06.288813 2025] [:error] [pid 2987:tid 3012] [client 48.210.250.238:63897] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-ac.php"] [unique_id "aSWtfs-djEt-pTzPxnzDrwAAAVc"]
[Tue Nov 25 21:22:09.584968 2025] [:error] [pid 28739:tid 28763] [client 48.210.250.238:65119] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nof.php"] [unique_id "aSWtgRxGpKmlkG4FexSeRwAAAgE"]
[Tue Nov 25 21:22:10.882844 2025] [:error] [pid 28836:tid 28961] [client 48.210.250.238:65144] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nof.php"] [unique_id "aSWtgpwNRsoxcLQGkTfh2QAAAsY"]
[Tue Nov 25 21:22:12.342594 2025] [:error] [pid 43981:tid 44004] [client 48.210.250.238:65103] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nof.php"] [unique_id "aSWthAgZn97m_qh_RaFfwAAAAxU"]
[Tue Nov 25 21:22:14.032020 2025] [proxy_fcgi:error] [pid 2987:tid 3004] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:22:14.149093 2025] [proxy_fcgi:error] [pid 2987:tid 2997] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:22:14.268428 2025] [proxy_fcgi:error] [pid 2987:tid 3007] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:22:14.388339 2025] [proxy_fcgi:error] [pid 2987:tid 2998] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:22:14.512197 2025] [proxy_fcgi:error] [pid 2987:tid 3008] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:22:14.656503 2025] [proxy_fcgi:error] [pid 2987:tid 3011] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 21:22:14.792045 2025] [proxy_fcgi:error] [pid 2987:tid 2996] [client 48.210.250.238:63884] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:20:54.939886 2025] [autoindex:error] [pid 43981:tid 44004] [client 139.59.30.253:65138] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 25 23:45:59.443149 2025] [:error] [pid 28609:tid 28622] [client 98.89.29.83:33738] [client 98.89.29.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aSXPNyGGdT-nZJVs3x0UlQAAAYQ"]
[Wed Nov 26 02:20:26.765133 2025] [proxy_fcgi:error] [pid 14076:tid 14096] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 02:20:26.906796 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 02:20:27.053501 2025] [proxy_fcgi:error] [pid 14076:tid 14088] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 02:20:27.941636 2025] [proxy_fcgi:error] [pid 14076:tid 14102] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 02:20:29.048966 2025] [proxy_fcgi:error] [pid 14076:tid 14089] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 02:20:29.723718 2025] [proxy_fcgi:error] [pid 14076:tid 14085] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 02:20:30.006610 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 02:20:30.145463 2025] [proxy_fcgi:error] [pid 14076:tid 14095] [client 4.189.168.3:41971] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 02:20:36.246480 2025] [proxy_fcgi:error] [pid 28609:tid 28622] [client 4.189.168.3:41922] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 02:20:36.387897 2025] [proxy_fcgi:error] [pid 28609:tid 28638] [client 4.189.168.3:41922] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 02:20:36.591699 2025] [proxy_fcgi:error] [pid 28609:tid 28637] [client 4.189.168.3:41922] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 02:20:36.946845 2025] [proxy_fcgi:error] [pid 28609:tid 28631] [client 4.189.168.3:41922] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 02:20:37.961711 2025] [proxy_fcgi:error] [pid 28609:tid 28629] [client 4.189.168.3:41922] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 02:20:48.985339 2025] [autoindex:error] [pid 28609:tid 28621] [client 4.189.168.3:41922] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 02:20:49.687798 2025] [autoindex:error] [pid 28609:tid 28642] [client 4.189.168.3:41922] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 02:20:52.124911 2025] [autoindex:error] [pid 28609:tid 28625] [client 4.189.168.3:41922] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 02:55:32.922665 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 165.85.56.6:15322] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Wed Nov 26 02:55:34.204745 2025] [proxy_fcgi:error] [pid 14078:tid 14140] [client 165.85.56.6:37360] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/index.php
[Wed Nov 26 02:55:37.766292 2025] [proxy_fcgi:error] [pid 14078:tid 14145] [client 165.85.56.6:37360] AH01071: Got error 'PHP message: start 1764096937.0353', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:55:37.766801 2025] [proxy_fcgi:error] [pid 14078:tid 14145] [client 165.85.56.6:37360] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764096937.766-1764096937.0353', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:56:07.999347 2025] [:error] [pid 43843:tid 43864] [client 117.62.235.53:51696] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSX7xxhx4v3NUNdMKDMyawAAAdM"]
[Wed Nov 26 02:56:15.756125 2025] [proxy_fcgi:error] [pid 14076:tid 14084] [client 165.85.56.6:44350] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:56:16.833368 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 165.85.56.6:44350] AH01071: Got error 'PHP message: start 1764096976.4648', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:56:17.200295 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 165.85.56.6:44350] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764096977.1998-1764096976.4648', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:56:17.995773 2025] [proxy_fcgi:error] [pid 14078:tid 14157] [client 165.85.56.6:6168] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:56:18.956320 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 165.85.56.6:6168] AH01071: Got error 'PHP message: start 1764096978.7927', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 02:56:19.201934 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 165.85.56.6:6168] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764096979.2015-1764096978.7927', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 03:32:46.948670 2025] [:error] [pid 50572:tid 50651] [client 54.173.250.15:48434] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aSYEXqQcItlFCl5XsA9InwAAAI0"]
[Wed Nov 26 03:51:34.806441 2025] [:error] [pid 3493:tid 3501] [client 124.156.225.181:47874] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSYIxmBUa93ugXko11NLbAAAAQY"]
[Wed Nov 26 05:23:50.795305 2025] [:error] [pid 38796:tid 38806] [client 130.33.48.76:43368] [client 130.33.48.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.33.48.76, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSYeZgGcUUzaXxvjCXOsGgAAAUc"], referer: https://www.google.de/
[Wed Nov 26 05:23:50.806428 2025] [proxy_fcgi:error] [pid 38796:tid 38806] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:23:50.965017 2025] [proxy_fcgi:error] [pid 38796:tid 38811] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:23:51.651100 2025] [proxy_fcgi:error] [pid 38796:tid 38821] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 05:23:51.791742 2025] [proxy_fcgi:error] [pid 38796:tid 38807] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 05:23:52.091113 2025] [proxy_fcgi:error] [pid 38796:tid 38817] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:23:52.261726 2025] [proxy_fcgi:error] [pid 38796:tid 38816] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:23:54.326726 2025] [proxy_fcgi:error] [pid 38796:tid 38815] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:23:54.467692 2025] [proxy_fcgi:error] [pid 38796:tid 38808] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:23:55.014262 2025] [proxy_fcgi:error] [pid 38796:tid 38805] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:23:56.009425 2025] [proxy_fcgi:error] [pid 38796:tid 38814] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:23:56.154367 2025] [proxy_fcgi:error] [pid 38796:tid 38801] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:23:56.314561 2025] [proxy_fcgi:error] [pid 38796:tid 38823] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:23:56.613338 2025] [proxy_fcgi:error] [pid 38796:tid 38806] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:23:56.910664 2025] [proxy_fcgi:error] [pid 38796:tid 38800] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:23:57.565561 2025] [proxy_fcgi:error] [pid 38796:tid 38807] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:23:57.708103 2025] [proxy_fcgi:error] [pid 38796:tid 38813] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:23:57.849889 2025] [proxy_fcgi:error] [pid 38796:tid 38817] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:23:57.992669 2025] [proxy_fcgi:error] [pid 38796:tid 38802] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:23:58.329393 2025] [proxy_fcgi:error] [pid 38796:tid 38799] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:23:58.765472 2025] [proxy_fcgi:error] [pid 38796:tid 38810] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:23:59.062847 2025] [proxy_fcgi:error] [pid 38796:tid 38815] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:23:59.239077 2025] [proxy_fcgi:error] [pid 38796:tid 38818] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:23:59.444966 2025] [proxy_fcgi:error] [pid 38796:tid 38803] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:23:59.587341 2025] [proxy_fcgi:error] [pid 38796:tid 38822] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:23:59.731953 2025] [proxy_fcgi:error] [pid 38796:tid 38814] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:24:00.351818 2025] [proxy_fcgi:error] [pid 38796:tid 38804] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:00.636508 2025] [proxy_fcgi:error] [pid 38796:tid 38811] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:00.907310 2025] [proxy_fcgi:error] [pid 38796:tid 38812] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:01.171840 2025] [proxy_fcgi:error] [pid 38796:tid 38813] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:24:01.773682 2025] [proxy_fcgi:error] [pid 38796:tid 38817] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:24:01.917215 2025] [proxy_fcgi:error] [pid 38796:tid 38799] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:02.237234 2025] [proxy_fcgi:error] [pid 38796:tid 38810] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:24:02.389825 2025] [proxy_fcgi:error] [pid 38796:tid 38815] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:02.624340 2025] [proxy_fcgi:error] [pid 38796:tid 38808] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:24:02.776838 2025] [proxy_fcgi:error] [pid 38796:tid 38809] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:24:02.920079 2025] [proxy_fcgi:error] [pid 38796:tid 38805] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:03.166901 2025] [proxy_fcgi:error] [pid 38796:tid 38803] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:03.840261 2025] [proxy_fcgi:error] [pid 38796:tid 38819] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:03.986477 2025] [proxy_fcgi:error] [pid 38796:tid 38814] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:24:04.129429 2025] [proxy_fcgi:error] [pid 38796:tid 38820] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:04.271019 2025] [proxy_fcgi:error] [pid 38796:tid 38801] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:24:04.427469 2025] [proxy_fcgi:error] [pid 38796:tid 38823] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:07.099095 2025] [proxy_fcgi:error] [pid 38796:tid 38813] [client 130.33.48.76:43368] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:07.246205 2025] [:error] [pid 38796:tid 38817] [client 130.33.48.76:43368] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aSYedwGcUUzaXxvjCXOsWgAAAVI"], referer: https://www.bing.com/
[Wed Nov 26 05:24:09.095961 2025] [proxy_fcgi:error] [pid 3493:tid 3500] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:24:09.215016 2025] [proxy_fcgi:error] [pid 3493:tid 3509] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:09.350837 2025] [proxy_fcgi:error] [pid 3493:tid 3516] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:09.641864 2025] [proxy_fcgi:error] [pid 3493:tid 3497] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:09.764047 2025] [proxy_fcgi:error] [pid 3493:tid 3506] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:09.883773 2025] [proxy_fcgi:error] [pid 3493:tid 3499] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:24:10.062003 2025] [proxy_fcgi:error] [pid 3493:tid 3519] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:10.235831 2025] [proxy_fcgi:error] [pid 3493:tid 3502] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 05:24:10.356836 2025] [proxy_fcgi:error] [pid 3493:tid 3514] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Wed Nov 26 05:24:10.476104 2025] [proxy_fcgi:error] [pid 3493:tid 3510] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:10.617799 2025] [proxy_fcgi:error] [pid 3493:tid 3512] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Nov 26 05:24:10.743627 2025] [proxy_fcgi:error] [pid 3493:tid 3498] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:10.869309 2025] [proxy_fcgi:error] [pid 3493:tid 3495] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:11.005018 2025] [proxy_fcgi:error] [pid 3493:tid 3507] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 05:24:11.135692 2025] [proxy_fcgi:error] [pid 3493:tid 3508] [client 130.33.48.76:43388] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:24:14.059531 2025] [:error] [pid 3493:tid 3499] [client 130.33.48.76:43388] [client 130.33.48.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.33.48.76, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSYefmBUa93ugXko11NuiQAAAQQ"], referer: https://duckduckgo.com/
[Wed Nov 26 05:24:18.121829 2025] [:error] [pid 3493:tid 3500] [client 130.33.48.76:43388] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSYegmBUa93ugXko11NumQAAAQU"], referer: https://www.google.com/
[Wed Nov 26 05:24:29.931270 2025] [proxy_fcgi:error] [pid 38796:tid 38819] [client 130.33.48.76:43369] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Wed Nov 26 05:24:30.299175 2025] [:error] [pid 38796:tid 38806] [client 130.33.48.76:43369] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/404.php"] [unique_id "aSYejgGcUUzaXxvjCXOsnQAAAUc"], referer: https://www.yahoo.com/
[Wed Nov 26 05:24:33.525888 2025] [:error] [pid 3011:tid 3058] [client 130.33.48.76:43385] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSYekUb0BA3GljiGlI6_xwAAAFA"], referer: https://www.google.fr/
[Wed Nov 26 05:24:35.032599 2025] [:error] [pid 3493:tid 3512] [client 130.33.48.76:43265] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSYek2BUa93ugXko11NurQAAARE"], referer: https://duckduckgo.com/
[Wed Nov 26 05:24:37.376729 2025] [:error] [pid 38796:tid 38808] [client 130.33.48.76:43335] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSYelQGcUUzaXxvjCXOsnwAAAUk"], referer: https://www.yahoo.com/
[Wed Nov 26 05:24:38.574506 2025] [:error] [pid 3010:tid 3035] [client 130.33.48.76:43367] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSYelkWl16-roARWvItfWQAAABU"], referer: https://www.google.fr/
[Wed Nov 26 05:24:40.159720 2025] [:error] [pid 3012:tid 3069] [client 130.33.48.76:43294] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSYemEfo8Sm1Un9NK6gv4QAAAIA"], referer: https://www.google.de/
[Wed Nov 26 05:24:42.983657 2025] [:error] [pid 3010:tid 3021] [client 130.33.48.76:43340] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSYemkWl16-roARWvItfYAAAAAc"], referer: https://duckduckgo.com/
[Wed Nov 26 05:24:44.111077 2025] [:error] [pid 3097:tid 3116] [client 130.33.48.76:43384] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aSYenOVgdOH9N9jhT56S8QAAAM8"], referer: https://duckduckgo.com/
[Wed Nov 26 05:24:46.486421 2025] [:error] [pid 3010:tid 3029] [client 130.33.48.76:43351] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSYenkWl16-roARWvItfaQAAAA8"], referer: https://www.google.fr/
[Wed Nov 26 05:24:48.080526 2025] [:error] [pid 3012:tid 3084] [client 130.33.48.76:43345] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSYeoEfo8Sm1Un9NK6gv7QAAAI8"], referer: https://www.google.co.uk/
[Wed Nov 26 05:24:52.125798 2025] [:error] [pid 3011:tid 3048] [client 130.33.48.76:43279] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSYepEb0BA3GljiGlI6_4wAAAEY"], referer: https://www.bing.com/
[Wed Nov 26 05:24:53.104014 2025] [:error] [pid 3097:tid 3112] [client 130.33.48.76:43286] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSYepeVgdOH9N9jhT56TGAAAAMs"], referer: https://duckduckgo.com/
[Wed Nov 26 05:24:55.670148 2025] [:error] [pid 38796:tid 38804] [client 130.33.48.76:43363] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSYepwGcUUzaXxvjCXOsygAAAUU"], referer: https://www.bing.com/
[Wed Nov 26 05:24:56.410369 2025] [:error] [pid 3097:tid 3123] [client 130.33.48.76:43381] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSYeqOVgdOH9N9jhT56TIAAAANY"], referer: https://www.google.co.uk/
[Wed Nov 26 05:24:57.900169 2025] [:error] [pid 3097:tid 3115] [client 130.33.48.76:43361] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSYeqeVgdOH9N9jhT56TJAAAAM4"], referer: https://www.google.co.uk/
[Wed Nov 26 05:25:03.588137 2025] [:error] [pid 38796:tid 38805] [client 130.33.48.76:43358] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSYerwGcUUzaXxvjCXOs2gAAAUY"], referer: https://www.bing.com/
[Wed Nov 26 05:25:06.464334 2025] [:error] [pid 3493:tid 3509] [client 130.33.48.76:43338] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSYesmBUa93ugXko11NuyAAAAQ4"], referer: https://www.bing.com/
[Wed Nov 26 05:25:09.469864 2025] [:error] [pid 3012:tid 3089] [client 130.33.48.76:43329] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSYetUfo8Sm1Un9NK6gwBAAAAJQ"], referer: https://www.google.com/
[Wed Nov 26 05:25:10.543220 2025] [:error] [pid 38796:tid 38811] [client 130.33.48.76:43283] [client 130.33.48.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSYetgGcUUzaXxvjCXOs4QAAAUw"], referer: https://www.yahoo.com/
[Wed Nov 26 05:25:13.109752 2025] [proxy_fcgi:error] [pid 38796:tid 38805] [client 130.33.48.76:43292] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Wed Nov 26 05:25:13.239155 2025] [proxy_fcgi:error] [pid 38796:tid 38803] [client 130.33.48.76:43292] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:25:13.360468 2025] [autoindex:error] [pid 38796:tid 38820] [client 130.33.48.76:43292] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 05:25:14.495155 2025] [proxy_fcgi:error] [pid 38796:tid 38817] [client 130.33.48.76:43292] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Wed Nov 26 05:25:14.665055 2025] [proxy_fcgi:error] [pid 38796:tid 38808] [client 130.33.48.76:43292] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Wed Nov 26 05:25:14.839240 2025] [proxy_fcgi:error] [pid 38796:tid 38812] [client 130.33.48.76:43292] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Wed Nov 26 08:58:13.921932 2025] [proxy_fcgi:error] [pid 34744:tid 34808] [client 165.85.56.95:51449] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Wed Nov 26 08:58:15.691064 2025] [proxy_fcgi:error] [pid 34744:tid 34823] [client 165.85.56.95:51449] AH01071: Got error 'PHP message: start 1764118695.348', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 08:58:15.691483 2025] [proxy_fcgi:error] [pid 34744:tid 34823] [client 165.85.56.95:51449] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118695.6908-1764118695.348', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:00:17.472832 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 165.85.56.95:61564] AH01071: Got error 'PHP message: start 1764118816.8202', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 26 09:00:17.473237 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 165.85.56.95:61564] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118817.4726-1764118816.8202', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 26 09:02:16.261850 2025] [proxy_fcgi:error] [pid 34742:tid 34754] [client 165.85.56.95:22800] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:18.177351 2025] [proxy_fcgi:error] [pid 34742:tid 34766] [client 165.85.56.95:22800] AH01071: Got error 'PHP message: start 1764118937.2774', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:18.178006 2025] [proxy_fcgi:error] [pid 34742:tid 34766] [client 165.85.56.95:22800] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118938.1768-1764118937.2774', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:33.584676 2025] [proxy_fcgi:error] [pid 34830:tid 34842] [client 165.85.56.95:48796] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:34.203837 2025] [proxy_fcgi:error] [pid 34830:tid 34853] [client 165.85.56.95:48796] AH01071: Got error 'PHP message: start 1764118953.9212', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:34.204388 2025] [proxy_fcgi:error] [pid 34830:tid 34853] [client 165.85.56.95:48796] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118954.2037-1764118953.9212', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:41.514448 2025] [proxy_fcgi:error] [pid 34744:tid 34805] [client 165.85.56.95:62921] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:42.017083 2025] [proxy_fcgi:error] [pid 34744:tid 34822] [client 165.85.56.95:62921] AH01071: Got error 'PHP message: start 1764118961.7827', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:42.017796 2025] [proxy_fcgi:error] [pid 34744:tid 34822] [client 165.85.56.95:62921] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118962.0169-1764118961.7827', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:51.105581 2025] [proxy_fcgi:error] [pid 35540:tid 35558] [client 165.85.56.95:36680] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:51.651013 2025] [proxy_fcgi:error] [pid 35540:tid 35547] [client 165.85.56.95:36680] AH01071: Got error 'PHP message: start 1764118971.458', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:02:51.651500 2025] [proxy_fcgi:error] [pid 35540:tid 35547] [client 165.85.56.95:36680] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118971.6507-1764118971.458', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:00.080192 2025] [proxy_fcgi:error] [pid 35540:tid 35563] [client 165.85.56.95:50324] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:00.781202 2025] [proxy_fcgi:error] [pid 35540:tid 35548] [client 165.85.56.95:50324] AH01071: Got error 'PHP message: start 1764118980.5364', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:00.781812 2025] [proxy_fcgi:error] [pid 35540:tid 35548] [client 165.85.56.95:50324] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118980.7808-1764118980.5364', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:07.712713 2025] [proxy_fcgi:error] [pid 34742:tid 34749] [client 165.85.56.95:42888] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:09.373784 2025] [proxy_fcgi:error] [pid 34742:tid 34761] [client 165.85.56.95:42888] AH01071: Got error 'PHP message: start 1764118989.2698', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:09.374397 2025] [proxy_fcgi:error] [pid 34742:tid 34761] [client 165.85.56.95:42888] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118989.3736-1764118989.2698', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:16.757638 2025] [proxy_fcgi:error] [pid 34742:tid 34770] [client 165.85.56.95:42888] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:17.306501 2025] [proxy_fcgi:error] [pid 34742:tid 34754] [client 165.85.56.95:42888] AH01071: Got error 'PHP message: start 1764118997.0365', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:03:17.306957 2025] [proxy_fcgi:error] [pid 34742:tid 34754] [client 165.85.56.95:42888] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764118997.3062-1764118997.0365', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:09.057663 2025] [proxy_fcgi:error] [pid 45836:tid 45868] [client 165.85.56.95:19435] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:09.881791 2025] [proxy_fcgi:error] [pid 45836:tid 45861] [client 165.85.56.95:19435] AH01071: Got error 'PHP message: start 1764119049.5661', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:09.882365 2025] [proxy_fcgi:error] [pid 45836:tid 45861] [client 165.85.56.95:19435] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119049.8813-1764119049.5661', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:16.973946 2025] [proxy_fcgi:error] [pid 45836:tid 45861] [client 165.85.56.95:21075] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:17.810701 2025] [proxy_fcgi:error] [pid 45836:tid 45856] [client 165.85.56.95:21075] AH01071: Got error 'PHP message: start 1764119057.3786', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:17.811188 2025] [proxy_fcgi:error] [pid 45836:tid 45856] [client 165.85.56.95:21075] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119057.8099-1764119057.3786', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:28.945167 2025] [proxy_fcgi:error] [pid 35540:tid 35567] [client 165.85.56.95:29874] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:29.728922 2025] [proxy_fcgi:error] [pid 35540:tid 35566] [client 165.85.56.95:29874] AH01071: Got error 'PHP message: start 1764119069.6473PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119069.7284-1764119069.6473', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:35.402589 2025] [proxy_fcgi:error] [pid 35540:tid 35553] [client 165.85.56.95:29874] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:35.782570 2025] [proxy_fcgi:error] [pid 35540:tid 35565] [client 165.85.56.95:29874] AH01071: Got error 'PHP message: start 1764119075.7402PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119075.7821-1764119075.7402', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:40.879815 2025] [proxy_fcgi:error] [pid 35540:tid 35563] [client 165.85.56.95:29874] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:04:41.297561 2025] [proxy_fcgi:error] [pid 35540:tid 35565] [client 165.85.56.95:29874] AH01071: Got error 'PHP message: start 1764119081.1466PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119081.2971-1764119081.1466', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:05:10.729110 2025] [proxy_fcgi:error] [pid 34743:tid 34785] [client 165.85.56.95:15963] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:05:11.407272 2025] [proxy_fcgi:error] [pid 34743:tid 34791] [client 165.85.56.95:15963] AH01071: Got error 'PHP message: start 1764119111.0448', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:05:11.407742 2025] [proxy_fcgi:error] [pid 34743:tid 34791] [client 165.85.56.95:15963] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119111.407-1764119111.0448', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:05:27.898803 2025] [:error] [pid 45836:tid 45863] [client 209.35.174.182:20161] [client 209.35.174.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.35.174.182, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSZSV5frnOGqL-seZAz3kwAAANE"]
[Wed Nov 26 09:05:27.915802 2025] [proxy_fcgi:error] [pid 45836:tid 45863] [client 209.35.174.182:20161] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 09:05:40.047951 2025] [proxy_fcgi:error] [pid 45836:tid 45854] [client 165.85.56.95:59618] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:05:40.767702 2025] [proxy_fcgi:error] [pid 45836:tid 45870] [client 165.85.56.95:59618] AH01071: Got error 'PHP message: start 1764119140.4435', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:05:40.768234 2025] [proxy_fcgi:error] [pid 45836:tid 45870] [client 165.85.56.95:59618] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119140.7675-1764119140.4435', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:10.055655 2025] [proxy_fcgi:error] [pid 34743:tid 34791] [client 165.85.56.95:30245] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:11.244974 2025] [proxy_fcgi:error] [pid 34743:tid 34798] [client 165.85.56.95:30245] AH01071: Got error 'PHP message: start 1764119170.5181', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:11.245377 2025] [proxy_fcgi:error] [pid 34743:tid 34798] [client 165.85.56.95:30245] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119171.2447-1764119170.5181', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:30.498803 2025] [proxy_fcgi:error] [pid 45901:tid 45922] [client 165.85.56.95:43149] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:31.657929 2025] [proxy_fcgi:error] [pid 45901:tid 45917] [client 165.85.56.95:43149] AH01071: Got error 'PHP message: start 1764119191.2531PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119191.6574-1764119191.2531', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:40.789536 2025] [proxy_fcgi:error] [pid 34744:tid 34818] [client 165.85.56.95:63019] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:41.569591 2025] [proxy_fcgi:error] [pid 34744:tid 34820] [client 165.85.56.95:63019] AH01071: Got error 'PHP message: start 1764119201.2442', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:41.570083 2025] [proxy_fcgi:error] [pid 34744:tid 34820] [client 165.85.56.95:63019] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764119201.5694-1764119201.2442', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:06:51.337422 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 165.85.56.95:20379] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-25
[Wed Nov 26 09:14:43.384818 2025] [:error] [pid 45836:tid 45869] [client 36.41.75.167:34382] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aSZUg5frnOGqL-seZAz6NAAAANc"]
[Wed Nov 26 09:49:58.011278 2025] [proxy_fcgi:error] [pid 45836:tid 45859] [client 165.85.56.95:51458] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:49:59.509812 2025] [proxy_fcgi:error] [pid 45836:tid 45851] [client 165.85.56.95:51458] AH01071: Got error 'PHP message: start 1764121798.701', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:49:59.510243 2025] [proxy_fcgi:error] [pid 45836:tid 45851] [client 165.85.56.95:51458] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764121799.5094-1764121798.701', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:50:00.303022 2025] [proxy_fcgi:error] [pid 45836:tid 45865] [client 165.85.56.95:25635] AH01071: Got error 'PHP message: start 1764121799.5114', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:50:00.303316 2025] [proxy_fcgi:error] [pid 45836:tid 45865] [client 165.85.56.95:25635] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764121800.3027-1764121799.5114', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:50:05.826902 2025] [proxy_fcgi:error] [pid 45836:tid 45857] [client 165.85.56.95:25635] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:50:07.235209 2025] [proxy_fcgi:error] [pid 45836:tid 45853] [client 165.85.56.95:25635] AH01071: Got error 'PHP message: start 1764121806.7782', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:50:07.606818 2025] [proxy_fcgi:error] [pid 45836:tid 45853] [client 165.85.56.95:25635] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764121807.6064-1764121806.7782', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:52:09.090700 2025] [proxy_fcgi:error] [pid 34743:tid 34777] [client 165.85.56.95:8641] AH01071: Got error 'PHP message: start 1764121928.5234', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 26 09:52:09.635103 2025] [proxy_fcgi:error] [pid 34743:tid 34777] [client 165.85.56.95:8641] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764121929.6344-1764121928.5234', referer: https://pumpbooking.com/dashboard-bookings.php
[Wed Nov 26 09:54:53.672506 2025] [proxy_fcgi:error] [pid 34743:tid 34795] [client 165.85.56.95:8239] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/
[Wed Nov 26 09:54:55.185278 2025] [proxy_fcgi:error] [pid 34743:tid 34791] [client 165.85.56.95:8239] AH01071: Got error 'PHP message: start 1764122094.5152', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:54:55.185952 2025] [proxy_fcgi:error] [pid 34743:tid 34791] [client 165.85.56.95:8239] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764122095.1845-1764122094.5152', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:58:07.996767 2025] [proxy_fcgi:error] [pid 34742:tid 34758] [client 165.85.56.95:47501] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-26
[Wed Nov 26 09:59:14.441797 2025] [proxy_fcgi:error] [pid 34743:tid 34781] [client 165.85.56.95:15011] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingID=44661
[Wed Nov 26 09:59:27.707669 2025] [proxy_fcgi:error] [pid 34830:tid 34834] [client 165.85.56.95:3587] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: clientSurname in /home/pumpbooking/public_html/calendar.php on line 80', referer: https://pumpbooking.com/booking.php?bookingID=44661
[Wed Nov 26 09:59:34.945189 2025] [proxy_fcgi:error] [pid 34830:tid 34841] [client 165.85.56.95:3587] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/calendar.php
[Wed Nov 26 09:59:37.247049 2025] [proxy_fcgi:error] [pid 34830:tid 34843] [client 165.85.56.95:3587] AH01071: Got error 'PHP message: start 1764122375.8465', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:59:37.247558 2025] [proxy_fcgi:error] [pid 34830:tid 34843] [client 165.85.56.95:3587] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764122377.2465-1764122375.8465', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:59:52.809592 2025] [proxy_fcgi:error] [pid 34743:tid 34776] [client 165.85.56.95:55297] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:59:53.536333 2025] [proxy_fcgi:error] [pid 34743:tid 34796] [client 165.85.56.95:55297] AH01071: Got error 'PHP message: start 1764122393.1249', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 09:59:53.536913 2025] [proxy_fcgi:error] [pid 34743:tid 34796] [client 165.85.56.95:55297] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764122393.5362-1764122393.1249', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:00:31.008911 2025] [proxy_fcgi:error] [pid 35540:tid 35569] [client 165.85.56.95:20853] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-22
[Wed Nov 26 10:22:45.464674 2025] [proxy_fcgi:error] [pid 45836:tid 45852] [client 165.85.56.95:57436] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:22:46.205827 2025] [proxy_fcgi:error] [pid 45836:tid 45870] [client 165.85.56.95:57436] AH01071: Got error 'PHP message: start 1764123765.7472', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:22:46.206261 2025] [proxy_fcgi:error] [pid 45836:tid 45870] [client 165.85.56.95:57436] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764123766.2055-1764123765.7472', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:22:46.923862 2025] [proxy_fcgi:error] [pid 10383:tid 10399] [client 165.85.56.95:26479] AH01071: Got error 'PHP message: start 1764123766.2079', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:22:46.924461 2025] [proxy_fcgi:error] [pid 10383:tid 10399] [client 165.85.56.95:26479] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764123766.9234-1764123766.2079', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:22:59.970114 2025] [proxy_fcgi:error] [pid 45901:tid 45911] [client 165.85.56.95:37133] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:23:01.516623 2025] [proxy_fcgi:error] [pid 45901:tid 45907] [client 165.85.56.95:37133] AH01071: Got error 'PHP message: start 1764123780.9544', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:23:02.287898 2025] [proxy_fcgi:error] [pid 45901:tid 45907] [client 165.85.56.95:37133] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764123782.2875-1764123780.9544', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:33:18.903236 2025] [proxy_fcgi:error] [pid 10383:tid 10404] [client 165.85.56.95:37339] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-19
[Wed Nov 26 10:35:21.660730 2025] [proxy_fcgi:error] [pid 45836:tid 45867] [client 165.85.56.95:23907] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44662
[Wed Nov 26 10:35:23.527167 2025] [proxy_fcgi:error] [pid 45836:tid 45846] [client 165.85.56.95:23907] AH01071: Got error 'PHP message: start 1764124522.8718', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:35:24.169051 2025] [proxy_fcgi:error] [pid 45836:tid 45846] [client 165.85.56.95:23907] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764124524.1687-1764124522.8718', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:35:42.038172 2025] [proxy_fcgi:error] [pid 35540:tid 35566] [client 165.85.56.95:18563] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-19
[Wed Nov 26 10:38:15.187807 2025] [proxy_fcgi:error] [pid 10383:tid 10390] [client 165.85.56.95:6773] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44662
[Wed Nov 26 10:38:16.652627 2025] [proxy_fcgi:error] [pid 10383:tid 10394] [client 165.85.56.95:35302] AH01071: Got error 'PHP message: start 1764124695.9034', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:38:17.528194 2025] [proxy_fcgi:error] [pid 10383:tid 10394] [client 165.85.56.95:35302] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764124697.5273-1764124695.9034', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:38:18.393402 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 165.85.56.95:6773] AH01071: Got error 'PHP message: start 1764124697.5303', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:38:19.672146 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 165.85.56.95:6773] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764124699.6716-1764124697.5303', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:38:25.248278 2025] [proxy_fcgi:error] [pid 10383:tid 10404] [client 165.85.56.95:6773] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:38:27.010177 2025] [proxy_fcgi:error] [pid 10383:tid 10388] [client 165.85.56.95:6773] AH01071: Got error 'PHP message: start 1764124706.4945', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:38:27.010677 2025] [proxy_fcgi:error] [pid 10383:tid 10388] [client 165.85.56.95:6773] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764124707.0099-1764124706.4945', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:43:11.933752 2025] [proxy_fcgi:error] [pid 45836:tid 45862] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-21
[Wed Nov 26 10:43:19.229614 2025] [proxy_fcgi:error] [pid 45836:tid 45857] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44663
[Wed Nov 26 10:43:20.175944 2025] [proxy_fcgi:error] [pid 45836:tid 45859] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: start 1764124999.6636', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:43:20.176370 2025] [proxy_fcgi:error] [pid 45836:tid 45859] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764125000.1758-1764124999.6636', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:43:28.540016 2025] [proxy_fcgi:error] [pid 45836:tid 45855] [client 165.85.56.95:4468] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-21
[Wed Nov 26 10:44:13.090382 2025] [proxy_fcgi:error] [pid 10383:tid 10407] [client 165.85.56.95:22391] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-21
[Wed Nov 26 10:55:22.341951 2025] [proxy_fcgi:error] [pid 34744:tid 34827] [client 165.85.56.95:10425] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44663
[Wed Nov 26 10:55:22.923300 2025] [proxy_fcgi:error] [pid 34744:tid 34808] [client 165.85.56.95:10425] AH01071: Got error 'PHP message: start 1764125722.6223', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:55:22.923790 2025] [proxy_fcgi:error] [pid 34744:tid 34808] [client 165.85.56.95:10425] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764125722.9231-1764125722.6223', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:55:23.541816 2025] [proxy_fcgi:error] [pid 45901:tid 45904] [client 165.85.56.95:28140] AH01071: Got error 'PHP message: start 1764125722.926', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:55:23.542276 2025] [proxy_fcgi:error] [pid 45901:tid 45904] [client 165.85.56.95:28140] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764125723.5415-1764125722.926', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:55:30.585153 2025] [proxy_fcgi:error] [pid 34742:tid 34755] [client 165.85.56.95:22056] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:55:31.486627 2025] [proxy_fcgi:error] [pid 34742:tid 34760] [client 165.85.56.95:22056] AH01071: Got error 'PHP message: start 1764125731.0684', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:55:31.611642 2025] [proxy_fcgi:error] [pid 34742:tid 34760] [client 165.85.56.95:22056] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764125731.6111-1764125731.0684', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:58:16.088867 2025] [proxy_fcgi:error] [pid 35540:tid 35561] [client 165.85.56.95:38033] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-20
[Wed Nov 26 10:58:26.914752 2025] [proxy_fcgi:error] [pid 10383:tid 10402] [client 165.85.56.95:5141] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44664
[Wed Nov 26 10:58:27.774836 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 165.85.56.95:5141] AH01071: Got error 'PHP message: start 1764125907.3938', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:58:28.071255 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 165.85.56.95:5141] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764125908.0709-1764125907.3938', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 10:58:33.881892 2025] [proxy_fcgi:error] [pid 10383:tid 10387] [client 165.85.56.95:5141] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: jobTypeName in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Trying to access array offset on value of type null in /home/pumpbooking/public_html/exportToExcel.php on line 244PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-20
[Wed Nov 26 11:15:17.684191 2025] [proxy_fcgi:error] [pid 34830:tid 34837] [client 165.85.56.95:32842] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44664
[Wed Nov 26 11:15:18.532628 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 165.85.56.95:9117] AH01071: Got error 'PHP message: start 1764126918.0415', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:15:18.810057 2025] [proxy_fcgi:error] [pid 34742:tid 34767] [client 165.85.56.95:9117] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764126918.8095-1764126918.0415', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:15:19.476532 2025] [proxy_fcgi:error] [pid 34830:tid 34850] [client 165.85.56.95:32842] AH01071: Got error 'PHP message: start 1764126918.8121', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:15:19.694661 2025] [proxy_fcgi:error] [pid 34830:tid 34850] [client 165.85.56.95:32842] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764126919.6937-1764126918.8121', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:15:32.741445 2025] [proxy_fcgi:error] [pid 10383:tid 10396] [client 165.85.56.95:49178] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:15:34.145220 2025] [proxy_fcgi:error] [pid 10383:tid 10389] [client 165.85.56.95:49178] AH01071: Got error 'PHP message: start 1764126933.6186', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:15:34.145819 2025] [proxy_fcgi:error] [pid 10383:tid 10389] [client 165.85.56.95:49178] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764126934.1448-1764126933.6186', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:20:36.355889 2025] [proxy_fcgi:error] [pid 35540:tid 35554] [client 165.85.56.95:34828] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-22
[Wed Nov 26 11:21:39.600586 2025] [proxy_fcgi:error] [pid 10383:tid 10398] [client 165.85.56.95:59210] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44665
[Wed Nov 26 11:21:40.318289 2025] [proxy_fcgi:error] [pid 10383:tid 10396] [client 165.85.56.95:59210] AH01071: Got error 'PHP message: start 1764127300.0155', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:21:40.318863 2025] [proxy_fcgi:error] [pid 10383:tid 10396] [client 165.85.56.95:59210] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:21:40.423184 2025] [proxy_fcgi:error] [pid 10383:tid 10396] [client 165.85.56.95:59210] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764127300.4228-1764127300.0155', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:21:47.899013 2025] [proxy_fcgi:error] [pid 10383:tid 10405] [client 165.85.56.95:6812] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-22
[Wed Nov 26 11:28:03.658632 2025] [proxy_fcgi:error] [pid 35540:tid 35567] [client 165.85.56.95:62281] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44665
[Wed Nov 26 11:28:04.787945 2025] [proxy_fcgi:error] [pid 45901:tid 45925] [client 165.85.56.95:29449] AH01071: Got error 'PHP message: start 1764127684.0084', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:04.788326 2025] [proxy_fcgi:error] [pid 45901:tid 45925] [client 165.85.56.95:29449] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:04.864177 2025] [proxy_fcgi:error] [pid 45901:tid 45925] [client 165.85.56.95:29449] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764127684.8637-1764127684.0084', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:05.696831 2025] [proxy_fcgi:error] [pid 35540:tid 35564] [client 165.85.56.95:62281] AH01071: Got error 'PHP message: start 1764127684.8661', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:05.697224 2025] [proxy_fcgi:error] [pid 35540:tid 35564] [client 165.85.56.95:62281] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:05.791877 2025] [proxy_fcgi:error] [pid 35540:tid 35564] [client 165.85.56.95:62281] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764127685.7912-1764127684.8661', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:15.242769 2025] [proxy_fcgi:error] [pid 35540:tid 35546] [client 165.85.56.95:33656] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:28:15.681684 2025] [proxy_fcgi:error] [pid 35540:tid 35561] [client 165.85.56.95:33656] AH01071: Got error 'PHP message: start 1764127695.6163PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764127695.6813-1764127695.6163', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:31:57.410073 2025] [proxy_fcgi:error] [pid 45901:tid 45917] [client 165.85.56.95:49681] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: formContacts in /home/pumpbooking/public_html/booking.php on line 437PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/booking.php on line 437', referer: https://pumpbooking.com/booking.php?bookingDate=2025-11-24
[Wed Nov 26 11:32:02.263628 2025] [proxy_fcgi:error] [pid 45901:tid 45903] [client 165.85.56.95:49681] AH01071: Got error 'PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85PHP message: PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /home/pumpbooking/public_html/dashboard.php on line 85', referer: https://pumpbooking.com/booking.php?bookingID=44666
[Wed Nov 26 11:32:02.793016 2025] [proxy_fcgi:error] [pid 45901:tid 45919] [client 165.85.56.95:49681] AH01071: Got error 'PHP message: start 1764127922.5494', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:32:02.793433 2025] [proxy_fcgi:error] [pid 45901:tid 45919] [client 165.85.56.95:49681] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: dispSize in /home/pumpbooking/public_html/dashboard-bookings.php on line 252PHP message: PHP Notice:  Undefined variable: time_end in /home/pumpbooking/public_html/dashboard-bookings.php on line 321PHP message: end 1764127922.7928-1764127922.5494', referer: https://pumpbooking.com/dashboard.php
[Wed Nov 26 11:33:35.518978 2025] [proxy_fcgi:error] [pid 34744:tid 34805] [client 165.85.56.95:40988] AH01071: Got error 'PHP message: PHP Notice:  Undefined variable: joblist in /home/pumpbooking/public_html/exportToExcel.php on line 250PHP message: PHP Warning:  "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /home/pumpbooking/public_html/includes/PHPExcel/Shared/OLE.php on line 290', referer: https://pumpbooking.com/overview-prn.php?date=2025-11-24
[Wed Nov 26 13:19:24.049335 2025] [autoindex:error] [pid 34830:tid 34854] [client 139.59.30.253:61581] AH01276: Cannot serve directory /home/pumpbooking/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 18:25:46.819289 2025] [proxy_fcgi:error] [pid 45684:tid 45738] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:47.028578 2025] [proxy_fcgi:error] [pid 45684:tid 45730] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:47.237017 2025] [proxy_fcgi:error] [pid 45684:tid 45733] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:47.444887 2025] [proxy_fcgi:error] [pid 45684:tid 45718] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:47.652236 2025] [proxy_fcgi:error] [pid 45684:tid 45734] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:47.865167 2025] [proxy_fcgi:error] [pid 45684:tid 45728] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:48.074339 2025] [proxy_fcgi:error] [pid 45684:tid 45724] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:48.286073 2025] [proxy_fcgi:error] [pid 45684:tid 45717] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:48.514009 2025] [proxy_fcgi:error] [pid 45684:tid 45719] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:48.724754 2025] [proxy_fcgi:error] [pid 45684:tid 45722] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:49.141886 2025] [proxy_fcgi:error] [pid 45684:tid 45732] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:49.351011 2025] [proxy_fcgi:error] [pid 45684:tid 45720] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:49.559990 2025] [proxy_fcgi:error] [pid 45684:tid 45738] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:49.777812 2025] [proxy_fcgi:error] [pid 45684:tid 45725] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:49.985995 2025] [proxy_fcgi:error] [pid 45684:tid 45716] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:50.197162 2025] [proxy_fcgi:error] [pid 45684:tid 45733] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:50.405750 2025] [proxy_fcgi:error] [pid 45684:tid 45718] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:50.628352 2025] [proxy_fcgi:error] [pid 45684:tid 45715] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:50.838367 2025] [proxy_fcgi:error] [pid 45684:tid 45723] [client 194.33.45.107:36046] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:53.764801 2025] [:error] [pid 45684:tid 45724] [client 194.33.45.107:36046] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSbVsfg5LMxwI4-PD1cyhwAAAAk"]
[Wed Nov 26 18:25:54.801881 2025] [:error] [pid 46443:tid 46459] [client 194.33.45.107:45468] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSbVssLmDsnHrj-QFB_PEQAAAE4"]
[Wed Nov 26 18:25:55.849367 2025] [proxy_fcgi:error] [pid 45684:tid 45732] [client 194.33.45.107:45472] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:56.477317 2025] [:error] [pid 45684:tid 45736] [client 194.33.45.107:45472] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aSbVtPg5LMxwI4-PD1cyjwAAABU"]
[Wed Nov 26 18:25:57.102464 2025] [proxy_fcgi:error] [pid 45769:tid 45781] [client 194.33.45.107:45484] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:57.311229 2025] [proxy_fcgi:error] [pid 45769:tid 45795] [client 194.33.45.107:45484] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:57.516236 2025] [:error] [pid 45769:tid 45774] [client 194.33.45.107:45484] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSbVtVdG5Eht9c3yy4MXTAAAAcI"]
[Wed Nov 26 18:25:58.138809 2025] [proxy_fcgi:error] [pid 45683:tid 45700] [client 194.33.45.107:45496] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:25:59.181496 2025] [:error] [pid 45683:tid 45705] [client 194.33.45.107:45496] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSbVtxX1gQgNFW_222qeyQAAAVE"]
[Wed Nov 26 18:25:59.805684 2025] [:error] [pid 6471:tid 6474] [client 194.33.45.107:45502] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSbVt-h3Z9TZLlRuTiN_gwAAAIA"]
[Wed Nov 26 18:26:00.220134 2025] [:error] [pid 45769:tid 45792] [client 194.33.45.107:45518] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSbVuFdG5Eht9c3yy4MXTgAAAdQ"]
[Wed Nov 26 18:26:00.641397 2025] [:error] [pid 20733:tid 20757] [client 194.33.45.107:45534] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSbVuAV9EP2HuRvnH8dLlAAAANY"]
[Wed Nov 26 18:26:01.052383 2025] [:error] [pid 46443:tid 46450] [client 194.33.45.107:55206] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSbVucLmDsnHrj-QFB_POwAAAEU"]
[Wed Nov 26 18:26:01.462164 2025] [:error] [pid 45684:tid 45723] [client 194.33.45.107:44535] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSbVufg5LMxwI4-PD1cykwAAAAg"]
[Wed Nov 26 18:26:02.082323 2025] [:error] [pid 45684:tid 45729] [client 194.33.45.107:9945] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSbVuvg5LMxwI4-PD1cylgAAAA4"]
[Wed Nov 26 18:26:02.501427 2025] [proxy_fcgi:error] [pid 46443:tid 46452] [client 194.33.45.107:55238] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:02.923710 2025] [:error] [pid 46443:tid 46448] [client 194.33.45.107:55238] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aSbVusLmDsnHrj-QFB_PPwAAAEM"]
[Wed Nov 26 18:26:03.549002 2025] [proxy_fcgi:error] [pid 20733:tid 20743] [client 194.33.45.107:55240] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:03.755478 2025] [:error] [pid 20733:tid 20751] [client 194.33.45.107:55240] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSbVuwV9EP2HuRvnH8dLmAAAANA"]
[Wed Nov 26 18:26:04.393734 2025] [:error] [pid 45684:tid 45720] [client 194.33.45.107:55250] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSbVvPg5LMxwI4-PD1cymAAAAAU"]
[Wed Nov 26 18:26:04.818146 2025] [proxy_fcgi:error] [pid 20733:tid 20735] [client 194.33.45.107:55264] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:05.028328 2025] [:error] [pid 20733:tid 20750] [client 194.33.45.107:55264] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSbVvQV9EP2HuRvnH8dLmwAAAM8"]
[Wed Nov 26 18:26:05.450138 2025] [proxy_fcgi:error] [pid 45684:tid 45730] [client 194.33.45.107:55272] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:06.076862 2025] [proxy_fcgi:error] [pid 45684:tid 45716] [client 194.33.45.107:55272] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:06.705468 2025] [:error] [pid 45684:tid 45724] [client 194.33.45.107:55272] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSbVvvg5LMxwI4-PD1cyoQAAAAk"]
[Wed Nov 26 18:26:07.119850 2025] [proxy_fcgi:error] [pid 45683:tid 45689] [client 194.33.45.107:55284] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:07.327493 2025] [:error] [pid 45683:tid 45701] [client 194.33.45.107:55284] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSbVvxX1gQgNFW_222qezQAAAU0"]
[Wed Nov 26 18:26:07.756925 2025] [proxy_fcgi:error] [pid 45769:tid 45783] [client 194.33.45.107:55290] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:08.176851 2025] [:error] [pid 45769:tid 45775] [client 194.33.45.107:55290] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSbVwFdG5Eht9c3yy4MXUQAAAcM"]
[Wed Nov 26 18:26:08.797541 2025] [:error] [pid 45683:tid 45706] [client 194.33.45.107:55304] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSbVwBX1gQgNFW_222qezwAAAVI"]
[Wed Nov 26 18:26:09.427346 2025] [proxy_fcgi:error] [pid 45769:tid 45789] [client 194.33.45.107:55318] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:09.650236 2025] [proxy_fcgi:error] [pid 45769:tid 45776] [client 194.33.45.107:55318] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:10.069788 2025] [:error] [pid 45769:tid 45796] [client 194.33.45.107:55318] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSbVwldG5Eht9c3yy4MXVgAAAdg"]
[Wed Nov 26 18:26:11.777682 2025] [:error] [pid 45684:tid 45732] [client 194.33.45.107:55320] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSbVw_g5LMxwI4-PD1cypAAAABE"]
[Wed Nov 26 18:26:12.405509 2025] [:error] [pid 45685:tid 45749] [client 194.33.45.107:55062] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSbVxFj3f_NRdgU0DQ7MEAAAAQc"]
[Wed Nov 26 18:26:12.819793 2025] [:error] [pid 6471:tid 6475] [client 194.33.45.107:55070] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSbVxOh3Z9TZLlRuTiN_hAAAAIE"]
[Wed Nov 26 18:26:13.229370 2025] [:error] [pid 45684:tid 45736] [client 194.33.45.107:55084] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSbVxfg5LMxwI4-PD1cypQAAABU"]
[Wed Nov 26 18:26:14.070469 2025] [proxy_fcgi:error] [pid 45685:tid 45756] [client 194.33.45.107:55094] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:14.278963 2025] [:error] [pid 45685:tid 45760] [client 194.33.45.107:55094] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSbVxlj3f_NRdgU0DQ7MFAAAARI"]
[Wed Nov 26 18:26:14.689109 2025] [:error] [pid 45684:tid 45726] [client 194.33.45.107:55102] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSbVxvg5LMxwI4-PD1cypgAAAAs"]
[Wed Nov 26 18:26:15.102427 2025] [:error] [pid 45684:tid 45723] [client 194.33.45.107:55104] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSbVx_g5LMxwI4-PD1cypwAAAAg"]
[Wed Nov 26 18:26:15.947313 2025] [proxy_fcgi:error] [pid 20733:tid 20752] [client 194.33.45.107:55120] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:16.370595 2025] [proxy_fcgi:error] [pid 20733:tid 20742] [client 194.33.45.107:55120] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:16.582999 2025] [proxy_fcgi:error] [pid 20733:tid 20757] [client 194.33.45.107:55120] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:18.406482 2025] [:error] [pid 20733:tid 20748] [client 194.33.45.107:55120] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aSbVygV9EP2HuRvnH8dLqgAAAM0"]
[Wed Nov 26 18:26:19.456209 2025] [:error] [pid 45684:tid 45736] [client 194.33.45.107:55132] [client 194.33.45.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.33.45.107, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSbVy_g5LMxwI4-PD1cytgAAABU"]
[Wed Nov 26 18:26:19.671530 2025] [proxy_fcgi:error] [pid 45684:tid 45739] [client 194.33.45.107:55132] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:20.730141 2025] [proxy_fcgi:error] [pid 45684:tid 45723] [client 194.33.45.107:55132] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:20.940589 2025] [proxy_fcgi:error] [pid 45684:tid 45734] [client 194.33.45.107:55132] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:21.990800 2025] [:error] [pid 45684:tid 45722] [client 194.33.45.107:55132] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSbVzfg5LMxwI4-PD1cywwAAAAc"]
[Wed Nov 26 18:26:22.617859 2025] [proxy_fcgi:error] [pid 45684:tid 45720] [client 194.33.45.107:44448] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:22.826313 2025] [:error] [pid 45684:tid 45738] [client 194.33.45.107:44448] [client 194.33.45.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.33.45.107, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSbVzvg5LMxwI4-PD1cyxgAAABc"]
[Wed Nov 26 18:26:23.251016 2025] [:error] [pid 45684:tid 45739] [client 194.33.45.107:44448] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aSbVz_g5LMxwI4-PD1cyyAAAABg"]
[Wed Nov 26 18:26:23.667671 2025] [proxy_fcgi:error] [pid 45683:tid 45699] [client 194.33.45.107:34093] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:23.878516 2025] [proxy_fcgi:error] [pid 45683:tid 45710] [client 194.33.45.107:34093] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:24.517037 2025] [proxy_fcgi:error] [pid 45683:tid 45694] [client 194.33.45.107:34093] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:24.940203 2025] [proxy_fcgi:error] [pid 45683:tid 45698] [client 194.33.45.107:34093] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:25.359069 2025] [:error] [pid 45683:tid 45701] [client 194.33.45.107:34093] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSbV0RX1gQgNFW_222qe3AAAAU0"]
[Wed Nov 26 18:26:25.778432 2025] [proxy_fcgi:error] [pid 45685:tid 45751] [client 194.33.45.107:44468] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:26.418642 2025] [proxy_fcgi:error] [pid 45685:tid 45747] [client 194.33.45.107:44468] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:26.841514 2025] [proxy_fcgi:error] [pid 45685:tid 45761] [client 194.33.45.107:44468] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:27.263653 2025] [proxy_fcgi:error] [pid 45685:tid 45742] [client 194.33.45.107:44468] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:27.470794 2025] [:error] [pid 45685:tid 45746] [client 194.33.45.107:44468] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSbV01j3f_NRdgU0DQ7MHgAAAQQ"]
[Wed Nov 26 18:26:27.889958 2025] [proxy_fcgi:error] [pid 45684:tid 45724] [client 194.33.45.107:44470] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:28.100931 2025] [proxy_fcgi:error] [pid 45684:tid 45717] [client 194.33.45.107:44470] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:28.307967 2025] [:error] [pid 45684:tid 45722] [client 194.33.45.107:44470] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSbV1Pg5LMxwI4-PD1cyzgAAAAc"]
[Wed Nov 26 18:26:28.936214 2025] [proxy_fcgi:error] [pid 45769:tid 45795] [client 194.33.45.107:44474] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:29.349807 2025] [:error] [pid 45769:tid 45791] [client 194.33.45.107:44474] [client 194.33.45.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.33.45.107, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSbV1VdG5Eht9c3yy4MXXQAAAdM"]
[Wed Nov 26 18:26:30.730298 2025] [:error] [pid 45769:tid 45792] [client 194.33.45.107:44474] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSbV1ldG5Eht9c3yy4MXXgAAAdQ"]
[Wed Nov 26 18:26:33.245332 2025] [proxy_fcgi:error] [pid 20733:tid 20741] [client 194.33.45.107:38760] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:34.080365 2025] [proxy_fcgi:error] [pid 20733:tid 20757] [client 194.33.45.107:38760] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:34.500861 2025] [proxy_fcgi:error] [pid 20733:tid 20744] [client 194.33.45.107:38760] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:34.705855 2025] [:error] [pid 20733:tid 20755] [client 194.33.45.107:38760] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSbV2gV9EP2HuRvnH8dL0AAAANQ"]
[Wed Nov 26 18:26:35.124525 2025] [proxy_fcgi:error] [pid 46443:tid 46455] [client 194.33.45.107:38776] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:35.756566 2025] [:error] [pid 46443:tid 46446] [client 194.33.45.107:38776] [client 194.33.45.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.33.45.107, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSbV28LmDsnHrj-QFB_PcQAAAEE"]
[Wed Nov 26 18:26:35.971827 2025] [proxy_fcgi:error] [pid 46443:tid 46463] [client 194.33.45.107:38776] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:36.183587 2025] [proxy_fcgi:error] [pid 46443:tid 46458] [client 194.33.45.107:38776] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:36.393955 2025] [proxy_fcgi:error] [pid 46443:tid 46449] [client 194.33.45.107:38776] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:36.601738 2025] [:error] [pid 46443:tid 46450] [client 194.33.45.107:38776] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSbV3MLmDsnHrj-QFB_PdQAAAEU"]
[Wed Nov 26 18:26:37.021572 2025] [proxy_fcgi:error] [pid 45684:tid 45716] [client 194.33.45.107:38782] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:37.228144 2025] [:error] [pid 45684:tid 45735] [client 194.33.45.107:38782] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aSbV3fg5LMxwI4-PD1cy1AAAABQ"]
[Wed Nov 26 18:26:37.854716 2025] [proxy_fcgi:error] [pid 45684:tid 45729] [client 194.33.45.107:38784] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:38.062098 2025] [:error] [pid 45684:tid 45733] [client 194.33.45.107:38784] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSbV3vg5LMxwI4-PD1cy2AAAABI"]
[Wed Nov 26 18:26:38.894467 2025] [proxy_fcgi:error] [pid 45684:tid 45727] [client 194.33.45.107:38796] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:39.099771 2025] [:error] [pid 45684:tid 45725] [client 194.33.45.107:38796] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSbV3_g5LMxwI4-PD1cy3AAAAAo"]
[Wed Nov 26 18:26:39.509509 2025] [:error] [pid 45769:tid 45782] [client 194.33.45.107:38800] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSbV31dG5Eht9c3yy4MXYwAAAco"]
[Wed Nov 26 18:26:39.921809 2025] [proxy_fcgi:error] [pid 20733:tid 20740] [client 194.33.45.107:38812] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:40.130625 2025] [proxy_fcgi:error] [pid 20733:tid 20758] [client 194.33.45.107:38812] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:40.340147 2025] [proxy_fcgi:error] [pid 20733:tid 20754] [client 194.33.45.107:38812] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:40.965431 2025] [:error] [pid 20733:tid 20756] [client 194.33.45.107:38812] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSbV4AV9EP2HuRvnH8dL2QAAANU"]
[Wed Nov 26 18:26:41.583018 2025] [:error] [pid 20733:tid 20752] [client 194.33.45.107:47592] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSbV4QV9EP2HuRvnH8dL2wAAANE"]
[Wed Nov 26 18:26:42.619447 2025] [:error] [pid 45684:tid 45734] [client 194.33.45.107:47604] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aSbV4vg5LMxwI4-PD1cy5AAAABM"]
[Wed Nov 26 18:26:43.037499 2025] [proxy_fcgi:error] [pid 45683:tid 45711] [client 194.33.45.107:47614] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:43.458331 2025] [proxy_fcgi:error] [pid 45683:tid 45709] [client 194.33.45.107:47614] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:43.669019 2025] [:error] [pid 45683:tid 45710] [client 194.33.45.107:47614] [client 194.33.45.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSbV4xX1gQgNFW_222qe5gAAAVY"]
[Wed Nov 26 18:26:44.083954 2025] [proxy_fcgi:error] [pid 45684:tid 45715] [client 194.33.45.107:47630] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:26:45.103636 2025] [:error] [pid 45684:tid 45725] [client 194.33.45.107:47630] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aSbV5fg5LMxwI4-PD1cy6QAAAAo"]
[Wed Nov 26 18:26:45.517862 2025] [:error] [pid 6471:tid 6475] [client 194.33.45.107:47646] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aSbV5eh3Z9TZLlRuTiN_ngAAAIE"]
[Wed Nov 26 18:26:45.928200 2025] [:error] [pid 45684:tid 45719] [client 194.33.45.107:47662] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aSbV5fg5LMxwI4-PD1cy6gAAAAQ"]
[Wed Nov 26 18:26:46.338311 2025] [:error] [pid 45684:tid 45720] [client 194.33.45.107:47672] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aSbV5vg5LMxwI4-PD1cy6wAAAAU"]
[Wed Nov 26 18:26:46.752470 2025] [:error] [pid 45684:tid 45728] [client 194.33.45.107:47678] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aSbV5vg5LMxwI4-PD1cy7AAAAA0"]
[Wed Nov 26 18:27:02.883395 2025] [autoindex:error] [pid 45684:tid 45729] [client 194.33.45.107:47694] AH01276: Cannot serve directory /home/pumpbooking/public_html/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 18:27:07.333232 2025] [:error] [pid 45684:tid 45721] [client 194.33.45.107:47694] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aSbV-_g5LMxwI4-PD1czUQAAAAY"]
[Wed Nov 26 18:27:07.750300 2025] [:error] [pid 6471:tid 6492] [client 194.33.45.107:52958] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aSbV--h3Z9TZLlRuTiN_wwAAAJI"]
[Wed Nov 26 18:27:08.164171 2025] [:error] [pid 20733:tid 20741] [client 194.33.45.107:52968] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aSbV_AV9EP2HuRvnH8dL9gAAAMY"]
[Wed Nov 26 18:27:08.578086 2025] [:error] [pid 20733:tid 20738] [client 194.33.45.107:52976] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aSbV_AV9EP2HuRvnH8dL9wAAAMM"]
[Wed Nov 26 18:27:08.992761 2025] [:error] [pid 20733:tid 20756] [client 194.33.45.107:53529] [client 194.33.45.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aSbV_AV9EP2HuRvnH8dL-AAAANU"]
[Wed Nov 26 21:43:34.401563 2025] [:error] [pid 45683:tid 45708] [client 13.55.88.89:43470] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aScEBhX1gQgNFW_222rKugAAAVQ"]
[Wed Nov 26 21:43:34.465803 2025] [:error] [pid 45683:tid 45695] [client 13.55.88.89:43472] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aScEBhX1gQgNFW_222rKuwAAAUc"]
[Wed Nov 26 21:43:34.523980 2025] [:error] [pid 6471:tid 6493] [client 13.55.88.89:43476] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.local"] [unique_id "aScEBuh3Z9TZLlRuTiOy6QAAAJM"]
[Wed Nov 26 21:43:34.581804 2025] [:error] [pid 46443:tid 46445] [client 13.55.88.89:43484] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.dev"] [unique_id "aScEBsLmDsnHrj-QFB8PxgAAAEA"]
[Wed Nov 26 21:43:34.640966 2025] [:error] [pid 6471:tid 6478] [client 13.55.88.89:43492] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.prod"] [unique_id "aScEBuh3Z9TZLlRuTiOy6gAAAIQ"]
[Wed Nov 26 21:43:34.696802 2025] [:error] [pid 45683:tid 45712] [client 13.55.88.89:43506] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.staging"] [unique_id "aScEBhX1gQgNFW_222rKvAAAAVg"]
[Wed Nov 26 21:43:34.753544 2025] [:error] [pid 46443:tid 46459] [client 13.55.88.89:43508] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.development"] [unique_id "aScEBsLmDsnHrj-QFB8PxwAAAE4"]
[Wed Nov 26 21:43:34.814177 2025] [:error] [pid 20733:tid 20739] [client 13.55.88.89:43514] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.production"] [unique_id "aScEBgV9EP2HuRvnH8dz2wAAAMQ"]
[Wed Nov 26 21:43:34.873830 2025] [:error] [pid 45769:tid 45777] [client 13.55.88.89:55984] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.test"] [unique_id "aScEBldG5Eht9c3yy4NBgQAAAcU"]
[Wed Nov 26 21:43:34.930713 2025] [:error] [pid 46443:tid 46452] [client 13.55.88.89:55996] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.backup"] [unique_id "aScEBsLmDsnHrj-QFB8PyAAAAEc"]
[Wed Nov 26 21:43:34.990771 2025] [:error] [pid 45685:tid 45762] [client 13.55.88.89:56002] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env~"] [unique_id "aScEBlj3f_NRdgU0DQ72bAAAARQ"]
[Wed Nov 26 21:43:35.046855 2025] [:error] [pid 6471:tid 6496] [client 13.55.88.89:56014] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.sample"] [unique_id "aScEB-h3Z9TZLlRuTiOy7QAAAJY"]
[Wed Nov 26 21:43:35.114269 2025] [:error] [pid 46443:tid 46464] [client 13.55.88.89:56016] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.old"] [unique_id "aScEB8LmDsnHrj-QFB8PywAAAFM"]
[Wed Nov 26 21:43:35.172060 2025] [:error] [pid 45684:tid 45723] [client 13.55.88.89:56030] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.bak"] [unique_id "aScEB_g5LMxwI4-PD1eH2wAAAAg"]
[Wed Nov 26 21:43:35.233603 2025] [:error] [pid 45685:tid 45753] [client 13.55.88.89:56034] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.save"] [unique_id "aScEB1j3f_NRdgU0DQ72bQAAAQs"]
[Wed Nov 26 21:43:35.290836 2025] [:error] [pid 6471:tid 6497] [client 13.55.88.89:56046] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.orig"] [unique_id "aScEB-h3Z9TZLlRuTiOy8AAAAJc"]
[Wed Nov 26 21:43:35.350920 2025] [:error] [pid 6471:tid 6479] [client 13.55.88.89:56054] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.swp"] [unique_id "aScEB-h3Z9TZLlRuTiOy8QAAAIU"]
[Wed Nov 26 21:43:35.411686 2025] [:error] [pid 45683:tid 45702] [client 13.55.88.89:56068] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.tmp"] [unique_id "aScEBxX1gQgNFW_222rKwQAAAU4"]
[Wed Nov 26 21:43:35.468129 2025] [:error] [pid 45683:tid 45709] [client 13.55.88.89:56076] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.dist"] [unique_id "aScEBxX1gQgNFW_222rKwwAAAVU"]
[Wed Nov 26 21:43:35.528092 2025] [:error] [pid 6471:tid 6475] [client 13.55.88.89:56088] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/admin/.env"] [unique_id "aScEB-h3Z9TZLlRuTiOy8gAAAIE"]
[Wed Nov 26 21:43:35.587803 2025] [:error] [pid 20733:tid 20742] [client 13.55.88.89:56096] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/admin/.env.save"] [unique_id "aScEBwV9EP2HuRvnH8dz3wAAAMc"]
[Wed Nov 26 21:43:35.645905 2025] [:error] [pid 46443:tid 46460] [client 13.55.88.89:56108] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/admin/.env.bak"] [unique_id "aScEB8LmDsnHrj-QFB8P0wAAAE8"]
[Wed Nov 26 21:43:35.708530 2025] [:error] [pid 45769:tid 45775] [client 13.55.88.89:56118] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/admin/.env.old"] [unique_id "aScEB1dG5Eht9c3yy4NBhwAAAcM"]
[Wed Nov 26 21:43:35.767360 2025] [:error] [pid 45683:tid 45707] [client 13.55.88.89:56122] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/api/.env"] [unique_id "aScEBxX1gQgNFW_222rKxAAAAVM"]
[Wed Nov 26 21:43:35.823470 2025] [:error] [pid 20733:tid 20745] [client 13.55.88.89:56128] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/api/.env.save"] [unique_id "aScEBwV9EP2HuRvnH8dz4gAAAMo"]
[Wed Nov 26 21:43:35.879338 2025] [:error] [pid 45683:tid 45705] [client 13.55.88.89:56142] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/api/.env.bak"] [unique_id "aScEBxX1gQgNFW_222rKxgAAAVE"]
[Wed Nov 26 21:43:35.936505 2025] [:error] [pid 6471:tid 6494] [client 13.55.88.89:56150] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/api/.env.old"] [unique_id "aScEB-h3Z9TZLlRuTiOy8wAAAJQ"]
[Wed Nov 26 21:43:35.993085 2025] [:error] [pid 45769:tid 45776] [client 13.55.88.89:56156] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/app/.env"] [unique_id "aScEB1dG5Eht9c3yy4NBiAAAAcQ"]
[Wed Nov 26 21:43:36.056454 2025] [:error] [pid 6471:tid 6498] [client 13.55.88.89:56158] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/app/.env.save"] [unique_id "aScECOh3Z9TZLlRuTiOy9AAAAJg"]
[Wed Nov 26 21:43:36.118272 2025] [:error] [pid 45685:tid 45765] [client 13.55.88.89:56164] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/app/.env.bak"] [unique_id "aScECFj3f_NRdgU0DQ72bgAAARc"]
[Wed Nov 26 21:43:36.177483 2025] [:error] [pid 46443:tid 46458] [client 13.55.88.89:56178] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/app/.env.old"] [unique_id "aScECMLmDsnHrj-QFB8P1gAAAE0"]
[Wed Nov 26 21:43:36.241058 2025] [:error] [pid 46443:tid 46449] [client 13.55.88.89:56184] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/config/.env"] [unique_id "aScECMLmDsnHrj-QFB8P1wAAAEQ"]
[Wed Nov 26 21:43:36.297957 2025] [:error] [pid 45684:tid 45731] [client 13.55.88.89:56194] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/config/.env.save"] [unique_id "aScECPg5LMxwI4-PD1eH3QAAABA"]
[Wed Nov 26 21:43:36.357078 2025] [:error] [pid 45684:tid 45730] [client 13.55.88.89:56200] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/config/.env.bak"] [unique_id "aScECPg5LMxwI4-PD1eH3gAAAA8"]
[Wed Nov 26 21:43:36.416952 2025] [:error] [pid 46443:tid 46467] [client 13.55.88.89:56208] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/config/.env.old"] [unique_id "aScECMLmDsnHrj-QFB8P2gAAAFY"]
[Wed Nov 26 21:43:36.481078 2025] [:error] [pid 46443:tid 46468] [client 13.55.88.89:56214] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/src/.env"] [unique_id "aScECMLmDsnHrj-QFB8P3AAAAFc"]
[Wed Nov 26 21:43:36.542115 2025] [:error] [pid 46443:tid 46447] [client 13.55.88.89:56228] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/src/.env.save"] [unique_id "aScECMLmDsnHrj-QFB8P3QAAAEI"]
[Wed Nov 26 21:43:36.603642 2025] [:error] [pid 46443:tid 46446] [client 13.55.88.89:56242] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/src/.env.bak"] [unique_id "aScECMLmDsnHrj-QFB8P3wAAAEE"]
[Wed Nov 26 21:43:36.662674 2025] [:error] [pid 46443:tid 46462] [client 13.55.88.89:56250] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/src/.env.old"] [unique_id "aScECMLmDsnHrj-QFB8P4gAAAFE"]
[Wed Nov 26 21:43:36.721109 2025] [:error] [pid 20733:tid 20740] [client 13.55.88.89:56256] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/public/.env"] [unique_id "aScECAV9EP2HuRvnH8dz5wAAAMU"]
[Wed Nov 26 21:43:36.780504 2025] [:error] [pid 46443:tid 46453] [client 13.55.88.89:56266] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/public/.env.save"] [unique_id "aScECMLmDsnHrj-QFB8P4wAAAEg"]
[Wed Nov 26 21:43:36.843057 2025] [:error] [pid 46443:tid 46469] [client 13.55.88.89:56280] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/public/.env.bak"] [unique_id "aScECMLmDsnHrj-QFB8P5AAAAFg"]
[Wed Nov 26 21:43:36.904221 2025] [:error] [pid 45684:tid 45735] [client 13.55.88.89:56294] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/public/.env.old"] [unique_id "aScECPg5LMxwI4-PD1eH3wAAABQ"]
[Wed Nov 26 21:43:36.962744 2025] [:error] [pid 46443:tid 46449] [client 13.55.88.89:56304] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/assets/.env"] [unique_id "aScECMLmDsnHrj-QFB8P5QAAAEQ"]
[Wed Nov 26 21:43:37.023536 2025] [:error] [pid 45684:tid 45715] [client 13.55.88.89:56318] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/assets/.env.save"] [unique_id "aScECfg5LMxwI4-PD1eH4AAAAAA"]
[Wed Nov 26 21:43:37.087478 2025] [:error] [pid 45684:tid 45722] [client 13.55.88.89:56320] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/assets/.env.bak"] [unique_id "aScECfg5LMxwI4-PD1eH4gAAAAc"]
[Wed Nov 26 21:43:37.144630 2025] [:error] [pid 45684:tid 45734] [client 13.55.88.89:56334] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/assets/.env.old"] [unique_id "aScECfg5LMxwI4-PD1eH4wAAABM"]
[Wed Nov 26 21:43:37.199910 2025] [:error] [pid 46443:tid 46454] [client 13.55.88.89:56342] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/includes/.env"] [unique_id "aScECcLmDsnHrj-QFB8P5wAAAEk"]
[Wed Nov 26 21:43:37.267586 2025] [:error] [pid 45683:tid 45688] [client 13.55.88.89:56356] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/includes/.env.save"] [unique_id "aScECRX1gQgNFW_222rKygAAAUA"]
[Wed Nov 26 21:43:37.328794 2025] [:error] [pid 20733:tid 20754] [client 13.55.88.89:56358] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/includes/.env.bak"] [unique_id "aScECQV9EP2HuRvnH8dz6AAAANM"]
[Wed Nov 26 21:43:37.384958 2025] [:error] [pid 46443:tid 46450] [client 13.55.88.89:56370] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/includes/.env.old"] [unique_id "aScECcLmDsnHrj-QFB8P6AAAAEU"]
[Wed Nov 26 21:43:37.447399 2025] [:error] [pid 46443:tid 46468] [client 13.55.88.89:56384] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/lib/.env"] [unique_id "aScECcLmDsnHrj-QFB8P6QAAAFc"]
[Wed Nov 26 21:43:37.507059 2025] [:error] [pid 46443:tid 46461] [client 13.55.88.89:56398] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/lib/.env.save"] [unique_id "aScECcLmDsnHrj-QFB8P6gAAAFA"]
[Wed Nov 26 21:43:37.561511 2025] [:error] [pid 45685:tid 45760] [client 13.55.88.89:56410] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/lib/.env.bak"] [unique_id "aScECVj3f_NRdgU0DQ72bwAAARI"]
[Wed Nov 26 21:43:37.619461 2025] [:error] [pid 45685:tid 45746] [client 13.55.88.89:56412] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/lib/.env.old"] [unique_id "aScECVj3f_NRdgU0DQ72cQAAAQQ"]
[Wed Nov 26 21:43:37.675128 2025] [:error] [pid 46443:tid 46462] [client 13.55.88.89:56418] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/application/.env"] [unique_id "aScECcLmDsnHrj-QFB8P6wAAAFE"]
[Wed Nov 26 21:43:37.730339 2025] [:error] [pid 45684:tid 45737] [client 13.55.88.89:56424] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/application/.env.save"] [unique_id "aScECfg5LMxwI4-PD1eH5gAAABY"]
[Wed Nov 26 21:43:37.788661 2025] [:error] [pid 46443:tid 46457] [client 13.55.88.89:56440] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/application/.env.bak"] [unique_id "aScECcLmDsnHrj-QFB8P7gAAAEw"]
[Wed Nov 26 21:43:37.845055 2025] [:error] [pid 45684:tid 45738] [client 13.55.88.89:56442] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/application/.env.old"] [unique_id "aScECfg5LMxwI4-PD1eH5wAAABc"]
[Wed Nov 26 21:43:37.901270 2025] [:error] [pid 45684:tid 45720] [client 13.55.88.89:56448] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/system/.env"] [unique_id "aScECfg5LMxwI4-PD1eH6AAAAAU"]
[Wed Nov 26 21:43:37.965027 2025] [:error] [pid 45684:tid 45731] [client 13.55.88.89:56456] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/system/.env.save"] [unique_id "aScECfg5LMxwI4-PD1eH6QAAABA"]
[Wed Nov 26 21:43:38.025312 2025] [:error] [pid 45684:tid 45729] [client 13.55.88.89:56460] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/system/.env.bak"] [unique_id "aScECvg5LMxwI4-PD1eH6gAAAA4"]
[Wed Nov 26 21:43:38.084108 2025] [:error] [pid 46443:tid 46449] [client 13.55.88.89:56472] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/system/.env.old"] [unique_id "aScECsLmDsnHrj-QFB8P8gAAAEQ"]
[Wed Nov 26 21:43:38.143993 2025] [:error] [pid 45685:tid 45757] [client 13.55.88.89:56476] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/core/.env"] [unique_id "aScEClj3f_NRdgU0DQ72cgAAAQ8"]
[Wed Nov 26 21:43:38.203725 2025] [:error] [pid 45685:tid 45752] [client 13.55.88.89:56480] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/core/.env.save"] [unique_id "aScEClj3f_NRdgU0DQ72cwAAAQo"]
[Wed Nov 26 21:43:38.262083 2025] [:error] [pid 46443:tid 46452] [client 13.55.88.89:56484] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/core/.env.bak"] [unique_id "aScECsLmDsnHrj-QFB8P8wAAAEc"]
[Wed Nov 26 21:43:38.322564 2025] [:error] [pid 45683:tid 45712] [client 13.55.88.89:56490] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/core/.env.old"] [unique_id "aScEChX1gQgNFW_222rKzAAAAVg"]
[Wed Nov 26 21:43:38.377522 2025] [:error] [pid 45683:tid 45691] [client 13.55.88.89:56504] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/modules/.env"] [unique_id "aScEChX1gQgNFW_222rKzQAAAUM"]
[Wed Nov 26 21:43:38.434819 2025] [:error] [pid 45683:tid 45698] [client 13.55.88.89:56506] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/modules/.env.save"] [unique_id "aScEChX1gQgNFW_222rKzgAAAUo"]
[Wed Nov 26 21:43:38.493265 2025] [:error] [pid 46443:tid 46450] [client 13.55.88.89:56508] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/modules/.env.bak"] [unique_id "aScECsLmDsnHrj-QFB8P9AAAAEU"]
[Wed Nov 26 21:43:38.552100 2025] [:error] [pid 46443:tid 46465] [client 13.55.88.89:56520] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/modules/.env.old"] [unique_id "aScECsLmDsnHrj-QFB8P9QAAAFQ"]
[Wed Nov 26 21:43:38.607985 2025] [:error] [pid 46443:tid 46447] [client 13.55.88.89:56526] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/plugins/.env"] [unique_id "aScECsLmDsnHrj-QFB8P9wAAAEI"]
[Wed Nov 26 21:43:38.661908 2025] [:error] [pid 46443:tid 46446] [client 13.55.88.89:56536] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/plugins/.env.save"] [unique_id "aScECsLmDsnHrj-QFB8P-AAAAEE"]
[Wed Nov 26 21:43:38.719740 2025] [:error] [pid 45683:tid 45700] [client 13.55.88.89:56548] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/plugins/.env.bak"] [unique_id "aScEChX1gQgNFW_222rKzwAAAUw"]
[Wed Nov 26 21:43:38.778062 2025] [:error] [pid 45684:tid 45728] [client 13.55.88.89:56556] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/plugins/.env.old"] [unique_id "aScECvg5LMxwI4-PD1eH7AAAAA0"]
[Wed Nov 26 21:43:38.836111 2025] [:error] [pid 45684:tid 45717] [client 13.55.88.89:56562] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/themes/.env"] [unique_id "aScECvg5LMxwI4-PD1eH7QAAAAI"]
[Wed Nov 26 21:43:38.892789 2025] [:error] [pid 45684:tid 45734] [client 13.55.88.89:56576] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/themes/.env.save"] [unique_id "aScECvg5LMxwI4-PD1eH7wAAABM"]
[Wed Nov 26 21:43:38.946955 2025] [:error] [pid 45684:tid 45719] [client 13.55.88.89:56588] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/themes/.env.bak"] [unique_id "aScECvg5LMxwI4-PD1eH8AAAAAQ"]
[Wed Nov 26 21:43:39.010876 2025] [:error] [pid 6471:tid 6485] [client 13.55.88.89:56594] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/themes/.env.old"] [unique_id "aScEC-h3Z9TZLlRuTiOy-QAAAIs"]
[Wed Nov 26 21:43:39.064853 2025] [:error] [pid 45684:tid 45737] [client 13.55.88.89:56596] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/vendor/.env"] [unique_id "aScEC_g5LMxwI4-PD1eH8gAAABY"]
[Wed Nov 26 21:43:39.120906 2025] [:error] [pid 46443:tid 46466] [client 13.55.88.89:56612] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/vendor/.env.save"] [unique_id "aScEC8LmDsnHrj-QFB8P-QAAAFU"]
[Wed Nov 26 21:43:39.181463 2025] [:error] [pid 46443:tid 46457] [client 13.55.88.89:56614] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/vendor/.env.bak"] [unique_id "aScEC8LmDsnHrj-QFB8P-gAAAEw"]
[Wed Nov 26 21:43:39.246125 2025] [:error] [pid 46443:tid 46456] [client 13.55.88.89:56616] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/vendor/.env.old"] [unique_id "aScEC8LmDsnHrj-QFB8P-wAAAEs"]
[Wed Nov 26 21:43:39.310646 2025] [:error] [pid 46443:tid 46448] [client 13.55.88.89:56624] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/storage/.env"] [unique_id "aScEC8LmDsnHrj-QFB8P_AAAAEM"]
[Wed Nov 26 21:43:39.369066 2025] [:error] [pid 45684:tid 45721] [client 13.55.88.89:56640] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/storage/.env.save"] [unique_id "aScEC_g5LMxwI4-PD1eH9AAAAAY"]
[Wed Nov 26 21:43:39.429871 2025] [:error] [pid 46443:tid 46463] [client 13.55.88.89:56654] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/storage/.env.bak"] [unique_id "aScEC8LmDsnHrj-QFB8P_wAAAFI"]
[Wed Nov 26 21:43:39.488786 2025] [:error] [pid 20733:tid 20744] [client 13.55.88.89:56656] [client 13.55.88.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/storage/.env.old"] [unique_id "aScECwV9EP2HuRvnH8dz6QAAAMk"]
[Wed Nov 26 21:43:39.556087 2025] [proxy_fcgi:error] [pid 45684:tid 45724] [client 13.55.88.89:56668] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:39.684836 2025] [proxy_fcgi:error] [pid 45684:tid 45735] [client 13.55.88.89:56678] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:39.743995 2025] [proxy_fcgi:error] [pid 45685:tid 45759] [client 13.55.88.89:56692] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:39.937384 2025] [proxy_fcgi:error] [pid 45684:tid 45722] [client 13.55.88.89:56718] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:39.999892 2025] [proxy_fcgi:error] [pid 45684:tid 45734] [client 13.55.88.89:56720] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:40.064805 2025] [proxy_fcgi:error] [pid 6471:tid 6497] [client 13.55.88.89:56722] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:40.126115 2025] [proxy_fcgi:error] [pid 20733:tid 20756] [client 13.55.88.89:56734] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:40.187386 2025] [proxy_fcgi:error] [pid 6471:tid 6479] [client 13.55.88.89:56748] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:40.256029 2025] [proxy_fcgi:error] [pid 6471:tid 6475] [client 13.55.88.89:56762] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 21:43:40.313762 2025] [:error] [pid 6471:tid 6481] [client 13.55.88.89:56778] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php_version.php"] [unique_id "aScEDOh3Z9TZLlRuTiOy_wAAAIc"]
[Wed Nov 26 21:43:40.367888 2025] [:error] [pid 45684:tid 45732] [client 13.55.88.89:56782] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/serverinfo.php"] [unique_id "aScEDPg5LMxwI4-PD1eH_QAAABE"]
[Wed Nov 26 21:43:40.424862 2025] [:error] [pid 45684:tid 45737] [client 13.55.88.89:56786] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/server.php"] [unique_id "aScEDPg5LMxwI4-PD1eH_gAAABY"]
[Wed Nov 26 21:43:40.480678 2025] [:error] [pid 45684:tid 45723] [client 13.55.88.89:56802] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/debug.php"] [unique_id "aScEDPg5LMxwI4-PD1eH_wAAAAg"]
[Wed Nov 26 21:43:40.537614 2025] [:error] [pid 45684:tid 45738] [client 13.55.88.89:56818] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/diagnostic.php"] [unique_id "aScEDPg5LMxwI4-PD1eIAAAAABc"]
[Wed Nov 26 21:43:40.595687 2025] [:error] [pid 45684:tid 45720] [client 13.55.88.89:56822] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phptest.php"] [unique_id "aScEDPg5LMxwI4-PD1eIAgAAAAU"]
[Wed Nov 26 21:43:40.652912 2025] [:error] [pid 46443:tid 46468] [client 13.55.88.89:56828] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/check.php"] [unique_id "aScEDMLmDsnHrj-QFB8QAQAAAFc"]
[Wed Nov 26 21:43:40.710413 2025] [:error] [pid 46443:tid 46467] [client 13.55.88.89:56838] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpinfo.php.save"] [unique_id "aScEDMLmDsnHrj-QFB8QAgAAAFY"]
[Wed Nov 26 21:43:40.767915 2025] [:error] [pid 45683:tid 45709] [client 13.55.88.89:56844] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/info.php.save"] [unique_id "aScEDBX1gQgNFW_222rK0AAAAVU"]
[Wed Nov 26 21:43:40.829766 2025] [:error] [pid 46443:tid 46447] [client 13.55.88.89:56856] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php_info.php.save"] [unique_id "aScEDMLmDsnHrj-QFB8QAwAAAEI"]
[Wed Nov 26 21:43:40.889642 2025] [:error] [pid 46443:tid 46461] [client 13.55.88.89:56868] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/test.php.save"] [unique_id "aScEDMLmDsnHrj-QFB8QBAAAAFA"]
[Wed Nov 26 21:43:40.944157 2025] [:error] [pid 45683:tid 45704] [client 13.55.88.89:56884] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpinfo.php.bak"] [unique_id "aScEDBX1gQgNFW_222rK0QAAAVA"]
[Wed Nov 26 21:43:40.998883 2025] [:error] [pid 20733:tid 20739] [client 13.55.88.89:56896] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/info.php.bak"] [unique_id "aScEDAV9EP2HuRvnH8dz6wAAAMQ"]
[Wed Nov 26 21:43:41.058274 2025] [:error] [pid 20733:tid 20746] [client 13.55.88.89:56902] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php_info.php.bak"] [unique_id "aScEDQV9EP2HuRvnH8dz7AAAAMs"]
[Wed Nov 26 21:43:41.116751 2025] [:error] [pid 20733:tid 20736] [client 13.55.88.89:56908] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/test.php.bak"] [unique_id "aScEDQV9EP2HuRvnH8dz7QAAAME"]
[Wed Nov 26 21:43:41.173091 2025] [:error] [pid 45683:tid 45690] [client 13.55.88.89:56920] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpinfo.php.old"] [unique_id "aScEDRX1gQgNFW_222rK0gAAAUI"]
[Wed Nov 26 21:43:41.234881 2025] [:error] [pid 45769:tid 45788] [client 13.55.88.89:56926] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/info.php.old"] [unique_id "aScEDVdG5Eht9c3yy4NBjwAAAdA"]
[Wed Nov 26 21:43:41.289411 2025] [:error] [pid 45769:tid 45791] [client 13.55.88.89:56942] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php_info.php.old"] [unique_id "aScEDVdG5Eht9c3yy4NBkAAAAdM"]
[Wed Nov 26 21:43:41.349391 2025] [:error] [pid 45685:tid 45764] [client 13.55.88.89:56958] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/test.php.old"] [unique_id "aScEDVj3f_NRdgU0DQ72dQAAARY"]
[Wed Nov 26 21:43:41.405123 2025] [:error] [pid 6471:tid 6486] [client 13.55.88.89:56970] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpinfo.php.orig"] [unique_id "aScEDeh3Z9TZLlRuTiOzAAAAAIw"]
[Wed Nov 26 21:43:41.460869 2025] [:error] [pid 20733:tid 20758] [client 13.55.88.89:56978] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/info.php.orig"] [unique_id "aScEDQV9EP2HuRvnH8dz7gAAANc"]
[Wed Nov 26 21:43:41.518689 2025] [:error] [pid 45683:tid 45707] [client 13.55.88.89:56990] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php_info.php.orig"] [unique_id "aScEDRX1gQgNFW_222rK0wAAAVM"]
[Wed Nov 26 21:43:41.580672 2025] [:error] [pid 45683:tid 45703] [client 13.55.88.89:56992] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/test.php.orig"] [unique_id "aScEDRX1gQgNFW_222rK1AAAAU8"]
[Wed Nov 26 21:43:41.638307 2025] [:error] [pid 45683:tid 45711] [client 13.55.88.89:56998] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpinfo.php.backup"] [unique_id "aScEDRX1gQgNFW_222rK1QAAAVc"]
[Wed Nov 26 21:43:41.695139 2025] [:error] [pid 45769:tid 45772] [client 13.55.88.89:57004] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/info.php.backup"] [unique_id "aScEDVdG5Eht9c3yy4NBkQAAAcA"]
[Wed Nov 26 21:43:41.750336 2025] [:error] [pid 6471:tid 6477] [client 13.55.88.89:57018] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php_info.php.backup"] [unique_id "aScEDeh3Z9TZLlRuTiOzAgAAAIM"]
[Wed Nov 26 21:43:41.806830 2025] [:error] [pid 6471:tid 6493] [client 13.55.88.89:57022] [client 13.55.88.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/test.php.backup"] [unique_id "aScEDeh3Z9TZLlRuTiOzBAAAAJM"]
[Wed Nov 26 22:16:08.331419 2025] [:error] [pid 46443:tid 46449] [client 182.40.104.255:40216] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aScLqMLmDsnHrj-QFB8aOwAAAEQ"]
[Wed Nov 26 23:44:23.745651 2025] [:error] [pid 20733:tid 20752] [client 216.126.239.203:53056] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aScgVwV9EP2HuRvnH8eLcgAAANE"]
[Thu Nov 27 00:55:36.249263 2025] [:error] [pid 24814:tid 25077] [client 103.77.107.57:58611] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aScxCAPn1NMGCdo6RsihFQAAAUI"]
[Thu Nov 27 04:10:52.735107 2025] [:error] [pid 6201:tid 6207] [client 49.151.23.68:58758] [client 49.151.23.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.151.23.68, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aSdezDkSJeRkIQGTjzwX_gAAAAI"]
[Thu Nov 27 04:10:52.748486 2025] [proxy_fcgi:error] [pid 6201:tid 6207] [client 49.151.23.68:58758] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 04:46:40.672990 2025] [:error] [pid 6201:tid 6229] [client 203.33.203.148:35619] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aSdnMDkSJeRkIQGTjzwgKAAAABg"]
[Thu Nov 27 05:39:54.638132 2025] [:error] [pid 6202:tid 6250] [client 152.42.180.191:63997] [client 152.42.180.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aSdzqtJa7NTP0XPyZ6lyVwAAAFE"]
[Thu Nov 27 08:53:09.101906 2025] [proxy_fcgi:error] [pid 19015:tid 19084] [client 145.239.10.137:50170] AH01071: Got error 'Primary script unknown', referer: http://pumpbooking.com/image.php
[Thu Nov 27 09:07:49.785848 2025] [:error] [pid 39563:tid 39585] [client 206.81.24.227:55940] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2/api-docs"] [unique_id "aSekZTNSKUd-PJ2wU0QnTwAAARQ"]
[Thu Nov 27 09:07:51.032486 2025] [:error] [pid 39563:tid 39589] [client 206.81.24.227:47066] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3/api-docs"] [unique_id "aSekZzNSKUd-PJ2wU0QnUAAAARg"]
[Thu Nov 27 09:07:52.257985 2025] [:error] [pid 19119:tid 19194] [client 206.81.24.227:47074] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api-docs/swagger.json"] [unique_id "aSekaBsL_RTusriYkweGtwAAANQ"]
[Thu Nov 27 09:07:53.118485 2025] [:error] [pid 40009:tid 40084] [client 206.81.24.227:47084] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/swagger.json"] [unique_id "aSekaUJuxjShta_KR6UFcQAAAVQ"]
[Thu Nov 27 09:07:54.017188 2025] [:error] [pid 19014:tid 19044] [client 206.81.24.227:47094] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/@vite/env"] [unique_id "aSekao2utvwZ4eADRmoA0wAAAEA"]
[Thu Nov 27 09:07:54.726104 2025] [:error] [pid 40009:tid 40071] [client 206.81.24.227:47108] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/actuator/env"] [unique_id "aSekakJuxjShta_KR6UFcwAAAUg"]
[Thu Nov 27 09:07:55.789569 2025] [:error] [pid 40009:tid 40080] [client 206.81.24.227:47120] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSeka0JuxjShta_KR6UFdgAAAVA"]
[Thu Nov 27 09:07:56.539929 2025] [:error] [pid 40009:tid 40074] [client 206.81.24.227:47128] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server"] [unique_id "aSekbEJuxjShta_KR6UFeAAAAUs"]
[Thu Nov 27 09:07:57.455113 2025] [:error] [pid 39563:tid 39569] [client 206.81.24.227:47138] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aSekbTNSKUd-PJ2wU0QnUwAAAQQ"]
[Thu Nov 27 09:07:58.614349 2025] [:error] [pid 40009:tid 40073] [client 206.81.24.227:47148] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aSekbkJuxjShta_KR6UFfAAAAUo"]
[Thu Nov 27 09:07:59.386938 2025] [:error] [pid 19013:tid 19036] [client 206.81.24.227:47160] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug/default/view"] [unique_id "aSekb4aBrX8b6-N6_86cmQAAABM"]
[Thu Nov 27 09:08:00.494641 2025] [:error] [pid 19119:tid 19190] [client 206.81.24.227:47164] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2/_catalog"] [unique_id "aSekcBsL_RTusriYkweGuwAAANA"]
[Thu Nov 27 09:08:01.347802 2025] [:error] [pid 40009:tid 40086] [client 206.81.24.227:37138] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSekcUJuxjShta_KR6UFfwAAAVY"]
[Thu Nov 27 09:08:02.989780 2025] [:error] [pid 19015:tid 19088] [client 206.81.24.227:37146] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server-status"] [unique_id "aSekcg4MxyJWPPh2qEjHpgAAAJE"]
[Thu Nov 27 09:08:03.854543 2025] [:error] [pid 40009:tid 40075] [client 206.81.24.227:37156] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login.action"] [unique_id "aSekc0JuxjShta_KR6UFhAAAAUw"]
[Thu Nov 27 09:08:05.168684 2025] [:error] [pid 19015:tid 19090] [client 206.81.24.227:37170] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_all_dbs"] [unique_id "aSekdQ4MxyJWPPh2qEjHqAAAAJM"]
[Thu Nov 27 09:08:05.894572 2025] [:error] [pid 19119:tid 19197] [client 206.81.24.227:37180] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.DS_Store"] [unique_id "aSekdRsL_RTusriYkweGvQAAANc"]
[Thu Nov 27 09:08:06.910997 2025] [:error] [pid 19119:tid 19187] [client 206.81.24.227:37186] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aSekdhsL_RTusriYkweGwQAAAM0"]
[Thu Nov 27 09:08:07.557947 2025] [:error] [pid 39563:tid 39584] [client 206.81.24.227:37200] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aSekdzNSKUd-PJ2wU0QnXAAAARM"]
[Thu Nov 27 09:08:08.614769 2025] [:error] [pid 19013:tid 19020] [client 206.81.24.227:37208] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSekeIaBrX8b6-N6_86cnAAAAAM"]
[Thu Nov 27 09:08:09.528938 2025] [:error] [pid 19119:tid 19185] [client 206.81.24.227:37218] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.json"] [unique_id "aSekeRsL_RTusriYkweGwwAAAMs"]
[Thu Nov 27 09:08:10.346852 2025] [:error] [pid 19119:tid 19175] [client 206.81.24.227:37222] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/telescope/requests"] [unique_id "aSekehsL_RTusriYkweGxwAAAME"]
[Thu Nov 27 09:08:11.180925 2025] [:error] [pid 39563:tid 39573] [client 206.81.24.227:60750] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aSekezNSKUd-PJ2wU0QnXwAAAQg"]
[Thu Nov 27 09:16:53.834157 2025] [proxy_fcgi:error] [pid 19119:tid 19189] [client 3.89.133.107:51193] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.278631 2025] [:error] [pid 40009:tid 40088] [client 3.89.133.107:5450] [client 3.89.133.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/wp-config.txt"] [unique_id "aSemhkJuxjShta_KR6UJcAAAAVg"]
[Thu Nov 27 09:16:54.300901 2025] [:error] [pid 19013:tid 19035] [client 54.89.94.128:17149] [client 54.89.94.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.htaccess"] [unique_id "aSemhoaBrX8b6-N6_86fCQAAABI"]
[Thu Nov 27 09:16:54.359472 2025] [proxy_fcgi:error] [pid 19119:tid 19198] [client 3.89.133.107:17052] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.593985 2025] [proxy_fcgi:error] [pid 19119:tid 19181] [client 18.233.102.150:24208] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.616865 2025] [proxy_fcgi:error] [pid 19119:tid 19186] [client 3.89.133.107:51193] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.621170 2025] [proxy_fcgi:error] [pid 40009:tid 40088] [client 18.233.102.150:38706] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.919877 2025] [proxy_fcgi:error] [pid 40009:tid 40082] [client 18.233.102.150:18316] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.925423 2025] [proxy_fcgi:error] [pid 39563:tid 39583] [client 18.233.102.150:50015] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:54.952753 2025] [proxy_fcgi:error] [pid 19119:tid 19190] [client 18.233.102.150:39220] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:55.174798 2025] [proxy_fcgi:error] [pid 40009:tid 40068] [client 18.233.102.150:51874] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:55.233619 2025] [proxy_fcgi:error] [pid 39563:tid 39584] [client 18.233.102.150:33221] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:55.380116 2025] [proxy_fcgi:error] [pid 40009:tid 40074] [client 18.233.102.150:31881] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:16:55.495535 2025] [:error] [pid 19119:tid 19192] [client 18.233.102.150:46785] [client 18.233.102.150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/output.log"] [unique_id "aSemhxsL_RTusriYkweMbQAAANI"]
[Thu Nov 27 09:16:55.541017 2025] [:error] [pid 39563:tid 39572] [client 18.233.102.150:40406] [client 18.233.102.150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/bin.log"] [unique_id "aSemhzNSKUd-PJ2wU0QrKwAAAQc"]
[Thu Nov 27 09:16:56.932651 2025] [:error] [pid 19119:tid 19195] [client 18.233.102.150:59155] [client 18.233.102.150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/results.log"] [unique_id "aSemiBsL_RTusriYkweMlgAAANU"]
[Thu Nov 27 09:17:11.065349 2025] [:error] [pid 19119:tid 19186] [client 3.89.133.107:48037] [client 3.89.133.107] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/datalog/results.log"] [unique_id "aSemlxsL_RTusriYkweM3wAAAMw"]
[Thu Nov 27 09:17:11.697015 2025] [proxy_fcgi:error] [pid 40009:tid 40077] [client 3.89.133.107:26132] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:11.748603 2025] [proxy_fcgi:error] [pid 19119:tid 19182] [client 3.89.133.107:58327] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:11.773664 2025] [proxy_fcgi:error] [pid 40009:tid 40081] [client 3.89.133.107:16047] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:11.976089 2025] [proxy_fcgi:error] [pid 19119:tid 19194] [client 3.89.133.107:60522] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:12.186736 2025] [proxy_fcgi:error] [pid 19015:tid 19095] [client 3.89.133.107:16507] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:12.684816 2025] [proxy_fcgi:error] [pid 19013:tid 19039] [client 3.89.133.107:3677] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:16.542186 2025] [:error] [pid 19014:tid 19046] [client 3.89.133.107:3729] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/logs/RoyalMailUk.txt"] [unique_id "aSemnI2utvwZ4eADRmoEZwAAAEI"]
[Thu Nov 27 09:17:16.838818 2025] [:error] [pid 19013:tid 19020] [client 3.89.133.107:3856] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dongo1003.txt"] [unique_id "aSemnIaBrX8b6-N6_86fXwAAAAM"]
[Thu Nov 27 09:17:16.842514 2025] [:error] [pid 19119:tid 19175] [client 3.89.133.107:4659] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/CIBCresults.txt"] [unique_id "aSemnBsL_RTusriYkweNJwAAAME"]
[Thu Nov 27 09:17:17.159264 2025] [:error] [pid 39563:tid 39584] [client 3.89.133.107:20118] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rezlt.txt"] [unique_id "aSemnTNSKUd-PJ2wU0QrqAAAARM"]
[Thu Nov 27 09:17:17.487572 2025] [:error] [pid 19119:tid 19197] [client 3.89.133.107:11314] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/registry.txt"] [unique_id "aSemnRsL_RTusriYkweNQAAAANc"]
[Thu Nov 27 09:17:17.575732 2025] [:error] [pid 39563:tid 39588] [client 3.89.133.107:65064] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/assets/logs/san.txt"] [unique_id "aSemnTNSKUd-PJ2wU0QrtgAAARc"]
[Thu Nov 27 09:17:17.700865 2025] [:error] [pid 39563:tid 39585] [client 3.89.133.107:55526] [client 3.89.133.107] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pumpbooking.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/install.ini"] [unique_id "aSemnTNSKUd-PJ2wU0QruAAAARQ"]
[Thu Nov 27 09:17:17.743648 2025] [:error] [pid 19015:tid 19094] [client 3.89.133.107:20309] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/turbotax.txt"] [unique_id "aSemnQ4MxyJWPPh2qEjLBwAAAJc"]
[Thu Nov 27 09:17:17.765635 2025] [:error] [pid 19119:tid 19190] [client 3.89.133.107:2159] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/assets/logs/hal.txt"] [unique_id "aSemnRsL_RTusriYkweNSwAAANA"]
[Thu Nov 27 09:17:17.773995 2025] [proxy_fcgi:error] [pid 39563:tid 39578] [client 3.89.133.107:19159] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 09:17:17.784266 2025] [:error] [pid 19119:tid 19186] [client 3.89.133.107:22941] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xxx.txt"] [unique_id "aSemnRsL_RTusriYkweNTgAAAMw"]
[Thu Nov 27 09:17:17.849206 2025] [:error] [pid 19015:tid 19078] [client 3.89.133.107:34067] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xcan.txt"] [unique_id "aSemnQ4MxyJWPPh2qEjLCgAAAIc"]
[Thu Nov 27 09:17:17.946037 2025] [:error] [pid 39563:tid 39589] [client 3.89.133.107:55526] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nat.txt"] [unique_id "aSemnTNSKUd-PJ2wU0QrwAAAARg"]
[Thu Nov 27 09:17:17.946177 2025] [:error] [pid 19119:tid 19194] [client 3.89.133.107:2791] [client 3.89.133.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/result/total_click.txt"] [unique_id "aSemnRsL_RTusriYkweNUwAAANQ"]
[Mon Dec 01 20:38:10.038318 2025] [autoindex:error] [pid 37488:tid 37568] [client 4.217.180.63:4087] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 20:38:10.245159 2025] [:error] [pid 37488:tid 37567] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/xa.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:10.541264 2025] [:error] [pid 37488:tid 37552] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:10.870651 2025] [:error] [pid 37488:tid 37562] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:11.023299 2025] [:error] [pid 37488:tid 37560] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.de/
[Mon Dec 01 20:38:11.230029 2025] [:error] [pid 37488:tid 37556] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:11.713631 2025] [:error] [pid 37488:tid 37553] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:11.878003 2025] [:error] [pid 37488:tid 37561] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:38:12.360636 2025] [:error] [pid 37488:tid 37545] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:12.505363 2025] [:error] [pid 37488:tid 37551] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.bing.com/
[Mon Dec 01 20:38:13.177689 2025] [:error] [pid 37488:tid 37558] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.bing.com/
[Mon Dec 01 20:38:13.350327 2025] [:error] [pid 37488:tid 37565] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:13.516250 2025] [:error] [pid 37488:tid 37567] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.de/
[Mon Dec 01 20:38:14.180299 2025] [:error] [pid 37488:tid 37552] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.com/
[Mon Dec 01 20:38:16.231912 2025] [:error] [pid 37488:tid 37561] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:16.610009 2025] [:error] [pid 37488:tid 37545] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Mon Dec 01 20:38:16.755762 2025] [:error] [pid 37488:tid 37549] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Mon Dec 01 20:38:17.196141 2025] [:error] [pid 37488:tid 37551] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/dex.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:17.368291 2025] [:error] [pid 37488:tid 37555] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php, referer: https://www.bing.com/
[Mon Dec 01 20:38:18.555531 2025] [:error] [pid 37488:tid 37550] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.bing.com/
[Mon Dec 01 20:38:18.955178 2025] [:error] [pid 37488:tid 37553] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:19.112597 2025] [:error] [pid 37488:tid 37548] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:19.616046 2025] [:error] [pid 37488:tid 37545] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:38:19.860486 2025] [:error] [pid 37488:tid 37549] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:20.007986 2025] [:error] [pid 37488:tid 37547] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:20.209324 2025] [:error] [pid 37488:tid 37546] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://www.bing.com/
[Mon Dec 01 20:38:20.357305 2025] [:error] [pid 37488:tid 37558] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:20.508338 2025] [:error] [pid 37488:tid 37563] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php, referer: https://www.yahoo.com/
[Mon Dec 01 20:38:20.988849 2025] [:error] [pid 37488:tid 37550] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php, referer: https://www.google.de/
[Mon Dec 01 20:38:21.597194 2025] [:error] [pid 37488:tid 37559] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/index.bak.php, referer: https://www.bing.com/
[Mon Dec 01 20:38:21.921650 2025] [:error] [pid 37488:tid 37562] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:22.090922 2025] [:error] [pid 37488:tid 37561] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.de/
[Mon Dec 01 20:38:23.452249 2025] [:error] [pid 37488:tid 37545] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:23.644931 2025] [:error] [pid 37488:tid 37551] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:38:23.804891 2025] [:error] [pid 37488:tid 37547] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:23.956437 2025] [:error] [pid 37488:tid 37546] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:38:24.251401 2025] [:error] [pid 37488:tid 37564] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:24.403033 2025] [:error] [pid 37488:tid 37563] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:38:24.573970 2025] [:error] [pid 37488:tid 37563] [client 4.217.180.63:4087] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php, referer: https://www.yahoo.com/
[Mon Dec 01 20:38:31.859837 2025] [:error] [pid 37487:tid 37529] [client 4.217.180.63:4090] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.de/
[Mon Dec 01 20:38:32.059299 2025] [:error] [pid 37487:tid 37527] [client 4.217.180.63:4090] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php, referer: https://www.google.com/
[Mon Dec 01 20:38:32.344021 2025] [:error] [pid 37487:tid 37541] [client 4.217.180.63:4090] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php, referer: https://www.yahoo.com/
[Mon Dec 01 20:38:32.529492 2025] [:error] [pid 37487:tid 37538] [client 4.217.180.63:4090] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:38:32.671976 2025] [:error] [pid 37487:tid 37525] [client 4.217.180.63:4090] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aS2MSBkh5IowGSjYDDKtOQAAAMc"], referer: https://duckduckgo.com/
[Mon Dec 01 20:38:39.322248 2025] [:error] [pid 37581:tid 37601] [client 4.217.180.63:4059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:45.821924 2025] [:error] [pid 37581:tid 37591] [client 4.217.180.63:4059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:46.475002 2025] [:error] [pid 37581:tid 37601] [client 4.217.180.63:4059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments.php, referer: https://www.google.com/
[Mon Dec 01 20:38:46.664334 2025] [:error] [pid 37581:tid 37592] [client 4.217.180.63:4059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.google.fr/
[Mon Dec 01 20:38:51.597356 2025] [:error] [pid 37581:tid 37607] [client 4.217.180.63:4059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:38:52.701681 2025] [:error] [pid 37581:tid 37591] [client 4.217.180.63:4059] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aS2MXIpLkLAzaHoItgafggAAAUg"], referer: https://www.google.fr/
[Mon Dec 01 20:38:55.325091 2025] [:error] [pid 37488:tid 37565] [client 4.217.180.63:4092] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aS2MXwYuXqVQB9eas3O9uwAAABQ"], referer: https://www.google.fr/
[Mon Dec 01 20:38:57.459382 2025] [:error] [pid 37486:tid 37501] [client 4.217.180.63:4062] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aS2MYcFyhayybvna6fnMNAAAAEs"], referer: https://www.google.co.uk/
[Mon Dec 01 20:39:00.047756 2025] [:error] [pid 37581:tid 37592] [client 4.217.180.63:4042] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aS2MZIpLkLAzaHoItgafpAAAAUk"], referer: https://www.google.fr/
[Mon Dec 01 20:39:00.924944 2025] [:error] [pid 37581:tid 37590] [client 4.217.180.63:3980] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aS2MZIpLkLAzaHoItgafrQAAAUc"], referer: https://www.google.co.uk/
[Mon Dec 01 20:39:02.500752 2025] [:error] [pid 37581:tid 37594] [client 4.217.180.63:3976] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aS2MZopLkLAzaHoItgafswAAAUs"], referer: https://www.google.com/
[Mon Dec 01 20:39:06.608572 2025] [:error] [pid 37581:tid 37596] [client 4.217.180.63:4082] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aS2MaopLkLAzaHoItgafyAAAAU0"], referer: https://www.bing.com/
[Mon Dec 01 20:39:10.327016 2025] [:error] [pid 37581:tid 37586] [client 4.217.180.63:3917] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aS2MbopLkLAzaHoItgaf2gAAAUM"], referer: https://www.google.com/
[Mon Dec 01 20:39:13.517873 2025] [:error] [pid 37486:tid 37503] [client 4.217.180.63:4037] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS2MccFyhayybvna6fnMawAAAE0"], referer: https://www.google.com/
[Mon Dec 01 20:39:14.995994 2025] [:error] [pid 37581:tid 37593] [client 4.217.180.63:4032] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aS2McopLkLAzaHoItgaf7QAAAUo"], referer: https://duckduckgo.com/
[Mon Dec 01 20:39:16.412940 2025] [:error] [pid 37487:tid 37527] [client 4.217.180.63:4079] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aS2MdBkh5IowGSjYDDKtmwAAAMk"], referer: https://www.bing.com/
[Mon Dec 01 20:39:17.517630 2025] [:error] [pid 37581:tid 37585] [client 4.217.180.63:4044] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aS2MdYpLkLAzaHoItgaf_AAAAUI"], referer: https://www.yahoo.com/
[Mon Dec 01 20:39:18.567179 2025] [:error] [pid 37581:tid 37598] [client 4.217.180.63:3984] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aS2MdopLkLAzaHoItgagAAAAAU8"], referer: https://www.bing.com/
[Mon Dec 01 20:39:23.402269 2025] [:error] [pid 37486:tid 37505] [client 4.217.180.63:4066] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aS2Me8Fyhayybvna6fnMpwAAAE8"], referer: https://duckduckgo.com/
[Mon Dec 01 20:39:25.177712 2025] [:error] [pid 37581:tid 37595] [client 4.217.180.63:4036] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aS2MfYpLkLAzaHoItgagLgAAAUw"], referer: https://www.google.de/
[Mon Dec 01 20:39:27.297243 2025] [:error] [pid 37488:tid 37559] [client 4.217.180.63:4065] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/index.php"] [unique_id "aS2MfwYuXqVQB9eas3O-JwAAAA4"], referer: https://duckduckgo.com/
[Mon Dec 01 20:39:28.236221 2025] [:error] [pid 37486:tid 37491] [client 4.217.180.63:4063] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aS2MgMFyhayybvna6fnMsgAAAEE"], referer: https://www.google.com/
[Mon Dec 01 20:39:30.202000 2025] [:error] [pid 37488:tid 37558] [client 4.217.180.63:4048] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aS2MggYuXqVQB9eas3O-NQAAAA0"], referer: https://www.yahoo.com/
[Mon Dec 01 20:39:32.498320 2025] [:error] [pid 37486:tid 37513] [client 4.217.180.63:4060] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aS2MhMFyhayybvna6fnMwQAAAFc"], referer: https://www.bing.com/
[Mon Dec 01 20:39:36.772110 2025] [:error] [pid 37581:tid 37586] [client 4.217.180.63:4069] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aS2MiIpLkLAzaHoItgagdQAAAUM"], referer: https://www.google.com/
[Mon Dec 01 20:39:38.471709 2025] [:error] [pid 37488:tid 37545] [client 4.217.180.63:4089] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aS2MigYuXqVQB9eas3O-TgAAAAA"], referer: https://www.bing.com/
[Mon Dec 01 20:39:39.592504 2025] [:error] [pid 37488:tid 37552] [client 4.217.180.63:4047] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aS2MiwYuXqVQB9eas3O-VAAAAAc"], referer: https://www.yahoo.com/
[Mon Dec 01 20:39:40.922016 2025] [:error] [pid 37581:tid 37583] [client 4.217.180.63:4002] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS2MjIpLkLAzaHoItgaggwAAAUA"], referer: https://www.yahoo.com/
[Mon Dec 01 20:39:41.901415 2025] [:error] [pid 37487:tid 37537] [client 4.217.180.63:4078] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS2MjRkh5IowGSjYDDKt2AAAANM"], referer: https://duckduckgo.com/
[Mon Dec 01 20:39:42.827262 2025] [:error] [pid 37487:tid 37530] [client 4.217.180.63:4061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.co.uk/
[Mon Dec 01 20:39:42.974165 2025] [:error] [pid 37487:tid 37528] [client 4.217.180.63:4061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.yahoo.com/
[Mon Dec 01 20:39:43.124031 2025] [:error] [pid 37487:tid 37534] [client 4.217.180.63:4061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php, referer: https://www.google.com/
[Mon Dec 01 20:39:43.445075 2025] [:error] [pid 37487:tid 37521] [client 4.217.180.63:4061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Mon Dec 01 20:39:43.853330 2025] [:error] [pid 37487:tid 37541] [client 4.217.180.63:4061] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Mon Dec 01 22:00:23.250562 2025] [:error] [pid 37488:tid 37562] [client 167.172.16.197:54342] [client 167.172.16.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aS2fdwYuXqVQB9eas3PXlwAAABE"]
[Mon Dec 01 22:00:30.024409 2025] [:error] [pid 51614:tid 51630] [client 167.172.16.197:60036] [client 167.172.16.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aS2ffqEd44yERYvpOsOufAAAAQ4"]
[Tue Dec 02 01:31:40.581677 2025] [:error] [pid 56397:tid 56404] [client 110.166.71.39:58433] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aS3Q_MGKI2_WNDIMokIajAAAAMU"]
[Tue Dec 02 02:11:52.707055 2025] [:error] [pid 18734:tid 18760] [client 103.65.236.149:65048] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aS3aaBDodp5NNlEyq_AGgwAAAFc"]
[Tue Dec 02 02:11:52.972404 2025] [:error] [pid 18797:tid 18816] [client 103.65.236.149:56646] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aS3aaHwDQfILaZGBrIxm6wAAAZE"]
[Tue Dec 02 08:19:11.145878 2025] [:error] [pid 3647:tid 3677] [client 182.42.110.255:50116] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aS4wf1JaqGDFgh_0XI_q4AAAABg"]
[Tue Dec 02 14:30:12.506371 2025] [:error] [pid 5232:tid 5248] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Tue Dec 02 14:30:12.778517 2025] [:error] [pid 5232:tid 5241] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Dec 02 14:30:13.050193 2025] [:error] [pid 5232:tid 5237] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Tue Dec 02 14:30:13.594752 2025] [:error] [pid 5232:tid 5235] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Tue Dec 02 14:30:13.868207 2025] [:error] [pid 5232:tid 5249] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/info1.php
[Tue Dec 02 14:30:14.140065 2025] [:error] [pid 5232:tid 5244] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/info2.php
[Tue Dec 02 14:30:14.413139 2025] [:error] [pid 5232:tid 5254] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/info3.php
[Tue Dec 02 14:30:14.685193 2025] [:error] [pid 5232:tid 5248] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Tue Dec 02 14:30:14.956295 2025] [:error] [pid 5232:tid 5258] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Tue Dec 02 14:30:15.228203 2025] [:error] [pid 5232:tid 5256] [client 52.210.113.38:60982] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Tue Dec 02 14:30:15.496944 2025] [:error] [pid 5232:tid 5242] [client 52.210.113.38:60982] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpversion.php"] [unique_id "aS6HdwApmO-auDy1ob6fvwAAAQg"]
[Tue Dec 02 14:30:16.741170 2025] [:error] [pid 3649:tid 3717] [client 52.210.113.38:60984] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/php_version.php"] [unique_id "aS6HeLwjL4uqC6YFjxE4UwAAAIY"]
[Tue Dec 02 14:30:17.810740 2025] [:error] [pid 3760:tid 3772] [client 52.210.113.38:60986] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/serverinfo.php"] [unique_id "aS6HeVjLYEjdWVcKgVUdOQAAAMo"]
[Tue Dec 02 14:30:18.880625 2025] [:error] [pid 3649:tid 3732] [client 52.210.113.38:60990] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.php"] [unique_id "aS6HerwjL4uqC6YFjxE4ZQAAAJU"]
[Tue Dec 02 14:30:19.949263 2025] [:error] [pid 3649:tid 3711] [client 52.210.113.38:32770] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aS6He7wjL4uqC6YFjxE4agAAAIA"]
[Tue Dec 02 14:30:21.020148 2025] [:error] [pid 3649:tid 3723] [client 52.210.113.38:32776] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/diagnostic.php"] [unique_id "aS6HfbwjL4uqC6YFjxE4dgAAAIw"]
[Tue Dec 02 14:30:22.090074 2025] [:error] [pid 48650:tid 48678] [client 52.210.113.38:43518] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phptest.php"] [unique_id "aS6HfoQuWSn3xrJsXbkJnQAAAdc"]
[Tue Dec 02 14:30:23.158784 2025] [:error] [pid 3648:tid 3695] [client 52.210.113.38:43524] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aS6Hf-QEp5icp6XOJr18qgAAAEs"]
[Tue Dec 02 14:30:24.231011 2025] [:error] [pid 5232:tid 5245] [client 52.210.113.38:43538] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/probe.php"] [unique_id "aS6HgAApmO-auDy1ob6fxwAAAQs"]
[Tue Dec 02 14:30:25.301322 2025] [:error] [pid 5232:tid 5256] [client 52.210.113.38:43542] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_profiler/phpinfo"] [unique_id "aS6HgQApmO-auDy1ob6fygAAARY"]
[Tue Dec 02 14:30:26.371992 2025] [:error] [pid 5232:tid 5243] [client 52.210.113.38:43556] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aS6HggApmO-auDy1ob6fzQAAAQk"]
[Tue Dec 02 14:30:27.440629 2025] [:error] [pid 3648:tid 3684] [client 52.210.113.38:43562] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aS6Hg-QEp5icp6XOJr18uQAAAEA"]
[Tue Dec 02 14:30:28.510773 2025] [:error] [pid 5272:tid 5279] [client 52.210.113.38:43576] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3.php"] [unique_id "aS6HhOwbFoRzPGfZYVQUQgAAAUQ"]
[Tue Dec 02 14:30:29.580655 2025] [:error] [pid 3647:tid 3664] [client 52.210.113.38:43586] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aS6HhVJaqGDFgh_0XI9FkgAAAAs"]
[Tue Dec 02 14:30:30.654317 2025] [:error] [pid 5232:tid 5244] [client 52.210.113.38:43602] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aS6HhgApmO-auDy1ob6f1QAAAQo"]
[Tue Dec 02 14:30:31.725630 2025] [:error] [pid 48650:tid 48662] [client 52.210.113.38:48894] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info_php.php"] [unique_id "aS6Hh4QuWSn3xrJsXbkJtAAAAcc"]
[Tue Dec 02 14:30:32.794404 2025] [:error] [pid 48650:tid 48667] [client 52.210.113.38:48900] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/php-info.php"] [unique_id "aS6HiIQuWSn3xrJsXbkJuQAAAcw"]
[Tue Dec 02 14:30:33.865065 2025] [:error] [pid 3647:tid 3661] [client 52.210.113.38:48906] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/infophp.php"] [unique_id "aS6HiVJaqGDFgh_0XI9FmgAAAAg"]
[Tue Dec 02 14:30:34.934937 2025] [:error] [pid 3649:tid 3719] [client 52.210.113.38:48920] [client 52.210.113.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/testphp.php"] [unique_id "aS6HirwjL4uqC6YFjxE4lQAAAIg"]
[Tue Dec 02 14:30:36.003789 2025] [:error] [pid 3649:tid 3733] [client 52.210.113.38:48922] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aS6HjLwjL4uqC6YFjxE4mwAAAJY"]
[Tue Dec 02 14:30:37.073732 2025] [:error] [pid 5273:tid 5313] [client 52.210.113.38:48928] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aS6HjSMmXO5H1kNwHHXj1AAAAYs"]
[Tue Dec 02 14:30:38.144494 2025] [:error] [pid 3649:tid 3727] [client 52.210.113.38:48944] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aS6HjrwjL4uqC6YFjxE4nwAAAJA"]
[Tue Dec 02 14:30:39.214905 2025] [:error] [pid 48650:tid 48665] [client 52.210.113.38:48952] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.remote"] [unique_id "aS6Hj4QuWSn3xrJsXbkJwAAAAco"]
[Tue Dec 02 14:30:40.289363 2025] [:error] [pid 5232:tid 5256] [client 52.210.113.38:48958] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aS6HkAApmO-auDy1ob6f7QAAARY"]
[Tue Dec 02 14:30:41.360593 2025] [:error] [pid 48650:tid 48670] [client 52.210.113.38:48972] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development"] [unique_id "aS6HkYQuWSn3xrJsXbkJxAAAAc8"]
[Tue Dec 02 14:30:42.429472 2025] [:error] [pid 48650:tid 48663] [client 52.210.113.38:47106] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aS6HkoQuWSn3xrJsXbkJxwAAAcg"]
[Tue Dec 02 14:30:43.499788 2025] [:error] [pid 3648:tid 3691] [client 52.210.113.38:47122] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test"] [unique_id "aS6Hk-QEp5icp6XOJr181QAAAEc"]
[Tue Dec 02 14:30:44.570108 2025] [:error] [pid 3649:tid 3735] [client 52.210.113.38:47134] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aS6HlLwjL4uqC6YFjxE4rAAAAJg"]
[Tue Dec 02 14:30:45.640891 2025] [:error] [pid 48650:tid 48675] [client 52.210.113.38:47146] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.sample"] [unique_id "aS6HlYQuWSn3xrJsXbkJzQAAAdQ"]
[Tue Dec 02 14:30:46.712820 2025] [:error] [pid 3649:tid 3726] [client 52.210.113.38:47154] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aS6HlrwjL4uqC6YFjxE4sgAAAI8"]
[Tue Dec 02 14:30:47.786654 2025] [:error] [pid 5232:tid 5251] [client 52.210.113.38:47158] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aS6HlwApmO-auDy1ob6f9AAAARE"]
[Tue Dec 02 14:30:48.857453 2025] [:error] [pid 5232:tid 5247] [client 52.210.113.38:47174] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aS6HmAApmO-auDy1ob6f-AAAAQ0"]
[Tue Dec 02 14:30:49.927341 2025] [:error] [pid 3649:tid 3715] [client 52.210.113.38:47188] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.1"] [unique_id "aS6HmbwjL4uqC6YFjxE4uwAAAIQ"]
[Tue Dec 02 14:30:50.998915 2025] [:error] [pid 5273:tid 5324] [client 52.210.113.38:47192] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2"] [unique_id "aS6HmiMmXO5H1kNwHHXj4AAAAZY"]
[Tue Dec 02 14:30:52.068759 2025] [:error] [pid 5272:tid 5293] [client 52.210.113.38:52194] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod.local"] [unique_id "aS6HnOwbFoRzPGfZYVQUWQAAAVI"]
[Tue Dec 02 14:30:53.139725 2025] [:error] [pid 3648:tid 3687] [client 52.210.113.38:52202] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev.local"] [unique_id "aS6HneQEp5icp6XOJr184gAAAEM"]
[Tue Dec 02 14:30:54.209476 2025] [:error] [pid 3649:tid 3732] [client 52.210.113.38:52206] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/vendor/.env"] [unique_id "aS6HnrwjL4uqC6YFjxE4wgAAAJU"]
[Tue Dec 02 14:30:55.284416 2025] [:error] [pid 3760:tid 3775] [client 52.210.113.38:52216] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/lib/.env"] [unique_id "aS6Hn1jLYEjdWVcKgVUdYgAAAM0"]
[Tue Dec 02 14:30:56.356673 2025] [:error] [pid 3647:tid 3655] [client 52.210.113.38:52224] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/lab/.env"] [unique_id "aS6HoFJaqGDFgh_0XI9F5QAAAAI"]
[Tue Dec 02 14:30:57.429521 2025] [:error] [pid 3647:tid 3662] [client 52.210.113.38:52230] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/cronlab/.env"] [unique_id "aS6HoVJaqGDFgh_0XI9F7wAAAAk"]
[Tue Dec 02 14:30:58.501191 2025] [:error] [pid 5273:tid 5311] [client 52.210.113.38:52234] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/cron/.env"] [unique_id "aS6HoiMmXO5H1kNwHHXj4wAAAYk"]
[Tue Dec 02 14:30:59.570453 2025] [:error] [pid 3647:tid 3671] [client 52.210.113.38:52238] [client 52.210.113.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/core/.env"] [unique_id "aS6Ho1JaqGDFgh_0XI9F_AAAABI"]
[Tue Dec 02 14:35:09.535888 2025] [:error] [pid 48650:tid 48672] [client 58.49.233.126:59713] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aS6InYQuWSn3xrJsXbkLvgAAAdE"]
[Tue Dec 02 16:32:36.515186 2025] [:error] [pid 48650:tid 48674] [client 64.226.67.113:54278] [client 64.226.67.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.67.113, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aS6kJIQuWSn3xrJsXbk9ygAAAdM"]
[Tue Dec 02 16:32:36.518847 2025] [:error] [pid 48650:tid 48674] [client 64.226.67.113:54278] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Dec 02 20:18:29.679473 2025] [:error] [pid 3648:tid 3687] [client 185.238.231.37:25443] [client 185.238.231.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.37, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aS7ZFeQEp5icp6XOJr3qFAAAAEM"]
[Tue Dec 02 20:18:29.683329 2025] [:error] [pid 3648:tid 3687] [client 185.238.231.37:25443] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Dec 02 21:23:00.082819 2025] [:error] [pid 5232:tid 5251] [client 60.188.57.0:47639] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aS7oNAApmO-auDy1ob4HUQAAARE"]
[Wed Dec 03 04:17:41.139518 2025] [:error] [pid 14082:tid 14106] [client 135.181.4.161:42838] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aS9JZWCTjxEQjhsJ5EQX7AAAARY"]
[Wed Dec 03 04:17:41.515618 2025] [:error] [pid 14082:tid 14093] [client 135.181.4.161:42848] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aS9JZWCTjxEQjhsJ5EQX7gAAAQk"]
[Wed Dec 03 04:59:54.987479 2025] [:error] [pid 33526:tid 33530] [client 35.229.75.4:49122] [client 35.229.75.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aS9TSmkHVvyO7JLEhwYA0wAAAoI"]
[Wed Dec 03 10:31:30.929764 2025] [:error] [pid 21970:tid 21980] [client 175.6.217.4:44472] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aS-hAmYwAeqEfyJIWdSbaAAAAAQ"]
[Wed Dec 03 14:24:11.577164 2025] [:error] [pid 32437:tid 32458] [client 110.235.188.5:30436] [client 110.235.188.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.235.188.5, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aS_Xi6BId4T5gQoDbCEOMAAAABI"]
[Wed Dec 03 14:24:11.582001 2025] [:error] [pid 32437:tid 32458] [client 110.235.188.5:30436] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 03 14:27:05.480208 2025] [:error] [pid 20608:tid 20638] [client 43.167.239.66:50512] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aS_YOU5WGptz5j0ZvYdChwAAAIE"]
[Wed Dec 03 16:57:48.974259 2025] [:error] [pid 20669:tid 20693] [client 180.110.203.108:57531] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aS_7jJLWoJXGOhmabmtjLAAAAVE"]
[Wed Dec 03 21:08:59.937778 2025] [:error] [pid 20607:tid 20619] [client 18.191.232.72:51242] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aTA2a_piIcI2BRWBwqyMhgAAAEk"]
[Wed Dec 03 21:09:00.719958 2025] [:error] [pid 32437:tid 32449] [client 18.191.232.72:49784] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aTA2bKBId4T5gQoDbCFxlQAAAAk"]
[Wed Dec 03 21:09:01.501385 2025] [:error] [pid 20607:tid 20623] [client 18.191.232.72:49794] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.local"] [unique_id "aTA2bfpiIcI2BRWBwqyMiQAAAE0"]
[Wed Dec 03 21:09:02.281401 2025] [:error] [pid 20707:tid 20723] [client 18.191.232.72:49796] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.production"] [unique_id "aTA2bjObjEHgU5ngsxfwAwAAAQ4"]
[Wed Dec 03 21:09:03.062453 2025] [:error] [pid 47815:tid 47824] [client 18.191.232.72:49810] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.development"] [unique_id "aTA2b0TsjPA8HXY_dpHg4AAAAMc"]
[Wed Dec 03 21:09:03.859593 2025] [:error] [pid 20707:tid 20720] [client 18.191.232.72:49814] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.bak"] [unique_id "aTA2bzObjEHgU5ngsxfwBwAAAQs"]
[Wed Dec 03 21:09:04.649831 2025] [:error] [pid 20669:tid 20700] [client 18.191.232.72:49818] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.example"] [unique_id "aTA2cJLWoJXGOhmabmvPdwAAAVg"]
[Wed Dec 03 21:09:05.440937 2025] [:error] [pid 20707:tid 20719] [client 18.191.232.72:49830] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.test"] [unique_id "aTA2cTObjEHgU5ngsxfwDAAAAQo"]
[Wed Dec 03 21:09:14.122754 2025] [:error] [pid 20608:tid 20643] [client 18.191.232.72:43544] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pumpbooking.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/config.ini"] [unique_id "aTA2ek5WGptz5j0ZvYee_AAAAIY"]
[Wed Dec 03 21:09:15.691748 2025] [:error] [pid 47926:tid 47943] [client 18.191.232.72:43564] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/configuration"] [unique_id "aTA2e2mj6HWCHJ9euRKbawAAAY8"]
[Wed Dec 03 21:09:16.481076 2025] [:error] [pid 32437:tid 32441] [client 18.191.232.72:43566] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/settings"] [unique_id "aTA2fKBId4T5gQoDbCFxnQAAAAE"]
[Wed Dec 03 21:09:17.282475 2025] [:error] [pid 32437:tid 32453] [client 18.191.232.72:43576] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/settings.json"] [unique_id "aTA2faBId4T5gQoDbCFxngAAAA0"]
[Wed Dec 03 21:09:18.072606 2025] [:error] [pid 20669:tid 20697] [client 18.191.232.72:43584] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/settings.py"] [unique_id "aTA2fpLWoJXGOhmabmvPlQAAAVU"]
[Wed Dec 03 21:09:18.872989 2025] [:error] [pid 47926:tid 47940] [client 18.191.232.72:43600] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/settings.rb"] [unique_id "aTA2fmmj6HWCHJ9euRKbegAAAYw"]
[Wed Dec 03 21:09:19.651032 2025] [:error] [pid 20707:tid 20719] [client 18.191.232.72:43608] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/app.config.js"] [unique_id "aTA2fzObjEHgU5ngsxfwJwAAAQo"]
[Wed Dec 03 21:09:20.428316 2025] [:error] [pid 47815:tid 47837] [client 18.191.232.72:39202] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/local.settings.json"] [unique_id "aTA2gETsjPA8HXY_dpHg5QAAANQ"]
[Wed Dec 03 21:09:21.207363 2025] [:error] [pid 20707:tid 20711] [client 18.191.232.72:39204] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.json"] [unique_id "aTA2gTObjEHgU5ngsxfwKgAAAQI"]
[Wed Dec 03 21:09:21.987182 2025] [:error] [pid 47815:tid 47827] [client 18.191.232.72:39208] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aTA2gUTsjPA8HXY_dpHg5gAAAMo"]
[Wed Dec 03 21:09:22.780998 2025] [:error] [pid 20669:tid 20690] [client 18.191.232.72:39216] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/info.php"] [unique_id "aTA2gpLWoJXGOhmabmvPnwAAAU4"]
[Wed Dec 03 21:09:23.559655 2025] [:error] [pid 32437:tid 32444] [client 18.191.232.72:39230] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/phpversion.php"] [unique_id "aTA2g6BId4T5gQoDbCFxpwAAAAQ"]
[Wed Dec 03 21:09:24.338291 2025] [:error] [pid 20669:tid 20696] [client 18.191.232.72:39242] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/test.php"] [unique_id "aTA2hJLWoJXGOhmabmvPoQAAAVQ"]
[Wed Dec 03 21:09:25.127946 2025] [:error] [pid 20707:tid 20720] [client 18.191.232.72:39246] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aTA2hTObjEHgU5ngsxfwMAAAAQs"]
[Wed Dec 03 21:09:25.909191 2025] [:error] [pid 20669:tid 20680] [client 18.191.232.72:39258] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/wp-config.php"] [unique_id "aTA2hZLWoJXGOhmabmvPowAAAUQ"]
[Wed Dec 03 21:09:26.688055 2025] [:error] [pid 47926:tid 47950] [client 18.191.232.72:39264] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/composer.json"] [unique_id "aTA2hmmj6HWCHJ9euRKbfQAAAZY"]
[Wed Dec 03 21:09:27.478871 2025] [:error] [pid 20607:tid 20631] [client 18.191.232.72:39268] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aTA2h_piIcI2BRWBwqyMqgAAAFU"]
[Wed Dec 03 21:09:28.258518 2025] [:error] [pid 20707:tid 20719] [client 18.191.232.72:39270] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.php"] [unique_id "aTA2iDObjEHgU5ngsxfwNAAAAQo"]
[Wed Dec 03 21:09:29.041617 2025] [:error] [pid 47815:tid 47819] [client 18.191.232.72:39286] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.php"] [unique_id "aTA2iUTsjPA8HXY_dpHg6AAAAMI"]
[Wed Dec 03 21:09:29.831013 2025] [:error] [pid 32437:tid 32452] [client 18.191.232.72:39302] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.aws/config"] [unique_id "aTA2iaBId4T5gQoDbCFxqgAAAAw"]
[Wed Dec 03 21:09:30.621467 2025] [:error] [pid 47815:tid 47829] [client 18.191.232.72:36294] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.aws/credentials"] [unique_id "aTA2ikTsjPA8HXY_dpHg6QAAAMw"]
[Wed Dec 03 21:09:31.399346 2025] [:error] [pid 32437:tid 32455] [client 18.191.232.72:36306] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/config"] [unique_id "aTA2i6BId4T5gQoDbCFxrwAAAA8"]
[Wed Dec 03 21:09:32.193460 2025] [:error] [pid 20669:tid 20679] [client 18.191.232.72:36310] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/credentials"] [unique_id "aTA2jJLWoJXGOhmabmvPqgAAAUM"]
[Wed Dec 03 21:09:32.983626 2025] [:error] [pid 47926:tid 47941] [client 18.191.232.72:36316] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws.json"] [unique_id "aTA2jGmj6HWCHJ9euRKbgAAAAY0"]
[Wed Dec 03 21:09:33.767021 2025] [:error] [pid 20607:tid 20616] [client 18.191.232.72:36324] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws-credentials.json"] [unique_id "aTA2jfpiIcI2BRWBwqyMsgAAAEY"]
[Wed Dec 03 21:09:34.545698 2025] [:error] [pid 47815:tid 47821] [client 18.191.232.72:36340] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws-config.js"] [unique_id "aTA2jkTsjPA8HXY_dpHg7QAAAMQ"]
[Wed Dec 03 21:09:35.335501 2025] [:error] [pid 20707:tid 20709] [client 18.191.232.72:36352] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws-keys.json"] [unique_id "aTA2jzObjEHgU5ngsxfwQQAAAQA"]
[Wed Dec 03 21:09:36.125312 2025] [:error] [pid 20669:tid 20676] [client 18.191.232.72:36364] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/secrets.yaml"] [unique_id "aTA2kJLWoJXGOhmabmvPqwAAAUA"]
[Wed Dec 03 21:09:36.904416 2025] [:error] [pid 20669:tid 20686] [client 18.191.232.72:36376] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/access-keys.js"] [unique_id "aTA2kJLWoJXGOhmabmvPrgAAAUo"]
[Wed Dec 03 21:09:37.704823 2025] [:error] [pid 20669:tid 20681] [client 18.191.232.72:36380] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/config.ini"] [unique_id "aTA2kZLWoJXGOhmabmvPrwAAAUU"]
[Wed Dec 03 21:09:38.494729 2025] [:error] [pid 47926:tid 47937] [client 18.191.232.72:36396] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/credentials.bak"] [unique_id "aTA2kmmj6HWCHJ9euRKbgQAAAYk"]
[Wed Dec 03 21:09:39.284059 2025] [:error] [pid 47926:tid 47949] [client 18.191.232.72:36410] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.aws/secrets"] [unique_id "aTA2k2mj6HWCHJ9euRKbgwAAAZU"]
[Wed Dec 03 21:09:40.076486 2025] [:error] [pid 20669:tid 20689] [client 18.191.232.72:40906] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws-env.json"] [unique_id "aTA2lJLWoJXGOhmabmvPsgAAAU0"]
[Wed Dec 03 21:09:40.865864 2025] [:error] [pid 20707:tid 20716] [client 18.191.232.72:40912] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws-keys.env"] [unique_id "aTA2lDObjEHgU5ngsxfwRQAAAQc"]
[Wed Dec 03 21:09:41.656990 2025] [:error] [pid 47815:tid 47819] [client 18.191.232.72:40922] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.aws/config.bak"] [unique_id "aTA2lUTsjPA8HXY_dpHg-QAAAMI"]
[Wed Dec 03 21:09:42.437630 2025] [:error] [pid 47815:tid 47829] [client 18.191.232.72:40926] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/secrets.json"] [unique_id "aTA2lkTsjPA8HXY_dpHg-gAAAMw"]
[Wed Dec 03 21:09:43.225704 2025] [:error] [pid 32437:tid 32449] [client 18.191.232.72:40928] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws/config.properties"] [unique_id "aTA2l6BId4T5gQoDbCFxuQAAAAk"]
[Wed Dec 03 21:09:44.006074 2025] [:error] [pid 20669:tid 20684] [client 18.191.232.72:40930] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.aws/credentials.json"] [unique_id "aTA2mJLWoJXGOhmabmvPtgAAAUg"]
[Wed Dec 03 21:09:44.797326 2025] [:error] [pid 20669:tid 20697] [client 18.191.232.72:40934] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws_keys.py"] [unique_id "aTA2mJLWoJXGOhmabmvPuQAAAVU"]
[Wed Dec 03 21:09:45.574858 2025] [:error] [pid 20669:tid 20692] [client 18.191.232.72:40946] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe/config"] [unique_id "aTA2mZLWoJXGOhmabmvPuwAAAVA"]
[Wed Dec 03 21:09:46.362710 2025] [:error] [pid 47926:tid 47938] [client 18.191.232.72:40956] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe.json"] [unique_id "aTA2mmmj6HWCHJ9euRKbjAAAAYo"]
[Wed Dec 03 21:09:47.151780 2025] [:error] [pid 20669:tid 20686] [client 18.191.232.72:40964] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe.js"] [unique_id "aTA2m5LWoJXGOhmabmvPvQAAAUo"]
[Wed Dec 03 21:09:47.930418 2025] [:error] [pid 32437:tid 32451] [client 18.191.232.72:40972] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe-config.yaml"] [unique_id "aTA2m6BId4T5gQoDbCFxvAAAAAs"]
[Wed Dec 03 21:09:48.721086 2025] [:error] [pid 32437:tid 32460] [client 18.191.232.72:40978] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe-keys.json"] [unique_id "aTA2nKBId4T5gQoDbCFxvgAAABQ"]
[Wed Dec 03 21:09:49.501161 2025] [:error] [pid 32437:tid 32462] [client 18.191.232.72:40992] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe/credentials"] [unique_id "aTA2naBId4T5gQoDbCFxvwAAABY"]
[Wed Dec 03 21:09:50.292041 2025] [:error] [pid 20707:tid 20727] [client 18.191.232.72:57632] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe/secrets.yml"] [unique_id "aTA2njObjEHgU5ngsxfwTQAAARI"]
[Wed Dec 03 21:09:51.081852 2025] [:error] [pid 20607:tid 20623] [client 18.191.232.72:57638] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe.env"] [unique_id "aTA2n_piIcI2BRWBwqyMywAAAE0"]
[Wed Dec 03 21:09:51.861542 2025] [:error] [pid 20607:tid 20619] [client 18.191.232.72:57650] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe/config.php"] [unique_id "aTA2n_piIcI2BRWBwqyMzAAAAEk"]
[Wed Dec 03 21:09:52.652919 2025] [:error] [pid 20607:tid 20618] [client 18.191.232.72:57660] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.stripe/keys"] [unique_id "aTA2oPpiIcI2BRWBwqyMzQAAAEg"]
[Wed Dec 03 21:09:53.431440 2025] [:error] [pid 20669:tid 20680] [client 18.191.232.72:57670] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe_api.json"] [unique_id "aTA2oZLWoJXGOhmabmvPxQAAAUQ"]
[Wed Dec 03 21:09:54.209500 2025] [:error] [pid 47815:tid 47841] [client 18.191.232.72:57686] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/stripe.rb"] [unique_id "aTA2okTsjPA8HXY_dpHhAgAAANg"]
[Wed Dec 03 21:09:55.000255 2025] [:error] [pid 20608:tid 20641] [client 18.191.232.72:57700] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe_keys.py"] [unique_id "aTA2ok5WGptz5j0ZvYefIAAAAIQ"]
[Wed Dec 03 21:09:55.790161 2025] [:error] [pid 47926:tid 47942] [client 18.191.232.72:57714] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe.ini"] [unique_id "aTA2o2mj6HWCHJ9euRKbmAAAAY4"]
[Wed Dec 03 21:09:56.568070 2025] [:error] [pid 47815:tid 47825] [client 18.191.232.72:57722] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe.properties"] [unique_id "aTA2pETsjPA8HXY_dpHhBAAAAMg"]
[Wed Dec 03 21:09:57.357505 2025] [:error] [pid 20607:tid 20627] [client 18.191.232.72:57730] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe/config.js"] [unique_id "aTA2pfpiIcI2BRWBwqyM0gAAAFE"]
[Wed Dec 03 21:09:58.136034 2025] [:error] [pid 47926:tid 47938] [client 18.191.232.72:57734] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe/secrets.json"] [unique_id "aTA2pmmj6HWCHJ9euRKbnAAAAYo"]
[Wed Dec 03 21:09:58.925978 2025] [:error] [pid 47815:tid 47823] [client 18.191.232.72:57742] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.stripe"] [unique_id "aTA2pkTsjPA8HXY_dpHhCgAAAMY"]
[Wed Dec 03 21:09:59.705060 2025] [:error] [pid 20707:tid 20722] [client 18.191.232.72:57750] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/stripe-credentials.json"] [unique_id "aTA2pzObjEHgU5ngsxfwTwAAAQ0"]
[Wed Dec 03 21:10:00.492249 2025] [:error] [pid 20669:tid 20689] [client 18.191.232.72:53860] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/stripe.js"] [unique_id "aTA2qJLWoJXGOhmabmvPzQAAAU0"]
[Wed Dec 03 21:10:01.276078 2025] [:error] [pid 20608:tid 20653] [client 18.191.232.72:53874] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/local_settings.py"] [unique_id "aTA2qU5WGptz5j0ZvYefJQAAAJA"]
[Wed Dec 03 21:10:02.056213 2025] [:error] [pid 20608:tid 20660] [client 18.191.232.72:53890] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/django_settings.json"] [unique_id "aTA2qk5WGptz5j0ZvYefKAAAAJc"]
[Wed Dec 03 21:10:02.846001 2025] [:error] [pid 32437:tid 32452] [client 18.191.232.72:53896] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.django"] [unique_id "aTA2qqBId4T5gQoDbCFxxwAAAAw"]
[Wed Dec 03 21:10:03.637132 2025] [:error] [pid 32437:tid 32455] [client 18.191.232.72:53898] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manage.py"] [unique_id "aTA2q6BId4T5gQoDbCFxyAAAAA8"]
[Wed Dec 03 21:10:04.417199 2025] [:error] [pid 32437:tid 32458] [client 18.191.232.72:53908] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/settings/local.py"] [unique_id "aTA2rKBId4T5gQoDbCFxyQAAABI"]
[Wed Dec 03 21:10:05.206993 2025] [:error] [pid 32437:tid 32442] [client 18.191.232.72:53920] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.py"] [unique_id "aTA2raBId4T5gQoDbCFxygAAAAI"]
[Wed Dec 03 21:10:05.996147 2025] [:error] [pid 47815:tid 47829] [client 18.191.232.72:53926] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/django.env"] [unique_id "aTA2rUTsjPA8HXY_dpHhEAAAAMw"]
[Wed Dec 03 21:10:06.780283 2025] [:error] [pid 20669:tid 20680] [client 18.191.232.72:53934] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/python.config.json"] [unique_id "aTA2rpLWoJXGOhmabmvPzwAAAUQ"]
[Wed Dec 03 21:10:07.569222 2025] [:error] [pid 20669:tid 20679] [client 18.191.232.72:53946] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/app/settings/production.py"] [unique_id "aTA2r5LWoJXGOhmabmvP0AAAAUM"]
[Wed Dec 03 21:10:08.365095 2025] [:error] [pid 20707:tid 20733] [client 18.191.232.72:53954] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/django/secrets.json"] [unique_id "aTA2sDObjEHgU5ngsxfwUgAAARg"]
[Wed Dec 03 21:10:09.153880 2025] [:error] [pid 47926:tid 47943] [client 18.191.232.72:53970] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.pythonenv"] [unique_id "aTA2sWmj6HWCHJ9euRKboQAAAY8"]
[Wed Dec 03 21:10:09.943513 2025] [:error] [pid 20707:tid 20718] [client 18.191.232.72:53972] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/local.py"] [unique_id "aTA2sTObjEHgU5ngsxfwVAAAAQk"]
[Wed Dec 03 21:10:10.723756 2025] [:error] [pid 20607:tid 20634] [client 18.191.232.72:34008] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/django.ini"] [unique_id "aTA2svpiIcI2BRWBwqyM2AAAAFg"]
[Wed Dec 03 21:10:11.501235 2025] [:error] [pid 20669:tid 20693] [client 18.191.232.72:34024] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/database.yml"] [unique_id "aTA2s5LWoJXGOhmabmvP1wAAAVE"]
[Wed Dec 03 21:10:12.291687 2025] [:error] [pid 20669:tid 20689] [client 18.191.232.72:34032] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/secrets.yml"] [unique_id "aTA2tJLWoJXGOhmabmvP2wAAAU0"]
[Wed Dec 03 21:10:13.069431 2025] [:error] [pid 20669:tid 20685] [client 18.191.232.72:34046] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/credentials.yml.enc"] [unique_id "aTA2tZLWoJXGOhmabmvP3AAAAUk"]
[Wed Dec 03 21:10:13.859233 2025] [:error] [pid 20669:tid 20680] [client 18.191.232.72:34058] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/master.key"] [unique_id "aTA2tZLWoJXGOhmabmvP4AAAAUQ"]
[Wed Dec 03 21:10:23.332625 2025] [:error] [pid 20608:tid 20655] [client 18.191.232.72:36878] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.ruby-version"] [unique_id "aTA2v05WGptz5j0ZvYefNQAAAJI"]
[Wed Dec 03 21:10:24.109038 2025] [:error] [pid 20707:tid 20728] [client 18.191.232.72:36882] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/application.yml"] [unique_id "aTA2wDObjEHgU5ngsxfwaAAAARM"]
[Wed Dec 03 21:10:24.899271 2025] [:error] [pid 47926:tid 47948] [client 18.191.232.72:36890] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.yml.enc"] [unique_id "aTA2wGmj6HWCHJ9euRKbqgAAAZQ"]
[Wed Dec 03 21:10:25.677792 2025] [:error] [pid 47926:tid 47928] [client 18.191.232.72:36900] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/master.key.bak"] [unique_id "aTA2wWmj6HWCHJ9euRKbqwAAAYA"]
[Wed Dec 03 21:10:26.466300 2025] [:error] [pid 20707:tid 20732] [client 18.191.232.72:36906] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/database.json"] [unique_id "aTA2wjObjEHgU5ngsxfwawAAARc"]
[Wed Dec 03 21:10:27.259355 2025] [:error] [pid 20607:tid 20626] [client 18.191.232.72:36912] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.js"] [unique_id "aTA2w_piIcI2BRWBwqyM5wAAAFA"]
[Wed Dec 03 21:10:28.037793 2025] [:error] [pid 47926:tid 47940] [client 18.191.232.72:36914] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api_keys.js"] [unique_id "aTA2xGmj6HWCHJ9euRKbrwAAAYw"]
[Wed Dec 03 21:10:28.818388 2025] [:error] [pid 47815:tid 47841] [client 18.191.232.72:36926] [client 18.191.232.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.js"] [unique_id "aTA2xETsjPA8HXY_dpHhGQAAANg"]
[Wed Dec 03 21:10:29.599981 2025] [:error] [pid 47815:tid 47819] [client 18.191.232.72:36928] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/package.json"] [unique_id "aTA2xUTsjPA8HXY_dpHhGgAAAMI"]
[Wed Dec 03 21:10:30.399553 2025] [:error] [pid 20669:tid 20698] [client 18.191.232.72:42750] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/server.js"] [unique_id "aTA2xpLWoJXGOhmabmvP_gAAAVY"]
[Wed Dec 03 21:10:31.181157 2025] [:error] [pid 47926:tid 47951] [client 18.191.232.72:42764] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/app.js"] [unique_id "aTA2x2mj6HWCHJ9euRKbugAAAZc"]
[Wed Dec 03 21:10:31.971263 2025] [:error] [pid 32437:tid 32441] [client 18.191.232.72:42772] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/env.js"] [unique_id "aTA2x6BId4T5gQoDbCFx4wAAAAE"]
[Wed Dec 03 21:10:32.748305 2025] [:error] [pid 47926:tid 47930] [client 18.191.232.72:42784] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.js"] [unique_id "aTA2yGmj6HWCHJ9euRKbwgAAAYI"]
[Wed Dec 03 21:10:33.527144 2025] [:error] [pid 20707:tid 20710] [client 18.191.232.72:42796] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/node.config.json"] [unique_id "aTA2yTObjEHgU5ngsxfwcAAAAQE"]
[Wed Dec 03 21:10:34.319491 2025] [:error] [pid 20608:tid 20652] [client 18.191.232.72:42808] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/js/secrets.json"] [unique_id "aTA2yk5WGptz5j0ZvYefRgAAAI8"]
[Wed Dec 03 21:10:35.109982 2025] [:error] [pid 47926:tid 47944] [client 18.191.232.72:42814] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/client/config.js"] [unique_id "aTA2y2mj6HWCHJ9euRKbxQAAAZA"]
[Wed Dec 03 21:10:35.888061 2025] [:error] [pid 47926:tid 47931] [client 18.191.232.72:42830] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/config.js"] [unique_id "aTA2y2mj6HWCHJ9euRKbxwAAAYM"]
[Wed Dec 03 21:10:36.669047 2025] [:error] [pid 20707:tid 20728] [client 18.191.232.72:42846] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/src/config/api.js"] [unique_id "aTA2zDObjEHgU5ngsxfwdwAAARM"]
[Wed Dec 03 21:10:37.458836 2025] [:error] [pid 47926:tid 47943] [client 18.191.232.72:42854] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/node_modules/.bin/env"] [unique_id "aTA2zWmj6HWCHJ9euRKbyQAAAY8"]
[Wed Dec 03 21:10:38.248655 2025] [:error] [pid 20707:tid 20713] [client 18.191.232.72:42870] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.npmrc"] [unique_id "aTA2zjObjEHgU5ngsxfwfQAAAQQ"]
[Wed Dec 03 21:10:39.038421 2025] [:error] [pid 20707:tid 20710] [client 18.191.232.72:42880] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yarn.lock"] [unique_id "aTA2zzObjEHgU5ngsxfwfgAAAQE"]
[Wed Dec 03 21:10:39.828935 2025] [:error] [pid 20707:tid 20718] [client 18.191.232.72:42896] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/client.js"] [unique_id "aTA2zzObjEHgU5ngsxfwfwAAAQk"]
[Wed Dec 03 21:10:40.620525 2025] [:error] [pid 20707:tid 20727] [client 18.191.232.72:60530] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/config.js"] [unique_id "aTA20DObjEHgU5ngsxfwgQAAARI"]
[Wed Dec 03 21:10:41.424443 2025] [:error] [pid 20707:tid 20728] [client 18.191.232.72:60542] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/frontend/env.json"] [unique_id "aTA20TObjEHgU5ngsxfwggAAARM"]
[Wed Dec 03 21:10:42.206126 2025] [:error] [pid 20707:tid 20726] [client 18.191.232.72:60556] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/backend/secrets.js"] [unique_id "aTA20jObjEHgU5ngsxfwgwAAARE"]
[Wed Dec 03 21:10:42.996195 2025] [:error] [pid 47815:tid 47836] [client 18.191.232.72:60564] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/application.properties"] [unique_id "aTA20kTsjPA8HXY_dpHhKwAAANM"]
[Wed Dec 03 21:10:43.774311 2025] [:error] [pid 47926:tid 47937] [client 18.191.232.72:60576] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.properties"] [unique_id "aTA202mj6HWCHJ9euRKbzgAAAYk"]
[Wed Dec 03 21:10:44.566132 2025] [:error] [pid 20669:tid 20697] [client 18.191.232.72:60578] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/database.properties"] [unique_id "aTA21JLWoJXGOhmabmvQGAAAAVU"]
[Wed Dec 03 21:10:45.354931 2025] [:error] [pid 47815:tid 47826] [client 18.191.232.72:60590] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/app.ini"] [unique_id "aTA21UTsjPA8HXY_dpHhLgAAAMk"]
[Wed Dec 03 21:10:46.144023 2025] [:error] [pid 20607:tid 20621] [client 18.191.232.72:60606] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/local.ini"] [unique_id "aTA21vpiIcI2BRWBwqyM-wAAAEs"]
[Wed Dec 03 21:10:46.933885 2025] [:error] [pid 47926:tid 47929] [client 18.191.232.72:60620] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/secrets.ini"] [unique_id "aTA21mmj6HWCHJ9euRKb0AAAAYE"]
[Wed Dec 03 21:10:47.726528 2025] [:error] [pid 20669:tid 20692] [client 18.191.232.72:60636] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/app.json"] [unique_id "aTA215LWoJXGOhmabmvQIAAAAVA"]
[Wed Dec 03 21:10:48.511309 2025] [:error] [pid 20707:tid 20712] [client 18.191.232.72:60638] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config/secrets.json"] [unique_id "aTA22DObjEHgU5ngsxfwiQAAAQM"]
[Wed Dec 03 21:10:49.301251 2025] [:error] [pid 47926:tid 47950] [client 18.191.232.72:60650] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/local.json"] [unique_id "aTA22Wmj6HWCHJ9euRKb0gAAAZY"]
[Wed Dec 03 21:10:50.094957 2025] [:error] [pid 20707:tid 20727] [client 18.191.232.72:46654] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/database.json"] [unique_id "aTA22jObjEHgU5ngsxfwjAAAARI"]
[Wed Dec 03 21:10:50.872597 2025] [:error] [pid 20707:tid 20725] [client 18.191.232.72:46658] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/env.properties"] [unique_id "aTA22jObjEHgU5ngsxfwjwAAARA"]
[Wed Dec 03 21:10:51.663784 2025] [:error] [pid 20669:tid 20700] [client 18.191.232.72:46668] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/aws.properties"] [unique_id "aTA225LWoJXGOhmabmvQJQAAAVg"]
[Wed Dec 03 21:10:52.448651 2025] [:error] [pid 20607:tid 20620] [client 18.191.232.72:46674] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/php.ini"] [unique_id "aTA23PpiIcI2BRWBwqyNAQAAAEo"]
[Wed Dec 03 21:10:53.240530 2025] [:error] [pid 47926:tid 47946] [client 18.191.232.72:46684] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/.properties"] [unique_id "aTA23Wmj6HWCHJ9euRKb1AAAAZI"]
[Wed Dec 03 21:10:54.020171 2025] [:error] [pid 20608:tid 20643] [client 18.191.232.72:46690] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/user.properties"] [unique_id "aTA23k5WGptz5j0ZvYefTwAAAIY"]
[Wed Dec 03 21:10:54.810320 2025] [:error] [pid 32437:tid 32464] [client 18.191.232.72:46698] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/system.ini"] [unique_id "aTA23qBId4T5gQoDbCFx7wAAABg"]
[Wed Dec 03 21:10:55.589085 2025] [:error] [pid 32437:tid 32448] [client 18.191.232.72:46706] [client 18.191.232.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/global.json"] [unique_id "aTA236BId4T5gQoDbCFx8QAAAAg"]
[Wed Dec 03 23:48:28.055061 2025] [:error] [pid 47815:tid 47828] [client 182.42.105.144:59353] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTBbzETsjPA8HXY_dpH7pQAAAMs"]
[Thu Dec 04 00:38:16.411944 2025] [:error] [pid 3842:tid 3903] [client 54.91.146.164:39138] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTBneCaILLkuuVMSmjv5CgAAAYA"]
[Thu Dec 04 00:38:17.230694 2025] [:error] [pid 3840:tid 3856] [client 54.91.146.164:39148] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTBneZF_IDAg4wPRjg6qQwAAAEg"]
[Thu Dec 04 00:38:18.047408 2025] [:error] [pid 3841:tid 3878] [client 54.91.146.164:39162] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aTBnehqrnhYwq_3H8CT9zwAAAUI"]
[Thu Dec 04 00:38:18.865342 2025] [:error] [pid 63344:tid 63355] [client 54.91.146.164:39170] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aTBnerFn6Z8FbZz0IjlBrwAAAAY"]
[Thu Dec 04 00:38:19.685468 2025] [:error] [pid 3841:tid 3876] [client 54.91.146.164:39180] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development"] [unique_id "aTBnexqrnhYwq_3H8CT91AAAAUA"]
[Thu Dec 04 00:38:20.509350 2025] [:error] [pid 3841:tid 3880] [client 54.91.146.164:39184] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aTBnfBqrnhYwq_3H8CT91gAAAUQ"]
[Thu Dec 04 00:38:21.328428 2025] [:error] [pid 3842:tid 3911] [client 54.91.146.164:35098] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aTBnfSaILLkuuVMSmjv5GgAAAYg"]
[Thu Dec 04 00:38:22.151321 2025] [:error] [pid 3842:tid 3913] [client 54.91.146.164:35102] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test"] [unique_id "aTBnfiaILLkuuVMSmjv5HgAAAYo"]
[Thu Dec 04 00:38:31.213196 2025] [:error] [pid 3841:tid 3894] [client 54.91.146.164:45650] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/config.ini"] [unique_id "aTBnhxqrnhYwq_3H8CT99wAAAVI"]
[Thu Dec 04 00:38:32.854474 2025] [:error] [pid 3842:tid 3910] [client 54.91.146.164:45674] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/configuration"] [unique_id "aTBniCaILLkuuVMSmjv5NgAAAYc"]
[Thu Dec 04 00:38:33.679209 2025] [:error] [pid 3938:tid 3943] [client 54.91.146.164:45684] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/settings"] [unique_id "aTBniSAHKAmSjlzEts75AAAAAgM"]
[Thu Dec 04 00:38:34.496123 2025] [:error] [pid 3840:tid 3866] [client 54.91.146.164:45686] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/settings.json"] [unique_id "aTBnipF_IDAg4wPRjg6qYgAAAFI"]
[Thu Dec 04 00:38:35.312562 2025] [:error] [pid 3938:tid 3949] [client 54.91.146.164:45696] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/settings.py"] [unique_id "aTBniyAHKAmSjlzEts75AwAAAgk"]
[Thu Dec 04 00:38:36.133347 2025] [:error] [pid 3938:tid 3954] [client 54.91.146.164:45706] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/settings.rb"] [unique_id "aTBnjCAHKAmSjlzEts75BgAAAg4"]
[Thu Dec 04 00:38:36.954152 2025] [:error] [pid 63344:tid 63369] [client 54.91.146.164:45714] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.config.js"] [unique_id "aTBnjLFn6Z8FbZz0IjlB2wAAABQ"]
[Thu Dec 04 00:38:37.775684 2025] [:error] [pid 3938:tid 3943] [client 54.91.146.164:45722] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/local.settings.json"] [unique_id "aTBnjSAHKAmSjlzEts75DgAAAgM"]
[Thu Dec 04 00:38:38.590379 2025] [:error] [pid 3938:tid 3942] [client 54.91.146.164:45736] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.json"] [unique_id "aTBnjiAHKAmSjlzEts75EwAAAgI"]
[Thu Dec 04 00:38:39.405674 2025] [:error] [pid 3840:tid 3854] [client 54.91.146.164:45740] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aTBnj5F_IDAg4wPRjg6qaAAAAEY"]
[Thu Dec 04 00:38:40.226955 2025] [:error] [pid 63344:tid 63369] [client 54.91.146.164:45746] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aTBnkLFn6Z8FbZz0IjlB5wAAABQ"]
[Thu Dec 04 00:38:41.042915 2025] [:error] [pid 3938:tid 3943] [client 54.91.146.164:40590] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpversion.php"] [unique_id "aTBnkSAHKAmSjlzEts75HAAAAgM"]
[Thu Dec 04 00:38:41.858592 2025] [:error] [pid 3841:tid 3876] [client 54.91.146.164:40602] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aTBnkRqrnhYwq_3H8CT-AgAAAUA"]
[Thu Dec 04 00:38:42.675652 2025] [:error] [pid 3842:tid 3921] [client 54.91.146.164:40610] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aTBnkiaILLkuuVMSmjv5RgAAAZI"]
[Thu Dec 04 00:38:43.491793 2025] [:error] [pid 3842:tid 3908] [client 54.91.146.164:40620] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php"] [unique_id "aTBnkyaILLkuuVMSmjv5RwAAAYU"]
[Thu Dec 04 00:38:44.309663 2025] [:error] [pid 3840:tid 3850] [client 54.91.146.164:40628] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/composer.json"] [unique_id "aTBnlJF_IDAg4wPRjg6qbgAAAEI"]
[Thu Dec 04 00:38:45.128841 2025] [:error] [pid 63344:tid 63351] [client 54.91.146.164:40634] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aTBnlbFn6Z8FbZz0IjlB7wAAAAI"]
[Thu Dec 04 00:38:45.946340 2025] [:error] [pid 3840:tid 3868] [client 54.91.146.164:40648] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.php"] [unique_id "aTBnlZF_IDAg4wPRjg6qdAAAAFQ"]
[Thu Dec 04 00:38:46.775610 2025] [:error] [pid 3840:tid 3866] [client 54.91.146.164:40652] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.php"] [unique_id "aTBnlpF_IDAg4wPRjg6qeAAAAFI"]
[Thu Dec 04 00:38:47.593276 2025] [:error] [pid 3938:tid 3942] [client 54.91.146.164:40656] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.aws/config"] [unique_id "aTBnlyAHKAmSjlzEts75KwAAAgI"]
[Thu Dec 04 00:38:48.414868 2025] [:error] [pid 3938:tid 3943] [client 54.91.146.164:40670] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.aws/credentials"] [unique_id "aTBnmCAHKAmSjlzEts75MAAAAgM"]
[Thu Dec 04 00:38:49.232667 2025] [:error] [pid 3938:tid 3955] [client 54.91.146.164:40682] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/config"] [unique_id "aTBnmSAHKAmSjlzEts75NQAAAg8"]
[Thu Dec 04 00:38:50.050840 2025] [:error] [pid 3842:tid 3904] [client 54.91.146.164:40688] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/credentials"] [unique_id "aTBnmiaILLkuuVMSmjv5VAAAAYE"]
[Thu Dec 04 00:38:50.869722 2025] [:error] [pid 3840:tid 3850] [client 54.91.146.164:60266] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws.json"] [unique_id "aTBnmpF_IDAg4wPRjg6qfgAAAEI"]
[Thu Dec 04 00:38:51.688747 2025] [:error] [pid 3842:tid 3911] [client 54.91.146.164:60280] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws-credentials.json"] [unique_id "aTBnmyaILLkuuVMSmjv5WQAAAYg"]
[Thu Dec 04 00:38:52.519051 2025] [:error] [pid 63344:tid 63361] [client 54.91.146.164:60282] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws-config.js"] [unique_id "aTBnnLFn6Z8FbZz0IjlB9wAAAAw"]
[Thu Dec 04 00:38:53.364750 2025] [:error] [pid 3842:tid 3905] [client 54.91.146.164:60296] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws-keys.json"] [unique_id "aTBnnSaILLkuuVMSmjv5WgAAAYI"]
[Thu Dec 04 00:38:54.205131 2025] [:error] [pid 3938:tid 3957] [client 54.91.146.164:60304] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/secrets.yaml"] [unique_id "aTBnniAHKAmSjlzEts75QQAAAhE"]
[Thu Dec 04 00:38:55.079299 2025] [:error] [pid 3938:tid 3945] [client 54.91.146.164:60312] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/access-keys.js"] [unique_id "aTBnnyAHKAmSjlzEts75QwAAAgU"]
[Thu Dec 04 00:38:55.949860 2025] [:error] [pid 3842:tid 3921] [client 54.91.146.164:60328] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/config.ini"] [unique_id "aTBnnyaILLkuuVMSmjv5XgAAAZI"]
[Thu Dec 04 00:38:56.832769 2025] [:error] [pid 3842:tid 3913] [client 54.91.146.164:60342] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/credentials.bak"] [unique_id "aTBnoCaILLkuuVMSmjv5YAAAAYo"]
[Thu Dec 04 00:38:57.714509 2025] [:error] [pid 63344:tid 63373] [client 54.91.146.164:60358] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.aws/secrets"] [unique_id "aTBnobFn6Z8FbZz0IjlCBwAAABg"]
[Thu Dec 04 00:38:58.605941 2025] [:error] [pid 63344:tid 63351] [client 54.91.146.164:60362] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws-env.json"] [unique_id "aTBnorFn6Z8FbZz0IjlCCQAAAAI"]
[Thu Dec 04 00:38:59.484136 2025] [:error] [pid 3841:tid 3889] [client 54.91.146.164:60370] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws-keys.env"] [unique_id "aTBnoxqrnhYwq_3H8CT-IgAAAU0"]
[Thu Dec 04 00:39:00.358227 2025] [:error] [pid 63344:tid 63355] [client 54.91.146.164:60380] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.aws/config.bak"] [unique_id "aTBnpLFn6Z8FbZz0IjlCEQAAAAY"]
[Thu Dec 04 00:39:01.243438 2025] [:error] [pid 3841:tid 3893] [client 54.91.146.164:60988] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/secrets.json"] [unique_id "aTBnpRqrnhYwq_3H8CT-JwAAAVE"]
[Thu Dec 04 00:39:02.111231 2025] [:error] [pid 3938:tid 3964] [client 54.91.146.164:32768] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/config.properties"] [unique_id "aTBnpiAHKAmSjlzEts75WAAAAhg"]
[Thu Dec 04 00:39:02.990199 2025] [:error] [pid 3841:tid 3886] [client 54.91.146.164:32778] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.aws/credentials.json"] [unique_id "aTBnphqrnhYwq_3H8CT-LgAAAUo"]
[Thu Dec 04 00:39:03.882865 2025] [:error] [pid 3841:tid 3889] [client 54.91.146.164:32794] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws_keys.py"] [unique_id "aTBnpxqrnhYwq_3H8CT-MwAAAU0"]
[Thu Dec 04 00:39:04.772006 2025] [:error] [pid 3841:tid 3899] [client 54.91.146.164:32802] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe/config"] [unique_id "aTBnqBqrnhYwq_3H8CT-NQAAAVc"]
[Thu Dec 04 00:39:05.589116 2025] [:error] [pid 3841:tid 3895] [client 54.91.146.164:32808] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.json"] [unique_id "aTBnqRqrnhYwq_3H8CT-NgAAAVM"]
[Thu Dec 04 00:39:06.406779 2025] [:error] [pid 3841:tid 3888] [client 54.91.146.164:32816] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.js"] [unique_id "aTBnqhqrnhYwq_3H8CT-OQAAAUw"]
[Thu Dec 04 00:39:07.225666 2025] [:error] [pid 63344:tid 63364] [client 54.91.146.164:32820] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe-config.yaml"] [unique_id "aTBnq7Fn6Z8FbZz0IjlCIwAAAA8"]
[Thu Dec 04 00:39:08.041735 2025] [:error] [pid 63344:tid 63369] [client 54.91.146.164:32828] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe-keys.json"] [unique_id "aTBnrLFn6Z8FbZz0IjlCJgAAABQ"]
[Thu Dec 04 00:39:08.859936 2025] [:error] [pid 3840:tid 3849] [client 54.91.146.164:32832] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe/credentials"] [unique_id "aTBnrJF_IDAg4wPRjg6qhgAAAEE"]
[Thu Dec 04 00:39:09.676269 2025] [:error] [pid 3842:tid 3906] [client 54.91.146.164:32844] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe/secrets.yml"] [unique_id "aTBnrSaILLkuuVMSmjv5dQAAAYM"]
[Thu Dec 04 00:39:10.491334 2025] [:error] [pid 3840:tid 3868] [client 54.91.146.164:32854] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.env"] [unique_id "aTBnrpF_IDAg4wPRjg6qigAAAFQ"]
[Thu Dec 04 00:39:11.308692 2025] [:error] [pid 3938:tid 3949] [client 54.91.146.164:40968] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe/config.php"] [unique_id "aTBnryAHKAmSjlzEts75bwAAAgk"]
[Thu Dec 04 00:39:12.126274 2025] [:error] [pid 3938:tid 3955] [client 54.91.146.164:40970] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.stripe/keys"] [unique_id "aTBnsCAHKAmSjlzEts75dQAAAg8"]
[Thu Dec 04 00:39:12.943797 2025] [:error] [pid 63344:tid 63368] [client 54.91.146.164:40976] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe_api.json"] [unique_id "aTBnsLFn6Z8FbZz0IjlCLQAAABM"]
[Thu Dec 04 00:39:13.760234 2025] [:error] [pid 3938:tid 3942] [client 54.91.146.164:40978] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/stripe.rb"] [unique_id "aTBnsSAHKAmSjlzEts75gAAAAgI"]
[Thu Dec 04 00:39:14.583480 2025] [:error] [pid 3938:tid 3943] [client 54.91.146.164:40992] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe_keys.py"] [unique_id "aTBnsiAHKAmSjlzEts75hQAAAgM"]
[Thu Dec 04 00:39:15.401124 2025] [:error] [pid 63344:tid 63353] [client 54.91.146.164:41008] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.ini"] [unique_id "aTBns7Fn6Z8FbZz0IjlCMgAAAAQ"]
[Thu Dec 04 00:39:16.218153 2025] [:error] [pid 3938:tid 3947] [client 54.91.146.164:41018] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.properties"] [unique_id "aTBntCAHKAmSjlzEts75iQAAAgc"]
[Thu Dec 04 00:39:17.035368 2025] [:error] [pid 3841:tid 3900] [client 54.91.146.164:41022] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe/config.js"] [unique_id "aTBntRqrnhYwq_3H8CT-bgAAAVg"]
[Thu Dec 04 00:39:17.854385 2025] [:error] [pid 3840:tid 3872] [client 54.91.146.164:41030] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe/secrets.json"] [unique_id "aTBntZF_IDAg4wPRjg6qjwAAAFg"]
[Thu Dec 04 00:39:18.669410 2025] [:error] [pid 3841:tid 3897] [client 54.91.146.164:41042] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.stripe"] [unique_id "aTBnthqrnhYwq_3H8CT-cgAAAVU"]
[Thu Dec 04 00:39:19.492695 2025] [:error] [pid 3938:tid 3952] [client 54.91.146.164:41054] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe-credentials.json"] [unique_id "aTBntyAHKAmSjlzEts75jwAAAgw"]
[Thu Dec 04 00:39:20.308711 2025] [:error] [pid 63344:tid 63370] [client 54.91.146.164:41064] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/stripe.js"] [unique_id "aTBnuLFn6Z8FbZz0IjlCOgAAABU"]
[Thu Dec 04 00:39:21.124693 2025] [:error] [pid 3840:tid 3850] [client 54.91.146.164:43780] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/local_settings.py"] [unique_id "aTBnuZF_IDAg4wPRjg6qlQAAAEI"]
[Thu Dec 04 00:39:21.943670 2025] [:error] [pid 3841:tid 3881] [client 54.91.146.164:43796] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/django_settings.json"] [unique_id "aTBnuRqrnhYwq_3H8CT-dgAAAUU"]
[Thu Dec 04 00:39:22.760715 2025] [:error] [pid 63344:tid 63373] [client 54.91.146.164:43810] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.django"] [unique_id "aTBnurFn6Z8FbZz0IjlCRQAAABg"]
[Thu Dec 04 00:39:23.577707 2025] [:error] [pid 63344:tid 63352] [client 54.91.146.164:43826] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manage.py"] [unique_id "aTBnu7Fn6Z8FbZz0IjlCRwAAAAM"]
[Thu Dec 04 00:39:24.394710 2025] [:error] [pid 3938:tid 3964] [client 54.91.146.164:43836] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/settings/local.py"] [unique_id "aTBnvCAHKAmSjlzEts75mQAAAhg"]
[Thu Dec 04 00:39:25.210122 2025] [:error] [pid 3938:tid 3950] [client 54.91.146.164:43846] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.py"] [unique_id "aTBnvSAHKAmSjlzEts75ngAAAgo"]
[Thu Dec 04 00:39:26.026770 2025] [:error] [pid 3938:tid 3947] [client 54.91.146.164:43850] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/django.env"] [unique_id "aTBnviAHKAmSjlzEts75ogAAAgc"]
[Thu Dec 04 00:39:26.844277 2025] [:error] [pid 63344:tid 63362] [client 54.91.146.164:43864] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/python.config.json"] [unique_id "aTBnvrFn6Z8FbZz0IjlCSwAAAA0"]
[Thu Dec 04 00:39:27.661623 2025] [:error] [pid 3840:tid 3872] [client 54.91.146.164:43878] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/settings/production.py"] [unique_id "aTBnv5F_IDAg4wPRjg6qmQAAAFg"]
[Thu Dec 04 00:39:28.482486 2025] [:error] [pid 3841:tid 3898] [client 54.91.146.164:43892] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/django/secrets.json"] [unique_id "aTBnwBqrnhYwq_3H8CT-hAAAAVY"]
[Thu Dec 04 00:39:29.305468 2025] [:error] [pid 3842:tid 3913] [client 54.91.146.164:43906] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.pythonenv"] [unique_id "aTBnwSaILLkuuVMSmjv5mgAAAYo"]
[Thu Dec 04 00:39:30.119328 2025] [:error] [pid 3840:tid 3855] [client 54.91.146.164:43910] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.py"] [unique_id "aTBnwpF_IDAg4wPRjg6qngAAAEc"]
[Thu Dec 04 00:39:30.933372 2025] [:error] [pid 3841:tid 3887] [client 54.91.146.164:39814] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/django.ini"] [unique_id "aTBnwhqrnhYwq_3H8CT-hwAAAUs"]
[Thu Dec 04 00:39:31.750633 2025] [:error] [pid 3841:tid 3882] [client 54.91.146.164:39816] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/database.yml"] [unique_id "aTBnwxqrnhYwq_3H8CT-iQAAAUY"]
[Thu Dec 04 00:39:34.212685 2025] [:error] [pid 63344:tid 63370] [client 54.91.146.164:39838] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/config/master.key"] [unique_id "aTBnxrFn6Z8FbZz0IjlCVAAAABU"]
[Thu Dec 04 00:39:42.441275 2025] [:error] [pid 63344:tid 63362] [client 54.91.146.164:42370] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/puma.rb"] [unique_id "aTBnzrFn6Z8FbZz0IjlCbAAAAA0"]
[Thu Dec 04 00:39:43.257433 2025] [:error] [pid 3840:tid 3864] [client 54.91.146.164:42384] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/routes.rb"] [unique_id "aTBnz5F_IDAg4wPRjg6quAAAAFA"]
[Thu Dec 04 00:39:44.074357 2025] [:error] [pid 3841:tid 3877] [client 54.91.146.164:42400] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.ruby-version"] [unique_id "aTBn0BqrnhYwq_3H8CT-owAAAUE"]
[Thu Dec 04 00:39:44.891982 2025] [:error] [pid 63344:tid 63371] [client 54.91.146.164:42412] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/application.yml"] [unique_id "aTBn0LFn6Z8FbZz0IjlCbwAAABY"]
[Thu Dec 04 00:39:45.707132 2025] [:error] [pid 3842:tid 3927] [client 54.91.146.164:42422] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.yml.enc"] [unique_id "aTBn0SaILLkuuVMSmjv5uAAAAZg"]
[Thu Dec 04 00:39:46.523873 2025] [:error] [pid 3842:tid 3909] [client 54.91.146.164:42436] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/master.key.bak"] [unique_id "aTBn0iaILLkuuVMSmjv5vQAAAYY"]
[Thu Dec 04 00:39:47.342905 2025] [:error] [pid 3842:tid 3903] [client 54.91.146.164:42442] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/database.json"] [unique_id "aTBn0yaILLkuuVMSmjv5wQAAAYA"]
[Thu Dec 04 00:39:48.159651 2025] [:error] [pid 3842:tid 3911] [client 54.91.146.164:42448] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.js"] [unique_id "aTBn1CaILLkuuVMSmjv5wwAAAYg"]
[Thu Dec 04 00:39:48.975745 2025] [:error] [pid 3842:tid 3905] [client 54.91.146.164:42452] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api_keys.js"] [unique_id "aTBn1CaILLkuuVMSmjv5xwAAAYI"]
[Thu Dec 04 00:39:49.793138 2025] [:error] [pid 3840:tid 3851] [client 54.91.146.164:42466] [client 54.91.146.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.js"] [unique_id "aTBn1ZF_IDAg4wPRjg6qvgAAAEM"]
[Thu Dec 04 00:39:50.610500 2025] [:error] [pid 3841:tid 3897] [client 54.91.146.164:42476] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/package.json"] [unique_id "aTBn1hqrnhYwq_3H8CT-qgAAAVU"]
[Thu Dec 04 00:39:51.427872 2025] [:error] [pid 3841:tid 3896] [client 54.91.146.164:56318] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.js"] [unique_id "aTBn1xqrnhYwq_3H8CT-sQAAAVQ"]
[Thu Dec 04 00:39:52.245187 2025] [:error] [pid 63344:tid 63362] [client 54.91.146.164:56334] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aTBn2LFn6Z8FbZz0IjlCfQAAAA0"]
[Thu Dec 04 00:39:53.063893 2025] [:error] [pid 63344:tid 63356] [client 54.91.146.164:56350] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/env.js"] [unique_id "aTBn2bFn6Z8FbZz0IjlCgAAAAAc"]
[Thu Dec 04 00:39:53.879530 2025] [:error] [pid 63344:tid 63358] [client 54.91.146.164:56354] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.js"] [unique_id "aTBn2bFn6Z8FbZz0IjlChAAAAAk"]
[Thu Dec 04 00:39:54.700381 2025] [:error] [pid 3938:tid 3940] [client 54.91.146.164:56366] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/node.config.json"] [unique_id "aTBn2iAHKAmSjlzEts75xgAAAgA"]
[Thu Dec 04 00:39:55.516396 2025] [:error] [pid 3842:tid 3924] [client 54.91.146.164:56376] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/secrets.json"] [unique_id "aTBn2yaILLkuuVMSmjv5zQAAAZU"]
[Thu Dec 04 00:39:56.331883 2025] [:error] [pid 3938:tid 3942] [client 54.91.146.164:56382] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/client/config.js"] [unique_id "aTBn3CAHKAmSjlzEts75xwAAAgI"]
[Thu Dec 04 00:39:57.148594 2025] [:error] [pid 3842:tid 3927] [client 54.91.146.164:56394] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/config.js"] [unique_id "aTBn3SaILLkuuVMSmjv50QAAAZg"]
[Thu Dec 04 00:39:57.965050 2025] [:error] [pid 63344:tid 63365] [client 54.91.146.164:56408] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/src/config/api.js"] [unique_id "aTBn3bFn6Z8FbZz0IjlCiwAAABA"]
[Thu Dec 04 00:39:58.779748 2025] [:error] [pid 3938:tid 3963] [client 54.91.146.164:56410] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/node_modules/.bin/env"] [unique_id "aTBn3iAHKAmSjlzEts75ygAAAhc"]
[Thu Dec 04 00:39:59.595287 2025] [:error] [pid 3840:tid 3860] [client 54.91.146.164:56416] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.npmrc"] [unique_id "aTBn35F_IDAg4wPRjg6qxgAAAEw"]
[Thu Dec 04 00:40:00.415908 2025] [:error] [pid 63344:tid 63358] [client 54.91.146.164:56428] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yarn.lock"] [unique_id "aTBn4LFn6Z8FbZz0IjlCkgAAAAk"]
[Thu Dec 04 00:40:01.234670 2025] [:error] [pid 63344:tid 63360] [client 54.91.146.164:46328] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/client.js"] [unique_id "aTBn4bFn6Z8FbZz0IjlClQAAAAs"]
[Thu Dec 04 00:40:02.052889 2025] [:error] [pid 3938:tid 3945] [client 54.91.146.164:46330] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/config.js"] [unique_id "aTBn4iAHKAmSjlzEts750AAAAgU"]
[Thu Dec 04 00:40:02.868657 2025] [:error] [pid 3841:tid 3890] [client 54.91.146.164:46340] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/frontend/env.json"] [unique_id "aTBn4hqrnhYwq_3H8CT-zAAAAU4"]
[Thu Dec 04 00:40:03.684776 2025] [:error] [pid 3840:tid 3863] [client 54.91.146.164:46342] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/secrets.js"] [unique_id "aTBn45F_IDAg4wPRjg6qygAAAE8"]
[Thu Dec 04 00:40:04.501077 2025] [:error] [pid 63344:tid 63351] [client 54.91.146.164:46352] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aTBn5LFn6Z8FbZz0IjlClgAAAAI"]
[Thu Dec 04 00:40:05.316505 2025] [:error] [pid 63344:tid 63371] [client 54.91.146.164:46364] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.properties"] [unique_id "aTBn5bFn6Z8FbZz0IjlCmAAAABY"]
[Thu Dec 04 00:40:06.132614 2025] [:error] [pid 3840:tid 3869] [client 54.91.146.164:46380] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/database.properties"] [unique_id "aTBn5pF_IDAg4wPRjg6q0AAAAFU"]
[Thu Dec 04 00:40:06.957844 2025] [:error] [pid 63344:tid 63352] [client 54.91.146.164:46382] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.ini"] [unique_id "aTBn5rFn6Z8FbZz0IjlCnQAAAAM"]
[Thu Dec 04 00:40:07.776686 2025] [:error] [pid 3938:tid 3945] [client 54.91.146.164:46386] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/local.ini"] [unique_id "aTBn5yAHKAmSjlzEts753QAAAgU"]
[Thu Dec 04 00:40:08.594956 2025] [:error] [pid 3938:tid 3940] [client 54.91.146.164:46394] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secrets.ini"] [unique_id "aTBn6CAHKAmSjlzEts753wAAAgA"]
[Thu Dec 04 00:40:09.412458 2025] [:error] [pid 3938:tid 3953] [client 54.91.146.164:46396] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.json"] [unique_id "aTBn6SAHKAmSjlzEts754QAAAg0"]
[Thu Dec 04 00:40:10.228346 2025] [:error] [pid 63344:tid 63360] [client 54.91.146.164:46410] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/secrets.json"] [unique_id "aTBn6rFn6Z8FbZz0IjlCoAAAAAs"]
[Thu Dec 04 00:40:11.047019 2025] [:error] [pid 3841:tid 3878] [client 54.91.146.164:52260] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/local.json"] [unique_id "aTBn6xqrnhYwq_3H8CT-1QAAAUI"]
[Thu Dec 04 00:40:11.861679 2025] [:error] [pid 3841:tid 3893] [client 54.91.146.164:52262] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/database.json"] [unique_id "aTBn6xqrnhYwq_3H8CT-2wAAAVE"]
[Thu Dec 04 00:40:12.677312 2025] [:error] [pid 3841:tid 3882] [client 54.91.146.164:52270] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/env.properties"] [unique_id "aTBn7BqrnhYwq_3H8CT-3gAAAUY"]
[Thu Dec 04 00:40:13.500396 2025] [:error] [pid 3841:tid 3894] [client 54.91.146.164:52278] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws.properties"] [unique_id "aTBn7RqrnhYwq_3H8CT-3wAAAVI"]
[Thu Dec 04 00:40:14.322300 2025] [:error] [pid 3841:tid 3883] [client 54.91.146.164:52290] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/php.ini"] [unique_id "aTBn7hqrnhYwq_3H8CT-4QAAAUc"]
[Thu Dec 04 00:40:15.138120 2025] [:error] [pid 3842:tid 3917] [client 54.91.146.164:52296] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.properties"] [unique_id "aTBn7yaILLkuuVMSmjv55gAAAY4"]
[Thu Dec 04 00:40:15.957680 2025] [:error] [pid 63344:tid 63356] [client 54.91.146.164:52310] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.properties"] [unique_id "aTBn77Fn6Z8FbZz0IjlCpAAAAAc"]
[Thu Dec 04 00:40:16.785082 2025] [:error] [pid 3842:tid 3927] [client 54.91.146.164:52322] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.ini"] [unique_id "aTBn8CaILLkuuVMSmjv57QAAAZg"]
[Thu Dec 04 00:40:17.602980 2025] [:error] [pid 63344:tid 63358] [client 54.91.146.164:52328] [client 54.91.146.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/global.json"] [unique_id "aTBn8bFn6Z8FbZz0IjlCpwAAAAk"]
[Thu Dec 04 01:05:03.946771 2025] [:error] [pid 3842:tid 3917] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 04 01:05:04.276622 2025] [:error] [pid 3842:tid 3923] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 04 01:05:04.619022 2025] [:error] [pid 3842:tid 3904] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Dec 04 01:05:04.978118 2025] [:error] [pid 3842:tid 3914] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 04 01:05:05.341240 2025] [:error] [pid 3842:tid 3911] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Dec 04 01:05:05.644478 2025] [:error] [pid 3842:tid 3912] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Dec 04 01:05:06.023690 2025] [:error] [pid 3842:tid 3922] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Dec 04 01:05:06.375169 2025] [:error] [pid 3842:tid 3927] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 04 01:05:07.158303 2025] [:error] [pid 3842:tid 3920] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 04 01:05:07.845659 2025] [:error] [pid 3842:tid 3923] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Dec 04 01:05:08.183705 2025] [:error] [pid 3842:tid 3904] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Dec 04 01:05:08.527293 2025] [:error] [pid 3842:tid 3905] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 04 01:05:08.920195 2025] [:error] [pid 3842:tid 3911] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Dec 04 01:05:09.233468 2025] [:error] [pid 3842:tid 3926] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 04 01:05:09.580355 2025] [:error] [pid 3842:tid 3915] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 04 01:05:09.954229 2025] [:error] [pid 3842:tid 3903] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 04 01:05:10.349194 2025] [:error] [pid 3842:tid 3908] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 04 01:05:10.707691 2025] [:error] [pid 3842:tid 3921] [client 194.5.82.18:28813] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 04 01:05:17.453364 2025] [:error] [pid 3842:tid 3923] [client 194.5.82.18:28813] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTBtzSaILLkuuVMSmjsCdAAAAZQ"]
[Thu Dec 04 05:57:02.880741 2025] [:error] [pid 2160:tid 2200] [client 103.163.208.141:59839] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.pumpbooking.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.pumpbooking.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyLkNDGjl4u2feUD_ORgAAAEo"]
[Thu Dec 04 05:57:14.739653 2025] [:error] [pid 38403:tid 38417] [client 103.163.208.141:61284] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.pumpbooking.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.pumpbooking.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyOgBCL4g8TXcskwnwwAAAAQk"]
[Thu Dec 04 05:57:25.469468 2025] [:error] [pid 2159:tid 2168] [client 103.163.208.141:62655] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.pumpbooking.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.pumpbooking.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyRT3GVdXg3ORUAG2iTAAAAAU"]
[Thu Dec 04 06:00:20.180427 2025] [:error] [pid 2244:tid 2251] [client 175.6.217.4:38213] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTCy9Jm00CCLpKa0F70tYQAAAMU"]
[Thu Dec 04 10:43:01.532702 2025] [:error] [pid 63321:tid 63336] [client 185.208.158.157:59764] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTD1NbNTbeTF3WLMl8xjeQAAAYw"]
[Thu Dec 04 10:43:02.136164 2025] [:error] [pid 63381:tid 63456] [client 185.208.158.157:59772] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2021"] [unique_id "aTD1Nuidz_S5muoRMEyhhwAAAk0"]
[Thu Dec 04 10:43:02.739452 2025] [:error] [pid 63381:tid 63464] [client 185.208.158.157:59782] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2022"] [unique_id "aTD1Nuidz_S5muoRMEyhigAAAlU"]
[Thu Dec 04 10:43:03.342804 2025] [:error] [pid 2161:tid 2240] [client 185.208.158.157:59796] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2023"] [unique_id "aTD1NyjiGdnP9Am2woW2LgAAAJc"]
[Thu Dec 04 10:43:03.946264 2025] [:error] [pid 38403:tid 38424] [client 185.208.158.157:59812] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2024"] [unique_id "aTD1NwBCL4g8TXcskwl7eAAAARA"]
[Thu Dec 04 10:43:04.548712 2025] [:error] [pid 63383:tid 63436] [client 185.208.158.157:59820] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2024.backup"] [unique_id "aTD1OFJYyG_QEWdAPIXv2AAAAtM"]
[Thu Dec 04 10:43:05.151996 2025] [:error] [pid 2244:tid 2248] [client 185.208.158.157:59834] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.2025"] [unique_id "aTD1OZm00CCLpKa0F71vXgAAAMI"]
[Thu Dec 04 10:43:05.755814 2025] [:error] [pid 38403:tid 38426] [client 185.208.158.157:59840] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.back"] [unique_id "aTD1OQBCL4g8TXcskwl7egAAARI"]
[Thu Dec 04 10:43:06.358740 2025] [:error] [pid 63383:tid 63426] [client 185.208.158.157:59852] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aTD1OlJYyG_QEWdAPIXv2QAAAsk"]
[Thu Dec 04 10:43:06.961438 2025] [:error] [pid 63322:tid 63355] [client 185.208.158.157:59864] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup.bak"] [unique_id "aTD1Oovm-cfAnelmlGeOMQAAAcQ"]
[Thu Dec 04 10:43:07.565813 2025] [:error] [pid 63381:tid 63460] [client 185.208.158.157:59866] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aTD1O-idz_S5muoRMEyhmgAAAlE"]
[Thu Dec 04 10:43:08.169633 2025] [:error] [pid 2161:tid 2238] [client 185.208.158.157:59880] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bkp"] [unique_id "aTD1PCjiGdnP9Am2woW2LwAAAJU"]
[Thu Dec 04 10:43:08.770968 2025] [:error] [pid 63382:tid 63475] [client 185.208.158.157:55428] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.config"] [unique_id "aTD1PEvJv09BlzBS6SR9MQAAAoY"]
[Thu Dec 04 10:43:09.372986 2025] [:error] [pid 2244:tid 2251] [client 185.208.158.157:55430] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.copy"] [unique_id "aTD1PZm00CCLpKa0F71vYAAAAMU"]
[Thu Dec 04 10:43:09.975531 2025] [:error] [pid 63383:tid 63431] [client 185.208.158.157:55442] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.current"] [unique_id "aTD1PVJYyG_QEWdAPIXv3AAAAs4"]
[Thu Dec 04 10:43:10.578324 2025] [:error] [pid 63322:tid 63368] [client 185.208.158.157:55444] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.database"] [unique_id "aTD1Povm-cfAnelmlGeOOAAAAdE"]
[Thu Dec 04 10:43:11.181180 2025] [:error] [pid 2161:tid 2221] [client 185.208.158.157:55454] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.db"] [unique_id "aTD1PyjiGdnP9Am2woW2NQAAAIQ"]
[Thu Dec 04 10:43:11.783952 2025] [:error] [pid 63321:tid 63346] [client 185.208.158.157:55456] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev"] [unique_id "aTD1P7NTbeTF3WLMl8xjfQAAAZY"]
[Thu Dec 04 10:43:12.387584 2025] [:error] [pid 63381:tid 63456] [client 185.208.158.157:55462] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev.local"] [unique_id "aTD1QOidz_S5muoRMEyhoQAAAk0"]
[Thu Dec 04 10:43:12.990420 2025] [:error] [pid 63379:tid 63398] [client 185.208.158.157:55470] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev.properties"] [unique_id "aTD1QMvuHYNZ2IuzoJeBwgAAAgs"]
[Thu Dec 04 10:43:13.594472 2025] [:error] [pid 63321:tid 63340] [client 185.208.158.157:55484] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development.local"] [unique_id "aTD1QbNTbeTF3WLMl8xjggAAAZA"]
[Thu Dec 04 10:43:14.198121 2025] [:error] [pid 63379:tid 63397] [client 185.208.158.157:55490] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development.properties"] [unique_id "aTD1QsvuHYNZ2IuzoJeBxQAAAgo"]
[Thu Dec 04 10:43:14.801621 2025] [:error] [pid 63290:tid 63316] [client 185.208.158.157:55498] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dist"] [unique_id "aTD1QioM7G4ZFQQHTRzJMAAAAVg"]
[Thu Dec 04 10:43:15.404158 2025] [:error] [pid 63290:tid 63301] [client 185.208.158.157:55510] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dup"] [unique_id "aTD1QyoM7G4ZFQQHTRzJMgAAAUk"]
[Thu Dec 04 10:43:16.006342 2025] [:error] [pid 2161:tid 2225] [client 185.208.158.157:55522] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aTD1RCjiGdnP9Am2woW2OAAAAIg"]
[Thu Dec 04 10:43:16.610479 2025] [:error] [pid 38403:tid 38415] [client 185.208.158.157:55534] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.git"] [unique_id "aTD1RABCL4g8TXcskwl7hwAAAQc"]
[Thu Dec 04 10:43:17.213706 2025] [:error] [pid 63381:tid 63451] [client 185.208.158.157:55540] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.ini"] [unique_id "aTD1Reidz_S5muoRMEyhqQAAAkg"]
[Thu Dec 04 10:43:17.816772 2025] [:error] [pid 63322:tid 63375] [client 185.208.158.157:55546] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.live"] [unique_id "aTD1RYvm-cfAnelmlGeOQQAAAdg"]
[Thu Dec 04 10:43:18.419450 2025] [:error] [pid 38403:tid 38420] [client 185.208.158.157:55552] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aTD1RgBCL4g8TXcskwl7jAAAAQw"]
[Thu Dec 04 10:43:19.022471 2025] [:error] [pid 38403:tid 38413] [client 185.208.158.157:58382] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local.properties"] [unique_id "aTD1RwBCL4g8TXcskwl7jQAAAQU"]
[Thu Dec 04 10:43:19.625833 2025] [:error] [pid 63383:tid 63437] [client 185.208.158.157:58396] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.mysql"] [unique_id "aTD1R1JYyG_QEWdAPIXv6QAAAtQ"]
[Thu Dec 04 10:43:20.228065 2025] [:error] [pid 63321:tid 63327] [client 185.208.158.157:58400] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.new"] [unique_id "aTD1SLNTbeTF3WLMl8xjhwAAAYM"]
[Thu Dec 04 10:43:20.829957 2025] [:error] [pid 63383:tid 63419] [client 185.208.158.157:58406] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aTD1SFJYyG_QEWdAPIXv7AAAAsI"]
[Thu Dec 04 10:43:21.433484 2025] [:error] [pid 63383:tid 63417] [client 185.208.158.157:58422] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old.bak"] [unique_id "aTD1SVJYyG_QEWdAPIXv7QAAAsA"]
[Thu Dec 04 10:43:22.036396 2025] [:error] [pid 63321:tid 63337] [client 185.208.158.157:58426] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.original"] [unique_id "aTD1SrNTbeTF3WLMl8xjigAAAY0"]
[Thu Dec 04 10:43:22.640804 2025] [:error] [pid 63381:tid 63454] [client 185.208.158.157:58442] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.postgres"] [unique_id "aTD1Suidz_S5muoRMEyhtAAAAks"]
[Thu Dec 04 10:43:23.242440 2025] [:error] [pid 63321:tid 63330] [client 185.208.158.157:58454] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod"] [unique_id "aTD1S7NTbeTF3WLMl8xjjAAAAYY"]
[Thu Dec 04 10:43:23.845222 2025] [:error] [pid 63321:tid 63332] [client 185.208.158.157:58460] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod.local"] [unique_id "aTD1S7NTbeTF3WLMl8xjjgAAAYg"]
[Thu Dec 04 10:43:24.448477 2025] [:error] [pid 63381:tid 63448] [client 185.208.158.157:58472] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod.properties"] [unique_id "aTD1TOidz_S5muoRMEyhtgAAAkU"]
[Thu Dec 04 10:43:25.051157 2025] [:error] [pid 38403:tid 38424] [client 185.208.158.157:58478] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aTD1TQBCL4g8TXcskwl7oQAAARA"]
[Thu Dec 04 10:43:25.652217 2025] [:error] [pid 63383:tid 63426] [client 185.208.158.157:58480] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production.local"] [unique_id "aTD1TVJYyG_QEWdAPIXv7wAAAsk"]
[Thu Dec 04 10:43:26.253172 2025] [:error] [pid 38403:tid 38427] [client 185.208.158.157:58482] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production.properties"] [unique_id "aTD1TgBCL4g8TXcskwl7qAAAARM"]
[Thu Dec 04 10:43:26.855506 2025] [:error] [pid 63382:tid 63490] [client 185.208.158.157:58494] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.properties"] [unique_id "aTD1TkvJv09BlzBS6SR9QwAAApU"]
[Thu Dec 04 10:43:27.458110 2025] [:error] [pid 63322:tid 63356] [client 185.208.158.157:58510] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aTD1T4vm-cfAnelmlGeOSAAAAcU"]
[Thu Dec 04 10:43:28.059705 2025] [:error] [pid 63381:tid 63455] [client 185.208.158.157:58512] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.stage"] [unique_id "aTD1UOidz_S5muoRMEyh0AAAAkw"]
[Thu Dec 04 10:43:28.663504 2025] [:error] [pid 63322:tid 63352] [client 185.208.158.157:50240] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.stage.properties"] [unique_id "aTD1UIvm-cfAnelmlGeOSQAAAcE"]
[Thu Dec 04 10:43:29.266460 2025] [:error] [pid 2244:tid 2252] [client 185.208.158.157:50242] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aTD1UZm00CCLpKa0F71vcQAAAMY"]
[Thu Dec 04 10:43:29.868926 2025] [:error] [pid 63383:tid 63425] [client 185.208.158.157:50246] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging.properties"] [unique_id "aTD1UVJYyG_QEWdAPIXv9QAAAsg"]
[Thu Dec 04 10:43:30.471113 2025] [:error] [pid 63322:tid 63355] [client 185.208.158.157:50250] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.swp"] [unique_id "aTD1Uovm-cfAnelmlGeOTAAAAcQ"]
[Thu Dec 04 10:43:31.073086 2025] [:error] [pid 63382:tid 63493] [client 185.208.158.157:50264] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.temp"] [unique_id "aTD1U0vJv09BlzBS6SR9RQAAApg"]
[Thu Dec 04 10:43:31.676481 2025] [:error] [pid 2161:tid 2237] [client 185.208.158.157:50278] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test.properties"] [unique_id "aTD1UyjiGdnP9Am2woW2RgAAAJQ"]
[Thu Dec 04 10:43:32.278457 2025] [:error] [pid 63290:tid 63305] [client 185.208.158.157:50286] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.testing"] [unique_id "aTD1VCoM7G4ZFQQHTRzJPQAAAU0"]
[Thu Dec 04 10:43:32.882859 2025] [:error] [pid 2244:tid 2261] [client 185.208.158.157:50300] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.tmp"] [unique_id "aTD1VJm00CCLpKa0F71vcgAAAM8"]
[Thu Dec 04 10:43:33.489097 2025] [:error] [pid 38403:tid 38425] [client 185.208.158.157:50312] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.v1"] [unique_id "aTD1VQBCL4g8TXcskwl7swAAARE"]
[Thu Dec 04 10:43:34.093176 2025] [:error] [pid 63321:tid 63328] [client 185.208.158.157:50320] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.v1.backup"] [unique_id "aTD1VrNTbeTF3WLMl8xjlwAAAYQ"]
[Thu Dec 04 10:43:34.695099 2025] [:error] [pid 63381:tid 63449] [client 185.208.158.157:50334] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.v2"] [unique_id "aTD1Vuidz_S5muoRMEyh0QAAAkY"]
[Thu Dec 04 10:43:35.297385 2025] [:error] [pid 2244:tid 2259] [client 185.208.158.157:50340] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.www"] [unique_id "aTD1V5m00CCLpKa0F71vdwAAAM0"]
[Thu Dec 04 10:43:35.899972 2025] [:error] [pid 2161:tid 2223] [client 185.208.158.157:50352] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.pumpbooking"] [unique_id "aTD1VyjiGdnP9Am2woW2SgAAAIY"]
[Thu Dec 04 10:43:36.501855 2025] [:error] [pid 38403:tid 38426] [client 185.208.158.157:50356] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env."] [unique_id "aTD1WABCL4g8TXcskwl7vgAAARI"]
[Thu Dec 04 10:43:37.104145 2025] [:error] [pid 63381:tid 63443] [client 185.208.158.157:50372] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env_1"] [unique_id "aTD1Weidz_S5muoRMEyh1QAAAkA"]
[Thu Dec 04 10:43:37.706623 2025] [:error] [pid 63383:tid 63426] [client 185.208.158.157:50386] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env_sample"] [unique_id "aTD1WVJYyG_QEWdAPIXwCgAAAsk"]
[Thu Dec 04 10:43:38.308994 2025] [:error] [pid 38403:tid 38411] [client 185.208.158.157:50398] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.envrc"] [unique_id "aTD1WgBCL4g8TXcskwl7xAAAAQM"]
[Thu Dec 04 10:43:38.911337 2025] [:error] [pid 38403:tid 38413] [client 185.208.158.157:56008] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env~"] [unique_id "aTD1WgBCL4g8TXcskwl7xwAAAQU"]
[Thu Dec 04 10:43:39.515643 2025] [:error] [pid 38403:tid 38424] [client 185.208.158.157:56018] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTD1WwBCL4g8TXcskwl7ygAAARA"]
[Thu Dec 04 10:43:40.728412 2025] [:error] [pid 2161:tid 2230] [client 185.208.158.157:56038] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.gitlab-ci/.env"] [unique_id "aTD1XCjiGdnP9Am2woW2TAAAAI0"]
[Thu Dec 04 10:43:41.332092 2025] [:error] [pid 63321:tid 63347] [client 185.208.158.157:56044] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.vscode/.env"] [unique_id "aTD1XbNTbeTF3WLMl8xjsQAAAZc"]
[Thu Dec 04 10:43:41.933984 2025] [:error] [pid 2161:tid 2227] [client 185.208.158.157:56054] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/__tests__/test-become/.env"] [unique_id "aTD1XSjiGdnP9Am2woW2TQAAAIo"]
[Thu Dec 04 10:43:42.535182 2025] [:error] [pid 63379:tid 63397] [client 185.208.158.157:56062] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/_static/.env"] [unique_id "aTD1XsvuHYNZ2IuzoJeB4QAAAgo"]
[Thu Dec 04 10:43:44.349544 2025] [:error] [pid 63379:tid 63387] [client 185.208.158.157:56092] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aTD1YMvuHYNZ2IuzoJeB5AAAAgA"]
[Thu Dec 04 10:43:44.952674 2025] [:error] [pid 63381:tid 63467] [client 185.208.158.157:56102] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/blog/.env"] [unique_id "aTD1YOidz_S5muoRMEyh4QAAAlg"]
[Thu Dec 04 10:43:46.161776 2025] [:error] [pid 38403:tid 38412] [client 185.208.158.157:56112] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/conf/.env"] [unique_id "aTD1YgBCL4g8TXcskwl72wAAAQQ"]
[Thu Dec 04 10:43:46.764530 2025] [:error] [pid 63381:tid 63450] [client 185.208.158.157:56120] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/conf/.env.*"] [unique_id "aTD1Yuidz_S5muoRMEyh5gAAAkc"]
[Thu Dec 04 10:43:47.973120 2025] [:error] [pid 63381:tid 63456] [client 185.208.158.157:56124] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aTD1Y-idz_S5muoRMEyh6gAAAk0"]
[Thu Dec 04 10:43:48.575595 2025] [:error] [pid 2161:tid 2225] [client 185.208.158.157:38642] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env.*"] [unique_id "aTD1ZCjiGdnP9Am2woW2UAAAAIg"]
[Thu Dec 04 10:43:49.788998 2025] [:error] [pid 63382:tid 63470] [client 185.208.158.157:38656] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/configs/.env"] [unique_id "aTD1ZUvJv09BlzBS6SR9VgAAAoE"]
[Thu Dec 04 10:43:50.392464 2025] [:error] [pid 63321:tid 63325] [client 185.208.158.157:38662] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/configs/.env.*"] [unique_id "aTD1ZrNTbeTF3WLMl8xjygAAAYE"]
[Thu Dec 04 10:43:50.996377 2025] [:error] [pid 2161:tid 2220] [client 185.208.158.157:38666] [client 185.208.158.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/configuration/.env"] [unique_id "aTD1ZijiGdnP9Am2woW2UwAAAIM"]
[Thu Dec 04 12:02:40.922531 2025] [:error] [pid 2244:tid 2265] [client 115.72.233.136:65475] [client 115.72.233.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.72.233.136, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTEH4Jm00CCLpKa0F72BwQAAANI"]
[Thu Dec 04 12:02:40.928435 2025] [:error] [pid 2244:tid 2265] [client 115.72.233.136:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 04 12:07:46.209218 2025] [:error] [pid 63290:tid 63297] [client 143.110.180.207:49739] [client 143.110.180.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aTEJEioM7G4ZFQQHTRzafwAAAUU"], referer: binance.com
[Thu Dec 04 12:07:54.578031 2025] [:error] [pid 63383:tid 63424] [client 143.110.180.207:52845] [client 143.110.180.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/files/"] [unique_id "aTEJGlJYyG_QEWdAPIUH4wAAAsc"], referer: binance.com
[Thu Dec 04 12:23:47.767101 2025] [:error] [pid 63290:tid 63292] [client 106.119.167.146:40986] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTEM0yoM7G4ZFQQHTRzeawAAAUA"]
[Thu Dec 04 18:00:50.441355 2025] [:error] [pid 2161:tid 2227] [client 43.166.136.24:44664] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTFb0ijiGdnP9Am2woUX2gAAAIo"]
[Thu Dec 04 19:17:32.180932 2025] [:error] [pid 2244:tid 2266] [client 182.43.70.143:32979] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTFtzJm00CCLpKa0F706AgAAANM"]
[Thu Dec 04 19:23:14.953123 2025] [:error] [pid 38403:tid 38407] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 04 19:23:15.140828 2025] [:error] [pid 38403:tid 38419] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 04 19:23:15.343853 2025] [:error] [pid 38403:tid 38413] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Dec 04 19:23:15.537126 2025] [:error] [pid 38403:tid 38422] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 04 19:23:15.732306 2025] [:error] [pid 38403:tid 38415] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Dec 04 19:23:15.920839 2025] [:error] [pid 38403:tid 38432] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Dec 04 19:23:16.131771 2025] [:error] [pid 38403:tid 38408] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Dec 04 19:23:16.322188 2025] [:error] [pid 38403:tid 38411] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 04 19:23:16.856250 2025] [:error] [pid 38403:tid 38412] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 04 19:23:17.294399 2025] [:error] [pid 38403:tid 38416] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Dec 04 19:23:17.490182 2025] [:error] [pid 38403:tid 38414] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Dec 04 19:23:17.679868 2025] [:error] [pid 38403:tid 38407] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 04 19:23:17.877277 2025] [:error] [pid 38403:tid 38419] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Dec 04 19:23:18.071071 2025] [:error] [pid 38403:tid 38418] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 04 19:23:18.268923 2025] [:error] [pid 38403:tid 38428] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 04 19:23:18.460239 2025] [:error] [pid 38403:tid 38413] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 04 19:23:18.682222 2025] [:error] [pid 38403:tid 38422] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 04 19:23:18.869197 2025] [:error] [pid 38403:tid 38432] [client 194.5.82.64:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 04 19:23:21.644849 2025] [:error] [pid 38403:tid 38432] [client 194.5.82.64:38197] [client 194.5.82.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTFvKQBCL4g8TXcskwkTOQAAARg"]
[Thu Dec 04 19:23:22.594965 2025] [:error] [pid 63321:tid 63328] [client 194.5.82.72:44281] [client 194.5.82.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTFvKrNTbeTF3WLMl8zKXQAAAYQ"]
[Thu Dec 04 23:23:25.538434 2025] [:error] [pid 63290:tid 63300] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:25.685699 2025] [:error] [pid 63290:tid 63316] [client 4.230.47.183:65459] [client 4.230.47.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.47.183, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTGnbSoM7G4ZFQQHTRxUPwAAAVg"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:25.689496 2025] [:error] [pid 63290:tid 63316] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://duckduckgo.com/
[Thu Dec 04 23:23:25.993337 2025] [:error] [pid 63290:tid 63312] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:26.143914 2025] [:error] [pid 63290:tid 63292] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:26.294697 2025] [:error] [pid 63290:tid 63304] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:26.446083 2025] [:error] [pid 63290:tid 63303] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.com/
[Thu Dec 04 23:23:26.595334 2025] [:error] [pid 63290:tid 63295] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:26.745816 2025] [:error] [pid 63290:tid 63301] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:27.197804 2025] [:error] [pid 63290:tid 63294] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://duckduckgo.com/
[Thu Dec 04 23:23:28.578287 2025] [:error] [pid 63290:tid 63294] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:28.730026 2025] [:error] [pid 63290:tid 63310] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:28.880133 2025] [:error] [pid 63290:tid 63297] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://www.google.de/
[Thu Dec 04 23:23:29.030907 2025] [:error] [pid 63290:tid 63308] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Thu Dec 04 23:23:29.484629 2025] [:error] [pid 63290:tid 63306] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:29.634935 2025] [:error] [pid 63290:tid 63300] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:29.935662 2025] [:error] [pid 63290:tid 63312] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:30.389176 2025] [:error] [pid 63290:tid 63304] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:30.541565 2025] [:error] [pid 63290:tid 63303] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:30.843073 2025] [:error] [pid 63290:tid 63296] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.de/
[Thu Dec 04 23:23:30.994026 2025] [:error] [pid 63290:tid 63299] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:31.144780 2025] [:error] [pid 63290:tid 63309] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php, referer: https://www.google.com/
[Thu Dec 04 23:23:31.295062 2025] [:error] [pid 63290:tid 63294] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://www.google.de/
[Thu Dec 04 23:23:31.447982 2025] [:error] [pid 63290:tid 63310] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:32.504105 2025] [:error] [pid 63290:tid 63312] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.com/
[Thu Dec 04 23:23:34.013269 2025] [:error] [pid 63290:tid 63315] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://www.google.de/
[Thu Dec 04 23:23:34.163983 2025] [:error] [pid 63290:tid 63309] [client 4.230.47.183:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:34.311508 2025] [:error] [pid 63290:tid 63310] [client 4.230.47.183:65459] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTGndioM7G4ZFQQHTRxUdgAAAVI"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:34.611872 2025] [:error] [pid 2244:tid 2250] [client 4.230.47.183:64243] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTGndpm00CCLpKa0F72XywAAAMQ"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:34.907675 2025] [:error] [pid 63379:tid 63398] [client 4.230.47.183:65408] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTGndsvuHYNZ2IuzoJf-8QAAAgs"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:35.209072 2025] [:error] [pid 2244:tid 2254] [client 4.230.47.183:65461] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTGnd5m00CCLpKa0F72XzAAAAMg"], referer: https://www.google.fr/
[Thu Dec 04 23:23:35.505009 2025] [:error] [pid 2244:tid 2261] [client 4.230.47.183:65434] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTGnd5m00CCLpKa0F72XzQAAAM8"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:35.809395 2025] [:error] [pid 63322:tid 63352] [client 4.230.47.183:64937] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTGnd4vm-cfAnelmlGcfCwAAAcE"], referer: https://www.google.com/
[Thu Dec 04 23:23:36.108038 2025] [:error] [pid 2244:tid 2271] [client 4.230.47.183:64241] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTGneJm00CCLpKa0F72XzgAAANg"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:36.402738 2025] [:error] [pid 2244:tid 2262] [client 4.230.47.183:65464] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTGneJm00CCLpKa0F72X0AAAANA"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:36.696746 2025] [:error] [pid 63321:tid 63331] [client 4.230.47.183:64990] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aTGneLNTbeTF3WLMl8z5GwAAAYc"], referer: https://www.bing.com/
[Thu Dec 04 23:23:37.001486 2025] [:error] [pid 63382:tid 63479] [client 4.230.47.183:65021] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTGneUvJv09BlzBS6SQA1wAAAoo"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:37.296644 2025] [:error] [pid 2244:tid 2254] [client 4.230.47.183:65447] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTGneZm00CCLpKa0F72X1AAAAMg"], referer: https://www.google.fr/
[Thu Dec 04 23:23:37.593269 2025] [:error] [pid 63379:tid 63393] [client 4.230.47.183:64211] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTGnecvuHYNZ2IuzoJf-9QAAAgY"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:37.905536 2025] [:error] [pid 2244:tid 2247] [client 4.230.47.183:64907] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTGneZm00CCLpKa0F72X1wAAAME"], referer: https://www.bing.com/
[Thu Dec 04 23:23:38.200880 2025] [:error] [pid 2161:tid 2238] [client 4.230.47.183:64905] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTGneijiGdnP9Am2woVZ8gAAAJU"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:38.499434 2025] [:error] [pid 38403:tid 38407] [client 4.230.47.183:64239] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTGnegBCL4g8TXcskwlMwQAAAQA"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:38.794853 2025] [:error] [pid 63382:tid 63483] [client 4.230.47.183:64926] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTGnekvJv09BlzBS6SQA2gAAAo4"], referer: https://www.google.de/
[Thu Dec 04 23:23:39.094230 2025] [:error] [pid 63321:tid 63328] [client 4.230.47.183:64929] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTGne7NTbeTF3WLMl8z5HQAAAYQ"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:39.390564 2025] [:error] [pid 63382:tid 63484] [client 4.230.47.183:64991] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTGne0vJv09BlzBS6SQA3AAAAo8"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:39.688866 2025] [:error] [pid 2161:tid 2228] [client 4.230.47.183:64957] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTGneyjiGdnP9Am2woVZ8wAAAIs"], referer: https://www.google.de/
[Thu Dec 04 23:23:39.987259 2025] [:error] [pid 63322:tid 63374] [client 4.230.47.183:65019] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTGne4vm-cfAnelmlGcfDwAAAdc"], referer: https://www.google.fr/
[Thu Dec 04 23:23:40.282524 2025] [:error] [pid 63379:tid 63387] [client 4.230.47.183:64140] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTGnfMvuHYNZ2IuzoJf--AAAAgA"], referer: https://www.google.fr/
[Thu Dec 04 23:23:40.580056 2025] [:error] [pid 2161:tid 2237] [client 4.230.47.183:64972] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTGnfCjiGdnP9Am2woVZ9gAAAJQ"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:40.872816 2025] [:error] [pid 63322:tid 63371] [client 4.230.47.183:65419] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTGnfIvm-cfAnelmlGcfEQAAAdQ"], referer: https://www.google.de/
[Thu Dec 04 23:23:41.171537 2025] [:error] [pid 63381:tid 63457] [client 4.230.47.183:65525] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTGnfeidz_S5muoRMExchAAAAk4"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:41.465894 2025] [:error] [pid 63379:tid 63401] [client 4.230.47.183:65480] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTGnfcvuHYNZ2IuzoJf--gAAAg4"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:41.772587 2025] [:error] [pid 63322:tid 63370] [client 4.230.47.183:64953] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aTGnfYvm-cfAnelmlGcfEgAAAdM"], referer: https://www.bing.com/
[Thu Dec 04 23:23:42.068292 2025] [:error] [pid 38403:tid 38427] [client 4.230.47.183:64250] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTGnfgBCL4g8TXcskwlMxAAAARM"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:42.367470 2025] [:error] [pid 2161:tid 2220] [client 4.230.47.183:65428] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTGnfijiGdnP9Am2woVZ-wAAAIM"], referer: https://www.bing.com/
[Thu Dec 04 23:23:42.668843 2025] [:error] [pid 38403:tid 38432] [client 4.230.47.183:65427] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTGnfgBCL4g8TXcskwlMxQAAARg"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:42.968927 2025] [:error] [pid 63382:tid 63487] [client 4.230.47.183:65421] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTGnfkvJv09BlzBS6SQA3QAAApI"], referer: https://www.bing.com/
[Thu Dec 04 23:23:43.274992 2025] [:error] [pid 2244:tid 2256] [client 4.230.47.183:64908] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTGnf5m00CCLpKa0F72X4AAAAMo"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:43.570291 2025] [:error] [pid 2244:tid 2271] [client 4.230.47.183:64199] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTGnf5m00CCLpKa0F72X4QAAANg"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:43.875971 2025] [:error] [pid 63382:tid 63472] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:44.025872 2025] [:error] [pid 63382:tid 63492] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.google.com/
[Thu Dec 04 23:23:44.175624 2025] [:error] [pid 63382:tid 63477] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:44.325990 2025] [:error] [pid 63382:tid 63491] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php, referer: https://www.google.com/
[Thu Dec 04 23:23:44.475826 2025] [:error] [pid 63382:tid 63474] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:44.625761 2025] [:error] [pid 63382:tid 63488] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.de/
[Thu Dec 04 23:23:44.775779 2025] [:error] [pid 63382:tid 63480] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:44.925994 2025] [:error] [pid 63382:tid 63485] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.de/
[Thu Dec 04 23:23:45.072627 2025] [:error] [pid 63382:tid 63478] [client 4.230.47.183:64898] [client 4.230.47.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.230.47.183, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTGngUvJv09BlzBS6SQA6AAAAok"], referer: https://www.google.com/
[Thu Dec 04 23:23:45.075765 2025] [:error] [pid 63382:tid 63478] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.com/
[Thu Dec 04 23:23:45.226692 2025] [:error] [pid 63382:tid 63483] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:45.676116 2025] [:error] [pid 63382:tid 63476] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:45.825763 2025] [:error] [pid 63382:tid 63484] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:45.976727 2025] [:error] [pid 63382:tid 63489] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Thu Dec 04 23:23:46.131815 2025] [:error] [pid 63382:tid 63493] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:46.283405 2025] [:error] [pid 63382:tid 63490] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php, referer: https://www.google.fr/
[Thu Dec 04 23:23:46.434293 2025] [:error] [pid 63382:tid 63487] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Thu Dec 04 23:23:46.584400 2025] [:error] [pid 63382:tid 63469] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://www.google.de/
[Thu Dec 04 23:23:46.733828 2025] [:error] [pid 63382:tid 63472] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://duckduckgo.com/
[Thu Dec 04 23:23:46.883874 2025] [:error] [pid 63382:tid 63475] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:47.034397 2025] [:error] [pid 63382:tid 63492] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:23:47.184659 2025] [:error] [pid 63382:tid 63486] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:47.334324 2025] [:error] [pid 63382:tid 63477] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.bing.com/
[Thu Dec 04 23:23:47.483987 2025] [:error] [pid 63382:tid 63491] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:47.633675 2025] [:error] [pid 63382:tid 63474] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.yahoo.com/
[Thu Dec 04 23:23:47.783200 2025] [:error] [pid 63382:tid 63470] [client 4.230.47.183:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.de/
[Thu Dec 04 23:23:48.837677 2025] [:error] [pid 63382:tid 63471] [client 4.230.47.183:64898] [client 4.230.47.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.47.183, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTGnhEvJv09BlzBS6SQBAwAAAoI"], referer: https://www.google.com/
[Thu Dec 04 23:23:54.891369 2025] [:error] [pid 63382:tid 63469] [client 4.230.47.183:64898] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTGnikvJv09BlzBS6SQBIwAAAoA"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:55.189313 2025] [:error] [pid 63321:tid 63340] [client 4.230.47.183:64204] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTGni7NTbeTF3WLMl8z5LAAAAZA"], referer: https://www.bing.com/
[Thu Dec 04 23:23:55.490312 2025] [:error] [pid 63381:tid 63444] [client 4.230.47.183:64236] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTGni-idz_S5muoRMExckAAAAkE"], referer: https://www.google.com/
[Thu Dec 04 23:23:55.786866 2025] [:error] [pid 2244:tid 2263] [client 4.230.47.183:65523] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTGni5m00CCLpKa0F72YBQAAANE"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:56.082596 2025] [:error] [pid 63382:tid 63492] [client 4.230.47.183:64982] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTGnjEvJv09BlzBS6SQBJAAAApc"], referer: https://www.google.de/
[Thu Dec 04 23:23:56.680047 2025] [:error] [pid 63321:tid 63346] [client 4.230.47.183:62960] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTGnjLNTbeTF3WLMl8z5LwAAAZY"], referer: https://duckduckgo.com/
[Thu Dec 04 23:23:56.980763 2025] [:error] [pid 2244:tid 2267] [client 4.230.47.183:65015] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTGnjJm00CCLpKa0F72YCAAAANQ"], referer: https://www.yahoo.com/
[Thu Dec 04 23:23:57.276044 2025] [:error] [pid 63381:tid 63462] [client 4.230.47.183:65016] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTGnjeidz_S5muoRMExckQAAAlM"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:57.573487 2025] [:error] [pid 63290:tid 63316] [client 4.230.47.183:65485] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTGnjSoM7G4ZFQQHTRxUegAAAVg"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:58.020933 2025] [:error] [pid 2161:tid 2241] [client 4.230.47.183:64919] [client 4.230.47.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTGnjijiGdnP9Am2woVaEAAAAJg"], referer: https://www.google.co.uk/
[Thu Dec 04 23:23:58.328258 2025] [:error] [pid 63379:tid 63397] [client 4.230.47.183:64244] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.co.uk/
[Thu Dec 04 23:24:01.948888 2025] [autoindex:error] [pid 63379:tid 63387] [client 4.230.47.183:64244] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 04:39:22.298976 2025] [:error] [pid 53838:tid 53877] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.yahoo.com/
[Fri Dec 05 04:39:22.447031 2025] [:error] [pid 53838:tid 53884] [client 4.241.244.227:54165] [client 4.241.244.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.244.227, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTHxep8M7CH_vMhLrzLW0AAAAE8"], referer: https://www.google.com/
[Fri Dec 05 04:39:22.452777 2025] [:error] [pid 53838:tid 53884] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.com/
[Fri Dec 05 04:39:23.075965 2025] [:error] [pid 53838:tid 53885] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://duckduckgo.com/
[Fri Dec 05 04:39:23.316129 2025] [:error] [pid 53838:tid 53890] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php, referer: https://duckduckgo.com/
[Fri Dec 05 04:39:23.458020 2025] [:error] [pid 53838:tid 53872] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.co.uk/
[Fri Dec 05 04:39:23.593634 2025] [:error] [pid 53838:tid 53883] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Fri Dec 05 04:39:23.785787 2025] [:error] [pid 53838:tid 53892] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Fri Dec 05 04:39:23.929002 2025] [:error] [pid 53838:tid 53891] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.com/
[Fri Dec 05 04:39:24.442682 2025] [:error] [pid 53838:tid 53881] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://www.google.de/
[Fri Dec 05 04:39:24.576325 2025] [:error] [pid 53838:tid 53877] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://duckduckgo.com/
[Fri Dec 05 04:39:24.734980 2025] [:error] [pid 53838:tid 53869] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.fr/
[Fri Dec 05 04:39:24.994255 2025] [:error] [pid 53838:tid 53887] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://www.google.de/
[Fri Dec 05 04:39:25.243107 2025] [:error] [pid 53838:tid 53892] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.bing.com/
[Fri Dec 05 04:39:27.458259 2025] [:error] [pid 53838:tid 53893] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.de/
[Fri Dec 05 04:39:27.576673 2025] [:error] [pid 53838:tid 53871] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php, referer: https://www.yahoo.com/
[Fri Dec 05 04:39:30.058872 2025] [:error] [pid 53838:tid 53877] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.fr/
[Fri Dec 05 04:39:30.588667 2025] [:error] [pid 53838:tid 53890] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.yahoo.com/
[Fri Dec 05 04:39:30.721769 2025] [:error] [pid 53838:tid 53893] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.co.uk/
[Fri Dec 05 04:39:31.060286 2025] [:error] [pid 53838:tid 53884] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.com/
[Fri Dec 05 04:39:31.349929 2025] [:error] [pid 53838:tid 53891] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.bing.com/
[Fri Dec 05 04:39:31.473312 2025] [:error] [pid 53838:tid 53874] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php, referer: https://www.google.de/
[Fri Dec 05 04:39:31.590735 2025] [:error] [pid 53838:tid 53892] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://www.yahoo.com/
[Fri Dec 05 04:39:31.712989 2025] [:error] [pid 53838:tid 53873] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://duckduckgo.com/
[Fri Dec 05 04:39:38.496178 2025] [:error] [pid 53838:tid 53870] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.fr/
[Fri Dec 05 04:39:43.581101 2025] [:error] [pid 53838:tid 53889] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://www.yahoo.com/
[Fri Dec 05 04:39:46.144905 2025] [:error] [pid 53838:tid 53875] [client 4.241.244.227:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.de/
[Fri Dec 05 04:39:47.324732 2025] [:error] [pid 53838:tid 53875] [client 4.241.244.227:54165] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTHxk58M7CH_vMhLrzLXMgAAAEY"], referer: https://www.google.fr/
[Fri Dec 05 04:39:54.181987 2025] [:error] [pid 53923:tid 53935] [client 4.241.244.227:27724] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTHxmrl8ebZN0VCAVXDKPwAAAMo"], referer: https://www.bing.com/
[Fri Dec 05 04:40:01.677730 2025] [:error] [pid 24010:tid 24036] [client 4.241.244.227:28594] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTHxoatjRoDpxa46mwflZgAAARg"], referer: https://www.yahoo.com/
[Fri Dec 05 04:40:06.852756 2025] [:error] [pid 53839:tid 53903] [client 4.241.244.227:28567] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTHxpqQOuERg_RN7bn9VuAAAAIc"], referer: https://www.bing.com/
[Fri Dec 05 04:40:12.736660 2025] [:error] [pid 53838:tid 53879] [client 4.241.244.227:27718] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTHxrJ8M7CH_vMhLrzLXWwAAAEo"], referer: https://duckduckgo.com/
[Fri Dec 05 04:40:47.115335 2025] [:error] [pid 53923:tid 53939] [client 4.241.244.227:64649] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTHxz7l8ebZN0VCAVXDKmwAAAM4"], referer: https://www.google.com/
[Fri Dec 05 04:41:56.726521 2025] [:error] [pid 53838:tid 53871] [client 34.132.100.39:60963] [client 34.132.100.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.100.39, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTHyFJ8M7CH_vMhLrzLYCgAAAEI"]
[Fri Dec 05 04:41:56.730017 2025] [:error] [pid 53838:tid 53871] [client 34.132.100.39:60963] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 05 04:41:59.651798 2025] [:error] [pid 53838:tid 53893] [client 34.132.100.39:60963] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTHyF58M7CH_vMhLrzLYHwAAAFg"]
[Fri Dec 05 04:42:00.129869 2025] [:error] [pid 53838:tid 53883] [client 34.132.100.39:56362] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTHyGJ8M7CH_vMhLrzLYIQAAAE4"]
[Fri Dec 05 04:42:00.559343 2025] [:error] [pid 24010:tid 24015] [client 34.132.100.39:58280] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTHyGKtjRoDpxa46mwfmWQAAAQM"]
[Fri Dec 05 04:42:01.000713 2025] [:error] [pid 53923:tid 53925] [client 34.132.100.39:50287] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTHyGLl8ebZN0VCAVXDLGwAAAMA"]
[Fri Dec 05 04:42:01.444511 2025] [:error] [pid 24010:tid 24026] [client 34.132.100.39:60367] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTHyGatjRoDpxa46mwfmYAAAAQ4"]
[Fri Dec 05 04:42:01.921742 2025] [:error] [pid 53839:tid 53919] [client 34.132.100.39:54964] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTHyGaQOuERg_RN7bn9WXgAAAJc"]
[Fri Dec 05 04:42:02.418832 2025] [:error] [pid 53839:tid 53905] [client 34.132.100.39:53354] [client 34.132.100.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTHyGqQOuERg_RN7bn9WYAAAAIk"]
[Fri Dec 05 05:02:46.796142 2025] [:error] [pid 24010:tid 24035] [client 216.24.219.202:23263] [client 216.24.219.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.202, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTH29qtjRoDpxa46mwf1RQAAARc"]
[Fri Dec 05 05:02:46.800085 2025] [:error] [pid 24010:tid 24035] [client 216.24.219.202:23263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 05 05:12:36.097755 2025] [:error] [pid 53923:tid 53949] [client 96.44.136.159:48848] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTH5RLl8ebZN0VCAVXDdYgAAANg"], referer: https://www.google.com
[Fri Dec 05 13:26:22.478313 2025] [:error] [pid 62720:tid 62729] [client 104.207.34.118:51971] [client 104.207.34.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "aTJs_mDTJuF6xQ5UsIO5FgAAAYc"]
[Fri Dec 05 13:26:27.056450 2025] [:error] [pid 53838:tid 53880] [client 65.111.5.66:30753] [client 65.111.5.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTJtA58M7CH_vMhLrzKq4QAAAEs"]
[Fri Dec 05 13:26:27.972264 2025] [:error] [pid 53839:tid 53902] [client 216.26.252.226:52241] [client 216.26.252.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.svn/wc.db"] [unique_id "aTJtA6QOuERg_RN7bn9KVQAAAIY"]
[Fri Dec 05 17:36:47.417107 2025] [:error] [pid 24010:tid 24012] [client 176.65.132.18:41778] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTKnr6tjRoDpxa46mwc-kwAAAQA"]
[Fri Dec 05 22:49:13.252012 2025] [:error] [pid 35962:tid 35980] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Dec 05 22:49:13.842855 2025] [:error] [pid 35962:tid 35984] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Dec 05 22:49:14.204135 2025] [:error] [pid 35962:tid 35977] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Dec 05 22:49:14.776117 2025] [:error] [pid 35962:tid 35964] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Dec 05 22:49:15.137923 2025] [:error] [pid 35962:tid 35980] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Dec 05 22:49:15.485675 2025] [:error] [pid 35962:tid 35982] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Dec 05 22:49:15.826042 2025] [:error] [pid 35962:tid 35981] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Dec 05 22:49:16.189394 2025] [:error] [pid 35962:tid 35966] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 05 22:49:16.947482 2025] [:error] [pid 35962:tid 35988] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Dec 05 22:49:18.127090 2025] [:error] [pid 35962:tid 35970] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Dec 05 22:49:18.735087 2025] [:error] [pid 35962:tid 35986] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Dec 05 22:49:19.547863 2025] [:error] [pid 35962:tid 35974] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Dec 05 22:49:19.910194 2025] [:error] [pid 35962:tid 35988] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Dec 05 22:49:20.725400 2025] [:error] [pid 35962:tid 35981] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Dec 05 22:49:21.067917 2025] [:error] [pid 35962:tid 35986] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Dec 05 22:49:21.674895 2025] [:error] [pid 35962:tid 35982] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Dec 05 22:49:22.255750 2025] [:error] [pid 35962:tid 35988] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Dec 05 22:49:22.606730 2025] [:error] [pid 35962:tid 35985] [client 82.118.29.204:49159] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Dec 05 22:49:30.181044 2025] [:error] [pid 35962:tid 35980] [client 82.118.29.204:49159] [client 82.118.29.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTLw-p-hnYjbYINfh7H0egAAAFA"]
[Fri Dec 05 22:49:32.009881 2025] [:error] [pid 18579:tid 18595] [client 82.118.29.193:42141] [client 82.118.29.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTLw_MAUSulJty2JiBrF0gAAAAo"]
[Fri Dec 05 22:49:33.725316 2025] [:error] [pid 18614:tid 18629] [client 82.118.29.205:40295] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Dec 05 22:49:35.005769 2025] [:error] [pid 18614:tid 18640] [client 82.118.29.205:40295] [client 82.118.29.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aTLw_3Hum9jj9plt7MWKpwAAAVg"]
[Fri Dec 05 22:49:36.480057 2025] [:error] [pid 35962:tid 35968] [client 82.118.29.196:60225] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Dec 05 22:49:37.053616 2025] [:error] [pid 35962:tid 35986] [client 82.118.29.196:60225] [client 82.118.29.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTLxAZ-hnYjbYINfh7H0nAAAAFY"]
[Fri Dec 05 22:49:38.355228 2025] [:error] [pid 18520:tid 18526] [client 82.118.29.181:47725] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Dec 05 22:49:41.205109 2025] [:error] [pid 18520:tid 18529] [client 82.118.29.181:47725] [client 82.118.29.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTLxBYOC8XSo46ZrIeMFQAAAAIU"]
[Fri Dec 05 22:49:42.595706 2025] [:error] [pid 35962:tid 35986] [client 82.118.29.188:36185] [client 82.118.29.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTLxBp-hnYjbYINfh7H0wAAAAFY"]
[Fri Dec 05 22:49:43.309247 2025] [:error] [pid 18614:tid 18625] [client 82.118.29.156:45767] [client 82.118.29.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTLxB3Hum9jj9plt7MWKwAAAAUk"]
[Fri Dec 05 22:49:44.038228 2025] [:error] [pid 18520:tid 18528] [client 82.118.29.161:44909] [client 82.118.29.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTLxCIOC8XSo46ZrIeMFTgAAAIQ"]
[Fri Dec 05 22:49:45.767568 2025] [:error] [pid 18520:tid 18531] [client 82.118.29.157:51363] [client 82.118.29.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTLxCYOC8XSo46ZrIeMFVgAAAIc"]
[Fri Dec 05 22:49:47.287851 2025] [:error] [pid 18614:tid 18632] [client 82.118.29.174:42475] [client 82.118.29.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTLxC3Hum9jj9plt7MWK0QAAAVA"]
[Fri Dec 05 22:49:48.348752 2025] [:error] [pid 35962:tid 35985] [client 82.118.29.204:54933] [client 82.118.29.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTLxDJ-hnYjbYINfh7H02wAAAFU"]
[Fri Dec 05 22:49:49.052254 2025] [:error] [pid 18614:tid 18636] [client 82.118.29.168:47121] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Dec 05 22:49:49.993788 2025] [:error] [pid 18614:tid 18632] [client 82.118.29.168:47121] [client 82.118.29.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aTLxDXHum9jj9plt7MWK4wAAAVA"]
[Fri Dec 05 22:49:51.433912 2025] [:error] [pid 35962:tid 35976] [client 82.118.29.187:65473] [client 82.118.29.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTLxD5-hnYjbYINfh7H05wAAAEw"]
[Fri Dec 05 22:49:52.783776 2025] [:error] [pid 35962:tid 35972] [client 82.118.29.202:39251] [client 82.118.29.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTLxEJ-hnYjbYINfh7H06wAAAEg"]
[Fri Dec 05 22:49:53.517075 2025] [:error] [pid 18614:tid 18623] [client 82.118.29.191:34151] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Dec 05 22:49:53.862598 2025] [:error] [pid 18614:tid 18628] [client 82.118.29.191:34151] [client 82.118.29.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTLxEXHum9jj9plt7MWK_QAAAUw"]
[Fri Dec 05 22:49:54.567119 2025] [:error] [pid 18579:tid 18606] [client 82.118.29.196:58421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Dec 05 22:49:55.886657 2025] [:error] [pid 18579:tid 18593] [client 82.118.29.196:58421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Dec 05 22:49:56.944882 2025] [:error] [pid 18579:tid 18597] [client 82.118.29.196:58421] [client 82.118.29.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTLxFMAUSulJty2JiBrGTgAAAAw"]
[Fri Dec 05 22:49:57.636120 2025] [:error] [pid 18520:tid 18540] [client 82.118.29.168:27425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Dec 05 22:49:57.973812 2025] [:error] [pid 18520:tid 18529] [client 82.118.29.168:27425] [client 82.118.29.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTLxFYOC8XSo46ZrIeMFiAAAAIU"]
[Fri Dec 05 22:49:58.731156 2025] [:error] [pid 18520:tid 18535] [client 82.118.29.170:27769] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Dec 05 22:49:59.452585 2025] [:error] [pid 18520:tid 18528] [client 82.118.29.170:27769] [client 82.118.29.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aTLxF4OC8XSo46ZrIeMFjgAAAIQ"]
[Fri Dec 05 22:50:00.529637 2025] [:error] [pid 18579:tid 18604] [client 82.118.29.156:48921] [client 82.118.29.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTLxGMAUSulJty2JiBrGYgAAABM"]
[Fri Dec 05 22:50:01.628441 2025] [:error] [pid 35962:tid 35980] [client 82.118.29.169:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Dec 05 22:50:02.244981 2025] [:error] [pid 35962:tid 35976] [client 82.118.29.169:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Dec 05 22:50:06.939200 2025] [:error] [pid 35962:tid 35967] [client 82.118.29.169:31475] [client 82.118.29.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTLxHp-hnYjbYINfh7H1VwAAAEM"]
[Fri Dec 05 22:50:08.080927 2025] [:error] [pid 18579:tid 18605] [client 82.118.29.156:63471] [client 82.118.29.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTLxIMAUSulJty2JiBrGeQAAABQ"]
[Fri Dec 05 22:50:09.442394 2025] [:error] [pid 35962:tid 35986] [client 82.118.29.196:25551] [client 82.118.29.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTLxIZ-hnYjbYINfh7H1aQAAAFY"]
[Fri Dec 05 22:50:10.138726 2025] [:error] [pid 35962:tid 35972] [client 82.118.29.189:27633] [client 82.118.29.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTLxIp-hnYjbYINfh7H1bwAAAEg"]
[Fri Dec 05 22:50:10.850915 2025] [:error] [pid 18579:tid 18593] [client 82.118.29.171:50551] [client 82.118.29.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTLxIsAUSulJty2JiBrGiAAAAAg"]
[Fri Dec 05 22:50:13.530709 2025] [:error] [pid 18614:tid 18629] [client 82.118.29.204:53109] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Dec 05 22:50:14.110594 2025] [:error] [pid 18614:tid 18630] [client 82.118.29.204:53109] [client 82.118.29.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aTLxJnHum9jj9plt7MWLaQAAAU4"]
[Fri Dec 05 22:50:14.786977 2025] [:error] [pid 35962:tid 35978] [client 82.118.29.183:28861] [client 82.118.29.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aTLxJp-hnYjbYINfh7H1jAAAAE4"]
[Fri Dec 05 22:50:15.486000 2025] [:error] [pid 18520:tid 18537] [client 82.118.29.179:28533] [client 82.118.29.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTLxJ4OC8XSo46ZrIeMF1AAAAI0"]
[Fri Dec 05 22:50:17.224595 2025] [:error] [pid 18614:tid 18633] [client 82.118.29.167:37739] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Dec 05 22:50:18.184065 2025] [:error] [pid 18614:tid 18624] [client 82.118.29.167:37739] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Dec 05 22:50:19.843329 2025] [:error] [pid 18614:tid 18634] [client 82.118.29.167:37739] [client 82.118.29.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aTLxK3Hum9jj9plt7MWLhAAAAVI"]
[Fri Dec 05 22:50:22.699267 2025] [:error] [pid 18520:tid 18533] [client 82.118.29.162:37893] [client 82.118.29.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.118.29.162, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTLxLoOC8XSo46ZrIeMF8AAAAIk"]
[Fri Dec 05 22:50:23.046776 2025] [:error] [pid 18520:tid 18524] [client 82.118.29.162:37893] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Dec 05 22:50:25.326191 2025] [:error] [pid 18520:tid 18548] [client 82.118.29.162:37893] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Dec 05 22:50:25.664228 2025] [:error] [pid 18520:tid 18524] [client 82.118.29.162:37893] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Dec 05 22:50:28.527479 2025] [:error] [pid 18520:tid 18544] [client 82.118.29.162:37893] [client 82.118.29.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTLxNIOC8XSo46ZrIeMGFQAAAJQ"]
[Fri Dec 05 22:50:29.579015 2025] [:error] [pid 35962:tid 35977] [client 82.118.29.156:26733] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Dec 05 22:50:29.936172 2025] [:error] [pid 35962:tid 35982] [client 82.118.29.156:26733] [client 82.118.29.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.118.29.156, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTLxNZ-hnYjbYINfh7H2GwAAAFI"]
[Fri Dec 05 22:50:30.646422 2025] [:error] [pid 35962:tid 35972] [client 82.118.29.156:26733] [client 82.118.29.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aTLxNp-hnYjbYINfh7H2IwAAAEg"]
[Fri Dec 05 22:50:34.572931 2025] [:error] [pid 18520:tid 18547] [client 82.118.29.189:54543] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Dec 05 22:50:35.308223 2025] [:error] [pid 18520:tid 18539] [client 82.118.29.189:54543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Dec 05 22:50:36.034882 2025] [:error] [pid 18520:tid 18537] [client 82.118.29.189:54543] [client 82.118.29.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTLxPIOC8XSo46ZrIeMGPQAAAI0"]
[Fri Dec 05 22:50:37.070728 2025] [:error] [pid 18521:tid 18574] [client 82.118.29.168:46985] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Dec 05 22:50:38.185114 2025] [:error] [pid 18521:tid 18566] [client 82.118.29.168:46985] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Dec 05 22:50:39.146839 2025] [:error] [pid 18521:tid 18564] [client 82.118.29.168:46985] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Dec 05 22:50:39.842467 2025] [:error] [pid 18521:tid 18556] [client 82.118.29.168:46985] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Dec 05 22:50:40.203247 2025] [:error] [pid 18521:tid 18551] [client 82.118.29.168:46985] [client 82.118.29.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTLxQE_hJ6r18UnAijynjQAAAMA"]
[Fri Dec 05 22:50:41.244149 2025] [:error] [pid 18579:tid 18589] [client 82.118.29.171:58963] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Dec 05 22:50:41.593816 2025] [:error] [pid 18579:tid 18585] [client 82.118.29.171:58963] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Dec 05 22:50:41.931043 2025] [:error] [pid 18579:tid 18601] [client 82.118.29.171:58963] [client 82.118.29.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTLxQcAUSulJty2JiBrHTAAAABA"]
[Fri Dec 05 22:50:43.229118 2025] [:error] [pid 18520:tid 18531] [client 82.118.29.187:64747] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Dec 05 22:50:44.479038 2025] [:error] [pid 18520:tid 18530] [client 82.118.29.187:64747] [client 82.118.29.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.118.29.187, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aTLxRIOC8XSo46ZrIeMGcAAAAIY"]
[Fri Dec 05 22:50:44.834381 2025] [:error] [pid 18520:tid 18528] [client 82.118.29.187:64747] [client 82.118.29.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTLxRIOC8XSo46ZrIeMGcQAAAIQ"]
[Fri Dec 05 22:50:51.471033 2025] [:error] [pid 18521:tid 18558] [client 82.118.29.181:36867] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Dec 05 22:50:53.828134 2025] [:error] [pid 18521:tid 18553] [client 82.118.29.181:36867] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Dec 05 22:50:54.156515 2025] [:error] [pid 18521:tid 18571] [client 82.118.29.181:36867] [client 82.118.29.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTLxTk_hJ6r18UnAijyn-AAAANQ"]
[Fri Dec 05 22:50:55.196201 2025] [:error] [pid 18579:tid 18608] [client 82.118.29.200:65063] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Dec 05 22:50:56.490087 2025] [:error] [pid 18579:tid 18609] [client 82.118.29.200:65063] [client 82.118.29.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.118.29.200, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTLxUMAUSulJty2JiBrHjwAAABg"]
[Fri Dec 05 22:50:56.844019 2025] [:error] [pid 18579:tid 18596] [client 82.118.29.200:65063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Dec 05 22:50:57.209479 2025] [:error] [pid 18579:tid 18604] [client 82.118.29.200:65063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Dec 05 22:50:57.789973 2025] [:error] [pid 18579:tid 18606] [client 82.118.29.200:65063] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Dec 05 22:50:58.144697 2025] [:error] [pid 18579:tid 18597] [client 82.118.29.200:65063] [client 82.118.29.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTLxUsAUSulJty2JiBrHnAAAAAw"]
[Fri Dec 05 22:50:58.850001 2025] [:error] [pid 18579:tid 18596] [client 82.118.29.182:44245] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Dec 05 22:50:59.219519 2025] [:error] [pid 18579:tid 18604] [client 82.118.29.182:44245] [client 82.118.29.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aTLxU8AUSulJty2JiBrHpQAAABM"]
[Fri Dec 05 22:51:00.262197 2025] [:error] [pid 35962:tid 35986] [client 82.118.29.158:34433] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Dec 05 22:51:00.615062 2025] [:error] [pid 35962:tid 35975] [client 82.118.29.158:34433] [client 82.118.29.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTLxVJ-hnYjbYINfh7H3PAAAAEs"]
[Fri Dec 05 22:51:02.050605 2025] [:error] [pid 18579:tid 18604] [client 82.118.29.186:20217] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Dec 05 22:51:02.397663 2025] [:error] [pid 18579:tid 18594] [client 82.118.29.186:20217] [client 82.118.29.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTLxVsAUSulJty2JiBrHugAAAAk"]
[Fri Dec 05 22:51:03.078067 2025] [:error] [pid 18614:tid 18640] [client 82.118.29.166:64073] [client 82.118.29.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTLxV3Hum9jj9plt7MWMFwAAAVg"]
[Fri Dec 05 22:58:29.696190 2025] [:error] [pid 32385:tid 32401] [client 182.42.111.213:48417] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTLzFa-noNHpDvGbpCtPuQAAAQ0"]
[Sat Dec 06 02:38:28.981184 2025] [:error] [pid 11070:tid 11094] [client 34.55.142.7:60859] [client 34.55.142.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.142.7, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTMmpKYvFlJHrPBrjoAMhgAAABU"]
[Sat Dec 06 02:38:28.986141 2025] [:error] [pid 11070:tid 11094] [client 34.55.142.7:60859] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Dec 06 02:38:31.651117 2025] [:error] [pid 11070:tid 11086] [client 34.55.142.7:60859] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTMmp6YvFlJHrPBrjoAMlQAAAA0"]
[Sat Dec 06 02:38:32.192615 2025] [:error] [pid 21705:tid 21750] [client 34.55.142.7:62511] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTMmqDnZoS9qagEFj99RjgAAAM4"]
[Sat Dec 06 02:38:32.638039 2025] [:error] [pid 25666:tid 25670] [client 34.55.142.7:53609] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTMmqG3o6OQ_nNZM5F51dgAAAQI"]
[Sat Dec 06 02:38:33.061788 2025] [:error] [pid 25666:tid 25686] [client 34.55.142.7:62511] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTMmqW3o6OQ_nNZM5F51dwAAARI"]
[Sat Dec 06 02:38:33.491922 2025] [:error] [pid 11070:tid 11075] [client 34.55.142.7:61249] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTMmqaYvFlJHrPBrjoAMmAAAAAI"]
[Sat Dec 06 02:38:33.934268 2025] [:error] [pid 11070:tid 11092] [client 34.55.142.7:63913] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTMmqaYvFlJHrPBrjoAMmgAAABM"]
[Sat Dec 06 02:38:34.339195 2025] [:error] [pid 25666:tid 25681] [client 34.55.142.7:61036] [client 34.55.142.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTMmqm3o6OQ_nNZM5F51eQAAAQ0"]
[Sat Dec 06 04:54:51.803291 2025] [:error] [pid 35621:tid 35638] [client 223.185.39.23:13871] [client 223.185.39.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.39.23, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTNGm0QGb3oZH9SdKQUTOgAAAU4"]
[Sat Dec 06 04:54:51.809256 2025] [:error] [pid 35621:tid 35638] [client 223.185.39.23:13871] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Dec 06 05:17:14.585461 2025] [:error] [pid 35591:tid 35611] [client 203.2.64.59:54924] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTNL2obmw-7bFvTxc9ODHAAAARI"]
[Sat Dec 06 11:14:28.421272 2025] [:error] [pid 1838:tid 1857] [client 43.140.247.223:51796] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTOflC5zgnu67Yo7vraEywAAAos"]
[Sat Dec 06 12:25:12.458970 2025] [:error] [pid 1838:tid 1849] [client 145.239.10.137:38521] File does not exist: /usr/local/apache/htdocs/suspended-page/dox.php, referer: http://pumpbooking.com/dox.php
[Sat Dec 06 17:06:22.858466 2025] [:error] [pid 35622:tid 35670] [client 147.185.41.173:34550] [client 147.185.41.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTPyDiOSP_9DVLgFwI6nuwAAAZM"]
[Sat Dec 06 17:23:17.516747 2025] [:error] [pid 1727:tid 1736] [client 182.44.12.37:44266] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTP2BcD83luYT37-ZaXzMgAAAkc"]
[Sat Dec 06 21:47:28.044601 2025] [:error] [pid 1838:tid 1846] [client 43.159.135.203:56470] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTQz8C5zgnu67Yo7vrYwvwAAAoA"]
[Sat Dec 06 23:42:05.927418 2025] [:error] [pid 61215:tid 61229] [client 14.215.163.132:42131] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTROzeOOZ8nTCBYuI-xrzwAAAAo"]
[Sun Dec 07 04:19:14.276191 2025] [:error] [pid 34110:tid 34190] [client 110.226.179.249:28385] [client 110.226.179.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.226.179.249, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTSPwgndtmtsHiXHBO1vygAAAJc"]
[Sun Dec 07 04:19:14.281368 2025] [:error] [pid 34110:tid 34190] [client 110.226.179.249:28385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 07 04:57:54.816197 2025] [:error] [pid 34108:tid 34123] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.com/
[Sun Dec 07 04:57:55.106289 2025] [:error] [pid 34108:tid 34115] [client 20.205.13.31:62978] [client 20.205.13.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.13.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTSY06LvdvAppF-gXosLcAAAAAI"], referer: https://www.bing.com/
[Sun Dec 07 04:57:55.111004 2025] [:error] [pid 34108:tid 34115] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.bing.com/
[Sun Dec 07 04:57:55.360305 2025] [:error] [pid 34108:tid 34127] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.bing.com/
[Sun Dec 07 04:57:55.490822 2025] [:error] [pid 34108:tid 34122] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.bing.com/
[Sun Dec 07 04:57:55.613327 2025] [:error] [pid 34108:tid 34120] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.com/
[Sun Dec 07 04:57:55.929832 2025] [:error] [pid 34108:tid 34119] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Sun Dec 07 04:57:56.171695 2025] [:error] [pid 34108:tid 34132] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Sun Dec 07 04:57:56.439800 2025] [:error] [pid 34108:tid 34134] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:57:56.671111 2025] [:error] [pid 34108:tid 34128] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.bing.com/
[Sun Dec 07 04:57:56.924687 2025] [:error] [pid 34108:tid 34125] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.google.de/
[Sun Dec 07 04:57:57.280762 2025] [:error] [pid 34108:tid 34117] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.yahoo.com/
[Sun Dec 07 04:57:59.130364 2025] [:error] [pid 34108:tid 34131] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:57:59.423347 2025] [:error] [pid 34108:tid 34127] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.yahoo.com/
[Sun Dec 07 04:57:59.574662 2025] [:error] [pid 34108:tid 34120] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:57:59.696495 2025] [:error] [pid 34108:tid 34119] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.yahoo.com/
[Sun Dec 07 04:57:59.817985 2025] [:error] [pid 34108:tid 34118] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Sun Dec 07 04:57:59.941068 2025] [:error] [pid 34108:tid 34132] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.fr/
[Sun Dec 07 04:58:00.205671 2025] [:error] [pid 34108:tid 34130] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.com/
[Sun Dec 07 04:58:00.461491 2025] [:error] [pid 34108:tid 34135] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.google.com/
[Sun Dec 07 04:58:00.583437 2025] [:error] [pid 34108:tid 34116] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:00.704622 2025] [:error] [pid 34108:tid 34125] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Sun Dec 07 04:58:00.825910 2025] [:error] [pid 34108:tid 34133] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:00.945816 2025] [:error] [pid 34108:tid 34129] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.fr/
[Sun Dec 07 04:58:01.513644 2025] [:error] [pid 34108:tid 34114] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:01.793980 2025] [:error] [pid 34108:tid 34123] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Sun Dec 07 04:58:02.176324 2025] [:error] [pid 34108:tid 34113] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Sun Dec 07 04:58:02.576043 2025] [:error] [pid 34108:tid 34127] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.yahoo.com/
[Sun Dec 07 04:58:03.169796 2025] [:error] [pid 34108:tid 34119] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.co.uk/
[Sun Dec 07 04:58:03.472809 2025] [:error] [pid 34108:tid 34118] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:03.714478 2025] [:error] [pid 34108:tid 34134] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.yahoo.com/
[Sun Dec 07 04:58:04.079445 2025] [:error] [pid 34108:tid 34128] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:04.198535 2025] [:error] [pid 34108:tid 34135] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:04.322440 2025] [:error] [pid 34108:tid 34116] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.de/
[Sun Dec 07 04:58:05.005649 2025] [:error] [pid 34108:tid 34129] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Sun Dec 07 04:58:05.783636 2025] [:error] [pid 34108:tid 34124] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.bing.com/
[Sun Dec 07 04:58:07.785722 2025] [:error] [pid 34108:tid 34127] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://duckduckgo.com/
[Sun Dec 07 04:58:09.130182 2025] [:error] [pid 34108:tid 34128] [client 20.205.13.31:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Sun Dec 07 04:58:09.468458 2025] [:error] [pid 34108:tid 34135] [client 20.205.13.31:62978] [client 20.205.13.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTSY4aLvdvAppF-gXosLvQAAABY"], referer: https://www.google.de/
[Sun Dec 07 05:01:30.585409 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 07 05:01:31.078640 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 07 05:01:31.504685 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Dec 07 05:01:31.930804 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Dec 07 05:01:32.359720 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Dec 07 05:01:32.787045 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Dec 07 05:01:33.214219 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Dec 07 05:01:33.642737 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 07 05:01:34.511982 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Dec 07 05:01:35.370510 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Dec 07 05:01:35.798003 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Dec 07 05:01:36.234367 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Dec 07 05:01:36.665909 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Dec 07 05:01:37.094564 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Dec 07 05:01:37.521319 2025] [:error] [pid 34108:tid 34124] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Dec 07 05:01:37.950379 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Dec 07 05:01:38.379192 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Dec 07 05:01:38.817305 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.14:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Dec 07 05:01:44.884342 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.14:49881] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTSZuKLvdvAppF-gXosOLQAAABI"]
[Sun Dec 07 05:01:47.040312 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.32:46093] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTSZu4JPZ-pZM-y51NHPuAAAAQ8"]
[Sun Dec 07 05:01:49.180994 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.43:64749] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Dec 07 05:01:50.475668 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.43:64749] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aTSZvgndtmtsHiXHBO1_DAAAAIg"]
[Sun Dec 07 05:01:52.183659 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.20:30403] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Dec 07 05:01:52.613807 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.20:30403] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTSZwIJPZ-pZM-y51NHP5gAAARU"]
[Sun Dec 07 05:01:53.900820 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.31:25239] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Dec 07 05:01:56.062468 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.31:25239] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTSZxPpR7YTD7JcHjhF8qgAAAVE"]
[Sun Dec 07 05:01:57.364729 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.41:20893] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTSZxYjE_vucgM_xD4Td6QAAAEk"]
[Sun Dec 07 05:01:58.221888 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.53:62797] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTSZxqLvdvAppF-gXosOfwAAAAo"]
[Sun Dec 07 05:01:59.069461 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.45:51133] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTSZxxrSxOOdwv3vX3w8tAAAANY"]
[Sun Dec 07 05:01:59.919261 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.28:44433] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTSZx4jE_vucgM_xD4Td_QAAAEQ"]
[Sun Dec 07 05:02:00.771732 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.31:52447] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTSZyBrSxOOdwv3vX3w8xQAAAMg"]
[Sun Dec 07 05:02:02.052993 2025] [:error] [pid 34195:tid 34203] [client 45.146.55.28:28885] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTSZyhrSxOOdwv3vX3w8zgAAAMU"]
[Sun Dec 07 05:02:02.908299 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.49:25831] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Dec 07 05:02:03.793770 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.49:25831] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aTSZy6LvdvAppF-gXosOsgAAABM"]
[Sun Dec 07 05:02:05.514981 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.27:55997] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTSZzRrSxOOdwv3vX3w87wAAAM0"]
[Sun Dec 07 05:02:06.804296 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.18:53817] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTSZzvpR7YTD7JcHjhF8_QAAAVI"]
[Sun Dec 07 05:02:07.655566 2025] [:error] [pid 34109:tid 34159] [client 45.146.55.52:48261] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Dec 07 05:02:08.087051 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.52:48261] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTSZ0IjE_vucgM_xD4TeOQAAAFY"]
[Sun Dec 07 05:02:08.977961 2025] [:error] [pid 34110:tid 34180] [client 45.146.55.47:24239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Dec 07 05:02:10.277788 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.47:24239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Dec 07 05:02:11.570558 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.47:24239] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTSZ0wndtmtsHiXHBO1_lQAAAIY"]
[Sun Dec 07 05:02:15.138148 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.49:51643] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Dec 07 05:02:15.580647 2025] [:error] [pid 34195:tid 34219] [client 45.146.55.49:51643] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTSZ1xrSxOOdwv3vX3w92gAAANU"]
[Sun Dec 07 05:02:16.436464 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.55:54251] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Dec 07 05:02:17.299898 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.55:54251] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aTSZ2RrSxOOdwv3vX3w-BAAAAMM"]
[Sun Dec 07 05:02:18.601776 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.48:50123] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTSZ2ojE_vucgM_xD4TelAAAAFI"]
[Sun Dec 07 05:02:19.879144 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.32:57151] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Dec 07 05:02:20.308409 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.32:57151] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Dec 07 05:02:21.159728 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.32:57151] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTSZ3QndtmtsHiXHBO1_7wAAAI8"]
[Sun Dec 07 05:02:22.437622 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.54:42555] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTSZ3hrSxOOdwv3vX3w-UgAAAMA"]
[Sun Dec 07 05:02:23.734040 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.17:28347] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTSZ36LvdvAppF-gXosPXgAAAAg"]
[Sun Dec 07 05:02:24.598176 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.27:51591] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTSZ4IJPZ-pZM-y51NHRMwAAARE"]
[Sun Dec 07 05:02:25.447039 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.43:43445] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTSZ4RrSxOOdwv3vX3w-agAAAM0"]
[Sun Dec 07 05:02:27.155231 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.42:25175] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Dec 07 05:02:27.586071 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.42:25175] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aTSZ44JPZ-pZM-y51NHRUQAAAQw"]
[Sun Dec 07 05:02:28.436646 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.55:48233] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aTSZ5AndtmtsHiXHBO2AJQAAAIs"]
[Sun Dec 07 05:02:30.290789 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.58:41679] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTSZ5u6_dquQqQ60IZ9_TwAAAZE"]
[Sun Dec 07 05:02:32.074693 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.57:36969] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Dec 07 05:02:32.935953 2025] [:error] [pid 34195:tid 34209] [client 45.146.55.57:36969] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Dec 07 05:02:34.670166 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.57:36969] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aTSZ6hrSxOOdwv3vX3w-7wAAAM4"]
[Sun Dec 07 05:02:36.814836 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.52:27135] [client 45.146.55.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.52, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTSZ7IjE_vucgM_xD4TfRQAAAE8"]
[Sun Dec 07 05:02:37.248203 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.52:27135] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Dec 07 05:02:39.389414 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.52:27135] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Dec 07 05:02:39.819692 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.52:27135] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Dec 07 05:02:41.970225 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.52:27135] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTSZ8YjE_vucgM_xD4TfmgAAAEs"]
[Sun Dec 07 05:02:43.255350 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.28:40645] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Dec 07 05:02:44.006325 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.28:40645] [client 45.146.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.28, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTSZ8xrSxOOdwv3vX3w_QgAAAMk"]
[Sun Dec 07 05:02:44.874406 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.28:40645] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aTSZ9BrSxOOdwv3vX3w_UAAAAMo"]
[Sun Dec 07 05:02:47.485970 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.19:64759] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Dec 07 05:02:50.948047 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.19:64759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Dec 07 05:02:51.817969 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.19:64759] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTSZ-4JPZ-pZM-y51NHSKAAAAQQ"]
[Sun Dec 07 05:02:52.672874 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.29:31915] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Dec 07 05:02:54.000411 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.29:31915] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Dec 07 05:02:54.864990 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.29:31915] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Dec 07 05:02:55.727879 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.29:31915] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Dec 07 05:02:56.152745 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.29:31915] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTSaAAndtmtsHiXHBO2BMwAAAIU"]
[Sun Dec 07 05:02:57.009506 2025] [:error] [pid 7273:tid 7287] [client 45.146.55.18:49441] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Dec 07 05:02:57.441565 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.18:49441] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Dec 07 05:02:57.870912 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.18:49441] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTSaAfpR7YTD7JcHjhF-7AAAAUg"]
[Sun Dec 07 05:02:59.170688 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.17:62649] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Dec 07 05:03:00.048613 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.17:62649] [client 45.146.55.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.17, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aTSaBIJPZ-pZM-y51NHSbAAAARA"]
[Sun Dec 07 05:03:00.475501 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.17:62649] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTSaBIJPZ-pZM-y51NHScAAAAQw"]
[Sun Dec 07 05:03:05.701749 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.20:59733] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Dec 07 05:03:08.298346 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.20:59733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Dec 07 05:03:08.734801 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.20:59733] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTSaDAndtmtsHiXHBO2BlwAAAJU"]
[Sun Dec 07 05:03:09.589653 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.32:50721] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Dec 07 05:03:10.881748 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.32:50721] [client 45.146.55.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.32, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTSaDu6_dquQqQ60IZ-AwwAAAYI"]
[Sun Dec 07 05:03:11.318435 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.32:50721] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Dec 07 05:03:11.755345 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.32:50721] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Dec 07 05:03:12.189839 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.32:50721] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Dec 07 05:03:12.617013 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.32:50721] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTSaEO6_dquQqQ60IZ-A4QAAAZY"]
[Sun Dec 07 05:03:13.478365 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.27:47547] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Dec 07 05:03:13.901716 2025] [:error] [pid 34109:tid 34148] [client 45.146.55.27:47547] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aTSaEYjE_vucgM_xD4ThCwAAAEg"]
[Sun Dec 07 05:03:15.188394 2025] [:error] [pid 34108:tid 34118] [client 45.146.55.49:49659] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Dec 07 05:03:15.655898 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.49:49659] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTSaE6LvdvAppF-gXosRbAAAAAY"]
[Sun Dec 07 05:03:17.395046 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.48:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Dec 07 05:03:17.834073 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.48:48871] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTSaFYJPZ-pZM-y51NHS6gAAARE"]
[Sun Dec 07 05:03:18.704000 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.19:31035] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTSaFgndtmtsHiXHBO2B1AAAAJg"]
[Sun Dec 07 05:03:19.558959 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.33:41879] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Dec 07 05:03:19.987585 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.33:41879] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Dec 07 05:03:21.711685 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.33:41879] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTSaGYJPZ-pZM-y51NHTBQAAAQ8"]
[Sun Dec 07 05:03:23.018993 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.44:51385] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTSaG-6_dquQqQ60IZ-BOQAAAYg"]
[Sun Dec 07 05:03:25.192263 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.20:45571] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aTSaHYJPZ-pZM-y51NHTPwAAARc"]
[Sun Dec 07 05:03:28.864724 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.28:32775] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Dec 07 05:03:29.728018 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.28:32775] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Dec 07 05:03:30.156711 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.28:32775] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTSaIhrSxOOdwv3vX3xBlwAAANY"]
[Sun Dec 07 05:03:31.015145 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.13:51793] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Dec 07 05:03:31.874516 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.13:51793] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aTSaI4JPZ-pZM-y51NHTfgAAARc"]
[Sun Dec 07 05:03:34.034849 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.12:56593] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTSaJhrSxOOdwv3vX3xB3gAAANM"]
[Sun Dec 07 05:03:38.565606 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.51:64427] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Dec 07 05:03:39.852796 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.51:64427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Dec 07 05:03:41.018889 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.51:64427] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Dec 07 05:03:41.450693 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.51:64427] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTSaLYJPZ-pZM-y51NHT_AAAAQ0"]
[Sun Dec 07 05:03:42.303563 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.49:46651] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aTSaLu6_dquQqQ60IZ-B6gAAAZE"]
[Sun Dec 07 05:03:43.172827 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.48:25979] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTSaL4JPZ-pZM-y51NHUDwAAARg"]
[Sun Dec 07 05:03:44.020979 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.51:59949] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTSaMPpR7YTD7JcHjhGAWgAAAVM"]
[Sun Dec 07 05:03:44.870951 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.55:62621] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Dec 07 05:03:45.299058 2025] [:error] [pid 34108:tid 34113] [client 45.146.55.55:62621] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTSaMaLvdvAppF-gXosScwAAAAA"]
[Sun Dec 07 05:03:46.148304 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.14:50623] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTSaMqLvdvAppF-gXosSegAAABQ"]
[Sun Dec 07 05:03:47.003098 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.50:23073] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Dec 07 05:03:47.864857 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.50:23073] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTSaM6LvdvAppF-gXosSiAAAAA4"]
[Sun Dec 07 05:03:48.711919 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.14:29691] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTSaNO6_dquQqQ60IZ-CLQAAAYw"]
[Sun Dec 07 05:03:49.563848 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.43:35685] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTSaNYJPZ-pZM-y51NHUYwAAAQw"]
[Sun Dec 07 05:03:50.415896 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.13:31915] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTSaNoJPZ-pZM-y51NHUcAAAAQw"]
[Sun Dec 07 05:03:54.004018 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.32:39387] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTSaOqLvdvAppF-gXosSrwAAAA4"]
[Sun Dec 07 05:03:55.711394 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.20:22053] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTSaO-6_dquQqQ60IZ-CcwAAAYA"]
[Sun Dec 07 05:03:56.571679 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.30:43879] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Dec 07 05:03:57.889054 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.30:43879] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Dec 07 05:03:58.322929 2025] [:error] [pid 34109:tid 34143] [client 45.146.55.30:43879] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTSaPojE_vucgM_xD4TiiAAAAEM"]
[Sun Dec 07 05:03:59.647715 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.25:48575] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Dec 07 05:04:00.081979 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.25:48575] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Dec 07 05:04:02.308790 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.25:48575] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aTSaQqLvdvAppF-gXosTIAAAAAY"]
[Sun Dec 07 05:04:04.458722 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.37:43519] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTSaRO6_dquQqQ60IZ-CpgAAAZQ"]
[Sun Dec 07 05:04:05.321514 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.51:53821] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTSaRYjE_vucgM_xD4TiyAAAAFI"]
[Sun Dec 07 05:04:07.953217 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.41:41763] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTSaRxrSxOOdwv3vX3xD4wAAAMo"]
[Sun Dec 07 05:04:09.681421 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.13:44087] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Dec 07 05:04:10.116773 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.13:44087] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Dec 07 05:04:10.554102 2025] [:error] [pid 34108:tid 34114] [client 45.146.55.13:44087] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Dec 07 05:04:11.010640 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.13:44087] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Dec 07 05:04:13.199085 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.13:44087] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTSaTaLvdvAppF-gXosTzQAAABA"]
[Sun Dec 07 05:04:14.062997 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.29:61451] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTSaTu6_dquQqQ60IZ-DDgAAAZQ"]
[Sun Dec 07 05:04:14.912936 2025] [:error] [pid 34108:tid 34125] [client 45.146.55.43:46955] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTSaTqLvdvAppF-gXosT6AAAAAw"]
[Sun Dec 07 05:04:15.763196 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.44:54045] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTSaT_pR7YTD7JcHjhGBdgAAAVM"]
[Sun Dec 07 05:04:16.611949 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.26:64305] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTSaUPpR7YTD7JcHjhGBfgAAAUc"]
[Sun Dec 07 05:04:17.474719 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.50:46113] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTSaURrSxOOdwv3vX3xEUAAAANg"]
[Sun Dec 07 05:04:18.778571 2025] [:error] [pid 34195:tid 34210] [client 45.146.55.38:41287] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTSaUhrSxOOdwv3vX3xEbQAAAMw"]
[Sun Dec 07 05:04:19.643814 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.33:65373] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTSaUxrSxOOdwv3vX3xEdAAAAM0"]
[Sun Dec 07 05:04:20.498623 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.56:33637] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTSaVO6_dquQqQ60IZ-DXgAAAYg"]
[Sun Dec 07 05:04:21.349597 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.31:33803] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTSaVYjE_vucgM_xD4TjcwAAAEc"]
[Sun Dec 07 05:04:23.097975 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.59:24749] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTSaV6LvdvAppF-gXosUQgAAABU"]
[Sun Dec 07 05:04:24.431195 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.28:35065] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTSaWIjE_vucgM_xD4TjjAAAAFY"]
[Sun Dec 07 05:04:25.292585 2025] [:error] [pid 34108:tid 34118] [client 45.146.55.53:38495] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Dec 07 05:04:26.178868 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.53:38495] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTSaWqLvdvAppF-gXosUaAAAABg"]
[Sun Dec 07 05:04:27.902346 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.49:46211] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aTSaW6LvdvAppF-gXosUjQAAAAM"]
[Sun Dec 07 05:04:29.630342 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.26:32499] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Dec 07 05:04:30.052953 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.26:32499] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTSaXvpR7YTD7JcHjhGB-wAAAVU"]
[Sun Dec 07 05:04:31.350013 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.43:26559] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Dec 07 05:04:31.787906 2025] [:error] [pid 7273:tid 7287] [client 45.146.55.43:26559] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Dec 07 05:04:32.228176 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.43:26559] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Dec 07 05:04:32.664260 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.43:26559] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTSaYPpR7YTD7JcHjhGCGAAAAVU"]
[Sun Dec 07 05:04:33.524872 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.53:29489] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Dec 07 05:04:33.947998 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.53:29489] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aTSaYRrSxOOdwv3vX3xE-AAAAMc"]
[Sun Dec 07 05:04:35.682260 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Dec 07 05:04:36.119782 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 05:04:36.583233 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Dec 07 05:04:38.786002 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Dec 07 05:04:39.219193 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Dec 07 05:04:40.123495 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Dec 07 05:04:41.435630 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.50:57291] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Dec 07 05:04:41.877023 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.50:57291] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTSaaYJPZ-pZM-y51NHWiQAAAQ0"]
[Sun Dec 07 05:04:42.742979 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.61:50297] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTSaaojE_vucgM_xD4TkRgAAAFU"]
[Sun Dec 07 05:04:43.590023 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.45:55565] [client 45.146.55.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.45, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTSaawndtmtsHiXHBO2FXQAAAJE"]
[Sun Dec 07 05:04:43.598453 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.45:55565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 07 05:04:44.039839 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.45:55565] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Dec 07 05:04:44.470677 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.45:55565] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTSabAndtmtsHiXHBO2FZQAAAII"]
[Sun Dec 07 05:04:45.765666 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.41:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Dec 07 05:04:46.203626 2025] [:error] [pid 7273:tid 7290] [client 45.146.55.41:38017] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTSabvpR7YTD7JcHjhGClAAAAU8"]
[Sun Dec 07 05:04:47.064067 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.32:47125] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTSabxrSxOOdwv3vX3xFegAAANA"]
[Sun Dec 07 05:04:49.670644 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.59:60137] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTSacYJPZ-pZM-y51NHW2QAAARg"]
[Sun Dec 07 05:04:50.527660 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.60:26721] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aTSacqLvdvAppF-gXosVsAAAAA0"]
[Sun Dec 07 05:04:52.681288 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.58:38895] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Dec 07 05:04:53.608756 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.58:38895] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTSade6_dquQqQ60IZ-FSQAAAYU"]
[Sun Dec 07 05:04:55.323259 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.31:27829] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Dec 07 05:04:56.179864 2025] [:error] [pid 7089:tid 7109] [client 45.146.55.31:27829] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aTSaeIJPZ-pZM-y51NHXQQAAARI"]
[Sun Dec 07 05:04:57.031567 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.34:29733] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aTSaefpR7YTD7JcHjhGDEQAAAUk"]
[Sun Dec 07 05:04:58.333207 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.25:29707] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Dec 07 05:04:58.763638 2025] [:error] [pid 7089:tid 7099] [client 45.146.55.25:29707] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTSaeoJPZ-pZM-y51NHXZAAAAQg"]
[Sun Dec 07 05:04:59.611226 2025] [:error] [pid 34110:tid 34170] [client 45.146.55.57:51027] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTSaewndtmtsHiXHBO2GEAAAAIM"]
[Sun Dec 07 05:05:05.195311 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.28:55269] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Dec 07 05:05:05.634733 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.28:55269] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Dec 07 05:05:06.534407 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.28:55269] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Dec 07 05:05:07.412525 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.28:55269] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aTSag_pR7YTD7JcHjhGDhgAAAVM"]
[Sun Dec 07 05:05:08.268155 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.29:60883] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTSahIjE_vucgM_xD4TlVwAAAEI"]
[Sun Dec 07 05:05:09.521714 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 07 05:05:09.952221 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 07 05:05:10.380778 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Dec 07 05:05:10.809218 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Dec 07 05:05:11.243026 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Dec 07 05:05:11.680532 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Dec 07 05:05:12.109343 2025] [:error] [pid 7089:tid 7111] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Dec 07 05:05:12.548718 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 07 05:05:13.446506 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Dec 07 05:05:14.315761 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Dec 07 05:05:14.748939 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Dec 07 05:05:14.951220 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.51:47849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Dec 07 05:05:15.176126 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Dec 07 05:05:15.374783 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.51:47849] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aTSaixrSxOOdwv3vX3xG0AAAAMM"]
[Sun Dec 07 05:05:15.613451 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Dec 07 05:05:16.052759 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Dec 07 05:05:16.226021 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.38:25853] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTSajBrSxOOdwv3vX3xG4QAAAME"]
[Sun Dec 07 05:05:16.480911 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Dec 07 05:05:16.917026 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Dec 07 05:05:17.076787 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.56:37141] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTSajQndtmtsHiXHBO2G1QAAAIg"]
[Sun Dec 07 05:05:17.355448 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Dec 07 05:05:17.791994 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.18:30357] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Dec 07 05:05:19.658959 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.29:55061] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Dec 07 05:05:20.086073 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.29:55061] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTSakBrSxOOdwv3vX3xHFgAAAMA"]
[Sun Dec 07 05:05:21.361101 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.42:22779] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTSakfpR7YTD7JcHjhGEWwAAAVQ"]
[Sun Dec 07 05:05:22.213444 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.18:61509] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Dec 07 05:05:22.653755 2025] [:error] [pid 34110:tid 34185] [client 45.146.55.18:61509] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Dec 07 05:05:23.523126 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.18:61509] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Dec 07 05:05:23.879812 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.18:30357] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTSak4JPZ-pZM-y51NHYgAAAAQE"]
[Sun Dec 07 05:05:25.252979 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.18:61509] [client 45.146.55.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.18, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aTSalQndtmtsHiXHBO2HLgAAAIs"]
[Sun Dec 07 05:05:26.049744 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.58:24617] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTSaloJPZ-pZM-y51NHYmgAAARU"]
[Sun Dec 07 05:05:26.126831 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.18:61509] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Dec 07 05:05:26.553478 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.18:61509] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Dec 07 05:05:26.980526 2025] [:error] [pid 34110:tid 34180] [client 45.146.55.18:61509] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Dec 07 05:05:27.851078 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.18:61509] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTSalwndtmtsHiXHBO2HUgAAAJU"]
[Sun Dec 07 05:05:28.197679 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.38:59381] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Dec 07 05:05:28.716481 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.21:63819] [client 45.146.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.21, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTSamIjE_vucgM_xD4TmTAAAAFQ"]
[Sun Dec 07 05:05:29.546526 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.38:59381] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aTSamYjE_vucgM_xD4TmWwAAAFg"]
[Sun Dec 07 05:05:30.003052 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Dec 07 05:05:30.441227 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Dec 07 05:05:31.267364 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.16:37117] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Dec 07 05:05:31.309974 2025] [:error] [pid 34109:tid 34148] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Dec 07 05:05:31.701519 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.16:37117] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTSamwndtmtsHiXHBO2HjQAAAIU"]
[Sun Dec 07 05:05:32.175687 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Dec 07 05:05:32.996073 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.49:22047] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Dec 07 05:05:33.478746 2025] [:error] [pid 34109:tid 34145] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Dec 07 05:05:35.191809 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.49:22047] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTSan6LvdvAppF-gXosYPAAAAAY"]
[Sun Dec 07 05:05:36.477682 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.23:39511] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTSaoIjE_vucgM_xD4TmvgAAAEc"]
[Sun Dec 07 05:05:36.541789 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Dec 07 05:05:37.026734 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sun Dec 07 05:05:37.398806 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.38:61133] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTSaoRrSxOOdwv3vX3xH7AAAAMM"]
[Sun Dec 07 05:05:38.248330 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.39:64977] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTSaou6_dquQqQ60IZ-H0QAAAYw"]
[Sun Dec 07 05:05:39.101866 2025] [:error] [pid 13234:tid 13259] [client 45.146.55.40:40965] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTSao-6_dquQqQ60IZ-H3gAAAZI"]
[Sun Dec 07 05:05:39.209359 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.21:63819] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Dec 07 05:05:39.959941 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.46:64075] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTSao4jE_vucgM_xD4TnBQAAAFA"]
[Sun Dec 07 05:05:40.075092 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.21:63819] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aTSapIjE_vucgM_xD4TnCwAAAFE"]
[Sun Dec 07 05:05:41.254225 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.48:29225] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTSapQndtmtsHiXHBO2IEAAAAIg"]
[Sun Dec 07 05:05:41.783149 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.19:23429] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Dec 07 05:05:42.103623 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.16:53317] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Dec 07 05:05:42.208981 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.19:23429] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTSapgndtmtsHiXHBO2ILQAAAII"]
[Sun Dec 07 05:05:42.961866 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.16:53317] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aTSapqLvdvAppF-gXosYnQAAAAc"]
[Sun Dec 07 05:05:43.492854 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.34:64365] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Dec 07 05:05:43.916727 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.34:64365] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTSapxrSxOOdwv3vX3xIMwAAAMo"]
[Sun Dec 07 05:05:44.664255 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.17:55277] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTSaqIJPZ-pZM-y51NHZUwAAAQI"]
[Sun Dec 07 05:05:45.646591 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.35:63895] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Dec 07 05:05:45.945799 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.32:60927] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTSaqaLvdvAppF-gXosY0AAAABY"]
[Sun Dec 07 05:05:46.512692 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.35:63895] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Dec 07 05:05:46.800243 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.30:50583] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Dec 07 05:05:47.243847 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.30:50583] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTSaqxrSxOOdwv3vX3xIagAAANA"]
[Sun Dec 07 05:05:47.392299 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.35:63895] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Dec 07 05:05:47.826789 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.35:63895] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Dec 07 05:05:48.100190 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.61:61765] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Dec 07 05:05:48.680625 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.35:63895] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTSarIJPZ-pZM-y51NHZmwAAAQ4"]
[Sun Dec 07 05:05:49.385001 2025] [:error] [pid 34110:tid 34190] [client 45.146.55.61:61765] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Dec 07 05:05:49.583042 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.52:56233] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sun Dec 07 05:05:50.014158 2025] [:error] [pid 34109:tid 34140] [client 45.146.55.52:56233] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Dec 07 05:05:50.438746 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.52:56233] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTSarojE_vucgM_xD4TnqQAAAE8"]
[Sun Dec 07 05:05:50.665377 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.61:61765] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTSargndtmtsHiXHBO2I3gAAAJg"]
[Sun Dec 07 05:05:51.534169 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.39:21459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Dec 07 05:05:51.727458 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.53:53573] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTSar4JPZ-pZM-y51NHZywAAARU"]
[Sun Dec 07 05:05:51.980026 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.39:21459] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTSar4jE_vucgM_xD4TnuQAAAE8"]
[Sun Dec 07 05:05:52.826269 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.29:27949] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Dec 07 05:05:53.025034 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.28:25543] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Dec 07 05:05:53.673721 2025] [:error] [pid 34195:tid 34209] [client 45.146.55.29:27949] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aTSasRrSxOOdwv3vX3xIzAAAAMs"]
[Sun Dec 07 05:05:54.317615 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.28:25543] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Dec 07 05:05:54.753400 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.28:25543] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Dec 07 05:05:54.939707 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.32:29225] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTSasoJPZ-pZM-y51NHZ8gAAAQA"]
[Sun Dec 07 05:05:55.181783 2025] [:error] [pid 13234:tid 13254] [client 45.146.55.28:25543] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTSas-6_dquQqQ60IZ-IrAAAAY0"]
[Sun Dec 07 05:05:56.030739 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.24:26641] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTSatPpR7YTD7JcHjhGGBQAAAUM"]
[Sun Dec 07 05:05:56.227205 2025] [:error] [pid 13234:tid 13254] [client 45.146.55.59:62463] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Dec 07 05:05:56.650730 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.59:62463] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Dec 07 05:05:57.497895 2025] [:error] [pid 13234:tid 13254] [client 45.146.55.59:62463] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTSate6_dquQqQ60IZ-IzgAAAY0"]
[Sun Dec 07 05:05:58.796404 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.61:24569] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTSathrSxOOdwv3vX3xJBgAAANI"]
[Sun Dec 07 05:05:59.050898 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.15:22245] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sun Dec 07 05:05:59.907610 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.15:22245] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTSat6LvdvAppF-gXosZqQAAAA0"]
[Sun Dec 07 05:06:00.068862 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.62:58153] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTSauBrSxOOdwv3vX3xJFwAAAM4"]
[Sun Dec 07 05:06:00.913674 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.13:21985] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTSauAndtmtsHiXHBO2JUAAAAJU"]
[Sun Dec 07 05:06:01.183805 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.42:35929] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aTSauRrSxOOdwv3vX3xJKwAAANA"]
[Sun Dec 07 05:06:01.772772 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.26:27565] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTSauYjE_vucgM_xD4ToagAAAEE"]
[Sun Dec 07 05:06:02.461305 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.18:32411] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Dec 07 05:06:02.897012 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.18:32411] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Dec 07 05:06:03.322252 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.18:32411] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTSauxrSxOOdwv3vX3xJXgAAAMk"]
[Sun Dec 07 05:06:03.503659 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.29:58567] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Dec 07 05:06:03.924480 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.29:58567] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aTSauwndtmtsHiXHBO2JbgAAAI8"]
[Sun Dec 07 05:06:04.597915 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.39:23651] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Dec 07 05:06:04.763950 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.29:39835] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aTSavAndtmtsHiXHBO2JegAAAJU"]
[Sun Dec 07 05:06:05.035251 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.39:23651] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sun Dec 07 05:06:05.607676 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.54:48411] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTSavfpR7YTD7JcHjhGGXAAAAVU"]
[Sun Dec 07 05:06:05.892945 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.39:23651] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Dec 07 05:06:07.190082 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.39:23651] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTSav6LvdvAppF-gXosaGwAAAAQ"]
[Sun Dec 07 05:06:08.064807 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.47:28039] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Dec 07 05:06:08.355293 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.35:39901] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Dec 07 05:06:09.236321 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.35:39901] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Dec 07 05:06:09.345642 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.47:28039] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTSawYJPZ-pZM-y51NHaeAAAAQo"]
[Sun Dec 07 05:06:10.625171 2025] [:error] [pid 13234:tid 13241] [client 45.146.55.42:52413] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sun Dec 07 05:06:10.979845 2025] [:error] [pid 13234:tid 13259] [client 45.146.55.35:39901] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aTSawu6_dquQqQ60IZ-JvQAAAZI"]
[Sun Dec 07 05:06:11.925853 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.42:52413] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sun Dec 07 05:06:12.357174 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.42:52413] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Dec 07 05:06:13.133756 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.45:22607] [client 45.146.55.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.45, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTSaxYJPZ-pZM-y51NHalgAAARM"]
[Sun Dec 07 05:06:13.207915 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.42:52413] [client 45.146.55.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.42, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTSaxe6_dquQqQ60IZ-J3QAAAZY"]
[Sun Dec 07 05:06:13.586589 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.45:22607] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Dec 07 05:06:15.396336 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.42:52413] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTSax-6_dquQqQ60IZ-KBQAAAYY"]
[Sun Dec 07 05:06:15.741337 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.45:22607] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Dec 07 05:06:16.167977 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.45:22607] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Dec 07 05:06:16.261373 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.16:28471] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sun Dec 07 05:06:16.687029 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.16:28471] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTSayO6_dquQqQ60IZ-KEQAAAYs"]
[Sun Dec 07 05:06:17.534597 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.62:64045] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Dec 07 05:06:18.354517 2025] [:error] [pid 7089:tid 7111] [client 45.146.55.45:22607] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTSayoJPZ-pZM-y51NHa1gAAARQ"]
[Sun Dec 07 05:06:18.417632 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.62:64045] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Dec 07 05:06:19.268791 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.62:64045] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTSayxrSxOOdwv3vX3xKJAAAAMY"]
[Sun Dec 07 05:06:19.669477 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.25:60593] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Dec 07 05:06:20.098512 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.25:60593] [client 45.146.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.25, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTSazIJPZ-pZM-y51NHa6AAAARM"]
[Sun Dec 07 05:06:20.550065 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.51:55623] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Dec 07 05:06:20.950258 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.25:60593] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aTSazIJPZ-pZM-y51NHa9QAAARg"]
[Sun Dec 07 05:06:20.978426 2025] [:error] [pid 34195:tid 34210] [client 45.146.55.51:55623] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Dec 07 05:06:21.834043 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.51:55623] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTSazRrSxOOdwv3vX3xKXAAAAMY"]
[Sun Dec 07 05:06:23.148246 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.31:48517] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTSaz-6_dquQqQ60IZ-KXAAAAYs"]
[Sun Dec 07 05:06:23.495492 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.60:37843] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Dec 07 05:06:24.007793 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.56:43621] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sun Dec 07 05:06:24.342918 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.60:37843] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Dec 07 05:06:24.433083 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.56:43621] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Dec 07 05:06:25.203256 2025] [:error] [pid 34109:tid 34153] [client 45.146.55.60:37843] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTSa0YjE_vucgM_xD4TpugAAAE0"]
[Sun Dec 07 05:06:25.299841 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.56:43621] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTSa0RrSxOOdwv3vX3xKiQAAAMc"]
[Sun Dec 07 05:06:26.045087 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.38:51063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Dec 07 05:06:26.148477 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.35:48931] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sun Dec 07 05:06:27.025471 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.35:48931] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sun Dec 07 05:06:27.317610 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.38:51063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Dec 07 05:06:27.447986 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.35:48931] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTSa0_pR7YTD7JcHjhGHpgAAAUc"]
[Sun Dec 07 05:06:28.183071 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.38:51063] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Dec 07 05:06:28.720771 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.49:28159] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aTSa1IjE_vucgM_xD4Tp9QAAAEc"]
[Sun Dec 07 05:06:29.044944 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.38:51063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Dec 07 05:06:29.467737 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.38:51063] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTSa1YjE_vucgM_xD4TqBQAAAEY"]
[Sun Dec 07 05:06:29.563278 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.12:25777] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTSa1fpR7YTD7JcHjhGHwwAAAUI"]
[Sun Dec 07 05:06:30.314457 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.39:63183] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Dec 07 05:06:30.412057 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.11:53129] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTSa1vpR7YTD7JcHjhGHzwAAAUk"]
[Sun Dec 07 05:06:30.854727 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.39:63183] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Dec 07 05:06:31.274467 2025] [:error] [pid 7273:tid 7285] [client 45.146.55.39:63183] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTSa1_pR7YTD7JcHjhGH4gAAAUo"]
[Sun Dec 07 05:06:31.301975 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.19:53409] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTSa16LvdvAppF-gXosbiQAAABQ"]
[Sun Dec 07 05:06:32.148212 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.11:46537] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTSa2O6_dquQqQ60IZ-K1wAAAZM"]
[Sun Dec 07 05:06:32.577488 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.32:56385] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Dec 07 05:06:33.008643 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.25:56253] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTSa2YJPZ-pZM-y51NHbjQAAAQo"]
[Sun Dec 07 05:06:33.444824 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.32:56385] [client 45.146.55.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.32, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aTSa2e6_dquQqQ60IZ-K7wAAAZE"]
[Sun Dec 07 05:06:33.882185 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.32:56385] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTSa2e6_dquQqQ60IZ-K9gAAAZY"]
[Sun Dec 07 05:06:34.709936 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.38:53965] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTSa2qLvdvAppF-gXosbvQAAAAk"]
[Sun Dec 07 05:06:35.564862 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.58:39771] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTSa26LvdvAppF-gXosbwgAAAAI"]
[Sun Dec 07 05:06:36.413770 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.47:44839] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTSa3IjE_vucgM_xD4TqVAAAAE4"]
[Sun Dec 07 05:06:37.686102 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.18:26073] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTSa3e6_dquQqQ60IZ-LHgAAAYw"]
[Sun Dec 07 05:06:39.429675 2025] [:error] [pid 13234:tid 13257] [client 45.146.55.56:32441] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aTSa3-6_dquQqQ60IZ-LNwAAAZA"]
[Sun Dec 07 05:06:40.334152 2025] [:error] [pid 34110:tid 34187] [client 45.146.55.56:27517] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Dec 07 05:06:42.066084 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.56:27517] [client 45.146.55.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.56, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTSa4gndtmtsHiXHBO2LZgAAAJg"]
[Sun Dec 07 05:06:44.664785 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.56:27517] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTSa5AndtmtsHiXHBO2LggAAAJY"]
[Sun Dec 07 05:06:45.315139 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.60:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Dec 07 05:06:45.507422 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.21:46081] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTSa5aLvdvAppF-gXoscPAAAABY"]
[Sun Dec 07 05:06:47.654172 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Dec 07 05:06:47.919168 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.60:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Dec 07 05:06:48.089566 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sun Dec 07 05:06:48.341996 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.60:58389] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTSa6IjE_vucgM_xD4Tq5wAAAEs"]
[Sun Dec 07 05:06:49.190292 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.44:21029] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Dec 07 05:06:49.829254 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Dec 07 05:06:50.263028 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Dec 07 05:06:50.464463 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.44:21029] [client 45.146.55.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.44, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTSa6gndtmtsHiXHBO2LvQAAAIQ"]
[Sun Dec 07 05:06:50.901435 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.44:21029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Dec 07 05:06:51.354601 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.44:21029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Dec 07 05:06:51.784334 2025] [:error] [pid 34110:tid 34187] [client 45.146.55.44:21029] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Dec 07 05:06:52.034143 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Dec 07 05:06:52.215793 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.44:21029] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTSa7AndtmtsHiXHBO2LzAAAAIQ"]
[Sun Dec 07 05:06:52.477686 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Dec 07 05:06:52.919377 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Dec 07 05:06:53.086406 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.23:35715] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Dec 07 05:06:53.360235 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.47:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sun Dec 07 05:06:53.593992 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.23:35715] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aTSa7YJPZ-pZM-y51NHcmwAAAQQ"]
[Sun Dec 07 05:06:53.783972 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.47:49513] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTSa7YJPZ-pZM-y51NHcnQAAARY"]
[Sun Dec 07 05:06:54.684093 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.31:51747] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTSa7vpR7YTD7JcHjhGJKQAAAVI"]
[Sun Dec 07 05:06:54.874084 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.60:59393] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Dec 07 05:06:55.299977 2025] [:error] [pid 7273:tid 7275] [client 45.146.55.60:59393] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTSa7_pR7YTD7JcHjhGJMwAAAUA"]
[Sun Dec 07 05:06:55.527097 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.46:41909] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTSa7_pR7YTD7JcHjhGJOAAAAUg"]
[Sun Dec 07 05:06:56.807323 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.56:50549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Dec 07 05:06:57.003398 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.17:53425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Dec 07 05:06:57.244532 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.56:50549] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sun Dec 07 05:06:57.423119 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.17:53425] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTSa8QndtmtsHiXHBO2MFAAAAJU"]
[Sun Dec 07 05:06:58.110303 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.56:50549] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Dec 07 05:06:58.276189 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.21:24345] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTSa8u6_dquQqQ60IZ-MKAAAAY8"]
[Sun Dec 07 05:06:58.965996 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.56:50549] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTSa8gndtmtsHiXHBO2MJAAAAIs"]
[Sun Dec 07 05:06:59.119291 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.22:50915] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Dec 07 05:06:59.547280 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.22:50915] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Dec 07 05:06:59.809676 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.29:52653] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTSa84JPZ-pZM-y51NHcugAAAQU"]
[Sun Dec 07 05:07:00.664155 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.41:52737] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTSa9KLvdvAppF-gXosdCwAAAAg"]
[Sun Dec 07 05:07:01.299859 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.22:50915] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTSa9YjE_vucgM_xD4TrmQAAAE8"]
[Sun Dec 07 05:07:02.147117 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.28:42355] [client 45.146.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aTSa9u6_dquQqQ60IZ-MaQAAAZE"]
[Sun Dec 07 05:07:03.328112 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.21:48745] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTSa9xrSxOOdwv3vX3xM5gAAANE"]
[Sun Dec 07 05:07:03.435086 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.19:56407] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTSa96LvdvAppF-gXosdIQAAABc"]
[Sun Dec 07 05:07:04.604190 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.11:36963] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTSa-KLvdvAppF-gXosdMQAAABA"]
[Sun Dec 07 05:07:05.588192 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.25:65325] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aTSa-fpR7YTD7JcHjhGJuQAAAVA"]
[Sun Dec 07 05:07:06.297908 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.37:23275] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTSa-oJPZ-pZM-y51NHc-gAAAQQ"]
[Sun Dec 07 05:07:06.437470 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.38:60147] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Dec 07 05:07:07.302802 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.38:60147] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Dec 07 05:07:07.726485 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.38:60147] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTSa-xrSxOOdwv3vX3xNMQAAAMQ"]
[Sun Dec 07 05:07:08.578326 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.52:39841] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Dec 07 05:07:09.433526 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.52:39841] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aTSa_YjE_vucgM_xD4Tr9wAAAEI"]
[Sun Dec 07 05:07:11.570322 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.30:45219] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTSa_xrSxOOdwv3vX3xNkAAAANQ"]
[Sun Dec 07 05:07:11.870899 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.14:56965] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aTSa_4JPZ-pZM-y51NHdOgAAARc"]
[Sun Dec 07 05:07:12.717449 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.46:30845] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sun Dec 07 05:07:12.839988 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.22:38207] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Dec 07 05:07:13.581631 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.46:30845] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aTSbAYJPZ-pZM-y51NHdSwAAAQA"]
[Sun Dec 07 05:07:14.123240 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.22:38207] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Dec 07 05:07:15.009268 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.22:38207] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Dec 07 05:07:15.312110 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.27:30919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Dec 07 05:07:15.430722 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.22:38207] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTSbA6LvdvAppF-gXosdqgAAABA"]
[Sun Dec 07 05:07:16.289437 2025] [:error] [pid 13234:tid 13257] [client 45.146.55.50:57241] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aTSbBO6_dquQqQ60IZ-NRAAAAZA"]
[Sun Dec 07 05:07:16.603466 2025] [:error] [pid 7089:tid 7109] [client 45.146.55.27:30919] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Dec 07 05:07:17.025638 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.27:30919] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTSbBYJPZ-pZM-y51NHddgAAAQ4"]
[Sun Dec 07 05:07:17.149054 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.21:53711] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTSbBe6_dquQqQ60IZ-NUgAAAYw"]
[Sun Dec 07 05:07:17.996674 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.31:50515] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTSbBe6_dquQqQ60IZ-NZAAAAZE"]
[Sun Dec 07 05:07:18.734303 2025] [:error] [pid 34195:tid 34203] [client 45.146.55.15:58541] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTSbBhrSxOOdwv3vX3xOIAAAAMU"]
[Sun Dec 07 05:07:18.865014 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.28:38519] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Dec 07 05:07:19.297081 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.28:38519] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTSbB4jE_vucgM_xD4TsfAAAAFQ"]
[Sun Dec 07 05:07:20.139219 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.45:30715] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTSbCIJPZ-pZM-y51NHdkgAAARY"]
[Sun Dec 07 05:07:20.982697 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.16:38433] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Dec 07 05:07:21.316742 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.41:39661] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTSbCYjE_vucgM_xD4TspAAAAFQ"]
[Sun Dec 07 05:07:21.841386 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.16:38433] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTSbCaLvdvAppF-gXoseAgAAABU"]
[Sun Dec 07 05:07:22.699667 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.59:24983] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTSbCoJPZ-pZM-y51NHdrgAAARA"]
[Sun Dec 07 05:07:23.540521 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.42:44377] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTSbCwndtmtsHiXHBO2NSwAAAIk"]
[Sun Dec 07 05:07:24.376376 2025] [:error] [pid 34109:tid 34143] [client 45.146.55.55:48771] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTSbDIjE_vucgM_xD4Ts1AAAAEM"]
[Sun Dec 07 05:07:24.389729 2025] [:error] [pid 7273:tid 7285] [client 45.146.55.45:36023] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTSbDPpR7YTD7JcHjhGKiQAAAUo"]
[Sun Dec 07 05:07:25.669898 2025] [:error] [pid 7273:tid 7275] [client 45.146.55.25:50675] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Dec 07 05:07:25.689911 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.50:62535] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTSbDQndtmtsHiXHBO2NZAAAAJM"]
[Sun Dec 07 05:07:26.096933 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.25:50675] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTSbDvpR7YTD7JcHjhGKpQAAAUE"]
[Sun Dec 07 05:07:26.939018 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.39:49855] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTSbDgndtmtsHiXHBO2NcAAAAI8"]
[Sun Dec 07 05:07:27.428806 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.21:35825] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTSbD6LvdvAppF-gXoseOQAAABA"]
[Sun Dec 07 05:07:28.273813 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.55:51483] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Dec 07 05:07:29.553371 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.55:51483] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Dec 07 05:07:29.931648 2025] [:error] [pid 34110:tid 34170] [client 45.146.55.19:24365] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTSbEQndtmtsHiXHBO2NmQAAAIM"]
[Sun Dec 07 05:07:29.978600 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.55:51483] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTSbERrSxOOdwv3vX3xOtgAAANQ"]
[Sun Dec 07 05:07:31.267235 2025] [:error] [pid 34109:tid 34145] [client 45.146.55.23:39101] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Dec 07 05:07:31.694200 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.23:39101] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Dec 07 05:07:33.920446 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.23:39101] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aTSbFYjE_vucgM_xD4TtNAAAAE8"]
[Sun Dec 07 05:07:36.130196 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.19:57071] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTSbGIJPZ-pZM-y51NHeNgAAAQo"]
[Sun Dec 07 05:07:36.977697 2025] [:error] [pid 34108:tid 34113] [client 45.146.55.17:54851] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTSbGKLvdvAppF-gXosexAAAAAA"]
[Sun Dec 07 05:07:38.179788 2025] [:error] [pid 34109:tid 34148] [client 45.146.55.43:61733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Dec 07 05:07:39.582535 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.52:21217] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTSbG-6_dquQqQ60IZ-OewAAAZM"]
[Sun Dec 07 05:07:39.911993 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.43:61733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Dec 07 05:07:40.339764 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.43:61733] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTSbHIjE_vucgM_xD4TtiQAAAFU"]
[Sun Dec 07 05:07:41.290732 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.45:36755] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Dec 07 05:07:41.721480 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.45:36755] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Dec 07 05:07:42.099980 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.34:23781] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Dec 07 05:07:42.152092 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.45:36755] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Dec 07 05:07:42.597991 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.45:36755] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Dec 07 05:07:42.971439 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.34:23781] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSbHu6_dquQqQ60IZ-OngAAAYY"]
[Sun Dec 07 05:07:43.825493 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.50:34749] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTSbH-6_dquQqQ60IZ-OpQAAAYI"]
[Sun Dec 07 05:07:45.517640 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.17:38759] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTSbIfpR7YTD7JcHjhGLswAAAU4"]
[Sun Dec 07 05:07:47.434337 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.45:36755] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTSbI6LvdvAppF-gXosfWgAAAA8"]
[Sun Dec 07 05:07:47.658653 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.49:21171] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aTSbIxrSxOOdwv3vX3xP0AAAANE"]
[Sun Dec 07 05:07:48.299996 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.39:38975] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTSbJPpR7YTD7JcHjhGL2AAAAVM"]
[Sun Dec 07 05:07:48.499744 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.61:51273] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTSbJKLvdvAppF-gXosfZQAAAAo"]
[Sun Dec 07 05:07:49.150937 2025] [:error] [pid 34195:tid 34219] [client 45.146.55.18:39527] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTSbJRrSxOOdwv3vX3xP5wAAANU"]
[Sun Dec 07 05:07:49.785229 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.36:47065] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sun Dec 07 05:07:50.007246 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.60:24169] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTSbJhrSxOOdwv3vX3xP-QAAAME"]
[Sun Dec 07 05:07:50.851855 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.18:59787] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTSbJvpR7YTD7JcHjhGL8wAAAUc"]
[Sun Dec 07 05:07:51.698994 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.30:57343] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTSbJxrSxOOdwv3vX3xQEQAAAMM"]
[Sun Dec 07 05:07:51.946754 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.36:47065] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aTSbJwndtmtsHiXHBO2OkAAAAIw"]
[Sun Dec 07 05:07:52.976900 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.39:59051] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTSbKIjE_vucgM_xD4TuOQAAAEk"]
[Sun Dec 07 05:07:53.648178 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.39:52543] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aTSbKRrSxOOdwv3vX3xQNAAAANE"]
[Sun Dec 07 05:07:53.861025 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.51:61631] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTSbKRrSxOOdwv3vX3xQOwAAAMo"]
[Sun Dec 07 05:07:54.502952 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.42:31967] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aTSbKhrSxOOdwv3vX3xQSwAAANc"]
[Sun Dec 07 05:07:54.707015 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.28:34685] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTSbKvpR7YTD7JcHjhGMJwAAAVc"]
[Sun Dec 07 05:07:55.568986 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.21:21699] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTSbK-6_dquQqQ60IZ-PdQAAAYc"]
[Sun Dec 07 05:07:55.775137 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.40:41905] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Dec 07 05:07:56.210305 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.40:41905] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aTSbLO6_dquQqQ60IZ-PiwAAAYg"]
[Sun Dec 07 05:07:57.272212 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.62:24331] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTSbLQndtmtsHiXHBO2OwAAAAIk"]
[Sun Dec 07 05:07:57.484117 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.28:50525] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aTSbLfpR7YTD7JcHjhGMXwAAAUM"]
[Sun Dec 07 05:07:58.548374 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.19:58349] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTSbLojE_vucgM_xD4TubAAAAFI"]
[Sun Dec 07 05:07:59.401125 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.23:32383] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Dec 07 05:08:00.259991 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.23:32383] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTSbMIJPZ-pZM-y51NHflQAAAQc"]
[Sun Dec 07 05:08:00.519085 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.33:38493] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aTSbMAndtmtsHiXHBO2O3wAAAIA"]
[Sun Dec 07 05:08:01.826125 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.62:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sun Dec 07 05:08:01.986895 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.48:42477] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aTSbMaLvdvAppF-gXosgGQAAABM"]
[Sun Dec 07 05:08:02.252579 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.62:41199] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aTSbMoJPZ-pZM-y51NHfsAAAARc"]
[Sun Dec 07 05:08:03.694039 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.38:63359] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Dec 07 05:08:03.970626 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.50:52343] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aTSbM-6_dquQqQ60IZ-QJAAAAYY"]
[Sun Dec 07 05:08:04.114715 2025] [:error] [pid 7089:tid 7099] [client 45.146.55.38:63359] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTSbNIJPZ-pZM-y51NHfxAAAAQg"]
[Sun Dec 07 05:08:05.246000 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.34:54435] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aTSbNQndtmtsHiXHBO2PIQAAAII"]
[Sun Dec 07 05:08:05.392603 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.55:46539] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Dec 07 05:08:05.821417 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.55:46539] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Dec 07 05:08:06.247056 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.55:46539] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Dec 07 05:08:06.517416 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.54:55449] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aTSbNoJPZ-pZM-y51NHf5gAAARU"]
[Sun Dec 07 05:08:06.673159 2025] [:error] [pid 7089:tid 7099] [client 45.146.55.55:46539] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTSbNoJPZ-pZM-y51NHf6gAAAQg"]
[Sun Dec 07 05:08:07.362097 2025] [:error] [pid 34109:tid 34145] [client 45.146.55.57:33753] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aTSbN4jE_vucgM_xD4Tu3QAAAEU"]
[Sun Dec 07 05:08:07.520193 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.62:23105] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Dec 07 05:08:07.945892 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.62:23105] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aTSbN4jE_vucgM_xD4Tu5AAAAE4"]
[Sun Dec 07 05:08:08.210564 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.40:61139] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aTSbOBrSxOOdwv3vX3xRAwAAANY"]
[Sun Dec 07 05:08:09.662139 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Dec 07 05:08:10.094200 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 05:08:10.523402 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Dec 07 05:08:11.665833 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.38:59473] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aTSbO-6_dquQqQ60IZ-QogAAAZQ"]
[Sun Dec 07 05:08:12.689861 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Dec 07 05:08:13.125147 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Dec 07 05:08:13.821323 2025] [:error] [pid 34109:tid 34143] [client 45.146.55.30:54801] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aTSbPYjE_vucgM_xD4TvQAAAAEM"]
[Sun Dec 07 05:08:14.011280 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Dec 07 05:08:15.288670 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.17:25323] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Dec 07 05:08:15.555949 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.46:58317] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Dec 07 05:08:15.729008 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.17:25323] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTSbP-6_dquQqQ60IZ-Q-gAAAY4"]
[Sun Dec 07 05:08:15.988190 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.46:58317] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aTSbP6LvdvAppF-gXosgwgAAAAo"]
[Sun Dec 07 05:08:16.576092 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.31:62057] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTSbQBrSxOOdwv3vX3xRngAAANg"]
[Sun Dec 07 05:08:17.441877 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.16:35485] [client 45.146.55.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.16, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTSbQYJPZ-pZM-y51NHgYQAAAQI"]
[Sun Dec 07 05:08:17.446641 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.16:35485] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 07 05:08:17.884847 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.16:35485] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Dec 07 05:08:18.169993 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.16:39911] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aTSbQqLvdvAppF-gXosg6wAAAAM"]
[Sun Dec 07 05:08:18.307722 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.16:35485] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTSbQoJPZ-pZM-y51NHgdgAAAQU"]
[Sun Dec 07 05:08:19.025535 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.18:34941] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sun Dec 07 05:08:19.595804 2025] [:error] [pid 34110:tid 34183] [client 45.146.55.55:54267] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Dec 07 05:08:20.041873 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.55:54267] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTSbRAndtmtsHiXHBO2P0QAAAIo"]
[Sun Dec 07 05:08:20.881868 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.41:38883] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTSbRO6_dquQqQ60IZ-RPwAAAZE"]
[Sun Dec 07 05:08:21.617970 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.18:34941] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aTSbRYJPZ-pZM-y51NHgsQAAAQc"]
[Sun Dec 07 05:08:22.899734 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.43:34309] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aTSbRojE_vucgM_xD4TvqQAAAEw"]
[Sun Dec 07 05:08:23.494251 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.34:63297] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTSbR4jE_vucgM_xD4TvsQAAAEo"]
[Sun Dec 07 05:08:24.167245 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.52:34823] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aTSbSIJPZ-pZM-y51NHg1gAAAQI"]
[Sun Dec 07 05:08:24.337435 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.26:21191] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aTSbSO6_dquQqQ60IZ-RhAAAAYQ"]
[Sun Dec 07 05:08:25.871383 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.44:40839] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aTSbSRrSxOOdwv3vX3xR_QAAAMA"]
[Sun Dec 07 05:08:26.467829 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.61:27559] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Dec 07 05:08:27.315120 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.61:27559] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTSbS4jE_vucgM_xD4Tv5gAAAFY"]
[Sun Dec 07 05:08:29.041033 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.57:25243] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Dec 07 05:08:29.890840 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.57:25243] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aTSbTaLvdvAppF-gXoshmwAAABU"]
[Sun Dec 07 05:08:30.186801 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.34:49253] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aTSbTojE_vucgM_xD4TwEwAAAEk"]
[Sun Dec 07 05:08:30.731659 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.60:60311] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aTSbTvpR7YTD7JcHjhGOUgAAAUs"]
[Sun Dec 07 05:08:31.034360 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.18:23999] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aTSbT4jE_vucgM_xD4TwJgAAAEs"]
[Sun Dec 07 05:08:32.008124 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.18:36217] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Dec 07 05:08:32.433538 2025] [:error] [pid 7273:tid 7299] [client 45.146.55.18:36217] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTSbUPpR7YTD7JcHjhGOZQAAAVg"]
[Sun Dec 07 05:08:33.213698 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.57:54361] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aTSbURrSxOOdwv3vX3xSewAAANE"]
[Sun Dec 07 05:08:33.277195 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.28:55951] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTSbUQndtmtsHiXHBO2QbAAAAIY"]
[Sun Dec 07 05:08:34.065054 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.12:57227] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSbUu6_dquQqQ60IZ-SNgAAAY8"]
[Sun Dec 07 05:08:35.076884 2025] [:error] [pid 13234:tid 13241] [client 45.146.55.49:43609] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Dec 07 05:08:35.503676 2025] [:error] [pid 13234:tid 13257] [client 45.146.55.49:43609] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Dec 07 05:08:35.764959 2025] [:error] [pid 34110:tid 34187] [client 45.146.55.39:65297] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aTSbUwndtmtsHiXHBO2QhgAAAJQ"]
[Sun Dec 07 05:08:36.364806 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.49:43609] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Dec 07 05:08:36.610374 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.20:58655] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aTSbVAndtmtsHiXHBO2QjwAAAJY"]
[Sun Dec 07 05:08:37.223935 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.49:43609] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aTSbVe6_dquQqQ60IZ-SgAAAAYg"]
[Sun Dec 07 05:08:37.465941 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.49:40985] [client 45.146.55.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.49, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTSbVYJPZ-pZM-y51NHhagAAARU"]
[Sun Dec 07 05:08:37.468865 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.49:40985] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Dec 07 05:08:37.917907 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.49:40985] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aTSbVYJPZ-pZM-y51NHhbwAAAQM"]
[Sun Dec 07 05:08:38.089064 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.19:49665] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTSbVu6_dquQqQ60IZ-SiwAAAYc"]
[Sun Dec 07 05:08:39.640625 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.12:29913] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Dec 07 05:08:40.067472 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.12:29913] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTSbWPpR7YTD7JcHjhGOvwAAAUM"]
[Sun Dec 07 05:08:40.270259 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.31:23721] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Dec 07 05:08:40.726207 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.31:23721] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aTSbWO6_dquQqQ60IZ-SswAAAZY"]
[Sun Dec 07 05:08:40.926711 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.37:49161] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aTSbWPpR7YTD7JcHjhGOywAAAUs"]
[Sun Dec 07 05:08:41.570640 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.47:40173] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTSbWfpR7YTD7JcHjhGO1AAAAVA"]
[Sun Dec 07 05:08:41.790600 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.12:30575] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sun Dec 07 05:08:42.418009 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.47:23071] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTSbWoJPZ-pZM-y51NHhsAAAAQQ"]
[Sun Dec 07 05:08:44.848057 2025] [:error] [pid 34110:tid 34190] [client 45.146.55.12:30575] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aTSbXAndtmtsHiXHBO2RBwAAAJc"]
[Sun Dec 07 05:08:45.013475 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.51:33497] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Dec 07 05:08:45.439241 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.51:33497] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTSbXYjE_vucgM_xD4Tw1gAAAFE"]
[Sun Dec 07 05:08:46.718747 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.39:43881] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTSbXqLvdvAppF-gXosiZgAAABA"]
[Sun Dec 07 05:08:47.594983 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.23:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Dec 07 05:08:48.056197 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.23:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Dec 07 05:08:48.948339 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.23:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Dec 07 05:08:50.472074 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.53:58485] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aTSbYoJPZ-pZM-y51NHiDwAAAQk"]
[Sun Dec 07 05:08:50.687047 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.23:54471] [client 45.146.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.23, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aTSbYu6_dquQqQ60IZ-TZgAAAZY"]
[Sun Dec 07 05:08:51.583884 2025] [:error] [pid 13234:tid 13254] [client 45.146.55.23:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Dec 07 05:08:52.016448 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.23:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Dec 07 05:08:52.217394 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.46:27465] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aTSbZPpR7YTD7JcHjhGPgwAAAUY"]
[Sun Dec 07 05:08:52.448396 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.23:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Dec 07 05:08:53.063066 2025] [:error] [pid 34110:tid 34168] [client 45.146.55.39:57227] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aTSbZQndtmtsHiXHBO2RegAAAIE"]
[Sun Dec 07 05:08:53.296137 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.23:54471] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTSbZe6_dquQqQ60IZ-TlQAAAY4"]
[Sun Dec 07 05:08:53.911075 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.26:44539] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Dec 07 05:08:54.137350 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.25:39027] [client 45.146.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.25, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTSbZu6_dquQqQ60IZ-TogAAAZY"]
[Sun Dec 07 05:08:54.349151 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.26:44539] [client 45.146.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.26, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aTSbZqLvdvAppF-gXosiyQAAAAo"]
[Sun Dec 07 05:08:55.242308 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.26:44539] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aTSbZ6LvdvAppF-gXosi0gAAAAI"]
[Sun Dec 07 05:08:55.445345 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Dec 07 05:08:55.869045 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Dec 07 05:08:57.896349 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.33:22487] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aTSbafpR7YTD7JcHjhGPyQAAAVM"]
[Sun Dec 07 05:08:58.752376 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.12:36999] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Dec 07 05:08:59.184668 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.12:36999] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aTSba6LvdvAppF-gXosi_AAAABI"]
[Sun Dec 07 05:09:00.034310 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.48:65085] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aTSbbBrSxOOdwv3vX3xToAAAAMQ"]
[Sun Dec 07 05:09:00.931853 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.47:20439] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Dec 07 05:09:02.266985 2025] [:error] [pid 34108:tid 34124] [client 45.146.55.47:20439] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTSbbqLvdvAppF-gXosjHQAAAAs"]
[Sun Dec 07 05:09:02.718558 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Dec 07 05:09:03.609517 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Dec 07 05:09:03.986925 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.62:27221] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTSbbxrSxOOdwv3vX3xTwAAAANA"]
[Sun Dec 07 05:09:04.842724 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.46:26565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Dec 07 05:09:04.919656 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Dec 07 05:09:05.730261 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.46:26565] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Dec 07 05:09:06.599404 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.46:26565] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aTSbcqLvdvAppF-gXosjSQAAABM"]
[Sun Dec 07 05:09:07.440343 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.23:35287] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aTSbcxrSxOOdwv3vX3xT-gAAANE"]
[Sun Dec 07 05:09:08.109092 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Dec 07 05:09:08.553496 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sun Dec 07 05:09:08.717622 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.15:20261] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aTSbdBrSxOOdwv3vX3xUDAAAANY"]
[Sun Dec 07 05:09:09.573015 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.47:31269] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Sun Dec 07 05:09:10.753627 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.25:39027] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Dec 07 05:09:11.608401 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.25:39027] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aTSbd-6_dquQqQ60IZ-VFgAAAYk"]
[Sun Dec 07 05:09:12.191683 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.47:31269] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aTSbeIJPZ-pZM-y51NHjIwAAAQc"]
[Sun Dec 07 05:09:13.302644 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.11:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Dec 07 05:09:13.723676 2025] [:error] [pid 34110:tid 34180] [client 45.146.55.11:59923] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTSbeQndtmtsHiXHBO2ScAAAAI0"]
[Sun Dec 07 05:09:13.896204 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.24:53105] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aTSbeRrSxOOdwv3vX3xUTgAAAME"]
[Sun Dec 07 05:09:14.330068 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.24:53105] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aTSbehrSxOOdwv3vX3xUUgAAAM0"]
[Sun Dec 07 05:09:16.069912 2025] [:error] [pid 7089:tid 7111] [client 45.146.55.21:43767] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aTSbfIJPZ-pZM-y51NHjbAAAARQ"]
[Sun Dec 07 05:09:16.909872 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.16:59697] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aTSbfPpR7YTD7JcHjhGQywAAAUY"]
[Sun Dec 07 05:09:18.606902 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.25:28353] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Dec 07 05:09:20.340656 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.26:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Dec 07 05:09:20.376614 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.25:28353] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aTSbgKLvdvAppF-gXoskNAAAAAc"]
[Sun Dec 07 05:09:20.760331 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.26:58001] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTSbgO6_dquQqQ60IZ-VpQAAAYc"]
[Sun Dec 07 05:09:22.481953 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.53:47163] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Dec 07 05:09:23.384011 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.53:47163] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Dec 07 05:09:24.256015 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.53:47163] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Dec 07 05:09:24.702821 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.53:47163] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Dec 07 05:09:25.554985 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.53:47163] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTSbhaLvdvAppF-gXoskcQAAABc"]
[Sun Dec 07 05:09:26.442872 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.61:46197] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sun Dec 07 05:09:26.891126 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.61:46197] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Dec 07 05:09:27.332378 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.61:46197] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTSbhxrSxOOdwv3vX3xVAwAAAMM"]
[Sun Dec 07 05:09:28.467189 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.16:36297] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aTSbiPpR7YTD7JcHjhGRbwAAAVI"]
[Sun Dec 07 05:09:28.602032 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.35:49643] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTSbiO6_dquQqQ60IZ-WGgAAAYQ"]
[Sun Dec 07 05:09:29.790409 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.49:57277] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aTSbiYjE_vucgM_xD4TzMgAAAEI"]
[Sun Dec 07 05:09:29.923922 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.28:22855] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Dec 07 05:09:30.670879 2025] [:error] [pid 34110:tid 34190] [client 45.146.55.55:49943] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sun Dec 07 05:09:31.264192 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.28:22855] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Dec 07 05:09:31.694018 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.28:22855] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Dec 07 05:09:32.130971 2025] [:error] [pid 7273:tid 7285] [client 45.146.55.28:22855] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTSbjPpR7YTD7JcHjhGRnAAAAUo"]
[Sun Dec 07 05:09:32.870982 2025] [:error] [pid 34110:tid 34190] [client 45.146.55.55:49943] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aTSbjAndtmtsHiXHBO2TWQAAAJc"]
[Sun Dec 07 05:09:32.978973 2025] [:error] [pid 13234:tid 13241] [client 45.146.55.41:51975] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTSbjO6_dquQqQ60IZ-WWAAAAYE"]
[Sun Dec 07 05:09:34.147670 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.35:49421] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aTSbjgndtmtsHiXHBO2TZwAAAIc"]
[Sun Dec 07 05:09:34.995442 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.57:32233] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Dec 07 05:09:35.422068 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.57:32233] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aTSbj_pR7YTD7JcHjhGR2wAAAVI"]
[Sun Dec 07 05:09:36.102118 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.54:30367] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sun Dec 07 05:09:36.263632 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.41:21995] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aTSbkIjE_vucgM_xD4TzjgAAAE8"]
[Sun Dec 07 05:09:36.963677 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.54:30367] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTSbkPpR7YTD7JcHjhGR_QAAAU4"]
[Sun Dec 07 05:09:38.131995 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.30:50001] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aTSbku6_dquQqQ60IZ-WuwAAAZc"]
[Sun Dec 07 05:09:38.313740 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.22:46835] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aTSbkhrSxOOdwv3vX3xVvQAAAME"]
[Sun Dec 07 05:09:39.590887 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.40:52311] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Dec 07 05:09:40.026250 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.40:52311] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Dec 07 05:09:40.294419 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.34:39343] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Sun Dec 07 05:09:40.449035 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.40:52311] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTSblO6_dquQqQ60IZ-W3QAAAZY"]
[Sun Dec 07 05:09:40.715384 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.34:39343] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aTSblO6_dquQqQ60IZ-W4QAAAZc"]
[Sun Dec 07 05:09:41.738260 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.55:61205] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Dec 07 05:09:42.178200 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.55:61205] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sun Dec 07 05:09:43.052382 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.55:61205] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Dec 07 05:09:44.351249 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.55:61205] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTSbmIJPZ-pZM-y51NHkvgAAARc"]
[Sun Dec 07 05:09:45.227284 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.30:27327] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Dec 07 05:09:46.519876 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.30:27327] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTSbmu6_dquQqQ60IZ-XTAAAAYA"]
[Sun Dec 07 05:09:47.794414 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.32:62105] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sun Dec 07 05:09:48.483991 2025] [:error] [pid 34110:tid 34190] [client 45.146.55.49:46019] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aTSbnAndtmtsHiXHBO2ULAAAAJc"]
[Sun Dec 07 05:09:49.083828 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.32:62105] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sun Dec 07 05:09:49.507661 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.32:62105] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Dec 07 05:09:50.373872 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.32:62105] [client 45.146.55.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.32, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTSbnu6_dquQqQ60IZ-XoAAAAYI"]
[Sun Dec 07 05:09:51.583052 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.48:61815] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aTSbn6LvdvAppF-gXosllwAAABM"]
[Sun Dec 07 05:09:52.556768 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.32:62105] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTSboO6_dquQqQ60IZ-X1gAAAZM"]
[Sun Dec 07 05:09:53.304824 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.23:36569] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aTSboaLvdvAppF-gXoslqAAAABI"]
[Sun Dec 07 05:09:53.416692 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.22:61003] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sun Dec 07 05:09:53.842565 2025] [:error] [pid 7273:tid 7275] [client 45.146.55.22:61003] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTSbofpR7YTD7JcHjhGSwwAAAUA"]
[Sun Dec 07 05:09:54.149576 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.16:39837] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Sun Dec 07 05:09:54.717279 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.26:24845] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Dec 07 05:09:55.446909 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.16:39837] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTSbo-6_dquQqQ60IZ-YHwAAAZY"]
[Sun Dec 07 05:09:55.607785 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.26:24845] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Dec 07 05:09:56.291965 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.61:57455] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aTSbpKLvdvAppF-gXoslyAAAAAo"]
[Sun Dec 07 05:09:56.462762 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.26:24845] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTSbpIjE_vucgM_xD4T05AAAAEE"]
[Sun Dec 07 05:09:57.567802 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.57:41647] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aTSbpRrSxOOdwv3vX3xWmQAAANE"]
[Sun Dec 07 05:09:57.775309 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.32:26905] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Dec 07 05:09:58.200464 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.32:26905] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Dec 07 05:09:58.419196 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.26:59557] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sun Dec 07 05:09:59.071718 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.32:26905] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTSbp6LvdvAppF-gXosl8wAAAAI"]
[Sun Dec 07 05:10:00.349133 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.51:46145] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTSbqIJPZ-pZM-y51NHlTwAAAQ0"]
[Sun Dec 07 05:10:01.271906 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.48:32761] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sun Dec 07 05:10:01.709113 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.48:32761] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Dec 07 05:10:02.598804 2025] [:error] [pid 34108:tid 34113] [client 45.146.55.48:32761] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTSbqqLvdvAppF-gXosmIAAAAAA"]
[Sun Dec 07 05:10:03.444724 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.17:21621] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sun Dec 07 05:10:04.348641 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.17:21621] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sun Dec 07 05:10:04.791020 2025] [:error] [pid 34108:tid 34118] [client 45.146.55.17:21621] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTSbrKLvdvAppF-gXosmQwAAAAU"]
[Sun Dec 07 05:10:06.084115 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.39:52587] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aTSbroJPZ-pZM-y51NHlhQAAAQQ"]
[Sun Dec 07 05:10:06.494696 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.26:59557] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aTSbrqLvdvAppF-gXosmUgAAABA"]
[Sun Dec 07 05:10:06.967568 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.46:45987] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTSbroJPZ-pZM-y51NHliQAAAQc"]
[Sun Dec 07 05:10:07.368044 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.11:51397] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sun Dec 07 05:10:07.824387 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.39:62665] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTSbr4JPZ-pZM-y51NHlkAAAAQs"]
[Sun Dec 07 05:10:08.227114 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.11:51397] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aTSbsBrSxOOdwv3vX3xXGgAAANc"]
[Sun Dec 07 05:10:08.674601 2025] [:error] [pid 34108:tid 34125] [client 45.146.55.40:34695] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTSbsKLvdvAppF-gXosmcQAAAAw"]
[Sun Dec 07 05:10:09.072608 2025] [:error] [pid 7273:tid 7287] [client 45.146.55.49:21007] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aTSbsfpR7YTD7JcHjhGTvwAAAUw"]
[Sun Dec 07 05:10:09.524748 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.14:52429] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTSbsRrSxOOdwv3vX3xXJAAAANI"]
[Sun Dec 07 05:10:10.384894 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.37:42247] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTSbshrSxOOdwv3vX3xXKQAAAM4"]
[Sun Dec 07 05:10:10.385925 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.11:25997] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aTSbsvpR7YTD7JcHjhGT3AAAAUk"]
[Sun Dec 07 05:10:11.282018 2025] [:error] [pid 7089:tid 7109] [client 45.146.55.18:22247] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aTSbs4JPZ-pZM-y51NHltwAAARI"]
[Sun Dec 07 05:10:12.143447 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.13:34147] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTSbtIJPZ-pZM-y51NHlxAAAAQ0"]
[Sun Dec 07 05:10:12.990092 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.35:58013] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aTSbtPpR7YTD7JcHjhGUCwAAAUI"]
[Sun Dec 07 05:10:13.030213 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.26:62649] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTSbte6_dquQqQ60IZ-ZFwAAAZc"]
[Sun Dec 07 05:10:13.885769 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.47:36781] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTSbte6_dquQqQ60IZ-ZIAAAAZY"]
[Sun Dec 07 05:10:14.273658 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.51:50703] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aTSbtvpR7YTD7JcHjhGUGQAAAVM"]
[Sun Dec 07 05:10:15.115935 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.14:61295] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTSbt6LvdvAppF-gXosmvwAAABA"]
[Sun Dec 07 05:10:15.178998 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.35:20121] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTSbt-6_dquQqQ60IZ-ZMgAAAYs"]
[Sun Dec 07 05:10:15.964608 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.52:47673] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aTSbt6LvdvAppF-gXosmyQAAAAk"]
[Sun Dec 07 05:10:16.920613 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.27:22681] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aTSbuAndtmtsHiXHBO2VwAAAAJY"]
[Sun Dec 07 05:10:17.784196 2025] [:error] [pid 7273:tid 7290] [client 45.146.55.59:37467] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Dec 07 05:10:18.128645 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.54:27077] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aTSbuvpR7YTD7JcHjhGUWQAAAUk"]
[Sun Dec 07 05:10:19.548728 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.59:37467] [client 45.146.55.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.59, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTSbu_pR7YTD7JcHjhGUcwAAAUM"]
[Sun Dec 07 05:10:19.919115 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.59:46695] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aTSbu-6_dquQqQ60IZ-ZkAAAAY8"]
[Sun Dec 07 05:10:21.226410 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.27:21539] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aTSbvaLvdvAppF-gXosm-AAAAAQ"]
[Sun Dec 07 05:10:22.526047 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.13:28625] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTSbvu6_dquQqQ60IZ-ZygAAAZM"]
[Sun Dec 07 05:10:24.736207 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.31:29119] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sun Dec 07 05:10:26.461779 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.31:29119] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aTSbwu6_dquQqQ60IZ-aEwAAAYw"]
[Sun Dec 07 05:10:27.324987 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.55:20917] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aTSbw4jE_vucgM_xD4T2LQAAAEw"]
[Sun Dec 07 05:10:28.649056 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.31:30075] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sun Dec 07 05:10:29.069459 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.59:37467] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTSbxfpR7YTD7JcHjhGVBAAAAU4"]
[Sun Dec 07 05:10:29.921532 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.12:35771] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTSbxYJPZ-pZM-y51NHmewAAAQk"]
[Sun Dec 07 05:10:32.096468 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Dec 07 05:10:32.522889 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sun Dec 07 05:10:34.256228 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.31:30075] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aTSbyojE_vucgM_xD4T2ngAAAFA"]
[Sun Dec 07 05:10:34.264265 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Dec 07 05:10:34.704222 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Dec 07 05:10:36.418355 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Dec 07 05:10:36.823696 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.51:23039] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aTSbzAndtmtsHiXHBO2W0wAAAIA"]
[Sun Dec 07 05:10:36.848329 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Dec 07 05:10:37.272242 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Dec 07 05:10:37.704254 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.44:51287] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sun Dec 07 05:10:38.126638 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.44:51287] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTSbzvpR7YTD7JcHjhGVggAAAVU"]
[Sun Dec 07 05:10:38.161249 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.47:35385] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Sun Dec 07 05:10:38.588015 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.47:35385] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aTSbzojE_vucgM_xD4T2_wAAAEo"]
[Sun Dec 07 05:10:38.986029 2025] [:error] [pid 7273:tid 7279] [client 45.146.55.39:65325] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTSbzvpR7YTD7JcHjhGVjAAAAUQ"]
[Sun Dec 07 05:10:39.827741 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.25:54329] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTSbz_pR7YTD7JcHjhGVlgAAAU0"]
[Sun Dec 07 05:10:40.325777 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.32:63787] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aTSb0AndtmtsHiXHBO2XFwAAAIU"]
[Sun Dec 07 05:10:41.133501 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.54:54497] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Dec 07 05:10:41.222820 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.54:47493] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Dec 07 05:10:41.596856 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.54:54497] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sun Dec 07 05:10:41.650954 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.54:47493] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aTSb0YJPZ-pZM-y51NHnEQAAARM"]
[Sun Dec 07 05:10:42.466033 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.54:54497] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Dec 07 05:10:42.926567 2025] [:error] [pid 7089:tid 7109] [client 45.146.55.18:54121] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aTSb0oJPZ-pZM-y51NHnIAAAARI"]
[Sun Dec 07 05:10:43.324685 2025] [:error] [pid 7273:tid 7275] [client 45.146.55.54:54497] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTSb0_pR7YTD7JcHjhGV0QAAAUA"]
[Sun Dec 07 05:10:44.176019 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.29:47743] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTSb1IJPZ-pZM-y51NHnMwAAARU"]
[Sun Dec 07 05:10:45.030708 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.21:25239] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTSb1YjE_vucgM_xD4T3VgAAAE8"]
[Sun Dec 07 05:10:45.108872 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.30:60631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Dec 07 05:10:45.538930 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.30:60631] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTSb1fpR7YTD7JcHjhGV-wAAAUs"]
[Sun Dec 07 05:10:47.611543 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.48:39039] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTSb16LvdvAppF-gXosoZQAAABY"]
[Sun Dec 07 05:10:47.764064 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.17:23951] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aTSb1xrSxOOdwv3vX3xZDwAAANA"]
[Sun Dec 07 05:10:48.614477 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.47:34873] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Dec 07 05:10:48.881152 2025] [:error] [pid 34110:tid 34183] [client 45.146.55.26:43321] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTSb2AndtmtsHiXHBO2XiwAAAJA"]
[Sun Dec 07 05:10:49.046963 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.47:34873] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aTSb2YjE_vucgM_xD4T3lwAAAEY"]
[Sun Dec 07 05:10:49.920565 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.19:44629] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aTSb2YjE_vucgM_xD4T3pwAAAEE"]
[Sun Dec 07 05:10:50.635826 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.34:50407] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTSb2hrSxOOdwv3vX3xZMgAAAMc"]
[Sun Dec 07 05:10:50.769011 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.28:22711] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sun Dec 07 05:10:51.633714 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.28:22711] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aTSb2-6_dquQqQ60IZ-b5gAAAYY"]
[Sun Dec 07 05:10:52.479033 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.43:37747] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aTSb3IjE_vucgM_xD4T3uAAAAFU"]
[Sun Dec 07 05:10:56.087287 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.58:64047] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aTSb4BrSxOOdwv3vX3xZbwAAAMo"]
[Sun Dec 07 05:10:56.355565 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.58:32481] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aTSb4AndtmtsHiXHBO2X2gAAAIw"]
[Sun Dec 07 05:10:56.944991 2025] [:error] [pid 34108:tid 34113] [client 45.146.55.33:59457] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aTSb4KLvdvAppF-gXoso5AAAAAA"]
[Sun Dec 07 05:10:57.197400 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.27:27929] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sun Dec 07 05:10:58.072672 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.27:27929] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aTSb4gndtmtsHiXHBO2X8wAAAIg"]
[Sun Dec 07 05:10:58.254845 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.16:60435] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aTSb4vpR7YTD7JcHjhGW6QAAAVQ"]
[Sun Dec 07 05:10:59.094740 2025] [:error] [pid 34108:tid 34118] [client 45.146.55.45:51643] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aTSb46LvdvAppF-gXospCQAAAAU"]
[Sun Dec 07 05:10:59.810943 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.12:36921] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Dec 07 05:10:59.956933 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.44:29999] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aTSb46LvdvAppF-gXospIQAAABI"]
[Sun Dec 07 05:11:00.805865 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.17:48581] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aTSb5IJPZ-pZM-y51NHn5QAAAQ8"]
[Sun Dec 07 05:11:01.137974 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.12:36921] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Dec 07 05:11:01.594014 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.12:36921] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTSb5aLvdvAppF-gXospPgAAAA8"]
[Sun Dec 07 05:11:03.412380 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.58:64567] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTSb5-6_dquQqQ60IZ-c_AAAAZE"]
[Sun Dec 07 05:11:03.435301 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.59:54027] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aTSb54jE_vucgM_xD4T4EQAAAFg"]
[Sun Dec 07 05:11:04.294935 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.28:36187] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aTSb6O6_dquQqQ60IZ-dEAAAAZc"]
[Sun Dec 07 05:11:05.566087 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.15:22955] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Sun Dec 07 05:11:05.999845 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.15:22955] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aTSb6e6_dquQqQ60IZ-dLwAAAZM"]
[Sun Dec 07 05:11:06.007029 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.58:24069] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTSb6RrSxOOdwv3vX3xZ2AAAAMQ"]
[Sun Dec 07 05:11:06.849745 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.33:45453] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aTSb6hrSxOOdwv3vX3xZ6AAAANg"]
[Sun Dec 07 05:11:08.594187 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.24:47351] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aTSb7BrSxOOdwv3vX3xZ_wAAANQ"]
[Sun Dec 07 05:11:09.045727 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.33:23511] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTSb7e6_dquQqQ60IZ-dfQAAAY8"]
[Sun Dec 07 05:11:09.444084 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.33:32903] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aTSb7YjE_vucgM_xD4T4TgAAAFE"]
[Sun Dec 07 05:11:10.356480 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.14:47523] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Dec 07 05:11:10.787721 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.14:47523] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTSb7vpR7YTD7JcHjhGX7gAAAUE"]
[Sun Dec 07 05:11:11.639809 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.13:36491] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTSb7-6_dquQqQ60IZ-dtQAAAYQ"]
[Sun Dec 07 05:11:13.313334 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.19:54433] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aTSb8RrSxOOdwv3vX3xaTAAAAME"]
[Sun Dec 07 05:11:14.191475 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.58:49023] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aTSb8qLvdvAppF-gXosp-AAAAAQ"]
[Sun Dec 07 05:11:14.677712 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.57:21507] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTSb8u6_dquQqQ60IZ-eEQAAAZc"]
[Sun Dec 07 05:11:15.532322 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.17:61947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Dec 07 05:11:15.924098 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.23:51709] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aTSb8_pR7YTD7JcHjhGYNwAAAUs"]
[Sun Dec 07 05:11:17.213954 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.58:24493] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aTSb9YjE_vucgM_xD4T4pQAAAFA"]
[Sun Dec 07 05:11:17.274483 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.17:61947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Dec 07 05:11:17.708943 2025] [:error] [pid 34195:tid 34203] [client 45.146.55.17:61947] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTSb9RrSxOOdwv3vX3xaggAAAMU"]
[Sun Dec 07 05:11:19.435194 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.44:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Dec 07 05:11:20.292579 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.44:27021] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSb-O6_dquQqQ60IZ-eiwAAAYk"]
[Sun Dec 07 05:11:21.262948 2025] [:error] [pid 34110:tid 34170] [client 45.146.55.35:45039] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTSb-QndtmtsHiXHBO2Y8AAAAIM"]
[Sun Dec 07 05:11:23.825810 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.22:30865] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aTSb-wndtmtsHiXHBO2ZCgAAAJU"]
[Sun Dec 07 05:11:24.676057 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.24:49079] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aTSb_O6_dquQqQ60IZ-e6AAAAYA"]
[Sun Dec 07 05:11:25.522703 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.60:42189] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aTSb_e6_dquQqQ60IZ-fCAAAAZc"]
[Sun Dec 07 05:11:27.680195 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.56:51337] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aTSb_6LvdvAppF-gXosqpAAAAAg"]
[Sun Dec 07 05:11:37.687006 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.31:21949] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sun Dec 07 05:12:43.391797 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.61:30093] [client 45.146.55.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aTScS6LvdvAppF-gXosucAAAABc"]
[Sun Dec 07 05:51:12.229820 2025] [:error] [pid 13234:tid 13252] [client 136.144.43.226:30393] [client 136.144.43.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.226, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTSlUO6_dquQqQ60IZ-91AAAAYs"]
[Sun Dec 07 05:51:12.233700 2025] [:error] [pid 13234:tid 13252] [client 136.144.43.226:30393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 07 05:58:29.784730 2025] [:error] [pid 34108:tid 34124] [client 223.244.35.77:35727] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTSnBaLvdvAppF-gXotITwAAAAs"]
[Sun Dec 07 06:21:26.168043 2025] [:error] [pid 34109:tid 34143] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.fr/
[Sun Dec 07 06:21:26.473674 2025] [:error] [pid 34109:tid 34145] [client 4.217.237.240:24209] [client 4.217.237.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.237.240, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTSsZojE_vucgM_xD4QYtQAAAEU"], referer: https://www.google.com/
[Sun Dec 07 06:21:26.477905 2025] [:error] [pid 34109:tid 34145] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.com/
[Sun Dec 07 06:21:26.974366 2025] [:error] [pid 34109:tid 34163] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.co.uk/
[Sun Dec 07 06:21:27.134177 2025] [:error] [pid 34109:tid 34142] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.com/
[Sun Dec 07 06:21:27.386625 2025] [:error] [pid 34109:tid 34159] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Sun Dec 07 06:21:27.689686 2025] [:error] [pid 34109:tid 34149] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.co.uk/
[Sun Dec 07 06:21:28.050932 2025] [:error] [pid 34109:tid 34146] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Sun Dec 07 06:21:28.202870 2025] [:error] [pid 34109:tid 34154] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.fr/
[Sun Dec 07 06:21:28.388194 2025] [:error] [pid 34109:tid 34157] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.fr/
[Sun Dec 07 06:21:28.546448 2025] [:error] [pid 34109:tid 34152] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://duckduckgo.com/
[Sun Dec 07 06:21:28.850597 2025] [:error] [pid 34109:tid 34151] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.de/
[Sun Dec 07 06:21:29.375547 2025] [:error] [pid 34109:tid 34145] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.yahoo.com/
[Sun Dec 07 06:21:29.749476 2025] [:error] [pid 34109:tid 34148] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.bing.com/
[Sun Dec 07 06:21:29.945022 2025] [:error] [pid 34109:tid 34156] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Sun Dec 07 06:21:30.142481 2025] [:error] [pid 34109:tid 34155] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Sun Dec 07 06:21:30.312912 2025] [:error] [pid 34109:tid 34150] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.co.uk/
[Sun Dec 07 06:21:30.476892 2025] [:error] [pid 34109:tid 34163] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.de/
[Sun Dec 07 06:21:30.645586 2025] [:error] [pid 34109:tid 34159] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.bing.com/
[Sun Dec 07 06:21:31.025192 2025] [:error] [pid 34109:tid 34149] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://duckduckgo.com/
[Sun Dec 07 06:21:31.231294 2025] [:error] [pid 34109:tid 34146] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.de/
[Sun Dec 07 06:21:31.382020 2025] [:error] [pid 34109:tid 34154] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.com/
[Sun Dec 07 06:21:31.533625 2025] [:error] [pid 34109:tid 34162] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.bing.com/
[Sun Dec 07 06:21:31.744244 2025] [:error] [pid 34109:tid 34157] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.com/
[Sun Dec 07 06:21:32.510847 2025] [:error] [pid 34109:tid 34143] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://www.google.com/
[Sun Dec 07 06:21:32.705957 2025] [:error] [pid 34109:tid 34151] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.fr/
[Sun Dec 07 06:21:33.018064 2025] [:error] [pid 34109:tid 34145] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Sun Dec 07 06:21:33.490180 2025] [:error] [pid 34109:tid 34156] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.fr/
[Sun Dec 07 06:21:34.606635 2025] [:error] [pid 34109:tid 34164] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.yahoo.com/
[Sun Dec 07 06:21:34.760815 2025] [:error] [pid 34109:tid 34163] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.com/
[Sun Dec 07 06:21:35.067648 2025] [:error] [pid 34109:tid 34159] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.google.co.uk/
[Sun Dec 07 06:21:35.380467 2025] [:error] [pid 34109:tid 34149] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Sun Dec 07 06:21:35.543589 2025] [:error] [pid 34109:tid 34161] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://www.yahoo.com/
[Sun Dec 07 06:21:35.698493 2025] [:error] [pid 34109:tid 34141] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.yahoo.com/
[Sun Dec 07 06:21:36.293958 2025] [:error] [pid 34109:tid 34162] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Sun Dec 07 06:21:36.775834 2025] [:error] [pid 34109:tid 34143] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.yahoo.com/
[Sun Dec 07 06:21:37.944441 2025] [:error] [pid 34109:tid 34149] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.fr/
[Sun Dec 07 06:21:39.676686 2025] [:error] [pid 34109:tid 34143] [client 4.217.237.240:24209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Sun Dec 07 06:21:39.831342 2025] [:error] [pid 34109:tid 34140] [client 4.217.237.240:24209] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTSsc4jE_vucgM_xD4QZCAAAAEA"], referer: https://www.yahoo.com/
[Sun Dec 07 06:21:40.180412 2025] [:error] [pid 34195:tid 34218] [client 4.217.237.240:24314] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTSsdBrSxOOdwv3vX3x6yQAAANQ"], referer: https://www.yahoo.com/
[Sun Dec 07 06:21:40.487203 2025] [:error] [pid 34108:tid 34130] [client 4.217.237.240:24298] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTSsdKLvdvAppF-gXotPNwAAABE"], referer: https://www.google.com/
[Sun Dec 07 06:21:40.859397 2025] [:error] [pid 13234:tid 13241] [client 4.217.237.240:24295] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTSsdO6_dquQqQ60IZ_ItQAAAYE"], referer: https://duckduckgo.com/
[Sun Dec 07 06:21:41.266174 2025] [:error] [pid 34195:tid 34211] [client 4.217.237.240:24273] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTSsdRrSxOOdwv3vX3x6zQAAAM0"], referer: https://duckduckgo.com/
[Sun Dec 07 06:21:42.001274 2025] [:error] [pid 7273:tid 7289] [client 4.217.237.240:24287] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTSsdfpR7YTD7JcHjhHJmwAAAU4"], referer: https://duckduckgo.com/
[Sun Dec 07 06:21:42.305779 2025] [:error] [pid 34109:tid 34158] [client 4.217.237.240:24278] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aTSsdojE_vucgM_xD4QZDgAAAFI"], referer: https://www.google.fr/
[Sun Dec 07 06:21:42.729808 2025] [:error] [pid 7273:tid 7276] [client 4.217.237.240:24310] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTSsdvpR7YTD7JcHjhHJnwAAAUE"], referer: https://www.yahoo.com/
[Sun Dec 07 06:21:43.235484 2025] [:error] [pid 34109:tid 34161] [client 4.217.237.240:24296] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTSsd4jE_vucgM_xD4QZDwAAAFU"], referer: https://www.google.co.uk/
[Sun Dec 07 06:21:43.797441 2025] [:error] [pid 34108:tid 34114] [client 4.217.237.240:24202] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aTSsd6LvdvAppF-gXotPPAAAAAE"], referer: https://www.bing.com/
[Sun Dec 07 06:21:44.295819 2025] [:error] [pid 34108:tid 34137] [client 4.217.237.240:24225] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTSseKLvdvAppF-gXotPPQAAABg"], referer: https://www.google.co.uk/
[Sun Dec 07 06:21:44.864381 2025] [:error] [pid 34108:tid 34133] [client 4.217.237.240:24241] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTSseKLvdvAppF-gXotPPwAAABQ"], referer: https://www.google.com/
[Sun Dec 07 06:21:45.212979 2025] [:error] [pid 34110:tid 34188] [client 4.217.237.240:24307] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTSseQndtmtsHiXHBO25iAAAAJU"], referer: https://www.google.de/
[Sun Dec 07 06:21:47.794972 2025] [:error] [pid 7089:tid 7109] [client 4.217.237.240:24199] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://duckduckgo.com/
[Sun Dec 07 06:21:48.092373 2025] [:error] [pid 7089:tid 7104] [client 4.217.237.240:24199] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTSsfIJPZ-pZM-y51NEO6wAAAQ0"], referer: https://www.bing.com/
[Sun Dec 07 06:21:49.530602 2025] [:error] [pid 34195:tid 34206] [client 4.217.237.240:24309] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTSsfRrSxOOdwv3vX3x62QAAAMg"], referer: https://www.bing.com/
[Sun Dec 07 06:21:50.115816 2025] [:error] [pid 34110:tid 34189] [client 4.217.237.240:24291] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTSsfgndtmtsHiXHBO25jgAAAJY"], referer: https://www.bing.com/
[Sun Dec 07 06:21:50.582948 2025] [:error] [pid 34108:tid 34132] [client 4.217.237.240:24294] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTSsfqLvdvAppF-gXotPUQAAABM"], referer: https://www.google.com/
[Sun Dec 07 06:21:50.934303 2025] [:error] [pid 7273:tid 7275] [client 4.217.237.240:24312] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTSsfvpR7YTD7JcHjhHJtwAAAUA"], referer: https://www.yahoo.com/
[Sun Dec 07 06:21:51.651095 2025] [:error] [pid 34110:tid 34172] [client 4.217.237.240:24219] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTSsfwndtmtsHiXHBO25kwAAAIU"], referer: https://www.google.de/
[Sun Dec 07 06:21:52.198082 2025] [:error] [pid 34108:tid 34137] [client 4.217.237.240:24297] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTSsgKLvdvAppF-gXotPWgAAABg"], referer: https://www.google.de/
[Sun Dec 07 06:21:52.572403 2025] [:error] [pid 34109:tid 34153] [client 4.217.237.240:24271] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTSsgIjE_vucgM_xD4QZJAAAAE0"], referer: https://www.google.co.uk/
[Sun Dec 07 06:21:52.899072 2025] [:error] [pid 34108:tid 34133] [client 4.217.237.240:23113] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTSsgKLvdvAppF-gXotPXgAAABQ"], referer: https://www.google.co.uk/
[Sun Dec 07 06:21:53.268003 2025] [:error] [pid 7273:tid 7280] [client 4.217.237.240:24219] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aTSsgfpR7YTD7JcHjhHJvQAAAUU"], referer: https://www.yahoo.com/
[Sun Dec 07 06:21:53.764087 2025] [:error] [pid 7273:tid 7290] [client 4.217.237.240:24303] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTSsgfpR7YTD7JcHjhHJvwAAAU8"], referer: https://www.google.fr/
[Sun Dec 07 06:21:54.129355 2025] [:error] [pid 13234:tid 13253] [client 4.217.237.240:24232] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTSsgu6_dquQqQ60IZ_IwgAAAYw"], referer: https://www.bing.com/
[Sun Dec 07 06:21:55.130171 2025] [:error] [pid 34195:tid 34208] [client 4.217.237.240:24198] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTSsgxrSxOOdwv3vX3x65wAAAMo"], referer: https://duckduckgo.com/
[Sun Dec 07 06:21:55.909720 2025] [:error] [pid 7273:tid 7295] [client 4.217.237.240:24257] [client 4.217.237.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTSsg_pR7YTD7JcHjhHJwQAAAVQ"], referer: https://www.yahoo.com/
[Sun Dec 07 06:21:56.695708 2025] [:error] [pid 13234:tid 13261] [client 4.217.237.240:24258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php, referer: https://www.google.com/
[Sun Dec 07 06:21:56.908031 2025] [:error] [pid 13234:tid 13262] [client 4.217.237.240:24258] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php, referer: https://duckduckgo.com/
[Sun Dec 07 06:21:57.059224 2025] [:error] [pid 13234:tid 13254] [client 4.217.237.240:24258] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php, referer: https://www.google.de/
[Sun Dec 07 07:39:37.211726 2025] [:error] [pid 34109:tid 34141] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sun Dec 07 07:39:37.515885 2025] [:error] [pid 34109:tid 34148] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Dec 07 07:39:38.129983 2025] [:error] [pid 34109:tid 34143] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 07:39:38.438317 2025] [:error] [pid 34109:tid 34160] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun Dec 07 07:39:38.751402 2025] [:error] [pid 34109:tid 34159] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Sun Dec 07 07:39:39.058032 2025] [:error] [pid 34109:tid 34162] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun Dec 07 07:39:39.366300 2025] [:error] [pid 34109:tid 34153] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sun Dec 07 07:39:40.283976 2025] [:error] [pid 34109:tid 34152] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sun Dec 07 07:39:40.590424 2025] [:error] [pid 34109:tid 34151] [client 45.86.202.179:65101] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sun Dec 07 07:39:41.201234 2025] [:error] [pid 34109:tid 34156] [client 45.86.202.179:65101] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTS-vYjE_vucgM_xD4Ql1gAAAFA"]
[Sun Dec 07 07:39:51.825443 2025] [:error] [pid 34110:tid 34183] [client 45.86.202.178:25629] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aTS-xwndtmtsHiXHBO3GnwAAAJA"]
[Sun Dec 07 07:39:52.849605 2025] [:error] [pid 34195:tid 34206] [client 45.86.202.205:52629] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aTS-yBrSxOOdwv3vX3yIIAAAAMg"]
[Sun Dec 07 07:39:53.680955 2025] [:error] [pid 13234:tid 13252] [client 45.86.202.158:22783] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aTS-ye6_dquQqQ60IZ_aRAAAAYs"]
[Sun Dec 07 09:28:33.290630 2025] [:error] [pid 25601:tid 25658] [client 5.252.55.178:54106] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTTYQatsSIqGPs4YVxHw2gAAAJc"]
[Sun Dec 07 09:28:34.376848 2025] [:error] [pid 25601:tid 25639] [client 5.252.55.178:57191] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTTYQqtsSIqGPs4YVxHxBQAAAIQ"]
[Sun Dec 07 09:28:35.718733 2025] [:error] [pid 25694:tid 25703] [client 5.252.55.178:59209] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTTYQ0f7996cewJ5N2-3FAAAAQc"]
[Sun Dec 07 09:28:36.930596 2025] [:error] [pid 25602:tid 25681] [client 5.252.55.178:58813] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTTYRBMayYLriq9gRdeIBQAAANM"]
[Sun Dec 07 09:28:38.079141 2025] [:error] [pid 25601:tid 25655] [client 5.252.55.178:64106] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTTYRqtsSIqGPs4YVxHxiQAAAJQ"]
[Sun Dec 07 10:05:42.983765 2025] [:error] [pid 25694:tid 25712] [client 4.233.91.203:51856] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Sun Dec 07 10:06:00.092887 2025] [:error] [pid 25600:tid 25611] [client 4.233.91.203:60015] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Sun Dec 07 10:06:29.214286 2025] [:error] [pid 36068:tid 36082] [client 4.233.91.203:60511] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Sun Dec 07 10:06:45.916667 2025] [:error] [pid 25602:tid 25667] [client 4.233.91.203:63404] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Sun Dec 07 10:14:12.981802 2025] [:error] [pid 36068:tid 36091] [client 185.177.72.8:51584] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTTi9FGuxqM4ZYob8lN9PAAAABU"]
[Sun Dec 07 10:30:16.875195 2025] [:error] [pid 25694:tid 25712] [client 170.64.222.75:36282] [client 170.64.222.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTTmuEf7996cewJ5N2_L-QAAARA"]
[Sun Dec 07 10:30:22.452657 2025] [:error] [pid 25602:tid 25685] [client 170.64.222.75:36666] [client 170.64.222.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTTmvhMayYLriq9gRdeY_gAAANc"]
[Sun Dec 07 10:46:22.743495 2025] [:error] [pid 25600:tid 25607] [client 185.177.72.8:55772] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aTTqfoX3SVrXRURpt5IJygAAAEA"]
[Sun Dec 07 12:08:57.031410 2025] [:error] [pid 25600:tid 25612] [client 221.229.106.25:60020] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTT92YX3SVrXRURpt5IbWwAAAEU"]
[Sun Dec 07 13:56:00.740019 2025] [:error] [pid 25694:tid 25720] [client 85.209.135.111:57792] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aTUW8Ef7996cewJ5N28DoQAAARg"]
[Sun Dec 07 14:02:56.614464 2025] [:error] [pid 25602:tid 25672] [client 85.209.135.111:52248] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTUYkBMayYLriq9gRdfIxQAAAMo"]
[Sun Dec 07 14:03:45.190636 2025] [:error] [pid 25601:tid 25655] [client 194.5.82.162:48295] [client 194.5.82.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.162, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTUYwatsSIqGPs4YVxEqqwAAAJQ"]
[Sun Dec 07 14:03:45.194252 2025] [:error] [pid 25601:tid 25655] [client 194.5.82.162:48295] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 07 15:58:13.994417 2025] [:error] [pid 25600:tid 25607] [client 170.64.222.75:60040] [client 170.64.222.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTUzlYX3SVrXRURpt5JGowAAAEA"]
[Sun Dec 07 18:23:43.617113 2025] [:error] [pid 39560:tid 39566] [client 43.140.247.223:50638] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTVVrytL21FvSzcnpi1HMAAAAUQ"]
[Sun Dec 07 22:52:52.708598 2025] [:error] [pid 5222:tid 5246] [client 136.144.35.237:24979] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Sun Dec 07 22:52:53.042260 2025] [:error] [pid 5222:tid 5227] [client 136.144.35.237:24979] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun Dec 07 22:52:53.379710 2025] [:error] [pid 5222:tid 5250] [client 136.144.35.237:24979] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sun Dec 07 22:52:54.376913 2025] [:error] [pid 5222:tid 5240] [client 136.144.35.237:24979] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sun Dec 07 22:52:54.709964 2025] [:error] [pid 5222:tid 5234] [client 136.144.35.237:24979] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sun Dec 07 22:52:55.377828 2025] [:error] [pid 5222:tid 5232] [client 136.144.35.237:24979] [client 136.144.35.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTWUx98FU0HgkYWmt7tTJAAAAEY"]
[Sun Dec 07 22:53:06.246074 2025] [:error] [pid 5222:tid 5238] [client 136.144.35.237:57293] [client 136.144.35.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aTWU0t8FU0HgkYWmt7tTJgAAAEw"]
[Sun Dec 07 22:53:06.912904 2025] [:error] [pid 5222:tid 5233] [client 136.144.35.238:39925] [client 136.144.35.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aTWU0t8FU0HgkYWmt7tTKAAAAEc"]
[Mon Dec 08 00:29:13.086367 2025] [:error] [pid 55697:tid 55710] [client 43.159.149.216:55298] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTWrWZCUb4ntL-D8ZJpZ-wAAAEc"]
[Mon Dec 08 00:42:33.297689 2025] [:error] [pid 55840:tid 55861] [client 203.2.64.59:56775] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTWuedXZ-ijN21c_Pr5a8gAAABI"]
[Mon Dec 08 02:49:56.665002 2025] [:error] [pid 55697:tid 55707] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.com/
[Mon Dec 08 02:49:56.752718 2025] [:error] [pid 55697:tid 55715] [client 4.194.58.148:31830] [client 4.194.58.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.58.148, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTXMVJCUb4ntL-D8ZJp7nAAAAEw"], referer: https://www.google.de/
[Mon Dec 08 02:49:56.757006 2025] [:error] [pid 55697:tid 55715] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.de/
[Mon Dec 08 02:49:56.971179 2025] [:error] [pid 55697:tid 55723] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.co.uk/
[Mon Dec 08 02:49:57.122665 2025] [:error] [pid 55697:tid 55711] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://duckduckgo.com/
[Mon Dec 08 02:49:57.214912 2025] [:error] [pid 55697:tid 55725] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.fr/
[Mon Dec 08 02:49:57.740864 2025] [:error] [pid 55697:tid 55709] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.de/
[Mon Dec 08 02:49:57.987023 2025] [:error] [pid 55697:tid 55719] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.bing.com/
[Mon Dec 08 02:49:58.120236 2025] [:error] [pid 55697:tid 55724] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.yahoo.com/
[Mon Dec 08 02:49:58.237857 2025] [:error] [pid 55697:tid 55726] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.bing.com/
[Mon Dec 08 02:49:58.328166 2025] [:error] [pid 55697:tid 55721] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.yahoo.com/
[Mon Dec 08 02:49:58.514023 2025] [:error] [pid 55697:tid 55703] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.co.uk/
[Mon Dec 08 02:49:58.747812 2025] [:error] [pid 55697:tid 55706] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Mon Dec 08 02:49:58.840821 2025] [:error] [pid 55697:tid 55722] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.com/
[Mon Dec 08 02:49:58.932627 2025] [:error] [pid 55697:tid 55710] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.co.uk/
[Mon Dec 08 02:49:59.056985 2025] [:error] [pid 55697:tid 55707] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.com/
[Mon Dec 08 02:49:59.147240 2025] [:error] [pid 55697:tid 55715] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Mon Dec 08 02:49:59.293103 2025] [:error] [pid 55697:tid 55716] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.com/
[Mon Dec 08 02:49:59.387771 2025] [:error] [pid 55697:tid 55723] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.yahoo.com/
[Mon Dec 08 02:50:00.464687 2025] [:error] [pid 55697:tid 55719] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.google.fr/
[Mon Dec 08 02:50:01.148845 2025] [:error] [pid 55697:tid 55705] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Mon Dec 08 02:50:01.691560 2025] [:error] [pid 55697:tid 55715] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://duckduckgo.com/
[Mon Dec 08 02:50:02.013277 2025] [:error] [pid 55697:tid 55713] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://duckduckgo.com/
[Mon Dec 08 02:50:02.596951 2025] [:error] [pid 55697:tid 55721] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.de/
[Mon Dec 08 02:50:03.184511 2025] [:error] [pid 55697:tid 55703] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://www.google.co.uk/
[Mon Dec 08 02:50:03.275646 2025] [:error] [pid 55697:tid 55720] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Mon Dec 08 02:50:03.459126 2025] [:error] [pid 55697:tid 55727] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.fr/
[Mon Dec 08 02:50:03.661406 2025] [:error] [pid 55697:tid 55722] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.bing.com/
[Mon Dec 08 02:50:03.969531 2025] [:error] [pid 55697:tid 55716] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.co.uk/
[Mon Dec 08 02:50:04.062138 2025] [:error] [pid 55697:tid 55723] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.fr/
[Mon Dec 08 02:50:04.254595 2025] [:error] [pid 55697:tid 55711] [client 4.194.58.148:31830] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.bing.com/
[Mon Dec 08 05:52:22.013179 2025] [:error] [pid 54705:tid 54753] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Mon Dec 08 05:52:22.226559 2025] [:error] [pid 54705:tid 54738] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Dec 08 05:52:22.346969 2025] [:error] [pid 54705:tid 54734] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Dec 08 05:52:23.720635 2025] [:error] [pid 54705:tid 54751] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Dec 08 05:52:23.841318 2025] [:error] [pid 54705:tid 54742] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Mon Dec 08 05:52:25.185299 2025] [:error] [pid 54705:tid 54754] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Dec 08 05:52:25.421734 2025] [:error] [pid 54705:tid 54758] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Mon Dec 08 05:52:25.574947 2025] [:error] [pid 54705:tid 54748] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/abe.php
[Mon Dec 08 05:52:25.695922 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:53720] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Mon Dec 08 05:52:25.813404 2025] [:error] [pid 54705:tid 54753] [client 52.175.54.91:53720] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aTX3GadUeDkxwo12SG8jZAAAAZM"]
[Mon Dec 08 05:52:30.391602 2025] [:error] [pid 18634:tid 18658] [client 52.175.54.91:53744] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aTX3Hp-H1wCBKPf4vhN71QAAABQ"]
[Mon Dec 08 05:52:35.159750 2025] [:error] [pid 54704:tid 54719] [client 52.175.54.91:53634] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aTX3I3L1WYsMMmlqjh4ShwAAAUw"]
[Mon Dec 08 05:52:37.712156 2025] [:error] [pid 54704:tid 54730] [client 52.175.54.91:53718] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aTX3JXL1WYsMMmlqjh4SkwAAAVc"]
[Mon Dec 08 05:52:39.274198 2025] [:error] [pid 18635:tid 18672] [client 52.175.54.91:53632] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aTX3J24kCC_HamQRuE1y4gAAAEc"]
[Mon Dec 08 05:52:42.012118 2025] [:error] [pid 54705:tid 54740] [client 52.175.54.91:53661] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aTX3KqdUeDkxwo12SG8jqgAAAYY"]
[Mon Dec 08 05:52:42.535734 2025] [:error] [pid 54671:tid 54694] [client 52.175.54.91:53651] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aTX3KlqOuiNLLCfVy7-KRwAAARQ"]
[Mon Dec 08 05:52:43.512486 2025] [:error] [pid 54704:tid 54718] [client 52.175.54.91:44807] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aTX3K3L1WYsMMmlqjh4SmQAAAUs"]
[Mon Dec 08 05:52:45.188242 2025] [:error] [pid 18634:tid 18643] [client 52.175.54.91:53737] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aTX3LZ-H1wCBKPf4vhN77gAAAAU"]
[Mon Dec 08 05:52:46.169011 2025] [:error] [pid 54705:tid 54738] [client 52.175.54.91:53698] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aTX3LqdUeDkxwo12SG8jrQAAAYQ"]
[Mon Dec 08 05:52:47.804670 2025] [:error] [pid 54705:tid 54758] [client 52.175.54.91:53711] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aTX3L6dUeDkxwo12SG8jsQAAAZg"]
[Mon Dec 08 05:52:48.701518 2025] [:error] [pid 18634:tid 18661] [client 52.175.54.91:53719] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aTX3MJ-H1wCBKPf4vhN79wAAABc"]
[Mon Dec 08 05:52:49.592742 2025] [:error] [pid 18634:tid 18639] [client 52.175.54.91:53715] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3MZ-H1wCBKPf4vhN7-gAAAAE"]
[Mon Dec 08 05:52:50.718929 2025] [:error] [pid 54704:tid 54711] [client 52.175.54.91:53659] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3MnL1WYsMMmlqjh4SoQAAAUQ"]
[Mon Dec 08 05:52:51.931825 2025] [:error] [pid 54705:tid 54752] [client 52.175.54.91:53639] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3M6dUeDkxwo12SG8juAAAAZI"]
[Mon Dec 08 05:52:53.411153 2025] [:error] [pid 54671:tid 54679] [client 52.175.54.91:53658] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3NVqOuiNLLCfVy7-KkQAAAQU"]
[Mon Dec 08 05:52:54.575648 2025] [:error] [pid 18634:tid 18638] [client 52.175.54.91:53722] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aTX3Np-H1wCBKPf4vhN7_QAAAAA"]
[Mon Dec 08 05:52:55.451431 2025] [:error] [pid 54671:tid 54694] [client 52.175.54.91:44826] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aTX3N1qOuiNLLCfVy7-KmgAAARQ"]
[Mon Dec 08 05:52:56.473971 2025] [:error] [pid 18634:tid 18641] [client 52.175.54.91:53703] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aTX3OJ-H1wCBKPf4vhN7_gAAAAM"]
[Mon Dec 08 05:52:57.969598 2025] [:error] [pid 54671:tid 54687] [client 52.175.54.91:53679] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aTX3OVqOuiNLLCfVy7-KoAAAAQ0"]
[Mon Dec 08 05:52:58.786895 2025] [:error] [pid 54671:tid 54682] [client 52.175.54.91:53652] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aTX3OlqOuiNLLCfVy7-KoQAAAQg"]
[Mon Dec 08 05:52:59.841149 2025] [:error] [pid 54705:tid 54745] [client 52.175.54.91:53642] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aTX3O6dUeDkxwo12SG8j9gAAAYs"]
[Mon Dec 08 05:53:01.785620 2025] [:error] [pid 54704:tid 54710] [client 52.175.54.91:53749] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aTX3PXL1WYsMMmlqjh4SqgAAAUM"]
[Mon Dec 08 05:53:02.844699 2025] [:error] [pid 54704:tid 54713] [client 52.175.54.91:53730] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aTX3PnL1WYsMMmlqjh4SqwAAAUY"]
[Mon Dec 08 05:53:04.231150 2025] [:error] [pid 54705:tid 54735] [client 52.175.54.91:53743] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aTX3QKdUeDkxwo12SG8j_wAAAYE"]
[Mon Dec 08 05:53:07.531503 2025] [:error] [pid 54704:tid 54726] [client 52.175.54.91:53699] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aTX3Q3L1WYsMMmlqjh4SrgAAAVM"]
[Mon Dec 08 05:53:12.932981 2025] [:error] [pid 18634:tid 18640] [client 52.175.54.91:53707] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aTX3SJ-H1wCBKPf4vhN8CQAAAAI"]
[Mon Dec 08 05:53:13.357967 2025] [:error] [pid 18634:tid 18660] [client 52.175.54.91:53741] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aTX3SZ-H1wCBKPf4vhN8CgAAABY"]
[Mon Dec 08 05:53:14.217956 2025] [:error] [pid 54705:tid 54739] [client 52.175.54.91:53733] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3SqdUeDkxwo12SG8kEQAAAYU"]
[Mon Dec 08 05:53:15.660071 2025] [:error] [pid 54704:tid 54711] [client 52.175.54.91:53649] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3S3L1WYsMMmlqjh4StgAAAUQ"]
[Mon Dec 08 05:53:16.361278 2025] [:error] [pid 54704:tid 54718] [client 52.175.54.91:53713] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3THL1WYsMMmlqjh4SuAAAAUs"]
[Mon Dec 08 05:53:16.944876 2025] [:error] [pid 54704:tid 54721] [client 52.175.54.91:53755] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3THL1WYsMMmlqjh4SugAAAU4"]
[Mon Dec 08 05:53:17.853840 2025] [:error] [pid 54704:tid 54717] [client 52.175.54.91:53697] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTX3TXL1WYsMMmlqjh4SvQAAAUo"]
[Mon Dec 08 05:53:18.786505 2025] [:error] [pid 18634:tid 18638] [client 52.175.54.91:53727] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTX3Tp-H1wCBKPf4vhN8DgAAAAA"]
[Mon Dec 08 05:53:19.944260 2025] [:error] [pid 54671:tid 54685] [client 52.175.54.91:53704] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTX3T1qOuiNLLCfVy7-KsAAAAQs"]
[Mon Dec 08 05:53:20.992824 2025] [:error] [pid 18635:tid 18667] [client 52.175.54.91:53754] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTX3UG4kCC_HamQRuE1y_AAAAEI"]
[Mon Dec 08 05:53:22.983622 2025] [:error] [pid 18726:tid 18736] [client 52.175.54.91:53750] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aTX3UlwVbxmJGL5LHAc3tQAAAMg"]
[Mon Dec 08 05:53:23.721677 2025] [:error] [pid 18726:tid 18748] [client 52.175.54.91:53637] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aTX3U1wVbxmJGL5LHAc3tgAAANQ"]
[Mon Dec 08 05:53:24.639115 2025] [:error] [pid 54671:tid 54693] [client 52.175.54.91:53752] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aTX3VFqOuiNLLCfVy7-KtwAAARM"]
[Mon Dec 08 05:53:26.574240 2025] [:error] [pid 54704:tid 54721] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Dec 08 05:53:26.703144 2025] [:error] [pid 54704:tid 54715] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Dec 08 05:53:26.872917 2025] [:error] [pid 54704:tid 54717] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Dec 08 05:53:28.448050 2025] [:error] [pid 54704:tid 54717] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Dec 08 05:53:28.575658 2025] [:error] [pid 54704:tid 54726] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Dec 08 05:53:28.704297 2025] [:error] [pid 54704:tid 54731] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/uana.php
[Mon Dec 08 05:53:29.628504 2025] [:error] [pid 54704:tid 54723] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Dec 08 05:53:29.756978 2025] [:error] [pid 54704:tid 54716] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon Dec 08 05:53:29.886053 2025] [:error] [pid 54704:tid 54712] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Mon Dec 08 05:53:30.013414 2025] [:error] [pid 54704:tid 54720] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Mon Dec 08 05:53:30.145924 2025] [:error] [pid 54704:tid 54722] [client 52.175.54.91:53731] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Dec 08 05:53:30.295718 2025] [:error] [pid 54704:tid 54708] [client 52.175.54.91:53731] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTX3WnL1WYsMMmlqjh4S0QAAAUE"]
[Mon Dec 08 05:53:33.867822 2025] [:error] [pid 18634:tid 18645] [client 52.175.54.91:53689] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTX3XZ-H1wCBKPf4vhN8JwAAAAc"]
[Mon Dec 08 05:53:38.982358 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:53721] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTX3YqdUeDkxwo12SG8kWwAAAYc"]
[Mon Dec 08 05:53:40.827665 2025] [:error] [pid 18726:tid 18738] [client 52.175.54.91:53728] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTX3ZFwVbxmJGL5LHAc34wAAAMo"]
[Mon Dec 08 05:53:41.809151 2025] [:error] [pid 18726:tid 18739] [client 52.175.54.91:53638] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTX3ZVwVbxmJGL5LHAc35AAAAMs"]
[Mon Dec 08 05:53:43.239362 2025] [:error] [pid 54704:tid 54720] [client 52.175.54.91:53729] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTX3Z3L1WYsMMmlqjh4S5AAAAU0"]
[Mon Dec 08 05:53:44.231198 2025] [:error] [pid 54704:tid 54719] [client 52.175.54.91:53633] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTX3aHL1WYsMMmlqjh4S5gAAAUw"]
[Mon Dec 08 05:53:45.552442 2025] [:error] [pid 54705:tid 54756] [client 52.175.54.91:53671] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTX3aadUeDkxwo12SG8kaQAAAZY"]
[Mon Dec 08 05:53:46.248250 2025] [:error] [pid 18635:tid 18680] [client 52.175.54.91:53724] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aTX3am4kCC_HamQRuE1zEAAAAE8"]
[Mon Dec 08 05:53:47.153400 2025] [:error] [pid 54704:tid 54710] [client 52.175.54.91:53725] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aTX3a3L1WYsMMmlqjh4S6gAAAUM"]
[Mon Dec 08 05:53:48.393445 2025] [:error] [pid 54671:tid 54693] [client 52.175.54.91:53710] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aTX3bFqOuiNLLCfVy7-KyQAAARM"]
[Mon Dec 08 05:53:48.946379 2025] [:error] [pid 18634:tid 18654] [client 52.175.54.91:44815] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aTX3bJ-H1wCBKPf4vhN8NgAAABA"]
[Mon Dec 08 05:53:49.658078 2025] [:error] [pid 18634:tid 18659] [client 52.175.54.91:53666] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aTX3bZ-H1wCBKPf4vhN8OQAAABU"]
[Mon Dec 08 05:53:50.655017 2025] [:error] [pid 54671:tid 54694] [client 52.175.54.91:53665] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aTX3blqOuiNLLCfVy7-KywAAARQ"]
[Mon Dec 08 05:53:51.434213 2025] [:error] [pid 54704:tid 54707] [client 52.175.54.91:53742] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aTX3b3L1WYsMMmlqjh4S7gAAAUA"]
[Mon Dec 08 05:53:51.771319 2025] [:error] [pid 18634:tid 18641] [client 52.175.54.91:53726] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aTX3b5-H1wCBKPf4vhN8PgAAAAM"]
[Mon Dec 08 05:53:52.498919 2025] [:error] [pid 18634:tid 18642] [client 52.175.54.91:53667] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aTX3cJ-H1wCBKPf4vhN8PwAAAAQ"]
[Mon Dec 08 05:53:53.199021 2025] [:error] [pid 54704:tid 54709] [client 52.175.54.91:53654] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aTX3cXL1WYsMMmlqjh4S8gAAAUI"]
[Mon Dec 08 05:53:54.190092 2025] [:error] [pid 18635:tid 18674] [client 52.175.54.91:44821] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aTX3cm4kCC_HamQRuE1zFAAAAEk"]
[Mon Dec 08 05:53:54.592159 2025] [:error] [pid 18635:tid 18667] [client 52.175.54.91:44810] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aTX3cm4kCC_HamQRuE1zFQAAAEI"]
[Mon Dec 08 05:53:55.249958 2025] [:error] [pid 18635:tid 18682] [client 52.175.54.91:44811] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aTX3c24kCC_HamQRuE1zGAAAAFE"]
[Mon Dec 08 05:53:55.842422 2025] [:error] [pid 18635:tid 18671] [client 52.175.54.91:53700] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aTX3c24kCC_HamQRuE1zGQAAAEY"]
[Mon Dec 08 05:53:56.369636 2025] [:error] [pid 18636:tid 18697] [client 52.175.54.91:53668] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aTX3dOgdXnohVr6jm71GJQAAAIU"]
[Mon Dec 08 05:53:57.267271 2025] [:error] [pid 54705:tid 54734] [client 52.175.54.91:53738] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aTX3dadUeDkxwo12SG8kbwAAAYA"]
[Mon Dec 08 05:53:58.485209 2025] [:error] [pid 18635:tid 18678] [client 52.175.54.91:44839] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aTX3dm4kCC_HamQRuE1zGwAAAE0"]
[Mon Dec 08 05:54:00.362356 2025] [:error] [pid 18635:tid 18670] [client 52.175.54.91:53655] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aTX3eG4kCC_HamQRuE1zIgAAAEU"]
[Mon Dec 08 05:54:02.335391 2025] [:error] [pid 54704:tid 54727] [client 52.175.54.91:53683] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aTX3enL1WYsMMmlqjh4S-wAAAVQ"]
[Mon Dec 08 05:54:03.790233 2025] [:error] [pid 18636:tid 18692] [client 52.175.54.91:53739] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aTX3e-gdXnohVr6jm71GKQAAAIA"]
[Mon Dec 08 05:54:04.769731 2025] [:error] [pid 54705:tid 54756] [client 52.175.54.91:53657] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aTX3fKdUeDkxwo12SG8keAAAAZY"]
[Mon Dec 08 05:54:05.607776 2025] [:error] [pid 18726:tid 18738] [client 52.175.54.91:53662] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aTX3fVwVbxmJGL5LHAc38wAAAMo"]
[Mon Dec 08 05:54:07.531584 2025] [:error] [pid 18726:tid 18744] [client 52.175.54.91:44840] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aTX3f1wVbxmJGL5LHAc39gAAANA"]
[Mon Dec 08 05:54:08.218654 2025] [:error] [pid 54671:tid 54698] [client 52.175.54.91:53701] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aTX3gFqOuiNLLCfVy7-K2gAAARg"]
[Mon Dec 08 05:54:09.543941 2025] [:error] [pid 18634:tid 18643] [client 52.175.54.91:44816] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aTX3gZ-H1wCBKPf4vhN8TAAAAAU"]
[Mon Dec 08 05:54:10.531670 2025] [:error] [pid 54705:tid 54749] [client 52.175.54.91:53675] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aTX3gqdUeDkxwo12SG8kfAAAAY8"]
[Mon Dec 08 05:54:12.744650 2025] [:error] [pid 18636:tid 18705] [client 52.175.54.91:53732] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aTX3hOgdXnohVr6jm71GLwAAAI0"]
[Mon Dec 08 05:54:14.080241 2025] [:error] [pid 54704:tid 54724] [client 52.175.54.91:53745] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aTX3hnL1WYsMMmlqjh4TBAAAAVE"]
[Mon Dec 08 05:54:15.003016 2025] [:error] [pid 54704:tid 54721] [client 52.175.54.91:53646] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aTX3h3L1WYsMMmlqjh4TBgAAAU4"]
[Mon Dec 08 05:54:15.801747 2025] [:error] [pid 54704:tid 54723] [client 52.175.54.91:44829] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aTX3h3L1WYsMMmlqjh4TCAAAAVA"]
[Mon Dec 08 05:54:16.506207 2025] [:error] [pid 18726:tid 18750] [client 52.175.54.91:53705] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aTX3iFwVbxmJGL5LHAc4AgAAANY"]
[Mon Dec 08 05:54:17.248858 2025] [:error] [pid 18726:tid 18748] [client 52.175.54.91:44846] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aTX3iVwVbxmJGL5LHAc4AwAAANQ"]
[Mon Dec 08 05:54:18.737498 2025] [:error] [pid 18726:tid 18749] [client 52.175.54.91:53756] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aTX3ilwVbxmJGL5LHAc4BgAAANU"]
[Mon Dec 08 05:54:19.858773 2025] [:error] [pid 54671:tid 54689] [client 52.175.54.91:53656] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aTX3i1qOuiNLLCfVy7-K3wAAAQ8"]
[Mon Dec 08 05:54:20.972650 2025] [:error] [pid 54704:tid 54714] [client 52.175.54.91:44832] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aTX3jHL1WYsMMmlqjh4TCgAAAUc"]
[Mon Dec 08 05:54:22.475476 2025] [:error] [pid 54671:tid 54677] [client 52.175.54.91:53673] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aTX3jlqOuiNLLCfVy7-K4AAAAQM"]
[Mon Dec 08 05:54:23.776938 2025] [:error] [pid 18636:tid 18709] [client 52.175.54.91:53712] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aTX3j-gdXnohVr6jm71GOAAAAJE"]
[Mon Dec 08 05:54:24.757179 2025] [:error] [pid 54705:tid 54739] [client 52.175.54.91:53641] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aTX3kKdUeDkxwo12SG8khAAAAYU"]
[Mon Dec 08 05:54:27.947912 2025] [:error] [pid 18636:tid 18704] [client 52.175.54.91:53663] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aTX3k-gdXnohVr6jm71GOgAAAIw"]
[Mon Dec 08 05:54:29.043529 2025] [:error] [pid 54704:tid 54715] [client 52.175.54.91:53708] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aTX3lXL1WYsMMmlqjh4TEQAAAUg"]
[Mon Dec 08 05:54:30.653030 2025] [:error] [pid 54671:tid 54696] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Mon Dec 08 05:54:30.984235 2025] [:error] [pid 54671:tid 54691] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Dec 08 05:54:32.497902 2025] [:error] [pid 54671:tid 54684] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/atom.php
[Mon Dec 08 05:54:32.641507 2025] [:error] [pid 54671:tid 54681] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/case.php
[Mon Dec 08 05:54:32.783783 2025] [:error] [pid 54671:tid 54693] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/docs.php
[Mon Dec 08 05:54:32.935207 2025] [:error] [pid 54671:tid 54680] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/ios.php
[Mon Dec 08 05:54:33.130125 2025] [:error] [pid 54671:tid 54694] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Dec 08 05:54:33.277539 2025] [:error] [pid 54671:tid 54675] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Dec 08 05:54:33.434603 2025] [:error] [pid 54671:tid 54685] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Dec 08 05:54:34.015799 2025] [:error] [pid 54671:tid 54674] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Dec 08 05:54:34.149373 2025] [:error] [pid 54671:tid 54695] [client 52.175.54.91:44844] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Dec 08 05:54:34.273025 2025] [:error] [pid 54671:tid 54676] [client 52.175.54.91:44844] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aTX3mlqOuiNLLCfVy7-K8AAAAQI"]
[Mon Dec 08 05:54:35.926209 2025] [:error] [pid 54704:tid 54727] [client 52.175.54.91:53677] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aTX3m3L1WYsMMmlqjh4TFQAAAVQ"]
[Mon Dec 08 05:54:37.002715 2025] [:error] [pid 18726:tid 18749] [client 52.175.54.91:53695] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aTX3nVwVbxmJGL5LHAc4EgAAANU"]
[Mon Dec 08 05:54:37.411369 2025] [:error] [pid 18726:tid 18752] [client 52.175.54.91:44808] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aTX3nVwVbxmJGL5LHAc4EwAAANg"]
[Mon Dec 08 05:54:38.224216 2025] [:error] [pid 54704:tid 54721] [client 52.175.54.91:44804] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aTX3nnL1WYsMMmlqjh4TFwAAAU4"]
[Mon Dec 08 05:54:39.785116 2025] [:error] [pid 54671:tid 54692] [client 52.175.54.91:53753] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aTX3n1qOuiNLLCfVy7-K8wAAARI"]
[Mon Dec 08 05:54:40.929196 2025] [:error] [pid 54705:tid 54746] [client 52.175.54.91:44777] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aTX3oKdUeDkxwo12SG8kkwAAAYw"]
[Mon Dec 08 05:54:41.579990 2025] [:error] [pid 54705:tid 54743] [client 52.175.54.91:44849] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aTX3oadUeDkxwo12SG8klQAAAYk"]
[Mon Dec 08 05:54:42.244267 2025] [:error] [pid 18634:tid 18662] [client 52.175.54.91:53653] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aTX3op-H1wCBKPf4vhN8YgAAABg"]
[Mon Dec 08 05:54:42.781017 2025] [:error] [pid 54705:tid 54734] [client 52.175.54.91:53747] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aTX3oqdUeDkxwo12SG8klgAAAYA"]
[Mon Dec 08 05:54:43.493986 2025] [:error] [pid 18636:tid 18694] [client 52.175.54.91:44801] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aTX3o-gdXnohVr6jm71GPwAAAII"]
[Mon Dec 08 05:54:44.652454 2025] [:error] [pid 54671:tid 54682] [client 52.175.54.91:44814] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aTX3pFqOuiNLLCfVy7-K9gAAAQg"]
[Mon Dec 08 05:54:45.677483 2025] [:error] [pid 54705:tid 54752] [client 52.175.54.91:53692] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTX3padUeDkxwo12SG8knwAAAZI"]
[Mon Dec 08 05:54:46.726399 2025] [:error] [pid 54671:tid 54684] [client 52.175.54.91:44751] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTX3plqOuiNLLCfVy7-K9wAAAQo"]
[Mon Dec 08 05:54:49.701969 2025] [:error] [pid 18726:tid 18739] [client 52.175.54.91:53751] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTX3qVwVbxmJGL5LHAc4GAAAAMs"]
[Mon Dec 08 05:54:50.806811 2025] [:error] [pid 18635:tid 18675] [client 52.175.54.91:44772] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTX3qm4kCC_HamQRuE1zPAAAAEo"]
[Mon Dec 08 05:54:51.545588 2025] [:error] [pid 18726:tid 18729] [client 52.175.54.91:53723] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3q1wVbxmJGL5LHAc4JAAAAME"]
[Mon Dec 08 05:54:52.547049 2025] [:error] [pid 54704:tid 54713] [client 52.175.54.91:53684] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3rHL1WYsMMmlqjh4TIAAAAUY"]
[Mon Dec 08 05:54:54.566642 2025] [:error] [pid 54705:tid 54748] [client 52.175.54.91:53648] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3rqdUeDkxwo12SG8kuAAAAY4"]
[Mon Dec 08 05:54:55.531895 2025] [:error] [pid 18635:tid 18674] [client 52.175.54.91:44806] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aTX3r24kCC_HamQRuE1zTwAAAEk"]
[Mon Dec 08 05:54:57.260529 2025] [:error] [pid 18635:tid 18689] [client 52.175.54.91:53748] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aTX3sW4kCC_HamQRuE1zUQAAAFg"]
[Mon Dec 08 05:54:58.134692 2025] [:error] [pid 18635:tid 18684] [client 52.175.54.91:53650] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aTX3sm4kCC_HamQRuE1zUgAAAFM"]
[Mon Dec 08 05:54:58.554365 2025] [:error] [pid 18726:tid 18737] [client 52.175.54.91:44805] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aTX3slwVbxmJGL5LHAc4XQAAAMk"]
[Mon Dec 08 05:54:59.316352 2025] [:error] [pid 18635:tid 18679] [client 52.175.54.91:53681] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aTX3s24kCC_HamQRuE1zVAAAAE4"]
[Mon Dec 08 05:55:00.744875 2025] [:error] [pid 18726:tid 18729] [client 52.175.54.91:44827] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3tFwVbxmJGL5LHAc4YAAAAME"]
[Mon Dec 08 05:55:02.336564 2025] [:error] [pid 54705:tid 54753] [client 52.175.54.91:53746] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3tqdUeDkxwo12SG8kwgAAAZM"]
[Mon Dec 08 05:55:03.700327 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:44852] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3t6dUeDkxwo12SG8kxAAAAYc"]
[Mon Dec 08 05:55:04.841481 2025] [:error] [pid 18726:tid 18733] [client 52.175.54.91:44838] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aTX3uFwVbxmJGL5LHAc4ZQAAAMU"]
[Mon Dec 08 05:55:06.343192 2025] [:error] [pid 54704:tid 54714] [client 52.175.54.91:44863] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aTX3unL1WYsMMmlqjh4TLwAAAUc"]
[Mon Dec 08 05:55:06.761895 2025] [:error] [pid 18726:tid 18747] [client 52.175.54.91:44802] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aTX3ulwVbxmJGL5LHAc4ZgAAANM"]
[Mon Dec 08 05:55:07.597382 2025] [:error] [pid 54704:tid 54719] [client 52.175.54.91:44850] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aTX3u3L1WYsMMmlqjh4TMQAAAUw"]
[Mon Dec 08 05:55:09.568177 2025] [:error] [pid 18636:tid 18692] [client 52.175.54.91:44853] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aTX3vegdXnohVr6jm71GSAAAAIA"]
[Mon Dec 08 05:55:11.403745 2025] [:error] [pid 18635:tid 18682] [client 52.175.54.91:53682] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aTX3v24kCC_HamQRuE1zVwAAAFE"]
[Mon Dec 08 05:55:13.031900 2025] [:error] [pid 54704:tid 54710] [client 52.175.54.91:44803] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aTX3wXL1WYsMMmlqjh4TNgAAAUM"]
[Mon Dec 08 05:55:15.175138 2025] [:error] [pid 54705:tid 54735] [client 52.175.54.91:53757] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aTX3w6dUeDkxwo12SG8k0wAAAYE"]
[Mon Dec 08 05:55:15.813328 2025] [:error] [pid 18635:tid 18684] [client 52.175.54.91:53644] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aTX3w24kCC_HamQRuE1zXQAAAFM"]
[Mon Dec 08 05:55:16.584643 2025] [:error] [pid 54705:tid 54742] [client 52.175.54.91:44856] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aTX3xKdUeDkxwo12SG8k2QAAAYg"]
[Mon Dec 08 05:55:17.056137 2025] [:error] [pid 54671:tid 54687] [client 52.175.54.91:53706] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aTX3xVqOuiNLLCfVy7-LDAAAAQ0"]
[Mon Dec 08 05:55:18.355088 2025] [:error] [pid 54704:tid 54712] [client 52.175.54.91:53669] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aTX3xnL1WYsMMmlqjh4TOwAAAUU"]
[Mon Dec 08 05:55:20.849050 2025] [:error] [pid 54704:tid 54715] [client 52.175.54.91:44745] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aTX3yHL1WYsMMmlqjh4TQwAAAUg"]
[Mon Dec 08 05:55:24.978232 2025] [:error] [pid 54705:tid 54755] [client 52.175.54.91:44762] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aTX3zKdUeDkxwo12SG8k3gAAAZU"]
[Mon Dec 08 05:55:27.629452 2025] [:error] [pid 54671:tid 54692] [client 52.175.54.91:53717] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aTX3z1qOuiNLLCfVy7-LEwAAARI"]
[Mon Dec 08 05:55:28.918974 2025] [:error] [pid 54705:tid 54754] [client 52.175.54.91:44765] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aTX30KdUeDkxwo12SG8k5QAAAZQ"]
[Mon Dec 08 05:55:29.799373 2025] [:error] [pid 54705:tid 54743] [client 52.175.54.91:53735] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aTX30adUeDkxwo12SG8k6AAAAYk"]
[Mon Dec 08 05:55:31.723106 2025] [:error] [pid 54671:tid 54684] [client 52.175.54.91:44858] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aTX301qOuiNLLCfVy7-LFwAAAQo"]
[Mon Dec 08 05:55:35.319774 2025] [:error] [pid 54671:tid 54692] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Dec 08 05:55:35.451346 2025] [:error] [pid 54671:tid 54678] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Dec 08 05:55:35.579179 2025] [:error] [pid 54671:tid 54696] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Dec 08 05:55:35.707919 2025] [:error] [pid 54671:tid 54688] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Dec 08 05:55:35.865954 2025] [:error] [pid 54671:tid 54684] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Dec 08 05:55:37.755620 2025] [:error] [pid 54671:tid 54683] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Dec 08 05:55:37.903042 2025] [:error] [pid 54671:tid 54697] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Dec 08 05:55:38.030502 2025] [:error] [pid 54671:tid 54693] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Mon Dec 08 05:55:38.158392 2025] [:error] [pid 54671:tid 54685] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/conflg.php
[Mon Dec 08 05:55:38.288971 2025] [:error] [pid 54671:tid 54687] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Mon Dec 08 05:55:38.429155 2025] [:error] [pid 54671:tid 54686] [client 52.175.54.91:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/asas.php
[Mon Dec 08 05:55:38.574889 2025] [:error] [pid 54671:tid 54674] [client 52.175.54.91:44809] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTX32lqOuiNLLCfVy7-LLQAAAQA"]
[Mon Dec 08 05:55:41.214036 2025] [:error] [pid 18726:tid 18739] [client 52.175.54.91:53759] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTX33VwVbxmJGL5LHAc4dgAAAMs"]
[Mon Dec 08 05:55:42.240044 2025] [:error] [pid 18726:tid 18735] [client 52.175.54.91:53758] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTX33lwVbxmJGL5LHAc4fAAAAMc"]
[Mon Dec 08 05:55:43.282268 2025] [:error] [pid 18636:tid 18699] [client 52.175.54.91:44831] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTX33-gdXnohVr6jm71GZwAAAIc"]
[Mon Dec 08 05:55:44.933814 2025] [:error] [pid 18636:tid 18716] [client 52.175.54.91:53678] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aTX34OgdXnohVr6jm71GagAAAJg"]
[Mon Dec 08 05:55:46.705279 2025] [:error] [pid 18634:tid 18643] [client 52.175.54.91:44845] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aTX34p-H1wCBKPf4vhN8kQAAAAU"]
[Mon Dec 08 05:55:48.040899 2025] [:error] [pid 54705:tid 54737] [client 52.175.54.91:53694] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aTX35KdUeDkxwo12SG8k8gAAAYM"]
[Mon Dec 08 05:55:49.596338 2025] [:error] [pid 18726:tid 18749] [client 52.175.54.91:44825] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aTX35VwVbxmJGL5LHAc4iAAAANU"]
[Mon Dec 08 05:55:52.096669 2025] [:error] [pid 54704:tid 54714] [client 52.175.54.91:44860] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTX36HL1WYsMMmlqjh4TVwAAAUc"]
[Mon Dec 08 05:55:55.551817 2025] [:error] [pid 18634:tid 18656] [client 52.175.54.91:44836] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTX365-H1wCBKPf4vhN8lAAAABI"]
[Mon Dec 08 05:55:57.435104 2025] [:error] [pid 18635:tid 18678] [client 52.175.54.91:53709] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTX37W4kCC_HamQRuE1zggAAAE0"]
[Mon Dec 08 05:55:59.372350 2025] [:error] [pid 54704:tid 54731] [client 52.175.54.91:53686] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTX373L1WYsMMmlqjh4TYQAAAVg"]
[Mon Dec 08 05:56:00.958319 2025] [:error] [pid 18726:tid 18734] [client 52.175.54.91:44787] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aTX38FwVbxmJGL5LHAc4lQAAAMY"]
[Mon Dec 08 05:56:03.524705 2025] [:error] [pid 18726:tid 18750] [client 52.175.54.91:44759] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aTX381wVbxmJGL5LHAc4mgAAANY"]
[Mon Dec 08 05:56:06.863067 2025] [:error] [pid 18634:tid 18639] [client 52.175.54.91:44813] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aTX39p-H1wCBKPf4vhN8mwAAAAE"]
[Mon Dec 08 05:56:11.446524 2025] [:error] [pid 18636:tid 18704] [client 52.175.54.91:44761] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aTX3--gdXnohVr6jm71GhwAAAIw"]
[Mon Dec 08 05:56:14.636679 2025] [:error] [pid 54671:tid 54693] [client 52.175.54.91:44784] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aTX3_lqOuiNLLCfVy7-LUQAAARM"]
[Mon Dec 08 05:56:16.280229 2025] [:error] [pid 54704:tid 54722] [client 52.175.54.91:53670] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aTX4AHL1WYsMMmlqjh4TdwAAAU8"]
[Mon Dec 08 05:56:17.519977 2025] [:error] [pid 18635:tid 18689] [client 52.175.54.91:44744] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aTX4AW4kCC_HamQRuE1zkgAAAFg"]
[Mon Dec 08 05:56:18.630056 2025] [:error] [pid 18635:tid 18680] [client 52.175.54.91:44800] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aTX4Am4kCC_HamQRuE1zlQAAAE8"]
[Mon Dec 08 05:56:19.649596 2025] [:error] [pid 18635:tid 18685] [client 52.175.54.91:53672] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aTX4A24kCC_HamQRuE1zmAAAAFQ"]
[Mon Dec 08 05:56:21.120629 2025] [:error] [pid 18635:tid 18677] [client 52.175.54.91:44771] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aTX4BW4kCC_HamQRuE1zmwAAAEw"]
[Mon Dec 08 05:56:22.410403 2025] [:error] [pid 18726:tid 18747] [client 52.175.54.91:44817] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aTX4BlwVbxmJGL5LHAc4qwAAANM"]
[Mon Dec 08 05:56:23.431633 2025] [:error] [pid 54704:tid 54722] [client 52.175.54.91:53674] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aTX4B3L1WYsMMmlqjh4TfgAAAU8"]
[Mon Dec 08 05:56:23.971281 2025] [:error] [pid 54705:tid 54751] [client 52.175.54.91:53693] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTX4B6dUeDkxwo12SG8lOgAAAZE"]
[Mon Dec 08 05:56:24.640215 2025] [:error] [pid 54705:tid 54749] [client 52.175.54.91:53636] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTX4CKdUeDkxwo12SG8lPQAAAY8"]
[Mon Dec 08 05:56:25.516466 2025] [:error] [pid 54704:tid 54721] [client 52.175.54.91:44837] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTX4CXL1WYsMMmlqjh4TgQAAAU4"]
[Mon Dec 08 05:56:26.045322 2025] [:error] [pid 18634:tid 18655] [client 52.175.54.91:44738] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTX4Cp-H1wCBKPf4vhN8qAAAABE"]
[Mon Dec 08 05:56:27.080280 2025] [:error] [pid 18726:tid 18734] [client 52.175.54.91:53740] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aTX4C1wVbxmJGL5LHAc4swAAAMY"]
[Mon Dec 08 05:56:31.046898 2025] [:error] [pid 18634:tid 18652] [client 52.175.54.91:44819] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aTX4D5-H1wCBKPf4vhN8rgAAAA4"]
[Mon Dec 08 05:56:32.265434 2025] [:error] [pid 18635:tid 18684] [client 52.175.54.91:44687] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aTX4EG4kCC_HamQRuE1zoAAAAFM"]
[Mon Dec 08 05:56:33.434367 2025] [:error] [pid 18635:tid 18669] [client 52.175.54.91:53716] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aTX4EW4kCC_HamQRuE1zoQAAAEQ"]
[Mon Dec 08 05:56:34.642310 2025] [:error] [pid 54671:tid 54697] [client 52.175.54.91:53678] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aTX4ElqOuiNLLCfVy7-LXgAAARc"]
[Mon Dec 08 05:56:35.606491 2025] [:error] [pid 18634:tid 18647] [client 52.175.54.91:44828] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aTX4E5-H1wCBKPf4vhN8tQAAAAk"]
[Mon Dec 08 05:56:36.567092 2025] [:error] [pid 18634:tid 18645] [client 52.175.54.91:53676] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aTX4FJ-H1wCBKPf4vhN8uAAAAAc"]
[Mon Dec 08 05:56:37.021940 2025] [:error] [pid 18635:tid 18681] [client 52.175.54.91:44773] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aTX4FW4kCC_HamQRuE1zpQAAAFA"]
[Mon Dec 08 05:56:37.604982 2025] [:error] [pid 18635:tid 18676] [client 52.175.54.91:44862] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aTX4FW4kCC_HamQRuE1zpwAAAEs"]
[Mon Dec 08 05:56:38.045452 2025] [:error] [pid 54705:tid 54754] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Mon Dec 08 05:56:38.220948 2025] [:error] [pid 54705:tid 54751] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/321.php
[Mon Dec 08 05:56:38.370444 2025] [:error] [pid 54705:tid 54745] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Dec 08 05:56:38.491320 2025] [:error] [pid 54705:tid 54743] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Dec 08 05:56:38.611326 2025] [:error] [pid 54705:tid 54744] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Mon Dec 08 05:56:38.741491 2025] [:error] [pid 54705:tid 54755] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Dec 08 05:56:38.885224 2025] [:error] [pid 54705:tid 54739] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Mon Dec 08 05:56:39.010761 2025] [:error] [pid 54705:tid 54749] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Mon Dec 08 05:56:39.132633 2025] [:error] [pid 54705:tid 54735] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Mon Dec 08 05:56:39.276643 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Dec 08 05:56:40.931993 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:44830] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Dec 08 05:56:41.066355 2025] [:error] [pid 54705:tid 54744] [client 52.175.54.91:44830] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aTX4GadUeDkxwo12SG8lXQAAAYo"]
[Mon Dec 08 05:56:42.613706 2025] [:error] [pid 18635:tid 18679] [client 52.175.54.91:53685] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aTX4Gm4kCC_HamQRuE1zsgAAAE4"]
[Mon Dec 08 05:56:43.985165 2025] [:error] [pid 54704:tid 54708] [client 52.175.54.91:44854] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aTX4G3L1WYsMMmlqjh4TkQAAAUE"]
[Mon Dec 08 05:56:45.469348 2025] [:error] [pid 18636:tid 18695] [client 52.175.54.91:44764] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aTX4HegdXnohVr6jm71G2wAAAIM"]
[Mon Dec 08 05:56:46.355786 2025] [:error] [pid 18636:tid 18715] [client 52.175.54.91:53664] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aTX4HugdXnohVr6jm71G3gAAAJc"]
[Mon Dec 08 05:56:47.060228 2025] [:error] [pid 54671:tid 54683] [client 52.175.54.91:44766] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aTX4H1qOuiNLLCfVy7-LaQAAAQk"]
[Mon Dec 08 05:56:47.703068 2025] [:error] [pid 54704:tid 54727] [client 52.175.54.91:44770] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aTX4H3L1WYsMMmlqjh4TlgAAAVQ"]
[Mon Dec 08 05:56:48.843776 2025] [:error] [pid 54705:tid 54757] [client 52.175.54.91:44793] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aTX4IKdUeDkxwo12SG8leAAAAZc"]
[Mon Dec 08 05:56:50.210766 2025] [:error] [pid 18634:tid 18649] [client 52.175.54.91:44835] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aTX4Ip-H1wCBKPf4vhN8yQAAAAs"]
[Mon Dec 08 05:56:51.049678 2025] [:error] [pid 18635:tid 18687] [client 52.175.54.91:44834] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aTX4I24kCC_HamQRuE1ztQAAAFY"]
[Mon Dec 08 05:56:52.910764 2025] [:error] [pid 54671:tid 54692] [client 52.175.54.91:44736] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aTX4JFqOuiNLLCfVy7-LbwAAARI"]
[Mon Dec 08 05:56:53.631388 2025] [:error] [pid 18635:tid 18687] [client 52.175.54.91:44757] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aTX4JW4kCC_HamQRuE1zyQAAAFY"]
[Mon Dec 08 05:56:54.544394 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:53660] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aTX4JqdUeDkxwo12SG8lzAAAAYc"]
[Mon Dec 08 05:56:55.343510 2025] [:error] [pid 54705:tid 54734] [client 52.175.54.91:53647] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aTX4J6dUeDkxwo12SG8l1wAAAYA"]
[Mon Dec 08 05:56:56.422088 2025] [:error] [pid 18636:tid 18696] [client 52.175.54.91:44728] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aTX4KOgdXnohVr6jm71G6wAAAIQ"]
[Mon Dec 08 05:56:57.484547 2025] [:error] [pid 54705:tid 54758] [client 52.175.54.91:44747] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aTX4KadUeDkxwo12SG8l6QAAAZg"]
[Mon Dec 08 05:56:58.857045 2025] [:error] [pid 18634:tid 18655] [client 52.175.54.91:53640] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTX4Kp-H1wCBKPf4vhN81QAAABE"]
[Mon Dec 08 05:57:00.027695 2025] [:error] [pid 18636:tid 18705] [client 52.175.54.91:44739] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTX4LOgdXnohVr6jm71G7gAAAI0"]
[Mon Dec 08 05:57:01.950566 2025] [:error] [pid 18634:tid 18659] [client 52.175.54.91:44778] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTX4LZ-H1wCBKPf4vhN83AAAABU"]
[Mon Dec 08 05:57:03.295903 2025] [:error] [pid 18635:tid 18672] [client 52.175.54.91:44692] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTX4L24kCC_HamQRuE1zzwAAAEc"]
[Mon Dec 08 05:57:03.845822 2025] [:error] [pid 54705:tid 54745] [client 52.175.54.91:44851] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aTX4L6dUeDkxwo12SG8l7wAAAYs"]
[Mon Dec 08 05:57:04.244395 2025] [:error] [pid 54704:tid 54712] [client 52.175.54.91:53702] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aTX4MHL1WYsMMmlqjh4TwAAAAUU"]
[Mon Dec 08 05:57:04.724786 2025] [:error] [pid 54671:tid 54678] [client 52.175.54.91:44686] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aTX4MFqOuiNLLCfVy7-LlQAAAQQ"]
[Mon Dec 08 05:57:05.745800 2025] [:error] [pid 18635:tid 18688] [client 52.175.54.91:53680] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aTX4MW4kCC_HamQRuE1z0gAAAFc"]
[Mon Dec 08 05:57:06.555912 2025] [:error] [pid 18726:tid 18734] [client 52.175.54.91:53643] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aTX4MlwVbxmJGL5LHAc5BwAAAMY"]
[Mon Dec 08 05:57:06.935665 2025] [:error] [pid 18635:tid 18671] [client 52.175.54.91:44672] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aTX4Mm4kCC_HamQRuE1z1gAAAEY"]
[Mon Dec 08 05:57:07.699649 2025] [:error] [pid 54671:tid 54681] [client 52.175.54.91:44822] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aTX4M1qOuiNLLCfVy7-LmQAAAQc"]
[Mon Dec 08 05:57:08.368736 2025] [:error] [pid 18634:tid 18648] [client 52.175.54.91:44775] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aTX4NJ-H1wCBKPf4vhN84wAAAAo"]
[Mon Dec 08 05:57:08.872506 2025] [:error] [pid 18726:tid 18735] [client 52.175.54.91:53740] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aTX4NFwVbxmJGL5LHAc5EAAAAMc"]
[Mon Dec 08 05:57:10.224042 2025] [:error] [pid 54704:tid 54721] [client 52.175.54.91:44743] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aTX4NnL1WYsMMmlqjh4T1AAAAU4"]
[Mon Dec 08 05:57:11.020039 2025] [:error] [pid 54704:tid 54725] [client 52.175.54.91:44725] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aTX4N3L1WYsMMmlqjh4T2AAAAVI"]
[Mon Dec 08 05:57:11.421692 2025] [:error] [pid 18635:tid 18666] [client 52.175.54.91:44848] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aTX4N24kCC_HamQRuE1z4AAAAEE"]
[Mon Dec 08 05:57:12.650791 2025] [:error] [pid 18636:tid 18710] [client 52.175.54.91:53720] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aTX4OOgdXnohVr6jm71HBQAAAJI"]
[Mon Dec 08 05:57:13.886564 2025] [:error] [pid 18636:tid 18692] [client 52.175.54.91:44774] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aTX4OegdXnohVr6jm71HDwAAAIA"]
[Mon Dec 08 05:57:20.644251 2025] [:error] [pid 54671:tid 54698] [client 52.175.54.91:44845] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aTX4QFqOuiNLLCfVy7-L5QAAARg"]
[Mon Dec 08 05:57:21.307621 2025] [:error] [pid 54704:tid 54724] [client 52.175.54.91:44824] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aTX4QXL1WYsMMmlqjh4UKgAAAVE"]
[Mon Dec 08 05:57:21.868332 2025] [:error] [pid 18726:tid 18749] [client 52.175.54.91:44676] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aTX4QVwVbxmJGL5LHAc5TAAAANU"]
[Mon Dec 08 05:57:22.641806 2025] [:error] [pid 54704:tid 54711] [client 52.175.54.91:44756] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aTX4QnL1WYsMMmlqjh4ULgAAAUQ"]
[Mon Dec 08 05:57:27.323703 2025] [:error] [pid 18726:tid 18740] [client 52.175.54.91:53661] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aTX4R1wVbxmJGL5LHAc5ZAAAAMw"]
[Mon Dec 08 05:57:32.630289 2025] [:error] [pid 54704:tid 54709] [client 52.175.54.91:44742] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aTX4THL1WYsMMmlqjh4UOgAAAUI"]
[Mon Dec 08 05:57:33.974586 2025] [:error] [pid 18634:tid 18645] [client 52.175.54.91:44716] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aTX4TZ-H1wCBKPf4vhN9JgAAAAc"]
[Mon Dec 08 05:57:35.066166 2025] [:error] [pid 54671:tid 54691] [client 52.175.54.91:44796] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aTX4T1qOuiNLLCfVy7-L_AAAARE"]
[Mon Dec 08 05:57:36.402247 2025] [:error] [pid 18726:tid 18750] [client 52.175.54.91:44776] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aTX4UFwVbxmJGL5LHAc5bAAAANY"]
[Mon Dec 08 05:57:38.482873 2025] [:error] [pid 18636:tid 18699] [client 52.175.54.91:44847] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aTX4UugdXnohVr6jm71HNAAAAIc"]
[Mon Dec 08 05:57:40.876448 2025] [:error] [pid 54705:tid 54749] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Dec 08 05:57:41.400042 2025] [:error] [pid 54705:tid 54746] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/zfile.php
[Mon Dec 08 05:57:41.522020 2025] [:error] [pid 54705:tid 54740] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Mon Dec 08 05:57:41.671015 2025] [:error] [pid 54705:tid 54739] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/des.php
[Mon Dec 08 05:57:41.815956 2025] [:error] [pid 54705:tid 54752] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Mon Dec 08 05:57:41.957950 2025] [:error] [pid 54705:tid 54748] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Mon Dec 08 05:57:42.079497 2025] [:error] [pid 54705:tid 54751] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Dec 08 05:57:42.204672 2025] [:error] [pid 54705:tid 54756] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Mon Dec 08 05:57:42.327324 2025] [:error] [pid 54705:tid 54745] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Dec 08 05:57:42.455920 2025] [:error] [pid 54705:tid 54734] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc.php
[Mon Dec 08 05:57:42.591392 2025] [:error] [pid 54705:tid 54741] [client 52.175.54.91:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Mon Dec 08 05:57:42.725868 2025] [:error] [pid 54705:tid 54754] [client 52.175.54.91:53711] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aTX4VqdUeDkxwo12SG8mTQAAAZQ"]
[Mon Dec 08 05:57:43.644622 2025] [:error] [pid 18636:tid 18697] [client 52.175.54.91:44859] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aTX4V-gdXnohVr6jm71HOwAAAIU"]
[Mon Dec 08 05:57:45.824888 2025] [:error] [pid 18634:tid 18660] [client 52.175.54.91:44734] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aTX4WZ-H1wCBKPf4vhN9LAAAABY"]
[Mon Dec 08 05:57:48.235357 2025] [:error] [pid 54671:tid 54683] [client 52.175.54.91:53715] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aTX4XFqOuiNLLCfVy7-MFAAAAQk"]
[Mon Dec 08 05:57:49.438990 2025] [:error] [pid 18634:tid 18652] [client 52.175.54.91:44833] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTX4XZ-H1wCBKPf4vhN9MwAAAA4"]
[Mon Dec 08 05:57:51.583349 2025] [:error] [pid 18726:tid 18740] [client 52.175.54.91:44790] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTX4X1wVbxmJGL5LHAc5dAAAAMw"]
[Mon Dec 08 05:57:54.648097 2025] [:error] [pid 18636:tid 18694] [client 52.175.54.91:53718] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTX4YugdXnohVr6jm71HTAAAAII"]
[Mon Dec 08 05:57:56.360866 2025] [:error] [pid 18636:tid 18699] [client 52.175.54.91:53690] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTX4ZOgdXnohVr6jm71HTwAAAIc"]
[Mon Dec 08 06:19:33.885857 2025] [:error] [pid 54705:tid 54754] [client 54.224.221.20:50280] [client 54.224.221.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aTX9dadUeDkxwo12SG8vhgAAAZQ"]
[Mon Dec 08 11:46:39.344190 2025] [:error] [pid 53927:tid 53941] [client 45.88.186.148:52563] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTZKH7TtIvPZ1Cm2r06bOgAAAQw"]
[Mon Dec 08 11:46:39.763208 2025] [:error] [pid 53927:tid 53944] [client 45.88.186.148:52700] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTZKH7TtIvPZ1Cm2r06bWQAAAQ8"]
[Mon Dec 08 11:46:40.172097 2025] [:error] [pid 43362:tid 43401] [client 45.88.186.148:52866] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTZKIDoamfxHn2vcwqy4RQAAAco"]
[Mon Dec 08 11:46:40.580142 2025] [:error] [pid 39159:tid 39182] [client 45.88.186.148:53017] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTZKIE48HaQt8jqjSbqC4gAAABE"]
[Mon Dec 08 11:46:40.997973 2025] [:error] [pid 39161:tid 39222] [client 45.88.186.148:53190] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTZKIOQBy-JdpUuZzWf4QQAAAII"]
[Mon Dec 08 18:47:52.248835 2025] [:error] [pid 58758:tid 58767] [client 209.97.156.74:55770] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aTas2ABS5U6_vVkyhEebxwAAAEU"], referer: binance.com
[Mon Dec 08 21:43:30.832454 2025] [:error] [pid 48541:tid 48552] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Mon Dec 08 21:43:31.133060 2025] [:error] [pid 48541:tid 48545] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Mon Dec 08 21:43:31.736183 2025] [:error] [pid 48541:tid 48550] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Dec 08 21:43:32.037408 2025] [:error] [pid 48541:tid 48553] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Mon Dec 08 21:43:32.339381 2025] [:error] [pid 48541:tid 48567] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Mon Dec 08 21:43:32.642346 2025] [:error] [pid 48541:tid 48554] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Mon Dec 08 21:43:32.942755 2025] [:error] [pid 48541:tid 48562] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Mon Dec 08 21:43:33.846019 2025] [:error] [pid 48541:tid 48548] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Mon Dec 08 21:43:34.147103 2025] [:error] [pid 48541:tid 48551] [client 45.86.202.183:26081] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Mon Dec 08 21:43:34.745247 2025] [:error] [pid 48541:tid 48552] [client 45.86.202.183:26081] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTbWBgSNhJPArxLCdWEFkQAAAQk"]
[Mon Dec 08 21:43:45.342717 2025] [:error] [pid 48541:tid 48561] [client 45.86.202.184:55317] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aTbWEQSNhJPArxLCdWEFuwAAARI"]
[Mon Dec 08 21:43:45.940197 2025] [:error] [pid 48482:tid 48528] [client 45.86.202.162:32253] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aTbWEX23gV7gRu3vn82LJQAAAJA"]
[Mon Dec 08 21:43:46.535444 2025] [:error] [pid 48573:tid 48583] [client 45.86.202.193:44099] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aTbWElIayuqwlm3CEkaO2wAAAUg"]
[Mon Dec 08 22:20:55.884364 2025] [:error] [pid 48541:tid 48559] [client 101.32.15.141:45216] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTbexwSNhJPArxLCdWEUtAAAARA"]
[Tue Dec 09 00:04:41.860762 2025] [:error] [pid 48481:tid 48502] [client 136.144.33.207:64427] [client 136.144.33.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.207, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTb3GSe0pzx5KCi3S0JPZQAAANE"]
[Tue Dec 09 00:04:41.865124 2025] [:error] [pid 48481:tid 48502] [client 136.144.33.207:64427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Dec 09 01:20:32.437746 2025] [:error] [pid 17589:tid 17668] [client 101.201.227.219:38480] [client 101.201.227.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/plugins/Ueditor/dialogs/attachment/fileTypeImages/icon_psd.gif"] [unique_id "aTcI4I3u_N_j630LWcCJ2AAAAVU"], referer: http://www.pumpbooking.com/public/plugins/Ueditor/dialogs/attachment/fileTypeImages/icon_psd.gif
[Tue Dec 09 01:20:32.542029 2025] [:error] [pid 17589:tid 17658] [client 101.201.227.219:38506] [client 101.201.227.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/plugins/Ueditor/dialogs/attachment/fileTypeImages/icon_psd.gif"] [unique_id "aTcI4I3u_N_j630LWcCJ2QAAAUs"], referer: http://pumpbooking.com/public/plugins/Ueditor/dialogs/attachment/fileTypeImages/icon_psd.gif
[Tue Dec 09 05:11:33.763417 2025] [:error] [pid 34783:tid 34786] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.de/
[Tue Dec 09 05:11:33.850786 2025] [:error] [pid 34783:tid 34794] [client 4.194.53.139:62522] [client 4.194.53.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.53.139, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTc_Ba17odLapL7SFcwkMQAAAUk"], referer: https://www.bing.com/
[Tue Dec 09 05:11:33.855207 2025] [:error] [pid 34783:tid 34794] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.bing.com/
[Tue Dec 09 05:11:34.084646 2025] [:error] [pid 34783:tid 34788] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:34.176900 2025] [:error] [pid 34783:tid 34793] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php, referer: https://www.google.de/
[Tue Dec 09 05:11:34.272319 2025] [:error] [pid 34783:tid 34799] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.com/
[Tue Dec 09 05:11:34.365813 2025] [:error] [pid 34783:tid 34796] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.com/
[Tue Dec 09 05:11:34.453823 2025] [:error] [pid 34783:tid 34807] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:35.574795 2025] [:error] [pid 34783:tid 34797] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.fr/
[Tue Dec 09 05:11:37.295259 2025] [:error] [pid 34783:tid 34795] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://duckduckgo.com/
[Tue Dec 09 05:11:38.406508 2025] [:error] [pid 34783:tid 34802] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:11:40.059253 2025] [:error] [pid 34783:tid 34788] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.fr/
[Tue Dec 09 05:11:40.656512 2025] [:error] [pid 34783:tid 34804] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:40.749348 2025] [:error] [pid 34783:tid 34793] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:41.110307 2025] [:error] [pid 34783:tid 34800] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.bing.com/
[Tue Dec 09 05:11:41.208175 2025] [:error] [pid 34783:tid 34807] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:11:41.476745 2025] [:error] [pid 34783:tid 34791] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Tue Dec 09 05:11:43.027258 2025] [:error] [pid 34783:tid 34797] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:11:43.117528 2025] [:error] [pid 34783:tid 34808] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.de/
[Tue Dec 09 05:11:43.313122 2025] [:error] [pid 34783:tid 34792] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.bing.com/
[Tue Dec 09 05:11:43.403827 2025] [:error] [pid 34783:tid 34785] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:43.833056 2025] [:error] [pid 34783:tid 34790] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:11:43.925014 2025] [:error] [pid 34783:tid 34789] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://www.google.fr/
[Tue Dec 09 05:11:44.019392 2025] [:error] [pid 34783:tid 34801] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:45.565992 2025] [:error] [pid 34783:tid 34788] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:11:48.817065 2025] [:error] [pid 34783:tid 34785] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:11:48.918032 2025] [:error] [pid 34783:tid 34790] [client 4.194.53.139:62522] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Tue Dec 09 05:11:49.007801 2025] [:error] [pid 34783:tid 34789] [client 4.194.53.139:62522] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTc_Fa17odLapL7SFcwkcgAAAUQ"], referer: https://www.google.com/
[Tue Dec 09 05:11:49.738091 2025] [:error] [pid 62040:tid 62084] [client 4.194.53.139:62411] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTc_FfkSVjwLGqZL-9JdcwAAAE4"], referer: https://www.yahoo.com/
[Tue Dec 09 05:11:50.626396 2025] [:error] [pid 62124:tid 62144] [client 4.194.53.139:62431] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTc_FlraBX51GaCVVuU3SAAAANE"], referer: https://www.google.fr/
[Tue Dec 09 05:11:52.928572 2025] [:error] [pid 26689:tid 26739] [client 4.194.53.139:62492] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTc_GNkbfj8nyBvIyRAj9gAAAQQ"], referer: https://www.yahoo.com/
[Tue Dec 09 05:11:54.065244 2025] [:error] [pid 26689:tid 26738] [client 4.194.53.139:62428] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTc_Gtkbfj8nyBvIyRAj9wAAAQM"], referer: https://www.google.com/
[Tue Dec 09 05:11:56.398818 2025] [:error] [pid 62041:tid 62113] [client 4.194.53.139:62423] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTc_HPOmnJGvfaNPxPNJhwAAAJA"], referer: https://www.google.co.uk/
[Tue Dec 09 05:11:58.040146 2025] [:error] [pid 34783:tid 34800] [client 4.194.53.139:62504] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTc_Hq17odLapL7SFcwkewAAAU8"], referer: https://www.google.de/
[Tue Dec 09 05:11:59.575977 2025] [:error] [pid 62039:tid 62058] [client 4.194.53.139:62494] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTc_H6-WdjFepfLrlW51SQAAAA8"], referer: https://www.yahoo.com/
[Tue Dec 09 05:12:00.709342 2025] [:error] [pid 62040:tid 62079] [client 4.194.53.139:62415] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aTc_IPkSVjwLGqZL-9JdegAAAEk"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:01.767729 2025] [:error] [pid 62041:tid 62099] [client 4.194.53.139:62426] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTc_IfOmnJGvfaNPxPNJiwAAAII"], referer: https://www.google.com/
[Tue Dec 09 05:12:02.606624 2025] [:error] [pid 26689:tid 26740] [client 4.194.53.139:62429] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTc_Itkbfj8nyBvIyRAj-gAAAQU"], referer: https://www.bing.com/
[Tue Dec 09 05:12:03.778662 2025] [:error] [pid 62041:tid 62120] [client 4.194.53.139:62473] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTc_I_OmnJGvfaNPxPNJjAAAAJc"], referer: https://www.yahoo.com/
[Tue Dec 09 05:12:04.347355 2025] [:error] [pid 62039:tid 62044] [client 4.194.53.139:62472] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTc_JK-WdjFepfLrlW51UwAAAAE"], referer: https://www.yahoo.com/
[Tue Dec 09 05:12:05.221866 2025] [:error] [pid 26689:tid 26745] [client 4.194.53.139:62425] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTc_Jdkbfj8nyBvIyRAj_AAAAQo"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:06.456592 2025] [:error] [pid 62040:tid 62085] [client 4.194.53.139:62410] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTc_JvkSVjwLGqZL-9JdfAAAAE8"], referer: https://www.yahoo.com/
[Tue Dec 09 05:12:07.364955 2025] [:error] [pid 34783:tid 34798] [client 4.194.53.139:62484] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTc_J617odLapL7SFcwkrQAAAU0"], referer: https://www.google.de/
[Tue Dec 09 05:12:08.787506 2025] [:error] [pid 62040:tid 62073] [client 4.194.53.139:62408] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTc_KPkSVjwLGqZL-9JdfQAAAEM"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:10.527477 2025] [:error] [pid 26689:tid 26748] [client 4.194.53.139:62474] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTc_Ktkbfj8nyBvIyRAj_gAAAQw"], referer: https://www.google.de/
[Tue Dec 09 05:12:11.905269 2025] [:error] [pid 62040:tid 62092] [client 4.194.53.139:62516] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTc_K_kSVjwLGqZL-9JdfwAAAFY"], referer: https://www.google.de/
[Tue Dec 09 05:12:12.833259 2025] [:error] [pid 62039:tid 62045] [client 4.194.53.139:62526] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTc_LK-WdjFepfLrlW51VQAAAAI"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:13.713803 2025] [:error] [pid 62124:tid 62127] [client 4.194.53.139:62508] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTc_LVraBX51GaCVVuU3VAAAAMA"], referer: https://www.google.fr/
[Tue Dec 09 05:12:15.308903 2025] [:error] [pid 26689:tid 26739] [client 4.194.53.139:62502] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTc_L9kbfj8nyBvIyRAj_wAAAQQ"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:16.413049 2025] [:error] [pid 62041:tid 62121] [client 4.194.53.139:62467] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTc_MPOmnJGvfaNPxPNJkgAAAJg"], referer: https://www.google.com/
[Tue Dec 09 05:12:17.523259 2025] [:error] [pid 62041:tid 62117] [client 4.194.53.139:62517] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTc_MfOmnJGvfaNPxPNJkwAAAJQ"], referer: https://www.bing.com/
[Tue Dec 09 05:12:18.567620 2025] [:error] [pid 62041:tid 62108] [client 4.194.53.139:12268] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTc_MvOmnJGvfaNPxPNJlQAAAIs"], referer: https://www.bing.com/
[Tue Dec 09 05:12:19.686968 2025] [:error] [pid 62041:tid 62104] [client 4.194.53.139:62486] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aTc_M_OmnJGvfaNPxPNJlwAAAIc"], referer: https://www.google.de/
[Tue Dec 09 05:12:20.319143 2025] [:error] [pid 34783:tid 34785] [client 4.194.53.139:62465] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTc_NK17odLapL7SFcwksAAAAUA"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:21.028198 2025] [:error] [pid 62039:tid 62057] [client 4.194.53.139:62523] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTc_Na-WdjFepfLrlW51WgAAAA4"], referer: https://www.google.com/
[Tue Dec 09 05:12:21.881896 2025] [:error] [pid 62039:tid 62060] [client 4.194.53.139:12273] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTc_Na-WdjFepfLrlW51WwAAABE"], referer: https://www.yahoo.com/
[Tue Dec 09 05:12:22.201238 2025] [:error] [pid 62041:tid 62112] [client 4.194.53.139:62422] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTc_NvOmnJGvfaNPxPNJmgAAAI8"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:22.754755 2025] [:error] [pid 26689:tid 26735] [client 4.194.53.139:62421] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTc_Ntkbfj8nyBvIyRAkKAAAAQA"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:23.449376 2025] [:error] [pid 26689:tid 26738] [client 4.194.53.139:62475] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTc_N9kbfj8nyBvIyRAkLAAAAQM"], referer: https://www.google.de/
[Tue Dec 09 05:12:24.190734 2025] [:error] [pid 62040:tid 62076] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:24.283139 2025] [:error] [pid 62040:tid 62083] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.google.com/
[Tue Dec 09 05:12:24.391654 2025] [:error] [pid 62040:tid 62081] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:24.483136 2025] [:error] [pid 62040:tid 62087] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php, referer: https://www.google.com/
[Tue Dec 09 05:12:24.588741 2025] [:error] [pid 62040:tid 62079] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php, referer: https://duckduckgo.com/
[Tue Dec 09 05:12:24.684497 2025] [:error] [pid 62040:tid 62078] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Tue Dec 09 05:12:25.112095 2025] [:error] [pid 62040:tid 62072] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.com/
[Tue Dec 09 05:12:25.567124 2025] [:error] [pid 62040:tid 62077] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.de/
[Tue Dec 09 05:12:25.655105 2025] [:error] [pid 62040:tid 62082] [client 4.194.53.139:62500] [client 4.194.53.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.194.53.139, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTc_OfkSVjwLGqZL-9JdigAAAEw"], referer: https://www.google.de/
[Tue Dec 09 05:12:25.659607 2025] [:error] [pid 62040:tid 62082] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.de/
[Tue Dec 09 05:12:26.022065 2025] [:error] [pid 62040:tid 62089] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:12:26.706380 2025] [:error] [pid 62040:tid 62090] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:26.957542 2025] [:error] [pid 62040:tid 62073] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:27.048846 2025] [:error] [pid 62040:tid 62088] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.fr/
[Tue Dec 09 05:12:27.295475 2025] [:error] [pid 62040:tid 62084] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:27.473979 2025] [:error] [pid 62040:tid 62074] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php, referer: https://www.google.fr/
[Tue Dec 09 05:12:27.564882 2025] [:error] [pid 62040:tid 62092] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Tue Dec 09 05:12:27.660901 2025] [:error] [pid 62040:tid 62093] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://duckduckgo.com/
[Tue Dec 09 05:12:27.867834 2025] [:error] [pid 62040:tid 62075] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.yahoo.com/
[Tue Dec 09 05:12:27.956579 2025] [:error] [pid 62040:tid 62080] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.google.de/
[Tue Dec 09 05:12:28.062721 2025] [:error] [pid 62040:tid 62094] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.de/
[Tue Dec 09 05:12:28.153776 2025] [:error] [pid 62040:tid 62071] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.fr/
[Tue Dec 09 05:12:28.573951 2025] [:error] [pid 62040:tid 62076] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.de/
[Tue Dec 09 05:12:28.941897 2025] [:error] [pid 62040:tid 62083] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.fr/
[Tue Dec 09 05:12:29.224236 2025] [:error] [pid 62040:tid 62087] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:29.338120 2025] [:error] [pid 62040:tid 62079] [client 4.194.53.139:62500] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.co.uk/
[Tue Dec 09 05:12:30.281534 2025] [:error] [pid 62040:tid 62085] [client 4.194.53.139:62500] [client 4.194.53.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.53.139, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTc_PvkSVjwLGqZL-9JdpAAAAE8"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:35.799527 2025] [:error] [pid 62040:tid 62092] [client 4.194.53.139:62500] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTc_Q_kSVjwLGqZL-9JdxAAAAFY"], referer: https://www.bing.com/
[Tue Dec 09 05:12:36.468069 2025] [:error] [pid 34783:tid 34795] [client 4.194.53.139:62483] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTc_RK17odLapL7SFcwk1gAAAUo"], referer: https://www.yahoo.com/
[Tue Dec 09 05:12:38.383057 2025] [:error] [pid 26689:tid 26735] [client 4.194.53.139:62430] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTc_Rtkbfj8nyBvIyRAkUAAAAQA"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:40.152086 2025] [:error] [pid 62039:tid 62049] [client 4.194.53.139:62482] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTc_SK-WdjFepfLrlW51ZwAAAAY"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:40.988915 2025] [:error] [pid 62124:tid 62132] [client 4.194.53.139:12277] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTc_SFraBX51GaCVVuU3YQAAAMU"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:42.859221 2025] [:error] [pid 62040:tid 62081] [client 4.194.53.139:62419] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTc_SvkSVjwLGqZL-9JdygAAAEs"], referer: https://www.bing.com/
[Tue Dec 09 05:12:44.306649 2025] [:error] [pid 34783:tid 34796] [client 4.194.53.139:12247] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTc_TK17odLapL7SFcwk2wAAAUs"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:45.417657 2025] [:error] [pid 62041:tid 62112] [client 4.194.53.139:62416] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTc_TfOmnJGvfaNPxPNJrQAAAI8"], referer: https://duckduckgo.com/
[Tue Dec 09 05:12:47.571610 2025] [:error] [pid 26689:tid 26745] [client 4.194.53.139:62495] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTc_T9kbfj8nyBvIyRAkVgAAAQo"], referer: https://www.google.de/
[Tue Dec 09 05:12:49.068544 2025] [:error] [pid 62041:tid 62101] [client 4.194.53.139:62490] [client 4.194.53.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTc_UfOmnJGvfaNPxPNJrwAAAIQ"], referer: https://www.google.co.uk/
[Tue Dec 09 05:12:49.961401 2025] [:error] [pid 34783:tid 34805] [client 4.194.53.139:62406] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.fr/
[Tue Dec 09 05:12:56.213075 2025] [autoindex:error] [pid 34783:tid 34808] [client 4.194.53.139:62406] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Dec 09 10:04:44.542469 2025] [:error] [pid 26689:tid 26745] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Tue Dec 09 10:04:44.879667 2025] [:error] [pid 26689:tid 26752] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Tue Dec 09 10:04:45.554211 2025] [:error] [pid 26689:tid 26735] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Dec 09 10:04:45.892231 2025] [:error] [pid 26689:tid 26748] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Tue Dec 09 10:04:46.234987 2025] [:error] [pid 26689:tid 26759] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Tue Dec 09 10:04:46.572259 2025] [:error] [pid 26689:tid 26742] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Tue Dec 09 10:04:46.910135 2025] [:error] [pid 26689:tid 26758] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Tue Dec 09 10:04:47.928181 2025] [:error] [pid 26689:tid 26736] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Tue Dec 09 10:04:48.266985 2025] [:error] [pid 26689:tid 26757] [client 45.86.202.148:46699] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Tue Dec 09 10:04:48.938934 2025] [:error] [pid 26689:tid 26740] [client 45.86.202.148:46699] [client 45.86.202.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTeDwNkbfj8nyBvIyRB79QAAAQU"]
[Tue Dec 09 11:21:03.528789 2025] [:error] [pid 26689:tid 26740] [client 45.138.16.233:61347] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aTeVn9kbfj8nyBvIyRCMpgAAAQU"]
[Tue Dec 09 11:21:06.078963 2025] [:error] [pid 26689:tid 26742] [client 45.138.16.233:61945] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/postnews.php"] [unique_id "aTeVotkbfj8nyBvIyRCMpwAAAQc"]
[Tue Dec 09 11:21:06.679709 2025] [:error] [pid 62039:tid 62051] [client 45.138.16.233:62072] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/postnews.php"] [unique_id "aTeVoq-WdjFepfLrlW70dQAAAAg"]
[Tue Dec 09 13:18:16.969389 2025] [:error] [pid 7325:tid 7377] [client 182.42.111.156:52502] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTexGAqEQlZnpyQAsW0_IwAAAZU"]
[Tue Dec 09 14:46:19.529604 2025] [:error] [pid 7287:tid 7312] [client 103.77.106.81:62425] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aTfFu_3UQf3HGDaVS5P5VgAAABc"]
[Tue Dec 09 14:46:24.148169 2025] [:error] [pid 59388:tid 59408] [client 103.77.106.81:54762] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aTfFwN7acjYK4IXwCBWc5gAAAJI"]
[Tue Dec 09 14:51:23.252423 2025] [:error] [pid 7287:tid 7301] [client 45.138.16.233:60425] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "aTfG6_3UQf3HGDaVS5P7ggAAAAw"], referer: www.google.com
[Tue Dec 09 14:51:23.252423 2025] [:error] [pid 7287:tid 7305] [client 45.138.16.233:50795] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6_3UQf3HGDaVS5P7gwAAABA"], referer: www.google.com
[Tue Dec 09 14:51:23.252495 2025] [:error] [pid 7287:tid 7310] [client 45.138.16.233:60410] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG6_3UQf3HGDaVS5P7hAAAABU"], referer: www.google.com
[Tue Dec 09 14:51:23.253801 2025] [:error] [pid 7382:tid 7400] [client 45.138.16.233:50812] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTfG6ydEXhamGkzwq-gvoAAAAcY"]
[Tue Dec 09 14:51:23.848918 2025] [:error] [pid 7325:tid 7359] [client 45.138.16.233:51186] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6wqEQlZnpyQAsW1YNQAAAYM"], referer: www.google.com
[Tue Dec 09 14:51:23.848951 2025] [:error] [pid 7325:tid 7361] [client 45.138.16.233:51862] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "aTfG6wqEQlZnpyQAsW1YNAAAAYU"], referer: www.google.com
[Tue Dec 09 14:51:23.851179 2025] [:error] [pid 7287:tid 7289] [client 45.138.16.233:50454] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG6_3UQf3HGDaVS5P7hwAAAAA"], referer: www.google.com
[Tue Dec 09 14:51:23.862215 2025] [:error] [pid 7325:tid 7372] [client 45.138.16.233:60376] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTfG6wqEQlZnpyQAsW1YNgAAAZA"]
[Tue Dec 09 14:51:24.149015 2025] [:error] [pid 7287:tid 7295] [client 45.138.16.233:50799] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG7P3UQf3HGDaVS5P7iQAAAAY"], referer: www.google.com
[Tue Dec 09 14:51:24.445051 2025] [:error] [pid 12069:tid 12084] [client 45.138.16.233:51115] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "aTfG7GwNDNgPF6LHYDTaJQAAAE0"], referer: www.google.com
[Tue Dec 09 14:51:24.451766 2025] [:error] [pid 7325:tid 7374] [client 45.138.16.233:51119] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7AqEQlZnpyQAsW1YOgAAAZI"], referer: www.google.com
[Tue Dec 09 14:51:24.462952 2025] [:error] [pid 7325:tid 7371] [client 45.138.16.233:51129] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTfG7AqEQlZnpyQAsW1YOwAAAY8"]
[Tue Dec 09 14:51:24.751610 2025] [:error] [pid 59388:tid 59398] [client 45.138.16.233:60594] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG7N7acjYK4IXwCBWfYgAAAIg"], referer: www.google.com
[Tue Dec 09 14:51:25.047986 2025] [:error] [pid 7324:tid 7348] [client 45.138.16.233:63999] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7ef70zXc9zH4rTLSMwAAAVM"], referer: www.google.com
[Tue Dec 09 14:51:25.060176 2025] [:error] [pid 12069:tid 12073] [client 45.138.16.233:64036] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTfG7WwNDNgPF6LHYDTaKAAAAEI"]
[Tue Dec 09 14:51:25.063085 2025] [:error] [pid 12069:tid 12080] [client 45.138.16.233:64000] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "aTfG7WwNDNgPF6LHYDTaKQAAAEk"], referer: www.google.com
[Tue Dec 09 14:51:25.355729 2025] [:error] [pid 7324:tid 7338] [client 45.138.16.233:62159] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG7ef70zXc9zH4rTLSNAAAAUk"], referer: www.google.com
[Tue Dec 09 14:51:25.642717 2025] [:error] [pid 7325:tid 7368] [client 45.138.16.233:60594] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7QqEQlZnpyQAsW1YPAAAAYw"], referer: www.google.com
[Tue Dec 09 14:51:25.656904 2025] [:error] [pid 12069:tid 12078] [client 45.138.16.233:60696] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "aTfG7WwNDNgPF6LHYDTaKgAAAEc"], referer: www.google.com
[Tue Dec 09 14:51:25.663148 2025] [:error] [pid 12069:tid 12085] [client 45.138.16.233:60531] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTfG7WwNDNgPF6LHYDTaKwAAAE4"]
[Tue Dec 09 14:51:26.559199 2025] [:error] [pid 59388:tid 59411] [client 45.138.16.233:64607] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG7t7acjYK4IXwCBWfagAAAJU"], referer: www.google.com
[Tue Dec 09 14:51:26.836533 2025] [:error] [pid 59388:tid 59404] [client 45.138.16.233:62252] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7t7acjYK4IXwCBWfawAAAI4"], referer: www.google.com
[Tue Dec 09 14:51:27.778181 2025] [:error] [pid 59388:tid 59414] [client 45.138.16.233:50831] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG797acjYK4IXwCBWfbQAAAJg"], referer: www.google.com
[Tue Dec 09 14:51:28.072395 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:60270] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG8CdEXhamGkzwq-gvrwAAAc8"], referer: www.google.com
[Tue Dec 09 14:51:28.996258 2025] [:error] [pid 59388:tid 59392] [client 45.138.16.233:51338] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG8N7acjYK4IXwCBWfbwAAAII"], referer: www.google.com
[Tue Dec 09 14:51:29.295668 2025] [:error] [pid 12069:tid 12089] [client 45.138.16.233:58047] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG8WwNDNgPF6LHYDTaPgAAAFI"], referer: www.google.com
[Tue Dec 09 14:51:30.205844 2025] [:error] [pid 59388:tid 59395] [client 45.138.16.233:60521] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG8t7acjYK4IXwCBWfdgAAAIU"], referer: www.google.com
[Tue Dec 09 14:51:30.505048 2025] [:error] [pid 7382:tid 7405] [client 45.138.16.233:60468] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG8idEXhamGkzwq-gvwQAAAcs"], referer: www.google.com
[Tue Dec 09 14:51:31.404301 2025] [:error] [pid 7324:tid 7344] [client 45.138.16.233:59807] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG8-f70zXc9zH4rTLSRgAAAU8"], referer: www.google.com
[Tue Dec 09 14:51:31.720879 2025] [:error] [pid 7324:tid 7334] [client 45.138.16.233:60550] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG8-f70zXc9zH4rTLSRwAAAUU"], referer: www.google.com
[Tue Dec 09 14:54:14.176288 2025] [:error] [pid 7324:tid 7345] [client 103.77.106.81:49638] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aTfHluf70zXc9zH4rTLUbQAAAVA"]
[Tue Dec 09 19:10:06.111499 2025] [:error] [pid 30499:tid 30554] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Dec 09 19:10:06.341372 2025] [:error] [pid 30499:tid 30543] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Dec 09 19:10:06.576828 2025] [:error] [pid 30499:tid 30537] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue Dec 09 19:10:06.849385 2025] [:error] [pid 30499:tid 30534] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Dec 09 19:10:07.181182 2025] [:error] [pid 30499:tid 30552] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Dec 09 19:10:07.620162 2025] [:error] [pid 30499:tid 30538] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Dec 09 19:10:07.954250 2025] [:error] [pid 30499:tid 30531] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Dec 09 19:10:08.270756 2025] [:error] [pid 30499:tid 30549] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 09 19:10:08.722264 2025] [:error] [pid 30499:tid 30543] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Dec 09 19:10:09.254947 2025] [:error] [pid 30499:tid 30551] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue Dec 09 19:10:09.479156 2025] [:error] [pid 30499:tid 30537] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Dec 09 19:10:09.786767 2025] [:error] [pid 30499:tid 30534] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Dec 09 19:10:10.011941 2025] [:error] [pid 30499:tid 30548] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Dec 09 19:10:10.236935 2025] [:error] [pid 30499:tid 30542] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Dec 09 19:10:10.461948 2025] [:error] [pid 30499:tid 30552] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Dec 09 19:10:10.776695 2025] [:error] [pid 30499:tid 30533] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Dec 09 19:10:11.001928 2025] [:error] [pid 30499:tid 30545] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Dec 09 19:10:11.228654 2025] [:error] [pid 30499:tid 30544] [client 192.241.158.145:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Dec 09 19:10:15.201573 2025] [:error] [pid 30499:tid 30550] [client 192.241.158.145:59081] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTgDl00x3OqZTOPp7cnYBgAAAVQ"]
[Tue Dec 09 19:10:16.460388 2025] [:error] [pid 5276:tid 5300] [client 192.241.158.145:62879] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTgDmEtSXwbewdwyu-1YPgAAANY"]
[Tue Dec 09 19:10:17.805565 2025] [:error] [pid 36456:tid 36461] [client 192.241.158.145:63334] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Dec 09 19:10:18.528586 2025] [:error] [pid 36456:tid 36466] [client 192.241.158.145:63334] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aTgDmh0pAnOyfXl_v40TLAAAAIg"]
[Tue Dec 09 19:10:19.535918 2025] [:error] [pid 30591:tid 30603] [client 192.241.158.145:64228] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Dec 09 19:10:19.757960 2025] [:error] [pid 30591:tid 30601] [client 192.241.158.145:64228] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTgDmxG-g76drVdWQUVhVQAAAEc"]
[Tue Dec 09 19:10:20.436693 2025] [:error] [pid 30500:tid 30570] [client 192.241.158.145:64682] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Dec 09 19:10:22.513835 2025] [:error] [pid 30500:tid 30571] [client 192.241.158.145:64682] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTgDnq2eIIK3JPWHCXW5pgAAAY4"]
[Tue Dec 09 19:10:23.212057 2025] [:error] [pid 30500:tid 30567] [client 192.241.158.145:49469] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTgDn62eIIK3JPWHCXW5tgAAAYo"]
[Tue Dec 09 19:10:25.912296 2025] [:error] [pid 36456:tid 36475] [client 192.241.158.145:50360] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTgDoR0pAnOyfXl_v40TNQAAAJE"]
[Tue Dec 09 19:10:27.131464 2025] [:error] [pid 30500:tid 30573] [client 192.241.158.145:50763] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTgDo62eIIK3JPWHCXW5uwAAAZA"]
[Tue Dec 09 19:10:27.633319 2025] [:error] [pid 30500:tid 30577] [client 192.241.158.145:50937] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTgDo62eIIK3JPWHCXW5vgAAAZQ"]
[Tue Dec 09 19:10:28.577596 2025] [:error] [pid 30591:tid 30599] [client 192.241.158.145:51118] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTgDpBG-g76drVdWQUVhXgAAAEU"]
[Tue Dec 09 19:10:29.261429 2025] [:error] [pid 36456:tid 36473] [client 192.241.158.145:51293] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTgDpR0pAnOyfXl_v40TNwAAAI8"]
[Tue Dec 09 19:10:29.901924 2025] [:error] [pid 30591:tid 30608] [client 192.241.158.145:51577] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue Dec 09 19:10:30.723196 2025] [:error] [pid 30591:tid 30607] [client 192.241.158.145:51577] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aTgDphG-g76drVdWQUVhYwAAAE0"]
[Tue Dec 09 19:10:33.062072 2025] [:error] [pid 30591:tid 30612] [client 192.241.158.145:52619] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTgDqRG-g76drVdWQUVhagAAAFI"]
[Tue Dec 09 19:10:34.838031 2025] [:error] [pid 30591:tid 30605] [client 192.241.158.145:53003] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTgDqhG-g76drVdWQUVhfAAAAEs"]
[Tue Dec 09 19:10:35.302261 2025] [:error] [pid 5276:tid 5301] [client 192.241.158.145:53475] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue Dec 09 19:10:35.578770 2025] [:error] [pid 5276:tid 5278] [client 192.241.158.145:53475] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTgDq0tSXwbewdwyu-1YTwAAAMA"]
[Tue Dec 09 19:10:36.050690 2025] [:error] [pid 30591:tid 30606] [client 192.241.158.145:53710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Dec 09 19:10:36.840298 2025] [:error] [pid 30591:tid 30598] [client 192.241.158.145:53710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Dec 09 19:10:37.764309 2025] [:error] [pid 30591:tid 30602] [client 192.241.158.145:53710] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTgDrRG-g76drVdWQUVhhgAAAEg"]
[Tue Dec 09 19:10:38.231355 2025] [:error] [pid 30499:tid 30539] [client 192.241.158.145:54423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Dec 09 19:10:38.877306 2025] [:error] [pid 30499:tid 30551] [client 192.241.158.145:54423] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTgDrk0x3OqZTOPp7cnYKAAAAVU"]
[Tue Dec 09 19:10:39.439103 2025] [:error] [pid 30500:tid 30581] [client 192.241.158.145:54796] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Dec 09 19:10:39.960298 2025] [:error] [pid 30500:tid 30576] [client 192.241.158.145:54796] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aTgDr62eIIK3JPWHCXW5xgAAAZM"]
[Tue Dec 09 19:10:40.822292 2025] [:error] [pid 30499:tid 30545] [client 192.241.158.145:55056] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTgDsE0x3OqZTOPp7cnYKwAAAU8"]
[Tue Dec 09 19:10:41.612183 2025] [:error] [pid 5276:tid 5283] [client 192.241.158.145:55330] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Tue Dec 09 19:10:41.866766 2025] [:error] [pid 5276:tid 5293] [client 192.241.158.145:55330] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Dec 09 19:10:43.554437 2025] [:error] [pid 5276:tid 5295] [client 192.241.158.145:55330] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTgDs0tSXwbewdwyu-1YWwAAANE"]
[Tue Dec 09 19:10:44.446591 2025] [:error] [pid 36456:tid 36464] [client 192.241.158.145:56341] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTgDtB0pAnOyfXl_v40TQwAAAIY"]
[Tue Dec 09 19:10:45.146158 2025] [:error] [pid 5276:tid 5292] [client 192.241.158.145:56616] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTgDtUtSXwbewdwyu-1YXQAAAM4"]
[Tue Dec 09 19:10:46.136453 2025] [:error] [pid 30500:tid 30562] [client 192.241.158.145:57042] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTgDtq2eIIK3JPWHCXW5zAAAAYU"]
[Tue Dec 09 19:10:46.910218 2025] [:error] [pid 30499:tid 30535] [client 192.241.158.145:57298] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTgDtk0x3OqZTOPp7cnYLgAAAUU"]
[Tue Dec 09 19:10:47.923839 2025] [:error] [pid 30500:tid 30576] [client 192.241.158.145:57520] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Dec 09 19:10:48.145692 2025] [:error] [pid 30500:tid 30563] [client 192.241.158.145:57520] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aTgDuK2eIIK3JPWHCXW50gAAAYY"]
[Tue Dec 09 19:10:48.647920 2025] [:error] [pid 30500:tid 30566] [client 192.241.158.145:57840] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aTgDuK2eIIK3JPWHCXW50wAAAYk"]
[Tue Dec 09 19:10:49.105336 2025] [:error] [pid 30591:tid 30610] [client 192.241.158.145:57992] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTgDuRG-g76drVdWQUVhjgAAAFA"]
[Tue Dec 09 19:10:50.047013 2025] [:error] [pid 36456:tid 36468] [client 192.241.158.145:58171] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Dec 09 19:10:50.547139 2025] [:error] [pid 36456:tid 36469] [client 192.241.158.145:58171] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue Dec 09 19:10:51.775725 2025] [:error] [pid 36456:tid 36462] [client 192.241.158.145:58171] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aTgDux0pAnOyfXl_v40TUgAAAIQ"]
[Tue Dec 09 19:10:52.963877 2025] [:error] [pid 30499:tid 30550] [client 192.241.158.145:58950] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTgDvE0x3OqZTOPp7cnYNgAAAVQ"]
[Tue Dec 09 19:10:53.201856 2025] [:error] [pid 30499:tid 30548] [client 192.241.158.145:58950] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue Dec 09 19:10:54.354743 2025] [:error] [pid 30499:tid 30538] [client 192.241.158.145:58950] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Dec 09 19:10:54.585520 2025] [:error] [pid 30499:tid 30544] [client 192.241.158.145:58950] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Dec 09 19:10:56.064454 2025] [:error] [pid 30499:tid 30540] [client 192.241.158.145:58950] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTgDwE0x3OqZTOPp7cnYQwAAAUo"]
[Tue Dec 09 19:10:57.516511 2025] [:error] [pid 5276:tid 5281] [client 192.241.158.145:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Dec 09 19:10:57.739237 2025] [:error] [pid 5276:tid 5288] [client 192.241.158.145:60563] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTgDwUtSXwbewdwyu-1YYgAAAMo"]
[Tue Dec 09 19:10:58.252800 2025] [:error] [pid 5276:tid 5282] [client 192.241.158.145:60563] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aTgDwktSXwbewdwyu-1YZAAAAMQ"]
[Tue Dec 09 19:10:59.631467 2025] [:error] [pid 5276:tid 5280] [client 192.241.158.145:61160] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Dec 09 19:11:00.222580 2025] [:error] [pid 5276:tid 5301] [client 192.241.158.145:61160] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Tue Dec 09 19:11:01.771198 2025] [:error] [pid 5276:tid 5292] [client 192.241.158.145:61160] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTgDxUtSXwbewdwyu-1YcAAAAM4"]
[Tue Dec 09 19:11:02.512845 2025] [:error] [pid 30500:tid 30562] [client 192.241.158.145:62030] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Dec 09 19:11:03.630455 2025] [:error] [pid 30500:tid 30576] [client 192.241.158.145:62030] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Tue Dec 09 19:11:04.851946 2025] [:error] [pid 30500:tid 30557] [client 192.241.158.145:62030] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Tue Dec 09 19:11:05.309023 2025] [:error] [pid 30500:tid 30567] [client 192.241.158.145:62030] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Dec 09 19:11:05.543878 2025] [:error] [pid 30500:tid 30579] [client 192.241.158.145:62030] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTgDya2eIIK3JPWHCXW58AAAAZY"]
[Tue Dec 09 19:11:06.082158 2025] [:error] [pid 30498:tid 30509] [client 192.241.158.145:62828] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Dec 09 19:11:06.307702 2025] [:error] [pid 30498:tid 30507] [client 192.241.158.145:62828] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Dec 09 19:11:06.538924 2025] [:error] [pid 30498:tid 30504] [client 192.241.158.145:62828] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTgDyh2mcZJQ5qP_RC0b5gAAAAI"]
[Tue Dec 09 19:11:07.640249 2025] [:error] [pid 36456:tid 36479] [client 192.241.158.145:63068] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Dec 09 19:11:08.100066 2025] [:error] [pid 36456:tid 36475] [client 192.241.158.145:63068] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aTgDzB0pAnOyfXl_v40TWwAAAJE"]
[Tue Dec 09 19:11:09.171171 2025] [:error] [pid 36456:tid 36469] [client 192.241.158.145:63068] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTgDzR0pAnOyfXl_v40TXAAAAIs"]
[Tue Dec 09 19:11:12.801922 2025] [:error] [pid 36456:tid 36459] [client 192.241.158.145:63677] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue Dec 09 19:11:14.613258 2025] [:error] [pid 36456:tid 36461] [client 192.241.158.145:63677] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Dec 09 19:11:14.839201 2025] [:error] [pid 36456:tid 36479] [client 192.241.158.145:63677] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTgD0h0pAnOyfXl_v40TbwAAAJU"]
[Tue Dec 09 19:11:15.323386 2025] [:error] [pid 30500:tid 30565] [client 192.241.158.145:65385] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Dec 09 19:11:16.073113 2025] [:error] [pid 30500:tid 30571] [client 192.241.158.145:65385] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTgD1K2eIIK3JPWHCXW5-gAAAY4"]
[Tue Dec 09 19:11:16.430502 2025] [:error] [pid 30500:tid 30579] [client 192.241.158.145:65385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue Dec 09 19:11:16.661725 2025] [:error] [pid 30500:tid 30570] [client 192.241.158.145:65385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Tue Dec 09 19:11:16.901774 2025] [:error] [pid 30500:tid 30566] [client 192.241.158.145:65385] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Tue Dec 09 19:11:17.127704 2025] [:error] [pid 30500:tid 30568] [client 192.241.158.145:65385] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTgD1a2eIIK3JPWHCXW5_wAAAYs"]
[Tue Dec 09 19:11:17.827846 2025] [:error] [pid 36456:tid 36469] [client 192.241.158.145:49762] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Dec 09 19:11:18.055116 2025] [:error] [pid 36456:tid 36470] [client 192.241.158.145:49762] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aTgD1h0pAnOyfXl_v40TcQAAAIw"]
[Tue Dec 09 19:11:18.957210 2025] [:error] [pid 5276:tid 5286] [client 192.241.158.145:50018] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Dec 09 19:11:19.232358 2025] [:error] [pid 5276:tid 5297] [client 192.241.158.145:50018] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTgD10tSXwbewdwyu-1YeAAAANM"]
[Tue Dec 09 19:11:20.387886 2025] [:error] [pid 30500:tid 30572] [client 192.241.158.145:50300] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Dec 09 19:11:20.929284 2025] [:error] [pid 30500:tid 30574] [client 192.241.158.145:50300] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTgD2K2eIIK3JPWHCXW6BwAAAZE"]
[Tue Dec 09 19:11:21.485367 2025] [:error] [pid 30499:tid 30539] [client 192.241.158.145:50705] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTgD2U0x3OqZTOPp7cnYUgAAAUk"]
[Tue Dec 09 19:11:22.418366 2025] [:error] [pid 30499:tid 30534] [client 192.241.158.145:50885] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue Dec 09 19:11:22.754919 2025] [:error] [pid 30499:tid 30534] [client 192.241.158.145:50885] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Tue Dec 09 19:11:27.198025 2025] [:error] [pid 30499:tid 30542] [client 192.241.158.145:50885] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTgD300x3OqZTOPp7cnYXQAAAUw"]
[Tue Dec 09 19:11:28.012427 2025] [:error] [pid 30500:tid 30566] [client 192.241.158.145:52313] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTgD4K2eIIK3JPWHCXW6DQAAAYk"]
[Tue Dec 09 19:11:29.472883 2025] [:error] [pid 30500:tid 30580] [client 192.241.158.145:52522] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aTgD4a2eIIK3JPWHCXW6EwAAAZc"]
[Tue Dec 09 19:11:30.586494 2025] [:error] [pid 30498:tid 30513] [client 192.241.158.145:53001] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Dec 09 19:11:31.202165 2025] [:error] [pid 30498:tid 30518] [client 192.241.158.145:53001] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Tue Dec 09 19:11:31.425336 2025] [:error] [pid 30498:tid 30512] [client 192.241.158.145:53001] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTgD4x2mcZJQ5qP_RC0b8QAAAAo"]
[Tue Dec 09 19:11:31.984973 2025] [:error] [pid 36456:tid 36459] [client 192.241.158.145:53411] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Dec 09 19:11:33.211029 2025] [:error] [pid 36456:tid 36472] [client 192.241.158.145:53411] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aTgD5R0pAnOyfXl_v40TeQAAAI4"]
[Tue Dec 09 19:11:34.657137 2025] [:error] [pid 30499:tid 30543] [client 192.241.158.145:54058] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTgD5k0x3OqZTOPp7cnYZAAAAU0"]
[Tue Dec 09 19:11:35.431117 2025] [:error] [pid 30591:tid 30612] [client 192.241.158.145:54482] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Dec 09 19:11:36.138714 2025] [:error] [pid 30591:tid 30606] [client 192.241.158.145:54482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue Dec 09 19:11:37.383387 2025] [:error] [pid 30591:tid 30604] [client 192.241.158.145:54482] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Dec 09 19:11:37.611282 2025] [:error] [pid 30591:tid 30598] [client 192.241.158.145:54482] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTgD6RG-g76drVdWQUVhsgAAAEQ"]
[Tue Dec 09 19:11:38.444341 2025] [:error] [pid 30499:tid 30544] [client 192.241.158.145:55575] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aTgD6k0x3OqZTOPp7cnYZgAAAU4"]
[Tue Dec 09 19:11:38.907411 2025] [:error] [pid 30498:tid 30504] [client 192.241.158.145:55710] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTgD6h2mcZJQ5qP_RC0b8wAAAAI"]
[Tue Dec 09 19:11:39.350690 2025] [:error] [pid 30500:tid 30579] [client 192.241.158.145:55922] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTgD662eIIK3JPWHCXW6FwAAAZY"]
[Tue Dec 09 19:11:39.822994 2025] [:error] [pid 30498:tid 30523] [client 192.241.158.145:56116] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Tue Dec 09 19:11:40.048312 2025] [:error] [pid 30498:tid 30515] [client 192.241.158.145:56116] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTgD7B2mcZJQ5qP_RC0b9QAAAA0"]
[Tue Dec 09 19:11:40.957879 2025] [:error] [pid 30499:tid 30547] [client 192.241.158.145:56355] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTgD7E0x3OqZTOPp7cnYZwAAAVE"]
[Tue Dec 09 19:11:42.075192 2025] [:error] [pid 30500:tid 30563] [client 192.241.158.145:56724] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Dec 09 19:11:42.577172 2025] [:error] [pid 30500:tid 30581] [client 192.241.158.145:56724] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTgD7q2eIIK3JPWHCXW6GwAAAZg"]
[Tue Dec 09 19:11:43.046374 2025] [:error] [pid 30500:tid 30560] [client 192.241.158.145:57110] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTgD762eIIK3JPWHCXW6HAAAAYM"]
[Tue Dec 09 19:11:43.586664 2025] [:error] [pid 30500:tid 30561] [client 192.241.158.145:57270] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTgD762eIIK3JPWHCXW6HQAAAYQ"]
[Tue Dec 09 19:11:44.535235 2025] [:error] [pid 30499:tid 30533] [client 192.241.158.145:57462] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTgD8E0x3OqZTOPp7cnYaAAAAUM"]
[Tue Dec 09 19:11:45.832916 2025] [:error] [pid 30500:tid 30565] [client 192.241.158.145:57606] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTgD8a2eIIK3JPWHCXW6IQAAAYg"]
[Tue Dec 09 19:11:47.514461 2025] [:error] [pid 5276:tid 5293] [client 192.241.158.145:58069] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTgD80tSXwbewdwyu-1YhQAAAM8"]
[Tue Dec 09 19:11:48.005617 2025] [:error] [pid 30591:tid 30617] [client 192.241.158.145:58427] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Dec 09 19:11:48.690740 2025] [:error] [pid 30591:tid 30616] [client 192.241.158.145:58427] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Tue Dec 09 19:11:48.918393 2025] [:error] [pid 30591:tid 30618] [client 192.241.158.145:58427] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTgD9BG-g76drVdWQUVhvAAAAFg"]
[Tue Dec 09 19:11:49.630854 2025] [:error] [pid 30500:tid 30573] [client 192.241.158.145:58995] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Tue Dec 09 19:11:49.864733 2025] [:error] [pid 30500:tid 30558] [client 192.241.158.145:58995] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Tue Dec 09 19:11:52.297144 2025] [:error] [pid 30500:tid 30576] [client 192.241.158.145:58995] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aTgD-K2eIIK3JPWHCXW6MQAAAZM"]
[Tue Dec 09 19:11:53.739123 2025] [:error] [pid 30500:tid 30579] [client 192.241.158.145:60152] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTgD-a2eIIK3JPWHCXW6NQAAAZY"]
[Tue Dec 09 19:11:54.258653 2025] [:error] [pid 30499:tid 30545] [client 192.241.158.145:60661] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTgD-k0x3OqZTOPp7cnYbgAAAU8"]
[Tue Dec 09 19:12:00.907886 2025] [:error] [pid 30500:tid 30569] [client 192.241.158.145:61026] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTgEAK2eIIK3JPWHCXW6QQAAAYw"]
[Tue Dec 09 19:12:02.429312 2025] [:error] [pid 36456:tid 36459] [client 192.241.158.145:62769] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Tue Dec 09 19:12:02.692045 2025] [:error] [pid 36456:tid 36463] [client 192.241.158.145:62769] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Tue Dec 09 19:12:02.940068 2025] [:error] [pid 36456:tid 36467] [client 192.241.158.145:62769] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Tue Dec 09 19:12:03.167131 2025] [:error] [pid 36456:tid 36471] [client 192.241.158.145:62769] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Tue Dec 09 19:12:05.095640 2025] [:error] [pid 36456:tid 36476] [client 192.241.158.145:62769] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTgEBR0pAnOyfXl_v40TmgAAAJI"]
[Tue Dec 09 19:12:05.684145 2025] [:error] [pid 36456:tid 36460] [client 192.241.158.145:63512] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTgEBR0pAnOyfXl_v40TnQAAAII"]
[Tue Dec 09 19:12:06.819207 2025] [:error] [pid 5276:tid 5283] [client 192.241.158.145:63663] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTgEBktSXwbewdwyu-1YjQAAAMU"]
[Tue Dec 09 19:12:08.013629 2025] [:error] [pid 30500:tid 30576] [client 192.241.158.145:63826] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTgECK2eIIK3JPWHCXW6WwAAAZM"]
[Tue Dec 09 19:12:08.468797 2025] [:error] [pid 5276:tid 5297] [client 192.241.158.145:64114] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTgECEtSXwbewdwyu-1YkAAAANM"]
[Tue Dec 09 19:12:10.783223 2025] [:error] [pid 30498:tid 30502] [client 192.241.158.145:64592] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTgECh2mcZJQ5qP_RC0cBAAAAAA"]
[Tue Dec 09 19:12:11.910615 2025] [:error] [pid 30498:tid 30512] [client 192.241.158.145:64893] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTgECx2mcZJQ5qP_RC0cCAAAAAo"]
[Tue Dec 09 19:12:14.054703 2025] [:error] [pid 5276:tid 5300] [client 192.241.158.145:49205] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTgEDktSXwbewdwyu-1YlAAAANY"]
[Tue Dec 09 19:12:14.535992 2025] [:error] [pid 36456:tid 36461] [client 192.241.158.145:49505] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTgEDh0pAnOyfXl_v40TogAAAIM"]
[Tue Dec 09 19:12:14.999086 2025] [:error] [pid 36456:tid 36469] [client 192.241.158.145:49692] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTgEDh0pAnOyfXl_v40TpAAAAIs"]
[Tue Dec 09 19:12:18.528356 2025] [:error] [pid 5276:tid 5285] [client 192.241.158.145:49950] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTgEEktSXwbewdwyu-1YmgAAAMc"]
[Tue Dec 09 19:12:19.223304 2025] [:error] [pid 30499:tid 30545] [client 192.241.158.145:50870] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTgEE00x3OqZTOPp7cnYgwAAAU8"]
[Tue Dec 09 19:12:21.454311 2025] [:error] [pid 30500:tid 30570] [client 192.241.158.145:51793] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Dec 09 19:12:22.028385 2025] [:error] [pid 30500:tid 30571] [client 192.241.158.145:51793] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTgEFq2eIIK3JPWHCXW6cwAAAY4"]
[Tue Dec 09 19:12:24.098298 2025] [:error] [pid 30500:tid 30580] [client 192.241.158.145:52167] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aTgEGK2eIIK3JPWHCXW6dgAAAZc"]
[Tue Dec 09 19:12:27.817131 2025] [:error] [pid 30500:tid 30578] [client 192.241.158.145:53721] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Tue Dec 09 19:12:28.074282 2025] [:error] [pid 30500:tid 30560] [client 192.241.158.145:53721] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTgEHK2eIIK3JPWHCXW6fgAAAYM"]
[Tue Dec 09 19:12:31.522490 2025] [:error] [pid 30498:tid 30508] [client 192.241.158.145:54538] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Dec 09 19:12:31.800851 2025] [:error] [pid 30498:tid 30516] [client 192.241.158.145:54538] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Tue Dec 09 19:12:32.171203 2025] [:error] [pid 30498:tid 30509] [client 192.241.158.145:54538] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Dec 09 19:12:32.400780 2025] [:error] [pid 30498:tid 30521] [client 192.241.158.145:54538] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTgEIB2mcZJQ5qP_RC0cGgAAABM"]
[Tue Dec 09 19:12:32.928348 2025] [:error] [pid 36456:tid 36474] [client 192.241.158.145:55409] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Dec 09 19:12:33.324364 2025] [:error] [pid 36456:tid 36479] [client 192.241.158.145:55409] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aTgEIR0pAnOyfXl_v40TsgAAAJU"]
[Tue Dec 09 19:12:36.255618 2025] [:error] [pid 30499:tid 30550] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Dec 09 19:12:36.742197 2025] [:error] [pid 30499:tid 30549] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Dec 09 19:12:36.967919 2025] [:error] [pid 30499:tid 30546] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Tue Dec 09 19:12:38.241269 2025] [:error] [pid 30499:tid 30553] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Dec 09 19:12:38.466002 2025] [:error] [pid 30499:tid 30537] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Tue Dec 09 19:12:40.624179 2025] [:error] [pid 30499:tid 30552] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Tue Dec 09 19:12:41.634200 2025] [:error] [pid 30499:tid 30550] [client 192.241.158.145:55844] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Dec 09 19:12:41.945162 2025] [:error] [pid 30499:tid 30531] [client 192.241.158.145:55844] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTgEKU0x3OqZTOPp7cnYoAAAAUE"]
[Tue Dec 09 19:12:42.428320 2025] [:error] [pid 30498:tid 30502] [client 192.241.158.145:58781] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTgEKh2mcZJQ5qP_RC0cNgAAAAA"]
[Tue Dec 09 19:12:43.131424 2025] [:error] [pid 30591:tid 30601] [client 192.241.158.145:59010] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTgEKxG-g76drVdWQUVhzAAAAEc"]
[Tue Dec 09 19:12:43.135137 2025] [:error] [pid 30591:tid 30601] [client 192.241.158.145:59010] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Dec 09 19:12:43.386281 2025] [:error] [pid 30591:tid 30605] [client 192.241.158.145:59010] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Tue Dec 09 19:12:43.620957 2025] [:error] [pid 30591:tid 30610] [client 192.241.158.145:59010] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTgEKxG-g76drVdWQUVhzgAAAFA"]
[Tue Dec 09 19:12:46.559849 2025] [:error] [pid 30591:tid 30603] [client 192.241.158.145:59853] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Dec 09 19:12:47.097117 2025] [:error] [pid 30591:tid 30615] [client 192.241.158.145:59853] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTgELxG-g76drVdWQUVh0QAAAFU"]
[Tue Dec 09 19:12:47.786233 2025] [:error] [pid 30591:tid 30611] [client 192.241.158.145:60699] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTgELxG-g76drVdWQUVh0gAAAFE"]
[Tue Dec 09 19:12:50.426361 2025] [:error] [pid 30500:tid 30570] [client 192.241.158.145:60879] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTgEMq2eIIK3JPWHCXW6jgAAAY0"]
[Tue Dec 09 19:12:51.299756 2025] [:error] [pid 36456:tid 36474] [client 192.241.158.145:62098] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aTgEMx0pAnOyfXl_v40T7wAAAJA"]
[Tue Dec 09 19:12:52.641724 2025] [:error] [pid 36456:tid 36479] [client 192.241.158.145:62327] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Dec 09 19:12:53.336125 2025] [:error] [pid 36456:tid 36469] [client 192.241.158.145:62327] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTgENR0pAnOyfXl_v40T9gAAAIs"]
[Tue Dec 09 19:12:54.560019 2025] [:error] [pid 30498:tid 30508] [client 192.241.158.145:62818] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Tue Dec 09 19:12:56.388665 2025] [:error] [pid 30498:tid 30509] [client 192.241.158.145:62818] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aTgEOB2mcZJQ5qP_RC0cSgAAAAc"]
[Tue Dec 09 19:12:56.999056 2025] [:error] [pid 30591:tid 30609] [client 192.241.158.145:63812] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aTgEOBG-g76drVdWQUVh2QAAAE8"]
[Tue Dec 09 19:12:58.097306 2025] [:error] [pid 30591:tid 30603] [client 192.241.158.145:64030] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Tue Dec 09 19:12:58.326725 2025] [:error] [pid 30591:tid 30611] [client 192.241.158.145:64030] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTgEOhG-g76drVdWQUVh4QAAAFE"]
[Tue Dec 09 19:12:58.913760 2025] [:error] [pid 36456:tid 36480] [client 192.241.158.145:64488] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTgEOh0pAnOyfXl_v40T-AAAAJY"]
[Tue Dec 09 19:13:00.310222 2025] [:error] [pid 36456:tid 36474] [client 192.241.158.145:64761] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Tue Dec 09 19:13:00.673316 2025] [:error] [pid 36456:tid 36466] [client 192.241.158.145:64761] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Tue Dec 09 19:13:01.308535 2025] [:error] [pid 36456:tid 36477] [client 192.241.158.145:64761] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Tue Dec 09 19:13:01.863908 2025] [:error] [pid 36456:tid 36481] [client 192.241.158.145:64761] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aTgEPR0pAnOyfXl_v40UAAAAAJc"]
[Tue Dec 09 19:13:02.406726 2025] [:error] [pid 36456:tid 36478] [client 192.241.158.145:49249] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTgEPh0pAnOyfXl_v40UAQAAAJQ"]
[Tue Dec 09 19:13:12.098500 2025] [:error] [pid 5276:tid 5283] [client 192.241.158.145:52448] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Dec 09 19:13:12.433938 2025] [:error] [pid 5276:tid 5285] [client 192.241.158.145:52448] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aTgESEtSXwbewdwyu-1YzQAAAMc"]
[Tue Dec 09 19:13:13.083760 2025] [:error] [pid 30499:tid 30542] [client 192.241.158.145:53075] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTgESU0x3OqZTOPp7cnYsQAAAUw"]
[Tue Dec 09 19:13:13.619564 2025] [:error] [pid 5276:tid 5286] [client 192.241.158.145:53264] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTgESUtSXwbewdwyu-1Y0AAAAMg"]
[Tue Dec 09 19:13:16.818100 2025] [:error] [pid 30500:tid 30565] [client 192.241.158.145:53792] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Tue Dec 09 19:13:17.062564 2025] [:error] [pid 30500:tid 30578] [client 192.241.158.145:53792] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTgETa2eIIK3JPWHCXW6ogAAAZU"]
[Tue Dec 09 19:13:18.121796 2025] [:error] [pid 30499:tid 30538] [client 192.241.158.145:54681] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTgETk0x3OqZTOPp7cnYtAAAAUg"]
[Tue Dec 09 19:13:18.683854 2025] [:error] [pid 30500:tid 30568] [client 192.241.158.145:55203] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Dec 09 19:13:19.161692 2025] [:error] [pid 30500:tid 30577] [client 192.241.158.145:55203] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Dec 09 19:13:19.635841 2025] [:error] [pid 30500:tid 30581] [client 192.241.158.145:55203] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Tue Dec 09 19:13:20.801905 2025] [:error] [pid 30500:tid 30569] [client 192.241.158.145:55203] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aTgEUK2eIIK3JPWHCXW6sAAAAYw"]
[Tue Dec 09 19:13:21.273622 2025] [:error] [pid 30500:tid 30576] [client 192.241.158.145:55203] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Tue Dec 09 19:13:21.783001 2025] [:error] [pid 30500:tid 30561] [client 192.241.158.145:55203] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Tue Dec 09 19:13:22.015462 2025] [:error] [pid 30500:tid 30558] [client 192.241.158.145:55203] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Tue Dec 09 19:13:22.698083 2025] [:error] [pid 30500:tid 30563] [client 192.241.158.145:55203] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTgEUq2eIIK3JPWHCXW6vQAAAYY"]
[Tue Dec 09 19:13:23.288685 2025] [:error] [pid 30499:tid 30549] [client 192.241.158.145:56965] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTgEU00x3OqZTOPp7cnYuQAAAVM"]
[Tue Dec 09 19:13:28.180981 2025] [:error] [pid 30499:tid 30541] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Dec 09 19:13:28.612167 2025] [:error] [pid 30499:tid 30539] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Tue Dec 09 19:13:29.205622 2025] [:error] [pid 30499:tid 30543] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Tue Dec 09 19:13:31.058853 2025] [:error] [pid 30499:tid 30544] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Dec 09 19:13:32.142599 2025] [:error] [pid 30499:tid 30546] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Tue Dec 09 19:13:36.723729 2025] [:error] [pid 30499:tid 30549] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Dec 09 19:13:37.200715 2025] [:error] [pid 30499:tid 30531] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Tue Dec 09 19:13:38.930700 2025] [:error] [pid 30499:tid 30551] [client 192.241.158.145:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Dec 09 19:13:40.068059 2025] [:error] [pid 30499:tid 30532] [client 192.241.158.145:56965] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aTgEZE0x3OqZTOPp7cnY4QAAAUI"]
[Tue Dec 09 19:13:41.771957 2025] [:error] [pid 36456:tid 36467] [client 192.241.158.145:62667] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Dec 09 19:13:42.064713 2025] [:error] [pid 36456:tid 36465] [client 192.241.158.145:62667] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTgEZh0pAnOyfXl_v40UIQAAAIc"]
[Tue Dec 09 19:13:42.810971 2025] [:error] [pid 30500:tid 30568] [client 192.241.158.145:63453] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Dec 09 19:13:43.034823 2025] [:error] [pid 30500:tid 30573] [client 192.241.158.145:63453] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTgEZ62eIIK3JPWHCXW6yQAAAZA"]
[Tue Dec 09 19:13:44.326145 2025] [:error] [pid 30499:tid 30530] [client 192.241.158.145:63889] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Tue Dec 09 19:13:45.245913 2025] [:error] [pid 30499:tid 30532] [client 192.241.158.145:63889] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Tue Dec 09 19:13:46.459334 2025] [:error] [pid 30499:tid 30547] [client 192.241.158.145:63889] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Tue Dec 09 19:13:46.697486 2025] [:error] [pid 30499:tid 30535] [client 192.241.158.145:63889] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Tue Dec 09 19:13:47.156671 2025] [:error] [pid 30499:tid 30536] [client 192.241.158.145:63889] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTgEa00x3OqZTOPp7cnY9wAAAUY"]
[Tue Dec 09 19:13:47.684363 2025] [:error] [pid 5276:tid 5287] [client 192.241.158.145:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Tue Dec 09 19:13:48.074183 2025] [:error] [pid 5276:tid 5288] [client 192.241.158.145:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Dec 09 19:13:48.401589 2025] [:error] [pid 5276:tid 5283] [client 192.241.158.145:65347] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTgEbEtSXwbewdwyu-1Y4wAAAMU"]
[Tue Dec 09 19:13:49.339764 2025] [:error] [pid 5276:tid 5280] [client 192.241.158.145:49496] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTgEbUtSXwbewdwyu-1Y5gAAAMI"]
[Tue Dec 09 19:13:51.141101 2025] [:error] [pid 36456:tid 36461] [client 192.241.158.145:49909] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Dec 09 19:13:51.995436 2025] [:error] [pid 36456:tid 36481] [client 192.241.158.145:49909] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Tue Dec 09 19:13:52.288403 2025] [:error] [pid 36456:tid 36475] [client 192.241.158.145:49909] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Tue Dec 09 19:13:52.752376 2025] [:error] [pid 36456:tid 36468] [client 192.241.158.145:49909] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTgEcB0pAnOyfXl_v40ULQAAAIo"]
[Tue Dec 09 19:13:55.340276 2025] [:error] [pid 30591:tid 30606] [client 192.241.158.145:51616] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTgEcxG-g76drVdWQUViGQAAAEw"]
[Tue Dec 09 19:13:57.855873 2025] [:error] [pid 30500:tid 30559] [client 192.241.158.145:52388] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Tue Dec 09 19:13:59.058496 2025] [:error] [pid 30500:tid 30562] [client 192.241.158.145:52388] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTgEd62eIIK3JPWHCXW63wAAAYU"]
[Tue Dec 09 19:14:01.321176 2025] [:error] [pid 5276:tid 5287] [client 192.241.158.145:53459] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aTgEeUtSXwbewdwyu-1Y7wAAAMk"]
[Tue Dec 09 19:14:03.547845 2025] [:error] [pid 30500:tid 30568] [client 192.241.158.145:53910] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Dec 09 19:14:03.800605 2025] [:error] [pid 30500:tid 30573] [client 192.241.158.145:53910] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Tue Dec 09 19:14:04.501415 2025] [:error] [pid 30500:tid 30578] [client 192.241.158.145:53910] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTgEfK2eIIK3JPWHCXW65QAAAZU"]
[Tue Dec 09 19:14:05.365262 2025] [:error] [pid 30499:tid 30553] [client 192.241.158.145:54444] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Tue Dec 09 19:14:06.780162 2025] [:error] [pid 30499:tid 30553] [client 192.241.158.145:54444] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Tue Dec 09 19:14:07.255478 2025] [:error] [pid 30499:tid 30546] [client 192.241.158.145:54444] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Dec 09 19:14:08.473897 2025] [:error] [pid 30499:tid 30541] [client 192.241.158.145:54444] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTgEgE0x3OqZTOPp7cnZHgAAAUs"]
[Tue Dec 09 19:14:09.252876 2025] [:error] [pid 30498:tid 30513] [client 192.241.158.145:55656] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Tue Dec 09 19:14:10.006209 2025] [:error] [pid 30498:tid 30518] [client 192.241.158.145:55656] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTgEgh2mcZJQ5qP_RC0ccQAAABA"]
[Tue Dec 09 19:14:12.193353 2025] [:error] [pid 5276:tid 5300] [client 192.241.158.145:56061] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Tue Dec 09 19:14:13.230031 2025] [:error] [pid 5276:tid 5290] [client 192.241.158.145:56061] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Tue Dec 09 19:14:13.576951 2025] [:error] [pid 5276:tid 5298] [client 192.241.158.145:56061] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Dec 09 19:14:14.096779 2025] [:error] [pid 5276:tid 5282] [client 192.241.158.145:56061] [client 192.241.158.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.241.158.145, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTgEhktSXwbewdwyu-1ZAgAAAMQ"]
[Tue Dec 09 19:14:15.492182 2025] [:error] [pid 5276:tid 5301] [client 192.241.158.145:56061] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTgEh0tSXwbewdwyu-1ZCQAAANc"]
[Tue Dec 09 19:14:17.361487 2025] [:error] [pid 30500:tid 30563] [client 192.241.158.145:57533] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Tue Dec 09 19:14:17.699327 2025] [:error] [pid 30500:tid 30578] [client 192.241.158.145:57533] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTgEia2eIIK3JPWHCXW7AAAAAZU"]
[Tue Dec 09 19:14:18.310896 2025] [:error] [pid 30500:tid 30561] [client 192.241.158.145:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue Dec 09 19:14:18.798340 2025] [:error] [pid 30500:tid 30560] [client 192.241.158.145:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Tue Dec 09 19:14:19.713687 2025] [:error] [pid 30500:tid 30566] [client 192.241.158.145:57877] [client 192.241.158.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTgEi62eIIK3JPWHCXW7DAAAAYk"]
[Tue Dec 09 19:14:20.793777 2025] [:error] [pid 30498:tid 30519] [client 192.241.158.145:58472] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Tue Dec 09 19:14:21.318908 2025] [:error] [pid 30498:tid 30518] [client 192.241.158.145:58472] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/functions.php"] [unique_id "aTgEjR2mcZJQ5qP_RC0cfwAAABA"]
[Tue Dec 09 19:14:23.187627 2025] [:error] [pid 30499:tid 30535] [client 192.241.158.145:59257] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/functions.php"] [unique_id "aTgEj00x3OqZTOPp7cnZIAAAAUU"]
[Tue Dec 09 19:14:25.786685 2025] [:error] [pid 30499:tid 30552] [client 192.241.158.145:59872] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/functions.php"] [unique_id "aTgEkU0x3OqZTOPp7cnZIgAAAVY"]
[Tue Dec 09 19:14:26.337452 2025] [:error] [pid 36456:tid 36474] [client 192.241.158.145:59990] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/functions.php"] [unique_id "aTgEkh0pAnOyfXl_v40UUgAAAJA"]
[Tue Dec 09 19:14:26.788019 2025] [:error] [pid 30591:tid 30600] [client 192.241.158.145:60132] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/functions.php"] [unique_id "aTgEkhG-g76drVdWQUViLQAAAEY"]
[Tue Dec 09 19:14:35.923169 2025] [:error] [pid 30499:tid 30548] [client 192.241.158.145:60292] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aTgEm00x3OqZTOPp7cnZSQAAAVI"]
[Tue Dec 09 19:14:36.871909 2025] [:error] [pid 30498:tid 30511] [client 192.241.158.145:63032] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aTgEnB2mcZJQ5qP_RC0clgAAAAk"]
[Tue Dec 09 19:14:37.493258 2025] [:error] [pid 5276:tid 5278] [client 192.241.158.145:63172] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aTgEnUtSXwbewdwyu-1ZHwAAAMA"]
[Tue Dec 09 19:14:38.535522 2025] [:error] [pid 30499:tid 30551] [client 192.241.158.145:63258] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aTgEnk0x3OqZTOPp7cnZTAAAAVU"]
[Tue Dec 09 19:14:39.100993 2025] [:error] [pid 30499:tid 30538] [client 192.241.158.145:63555] [client 192.241.158.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aTgEn00x3OqZTOPp7cnZTgAAAUg"]
[Tue Dec 09 19:53:49.960978 2025] [:error] [pid 36456:tid 36464] [client 35.192.77.233:60776] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTgNzR0pAnOyfXl_v40ddgAAAIY"]
[Tue Dec 09 19:53:50.413126 2025] [:error] [pid 30591:tid 30598] [client 35.192.77.233:57861] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTgNzhG-g76drVdWQUVtWgAAAEQ"]
[Tue Dec 09 19:53:50.844402 2025] [:error] [pid 30499:tid 30543] [client 35.192.77.233:60662] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzk0x3OqZTOPp7cnmOwAAAU0"]
[Tue Dec 09 20:48:37.420240 2025] [:error] [pid 30499:tid 30538] [client 185.238.231.119:24065] [client 185.238.231.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.119, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTgapU0x3OqZTOPp7cn64AAAAUg"]
[Tue Dec 09 20:48:37.423691 2025] [:error] [pid 30499:tid 30538] [client 185.238.231.119:24065] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Dec 10 06:29:59.952754 2025] [:error] [pid 4155:tid 4168] [client 4.190.188.203:4417] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Dec 10 06:30:00.156022 2025] [:error] [pid 4155:tid 4173] [client 4.190.188.203:4417] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Wed Dec 10 06:30:00.284671 2025] [:error] [pid 4155:tid 4158] [client 4.190.188.203:4417] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Dec 10 06:30:00.549290 2025] [:error] [pid 4155:tid 4163] [client 4.190.188.203:4417] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Wed Dec 10 06:30:00.674130 2025] [:error] [pid 4155:tid 4172] [client 4.190.188.203:4417] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Wed Dec 10 06:30:00.810999 2025] [:error] [pid 4155:tid 4157] [client 4.190.188.203:4417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Dec 10 06:30:00.954951 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:4417] [client 4.190.188.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aTii6BaQ_NfzxmAbMq5ZBgAAAQg"]
[Wed Dec 10 06:30:01.299077 2025] [:error] [pid 16597:tid 16645] [client 4.190.188.203:57897] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Dec 10 06:30:01.447908 2025] [:error] [pid 16597:tid 16651] [client 4.190.188.203:57897] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Dec 10 06:30:01.640393 2025] [:error] [pid 16597:tid 16650] [client 4.190.188.203:57897] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Dec 10 06:30:01.922564 2025] [:error] [pid 16597:tid 16627] [client 4.190.188.203:57897] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Dec 10 06:30:02.045056 2025] [:error] [pid 16597:tid 16649] [client 4.190.188.203:57897] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aTii6m4Hlu0QtpUGkRRDCwAAAdY"]
[Wed Dec 10 06:30:02.489687 2025] [:error] [pid 16596:tid 16606] [client 4.190.188.203:57912] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aTii6nBe21fHOHH2RQoH2QAAAYY"]
[Wed Dec 10 06:30:02.923889 2025] [:error] [pid 16597:tid 16637] [client 4.190.188.203:57858] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aTii6m4Hlu0QtpUGkRRDDAAAAco"]
[Wed Dec 10 06:30:03.587617 2025] [:error] [pid 16566:tid 16574] [client 4.190.188.203:59412] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aTii6yEgzB1153EFuAbLpwAAAUY"]
[Wed Dec 10 06:30:03.962741 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:59454] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index.php"] [unique_id "aTii6xaQ_NfzxmAbMq5ZCAAAARE"]
[Wed Dec 10 06:30:04.287291 2025] [:error] [pid 11266:tid 11277] [client 4.190.188.203:59453] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index.php"] [unique_id "aTii7CXL_Qb0Ip3FW3mcAwAAAAc"]
[Wed Dec 10 06:30:04.564807 2025] [:error] [pid 16597:tid 16641] [client 4.190.188.203:4208] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index.php"] [unique_id "aTii7G4Hlu0QtpUGkRRDEQAAAc4"]
[Wed Dec 10 06:30:05.234763 2025] [:error] [pid 4155:tid 4171] [client 4.190.188.203:57892] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index.php"] [unique_id "aTii7RaQ_NfzxmAbMq5ZCQAAAQ4"]
[Wed Dec 10 06:30:05.737145 2025] [:error] [pid 4155:tid 4170] [client 4.190.188.203:59411] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pepe.php"] [unique_id "aTii7RaQ_NfzxmAbMq5ZDAAAAQ0"]
[Wed Dec 10 06:30:06.214055 2025] [:error] [pid 16566:tid 16570] [client 4.190.188.203:59436] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pepe.php"] [unique_id "aTii7iEgzB1153EFuAbLqwAAAUI"]
[Wed Dec 10 06:30:06.877263 2025] [:error] [pid 16596:tid 16607] [client 4.190.188.203:59443] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pepe.php"] [unique_id "aTii7nBe21fHOHH2RQoH3QAAAYc"]
[Wed Dec 10 06:30:07.286748 2025] [:error] [pid 11266:tid 11286] [client 4.190.188.203:4421] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pepe.php"] [unique_id "aTii7yXL_Qb0Ip3FW3mcBgAAABA"]
[Wed Dec 10 06:30:07.957339 2025] [:error] [pid 11267:tid 11300] [client 4.190.188.203:57889] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/z.php"] [unique_id "aTii74Y2npWNIVl2IDyiLQAAAEM"]
[Wed Dec 10 06:30:08.543582 2025] [:error] [pid 11266:tid 11291] [client 4.190.188.203:4469] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/z.php"] [unique_id "aTii8CXL_Qb0Ip3FW3mcCAAAABU"]
[Wed Dec 10 06:30:09.105893 2025] [:error] [pid 16566:tid 16572] [client 4.190.188.203:57877] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/z.php"] [unique_id "aTii8SEgzB1153EFuAbLrwAAAUQ"]
[Wed Dec 10 06:30:09.562599 2025] [:error] [pid 11354:tid 11362] [client 4.190.188.203:4436] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/z.php"] [unique_id "aTii8e2TFO6mVSqWP8QhKAAAAMU"]
[Wed Dec 10 06:30:09.932233 2025] [:error] [pid 11267:tid 11320] [client 4.190.188.203:59432] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTii8YY2npWNIVl2IDyiLwAAAFc"]
[Wed Dec 10 06:30:10.389621 2025] [:error] [pid 11267:tid 11311] [client 4.190.188.203:59426] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTii8oY2npWNIVl2IDyiMAAAAE4"]
[Wed Dec 10 06:30:10.813931 2025] [:error] [pid 11267:tid 11306] [client 4.190.188.203:4189] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTii8oY2npWNIVl2IDyiMgAAAEk"]
[Wed Dec 10 06:30:11.195323 2025] [:error] [pid 4155:tid 4179] [client 4.190.188.203:4420] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTii8xaQ_NfzxmAbMq5ZEwAAARY"]
[Wed Dec 10 06:30:11.532651 2025] [:error] [pid 16597:tid 16649] [client 4.190.188.203:4193] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/404.php"] [unique_id "aTii824Hlu0QtpUGkRRDFQAAAdY"]
[Wed Dec 10 06:30:12.135436 2025] [:error] [pid 16597:tid 16632] [client 4.190.188.203:4465] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/404.php"] [unique_id "aTii9G4Hlu0QtpUGkRRDFgAAAcU"]
[Wed Dec 10 06:30:12.528737 2025] [:error] [pid 16596:tid 16616] [client 4.190.188.203:4442] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/404.php"] [unique_id "aTii9HBe21fHOHH2RQoH4AAAAZA"]
[Wed Dec 10 06:30:12.959864 2025] [:error] [pid 11266:tid 11286] [client 4.190.188.203:57882] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/404.php"] [unique_id "aTii9CXL_Qb0Ip3FW3mcGQAAABA"]
[Wed Dec 10 06:30:13.410079 2025] [:error] [pid 16597:tid 16642] [client 4.190.188.203:59428] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTii9W4Hlu0QtpUGkRRDFwAAAc8"]
[Wed Dec 10 06:30:13.987308 2025] [:error] [pid 4155:tid 4168] [client 4.190.188.203:57913] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTii9RaQ_NfzxmAbMq5ZHQAAAQs"]
[Wed Dec 10 06:30:14.414835 2025] [:error] [pid 11268:tid 11342] [client 4.190.188.203:63817] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTii9rbpLcj9WqyQndwa8QAAAJI"]
[Wed Dec 10 06:30:14.929395 2025] [:error] [pid 4155:tid 4158] [client 4.190.188.203:4432] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTii9haQ_NfzxmAbMq5ZIAAAAQE"]
[Wed Dec 10 06:30:15.285285 2025] [:error] [pid 11354:tid 11370] [client 4.190.188.203:57872] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aTii9-2TFO6mVSqWP8QhLQAAAM0"]
[Wed Dec 10 06:30:15.694928 2025] [:error] [pid 16566:tid 16571] [client 4.190.188.203:57885] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aTii9yEgzB1153EFuAbLtgAAAUM"]
[Wed Dec 10 06:30:16.049287 2025] [:error] [pid 16597:tid 16647] [client 4.190.188.203:57861] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aTii-G4Hlu0QtpUGkRRDHAAAAdQ"]
[Wed Dec 10 06:30:16.445864 2025] [:error] [pid 4155:tid 4177] [client 4.190.188.203:4183] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/build.php"] [unique_id "aTii-BaQ_NfzxmAbMq5ZJQAAARQ"]
[Wed Dec 10 06:30:16.954265 2025] [:error] [pid 11266:tid 11281] [client 4.190.188.203:57902] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aTii-CXL_Qb0Ip3FW3mcIwAAAAs"]
[Wed Dec 10 06:30:17.440025 2025] [:error] [pid 11354:tid 11359] [client 4.190.188.203:59407] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aTii-e2TFO6mVSqWP8QhMQAAAMI"]
[Wed Dec 10 06:30:17.794224 2025] [:error] [pid 4155:tid 4163] [client 4.190.188.203:4165] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aTii-RaQ_NfzxmAbMq5ZKgAAAQY"]
[Wed Dec 10 06:30:18.138074 2025] [:error] [pid 11267:tid 11302] [client 4.190.188.203:59429] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/config.php"] [unique_id "aTii-oY2npWNIVl2IDyiOwAAAEU"]
[Wed Dec 10 06:30:18.556093 2025] [:error] [pid 11267:tid 11301] [client 4.190.188.203:57915] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file4.php"] [unique_id "aTii-oY2npWNIVl2IDyiPAAAAEQ"]
[Wed Dec 10 06:30:19.078129 2025] [:error] [pid 16597:tid 16640] [client 4.190.188.203:4169] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file4.php"] [unique_id "aTii-24Hlu0QtpUGkRRDIQAAAc0"]
[Wed Dec 10 06:30:19.491874 2025] [:error] [pid 11354:tid 11358] [client 4.190.188.203:59414] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file4.php"] [unique_id "aTii--2TFO6mVSqWP8QhMwAAAME"]
[Wed Dec 10 06:30:19.852287 2025] [:error] [pid 11354:tid 11356] [client 4.190.188.203:59413] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file4.php"] [unique_id "aTii--2TFO6mVSqWP8QhNQAAAMA"]
[Wed Dec 10 06:30:20.363030 2025] [:error] [pid 11354:tid 11368] [client 4.190.188.203:57886] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ot.php"] [unique_id "aTii_O2TFO6mVSqWP8QhNgAAAMs"]
[Wed Dec 10 06:30:20.628860 2025] [:error] [pid 4155:tid 4171] [client 4.190.188.203:57911] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ot.php"] [unique_id "aTii_BaQ_NfzxmAbMq5ZNQAAAQ4"]
[Wed Dec 10 06:30:20.931804 2025] [:error] [pid 4155:tid 4180] [client 4.190.188.203:4163] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ot.php"] [unique_id "aTii_BaQ_NfzxmAbMq5ZOgAAARc"]
[Wed Dec 10 06:30:21.331157 2025] [:error] [pid 11267:tid 11307] [client 4.190.188.203:57881] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ot.php"] [unique_id "aTii_YY2npWNIVl2IDyiQgAAAEo"]
[Wed Dec 10 06:30:21.651140 2025] [:error] [pid 4155:tid 4166] [client 4.190.188.203:4426] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alfa.php"] [unique_id "aTii_RaQ_NfzxmAbMq5ZRgAAAQk"]
[Wed Dec 10 06:30:22.051788 2025] [:error] [pid 11266:tid 11281] [client 4.190.188.203:4167] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alfa.php"] [unique_id "aTii_iXL_Qb0Ip3FW3mcNQAAAAs"]
[Wed Dec 10 06:30:22.472402 2025] [:error] [pid 16596:tid 16619] [client 4.190.188.203:4447] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alfa.php"] [unique_id "aTii_nBe21fHOHH2RQoH9QAAAZM"]
[Wed Dec 10 06:30:22.831037 2025] [:error] [pid 11266:tid 11286] [client 4.190.188.203:57894] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alfa.php"] [unique_id "aTii_iXL_Qb0Ip3FW3mcOgAAABA"]
[Wed Dec 10 06:30:23.132955 2025] [:error] [pid 16597:tid 16636] [client 4.190.188.203:4993] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aTii_24Hlu0QtpUGkRRDLgAAAck"]
[Wed Dec 10 06:30:23.684123 2025] [:error] [pid 11267:tid 11304] [client 4.190.188.203:57914] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aTii_4Y2npWNIVl2IDyiRwAAAEc"]
[Wed Dec 10 06:30:24.072483 2025] [:error] [pid 11267:tid 11316] [client 4.190.188.203:59442] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aTijAIY2npWNIVl2IDyiSAAAAFM"]
[Wed Dec 10 06:30:24.431236 2025] [:error] [pid 11267:tid 11309] [client 4.190.188.203:59445] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lv.php"] [unique_id "aTijAIY2npWNIVl2IDyiSQAAAEw"]
[Wed Dec 10 06:30:24.752091 2025] [:error] [pid 4155:tid 4177] [client 4.190.188.203:4166] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aTijABaQ_NfzxmAbMq5ZXgAAARQ"]
[Wed Dec 10 06:30:25.099069 2025] [:error] [pid 16566:tid 16587] [client 4.190.188.203:4477] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aTijASEgzB1153EFuAbLvQAAAVM"]
[Wed Dec 10 06:30:25.436405 2025] [:error] [pid 16566:tid 16573] [client 4.190.188.203:4161] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aTijASEgzB1153EFuAbLvgAAAUU"]
[Wed Dec 10 06:30:25.812314 2025] [:error] [pid 16566:tid 16571] [client 4.190.188.203:57910] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/admin.php"] [unique_id "aTijASEgzB1153EFuAbLvwAAAUM"]
[Wed Dec 10 06:30:26.106192 2025] [:error] [pid 16596:tid 16616] [client 4.190.188.203:5048] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTijAnBe21fHOHH2RQoH-gAAAZA"]
[Wed Dec 10 06:30:26.427237 2025] [:error] [pid 16597:tid 16643] [client 4.190.188.203:4994] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTijAm4Hlu0QtpUGkRRDOQAAAdA"]
[Wed Dec 10 06:30:26.782460 2025] [:error] [pid 11266:tid 11278] [client 4.190.188.203:4164] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTijAiXL_Qb0Ip3FW3mcRgAAAAg"]
[Wed Dec 10 06:30:27.142886 2025] [:error] [pid 16596:tid 16601] [client 4.190.188.203:4464] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTijA3Be21fHOHH2RQoH_QAAAYE"]
[Wed Dec 10 06:30:27.476164 2025] [:error] [pid 16596:tid 16611] [client 4.190.188.203:59435] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijA3Be21fHOHH2RQoH_gAAAYs"]
[Wed Dec 10 06:30:27.773008 2025] [:error] [pid 11268:tid 11344] [client 4.190.188.203:57918] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijA7bpLcj9WqyQndwa_AAAAJQ"]
[Wed Dec 10 06:30:28.146092 2025] [:error] [pid 4155:tid 4173] [client 4.190.188.203:57878] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijBBaQ_NfzxmAbMq5ZZwAAARA"]
[Wed Dec 10 06:30:28.470418 2025] [:error] [pid 11354:tid 11361] [client 4.190.188.203:4479] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijBO2TFO6mVSqWP8QhWgAAAMQ"]
[Wed Dec 10 06:30:28.768085 2025] [:error] [pid 11268:tid 11343] [client 4.190.188.203:4444] [client 4.190.188.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aTijBLbpLcj9WqyQndwa_wAAAJM"]
[Wed Dec 10 06:30:29.061146 2025] [:error] [pid 16596:tid 16603] [client 4.190.188.203:4425] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manager.php"] [unique_id "aTijBXBe21fHOHH2RQoIBQAAAYM"]
[Wed Dec 10 06:30:29.385637 2025] [:error] [pid 16566:tid 16592] [client 4.190.188.203:57862] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manager.php"] [unique_id "aTijBSEgzB1153EFuAbLxAAAAVg"]
[Wed Dec 10 06:30:29.790905 2025] [:error] [pid 16566:tid 16580] [client 4.190.188.203:57856] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manager.php"] [unique_id "aTijBSEgzB1153EFuAbLxgAAAUw"]
[Wed Dec 10 06:30:30.110332 2025] [:error] [pid 11267:tid 11318] [client 4.190.188.203:5004] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manager.php"] [unique_id "aTijBoY2npWNIVl2IDyiTQAAAFU"]
[Wed Dec 10 06:30:30.452059 2025] [:error] [pid 11267:tid 11303] [client 4.190.188.203:59417] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijBoY2npWNIVl2IDyiTgAAAEY"]
[Wed Dec 10 06:30:30.768937 2025] [:error] [pid 16596:tid 16601] [client 4.190.188.203:59393] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijBnBe21fHOHH2RQoICQAAAYE"]
[Wed Dec 10 06:30:31.077178 2025] [:error] [pid 16597:tid 16646] [client 4.190.188.203:59401] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijB24Hlu0QtpUGkRRDPgAAAdM"]
[Wed Dec 10 06:30:31.540827 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:4186] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/k.php"] [unique_id "aTijByXL_Qb0Ip3FW3mcVAAAAAA"]
[Wed Dec 10 06:30:31.839152 2025] [:error] [pid 4155:tid 4181] [client 4.190.188.203:57909] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ss.php"] [unique_id "aTijBxaQ_NfzxmAbMq5ZdAAAARg"]
[Wed Dec 10 06:30:32.119068 2025] [:error] [pid 16566:tid 16570] [client 4.190.188.203:57879] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ss.php"] [unique_id "aTijCCEgzB1153EFuAbLyQAAAUI"]
[Wed Dec 10 06:30:32.454060 2025] [:error] [pid 16566:tid 16591] [client 4.190.188.203:59449] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ss.php"] [unique_id "aTijCCEgzB1153EFuAbLywAAAVc"]
[Wed Dec 10 06:30:32.776134 2025] [:error] [pid 11267:tid 11311] [client 4.190.188.203:5021] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ss.php"] [unique_id "aTijCIY2npWNIVl2IDyiVAAAAE4"]
[Wed Dec 10 06:30:33.365325 2025] [:error] [pid 11268:tid 11334] [client 4.190.188.203:4449] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTijCbbpLcj9WqyQndwbDAAAAIo"]
[Wed Dec 10 06:30:33.698024 2025] [:error] [pid 16596:tid 16601] [client 4.190.188.203:4459] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTijCXBe21fHOHH2RQoIDwAAAYE"]
[Wed Dec 10 06:30:33.978718 2025] [:error] [pid 16566:tid 16573] [client 4.190.188.203:57916] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTijCSEgzB1153EFuAbLzwAAAUU"]
[Wed Dec 10 06:30:34.244011 2025] [:error] [pid 16597:tid 16639] [client 4.190.188.203:4580] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTijCm4Hlu0QtpUGkRRDRQAAAcw"]
[Wed Dec 10 06:30:34.657227 2025] [:error] [pid 11354:tid 11374] [client 4.190.188.203:4435] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file2.php"] [unique_id "aTijCu2TFO6mVSqWP8QhbwAAANE"]
[Wed Dec 10 06:30:35.017956 2025] [:error] [pid 11354:tid 11379] [client 4.190.188.203:4211] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file2.php"] [unique_id "aTijC-2TFO6mVSqWP8QhcgAAANY"]
[Wed Dec 10 06:30:35.407450 2025] [:error] [pid 11268:tid 11343] [client 4.190.188.203:56336] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file2.php"] [unique_id "aTijC7bpLcj9WqyQndwbGgAAAJM"]
[Wed Dec 10 06:30:35.731631 2025] [:error] [pid 11354:tid 11363] [client 4.190.188.203:59410] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file2.php"] [unique_id "aTijC-2TFO6mVSqWP8QhcwAAAMY"]
[Wed Dec 10 06:30:36.022494 2025] [:error] [pid 11267:tid 11318] [client 4.190.188.203:4212] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/re.php"] [unique_id "aTijDIY2npWNIVl2IDyiXQAAAFU"]
[Wed Dec 10 06:30:36.284635 2025] [:error] [pid 16597:tid 16640] [client 4.190.188.203:4453] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/re.php"] [unique_id "aTijDG4Hlu0QtpUGkRRDTwAAAc0"]
[Wed Dec 10 06:30:36.577464 2025] [:error] [pid 16597:tid 16641] [client 4.190.188.203:59402] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/re.php"] [unique_id "aTijDG4Hlu0QtpUGkRRDUgAAAc4"]
[Wed Dec 10 06:30:36.841131 2025] [:error] [pid 16596:tid 16623] [client 4.190.188.203:57905] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/re.php"] [unique_id "aTijDHBe21fHOHH2RQoIFgAAAZc"]
[Wed Dec 10 06:30:37.257075 2025] [:error] [pid 16596:tid 16607] [client 4.190.188.203:4215] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aTijDXBe21fHOHH2RQoIGgAAAYc"]
[Wed Dec 10 06:30:37.554068 2025] [:error] [pid 16566:tid 16587] [client 4.190.188.203:5007] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aTijDSEgzB1153EFuAbL2gAAAVM"]
[Wed Dec 10 06:30:37.904135 2025] [:error] [pid 11268:tid 11329] [client 4.190.188.203:59447] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aTijDbbpLcj9WqyQndwbLQAAAIU"]
[Wed Dec 10 06:30:38.225076 2025] [:error] [pid 11268:tid 11348] [client 4.190.188.203:4603] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp.php"] [unique_id "aTijDrbpLcj9WqyQndwbLgAAAJg"]
[Wed Dec 10 06:30:38.643347 2025] [:error] [pid 16566:tid 16582] [client 4.190.188.203:4199] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijDiEgzB1153EFuAbL3AAAAU4"]
[Wed Dec 10 06:30:38.907115 2025] [:error] [pid 16597:tid 16634] [client 4.190.188.203:4178] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijDm4Hlu0QtpUGkRRDXgAAAcc"]
[Wed Dec 10 06:30:39.324471 2025] [:error] [pid 16596:tid 16624] [client 4.190.188.203:4428] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijD3Be21fHOHH2RQoIHwAAAZg"]
[Wed Dec 10 06:30:39.722110 2025] [:error] [pid 11354:tid 11375] [client 4.190.188.203:4216] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijD-2TFO6mVSqWP8QhfwAAANI"]
[Wed Dec 10 06:30:40.011394 2025] [:error] [pid 11354:tid 11361] [client 4.190.188.203:4601] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lib.php"] [unique_id "aTijEO2TFO6mVSqWP8QhgQAAAMQ"]
[Wed Dec 10 06:30:40.346302 2025] [:error] [pid 11267:tid 11298] [client 4.190.188.203:4468] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lib.php"] [unique_id "aTijEIY2npWNIVl2IDyifAAAAEE"]
[Wed Dec 10 06:30:40.639034 2025] [:error] [pid 11354:tid 11372] [client 4.190.188.203:63836] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lib.php"] [unique_id "aTijEO2TFO6mVSqWP8QhgwAAAM8"]
[Wed Dec 10 06:30:40.960217 2025] [:error] [pid 16566:tid 16588] [client 4.190.188.203:4571] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lib.php"] [unique_id "aTijECEgzB1153EFuAbL4wAAAVQ"]
[Wed Dec 10 06:30:41.270003 2025] [:error] [pid 16596:tid 16621] [client 4.190.188.203:4433] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class9.php"] [unique_id "aTijEXBe21fHOHH2RQoIKAAAAZU"]
[Wed Dec 10 06:30:41.666338 2025] [:error] [pid 11268:tid 11342] [client 4.190.188.203:4997] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class9.php"] [unique_id "aTijEbbpLcj9WqyQndwbNAAAAJI"]
[Wed Dec 10 06:30:42.015156 2025] [:error] [pid 11267:tid 11302] [client 4.190.188.203:4427] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class9.php"] [unique_id "aTijEoY2npWNIVl2IDyiggAAAEU"]
[Wed Dec 10 06:30:42.376258 2025] [:error] [pid 16596:tid 16602] [client 4.190.188.203:56370] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/class9.php"] [unique_id "aTijEnBe21fHOHH2RQoIKQAAAYI"]
[Wed Dec 10 06:30:42.759408 2025] [:error] [pid 16596:tid 16615] [client 4.190.188.203:59397] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsd.php"] [unique_id "aTijEnBe21fHOHH2RQoILQAAAY8"]
[Wed Dec 10 06:30:43.090953 2025] [:error] [pid 11354:tid 11356] [client 4.190.188.203:4605] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsd.php"] [unique_id "aTijE-2TFO6mVSqWP8QhiAAAAMA"]
[Wed Dec 10 06:30:43.480187 2025] [:error] [pid 4155:tid 4181] [client 4.190.188.203:57908] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsd.php"] [unique_id "aTijExaQ_NfzxmAbMq5ZjgAAARg"]
[Wed Dec 10 06:30:43.920295 2025] [:error] [pid 16566:tid 16582] [client 4.190.188.203:4423] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wsd.php"] [unique_id "aTijEyEgzB1153EFuAbL7wAAAU4"]
[Wed Dec 10 06:30:44.239992 2025] [:error] [pid 16596:tid 16616] [client 4.190.188.203:5040] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTijFHBe21fHOHH2RQoIMgAAAZA"]
[Wed Dec 10 06:30:44.650650 2025] [:error] [pid 11267:tid 11312] [client 4.190.188.203:4457] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTijFIY2npWNIVl2IDyiiwAAAE8"]
[Wed Dec 10 06:30:45.053557 2025] [:error] [pid 4155:tid 4176] [client 4.190.188.203:4553] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTijFRaQ_NfzxmAbMq5ZkQAAARM"]
[Wed Dec 10 06:30:45.510398 2025] [:error] [pid 21255:tid 21260] [client 4.190.188.203:59424] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTijFfOw-vgCwe7hEWEKJgAAAgI"]
[Wed Dec 10 06:30:45.813153 2025] [:error] [pid 21291:tid 21315] [client 4.190.188.203:4590] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijFZreiUgLUUTTKJdC5gAAAlY"]
[Wed Dec 10 06:30:46.114163 2025] [:error] [pid 11266:tid 11285] [client 4.190.188.203:57898] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijFiXL_Qb0Ip3FW3mcfAAAAA8"]
[Wed Dec 10 06:30:46.429652 2025] [:error] [pid 11354:tid 11356] [client 4.190.188.203:4445] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijFu2TFO6mVSqWP8QhlwAAAMA"]
[Wed Dec 10 06:30:46.708895 2025] [:error] [pid 16566:tid 16588] [client 4.190.188.203:57859] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijFiEgzB1153EFuAbMAAAAAVQ"]
[Wed Dec 10 06:30:47.091458 2025] [:error] [pid 16596:tid 16615] [client 4.190.188.203:5019] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTijF3Be21fHOHH2RQoIQQAAAY8"]
[Wed Dec 10 06:30:47.417303 2025] [:error] [pid 16566:tid 16569] [client 4.190.188.203:4213] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTijFyEgzB1153EFuAbMBwAAAUE"]
[Wed Dec 10 06:30:47.781766 2025] [:error] [pid 16597:tid 16639] [client 4.190.188.203:4437] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTijF24Hlu0QtpUGkRRDcQAAAcw"]
[Wed Dec 10 06:30:48.232907 2025] [:error] [pid 21291:tid 21309] [client 4.190.188.203:59452] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTijGJreiUgLUUTTKJdC9gAAAlA"]
[Wed Dec 10 06:30:48.546383 2025] [:error] [pid 21356:tid 21366] [client 4.190.188.203:5001] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mans.php"] [unique_id "aTijGKfG7wIA5S25SldXEgAAAsc"]
[Wed Dec 10 06:30:48.871598 2025] [:error] [pid 16597:tid 16648] [client 4.190.188.203:56326] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mans.php"] [unique_id "aTijGG4Hlu0QtpUGkRRDdQAAAdU"]
[Wed Dec 10 06:30:49.211920 2025] [:error] [pid 11268:tid 11331] [client 4.190.188.203:57904] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mans.php"] [unique_id "aTijGbbpLcj9WqyQndwbQwAAAIc"]
[Wed Dec 10 06:30:49.508627 2025] [:error] [pid 16566:tid 16590] [client 4.190.188.203:59406] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mans.php"] [unique_id "aTijGSEgzB1153EFuAbMDAAAAVY"]
[Wed Dec 10 06:30:49.831219 2025] [:error] [pid 21255:tid 21271] [client 4.190.188.203:59392] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mah.php"] [unique_id "aTijGfOw-vgCwe7hEWEKOgAAAg0"]
[Wed Dec 10 06:30:50.154021 2025] [:error] [pid 16596:tid 16617] [client 4.190.188.203:56368] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mah.php"] [unique_id "aTijGnBe21fHOHH2RQoISQAAAZE"]
[Wed Dec 10 06:30:50.502063 2025] [:error] [pid 21255:tid 21280] [client 4.190.188.203:4223] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mah.php"] [unique_id "aTijGvOw-vgCwe7hEWEKOwAAAhY"]
[Wed Dec 10 06:30:50.804792 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:56327] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mah.php"] [unique_id "aTijGhaQ_NfzxmAbMq5ZqwAAAQg"]
[Wed Dec 10 06:30:51.076725 2025] [:error] [pid 11267:tid 11299] [client 4.190.188.203:59445] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yas.php"] [unique_id "aTijG4Y2npWNIVl2IDyikAAAAEI"]
[Wed Dec 10 06:30:51.575815 2025] [:error] [pid 16597:tid 16629] [client 4.190.188.203:4181] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yas.php"] [unique_id "aTijG24Hlu0QtpUGkRRDewAAAcI"]
[Wed Dec 10 06:30:51.854928 2025] [:error] [pid 21327:tid 21335] [client 4.190.188.203:59405] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yas.php"] [unique_id "aTijG9uj_E2YnwjFG09TPgAAAoY"]
[Wed Dec 10 06:30:52.207481 2025] [:error] [pid 11268:tid 11345] [client 4.190.188.203:4203] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yas.php"] [unique_id "aTijHLbpLcj9WqyQndwbSgAAAJU"]
[Wed Dec 10 06:30:52.676253 2025] [:error] [pid 16566:tid 16588] [client 4.190.188.203:4179] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aTijHCEgzB1153EFuAbMFQAAAVQ"]
[Wed Dec 10 06:30:52.986002 2025] [:error] [pid 11267:tid 11312] [client 4.190.188.203:4438] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aTijHIY2npWNIVl2IDyikQAAAE8"]
[Wed Dec 10 06:30:53.415992 2025] [:error] [pid 11266:tid 11294] [client 4.190.188.203:59441] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aTijHSXL_Qb0Ip3FW3mcigAAABg"]
[Wed Dec 10 06:30:53.851200 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:59431] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gm.php"] [unique_id "aTijHRaQ_NfzxmAbMq5ZtwAAAQg"]
[Wed Dec 10 06:30:54.290652 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:4584] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTijHhaQ_NfzxmAbMq5ZugAAARE"]
[Wed Dec 10 06:30:55.035762 2025] [:error] [pid 21291:tid 21310] [client 4.190.188.203:59408] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTijH5reiUgLUUTTKJdDCgAAAlE"]
[Wed Dec 10 06:30:55.395701 2025] [:error] [pid 21291:tid 21304] [client 4.190.188.203:4205] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTijH5reiUgLUUTTKJdDCwAAAks"]
[Wed Dec 10 06:30:55.692926 2025] [:error] [pid 21327:tid 21341] [client 4.190.188.203:59433] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTijH9uj_E2YnwjFG09TRAAAAow"]
[Wed Dec 10 06:30:55.955429 2025] [:error] [pid 21291:tid 21307] [client 4.190.188.203:4182] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/abc.php"] [unique_id "aTijH5reiUgLUUTTKJdDDgAAAk4"]
[Wed Dec 10 06:30:56.272436 2025] [:error] [pid 21327:tid 21343] [client 4.190.188.203:5046] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/abc.php"] [unique_id "aTijINuj_E2YnwjFG09TRgAAAo4"]
[Wed Dec 10 06:30:56.638566 2025] [:error] [pid 11354:tid 11367] [client 4.190.188.203:57917] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/abc.php"] [unique_id "aTijIO2TFO6mVSqWP8QhogAAAMo"]
[Wed Dec 10 06:30:57.017689 2025] [:error] [pid 16566:tid 16580] [client 4.190.188.203:59430] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/abc.php"] [unique_id "aTijISEgzB1153EFuAbMNgAAAUw"]
[Wed Dec 10 06:30:57.303051 2025] [:error] [pid 11354:tid 11373] [client 4.190.188.203:4201] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aTijIe2TFO6mVSqWP8QhowAAANA"]
[Wed Dec 10 06:30:57.573051 2025] [:error] [pid 21291:tid 21299] [client 4.190.188.203:4217] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aTijIZreiUgLUUTTKJdDFAAAAkY"]
[Wed Dec 10 06:30:57.904810 2025] [:error] [pid 16596:tid 16617] [client 4.190.188.203:56329] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aTijIXBe21fHOHH2RQoIUQAAAZE"]
[Wed Dec 10 06:30:58.191958 2025] [:error] [pid 11354:tid 11367] [client 4.190.188.203:4170] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an.php"] [unique_id "aTijIu2TFO6mVSqWP8QhpgAAAMo"]
[Wed Dec 10 06:30:58.459888 2025] [:error] [pid 16597:tid 16636] [client 4.190.188.203:4992] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blox.php"] [unique_id "aTijIm4Hlu0QtpUGkRRDiwAAAck"]
[Wed Dec 10 06:30:58.774543 2025] [:error] [pid 21356:tid 21360] [client 4.190.188.203:59395] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blox.php"] [unique_id "aTijIqfG7wIA5S25SldXKwAAAsE"]
[Wed Dec 10 06:30:59.066831 2025] [:error] [pid 21291:tid 21305] [client 4.190.188.203:59419] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blox.php"] [unique_id "aTijI5reiUgLUUTTKJdDHQAAAkw"]
[Wed Dec 10 06:30:59.347319 2025] [:error] [pid 11267:tid 11316] [client 4.190.188.203:4194] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blox.php"] [unique_id "aTijI4Y2npWNIVl2IDyimwAAAFM"]
[Wed Dec 10 06:30:59.801180 2025] [:error] [pid 21356:tid 21375] [client 4.190.188.203:59434] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/scx.php7"] [unique_id "aTijI6fG7wIA5S25SldXLAAAAtA"]
[Wed Dec 10 06:31:00.075128 2025] [:error] [pid 11267:tid 11305] [client 4.190.188.203:59427] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/scx.php7"] [unique_id "aTijJIY2npWNIVl2IDyinAAAAEg"]
[Wed Dec 10 06:31:00.381112 2025] [:error] [pid 11268:tid 11333] [client 4.190.188.203:59403] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/scx.php7"] [unique_id "aTijJLbpLcj9WqyQndwbVwAAAIk"]
[Wed Dec 10 06:31:00.807231 2025] [:error] [pid 16597:tid 16646] [client 4.190.188.203:4577] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/scx.php7"] [unique_id "aTijJG4Hlu0QtpUGkRRDjgAAAdM"]
[Wed Dec 10 06:31:01.276148 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/siln.php
[Wed Dec 10 06:31:01.414970 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/mtvcrew.php
[Wed Dec 10 06:31:01.582899 2025] [:error] [pid 4155:tid 4170] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Wed Dec 10 06:31:01.728247 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Wed Dec 10 06:31:01.857590 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/great.php
[Wed Dec 10 06:31:01.983782 2025] [:error] [pid 4155:tid 4170] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Wed Dec 10 06:31:02.119986 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Wed Dec 10 06:31:02.269673 2025] [:error] [pid 4155:tid 4170] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Dec 10 06:31:02.456186 2025] [:error] [pid 4155:tid 4165] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Wed Dec 10 06:31:02.597258 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Dec 10 06:31:02.779343 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:57901] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Wed Dec 10 06:31:02.909247 2025] [:error] [pid 4155:tid 4174] [client 4.190.188.203:57901] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aTijJhaQ_NfzxmAbMq5Z6gAAARE"]
[Wed Dec 10 06:31:03.378176 2025] [:error] [pid 11266:tid 11290] [client 4.190.188.203:4451] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aTijJyXL_Qb0Ip3FW3mcowAAABQ"]
[Wed Dec 10 06:31:03.899680 2025] [:error] [pid 11354:tid 11368] [client 4.190.188.203:4452] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aTijJ-2TFO6mVSqWP8QhtgAAAMs"]
[Wed Dec 10 06:31:04.201572 2025] [:error] [pid 16597:tid 16648] [client 4.190.188.203:56346] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aTijKG4Hlu0QtpUGkRRDoAAAAdU"]
[Wed Dec 10 06:31:04.671219 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:4192] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sid3.php"] [unique_id "aTijKCXL_Qb0Ip3FW3mcpgAAAAA"]
[Wed Dec 10 06:31:05.012055 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:4180] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sid3.php"] [unique_id "aTijKSXL_Qb0Ip3FW3mcpwAAAAA"]
[Wed Dec 10 06:31:05.362873 2025] [:error] [pid 21291:tid 21304] [client 4.190.188.203:4214] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sid3.php"] [unique_id "aTijKZreiUgLUUTTKJdDJgAAAks"]
[Wed Dec 10 06:31:05.693270 2025] [:error] [pid 21255:tid 21280] [client 4.190.188.203:5013] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sid3.php"] [unique_id "aTijKfOw-vgCwe7hEWEKWAAAAhY"]
[Wed Dec 10 06:31:06.037527 2025] [:error] [pid 21357:tid 21390] [client 4.190.188.203:57864] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aTijKkc3Bay7Ugmdmmqv_gAAAwQ"]
[Wed Dec 10 06:31:06.424928 2025] [:error] [pid 21291:tid 21307] [client 4.190.188.203:5024] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aTijKpreiUgLUUTTKJdDKAAAAk4"]
[Wed Dec 10 06:31:06.756991 2025] [:error] [pid 21291:tid 21299] [client 4.190.188.203:59437] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aTijKpreiUgLUUTTKJdDKQAAAkY"]
[Wed Dec 10 06:31:07.122751 2025] [:error] [pid 21356:tid 21380] [client 4.190.188.203:4171] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lock360.php"] [unique_id "aTijK6fG7wIA5S25SldXSAAAAtU"]
[Wed Dec 10 06:31:07.695141 2025] [:error] [pid 21327:tid 21335] [client 4.190.188.203:4187] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/403.php"] [unique_id "aTijK9uj_E2YnwjFG09TUQAAAoY"]
[Wed Dec 10 06:31:08.016033 2025] [:error] [pid 21327:tid 21336] [client 4.190.188.203:59451] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/403.php"] [unique_id "aTijLNuj_E2YnwjFG09TUgAAAoc"]
[Wed Dec 10 06:31:08.318639 2025] [:error] [pid 21255:tid 21280] [client 4.190.188.203:59418] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/403.php"] [unique_id "aTijLPOw-vgCwe7hEWEKXAAAAhY"]
[Wed Dec 10 06:31:08.783177 2025] [:error] [pid 16597:tid 16648] [client 4.190.188.203:57860] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/403.php"] [unique_id "aTijLG4Hlu0QtpUGkRRDpwAAAdU"]
[Wed Dec 10 06:31:09.189199 2025] [:error] [pid 16566:tid 16574] [client 4.190.188.203:56333] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/acp.php"] [unique_id "aTijLSEgzB1153EFuAbMXAAAAUY"]
[Wed Dec 10 06:31:09.654353 2025] [:error] [pid 11267:tid 11316] [client 4.190.188.203:4999] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/acp.php"] [unique_id "aTijLYY2npWNIVl2IDyirAAAAFM"]
[Wed Dec 10 06:31:10.030445 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:56343] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/acp.php"] [unique_id "aTijLiXL_Qb0Ip3FW3mcrQAAAAA"]
[Wed Dec 10 06:31:10.349026 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:57907] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/acp.php"] [unique_id "aTijLiXL_Qb0Ip3FW3mcrgAAAAA"]
[Wed Dec 10 06:31:10.743482 2025] [:error] [pid 21492:tid 21502] [client 4.190.188.203:4184] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shell.php"] [unique_id "aTijLkrR8nuB69ftRrxlLQAAA0c"]
[Wed Dec 10 06:31:11.040174 2025] [:error] [pid 11268:tid 11332] [client 4.190.188.203:4418] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shell.php"] [unique_id "aTijL7bpLcj9WqyQndwbcgAAAIg"]
[Wed Dec 10 06:31:11.400933 2025] [:error] [pid 21357:tid 21406] [client 4.190.188.203:4470] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shell.php"] [unique_id "aTijL0c3Bay7UgmdmmqwAgAAAxQ"]
[Wed Dec 10 06:31:11.683054 2025] [:error] [pid 11354:tid 11371] [client 4.190.188.203:5054] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/shell.php"] [unique_id "aTijL-2TFO6mVSqWP8QhvgAAAM4"]
[Wed Dec 10 06:31:12.172080 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:4177] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aTijMCXL_Qb0Ip3FW3mctQAAAAA"]
[Wed Dec 10 06:31:12.524096 2025] [:error] [pid 21255:tid 21273] [client 4.190.188.203:57906] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aTijMPOw-vgCwe7hEWEKXwAAAg8"]
[Wed Dec 10 06:31:12.855073 2025] [:error] [pid 21255:tid 21276] [client 4.190.188.203:5006] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aTijMPOw-vgCwe7hEWEKYAAAAhI"]
[Wed Dec 10 06:31:13.196017 2025] [:error] [pid 11267:tid 11320] [client 4.190.188.203:4998] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aTijMYY2npWNIVl2IDyisQAAAFc"]
[Wed Dec 10 06:31:13.622481 2025] [:error] [pid 21357:tid 21398] [client 4.190.188.203:4207] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/zxin.php"] [unique_id "aTijMUc3Bay7UgmdmmqwBwAAAww"]
[Wed Dec 10 06:31:13.991569 2025] [:error] [pid 21492:tid 21516] [client 4.190.188.203:4441] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/zxin.php"] [unique_id "aTijMUrR8nuB69ftRrxlMQAAA1U"]
[Wed Dec 10 06:31:14.319918 2025] [:error] [pid 11266:tid 11275] [client 4.190.188.203:4478] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/zxin.php"] [unique_id "aTijMiXL_Qb0Ip3FW3mcugAAAAU"]
[Wed Dec 10 06:31:14.696020 2025] [:error] [pid 11267:tid 11315] [client 4.190.188.203:4458] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/zxin.php"] [unique_id "aTijMoY2npWNIVl2IDyiswAAAFI"]
[Wed Dec 10 06:31:14.990496 2025] [:error] [pid 21357:tid 21397] [client 4.190.188.203:57904] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pass.php"] [unique_id "aTijMkc3Bay7UgmdmmqwCAAAAws"]
[Wed Dec 10 06:31:15.297531 2025] [:error] [pid 21357:tid 21404] [client 4.190.188.203:5020] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pass.php"] [unique_id "aTijM0c3Bay7UgmdmmqwCQAAAxI"]
[Wed Dec 10 06:31:15.657036 2025] [:error] [pid 21492:tid 21518] [client 4.190.188.203:59450] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pass.php"] [unique_id "aTijM0rR8nuB69ftRrxlMwAAA1c"]
[Wed Dec 10 06:31:16.157122 2025] [:error] [pid 16596:tid 16620] [client 4.190.188.203:4461] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pass.php"] [unique_id "aTijNHBe21fHOHH2RQoIZAAAAZQ"]
[Wed Dec 10 06:31:16.487873 2025] [:error] [pid 16596:tid 16606] [client 4.190.188.203:4566] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/moon.php"] [unique_id "aTijNHBe21fHOHH2RQoIZQAAAYY"]
[Wed Dec 10 06:31:16.871593 2025] [:error] [pid 11267:tid 11304] [client 4.190.188.203:57888] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/moon.php"] [unique_id "aTijNIY2npWNIVl2IDyitgAAAEc"]
[Wed Dec 10 06:31:17.207352 2025] [:error] [pid 11354:tid 11371] [client 4.190.188.203:4596] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/moon.php"] [unique_id "aTijNe2TFO6mVSqWP8QhwwAAAM4"]
[Wed Dec 10 06:31:17.634740 2025] [:error] [pid 16596:tid 16606] [client 4.190.188.203:57880] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/moon.php"] [unique_id "aTijNXBe21fHOHH2RQoIZwAAAYY"]
[Wed Dec 10 06:31:17.944849 2025] [:error] [pid 21291:tid 21316] [client 4.190.188.203:4175] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ok.php"] [unique_id "aTijNZreiUgLUUTTKJdDOQAAAlc"]
[Wed Dec 10 06:31:18.565961 2025] [:error] [pid 11266:tid 11280] [client 4.190.188.203:4204] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ok.php"] [unique_id "aTijNiXL_Qb0Ip3FW3mcxAAAAAo"]
[Wed Dec 10 06:31:19.004381 2025] [:error] [pid 21492:tid 21507] [client 4.190.188.203:5015] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ok.php"] [unique_id "aTijN0rR8nuB69ftRrxlNQAAA0w"]
[Wed Dec 10 06:31:19.432001 2025] [:error] [pid 11267:tid 11316] [client 4.190.188.203:4556] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ok.php"] [unique_id "aTijN4Y2npWNIVl2IDyiuAAAAFM"]
[Wed Dec 10 06:31:19.769750 2025] [:error] [pid 11267:tid 11311] [client 4.190.188.203:56324] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijN4Y2npWNIVl2IDyiugAAAE4"]
[Wed Dec 10 06:31:20.074920 2025] [:error] [pid 4155:tid 4158] [client 4.190.188.203:5052] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijOBaQ_NfzxmAbMq5Z9wAAAQE"]
[Wed Dec 10 06:31:20.420753 2025] [:error] [pid 21327:tid 21330] [client 4.190.188.203:5017] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijONuj_E2YnwjFG09TXAAAAoE"]
[Wed Dec 10 06:31:20.730718 2025] [:error] [pid 11354:tid 11374] [client 4.190.188.203:5049] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/v3.php"] [unique_id "aTijOO2TFO6mVSqWP8QhxQAAANE"]
[Wed Dec 10 06:31:21.029029 2025] [:error] [pid 11266:tid 11275] [client 4.190.188.203:4197] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/js.php"] [unique_id "aTijOSXL_Qb0Ip3FW3mcxwAAAAU"]
[Wed Dec 10 06:31:21.372313 2025] [:error] [pid 16566:tid 16581] [client 4.190.188.203:4574] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/js.php"] [unique_id "aTijOSEgzB1153EFuAbMbAAAAU0"]
[Wed Dec 10 06:31:21.753207 2025] [:error] [pid 21255:tid 21280] [client 4.190.188.203:63566] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/js.php"] [unique_id "aTijOfOw-vgCwe7hEWEKaAAAAhY"]
[Wed Dec 10 06:31:22.154166 2025] [:error] [pid 11266:tid 11275] [client 4.190.188.203:4607] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/js.php"] [unique_id "aTijOiXL_Qb0Ip3FW3mcyQAAAAU"]
[Wed Dec 10 06:31:22.523332 2025] [:error] [pid 4155:tid 4166] [client 4.190.188.203:56338] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijOhaQ_NfzxmAbMq5aBgAAAQk"]
[Wed Dec 10 06:31:22.941221 2025] [:error] [pid 11354:tid 11360] [client 4.190.188.203:4456] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijOu2TFO6mVSqWP8QhxgAAAMM"]
[Wed Dec 10 06:31:23.382963 2025] [:error] [pid 11267:tid 11304] [client 4.190.188.203:56376] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijO4Y2npWNIVl2IDyivAAAAEc"]
[Wed Dec 10 06:31:23.676021 2025] [:error] [pid 21291:tid 21315] [client 4.190.188.203:57884] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m.php"] [unique_id "aTijO5reiUgLUUTTKJdDPAAAAlY"]
[Wed Dec 10 06:31:24.005778 2025] [:error] [pid 11354:tid 11368] [client 4.190.188.203:57891] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/f35.php"] [unique_id "aTijPO2TFO6mVSqWP8QhxwAAAMs"]
[Wed Dec 10 06:31:24.443092 2025] [:error] [pid 11266:tid 11293] [client 4.190.188.203:4570] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/f35.php"] [unique_id "aTijPCXL_Qb0Ip3FW3mczQAAABc"]
[Wed Dec 10 06:31:24.792266 2025] [:error] [pid 16597:tid 16636] [client 4.190.188.203:63575] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/f35.php"] [unique_id "aTijPG4Hlu0QtpUGkRRDsgAAAck"]
[Wed Dec 10 06:31:25.178130 2025] [:error] [pid 21357:tid 21405] [client 4.190.188.203:4220] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/f35.php"] [unique_id "aTijPUc3Bay7UgmdmmqwEQAAAxM"]
[Wed Dec 10 06:31:25.444378 2025] [:error] [pid 21357:tid 21408] [client 4.190.188.203:4582] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/hello.php"] [unique_id "aTijPUc3Bay7UgmdmmqwEgAAAxY"]
[Wed Dec 10 06:31:25.852280 2025] [:error] [pid 11266:tid 11270] [client 4.190.188.203:57900] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/hello.php"] [unique_id "aTijPSXL_Qb0Ip3FW3mc0AAAAAA"]
[Wed Dec 10 06:31:26.264243 2025] [:error] [pid 4155:tid 4166] [client 4.190.188.203:4150] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/hello.php"] [unique_id "aTijPhaQ_NfzxmAbMq5aEgAAAQk"]
[Wed Dec 10 06:31:26.578233 2025] [:error] [pid 16596:tid 16606] [client 4.190.188.203:56363] [client 4.190.188.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/hello.php"] [unique_id "aTijPnBe21fHOHH2RQoIbAAAAYY"]
[Wed Dec 10 11:00:04.131306 2025] [:error] [pid 21255:tid 21281] [client 16.144.37.84:36058] [client 16.144.37.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aTjiNPOw-vgCwe7hEWFbjQAAAhc"]
[Wed Dec 10 11:48:38.182756 2025] [:error] [pid 16596:tid 16610] [client 35.88.68.144:43340] [client 35.88.68.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aTjtlnBe21fHOHH2RQpe3gAAAYo"]
[Wed Dec 10 13:45:15.151169 2025] [:error] [pid 21255:tid 21271] [client 34.85.219.91:49281] [client 34.85.219.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.219.91, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTkI6_Ow-vgCwe7hEWF9HAAAAg0"]
[Wed Dec 10 13:45:15.156913 2025] [:error] [pid 21255:tid 21271] [client 34.85.219.91:49281] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 13:45:17.709038 2025] [:error] [pid 21255:tid 21268] [client 34.85.219.91:49281] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTkI7fOw-vgCwe7hEWF9KAAAAgo"]
[Wed Dec 10 13:45:18.171518 2025] [:error] [pid 11268:tid 11344] [client 34.85.219.91:55259] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTkI7rbpLcj9WqyQndxv5AAAAJQ"]
[Wed Dec 10 13:45:18.691416 2025] [:error] [pid 11354:tid 11356] [client 34.85.219.91:63880] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTkI7u2TFO6mVSqWP8SBywAAAMA"]
[Wed Dec 10 13:45:19.150147 2025] [:error] [pid 21327:tid 21347] [client 34.85.219.91:56160] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTkI79uj_E2YnwjFG0-ZkgAAApI"]
[Wed Dec 10 13:45:19.593005 2025] [:error] [pid 16596:tid 16609] [client 34.85.219.91:61724] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTkI73Be21fHOHH2RQqHkAAAAYk"]
[Wed Dec 10 13:45:20.060772 2025] [:error] [pid 11268:tid 11347] [client 34.85.219.91:56699] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTkI8LbpLcj9WqyQndxv6gAAAJc"]
[Wed Dec 10 13:45:20.549683 2025] [:error] [pid 21327:tid 21331] [client 34.85.219.91:60851] [client 34.85.219.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTkI8Nuj_E2YnwjFG0-ZkwAAAoI"]
[Wed Dec 10 13:45:46.752733 2025] [:error] [pid 16566:tid 16575] [client 182.43.70.143:60794] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTkJCiEgzB1153EFuAY_BgAAAUc"]
[Wed Dec 10 14:54:42.326608 2025] [:error] [pid 37062:tid 37071] [client 157.10.167.159:8901] [client 157.10.167.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.10.167.159, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTkZMjB0I62HCw8Z5BTtngAAAAc"]
[Wed Dec 10 14:54:42.333110 2025] [:error] [pid 37062:tid 37071] [client 157.10.167.159:8901] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 14:55:05.987044 2025] [:error] [pid 37062:tid 37074] [client 180.195.16.28:63673] [client 180.195.16.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.16.28, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTkZSTB0I62HCw8Z5BTt4QAAAAo"]
[Wed Dec 10 14:55:05.992239 2025] [:error] [pid 37062:tid 37074] [client 180.195.16.28:63673] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 22:52:07.966367 2025] [:error] [pid 37062:tid 37085] [client 35.237.95.94:54734] [client 35.237.95.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.95.94, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTmJFzB0I62HCw8Z5BR_YQAAABU"]
[Wed Dec 10 22:52:07.969937 2025] [:error] [pid 37062:tid 37085] [client 35.237.95.94:54734] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 22:52:10.644180 2025] [:error] [pid 37062:tid 37081] [client 35.237.95.94:54734] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTmJGjB0I62HCw8Z5BR_bAAAABE"]
[Wed Dec 10 22:52:11.150256 2025] [:error] [pid 49095:tid 49097] [client 35.237.95.94:50390] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTmJG8orr4Jt2Tfx_EYnawAAAUA"]
[Wed Dec 10 22:52:11.756419 2025] [:error] [pid 37062:tid 37078] [client 35.237.95.94:60925] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTmJGzB0I62HCw8Z5BR_bQAAAA4"]
[Wed Dec 10 22:52:12.281791 2025] [:error] [pid 36977:tid 37039] [client 35.237.95.94:58323] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTmJHMc-JLl-uoL-Au7dEgAAAEU"]
[Wed Dec 10 22:52:12.840395 2025] [:error] [pid 49095:tid 49103] [client 35.237.95.94:56991] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTmJHMorr4Jt2Tfx_EYnbgAAAUY"]
[Wed Dec 10 22:52:13.424373 2025] [:error] [pid 36977:tid 37036] [client 35.237.95.94:65512] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTmJHcc-JLl-uoL-Au7dFAAAAEI"]
[Wed Dec 10 22:52:13.895700 2025] [:error] [pid 36975:tid 36995] [client 35.237.95.94:64162] [client 35.237.95.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTmJHd_ZNQ3zMmb38BGLbQAAAI8"]
[Thu Dec 11 01:08:24.885985 2025] [:error] [pid 10435:tid 10502] [client 45.8.17.89:23253] [client 45.8.17.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.89, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTmpCI5HZq66Rpdj2aJ7igAAAAg"]
[Thu Dec 11 01:08:24.890181 2025] [:error] [pid 10435:tid 10502] [client 45.8.17.89:23253] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 11 04:17:49.440036 2025] [:error] [pid 58099:tid 58109] [client 40.85.143.207:9679] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Dec 11 04:17:49.696926 2025] [:error] [pid 58099:tid 58112] [client 40.85.143.207:9679] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Thu Dec 11 04:17:49.953330 2025] [:error] [pid 58099:tid 58104] [client 40.85.143.207:9679] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 11 04:17:50.207287 2025] [:error] [pid 58099:tid 58105] [client 40.85.143.207:9679] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Thu Dec 11 04:17:50.462765 2025] [:error] [pid 58099:tid 58114] [client 40.85.143.207:9679] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Thu Dec 11 04:17:50.720166 2025] [:error] [pid 58099:tid 58121] [client 40.85.143.207:9679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Dec 11 04:17:50.970849 2025] [:error] [pid 58099:tid 58106] [client 40.85.143.207:9679] [client 40.85.143.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aTnVbsKZVSF_bdPFqRgZhQAAAMU"]
[Thu Dec 11 04:17:51.581716 2025] [:error] [pid 58099:tid 58102] [client 40.85.143.207:3231] File does not exist: /usr/local/apache/htdocs/suspended-page/dejavu.php
[Thu Dec 11 04:17:51.834478 2025] [:error] [pid 58099:tid 58125] [client 40.85.143.207:3231] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Dec 11 04:17:52.090352 2025] [:error] [pid 58099:tid 58103] [client 40.85.143.207:3231] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Thu Dec 11 04:17:52.595487 2025] [:error] [pid 58099:tid 58119] [client 40.85.143.207:3231] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTnVcMKZVSF_bdPFqRgZigAAANI"]
[Thu Dec 11 04:17:53.190002 2025] [:error] [pid 57992:tid 58057] [client 40.85.143.207:14627] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTnVceUeau0BMFF2vHnMAQAAAIg"]
[Thu Dec 11 04:17:53.794493 2025] [:error] [pid 58099:tid 58120] [client 40.85.143.207:3169] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTnVccKZVSF_bdPFqRgZjAAAANM"]
[Thu Dec 11 04:17:54.330484 2025] [:error] [pid 57990:tid 58012] [client 40.85.143.207:14560] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aTnVcgqZT_dc36fQdXGg-AAAABE"]
[Thu Dec 11 04:17:54.910180 2025] [:error] [pid 57990:tid 58019] [client 40.85.143.207:3163] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTnVcgqZT_dc36fQdXGg-wAAABg"]
[Thu Dec 11 04:17:55.593650 2025] [:error] [pid 57992:tid 58063] [client 40.85.143.207:15119] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTnVc-Ueau0BMFF2vHnMCQAAAI4"]
[Thu Dec 11 04:17:56.107964 2025] [:error] [pid 57992:tid 58068] [client 40.85.143.207:2953] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTnVdOUeau0BMFF2vHnMCwAAAJM"]
[Thu Dec 11 04:17:56.752630 2025] [:error] [pid 57992:tid 58071] [client 40.85.143.207:14630] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aTnVdOUeau0BMFF2vHnMDQAAAJY"]
[Thu Dec 11 04:17:57.385217 2025] [:error] [pid 58099:tid 58104] [client 40.85.143.207:8664] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTnVdcKZVSF_bdPFqRgZqwAAAMM"]
[Thu Dec 11 04:17:58.338887 2025] [:error] [pid 57991:tid 58036] [client 40.85.143.207:2944] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTnVdqPyGmNXA2ZsETbQDQAAAE4"]
[Thu Dec 11 04:17:59.500383 2025] [:error] [pid 57990:tid 58009] [client 40.85.143.207:8520] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTnVdwqZT_dc36fQdXGhBgAAAA4"]
[Thu Dec 11 04:18:00.598929 2025] [:error] [pid 57992:tid 58057] [client 40.85.143.207:14536] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTnVeOUeau0BMFF2vHnMFwAAAIg"]
[Thu Dec 11 04:18:01.447074 2025] [:error] [pid 58099:tid 58101] [client 40.85.143.207:9720] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aTnVecKZVSF_bdPFqRgZxAAAAMA"]
[Thu Dec 11 04:18:02.668905 2025] [:error] [pid 57992:tid 58073] [client 40.85.143.207:11117] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aTnVeuUeau0BMFF2vHnMGQAAAJg"]
[Thu Dec 11 04:18:03.652453 2025] [:error] [pid 57992:tid 58067] [client 40.85.143.207:2179] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aTnVe-Ueau0BMFF2vHnMGgAAAJI"]
[Thu Dec 11 04:18:04.859504 2025] [:error] [pid 57991:tid 58037] [client 40.85.143.207:4759] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aTnVfKPyGmNXA2ZsETbQEAAAAE8"]
[Thu Dec 11 04:18:05.728518 2025] [:error] [pid 57991:tid 58041] [client 40.85.143.207:14552] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aTnVfaPyGmNXA2ZsETbQEQAAAFM"]
[Thu Dec 11 04:18:06.552638 2025] [:error] [pid 58099:tid 58115] [client 40.85.143.207:9704] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aTnVfsKZVSF_bdPFqRgZxQAAAM4"]
[Thu Dec 11 04:18:09.182619 2025] [:error] [pid 57991:tid 58039] [client 40.85.143.207:2944] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aTnVgaPyGmNXA2ZsETbQEgAAAFE"]
[Thu Dec 11 04:18:10.414117 2025] [:error] [pid 58099:tid 58118] [client 40.85.143.207:11131] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aTnVgsKZVSF_bdPFqRgZyQAAANE"]
[Thu Dec 11 04:18:11.673151 2025] [:error] [pid 58099:tid 58114] [client 40.85.143.207:2990] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aTnVg8KZVSF_bdPFqRgZygAAAM0"]
[Thu Dec 11 04:18:12.561107 2025] [:error] [pid 57991:tid 58023] [client 40.85.143.207:3146] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aTnVhKPyGmNXA2ZsETbQFwAAAEE"]
[Thu Dec 11 04:18:13.098974 2025] [:error] [pid 57990:tid 58005] [client 40.85.143.207:14881] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aTnVhQqZT_dc36fQdXGhEgAAAAo"]
[Thu Dec 11 04:18:13.811417 2025] [:error] [pid 57992:tid 58072] [client 40.85.143.207:2985] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aTnVheUeau0BMFF2vHnMHgAAAJc"]
[Thu Dec 11 04:18:14.334851 2025] [:error] [pid 57992:tid 58049] [client 40.85.143.207:11444] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aTnVhuUeau0BMFF2vHnMHwAAAIA"]
[Thu Dec 11 04:18:14.834358 2025] [:error] [pid 57992:tid 58058] [client 40.85.143.207:2208] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aTnVhuUeau0BMFF2vHnMIAAAAIk"]
[Thu Dec 11 04:18:15.540470 2025] [:error] [pid 58099:tid 58102] [client 40.85.143.207:3002] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aTnVh8KZVSF_bdPFqRgZzQAAAME"]
[Thu Dec 11 04:18:16.151780 2025] [:error] [pid 57990:tid 58015] [client 40.85.143.207:12037] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aTnViAqZT_dc36fQdXGhFQAAABQ"]
[Thu Dec 11 04:18:16.825440 2025] [:error] [pid 58099:tid 58119] [client 40.85.143.207:11409] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTnViMKZVSF_bdPFqRgZzwAAANI"]
[Thu Dec 11 04:18:17.441917 2025] [:error] [pid 57992:tid 58066] [client 40.85.143.207:11894] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTnVieUeau0BMFF2vHnMIgAAAJE"]
[Thu Dec 11 04:18:18.033465 2025] [:error] [pid 58099:tid 58117] [client 40.85.143.207:9843] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTnVisKZVSF_bdPFqRgZ0QAAANA"]
[Thu Dec 11 04:18:18.706415 2025] [:error] [pid 57992:tid 58070] [client 40.85.143.207:1683] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aTnViuUeau0BMFF2vHnMJAAAAJU"]
[Thu Dec 11 04:18:19.392919 2025] [:error] [pid 57990:tid 57999] [client 40.85.143.207:8566] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aTnViwqZT_dc36fQdXGhGgAAAAQ"]
[Thu Dec 11 04:18:20.283060 2025] [:error] [pid 57991:tid 58039] [client 40.85.143.207:9695] [client 40.85.143.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aTnVjKPyGmNXA2ZsETbQHwAAAFE"]
[Thu Dec 11 04:18:21.206822 2025] [:error] [pid 57992:tid 58061] [client 40.85.143.207:3191] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss.php"] [unique_id "aTnVjeUeau0BMFF2vHnMJwAAAIw"]
[Thu Dec 11 04:18:21.955688 2025] [:error] [pid 58099:tid 58110] [client 40.85.143.207:3239] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aTnVjcKZVSF_bdPFqRgZ3AAAAMk"]
[Thu Dec 11 04:18:23.793263 2025] [:error] [pid 57991:tid 58040] [client 40.85.143.207:8684] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTnVj6PyGmNXA2ZsETbQIQAAAFI"]
[Thu Dec 11 04:18:24.339176 2025] [:error] [pid 57990:tid 58010] [client 40.85.143.207:4497] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTnVkAqZT_dc36fQdXGhHgAAAA8"]
[Thu Dec 11 04:18:24.997099 2025] [:error] [pid 57990:tid 58015] [client 40.85.143.207:2219] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTnVkAqZT_dc36fQdXGhIAAAABQ"]
[Thu Dec 11 04:18:25.621606 2025] [:error] [pid 57991:tid 58028] [client 40.85.143.207:11437] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aTnVkaPyGmNXA2ZsETbQJAAAAEY"]
[Thu Dec 11 04:18:26.166004 2025] [:error] [pid 58099:tid 58106] [client 40.85.143.207:15980] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTnVksKZVSF_bdPFqRgZ4wAAAMU"]
[Thu Dec 11 04:18:26.938861 2025] [:error] [pid 57990:tid 57998] [client 40.85.143.207:5580] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTnVkgqZT_dc36fQdXGhIgAAAAM"]
[Thu Dec 11 04:18:27.484411 2025] [:error] [pid 57992:tid 58051] [client 40.85.143.207:15124] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTnVk-Ueau0BMFF2vHnMMAAAAII"]
[Thu Dec 11 04:18:28.006324 2025] [:error] [pid 57992:tid 58064] [client 40.85.143.207:2188] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTnVlOUeau0BMFF2vHnMMQAAAI8"]
[Thu Dec 11 04:18:28.546220 2025] [:error] [pid 57990:tid 58007] [client 40.85.143.207:3236] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTnVlAqZT_dc36fQdXGhIwAAAAw"]
[Thu Dec 11 04:18:29.079057 2025] [:error] [pid 57990:tid 58000] [client 40.85.143.207:11427] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTnVlQqZT_dc36fQdXGhJAAAAAU"]
[Thu Dec 11 04:18:29.584704 2025] [:error] [pid 57990:tid 58011] [client 40.85.143.207:7916] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTnVlQqZT_dc36fQdXGhJQAAABA"]
[Thu Dec 11 04:18:30.088379 2025] [:error] [pid 58099:tid 58102] [client 40.85.143.207:7179] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/habhan.php"] [unique_id "aTnVlsKZVSF_bdPFqRgZ5gAAAME"]
[Thu Dec 11 04:18:30.603631 2025] [:error] [pid 58099:tid 58122] [client 40.85.143.207:3171] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mans.php"] [unique_id "aTnVlsKZVSF_bdPFqRgZ5wAAANU"]
[Thu Dec 11 04:18:31.108470 2025] [:error] [pid 58099:tid 58107] [client 40.85.143.207:9849] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aTnVl8KZVSF_bdPFqRgZ6AAAAMY"]
[Thu Dec 11 04:18:31.616521 2025] [:error] [pid 58099:tid 58113] [client 40.85.143.207:3205] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aTnVl8KZVSF_bdPFqRgZ6wAAAMw"]
[Thu Dec 11 04:18:32.128298 2025] [:error] [pid 57991:tid 58046] [client 40.85.143.207:2197] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aTnVmKPyGmNXA2ZsETbQJQAAAFg"]
[Thu Dec 11 04:18:32.641097 2025] [:error] [pid 57991:tid 58034] [client 40.85.143.207:3216] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aTnVmKPyGmNXA2ZsETbQJgAAAEw"]
[Thu Dec 11 04:18:33.146169 2025] [:error] [pid 57990:tid 57995] [client 40.85.143.207:9664] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aTnVmQqZT_dc36fQdXGhJwAAAAA"]
[Thu Dec 11 04:18:33.646706 2025] [:error] [pid 57990:tid 58012] [client 40.85.143.207:9642] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aTnVmQqZT_dc36fQdXGhKAAAABE"]
[Thu Dec 11 04:18:34.180813 2025] [:error] [pid 57992:tid 58049] [client 40.85.143.207:14572] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTnVmuUeau0BMFF2vHnMNwAAAIA"]
[Thu Dec 11 04:18:34.711636 2025] [:error] [pid 58099:tid 58110] [client 40.85.143.207:2010] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTnVmsKZVSF_bdPFqRgZ8AAAAMk"]
[Thu Dec 11 04:18:35.240075 2025] [:error] [pid 57991:tid 58029] [client 40.85.143.207:3229] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aTnVm6PyGmNXA2ZsETbQKAAAAEc"]
[Thu Dec 11 04:18:35.754808 2025] [:error] [pid 57991:tid 58044] [client 40.85.143.207:4509] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blox.php"] [unique_id "aTnVm6PyGmNXA2ZsETbQKQAAAFY"]
[Thu Dec 11 04:18:36.641046 2025] [:error] [pid 58099:tid 58114] [client 40.85.143.207:15941] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/111.php"] [unique_id "aTnVnMKZVSF_bdPFqRgZ8QAAAM0"]
[Thu Dec 11 04:18:37.267625 2025] [:error] [pid 58099:tid 58122] [client 40.85.143.207:15145] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/111.php"] [unique_id "aTnVncKZVSF_bdPFqRgZ8gAAANU"]
[Thu Dec 11 04:18:37.816678 2025] [:error] [pid 57992:tid 58054] [client 40.85.143.207:15973] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/111.php"] [unique_id "aTnVneUeau0BMFF2vHnMOgAAAIU"]
[Thu Dec 11 04:18:38.352962 2025] [:error] [pid 57992:tid 58062] [client 40.85.143.207:4333] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/great.php"] [unique_id "aTnVnuUeau0BMFF2vHnMOwAAAI0"]
[Thu Dec 11 04:18:39.082513 2025] [:error] [pid 57990:tid 57997] [client 40.85.143.207:11877] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTnVnwqZT_dc36fQdXGhKwAAAAI"]
[Thu Dec 11 04:18:39.582232 2025] [:error] [pid 58099:tid 58117] [client 40.85.143.207:12088] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTnVn8KZVSF_bdPFqRgZ9QAAANA"]
[Thu Dec 11 04:18:40.146798 2025] [:error] [pid 57990:tid 58008] [client 40.85.143.207:7226] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTnVoAqZT_dc36fQdXGhLAAAAA0"]
[Thu Dec 11 04:18:40.764319 2025] [:error] [pid 57992:tid 58051] [client 40.85.143.207:8549] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aTnVoOUeau0BMFF2vHnMPwAAAII"]
[Thu Dec 11 04:18:41.265921 2025] [:error] [pid 58099:tid 58107] [client 40.85.143.207:7229] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aTnVocKZVSF_bdPFqRgZ9wAAAMY"]
[Thu Dec 11 04:18:41.854456 2025] [:error] [pid 57992:tid 58061] [client 40.85.143.207:1666] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aTnVoeUeau0BMFF2vHnMQgAAAIw"]
[Thu Dec 11 04:18:42.355298 2025] [:error] [pid 57991:tid 58022] [client 40.85.143.207:7184] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aTnVoqPyGmNXA2ZsETbQLQAAAEA"]
[Thu Dec 11 04:18:43.145392 2025] [:error] [pid 57990:tid 58013] [client 40.85.143.207:14543] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aTnVowqZT_dc36fQdXGhLQAAABI"]
[Thu Dec 11 04:18:43.703986 2025] [:error] [pid 57991:tid 58040] [client 40.85.143.207:1711] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTnVo6PyGmNXA2ZsETbQLwAAAFI"]
[Thu Dec 11 04:18:44.505131 2025] [:error] [pid 57991:tid 58028] [client 40.85.143.207:3246] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTnVpKPyGmNXA2ZsETbQMAAAAEY"]
[Thu Dec 11 04:18:45.398535 2025] [:error] [pid 58099:tid 58124] [client 40.85.143.207:12059] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aTnVpcKZVSF_bdPFqRgZ-gAAANc"]
[Thu Dec 11 04:18:46.036311 2025] [:error] [pid 57991:tid 58043] [client 40.85.143.207:15108] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTnVpqPyGmNXA2ZsETbQMQAAAFU"]
[Thu Dec 11 04:18:46.559619 2025] [:error] [pid 57991:tid 58035] [client 40.85.143.207:15939] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTnVpqPyGmNXA2ZsETbQMgAAAE0"]
[Thu Dec 11 04:18:47.284935 2025] [:error] [pid 57991:tid 58036] [client 40.85.143.207:8661] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTnVp6PyGmNXA2ZsETbQMwAAAE4"]
[Thu Dec 11 04:18:48.113387 2025] [:error] [pid 57991:tid 58030] [client 40.85.143.207:7880] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aTnVqKPyGmNXA2ZsETbQNQAAAEg"]
[Thu Dec 11 04:18:49.280840 2025] [:error] [pid 58099:tid 58118] [client 40.85.143.207:7228] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sallu.php"] [unique_id "aTnVqcKZVSF_bdPFqRgZ_AAAANE"]
[Thu Dec 11 04:18:50.611535 2025] [:error] [pid 58099:tid 58104] [client 40.85.143.207:15122] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sallu.php"] [unique_id "aTnVqsKZVSF_bdPFqRgZ_QAAAMM"]
[Thu Dec 11 04:18:51.487247 2025] [:error] [pid 57992:tid 58054] [client 40.85.143.207:3177] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sallu.php"] [unique_id "aTnVq-Ueau0BMFF2vHnMSQAAAIU"]
[Thu Dec 11 04:18:52.500034 2025] [:error] [pid 57990:tid 58015] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Thu Dec 11 04:18:52.764394 2025] [:error] [pid 57990:tid 58004] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Dec 11 04:18:53.017690 2025] [:error] [pid 57990:tid 58014] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Thu Dec 11 04:18:53.285809 2025] [:error] [pid 57990:tid 58009] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 11 04:18:53.541669 2025] [:error] [pid 57990:tid 57996] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Thu Dec 11 04:18:53.801432 2025] [:error] [pid 57990:tid 58007] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Thu Dec 11 04:18:54.053986 2025] [:error] [pid 57990:tid 58011] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Dec 11 04:18:54.308821 2025] [:error] [pid 57990:tid 58016] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-is.php
[Thu Dec 11 04:18:54.562140 2025] [:error] [pid 57990:tid 57999] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Thu Dec 11 04:18:54.815831 2025] [:error] [pid 57990:tid 57995] [client 40.85.143.207:4543] File does not exist: /usr/local/apache/htdocs/suspended-page/pass.php
[Thu Dec 11 04:18:55.321169 2025] [:error] [pid 57990:tid 58019] [client 40.85.143.207:4543] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aTnVrwqZT_dc36fQdXGhPQAAABg"]
[Thu Dec 11 04:18:56.329449 2025] [:error] [pid 57992:tid 58073] [client 40.85.143.207:15965] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aTnVsOUeau0BMFF2vHnMUAAAAJg"]
[Thu Dec 11 04:18:57.109000 2025] [:error] [pid 58099:tid 58113] [client 40.85.143.207:3249] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aTnVscKZVSF_bdPFqRgaBQAAAMw"]
[Thu Dec 11 04:18:57.908419 2025] [:error] [pid 58099:tid 58123] [client 40.85.143.207:9031] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aTnVscKZVSF_bdPFqRgaBwAAANY"]
[Thu Dec 11 04:18:58.967440 2025] [:error] [pid 57990:tid 58018] [client 40.85.143.207:8560] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTnVsgqZT_dc36fQdXGhPgAAABc"]
[Thu Dec 11 04:18:59.572539 2025] [:error] [pid 57991:tid 58024] [client 40.85.143.207:7903] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTnVs6PyGmNXA2ZsETbQOgAAAEI"]
[Thu Dec 11 04:19:00.466825 2025] [:error] [pid 57991:tid 58041] [client 40.85.143.207:7884] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aTnVtKPyGmNXA2ZsETbQPAAAAFM"]
[Thu Dec 11 04:19:01.311990 2025] [:error] [pid 58099:tid 58104] [client 40.85.143.207:3240] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aTnVtcKZVSF_bdPFqRgaCwAAAMM"]
[Thu Dec 11 04:19:02.084150 2025] [:error] [pid 57990:tid 57997] [client 40.85.143.207:3255] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aTnVtgqZT_dc36fQdXGhPwAAAAI"]
[Thu Dec 11 04:19:02.587765 2025] [:error] [pid 57992:tid 58068] [client 40.85.143.207:15154] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aTnVtuUeau0BMFF2vHnMVAAAAJM"]
[Thu Dec 11 08:50:20.555811 2025] [:error] [pid 27459:tid 27484] [client 121.229.185.160:60832] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aToVTFhPEXihPBKMpROh0wAAARc"]
[Thu Dec 11 11:04:22.122018 2025] [:error] [pid 57990:tid 58009] [client 173.239.196.5:30959] [client 173.239.196.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.196.5, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTo0tgqZT_dc36fQdXH-6gAAAA4"]
[Thu Dec 11 11:04:22.126457 2025] [:error] [pid 57990:tid 58009] [client 173.239.196.5:30959] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 11 16:10:49.996778 2025] [:error] [pid 57990:tid 58007] [client 129.212.231.116:61661] [client 129.212.231.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.212.231.116, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aTp8iQqZT_dc36fQdXFG3AAAAAw"]
[Thu Dec 11 16:10:50.000446 2025] [:error] [pid 57990:tid 58007] [client 129.212.231.116:61661] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 11 16:10:51.574276 2025] [:error] [pid 57990:tid 58015] [client 129.212.231.116:61661] [client 129.212.231.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTp8iwqZT_dc36fQdXFG5QAAABQ"]
[Thu Dec 11 16:10:51.917757 2025] [:error] [pid 57992:tid 58061] [client 129.212.231.116:61787] [client 129.212.231.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTp8i-Ueau0BMFF2vHl0yQAAAIw"]
[Thu Dec 11 16:10:52.260741 2025] [:error] [pid 27459:tid 27466] [client 129.212.231.116:61805] [client 129.212.231.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTp8jFhPEXihPBKMpRMWawAAAQU"]
[Thu Dec 11 16:10:52.604286 2025] [:error] [pid 57991:tid 58030] [client 129.212.231.116:61823] [client 129.212.231.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTp8jKPyGmNXA2ZsETZyWAAAAEg"]
[Thu Dec 11 18:22:04.436268 2025] [:error] [pid 57990:tid 58000] [client 170.106.187.106:47164] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTqbTAqZT_dc36fQdXFl7gAAAAU"]
[Thu Dec 11 21:31:29.783378 2025] [:error] [pid 57990:tid 58008] [client 43.138.68.113:59890] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTrHsQqZT_dc36fQdXGMGgAAAA0"]
[Thu Dec 11 21:47:48.133499 2025] [:error] [pid 58814:tid 58824] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 11 21:47:48.433782 2025] [:error] [pid 58814:tid 58823] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 11 21:47:48.735403 2025] [:error] [pid 58814:tid 58829] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Dec 11 21:47:49.047249 2025] [:error] [pid 58814:tid 58830] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 11 21:47:49.360133 2025] [:error] [pid 58814:tid 58840] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Dec 11 21:47:49.668022 2025] [:error] [pid 58814:tid 58821] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Dec 11 21:47:50.019690 2025] [:error] [pid 58814:tid 58816] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Dec 11 21:47:50.323421 2025] [:error] [pid 58814:tid 58833] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 11 21:47:50.951857 2025] [:error] [pid 58814:tid 58822] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 11 21:47:51.574854 2025] [:error] [pid 58814:tid 58823] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Dec 11 21:47:51.912339 2025] [:error] [pid 58814:tid 58819] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Dec 11 21:47:52.212026 2025] [:error] [pid 58814:tid 58830] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 11 21:47:52.511223 2025] [:error] [pid 58814:tid 58840] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Dec 11 21:47:52.829776 2025] [:error] [pid 58814:tid 58821] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 11 21:47:53.133292 2025] [:error] [pid 58814:tid 58825] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 11 21:47:53.434602 2025] [:error] [pid 58814:tid 58828] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 11 21:47:53.737677 2025] [:error] [pid 58814:tid 58835] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 11 21:47:54.039715 2025] [:error] [pid 58814:tid 58822] [client 185.194.178.100:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 11 21:47:59.169366 2025] [:error] [pid 58814:tid 58827] [client 185.194.178.100:50333] [client 185.194.178.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTrLj9iz0l9AD_3pkMxKQQAAAcs"]
[Thu Dec 11 21:48:01.997730 2025] [:error] [pid 57991:tid 58044] [client 185.194.178.89:55407] [client 185.194.178.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTrLkaPyGmNXA2ZsETbCAQAAAFY"]
[Thu Dec 11 21:48:04.697677 2025] [:error] [pid 35112:tid 35138] [client 185.194.178.71:36877] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Dec 11 21:48:05.644587 2025] [:error] [pid 35112:tid 35121] [client 185.194.178.71:36877] [client 185.194.178.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aTrLlZ9ZpQ0WIeJhsJd0VgAAAUc"]
[Thu Dec 11 21:48:07.932607 2025] [:error] [pid 58099:tid 58113] [client 185.194.178.74:29483] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Dec 11 21:48:08.231806 2025] [:error] [pid 58099:tid 58103] [client 185.194.178.74:29483] [client 185.194.178.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTrLmMKZVSF_bdPFqRgknwAAAMI"]
[Thu Dec 11 21:48:09.127007 2025] [:error] [pid 27459:tid 27479] [client 185.194.178.93:50693] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Dec 11 21:48:10.655168 2025] [:error] [pid 27459:tid 27461] [client 185.194.178.93:50693] [client 185.194.178.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTrLmlhPEXihPBKMpRNtdgAAAQA"]
[Thu Dec 11 21:48:11.558455 2025] [:error] [pid 24483:tid 24498] [client 185.194.178.91:56843] [client 185.194.178.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTrLm1GHKh2d_uVkopRrcQAAAg0"]
[Thu Dec 11 21:48:12.149434 2025] [:error] [pid 24483:tid 24488] [client 185.194.178.59:32563] [client 185.194.178.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTrLnFGHKh2d_uVkopRrcgAAAgM"]
[Thu Dec 11 21:48:12.749071 2025] [:error] [pid 57991:tid 58040] [client 185.194.178.104:60589] [client 185.194.178.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTrLnKPyGmNXA2ZsETbCEwAAAFI"]
[Thu Dec 11 21:48:14.349186 2025] [:error] [pid 24527:tid 24567] [client 185.194.178.102:31171] [client 185.194.178.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTrLnl9_glvtS5vXiTUXsAAAAos"]
[Thu Dec 11 21:48:14.946276 2025] [:error] [pid 58099:tid 58117] [client 185.194.178.76:21301] [client 185.194.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTrLnsKZVSF_bdPFqRgkpAAAANA"]
[Thu Dec 11 21:48:16.897811 2025] [:error] [pid 24527:tid 24571] [client 185.194.178.105:52703] [client 185.194.178.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTrLoF9_glvtS5vXiTUXtgAAAo8"]
[Thu Dec 11 21:48:17.492672 2025] [:error] [pid 57991:tid 58040] [client 185.194.178.54:46083] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Dec 11 21:48:18.105685 2025] [:error] [pid 57991:tid 58045] [client 185.194.178.54:46083] [client 185.194.178.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aTrLoqPyGmNXA2ZsETbCLwAAAFc"]
[Thu Dec 11 21:48:19.341805 2025] [:error] [pid 58099:tid 58101] [client 185.194.178.76:43907] [client 185.194.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTrLo8KZVSF_bdPFqRgkrQAAAMA"]
[Thu Dec 11 21:48:21.236889 2025] [:error] [pid 57992:tid 58070] [client 185.194.178.79:57563] [client 185.194.178.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTrLpeUeau0BMFF2vHm7EgAAAJU"]
[Thu Dec 11 21:48:21.837713 2025] [:error] [pid 58814:tid 58820] [client 185.194.178.96:61109] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Dec 11 21:48:22.135603 2025] [:error] [pid 58814:tid 58835] [client 185.194.178.96:61109] [client 185.194.178.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTrLptiz0l9AD_3pkMxKdQAAAdM"]
[Thu Dec 11 21:48:22.770234 2025] [:error] [pid 58814:tid 58822] [client 185.194.178.91:30967] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Dec 11 21:48:23.680767 2025] [:error] [pid 58814:tid 58831] [client 185.194.178.91:30967] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Dec 11 21:48:24.574445 2025] [:error] [pid 58814:tid 58819] [client 185.194.178.91:30967] [client 185.194.178.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTrLqNiz0l9AD_3pkMxKfwAAAcM"]
[Thu Dec 11 21:48:25.206504 2025] [:error] [pid 58099:tid 58123] [client 185.194.178.92:35505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Dec 11 21:48:25.501125 2025] [:error] [pid 58099:tid 58104] [client 185.194.178.92:35505] [client 185.194.178.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTrLqcKZVSF_bdPFqRgktQAAAMM"]
[Thu Dec 11 21:48:26.119188 2025] [:error] [pid 58814:tid 58833] [client 185.194.178.76:45707] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Dec 11 21:48:26.730686 2025] [:error] [pid 58814:tid 58840] [client 185.194.178.76:45707] [client 185.194.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aTrLqtiz0l9AD_3pkMxKigAAAdg"]
[Thu Dec 11 21:48:27.638104 2025] [:error] [pid 24527:tid 24556] [client 185.194.178.63:43299] [client 185.194.178.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTrLq19_glvtS5vXiTUXvQAAAoA"]
[Thu Dec 11 21:48:28.578350 2025] [:error] [pid 58814:tid 58834] [client 185.194.178.82:23355] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Dec 11 21:48:28.892864 2025] [:error] [pid 58814:tid 58816] [client 185.194.178.82:23355] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Dec 11 21:48:29.489846 2025] [:error] [pid 58814:tid 58836] [client 185.194.178.82:23355] [client 185.194.178.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTrLrdiz0l9AD_3pkMxKkQAAAdQ"]
[Thu Dec 11 21:48:30.382560 2025] [:error] [pid 58814:tid 58832] [client 185.194.178.86:42001] [client 185.194.178.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTrLrtiz0l9AD_3pkMxKlQAAAdA"]
[Thu Dec 11 21:48:31.542327 2025] [:error] [pid 58814:tid 58827] [client 185.194.178.88:23653] [client 185.194.178.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTrLr9iz0l9AD_3pkMxKlwAAAcs"]
[Thu Dec 11 21:48:33.151840 2025] [:error] [pid 57990:tid 57998] [client 185.194.178.90:28865] [client 185.194.178.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTrLsQqZT_dc36fQdXGOfAAAAAM"]
[Thu Dec 11 21:48:33.778598 2025] [:error] [pid 58814:tid 58823] [client 185.194.178.55:55217] [client 185.194.178.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTrLsdiz0l9AD_3pkMxKmwAAAcc"]
[Fri Dec 12 02:48:11.791863 2025] [:error] [pid 47935:tid 47950] [client 45.8.17.123:28675] [client 45.8.17.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.123, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aTsR62bjqz-fIxCXK9eWxQAAAUw"]
[Fri Dec 12 02:48:11.795777 2025] [:error] [pid 47935:tid 47950] [client 45.8.17.123:28675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 12 03:54:34.531653 2025] [:error] [pid 26521:tid 26581] [client 49.51.233.95:59122] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTshepdhcAPU617AKTBBRQAAAII"]
[Fri Dec 12 06:22:55.402313 2025] [:error] [pid 60649:tid 60658] [client 4.241.233.183:60161] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.yahoo.com/
[Fri Dec 12 06:22:55.522187 2025] [:error] [pid 60649:tid 60664] [client 4.241.233.183:60161] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Fri Dec 12 06:22:55.643980 2025] [:error] [pid 60649:tid 60663] [client 4.241.233.183:60161] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php, referer: https://www.google.de/
[Fri Dec 12 06:22:55.762743 2025] [:error] [pid 60649:tid 60674] [client 4.241.233.183:60161] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.de/
[Fri Dec 12 06:22:55.881589 2025] [:error] [pid 60649:tid 60668] [client 4.241.233.183:60161] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Fri Dec 12 06:22:56.000196 2025] [:error] [pid 60649:tid 60669] [client 4.241.233.183:60161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.fr/
[Fri Dec 12 09:05:36.825542 2025] [:error] [pid 26607:tid 26621] [client 52.112.49.156:55273] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Dec 12 12:53:08.700273 2025] [:error] [pid 26521:tid 26583] [client 43.159.140.236:58770] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTuftJdhcAPU617AKTDvlgAAAIQ"]
[Fri Dec 12 22:27:11.558705 2025] [:error] [pid 26607:tid 26630] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Fri Dec 12 22:27:11.585971 2025] [:error] [pid 26607:tid 26632] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/tesTyuj.php
[Fri Dec 12 22:27:11.613900 2025] [:error] [pid 26607:tid 26633] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Dec 12 22:27:11.638944 2025] [:error] [pid 26607:tid 26628] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Fri Dec 12 22:27:13.508239 2025] [:error] [pid 26607:tid 26612] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Fri Dec 12 22:27:13.548846 2025] [:error] [pid 26607:tid 26620] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-64wscx6shd.php
[Fri Dec 12 22:27:13.571259 2025] [:error] [pid 26607:tid 26631] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Fri Dec 12 22:27:13.592199 2025] [:error] [pid 26607:tid 26622] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sid.php
[Fri Dec 12 22:27:13.613905 2025] [:error] [pid 26607:tid 26623] [client 4.197.162.203:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/6kUgr4yGzxN.php
[Fri Dec 12 22:27:13.811108 2025] [:error] [pid 26607:tid 26618] [client 4.197.162.203:28791] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aTwmQcb_b0tOEWTL2KmuegAAAMk"]
[Fri Dec 12 22:27:14.180088 2025] [:error] [pid 26519:tid 26547] [client 4.197.162.203:28748] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aTwmQs8TRgSGOeWqEhcCagAAABg"]
[Fri Dec 12 22:27:15.140755 2025] [:error] [pid 26520:tid 26559] [client 4.197.162.203:28776] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aTwmQ0G_frlY5vNXu_ALnAAAAEc"]
[Fri Dec 12 22:27:15.795372 2025] [:error] [pid 26519:tid 26542] [client 4.197.162.203:28760] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aTwmQ88TRgSGOeWqEhcCawAAABM"]
[Fri Dec 12 22:27:16.301832 2025] [:error] [pid 26521:tid 26601] [client 4.197.162.203:28755] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aTwmRJdhcAPU617AKTCemQAAAJY"]
[Fri Dec 12 22:27:16.998658 2025] [:error] [pid 26521:tid 26600] [client 4.197.162.203:28795] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aTwmRJdhcAPU617AKTCengAAAJU"]
[Fri Dec 12 22:27:17.429637 2025] [:error] [pid 26521:tid 26603] [client 4.197.162.203:28696] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aTwmRZdhcAPU617AKTCeoAAAAJg"]
[Fri Dec 12 22:27:17.690061 2025] [:error] [pid 26521:tid 26588] [client 4.197.162.203:28792] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aTwmRZdhcAPU617AKTCeoQAAAIk"]
[Fri Dec 12 22:27:17.804598 2025] [:error] [pid 26521:tid 26585] [client 4.197.162.203:28683] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aTwmRZdhcAPU617AKTCeogAAAIY"]
[Fri Dec 12 22:27:17.936521 2025] [:error] [pid 27950:tid 27954] [client 4.197.162.203:28703] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aTwmRYVLRvkrdsSc1F20vAAAAUI"]
[Fri Dec 12 22:27:18.313146 2025] [:error] [pid 60649:tid 60676] [client 4.197.162.203:28774] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aTwmRlOcUGKU3sgfHP8LYgAAARg"]
[Fri Dec 12 22:27:19.370966 2025] [:error] [pid 26520:tid 26564] [client 4.197.162.203:28750] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aTwmR0G_frlY5vNXu_ALoQAAAEw"]
[Fri Dec 12 22:27:20.743038 2025] [:error] [pid 26607:tid 26618] [client 4.197.162.203:28761] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-title.php"] [unique_id "aTwmSMb_b0tOEWTL2KmuggAAAMk"]
[Fri Dec 12 22:27:21.908498 2025] [:error] [pid 26519:tid 26526] [client 4.197.162.203:28690] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-title.php"] [unique_id "aTwmSc8TRgSGOeWqEhcCbwAAAAM"]
[Fri Dec 12 22:27:22.952749 2025] [:error] [pid 26520:tid 26570] [client 4.197.162.203:28772] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-title.php"] [unique_id "aTwmSkG_frlY5vNXu_ALpQAAAFI"]
[Fri Dec 12 22:27:23.317752 2025] [:error] [pid 26607:tid 26609] [client 4.197.162.203:28780] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-title.php"] [unique_id "aTwmS8b_b0tOEWTL2KmuhwAAAMA"]
[Fri Dec 12 22:27:23.556194 2025] [:error] [pid 26521:tid 26585] [client 4.197.162.203:28759] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aTwmS5dhcAPU617AKTCeqgAAAIY"]
[Fri Dec 12 22:27:23.891942 2025] [:error] [pid 26520:tid 26573] [client 4.197.162.203:18663] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aTwmS0G_frlY5vNXu_ALqAAAAFU"]
[Fri Dec 12 22:27:24.109486 2025] [:error] [pid 26520:tid 26558] [client 4.197.162.203:28788] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aTwmTEG_frlY5vNXu_ALqQAAAEY"]
[Fri Dec 12 22:27:24.263750 2025] [:error] [pid 26520:tid 26563] [client 4.197.162.203:28758] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aTwmTEG_frlY5vNXu_ALqgAAAEs"]
[Fri Dec 12 22:27:24.569705 2025] [:error] [pid 27950:tid 27966] [client 4.197.162.203:28695] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aTwmTIVLRvkrdsSc1F20wgAAAU4"]
[Fri Dec 12 22:27:25.311638 2025] [:error] [pid 26607:tid 26630] [client 4.197.162.203:28672] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aTwmTcb_b0tOEWTL2KmuiwAAANU"]
[Fri Dec 12 22:27:26.071491 2025] [:error] [pid 26521:tid 26602] [client 4.197.162.203:28718] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aTwmTpdhcAPU617AKTCergAAAJc"]
[Fri Dec 12 22:27:27.569887 2025] [:error] [pid 26519:tid 26543] [client 4.197.162.203:28749] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-home.php"] [unique_id "aTwmT88TRgSGOeWqEhcCcwAAABQ"]
[Fri Dec 12 22:27:28.145937 2025] [:error] [pid 27950:tid 27961] [client 4.197.162.203:28779] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aTwmUIVLRvkrdsSc1F20yAAAAUk"]
[Fri Dec 12 22:27:28.379928 2025] [:error] [pid 55760:tid 55764] [client 4.197.162.203:28705] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aTwmUFObDQlftFDyGawp9gAAAYI"]
[Fri Dec 12 22:27:29.076058 2025] [:error] [pid 26520:tid 26552] [client 4.197.162.203:28698] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aTwmUUG_frlY5vNXu_ALrgAAAEA"]
[Fri Dec 12 22:27:29.718230 2025] [:error] [pid 55760:tid 55772] [client 4.197.162.203:28773] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aTwmUVObDQlftFDyGawp_AAAAYo"]
[Fri Dec 12 22:27:30.716206 2025] [:error] [pid 26521:tid 26601] [client 4.197.162.203:28693] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atex1.php"] [unique_id "aTwmUpdhcAPU617AKTCetQAAAJY"]
[Fri Dec 12 22:27:31.485015 2025] [:error] [pid 26519:tid 26527] [client 4.197.162.203:28716] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atex1.php"] [unique_id "aTwmU88TRgSGOeWqEhcCdQAAAAQ"]
[Fri Dec 12 22:27:32.015703 2025] [:error] [pid 26520:tid 26557] [client 4.197.162.203:28691] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atex1.php"] [unique_id "aTwmVEG_frlY5vNXu_ALsQAAAEU"]
[Fri Dec 12 22:27:32.458051 2025] [:error] [pid 55760:tid 55768] [client 4.197.162.203:28751] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atex1.php"] [unique_id "aTwmVFObDQlftFDyGawp_QAAAYY"]
[Fri Dec 12 22:27:33.673614 2025] [:error] [pid 26521:tid 26596] [client 4.197.162.203:28678] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kdgok.php"] [unique_id "aTwmVZdhcAPU617AKTCetwAAAJE"]
[Fri Dec 12 22:27:34.173059 2025] [:error] [pid 26520:tid 26561] [client 4.197.162.203:28797] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kdgok.php"] [unique_id "aTwmVkG_frlY5vNXu_ALuAAAAEk"]
[Fri Dec 12 22:27:34.272393 2025] [:error] [pid 55760:tid 55777] [client 4.197.162.203:28713] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kdgok.php"] [unique_id "aTwmVlObDQlftFDyGawp_wAAAY8"]
[Fri Dec 12 22:27:34.325980 2025] [:error] [pid 26519:tid 26541] [client 4.197.162.203:28789] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kdgok.php"] [unique_id "aTwmVs8TRgSGOeWqEhcCdwAAABI"]
[Fri Dec 12 22:27:34.743628 2025] [:error] [pid 60649:tid 60652] [client 4.197.162.203:28684] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "aTwmVlOcUGKU3sgfHP8LaAAAAQA"]
[Fri Dec 12 22:27:35.512939 2025] [:error] [pid 55760:tid 55780] [client 4.197.162.203:28734] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "aTwmV1ObDQlftFDyGawqAAAAAZI"]
[Fri Dec 12 22:27:35.674215 2025] [:error] [pid 26521:tid 26588] [client 4.197.162.203:28785] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "aTwmV5dhcAPU617AKTCeuQAAAIk"]
[Fri Dec 12 22:27:35.817757 2025] [:error] [pid 26521:tid 26585] [client 4.197.162.203:18637] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "aTwmV5dhcAPU617AKTCeugAAAIY"]
[Fri Dec 12 22:27:36.175023 2025] [:error] [pid 60649:tid 60664] [client 4.197.162.203:18633] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aTwmWFOcUGKU3sgfHP8LbQAAAQw"]
[Fri Dec 12 22:27:36.295369 2025] [:error] [pid 26520:tid 26571] [client 4.197.162.203:28766] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aTwmWEG_frlY5vNXu_ALuQAAAFM"]
[Fri Dec 12 22:27:36.400959 2025] [:error] [pid 26521:tid 26602] [client 4.197.162.203:28746] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aTwmWJdhcAPU617AKTCevAAAAJc"]
[Fri Dec 12 22:27:36.593927 2025] [:error] [pid 60649:tid 60671] [client 4.197.162.203:18658] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aTwmWFOcUGKU3sgfHP8LbwAAARM"]
[Fri Dec 12 22:27:36.706454 2025] [:error] [pid 26520:tid 26552] [client 4.197.162.203:28740] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid-file.php"] [unique_id "aTwmWEG_frlY5vNXu_ALuwAAAEA"]
[Fri Dec 12 22:27:36.968362 2025] [:error] [pid 60649:tid 60666] [client 4.197.162.203:28778] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid-file.php"] [unique_id "aTwmWFOcUGKU3sgfHP8LcAAAAQ4"]
[Fri Dec 12 22:27:37.414515 2025] [:error] [pid 26521:tid 26590] [client 4.197.162.203:28787] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid-file.php"] [unique_id "aTwmWZdhcAPU617AKTCewAAAAIs"]
[Fri Dec 12 22:27:38.337112 2025] [:error] [pid 26519:tid 26533] [client 4.197.162.203:28710] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid-file.php"] [unique_id "aTwmWs8TRgSGOeWqEhcCfAAAAAo"]
[Fri Dec 12 22:27:38.993565 2025] [:error] [pid 26519:tid 26530] [client 4.197.162.203:28768] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aTwmWs8TRgSGOeWqEhcCfwAAAAc"]
[Fri Dec 12 22:27:39.799117 2025] [:error] [pid 55760:tid 55782] [client 4.197.162.203:28675] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aTwmW1ObDQlftFDyGawqBQAAAZQ"]
[Fri Dec 12 22:27:40.678458 2025] [:error] [pid 55760:tid 55764] [client 4.197.162.203:28739] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aTwmXFObDQlftFDyGawqBwAAAYI"]
[Fri Dec 12 22:27:41.850124 2025] [:error] [pid 26521:tid 26579] [client 4.197.162.203:28762] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aTwmXZdhcAPU617AKTCexwAAAIA"]
[Fri Dec 12 22:27:43.562387 2025] [:error] [pid 26520:tid 26558] [client 4.197.162.203:28745] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aTwmX0G_frlY5vNXu_ALxgAAAEY"]
[Fri Dec 12 22:27:45.436345 2025] [:error] [pid 26521:tid 26588] [client 4.197.162.203:28692] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aTwmYZdhcAPU617AKTCe6AAAAIk"]
[Fri Dec 12 22:27:47.916493 2025] [:error] [pid 26607:tid 26620] [client 4.197.162.203:28767] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aTwmY8b_b0tOEWTL2KmuogAAAMs"]
[Fri Dec 12 22:27:49.224399 2025] [:error] [pid 26607:tid 26623] [client 4.197.162.203:28757] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aTwmZcb_b0tOEWTL2KmupAAAAM4"]
[Fri Dec 12 22:27:51.721046 2025] [:error] [pid 26520:tid 26565] [client 4.197.162.203:28781] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aTwmZ0G_frlY5vNXu_ALzgAAAE0"]
[Fri Dec 12 22:27:54.024605 2025] [:error] [pid 26519:tid 26527] [client 4.197.162.203:28729] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aTwmas8TRgSGOeWqEhcCigAAAAQ"]
[Fri Dec 12 22:27:54.580227 2025] [:error] [pid 26519:tid 26532] [client 4.197.162.203:28726] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aTwmas8TRgSGOeWqEhcCiwAAAAk"]
[Fri Dec 12 22:27:55.728923 2025] [:error] [pid 26607:tid 26611] [client 4.197.162.203:28744] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aTwma8b_b0tOEWTL2KmutAAAAMI"]
[Fri Dec 12 22:27:56.187459 2025] [:error] [pid 60649:tid 60653] [client 4.197.162.203:28699] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aTwmbFOcUGKU3sgfHP8LfwAAAQE"]
[Fri Dec 12 22:27:56.360055 2025] [:error] [pid 26520:tid 26552] [client 4.197.162.203:28702] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aTwmbEG_frlY5vNXu_AL1QAAAEA"]
[Fri Dec 12 22:27:56.614779 2025] [:error] [pid 26519:tid 26528] [client 4.197.162.203:28784] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aTwmbM8TRgSGOeWqEhcCjQAAAAU"]
[Fri Dec 12 22:27:57.233084 2025] [:error] [pid 55760:tid 55766] [client 4.197.162.203:28783] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aTwmbVObDQlftFDyGawqKQAAAYQ"]
[Fri Dec 12 22:27:58.760760 2025] [:error] [pid 26607:tid 26615] [client 4.197.162.203:28777] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aTwmbsb_b0tOEWTL2KmutQAAAMY"]
[Fri Dec 12 22:28:00.004835 2025] [:error] [pid 27950:tid 27958] [client 4.197.162.203:18661] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aTwmcIVLRvkrdsSc1F204QAAAUY"]
[Fri Dec 12 22:28:01.738271 2025] [:error] [pid 26519:tid 26530] [client 4.197.162.203:18675] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aTwmcc8TRgSGOeWqEhcCkAAAAAc"]
[Fri Dec 12 22:28:02.993288 2025] [:error] [pid 60649:tid 60665] [client 4.197.162.203:28770] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aTwmclOcUGKU3sgfHP8LhgAAAQ0"]
[Fri Dec 12 22:28:05.090943 2025] [:error] [pid 55760:tid 55762] [client 4.197.162.203:28680] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aTwmdVObDQlftFDyGawqMQAAAYA"]
[Fri Dec 12 22:28:06.678287 2025] [:error] [pid 55760:tid 55775] [client 4.197.162.203:28747] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aTwmdlObDQlftFDyGawqMgAAAY0"]
[Fri Dec 12 22:28:07.453913 2025] [:error] [pid 55760:tid 55773] [client 4.197.162.203:18636] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aTwmd1ObDQlftFDyGawqNAAAAYs"]
[Fri Dec 12 22:28:08.243633 2025] [:error] [pid 55760:tid 55781] [client 4.197.162.203:28689] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aTwmeFObDQlftFDyGawqNgAAAZM"]
[Fri Dec 12 22:28:10.088614 2025] [:error] [pid 60649:tid 60655] [client 4.197.162.203:18651] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error_log.php"] [unique_id "aTwmelOcUGKU3sgfHP8LhwAAAQM"]
[Fri Dec 12 22:28:14.354805 2025] [:error] [pid 26521:tid 26582] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Fri Dec 12 22:28:15.511588 2025] [:error] [pid 26521:tid 26593] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/inghl.php
[Fri Dec 12 22:28:15.552719 2025] [:error] [pid 26521:tid 26587] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-securitiy.php
[Fri Dec 12 22:28:15.573317 2025] [:error] [pid 26521:tid 26580] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Dec 12 22:28:15.596177 2025] [:error] [pid 26521:tid 26589] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ac.php
[Fri Dec 12 22:28:15.616431 2025] [:error] [pid 26521:tid 26596] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Fri Dec 12 22:28:15.652174 2025] [:error] [pid 26521:tid 26600] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/krypton.php
[Fri Dec 12 22:28:15.678365 2025] [:error] [pid 26521:tid 26581] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/karma_57c3d4.php
[Fri Dec 12 22:28:15.700586 2025] [:error] [pid 26521:tid 26595] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/fc72f.php
[Fri Dec 12 22:28:15.730942 2025] [:error] [pid 26521:tid 26592] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Dec 12 22:28:15.781359 2025] [:error] [pid 26521:tid 26594] [client 4.197.162.203:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/jjrpo.php
[Fri Dec 12 22:28:15.798215 2025] [:error] [pid 26521:tid 26597] [client 4.197.162.203:18561] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aTwmf5dhcAPU617AKTCfBAAAAJI"]
[Fri Dec 12 22:28:17.475204 2025] [:error] [pid 26519:tid 26538] [client 4.197.162.203:18629] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aTwmgc8TRgSGOeWqEhcClAAAAA8"]
[Fri Dec 12 22:28:19.577355 2025] [:error] [pid 60649:tid 60670] [client 4.197.162.203:28732] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aTwmg1OcUGKU3sgfHP8LiAAAARI"]
[Fri Dec 12 22:28:21.896791 2025] [:error] [pid 26521:tid 26583] [client 4.197.162.203:18628] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aTwmhZdhcAPU617AKTCfCQAAAIQ"]
[Fri Dec 12 22:28:23.912643 2025] [:error] [pid 26520:tid 26576] [client 4.197.162.203:28676] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-advaced.php"] [unique_id "aTwmh0G_frlY5vNXu_AL4gAAAFg"]
[Fri Dec 12 22:28:25.072562 2025] [:error] [pid 26521:tid 26600] [client 4.197.162.203:28799] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-advaced.php"] [unique_id "aTwmiZdhcAPU617AKTCfDAAAAJU"]
[Fri Dec 12 22:28:26.010938 2025] [:error] [pid 26521:tid 26597] [client 4.197.162.203:18645] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-advaced.php"] [unique_id "aTwmipdhcAPU617AKTCfDgAAAJI"]
[Fri Dec 12 22:28:27.661522 2025] [:error] [pid 26519:tid 26530] [client 4.197.162.203:18650] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-advaced.php"] [unique_id "aTwmi88TRgSGOeWqEhcCmQAAAAc"]
[Fri Dec 12 22:28:28.917284 2025] [:error] [pid 26521:tid 26598] [client 4.197.162.203:28794] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aTwmjJdhcAPU617AKTCfFAAAAJM"]
[Fri Dec 12 22:28:29.452837 2025] [:error] [pid 27950:tid 27970] [client 4.197.162.203:18683] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aTwmjYVLRvkrdsSc1F206wAAAVI"]
[Fri Dec 12 22:28:30.121107 2025] [:error] [pid 26607:tid 26625] [client 4.197.162.203:28742] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aTwmjsb_b0tOEWTL2KmuvwAAANA"]
[Fri Dec 12 22:28:30.408536 2025] [:error] [pid 26607:tid 26613] [client 4.197.162.203:18674] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aTwmjsb_b0tOEWTL2KmuwAAAAMQ"]
[Fri Dec 12 22:28:30.575002 2025] [:error] [pid 55760:tid 55777] [client 4.197.162.203:28677] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aTwmjlObDQlftFDyGawqPwAAAY8"]
[Fri Dec 12 22:28:30.826466 2025] [:error] [pid 60649:tid 60665] [client 4.197.162.203:28704] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aTwmjlOcUGKU3sgfHP8LjQAAAQ0"]
[Fri Dec 12 22:28:31.336238 2025] [:error] [pid 55760:tid 55770] [client 4.197.162.203:28796] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aTwmj1ObDQlftFDyGawqQAAAAYg"]
[Fri Dec 12 22:28:33.125966 2025] [:error] [pid 55760:tid 55778] [client 4.197.162.203:28714] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aTwmkVObDQlftFDyGawqQQAAAZA"]
[Fri Dec 12 22:28:35.019097 2025] [:error] [pid 26607:tid 26620] [client 4.197.162.203:18609] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aTwmk8b_b0tOEWTL2KmuxwAAAMs"]
[Fri Dec 12 22:28:44.826068 2025] [:error] [pid 26521:tid 26582] [client 4.197.162.203:28764] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aTwmnJdhcAPU617AKTCfLgAAAIM"]
[Fri Dec 12 22:28:50.917126 2025] [:error] [pid 26607:tid 26617] [client 4.197.162.203:28724] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aTwmosb_b0tOEWTL2KmuygAAAMg"]
[Fri Dec 12 22:28:56.075242 2025] [:error] [pid 26519:tid 26547] [client 4.197.162.203:18643] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aTwmqM8TRgSGOeWqEhcCpAAAABg"]
[Fri Dec 12 22:28:59.145649 2025] [:error] [pid 26519:tid 26544] [client 4.197.162.203:28711] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aTwmq88TRgSGOeWqEhcCqQAAABU"]
[Fri Dec 12 22:28:59.872984 2025] [:error] [pid 26519:tid 26532] [client 4.197.162.203:28763] [client 4.197.162.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aTwmq88TRgSGOeWqEhcCqwAAAAk"]
[Fri Dec 12 23:20:52.695034 2025] [:error] [pid 26607:tid 26619] [client 182.42.111.213:50739] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aTwy1Mb_b0tOEWTL2Km7SgAAAMo"]
[Sat Dec 13 03:34:26.770408 2025] [:error] [pid 60991:tid 61013] [client 38.97.60.82:52742] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aTxuQm5Xj6-M-KjdjNjdvwAAAdQ"], referer: binance.com
[Sat Dec 13 04:09:57.563414 2025] [:error] [pid 26355:tid 26362] [client 38.97.60.82:55772] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aTx2lbC7XsqhFIMjz7lQIAAAAAI"], referer: binance.com
[Sat Dec 13 04:14:33.511591 2025] [:error] [pid 64355:tid 64445] [client 38.97.60.82:65338] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aTx3qfzy6OXYeYq3qodpIAAAAJI"], referer: binance.com
[Sat Dec 13 04:56:35.227311 2025] [:error] [pid 43836:tid 43858] [client 188.26.86.65:57688] [client 188.26.86.65] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aTyBg2AEOBirsxb11nZxKgAAANQ"]
[Sat Dec 13 19:00:39.849071 2025] [:error] [pid 43747:tid 43767] [client 106.54.62.156:50498] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aT1HV5Yw3twBd_JQEHgm_wAAABA"]
[Sat Dec 13 22:24:45.480814 2025] [:error] [pid 43836:tid 43842] [client 170.106.180.153:58310] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aT13LWAEOBirsxb11nYM8AAAAMQ"]
[Sun Dec 14 01:36:37.840911 2025] [:error] [pid 14689:tid 14705] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Sun Dec 14 01:36:37.958259 2025] [:error] [pid 14689:tid 14697] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Sun Dec 14 01:36:38.075485 2025] [:error] [pid 14689:tid 14695] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.bing.com/
[Sun Dec 14 01:36:39.728411 2025] [:error] [pid 14689:tid 14694] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://duckduckgo.com/
[Sun Dec 14 01:36:39.848672 2025] [:error] [pid 14689:tid 14710] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Sun Dec 14 01:36:40.085701 2025] [:error] [pid 14689:tid 14696] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.co.uk/
[Sun Dec 14 01:36:40.206680 2025] [:error] [pid 14689:tid 14712] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.yahoo.com/
[Sun Dec 14 01:36:40.442218 2025] [:error] [pid 14689:tid 14717] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.google.fr/
[Sun Dec 14 01:36:40.559278 2025] [:error] [pid 14689:tid 14715] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: https://www.google.fr/
[Sun Dec 14 01:36:40.676272 2025] [:error] [pid 14689:tid 14699] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.com/
[Sun Dec 14 01:36:41.285434 2025] [:error] [pid 14689:tid 14716] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.yahoo.com/
[Sun Dec 14 01:36:41.407046 2025] [:error] [pid 14689:tid 14714] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Sun Dec 14 01:36:41.527230 2025] [:error] [pid 14689:tid 14713] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.bing.com/
[Sun Dec 14 01:36:41.645918 2025] [:error] [pid 14689:tid 14707] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Sun Dec 14 01:36:41.763592 2025] [:error] [pid 14689:tid 14711] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Sun Dec 14 01:36:41.880357 2025] [:error] [pid 14689:tid 14704] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.com/
[Sun Dec 14 01:36:41.998111 2025] [:error] [pid 14689:tid 14705] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Sun Dec 14 01:36:42.117527 2025] [:error] [pid 14689:tid 14706] [client 172.192.49.180:22929] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.google.fr/
[Sun Dec 14 01:36:42.704983 2025] [:error] [pid 14689:tid 14693] [client 172.192.49.180:22929] [client 172.192.49.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT2kKkEcifvaa9I7SnmAwAAAAUA"], referer: https://www.google.de/
[Sun Dec 14 01:40:21.183930 2025] [:error] [pid 14689:tid 14698] [client 175.6.217.4:35859] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aT2lBUEcifvaa9I7SnmBtQAAAUU"]
[Sun Dec 14 03:59:40.925470 2025] [:error] [pid 57847:tid 57914] [client 34.61.166.65:50008] [client 34.61.166.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aT3FrKKPgygUGYNLAhF5qQAAAIQ"]
[Sun Dec 14 13:44:32.226911 2025] [:error] [pid 40561:tid 40572] [client 24.77.74.230:3617] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aT5OwIY6r869zoqRQkRKrwAAAUc"]
[Sun Dec 14 13:44:32.233861 2025] [:error] [pid 40561:tid 40572] [client 24.77.74.230:3617] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 14 14:10:04.257293 2025] [:error] [pid 39524:tid 39571] [client 1.15.52.154:43262] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aT5UvGrVGpbDzFtDE9NkwQAAAE8"]
[Sun Dec 14 20:45:52.036465 2025] [:error] [pid 40561:tid 40572] [client 49.234.192.248:34708] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aT6xgIY6r869zoqRQkTdCQAAAUc"]
[Mon Dec 15 21:17:16.703140 2025] [:error] [pid 31372:tid 31383] [client 101.33.66.34:52190] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUAKXAN06qRtpJxyxHizbQAAAIc"]
[Tue Dec 16 04:08:02.089961 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Dec 16 04:08:02.482328 2025] [:error] [pid 58449:tid 58457] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Dec 16 04:08:02.927331 2025] [:error] [pid 58449:tid 58461] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue Dec 16 04:08:03.383309 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Dec 16 04:08:03.818045 2025] [:error] [pid 58449:tid 58457] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Dec 16 04:08:04.240725 2025] [:error] [pid 58449:tid 58456] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Dec 16 04:08:04.631585 2025] [:error] [pid 58449:tid 58465] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Dec 16 04:08:05.045104 2025] [:error] [pid 58449:tid 58462] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 16 04:08:05.896101 2025] [:error] [pid 58449:tid 58457] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Dec 16 04:08:06.841134 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue Dec 16 04:08:07.282541 2025] [:error] [pid 58449:tid 58469] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Dec 16 04:08:07.662246 2025] [:error] [pid 58449:tid 58475] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Dec 16 04:08:08.105586 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Dec 16 04:08:08.509461 2025] [:error] [pid 58449:tid 58469] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Dec 16 04:08:08.889004 2025] [:error] [pid 58449:tid 58452] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Dec 16 04:08:09.304214 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Dec 16 04:08:10.034340 2025] [:error] [pid 58449:tid 58463] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Dec 16 04:08:10.446821 2025] [:error] [pid 58449:tid 58465] [client 45.154.138.34:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Dec 16 04:08:16.663380 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.34:24461] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUBqsBy4x-l6LcLg3Eew5QAAARQ"]
[Tue Dec 16 04:08:18.733602 2025] [:error] [pid 33917:tid 33990] [client 45.154.138.235:52565] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUBqsrzjvOPCow0iasGazAAAAJE"]
[Tue Dec 16 04:08:20.909830 2025] [:error] [pid 34008:tid 34026] [client 45.154.138.2:28535] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Dec 16 04:08:22.313846 2025] [:error] [pid 34008:tid 34033] [client 45.154.138.2:28535] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUBqthMSzjEG4A-bhxxZhAAAANc"]
[Tue Dec 16 04:08:23.920391 2025] [:error] [pid 58449:tid 58471] [client 45.154.138.101:20069] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Dec 16 04:08:24.356849 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.101:20069] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUBquBy4x-l6LcLg3EexRgAAARQ"]
[Tue Dec 16 04:08:25.607700 2025] [:error] [pid 33915:tid 33943] [client 45.154.138.6:57583] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Dec 16 04:08:27.718878 2025] [:error] [pid 33915:tid 33925] [client 45.154.138.6:57583] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUBquzmKDDHksiQDo85LPAAAAAY"]
[Tue Dec 16 04:08:29.882167 2025] [:error] [pid 58449:tid 58477] [client 45.154.138.14:43673] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUBqvRy4x-l6LcLg3EexbQAAARg"]
[Tue Dec 16 04:08:30.679370 2025] [:error] [pid 34008:tid 34018] [client 45.154.138.36:24593] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUBqvhMSzjEG4A-bhxxZ-wAAAMg"]
[Tue Dec 16 04:08:31.676030 2025] [:error] [pid 34008:tid 34010] [client 45.154.138.24:29785] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUBqvxMSzjEG4A-bhxxaCwAAAMA"]
[Tue Dec 16 04:08:32.519449 2025] [:error] [pid 33916:tid 33966] [client 45.154.138.5:39271] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUBqwCZs6NytTdwKTkT1VAAAAFQ"]
[Tue Dec 16 04:08:33.402250 2025] [:error] [pid 33916:tid 33947] [client 45.154.138.39:32153] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUBqwSZs6NytTdwKTkT1XgAAAEE"]
[Tue Dec 16 04:08:36.850991 2025] [:error] [pid 34008:tid 34023] [client 45.154.138.22:21489] [client 45.154.138.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUBqxBMSzjEG4A-bhxxaYwAAAM0"]
[Tue Dec 16 04:08:38.752190 2025] [:error] [pid 33916:tid 33966] [client 45.154.138.24:54433] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue Dec 16 04:08:39.574423 2025] [:error] [pid 33916:tid 33963] [client 45.154.138.24:54433] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUBqxyZs6NytTdwKTkT1sAAAAFE"]
[Tue Dec 16 04:08:45.733982 2025] [:error] [pid 33915:tid 33938] [client 45.154.138.27:50897] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUBqzTmKDDHksiQDo85MLAAAABM"]
[Tue Dec 16 04:08:48.503946 2025] [:error] [pid 33917:tid 33986] [client 45.154.138.26:40425] [client 45.154.138.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUBq0LzjvOPCow0iasGcOQAAAI0"]
[Tue Dec 16 04:08:49.336078 2025] [:error] [pid 58449:tid 58476] [client 45.154.138.31:64569] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue Dec 16 04:08:49.826234 2025] [:error] [pid 58449:tid 58477] [client 45.154.138.31:64569] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUBq0Ry4x-l6LcLg3EeyNQAAARg"]
[Tue Dec 16 04:08:51.661404 2025] [:error] [pid 33917:tid 33992] [client 45.154.138.8:31125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Dec 16 04:08:52.890880 2025] [:error] [pid 33917:tid 33985] [client 45.154.138.8:31125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Dec 16 04:08:54.100641 2025] [:error] [pid 33917:tid 33979] [client 45.154.138.8:31125] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUBq1rzjvOPCow0iasGcnAAAAIY"]
[Tue Dec 16 04:08:54.902158 2025] [:error] [pid 58731:tid 58744] [client 45.154.138.3:46723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Dec 16 04:08:55.337900 2025] [:error] [pid 58731:tid 58755] [client 45.154.138.3:46723] [client 45.154.138.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUBq1_fMdtvgyth4ND6UegAAAVY"]
[Tue Dec 16 04:08:56.188390 2025] [:error] [pid 33915:tid 33938] [client 45.154.138.20:28027] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Dec 16 04:08:57.051213 2025] [:error] [pid 33915:tid 33932] [client 45.154.138.20:28027] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUBq2TmKDDHksiQDo85MtAAAAA0"]
[Tue Dec 16 04:08:58.334336 2025] [:error] [pid 33917:tid 33990] [client 45.154.138.47:56905] [client 45.154.138.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUBq2rzjvOPCow0iasGc2AAAAJE"]
[Tue Dec 16 04:08:59.584651 2025] [:error] [pid 33917:tid 33983] [client 45.154.138.235:31549] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Tue Dec 16 04:09:00.020115 2025] [:error] [pid 33917:tid 33978] [client 45.154.138.235:31549] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Dec 16 04:09:00.978439 2025] [:error] [pid 33917:tid 33993] [client 45.154.138.235:31549] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUBq3LzjvOPCow0iasGc-gAAAJQ"]
[Tue Dec 16 04:09:02.350036 2025] [:error] [pid 58731:tid 58757] [client 45.154.138.11:30627] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUBq3vfMdtvgyth4ND6U9gAAAVg"]
[Tue Dec 16 04:09:04.644017 2025] [:error] [pid 33915:tid 33932] [client 45.154.138.8:40713] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUBq4DmKDDHksiQDo85M9QAAAA0"]
[Tue Dec 16 04:09:07.467811 2025] [:error] [pid 33916:tid 33967] [client 45.154.138.17:49995] [client 45.154.138.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUBq4yZs6NytTdwKTkT3jQAAAFU"]
[Tue Dec 16 04:09:09.332352 2025] [:error] [pid 58731:tid 58748] [client 45.154.138.35:35219] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUBq5ffMdtvgyth4ND6VcQAAAU8"]
[Tue Dec 16 04:09:12.185985 2025] [:error] [pid 34008:tid 34029] [client 45.154.138.27:42405] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Dec 16 04:09:12.600569 2025] [:error] [pid 34008:tid 34022] [client 45.154.138.27:42405] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUBq6BMSzjEG4A-bhxxb4gAAAMw"]
[Tue Dec 16 04:09:14.416665 2025] [:error] [pid 33916:tid 33955] [client 45.154.138.34:28555] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUBq6iZs6NytTdwKTkT4GwAAAEk"]
[Tue Dec 16 10:32:44.040978 2025] [:error] [pid 12330:tid 12354] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Dec 16 10:32:44.311846 2025] [:error] [pid 12330:tid 12346] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Dec 16 10:32:44.581594 2025] [:error] [pid 12330:tid 12358] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Tue Dec 16 10:32:44.852991 2025] [:error] [pid 12330:tid 12343] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Tue Dec 16 10:32:45.124455 2025] [:error] [pid 12330:tid 12357] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Tue Dec 16 10:32:46.718376 2025] [:error] [pid 12330:tid 12357] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Dec 16 10:32:46.989225 2025] [:error] [pid 12330:tid 12341] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Tue Dec 16 10:32:47.534284 2025] [:error] [pid 12330:tid 12337] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Dec 16 10:32:47.805976 2025] [:error] [pid 12330:tid 12335] [client 13.74.149.244:16573] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Dec 16 10:32:48.073359 2025] [:error] [pid 12330:tid 12353] [client 13.74.149.244:16573] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pu.php"] [unique_id "aUDE0F6iIQEVCIh8V1nOSwAAAZM"]
[Tue Dec 16 10:32:48.607819 2025] [:error] [pid 51991:tid 52008] [client 13.74.149.244:14226] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pu.php"] [unique_id "aUDE0K7zKCVJSuwV1xbKGwAAAQ8"]
[Tue Dec 16 10:32:49.142169 2025] [:error] [pid 35998:tid 36014] [client 13.74.149.244:9850] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pu.php"] [unique_id "aUDE0RKnhGuuhGxBSLMxGQAAAU0"]
[Tue Dec 16 10:32:49.676428 2025] [:error] [pid 18322:tid 18337] [client 13.74.149.244:2427] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/npcs7k.php"] [unique_id "aUDE0ZsCeWBjrw28XtxwhQAAAAs"]
[Tue Dec 16 10:32:50.210580 2025] [:error] [pid 51991:tid 52015] [client 13.74.149.244:14233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/npcs7k.php"] [unique_id "aUDE0q7zKCVJSuwV1xbKHAAAARY"]
[Tue Dec 16 10:32:50.744971 2025] [:error] [pid 18322:tid 18334] [client 13.74.149.244:3313] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/npcs7k.php"] [unique_id "aUDE0psCeWBjrw28XtxwhwAAAAg"]
[Tue Dec 16 10:32:51.278212 2025] [:error] [pid 12330:tid 12348] [client 13.74.149.244:14630] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/npcs7k.php"] [unique_id "aUDE016iIQEVCIh8V1nOVwAAAY4"]
[Tue Dec 16 10:32:51.812270 2025] [:error] [pid 51991:tid 51998] [client 13.74.149.244:14593] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cro.php"] [unique_id "aUDE067zKCVJSuwV1xbKHgAAAQU"]
[Tue Dec 16 10:32:52.346623 2025] [:error] [pid 18324:tid 18396] [client 13.74.149.244:10565] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cro.php"] [unique_id "aUDE1KG4um2mD1VpJHL-eAAAAJA"]
[Tue Dec 16 10:32:52.887022 2025] [:error] [pid 18324:tid 18391] [client 13.74.149.244:2398] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cro.php"] [unique_id "aUDE1KG4um2mD1VpJHL-eQAAAIs"]
[Tue Dec 16 10:32:53.418193 2025] [:error] [pid 18322:tid 18346] [client 13.74.149.244:4075] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cro.php"] [unique_id "aUDE1ZsCeWBjrw28XtxwiQAAABQ"]
[Tue Dec 16 10:50:48.155980 2025] [:error] [pid 18408:tid 18425] [client 106.54.62.156:43760] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUDJCDi2Gr8pDzjrVBBnggAAAM8"]
[Tue Dec 16 13:25:11.134002 2025] [:error] [pid 35998:tid 36017] [client 170.106.180.139:49090] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUDtNxKnhGuuhGxBSLNgDwAAAVA"]
[Tue Dec 16 13:36:55.623820 2025] [:error] [pid 18323:tid 18355] [client 124.107.153.99:52988] [client 124.107.153.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.107.153.99, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUDv9zJB6UFxIutsA8bWbwAAAEI"]
[Tue Dec 16 13:36:55.628692 2025] [:error] [pid 18323:tid 18355] [client 124.107.153.99:52988] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 16 16:48:06.549612 2025] [:error] [pid 18324:tid 18396] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-729.php
[Tue Dec 16 16:48:06.668724 2025] [:error] [pid 18324:tid 18392] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Tue Dec 16 16:48:06.786744 2025] [:error] [pid 18324:tid 18401] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Tue Dec 16 16:48:06.907410 2025] [:error] [pid 18324:tid 18399] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/tesTyuj.php
[Tue Dec 16 16:48:08.684768 2025] [:error] [pid 18324:tid 18385] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Tue Dec 16 16:48:08.801462 2025] [:error] [pid 18324:tid 18386] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Dec 16 16:48:08.931860 2025] [:error] [pid 18324:tid 18394] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Tue Dec 16 16:48:09.047710 2025] [:error] [pid 18324:tid 18390] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Tue Dec 16 16:48:09.298457 2025] [:error] [pid 18324:tid 18388] [client 4.189.124.35:62126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-64wscx6shd.php
[Tue Dec 16 16:48:09.446085 2025] [:error] [pid 18324:tid 18383] [client 4.189.124.35:62126] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "aUEcyaG4um2mD1VpJHJxSAAAAIM"]
[Tue Dec 16 16:48:19.652750 2025] [:error] [pid 53940:tid 53956] [client 4.189.124.35:62140] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "aUEc0191PNbcXLVkpR7I5gAAAc0"]
[Tue Dec 16 16:48:21.558238 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:58074] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "aUEc1a7zKCVJSuwV1xZrvgAAAQA"]
[Tue Dec 16 16:48:23.370977 2025] [:error] [pid 51991:tid 51994] [client 4.189.124.35:5745] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "aUEc167zKCVJSuwV1xZrwgAAAQE"]
[Tue Dec 16 16:48:25.077484 2025] [:error] [pid 53940:tid 53967] [client 4.189.124.35:50139] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sid.php"] [unique_id "aUEc2V91PNbcXLVkpR7I6QAAAdg"]
[Tue Dec 16 16:48:26.719156 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:45195] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sid.php"] [unique_id "aUEc2q7zKCVJSuwV1xZrywAAAQQ"]
[Tue Dec 16 16:48:28.787014 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:5414] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sid.php"] [unique_id "aUEc3K7zKCVJSuwV1xZrzAAAAQA"]
[Tue Dec 16 16:48:31.799454 2025] [:error] [pid 53940:tid 53957] [client 4.189.124.35:46882] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sid.php"] [unique_id "aUEc3191PNbcXLVkpR7I9AAAAc4"]
[Tue Dec 16 16:48:34.466488 2025] [:error] [pid 35998:tid 36011] [client 4.189.124.35:54148] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aUEc4hKnhGuuhGxBSLOPoQAAAUo"]
[Tue Dec 16 16:48:36.572621 2025] [:error] [pid 12330:tid 12340] [client 4.189.124.35:5864] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aUEc5F6iIQEVCIh8V1lSkAAAAYY"]
[Tue Dec 16 16:48:38.837619 2025] [:error] [pid 18323:tid 18371] [client 4.189.124.35:5615] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aUEc5jJB6UFxIutsA8YISQAAAFI"]
[Tue Dec 16 16:48:40.963983 2025] [:error] [pid 18323:tid 18354] [client 4.189.124.35:48242] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aUEc6DJB6UFxIutsA8YITwAAAEE"]
[Tue Dec 16 16:48:46.248317 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:48825] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUEc7q7zKCVJSuwV1xZr5gAAAQ0"]
[Tue Dec 16 16:48:46.672645 2025] [:error] [pid 18324:tid 18392] [client 4.189.124.35:52502] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUEc7qG4um2mD1VpJHJxVwAAAIw"]
[Tue Dec 16 16:48:48.540886 2025] [:error] [pid 51991:tid 52013] [client 4.189.124.35:61430] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUEc8K7zKCVJSuwV1xZr7QAAARQ"]
[Tue Dec 16 16:48:52.350063 2025] [:error] [pid 12330:tid 12342] [client 4.189.124.35:47752] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUEc9F6iIQEVCIh8V1lSnAAAAYg"]
[Tue Dec 16 16:48:59.567884 2025] [:error] [pid 18322:tid 18349] [client 4.189.124.35:46431] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUEc-5sCeWBjrw28XtziZgAAABc"]
[Tue Dec 16 16:49:02.763232 2025] [:error] [pid 18323:tid 18353] [client 4.189.124.35:46765] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUEc_jJB6UFxIutsA8YIeAAAAEA"]
[Tue Dec 16 16:49:06.808992 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:48216] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUEdAq7zKCVJSuwV1xZsHAAAARc"]
[Tue Dec 16 16:49:13.384375 2025] [:error] [pid 18408:tid 18415] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-title.php
[Tue Dec 16 16:49:13.508699 2025] [:error] [pid 18408:tid 18425] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Tue Dec 16 16:49:13.629532 2025] [:error] [pid 18408:tid 18432] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-home.php
[Tue Dec 16 16:49:13.748536 2025] [:error] [pid 18408:tid 18412] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Tue Dec 16 16:49:13.873082 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/atex1.php
[Tue Dec 16 16:49:13.994490 2025] [:error] [pid 18408:tid 18424] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/kdgok.php
[Tue Dec 16 16:49:14.119717 2025] [:error] [pid 18408:tid 18410] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Tue Dec 16 16:49:14.241332 2025] [:error] [pid 18408:tid 18433] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Dec 16 16:49:14.362603 2025] [:error] [pid 18408:tid 18413] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/sid-file.php
[Tue Dec 16 16:49:14.487092 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/l3gi0n.php
[Tue Dec 16 16:49:14.606691 2025] [:error] [pid 18408:tid 18417] [client 4.189.124.35:64173] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Tue Dec 16 16:49:14.720394 2025] [:error] [pid 18408:tid 18414] [client 4.189.124.35:64173] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aUEdCji2Gr8pDzjrVBDoNAAAAMQ"]
[Tue Dec 16 16:49:17.525818 2025] [:error] [pid 35998:tid 36001] [client 4.189.124.35:46749] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aUEdDRKnhGuuhGxBSLOPxgAAAUA"]
[Tue Dec 16 16:49:20.302296 2025] [:error] [pid 12330:tid 12350] [client 4.189.124.35:46113] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aUEdEF6iIQEVCIh8V1lStgAAAZA"]
[Tue Dec 16 16:49:22.406385 2025] [:error] [pid 51991:tid 52010] [client 4.189.124.35:58130] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bo.php"] [unique_id "aUEdEq7zKCVJSuwV1xZsNQAAARE"]
[Tue Dec 16 16:49:24.984777 2025] [:error] [pid 18408:tid 18433] [client 4.189.124.35:46104] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aUEdFDi2Gr8pDzjrVBDoPAAAANc"]
[Tue Dec 16 16:49:28.728856 2025] [:error] [pid 18322:tid 18337] [client 4.189.124.35:5615] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aUEdGJsCeWBjrw28XtzidQAAAAs"]
[Tue Dec 16 16:49:30.280090 2025] [:error] [pid 51991:tid 52010] [client 4.189.124.35:52761] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aUEdGq7zKCVJSuwV1xZsQAAAARE"]
[Tue Dec 16 16:49:34.467793 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:52584] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "aUEdHq7zKCVJSuwV1xZsRAAAAQs"]
[Tue Dec 16 16:49:36.491515 2025] [:error] [pid 18323:tid 18365] [client 4.189.124.35:48975] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aUEdIDJB6UFxIutsA8YIkgAAAEw"]
[Tue Dec 16 16:49:38.004755 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:46117] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aUEdIpsCeWBjrw28XtzifgAAABg"]
[Tue Dec 16 16:49:39.978027 2025] [:error] [pid 18408:tid 18422] [client 4.189.124.35:58807] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aUEdIzi2Gr8pDzjrVBDoUAAAAMw"]
[Tue Dec 16 16:49:42.002190 2025] [:error] [pid 18408:tid 18430] [client 4.189.124.35:50909] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Contrller.php"] [unique_id "aUEdJji2Gr8pDzjrVBDoVgAAANQ"]
[Tue Dec 16 16:49:47.468486 2025] [:error] [pid 18322:tid 18345] [client 4.189.124.35:52588] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aUEdK5sCeWBjrw28XtziiQAAABM"]
[Tue Dec 16 16:49:48.686509 2025] [:error] [pid 18324:tid 18380] [client 4.189.124.35:52806] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aUEdLKG4um2mD1VpJHJxoAAAAIA"]
[Tue Dec 16 16:49:51.210267 2025] [:error] [pid 12330:tid 12350] [client 4.189.124.35:58755] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aUEdL16iIQEVCIh8V1lS0QAAAZA"]
[Tue Dec 16 16:49:54.310620 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:50931] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/o2.php"] [unique_id "aUEdMq7zKCVJSuwV1xZsXQAAAQA"]
[Tue Dec 16 16:49:56.673094 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:63681] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error_log.php"] [unique_id "aUEdNK7zKCVJSuwV1xZsZgAAARg"]
[Tue Dec 16 16:50:01.900003 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:50933] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error_log.php"] [unique_id "aUEdOTi2Gr8pDzjrVBDobQAAAME"]
[Tue Dec 16 16:50:03.467666 2025] [:error] [pid 12330:tid 12342] [client 4.189.124.35:56777] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error_log.php"] [unique_id "aUEdO16iIQEVCIh8V1lS1gAAAYg"]
[Tue Dec 16 16:50:05.384816 2025] [:error] [pid 53940:tid 53949] [client 4.189.124.35:50930] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error_log.php"] [unique_id "aUEdPV91PNbcXLVkpR7JGwAAAcY"]
[Tue Dec 16 16:50:06.715959 2025] [:error] [pid 18323:tid 18358] [client 4.189.124.35:56814] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inghl.php"] [unique_id "aUEdPjJB6UFxIutsA8YIrQAAAEU"]
[Tue Dec 16 16:50:09.598170 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:51157] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inghl.php"] [unique_id "aUEdQa7zKCVJSuwV1xZsdwAAAQM"]
[Tue Dec 16 16:50:12.021128 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:63703] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inghl.php"] [unique_id "aUEdRK7zKCVJSuwV1xZseQAAAQs"]
[Tue Dec 16 16:50:15.423641 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/inghl.php
[Tue Dec 16 16:50:15.540885 2025] [:error] [pid 18408:tid 18417] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-securitiy.php
[Tue Dec 16 16:50:15.668876 2025] [:error] [pid 18408:tid 18414] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Tue Dec 16 16:50:15.789767 2025] [:error] [pid 18408:tid 18423] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ac.php
[Tue Dec 16 16:50:16.148504 2025] [:error] [pid 18408:tid 18432] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/krypton.php
[Tue Dec 16 16:50:16.271559 2025] [:error] [pid 18408:tid 18427] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/karma_57c3d4.php
[Tue Dec 16 16:50:17.446905 2025] [:error] [pid 18408:tid 18418] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/fc72f.php
[Tue Dec 16 16:50:17.581646 2025] [:error] [pid 18408:tid 18420] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Dec 16 16:50:17.699130 2025] [:error] [pid 18408:tid 18434] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/jjrpo.php
[Tue Dec 16 16:50:17.816388 2025] [:error] [pid 18408:tid 18425] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Tue Dec 16 16:50:17.952062 2025] [:error] [pid 18408:tid 18430] [client 4.189.124.35:49428] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-advaced.php
[Tue Dec 16 16:50:18.075860 2025] [:error] [pid 18408:tid 18415] [client 4.189.124.35:49428] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aUEdSji2Gr8pDzjrVBDohwAAAMU"]
[Tue Dec 16 16:50:23.984625 2025] [:error] [pid 53940:tid 53949] [client 4.189.124.35:51199] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aUEdT191PNbcXLVkpR7JNQAAAcY"]
[Tue Dec 16 16:50:28.412615 2025] [:error] [pid 18408:tid 18418] [client 4.189.124.35:62592] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aUEdVDi2Gr8pDzjrVBDojgAAAMg"]
[Tue Dec 16 16:50:31.122679 2025] [:error] [pid 18408:tid 18421] [client 4.189.124.35:49357] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "aUEdVzi2Gr8pDzjrVBDolAAAAMs"]
[Tue Dec 16 16:50:33.482482 2025] [:error] [pid 18408:tid 18427] [client 4.189.124.35:47473] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aUEdWTi2Gr8pDzjrVBDomwAAANE"]
[Tue Dec 16 16:50:36.459765 2025] [:error] [pid 18408:tid 18428] [client 4.189.124.35:49711] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aUEdXDi2Gr8pDzjrVBDongAAANI"]
[Tue Dec 16 16:50:39.742133 2025] [:error] [pid 18322:tid 18337] [client 4.189.124.35:55005] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aUEdX5sCeWBjrw28XtzirAAAAAs"]
[Tue Dec 16 16:50:42.748919 2025] [:error] [pid 18324:tid 18386] [client 4.189.124.35:5281] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aUEdYqG4um2mD1VpJHJx3wAAAIY"]
[Tue Dec 16 16:50:45.360252 2025] [:error] [pid 12330:tid 12355] [client 4.189.124.35:60133] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aUEdZV6iIQEVCIh8V1lTDwAAAZU"]
[Tue Dec 16 16:50:46.948581 2025] [:error] [pid 18322:tid 18344] [client 4.189.124.35:60124] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aUEdZpsCeWBjrw28XtziygAAABI"]
[Tue Dec 16 16:50:49.114564 2025] [:error] [pid 12330:tid 12336] [client 4.189.124.35:49349] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aUEdaV6iIQEVCIh8V1lTFgAAAYI"]
[Tue Dec 16 16:50:52.079491 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:49688] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aUEdbK7zKCVJSuwV1xZszQAAAQk"]
[Tue Dec 16 16:50:53.329306 2025] [:error] [pid 53940:tid 53944] [client 4.189.124.35:60121] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aUEdbV91PNbcXLVkpR7JTgAAAcE"]
[Tue Dec 16 16:50:55.469744 2025] [:error] [pid 18408:tid 18425] [client 4.189.124.35:60131] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aUEdbzi2Gr8pDzjrVBDovQAAAM8"]
[Tue Dec 16 16:50:58.523409 2025] [:error] [pid 18322:tid 18330] [client 4.189.124.35:5269] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aUEdcpsCeWBjrw28Xtzi3QAAAAQ"]
[Tue Dec 16 16:51:01.133683 2025] [:error] [pid 18323:tid 18365] [client 4.189.124.35:50394] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aUEddTJB6UFxIutsA8YI6gAAAEw"]
[Tue Dec 16 16:51:04.433288 2025] [:error] [pid 18324:tid 18385] [client 4.189.124.35:60146] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUEdeKG4um2mD1VpJHJyEAAAAIU"]
[Tue Dec 16 16:51:05.706322 2025] [:error] [pid 18408:tid 18431] [client 4.189.124.35:60105] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUEdeTi2Gr8pDzjrVBDo1wAAANU"]
[Tue Dec 16 16:51:07.385524 2025] [:error] [pid 18322:tid 18340] [client 4.189.124.35:5638] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUEde5sCeWBjrw28Xtzi5wAAAA4"]
[Tue Dec 16 16:51:14.179076 2025] [:error] [pid 18408:tid 18414] [client 4.189.124.35:47141] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUEdgji2Gr8pDzjrVBDo5gAAAMQ"]
[Tue Dec 16 16:51:15.766099 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:50191] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUEdg191PNbcXLVkpR7JXQAAAc8"]
[Tue Dec 16 16:51:17.572752 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Dec 16 16:51:17.689983 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/jdlqi.php
[Tue Dec 16 16:51:18.224990 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Tue Dec 16 16:51:18.695269 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/khgdl.php
[Tue Dec 16 16:51:18.816637 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Dec 16 16:51:18.941229 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/ghreshttryu.php
[Tue Dec 16 16:51:19.061064 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/xopvne.php
[Tue Dec 16 16:51:19.179143 2025] [:error] [pid 51991:tid 52001] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/lm18.php
[Tue Dec 16 16:51:19.295889 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Tue Dec 16 16:51:19.435341 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Dec 16 16:51:20.947461 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:47148] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Tue Dec 16 16:51:21.061063 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:47148] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ce.php"] [unique_id "aUEdia7zKCVJSuwV1xZtUwAAAQs"]
[Tue Dec 16 16:51:24.842698 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:45191] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ce.php"] [unique_id "aUEdjF6iIQEVCIh8V1lTOQAAAZM"]
[Tue Dec 16 16:51:26.729703 2025] [:error] [pid 12330:tid 12348] [client 4.189.124.35:47157] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ce.php"] [unique_id "aUEdjl6iIQEVCIh8V1lTPAAAAY4"]
[Tue Dec 16 16:51:29.929518 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:62609] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ce.php"] [unique_id "aUEdka7zKCVJSuwV1xZtXwAAAQ4"]
[Tue Dec 16 16:51:30.530422 2025] [:error] [pid 18323:tid 18376] [client 4.189.124.35:49871] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "aUEdkjJB6UFxIutsA8YJCAAAAFc"]
[Tue Dec 16 16:51:34.723618 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:50183] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "aUEdlji2Gr8pDzjrVBDo_wAAAME"]
[Tue Dec 16 16:51:41.668685 2025] [:error] [pid 18323:tid 18364] [client 4.189.124.35:5914] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "aUEdnTJB6UFxIutsA8YJEQAAAEs"]
[Tue Dec 16 16:51:52.856843 2025] [:error] [pid 51991:tid 52012] [client 4.189.124.35:49613] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "aUEdqK7zKCVJSuwV1xZteQAAARM"]
[Tue Dec 16 16:51:55.672558 2025] [:error] [pid 18408:tid 18432] [client 4.189.124.35:51770] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "aUEdqzi2Gr8pDzjrVBDpDgAAANY"]
[Tue Dec 16 16:51:57.526869 2025] [:error] [pid 18322:tid 18332] [client 4.189.124.35:49625] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "aUEdrZsCeWBjrw28XtzjBQAAAAY"]
[Tue Dec 16 16:52:03.239614 2025] [:error] [pid 35998:tid 36019] [client 4.189.124.35:51753] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "aUEdsxKnhGuuhGxBSLOQYAAAAVI"]
[Tue Dec 16 16:52:10.867952 2025] [:error] [pid 53940:tid 53963] [client 4.189.124.35:53496] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asa.php"] [unique_id "aUEdul91PNbcXLVkpR7JpgAAAdQ"]
[Tue Dec 16 16:52:14.174275 2025] [:error] [pid 18324:tid 18390] [client 4.189.124.35:53494] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asa.php"] [unique_id "aUEdvqG4um2mD1VpJHJyOwAAAIo"]
[Tue Dec 16 16:52:16.234981 2025] [:error] [pid 18322:tid 18331] [client 4.189.124.35:63238] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asa.php"] [unique_id "aUEdwJsCeWBjrw28XtzjLwAAAAU"]
[Tue Dec 16 16:52:22.541176 2025] [:error] [pid 51991:tid 52016] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/4fk6.php
[Tue Dec 16 16:52:22.670986 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/z123.php
[Tue Dec 16 16:52:22.798799 2025] [:error] [pid 51991:tid 52013] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/dox.php
[Tue Dec 16 16:52:22.975388 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/ccea.php
[Tue Dec 16 16:52:23.094496 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Tue Dec 16 16:52:23.334151 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Tue Dec 16 16:52:24.197151 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 16 16:52:24.404086 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/s121ws2s.php
[Tue Dec 16 16:52:24.521737 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Tue Dec 16 16:52:24.644600 2025] [:error] [pid 51991:tid 52009] [client 4.189.124.35:63195] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Tue Dec 16 16:52:24.780220 2025] [:error] [pid 51991:tid 52010] [client 4.189.124.35:63195] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww3.php"] [unique_id "aUEdyK7zKCVJSuwV1xZt1wAAARE"]
[Tue Dec 16 16:52:26.836446 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:51157] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww3.php"] [unique_id "aUEdyl91PNbcXLVkpR7JtAAAAc8"]
[Tue Dec 16 16:52:29.974771 2025] [:error] [pid 53940:tid 53952] [client 4.189.124.35:56139] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww3.php"] [unique_id "aUEdzV91PNbcXLVkpR7JtwAAAck"]
[Tue Dec 16 16:52:31.805331 2025] [:error] [pid 18324:tid 18402] [client 4.189.124.35:58051] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww3.php"] [unique_id "aUEdz6G4um2mD1VpJHJySQAAAJY"]
[Tue Dec 16 16:52:33.514949 2025] [:error] [pid 35998:tid 36025] [client 4.189.124.35:60194] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/783de.php"] [unique_id "aUEd0RKnhGuuhGxBSLOQcQAAAVg"]
[Tue Dec 16 16:52:37.964930 2025] [:error] [pid 18408:tid 18414] [client 4.189.124.35:62090] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/783de.php"] [unique_id "aUEd1Ti2Gr8pDzjrVBDpOQAAAMQ"]
[Tue Dec 16 16:52:41.263499 2025] [:error] [pid 18324:tid 18391] [client 4.189.124.35:45664] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/783de.php"] [unique_id "aUEd2aG4um2mD1VpJHJyUQAAAIs"]
[Tue Dec 16 16:52:44.832666 2025] [:error] [pid 12330:tid 12344] [client 4.189.124.35:43586] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/783de.php"] [unique_id "aUEd3F6iIQEVCIh8V1lTmQAAAYo"]
[Tue Dec 16 16:52:47.993124 2025] [:error] [pid 18408:tid 18427] [client 4.189.124.35:46900] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "aUEd3zi2Gr8pDzjrVBDpXAAAANE"]
[Tue Dec 16 16:52:50.338711 2025] [:error] [pid 18322:tid 18328] [client 4.189.124.35:45191] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "aUEd4psCeWBjrw28XtzjXQAAAAI"]
[Tue Dec 16 16:52:52.252489 2025] [:error] [pid 18323:tid 18367] [client 4.189.124.35:50617] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "aUEd5DJB6UFxIutsA8YJVQAAAE4"]
[Tue Dec 16 16:52:53.931044 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:45728] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "aUEd5a7zKCVJSuwV1xZt-wAAAQ0"]
[Tue Dec 16 16:52:56.501145 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:5874] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUEd6K7zKCVJSuwV1xZuAQAAARY"]
[Tue Dec 16 16:52:58.558156 2025] [:error] [pid 18408:tid 18420] [client 4.189.124.35:48805] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUEd6ji2Gr8pDzjrVBDpagAAAMo"]
[Tue Dec 16 16:52:59.170006 2025] [:error] [pid 12330:tid 12347] [client 4.189.124.35:5237] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUEd616iIQEVCIh8V1lTtAAAAY0"]
[Tue Dec 16 16:53:00.586777 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:59410] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUEd7K7zKCVJSuwV1xZuEgAAAQI"]
[Tue Dec 16 16:53:04.088403 2025] [:error] [pid 18323:tid 18357] [client 4.189.124.35:48796] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUEd8DJB6UFxIutsA8YJXAAAAEQ"]
[Tue Dec 16 16:53:07.252504 2025] [:error] [pid 12330:tid 12345] [client 4.189.124.35:55527] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUEd816iIQEVCIh8V1lTvAAAAYs"]
[Tue Dec 16 16:53:09.938100 2025] [:error] [pid 18322:tid 18342] [client 4.189.124.35:55542] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUEd9ZsCeWBjrw28XtzjawAAABA"]
[Tue Dec 16 16:53:13.170044 2025] [:error] [pid 12330:tid 12348] [client 4.189.124.35:51109] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUEd-V6iIQEVCIh8V1lT9AAAAY4"]
[Tue Dec 16 16:53:15.980489 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:51084] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEd-67zKCVJSuwV1xZuJAAAAQs"]
[Tue Dec 16 16:53:19.193225 2025] [:error] [pid 18324:tid 18403] [client 4.189.124.35:63748] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEd_6G4um2mD1VpJHJyuAAAAJc"]
[Tue Dec 16 16:53:23.171741 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:47055] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEeA191PNbcXLVkpR7J9QAAAc8"]
[Tue Dec 16 16:53:23.982629 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:6054] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEeA16iIQEVCIh8V1lUBQAAAYk"]
[Tue Dec 16 16:53:27.336231 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Tue Dec 16 16:53:29.891787 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Tue Dec 16 16:53:30.009786 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Dec 16 16:53:30.135355 2025] [:error] [pid 51991:tid 52013] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/6kUgr4yGzxN.php
[Tue Dec 16 16:53:30.254616 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue Dec 16 16:53:30.400340 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/rp8zi.php
[Tue Dec 16 16:53:30.518387 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/cc3.php
[Tue Dec 16 16:53:30.635964 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Dec 16 16:53:30.756031 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Dec 16 16:53:30.876863 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Tue Dec 16 16:53:30.994949 2025] [:error] [pid 51991:tid 52010] [client 4.189.124.35:46424] File does not exist: /usr/local/apache/htdocs/suspended-page/qV9GbcJwZgK.php
[Tue Dec 16 16:53:31.849172 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:46424] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qsntqiho.php"] [unique_id "aUEeC67zKCVJSuwV1xZuRgAAAQo"]
[Tue Dec 16 16:53:34.001571 2025] [:error] [pid 35998:tid 36008] [client 4.189.124.35:46414] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qsntqiho.php"] [unique_id "aUEeDhKnhGuuhGxBSLOQqwAAAUc"]
[Tue Dec 16 16:53:36.650093 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:48188] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qsntqiho.php"] [unique_id "aUEeEDJB6UFxIutsA8YJpwAAAE0"]
[Tue Dec 16 16:53:39.311422 2025] [:error] [pid 51991:tid 52009] [client 4.189.124.35:51107] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qsntqiho.php"] [unique_id "aUEeE67zKCVJSuwV1xZuTAAAARA"]
[Tue Dec 16 16:53:40.179880 2025] [:error] [pid 53940:tid 53967] [client 4.189.124.35:54585] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qjaqjahu.php"] [unique_id "aUEeFF91PNbcXLVkpR7J_AAAAdg"]
[Tue Dec 16 16:53:43.011179 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:51088] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qjaqjahu.php"] [unique_id "aUEeFzi2Gr8pDzjrVBDp5AAAAMk"]
[Tue Dec 16 16:53:46.911967 2025] [:error] [pid 18324:tid 18389] [client 4.189.124.35:51097] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qjaqjahu.php"] [unique_id "aUEeGqG4um2mD1VpJHJyyAAAAIk"]
[Tue Dec 16 16:53:48.284201 2025] [:error] [pid 35998:tid 36022] [client 4.189.124.35:47845] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qjaqjahu.php"] [unique_id "aUEeHBKnhGuuhGxBSLOQsgAAAVU"]
[Tue Dec 16 16:53:54.350441 2025] [:error] [pid 18323:tid 18353] [client 4.189.124.35:48133] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEeIjJB6UFxIutsA8YJtAAAAEA"]
[Tue Dec 16 16:53:57.757512 2025] [:error] [pid 35998:tid 36014] [client 4.189.124.35:58744] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEeJRKnhGuuhGxBSLOQuAAAAU0"]
[Tue Dec 16 16:53:59.285839 2025] [:error] [pid 18322:tid 18345] [client 4.189.124.35:47071] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEeJ5sCeWBjrw28XtzjkAAAABM"]
[Tue Dec 16 16:54:03.324787 2025] [:error] [pid 18324:tid 18381] [client 4.189.124.35:5956] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEeK6G4um2mD1VpJHJy6gAAAIE"]
[Tue Dec 16 16:54:15.476035 2025] [:error] [pid 12330:tid 12335] [client 4.189.124.35:50625] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pwyjwrfr.php"] [unique_id "aUEeN16iIQEVCIh8V1lUSAAAAYE"]
[Tue Dec 16 16:54:25.121423 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:48830] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEeQa7zKCVJSuwV1xZu3QAAARg"]
[Tue Dec 16 16:54:28.158364 2025] [:error] [pid 18323:tid 18354] [client 4.189.124.35:5801] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEeRDJB6UFxIutsA8YJ0wAAAEE"]
[Tue Dec 16 16:54:30.702560 2025] [:error] [pid 18323:tid 18367] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/pNRzcP6wtYy.php
[Tue Dec 16 16:54:30.819503 2025] [:error] [pid 18323:tid 18358] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/ox8xhkkw.php
[Tue Dec 16 16:54:30.937960 2025] [:error] [pid 18323:tid 18357] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/oc460l3x.php
[Tue Dec 16 16:54:31.894661 2025] [:error] [pid 18323:tid 18370] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/NWqz649FIe7.php
[Tue Dec 16 16:54:32.016559 2025] [:error] [pid 18323:tid 18360] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/nucqsqeg.php
[Tue Dec 16 16:54:32.807123 2025] [:error] [pid 18323:tid 18376] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/mhpglaje.php
[Tue Dec 16 16:54:32.961663 2025] [:error] [pid 18323:tid 18365] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/LvCBeZWaSgQ.php
[Tue Dec 16 16:54:33.083789 2025] [:error] [pid 18323:tid 18375] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/KV7EGJmhHzX.php
[Tue Dec 16 16:54:33.201213 2025] [:error] [pid 18323:tid 18372] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/ijNdPI1Orya.php
[Tue Dec 16 16:54:33.321399 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/HPum4ZEBJRC.php
[Tue Dec 16 16:54:34.500263 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:50665] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Tue Dec 16 16:54:34.633864 2025] [:error] [pid 18323:tid 18359] [client 4.189.124.35:50665] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEeSjJB6UFxIutsA8YJ4QAAAEY"]
[Tue Dec 16 16:54:36.392043 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:5231] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEeTK7zKCVJSuwV1xZu9gAAAQk"]
[Tue Dec 16 16:54:40.676011 2025] [:error] [pid 51991:tid 52000] [client 4.189.124.35:51803] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEeUK7zKCVJSuwV1xZu_QAAAQc"]
[Tue Dec 16 16:54:42.559658 2025] [:error] [pid 51991:tid 52012] [client 4.189.124.35:45697] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUEeUq7zKCVJSuwV1xZvBQAAARM"]
[Tue Dec 16 16:54:44.870280 2025] [:error] [pid 18322:tid 18342] [client 4.189.124.35:5187] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin-header.php"] [unique_id "aUEeVJsCeWBjrw28XtzjuAAAABA"]
[Tue Dec 16 16:54:47.245619 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:64092] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin-header.php"] [unique_id "aUEeV67zKCVJSuwV1xZvEQAAARg"]
[Tue Dec 16 16:54:51.056025 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:50900] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin-header.php"] [unique_id "aUEeW5sCeWBjrw28XtzjuwAAABg"]
[Tue Dec 16 16:54:55.179194 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:46506] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin-header.php"] [unique_id "aUEeX16iIQEVCIh8V1lUaAAAAZM"]
[Tue Dec 16 16:54:59.416467 2025] [:error] [pid 18323:tid 18368] [client 4.189.124.35:49069] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEeYzJB6UFxIutsA8YJ9QAAAE8"]
[Tue Dec 16 16:55:03.437224 2025] [:error] [pid 53940:tid 53960] [client 4.189.124.35:47438] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEeZ191PNbcXLVkpR7KRAAAAdE"]
[Tue Dec 16 16:55:06.100909 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:64678] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEeal6iIQEVCIh8V1lUdAAAAZQ"]
[Tue Dec 16 16:55:08.696525 2025] [:error] [pid 18323:tid 18360] [client 4.189.124.35:64651] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEebDJB6UFxIutsA8YJ_AAAAEc"]
[Tue Dec 16 16:55:11.582356 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:54991] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEeb16iIQEVCIh8V1lUdwAAAYM"]
[Tue Dec 16 16:55:14.736571 2025] [:error] [pid 18323:tid 18367] [client 4.189.124.35:52186] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEecjJB6UFxIutsA8YKAwAAAE4"]
[Tue Dec 16 16:55:18.879804 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:58792] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEedpsCeWBjrw28XtzjzgAAAA0"]
[Tue Dec 16 16:55:30.061693 2025] [:error] [pid 53940:tid 53964] [client 4.189.124.35:52149] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEegl91PNbcXLVkpR7KXgAAAdU"]
[Tue Dec 16 16:55:33.876905 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:55595] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEeha7zKCVJSuwV1xZvRAAAAQY"]
[Tue Dec 16 16:55:39.193408 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/FSCMNvnjPX4.php
[Tue Dec 16 16:55:39.310455 2025] [:error] [pid 12330:tid 12340] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Dec 16 16:55:39.427678 2025] [:error] [pid 12330:tid 12356] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Dec 16 16:55:39.569890 2025] [:error] [pid 12330:tid 12341] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Dec 16 16:55:39.701966 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 16 16:55:39.824853 2025] [:error] [pid 12330:tid 12344] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Tue Dec 16 16:55:39.947678 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Dec 16 16:55:40.065226 2025] [:error] [pid 12330:tid 12335] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Dec 16 16:55:40.182636 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Tue Dec 16 16:55:40.302184 2025] [:error] [pid 12330:tid 12348] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue Dec 16 16:55:40.433063 2025] [:error] [pid 12330:tid 12342] [client 4.189.124.35:58161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Dec 16 16:55:40.546683 2025] [:error] [pid 12330:tid 12355] [client 4.189.124.35:58161] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aUEejF6iIQEVCIh8V1lUsAAAAZU"]
[Tue Dec 16 16:55:41.752535 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:58165] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aUEejTi2Gr8pDzjrVBDqewAAAMY"]
[Tue Dec 16 16:55:45.628043 2025] [:error] [pid 51991:tid 52010] [client 4.189.124.35:47495] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aUEeka7zKCVJSuwV1xZvcwAAARE"]
[Tue Dec 16 16:55:48.284002 2025] [:error] [pid 51991:tid 52007] [client 4.189.124.35:63631] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aUEelK7zKCVJSuwV1xZvfwAAAQ4"]
[Tue Dec 16 16:55:49.860302 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:47519] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUEela7zKCVJSuwV1xZvggAAAQo"]
[Tue Dec 16 16:55:51.528279 2025] [:error] [pid 18408:tid 18411] [client 4.189.124.35:55562] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUEelzi2Gr8pDzjrVBDq0AAAAME"]
[Tue Dec 16 16:55:53.458740 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:60667] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUEema7zKCVJSuwV1xZvhQAAAQQ"]
[Tue Dec 16 16:55:58.137607 2025] [:error] [pid 12330:tid 12356] [client 4.189.124.35:56199] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUEenl6iIQEVCIh8V1lUvQAAAZY"]
[Tue Dec 16 16:56:01.365454 2025] [:error] [pid 53940:tid 53951] [client 4.189.124.35:52572] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUEeoV91PNbcXLVkpR7KgQAAAcg"]
[Tue Dec 16 16:56:07.633030 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:52578] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUEep67zKCVJSuwV1xZvmAAAAQY"]
[Tue Dec 16 16:56:13.392527 2025] [:error] [pid 18324:tid 18400] [client 4.189.124.35:53714] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUEeraG4um2mD1VpJHJzrwAAAJQ"]
[Tue Dec 16 16:56:19.453526 2025] [:error] [pid 53940:tid 53947] [client 4.189.124.35:53747] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUEes191PNbcXLVkpR7KqQAAAcQ"]
[Tue Dec 16 16:56:19.989925 2025] [:error] [pid 35998:tid 36017] [client 4.189.124.35:58167] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUEesxKnhGuuhGxBSLORPQAAAVA"]
[Tue Dec 16 16:56:23.957952 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:50434] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUEet67zKCVJSuwV1xZvwgAAAQY"]
[Tue Dec 16 16:56:26.686122 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:47550] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUEeuji2Gr8pDzjrVBDrJgAAAMY"]
[Tue Dec 16 17:14:22.856368 2025] [:error] [pid 51991:tid 52004] [client 120.71.59.24:51994] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUEi7q7zKCVJSuwV1xZ3UAAAAQs"]
[Tue Dec 16 23:56:56.914023 2025] [:error] [pid 18324:tid 18398] [client 106.227.49.113:56503] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUGBSKG4um2mD1VpJHLaOAAAAJI"]
[Wed Dec 17 04:10:20.690279 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:42665] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/widgets.php"] [unique_id "aUG8rFX4E86rnrNa_8NrwgAAAEU"]
[Wed Dec 17 04:10:22.228179 2025] [:error] [pid 61472:tid 61498] [client 135.235.159.29:48173] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/widgets.php"] [unique_id "aUG8rhAY-vW9raLQk19U0QAAANg"]
[Wed Dec 17 04:10:23.058811 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:51594] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/widgets.php"] [unique_id "aUG8r1X4E86rnrNa_8NrxQAAAEw"]
[Wed Dec 17 04:10:24.119373 2025] [:error] [pid 61380:tid 61458] [client 135.235.159.29:42627] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/widgets.php"] [unique_id "aUG8sFDXNylu9SqhT6oMxQAAAJQ"]
[Wed Dec 17 04:10:25.475336 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:51602] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aUG8sRAY-vW9raLQk19U6AAAANM"]
[Wed Dec 17 04:10:26.036370 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:42677] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aUG8slDXNylu9SqhT6oMyQAAAIM"]
[Wed Dec 17 04:10:26.590678 2025] [:error] [pid 61378:tid 61394] [client 135.235.159.29:49198] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aUG8sh5G6F9PXKmYDCSG_AAAAAs"]
[Wed Dec 17 04:10:29.168216 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:42687] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aUG8tVX4E86rnrNa_8NrzwAAAEg"]
[Wed Dec 17 04:10:29.540719 2025] [:error] [pid 61379:tid 61415] [client 135.235.159.29:50649] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUG8tVX4E86rnrNa_8Nr0AAAAEQ"]
[Wed Dec 17 04:10:31.131607 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:42660] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUG8txAY-vW9raLQk19U8gAAAM8"]
[Wed Dec 17 04:10:32.514335 2025] [:error] [pid 61378:tid 61394] [client 135.235.159.29:41252] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUG8uB5G6F9PXKmYDCSHCwAAAAs"]
[Wed Dec 17 04:10:32.980891 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:51872] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUG8uBAY-vW9raLQk19U9gAAANA"]
[Wed Dec 17 04:10:34.029429 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:39649] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUG8uhAY-vW9raLQk19U-gAAANQ"]
[Wed Dec 17 04:10:35.895373 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:43184] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUG8uxAY-vW9raLQk19U_gAAAMI"]
[Wed Dec 17 04:10:37.806478 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:44528] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUG8vVDXNylu9SqhT6oM3wAAAI8"]
[Wed Dec 17 04:10:39.760649 2025] [:error] [pid 61379:tid 61425] [client 135.235.159.29:51077] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUG8v1X4E86rnrNa_8Nr2wAAAE4"]
[Wed Dec 17 04:10:41.175730 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:51875] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aUG8wVX4E86rnrNa_8Nr4QAAAE0"]
[Wed Dec 17 04:10:42.081475 2025] [:error] [pid 61378:tid 61401] [client 135.235.159.29:44502] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aUG8wh5G6F9PXKmYDCSHHgAAABI"]
[Wed Dec 17 04:10:43.211923 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:44440] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aUG8w1DXNylu9SqhT6oM8QAAAIw"]
[Wed Dec 17 04:10:44.659513 2025] [:error] [pid 61472:tid 61492] [client 135.235.159.29:51873] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aUG8xBAY-vW9raLQk19VEQAAANI"]
[Wed Dec 17 04:10:46.399813 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:43172] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUG8xhAY-vW9raLQk19VGAAAAMU"]
[Wed Dec 17 04:10:47.962890 2025] [:error] [pid 61378:tid 61391] [client 135.235.159.29:51118] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUG8xx5G6F9PXKmYDCSHIwAAAAg"]
[Wed Dec 17 04:10:49.375714 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:44506] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUG8yVX4E86rnrNa_8Nr8AAAAEE"]
[Wed Dec 17 04:10:50.989063 2025] [:error] [pid 61472:tid 61486] [client 135.235.159.29:3443] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUG8yhAY-vW9raLQk19VKQAAAMw"]
[Wed Dec 17 04:10:51.948407 2025] [:error] [pid 61379:tid 61417] [client 135.235.159.29:3934] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG8y1X4E86rnrNa_8Nr9QAAAEY"]
[Wed Dec 17 04:10:52.979171 2025] [:error] [pid 61380:tid 61447] [client 135.235.159.29:44474] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG8zFDXNylu9SqhT6oNCwAAAIk"]
[Wed Dec 17 04:10:54.131209 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:3439] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG8zhAY-vW9raLQk19VOAAAAMA"]
[Wed Dec 17 04:10:55.632388 2025] [:error] [pid 61379:tid 61434] [client 135.235.159.29:44487] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG8z1X4E86rnrNa_8Nr_wAAAFc"]
[Wed Dec 17 04:10:57.025450 2025] [:error] [pid 61380:tid 61448] [client 135.235.159.29:44432] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUG80VDXNylu9SqhT6oNHgAAAIo"]
[Wed Dec 17 04:10:58.693659 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:47668] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUG80lX4E86rnrNa_8NsEAAAAEw"]
[Wed Dec 17 04:10:59.840306 2025] [:error] [pid 61379:tid 61415] [client 135.235.159.29:50330] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUG801X4E86rnrNa_8NsGwAAAEQ"]
[Wed Dec 17 04:11:00.916106 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:44456] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUG81FX4E86rnrNa_8NsJgAAAEw"]
[Wed Dec 17 04:11:01.513891 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:3285] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUG81RAY-vW9raLQk19VYAAAAME"]
[Wed Dec 17 04:11:02.576332 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:40109] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUG81hAY-vW9raLQk19VZwAAAMU"]
[Wed Dec 17 04:11:04.042073 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:47663] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUG82FX4E86rnrNa_8NsNwAAAEM"]
[Wed Dec 17 04:11:05.652214 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:53308] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUG82RAY-vW9raLQk19VdQAAAM0"]
[Wed Dec 17 04:11:06.915736 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:53254] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUG82hAY-vW9raLQk19VfQAAANM"]
[Wed Dec 17 04:11:08.937571 2025] [:error] [pid 61379:tid 61430] [client 135.235.159.29:53283] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUG83FX4E86rnrNa_8NsSQAAAFM"]
[Wed Dec 17 04:11:10.686863 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:41895] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUG83hAY-vW9raLQk19VhgAAAMg"]
[Wed Dec 17 04:11:12.058982 2025] [:error] [pid 61379:tid 61429] [client 135.235.159.29:38438] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUG84FX4E86rnrNa_8NsVAAAAFI"]
[Wed Dec 17 04:11:13.330926 2025] [:error] [pid 61380:tid 61445] [client 135.235.159.29:52773] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUG84VDXNylu9SqhT6oNXAAAAIc"]
[Wed Dec 17 04:11:14.421628 2025] [:error] [pid 61380:tid 61454] [client 135.235.159.29:48377] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUG84lDXNylu9SqhT6oNXwAAAJA"]
[Wed Dec 17 04:11:15.525262 2025] [:error] [pid 61472:tid 61498] [client 135.235.159.29:40069] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUG84xAY-vW9raLQk19VmwAAANg"]
[Wed Dec 17 04:11:17.437804 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:3724] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUG85RAY-vW9raLQk19VoQAAANM"]
[Wed Dec 17 04:11:19.203726 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:3814] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aUG85xAY-vW9raLQk19VrQAAANQ"]
[Wed Dec 17 04:11:21.174873 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/minik.php
[Wed Dec 17 04:11:21.315722 2025] [:error] [pid 61379:tid 61428] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/OK.php
[Wed Dec 17 04:11:21.477650 2025] [:error] [pid 61379:tid 61417] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Wed Dec 17 04:11:21.620369 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/zsec.php
[Wed Dec 17 04:11:21.760688 2025] [:error] [pid 61379:tid 61415] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/arig.php
[Wed Dec 17 04:11:21.917460 2025] [:error] [pid 61379:tid 61422] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Wed Dec 17 04:11:22.060257 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Wed Dec 17 04:11:22.201146 2025] [:error] [pid 61379:tid 61427] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/af32.php
[Wed Dec 17 04:11:22.342846 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/rz.php
[Wed Dec 17 04:11:22.483296 2025] [:error] [pid 61379:tid 61430] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/let.php
[Wed Dec 17 04:11:22.623800 2025] [:error] [pid 61379:tid 61418] [client 135.235.159.29:38034] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Wed Dec 17 04:11:22.773962 2025] [:error] [pid 61379:tid 61433] [client 135.235.159.29:38034] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUG86lX4E86rnrNa_8NsfAAAAFY"]
[Wed Dec 17 04:11:24.163560 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:52363] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUG87FDXNylu9SqhT6oNfQAAAIY"]
[Wed Dec 17 04:11:25.464884 2025] [:error] [pid 61378:tid 61386] [client 135.235.159.29:41320] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUG87R5G6F9PXKmYDCSHWwAAAAM"]
[Wed Dec 17 04:11:27.404020 2025] [:error] [pid 61472:tid 61491] [client 135.235.159.29:41282] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUG87xAY-vW9raLQk19VzAAAANE"]
[Wed Dec 17 04:11:28.095542 2025] [:error] [pid 61472:tid 61498] [client 135.235.159.29:38431] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUG88BAY-vW9raLQk19V0AAAANg"]
[Wed Dec 17 04:11:29.075049 2025] [:error] [pid 61379:tid 61429] [client 135.235.159.29:38055] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUG88VX4E86rnrNa_8NskwAAAFI"]
[Wed Dec 17 04:11:32.367703 2025] [:error] [pid 61378:tid 61396] [client 135.235.159.29:38054] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUG89B5G6F9PXKmYDCSHaQAAAA0"]
[Wed Dec 17 04:11:34.094610 2025] [:error] [pid 61379:tid 61418] [client 135.235.159.29:52741] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUG89lX4E86rnrNa_8NspQAAAEc"]
[Wed Dec 17 04:11:35.473918 2025] [:error] [pid 61380:tid 61462] [client 135.235.159.29:41296] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUG891DXNylu9SqhT6oNpgAAAJg"]
[Wed Dec 17 04:11:36.097863 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:3829] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUG8-BAY-vW9raLQk19V5AAAAMI"]
[Wed Dec 17 04:11:37.312668 2025] [:error] [pid 61472:tid 61495] [client 135.235.159.29:40471] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUG8-RAY-vW9raLQk19V6gAAANU"]
[Wed Dec 17 04:11:38.559819 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:4063] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUG8-hAY-vW9raLQk19V8AAAAMs"]
[Wed Dec 17 04:11:39.937259 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:52367] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUG8-xAY-vW9raLQk19V9QAAAMI"]
[Wed Dec 17 04:11:41.470193 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:52678] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUG8_VX4E86rnrNa_8NsvwAAAFg"]
[Wed Dec 17 04:11:43.042703 2025] [:error] [pid 61379:tid 61429] [client 135.235.159.29:48839] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUG8_1X4E86rnrNa_8NswwAAAFI"]
[Wed Dec 17 04:11:43.961560 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:4045] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUG8_1DXNylu9SqhT6oNwQAAAJI"]
[Wed Dec 17 04:11:44.315419 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:42118] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUG9AFDXNylu9SqhT6oNxAAAAJU"]
[Wed Dec 17 04:11:45.495503 2025] [:error] [pid 61379:tid 61422] [client 135.235.159.29:38676] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUG9AVX4E86rnrNa_8NsygAAAEs"]
[Wed Dec 17 04:11:47.194618 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:42127] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUG9AxAY-vW9raLQk19WDQAAAMk"]
[Wed Dec 17 04:11:48.614743 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:40458] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUG9BBAY-vW9raLQk19WEgAAAMg"]
[Wed Dec 17 04:11:49.272079 2025] [:error] [pid 61472:tid 61497] [client 135.235.159.29:4062] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUG9BRAY-vW9raLQk19WFQAAANc"]
[Wed Dec 17 04:11:50.415024 2025] [:error] [pid 61379:tid 61422] [client 135.235.159.29:43581] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUG9BlX4E86rnrNa_8Ns0wAAAEs"]
[Wed Dec 17 04:11:51.786115 2025] [:error] [pid 61378:tid 61384] [client 135.235.159.29:4058] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUG9Bx5G6F9PXKmYDCSHoQAAAAE"]
[Wed Dec 17 04:11:53.565830 2025] [:error] [pid 61378:tid 61406] [client 135.235.159.29:43520] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUG9CR5G6F9PXKmYDCSHqQAAABc"]
[Wed Dec 17 04:11:54.610054 2025] [:error] [pid 61472:tid 61492] [client 135.235.159.29:4049] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUG9ChAY-vW9raLQk19WIgAAANI"]
[Wed Dec 17 04:11:55.822779 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:48405] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUG9CxAY-vW9raLQk19WJgAAAMs"]
[Wed Dec 17 04:11:57.223275 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:38670] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUG9DVX4E86rnrNa_8Ns4QAAAEI"]
[Wed Dec 17 04:11:58.303410 2025] [:error] [pid 61378:tid 61387] [client 135.235.159.29:46010] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUG9Dh5G6F9PXKmYDCSHsQAAAAQ"]
[Wed Dec 17 04:11:59.527016 2025] [:error] [pid 61379:tid 61421] [client 135.235.159.29:50242] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUG9D1X4E86rnrNa_8Ns7wAAAEo"]
[Wed Dec 17 04:12:00.610697 2025] [:error] [pid 61378:tid 61405] [client 135.235.159.29:37474] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUG9EB5G6F9PXKmYDCSHswAAABY"]
[Wed Dec 17 04:12:01.127889 2025] [:error] [pid 61472:tid 61476] [client 135.235.159.29:4061] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUG9ERAY-vW9raLQk19WOQAAAMI"]
[Wed Dec 17 04:12:01.532236 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:37538] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUG9ERAY-vW9raLQk19WPQAAAMg"]
[Wed Dec 17 04:12:02.761191 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:4050] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9ElX4E86rnrNa_8Ns8gAAAEI"]
[Wed Dec 17 04:12:03.355623 2025] [:error] [pid 61472:tid 61492] [client 135.235.159.29:37459] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9ExAY-vW9raLQk19WSAAAANI"]
[Wed Dec 17 04:12:04.005675 2025] [:error] [pid 61378:tid 61387] [client 135.235.159.29:4073] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9FB5G6F9PXKmYDCSHuQAAAAQ"]
[Wed Dec 17 04:12:04.517449 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:52682] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9FB5G6F9PXKmYDCSHvAAAAAc"]
[Wed Dec 17 04:12:05.633686 2025] [:error] [pid 61380:tid 61445] [client 135.235.159.29:52697] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUG9FVDXNylu9SqhT6oN-wAAAIc"]
[Wed Dec 17 04:12:07.744447 2025] [:error] [pid 61380:tid 61459] [client 135.235.159.29:48447] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUG9F1DXNylu9SqhT6oOAAAAAJU"]
[Wed Dec 17 04:12:08.925712 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:48418] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUG9GBAY-vW9raLQk19WXwAAAMM"]
[Wed Dec 17 04:12:09.633044 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:37446] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUG9GVX4E86rnrNa_8NtAgAAAE0"]
[Wed Dec 17 04:12:11.157332 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:42168] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUG9G1DXNylu9SqhT6oOCwAAAI4"]
[Wed Dec 17 04:12:12.617682 2025] [:error] [pid 61378:tid 61385] [client 135.235.159.29:52733] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUG9HB5G6F9PXKmYDCSH0gAAAAI"]
[Wed Dec 17 04:12:14.212784 2025] [:error] [pid 61380:tid 61445] [client 135.235.159.29:38408] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUG9HlDXNylu9SqhT6oOGQAAAIc"]
[Wed Dec 17 04:12:14.868988 2025] [:error] [pid 61379:tid 61431] [client 135.235.159.29:3267] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUG9HlX4E86rnrNa_8NtEgAAAFQ"]
[Wed Dec 17 04:12:15.547754 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:38016] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUG9HxAY-vW9raLQk19WaQAAANY"]
[Wed Dec 17 04:12:18.045419 2025] [:error] [pid 61472:tid 61484] [client 135.235.159.29:3823] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUG9IhAY-vW9raLQk19WcwAAAMo"]
[Wed Dec 17 04:12:19.645124 2025] [:error] [pid 61472:tid 61498] [client 135.235.159.29:38779] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUG9IxAY-vW9raLQk19WeQAAANg"]
[Wed Dec 17 04:12:21.063964 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:53257] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUG9JRAY-vW9raLQk19WewAAAM0"]
[Wed Dec 17 04:12:22.673592 2025] [:error] [pid 61380:tid 61445] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Dec 17 04:12:22.818984 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed Dec 17 04:12:22.988700 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Wed Dec 17 04:12:23.132401 2025] [:error] [pid 61380:tid 61454] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Dec 17 04:12:23.306339 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Dec 17 04:12:23.463693 2025] [:error] [pid 61380:tid 61449] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Dec 17 04:12:23.952989 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Dec 17 04:12:24.131089 2025] [:error] [pid 61380:tid 61455] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/uana.php
[Wed Dec 17 04:12:24.300463 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Dec 17 04:12:24.851799 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Wed Dec 17 04:12:24.998739 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:39596] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Wed Dec 17 04:12:25.209260 2025] [:error] [pid 61380:tid 61443] [client 135.235.159.29:39596] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aUG9KVDXNylu9SqhT6oORgAAAIU"]
[Wed Dec 17 04:12:26.894797 2025] [:error] [pid 61380:tid 61455] [client 135.235.159.29:42666] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aUG9KlDXNylu9SqhT6oOSwAAAJE"]
[Wed Dec 17 04:12:27.562726 2025] [:error] [pid 61472:tid 61484] [client 135.235.159.29:48175] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aUG9KxAY-vW9raLQk19WjgAAAMo"]
[Wed Dec 17 04:12:29.227941 2025] [:error] [pid 61379:tid 61415] [client 135.235.159.29:45277] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aUG9LVX4E86rnrNa_8NtNAAAAEQ"]
[Wed Dec 17 04:12:31.868379 2025] [:error] [pid 61378:tid 61402] [client 135.235.159.29:4027] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUG9Lx5G6F9PXKmYDCSIBAAAABM"]
[Wed Dec 17 04:12:33.952736 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:42701] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUG9MRAY-vW9raLQk19WowAAAMM"]
[Wed Dec 17 04:12:35.180519 2025] [:error] [pid 61380:tid 61438] [client 135.235.159.29:38996] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUG9M1DXNylu9SqhT6oOWwAAAIA"]
[Wed Dec 17 04:12:36.020387 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:46287] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUG9NFX4E86rnrNa_8NtQwAAAEI"]
[Wed Dec 17 04:12:36.730772 2025] [:error] [pid 61379:tid 61434] [client 135.235.159.29:37111] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aUG9NFX4E86rnrNa_8NtRAAAAFc"]
[Wed Dec 17 04:12:37.447142 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:4023] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aUG9NVDXNylu9SqhT6oOZAAAAIE"]
[Wed Dec 17 04:12:37.901124 2025] [:error] [pid 61380:tid 61457] [client 135.235.159.29:39022] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aUG9NVDXNylu9SqhT6oOZgAAAJM"]
[Wed Dec 17 04:12:39.194987 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:3996] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aUG9N1DXNylu9SqhT6oOagAAAIw"]
[Wed Dec 17 04:12:40.482337 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:42716] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUG9OFDXNylu9SqhT6oObgAAAI0"]
[Wed Dec 17 04:12:41.230240 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:37126] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUG9OVX4E86rnrNa_8NtSwAAAFg"]
[Wed Dec 17 04:12:42.177597 2025] [:error] [pid 61378:tid 61403] [client 135.235.159.29:37128] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUG9Oh5G6F9PXKmYDCSINgAAABQ"]
[Wed Dec 17 04:12:43.289118 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:43252] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUG9O1DXNylu9SqhT6oOcgAAAJY"]
[Wed Dec 17 04:12:43.653963 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:37944] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aUG9OxAY-vW9raLQk19WvAAAAMA"]
[Wed Dec 17 04:12:44.920582 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:39021] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aUG9PFX4E86rnrNa_8NtUwAAAEU"]
[Wed Dec 17 04:12:46.073961 2025] [:error] [pid 61380:tid 61443] [client 135.235.159.29:43244] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aUG9PlDXNylu9SqhT6oOeAAAAIU"]
[Wed Dec 17 04:12:47.252146 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:37134] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aUG9PxAY-vW9raLQk19WyAAAAME"]
[Wed Dec 17 04:12:49.193780 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:46221] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aUG9QVDXNylu9SqhT6oOhAAAAIw"]
[Wed Dec 17 04:12:50.513258 2025] [:error] [pid 61472:tid 61480] [client 135.235.159.29:46230] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aUG9QhAY-vW9raLQk19WzAAAAMY"]
[Wed Dec 17 04:12:51.108331 2025] [:error] [pid 61380:tid 61458] [client 135.235.159.29:3468] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aUG9Q1DXNylu9SqhT6oOhgAAAJQ"]
[Wed Dec 17 04:12:51.690902 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:37069] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aUG9Q1DXNylu9SqhT6oOiQAAAI0"]
[Wed Dec 17 04:12:53.849926 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:3485] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aUG9RVDXNylu9SqhT6oOjwAAAJc"]
[Wed Dec 17 04:12:55.873699 2025] [:error] [pid 61472:tid 61481] [client 135.235.159.29:37096] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aUG9RxAY-vW9raLQk19W5AAAAMc"]
[Wed Dec 17 04:12:57.756692 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:39364] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aUG9SVX4E86rnrNa_8NtbwAAAEw"]
[Wed Dec 17 04:12:59.299118 2025] [:error] [pid 61379:tid 61432] [client 135.235.159.29:47396] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aUG9S1X4E86rnrNa_8NtdQAAAFU"]
[Wed Dec 17 04:13:01.571726 2025] [:error] [pid 61378:tid 61383] [client 135.235.159.29:47415] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aUG9TR5G6F9PXKmYDCSIZQAAAAA"]
[Wed Dec 17 04:13:02.751503 2025] [:error] [pid 61379:tid 61431] [client 135.235.159.29:47371] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aUG9TlX4E86rnrNa_8NtgAAAAFQ"]
[Wed Dec 17 04:13:05.586054 2025] [:error] [pid 61378:tid 61395] [client 135.235.159.29:39382] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aUG9UR5G6F9PXKmYDCSIhQAAAAw"]
[Wed Dec 17 04:13:07.415716 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:46876] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aUG9UxAY-vW9raLQk19XUQAAAMM"]
[Wed Dec 17 04:13:08.690643 2025] [:error] [pid 61380:tid 61455] [client 135.235.159.29:47392] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aUG9VFDXNylu9SqhT6oOtgAAAJE"]
[Wed Dec 17 04:13:10.212591 2025] [:error] [pid 61378:tid 61385] [client 135.235.159.29:47380] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aUG9Vh5G6F9PXKmYDCSIoAAAAAI"]
[Wed Dec 17 04:13:10.729413 2025] [:error] [pid 61472:tid 61485] [client 135.235.159.29:37136] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aUG9VhAY-vW9raLQk19XYgAAAMs"]
[Wed Dec 17 04:13:11.174199 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:46009] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aUG9VxAY-vW9raLQk19XZAAAANM"]
[Wed Dec 17 04:13:12.039745 2025] [:error] [pid 61379:tid 61421] [client 135.235.159.29:51026] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUG9WFX4E86rnrNa_8NtsAAAAEo"]
[Wed Dec 17 04:13:13.456649 2025] [:error] [pid 61380:tid 61438] [client 135.235.159.29:49483] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUG9WVDXNylu9SqhT6oOwQAAAIA"]
[Wed Dec 17 04:13:15.130157 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:46798] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUG9W1DXNylu9SqhT6oOxwAAAIQ"]
[Wed Dec 17 04:13:16.627180 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:44045] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUG9XB5G6F9PXKmYDCSIswAAAA4"]
[Wed Dec 17 04:13:17.540095 2025] [:error] [pid 61380:tid 61462] [client 135.235.159.29:3699] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUG9XVDXNylu9SqhT6oOyQAAAJg"]
[Wed Dec 17 04:13:19.204186 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:45780] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUG9X1X4E86rnrNa_8NtyQAAAEE"]
[Wed Dec 17 04:13:20.313663 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:47606] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUG9YFDXNylu9SqhT6oO1gAAAI4"]
[Wed Dec 17 04:13:21.608754 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:49520] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUG9YVX4E86rnrNa_8Nt6AAAAE0"]
[Wed Dec 17 04:13:22.297112 2025] [:error] [pid 61379:tid 61411] [client 135.235.159.29:36722] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aUG9YlX4E86rnrNa_8Nt8QAAAEA"]
[Wed Dec 17 04:13:23.841655 2025] [:error] [pid 61472:tid 61491] [client 135.235.159.29:36732] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aUG9YxAY-vW9raLQk19XmgAAANE"]
[Wed Dec 17 04:13:25.887869 2025] [:error] [pid 61380:tid 61443] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/cart.php
[Wed Dec 17 04:13:26.389876 2025] [:error] [pid 61380:tid 61438] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/compare.php
[Wed Dec 17 04:13:26.552664 2025] [:error] [pid 61380:tid 61445] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Wed Dec 17 04:13:26.726748 2025] [:error] [pid 61380:tid 61457] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Wed Dec 17 04:13:26.878766 2025] [:error] [pid 61380:tid 61440] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Dec 17 04:13:27.022928 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/atom.php
[Wed Dec 17 04:13:27.781514 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/case.php
[Wed Dec 17 04:13:27.927301 2025] [:error] [pid 61380:tid 61461] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/docs.php
[Wed Dec 17 04:13:28.098351 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/ios.php
[Wed Dec 17 04:13:28.239958 2025] [:error] [pid 61380:tid 61462] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Dec 17 04:13:28.383734 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:36675] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Dec 17 04:13:28.524443 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:36675] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUG9aFDXNylu9SqhT6oO9AAAAI0"]
[Wed Dec 17 04:13:29.333772 2025] [:error] [pid 61378:tid 61386] [client 135.235.159.29:36678] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUG9aR5G6F9PXKmYDCSI7QAAAAM"]
[Wed Dec 17 04:13:30.636409 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:47592] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUG9alDXNylu9SqhT6oO_wAAAIY"]
[Wed Dec 17 04:13:32.475227 2025] [:error] [pid 61379:tid 61430] [client 135.235.159.29:48954] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUG9bFX4E86rnrNa_8NuDQAAAFM"]
[Wed Dec 17 04:13:34.014841 2025] [:error] [pid 61380:tid 61443] [client 135.235.159.29:45763] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUG9blDXNylu9SqhT6oPAwAAAIU"]
[Wed Dec 17 04:13:37.723156 2025] [:error] [pid 61379:tid 61418] [client 135.235.159.29:48900] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUG9cVX4E86rnrNa_8NuIwAAAEc"]
[Wed Dec 17 04:13:39.116859 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:47836] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUG9c1DXNylu9SqhT6oPCwAAAJI"]
[Wed Dec 17 04:13:41.757237 2025] [:error] [pid 61378:tid 61386] [client 135.235.159.29:40520] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUG9dR5G6F9PXKmYDCSJCAAAAAM"]
[Wed Dec 17 04:13:43.720063 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:45561] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUG9dx5G6F9PXKmYDCSJCwAAAAc"]
[Wed Dec 17 04:13:45.083903 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:50745] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUG9eVDXNylu9SqhT6oPGQAAAI4"]
[Wed Dec 17 04:13:45.938083 2025] [:error] [pid 61472:tid 61484] [client 135.235.159.29:48937] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUG9eRAY-vW9raLQk19X0wAAAMo"]
[Wed Dec 17 04:13:46.662937 2025] [:error] [pid 61472:tid 61493] [client 135.235.159.29:45476] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUG9ehAY-vW9raLQk19X1gAAANM"]
[Wed Dec 17 04:13:48.576744 2025] [:error] [pid 61379:tid 61426] [client 135.235.159.29:38737] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUG9fFX4E86rnrNa_8NuQQAAAE8"]
[Wed Dec 17 04:13:49.815891 2025] [:error] [pid 61380:tid 61441] [client 135.235.159.29:48674] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUG9fVDXNylu9SqhT6oPIgAAAIM"]
[Wed Dec 17 04:13:50.806175 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:37880] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUG9fhAY-vW9raLQk19X9AAAANQ"]
[Wed Dec 17 04:13:51.414941 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:48673] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUG9f1DXNylu9SqhT6oPKAAAAIw"]
[Wed Dec 17 04:13:51.978632 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:40902] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUG9fxAY-vW9raLQk19X-AAAAMA"]
[Wed Dec 17 04:13:52.326657 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:40957] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUG9gFX4E86rnrNa_8NuSgAAAEg"]
[Wed Dec 17 04:13:52.763623 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:50726] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUG9gFX4E86rnrNa_8NuTAAAAEw"]
[Wed Dec 17 04:13:54.367306 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:37844] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUG9glDXNylu9SqhT6oPMAAAAI4"]
[Wed Dec 17 04:13:55.772687 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:46591] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUG9g1DXNylu9SqhT6oPNQAAAJI"]
[Wed Dec 17 04:13:57.413928 2025] [:error] [pid 61379:tid 61411] [client 135.235.159.29:48068] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUG9hVX4E86rnrNa_8NuZQAAAEA"]
[Wed Dec 17 04:13:59.092015 2025] [:error] [pid 61380:tid 61446] [client 135.235.159.29:37882] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUG9h1DXNylu9SqhT6oPOwAAAIg"]
[Wed Dec 17 04:14:00.702581 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:46648] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUG9iBAY-vW9raLQk19YDwAAAMU"]
[Wed Dec 17 04:14:01.829287 2025] [:error] [pid 61472:tid 61488] [client 135.235.159.29:46076] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUG9iRAY-vW9raLQk19YGAAAAM4"]
[Wed Dec 17 04:14:03.003951 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:46636] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUG9ixAY-vW9raLQk19YJgAAANA"]
[Wed Dec 17 04:14:03.843991 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:45212] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUG9ixAY-vW9raLQk19YMgAAAMQ"]
[Wed Dec 17 04:14:04.587416 2025] [:error] [pid 61472:tid 61491] [client 135.235.159.29:46070] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUG9jBAY-vW9raLQk19YOQAAANE"]
[Wed Dec 17 04:14:05.374358 2025] [:error] [pid 61378:tid 61392] [client 135.235.159.29:44147] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUG9jR5G6F9PXKmYDCSJQwAAAAk"]
[Wed Dec 17 04:14:06.598669 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:46593] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUG9jlDXNylu9SqhT6oPWQAAAIE"]
[Wed Dec 17 04:14:07.663905 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:46587] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUG9j1DXNylu9SqhT6oPWwAAAIY"]
[Wed Dec 17 04:14:08.749643 2025] [:error] [pid 61378:tid 61386] [client 135.235.159.29:3724] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUG9kB5G6F9PXKmYDCSJSgAAAAM"]
[Wed Dec 17 04:14:10.782676 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:42233] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUG9klDXNylu9SqhT6oPXQAAAJI"]
[Wed Dec 17 04:14:12.070976 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:46605] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUG9lB5G6F9PXKmYDCSJUwAAABg"]
[Wed Dec 17 04:14:13.566632 2025] [:error] [pid 61379:tid 61419] [client 135.235.159.29:44159] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUG9lVX4E86rnrNa_8NuwAAAAEg"]
[Wed Dec 17 04:14:15.019288 2025] [:error] [pid 61472:tid 61498] [client 135.235.159.29:44131] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUG9lxAY-vW9raLQk19YWwAAANg"]
[Wed Dec 17 04:14:16.464641 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:39309] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9mBAY-vW9raLQk19YZwAAAMQ"]
[Wed Dec 17 04:14:17.587313 2025] [:error] [pid 61380:tid 61451] [client 135.235.159.29:44130] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9mVDXNylu9SqhT6oPcQAAAI0"]
[Wed Dec 17 04:14:18.185612 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:52295] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9mh5G6F9PXKmYDCSJWwAAABg"]
[Wed Dec 17 04:14:19.230076 2025] [:error] [pid 61380:tid 61444] [client 135.235.159.29:47056] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUG9m1DXNylu9SqhT6oPcwAAAIY"]
[Wed Dec 17 04:14:19.916565 2025] [:error] [pid 61380:tid 61457] [client 135.235.159.29:39318] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUG9m1DXNylu9SqhT6oPdQAAAJM"]
[Wed Dec 17 04:14:20.800823 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:3112] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUG9nB5G6F9PXKmYDCSJXAAAAA4"]
[Wed Dec 17 04:14:21.740775 2025] [:error] [pid 61380:tid 61456] [client 135.235.159.29:41938] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUG9nVDXNylu9SqhT6oPegAAAJI"]
[Wed Dec 17 04:14:22.520959 2025] [:error] [pid 61379:tid 61415] [client 135.235.159.29:39320] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUG9nlX4E86rnrNa_8NuzwAAAEQ"]
[Wed Dec 17 04:14:23.868672 2025] [:error] [pid 61472:tid 61479] [client 135.235.159.29:52314] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUG9nxAY-vW9raLQk19YhQAAAMU"]
[Wed Dec 17 04:14:25.420686 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:3091] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUG9oVX4E86rnrNa_8Nu0gAAAEE"]
[Wed Dec 17 04:14:25.838689 2025] [:error] [pid 61378:tid 61398] [client 135.235.159.29:3586] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUG9oR5G6F9PXKmYDCSJZwAAAA8"]
[Wed Dec 17 04:14:26.483453 2025] [:error] [pid 61378:tid 61390] [client 135.235.159.29:42185] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUG9oh5G6F9PXKmYDCSJaAAAAAc"]
[Wed Dec 17 04:14:27.492448 2025] [:error] [pid 61378:tid 61402] [client 135.235.159.29:48601] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUG9ox5G6F9PXKmYDCSJbAAAABM"]
[Wed Dec 17 04:14:28.610835 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Dec 17 04:14:28.752352 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Dec 17 04:14:28.901368 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Dec 17 04:14:29.050017 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Dec 17 04:14:29.235688 2025] [:error] [pid 61472:tid 61475] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Dec 17 04:14:29.378996 2025] [:error] [pid 61472:tid 61496] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Dec 17 04:14:29.550813 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Dec 17 04:14:30.303686 2025] [:error] [pid 61472:tid 61486] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Dec 17 04:14:30.443281 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Wed Dec 17 04:14:30.589861 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Wed Dec 17 04:14:30.732377 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:41937] File does not exist: /usr/local/apache/htdocs/suspended-page/conflg.php
[Wed Dec 17 04:14:30.888169 2025] [:error] [pid 61472:tid 61483] [client 135.235.159.29:41937] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUG9phAY-vW9raLQk19YvwAAAMk"]
[Wed Dec 17 04:14:33.802097 2025] [:error] [pid 61380:tid 61449] [client 135.235.159.29:47061] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUG9qVDXNylu9SqhT6oQAQAAAIs"]
[Wed Dec 17 04:14:34.167829 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:49548] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUG9qh5G6F9PXKmYDCSJnQAAABg"]
[Wed Dec 17 04:14:35.248435 2025] [:error] [pid 61379:tid 61427] [client 135.235.159.29:44062] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUG9q1X4E86rnrNa_8Nu6AAAAFA"]
[Wed Dec 17 04:14:36.490686 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:42187] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUG9rBAY-vW9raLQk19Y2AAAAMg"]
[Wed Dec 17 04:14:37.386004 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:3607] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUG9rVDXNylu9SqhT6oQCwAAAI8"]
[Wed Dec 17 04:14:38.020990 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:3098] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUG9rhAY-vW9raLQk19Y2wAAAMA"]
[Wed Dec 17 04:14:38.870472 2025] [:error] [pid 61378:tid 61395] [client 135.235.159.29:42230] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUG9rh5G6F9PXKmYDCSJqgAAAAw"]
[Wed Dec 17 04:14:40.840219 2025] [:error] [pid 61472:tid 61494] [client 135.235.159.29:44132] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUG9sBAY-vW9raLQk19Y5wAAANQ"]
[Wed Dec 17 04:14:41.650261 2025] [:error] [pid 61378:tid 61401] [client 135.235.159.29:3633] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUG9sR5G6F9PXKmYDCSJtgAAABI"]
[Wed Dec 17 04:14:43.621192 2025] [:error] [pid 61380:tid 61446] [client 135.235.159.29:47046] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUG9s1DXNylu9SqhT6oQKgAAAIg"]
[Wed Dec 17 04:14:44.615025 2025] [:error] [pid 61379:tid 61411] [client 135.235.159.29:41940] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUG9tFX4E86rnrNa_8Nu_gAAAEA"]
[Wed Dec 17 04:14:46.291165 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:3605] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUG9tlDXNylu9SqhT6oQMgAAAIE"]
[Wed Dec 17 04:14:48.164109 2025] [:error] [pid 61380:tid 61462] [client 135.235.159.29:40881] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUG9uFDXNylu9SqhT6oQOAAAAJg"]
[Wed Dec 17 04:14:49.157120 2025] [:error] [pid 61380:tid 61438] [client 135.235.159.29:42637] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUG9uVDXNylu9SqhT6oQPAAAAIA"]
[Wed Dec 17 04:14:50.414743 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:3612] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUG9uh5G6F9PXKmYDCSJxQAAAA4"]
[Wed Dec 17 04:14:52.734834 2025] [:error] [pid 61378:tid 61403] [client 135.235.159.29:44042] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUG9vB5G6F9PXKmYDCSJ0wAAABQ"]
[Wed Dec 17 04:14:53.573740 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:39630] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUG9vVX4E86rnrNa_8NvGwAAAEU"]
[Wed Dec 17 04:14:55.919364 2025] [:error] [pid 61379:tid 61433] [client 135.235.159.29:38967] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUG9v1X4E86rnrNa_8NvIAAAAFY"]
[Wed Dec 17 04:14:57.305966 2025] [:error] [pid 61379:tid 61416] [client 135.235.159.29:43156] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUG9wVX4E86rnrNa_8NvJAAAAEU"]
[Wed Dec 17 04:14:58.840967 2025] [:error] [pid 61378:tid 61405] [client 135.235.159.29:44076] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUG9wh5G6F9PXKmYDCSJ4wAAABY"]
[Wed Dec 17 04:14:59.621175 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:51875] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUG9wxAY-vW9raLQk19ZOAAAAMM"]
[Wed Dec 17 04:15:00.587298 2025] [:error] [pid 61379:tid 61430] [client 135.235.159.29:39618] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUG9xFX4E86rnrNa_8NvMgAAAFM"]
[Wed Dec 17 04:15:01.470283 2025] [:error] [pid 61472:tid 61497] [client 135.235.159.29:42675] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUG9xRAY-vW9raLQk19ZQQAAANc"]
[Wed Dec 17 04:15:04.040788 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:39644] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUG9yBAY-vW9raLQk19ZRgAAAM0"]
[Wed Dec 17 04:15:06.216524 2025] [:error] [pid 61380:tid 61449] [client 135.235.159.29:51850] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUG9ylDXNylu9SqhT6oQaQAAAIs"]
[Wed Dec 17 04:15:07.842684 2025] [:error] [pid 61378:tid 61404] [client 135.235.159.29:42644] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUG9yx5G6F9PXKmYDCSJ9gAAABU"]
[Wed Dec 17 04:15:08.748217 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:38931] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUG9zBAY-vW9raLQk19ZXAAAAMA"]
[Wed Dec 17 04:15:09.584348 2025] [:error] [pid 61472:tid 61488] [client 135.235.159.29:3602] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUG9zRAY-vW9raLQk19ZYAAAAM4"]
[Wed Dec 17 04:15:10.684127 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:38949] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUG9zlDXNylu9SqhT6oQcAAAAI8"]
[Wed Dec 17 04:15:12.008766 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:38969] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUG90BAY-vW9raLQk19ZbAAAAM8"]
[Wed Dec 17 04:15:13.878464 2025] [:error] [pid 61378:tid 61393] [client 135.235.159.29:39653] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUG90R5G6F9PXKmYDCSJ_QAAAAo"]
[Wed Dec 17 04:15:14.611329 2025] [:error] [pid 61378:tid 61392] [client 135.235.159.29:39659] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUG90h5G6F9PXKmYDCSJ_wAAAAk"]
[Wed Dec 17 04:15:16.097791 2025] [:error] [pid 61472:tid 61482] [client 135.235.159.29:51842] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUG91BAY-vW9raLQk19ZfAAAAMg"]
[Wed Dec 17 04:15:16.843051 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:42652] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUG91FDXNylu9SqhT6oQfAAAAI8"]
[Wed Dec 17 04:15:17.995286 2025] [:error] [pid 61378:tid 61406] [client 135.235.159.29:44063] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUG91R5G6F9PXKmYDCSKBwAAABc"]
[Wed Dec 17 04:15:19.500364 2025] [:error] [pid 61378:tid 61405] [client 135.235.159.29:3339] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUG91x5G6F9PXKmYDCSKEAAAABY"]
[Wed Dec 17 04:15:20.381208 2025] [:error] [pid 61378:tid 61389] [client 135.235.159.29:40853] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUG92B5G6F9PXKmYDCSKFgAAAAY"]
[Wed Dec 17 04:15:22.753984 2025] [:error] [pid 61380:tid 61442] [client 135.235.159.29:43143] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUG92lDXNylu9SqhT6oQiwAAAIQ"]
[Wed Dec 17 04:15:24.470025 2025] [:error] [pid 61380:tid 61449] [client 135.235.159.29:48157] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUG93FDXNylu9SqhT6oQkQAAAIs"]
[Wed Dec 17 04:15:25.602443 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:38918] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUG93VDXNylu9SqhT6oQlQAAAJY"]
[Wed Dec 17 04:15:26.489948 2025] [:error] [pid 61380:tid 61452] [client 135.235.159.29:38927] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUG93lDXNylu9SqhT6oQmQAAAI4"]
[Wed Dec 17 04:15:28.219677 2025] [:error] [pid 61378:tid 61395] [client 135.235.159.29:48168] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUG94B5G6F9PXKmYDCSKJwAAAAw"]
[Wed Dec 17 04:15:30.341731 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Wed Dec 17 04:15:31.300361 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Wed Dec 17 04:15:31.440605 2025] [:error] [pid 61472:tid 61481] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/321.php
[Wed Dec 17 04:15:31.591995 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Dec 17 04:15:31.734232 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Dec 17 04:15:31.877296 2025] [:error] [pid 61472:tid 61487] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Wed Dec 17 04:15:32.045845 2025] [:error] [pid 61472:tid 61497] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Dec 17 04:15:32.186774 2025] [:error] [pid 61472:tid 61474] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Wed Dec 17 04:15:32.329655 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Wed Dec 17 04:15:32.491011 2025] [:error] [pid 61472:tid 61477] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Wed Dec 17 04:15:32.632188 2025] [:error] [pid 61472:tid 61486] [client 135.235.159.29:39636] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Dec 17 04:15:32.812056 2025] [:error] [pid 61472:tid 61490] [client 135.235.159.29:39636] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aUG95BAY-vW9raLQk19Z5gAAANA"]
[Wed Dec 17 04:15:35.477987 2025] [:error] [pid 61380:tid 61457] [client 135.235.159.29:51858] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aUG951DXNylu9SqhT6oQogAAAJM"]
[Wed Dec 17 04:15:36.259140 2025] [:error] [pid 61380:tid 61450] [client 135.235.159.29:51866] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aUG96FDXNylu9SqhT6oQpgAAAIw"]
[Wed Dec 17 04:15:37.311633 2025] [:error] [pid 61378:tid 61387] [client 135.235.159.29:51854] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aUG96R5G6F9PXKmYDCSKPAAAAAQ"]
[Wed Dec 17 04:15:38.619780 2025] [:error] [pid 61378:tid 61407] [client 135.235.159.29:48176] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUG96h5G6F9PXKmYDCSKQQAAABg"]
[Wed Dec 17 04:15:39.939341 2025] [:error] [pid 61379:tid 61411] [client 135.235.159.29:42672] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUG961X4E86rnrNa_8Nv4AAAAEA"]
[Wed Dec 17 04:15:41.180710 2025] [:error] [pid 61379:tid 61424] [client 135.235.159.29:42678] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUG97VX4E86rnrNa_8Nv5gAAAE0"]
[Wed Dec 17 04:15:41.936176 2025] [:error] [pid 61379:tid 61435] [client 135.235.159.29:47931] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUG97VX4E86rnrNa_8Nv6gAAAFg"]
[Wed Dec 17 04:15:42.769469 2025] [:error] [pid 61378:tid 61404] [client 135.235.159.29:48177] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUG97h5G6F9PXKmYDCSKSwAAABU"]
[Wed Dec 17 04:15:43.693439 2025] [:error] [pid 61472:tid 61480] [client 135.235.159.29:48140] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUG97xAY-vW9raLQk19aNAAAAMY"]
[Wed Dec 17 04:15:46.312707 2025] [:error] [pid 61472:tid 61478] [client 135.235.159.29:51855] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUG98hAY-vW9raLQk19aOAAAAMQ"]
[Wed Dec 17 04:15:47.747764 2025] [:error] [pid 61472:tid 61491] [client 135.235.159.29:40866] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUG98xAY-vW9raLQk19aPAAAANE"]
[Wed Dec 17 04:15:48.503845 2025] [:error] [pid 61378:tid 61397] [client 135.235.159.29:47883] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUG99B5G6F9PXKmYDCSKWQAAAA4"]
[Wed Dec 17 04:15:50.091612 2025] [:error] [pid 61380:tid 61449] [client 135.235.159.29:43139] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUG99lDXNylu9SqhT6oQzgAAAIs"]
[Wed Dec 17 04:15:51.025983 2025] [:error] [pid 61472:tid 61489] [client 135.235.159.29:3364] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUG99xAY-vW9raLQk19aQQAAAM8"]
[Wed Dec 17 04:15:51.757348 2025] [:error] [pid 61379:tid 61423] [client 135.235.159.29:47925] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUG991X4E86rnrNa_8NwDwAAAEw"]
[Wed Dec 17 04:15:53.616136 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:44486] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUG9-VX4E86rnrNa_8NwFQAAAEM"]
[Wed Dec 17 04:15:54.372033 2025] [:error] [pid 61379:tid 61413] [client 135.235.159.29:51876] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUG9-lX4E86rnrNa_8NwGAAAAEI"]
[Wed Dec 17 04:15:55.811701 2025] [:error] [pid 61472:tid 61495] [client 135.235.159.29:44528] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUG9-xAY-vW9raLQk19aVgAAANU"]
[Wed Dec 17 04:15:57.371403 2025] [:error] [pid 61380:tid 61453] [client 135.235.159.29:44526] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUG9_VDXNylu9SqhT6oQ2wAAAI8"]
[Wed Dec 17 04:15:59.008958 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:43150] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUG9_1DXNylu9SqhT6oQ4QAAAIE"]
[Wed Dec 17 04:16:01.094107 2025] [:error] [pid 61379:tid 61432] [client 135.235.159.29:40845] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUG-AVX4E86rnrNa_8NwLQAAAFU"]
[Wed Dec 17 04:16:02.309434 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:48130] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUG-AlDXNylu9SqhT6oQ6wAAAJY"]
[Wed Dec 17 04:16:02.975312 2025] [:error] [pid 61378:tid 61398] [client 135.235.159.29:47874] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUG-Ah5G6F9PXKmYDCSKegAAAA8"]
[Wed Dec 17 04:16:03.639324 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:3353] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUG-A1X4E86rnrNa_8NwPAAAAEM"]
[Wed Dec 17 04:16:05.148257 2025] [:error] [pid 61379:tid 61412] [client 135.235.159.29:38462] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUG-BVX4E86rnrNa_8NwRwAAAEE"]
[Wed Dec 17 04:16:06.247697 2025] [:error] [pid 61380:tid 61439] [client 135.235.159.29:3367] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUG-BlDXNylu9SqhT6oQ8AAAAIE"]
[Wed Dec 17 04:16:08.452487 2025] [:error] [pid 61380:tid 61460] [client 135.235.159.29:38452] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUG-CFDXNylu9SqhT6oQ9gAAAJY"]
[Wed Dec 17 04:16:10.265532 2025] [:error] [pid 61379:tid 61414] [client 135.235.159.29:41257] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aUG-ClX4E86rnrNa_8NwbwAAAEM"]
[Wed Dec 17 04:16:10.929852 2025] [:error] [pid 61378:tid 61399] [client 135.235.159.29:51110] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aUG-Ch5G6F9PXKmYDCSKiAAAABA"]
[Wed Dec 17 04:16:18.588928 2025] [:error] [pid 34425:tid 34440] [client 135.235.159.29:37483] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUG-EnYomI61qeXluxnLHQAAAAU"]
[Wed Dec 17 04:16:19.947443 2025] [:error] [pid 34530:tid 34533] [client 135.235.159.29:42127] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUG-EwI6Bygs2oJsrN0EbwAAAME"]
[Wed Dec 17 04:16:21.059643 2025] [:error] [pid 34427:tid 34500] [client 135.235.159.29:48851] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUG-FQ2vx_KIcvPat8BXAgAAAII"]
[Wed Dec 17 04:16:23.077738 2025] [:error] [pid 34427:tid 34514] [client 135.235.159.29:41316] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUG-Fw2vx_KIcvPat8BXDAAAAJA"]
[Wed Dec 17 04:16:25.078157 2025] [:error] [pid 34425:tid 34454] [client 135.235.159.29:52696] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUG-GXYomI61qeXluxnLPwAAABM"]
[Wed Dec 17 04:16:26.267681 2025] [:error] [pid 34425:tid 34449] [client 135.235.159.29:52755] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUG-GnYomI61qeXluxnLRgAAAA4"]
[Wed Dec 17 04:16:27.024730 2025] [:error] [pid 34427:tid 34503] [client 135.235.159.29:53250] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUG-Gw2vx_KIcvPat8BXFQAAAIU"]
[Wed Dec 17 04:16:29.316408 2025] [:error] [pid 34426:tid 34487] [client 135.235.159.29:39559] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUG-HaQO2ouZ9o0DVKtFwwAAAFA"]
[Wed Dec 17 04:16:30.421873 2025] [:error] [pid 34426:tid 34492] [client 135.235.159.29:39556] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUG-HqQO2ouZ9o0DVKtFxwAAAFU"]
[Wed Dec 17 04:16:32.926603 2025] [:error] [pid 34530:tid 34541] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Wed Dec 17 04:16:33.067231 2025] [:error] [pid 34530:tid 34542] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Dec 17 04:16:33.210193 2025] [:error] [pid 34530:tid 34544] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/zfile.php
[Wed Dec 17 04:16:33.353949 2025] [:error] [pid 34530:tid 34546] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Wed Dec 17 04:16:33.495988 2025] [:error] [pid 34530:tid 34545] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/des.php
[Wed Dec 17 04:16:33.640319 2025] [:error] [pid 34530:tid 34551] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Wed Dec 17 04:16:33.787817 2025] [:error] [pid 34530:tid 34553] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Wed Dec 17 04:16:33.970764 2025] [:error] [pid 34530:tid 34554] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Dec 17 04:16:36.151987 2025] [:error] [pid 34530:tid 34538] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Wed Dec 17 04:16:36.349372 2025] [:error] [pid 34530:tid 34551] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Dec 17 04:16:36.491873 2025] [:error] [pid 34530:tid 34543] [client 135.235.159.29:50316] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc.php
[Wed Dec 17 04:16:36.874563 2025] [:error] [pid 34530:tid 34554] [client 135.235.159.29:50316] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUG-JAI6Bygs2oJsrN0EmAAAANY"]
[Wed Dec 17 04:16:39.101884 2025] [:error] [pid 34530:tid 34549] [client 135.235.159.29:44460] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUG-JwI6Bygs2oJsrN0EoQAAANE"]
[Wed Dec 17 04:16:40.452686 2025] [:error] [pid 34427:tid 34511] [client 135.235.159.29:50672] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUG-KA2vx_KIcvPat8BXJwAAAI0"]
[Wed Dec 17 04:16:41.866900 2025] [:error] [pid 34425:tid 34444] [client 135.235.159.29:47664] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUG-KXYomI61qeXluxnLcAAAAAk"]
[Wed Dec 17 04:16:43.188714 2025] [:error] [pid 34425:tid 34452] [client 135.235.159.29:3406] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUG-K3YomI61qeXluxnLdgAAABE"]
[Wed Dec 17 04:16:46.406200 2025] [:error] [pid 34425:tid 34444] [client 135.235.159.29:50354] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUG-LnYomI61qeXluxnLfgAAAAk"]
[Wed Dec 17 04:16:48.173646 2025] [:error] [pid 34530:tid 34551] [client 135.235.159.29:47618] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUG-MAI6Bygs2oJsrN0EsAAAANM"]
[Wed Dec 17 04:16:50.247249 2025] [:error] [pid 34425:tid 34444] [client 135.235.159.29:44417] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUG-MnYomI61qeXluxnLigAAAAk"]
[Wed Dec 17 04:16:51.685263 2025] [:error] [pid 34425:tid 34437] [client 135.235.159.29:3923] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUG-M3YomI61qeXluxnLlgAAAAI"]
[Wed Dec 17 04:16:52.480076 2025] [:error] [pid 34425:tid 34446] [client 135.235.159.29:3935] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUG-NHYomI61qeXluxnLmgAAAAs"]
[Wed Dec 17 04:16:54.411477 2025] [:error] [pid 34427:tid 34510] [client 135.235.159.29:51601] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUG-Ng2vx_KIcvPat8BXOwAAAIw"]
[Wed Dec 17 04:16:55.903000 2025] [:error] [pid 34426:tid 34492] [client 135.235.159.29:4021] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUG-N6QO2ouZ9o0DVKtGIgAAAFU"]
[Wed Dec 17 04:16:57.371740 2025] [:error] [pid 34427:tid 34509] [client 135.235.159.29:49173] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUG-OQ2vx_KIcvPat8BXQAAAAIs"]
[Wed Dec 17 04:16:58.633992 2025] [:error] [pid 34426:tid 34478] [client 135.235.159.29:47641] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUG-OqQO2ouZ9o0DVKtGLQAAAEc"]
[Wed Dec 17 04:16:59.514294 2025] [:error] [pid 34426:tid 34486] [client 135.235.159.29:3438] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUG-O6QO2ouZ9o0DVKtGMgAAAE8"]
[Wed Dec 17 04:17:01.077657 2025] [:error] [pid 34530:tid 34553] [client 135.235.159.29:46313] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUG-PQI6Bygs2oJsrN0EuQAAANU"]
[Wed Dec 17 04:17:03.214363 2025] [:error] [pid 34530:tid 34539] [client 135.235.159.29:51612] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUG-PwI6Bygs2oJsrN0EwQAAAMc"]
[Wed Dec 17 04:17:04.574522 2025] [:error] [pid 34530:tid 34537] [client 135.235.159.29:50315] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUG-QAI6Bygs2oJsrN0EygAAAMU"]
[Wed Dec 17 04:17:05.936038 2025] [:error] [pid 34530:tid 34541] [client 135.235.159.29:50639] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUG-QQI6Bygs2oJsrN0EzgAAAMk"]
[Wed Dec 17 04:17:07.071171 2025] [:error] [pid 34427:tid 34504] [client 135.235.159.29:3483] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUG-Qw2vx_KIcvPat8BXUgAAAIY"]
[Wed Dec 17 04:17:08.604607 2025] [:error] [pid 34427:tid 34507] [client 135.235.159.29:4008] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUG-RA2vx_KIcvPat8BXVwAAAIk"]
[Wed Dec 17 04:17:11.636813 2025] [:error] [pid 34426:tid 34478] [client 135.235.159.29:4005] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUG-R6QO2ouZ9o0DVKtGWwAAAEc"]
[Wed Dec 17 04:17:13.479786 2025] [:error] [pid 34530:tid 34535] [client 135.235.159.29:51604] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUG-SQI6Bygs2oJsrN0E6wAAAMM"]
[Wed Dec 17 04:17:15.229844 2025] [:error] [pid 34425:tid 34454] [client 135.235.159.29:39367] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUG-S3YomI61qeXluxnLvwAAABM"]
[Wed Dec 17 04:17:17.728815 2025] [:error] [pid 34530:tid 34550] [client 135.235.159.29:3485] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUG-TQI6Bygs2oJsrN0E-AAAANI"]
[Wed Dec 17 04:17:18.516538 2025] [:error] [pid 34427:tid 34505] [client 135.235.159.29:39410] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUG-Tg2vx_KIcvPat8BXbgAAAIc"]
[Wed Dec 17 04:17:19.566726 2025] [:error] [pid 34530:tid 34545] [client 135.235.159.29:46255] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUG-TwI6Bygs2oJsrN0FAwAAAM0"]
[Wed Dec 17 04:17:22.375922 2025] [:error] [pid 34425:tid 34459] [client 135.235.159.29:39380] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUG-UnYomI61qeXluxnLxAAAABg"]
[Wed Dec 17 04:17:23.266618 2025] [:error] [pid 34426:tid 34480] [client 135.235.159.29:45963] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUG-U6QO2ouZ9o0DVKtGcQAAAEk"]
[Wed Dec 17 04:17:25.468046 2025] [:error] [pid 34427:tid 34521] [client 135.235.159.29:37178] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUG-VQ2vx_KIcvPat8BXgwAAAJc"]
[Wed Dec 17 04:17:26.609908 2025] [:error] [pid 34530:tid 34533] [client 135.235.159.29:43238] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUG-VgI6Bygs2oJsrN0FDwAAAME"]
[Wed Dec 17 04:17:27.932909 2025] [:error] [pid 34427:tid 34520] [client 135.235.159.29:37902] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUG-Vw2vx_KIcvPat8BXjwAAAJY"]
[Wed Dec 17 04:17:28.511716 2025] [:error] [pid 34427:tid 34521] [client 135.235.159.29:46245] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUG-WA2vx_KIcvPat8BXlgAAAJc"]
[Wed Dec 17 04:17:29.116694 2025] [:error] [pid 34426:tid 34488] [client 135.235.159.29:47385] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUG-WaQO2ouZ9o0DVKtGewAAAFE"]
[Wed Dec 17 04:17:30.624889 2025] [:error] [pid 34530:tid 34537] [client 135.235.159.29:40189] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUG-WgI6Bygs2oJsrN0FHQAAAMU"]
[Wed Dec 17 04:17:31.337255 2025] [:error] [pid 34426:tid 34479] [client 135.235.159.29:37122] [client 135.235.159.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUG-W6QO2ouZ9o0DVKtGgQAAAEg"]
[Wed Dec 17 06:00:00.580453 2025] [:error] [pid 13302:tid 13315] [client 175.6.217.4:37296] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUHWYBDfKV-_W5RvJZ-IxgAAAMs"]
[Wed Dec 17 10:34:03.700858 2025] [:error] [pid 45530:tid 45557] [client 152.42.168.23:53624] [client 152.42.168.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aUIWm24IsXcKlf7LWf8IDAAAABY"]
[Wed Dec 17 12:15:02.447119 2025] [:error] [pid 45530:tid 45551] [client 1.15.52.154:58736] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUIuRm4IsXcKlf7LWf8uRgAAABA"]
[Wed Dec 17 17:19:02.528714 2025] [:error] [pid 45621:tid 45634] [client 34.135.30.24:58299] [client 34.135.30.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.30.24, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUJ1huVNGQfJ1rR90pQnfQAAAMg"]
[Wed Dec 17 17:19:02.533829 2025] [:error] [pid 45621:tid 45634] [client 34.135.30.24:58299] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 17 17:19:06.580691 2025] [:error] [pid 45621:tid 45633] [client 34.135.30.24:58299] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1iuVNGQfJ1rR90pQnnAAAAMc"]
[Wed Dec 17 17:19:06.997812 2025] [:error] [pid 45530:tid 45537] [client 34.135.30.24:62872] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1im4IsXcKlf7LWf_kLAAAAAI"]
[Wed Dec 17 17:19:07.494337 2025] [:error] [pid 45532:tid 45602] [client 34.135.30.24:51669] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1iweWB-JXOyTKNs0K6QAAAIw"]
[Wed Dec 17 17:19:07.893364 2025] [:error] [pid 11733:tid 11757] [client 34.135.30.24:59603] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1izzmtBRXExJb1PHr1gAAARY"]
[Wed Dec 17 17:19:08.376264 2025] [:error] [pid 45532:tid 45590] [client 34.135.30.24:60303] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1jAeWB-JXOyTKNs0K8gAAAIA"]
[Wed Dec 17 17:19:08.793105 2025] [:error] [pid 45530:tid 45556] [client 34.135.30.24:64920] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1jG4IsXcKlf7LWf_kLwAAABU"]
[Wed Dec 17 17:19:09.335581 2025] [:error] [pid 11733:tid 11746] [client 34.135.30.24:64936] [client 34.135.30.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUJ1jTzmtBRXExJb1PHr2AAAAQs"]
[Wed Dec 17 23:40:06.745732 2025] [:error] [pid 45621:tid 45649] [client 35.229.42.75:54238] [client 35.229.42.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.42.75, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aULO1uVNGQfJ1rR90pSjlQAAANc"]
[Wed Dec 17 23:40:06.750515 2025] [:error] [pid 45621:tid 45649] [client 35.229.42.75:54238] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 17 23:40:09.801390 2025] [:error] [pid 45621:tid 45626] [client 35.229.42.75:54238] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aULO2eVNGQfJ1rR90pSjoQAAAMA"]
[Wed Dec 17 23:40:10.224693 2025] [:error] [pid 16788:tid 16790] [client 35.229.42.75:50118] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aULO2iEJyT-03u9UZWPcPAAAAkA"]
[Wed Dec 17 23:40:10.897373 2025] [:error] [pid 11733:tid 11743] [client 35.229.42.75:56687] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aULO2jzmtBRXExJb1PE_swAAAQg"]
[Wed Dec 17 23:40:11.319173 2025] [:error] [pid 16788:tid 16803] [client 35.229.42.75:50191] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aULO2yEJyT-03u9UZWPcPQAAAk0"]
[Wed Dec 17 23:40:11.801485 2025] [:error] [pid 16704:tid 16709] [client 35.229.42.75:57816] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aULO26Anp3ottQtykbSELwAAAcA"]
[Wed Dec 17 23:40:12.315093 2025] [:error] [pid 16704:tid 16723] [client 35.229.42.75:51350] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aULO3KAnp3ottQtykbSEMAAAAc4"]
[Wed Dec 17 23:40:12.859056 2025] [:error] [pid 45621:tid 45639] [client 35.229.42.75:51352] [client 35.229.42.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aULO3OVNGQfJ1rR90pSjowAAAM0"]
[Thu Dec 18 01:53:03.540152 2025] [:error] [pid 43580:tid 43597] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/amniotic.php
[Thu Dec 18 01:53:03.814558 2025] [:error] [pid 43580:tid 43583] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/maghrib.php
[Thu Dec 18 01:53:04.090609 2025] [:error] [pid 43580:tid 43606] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/byby.php
[Thu Dec 18 01:53:04.361156 2025] [:error] [pid 43580:tid 43602] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/modules.php
[Thu Dec 18 01:53:04.631675 2025] [:error] [pid 43580:tid 43603] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/home.php
[Thu Dec 18 01:53:04.902912 2025] [:error] [pid 43580:tid 43598] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/guestbook.php
[Thu Dec 18 01:53:05.174126 2025] [:error] [pid 43580:tid 43592] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/gastenboek.php
[Thu Dec 18 01:53:05.445568 2025] [:error] [pid 43580:tid 43604] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/Guestbook.php
[Thu Dec 18 01:53:05.717015 2025] [:error] [pid 43580:tid 43589] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/jax_guestbook.php
[Thu Dec 18 01:53:05.990149 2025] [:error] [pid 43580:tid 43600] [client 52.169.167.219:10718] File does not exist: /usr/local/apache/htdocs/suspended-page/scarbook.php
[Thu Dec 18 01:53:06.258192 2025] [:error] [pid 43580:tid 43587] [client 52.169.167.219:10718] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaestebuch.php"] [unique_id "aULuAtw5Ex8-DN38kP3xwQAAAIU"]
[Thu Dec 18 01:53:06.797402 2025] [:error] [pid 26117:tid 26159] [client 52.169.167.219:6074] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaestebuch.php"] [unique_id "aULuAjGiVc9lQS6PcL3h1wAAAUk"]
[Thu Dec 18 01:53:07.332174 2025] [:error] [pid 63337:tid 63351] [client 52.169.167.219:5911] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaestebuch.php"] [unique_id "aULuA9Sc2ofHSwVzjx-hwQAAAQw"]
[Thu Dec 18 01:53:07.882816 2025] [:error] [pid 26117:tid 26166] [client 52.169.167.219:2150] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaestebuch.php"] [unique_id "aULuAzGiVc9lQS6PcL3h2QAAAVA"]
[Thu Dec 18 01:53:08.417083 2025] [:error] [pid 26117:tid 26172] [client 52.169.167.219:6036] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gb.php"] [unique_id "aULuBDGiVc9lQS6PcL3h2wAAAVY"]
[Thu Dec 18 01:53:08.954467 2025] [:error] [pid 43495:tid 43577] [client 52.169.167.219:12677] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gb.php"] [unique_id "aULuBJPwJsDLQYFUP-ZLMgAAANc"]
[Thu Dec 18 01:53:09.470639 2025] [:error] [pid 26117:tid 26152] [client 52.169.167.219:16227] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gb.php"] [unique_id "aULuBTGiVc9lQS6PcL3h3gAAAUM"]
[Thu Dec 18 01:53:09.986912 2025] [:error] [pid 26117:tid 26150] [client 52.169.167.219:15419] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gb.php"] [unique_id "aULuBTGiVc9lQS6PcL3h3wAAAUE"]
[Thu Dec 18 01:53:10.522483 2025] [:error] [pid 43494:tid 43536] [client 52.169.167.219:2838] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aULuBupvK2pzfvdDETp8AAAAAEk"]
[Thu Dec 18 01:53:11.058213 2025] [:error] [pid 26117:tid 26170] [client 52.169.167.219:16221] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aULuBzGiVc9lQS6PcL3h4QAAAVQ"]
[Thu Dec 18 01:53:11.574915 2025] [:error] [pid 43493:tid 43509] [client 52.169.167.219:2160] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aULuB6JPcefhPyLljLx70gAAAAk"]
[Thu Dec 18 01:53:12.093133 2025] [:error] [pid 43493:tid 43501] [client 52.169.167.219:6027] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aULuCKJPcefhPyLljLx70wAAAAE"]
[Thu Dec 18 01:53:12.627738 2025] [:error] [pid 63337:tid 63340] [client 52.169.167.219:14530] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.3.php"] [unique_id "aULuCNSc2ofHSwVzjx-hxQAAAQE"]
[Thu Dec 18 01:53:13.162350 2025] [:error] [pid 63337:tid 63339] [client 52.169.167.219:7892] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.3.php"] [unique_id "aULuCdSc2ofHSwVzjx-hyAAAAQA"]
[Thu Dec 18 01:53:13.698419 2025] [:error] [pid 63337:tid 63348] [client 52.169.167.219:2661] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.3.php"] [unique_id "aULuCdSc2ofHSwVzjx-hyQAAAQk"]
[Thu Dec 18 01:53:14.233024 2025] [:error] [pid 43494:tid 43530] [client 52.169.167.219:5626] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.3.php"] [unique_id "aULuCupvK2pzfvdDETp8AgAAAEM"]
[Thu Dec 18 01:53:14.769425 2025] [:error] [pid 43495:tid 43563] [client 52.169.167.219:6808] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aULuCpPwJsDLQYFUP-ZLOAAAAMk"]
[Thu Dec 18 01:53:15.306031 2025] [:error] [pid 43495:tid 43576] [client 52.169.167.219:10833] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aULuC5PwJsDLQYFUP-ZLOgAAANY"]
[Thu Dec 18 01:53:15.841208 2025] [:error] [pid 63337:tid 63349] [client 52.169.167.219:3209] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aULuC9Sc2ofHSwVzjx-hzAAAAQo"]
[Thu Dec 18 01:53:16.388637 2025] [:error] [pid 43495:tid 43573] [client 52.169.167.219:2818] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aULuDJPwJsDLQYFUP-ZLPgAAANM"]
[Thu Dec 18 01:53:16.923770 2025] [:error] [pid 43493:tid 43512] [client 52.169.167.219:16236] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/olux.php"] [unique_id "aULuDKJPcefhPyLljLx71AAAAAw"]
[Thu Dec 18 01:53:17.459517 2025] [:error] [pid 26117:tid 26159] [client 52.169.167.219:11460] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/olux.php"] [unique_id "aULuDTGiVc9lQS6PcL3h5wAAAUk"]
[Thu Dec 18 01:53:17.976599 2025] [:error] [pid 43495:tid 43574] [client 52.169.167.219:2853] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/olux.php"] [unique_id "aULuDZPwJsDLQYFUP-ZLPwAAANQ"]
[Thu Dec 18 01:53:18.476975 2025] [:error] [pid 43493:tid 43517] [client 52.169.167.219:15377] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/olux.php"] [unique_id "aULuDqJPcefhPyLljLx71gAAABE"]
[Thu Dec 18 01:53:18.994217 2025] [:error] [pid 43494:tid 43544] [client 52.169.167.219:10666] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indoxploit.php"] [unique_id "aULuDupvK2pzfvdDETp8CAAAAFE"]
[Thu Dec 18 01:53:19.529214 2025] [:error] [pid 43494:tid 43546] [client 52.169.167.219:14945] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indoxploit.php"] [unique_id "aULuD-pvK2pzfvdDETp8CgAAAFM"]
[Thu Dec 18 01:53:20.047119 2025] [:error] [pid 43494:tid 43535] [client 52.169.167.219:10669] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indoxploit.php"] [unique_id "aULuEOpvK2pzfvdDETp8DQAAAEg"]
[Thu Dec 18 01:53:20.546385 2025] [:error] [pid 43493:tid 43516] [client 52.169.167.219:11456] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indoxploit.php"] [unique_id "aULuEKJPcefhPyLljLx71wAAABA"]
[Thu Dec 18 01:53:21.046109 2025] [:error] [pid 43493:tid 43522] [client 52.169.167.219:10854] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aULuEaJPcefhPyLljLx72AAAABY"]
[Thu Dec 18 01:53:21.563958 2025] [:error] [pid 43494:tid 43550] [client 52.169.167.219:10863] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aULuEepvK2pzfvdDETp8EgAAAFc"]
[Thu Dec 18 01:53:22.098903 2025] [:error] [pid 26117:tid 26173] [client 52.169.167.219:13373] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aULuEjGiVc9lQS6PcL3h6AAAAVc"]
[Thu Dec 18 01:53:22.636508 2025] [:error] [pid 43580:tid 43594] [client 52.169.167.219:14409] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aULuEtw5Ex8-DN38kP3xywAAAIw"]
[Thu Dec 18 01:53:23.171626 2025] [:error] [pid 43580:tid 43590] [client 52.169.167.219:5624] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aULuE9w5Ex8-DN38kP3xzQAAAIg"]
[Thu Dec 18 01:53:23.709770 2025] [:error] [pid 43493:tid 43506] [client 52.169.167.219:11883] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aULuE6JPcefhPyLljLx73wAAAAY"]
[Thu Dec 18 01:53:24.265818 2025] [:error] [pid 43494:tid 43534] [client 52.169.167.219:15428] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aULuFOpvK2pzfvdDETp8FQAAAEc"]
[Thu Dec 18 01:53:24.799785 2025] [:error] [pid 63337:tid 63340] [client 52.169.167.219:5630] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aULuFNSc2ofHSwVzjx-hzgAAAQE"]
[Thu Dec 18 01:53:25.335065 2025] [:error] [pid 43495:tid 43578] [client 52.169.167.219:7901] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload.php"] [unique_id "aULuFZPwJsDLQYFUP-ZLRgAAANg"]
[Thu Dec 18 01:53:25.879686 2025] [:error] [pid 43493:tid 43504] [client 52.169.167.219:2637] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload.php"] [unique_id "aULuFaJPcefhPyLljLx74gAAAAQ"]
[Thu Dec 18 01:53:26.417406 2025] [:error] [pid 43495:tid 43574] [client 52.169.167.219:14965] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload.php"] [unique_id "aULuFpPwJsDLQYFUP-ZLRwAAANQ"]
[Thu Dec 18 01:53:26.934849 2025] [:error] [pid 43495:tid 43559] [client 52.169.167.219:13136] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload.php"] [unique_id "aULuFpPwJsDLQYFUP-ZLSAAAAMU"]
[Thu Dec 18 01:53:27.464415 2025] [:error] [pid 43494:tid 43550] [client 52.169.167.219:11704] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aULuF-pvK2pzfvdDETp8FwAAAFc"]
[Thu Dec 18 01:53:28.000207 2025] [:error] [pid 43495:tid 43566] [client 52.169.167.219:11470] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aULuF5PwJsDLQYFUP-ZLSgAAAMw"]
[Thu Dec 18 01:53:28.536055 2025] [:error] [pid 63337:tid 63360] [client 52.169.167.219:2513] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aULuGNSc2ofHSwVzjx-h2AAAARU"]
[Thu Dec 18 01:53:29.069966 2025] [:error] [pid 26117:tid 26167] [client 52.169.167.219:14926] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aULuGTGiVc9lQS6PcL3h9wAAAVE"]
[Thu Dec 18 01:53:29.587294 2025] [:error] [pid 43494:tid 43533] [client 52.169.167.219:2520] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.2.php"] [unique_id "aULuGepvK2pzfvdDETp8GAAAAEY"]
[Thu Dec 18 01:53:30.104640 2025] [:error] [pid 63337:tid 63363] [client 52.169.167.219:3228] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.2.php"] [unique_id "aULuGtSc2ofHSwVzjx-h3AAAARg"]
[Thu Dec 18 01:53:30.620688 2025] [:error] [pid 26117:tid 26149] [client 52.169.167.219:2499] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.2.php"] [unique_id "aULuGjGiVc9lQS6PcL3h-wAAAUA"]
[Thu Dec 18 01:53:31.139683 2025] [:error] [pid 63337:tid 63345] [client 52.169.167.219:5613] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.2.php"] [unique_id "aULuG9Sc2ofHSwVzjx-h3wAAAQY"]
[Thu Dec 18 01:53:31.657785 2025] [:error] [pid 43493:tid 43508] [client 52.169.167.219:2496] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.1.php"] [unique_id "aULuG6JPcefhPyLljLx76AAAAAg"]
[Thu Dec 18 01:53:32.175352 2025] [:error] [pid 43580:tid 43600] [client 52.169.167.219:3213] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.1.php"] [unique_id "aULuHNw5Ex8-DN38kP3x0wAAAJI"]
[Thu Dec 18 01:53:32.694115 2025] [:error] [pid 43495:tid 43558] [client 52.169.167.219:7556] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.1.php"] [unique_id "aULuHJPwJsDLQYFUP-ZLTgAAAMQ"]
[Thu Dec 18 01:53:33.211115 2025] [:error] [pid 43494:tid 43546] [client 52.169.167.219:13323] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.1.php"] [unique_id "aULuHepvK2pzfvdDETp8GwAAAFM"]
[Thu Dec 18 01:53:33.749051 2025] [:error] [pid 26117:tid 26170] [client 52.169.167.219:13022] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.0.php"] [unique_id "aULuHTGiVc9lQS6PcL3iAwAAAVQ"]
[Thu Dec 18 01:53:34.287482 2025] [:error] [pid 63337:tid 63341] [client 52.169.167.219:13181] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.0.php"] [unique_id "aULuHtSc2ofHSwVzjx-h4gAAAQI"]
[Thu Dec 18 01:53:34.823619 2025] [:error] [pid 43580:tid 43599] [client 52.169.167.219:9000] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.0.php"] [unique_id "aULuHtw5Ex8-DN38kP3x1QAAAJE"]
[Thu Dec 18 01:53:35.341182 2025] [:error] [pid 43580:tid 43590] [client 52.169.167.219:13130] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.6.0.php"] [unique_id "aULuH9w5Ex8-DN38kP3x1gAAAIg"]
[Thu Dec 18 01:53:35.859487 2025] [:error] [pid 63337:tid 63344] [client 52.169.167.219:14436] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer.php"] [unique_id "aULuH9Sc2ofHSwVzjx-h4wAAAQU"]
[Thu Dec 18 01:53:36.376810 2025] [:error] [pid 26117:tid 26150] [client 52.169.167.219:10418] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer.php"] [unique_id "aULuIDGiVc9lQS6PcL3iCgAAAUE"]
[Thu Dec 18 01:53:36.876215 2025] [:error] [pid 63337:tid 63358] [client 52.169.167.219:7556] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer.php"] [unique_id "aULuINSc2ofHSwVzjx-h5QAAARM"]
[Thu Dec 18 01:53:37.378943 2025] [:error] [pid 63337:tid 63352] [client 52.169.167.219:10628] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer.php"] [unique_id "aULuIdSc2ofHSwVzjx-h5gAAAQ0"]
[Thu Dec 18 01:53:37.896421 2025] [:error] [pid 43493:tid 43512] [client 52.169.167.219:5175] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.5.0.php"] [unique_id "aULuIaJPcefhPyLljLx77AAAAAw"]
[Thu Dec 18 01:53:38.435617 2025] [:error] [pid 43494:tid 43543] [client 52.169.167.219:13168] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.5.0.php"] [unique_id "aULuIupvK2pzfvdDETp8JQAAAFA"]
[Thu Dec 18 01:53:38.953750 2025] [:error] [pid 43580:tid 43605] [client 52.169.167.219:10367] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.5.0.php"] [unique_id "aULuItw5Ex8-DN38kP3x2AAAAJc"]
[Thu Dec 18 01:53:39.471008 2025] [:error] [pid 43494:tid 43548] [client 52.169.167.219:11946] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.5.0.php"] [unique_id "aULuI-pvK2pzfvdDETp8JwAAAFU"]
[Thu Dec 18 01:53:39.988918 2025] [:error] [pid 43580:tid 43606] [client 52.169.167.219:13137] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.4.0.php"] [unique_id "aULuI9w5Ex8-DN38kP3x2gAAAJg"]
[Thu Dec 18 01:53:40.507203 2025] [:error] [pid 43580:tid 43603] [client 52.169.167.219:7578] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.4.0.php"] [unique_id "aULuJNw5Ex8-DN38kP3x2wAAAJU"]
[Thu Dec 18 01:53:41.040964 2025] [:error] [pid 26117:tid 26150] [client 52.169.167.219:13159] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.4.0.php"] [unique_id "aULuJTGiVc9lQS6PcL3iDQAAAUE"]
[Thu Dec 18 01:53:41.575311 2025] [:error] [pid 26117:tid 26160] [client 52.169.167.219:11940] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.4.0.php"] [unique_id "aULuJTGiVc9lQS6PcL3iDgAAAUo"]
[Thu Dec 18 01:53:42.093112 2025] [:error] [pid 43493:tid 43518] [client 52.169.167.219:9982] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.1.php"] [unique_id "aULuJqJPcefhPyLljLx78QAAABI"]
[Thu Dec 18 01:53:42.590970 2025] [:error] [pid 43580:tid 43582] [client 52.169.167.219:10209] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.1.php"] [unique_id "aULuJtw5Ex8-DN38kP3x3gAAAIA"]
[Thu Dec 18 01:53:43.108176 2025] [:error] [pid 43580:tid 43592] [client 52.169.167.219:14415] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.1.php"] [unique_id "aULuJ9w5Ex8-DN38kP3x4AAAAIo"]
[Thu Dec 18 01:53:43.643193 2025] [:error] [pid 63337:tid 63347] [client 52.169.167.219:13149] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.1.php"] [unique_id "aULuJ9Sc2ofHSwVzjx-h7QAAAQg"]
[Thu Dec 18 01:53:44.176611 2025] [:error] [pid 63337:tid 63344] [client 52.169.167.219:7586] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.0.php"] [unique_id "aULuKNSc2ofHSwVzjx-h8AAAAQU"]
[Thu Dec 18 01:53:44.693125 2025] [:error] [pid 43580:tid 43600] [client 52.169.167.219:14407] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.0.php"] [unique_id "aULuKNw5Ex8-DN38kP3x4QAAAJI"]
[Thu Dec 18 01:53:45.194034 2025] [:error] [pid 63337:tid 63342] [client 52.169.167.219:12997] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.0.php"] [unique_id "aULuKdSc2ofHSwVzjx-h8wAAAQM"]
[Thu Dec 18 01:53:45.716528 2025] [:error] [pid 43494:tid 43548] [client 52.169.167.219:10332] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.3.0.php"] [unique_id "aULuKepvK2pzfvdDETp8KgAAAFU"]
[Thu Dec 18 01:53:46.251789 2025] [:error] [pid 43495:tid 43560] [client 52.169.167.219:13037] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.5.php"] [unique_id "aULuKpPwJsDLQYFUP-ZLVQAAAMY"]
[Thu Dec 18 01:53:46.768510 2025] [:error] [pid 43495:tid 43569] [client 52.169.167.219:13285] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.5.php"] [unique_id "aULuKpPwJsDLQYFUP-ZLWAAAAM8"]
[Thu Dec 18 01:53:47.285102 2025] [:error] [pid 43494:tid 43544] [client 52.169.167.219:10345] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.5.php"] [unique_id "aULuK-pvK2pzfvdDETp8KwAAAFE"]
[Thu Dec 18 01:53:47.820095 2025] [:error] [pid 43493:tid 43512] [client 52.169.167.219:10677] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.5.php"] [unique_id "aULuK6JPcefhPyLljLx79QAAAAw"]
[Thu Dec 18 01:53:48.354139 2025] [:error] [pid 43580:tid 43590] [client 52.169.167.219:10182] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.4.php"] [unique_id "aULuLNw5Ex8-DN38kP3x5gAAAIg"]
[Thu Dec 18 01:53:48.870763 2025] [:error] [pid 43495:tid 43575] [client 52.169.167.219:11908] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.4.php"] [unique_id "aULuLJPwJsDLQYFUP-ZLXAAAANU"]
[Thu Dec 18 01:53:49.386999 2025] [:error] [pid 63337:tid 63359] [client 52.169.167.219:10660] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.4.php"] [unique_id "aULuLdSc2ofHSwVzjx-h9QAAARQ"]
[Thu Dec 18 01:53:49.921660 2025] [:error] [pid 43495:tid 43557] [client 52.169.167.219:15898] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.4.php"] [unique_id "aULuLZPwJsDLQYFUP-ZLXgAAAMM"]
[Thu Dec 18 01:53:50.470169 2025] [:error] [pid 26117:tid 26149] [client 52.169.167.219:11958] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULuLjGiVc9lQS6PcL3iEwAAAUA"]
[Thu Dec 18 01:53:50.989338 2025] [:error] [pid 26117:tid 26167] [client 52.169.167.219:1674] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULuLjGiVc9lQS6PcL3iFQAAAVE"]
[Thu Dec 18 01:53:51.488621 2025] [:error] [pid 26117:tid 26157] [client 52.169.167.219:7594] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULuLzGiVc9lQS6PcL3iFwAAAUg"]
[Thu Dec 18 01:53:52.005112 2025] [:error] [pid 63337:tid 63352] [client 52.169.167.219:13124] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULuMNSc2ofHSwVzjx-h-QAAAQ0"]
[Thu Dec 18 01:53:52.539876 2025] [:error] [pid 43580:tid 43592] [client 52.169.167.219:3218] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.2.php"] [unique_id "aULuMNw5Ex8-DN38kP3x6gAAAIo"]
[Thu Dec 18 01:53:53.086351 2025] [:error] [pid 63337:tid 63340] [client 52.169.167.219:10668] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.2.php"] [unique_id "aULuMdSc2ofHSwVzjx-h_gAAAQE"]
[Thu Dec 18 01:53:53.602518 2025] [:error] [pid 43494:tid 43531] [client 52.169.167.219:1693] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.2.php"] [unique_id "aULuMepvK2pzfvdDETp8LAAAAEQ"]
[Thu Dec 18 01:53:54.120746 2025] [:error] [pid 63337:tid 63362] [client 52.169.167.219:7603] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.2.php"] [unique_id "aULuMtSc2ofHSwVzjx-iAgAAARc"]
[Thu Dec 18 01:53:54.655442 2025] [:error] [pid 63337:tid 63354] [client 52.169.167.219:10363] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.1.php"] [unique_id "aULuMtSc2ofHSwVzjx-iAwAAAQ8"]
[Thu Dec 18 01:53:55.189258 2025] [:error] [pid 43580:tid 43601] [client 52.169.167.219:14921] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.1.php"] [unique_id "aULuM9w5Ex8-DN38kP3x7wAAAJM"]
[Thu Dec 18 01:53:55.711013 2025] [:error] [pid 63337:tid 63343] [client 52.169.167.219:8614] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.1.php"] [unique_id "aULuM9Sc2ofHSwVzjx-iBgAAAQQ"]
[Thu Dec 18 01:53:56.228814 2025] [:error] [pid 63337:tid 63339] [client 52.169.167.219:7572] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.1.php"] [unique_id "aULuNNSc2ofHSwVzjx-iCAAAAQA"]
[Thu Dec 18 01:53:56.760269 2025] [:error] [pid 43580:tid 43590] [client 52.169.167.219:16731] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.0.php"] [unique_id "aULuNNw5Ex8-DN38kP3x8wAAAIg"]
[Thu Dec 18 01:53:57.292724 2025] [:error] [pid 43494:tid 43528] [client 52.169.167.219:13277] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.0.php"] [unique_id "aULuNepvK2pzfvdDETp8MAAAAEE"]
[Thu Dec 18 01:53:57.826846 2025] [:error] [pid 43494:tid 43550] [client 52.169.167.219:9940] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.0.php"] [unique_id "aULuNepvK2pzfvdDETp8MwAAAFc"]
[Thu Dec 18 01:53:58.361051 2025] [:error] [pid 43495:tid 43578] [client 52.169.167.219:13004] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.2.0.php"] [unique_id "aULuNpPwJsDLQYFUP-ZLYwAAANg"]
[Thu Dec 18 01:53:58.878244 2025] [:error] [pid 63337:tid 63349] [client 52.169.167.219:15924] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.1.0.php"] [unique_id "aULuNtSc2ofHSwVzjx-iCgAAAQo"]
[Thu Dec 18 01:53:59.393870 2025] [:error] [pid 43493:tid 43500] [client 52.169.167.219:16608] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.1.0.php"] [unique_id "aULuN6JPcefhPyLljLx8BgAAAAA"]
[Thu Dec 18 01:53:59.937292 2025] [:error] [pid 63337:tid 63350] [client 52.169.167.219:14942] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.1.0.php"] [unique_id "aULuN9Sc2ofHSwVzjx-iDgAAAQs"]
[Thu Dec 18 01:54:00.456624 2025] [:error] [pid 26117:tid 26157] [client 52.169.167.219:1712] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.1.0.php"] [unique_id "aULuODGiVc9lQS6PcL3iHgAAAUg"]
[Thu Dec 18 01:54:00.973614 2025] [:error] [pid 43494:tid 43541] [client 52.169.167.219:16635] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.3.php"] [unique_id "aULuOOpvK2pzfvdDETp8NgAAAE4"]
[Thu Dec 18 01:54:01.490896 2025] [:error] [pid 43495:tid 43574] [client 52.169.167.219:12354] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.3.php"] [unique_id "aULuOZPwJsDLQYFUP-ZLZQAAANQ"]
[Thu Dec 18 01:54:02.008700 2025] [:error] [pid 43494:tid 43549] [client 52.169.167.219:11515] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.3.php"] [unique_id "aULuOupvK2pzfvdDETp8OgAAAFY"]
[Thu Dec 18 01:54:02.544206 2025] [:error] [pid 63337:tid 63341] [client 52.169.167.219:1687] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.3.php"] [unique_id "aULuOtSc2ofHSwVzjx-iEwAAAQI"]
[Thu Dec 18 01:54:03.079966 2025] [:error] [pid 43493:tid 43517] [client 52.169.167.219:1697] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.2.php"] [unique_id "aULuO6JPcefhPyLljLx8CwAAABE"]
[Thu Dec 18 01:54:03.616099 2025] [:error] [pid 26117:tid 26162] [client 52.169.167.219:16589] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.2.php"] [unique_id "aULuOzGiVc9lQS6PcL3iIAAAAUw"]
[Thu Dec 18 01:54:04.159922 2025] [:error] [pid 26117:tid 26160] [client 52.169.167.219:11935] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.2.php"] [unique_id "aULuPDGiVc9lQS6PcL3iIgAAAUo"]
[Thu Dec 18 01:54:04.694251 2025] [:error] [pid 26117:tid 26171] [client 52.169.167.219:11910] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminer-4.0.2.php"] [unique_id "aULuPDGiVc9lQS6PcL3iIwAAAVU"]
[Thu Dec 18 01:54:05.246582 2025] [:error] [pid 43493:tid 43510] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.0.1.php
[Thu Dec 18 01:54:05.517838 2025] [:error] [pid 43493:tid 43518] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.0.0.php
[Thu Dec 18 01:54:05.790169 2025] [:error] [pid 43493:tid 43505] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.7.1.php
[Thu Dec 18 01:54:06.061746 2025] [:error] [pid 43493:tid 43508] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.7.0.php
[Thu Dec 18 01:54:06.334000 2025] [:error] [pid 43493:tid 43502] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.6.4.php
[Thu Dec 18 01:54:06.605790 2025] [:error] [pid 43493:tid 43503] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.6.3.php
[Thu Dec 18 01:54:06.876641 2025] [:error] [pid 43493:tid 43521] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.6.2.php
[Thu Dec 18 01:54:07.154285 2025] [:error] [pid 43493:tid 43509] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.6.1.php
[Thu Dec 18 01:54:07.425422 2025] [:error] [pid 43493:tid 43513] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-3.6.0.php
[Thu Dec 18 01:54:07.695665 2025] [:error] [pid 43493:tid 43500] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Thu Dec 18 01:54:07.967980 2025] [:error] [pid 43493:tid 43514] [client 52.169.167.219:9931] File does not exist: /usr/local/apache/htdocs/suspended-page/regpage.php
[Thu Dec 18 01:54:08.240146 2025] [:error] [pid 43493:tid 43520] [client 52.169.167.219:9931] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpnet1.php"] [unique_id "aULuQKJPcefhPyLljLx8GwAAABQ"]
[Thu Dec 18 01:54:08.772565 2025] [:error] [pid 43494:tid 43542] [client 52.169.167.219:9910] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpnet1.php"] [unique_id "aULuQOpvK2pzfvdDETp8PwAAAE8"]
[Thu Dec 18 01:54:09.305571 2025] [:error] [pid 43494:tid 43538] [client 52.169.167.219:10644] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpnet1.php"] [unique_id "aULuQepvK2pzfvdDETp8QQAAAEs"]
[Thu Dec 18 01:54:09.843060 2025] [:error] [pid 26117:tid 26157] [client 52.169.167.219:2537] [client 52.169.167.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpnet1.php"] [unique_id "aULuQTGiVc9lQS6PcL3iKwAAAUg"]
[Thu Dec 18 06:50:28.724117 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 18 06:50:29.093234 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 18 06:50:29.576968 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Dec 18 06:50:30.026889 2025] [:error] [pid 25357:tid 25373] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 18 06:50:31.455726 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Dec 18 06:50:31.867532 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Dec 18 06:50:32.305061 2025] [:error] [pid 25357:tid 25380] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Dec 18 06:50:32.764352 2025] [:error] [pid 25357:tid 25363] [client 193.19.109.201:58977] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 18 06:50:33.115810 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.201:58977] [client 193.19.109.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/login.php"] [unique_id "aUMzuYaT7bsEXnJVfJdGrwAAAc0"]
[Thu Dec 18 06:50:34.305110 2025] [:error] [pid 23556:tid 23582] [client 193.19.109.179:53221] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 18 06:50:35.102662 2025] [:error] [pid 23556:tid 23571] [client 193.19.109.179:53221] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Dec 18 06:50:35.619217 2025] [:error] [pid 23556:tid 23582] [client 193.19.109.179:53221] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Dec 18 06:50:36.145190 2025] [:error] [pid 23556:tid 23584] [client 193.19.109.179:53221] [client 193.19.109.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUMzuxnmLlk3u5yt9kEHOgAAABg"]
[Thu Dec 18 06:50:36.981634 2025] [:error] [pid 25357:tid 25380] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 18 06:50:37.325508 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Dec 18 06:50:37.773137 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 18 06:50:38.237111 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 18 06:50:38.619764 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 18 06:50:39.069653 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 18 06:50:39.434658 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.190:60427] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 18 06:50:45.578425 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.190:60427] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUMzxYaT7bsEXnJVfJdH0AAAAco"]
[Thu Dec 18 06:50:47.830210 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.163:20435] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUMzx4aT7bsEXnJVfJdIBwAAAcc"]
[Thu Dec 18 06:50:49.828733 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.184:21349] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Dec 18 06:50:50.977093 2025] [:error] [pid 24542:tid 24561] [client 193.19.109.184:21349] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUMzyktQz4H2oS3NrDYUxQAAAVE"]
[Thu Dec 18 06:50:52.474505 2025] [:error] [pid 25357:tid 25380] [client 193.19.109.183:36437] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Dec 18 06:50:52.871120 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.183:36437] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUMzzIaT7bsEXnJVfJdIiAAAAdQ"]
[Thu Dec 18 06:50:54.520118 2025] [:error] [pid 23645:tid 23663] [client 193.19.109.191:57343] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Dec 18 06:50:56.808138 2025] [:error] [pid 23645:tid 23667] [client 193.19.109.191:57343] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUMz0Df_Rx0Y0ao_QJiLMAAAAJQ"]
[Thu Dec 18 06:50:57.972407 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.181:24447] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUMz0Tf_Rx0Y0ao_QJiLNwAAAJI"]
[Thu Dec 18 06:50:58.669154 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.166:60085] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUMz0jf_Rx0Y0ao_QJiLOgAAAIg"]
[Thu Dec 18 06:50:59.447109 2025] [:error] [pid 23645:tid 23657] [client 193.19.109.181:64559] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUMz0zf_Rx0Y0ao_QJiLRAAAAIo"]
[Thu Dec 18 06:51:00.282907 2025] [:error] [pid 23558:tid 23630] [client 193.19.109.204:60087] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUMz1OHam9NbgPQa9uY3FQAAAM8"]
[Thu Dec 18 06:51:01.231990 2025] [:error] [pid 24433:tid 24447] [client 193.19.109.173:62415] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUMz1Z4pN9ycmipm8Tgg9wAAAQs"]
[Thu Dec 18 06:51:02.348025 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.167:54791] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUMz1jf_Rx0Y0ao_QJiLYgAAAJM"]
[Thu Dec 18 06:51:03.273375 2025] [:error] [pid 23556:tid 23567] [client 193.19.109.162:27309] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Dec 18 06:51:03.998771 2025] [:error] [pid 23556:tid 23571] [client 193.19.109.162:27309] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUMz1xnmLlk3u5yt9kEIVgAAAAs"]
[Thu Dec 18 06:51:05.627456 2025] [:error] [pid 24958:tid 24972] [client 193.19.109.201:23117] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUMz2ckDOrUkd0wNm2EL6AAAAYs"]
[Thu Dec 18 06:51:06.804038 2025] [:error] [pid 24433:tid 24436] [client 193.37.33.230:38843] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUMz2p4pN9ycmipm8TghQAAAAQA"]
[Thu Dec 18 06:51:07.577467 2025] [:error] [pid 24958:tid 24975] [client 193.19.109.210:40301] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Dec 18 06:51:07.916769 2025] [:error] [pid 24958:tid 24961] [client 193.19.109.210:40301] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUMz28kDOrUkd0wNm2EMDwAAAYA"]
[Thu Dec 18 06:51:08.662413 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.206:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Dec 18 06:51:09.900957 2025] [:error] [pid 23557:tid 23600] [client 193.19.109.206:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Dec 18 06:51:11.086599 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.206:34191] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUMz3xYcs6rFVxbdP_k1rgAAAEg"]
[Thu Dec 18 06:51:11.850339 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.172:25975] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Dec 18 06:51:12.202604 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.172:25975] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUMz4IaT7bsEXnJVfJdKWwAAAcY"]
[Thu Dec 18 06:51:12.971251 2025] [:error] [pid 23558:tid 23637] [client 193.19.109.176:26253] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Dec 18 06:51:13.690896 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.176:26253] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUMz4eHam9NbgPQa9uY3mAAAANc"]
[Thu Dec 18 06:51:15.825665 2025] [:error] [pid 23558:tid 23637] [client 193.19.109.179:47269] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUMz4-Ham9NbgPQa9uY3tAAAANY"]
[Thu Dec 18 06:51:16.944158 2025] [:error] [pid 23558:tid 23634] [client 193.19.109.188:57719] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Dec 18 06:51:17.313374 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.188:57719] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Dec 18 06:51:18.593297 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.188:57719] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUMz5uHam9NbgPQa9uY32QAAANI"]
[Thu Dec 18 06:51:19.788375 2025] [:error] [pid 23557:tid 23603] [client 193.19.109.182:31181] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUMz5xYcs6rFVxbdP_k1_wAAAE8"]
[Thu Dec 18 06:51:20.914648 2025] [:error] [pid 23556:tid 23582] [client 193.19.109.161:30611] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUMz6BnmLlk3u5yt9kEJUwAAABY"]
[Thu Dec 18 06:51:21.731109 2025] [:error] [pid 23645:tid 23654] [client 193.19.109.193:51271] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUMz6Tf_Rx0Y0ao_QJiMLQAAAIc"]
[Thu Dec 18 06:51:22.607365 2025] [:error] [pid 23557:tid 23599] [client 193.19.109.209:39835] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUMz6hYcs6rFVxbdP_k2GwAAAEs"]
[Thu Dec 18 06:51:25.121320 2025] [:error] [pid 23645:tid 23654] [client 193.19.109.181:21493] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Dec 18 06:51:25.487828 2025] [:error] [pid 23645:tid 23669] [client 193.19.109.181:21493] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUMz7Tf_Rx0Y0ao_QJiMWAAAAJY"]
[Thu Dec 18 06:51:26.257027 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.176:49557] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUMz7uHam9NbgPQa9uY4MwAAAMo"]
[Thu Dec 18 06:51:26.980758 2025] [:error] [pid 24542:tid 24567] [client 193.19.109.167:43115] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUMz7ktQz4H2oS3NrDYWVQAAAVc"]
[Thu Dec 18 06:51:28.577807 2025] [:error] [pid 23558:tid 23627] [client 193.19.109.195:58783] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Dec 18 06:51:29.404949 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.195:58783] [client 193.19.109.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUMz8eHam9NbgPQa9uY4cQAAAMg"]
[Thu Dec 18 06:51:31.181117 2025] [:error] [pid 23558:tid 23624] [client 193.19.109.178:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Dec 18 06:51:32.798942 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.178:61867] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUMz9OHam9NbgPQa9uY4mwAAAMM"]
[Thu Dec 18 06:51:34.799846 2025] [:error] [pid 24433:tid 24450] [client 193.19.109.197:54679] [client 193.19.109.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.197, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUMz9p4pN9ycmipm8TgihwAAAQ4"]
[Thu Dec 18 06:51:35.217588 2025] [:error] [pid 24433:tid 24445] [client 193.19.109.197:54679] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Dec 18 06:51:37.231462 2025] [:error] [pid 24433:tid 24456] [client 193.19.109.197:54679] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Dec 18 06:51:37.599397 2025] [:error] [pid 24433:tid 24439] [client 193.19.109.197:54679] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Dec 18 06:51:39.476471 2025] [:error] [pid 24433:tid 24455] [client 193.19.109.197:54679] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUMz-54pN9ycmipm8TgiuQAAARM"]
[Thu Dec 18 06:51:40.586647 2025] [:error] [pid 24433:tid 24445] [client 193.19.109.162:54607] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Dec 18 06:51:40.928282 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.162:54607] [client 193.19.109.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.162, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUMz_J4pN9ycmipm8TgizAAAARI"]
[Thu Dec 18 06:51:41.634966 2025] [:error] [pid 24433:tid 24443] [client 193.19.109.162:54607] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUMz_Z4pN9ycmipm8Tgi1gAAAQc"]
[Thu Dec 18 06:51:43.915150 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.188:41851] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Dec 18 06:51:44.708629 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.188:41851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Dec 18 06:51:45.501098 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.188:41851] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUM0AeHam9NbgPQa9uY5XgAAAMg"]
[Thu Dec 18 06:51:47.361710 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.165:60209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Dec 18 06:51:48.552961 2025] [:error] [pid 23558:tid 23629] [client 193.19.109.165:60209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Dec 18 06:51:49.408968 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.165:60209] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Dec 18 06:51:50.331086 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.165:60209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Dec 18 06:51:50.755341 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.165:60209] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUM0BuHam9NbgPQa9uY5mwAAANc"]
[Thu Dec 18 06:51:51.574896 2025] [:error] [pid 23645:tid 23658] [client 193.19.109.204:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Dec 18 06:51:51.927963 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.204:38197] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Dec 18 06:51:52.294014 2025] [:error] [pid 23645:tid 23667] [client 193.19.109.204:38197] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUM0CDf_Rx0Y0ao_QJiNugAAAJQ"]
[Thu Dec 18 06:51:53.446513 2025] [:error] [pid 23645:tid 23664] [client 193.19.109.185:60609] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Dec 18 06:51:54.213032 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.185:60609] [client 193.19.109.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.185, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUM0Cjf_Rx0Y0ao_QJiN2QAAAJc"]
[Thu Dec 18 06:51:54.704885 2025] [:error] [pid 23645:tid 23648] [client 193.19.109.185:60609] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUM0Cjf_Rx0Y0ao_QJiN3wAAAIE"]
[Thu Dec 18 06:51:56.638351 2025] [:error] [pid 23558:tid 23624] [client 193.19.109.190:47039] [client 193.19.109.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fonts/fontawesome-webfont.php"] [unique_id "aUM0DOHam9NbgPQa9uY53gAAAMk"]
[Thu Dec 18 06:52:00.103963 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.184:51465] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Dec 18 06:52:03.207855 2025] [:error] [pid 23645:tid 23664] [client 193.19.109.167:35661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Dec 18 06:52:03.607862 2025] [:error] [pid 23645:tid 23668] [client 193.19.109.167:35661] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUM0Ezf_Rx0Y0ao_QJiOWgAAAJU"]
[Thu Dec 18 06:52:04.383092 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.200:46621] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Dec 18 06:52:05.601175 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.200:46621] [client 193.19.109.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.200, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUM0FRYcs6rFVxbdP_k4AQAAAFI"]
[Thu Dec 18 06:52:06.056867 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.200:46621] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Dec 18 06:52:06.447682 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.200:46621] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Dec 18 06:52:06.798030 2025] [:error] [pid 23557:tid 23591] [client 193.19.109.200:46621] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Dec 18 06:52:07.205444 2025] [:error] [pid 23557:tid 23605] [client 193.19.109.200:46621] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUM0FxYcs6rFVxbdP_k4EQAAAFE"]
[Thu Dec 18 06:52:07.966963 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.183:43161] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Dec 18 06:52:08.308233 2025] [:error] [pid 23558:tid 23621] [client 193.19.109.183:43161] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aUM0GOHam9NbgPQa9uY6SwAAAMY"]
[Thu Dec 18 06:52:09.497599 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.163:42697] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Dec 18 06:52:09.889087 2025] [:error] [pid 23558:tid 23634] [client 193.19.109.163:42697] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUM0GeHam9NbgPQa9uY6XgAAANM"]
[Thu Dec 18 06:52:11.386169 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.175:26429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Dec 18 06:52:11.801046 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.175:26429] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUM0G4aT7bsEXnJVfJdPTgAAAdI"]
[Thu Dec 18 06:52:12.559534 2025] [:error] [pid 24542:tid 24551] [client 193.19.109.187:20533] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUM0HEtQz4H2oS3NrDYYfQAAAUc"]
[Thu Dec 18 06:52:13.280271 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.204:60569] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Dec 18 06:52:13.673819 2025] [:error] [pid 25357:tid 25381] [client 193.19.109.204:60569] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Dec 18 06:52:15.277211 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.204:60569] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUM0H4aT7bsEXnJVfJdPiQAAAdA"]
[Thu Dec 18 06:52:16.482921 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.205:42725] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUM0IIaT7bsEXnJVfJdPoAAAAdI"]
[Thu Dec 18 06:52:18.409715 2025] [:error] [pid 23645:tid 23654] [client 193.19.109.189:31479] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aUM0Ijf_Rx0Y0ao_QJiPLQAAAIc"]
[Thu Dec 18 06:52:19.279671 2025] [:error] [pid 24958:tid 24964] [client 193.19.109.173:45231] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Dec 18 06:52:20.169381 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.173:45231] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Dec 18 06:52:20.509941 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.173:45231] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUM0JMkDOrUkd0wNm2EQSQAAAZM"]
[Thu Dec 18 06:52:21.264495 2025] [:error] [pid 23557:tid 23593] [client 193.19.109.173:27025] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Dec 18 06:52:22.582448 2025] [:error] [pid 23557:tid 23605] [client 193.19.109.173:27025] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aUM0JhYcs6rFVxbdP_k40AAAAFE"]
[Thu Dec 18 06:52:24.383472 2025] [:error] [pid 23556:tid 23574] [client 193.19.109.200:25839] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUM0KBnmLlk3u5yt9kEMfQAAAA4"]
[Thu Dec 18 06:52:25.516308 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.172:38521] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Dec 18 06:52:26.633289 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.172:38521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Dec 18 06:52:26.999380 2025] [:error] [pid 23557:tid 23593] [client 193.19.109.172:38521] [client 193.19.109.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/network.php"] [unique_id "aUM0KhYcs6rFVxbdP_k5BAAAAEU"]
[Thu Dec 18 06:52:28.107089 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.195:34861] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Dec 18 06:52:28.486647 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.195:34861] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUM0LEtQz4H2oS3NrDYZLgAAAUk"]
[Thu Dec 18 06:52:30.243905 2025] [:error] [pid 23557:tid 23598] [client 193.19.109.179:31425] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aUM0LhYcs6rFVxbdP_k5KwAAAEo"]
[Thu Dec 18 06:52:31.032098 2025] [:error] [pid 23556:tid 23576] [client 193.19.109.182:20711] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUM0LxnmLlk3u5yt9kEMrgAAABA"]
[Thu Dec 18 06:52:31.848023 2025] [:error] [pid 24958:tid 24973] [client 193.19.109.205:21939] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUM0L8kDOrUkd0wNm2EQxgAAAYw"]
[Thu Dec 18 06:52:32.575610 2025] [:error] [pid 24542:tid 24545] [client 193.19.109.191:40299] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Dec 18 06:52:32.987988 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.191:40299] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUM0MEtQz4H2oS3NrDYZZgAAAUI"]
[Thu Dec 18 06:52:33.796204 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.198:20283] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUM0MUtQz4H2oS3NrDYZcQAAAU0"]
[Thu Dec 18 06:52:34.587331 2025] [:error] [pid 24958:tid 24964] [client 193.19.109.165:33917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Dec 18 06:52:35.339933 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.165:33917] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUM0M8kDOrUkd0wNm2EQ7wAAAZU"]
[Thu Dec 18 06:52:36.074128 2025] [:error] [pid 24433:tid 24439] [client 193.19.109.170:31515] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUM0NJ4pN9ycmipm8TglowAAAQM"]
[Thu Dec 18 06:52:36.853034 2025] [:error] [pid 24542:tid 24547] [client 193.19.109.161:62775] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUM0NEtQz4H2oS3NrDYZlwAAAUM"]
[Thu Dec 18 06:52:37.582805 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.190:61045] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUM0NYaT7bsEXnJVfJdQvgAAAc0"]
[Thu Dec 18 06:52:39.700981 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.210:34523] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUM0N-Ham9NbgPQa9uY7vAAAAMg"]
[Thu Dec 18 06:52:41.306810 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.173:52343] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUM0OYaT7bsEXnJVfJdQ6QAAAcM"]
[Thu Dec 18 06:52:42.069736 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.205:30993] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Dec 18 06:52:43.195956 2025] [:error] [pid 24958:tid 24962] [client 193.19.109.205:30993] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Dec 18 06:52:43.564067 2025] [:error] [pid 24958:tid 24979] [client 193.19.109.205:30993] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUM0O8kDOrUkd0wNm2ERRwAAAZI"]
[Thu Dec 18 06:52:44.677623 2025] [:error] [pid 23645:tid 23670] [client 193.37.33.230:30519] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Dec 18 06:52:45.023169 2025] [:error] [pid 23645:tid 23666] [client 193.37.33.230:30519] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Dec 18 06:52:46.991229 2025] [:error] [pid 23645:tid 23657] [client 193.37.33.230:30519] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aUM0Pjf_Rx0Y0ao_QJiQeQAAAIo"]
[Thu Dec 18 06:52:48.888167 2025] [:error] [pid 24433:tid 24455] [client 193.19.109.205:35241] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUM0QJ4pN9ycmipm8TgmUgAAARM"]
[Thu Dec 18 06:52:49.659230 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.208:56715] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUM0QTf_Rx0Y0ao_QJiQnwAAAJM"]
[Thu Dec 18 06:52:52.098668 2025] [:error] [pid 24958:tid 24978] [client 193.19.109.179:39895] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUM0RMkDOrUkd0wNm2ERnQAAAZE"]
[Thu Dec 18 06:52:53.648857 2025] [:error] [pid 23557:tid 23597] [client 193.19.109.178:51225] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Dec 18 06:52:54.002183 2025] [:error] [pid 23557:tid 23607] [client 193.19.109.178:51225] [client 193.19.109.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/install.php"] [unique_id "aUM0RhYcs6rFVxbdP_k6NwAAAFM"]
[Thu Dec 18 06:52:54.754097 2025] [:error] [pid 24542:tid 24551] [client 193.37.33.230:57733] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Dec 18 06:52:55.109227 2025] [:error] [pid 24542:tid 24559] [client 193.37.33.230:57733] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Dec 18 06:52:56.047982 2025] [:error] [pid 24542:tid 24558] [client 193.37.33.230:57733] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Dec 18 06:52:57.987371 2025] [:error] [pid 24542:tid 24555] [client 193.37.33.230:57733] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUM0SUtQz4H2oS3NrDYaRwAAAUs"]
[Thu Dec 18 06:52:58.707231 2025] [:error] [pid 25357:tid 25368] [client 193.19.109.205:34319] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUM0SoaT7bsEXnJVfJdRnwAAAck"]
[Thu Dec 18 06:52:59.573820 2025] [:error] [pid 23645:tid 23658] [client 193.19.109.210:28239] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUM0Szf_Rx0Y0ao_QJiRPwAAAIs"]
[Thu Dec 18 06:53:00.294215 2025] [:error] [pid 23556:tid 23569] [client 193.19.109.191:41997] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUM0TBnmLlk3u5yt9kENvAAAAAk"]
[Thu Dec 18 06:53:01.074017 2025] [:error] [pid 24433:tid 24449] [client 193.19.109.189:55475] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUM0TZ4pN9ycmipm8Tgm2AAAAQ0"]
[Thu Dec 18 06:53:01.779984 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.175:25401] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUM0TckDOrUkd0wNm2ESBwAAAYU"]
[Thu Dec 18 06:53:02.921135 2025] [:error] [pid 24433:tid 24450] [client 193.37.33.229:53765] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUM0Tp4pN9ycmipm8Tgm7wAAAQ4"]
[Thu Dec 18 06:53:03.751131 2025] [:error] [pid 24433:tid 24449] [client 193.19.109.177:24125] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUM0T54pN9ycmipm8Tgm_gAAAQ0"]
[Thu Dec 18 06:53:04.475471 2025] [:error] [pid 23557:tid 23597] [client 193.19.109.191:50795] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUM0UBYcs6rFVxbdP_k6kwAAAEk"]
[Thu Dec 18 06:53:05.182206 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.179:55307] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUM0URYcs6rFVxbdP_k6nQAAAE4"]
[Thu Dec 18 06:53:06.617974 2025] [:error] [pid 24433:tid 24459] [client 193.19.109.210:36651] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUM0Up4pN9ycmipm8TgnKQAAARc"]
[Thu Dec 18 06:53:07.773630 2025] [:error] [pid 24433:tid 24447] [client 193.19.109.173:57485] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUM0U54pN9ycmipm8TgnOwAAAQs"]
[Thu Dec 18 06:53:08.479128 2025] [:error] [pid 24542:tid 24552] [client 193.19.109.205:22081] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Dec 18 06:53:09.289866 2025] [:error] [pid 24542:tid 24547] [client 193.19.109.205:22081] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUM0VUtQz4H2oS3NrDYarAAAAUM"]
[Thu Dec 18 06:53:10.784563 2025] [:error] [pid 23557:tid 23601] [client 193.19.109.197:21751] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aUM0VhYcs6rFVxbdP_k60AAAAE0"]
[Thu Dec 18 06:53:12.310360 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.193:29129] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Dec 18 06:53:12.686178 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.193:29129] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUM0WEtQz4H2oS3NrDYa2AAAAUU"]
[Thu Dec 18 06:53:13.817349 2025] [:error] [pid 24958:tid 24961] [client 193.19.109.196:60297] [client 193.19.109.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aUM0WckDOrUkd0wNm2ESsgAAAYA"]
[Thu Dec 18 06:53:14.575056 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.202:26729] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Dec 18 06:53:15.075995 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.202:26729] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Dec 18 06:53:15.422390 2025] [:error] [pid 24542:tid 24565] [client 193.19.109.202:26729] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Dec 18 06:53:15.808353 2025] [:error] [pid 24542:tid 24545] [client 193.19.109.202:26729] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUM0W0tQz4H2oS3NrDYa9wAAAUE"]
[Thu Dec 18 06:53:16.680053 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.176:64801] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Dec 18 06:53:17.087313 2025] [:error] [pid 24542:tid 24566] [client 193.19.109.176:64801] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aUM0XUtQz4H2oS3NrDYa-wAAAVY"]
[Thu Dec 18 06:53:18.605042 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.166:20475] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Dec 18 06:53:19.133612 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.166:20475] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Dec 18 06:53:19.534784 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.166:20475] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Dec 18 06:53:21.506444 2025] [:error] [pid 25357:tid 25382] [client 193.19.109.166:20475] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Dec 18 06:53:21.894069 2025] [:error] [pid 25357:tid 25370] [client 193.19.109.166:20475] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Dec 18 06:53:22.683810 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.166:20475] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Dec 18 06:53:23.811995 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.166:20475] [client 193.19.109.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUM0Y4aT7bsEXnJVfJdSjgAAAcg"]
[Thu Dec 18 06:53:24.575409 2025] [:error] [pid 23645:tid 23654] [client 193.19.109.202:37335] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Dec 18 06:53:24.922959 2025] [:error] [pid 23645:tid 23659] [client 193.19.109.202:37335] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUM0ZDf_Rx0Y0ao_QJiSaAAAAIw"]
[Thu Dec 18 06:53:25.761088 2025] [:error] [pid 24958:tid 24971] [client 193.19.109.165:41387] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUM0ZckDOrUkd0wNm2ETGAAAAYo"]
[Thu Dec 18 06:53:26.483141 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.181:41497] [client 193.19.109.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.181, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUM0Zjf_Rx0Y0ao_QJiScgAAAI0"]
[Thu Dec 18 06:53:26.497999 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.181:41497] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 18 06:53:26.873683 2025] [:error] [pid 23645:tid 23661] [client 193.19.109.181:41497] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Dec 18 06:53:27.286754 2025] [:error] [pid 23645:tid 23651] [client 193.19.109.181:41497] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUM0Zzf_Rx0Y0ao_QJiSeQAAAIQ"]
[Thu Dec 18 06:53:28.513722 2025] [:error] [pid 24958:tid 24978] [client 193.19.109.189:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Dec 18 06:53:28.894673 2025] [:error] [pid 24958:tid 24974] [client 193.19.109.189:44089] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUM0aMkDOrUkd0wNm2ETPwAAAY0"]
[Thu Dec 18 06:53:29.756479 2025] [:error] [pid 23556:tid 23565] [client 193.37.33.230:37611] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUM0aRnmLlk3u5yt9kEOsQAAAAU"]
[Thu Dec 18 06:53:32.018610 2025] [:error] [pid 24542:tid 24547] [client 193.19.109.163:22343] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUM0bEtQz4H2oS3NrDYbVQAAAUM"]
[Thu Dec 18 06:53:32.783098 2025] [:error] [pid 23556:tid 23560] [client 193.19.109.186:55805] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUM0bBnmLlk3u5yt9kEOygAAAAA"]
[Thu Dec 18 06:53:34.783757 2025] [:error] [pid 23645:tid 23656] [client 193.19.109.209:37237] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Dec 18 06:53:35.675149 2025] [:error] [pid 23645:tid 23663] [client 193.19.109.209:37237] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUM0bzf_Rx0Y0ao_QJiSxgAAAJA"]
[Thu Dec 18 06:53:37.104918 2025] [:error] [pid 23645:tid 23662] [client 193.19.109.183:27855] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Dec 18 06:53:37.870615 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.183:27855] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aUM0cTf_Rx0Y0ao_QJiS1QAAAIg"]
[Thu Dec 18 06:53:38.654976 2025] [:error] [pid 23558:tid 23621] [client 193.19.109.189:31351] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aUM0cuHam9NbgPQa9uY-BAAAAMY"]
[Thu Dec 18 06:53:39.871453 2025] [:error] [pid 23557:tid 23607] [client 193.19.109.174:42075] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Dec 18 06:53:40.223613 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.174:42075] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUM0dBYcs6rFVxbdP_k7jAAAAFU"]
[Thu Dec 18 06:53:40.968477 2025] [:error] [pid 24433:tid 24448] [client 193.19.109.175:59911] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUM0dJ4pN9ycmipm8TgoSwAAAQw"]
[Thu Dec 18 06:53:42.595834 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.190:41633] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Dec 18 06:53:42.972870 2025] [:error] [pid 25357:tid 25370] [client 193.19.109.190:41633] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Dec 18 06:53:43.707484 2025] [:error] [pid 25357:tid 25361] [client 193.19.109.190:41633] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Dec 18 06:53:44.470975 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.190:41633] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aUM0eIaT7bsEXnJVfJdTTgAAAco"]
[Thu Dec 18 06:53:45.176083 2025] [:error] [pid 24958:tid 24964] [client 193.19.109.175:21359] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUM0eckDOrUkd0wNm2ET0AAAAYM"]
[Thu Dec 18 06:53:48.381411 2025] [:error] [pid 24433:tid 24455] [client 193.19.109.210:48009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Dec 18 06:53:48.791692 2025] [:error] [pid 24433:tid 24451] [client 193.19.109.210:48009] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aUM0fJ4pN9ycmipm8TgogAAAAQ8"]
[Thu Dec 18 06:53:49.558798 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.165:33295] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUM0fUtQz4H2oS3NrDYcPwAAAUU"]
[Thu Dec 18 06:53:50.280212 2025] [:error] [pid 23645:tid 23653] [client 193.19.109.170:31959] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUM0fjf_Rx0Y0ao_QJiTPQAAAIY"]
[Thu Dec 18 06:53:52.622203 2025] [:error] [pid 24542:tid 24561] [client 193.19.109.197:58259] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Dec 18 06:53:53.013150 2025] [:error] [pid 24542:tid 24560] [client 193.19.109.197:58259] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUM0gUtQz4H2oS3NrDYcVwAAAVA"]
[Thu Dec 18 06:53:54.114963 2025] [:error] [pid 24542:tid 24551] [client 193.19.109.191:24733] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUM0gktQz4H2oS3NrDYcZQAAAUc"]
[Thu Dec 18 06:53:54.867295 2025] [:error] [pid 24958:tid 24975] [client 193.19.109.173:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Dec 18 06:53:55.211885 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.173:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Dec 18 06:53:55.998940 2025] [:error] [pid 24958:tid 24965] [client 193.19.109.173:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Dec 18 06:53:57.579099 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.173:31475] [client 193.19.109.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.173, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aUM0hckDOrUkd0wNm2EUagAAAZA"]
[Thu Dec 18 06:53:58.378097 2025] [:error] [pid 24958:tid 24962] [client 193.19.109.173:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Dec 18 06:53:58.728161 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.173:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Dec 18 06:53:59.125441 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.173:31475] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Dec 18 06:53:59.883992 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.173:31475] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aUM0h8kDOrUkd0wNm2EUjQAAAZA"]
[Thu Dec 18 06:54:00.659266 2025] [:error] [pid 23557:tid 23595] [client 193.19.109.176:60491] [client 193.19.109.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.176, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUM0iBYcs6rFVxbdP_k8BgAAAEc"]
[Thu Dec 18 06:54:01.808256 2025] [:error] [pid 23557:tid 23612] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Dec 18 06:54:02.203853 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Dec 18 06:54:02.974067 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Dec 18 06:54:03.699596 2025] [:error] [pid 23557:tid 23612] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Dec 18 06:54:04.834272 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Dec 18 06:54:10.348803 2025] [:error] [pid 23557:tid 23599] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Dec 18 06:54:10.779025 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Dec 18 06:54:12.606780 2025] [:error] [pid 23557:tid 23603] [client 193.19.109.176:60491] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Dec 18 06:54:13.395244 2025] [:error] [pid 23557:tid 23604] [client 193.19.109.176:60491] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aUM0lRYcs6rFVxbdP_k8eQAAAFA"]
[Thu Dec 18 06:54:15.067917 2025] [:error] [pid 24958:tid 24974] [client 193.19.109.177:58665] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Dec 18 06:54:15.411672 2025] [:error] [pid 24958:tid 24981] [client 193.19.109.177:58665] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUM0l8kDOrUkd0wNm2EVTgAAAZQ"]
[Thu Dec 18 06:54:16.595031 2025] [:error] [pid 24433:tid 24456] [client 193.37.33.230:36171] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Dec 18 06:54:16.972030 2025] [:error] [pid 24433:tid 24445] [client 193.37.33.230:36171] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUM0mJ4pN9ycmipm8TgpNgAAAQk"]
[Thu Dec 18 06:54:19.377568 2025] [:error] [pid 23556:tid 23561] [client 193.19.109.167:47497] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Dec 18 06:54:20.198836 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.167:47497] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Dec 18 06:54:20.974068 2025] [:error] [pid 23556:tid 23580] [client 193.19.109.167:47497] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Dec 18 06:54:21.318652 2025] [:error] [pid 23556:tid 23568] [client 193.19.109.167:47497] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Dec 18 06:54:22.086027 2025] [:error] [pid 23556:tid 23580] [client 193.19.109.167:47497] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUM0nhnmLlk3u5yt9kEQHQAAABQ"]
[Thu Dec 18 06:54:22.856755 2025] [:error] [pid 23558:tid 23616] [client 193.19.109.182:44737] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Dec 18 06:54:23.202565 2025] [:error] [pid 23558:tid 23628] [client 193.19.109.182:44737] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Dec 18 06:54:26.045700 2025] [:error] [pid 23558:tid 23628] [client 193.19.109.182:44737] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUM0ouHam9NbgPQa9uY_ZAAAAM0"]
[Thu Dec 18 06:54:27.221263 2025] [:error] [pid 24542:tid 24545] [client 193.37.33.230:21187] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUM0o0tQz4H2oS3NrDYdcwAAAUE"]
[Thu Dec 18 06:54:28.368235 2025] [:error] [pid 23557:tid 23612] [client 193.19.109.177:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Dec 18 06:54:29.578033 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.177:39813] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Dec 18 06:54:29.923388 2025] [:error] [pid 23557:tid 23604] [client 193.19.109.177:39813] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Dec 18 06:54:30.999895 2025] [:error] [pid 23557:tid 23604] [client 193.19.109.177:39813] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUM0phYcs6rFVxbdP_k88gAAAFA"]
[Thu Dec 18 06:54:31.754661 2025] [:error] [pid 23557:tid 23588] [client 193.19.109.180:55083] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUM0pxYcs6rFVxbdP_k89wAAAEA"]
[Thu Dec 18 06:54:34.325987 2025] [:error] [pid 24542:tid 24556] [client 193.19.109.210:34393] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Dec 18 06:54:35.174486 2025] [:error] [pid 24542:tid 24567] [client 193.19.109.210:34393] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUM0q0tQz4H2oS3NrDYdlAAAAVc"]
[Thu Dec 18 06:54:36.221588 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.205:54819] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aUM0rIaT7bsEXnJVfJdVHgAAAcw"]
[Thu Dec 18 06:54:37.374500 2025] [:error] [pid 23557:tid 23592] [client 193.19.109.176:64705] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Dec 18 06:54:37.725319 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.176:64705] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Dec 18 06:54:38.081977 2025] [:error] [pid 23557:tid 23611] [client 193.19.109.176:64705] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUM0rhYcs6rFVxbdP_k9BQAAAFc"]
[Thu Dec 18 06:54:39.196683 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.184:27569] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Dec 18 06:54:39.626048 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.184:27569] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Dec 18 06:54:40.392825 2025] [:error] [pid 25357:tid 25383] [client 193.19.109.184:27569] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Dec 18 06:54:41.490800 2025] [:error] [pid 25357:tid 25374] [client 193.19.109.184:27569] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUM0sYaT7bsEXnJVfJdVbwAAAc8"]
[Thu Dec 18 06:54:42.269181 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.171:32083] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Dec 18 06:54:43.391968 2025] [:error] [pid 23556:tid 23576] [client 193.19.109.171:32083] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUM0sxnmLlk3u5yt9kEQpQAAABA"]
[Thu Dec 18 06:54:44.519623 2025] [:error] [pid 23558:tid 23619] [client 193.19.109.208:48515] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Dec 18 06:54:45.796231 2025] [:error] [pid 23558:tid 23635] [client 193.19.109.208:48515] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Dec 18 06:54:46.180239 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.208:48515] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Dec 18 06:54:46.883750 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.208:48515] [client 193.19.109.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.208, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUM0tuHam9NbgPQa9uZAQgAAAMg"]
[Thu Dec 18 06:54:48.883638 2025] [:error] [pid 23558:tid 23621] [client 193.19.109.208:48515] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUM0uOHam9NbgPQa9uZAVwAAAMY"]
[Thu Dec 18 06:54:49.668961 2025] [:error] [pid 23557:tid 23598] [client 193.19.109.178:50885] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Dec 18 06:54:50.008748 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.178:50885] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUM0uhYcs6rFVxbdP_k9aAAAAFU"]
[Thu Dec 18 06:54:50.752176 2025] [:error] [pid 24542:tid 24564] [client 193.19.109.196:44323] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Dec 18 06:54:51.604104 2025] [:error] [pid 24542:tid 24551] [client 193.19.109.196:44323] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Dec 18 06:54:52.387538 2025] [:error] [pid 24542:tid 24566] [client 193.19.109.196:44323] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUM0vEtQz4H2oS3NrDYd3gAAAVY"]
[Thu Dec 18 06:54:53.591182 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.172:41481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Dec 18 06:54:54.026520 2025] [:error] [pid 25357:tid 25378] [client 193.19.109.172:41481] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Dec 18 06:54:54.785569 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.172:41481] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUM0voaT7bsEXnJVfJdWFwAAAdA"]
[Thu Dec 18 06:54:55.880588 2025] [:error] [pid 23557:tid 23600] [client 193.19.109.208:35793] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUM0vxYcs6rFVxbdP_k9hQAAAEw"]
[Thu Dec 18 06:54:56.664209 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.182:28495] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Dec 18 06:54:57.023097 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.182:28495] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Dec 18 06:54:57.779899 2025] [:error] [pid 24542:tid 24562] [client 193.19.109.182:28495] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUM0wUtQz4H2oS3NrDYeBgAAAVI"]
[Thu Dec 18 06:54:58.580802 2025] [:error] [pid 23558:tid 23615] [client 193.19.109.204:39013] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Dec 18 06:54:59.293610 2025] [:error] [pid 23558:tid 23634] [client 193.19.109.204:39013] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Dec 18 06:54:59.678560 2025] [:error] [pid 23558:tid 23619] [client 193.19.109.204:39013] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUM0w-Ham9NbgPQa9uZAfwAAAMQ"]
[Thu Dec 18 06:55:01.908035 2025] [:error] [pid 23558:tid 23630] [client 193.37.33.229:54189] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aUM0xeHam9NbgPQa9uZAkgAAAM8"]
[Thu Dec 18 06:55:02.651952 2025] [:error] [pid 24542:tid 24563] [client 193.19.109.204:50003] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUM0xktQz4H2oS3NrDYeLAAAAVM"]
[Thu Dec 18 06:55:03.384346 2025] [:error] [pid 25357:tid 25382] [client 193.19.109.161:21881] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUM0x4aT7bsEXnJVfJdWXQAAAdc"]
[Thu Dec 18 06:55:04.081825 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.181:59015] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUM0yIaT7bsEXnJVfJdWZAAAAcw"]
[Thu Dec 18 06:55:04.957689 2025] [:error] [pid 23556:tid 23565] [client 193.19.109.197:43039] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUM0yBnmLlk3u5yt9kERFAAAAAU"]
[Thu Dec 18 06:55:05.754097 2025] [:error] [pid 24958:tid 24971] [client 193.19.109.192:29209] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUM0yckDOrUkd0wNm2EWkwAAAYo"]
[Thu Dec 18 06:55:08.215163 2025] [:error] [pid 24958:tid 24983] [client 193.19.109.175:25487] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUM0zMkDOrUkd0wNm2EWtwAAAZY"]
[Thu Dec 18 06:55:09.056039 2025] [:error] [pid 24433:tid 24458] [client 193.19.109.193:32785] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUM0zZ4pN9ycmipm8TgqugAAARY"]
[Thu Dec 18 06:55:09.769981 2025] [:error] [pid 23557:tid 23592] [client 193.19.109.172:55343] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUM0zRYcs6rFVxbdP_k97AAAAEQ"]
[Thu Dec 18 06:55:10.877321 2025] [:error] [pid 24958:tid 24971] [client 193.19.109.162:39911] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUM0zskDOrUkd0wNm2EWywAAAYo"]
[Thu Dec 18 06:55:12.288087 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.175:42673] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aUM00EtQz4H2oS3NrDYeZwAAAUA"]
[Thu Dec 18 06:55:13.095750 2025] [:error] [pid 24433:tid 24437] [client 193.19.109.184:55309] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Dec 18 06:55:14.584145 2025] [:error] [pid 24433:tid 24437] [client 193.19.109.184:55309] [client 193.19.109.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.184, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUM00p4pN9ycmipm8Tgq7wAAAQE"]
[Thu Dec 18 06:55:16.988004 2025] [:error] [pid 24433:tid 24460] [client 193.19.109.184:55309] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUM01J4pN9ycmipm8TgrEAAAARg"]
[Thu Dec 18 06:55:17.754700 2025] [:error] [pid 23557:tid 23601] [client 193.19.109.196:31013] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUM01RYcs6rFVxbdP_k-FAAAAE0"]
[Thu Dec 18 06:55:19.572831 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Dec 18 06:55:20.092248 2025] [:error] [pid 25357:tid 25364] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Dec 18 06:55:21.612502 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Dec 18 06:55:21.975627 2025] [:error] [pid 25357:tid 25363] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Dec 18 06:55:23.488244 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Dec 18 06:55:23.902683 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Dec 18 06:55:24.312275 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Dec 18 06:55:24.719024 2025] [:error] [pid 25357:tid 25374] [client 193.19.109.206:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Dec 18 06:55:25.103933 2025] [:error] [pid 25357:tid 25376] [client 193.19.109.206:49717] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUM03YaT7bsEXnJVfJdXGQAAAdE"]
[Thu Dec 18 06:55:25.887472 2025] [:error] [pid 24433:tid 24446] [client 193.19.109.171:25307] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUM03Z4pN9ycmipm8TgrhgAAAQo"]
[Thu Dec 18 06:55:26.684850 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.188:29185] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUM03skDOrUkd0wNm2EXSAAAAZA"]
[Thu Dec 18 06:55:27.902205 2025] [:error] [pid 24958:tid 24976] [client 193.19.109.171:35231] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Dec 18 06:55:28.272454 2025] [:error] [pid 24958:tid 24973] [client 193.19.109.171:35231] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Dec 18 06:55:29.073524 2025] [:error] [pid 24958:tid 24970] [client 193.19.109.171:35231] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Dec 18 06:55:29.809123 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.171:35231] [client 193.19.109.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUM04ckDOrUkd0wNm2EXcAAAAYU"]
[Thu Dec 18 06:55:30.556608 2025] [:error] [pid 23558:tid 23619] [client 193.19.109.181:23955] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUM04uHam9NbgPQa9uZBIQAAAMQ"]
[Thu Dec 18 06:55:31.283247 2025] [:error] [pid 23645:tid 23658] [client 193.19.109.169:58661] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUM04zf_Rx0Y0ao_QJiVfQAAAIs"]
[Thu Dec 18 06:55:33.615660 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.163:46435] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUM05UtQz4H2oS3NrDYe6AAAAUU"]
[Thu Dec 18 06:55:35.602464 2025] [:error] [pid 24433:tid 24442] [client 193.19.109.203:58829] [client 193.19.109.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUM0554pN9ycmipm8TgrywAAAQY"]
[Thu Dec 18 06:55:37.108708 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.200:33739] [client 193.19.109.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUM06RYcs6rFVxbdP_k-fQAAAFU"]
[Thu Dec 18 06:55:42.617369 2025] [:error] [pid 25357:tid 25363] [client 193.37.33.229:61373] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aUM07oaT7bsEXnJVfJdXxgAAAcQ"]
[Thu Dec 18 06:55:43.674995 2025] [:error] [pid 25357:tid 25378] [client 193.19.109.196:26627] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Dec 18 06:55:44.403684 2025] [:error] [pid 25357:tid 25382] [client 193.19.109.196:26627] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aUM08IaT7bsEXnJVfJdX2AAAAdc"]
[Thu Dec 18 06:55:46.973255 2025] [:error] [pid 23558:tid 23638] [client 193.19.109.209:65185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Dec 18 06:55:48.100097 2025] [:error] [pid 23558:tid 23627] [client 193.19.109.209:65185] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Dec 18 06:55:48.477900 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.209:65185] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUM09OHam9NbgPQa9uZBowAAAMU"]
[Thu Dec 18 06:55:49.997726 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.176:55221] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUM09ckDOrUkd0wNm2EX1gAAAZU"]
[Thu Dec 18 06:55:52.400332 2025] [:error] [pid 24433:tid 24456] [client 193.19.109.187:26343] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUM0-J4pN9ycmipm8TgsDgAAARQ"]
[Thu Dec 18 06:55:55.106776 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.197:60767] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUM0-zf_Rx0Y0ao_QJiWJAAAAIg"]
[Thu Dec 18 06:55:56.326388 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.181:21233] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Dec 18 06:55:56.716751 2025] [:error] [pid 23557:tid 23591] [client 193.19.109.181:21233] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUM0_BYcs6rFVxbdP_k_DQAAAEM"]
[Thu Dec 18 06:55:57.463233 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.195:53655] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUM0_Z4pN9ycmipm8TgsKwAAARI"]
[Thu Dec 18 06:56:00.102100 2025] [:error] [pid 24433:tid 24447] [client 193.19.109.179:44715] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUM1AJ4pN9ycmipm8TgsRwAAAQs"]
[Thu Dec 18 06:56:00.883207 2025] [:error] [pid 23558:tid 23629] [client 193.19.109.173:46563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Dec 18 06:56:02.394891 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.173:46563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Dec 18 06:56:02.769050 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.173:46563] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUM1AuHam9NbgPQa9uZB9wAAAMg"]
[Thu Dec 18 06:56:04.235019 2025] [:error] [pid 23556:tid 23580] [client 193.19.109.188:45481] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Dec 18 06:56:04.982412 2025] [:error] [pid 23556:tid 23576] [client 193.19.109.188:45481] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUM1BBnmLlk3u5yt9kESiQAAABA"]
[Thu Dec 18 06:56:05.714355 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.183:38589] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUM1BRnmLlk3u5yt9kESjQAAAAo"]
[Thu Dec 18 06:56:08.088827 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.179:48957] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUM1CBnmLlk3u5yt9kESnwAAAAY"]
[Thu Dec 18 06:56:09.979044 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.175:26397] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aUM1CUtQz4H2oS3NrDYf6AAAAU0"]
[Thu Dec 18 06:56:10.679710 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.162:48437] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aUM1CoaT7bsEXnJVfJdYdAAAAco"]
[Thu Dec 18 06:56:11.813105 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.192:60165] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Dec 18 06:56:13.689674 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.192:60165] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aUM1DYaT7bsEXnJVfJdYkQAAAcw"]
[Thu Dec 18 06:56:15.269036 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.163:39305] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aUM1Dzf_Rx0Y0ao_QJiWuwAAAJI"]
[Thu Dec 18 06:56:15.964772 2025] [:error] [pid 23556:tid 23584] [client 193.19.109.161:55933] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aUM1DxnmLlk3u5yt9kES2wAAABg"]
[Thu Dec 18 06:56:17.071882 2025] [:error] [pid 23557:tid 23588] [client 193.19.109.169:25423] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Dec 18 06:56:17.418759 2025] [:error] [pid 23557:tid 23590] [client 193.19.109.169:25423] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aUM1ERYcs6rFVxbdP_k_jQAAAEI"]
[Thu Dec 18 06:56:18.523157 2025] [:error] [pid 23558:tid 23636] [client 193.19.109.201:56379] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aUM1EuHam9NbgPQa9uZCZgAAANU"]
[Thu Dec 18 06:56:21.070697 2025] [:error] [pid 24958:tid 24973] [client 193.19.109.198:53051] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aUM1FckDOrUkd0wNm2EYmQAAAYw"]
[Thu Dec 18 06:56:22.130922 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.178:34985] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Dec 18 06:56:22.906393 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.178:34985] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aUM1FuHam9NbgPQa9uZChgAAAMo"]
[Thu Dec 18 06:56:24.391839 2025] [:error] [pid 23557:tid 23600] [client 193.19.109.161:41389] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aUM1GBYcs6rFVxbdP_k_vAAAAEw"]
[Thu Dec 18 06:56:25.502605 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.199:65175] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aUM1GUtQz4H2oS3NrDYgRwAAAUI"]
[Thu Dec 18 06:56:26.665452 2025] [:error] [pid 23558:tid 23623] [client 193.19.109.163:27833] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aUM1GuHam9NbgPQa9uZCpQAAAMg"]
[Thu Dec 18 06:56:27.377321 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.163:59675] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aUM1GxnmLlk3u5yt9kETGAAAAAo"]
[Thu Dec 18 06:56:28.152586 2025] [:error] [pid 23645:tid 23657] [client 193.19.109.190:63767] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aUM1HDf_Rx0Y0ao_QJiW-AAAAIo"]
[Thu Dec 18 06:56:31.176831 2025] [:error] [pid 24433:tid 24441] [client 193.19.109.209:26129] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUM1H54pN9ycmipm8TgtWQAAAQU"]
[Thu Dec 18 06:56:33.104496 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.207:34681] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aUM1IckDOrUkd0wNm2EZDwAAAYc"]
[Thu Dec 18 06:56:34.597142 2025] [:error] [pid 23558:tid 23631] [client 193.19.109.168:26445] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Dec 18 06:56:34.999925 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.168:26445] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aUM1IuHam9NbgPQa9uZC3wAAAMc"]
[Thu Dec 18 06:56:36.906673 2025] [:error] [pid 24958:tid 24979] [client 193.19.109.183:59365] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aUM1JMkDOrUkd0wNm2EZOgAAAZI"]
[Thu Dec 18 06:56:37.676453 2025] [:error] [pid 24958:tid 24980] [client 193.19.109.192:42167] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Dec 18 06:56:39.918697 2025] [:error] [pid 24958:tid 24968] [client 193.19.109.192:42167] [client 193.19.109.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aUM1J8kDOrUkd0wNm2EZaQAAAYc"]
[Thu Dec 18 06:56:41.170836 2025] [:error] [pid 24958:tid 24984] [client 193.19.109.191:57983] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aUM1KckDOrUkd0wNm2EZfAAAAZc"]
[Thu Dec 18 06:56:44.263781 2025] [:error] [pid 23645:tid 23656] [client 193.19.109.202:23513] [client 193.19.109.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aUM1LDf_Rx0Y0ao_QJiXXwAAAIk"]
[Thu Dec 18 06:56:46.816068 2025] [:error] [pid 24542:tid 24550] [client 193.19.109.173:28649] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUM1LktQz4H2oS3NrDYg_gAAAUY"]
[Thu Dec 18 06:56:50.667797 2025] [:error] [pid 23645:tid 23664] [client 193.19.109.174:27361] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aUM1Mjf_Rx0Y0ao_QJiXjQAAAJE"]
[Thu Dec 18 06:56:51.370154 2025] [:error] [pid 24958:tid 24970] [client 193.19.109.210:24123] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aUM1M8kDOrUkd0wNm2EaAAAAAYk"]
[Thu Dec 18 06:56:53.313883 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.201:46291] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aUM1NYaT7bsEXnJVfJdaBwAAAcE"]
[Thu Dec 18 06:56:54.076672 2025] [:error] [pid 23558:tid 23633] [client 193.19.109.185:45515] [client 193.19.109.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUM1NuHam9NbgPQa9uZDPwAAANI"]
[Thu Dec 18 06:56:55.568653 2025] [:error] [pid 23558:tid 23636] [client 193.19.109.184:22753] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aUM1N-Ham9NbgPQa9uZDTAAAANU"]
[Thu Dec 18 06:56:56.290961 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.173:22175] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aUM1OOHam9NbgPQa9uZDTwAAAMo"]
[Thu Dec 18 06:56:57.068085 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.188:60391] [client 193.19.109.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.188, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUM1OeHam9NbgPQa9uZDUwAAAMU"]
[Thu Dec 18 06:56:57.072897 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.188:60391] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Dec 18 06:56:57.415049 2025] [:error] [pid 23558:tid 23615] [client 193.19.109.188:60391] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aUM1OeHam9NbgPQa9uZDVQAAAMA"]
[Thu Dec 18 06:56:59.920937 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.168:27809] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Dec 18 06:57:00.300237 2025] [:error] [pid 24433:tid 24456] [client 193.19.109.168:27809] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUM1PJ4pN9ycmipm8TguAwAAARQ"]
[Thu Dec 18 06:57:01.079778 2025] [:error] [pid 24433:tid 24442] [client 193.19.109.184:60971] [client 193.19.109.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aUM1PZ4pN9ycmipm8TguCQAAAQY"]
[Thu Dec 18 06:57:01.965448 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.207:54875] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Dec 18 06:57:04.682412 2025] [:error] [pid 24542:tid 24560] [client 193.19.109.207:54875] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aUM1QEtQz4H2oS3NrDYhRAAAAVA"]
[Thu Dec 18 06:57:05.372405 2025] [:error] [pid 24958:tid 24966] [client 193.19.109.209:39835] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aUM1QckDOrUkd0wNm2EavAAAAYU"]
[Thu Dec 18 06:57:06.900117 2025] [:error] [pid 25357:tid 25359] [client 193.19.109.186:48025] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aUM1QoaT7bsEXnJVfJdaYAAAAcA"]
[Thu Dec 18 06:57:07.655068 2025] [:error] [pid 23645:tid 23662] [client 193.19.109.167:30799] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aUM1Qzf_Rx0Y0ao_QJiX7wAAAI8"]
[Thu Dec 18 06:57:08.374104 2025] [:error] [pid 23556:tid 23582] [client 193.19.109.161:43553] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Dec 18 06:57:08.721670 2025] [:error] [pid 23556:tid 23565] [client 193.19.109.161:43553] [client 193.19.109.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.161, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUM1RBnmLlk3u5yt9kEUfQAAAAU"]
[Thu Dec 18 06:57:09.482168 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.161:43553] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aUM1RRnmLlk3u5yt9kEUgwAAAAo"]
[Thu Dec 18 06:57:14.437912 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.188:48911] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aUM1SskDOrUkd0wNm2EbUwAAAYY"]
[Thu Dec 18 06:57:15.205622 2025] [:error] [pid 24958:tid 24978] [client 193.19.109.198:65299] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Dec 18 06:57:15.602065 2025] [:error] [pid 24958:tid 24973] [client 193.19.109.198:65299] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aUM1S8kDOrUkd0wNm2EbWgAAAYw"]
[Thu Dec 18 06:57:16.377624 2025] [:error] [pid 23558:tid 23637] [client 193.19.109.183:43519] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aUM1TOHam9NbgPQa9uZDxwAAANY"]
[Thu Dec 18 06:57:17.098771 2025] [:error] [pid 23645:tid 23665] [client 193.19.109.190:38293] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Dec 18 06:57:18.293289 2025] [:error] [pid 23645:tid 23664] [client 193.19.109.190:38293] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aUM1Tjf_Rx0Y0ao_QJiYJwAAAJE"]
[Thu Dec 18 06:57:19.862198 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.178:35789] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUM1T4aT7bsEXnJVfJdaygAAAco"]
[Thu Dec 18 06:57:20.561382 2025] [:error] [pid 23558:tid 23636] [client 193.19.109.169:22467] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Dec 18 06:57:21.293730 2025] [:error] [pid 23558:tid 23631] [client 193.19.109.169:22467] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Dec 18 06:57:22.075945 2025] [:error] [pid 23558:tid 23618] [client 193.19.109.169:22467] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aUM1UuHam9NbgPQa9uZD7AAAAMM"]
[Thu Dec 18 06:57:22.860928 2025] [:error] [pid 24542:tid 24556] [client 193.19.109.210:50391] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aUM1UktQz4H2oS3NrDYh7gAAAUw"]
[Thu Dec 18 06:57:23.964821 2025] [:error] [pid 25357:tid 25373] [client 193.19.109.177:26287] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aUM1U4aT7bsEXnJVfJda4QAAAc4"]
[Thu Dec 18 06:57:24.763717 2025] [:error] [pid 23645:tid 23670] [client 193.19.109.205:49021] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Dec 18 06:57:27.029678 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.205:49021] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUM1Vzf_Rx0Y0ao_QJiYSwAAAJM"]
[Thu Dec 18 06:57:28.591421 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.208:36889] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aUM1WIaT7bsEXnJVfJda-AAAAdQ"]
[Thu Dec 18 06:57:28.938624 2025] [:error] [pid 25357:tid 25367] [client 193.19.109.208:36889] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aUM1WIaT7bsEXnJVfJda-gAAAcg"]
[Thu Dec 18 06:57:30.568654 2025] [:error] [pid 23556:tid 23563] [client 193.19.109.181:59777] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aUM1WhnmLlk3u5yt9kEVJgAAAAM"]
[Thu Dec 18 06:57:31.295628 2025] [:error] [pid 24542:tid 24556] [client 193.19.109.208:52099] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aUM1W0tQz4H2oS3NrDYiHgAAAUw"]
[Thu Dec 18 06:57:32.808785 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.190:35251] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Dec 18 06:57:34.314022 2025] [:error] [pid 25357:tid 25369] [client 193.19.109.190:35251] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aUM1XoaT7bsEXnJVfJdbCwAAAco"]
[Thu Dec 18 06:57:35.810720 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.182:30405] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aUM1X0tQz4H2oS3NrDYiTQAAAU0"]
[Thu Dec 18 06:57:36.912165 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.204:32609] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aUM1YJ4pN9ycmipm8TgutAAAAQQ"]
[Thu Dec 18 06:57:37.675721 2025] [:error] [pid 23558:tid 23617] [client 193.19.109.170:61421] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Dec 18 06:57:40.089790 2025] [:error] [pid 23558:tid 23629] [client 193.19.109.170:61421] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aUM1ZOHam9NbgPQa9uZEbwAAAM4"]
[Thu Dec 18 06:57:41.296603 2025] [:error] [pid 23556:tid 23577] [client 193.19.109.176:22195] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aUM1ZRnmLlk3u5yt9kEVsQAAABE"]
[Thu Dec 18 06:57:42.054511 2025] [:error] [pid 23645:tid 23647] [client 193.19.109.186:49647] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Dec 18 06:57:42.397615 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.186:49647] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aUM1Zjf_Rx0Y0ao_QJiYqAAAAII"]
[Thu Dec 18 06:57:43.150999 2025] [:error] [pid 23556:tid 23577] [client 193.19.109.201:48055] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aUM1ZxnmLlk3u5yt9kEVvQAAABE"]
[Thu Dec 18 06:57:44.608141 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.178:20531] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aUM1aBnmLlk3u5yt9kEVyAAAAAo"]
[Thu Dec 18 06:57:48.394140 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.194:60259] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Thu Dec 18 06:57:48.867194 2025] [:error] [pid 25357:tid 25368] [client 193.19.109.194:60259] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aUM1bIaT7bsEXnJVfJdbbAAAAck"]
[Thu Dec 18 06:57:49.685033 2025] [:error] [pid 24542:tid 24544] [client 193.19.109.198:45369] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aUM1bUtQz4H2oS3NrDYi2wAAAUA"]
[Thu Dec 18 06:57:52.576798 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.176:48099] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aUM1cEtQz4H2oS3NrDYjBwAAAUs"]
[Thu Dec 18 06:57:54.214049 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.176:47749] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aUM1cskDOrUkd0wNm2EckQAAAZU"]
[Thu Dec 18 06:57:54.972530 2025] [:error] [pid 23556:tid 23560] [client 193.19.109.167:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Thu Dec 18 06:57:56.174264 2025] [:error] [pid 23556:tid 23563] [client 193.19.109.167:35347] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aUM1dBnmLlk3u5yt9kEWHgAAAAM"]
[Thu Dec 18 06:57:56.887407 2025] [:error] [pid 23645:tid 23667] [client 193.19.109.210:56439] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aUM1dDf_Rx0Y0ao_QJiY8gAAAJQ"]
[Thu Dec 18 06:57:58.012565 2025] [:error] [pid 23645:tid 23661] [client 193.19.109.179:41877] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aUM1djf_Rx0Y0ao_QJiY-wAAAI4"]
[Thu Dec 18 06:57:58.763415 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.206:36875] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Thu Dec 18 06:57:59.479588 2025] [:error] [pid 23556:tid 23575] [client 193.19.109.206:36875] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aUM1dxnmLlk3u5yt9kEWOAAAAA8"]
[Thu Dec 18 06:58:00.276781 2025] [:error] [pid 24433:tid 24457] [client 193.37.33.230:59937] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Dec 18 06:58:00.994186 2025] [:error] [pid 24433:tid 24441] [client 193.37.33.230:59937] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aUM1eJ4pN9ycmipm8TgvfAAAAQU"]
[Thu Dec 18 06:58:02.787747 2025] [:error] [pid 24958:tid 24972] [client 193.19.109.164:58031] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aUM1eskDOrUkd0wNm2EczwAAAYs"]
[Thu Dec 18 06:58:03.981787 2025] [:error] [pid 24958:tid 24971] [client 193.19.109.178:50799] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aUM1e8kDOrUkd0wNm2Ec2AAAAYo"]
[Thu Dec 18 06:58:04.745505 2025] [:error] [pid 25357:tid 25374] [client 193.19.109.186:37573] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aUM1fIaT7bsEXnJVfJdbsgAAAc8"]
[Thu Dec 18 06:58:06.375049 2025] [:error] [pid 23556:tid 23564] [client 193.19.109.183:55327] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aUM1fhnmLlk3u5yt9kEWUwAAAAQ"]
[Thu Dec 18 06:58:07.478130 2025] [:error] [pid 23557:tid 23595] [client 193.19.109.193:61645] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aUM1fxYcs6rFVxbdP_lCzAAAAEc"]
[Thu Dec 18 06:58:08.261908 2025] [:error] [pid 24958:tid 24967] [client 193.19.109.166:59403] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aUM1gMkDOrUkd0wNm2Ec8gAAAYY"]
[Thu Dec 18 06:58:08.983957 2025] [:error] [pid 24958:tid 24970] [client 193.19.109.177:41629] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aUM1gMkDOrUkd0wNm2Ec-wAAAYk"]
[Thu Dec 18 06:58:10.877151 2025] [:error] [pid 23558:tid 23635] [client 193.19.109.182:28517] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aUM1guHam9NbgPQa9uZFWwAAANQ"]
[Thu Dec 18 06:58:12.993897 2025] [:error] [pid 24958:tid 24973] [client 193.19.109.162:41417] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aUM1hMkDOrUkd0wNm2EdHAAAAYw"]
[Thu Dec 18 06:58:14.194986 2025] [:error] [pid 23557:tid 23604] [client 193.19.109.168:43195] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aUM1hhYcs6rFVxbdP_lDCgAAAFA"]
[Thu Dec 18 06:58:15.300467 2025] [:error] [pid 23557:tid 23605] [client 193.37.33.230:61727] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUM1hxYcs6rFVxbdP_lDDQAAAFE"]
[Thu Dec 18 06:58:17.700235 2025] [:error] [pid 24433:tid 24453] [client 193.19.109.163:53447] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Thu Dec 18 06:58:19.291118 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.163:53447] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aUM1i54pN9ycmipm8TgwFQAAARI"]
[Thu Dec 18 06:58:20.080171 2025] [:error] [pid 24958:tid 24978] [client 193.19.109.162:39381] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aUM1jMkDOrUkd0wNm2EdTQAAAZE"]
[Thu Dec 18 06:58:21.269968 2025] [:error] [pid 24433:tid 24444] [client 193.19.109.204:34919] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Thu Dec 18 06:58:21.618294 2025] [:error] [pid 24433:tid 24443] [client 193.19.109.204:34919] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aUM1jZ4pN9ycmipm8TgwLQAAAQc"]
[Thu Dec 18 06:58:23.795044 2025] [:error] [pid 23557:tid 23593] [client 193.19.109.165:40717] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aUM1jxYcs6rFVxbdP_lDQAAAAEU"]
[Thu Dec 18 06:58:24.937990 2025] [:error] [pid 23558:tid 23620] [client 193.19.109.164:42917] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Thu Dec 18 06:58:25.296535 2025] [:error] [pid 23558:tid 23632] [client 193.19.109.164:42917] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aUM1keHam9NbgPQa9uZFlgAAANE"]
[Thu Dec 18 06:58:26.885420 2025] [:error] [pid 24433:tid 24452] [client 193.37.33.230:47803] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aUM1kp4pN9ycmipm8TgwUwAAARA"]
[Thu Dec 18 06:58:27.671283 2025] [:error] [pid 23558:tid 23624] [client 193.19.109.167:29825] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Dec 18 06:58:28.060996 2025] [:error] [pid 23558:tid 23624] [client 193.19.109.167:29825] [client 193.19.109.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aUM1lOHam9NbgPQa9uZFpgAAAMk"]
[Thu Dec 18 06:58:29.514307 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.186:23759] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aUM1lRnmLlk3u5yt9kEWrQAAAAo"]
[Thu Dec 18 06:58:31.474938 2025] [:error] [pid 23556:tid 23569] [client 193.19.109.181:44615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Dec 18 06:58:31.880713 2025] [:error] [pid 23556:tid 23572] [client 193.19.109.181:44615] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUM1lxnmLlk3u5yt9kEWvgAAAAw"]
[Thu Dec 18 06:58:33.772648 2025] [:error] [pid 24433:tid 24441] [client 193.19.109.191:57173] [client 193.19.109.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aUM1mZ4pN9ycmipm8TgwgwAAAQU"]
[Thu Dec 18 06:58:34.483678 2025] [:error] [pid 23557:tid 23610] [client 193.37.33.229:20919] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Thu Dec 18 06:58:34.867318 2025] [:error] [pid 23557:tid 23588] [client 193.37.33.229:20919] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aUM1mhYcs6rFVxbdP_lDfgAAAEA"]
[Thu Dec 18 06:58:35.682867 2025] [:error] [pid 25357:tid 25366] [client 193.19.109.195:47741] [client 193.19.109.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aUM1m4aT7bsEXnJVfJdcZgAAAcc"]
[Thu Dec 18 06:58:36.460319 2025] [:error] [pid 24433:tid 24441] [client 193.19.109.187:21383] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Dec 18 06:58:37.979763 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.187:21383] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aUM1nZ4pN9ycmipm8TgwmQAAAQQ"]
[Thu Dec 18 06:58:38.694118 2025] [:error] [pid 23645:tid 23663] [client 193.19.109.180:36791] [client 193.19.109.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aUM1njf_Rx0Y0ao_QJiZ0QAAAJA"]
[Thu Dec 18 06:58:41.738121 2025] [:error] [pid 25357:tid 25375] [client 193.37.33.229:51665] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aUM1oYaT7bsEXnJVfJdcmQAAAdA"]
[Thu Dec 18 06:58:43.558306 2025] [:error] [pid 24958:tid 24977] [client 193.19.109.177:55759] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aUM1o8kDOrUkd0wNm2EdygAAAZA"]
[Thu Dec 18 06:58:44.819431 2025] [:error] [pid 24542:tid 24560] [client 193.37.33.229:60061] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aUM1pEtQz4H2oS3NrDYksQAAAVA"]
[Thu Dec 18 06:58:45.558889 2025] [:error] [pid 23556:tid 23577] [client 193.19.109.205:35767] [client 193.19.109.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aUM1pRnmLlk3u5yt9kEW-AAAABE"]
[Thu Dec 18 06:58:46.305195 2025] [:error] [pid 24958:tid 24971] [client 193.19.109.161:50281] [client 193.19.109.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aUM1pskDOrUkd0wNm2Ed2wAAAYo"]
[Thu Dec 18 06:58:47.058615 2025] [:error] [pid 24433:tid 24443] [client 193.19.109.188:58821] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aUM1p54pN9ycmipm8TgwtwAAAQc"]
[Thu Dec 18 06:58:49.468144 2025] [:error] [pid 24433:tid 24442] [client 193.19.109.177:54395] [client 193.19.109.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aUM1qZ4pN9ycmipm8TgwxQAAAQY"]
[Thu Dec 18 06:58:50.253616 2025] [:error] [pid 24542:tid 24557] [client 193.19.109.166:28089] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aUM1qktQz4H2oS3NrDYk0gAAAU0"]
[Thu Dec 18 06:58:51.407009 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.208:59739] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Dec 18 06:58:51.792885 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.208:59739] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aUM1q4aT7bsEXnJVfJdc7AAAAdA"]
[Thu Dec 18 06:58:52.645018 2025] [:error] [pid 23558:tid 23622] [client 193.19.109.207:22901] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aUM1rOHam9NbgPQa9uZF-AAAAMc"]
[Thu Dec 18 06:58:54.215913 2025] [:error] [pid 24958:tid 24985] [client 193.19.109.163:30993] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aUM1rskDOrUkd0wNm2EeCwAAAZg"]
[Thu Dec 18 06:58:56.062040 2025] [:error] [pid 25357:tid 25360] [client 193.19.109.178:23399] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aUM1sIaT7bsEXnJVfJddAQAAAcE"]
[Thu Dec 18 06:59:00.018993 2025] [:error] [pid 24542:tid 24547] [client 193.19.109.179:43371] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aUM1tEtQz4H2oS3NrDYlLQAAAUM"]
[Thu Dec 18 06:59:00.891137 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.207:39987] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aUM1tDf_Rx0Y0ao_QJiaVgAAAJM"]
[Thu Dec 18 06:59:02.503602 2025] [:error] [pid 23556:tid 23573] [client 193.19.109.175:40211] [client 193.19.109.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aUM1thnmLlk3u5yt9kEXIwAAAA0"]
[Thu Dec 18 06:59:03.597652 2025] [:error] [pid 25357:tid 25362] [client 193.19.109.201:43393] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUM1t4aT7bsEXnJVfJddKgAAAcM"]
[Thu Dec 18 06:59:04.861466 2025] [:error] [pid 23557:tid 23590] [client 193.19.109.182:54563] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aUM1uBYcs6rFVxbdP_lD_QAAAEI"]
[Thu Dec 18 06:59:05.574957 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.189:43397] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aUM1uZ4pN9ycmipm8Tgw-gAAAQQ"]
[Thu Dec 18 06:59:06.367963 2025] [:error] [pid 24433:tid 24438] [client 193.19.109.190:34233] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aUM1up4pN9ycmipm8TgxAAAAAQI"]
[Thu Dec 18 06:59:08.783907 2025] [:error] [pid 24958:tid 24975] [client 193.19.109.169:20985] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aUM1vMkDOrUkd0wNm2EeYAAAAY4"]
[Thu Dec 18 06:59:09.521172 2025] [:error] [pid 23557:tid 23591] [client 193.19.109.209:47011] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Thu Dec 18 06:59:09.923518 2025] [:error] [pid 23557:tid 23612] [client 193.19.109.209:47011] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aUM1vRYcs6rFVxbdP_lEJAAAAFg"]
[Thu Dec 18 06:59:11.393382 2025] [:error] [pid 23645:tid 23647] [client 193.19.109.162:62403] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Thu Dec 18 06:59:11.771652 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.162:62403] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aUM1vzf_Rx0Y0ao_QJiakwAAAJM"]
[Thu Dec 18 06:59:12.560912 2025] [:error] [pid 23645:tid 23654] [client 193.19.109.199:38891] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aUM1wDf_Rx0Y0ao_QJiamQAAAIc"]
[Thu Dec 18 06:59:13.764736 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.204:23095] [client 193.19.109.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aUM1wZ4pN9ycmipm8TgxFgAAAQQ"]
[Thu Dec 18 06:59:19.116806 2025] [:error] [pid 24958:tid 24963] [client 193.19.109.208:30725] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Dec 18 06:59:20.619038 2025] [:error] [pid 24958:tid 24982] [client 193.19.109.208:30725] [client 193.19.109.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aUM1yMkDOrUkd0wNm2EetAAAAZU"]
[Thu Dec 18 06:59:21.779608 2025] [:error] [pid 25357:tid 25372] [client 193.19.109.172:44727] [client 193.19.109.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aUM1yYaT7bsEXnJVfJddtgAAAc0"]
[Thu Dec 18 06:59:23.314499 2025] [:error] [pid 23556:tid 23563] [client 193.19.109.164:47657] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aUM1yxnmLlk3u5yt9kEXVwAAAAM"]
[Thu Dec 18 06:59:24.074848 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.194:58561] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aUM1zEtQz4H2oS3NrDYlwAAAAUU"]
[Thu Dec 18 06:59:24.880490 2025] [:error] [pid 23645:tid 23671] [client 193.19.109.193:42621] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aUM1zDf_Rx0Y0ao_QJia1wAAAJg"]
[Thu Dec 18 07:44:18.009848 2025] [:error] [pid 23558:tid 23635] [client 170.106.11.141:50328] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUNAUuHam9NbgPQa9uZQwgAAANQ"]
[Thu Dec 18 13:22:19.240140 2025] [:error] [pid 24958:tid 24966] [client 213.35.96.205:58509] [client 213.35.96.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUOPi8kDOrUkd0wNm2F3dwAAAYU"]
[Thu Dec 18 13:22:19.600788 2025] [:error] [pid 23645:tid 23655] [client 213.35.96.205:54537] [client 213.35.96.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.35.96.205, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUOPizf_Rx0Y0ao_QJjz1AAAAIg"]
[Thu Dec 18 13:22:19.606425 2025] [:error] [pid 23645:tid 23655] [client 213.35.96.205:54537] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 18 13:35:53.998092 2025] [:error] [pid 25357:tid 25379] [client 125.75.66.97:39020] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUOSuYaT7bsEXnJVfJfxpgAAAdQ"]
[Thu Dec 18 18:53:49.969547 2025] [:error] [pid 25357:tid 25365] [client 170.106.165.76:38450] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUPdPYaT7bsEXnJVfJdJlAAAAcY"]
[Thu Dec 18 20:05:18.587880 2025] [:error] [pid 23645:tid 23659] [client 121.229.185.160:58884] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUPt_jf_Rx0Y0ao_QJhPDwAAAIw"]
[Thu Dec 18 22:00:49.358761 2025] [:error] [pid 12239:tid 12254] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Thu Dec 18 22:00:49.500052 2025] [:error] [pid 12239:tid 12259] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Thu Dec 18 22:00:49.813498 2025] [:error] [pid 12239:tid 12262] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Thu Dec 18 22:00:50.056895 2025] [:error] [pid 12239:tid 12258] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Thu Dec 18 22:00:50.200235 2025] [:error] [pid 12239:tid 12255] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/n.php
[Thu Dec 18 22:00:50.341357 2025] [:error] [pid 12239:tid 12245] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 18 22:00:50.646944 2025] [:error] [pid 12239:tid 12257] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Thu Dec 18 22:00:50.788962 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Thu Dec 18 22:00:50.965233 2025] [:error] [pid 12239:tid 12249] [client 98.70.98.225:37774] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Thu Dec 18 22:00:51.252278 2025] [:error] [pid 12239:tid 12261] [client 98.70.98.225:37774] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUQJE9NnXxfGIuWO6akn_wAAApE"]
[Thu Dec 18 22:00:52.458689 2025] [:error] [pid 23645:tid 23650] [client 98.70.98.225:37817] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUQJFDf_Rx0Y0ao_QJhokAAAAIM"]
[Thu Dec 18 22:00:53.836917 2025] [:error] [pid 12035:tid 12052] [client 98.70.98.225:62970] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUQJFbcVHrNSHjCo-0qhYQAAAgo"]
[Thu Dec 18 22:00:55.191361 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:62969] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aUQJF-Ham9NbgPQa9uYySwAAAMs"]
[Thu Dec 18 22:00:56.014760 2025] [:error] [pid 12239:tid 12254] [client 98.70.98.225:37807] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQJGNNnXxfGIuWO6akoAwAAAoo"]
[Thu Dec 18 22:00:56.922758 2025] [:error] [pid 23556:tid 23564] [client 98.70.98.225:41100] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQJGBnmLlk3u5yt9kH0sAAAAAQ"]
[Thu Dec 18 22:00:57.899117 2025] [:error] [pid 24958:tid 24983] [client 98.70.98.225:62955] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQJGckDOrUkd0wNm2HWcgAAAZY"]
[Thu Dec 18 22:00:58.291371 2025] [:error] [pid 23556:tid 23584] [client 98.70.98.225:41151] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aUQJGhnmLlk3u5yt9kH0ugAAABg"]
[Thu Dec 18 22:00:59.192522 2025] [:error] [pid 24958:tid 24973] [client 98.70.98.225:37764] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQJG8kDOrUkd0wNm2HWdAAAAYw"]
[Thu Dec 18 22:00:59.602515 2025] [:error] [pid 23556:tid 23575] [client 98.70.98.225:62944] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQJGxnmLlk3u5yt9kH0wQAAAA8"]
[Thu Dec 18 22:01:00.701417 2025] [:error] [pid 23556:tid 23584] [client 98.70.98.225:3989] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQJHBnmLlk3u5yt9kH0yAAAABg"]
[Thu Dec 18 22:01:02.328152 2025] [:error] [pid 12239:tid 12262] [client 98.70.98.225:62949] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aUQJHtNnXxfGIuWO6akoBAAAApI"]
[Thu Dec 18 22:01:03.425753 2025] [:error] [pid 25357:tid 25374] [client 98.70.98.225:37768] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aUQJH4aT7bsEXnJVfJd2kAAAAc8"]
[Thu Dec 18 22:01:03.861987 2025] [:error] [pid 24958:tid 24965] [client 98.70.98.225:41107] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aUQJH8kDOrUkd0wNm2HWeQAAAYQ"]
[Thu Dec 18 22:01:04.438839 2025] [:error] [pid 24958:tid 24970] [client 98.70.98.225:41119] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aUQJIMkDOrUkd0wNm2HWewAAAYk"]
[Thu Dec 18 22:01:05.683991 2025] [:error] [pid 23558:tid 23635] [client 98.70.98.225:41092] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aUQJIeHam9NbgPQa9uYyVgAAANQ"]
[Thu Dec 18 22:01:06.393226 2025] [:error] [pid 24542:tid 24563] [client 98.70.98.225:3737] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQJIktQz4H2oS3NrDYsQQAAAVM"]
[Thu Dec 18 22:01:07.225987 2025] [:error] [pid 12035:tid 12060] [client 98.70.98.225:37771] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQJI7cVHrNSHjCo-0qhaAAAAhE"]
[Thu Dec 18 22:01:07.836136 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:37793] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQJI-Ham9NbgPQa9uYyWwAAANE"]
[Thu Dec 18 22:01:08.204321 2025] [:error] [pid 24542:tid 24554] [client 98.70.98.225:37820] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUQJJEtQz4H2oS3NrDYsRwAAAUo"]
[Thu Dec 18 22:01:08.701196 2025] [:error] [pid 23558:tid 23621] [client 98.70.98.225:62926] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUQJJOHam9NbgPQa9uYyXQAAAMY"]
[Thu Dec 18 22:01:09.581219 2025] [:error] [pid 24433:tid 24436] [client 98.70.98.225:62950] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUQJJZ4pN9ycmipm8TjkQwAAAQA"]
[Thu Dec 18 22:01:10.484764 2025] [:error] [pid 23558:tid 23639] [client 98.70.98.225:41101] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUQJJuHam9NbgPQa9uYyYAAAANg"]
[Thu Dec 18 22:01:11.236368 2025] [:error] [pid 24433:tid 24439] [client 98.70.98.225:37813] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUQJJ54pN9ycmipm8TjkRQAAAQM"]
[Thu Dec 18 22:01:12.160386 2025] [:error] [pid 23558:tid 23633] [client 98.70.98.225:37814] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUQJKOHam9NbgPQa9uYyZQAAANI"]
[Thu Dec 18 22:01:13.027994 2025] [:error] [pid 12035:tid 12050] [client 98.70.98.225:37779] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUQJKbcVHrNSHjCo-0qhbwAAAgg"]
[Thu Dec 18 22:01:13.956599 2025] [:error] [pid 23645:tid 23654] [client 98.70.98.225:37794] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUQJKTf_Rx0Y0ao_QJhoogAAAIc"]
[Thu Dec 18 22:01:15.283149 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:63561] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUQJK-Ham9NbgPQa9uYybQAAANA"]
[Thu Dec 18 22:01:16.210049 2025] [:error] [pid 23556:tid 23561] [client 98.70.98.225:62942] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aUQJLBnmLlk3u5yt9kH00QAAAAE"]
[Thu Dec 18 22:01:16.676891 2025] [:error] [pid 12239:tid 12246] [client 98.70.98.225:41098] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aUQJLNNnXxfGIuWO6akoEgAAAoI"]
[Thu Dec 18 22:01:17.009169 2025] [:error] [pid 24542:tid 24558] [client 98.70.98.225:37788] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aUQJLUtQz4H2oS3NrDYsVgAAAU4"]
[Thu Dec 18 22:01:17.550384 2025] [:error] [pid 23558:tid 23634] [client 98.70.98.225:37787] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aUQJLeHam9NbgPQa9uYybwAAANM"]
[Thu Dec 18 22:01:18.381290 2025] [:error] [pid 23556:tid 23572] [client 98.70.98.225:62917] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aUQJLhnmLlk3u5yt9kH01gAAAAw"]
[Thu Dec 18 22:01:19.094162 2025] [:error] [pid 25357:tid 25359] [client 98.70.98.225:63564] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aUQJL4aT7bsEXnJVfJd2pAAAAcA"]
[Thu Dec 18 22:01:19.746834 2025] [:error] [pid 24433:tid 24457] [client 98.70.98.225:41137] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aUQJL54pN9ycmipm8TjkTAAAARU"]
[Thu Dec 18 22:01:20.116837 2025] [:error] [pid 23558:tid 23638] [client 98.70.98.225:37804] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aUQJMOHam9NbgPQa9uYycQAAANc"]
[Thu Dec 18 22:01:20.633583 2025] [:error] [pid 23645:tid 23670] [client 98.70.98.225:37762] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUQJMDf_Rx0Y0ao_QJhoqAAAAJc"]
[Thu Dec 18 22:01:21.027035 2025] [:error] [pid 23645:tid 23661] [client 98.70.98.225:62965] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUQJMTf_Rx0Y0ao_QJhoqQAAAI4"]
[Thu Dec 18 22:01:21.549506 2025] [:error] [pid 23645:tid 23668] [client 98.70.98.225:41148] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUQJMTf_Rx0Y0ao_QJhorgAAAJU"]
[Thu Dec 18 22:01:21.826259 2025] [:error] [pid 12383:tid 12389] [client 98.70.98.225:62954] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUQJMfdgllo9h1cyxGbQDAAAAsM"]
[Thu Dec 18 22:01:22.341472 2025] [:error] [pid 23645:tid 23652] [client 98.70.98.225:41094] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQJMjf_Rx0Y0ao_QJhotAAAAIU"]
[Thu Dec 18 22:01:23.187621 2025] [:error] [pid 12035:tid 12066] [client 98.70.98.225:4002] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQJM7cVHrNSHjCo-0qhdQAAAhc"]
[Thu Dec 18 22:01:23.577950 2025] [:error] [pid 12239:tid 12264] [client 98.70.98.225:41105] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQJM9NnXxfGIuWO6akoGwAAApQ"]
[Thu Dec 18 22:01:24.076872 2025] [:error] [pid 25357:tid 25374] [client 98.70.98.225:62947] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aUQJNIaT7bsEXnJVfJd2rQAAAc8"]
[Thu Dec 18 22:01:24.912440 2025] [:error] [pid 23645:tid 23670] [client 98.70.98.225:37800] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUQJNDf_Rx0Y0ao_QJhowAAAAJc"]
[Thu Dec 18 22:01:25.301961 2025] [:error] [pid 24433:tid 24436] [client 98.70.98.225:62959] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUQJNZ4pN9ycmipm8TjkTgAAAQA"]
[Thu Dec 18 22:01:25.915034 2025] [:error] [pid 23556:tid 23577] [client 98.70.98.225:37769] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUQJNRnmLlk3u5yt9kH02gAAABE"]
[Thu Dec 18 22:01:26.446111 2025] [:error] [pid 24542:tid 24556] [client 98.70.98.225:62973] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUQJNktQz4H2oS3NrDYsYQAAAUw"]
[Thu Dec 18 22:01:27.131740 2025] [:error] [pid 23558:tid 23619] [client 98.70.98.225:62918] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aUQJN-Ham9NbgPQa9uYydwAAAMQ"]
[Thu Dec 18 22:01:27.524854 2025] [:error] [pid 23556:tid 23565] [client 98.70.98.225:62974] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aUQJNxnmLlk3u5yt9kH03QAAAAU"]
[Thu Dec 18 22:01:28.088037 2025] [:error] [pid 12383:tid 12394] [client 98.70.98.225:4005] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aUQJOPdgllo9h1cyxGbQGgAAAsg"]
[Thu Dec 18 22:01:28.664786 2025] [:error] [pid 12239:tid 12250] [client 98.70.98.225:41131] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aUQJONNnXxfGIuWO6akoIgAAAoY"]
[Thu Dec 18 22:01:29.533070 2025] [:error] [pid 24542:tid 24550] [client 98.70.98.225:41123] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aUQJOUtQz4H2oS3NrDYsYwAAAUY"]
[Thu Dec 18 22:01:30.027049 2025] [:error] [pid 23556:tid 23560] [client 98.70.98.225:41091] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aUQJOhnmLlk3u5yt9kH04AAAAAA"]
[Thu Dec 18 22:01:30.584606 2025] [:error] [pid 12383:tid 12408] [client 98.70.98.225:62957] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aUQJOvdgllo9h1cyxGbQHgAAAtY"]
[Thu Dec 18 22:01:31.463874 2025] [:error] [pid 23645:tid 23668] [client 98.70.98.225:37783] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aUQJOzf_Rx0Y0ao_QJhoxgAAAJU"]
[Thu Dec 18 22:01:32.284656 2025] [:error] [pid 24542:tid 24547] [client 98.70.98.225:62938] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aUQJPEtQz4H2oS3NrDYsZQAAAUM"]
[Thu Dec 18 22:01:33.609564 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:63587] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aUQJPeHam9NbgPQa9uYyhAAAANE"]
[Thu Dec 18 22:01:34.145812 2025] [:error] [pid 24433:tid 24460] [client 98.70.98.225:37809] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aUQJPp4pN9ycmipm8TjkUQAAARg"]
[Thu Dec 18 22:01:35.175191 2025] [:error] [pid 23645:tid 23655] [client 98.70.98.225:63574] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aUQJPzf_Rx0Y0ao_QJhozgAAAIg"]
[Thu Dec 18 22:01:36.140355 2025] [:error] [pid 24958:tid 24972] [client 98.70.98.225:37810] [client 98.70.98.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUQJQMkDOrUkd0wNm2HWhwAAAYs"]
[Thu Dec 18 22:01:36.982766 2025] [:error] [pid 23645:tid 23656] [client 98.70.98.225:3712] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aUQJQDf_Rx0Y0ao_QJho1AAAAIk"]
[Thu Dec 18 22:01:37.547912 2025] [:error] [pid 12239:tid 12255] [client 98.70.98.225:37811] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aUQJQdNnXxfGIuWO6akoJwAAAos"]
[Thu Dec 18 22:01:37.900892 2025] [:error] [pid 23558:tid 23623] [client 98.70.98.225:37784] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aUQJQeHam9NbgPQa9uYyigAAAMg"]
[Thu Dec 18 22:01:38.372040 2025] [:error] [pid 12383:tid 12397] [client 98.70.98.225:62925] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aUQJQvdgllo9h1cyxGbQJAAAAss"]
[Thu Dec 18 22:01:39.532777 2025] [:error] [pid 24542:tid 24546] [client 98.70.98.225:37775] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aUQJQ0tQz4H2oS3NrDYsaAAAAUI"]
[Thu Dec 18 22:01:40.443436 2025] [:error] [pid 25357:tid 25374] [client 98.70.98.225:3982] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aUQJRIaT7bsEXnJVfJd2tgAAAc8"]
[Thu Dec 18 22:01:41.376931 2025] [:error] [pid 12035:tid 12061] [client 98.70.98.225:37815] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aUQJRbcVHrNSHjCo-0qhfgAAAhI"]
[Thu Dec 18 22:01:42.097674 2025] [:error] [pid 12239:tid 12252] [client 98.70.98.225:37791] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aUQJRtNnXxfGIuWO6akoLAAAAog"]
[Thu Dec 18 22:01:42.874978 2025] [:error] [pid 24433:tid 24453] [client 98.70.98.225:41128] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aUQJRp4pN9ycmipm8TjkYwAAARE"]
[Thu Dec 18 22:01:43.770755 2025] [:error] [pid 23645:tid 23667] [client 98.70.98.225:41103] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aUQJRzf_Rx0Y0ao_QJho8wAAAJQ"]
[Thu Dec 18 22:01:44.671997 2025] [:error] [pid 23558:tid 23635] [client 98.70.98.225:37776] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aUQJSOHam9NbgPQa9uYykAAAANQ"]
[Thu Dec 18 22:01:45.214052 2025] [:error] [pid 12383:tid 12388] [client 98.70.98.225:41125] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aUQJSfdgllo9h1cyxGbQKQAAAsI"]
[Thu Dec 18 22:01:45.684629 2025] [:error] [pid 12383:tid 12410] [client 98.70.98.225:41134] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AxAo.php"] [unique_id "aUQJSfdgllo9h1cyxGbQKgAAAtg"]
[Thu Dec 18 22:01:46.863780 2025] [:error] [pid 12035:tid 12042] [client 98.70.98.225:63610] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AxAo.php"] [unique_id "aUQJSrcVHrNSHjCo-0qhhAAAAgA"]
[Thu Dec 18 22:01:47.194786 2025] [:error] [pid 12035:tid 12045] [client 98.70.98.225:41136] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AxAo.php"] [unique_id "aUQJS7cVHrNSHjCo-0qhhQAAAgM"]
[Thu Dec 18 22:01:48.100905 2025] [:error] [pid 12383:tid 12400] [client 98.70.98.225:41123] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AxAo.php"] [unique_id "aUQJTPdgllo9h1cyxGbQMwAAAs4"]
[Thu Dec 18 22:01:48.702101 2025] [:error] [pid 12239:tid 12246] [client 98.70.98.225:62930] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQJTNNnXxfGIuWO6akoNAAAAoI"]
[Thu Dec 18 22:01:49.202999 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:62943] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQJTfdgllo9h1cyxGbQNgAAAtI"]
[Thu Dec 18 22:01:49.862080 2025] [:error] [pid 24958:tid 24963] [client 98.70.98.225:41132] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQJTckDOrUkd0wNm2HWjQAAAYI"]
[Thu Dec 18 22:01:50.516252 2025] [:error] [pid 25357:tid 25360] [client 98.70.98.225:62913] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUQJToaT7bsEXnJVfJd2uQAAAcE"]
[Thu Dec 18 22:01:51.149727 2025] [:error] [pid 12239:tid 12265] [client 98.70.98.225:37763] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Dec 18 22:01:52.158885 2025] [:error] [pid 12239:tid 12265] [client 98.70.98.225:37763] File does not exist: /usr/local/apache/htdocs/suspended-page/nc.php
[Thu Dec 18 22:01:52.303213 2025] [:error] [pid 12239:tid 12245] [client 98.70.98.225:37763] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Thu Dec 18 22:01:52.445191 2025] [:error] [pid 12239:tid 12246] [client 98.70.98.225:37763] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Thu Dec 18 22:01:52.589587 2025] [:error] [pid 12239:tid 12268] [client 98.70.98.225:37763] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Thu Dec 18 22:01:52.740976 2025] [:error] [pid 12239:tid 12257] [client 98.70.98.225:37763] [client 98.70.98.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUQJUNNnXxfGIuWO6akoSAAAAo0"]
[Thu Dec 18 22:01:53.245658 2025] [:error] [pid 24542:tid 24546] [client 98.70.98.225:62966] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Thu Dec 18 22:01:53.385741 2025] [:error] [pid 24542:tid 24564] [client 98.70.98.225:62966] File does not exist: /usr/local/apache/htdocs/suspended-page/sto.php
[Thu Dec 18 22:01:53.545785 2025] [:error] [pid 24542:tid 24545] [client 98.70.98.225:62966] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Thu Dec 18 22:01:53.684663 2025] [:error] [pid 24542:tid 24568] [client 98.70.98.225:62966] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Thu Dec 18 22:01:53.965463 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:62966] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Thu Dec 18 22:01:54.253672 2025] [:error] [pid 24542:tid 24563] [client 98.70.98.225:62966] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aUQJUktQz4H2oS3NrDYsdgAAAVM"]
[Thu Dec 18 22:01:54.833410 2025] [:error] [pid 12383:tid 12401] [client 98.70.98.225:37802] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aUQJUvdgllo9h1cyxGbQOwAAAs8"]
[Thu Dec 18 22:01:55.379875 2025] [:error] [pid 23558:tid 23618] [client 98.70.98.225:4000] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aUQJU-Ham9NbgPQa9uYymAAAAMM"]
[Thu Dec 18 22:01:55.936977 2025] [:error] [pid 12239:tid 12265] [client 98.70.98.225:62961] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aUQJU9NnXxfGIuWO6akoSQAAApU"]
[Thu Dec 18 22:01:56.957290 2025] [:error] [pid 12035:tid 12065] [client 98.70.98.225:41090] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aUQJVLcVHrNSHjCo-0qhkQAAAhY"]
[Thu Dec 18 22:01:57.683601 2025] [:error] [pid 24433:tid 24437] [client 98.70.98.225:37790] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aUQJVZ4pN9ycmipm8TjkbgAAAQE"]
[Thu Dec 18 22:01:58.258631 2025] [:error] [pid 25357:tid 25373] [client 98.70.98.225:62968] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aUQJVoaT7bsEXnJVfJd2wQAAAc4"]
[Thu Dec 18 22:01:58.965946 2025] [:error] [pid 23556:tid 23582] [client 98.70.98.225:41088] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aUQJVhnmLlk3u5yt9kH0-wAAABY"]
[Thu Dec 18 22:01:59.960262 2025] [:error] [pid 12239:tid 12259] [client 98.70.98.225:37823] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aUQJV9NnXxfGIuWO6akoTgAAAo8"]
[Thu Dec 18 22:02:00.781387 2025] [:error] [pid 25357:tid 25375] [client 98.70.98.225:41099] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aUQJWIaT7bsEXnJVfJd2xAAAAdA"]
[Thu Dec 18 22:02:01.326138 2025] [:error] [pid 24542:tid 24560] [client 98.70.98.225:63578] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aUQJWUtQz4H2oS3NrDYsfQAAAVA"]
[Thu Dec 18 22:02:02.194653 2025] [:error] [pid 23645:tid 23648] [client 98.70.98.225:62946] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aUQJWjf_Rx0Y0ao_QJhpAQAAAIE"]
[Thu Dec 18 22:02:02.872859 2025] [:error] [pid 23556:tid 23574] [client 98.70.98.225:4026] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUQJWhnmLlk3u5yt9kH0_wAAAA4"]
[Thu Dec 18 22:02:03.441980 2025] [:error] [pid 24433:tid 24449] [client 98.70.98.225:41141] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUQJW54pN9ycmipm8TjkcAAAAQ0"]
[Thu Dec 18 22:02:03.964041 2025] [:error] [pid 24958:tid 24971] [client 98.70.98.225:37822] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUQJW8kDOrUkd0wNm2HWlgAAAYo"]
[Thu Dec 18 22:02:04.632943 2025] [:error] [pid 24958:tid 24980] [client 98.70.98.225:41121] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUQJXMkDOrUkd0wNm2HWlwAAAZM"]
[Thu Dec 18 22:02:05.033776 2025] [:error] [pid 23558:tid 23630] [client 98.70.98.225:63560] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aUQJXeHam9NbgPQa9uYynwAAAM8"]
[Thu Dec 18 22:02:05.321252 2025] [:error] [pid 12239:tid 12256] [client 98.70.98.225:63580] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aUQJXdNnXxfGIuWO6akoVAAAAow"]
[Thu Dec 18 22:02:06.004266 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:63558] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aUQJXtNnXxfGIuWO6akoVQAAAok"]
[Thu Dec 18 22:02:07.218638 2025] [:error] [pid 24958:tid 24969] [client 98.70.98.225:41106] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aUQJX8kDOrUkd0wNm2HWmwAAAYg"]
[Thu Dec 18 22:02:07.626834 2025] [:error] [pid 25357:tid 25373] [client 98.70.98.225:37821] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUQJX4aT7bsEXnJVfJd2ywAAAc4"]
[Thu Dec 18 22:02:08.465137 2025] [:error] [pid 24542:tid 24550] [client 98.70.98.225:37770] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUQJYEtQz4H2oS3NrDYshQAAAUY"]
[Thu Dec 18 22:02:09.329282 2025] [:error] [pid 23558:tid 23638] [client 98.70.98.225:41116] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUQJYeHam9NbgPQa9uYytAAAANc"]
[Thu Dec 18 22:02:09.915456 2025] [:error] [pid 23556:tid 23579] [client 98.70.98.225:62960] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUQJYRnmLlk3u5yt9kH1BQAAABM"]
[Thu Dec 18 22:02:10.539369 2025] [:error] [pid 12239:tid 12247] [client 98.70.98.225:37798] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUQJYtNnXxfGIuWO6akoWAAAAoM"]
[Thu Dec 18 22:02:11.402466 2025] [:error] [pid 12383:tid 12393] [client 98.70.98.225:63573] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUQJY_dgllo9h1cyxGbQTAAAAsc"]
[Thu Dec 18 22:02:11.874477 2025] [:error] [pid 23645:tid 23652] [client 98.70.98.225:3983] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUQJYzf_Rx0Y0ao_QJhpBwAAAIU"]
[Thu Dec 18 22:02:12.748971 2025] [:error] [pid 24542:tid 24564] [client 98.70.98.225:62914] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUQJZEtQz4H2oS3NrDYsjAAAAVQ"]
[Thu Dec 18 22:02:13.520201 2025] [:error] [pid 12239:tid 12251] [client 98.70.98.225:63567] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUQJZdNnXxfGIuWO6akoWwAAAoc"]
[Thu Dec 18 22:02:15.462534 2025] [:error] [pid 23558:tid 23636] [client 98.70.98.225:63555] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUQJZ-Ham9NbgPQa9uYytQAAANU"]
[Thu Dec 18 22:02:16.721260 2025] [:error] [pid 25357:tid 25383] [client 98.70.98.225:37816] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUQJaIaT7bsEXnJVfJd28wAAAdg"]
[Thu Dec 18 22:02:17.054475 2025] [:error] [pid 12035:tid 12060] [client 98.70.98.225:63556] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUQJabcVHrNSHjCo-0qhrgAAAhE"]
[Thu Dec 18 22:02:17.384729 2025] [:error] [pid 23645:tid 23647] [client 98.70.98.225:62962] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aUQJaTf_Rx0Y0ao_QJhpDwAAAIA"]
[Thu Dec 18 22:02:17.720250 2025] [:error] [pid 25357:tid 25380] [client 98.70.98.225:37780] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aUQJaYaT7bsEXnJVfJd29AAAAdU"]
[Thu Dec 18 22:02:18.169265 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:62939] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aUQJauHam9NbgPQa9uYytgAAAMs"]
[Thu Dec 18 22:02:18.758938 2025] [:error] [pid 23558:tid 23630] [client 98.70.98.225:41124] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aUQJauHam9NbgPQa9uYytwAAAM8"]
[Thu Dec 18 22:02:19.219598 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:62945] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/card.php"] [unique_id "aUQJa4aT7bsEXnJVfJd29wAAAcg"]
[Thu Dec 18 22:02:20.307526 2025] [:error] [pid 12383:tid 12386] [client 98.70.98.225:41149] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/card.php"] [unique_id "aUQJbPdgllo9h1cyxGbQXwAAAsA"]
[Thu Dec 18 22:02:21.710579 2025] [:error] [pid 23645:tid 23664] [client 98.70.98.225:4018] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/card.php"] [unique_id "aUQJbTf_Rx0Y0ao_QJhpEQAAAJE"]
[Thu Dec 18 22:02:22.045562 2025] [:error] [pid 25357:tid 25373] [client 98.70.98.225:63601] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/card.php"] [unique_id "aUQJboaT7bsEXnJVfJd2_gAAAc4"]
[Thu Dec 18 22:02:22.508174 2025] [:error] [pid 25357:tid 25364] [client 98.70.98.225:41108] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aUQJboaT7bsEXnJVfJd2_wAAAcU"]
[Thu Dec 18 22:02:22.933724 2025] [:error] [pid 25357:tid 25369] [client 98.70.98.225:41097] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aUQJboaT7bsEXnJVfJd3AwAAAco"]
[Thu Dec 18 22:02:23.391024 2025] [:error] [pid 23645:tid 23652] [client 98.70.98.225:63593] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aUQJbzf_Rx0Y0ao_QJhpEgAAAIU"]
[Thu Dec 18 22:02:24.416632 2025] [:error] [pid 12035:tid 12044] [client 98.70.98.225:3747] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aUQJcLcVHrNSHjCo-0qhsQAAAgI"]
[Thu Dec 18 22:02:25.246671 2025] [:error] [pid 12383:tid 12395] [client 98.70.98.225:62921] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aUQJcfdgllo9h1cyxGbQZQAAAsk"]
[Thu Dec 18 22:02:26.066074 2025] [:error] [pid 23558:tid 23620] [client 98.70.98.225:3980] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aUQJcuHam9NbgPQa9uYyvwAAAMU"]
[Thu Dec 18 22:02:26.567027 2025] [:error] [pid 23645:tid 23659] [client 98.70.98.225:62915] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aUQJcjf_Rx0Y0ao_QJhpFQAAAIw"]
[Thu Dec 18 22:02:27.459797 2025] [:error] [pid 25357:tid 25361] [client 98.70.98.225:3546] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aUQJc4aT7bsEXnJVfJd3CQAAAcI"]
[Thu Dec 18 22:02:27.971844 2025] [:error] [pid 23556:tid 23565] [client 98.70.98.225:63562] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUQJcxnmLlk3u5yt9kH1GQAAAAU"]
[Thu Dec 18 22:02:28.917190 2025] [:error] [pid 12383:tid 12406] [client 98.70.98.225:37805] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUQJdPdgllo9h1cyxGbQaAAAAtQ"]
[Thu Dec 18 22:02:29.728568 2025] [:error] [pid 24958:tid 24980] [client 98.70.98.225:62916] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUQJdckDOrUkd0wNm2HWswAAAZM"]
[Thu Dec 18 22:02:30.232970 2025] [:error] [pid 24542:tid 24549] [client 98.70.98.225:41110] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUQJdktQz4H2oS3NrDYspgAAAUU"]
[Thu Dec 18 22:02:30.909591 2025] [:error] [pid 12239:tid 12260] [client 98.70.98.225:63592] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aUQJdtNnXxfGIuWO6akohgAAApA"]
[Thu Dec 18 22:02:31.777420 2025] [:error] [pid 24542:tid 24558] [client 98.70.98.225:41096] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aUQJd0tQz4H2oS3NrDYsqAAAAU4"]
[Thu Dec 18 22:02:33.257813 2025] [:error] [pid 23558:tid 23624] [client 98.70.98.225:37797] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aUQJeeHam9NbgPQa9uYywQAAAMk"]
[Thu Dec 18 22:02:33.770728 2025] [:error] [pid 24542:tid 24545] [client 98.70.98.225:41104] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aUQJeUtQz4H2oS3NrDYsqgAAAUE"]
[Thu Dec 18 22:02:34.197653 2025] [:error] [pid 25357:tid 25378] [client 98.70.98.225:62958] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aUQJeoaT7bsEXnJVfJd3DgAAAdM"]
[Thu Dec 18 22:02:34.655965 2025] [:error] [pid 25357:tid 25365] [client 98.70.98.225:41150] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aUQJeoaT7bsEXnJVfJd3DwAAAcY"]
[Thu Dec 18 22:02:35.355297 2025] [:error] [pid 23556:tid 23582] [client 98.70.98.225:62951] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aUQJexnmLlk3u5yt9kH1HQAAABY"]
[Thu Dec 18 22:02:35.899436 2025] [:error] [pid 23645:tid 23662] [client 98.70.98.225:63595] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aUQJezf_Rx0Y0ao_QJhpGgAAAI8"]
[Thu Dec 18 22:02:36.460266 2025] [:error] [pid 23645:tid 23653] [client 98.70.98.225:4015] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aUQJfDf_Rx0Y0ao_QJhpHQAAAIY"]
[Thu Dec 18 22:02:37.300575 2025] [:error] [pid 12383:tid 12394] [client 98.70.98.225:37792] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aUQJffdgllo9h1cyxGbQbQAAAsg"]
[Thu Dec 18 22:02:38.443029 2025] [:error] [pid 24542:tid 24560] [client 98.70.98.225:41133] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aUQJfktQz4H2oS3NrDYsrQAAAVA"]
[Thu Dec 18 22:02:39.929243 2025] [:error] [pid 12239:tid 12265] [client 98.70.98.225:41102] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aUQJf9NnXxfGIuWO6akojgAAApU"]
[Thu Dec 18 22:02:40.963221 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:4013] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUQJgIaT7bsEXnJVfJd3FwAAAcg"]
[Thu Dec 18 22:02:41.600999 2025] [:error] [pid 23556:tid 23581] [client 98.70.98.225:63612] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUQJgRnmLlk3u5yt9kH1JAAAABU"]
[Thu Dec 18 22:02:43.274609 2025] [:error] [pid 23556:tid 23584] [client 98.70.98.225:4016] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUQJgxnmLlk3u5yt9kH1JwAAABg"]
[Thu Dec 18 22:02:43.810387 2025] [:error] [pid 24542:tid 24546] [client 98.70.98.225:3714] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUQJg0tQz4H2oS3NrDYsuAAAAUI"]
[Thu Dec 18 22:02:44.316883 2025] [:error] [pid 24542:tid 24555] [client 98.70.98.225:41135] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQJhEtQz4H2oS3NrDYsuQAAAUs"]
[Thu Dec 18 22:02:45.105692 2025] [:error] [pid 23645:tid 23663] [client 98.70.98.225:37819] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQJhTf_Rx0Y0ao_QJhpIAAAAJA"]
[Thu Dec 18 22:02:45.730833 2025] [:error] [pid 24433:tid 24443] [client 98.70.98.225:4008] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQJhZ4pN9ycmipm8TjkgQAAAQc"]
[Thu Dec 18 22:02:46.325063 2025] [:error] [pid 24542:tid 24553] [client 98.70.98.225:3748] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUQJhktQz4H2oS3NrDYsvwAAAUk"]
[Thu Dec 18 22:02:46.703770 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:41127] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUQJhktQz4H2oS3NrDYswAAAAVc"]
[Thu Dec 18 22:02:47.427895 2025] [:error] [pid 12383:tid 12410] [client 98.70.98.225:41146] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUQJh_dgllo9h1cyxGbQdQAAAtg"]
[Thu Dec 18 22:02:47.880865 2025] [:error] [pid 12239:tid 12263] [client 98.70.98.225:41130] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUQJh9NnXxfGIuWO6akomQAAApM"]
[Thu Dec 18 22:02:48.253984 2025] [:error] [pid 24433:tid 24454] [client 98.70.98.225:62941] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUQJiJ4pN9ycmipm8TjkggAAARI"]
[Thu Dec 18 22:02:49.050404 2025] [:error] [pid 25357:tid 25370] [client 98.70.98.225:41129] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the1me.php"] [unique_id "aUQJiYaT7bsEXnJVfJd3HQAAAcs"]
[Thu Dec 18 22:02:49.953024 2025] [:error] [pid 23645:tid 23660] [client 98.70.98.225:62933] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the1me.php"] [unique_id "aUQJiTf_Rx0Y0ao_QJhpJAAAAI0"]
[Thu Dec 18 22:02:50.704430 2025] [:error] [pid 23556:tid 23564] [client 98.70.98.225:41138] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the1me.php"] [unique_id "aUQJihnmLlk3u5yt9kH1LgAAAAQ"]
[Thu Dec 18 22:02:51.104058 2025] [:error] [pid 12035:tid 12065] [client 98.70.98.225:63614] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the1me.php"] [unique_id "aUQJi7cVHrNSHjCo-0qhwAAAAhY"]
[Thu Dec 18 22:02:51.746091 2025] [:error] [pid 23645:tid 23671] [client 98.70.98.225:3998] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aUQJizf_Rx0Y0ao_QJhpLAAAAJg"]
[Thu Dec 18 22:02:52.284343 2025] [:error] [pid 23558:tid 23633] [client 98.70.98.225:4003] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aUQJjOHam9NbgPQa9uYyzwAAANI"]
[Thu Dec 18 22:02:53.595216 2025] [:error] [pid 23558:tid 23637] [client 98.70.98.225:3763] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aUQJjeHam9NbgPQa9uYy0AAAANY"]
[Thu Dec 18 22:02:54.277054 2025] [:error] [pid 23558:tid 23623] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Thu Dec 18 22:02:54.422007 2025] [:error] [pid 23558:tid 23625] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Dec 18 22:02:54.572246 2025] [:error] [pid 23558:tid 23620] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 18 22:02:54.714136 2025] [:error] [pid 23558:tid 23615] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Dec 18 22:02:54.854560 2025] [:error] [pid 23558:tid 23618] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Dec 18 22:02:55.002582 2025] [:error] [pid 23558:tid 23616] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Dec 18 22:02:55.152615 2025] [:error] [pid 23558:tid 23627] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Thu Dec 18 22:02:55.301742 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/hk.php
[Thu Dec 18 22:02:55.446841 2025] [:error] [pid 23558:tid 23617] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Thu Dec 18 22:02:55.602727 2025] [:error] [pid 23558:tid 23619] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Dec 18 22:02:55.991337 2025] [:error] [pid 23558:tid 23629] [client 98.70.98.225:63557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Thu Dec 18 22:02:56.134829 2025] [:error] [pid 23558:tid 23624] [client 98.70.98.225:63557] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aUQJkOHam9NbgPQa9uYy3wAAAMk"]
[Thu Dec 18 22:02:56.929453 2025] [:error] [pid 24433:tid 24444] [client 98.70.98.225:63588] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aUQJkJ4pN9ycmipm8TjkjAAAAQg"]
[Thu Dec 18 22:02:57.326270 2025] [:error] [pid 24958:tid 24973] [client 98.70.98.225:41113] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aUQJkckDOrUkd0wNm2HWvAAAAYw"]
[Thu Dec 18 22:02:58.328423 2025] [:error] [pid 24433:tid 24448] [client 98.70.98.225:3975] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aUQJkp4pN9ycmipm8TjkkAAAAQw"]
[Thu Dec 18 22:02:59.225106 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:3523] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aUQJk_dgllo9h1cyxGbQeAAAAtI"]
[Thu Dec 18 22:02:59.944567 2025] [:error] [pid 23556:tid 23569] [client 98.70.98.225:63559] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aUQJkxnmLlk3u5yt9kH1OQAAAAk"]
[Thu Dec 18 22:03:01.300115 2025] [:error] [pid 24958:tid 24971] [client 98.70.98.225:63552] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aUQJlckDOrUkd0wNm2HWvQAAAYo"]
[Thu Dec 18 22:03:02.161611 2025] [:error] [pid 23556:tid 23560] [client 98.70.98.225:63597] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aUQJlhnmLlk3u5yt9kH1PgAAAAA"]
[Thu Dec 18 22:03:02.914685 2025] [:error] [pid 25357:tid 25377] [client 98.70.98.225:41095] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aUQJloaT7bsEXnJVfJd3IgAAAdI"]
[Thu Dec 18 22:03:04.177482 2025] [:error] [pid 23556:tid 23574] [client 98.70.98.225:62964] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aUQJmBnmLlk3u5yt9kH1QgAAAA4"]
[Thu Dec 18 22:03:05.556019 2025] [:error] [pid 12035:tid 12042] [client 98.70.98.225:4014] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aUQJmbcVHrNSHjCo-0qhyAAAAgA"]
[Thu Dec 18 22:03:06.894430 2025] [:error] [pid 25357:tid 25379] [client 98.70.98.225:63615] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aUQJmoaT7bsEXnJVfJd3JgAAAdQ"]
[Thu Dec 18 22:03:07.288278 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:63554] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aUQJm-Ham9NbgPQa9uYy5AAAANE"]
[Thu Dec 18 22:03:08.195156 2025] [:error] [pid 12383:tid 12397] [client 98.70.98.225:3970] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aUQJnPdgllo9h1cyxGbQggAAAss"]
[Thu Dec 18 22:03:09.077676 2025] [:error] [pid 25357:tid 25361] [client 98.70.98.225:37773] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aUQJnYaT7bsEXnJVfJd3KQAAAcI"]
[Thu Dec 18 22:03:10.183056 2025] [:error] [pid 23558:tid 23624] [client 98.70.98.225:62928] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aUQJnuHam9NbgPQa9uYy5gAAAMk"]
[Thu Dec 18 22:03:11.177978 2025] [:error] [pid 24433:tid 24449] [client 98.70.98.225:63585] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aUQJn54pN9ycmipm8TjknwAAAQ0"]
[Thu Dec 18 22:03:11.760695 2025] [:error] [pid 12383:tid 12399] [client 98.70.98.225:3993] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aUQJn_dgllo9h1cyxGbQhQAAAs0"]
[Thu Dec 18 22:03:12.119791 2025] [:error] [pid 12383:tid 12395] [client 98.70.98.225:4028] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aUQJoPdgllo9h1cyxGbQhwAAAsk"]
[Thu Dec 18 22:03:12.647066 2025] [:error] [pid 25357:tid 25368] [client 98.70.98.225:37772] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aUQJoIaT7bsEXnJVfJd3LQAAAck"]
[Thu Dec 18 22:03:13.013220 2025] [:error] [pid 23556:tid 23581] [client 98.70.98.225:62929] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc-903.php"] [unique_id "aUQJoRnmLlk3u5yt9kH1TAAAABU"]
[Thu Dec 18 22:03:13.770166 2025] [:error] [pid 23645:tid 23658] [client 98.70.98.225:62927] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc-903.php"] [unique_id "aUQJoTf_Rx0Y0ao_QJhpSQAAAIs"]
[Thu Dec 18 22:03:14.985506 2025] [:error] [pid 24433:tid 24453] [client 98.70.98.225:63598] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc-903.php"] [unique_id "aUQJop4pN9ycmipm8TjkpAAAARE"]
[Thu Dec 18 22:03:16.344113 2025] [:error] [pid 23556:tid 23575] [client 98.70.98.225:37782] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc-903.php"] [unique_id "aUQJpBnmLlk3u5yt9kH1TwAAAA8"]
[Thu Dec 18 22:03:17.468378 2025] [:error] [pid 23558:tid 23616] [client 98.70.98.225:63575] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUQJpeHam9NbgPQa9uYy7gAAAME"]
[Thu Dec 18 22:03:18.044671 2025] [:error] [pid 24958:tid 24971] [client 98.70.98.225:3990] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUQJpskDOrUkd0wNm2HWxwAAAYo"]
[Thu Dec 18 22:03:19.069489 2025] [:error] [pid 23558:tid 23619] [client 98.70.98.225:3974] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUQJp-Ham9NbgPQa9uYy8AAAAMQ"]
[Thu Dec 18 22:03:20.345460 2025] [:error] [pid 23558:tid 23621] [client 98.70.98.225:62963] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUQJqOHam9NbgPQa9uYy9AAAAMY"]
[Thu Dec 18 22:03:20.813326 2025] [:error] [pid 24433:tid 24459] [client 98.70.98.225:3538] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aUQJqJ4pN9ycmipm8TjkrAAAARc"]
[Thu Dec 18 22:03:21.764034 2025] [:error] [pid 23645:tid 23667] [client 98.70.98.225:3730] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aUQJqTf_Rx0Y0ao_QJhpUAAAAJQ"]
[Thu Dec 18 22:03:23.645517 2025] [:error] [pid 12239:tid 12266] [client 98.70.98.225:63492] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aUQJq9NnXxfGIuWO6akorAAAApY"]
[Thu Dec 18 22:03:24.601074 2025] [:error] [pid 12035:tid 12052] [client 98.70.98.225:3733] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aUQJrLcVHrNSHjCo-0qh1QAAAgo"]
[Thu Dec 18 22:03:25.508965 2025] [:error] [pid 12383:tid 12408] [client 98.70.98.225:62952] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUQJrfdgllo9h1cyxGbQjwAAAtY"]
[Thu Dec 18 22:03:26.658933 2025] [:error] [pid 24958:tid 24966] [client 98.70.98.225:63490] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUQJrskDOrUkd0wNm2HW0QAAAYU"]
[Thu Dec 18 22:03:27.983479 2025] [:error] [pid 12383:tid 12410] [client 98.70.98.225:63538] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUQJr_dgllo9h1cyxGbQkwAAAtg"]
[Thu Dec 18 22:03:28.879579 2025] [:error] [pid 24542:tid 24551] [client 98.70.98.225:3981] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUQJsEtQz4H2oS3NrDYs0AAAAUc"]
[Thu Dec 18 22:03:30.032078 2025] [:error] [pid 12035:tid 12043] [client 98.70.98.225:37766] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUQJsrcVHrNSHjCo-0qh3gAAAgE"]
[Thu Dec 18 22:03:31.154591 2025] [:error] [pid 12239:tid 12252] [client 98.70.98.225:3976] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUQJs9NnXxfGIuWO6akosgAAAog"]
[Thu Dec 18 22:03:33.004784 2025] [:error] [pid 12239:tid 12246] [client 98.70.98.225:63605] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUQJtdNnXxfGIuWO6akoswAAAoI"]
[Thu Dec 18 22:03:34.204219 2025] [:error] [pid 24542:tid 24562] [client 98.70.98.225:37789] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUQJtktQz4H2oS3NrDYs2AAAAVI"]
[Thu Dec 18 22:03:34.638320 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:3540] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUQJtoaT7bsEXnJVfJd3bwAAAcg"]
[Thu Dec 18 22:03:35.977740 2025] [:error] [pid 24542:tid 24564] [client 98.70.98.225:3973] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUQJt0tQz4H2oS3NrDYs2wAAAVQ"]
[Thu Dec 18 22:03:37.896693 2025] [:error] [pid 12035:tid 12057] [client 98.70.98.225:62924] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUQJubcVHrNSHjCo-0qh5AAAAg4"]
[Thu Dec 18 22:03:39.033995 2025] [:error] [pid 24542:tid 24561] [client 98.70.98.225:37803] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUQJu0tQz4H2oS3NrDYs4QAAAVE"]
[Thu Dec 18 22:03:39.850905 2025] [:error] [pid 23556:tid 23583] [client 98.70.98.225:3724] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQJuxnmLlk3u5yt9kH1ZgAAABc"]
[Thu Dec 18 22:03:41.395485 2025] [:error] [pid 24433:tid 24448] [client 98.70.98.225:41093] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQJvZ4pN9ycmipm8Tjk0AAAAQw"]
[Thu Dec 18 22:03:42.328878 2025] [:error] [pid 12239:tid 12250] [client 98.70.98.225:63582] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQJvtNnXxfGIuWO6akozAAAAoY"]
[Thu Dec 18 22:03:43.229740 2025] [:error] [pid 12383:tid 12409] [client 98.70.98.225:3584] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQJv_dgllo9h1cyxGbQuAAAAtc"]
[Thu Dec 18 22:03:44.409830 2025] [:error] [pid 23556:tid 23562] [client 98.70.98.225:4068] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aUQJwBnmLlk3u5yt9kH1agAAAAI"]
[Thu Dec 18 22:03:45.346506 2025] [:error] [pid 24542:tid 24546] [client 98.70.98.225:4040] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aUQJwUtQz4H2oS3NrDYs7gAAAUI"]
[Thu Dec 18 22:03:46.172942 2025] [:error] [pid 24433:tid 24438] [client 98.70.98.225:3849] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aUQJwp4pN9ycmipm8Tjk1AAAAQI"]
[Thu Dec 18 22:03:46.985845 2025] [:error] [pid 23558:tid 23637] [client 98.70.98.225:3903] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aUQJwuHam9NbgPQa9uYzQwAAANY"]
[Thu Dec 18 22:03:48.297817 2025] [:error] [pid 23645:tid 23667] [client 98.70.98.225:3838] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lo.php"] [unique_id "aUQJxDf_Rx0Y0ao_QJhpZQAAAJQ"]
[Thu Dec 18 22:03:48.635412 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:3785] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lo.php"] [unique_id "aUQJxPdgllo9h1cyxGbQuwAAAtI"]
[Thu Dec 18 22:03:49.014521 2025] [:error] [pid 12035:tid 12043] [client 98.70.98.225:3941] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lo.php"] [unique_id "aUQJxbcVHrNSHjCo-0qh7wAAAgE"]
[Thu Dec 18 22:03:49.441869 2025] [:error] [pid 23558:tid 23615] [client 98.70.98.225:3778] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lo.php"] [unique_id "aUQJxeHam9NbgPQa9uYzRAAAAMA"]
[Thu Dec 18 22:03:50.390975 2025] [:error] [pid 24958:tid 24978] [client 98.70.98.225:41118] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aUQJxskDOrUkd0wNm2HW-gAAAZE"]
[Thu Dec 18 22:03:50.801046 2025] [:error] [pid 12239:tid 12254] [client 98.70.98.225:3900] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aUQJxtNnXxfGIuWO6ako3gAAAoo"]
[Thu Dec 18 22:03:51.474896 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:3905] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aUQJx0tQz4H2oS3NrDYs8AAAAVc"]
[Thu Dec 18 22:03:52.329898 2025] [:error] [pid 23645:tid 23669] [client 98.70.98.225:3921] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aUQJyDf_Rx0Y0ao_QJhpZgAAAJY"]
[Thu Dec 18 22:03:53.103455 2025] [:error] [pid 23558:tid 23629] [client 98.70.98.225:3912] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geck.php"] [unique_id "aUQJyeHam9NbgPQa9uYzSgAAAM4"]
[Thu Dec 18 22:03:53.639507 2025] [:error] [pid 23558:tid 23617] [client 98.70.98.225:3910] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geck.php"] [unique_id "aUQJyeHam9NbgPQa9uYzTAAAAMI"]
[Thu Dec 18 22:03:54.622420 2025] [:error] [pid 12239:tid 12244] [client 98.70.98.225:3957] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geck.php"] [unique_id "aUQJytNnXxfGIuWO6ako4gAAAoA"]
[Thu Dec 18 22:03:55.326995 2025] [:error] [pid 12383:tid 12392] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Thu Dec 18 22:03:55.471230 2025] [:error] [pid 12383:tid 12388] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/inde.php
[Thu Dec 18 22:03:55.611227 2025] [:error] [pid 12383:tid 12410] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/777.php
[Thu Dec 18 22:03:55.750850 2025] [:error] [pid 12383:tid 12393] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/luxe.php
[Thu Dec 18 22:03:55.892160 2025] [:error] [pid 12383:tid 12387] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu Dec 18 22:03:56.053855 2025] [:error] [pid 12383:tid 12391] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Thu Dec 18 22:03:56.193452 2025] [:error] [pid 12383:tid 12395] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Thu Dec 18 22:03:56.499582 2025] [:error] [pid 12383:tid 12386] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/noe.php
[Thu Dec 18 22:03:56.639092 2025] [:error] [pid 12383:tid 12397] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Thu Dec 18 22:03:56.791830 2025] [:error] [pid 12383:tid 12405] [client 98.70.98.225:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/shellalfa.php
[Thu Dec 18 22:03:56.928579 2025] [:error] [pid 12383:tid 12396] [client 98.70.98.225:4034] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aUQJzPdgllo9h1cyxGbQyAAAAso"]
[Thu Dec 18 22:03:57.849972 2025] [:error] [pid 12035:tid 12066] [client 98.70.98.225:3783] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aUQJzbcVHrNSHjCo-0qh9QAAAhc"]
[Thu Dec 18 22:03:58.510713 2025] [:error] [pid 25357:tid 25369] [client 98.70.98.225:3821] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aUQJzoaT7bsEXnJVfJd3gQAAAco"]
[Thu Dec 18 22:03:59.336434 2025] [:error] [pid 12035:tid 12049] [client 98.70.98.225:3917] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aUQJz7cVHrNSHjCo-0qh9wAAAgc"]
[Thu Dec 18 22:03:59.961304 2025] [:error] [pid 24542:tid 24552] [client 98.70.98.225:3812] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aUQJz0tQz4H2oS3NrDYs_AAAAUg"]
[Thu Dec 18 22:04:00.780837 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:3909] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aUQJ0EtQz4H2oS3NrDYs_gAAAVc"]
[Thu Dec 18 22:04:01.762305 2025] [:error] [pid 24958:tid 24962] [client 98.70.98.225:3946] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aUQJ0ckDOrUkd0wNm2HXAgAAAYE"]
[Thu Dec 18 22:04:02.561388 2025] [:error] [pid 23558:tid 23628] [client 98.70.98.225:3833] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aUQJ0uHam9NbgPQa9uYzWgAAAM0"]
[Thu Dec 18 22:04:03.110397 2025] [:error] [pid 24542:tid 24561] [client 98.70.98.225:3935] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUQJ00tQz4H2oS3NrDYtBAAAAVE"]
[Thu Dec 18 22:04:03.680164 2025] [:error] [pid 23645:tid 23658] [client 98.70.98.225:3877] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUQJ0zf_Rx0Y0ao_QJhpawAAAIs"]
[Thu Dec 18 22:04:04.422282 2025] [:error] [pid 23645:tid 23661] [client 98.70.98.225:3872] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUQJ1Df_Rx0Y0ao_QJhpbwAAAI4"]
[Thu Dec 18 22:04:05.126794 2025] [:error] [pid 23558:tid 23627] [client 98.70.98.225:3835] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUQJ1eHam9NbgPQa9uYzWwAAAMw"]
[Thu Dec 18 22:04:05.526698 2025] [:error] [pid 23645:tid 23663] [client 98.70.98.225:3807] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cccc.php"] [unique_id "aUQJ1Tf_Rx0Y0ao_QJhpcwAAAJA"]
[Thu Dec 18 22:04:05.964363 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:3779] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cccc.php"] [unique_id "aUQJ1fdgllo9h1cyxGbQygAAAtI"]
[Thu Dec 18 22:04:06.516012 2025] [:error] [pid 23645:tid 23651] [client 98.70.98.225:4090] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cccc.php"] [unique_id "aUQJ1jf_Rx0Y0ao_QJhpdQAAAIQ"]
[Thu Dec 18 22:04:07.024870 2025] [:error] [pid 24542:tid 24566] [client 98.70.98.225:3863] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cccc.php"] [unique_id "aUQJ10tQz4H2oS3NrDYtCgAAAVY"]
[Thu Dec 18 22:04:07.720088 2025] [:error] [pid 23645:tid 23665] [client 98.70.98.225:3792] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aUQJ1zf_Rx0Y0ao_QJhpdwAAAJI"]
[Thu Dec 18 22:04:08.739037 2025] [:error] [pid 23556:tid 23568] [client 98.70.98.225:3826] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aUQJ2BnmLlk3u5yt9kH1jgAAAAg"]
[Thu Dec 18 22:04:09.763986 2025] [:error] [pid 23645:tid 23658] [client 98.70.98.225:3828] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aUQJ2Tf_Rx0Y0ao_QJhpewAAAIs"]
[Thu Dec 18 22:04:10.149436 2025] [:error] [pid 23645:tid 23662] [client 98.70.98.225:3829] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aUQJ2jf_Rx0Y0ao_QJhpfAAAAI8"]
[Thu Dec 18 22:04:10.794348 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:4054] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUQJ2uHam9NbgPQa9uYzaAAAAMs"]
[Thu Dec 18 22:04:11.381135 2025] [:error] [pid 24433:tid 24460] [client 98.70.98.225:3876] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUQJ254pN9ycmipm8Tjk2QAAARg"]
[Thu Dec 18 22:04:11.836534 2025] [:error] [pid 24433:tid 24440] [client 98.70.98.225:4039] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUQJ254pN9ycmipm8Tjk2gAAAQQ"]
[Thu Dec 18 22:04:12.306082 2025] [:error] [pid 24433:tid 24456] [client 98.70.98.225:3886] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aUQJ3J4pN9ycmipm8Tjk2wAAARQ"]
[Thu Dec 18 22:04:13.288759 2025] [:error] [pid 25357:tid 25378] [client 98.70.98.225:3906] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aUQJ3YaT7bsEXnJVfJd3iQAAAdM"]
[Thu Dec 18 22:04:14.060496 2025] [:error] [pid 23558:tid 23634] [client 98.70.98.225:3805] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aUQJ3uHam9NbgPQa9uYzbgAAANM"]
[Thu Dec 18 22:04:14.561218 2025] [:error] [pid 24958:tid 24968] [client 98.70.98.225:4058] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aUQJ3skDOrUkd0wNm2HXFwAAAYc"]
[Thu Dec 18 22:04:16.062559 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:3848] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aUQJ4EtQz4H2oS3NrDYtGQAAAVc"]
[Thu Dec 18 22:04:16.890796 2025] [:error] [pid 23556:tid 23571] [client 98.70.98.225:3790] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aUQJ4BnmLlk3u5yt9kH1kwAAAAs"]
[Thu Dec 18 22:04:18.595697 2025] [:error] [pid 12239:tid 12262] [client 98.70.98.225:4038] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aUQJ4tNnXxfGIuWO6ako7wAAApI"]
[Thu Dec 18 22:04:19.833145 2025] [:error] [pid 23556:tid 23582] [client 98.70.98.225:3892] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aUQJ4xnmLlk3u5yt9kH1mAAAABY"]
[Thu Dec 18 22:04:20.794137 2025] [:error] [pid 24958:tid 24961] [client 98.70.98.225:4083] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aUQJ5MkDOrUkd0wNm2HXHQAAAYA"]
[Thu Dec 18 22:04:22.163178 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:3929] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUQJ5tNnXxfGIuWO6ako9AAAAok"]
[Thu Dec 18 22:04:22.713217 2025] [:error] [pid 23645:tid 23670] [client 98.70.98.225:3867] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUQJ5jf_Rx0Y0ao_QJhphgAAAJc"]
[Thu Dec 18 22:04:23.818140 2025] [:error] [pid 23556:tid 23578] [client 98.70.98.225:3874] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUQJ5xnmLlk3u5yt9kH1mwAAABI"]
[Thu Dec 18 22:04:24.311362 2025] [:error] [pid 24433:tid 24459] [client 98.70.98.225:3834] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUQJ6J4pN9ycmipm8Tjk8AAAARc"]
[Thu Dec 18 22:04:24.773711 2025] [:error] [pid 12239:tid 12251] [client 98.70.98.225:64028] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aUQJ6NNnXxfGIuWO6ako-QAAAoc"]
[Thu Dec 18 22:04:25.223069 2025] [:error] [pid 23558:tid 23639] [client 98.70.98.225:4086] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aUQJ6eHam9NbgPQa9uYzewAAANg"]
[Thu Dec 18 22:04:26.003368 2025] [:error] [pid 12239:tid 12250] [client 98.70.98.225:3922] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aUQJ6tNnXxfGIuWO6ako_AAAAoY"]
[Thu Dec 18 22:04:26.468897 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:64016] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aUQJ6ktQz4H2oS3NrDYtIgAAAVc"]
[Thu Dec 18 22:04:27.671842 2025] [:error] [pid 24542:tid 24561] [client 98.70.98.225:64051] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelap.php"] [unique_id "aUQJ60tQz4H2oS3NrDYtJwAAAVE"]
[Thu Dec 18 22:04:28.755236 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:3779] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelap.php"] [unique_id "aUQJ7OHam9NbgPQa9uYzggAAANA"]
[Thu Dec 18 22:04:29.541597 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:3869] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelap.php"] [unique_id "aUQJ7dNnXxfGIuWO6ako_wAAAok"]
[Thu Dec 18 22:04:30.246314 2025] [:error] [pid 12383:tid 12393] [client 98.70.98.225:3854] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelap.php"] [unique_id "aUQJ7vdgllo9h1cyxGbQzwAAAsc"]
[Thu Dec 18 22:04:30.830076 2025] [:error] [pid 12383:tid 12391] [client 98.70.98.225:64022] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUQJ7vdgllo9h1cyxGbQ0QAAAsU"]
[Thu Dec 18 22:04:32.185645 2025] [:error] [pid 12239:tid 12255] [client 98.70.98.225:3824] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUQJ8NNnXxfGIuWO6akpBAAAAos"]
[Thu Dec 18 22:04:33.124645 2025] [:error] [pid 24958:tid 24979] [client 98.70.98.225:3814] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUQJ8ckDOrUkd0wNm2HXJQAAAZI"]
[Thu Dec 18 22:04:34.374300 2025] [:error] [pid 12035:tid 12045] [client 98.70.98.225:3800] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUQJ8rcVHrNSHjCo-0qiBQAAAgM"]
[Thu Dec 18 22:04:34.854841 2025] [:error] [pid 23558:tid 23636] [client 98.70.98.225:3855] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aUQJ8uHam9NbgPQa9uYzhgAAANU"]
[Thu Dec 18 22:04:36.082490 2025] [:error] [pid 24542:tid 24546] [client 98.70.98.225:3818] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aUQJ9EtQz4H2oS3NrDYtKwAAAUI"]
[Thu Dec 18 22:04:36.609808 2025] [:error] [pid 24958:tid 24976] [client 98.70.98.225:3810] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aUQJ9MkDOrUkd0wNm2HXKAAAAY8"]
[Thu Dec 18 22:04:37.288726 2025] [:error] [pid 25357:tid 25362] [client 98.70.98.225:3894] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aUQJ9YaT7bsEXnJVfJd3lAAAAcM"]
[Thu Dec 18 22:04:38.184101 2025] [:error] [pid 24542:tid 24561] [client 98.70.98.225:3904] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUQJ9ktQz4H2oS3NrDYtLAAAAVE"]
[Thu Dec 18 22:04:39.001152 2025] [:error] [pid 24542:tid 24545] [client 98.70.98.225:64054] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUQJ90tQz4H2oS3NrDYtLgAAAUE"]
[Thu Dec 18 22:04:39.999853 2025] [:error] [pid 12239:tid 12254] [client 98.70.98.225:3953] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUQJ99NnXxfGIuWO6akpDAAAAoo"]
[Thu Dec 18 22:04:40.658229 2025] [:error] [pid 24542:tid 24556] [client 98.70.98.225:3808] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUQJ-EtQz4H2oS3NrDYtNQAAAUw"]
[Thu Dec 18 22:04:41.155913 2025] [:error] [pid 23645:tid 23671] [client 98.70.98.225:64006] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQJ-Tf_Rx0Y0ao_QJhpkQAAAJg"]
[Thu Dec 18 22:04:42.889234 2025] [:error] [pid 24958:tid 24972] [client 98.70.98.225:3822] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQJ-skDOrUkd0wNm2HXLwAAAYs"]
[Thu Dec 18 22:04:43.306586 2025] [:error] [pid 12239:tid 12265] [client 98.70.98.225:64053] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQJ-9NnXxfGIuWO6akpFAAAApU"]
[Thu Dec 18 22:04:43.859952 2025] [:error] [pid 24542:tid 24551] [client 98.70.98.225:3795] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aUQJ-0tQz4H2oS3NrDYtNwAAAUc"]
[Thu Dec 18 22:04:44.237926 2025] [:error] [pid 25357:tid 25379] [client 98.70.98.225:3861] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aUQJ_IaT7bsEXnJVfJd3mwAAAdQ"]
[Thu Dec 18 22:04:45.118579 2025] [:error] [pid 24542:tid 24564] [client 98.70.98.225:64039] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aUQJ_UtQz4H2oS3NrDYtOAAAAVQ"]
[Thu Dec 18 22:04:47.073699 2025] [:error] [pid 24542:tid 24567] [client 98.70.98.225:4071] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aUQJ_0tQz4H2oS3NrDYtOgAAAVc"]
[Thu Dec 18 22:04:49.798906 2025] [:error] [pid 24542:tid 24547] [client 98.70.98.225:64040] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aUQKAUtQz4H2oS3NrDYtOwAAAUM"]
[Thu Dec 18 22:04:50.941465 2025] [:error] [pid 23556:tid 23560] [client 98.70.98.225:3878] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUQKAhnmLlk3u5yt9kH1rwAAAAA"]
[Thu Dec 18 22:04:52.278411 2025] [:error] [pid 12035:tid 12049] [client 98.70.98.225:3789] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUQKBLcVHrNSHjCo-0qiCwAAAgc"]
[Thu Dec 18 22:04:53.360942 2025] [:error] [pid 23556:tid 23574] [client 98.70.98.225:64004] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUQKBRnmLlk3u5yt9kH1sQAAAA4"]
[Thu Dec 18 22:04:54.478713 2025] [:error] [pid 24433:tid 24452] [client 98.70.98.225:64057] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUQKBp4pN9ycmipm8TjlAgAAARA"]
[Thu Dec 18 22:04:55.272697 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:3865] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aUQKB4aT7bsEXnJVfJd3nwAAAcg"]
[Thu Dec 18 22:04:55.880387 2025] [:error] [pid 24433:tid 24443] [client 98.70.98.225:64052] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aUQKB54pN9ycmipm8TjlBQAAAQc"]
[Thu Dec 18 22:04:56.619130 2025] [:error] [pid 12383:tid 12409] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Dec 18 22:04:56.762712 2025] [:error] [pid 12383:tid 12396] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 18 22:04:56.905460 2025] [:error] [pid 12383:tid 12401] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Thu Dec 18 22:04:57.047696 2025] [:error] [pid 12383:tid 12405] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Thu Dec 18 22:04:57.544667 2025] [:error] [pid 12383:tid 12402] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Dec 18 22:04:57.714944 2025] [:error] [pid 12383:tid 12399] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 18 22:04:57.863106 2025] [:error] [pid 12383:tid 12398] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Dec 18 22:04:58.008120 2025] [:error] [pid 12383:tid 12406] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Thu Dec 18 22:04:58.172996 2025] [:error] [pid 12383:tid 12388] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php
[Thu Dec 18 22:04:58.316401 2025] [:error] [pid 12383:tid 12409] [client 98.70.98.225:3897] File does not exist: /usr/local/apache/htdocs/suspended-page/wcas.php
[Thu Dec 18 22:04:58.466913 2025] [:error] [pid 12383:tid 12386] [client 98.70.98.225:3897] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQKCvdgllo9h1cyxGbQ9AAAAsA"]
[Thu Dec 18 22:04:59.120038 2025] [:error] [pid 25357:tid 25366] [client 98.70.98.225:3945] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQKC4aT7bsEXnJVfJd3owAAAcc"]
[Thu Dec 18 22:05:00.363363 2025] [:error] [pid 25357:tid 25372] [client 98.70.98.225:3845] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQKDIaT7bsEXnJVfJd3pgAAAc0"]
[Thu Dec 18 22:05:01.019110 2025] [:error] [pid 24542:tid 24545] [client 98.70.98.225:3875] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUQKDUtQz4H2oS3NrDYtPwAAAUE"]
[Thu Dec 18 22:05:01.521476 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:3776] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aUQKDdNnXxfGIuWO6akpIQAAAok"]
[Thu Dec 18 22:05:02.048012 2025] [:error] [pid 24542:tid 24563] [client 98.70.98.225:3881] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aUQKDktQz4H2oS3NrDYtQAAAAVM"]
[Thu Dec 18 22:05:02.774768 2025] [:error] [pid 12239:tid 12262] [client 98.70.98.225:64035] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aUQKDtNnXxfGIuWO6akpJAAAApI"]
[Thu Dec 18 22:05:03.249913 2025] [:error] [pid 12239:tid 12261] [client 98.70.98.225:3868] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aUQKD9NnXxfGIuWO6akpJQAAApE"]
[Thu Dec 18 22:05:03.902374 2025] [:error] [pid 25357:tid 25368] [client 98.70.98.225:3889] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUQKD4aT7bsEXnJVfJd3qgAAAck"]
[Thu Dec 18 22:05:05.102939 2025] [:error] [pid 24542:tid 24550] [client 98.70.98.225:3809] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUQKEUtQz4H2oS3NrDYtRAAAAUY"]
[Thu Dec 18 22:05:05.990213 2025] [:error] [pid 23558:tid 23638] [client 98.70.98.225:3794] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUQKEeHam9NbgPQa9uYzmAAAANc"]
[Thu Dec 18 22:05:06.811297 2025] [:error] [pid 12239:tid 12251] [client 98.70.98.225:3864] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUQKEtNnXxfGIuWO6akpKwAAAoc"]
[Thu Dec 18 22:05:07.874610 2025] [:error] [pid 12239:tid 12250] [client 98.70.98.225:4095] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUQKE9NnXxfGIuWO6akpLQAAAoY"]
[Thu Dec 18 22:05:08.504493 2025] [:error] [pid 12239:tid 12260] [client 98.70.98.225:3862] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUQKFNNnXxfGIuWO6akpLwAAApA"]
[Thu Dec 18 22:05:09.149874 2025] [:error] [pid 23556:tid 23579] [client 98.70.98.225:3846] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUQKFRnmLlk3u5yt9kH1wgAAABM"]
[Thu Dec 18 22:05:10.137267 2025] [:error] [pid 12239:tid 12258] [client 98.70.98.225:64041] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aUQKFtNnXxfGIuWO6akpNAAAAo4"]
[Thu Dec 18 22:05:10.766011 2025] [:error] [pid 24433:tid 24442] [client 98.70.98.225:3633] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lol.php"] [unique_id "aUQKFp4pN9ycmipm8TjlCQAAAQY"]
[Thu Dec 18 22:05:12.073991 2025] [:error] [pid 12239:tid 12244] [client 98.70.98.225:3880] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lol.php"] [unique_id "aUQKGNNnXxfGIuWO6akpOQAAAoA"]
[Thu Dec 18 22:05:12.742341 2025] [:error] [pid 25357:tid 25372] [client 98.70.98.225:3901] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lol.php"] [unique_id "aUQKGIaT7bsEXnJVfJd3sgAAAc0"]
[Thu Dec 18 22:05:13.446673 2025] [:error] [pid 25357:tid 25373] [client 98.70.98.225:3907] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lol.php"] [unique_id "aUQKGYaT7bsEXnJVfJd3swAAAc4"]
[Thu Dec 18 22:05:14.435998 2025] [:error] [pid 24542:tid 24544] [client 98.70.98.225:3962] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aUQKGktQz4H2oS3NrDYtSwAAAUA"]
[Thu Dec 18 22:05:14.893837 2025] [:error] [pid 12239:tid 12256] [client 98.70.98.225:3852] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aUQKGtNnXxfGIuWO6akpPgAAAow"]
[Thu Dec 18 22:05:15.620323 2025] [:error] [pid 12239:tid 12252] [client 98.70.98.225:3638] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aUQKG9NnXxfGIuWO6akpPwAAAog"]
[Thu Dec 18 22:05:16.636519 2025] [:error] [pid 12383:tid 12400] [client 98.70.98.225:64013] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aUQKHPdgllo9h1cyxGbRAAAAAs4"]
[Thu Dec 18 22:05:17.118024 2025] [:error] [pid 25357:tid 25377] [client 98.70.98.225:4041] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aUQKHYaT7bsEXnJVfJd3tQAAAdI"]
[Thu Dec 18 22:05:17.521766 2025] [:error] [pid 12239:tid 12261] [client 98.70.98.225:4035] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aUQKHdNnXxfGIuWO6akpQwAAApE"]
[Thu Dec 18 22:05:18.138307 2025] [:error] [pid 12035:tid 12061] [client 98.70.98.225:3895] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aUQKHrcVHrNSHjCo-0qiEQAAAhI"]
[Thu Dec 18 22:05:18.528751 2025] [:error] [pid 12035:tid 12060] [client 98.70.98.225:3811] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aUQKHrcVHrNSHjCo-0qiEwAAAhE"]
[Thu Dec 18 22:05:19.017862 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:3626] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aUQKH-Ham9NbgPQa9uYzogAAAMs"]
[Thu Dec 18 22:05:19.709314 2025] [:error] [pid 12383:tid 12391] [client 98.70.98.225:3806] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aUQKH_dgllo9h1cyxGbRAwAAAsU"]
[Thu Dec 18 22:05:20.167159 2025] [:error] [pid 25357:tid 25381] [client 98.70.98.225:3951] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aUQKIIaT7bsEXnJVfJd3tgAAAdY"]
[Thu Dec 18 22:05:20.977838 2025] [:error] [pid 12239:tid 12258] [client 98.70.98.225:64011] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aUQKINNnXxfGIuWO6akpRgAAAo4"]
[Thu Dec 18 22:05:21.454880 2025] [:error] [pid 12239:tid 12263] [client 98.70.98.225:3819] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aUQKIdNnXxfGIuWO6akpSAAAApM"]
[Thu Dec 18 22:05:22.251242 2025] [:error] [pid 24542:tid 24552] [client 98.70.98.225:3902] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aUQKIktQz4H2oS3NrDYtUgAAAUg"]
[Thu Dec 18 22:05:22.555332 2025] [:error] [pid 23558:tid 23622] [client 98.70.98.225:3859] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aUQKIuHam9NbgPQa9uYzqAAAAMc"]
[Thu Dec 18 22:05:23.807637 2025] [:error] [pid 23645:tid 23668] [client 98.70.98.225:3884] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aUQKIzf_Rx0Y0ao_QJhprQAAAJU"]
[Thu Dec 18 22:05:24.181653 2025] [:error] [pid 24958:tid 24968] [client 98.70.98.225:3882] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aUQKJMkDOrUkd0wNm2HXPgAAAYc"]
[Thu Dec 18 22:05:24.561695 2025] [:error] [pid 25357:tid 25368] [client 98.70.98.225:3911] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aUQKJIaT7bsEXnJVfJd3uAAAAck"]
[Thu Dec 18 22:05:24.901206 2025] [:error] [pid 24433:tid 24451] [client 98.70.98.225:3625] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aUQKJJ4pN9ycmipm8TjlDQAAAQ8"]
[Thu Dec 18 22:05:25.838394 2025] [:error] [pid 24542:tid 24557] [client 98.70.98.225:3842] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aUQKJUtQz4H2oS3NrDYtUwAAAU0"]
[Thu Dec 18 22:05:26.533327 2025] [:error] [pid 23645:tid 23661] [client 98.70.98.225:3871] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aUQKJjf_Rx0Y0ao_QJhpsAAAAI4"]
[Thu Dec 18 22:05:27.374220 2025] [:error] [pid 12383:tid 12386] [client 98.70.98.225:3832] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aUQKJ_dgllo9h1cyxGbRBQAAAsA"]
[Thu Dec 18 22:05:27.883744 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:64042] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aUQKJ-Ham9NbgPQa9uYzsAAAANA"]
[Thu Dec 18 22:05:29.322282 2025] [:error] [pid 24958:tid 24963] [client 98.70.98.225:3931] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aUQKKckDOrUkd0wNm2HXQwAAAYI"]
[Thu Dec 18 22:05:30.893155 2025] [:error] [pid 24958:tid 24976] [client 98.70.98.225:3851] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUQKKskDOrUkd0wNm2HXRAAAAY8"]
[Thu Dec 18 22:05:32.059827 2025] [:error] [pid 12239:tid 12247] [client 98.70.98.225:3632] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUQKLNNnXxfGIuWO6akpYAAAAoM"]
[Thu Dec 18 22:05:32.933363 2025] [:error] [pid 23645:tid 23662] [client 98.70.98.225:3585] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUQKLDf_Rx0Y0ao_QJhptQAAAI8"]
[Thu Dec 18 22:05:33.580660 2025] [:error] [pid 12383:tid 12389] [client 98.70.98.225:3898] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUQKLfdgllo9h1cyxGbRCwAAAsM"]
[Thu Dec 18 22:05:34.158724 2025] [:error] [pid 12383:tid 12395] [client 98.70.98.225:3965] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUQKLvdgllo9h1cyxGbRDgAAAsk"]
[Thu Dec 18 22:05:34.809818 2025] [:error] [pid 23558:tid 23627] [client 98.70.98.225:3961] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUQKLuHam9NbgPQa9uYzwwAAAMw"]
[Thu Dec 18 22:05:35.990263 2025] [:error] [pid 23558:tid 23617] [client 98.70.98.225:3817] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUQKL-Ham9NbgPQa9uYzxAAAAMI"]
[Thu Dec 18 22:05:36.853912 2025] [:error] [pid 24958:tid 24974] [client 98.70.98.225:64002] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUQKMMkDOrUkd0wNm2HXRwAAAY0"]
[Thu Dec 18 22:05:37.402400 2025] [:error] [pid 24433:tid 24450] [client 98.70.98.225:3804] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aUQKMZ4pN9ycmipm8TjlGAAAAQ4"]
[Thu Dec 18 22:05:38.278810 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:3853] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aUQKMuHam9NbgPQa9uYzzwAAAMs"]
[Thu Dec 18 22:05:39.228164 2025] [:error] [pid 24433:tid 24448] [client 98.70.98.225:4077] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aUQKM54pN9ycmipm8TjlHAAAAQw"]
[Thu Dec 18 22:05:40.145074 2025] [:error] [pid 24542:tid 24550] [client 98.70.98.225:3605] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aUQKNEtQz4H2oS3NrDYtYwAAAUY"]
[Thu Dec 18 22:05:41.034365 2025] [:error] [pid 23556:tid 23576] [client 98.70.98.225:3918] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUQKNRnmLlk3u5yt9kH11gAAABA"]
[Thu Dec 18 22:05:41.824749 2025] [:error] [pid 25357:tid 25363] [client 98.70.98.225:3831] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUQKNYaT7bsEXnJVfJd3ywAAAcQ"]
[Thu Dec 18 22:05:42.588812 2025] [:error] [pid 12383:tid 12405] [client 98.70.98.225:64005] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUQKNvdgllo9h1cyxGbRGAAAAtM"]
[Thu Dec 18 22:05:43.697026 2025] [:error] [pid 23556:tid 23580] [client 98.70.98.225:4049] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aUQKNxnmLlk3u5yt9kH12QAAABQ"]
[Thu Dec 18 22:05:44.861434 2025] [:error] [pid 23558:tid 23625] [client 98.70.98.225:64032] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aUQKOOHam9NbgPQa9uYz3QAAAMo"]
[Thu Dec 18 22:05:45.838951 2025] [:error] [pid 23645:tid 23648] [client 98.70.98.225:3784] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aUQKOTf_Rx0Y0ao_QJhpuwAAAIE"]
[Thu Dec 18 22:05:47.531489 2025] [:error] [pid 24433:tid 24453] [client 98.70.98.225:4043] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aUQKO54pN9ycmipm8TjlHgAAARE"]
[Thu Dec 18 22:05:51.102936 2025] [:error] [pid 12239:tid 12252] [client 98.70.98.225:3966] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "aUQKP9NnXxfGIuWO6akpdQAAAog"]
[Thu Dec 18 22:05:51.546526 2025] [:error] [pid 23556:tid 23564] [client 98.70.98.225:41139] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUQKPxnmLlk3u5yt9kH14wAAAAQ"]
[Thu Dec 18 22:05:52.416498 2025] [:error] [pid 24542:tid 24560] [client 98.70.98.225:3603] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUQKQEtQz4H2oS3NrDYtbwAAAVA"]
[Thu Dec 18 22:05:53.489752 2025] [:error] [pid 12383:tid 12387] [client 98.70.98.225:64017] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUQKQfdgllo9h1cyxGbRHgAAAsE"]
[Thu Dec 18 22:05:54.048699 2025] [:error] [pid 12383:tid 12405] [client 98.70.98.225:64048] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUQKQvdgllo9h1cyxGbRIAAAAtM"]
[Thu Dec 18 22:05:54.455821 2025] [:error] [pid 12239:tid 12267] [client 98.70.98.225:3596] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUQKQtNnXxfGIuWO6akpfAAAApc"]
[Thu Dec 18 22:05:54.972806 2025] [:error] [pid 24542:tid 24551] [client 98.70.98.225:3615] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUQKQktQz4H2oS3NrDYtcgAAAUc"]
[Thu Dec 18 22:05:55.400977 2025] [:error] [pid 12035:tid 12045] [client 98.70.98.225:3841] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUQKQ7cVHrNSHjCo-0qiKwAAAgM"]
[Thu Dec 18 22:05:56.654795 2025] [:error] [pid 23645:tid 23653] [client 98.70.98.225:64012] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aUQKRDf_Rx0Y0ao_QJhpwgAAAIY"]
[Thu Dec 18 22:05:57.425910 2025] [:error] [pid 12383:tid 12399] [client 98.70.98.225:3856] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd67.php"] [unique_id "aUQKRfdgllo9h1cyxGbRIQAAAs0"]
[Thu Dec 18 22:05:58.206347 2025] [:error] [pid 23645:tid 23650] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Thu Dec 18 22:05:58.381241 2025] [:error] [pid 23645:tid 23664] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Thu Dec 18 22:05:58.546569 2025] [:error] [pid 23645:tid 23659] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 18 22:05:58.742778 2025] [:error] [pid 23645:tid 23660] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/usep.php
[Thu Dec 18 22:05:59.007261 2025] [:error] [pid 23645:tid 23661] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Thu Dec 18 22:05:59.352072 2025] [:error] [pid 23645:tid 23647] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Thu Dec 18 22:05:59.517125 2025] [:error] [pid 23645:tid 23656] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/abt.php
[Thu Dec 18 22:05:59.685038 2025] [:error] [pid 23645:tid 23666] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/jmfi2.php
[Thu Dec 18 22:05:59.865129 2025] [:error] [pid 23645:tid 23652] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Thu Dec 18 22:06:00.045139 2025] [:error] [pid 23645:tid 23665] [client 98.70.98.225:64000] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Dec 18 22:06:00.208797 2025] [:error] [pid 23645:tid 23653] [client 98.70.98.225:64000] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aUQKSDf_Rx0Y0ao_QJhp0AAAAIY"]
[Thu Dec 18 22:06:00.718811 2025] [:error] [pid 24433:tid 24436] [client 98.70.98.225:3914] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aUQKSJ4pN9ycmipm8TjlIwAAAQA"]
[Thu Dec 18 22:06:01.581802 2025] [:error] [pid 24542:tid 24554] [client 98.70.98.225:3840] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aUQKSUtQz4H2oS3NrDYteQAAAUo"]
[Thu Dec 18 22:06:02.356610 2025] [:error] [pid 24542:tid 24551] [client 98.70.98.225:64061] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aUQKSktQz4H2oS3NrDYtfQAAAUc"]
[Thu Dec 18 22:06:03.294952 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:3944] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aUQKS-Ham9NbgPQa9uYz3wAAANA"]
[Thu Dec 18 22:06:04.233760 2025] [:error] [pid 25357:tid 25383] [client 98.70.98.225:3801] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aUQKTIaT7bsEXnJVfJd3zwAAAdg"]
[Thu Dec 18 22:06:05.178732 2025] [:error] [pid 12035:tid 12044] [client 98.70.98.225:3642] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aUQKTbcVHrNSHjCo-0qiLgAAAgI"]
[Thu Dec 18 22:06:05.744135 2025] [:error] [pid 12239:tid 12265] [client 98.70.98.225:4073] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aUQKTdNnXxfGIuWO6akpkgAAApU"]
[Thu Dec 18 22:06:06.232326 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:64050] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUQKTuHam9NbgPQa9uYz4QAAAMs"]
[Thu Dec 18 22:06:06.839830 2025] [:error] [pid 23558:tid 23635] [client 98.70.98.225:4081] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUQKTuHam9NbgPQa9uYz5QAAANQ"]
[Thu Dec 18 22:06:07.290682 2025] [:error] [pid 12239:tid 12245] [client 98.70.98.225:3608] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUQKT9NnXxfGIuWO6akpkwAAAoE"]
[Thu Dec 18 22:06:07.643236 2025] [:error] [pid 12239:tid 12251] [client 98.70.98.225:64025] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUQKT9NnXxfGIuWO6akplAAAAoc"]
[Thu Dec 18 22:06:08.493670 2025] [:error] [pid 12239:tid 12261] [client 98.70.98.225:3913] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQKUNNnXxfGIuWO6akplQAAApE"]
[Thu Dec 18 22:06:09.408772 2025] [:error] [pid 23556:tid 23576] [client 98.70.98.225:3954] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQKURnmLlk3u5yt9kH16AAAABA"]
[Thu Dec 18 22:06:10.600777 2025] [:error] [pid 25357:tid 25374] [client 98.70.98.225:64056] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQKUoaT7bsEXnJVfJd30gAAAc8"]
[Thu Dec 18 22:06:11.922392 2025] [:error] [pid 23558:tid 23634] [client 98.70.98.225:4032] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUQKU-Ham9NbgPQa9uYz7QAAANM"]
[Thu Dec 18 22:06:12.605913 2025] [:error] [pid 12035:tid 12050] [client 98.70.98.225:3919] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aUQKVLcVHrNSHjCo-0qiMwAAAgg"]
[Thu Dec 18 22:06:13.809448 2025] [:error] [pid 12239:tid 12249] [client 98.70.98.225:3641] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aUQKVdNnXxfGIuWO6akpogAAAoU"]
[Thu Dec 18 22:06:14.667285 2025] [:error] [pid 24433:tid 24445] [client 98.70.98.225:3893] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aUQKVp4pN9ycmipm8TjlLQAAAQk"]
[Thu Dec 18 22:06:15.390068 2025] [:error] [pid 23645:tid 23651] [client 98.70.98.225:3586] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aUQKVzf_Rx0Y0ao_QJhp2AAAAIQ"]
[Thu Dec 18 22:06:15.944523 2025] [:error] [pid 12239:tid 12264] [client 98.70.98.225:3926] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aUQKV9NnXxfGIuWO6akppgAAApQ"]
[Thu Dec 18 22:06:16.824476 2025] [:error] [pid 25357:tid 25366] [client 98.70.98.225:3896] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aUQKWIaT7bsEXnJVfJd32QAAAcc"]
[Thu Dec 18 22:06:17.593628 2025] [:error] [pid 25357:tid 25379] [client 98.70.98.225:3933] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aUQKWYaT7bsEXnJVfJd32wAAAdQ"]
[Thu Dec 18 22:06:18.251824 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:3781] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aUQKWtNnXxfGIuWO6akpqQAAAok"]
[Thu Dec 18 22:06:18.858186 2025] [:error] [pid 23558:tid 23618] [client 98.70.98.225:3777] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUQKWuHam9NbgPQa9uYz8AAAAMM"]
[Thu Dec 18 22:06:19.206896 2025] [:error] [pid 12383:tid 12393] [client 98.70.98.225:4036] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUQKW_dgllo9h1cyxGbRLAAAAsc"]
[Thu Dec 18 22:06:19.708264 2025] [:error] [pid 12239:tid 12248] [client 98.70.98.225:3599] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUQKW9NnXxfGIuWO6akprQAAAoQ"]
[Thu Dec 18 22:06:20.081298 2025] [:error] [pid 12239:tid 12264] [client 98.70.98.225:3927] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUQKXNNnXxfGIuWO6akprwAAApQ"]
[Thu Dec 18 22:06:20.616856 2025] [:error] [pid 24542:tid 24551] [client 98.70.98.225:4047] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQKXEtQz4H2oS3NrDYtkQAAAUc"]
[Thu Dec 18 22:06:21.010843 2025] [:error] [pid 24433:tid 24436] [client 98.70.98.225:3613] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQKXZ4pN9ycmipm8TjlMAAAAQA"]
[Thu Dec 18 22:06:21.509804 2025] [:error] [pid 24542:tid 24561] [client 98.70.98.225:3920] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQKXUtQz4H2oS3NrDYtkgAAAVE"]
[Thu Dec 18 22:06:22.524599 2025] [:error] [pid 24958:tid 24967] [client 98.70.98.225:64038] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUQKXskDOrUkd0wNm2HXUwAAAYY"]
[Thu Dec 18 22:06:23.029709 2025] [:error] [pid 24542:tid 24558] [client 98.70.98.225:64046] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aUQKX0tQz4H2oS3NrDYtlAAAAU4"]
[Thu Dec 18 22:06:23.823236 2025] [:error] [pid 12239:tid 12262] [client 98.70.98.225:64043] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aUQKX9NnXxfGIuWO6akptgAAApI"]
[Thu Dec 18 22:06:24.106317 2025] [:error] [pid 25357:tid 25383] [client 98.70.98.225:4093] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aUQKYIaT7bsEXnJVfJd33QAAAdg"]
[Thu Dec 18 22:06:24.542488 2025] [:error] [pid 24542:tid 24544] [client 98.70.98.225:3924] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aUQKYEtQz4H2oS3NrDYtmAAAAUA"]
[Thu Dec 18 22:06:25.045993 2025] [:error] [pid 12383:tid 12395] [client 98.70.98.225:3932] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sko.php"] [unique_id "aUQKYfdgllo9h1cyxGbRMAAAAsk"]
[Thu Dec 18 22:06:25.486187 2025] [:error] [pid 23556:tid 23569] [client 98.70.98.225:3890] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sko.php"] [unique_id "aUQKYRnmLlk3u5yt9kH17QAAAAk"]
[Thu Dec 18 22:06:26.529264 2025] [:error] [pid 12239:tid 12254] [client 98.70.98.225:64027] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sko.php"] [unique_id "aUQKYtNnXxfGIuWO6akpuAAAAoo"]
[Thu Dec 18 22:06:28.416582 2025] [:error] [pid 25357:tid 25373] [client 98.70.98.225:3591] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sko.php"] [unique_id "aUQKZIaT7bsEXnJVfJd33gAAAc4"]
[Thu Dec 18 22:06:29.460841 2025] [:error] [pid 23558:tid 23624] [client 98.70.98.225:64003] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUQKZeHam9NbgPQa9uYz8QAAAMk"]
[Thu Dec 18 22:06:30.035108 2025] [:error] [pid 25357:tid 25376] [client 98.70.98.225:3799] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUQKZoaT7bsEXnJVfJd34gAAAdE"]
[Thu Dec 18 22:06:30.575219 2025] [:error] [pid 24433:tid 24450] [client 98.70.98.225:41148] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUQKZp4pN9ycmipm8TjlMwAAAQ4"]
[Thu Dec 18 22:06:31.270187 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:3627] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUQKZ-Ham9NbgPQa9uYz8gAAANE"]
[Thu Dec 18 22:06:32.580377 2025] [:error] [pid 24958:tid 24978] [client 98.70.98.225:3888] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQKaMkDOrUkd0wNm2HXVwAAAZE"]
[Thu Dec 18 22:06:33.451586 2025] [:error] [pid 24542:tid 24555] [client 98.70.98.225:3619] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQKaUtQz4H2oS3NrDYtowAAAUs"]
[Thu Dec 18 22:06:33.927429 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:63570] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQKafdgllo9h1cyxGbRNAAAAtI"]
[Thu Dec 18 22:06:34.296505 2025] [:error] [pid 25357:tid 25374] [client 98.70.98.225:4089] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUQKaoaT7bsEXnJVfJd35AAAAc8"]
[Thu Dec 18 22:06:35.117029 2025] [:error] [pid 24542:tid 24553] [client 98.70.98.225:64029] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aUQKa0tQz4H2oS3NrDYtpgAAAUk"]
[Thu Dec 18 22:06:35.718975 2025] [:error] [pid 24542:tid 24568] [client 98.70.98.225:64049] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aUQKa0tQz4H2oS3NrDYtqAAAAVg"]
[Thu Dec 18 22:06:36.462199 2025] [:error] [pid 23558:tid 23629] [client 98.70.98.225:3752] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aUQKbOHam9NbgPQa9uYz9gAAAM4"]
[Thu Dec 18 22:06:37.555715 2025] [:error] [pid 24542:tid 24565] [client 98.70.98.225:3798] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aUQKbUtQz4H2oS3NrDYtqwAAAVU"]
[Thu Dec 18 22:06:38.807435 2025] [:error] [pid 25357:tid 25362] [client 98.70.98.225:3816] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aUQKboaT7bsEXnJVfJd35wAAAcM"]
[Thu Dec 18 22:06:40.030942 2025] [:error] [pid 24542:tid 24552] [client 98.70.98.225:3844] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aUQKcEtQz4H2oS3NrDYtrwAAAUg"]
[Thu Dec 18 22:06:40.949536 2025] [:error] [pid 24542:tid 24559] [client 98.70.98.225:4087] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aUQKcEtQz4H2oS3NrDYtsgAAAU8"]
[Thu Dec 18 22:06:41.491725 2025] [:error] [pid 24542:tid 24563] [client 98.70.98.225:3850] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aUQKcUtQz4H2oS3NrDYtswAAAVM"]
[Thu Dec 18 22:06:42.612513 2025] [:error] [pid 12239:tid 12261] [client 98.70.98.225:3858] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUQKctNnXxfGIuWO6akpxQAAApE"]
[Thu Dec 18 22:06:44.121571 2025] [:error] [pid 12239:tid 12256] [client 98.70.98.225:64031] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUQKdNNnXxfGIuWO6akpygAAAow"]
[Thu Dec 18 22:06:45.295089 2025] [:error] [pid 24433:tid 24441] [client 98.70.98.225:37772] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUQKdZ4pN9ycmipm8TjlNgAAAQU"]
[Thu Dec 18 22:06:46.069204 2025] [:error] [pid 23556:tid 23576] [client 98.70.98.225:64018] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUQKdhnmLlk3u5yt9kH18wAAABA"]
[Thu Dec 18 22:06:47.086633 2025] [:error] [pid 12239:tid 12251] [client 98.70.98.225:64008] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aUQKd9NnXxfGIuWO6akpzwAAAoc"]
[Thu Dec 18 22:06:47.561027 2025] [:error] [pid 24958:tid 24961] [client 98.70.98.225:3594] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aUQKd8kDOrUkd0wNm2HXWQAAAYA"]
[Thu Dec 18 22:06:48.119567 2025] [:error] [pid 25357:tid 25383] [client 98.70.98.225:41150] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aUQKeIaT7bsEXnJVfJd37QAAAdg"]
[Thu Dec 18 22:06:48.827864 2025] [:error] [pid 23558:tid 23626] [client 98.70.98.225:3643] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aUQKeOHam9NbgPQa9uYz9wAAAMs"]
[Thu Dec 18 22:06:49.646005 2025] [:error] [pid 24433:tid 24454] [client 98.70.98.225:3588] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUQKeZ4pN9ycmipm8TjlOQAAARI"]
[Thu Dec 18 22:06:50.245733 2025] [:error] [pid 23556:tid 23562] [client 98.70.98.225:3857] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUQKehnmLlk3u5yt9kH1-QAAAAI"]
[Thu Dec 18 22:06:50.775356 2025] [:error] [pid 25357:tid 25377] [client 98.70.98.225:3969] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUQKeoaT7bsEXnJVfJd37gAAAdI"]
[Thu Dec 18 22:06:51.590341 2025] [:error] [pid 23558:tid 23627] [client 98.70.98.225:3899] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUQKe-Ham9NbgPQa9uYz-wAAAMw"]
[Thu Dec 18 22:06:52.981843 2025] [:error] [pid 24433:tid 24445] [client 98.70.98.225:41104] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aUQKfJ4pN9ycmipm8TjlOgAAAQk"]
[Thu Dec 18 22:06:53.350461 2025] [:error] [pid 23556:tid 23566] [client 98.70.98.225:3813] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aUQKfRnmLlk3u5yt9kH1_QAAAAY"]
[Thu Dec 18 22:06:53.655749 2025] [:error] [pid 23556:tid 23583] [client 98.70.98.225:41110] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aUQKfRnmLlk3u5yt9kH1_gAAABc"]
[Thu Dec 18 22:06:54.332765 2025] [:error] [pid 23558:tid 23619] [client 98.70.98.225:3956] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aUQKfuHam9NbgPQa9uYz_gAAAMQ"]
[Thu Dec 18 22:06:54.665327 2025] [:error] [pid 23556:tid 23576] [client 98.70.98.225:3837] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aUQKfhnmLlk3u5yt9kH2AgAAABA"]
[Thu Dec 18 22:06:55.474501 2025] [:error] [pid 23556:tid 23567] [client 98.70.98.225:3942] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aUQKfxnmLlk3u5yt9kH2AwAAAAc"]
[Thu Dec 18 22:06:56.001491 2025] [:error] [pid 12239:tid 12262] [client 98.70.98.225:3952] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aUQKgNNnXxfGIuWO6akp1QAAApI"]
[Thu Dec 18 22:06:56.441693 2025] [:error] [pid 12239:tid 12249] [client 98.70.98.225:3791] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aUQKgNNnXxfGIuWO6akp1gAAAoU"]
[Thu Dec 18 22:06:56.915316 2025] [:error] [pid 23556:tid 23580] [client 98.70.98.225:3937] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUQKgBnmLlk3u5yt9kH2BAAAABQ"]
[Thu Dec 18 22:06:58.149950 2025] [:error] [pid 12035:tid 12060] [client 98.70.98.225:3586] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUQKgrcVHrNSHjCo-0qiQQAAAhE"]
[Thu Dec 18 22:06:58.765007 2025] [:error] [pid 24958:tid 24968] [client 98.70.98.225:4051] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUQKgskDOrUkd0wNm2HXXAAAAYc"]
[Thu Dec 18 22:06:59.610292 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:3618] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUQKg-Ham9NbgPQa9uY0BQAAANA"]
[Thu Dec 18 22:07:00.275287 2025] [:error] [pid 25357:tid 25369] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Dec 18 22:07:00.532155 2025] [:error] [pid 25357:tid 25361] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Thu Dec 18 22:07:00.720391 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Thu Dec 18 22:07:02.153250 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Thu Dec 18 22:07:02.524167 2025] [:error] [pid 25357:tid 25372] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/miansha.php
[Thu Dec 18 22:07:02.665867 2025] [:error] [pid 25357:tid 25375] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/test2.php
[Thu Dec 18 22:07:03.067834 2025] [:error] [pid 25357:tid 25371] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Dec 18 22:07:03.216009 2025] [:error] [pid 25357:tid 25383] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 18 22:07:03.363278 2025] [:error] [pid 25357:tid 25377] [client 98.70.98.225:4055] File does not exist: /usr/local/apache/htdocs/suspended-page/asas.php
[Thu Dec 18 22:07:03.519323 2025] [:error] [pid 25357:tid 25360] [client 98.70.98.225:4055] [client 98.70.98.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUQKh4aT7bsEXnJVfJd4AgAAAcE"]
[Thu Dec 18 22:07:03.914708 2025] [:error] [pid 12035:tid 12052] [client 98.70.98.225:3928] File does not exist: /usr/local/apache/htdocs/suspended-page/mans.php
[Thu Dec 18 22:07:04.058789 2025] [:error] [pid 12035:tid 12059] [client 98.70.98.225:3928] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aUQKiLcVHrNSHjCo-0qiRAAAAhA"]
[Thu Dec 18 22:07:04.798288 2025] [:error] [pid 12239:tid 12252] [client 98.70.98.225:37823] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aUQKiNNnXxfGIuWO6akp2QAAAog"]
[Thu Dec 18 22:07:05.291884 2025] [:error] [pid 23556:tid 23579] [client 98.70.98.225:4092] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aUQKiRnmLlk3u5yt9kH2BQAAABM"]
[Thu Dec 18 22:07:05.890586 2025] [:error] [pid 23556:tid 23569] [client 98.70.98.225:37799] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aUQKiRnmLlk3u5yt9kH2BwAAAAk"]
[Thu Dec 18 22:07:06.837874 2025] [:error] [pid 23556:tid 23566] [client 98.70.98.225:3589] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUQKihnmLlk3u5yt9kH2CgAAAAY"]
[Thu Dec 18 22:07:07.606960 2025] [:error] [pid 23556:tid 23565] [client 98.70.98.225:4079] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUQKixnmLlk3u5yt9kH2DQAAAAU"]
[Thu Dec 18 22:07:08.652767 2025] [:error] [pid 24958:tid 24962] [client 98.70.98.225:64009] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUQKjMkDOrUkd0wNm2HXYAAAAYE"]
[Thu Dec 18 22:07:09.423819 2025] [:error] [pid 24958:tid 24979] [client 98.70.98.225:41108] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aUQKjckDOrUkd0wNm2HXYQAAAZI"]
[Thu Dec 18 22:07:10.240372 2025] [:error] [pid 12239:tid 12250] [client 98.70.98.225:41129] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aUQKjtNnXxfGIuWO6akp2wAAAoY"]
[Thu Dec 18 22:07:11.163627 2025] [:error] [pid 24542:tid 24554] [client 98.70.98.225:64044] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aUQKj0tQz4H2oS3NrDYtuAAAAUo"]
[Thu Dec 18 22:07:12.157211 2025] [:error] [pid 12383:tid 12401] [client 98.70.98.225:41124] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aUQKkPdgllo9h1cyxGbRRAAAAs8"]
[Thu Dec 18 22:07:12.870702 2025] [:error] [pid 23558:tid 23633] [client 98.70.98.225:41117] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aUQKkOHam9NbgPQa9uY0FAAAANI"]
[Thu Dec 18 22:07:13.464219 2025] [:error] [pid 12239:tid 12266] [client 98.70.98.225:64059] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUQKkdNnXxfGIuWO6akp3gAAApY"]
[Thu Dec 18 22:07:14.237692 2025] [:error] [pid 12239:tid 12246] [client 98.70.98.225:3617] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUQKktNnXxfGIuWO6akp4QAAAoI"]
[Thu Dec 18 22:07:15.148426 2025] [:error] [pid 24542:tid 24566] [client 98.70.98.225:3604] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUQKk0tQz4H2oS3NrDYtwAAAAVY"]
[Thu Dec 18 22:07:15.936256 2025] [:error] [pid 12035:tid 12047] [client 98.70.98.225:41109] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUQKk7cVHrNSHjCo-0qiSAAAAgU"]
[Thu Dec 18 22:07:16.763848 2025] [:error] [pid 12035:tid 12046] [client 98.70.98.225:4048] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-wp.php"] [unique_id "aUQKlLcVHrNSHjCo-0qiSgAAAgQ"]
[Thu Dec 18 22:07:17.312906 2025] [:error] [pid 24958:tid 24974] [client 98.70.98.225:63590] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-wp.php"] [unique_id "aUQKlckDOrUkd0wNm2HXZgAAAY0"]
[Thu Dec 18 22:07:17.863705 2025] [:error] [pid 23558:tid 23636] [client 98.70.98.225:3908] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-wp.php"] [unique_id "aUQKleHam9NbgPQa9uY0HgAAANU"]
[Thu Dec 18 22:07:18.514068 2025] [:error] [pid 23558:tid 23634] [client 98.70.98.225:3930] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-wp.php"] [unique_id "aUQKluHam9NbgPQa9uY0IAAAANM"]
[Thu Dec 18 22:07:19.403206 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:3879] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUQKl-Ham9NbgPQa9uY0IQAAANA"]
[Thu Dec 18 22:07:19.972816 2025] [:error] [pid 23558:tid 23638] [client 98.70.98.225:3592] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUQKl-Ham9NbgPQa9uY0JAAAANc"]
[Thu Dec 18 22:07:20.705030 2025] [:error] [pid 23558:tid 23639] [client 98.70.98.225:3938] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUQKmOHam9NbgPQa9uY0KAAAANg"]
[Thu Dec 18 22:07:21.122497 2025] [:error] [pid 24433:tid 24436] [client 98.70.98.225:3847] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUQKmZ4pN9ycmipm8TjlTwAAAQA"]
[Thu Dec 18 22:07:21.999729 2025] [:error] [pid 23558:tid 23622] [client 98.70.98.225:41123] [client 98.70.98.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUQKmeHam9NbgPQa9uY0KwAAAMc"]
[Thu Dec 18 22:07:22.416448 2025] [:error] [pid 12035:tid 12063] [client 98.70.98.225:3590] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aUQKmrcVHrNSHjCo-0qiTAAAAhQ"]
[Thu Dec 18 22:07:23.214385 2025] [:error] [pid 24433:tid 24443] [client 98.70.98.225:64014] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aUQKm54pN9ycmipm8TjlUAAAAQc"]
[Thu Dec 18 22:07:24.038367 2025] [:error] [pid 24433:tid 24440] [client 98.70.98.225:37807] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aUQKnJ4pN9ycmipm8TjlUwAAAQQ"]
[Thu Dec 18 22:07:24.740965 2025] [:error] [pid 24542:tid 24546] [client 98.70.98.225:64036] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aUQKnEtQz4H2oS3NrDYtxgAAAUI"]
[Thu Dec 18 22:07:25.347279 2025] [:error] [pid 24542:tid 24545] [client 98.70.98.225:4077] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aUQKnUtQz4H2oS3NrDYtyAAAAUE"]
[Thu Dec 18 22:07:25.984930 2025] [:error] [pid 12239:tid 12253] [client 98.70.98.225:3788] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aUQKndNnXxfGIuWO6akp6QAAAok"]
[Thu Dec 18 22:07:26.944756 2025] [:error] [pid 24542:tid 24547] [client 98.70.98.225:62944] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aUQKnktQz4H2oS3NrDYtyQAAAUM"]
[Thu Dec 18 22:07:27.848225 2025] [:error] [pid 23645:tid 23667] [client 98.70.98.225:3825] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aUQKnzf_Rx0Y0ao_QJhp6AAAAJQ"]
[Thu Dec 18 22:07:28.490132 2025] [:error] [pid 24542:tid 24549] [client 98.70.98.225:3950] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUQKoEtQz4H2oS3NrDYtzQAAAUU"]
[Thu Dec 18 22:07:29.227696 2025] [:error] [pid 24542:tid 24552] [client 98.70.98.225:3595] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUQKoUtQz4H2oS3NrDYtzwAAAUg"]
[Thu Dec 18 22:07:30.457323 2025] [:error] [pid 12239:tid 12260] [client 98.70.98.225:4070] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUQKotNnXxfGIuWO6akp6gAAApA"]
[Thu Dec 18 22:07:31.223402 2025] [:error] [pid 23558:tid 23638] [client 98.70.98.225:37806] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUQKo-Ham9NbgPQa9uY0MAAAANc"]
[Thu Dec 18 22:07:32.365020 2025] [:error] [pid 24542:tid 24550] [client 98.70.98.225:4060] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aUQKpEtQz4H2oS3NrDYt1QAAAUY"]
[Thu Dec 18 22:07:32.940451 2025] [:error] [pid 12035:tid 12052] [client 98.70.98.225:3610] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aUQKpLcVHrNSHjCo-0qiTwAAAgo"]
[Thu Dec 18 22:07:33.439479 2025] [:error] [pid 12239:tid 12251] [client 98.70.98.225:41114] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aUQKpdNnXxfGIuWO6akp8gAAAoc"]
[Thu Dec 18 22:07:34.246714 2025] [:error] [pid 24542:tid 24568] [client 98.70.98.225:3587] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aUQKpktQz4H2oS3NrDYt2AAAAVg"]
[Thu Dec 18 22:07:35.000003 2025] [:error] [pid 24542:tid 24561] [client 98.70.98.225:41099] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aUQKpktQz4H2oS3NrDYt2gAAAVE"]
[Thu Dec 18 22:07:35.410157 2025] [:error] [pid 25357:tid 25362] [client 98.70.98.225:63561] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aUQKp4aT7bsEXnJVfJd4BwAAAcM"]
[Thu Dec 18 22:07:36.204172 2025] [:error] [pid 24433:tid 24437] [client 98.70.98.225:3891] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aUQKqJ4pN9ycmipm8TjlWwAAAQE"]
[Thu Dec 18 22:07:36.833415 2025] [:error] [pid 23558:tid 23639] [client 98.70.98.225:3925] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aUQKqOHam9NbgPQa9uY0NQAAANg"]
[Thu Dec 18 22:07:37.816098 2025] [:error] [pid 12239:tid 12247] [client 98.70.98.225:3609] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aUQKqdNnXxfGIuWO6akp-gAAAoM"]
[Thu Dec 18 22:07:38.467925 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:64030] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aUQKquHam9NbgPQa9uY0NwAAANE"]
[Thu Dec 18 22:07:39.691252 2025] [:error] [pid 25357:tid 25364] [client 98.70.98.225:4091] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aUQKq4aT7bsEXnJVfJd4CAAAAcU"]
[Thu Dec 18 22:07:40.391594 2025] [:error] [pid 23558:tid 23630] [client 98.70.98.225:4085] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aUQKrOHam9NbgPQa9uY0PgAAAM8"]
[Thu Dec 18 22:07:40.797161 2025] [:error] [pid 25357:tid 25366] [client 98.70.98.225:62914] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUQKrIaT7bsEXnJVfJd4CQAAAcc"]
[Thu Dec 18 22:07:41.468889 2025] [:error] [pid 12383:tid 12390] [client 98.70.98.225:64023] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUQKrfdgllo9h1cyxGbRRgAAAsQ"]
[Thu Dec 18 22:07:42.101616 2025] [:error] [pid 24542:tid 24548] [client 98.70.98.225:3960] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUQKrktQz4H2oS3NrDYt3wAAAUQ"]
[Thu Dec 18 22:07:42.971046 2025] [:error] [pid 12383:tid 12402] [client 98.70.98.225:3948] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUQKrvdgllo9h1cyxGbRSAAAAtA"]
[Thu Dec 18 22:07:43.448974 2025] [:error] [pid 12383:tid 12392] [client 98.70.98.225:3958] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUQKr_dgllo9h1cyxGbRSQAAAsY"]
[Thu Dec 18 22:07:44.150649 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:3964] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUQKsPdgllo9h1cyxGbRSwAAAtI"]
[Thu Dec 18 22:07:45.082228 2025] [:error] [pid 12239:tid 12255] [client 98.70.98.225:64010] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUQKsdNnXxfGIuWO6akp_gAAAos"]
[Thu Dec 18 22:07:45.982839 2025] [:error] [pid 12239:tid 12254] [client 98.70.98.225:3843] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aUQKsdNnXxfGIuWO6akp_wAAAoo"]
[Thu Dec 18 22:07:46.754073 2025] [:error] [pid 24542:tid 24568] [client 98.70.98.225:37787] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tgrs.php"] [unique_id "aUQKsktQz4H2oS3NrDYt5AAAAVg"]
[Thu Dec 18 22:07:48.423094 2025] [:error] [pid 24542:tid 24557] [client 98.70.98.225:37814] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tgrs.php"] [unique_id "aUQKtEtQz4H2oS3NrDYt5wAAAU0"]
[Thu Dec 18 22:07:49.147526 2025] [:error] [pid 25357:tid 25378] [client 98.70.98.225:37769] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tgrs.php"] [unique_id "aUQKtYaT7bsEXnJVfJd4DwAAAdM"]
[Thu Dec 18 22:07:50.168572 2025] [:error] [pid 24542:tid 24549] [client 98.70.98.225:64021] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tgrs.php"] [unique_id "aUQKtktQz4H2oS3NrDYt7AAAAUU"]
[Thu Dec 18 22:07:52.603026 2025] [:error] [pid 25357:tid 25367] [client 98.70.98.225:4069] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aUQKuIaT7bsEXnJVfJd4FwAAAcg"]
[Thu Dec 18 22:07:53.024946 2025] [:error] [pid 24433:tid 24449] [client 98.70.98.225:41097] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aUQKuZ4pN9ycmipm8TjlYAAAAQ0"]
[Thu Dec 18 22:07:53.693079 2025] [:error] [pid 24433:tid 24439] [client 98.70.98.225:3820] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aUQKuZ4pN9ycmipm8TjlYQAAAQM"]
[Thu Dec 18 22:07:54.191353 2025] [:error] [pid 23645:tid 23649] [client 98.70.98.225:41111] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aUQKujf_Rx0Y0ao_QJhp6wAAAII"]
[Thu Dec 18 22:07:54.988229 2025] [:error] [pid 23645:tid 23656] [client 98.70.98.225:37781] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUQKujf_Rx0Y0ao_QJhp7AAAAIk"]
[Thu Dec 18 22:07:55.645397 2025] [:error] [pid 24542:tid 24560] [client 98.70.98.225:62958] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUQKu0tQz4H2oS3NrDYt7gAAAVA"]
[Thu Dec 18 22:07:56.498416 2025] [:error] [pid 25357:tid 25380] [client 98.70.98.225:3943] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUQKvIaT7bsEXnJVfJd4HQAAAdU"]
[Thu Dec 18 22:07:57.307098 2025] [:error] [pid 23558:tid 23637] [client 98.70.98.225:3873] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUQKveHam9NbgPQa9uY0TwAAANY"]
[Thu Dec 18 22:07:57.810906 2025] [:error] [pid 24433:tid 24436] [client 98.70.98.225:64034] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aUQKvZ4pN9ycmipm8TjlZwAAAQA"]
[Thu Dec 18 22:07:58.512614 2025] [:error] [pid 23558:tid 23628] [client 98.70.98.225:64019] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aUQKvuHam9NbgPQa9uY0UQAAAM0"]
[Thu Dec 18 22:07:58.923608 2025] [:error] [pid 23556:tid 23571] [client 98.70.98.225:41105] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aUQKvhnmLlk3u5yt9kH2GgAAAAs"]
[Thu Dec 18 22:07:59.423636 2025] [:error] [pid 23558:tid 23639] [client 98.70.98.225:3621] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aUQKv-Ham9NbgPQa9uY0UwAAANg"]
[Thu Dec 18 22:07:59.899979 2025] [:error] [pid 23558:tid 23632] [client 98.70.98.225:4061] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUQKv-Ham9NbgPQa9uY0VgAAANE"]
[Thu Dec 18 22:08:00.401152 2025] [:error] [pid 12383:tid 12392] [client 98.70.98.225:4056] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUQKwPdgllo9h1cyxGbRUwAAAsY"]
[Thu Dec 18 22:08:00.858185 2025] [:error] [pid 23558:tid 23622] [client 98.70.98.225:64055] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUQKwOHam9NbgPQa9uY0WQAAAMc"]
[Thu Dec 18 22:08:01.423598 2025] [:error] [pid 23558:tid 23631] [client 98.70.98.225:3612] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUQKweHam9NbgPQa9uY0WgAAANA"]
[Thu Dec 18 22:08:02.290030 2025] [:error] [pid 23556:tid 23580] [client 98.70.98.225:62918] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxz.php"] [unique_id "aUQKwhnmLlk3u5yt9kH2HAAAABQ"]
[Thu Dec 18 22:08:02.732948 2025] [:error] [pid 12383:tid 12404] [client 98.70.98.225:3885] [client 98.70.98.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxz.php"] [unique_id "aUQKwvdgllo9h1cyxGbRVgAAAtI"]
[Thu Dec 18 22:08:03.252505 2025] [:error] [pid 24433:tid 24447] [client 98.70.98.225:64033] File does not exist: /usr/local/apache/htdocs/suspended-page/zxz.php
[Fri Dec 19 02:35:52.995271 2025] [:error] [pid 65011:tid 65049] [client 164.92.226.45:53851] [client 164.92.226.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.226.45, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aURJiNqlBhOfWMNHM-7XIAAAAUQ"]
[Fri Dec 19 02:35:52.999369 2025] [:error] [pid 65011:tid 65049] [client 164.92.226.45:53851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 19 03:34:14.356063 2025] [:error] [pid 45352:tid 45365] [client 43.157.43.147:48330] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aURXNozIKESYVHWAWa1E_AAAAMs"]
[Fri Dec 19 03:38:22.984400 2025] [:error] [pid 45649:tid 45674] [client 170.64.131.247:10918] [client 170.64.131.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aURYLh_EJ0r6hW9kketOoAAAARY"]
[Fri Dec 19 03:38:24.948679 2025] [:error] [pid 45259:tid 45308] [client 170.64.131.247:20500] [client 170.64.131.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aURYMDd0pMbxR7NNLuoCnAAAAFI"]
[Fri Dec 19 03:46:52.527225 2025] [:error] [pid 26308:tid 26333] [client 170.106.73.216:56168] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aURaLIc_OZFIItn2uH9J_QAAAQs"]
[Fri Dec 19 07:20:52.198685 2025] [:error] [pid 47035:tid 47037] [client 177.5.213.186:61974] [client 177.5.213.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.5.213.186, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUSMVIy3wL45ZxTVK_U0QAAAAYA"]
[Fri Dec 19 07:20:52.203833 2025] [:error] [pid 47035:tid 47037] [client 177.5.213.186:61974] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 19 08:47:22.077462 2025] [:error] [pid 61922:tid 61969] [client 1.15.52.154:46938] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUSgmhsDXYvsvN0FFlBeAwAAAFE"]
[Fri Dec 19 12:50:26.301995 2025] [:error] [pid 20675:tid 20692] [client 103.65.236.149:53689] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aUTZkrMyJ3XqeDRsbQnEDAAAAQQ"]
[Fri Dec 19 15:12:38.090611 2025] [:error] [pid 20580:tid 20602] [client 182.42.111.156:45298] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUT65kmd1op_YdAdgR02xAAAAFA"]
[Fri Dec 19 20:44:14.231194 2025] [:error] [pid 20580:tid 20606] [client 129.226.213.145:59558] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUVInkmd1op_YdAdgR2hQwAAAFQ"]
[Fri Dec 19 21:21:42.939862 2025] [:error] [pid 16026:tid 16044] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/index4.php
[Fri Dec 19 21:21:43.108569 2025] [:error] [pid 16026:tid 16052] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/panelx.php
[Fri Dec 19 21:21:43.290844 2025] [:error] [pid 16026:tid 16043] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/bekle.php
[Fri Dec 19 21:21:43.465836 2025] [:error] [pid 16026:tid 16030] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/auths.php
[Fri Dec 19 21:21:43.620936 2025] [:error] [pid 16026:tid 16041] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/rasp.php
[Fri Dec 19 21:21:44.248004 2025] [:error] [pid 16026:tid 16032] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/_inc-rasberry0342.php
[Fri Dec 19 21:21:44.390701 2025] [:error] [pid 16026:tid 16031] [client 74.225.161.232:12707] File does not exist: /usr/local/apache/htdocs/suspended-page/router.php
[Fri Dec 19 21:21:44.555778 2025] [:error] [pid 16026:tid 16036] [client 74.225.161.232:12707] [client 74.225.161.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php"] [unique_id "aUVRaELVfhf4Jb3enmNCBAAAAUc"]
[Fri Dec 19 21:21:48.170382 2025] [:error] [pid 20581:tid 20615] [client 74.225.161.232:12903] File does not exist: /usr/local/apache/htdocs/suspended-page/blackhat.php
[Fri Dec 19 21:21:48.316383 2025] [:error] [pid 20581:tid 20639] [client 74.225.161.232:12903] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Fri Dec 19 21:21:48.595469 2025] [:error] [pid 20581:tid 20628] [client 74.225.161.232:12903] File does not exist: /usr/local/apache/htdocs/suspended-page/1s.php
[Fri Dec 19 21:21:48.871361 2025] [:error] [pid 20581:tid 20622] [client 74.225.161.232:12903] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aUVRbPxEv7WXNhnFD1mOUwAAAIc"]
[Fri Dec 19 21:21:51.573310 2025] [:error] [pid 20675:tid 20707] [client 74.225.161.232:12691] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aUVRb7MyJ3XqeDRsbQmm8gAAARM"]
[Fri Dec 19 21:21:56.548140 2025] [:error] [pid 20581:tid 20638] [client 74.225.161.232:12001] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aUVRdPxEv7WXNhnFD1mOWAAAAJc"]
[Fri Dec 19 21:22:11.851677 2025] [:error] [pid 41451:tid 41469] [client 74.225.161.232:15486] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logs.php"] [unique_id "aUVRgwYXFn-DbZghZBHlEgAAAA8"]
[Fri Dec 19 21:22:26.394719 2025] [:error] [pid 18438:tid 18458] [client 74.225.161.232:11980] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aUVRkpRArClWV1iij_SfLQAAAZE"]
[Fri Dec 19 21:22:29.461217 2025] [:error] [pid 16026:tid 16052] [client 74.225.161.232:7755] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aUVRlULVfhf4Jb3enmNCTQAAAVc"]
[Fri Dec 19 21:22:41.963981 2025] [:error] [pid 18438:tid 18464] [client 74.225.161.232:13318] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/testphp.php"] [unique_id "aUVRoZRArClWV1iij_SfSgAAAZc"]
[Fri Dec 19 21:22:46.707270 2025] [:error] [pid 20582:tid 20648] [client 74.225.161.232:7805] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/testphp.php"] [unique_id "aUVRpspAnrkQKZ4b5gZBFAAAAMY"]
[Fri Dec 19 21:22:50.072704 2025] [:error] [pid 41451:tid 41477] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/testphp.php
[Fri Dec 19 21:22:50.229769 2025] [:error] [pid 41451:tid 41467] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/logo_img.php
[Fri Dec 19 21:22:50.419167 2025] [:error] [pid 41451:tid 41455] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/tempfs.php
[Fri Dec 19 21:22:50.853288 2025] [:error] [pid 41451:tid 41460] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Fri Dec 19 21:22:51.000523 2025] [:error] [pid 41451:tid 41474] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/dump.php
[Fri Dec 19 21:22:51.175781 2025] [:error] [pid 41451:tid 41472] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/joomla_hashes.php
[Fri Dec 19 21:22:51.334425 2025] [:error] [pid 41451:tid 41478] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/indexs.php
[Fri Dec 19 21:22:51.488019 2025] [:error] [pid 41451:tid 41454] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Dec 19 21:22:51.659609 2025] [:error] [pid 41451:tid 41465] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Dec 19 21:22:51.858776 2025] [:error] [pid 41451:tid 41476] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/mage.php
[Fri Dec 19 21:22:52.058671 2025] [:error] [pid 41451:tid 41466] [client 74.225.161.232:7748] File does not exist: /usr/local/apache/htdocs/suspended-page/conf.php
[Fri Dec 19 21:22:52.241324 2025] [:error] [pid 41451:tid 41458] [client 74.225.161.232:7748] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUVRrAYXFn-DbZghZBHlOAAAAAQ"]
[Fri Dec 19 21:24:53.653349 2025] [:error] [pid 20581:tid 20635] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/newsletter_signup.php
[Fri Dec 19 21:24:53.803285 2025] [:error] [pid 20581:tid 20637] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/index-2.php
[Fri Dec 19 21:24:53.963844 2025] [:error] [pid 20581:tid 20617] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Fri Dec 19 21:24:54.155487 2025] [:error] [pid 20581:tid 20631] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/personal.php
[Fri Dec 19 21:24:54.322947 2025] [:error] [pid 20581:tid 20620] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/mob.php
[Fri Dec 19 21:24:54.505969 2025] [:error] [pid 20581:tid 20615] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/shippings.php
[Fri Dec 19 21:24:54.677431 2025] [:error] [pid 20581:tid 20638] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.6.6.php
[Fri Dec 19 21:24:54.834896 2025] [:error] [pid 20581:tid 20626] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.6.5.php
[Fri Dec 19 21:24:55.024860 2025] [:error] [pid 20581:tid 20616] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.6.4.php
[Fri Dec 19 21:24:55.220174 2025] [:error] [pid 20581:tid 20630] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/logout.php
[Fri Dec 19 21:24:55.371472 2025] [:error] [pid 20581:tid 20624] [client 74.225.161.232:11877] File does not exist: /usr/local/apache/htdocs/suspended-page/signin.php
[Fri Dec 19 21:24:55.524499 2025] [:error] [pid 20581:tid 20635] [client 74.225.161.232:11877] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/weblinks.php"] [unique_id "aUVSJ_xEv7WXNhnFD1mPSAAAAJQ"]
[Fri Dec 19 21:25:01.978019 2025] [:error] [pid 20581:tid 20639] [client 74.225.161.232:12187] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/weblinks.php"] [unique_id "aUVSLfxEv7WXNhnFD1mPTwAAAJg"]
[Fri Dec 19 21:25:12.270454 2025] [:error] [pid 20582:tid 20658] [client 74.225.161.232:11895] [client 74.225.161.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbv.php"] [unique_id "aUVSOMpAnrkQKZ4b5gZCpgAAANA"]
[Fri Dec 19 21:26:11.501513 2025] [:error] [pid 20580:tid 20610] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/logins.php
[Fri Dec 19 21:26:11.681775 2025] [:error] [pid 20580:tid 20608] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/pac.php
[Fri Dec 19 21:26:11.833598 2025] [:error] [pid 20580:tid 20603] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.1.php
[Fri Dec 19 21:26:12.234919 2025] [:error] [pid 20580:tid 20597] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.2.php
[Fri Dec 19 21:26:12.443793 2025] [:error] [pid 20580:tid 20600] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.3.php
[Fri Dec 19 21:26:12.674399 2025] [:error] [pid 20580:tid 20605] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.4.php
[Fri Dec 19 21:26:13.076898 2025] [:error] [pid 20580:tid 20598] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.5.php
[Fri Dec 19 21:26:13.373185 2025] [:error] [pid 20580:tid 20602] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.6.php
[Fri Dec 19 21:26:13.570665 2025] [:error] [pid 20580:tid 20593] [client 74.225.161.232:7365] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.2.3-en.php
[Fri Dec 19 21:48:10.075134 2025] [:error] [pid 20582:tid 20656] [client 114.80.36.40:42226] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUVXmspAnrkQKZ4b5gZJ0QAAAM4"]
[Sat Dec 20 00:43:25.236808 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:44530] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.com/
[Sat Dec 20 00:43:25.416427 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:44530] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:25.783905 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:44530] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:25.960142 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:44530] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:26.138802 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:44530] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:26.326168 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:44530] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:30.388222 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:44530] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/function.php"] [unique_id "aUWAshzVxeBEODU8mCBxHQAAAMk"], referer: https://www.google.com/
[Sat Dec 20 00:43:30.808174 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:42405] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/function.php"] [unique_id "aUWAso12VmSu4NX34PTPswAAAIQ"], referer: https://www.bing.com/
[Sat Dec 20 00:43:31.198254 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:44524] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/function.php"] [unique_id "aUWAsxzVxeBEODU8mCBxHgAAANg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:43:33.400894 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:45748] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Sat Dec 20 00:43:35.932688 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:45748] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aUWAt-TCMRSRXPuXZF_36wAAARU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:43:36.376025 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:44418] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUWAuOTCMRSRXPuXZF_37AAAARc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:43:36.756936 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:45721] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUWAuOTCMRSRXPuXZF_37QAAAQ8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:43:38.661883 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:45722] File does not exist: /usr/local/apache/htdocs/suspended-page/nice.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:38.852660 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:45722] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:39.224493 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:45722] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:39.398062 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:45722] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:39.604455 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:45722] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:39.782161 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:45722] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aUWAuxzVxeBEODU8mCBxLQAAAMM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:43:40.152990 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ahsera.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:40.390879 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-easy.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:40.567817 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-video.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:40.743128 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:40.939877 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-http-requests-hooks.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:41.113395 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:41.284453 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:41.476201 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/class-envato-market-api.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:41.657966 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-ioxi.php, referer: https://www.google.com/
[Sat Dec 20 00:43:41.847396 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:42.028026 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp2.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:42.204687 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp3.php, referer: https://www.google.com/
[Sat Dec 20 00:43:42.407590 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp4.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:42.657961 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php, referer: https://www.google.de/
[Sat Dec 20 00:43:42.842158 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-23.php, referer: https://www.google.de/
[Sat Dec 20 00:43:43.035035 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:43.222414 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/11index.php, referer: https://www.google.com/
[Sat Dec 20 00:43:43.403751 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/2index.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:43.581734 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/3index.php, referer: https://www.google.de/
[Sat Dec 20 00:43:43.755016 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wrong_datlib.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:43.933032 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-adminincludesclass-wp-media-list-data.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:44.104079 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.google.de/
[Sat Dec 20 00:43:44.331871 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:44.507409 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:44.657489 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/alwso.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:44.860390 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/ups.php, referer: https://www.google.com/
[Sat Dec 20 00:43:45.038885 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/media-admin.php, referer: https://www.google.com/
[Sat Dec 20 00:43:45.230797 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php, referer: https://www.google.de/
[Sat Dec 20 00:43:45.416671 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/sym403.php, referer: https://www.google.de/
[Sat Dec 20 00:43:45.643084 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/symlink.php, referer: https://www.google.de/
[Sat Dec 20 00:43:45.834655 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.google.de/
[Sat Dec 20 00:43:46.022528 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:46.268035 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/data.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:47.766287 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.de/
[Sat Dec 20 00:43:47.950629 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:48.126835 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php, referer: https://www.google.de/
[Sat Dec 20 00:43:48.298639 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/shx.php, referer: https://www.google.de/
[Sat Dec 20 00:43:48.472081 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.com/
[Sat Dec 20 00:43:48.646239 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:48.920148 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:49.162036 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/FoxWSO.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:49.340419 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:49.513856 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.de/
[Sat Dec 20 00:43:49.751388 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:49.948837 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/imagesvuln.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:50.315184 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-form.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:50.481014 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:50.736175 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:50.926638 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/0byte.php, referer: https://www.google.com/
[Sat Dec 20 00:43:51.096331 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:51.331421 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:51.544968 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:51.773731 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wso.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:51.950356 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/qindex.php, referer: https://www.google.de/
[Sat Dec 20 00:43:52.126309 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:52.299599 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/minimo.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:52.475093 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:52.728510 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/V3.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:52.904443 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/V5.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:53.084939 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:53.277399 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:53.501902 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:53.704261 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:53.884081 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/777.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:54.077995 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/defau1t.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:54.267116 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php, referer: https://www.google.com/
[Sat Dec 20 00:43:54.460289 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/xox.php, referer: https://www.google.com/
[Sat Dec 20 00:43:54.649926 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php, referer: https://www.google.de/
[Sat Dec 20 00:43:54.832284 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Sat Dec 20 00:43:55.025849 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/sindex.php, referer: https://www.google.de/
[Sat Dec 20 00:43:55.212908 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/baindex.php, referer: https://www.google.de/
[Sat Dec 20 00:43:55.387486 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/wi.php, referer: https://www.google.fr/
[Sat Dec 20 00:43:55.554290 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:55.723631 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/root.php, referer: https://www.google.com/
[Sat Dec 20 00:43:57.257233 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/nee.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:43:57.430641 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:57.620757 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php, referer: https://www.bing.com/
[Sat Dec 20 00:43:57.810717 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php, referer: https://www.google.de/
[Sat Dec 20 00:43:57.989972 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:58.169996 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php, referer: https://www.google.de/
[Sat Dec 20 00:43:58.432509 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://www.google.com/
[Sat Dec 20 00:43:58.692517 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:43:58.870182 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:59.075392 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/7yn.php, referer: https://www.google.de/
[Sat Dec 20 00:43:59.251707 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php, referer: https://www.google.de/
[Sat Dec 20 00:43:59.431334 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php, referer: https://www.google.de/
[Sat Dec 20 00:43:59.624759 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/xindex.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:43:59.824991 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/kindex.php, referer: https://www.google.de/
[Sat Dec 20 00:44:00.027670 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/FoxWSOv1.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:00.276906 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/alf.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:00.453269 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:00.632197 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/lf.php, referer: https://www.google.de/
[Sat Dec 20 00:44:00.856415 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/WSO.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:01.523335 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php, referer: https://www.google.com/
[Sat Dec 20 00:44:01.726215 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:01.914928 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:02.143446 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/if.php, referer: https://www.google.com/
[Sat Dec 20 00:44:02.374783 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:42429] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:02.865874 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/mrjn.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:03.065759 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/kn.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:03.241726 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/3301.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:03.456676 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php, referer: https://www.google.de/
[Sat Dec 20 00:44:03.708437 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:03.917357 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/anone.php, referer: https://www.google.com/
[Sat Dec 20 00:44:04.094864 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configer.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:04.279646 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ad.php, referer: https://www.google.com/
[Sat Dec 20 00:44:04.473245 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/send.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:04.636494 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php, referer: https://www.google.com/
[Sat Dec 20 00:44:04.819060 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/.wp-cache.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:05.070493 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/sendmail.php, referer: https://www.google.com/
[Sat Dec 20 00:44:05.238082 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/rahma.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:05.406748 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/nasgor.php, referer: https://www.google.de/
[Sat Dec 20 00:44:05.579845 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confirm.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:05.751074 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa123.php, referer: https://www.google.de/
[Sat Dec 20 00:44:05.932641 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:06.183811 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:06.381897 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-one.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:06.568992 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/alexus.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:06.761101 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1337.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:06.935286 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:07.113805 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:42381] File does not exist: /usr/local/apache/htdocs/suspended-page/it.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:07.335098 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:42381] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "aUWA1412VmSu4NX34PTP4wAAAJQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:07.784097 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:45730] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "aUWA1-TCMRSRXPuXZF_4DgAAAQs"], referer: https://www.bing.com/
[Sat Dec 20 00:44:08.232129 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/kiss.php, referer: https://www.google.de/
[Sat Dec 20 00:44:08.404088 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:08.696833 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/owl.php, referer: https://www.google.de/
[Sat Dec 20 00:44:08.884492 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php, referer: https://www.google.de/
[Sat Dec 20 00:44:09.103282 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/ohayo.php, referer: https://www.google.de/
[Sat Dec 20 00:44:09.358912 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:09.544266 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/cms.php, referer: https://www.google.com/
[Sat Dec 20 00:44:09.728528 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:09.932148 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/Gel.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:10.105806 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/41.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:10.279463 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/4price.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:10.540792 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/.fk.php, referer: https://www.google.com/
[Sat Dec 20 00:44:10.707344 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:10.908389 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/alexuse.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:11.084412 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/Sendemail.php, referer: https://www.google.com/
[Sat Dec 20 00:44:11.280960 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.google.com/
[Sat Dec 20 00:44:11.460686 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/olu.php, referer: https://www.google.de/
[Sat Dec 20 00:44:11.629224 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php, referer: https://www.google.com/
[Sat Dec 20 00:44:11.831959 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:12.593177 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:12.784263 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/alexusmailer 2.0.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:44:12.964441 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:13.214403 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/alexus-mailer.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:13.392678 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php, referer: https://www.google.de/
[Sat Dec 20 00:44:13.594308 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wso2.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:13.768812 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:13.955187 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:14.159347 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:14.334281 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:14.508958 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiig.php, referer: https://www.google.com/
[Sat Dec 20 00:44:14.678768 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/file-manager.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:14.863597 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:17.786885 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:17.970387 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.google.de/
[Sat Dec 20 00:44:18.188624 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:59103] File does not exist: /usr/local/apache/htdocs/suspended-page/pomo.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:20.675066 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:59103] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "aUWA5CxTWUmlILwAM_ekHAAAAAA"], referer: https://www.google.de/
[Sat Dec 20 00:44:21.041478 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:63369] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/pomo.php"] [unique_id "aUWA5SxTWUmlILwAM_ekHQAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:44:21.394291 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:42399] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/pomo.php"] [unique_id "aUWA5SxTWUmlILwAM_ekHgAAAAw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:23.021328 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:44475] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:23.203441 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:44475] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php"] [unique_id "aUWA5412VmSu4NX34PTP7gAAAJA"], referer: https://www.google.fr/
[Sat Dec 20 00:44:24.805381 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:6382] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:25.693176 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:6382] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-24.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:25.965531 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:6382] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUWA6SxTWUmlILwAM_ekLwAAABc"], referer: https://www.google.com/
[Sat Dec 20 00:44:25.969474 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:6382] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sat Dec 20 00:44:27.079488 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:6382] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUWA6yxTWUmlILwAM_ekOAAAAA8"], referer: https://www.google.de/
[Sat Dec 20 00:44:27.427044 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:42389] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUWA6xzVxeBEODU8mCBxVAAAAM0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:28.212312 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:42384] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks-other.php"] [unique_id "aUWA7OTCMRSRXPuXZF_4LgAAARI"], referer: https://www.google.fr/
[Sat Dec 20 00:44:30.091828 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:44514] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aUWA7o12VmSu4NX34PTP_QAAAII"], referer: https://www.google.de/
[Sat Dec 20 00:44:31.439814 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:63422] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUWA7yxTWUmlILwAM_ekQQAAAAI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:44:31.783020 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:6395] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUWA7412VmSu4NX34PTP_wAAAIs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:44:32.117647 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:44490] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUWA8BzVxeBEODU8mCBxWQAAANY"], referer: https://www.google.fr/
[Sat Dec 20 00:44:32.737272 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:63988] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUWA8OTCMRSRXPuXZF_4NQAAAQI"], referer: https://www.google.com/
[Sat Dec 20 00:44:33.174625 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:6355] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aUWA8eTCMRSRXPuXZF_4NwAAARc"], referer: https://www.google.com/
[Sat Dec 20 00:44:33.878487 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:42382] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUWA8eTCMRSRXPuXZF_4OgAAARI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:44:35.135276 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:63972] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aUWA8xzVxeBEODU8mCBxYAAAANU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:35.991163 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:44466] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUWA8xzVxeBEODU8mCBxYwAAANM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:36.359705 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:59097] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUWA9I12VmSu4NX34PTQBAAAAIA"], referer: https://www.bing.com/
[Sat Dec 20 00:44:37.337463 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:45745] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUWA9RzVxeBEODU8mCBxaQAAANY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:37.989440 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:63993] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aUWA9RzVxeBEODU8mCBxbAAAAM4"], referer: https://www.bing.com/
[Sat Dec 20 00:44:38.332815 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:6374] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aUWA9hzVxeBEODU8mCBxbwAAANU"], referer: https://www.google.com/
[Sat Dec 20 00:44:39.090877 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:44447] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/nice.php, referer: https://www.google.com/
[Sat Dec 20 00:44:42.312216 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:44447] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aUWA-ixTWUmlILwAM_ekWQAAAAE"], referer: https://www.google.de/
[Sat Dec 20 00:44:42.893269 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:42428] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUWA-uTCMRSRXPuXZF_4QgAAAQE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:44:43.332850 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:45708] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lf.php"] [unique_id "aUWA-0JMTU3r4hb8qAlNJgAAAFE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:44:43.738008 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:63411] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer2.8.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:43.921894 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:63411] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php, referer: https://www.bing.com/
[Sat Dec 20 00:44:44.100380 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:63411] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:44.267278 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:63411] File does not exist: /usr/local/apache/htdocs/suspended-page/28.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:44.437478 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:63411] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-abupee.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:44:46.523416 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:63411] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-abupee.php"] [unique_id "aUWA_kJMTU3r4hb8qAlNOAAAAEg"], referer: https://www.google.fr/
[Sat Dec 20 00:44:46.895822 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:63409] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/wp-abupee.php"] [unique_id "aUWA_hzVxeBEODU8mCBxdAAAAMg"], referer: https://www.google.com/
[Sat Dec 20 00:44:48.684257 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:53037] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/themes.php"] [unique_id "aUWBACxTWUmlILwAM_ekagAAABU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:44:49.117421 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:6744] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/themes.php"] [unique_id "aUWBAeTCMRSRXPuXZF_4RwAAARY"], referer: https://www.google.de/
[Sat Dec 20 00:44:49.729165 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:63386] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/themes.php"] [unique_id "aUWBAeTCMRSRXPuXZF_4SQAAARE"], referer: https://www.google.com/
[Sat Dec 20 00:44:50.590801 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:6783] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/themes.php"] [unique_id "aUWBAkJMTU3r4hb8qAlNPQAAAEI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:44:51.146529 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:53023] File does not exist: /usr/local/apache/htdocs/suspended-page/avaa.php, referer: https://www.google.com/
[Sat Dec 20 00:44:51.318562 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:53023] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.de/
[Sat Dec 20 00:44:51.543762 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:53023] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUWBAxzVxeBEODU8mCBxeQAAAM4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:44:51.724885 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:53023] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUWBAxzVxeBEODU8mCBxegAAAMs"], referer: https://www.google.de/
[Sat Dec 20 00:44:52.090150 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:6774] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php, referer: https://www.google.de/
[Sat Dec 20 00:44:52.437703 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:6774] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/test.php"] [unique_id "aUWBBBzVxeBEODU8mCBxfgAAAMQ"], referer: https://www.google.com/
[Sat Dec 20 00:44:53.519375 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:6353] File does not exist: /usr/local/apache/htdocs/suspended-page/owlmailer.php, referer: https://www.google.fr/
[Sat Dec 20 00:44:53.726107 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:6353] File does not exist: /usr/local/apache/htdocs/suspended-page/qfjnelot.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:44:59.049477 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:6353] File does not exist: /usr/local/apache/htdocs/suspended-page/haxorsecv2.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:45:00.164692 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:6353] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/qfjnelot.php"] [unique_id "aUWBDCxTWUmlILwAM_ekhgAAAAY"], referer: https://www.google.fr/
[Sat Dec 20 00:45:04.067589 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:53033] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aUWBEBzVxeBEODU8mCBxhwAAAMs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:45:04.435609 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:53033] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aUWBEBzVxeBEODU8mCBxiQAAAM0"], referer: https://www.google.de/
[Sat Dec 20 00:45:05.303987 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:53033] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wso.php"] [unique_id "aUWBERzVxeBEODU8mCBxjwAAAMI"], referer: https://www.google.fr/
[Sat Dec 20 00:45:06.652032 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:53028] File does not exist: /usr/local/apache/htdocs/suspended-page/defaul1.php, referer: https://www.google.fr/
[Sat Dec 20 00:45:06.806765 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:53028] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUWBEkJMTU3r4hb8qAlNRAAAAEY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:08.898941 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:53024] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aUWBFCxTWUmlILwAM_eklQAAABQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:09.507064 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:53024] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php, referer: https://www.google.de/
[Sat Dec 20 00:45:09.741908 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:53024] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUWBFSxTWUmlILwAM_ekmwAAAAo"], referer: https://www.bing.com/
[Sat Dec 20 00:45:12.941994 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:42885] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aUWBGCxTWUmlILwAM_eknwAAABQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:13.267490 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:6766] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUWBGUJMTU3r4hb8qAlNRgAAAEo"], referer: https://www.google.fr/
[Sat Dec 20 00:45:14.598196 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:42907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php, referer: https://www.google.com/
[Sat Dec 20 00:45:15.921413 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:42907] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php, referer: https://www.google.com/
[Sat Dec 20 00:45:16.097120 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:42907] File does not exist: /usr/local/apache/htdocs/suspended-page/alfadheat.php, referer: https://www.google.com/
[Sat Dec 20 00:45:16.940340 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:42907] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUWBHCxTWUmlILwAM_ektAAAABg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:45:18.009787 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:6725] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/themes.php"] [unique_id "aUWBHo12VmSu4NX34PTQIgAAAIc"], referer: https://www.bing.com/
[Sat Dec 20 00:45:18.437739 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:6733] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aUWBHuTCMRSRXPuXZF_4aQAAAQw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:45:18.773524 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:42911] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:45:18.978439 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:42911] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-login.php"] [unique_id "aUWBHuTCMRSRXPuXZF_4bAAAAQU"], referer: https://www.google.de/
[Sat Dec 20 00:45:19.324612 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:6597] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/plugins.php"] [unique_id "aUWBH412VmSu4NX34PTQIwAAAIo"], referer: https://www.yahoo.com/
[Sat Dec 20 00:45:20.214406 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:46373] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aUWBII12VmSu4NX34PTQKAAAAII"], referer: https://www.google.com/
[Sat Dec 20 00:45:20.832279 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:6759] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wordpresss3cll/wp-login.php"] [unique_id "aUWBIBzVxeBEODU8mCBxogAAANM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:21.182948 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:6759] File does not exist: /usr/local/apache/htdocs/suspended-page/504.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:45:21.399864 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:6759] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:45:21.565096 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:6759] File does not exist: /usr/local/apache/htdocs/suspended-page/Mshell.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:45:21.767920 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:6759] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-rex.php, referer: https://www.google.fr/
[Sat Dec 20 00:45:22.132253 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:6759] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php, referer: https://www.google.fr/
[Sat Dec 20 00:45:22.297066 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:6759] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aUWBIhzVxeBEODU8mCBxqgAAANE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:45:22.641163 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:6611] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:45:22.832720 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:6611] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:45:24.961794 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:6611] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php"] [unique_id "aUWBJCxTWUmlILwAM_ekwAAAAAI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:25.379183 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:6927] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/atomlib.php"] [unique_id "aUWBJUJMTU3r4hb8qAlNSQAAAEQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:25.725610 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:50625] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:45:26.065883 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:50625] File does not exist: /usr/local/apache/htdocs/suspended-page/million.php, referer: https://www.google.fr/
[Sat Dec 20 00:45:26.270728 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:50625] File does not exist: /usr/local/apache/htdocs/suspended-page/4pric.php, referer: https://www.google.de/
[Sat Dec 20 00:45:26.831087 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:50625] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:45:29.216749 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:50625] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/class.api.php"] [unique_id "aUWBKY12VmSu4NX34PTQPgAAAIw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:29.613731 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:6764] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/class.api.php"] [unique_id "aUWBKUJMTU3r4hb8qAlNTQAAAEk"], referer: https://duckduckgo.com/
[Sat Dec 20 00:45:29.997483 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:6334] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class.api.php"] [unique_id "aUWBKUJMTU3r4hb8qAlNTwAAAE4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:45:30.315588 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:57839] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/class.api.php"] [unique_id "aUWBKkJMTU3r4hb8qAlNUQAAAE8"], referer: https://www.google.de/
[Sat Dec 20 00:45:30.719393 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:50631] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/class.api.php"] [unique_id "aUWBKuTCMRSRXPuXZF_4hAAAAQE"], referer: https://www.google.fr/
[Sat Dec 20 00:45:31.263596 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class.api.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:45:35.457938 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:45:35.766531 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/bala.php, referer: https://www.google.de/
[Sat Dec 20 00:45:36.056871 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/xltavrat.php, referer: https://www.bing.com/
[Sat Dec 20 00:45:36.266047 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/.wp-back.phP, referer: https://www.google.fr/
[Sat Dec 20 00:45:36.442881 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-commentin.php, referer: https://www.google.de/
[Sat Dec 20 00:45:36.674620 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/jetpack.php, referer: https://www.bing.com/
[Sat Dec 20 00:45:37.880178 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.fr/
[Sat Dec 20 00:45:39.015936 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:45:39.183680 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanzorng.php, referer: https://www.google.com/
[Sat Dec 20 00:45:39.862528 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/x7.php, referer: https://www.google.fr/
[Sat Dec 20 00:45:40.273835 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php, referer: https://www.bing.com/
[Sat Dec 20 00:45:40.845279 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:50628] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Sat Dec 20 00:45:42.851024 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:50628] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aUWBNhzVxeBEODU8mCBx6AAAAMk"], referer: https://www.bing.com/
[Sat Dec 20 00:45:43.595462 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:57838] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php, referer: https://www.google.de/
[Sat Dec 20 00:45:43.949160 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:57838] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php, referer: https://www.google.com/
[Sat Dec 20 00:45:47.162728 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:57838] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/xmrlpc.php, referer: https://www.google.de/
[Sat Dec 20 00:45:49.528271 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:57838] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php, referer: https://www.google.com/
[Sat Dec 20 00:45:50.711286 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:57838] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Sat Dec 20 00:45:53.391248 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:57838] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:45:53.557997 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:57838] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/moon.php"] [unique_id "aUWBQSxTWUmlILwAM_ek_QAAAAc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:45:54.654635 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php, referer: https://www.bing.com/
[Sat Dec 20 00:45:55.005304 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:45:55.171456 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:45:55.337686 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php, referer: https://www.bing.com/
[Sat Dec 20 00:45:59.224329 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:6293] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/023ws.php"] [unique_id "aUWBR412VmSu4NX34PTQcgAAAIQ"], referer: https://www.bing.com/
[Sat Dec 20 00:45:59.568922 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:57811] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/023ws.php"] [unique_id "aUWBR-TCMRSRXPuXZF_4pwAAAQ8"], referer: https://www.bing.com/
[Sat Dec 20 00:45:59.944299 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:6689] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/023ws.php"] [unique_id "aUWBR-TCMRSRXPuXZF_4qgAAARg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:46:00.283624 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:48756] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/023ws.php"] [unique_id "aUWBSCxTWUmlILwAM_elBQAAABI"], referer: https://www.google.fr/
[Sat Dec 20 00:46:00.783127 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:48707] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/023ws.php"] [unique_id "aUWBSCxTWUmlILwAM_elBgAAABA"], referer: https://www.google.de/
[Sat Dec 20 00:46:01.315710 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:56060] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/023ws.php, referer: https://www.google.de/
[Sat Dec 20 00:46:04.035652 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:56060] File does not exist: /usr/local/apache/htdocs/suspended-page/023ws.php, referer: https://www.google.com/
[Sat Dec 20 00:46:04.253035 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:56060] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_project.php, referer: https://www.google.de/
[Sat Dec 20 00:46:06.738665 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:56060] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp_project.php"] [unique_id "aUWBTixTWUmlILwAM_elKgAAABI"], referer: https://www.google.com/
[Sat Dec 20 00:46:07.102650 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:7054] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp_project.php"] [unique_id "aUWBT412VmSu4NX34PTQdwAAAJY"], referer: https://www.bing.com/
[Sat Dec 20 00:46:07.491693 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:56492] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/wp_project.php"] [unique_id "aUWBT-TCMRSRXPuXZF_4tAAAARc"], referer: https://www.google.fr/
[Sat Dec 20 00:46:07.923893 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:57793] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp_project.php"] [unique_id "aUWBT-TCMRSRXPuXZF_4tgAAAQk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:46:08.345478 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:48711] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/wp_project.php"] [unique_id "aUWBUOTCMRSRXPuXZF_4uAAAARI"], referer: https://www.google.fr/
[Sat Dec 20 00:46:08.957839 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp_project.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:14.140262 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.de/
[Sat Dec 20 00:46:14.314929 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php, referer: https://www.google.de/
[Sat Dec 20 00:46:14.999486 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:16.486261 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/s_ne.php, referer: https://www.google.de/
[Sat Dec 20 00:46:16.657998 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:17.214311 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.de/
[Sat Dec 20 00:46:17.420909 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.google.com/
[Sat Dec 20 00:46:17.619815 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2020.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:17.906022 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2021.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:18.078239 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2022.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:18.244723 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:6661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xml.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:20.218245 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:6661] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/content.php"] [unique_id "aUWBXI12VmSu4NX34PTQsAAAAJI"], referer: https://www.google.com/
[Sat Dec 20 00:46:20.975392 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.de/
[Sat Dec 20 00:46:21.153859 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:21.505674 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:21.697656 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2023.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:22.116936 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-log1n.php, referer: https://www.google.com/
[Sat Dec 20 00:46:22.304798 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2024.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:22.548625 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plugins.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:22.907476 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/s_e.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:23.090254 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/search.php, referer: https://www.google.com/
[Sat Dec 20 00:46:23.517098 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/g3.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:23.698416 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/dbtoolkit_import.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:24.147510 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dbtoolkit_import.php, referer: https://www.google.com/
[Sat Dec 20 00:46:26.385401 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:26.556079 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:48693] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aUWBYuTCMRSRXPuXZF_5BQAAAQs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:46:27.293945 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:43504] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-hoard.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:27.723916 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:43504] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-hoard.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:31.844678 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:43504] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp_filemanager.php"] [unique_id "aUWBZyxTWUmlILwAM_elZAAAAAI"], referer: https://www.google.de/
[Sat Dec 20 00:46:32.382980 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:6810] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp_filemanager.php"] [unique_id "aUWBaI12VmSu4NX34PTQuAAAAI8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:46:32.769920 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:45760] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/wp_filemanager.php"] [unique_id "aUWBaI12VmSu4NX34PTQuQAAAJI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:46:33.377796 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:53547] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp_filemanager.php"] [unique_id "aUWBaSxTWUmlILwAM_elZQAAAAw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:46:33.766743 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:62100] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/wp_filemanager.php"] [unique_id "aUWBaSxTWUmlILwAM_elZgAAABM"], referer: https://www.google.de/
[Sat Dec 20 00:46:37.494048 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:56549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:38.279307 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:56549] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUWBbhzVxeBEODU8mCByMgAAAM4"], referer: https://www.google.fr/
[Sat Dec 20 00:46:38.696190 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:6818] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/w0rdpr3ssnew/wp-login.php"] [unique_id "aUWBbixTWUmlILwAM_elaQAAABg"], referer: https://www.google.com/
[Sat Dec 20 00:46:40.305135 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/uploaded_script.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:40.832829 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cli.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:44.667528 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/twin.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:44.885442 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:45.051015 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:45.233064 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:46:45.402812 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/upl0ad.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:46.857338 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/kontol.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:47.093680 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/memek.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:47.266848 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/cok.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:47.443259 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/asu.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:47.623866 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:47.863208 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/sayang.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:48.036092 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/puki.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:48.216896 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/peler.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:48.449899 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/cinta.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:49.744599 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.de/
[Sat Dec 20 00:46:49.928495 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php, referer: https://www.google.de/
[Sat Dec 20 00:46:50.109852 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:6818] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:50.458439 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:6818] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aUWBeixTWUmlILwAM_elpwAAABI"], referer: https://www.google.com/
[Sat Dec 20 00:46:51.007296 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:62118] File does not exist: /usr/local/apache/htdocs/suspended-page/xxl.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:51.182493 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:62118] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:51.346104 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:62118] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xxl.php"] [unique_id "aUWBe-TCMRSRXPuXZF_5OgAAARM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:46:52.147638 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/M1.php, referer: https://www.google.com/
[Sat Dec 20 00:46:52.335231 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/wwr.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:53.203789 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/fosil.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:54.079415 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:54.320257 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/delete4.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:46:54.488276 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/delete5.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:54.657169 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-seo.php, referer: https://www.bing.com/
[Sat Dec 20 00:46:55.528137 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php, referer: https://www.google.com/
[Sat Dec 20 00:46:55.928970 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/wso-x569.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:56.171583 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:56.375525 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/class-snoopye_wso.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:46:56.882115 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:54809] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php, referer: https://www.google.fr/
[Sat Dec 20 00:46:57.517415 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:54809] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-head.php"] [unique_id "aUWBgeTCMRSRXPuXZF_5YwAAAQs"], referer: https://www.google.com/
[Sat Dec 20 00:46:57.984006 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:49928] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aUWBgY12VmSu4NX34PTQzgAAAIQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:46:58.553511 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:47689] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aUWBgo12VmSu4NX34PTQ0QAAAJM"], referer: https://www.bing.com/
[Sat Dec 20 00:46:59.107596 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:62138] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-login.php"] [unique_id "aUWBgyxTWUmlILwAM_el3gAAABI"], referer: https://www.google.fr/
[Sat Dec 20 00:46:59.666609 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:6836] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aUWBg-TCMRSRXPuXZF_5ZQAAAQU"], referer: https://www.bing.com/
[Sat Dec 20 00:47:00.002834 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:01.498949 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php, referer: https://www.google.fr/
[Sat Dec 20 00:47:01.670987 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:01.865093 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:02.049897 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php, referer: https://www.google.de/
[Sat Dec 20 00:47:04.706162 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:05.815888 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php, referer: https://www.google.de/
[Sat Dec 20 00:47:05.991477 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php, referer: https://www.google.de/
[Sat Dec 20 00:47:06.161481 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/well.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:06.525835 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/xinder.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:06.723423 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:06.902371 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-22.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:07.655250 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/403lock.php, referer: https://www.google.com/
[Sat Dec 20 00:47:08.138244 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/embed-template-core.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:08.376877 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:49964] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:08.546387 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:49964] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/inputs.php"] [unique_id "aUWBjCxTWUmlILwAM_emQwAAAAg"], referer: https://www.google.com/
[Sat Dec 20 00:47:09.629465 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:47707] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/inputs.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:10.421942 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:47707] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Sat Dec 20 00:47:10.648996 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:47707] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:11.207655 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:47707] File does not exist: /usr/local/apache/htdocs/suspended-page/Chitoge.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:14.871445 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:47707] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Chitoge.php"] [unique_id "aUWBkixTWUmlILwAM_emYwAAAAw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:47:15.244485 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:62105] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/Chitoge.php"] [unique_id "aUWBk412VmSu4NX34PTQ3QAAAIA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:47:15.594229 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:45814] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/Chitoge.php"] [unique_id "aUWBk412VmSu4NX34PTQ3wAAAI0"], referer: https://www.google.fr/
[Sat Dec 20 00:47:17.637965 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:62088] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/file.php"] [unique_id "aUWBlUJMTU3r4hb8qAlNpAAAAEM"], referer: https://www.google.de/
[Sat Dec 20 00:47:18.057273 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:53504] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aUWBlo12VmSu4NX34PTQ4gAAAIU"], referer: https://www.google.fr/
[Sat Dec 20 00:47:18.396939 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:47702] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/file.php"] [unique_id "aUWBluTCMRSRXPuXZF_5ggAAAQ0"], referer: https://www.google.fr/
[Sat Dec 20 00:47:18.728777 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:49976] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fclass.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:23.157238 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:49976] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/block-css.php, referer: https://www.google.de/
[Sat Dec 20 00:47:28.644101 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:49976] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/rk2.php"] [unique_id "aUWBoOTCMRSRXPuXZF_5xwAAAQs"], referer: https://www.google.de/
[Sat Dec 20 00:47:29.084288 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:62081] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/rk2.php"] [unique_id "aUWBoeTCMRSRXPuXZF_5zAAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:47:29.437265 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:47684] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/rk2.php"] [unique_id "aUWBoeTCMRSRXPuXZF_5zQAAAQg"], referer: https://www.google.fr/
[Sat Dec 20 00:47:29.874237 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:49945] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/rk2.php"] [unique_id "aUWBoSxTWUmlILwAM_emdQAAAA4"], referer: https://www.google.com/
[Sat Dec 20 00:47:30.240610 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:47741] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/rk2.php"] [unique_id "aUWBouTCMRSRXPuXZF_50AAAARg"], referer: https://www.google.com/
[Sat Dec 20 00:47:30.782995 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:54829] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/rk2.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:35.396755 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:54829] File does not exist: /usr/local/apache/htdocs/suspended-page/rk2.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:35.664310 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:54829] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:36.824849 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:54829] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:37.007561 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:54829] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:37.182212 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:54829] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/mariju.php"] [unique_id "aUWBqUJMTU3r4hb8qAlNzwAAAFg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:47:38.009072 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:54834] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/mariju.php"] [unique_id "aUWBquTCMRSRXPuXZF_53wAAAQs"], referer: https://www.google.com/
[Sat Dec 20 00:47:38.343591 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:52421] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:38.706794 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:52421] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/mariju.php"] [unique_id "aUWBquTCMRSRXPuXZF_55QAAAQg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:47:39.228188 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:47727] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/mariju.php"] [unique_id "aUWBq412VmSu4NX34PTQ8gAAAIQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:47:39.934001 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:6804] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/mariju.php"] [unique_id "aUWBq-TCMRSRXPuXZF_56gAAAQc"], referer: https://www.google.de/
[Sat Dec 20 00:47:40.447137 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/min.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:40.697167 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:40.893955 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.google.com/
[Sat Dec 20 00:47:41.054515 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:41.221172 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.fr/
[Sat Dec 20 00:47:41.387218 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:41.557976 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php, referer: https://www.google.com/
[Sat Dec 20 00:47:41.729652 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:47732] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUWBrUJMTU3r4hb8qAlN2gAAAFE"], referer: https://www.google.de/
[Sat Dec 20 00:47:42.276542 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:52443] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-inshpvx.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:42.947008 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:52443] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/include.php"] [unique_id "aUWBrixTWUmlILwAM_emjQAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:47:43.386951 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:47718] File does not exist: /usr/local/apache/htdocs/suspended-page/phpmailer.lang-sv.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:44.124943 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:47718] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aUWBsEJMTU3r4hb8qAlN4gAAAEw"], referer: https://www.google.com/
[Sat Dec 20 00:47:44.707179 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:45764] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php, referer: https://www.google.fr/
[Sat Dec 20 00:47:44.987188 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:45764] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aUWBsOTCMRSRXPuXZF_59QAAARc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:47:45.742845 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:6784] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/plugins.php"] [unique_id "aUWBsY12VmSu4NX34PTQ-AAAAIY"], referer: https://www.google.de/
[Sat Dec 20 00:47:47.596270 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:54804] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/plugins.php"] [unique_id "aUWBs0JMTU3r4hb8qAlN8AAAAFU"], referer: https://www.bing.com/
[Sat Dec 20 00:47:47.963010 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:45804] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aUWBs-TCMRSRXPuXZF_5-wAAAQ8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:47:48.618249 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:54811] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/plugins.php"] [unique_id "aUWBtCxTWUmlILwAM_emlwAAABg"], referer: https://www.bing.com/
[Sat Dec 20 00:47:49.414035 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:54787] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/plugins.php"] [unique_id "aUWBtSxTWUmlILwAM_emnAAAAAU"], referer: https://www.bing.com/
[Sat Dec 20 00:47:50.017593 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/chtmlfuns.php, referer: https://www.google.fr/
[Sat Dec 20 00:47:50.308193 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:50.646902 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:50.838625 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/comdofuns.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:51.080853 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:47:51.260997 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/tempfuns.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:51.437186 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:51.645539 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:51.828116 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/shellname.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:52.061576 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-rewrite.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:47:53.032783 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:62111] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/docs/docs/wp-login.php"] [unique_id "aUWBuRzVxeBEODU8mCByjQAAAME"], referer: https://www.bing.com/
[Sat Dec 20 00:47:53.917819 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/l10n.php, referer: https://www.bing.com/
[Sat Dec 20 00:47:55.037280 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/lion.php, referer: https://www.google.fr/
[Sat Dec 20 00:47:55.597987 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:62111] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:47:55.909178 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:62111] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aUWBuxzVxeBEODU8mCByqQAAAMk"], referer: https://www.bing.com/
[Sat Dec 20 00:47:56.512334 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:62095] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aUWBvBzVxeBEODU8mCByrQAAAMw"], referer: https://www.google.de/
[Sat Dec 20 00:47:56.867495 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:49949] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aUWBvCxTWUmlILwAM_emtAAAAAk"], referer: https://duckduckgo.com/
[Sat Dec 20 00:47:57.038724 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:49949] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php, referer: https://www.google.fr/
[Sat Dec 20 00:47:57.198822 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:49949] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aUWBvSxTWUmlILwAM_emuQAAAAY"], referer: https://www.google.fr/
[Sat Dec 20 00:48:00.077900 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:6806] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-class.php"] [unique_id "aUWBwEJMTU3r4hb8qAlOJgAAAEg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:48:00.585568 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:54789] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-class.php"] [unique_id "aUWBwI12VmSu4NX34PTRAQAAAJU"], referer: https://www.google.com/
[Sat Dec 20 00:48:00.946055 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:56521] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/wp-class.php"] [unique_id "aUWBwI12VmSu4NX34PTRAgAAAIk"], referer: https://www.google.fr/
[Sat Dec 20 00:48:02.295203 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:02.492791 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/wso_2.1_(web_shell_by_orb).php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:02.663085 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php, referer: https://www.google.com/
[Sat Dec 20 00:48:02.838106 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/1998.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:48:03.177883 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/dz.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:03.533614 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:49981] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/w.php"] [unique_id "aUWBwxzVxeBEODU8mCBywQAAANQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:48:03.696819 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/cpanel.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:03.873645 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/cpn.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:04.043800 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.phpmysql.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:48:04.259014 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php, referer: https://www.google.com/
[Sat Dec 20 00:48:04.444248 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/configuration.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:04.672565 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/madspot.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:04.931580 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/dz0.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:05.113518 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/dam.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:05.330498 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/user.phpdom.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:05.502695 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/whmcs.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:05.685250 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/r00t.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:05.851968 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/r0k.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:48:06.027196 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/egy.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:48:06.192180 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/syrian_shell.phpxxx.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:06.357596 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/settings.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:06.596436 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/tmp.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:06.798090 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/cyber.php, referer: https://www.google.com/
[Sat Dec 20 00:48:07.019529 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:07.226242 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:07.392879 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/d4rk.php, referer: https://www.google.com/
[Sat Dec 20 00:48:07.617207 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:48:07.803023 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/nkr.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:48:07.970801 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/xd.php, referer: https://www.google.de/
[Sat Dec 20 00:48:08.145645 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/M4r0c.php, referer: https://www.google.com/
[Sat Dec 20 00:48:08.359637 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/Dz.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:08.535634 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/sniper.php, referer: https://www.google.de/
[Sat Dec 20 00:48:08.705704 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/ksa.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:08.877067 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/v4team.php, referer: https://www.google.de/
[Sat Dec 20 00:48:09.046083 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/offline.php, referer: https://www.google.de/
[Sat Dec 20 00:48:09.210881 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/911.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:48:09.373038 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/madspotshell.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:09.558038 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/c100.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:48:09.890843 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/pcp.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:48:14.616992 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/sa.php, referer: https://www.google.fr/
[Sat Dec 20 00:48:14.772968 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php, referer: https://www.google.com/
[Sat Dec 20 00:48:15.246872 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:49981] File does not exist: /usr/local/apache/htdocs/suspended-page/d0mains.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:48:33.336768 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:62108] File does not exist: /usr/local/apache/htdocs/suspended-page/price.php, referer: https://www.bing.com/
[Sat Dec 20 00:48:33.580143 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:62108] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/4price3.php"] [unique_id "aUWB4eTCMRSRXPuXZF_6lwAAARY"], referer: https://www.google.de/
[Sat Dec 20 00:48:33.930107 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:54793] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/votes.php"] [unique_id "aUWB4eTCMRSRXPuXZF_6mAAAAQM"], referer: https://www.google.com/
[Sat Dec 20 00:48:34.547033 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:54827] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aUWB4ixTWUmlILwAM_enBwAAAA0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:48:34.981917 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:52420] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/500.php"] [unique_id "aUWB4ixTWUmlILwAM_enCQAAAAw"], referer: https://www.google.fr/
[Sat Dec 20 00:48:37.655703 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:56571] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/500.php"] [unique_id "aUWB5eTCMRSRXPuXZF_6qgAAARE"], referer: https://www.google.com/
[Sat Dec 20 00:48:38.229321 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:49955] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/500.php"] [unique_id "aUWB5kJMTU3r4hb8qAlOZQAAAEY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:48:38.624074 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:56531] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/500.php"] [unique_id "aUWB5o12VmSu4NX34PTRVgAAAIY"], referer: https://www.bing.com/
[Sat Dec 20 00:48:39.050913 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:47700] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins/instabuilder2/cache/plugins/moon.php"] [unique_id "aUWB5yxTWUmlILwAM_enFAAAAAU"], referer: https://www.bing.com/
[Sat Dec 20 00:48:39.634178 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:54846] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins/instabuilder2/cache/up.php"] [unique_id "aUWB5yxTWUmlILwAM_enFwAAAA8"], referer: https://www.google.de/
[Sat Dec 20 00:49:02.073669 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:6814] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-22.php"] [unique_id "aUWB_ixTWUmlILwAM_enSwAAAA0"], referer: https://www.google.fr/
[Sat Dec 20 00:49:02.400943 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:62103] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/1234.php"] [unique_id "aUWB_o12VmSu4NX34PTR1QAAAIY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:02.775229 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:47742] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/asdasd.php"] [unique_id "aUWB_ixTWUmlILwAM_enTgAAAAg"], referer: https://www.google.fr/
[Sat Dec 20 00:49:03.104804 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:45819] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xleet.php"] [unique_id "aUWB_yxTWUmlILwAM_enTwAAAAo"], referer: https://www.google.de/
[Sat Dec 20 00:49:03.536828 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:45822] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/0byte.php"] [unique_id "aUWB_xzVxeBEODU8mCBz2gAAAMM"], referer: https://www.google.com/
[Sat Dec 20 00:49:04.030223 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:47734] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/fw.php"] [unique_id "aUWCAOTCMRSRXPuXZF_62AAAAQA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:04.341164 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:54837] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sym.php"] [unique_id "aUWCABzVxeBEODU8mCBz2wAAAM0"], referer: https://www.google.fr/
[Sat Dec 20 00:49:04.728809 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:56529] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sym403.php"] [unique_id "aUWCABzVxeBEODU8mCBz3QAAAMU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:05.054130 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:54792] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl.php"] [unique_id "aUWCAUJMTU3r4hb8qAlOlQAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:05.567977 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:45789] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/symlink.php"] [unique_id "aUWCAY12VmSu4NX34PTR2QAAAIE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:05.916599 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:56526] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/404.php"] [unique_id "aUWCARzVxeBEODU8mCBz3wAAAMI"], referer: https://www.bing.com/
[Sat Dec 20 00:49:06.296301 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:45770] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/403.php"] [unique_id "aUWCAuTCMRSRXPuXZF_63gAAAQ0"], referer: https://www.bing.com/
[Sat Dec 20 00:49:06.653478 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:49953] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/up.php"] [unique_id "aUWCAuTCMRSRXPuXZF_63wAAARA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:07.010243 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:54840] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/c99.php"] [unique_id "aUWCA412VmSu4NX34PTR3QAAAJc"], referer: https://www.bing.com/
[Sat Dec 20 00:49:07.363049 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:54785] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xxx.php"] [unique_id "aUWCAxzVxeBEODU8mCBz4QAAANU"], referer: https://www.bing.com/
[Sat Dec 20 00:49:07.889175 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:45808] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ok.php"] [unique_id "aUWCA-TCMRSRXPuXZF_64AAAAQk"], referer: https://www.bing.com/
[Sat Dec 20 00:49:08.394574 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:56545] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/0.php"] [unique_id "aUWCBI12VmSu4NX34PTR4AAAAJE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:08.867119 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:47742] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/x.php"] [unique_id "aUWCBEJMTU3r4hb8qAlOogAAAFc"], referer: https://www.google.de/
[Sat Dec 20 00:49:09.190394 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:47691] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xx.php"] [unique_id "aUWCBUJMTU3r4hb8qAlOpAAAAFA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:09.601151 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:45785] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/1.php"] [unique_id "aUWCBeTCMRSRXPuXZF_65AAAARc"], referer: https://www.bing.com/
[Sat Dec 20 00:49:09.956049 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:52445] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/2.php"] [unique_id "aUWCBeTCMRSRXPuXZF_65QAAAQ8"], referer: https://www.google.fr/
[Sat Dec 20 00:49:10.320788 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:47730] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/3.php"] [unique_id "aUWCBo12VmSu4NX34PTR4wAAAII"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:10.824030 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:56539] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/4.php"] [unique_id "aUWCBhzVxeBEODU8mCBz6gAAANY"], referer: https://www.google.fr/
[Sat Dec 20 00:49:11.202396 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:45798] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/5.php"] [unique_id "aUWCB-TCMRSRXPuXZF_66wAAAQs"], referer: https://www.google.de/
[Sat Dec 20 00:49:11.531033 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:6793] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/6.php"] [unique_id "aUWCB412VmSu4NX34PTR5gAAAJQ"], referer: https://www.bing.com/
[Sat Dec 20 00:49:11.917625 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:62122] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/7.php"] [unique_id "aUWCBxzVxeBEODU8mCBz7gAAAMw"], referer: https://www.google.de/
[Sat Dec 20 00:49:12.228490 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:47713] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/8.php"] [unique_id "aUWCCBzVxeBEODU8mCBz8AAAAMA"], referer: https://www.bing.com/
[Sat Dec 20 00:49:12.564573 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:54808] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/9.php"] [unique_id "aUWCCBzVxeBEODU8mCBz9QAAAMM"], referer: https://www.bing.com/
[Sat Dec 20 00:49:13.033091 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:62090] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/10.php"] [unique_id "aUWCCY12VmSu4NX34PTR6AAAAIU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:13.434531 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:62115] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/a.php"] [unique_id "aUWCCRzVxeBEODU8mCBz_gAAAM8"], referer: https://www.google.com/
[Sat Dec 20 00:49:13.752144 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:45792] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/z.php"] [unique_id "aUWCCRzVxeBEODU8mCB0AQAAAMw"], referer: https://www.google.fr/
[Sat Dec 20 00:49:14.140625 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:45791] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/e.php"] [unique_id "aUWCCo12VmSu4NX34PTR7AAAAJE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:14.599098 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:54805] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/r.php"] [unique_id "aUWCCo12VmSu4NX34PTR7gAAAJA"], referer: https://www.google.com/
[Sat Dec 20 00:49:14.937822 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:53527] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/t.php"] [unique_id "aUWCCo12VmSu4NX34PTR8AAAAI4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:15.379314 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:6838] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/y.php"] [unique_id "aUWCC-TCMRSRXPuXZF_67gAAAQU"], referer: https://www.google.de/
[Sat Dec 20 00:49:15.734014 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:49947] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/u.php"] [unique_id "aUWCCyxTWUmlILwAM_enZwAAABg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:16.146418 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:59020] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/i.php"] [unique_id "aUWCDOTCMRSRXPuXZF_68wAAARA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:16.483976 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:62089] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/o.php"] [unique_id "aUWCDBzVxeBEODU8mCB0FQAAANU"], referer: https://www.google.de/
[Sat Dec 20 00:49:16.797850 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:6222] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/p.php"] [unique_id "aUWCDCxTWUmlILwAM_enagAAAAw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:17.130365 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:49975] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/q.php"] [unique_id "aUWCDUJMTU3r4hb8qAlOrwAAAFM"], referer: https://www.bing.com/
[Sat Dec 20 00:49:17.462957 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:52466] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/s.php"] [unique_id "aUWCDY12VmSu4NX34PTR9AAAAIA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:17.850166 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:54801] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/d.php"] [unique_id "aUWCDSxTWUmlILwAM_enbgAAABc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:18.402378 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:59032] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/f.php"] [unique_id "aUWCDkJMTU3r4hb8qAlOswAAAEw"], referer: https://www.google.de/
[Sat Dec 20 00:49:18.792771 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:52416] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/g.php"] [unique_id "aUWCDhzVxeBEODU8mCB0JgAAAMo"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:19.105713 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:6788] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/h.php"] [unique_id "aUWCDxzVxeBEODU8mCB0KwAAANI"], referer: https://www.google.fr/
[Sat Dec 20 00:49:19.423410 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:56523] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/j.php"] [unique_id "aUWCD412VmSu4NX34PTR9gAAAII"], referer: https://www.google.com/
[Sat Dec 20 00:49:19.748360 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:47740] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/k.php"] [unique_id "aUWCD0JMTU3r4hb8qAlOvAAAAFY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:20.083730 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:45780] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l.php"] [unique_id "aUWCEBzVxeBEODU8mCB0NAAAAMM"], referer: https://www.google.fr/
[Sat Dec 20 00:49:20.451076 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:47715] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/m.php"] [unique_id "aUWCECxTWUmlILwAM_enegAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:20.816814 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:49920] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/w.php"] [unique_id "aUWCEI12VmSu4NX34PTR_QAAAIg"], referer: https://www.google.com/
[Sat Dec 20 00:49:21.163296 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:62127] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/v.php"] [unique_id "aUWCEY12VmSu4NX34PTR_wAAAJg"], referer: https://www.google.com/
[Sat Dec 20 00:49:21.593666 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:6841] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/n.php"] [unique_id "aUWCEY12VmSu4NX34PTSAQAAAJQ"], referer: https://www.google.com/
[Sat Dec 20 00:49:22.008795 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:54791] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/b.php"] [unique_id "aUWCEuTCMRSRXPuXZF_7DwAAAQE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:22.387083 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:45812] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/c.php"] [unique_id "aUWCEo12VmSu4NX34PTSBQAAAIA"], referer: https://www.google.fr/
[Sat Dec 20 00:49:22.780123 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:6798] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-wso.php"] [unique_id "aUWCEuTCMRSRXPuXZF_7FgAAAQ8"], referer: https://www.google.fr/
[Sat Dec 20 00:49:23.171106 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:52438] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/priv8.php"] [unique_id "aUWCE412VmSu4NX34PTSCAAAAIw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:23.546012 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:62140] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/minimo.php"] [unique_id "aUWCE-TCMRSRXPuXZF_7GQAAAQc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:23.870136 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:45774] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/V3.php"] [unique_id "aUWCExzVxeBEODU8mCB0VAAAAMc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:24.227235 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:43502] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/V5.php"] [unique_id "aUWCFCxTWUmlILwAM_eniwAAABQ"], referer: https://www.google.de/
[Sat Dec 20 00:49:24.595972 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:54821] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/www.php"] [unique_id "aUWCFBzVxeBEODU8mCB0XAAAANc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:25.001132 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:54826] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/100.php"] [unique_id "aUWCFSxTWUmlILwAM_enjQAAAAU"], referer: https://www.bing.com/
[Sat Dec 20 00:49:25.336133 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:45771] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/777.php"] [unique_id "aUWCFUJMTU3r4hb8qAlOyQAAAE0"], referer: https://www.google.com/
[Sat Dec 20 00:49:25.688596 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:59015] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defau1t.php"] [unique_id "aUWCFSxTWUmlILwAM_enjgAAAAY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:26.204217 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:45768] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xox.php"] [unique_id "aUWCFo12VmSu4NX34PTSEgAAAJQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:26.542645 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:56575] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/new.php"] [unique_id "aUWCFo12VmSu4NX34PTSEwAAAIA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:26.872011 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:47686] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wi.php"] [unique_id "aUWCFo12VmSu4NX34PTSFQAAAJE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:27.268147 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:52462] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mar.php"] [unique_id "aUWCFxzVxeBEODU8mCB0cgAAAM4"], referer: https://www.google.de/
[Sat Dec 20 00:49:27.644427 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:6162] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/root.php"] [unique_id "aUWCF-TCMRSRXPuXZF_7JAAAARA"], referer: https://www.google.de/
[Sat Dec 20 00:49:27.981403 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:56563] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/nee.php"] [unique_id "aUWCF-TCMRSRXPuXZF_7JwAAAQc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:28.362426 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:49923] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ws.php"] [unique_id "aUWCGCxTWUmlILwAM_enkwAAAAs"], referer: https://www.google.com/
[Sat Dec 20 00:49:28.791862 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:56513] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lol.php"] [unique_id "aUWCGEJMTU3r4hb8qAlO0QAAAFQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:29.260870 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:59022] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/87.php"] [unique_id "aUWCGRzVxeBEODU8mCB0eAAAANU"], referer: https://www.google.de/
[Sat Dec 20 00:49:29.644839 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:6222] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/7yn.php"] [unique_id "aUWCGRzVxeBEODU8mCB0egAAAMA"], referer: https://www.google.de/
[Sat Dec 20 00:49:29.959695 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:54803] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/haxor.php"] [unique_id "aUWCGRzVxeBEODU8mCB0fQAAANQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:30.325210 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:6179] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/13.php"] [unique_id "aUWCGuTCMRSRXPuXZF_7MAAAARU"], referer: https://www.google.fr/
[Sat Dec 20 00:49:30.653386 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:49938] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/FoxWSOv1.php"] [unique_id "aUWCGixTWUmlILwAM_enmAAAAAU"], referer: https://www.google.com/
[Sat Dec 20 00:49:31.077514 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:47682] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/alf.php"] [unique_id "aUWCGxzVxeBEODU8mCB0fwAAAMU"], referer: https://www.bing.com/
[Sat Dec 20 00:49:31.411782 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:53535] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bb.php"] [unique_id "aUWCGxzVxeBEODU8mCB0gQAAAMo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:31.756814 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:56516] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/WSO.php"] [unique_id "aUWCG-TCMRSRXPuXZF_7NQAAAQQ"], referer: https://www.google.com/
[Sat Dec 20 00:49:32.224252 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:45803] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/hello.php"] [unique_id "aUWCHBzVxeBEODU8mCB0hwAAAMg"], referer: https://www.google.com/
[Sat Dec 20 00:49:32.637269 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:52467] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/if.php"] [unique_id "aUWCHI12VmSu4NX34PTSKwAAAJc"], referer: https://www.bing.com/
[Sat Dec 20 00:49:32.972590 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:6816] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/kk.php"] [unique_id "aUWCHBzVxeBEODU8mCB0iQAAAMw"], referer: https://www.google.de/
[Sat Dec 20 00:49:33.312146 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:47712] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mrjn.php"] [unique_id "aUWCHSxTWUmlILwAM_enoAAAAAI"], referer: https://www.bing.com/
[Sat Dec 20 00:49:33.627608 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:42464] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/kn.php"] [unique_id "aUWCHeTCMRSRXPuXZF_7PAAAAQE"], referer: https://www.google.com/
[Sat Dec 20 00:49:33.973514 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:54807] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/3301.php"] [unique_id "aUWCHRzVxeBEODU8mCB0jQAAAM0"], referer: https://www.google.com/
[Sat Dec 20 00:49:34.308620 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:56558] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/alex.php"] [unique_id "aUWCHixTWUmlILwAM_enogAAAAU"], referer: https://www.bing.com/
[Sat Dec 20 00:49:34.722534 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:53545] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mailer.php"] [unique_id "aUWCHhzVxeBEODU8mCB0jwAAAMU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:35.047004 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:62104] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/anone.php"] [unique_id "aUWCHxzVxeBEODU8mCB0kAAAANE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:35.389237 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:56552] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-configer.php"] [unique_id "aUWCH-TCMRSRXPuXZF_7RgAAAQ4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:35.704209 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:53521] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-ad.php"] [unique_id "aUWCH-TCMRSRXPuXZF_7SwAAARI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:36.036617 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:62104] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/send.php"] [unique_id "aUWCIOTCMRSRXPuXZF_7TgAAARU"], referer: https://www.google.com/
[Sat Dec 20 00:49:36.397117 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:6169] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/.wp-cache.php"] [unique_id "aUWCIBzVxeBEODU8mCB0kwAAAM8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:49:36.787911 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:56537] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sendmail.php"] [unique_id "aUWCICxTWUmlILwAM_enpwAAABE"], referer: https://www.google.com/
[Sat Dec 20 00:49:37.136585 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:47683] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rahma.php"] [unique_id "aUWCIRzVxeBEODU8mCB0lQAAANM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:49:37.448524 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:49922] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/nasgor.php"] [unique_id "aUWCIRzVxeBEODU8mCB0lgAAAMA"], referer: https://www.google.de/
[Sat Dec 20 00:49:37.884310 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:62099] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-confirm.php"] [unique_id "aUWCISxTWUmlILwAM_enqQAAAAA"], referer: https://www.bing.com/
[Sat Dec 20 00:49:38.192781 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:54828] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/alfa123.php"] [unique_id "aUWCIuTCMRSRXPuXZF_7WQAAAQ0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:38.504775 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:49954] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/upload.php"] [unique_id "aUWCIuTCMRSRXPuXZF_7XAAAAQM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:38.874392 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:47699] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aUWCIuTCMRSRXPuXZF_7YQAAAQ4"], referer: https://www.google.de/
[Sat Dec 20 00:49:39.268157 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:62123] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-one.php"] [unique_id "aUWCIyxTWUmlILwAM_enrQAAABQ"], referer: https://www.google.com/
[Sat Dec 20 00:49:39.685133 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:62119] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/alexus.php"] [unique_id "aUWCIyxTWUmlILwAM_ensAAAAAU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:49:40.018784 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:56522] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wso1337.php"] [unique_id "aUWCJI12VmSu4NX34PTSMQAAAIc"], referer: https://www.bing.com/
[Sat Dec 20 00:50:43.428244 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:47022] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUWCY-TCMRSRXPuXZF_8VwAAARY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:50:43.772956 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:48239] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUWCY0JMTU3r4hb8qAlPgwAAAFI"], referer: https://www.google.de/
[Sat Dec 20 00:50:44.235251 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:48239] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.fr/
[Sat Dec 20 00:50:44.409843 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:48239] File does not exist: /usr/local/apache/htdocs/suspended-page/1234.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:50:44.584249 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:48239] File does not exist: /usr/local/apache/htdocs/suspended-page/asdasd.php, referer: https://www.google.fr/
[Sat Dec 20 00:50:44.746682 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:48239] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fw.php"] [unique_id "aUWCZEJMTU3r4hb8qAlPiAAAAEg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:50:45.122829 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php, referer: https://www.google.de/
[Sat Dec 20 00:50:45.504408 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:50:45.674026 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php, referer: https://www.google.com/
[Sat Dec 20 00:50:45.846335 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:50:46.011515 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php, referer: https://www.google.com/
[Sat Dec 20 00:50:46.181941 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:50:46.396652 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/y.php, referer: https://www.google.de/
[Sat Dec 20 00:50:46.568110 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/u.php, referer: https://www.google.de/
[Sat Dec 20 00:50:46.875445 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:50:47.051029 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php, referer: https://www.google.de/
[Sat Dec 20 00:50:47.226045 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/q.php, referer: https://www.google.fr/
[Sat Dec 20 00:50:47.479637 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php, referer: https://www.google.de/
[Sat Dec 20 00:50:47.679538 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php, referer: https://www.google.com/
[Sat Dec 20 00:50:47.875703 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php, referer: https://www.google.de/
[Sat Dec 20 00:50:48.027426 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/j.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:50:48.217336 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:50:48.397784 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/n.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:50:48.588849 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:50:48.764167 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:50:48.941276 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php, referer: https://www.google.com/
[Sat Dec 20 00:50:49.810963 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:47634] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php, referer: https://www.bing.com/
[Sat Dec 20 00:50:50.161313 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:47634] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUWCauTCMRSRXPuXZF_8fAAAAQc"], referer: https://www.google.fr/
[Sat Dec 20 00:50:50.808783 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:48208] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.de/
[Sat Dec 20 00:50:50.984689 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:48208] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUWCaixTWUmlILwAM_eomAAAAAo"], referer: https://www.yahoo.com/
[Sat Dec 20 00:50:56.167758 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:50622] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aUWCcCxTWUmlILwAM_eoqwAAABE"], referer: https://www.google.fr/
[Sat Dec 20 00:50:56.696291 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:61339] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUWCcCxTWUmlILwAM_eorgAAABU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:50:57.072040 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:47659] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aUWCcRzVxeBEODU8mCB1EQAAAMY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:50:59.854051 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:48223] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:51:47.208733 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:61352] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "aUWCo412VmSu4NX34PTTDAAAAJg"], referer: https://www.google.com/
[Sat Dec 20 00:51:47.616692 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:52397] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUWCo0JMTU3r4hb8qAlP3QAAAEw"], referer: https://www.google.de/
[Sat Dec 20 00:51:49.144711 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aUWCpeTCMRSRXPuXZF_94gAAARU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:51:49.588757 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/wp-login.php"] [unique_id "aUWCpeTCMRSRXPuXZF_95gAAAQM"], referer: https://www.bing.com/
[Sat Dec 20 00:51:50.030968 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aUWCpuTCMRSRXPuXZF_96gAAAQA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:51:50.479353 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aUWCpuTCMRSRXPuXZF_97wAAAQo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:51:51.253943 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUWCp-TCMRSRXPuXZF_99AAAARE"], referer: https://www.google.fr/
[Sat Dec 20 00:51:52.344965 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUWCqOTCMRSRXPuXZF_9_AAAAQQ"], referer: https://www.google.de/
[Sat Dec 20 00:51:52.659470 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:51718] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "aUWCqOTCMRSRXPuXZF_9_wAAAQE"], referer: https://www.google.de/
[Sat Dec 20 00:52:12.677804 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:47026] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.239.238, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aUWCvOTCMRSRXPuXZF_-wgAAAQc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:15.046729 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:47026] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/alfa-rex.php"] [unique_id "aUWCv-TCMRSRXPuXZF_-1wAAAQs"], referer: https://www.google.fr/
[Sat Dec 20 00:52:15.317174 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:59714] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/getid3.lib.php"] [unique_id "aUWCvyxTWUmlILwAM_epbwAAABQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:15.660338 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:48201] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/getid3.php"] [unique_id "aUWCv0JMTU3r4hb8qAlQIQAAAEY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:15.947645 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:45770] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.asf.php"] [unique_id "aUWCv-TCMRSRXPuXZF_-2wAAAQM"], referer: https://www.google.fr/
[Sat Dec 20 00:52:16.216828 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:50566] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.flv.php"] [unique_id "aUWCwBzVxeBEODU8mCB1oQAAAME"], referer: https://www.bing.com/
[Sat Dec 20 00:52:16.491757 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:52386] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.matroska.php"] [unique_id "aUWCwCxTWUmlILwAM_epcgAAABE"], referer: https://www.google.de/
[Sat Dec 20 00:52:16.768630 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:52367] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.quicktime.php"] [unique_id "aUWCwBzVxeBEODU8mCB1owAAAM8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:17.082242 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:61373] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff.php"] [unique_id "aUWCweTCMRSRXPuXZF_-3gAAAQk"], referer: https://www.google.fr/
[Sat Dec 20 00:52:17.444624 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:48225] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio.ac3.php"] [unique_id "aUWCweTCMRSRXPuXZF_-3wAAAQs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:17.754330 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:59740] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio.dts.php"] [unique_id "aUWCwUJMTU3r4hb8qAlQIwAAAFA"], referer: https://www.google.com/
[Sat Dec 20 00:52:18.082754 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:47619] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio.flac.php"] [unique_id "aUWCwhzVxeBEODU8mCB1qAAAAMc"], referer: https://www.google.com/
[Sat Dec 20 00:52:18.396674 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:52376] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio.mp3.php"] [unique_id "aUWCwuTCMRSRXPuXZF_-4gAAAQ0"], referer: https://www.google.de/
[Sat Dec 20 00:52:18.735735 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:52404] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio.ogg.php"] [unique_id "aUWCwkJMTU3r4hb8qAlQJAAAAFE"], referer: https://www.bing.com/
[Sat Dec 20 00:52:19.040312 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:59743] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.tag.apetag.php"] [unique_id "aUWCwyxTWUmlILwAM_epegAAAAs"], referer: https://www.google.com/
[Sat Dec 20 00:52:19.361991 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:47655] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.tag.id3v1.php"] [unique_id "aUWCwyxTWUmlILwAM_epewAAAA4"], referer: https://www.google.fr/
[Sat Dec 20 00:52:19.693324 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:48242] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.tag.id3v2.php"] [unique_id "aUWCw0JMTU3r4hb8qAlQJgAAAEc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:19.964462 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:59770] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.tag.lyrics3.php"] [unique_id "aUWCw0JMTU3r4hb8qAlQKAAAAEw"], referer: https://www.google.fr/
[Sat Dec 20 00:52:20.268155 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:52381] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/alfa-rex.php"] [unique_id "aUWCxEJMTU3r4hb8qAlQKQAAAFM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:20.544001 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:52395] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-base64.php"] [unique_id "aUWCxBzVxeBEODU8mCB1qQAAANU"], referer: https://www.google.com/
[Sat Dec 20 00:52:20.817047 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:47700] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-client.php"] [unique_id "aUWCxI12VmSu4NX34PTTOwAAAIg"], referer: https://www.google.com/
[Sat Dec 20 00:52:21.152803 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:51746] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-clientmulticall.php"] [unique_id "aUWCxeTCMRSRXPuXZF_-6wAAARc"], referer: https://www.google.fr/
[Sat Dec 20 00:52:21.507077 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:61334] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-date.php"] [unique_id "aUWCxeTCMRSRXPuXZF_-7gAAAQw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:21.867433 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:52352] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-error.php"] [unique_id "aUWCxeTCMRSRXPuXZF_-8wAAAQ8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:22.219454 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:48226] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-introspectionserver.php"] [unique_id "aUWCxkJMTU3r4hb8qAlQKgAAAFU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:22.550287 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:61315] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-message.php"] [unique_id "aUWCxixTWUmlILwAM_epfwAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:22.826595 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:51743] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-request.php"] [unique_id "aUWCxo12VmSu4NX34PTTPQAAAIE"], referer: https://www.google.de/
[Sat Dec 20 00:52:23.112022 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:61322] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-server.php"] [unique_id "aUWCxyxTWUmlILwAM_ephgAAABA"], referer: https://www.google.com/
[Sat Dec 20 00:52:23.433878 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:47656] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-value.php"] [unique_id "aUWCx-TCMRSRXPuXZF_-9gAAARc"], referer: https://www.bing.com/
[Sat Dec 20 00:52:23.711035 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:47679] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/Exception.php"] [unique_id "aUWCxyxTWUmlILwAM_ephwAAAA4"], referer: https://www.google.fr/
[Sat Dec 20 00:52:23.994636 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:46979] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/PHPMailer.php"] [unique_id "aUWCx-TCMRSRXPuXZF_-9wAAARQ"], referer: https://www.google.fr/
[Sat Dec 20 00:52:24.268475 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:59718] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/SMTP.php"] [unique_id "aUWCyBzVxeBEODU8mCB1swAAANc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:24.577060 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:48198] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUWCyOTCMRSRXPuXZF_--AAAAQ4"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:24.856936 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:46990] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/alfa-rex.php"] [unique_id "aUWCyI12VmSu4NX34PTTQAAAAI4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:25.141625 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:47662] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-login.php"] [unique_id "aUWCyeTCMRSRXPuXZF_--wAAAQA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:25.456151 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:47621] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/alfa-rex.php"] [unique_id "aUWCyY12VmSu4NX34PTTQQAAAJc"], referer: https://www.google.com/
[Sat Dec 20 00:52:25.754870 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:57292] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aUWCyY12VmSu4NX34PTTQwAAAIQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:26.412658 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:47035] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/Requests.php"] [unique_id "aUWCyuTCMRSRXPuXZF__AAAAAQs"], referer: https://www.google.com/
[Sat Dec 20 00:52:26.685959 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:51733] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/about.php"] [unique_id "aUWCyo12VmSu4NX34PTTRAAAAJg"], referer: https://www.google.fr/
[Sat Dec 20 00:52:26.966863 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:47623] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/alfa-rex.php"] [unique_id "aUWCykJMTU3r4hb8qAlQMAAAAE0"], referer: https://www.bing.com/
[Sat Dec 20 00:52:27.621983 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:61357] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aUWCy-TCMRSRXPuXZF__BQAAAQw"], referer: https://www.google.de/
[Sat Dec 20 00:52:27.942263 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:50586] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Auth.php"] [unique_id "aUWCyxzVxeBEODU8mCB1vQAAAMY"], referer: https://www.google.com/
[Sat Dec 20 00:52:28.277486 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:59715] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Auth/Basic.php"] [unique_id "aUWCzCxTWUmlILwAM_epkAAAABA"], referer: https://www.google.fr/
[Sat Dec 20 00:52:28.702844 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:52388] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Auth/about.php"] [unique_id "aUWCzI12VmSu4NX34PTTSAAAAJY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:29.064042 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:50606] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Auth/alfa-rex.php"] [unique_id "aUWCzeTCMRSRXPuXZF__CQAAAQE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:29.417789 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:53077] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Auth/wp-login.php"] [unique_id "aUWCzeTCMRSRXPuXZF__DAAAAQ0"], referer: https://www.google.fr/
[Sat Dec 20 00:52:29.866450 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:52384] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Autoload.php"] [unique_id "aUWCzY12VmSu4NX34PTTTQAAAIU"], referer: https://www.google.fr/
[Sat Dec 20 00:52:30.265741 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:50598] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Capability.php"] [unique_id "aUWCzkJMTU3r4hb8qAlQMQAAAEI"], referer: https://www.google.com/
[Sat Dec 20 00:52:30.680352 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:48195] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Cookie.php"] [unique_id "aUWCzuTCMRSRXPuXZF__EAAAAQI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:31.284976 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:47672] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aUWCz412VmSu4NX34PTTUgAAAJQ"], referer: https://www.google.fr/
[Sat Dec 20 00:52:31.625870 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:52378] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Cookie/alfa-rex.php"] [unique_id "aUWCzyxTWUmlILwAM_epmgAAABA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:31.913091 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:61375] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Cookie/wp-login.php"] [unique_id "aUWCzyxTWUmlILwAM_epmwAAABQ"], referer: https://www.bing.com/
[Sat Dec 20 00:52:32.214689 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:51769] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception.php"] [unique_id "aUWC0OTCMRSRXPuXZF__FQAAAQc"], referer: https://www.bing.com/
[Sat Dec 20 00:52:32.642700 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:61369] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/ArgumentCount.php"] [unique_id "aUWC0EJMTU3r4hb8qAlQMgAAAFY"], referer: https://www.google.com/
[Sat Dec 20 00:52:32.943352 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:50588] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http.php"] [unique_id "aUWC0OTCMRSRXPuXZF__GAAAARI"], referer: https://www.google.com/
[Sat Dec 20 00:52:33.281167 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:50608] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/InvalidArgument.php"] [unique_id "aUWC0eTCMRSRXPuXZF__GQAAAQ4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:33.582002 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:48244] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Transport.php"] [unique_id "aUWC0RzVxeBEODU8mCB1wAAAAMw"], referer: https://www.google.de/
[Sat Dec 20 00:52:34.007245 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:50594] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aUWC0kJMTU3r4hb8qAlQMwAAAE4"], referer: https://www.google.de/
[Sat Dec 20 00:52:34.336403 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:52382] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/alfa-rex.php"] [unique_id "aUWC0kJMTU3r4hb8qAlQNAAAAFE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:34.653806 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:61332] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/wp-login.php"] [unique_id "aUWC0hzVxeBEODU8mCB1zQAAAMM"], referer: https://www.bing.com/
[Sat Dec 20 00:52:35.040756 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:46977] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/HookManager.php"] [unique_id "aUWC0xzVxeBEODU8mCB1zgAAAM8"], referer: https://www.google.com/
[Sat Dec 20 00:52:35.422958 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:61371] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Hooks.php"] [unique_id "aUWC0xzVxeBEODU8mCB10QAAANM"], referer: https://www.google.fr/
[Sat Dec 20 00:52:35.730143 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:52392] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/IdnaEncoder.php"] [unique_id "aUWC0yxTWUmlILwAM_epoQAAAA8"], referer: https://www.google.de/
[Sat Dec 20 00:52:36.213703 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:48230] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Ipv6.php"] [unique_id "aUWC1CxTWUmlILwAM_eppQAAABA"], referer: https://www.bing.com/
[Sat Dec 20 00:52:36.536492 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:51740] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Iri.php"] [unique_id "aUWC1OTCMRSRXPuXZF__MAAAARE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:36.956959 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:48238] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Port.php"] [unique_id "aUWC1EJMTU3r4hb8qAlQQAAAAFE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:37.286698 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:47007] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Proxy.php"] [unique_id "aUWC1SxTWUmlILwAM_epqAAAABg"], referer: https://www.google.fr/
[Sat Dec 20 00:52:37.753511 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:46998] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Proxy/Http.php"] [unique_id "aUWC1RzVxeBEODU8mCB11gAAAMU"], referer: https://www.google.com/
[Sat Dec 20 00:52:38.218651 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:51730] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Proxy/about.php"] [unique_id "aUWC1kJMTU3r4hb8qAlQQQAAAFI"], referer: https://www.google.com/
[Sat Dec 20 00:52:38.551471 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:51725] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Proxy/alfa-rex.php"] [unique_id "aUWC1kJMTU3r4hb8qAlQQgAAAEA"], referer: https://www.google.com/
[Sat Dec 20 00:52:39.065900 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:50613] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Proxy/wp-login.php"] [unique_id "aUWC10JMTU3r4hb8qAlQQwAAAEc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:39.493620 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:47001] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Requests.php"] [unique_id "aUWC1yxTWUmlILwAM_eprAAAAAk"], referer: https://www.google.com/
[Sat Dec 20 00:52:39.898485 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:46986] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Response.php"] [unique_id "aUWC1-TCMRSRXPuXZF__NQAAAQY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:40.243749 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:50583] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Response/Headers.php"] [unique_id "aUWC2CxTWUmlILwAM_eprgAAAAc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:40.619592 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:50619] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aUWC2BzVxeBEODU8mCB13wAAAMo"], referer: https://www.google.fr/
[Sat Dec 20 00:52:40.936610 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:59728] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Response/alfa-rex.php"] [unique_id "aUWC2I12VmSu4NX34PTTYwAAAIQ"], referer: https://www.google.de/
[Sat Dec 20 00:52:41.267025 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:51739] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Response/wp-login.php"] [unique_id "aUWC2eTCMRSRXPuXZF__OAAAAQc"], referer: https://www.google.de/
[Sat Dec 20 00:52:41.614778 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:50575] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Session.php"] [unique_id "aUWC2eTCMRSRXPuXZF__OQAAARU"], referer: https://www.google.fr/
[Sat Dec 20 00:52:42.018929 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:50587] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Ssl.php"] [unique_id "aUWC2uTCMRSRXPuXZF__OgAAAQU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:42.386383 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:51741] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Transport.php"] [unique_id "aUWC2hzVxeBEODU8mCB15AAAANg"], referer: https://www.google.fr/
[Sat Dec 20 00:52:42.762630 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:47667] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Transport/Curl.php"] [unique_id "aUWC2uTCMRSRXPuXZF__PQAAAQk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:43.107717 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:59735] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "aUWC2xzVxeBEODU8mCB16gAAAMo"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:43.476273 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51735] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Transport/about.php"] [unique_id "aUWC2yxTWUmlILwAM_epsQAAAAM"], referer: https://www.google.fr/
[Sat Dec 20 00:52:43.849624 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:59716] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Transport/alfa-rex.php"] [unique_id "aUWC20JMTU3r4hb8qAlQSgAAAFU"], referer: https://www.google.de/
[Sat Dec 20 00:52:44.225026 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:48192] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Transport/wp-login.php"] [unique_id "aUWC3OTCMRSRXPuXZF__PwAAAQc"], referer: https://www.google.com/
[Sat Dec 20 00:52:44.590160 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:46984] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Utility/CaseInsensitiveDictionary.php"] [unique_id "aUWC3CxTWUmlILwAM_epsgAAAA8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:44.917500 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:61329] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Utility/FilteredIterator.php"] [unique_id "aUWC3CxTWUmlILwAM_epswAAABc"], referer: https://www.google.de/
[Sat Dec 20 00:52:45.245634 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:48228] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Utility/InputValidator.php"] [unique_id "aUWC3eTCMRSRXPuXZF__QgAAAQ0"], referer: https://www.google.fr/
[Sat Dec 20 00:52:45.699888 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:46989] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aUWC3Y12VmSu4NX34PTTbgAAAII"], referer: https://www.bing.com/
[Sat Dec 20 00:52:46.073174 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:58391] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Utility/alfa-rex.php"] [unique_id "aUWC3kJMTU3r4hb8qAlQSwAAAEg"], referer: https://www.bing.com/
[Sat Dec 20 00:52:46.555596 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:47629] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Utility/wp-login.php"] [unique_id "aUWC3kJMTU3r4hb8qAlQTAAAAEY"], referer: https://www.bing.com/
[Sat Dec 20 00:52:47.014711 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:61353] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/about.php"] [unique_id "aUWC3xzVxeBEODU8mCB19wAAAMI"], referer: https://www.google.de/
[Sat Dec 20 00:52:47.371030 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:47008] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/alfa-rex.php"] [unique_id "aUWC3-TCMRSRXPuXZF__RgAAAQw"], referer: https://www.google.de/
[Sat Dec 20 00:52:47.697631 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:47039] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/wp-login.php"] [unique_id "aUWC3-TCMRSRXPuXZF__RwAAAQM"], referer: https://www.bing.com/
[Sat Dec 20 00:52:48.044689 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:61348] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/alfa-rex.php"] [unique_id "aUWC4EJMTU3r4hb8qAlQUAAAAEU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:48.361933 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:52389] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/autoloader.php"] [unique_id "aUWC4OTCMRSRXPuXZF__SQAAARM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:48.821392 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:47650] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie.php"] [unique_id "aUWC4OTCMRSRXPuXZF__SgAAARU"], referer: https://www.google.de/
[Sat Dec 20 00:52:49.182029 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:46985] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Author.php"] [unique_id "aUWC4RzVxeBEODU8mCB1_gAAAMQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:49.621248 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:48213] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Cache.php"] [unique_id "aUWC4RzVxeBEODU8mCB2AQAAAMA"], referer: https://www.google.com/
[Sat Dec 20 00:52:49.951140 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:50609] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Caption.php"] [unique_id "aUWC4RzVxeBEODU8mCB2AwAAAMM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:50.324375 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:52357] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Category.php"] [unique_id "aUWC4ixTWUmlILwAM_epvQAAABE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:50.653250 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:61368] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/Sniffer.php"] [unique_id "aUWC4ixTWUmlILwAM_epvgAAABA"], referer: https://www.google.fr/
[Sat Dec 20 00:52:51.057997 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:52394] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/about.php"] [unique_id "aUWC4-TCMRSRXPuXZF__TwAAAQ8"], referer: https://www.google.fr/
[Sat Dec 20 00:52:51.366124 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:51723] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aUWC4-TCMRSRXPuXZF__UAAAARE"], referer: https://www.google.de/
[Sat Dec 20 00:52:51.803836 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:47018] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/wp-login.php"] [unique_id "aUWC4-TCMRSRXPuXZF__UQAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:52:52.223716 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:47673] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/about.php"] [unique_id "aUWC5OTCMRSRXPuXZF__VQAAARU"], referer: https://www.bing.com/
[Sat Dec 20 00:52:52.602878 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:61318] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/alfa-rex.php"] [unique_id "aUWC5CxTWUmlILwAM_epwAAAAAA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:52.953772 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:48237] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/wp-login.php"] [unique_id "aUWC5OTCMRSRXPuXZF__WgAAARY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:53.333538 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:57321] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Copyright.php"] [unique_id "aUWC5Y12VmSu4NX34PTTcgAAAJU"], referer: https://www.bing.com/
[Sat Dec 20 00:52:53.641171 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:59747] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Core.php"] [unique_id "aUWC5UJMTU3r4hb8qAlQVQAAAFU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:53.975430 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:47616] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Credit.php"] [unique_id "aUWC5SxTWUmlILwAM_epwQAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:54.376026 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:61367] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/HTML/Entities.php"] [unique_id "aUWC5ixTWUmlILwAM_epwwAAAAw"], referer: https://www.google.de/
[Sat Dec 20 00:52:54.827959 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:59731] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/HTML/about.php"] [unique_id "aUWC5o12VmSu4NX34PTTdgAAAIc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:55.163823 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:59720] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/HTML/alfa-rex.php"] [unique_id "aUWC5412VmSu4NX34PTTeAAAAI8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:55.524277 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:55936] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/HTML/wp-login.php"] [unique_id "aUWC50JMTU3r4hb8qAlQWAAAAEE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:55.875201 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:59751] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/about.php"] [unique_id "aUWC5yxTWUmlILwAM_epxQAAABU"], referer: https://www.google.fr/
[Sat Dec 20 00:52:56.197786 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:47631] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/alfa-rex.php"] [unique_id "aUWC6OTCMRSRXPuXZF__XAAAARE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:52:56.612678 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:57324] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Decode/wp-login.php"] [unique_id "aUWC6EJMTU3r4hb8qAlQWQAAAFY"], referer: https://www.google.com/
[Sat Dec 20 00:52:56.899007 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:52359] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Enclosure.php"] [unique_id "aUWC6CxTWUmlILwAM_epyAAAAA8"], referer: https://www.bing.com/
[Sat Dec 20 00:52:57.217249 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:61313] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Exception.php"] [unique_id "aUWC6SxTWUmlILwAM_epyQAAABc"], referer: https://www.bing.com/
[Sat Dec 20 00:52:57.531114 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:59750] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/File.php"] [unique_id "aUWC6UJMTU3r4hb8qAlQWwAAAEU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:57.897910 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:52366] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/HTTP/about.php"] [unique_id "aUWC6Y12VmSu4NX34PTTfQAAAIw"], referer: https://www.google.fr/
[Sat Dec 20 00:52:58.259275 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:52379] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/HTTP/alfa-rex.php"] [unique_id "aUWC6ixTWUmlILwAM_epzAAAABQ"], referer: https://www.google.fr/
[Sat Dec 20 00:52:58.543387 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:47031] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/HTTP/wp-login.php"] [unique_id "aUWC6hzVxeBEODU8mCB2CAAAANY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:52:58.835142 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:52387] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/IRI.php"] [unique_id "aUWC6ixTWUmlILwAM_epzgAAAA0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:52:59.179832 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:47019] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Item.php"] [unique_id "aUWC6-TCMRSRXPuXZF__XwAAARM"], referer: https://www.google.com/
[Sat Dec 20 00:52:59.469627 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:59760] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Locator.php"] [unique_id "aUWC6yxTWUmlILwAM_epzwAAAAw"], referer: https://www.google.com/
[Sat Dec 20 00:52:59.747683 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:59755] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Misc.php"] [unique_id "aUWC6yxTWUmlILwAM_ep0AAAABU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:00.100677 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:59736] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/IPv6.php"] [unique_id "aUWC7CxTWUmlILwAM_ep0gAAABM"], referer: https://www.google.com/
[Sat Dec 20 00:53:00.412896 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:59772] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/click.php"] [unique_id "aUWC7OTCMRSRXPuXZF__YAAAARU"], referer: https://www.bing.com/
[Sat Dec 20 00:53:00.752189 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:48246] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/options.php"] [unique_id "aUWC7I12VmSu4NX34PTTgAAAAJE"], referer: https://www.bing.com/
[Sat Dec 20 00:53:01.031651 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:50616] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/Date.php"] [unique_id "aUWC7RzVxeBEODU8mCB2CwAAAM0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:01.338703 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:52369] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/product.php"] [unique_id "aUWC7UJMTU3r4hb8qAlQXwAAAEA"], referer: https://www.google.de/
[Sat Dec 20 00:53:01.619486 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:52412] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Parser.php"] [unique_id "aUWC7eTCMRSRXPuXZF__YwAAAQI"], referer: https://www.google.com/
[Sat Dec 20 00:53:01.890532 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:50574] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Rating.php"] [unique_id "aUWC7eTCMRSRXPuXZF__ZAAAARQ"], referer: https://www.google.de/
[Sat Dec 20 00:53:02.187817 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:57342] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Registry.php"] [unique_id "aUWC7uTCMRSRXPuXZF__ZQAAARE"], referer: https://www.google.fr/
[Sat Dec 20 00:53:02.462149 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:61327] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Restriction.php"] [unique_id "aUWC7hzVxeBEODU8mCB2DAAAAMA"], referer: https://www.google.com/
[Sat Dec 20 00:53:02.784504 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:46992] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Sanitize.php"] [unique_id "aUWC7uTCMRSRXPuXZF__ZgAAARA"], referer: https://www.google.de/
[Sat Dec 20 00:53:03.096667 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:48235] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Source.php"] [unique_id "aUWC7-TCMRSRXPuXZF__ZwAAAQo"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:03.380531 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:57297] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/Declaration/Parser.php"] [unique_id "aUWC70JMTU3r4hb8qAlQZAAAAFg"], referer: https://www.google.com/
[Sat Dec 20 00:53:03.702678 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:48255] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/Declaration/about.php"] [unique_id "aUWC7xzVxeBEODU8mCB2DgAAANA"], referer: https://www.bing.com/
[Sat Dec 20 00:53:04.019899 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:51759] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/Declaration/alfa-rex.php"] [unique_id "aUWC8I12VmSu4NX34PTTigAAAIg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:04.338895 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:47625] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/Declaration/wp-login.php"] [unique_id "aUWC8OTCMRSRXPuXZF__aQAAAQg"], referer: https://www.google.fr/
[Sat Dec 20 00:53:04.615146 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:57240] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/about.php"] [unique_id "aUWC8OTCMRSRXPuXZF__agAAAQM"], referer: https://www.google.com/
[Sat Dec 20 00:53:05.026361 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:53094] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/alfa-rex.php"] [unique_id "aUWC8UJMTU3r4hb8qAlQZgAAAEU"], referer: https://www.google.com/
[Sat Dec 20 00:53:05.352196 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:51722] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/wp-login.php"] [unique_id "aUWC8eTCMRSRXPuXZF__bAAAARI"], referer: https://www.bing.com/
[Sat Dec 20 00:53:05.709137 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:50614] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/XML/wp/wMIVJQet.php"] [unique_id "aUWC8eTCMRSRXPuXZF__bgAAAQI"], referer: https://www.google.de/
[Sat Dec 20 00:53:06.057176 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:50602] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/about.php"] [unique_id "aUWC8ixTWUmlILwAM_ep1wAAAAg"], referer: https://www.google.de/
[Sat Dec 20 00:53:06.405468 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:52393] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/alfa-rex.php"] [unique_id "aUWC8o12VmSu4NX34PTTjgAAAJA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:06.740984 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:51729] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "aUWC8uTCMRSRXPuXZF__cgAAAQA"], referer: https://www.google.de/
[Sat Dec 20 00:53:07.025367 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:6841] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/SimplePie/wp-login.php"] [unique_id "aUWC8xzVxeBEODU8mCB2EgAAAM4"], referer: https://www.bing.com/
[Sat Dec 20 00:53:07.297095 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:61314] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aUWC8-TCMRSRXPuXZF__dQAAARU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:07.591884 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:48249] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/alfa-rex.php"] [unique_id "aUWC8412VmSu4NX34PTTkQAAAIY"], referer: https://www.google.fr/
[Sat Dec 20 00:53:07.862522 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:55966] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/library/wp-login.php"] [unique_id "aUWC8412VmSu4NX34PTTkgAAAIc"], referer: https://www.google.com/
[Sat Dec 20 00:53:08.140761 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:47646] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Author.php"] [unique_id "aUWC9EJMTU3r4hb8qAlQawAAAEo"], referer: https://www.google.de/
[Sat Dec 20 00:53:08.413832 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:59759] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache.php"] [unique_id "aUWC9OTCMRSRXPuXZF__dwAAAQE"], referer: https://www.google.de/
[Sat Dec 20 00:53:08.783947 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:55949] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/Base.php"] [unique_id "aUWC9EJMTU3r4hb8qAlQbQAAAFM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:09.059586 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:48206] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/BaseDataCache.php"] [unique_id "aUWC9RzVxeBEODU8mCB2FwAAANI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:09.455852 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:50600] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/CallableNameFilter.php"] [unique_id "aUWC9SxTWUmlILwAM_ep2gAAAAE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:09.732414 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:55985] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/DB.php"] [unique_id "aUWC9SxTWUmlILwAM_ep2wAAABM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:10.014125 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:59717] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/DataCache.php"] [unique_id "aUWC9uTCMRSRXPuXZF__eQAAARE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:10.303619 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:50565] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/File.php"] [unique_id "aUWC9ixTWUmlILwAM_ep3AAAAAY"], referer: https://www.google.fr/
[Sat Dec 20 00:53:10.580114 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:59754] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/Memcache.php"] [unique_id "aUWC9o12VmSu4NX34PTTlwAAAI0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:10.853999 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:47630] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/Memcached.php"] [unique_id "aUWC9ixTWUmlILwAM_ep3QAAAA8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:11.281084 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:50581] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/MySQL.php"] [unique_id "aUWC9xzVxeBEODU8mCB2GwAAAMM"], referer: https://www.google.com/
[Sat Dec 20 00:53:11.615653 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:59726] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/NameFilter.php"] [unique_id "aUWC9-TCMRSRXPuXZF__gAAAAQk"], referer: https://www.google.com/
[Sat Dec 20 00:53:11.897512 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:51738] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/Psr16.php"] [unique_id "aUWC9-TCMRSRXPuXZF__gwAAARY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:12.212208 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:58413] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/Redis.php"] [unique_id "aUWC-CxTWUmlILwAM_ep3gAAAAs"], referer: https://www.google.fr/
[Sat Dec 20 00:53:12.568891 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51716] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/about.php"] [unique_id "aUWC-CxTWUmlILwAM_ep4AAAABg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:12.847751 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:55986] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/alfa-rex.php"] [unique_id "aUWC-CxTWUmlILwAM_ep4QAAAAA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:13.354265 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:53061] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Cache/wp-login.php"] [unique_id "aUWC-RzVxeBEODU8mCB2HQAAAMI"], referer: https://www.google.de/
[Sat Dec 20 00:53:14.512877 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:59771] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Caption.php"] [unique_id "aUWC-hzVxeBEODU8mCB2IQAAAMc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:14.996903 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:61363] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Category.php"] [unique_id "aUWC-hzVxeBEODU8mCB2IwAAANI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:15.286242 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:47661] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Content/about.php"] [unique_id "aUWC-yxTWUmlILwAM_ep5gAAABU"], referer: https://www.bing.com/
[Sat Dec 20 00:53:15.629604 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:55950] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Content/alfa-rex.php"] [unique_id "aUWC--TCMRSRXPuXZF__igAAAQI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:15.941742 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:48197] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Content/wp-login.php"] [unique_id "aUWC-xzVxeBEODU8mCB2JwAAANc"], referer: https://www.google.de/
[Sat Dec 20 00:53:16.304692 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:47637] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Copyright.php"] [unique_id "aUWC_I12VmSu4NX34PTTmgAAAIM"], referer: https://www.bing.com/
[Sat Dec 20 00:53:16.589859 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:61344] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Core.php"] [unique_id "aUWC_OTCMRSRXPuXZF__jAAAARA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:16.874322 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:47037] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Credit.php"] [unique_id "aUWC_OTCMRSRXPuXZF__jQAAAQ0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:17.193272 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:61341] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/Entities.php"] [unique_id "aUWC_eTCMRSRXPuXZF__jgAAAQs"], referer: https://www.google.fr/
[Sat Dec 20 00:53:17.519403 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:47010] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Decode/about.php"] [unique_id "aUWC_Y12VmSu4NX34PTTmwAAAJI"], referer: https://www.google.fr/
[Sat Dec 20 00:53:17.916620 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:53068] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Decode/alfa-rex.php"] [unique_id "aUWC_RzVxeBEODU8mCB2KQAAAMI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:18.241410 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:61325] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Decode/wp-login.php"] [unique_id "aUWC_o12VmSu4NX34PTTngAAAIE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:18.518864 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:55971] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Enclosure.php"] [unique_id "aUWC_uTCMRSRXPuXZF__kgAAAQM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:18.790598 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:59748] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Exception.php"] [unique_id "aUWC_uTCMRSRXPuXZF__kwAAAQ8"], referer: https://www.google.com/
[Sat Dec 20 00:53:19.118053 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:46985] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/File.php"] [unique_id "aUWC_412VmSu4NX34PTTnwAAAJM"], referer: https://www.bing.com/
[Sat Dec 20 00:53:19.418999 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:48236] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "aUWC_412VmSu4NX34PTTogAAAIU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:19.733216 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:51774] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/HTTP/Parser.php"] [unique_id "aUWC_0JMTU3r4hb8qAlQdgAAAEo"], referer: https://www.google.com/
[Sat Dec 20 00:53:20.003444 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:47639] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/HTTP/about.php"] [unique_id "aUWDACxTWUmlILwAM_ep6wAAAAI"], referer: https://www.google.com/
[Sat Dec 20 00:53:20.343847 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:50602] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/HTTP/alfa-rex.php"] [unique_id "aUWDAI12VmSu4NX34PTTpAAAAJc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:20.661705 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:47664] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/HTTP/wp-login.php"] [unique_id "aUWDABzVxeBEODU8mCB2KgAAAM8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:20.942237 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:46987] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/IRI.php"] [unique_id "aUWDAEJMTU3r4hb8qAlQeAAAAEE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:21.230948 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:51747] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Item.php"] [unique_id "aUWDAeTCMRSRXPuXZF__mAAAARI"], referer: https://www.bing.com/
[Sat Dec 20 00:53:21.705938 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:51744] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Locator.php"] [unique_id "aUWDAeTCMRSRXPuXZF__nQAAARc"], referer: https://www.google.com/
[Sat Dec 20 00:53:21.979842 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:52355] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Misc.php"] [unique_id "aUWDAeTCMRSRXPuXZF__oAAAAQk"], referer: https://www.google.com/
[Sat Dec 20 00:53:22.256041 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:57325] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Net/IPv6.php"] [unique_id "aUWDAkJMTU3r4hb8qAlQewAAAEY"], referer: https://www.google.fr/
[Sat Dec 20 00:53:22.526605 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:50562] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Net/about.php"] [unique_id "aUWDAo12VmSu4NX34PTTpwAAAIk"], referer: https://www.bing.com/
[Sat Dec 20 00:53:22.818542 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:52391] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Net/alfa-rex.php"] [unique_id "aUWDAo12VmSu4NX34PTTqAAAAIg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:23.168421 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:57301] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Net/wp-login.php"] [unique_id "aUWDA412VmSu4NX34PTTqwAAAIY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:23.503835 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:55950] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Parse/Date.php"] [unique_id "aUWDA-TCMRSRXPuXZF__ogAAAQA"], referer: https://www.bing.com/
[Sat Dec 20 00:53:23.786449 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:61331] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Parse/about.php"] [unique_id "aUWDA0JMTU3r4hb8qAlQfwAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:24.061650 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:60843] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Parse/alfa-rex.php"] [unique_id "aUWDBOTCMRSRXPuXZF__owAAAQY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:24.401915 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:50585] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Parse/wp-login.php"] [unique_id "aUWDBBzVxeBEODU8mCB2LAAAANM"], referer: https://www.bing.com/
[Sat Dec 20 00:53:24.690191 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:48229] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Parser.php"] [unique_id "aUWDBEJMTU3r4hb8qAlQggAAAEo"], referer: https://www.google.de/
[Sat Dec 20 00:53:25.004188 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:52354] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Rating.php"] [unique_id "aUWDBSxTWUmlILwAM_ep7wAAAA0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:25.394174 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:61317] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Registry.php"] [unique_id "aUWDBeTCMRSRXPuXZF__pwAAAQQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:25.665383 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:59734] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/RegistryAware.php"] [unique_id "aUWDBRzVxeBEODU8mCB2MAAAAM4"], referer: https://www.google.de/
[Sat Dec 20 00:53:25.960307 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:48254] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Restriction.php"] [unique_id "aUWDBeTCMRSRXPuXZF__qgAAARU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:26.284076 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:52411] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Sanitize.php"] [unique_id "aUWDBuTCMRSRXPuXZF__rQAAARY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:26.584301 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:50590] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/SimplePie.php"] [unique_id "aUWDBkJMTU3r4hb8qAlQhAAAAEs"], referer: https://www.google.de/
[Sat Dec 20 00:53:26.887669 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:51727] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/Source.php"] [unique_id "aUWDBuTCMRSRXPuXZF__rwAAAQU"], referer: https://www.google.de/
[Sat Dec 20 00:53:27.413588 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:60821] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/XML/Declaration/about.php"] [unique_id "aUWDB-TCMRSRXPuXZF__sQAAARA"], referer: https://www.bing.com/
[Sat Dec 20 00:53:27.869607 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:57231] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/XML/Declaration/alfa-rex.php"] [unique_id "aUWDB-TCMRSRXPuXZF__sgAAARc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:28.179369 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:58370] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/XML/Declaration/wp-login.php"] [unique_id "aUWDCI12VmSu4NX34PTTsgAAAJg"], referer: https://www.bing.com/
[Sat Dec 20 00:53:28.623665 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:61330] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/XML/about.php"] [unique_id "aUWDCCxTWUmlILwAM_ep8gAAABA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:28.926626 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:57323] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/XML/alfa-rex.php"] [unique_id "aUWDCEJMTU3r4hb8qAlQigAAAFE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:29.199583 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:52377] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/XML/wp-login.php"] [unique_id "aUWDCeTCMRSRXPuXZF__tQAAAQg"], referer: https://www.google.de/
[Sat Dec 20 00:53:29.672254 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:52409] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/about.php"] [unique_id "aUWDCY12VmSu4NX34PTTswAAAIE"], referer: https://www.google.de/
[Sat Dec 20 00:53:29.976828 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:55963] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/alfa-rex.php"] [unique_id "aUWDCUJMTU3r4hb8qAlQjQAAAFM"], referer: https://www.bing.com/
[Sat Dec 20 00:53:30.261425 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:59737] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/src/wp-login.php"] [unique_id "aUWDCuTCMRSRXPuXZF__uQAAAQM"], referer: https://www.google.com/
[Sat Dec 20 00:53:30.682218 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51732] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUWDCixTWUmlILwAM_ep9gAAABg"], referer: https://www.google.com/
[Sat Dec 20 00:53:31.109946 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:49992] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff.php"] [unique_id "aUWDCyxTWUmlILwAM_ep9wAAABY"], referer: https://www.google.de/
[Sat Dec 20 00:53:31.458334 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:48243] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUWDCxzVxeBEODU8mCB2MwAAAMI"], referer: https://www.google.com/
[Sat Dec 20 00:53:31.802001 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:58431] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/alfa-rex.php"] [unique_id "aUWDCxzVxeBEODU8mCB2NQAAAMo"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:32.178868 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:50591] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/font.php"] [unique_id "aUWDDI12VmSu4NX34PTTtQAAAIQ"], referer: https://www.google.fr/
[Sat Dec 20 00:53:32.693789 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:51715] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/native.php"] [unique_id "aUWDDI12VmSu4NX34PTTuAAAAIc"], referer: https://www.google.fr/
[Sat Dec 20 00:53:33.008776 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:47657] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/shell.php"] [unique_id "aUWDDRzVxeBEODU8mCB2OAAAAMg"], referer: https://www.google.fr/
[Sat Dec 20 00:53:33.289847 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:50580] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/string.php"] [unique_id "aUWDDeTCMRSRXPuXZF__vQAAARc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:33.593990 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:46991] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/wp-login.php"] [unique_id "aUWDDY12VmSu4NX34PTTvAAAAJM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:34.009692 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:59739] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/xdiff.php"] [unique_id "aUWDDuTCMRSRXPuXZF__vgAAAQs"], referer: https://www.google.fr/
[Sat Dec 20 00:53:34.397595 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:57290] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer.php"] [unique_id "aUWDDixTWUmlILwAM_ep-QAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:34.700070 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:59758] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUWDDkJMTU3r4hb8qAlQkAAAAEc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:35.091788 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:48210] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/alfa-rex.php"] [unique_id "aUWDDyxTWUmlILwAM_ep-gAAAAw"], referer: https://www.google.com/
[Sat Dec 20 00:53:35.425146 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:51756] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/inline.php"] [unique_id "aUWDDxzVxeBEODU8mCB2OgAAAM0"], referer: https://www.google.com/
[Sat Dec 20 00:53:36.021348 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:61323] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aUWDEI12VmSu4NX34PTTwwAAAIs"], referer: https://www.google.de/
[Sat Dec 20 00:53:36.485262 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:52356] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aUWDEBzVxeBEODU8mCB2OwAAANI"], referer: https://www.bing.com/
[Sat Dec 20 00:53:36.868461 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:52363] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "aUWDEEJMTU3r4hb8qAlQkgAAAFE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:37.247874 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:57277] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/wp-login.php"] [unique_id "aUWDERzVxeBEODU8mCB2PwAAANU"], referer: https://www.google.de/
[Sat Dec 20 00:53:37.604949 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:48221] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Exception.php"] [unique_id "aUWDEeTCMRSRXPuXZF__xQAAAQw"], referer: https://www.google.com/
[Sat Dec 20 00:53:37.927031 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:52414] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/alfa-rex.php"] [unique_id "aUWDEeTCMRSRXPuXZF__xgAAAQk"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:38.274474 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:51767] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aUWDEo12VmSu4NX34PTTxQAAAJY"], referer: https://www.google.de/
[Sat Dec 20 00:53:38.599767 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:59753] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp/FyGcj.php"] [unique_id "aUWDEixTWUmlILwAM_eqAAAAAAU"], referer: https://www.google.de/
[Sat Dec 20 00:53:38.915563 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:50589] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin-bar.php"] [unique_id "aUWDEhzVxeBEODU8mCB2QQAAAME"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:39.267610 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:50039] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUWDE412VmSu4NX34PTTxwAAAJI"], referer: https://www.google.com/
[Sat Dec 20 00:53:39.655186 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:47024] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUWDE-TCMRSRXPuXZF__yQAAAQE"], referer: https://www.bing.com/
[Sat Dec 20 00:53:40.153159 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:52370] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/alfa-rex.php"] [unique_id "aUWDFBzVxeBEODU8mCB2QwAAANY"], referer: https://www.google.com/
[Sat Dec 20 00:53:40.470918 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:57328] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUWDFEJMTU3r4hb8qAlQogAAAFA"], referer: https://www.bing.com/
[Sat Dec 20 00:53:40.982855 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:51736] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.php"] [unique_id "aUWDFCxTWUmlILwAM_eqAwAAABQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:41.342296 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:50615] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min.php"] [unique_id "aUWDFUJMTU3r4hb8qAlQpAAAAFI"], referer: https://www.google.com/
[Sat Dec 20 00:53:41.701823 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:47668] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.php"] [unique_id "aUWDFUJMTU3r4hb8qAlQpQAAAEs"], referer: https://www.google.fr/
[Sat Dec 20 00:53:42.017804 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:52373] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min.php"] [unique_id "aUWDFhzVxeBEODU8mCB2RQAAAM8"], referer: https://www.google.fr/
[Sat Dec 20 00:53:42.440277 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:61338] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.php"] [unique_id "aUWDFixTWUmlILwAM_eqBQAAAAw"], referer: https://www.google.de/
[Sat Dec 20 00:53:42.771695 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:6442] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min.php"] [unique_id "aUWDFuTCMRSRXPuXZF__zQAAAQY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:43.125800 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:58406] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.php"] [unique_id "aUWDF-TCMRSRXPuXZF__zgAAAQI"], referer: https://www.google.fr/
[Sat Dec 20 00:53:43.499699 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:61364] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-login.php"] [unique_id "aUWDF0JMTU3r4hb8qAlQpgAAAEU"], referer: https://www.google.de/
[Sat Dec 20 00:53:43.888097 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:50617] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/author-template.php"] [unique_id "aUWDF0JMTU3r4hb8qAlQpwAAAEQ"], referer: https://www.google.com/
[Sat Dec 20 00:53:44.223590 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:55968] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings.php"] [unique_id "aUWDGEJMTU3r4hb8qAlQqAAAAFY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:44.556384 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:59744] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/pattern-overrides.php"] [unique_id "aUWDGBzVxeBEODU8mCB2SQAAANg"], referer: https://www.google.de/
[Sat Dec 20 00:53:44.954042 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:52390] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/post-meta.php"] [unique_id "aUWDGOTCMRSRXPuXZF__0QAAARI"], referer: https://www.google.de/
[Sat Dec 20 00:53:45.398886 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:52380] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-editor.php"] [unique_id "aUWDGY12VmSu4NX34PTTzAAAAIw"], referer: https://www.google.fr/
[Sat Dec 20 00:53:45.750662 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:48200] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns.php"] [unique_id "aUWDGRzVxeBEODU8mCB2SgAAAMk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:46.116139 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:48199] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/wp-login.php"] [unique_id "aUWDGuTCMRSRXPuXZF__0wAAAQA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:46.542249 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:52396] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/alfa-rex.php"] [unique_id "aUWDGuTCMRSRXPuXZF__1AAAAQs"], referer: https://www.bing.com/
[Sat Dec 20 00:53:46.897572 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:61359] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/query-grid-posts.php"] [unique_id "aUWDGuTCMRSRXPuXZF__2AAAARU"], referer: https://www.bing.com/
[Sat Dec 20 00:53:47.249650 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:47005] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/query-large-title-posts.php"] [unique_id "aUWDG0JMTU3r4hb8qAlQrAAAAEk"], referer: https://www.google.com/
[Sat Dec 20 00:53:47.609819 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:47034] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/query-medium-posts.php"] [unique_id "aUWDG0JMTU3r4hb8qAlQrgAAAEI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:47.948641 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:47626] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/query-offset-posts.php"] [unique_id "aUWDG-TCMRSRXPuXZF__3QAAAQA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:48.270520 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:52401] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/query-small-posts.php"] [unique_id "aUWDHEJMTU3r4hb8qAlQrwAAAFc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:48.664049 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:47663] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/query-standard-posts.php"] [unique_id "aUWDHOTCMRSRXPuXZF__4QAAAQQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:49.096645 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:48193] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/social-links-shared-background-color.php"] [unique_id "aUWDHeTCMRSRXPuXZF__4gAAARc"], referer: https://www.google.com/
[Sat Dec 20 00:53:49.530722 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:58390] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/wp-login.php"] [unique_id "aUWDHY12VmSu4NX34PTT0AAAAJU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:49.957618 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:61366] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aUWDHUJMTU3r4hb8qAlQswAAAEM"], referer: https://www.bing.com/
[Sat Dec 20 00:53:50.304024 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:59774] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/alfa-rex.php"] [unique_id "aUWDHkJMTU3r4hb8qAlQtAAAAFQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:50.762692 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:47036] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/align.php"] [unique_id "aUWDHkJMTU3r4hb8qAlQtgAAAEg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:51.189436 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:57312] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/background.php"] [unique_id "aUWDH0JMTU3r4hb8qAlQtwAAAE4"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:51.732826 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:48232] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/block-style-variations.php"] [unique_id "aUWDH-TCMRSRXPuXZF__5AAAAQ8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:52.211294 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:51737] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/border.php"] [unique_id "aUWDIEJMTU3r4hb8qAlQvgAAAEU"], referer: https://www.google.fr/
[Sat Dec 20 00:53:52.668196 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:58422] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/colors.php"] [unique_id "aUWDIOTCMRSRXPuXZF__6AAAAQ0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:53.026830 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:53070] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/custom-classname.php"] [unique_id "aUWDIY12VmSu4NX34PTT2QAAAIU"], referer: https://www.google.com/
[Sat Dec 20 00:53:53.375747 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:59742] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/dimensions.php"] [unique_id "aUWDIRzVxeBEODU8mCB2VQAAANI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:53.750500 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:51089] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/duotone.php"] [unique_id "aUWDIUJMTU3r4hb8qAlQyAAAAEQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:55.636019 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:59765] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/elements.php"] [unique_id "aUWDI-TCMRSRXPuXZF__9AAAAQ8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:53:56.078955 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51748] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/generated-classname.php"] [unique_id "aUWDJCxTWUmlILwAM_eqGAAAAAA"], referer: https://www.google.de/
[Sat Dec 20 00:53:56.418614 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:50607] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/layout.php"] [unique_id "aUWDJOTCMRSRXPuXZF__9QAAAQ0"], referer: https://www.bing.com/
[Sat Dec 20 00:53:56.824199 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:47635] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/position.php"] [unique_id "aUWDJBzVxeBEODU8mCB2YQAAAMw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:57.194880 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:52415] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/settings.php"] [unique_id "aUWDJUJMTU3r4hb8qAlQzgAAAFc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:57.603074 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:58397] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/shadow.php"] [unique_id "aUWDJSxTWUmlILwAM_eqIgAAAAk"], referer: https://www.google.de/
[Sat Dec 20 00:53:57.966960 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:47660] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/spacing.php"] [unique_id "aUWDJeTCMRSRXPuXZF8AAwAAAQo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:58.332051 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:50584] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/typography.php"] [unique_id "aUWDJuTCMRSRXPuXZF8ABgAAAQ8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:53:58.858370 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:60861] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/utils.php"] [unique_id "aUWDJixTWUmlILwAM_eqKAAAABM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:59.302778 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:46982] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/wp-login.php"] [unique_id "aUWDJ-TCMRSRXPuXZF8AEQAAAQc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:53:59.741343 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:60802] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils.php"] [unique_id "aUWDJ-TCMRSRXPuXZF8AFAAAAQY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:00.096402 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:47033] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template.php"] [unique_id "aUWDKOTCMRSRXPuXZF8AFQAAARg"], referer: https://www.google.de/
[Sat Dec 20 00:54:00.522656 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:61362] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks.php"] [unique_id "aUWDKCxTWUmlILwAM_eqKgAAABA"], referer: https://www.google.de/
[Sat Dec 20 00:54:00.901098 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:48250] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/about.php"] [unique_id "aUWDKEJMTU3r4hb8qAlQ1AAAAEk"], referer: https://www.google.fr/
[Sat Dec 20 00:54:01.262298 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:59738] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bookmark-template.php"] [unique_id "aUWDKRzVxeBEODU8mCB2cQAAAMg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:01.727710 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:50001] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bookmark.php"] [unique_id "aUWDKSxTWUmlILwAM_eqLAAAAAg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:03.808273 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:47028] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/cache-compat.php"] [unique_id "aUWDKyxTWUmlILwAM_eqMQAAABU"], referer: https://www.google.com/
[Sat Dec 20 00:54:04.176084 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:47644] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/cache.php"] [unique_id "aUWDLOTCMRSRXPuXZF8AIAAAAQE"], referer: https://www.google.com/
[Sat Dec 20 00:54:04.642649 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:59762] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/canonical.php"] [unique_id "aUWDLEJMTU3r4hb8qAlQ1gAAAEg"], referer: https://www.google.de/
[Sat Dec 20 00:54:05.000507 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:51764] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/capabilities.php"] [unique_id "aUWDLOTCMRSRXPuXZF8AIwAAAQI"], referer: https://www.google.com/
[Sat Dec 20 00:54:05.367003 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:58426] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-template.php"] [unique_id "aUWDLeTCMRSRXPuXZF8AKAAAAQg"], referer: https://www.google.fr/
[Sat Dec 20 00:54:05.830037 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:47632] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category.php"] [unique_id "aUWDLeTCMRSRXPuXZF8AKQAAAQU"], referer: https://www.google.com/
[Sat Dec 20 00:54:06.248886 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:51742] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUWDLo12VmSu4NX34PTT8AAAAJA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:06.585700 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:52365] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/alfa-rex.php"] [unique_id "aUWDLuTCMRSRXPuXZF8AKgAAAQE"], referer: https://www.google.de/
[Sat Dec 20 00:54:06.929045 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:53082] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUWDLuTCMRSRXPuXZF8AKwAAARE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:07.268388 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:59729] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp/NiVfSk.php"] [unique_id "aUWDL0JMTU3r4hb8qAlQ2AAAAEM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:07.668464 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:50612] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-IXR.php"] [unique_id "aUWDL0JMTU3r4hb8qAlQ2QAAAFQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:08.002780 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:47020] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-avif-info.php"] [unique_id "aUWDMI12VmSu4NX34PTT9QAAAI0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:08.337430 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:52361] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed.php"] [unique_id "aUWDMI12VmSu4NX34PTT9gAAAIk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:08.675190 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:52399] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-http.php"] [unique_id "aUWDMCxTWUmlILwAM_eqOgAAAAg"], referer: https://www.google.de/
[Sat Dec 20 00:54:09.005689 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:55940] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-json.php"] [unique_id "aUWDMSxTWUmlILwAM_eqOwAAABU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:09.353639 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:47622] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-oembed.php"] [unique_id "aUWDMUJMTU3r4hb8qAlQ4AAAAEI"], referer: https://www.google.com/
[Sat Dec 20 00:54:09.721447 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:47038] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpass.php"] [unique_id "aUWDMUJMTU3r4hb8qAlQ4gAAAE0"], referer: https://www.bing.com/
[Sat Dec 20 00:54:10.124088 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:50618] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer.php"] [unique_id "aUWDMkJMTU3r4hb8qAlQ5AAAAEE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:10.489216 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:61347] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-pop3.php"] [unique_id "aUWDMixTWUmlILwAM_eqPAAAAAs"], referer: https://www.google.de/
[Sat Dec 20 00:54:10.835384 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:46981] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-requests.php"] [unique_id "aUWDMixTWUmlILwAM_eqPQAAAAA"], referer: https://www.google.com/
[Sat Dec 20 00:54:11.201526 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:58412] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aUWDMyxTWUmlILwAM_eqPwAAABM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:11.633292 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:50604] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-smtp.php"] [unique_id "aUWDM-TCMRSRXPuXZF8AMQAAAQ0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:11.990267 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:53056] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-snoopy.php"] [unique_id "aUWDMxzVxeBEODU8mCB2dgAAAMs"], referer: https://www.google.fr/
[Sat Dec 20 00:54:12.404273 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:61370] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-category-dropdown.php"] [unique_id "aUWDNI12VmSu4NX34PTT-QAAAJI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:12.826182 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:53069] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-category.php"] [unique_id "aUWDNOTCMRSRXPuXZF8AMwAAAQk"], referer: https://www.google.fr/
[Sat Dec 20 00:54:13.209952 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:48222] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment.php"] [unique_id "aUWDNeTCMRSRXPuXZF8ANgAAARc"], referer: https://www.google.com/
[Sat Dec 20 00:54:14.054804 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:47025] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-nav-menu.php"] [unique_id "aUWDNo12VmSu4NX34PTT_QAAAIY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:14.408846 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:57317] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-page-dropdown.php"] [unique_id "aUWDNkJMTU3r4hb8qAlQ6wAAAEs"], referer: https://www.google.com/
[Sat Dec 20 00:54:14.871524 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:46978] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-page.php"] [unique_id "aUWDNhzVxeBEODU8mCB2eQAAANQ"], referer: https://www.google.com/
[Sat Dec 20 00:54:15.282066 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:51728] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-admin-bar.php"] [unique_id "aUWDNyxTWUmlILwAM_eqQwAAAAg"], referer: https://www.google.de/
[Sat Dec 20 00:54:15.659502 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:57237] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-ajax-response.php"] [unique_id "aUWDNyxTWUmlILwAM_eqRAAAABI"], referer: https://www.google.com/
[Sat Dec 20 00:54:16.034190 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:47647] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-application-passwords.php"] [unique_id "aUWDOI12VmSu4NX34PTUAAAAAIc"], referer: https://www.bing.com/
[Sat Dec 20 00:54:16.397661 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:55977] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-bindings-registry.php"] [unique_id "aUWDOCxTWUmlILwAM_eqRgAAAA0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:16.773793 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:61321] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-bindings-source.php"] [unique_id "aUWDOOTCMRSRXPuXZF8APwAAARI"], referer: https://www.google.com/
[Sat Dec 20 00:54:17.115729 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:57274] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-editor-context.php"] [unique_id "aUWDOY12VmSu4NX34PTUAQAAAIk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:17.467185 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:60804] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-list.php"] [unique_id "aUWDOSxTWUmlILwAM_eqSgAAAAA"], referer: https://www.bing.com/
[Sat Dec 20 00:54:17.871397 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:50569] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-metadata-registry.php"] [unique_id "aUWDOUJMTU3r4hb8qAlQ7AAAAEI"], referer: https://www.google.fr/
[Sat Dec 20 00:54:18.214116 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:61326] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-parser-block.php"] [unique_id "aUWDOixTWUmlILwAM_eqSwAAABQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:18.577788 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:57333] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-parser-frame.php"] [unique_id "aUWDOhzVxeBEODU8mCB2gAAAAM4"], referer: https://www.bing.com/
[Sat Dec 20 00:54:18.933163 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:51717] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-parser.php"] [unique_id "aUWDOhzVxeBEODU8mCB2gQAAANI"], referer: https://www.google.fr/
[Sat Dec 20 00:54:19.313461 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:51714] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-pattern-categories-registry.php"] [unique_id "aUWDOxzVxeBEODU8mCB2gwAAAMs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:19.688856 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:58399] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-patterns-registry.php"] [unique_id "aUWDO412VmSu4NX34PTUAwAAAIo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:20.025403 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:57278] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-styles-registry.php"] [unique_id "aUWDPBzVxeBEODU8mCB2hQAAANg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:20.357607 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:53064] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-supports.php"] [unique_id "aUWDPBzVxeBEODU8mCB2hgAAAMo"], referer: https://www.google.com/
[Sat Dec 20 00:54:20.741320 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:59775] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-template.php"] [unique_id "aUWDPCxTWUmlILwAM_eqTgAAAA0"], referer: https://www.google.fr/
[Sat Dec 20 00:54:21.185648 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:46983] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-templates-registry.php"] [unique_id "aUWDPSxTWUmlILwAM_eqUQAAAAs"], referer: https://www.google.com/
[Sat Dec 20 00:54:21.556108 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:47009] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-type-registry.php"] [unique_id "aUWDPSxTWUmlILwAM_eqUgAAAAU"], referer: https://www.google.fr/
[Sat Dec 20 00:54:21.894589 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:48253] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-type.php"] [unique_id "aUWDPeTCMRSRXPuXZF8ARAAAAQM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:22.292684 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:58376] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block.php"] [unique_id "aUWDPuTCMRSRXPuXZF8ARgAAAQg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:22.737191 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:48204] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-classic-to-block-menu-converter.php"] [unique_id "aUWDPkJMTU3r4hb8qAlQ8QAAAFE"], referer: https://www.bing.com/
[Sat Dec 20 00:54:23.159758 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:50603] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-comment-query.php"] [unique_id "aUWDP-TCMRSRXPuXZF8ASgAAAQ8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:23.572327 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:6445] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-comment.php"] [unique_id "aUWDP0JMTU3r4hb8qAlQ8wAAAFc"], referer: https://www.google.com/
[Sat Dec 20 00:54:23.994295 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51750] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-control.php"] [unique_id "aUWDPyxTWUmlILwAM_eqVQAAAAQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:24.462100 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:50578] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager.php"] [unique_id "aUWDQOTCMRSRXPuXZF8ASwAAARE"], referer: https://www.google.fr/
[Sat Dec 20 00:54:24.881138 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:60849] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-nav-menus.php"] [unique_id "aUWDQCxTWUmlILwAM_eqWQAAAAg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:25.269170 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:53117] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-panel.php"] [unique_id "aUWDQUJMTU3r4hb8qAlQ-AAAAEY"], referer: https://www.google.de/
[Sat Dec 20 00:54:25.730177 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:48205] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-section.php"] [unique_id "aUWDQRzVxeBEODU8mCB2iAAAAMQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:26.181189 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:58419] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-setting.php"] [unique_id "aUWDQkJMTU3r4hb8qAlQ_AAAAEg"], referer: https://www.google.de/
[Sat Dec 20 00:54:26.584756 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:47648] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-widgets.php"] [unique_id "aUWDQo12VmSu4NX34PTUDAAAAIU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:26.958687 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:48227] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-date-query.php"] [unique_id "aUWDQixTWUmlILwAM_eqXAAAAAc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:27.339558 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:59730] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependencies.php"] [unique_id "aUWDQyxTWUmlILwAM_eqXgAAAAA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:27.801387 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:55953] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency.php"] [unique_id "aUWDQyxTWUmlILwAM_eqXwAAAAk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:28.160808 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:52413] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aUWDREJMTU3r4hb8qAlRAAAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:28.576454 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:48248] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-editor.php"] [unique_id "aUWDRBzVxeBEODU8mCB2iwAAANI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:29.070776 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:55978] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-embed.php"] [unique_id "aUWDRSxTWUmlILwAM_eqZAAAABY"], referer: https://www.bing.com/
[Sat Dec 20 00:54:29.430510 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:55983] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error.php"] [unique_id "aUWDRSxTWUmlILwAM_eqZgAAAA4"], referer: https://www.google.com/
[Sat Dec 20 00:54:29.797260 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:48248] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-exception.php"] [unique_id "aUWDRSxTWUmlILwAM_eqaAAAAA8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:30.171780 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:52400] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-fatal-error-handler.php"] [unique_id "aUWDRhzVxeBEODU8mCB2jAAAAMs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:30.642085 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:58389] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-feed-cache-transient.php"] [unique_id "aUWDRixTWUmlILwAM_eqagAAAAU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:31.135347 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:52385] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-feed-cache.php"] [unique_id "aUWDRyxTWUmlILwAM_eqbQAAABI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:31.495980 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:49994] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-hook.php"] [unique_id "aUWDRyxTWUmlILwAM_eqbgAAAAw"], referer: https://www.google.fr/
[Sat Dec 20 00:54:31.834336 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:58420] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-cookie.php"] [unique_id "aUWDRyxTWUmlILwAM_eqcQAAAA8"], referer: https://www.google.com/
[Sat Dec 20 00:54:32.186101 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:47015] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-curl.php"] [unique_id "aUWDSCxTWUmlILwAM_eqcwAAAAg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:32.641686 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:58401] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-encoding.php"] [unique_id "aUWDSI12VmSu4NX34PTUDgAAAIQ"], referer: https://www.bing.com/
[Sat Dec 20 00:54:32.987848 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:55975] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-ixr-client.php"] [unique_id "aUWDSEJMTU3r4hb8qAlRCAAAAEM"], referer: https://www.google.fr/
[Sat Dec 20 00:54:33.356654 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:58410] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-proxy.php"] [unique_id "aUWDSSxTWUmlILwAM_eqeAAAABI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:33.798150 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:53091] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-requests-hooks.php"] [unique_id "aUWDSSxTWUmlILwAM_eqegAAABU"], referer: https://www.google.com/
[Sat Dec 20 00:54:34.239714 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51713] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-requests-response.php"] [unique_id "aUWDSixTWUmlILwAM_eqfAAAABg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:34.688568 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:50623] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-response.php"] [unique_id "aUWDSkJMTU3r4hb8qAlRCwAAAFc"], referer: https://www.google.de/
[Sat Dec 20 00:54:35.069746 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:57252] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http-streams.php"] [unique_id "aUWDS-TCMRSRXPuXZF8AWQAAARA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:35.494766 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:53107] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-http.php"] [unique_id "aUWDSxzVxeBEODU8mCB2jQAAAMk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:35.829040 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:58380] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-image-editor-gd.php"] [unique_id "aUWDSxzVxeBEODU8mCB2kQAAAME"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:36.257122 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:47677] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-image-editor-imagick.php"] [unique_id "aUWDTBzVxeBEODU8mCB2kwAAANA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:36.588370 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:61316] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-image-editor.php"] [unique_id "aUWDTOTCMRSRXPuXZF8AWwAAARY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:36.949177 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:60863] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-list-util.php"] [unique_id "aUWDTI12VmSu4NX34PTUFwAAAIs"], referer: https://www.google.de/
[Sat Dec 20 00:54:37.258052 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:57282] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-locale-switcher.php"] [unique_id "aUWDTY12VmSu4NX34PTUGAAAAIU"], referer: https://www.google.de/
[Sat Dec 20 00:54:37.680647 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:49998] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-locale.php"] [unique_id "aUWDTY12VmSu4NX34PTUGQAAAI0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:38.013918 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:48251] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-matchesmapregex.php"] [unique_id "aUWDTixTWUmlILwAM_eqlgAAABA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:38.464630 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:53074] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-meta-query.php"] [unique_id "aUWDTixTWUmlILwAM_eqmAAAABY"], referer: https://www.google.de/
[Sat Dec 20 00:54:38.829622 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:50571] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-metadata-lazyloader.php"] [unique_id "aUWDTixTWUmlILwAM_eqmgAAAAE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:39.220845 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:47675] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-navigation-fallback.php"] [unique_id "aUWDTyxTWUmlILwAM_eqnQAAAA4"], referer: https://www.google.de/
[Sat Dec 20 00:54:39.638789 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:53065] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query.php"] [unique_id "aUWDTxzVxeBEODU8mCB2mAAAAM8"], referer: https://www.google.fr/
[Sat Dec 20 00:54:40.056598 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:51720] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network.php"] [unique_id "aUWDUI12VmSu4NX34PTUGgAAAIk"], referer: https://www.bing.com/
[Sat Dec 20 00:54:40.420032 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:47640] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-object-cache.php"] [unique_id "aUWDUEJMTU3r4hb8qAlRDAAAAEs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:40.758237 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:57238] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-oembed-controller.php"] [unique_id "aUWDUI12VmSu4NX34PTUHQAAAJU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:41.109010 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:51726] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-oembed.php"] [unique_id "aUWDUUJMTU3r4hb8qAlRDQAAAEA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:41.622510 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:55961] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-paused-extensions-storage.php"] [unique_id "aUWDUeTCMRSRXPuXZF8AZAAAARc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:41.995924 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:53118] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-plugin-dependencies.php"] [unique_id "aUWDUSxTWUmlILwAM_eqoQAAABc"], referer: https://www.google.fr/
[Sat Dec 20 00:54:42.431373 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:57334] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-post-type.php"] [unique_id "aUWDUkJMTU3r4hb8qAlRDwAAAFE"], referer: https://www.bing.com/
[Sat Dec 20 00:54:42.798820 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:55988] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-post.php"] [unique_id "aUWDUuTCMRSRXPuXZF8AZgAAAQM"], referer: https://www.google.com/
[Sat Dec 20 00:54:43.182119 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:47654] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-query.php"] [unique_id "aUWDU412VmSu4NX34PTUIwAAAI8"], referer: https://www.google.de/
[Sat Dec 20 00:54:43.592117 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:57327] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-recovery-mode-cookie-service.php"] [unique_id "aUWDU0JMTU3r4hb8qAlREQAAAE0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:43.956867 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:53086] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-recovery-mode-email-service.php"] [unique_id "aUWDUxzVxeBEODU8mCB2nQAAAMU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:44.306800 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:57244] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-recovery-mode-key-service.php"] [unique_id "aUWDVOTCMRSRXPuXZF8AZwAAARY"], referer: https://www.google.com/
[Sat Dec 20 00:54:44.713260 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:47627] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-recovery-mode-link-service.php"] [unique_id "aUWDVOTCMRSRXPuXZF8AagAAARM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:45.213476 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:52403] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-recovery-mode.php"] [unique_id "aUWDVUJMTU3r4hb8qAlRFQAAAEg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:45.615728 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:59712] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-rewrite.php"] [unique_id "aUWDVY12VmSu4NX34PTUJQAAAIM"], referer: https://www.google.de/
[Sat Dec 20 00:54:46.015410 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:55961] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-role.php"] [unique_id "aUWDVixTWUmlILwAM_eqpgAAAAQ"], referer: https://www.google.de/
[Sat Dec 20 00:54:46.424369 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:59757] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-roles.php"] [unique_id "aUWDVixTWUmlILwAM_eqpwAAABg"], referer: https://www.google.de/
[Sat Dec 20 00:54:46.850281 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:55996] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-script-modules.php"] [unique_id "aUWDVuTCMRSRXPuXZF8AfAAAAQE"], referer: https://www.google.de/
[Sat Dec 20 00:54:47.262629 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:47003] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts.php"] [unique_id "aUWDVxzVxeBEODU8mCB2sgAAAMg"], referer: https://www.google.fr/
[Sat Dec 20 00:54:47.717855 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:59752] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens.php"] [unique_id "aUWDV-TCMRSRXPuXZF8AigAAARI"], referer: https://www.bing.com/
[Sat Dec 20 00:54:48.186378 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:52358] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-simplepie-file.php"] [unique_id "aUWDWBzVxeBEODU8mCB2uwAAANg"], referer: https://www.google.de/
[Sat Dec 20 00:54:50.340848 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:48247] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-simplepie-sanitize-kses.php"] [unique_id "aUWDWhzVxeBEODU8mCB21AAAANM"], referer: https://www.google.com/
[Sat Dec 20 00:54:50.808337 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:48194] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-site-query.php"] [unique_id "aUWDWkJMTU3r4hb8qAlRMwAAAEI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:51.210739 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:57332] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-site.php"] [unique_id "aUWDW412VmSu4NX34PTUNgAAAIE"], referer: https://www.google.fr/
[Sat Dec 20 00:54:51.628689 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:55997] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-styles.php"] [unique_id "aUWDW0JMTU3r4hb8qAlRNAAAAEM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:52.019112 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:51772] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-tax-query.php"] [unique_id "aUWDXBzVxeBEODU8mCB23gAAAME"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:52.449439 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:58373] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.php"] [unique_id "aUWDXBzVxeBEODU8mCB25AAAAM8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:52.829315 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:55989] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-term-query.php"] [unique_id "aUWDXCxTWUmlILwAM_eqvQAAAAc"], referer: https://www.google.de/
[Sat Dec 20 00:54:53.208851 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:46976] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-term.php"] [unique_id "aUWDXSxTWUmlILwAM_eqvwAAABI"], referer: https://www.bing.com/
[Sat Dec 20 00:54:53.575027 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:53057] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-text-diff-renderer-inline.php"] [unique_id "aUWDXUJMTU3r4hb8qAlROQAAAFA"], referer: https://www.google.com/
[Sat Dec 20 00:54:53.961452 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:55954] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-text-diff-renderer-table.php"] [unique_id "aUWDXY12VmSu4NX34PTUOAAAAJc"], referer: https://www.bing.com/
[Sat Dec 20 00:54:54.450461 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:53095] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-textdomain-registry.php"] [unique_id "aUWDXuTCMRSRXPuXZF8A6wAAAQY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:54.933429 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:51762] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-json-data.php"] [unique_id "aUWDXhzVxeBEODU8mCB3AAAAANU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:55.283636 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:59721] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-json-resolver.php"] [unique_id "aUWDXxzVxeBEODU8mCB3BgAAANM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:54:55.863006 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:59721] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-json-schema.php"] [unique_id "aUWDXyxTWUmlILwAM_eqwwAAABQ"], referer: https://www.google.com/
[Sat Dec 20 00:54:56.289134 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:57256] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-json.php"] [unique_id "aUWDYBzVxeBEODU8mCB3DAAAANM"], referer: https://www.google.com/
[Sat Dec 20 00:54:56.636153 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:61372] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme.php"] [unique_id "aUWDYBzVxeBEODU8mCB3DQAAAMc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:54:57.054436 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:53098] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-token-map.php"] [unique_id "aUWDYRzVxeBEODU8mCB3DgAAAME"], referer: https://www.bing.com/
[Sat Dec 20 00:54:57.398078 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:53078] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-user-meta-session-tokens.php"] [unique_id "aUWDYUJMTU3r4hb8qAlRPQAAAFE"], referer: https://www.bing.com/
[Sat Dec 20 00:54:57.796317 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:53114] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-user-query.php"] [unique_id "aUWDYY12VmSu4NX34PTUOwAAAI0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:54:58.169155 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:51751] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-user-request.php"] [unique_id "aUWDYo12VmSu4NX34PTUPQAAAIk"], referer: https://www.bing.com/
[Sat Dec 20 00:54:58.525732 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:50009] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-user.php"] [unique_id "aUWDYo12VmSu4NX34PTUPgAAAIE"], referer: https://www.google.de/
[Sat Dec 20 00:54:58.944721 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:47022] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-walker.php"] [unique_id "aUWDYixTWUmlILwAM_eqyAAAAAU"], referer: https://www.google.com/
[Sat Dec 20 00:55:00.862440 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:61342] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-widget-factory.php"] [unique_id "aUWDZCxTWUmlILwAM_eqzgAAABE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:01.195957 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:57263] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-widget.php"] [unique_id "aUWDZSxTWUmlILwAM_eq0QAAAAk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:01.666146 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:55979] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-xmlrpc-server.php"] [unique_id "aUWDZSxTWUmlILwAM_eq1wAAAA0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:02.018756 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:50601] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp.php"] [unique_id "aUWDZixTWUmlILwAM_eq2QAAAAQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:02.394066 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:48218] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wpdb.php"] [unique_id "aUWDZo12VmSu4NX34PTUQwAAAJU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:02.772849 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:48239] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.wp-dependencies.php"] [unique_id "aUWDZuTCMRSRXPuXZF8BBgAAAQQ"], referer: https://www.google.de/
[Sat Dec 20 00:55:03.102352 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:55948] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.wp-scripts.php"] [unique_id "aUWDZ412VmSu4NX34PTURAAAAIA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:03.416353 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:59722] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.wp-styles.php"] [unique_id "aUWDZ412VmSu4NX34PTURwAAAIs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:03.746059 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:52395] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aUWDZ412VmSu4NX34PTUSQAAAIk"], referer: https://www.bing.com/
[Sat Dec 20 00:55:04.155153 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:60818] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/comment-template.php"] [unique_id "aUWDaOTCMRSRXPuXZF8BEAAAAQk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:04.527545 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:46995] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/comment.php"] [unique_id "aUWDaOTCMRSRXPuXZF8BFAAAAQ4"], referer: https://www.google.de/
[Sat Dec 20 00:55:04.880026 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:49991] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/compat.php"] [unique_id "aUWDaCxTWUmlILwAM_eq5gAAAAQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:05.251715 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:47638] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/cron.php"] [unique_id "aUWDaUJMTU3r4hb8qAlRUwAAAFc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:05.681859 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:60837] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aUWDaUJMTU3r4hb8qAlRVAAAAFA"], referer: https://www.bing.com/
[Sat Dec 20 00:55:06.140559 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:47002] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "aUWDaixTWUmlILwAM_eq5wAAABY"], referer: https://www.google.com/
[Sat Dec 20 00:55:06.628629 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:47017] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aUWDao12VmSu4NX34PTUTAAAAJg"], referer: https://www.google.com/
[Sat Dec 20 00:55:06.993838 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:52406] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alfa-rex.php"] [unique_id "aUWDao12VmSu4NX34PTUTwAAAJU"], referer: https://www.google.fr/
[Sat Dec 20 00:55:07.620195 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:47653] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-directory/about.php"] [unique_id "aUWDa412VmSu4NX34PTUUAAAAIc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:07.979073 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:57253] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-directory/alfa-rex.php"] [unique_id "aUWDa412VmSu4NX34PTUUgAAAIk"], referer: https://www.bing.com/
[Sat Dec 20 00:55:08.369707 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:57248] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-directory/wp-login.php"] [unique_id "aUWDbBzVxeBEODU8mCB3GAAAAMQ"], referer: https://www.google.de/
[Sat Dec 20 00:55:08.793051 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:57326] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-editor/about.php"] [unique_id "aUWDbI12VmSu4NX34PTUUwAAAIQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:09.205714 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:50597] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-editor/alfa-rex.php"] [unique_id "aUWDbeTCMRSRXPuXZF8BIwAAARA"], referer: https://www.google.fr/
[Sat Dec 20 00:55:09.577203 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51763] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-editor/wp-login.php"] [unique_id "aUWDbSxTWUmlILwAM_eq8AAAABY"], referer: https://www.google.de/
[Sat Dec 20 00:55:10.021649 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:47013] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/about.php"] [unique_id "aUWDbixTWUmlILwAM_eq8wAAABM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:10.350653 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:47652] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/alfa-rex.php"] [unique_id "aUWDbuTCMRSRXPuXZF8BJgAAARQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:10.798290 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:47021] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/wp-login.php"] [unique_id "aUWDbixTWUmlILwAM_eq9AAAAAg"], referer: https://www.google.de/
[Sat Dec 20 00:55:11.153905 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:49945] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/commands/about.php"] [unique_id "aUWDb-TCMRSRXPuXZF8BJwAAAQ8"], referer: https://www.google.de/
[Sat Dec 20 00:55:11.549803 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:60862] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/commands/alfa-rex.php"] [unique_id "aUWDb-TCMRSRXPuXZF8BKAAAARc"], referer: https://www.google.com/
[Sat Dec 20 00:55:11.909387 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:53115] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/commands/wp-login.php"] [unique_id "aUWDbyxTWUmlILwAM_eq-gAAABM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:12.278119 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:48208] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aUWDcCxTWUmlILwAM_eq_AAAAAE"], referer: https://www.bing.com/
[Sat Dec 20 00:55:12.743718 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:50560] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/components/alfa-rex.php"] [unique_id "aUWDcCxTWUmlILwAM_eq_gAAAAM"], referer: https://www.google.fr/
[Sat Dec 20 00:55:13.105137 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:61374] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/components/wp-login.php"] [unique_id "aUWDceTCMRSRXPuXZF8BKQAAARA"], referer: https://www.google.de/
[Sat Dec 20 00:55:13.430200 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:59745] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/customize-widgets/about.php"] [unique_id "aUWDceTCMRSRXPuXZF8BLAAAAQA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:13.753159 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:58387] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/customize-widgets/alfa-rex.php"] [unique_id "aUWDcUJMTU3r4hb8qAlRXQAAAEs"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:14.141269 2025] [:error] [pid 35626:tid 35685] [client 4.217.239.238:61345] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/customize-widgets/wp-login.php"] [unique_id "aUWDchzVxeBEODU8mCB3IgAAAMM"], referer: https://www.google.de/
[Sat Dec 20 00:55:14.500010 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:60858] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-post/about.php"] [unique_id "aUWDchzVxeBEODU8mCB3IwAAAMg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:14.886483 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:51130] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-post/alfa-rex.php"] [unique_id "aUWDckJMTU3r4hb8qAlRXwAAAEM"], referer: https://www.google.de/
[Sat Dec 20 00:55:15.200213 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:57341] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-post/wp-login.php"] [unique_id "aUWDc412VmSu4NX34PTUWgAAAJY"], referer: https://www.google.fr/
[Sat Dec 20 00:55:15.502128 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:46999] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aUWDcyxTWUmlILwAM_erDgAAAAg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:15.960905 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:51101] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-site/alfa-rex.php"] [unique_id "aUWDc-TCMRSRXPuXZF8BQgAAAQE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:16.315141 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:57331] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-site/wp-login.php"] [unique_id "aUWDdOTCMRSRXPuXZF8BRgAAAQ8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:16.628620 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:48224] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUWDdOTCMRSRXPuXZF8BSQAAARU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:17.036851 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:48212] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/alfa-rex.php"] [unique_id "aUWDdeTCMRSRXPuXZF8BTAAAAQQ"], referer: https://www.google.fr/
[Sat Dec 20 00:55:17.374472 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:47641] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/wp-login.php"] [unique_id "aUWDdeTCMRSRXPuXZF8BTgAAARQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:17.826637 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:50596] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/editor/about.php"] [unique_id "aUWDdeTCMRSRXPuXZF8BUgAAAQY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:18.202044 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:52410] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/editor/alfa-rex.php"] [unique_id "aUWDdhzVxeBEODU8mCB3MAAAANg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:18.633904 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:59723] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/editor/wp-login.php"] [unique_id "aUWDdhzVxeBEODU8mCB3MQAAANQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:18.990751 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51752] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/format-library/about.php"] [unique_id "aUWDdixTWUmlILwAM_erFwAAAAE"], referer: https://www.google.com/
[Sat Dec 20 00:55:19.389520 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:61324] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/format-library/alfa-rex.php"] [unique_id "aUWDd-TCMRSRXPuXZF8BVAAAARA"], referer: https://www.bing.com/
[Sat Dec 20 00:55:19.910467 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:6421] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/format-library/wp-login.php"] [unique_id "aUWDd0JMTU3r4hb8qAlRZAAAAEo"], referer: https://www.google.fr/
[Sat Dec 20 00:55:20.249201 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:51734] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/list-reusable-blocks/about.php"] [unique_id "aUWDeOTCMRSRXPuXZF8BVQAAAQU"], referer: https://www.google.com/
[Sat Dec 20 00:55:20.722584 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:48203] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/list-reusable-blocks/alfa-rex.php"] [unique_id "aUWDeOTCMRSRXPuXZF8BWAAAAQE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:21.260764 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:61337] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/list-reusable-blocks/wp-login.php"] [unique_id "aUWDeUJMTU3r4hb8qAlRZQAAAFQ"], referer: https://www.bing.com/
[Sat Dec 20 00:55:21.610661 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:57273] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/nux/about.php"] [unique_id "aUWDeRzVxeBEODU8mCB3NQAAAM4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:21.984250 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:57338] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/nux/alfa-rex.php"] [unique_id "aUWDeUJMTU3r4hb8qAlRZwAAAEY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:22.381956 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:61335] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/nux/wp-login.php"] [unique_id "aUWDeixTWUmlILwAM_erHAAAAAw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:22.739653 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:58405] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/patterns/about.php"] [unique_id "aUWDekJMTU3r4hb8qAlRaAAAAFU"], referer: https://www.google.de/
[Sat Dec 20 00:55:23.084768 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:61345] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/patterns/alfa-rex.php"] [unique_id "aUWDeyxTWUmlILwAM_erHwAAAAQ"], referer: https://www.google.de/
[Sat Dec 20 00:55:23.455665 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:53075] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/patterns/wp-login.php"] [unique_id "aUWDe-TCMRSRXPuXZF8BXAAAAQ4"], referer: https://www.google.de/
[Sat Dec 20 00:55:23.787214 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:59727] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/preferences/about.php"] [unique_id "aUWDe-TCMRSRXPuXZF8BYAAAAQk"], referer: https://www.google.fr/
[Sat Dec 20 00:55:24.114246 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:50012] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/preferences/alfa-rex.php"] [unique_id "aUWDfOTCMRSRXPuXZF8BZQAAAQg"], referer: https://www.bing.com/
[Sat Dec 20 00:55:24.537409 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:47666] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aUWDfOTCMRSRXPuXZF8BagAAARc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:25.028172 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:60806] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/reusable-blocks/about.php"] [unique_id "aUWDfSxTWUmlILwAM_erIgAAAAs"], referer: https://www.bing.com/
[Sat Dec 20 00:55:25.343016 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:61340] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/reusable-blocks/alfa-rex.php"] [unique_id "aUWDfeTCMRSRXPuXZF8BbAAAARY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:25.668835 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:53106] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/reusable-blocks/wp-login.php"] [unique_id "aUWDfSxTWUmlILwAM_erIwAAAAo"], referer: https://www.google.fr/
[Sat Dec 20 00:55:26.142824 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:55967] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aUWDfuTCMRSRXPuXZF8BbgAAAQQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:26.585776 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:53083] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/alfa-rex.php"] [unique_id "aUWDfixTWUmlILwAM_erJgAAAAg"], referer: https://www.google.fr/
[Sat Dec 20 00:55:27.094832 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:57225] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/wp-login.php"] [unique_id "aUWDfyxTWUmlILwAM_erJwAAAAw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:27.565409 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:58411] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/wp-login.php"] [unique_id "aUWDfyxTWUmlILwAM_erKAAAABQ"], referer: https://www.bing.com/
[Sat Dec 20 00:55:27.943987 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:47659] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/wp-login.php"] [unique_id "aUWDfyxTWUmlILwAM_erKgAAABg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:28.427183 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:57275] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/alfa-rex.php"] [unique_id "aUWDgEJMTU3r4hb8qAlRcgAAAE8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:28.766294 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:57340] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-image-control.php"] [unique_id "aUWDgI12VmSu4NX34PTUaAAAAIw"], referer: https://www.bing.com/
[Sat Dec 20 00:55:29.102450 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:51751] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-image-setting.php"] [unique_id "aUWDgeTCMRSRXPuXZF8BcQAAAQ8"], referer: https://www.google.de/
[Sat Dec 20 00:55:29.481730 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:55938] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control.php"] [unique_id "aUWDgeTCMRSRXPuXZF8BcgAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:55:29.824260 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:50033] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-code-editor-control.php"] [unique_id "aUWDgY12VmSu4NX34PTUaQAAAIE"], referer: https://www.bing.com/
[Sat Dec 20 00:55:30.198925 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:51771] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-color-control.php"] [unique_id "aUWDgo12VmSu4NX34PTUagAAAIM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:30.569095 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:59756] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aUWDgkJMTU3r4hb8qAlRdgAAAEg"], referer: https://www.google.fr/
[Sat Dec 20 00:55:31.016226 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:55956] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-custom-css-setting.php"] [unique_id "aUWDgxzVxeBEODU8mCB3OQAAAMs"], referer: https://www.google.de/
[Sat Dec 20 00:55:31.454660 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:58416] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-date-time-control.php"] [unique_id "aUWDg412VmSu4NX34PTUbAAAAJQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:31.884399 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:46994] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-filter-setting.php"] [unique_id "aUWDgyxTWUmlILwAM_erLAAAAAk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:32.303001 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:55376] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-header-image-control.php"] [unique_id "aUWDhI12VmSu4NX34PTUbwAAAJE"], referer: https://www.google.fr/
[Sat Dec 20 00:55:32.669156 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:58403] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-header-image-setting.php"] [unique_id "aUWDhCxTWUmlILwAM_erLQAAAAo"], referer: https://www.google.com/
[Sat Dec 20 00:55:33.020120 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:57275] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-image-control.php"] [unique_id "aUWDheTCMRSRXPuXZF8BfwAAAQw"], referer: https://www.bing.com/
[Sat Dec 20 00:55:33.424803 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:55413] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-media-control.php"] [unique_id "aUWDheTCMRSRXPuXZF8BggAAARA"], referer: https://www.google.de/
[Sat Dec 20 00:55:33.768421 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:53089] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control.php"] [unique_id "aUWDheTCMRSRXPuXZF8BhAAAARE"], referer: https://www.google.de/
[Sat Dec 20 00:55:34.149519 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:55967] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-control.php"] [unique_id "aUWDho12VmSu4NX34PTUcAAAAIc"], referer: https://www.google.fr/
[Sat Dec 20 00:55:34.573760 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:57302] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-item-control.php"] [unique_id "aUWDho12VmSu4NX34PTUcwAAAIQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:36.546992 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:59769] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-item-setting.php"] [unique_id "aUWDiCxTWUmlILwAM_erMgAAABA"], referer: https://www.google.fr/
[Sat Dec 20 00:55:36.902646 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:58386] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-location-control.php"] [unique_id "aUWDiCxTWUmlILwAM_erMwAAAAM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:37.249926 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:51124] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-locations-control.php"] [unique_id "aUWDiUJMTU3r4hb8qAlRfwAAAE8"], referer: https://www.google.fr/
[Sat Dec 20 00:55:37.673224 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:58371] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-name-control.php"] [unique_id "aUWDiSxTWUmlILwAM_erNwAAAAE"], referer: https://www.google.fr/
[Sat Dec 20 00:55:38.102058 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:6453] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section.php"] [unique_id "aUWDiuTCMRSRXPuXZF8BiwAAAQ4"], referer: https://www.google.com/
[Sat Dec 20 00:55:38.434057 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:55365] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-setting.php"] [unique_id "aUWDio12VmSu4NX34PTUeAAAAJg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:38.852121 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:61360] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menus-panel.php"] [unique_id "aUWDiixTWUmlILwAM_erOQAAAAc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:39.317019 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:57217] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-new-menu-control.php"] [unique_id "aUWDi0JMTU3r4hb8qAlRggAAAE0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:39.696301 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:57298] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-new-menu-section.php"] [unique_id "aUWDi412VmSu4NX34PTUeQAAAIA"], referer: https://www.google.de/
[Sat Dec 20 00:55:40.149675 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:59724] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-partial.php"] [unique_id "aUWDjOTCMRSRXPuXZF8BjwAAARM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:40.526638 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:50592] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh.php"] [unique_id "aUWDjOTCMRSRXPuXZF8BkAAAAQc"], referer: https://www.google.com/
[Sat Dec 20 00:55:40.885316 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:61351] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-sidebar-section.php"] [unique_id "aUWDjOTCMRSRXPuXZF8BkwAAAQs"], referer: https://www.google.com/
[Sat Dec 20 00:55:41.328622 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:48196] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-site-icon-control.php"] [unique_id "aUWDjUJMTU3r4hb8qAlRgwAAAE4"], referer: https://www.google.com/
[Sat Dec 20 00:55:41.725430 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:55394] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-theme-control.php"] [unique_id "aUWDjeTCMRSRXPuXZF8BmgAAARE"], referer: https://www.google.com/
[Sat Dec 20 00:55:42.091237 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:48192] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-themes-panel.php"] [unique_id "aUWDjuTCMRSRXPuXZF8BngAAARM"], referer: https://www.google.de/
[Sat Dec 20 00:55:42.577533 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51760] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-themes-section.php"] [unique_id "aUWDjixTWUmlILwAM_erPAAAABY"], referer: https://www.google.de/
[Sat Dec 20 00:55:42.957348 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:57264] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control.php"] [unique_id "aUWDjixTWUmlILwAM_erPgAAAAI"], referer: https://www.google.com/
[Sat Dec 20 00:55:43.333777 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:60860] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-sidebar-block-editor-control.php"] [unique_id "aUWDj-TCMRSRXPuXZF8BpAAAAQQ"], referer: https://www.google.com/
[Sat Dec 20 00:55:43.673330 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:6454] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-widget-area-customize-control.php"] [unique_id "aUWDjyxTWUmlILwAM_erQwAAAA8"], referer: https://www.google.com/
[Sat Dec 20 00:55:44.260750 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:57320] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-widget-form-customize-control.php"] [unique_id "aUWDkOTCMRSRXPuXZF8BqgAAAQw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:44.799543 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:48231] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "aUWDkCxTWUmlILwAM_erRAAAAAY"], referer: https://www.bing.com/
[Sat Dec 20 00:55:45.180852 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:48217] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/date.php"] [unique_id "aUWDkSxTWUmlILwAM_erRgAAAAc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:45.605631 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:47671] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-constants.php"] [unique_id "aUWDkUJMTU3r4hb8qAlRhAAAAFI"], referer: https://www.google.com/
[Sat Dec 20 00:55:46.136592 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:52374] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters.php"] [unique_id "aUWDkkJMTU3r4hb8qAlRhgAAAEQ"], referer: https://www.google.fr/
[Sat Dec 20 00:55:46.472973 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:47030] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-widgets.php"] [unique_id "aUWDkhzVxeBEODU8mCB3SAAAAMc"], referer: https://www.google.com/
[Sat Dec 20 00:55:46.906638 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:55982] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUWDkkJMTU3r4hb8qAlRiAAAAFA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:47.242904 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:50577] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/deprecated.php"] [unique_id "aUWDk0JMTU3r4hb8qAlRigAAAE8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:47.660168 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:6458] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aUWDk-TCMRSRXPuXZF8BrQAAARU"], referer: https://www.google.fr/
[Sat Dec 20 00:55:48.016472 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:61320] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/embed-template.php"] [unique_id "aUWDlI12VmSu4NX34PTUgwAAAJc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:48.415136 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:6476] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/embed.php"] [unique_id "aUWDlCxTWUmlILwAM_erTQAAABE"], referer: https://www.google.com/
[Sat Dec 20 00:55:48.776665 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:57314] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/error-protection.php"] [unique_id "aUWDlCxTWUmlILwAM_erTwAAAA0"], referer: https://www.google.de/
[Sat Dec 20 00:55:49.164643 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:43443] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-atom-comments.php"] [unique_id "aUWDlRzVxeBEODU8mCB3SQAAANE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:49.581466 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:43412] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-atom.php"] [unique_id "aUWDlSxTWUmlILwAM_erUQAAAA4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:50.092708 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:58375] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rdf.php"] [unique_id "aUWDlixTWUmlILwAM_erUgAAAAs"], referer: https://www.google.fr/
[Sat Dec 20 00:55:50.446228 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:52355] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rss.php"] [unique_id "aUWDlhzVxeBEODU8mCB3SwAAANc"], referer: https://www.google.com/
[Sat Dec 20 00:55:50.795978 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:55377] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rss2-comments.php"] [unique_id "aUWDluTCMRSRXPuXZF8BswAAAQY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:51.247719 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:6816] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rss2.php"] [unique_id "aUWDl-TCMRSRXPuXZF8BtAAAAQQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:51.713418 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:6517] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed.php"] [unique_id "aUWDl0JMTU3r4hb8qAlRjgAAAEg"], referer: https://www.google.com/
[Sat Dec 20 00:55:52.295995 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:53111] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts.php"] [unique_id "aUWDmEJMTU3r4hb8qAlRkAAAAE4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:52.649064 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:43422] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUWDmBzVxeBEODU8mCB3UAAAAMA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:52.992139 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:52362] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/alfa-rex.php"] [unique_id "aUWDmOTCMRSRXPuXZF8BvAAAAQM"], referer: https://www.google.fr/
[Sat Dec 20 00:55:53.603004 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:62166] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class-wp-font-collection.php"] [unique_id "aUWDmY12VmSu4NX34PTUhgAAAIU"], referer: https://www.bing.com/
[Sat Dec 20 00:55:54.071411 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:51725] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class-wp-font-face-resolver.php"] [unique_id "aUWDmuTCMRSRXPuXZF8BwAAAARA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:54.450624 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:55366] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class-wp-font-face.php"] [unique_id "aUWDmixTWUmlILwAM_erWAAAAAA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:54.930289 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:45115] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class-wp-font-library.php"] [unique_id "aUWDmixTWUmlILwAM_erXAAAABg"], referer: https://www.google.fr/
[Sat Dec 20 00:55:55.451791 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:62180] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class-wp-font-utils.php"] [unique_id "aUWDm-TCMRSRXPuXZF8BwgAAAQw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:55.759616 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:59883] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/load.php"] [unique_id "aUWDm412VmSu4NX34PTUhwAAAIs"], referer: https://www.google.fr/
[Sat Dec 20 00:55:56.089161 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:45072] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/wp/vHdLe.php"] [unique_id "aUWDnEJMTU3r4hb8qAlRkQAAAEc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:56.430075 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:43938] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/formatting.php"] [unique_id "aUWDnOTCMRSRXPuXZF8BxwAAAQ0"], referer: https://www.google.fr/
[Sat Dec 20 00:55:56.770020 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:58465] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/functions.php"] [unique_id "aUWDnOTCMRSRXPuXZF8ByAAAAQk"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:57.108385 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:6544] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/functions.wp-scripts.php"] [unique_id "aUWDneTCMRSRXPuXZF8BywAAARA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:57.437434 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:63339] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/functions.wp-styles.php"] [unique_id "aUWDnRzVxeBEODU8mCB3UwAAANI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:55:57.859333 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:46419] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/general-template.php"] [unique_id "aUWDneTCMRSRXPuXZF8BzgAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:55:58.265178 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:59885] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/global-styles-and-settings.php"] [unique_id "aUWDno12VmSu4NX34PTUigAAAIk"], referer: https://www.google.de/
[Sat Dec 20 00:55:58.594944 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:46419] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/about.php"] [unique_id "aUWDno12VmSu4NX34PTUiwAAAJI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:58.904214 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:59867] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/alfa-rex.php"] [unique_id "aUWDnuTCMRSRXPuXZF8B0AAAAQs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:55:59.246295 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:59680] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-active-formatting-elements.php"] [unique_id "aUWDn412VmSu4NX34PTUjQAAAJc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:55:59.568256 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:60340] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-attribute-token.php"] [unique_id "aUWDn412VmSu4NX34PTUjwAAAJg"], referer: https://www.google.de/
[Sat Dec 20 00:55:59.921678 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:58403] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-decoder.php"] [unique_id "aUWDnxzVxeBEODU8mCB3VwAAAMg"], referer: https://www.bing.com/
[Sat Dec 20 00:56:00.285447 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:53573] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-doctype-info.php"] [unique_id "aUWDoBzVxeBEODU8mCB3WgAAAM0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:00.617219 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:42994] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-open-elements.php"] [unique_id "aUWDoEJMTU3r4hb8qAlRlQAAAEw"], referer: https://www.bing.com/
[Sat Dec 20 00:56:00.948017 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:54159] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-processor-state.php"] [unique_id "aUWDoI12VmSu4NX34PTUkQAAAIo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:01.272202 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:57779] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-processor.php"] [unique_id "aUWDoeTCMRSRXPuXZF8B1AAAARA"], referer: https://www.google.fr/
[Sat Dec 20 00:56:01.908820 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:54152] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-span.php"] [unique_id "aUWDoY12VmSu4NX34PTUkwAAAIs"], referer: https://www.google.com/
[Sat Dec 20 00:56:02.244180 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:42946] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-stack-event.php"] [unique_id "aUWDohzVxeBEODU8mCB3XAAAANQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:02.870257 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:54178] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-tag-processor.php"] [unique_id "aUWDoixTWUmlILwAM_erYwAAABE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:03.415633 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:51792] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-text-replacement.php"] [unique_id "aUWDo0JMTU3r4hb8qAlRmAAAAFU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:03.912167 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:42982] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-token.php"] [unique_id "aUWDoyxTWUmlILwAM_erZwAAAA8"], referer: https://www.google.de/
[Sat Dec 20 00:56:04.263991 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:51801] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/class-wp-html-unsupported-exception.php"] [unique_id "aUWDpBzVxeBEODU8mCB3XwAAANE"], referer: https://www.google.de/
[Sat Dec 20 00:56:04.612136 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:51802] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/html5-named-character-references.php"] [unique_id "aUWDpI12VmSu4NX34PTUlgAAAIk"], referer: https://www.google.de/
[Sat Dec 20 00:56:05.006603 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:53631] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aUWDpSxTWUmlILwAM_eraQAAAAk"], referer: https://www.google.com/
[Sat Dec 20 00:56:05.529681 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:42999] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/http.php"] [unique_id "aUWDpY12VmSu4NX34PTUmAAAAI8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:05.978253 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:53579] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/https-detection.php"] [unique_id "aUWDpY12VmSu4NX34PTUmQAAAIM"], referer: https://www.google.com/
[Sat Dec 20 00:56:06.390040 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:7125] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/https-migration.php"] [unique_id "aUWDphzVxeBEODU8mCB3YQAAAM4"], referer: https://www.bing.com/
[Sat Dec 20 00:56:06.721914 2025] [:error] [pid 35626:tid 35695] [client 4.217.239.238:7132] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aUWDphzVxeBEODU8mCB3ZAAAAM0"], referer: https://www.google.com/
[Sat Dec 20 00:56:07.071919 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:51788] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/alfa-rex.php"] [unique_id "aUWDp-TCMRSRXPuXZF8B3AAAAQ4"], referer: https://www.google.fr/
[Sat Dec 20 00:56:07.413438 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:6979] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/class-wp-interactivity-api-directives-processor.php"] [unique_id "aUWDp412VmSu4NX34PTUnQAAAJU"], referer: https://www.google.de/
[Sat Dec 20 00:56:08.021662 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:7145] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/class-wp-interactivity-api.php"] [unique_id "aUWDqBzVxeBEODU8mCB3ZQAAANY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:08.509417 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:7022] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api.php"] [unique_id "aUWDqOTCMRSRXPuXZF8B4gAAAQQ"], referer: https://www.google.fr/
[Sat Dec 20 00:56:09.129712 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:60370] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/wp-login.php"] [unique_id "aUWDqeTCMRSRXPuXZF8B5AAAARM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:09.829068 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:7014] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUWDqSxTWUmlILwAM_erbQAAABE"], referer: https://www.google.de/
[Sat Dec 20 00:56:10.232572 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:57767] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/about.php"] [unique_id "aUWDquTCMRSRXPuXZF8B5QAAAQ8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:10.593917 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:64049] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/alfa-rex.php"] [unique_id "aUWDquTCMRSRXPuXZF8B6QAAARQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:10.934758 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:53619] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aUWDqkJMTU3r4hb8qAlRnwAAAEQ"], referer: https://www.google.com/
[Sat Dec 20 00:56:11.420742 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:51812] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/alfa-rex.php"] [unique_id "aUWDq0JMTU3r4hb8qAlRoQAAAFY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:13.391732 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51791] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/wp-login.php"] [unique_id "aUWDrSxTWUmlILwAM_erdAAAAA0"], referer: https://www.google.de/
[Sat Dec 20 00:56:13.707152 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:53611] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aUWDrUJMTU3r4hb8qAlRqgAAAFc"], referer: https://www.google.com/
[Sat Dec 20 00:56:14.058570 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:7138] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/alfa-rex.php"] [unique_id "aUWDruTCMRSRXPuXZF8B_gAAAQs"], referer: https://www.google.de/
[Sat Dec 20 00:56:14.748763 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:6998] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/wp-login.php"] [unique_id "aUWDruTCMRSRXPuXZF8CAAAAARY"], referer: https://www.bing.com/
[Sat Dec 20 00:56:15.132648 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:7023] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/about.php"] [unique_id "aUWDr412VmSu4NX34PTUrAAAAIg"], referer: https://www.google.com/
[Sat Dec 20 00:56:15.459851 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:53623] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/alfa-rex.php"] [unique_id "aUWDrxzVxeBEODU8mCB3awAAANU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:15.884278 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:57784] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/development/about.php"] [unique_id "aUWDr412VmSu4NX34PTUrQAAAJE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:16.259737 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:51807] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/development/alfa-rex.php"] [unique_id "aUWDsBzVxeBEODU8mCB3bwAAAM4"], referer: https://www.bing.com/
[Sat Dec 20 00:56:16.643893 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:57728] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/development/wp-login.php"] [unique_id "aUWDsCxTWUmlILwAM_erfQAAAA4"], referer: https://www.bing.com/
[Sat Dec 20 00:56:17.033871 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:57734] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/a11y/about.php"] [unique_id "aUWDsRzVxeBEODU8mCB3cAAAAMI"], referer: https://www.google.de/
[Sat Dec 20 00:56:17.367725 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:51790] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/a11y/alfa-rex.php"] [unique_id "aUWDsSxTWUmlILwAM_ergAAAAAk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:17.737152 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:60368] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/a11y/wp-login.php"] [unique_id "aUWDsRzVxeBEODU8mCB3cwAAANY"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:18.296753 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:60415] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/about.php"] [unique_id "aUWDso12VmSu4NX34PTUrwAAAIk"], referer: https://www.google.com/
[Sat Dec 20 00:56:18.657294 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:53615] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/alfa-rex.php"] [unique_id "aUWDso12VmSu4NX34PTUsAAAAJI"], referer: https://www.google.de/
[Sat Dec 20 00:56:19.077389 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:57784] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/about.php"] [unique_id "aUWDsxzVxeBEODU8mCB3dwAAANQ"], referer: https://www.google.fr/
[Sat Dec 20 00:56:19.431462 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:53624] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/alfa-rex.php"] [unique_id "aUWDs-TCMRSRXPuXZF8CBQAAAQo"], referer: https://www.google.com/
[Sat Dec 20 00:56:19.777254 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:60363] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/file/about.php"] [unique_id "aUWDsyxTWUmlILwAM_ergwAAAAc"], referer: https://www.google.de/
[Sat Dec 20 00:56:20.203438 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:64006] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/file/alfa-rex.php"] [unique_id "aUWDtOTCMRSRXPuXZF8CBwAAAQ8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:20.752493 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:59674] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/file/wp-login.php"] [unique_id "aUWDtEJMTU3r4hb8qAlRrwAAAFY"], referer: https://www.google.com/
[Sat Dec 20 00:56:21.079770 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:64035] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/image/about.php"] [unique_id "aUWDtRzVxeBEODU8mCB3eQAAANU"], referer: https://www.google.fr/
[Sat Dec 20 00:56:21.478979 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:64031] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/image/alfa-rex.php"] [unique_id "aUWDtY12VmSu4NX34PTUsQAAAIw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:21.873031 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:64053] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/image/wp-login.php"] [unique_id "aUWDtUJMTU3r4hb8qAlRsAAAAFM"], referer: https://www.google.com/
[Sat Dec 20 00:56:22.280713 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:53617] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/about.php"] [unique_id "aUWDtixTWUmlILwAM_eriQAAABQ"], referer: https://www.google.de/
[Sat Dec 20 00:56:22.658423 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:51787] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/alfa-rex.php"] [unique_id "aUWDtuTCMRSRXPuXZF8CDQAAAQ4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:23.050403 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:6976] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/wp-login.php"] [unique_id "aUWDtxzVxeBEODU8mCB3fQAAANg"], referer: https://www.google.com/
[Sat Dec 20 00:56:23.444300 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:53616] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/query/about.php"] [unique_id "aUWDt0JMTU3r4hb8qAlRsgAAAEU"], referer: https://www.bing.com/
[Sat Dec 20 00:56:23.809301 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:53598] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/query/alfa-rex.php"] [unique_id "aUWDtyxTWUmlILwAM_erjgAAAAg"], referer: https://www.google.fr/
[Sat Dec 20 00:56:24.476311 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:57789] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/query/wp-login.php"] [unique_id "aUWDuBzVxeBEODU8mCB3gAAAAME"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:25.037025 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:53629] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aUWDuUJMTU3r4hb8qAlRtQAAAEc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:25.622868 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:53620] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/alfa-rex.php"] [unique_id "aUWDueTCMRSRXPuXZF8CDgAAARQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:25.986687 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:7150] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/wp-login.php"] [unique_id "aUWDuUJMTU3r4hb8qAlRuAAAAFE"], referer: https://www.google.com/
[Sat Dec 20 00:56:26.357533 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:57788] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/block-library/wp-login.php"] [unique_id "aUWDuuTCMRSRXPuXZF8CEQAAARg"], referer: https://www.google.com/
[Sat Dec 20 00:56:26.730703 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:7157] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/interactivity/about.php"] [unique_id "aUWDukJMTU3r4hb8qAlRuQAAAE8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:27.346489 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:60360] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/interactivity/alfa-rex.php"] [unique_id "aUWDuxzVxeBEODU8mCB3ggAAANU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:27.712671 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:7135] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/interactivity/wp-login.php"] [unique_id "aUWDuxzVxeBEODU8mCB3gwAAAMg"], referer: https://www.google.de/
[Sat Dec 20 00:56:28.265342 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:7121] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/script-modules/wp-login.php"] [unique_id "aUWDvOTCMRSRXPuXZF8CFgAAAQw"], referer: https://www.bing.com/
[Sat Dec 20 00:56:28.682456 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:60372] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aUWDvOTCMRSRXPuXZF8CFwAAARI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:29.102527 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:63327] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/vendor/alfa-rex.php"] [unique_id "aUWDvSxTWUmlILwAM_erlgAAAAI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:29.665924 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:51815] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/vendor/wp-login.php"] [unique_id "aUWDvY12VmSu4NX34PTUvAAAAJg"], referer: https://www.bing.com/
[Sat Dec 20 00:56:30.162888 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:7146] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/wp-login.php"] [unique_id "aUWDvixTWUmlILwAM_ermQAAABI"], referer: https://www.google.com/
[Sat Dec 20 00:56:30.674365 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:7152] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/about.php"] [unique_id "aUWDvo12VmSu4NX34PTUvgAAAII"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:31.022659 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51821] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/alfa-rex.php"] [unique_id "aUWDvyxTWUmlILwAM_ernQAAAAc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:31.349408 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:7123] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aUWDv412VmSu4NX34PTUwQAAAIc"], referer: https://www.google.fr/
[Sat Dec 20 00:56:31.849191 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:7034] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aUWDvxzVxeBEODU8mCB3iAAAAME"], referer: https://www.bing.com/
[Sat Dec 20 00:56:32.184627 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:57749] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/alfa-rex.php"] [unique_id "aUWDwCxTWUmlILwAM_eroQAAAAo"], referer: https://www.google.com/
[Sat Dec 20 00:56:32.500742 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:51784] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/wp-login.php"] [unique_id "aUWDwOTCMRSRXPuXZF8CGwAAARM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:32.828620 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:60406] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/about.php"] [unique_id "aUWDwCxTWUmlILwAM_erpgAAABI"], referer: https://www.google.fr/
[Sat Dec 20 00:56:33.408973 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:57754] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/alfa-rex.php"] [unique_id "aUWDwRzVxeBEODU8mCB3iwAAAMc"], referer: https://www.google.de/
[Sat Dec 20 00:56:33.793104 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:64022] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/ui/about.php"] [unique_id "aUWDweTCMRSRXPuXZF8CHgAAAQ0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:34.135414 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:60359] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/ui/alfa-rex.php"] [unique_id "aUWDwixTWUmlILwAM_erqwAAAAc"], referer: https://www.google.fr/
[Sat Dec 20 00:56:34.476608 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:54145] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/ui/wp-login.php"] [unique_id "aUWDwixTWUmlILwAM_errgAAAA8"], referer: https://www.google.fr/
[Sat Dec 20 00:56:34.930108 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:6989] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/wp-login.php"] [unique_id "aUWDwo12VmSu4NX34PTUxgAAAJc"], referer: https://www.bing.com/
[Sat Dec 20 00:56:35.452599 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:7156] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/mediaelement/about.php"] [unique_id "aUWDwxzVxeBEODU8mCB3jgAAANM"], referer: https://www.google.de/
[Sat Dec 20 00:56:35.786840 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:64021] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/mediaelement/alfa-rex.php"] [unique_id "aUWDw0JMTU3r4hb8qAlRvAAAAFQ"], referer: https://www.bing.com/
[Sat Dec 20 00:56:36.137807 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:64041] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aUWDxCxTWUmlILwAM_erswAAABI"], referer: https://www.google.com/
[Sat Dec 20 00:56:36.493961 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:64011] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/mediaelement/renderers/alfa-rex.php"] [unique_id "aUWDxEJMTU3r4hb8qAlRvwAAAEU"], referer: https://www.bing.com/
[Sat Dec 20 00:56:36.875408 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:63326] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/mediaelement/renderers/wp-login.php"] [unique_id "aUWDxEJMTU3r4hb8qAlRwAAAAEI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:37.228410 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:7104] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/mediaelement/wp-login.php"] [unique_id "aUWDxUJMTU3r4hb8qAlRwgAAAFA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:37.572062 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:60402] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUWDxeTCMRSRXPuXZF8CIgAAAQQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:37.906903 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:57731] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/alfa-rex.php"] [unique_id "aUWDxeTCMRSRXPuXZF8CIwAAARM"], referer: https://www.bing.com/
[Sat Dec 20 00:56:38.233209 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:63326] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/themes.php"] [unique_id "aUWDxuTCMRSRXPuXZF8CJQAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:56:38.561388 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:7148] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/wp-login.php"] [unique_id "aUWDxo12VmSu4NX34PTUywAAAIU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:38.884177 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:7012] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUWDxixTWUmlILwAM_ertwAAAA4"], referer: https://www.google.de/
[Sat Dec 20 00:56:39.211257 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:54156] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/alfa-rex.php"] [unique_id "aUWDxyxTWUmlILwAM_eruAAAABM"], referer: https://www.google.com/
[Sat Dec 20 00:56:39.982371 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:7118] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/wp-login.php"] [unique_id "aUWDxyxTWUmlILwAM_eruQAAAAM"], referer: https://www.bing.com/
[Sat Dec 20 00:56:40.553478 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:51781] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/about.php"] [unique_id "aUWDyOTCMRSRXPuXZF8CKwAAARI"], referer: https://www.google.de/
[Sat Dec 20 00:56:41.356058 2025] [:error] [pid 35626:tid 35704] [client 4.217.239.238:7005] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/alfa-rex.php"] [unique_id "aUWDyRzVxeBEODU8mCB3lAAAANY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:41.695750 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:53605] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/charmap/about.php"] [unique_id "aUWDyY12VmSu4NX34PTU0gAAAIo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:43.779418 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:60413] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/charmap/alfa-rex.php"] [unique_id "aUWDy-TCMRSRXPuXZF8CNAAAAQo"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:44.438468 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:53625] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/charmap/wp-log1n.php"] [unique_id "aUWDzI12VmSu4NX34PTU1gAAAJA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:44.926113 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:53583] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/charmap/wp-login.php"] [unique_id "aUWDzI12VmSu4NX34PTU1wAAAI4"], referer: https://www.google.de/
[Sat Dec 20 00:56:45.283964 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:57772] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/about.php"] [unique_id "aUWDzY12VmSu4NX34PTU2QAAAJM"], referer: https://www.google.com/
[Sat Dec 20 00:56:45.637119 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:57765] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/alfa-rex.php"] [unique_id "aUWDzeTCMRSRXPuXZF8CNgAAAQQ"], referer: https://www.google.de/
[Sat Dec 20 00:56:46.344658 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51780] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/defaults.php"] [unique_id "aUWDzixTWUmlILwAM_ervQAAABU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:46.793933 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:64054] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/wp-login.php"] [unique_id "aUWDzixTWUmlILwAM_ervgAAAAc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:47.218999 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:7013] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aUWDz0JMTU3r4hb8qAlRyQAAAE0"], referer: https://www.google.de/
[Sat Dec 20 00:56:47.790366 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:42951] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/alfa-rex.php"] [unique_id "aUWDz412VmSu4NX34PTU2gAAAJc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:48.402101 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:42946] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/about.php"] [unique_id "aUWD0CxTWUmlILwAM_erwAAAAAo"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:48.942178 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:51809] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/alfa-rex.php"] [unique_id "aUWD0EJMTU3r4hb8qAlR0wAAAEk"], referer: https://www.google.com/
[Sat Dec 20 00:56:49.388290 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:57776] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/wp-login.php"] [unique_id "aUWD0UJMTU3r4hb8qAlR1QAAAEw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:49.732019 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:59657] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/wp-login.php"] [unique_id "aUWD0RzVxeBEODU8mCB3nQAAAME"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:50.105831 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:47631] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/directionality/about.php"] [unique_id "aUWD0uTCMRSRXPuXZF8CPgAAAQ0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:50.476502 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:60388] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/directionality/alfa-rex.php"] [unique_id "aUWD0o12VmSu4NX34PTU3gAAAJg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:50.833107 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:7149] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/directionality/wp-login.php"] [unique_id "aUWD0ixTWUmlILwAM_erwgAAABE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:51.214821 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:64033] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUWD0xzVxeBEODU8mCB3oAAAANI"], referer: https://www.google.fr/
[Sat Dec 20 00:56:51.557605 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:57761] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/alfa-rex.php"] [unique_id "aUWD00JMTU3r4hb8qAlR3QAAAEc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:52.154209 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:59664] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/wp-login.php"] [unique_id "aUWD1EJMTU3r4hb8qAlR3gAAAEM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:52.519442 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:57747] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/hr/about.php"] [unique_id "aUWD1EJMTU3r4hb8qAlR3wAAAEk"], referer: https://www.google.com/
[Sat Dec 20 00:56:54.524236 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:51778] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/hr/alfa-rex.php"] [unique_id "aUWD1uTCMRSRXPuXZF8CRAAAAQg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:56:54.880863 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:64056] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/hr/wp-login.php"] [unique_id "aUWD1o12VmSu4NX34PTU5gAAAIQ"], referer: https://www.bing.com/
[Sat Dec 20 00:56:55.423119 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:57771] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/image/about.php"] [unique_id "aUWD1xzVxeBEODU8mCB3pgAAAMw"], referer: https://www.google.fr/
[Sat Dec 20 00:56:55.798745 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:60375] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/image/alfa-rex.php"] [unique_id "aUWD1-TCMRSRXPuXZF8CRQAAARA"], referer: https://www.google.de/
[Sat Dec 20 00:56:56.180767 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:53570] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/image/wp-login.php"] [unique_id "aUWD2OTCMRSRXPuXZF8CRgAAARc"], referer: https://www.google.de/
[Sat Dec 20 00:56:56.530870 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:7021] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/link/about.php"] [unique_id "aUWD2OTCMRSRXPuXZF8CRwAAAQs"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:56.882613 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51825] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/link/alfa-rex.php"] [unique_id "aUWD2CxTWUmlILwAM_erxAAAAAA"], referer: https://www.bing.com/
[Sat Dec 20 00:56:57.440989 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:57758] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/link/item.php"] [unique_id "aUWD2eTCMRSRXPuXZF8CSQAAARU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:57.803775 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:57733] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/link/wp-login.php"] [unique_id "aUWD2RzVxeBEODU8mCB3qwAAAMk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:58.211486 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:7018] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/tabfocus/options.php"] [unique_id "aUWD2kJMTU3r4hb8qAlR5QAAAFI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:56:58.555978 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:59672] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/textcolor/about.php"] [unique_id "aUWD2ixTWUmlILwAM_erxwAAAA0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:56:58.906632 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:51808] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/textcolor/alfa-rex.php"] [unique_id "aUWD2hzVxeBEODU8mCB3rgAAAMg"], referer: https://www.google.de/
[Sat Dec 20 00:56:59.324913 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:51820] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/textcolor/wp-login.php"] [unique_id "aUWD2yxTWUmlILwAM_erygAAABQ"], referer: https://www.google.fr/
[Sat Dec 20 00:56:59.722354 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:64028] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wordpress/about.php"] [unique_id "aUWD2-TCMRSRXPuXZF8CTQAAAQ4"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:00.255970 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:60381] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wordpress/alfa-rex.php"] [unique_id "aUWD3OTCMRSRXPuXZF8CTwAAAQE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:00.700978 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:7130] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wordpress/click.php"] [unique_id "aUWD3OTCMRSRXPuXZF8CUAAAAQ8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:01.331799 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:7007] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wordpress/wp-login.php"] [unique_id "aUWD3RzVxeBEODU8mCB3tAAAAME"], referer: https://www.google.com/
[Sat Dec 20 00:57:03.247942 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:6988] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wp-login.php"] [unique_id "aUWD3-TCMRSRXPuXZF8CVgAAARU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:03.596150 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:6995] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/about.php"] [unique_id "aUWD3yxTWUmlILwAM_erzQAAAAU"], referer: https://www.google.fr/
[Sat Dec 20 00:57:04.087600 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:7027] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/alfa-rex.php"] [unique_id "aUWD4OTCMRSRXPuXZF8CWgAAARM"], referer: https://www.bing.com/
[Sat Dec 20 00:57:04.448454 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:54161] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/defaults.php"] [unique_id "aUWD4EJMTU3r4hb8qAlR5wAAAE8"], referer: https://www.google.de/
[Sat Dec 20 00:57:04.814686 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:57778] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/wp-login.php"] [unique_id "aUWD4BzVxeBEODU8mCB3uwAAANI"], referer: https://www.google.fr/
[Sat Dec 20 00:57:05.167188 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:60410] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpeditimage/about.php"] [unique_id "aUWD4Y12VmSu4NX34PTU7QAAAJA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:05.539450 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:42969] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpeditimage/alfa-rex.php"] [unique_id "aUWD4UJMTU3r4hb8qAlR6AAAAFU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:06.061418 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:57302] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wpeditimage/wp-login.php"] [unique_id "aUWD4ixTWUmlILwAM_er0wAAAAg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:06.598161 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51808] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wplink/about.php"] [unique_id "aUWD4ixTWUmlILwAM_er1AAAAA0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:07.042767 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:7137] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wplink/alfa-rex.php"] [unique_id "aUWD4-TCMRSRXPuXZF8CWwAAAQ8"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:07.439448 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:7003] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wplink/wp-login.php"] [unique_id "aUWD4-TCMRSRXPuXZF8CXAAAAQk"], referer: https://www.google.com/
[Sat Dec 20 00:57:07.858725 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:64007] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aUWD4412VmSu4NX34PTU7gAAAIc"], referer: https://www.google.fr/
[Sat Dec 20 00:57:08.192457 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:54187] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/alfa-rex.php"] [unique_id "aUWD5CxTWUmlILwAM_er1wAAABY"], referer: https://www.google.de/
[Sat Dec 20 00:57:08.518869 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:57773] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/wp-login.php"] [unique_id "aUWD5OTCMRSRXPuXZF8CYgAAARI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:08.897044 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:51839] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/about.php"] [unique_id "aUWD5EJMTU3r4hb8qAlR7gAAAFE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:09.280951 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:51828] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/alfa-rex.php"] [unique_id "aUWD5RzVxeBEODU8mCB30wAAAMw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:09.602703 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:53610] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/about.php"] [unique_id "aUWD5RzVxeBEODU8mCB32AAAANA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:09.925329 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:7153] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/alfa-rex.php"] [unique_id "aUWD5SxTWUmlILwAM_er2gAAABM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:10.271640 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:57730] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/about.php"] [unique_id "aUWD5ixTWUmlILwAM_er2wAAABE"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:10.614526 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:61422] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/alfa-rex.php"] [unique_id "aUWD5ixTWUmlILwAM_er3QAAAAk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:10.954683 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:53597] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/wp-login.php"] [unique_id "aUWD5uTCMRSRXPuXZF8CZgAAAQQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:11.284158 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:7036] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUWD5412VmSu4NX34PTU9QAAAIY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:11.657334 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:53581] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/alfa-rex.php"] [unique_id "aUWD50JMTU3r4hb8qAlR8QAAAEY"], referer: https://www.google.de/
[Sat Dec 20 00:57:12.087518 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:57746] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUWD6OTCMRSRXPuXZF8CaAAAAQo"], referer: https://www.google.de/
[Sat Dec 20 00:57:12.424014 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:53603] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/wp-login.php"] [unique_id "aUWD6I12VmSu4NX34PTU9wAAAI0"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:12.781529 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:7151] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/wp-login.php"] [unique_id "aUWD6OTCMRSRXPuXZF8CawAAAQs"], referer: https://www.google.com/
[Sat Dec 20 00:57:13.158110 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:54168] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "aUWD6eTCMRSRXPuXZF8CbgAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:57:13.490635 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:7120] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/alfa-rex.php"] [unique_id "aUWD6RzVxeBEODU8mCB3-wAAAMw"], referer: https://www.google.fr/
[Sat Dec 20 00:57:13.835908 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:61406] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/modern/about.php"] [unique_id "aUWD6SxTWUmlILwAM_er5AAAAAY"], referer: https://www.google.com/
[Sat Dec 20 00:57:14.233680 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:59652] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/modern/alfa-rex.php"] [unique_id "aUWD6o12VmSu4NX34PTU-QAAAI4"], referer: https://www.bing.com/
[Sat Dec 20 00:57:14.610156 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:51830] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/modern/item.php"] [unique_id "aUWD6kJMTU3r4hb8qAlR9QAAAE8"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:14.991179 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:60408] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/modern/wp-login.php"] [unique_id "aUWD6ixTWUmlILwAM_er5gAAAAo"], referer: https://www.google.de/
[Sat Dec 20 00:57:15.354267 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:59757] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/wp-login.php"] [unique_id "aUWD6412VmSu4NX34PTU-gAAAJI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:15.829496 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:53618] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/about.php"] [unique_id "aUWD6yxTWUmlILwAM_er6AAAABE"], referer: https://www.bing.com/
[Sat Dec 20 00:57:16.202192 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:54164] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/alfa-rex.php"] [unique_id "aUWD7CxTWUmlILwAM_er6gAAAAk"], referer: https://www.google.de/
[Sat Dec 20 00:57:16.607425 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:58438] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/wp-login.php"] [unique_id "aUWD7CxTWUmlILwAM_er6wAAAAg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:16.969861 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:64018] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aUWD7OTCMRSRXPuXZF8CdgAAAQ4"], referer: https://www.bing.com/
[Sat Dec 20 00:57:17.311919 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:53630] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aUWD7Y12VmSu4NX34PTU_QAAAIM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:17.695120 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:7002] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/kses.php"] [unique_id "aUWD7SxTWUmlILwAM_er7QAAABQ"], referer: https://www.bing.com/
[Sat Dec 20 00:57:18.131073 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:57786] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n.php"] [unique_id "aUWD7hzVxeBEODU8mCB4IwAAAMc"], referer: https://www.google.fr/
[Sat Dec 20 00:57:18.504077 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:7019] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/about.php"] [unique_id "aUWD7ixTWUmlILwAM_er8AAAAAI"], referer: https://www.bing.com/
[Sat Dec 20 00:57:18.863050 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:53599] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/alfa-rex.php"] [unique_id "aUWD7ixTWUmlILwAM_er8QAAAAU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:19.293129 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:61409] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-controller.php"] [unique_id "aUWD7-TCMRSRXPuXZF8CfAAAAQo"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:19.668511 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:42973] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo.php"] [unique_id "aUWD70JMTU3r4hb8qAlR_QAAAEc"], referer: https://www.bing.com/
[Sat Dec 20 00:57:20.030088 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:63349] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-php.php"] [unique_id "aUWD8I12VmSu4NX34PTU_gAAAJQ"], referer: https://www.google.com/
[Sat Dec 20 00:57:20.384636 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:7167] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file.php"] [unique_id "aUWD8OTCMRSRXPuXZF8CggAAAQs"], referer: https://www.google.fr/
[Sat Dec 20 00:57:20.708222 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:57785] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations.php"] [unique_id "aUWD8CxTWUmlILwAM_er9QAAAAs"], referer: https://www.bing.com/
[Sat Dec 20 00:57:21.074708 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:57756] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUWD8Y12VmSu4NX34PTVAAAAAIA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:21.417057 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:53580] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/link-template.php"] [unique_id "aUWD8RzVxeBEODU8mCB4QQAAAME"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:21.747645 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:57238] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aUWD8RzVxeBEODU8mCB4RQAAAMI"], referer: https://www.google.fr/
[Sat Dec 20 00:57:22.160268 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:7029] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/locale.php"] [unique_id "aUWD8hzVxeBEODU8mCB4SQAAAMc"], referer: https://www.google.com/
[Sat Dec 20 00:57:22.540091 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:59670] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aUWD8uTCMRSRXPuXZF8ChQAAARY"], referer: https://www.google.com/
[Sat Dec 20 00:57:22.960253 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:59690] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/media-template.php"] [unique_id "aUWD8ixTWUmlILwAM_er-AAAABQ"], referer: https://www.google.fr/
[Sat Dec 20 00:57:23.310634 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:63304] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/media.php"] [unique_id "aUWD8412VmSu4NX34PTVAwAAAIw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:23.688971 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:59695] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/meta.php"] [unique_id "aUWD8yxTWUmlILwAM_er-QAAABY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:24.072603 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51819] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-blogs.php"] [unique_id "aUWD9CxTWUmlILwAM_er-wAAAA8"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:24.410438 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:7008] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-default-constants.php"] [unique_id "aUWD9CxTWUmlILwAM_er_QAAABM"], referer: https://www.bing.com/
[Sat Dec 20 00:57:24.848822 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:60395] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-default-filters.php"] [unique_id "aUWD9I12VmSu4NX34PTVBQAAAIk"], referer: https://www.google.com/
[Sat Dec 20 00:57:25.207255 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51785] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-deprecated.php"] [unique_id "aUWD9SxTWUmlILwAM_er_gAAAAA"], referer: https://www.bing.com/
[Sat Dec 20 00:57:25.576766 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51727] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-files.php"] [unique_id "aUWD9SxTWUmlILwAM_er_wAAAAE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:25.967813 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:57759] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-functions.php"] [unique_id "aUWD9eTCMRSRXPuXZF8CjAAAARA"], referer: https://www.google.com/
[Sat Dec 20 00:57:26.325600 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:51803] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-load.php"] [unique_id "aUWD9kJMTU3r4hb8qAlSCQAAAFM"], referer: https://www.google.fr/
[Sat Dec 20 00:57:26.671784 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:7154] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-network.php"] [unique_id "aUWD9kJMTU3r4hb8qAlSCwAAAEI"], referer: https://www.bing.com/
[Sat Dec 20 00:57:27.061310 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:54172] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-settings.php"] [unique_id "aUWD9-TCMRSRXPuXZF8CjQAAARM"], referer: https://www.google.fr/
[Sat Dec 20 00:57:27.487780 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:54144] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-site.php"] [unique_id "aUWD9-TCMRSRXPuXZF8CjgAAARQ"], referer: https://www.bing.com/
[Sat Dec 20 00:57:27.868660 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:60306] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/nav-menu-template.php"] [unique_id "aUWD9yxTWUmlILwAM_esBAAAABY"], referer: https://www.bing.com/
[Sat Dec 20 00:57:28.214002 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:7117] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/nav-menu.php"] [unique_id "aUWD-EJMTU3r4hb8qAlSDQAAAEQ"], referer: https://www.google.com/
[Sat Dec 20 00:57:28.547222 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:7105] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/networks.php"] [unique_id "aUWD-I12VmSu4NX34PTVBwAAAJI"], referer: https://www.google.com/
[Sat Dec 20 00:57:28.975893 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:53595] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/option.php"] [unique_id "aUWD-I12VmSu4NX34PTVCAAAAIQ"], referer: https://www.google.de/
[Sat Dec 20 00:57:29.351478 2025] [:error] [pid 35626:tid 35696] [client 4.217.239.238:51804] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/options.php"] [unique_id "aUWD-RzVxeBEODU8mCB4bQAAAM4"], referer: https://www.google.com/
[Sat Dec 20 00:57:29.705763 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:6977] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/readonly.php"] [unique_id "aUWD-eTCMRSRXPuXZF8ClAAAAQw"], referer: https://www.bing.com/
[Sat Dec 20 00:57:30.081016 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:60404] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pluggable-deprecated.php"] [unique_id "aUWD-hzVxeBEODU8mCB4cwAAANE"], referer: https://www.google.com/
[Sat Dec 20 00:57:30.480460 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:53577] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pluggable.php"] [unique_id "aUWD-kJMTU3r4hb8qAlSEAAAAEo"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:30.843460 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:59709] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aUWD-o12VmSu4NX34PTVCwAAAJQ"], referer: https://www.google.de/
[Sat Dec 20 00:57:31.181367 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:6982] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aUWD-0JMTU3r4hb8qAlSEgAAAEU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:31.585121 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:57777] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aUWD-xzVxeBEODU8mCB4dwAAAMQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:32.075582 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:6992] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:57:32.242266 2025] [:error] [pid 39268:tid 39315] [client 4.217.239.238:6992] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUWD_OTCMRSRXPuXZF8ClwAAAQU"], referer: https://www.google.de/
[Sat Dec 20 00:57:32.789995 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:64002] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aUWD_BzVxeBEODU8mCB4egAAANQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:33.201303 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:64042] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/entry.php"] [unique_id "aUWD_RzVxeBEODU8mCB4ewAAAMo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:33.536988 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:60345] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/mo.php"] [unique_id "aUWD_RzVxeBEODU8mCB4fAAAANE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:33.895984 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:64038] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plural-forms.php"] [unique_id "aUWD_eTCMRSRXPuXZF8CmQAAARM"], referer: https://www.google.fr/
[Sat Dec 20 00:57:34.334647 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:54162] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/po.php"] [unique_id "aUWD_ixTWUmlILwAM_esDwAAAAQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:34.669214 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:51817] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/streams.php"] [unique_id "aUWD_hzVxeBEODU8mCB4gAAAANM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:35.059608 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:60294] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/translations.php"] [unique_id "aUWD_-TCMRSRXPuXZF8CmgAAARQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:35.502051 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:51822] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/post-formats.php"] [unique_id "aUWD_xzVxeBEODU8mCB4ggAAAMQ"], referer: https://www.google.fr/
[Sat Dec 20 00:57:35.936064 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:54190] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/post-template.php"] [unique_id "aUWD_0JMTU3r4hb8qAlSFAAAAEw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:36.269607 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:58472] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/post-thumbnail-template.php"] [unique_id "aUWEAOTCMRSRXPuXZF8CnQAAARI"], referer: https://www.bing.com/
[Sat Dec 20 00:57:36.602923 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:53602] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/post.php"] [unique_id "aUWEAI12VmSu4NX34PTVEgAAAIk"], referer: https://www.google.fr/
[Sat Dec 20 00:57:36.979663 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:58472] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/product.php"] [unique_id "aUWEABzVxeBEODU8mCB4hAAAAMw"], referer: https://www.google.com/
[Sat Dec 20 00:57:37.375621 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:63352] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/query.php"] [unique_id "aUWEAeTCMRSRXPuXZF8CogAAARA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:37.903905 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:54165] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/registration-functions.php"] [unique_id "aUWEASxTWUmlILwAM_esFwAAAAg"], referer: https://www.google.de/
[Sat Dec 20 00:57:38.273890 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:7163] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/registration.php"] [unique_id "aUWEAuTCMRSRXPuXZF8CpwAAAQ4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:38.631140 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:60380] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api.php"] [unique_id "aUWEAixTWUmlILwAM_esGwAAABY"], referer: https://www.google.com/
[Sat Dec 20 00:57:38.995787 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:57745] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aUWEAixTWUmlILwAM_esHgAAAAQ"], referer: https://www.google.com/
[Sat Dec 20 00:57:39.406333 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:7000] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/class-wp-rest-request.php"] [unique_id "aUWEA-TCMRSRXPuXZF8CqgAAAQI"], referer: https://www.google.de/
[Sat Dec 20 00:57:39.761709 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:60294] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/class-wp-rest-response.php"] [unique_id "aUWEAyxTWUmlILwAM_esIgAAABM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:40.115109 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51836] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/class-wp-rest-server.php"] [unique_id "aUWEBCxTWUmlILwAM_esJAAAAAA"], referer: https://www.bing.com/
[Sat Dec 20 00:57:40.593457 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:53626] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/about.php"] [unique_id "aUWEBOTCMRSRXPuXZF8CrwAAAQA"], referer: https://www.bing.com/
[Sat Dec 20 00:57:41.012688 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:51797] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/alfa-rex.php"] [unique_id "aUWEBeTCMRSRXPuXZF8CsAAAAQ8"], referer: https://www.google.fr/
[Sat Dec 20 00:57:41.392115 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:51783] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php"] [unique_id "aUWEBRzVxeBEODU8mCB4iAAAAMo"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:41.784750 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:51777] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-attachments-controller.php"] [unique_id "aUWEBeTCMRSRXPuXZF8CswAAARg"], referer: https://www.google.com/
[Sat Dec 20 00:57:42.178646 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7108] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-autosaves-controller.php"] [unique_id "aUWEBo12VmSu4NX34PTVFgAAAJE"], referer: https://www.google.de/
[Sat Dec 20 00:57:42.547276 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:58492] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-block-directory-controller.php"] [unique_id "aUWEBkJMTU3r4hb8qAlSGgAAAE0"], referer: https://www.google.fr/
[Sat Dec 20 00:57:42.968933 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:64023] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-block-pattern-categories-controller.php"] [unique_id "aUWEBuTCMRSRXPuXZF8CtAAAARI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:43.354100 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:6986] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-block-patterns-controller.php"] [unique_id "aUWEByxTWUmlILwAM_esKwAAABA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:43.787944 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:51777] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-block-renderer-controller.php"] [unique_id "aUWEB0JMTU3r4hb8qAlSHQAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:44.169693 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:58449] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-block-types-controller.php"] [unique_id "aUWECCxTWUmlILwAM_esLQAAAA0"], referer: https://www.google.fr/
[Sat Dec 20 00:57:44.511042 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:53609] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-blocks-controller.php"] [unique_id "aUWECOTCMRSRXPuXZF8CtwAAAQA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:44.879927 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:7161] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php"] [unique_id "aUWECI12VmSu4NX34PTVGQAAAJg"], referer: https://www.bing.com/
[Sat Dec 20 00:57:45.346488 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:51816] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-controller.php"] [unique_id "aUWECeTCMRSRXPuXZF8CuwAAARQ"], referer: https://www.bing.com/
[Sat Dec 20 00:57:45.702197 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:54148] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-edit-site-export-controller.php"] [unique_id "aUWECeTCMRSRXPuXZF8CvQAAARE"], referer: https://www.bing.com/
[Sat Dec 20 00:57:46.116037 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:53627] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-font-collections-controller.php"] [unique_id "aUWECuTCMRSRXPuXZF8CvgAAAQg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:46.486455 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:55394] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-font-faces-controller.php"] [unique_id "aUWECuTCMRSRXPuXZF8CvwAAARI"], referer: https://www.google.com/
[Sat Dec 20 00:57:46.837078 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:6996] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-font-families-controller.php"] [unique_id "aUWECkJMTU3r4hb8qAlSIQAAAEY"], referer: https://www.google.de/
[Sat Dec 20 00:57:47.169430 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:57763] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-global-styles-controller.php"] [unique_id "aUWECyxTWUmlILwAM_esMQAAAAI"], referer: https://www.google.fr/
[Sat Dec 20 00:57:47.501825 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:7024] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-global-styles-revisions-controller.php"] [unique_id "aUWECyxTWUmlILwAM_esNAAAABA"], referer: https://www.google.de/
[Sat Dec 20 00:57:47.917678 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:51804] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-menu-items-controller.php"] [unique_id "aUWEC412VmSu4NX34PTVGgAAAI0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:48.248810 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:64017] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-menu-locations-controller.php"] [unique_id "aUWEDI12VmSu4NX34PTVHQAAAII"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:48.716188 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:53587] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php"] [unique_id "aUWEDBzVxeBEODU8mCB4jAAAAMU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:49.142327 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:64005] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-navigation-fallback-controller.php"] [unique_id "aUWEDSxTWUmlILwAM_esNQAAAA8"], referer: https://www.google.de/
[Sat Dec 20 00:57:49.500111 2025] [:error] [pid 39268:tid 39319] [client 4.217.239.238:42974] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-pattern-directory-controller.php"] [unique_id "aUWEDeTCMRSRXPuXZF8CwwAAAQk"], referer: https://www.bing.com/
[Sat Dec 20 00:57:49.935756 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:54157] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-plugins-controller.php"] [unique_id "aUWEDSxTWUmlILwAM_esNwAAABM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:50.286333 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:7131] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-post-statuses-controller.php"] [unique_id "aUWEDhzVxeBEODU8mCB4jgAAAMY"], referer: https://www.google.com/
[Sat Dec 20 00:57:50.658625 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:53614] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-post-types-controller.php"] [unique_id "aUWEDkJMTU3r4hb8qAlSKAAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:50.997538 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:57736] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php"] [unique_id "aUWEDhzVxeBEODU8mCB4jwAAAME"], referer: https://www.google.fr/
[Sat Dec 20 00:57:51.322139 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:7162] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-revisions-controller.php"] [unique_id "aUWEDyxTWUmlILwAM_esOwAAAAM"], referer: https://www.bing.com/
[Sat Dec 20 00:57:51.644041 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:51811] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-search-controller.php"] [unique_id "aUWED412VmSu4NX34PTVIgAAAIE"], referer: https://www.bing.com/
[Sat Dec 20 00:57:52.032681 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:64060] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-settings-controller.php"] [unique_id "aUWEEOTCMRSRXPuXZF8CyAAAAQc"], referer: https://www.google.com/
[Sat Dec 20 00:57:52.430704 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:43007] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-sidebars-controller.php"] [unique_id "aUWEEEJMTU3r4hb8qAlSKgAAAEQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:52.859950 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:63310] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-site-health-controller.php"] [unique_id "aUWEEBzVxeBEODU8mCB4kAAAAMo"], referer: https://www.google.de/
[Sat Dec 20 00:57:53.263244 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:53594] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-taxonomies-controller.php"] [unique_id "aUWEESxTWUmlILwAM_esPwAAABA"], referer: https://www.bing.com/
[Sat Dec 20 00:57:53.652915 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:57762] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-template-autosaves-controller.php"] [unique_id "aUWEESxTWUmlILwAM_esQQAAAAo"], referer: https://www.google.de/
[Sat Dec 20 00:57:54.068388 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:7140] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-template-revisions-controller.php"] [unique_id "aUWEEuTCMRSRXPuXZF8CygAAAQA"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:54.714306 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:64027] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-templates-controller.php"] [unique_id "aUWEEixTWUmlILwAM_esRAAAAAA"], referer: https://www.google.fr/
[Sat Dec 20 00:57:55.139922 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:54174] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-terms-controller.php"] [unique_id "aUWEE-TCMRSRXPuXZF8CzwAAAQM"], referer: https://www.yahoo.com/
[Sat Dec 20 00:57:55.527123 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:58462] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-themes-controller.php"] [unique_id "aUWEE412VmSu4NX34PTVJAAAAIU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:55.895384 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:53592] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-url-details-controller.php"] [unique_id "aUWEExzVxeBEODU8mCB4lQAAAMQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:56.244108 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:53596] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php"] [unique_id "aUWEFBzVxeBEODU8mCB4mAAAAMI"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:56.584236 2025] [:error] [pid 35626:tid 35688] [client 4.217.239.238:54158] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-widget-types-controller.php"] [unique_id "aUWEFBzVxeBEODU8mCB4mQAAAMY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:56.939539 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:51814] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/class-wp-rest-widgets-controller.php"] [unique_id "aUWEFOTCMRSRXPuXZF8C0gAAARI"], referer: https://www.bing.com/
[Sat Dec 20 00:57:57.297117 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:57755] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/wp-login.php"] [unique_id "aUWEFeTCMRSRXPuXZF8C0wAAAQs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:57.674373 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:60401] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/about.php"] [unique_id "aUWEFRzVxeBEODU8mCB4mwAAAME"], referer: https://www.google.com/
[Sat Dec 20 00:57:58.122980 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:54179] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/alfa-rex.php"] [unique_id "aUWEFkJMTU3r4hb8qAlSMAAAAFE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:57:58.465625 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:43930] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/class-wp-rest-comment-meta-fields.php"] [unique_id "aUWEFixTWUmlILwAM_esTwAAAAA"], referer: https://www.google.com/
[Sat Dec 20 00:57:58.828298 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:57750] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/class-wp-rest-meta-fields.php"] [unique_id "aUWEFo12VmSu4NX34PTVMQAAAJE"], referer: https://www.google.co.uk/
[Sat Dec 20 00:57:59.264490 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:7127] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/class-wp-rest-post-meta-fields.php"] [unique_id "aUWEFyxTWUmlILwAM_esVAAAAAQ"], referer: https://www.google.fr/
[Sat Dec 20 00:57:59.758744 2025] [:error] [pid 39268:tid 39311] [client 4.217.239.238:53621] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/class-wp-rest-term-meta-fields.php"] [unique_id "aUWEF-TCMRSRXPuXZF8C1wAAAQE"], referer: https://www.google.fr/
[Sat Dec 20 00:58:00.097672 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:42997] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/class-wp-rest-user-meta-fields.php"] [unique_id "aUWEGOTCMRSRXPuXZF8C2QAAAQ4"], referer: https://www.google.com/
[Sat Dec 20 00:58:00.448423 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:51798] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/wp-login.php"] [unique_id "aUWEGI12VmSu4NX34PTVNwAAAJY"], referer: https://www.google.fr/
[Sat Dec 20 00:58:00.815582 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51782] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/about.php"] [unique_id "aUWEGCxTWUmlILwAM_esWgAAABA"], referer: https://www.bing.com/
[Sat Dec 20 00:58:01.177221 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:7038] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/alfa-rex.php"] [unique_id "aUWEGY12VmSu4NX34PTVOQAAAJA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:01.529017 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:60301] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/class-wp-rest-post-format-search-handler.php"] [unique_id "aUWEGUJMTU3r4hb8qAlSQgAAAEY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:01.901885 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:42963] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/class-wp-rest-post-search-handler.php"] [unique_id "aUWEGeTCMRSRXPuXZF8C3QAAAQQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:02.315640 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:61423] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handler.php"] [unique_id "aUWEGhzVxeBEODU8mCB4pAAAAM8"], referer: https://www.bing.com/
[Sat Dec 20 00:58:02.749186 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:54146] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/class-wp-rest-term-search-handler.php"] [unique_id "aUWEGo12VmSu4NX34PTVQAAAAIQ"], referer: https://www.google.com/
[Sat Dec 20 00:58:03.187043 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:64032] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/wp-login.php"] [unique_id "aUWEG-TCMRSRXPuXZF8C3gAAARE"], referer: https://www.google.de/
[Sat Dec 20 00:58:03.606256 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:61378] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aUWEG-TCMRSRXPuXZF8C3wAAARA"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:04.056848 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:60330] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/revision.php"] [unique_id "aUWEHEJMTU3r4hb8qAlSUwAAAEY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:04.385851 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:61403] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rewrite.php"] [unique_id "aUWEHCxTWUmlILwAM_escAAAAAM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:04.749337 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:64030] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/robots-template.php"] [unique_id "aUWEHBzVxeBEODU8mCB4rQAAANI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:05.077693 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:53601] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rss-functions.php"] [unique_id "aUWEHeTCMRSRXPuXZF8C4gAAARU"], referer: https://www.bing.com/
[Sat Dec 20 00:58:05.446203 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:60308] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rss.php"] [unique_id "aUWEHRzVxeBEODU8mCB4rgAAAMA"], referer: https://www.bing.com/
[Sat Dec 20 00:58:05.797490 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7160] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/script-loader.php"] [unique_id "aUWEHY12VmSu4NX34PTVRgAAAI4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:06.124756 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:57757] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/script-modules.php"] [unique_id "aUWEHixTWUmlILwAM_esewAAAA4"], referer: https://www.bing.com/
[Sat Dec 20 00:58:06.601371 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:46462] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/session.php"] [unique_id "aUWEHixTWUmlILwAM_esfwAAAAg"], referer: https://www.google.de/
[Sat Dec 20 00:58:06.953241 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:63308] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/shortcodes.php"] [unique_id "aUWEHhzVxeBEODU8mCB4sgAAANc"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:07.286735 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:60361] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps.php"] [unique_id "aUWEHyxTWUmlILwAM_esggAAAAk"], referer: https://www.google.fr/
[Sat Dec 20 00:58:07.716431 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:53575] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "aUWEH412VmSu4NX34PTVSgAAAIQ"], referer: https://www.bing.com/
[Sat Dec 20 00:58:08.100871 2025] [:error] [pid 39268:tid 39316] [client 4.217.239.238:59678] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/class-wp-sitemaps-index.php"] [unique_id "aUWEIOTCMRSRXPuXZF8C5QAAAQY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:08.527781 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:60391] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/class-wp-sitemaps-provider.php"] [unique_id "aUWEIOTCMRSRXPuXZF8C5gAAAQA"], referer: https://www.google.fr/
[Sat Dec 20 00:58:08.885090 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:7112] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/class-wp-sitemaps-registry.php"] [unique_id "aUWEIOTCMRSRXPuXZF8C5wAAARE"], referer: https://www.google.com/
[Sat Dec 20 00:58:09.228056 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:64014] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/class-wp-sitemaps-renderer.php"] [unique_id "aUWEIY12VmSu4NX34PTVUAAAAIc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:09.702636 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:61394] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/class-wp-sitemaps-stylesheet.php"] [unique_id "aUWEIRzVxeBEODU8mCB4tgAAAMs"], referer: https://www.google.fr/
[Sat Dec 20 00:58:10.117453 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:51823] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/class-wp-sitemaps.php"] [unique_id "aUWEIuTCMRSRXPuXZF8C6AAAARA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:10.503803 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:63314] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/about.php"] [unique_id "aUWEIixTWUmlILwAM_esiQAAAAk"], referer: https://www.bing.com/
[Sat Dec 20 00:58:10.845765 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:63307] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/alfa-rex.php"] [unique_id "aUWEIhzVxeBEODU8mCB4uAAAANI"], referer: https://www.bing.com/
[Sat Dec 20 00:58:11.210142 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:53591] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/wp-login.php"] [unique_id "aUWEIxzVxeBEODU8mCB4uQAAANM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:11.623135 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:7033] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/about.php"] [unique_id "aUWEIyxTWUmlILwAM_esigAAAA4"], referer: https://www.google.fr/
[Sat Dec 20 00:58:12.096051 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:64012] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/alfa-rex.php"] [unique_id "aUWEJBzVxeBEODU8mCB4ugAAAMw"], referer: https://www.google.fr/
[Sat Dec 20 00:58:12.435851 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:60377] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/about.php"] [unique_id "aUWEJCxTWUmlILwAM_esjQAAAAA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:12.840719 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:58482] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/alfa-rex.php"] [unique_id "aUWEJOTCMRSRXPuXZF8C6wAAAQM"], referer: https://www.google.com/
[Sat Dec 20 00:58:13.271790 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:7143] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/wp-login.php"] [unique_id "aUWEJRzVxeBEODU8mCB4uwAAAMU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:13.666766 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:54157] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/ChaCha20/about.php"] [unique_id "aUWEJUJMTU3r4hb8qAlSegAAAEg"], referer: https://www.google.fr/
[Sat Dec 20 00:58:14.024993 2025] [:error] [pid 39268:tid 39325] [client 4.217.239.238:63325] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/ChaCha20/alfa-rex.php"] [unique_id "aUWEJuTCMRSRXPuXZF8C7QAAAQ8"], referer: https://www.google.fr/
[Sat Dec 20 00:58:14.381720 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:54154] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/ChaCha20/wp-login.php"] [unique_id "aUWEJixTWUmlILwAM_esjwAAAAg"], referer: https://www.bing.com/
[Sat Dec 20 00:58:14.701137 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:57761] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/Curve25519/wp-log1n.php"] [unique_id "aUWEJixTWUmlILwAM_eskQAAAAc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:15.069395 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:59701] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/Poly1305/about.php"] [unique_id "aUWEJ-TCMRSRXPuXZF8C8QAAAQA"], referer: https://www.google.de/
[Sat Dec 20 00:58:15.507697 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:42962] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/Poly1305/alfa-rex.php"] [unique_id "aUWEJyxTWUmlILwAM_eskwAAAAI"], referer: https://www.google.fr/
[Sat Dec 20 00:58:15.825641 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:57743] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/Poly1305/wp-login.php"] [unique_id "aUWEJyxTWUmlILwAM_eslQAAAAE"], referer: https://www.google.fr/
[Sat Dec 20 00:58:16.229336 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:7039] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aUWEKCxTWUmlILwAM_eslwAAABU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:16.619218 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:64037] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/alfa-rex.php"] [unique_id "aUWEKOTCMRSRXPuXZF8C8gAAARg"], referer: https://www.google.com/
[Sat Dec 20 00:58:16.950619 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:7124] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/wp-login.php"] [unique_id "aUWEKBzVxeBEODU8mCB4vwAAANQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:17.293071 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:54147] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/about.php"] [unique_id "aUWEKeTCMRSRXPuXZF8C9QAAAQg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:17.670923 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:54187] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/alfa-rex.php"] [unique_id "aUWEKY12VmSu4NX34PTVXQAAAIU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:18.088648 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:64019] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/namespaced/wp-login.php"] [unique_id "aUWEKuTCMRSRXPuXZF8C9gAAARI"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:18.549966 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:57791] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/AES/about.php"] [unique_id "aUWEKkJMTU3r4hb8qAlSfwAAAE0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:18.903807 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:59681] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/AES/alfa-rex.php"] [unique_id "aUWEKuTCMRSRXPuXZF8C9wAAAQQ"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:19.266669 2025] [:error] [pid 39268:tid 39310] [client 4.217.239.238:61413] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/AES/wp-login.php"] [unique_id "aUWEK-TCMRSRXPuXZF8C-QAAAQA"], referer: https://www.google.de/
[Sat Dec 20 00:58:19.698413 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:60382] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Base64/about.php"] [unique_id "aUWEKyxTWUmlILwAM_esowAAAAw"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:20.058823 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:64043] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Base64/alfa-rex.php"] [unique_id "aUWELI12VmSu4NX34PTVYgAAAIg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:20.545188 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:7004] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Base64/wp-login.php"] [unique_id "aUWELEJMTU3r4hb8qAlSgAAAAEU"], referer: https://www.google.de/
[Sat Dec 20 00:58:20.932340 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:42986] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/ChaCha20/about.php"] [unique_id "aUWELI12VmSu4NX34PTVYwAAAI8"], referer: https://www.google.de/
[Sat Dec 20 00:58:21.303152 2025] [:error] [pid 39268:tid 39329] [client 4.217.239.238:53571] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/ChaCha20/alfa-rex.php"] [unique_id "aUWELeTCMRSRXPuXZF8C-gAAARM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:21.748768 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51799] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/ChaCha20/wp-login.php"] [unique_id "aUWELSxTWUmlILwAM_esqAAAABU"], referer: https://www.google.fr/
[Sat Dec 20 00:58:22.096904 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:53588] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/SecretStream/about.php"] [unique_id "aUWELo12VmSu4NX34PTVZgAAAI4"], referer: https://www.bing.com/
[Sat Dec 20 00:58:22.425254 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:43007] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/SecretStream/alfa-rex.php"] [unique_id "aUWELuTCMRSRXPuXZF8C_AAAARg"], referer: https://www.google.com/
[Sat Dec 20 00:58:22.772596 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:54171] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/SecretStream/wp-login.php"] [unique_id "aUWELo12VmSu4NX34PTVaQAAAI0"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:23.164729 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:60303] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/about.php"] [unique_id "aUWEL412VmSu4NX34PTVawAAAJQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:23.750257 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:60362] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/alfa-rex.php"] [unique_id "aUWEL0JMTU3r4hb8qAlSgQAAAFg"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:24.244746 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:54175] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/wp-login.php"] [unique_id "aUWEMOTCMRSRXPuXZF8DAQAAAQQ"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:24.677056 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:63346] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aUWEMI12VmSu4NX34PTVcAAAAIo"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:25.089099 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:53607] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/alfa-rex.php"] [unique_id "aUWEMY12VmSu4NX34PTVdAAAAIY"], referer: https://www.google.de/
[Sat Dec 20 00:58:25.539168 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:42978] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/wp-login.php"] [unique_id "aUWEMRzVxeBEODU8mCB40wAAAMw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:25.876855 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:6993] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/about.php"] [unique_id "aUWEMY12VmSu4NX34PTVdgAAAIE"], referer: https://www.google.fr/
[Sat Dec 20 00:58:26.315091 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:60367] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/alfa-rex.php"] [unique_id "aUWEMuTCMRSRXPuXZF8DBAAAARE"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:26.691341 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:45070] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/wp-login.php"] [unique_id "aUWEMuTCMRSRXPuXZF8DBQAAAQc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:27.130967 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:61408] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Poly1305/about.php"] [unique_id "aUWEMyxTWUmlILwAM_esyAAAAAQ"], referer: https://www.google.de/
[Sat Dec 20 00:58:27.547847 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:7006] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Poly1305/alfa-rex.php"] [unique_id "aUWEM-TCMRSRXPuXZF8DBwAAAQI"], referer: https://www.google.com/
[Sat Dec 20 00:58:27.960498 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:42981] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Poly1305/wp-login.php"] [unique_id "aUWEM412VmSu4NX34PTVeQAAAIs"], referer: https://www.google.fr/
[Sat Dec 20 00:58:28.347379 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:53582] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/about.php"] [unique_id "aUWENOTCMRSRXPuXZF8DCAAAAQw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:28.769962 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:53589] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/alfa-rex.php"] [unique_id "aUWENBzVxeBEODU8mCB42wAAANI"], referer: https://www.google.com/
[Sat Dec 20 00:58:29.133733 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:59886] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/wp-login.php"] [unique_id "aUWENeTCMRSRXPuXZF8DCgAAAQg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:29.572216 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:7035] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/PHP52/about.php"] [unique_id "aUWENSxTWUmlILwAM_esygAAABI"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:30.021862 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7026] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/PHP52/alfa-rex.php"] [unique_id "aUWENo12VmSu4NX34PTVfAAAAJE"], referer: https://www.bing.com/
[Sat Dec 20 00:58:30.468130 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:57735] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/PHP52/wp-login.php"] [unique_id "aUWENkJMTU3r4hb8qAlSjQAAAFM"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:30.843690 2025] [:error] [pid 35624:tid 35642] [client 4.217.239.238:46456] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/about.php"] [unique_id "aUWENkJMTU3r4hb8qAlSjgAAAE4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:31.240296 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:54185] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aUWENxzVxeBEODU8mCB43wAAANg"], referer: https://www.google.de/
[Sat Dec 20 00:58:31.600371 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:53568] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/wp-login.php"] [unique_id "aUWEN412VmSu4NX34PTVfwAAAIY"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:32.104472 2025] [:error] [pid 35626:tid 35690] [client 4.217.239.238:43006] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aUWEOBzVxeBEODU8mCB44AAAAMg"], referer: https://www.google.fr/
[Sat Dec 20 00:58:32.451628 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:47627] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/spl-autoload-compat.php"] [unique_id "aUWEOCxTWUmlILwAM_es0QAAAAE"], referer: https://www.google.de/
[Sat Dec 20 00:58:32.914888 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:64058] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine.php"] [unique_id "aUWEOCxTWUmlILwAM_es0wAAAA4"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:33.246193 2025] [:error] [pid 35626:tid 35693] [client 4.217.239.238:64026] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/alfa-rex.php"] [unique_id "aUWEORzVxeBEODU8mCB44gAAAMs"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:33.736219 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:51805] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/class-wp-style-engine-css-declarations.php"] [unique_id "aUWEORzVxeBEODU8mCB45QAAANI"], referer: https://www.google.fr/
[Sat Dec 20 00:58:34.116230 2025] [:error] [pid 39268:tid 39317] [client 4.217.239.238:60369] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/class-wp-style-engine-css-rule.php"] [unique_id "aUWEOuTCMRSRXPuXZF8DEAAAAQc"], referer: https://www.google.fr/
[Sat Dec 20 00:58:34.446906 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:59861] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/class-wp-style-engine-css-rules-store.php"] [unique_id "aUWEOuTCMRSRXPuXZF8DEgAAARU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:34.762629 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:53604] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/class-wp-style-engine-processor.php"] [unique_id "aUWEOuTCMRSRXPuXZF8DEwAAAQ4"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:35.084952 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:42975] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/class-wp-style-engine.php"] [unique_id "aUWEO0JMTU3r4hb8qAlSlQAAAFA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:35.478248 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:64050] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/taxonomy.php"] [unique_id "aUWEO412VmSu4NX34PTViQAAAIU"], referer: https://www.google.com/
[Sat Dec 20 00:58:35.851717 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:7125] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-canvas.php"] [unique_id "aUWEO412VmSu4NX34PTVigAAAIg"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:36.267261 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:58461] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-loader.php"] [unique_id "aUWEPEJMTU3r4hb8qAlSmAAAAEE"], referer: https://www.google.de/
[Sat Dec 20 00:58:36.622759 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:58455] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template.php"] [unique_id "aUWEPEJMTU3r4hb8qAlSmgAAAEw"], referer: https://www.google.de/
[Sat Dec 20 00:58:37.223065 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:60300] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUWEPeTCMRSRXPuXZF8DFgAAARY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:37.581515 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:54200] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/alfa-rex.php"] [unique_id "aUWEPRzVxeBEODU8mCB48AAAANI"], referer: https://www.google.de/
[Sat Dec 20 00:58:37.930047 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:60339] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aUWEPUJMTU3r4hb8qAlSoAAAAEI"], referer: https://www.google.de/
[Sat Dec 20 00:58:38.256882 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:51793] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-previews.php"] [unique_id "aUWEPuTCMRSRXPuXZF8DGQAAAQQ"], referer: https://www.google.com/
[Sat Dec 20 00:58:38.743561 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:54180] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-templates.php"] [unique_id "aUWEPo12VmSu4NX34PTVkQAAAI4"], referer: https://www.google.fr/
[Sat Dec 20 00:58:39.101043 2025] [:error] [pid 35624:tid 35648] [client 4.217.239.238:59723] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme.php"] [unique_id "aUWEP0JMTU3r4hb8qAlSpQAAAFQ"], referer: https://www.google.de/
[Sat Dec 20 00:58:39.530967 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:60400] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/update.php"] [unique_id "aUWEPyxTWUmlILwAM_es3AAAAAU"], referer: https://www.google.de/
[Sat Dec 20 00:58:39.881921 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:6997] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/user.php"] [unique_id "aUWEPxzVxeBEODU8mCB49gAAAMU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:40.385199 2025] [:error] [pid 39268:tid 39334] [client 4.217.239.238:54205] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars.php"] [unique_id "aUWEQOTCMRSRXPuXZF8DHgAAARg"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:40.842505 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:64059] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/version.php"] [unique_id "aUWEQOTCMRSRXPuXZF8DHwAAAQo"], referer: https://www.google.com/
[Sat Dec 20 00:58:41.170179 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:59672] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets.php"] [unique_id "aUWEQeTCMRSRXPuXZF8DIgAAAQM"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:41.577798 2025] [:error] [pid 35626:tid 35698] [client 4.217.239.238:64015] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/alfa-rex.php"] [unique_id "aUWEQRzVxeBEODU8mCB4-QAAANA"], referer: https://www.google.com/
[Sat Dec 20 00:58:41.922070 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:57760] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-menu-widget.php"] [unique_id "aUWEQeTCMRSRXPuXZF8DIwAAAQQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:42.341262 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:7011] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-archives.php"] [unique_id "aUWEQo12VmSu4NX34PTVlQAAAJU"], referer: https://www.bing.com/
[Sat Dec 20 00:58:42.705004 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:54173] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "aUWEQo12VmSu4NX34PTVlwAAAIE"], referer: https://www.google.com/
[Sat Dec 20 00:58:43.228145 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:42976] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-calendar.php"] [unique_id "aUWEQyxTWUmlILwAM_es4AAAAAo"], referer: https://www.bing.com/
[Sat Dec 20 00:58:43.548519 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:61392] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-categories.php"] [unique_id "aUWEQxzVxeBEODU8mCB4_gAAAMI"], referer: https://www.google.fr/
[Sat Dec 20 00:58:43.954642 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:51806] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-custom-html.php"] [unique_id "aUWEQ-TCMRSRXPuXZF8DKAAAARU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:44.307393 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:60374] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-links.php"] [unique_id "aUWERCxTWUmlILwAM_es4QAAAAw"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:44.673929 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:58453] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-media-audio.php"] [unique_id "aUWERI12VmSu4NX34PTVnAAAAII"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:45.060038 2025] [:error] [pid 39268:tid 39312] [client 4.217.239.238:57780] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-media-gallery.php"] [unique_id "aUWEReTCMRSRXPuXZF8DKwAAAQI"], referer: https://www.google.fr/
[Sat Dec 20 00:58:45.520353 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:57320] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-media-image.php"] [unique_id "aUWERSxTWUmlILwAM_es5gAAAAU"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:46.008134 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:60297] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-media-video.php"] [unique_id "aUWERixTWUmlILwAM_es6gAAAAM"], referer: https://www.google.fr/
[Sat Dec 20 00:58:46.383491 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:61386] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-media.php"] [unique_id "aUWERkJMTU3r4hb8qAlSrgAAAEk"], referer: https://www.google.com/
[Sat Dec 20 00:58:46.738636 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:61437] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta.php"] [unique_id "aUWERkJMTU3r4hb8qAlSrwAAAEc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:47.106841 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:54207] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-pages.php"] [unique_id "aUWER412VmSu4NX34PTVoAAAAIM"], referer: https://www.bing.com/
[Sat Dec 20 00:58:47.475416 2025] [:error] [pid 39268:tid 39314] [client 4.217.239.238:64040] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-recent-comments.php"] [unique_id "aUWER-TCMRSRXPuXZF8DLwAAAQQ"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:47.854754 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:59711] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-recent-posts.php"] [unique_id "aUWER412VmSu4NX34PTVogAAAIE"], referer: https://www.google.de/
[Sat Dec 20 00:58:48.278670 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:46416] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss.php"] [unique_id "aUWESBzVxeBEODU8mCB5BgAAANc"], referer: https://www.yahoo.com/
[Sat Dec 20 00:58:48.703124 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:59841] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search.php"] [unique_id "aUWESOTCMRSRXPuXZF8DMgAAARQ"], referer: https://www.google.fr/
[Sat Dec 20 00:58:49.094671 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:57753] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud.php"] [unique_id "aUWESY12VmSu4NX34PTVpgAAAIs"], referer: https://www.google.fr/
[Sat Dec 20 00:58:49.459335 2025] [:error] [pid 35626:tid 35691] [client 4.217.239.238:64003] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-text.php"] [unique_id "aUWESRzVxeBEODU8mCB5BwAAAMk"], referer: https://www.google.de/
[Sat Dec 20 00:58:49.872457 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:42991] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUWESY12VmSu4NX34PTVqAAAAJY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:50.326363 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:58454] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.vir.php"] [unique_id "aUWEShzVxeBEODU8mCB5DQAAAMU"], referer: https://www.bing.com/
[Sat Dec 20 00:58:50.909873 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:42980] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-configs.php"] [unique_id "aUWESkJMTU3r4hb8qAlSsgAAAEs"], referer: https://www.google.com/
[Sat Dec 20 00:58:51.251767 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:7141] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-db.php"] [unique_id "aUWES0JMTU3r4hb8qAlSswAAAEU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:58:51.621235 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:64061] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-diff.php"] [unique_id "aUWES-TCMRSRXPuXZF8DOQAAARc"], referer: https://www.bing.com/
[Sat Dec 20 00:58:51.972891 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:64046] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-log1n.php"] [unique_id "aUWESyxTWUmlILwAM_es8AAAABA"], referer: https://www.google.co.uk/
[Sat Dec 20 00:58:55.743957 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:59889] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:58:55.908497 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:59889] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aUWET0JMTU3r4hb8qAlSxwAAAFA"], referer: https://www.bing.com/
[Sat Dec 20 00:58:56.252001 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:59657] File does not exist: /usr/local/apache/htdocs/suspended-page/indoxploit.php, referer: https://www.google.fr/
[Sat Dec 20 00:58:58.737678 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:59657] File does not exist: /usr/local/apache/htdocs/suspended-page/rxr.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:58:59.087069 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:59657] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php, referer: https://www.bing.com/
[Sat Dec 20 00:58:59.261136 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:59657] File does not exist: /usr/local/apache/htdocs/suspended-page/RxR.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:03.743391 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:59657] File does not exist: /usr/local/apache/htdocs/suspended-page/upel.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:06.468634 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:59657] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:06.678167 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:59657] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aUWEWo12VmSu4NX34PTV9AAAAI4"], referer: https://www.google.co.uk/
[Sat Dec 20 00:59:07.092170 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:53614] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/zmFM.php"] [unique_id "aUWEWxzVxeBEODU8mCB5HwAAAMU"], referer: https://duckduckgo.com/
[Sat Dec 20 00:59:07.599660 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:64057] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/zmFM.php"] [unique_id "aUWEW0JMTU3r4hb8qAlS0QAAAFU"], referer: https://www.bing.com/
[Sat Dec 20 00:59:07.993616 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:58469] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/zmFM.php"] [unique_id "aUWEWyxTWUmlILwAM_etBAAAAA0"], referer: https://www.yahoo.com/
[Sat Dec 20 00:59:08.359155 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:53629] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/zmFM.php"] [unique_id "aUWEXEJMTU3r4hb8qAlS0wAAAEk"], referer: https://www.yahoo.com/
[Sat Dec 20 00:59:09.556513 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:63313] File does not exist: /usr/local/apache/htdocs/suspended-page/098.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:09.730399 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:63313] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:09.903982 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:63313] File does not exist: /usr/local/apache/htdocs/suspended-page/new_license.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:10.880782 2025] [:error] [pid 35626:tid 35687] [client 4.217.239.238:63313] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aUWEXhzVxeBEODU8mCB5LgAAAMU"], referer: https://www.google.co.uk/
[Sat Dec 20 00:59:11.233531 2025] [:error] [pid 39268:tid 39332] [client 4.217.239.238:6980] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "aUWEX-TCMRSRXPuXZF8DWAAAARY"], referer: https://duckduckgo.com/
[Sat Dec 20 00:59:11.924222 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:59847] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:12.101751 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:59847] File does not exist: /usr/local/apache/htdocs/suspended-page/heh.php, referer: https://www.google.com/
[Sat Dec 20 00:59:12.685864 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:59847] File does not exist: /usr/local/apache/htdocs/suspended-page/1975.phP, referer: https://www.google.com/
[Sat Dec 20 00:59:13.029829 2025] [:error] [pid 35624:tid 35651] [client 4.217.239.238:59847] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUWEYUJMTU3r4hb8qAlS4wAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 20 00:59:13.370505 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:59663] File does not exist: /usr/local/apache/htdocs/suspended-page/1975.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:13.534851 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:59663] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php, referer: https://www.google.com/
[Sat Dec 20 00:59:13.976366 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:59663] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aUWEYY12VmSu4NX34PTV_gAAAIw"], referer: https://www.google.de/
[Sat Dec 20 00:59:14.392884 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:7037] File does not exist: /usr/local/apache/htdocs/suspended-page/fx.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:14.855113 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:7037] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:15.036574 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:7037] File does not exist: /usr/local/apache/htdocs/suspended-page/jindex.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:22.624861 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:63330] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php, referer: https://www.google.de/
[Sat Dec 20 00:59:22.799110 2025] [:error] [pid 39268:tid 39323] [client 4.217.239.238:63330] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/991176.php"] [unique_id "aUWEauTCMRSRXPuXZF8DYQAAAQ0"], referer: https://www.google.de/
[Sat Dec 20 00:59:23.528886 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.google.de/
[Sat Dec 20 00:59:23.707348 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/brand.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:23.873775 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:43004] [client 4.217.239.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.239.238, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUWEayxTWUmlILwAM_etGQAAABY"], referer: https://www.google.fr/
[Sat Dec 20 00:59:23.877359 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:24.057036 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:24.479524 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:24.661853 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/swm.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:25.009566 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/w3llstore.php, referer: https://www.google.de/
[Sat Dec 20 00:59:25.536322 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/gank.php.PhP, referer: https://www.google.com/
[Sat Dec 20 00:59:25.728130 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:26.168985 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/loger.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:26.548676 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php, referer: https://www.google.de/
[Sat Dec 20 00:59:26.875751 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:27.058761 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:27.266059 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/moduless.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:27.446687 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/legion.php, referer: https://www.google.com/
[Sat Dec 20 00:59:27.680130 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:27.844276 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:43004] File does not exist: /usr/local/apache/htdocs/suspended-page/shells.php, referer: https://www.google.com/
[Sat Dec 20 00:59:28.004527 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:43004] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "aUWEcCxTWUmlILwAM_etNAAAABg"], referer: https://www.google.de/
[Sat Dec 20 00:59:29.158391 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:60394] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "aUWEcRzVxeBEODU8mCB5RQAAAMw"], referer: https://duckduckgo.com/
[Sat Dec 20 00:59:29.833959 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:60390] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/css.php"] [unique_id "aUWEcRzVxeBEODU8mCB5SAAAAMo"], referer: https://www.google.de/
[Sat Dec 20 00:59:30.199069 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:57751] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/css.php"] [unique_id "aUWEcuTCMRSRXPuXZF8DawAAAQ4"], referer: https://duckduckgo.com/
[Sat Dec 20 00:59:30.712640 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:60358] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-beckup.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:30.892262 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:60358] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-post.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:31.759112 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:60358] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_class_datalib.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:31.986993 2025] [:error] [pid 35624:tid 35639] [client 4.217.239.238:60358] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUWEc0JMTU3r4hb8qAlS-AAAAEs"], referer: https://www.google.co.uk/
[Sat Dec 20 00:59:32.324751 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:59694] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp_class_datalib.php"] [unique_id "aUWEdI12VmSu4NX34PTWGQAAAIY"], referer: https://www.google.fr/
[Sat Dec 20 00:59:32.735963 2025] [:error] [pid 39268:tid 39333] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/01.php, referer: https://www.google.com/
[Sat Dec 20 00:59:32.907388 2025] [:error] [pid 39268:tid 39322] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:33.080959 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/1xleet.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:33.599070 2025] [:error] [pid 39268:tid 39330] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/4index.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:33.780952 2025] [:error] [pid 39268:tid 39321] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/5index.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:33.969873 2025] [:error] [pid 39268:tid 39331] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/6index.php, referer: https://www.google.com/
[Sat Dec 20 00:59:34.134446 2025] [:error] [pid 39268:tid 39324] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/7index.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:34.309347 2025] [:error] [pid 39268:tid 39318] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/8index.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:34.481358 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/9index.php, referer: https://www.google.de/
[Sat Dec 20 00:59:34.645708 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:61380] File does not exist: /usr/local/apache/htdocs/suspended-page/Uploader.php, referer: https://www.google.com/
[Sat Dec 20 00:59:34.816095 2025] [:error] [pid 39268:tid 39326] [client 4.217.239.238:61380] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-red.php"] [unique_id "aUWEduTCMRSRXPuXZF8DggAAARA"], referer: https://www.google.com/
[Sat Dec 20 00:59:35.450896 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:35.621468 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/am.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:36.057768 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php, referer: https://www.google.com/
[Sat Dec 20 00:59:36.472077 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/gif.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:36.652969 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:36.836801 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/lab.php, referer: https://www.google.de/
[Sat Dec 20 00:59:37.455602 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer1.php, referer: https://www.google.com/
[Sat Dec 20 00:59:37.626817 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:37.801341 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/rxr.php, referer: https://www.google.com/
[Sat Dec 20 00:59:37.980894 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/srx.php, referer: https://www.google.com/
[Sat Dec 20 00:59:38.153812 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/tuco.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:38.339975 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/unix.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:40.126141 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mna.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:40.499344 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wpx.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:40.760403 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/xhell.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:40.929224 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:41.140895 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/xz.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:41.385155 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/yuuki.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:42.382652 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php, referer: https://www.google.de/
[Sat Dec 20 00:59:42.669524 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/olx.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:42.843034 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-25.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:43.070344 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configssss.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:43.782614 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configss1.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:43.953778 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configss2.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:44.135044 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configss3.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:44.384037 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php, referer: https://www.google.com/
[Sat Dec 20 00:59:44.555258 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xmlmp.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:44.730092 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:44.932817 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/haduh.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:45.109584 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/kses.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:45.315026 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/Byp.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:45.494947 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:45.677480 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:45.859162 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/g3l4y.php, referer: https://www.google.de/
[Sat Dec 20 00:59:46.047280 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:46.221096 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:46.490807 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:46.668340 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-edit.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:46.843154 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:47.139814 2025] [:error] [pid 35625:tid 35677] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/idk.php, referer: https://www.google.com/
[Sat Dec 20 00:59:47.312373 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/alfax.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:47.482205 2025] [:error] [pid 35625:tid 35666] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/clen.php, referer: https://www.google.com/
[Sat Dec 20 00:59:47.650766 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php, referer: https://www.google.com/
[Sat Dec 20 00:59:49.148790 2025] [:error] [pid 35625:tid 35655] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/caches.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:49.321980 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/creates.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:49.493764 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/fr.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:49.666162 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/index404.php, referer: https://www.google.com/
[Sat Dec 20 00:59:49.834227 2025] [:error] [pid 35625:tid 35668] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/indexof.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:50.003580 2025] [:error] [pid 35625:tid 35658] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/stats.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:50.174444 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/gec212.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:50.487657 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/azdare.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:50.648928 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/laymu.php, referer: https://www.google.de/
[Sat Dec 20 00:59:50.857971 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/macibay.php, referer: https://www.google.de/
[Sat Dec 20 00:59:51.019563 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/fdgfdgdsfd.php, referer: https://www.google.de/
[Sat Dec 20 00:59:51.193940 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:51.394286 2025] [:error] [pid 35625:tid 35659] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/legal.php, referer: https://www.google.com/
[Sat Dec 20 00:59:51.573321 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/yuuki2.php, referer: https://www.google.de/
[Sat Dec 20 00:59:51.748175 2025] [:error] [pid 35625:tid 35660] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/rootshell.php, referer: https://www.google.com/
[Sat Dec 20 00:59:51.921979 2025] [:error] [pid 35625:tid 35673] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/rexx.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:52.135905 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:52.309483 2025] [:error] [pid 35625:tid 35663] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/tes.php, referer: https://www.google.de/
[Sat Dec 20 00:59:52.514378 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:52.687334 2025] [:error] [pid 35625:tid 35665] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:52.873159 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:53.059637 2025] [:error] [pid 35625:tid 35675] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-rss.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:53.241835 2025] [:error] [pid 35625:tid 35656] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-system.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:53.430899 2025] [:error] [pid 35625:tid 35679] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-site.php, referer: https://www.google.com/
[Sat Dec 20 00:59:53.611296 2025] [:error] [pid 35625:tid 35664] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-title.php, referer: https://www.google.com/
[Sat Dec 20 00:59:53.781346 2025] [:error] [pid 35625:tid 35678] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-we.php, referer: https://www.google.com/
[Sat Dec 20 00:59:53.948126 2025] [:error] [pid 35625:tid 35669] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wpindex.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:54.113729 2025] [:error] [pid 35625:tid 35670] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/rad.php, referer: https://www.google.com/
[Sat Dec 20 00:59:54.308029 2025] [:error] [pid 35625:tid 35672] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/id.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:54.481311 2025] [:error] [pid 35625:tid 35671] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/rename.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:54.648751 2025] [:error] [pid 35625:tid 35676] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:54.883836 2025] [:error] [pid 35625:tid 35661] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/wso2023.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:55.058483 2025] [:error] [pid 35625:tid 35657] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/cool.php, referer: https://www.google.com/
[Sat Dec 20 00:59:55.358481 2025] [:error] [pid 35625:tid 35662] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/ey.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:55.529030 2025] [:error] [pid 35625:tid 35674] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:55.721367 2025] [:error] [pid 35625:tid 35667] [client 4.217.239.238:7109] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:56.072263 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php, referer: https://duckduckgo.com/
[Sat Dec 20 00:59:56.251082 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/use.php, referer: https://www.google.com/
[Sat Dec 20 00:59:56.441310 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-clon.php, referer: https://www.google.com/
[Sat Dec 20 00:59:56.619977 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/blvck.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:56.794166 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/domain.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:56.970581 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://www.google.de/
[Sat Dec 20 00:59:57.210672 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/mano.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:57.426888 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:57.610199 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/db-config.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:57.792791 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/gac.php, referer: https://www.google.com/
[Sat Dec 20 00:59:57.962948 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/shelss.php, referer: https://www.yahoo.com/
[Sat Dec 20 00:59:58.143943 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/xzd.php, referer: https://www.google.com/
[Sat Dec 20 00:59:58.401748 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/xzdd.php, referer: https://www.google.com/
[Sat Dec 20 00:59:58.573952 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mailcek.php, referer: https://www.google.com/
[Sat Dec 20 00:59:58.752177 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/revisi.php, referer: https://www.bing.com/
[Sat Dec 20 00:59:58.931081 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/degesaciihaxor.php, referer: https://www.google.co.uk/
[Sat Dec 20 00:59:59.179303 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/22.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:59.357545 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/devil.php, referer: https://www.google.de/
[Sat Dec 20 00:59:59.527982 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/hhh.php, referer: https://www.google.com/
[Sat Dec 20 00:59:59.699995 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/sambernyawa.php, referer: https://www.google.fr/
[Sat Dec 20 00:59:59.924096 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/data-user.php, referer: https://www.google.de/
[Sat Dec 20 01:00:00.190925 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/301.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:00.388478 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/zec.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:00.567272 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php, referer: https://www.google.de/
[Sat Dec 20 01:00:00.749726 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/sct.php, referer: https://www.google.de/
[Sat Dec 20 01:00:00.938397 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.google.com/
[Sat Dec 20 01:00:01.182348 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-smail.php, referer: https://www.google.com/
[Sat Dec 20 01:00:02.427132 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/shell_lock.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:02.619919 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/teamadmin.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:02.809502 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/lux.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:02.982898 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/sang3.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:03.162429 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://www.google.de/
[Sat Dec 20 01:00:03.392401 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/pirja.php, referer: https://www.google.com/
[Sat Dec 20 01:00:03.585993 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/module.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:03.763904 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:03.979496 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/su.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:04.150655 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:04.359441 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/sam.php, referer: https://www.google.de/
[Sat Dec 20 01:00:04.529675 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:04.703010 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/ikeh.php, referer: https://www.google.com/
[Sat Dec 20 01:00:04.874617 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/includes.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:05.049662 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/mega.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:05.226052 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/syd.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:05.399384 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/fierza.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:05.577086 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:05.776887 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-single.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:05.974766 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:06.179781 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:06.354113 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51837] File does not exist: /usr/local/apache/htdocs/suspended-page/class_appfun.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:08.606762 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51837] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/class_appfun.php"] [unique_id "aUWEmCxTWUmlILwAM_etqQAAAAI"], referer: https://www.bing.com/
[Sat Dec 20 01:00:09.117171 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:53585] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/class_appfun.php"] [unique_id "aUWEmSxTWUmlILwAM_etqgAAAAs"], referer: https://www.google.de/
[Sat Dec 20 01:00:09.443536 2025] [:error] [pid 39268:tid 39313] [client 4.217.239.238:6983] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class_appfun.php"] [unique_id "aUWEmeTCMRSRXPuXZF8DrQAAAQM"], referer: https://www.google.fr/
[Sat Dec 20 01:00:09.777664 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/class.curl.php, referer: https://www.google.de/
[Sat Dec 20 01:00:09.949271 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php, referer: https://www.google.de/
[Sat Dec 20 01:00:10.120213 2025] [:error] [pid 35626:tid 35689] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/class-ftp-pures.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:10.298688 2025] [:error] [pid 35626:tid 35682] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php, referer: https://www.google.de/
[Sat Dec 20 01:00:10.506684 2025] [:error] [pid 35626:tid 35706] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/cy.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:10.692073 2025] [:error] [pid 35626:tid 35697] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:10.878584 2025] [:error] [pid 35626:tid 35686] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.de/
[Sat Dec 20 01:00:11.062038 2025] [:error] [pid 35626:tid 35694] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:11.337511 2025] [:error] [pid 35626:tid 35684] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/rex.php, referer: https://www.google.com/
[Sat Dec 20 01:00:11.580147 2025] [:error] [pid 35626:tid 35699] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/cylul.php, referer: https://www.google.de/
[Sat Dec 20 01:00:11.823499 2025] [:error] [pid 35626:tid 35705] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/fx-mini.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:11.995497 2025] [:error] [pid 35626:tid 35683] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/FX.php, referer: https://www.google.de/
[Sat Dec 20 01:00:12.170480 2025] [:error] [pid 35626:tid 35702] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-commentin.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:12.417924 2025] [:error] [pid 35626:tid 35692] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/update.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:12.612302 2025] [:error] [pid 35626:tid 35700] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoshell.php, referer: https://www.google.de/
[Sat Dec 20 01:00:12.791021 2025] [:error] [pid 35626:tid 35701] [client 4.217.239.238:7133] File does not exist: /usr/local/apache/htdocs/suspended-page/defaul.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:12.961610 2025] [:error] [pid 35626:tid 35703] [client 4.217.239.238:7133] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUWEnBzVxeBEODU8mCB5iAAAANU"], referer: https://www.yahoo.com/
[Sat Dec 20 01:00:13.384341 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-functions.php, referer: https://www.google.de/
[Sat Dec 20 01:00:13.643907 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_fma.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:13.838628 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:14.048751 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaaneh.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:14.287733 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_mna.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:14.467046 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-god.php, referer: https://www.google.com/
[Sat Dec 20 01:00:14.638782 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:14.846823 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/orange.php, referer: https://www.google.com/
[Sat Dec 20 01:00:15.025002 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/en.php, referer: https://www.google.com/
[Sat Dec 20 01:00:15.198205 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:16.033913 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:16.228674 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wg.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:16.483706 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/antiheker.php, referer: https://www.google.com/
[Sat Dec 20 01:00:16.676033 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contact.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:16.897406 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/pler.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:17.067087 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:17.234429 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:17.407361 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/adm.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:17.611582 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:17.833680 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/1313.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:18.013841 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:18.188986 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/cyl.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:18.851523 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/idx.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:19.021691 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/Idx.php, referer: https://www.google.de/
[Sat Dec 20 01:00:19.225773 2025] [:error] [pid 35711:tid 35725] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/minishell.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:19.392078 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:19.562621 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2018.php, referer: https://www.google.com/
[Sat Dec 20 01:00:19.736424 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2017.php, referer: https://www.google.com/
[Sat Dec 20 01:00:19.903122 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/style-js.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:20.080365 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:20.258035 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/remove.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:20.431535 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/obfbyte.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:20.603873 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/zzz.php, referer: https://www.google.de/
[Sat Dec 20 01:00:20.804636 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/anonsec.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:20.967484 2025] [:error] [pid 35711:tid 35732] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/anon.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:21.134026 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/licenses.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:21.300501 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/bps.php, referer: https://www.google.com/
[Sat Dec 20 01:00:21.466369 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/library.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:21.631006 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-root.php, referer: https://www.google.de/
[Sat Dec 20 01:00:21.900043 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-.myluv.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:22.069111 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-users.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:22.237432 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-menu.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:22.398820 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/88.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:22.603389 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass404.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:22.780409 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:22.949794 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/priv01.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:23.159055 2025] [:error] [pid 35711:tid 35733] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/meki.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:23.381109 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:23.552030 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/help.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:23.722802 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/303.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:23.897201 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/sample-config-options.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:24.065161 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-samsples.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:24.241189 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/ye.php, referer: https://www.google.com/
[Sat Dec 20 01:00:24.448455 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/clay.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:24.693635 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/forbiden.php, referer: https://www.google.de/
[Sat Dec 20 01:00:24.862381 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:25.076376 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/curme.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:25.245047 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/xdoor.php, referer: https://www.google.de/
[Sat Dec 20 01:00:25.507560 2025] [:error] [pid 35711:tid 35713] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/joy.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:25.740448 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/ri.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:25.921463 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/cd.php, referer: https://www.google.com/
[Sat Dec 20 01:00:26.093148 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/on-settingssl.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:26.316385 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:26.490680 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-del.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:26.652267 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/makesmtp.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:26.889002 2025] [:error] [pid 35711:tid 35716] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:27.151490 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/stylec.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:27.322874 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/ticket.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:27.495636 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/401.php, referer: https://www.google.de/
[Sat Dec 20 01:00:27.667704 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/405.php, referer: https://www.google.com/
[Sat Dec 20 01:00:27.840455 2025] [:error] [pid 35711:tid 35724] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/shl.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:28.003344 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/scn.php, referer: https://www.google.com/
[Sat Dec 20 01:00:28.173343 2025] [:error] [pid 35711:tid 35730] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:28.342990 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/63ck0.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:28.518503 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/pda.php, referer: https://www.google.com/
[Sat Dec 20 01:00:28.690732 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/danci.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:28.864047 2025] [:error] [pid 35711:tid 35734] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/fse.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:29.031577 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/anonym.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:29.198029 2025] [:error] [pid 35711:tid 35728] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:29.373008 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/demos.php, referer: https://www.google.com/
[Sat Dec 20 01:00:29.550198 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/demon.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:29.733115 2025] [:error] [pid 35711:tid 35714] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/tesla.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:30.011784 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/clan.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:30.181689 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/Fdbxhriw.php, referer: https://duckduckgo.com/
[Sat Dec 20 01:00:30.420981 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/kontoru.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:30.594410 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/1111.php, referer: https://www.google.com/
[Sat Dec 20 01:00:30.769447 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/shell4.php, referer: https://www.google.com/
[Sat Dec 20 01:00:30.942546 2025] [:error] [pid 35711:tid 35736] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/lyda.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:31.117413 2025] [:error] [pid 35711:tid 35720] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/ids.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:31.294483 2025] [:error] [pid 35711:tid 35718] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/Priv.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:31.468870 2025] [:error] [pid 35711:tid 35727] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/bbb.php, referer: https://www.google.de/
[Sat Dec 20 01:00:31.692338 2025] [:error] [pid 35711:tid 35721] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/zz.php, referer: https://www.google.de/
[Sat Dec 20 01:00:31.954905 2025] [:error] [pid 35711:tid 35735] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/dr.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:32.136121 2025] [:error] [pid 35711:tid 35717] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-init.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:32.420396 2025] [:error] [pid 35711:tid 35729] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/blue.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:32.604663 2025] [:error] [pid 35711:tid 35726] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:32.788015 2025] [:error] [pid 35711:tid 35737] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/fast.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:33.026999 2025] [:error] [pid 35711:tid 35723] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/ipt.php, referer: https://www.google.de/
[Sat Dec 20 01:00:33.212512 2025] [:error] [pid 35711:tid 35731] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-raze.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:33.407749 2025] [:error] [pid 35711:tid 35719] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/foxwso.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:33.592626 2025] [:error] [pid 35711:tid 35715] [client 4.217.239.238:51824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_backup.php, referer: https://www.google.com/
[Sat Dec 20 01:00:33.953435 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pluging.php, referer: https://www.google.com/
[Sat Dec 20 01:00:34.348904 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-defaul.php, referer: https://www.google.de/
[Sat Dec 20 01:00:34.539816 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/ah.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:34.718243 2025] [:error] [pid 35624:tid 35634] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/m4r1ju4n4.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:34.901182 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/aab.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:35.082076 2025] [:error] [pid 35624:tid 35631] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/kuda.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:35.268930 2025] [:error] [pid 35624:tid 35643] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/kii.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:35.495948 2025] [:error] [pid 35624:tid 35650] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/dxshell.php, referer: https://www.google.com/
[Sat Dec 20 01:00:35.684605 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:35.931027 2025] [:error] [pid 35624:tid 35637] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/529.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:36.097686 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/nshell.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:36.273303 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/predator.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:36.447748 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/zaco.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:36.650327 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/b374k.php, referer: https://www.google.de/
[Sat Dec 20 01:00:36.820354 2025] [:error] [pid 35624:tid 35638] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/cgi.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:37.069090 2025] [:error] [pid 35624:tid 35644] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/yuki.php, referer: https://www.google.com/
[Sat Dec 20 01:00:37.293318 2025] [:error] [pid 35624:tid 35635] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/spawn.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:37.462663 2025] [:error] [pid 35624:tid 35632] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/black.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:37.630045 2025] [:error] [pid 35624:tid 35649] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/fatal.php, referer: https://www.google.com/
[Sat Dec 20 01:00:37.892296 2025] [:error] [pid 35624:tid 35633] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/con.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:38.058805 2025] [:error] [pid 35624:tid 35645] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/con7.php, referer: https://www.google.de/
[Sat Dec 20 01:00:38.245357 2025] [:error] [pid 35624:tid 35628] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/dbx.php, referer: https://www.bing.com/
[Sat Dec 20 01:00:38.413424 2025] [:error] [pid 35624:tid 35636] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:38.571155 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/docindex.php, referer: https://www.google.fr/
[Sat Dec 20 01:00:38.740292 2025] [:error] [pid 35624:tid 35641] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-phpinfo.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:38.971472 2025] [:error] [pid 35624:tid 35652] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php, referer: https://www.google.com/
[Sat Dec 20 01:00:39.139868 2025] [:error] [pid 35624:tid 35630] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Sat Dec 20 01:00:39.311340 2025] [:error] [pid 35624:tid 35646] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:00:39.640908 2025] [:error] [pid 35624:tid 35640] [client 4.217.239.238:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Sat Dec 20 01:00:39.802444 2025] [:error] [pid 35624:tid 35647] [client 4.217.239.238:64053] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUWEt0JMTU3r4hb8qAlTYwAAAFM"], referer: https://www.google.co.uk/
[Sat Dec 20 01:00:40.212307 2025] [:error] [pid 39268:tid 39327] [client 4.217.239.238:51801] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php, referer: https://www.google.com/
[Sat Dec 20 01:00:40.448768 2025] [:error] [pid 39268:tid 39328] [client 4.217.239.238:51801] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/cache/simple.php"] [unique_id "aUWEuOTCMRSRXPuXZF8D5AAAARI"], referer: https://www.google.co.uk/
[Sat Dec 20 01:00:40.777628 2025] [:error] [pid 35624:tid 35629] [client 4.217.239.238:49385] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/image/index.php"] [unique_id "aUWEuEJMTU3r4hb8qAlTZgAAAEE"], referer: https://www.google.de/
[Sat Dec 20 01:00:41.498875 2025] [:error] [pid 39268:tid 39320] [client 4.217.239.238:64044] [client 4.217.239.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style.php"] [unique_id "aUWEueTCMRSRXPuXZF8D7gAAAQo"], referer: https://www.google.com/
[Sat Dec 20 01:00:42.189373 2025] [:error] [pid 35711:tid 35722] [client 4.217.239.238:60383] File does not exist: /usr/local/apache/htdocs/suspended-page/ninja.php, referer: https://www.yahoo.com/
[Sat Dec 20 01:10:56.196885 2025] [:error] [pid 35624:tid 35630] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/xtride.php
[Sat Dec 20 01:10:56.322056 2025] [:error] [pid 35624:tid 35646] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/ws29.php
[Sat Dec 20 01:10:56.444916 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Sat Dec 20 01:10:56.568245 2025] [:error] [pid 35624:tid 35645] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/s11.php
[Sat Dec 20 01:10:56.691412 2025] [:error] [pid 35624:tid 35629] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/dkub.php
[Sat Dec 20 01:10:56.814739 2025] [:error] [pid 35624:tid 35637] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Dec 20 01:10:56.938438 2025] [:error] [pid 35624:tid 35651] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/x100.php
[Sat Dec 20 01:10:57.061851 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/aqw.php
[Sat Dec 20 01:10:57.185260 2025] [:error] [pid 35624:tid 35643] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/ca1.php
[Sat Dec 20 01:10:57.310161 2025] [:error] [pid 35624:tid 35638] [client 52.175.145.145:17120] File does not exist: /usr/local/apache/htdocs/suspended-page/file51.php
[Sat Dec 20 01:10:57.430210 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:17120] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aUWHIUJMTU3r4hb8qAlV4AAAAEM"]
[Sat Dec 20 01:10:57.706036 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:17138] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aUWHIeTCMRSRXPuXZF8IaQAAAQU"]
[Sat Dec 20 01:10:57.980726 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:17126] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aUWHIRzVxeBEODU8mCB8dwAAAMM"]
[Sat Dec 20 01:10:58.225434 2025] [:error] [pid 35711:tid 35724] [client 52.175.145.145:17091] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aUWHIixTWUmlILwAM_eyJQAAAAs"]
[Sat Dec 20 01:10:58.484588 2025] [:error] [pid 35626:tid 35684] [client 52.175.145.145:17033] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aUWHIhzVxeBEODU8mCB8eAAAAMI"]
[Sat Dec 20 01:10:58.727835 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:17026] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aUWHIhzVxeBEODU8mCB8eQAAAM0"]
[Sat Dec 20 01:10:58.988159 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:17101] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aUWHIuTCMRSRXPuXZF8IdAAAAQw"]
[Sat Dec 20 01:10:59.229203 2025] [:error] [pid 35624:tid 35640] [client 52.175.145.145:17060] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aUWHI0JMTU3r4hb8qAlV4wAAAEw"]
[Sat Dec 20 01:10:59.481148 2025] [:error] [pid 39268:tid 39326] [client 52.175.145.145:17048] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aUWHI-TCMRSRXPuXZF8IdgAAARA"]
[Sat Dec 20 01:10:59.723881 2025] [:error] [pid 39268:tid 39311] [client 52.175.145.145:17129] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aUWHI-TCMRSRXPuXZF8IdwAAAQE"]
[Sat Dec 20 01:10:59.972580 2025] [:error] [pid 35624:tid 35648] [client 52.175.145.145:17045] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aUWHI0JMTU3r4hb8qAlV5wAAAFQ"]
[Sat Dec 20 01:11:00.217419 2025] [:error] [pid 35624:tid 35630] [client 52.175.145.145:17132] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aUWHJEJMTU3r4hb8qAlV7AAAAEI"]
[Sat Dec 20 01:11:00.468648 2025] [:error] [pid 35624:tid 35645] [client 52.175.145.145:17135] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aUWHJEJMTU3r4hb8qAlV7QAAAFE"]
[Sat Dec 20 01:11:00.709843 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:17116] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aUWHJOTCMRSRXPuXZF8IfQAAAQk"]
[Sat Dec 20 01:11:00.971640 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:17034] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aUWHJCxTWUmlILwAM_eyMAAAAAE"]
[Sat Dec 20 01:11:01.214451 2025] [:error] [pid 35624:tid 35629] [client 52.175.145.145:17125] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aUWHJUJMTU3r4hb8qAlV7gAAAEE"]
[Sat Dec 20 01:11:01.465210 2025] [:error] [pid 35624:tid 35637] [client 52.175.145.145:17055] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aUWHJUJMTU3r4hb8qAlV7wAAAEk"]
[Sat Dec 20 01:11:01.731179 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:17106] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aUWHJUJMTU3r4hb8qAlV8AAAAE0"]
[Sat Dec 20 01:11:01.973590 2025] [:error] [pid 35624:tid 35643] [client 52.175.145.145:17151] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aUWHJUJMTU3r4hb8qAlV8QAAAE8"]
[Sat Dec 20 01:11:02.215286 2025] [:error] [pid 35624:tid 35638] [client 52.175.145.145:17131] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aUWHJkJMTU3r4hb8qAlV8gAAAEo"]
[Sat Dec 20 01:11:02.456326 2025] [:error] [pid 35624:tid 35628] [client 52.175.145.145:17114] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aUWHJkJMTU3r4hb8qAlV8wAAAEA"]
[Sat Dec 20 01:11:02.737189 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:17147] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aUWHJixTWUmlILwAM_eyMwAAABI"]
[Sat Dec 20 01:11:02.994323 2025] [:error] [pid 35625:tid 35663] [client 52.175.145.145:17142] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aUWHJo12VmSu4NX34PTZlgAAAIg"]
[Sat Dec 20 01:11:03.248276 2025] [:error] [pid 35625:tid 35671] [client 52.175.145.145:17139] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aUWHJ412VmSu4NX34PTZlwAAAJA"]
[Sat Dec 20 01:11:03.490199 2025] [:error] [pid 35625:tid 35670] [client 52.175.145.145:17098] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUWHJ412VmSu4NX34PTZmAAAAI8"]
[Sat Dec 20 01:11:03.753306 2025] [:error] [pid 35624:tid 35633] [client 52.175.145.145:17051] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUWHJ0JMTU3r4hb8qAlV9AAAAEU"]
[Sat Dec 20 01:11:04.032169 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:17092] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUWHKBzVxeBEODU8mCB8hAAAAM0"]
[Sat Dec 20 01:11:04.273742 2025] [:error] [pid 35711:tid 35722] [client 52.175.145.145:17109] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aUWHKCxTWUmlILwAM_eyOQAAAAk"]
[Sat Dec 20 01:11:04.531775 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:17137] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api2.php"] [unique_id "aUWHKOTCMRSRXPuXZF8IhQAAAQk"]
[Sat Dec 20 01:11:04.773146 2025] [:error] [pid 35626:tid 35704] [client 52.175.145.145:17043] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api2.php"] [unique_id "aUWHKBzVxeBEODU8mCB8hgAAANY"]
[Sat Dec 20 01:11:05.012813 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:17047] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api2.php"] [unique_id "aUWHKRzVxeBEODU8mCB8iAAAAMk"]
[Sat Dec 20 01:11:05.253630 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:17075] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api2.php"] [unique_id "aUWHKeTCMRSRXPuXZF8IhwAAAQc"]
[Sat Dec 20 01:11:05.514851 2025] [:error] [pid 35711:tid 35736] [client 52.175.145.145:17029] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aUWHKSxTWUmlILwAM_eyPgAAABc"]
[Sat Dec 20 01:11:05.756019 2025] [:error] [pid 35626:tid 35693] [client 52.175.145.145:17112] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aUWHKRzVxeBEODU8mCB8igAAAMs"]
[Sat Dec 20 01:11:05.996450 2025] [:error] [pid 35624:tid 35630] [client 52.175.145.145:17066] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aUWHKUJMTU3r4hb8qAlV9gAAAEI"]
[Sat Dec 20 01:11:06.265663 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:11209] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aUWHKhzVxeBEODU8mCB8jAAAANc"]
[Sat Dec 20 01:11:06.507498 2025] [:error] [pid 39268:tid 39311] [client 52.175.145.145:17111] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aUWHKuTCMRSRXPuXZF8IigAAAQE"]
[Sat Dec 20 01:11:06.776168 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:17141] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aUWHKuTCMRSRXPuXZF8IjQAAAQw"]
[Sat Dec 20 01:11:07.016981 2025] [:error] [pid 35625:tid 35661] [client 52.175.145.145:17122] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aUWHK412VmSu4NX34PTZnQAAAIY"]
[Sat Dec 20 01:11:07.259801 2025] [:error] [pid 35626:tid 35706] [client 52.175.145.145:17089] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aUWHKxzVxeBEODU8mCB8jQAAANg"]
[Sat Dec 20 01:11:07.522216 2025] [:error] [pid 35626:tid 35689] [client 52.175.145.145:17102] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aUWHKxzVxeBEODU8mCB8jwAAAMc"]
[Sat Dec 20 01:11:07.763727 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:11211] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aUWHK-TCMRSRXPuXZF8IjwAAAQ8"]
[Sat Dec 20 01:11:08.022566 2025] [:error] [pid 39268:tid 39310] [client 52.175.145.145:17149] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aUWHLOTCMRSRXPuXZF8IkAAAAQA"]
[Sat Dec 20 01:11:08.271165 2025] [:error] [pid 35624:tid 35645] [client 52.175.145.145:17117] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aUWHLEJMTU3r4hb8qAlV-AAAAFE"]
[Sat Dec 20 01:11:08.533635 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:17145] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aUWHLOTCMRSRXPuXZF8IkQAAARI"]
[Sat Dec 20 01:11:08.774653 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:17090] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aUWHLOTCMRSRXPuXZF8IkgAAAQM"]
[Sat Dec 20 01:11:09.020525 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:17133] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aUWHLeTCMRSRXPuXZF8IkwAAAQc"]
[Sat Dec 20 01:11:09.262676 2025] [:error] [pid 35711:tid 35713] [client 52.175.145.145:17103] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aUWHLSxTWUmlILwAM_eyQQAAAAA"]
[Sat Dec 20 01:11:09.503532 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:17115] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aUWHLRzVxeBEODU8mCB8kgAAAM0"]
[Sat Dec 20 01:11:09.745629 2025] [:error] [pid 35711:tid 35724] [client 52.175.145.145:17099] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aUWHLSxTWUmlILwAM_eyQgAAAAs"]
[Sat Dec 20 01:11:09.992480 2025] [:error] [pid 35625:tid 35659] [client 52.175.145.145:17140] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aUWHLY12VmSu4NX34PTZoQAAAIQ"]
[Sat Dec 20 01:11:10.233090 2025] [:error] [pid 35625:tid 35667] [client 52.175.145.145:11221] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aUWHLo12VmSu4NX34PTZogAAAIw"]
[Sat Dec 20 01:11:10.485464 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:17038] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsheet1.php"] [unique_id "aUWHLuTCMRSRXPuXZF8IlwAAAQ4"]
[Sat Dec 20 01:11:10.737469 2025] [:error] [pid 35626:tid 35686] [client 52.175.145.145:17031] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsheet1.php"] [unique_id "aUWHLhzVxeBEODU8mCB8lAAAAMQ"]
[Sat Dec 20 01:11:10.989993 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:17128] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsheet1.php"] [unique_id "aUWHLhzVxeBEODU8mCB8lgAAAMk"]
[Sat Dec 20 01:11:11.239180 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:17104] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsheet1.php"] [unique_id "aUWHL0JMTU3r4hb8qAlV-wAAAFA"]
[Sat Dec 20 01:11:11.479967 2025] [:error] [pid 35624:tid 35647] [client 52.175.145.145:17054] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aUWHL0JMTU3r4hb8qAlV_QAAAFM"]
[Sat Dec 20 01:11:11.732854 2025] [:error] [pid 39268:tid 39316] [client 52.175.145.145:17136] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aUWHL-TCMRSRXPuXZF8ImQAAAQY"]
[Sat Dec 20 01:11:11.975504 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:17088] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aUWHL-TCMRSRXPuXZF8ImwAAAQw"]
[Sat Dec 20 01:11:12.215906 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:17036] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aUWHMOTCMRSRXPuXZF8InAAAAQU"]
[Sat Dec 20 01:11:12.463784 2025] [:error] [pid 39268:tid 39320] [client 52.175.145.145:17049] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aUWHMOTCMRSRXPuXZF8InQAAAQo"]
[Sat Dec 20 01:11:12.710396 2025] [:error] [pid 35624:tid 35636] [client 52.175.145.145:17127] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aUWHMEJMTU3r4hb8qAlV_wAAAEg"]
[Sat Dec 20 01:11:12.949460 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:17035] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aUWHMBzVxeBEODU8mCB8mQAAANc"]
[Sat Dec 20 01:11:13.189805 2025] [:error] [pid 35626:tid 35706] [client 52.175.145.145:17041] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aUWHMRzVxeBEODU8mCB8mwAAANg"]
[Sat Dec 20 01:11:13.429681 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:11139] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUWHMeTCMRSRXPuXZF8InwAAARQ"]
[Sat Dec 20 01:11:13.671317 2025] [:error] [pid 35626:tid 35699] [client 52.175.145.145:17083] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUWHMRzVxeBEODU8mCB8nAAAANE"]
[Sat Dec 20 01:11:13.923368 2025] [:error] [pid 35711:tid 35736] [client 52.175.145.145:17039] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUWHMSxTWUmlILwAM_eyQwAAABc"]
[Sat Dec 20 01:11:14.326619 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:11214] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUWHMuTCMRSRXPuXZF8IogAAAQk"]
[Sat Dec 20 01:11:14.587180 2025] [:error] [pid 35625:tid 35660] [client 52.175.145.145:17095] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aUWHMo12VmSu4NX34PTZqAAAAIU"]
[Sat Dec 20 01:11:14.852029 2025] [:error] [pid 39268:tid 39326] [client 52.175.145.145:17040] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aUWHMuTCMRSRXPuXZF8IpQAAARA"]
[Sat Dec 20 01:11:15.153724 2025] [:error] [pid 35625:tid 35662] [client 52.175.145.145:17032] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aUWHM412VmSu4NX34PTZqQAAAIc"]
[Sat Dec 20 01:11:15.400039 2025] [:error] [pid 35711:tid 35717] [client 52.175.145.145:17119] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aUWHMyxTWUmlILwAM_eyRAAAAAQ"]
[Sat Dec 20 01:11:15.647019 2025] [:error] [pid 35711:tid 35733] [client 52.175.145.145:17085] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aUWHMyxTWUmlILwAM_eyRwAAABQ"]
[Sat Dec 20 01:11:15.899030 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:17108] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aUWHMyxTWUmlILwAM_eySgAAABI"]
[Sat Dec 20 01:11:16.139700 2025] [:error] [pid 39268:tid 39331] [client 52.175.145.145:17110] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aUWHNOTCMRSRXPuXZF8IpwAAARU"]
[Sat Dec 20 01:11:16.383795 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:17025] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aUWHNBzVxeBEODU8mCB8nwAAAM0"]
[Sat Dec 20 01:11:16.629783 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:17098] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aUWHNBzVxeBEODU8mCB8oAAAAMk"]
[Sat Dec 20 01:11:16.873759 2025] [:error] [pid 35711:tid 35716] [client 52.175.145.145:17061] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aUWHNCxTWUmlILwAM_eySwAAAAM"]
[Sat Dec 20 01:11:17.114921 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:11248] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aUWHNeTCMRSRXPuXZF8IqQAAAQw"]
[Sat Dec 20 01:11:17.357714 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:17059] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aUWHNeTCMRSRXPuXZF8IqgAAAQU"]
[Sat Dec 20 01:11:17.609080 2025] [:error] [pid 35626:tid 35687] [client 52.175.145.145:11255] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUWHNRzVxeBEODU8mCB8owAAAMU"]
[Sat Dec 20 01:11:17.857486 2025] [:error] [pid 35711:tid 35726] [client 52.175.145.145:17073] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUWHNSxTWUmlILwAM_eyTAAAAA0"]
[Sat Dec 20 01:11:18.105774 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:17071] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUWHNuTCMRSRXPuXZF8IrAAAAQ8"]
[Sat Dec 20 01:11:18.347698 2025] [:error] [pid 35626:tid 35693] [client 52.175.145.145:11206] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUWHNhzVxeBEODU8mCB8pAAAAMs"]
[Sat Dec 20 01:11:18.599472 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:17074] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUWHNuTCMRSRXPuXZF8IrwAAAQM"]
[Sat Dec 20 01:11:18.841740 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:17100] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUWHNuTCMRSRXPuXZF8IsAAAAQk"]
[Sat Dec 20 01:11:19.083077 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:11085] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUWHNxzVxeBEODU8mCB8pwAAANc"]
[Sat Dec 20 01:11:19.323686 2025] [:error] [pid 35626:tid 35688] [client 52.175.145.145:11263] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aUWHNxzVxeBEODU8mCB8qAAAAMY"]
[Sat Dec 20 01:11:19.566521 2025] [:error] [pid 35626:tid 35700] [client 52.175.145.145:17070] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUWHNxzVxeBEODU8mCB8qQAAANI"]
[Sat Dec 20 01:11:19.807108 2025] [:error] [pid 35626:tid 35689] [client 52.175.145.145:17069] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUWHNxzVxeBEODU8mCB8qwAAAMc"]
[Sat Dec 20 01:11:20.046621 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:17082] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUWHOOTCMRSRXPuXZF8IsQAAAQ4"]
[Sat Dec 20 01:11:20.290464 2025] [:error] [pid 35624:tid 35642] [client 52.175.145.145:11242] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUWHOEJMTU3r4hb8qAlWAwAAAE4"]
[Sat Dec 20 01:11:20.530852 2025] [:error] [pid 39268:tid 39332] [client 52.175.145.145:17124] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUWHOOTCMRSRXPuXZF8ItAAAARY"]
[Sat Dec 20 01:11:20.770528 2025] [:error] [pid 35625:tid 35656] [client 52.175.145.145:17024] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUWHOI12VmSu4NX34PTZqwAAAIE"]
[Sat Dec 20 01:11:21.035378 2025] [:error] [pid 35626:tid 35682] [client 52.175.145.145:17143] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUWHORzVxeBEODU8mCB8rQAAAMA"]
[Sat Dec 20 01:11:21.296852 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:11208] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aUWHORzVxeBEODU8mCB8rwAAAM0"]
[Sat Dec 20 01:11:21.537821 2025] [:error] [pid 35711:tid 35737] [client 52.175.145.145:17078] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aUWHOSxTWUmlILwAM_eyTwAAABg"]
[Sat Dec 20 01:11:21.780326 2025] [:error] [pid 35626:tid 35690] [client 52.175.145.145:17080] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aUWHORzVxeBEODU8mCB8sQAAAMg"]
[Sat Dec 20 01:11:22.030862 2025] [:error] [pid 35711:tid 35727] [client 52.175.145.145:11136] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aUWHOixTWUmlILwAM_eyUAAAAA4"]
[Sat Dec 20 01:11:22.270849 2025] [:error] [pid 35624:tid 35646] [client 52.175.145.145:17150] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aUWHOkJMTU3r4hb8qAlWBAAAAFI"]
[Sat Dec 20 01:11:22.511091 2025] [:error] [pid 39268:tid 39311] [client 52.175.145.145:17028] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHOuTCMRSRXPuXZF8ItQAAAQE"]
[Sat Dec 20 01:11:22.759266 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:11178] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHOuTCMRSRXPuXZF8ItwAAAQw"]
[Sat Dec 20 01:11:22.999337 2025] [:error] [pid 35711:tid 35729] [client 52.175.145.145:17146] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHOixTWUmlILwAM_eyUgAAABA"]
[Sat Dec 20 01:11:23.259808 2025] [:error] [pid 35711:tid 35717] [client 52.175.145.145:17093] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHOyxTWUmlILwAM_eyUwAAAAQ"]
[Sat Dec 20 01:11:23.500223 2025] [:error] [pid 35624:tid 35629] [client 52.175.145.145:11201] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aUWHO0JMTU3r4hb8qAlWBQAAAEE"]
[Sat Dec 20 01:11:23.752543 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:17094] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aUWHO-TCMRSRXPuXZF8IuAAAARM"]
[Sat Dec 20 01:11:24.007573 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:17107] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aUWHPCxTWUmlILwAM_eyVgAAAAc"]
[Sat Dec 20 01:11:24.252025 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:11220] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aUWHPCxTWUmlILwAM_eyVwAAABI"]
[Sat Dec 20 01:11:24.493137 2025] [:error] [pid 39268:tid 39334] [client 52.175.145.145:17046] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aUWHPOTCMRSRXPuXZF8IuQAAARg"]
[Sat Dec 20 01:11:24.733590 2025] [:error] [pid 35625:tid 35657] [client 52.175.145.145:17113] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aUWHPI12VmSu4NX34PTZrQAAAII"]
[Sat Dec 20 01:11:24.975933 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:17044] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aUWHPOTCMRSRXPuXZF8IvQAAARQ"]
[Sat Dec 20 01:11:25.216301 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:11143] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aUWHPUJMTU3r4hb8qAlWBgAAAEY"]
[Sat Dec 20 01:11:25.464837 2025] [:error] [pid 35624:tid 35632] [client 52.175.145.145:17052] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aUWHPUJMTU3r4hb8qAlWBwAAAEQ"]
[Sat Dec 20 01:11:25.706399 2025] [:error] [pid 35711:tid 35721] [client 52.175.145.145:11147] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aUWHPSxTWUmlILwAM_eyWgAAAAg"]
[Sat Dec 20 01:11:25.969807 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:11228] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aUWHPeTCMRSRXPuXZF8IvwAAAQM"]
[Sat Dec 20 01:11:26.209822 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:17063] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aUWHPuTCMRSRXPuXZF8IwAAAAQk"]
[Sat Dec 20 01:11:26.461608 2025] [:error] [pid 35624:tid 35651] [client 52.175.145.145:11229] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aUWHPkJMTU3r4hb8qAlWCAAAAFc"]
[Sat Dec 20 01:11:26.702615 2025] [:error] [pid 35711:tid 35730] [client 52.175.145.145:11250] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aUWHPixTWUmlILwAM_eyXAAAABE"]
[Sat Dec 20 01:11:26.943385 2025] [:error] [pid 35711:tid 35713] [client 52.175.145.145:11213] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aUWHPixTWUmlILwAM_eyXQAAAAA"]
[Sat Dec 20 01:11:27.190530 2025] [:error] [pid 35711:tid 35724] [client 52.175.145.145:11091] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aUWHPyxTWUmlILwAM_eyXgAAAAs"]
[Sat Dec 20 01:11:27.432492 2025] [:error] [pid 35711:tid 35723] [client 52.175.145.145:11236] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aUWHPyxTWUmlILwAM_eyXwAAAAo"]
[Sat Dec 20 01:11:27.673657 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:17079] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aUWHP0JMTU3r4hb8qAlWCwAAAEM"]
[Sat Dec 20 01:11:27.916111 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:11230] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aUWHP0JMTU3r4hb8qAlWDAAAAFA"]
[Sat Dec 20 01:11:28.158439 2025] [:error] [pid 35624:tid 35649] [client 52.175.145.145:11173] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aUWHQEJMTU3r4hb8qAlWDQAAAFU"]
[Sat Dec 20 01:11:28.419347 2025] [:error] [pid 35624:tid 35628] [client 52.175.145.145:11150] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUWHQEJMTU3r4hb8qAlWDwAAAEA"]
[Sat Dec 20 01:11:28.679941 2025] [:error] [pid 35711:tid 35732] [client 52.175.145.145:17105] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUWHQCxTWUmlILwAM_eyYgAAABM"]
[Sat Dec 20 01:11:28.923463 2025] [:error] [pid 35711:tid 35733] [client 52.175.145.145:11235] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUWHQCxTWUmlILwAM_eyYwAAABQ"]
[Sat Dec 20 01:11:29.171374 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:11260] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUWHQSxTWUmlILwAM_eyZQAAABY"]
[Sat Dec 20 01:11:29.417736 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:11152] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aUWHQeTCMRSRXPuXZF8IxAAAAQw"]
[Sat Dec 20 01:11:29.657524 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:11256] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aUWHQeTCMRSRXPuXZF8IxgAAAQU"]
[Sat Dec 20 01:11:29.896774 2025] [:error] [pid 35624:tid 35650] [client 52.175.145.145:11241] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aUWHQUJMTU3r4hb8qAlWEgAAAFY"]
[Sat Dec 20 01:11:30.146485 2025] [:error] [pid 35626:tid 35697] [client 52.175.145.145:17076] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aUWHQhzVxeBEODU8mCB8tgAAAM8"]
[Sat Dec 20 01:11:30.387239 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:17065] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUWHQixTWUmlILwAM_eyaAAAABI"]
[Sat Dec 20 01:11:30.643002 2025] [:error] [pid 35625:tid 35660] [client 52.175.145.145:11205] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUWHQo12VmSu4NX34PTZsgAAAIU"]
[Sat Dec 20 01:11:30.884979 2025] [:error] [pid 35711:tid 35734] [client 52.175.145.145:17092] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUWHQixTWUmlILwAM_eyaQAAABU"]
[Sat Dec 20 01:11:31.145668 2025] [:error] [pid 35711:tid 35716] [client 52.175.145.145:17050] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUWHQyxTWUmlILwAM_eyagAAAAM"]
[Sat Dec 20 01:11:31.385693 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:11249] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aUWHQ-TCMRSRXPuXZF8IyQAAAQk"]
[Sat Dec 20 01:11:31.625915 2025] [:error] [pid 35625:tid 35675] [client 52.175.145.145:11144] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aUWHQ412VmSu4NX34PTZtQAAAJQ"]
[Sat Dec 20 01:11:31.865902 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:11215] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aUWHQ0JMTU3r4hb8qAlWGAAAAEY"]
[Sat Dec 20 01:11:32.106981 2025] [:error] [pid 35624:tid 35637] [client 52.175.145.145:11153] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aUWHREJMTU3r4hb8qAlWGQAAAEk"]
[Sat Dec 20 01:11:32.348302 2025] [:error] [pid 35711:tid 35726] [client 52.175.145.145:11149] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUWHRCxTWUmlILwAM_eybAAAAA0"]
[Sat Dec 20 01:11:32.589198 2025] [:error] [pid 35624:tid 35643] [client 52.175.145.145:17087] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUWHREJMTU3r4hb8qAlWGgAAAE8"]
[Sat Dec 20 01:11:32.832085 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:11227] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUWHROTCMRSRXPuXZF8IywAAAQ4"]
[Sat Dec 20 01:11:33.072635 2025] [:error] [pid 35625:tid 35672] [client 52.175.145.145:17027] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUWHRY12VmSu4NX34PTZuAAAAJE"]
[Sat Dec 20 01:11:33.314863 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:17072] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aUWHRSxTWUmlILwAM_eybQAAAAE"]
[Sat Dec 20 01:11:33.583189 2025] [:error] [pid 35711:tid 35724] [client 52.175.145.145:11240] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aUWHRSxTWUmlILwAM_eybgAAAAs"]
[Sat Dec 20 01:11:33.824737 2025] [:error] [pid 35711:tid 35737] [client 52.175.145.145:11175] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aUWHRSxTWUmlILwAM_eycAAAABg"]
[Sat Dec 20 01:11:34.076985 2025] [:error] [pid 35626:tid 35702] [client 52.175.145.145:11212] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aUWHRhzVxeBEODU8mCB8ugAAANQ"]
[Sat Dec 20 01:11:34.317957 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:17064] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aUWHRixTWUmlILwAM_eycgAAABY"]
[Sat Dec 20 01:11:34.561725 2025] [:error] [pid 35625:tid 35657] [client 52.175.145.145:11218] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aUWHRo12VmSu4NX34PTZugAAAII"]
[Sat Dec 20 01:11:34.802622 2025] [:error] [pid 35625:tid 35655] [client 52.175.145.145:17067] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aUWHRo12VmSu4NX34PTZvAAAAIA"]
[Sat Dec 20 01:11:35.046706 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:11073] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aUWHRxzVxeBEODU8mCB8vAAAAMk"]
[Sat Dec 20 01:11:35.290472 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:11200] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aUWHRyxTWUmlILwAM_eydAAAAAc"]
[Sat Dec 20 01:11:35.532165 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:11217] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aUWHRyxTWUmlILwAM_eydwAAABI"]
[Sat Dec 20 01:11:35.793109 2025] [:error] [pid 35711:tid 35734] [client 52.175.145.145:17037] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aUWHRyxTWUmlILwAM_eyeAAAABU"]
[Sat Dec 20 01:11:36.056456 2025] [:error] [pid 35624:tid 35635] [client 52.175.145.145:11239] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aUWHSEJMTU3r4hb8qAlWIAAAAEc"]
[Sat Dec 20 01:11:36.318914 2025] [:error] [pid 35626:tid 35694] [client 52.175.145.145:17053] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aUWHSBzVxeBEODU8mCB8vQAAAMw"]
[Sat Dec 20 01:11:36.559749 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:11163] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aUWHSOTCMRSRXPuXZF8I0AAAAQ8"]
[Sat Dec 20 01:11:36.836105 2025] [:error] [pid 35624:tid 35648] [client 52.175.145.145:11237] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aUWHSEJMTU3r4hb8qAlWIQAAAFQ"]
[Sat Dec 20 01:11:37.078253 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:11078] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aUWHSeTCMRSRXPuXZF8I0gAAARM"]
[Sat Dec 20 01:11:37.320222 2025] [:error] [pid 35711:tid 35721] [client 52.175.145.145:11259] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHSSxTWUmlILwAM_eyewAAAAg"]
[Sat Dec 20 01:11:37.595104 2025] [:error] [pid 35711:tid 35730] [client 52.175.145.145:11075] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHSSxTWUmlILwAM_eyfQAAABE"]
[Sat Dec 20 01:11:37.871600 2025] [:error] [pid 35711:tid 35737] [client 52.175.145.145:11157] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHSSxTWUmlILwAM_eyfwAAABg"]
[Sat Dec 20 01:11:38.146331 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:11158] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHSixTWUmlILwAM_eyggAAABY"]
[Sat Dec 20 01:11:38.439313 2025] [:error] [pid 39268:tid 39333] [client 52.175.145.145:11222] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aUWHSuTCMRSRXPuXZF8I1AAAARc"]
[Sat Dec 20 01:11:38.687471 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:11180] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aUWHSuTCMRSRXPuXZF8I1gAAAQM"]
[Sat Dec 20 01:11:38.952014 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:11159] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aUWHSuTCMRSRXPuXZF8I1wAAAQk"]
[Sat Dec 20 01:11:39.209680 2025] [:error] [pid 39268:tid 39323] [client 52.175.145.145:11162] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aUWHS-TCMRSRXPuXZF8I2AAAAQ0"]
[Sat Dec 20 01:11:39.450845 2025] [:error] [pid 35626:tid 35706] [client 52.175.145.145:11262] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUWHSxzVxeBEODU8mCB8wgAAANg"]
[Sat Dec 20 01:11:39.704447 2025] [:error] [pid 35626:tid 35700] [client 52.175.145.145:11234] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUWHSxzVxeBEODU8mCB8wwAAANI"]
[Sat Dec 20 01:11:39.950127 2025] [:error] [pid 35626:tid 35689] [client 52.175.145.145:11207] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUWHSxzVxeBEODU8mCB8xAAAAMc"]
[Sat Dec 20 01:11:40.203027 2025] [:error] [pid 35626:tid 35697] [client 52.175.145.145:11251] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUWHTBzVxeBEODU8mCB8xQAAAM8"]
[Sat Dec 20 01:11:40.455442 2025] [:error] [pid 39268:tid 39318] [client 52.175.145.145:11232] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUWHTOTCMRSRXPuXZF8I2wAAAQg"]
[Sat Dec 20 01:11:40.696379 2025] [:error] [pid 35711:tid 35717] [client 52.175.145.145:11165] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUWHTCxTWUmlILwAM_eyhAAAAAQ"]
[Sat Dec 20 01:11:40.967300 2025] [:error] [pid 35625:tid 35676] [client 52.175.145.145:11247] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUWHTI12VmSu4NX34PTZwAAAAJU"]
[Sat Dec 20 01:11:41.208923 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:11074] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUWHTeTCMRSRXPuXZF8I3QAAAQ8"]
[Sat Dec 20 01:11:41.451330 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:17030] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUWHTeTCMRSRXPuXZF8I3gAAAQw"]
[Sat Dec 20 01:11:41.691656 2025] [:error] [pid 35625:tid 35668] [client 52.175.145.145:11243] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUWHTY12VmSu4NX34PTZwQAAAI0"]
[Sat Dec 20 01:11:41.975239 2025] [:error] [pid 35625:tid 35678] [client 52.175.145.145:11141] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUWHTY12VmSu4NX34PTZwgAAAJc"]
[Sat Dec 20 01:11:42.219787 2025] [:error] [pid 35711:tid 35734] [client 52.175.145.145:17096] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUWHTixTWUmlILwAM_eyhgAAABU"]
[Sat Dec 20 01:11:42.465004 2025] [:error] [pid 35711:tid 35736] [client 52.175.145.145:11161] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aUWHTixTWUmlILwAM_eyhwAAABc"]
[Sat Dec 20 01:11:42.707386 2025] [:error] [pid 35711:tid 35730] [client 52.175.145.145:11179] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aUWHTixTWUmlILwAM_eyiQAAABE"]
[Sat Dec 20 01:11:42.949082 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:17097] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aUWHTkJMTU3r4hb8qAlWJAAAAEM"]
[Sat Dec 20 01:11:43.194883 2025] [:error] [pid 35626:tid 35702] [client 52.175.145.145:17056] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aUWHTxzVxeBEODU8mCB8yAAAANQ"]
[Sat Dec 20 01:11:43.437746 2025] [:error] [pid 35711:tid 35725] [client 52.175.145.145:11174] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aUWHTyxTWUmlILwAM_eyjAAAAAw"]
[Sat Dec 20 01:11:43.677981 2025] [:error] [pid 35711:tid 35737] [client 52.175.145.145:17118] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aUWHTyxTWUmlILwAM_eyjQAAABg"]
[Sat Dec 20 01:11:43.918620 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:17086] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aUWHT-TCMRSRXPuXZF8I4AAAARM"]
[Sat Dec 20 01:11:44.164964 2025] [:error] [pid 35624:tid 35649] [client 52.175.145.145:11176] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aUWHUEJMTU3r4hb8qAlWJQAAAFU"]
[Sat Dec 20 01:11:44.409411 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:17144] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHUBzVxeBEODU8mCB8ygAAAMM"]
[Sat Dec 20 01:11:44.665986 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:17123] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHUBzVxeBEODU8mCB8ywAAAMk"]
[Sat Dec 20 01:11:44.925473 2025] [:error] [pid 35626:tid 35687] [client 52.175.145.145:11194] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHUBzVxeBEODU8mCB8zAAAAMU"]
[Sat Dec 20 01:11:45.170177 2025] [:error] [pid 35711:tid 35729] [client 52.175.145.145:11253] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHUSxTWUmlILwAM_eyjwAAABA"]
[Sat Dec 20 01:11:45.422726 2025] [:error] [pid 35625:tid 35661] [client 52.175.145.145:11202] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHUY12VmSu4NX34PTZxAAAAIY"]
[Sat Dec 20 01:11:45.663691 2025] [:error] [pid 35626:tid 35684] [client 52.175.145.145:11256] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHURzVxeBEODU8mCB8zwAAAMI"]
[Sat Dec 20 01:11:45.905126 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:11254] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHUeTCMRSRXPuXZF8I4gAAARQ"]
[Sat Dec 20 01:11:46.146957 2025] [:error] [pid 35625:tid 35667] [client 52.175.145.145:17042] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHUo12VmSu4NX34PTZxwAAAIw"]
[Sat Dec 20 01:11:46.405156 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:11170] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUWHUuTCMRSRXPuXZF8I4wAAAQM"]
[Sat Dec 20 01:11:46.646625 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:17084] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHUkJMTU3r4hb8qAlWKAAAAE0"]
[Sat Dec 20 01:11:46.887691 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:11106] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHUuTCMRSRXPuXZF8I5AAAAQ4"]
[Sat Dec 20 01:11:47.128189 2025] [:error] [pid 35711:tid 35715] [client 52.175.145.145:11154] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUWHUyxTWUmlILwAM_eykQAAAAI"]
[Sat Dec 20 01:11:47.372691 2025] [:error] [pid 39268:tid 39327] [client 52.175.145.145:17068] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUWHU-TCMRSRXPuXZF8I5QAAARE"]
[Sat Dec 20 01:11:47.631018 2025] [:error] [pid 39268:tid 39312] [client 52.175.145.145:17062] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUWHU-TCMRSRXPuXZF8I6gAAAQI"]
[Sat Dec 20 01:11:47.887673 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:11149] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUWHU-TCMRSRXPuXZF8I7AAAAQw"]
[Sat Dec 20 01:11:48.129836 2025] [:error] [pid 39268:tid 39310] [client 52.175.145.145:11261] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUWHVOTCMRSRXPuXZF8I7QAAAQA"]
[Sat Dec 20 01:11:48.372043 2025] [:error] [pid 35626:tid 35693] [client 52.175.145.145:11182] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHVBzVxeBEODU8mCB80AAAAMs"]
[Sat Dec 20 01:11:48.619691 2025] [:error] [pid 35624:tid 35640] [client 52.175.145.145:11204] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHVEJMTU3r4hb8qAlWKwAAAEw"]
[Sat Dec 20 01:11:48.860611 2025] [:error] [pid 39268:tid 39334] [client 52.175.145.145:11140] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHVOTCMRSRXPuXZF8I7wAAARg"]
[Sat Dec 20 01:11:49.106785 2025] [:error] [pid 35625:tid 35669] [client 52.175.145.145:11081] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHVY12VmSu4NX34PTZzAAAAI4"]
[Sat Dec 20 01:11:49.352737 2025] [:error] [pid 35624:tid 35639] [client 52.175.145.145:11117] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUWHVUJMTU3r4hb8qAlWLgAAAEs"]
[Sat Dec 20 01:11:49.605189 2025] [:error] [pid 35624:tid 35629] [client 52.175.145.145:11224] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUWHVUJMTU3r4hb8qAlWMAAAAEE"]
[Sat Dec 20 01:11:49.855774 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:11148] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUWHVUJMTU3r4hb8qAlWMgAAAEY"]
[Sat Dec 20 01:11:50.109934 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:11218] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUWHVuTCMRSRXPuXZF8I8gAAAQ4"]
[Sat Dec 20 01:11:50.350567 2025] [:error] [pid 35711:tid 35728] [client 52.175.145.145:17067] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUWHVixTWUmlILwAM_eykwAAAA8"]
[Sat Dec 20 01:11:50.590727 2025] [:error] [pid 35624:tid 35637] [client 52.175.145.145:11183] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUWHVkJMTU3r4hb8qAlWNAAAAEk"]
[Sat Dec 20 01:11:50.831587 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:11098] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUWHVkJMTU3r4hb8qAlWNQAAAEM"]
[Sat Dec 20 01:11:51.072688 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:17077] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aUWHVyxTWUmlILwAM_eylAAAABI"]
[Sat Dec 20 01:11:51.313602 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:11077] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHV-TCMRSRXPuXZF8I9AAAAQc"]
[Sat Dec 20 01:11:51.559563 2025] [:error] [pid 35625:tid 35660] [client 52.175.145.145:11072] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHV412VmSu4NX34PTZzQAAAIU"]
[Sat Dec 20 01:11:51.817835 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:11114] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHV0JMTU3r4hb8qAlWNwAAAFA"]
[Sat Dec 20 01:11:52.072616 2025] [:error] [pid 35624:tid 35647] [client 52.175.145.145:11119] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUWHWEJMTU3r4hb8qAlWOAAAAFM"]
[Sat Dec 20 01:11:52.319653 2025] [:error] [pid 35625:tid 35668] [client 52.175.145.145:11121] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUWHWI12VmSu4NX34PTZzwAAAI0"]
[Sat Dec 20 01:11:52.594416 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:11252] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUWHWOTCMRSRXPuXZF8I9wAAAQU"]
[Sat Dec 20 01:11:52.835987 2025] [:error] [pid 35711:tid 35727] [client 52.175.145.145:11245] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUWHWCxTWUmlILwAM_eylQAAAA4"]
[Sat Dec 20 01:11:53.078649 2025] [:error] [pid 35711:tid 35719] [client 52.175.145.145:11238] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUWHWSxTWUmlILwAM_eylgAAAAY"]
[Sat Dec 20 01:11:53.319333 2025] [:error] [pid 39268:tid 39334] [client 52.175.145.145:11145] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aUWHWeTCMRSRXPuXZF8I-AAAARg"]
[Sat Dec 20 01:11:53.564103 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:11111] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aUWHWeTCMRSRXPuXZF8I-gAAAQk"]
[Sat Dec 20 01:11:53.804942 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:11167] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aUWHWeTCMRSRXPuXZF8I-wAAAQM"]
[Sat Dec 20 01:11:54.051230 2025] [:error] [pid 35624:tid 35633] [client 52.175.145.145:11198] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aUWHWkJMTU3r4hb8qAlWOwAAAEU"]
[Sat Dec 20 01:11:54.310389 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:17057] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHWuTCMRSRXPuXZF8I_wAAARI"]
[Sat Dec 20 01:11:54.550072 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:11128] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHWuTCMRSRXPuXZF8JAAAAAQc"]
[Sat Dec 20 01:11:54.790681 2025] [:error] [pid 39268:tid 39311] [client 52.175.145.145:11233] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHWuTCMRSRXPuXZF8JAwAAAQE"]
[Sat Dec 20 01:11:55.040871 2025] [:error] [pid 35624:tid 35640] [client 52.175.145.145:17148] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aUWHW0JMTU3r4hb8qAlWPAAAAEw"]
[Sat Dec 20 01:11:55.282252 2025] [:error] [pid 35624:tid 35650] [client 52.175.145.145:11225] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUWHW0JMTU3r4hb8qAlWPQAAAFY"]
[Sat Dec 20 01:11:55.523004 2025] [:error] [pid 35626:tid 35700] [client 52.175.145.145:11080] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUWHWxzVxeBEODU8mCB82gAAANI"]
[Sat Dec 20 01:11:55.774582 2025] [:error] [pid 35626:tid 35688] [client 52.175.145.145:11010] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUWHWxzVxeBEODU8mCB83AAAAMY"]
[Sat Dec 20 01:11:56.013888 2025] [:error] [pid 35711:tid 35726] [client 52.175.145.145:11168] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUWHXCxTWUmlILwAM_eylwAAAA0"]
[Sat Dec 20 01:11:56.291871 2025] [:error] [pid 35624:tid 35646] [client 52.175.145.145:17088] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUWHXEJMTU3r4hb8qAlWQAAAAFI"]
[Sat Dec 20 01:11:56.553312 2025] [:error] [pid 35711:tid 35713] [client 52.175.145.145:11164] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUWHXCxTWUmlILwAM_eymQAAAAA"]
[Sat Dec 20 01:11:56.821659 2025] [:error] [pid 35711:tid 35724] [client 52.175.145.145:11138] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aUWHXCxTWUmlILwAM_eymgAAAAs"]
[Sat Dec 20 01:11:57.065911 2025] [:error] [pid 35625:tid 35672] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 01:11:57.191792 2025] [:error] [pid 35625:tid 35659] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Dec 20 01:11:57.316476 2025] [:error] [pid 35625:tid 35667] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 20 01:11:57.442418 2025] [:error] [pid 35625:tid 35656] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 20 01:11:57.567637 2025] [:error] [pid 35625:tid 35673] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sat Dec 20 01:11:58.192029 2025] [:error] [pid 35625:tid 35669] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 20 01:11:58.316130 2025] [:error] [pid 35625:tid 35677] [client 52.175.145.145:11223] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Dec 20 01:11:58.437844 2025] [:error] [pid 35625:tid 35668] [client 52.175.145.145:11223] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHXo12VmSu4NX34PTZ3wAAAI0"]
[Sat Dec 20 01:11:58.686040 2025] [:error] [pid 35625:tid 35676] [client 52.175.145.145:11097] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHXo12VmSu4NX34PTZ4AAAAJU"]
[Sat Dec 20 01:11:58.940008 2025] [:error] [pid 35626:tid 35683] [client 52.175.145.145:11155] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHXhzVxeBEODU8mCB83wAAAME"]
[Sat Dec 20 01:11:59.195736 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:11258] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUWHX0JMTU3r4hb8qAlWQwAAAEM"]
[Sat Dec 20 01:11:59.437621 2025] [:error] [pid 35624:tid 35647] [client 52.175.145.145:11084] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUWHX0JMTU3r4hb8qAlWRAAAAFM"]
[Sat Dec 20 01:11:59.679982 2025] [:error] [pid 35624:tid 35630] [client 52.175.145.145:11095] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUWHX0JMTU3r4hb8qAlWRwAAAEI"]
[Sat Dec 20 01:11:59.919466 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:17130] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUWHXxzVxeBEODU8mCB84QAAAM0"]
[Sat Dec 20 01:12:00.160164 2025] [:error] [pid 35711:tid 35737] [client 52.175.145.145:11107] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUWHYCxTWUmlILwAM_eynAAAABg"]
[Sat Dec 20 01:12:00.400534 2025] [:error] [pid 35625:tid 35670] [client 52.175.145.145:11177] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aUWHYI12VmSu4NX34PTZ4gAAAI8"]
[Sat Dec 20 01:12:00.641203 2025] [:error] [pid 35625:tid 35679] [client 52.175.145.145:11185] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aUWHYI12VmSu4NX34PTZ4wAAAJg"]
[Sat Dec 20 01:12:00.882407 2025] [:error] [pid 35711:tid 35733] [client 52.175.145.145:11166] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aUWHYCxTWUmlILwAM_eynQAAABQ"]
[Sat Dec 20 01:12:01.121808 2025] [:error] [pid 35626:tid 35687] [client 52.175.145.145:11083] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aUWHYRzVxeBEODU8mCB85AAAAMU"]
[Sat Dec 20 01:12:01.384664 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:11045] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUWHYSxTWUmlILwAM_eynwAAAAE"]
[Sat Dec 20 01:12:01.627973 2025] [:error] [pid 35711:tid 35718] [client 52.175.145.145:11219] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUWHYSxTWUmlILwAM_eyoAAAAAU"]
[Sat Dec 20 01:12:01.878671 2025] [:error] [pid 35625:tid 35667] [client 52.175.145.145:11131] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUWHYY12VmSu4NX34PTZ6AAAAIw"]
[Sat Dec 20 01:12:02.129454 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:11101] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUWHYuTCMRSRXPuXZF8JCAAAAQM"]
[Sat Dec 20 01:12:02.370299 2025] [:error] [pid 39268:tid 39321] [client 52.175.145.145:11057] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUWHYuTCMRSRXPuXZF8JCQAAAQs"]
[Sat Dec 20 01:12:02.611611 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:17081] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUWHYhzVxeBEODU8mCB85QAAANc"]
[Sat Dec 20 01:12:02.859829 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:11193] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUWHYuTCMRSRXPuXZF8JCwAAAQc"]
[Sat Dec 20 01:12:03.100670 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:11192] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUWHY-TCMRSRXPuXZF8JDAAAARQ"]
[Sat Dec 20 01:12:03.341864 2025] [:error] [pid 39268:tid 39318] [client 52.175.145.145:11246] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aUWHY-TCMRSRXPuXZF8JDgAAAQg"]
[Sat Dec 20 01:12:03.583312 2025] [:error] [pid 35624:tid 35628] [client 52.175.145.145:11039] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aUWHY0JMTU3r4hb8qAlWSQAAAEA"]
[Sat Dec 20 01:12:03.826125 2025] [:error] [pid 35625:tid 35655] [client 52.175.145.145:11103] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aUWHY412VmSu4NX34PTZ7AAAAIA"]
[Sat Dec 20 01:12:04.070623 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:11199] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aUWHZOTCMRSRXPuXZF8JDwAAARM"]
[Sat Dec 20 01:12:04.340691 2025] [:error] [pid 35624:tid 35638] [client 52.175.145.145:11231] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aUWHZEJMTU3r4hb8qAlWSwAAAEo"]
[Sat Dec 20 01:12:04.606978 2025] [:error] [pid 35626:tid 35694] [client 52.175.145.145:11115] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aUWHZBzVxeBEODU8mCB86QAAAMw"]
[Sat Dec 20 01:12:04.858397 2025] [:error] [pid 35625:tid 35676] [client 52.175.145.145:11257] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aUWHZI12VmSu4NX34PTZ7wAAAJU"]
[Sat Dec 20 01:12:05.099711 2025] [:error] [pid 35626:tid 35692] [client 52.175.145.145:17134] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aUWHZRzVxeBEODU8mCB87AAAAMo"]
[Sat Dec 20 01:12:05.368453 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:11032] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUWHZeTCMRSRXPuXZF8JEQAAAQ4"]
[Sat Dec 20 01:12:05.630357 2025] [:error] [pid 35626:tid 35683] [client 52.175.145.145:11099] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUWHZRzVxeBEODU8mCB87gAAAME"]
[Sat Dec 20 01:12:05.870585 2025] [:error] [pid 35626:tid 35702] [client 52.175.145.145:11108] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUWHZRzVxeBEODU8mCB88AAAANQ"]
[Sat Dec 20 01:12:06.130699 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:11245] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUWHZhzVxeBEODU8mCB88QAAAMk"]
[Sat Dec 20 01:12:06.397789 2025] [:error] [pid 39268:tid 39332] [client 52.175.145.145:11033] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aUWHZuTCMRSRXPuXZF8JFgAAARY"]
[Sat Dec 20 01:12:06.639779 2025] [:error] [pid 35626:tid 35687] [client 52.175.145.145:11146] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aUWHZhzVxeBEODU8mCB89AAAAMU"]
[Sat Dec 20 01:12:06.886347 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:11142] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aUWHZhzVxeBEODU8mCB89QAAANc"]
[Sat Dec 20 01:12:07.126701 2025] [:error] [pid 35626:tid 35686] [client 52.175.145.145:11076] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aUWHZxzVxeBEODU8mCB89wAAAMQ"]
[Sat Dec 20 01:12:07.368663 2025] [:error] [pid 35626:tid 35697] [client 52.175.145.145:17058] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUWHZxzVxeBEODU8mCB8-AAAAM8"]
[Sat Dec 20 01:12:07.612113 2025] [:error] [pid 35624:tid 35642] [client 52.175.145.145:11028] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aUWHZ0JMTU3r4hb8qAlWTQAAAE4"]
[Sat Dec 20 01:12:07.874807 2025] [:error] [pid 35624:tid 35651] [client 52.175.145.145:11169] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aUWHZ0JMTU3r4hb8qAlWTgAAAFc"]
[Sat Dec 20 01:12:08.132904 2025] [:error] [pid 35625:tid 35664] [client 52.175.145.145:11122] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aUWHaI12VmSu4NX34PTZ8QAAAIk"]
[Sat Dec 20 01:12:08.374179 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:11086] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUWHaOTCMRSRXPuXZF8JHAAAARM"]
[Sat Dec 20 01:12:08.632880 2025] [:error] [pid 35624:tid 35632] [client 52.175.145.145:11044] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUWHaEJMTU3r4hb8qAlWUAAAAEQ"]
[Sat Dec 20 01:12:08.890606 2025] [:error] [pid 35624:tid 35637] [client 52.175.145.145:11125] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUWHaEJMTU3r4hb8qAlWUQAAAEk"]
[Sat Dec 20 01:12:09.133676 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:11021] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUWHaUJMTU3r4hb8qAlWUgAAAEM"]
[Sat Dec 20 01:12:09.383994 2025] [:error] [pid 39268:tid 39320] [client 52.175.145.145:11038] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUWHaeTCMRSRXPuXZF8JHwAAAQo"]
[Sat Dec 20 01:12:09.637679 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:11041] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUWHaRzVxeBEODU8mCB8_QAAAMM"]
[Sat Dec 20 01:12:09.884628 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:11160] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUWHaUJMTU3r4hb8qAlWUwAAAFA"]
[Sat Dec 20 01:12:10.147021 2025] [:error] [pid 35711:tid 35725] [client 52.175.145.145:11120] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUWHaixTWUmlILwAM_eyqAAAAAw"]
[Sat Dec 20 01:12:10.400746 2025] [:error] [pid 35624:tid 35647] [client 52.175.145.145:11210] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUWHakJMTU3r4hb8qAlWVQAAAFM"]
[Sat Dec 20 01:12:10.657490 2025] [:error] [pid 39268:tid 39314] [client 52.175.145.145:11079] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aUWHauTCMRSRXPuXZF8JIQAAAQQ"]
[Sat Dec 20 01:12:10.897854 2025] [:error] [pid 39268:tid 39321] [client 52.175.145.145:11087] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aUWHauTCMRSRXPuXZF8JIgAAAQs"]
[Sat Dec 20 01:12:11.137368 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:11102] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aUWHayxTWUmlILwAM_eyqwAAAAE"]
[Sat Dec 20 01:12:11.378469 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:11137] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aUWHa-TCMRSRXPuXZF8JJAAAAQc"]
[Sat Dec 20 01:12:11.619460 2025] [:error] [pid 35626:tid 35693] [client 52.175.145.145:11011] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUWHaxzVxeBEODU8mCB8_wAAAMs"]
[Sat Dec 20 01:12:11.860272 2025] [:error] [pid 35625:tid 35678] [client 52.175.145.145:11226] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUWHa412VmSu4NX34PTZ9QAAAJc"]
[Sat Dec 20 01:12:12.100924 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:11216] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUWHbEJMTU3r4hb8qAlWVwAAAE0"]
[Sat Dec 20 01:12:12.353741 2025] [:error] [pid 35625:tid 35660] [client 52.175.145.145:11105] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUWHbI12VmSu4NX34PTZ-QAAAIU"]
[Sat Dec 20 01:12:12.612134 2025] [:error] [pid 35625:tid 35676] [client 52.175.145.145:11197] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUWHbI12VmSu4NX34PTZ-gAAAJU"]
[Sat Dec 20 01:12:12.853753 2025] [:error] [pid 35711:tid 35729] [client 52.175.145.145:11026] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aUWHbCxTWUmlILwAM_eyrQAAABA"]
[Sat Dec 20 01:12:13.104510 2025] [:error] [pid 39268:tid 39326] [client 52.175.145.145:11014] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aUWHbeTCMRSRXPuXZF8JKAAAARA"]
[Sat Dec 20 01:12:13.345917 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:11186] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aUWHbeTCMRSRXPuXZF8JKwAAAQ8"]
[Sat Dec 20 01:12:13.588091 2025] [:error] [pid 39268:tid 39332] [client 52.175.145.145:11070] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aUWHbeTCMRSRXPuXZF8JLQAAARY"]
[Sat Dec 20 01:12:13.854090 2025] [:error] [pid 35711:tid 35715] [client 52.175.145.145:11035] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aUWHbSxTWUmlILwAM_eyrgAAAAI"]
[Sat Dec 20 01:12:14.113222 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:11065] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aUWHbixTWUmlILwAM_eyrwAAAAc"]
[Sat Dec 20 01:12:14.355425 2025] [:error] [pid 35711:tid 35717] [client 52.175.145.145:11203] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aUWHbixTWUmlILwAM_eysAAAAAQ"]
[Sat Dec 20 01:12:14.595447 2025] [:error] [pid 39268:tid 39323] [client 52.175.145.145:11123] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aUWHbuTCMRSRXPuXZF8JLgAAAQ0"]
[Sat Dec 20 01:12:14.852325 2025] [:error] [pid 35711:tid 35728] [client 52.175.145.145:10980] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aUWHbixTWUmlILwAM_eysgAAAA8"]
[Sat Dec 20 01:12:15.093526 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:11094] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aUWHb-TCMRSRXPuXZF8JMgAAARI"]
[Sat Dec 20 01:12:15.355658 2025] [:error] [pid 35711:tid 35732] [client 52.175.145.145:11190] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aUWHbyxTWUmlILwAM_eyswAAABM"]
[Sat Dec 20 01:12:15.598123 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:11022] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUWHbyxTWUmlILwAM_eytAAAABI"]
[Sat Dec 20 01:12:15.840320 2025] [:error] [pid 35624:tid 35650] [client 52.175.145.145:11171] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUWHb0JMTU3r4hb8qAlWWQAAAFY"]
[Sat Dec 20 01:12:16.085507 2025] [:error] [pid 35711:tid 35723] [client 52.175.145.145:11090] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUWHcCxTWUmlILwAM_eytQAAAAo"]
[Sat Dec 20 01:12:16.331687 2025] [:error] [pid 35711:tid 35727] [client 52.175.145.145:11071] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUWHcCxTWUmlILwAM_eytgAAAA4"]
[Sat Dec 20 01:12:16.578639 2025] [:error] [pid 35624:tid 35638] [client 52.175.145.145:11034] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUWHcEJMTU3r4hb8qAlWWwAAAEo"]
[Sat Dec 20 01:12:16.824758 2025] [:error] [pid 35711:tid 35726] [client 52.175.145.145:11089] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUWHcCxTWUmlILwAM_eytwAAAA0"]
[Sat Dec 20 01:12:17.065972 2025] [:error] [pid 35711:tid 35734] [client 52.175.145.145:11244] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUWHcSxTWUmlILwAM_eyugAAABU"]
[Sat Dec 20 01:12:17.308060 2025] [:error] [pid 35711:tid 35721] [client 52.175.145.145:11063] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUWHcSxTWUmlILwAM_eyuwAAAAg"]
[Sat Dec 20 01:12:17.549785 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:17121] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aUWHcUJMTU3r4hb8qAlWXwAAAEM"]
[Sat Dec 20 01:12:17.802866 2025] [:error] [pid 35711:tid 35737] [client 52.175.145.145:11187] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aUWHcSxTWUmlILwAM_eyvAAAABg"]
[Sat Dec 20 01:12:18.048518 2025] [:error] [pid 35625:tid 35661] [client 52.175.145.145:11043] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aUWHco12VmSu4NX34PTZ_gAAAIY"]
[Sat Dec 20 01:12:18.288337 2025] [:error] [pid 35711:tid 35716] [client 52.175.145.145:11088] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aUWHcixTWUmlILwAM_eyvgAAAAM"]
[Sat Dec 20 01:12:18.540151 2025] [:error] [pid 39268:tid 39316] [client 52.175.145.145:11189] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUWHcuTCMRSRXPuXZF8JNQAAAQY"]
[Sat Dec 20 01:12:18.781636 2025] [:error] [pid 35711:tid 35724] [client 52.175.145.145:10983] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUWHcixTWUmlILwAM_eyvwAAAAs"]
[Sat Dec 20 01:12:19.026053 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:11040] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUWHc-TCMRSRXPuXZF8JOAAAAQw"]
[Sat Dec 20 01:12:19.268411 2025] [:error] [pid 39268:tid 39310] [client 52.175.145.145:11053] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUWHc-TCMRSRXPuXZF8JOQAAAQA"]
[Sat Dec 20 01:12:19.509095 2025] [:error] [pid 35624:tid 35652] [client 52.175.145.145:11160] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUWHc0JMTU3r4hb8qAlWYAAAAFg"]
[Sat Dec 20 01:12:19.757987 2025] [:error] [pid 35625:tid 35663] [client 52.175.145.145:11047] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUWHc412VmSu4NX34PTZ_wAAAIg"]
[Sat Dec 20 01:12:20.000747 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:11019] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUWHcyxTWUmlILwAM_eywQAAAAc"]
[Sat Dec 20 01:12:20.240976 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:10944] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUWHdEJMTU3r4hb8qAlWYQAAAFA"]
[Sat Dec 20 01:12:20.483643 2025] [:error] [pid 35624:tid 35647] [client 52.175.145.145:11018] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUWHdEJMTU3r4hb8qAlWYgAAAFM"]
[Sat Dec 20 01:12:20.726357 2025] [:error] [pid 35626:tid 35702] [client 52.175.145.145:11172] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUWHdBzVxeBEODU8mCB9BQAAANQ"]
[Sat Dec 20 01:12:20.965327 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:11118] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUWHdBzVxeBEODU8mCB9BgAAAMk"]
[Sat Dec 20 01:12:21.207420 2025] [:error] [pid 35625:tid 35671] [client 52.175.145.145:11132] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUWHdY12VmSu4NX34PTaAAAAAJA"]
[Sat Dec 20 01:12:21.451360 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:11060] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUWHdeTCMRSRXPuXZF8JPgAAAQ4"]
[Sat Dec 20 01:12:21.710237 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:11151] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aUWHdUJMTU3r4hb8qAlWZAAAAE0"]
[Sat Dec 20 01:12:21.953367 2025] [:error] [pid 35624:tid 35636] [client 52.175.145.145:11027] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aUWHdUJMTU3r4hb8qAlWZgAAAEg"]
[Sat Dec 20 01:12:22.216859 2025] [:error] [pid 35624:tid 35648] [client 52.175.145.145:10962] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aUWHdkJMTU3r4hb8qAlWZwAAAFQ"]
[Sat Dec 20 01:12:22.469143 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:11100] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUWHduTCMRSRXPuXZF8JQAAAARQ"]
[Sat Dec 20 01:12:22.712294 2025] [:error] [pid 35625:tid 35655] [client 52.175.145.145:10968] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUWHdo12VmSu4NX34PTaAQAAAIA"]
[Sat Dec 20 01:12:22.952091 2025] [:error] [pid 39268:tid 39327] [client 52.175.145.145:11134] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUWHduTCMRSRXPuXZF8JQgAAARE"]
[Sat Dec 20 01:12:23.191365 2025] [:error] [pid 35625:tid 35678] [client 52.175.145.145:11127] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUWHd412VmSu4NX34PTaAgAAAJc"]
[Sat Dec 20 01:12:23.440022 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:10996] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aUWHdyxTWUmlILwAM_eywwAAABY"]
[Sat Dec 20 01:12:23.682616 2025] [:error] [pid 39268:tid 39323] [client 52.175.145.145:11064] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aUWHd-TCMRSRXPuXZF8JRgAAAQ0"]
[Sat Dec 20 01:12:23.930168 2025] [:error] [pid 35624:tid 35632] [client 52.175.145.145:10949] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aUWHd0JMTU3r4hb8qAlWbAAAAEQ"]
[Sat Dec 20 01:12:24.190877 2025] [:error] [pid 35624:tid 35631] [client 52.175.145.145:10952] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aUWHeEJMTU3r4hb8qAlWbQAAAEM"]
[Sat Dec 20 01:12:24.446625 2025] [:error] [pid 39268:tid 39318] [client 52.175.145.145:10956] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aUWHeOTCMRSRXPuXZF8JRwAAAQg"]
[Sat Dec 20 01:12:24.695195 2025] [:error] [pid 35625:tid 35677] [client 52.175.145.145:11042] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aUWHeI12VmSu4NX34PTaBQAAAJY"]
[Sat Dec 20 01:12:24.935653 2025] [:error] [pid 35711:tid 35726] [client 52.175.145.145:10974] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aUWHeCxTWUmlILwAM_eyxQAAAA0"]
[Sat Dec 20 01:12:25.207663 2025] [:error] [pid 35711:tid 35730] [client 52.175.145.145:11126] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aUWHeSxTWUmlILwAM_eyxgAAABE"]
[Sat Dec 20 01:12:25.453149 2025] [:error] [pid 35711:tid 35734] [client 52.175.145.145:11065] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUWHeSxTWUmlILwAM_eyyQAAABU"]
[Sat Dec 20 01:12:25.694662 2025] [:error] [pid 35711:tid 35721] [client 52.175.145.145:11012] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUWHeSxTWUmlILwAM_eyywAAAAg"]
[Sat Dec 20 01:12:25.954029 2025] [:error] [pid 35711:tid 35716] [client 52.175.145.145:11029] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUWHeSxTWUmlILwAM_eyzAAAAAM"]
[Sat Dec 20 01:12:26.195073 2025] [:error] [pid 35711:tid 35736] [client 52.175.145.145:11017] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUWHeixTWUmlILwAM_eyzwAAABc"]
[Sat Dec 20 01:12:26.449797 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:10975] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUWHeuTCMRSRXPuXZF8JSwAAARQ"]
[Sat Dec 20 01:12:26.696713 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:11015] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUWHeixTWUmlILwAM_ey0QAAAAc"]
[Sat Dec 20 01:12:26.944824 2025] [:error] [pid 35711:tid 35729] [client 52.175.145.145:11110] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUWHeixTWUmlILwAM_ey0gAAABA"]
[Sat Dec 20 01:12:27.185734 2025] [:error] [pid 35626:tid 35684] [client 52.175.145.145:11082] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUWHexzVxeBEODU8mCB9CQAAAMI"]
[Sat Dec 20 01:12:27.433419 2025] [:error] [pid 35625:tid 35670] [client 52.175.145.145:11208] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUWHe412VmSu4NX34PTaCAAAAI8"]
[Sat Dec 20 01:12:27.674234 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:10892] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUWHeyxTWUmlILwAM_ey1AAAABI"]
[Sat Dec 20 01:12:27.930306 2025] [:error] [pid 39268:tid 39316] [client 52.175.145.145:10895] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUWHe-TCMRSRXPuXZF8JTAAAAQY"]
[Sat Dec 20 01:12:28.190326 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:11005] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUWHfOTCMRSRXPuXZF8JTgAAAQU"]
[Sat Dec 20 01:12:28.437982 2025] [:error] [pid 39268:tid 39323] [client 52.175.145.145:11181] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aUWHfOTCMRSRXPuXZF8JUQAAAQ0"]
[Sat Dec 20 01:12:28.686203 2025] [:error] [pid 35626:tid 35701] [client 52.175.145.145:10964] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aUWHfBzVxeBEODU8mCB9DAAAANM"]
[Sat Dec 20 01:12:28.945643 2025] [:error] [pid 35626:tid 35700] [client 52.175.145.145:11116] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aUWHfBzVxeBEODU8mCB9DQAAANI"]
[Sat Dec 20 01:12:29.185630 2025] [:error] [pid 35711:tid 35723] [client 52.175.145.145:11049] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aUWHfSxTWUmlILwAM_ey2QAAAAo"]
[Sat Dec 20 01:12:29.430095 2025] [:error] [pid 35711:tid 35725] [client 52.175.145.145:11184] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUWHfSxTWUmlILwAM_ey2gAAAAw"]
[Sat Dec 20 01:12:29.672181 2025] [:error] [pid 35626:tid 35688] [client 52.175.145.145:10896] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUWHfRzVxeBEODU8mCB9EAAAAMY"]
[Sat Dec 20 01:12:29.914172 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:10947] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUWHfSxTWUmlILwAM_ey3AAAAAE"]
[Sat Dec 20 01:12:30.157780 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:11088] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUWHfuTCMRSRXPuXZF8JVQAAARI"]
[Sat Dec 20 01:12:30.399569 2025] [:error] [pid 35626:tid 35683] [client 52.175.145.145:11054] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aUWHfhzVxeBEODU8mCB9EwAAAME"]
[Sat Dec 20 01:12:30.649938 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:11020] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aUWHfkJMTU3r4hb8qAlWcQAAAE0"]
[Sat Dec 20 01:12:30.904897 2025] [:error] [pid 35625:tid 35664] [client 52.175.145.145:10915] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aUWHfo12VmSu4NX34PTaCwAAAIk"]
[Sat Dec 20 01:12:31.149173 2025] [:error] [pid 35626:tid 35682] [client 52.175.145.145:11092] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aUWHfxzVxeBEODU8mCB9FgAAAMA"]
[Sat Dec 20 01:12:31.398196 2025] [:error] [pid 35711:tid 35729] [client 52.175.145.145:10977] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aUWHfyxTWUmlILwAM_ey3wAAABA"]
[Sat Dec 20 01:12:31.640469 2025] [:error] [pid 35626:tid 35706] [client 52.175.145.145:10884] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aUWHfxzVxeBEODU8mCB9FwAAANg"]
[Sat Dec 20 01:12:31.906152 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:11066] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aUWHfxzVxeBEODU8mCB9GAAAAM0"]
[Sat Dec 20 01:12:32.153616 2025] [:error] [pid 35626:tid 35684] [client 52.175.145.145:11058] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aUWHgBzVxeBEODU8mCB9GQAAAMI"]
[Sat Dec 20 01:12:32.399345 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:10883] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aUWHgBzVxeBEODU8mCB9GgAAANc"]
[Sat Dec 20 01:12:32.639147 2025] [:error] [pid 35626:tid 35686] [client 52.175.145.145:11025] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aUWHgBzVxeBEODU8mCB9GwAAAMQ"]
[Sat Dec 20 01:12:32.878758 2025] [:error] [pid 35711:tid 35728] [client 52.175.145.145:11235] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aUWHgCxTWUmlILwAM_ey4AAAAA8"]
[Sat Dec 20 01:12:33.139832 2025] [:error] [pid 35625:tid 35667] [client 52.175.145.145:11009] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aUWHgY12VmSu4NX34PTaDgAAAIw"]
[Sat Dec 20 01:12:33.426619 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:10957] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUWHgSxTWUmlILwAM_ey4QAAABI"]
[Sat Dec 20 01:12:33.669226 2025] [:error] [pid 39268:tid 39333] [client 52.175.145.145:11046] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUWHgeTCMRSRXPuXZF8JXAAAARc"]
[Sat Dec 20 01:12:33.909030 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:11055] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUWHgSxTWUmlILwAM_ey4gAAABY"]
[Sat Dec 20 01:12:34.156076 2025] [:error] [pid 35711:tid 35719] [client 52.175.145.145:17062] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aUWHgixTWUmlILwAM_ey5AAAAAY"]
[Sat Dec 20 01:12:34.398274 2025] [:error] [pid 35624:tid 35642] [client 52.175.145.145:10982] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUWHgkJMTU3r4hb8qAlWeAAAAE4"]
[Sat Dec 20 01:12:34.641459 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:10965] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUWHguTCMRSRXPuXZF8JXQAAAQ8"]
[Sat Dec 20 01:12:34.883673 2025] [:error] [pid 35624:tid 35640] [client 52.175.145.145:11130] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUWHgkJMTU3r4hb8qAlWegAAAEw"]
[Sat Dec 20 01:12:35.151435 2025] [:error] [pid 35624:tid 35632] [client 52.175.145.145:11067] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUWHg0JMTU3r4hb8qAlWfAAAAEQ"]
[Sat Dec 20 01:12:35.406410 2025] [:error] [pid 35711:tid 35722] [client 52.175.145.145:10972] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUWHgyxTWUmlILwAM_ey5gAAAAk"]
[Sat Dec 20 01:12:35.647527 2025] [:error] [pid 35624:tid 35646] [client 52.175.145.145:10963] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUWHg0JMTU3r4hb8qAlWfgAAAFI"]
[Sat Dec 20 01:12:35.888658 2025] [:error] [pid 35624:tid 35637] [client 52.175.145.145:10981] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUWHg0JMTU3r4hb8qAlWfwAAAEk"]
[Sat Dec 20 01:12:36.134903 2025] [:error] [pid 35711:tid 35727] [client 52.175.145.145:10986] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUWHhCxTWUmlILwAM_ey6gAAAA4"]
[Sat Dec 20 01:12:36.422063 2025] [:error] [pid 35711:tid 35713] [client 52.175.145.145:10966] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aUWHhCxTWUmlILwAM_ey6wAAAAA"]
[Sat Dec 20 01:12:36.685369 2025] [:error] [pid 35624:tid 35641] [client 52.175.145.145:11129] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aUWHhEJMTU3r4hb8qAlWgwAAAE0"]
[Sat Dec 20 01:12:36.939914 2025] [:error] [pid 39268:tid 39330] [client 52.175.145.145:10987] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aUWHhOTCMRSRXPuXZF8JYQAAARQ"]
[Sat Dec 20 01:12:37.204788 2025] [:error] [pid 35625:tid 35657] [client 52.175.145.145:10928] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aUWHhY12VmSu4NX34PTaEAAAAII"]
[Sat Dec 20 01:12:37.447898 2025] [:error] [pid 35624:tid 35635] [client 52.175.145.145:11109] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUWHhUJMTU3r4hb8qAlWhQAAAEc"]
[Sat Dec 20 01:12:37.689162 2025] [:error] [pid 35625:tid 35655] [client 52.175.145.145:11068] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUWHhY12VmSu4NX34PTaEgAAAIA"]
[Sat Dec 20 01:12:37.931183 2025] [:error] [pid 35625:tid 35678] [client 52.175.145.145:11133] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUWHhY12VmSu4NX34PTaEwAAAJc"]
[Sat Dec 20 01:12:38.173794 2025] [:error] [pid 39268:tid 39312] [client 52.175.145.145:11104] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aUWHhuTCMRSRXPuXZF8JYgAAAQI"]
[Sat Dec 20 01:12:38.415894 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:11096] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUWHhkJMTU3r4hb8qAlWiAAAAEY"]
[Sat Dec 20 01:12:38.660282 2025] [:error] [pid 35624:tid 35639] [client 52.175.145.145:11036] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUWHhkJMTU3r4hb8qAlWigAAAEs"]
[Sat Dec 20 01:12:38.923757 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:11016] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUWHhixTWUmlILwAM_ey8QAAABI"]
[Sat Dec 20 01:12:39.179534 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:10921] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUWHhyxTWUmlILwAM_ey8gAAABY"]
[Sat Dec 20 01:12:39.439648 2025] [:error] [pid 35711:tid 35719] [client 52.175.145.145:11156] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aUWHhyxTWUmlILwAM_ey8wAAAAY"]
[Sat Dec 20 01:12:39.680052 2025] [:error] [pid 35711:tid 35721] [client 52.175.145.145:11061] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aUWHhyxTWUmlILwAM_ey9QAAAAg"]
[Sat Dec 20 01:12:39.920814 2025] [:error] [pid 35711:tid 35723] [client 52.175.145.145:11113] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aUWHhyxTWUmlILwAM_ey9wAAAAo"]
[Sat Dec 20 01:12:40.163268 2025] [:error] [pid 35624:tid 35645] [client 52.175.145.145:10886] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aUWHiEJMTU3r4hb8qAlWjAAAAFE"]
[Sat Dec 20 01:12:40.422189 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:10994] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aUWHiBzVxeBEODU8mCB9JAAAAM0"]
[Sat Dec 20 01:12:40.675095 2025] [:error] [pid 35626:tid 35704] [client 52.175.145.145:11013] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aUWHiBzVxeBEODU8mCB9JQAAANY"]
[Sat Dec 20 01:12:40.916206 2025] [:error] [pid 35626:tid 35684] [client 52.175.145.145:10973] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aUWHiBzVxeBEODU8mCB9JgAAAMI"]
[Sat Dec 20 01:12:41.170157 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:10893] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aUWHiRzVxeBEODU8mCB9JwAAAMM"]
[Sat Dec 20 01:12:41.455958 2025] [:error] [pid 39268:tid 39320] [client 52.175.145.145:11065] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUWHieTCMRSRXPuXZF8JZgAAAQo"]
[Sat Dec 20 01:12:41.701171 2025] [:error] [pid 35626:tid 35691] [client 52.175.145.145:10897] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUWHiRzVxeBEODU8mCB9KQAAAMk"]
[Sat Dec 20 01:12:41.943851 2025] [:error] [pid 35626:tid 35696] [client 52.175.145.145:10881] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUWHiRzVxeBEODU8mCB9KgAAAM4"]
[Sat Dec 20 01:12:42.182587 2025] [:error] [pid 35626:tid 35700] [client 52.175.145.145:10919] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUWHihzVxeBEODU8mCB9LQAAANI"]
[Sat Dec 20 01:12:42.423529 2025] [:error] [pid 39268:tid 39333] [client 52.175.145.145:10953] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aUWHiuTCMRSRXPuXZF8JZwAAARc"]
[Sat Dec 20 01:12:42.664603 2025] [:error] [pid 35625:tid 35676] [client 52.175.145.145:11003] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aUWHio12VmSu4NX34PTaFgAAAJU"]
[Sat Dec 20 01:12:42.909314 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:10991] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aUWHiixTWUmlILwAM_ey_AAAAAE"]
[Sat Dec 20 01:12:43.177386 2025] [:error] [pid 35711:tid 35732] [client 52.175.145.145:10904] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aUWHiyxTWUmlILwAM_ey_QAAABM"]
[Sat Dec 20 01:12:43.425813 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:10892] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aUWHiyxTWUmlILwAM_ey_gAAAAc"]
[Sat Dec 20 01:12:43.678015 2025] [:error] [pid 39268:tid 39311] [client 52.175.145.145:11191] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aUWHi-TCMRSRXPuXZF8JawAAAQE"]
[Sat Dec 20 01:12:43.917974 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:10826] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aUWHi-TCMRSRXPuXZF8JbAAAAQ4"]
[Sat Dec 20 01:12:44.157129 2025] [:error] [pid 35625:tid 35666] [client 52.175.145.145:11024] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aUWHjI12VmSu4NX34PTaGAAAAIs"]
[Sat Dec 20 01:12:44.405448 2025] [:error] [pid 35711:tid 35721] [client 52.175.145.145:10902] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUWHjCxTWUmlILwAM_ey_wAAAAg"]
[Sat Dec 20 01:12:44.653618 2025] [:error] [pid 35711:tid 35722] [client 52.175.145.145:10993] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUWHjCxTWUmlILwAM_ezAAAAAAk"]
[Sat Dec 20 01:12:44.895031 2025] [:error] [pid 35711:tid 35736] [client 52.175.145.145:10984] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUWHjCxTWUmlILwAM_ezAQAAABc"]
[Sat Dec 20 01:12:45.141662 2025] [:error] [pid 35711:tid 35727] [client 52.175.145.145:10997] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUWHjSxTWUmlILwAM_ezAwAAAA4"]
[Sat Dec 20 01:12:45.407132 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:11030] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aUWHjSxTWUmlILwAM_ezBgAAAAE"]
[Sat Dec 20 01:12:45.672645 2025] [:error] [pid 35625:tid 35664] [client 52.175.145.145:10925] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aUWHjY12VmSu4NX34PTaGwAAAIk"]
[Sat Dec 20 01:12:45.912283 2025] [:error] [pid 35624:tid 35630] [client 52.175.145.145:11023] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aUWHjUJMTU3r4hb8qAlWjgAAAEI"]
[Sat Dec 20 01:12:46.152788 2025] [:error] [pid 35711:tid 35717] [client 52.175.145.145:11124] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aUWHjixTWUmlILwAM_ezBwAAAAQ"]
[Sat Dec 20 01:12:46.407967 2025] [:error] [pid 39268:tid 39312] [client 52.175.145.145:11069] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aUWHjuTCMRSRXPuXZF8JbwAAAQI"]
[Sat Dec 20 01:12:46.648767 2025] [:error] [pid 35625:tid 35657] [client 52.175.145.145:11052] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aUWHjo12VmSu4NX34PTaHgAAAII"]
[Sat Dec 20 01:12:46.895005 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:11031] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aUWHjuTCMRSRXPuXZF8JcgAAAQw"]
[Sat Dec 20 01:12:47.142833 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:11059] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aUWHj-TCMRSRXPuXZF8JdAAAAQU"]
[Sat Dec 20 01:12:47.405397 2025] [:error] [pid 35626:tid 35699] [client 52.175.145.145:11093] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUWHjxzVxeBEODU8mCB9MAAAANE"]
[Sat Dec 20 01:12:47.682518 2025] [:error] [pid 35626:tid 35683] [client 52.175.145.145:11007] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUWHjxzVxeBEODU8mCB9MQAAAME"]
[Sat Dec 20 01:12:47.977020 2025] [:error] [pid 39268:tid 39333] [client 52.175.145.145:10888] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUWHj-TCMRSRXPuXZF8JdQAAARc"]
[Sat Dec 20 01:12:48.230183 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:11135] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aUWHkOTCMRSRXPuXZF8JdgAAARM"]
[Sat Dec 20 01:12:48.483463 2025] [:error] [pid 39268:tid 39332] [client 52.175.145.145:11196] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHkOTCMRSRXPuXZF8JeAAAARY"]
[Sat Dec 20 01:12:48.723566 2025] [:error] [pid 35626:tid 35702] [client 52.175.145.145:10903] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHkBzVxeBEODU8mCB9MwAAANQ"]
[Sat Dec 20 01:12:48.986393 2025] [:error] [pid 35625:tid 35678] [client 52.175.145.145:10948] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHkI12VmSu4NX34PTaIAAAAJc"]
[Sat Dec 20 01:12:49.268191 2025] [:error] [pid 35625:tid 35669] [client 52.175.145.145:10988] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUWHkY12VmSu4NX34PTaIwAAAI4"]
[Sat Dec 20 01:12:49.511896 2025] [:error] [pid 35626:tid 35704] [client 52.175.145.145:11195] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUWHkRzVxeBEODU8mCB9NAAAANY"]
[Sat Dec 20 01:12:49.751409 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:11008] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUWHkRzVxeBEODU8mCB9NgAAAMM"]
[Sat Dec 20 01:12:49.993844 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:10858] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUWHkSxTWUmlILwAM_ezCQAAABI"]
[Sat Dec 20 01:12:50.242706 2025] [:error] [pid 35711:tid 35720] [client 52.175.145.145:10898] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUWHkixTWUmlILwAM_ezCgAAAAc"]
[Sat Dec 20 01:12:50.489701 2025] [:error] [pid 35625:tid 35662] [client 52.175.145.145:10920] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aUWHko12VmSu4NX34PTaJgAAAIc"]
[Sat Dec 20 01:12:50.730693 2025] [:error] [pid 35625:tid 35679] [client 52.175.145.145:10835] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aUWHko12VmSu4NX34PTaJwAAAJg"]
[Sat Dec 20 01:12:50.983047 2025] [:error] [pid 39268:tid 39331] [client 52.175.145.145:10912] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aUWHkuTCMRSRXPuXZF8JeQAAARU"]
[Sat Dec 20 01:12:51.225253 2025] [:error] [pid 35626:tid 35687] [client 52.175.145.145:10950] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aUWHkxzVxeBEODU8mCB9OQAAAMU"]
[Sat Dec 20 01:12:51.473240 2025] [:error] [pid 35626:tid 35697] [client 52.175.145.145:10899] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aUWHkxzVxeBEODU8mCB9OgAAAM8"]
[Sat Dec 20 01:12:51.723317 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:10816] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aUWHk-TCMRSRXPuXZF8JewAAAQ4"]
[Sat Dec 20 01:12:51.964203 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:10885] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aUWHk-TCMRSRXPuXZF8JfAAAAQk"]
[Sat Dec 20 01:12:52.231419 2025] [:error] [pid 35624:tid 35633] [client 52.175.145.145:10889] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aUWHlEJMTU3r4hb8qAlWlwAAAEU"]
[Sat Dec 20 01:12:52.495648 2025] [:error] [pid 35625:tid 35664] [client 52.175.145.145:10867] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aUWHlI12VmSu4NX34PTaKQAAAIk"]
[Sat Dec 20 01:12:52.735829 2025] [:error] [pid 35624:tid 35632] [client 52.175.145.145:11076] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aUWHlEJMTU3r4hb8qAlWmAAAAEQ"]
[Sat Dec 20 01:12:53.009909 2025] [:error] [pid 35625:tid 35659] [client 52.175.145.145:10845] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aUWHlY12VmSu4NX34PTaKwAAAIQ"]
[Sat Dec 20 01:12:53.251879 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:10961] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aUWHleTCMRSRXPuXZF8JfQAAARI"]
[Sat Dec 20 01:12:53.492614 2025] [:error] [pid 35626:tid 35698] [client 52.175.145.145:10907] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aUWHlRzVxeBEODU8mCB9PAAAANA"]
[Sat Dec 20 01:12:53.733818 2025] [:error] [pid 35625:tid 35657] [client 52.175.145.145:10998] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aUWHlY12VmSu4NX34PTaLgAAAII"]
[Sat Dec 20 01:12:53.976091 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:10833] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aUWHlUJMTU3r4hb8qAlWmQAAAFA"]
[Sat Dec 20 01:12:54.217635 2025] [:error] [pid 39268:tid 39326] [client 52.175.145.145:11124] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aUWHluTCMRSRXPuXZF8JfwAAARA"]
[Sat Dec 20 01:12:54.465863 2025] [:error] [pid 39268:tid 39334] [client 52.175.145.145:10960] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aUWHluTCMRSRXPuXZF8JgAAAARg"]
[Sat Dec 20 01:12:54.729019 2025] [:error] [pid 39268:tid 39316] [client 52.175.145.145:11188] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aUWHluTCMRSRXPuXZF8JgwAAAQY"]
[Sat Dec 20 01:12:54.977764 2025] [:error] [pid 35624:tid 35643] [client 52.175.145.145:10943] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aUWHlkJMTU3r4hb8qAlWmgAAAE8"]
[Sat Dec 20 01:12:55.218136 2025] [:error] [pid 35626:tid 35694] [client 52.175.145.145:10990] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aUWHlxzVxeBEODU8mCB9QAAAAMw"]
[Sat Dec 20 01:12:55.460422 2025] [:error] [pid 39268:tid 39323] [client 52.175.145.145:10942] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aUWHl-TCMRSRXPuXZF8JhQAAAQ0"]
[Sat Dec 20 01:12:55.701013 2025] [:error] [pid 35624:tid 35629] [client 52.175.145.145:10971] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aUWHl0JMTU3r4hb8qAlWngAAAEE"]
[Sat Dec 20 01:12:55.941702 2025] [:error] [pid 35711:tid 35719] [client 52.175.145.145:10938] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aUWHlyxTWUmlILwAM_ezDAAAAAY"]
[Sat Dec 20 01:12:56.187085 2025] [:error] [pid 35626:tid 35683] [client 52.175.145.145:10853] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aUWHmBzVxeBEODU8mCB9QgAAAME"]
[Sat Dec 20 01:12:56.429488 2025] [:error] [pid 35624:tid 35638] [client 52.175.145.145:10911] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUWHmEJMTU3r4hb8qAlWnwAAAEo"]
[Sat Dec 20 01:12:56.672050 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:10916] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUWHmOTCMRSRXPuXZF8JjQAAAQc"]
[Sat Dec 20 01:12:56.929201 2025] [:error] [pid 39268:tid 39312] [client 52.175.145.145:10761] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUWHmOTCMRSRXPuXZF8JjgAAAQI"]
[Sat Dec 20 01:12:57.185244 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:10838] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUWHmUJMTU3r4hb8qAlWoQAAAEY"]
[Sat Dec 20 01:12:57.437467 2025] [:error] [pid 39268:tid 39333] [client 52.175.145.145:11067] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUWHmeTCMRSRXPuXZF8JkQAAARc"]
[Sat Dec 20 01:12:57.697272 2025] [:error] [pid 35624:tid 35650] [client 52.175.145.145:11048] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUWHmUJMTU3r4hb8qAlWpQAAAFY"]
[Sat Dec 20 01:12:57.949104 2025] [:error] [pid 35624:tid 35643] [client 52.175.145.145:10849] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUWHmUJMTU3r4hb8qAlWpgAAAE8"]
[Sat Dec 20 01:12:58.197019 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:10855] [client 52.175.145.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.175.145.145, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUWHmhzVxeBEODU8mCB9TAAAAMM"]
[Sat Dec 20 01:12:58.201790 2025] [:error] [pid 35626:tid 35685] [client 52.175.145.145:10855] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Dec 20 01:12:58.326777 2025] [:error] [pid 35626:tid 35690] [client 52.175.145.145:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Dec 20 01:12:58.452723 2025] [:error] [pid 35626:tid 35705] [client 52.175.145.145:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/xse25.php
[Sat Dec 20 01:12:58.698981 2025] [:error] [pid 35626:tid 35696] [client 52.175.145.145:10855] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aUWHmhzVxeBEODU8mCB9UQAAAM4"]
[Sat Dec 20 01:12:58.965936 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:10958] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php
[Sat Dec 20 01:12:59.091217 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:10958] File does not exist: /usr/local/apache/htdocs/suspended-page/shoyo.php
[Sat Dec 20 01:12:59.215409 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:10958] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Dec 20 01:12:59.344234 2025] [:error] [pid 39268:tid 39326] [client 52.175.145.145:10958] File does not exist: /usr/local/apache/htdocs/suspended-page/waq.php
[Sat Dec 20 01:12:59.475370 2025] [:error] [pid 39268:tid 39334] [client 52.175.145.145:10958] File does not exist: /usr/local/apache/htdocs/suspended-page/wakak.php
[Sat Dec 20 01:12:59.601656 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:10958] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Dec 20 01:12:59.722700 2025] [:error] [pid 39268:tid 39322] [client 52.175.145.145:10958] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aUWHm-TCMRSRXPuXZF8JmgAAAQw"]
[Sat Dec 20 01:12:59.963676 2025] [:error] [pid 35711:tid 35726] [client 52.175.145.145:10820] [client 52.175.145.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "aUWHmyxTWUmlILwAM_ezGQAAAA0"]
[Sat Dec 20 01:13:00.231943 2025] [:error] [pid 35711:tid 35723] [client 52.175.145.145:10995] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sat Dec 20 01:13:00.352915 2025] [:error] [pid 35711:tid 35714] [client 52.175.145.145:10995] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aUWHnCxTWUmlILwAM_ezHAAAAAE"]
[Sat Dec 20 01:13:00.623027 2025] [:error] [pid 35711:tid 35718] [client 52.175.145.145:10825] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aUWHnCxTWUmlILwAM_ezHwAAAAU"]
[Sat Dec 20 01:13:00.865601 2025] [:error] [pid 39268:tid 39323] [client 52.175.145.145:10960] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aUWHnOTCMRSRXPuXZF8JnQAAAQ0"]
[Sat Dec 20 01:13:01.118475 2025] [:error] [pid 35624:tid 35636] [client 52.175.145.145:10839] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aUWHnUJMTU3r4hb8qAlWqAAAAEg"]
[Sat Dec 20 01:13:01.359906 2025] [:error] [pid 35625:tid 35667] [client 52.175.145.145:10756] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aUWHnY12VmSu4NX34PTaNgAAAIw"]
[Sat Dec 20 01:13:01.602687 2025] [:error] [pid 35624:tid 35635] [client 52.175.145.145:10817] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aUWHnUJMTU3r4hb8qAlWqQAAAEc"]
[Sat Dec 20 01:13:01.851181 2025] [:error] [pid 39268:tid 39332] [client 52.175.145.145:11051] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aUWHneTCMRSRXPuXZF8JngAAARY"]
[Sat Dec 20 01:13:02.092910 2025] [:error] [pid 35625:tid 35678] [client 52.175.145.145:11062] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aUWHno12VmSu4NX34PTaOgAAAJc"]
[Sat Dec 20 01:13:02.338863 2025] [:error] [pid 35625:tid 35677] [client 52.175.145.145:10939] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aUWHno12VmSu4NX34PTaPAAAAJY"]
[Sat Dec 20 01:13:02.583928 2025] [:error] [pid 35625:tid 35663] [client 52.175.145.145:11112] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aUWHno12VmSu4NX34PTaPgAAAIg"]
[Sat Dec 20 01:13:02.824624 2025] [:error] [pid 35711:tid 35732] [client 52.175.145.145:10870] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aUWHnixTWUmlILwAM_ezIQAAABM"]
[Sat Dec 20 01:13:03.081423 2025] [:error] [pid 35711:tid 35731] [client 52.175.145.145:10913] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aUWHnyxTWUmlILwAM_ezIgAAABI"]
[Sat Dec 20 01:13:03.338215 2025] [:error] [pid 35624:tid 35634] [client 52.175.145.145:11004] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aUWHn0JMTU3r4hb8qAlWrgAAAEY"]
[Sat Dec 20 01:13:03.579021 2025] [:error] [pid 35624:tid 35639] [client 52.175.145.145:10824] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aUWHn0JMTU3r4hb8qAlWrwAAAEs"]
[Sat Dec 20 01:13:03.819436 2025] [:error] [pid 39268:tid 39319] [client 52.175.145.145:10790] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aUWHn-TCMRSRXPuXZF8JogAAAQk"]
[Sat Dec 20 01:13:04.060424 2025] [:error] [pid 39268:tid 39328] [client 52.175.145.145:10880] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aUWHoOTCMRSRXPuXZF8JpAAAARI"]
[Sat Dec 20 01:13:04.300494 2025] [:error] [pid 35624:tid 35646] [client 52.175.145.145:10978] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aUWHoEJMTU3r4hb8qAlWsQAAAFI"]
[Sat Dec 20 01:13:04.542133 2025] [:error] [pid 35625:tid 35670] [client 52.175.145.145:10937] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aUWHoI12VmSu4NX34PTaQQAAAI8"]
[Sat Dec 20 01:13:04.782763 2025] [:error] [pid 39268:tid 39327] [client 52.175.145.145:10918] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aUWHoOTCMRSRXPuXZF8JpgAAARE"]
[Sat Dec 20 01:13:05.025337 2025] [:error] [pid 39268:tid 39325] [client 52.175.145.145:10954] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aUWHoeTCMRSRXPuXZF8JqAAAAQ8"]
[Sat Dec 20 01:13:05.268098 2025] [:error] [pid 39268:tid 39316] [client 52.175.145.145:10989] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aUWHoeTCMRSRXPuXZF8JqgAAAQY"]
[Sat Dec 20 01:13:05.512616 2025] [:error] [pid 35626:tid 35694] [client 52.175.145.145:10936] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aUWHoRzVxeBEODU8mCB9VQAAAMw"]
[Sat Dec 20 01:13:05.767415 2025] [:error] [pid 35624:tid 35644] [client 52.175.145.145:11068] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aUWHoUJMTU3r4hb8qAlWtAAAAFA"]
[Sat Dec 20 01:13:06.032285 2025] [:error] [pid 39268:tid 39317] [client 52.175.145.145:10979] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aUWHouTCMRSRXPuXZF8JrAAAAQc"]
[Sat Dec 20 01:13:06.295151 2025] [:error] [pid 35624:tid 35647] [client 52.175.145.145:10930] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aUWHokJMTU3r4hb8qAlWtgAAAFM"]
[Sat Dec 20 01:13:06.538198 2025] [:error] [pid 39268:tid 39324] [client 52.175.145.145:10951] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aUWHouTCMRSRXPuXZF8JrwAAAQ4"]
[Sat Dec 20 01:13:06.781784 2025] [:error] [pid 39268:tid 39327] [client 52.175.145.145:10967] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aUWHouTCMRSRXPuXZF8JsAAAARE"]
[Sat Dec 20 01:13:07.023731 2025] [:error] [pid 39268:tid 39315] [client 52.175.145.145:10793] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aUWHo-TCMRSRXPuXZF8JsgAAAQU"]
[Sat Dec 20 01:13:07.264629 2025] [:error] [pid 39268:tid 39321] [client 52.175.145.145:10901] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aUWHo-TCMRSRXPuXZF8JtQAAAQs"]
[Sat Dec 20 01:13:07.509032 2025] [:error] [pid 39268:tid 39329] [client 52.175.145.145:10837] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aUWHo-TCMRSRXPuXZF8JtwAAARM"]
[Sat Dec 20 01:13:07.750420 2025] [:error] [pid 35711:tid 35735] [client 52.175.145.145:11000] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aUWHoyxTWUmlILwAM_ezJAAAABY"]
[Sat Dec 20 01:13:08.014505 2025] [:error] [pid 35625:tid 35657] [client 52.175.145.145:10859] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aUWHpI12VmSu4NX34PTaRgAAAII"]
[Sat Dec 20 01:13:08.258698 2025] [:error] [pid 35624:tid 35636] [client 52.175.145.145:10778] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AL.php"] [unique_id "aUWHpEJMTU3r4hb8qAlWtwAAAEg"]
[Sat Dec 20 01:13:08.499970 2025] [:error] [pid 35624:tid 35635] [client 52.175.145.145:10877] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AL.php"] [unique_id "aUWHpEJMTU3r4hb8qAlWuAAAAEc"]
[Sat Dec 20 01:13:08.747997 2025] [:error] [pid 39268:tid 39313] [client 52.175.145.145:10894] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AL.php"] [unique_id "aUWHpOTCMRSRXPuXZF8JuQAAAQM"]
[Sat Dec 20 01:13:09.003143 2025] [:error] [pid 35711:tid 35719] [client 52.175.145.145:10935] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AL.php"] [unique_id "aUWHpSxTWUmlILwAM_ezJQAAAAY"]
[Sat Dec 20 01:13:09.255232 2025] [:error] [pid 35711:tid 35734] [client 52.175.145.145:10992] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/little.php"] [unique_id "aUWHpSxTWUmlILwAM_ezJgAAABU"]
[Sat Dec 20 01:13:09.502682 2025] [:error] [pid 35626:tid 35695] [client 52.175.145.145:10768] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/little.php"] [unique_id "aUWHpRzVxeBEODU8mCB9VgAAAM0"]
[Sat Dec 20 01:13:09.750702 2025] [:error] [pid 35626:tid 35692] [client 52.175.145.145:10946] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/little.php"] [unique_id "aUWHpRzVxeBEODU8mCB9VwAAAMo"]
[Sat Dec 20 01:13:09.996244 2025] [:error] [pid 35626:tid 35688] [client 52.175.145.145:10766] [client 52.175.145.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/little.php"] [unique_id "aUWHpRzVxeBEODU8mCB9WQAAAMY"]
[Sat Dec 20 07:35:48.070796 2025] [:error] [pid 39492:tid 39524] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 20 07:35:48.371283 2025] [:error] [pid 39492:tid 39523] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Dec 20 07:35:48.657785 2025] [:error] [pid 39492:tid 39522] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Dec 20 07:35:48.939802 2025] [:error] [pid 39492:tid 39546] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Dec 20 07:35:49.281628 2025] [:error] [pid 39492:tid 39528] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Dec 20 07:35:49.646603 2025] [:error] [pid 39492:tid 39524] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 07:35:50.038865 2025] [:error] [pid 39492:tid 39535] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 07:35:50.333937 2025] [:error] [pid 39492:tid 39546] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Dec 20 07:35:50.922313 2025] [:error] [pid 39492:tid 39536] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 07:35:51.492809 2025] [:error] [pid 39492:tid 39526] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Dec 20 07:35:51.782057 2025] [:error] [pid 39492:tid 39543] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Dec 20 07:35:52.065326 2025] [:error] [pid 39492:tid 39530] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 20 07:35:52.355175 2025] [:error] [pid 39492:tid 39546] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Dec 20 07:35:52.644627 2025] [:error] [pid 39492:tid 39528] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Dec 20 07:35:52.934305 2025] [:error] [pid 39492:tid 39529] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Dec 20 07:35:53.227786 2025] [:error] [pid 39492:tid 39533] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Dec 20 07:35:53.514372 2025] [:error] [pid 39492:tid 39532] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 20 07:35:53.805087 2025] [:error] [pid 39492:tid 39540] [client 45.86.202.87:22475] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Dec 20 07:35:58.699015 2025] [:error] [pid 39492:tid 39525] [client 45.86.202.87:22475] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXhXos_ZYP1UQNM9hamgAAAAEM"]
[Sat Dec 20 07:36:00.190049 2025] [:error] [pid 39493:tid 39570] [client 45.86.202.90:57049] [client 45.86.202.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXhYGhjL2VG_FmIHqAcEAAAAJU"]
[Sat Dec 20 07:36:01.785905 2025] [:error] [pid 39491:tid 39497] [client 45.86.202.55:24579] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 07:36:02.782924 2025] [:error] [pid 39491:tid 39501] [client 45.86.202.55:24579] [client 45.86.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUXhYltw2ggYvDxu2EDRrAAAAAY"]
[Sat Dec 20 07:36:05.105375 2025] [:error] [pid 39491:tid 39512] [client 45.86.202.90:42099] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Dec 20 07:36:05.415056 2025] [:error] [pid 39491:tid 39506] [client 45.86.202.90:42099] [client 45.86.202.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUXhZVtw2ggYvDxu2EDRuAAAAAs"]
[Sat Dec 20 07:36:06.410746 2025] [:error] [pid 39492:tid 39545] [client 45.86.202.81:48745] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Dec 20 07:36:08.027266 2025] [:error] [pid 39492:tid 39530] [client 45.86.202.81:48745] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUXhaIs_ZYP1UQNM9hamtgAAAEg"]
[Sat Dec 20 07:36:09.047603 2025] [:error] [pid 39491:tid 39503] [client 45.86.202.77:22673] [client 45.86.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUXhaVtw2ggYvDxu2EDRxwAAAAg"]
[Sat Dec 20 07:36:09.656777 2025] [:error] [pid 18807:tid 18824] [client 45.86.202.92:49345] [client 45.86.202.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUXhaWRP9n5OCTllYeUDZAAAAY8"]
[Sat Dec 20 07:36:10.274051 2025] [:error] [pid 39493:tid 39558] [client 45.86.202.72:28999] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUXhamhjL2VG_FmIHqAcQQAAAIk"]
[Sat Dec 20 07:36:10.926699 2025] [:error] [pid 39493:tid 39556] [client 45.86.202.80:42163] [client 45.86.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUXhamhjL2VG_FmIHqAcRwAAAIc"]
[Sat Dec 20 07:36:11.596130 2025] [:error] [pid 39491:tid 39499] [client 45.86.202.220:45225] [client 45.86.202.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUXha1tw2ggYvDxu2EDRzQAAAAQ"]
[Sat Dec 20 07:36:13.569082 2025] [:error] [pid 14286:tid 14308] [client 45.86.202.67:53499] [client 45.86.202.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUXhbZ7rbXIrw6rGSda7LQAAAVI"]
[Sat Dec 20 07:36:14.184325 2025] [:error] [pid 18807:tid 18827] [client 45.86.202.96:32837] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Dec 20 07:36:14.825654 2025] [:error] [pid 18807:tid 18828] [client 45.86.202.96:32837] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUXhbmRP9n5OCTllYeUDewAAAZM"]
[Sat Dec 20 07:36:16.094476 2025] [:error] [pid 39491:tid 39511] [client 45.86.202.72:25885] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUXhcFtw2ggYvDxu2EDR8wAAABA"]
[Sat Dec 20 07:36:17.051306 2025] [:error] [pid 14286:tid 14308] [client 45.86.202.92:62677] [client 45.86.202.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUXhcZ7rbXIrw6rGSda7UQAAAVI"]
[Sat Dec 20 07:36:17.656528 2025] [:error] [pid 14286:tid 14298] [client 45.86.202.87:42295] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Dec 20 07:36:17.964704 2025] [:error] [pid 14286:tid 14310] [client 45.86.202.87:42295] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUXhcZ7rbXIrw6rGSda7WwAAAVQ"]
[Sat Dec 20 07:36:19.584834 2025] [:error] [pid 39493:tid 39569] [client 45.86.202.86:30231] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Dec 20 07:36:20.478746 2025] [:error] [pid 39493:tid 39571] [client 45.86.202.86:30231] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Dec 20 07:36:21.367575 2025] [:error] [pid 39493:tid 39563] [client 45.86.202.86:30231] [client 45.86.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUXhdWhjL2VG_FmIHqAchQAAAI4"]
[Sat Dec 20 07:36:21.963306 2025] [:error] [pid 39577:tid 39597] [client 45.86.202.83:35157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Dec 20 07:36:22.261146 2025] [:error] [pid 39577:tid 39586] [client 45.86.202.83:35157] [client 45.86.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUXhdrviRnt1rJiSOfyV5AAAAMc"]
[Sat Dec 20 07:36:22.859239 2025] [:error] [pid 39492:tid 39543] [client 45.86.202.96:62705] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Dec 20 07:36:23.471058 2025] [:error] [pid 39492:tid 39541] [client 45.86.202.96:62705] [client 45.86.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUXhd4s_ZYP1UQNM9haneQAAAFM"]
[Sat Dec 20 07:36:25.423628 2025] [:error] [pid 18807:tid 18831] [client 45.86.202.77:39947] [client 45.86.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUXheWRP9n5OCTllYeUD2gAAAZY"]
[Sat Dec 20 07:36:26.334738 2025] [:error] [pid 39492:tid 39540] [client 45.86.202.71:52217] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Dec 20 07:36:26.623705 2025] [:error] [pid 39492:tid 39525] [client 45.86.202.71:52217] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Dec 20 07:36:27.215617 2025] [:error] [pid 39492:tid 39534] [client 45.86.202.71:52217] [client 45.86.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUXhe4s_ZYP1UQNM9hanqQAAAEw"]
[Sat Dec 20 07:36:28.095656 2025] [:error] [pid 14286:tid 14296] [client 45.86.202.64:25349] [client 45.86.202.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUXhfJ7rbXIrw6rGSda76QAAAUY"]
[Sat Dec 20 07:36:29.062749 2025] [:error] [pid 39577:tid 39582] [client 45.86.202.69:51759] [client 45.86.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUXhfbviRnt1rJiSOfyWHwAAAMM"]
[Sat Dec 20 07:36:29.628739 2025] [:error] [pid 14286:tid 14297] [client 45.86.202.68:46493] [client 45.86.202.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUXhfZ7rbXIrw6rGSda7_AAAAUc"]
[Sat Dec 20 07:36:30.204728 2025] [:error] [pid 39491:tid 39519] [client 45.86.202.62:20997] [client 45.86.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUXhfltw2ggYvDxu2EDSdwAAABg"]
[Sat Dec 20 07:36:32.598363 2025] [:error] [pid 39491:tid 39510] [client 45.86.202.62:45443] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Dec 20 07:36:32.883181 2025] [:error] [pid 39491:tid 39501] [client 45.86.202.62:45443] [client 45.86.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUXhgFtw2ggYvDxu2EDSkAAAAAY"]
[Sat Dec 20 07:36:33.539096 2025] [:error] [pid 14286:tid 14304] [client 45.86.202.58:27545] [client 45.86.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUXhgZ7rbXIrw6rGSda8KwAAAU4"]
[Sat Dec 20 07:36:34.154621 2025] [:error] [pid 39577:tid 39587] [client 45.86.202.63:36691] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUXhgrviRnt1rJiSOfyWXgAAAMg"]
[Sat Dec 20 07:36:37.959094 2025] [:error] [pid 39577:tid 39594] [client 45.86.202.59:39505] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Dec 20 07:36:38.631426 2025] [:error] [pid 39577:tid 39593] [client 45.86.202.59:39505] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Dec 20 07:36:39.858494 2025] [:error] [pid 39577:tid 39597] [client 45.86.202.59:39505] [client 45.86.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUXhh7viRnt1rJiSOfyWnAAAANI"]
[Sat Dec 20 07:36:41.518393 2025] [:error] [pid 39577:tid 39594] [client 45.86.202.66:53729] [client 45.86.202.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.66, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUXhibviRnt1rJiSOfyWsAAAAM8"]
[Sat Dec 20 07:36:41.820313 2025] [:error] [pid 39577:tid 39592] [client 45.86.202.66:53729] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Dec 20 07:36:43.379088 2025] [:error] [pid 39577:tid 39580] [client 45.86.202.66:53729] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Dec 20 07:36:43.712729 2025] [:error] [pid 39577:tid 39588] [client 45.86.202.66:53729] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Dec 20 07:36:47.204639 2025] [:error] [pid 39577:tid 39580] [client 45.86.202.66:53729] [client 45.86.202.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUXhj7viRnt1rJiSOfyXAgAAAME"]
[Sat Dec 20 07:36:48.150575 2025] [:error] [pid 39491:tid 39498] [client 45.86.202.52:59445] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Dec 20 07:36:48.443664 2025] [:error] [pid 39491:tid 39505] [client 45.86.202.52:59445] [client 45.86.202.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.52, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUXhkFtw2ggYvDxu2EDTPwAAAAo"]
[Sat Dec 20 07:36:49.050119 2025] [:error] [pid 39491:tid 39502] [client 45.86.202.52:59445] [client 45.86.202.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUXhkVtw2ggYvDxu2EDTTgAAAAc"]
[Sat Dec 20 07:36:50.838561 2025] [:error] [pid 14247:tid 14258] [client 45.86.202.84:65291] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Dec 20 07:36:51.432996 2025] [:error] [pid 14247:tid 14249] [client 45.86.202.84:65291] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Dec 20 07:36:52.032381 2025] [:error] [pid 14247:tid 14250] [client 45.86.202.84:65291] [client 45.86.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUXhlCDv9TtKKdJQn9lgGAAAAQE"]
[Sat Dec 20 07:36:52.626742 2025] [:error] [pid 18807:tid 18832] [client 45.86.202.73:31293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Dec 20 07:36:53.505316 2025] [:error] [pid 18807:tid 18814] [client 45.86.202.73:31293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Dec 20 07:36:54.111119 2025] [:error] [pid 18807:tid 18829] [client 45.86.202.73:31293] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Dec 20 07:36:54.709038 2025] [:error] [pid 18807:tid 18811] [client 45.86.202.73:31293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Dec 20 07:36:55.014076 2025] [:error] [pid 18807:tid 18817] [client 45.86.202.73:31293] [client 45.86.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUXhl2RP9n5OCTllYeUFcQAAAYg"]
[Sat Dec 20 07:36:56.696305 2025] [:error] [pid 14247:tid 14256] [client 45.86.202.52:49313] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Dec 20 07:36:56.978691 2025] [:error] [pid 14247:tid 14250] [client 45.86.202.52:49313] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 20 07:36:57.276772 2025] [:error] [pid 14247:tid 14254] [client 45.86.202.52:49313] [client 45.86.202.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUXhmSDv9TtKKdJQn9lgQAAAAQU"]
[Sat Dec 20 07:36:58.187299 2025] [:error] [pid 18807:tid 18832] [client 45.86.202.62:55983] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Dec 20 07:36:58.795631 2025] [:error] [pid 18807:tid 18812] [client 45.86.202.62:55983] [client 45.86.202.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.62, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUXhmmRP9n5OCTllYeUFrQAAAYM"]
[Sat Dec 20 07:36:59.107742 2025] [:error] [pid 18807:tid 18818] [client 45.86.202.62:55983] [client 45.86.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUXhm2RP9n5OCTllYeUFsAAAAYk"]
[Sat Dec 20 07:37:02.854401 2025] [:error] [pid 14247:tid 14267] [client 45.86.202.75:43599] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Dec 20 07:37:04.652533 2025] [:error] [pid 14247:tid 14259] [client 45.86.202.75:43599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Dec 20 07:37:04.944915 2025] [:error] [pid 14247:tid 14250] [client 45.86.202.75:43599] [client 45.86.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUXhoCDv9TtKKdJQn9lgdgAAAQE"]
[Sat Dec 20 07:37:05.512636 2025] [:error] [pid 39577:tid 39585] [client 45.86.202.54:31295] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Dec 20 07:37:06.408930 2025] [:error] [pid 39577:tid 39597] [client 45.86.202.54:31295] [client 45.86.202.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUXhorviRnt1rJiSOfyX2AAAANI"]
[Sat Dec 20 07:37:06.710789 2025] [:error] [pid 39577:tid 39589] [client 45.86.202.54:31295] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Dec 20 07:37:07.017399 2025] [:error] [pid 39577:tid 39584] [client 45.86.202.54:31295] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Dec 20 07:37:07.304597 2025] [:error] [pid 39577:tid 39587] [client 45.86.202.54:31295] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Dec 20 07:37:07.607001 2025] [:error] [pid 39577:tid 39602] [client 45.86.202.54:31295] [client 45.86.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUXho7viRnt1rJiSOfyX3gAAANc"]
[Sat Dec 20 07:37:08.178176 2025] [:error] [pid 14247:tid 14249] [client 45.86.202.73:26903] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Dec 20 07:37:08.514078 2025] [:error] [pid 14247:tid 14262] [client 45.86.202.73:26903] [client 45.86.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aUXhpCDv9TtKKdJQn9lgiQAAAQ0"]
[Sat Dec 20 07:37:09.401401 2025] [:error] [pid 39493:tid 39557] [client 45.86.202.80:52463] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Dec 20 07:37:09.699252 2025] [:error] [pid 39493:tid 39567] [client 45.86.202.80:52463] [client 45.86.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUXhpWhjL2VG_FmIHqAecgAAAJI"]
[Sat Dec 20 07:37:10.902910 2025] [:error] [pid 39491:tid 39500] [client 45.86.202.84:45875] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Dec 20 07:37:11.221762 2025] [:error] [pid 39491:tid 39517] [client 45.86.202.84:45875] [client 45.86.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUXhp1tw2ggYvDxu2EDUlAAAABY"]
[Sat Dec 20 07:37:53.168205 2025] [:error] [pid 14247:tid 14252] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 20 07:37:53.448809 2025] [:error] [pid 14247:tid 14258] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Dec 20 07:37:53.741412 2025] [:error] [pid 14247:tid 14273] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Dec 20 07:37:54.062189 2025] [:error] [pid 14247:tid 14260] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Dec 20 07:37:54.349491 2025] [:error] [pid 14247:tid 14258] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Dec 20 07:37:54.633067 2025] [:error] [pid 14247:tid 14256] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 07:37:54.979755 2025] [:error] [pid 14247:tid 14260] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 07:37:55.275640 2025] [:error] [pid 14247:tid 14261] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Dec 20 07:37:55.874628 2025] [:error] [pid 14247:tid 14269] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 07:37:56.491914 2025] [:error] [pid 14247:tid 14255] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Dec 20 07:37:56.785977 2025] [:error] [pid 14247:tid 14259] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Dec 20 07:37:57.093372 2025] [:error] [pid 14247:tid 14249] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 20 07:37:57.385676 2025] [:error] [pid 14247:tid 14252] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Dec 20 07:37:57.710353 2025] [:error] [pid 14247:tid 14270] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Dec 20 07:37:58.031037 2025] [:error] [pid 14247:tid 14259] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Dec 20 07:37:58.325564 2025] [:error] [pid 14247:tid 14252] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Dec 20 07:37:58.662614 2025] [:error] [pid 14247:tid 14270] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 20 07:37:58.961700 2025] [:error] [pid 14247:tid 14256] [client 45.86.202.100:58679] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Dec 20 07:38:10.215342 2025] [:error] [pid 14247:tid 14273] [client 45.86.202.100:58679] [client 45.86.202.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXh4iDv9TtKKdJQn9li_AAAARg"]
[Sat Dec 20 07:38:12.762918 2025] [:error] [pid 14286:tid 14310] [client 45.86.202.220:45137] [client 45.86.202.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXh5J7rbXIrw6rGSdbApwAAAVQ"]
[Sat Dec 20 07:38:15.277287 2025] [:error] [pid 39492:tid 39529] [client 45.86.202.67:39913] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 07:38:16.176962 2025] [:error] [pid 39492:tid 39525] [client 45.86.202.67:39913] [client 45.86.202.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUXh6Is_ZYP1UQNM9hatQgAAAEM"]
[Sat Dec 20 08:43:58.885178 2025] [:error] [pid 18807:tid 18815] [client 43.159.128.155:51022] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUXxTmRP9n5OCTllYeU_UwAAAYY"]
[Sat Dec 20 10:18:57.933122 2025] [:error] [pid 39577:tid 39598] [client 101.42.46.71:46470] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUYHkbviRnt1rJiSOfzbvAAAANM"]
[Sat Dec 20 17:11:54.077245 2025] [:error] [pid 18807:tid 18830] [client 87.121.84.105:58773] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat Dec 20 21:50:15.480177 2025] [:error] [pid 14286:tid 14312] [client 185.92.25.139:45945] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Dec 20 21:50:16.067322 2025] [:error] [pid 14286:tid 14302] [client 185.92.25.139:45945] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 20 21:50:16.343732 2025] [:error] [pid 14286:tid 14297] [client 185.92.25.139:45945] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUapmJ7rbXIrw6rGSdaXlAAAAUc"]
[Sat Dec 20 21:50:16.987892 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.37:38701] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 20 21:50:17.303913 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.37:38701] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aUapmdoInXJnb96wei98TwAAAok"]
[Sat Dec 20 21:50:17.910091 2025] [:error] [pid 39493:tid 39560] [client 85.203.34.44:48189] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Dec 20 21:50:18.756453 2025] [:error] [pid 39493:tid 39550] [client 85.203.34.44:48189] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Dec 20 21:50:19.077472 2025] [:error] [pid 39493:tid 39567] [client 85.203.34.44:48189] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:50:19.443326 2025] [:error] [pid 39493:tid 39570] [client 85.203.34.44:48189] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Dec 20 21:50:20.068024 2025] [:error] [pid 39493:tid 39564] [client 85.203.34.44:48189] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUapnGhjL2VG_FmIHqAM-QAAAI8"]
[Sat Dec 20 21:50:20.699430 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.17:39255] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Dec 20 21:50:20.988879 2025] [:error] [pid 14286:tid 14292] [client 85.203.34.17:39255] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Dec 20 21:50:21.288793 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.17:39255] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUapnZ7rbXIrw6rGSdaX4QAAAVc"]
[Sat Dec 20 21:50:21.858745 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.4:62507] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUapndoInXJnb96wei98kwAAAog"]
[Sat Dec 20 21:50:22.436440 2025] [:error] [pid 33793:tid 33810] [client 85.203.34.9:52119] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUapnlSicyB0BFmbRMzjaAAAAs8"]
[Sat Dec 20 21:50:23.441989 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.3:61643] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUapn1SicyB0BFmbRMzjdwAAAtY"]
[Sat Dec 20 21:50:24.301928 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.17:46349] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUapoDYMR4qK1N4g7vjgOgAAAko"]
[Sat Dec 20 21:50:25.268005 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.22:59909] [client 85.203.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/templates/natural.php"] [unique_id "aUapobviRnt1rJiSOfx6aAAAAMs"]
[Sat Dec 20 21:50:26.223644 2025] [:error] [pid 39577:tid 39589] [client 85.203.34.27:53855] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Dec 20 21:50:27.359248 2025] [:error] [pid 39577:tid 39588] [client 85.203.34.27:53855] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Dec 20 21:50:27.715066 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.27:53855] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUapo7viRnt1rJiSOfx6jgAAAMc"]
[Sat Dec 20 21:50:28.307770 2025] [:error] [pid 14247:tid 14272] [client 85.203.34.11:22351] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUappCDv9TtKKdJQn9klNgAAARc"]
[Sat Dec 20 21:50:29.179487 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Dec 20 21:50:29.499175 2025] [:error] [pid 33793:tid 33798] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sat Dec 20 21:50:30.023778 2025] [:error] [pid 33793:tid 33811] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Dec 20 21:50:30.374016 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Dec 20 21:50:30.680514 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Dec 20 21:50:31.078654 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sat Dec 20 21:50:31.393857 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Sat Dec 20 21:50:31.686876 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Dec 20 21:50:31.997644 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Sat Dec 20 21:50:32.292627 2025] [:error] [pid 33793:tid 33809] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Dec 20 21:50:32.602226 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Sat Dec 20 21:50:32.897787 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Dec 20 21:50:33.471821 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Dec 20 21:50:33.797756 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Sat Dec 20 21:50:34.090316 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Sat Dec 20 21:50:34.394106 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Dec 20 21:50:34.705819 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sat Dec 20 21:50:35.006601 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Dec 20 21:50:35.309482 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Sat Dec 20 21:50:35.623159 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Dec 20 21:50:35.938074 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sat Dec 20 21:50:36.228082 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Dec 20 21:50:36.537435 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Dec 20 21:50:36.852471 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Dec 20 21:50:37.550036 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Dec 20 21:50:38.151503 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Dec 20 21:50:38.471163 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Dec 20 21:50:38.780992 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Sat Dec 20 21:50:39.094739 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Sat Dec 20 21:50:39.403991 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Dec 20 21:50:39.701875 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Sat Dec 20 21:50:40.044349 2025] [:error] [pid 33793:tid 33798] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Sat Dec 20 21:50:40.362250 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Dec 20 21:50:40.665721 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.4:65393] [client 85.203.34.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.4, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUapsFSicyB0BFmbRMzkCwAAAso"]
[Sat Dec 20 21:50:40.676296 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Dec 20 21:50:41.303954 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Dec 20 21:50:41.605527 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.4:65393] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Dec 20 21:50:41.899787 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.4:65393] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aUapsVSicyB0BFmbRMzkFQAAAsc"]
[Sat Dec 20 21:50:42.467436 2025] [:error] [pid 33687:tid 33710] [client 85.203.34.24:45931] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Sat Dec 20 21:50:42.765691 2025] [:error] [pid 33687:tid 33690] [client 85.203.34.24:45931] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Dec 20 21:50:43.408422 2025] [:error] [pid 33687:tid 33708] [client 85.203.34.24:45931] [client 85.203.34.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploader.php"] [unique_id "aUapszYMR4qK1N4g7vjg3gAAAlI"]
[Sat Dec 20 21:50:43.995855 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Sat Dec 20 21:50:44.273342 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Sat Dec 20 21:50:44.551400 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Sat Dec 20 21:50:44.868477 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sat Dec 20 21:50:45.193981 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Sat Dec 20 21:50:45.479566 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Sat Dec 20 21:50:45.985062 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.50:24815] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Sat Dec 20 21:50:46.589620 2025] [:error] [pid 33749:tid 33768] [client 85.203.34.50:24815] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUapttoInXJnb96wei9-lgAAApE"]
[Sat Dec 20 21:50:47.153816 2025] [:error] [pid 33570:tid 33598] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Sat Dec 20 21:50:47.465820 2025] [:error] [pid 33570:tid 33589] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Sat Dec 20 21:50:49.229462 2025] [:error] [pid 33570:tid 33600] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Dec 20 21:50:49.529053 2025] [:error] [pid 33570:tid 33585] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Sat Dec 20 21:50:49.881042 2025] [:error] [pid 33570:tid 33582] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Sat Dec 20 21:50:50.203504 2025] [:error] [pid 33570:tid 33598] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Sat Dec 20 21:50:50.512976 2025] [:error] [pid 33570:tid 33581] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Sat Dec 20 21:50:51.431937 2025] [:error] [pid 33570:tid 33595] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Sat Dec 20 21:50:51.720565 2025] [:error] [pid 33570:tid 33585] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Sat Dec 20 21:50:52.075085 2025] [:error] [pid 33570:tid 33578] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Sat Dec 20 21:50:52.381330 2025] [:error] [pid 33570:tid 33587] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Sat Dec 20 21:50:52.686851 2025] [:error] [pid 33570:tid 33580] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Sat Dec 20 21:50:52.974439 2025] [:error] [pid 33570:tid 33585] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Sat Dec 20 21:50:53.300183 2025] [:error] [pid 33570:tid 33594] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Sat Dec 20 21:50:53.883357 2025] [:error] [pid 33570:tid 33584] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Sat Dec 20 21:50:54.202478 2025] [:error] [pid 33570:tid 33597] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Sat Dec 20 21:50:54.841486 2025] [:error] [pid 33570:tid 33600] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Sat Dec 20 21:50:55.134908 2025] [:error] [pid 33570:tid 33590] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Sat Dec 20 21:50:55.452109 2025] [:error] [pid 33570:tid 33594] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Sat Dec 20 21:50:56.008524 2025] [:error] [pid 33570:tid 33589] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Dec 20 21:50:56.309923 2025] [:error] [pid 33570:tid 33592] [client 85.203.34.31:43155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Sat Dec 20 21:50:56.598343 2025] [:error] [pid 33570:tid 33583] [client 85.203.34.31:43155] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aUapwITNveA-c6YcSrIg0gAAAcc"]
[Sat Dec 20 21:50:58.054665 2025] [:error] [pid 62124:tid 62141] [client 85.203.34.10:39993] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Sat Dec 20 21:50:58.331963 2025] [:error] [pid 62124:tid 62130] [client 85.203.34.10:39993] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tonant.php"] [unique_id "aUapwls94zPA9ULQOjmR7wAAAAQ"]
[Sat Dec 20 21:50:58.972067 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.21:28773] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tonant.php"] [unique_id "aUapwp7rbXIrw6rGSdaZBgAAAUs"]
[Sat Dec 20 21:50:59.583844 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.50:50515] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Sat Dec 20 21:50:59.885071 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.50:50515] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Sat Dec 20 21:51:00.218165 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.50:50515] [client 85.203.34.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.bak.php"] [unique_id "aUapxNoInXJnb96wei9__QAAAoc"]
[Sat Dec 20 21:51:00.821079 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.41:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Sat Dec 20 21:51:01.132250 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.41:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Sat Dec 20 21:51:01.475560 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.41:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Dec 20 21:51:01.800615 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.41:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Sat Dec 20 21:51:02.109517 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.41:35499] [client 85.203.34.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AK-74.php"] [unique_id "aUapxtoInXJnb96wei-AMwAAAoY"]
[Sat Dec 20 21:51:03.881097 2025] [:error] [pid 39577:tid 39587] [client 85.203.34.18:55465] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Sat Dec 20 21:51:04.189216 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.18:55465] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Sat Dec 20 21:51:04.529901 2025] [:error] [pid 39577:tid 39580] [client 85.203.34.18:55465] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Sat Dec 20 21:51:04.852399 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.18:55465] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Dec 20 21:51:05.198258 2025] [:error] [pid 39577:tid 39593] [client 85.203.34.18:55465] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Sat Dec 20 21:51:05.507709 2025] [:error] [pid 39577:tid 39589] [client 85.203.34.18:55465] [client 85.203.34.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cmd.php"] [unique_id "aUapybviRnt1rJiSOfx8QwAAAMo"]
[Sat Dec 20 21:51:06.080656 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Sat Dec 20 21:51:06.389251 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Sat Dec 20 21:51:06.701146 2025] [:error] [pid 33793:tid 33795] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Sat Dec 20 21:51:07.000034 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Sat Dec 20 21:51:07.306107 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Sat Dec 20 21:51:07.592859 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Sat Dec 20 21:51:07.900708 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Sat Dec 20 21:51:08.181172 2025] [:error] [pid 33793:tid 33804] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Sat Dec 20 21:51:08.502031 2025] [:error] [pid 33793:tid 33810] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Sat Dec 20 21:51:08.801313 2025] [:error] [pid 33793:tid 33795] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Dec 20 21:51:09.310296 2025] [:error] [pid 33793:tid 33811] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Sat Dec 20 21:51:09.622857 2025] [:error] [pid 33793:tid 33809] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Sat Dec 20 21:51:09.911971 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Sat Dec 20 21:51:10.193367 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Dec 20 21:51:10.488992 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Sat Dec 20 21:51:10.783501 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Dec 20 21:51:11.100472 2025] [:error] [pid 33793:tid 33809] [client 85.203.34.16:42905] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Sat Dec 20 21:51:17.421214 2025] [:error] [pid 33793:tid 33807] [client 85.203.34.16:42905] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aUap1VSicyB0BFmbRMzlaAAAAsw"]
[Sat Dec 20 21:51:18.620950 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Sat Dec 20 21:51:21.433026 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Sat Dec 20 21:51:21.748681 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Sat Dec 20 21:51:22.051940 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Sat Dec 20 21:51:23.059070 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Sat Dec 20 21:51:24.957248 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Sat Dec 20 21:51:25.244386 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Dec 20 21:51:25.544917 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Dec 20 21:51:25.845223 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Dec 20 21:51:26.144175 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Dec 20 21:51:26.661862 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.20:54661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Sat Dec 20 21:51:27.294724 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.20:54661] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUap39oInXJnb96wei-C-QAAAoU"]
[Sat Dec 20 21:51:27.857895 2025] [:error] [pid 33687:tid 33712] [client 85.203.34.46:33875] [client 85.203.34.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.34.46, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUap3zYMR4qK1N4g7vjiTAAAAlY"]
[Sat Dec 20 21:51:27.860994 2025] [:error] [pid 33687:tid 33712] [client 85.203.34.46:33875] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Dec 20 21:51:28.137402 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.46:33875] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Dec 20 21:51:28.749852 2025] [:error] [pid 33687:tid 33714] [client 85.203.34.46:33875] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUap4DYMR4qK1N4g7vjiVgAAAlg"]
[Sat Dec 20 21:51:29.597044 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.17:57777] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Sat Dec 20 21:51:31.271944 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.17:57777] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 21:51:31.869160 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.17:57777] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat Dec 20 21:51:32.386627 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.17:57777] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUap5FSicyB0BFmbRMzl8gAAAss"]
[Sat Dec 20 21:51:33.255408 2025] [:error] [pid 33570:tid 33598] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Sat Dec 20 21:51:33.574186 2025] [:error] [pid 33570:tid 33596] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Sat Dec 20 21:51:33.872456 2025] [:error] [pid 33570:tid 33587] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sat Dec 20 21:51:35.093725 2025] [:error] [pid 33570:tid 33578] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Sat Dec 20 21:51:35.379983 2025] [:error] [pid 33570:tid 33585] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 21:51:35.662846 2025] [:error] [pid 33570:tid 33593] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 21:51:35.983423 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.10:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Sat Dec 20 21:51:37.180168 2025] [:error] [pid 33570:tid 33595] [client 85.203.34.10:64409] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aUap6YTNveA-c6YcSrIiSQAAAdM"]
[Sat Dec 20 21:51:37.807593 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.31:20407] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Dec 20 21:51:38.488315 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.31:20407] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUap6toInXJnb96wei-D9QAAApc"]
[Sat Dec 20 21:51:39.084071 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.46:65007] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUap61SicyB0BFmbRMzmRQAAAtY"]
[Sat Dec 20 21:51:39.681224 2025] [:error] [pid 62124:tid 62127] [client 85.203.34.40:65021] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aUap61s94zPA9ULQOjmT2QAAAAE"]
[Sat Dec 20 21:51:40.245006 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.4:49141] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aUap7J7rbXIrw6rGSdaaygAAAUs"]
[Sat Dec 20 21:51:40.804795 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.48:61121] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Sat Dec 20 21:51:41.118643 2025] [:error] [pid 39577:tid 39593] [client 85.203.34.48:61121] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Sat Dec 20 21:51:41.762010 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.48:61121] [client 85.203.34.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.48, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aUap7bviRnt1rJiSOfx-JwAAAMY"]
[Sat Dec 20 21:51:46.952245 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.48:61121] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Dec 20 21:51:47.563526 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.48:61121] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Dec 20 21:51:49.374962 2025] [:error] [pid 39577:tid 39589] [client 85.203.34.48:61121] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUap9bviRnt1rJiSOfx-ogAAAMo"]
[Sat Dec 20 21:51:50.005098 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.16:29637] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Dec 20 21:51:51.144510 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.16:29637] [client 85.203.34.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.16, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUap99oInXJnb96wei-EnAAAAoc"]
[Sat Dec 20 21:51:51.460556 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.16:29637] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Sat Dec 20 21:51:52.092508 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.16:29637] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sat Dec 20 21:51:52.424977 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.16:29637] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Sat Dec 20 21:51:53.053941 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.16:29637] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Dec 20 21:51:53.361290 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.16:29637] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Dec 20 21:51:53.658591 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.16:29637] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aUap-doInXJnb96wei-EwAAAAog"]
[Sat Dec 20 21:51:54.234521 2025] [:error] [pid 33793:tid 33817] [client 185.92.25.139:21055] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aUap-lSicyB0BFmbRMzm8AAAAtY"]
[Sat Dec 20 21:51:54.798843 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Sat Dec 20 21:51:55.114479 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Dec 20 21:51:55.426226 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Dec 20 21:51:55.702908 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Dec 20 21:51:56.295494 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Sat Dec 20 21:51:57.461359 2025] [:error] [pid 33793:tid 33798] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Sat Dec 20 21:52:00.223341 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Sat Dec 20 21:52:00.526722 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Dec 20 21:52:00.976238 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.43:45921] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sat Dec 20 21:52:01.561912 2025] [:error] [pid 33793:tid 33799] [client 85.203.34.43:45921] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUaqAVSicyB0BFmbRMznWAAAAsQ"]
[Sat Dec 20 21:52:03.330817 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.41:21199] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aUaqA9oInXJnb96wei-FXAAAAog"]
[Sat Dec 20 21:52:03.887997 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.7:60333] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Dec 20 21:52:04.204027 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.7:60333] [client 85.203.34.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUaqBFSicyB0BFmbRMzndwAAAsE"]
[Sat Dec 20 21:52:05.345276 2025] [:error] [pid 33687:tid 33690] [client 85.203.34.29:48327] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Sat Dec 20 21:52:05.908858 2025] [:error] [pid 33687:tid 33711] [client 85.203.34.29:48327] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Dec 20 21:52:06.209007 2025] [:error] [pid 33687:tid 33704] [client 85.203.34.29:48327] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUaqBjYMR4qK1N4g7vjj2QAAAk4"]
[Sat Dec 20 21:52:06.785563 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.38:41499] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUaqBp7rbXIrw6rGSdab1gAAAVc"]
[Sat Dec 20 21:52:07.401235 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.31:35163] [client 85.203.34.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aUaqB9oInXJnb96wei-FwwAAAoQ"]
[Sat Dec 20 21:52:07.728971 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.31:35163] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Dec 20 21:52:08.314434 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.31:35163] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aUaqCNoInXJnb96wei-F3wAAAos"]
[Sat Dec 20 21:52:08.905679 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.3:33053] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:52:09.524013 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.3:33053] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Sat Dec 20 21:52:11.221893 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.3:33053] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aUaqC7viRnt1rJiSOfx_aQAAAMY"]
[Sat Dec 20 21:52:11.831630 2025] [:error] [pid 33687:tid 33696] [client 185.92.25.138:43627] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Dec 20 21:52:12.440799 2025] [:error] [pid 33687:tid 33708] [client 185.92.25.138:43627] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aUaqDDYMR4qK1N4g7vjkDAAAAlI"]
[Sat Dec 20 21:52:13.670115 2025] [:error] [pid 39577:tid 39594] [client 85.203.34.22:34861] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Sat Dec 20 21:52:13.962392 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.22:34861] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aUaqDbviRnt1rJiSOfx_ewAAAMY"]
[Sat Dec 20 21:52:15.121343 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.16:20735] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Sat Dec 20 21:52:15.424606 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.16:20735] [client 85.203.34.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.16, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aUaqD7viRnt1rJiSOfx_jwAAAM0"]
[Sat Dec 20 21:52:16.299712 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.16:20735] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aUaqELviRnt1rJiSOfx_ngAAANM"]
[Sat Dec 20 21:52:16.868312 2025] [:error] [pid 14247:tid 14272] [client 85.203.34.18:21001] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUaqECDv9TtKKdJQn9kp_QAAARc"]
[Sat Dec 20 21:52:19.341467 2025] [:error] [pid 39577:tid 39580] [client 85.203.34.1:42609] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sat Dec 20 21:52:20.189928 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.1:42609] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Dec 20 21:52:20.784191 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.1:42609] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Dec 20 21:52:21.068281 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.1:42609] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Sat Dec 20 21:52:21.694950 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.1:42609] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUaqFbviRnt1rJiSOfx_6wAAAMw"]
[Sat Dec 20 21:52:22.840899 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.33:55457] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUaqFlSicyB0BFmbRMzokgAAAss"]
[Sat Dec 20 21:52:23.477787 2025] [:error] [pid 33570:tid 33600] [client 85.203.34.28:20411] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aUaqF4TNveA-c6YcSrIjlAAAAdg"]
[Sat Dec 20 21:52:24.036693 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.36:51423] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aUaqGCaNtwGsyqqVmQELdQAAAwQ"]
[Sat Dec 20 21:52:24.584720 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.31:57603] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUaqGNoInXJnb96wei-HoAAAAoo"]
[Sat Dec 20 21:52:26.474060 2025] [:error] [pid 33570:tid 33600] [client 85.203.34.8:25073] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Sat Dec 20 21:52:26.811587 2025] [:error] [pid 33570:tid 33577] [client 85.203.34.8:25073] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aUaqGoTNveA-c6YcSrIjqwAAAcE"]
[Sat Dec 20 21:52:27.781452 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.17:26641] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Dec 20 21:52:28.132722 2025] [:error] [pid 14286:tid 14305] [client 85.203.34.17:26641] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Sat Dec 20 21:52:28.457055 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.17:26641] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUaqHJ7rbXIrw6rGSdactQAAAVA"]
[Sat Dec 20 21:52:29.116996 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.31:33159] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Dec 20 21:52:29.444391 2025] [:error] [pid 39493:tid 39567] [client 85.203.34.31:33159] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat Dec 20 21:52:29.763567 2025] [:error] [pid 39493:tid 39571] [client 85.203.34.31:33159] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUaqHWhjL2VG_FmIHqASSwAAAJY"]
[Sat Dec 20 21:52:30.356949 2025] [:error] [pid 14247:tid 14271] [client 85.203.34.20:62047] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Sat Dec 20 21:52:30.669795 2025] [:error] [pid 14247:tid 14267] [client 85.203.34.20:62047] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUaqHiDv9TtKKdJQn9kqRwAAARI"]
[Sat Dec 20 21:52:32.144231 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.41:44919] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUaqILviRnt1rJiSOfyAYQAAANI"]
[Sat Dec 20 21:52:32.717792 2025] [:error] [pid 14247:tid 14252] [client 85.203.34.24:59491] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aUaqICDv9TtKKdJQn9kqVAAAAQM"]
[Sat Dec 20 21:52:33.548091 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.45:39499] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUaqITYMR4qK1N4g7vjkyAAAAko"]
[Sat Dec 20 21:52:34.122140 2025] [:error] [pid 14247:tid 14258] [client 85.203.34.31:64787] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 21:52:34.729788 2025] [:error] [pid 14247:tid 14271] [client 85.203.34.31:64787] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Dec 20 21:52:35.019338 2025] [:error] [pid 14247:tid 14268] [client 85.203.34.31:64787] [client 85.203.34.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUaqIyDv9TtKKdJQn9kqbQAAARM"]
[Sat Dec 20 21:52:35.872697 2025] [:error] [pid 14247:tid 14254] [client 85.203.34.31:64787] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aUaqIyDv9TtKKdJQn9kqdwAAAQU"]
[Sat Dec 20 21:52:36.488157 2025] [:error] [pid 33687:tid 33710] [client 85.203.34.21:45617] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUaqJDYMR4qK1N4g7vjk2gAAAlQ"]
[Sat Dec 20 21:52:37.066327 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.38:50055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Dec 20 21:52:37.366402 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.38:50055] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Dec 20 21:52:38.248100 2025] [:error] [pid 14286:tid 14312] [client 85.203.34.38:50055] [client 85.203.34.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aUaqJp7rbXIrw6rGSdadBwAAAVY"]
[Sat Dec 20 21:52:38.846828 2025] [:error] [pid 33844:tid 33867] [client 85.203.34.5:22673] [client 85.203.34.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aUaqJiaNtwGsyqqVmQEL1QAAAxU"]
[Sat Dec 20 21:52:39.760457 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.9:35893] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Sat Dec 20 21:52:40.695655 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.9:35893] [client 85.203.34.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.9, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aUaqKLviRnt1rJiSOfyAsAAAAMY"]
[Sat Dec 20 21:52:41.044836 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.9:35893] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUaqKbviRnt1rJiSOfyAtwAAAMM"]
[Sat Dec 20 21:52:41.698684 2025] [:error] [pid 39493:tid 39552] [client 85.203.34.38:44149] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aUaqKWhjL2VG_FmIHqAS0AAAAIM"]
[Sat Dec 20 21:52:42.371070 2025] [:error] [pid 33687:tid 33699] [client 85.203.34.21:39437] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aUaqKjYMR4qK1N4g7vjlIQAAAkk"]
[Sat Dec 20 21:52:44.072328 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.44:20795] [client 85.203.34.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wander.php"] [unique_id "aUaqLCaNtwGsyqqVmQEMEwAAAwQ"]
[Sat Dec 20 21:52:44.700399 2025] [:error] [pid 33844:tid 33851] [client 85.203.34.41:57613] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sat Dec 20 21:52:45.019633 2025] [:error] [pid 33844:tid 33868] [client 85.203.34.41:57613] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aUaqLSaNtwGsyqqVmQEMHgAAAxY"]
[Sat Dec 20 21:52:45.992110 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.2:24129] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Sat Dec 20 21:52:47.523127 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.2:24129] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 20 21:52:48.421813 2025] [:error] [pid 62124:tid 62133] [client 85.203.34.2:24129] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sat Dec 20 21:52:48.703801 2025] [:error] [pid 62124:tid 62149] [client 85.203.34.2:24129] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUaqMFs94zPA9ULQOjmWqAAAABc"]
[Sat Dec 20 21:52:54.319010 2025] [:error] [pid 14247:tid 14261] [client 85.203.34.29:20631] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Sat Dec 20 21:52:54.909604 2025] [:error] [pid 14247:tid 14260] [client 85.203.34.29:20631] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUaqNiDv9TtKKdJQn9krKgAAAQs"]
[Sat Dec 20 21:52:55.816621 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.26:35025] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Dec 20 21:52:56.698775 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.26:35025] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUaqOJ7rbXIrw6rGSdadbAAAAUQ"]
[Sat Dec 20 21:52:57.561809 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.15:23815] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUaqOdoInXJnb96wei-JhAAAAos"]
[Sat Dec 20 21:52:58.419807 2025] [:error] [pid 62124:tid 62144] [client 85.203.34.9:21103] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUaqOls94zPA9ULQOjmXEQAAABI"]
[Sat Dec 20 21:52:59.358352 2025] [:error] [pid 39493:tid 39550] [client 85.203.34.25:47801] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUaqO2hjL2VG_FmIHqATbAAAAIE"]
[Sat Dec 20 21:53:00.442526 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.29:30157] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUaqPNoInXJnb96wei-JqQAAAoE"]
[Sat Dec 20 21:53:01.821857 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.1:45619] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUaqPZ7rbXIrw6rGSdadmAAAAUc"]
[Sat Dec 20 21:53:02.679410 2025] [:error] [pid 14247:tid 14255] [client 85.203.34.36:48745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Dec 20 21:53:03.274189 2025] [:error] [pid 14247:tid 14262] [client 85.203.34.36:48745] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUaqPyDv9TtKKdJQn9kregAAAQ0"]
[Sat Dec 20 21:53:04.114347 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.47:32513] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Sat Dec 20 21:53:04.422496 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.47:32513] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Sat Dec 20 21:53:04.723557 2025] [:error] [pid 14286:tid 14293] [client 85.203.34.47:32513] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUaqQJ7rbXIrw6rGSdadrAAAAUM"]
[Sat Dec 20 21:53:05.956816 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.19:37025] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUaqQdoInXJnb96wei-J3AAAAo0"]
[Sat Dec 20 21:53:06.671029 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.42:43521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sat Dec 20 21:53:07.271026 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.42:43521] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Dec 20 21:53:07.836313 2025] [:error] [pid 39577:tid 39603] [client 85.203.34.42:43521] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 20 21:53:08.120617 2025] [:error] [pid 39577:tid 39593] [client 85.203.34.42:43521] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUaqRLviRnt1rJiSOfyBnAAAAM4"]
[Sat Dec 20 21:53:09.487420 2025] [:error] [pid 33844:tid 33847] [client 85.203.34.27:53277] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Dec 20 21:53:10.463439 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.27:53277] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sat Dec 20 21:53:10.759343 2025] [:error] [pid 33844:tid 33846] [client 85.203.34.27:53277] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Dec 20 21:53:11.677296 2025] [:error] [pid 33844:tid 33865] [client 85.203.34.27:53277] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Dec 20 21:53:11.961267 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.27:53277] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Sat Dec 20 21:53:13.139995 2025] [:error] [pid 33844:tid 33864] [client 85.203.34.27:53277] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Sat Dec 20 21:53:13.439633 2025] [:error] [pid 33844:tid 33846] [client 85.203.34.27:53277] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aUaqSSaNtwGsyqqVmQENgQAAAwA"]
[Sat Dec 20 21:53:15.098917 2025] [:error] [pid 33844:tid 33862] [client 85.203.34.44:61551] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUaqSyaNtwGsyqqVmQENlgAAAxA"]
[Sat Dec 20 21:53:15.763008 2025] [:error] [pid 14286:tid 14293] [client 85.203.34.24:50669] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Dec 20 21:53:16.084324 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.24:50669] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Dec 20 21:53:16.427205 2025] [:error] [pid 14286:tid 14292] [client 85.203.34.24:50669] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Dec 20 21:53:16.771489 2025] [:error] [pid 14286:tid 14312] [client 85.203.34.24:50669] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUaqTJ7rbXIrw6rGSdaeFgAAAVY"]
[Sat Dec 20 21:53:17.435989 2025] [:error] [pid 33570:tid 33588] [client 85.203.34.3:49409] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUaqTYTNveA-c6YcSrIlRwAAAcw"]
[Sat Dec 20 21:53:18.065959 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.2:51611] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Dec 20 21:53:18.407701 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.2:51611] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aUaqTlSicyB0BFmbRMzqBQAAAtM"]
[Sat Dec 20 21:53:19.101818 2025] [:error] [pid 33793:tid 33795] [client 185.92.25.138:32485] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Sat Dec 20 21:53:19.409087 2025] [:error] [pid 33793:tid 33806] [client 185.92.25.138:32485] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Sat Dec 20 21:53:19.732221 2025] [:error] [pid 33793:tid 33798] [client 185.92.25.138:32485] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Sat Dec 20 21:53:20.306674 2025] [:error] [pid 33793:tid 33811] [client 185.92.25.138:32485] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Dec 20 21:53:20.602264 2025] [:error] [pid 33793:tid 33803] [client 185.92.25.138:32485] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 21:53:20.891657 2025] [:error] [pid 33793:tid 33806] [client 185.92.25.138:32485] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUaqUFSicyB0BFmbRMzqHAAAAss"]
[Sat Dec 20 21:53:21.739623 2025] [:error] [pid 14247:tid 14260] [client 85.203.34.50:38491] [client 85.203.34.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.50, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUaqUSDv9TtKKdJQn9kr7gAAAQs"]
[Sat Dec 20 21:53:22.049128 2025] [:error] [pid 14247:tid 14249] [client 85.203.34.50:38491] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Dec 20 21:53:22.330807 2025] [:error] [pid 14247:tid 14264] [client 85.203.34.50:38491] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUaqUiDv9TtKKdJQn9kr8gAAAQ8"]
[Sat Dec 20 21:53:22.898681 2025] [:error] [pid 14286:tid 14298] [client 85.203.34.46:45343] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aUaqUp7rbXIrw6rGSdaeSQAAAUg"]
[Sat Dec 20 21:53:23.845512 2025] [:error] [pid 14247:tid 14268] [client 85.203.34.37:57459] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:53:24.162444 2025] [:error] [pid 14247:tid 14267] [client 85.203.34.37:57459] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Sat Dec 20 21:53:24.446394 2025] [:error] [pid 14247:tid 14259] [client 85.203.34.37:57459] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aUaqVCDv9TtKKdJQn9kr_AAAAQo"]
[Sat Dec 20 21:53:25.078315 2025] [:error] [pid 33844:tid 33863] [client 85.203.34.14:54973] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Dec 20 21:53:25.372616 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.14:54973] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aUaqVSaNtwGsyqqVmQEOAwAAAwI"]
[Sat Dec 20 21:53:26.376711 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.43:50015] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 20 21:53:26.685064 2025] [:error] [pid 33844:tid 33852] [client 85.203.34.43:50015] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Dec 20 21:53:27.003434 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.43:50015] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php
[Sat Dec 20 21:53:28.597701 2025] [:error] [pid 33844:tid 33866] [client 85.203.34.43:50015] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Sat Dec 20 21:53:28.945785 2025] [:error] [pid 33844:tid 33851] [client 85.203.34.43:50015] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class_api.php
[Sat Dec 20 21:53:29.533094 2025] [:error] [pid 33844:tid 33859] [client 85.203.34.43:50015] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aUaqWSaNtwGsyqqVmQEOPAAAAw0"]
[Sat Dec 20 21:53:30.221313 2025] [:error] [pid 39493:tid 39555] [client 85.203.34.41:34439] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Sat Dec 20 21:53:30.994416 2025] [:error] [pid 39493:tid 39557] [client 85.203.34.41:34439] [client 85.203.34.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zero.php"] [unique_id "aUaqWmhjL2VG_FmIHqAUdQAAAIg"]
[Sat Dec 20 21:53:31.636167 2025] [:error] [pid 33570:tid 33580] [client 85.203.34.11:60797] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Sat Dec 20 21:53:31.940401 2025] [:error] [pid 33570:tid 33576] [client 85.203.34.11:60797] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aUaqW4TNveA-c6YcSrIlpQAAAcA"]
[Sat Dec 20 21:53:32.819980 2025] [:error] [pid 14247:tid 14260] [client 85.203.34.40:63733] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Dec 20 21:53:33.122955 2025] [:error] [pid 14247:tid 14258] [client 85.203.34.40:63733] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Dec 20 21:53:33.457108 2025] [:error] [pid 14247:tid 14254] [client 85.203.34.40:63733] [client 85.203.34.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.40, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUaqXSDv9TtKKdJQn9ksIAAAAQU"]
[Sat Dec 20 21:53:33.465012 2025] [:error] [pid 14247:tid 14254] [client 85.203.34.40:63733] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Dec 20 21:53:34.481114 2025] [:error] [pid 14247:tid 14253] [client 85.203.34.40:63733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Sat Dec 20 21:53:34.805489 2025] [:error] [pid 14247:tid 14268] [client 85.203.34.40:63733] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Dec 20 21:53:35.433005 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.40:63733] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aUaqXyDv9TtKKdJQn9ksLAAAAQE"]
[Sat Dec 20 21:53:36.091725 2025] [:error] [pid 33687:tid 33690] [client 85.203.34.17:57961] [client 85.203.34.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.17, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aUaqYDYMR4qK1N4g7vjmYwAAAkA"]
[Sat Dec 20 21:53:36.417463 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.17:57961] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aUaqYDYMR4qK1N4g7vjmZQAAAkQ"]
[Sat Dec 20 21:53:38.273603 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.34:33129] [client 85.203.34.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/cong.php"] [unique_id "aUaqYrviRnt1rJiSOfyCtAAAAMA"]
[Sat Dec 20 21:53:39.445842 2025] [:error] [pid 39493:tid 39551] [client 85.203.34.47:46965] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Dec 20 21:53:40.573989 2025] [:error] [pid 39493:tid 39550] [client 85.203.34.47:46965] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUaqZGhjL2VG_FmIHqAU1wAAAIE"]
[Sat Dec 20 21:53:41.178505 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.16:43877] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Dec 20 21:53:41.792638 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.16:43877] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aUaqZdoInXJnb96wei-MFAAAAoc"]
[Sat Dec 20 21:53:42.659943 2025] [:error] [pid 14247:tid 14254] [client 85.203.34.27:47059] [client 85.203.34.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.27, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aUaqZiDv9TtKKdJQn9ksRwAAAQU"]
[Sat Dec 20 21:53:43.595675 2025] [:error] [pid 14247:tid 14264] [client 85.203.34.27:47059] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sat Dec 20 21:53:43.910277 2025] [:error] [pid 14247:tid 14256] [client 85.203.34.27:47059] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Sat Dec 20 21:53:44.202206 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.27:47059] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Sat Dec 20 21:53:47.984869 2025] [:error] [pid 14247:tid 14272] [client 85.203.34.27:47059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Sat Dec 20 21:53:48.269725 2025] [:error] [pid 14247:tid 14269] [client 85.203.34.27:47059] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aUaqbCDv9TtKKdJQn9ksVAAAARQ"]
[Sat Dec 20 21:53:49.158452 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.16:37529] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/packed.php"] [unique_id "aUaqbZ7rbXIrw6rGSdafMQAAAUQ"]
[Sat Dec 20 21:53:49.763167 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.4:37247] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 21:53:50.066766 2025] [:error] [pid 33844:tid 33859] [client 85.203.34.4:37247] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Dec 20 21:53:51.029363 2025] [:error] [pid 33844:tid 33864] [client 85.203.34.4:37247] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Dec 20 21:53:51.318100 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.4:37247] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Sat Dec 20 21:53:52.221961 2025] [:error] [pid 33844:tid 33868] [client 85.203.34.4:37247] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aUaqcCaNtwGsyqqVmQEO1wAAAxY"]
[Sat Dec 20 21:53:53.092295 2025] [:error] [pid 33687:tid 33695] [client 85.203.34.17:28839] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUaqcTYMR4qK1N4g7vjmoQAAAkU"]
[Sat Dec 20 21:53:54.021874 2025] [:error] [pid 14286:tid 14300] [client 85.203.34.43:52013] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aUaqcp7rbXIrw6rGSdafkgAAAUo"]
[Sat Dec 20 21:53:54.653874 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.22:27907] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Dec 20 21:53:56.990704 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.22:27907] [client 85.203.34.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.22, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aUaqdNoInXJnb96wei-NQQAAAoQ"]
[Sat Dec 20 21:53:57.294628 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.22:27907] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUaqddoInXJnb96wei-NSQAAApU"]
[Sat Dec 20 21:53:58.795068 2025] [:error] [pid 33687:tid 33701] [client 85.203.34.35:53119] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Sat Dec 20 21:53:59.096096 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.35:53119] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Dec 20 21:53:59.716514 2025] [:error] [pid 33687:tid 33703] [client 85.203.34.35:53119] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUaqdzYMR4qK1N4g7vjm0QAAAk0"]
[Sat Dec 20 21:54:00.323981 2025] [:error] [pid 33687:tid 33704] [client 85.203.34.8:27793] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aUaqeDYMR4qK1N4g7vjm1AAAAk4"]
[Sat Dec 20 21:54:00.941884 2025] [:error] [pid 14286:tid 14310] [client 85.203.34.3:57881] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Sat Dec 20 21:54:02.268972 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.3:57881] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php
[Sat Dec 20 21:54:03.211745 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.3:57881] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dropdown.php
[Sat Dec 20 21:54:03.503829 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.3:57881] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aUaqe57rbXIrw6rGSdagHwAAAUE"]
[Sat Dec 20 21:54:04.124433 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.12:47841] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 21:54:04.451370 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.12:47841] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Sat Dec 20 21:54:05.046723 2025] [:error] [pid 33793:tid 33811] [client 85.203.34.12:47841] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aUaqfVSicyB0BFmbRMzrvAAAAtA"]
[Sat Dec 20 21:54:06.863683 2025] [:error] [pid 33844:tid 33855] [client 85.203.34.37:55243] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Sat Dec 20 21:54:07.528749 2025] [:error] [pid 33844:tid 33863] [client 85.203.34.37:55243] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/blurbs.php
[Sat Dec 20 21:54:08.183093 2025] [:error] [pid 33844:tid 33852] [client 85.203.34.37:55243] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aUaqgCaNtwGsyqqVmQEPXQAAAwY"]
[Sat Dec 20 21:54:10.112461 2025] [:error] [pid 33687:tid 33706] [client 85.203.34.10:23701] [client 85.203.34.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aUaqgjYMR4qK1N4g7vjnGAAAAlA"]
[Sat Dec 20 21:54:11.898369 2025] [:error] [pid 62124:tid 62137] [client 85.203.34.11:64547] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Dec 20 21:54:12.937304 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.11:64547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Dec 20 21:54:13.235812 2025] [:error] [pid 62124:tid 62137] [client 85.203.34.11:64547] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Dec 20 21:54:13.552821 2025] [:error] [pid 62124:tid 62132] [client 85.203.34.11:64547] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Dec 20 21:54:13.878343 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.11:64547] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aUaqhVs94zPA9ULQOjmZ4AAAAA4"]
[Sat Dec 20 21:54:14.786863 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.26:59987] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/doc.php
[Sat Dec 20 21:54:15.115249 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.26:59987] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Sat Dec 20 21:54:16.123362 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.26:59987] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Sat Dec 20 21:54:16.445868 2025] [:error] [pid 33793:tid 33799] [client 85.203.34.26:59987] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUaqiFSicyB0BFmbRMzsAAAAAsQ"]
[Sat Dec 20 21:54:17.142125 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.31:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sat Dec 20 21:54:17.691283 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.31:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Dec 20 21:54:18.337669 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.31:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Dec 20 21:54:19.011360 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.31:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Sat Dec 20 21:54:19.980276 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.31:24753] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/item.php"] [unique_id "aUaqi9oInXJnb96wei-OVgAAAoo"]
[Sat Dec 20 21:54:22.448653 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.21:61711] [client 85.203.34.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.21, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aUaqjtoInXJnb96wei-OdQAAAoc"]
[Sat Dec 20 21:54:22.748734 2025] [:error] [pid 33749:tid 33768] [client 85.203.34.21:61711] [client 85.203.34.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.21, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aUaqjtoInXJnb96wei-OeAAAApE"]
[Sat Dec 20 21:54:23.060667 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.21:61711] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mani.php"] [unique_id "aUaqj9oInXJnb96wei-OfQAAAow"]
[Sat Dec 20 21:54:23.662135 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.4:30663] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Dec 20 21:54:26.356949 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.4:30663] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aUaqklSicyB0BFmbRMzsUgAAAsY"]
[Sat Dec 20 21:54:27.036421 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.47:31987] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Sat Dec 20 21:54:27.388172 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.47:31987] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Sat Dec 20 21:54:27.691405 2025] [:error] [pid 33793:tid 33803] [client 85.203.34.47:31987] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUaqk1SicyB0BFmbRMzsWwAAAsg"]
[Sat Dec 20 21:54:29.945932 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.9:33987] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Sat Dec 20 21:54:30.985905 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.9:33987] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/themes.php
[Sat Dec 20 21:54:31.600662 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.9:33987] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUaql9oInXJnb96wei-O6wAAApY"]
[Sat Dec 20 21:54:32.213422 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.46:62515] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aUaqmLviRnt1rJiSOfyEkgAAAMU"]
[Sat Dec 20 21:54:33.169650 2025] [:error] [pid 39493:tid 39572] [client 85.203.34.1:40567] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Dec 20 21:54:34.083981 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.1:40567] [client 85.203.34.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.1, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-login.php"] [unique_id "aUaqmmhjL2VG_FmIHqAWpwAAAIU"]
[Sat Dec 20 21:54:35.378856 2025] [:error] [pid 39493:tid 39555] [client 85.203.34.1:40567] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aUaqm2hjL2VG_FmIHqAWswAAAIY"]
[Sat Dec 20 21:54:37.087338 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.47:32587] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Dec 20 21:54:37.405398 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.47:32587] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aUaqnbviRnt1rJiSOfyEzQAAAMU"]
[Sat Dec 20 21:54:38.049998 2025] [:error] [pid 39577:tid 39603] [client 85.203.34.24:35011] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUaqnrviRnt1rJiSOfyE1AAAANg"]
[Sat Dec 20 21:54:39.086773 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.27:41687] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUaqn57rbXIrw6rGSdahggAAAVU"]
[Sat Dec 20 21:54:41.317091 2025] [:error] [pid 33844:tid 33852] [client 85.203.34.1:22171] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/parx.php
[Sat Dec 20 21:54:41.984636 2025] [:error] [pid 33844:tid 33847] [client 85.203.34.1:22171] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aUaqoSaNtwGsyqqVmQEQ5gAAAwE"]
[Sat Dec 20 21:54:42.995017 2025] [:error] [pid 62124:tid 62144] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Dec 20 21:54:43.309422 2025] [:error] [pid 62124:tid 62131] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sat Dec 20 21:54:44.631964 2025] [:error] [pid 62124:tid 62144] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Dec 20 21:54:44.980038 2025] [:error] [pid 62124:tid 62128] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Sat Dec 20 21:54:45.313849 2025] [:error] [pid 62124:tid 62130] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Dec 20 21:54:45.673788 2025] [:error] [pid 62124:tid 62145] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Dec 20 21:54:46.348848 2025] [:error] [pid 62124:tid 62144] [client 185.92.25.138:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Dec 20 21:54:47.306169 2025] [:error] [pid 62124:tid 62135] [client 185.92.25.138:25419] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aUaqp1s94zPA9ULQOjma8QAAAAk"]
[Sat Dec 20 21:54:48.252903 2025] [:error] [pid 33687:tid 33702] [client 85.203.34.21:53037] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Sat Dec 20 21:54:48.561390 2025] [:error] [pid 33687:tid 33712] [client 85.203.34.21:53037] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Dec 20 21:54:51.483454 2025] [:error] [pid 33687:tid 33712] [client 85.203.34.21:53037] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aUaqqzYMR4qK1N4g7vjoWQAAAlY"]
[Sat Dec 20 21:54:52.053971 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.49:40415] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Dec 20 21:54:52.351070 2025] [:error] [pid 39577:tid 39581] [client 85.203.34.49:40415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Sat Dec 20 21:54:52.638121 2025] [:error] [pid 39577:tid 39593] [client 85.203.34.49:40415] [client 85.203.34.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upload.php"] [unique_id "aUaqrLviRnt1rJiSOfyFJQAAAM4"]
[Sat Dec 20 21:54:53.606285 2025] [:error] [pid 39493:tid 39559] [client 85.203.34.29:37543] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Sat Dec 20 21:54:53.929263 2025] [:error] [pid 39493:tid 39568] [client 85.203.34.29:37543] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Sat Dec 20 21:54:54.566874 2025] [:error] [pid 39493:tid 39569] [client 85.203.34.29:37543] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aUaqrmhjL2VG_FmIHqAXfwAAAJQ"]
[Sat Dec 20 21:54:56.764646 2025] [:error] [pid 14247:tid 14259] [client 85.203.34.39:39695] [client 85.203.34.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aUaqsCDv9TtKKdJQn9kucQAAAQo"]
[Sat Dec 20 21:54:57.802319 2025] [:error] [pid 33844:tid 33866] [client 85.203.34.39:64477] [client 85.203.34.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aUaqsSaNtwGsyqqVmQERUAAAAxQ"]
[Sat Dec 20 21:54:58.407076 2025] [:error] [pid 33793:tid 33795] [client 85.203.34.46:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Dec 20 21:54:58.717076 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.46:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Sat Dec 20 21:54:58.999168 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.46:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Sat Dec 20 21:54:59.643331 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.46:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Sat Dec 20 21:54:59.950075 2025] [:error] [pid 33793:tid 33803] [client 85.203.34.46:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Sat Dec 20 21:55:00.288219 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.46:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Sat Dec 20 21:55:00.621923 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.46:46989] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aUaqtFSicyB0BFmbRMztpQAAAsY"]
[Sat Dec 20 21:55:01.297380 2025] [:error] [pid 33793:tid 33809] [client 85.203.34.35:62953] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aUaqtVSicyB0BFmbRMztqAAAAs4"]
[Sat Dec 20 21:55:02.607808 2025] [:error] [pid 62124:tid 62129] [client 85.203.34.47:38059] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aUaqtls94zPA9ULQOjmbYAAAAAM"]
[Sat Dec 20 21:55:03.601920 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Dec 20 21:55:03.916391 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Dec 20 21:55:04.267447 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Sat Dec 20 21:55:04.582101 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Sat Dec 20 21:55:04.894478 2025] [:error] [pid 33793:tid 33803] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Dec 20 21:55:05.239745 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Sat Dec 20 21:55:05.548749 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Sat Dec 20 21:55:05.875167 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Dec 20 21:55:06.172153 2025] [:error] [pid 33793:tid 33809] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Sat Dec 20 21:55:06.480163 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Dec 20 21:55:06.791721 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Sat Dec 20 21:55:07.116279 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Sat Dec 20 21:55:07.439826 2025] [:error] [pid 33793:tid 33796] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Sat Dec 20 21:55:07.789229 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Sat Dec 20 21:55:08.107040 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Sat Dec 20 21:55:08.440199 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Sat Dec 20 21:55:08.763474 2025] [:error] [pid 33793:tid 33810] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Dec 20 21:55:09.066457 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Dec 20 21:55:09.379066 2025] [:error] [pid 33793:tid 33798] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Sat Dec 20 21:55:09.691228 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Sat Dec 20 21:55:10.010185 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Sat Dec 20 21:55:10.323429 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Dec 20 21:55:10.654687 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Sat Dec 20 21:55:10.976886 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Sat Dec 20 21:55:11.335624 2025] [:error] [pid 33793:tid 33804] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sat Dec 20 21:55:11.654800 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Dec 20 21:55:11.991282 2025] [:error] [pid 33793:tid 33795] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Dec 20 21:55:12.304560 2025] [:error] [pid 33793:tid 33809] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Dec 20 21:55:12.631474 2025] [:error] [pid 33793:tid 33811] [client 85.203.34.24:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Sat Dec 20 21:55:12.955201 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.24:39615] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aUaqwFSicyB0BFmbRMzt6AAAAss"]
[Sat Dec 20 21:55:13.595821 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Sat Dec 20 21:55:13.907992 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Sat Dec 20 21:55:14.209611 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Sat Dec 20 21:55:14.533006 2025] [:error] [pid 14286:tid 14310] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Sat Dec 20 21:55:14.825379 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Sat Dec 20 21:55:15.125574 2025] [:error] [pid 14286:tid 14300] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Sat Dec 20 21:55:15.421911 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Sat Dec 20 21:55:15.742253 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Sat Dec 20 21:55:16.384139 2025] [:error] [pid 14286:tid 14303] [client 85.203.34.30:59923] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Sat Dec 20 21:55:16.686898 2025] [:error] [pid 14286:tid 14305] [client 85.203.34.30:59923] [client 85.203.34.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aUaqxJ7rbXIrw6rGSdai3gAAAU8"]
[Sat Dec 20 21:55:18.326453 2025] [:error] [pid 14247:tid 14251] [client 85.203.34.3:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Sat Dec 20 21:55:21.748495 2025] [:error] [pid 14247:tid 14252] [client 85.203.34.3:38911] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aUaqySDv9TtKKdJQn9kvKAAAAQM"]
[Sat Dec 20 21:55:22.441119 2025] [:error] [pid 14286:tid 14314] [client 85.203.34.16:31455] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aUaqyp7rbXIrw6rGSdajDAAAAVg"]
[Sat Dec 20 21:55:23.740338 2025] [:error] [pid 33749:tid 33775] [client 85.203.34.1:20357] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aUaqy9oInXJnb96wei-RXQAAApg"]
[Sat Dec 20 21:55:24.663767 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.14:20577] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/repeater.php"] [unique_id "aUaqzFs94zPA9ULQOjmcHAAAAAo"]
[Sat Dec 20 21:55:26.282920 2025] [:error] [pid 33570:tid 33599] [client 85.203.34.46:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php
[Sat Dec 20 21:55:26.605124 2025] [:error] [pid 33570:tid 33591] [client 85.203.34.46:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php
[Sat Dec 20 21:55:27.230323 2025] [:error] [pid 33570:tid 33581] [client 85.203.34.46:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php
[Sat Dec 20 21:55:29.917761 2025] [:error] [pid 33570:tid 33599] [client 85.203.34.46:61491] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aUaq0YTNveA-c6YcSrIougAAAdc"]
[Sat Dec 20 21:55:30.519608 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.34:51129] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aUaq0iDv9TtKKdJQn9kvUQAAAQE"]
[Sat Dec 20 21:55:31.574463 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.45:27025] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/options.php"] [unique_id "aUaq07viRnt1rJiSOfyGVAAAAMQ"]
[Sat Dec 20 21:55:32.210311 2025] [:error] [pid 33687:tid 33695] [client 185.92.25.138:43481] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Sat Dec 20 21:55:32.835380 2025] [:error] [pid 33687:tid 33708] [client 185.92.25.138:43481] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aUaq1DYMR4qK1N4g7vjpdgAAAlI"]
[Sat Dec 20 21:55:33.439510 2025] [:error] [pid 33570:tid 33586] [client 85.203.34.18:34375] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aUaq1YTNveA-c6YcSrIo1QAAAco"]
[Sat Dec 20 21:55:34.675098 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.30:64225] [client 85.203.34.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.30, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/images/wp-login.php"] [unique_id "aUaq1toInXJnb96wei-RoQAAAow"]
[Sat Dec 20 21:55:35.009431 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.30:64225] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Dec 20 21:55:35.957481 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.30:64225] [client 85.203.34.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aUaq19oInXJnb96wei-RpwAAAoY"]
[Sat Dec 20 21:55:36.573178 2025] [:error] [pid 39493:tid 39573] [client 85.203.34.49:33011] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php
[Sat Dec 20 21:55:37.854098 2025] [:error] [pid 39493:tid 39563] [client 85.203.34.49:33011] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aUaq2WhjL2VG_FmIHqAYwQAAAI4"]
[Sat Dec 20 21:55:39.517102 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.18:42115] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aUaq257rbXIrw6rGSdajhgAAAVU"]
[Sat Dec 20 21:55:40.139757 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.40:27695] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/autoload_classmap.php
[Sat Dec 20 21:55:40.463084 2025] [:error] [pid 39493:tid 39564] [client 85.203.34.40:27695] [client 85.203.34.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.40, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aUaq3GhjL2VG_FmIHqAY0AAAAI8"]
[Sat Dec 20 21:55:40.797884 2025] [:error] [pid 39493:tid 39562] [client 85.203.34.40:27695] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Dec 20 21:55:41.121538 2025] [:error] [pid 39493:tid 39572] [client 85.203.34.40:27695] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aUaq3WhjL2VG_FmIHqAY1AAAAJc"]
[Sat Dec 20 21:55:41.719285 2025] [:error] [pid 62124:tid 62134] [client 85.203.34.26:47953] File does not exist: /usr/local/apache/htdocs/suspended-page/indeex.php
[Sat Dec 20 21:55:42.049802 2025] [:error] [pid 62124:tid 62143] [client 85.203.34.26:47953] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Dec 20 21:55:42.949566 2025] [:error] [pid 62124:tid 62138] [client 85.203.34.26:47953] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aUaq3ls94zPA9ULQOjmcwAAAAAw"]
[Sat Dec 20 21:55:43.599410 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Sat Dec 20 21:55:44.219014 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/credits.php
[Sat Dec 20 21:55:44.551950 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-comments.php
[Sat Dec 20 21:55:44.864144 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Sat Dec 20 21:55:45.177337 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Sat Dec 20 21:55:45.478970 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Sat Dec 20 21:55:45.827270 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/load-scripts.php
[Sat Dec 20 21:55:46.156921 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/load-styles.php
[Sat Dec 20 21:55:46.480884 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/options-discussion.php
[Sat Dec 20 21:55:46.827602 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php
[Sat Dec 20 21:55:47.156523 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/options-permalink.php
[Sat Dec 20 21:55:47.482056 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/options-privacy.php
[Sat Dec 20 21:55:47.808090 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Dec 20 21:55:48.124637 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sat Dec 20 21:55:48.460023 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/post-new.php
[Sat Dec 20 21:55:48.801438 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Sat Dec 20 21:55:49.105447 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sat Dec 20 21:55:49.417821 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/site-health.php
[Sat Dec 20 21:55:49.736924 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Sat Dec 20 21:55:50.061818 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Dec 20 21:55:50.398504 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php
[Sat Dec 20 21:55:50.708016 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/user-new.php
[Sat Dec 20 21:55:51.027235 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Sat Dec 20 21:55:51.352446 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/bar.php
[Sat Dec 20 21:55:51.669246 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Dec 20 21:55:51.969349 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Dec 20 21:55:52.298945 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat Dec 20 21:55:52.641400 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Dec 20 21:55:52.999888 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/km.php
[Sat Dec 20 21:55:53.317148 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/LA.php
[Sat Dec 20 21:55:53.650366 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Dec 20 21:55:53.985256 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ldd.php
[Sat Dec 20 21:55:54.328516 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php
[Sat Dec 20 21:55:54.657281 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php
[Sat Dec 20 21:55:55.600410 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:55:56.253722 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Dec 20 21:55:57.554016 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Dec 20 21:55:57.866809 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.33:33679] [client 85.203.34.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.33, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aUaq7doInXJnb96wei-SFgAAAoM"]
[Sat Dec 20 21:55:58.193523 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Sat Dec 20 21:55:59.159035 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.33:33679] [client 85.203.34.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.33, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.tmb/wp-login.php"] [unique_id "aUaq79oInXJnb96wei-SGgAAAo0"]
[Sat Dec 20 21:56:01.566851 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.33:33679] File does not exist: /usr/local/apache/htdocs/suspended-page/FroggBaba.php
[Sat Dec 20 21:56:01.890400 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.33:33679] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aUaq8doInXJnb96wei-SKwAAAog"]
[Sat Dec 20 21:56:03.537789 2025] [:error] [pid 39493:tid 39564] [client 85.203.34.2:41059] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aUaq82hjL2VG_FmIHqAZbgAAAI8"]
[Sat Dec 20 21:56:04.160648 2025] [:error] [pid 33793:tid 33805] [client 85.203.34.13:41561] [client 85.203.34.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aUaq9FSicyB0BFmbRMzvhAAAAso"]
[Sat Dec 20 21:56:04.768780 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.41:62861] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Sat Dec 20 21:56:06.841288 2025] [:error] [pid 39577:tid 39603] [client 85.203.34.41:62861] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Sat Dec 20 21:56:07.171647 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.41:62861] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Sat Dec 20 21:56:08.411426 2025] [:error] [pid 39577:tid 39587] [client 85.203.34.41:62861] [client 85.203.34.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.41, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aUaq-LviRnt1rJiSOfyHqwAAAMg"]
[Sat Dec 20 21:56:08.724496 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.41:62861] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUaq-LviRnt1rJiSOfyHrQAAAMw"]
[Sat Dec 20 21:56:09.679522 2025] [:error] [pid 33687:tid 33705] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/crop.php
[Sat Dec 20 21:56:09.984947 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.31:27075] [client 85.203.34.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUaq-TYMR4qK1N4g7vjqHQAAAko"]
[Sat Dec 20 21:56:10.603187 2025] [:error] [pid 33687:tid 33707] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/gali.php
[Sat Dec 20 21:56:11.533320 2025] [:error] [pid 33687:tid 33704] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Dec 20 21:56:11.852412 2025] [:error] [pid 33687:tid 33706] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/dirs.php
[Sat Dec 20 21:56:12.164700 2025] [:error] [pid 33687:tid 33695] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Sat Dec 20 21:56:12.482141 2025] [:error] [pid 33687:tid 33697] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/malls.php
[Sat Dec 20 21:56:12.800521 2025] [:error] [pid 33687:tid 33707] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/liefs.php
[Sat Dec 20 21:56:13.111930 2025] [:error] [pid 33687:tid 33711] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/uc.php
[Sat Dec 20 21:56:13.457152 2025] [:error] [pid 33687:tid 33712] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Sat Dec 20 21:56:13.778750 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.31:27075] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-dsdd.php
[Sat Dec 20 21:56:15.071561 2025] [:error] [pid 33687:tid 33711] [client 85.203.34.31:27075] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aUaq_zYMR4qK1N4g7vjqRwAAAlU"]
[Sat Dec 20 21:56:15.727174 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Dec 20 21:56:16.034949 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Sat Dec 20 21:56:16.367040 2025] [:error] [pid 39577:tid 39580] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Dec 20 21:56:16.700980 2025] [:error] [pid 39577:tid 39588] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Dec 20 21:56:17.027769 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php
[Sat Dec 20 21:56:17.357913 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Dec 20 21:56:18.004447 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sat Dec 20 21:56:18.356363 2025] [:error] [pid 39577:tid 39599] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Dec 20 21:56:18.699660 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sat Dec 20 21:56:19.046870 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.26:25747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sat Dec 20 21:56:19.402838 2025] [:error] [pid 39577:tid 39594] [client 85.203.34.26:25747] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aUarA7viRnt1rJiSOfyH1QAAAM8"]
[Sat Dec 20 21:56:20.054744 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Dec 20 21:56:20.995332 2025] [:error] [pid 14286:tid 14308] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php
[Sat Dec 20 21:56:21.308862 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Sat Dec 20 21:56:22.259026 2025] [:error] [pid 14286:tid 14310] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Dec 20 21:56:22.560787 2025] [:error] [pid 14286:tid 14305] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sat Dec 20 21:56:22.891336 2025] [:error] [pid 14286:tid 14302] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php
[Sat Dec 20 21:56:23.537223 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php
[Sat Dec 20 21:56:24.185728 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.27:51597] [client 85.203.34.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.27, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUarCJ7rbXIrw6rGSdak1wAAAVc"]
[Sat Dec 20 21:56:24.514935 2025] [:error] [pid 14286:tid 14314] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Dec 20 21:56:25.145578 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Sat Dec 20 21:56:25.477356 2025] [:error] [pid 14286:tid 14310] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Sat Dec 20 21:56:26.132398 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Dec 20 21:56:29.000856 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Dec 20 21:56:29.324012 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.27:51597] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Dec 20 21:56:30.540147 2025] [autoindex:error] [pid 14286:tid 14305] [client 85.203.34.27:51597] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 23:29:39.825812 2025] [:error] [pid 39577:tid 39591] [client 182.44.10.67:58877] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUbA47viRnt1rJiSOfyfoAAAAMw"]
[Sun Dec 21 01:13:57.547928 2025] [:error] [pid 8641:tid 8689] [client 45.88.186.197:58366] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUbZVXE703usYSvQGLRXyQAAAMs"]
[Sun Dec 21 01:13:57.967743 2025] [:error] [pid 8640:tid 8664] [client 45.88.186.197:58530] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUbZVfVclzlEWWhvYtlgWQAAAI4"]
[Sun Dec 21 01:13:58.382474 2025] [:error] [pid 22338:tid 22409] [client 45.88.186.197:58711] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIMtQAAAFg"]
[Sun Dec 21 01:13:58.792728 2025] [:error] [pid 22338:tid 22405] [client 45.88.186.197:58865] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIM1AAAAFQ"]
[Sun Dec 21 01:13:59.210333 2025] [:error] [pid 8751:tid 8753] [client 45.88.186.197:59024] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUbZV2vrnuGjNP7vtDQYBwAAAAA"]
[Sun Dec 21 02:33:09.483127 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 21 02:33:09.799703 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 21 02:33:10.091965 2025] [:error] [pid 22338:tid 22406] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Dec 21 02:33:10.402179 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Dec 21 02:33:10.710822 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Dec 21 02:33:11.025221 2025] [:error] [pid 22338:tid 22400] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Dec 21 02:33:11.338354 2025] [:error] [pid 22338:tid 22404] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Dec 21 02:33:11.897383 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 21 02:33:12.502193 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Dec 21 02:33:13.128383 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Dec 21 02:33:13.442533 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Dec 21 02:33:13.760565 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Dec 21 02:33:14.064326 2025] [:error] [pid 22338:tid 22389] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Dec 21 02:33:14.375477 2025] [:error] [pid 22338:tid 22400] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Dec 21 02:33:14.665003 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Dec 21 02:33:15.210238 2025] [:error] [pid 22338:tid 22407] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Dec 21 02:33:15.520188 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Dec 21 02:33:15.823966 2025] [:error] [pid 22338:tid 22409] [client 31.171.130.139:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Dec 21 02:33:21.902962 2025] [:error] [pid 22338:tid 22392] [client 31.171.130.139:25447] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbr8XGYQSUt-opKpSI5YwAAAEg"]
[Sun Dec 21 02:33:24.549049 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.163:42335] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbr9GvrnuGjNP7vtDRR6AAAABY"]
[Sun Dec 21 02:33:26.114420 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.129:48837] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Dec 21 02:33:27.027767 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.129:48837] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUbr9_VclzlEWWhvYtmCVwAAAI4"]
[Sun Dec 21 02:33:28.258991 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.139:22155] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Dec 21 02:33:28.576781 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.139:22155] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUbr-GvrnuGjNP7vtDRSHwAAABI"]
[Sun Dec 21 02:33:29.523041 2025] [:error] [pid 8641:tid 8702] [client 31.171.130.110:29743] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Dec 21 02:33:31.072329 2025] [:error] [pid 8641:tid 8702] [client 31.171.130.110:29743] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbr-3E703usYSvQGLR6FgAAANQ"]
[Sun Dec 21 02:33:32.321817 2025] [:error] [pid 8642:tid 8710] [client 31.171.130.107:38113] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbr_CJkiik8k41igp0rJgAAAQY"]
[Sun Dec 21 02:33:33.993726 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.111:47037] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbr_fVclzlEWWhvYtmChwAAAJM"]
[Sun Dec 21 02:33:36.883685 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.131:22133] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbsACJkiik8k41igp0rSwAAARE"]
[Sun Dec 21 02:33:37.493448 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.115:48335] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbsAfVclzlEWWhvYtmCnAAAAIk"]
[Sun Dec 21 02:33:38.099608 2025] [:error] [pid 43680:tid 43699] [client 31.171.130.122:38849] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbsAkDkAAJVjNqC6UWzVQAAAU8"]
[Sun Dec 21 02:33:39.100854 2025] [:error] [pid 43680:tid 43688] [client 31.171.130.152:25649] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbsA0DkAAJVjNqC6UWzYwAAAUQ"]
[Sun Dec 21 02:33:39.697264 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.107:49629] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Dec 21 02:33:40.330645 2025] [:error] [pid 22338:tid 22391] [client 31.171.130.107:49629] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUbsBHGYQSUt-opKpSI6BgAAAEc"]
[Sun Dec 21 02:33:41.841251 2025] [:error] [pid 8641:tid 8692] [client 31.171.130.134:41527] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbsBXE703usYSvQGLR6SAAAAM0"]
[Sun Dec 21 02:33:43.762414 2025] [:error] [pid 8751:tid 8754] [client 31.171.130.135:28723] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbsB2vrnuGjNP7vtDRSxAAAAAE"]
[Sun Dec 21 02:33:45.427242 2025] [:error] [pid 8642:tid 8728] [client 31.171.130.131:43265] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Dec 21 02:33:45.737578 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.131:43265] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbsCSJkiik8k41igp0rfwAAAQc"]
[Sun Dec 21 02:33:46.365861 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.154:27089] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Dec 21 02:33:47.556466 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.154:27089] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Dec 21 02:33:48.448804 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.154:27089] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbsDHE703usYSvQGLR6ewAAANc"]
[Sun Dec 21 02:33:49.089065 2025] [:error] [pid 22338:tid 22397] [client 31.171.130.113:26661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Dec 21 02:33:49.435904 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.113:26661] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbsDXGYQSUt-opKpSI6SQAAAEE"]
[Sun Dec 21 02:33:50.126647 2025] [:error] [pid 22338:tid 22395] [client 31.171.130.148:21563] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Dec 21 02:33:50.996245 2025] [:error] [pid 22338:tid 22402] [client 31.171.130.148:21563] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUbsDnGYQSUt-opKpSI6UwAAAFE"]
[Sun Dec 21 02:33:51.916086 2025] [:error] [pid 8642:tid 8701] [client 31.171.130.121:46671] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbsDyJkiik8k41igp0rmAAAAQI"]
[Sun Dec 21 02:33:53.797787 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.110:46663] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Dec 21 02:33:54.095576 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.110:46663] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Dec 21 02:33:54.941878 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.110:46663] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbsEvVclzlEWWhvYtmDTAAAAIU"]
[Sun Dec 21 02:33:57.938613 2025] [:error] [pid 8642:tid 8725] [client 31.171.130.129:20429] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbsFSJkiik8k41igp0rrAAAARQ"]
[Sun Dec 21 02:33:58.828413 2025] [:error] [pid 8642:tid 8699] [client 31.171.130.109:51255] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbsFiJkiik8k41igp0rsAAAAQE"]
[Sun Dec 21 02:34:00.759937 2025] [:error] [pid 8642:tid 8727] [client 31.171.130.108:51611] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbsGCJkiik8k41igp0ruwAAARY"]
[Sun Dec 21 02:34:01.326383 2025] [:error] [pid 22338:tid 22391] [client 31.171.130.139:43417] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbsGXGYQSUt-opKpSI6xwAAAEc"]
[Sun Dec 21 02:34:02.613653 2025] [:error] [pid 8641:tid 8680] [client 31.171.130.113:23099] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Dec 21 02:34:02.926620 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.113:23099] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbsGnE703usYSvQGLR65gAAANc"]
[Sun Dec 21 02:34:03.598398 2025] [:error] [pid 8751:tid 8761] [client 31.171.130.111:48361] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUbsG2vrnuGjNP7vtDRTdQAAAAg"]
[Sun Dec 21 02:34:05.205539 2025] [:error] [pid 8642:tid 8718] [client 31.171.130.160:40513] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUbsHSJkiik8k41igp0r5AAAAQ0"]
[Sun Dec 21 02:34:06.710040 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.156:42973] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Dec 21 02:34:07.340383 2025] [:error] [pid 8642:tid 8721] [client 31.171.130.156:42973] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Dec 21 02:34:08.818649 2025] [:error] [pid 8642:tid 8718] [client 31.171.130.156:42973] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUbsICJkiik8k41igp0sGgAAAQ0"]
[Sun Dec 21 02:34:10.541634 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.135:36437] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUbsIvVclzlEWWhvYtmD_gAAAJM"]
[Sun Dec 21 02:34:10.831519 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.135:36437] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Dec 21 02:34:12.374438 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.135:36437] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Dec 21 02:34:12.687421 2025] [:error] [pid 8640:tid 8667] [client 31.171.130.135:36437] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Dec 21 02:34:14.711988 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.135:36437] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUbsJvVclzlEWWhvYtmEMwAAAIs"]
[Sun Dec 21 02:34:17.489200 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.115:40035] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Dec 21 02:34:17.791707 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.115:40035] [client 31.171.130.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.115, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUbsKXGYQSUt-opKpSI7eAAAAEE"]
[Sun Dec 21 02:34:18.637654 2025] [:error] [pid 22338:tid 22388] [client 31.171.130.115:40035] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUbsKnGYQSUt-opKpSI7hAAAAEQ"]
[Sun Dec 21 02:36:39.795370 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 21 02:36:40.088918 2025] [:error] [pid 8751:tid 8757] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 21 02:36:40.390993 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Dec 21 02:36:40.718261 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Dec 21 02:36:41.039183 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Dec 21 02:36:41.339622 2025] [:error] [pid 8751:tid 8776] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Dec 21 02:36:41.645271 2025] [:error] [pid 8751:tid 8777] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Dec 21 02:36:41.952478 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 21 02:36:42.548962 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Dec 21 02:36:43.163631 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Dec 21 02:36:43.464591 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Dec 21 02:36:43.773671 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Dec 21 02:36:44.095429 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Dec 21 02:36:44.425858 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Dec 21 02:36:44.727246 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Dec 21 02:36:45.025251 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Dec 21 02:36:45.334216 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Dec 21 02:36:45.648319 2025] [:error] [pid 8751:tid 8777] [client 31.171.130.165:51067] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Dec 21 02:36:50.053114 2025] [:error] [pid 8751:tid 8758] [client 31.171.130.165:51067] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbswmvrnuGjNP7vtDRamwAAAAU"]
[Sun Dec 21 02:36:51.830498 2025] [:error] [pid 43680:tid 43692] [client 31.171.130.121:24011] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbsw0DkAAJVjNqC6UW8LQAAAUg"]
[Sun Dec 21 02:36:53.381602 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.149:20063] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Dec 21 02:36:54.574943 2025] [:error] [pid 8642:tid 8724] [client 31.171.130.149:20063] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUbsxiJkiik8k41igp0xqwAAARM"]
[Sun Dec 21 02:36:55.842083 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.135:43457] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Dec 21 02:36:56.150283 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.135:43457] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUbsyHE703usYSvQGLSB4AAAANM"]
[Sun Dec 21 02:36:57.044337 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.148:59759] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Dec 21 02:36:59.083704 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.148:59759] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbsy_VclzlEWWhvYtmIjwAAAI4"]
[Sun Dec 21 02:36:59.971719 2025] [:error] [pid 44515:tid 44518] [client 31.171.130.144:31695] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbsy5ZAdBRP9gwGvJ5LvgAAAYA"]
[Sun Dec 21 02:37:00.578428 2025] [:error] [pid 43680:tid 43688] [client 31.171.130.135:38173] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbszEDkAAJVjNqC6UW8igAAAUQ"]
[Sun Dec 21 02:37:01.351709 2025] [:error] [pid 44515:tid 44539] [client 31.171.130.111:64259] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbszZZAdBRP9gwGvJ5LywAAAZU"]
[Sun Dec 21 02:37:01.956863 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.148:51071] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbszfVclzlEWWhvYtmIpAAAAJA"]
[Sun Dec 21 02:37:02.605474 2025] [:error] [pid 8751:tid 8765] [client 31.171.130.140:38415] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbszmvrnuGjNP7vtDRbFwAAAAw"]
[Sun Dec 21 02:37:03.512536 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.158:33293] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbsz_VclzlEWWhvYtmIrgAAAI8"]
[Sun Dec 21 02:37:04.126517 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.152:62147] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Dec 21 02:37:04.742726 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.152:62147] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUbs0HE703usYSvQGLSCHgAAAM4"]
[Sun Dec 21 02:37:05.941902 2025] [:error] [pid 43680:tid 43701] [client 31.171.130.164:36041] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbs0UDkAAJVjNqC6UW8yQAAAVE"]
[Sun Dec 21 02:37:06.862107 2025] [:error] [pid 44515:tid 44530] [client 31.171.130.107:33009] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbs0pZAdBRP9gwGvJ5MBgAAAYw"]
[Sun Dec 21 02:37:07.738491 2025] [:error] [pid 8751:tid 8756] [client 31.171.130.107:48085] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Dec 21 02:37:08.038510 2025] [:error] [pid 8751:tid 8776] [client 31.171.130.107:48085] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbs1GvrnuGjNP7vtDRbTgAAABc"]
[Sun Dec 21 02:37:08.645883 2025] [:error] [pid 8642:tid 8716] [client 31.171.130.157:21181] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Dec 21 02:37:09.547888 2025] [:error] [pid 8642:tid 8704] [client 31.171.130.157:21181] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Dec 21 02:37:10.481634 2025] [:error] [pid 8642:tid 8714] [client 31.171.130.157:21181] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbs1iJkiik8k41igp0yMwAAAQk"]
[Sun Dec 21 02:37:11.122000 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.165:53499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Dec 21 02:37:11.413270 2025] [:error] [pid 8751:tid 8754] [client 31.171.130.165:53499] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbs12vrnuGjNP7vtDRbdQAAAAE"]
[Sun Dec 21 02:37:12.076565 2025] [:error] [pid 8751:tid 8773] [client 31.171.130.121:59251] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Dec 21 02:37:12.732878 2025] [:error] [pid 8751:tid 8774] [client 31.171.130.121:59251] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUbs2GvrnuGjNP7vtDRbhwAAABU"]
[Sun Dec 21 02:37:13.649417 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.163:31129] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbs2fVclzlEWWhvYtmI8QAAAJA"]
[Sun Dec 21 02:37:14.544419 2025] [:error] [pid 8642:tid 8717] [client 31.171.130.113:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Dec 21 02:37:14.854126 2025] [:error] [pid 8642:tid 8727] [client 31.171.130.113:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Dec 21 02:37:15.464874 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.113:44295] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbs2yJkiik8k41igp0yWgAAAQo"]
[Sun Dec 21 02:37:16.361673 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.146:30779] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbs3HE703usYSvQGLSCWQAAANM"]
[Sun Dec 21 02:37:17.235579 2025] [:error] [pid 22338:tid 22403] [client 31.171.130.141:27485] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbs3XGYQSUt-opKpSJB1QAAAFI"]
[Sun Dec 21 02:37:17.904417 2025] [:error] [pid 8641:tid 8695] [client 31.171.130.111:31657] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbs3XE703usYSvQGLSCXgAAANA"]
[Sun Dec 21 02:37:18.484644 2025] [:error] [pid 8751:tid 8769] [client 31.171.130.154:21293] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbs3mvrnuGjNP7vtDRbuwAAABA"]
[Sun Dec 21 02:37:19.770998 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.113:41851] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Dec 21 02:37:20.342018 2025] [:error] [pid 8640:tid 8654] [client 31.171.130.113:41851] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbs4PVclzlEWWhvYtmJFQAAAIQ"]
[Sun Dec 21 02:37:20.990085 2025] [:error] [pid 8641:tid 8679] [client 31.171.130.146:45699] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUbs4HE703usYSvQGLSCbQAAAME"]
[Sun Dec 21 02:37:21.595446 2025] [:error] [pid 8641:tid 8694] [client 31.171.130.154:39107] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUbs4XE703usYSvQGLSCcQAAAM8"]
[Sun Dec 21 02:37:22.864751 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.123:26573] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Dec 21 02:37:23.491647 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.123:26573] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Dec 21 02:37:25.027589 2025] [:error] [pid 8640:tid 8654] [client 31.171.130.123:26573] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUbs5fVclzlEWWhvYtmJQgAAAIQ"]
[Sun Dec 21 02:37:26.542623 2025] [:error] [pid 8642:tid 8725] [client 31.171.130.160:53387] [client 31.171.130.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.160, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUbs5iJkiik8k41igp0yqgAAARQ"]
[Sun Dec 21 02:37:26.872374 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.160:53387] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Dec 21 02:37:28.371508 2025] [:error] [pid 8642:tid 8701] [client 31.171.130.160:53387] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Dec 21 02:37:28.661373 2025] [:error] [pid 8642:tid 8726] [client 31.171.130.160:53387] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Dec 21 02:37:30.272482 2025] [:error] [pid 8642:tid 8719] [client 31.171.130.160:53387] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUbs6iJkiik8k41igp0y2gAAAQ4"]
[Sun Dec 21 02:37:31.283800 2025] [:error] [pid 43680:tid 43684] [client 31.171.130.162:54459] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Dec 21 02:37:31.833523 2025] [:error] [pid 43680:tid 43692] [client 31.171.130.162:54459] [client 31.171.130.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.162, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUbs60DkAAJVjNqC6UW95AAAAUg"]
[Sun Dec 21 02:37:32.688229 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.162:54459] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUbs7EDkAAJVjNqC6UW99AAAAVI"]
[Sun Dec 21 02:37:34.533404 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.139:36809] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Dec 21 02:37:35.144803 2025] [:error] [pid 8640:tid 8660] [client 31.171.130.139:36809] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Dec 21 02:37:35.740644 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.139:36809] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUbs7_VclzlEWWhvYtmJhgAAAJI"]
[Sun Dec 21 02:37:36.368905 2025] [:error] [pid 8640:tid 8658] [client 31.171.130.123:28055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Dec 21 02:37:37.391588 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.123:28055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Dec 21 02:37:37.990904 2025] [:error] [pid 8640:tid 8671] [client 31.171.130.123:28055] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Dec 21 02:37:38.649948 2025] [:error] [pid 8640:tid 8658] [client 31.171.130.123:28055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Dec 21 02:37:38.977233 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.123:28055] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUbs8vVclzlEWWhvYtmJqQAAAII"]
[Sun Dec 21 02:37:39.577410 2025] [:error] [pid 22338:tid 22400] [client 31.171.130.118:47787] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Dec 21 02:37:39.904063 2025] [:error] [pid 22338:tid 22405] [client 31.171.130.118:47787] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Dec 21 02:37:40.213519 2025] [:error] [pid 22338:tid 22408] [client 31.171.130.118:47787] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUbs9HGYQSUt-opKpSJCqAAAAFc"]
[Sun Dec 21 02:37:42.443460 2025] [:error] [pid 44515:tid 44528] [client 31.171.130.129:42565] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Dec 21 02:37:43.079666 2025] [:error] [pid 44515:tid 44542] [client 31.171.130.129:42565] [client 31.171.130.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.129, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUbs95ZAdBRP9gwGvJ5NkQAAAZg"]
[Sun Dec 21 02:37:43.396654 2025] [:error] [pid 44515:tid 44539] [client 31.171.130.129:42565] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUbs95ZAdBRP9gwGvJ5NlQAAAZU"]
[Sun Dec 21 02:37:47.939996 2025] [:error] [pid 43680:tid 43707] [client 31.171.130.142:47253] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Dec 21 02:37:50.041923 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.142:47253] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Dec 21 02:37:50.322381 2025] [:error] [pid 43680:tid 43704] [client 31.171.130.142:47253] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUbs_kDkAAJVjNqC6UW-5QAAAVQ"]
[Sun Dec 21 02:37:50.918972 2025] [:error] [pid 43680:tid 43707] [client 31.171.130.107:29097] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Dec 21 02:37:51.823991 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.107:29097] [client 31.171.130.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.107, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUbs_0DkAAJVjNqC6UW-_wAAAVM"]
[Sun Dec 21 02:37:52.153187 2025] [:error] [pid 43680:tid 43695] [client 31.171.130.107:29097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Dec 21 02:37:52.467061 2025] [:error] [pid 43680:tid 43687] [client 31.171.130.107:29097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Dec 21 02:37:52.755737 2025] [:error] [pid 43680:tid 43688] [client 31.171.130.107:29097] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Dec 21 02:37:53.043067 2025] [:error] [pid 43680:tid 43701] [client 31.171.130.107:29097] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUbtAUDkAAJVjNqC6UW_EQAAAVE"]
[Sun Dec 21 02:37:53.664955 2025] [:error] [pid 44515:tid 44522] [client 31.171.130.142:44869] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Dec 21 02:37:53.973934 2025] [:error] [pid 44515:tid 44535] [client 31.171.130.142:44869] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aUbtAZZAdBRP9gwGvJ5N5gAAAZE"]
[Sun Dec 21 02:37:54.894148 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.120:43375] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Dec 21 02:37:55.205586 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.120:43375] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbtA3E703usYSvQGLSDdgAAAM4"]
[Sun Dec 21 02:37:56.465434 2025] [:error] [pid 8642:tid 8717] [client 31.171.130.160:29445] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Dec 21 02:37:57.005299 2025] [:error] [pid 8642:tid 8697] [client 31.171.130.160:29445] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUbtBSJkiik8k41igp0ztAAAAQA"]
[Sun Dec 21 02:37:59.286876 2025] [:error] [pid 43680:tid 43704] [client 31.171.130.161:46369] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUbtB0DkAAJVjNqC6UW_RgAAAVQ"]
[Sun Dec 21 02:37:59.933560 2025] [:error] [pid 43680:tid 43696] [client 31.171.130.144:32253] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Dec 21 02:38:00.467044 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.144:32253] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Dec 21 02:38:01.696800 2025] [:error] [pid 43680:tid 43687] [client 31.171.130.144:32253] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUbtCUDkAAJVjNqC6UW_WgAAAUM"]
[Sun Dec 21 02:38:03.090600 2025] [:error] [pid 8751:tid 8761] [client 31.171.130.112:60487] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUbtC2vrnuGjNP7vtDRdSwAAAAg"]
[Sun Dec 21 02:38:04.658718 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.114:30387] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aUbtDHE703usYSvQGLSDxgAAAM4"]
[Sun Dec 21 02:38:05.271255 2025] [:error] [pid 44515:tid 44529] [client 31.171.130.114:33293] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Dec 21 02:38:05.909383 2025] [:error] [pid 44515:tid 44526] [client 31.171.130.114:33293] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Dec 21 02:38:06.201691 2025] [:error] [pid 44515:tid 44525] [client 31.171.130.114:33293] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUbtDpZAdBRP9gwGvJ5OOgAAAYc"]
[Sun Dec 21 02:38:06.821151 2025] [:error] [pid 43680:tid 43685] [client 31.171.130.121:38465] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Dec 21 02:38:07.422192 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.121:38465] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aUbtD0DkAAJVjNqC6UW_lgAAAU4"]
[Sun Dec 21 02:38:09.258490 2025] [:error] [pid 8641:tid 8681] [client 31.171.130.137:26421] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUbtEXE703usYSvQGLSD4QAAAMM"]
[Sun Dec 21 02:38:10.185084 2025] [:error] [pid 44515:tid 44522] [client 31.171.130.108:52615] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Dec 21 02:38:11.372941 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.108:52615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Dec 21 02:38:11.998509 2025] [:error] [pid 44515:tid 44540] [client 31.171.130.108:52615] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Dec 21 02:38:12.316039 2025] [:error] [pid 44515:tid 44531] [client 31.171.130.108:52615] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUbtFJZAdBRP9gwGvJ5OXAAAAY0"]
[Sun Dec 21 02:38:12.924603 2025] [:error] [pid 8642:tid 8701] [client 31.171.130.112:34933] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aUbtFCJkiik8k41igp00FgAAAQI"]
[Sun Dec 21 02:38:13.768653 2025] [:error] [pid 8642:tid 8727] [client 31.171.130.161:25475] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUbtFSJkiik8k41igp00HQAAARY"]
[Sun Dec 21 02:38:14.434506 2025] [:error] [pid 43680:tid 43701] [client 31.171.130.160:60047] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUbtFkDkAAJVjNqC6UW_zQAAAVE"]
[Sun Dec 21 02:38:15.049688 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.108:50485] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Dec 21 02:38:15.370626 2025] [:error] [pid 8641:tid 8703] [client 31.171.130.108:50485] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUbtF3E703usYSvQGLSD_AAAANU"]
[Sun Dec 21 02:38:15.940394 2025] [:error] [pid 22338:tid 22388] [client 31.171.130.122:61721] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUbtF3GYQSUt-opKpSJDeAAAAEQ"]
[Sun Dec 21 02:38:16.835855 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.157:46321] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Dec 21 02:38:17.430734 2025] [:error] [pid 8641:tid 8703] [client 31.171.130.157:46321] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUbtGXE703usYSvQGLSECwAAANU"]
[Sun Dec 21 02:38:18.051649 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.152:34851] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUbtGiJkiik8k41igp00PQAAARE"]
[Sun Dec 21 02:38:18.636273 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.116:55715] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUbtGmvrnuGjNP7vtDRd3gAAAA4"]
[Sun Dec 21 02:38:19.186658 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.116:54081] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUbtG_VclzlEWWhvYtmK4gAAAJM"]
[Sun Dec 21 02:38:20.145435 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.139:43091] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUbtHHE703usYSvQGLSEGQAAAMs"]
[Sun Dec 21 02:38:21.787531 2025] [:error] [pid 8751:tid 8776] [client 31.171.130.155:46885] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUbtHWvrnuGjNP7vtDRd-gAAABc"]
[Sun Dec 21 02:38:22.379986 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.159:40399] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Dec 21 02:38:23.317622 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.159:40399] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Dec 21 02:38:23.857566 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.159:40399] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUbtH_VclzlEWWhvYtmLIgAAAJI"]
[Sun Dec 21 02:38:24.740493 2025] [:error] [pid 8751:tid 8766] [client 31.171.130.161:50313] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Dec 21 02:38:25.040187 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.161:50313] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Dec 21 02:38:27.087582 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.161:50313] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aUbtI2vrnuGjNP7vtDReNwAAAAA"]
[Sun Dec 21 02:38:28.837333 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.151:26553] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUbtJEDkAAJVjNqC6UXAKgAAAVI"]
[Sun Dec 21 02:38:29.436729 2025] [:error] [pid 44515:tid 44542] [client 31.171.130.118:45221] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUbtJZZAdBRP9gwGvJ5OyQAAAZg"]
[Sun Dec 21 02:38:31.339970 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.120:42209] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUbtJ3E703usYSvQGLSEgQAAANc"]
[Sun Dec 21 02:38:33.055250 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.120:34445] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Dec 21 02:38:33.623164 2025] [:error] [pid 8641:tid 8702] [client 31.171.130.120:34445] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Dec 21 02:38:33.933933 2025] [:error] [pid 8641:tid 8685] [client 31.171.130.120:34445] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Dec 21 02:38:34.227723 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.120:34445] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Dec 21 02:38:35.763194 2025] [:error] [pid 8641:tid 8702] [client 31.171.130.120:34445] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUbtK3E703usYSvQGLSEqgAAANQ"]
[Sun Dec 21 02:38:36.413525 2025] [:error] [pid 8641:tid 8680] [client 31.171.130.116:49275] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUbtLHE703usYSvQGLSEsgAAAMI"]
[Sun Dec 21 02:38:37.029878 2025] [:error] [pid 22338:tid 22395] [client 31.171.130.120:64089] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUbtLXGYQSUt-opKpSJD-gAAAEo"]
[Sun Dec 21 02:38:37.642629 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.152:28553] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUbtLSJkiik8k41igp006QAAAQc"]
[Sun Dec 21 02:38:38.255170 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.141:33905] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUbtLnGYQSUt-opKpSJECAAAAEY"]
[Sun Dec 21 02:38:38.844604 2025] [:error] [pid 43680:tid 43686] [client 31.171.130.158:25589] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUbtLkDkAAJVjNqC6UXAfAAAAUI"]
[Sun Dec 21 02:38:40.069584 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.140:29877] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUbtMPVclzlEWWhvYtmL2AAAAIY"]
[Sun Dec 21 02:38:40.675822 2025] [:error] [pid 43680:tid 43691] [client 31.171.130.156:56673] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUbtMEDkAAJVjNqC6UXAjgAAAUc"]
[Sun Dec 21 02:38:41.261953 2025] [:error] [pid 43680:tid 43687] [client 31.171.130.133:29171] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUbtMUDkAAJVjNqC6UXAkwAAAUM"]
[Sun Dec 21 02:38:41.870624 2025] [:error] [pid 8751:tid 8776] [client 31.171.130.156:45357] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUbtMWvrnuGjNP7vtDReswAAABc"]
[Sun Dec 21 02:38:43.441595 2025] [:error] [pid 8641:tid 8678] [client 31.171.130.154:50507] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUbtM3E703usYSvQGLSE5gAAAMA"]
[Sun Dec 21 02:38:44.935569 2025] [:error] [pid 44515:tid 44527] [client 31.171.130.107:28037] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUbtNJZAdBRP9gwGvJ5PeQAAAYk"]
[Sun Dec 21 02:38:45.761791 2025] [:error] [pid 8641:tid 8684] [client 31.171.130.130:61191] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Dec 21 02:38:46.370859 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.130:61191] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUbtNnE703usYSvQGLSE-gAAAMk"]
[Sun Dec 21 02:38:47.890665 2025] [:error] [pid 43680:tid 43700] [client 31.171.130.163:28179] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aUbtN0DkAAJVjNqC6UXAygAAAVA"]
[Sun Dec 21 02:38:49.066588 2025] [:error] [pid 8642:tid 8728] [client 31.171.130.157:64829] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Dec 21 02:38:49.353226 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.157:64829] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUbtOSJkiik8k41igp01RAAAAQo"]
[Sun Dec 21 02:38:51.290109 2025] [:error] [pid 8641:tid 8695] [client 31.171.130.138:58391] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Dec 21 02:38:51.587493 2025] [:error] [pid 8641:tid 8683] [client 31.171.130.138:58391] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Dec 21 02:38:51.931269 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.138:58391] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Dec 21 02:38:53.922882 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.138:58391] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUbtPXE703usYSvQGLSFFQAAANM"]
[Sun Dec 21 02:38:54.816807 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.147:22185] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Dec 21 02:38:55.122605 2025] [:error] [pid 8640:tid 8654] [client 31.171.130.147:22185] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aUbtP_VclzlEWWhvYtmMcAAAAIQ"]
[Sun Dec 21 02:38:56.560125 2025] [:error] [pid 22338:tid 22408] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Dec 21 02:38:56.859609 2025] [:error] [pid 22338:tid 22403] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 21 02:38:57.186041 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Dec 21 02:38:58.973599 2025] [:error] [pid 22338:tid 22402] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Dec 21 02:38:59.276193 2025] [:error] [pid 22338:tid 22392] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Dec 21 02:38:59.893922 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Dec 21 02:39:01.013565 2025] [:error] [pid 22338:tid 22402] [client 31.171.130.131:41655] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Dec 21 02:39:01.584491 2025] [:error] [pid 22338:tid 22395] [client 31.171.130.131:41655] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUbtRXGYQSUt-opKpSJEugAAAEo"]
[Sun Dec 21 02:39:02.171491 2025] [:error] [pid 44515:tid 44539] [client 31.171.130.119:37023] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUbtRpZAdBRP9gwGvJ5QNAAAAZU"]
[Sun Dec 21 02:39:02.745388 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.156:62713] [client 31.171.130.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.156, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUbtRnE703usYSvQGLSFPwAAAMQ"]
[Sun Dec 21 02:39:02.747830 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.156:62713] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 21 02:39:03.294335 2025] [:error] [pid 8641:tid 8703] [client 31.171.130.156:62713] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Dec 21 02:39:03.585717 2025] [:error] [pid 8641:tid 8688] [client 31.171.130.156:62713] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUbtR3E703usYSvQGLSFRwAAAMo"]
[Sun Dec 21 02:39:05.498706 2025] [:error] [pid 8641:tid 8698] [client 31.171.130.146:60779] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Dec 21 02:39:05.785819 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.146:60779] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUbtSXE703usYSvQGLSFUQAAANg"]
[Sun Dec 21 02:39:06.392526 2025] [:error] [pid 22338:tid 22393] [client 31.171.130.148:39809] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUbtSnGYQSUt-opKpSJE4wAAAEk"]
[Sun Dec 21 02:39:08.441587 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.157:22903] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUbtTHE703usYSvQGLSFZwAAANM"]
[Sun Dec 21 02:39:09.080581 2025] [:error] [pid 44515:tid 44540] [client 31.171.130.152:52771] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUbtTZZAdBRP9gwGvJ5QWAAAAZY"]
[Sun Dec 21 02:39:10.592297 2025] [:error] [pid 44515:tid 44525] [client 31.171.130.136:51333] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Dec 21 02:39:11.183443 2025] [:error] [pid 44515:tid 44534] [client 31.171.130.136:51333] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUbtT5ZAdBRP9gwGvJ5QbwAAAZA"]
[Sun Dec 21 02:39:12.351363 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.133:35507] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Dec 21 02:39:12.975009 2025] [:error] [pid 43680:tid 43693] [client 31.171.130.133:35507] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aUbtUEDkAAJVjNqC6UXBiAAAAUk"]
[Sun Dec 21 02:39:13.580982 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.120:32937] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aUbtUZZAdBRP9gwGvJ5QfgAAAY4"]
[Sun Dec 21 02:39:14.503098 2025] [:error] [pid 8641:tid 8686] [client 31.171.130.139:58393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Dec 21 02:39:14.808502 2025] [:error] [pid 8641:tid 8694] [client 31.171.130.139:58393] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUbtUnE703usYSvQGLSFoQAAAM8"]
[Sun Dec 21 02:39:18.725413 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.147:21079] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUbtVvVclzlEWWhvYtmNKwAAAIU"]
[Sun Dec 21 02:39:20.035230 2025] [:error] [pid 8642:tid 8729] [client 31.171.130.138:60167] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Dec 21 02:39:20.369878 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.138:60167] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Dec 21 02:39:20.976644 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.138:60167] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Dec 21 02:39:21.562461 2025] [:error] [pid 8642:tid 8725] [client 31.171.130.138:60167] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aUbtWSJkiik8k41igp02XAAAARQ"]
[Sun Dec 21 02:39:22.186963 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.149:42993] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUbtWmvrnuGjNP7vtDRgLAAAABY"]
[Sun Dec 21 02:39:24.017930 2025] [:error] [pid 44515:tid 44529] [client 31.171.130.146:60849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Dec 21 02:39:24.319628 2025] [:error] [pid 44515:tid 44539] [client 31.171.130.146:60849] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aUbtXJZAdBRP9gwGvJ5Q-wAAAZU"]
[Sun Dec 21 02:39:25.160910 2025] [:error] [pid 43680:tid 43691] [client 31.171.130.146:60387] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUbtXUDkAAJVjNqC6UXB2AAAAUc"]
[Sun Dec 21 02:39:25.815149 2025] [:error] [pid 8641:tid 8684] [client 31.171.130.113:28719] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUbtXXE703usYSvQGLSGCgAAAMY"]
[Sun Dec 21 02:39:27.641691 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.112:64919] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Dec 21 02:39:27.962208 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.112:64919] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUbtX0DkAAJVjNqC6UXB8gAAAVM"]
[Sun Dec 21 02:39:28.857396 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.132:37429] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUbtYEDkAAJVjNqC6UXB-wAAAU4"]
[Sun Dec 21 02:39:29.483697 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.134:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Dec 21 02:39:29.821192 2025] [:error] [pid 22338:tid 22392] [client 31.171.130.134:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Dec 21 02:39:30.492995 2025] [:error] [pid 22338:tid 22384] [client 31.171.130.134:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Dec 21 02:39:31.994755 2025] [:error] [pid 22338:tid 22395] [client 31.171.130.134:61179] [client 31.171.130.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.134, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aUbtY3GYQSUt-opKpSJFzwAAAEo"]
[Sun Dec 21 02:39:32.905110 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.134:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Dec 21 02:39:33.217801 2025] [:error] [pid 22338:tid 22402] [client 31.171.130.134:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Dec 21 02:39:33.533823 2025] [:error] [pid 22338:tid 22400] [client 31.171.130.134:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Dec 21 02:39:34.179558 2025] [:error] [pid 22338:tid 22406] [client 31.171.130.134:61179] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aUbtZnGYQSUt-opKpSJF4QAAAFU"]
[Sun Dec 21 02:39:34.752058 2025] [:error] [pid 43680:tid 43707] [client 31.171.130.112:27143] [client 31.171.130.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.112, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUbtZkDkAAJVjNqC6UXCHQAAAVc"]
[Sun Dec 21 02:39:35.680448 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Dec 21 02:39:36.008852 2025] [:error] [pid 43680:tid 43707] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Dec 21 02:39:36.632165 2025] [:error] [pid 43680:tid 43685] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Dec 21 02:39:37.235156 2025] [:error] [pid 43680:tid 43686] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Dec 21 02:39:38.402774 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Dec 21 02:39:40.552750 2025] [:error] [pid 43680:tid 43684] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Dec 21 02:39:40.856435 2025] [:error] [pid 43680:tid 43697] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sun Dec 21 02:39:42.536605 2025] [:error] [pid 43680:tid 43684] [client 31.171.130.112:27143] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Dec 21 02:39:43.110716 2025] [:error] [pid 43680:tid 43701] [client 31.171.130.112:27143] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aUbtb0DkAAJVjNqC6UXCdQAAAVE"]
[Sun Dec 21 02:39:44.425449 2025] [:error] [pid 22338:tid 22409] [client 31.171.130.151:51163] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Dec 21 02:39:44.806848 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.151:51163] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUbtcHGYQSUt-opKpSJGFgAAAEI"]
[Sun Dec 21 02:39:45.713560 2025] [:error] [pid 8642:tid 8706] [client 31.171.130.145:42129] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Dec 21 02:39:46.028324 2025] [:error] [pid 8642:tid 8720] [client 31.171.130.145:42129] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUbtciJkiik8k41igp02-gAAAQ8"]
[Sun Dec 21 02:39:47.486158 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.158:36367] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Dec 21 02:39:48.106531 2025] [:error] [pid 43680:tid 43696] [client 31.171.130.158:36367] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Dec 21 02:39:48.685148 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.158:36367] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Dec 21 02:39:51.305369 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.158:36367] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Dec 21 02:39:51.911209 2025] [:error] [pid 43680:tid 43690] [client 31.171.130.158:36367] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUbtd0DkAAJVjNqC6UXCtgAAAUY"]
[Sun Dec 21 02:39:53.578812 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.165:32621] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sun Dec 21 02:39:53.883169 2025] [:error] [pid 43680:tid 43687] [client 31.171.130.165:32621] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Dec 21 02:39:54.223479 2025] [:error] [pid 43680:tid 43696] [client 31.171.130.165:32621] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUbtekDkAAJVjNqC6UXCywAAAUw"]
[Sun Dec 21 02:39:55.185507 2025] [:error] [pid 44515:tid 44533] [client 31.171.130.160:56947] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUbte5ZAdBRP9gwGvJ5SVwAAAY8"]
[Sun Dec 21 02:39:56.055747 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.151:21211] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Dec 21 02:39:56.971473 2025] [:error] [pid 8642:tid 8726] [client 31.171.130.151:21211] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Dec 21 02:39:57.279391 2025] [:error] [pid 8642:tid 8716] [client 31.171.130.151:21211] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Dec 21 02:39:57.573340 2025] [:error] [pid 8642:tid 8725] [client 31.171.130.151:21211] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUbtfSJkiik8k41igp03cQAAARQ"]
[Sun Dec 21 02:39:58.477608 2025] [:error] [pid 8642:tid 8701] [client 31.171.130.163:22701] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUbtfiJkiik8k41igp03dQAAAQI"]
[Sun Dec 21 02:40:00.611702 2025] [:error] [pid 44515:tid 44541] [client 31.171.130.110:51611] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sun Dec 21 02:40:01.569093 2025] [:error] [pid 44515:tid 44521] [client 31.171.130.110:51611] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUbtgZZAdBRP9gwGvJ5SqgAAAYM"]
[Sun Dec 21 02:40:02.496837 2025] [:error] [pid 22338:tid 22397] [client 31.171.130.158:43995] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aUbtgnGYQSUt-opKpSJGVQAAAEw"]
[Sun Dec 21 02:40:03.703174 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.130:60551] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Dec 21 02:40:04.276155 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.130:60551] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Dec 21 02:40:04.597512 2025] [:error] [pid 8751:tid 8766] [client 31.171.130.130:60551] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUbthGvrnuGjNP7vtDRhiAAAAA0"]
[Sun Dec 21 02:40:05.564784 2025] [:error] [pid 8641:tid 8678] [client 31.171.130.133:32657] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Dec 21 02:40:05.868207 2025] [:error] [pid 8641:tid 8705] [client 31.171.130.133:32657] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sun Dec 21 02:40:06.963956 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.133:32657] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Dec 21 02:40:07.908060 2025] [:error] [pid 8641:tid 8705] [client 31.171.130.133:32657] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUbth3E703usYSvQGLSHZgAAANY"]
[Sun Dec 21 02:40:08.495536 2025] [:error] [pid 8641:tid 8688] [client 31.171.130.115:26105] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Dec 21 02:40:09.425999 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.115:26105] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUbtiXE703usYSvQGLSHcQAAAMQ"]
[Sun Dec 21 02:40:10.341358 2025] [:error] [pid 8642:tid 8721] [client 31.171.130.134:65123] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sun Dec 21 02:40:11.492041 2025] [:error] [pid 8642:tid 8713] [client 31.171.130.134:65123] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sun Dec 21 02:40:11.818756 2025] [:error] [pid 8642:tid 8721] [client 31.171.130.134:65123] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Dec 21 02:40:12.670518 2025] [:error] [pid 8642:tid 8706] [client 31.171.130.134:65123] [client 31.171.130.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.134, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUbtjCJkiik8k41igp034QAAAQQ"]
[Sun Dec 21 02:40:14.321584 2025] [:error] [pid 8642:tid 8728] [client 31.171.130.134:65123] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUbtjiJkiik8k41igp039AAAARc"]
[Sun Dec 21 02:40:14.939707 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.160:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sun Dec 21 02:40:15.227774 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.160:60795] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUbtj2vrnuGjNP7vtDRhswAAAAA"]
[Sun Dec 21 02:40:15.837163 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.109:54731] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Dec 21 02:40:16.946770 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.109:54731] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Dec 21 02:40:17.841137 2025] [:error] [pid 8640:tid 8663] [client 31.171.130.109:54731] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUbtkfVclzlEWWhvYtmO0AAAAI0"]
[Sun Dec 21 02:40:18.762887 2025] [:error] [pid 8640:tid 8671] [client 31.171.130.136:44365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Dec 21 02:40:19.320744 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.136:44365] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Dec 21 02:40:19.940474 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.136:44365] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUbtk_VclzlEWWhvYtmO3gAAAIU"]
[Sun Dec 21 02:40:20.912757 2025] [:error] [pid 8642:tid 8708] [client 31.171.130.138:56033] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUbtlCJkiik8k41igp04IQAAAQU"]
[Sun Dec 21 02:40:21.525821 2025] [:error] [pid 22338:tid 22405] [client 31.171.130.149:48681] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sun Dec 21 02:40:21.833656 2025] [:error] [pid 22338:tid 22388] [client 31.171.130.149:48681] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Dec 21 02:40:22.457580 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.149:48681] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUbtlnGYQSUt-opKpSJG9AAAAFA"]
[Sun Dec 21 02:40:24.188665 2025] [:error] [pid 8641:tid 8685] [client 31.171.130.154:25949] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sun Dec 21 02:40:24.816512 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.154:25949] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sun Dec 21 02:40:25.117506 2025] [:error] [pid 8641:tid 8698] [client 31.171.130.154:25949] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUbtmXE703usYSvQGLSH4gAAANI"]
[Sun Dec 21 02:40:26.002373 2025] [:error] [pid 8751:tid 8768] [client 31.171.130.157:26859] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aUbtmmvrnuGjNP7vtDRh8AAAAA8"]
[Sun Dec 21 02:40:26.605498 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.160:55135] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUbtmvVclzlEWWhvYtmO_wAAAJI"]
[Sun Dec 21 02:40:27.539859 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.136:46511] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUbtm_VclzlEWWhvYtmPBAAAAII"]
[Sun Dec 21 02:40:28.134032 2025] [:error] [pid 22338:tid 22387] [client 31.171.130.155:40031] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUbtnHGYQSUt-opKpSJHJAAAAEM"]
[Sun Dec 21 02:40:28.709418 2025] [:error] [pid 44515:tid 44526] [client 31.171.130.136:57711] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUbtnJZAdBRP9gwGvJ5TwQAAAYg"]
[Sun Dec 21 02:40:30.423064 2025] [:error] [pid 44515:tid 44522] [client 31.171.130.164:34299] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUbtnpZAdBRP9gwGvJ5TzQAAAYQ"]
[Sun Dec 21 02:40:31.613351 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.137:39023] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUbtn_VclzlEWWhvYtmPFwAAAIE"]
[Sun Dec 21 02:40:32.252802 2025] [:error] [pid 43680:tid 43688] [client 31.171.130.145:52787] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUbtoEDkAAJVjNqC6UXDjwAAAUQ"]
[Sun Dec 21 02:40:33.850883 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.140:60433] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUbtoWvrnuGjNP7vtDRiIAAAAAY"]
[Sun Dec 21 02:40:35.303031 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.143:23943] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUbto3GYQSUt-opKpSJHYAAAAEE"]
[Sun Dec 21 02:40:37.523442 2025] [:error] [pid 8641:tid 8695] [client 31.171.130.115:27869] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aUbtpXE703usYSvQGLSIQwAAANA"]
[Sun Dec 21 02:40:38.115384 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.134:23963] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Dec 21 02:40:39.322679 2025] [:error] [pid 8641:tid 8703] [client 31.171.130.134:23963] [client 31.171.130.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.134, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUbtp3E703usYSvQGLSIWAAAANU"]
[Sun Dec 21 02:40:41.402635 2025] [:error] [pid 8641:tid 8695] [client 31.171.130.134:23963] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUbtqXE703usYSvQGLSIdQAAANA"]
[Sun Dec 21 02:40:42.015606 2025] [:error] [pid 8751:tid 8765] [client 31.171.130.165:46429] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUbtqmvrnuGjNP7vtDRiUgAAAAw"]
[Sun Dec 21 02:40:43.498818 2025] [:error] [pid 8641:tid 8694] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Dec 21 02:40:43.818123 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sun Dec 21 02:40:45.066769 2025] [:error] [pid 8641:tid 8692] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Dec 21 02:40:45.383996 2025] [:error] [pid 8641:tid 8688] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Dec 21 02:40:46.639625 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Dec 21 02:40:46.943039 2025] [:error] [pid 8641:tid 8695] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Dec 21 02:40:47.258327 2025] [:error] [pid 8641:tid 8683] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Dec 21 02:40:47.561524 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.136:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sun Dec 21 02:40:47.859690 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.136:57435] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUbtr3E703usYSvQGLSIxgAAANE"]
[Sun Dec 21 02:40:48.469402 2025] [:error] [pid 44515:tid 44533] [client 31.171.130.120:46771] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUbtsJZAdBRP9gwGvJ5UwQAAAY8"]
[Sun Dec 21 02:40:49.116670 2025] [:error] [pid 8642:tid 8716] [client 31.171.130.163:48981] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUbtsSJkiik8k41igp044wAAAQs"]
[Sun Dec 21 02:40:50.044591 2025] [:error] [pid 8641:tid 8702] [client 31.171.130.133:56493] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Dec 21 02:40:50.349823 2025] [:error] [pid 8641:tid 8678] [client 31.171.130.133:56493] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sun Dec 21 02:40:50.949364 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.133:56493] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Dec 21 02:40:53.154917 2025] [:error] [pid 8641:tid 8698] [client 31.171.130.133:56493] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUbttXE703usYSvQGLSI7wAAANI"]
[Sun Dec 21 02:40:53.780677 2025] [:error] [pid 8642:tid 8719] [client 31.171.130.164:30419] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUbttSJkiik8k41igp05EwAAAQ4"]
[Sun Dec 21 02:40:54.399136 2025] [:error] [pid 44515:tid 44520] [client 31.171.130.108:48129] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUbttpZAdBRP9gwGvJ5VCQAAAYI"]
[Sun Dec 21 02:40:56.199054 2025] [:error] [pid 44515:tid 44523] [client 31.171.130.112:59657] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUbtuJZAdBRP9gwGvJ5VJgAAAYU"]
[Sun Dec 21 02:40:57.118217 2025] [:error] [pid 44515:tid 44536] [client 31.171.130.121:51061] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUbtuZZAdBRP9gwGvJ5VNAAAAZI"]
[Sun Dec 21 02:40:58.326620 2025] [:error] [pid 22338:tid 22391] [client 31.171.130.110:65075] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUbtunGYQSUt-opKpSJIOAAAAEc"]
[Sun Dec 21 02:41:04.153803 2025] [:error] [pid 8640:tid 8658] [client 31.171.130.159:54997] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aUbtwPVclzlEWWhvYtmPjQAAAIg"]
[Sun Dec 21 02:41:04.761243 2025] [:error] [pid 8640:tid 8672] [client 31.171.130.114:62875] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sun Dec 21 02:41:05.372801 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.114:62875] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aUbtwfVclzlEWWhvYtmPkwAAAIU"]
[Sun Dec 21 02:41:06.782212 2025] [:error] [pid 8751:tid 8754] [client 31.171.130.143:22529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Dec 21 02:41:07.770195 2025] [:error] [pid 8751:tid 8777] [client 31.171.130.143:22529] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Dec 21 02:41:08.342301 2025] [:error] [pid 8751:tid 8774] [client 31.171.130.143:22529] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUbtxGvrnuGjNP7vtDRi_AAAABU"]
[Sun Dec 21 02:41:09.579810 2025] [:error] [pid 43680:tid 43685] [client 31.171.130.118:63925] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUbtxUDkAAJVjNqC6UXERwAAAUE"]
[Sun Dec 21 02:41:11.824410 2025] [:error] [pid 8641:tid 8692] [client 31.171.130.159:47823] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUbtx3E703usYSvQGLSJbAAAAM0"]
[Sun Dec 21 02:41:14.266967 2025] [:error] [pid 8642:tid 8724] [client 31.171.130.151:48995] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUbtyiJkiik8k41igp05oAAAARM"]
[Sun Dec 21 02:41:16.179959 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.119:61269] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Dec 21 02:41:16.503708 2025] [:error] [pid 22338:tid 22388] [client 31.171.130.119:61269] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUbtzHGYQSUt-opKpSJIsQAAAEQ"]
[Sun Dec 21 02:41:17.118663 2025] [:error] [pid 8641:tid 8683] [client 31.171.130.158:43879] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUbtzXE703usYSvQGLSJhAAAAMU"]
[Sun Dec 21 02:41:19.520760 2025] [:error] [pid 8641:tid 8692] [client 31.171.130.115:50989] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUbtz3E703usYSvQGLSJmgAAAM0"]
[Sun Dec 21 02:41:20.193925 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.121:29051] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Dec 21 02:41:21.433249 2025] [:error] [pid 8751:tid 8764] [client 31.171.130.121:29051] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Dec 21 02:41:21.732788 2025] [:error] [pid 8751:tid 8769] [client 31.171.130.121:29051] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUbt0WvrnuGjNP7vtDRjfQAAABA"]
[Sun Dec 21 02:41:23.028043 2025] [:error] [pid 8640:tid 8654] [client 31.171.130.114:24145] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Dec 21 02:41:23.920446 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.114:24145] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUbt0_VclzlEWWhvYtmPxwAAAIs"]
[Sun Dec 21 02:41:24.549599 2025] [:error] [pid 44515:tid 44530] [client 31.171.130.114:23049] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUbt1JZAdBRP9gwGvJ5WQgAAAYw"]
[Sun Dec 21 02:41:25.777076 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.161:44689] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUbt1fVclzlEWWhvYtmPzwAAAII"]
[Sun Dec 21 02:41:27.384605 2025] [:error] [pid 43680:tid 43691] [client 31.171.130.122:28361] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aUbt10DkAAJVjNqC6UXEkwAAAUc"]
[Sun Dec 21 02:41:27.964776 2025] [:error] [pid 8642:tid 8714] [client 31.171.130.151:28775] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aUbt1yJkiik8k41igp056AAAAQk"]
[Sun Dec 21 02:41:28.879861 2025] [:error] [pid 44515:tid 44534] [client 31.171.130.142:25767] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sun Dec 21 02:41:30.562632 2025] [:error] [pid 44515:tid 44535] [client 31.171.130.142:25767] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aUbt2pZAdBRP9gwGvJ5WaAAAAZE"]
[Sun Dec 21 02:41:32.292673 2025] [:error] [pid 8642:tid 8717] [client 31.171.130.142:52651] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aUbt3CJkiik8k41igp06BAAAAQw"]
[Sun Dec 21 02:41:32.912721 2025] [:error] [pid 8640:tid 8667] [client 31.171.130.119:27049] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aUbt3PVclzlEWWhvYtmP5wAAAJE"]
[Sun Dec 21 02:41:33.834151 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.133:35695] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Dec 21 02:41:34.159924 2025] [:error] [pid 8751:tid 8777] [client 31.171.130.133:35695] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aUbt3mvrnuGjNP7vtDRj4QAAABg"]
[Sun Dec 21 02:41:35.057708 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.161:45577] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aUbt3_VclzlEWWhvYtmP6wAAAJA"]
[Sun Dec 21 02:41:37.202566 2025] [:error] [pid 8751:tid 8764] [client 31.171.130.118:54915] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aUbt4WvrnuGjNP7vtDRj-gAAAAs"]
[Sun Dec 21 02:41:38.209886 2025] [:error] [pid 44515:tid 44525] [client 31.171.130.134:61259] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sun Dec 21 02:41:38.531607 2025] [:error] [pid 44515:tid 44519] [client 31.171.130.134:61259] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aUbt4pZAdBRP9gwGvJ5WrAAAAYE"]
[Sun Dec 21 02:41:41.283599 2025] [:error] [pid 44515:tid 44519] [client 31.171.130.146:36611] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aUbt5ZZAdBRP9gwGvJ5WwQAAAYE"]
[Sun Dec 21 02:41:42.171875 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.165:55515] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aUbt5pZAdBRP9gwGvJ5WyQAAAY4"]
[Sun Dec 21 02:41:43.052819 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.118:37735] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aUbt5_VclzlEWWhvYtmP_AAAAII"]
[Sun Dec 21 02:41:43.967330 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.151:21487] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aUbt53E703usYSvQGLSKJQAAANE"]
[Sun Dec 21 02:41:44.697596 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.148:37275] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aUbt6HGYQSUt-opKpSJJXgAAAE0"]
[Sun Dec 21 02:41:47.503935 2025] [:error] [pid 8751:tid 8768] [client 31.171.130.160:37865] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUbt62vrnuGjNP7vtDRkSgAAAA8"]
[Sun Dec 21 02:41:50.438587 2025] [:error] [pid 22338:tid 22387] [client 31.171.130.110:62651] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aUbt7nGYQSUt-opKpSJJfgAAAEM"]
[Sun Dec 21 02:41:53.011189 2025] [:error] [pid 8641:tid 8684] [client 31.171.130.131:65509] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Dec 21 02:41:53.349685 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.131:65509] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aUbt8XE703usYSvQGLSKUgAAANE"]
[Sun Dec 21 02:41:56.000565 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.144:36289] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aUbt82vrnuGjNP7vtDRkngAAABE"]
[Sun Dec 21 02:41:56.638227 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.122:28319] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sun Dec 21 02:41:58.647546 2025] [:error] [pid 8640:tid 8672] [client 31.171.130.122:28319] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aUbt9vVclzlEWWhvYtmQMwAAAJY"]
[Sun Dec 21 02:41:59.602658 2025] [:error] [pid 43680:tid 43689] [client 31.171.130.149:55149] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aUbt90DkAAJVjNqC6UXFbQAAAUU"]
[Sun Dec 21 02:42:00.550497 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.112:33965] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aUbt-HE703usYSvQGLSKbgAAANc"]
[Sun Dec 21 02:42:01.891043 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.140:30293] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUbt-XE703usYSvQGLSKeAAAANM"]
[Sun Dec 21 02:42:05.368564 2025] [:error] [pid 44515:tid 44539] [client 31.171.130.164:46147] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aUbt_ZZAdBRP9gwGvJ5XcQAAAZU"]
[Sun Dec 21 02:42:05.985123 2025] [:error] [pid 44515:tid 44536] [client 31.171.130.152:45139] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aUbt_ZZAdBRP9gwGvJ5XeQAAAZI"]
[Sun Dec 21 02:42:07.710563 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.144:64097] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aUbt_0DkAAJVjNqC6UXFyAAAAUo"]
[Sun Dec 21 02:42:09.319150 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.111:42857] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUbuAXGYQSUt-opKpSJJ6AAAAE0"]
[Sun Dec 21 02:42:10.550192 2025] [:error] [pid 44515:tid 44535] [client 31.171.130.107:36945] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aUbuApZAdBRP9gwGvJ5XnAAAAZE"]
[Sun Dec 21 02:42:11.162021 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.148:26915] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aUbuA0DkAAJVjNqC6UXF6QAAAUo"]
[Sun Dec 21 02:42:11.770644 2025] [:error] [pid 8642:tid 8706] [client 31.171.130.160:61499] [client 31.171.130.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.160, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUbuAyJkiik8k41igp068gAAAQQ"]
[Sun Dec 21 02:42:11.774503 2025] [:error] [pid 8642:tid 8706] [client 31.171.130.160:61499] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Dec 21 02:42:12.073096 2025] [:error] [pid 8642:tid 8717] [client 31.171.130.160:61499] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aUbuBCJkiik8k41igp068wAAAQw"]
[Sun Dec 21 02:42:13.570592 2025] [:error] [pid 43680:tid 43686] [client 31.171.130.151:35611] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Dec 21 02:42:13.872870 2025] [:error] [pid 43680:tid 43691] [client 31.171.130.151:35611] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUbuBUDkAAJVjNqC6UXF_AAAAUc"]
[Sun Dec 21 02:42:14.448694 2025] [:error] [pid 44515:tid 44533] [client 31.171.130.156:44307] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aUbuBpZAdBRP9gwGvJ5XtAAAAY8"]
[Sun Dec 21 02:42:15.058832 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.136:51089] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sun Dec 21 02:42:19.417521 2025] [:error] [pid 8640:tid 8663] [client 31.171.130.136:51089] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aUbuC_VclzlEWWhvYtmQjQAAAI0"]
[Sun Dec 21 02:42:21.027604 2025] [:error] [pid 44515:tid 44519] [client 31.171.130.113:23925] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aUbuDZZAdBRP9gwGvJ5X2QAAAYE"]
[Sun Dec 21 02:42:22.457997 2025] [:error] [pid 8751:tid 8757] [client 31.171.130.149:32247] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aUbuDmvrnuGjNP7vtDRlZAAAAAQ"]
[Sun Dec 21 02:42:23.142937 2025] [:error] [pid 8751:tid 8756] [client 31.171.130.150:29931] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aUbuD2vrnuGjNP7vtDRlbAAAAAM"]
[Sun Dec 21 02:42:23.742307 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.119:38709] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Dec 21 02:42:24.039749 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.119:38709] [client 31.171.130.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.119, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUbuEGvrnuGjNP7vtDRldgAAABY"]
[Sun Dec 21 02:42:24.860798 2025] [:error] [pid 8751:tid 8768] [client 31.171.130.119:38709] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aUbuEGvrnuGjNP7vtDRlfwAAAA8"]
[Sun Dec 21 02:42:27.120779 2025] [:error] [pid 44515:tid 44531] [client 31.171.130.110:28803] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aUbuE5ZAdBRP9gwGvJ5YCQAAAY0"]
[Sun Dec 21 02:42:27.799335 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.146:23853] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Dec 21 02:42:28.134817 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.146:23853] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aUbuFHE703usYSvQGLSLLgAAANg"]
[Sun Dec 21 02:42:28.768638 2025] [:error] [pid 8640:tid 8670] [client 31.171.130.165:54817] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aUbuFPVclzlEWWhvYtmQsQAAAJQ"]
[Sun Dec 21 02:42:29.396818 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.157:24085] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Dec 21 02:42:30.520938 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.157:24085] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aUbuFvVclzlEWWhvYtmQyAAAAJA"]
[Sun Dec 21 02:42:32.256322 2025] [:error] [pid 22338:tid 22405] [client 31.171.130.159:27589] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUbuGHGYQSUt-opKpSJKcgAAAFQ"]
[Sun Dec 21 05:30:35.095268 2025] [:error] [pid 20674:tid 20698] [client 43.153.104.196:45698] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUcVe9hSbhHOCK6TAw8ScgAAABQ"]
[Sun Dec 21 05:50:33.644258 2025] [:error] [pid 20675:tid 20716] [client 180.110.203.108:41590] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUcaKbyUvZnd3bHSR3YKZgAAAEo"]
[Sun Dec 21 06:44:00.217673 2025] [:error] [pid 20675:tid 20717] [client 103.65.236.149:61992] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aUcmsLyUvZnd3bHSR3Yc7QAAAEs"]
[Sun Dec 21 06:44:00.752885 2025] [:error] [pid 12191:tid 12204] [client 103.65.236.149:52360] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aUcmsAM0m463UZmqdiAAyAAAAQs"]
[Sun Dec 21 07:54:22.013658 2025] [:error] [pid 20674:tid 20687] [client 185.223.152.203:46209] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUc3LthSbhHOCK6TAw8xBgAAAAk"]
[Sun Dec 21 07:54:22.017519 2025] [:error] [pid 20674:tid 20687] [client 185.223.152.203:46209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 21 11:55:04.643094 2025] [:error] [pid 16016:tid 16019] [client 24.77.74.230:10156] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUdvmMHQ_KQh3iINaCMDRAAAAUE"]
[Sun Dec 21 11:55:04.651738 2025] [:error] [pid 16016:tid 16019] [client 24.77.74.230:10156] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 21 11:56:46.741650 2025] [:error] [pid 12191:tid 12193] [client 45.169.255.149:6872] [client 45.169.255.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.169.255.149, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUdv_gM0m463UZmqdiBQ-wAAAQA"]
[Sun Dec 21 11:56:46.745183 2025] [:error] [pid 12191:tid 12193] [client 45.169.255.149:6872] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 21 12:07:43.172857 2025] [:error] [pid 16016:tid 16018] [client 182.42.105.85:33282] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUdyj8HQ_KQh3iINaCMKCQAAAUA"]
[Sun Dec 21 15:07:31.432097 2025] [:error] [pid 20675:tid 20730] [client 155.94.150.21:64674] [client 155.94.150.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new"] [unique_id "aUecs7yUvZnd3bHSR3Z-WAAAAFg"]
[Sun Dec 21 20:26:30.761398 2025] [:error] [pid 59070:tid 59145] [client 165.227.108.154:41522] [client 165.227.108.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aUfndn3dhXne9KX1kgI0fAAAAJE"]
[Sun Dec 21 22:38:46.885279 2025] [:error] [pid 59068:tid 59109] [client 4.194.32.180:37863] [client 4.194.32.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUgGdhmLyLqWUlrjwyewxwAAAEg"]
[Sun Dec 21 22:38:55.164807 2025] [:error] [pid 59158:tid 59180] [client 4.194.32.180:37852] [client 4.194.32.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUgGf47NvyNF8ab5VgVm3QAAANQ"]
[Sun Dec 21 22:39:00.402372 2025] [:error] [pid 59068:tid 59120] [client 4.194.32.180:37854] [client 4.194.32.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUgGhBmLyLqWUlrjwyew1AAAAFM"]
[Mon Dec 22 01:12:13.122278 2025] [:error] [pid 45308:tid 45360] [client 106.54.62.156:57840] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUgqbWQKrTzAeGeriX3KywAAAJA"]
[Mon Dec 22 01:50:13.028119 2025] [:error] [pid 45306:tid 45329] [client 157.245.3.60:57950] [client 157.245.3.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aUgzVdsL27CzxZxVWqQ1KAAAAE0"]
[Mon Dec 22 07:37:29.044376 2025] [:error] [pid 58079:tid 58130] [client 52.13.171.147:60030] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiEuXxLB7WYaNS5A7jaDwAAAFE"]
[Mon Dec 22 07:37:29.045380 2025] [:error] [pid 33643:tid 33664] [client 52.13.171.147:54468] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEuUoNwyN4xVhAvNOM_gAAApI"]
[Mon Dec 22 07:37:29.450194 2025] [:error] [pid 33440:tid 33442] [client 52.13.171.147:57261] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiEuZOsUWKqgxu6QTR3dgAAAQA"]
[Mon Dec 22 07:37:29.839427 2025] [:error] [pid 58172:tid 58196] [client 52.13.171.147:61153] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEueSVKDT5jWOcnSUIsAAAANY"]
[Mon Dec 22 10:20:12.704751 2025] [:error] [pid 33471:tid 33498] [client 2.58.56.27:63807] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiq3L5BeNE7regJ7izFgwAAAVg"]
[Mon Dec 22 10:20:12.707321 2025] [:error] [pid 33440:tid 33448] [client 2.58.56.27:63806] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3JOsUWKqgxu6QTSVfgAAAQY"], referer: www.google.com
[Mon Dec 22 10:20:12.715375 2025] [:error] [pid 58078:tid 58106] [client 2.58.56.27:60052] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3JWKg9Bf8njHlB6luQAAABc"], referer: www.google.com
[Mon Dec 22 10:20:12.722938 2025] [:error] [pid 58078:tid 58088] [client 2.58.56.27:60901] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Dec 22 10:20:13.004429 2025] [:error] [pid 33472:tid 33520] [client 2.58.56.27:63809] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ruqddhqe.php"] [unique_id "aUiq3Z5p2WQpPIK8HAlR4gAAAZM"], referer: www.google.com
[Mon Dec 22 10:20:13.049028 2025] [:error] [pid 58078:tid 58092] [client 2.58.56.27:60901] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiq3ZWKg9Bf8njHlB6lvgAAAAk"]
[Mon Dec 22 10:20:13.335197 2025] [:error] [pid 33440:tid 33463] [client 2.58.56.27:55297] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3ZOsUWKqgxu6QTSViQAAARU"], referer: www.google.com
[Mon Dec 22 10:20:13.351987 2025] [:error] [pid 58079:tid 58128] [client 2.58.56.27:55300] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3XxLB7WYaNS5A7j3qwAAAE8"], referer: www.google.com
[Mon Dec 22 10:20:13.731843 2025] [:error] [pid 33565:tid 33611] [client 2.58.56.27:50611] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ruqddhqe.php"] [unique_id "aUiq3dOWX69q8T0m_yKfCQAAAlE"], referer: www.google.com
[Mon Dec 22 10:20:13.742726 2025] [:error] [pid 33565:tid 33617] [client 2.58.56.27:61513] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiq3dOWX69q8T0m_yKfCgAAAlc"]
[Mon Dec 22 10:20:14.009329 2025] [:error] [pid 58078:tid 58085] [client 2.58.56.27:61796] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3pWKg9Bf8njHlB6l0AAAAAI"], referer: www.google.com
[Mon Dec 22 10:20:14.026651 2025] [:error] [pid 33564:tid 33584] [client 2.58.56.27:57840] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3gSHeG6oLmMnKY4GXwAAAhE"], referer: www.google.com
[Mon Dec 22 10:20:14.341811 2025] [:error] [pid 58078:tid 58102] [client 2.58.56.27:50895] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ruqddhqe.php"] [unique_id "aUiq3pWKg9Bf8njHlB6l1wAAABM"], referer: www.google.com
[Mon Dec 22 10:20:14.345547 2025] [:error] [pid 33643:tid 33661] [client 2.58.56.27:51560] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiq3koNwyN4xVhAvNOm2gAAAo8"]
[Mon Dec 22 10:20:14.565145 2025] [:error] [pid 33565:tid 33611] [client 2.58.56.27:54294] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3tOWX69q8T0m_yKfMQAAAlE"], referer: www.google.com
[Mon Dec 22 10:20:14.580700 2025] [:error] [pid 33643:tid 33658] [client 2.58.56.27:50611] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3koNwyN4xVhAvNOm3wAAAow"], referer: www.google.com
[Mon Dec 22 10:20:15.036566 2025] [:error] [pid 58079:tid 58133] [client 2.58.56.27:62354] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ruqddhqe.php"] [unique_id "aUiq33xLB7WYaNS5A7j3ywAAAFQ"], referer: www.google.com
[Mon Dec 22 10:20:15.044145 2025] [:error] [pid 33643:tid 33647] [client 2.58.56.27:54195] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUiq30oNwyN4xVhAvNOm5QAAAoE"]
[Mon Dec 22 10:20:15.362107 2025] [:error] [pid 33564:tid 33576] [client 2.58.56.27:59091] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3wSHeG6oLmMnKY4GfgAAAgk"], referer: www.google.com
[Mon Dec 22 10:20:15.450841 2025] [:error] [pid 33472:tid 33503] [client 2.58.56.27:54126] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq355p2WQpPIK8HAlSDQAAAYI"], referer: www.google.com
[Mon Dec 22 10:20:15.987013 2025] [:error] [pid 33535:tid 33545] [client 2.58.56.27:59016] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ruqddhqe.php"] [unique_id "aUiq32OCI8D9Xtn-n7QcbAAAAcg"], referer: www.google.com
[Mon Dec 22 10:20:17.291850 2025] [:error] [pid 33535:tid 33554] [client 2.58.56.27:64187] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4WOCI8D9Xtn-n7QcjwAAAdE"], referer: www.google.com
[Mon Dec 22 10:20:17.454135 2025] [:error] [pid 33471:tid 33487] [client 2.58.56.27:49638] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4b5BeNE7regJ7izF2QAAAU0"], referer: www.google.com
[Mon Dec 22 10:20:19.215022 2025] [:error] [pid 33471:tid 33496] [client 2.58.56.27:53752] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq475BeNE7regJ7izGFwAAAVY"], referer: www.google.com
[Mon Dec 22 10:20:19.291649 2025] [:error] [pid 33472:tid 33502] [client 2.58.56.27:63383] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq455p2WQpPIK8HAlSXwAAAYE"], referer: www.google.com
[Mon Dec 22 10:20:20.543701 2025] [:error] [pid 33643:tid 33660] [client 2.58.56.27:51554] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5EoNwyN4xVhAvNOnkgAAAo4"], referer: www.google.com
[Mon Dec 22 10:20:20.716490 2025] [:error] [pid 33643:tid 33658] [client 2.58.56.27:53116] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5EoNwyN4xVhAvNOnlgAAAow"], referer: www.google.com
[Mon Dec 22 10:20:21.835568 2025] [:error] [pid 58172:tid 58176] [client 2.58.56.27:54900] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5eSVKDT5jWOcnSUmFQAAAMI"], referer: www.google.com
[Mon Dec 22 10:20:22.004878 2025] [:error] [pid 33565:tid 33615] [client 2.58.56.27:54859] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5tOWX69q8T0m_yKf0AAAAlU"], referer: www.google.com
[Mon Dec 22 10:20:23.069701 2025] [:error] [pid 33535:tid 33538] [client 2.58.56.27:63799] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq52OCI8D9Xtn-n7QdLgAAAcE"], referer: www.google.com
[Mon Dec 22 10:20:23.253689 2025] [:error] [pid 58078:tid 58090] [client 2.58.56.27:60400] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq55WKg9Bf8njHlB6msgAAAAc"], referer: www.google.com
[Mon Dec 22 11:53:35.210499 2025] [:error] [pid 33440:tid 33463] [client 104.28.246.112:43897] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aUjAv5OsUWKqgxu6QTSyogAAARU"]
[Mon Dec 22 14:36:20.425289 2025] [:error] [pid 33472:tid 33508] [client 120.28.214.153:49991] [client 120.28.214.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.214.153, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUjm5J5p2WQpPIK8HAnAQAAAAYc"]
[Mon Dec 22 14:36:20.428818 2025] [:error] [pid 33472:tid 33508] [client 120.28.214.153:49991] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 22 14:37:59.655004 2025] [:error] [pid 58078:tid 58104] [client 189.37.75.154:41909] [client 189.37.75.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.75.154, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUjnR5WKg9Bf8njHlB7V4wAAABU"]
[Mon Dec 22 14:37:59.659913 2025] [:error] [pid 58078:tid 58104] [client 189.37.75.154:41909] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 22 19:28:20.313203 2025] [:error] [pid 56155:tid 56223] [client 139.59.137.183:53016] [client 139.59.137.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.137.183, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUkrVGG8a3wQucsuN67kogAAA4E"]
[Mon Dec 22 19:28:20.317011 2025] [:error] [pid 56155:tid 56223] [client 139.59.137.183:53016] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 22 19:28:23.757516 2025] [:error] [pid 56155:tid 56242] [client 139.59.137.183:53016] [client 139.59.137.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUkrV2G8a3wQucsuN67krAAAA5Q"]
[Mon Dec 22 19:28:24.301689 2025] [:error] [pid 33564:tid 33587] [client 139.59.137.183:55183] [client 139.59.137.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUkrWASHeG6oLmMnKY6wpAAAAhQ"]
[Mon Dec 22 19:28:24.861966 2025] [:error] [pid 56044:tid 56054] [client 139.59.137.183:55462] [client 139.59.137.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUkrWO60uUaieriJqP1eogAAAIY"]
[Mon Dec 22 19:28:25.400886 2025] [:error] [pid 33440:tid 33449] [client 139.59.137.183:55677] [client 139.59.137.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUkrWZOsUWKqgxu6QTQi4gAAAQc"]
[Mon Dec 22 20:55:33.637503 2025] [:error] [pid 58172:tid 58185] [client 103.65.236.153:56328] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aUk_xeSVKDT5jWOcnSX1kgAAAMs"]
[Tue Dec 23 00:30:46.267376 2025] [:error] [pid 40269:tid 40340] [client 176.65.151.213:59267] File does not exist: /usr/local/apache/htdocs/suspended-page/accesson.php
[Tue Dec 23 02:48:54.731746 2025] [:error] [pid 40268:tid 40320] [client 195.24.236.147:56657] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUmSlpWtCyS5tdJAiFx1xwAAANI"]
[Tue Dec 23 02:48:55.374608 2025] [:error] [pid 40269:tid 40349] [client 195.24.236.147:56804] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUmSly06Z11fTcfdsqQC3AAAARQ"]
[Tue Dec 23 02:48:56.013577 2025] [:error] [pid 40361:tid 40364] [client 195.24.236.147:56924] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUmSmOxiDEK95vL2EDr5KQAAAEE"]
[Tue Dec 23 02:48:56.690983 2025] [:error] [pid 12110:tid 12121] [client 195.24.236.147:57055] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUmSmAYatzD_WebWpOrrfQAAAIk"]
[Tue Dec 23 02:48:57.342473 2025] [:error] [pid 40269:tid 40345] [client 195.24.236.147:57225] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUmSmS06Z11fTcfdsqQDFQAAARA"]
[Tue Dec 23 04:04:02.958840 2025] [:error] [pid 5289:tid 5292] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Dec 23 04:04:03.128466 2025] [:error] [pid 5289:tid 5307] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue Dec 23 04:04:03.439161 2025] [:error] [pid 5289:tid 5312] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue Dec 23 04:04:03.607725 2025] [:error] [pid 5289:tid 5295] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Dec 23 04:04:03.775093 2025] [:error] [pid 5289:tid 5308] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Dec 23 04:04:04.437376 2025] [:error] [pid 5289:tid 5300] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 23 04:04:05.046745 2025] [:error] [pid 5289:tid 5311] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue Dec 23 04:04:05.212670 2025] [:error] [pid 5289:tid 5302] [client 4.214.0.127:17133] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Dec 23 04:04:05.354383 2025] [:error] [pid 5289:tid 5315] [client 4.214.0.127:17133] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aUmkNcJTXVyr8NW9AtCTwgAAANg"]
[Tue Dec 23 04:04:06.453736 2025] [:error] [pid 5185:tid 5241] [client 4.214.0.127:17143] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aUmkNln7IfAByLj7pOLGGgAAAFI"]
[Tue Dec 23 04:04:07.725106 2025] [:error] [pid 5186:tid 5257] [client 4.214.0.127:17037] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aUmkN4RQiGeZalhMjeyDhAAAAIc"]
[Tue Dec 23 04:04:10.463979 2025] [:error] [pid 5186:tid 5250] [client 4.214.0.127:17053] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aUmkOoRQiGeZalhMjeyDjwAAAIA"]
[Tue Dec 23 04:04:11.490458 2025] [:error] [pid 5185:tid 5244] [client 4.214.0.127:17109] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUmkO1n7IfAByLj7pOLGHwAAAFU"]
[Tue Dec 23 04:04:13.590961 2025] [:error] [pid 5185:tid 5238] [client 4.214.0.127:17040] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUmkPVn7IfAByLj7pOLGJAAAAE8"]
[Tue Dec 23 04:04:15.155478 2025] [:error] [pid 5184:tid 5209] [client 4.214.0.127:17054] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUmkP4Z0U1sayvz9y-vvCwAAABI"]
[Tue Dec 23 04:04:17.102021 2025] [:error] [pid 5289:tid 5315] [client 4.214.0.127:17147] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUmkQcJTXVyr8NW9AtCT2AAAANg"]
[Tue Dec 23 04:04:18.898322 2025] [:error] [pid 5289:tid 5312] [client 4.214.0.127:17135] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUmkQsJTXVyr8NW9AtCT4AAAANU"]
[Tue Dec 23 04:04:21.891388 2025] [:error] [pid 5289:tid 5297] [client 4.214.0.127:17110] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUmkRcJTXVyr8NW9AtCT6AAAAMY"]
[Tue Dec 23 04:04:24.221849 2025] [:error] [pid 5289:tid 5312] [client 4.214.0.127:17024] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUmkSMJTXVyr8NW9AtCT6QAAANU"]
[Tue Dec 23 04:04:25.037481 2025] [:error] [pid 5184:tid 5215] [client 4.214.0.127:17030] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aUmkSYZ0U1sayvz9y-vvFAAAABc"]
[Tue Dec 23 04:04:26.322753 2025] [:error] [pid 5186:tid 5270] [client 4.214.0.127:17112] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUmkSoRQiGeZalhMjeyDvAAAAJQ"]
[Tue Dec 23 04:04:27.594909 2025] [:error] [pid 5186:tid 5256] [client 4.214.0.127:17045] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUmkS4RQiGeZalhMjeyDvwAAAIY"]
[Tue Dec 23 04:04:28.580370 2025] [:error] [pid 5289:tid 5307] [client 4.214.0.127:17146] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUmkTMJTXVyr8NW9AtCT9gAAANA"]
[Tue Dec 23 04:04:29.458436 2025] [:error] [pid 5289:tid 5305] [client 4.214.0.127:17114] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUmkTcJTXVyr8NW9AtCT-gAAAM4"]
[Tue Dec 23 04:04:30.134644 2025] [:error] [pid 5289:tid 5292] [client 4.214.0.127:17116] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUmkTsJTXVyr8NW9AtCT_gAAAME"]
[Tue Dec 23 04:04:31.609578 2025] [:error] [pid 5186:tid 5253] [client 4.214.0.127:17121] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUmkT4RQiGeZalhMjeyDxQAAAIM"]
[Tue Dec 23 04:04:32.260960 2025] [:error] [pid 5186:tid 5262] [client 4.214.0.127:17131] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUmkUIRQiGeZalhMjeyDyAAAAIw"]
[Tue Dec 23 04:04:33.454424 2025] [:error] [pid 5289:tid 5304] [client 4.214.0.127:17113] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUmkUcJTXVyr8NW9AtCUCQAAAM0"]
[Tue Dec 23 04:04:34.848769 2025] [:error] [pid 5289:tid 5298] [client 4.214.0.127:17103] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUmkUsJTXVyr8NW9AtCUDQAAAMc"]
[Tue Dec 23 04:04:35.935789 2025] [:error] [pid 5184:tid 5196] [client 4.214.0.127:17033] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUmkU4Z0U1sayvz9y-vvGAAAAAU"]
[Tue Dec 23 04:04:36.865146 2025] [:error] [pid 5289:tid 5299] [client 4.214.0.127:17126] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUmkVMJTXVyr8NW9AtCUEAAAAMg"]
[Tue Dec 23 04:04:39.699420 2025] [:error] [pid 5185:tid 5225] [client 4.214.0.127:17027] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUmkV1n7IfAByLj7pOLGSgAAAEI"]
[Tue Dec 23 04:04:40.916633 2025] [:error] [pid 5289:tid 5312] [client 4.214.0.127:17129] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUmkWMJTXVyr8NW9AtCUFAAAANU"]
[Tue Dec 23 04:04:42.281062 2025] [:error] [pid 5184:tid 5193] [client 4.214.0.127:17120] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUmkWoZ0U1sayvz9y-vvKgAAAAI"]
[Tue Dec 23 04:04:43.056824 2025] [:error] [pid 5186:tid 5272] [client 4.214.0.127:17124] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUmkW4RQiGeZalhMjeyD0wAAAJY"]
[Tue Dec 23 04:04:43.879297 2025] [:error] [pid 5185:tid 5235] [client 4.214.0.127:17104] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aUmkW1n7IfAByLj7pOLGTgAAAEw"]
[Tue Dec 23 04:04:44.490188 2025] [:error] [pid 5289:tid 5308] [client 4.214.0.127:17106] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUmkXMJTXVyr8NW9AtCUHgAAANE"]
[Tue Dec 23 04:04:45.350126 2025] [:error] [pid 5289:tid 5303] [client 4.214.0.127:17115] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUmkXcJTXVyr8NW9AtCUJAAAAMw"]
[Tue Dec 23 04:04:46.098400 2025] [:error] [pid 5186:tid 5253] [client 4.214.0.127:17128] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUmkXoRQiGeZalhMjeyD1AAAAIM"]
[Tue Dec 23 04:04:46.677873 2025] [:error] [pid 5186:tid 5274] [client 4.214.0.127:17076] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aUmkXoRQiGeZalhMjeyD1wAAAJg"]
[Tue Dec 23 04:04:47.284457 2025] [:error] [pid 5184:tid 5202] [client 4.214.0.127:17137] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aUmkX4Z0U1sayvz9y-vvNAAAAAs"]
[Tue Dec 23 04:04:48.224495 2025] [:error] [pid 5185:tid 5230] [client 4.214.0.127:17031] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aUmkYFn7IfAByLj7pOLGWQAAAEc"]
[Tue Dec 23 04:04:48.930043 2025] [:error] [pid 5186:tid 5261] [client 4.214.0.127:17141] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aUmkYIRQiGeZalhMjeyD3AAAAIs"]
[Tue Dec 23 04:04:49.692692 2025] [:error] [pid 5185:tid 5224] [client 4.214.0.127:9163] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aUmkYVn7IfAByLj7pOLGXwAAAEE"]
[Tue Dec 23 04:04:50.857225 2025] [:error] [pid 5185:tid 5229] [client 4.214.0.127:17140] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUmkYln7IfAByLj7pOLGYwAAAEY"]
[Tue Dec 23 04:04:52.012028 2025] [:error] [pid 5186:tid 5258] [client 4.214.0.127:17077] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUmkZIRQiGeZalhMjeyD3wAAAIg"]
[Tue Dec 23 04:04:52.858727 2025] [:error] [pid 5186:tid 5272] [client 4.214.0.127:17150] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUmkZIRQiGeZalhMjeyD4wAAAJY"]
[Tue Dec 23 04:04:53.909015 2025] [:error] [pid 5185:tid 5232] [client 4.214.0.127:17046] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUmkZVn7IfAByLj7pOLGZQAAAEk"]
[Tue Dec 23 04:04:55.113262 2025] [:error] [pid 5289:tid 5293] [client 4.214.0.127:17096] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUmkZ8JTXVyr8NW9AtCUOwAAAMI"]
[Tue Dec 23 04:04:56.141164 2025] [:error] [pid 5289:tid 5307] [client 4.214.0.127:9180] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUmkaMJTXVyr8NW9AtCUQQAAANA"]
[Tue Dec 23 04:04:56.800238 2025] [:error] [pid 5185:tid 5229] [client 4.214.0.127:17144] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUmkaFn7IfAByLj7pOLGagAAAEY"]
[Tue Dec 23 04:04:57.241209 2025] [:error] [pid 5289:tid 5295] [client 4.214.0.127:17025] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUmkacJTXVyr8NW9AtCURAAAAMQ"]
[Tue Dec 23 04:04:58.126969 2025] [:error] [pid 5185:tid 5247] [client 4.214.0.127:17130] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aUmkaln7IfAByLj7pOLGcAAAAFg"]
[Tue Dec 23 04:04:58.801323 2025] [:error] [pid 5289:tid 5306] [client 4.214.0.127:17107] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aUmkasJTXVyr8NW9AtCUSAAAAM8"]
[Tue Dec 23 04:04:59.467323 2025] [:error] [pid 5289:tid 5307] [client 4.214.0.127:17105] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aUmka8JTXVyr8NW9AtCUSwAAANA"]
[Tue Dec 23 04:05:00.569839 2025] [:error] [pid 5289:tid 5314] [client 4.214.0.127:9165] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aUmkbMJTXVyr8NW9AtCUUQAAANc"]
[Tue Dec 23 04:05:01.142310 2025] [:error] [pid 5289:tid 5292] [client 4.214.0.127:9168] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUmkbcJTXVyr8NW9AtCUUwAAAME"]
[Tue Dec 23 04:05:02.004670 2025] [:error] [pid 5289:tid 5300] [client 4.214.0.127:17058] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUmkbsJTXVyr8NW9AtCUVQAAAMk"]
[Tue Dec 23 04:05:02.546710 2025] [:error] [pid 5289:tid 5295] [client 4.214.0.127:17030] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUmkbsJTXVyr8NW9AtCUVgAAAMQ"]
[Tue Dec 23 04:05:03.043815 2025] [:error] [pid 5186:tid 5274] [client 4.214.0.127:17052] [client 4.214.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aUmkb4RQiGeZalhMjeyD6wAAAJg"]
[Tue Dec 23 04:05:03.866935 2025] [:error] [pid 5289:tid 5294] [client 4.214.0.127:17091] [client 4.214.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUmkb8JTXVyr8NW9AtCUWgAAAMM"]
[Tue Dec 23 04:05:05.011840 2025] [:error] [pid 5186:tid 5273] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Dec 23 04:05:05.165512 2025] [:error] [pid 5186:tid 5260] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Dec 23 04:05:05.358928 2025] [:error] [pid 5186:tid 5262] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Dec 23 04:05:05.525685 2025] [:error] [pid 5186:tid 5266] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/manage.php
[Tue Dec 23 04:05:06.110059 2025] [:error] [pid 5186:tid 5267] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Tue Dec 23 04:05:06.258582 2025] [:error] [pid 5186:tid 5264] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Tue Dec 23 04:05:06.407723 2025] [:error] [pid 5186:tid 5258] [client 4.214.0.127:17101] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Dec 23 05:40:59.943363 2025] [:error] [pid 49060:tid 49070] [client 170.106.167.214:55536] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUm66_vdpPyXg0aYbMVbNwAAAAY"]
[Tue Dec 23 05:49:33.133927 2025] [:error] [pid 49150:tid 49164] [client 43.135.145.73:58360] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUm87UuL91O4jNPzb4F7pAAAAMw"]
[Tue Dec 23 08:45:41.452149 2025] [:error] [pid 49150:tid 49167] [client 104.28.246.112:43716] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aUnmNUuL91O4jNPzb4HrFQAAAM8"]
[Tue Dec 23 14:04:24.703173 2025] [:error] [pid 25976:tid 25980] [client 189.130.76.151:59107] [client 189.130.76.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.130.76.151, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUow6LF6LaWzQScE-xMjagAAAQI"]
[Tue Dec 23 14:04:24.708506 2025] [:error] [pid 25976:tid 25980] [client 189.130.76.151:59107] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 23 14:05:25.117277 2025] [:error] [pid 25976:tid 25979] [client 177.92.48.200:19407] [client 177.92.48.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.92.48.200, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUoxJbF6LaWzQScE-xMjxQAAAQE"]
[Tue Dec 23 14:05:25.122124 2025] [:error] [pid 25976:tid 25979] [client 177.92.48.200:19407] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 23 15:14:23.323671 2025] [:error] [pid 3406:tid 3487] [client 182.43.70.143:44677] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUpBT_n8DLWxW7TPzpGAHAAAAFc"]
[Tue Dec 23 15:57:02.552043 2025] [:error] [pid 49993:tid 50019] [client 195.178.110.18:35940] [client 195.178.110.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aUpLTqjLOkLOc-I9e9tqpAAAAVc"]
[Tue Dec 23 17:05:26.740298 2025] [:error] [pid 25976:tid 25987] [client 185.238.231.66:28371] [client 185.238.231.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.66, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aUpbVrF6LaWzQScE-xNREQAAAQk"]
[Tue Dec 23 17:05:26.746213 2025] [:error] [pid 25976:tid 25987] [client 185.238.231.66:28371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Dec 23 20:12:56.881420 2025] [:error] [pid 3405:tid 3461] [client 41.142.172.81:49620] [client 41.142.172.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aUqHSLdHHpIDpQ39rwk5FAAAABg"]
[Tue Dec 23 20:18:48.255836 2025] [:error] [pid 54375:tid 54390] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Tue Dec 23 20:18:48.412948 2025] [:error] [pid 54375:tid 54396] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Tue Dec 23 20:18:48.558514 2025] [:error] [pid 54375:tid 54388] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/nck.php
[Tue Dec 23 20:18:48.700865 2025] [:error] [pid 54375:tid 54397] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 23 20:18:48.953824 2025] [:error] [pid 54375:tid 54394] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Dec 23 20:18:49.096036 2025] [:error] [pid 54375:tid 54389] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Tue Dec 23 20:18:49.238130 2025] [:error] [pid 54375:tid 54384] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue Dec 23 20:18:49.385951 2025] [:error] [pid 54375:tid 54379] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Tue Dec 23 20:18:49.590897 2025] [:error] [pid 54375:tid 54392] [client 20.196.109.137:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Dec 23 20:18:49.743103 2025] [:error] [pid 54375:tid 54386] [client 20.196.109.137:28989] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUqIqZ1Yro3O5R2WY-BsyQAAAkk"]
[Tue Dec 23 20:18:50.070792 2025] [:error] [pid 54340:tid 54354] [client 20.196.109.137:28985] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUqIqpye8-oij4iGhoglOQAAAgw"]
[Tue Dec 23 20:18:50.421160 2025] [:error] [pid 54340:tid 54348] [client 20.196.109.137:19202] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUqIqpye8-oij4iGhoglOwAAAgY"]
[Tue Dec 23 20:18:50.739706 2025] [:error] [pid 54297:tid 54311] [client 20.196.109.137:19211] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aUqIqkZMNime0caoKPKf8wAAAYo"]
[Tue Dec 23 20:18:51.043679 2025] [:error] [pid 54375:tid 54401] [client 20.196.109.137:28946] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUqIq51Yro3O5R2WY-BsywAAAlg"]
[Tue Dec 23 20:18:51.373124 2025] [:error] [pid 54340:tid 54343] [client 20.196.109.137:28971] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUqIq5ye8-oij4iGhoglPgAAAgE"]
[Tue Dec 23 20:18:51.664637 2025] [:error] [pid 54297:tid 54318] [client 20.196.109.137:28955] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUqIq0ZMNime0caoKPKf9gAAAZE"]
[Tue Dec 23 20:18:52.022936 2025] [:error] [pid 3404:tid 3411] [client 20.196.109.137:12249] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aUqIrMJGbPWZNlrhVJdSjAAAAcI"]
[Tue Dec 23 20:18:52.328677 2025] [:error] [pid 54408:tid 54423] [client 20.196.109.137:19217] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUqIrGup4YbWx_MWvp1TwQAAAow"]
[Tue Dec 23 20:18:52.751693 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:19219] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUqIrMJGbPWZNlrhVJdSjwAAAdQ"]
[Tue Dec 23 20:18:53.091824 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:19200] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUqIrUZMNime0caoKPKf-AAAAYM"]
[Tue Dec 23 20:18:53.497616 2025] [:error] [pid 54375:tid 54381] [client 20.196.109.137:19226] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aUqIrZ1Yro3O5R2WY-Bs0AAAAkQ"]
[Tue Dec 23 20:18:53.880280 2025] [:error] [pid 25976:tid 25994] [client 20.196.109.137:28943] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUqIrbF6LaWzQScE-xN65AAAARA"]
[Tue Dec 23 20:18:54.177746 2025] [:error] [pid 54340:tid 54344] [client 20.196.109.137:28975] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUqIrpye8-oij4iGhoglQAAAAgI"]
[Tue Dec 23 20:18:54.482265 2025] [:error] [pid 25976:tid 25997] [client 20.196.109.137:28952] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUqIrrF6LaWzQScE-xN65QAAARM"]
[Tue Dec 23 20:18:54.817208 2025] [:error] [pid 3404:tid 3433] [client 20.196.109.137:28948] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aUqIrsJGbPWZNlrhVJdSkwAAAdg"]
[Tue Dec 23 20:18:55.109663 2025] [:error] [pid 54408:tid 54428] [client 20.196.109.137:28973] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aUqIr2up4YbWx_MWvp1TwgAAApE"]
[Tue Dec 23 20:18:55.410143 2025] [:error] [pid 54297:tid 54313] [client 20.196.109.137:28932] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aUqIr0ZMNime0caoKPKf_QAAAYw"]
[Tue Dec 23 20:18:55.738675 2025] [:error] [pid 54408:tid 54427] [client 20.196.109.137:19235] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aUqIr2up4YbWx_MWvp1TxAAAApA"]
[Tue Dec 23 20:18:56.049135 2025] [:error] [pid 3406:tid 3468] [client 20.196.109.137:28930] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aUqIsPn8DLWxW7TPzpHjRgAAAEQ"]
[Tue Dec 23 20:18:56.373669 2025] [:error] [pid 3404:tid 3431] [client 20.196.109.137:19223] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aUqIsMJGbPWZNlrhVJdSlQAAAdY"]
[Tue Dec 23 20:18:56.998755 2025] [:error] [pid 54408:tid 54417] [client 20.196.109.137:28978] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aUqIsGup4YbWx_MWvp1TxQAAAoY"]
[Tue Dec 23 20:18:57.300098 2025] [:error] [pid 54340:tid 54362] [client 20.196.109.137:28935] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aUqIsZye8-oij4iGhoglRwAAAhQ"]
[Tue Dec 23 20:18:57.662047 2025] [:error] [pid 11812:tid 11815] [client 20.196.109.137:19242] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aUqIsbBkIQ4nTXm4A3UYMQAAAIE"]
[Tue Dec 23 20:18:58.051137 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:28964] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aUqIsrF6LaWzQScE-xN66QAAARE"]
[Tue Dec 23 20:18:58.634607 2025] [:error] [pid 54297:tid 54306] [client 20.196.109.137:28961] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aUqIskZMNime0caoKPKgAAAAAYU"]
[Tue Dec 23 20:18:58.985301 2025] [:error] [pid 54340:tid 54354] [client 20.196.109.137:19224] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aUqIspye8-oij4iGhoglTAAAAgw"]
[Tue Dec 23 20:18:59.287935 2025] [:error] [pid 25976:tid 25989] [client 20.196.109.137:28938] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aUqIs7F6LaWzQScE-xN66wAAAQs"]
[Tue Dec 23 20:18:59.617203 2025] [:error] [pid 54297:tid 54311] [client 20.196.109.137:19207] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aUqIs0ZMNime0caoKPKgBQAAAYo"]
[Tue Dec 23 20:18:59.964275 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:19233] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aUqIs7dHHpIDpQ39rwk7hgAAAAU"]
[Tue Dec 23 20:19:00.291402 2025] [:error] [pid 54408:tid 54424] [client 20.196.109.137:28982] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aUqItGup4YbWx_MWvp1TygAAAo0"]
[Tue Dec 23 20:19:00.710533 2025] [:error] [pid 3405:tid 3438] [client 20.196.109.137:28936] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aUqItLdHHpIDpQ39rwk7jAAAAAE"]
[Tue Dec 23 20:19:01.161025 2025] [:error] [pid 25976:tid 26000] [client 20.196.109.137:28947] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aUqItbF6LaWzQScE-xN67AAAARY"]
[Tue Dec 23 20:19:01.551508 2025] [:error] [pid 3405:tid 3443] [client 20.196.109.137:19212] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aUqItbdHHpIDpQ39rwk7kQAAAAY"]
[Tue Dec 23 20:19:01.874696 2025] [:error] [pid 25976:tid 25985] [client 20.196.109.137:12245] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aUqItbF6LaWzQScE-xN67QAAAQc"]
[Tue Dec 23 20:19:02.419201 2025] [:error] [pid 25976:tid 25979] [client 20.196.109.137:19250] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aUqItrF6LaWzQScE-xN68QAAAQE"]
[Tue Dec 23 20:19:02.759337 2025] [:error] [pid 54297:tid 54316] [client 20.196.109.137:28962] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aUqItkZMNime0caoKPKgCwAAAY8"]
[Tue Dec 23 20:19:03.137158 2025] [:error] [pid 3406:tid 3484] [client 20.196.109.137:28983] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aUqIt_n8DLWxW7TPzpHjSwAAAFQ"]
[Tue Dec 23 20:19:03.536427 2025] [:error] [pid 54297:tid 54303] [client 20.196.109.137:12243] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aUqIt0ZMNime0caoKPKgDAAAAYI"]
[Tue Dec 23 20:19:03.837271 2025] [:error] [pid 3404:tid 3422] [client 20.196.109.137:28986] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aUqIt8JGbPWZNlrhVJdSnwAAAc0"]
[Tue Dec 23 20:19:04.270516 2025] [:error] [pid 54297:tid 54302] [client 20.196.109.137:28959] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aUqIuEZMNime0caoKPKgDgAAAYE"]
[Tue Dec 23 20:19:04.683071 2025] [:error] [pid 54408:tid 54421] [client 20.196.109.137:19229] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aUqIuGup4YbWx_MWvp1TzwAAAoo"]
[Tue Dec 23 20:19:04.967564 2025] [:error] [pid 11812:tid 11837] [client 20.196.109.137:19206] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aUqIuLBkIQ4nTXm4A3UYNQAAAJc"]
[Tue Dec 23 20:19:05.361806 2025] [:error] [pid 3405:tid 3455] [client 20.196.109.137:28950] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aUqIubdHHpIDpQ39rwk7lQAAABI"]
[Tue Dec 23 20:19:05.756144 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:28980] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aUqIuezUE6hZ8LJecSsRNAAAAMA"]
[Tue Dec 23 20:19:06.089953 2025] [:error] [pid 3406:tid 3476] [client 20.196.109.137:28981] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aUqIuvn8DLWxW7TPzpHjUwAAAEw"]
[Tue Dec 23 20:19:06.404133 2025] [:error] [pid 54375:tid 54391] [client 20.196.109.137:19232] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aUqIup1Yro3O5R2WY-Bs2wAAAk4"]
[Tue Dec 23 20:19:06.719517 2025] [:error] [pid 3497:tid 3520] [client 20.196.109.137:19221] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aUqIuuzUE6hZ8LJecSsRNgAAANQ"]
[Tue Dec 23 20:19:07.140755 2025] [:error] [pid 54375:tid 54397] [client 20.196.109.137:12229] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aUqIu51Yro3O5R2WY-Bs3gAAAlQ"]
[Tue Dec 23 20:19:07.557990 2025] [:error] [pid 54375:tid 54396] [client 20.196.109.137:12246] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aUqIu51Yro3O5R2WY-Bs3wAAAlM"]
[Tue Dec 23 20:19:07.907639 2025] [:error] [pid 54375:tid 54384] [client 20.196.109.137:19248] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aUqIu51Yro3O5R2WY-Bs4gAAAkc"]
[Tue Dec 23 20:19:08.490174 2025] [:error] [pid 54375:tid 54379] [client 20.196.109.137:12266] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aUqIvJ1Yro3O5R2WY-Bs4wAAAkI"]
[Tue Dec 23 20:19:08.873283 2025] [:error] [pid 54375:tid 54386] [client 20.196.109.137:19241] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aUqIvJ1Yro3O5R2WY-Bs5QAAAkk"]
[Tue Dec 23 20:19:09.335310 2025] [:error] [pid 54408:tid 54430] [client 20.196.109.137:12250] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aUqIvWup4YbWx_MWvp1T1QAAApM"]
[Tue Dec 23 20:19:09.691582 2025] [:error] [pid 54340:tid 54357] [client 20.196.109.137:28958] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aUqIvZye8-oij4iGhoglWwAAAg8"]
[Tue Dec 23 20:19:10.077406 2025] [:error] [pid 3497:tid 3519] [client 20.196.109.137:19231] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aUqIvuzUE6hZ8LJecSsRQAAAANM"]
[Tue Dec 23 20:19:10.444962 2025] [:error] [pid 25976:tid 25988] [client 20.196.109.137:19220] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUqIvrF6LaWzQScE-xN69gAAAQo"]
[Tue Dec 23 20:19:10.836169 2025] [:error] [pid 25976:tid 25996] [client 20.196.109.137:28972] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUqIvrF6LaWzQScE-xN69wAAARI"]
[Tue Dec 23 20:19:11.198587 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:19234] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUqIv7F6LaWzQScE-xN6-QAAARE"]
[Tue Dec 23 20:19:11.551741 2025] [:error] [pid 54340:tid 54362] [client 20.196.109.137:19236] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aUqIv5ye8-oij4iGhoglXQAAAhQ"]
[Tue Dec 23 20:19:11.912492 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:12191] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lzyrj.php"] [unique_id "aUqIv7dHHpIDpQ39rwk7mQAAAAQ"]
[Tue Dec 23 20:19:12.314754 2025] [:error] [pid 3406:tid 3488] [client 20.196.109.137:19209] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lzyrj.php"] [unique_id "aUqIwPn8DLWxW7TPzpHjZgAAAFg"]
[Tue Dec 23 20:19:12.852915 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:28977] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lzyrj.php"] [unique_id "aUqIwLdHHpIDpQ39rwk7nwAAABc"]
[Tue Dec 23 20:19:13.182984 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:28951] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lzyrj.php"] [unique_id "aUqIwZ1Yro3O5R2WY-Bs5gAAAlc"]
[Tue Dec 23 20:19:13.519770 2025] [:error] [pid 3405:tid 3450] [client 20.196.109.137:19227] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laudq.php"] [unique_id "aUqIwbdHHpIDpQ39rwk7ogAAAA0"]
[Tue Dec 23 20:19:13.963270 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:19239] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laudq.php"] [unique_id "aUqIwbdHHpIDpQ39rwk7pQAAAA4"]
[Tue Dec 23 20:19:14.483405 2025] [:error] [pid 11812:tid 11818] [client 20.196.109.137:19204] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laudq.php"] [unique_id "aUqIwrBkIQ4nTXm4A3UYQAAAAIQ"]
[Tue Dec 23 20:19:14.900303 2025] [:error] [pid 54375:tid 54396] [client 20.196.109.137:28969] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laudq.php"] [unique_id "aUqIwp1Yro3O5R2WY-Bs7AAAAlM"]
[Tue Dec 23 20:19:15.226183 2025] [:error] [pid 54375:tid 54389] [client 20.196.109.137:12231] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anjay.php"] [unique_id "aUqIw51Yro3O5R2WY-Bs7QAAAkw"]
[Tue Dec 23 20:19:15.596737 2025] [:error] [pid 54297:tid 54321] [client 20.196.109.137:19255] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anjay.php"] [unique_id "aUqIw0ZMNime0caoKPKgGQAAAZQ"]
[Tue Dec 23 20:19:16.008614 2025] [:error] [pid 54340:tid 54348] [client 20.196.109.137:12205] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anjay.php"] [unique_id "aUqIxJye8-oij4iGhoglYAAAAgY"]
[Tue Dec 23 20:19:16.369999 2025] [:error] [pid 3405:tid 3456] [client 20.196.109.137:19230] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anjay.php"] [unique_id "aUqIxLdHHpIDpQ39rwk7rQAAABM"]
[Tue Dec 23 20:19:16.673214 2025] [:error] [pid 54340:tid 54359] [client 20.196.109.137:28931] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/let.php"] [unique_id "aUqIxJye8-oij4iGhoglYwAAAhE"]
[Tue Dec 23 20:19:17.063062 2025] [:error] [pid 3406:tid 3474] [client 20.196.109.137:28934] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/let.php"] [unique_id "aUqIxfn8DLWxW7TPzpHjaQAAAEo"]
[Tue Dec 23 20:19:17.490264 2025] [:error] [pid 25976:tid 25983] [client 20.196.109.137:12268] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/let.php"] [unique_id "aUqIxbF6LaWzQScE-xN6_AAAAQU"]
[Tue Dec 23 20:19:17.848619 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:28970] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/let.php"] [unique_id "aUqIxezUE6hZ8LJecSsRSAAAAMI"]
[Tue Dec 23 20:19:18.156475 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:28987] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUqIxuzUE6hZ8LJecSsRSwAAAMA"]
[Tue Dec 23 20:19:18.455254 2025] [:error] [pid 3405:tid 3461] [client 20.196.109.137:12282] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUqIxrdHHpIDpQ39rwk7sQAAABg"]
[Tue Dec 23 20:19:18.816071 2025] [:error] [pid 3497:tid 3515] [client 20.196.109.137:28957] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUqIxuzUE6hZ8LJecSsRTgAAAM8"]
[Tue Dec 23 20:19:19.179663 2025] [:error] [pid 3497:tid 3523] [client 20.196.109.137:12224] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aUqIx-zUE6hZ8LJecSsRUQAAANc"]
[Tue Dec 23 20:19:19.532898 2025] [:error] [pid 3406:tid 3484] [client 20.196.109.137:12281] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqIx_n8DLWxW7TPzpHjbQAAAFQ"]
[Tue Dec 23 20:19:19.876377 2025] [:error] [pid 54297:tid 54308] [client 20.196.109.137:12258] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqIx0ZMNime0caoKPKgHAAAAYc"]
[Tue Dec 23 20:19:20.304814 2025] [:error] [pid 11812:tid 11826] [client 20.196.109.137:12252] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqIyLBkIQ4nTXm4A3UYSQAAAIw"]
[Tue Dec 23 20:19:20.647778 2025] [:error] [pid 54340:tid 54352] [client 20.196.109.137:19228] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqIyJye8-oij4iGhoglbwAAAgo"]
[Tue Dec 23 20:19:21.114178 2025] [:error] [pid 11812:tid 11828] [client 20.196.109.137:19246] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUqIybBkIQ4nTXm4A3UYTAAAAI4"]
[Tue Dec 23 20:19:21.412766 2025] [:error] [pid 11812:tid 11823] [client 20.196.109.137:28979] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUqIybBkIQ4nTXm4A3UYTQAAAIk"]
[Tue Dec 23 20:19:21.742934 2025] [:error] [pid 54297:tid 54318] [client 20.196.109.137:28965] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUqIyUZMNime0caoKPKgHwAAAZE"]
[Tue Dec 23 20:19:22.033739 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:12257] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aUqIyrdHHpIDpQ39rwk7tQAAABY"]
[Tue Dec 23 20:19:22.409921 2025] [:error] [pid 54340:tid 54346] [client 20.196.109.137:12253] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUqIypye8-oij4iGhogldQAAAgQ"]
[Tue Dec 23 20:19:22.742297 2025] [:error] [pid 54375:tid 54398] [client 20.196.109.137:12265] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUqIyp1Yro3O5R2WY-Bs9QAAAlU"]
[Tue Dec 23 20:19:23.131849 2025] [:error] [pid 54375:tid 54390] [client 20.196.109.137:28966] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUqIy51Yro3O5R2WY-Bs9gAAAk0"]
[Tue Dec 23 20:19:23.448727 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:28940] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aUqIy-zUE6hZ8LJecSsRWAAAAMI"]
[Tue Dec 23 20:19:23.792748 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:12238] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUqIy-zUE6hZ8LJecSsRWQAAAMA"]
[Tue Dec 23 20:19:24.142889 2025] [:error] [pid 54408:tid 54417] [client 20.196.109.137:28974] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUqIzGup4YbWx_MWvp1T4AAAAoY"]
[Tue Dec 23 20:19:24.506433 2025] [:error] [pid 54297:tid 54314] [client 20.196.109.137:19263] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUqIzEZMNime0caoKPKgJgAAAY0"]
[Tue Dec 23 20:19:24.857545 2025] [:error] [pid 54297:tid 54324] [client 20.196.109.137:12178] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aUqIzEZMNime0caoKPKgJwAAAZc"]
[Tue Dec 23 20:19:25.310855 2025] [:error] [pid 3404:tid 3411] [client 20.196.109.137:19244] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUqIzcJGbPWZNlrhVJdSswAAAcI"]
[Tue Dec 23 20:19:25.622379 2025] [:error] [pid 3406:tid 3479] [client 20.196.109.137:19259] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUqIzfn8DLWxW7TPzpHjdgAAAE8"]
[Tue Dec 23 20:19:25.977433 2025] [:error] [pid 3404:tid 3421] [client 20.196.109.137:12280] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUqIzcJGbPWZNlrhVJdStQAAAcw"]
[Tue Dec 23 20:19:26.310624 2025] [:error] [pid 25976:tid 26000] [client 20.196.109.137:28988] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aUqIzrF6LaWzQScE-xN7BwAAARY"]
[Tue Dec 23 20:19:26.608449 2025] [:error] [pid 11812:tid 11830] [client 20.196.109.137:28991] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUqIzrBkIQ4nTXm4A3UYUAAAAJA"]
[Tue Dec 23 20:19:26.914523 2025] [:error] [pid 3497:tid 3510] [client 20.196.109.137:19238] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUqIzuzUE6hZ8LJecSsRaAAAAMo"]
[Tue Dec 23 20:19:27.323220 2025] [:error] [pid 3405:tid 3453] [client 20.196.109.137:12277] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUqIz7dHHpIDpQ39rwk7vwAAABA"]
[Tue Dec 23 20:19:27.658654 2025] [:error] [pid 3497:tid 3509] [client 20.196.109.137:28928] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aUqIz-zUE6hZ8LJecSsRawAAAMk"]
[Tue Dec 23 20:19:27.951205 2025] [:error] [pid 54297:tid 54322] [client 20.196.109.137:12160] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUqIz0ZMNime0caoKPKgLgAAAZU"]
[Tue Dec 23 20:19:28.236540 2025] [:error] [pid 3405:tid 3437] [client 20.196.109.137:19218] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUqI0LdHHpIDpQ39rwk7wgAAAAA"]
[Tue Dec 23 20:19:28.589578 2025] [:error] [pid 54297:tid 54307] [client 20.196.109.137:12261] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUqI0EZMNime0caoKPKgMAAAAYY"]
[Tue Dec 23 20:19:28.879474 2025] [:error] [pid 54340:tid 54351] [client 20.196.109.137:19249] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aUqI0Jye8-oij4iGhoglfAAAAgk"]
[Tue Dec 23 20:19:29.248838 2025] [:error] [pid 54340:tid 54348] [client 20.196.109.137:19225] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUqI0Zye8-oij4iGhoglfQAAAgY"]
[Tue Dec 23 20:19:29.584659 2025] [:error] [pid 3404:tid 3431] [client 20.196.109.137:19254] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUqI0cJGbPWZNlrhVJdSvAAAAdY"]
[Tue Dec 23 20:19:29.902818 2025] [:error] [pid 54375:tid 54380] [client 20.196.109.137:12264] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUqI0Z1Yro3O5R2WY-BtCgAAAkM"]
[Tue Dec 23 20:19:30.259704 2025] [:error] [pid 3405:tid 3456] [client 20.196.109.137:12287] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aUqI0rdHHpIDpQ39rwk7xgAAABM"]
[Tue Dec 23 20:19:30.555925 2025] [:error] [pid 54297:tid 54312] [client 20.196.109.137:12112] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqI0kZMNime0caoKPKgMwAAAYs"]
[Tue Dec 23 20:19:30.919419 2025] [:error] [pid 25976:tid 25996] [client 20.196.109.137:28990] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqI0rF6LaWzQScE-xN7EAAAARI"]
[Tue Dec 23 20:19:31.305060 2025] [:error] [pid 3406:tid 3468] [client 20.196.109.137:19210] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqI0_n8DLWxW7TPzpHjgQAAAEQ"]
[Tue Dec 23 20:19:31.731948 2025] [:error] [pid 3405:tid 3457] [client 20.196.109.137:12255] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqI07dHHpIDpQ39rwk7yAAAABQ"]
[Tue Dec 23 20:19:32.015744 2025] [:error] [pid 11812:tid 11835] [client 20.196.109.137:12278] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUqI1LBkIQ4nTXm4A3UYVAAAAJU"]
[Tue Dec 23 20:19:32.333643 2025] [:error] [pid 3497:tid 3511] [client 20.196.109.137:28963] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUqI1OzUE6hZ8LJecSsRcQAAAMs"]
[Tue Dec 23 20:19:32.649773 2025] [:error] [pid 3405:tid 3438] [client 20.196.109.137:12166] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUqI1LdHHpIDpQ39rwk7yQAAAAE"]
[Tue Dec 23 20:19:32.970286 2025] [:error] [pid 54375:tid 54394] [client 20.196.109.137:12210] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aUqI1J1Yro3O5R2WY-BtDAAAAlE"]
[Tue Dec 23 20:19:33.321398 2025] [:error] [pid 54408:tid 54416] [client 20.196.109.137:19247] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUqI1Wup4YbWx_MWvp1T8QAAAoU"]
[Tue Dec 23 20:19:33.627841 2025] [:error] [pid 54408:tid 54417] [client 20.196.109.137:28967] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUqI1Wup4YbWx_MWvp1T8gAAAoY"]
[Tue Dec 23 20:19:33.971613 2025] [:error] [pid 54340:tid 54350] [client 20.196.109.137:12242] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUqI1Zye8-oij4iGhoglhgAAAgg"]
[Tue Dec 23 20:19:34.265698 2025] [:error] [pid 54340:tid 54344] [client 20.196.109.137:12244] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aUqI1pye8-oij4iGhogliAAAAgI"]
[Tue Dec 23 20:19:34.596330 2025] [:error] [pid 3497:tid 3506] [client 20.196.109.137:12225] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUqI1uzUE6hZ8LJecSsRcwAAAMY"]
[Tue Dec 23 20:19:34.879648 2025] [:error] [pid 54408:tid 54424] [client 20.196.109.137:12235] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUqI1mup4YbWx_MWvp1T9wAAAo0"]
[Tue Dec 23 20:19:35.168470 2025] [:error] [pid 3406:tid 3475] [client 20.196.109.137:12121] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUqI1_n8DLWxW7TPzpHjiAAAAEs"]
[Tue Dec 23 20:19:35.468696 2025] [:error] [pid 54375:tid 54392] [client 20.196.109.137:19243] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aUqI151Yro3O5R2WY-BtDwAAAk8"]
[Tue Dec 23 20:19:35.775563 2025] [:error] [pid 54297:tid 54314] [client 20.196.109.137:12283] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqI10ZMNime0caoKPKgOAAAAY0"]
[Tue Dec 23 20:19:36.066879 2025] [:error] [pid 3406:tid 3486] [client 20.196.109.137:12228] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqI2Pn8DLWxW7TPzpHjjAAAAFY"]
[Tue Dec 23 20:19:36.371044 2025] [:error] [pid 11812:tid 11825] [client 20.196.109.137:12195] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqI2LBkIQ4nTXm4A3UYWwAAAIs"]
[Tue Dec 23 20:19:36.703237 2025] [:error] [pid 54297:tid 54325] [client 20.196.109.137:19205] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqI2EZMNime0caoKPKgOQAAAZg"]
[Tue Dec 23 20:19:37.060529 2025] [:error] [pid 54297:tid 54310] [client 20.196.109.137:12234] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUqI2UZMNime0caoKPKgPAAAAYk"]
[Tue Dec 23 20:19:37.403298 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:28976] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUqI2bdHHpIDpQ39rwk70wAAABY"]
[Tue Dec 23 20:19:37.725552 2025] [:error] [pid 54408:tid 54433] [client 20.196.109.137:12230] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUqI2Wup4YbWx_MWvp1T_gAAApY"]
[Tue Dec 23 20:19:38.003151 2025] [:error] [pid 54340:tid 54346] [client 20.196.109.137:12248] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aUqI2pye8-oij4iGhogljQAAAgQ"]
[Tue Dec 23 20:19:38.310667 2025] [:error] [pid 54375:tid 54377] [client 20.196.109.137:19222] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aUqI2p1Yro3O5R2WY-BtFQAAAkA"]
[Tue Dec 23 20:19:38.590567 2025] [:error] [pid 11812:tid 11838] [client 20.196.109.137:19253] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aUqI2rBkIQ4nTXm4A3UYYgAAAJg"]
[Tue Dec 23 20:19:38.890691 2025] [:error] [pid 54375:tid 54391] [client 20.196.109.137:12237] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aUqI2p1Yro3O5R2WY-BtGwAAAk4"]
[Tue Dec 23 20:19:39.180277 2025] [:error] [pid 11812:tid 11832] [client 20.196.109.137:12179] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aUqI27BkIQ4nTXm4A3UYbgAAAJI"]
[Tue Dec 23 20:19:39.549829 2025] [:error] [pid 11812:tid 11826] [client 20.196.109.137:12169] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aUqI27BkIQ4nTXm4A3UYcwAAAIw"]
[Tue Dec 23 20:19:39.896594 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:28968] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aUqI251Yro3O5R2WY-BtKgAAAlc"]
[Tue Dec 23 20:19:40.250793 2025] [:error] [pid 25976:tid 25979] [client 20.196.109.137:12240] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aUqI3LF6LaWzQScE-xN7GAAAAQE"]
[Tue Dec 23 20:19:40.561119 2025] [:error] [pid 3404:tid 3414] [client 20.196.109.137:12239] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aUqI3MJGbPWZNlrhVJdSwwAAAcU"]
[Tue Dec 23 20:19:40.884289 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:19258] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUqI3OzUE6hZ8LJecSsRfQAAAM4"]
[Tue Dec 23 20:19:41.222909 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:19203] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUqI3bdHHpIDpQ39rwk71wAAAAU"]
[Tue Dec 23 20:19:41.635758 2025] [:error] [pid 3497:tid 3517] [client 20.196.109.137:28939] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUqI3ezUE6hZ8LJecSsRgQAAANE"]
[Tue Dec 23 20:19:41.947841 2025] [:error] [pid 11812:tid 11826] [client 20.196.109.137:12263] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aUqI3bBkIQ4nTXm4A3UYhQAAAIw"]
[Tue Dec 23 20:19:42.522653 2025] [:error] [pid 54340:tid 54350] [client 20.196.109.137:28929] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUqI3pye8-oij4iGhogllQAAAgg"]
[Tue Dec 23 20:19:42.839684 2025] [:error] [pid 11812:tid 11830] [client 20.196.109.137:19251] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUqI3rBkIQ4nTXm4A3UYhgAAAJA"]
[Tue Dec 23 20:19:43.161709 2025] [:error] [pid 3404:tid 3432] [client 20.196.109.137:19261] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUqI38JGbPWZNlrhVJdSyAAAAdc"]
[Tue Dec 23 20:19:43.537244 2025] [:error] [pid 54340:tid 54349] [client 20.196.109.137:12176] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aUqI35ye8-oij4iGhogllwAAAgc"]
[Tue Dec 23 20:19:43.928339 2025] [:error] [pid 54340:tid 54351] [client 20.196.109.137:12165] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aUqI35ye8-oij4iGhoglmAAAAgk"]
[Tue Dec 23 20:19:44.283023 2025] [:error] [pid 54340:tid 54353] [client 20.196.109.137:12267] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aUqI4Jye8-oij4iGhoglpAAAAgs"]
[Tue Dec 23 20:19:44.589564 2025] [:error] [pid 3497:tid 3512] [client 20.196.109.137:12236] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aUqI4OzUE6hZ8LJecSsRhwAAAMw"]
[Tue Dec 23 20:19:44.993443 2025] [:error] [pid 25976:tid 25989] [client 20.196.109.137:12202] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aUqI4LF6LaWzQScE-xN7IgAAAQs"]
[Tue Dec 23 20:19:45.427258 2025] [:error] [pid 3406:tid 3474] [client 20.196.109.137:12247] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aUqI4fn8DLWxW7TPzpHjlwAAAEo"]
[Tue Dec 23 20:19:45.791605 2025] [:error] [pid 54408:tid 54430] [client 20.196.109.137:12174] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aUqI4Wup4YbWx_MWvp1UFQAAApM"]
[Tue Dec 23 20:19:46.112403 2025] [:error] [pid 3406:tid 3486] [client 20.196.109.137:12276] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aUqI4vn8DLWxW7TPzpHjmwAAAFY"]
[Tue Dec 23 20:19:46.464862 2025] [:error] [pid 3406:tid 3484] [client 20.196.109.137:12171] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aUqI4vn8DLWxW7TPzpHjnQAAAFQ"]
[Tue Dec 23 20:19:46.944133 2025] [:error] [pid 54375:tid 54381] [client 20.196.109.137:12199] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUqI4p1Yro3O5R2WY-BtSgAAAkQ"]
[Tue Dec 23 20:19:47.230471 2025] [:error] [pid 54297:tid 54310] [client 20.196.109.137:12216] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUqI40ZMNime0caoKPKgRgAAAYk"]
[Tue Dec 23 20:19:47.513516 2025] [:error] [pid 54340:tid 54360] [client 20.196.109.137:12161] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUqI45ye8-oij4iGhoglsgAAAhI"]
[Tue Dec 23 20:19:47.859712 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:19201] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aUqI4-zUE6hZ8LJecSsRiQAAAMA"]
[Tue Dec 23 20:19:48.164632 2025] [:error] [pid 54340:tid 54364] [client 20.196.109.137:28949] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aUqI5Jye8-oij4iGhogltAAAAhY"]
[Tue Dec 23 20:19:48.500588 2025] [:error] [pid 3405:tid 3448] [client 20.196.109.137:19260] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aUqI5LdHHpIDpQ39rwk73gAAAAs"]
[Tue Dec 23 20:19:49.121947 2025] [:error] [pid 11812:tid 11815] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Dec 23 20:19:49.271658 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Tue Dec 23 20:19:49.424394 2025] [:error] [pid 11812:tid 11831] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue Dec 23 20:19:49.582173 2025] [:error] [pid 11812:tid 11837] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Dec 23 20:19:49.912967 2025] [:error] [pid 11812:tid 11834] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Dec 23 20:19:50.070813 2025] [:error] [pid 11812:tid 11825] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Tue Dec 23 20:19:50.554948 2025] [:error] [pid 11812:tid 11824] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php
[Tue Dec 23 20:19:50.728409 2025] [:error] [pid 11812:tid 11828] [client 20.196.109.137:28945] File does not exist: /usr/local/apache/htdocs/suspended-page/pekok.php
[Tue Dec 23 20:19:50.896019 2025] [:error] [pid 11812:tid 11830] [client 20.196.109.137:28945] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUqI5rBkIQ4nTXm4A3UYogAAAJA"]
[Tue Dec 23 20:19:51.346070 2025] [:error] [pid 54408:tid 54429] [client 20.196.109.137:19245] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUqI52up4YbWx_MWvp1UIgAAApI"]
[Tue Dec 23 20:19:51.655130 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:12241] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUqI57dHHpIDpQ39rwk75gAAAAM"]
[Tue Dec 23 20:19:52.028742 2025] [:error] [pid 3497:tid 3522] [client 20.196.109.137:12173] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aUqI6OzUE6hZ8LJecSsRlQAAANY"]
[Tue Dec 23 20:19:52.409233 2025] [:error] [pid 3497:tid 3515] [client 20.196.109.137:28944] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUqI6OzUE6hZ8LJecSsRlwAAAM8"]
[Tue Dec 23 20:19:52.828213 2025] [:error] [pid 54340:tid 54347] [client 20.196.109.137:28984] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUqI6Jye8-oij4iGhoglvAAAAgU"]
[Tue Dec 23 20:19:53.173055 2025] [:error] [pid 3406:tid 3481] [client 20.196.109.137:19208] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUqI6fn8DLWxW7TPzpHjpQAAAFE"]
[Tue Dec 23 20:19:53.513621 2025] [:error] [pid 3497:tid 3503] [client 20.196.109.137:12168] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aUqI6ezUE6hZ8LJecSsRmwAAAMM"]
[Tue Dec 23 20:19:53.847021 2025] [:error] [pid 54340:tid 54356] [client 20.196.109.137:12163] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aUqI6Zye8-oij4iGhoglwQAAAg4"]
[Tue Dec 23 20:19:54.175900 2025] [:error] [pid 3406:tid 3471] [client 20.196.109.137:12120] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aUqI6vn8DLWxW7TPzpHjpgAAAEc"]
[Tue Dec 23 20:19:54.514140 2025] [:error] [pid 3405:tid 3455] [client 20.196.109.137:12200] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aUqI6rdHHpIDpQ39rwk77AAAABI"]
[Tue Dec 23 20:19:54.848425 2025] [:error] [pid 54340:tid 54358] [client 20.196.109.137:12262] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aUqI6pye8-oij4iGhoglxQAAAhA"]
[Tue Dec 23 20:19:55.189884 2025] [:error] [pid 11812:tid 11835] [client 20.196.109.137:19214] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aUqI67BkIQ4nTXm4A3UYpAAAAJU"]
[Tue Dec 23 20:19:55.493325 2025] [:error] [pid 54297:tid 54320] [client 20.196.109.137:12233] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aUqI60ZMNime0caoKPKgTwAAAZM"]
[Tue Dec 23 20:19:55.844421 2025] [:error] [pid 54340:tid 54351] [client 20.196.109.137:19252] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aUqI65ye8-oij4iGhoglxgAAAgk"]
[Tue Dec 23 20:19:56.124456 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:12180] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/compare.php"] [unique_id "aUqI7LBkIQ4nTXm4A3UYpwAAAIc"]
[Tue Dec 23 20:19:56.401676 2025] [:error] [pid 54408:tid 54425] [client 20.196.109.137:28960] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aUqI7Gup4YbWx_MWvp1UJQAAAo4"]
[Tue Dec 23 20:19:56.770755 2025] [:error] [pid 54375:tid 54385] [client 20.196.109.137:28933] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aUqI7J1Yro3O5R2WY-BtUAAAAkg"]
[Tue Dec 23 20:19:57.054034 2025] [:error] [pid 54375:tid 54383] [client 20.196.109.137:12206] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aUqI7Z1Yro3O5R2WY-BtUQAAAkY"]
[Tue Dec 23 20:19:57.413787 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:12218] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aUqI7bdHHpIDpQ39rwk78gAAAAQ"]
[Tue Dec 23 20:19:57.766145 2025] [:error] [pid 54340:tid 54345] [client 20.196.109.137:12034] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aUqI7Zye8-oij4iGhoglxwAAAgM"]
[Tue Dec 23 20:19:58.042103 2025] [:error] [pid 25976:tid 25985] [client 20.196.109.137:28959] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aUqI7rF6LaWzQScE-xN7MgAAAQc"]
[Tue Dec 23 20:19:58.322689 2025] [:error] [pid 54340:tid 54342] [client 20.196.109.137:19213] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aUqI7pye8-oij4iGhoglyAAAAgA"]
[Tue Dec 23 20:19:58.612496 2025] [:error] [pid 3497:tid 3505] [client 20.196.109.137:19216] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aUqI7uzUE6hZ8LJecSsRpwAAAMU"]
[Tue Dec 23 20:19:58.959782 2025] [:error] [pid 11812:tid 11832] [client 20.196.109.137:12138] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUqI7rBkIQ4nTXm4A3UYqgAAAJI"]
[Tue Dec 23 20:19:59.270842 2025] [:error] [pid 3406:tid 3477] [client 20.196.109.137:12254] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUqI7_n8DLWxW7TPzpHjsAAAAE0"]
[Tue Dec 23 20:19:59.594951 2025] [:error] [pid 3406:tid 3469] [client 20.196.109.137:12184] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUqI7_n8DLWxW7TPzpHjsgAAAEU"]
[Tue Dec 23 20:19:59.923145 2025] [:error] [pid 3405:tid 3444] [client 20.196.109.137:12110] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aUqI77dHHpIDpQ39rwk7-wAAAAc"]
[Tue Dec 23 20:20:00.234561 2025] [:error] [pid 11812:tid 11830] [client 20.196.109.137:28942] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aUqI8LBkIQ4nTXm4A3UYrwAAAJA"]
[Tue Dec 23 20:20:00.585805 2025] [:error] [pid 25976:tid 25988] [client 20.196.109.137:19257] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aUqI8LF6LaWzQScE-xN7OQAAAQo"]
[Tue Dec 23 20:20:00.863119 2025] [:error] [pid 11812:tid 11818] [client 20.196.109.137:19262] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aUqI8LBkIQ4nTXm4A3UYswAAAIQ"]
[Tue Dec 23 20:20:01.186342 2025] [:error] [pid 3497:tid 3512] [client 20.196.109.137:19240] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aUqI8ezUE6hZ8LJecSsRsgAAAMw"]
[Tue Dec 23 20:20:01.468401 2025] [:error] [pid 11812:tid 11833] [client 20.196.109.137:12114] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aUqI8bBkIQ4nTXm4A3UYtAAAAJM"]
[Tue Dec 23 20:20:01.760225 2025] [:error] [pid 54375:tid 54399] [client 20.196.109.137:12043] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aUqI8Z1Yro3O5R2WY-BtXAAAAlY"]
[Tue Dec 23 20:20:02.055534 2025] [:error] [pid 25976:tid 26000] [client 20.196.109.137:12275] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aUqI8rF6LaWzQScE-xN7RgAAARY"]
[Tue Dec 23 20:20:02.344815 2025] [:error] [pid 54408:tid 54416] [client 20.196.109.137:12098] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aUqI8mup4YbWx_MWvp1UKgAAAoU"]
[Tue Dec 23 20:20:02.659998 2025] [:error] [pid 54375:tid 54391] [client 20.196.109.137:12056] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aUqI8p1Yro3O5R2WY-BtXgAAAk4"]
[Tue Dec 23 20:20:02.984251 2025] [:error] [pid 54375:tid 54379] [client 20.196.109.137:12273] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aUqI8p1Yro3O5R2WY-BtYAAAAkI"]
[Tue Dec 23 20:20:03.269612 2025] [:error] [pid 3404:tid 3423] [client 20.196.109.137:12192] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aUqI88JGbPWZNlrhVJdS1QAAAc4"]
[Tue Dec 23 20:20:03.574732 2025] [:error] [pid 54375:tid 54389] [client 20.196.109.137:12181] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aUqI851Yro3O5R2WY-BtYwAAAkw"]
[Tue Dec 23 20:20:03.888959 2025] [:error] [pid 25976:tid 25984] [client 20.196.109.137:28937] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aUqI87F6LaWzQScE-xN7UgAAAQY"]
[Tue Dec 23 20:20:04.292602 2025] [:error] [pid 54297:tid 54309] [client 20.196.109.137:12107] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aUqI9EZMNime0caoKPKgXAAAAYg"]
[Tue Dec 23 20:20:04.613906 2025] [:error] [pid 3406:tid 3479] [client 20.196.109.137:12190] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aUqI9Pn8DLWxW7TPzpHjuwAAAE8"]
[Tue Dec 23 20:20:04.919331 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:12106] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aUqI9LdHHpIDpQ39rwk8BwAAAA4"]
[Tue Dec 23 20:20:05.248201 2025] [:error] [pid 3405:tid 3455] [client 20.196.109.137:28941] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUqI9bdHHpIDpQ39rwk8CAAAABI"]
[Tue Dec 23 20:20:05.555084 2025] [:error] [pid 3406:tid 3472] [client 20.196.109.137:12108] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUqI9fn8DLWxW7TPzpHjvgAAAEg"]
[Tue Dec 23 20:20:05.919954 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:12227] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUqI9bdHHpIDpQ39rwk8CgAAABc"]
[Tue Dec 23 20:20:06.277278 2025] [:error] [pid 54375:tid 54398] [client 20.196.109.137:12050] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aUqI9p1Yro3O5R2WY-BtawAAAlU"]
[Tue Dec 23 20:20:06.558196 2025] [:error] [pid 54408:tid 54423] [client 20.196.109.137:12232] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUqI9mup4YbWx_MWvp1UKwAAAow"]
[Tue Dec 23 20:20:06.870717 2025] [:error] [pid 54340:tid 54358] [client 20.196.109.137:19215] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUqI9pye8-oij4iGhoglygAAAhA"]
[Tue Dec 23 20:20:07.186413 2025] [:error] [pid 11812:tid 11829] [client 20.196.109.137:12197] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUqI97BkIQ4nTXm4A3UYvAAAAI8"]
[Tue Dec 23 20:20:07.480831 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:12209] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aUqI9-zUE6hZ8LJecSsRugAAAM4"]
[Tue Dec 23 20:20:07.772724 2025] [:error] [pid 54408:tid 54424] [client 20.196.109.137:12185] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUqI92up4YbWx_MWvp1ULgAAAo0"]
[Tue Dec 23 20:20:08.057845 2025] [:error] [pid 3406:tid 3464] [client 20.196.109.137:12188] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUqI-Pn8DLWxW7TPzpHjwwAAAEA"]
[Tue Dec 23 20:20:08.367059 2025] [:error] [pid 54408:tid 54422] [client 20.196.109.137:12053] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUqI-Gup4YbWx_MWvp1ULwAAAos"]
[Tue Dec 23 20:20:08.648014 2025] [:error] [pid 3406:tid 3478] [client 20.196.109.137:28956] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aUqI-Pn8DLWxW7TPzpHjxAAAAE4"]
[Tue Dec 23 20:20:08.929616 2025] [:error] [pid 54340:tid 54348] [client 20.196.109.137:12115] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUqI-Jye8-oij4iGhoglzgAAAgY"]
[Tue Dec 23 20:20:09.220659 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:12141] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUqI-cJGbPWZNlrhVJdS3gAAAdQ"]
[Tue Dec 23 20:20:09.506802 2025] [:error] [pid 25976:tid 26002] [client 20.196.109.137:12207] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUqI-bF6LaWzQScE-xN7VgAAARg"]
[Tue Dec 23 20:20:09.782633 2025] [:error] [pid 54340:tid 54350] [client 20.196.109.137:19256] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aUqI-Zye8-oij4iGhogl0QAAAgg"]
[Tue Dec 23 20:20:10.077753 2025] [:error] [pid 3404:tid 3433] [client 20.196.109.137:12134] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUqI-sJGbPWZNlrhVJdS4AAAAdg"]
[Tue Dec 23 20:20:10.392842 2025] [:error] [pid 3405:tid 3450] [client 20.196.109.137:12284] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUqI-rdHHpIDpQ39rwk8FAAAAA0"]
[Tue Dec 23 20:20:10.715583 2025] [:error] [pid 54375:tid 54386] [client 20.196.109.137:12208] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUqI-p1Yro3O5R2WY-BtcQAAAkk"]
[Tue Dec 23 20:20:11.003202 2025] [:error] [pid 54340:tid 54347] [client 20.196.109.137:12272] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aUqI-5ye8-oij4iGhogmBAAAAgU"]
[Tue Dec 23 20:20:11.291436 2025] [:error] [pid 3497:tid 3520] [client 20.196.109.137:12204] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUqI--zUE6hZ8LJecSsRyAAAANQ"]
[Tue Dec 23 20:20:11.566443 2025] [:error] [pid 3497:tid 3519] [client 20.196.109.137:12259] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUqI--zUE6hZ8LJecSsRyQAAANM"]
[Tue Dec 23 20:20:11.842681 2025] [:error] [pid 54297:tid 54317] [client 20.196.109.137:12118] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUqI-0ZMNime0caoKPKgYwAAAZA"]
[Tue Dec 23 20:20:12.151309 2025] [:error] [pid 3405:tid 3437] [client 20.196.109.137:12286] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aUqI_LdHHpIDpQ39rwk8FwAAAAA"]
[Tue Dec 23 20:20:12.448820 2025] [:error] [pid 54297:tid 54322] [client 20.196.109.137:12203] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUqI_EZMNime0caoKPKgZAAAAZU"]
[Tue Dec 23 20:20:12.736813 2025] [:error] [pid 11812:tid 11822] [client 20.196.109.137:12215] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUqI_LBkIQ4nTXm4A3UYwQAAAIg"]
[Tue Dec 23 20:20:13.042859 2025] [:error] [pid 54297:tid 54323] [client 20.196.109.137:12274] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUqI_UZMNime0caoKPKgZQAAAZY"]
[Tue Dec 23 20:20:13.324141 2025] [:error] [pid 11812:tid 11838] [client 20.196.109.137:12279] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aUqI_bBkIQ4nTXm4A3UYxAAAAJg"]
[Tue Dec 23 20:20:13.625373 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:12201] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUqI_bdHHpIDpQ39rwk8GQAAAAQ"]
[Tue Dec 23 20:20:13.912399 2025] [:error] [pid 11812:tid 11833] [client 20.196.109.137:12226] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUqI_bBkIQ4nTXm4A3UYxgAAAJM"]
[Tue Dec 23 20:20:14.187417 2025] [:error] [pid 3406:tid 3485] [client 20.196.109.137:12177] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUqI_vn8DLWxW7TPzpHjxgAAAFU"]
[Tue Dec 23 20:20:14.464601 2025] [:error] [pid 3497:tid 3509] [client 20.196.109.137:12102] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aUqI_uzUE6hZ8LJecSsR0AAAAMk"]
[Tue Dec 23 20:20:14.778474 2025] [:error] [pid 54408:tid 54435] [client 20.196.109.137:12187] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUqI_mup4YbWx_MWvp1UaQAAApg"]
[Tue Dec 23 20:20:15.095075 2025] [:error] [pid 25976:tid 25983] [client 20.196.109.137:12285] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUqI_7F6LaWzQScE-xN7WwAAAQU"]
[Tue Dec 23 20:20:15.394580 2025] [:error] [pid 3404:tid 3413] [client 20.196.109.137:12122] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUqI_8JGbPWZNlrhVJdS5QAAAcQ"]
[Tue Dec 23 20:20:15.686146 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:12194] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aUqI_7BkIQ4nTXm4A3UYyAAAAIc"]
[Tue Dec 23 20:20:15.980204 2025] [:error] [pid 3404:tid 3420] [client 20.196.109.137:12129] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqI_8JGbPWZNlrhVJdS6QAAAcs"]
[Tue Dec 23 20:20:16.290828 2025] [:error] [pid 3497:tid 3524] [client 20.196.109.137:12149] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqJAOzUE6hZ8LJecSsR1QAAANg"]
[Tue Dec 23 20:20:16.599292 2025] [:error] [pid 54297:tid 54306] [client 20.196.109.137:12251] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqJAEZMNime0caoKPKgZwAAAYU"]
[Tue Dec 23 20:20:16.921982 2025] [:error] [pid 3404:tid 3411] [client 20.196.109.137:12162] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aUqJAMJGbPWZNlrhVJdS6gAAAcI"]
[Tue Dec 23 20:20:17.223007 2025] [:error] [pid 3404:tid 3412] [client 20.196.109.137:12271] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUqJAcJGbPWZNlrhVJdS6wAAAcM"]
[Tue Dec 23 20:20:17.570365 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:12172] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUqJAUZMNime0caoKPKgaAAAAYM"]
[Tue Dec 23 20:20:17.849693 2025] [:error] [pid 25976:tid 25999] [client 20.196.109.137:28953] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUqJAbF6LaWzQScE-xN7YQAAARU"]
[Tue Dec 23 20:20:18.160821 2025] [:error] [pid 3404:tid 3422] [client 20.196.109.137:12123] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aUqJAsJGbPWZNlrhVJdS8AAAAc0"]
[Tue Dec 23 20:20:18.457734 2025] [:error] [pid 54375:tid 54386] [client 20.196.109.137:12140] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqJAp1Yro3O5R2WY-BtdwAAAkk"]
[Tue Dec 23 20:20:18.776481 2025] [:error] [pid 3497:tid 3516] [client 20.196.109.137:12222] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqJAuzUE6hZ8LJecSsR2AAAANA"]
[Tue Dec 23 20:20:19.078611 2025] [:error] [pid 25976:tid 25987] [client 20.196.109.137:12143] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqJA7F6LaWzQScE-xN7aAAAAQk"]
[Tue Dec 23 20:20:19.377546 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:12211] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aUqJA7dHHpIDpQ39rwk8KAAAAAU"]
[Tue Dec 23 20:20:19.681566 2025] [:error] [pid 54297:tid 54316] [client 20.196.109.137:12103] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUqJA0ZMNime0caoKPKgbgAAAY8"]
[Tue Dec 23 20:20:19.997373 2025] [:error] [pid 54340:tid 54366] [client 20.196.109.137:12152] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUqJA5ye8-oij4iGhogmCwAAAhg"]
[Tue Dec 23 20:20:20.291190 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:12128] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUqJBLdHHpIDpQ39rwk8KwAAAAk"]
[Tue Dec 23 20:20:20.588716 2025] [:error] [pid 3405:tid 3445] [client 20.196.109.137:12059] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aUqJBLdHHpIDpQ39rwk8LQAAAAg"]
[Tue Dec 23 20:20:20.876321 2025] [:error] [pid 3405:tid 3447] [client 20.196.109.137:12220] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUqJBLdHHpIDpQ39rwk8LgAAAAo"]
[Tue Dec 23 20:20:21.211263 2025] [:error] [pid 3405:tid 3437] [client 20.196.109.137:11975] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUqJBbdHHpIDpQ39rwk8LwAAAAA"]
[Tue Dec 23 20:20:21.485804 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:12032] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUqJBbdHHpIDpQ39rwk8MQAAABY"]
[Tue Dec 23 20:20:21.790788 2025] [:error] [pid 25976:tid 25982] [client 20.196.109.137:12125] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aUqJBbF6LaWzQScE-xN7bgAAAQQ"]
[Tue Dec 23 20:20:22.135677 2025] [:error] [pid 25976:tid 26001] [client 20.196.109.137:12223] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUqJBrF6LaWzQScE-xN7cAAAARc"]
[Tue Dec 23 20:20:22.436455 2025] [:error] [pid 3406:tid 3469] [client 20.196.109.137:12183] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUqJBvn8DLWxW7TPzpHjzAAAAEU"]
[Tue Dec 23 20:20:22.736269 2025] [:error] [pid 54340:tid 54357] [client 20.196.109.137:12121] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUqJBpye8-oij4iGhogmDgAAAg8"]
[Tue Dec 23 20:20:23.022182 2025] [:error] [pid 11812:tid 11826] [client 20.196.109.137:12040] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aUqJB7BkIQ4nTXm4A3UY0wAAAIw"]
[Tue Dec 23 20:20:23.313004 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:12189] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aUqJB-zUE6hZ8LJecSsR2QAAAM0"]
[Tue Dec 23 20:20:23.607755 2025] [:error] [pid 3497:tid 3521] [client 20.196.109.137:12042] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aUqJB-zUE6hZ8LJecSsR2gAAANU"]
[Tue Dec 23 20:20:23.900016 2025] [:error] [pid 3404:tid 3418] [client 20.196.109.137:12033] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aUqJB8JGbPWZNlrhVJdS_AAAAck"]
[Tue Dec 23 20:20:24.200906 2025] [:error] [pid 54375:tid 54401] [client 20.196.109.137:12270] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aUqJCJ1Yro3O5R2WY-BtegAAAlg"]
[Tue Dec 23 20:20:24.507337 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:12111] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aUqJCJ1Yro3O5R2WY-BtewAAAlc"]
[Tue Dec 23 20:20:24.817790 2025] [:error] [pid 54375:tid 54380] [client 20.196.109.137:11982] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aUqJCJ1Yro3O5R2WY-BtfAAAAkM"]
[Tue Dec 23 20:20:25.113664 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:12093] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aUqJCbdHHpIDpQ39rwk8OwAAAAM"]
[Tue Dec 23 20:20:25.442391 2025] [:error] [pid 54408:tid 54435] [client 20.196.109.137:12155] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aUqJCWup4YbWx_MWvp1UcwAAApg"]
[Tue Dec 23 20:20:25.731497 2025] [:error] [pid 3404:tid 3415] [client 20.196.109.137:12164] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aUqJCcJGbPWZNlrhVJdS_gAAAcY"]
[Tue Dec 23 20:20:26.026023 2025] [:error] [pid 3405:tid 3438] [client 20.196.109.137:12219] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aUqJCrdHHpIDpQ39rwk8PgAAAAE"]
[Tue Dec 23 20:20:26.316926 2025] [:error] [pid 3497:tid 3520] [client 20.196.109.137:12116] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aUqJCuzUE6hZ8LJecSsR4AAAANQ"]
[Tue Dec 23 20:20:26.621484 2025] [:error] [pid 3405:tid 3452] [client 20.196.109.137:12154] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aUqJCrdHHpIDpQ39rwk8QQAAAA8"]
[Tue Dec 23 20:20:26.897519 2025] [:error] [pid 54408:tid 54414] [client 20.196.109.137:12139] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUqJCmup4YbWx_MWvp1UeAAAAoM"]
[Tue Dec 23 20:20:27.187785 2025] [:error] [pid 54297:tid 54320] [client 20.196.109.137:12052] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUqJC0ZMNime0caoKPKgggAAAZM"]
[Tue Dec 23 20:20:27.473244 2025] [:error] [pid 54408:tid 54429] [client 20.196.109.137:12133] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUqJC2up4YbWx_MWvp1UegAAApI"]
[Tue Dec 23 20:20:27.779453 2025] [:error] [pid 54408:tid 54430] [client 20.196.109.137:12156] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aUqJC2up4YbWx_MWvp1UfQAAApM"]
[Tue Dec 23 20:20:28.098835 2025] [:error] [pid 54408:tid 54431] [client 20.196.109.137:12096] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUqJDGup4YbWx_MWvp1UggAAApQ"]
[Tue Dec 23 20:20:28.376460 2025] [:error] [pid 54408:tid 54435] [client 20.196.109.137:12100] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUqJDGup4YbWx_MWvp1UhgAAApg"]
[Tue Dec 23 20:20:28.658652 2025] [:error] [pid 54297:tid 54310] [client 20.196.109.137:11980] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUqJDEZMNime0caoKPKgjwAAAYk"]
[Tue Dec 23 20:20:28.962086 2025] [:error] [pid 54297:tid 54303] [client 20.196.109.137:12135] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aUqJDEZMNime0caoKPKgkAAAAYI"]
[Tue Dec 23 20:20:29.252016 2025] [:error] [pid 54297:tid 54317] [client 20.196.109.137:12167] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUqJDUZMNime0caoKPKgkgAAAZA"]
[Tue Dec 23 20:20:29.535942 2025] [:error] [pid 54297:tid 54323] [client 20.196.109.137:12117] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUqJDUZMNime0caoKPKglAAAAZY"]
[Tue Dec 23 20:20:29.831619 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:12150] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUqJDbdHHpIDpQ39rwk8SAAAAAU"]
[Tue Dec 23 20:20:30.146937 2025] [:error] [pid 54340:tid 54344] [client 20.196.109.137:12126] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aUqJDpye8-oij4iGhogmEwAAAgI"]
[Tue Dec 23 20:20:30.426421 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:12137] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aUqJDuzUE6hZ8LJecSsR5wAAAM0"]
[Tue Dec 23 20:20:30.708800 2025] [:error] [pid 3497:tid 3500] [client 20.196.109.137:28954] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aUqJDuzUE6hZ8LJecSsR6gAAAMA"]
[Tue Dec 23 20:20:30.986605 2025] [:error] [pid 54375:tid 54385] [client 20.196.109.137:12175] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aUqJDp1Yro3O5R2WY-BtgwAAAkg"]
[Tue Dec 23 20:20:31.273940 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:12085] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aUqJD0ZMNime0caoKPKglwAAAYM"]
[Tue Dec 23 20:20:31.606916 2025] [:error] [pid 54408:tid 54425] [client 20.196.109.137:12097] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUqJD2up4YbWx_MWvp1UlAAAAo4"]
[Tue Dec 23 20:20:31.892998 2025] [:error] [pid 54297:tid 54311] [client 20.196.109.137:12060] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUqJD0ZMNime0caoKPKgmQAAAYo"]
[Tue Dec 23 20:20:32.208779 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:12081] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUqJELdHHpIDpQ39rwk8UAAAABY"]
[Tue Dec 23 20:20:32.511914 2025] [:error] [pid 54375:tid 54381] [client 20.196.109.137:12104] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aUqJEJ1Yro3O5R2WY-BthQAAAkQ"]
[Tue Dec 23 20:20:32.816727 2025] [:error] [pid 54297:tid 54302] [client 20.196.109.137:12095] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aUqJEEZMNime0caoKPKgnQAAAYE"]
[Tue Dec 23 20:20:33.104515 2025] [:error] [pid 3406:tid 3470] [client 20.196.109.137:12127] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aUqJEfn8DLWxW7TPzpHj0QAAAEY"]
[Tue Dec 23 20:20:33.401772 2025] [:error] [pid 3406:tid 3466] [client 20.196.109.137:12037] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aUqJEfn8DLWxW7TPzpHj0gAAAEI"]
[Tue Dec 23 20:20:33.685760 2025] [:error] [pid 54340:tid 54354] [client 20.196.109.137:11976] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aUqJEZye8-oij4iGhogmFgAAAgw"]
[Tue Dec 23 20:20:33.981028 2025] [:error] [pid 3405:tid 3457] [client 20.196.109.137:12145] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUqJEbdHHpIDpQ39rwk8VAAAABQ"]
[Tue Dec 23 20:20:34.267732 2025] [:error] [pid 54297:tid 54312] [client 20.196.109.137:12260] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUqJEkZMNime0caoKPKgogAAAYs"]
[Tue Dec 23 20:20:34.547881 2025] [:error] [pid 3406:tid 3485] [client 20.196.109.137:12256] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUqJEvn8DLWxW7TPzpHj1AAAAFU"]
[Tue Dec 23 20:20:34.830529 2025] [:error] [pid 3497:tid 3505] [client 20.196.109.137:12217] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aUqJEuzUE6hZ8LJecSsR8QAAAMU"]
[Tue Dec 23 20:20:35.125947 2025] [:error] [pid 3404:tid 3425] [client 20.196.109.137:12144] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUqJE8JGbPWZNlrhVJdTBAAAAdA"]
[Tue Dec 23 20:20:35.422959 2025] [:error] [pid 3497:tid 3513] [client 20.196.109.137:11999] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUqJE-zUE6hZ8LJecSsR9AAAAM0"]
[Tue Dec 23 20:20:35.710665 2025] [:error] [pid 11812:tid 11831] [client 20.196.109.137:11972] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUqJE7BkIQ4nTXm4A3UY2QAAAJE"]
[Tue Dec 23 20:20:35.988141 2025] [:error] [pid 54408:tid 54420] [client 20.196.109.137:12198] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aUqJE2up4YbWx_MWvp1UmQAAAok"]
[Tue Dec 23 20:20:36.265083 2025] [:error] [pid 54297:tid 54325] [client 20.196.109.137:12124] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUqJFEZMNime0caoKPKgowAAAZg"]
[Tue Dec 23 20:20:36.542209 2025] [:error] [pid 3497:tid 3517] [client 20.196.109.137:12119] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUqJFOzUE6hZ8LJecSsR9wAAANE"]
[Tue Dec 23 20:20:36.858275 2025] [:error] [pid 25976:tid 25999] [client 20.196.109.137:12064] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUqJFLF6LaWzQScE-xN7ewAAARU"]
[Tue Dec 23 20:20:37.182637 2025] [:error] [pid 54340:tid 54365] [client 20.196.109.137:12269] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aUqJFZye8-oij4iGhogmGQAAAhc"]
[Tue Dec 23 20:20:37.494368 2025] [:error] [pid 54340:tid 54366] [client 20.196.109.137:12131] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUqJFZye8-oij4iGhogmGwAAAhg"]
[Tue Dec 23 20:20:37.772448 2025] [:error] [pid 3406:tid 3477] [client 20.196.109.137:12113] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUqJFfn8DLWxW7TPzpHj1wAAAE0"]
[Tue Dec 23 20:20:38.089139 2025] [:error] [pid 11812:tid 11832] [client 20.196.109.137:12089] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUqJFrBkIQ4nTXm4A3UY2wAAAJI"]
[Tue Dec 23 20:20:38.420187 2025] [:error] [pid 54375:tid 54398] [client 20.196.109.137:12212] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aUqJFp1Yro3O5R2WY-BtjgAAAlU"]
[Tue Dec 23 20:20:38.754356 2025] [:error] [pid 54375:tid 54378] [client 20.196.109.137:12101] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUqJFp1Yro3O5R2WY-BtkAAAAkE"]
[Tue Dec 23 20:20:39.080829 2025] [:error] [pid 3405:tid 3458] [client 20.196.109.137:12071] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUqJF7dHHpIDpQ39rwk8XQAAABU"]
[Tue Dec 23 20:20:39.636585 2025] [:error] [pid 3406:tid 3469] [client 20.196.109.137:12010] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUqJF_n8DLWxW7TPzpHj2QAAAEU"]
[Tue Dec 23 20:20:40.044192 2025] [:error] [pid 3405:tid 3454] [client 20.196.109.137:11942] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aUqJGLdHHpIDpQ39rwk8YAAAABE"]
[Tue Dec 23 20:20:40.394031 2025] [:error] [pid 11812:tid 11828] [client 20.196.109.137:12067] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUqJGLBkIQ4nTXm4A3UY4AAAAI4"]
[Tue Dec 23 20:20:40.688952 2025] [:error] [pid 11812:tid 11818] [client 20.196.109.137:12221] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUqJGLBkIQ4nTXm4A3UY4gAAAIQ"]
[Tue Dec 23 20:20:41.040363 2025] [:error] [pid 11812:tid 11833] [client 20.196.109.137:12136] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUqJGbBkIQ4nTXm4A3UY5gAAAJM"]
[Tue Dec 23 20:20:41.420223 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:12151] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aUqJGbdHHpIDpQ39rwk8YQAAAAM"]
[Tue Dec 23 20:20:41.733940 2025] [:error] [pid 3405:tid 3456] [client 20.196.109.137:11973] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUqJGbdHHpIDpQ39rwk8YwAAABM"]
[Tue Dec 23 20:20:42.043394 2025] [:error] [pid 11812:tid 11834] [client 20.196.109.137:12044] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUqJGrBkIQ4nTXm4A3UY6AAAAJQ"]
[Tue Dec 23 20:20:42.342895 2025] [:error] [pid 3405:tid 3452] [client 20.196.109.137:12130] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUqJGrdHHpIDpQ39rwk8ZgAAAA8"]
[Tue Dec 23 20:20:42.667196 2025] [:error] [pid 54375:tid 54397] [client 20.196.109.137:12182] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aUqJGp1Yro3O5R2WY-BtkQAAAlQ"]
[Tue Dec 23 20:20:42.976546 2025] [:error] [pid 3497:tid 3510] [client 20.196.109.137:12065] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUqJGuzUE6hZ8LJecSsR_QAAAMo"]
[Tue Dec 23 20:20:43.282181 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:12046] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUqJG7dHHpIDpQ39rwk8aAAAABc"]
[Tue Dec 23 20:20:43.703563 2025] [:error] [pid 54408:tid 54420] [client 20.196.109.137:12007] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUqJG2up4YbWx_MWvp1UowAAAok"]
[Tue Dec 23 20:20:43.983110 2025] [:error] [pid 54408:tid 54425] [client 20.196.109.137:12196] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aUqJG2up4YbWx_MWvp1UpQAAAo4"]
[Tue Dec 23 20:20:44.265604 2025] [:error] [pid 3404:tid 3420] [client 20.196.109.137:12079] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUqJHMJGbPWZNlrhVJdTEAAAAcs"]
[Tue Dec 23 20:20:44.543644 2025] [:error] [pid 3405:tid 3451] [client 20.196.109.137:12055] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUqJHLdHHpIDpQ39rwk8awAAAA4"]
[Tue Dec 23 20:20:44.877676 2025] [:error] [pid 3404:tid 3421] [client 20.196.109.137:12082] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUqJHMJGbPWZNlrhVJdTEQAAAcw"]
[Tue Dec 23 20:20:45.217926 2025] [:error] [pid 25976:tid 26000] [client 20.196.109.137:12157] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aUqJHbF6LaWzQScE-xN7hAAAARY"]
[Tue Dec 23 20:20:45.564586 2025] [:error] [pid 25976:tid 25986] [client 20.196.109.137:12094] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUqJHbF6LaWzQScE-xN7hQAAAQg"]
[Tue Dec 23 20:20:45.927357 2025] [:error] [pid 54408:tid 54435] [client 20.196.109.137:12091] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUqJHWup4YbWx_MWvp1UpwAAApg"]
[Tue Dec 23 20:20:46.264624 2025] [:error] [pid 25976:tid 25983] [client 20.196.109.137:12066] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUqJHrF6LaWzQScE-xN7hwAAAQU"]
[Tue Dec 23 20:20:46.594628 2025] [:error] [pid 54297:tid 54314] [client 20.196.109.137:12004] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aUqJHkZMNime0caoKPKgqwAAAY0"]
[Tue Dec 23 20:20:46.903866 2025] [:error] [pid 11812:tid 11818] [client 20.196.109.137:12054] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUqJHrBkIQ4nTXm4A3UY8AAAAIQ"]
[Tue Dec 23 20:20:47.320804 2025] [:error] [pid 54340:tid 54349] [client 20.196.109.137:11996] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUqJH5ye8-oij4iGhogmIQAAAgc"]
[Tue Dec 23 20:20:47.601492 2025] [:error] [pid 54340:tid 54355] [client 20.196.109.137:19229] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUqJH5ye8-oij4iGhogmIwAAAg0"]
[Tue Dec 23 20:20:47.936562 2025] [:error] [pid 54340:tid 54348] [client 20.196.109.137:12158] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aUqJH5ye8-oij4iGhogmJAAAAgY"]
[Tue Dec 23 20:20:48.246720 2025] [:error] [pid 54340:tid 54351] [client 20.196.109.137:11990] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUqJIJye8-oij4iGhogmJgAAAgk"]
[Tue Dec 23 20:20:48.585729 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:12109] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUqJILdHHpIDpQ39rwk8dgAAAAk"]
[Tue Dec 23 20:20:48.963942 2025] [:error] [pid 11812:tid 11837] [client 20.196.109.137:12011] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUqJILBkIQ4nTXm4A3UY8wAAAJc"]
[Tue Dec 23 20:20:49.376781 2025] [:error] [pid 3497:tid 3507] [client 20.196.109.137:12148] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aUqJIezUE6hZ8LJecSsSAAAAAMc"]
[Tue Dec 23 20:20:49.695898 2025] [:error] [pid 11812:tid 11830] [client 20.196.109.137:12147] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aUqJIbBkIQ4nTXm4A3UY9AAAAJA"]
[Tue Dec 23 20:20:50.032041 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Tue Dec 23 20:20:50.188431 2025] [:error] [pid 3405:tid 3439] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/321.php
[Tue Dec 23 20:20:50.359747 2025] [:error] [pid 3405:tid 3458] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Dec 23 20:20:50.517755 2025] [:error] [pid 3405:tid 3454] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Dec 23 20:20:50.664802 2025] [:error] [pid 3405:tid 3447] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Tue Dec 23 20:20:50.821160 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Dec 23 20:20:50.983974 2025] [:error] [pid 3405:tid 3448] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Dec 23 20:20:51.130283 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Tue Dec 23 20:20:51.520078 2025] [:error] [pid 3405:tid 3440] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Tue Dec 23 20:20:51.667624 2025] [:error] [pid 3405:tid 3441] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Dec 23 20:20:51.843333 2025] [:error] [pid 3405:tid 3446] [client 20.196.109.137:12035] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Dec 23 20:20:52.010000 2025] [:error] [pid 3405:tid 3437] [client 20.196.109.137:12035] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUqJJLdHHpIDpQ39rwk8iAAAAAA"]
[Tue Dec 23 20:20:52.378814 2025] [:error] [pid 11812:tid 11821] [client 20.196.109.137:12186] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUqJJLBkIQ4nTXm4A3UY-QAAAIc"]
[Tue Dec 23 20:20:52.692480 2025] [:error] [pid 3405:tid 3439] [client 20.196.109.137:12045] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUqJJLdHHpIDpQ39rwk8igAAAAI"]
[Tue Dec 23 20:20:53.003917 2025] [:error] [pid 3405:tid 3459] [client 20.196.109.137:12041] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aUqJJbdHHpIDpQ39rwk8jQAAABY"]
[Tue Dec 23 20:20:53.479438 2025] [:error] [pid 3405:tid 3458] [client 20.196.109.137:12214] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUqJJbdHHpIDpQ39rwk8jgAAABU"]
[Tue Dec 23 20:20:53.892428 2025] [:error] [pid 54297:tid 54308] [client 20.196.109.137:12100] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUqJJUZMNime0caoKPKgrgAAAYc"]
[Tue Dec 23 20:20:54.282101 2025] [:error] [pid 11812:tid 11832] [client 20.196.109.137:12038] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUqJJrBkIQ4nTXm4A3UY_QAAAJI"]
[Tue Dec 23 20:20:54.653653 2025] [:error] [pid 3405:tid 3442] [client 20.196.109.137:11979] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aUqJJrdHHpIDpQ39rwk8jwAAAAU"]
[Tue Dec 23 20:20:55.097050 2025] [:error] [pid 54408:tid 54419] [client 20.196.109.137:12022] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUqJJ2up4YbWx_MWvp1UqwAAAog"]
[Tue Dec 23 20:20:55.473990 2025] [:error] [pid 54408:tid 54416] [client 20.196.109.137:11971] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUqJJ2up4YbWx_MWvp1UrAAAAoU"]
[Tue Dec 23 20:20:55.807580 2025] [:error] [pid 25976:tid 25993] [client 20.196.109.137:12078] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUqJJ7F6LaWzQScE-xN7mgAAAQ8"]
[Tue Dec 23 20:20:56.127330 2025] [:error] [pid 54408:tid 54429] [client 20.196.109.137:12001] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aUqJKGup4YbWx_MWvp1UrgAAApI"]
[Tue Dec 23 20:20:56.467597 2025] [:error] [pid 25976:tid 25984] [client 20.196.109.137:12105] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUqJKLF6LaWzQScE-xN7nAAAAQY"]
[Tue Dec 23 20:20:56.762012 2025] [:error] [pid 54408:tid 54418] [client 20.196.109.137:12003] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUqJKGup4YbWx_MWvp1UsAAAAoc"]
[Tue Dec 23 20:20:57.113491 2025] [:error] [pid 3404:tid 3424] [client 20.196.109.137:12159] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUqJKcJGbPWZNlrhVJdTHAAAAc8"]
[Tue Dec 23 20:20:57.411902 2025] [:error] [pid 54375:tid 54396] [client 20.196.109.137:11978] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aUqJKZ1Yro3O5R2WY-BtlwAAAlM"]
[Tue Dec 23 20:20:57.850039 2025] [:error] [pid 54375:tid 54382] [client 20.196.109.137:12061] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUqJKZ1Yro3O5R2WY-BtmAAAAkU"]
[Tue Dec 23 20:20:58.216348 2025] [:error] [pid 3405:tid 3438] [client 20.196.109.137:12170] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUqJKrdHHpIDpQ39rwk8kgAAAAE"]
[Tue Dec 23 20:20:58.564093 2025] [:error] [pid 25976:tid 25987] [client 20.196.109.137:11981] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUqJKrF6LaWzQScE-xN7oQAAAQk"]
[Tue Dec 23 20:20:58.870779 2025] [:error] [pid 25976:tid 25985] [client 20.196.109.137:12051] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aUqJKrF6LaWzQScE-xN7ogAAAQc"]
[Tue Dec 23 20:20:59.247094 2025] [:error] [pid 3405:tid 3452] [client 20.196.109.137:12057] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUqJK7dHHpIDpQ39rwk8kwAAAA8"]
[Tue Dec 23 20:20:59.539975 2025] [:error] [pid 3406:tid 3467] [client 20.196.109.137:12072] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUqJK_n8DLWxW7TPzpHj9QAAAEM"]
[Tue Dec 23 20:20:59.867756 2025] [:error] [pid 25976:tid 26001] [client 20.196.109.137:12070] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUqJK7F6LaWzQScE-xN7pwAAARc"]
[Tue Dec 23 20:21:00.194964 2025] [:error] [pid 3406:tid 3466] [client 20.196.109.137:12134] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aUqJLPn8DLWxW7TPzpHj9gAAAEI"]
[Tue Dec 23 20:21:00.667394 2025] [:error] [pid 54408:tid 54420] [client 20.196.109.137:12077] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aUqJLGup4YbWx_MWvp1UswAAAok"]
[Tue Dec 23 20:21:01.174630 2025] [:error] [pid 11812:tid 11814] [client 20.196.109.137:11908] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aUqJLbBkIQ4nTXm4A3UZCgAAAIA"]
[Tue Dec 23 20:21:01.553821 2025] [:error] [pid 54375:tid 54377] [client 20.196.109.137:11983] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aUqJLZ1Yro3O5R2WY-BtmQAAAkA"]
[Tue Dec 23 20:21:01.838323 2025] [:error] [pid 54297:tid 54315] [client 20.196.109.137:11946] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aUqJLUZMNime0caoKPKgvAAAAY4"]
[Tue Dec 23 20:21:02.147022 2025] [:error] [pid 3404:tid 3414] [client 20.196.109.137:19237] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUqJLsJGbPWZNlrhVJdTHwAAAcU"]
[Tue Dec 23 20:21:02.452165 2025] [:error] [pid 3404:tid 3412] [client 20.196.109.137:12099] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUqJLsJGbPWZNlrhVJdTIAAAAcM"]
[Tue Dec 23 20:21:02.748170 2025] [:error] [pid 54297:tid 54324] [client 20.196.109.137:12132] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUqJLkZMNime0caoKPKgwgAAAZc"]
[Tue Dec 23 20:21:03.167611 2025] [:error] [pid 3497:tid 3519] [client 20.196.109.137:12076] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aUqJL-zUE6hZ8LJecSsSCAAAANM"]
[Tue Dec 23 20:21:03.547491 2025] [:error] [pid 54297:tid 54304] [client 20.196.109.137:11974] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUqJL0ZMNime0caoKPKgxAAAAYM"]
[Tue Dec 23 20:21:03.877384 2025] [:error] [pid 54297:tid 54318] [client 20.196.109.137:12073] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUqJL0ZMNime0caoKPKgxgAAAZE"]
[Tue Dec 23 20:21:04.241911 2025] [:error] [pid 11812:tid 11825] [client 20.196.109.137:12029] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUqJMLBkIQ4nTXm4A3UZDQAAAIs"]
[Tue Dec 23 20:21:04.612076 2025] [:error] [pid 54297:tid 54309] [client 20.196.109.137:11936] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aUqJMEZMNime0caoKPKgyQAAAYg"]
[Tue Dec 23 20:21:04.918522 2025] [:error] [pid 3497:tid 3508] [client 20.196.109.137:12002] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUqJMOzUE6hZ8LJecSsSCwAAAMg"]
[Tue Dec 23 20:21:05.260476 2025] [:error] [pid 3497:tid 3514] [client 20.196.109.137:12036] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUqJMezUE6hZ8LJecSsSDQAAAM4"]
[Tue Dec 23 20:21:05.596459 2025] [:error] [pid 54340:tid 54350] [client 20.196.109.137:12008] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUqJMZye8-oij4iGhogmNAAAAgg"]
[Tue Dec 23 20:21:05.926229 2025] [:error] [pid 54340:tid 54362] [client 20.196.109.137:12005] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aUqJMZye8-oij4iGhogmNQAAAhQ"]
[Tue Dec 23 20:21:06.223004 2025] [:error] [pid 3405:tid 3447] [client 20.196.109.137:12142] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqJMrdHHpIDpQ39rwk8mAAAAAo"]
[Tue Dec 23 20:21:06.557446 2025] [:error] [pid 3406:tid 3487] [client 20.196.109.137:11926] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqJMvn8DLWxW7TPzpHj-gAAAFc"]
[Tue Dec 23 20:21:06.865858 2025] [:error] [pid 3406:tid 3468] [client 20.196.109.137:11966] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqJMvn8DLWxW7TPzpHj-wAAAEQ"]
[Tue Dec 23 20:21:07.159414 2025] [:error] [pid 3497:tid 3502] [client 20.196.109.137:11962] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aUqJM-zUE6hZ8LJecSsSEgAAAMI"]
[Tue Dec 23 20:21:07.455176 2025] [:error] [pid 54340:tid 54360] [client 20.196.109.137:12090] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aUqJM5ye8-oij4iGhogmOAAAAhI"]
[Tue Dec 23 20:21:07.825136 2025] [:error] [pid 54297:tid 54319] [client 20.196.109.137:12062] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aUqJM0ZMNime0caoKPKgzgAAAZI"]
[Tue Dec 23 20:21:08.173918 2025] [:error] [pid 54408:tid 54434] [client 20.196.109.137:11943] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aUqJNGup4YbWx_MWvp1UugAAApc"]
[Tue Dec 23 20:21:08.485674 2025] [:error] [pid 54375:tid 54383] [client 20.196.109.137:12025] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aUqJNJ1Yro3O5R2WY-BtoQAAAkY"]
[Tue Dec 23 20:21:08.789270 2025] [:error] [pid 3497:tid 3517] [client 20.196.109.137:12153] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aUqJNOzUE6hZ8LJecSsSEwAAANE"]
[Tue Dec 23 20:21:09.131166 2025] [:error] [pid 3404:tid 3416] [client 20.196.109.137:11941] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aUqJNcJGbPWZNlrhVJdTKQAAAcc"]
[Tue Dec 23 20:21:09.432034 2025] [:error] [pid 54297:tid 54313] [client 20.196.109.137:11970] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aUqJNUZMNime0caoKPKg0QAAAYw"]
[Tue Dec 23 20:21:09.725691 2025] [:error] [pid 54297:tid 54325] [client 20.196.109.137:12049] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aUqJNUZMNime0caoKPKg0wAAAZg"]
[Tue Dec 23 20:21:10.244712 2025] [:error] [pid 54375:tid 54392] [client 20.196.109.137:12084] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUqJNp1Yro3O5R2WY-BtpgAAAk8"]
[Tue Dec 23 20:21:10.866084 2025] [:error] [pid 54340:tid 54355] [client 20.196.109.137:12047] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUqJNpye8-oij4iGhogmOwAAAg0"]
[Tue Dec 23 20:21:11.248650 2025] [:error] [pid 54375:tid 54394] [client 20.196.109.137:11917] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUqJN51Yro3O5R2WY-BtqAAAAlE"]
[Tue Dec 23 20:21:12.086335 2025] [:error] [pid 3405:tid 3460] [client 20.196.109.137:12080] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aUqJOLdHHpIDpQ39rwk8ogAAABc"]
[Tue Dec 23 20:21:12.412811 2025] [:error] [pid 3404:tid 3414] [client 20.196.109.137:11987] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/des.php"] [unique_id "aUqJOMJGbPWZNlrhVJdTLAAAAcU"]
[Tue Dec 23 20:21:12.702377 2025] [:error] [pid 3406:tid 3485] [client 20.196.109.137:12087] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/des.php"] [unique_id "aUqJOPn8DLWxW7TPzpHkBAAAAFU"]
[Tue Dec 23 20:21:13.053188 2025] [:error] [pid 3404:tid 3422] [client 20.196.109.137:11933] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/des.php"] [unique_id "aUqJOcJGbPWZNlrhVJdTLgAAAc0"]
[Tue Dec 23 20:21:13.591151 2025] [:error] [pid 54408:tid 54424] [client 20.196.109.137:11912] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/des.php"] [unique_id "aUqJOWup4YbWx_MWvp1UvwAAAo0"]
[Tue Dec 23 20:21:14.175609 2025] [:error] [pid 11812:tid 11838] [client 20.196.109.137:12075] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aUqJOrBkIQ4nTXm4A3UZFwAAAJg"]
[Tue Dec 23 20:21:14.628634 2025] [:error] [pid 3406:tid 3483] [client 20.196.109.137:11944] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aUqJOvn8DLWxW7TPzpHkBQAAAFM"]
[Tue Dec 23 20:21:15.103089 2025] [:error] [pid 3406:tid 3479] [client 20.196.109.137:11994] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aUqJO_n8DLWxW7TPzpHkBwAAAE8"]
[Tue Dec 23 20:21:15.587337 2025] [:error] [pid 54375:tid 54391] [client 20.196.109.137:12000] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aUqJO51Yro3O5R2WY-BtrgAAAk4"]
[Tue Dec 23 20:21:16.041259 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:12017] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUqJPMJGbPWZNlrhVJdTNAAAAdQ"]
[Tue Dec 23 20:21:16.404410 2025] [:error] [pid 54375:tid 54390] [client 20.196.109.137:11968] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUqJPJ1Yro3O5R2WY-BtsgAAAk0"]
[Tue Dec 23 20:21:16.943885 2025] [:error] [pid 54408:tid 54416] [client 20.196.109.137:12193] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUqJPGup4YbWx_MWvp1UxgAAAoU"]
[Tue Dec 23 20:21:17.867718 2025] [:error] [pid 3404:tid 3418] [client 20.196.109.137:11923] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aUqJPcJGbPWZNlrhVJdTPQAAAck"]
[Tue Dec 23 20:21:18.244821 2025] [:error] [pid 3406:tid 3486] [client 20.196.109.137:11985] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aUqJPvn8DLWxW7TPzpHkCwAAAFY"]
[Tue Dec 23 20:21:18.607704 2025] [:error] [pid 54375:tid 54380] [client 20.196.109.137:11904] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aUqJPp1Yro3O5R2WY-BttwAAAkM"]
[Tue Dec 23 20:21:18.954234 2025] [:error] [pid 54375:tid 54393] [client 20.196.109.137:12086] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aUqJPp1Yro3O5R2WY-BtuAAAAlA"]
[Tue Dec 23 20:21:19.262946 2025] [:error] [pid 25976:tid 25986] [client 20.196.109.137:12213] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aUqJP7F6LaWzQScE-xN7sQAAAQg"]
[Tue Dec 23 20:21:19.596544 2025] [:error] [pid 3406:tid 3467] [client 20.196.109.137:12028] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUqJP_n8DLWxW7TPzpHkEAAAAEM"]
[Tue Dec 23 20:21:19.915604 2025] [:error] [pid 54375:tid 54400] [client 20.196.109.137:12024] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUqJP51Yro3O5R2WY-BtvAAAAlc"]
[Tue Dec 23 20:21:20.225652 2025] [:error] [pid 25976:tid 25994] [client 20.196.109.137:12039] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUqJQLF6LaWzQScE-xN7swAAARA"]
[Tue Dec 23 20:21:20.537843 2025] [:error] [pid 3497:tid 3523] [client 20.196.109.137:12058] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aUqJQOzUE6hZ8LJecSsSIwAAANc"]
[Tue Dec 23 20:21:20.952053 2025] [:error] [pid 3497:tid 3501] [client 20.196.109.137:11969] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aUqJQOzUE6hZ8LJecSsSJAAAAME"]
[Tue Dec 23 20:21:21.270093 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:12146] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aUqJQbF6LaWzQScE-xN7tAAAARE"]
[Tue Dec 23 20:21:21.554303 2025] [:error] [pid 25976:tid 25998] [client 20.196.109.137:12019] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aUqJQbF6LaWzQScE-xN7tgAAARQ"]
[Tue Dec 23 20:21:21.873940 2025] [:error] [pid 3406:tid 3474] [client 20.196.109.137:11977] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aUqJQfn8DLWxW7TPzpHkFgAAAEo"]
[Tue Dec 23 20:21:22.205796 2025] [:error] [pid 54375:tid 54389] [client 20.196.109.137:11998] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aUqJQp1Yro3O5R2WY-BtvwAAAkw"]
[Tue Dec 23 20:21:22.494342 2025] [:error] [pid 3497:tid 3510] [client 20.196.109.137:11891] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aUqJQuzUE6hZ8LJecSsSKgAAAMo"]
[Tue Dec 23 20:21:22.791532 2025] [:error] [pid 25976:tid 25979] [client 20.196.109.137:11859] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aUqJQrF6LaWzQScE-xN7uQAAAQE"]
[Tue Dec 23 20:21:23.115666 2025] [:error] [pid 3497:tid 3518] [client 20.196.109.137:12092] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aUqJQ-zUE6hZ8LJecSsSLAAAANI"]
[Tue Dec 23 20:21:23.415737 2025] [:error] [pid 3406:tid 3469] [client 20.196.109.137:12013] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUqJQ_n8DLWxW7TPzpHkHQAAAEU"]
[Tue Dec 23 20:21:23.731235 2025] [:error] [pid 3497:tid 3503] [client 20.196.109.137:12014] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUqJQ-zUE6hZ8LJecSsSMgAAAMM"]
[Tue Dec 23 20:21:24.044562 2025] [:error] [pid 3497:tid 3524] [client 20.196.109.137:11874] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUqJROzUE6hZ8LJecSsSNgAAANg"]
[Tue Dec 23 20:21:24.337789 2025] [:error] [pid 3497:tid 3523] [client 20.196.109.137:11991] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aUqJROzUE6hZ8LJecSsSNwAAANc"]
[Tue Dec 23 20:21:24.647591 2025] [:error] [pid 25976:tid 25992] [client 20.196.109.137:12020] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUqJRLF6LaWzQScE-xN7vQAAAQ4"]
[Tue Dec 23 20:21:24.998359 2025] [:error] [pid 25976:tid 25988] [client 20.196.109.137:11937] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUqJRLF6LaWzQScE-xN7wAAAAQo"]
[Tue Dec 23 20:21:25.314364 2025] [:error] [pid 54375:tid 54377] [client 20.196.109.137:11920] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUqJRZ1Yro3O5R2WY-BtwgAAAkA"]
[Tue Dec 23 20:21:25.614665 2025] [:error] [pid 3497:tid 3506] [client 20.196.109.137:11938] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aUqJRezUE6hZ8LJecSsSOgAAAMY"]
[Tue Dec 23 20:21:25.935541 2025] [:error] [pid 54375:tid 54391] [client 20.196.109.137:11949] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUqJRZ1Yro3O5R2WY-BtwwAAAk4"]
[Tue Dec 23 20:21:26.245640 2025] [:error] [pid 3497:tid 3520] [client 20.196.109.137:11866] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUqJRuzUE6hZ8LJecSsSPAAAANQ"]
[Tue Dec 23 20:21:26.562585 2025] [:error] [pid 11812:tid 11834] [client 20.196.109.137:12027] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUqJRrBkIQ4nTXm4A3UZHAAAAJQ"]
[Tue Dec 23 20:21:26.841559 2025] [:error] [pid 54297:tid 54321] [client 20.196.109.137:12026] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aUqJRkZMNime0caoKPKg3wAAAZQ"]
[Tue Dec 23 20:21:27.120334 2025] [:error] [pid 54340:tid 54358] [client 20.196.109.137:12074] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUqJR5ye8-oij4iGhogmSgAAAhA"]
[Tue Dec 23 20:21:27.458302 2025] [:error] [pid 54375:tid 54399] [client 20.196.109.137:11861] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUqJR51Yro3O5R2WY-BtxAAAAlY"]
[Tue Dec 23 20:21:27.793795 2025] [:error] [pid 54297:tid 54309] [client 20.196.109.137:11916] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUqJR0ZMNime0caoKPKg4QAAAYg"]
[Tue Dec 23 20:21:28.142282 2025] [:error] [pid 3497:tid 3521] [client 20.196.109.137:11930] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aUqJSOzUE6hZ8LJecSsSPwAAANU"]
[Tue Dec 23 20:21:28.447426 2025] [:error] [pid 54297:tid 54311] [client 20.196.109.137:12187] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUqJSEZMNime0caoKPKg4gAAAYo"]
[Tue Dec 23 20:21:28.790158 2025] [:error] [pid 11812:tid 11828] [client 20.196.109.137:11921] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUqJSLBkIQ4nTXm4A3UZJAAAAI4"]
[Tue Dec 23 20:21:29.158836 2025] [:error] [pid 3497:tid 3507] [client 20.196.109.137:11992] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUqJSezUE6hZ8LJecSsSQQAAAMc"]
[Tue Dec 23 20:21:29.554193 2025] [:error] [pid 3497:tid 3517] [client 20.196.109.137:11948] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aUqJSezUE6hZ8LJecSsSQwAAANE"]
[Tue Dec 23 20:21:29.880066 2025] [:error] [pid 11812:tid 11836] [client 20.196.109.137:11951] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUqJSbBkIQ4nTXm4A3UZJwAAAJY"]
[Tue Dec 23 20:21:30.229216 2025] [:error] [pid 54375:tid 54394] [client 20.196.109.137:11905] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUqJSp1Yro3O5R2WY-Bt0gAAAlE"]
[Tue Dec 23 20:21:30.535271 2025] [:error] [pid 54375:tid 54398] [client 20.196.109.137:11986] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUqJSp1Yro3O5R2WY-Bt1AAAAlU"]
[Tue Dec 23 20:21:30.864416 2025] [:error] [pid 3497:tid 3515] [client 20.196.109.137:11914] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aUqJSuzUE6hZ8LJecSsSSwAAAM8"]
[Tue Dec 23 20:21:31.163783 2025] [:error] [pid 54340:tid 54365] [client 20.196.109.137:11952] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUqJS5ye8-oij4iGhogmUgAAAhc"]
[Tue Dec 23 20:21:31.453089 2025] [:error] [pid 3497:tid 3521] [client 20.196.109.137:11918] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUqJS-zUE6hZ8LJecSsSTgAAANU"]
[Tue Dec 23 20:21:31.742873 2025] [:error] [pid 54408:tid 54417] [client 20.196.109.137:12021] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUqJS2up4YbWx_MWvp1UzAAAAoY"]
[Tue Dec 23 20:21:32.033351 2025] [:error] [pid 54408:tid 54427] [client 20.196.109.137:11993] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aUqJTGup4YbWx_MWvp1UzQAAApA"]
[Tue Dec 23 20:21:32.345325 2025] [:error] [pid 54408:tid 54413] [client 20.196.109.137:11849] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUqJTGup4YbWx_MWvp1UzgAAAoI"]
[Tue Dec 23 20:21:32.631202 2025] [:error] [pid 54375:tid 54383] [client 20.196.109.137:11931] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUqJTJ1Yro3O5R2WY-Bt4AAAAkY"]
[Tue Dec 23 20:21:32.983968 2025] [:error] [pid 54408:tid 54423] [client 20.196.109.137:12088] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUqJTGup4YbWx_MWvp1UzwAAAow"]
[Tue Dec 23 20:21:33.326943 2025] [:error] [pid 3406:tid 3472] [client 20.196.109.137:11915] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aUqJTfn8DLWxW7TPzpHkJQAAAEg"]
[Tue Dec 23 20:21:33.652725 2025] [:error] [pid 25976:tid 25995] [client 20.196.109.137:11925] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUqJTbF6LaWzQScE-xN7xAAAARE"]
[Tue Dec 23 20:21:33.989401 2025] [:error] [pid 3497:tid 3504] [client 20.196.109.137:11865] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUqJTezUE6hZ8LJecSsSVQAAAMQ"]
[Tue Dec 23 20:21:34.355612 2025] [:error] [pid 3404:tid 3413] [client 20.196.109.137:11929] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUqJTsJGbPWZNlrhVJdTSQAAAcQ"]
[Tue Dec 23 20:21:34.697944 2025] [:error] [pid 3404:tid 3429] [client 20.196.109.137:12023] [client 20.196.109.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aUqJTsJGbPWZNlrhVJdTTAAAAdQ"]
[Wed Dec 24 03:11:37.450709 2025] [:error] [pid 17495:tid 17551] [client 170.106.82.209:45894] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUrpaSX1bYzs2kDzvLXa-AAAAEA"]
[Wed Dec 24 06:07:08.948779 2025] [:error] [pid 16467:tid 16503] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.de/
[Wed Dec 24 06:07:08.969826 2025] [:error] [pid 16467:tid 16500] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.bing.com/
[Wed Dec 24 06:07:08.997529 2025] [:error] [pid 16467:tid 16512] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Wed Dec 24 06:07:09.019650 2025] [:error] [pid 16467:tid 16502] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Wed Dec 24 06:07:09.061580 2025] [:error] [pid 16467:tid 16514] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.bing.com/
[Wed Dec 24 06:07:09.083535 2025] [:error] [pid 16467:tid 16510] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.co.uk/
[Wed Dec 24 06:07:09.110644 2025] [:error] [pid 16467:tid 16513] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.yahoo.com/
[Wed Dec 24 06:07:09.155811 2025] [:error] [pid 16467:tid 16511] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Wed Dec 24 06:07:09.175967 2025] [:error] [pid 16467:tid 16517] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.com/
[Wed Dec 24 06:07:09.199663 2025] [:error] [pid 16467:tid 16521] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.com/
[Wed Dec 24 06:07:09.281809 2025] [:error] [pid 16467:tid 16508] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Wed Dec 24 06:07:09.359885 2025] [:error] [pid 16467:tid 16497] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Wed Dec 24 06:07:09.396468 2025] [:error] [pid 16467:tid 16505] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.co.uk/
[Wed Dec 24 06:07:09.432233 2025] [:error] [pid 16467:tid 16507] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.de/
[Wed Dec 24 06:07:09.468194 2025] [:error] [pid 16467:tid 16515] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.co.uk/
[Wed Dec 24 06:07:09.493901 2025] [:error] [pid 16467:tid 16504] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://duckduckgo.com/
[Wed Dec 24 06:07:09.514236 2025] [:error] [pid 16467:tid 16503] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://duckduckgo.com/
[Wed Dec 24 06:07:09.534570 2025] [:error] [pid 16467:tid 16500] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Wed Dec 24 06:07:09.555595 2025] [:error] [pid 16467:tid 16512] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.de/
[Wed Dec 24 06:07:09.576876 2025] [:error] [pid 16467:tid 16502] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.de/
[Wed Dec 24 06:07:09.601701 2025] [:error] [pid 16467:tid 16519] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.de/
[Wed Dec 24 06:07:09.733743 2025] [:error] [pid 16467:tid 16517] [client 4.196.65.89:17968] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://duckduckgo.com/
[Wed Dec 24 06:07:09.816864 2025] [:error] [pid 16467:tid 16516] [client 4.196.65.89:17968] [client 4.196.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUsSjY0TJMcBxX5slgqI3AAAAFM"], referer: https://www.google.co.uk/
[Wed Dec 24 09:49:18.000403 2025] [:error] [pid 54139:tid 54163] [client 157.230.55.55:48092] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aUtGncrYCZenIDzgXuLXMwAAARY"]
[Wed Dec 24 09:49:18.147705 2025] [:error] [pid 54139:tid 54159] [client 157.230.55.55:48106] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aUtGnsrYCZenIDzgXuLXNAAAARI"]
[Wed Dec 24 09:49:18.350758 2025] [:error] [pid 16550:tid 16572] [client 157.230.55.55:48114] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/core/.env"] [unique_id "aUtGnqYYcdD-LuO7vrBBUAAAANQ"]
[Wed Dec 24 10:45:01.482658 2025] [:error] [pid 54139:tid 54162] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Dec 24 10:45:01.766279 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Dec 24 10:45:04.299425 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Dec 24 10:45:04.570351 2025] [:error] [pid 54139:tid 54158] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Dec 24 10:45:04.826083 2025] [:error] [pid 54139:tid 54165] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Dec 24 10:45:05.092901 2025] [:error] [pid 54139:tid 54151] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Dec 24 10:45:05.334377 2025] [:error] [pid 54139:tid 54145] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Dec 24 10:45:05.563967 2025] [:error] [pid 54139:tid 54144] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Dec 24 10:45:06.048895 2025] [:error] [pid 54139:tid 54158] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Dec 24 10:45:06.537998 2025] [:error] [pid 54139:tid 54160] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Dec 24 10:45:06.837022 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Dec 24 10:45:07.095354 2025] [:error] [pid 54139:tid 54158] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Dec 24 10:45:07.335287 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Dec 24 10:45:07.574564 2025] [:error] [pid 54139:tid 54160] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Dec 24 10:45:07.819030 2025] [:error] [pid 54139:tid 54161] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Dec 24 10:45:08.047763 2025] [:error] [pid 54139:tid 54146] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Dec 24 10:45:08.286120 2025] [:error] [pid 54139:tid 54149] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Dec 24 10:45:08.535129 2025] [:error] [pid 54139:tid 54148] [client 63.135.161.57:58981] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Dec 24 10:45:14.012749 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.57:58981] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtTusrYCZenIDzgXuLt7AAAAQI"]
[Wed Dec 24 10:45:15.182415 2025] [:error] [pid 16467:tid 16498] [client 104.234.53.207:62161] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtTu40TJMcBxX5slgrNeAAAAEE"]
[Wed Dec 24 10:45:16.422144 2025] [:error] [pid 16550:tid 16574] [client 104.234.53.226:30329] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Dec 24 10:45:17.140507 2025] [:error] [pid 16550:tid 16557] [client 104.234.53.226:30329] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUtTvaYYcdD-LuO7vrBSTQAAAMU"]
[Wed Dec 24 10:45:18.394105 2025] [:error] [pid 54139:tid 54146] [client 104.234.53.207:49033] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Dec 24 10:45:18.605980 2025] [:error] [pid 54139:tid 54154] [client 104.234.53.207:49033] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUtTvsrYCZenIDzgXuLuNQAAAQ0"]
[Wed Dec 24 10:45:19.325697 2025] [:error] [pid 16550:tid 16552] [client 104.234.53.219:34169] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Dec 24 10:45:20.561300 2025] [:error] [pid 16550:tid 16572] [client 104.234.53.219:34169] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtTwKYYcdD-LuO7vrBShQAAANQ"]
[Wed Dec 24 10:45:21.262467 2025] [:error] [pid 16466:tid 16490] [client 104.234.53.224:32841] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtTwbu0JcuKJMjJn6yyqgAAABQ"]
[Wed Dec 24 10:45:21.699784 2025] [:error] [pid 16467:tid 16504] [client 63.135.161.46:20925] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtTwY0TJMcBxX5slgrNzQAAAEc"]
[Wed Dec 24 10:45:22.233351 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.65:54123] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtTwru0JcuKJMjJn6yytAAAAA0"]
[Wed Dec 24 10:45:22.711872 2025] [:error] [pid 16467:tid 16499] [client 104.234.53.225:44559] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtTwo0TJMcBxX5slgrN6wAAAEI"]
[Wed Dec 24 10:45:23.185619 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.63:45333] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtTw8rYCZenIDzgXuLuewAAAQs"]
[Wed Dec 24 10:45:23.901249 2025] [:error] [pid 16467:tid 16510] [client 63.135.161.71:63323] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtTw40TJMcBxX5slgrODQAAAE0"]
[Wed Dec 24 10:45:24.347026 2025] [:error] [pid 16467:tid 16502] [client 63.135.161.48:22061] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Dec 24 10:45:24.802502 2025] [:error] [pid 16467:tid 16517] [client 63.135.161.48:22061] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUtTxI0TJMcBxX5slgrOHgAAAFQ"]
[Wed Dec 24 10:45:27.784610 2025] [:error] [pid 16550:tid 16576] [client 63.135.161.64:34909] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtTx6YYcdD-LuO7vrBSxgAAANg"]
[Wed Dec 24 10:45:28.454461 2025] [:error] [pid 54139:tid 54147] [client 104.234.53.210:22415] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtTyMrYCZenIDzgXuLuywAAAQY"]
[Wed Dec 24 10:45:28.888706 2025] [:error] [pid 16550:tid 16576] [client 63.135.161.51:44093] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Dec 24 10:45:29.152423 2025] [:error] [pid 16550:tid 16558] [client 63.135.161.51:44093] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtTyaYYcdD-LuO7vrBS1QAAAMY"]
[Wed Dec 24 10:45:30.624255 2025] [:error] [pid 16467:tid 16519] [client 104.234.53.221:44177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Dec 24 10:45:31.572377 2025] [:error] [pid 16467:tid 16505] [client 104.234.53.221:44177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Dec 24 10:45:32.265950 2025] [:error] [pid 16467:tid 16505] [client 104.234.53.221:44177] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUtTzI0TJMcBxX5slgrOjwAAAEg"]
[Wed Dec 24 10:45:32.707186 2025] [:error] [pid 16550:tid 16566] [client 63.135.161.59:63631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Dec 24 10:45:32.939909 2025] [:error] [pid 16550:tid 16565] [client 63.135.161.59:63631] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUtTzKYYcdD-LuO7vrBTDAAAAM0"]
[Wed Dec 24 10:45:33.509692 2025] [:error] [pid 16550:tid 16571] [client 63.135.161.48:32317] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Dec 24 10:45:34.044612 2025] [:error] [pid 16550:tid 16572] [client 63.135.161.48:32317] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUtTzqYYcdD-LuO7vrBTHAAAANQ"]
[Wed Dec 24 10:45:34.759803 2025] [:error] [pid 16468:tid 16547] [client 63.135.161.67:52699] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUtTzodyfuSTFLkCbP8S4QAAAJc"]
[Wed Dec 24 10:45:36.411451 2025] [:error] [pid 54139:tid 54145] [client 104.234.53.222:34975] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Dec 24 10:45:36.633356 2025] [:error] [pid 54139:tid 54163] [client 104.234.53.222:34975] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Dec 24 10:45:37.097752 2025] [:error] [pid 54139:tid 54157] [client 104.234.53.222:34975] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUtT0crYCZenIDzgXuLvRAAAARA"]
[Wed Dec 24 10:45:37.852488 2025] [:error] [pid 16466:tid 16479] [client 63.135.161.56:63495] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUtT0bu0JcuKJMjJn6yzXgAAAAk"]
[Wed Dec 24 10:45:38.591943 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.69:23503] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUtT0ru0JcuKJMjJn6yzagAAAAM"]
[Wed Dec 24 10:45:39.170049 2025] [:error] [pid 16467:tid 16504] [client 63.135.161.49:61221] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUtT040TJMcBxX5slgrO_gAAAEc"]
[Wed Dec 24 10:45:39.616027 2025] [:error] [pid 54139:tid 54157] [client 63.135.161.73:32741] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUtT08rYCZenIDzgXuLvcQAAARA"]
[Wed Dec 24 10:45:41.558127 2025] [:error] [pid 16466:tid 16487] [client 63.135.161.61:57435] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Dec 24 10:45:41.845570 2025] [:error] [pid 16466:tid 16494] [client 63.135.161.61:57435] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUtT1bu0JcuKJMjJn6yzlAAAABg"]
[Wed Dec 24 10:45:42.386405 2025] [:error] [pid 16550:tid 16570] [client 104.234.53.215:20437] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUtT1qYYcdD-LuO7vrBTnQAAANI"]
[Wed Dec 24 10:45:42.816129 2025] [:error] [pid 16550:tid 16554] [client 63.135.161.70:47443] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUtT1qYYcdD-LuO7vrBToQAAAMI"]
[Wed Dec 24 10:45:43.837594 2025] [:error] [pid 54139:tid 54160] [client 63.135.161.76:21145] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Dec 24 10:45:44.305713 2025] [:error] [pid 54139:tid 54165] [client 63.135.161.76:21145] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Dec 24 10:45:45.535619 2025] [:error] [pid 54139:tid 54162] [client 63.135.161.76:21145] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUtT2crYCZenIDzgXuLvvwAAARU"]
[Wed Dec 24 10:45:46.828096 2025] [:error] [pid 16466:tid 16470] [client 63.135.161.67:22767] [client 63.135.161.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.67, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUtT2ru0JcuKJMjJn6yz2wAAAAA"]
[Wed Dec 24 10:45:47.084903 2025] [:error] [pid 16466:tid 16494] [client 63.135.161.67:22767] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Dec 24 10:45:48.324424 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.67:22767] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Dec 24 10:45:48.591792 2025] [:error] [pid 16466:tid 16490] [client 63.135.161.67:22767] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Dec 24 10:45:49.972022 2025] [:error] [pid 16466:tid 16490] [client 63.135.161.67:22767] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUtT3bu0JcuKJMjJn6y0BAAAABQ"]
[Wed Dec 24 10:45:50.778918 2025] [:error] [pid 54139:tid 54161] [client 63.135.161.65:30633] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Dec 24 10:45:51.033845 2025] [:error] [pid 54139:tid 54142] [client 63.135.161.65:30633] [client 63.135.161.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.65, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUtT38rYCZenIDzgXuLwHgAAAQE"]
[Wed Dec 24 10:45:51.533893 2025] [:error] [pid 54139:tid 54163] [client 63.135.161.65:30633] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUtT38rYCZenIDzgXuLwKwAAARY"]
[Wed Dec 24 10:45:52.921595 2025] [:error] [pid 16467:tid 16514] [client 104.234.53.209:27485] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Dec 24 10:45:53.364325 2025] [:error] [pid 16467:tid 16499] [client 104.234.53.209:27485] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Wed Dec 24 10:45:53.789059 2025] [:error] [pid 16467:tid 16506] [client 104.234.53.209:27485] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUtT4Y0TJMcBxX5slgrP8QAAAEk"]
[Wed Dec 24 10:45:54.252434 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.71:50417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Dec 24 10:45:55.008138 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.71:50417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Dec 24 10:45:55.457904 2025] [:error] [pid 54139:tid 54146] [client 63.135.161.71:50417] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Dec 24 10:45:56.063099 2025] [:error] [pid 54139:tid 54148] [client 63.135.161.71:50417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Dec 24 10:45:56.298058 2025] [:error] [pid 54139:tid 54151] [client 63.135.161.71:50417] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUtT5MrYCZenIDzgXuLwgQAAAQo"]
[Wed Dec 24 10:45:56.731672 2025] [:error] [pid 16550:tid 16562] [client 104.234.53.215:38837] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Dec 24 10:45:56.978282 2025] [:error] [pid 16550:tid 16576] [client 104.234.53.215:38837] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Dec 24 10:45:57.343014 2025] [:error] [pid 16550:tid 16561] [client 104.234.53.215:38837] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUtT5aYYcdD-LuO7vrBUdAAAAMk"]
[Wed Dec 24 10:45:58.165887 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.73:37655] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Dec 24 10:45:58.628127 2025] [:error] [pid 54139:tid 54149] [client 63.135.161.73:37655] [client 63.135.161.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.73, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUtT5srYCZenIDzgXuLwqgAAAQg"]
[Wed Dec 24 10:45:58.860455 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.73:37655] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUtT5srYCZenIDzgXuLwsAAAAQA"]
[Wed Dec 24 10:46:01.860504 2025] [:error] [pid 16466:tid 16484] [client 104.234.53.222:36407] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Dec 24 10:46:03.203563 2025] [:error] [pid 16466:tid 16489] [client 104.234.53.222:36407] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Dec 24 10:46:03.442360 2025] [:error] [pid 16466:tid 16482] [client 104.234.53.222:36407] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUtT67u0JcuKJMjJn6y0zAAAAAw"]
[Wed Dec 24 10:46:03.910215 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.60:50057] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Dec 24 10:46:04.615770 2025] [:error] [pid 16467:tid 16509] [client 63.135.161.60:50057] [client 63.135.161.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.60, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUtT7I0TJMcBxX5slgrQmAAAAEw"]
[Wed Dec 24 10:46:04.886908 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.60:50057] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Dec 24 10:46:07.787379 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.60:50057] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Dec 24 10:46:08.014700 2025] [:error] [pid 16467:tid 16514] [client 63.135.161.60:50057] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Dec 24 10:46:08.258027 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.60:50057] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUtT8I0TJMcBxX5slgrQ1gAAAEo"]
[Wed Dec 24 10:46:08.721237 2025] [:error] [pid 54139:tid 54148] [client 104.234.53.215:44903] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Dec 24 10:46:08.942844 2025] [:error] [pid 54139:tid 54158] [client 104.234.53.215:44903] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aUtT8MrYCZenIDzgXuLxKwAAARE"]
[Wed Dec 24 10:46:09.679738 2025] [:error] [pid 16466:tid 16487] [client 63.135.161.49:54617] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Dec 24 10:46:09.955571 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.49:54617] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUtT8bu0JcuKJMjJn6y1PgAAAA0"]
[Wed Dec 24 10:46:10.948007 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.48:61249] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Dec 24 10:46:11.169602 2025] [:error] [pid 16466:tid 16489] [client 63.135.161.48:61249] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUtT87u0JcuKJMjJn6y1VAAAABM"]
[Wed Dec 24 10:46:11.672753 2025] [:error] [pid 54139:tid 54155] [client 63.135.161.50:49037] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUtT88rYCZenIDzgXuLxWAAAAQ4"]
[Wed Dec 24 10:46:12.229936 2025] [:error] [pid 16468:tid 16537] [client 63.135.161.72:59047] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Dec 24 10:46:12.453182 2025] [:error] [pid 16468:tid 16542] [client 63.135.161.72:59047] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Wed Dec 24 10:46:13.552720 2025] [:error] [pid 16468:tid 16534] [client 63.135.161.72:59047] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUtT9YdyfuSTFLkCbP8VPQAAAIo"]
[Wed Dec 24 10:46:14.267461 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.54:30937] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUtT9ru0JcuKJMjJn6y1egAAAAY"]
[Wed Dec 24 10:46:15.445506 2025] [:error] [pid 28405:tid 28433] [client 63.135.161.62:55371] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aUtT98KkTWlhmfdXFqbbUAAAAVc"]
[Wed Dec 24 10:46:15.883027 2025] [:error] [pid 16467:tid 16507] [client 104.234.53.221:51653] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Dec 24 10:46:16.355018 2025] [:error] [pid 16467:tid 16519] [client 104.234.53.221:51653] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Dec 24 10:46:16.581562 2025] [:error] [pid 16467:tid 16520] [client 104.234.53.221:51653] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUtT-I0TJMcBxX5slgrRXwAAAFc"]
[Wed Dec 24 10:46:17.023852 2025] [:error] [pid 16467:tid 16509] [client 63.135.161.46:22409] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Dec 24 10:46:17.504040 2025] [:error] [pid 16467:tid 16506] [client 63.135.161.46:22409] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aUtT-Y0TJMcBxX5slgrRcwAAAEk"]
[Wed Dec 24 10:46:18.985012 2025] [:error] [pid 54139:tid 54161] [client 104.234.53.214:53287] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUtT-srYCZenIDzgXuLxxwAAARQ"]
[Wed Dec 24 10:46:19.730203 2025] [:error] [pid 16466:tid 16493] [client 104.234.53.223:44407] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Dec 24 10:46:20.426717 2025] [:error] [pid 16466:tid 16473] [client 104.234.53.223:44407] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Dec 24 10:46:20.868595 2025] [:error] [pid 16466:tid 16484] [client 104.234.53.223:44407] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Dec 24 10:46:21.091617 2025] [:error] [pid 16466:tid 16483] [client 104.234.53.223:44407] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUtT_bu0JcuKJMjJn6y19QAAAA0"]
[Wed Dec 24 10:46:21.582652 2025] [:error] [pid 16466:tid 16471] [client 104.234.53.220:51659] [client 104.234.53.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aUtT_bu0JcuKJMjJn6y1-gAAAAE"]
[Wed Dec 24 10:46:22.011797 2025] [:error] [pid 28405:tid 28433] [client 104.234.53.211:50275] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUtT_sKkTWlhmfdXFqbbowAAAVc"]
[Wed Dec 24 10:46:22.550987 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.57:56259] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUtT_odyfuSTFLkCbP8VtQAAAJA"]
[Wed Dec 24 10:46:23.008455 2025] [:error] [pid 16468:tid 16531] [client 63.135.161.48:53859] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Wed Dec 24 10:46:23.240224 2025] [:error] [pid 16468:tid 16541] [client 63.135.161.48:53859] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUtT_4dyfuSTFLkCbP8VwQAAAJE"]
[Wed Dec 24 10:46:23.714712 2025] [:error] [pid 16467:tid 16515] [client 104.234.53.219:45469] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUtT_40TJMcBxX5slgrRygAAAFI"]
[Wed Dec 24 10:46:26.659976 2025] [:error] [pid 16468:tid 16527] [client 104.234.53.220:46199] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Dec 24 10:46:27.169759 2025] [:error] [pid 16468:tid 16533] [client 104.234.53.220:46199] [client 104.234.53.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUtUA4dyfuSTFLkCbP8WEgAAAIk"]
[Wed Dec 24 10:46:27.619087 2025] [:error] [pid 54139:tid 54163] [client 104.234.53.223:49781] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUtUA8rYCZenIDzgXuLx_wAAARY"]
[Wed Dec 24 10:46:28.223776 2025] [:error] [pid 16550:tid 16562] [client 104.234.53.223:20231] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUtUBKYYcdD-LuO7vrBV1wAAAMo"]
[Wed Dec 24 10:47:48.663157 2025] [:error] [pid 16466:tid 16477] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Dec 24 10:47:48.878281 2025] [:error] [pid 16466:tid 16476] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Dec 24 10:47:49.121030 2025] [:error] [pid 16466:tid 16471] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Dec 24 10:47:49.389612 2025] [:error] [pid 16466:tid 16473] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Dec 24 10:47:49.678298 2025] [:error] [pid 16466:tid 16484] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Dec 24 10:47:49.949798 2025] [:error] [pid 16466:tid 16487] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Dec 24 10:47:50.223806 2025] [:error] [pid 16466:tid 16479] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Dec 24 10:47:50.499858 2025] [:error] [pid 16466:tid 16477] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Dec 24 10:47:50.956414 2025] [:error] [pid 16466:tid 16489] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Dec 24 10:47:51.409735 2025] [:error] [pid 16466:tid 16473] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Dec 24 10:47:51.631230 2025] [:error] [pid 16466:tid 16484] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Dec 24 10:47:51.913121 2025] [:error] [pid 16466:tid 16487] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Dec 24 10:47:52.215593 2025] [:error] [pid 16466:tid 16475] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Dec 24 10:47:52.507567 2025] [:error] [pid 16466:tid 16492] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Dec 24 10:47:52.732399 2025] [:error] [pid 16466:tid 16491] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Dec 24 10:47:52.949098 2025] [:error] [pid 16466:tid 16483] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Dec 24 10:47:53.182207 2025] [:error] [pid 16466:tid 16493] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Dec 24 10:47:53.420935 2025] [:error] [pid 16466:tid 16485] [client 104.234.53.218:37375] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Dec 24 10:47:56.814027 2025] [:error] [pid 16466:tid 16480] [client 104.234.53.218:37375] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtUXLu0JcuKJMjJn6y68wAAAAo"]
[Wed Dec 24 10:47:58.059514 2025] [:error] [pid 16550:tid 16556] [client 63.135.161.46:60417] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtUXqYYcdD-LuO7vrBbJwAAAMQ"]
[Wed Dec 24 10:47:59.479933 2025] [:error] [pid 16467:tid 16514] [client 63.135.161.65:26303] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Dec 24 10:48:00.205697 2025] [:error] [pid 16467:tid 16516] [client 63.135.161.65:26303] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aUtUYI0TJMcBxX5slgrXBwAAAFM"]
[Wed Dec 24 10:48:01.407974 2025] [:error] [pid 16468:tid 16533] [client 104.234.53.219:62419] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Dec 24 10:48:01.631830 2025] [:error] [pid 16468:tid 16545] [client 104.234.53.219:62419] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUtUYYdyfuSTFLkCbP8b0gAAAJU"]
[Wed Dec 24 10:48:02.371880 2025] [:error] [pid 16467:tid 16513] [client 104.234.53.210:60487] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Dec 24 10:48:10.050034 2025] [:error] [pid 16467:tid 16515] [client 104.234.53.210:60487] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtUao0TJMcBxX5slgrXkQAAAFI"]
[Wed Dec 24 10:48:10.854150 2025] [:error] [pid 16550:tid 16559] [client 63.135.161.68:37033] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtUaqYYcdD-LuO7vrBcUQAAAMc"]
[Wed Dec 24 10:48:11.385462 2025] [:error] [pid 16468:tid 16532] [client 63.135.161.72:29085] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtUa4dyfuSTFLkCbP8cOwAAAIg"]
[Wed Dec 24 10:48:11.826377 2025] [:error] [pid 28405:tid 28414] [client 63.135.161.46:61879] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtUa8KkTWlhmfdXFqbiaQAAAUU"]
[Wed Dec 24 10:48:12.305278 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.76:56473] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtUbLu0JcuKJMjJn6y76wAAAAY"]
[Wed Dec 24 10:48:12.758794 2025] [:error] [pid 16467:tid 16499] [client 63.135.161.55:40263] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtUbI0TJMcBxX5slgrXtwAAAEI"]
[Wed Dec 24 10:48:13.627651 2025] [:error] [pid 16467:tid 16517] [client 104.234.53.215:65077] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtUbY0TJMcBxX5slgrXwgAAAFQ"]
[Wed Dec 24 10:48:14.238601 2025] [:error] [pid 16467:tid 16512] [client 63.135.161.52:22311] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Dec 24 10:48:14.709008 2025] [:error] [pid 16467:tid 16521] [client 63.135.161.52:22311] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aUtUbo0TJMcBxX5slgrX1QAAAFg"]
[Wed Dec 24 10:48:15.637814 2025] [:error] [pid 54139:tid 54157] [client 63.135.161.67:54849] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtUb8rYCZenIDzgXuL3rwAAARA"]
[Wed Dec 24 10:48:16.476763 2025] [:error] [pid 16467:tid 16497] [client 63.135.161.47:58887] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtUcI0TJMcBxX5slgrX8AAAAEA"]
[Wed Dec 24 10:48:16.952074 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.64:24273] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Dec 24 10:48:17.188536 2025] [:error] [pid 16550:tid 16575] [client 63.135.161.64:24273] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtUcaYYcdD-LuO7vrBc0wAAANc"]
[Wed Dec 24 10:48:17.653418 2025] [:error] [pid 54139:tid 54159] [client 104.234.53.218:37335] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Dec 24 10:48:18.359879 2025] [:error] [pid 54139:tid 54146] [client 104.234.53.218:37335] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Dec 24 10:48:19.178486 2025] [:error] [pid 54139:tid 54153] [client 104.234.53.218:37335] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUtUc8rYCZenIDzgXuL3zQAAAQw"]
[Wed Dec 24 10:48:19.621773 2025] [:error] [pid 28405:tid 28417] [client 104.234.53.224:44609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Dec 24 10:48:19.842426 2025] [:error] [pid 28405:tid 28433] [client 104.234.53.224:44609] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUtUc8KkTWlhmfdXFqbi3gAAAVc"]
[Wed Dec 24 10:48:20.324232 2025] [:error] [pid 28777:tid 28788] [client 63.135.161.57:42391] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Dec 24 10:48:20.805306 2025] [:error] [pid 28777:tid 28789] [client 63.135.161.57:42391] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUtUdJBVBcZ34cSqz8q69gAAAYo"]
[Wed Dec 24 10:48:21.479809 2025] [:error] [pid 16468:tid 16544] [client 104.234.53.218:56605] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUtUdYdyfuSTFLkCbP8c-AAAAJQ"]
[Wed Dec 24 10:48:22.134161 2025] [:error] [pid 16468:tid 16536] [client 104.234.53.211:44715] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Dec 24 10:48:22.383731 2025] [:error] [pid 16468:tid 16548] [client 104.234.53.211:44715] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Dec 24 10:48:22.850449 2025] [:error] [pid 16468:tid 16527] [client 104.234.53.211:44715] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUtUdodyfuSTFLkCbP8dEAAAAIM"]
[Wed Dec 24 10:48:23.506995 2025] [:error] [pid 54139:tid 54164] [client 63.135.161.62:29011] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUtUd8rYCZenIDzgXuL4DQAAARc"]
[Wed Dec 24 10:48:24.237520 2025] [:error] [pid 28405:tid 28422] [client 104.234.53.211:30865] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUtUeMKkTWlhmfdXFqbjJgAAAUw"]
[Wed Dec 24 10:48:24.781208 2025] [:error] [pid 16466:tid 16481] [client 63.135.161.71:42599] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUtUeLu0JcuKJMjJn6y85AAAAAs"]
[Wed Dec 24 10:48:25.268370 2025] [:error] [pid 16468:tid 16536] [client 104.234.53.210:32285] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUtUeYdyfuSTFLkCbP8dKgAAAIw"]
[Wed Dec 24 10:48:26.184923 2025] [:error] [pid 54139:tid 54159] [client 104.234.53.219:64649] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Dec 24 10:48:26.396683 2025] [:error] [pid 54139:tid 54156] [client 104.234.53.219:64649] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUtUesrYCZenIDzgXuL4WAAAAQ8"]
[Wed Dec 24 10:48:26.935199 2025] [:error] [pid 16468:tid 16524] [client 104.234.53.225:57933] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUtUeodyfuSTFLkCbP8dRwAAAIA"]
[Wed Dec 24 10:48:27.391175 2025] [:error] [pid 16466:tid 16484] [client 63.135.161.69:28533] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUtUe7u0JcuKJMjJn6y9FAAAAA4"]
[Wed Dec 24 10:48:28.449712 2025] [:error] [pid 16467:tid 16501] [client 104.234.53.210:46367] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Dec 24 10:48:29.050013 2025] [:error] [pid 16467:tid 16502] [client 104.234.53.210:46367] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Dec 24 10:48:30.039037 2025] [:error] [pid 16467:tid 16500] [client 104.234.53.210:46367] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aUtUfo0TJMcBxX5slgrYvQAAAEM"]
[Wed Dec 24 10:48:31.404985 2025] [:error] [pid 28405:tid 28416] [client 63.135.161.64:31997] [client 63.135.161.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.64, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUtUf8KkTWlhmfdXFqbjowAAAUc"]
[Wed Dec 24 10:48:31.658975 2025] [:error] [pid 28405:tid 28412] [client 63.135.161.64:31997] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Dec 24 10:48:32.958376 2025] [:error] [pid 28405:tid 28411] [client 63.135.161.64:31997] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Dec 24 10:48:33.258861 2025] [:error] [pid 28405:tid 28413] [client 63.135.161.64:31997] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Dec 24 10:48:34.581491 2025] [:error] [pid 28405:tid 28416] [client 63.135.161.64:31997] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUtUgsKkTWlhmfdXFqbj4QAAAUc"]
[Wed Dec 24 10:48:35.231604 2025] [:error] [pid 16466:tid 16491] [client 104.234.53.213:33577] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Dec 24 10:48:35.455487 2025] [:error] [pid 16466:tid 16486] [client 104.234.53.213:33577] [client 104.234.53.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.213, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUtUg7u0JcuKJMjJn6y9igAAABA"]
[Wed Dec 24 10:48:35.983989 2025] [:error] [pid 16466:tid 16483] [client 104.234.53.213:33577] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aUtUg7u0JcuKJMjJn6y9kgAAAA0"]
[Wed Dec 24 10:48:37.543709 2025] [:error] [pid 16468:tid 16546] [client 63.135.161.70:44471] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Dec 24 10:48:38.077130 2025] [:error] [pid 16468:tid 16528] [client 63.135.161.70:44471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Wed Dec 24 10:48:38.610366 2025] [:error] [pid 16468:tid 16544] [client 63.135.161.70:44471] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUtUhodyfuSTFLkCbP8d4wAAAJQ"]
[Wed Dec 24 10:48:39.052121 2025] [:error] [pid 28777:tid 28779] [client 104.234.53.207:62277] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Dec 24 10:48:39.846431 2025] [:error] [pid 28777:tid 28790] [client 104.234.53.207:62277] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Dec 24 10:48:40.413173 2025] [:error] [pid 28777:tid 28793] [client 104.234.53.207:62277] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Dec 24 10:48:40.959105 2025] [:error] [pid 28777:tid 28796] [client 104.234.53.207:62277] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Dec 24 10:48:41.171957 2025] [:error] [pid 28777:tid 28789] [client 104.234.53.207:62277] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUtUiZBVBcZ34cSqz8q77gAAAYo"]
[Wed Dec 24 10:48:41.662001 2025] [:error] [pid 16550:tid 16569] [client 63.135.161.72:26125] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Dec 24 10:48:41.936608 2025] [:error] [pid 16550:tid 16557] [client 63.135.161.72:26125] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Dec 24 10:48:42.170498 2025] [:error] [pid 16550:tid 16558] [client 63.135.161.72:26125] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUtUiqYYcdD-LuO7vrBfCQAAAMY"]
[Wed Dec 24 10:48:42.817721 2025] [:error] [pid 16468:tid 16544] [client 104.234.53.224:22101] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Dec 24 10:48:43.300207 2025] [:error] [pid 16468:tid 16544] [client 104.234.53.224:22101] [client 104.234.53.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.224, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUtUi4dyfuSTFLkCbP8eOAAAAJQ"]
[Wed Dec 24 10:48:43.569221 2025] [:error] [pid 16468:tid 16535] [client 104.234.53.224:22101] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUtUi4dyfuSTFLkCbP8eQAAAAIs"]
[Wed Dec 24 10:48:46.351294 2025] [:error] [pid 28405:tid 28434] [client 104.234.53.208:23633] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Dec 24 10:48:47.906918 2025] [:error] [pid 28405:tid 28427] [client 104.234.53.208:23633] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Dec 24 10:48:48.124422 2025] [:error] [pid 28405:tid 28426] [client 104.234.53.208:23633] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUtUkMKkTWlhmfdXFqbk_wAAAVA"]
[Wed Dec 24 10:48:48.602044 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.66:38519] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Dec 24 10:48:49.501304 2025] [:error] [pid 16466:tid 16489] [client 63.135.161.66:38519] [client 63.135.161.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.66, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUtUkbu0JcuKJMjJn6y-QAAAABM"]
[Wed Dec 24 10:48:49.735597 2025] [:error] [pid 16466:tid 16470] [client 63.135.161.66:38519] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Dec 24 10:48:50.020391 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.66:38519] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Dec 24 10:48:50.272070 2025] [:error] [pid 16466:tid 16474] [client 63.135.161.66:38519] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Dec 24 10:48:50.542213 2025] [:error] [pid 16466:tid 16479] [client 63.135.161.66:38519] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUtUkru0JcuKJMjJn6y-RgAAAAk"]
[Wed Dec 24 10:48:51.029985 2025] [:error] [pid 28405:tid 28420] [client 63.135.161.53:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Dec 24 10:48:51.263592 2025] [:error] [pid 28405:tid 28409] [client 63.135.161.53:43759] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aUtUk8KkTWlhmfdXFqblKAAAAUA"]
[Wed Dec 24 10:48:51.994225 2025] [:error] [pid 28405:tid 28424] [client 104.234.53.226:48223] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Dec 24 10:48:52.215515 2025] [:error] [pid 28405:tid 28432] [client 104.234.53.226:48223] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUtUlMKkTWlhmfdXFqblPwAAAVY"]
[Wed Dec 24 10:48:53.181741 2025] [:error] [pid 16467:tid 16500] [client 63.135.161.56:50009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Dec 24 10:48:53.419685 2025] [:error] [pid 16467:tid 16503] [client 63.135.161.56:50009] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUtUlY0TJMcBxX5slgraGQAAAEY"]
[Wed Dec 24 10:48:53.878487 2025] [:error] [pid 28405:tid 28412] [client 104.234.53.207:33237] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUtUlcKkTWlhmfdXFqblVwAAAUM"]
[Wed Dec 24 10:48:54.317202 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.68:39525] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Dec 24 10:48:54.542031 2025] [:error] [pid 16466:tid 16489] [client 63.135.161.68:39525] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Wed Dec 24 10:48:55.543756 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.68:39525] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUtUl7u0JcuKJMjJn6y-cQAAAAY"]
[Wed Dec 24 10:48:56.267304 2025] [:error] [pid 28777:tid 28798] [client 63.135.161.59:25025] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUtUmJBVBcZ34cSqz8q89AAAAZM"]
[Wed Dec 24 10:48:57.975484 2025] [:error] [pid 16550:tid 16565] [client 63.135.161.59:33587] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aUtUmaYYcdD-LuO7vrBgIQAAAM0"]
[Wed Dec 24 10:48:58.419616 2025] [:error] [pid 16467:tid 16509] [client 63.135.161.55:49545] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Dec 24 10:48:59.005463 2025] [:error] [pid 16467:tid 16503] [client 63.135.161.55:49545] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Dec 24 10:48:59.270836 2025] [:error] [pid 16467:tid 16502] [client 63.135.161.55:49545] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUtUm40TJMcBxX5slgraNwAAAEU"]
[Wed Dec 24 10:48:59.730296 2025] [:error] [pid 54139:tid 54163] [client 63.135.161.65:59869] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Dec 24 10:49:00.181667 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.65:59869] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aUtUnMrYCZenIDzgXuL6XwAAAQs"]
[Wed Dec 24 10:49:01.519910 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.219:63715] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUtUnaYYcdD-LuO7vrBgRwAAANM"]
[Wed Dec 24 10:49:02.269974 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.64:24971] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Dec 24 10:49:03.064003 2025] [:error] [pid 54139:tid 54144] [client 63.135.161.64:24971] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Dec 24 10:49:03.615398 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.64:24971] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Dec 24 10:49:03.895496 2025] [:error] [pid 54139:tid 54144] [client 63.135.161.64:24971] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUtUn8rYCZenIDzgXuL6mwAAAQM"]
[Wed Dec 24 10:49:05.345651 2025] [:error] [pid 16467:tid 16504] [client 104.234.53.222:43009] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aUtUoY0TJMcBxX5slgrakAAAAEc"]
[Wed Dec 24 10:49:05.814135 2025] [:error] [pid 54139:tid 54159] [client 63.135.161.69:21197] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUtUocrYCZenIDzgXuL6wQAAARI"]
[Wed Dec 24 10:49:06.244518 2025] [:error] [pid 16466:tid 16481] [client 104.234.53.224:50487] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUtUoru0JcuKJMjJn6y-pwAAAAs"]
[Wed Dec 24 10:49:06.785084 2025] [:error] [pid 54139:tid 54153] [client 63.135.161.76:43143] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Wed Dec 24 10:49:07.005530 2025] [:error] [pid 54139:tid 54150] [client 63.135.161.76:43143] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUtUo8rYCZenIDzgXuL62gAAAQk"]
[Wed Dec 24 10:49:07.447896 2025] [:error] [pid 16466:tid 16482] [client 63.135.161.76:37529] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUtUo7u0JcuKJMjJn6y-vgAAAAw"]
[Wed Dec 24 10:49:07.924489 2025] [:error] [pid 28777:tid 28780] [client 104.234.53.212:48429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Dec 24 10:49:08.527895 2025] [:error] [pid 28777:tid 28791] [client 104.234.53.212:48429] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUtUpJBVBcZ34cSqz8q9sAAAAYw"]
[Wed Dec 24 10:49:08.994092 2025] [:error] [pid 28777:tid 28783] [client 63.135.161.52:29357] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUtUpJBVBcZ34cSqz8q9tgAAAYQ"]
[Wed Dec 24 10:49:09.472373 2025] [:error] [pid 16550:tid 16564] [client 63.135.161.56:63687] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUtUpaYYcdD-LuO7vrBg3gAAAMw"]
[Wed Dec 24 10:49:09.947045 2025] [:error] [pid 16467:tid 16499] [client 63.135.161.59:62707] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUtUpY0TJMcBxX5slgravgAAAEI"]
[Wed Dec 24 10:49:10.624773 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.50:25221] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUtUpqYYcdD-LuO7vrBhAQAAAMs"]
[Wed Dec 24 10:49:11.633315 2025] [:error] [pid 54139:tid 54160] [client 104.234.53.218:44725] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUtUp8rYCZenIDzgXuL7MwAAARM"]
[Wed Dec 24 10:49:12.070085 2025] [:error] [pid 28405:tid 28409] [client 63.135.161.70:61089] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Dec 24 10:49:12.887565 2025] [:error] [pid 28405:tid 28432] [client 63.135.161.70:61089] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Dec 24 10:49:13.134971 2025] [:error] [pid 28405:tid 28425] [client 63.135.161.70:61089] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUtUqcKkTWlhmfdXFqbmJwAAAU8"]
[Wed Dec 24 10:49:13.956311 2025] [:error] [pid 29371:tid 29381] [client 104.234.53.217:62877] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Dec 24 10:49:14.213467 2025] [:error] [pid 29371:tid 29384] [client 104.234.53.217:62877] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Dec 24 10:49:15.360442 2025] [:error] [pid 29371:tid 29387] [client 104.234.53.217:62877] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aUtUq3s-DlKLysSq5L8OIwAAAc4"]
[Wed Dec 24 10:49:16.912748 2025] [:error] [pid 28405:tid 28431] [client 104.234.53.218:26517] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUtUrMKkTWlhmfdXFqbmPwAAAVU"]
[Wed Dec 24 10:49:17.352038 2025] [:error] [pid 29371:tid 29384] [client 63.135.161.72:37789] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUtUrXs-DlKLysSq5L8OLgAAAcs"]
[Wed Dec 24 10:49:18.780170 2025] [:error] [pid 29371:tid 29374] [client 104.234.53.211:26327] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUtUrns-DlKLysSq5L8OQAAAAcE"]
[Wed Dec 24 10:49:19.672319 2025] [:error] [pid 54139:tid 54163] [client 104.234.53.226:42569] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Wed Dec 24 10:49:19.929184 2025] [:error] [pid 54139:tid 54164] [client 104.234.53.226:42569] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Wed Dec 24 10:49:20.145930 2025] [:error] [pid 54139:tid 54160] [client 104.234.53.226:42569] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Wed Dec 24 10:49:20.361850 2025] [:error] [pid 54139:tid 54155] [client 104.234.53.226:42569] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Wed Dec 24 10:49:21.539099 2025] [:error] [pid 54139:tid 54157] [client 104.234.53.226:42569] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUtUscrYCZenIDzgXuL78QAAARA"]
[Wed Dec 24 10:49:21.977330 2025] [:error] [pid 28777:tid 28800] [client 63.135.161.76:43941] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUtUsZBVBcZ34cSqz8q-RgAAAZU"]
[Wed Dec 24 10:49:22.411272 2025] [:error] [pid 16466:tid 16487] [client 104.234.53.225:36249] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUtUsru0JcuKJMjJn6y_ZwAAABE"]
[Wed Dec 24 10:49:22.833459 2025] [:error] [pid 28405:tid 28427] [client 104.234.53.224:31375] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUtUssKkTWlhmfdXFqbmTwAAAVE"]
[Wed Dec 24 10:49:23.254300 2025] [:error] [pid 16466:tid 16472] [client 104.234.53.208:43159] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUtUs7u0JcuKJMjJn6y_bgAAAAI"]
[Wed Dec 24 10:49:23.761312 2025] [:error] [pid 16550:tid 16575] [client 63.135.161.70:43527] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUtUs6YYcdD-LuO7vrBh7gAAANc"]
[Wed Dec 24 10:49:24.447251 2025] [:error] [pid 28777:tid 28789] [client 63.135.161.69:55995] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUtUtJBVBcZ34cSqz8q-eQAAAYo"]
[Wed Dec 24 10:49:24.876599 2025] [:error] [pid 16468:tid 16534] [client 104.234.53.223:61175] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUtUtIdyfuSTFLkCbP8gxAAAAIo"]
[Wed Dec 24 10:49:25.343020 2025] [:error] [pid 28777:tid 28797] [client 104.234.53.217:40937] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUtUtZBVBcZ34cSqz8q-jgAAAZI"]
[Wed Dec 24 10:49:25.777372 2025] [:error] [pid 28777:tid 28785] [client 63.135.161.70:64587] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUtUtZBVBcZ34cSqz8q-mAAAAYY"]
[Wed Dec 24 10:49:26.678147 2025] [:error] [pid 28405:tid 28420] [client 63.135.161.46:46269] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUtUtsKkTWlhmfdXFqbmawAAAUo"]
[Wed Dec 24 10:49:27.366744 2025] [:error] [pid 54139:tid 54164] [client 104.234.53.207:61177] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUtUt8rYCZenIDzgXuL8SgAAARc"]
[Wed Dec 24 10:49:27.842804 2025] [:error] [pid 16466:tid 16471] [client 63.135.161.45:24077] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Dec 24 10:49:28.327156 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.45:24077] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUtUuLu0JcuKJMjJn6y_oAAAAAM"]
[Wed Dec 24 10:49:29.265716 2025] [:error] [pid 29371:tid 29376] [client 104.234.53.217:26511] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aUtUuXs-DlKLysSq5L8OrgAAAcM"]
[Wed Dec 24 10:49:30.232280 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.51:41523] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Dec 24 10:49:30.458531 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.51:41523] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUtUuqYYcdD-LuO7vrBiwgAAAMs"]
[Wed Dec 24 10:49:31.240116 2025] [:error] [pid 28405:tid 28428] [client 104.234.53.209:52169] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Dec 24 10:49:31.475727 2025] [:error] [pid 28405:tid 28409] [client 104.234.53.209:52169] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Wed Dec 24 10:49:31.708475 2025] [:error] [pid 28405:tid 28434] [client 104.234.53.209:52169] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Dec 24 10:49:31.991863 2025] [:error] [pid 28405:tid 28409] [client 104.234.53.209:52169] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUtUu8KkTWlhmfdXFqbmtAAAAUA"]
[Wed Dec 24 10:49:32.465113 2025] [:error] [pid 16550:tid 16571] [client 63.135.161.61:47813] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Dec 24 10:49:32.684812 2025] [:error] [pid 16550:tid 16562] [client 63.135.161.61:47813] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aUtUvKYYcdD-LuO7vrBi7AAAAMo"]
[Wed Dec 24 10:49:33.715265 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Dec 24 10:49:33.975773 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Dec 24 10:49:34.189920 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Wed Dec 24 10:49:35.482758 2025] [:error] [pid 16550:tid 16574] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Dec 24 10:49:35.739882 2025] [:error] [pid 16550:tid 16561] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Wed Dec 24 10:49:36.179925 2025] [:error] [pid 16550:tid 16565] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Wed Dec 24 10:49:36.839691 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.209:64561] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Dec 24 10:49:37.071293 2025] [:error] [pid 16550:tid 16572] [client 104.234.53.209:64561] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUtUwaYYcdD-LuO7vrBjZAAAANQ"]
[Wed Dec 24 10:49:37.499608 2025] [:error] [pid 16467:tid 16508] [client 104.234.53.224:46733] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUtUwY0TJMcBxX5slgrbuwAAAEs"]
[Wed Dec 24 10:49:49.258398 2025] [:error] [pid 16466:tid 16474] [client 63.135.161.48:50887] [client 63.135.161.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/"] [unique_id "aUtUzbu0JcuKJMjJn6zASwAAAAQ"]
[Wed Dec 24 10:49:59.618150 2025] [:error] [pid 16550:tid 16552] [client 104.234.53.215:36281] [client 104.234.53.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aUtU16YYcdD-LuO7vrBliQAAAMA"]
[Wed Dec 24 10:50:03.196094 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.55:56175] [client 63.135.161.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aUtU28rYCZenIDzgXuL-tQAAAQs"]
[Wed Dec 24 10:50:26.407707 2025] [:error] [pid 16467:tid 16515] [client 63.135.161.53:21617] [client 63.135.161.53] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "pumpbooking.com"] [uri "/index.html"] [unique_id "aUtU8o0TJMcBxX5slgre9QAAAFI"]
[Wed Dec 24 13:59:20.689396 2025] [:error] [pid 28777:tid 28803] [client 106.222.225.187:30128] [client 106.222.225.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.187, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aUuBOJBVBcZ34cSqz8r5vAAAAZg"]
[Wed Dec 24 13:59:20.694448 2025] [:error] [pid 28777:tid 28803] [client 106.222.225.187:30128] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 24 16:38:46.030390 2025] [:error] [pid 16550:tid 16558] [client 101.42.46.71:52462] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aUumlqYYcdD-LuO7vrDaOAAAAMY"]
[Wed Dec 24 23:31:25.827421 2025] [:error] [pid 28777:tid 28782] [client 123.187.240.242:34510] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUwHTZBVBcZ34cSqz8pkOAAAAYM"]
[Thu Dec 25 10:33:32.655947 2025] [:error] [pid 31571:tid 31635] [client 43.153.15.51:53370] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUyifO7e_lLK2X5wU8lCtwAAAIg"]
[Thu Dec 25 11:59:14.989526 2025] [:error] [pid 2996:tid 3016] [client 203.2.64.59:53006] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aUy2kqrrTp0EWNyhaITAHQAAARI"]
[Thu Dec 25 17:51:37.640905 2025] [:error] [pid 31570:tid 31619] [client 43.159.139.164:59498] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aU0JKWPy2DpAzW_4a2gwdAAAAFM"]
[Thu Dec 25 19:03:21.543003 2025] [:error] [pid 2996:tid 3014] [client 161.153.25.246:47552] [client 161.153.25.246] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/png"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aU0Z-arrTp0EWNyhaIRTpwAAARA"]
[Thu Dec 25 19:03:22.171511 2025] [:error] [pid 2996:tid 3011] [client 161.153.25.246:47552] [client 161.153.25.246] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/png"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aU0Z-qrrTp0EWNyhaIRTqQAAAQ0"]
[Thu Dec 25 19:03:22.654462 2025] [:error] [pid 2996:tid 3019] [client 161.153.25.246:47552] [client 161.153.25.246] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/png"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aU0Z-qrrTp0EWNyhaIRTrAAAARU"]
[Thu Dec 25 20:06:54.004191 2025] [:error] [pid 31655:tid 31678] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 25 20:06:54.129860 2025] [:error] [pid 31655:tid 31660] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Thu Dec 25 20:06:54.246689 2025] [:error] [pid 31655:tid 31661] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Thu Dec 25 20:06:54.364222 2025] [:error] [pid 31655:tid 31668] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Dec 25 20:06:54.495818 2025] [:error] [pid 31655:tid 31676] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Thu Dec 25 20:06:54.618847 2025] [:error] [pid 31655:tid 31667] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/tebar.php
[Thu Dec 25 20:06:55.005601 2025] [:error] [pid 31655:tid 31671] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/ty226.php
[Thu Dec 25 20:06:55.149764 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/songsa.php
[Thu Dec 25 20:06:55.268899 2025] [:error] [pid 31655:tid 31672] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/qing2.php
[Thu Dec 25 20:06:55.397741 2025] [:error] [pid 31655:tid 31658] [client 4.241.194.62:16917] File does not exist: /usr/local/apache/htdocs/suspended-page/massby2.php
[Thu Dec 25 20:06:55.518876 2025] [:error] [pid 31655:tid 31673] [client 4.241.194.62:16917] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qual.php"] [unique_id "aU0o35ozPMk9HPtIJPOrugAAANA"]
[Thu Dec 25 20:06:56.070424 2025] [:error] [pid 31571:tid 31642] [client 4.241.194.62:16829] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qual.php"] [unique_id "aU0o4O7e_lLK2X5wU8nJLAAAAI8"]
[Thu Dec 25 20:06:56.655394 2025] [:error] [pid 64909:tid 64917] [client 4.241.194.62:61115] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qual.php"] [unique_id "aU0o4B45RBsBaT7_YDVnfQAAAcM"]
[Thu Dec 25 20:06:57.576396 2025] [:error] [pid 64973:tid 65007] [client 4.241.194.62:16818] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qual.php"] [unique_id "aU0o4eqHYEKj6K8dhUE62QAAAoM"]
[Thu Dec 25 20:06:58.356980 2025] [:error] [pid 64909:tid 64934] [client 4.241.194.62:16780] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/udnkq.php"] [unique_id "aU0o4h45RBsBaT7_YDVnfwAAAdQ"]
[Thu Dec 25 20:06:58.816738 2025] [:error] [pid 64973:tid 65017] [client 4.241.194.62:16830] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/udnkq.php"] [unique_id "aU0o4uqHYEKj6K8dhUE63AAAAo0"]
[Thu Dec 25 20:06:59.857844 2025] [:error] [pid 64973:tid 65022] [client 4.241.194.62:44817] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/udnkq.php"] [unique_id "aU0o4-qHYEKj6K8dhUE64AAAApI"]
[Thu Dec 25 20:07:00.319409 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:46904] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/udnkq.php"] [unique_id "aU0o5GiSFBH7Ee_uldXm-AAAAAY"]
[Thu Dec 25 20:07:01.056225 2025] [:error] [pid 31655:tid 31680] [client 4.241.194.62:41831] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ng.php"] [unique_id "aU0o5ZozPMk9HPtIJPOrvAAAANc"]
[Thu Dec 25 20:07:01.594787 2025] [:error] [pid 64909:tid 64916] [client 4.241.194.62:41290] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ng.php"] [unique_id "aU0o5R45RBsBaT7_YDVnhwAAAcI"]
[Thu Dec 25 20:07:02.323493 2025] [:error] [pid 64971:tid 64998] [client 4.241.194.62:38902] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ng.php"] [unique_id "aU0o5qqyk1GkxTrDJixQ2AAAAlU"]
[Thu Dec 25 20:07:03.205275 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:45514] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ng.php"] [unique_id "aU0o52iSFBH7Ee_uldXm-gAAAAE"]
[Thu Dec 25 20:07:05.216105 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:25665] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z4qmm5.php"] [unique_id "aU0o6WiSFBH7Ee_uldXnAAAAABQ"]
[Thu Dec 25 20:07:07.952852 2025] [:error] [pid 31570:tid 31619] [client 4.241.194.62:17372] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z4qmm5.php"] [unique_id "aU0o62Py2DpAzW_4a2hR1AAAAFM"]
[Thu Dec 25 20:07:08.449797 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:17163] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z4qmm5.php"] [unique_id "aU0o7GiSFBH7Ee_uldXnBQAAABY"]
[Thu Dec 25 20:07:09.055738 2025] [:error] [pid 64909:tid 64922] [client 4.241.194.62:45544] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z4qmm5.php"] [unique_id "aU0o7R45RBsBaT7_YDVnjwAAAcg"]
[Thu Dec 25 20:07:10.142180 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:45523] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/no3.php"] [unique_id "aU0o7miSFBH7Ee_uldXnCQAAABA"]
[Thu Dec 25 20:07:10.891187 2025] [:error] [pid 64910:tid 64942] [client 4.241.194.62:36238] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/no3.php"] [unique_id "aU0o7ues2ob7vYHBZqB-TgAAAgE"]
[Thu Dec 25 20:07:12.379648 2025] [:error] [pid 31569:tid 31573] [client 4.241.194.62:55516] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/no3.php"] [unique_id "aU0o8GiSFBH7Ee_uldXnDgAAAAA"]
[Thu Dec 25 20:07:13.908613 2025] [:error] [pid 64909:tid 64929] [client 4.241.194.62:16654] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/no3.php"] [unique_id "aU0o8R45RBsBaT7_YDVnlAAAAc8"]
[Thu Dec 25 20:07:14.965793 2025] [:error] [pid 31569:tid 31583] [client 4.241.194.62:36246] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/om.php"] [unique_id "aU0o8miSFBH7Ee_uldXnHQAAAAo"]
[Thu Dec 25 20:07:15.610847 2025] [:error] [pid 64973:tid 65007] [client 4.241.194.62:41915] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/om.php"] [unique_id "aU0o8-qHYEKj6K8dhUE65wAAAoM"]
[Thu Dec 25 20:07:16.614906 2025] [:error] [pid 31571:tid 31639] [client 4.241.194.62:41919] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/om.php"] [unique_id "aU0o9O7e_lLK2X5wU8nJPQAAAIw"]
[Thu Dec 25 20:07:17.308907 2025] [:error] [pid 64909:tid 64930] [client 4.241.194.62:55546] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/om.php"] [unique_id "aU0o9R45RBsBaT7_YDVnoQAAAdA"]
[Thu Dec 25 20:07:17.889269 2025] [:error] [pid 64909:tid 64927] [client 4.241.194.62:65397] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/webix.php"] [unique_id "aU0o9R45RBsBaT7_YDVnowAAAc0"]
[Thu Dec 25 20:07:18.787666 2025] [:error] [pid 64909:tid 64917] [client 4.241.194.62:41319] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/webix.php"] [unique_id "aU0o9h45RBsBaT7_YDVnpwAAAcM"]
[Thu Dec 25 20:07:19.454715 2025] [:error] [pid 64820:tid 64836] [client 4.241.194.62:50507] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/webix.php"] [unique_id "aU0o98SuTdTvkipi541M8QAAAUw"]
[Thu Dec 25 20:07:20.152791 2025] [:error] [pid 64820:tid 64825] [client 4.241.194.62:55490] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/webix.php"] [unique_id "aU0o-MSuTdTvkipi541M9AAAAUE"]
[Thu Dec 25 20:07:21.419440 2025] [:error] [pid 31569:tid 31578] [client 4.241.194.62:55534] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aU0o-WiSFBH7Ee_uldXnJgAAAAU"]
[Thu Dec 25 20:07:22.383795 2025] [:error] [pid 64971:tid 64979] [client 4.241.194.62:50537] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aU0o-qqyk1GkxTrDJixQ2wAAAkI"]
[Thu Dec 25 20:07:23.633070 2025] [:error] [pid 31569:tid 31584] [client 4.241.194.62:55548] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aU0o-2iSFBH7Ee_uldXnLAAAAAs"]
[Thu Dec 25 20:07:25.104655 2025] [:error] [pid 64909:tid 64922] [client 4.241.194.62:41899] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aU0o_R45RBsBaT7_YDVnqwAAAcg"]
[Thu Dec 25 20:07:26.016494 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:54421] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cka.php"] [unique_id "aU0o_pozPMk9HPtIJPOrxAAAAMg"]
[Thu Dec 25 20:07:27.488231 2025] [:error] [pid 64971:tid 64999] [client 4.241.194.62:50545] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cka.php"] [unique_id "aU0o_6qyk1GkxTrDJixQ3QAAAlY"]
[Thu Dec 25 20:07:28.150657 2025] [:error] [pid 31571:tid 31651] [client 4.241.194.62:65404] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cka.php"] [unique_id "aU0pAO7e_lLK2X5wU8nJTQAAAJg"]
[Thu Dec 25 20:07:29.490865 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:50513] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cka.php"] [unique_id "aU0pAe7e_lLK2X5wU8nJUQAAAJU"]
[Thu Dec 25 20:07:30.928219 2025] [:error] [pid 31571:tid 31634] [client 4.241.194.62:50559] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aU0pAu7e_lLK2X5wU8nJVwAAAIc"]
[Thu Dec 25 20:07:33.215267 2025] [:error] [pid 31569:tid 31592] [client 4.241.194.62:36192] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aU0pBWiSFBH7Ee_uldXnNwAAABM"]
[Thu Dec 25 20:07:34.536050 2025] [:error] [pid 31571:tid 31633] [client 4.241.194.62:65357] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aU0pBu7e_lLK2X5wU8nJXwAAAIY"]
[Thu Dec 25 20:07:35.492481 2025] [:error] [pid 64971:tid 64982] [client 4.241.194.62:65363] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aU0pB6qyk1GkxTrDJixQ6AAAAkU"]
[Thu Dec 25 20:07:36.139153 2025] [:error] [pid 64971:tid 64979] [client 4.241.194.62:41895] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aU0pCKqyk1GkxTrDJixQ6gAAAkI"]
[Thu Dec 25 20:07:37.569887 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:25624] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aU0pCWiSFBH7Ee_uldXnRwAAAAE"]
[Thu Dec 25 20:07:38.957545 2025] [:error] [pid 31569:tid 31581] [client 4.241.194.62:36213] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aU0pCmiSFBH7Ee_uldXnSQAAAAg"]
[Thu Dec 25 20:07:39.496709 2025] [:error] [pid 64971:tid 64996] [client 4.241.194.62:41869] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aU0pC6qyk1GkxTrDJixQ7wAAAlM"]
[Thu Dec 25 20:07:40.532243 2025] [:error] [pid 64820:tid 64848] [client 4.241.194.62:50522] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aU0pDMSuTdTvkipi541NDgAAAVg"]
[Thu Dec 25 20:07:41.711629 2025] [:error] [pid 31569:tid 31587] [client 4.241.194.62:54443] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aU0pDWiSFBH7Ee_uldXnTwAAAA4"]
[Thu Dec 25 20:07:42.238193 2025] [:error] [pid 31570:tid 31603] [client 4.241.194.62:25608] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aU0pDmPy2DpAzW_4a2hR6AAAAEM"]
[Thu Dec 25 20:07:42.804928 2025] [:error] [pid 64820:tid 64844] [client 4.241.194.62:25605] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aU0pDsSuTdTvkipi541NEgAAAVQ"]
[Thu Dec 25 20:07:43.883866 2025] [:error] [pid 64820:tid 64834] [client 4.241.194.62:36201] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aU0pD8SuTdTvkipi541NGAAAAUo"]
[Thu Dec 25 20:07:45.729882 2025] [:error] [pid 64975:tid 65059] [client 4.241.194.62:54402] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aU0pESXyboSuXIThjj6b0QAAAwE"]
[Thu Dec 25 20:07:46.885131 2025] [:error] [pid 64971:tid 64987] [client 4.241.194.62:46862] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aU0pEqqyk1GkxTrDJixQ8gAAAko"]
[Thu Dec 25 20:07:48.203178 2025] [:error] [pid 31570:tid 31617] [client 4.241.194.62:36208] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aU0pFGPy2DpAzW_4a2hR9QAAAFE"]
[Thu Dec 25 20:07:50.905054 2025] [:error] [pid 64975:tid 65060] [client 4.241.194.62:36197] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aU0pFiXyboSuXIThjj6b3gAAAwI"]
[Thu Dec 25 20:07:53.607927 2025] [:error] [pid 64820:tid 64847] [client 4.241.194.62:46850] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aU0pGcSuTdTvkipi541NPQAAAVc"]
[Thu Dec 25 20:07:54.221591 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:36181] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aU0pGmPy2DpAzW_4a2hR_AAAAFc"]
[Thu Dec 25 20:07:55.381932 2025] [:error] [pid 64909:tid 64933] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 25 20:07:55.502893 2025] [:error] [pid 64909:tid 64935] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Dec 25 20:07:55.856630 2025] [:error] [pid 64909:tid 64934] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 25 20:07:55.977678 2025] [:error] [pid 64909:tid 64922] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Thu Dec 25 20:07:56.119385 2025] [:error] [pid 64909:tid 64932] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Thu Dec 25 20:07:56.235274 2025] [:error] [pid 64909:tid 64930] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/fv.php
[Thu Dec 25 20:07:56.373388 2025] [:error] [pid 64909:tid 64916] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Thu Dec 25 20:07:56.489734 2025] [:error] [pid 64909:tid 64915] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 25 20:07:56.611033 2025] [:error] [pid 64909:tid 64923] [client 4.241.194.62:36215] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Dec 25 20:07:56.734049 2025] [:error] [pid 64909:tid 64914] [client 4.241.194.62:36215] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aU0pHB45RBsBaT7_YDVnwwAAAcA"]
[Thu Dec 25 20:07:57.916812 2025] [:error] [pid 31571:tid 31639] [client 4.241.194.62:65387] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aU0pHe7e_lLK2X5wU8nJdgAAAIw"]
[Thu Dec 25 20:07:59.392122 2025] [:error] [pid 31655:tid 31674] [client 4.241.194.62:41881] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aU0pH5ozPMk9HPtIJPOrzgAAANE"]
[Thu Dec 25 20:08:00.643331 2025] [:error] [pid 64910:tid 64961] [client 4.241.194.62:25658] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aU0pIOes2ob7vYHBZqB-WAAAAhQ"]
[Thu Dec 25 20:08:02.590192 2025] [:error] [pid 31571:tid 31650] [client 4.241.194.62:41291] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aU0pIu7e_lLK2X5wU8nJegAAAJc"]
[Thu Dec 25 20:08:04.435713 2025] [:error] [pid 64910:tid 64942] [client 4.241.194.62:54412] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aU0pJOes2ob7vYHBZqB-WwAAAgE"]
[Thu Dec 25 20:08:06.058648 2025] [:error] [pid 31571:tid 31635] [client 4.241.194.62:36203] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aU0pJu7e_lLK2X5wU8nJfQAAAIg"]
[Thu Dec 25 20:08:07.162309 2025] [:error] [pid 64820:tid 64824] [client 4.241.194.62:50551] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aU0pJ8SuTdTvkipi541NVgAAAUA"]
[Thu Dec 25 20:08:08.532281 2025] [:error] [pid 31655:tid 31664] [client 4.241.194.62:54409] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0pKJozPMk9HPtIJPOr2AAAAMc"]
[Thu Dec 25 20:08:09.196338 2025] [:error] [pid 31571:tid 31642] [client 4.241.194.62:46856] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0pKe7e_lLK2X5wU8nJiAAAAI8"]
[Thu Dec 25 20:08:09.974090 2025] [:error] [pid 64975:tid 65080] [client 4.241.194.62:36200] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0pKSXyboSuXIThjj6b8wAAAxY"]
[Thu Dec 25 20:08:11.127183 2025] [:error] [pid 31570:tid 31605] [client 4.241.194.62:46871] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU0pK2Py2DpAzW_4a2hSFAAAAEU"]
[Thu Dec 25 20:08:11.800629 2025] [:error] [pid 31571:tid 31633] [client 4.241.194.62:36212] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aU0pK-7e_lLK2X5wU8nJigAAAIY"]
[Thu Dec 25 20:08:12.398968 2025] [:error] [pid 64909:tid 64915] [client 4.241.194.62:41856] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aU0pLB45RBsBaT7_YDVn0AAAAcE"]
[Thu Dec 25 20:08:13.942963 2025] [:error] [pid 64971:tid 64990] [client 4.241.194.62:36169] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aU0pLaqyk1GkxTrDJixRCQAAAk0"]
[Thu Dec 25 20:08:14.679936 2025] [:error] [pid 64971:tid 64982] [client 4.241.194.62:46903] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aU0pLqqyk1GkxTrDJixRCgAAAkU"]
[Thu Dec 25 20:08:15.384834 2025] [:error] [pid 31571:tid 31635] [client 4.241.194.62:55497] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aU0pL-7e_lLK2X5wU8nJjQAAAIg"]
[Thu Dec 25 20:08:16.220505 2025] [:error] [pid 64973:tid 65023] [client 4.241.194.62:46906] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aU0pMOqHYEKj6K8dhUE7FQAAApM"]
[Thu Dec 25 20:08:16.770524 2025] [:error] [pid 64971:tid 64977] [client 4.241.194.62:54449] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aU0pMKqyk1GkxTrDJixRDAAAAkA"]
[Thu Dec 25 20:08:17.991442 2025] [:error] [pid 64820:tid 64846] [client 4.241.194.62:65350] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aU0pMcSuTdTvkipi541NYQAAAVY"]
[Thu Dec 25 20:08:19.327033 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:46899] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aU0pM-7e_lLK2X5wU8nJjwAAAJE"]
[Thu Dec 25 20:08:20.404721 2025] [:error] [pid 64973:tid 65014] [client 4.241.194.62:46868] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aU0pNOqHYEKj6K8dhUE7HgAAAoo"]
[Thu Dec 25 20:08:21.100779 2025] [:error] [pid 64973:tid 65012] [client 4.241.194.62:55513] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aU0pNeqHYEKj6K8dhUE7IAAAAog"]
[Thu Dec 25 20:08:21.912156 2025] [:error] [pid 31569:tid 31586] [client 4.241.194.62:46910] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aU0pNWiSFBH7Ee_uldXnbAAAAA0"]
[Thu Dec 25 20:08:22.705812 2025] [:error] [pid 31655:tid 31674] [client 4.241.194.62:36267] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aU0pNpozPMk9HPtIJPOr7AAAANE"]
[Thu Dec 25 20:08:23.721011 2025] [:error] [pid 64910:tid 64946] [client 4.241.194.62:41294] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aU0pN-es2ob7vYHBZqB-YwAAAgU"]
[Thu Dec 25 20:08:24.675984 2025] [:error] [pid 64820:tid 64826] [client 4.241.194.62:36262] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aU0pOMSuTdTvkipi541NbAAAAUI"]
[Thu Dec 25 20:08:25.528652 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:46869] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aU0pOZozPMk9HPtIJPOr8wAAAMg"]
[Thu Dec 25 20:08:26.222248 2025] [:error] [pid 64820:tid 64843] [client 4.241.194.62:36254] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aU0pOsSuTdTvkipi541NcgAAAVM"]
[Thu Dec 25 20:08:27.242151 2025] [:error] [pid 31570:tid 31615] [client 4.241.194.62:16653] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aU0pO2Py2DpAzW_4a2hSGAAAAE8"]
[Thu Dec 25 20:08:27.809081 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:36244] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aU0pO5ozPMk9HPtIJPOr_AAAAMI"]
[Thu Dec 25 20:08:28.225360 2025] [:error] [pid 64971:tid 64983] [client 4.241.194.62:46900] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aU0pPKqyk1GkxTrDJixRGgAAAkY"]
[Thu Dec 25 20:08:28.858223 2025] [:error] [pid 31655:tid 31669] [client 4.241.194.62:36268] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aU0pPJozPMk9HPtIJPOr_wAAAMw"]
[Thu Dec 25 20:08:29.637016 2025] [:error] [pid 31569:tid 31596] [client 4.241.194.62:16677] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aU0pPWiSFBH7Ee_uldXndgAAABc"]
[Thu Dec 25 20:08:30.083727 2025] [:error] [pid 64971:tid 64986] [client 4.241.194.62:55522] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aU0pPqqyk1GkxTrDJixRHQAAAkk"]
[Thu Dec 25 20:08:30.406006 2025] [:error] [pid 64971:tid 64990] [client 4.241.194.62:36224] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aU0pPqqyk1GkxTrDJixRHgAAAk0"]
[Thu Dec 25 20:08:30.977363 2025] [:error] [pid 64910:tid 64961] [client 4.241.194.62:55521] [client 4.241.194.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aU0pPues2ob7vYHBZqB-ZwAAAhQ"]
[Thu Dec 25 20:08:31.814411 2025] [:error] [pid 64820:tid 64836] [client 4.241.194.62:36261] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aU0pP8SuTdTvkipi541NdwAAAUw"]
[Thu Dec 25 20:08:32.572650 2025] [:error] [pid 64975:tid 65064] [client 4.241.194.62:41325] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aU0pQCXyboSuXIThjj6b_QAAAwY"]
[Thu Dec 25 20:08:33.651907 2025] [:error] [pid 64973:tid 65004] [client 4.241.194.62:54417] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aU0pQeqHYEKj6K8dhUE7JwAAAoA"]
[Thu Dec 25 20:08:34.416058 2025] [:error] [pid 64910:tid 64949] [client 4.241.194.62:46908] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aU0pQues2ob7vYHBZqB-awAAAgg"]
[Thu Dec 25 20:08:35.510476 2025] [:error] [pid 64820:tid 64826] [client 4.241.194.62:36258] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aU0pQ8SuTdTvkipi541NfAAAAUI"]
[Thu Dec 25 20:08:36.474446 2025] [:error] [pid 64975:tid 65063] [client 4.241.194.62:36249] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aU0pRCXyboSuXIThjj6cAQAAAwU"]
[Thu Dec 25 20:08:37.414521 2025] [:error] [pid 64910:tid 64955] [client 4.241.194.62:55498] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aU0pRees2ob7vYHBZqB-bgAAAg4"]
[Thu Dec 25 20:08:39.342636 2025] [:error] [pid 64971:tid 64989] [client 4.241.194.62:16681] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aU0pR6qyk1GkxTrDJixRKgAAAkw"]
[Thu Dec 25 20:08:41.305802 2025] [:error] [pid 31569:tid 31594] [client 4.241.194.62:16671] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aU0pSWiSFBH7Ee_uldXnfgAAABU"]
[Thu Dec 25 20:08:42.012747 2025] [:error] [pid 31569:tid 31574] [client 4.241.194.62:36269] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aU0pSmiSFBH7Ee_uldXngAAAAAE"]
[Thu Dec 25 20:08:42.574336 2025] [:error] [pid 31655:tid 31669] [client 4.241.194.62:16640] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aU0pSpozPMk9HPtIJPOsDwAAAMw"]
[Thu Dec 25 20:08:43.008082 2025] [:error] [pid 64820:tid 64835] [client 4.241.194.62:41312] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aU0pS8SuTdTvkipi541NigAAAUs"]
[Thu Dec 25 20:08:43.822391 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:41343] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0pS2Py2DpAzW_4a2hSLAAAAFc"]
[Thu Dec 25 20:08:44.622931 2025] [:error] [pid 64820:tid 64825] [client 4.241.194.62:55540] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0pTMSuTdTvkipi541NjgAAAUE"]
[Thu Dec 25 20:08:45.143443 2025] [:error] [pid 31655:tid 31666] [client 4.241.194.62:41305] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0pTZozPMk9HPtIJPOsEgAAAMk"]
[Thu Dec 25 20:08:45.606537 2025] [:error] [pid 64973:tid 65016] [client 4.241.194.62:16673] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU0pTeqHYEKj6K8dhUE7OAAAAow"]
[Thu Dec 25 20:08:46.174249 2025] [:error] [pid 31569:tid 31575] [client 4.241.194.62:36226] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aU0pTmiSFBH7Ee_uldXnhwAAAAI"]
[Thu Dec 25 20:08:46.873898 2025] [:error] [pid 64820:tid 64837] [client 4.241.194.62:16699] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aU0pTsSuTdTvkipi541NlQAAAU0"]
[Thu Dec 25 20:08:47.385491 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:65349] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aU0pT5ozPMk9HPtIJPOsFQAAAMU"]
[Thu Dec 25 20:08:47.954087 2025] [:error] [pid 64820:tid 64835] [client 4.241.194.62:46866] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aU0pT8SuTdTvkipi541NlwAAAUs"]
[Thu Dec 25 20:08:48.414471 2025] [:error] [pid 31571:tid 31632] [client 4.241.194.62:16649] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aU0pUO7e_lLK2X5wU8nJogAAAIU"]
[Thu Dec 25 20:08:50.048635 2025] [:error] [pid 64820:tid 64839] [client 4.241.194.62:41338] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aU0pUsSuTdTvkipi541NmAAAAU8"]
[Thu Dec 25 20:08:51.247298 2025] [:error] [pid 31570:tid 31621] [client 4.241.194.62:61724] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aU0pU2Py2DpAzW_4a2hSMgAAAFU"]
[Thu Dec 25 20:08:51.817397 2025] [:error] [pid 64973:tid 65021] [client 4.241.194.62:16670] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aU0pU-qHYEKj6K8dhUE7PgAAApE"]
[Thu Dec 25 20:08:52.537654 2025] [:error] [pid 64909:tid 64923] [client 4.241.194.62:41905] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aU0pVB45RBsBaT7_YDVn9QAAAck"]
[Thu Dec 25 20:08:53.808740 2025] [:error] [pid 64910:tid 64961] [client 4.241.194.62:55547] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aU0pVees2ob7vYHBZqB-dwAAAhQ"]
[Thu Dec 25 20:08:54.083078 2025] [:error] [pid 64820:tid 64844] [client 4.241.194.62:46896] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aU0pVsSuTdTvkipi541NnAAAAVQ"]
[Thu Dec 25 20:08:54.520189 2025] [:error] [pid 64971:tid 64982] [client 4.241.194.62:16643] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aU0pVqqyk1GkxTrDJixRPgAAAkU"]
[Thu Dec 25 20:08:54.858743 2025] [:error] [pid 64973:tid 65025] [client 4.241.194.62:41889] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aU0pVuqHYEKj6K8dhUE7QwAAApU"]
[Thu Dec 25 20:08:55.331630 2025] [:error] [pid 64973:tid 65028] [client 4.241.194.62:36257] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aU0pV-qHYEKj6K8dhUE7RAAAApg"]
[Thu Dec 25 20:08:56.687051 2025] [:error] [pid 64820:tid 64831] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Thu Dec 25 20:08:56.814110 2025] [:error] [pid 64820:tid 64834] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Thu Dec 25 20:08:56.941883 2025] [:error] [pid 64820:tid 64843] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Thu Dec 25 20:08:57.091070 2025] [:error] [pid 64820:tid 64828] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Thu Dec 25 20:08:57.256047 2025] [:error] [pid 64820:tid 64846] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 25 20:08:58.144875 2025] [:error] [pid 64820:tid 64837] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Dec 25 20:08:58.284717 2025] [:error] [pid 64820:tid 64836] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Thu Dec 25 20:08:58.403615 2025] [:error] [pid 64820:tid 64829] [client 4.241.194.62:46902] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Thu Dec 25 20:08:59.171605 2025] [:error] [pid 64820:tid 64841] [client 4.241.194.62:46902] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aU0pW8SuTdTvkipi541NrgAAAVE"]
[Thu Dec 25 20:09:00.043146 2025] [:error] [pid 64971:tid 64995] [client 4.241.194.62:46858] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aU0pXKqyk1GkxTrDJixRQQAAAlI"]
[Thu Dec 25 20:09:00.854171 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:55542] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aU0pXGPy2DpAzW_4a2hSOAAAAFc"]
[Thu Dec 25 20:09:01.505423 2025] [:error] [pid 64975:tid 65075] [client 4.241.194.62:61712] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aU0pXSXyboSuXIThjj6cHAAAAxE"]
[Thu Dec 25 20:09:02.084380 2025] [:error] [pid 31655:tid 31679] [client 4.241.194.62:17214] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aU0pXpozPMk9HPtIJPOsIAAAANY"]
[Thu Dec 25 20:09:03.138868 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:61758] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aU0pX2iSFBH7Ee_uldXniwAAABY"]
[Thu Dec 25 20:09:04.017859 2025] [:error] [pid 31569:tid 31573] [client 4.241.194.62:36230] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aU0pYGiSFBH7Ee_uldXnjgAAAAA"]
[Thu Dec 25 20:09:04.873251 2025] [:error] [pid 64975:tid 65066] [client 4.241.194.62:16685] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aU0pYCXyboSuXIThjj6cHgAAAwg"]
[Thu Dec 25 20:09:05.420245 2025] [:error] [pid 64910:tid 64958] [client 4.241.194.62:46905] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aU0pYees2ob7vYHBZqB-fAAAAhE"]
[Thu Dec 25 20:09:06.424981 2025] [:error] [pid 64820:tid 64832] [client 4.241.194.62:41334] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aU0pYsSuTdTvkipi541NsAAAAUg"]
[Thu Dec 25 20:09:09.288850 2025] [:error] [pid 64973:tid 65011] [client 4.241.194.62:16651] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aU0pZeqHYEKj6K8dhUE7TgAAAoc"]
[Thu Dec 25 20:09:09.758043 2025] [:error] [pid 64910:tid 64957] [client 4.241.194.62:16688] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aU0pZees2ob7vYHBZqB-hQAAAhA"]
[Thu Dec 25 20:09:10.157461 2025] [:error] [pid 64973:tid 65022] [client 4.241.194.62:36276] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU0pZuqHYEKj6K8dhUE7UQAAApI"]
[Thu Dec 25 20:09:11.001511 2025] [:error] [pid 64910:tid 64945] [client 4.241.194.62:61737] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU0pZ-es2ob7vYHBZqB-hwAAAgQ"]
[Thu Dec 25 20:09:11.594650 2025] [:error] [pid 31570:tid 31616] [client 4.241.194.62:61716] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU0pZ2Py2DpAzW_4a2hSOwAAAFA"]
[Thu Dec 25 20:09:12.030904 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:55527] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU0paJozPMk9HPtIJPOsNAAAAMU"]
[Thu Dec 25 20:09:13.070617 2025] [:error] [pid 64971:tid 64993] [client 4.241.194.62:61747] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0paaqyk1GkxTrDJixRRgAAAlA"]
[Thu Dec 25 20:09:14.784261 2025] [:error] [pid 64973:tid 65023] [client 4.241.194.62:61711] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0pauqHYEKj6K8dhUE7WAAAApM"]
[Thu Dec 25 20:09:15.778741 2025] [:error] [pid 64973:tid 65018] [client 4.241.194.62:50498] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0pa-qHYEKj6K8dhUE7WwAAAo4"]
[Thu Dec 25 20:09:16.287859 2025] [:error] [pid 64820:tid 64828] [client 4.241.194.62:65352] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU0pbMSuTdTvkipi541NuAAAAUQ"]
[Thu Dec 25 20:09:16.633961 2025] [:error] [pid 64820:tid 64848] [client 4.241.194.62:41891] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aU0pbMSuTdTvkipi541NuQAAAVg"]
[Thu Dec 25 20:09:17.461745 2025] [:error] [pid 64910:tid 64963] [client 4.241.194.62:36274] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aU0pbees2ob7vYHBZqB-jAAAAhY"]
[Thu Dec 25 20:09:18.150952 2025] [:error] [pid 64910:tid 64950] [client 4.241.194.62:16648] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aU0pbues2ob7vYHBZqB-jgAAAgk"]
[Thu Dec 25 20:09:18.783867 2025] [:error] [pid 64820:tid 64826] [client 4.241.194.62:41874] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aU0pbsSuTdTvkipi541NvwAAAUI"]
[Thu Dec 25 20:09:19.906983 2025] [:error] [pid 64971:tid 64984] [client 4.241.194.62:36236] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aU0pb6qyk1GkxTrDJixRTwAAAkc"]
[Thu Dec 25 20:09:20.667348 2025] [:error] [pid 64975:tid 65082] [client 4.241.194.62:46885] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aU0pcCXyboSuXIThjj6cKQAAAxg"]
[Thu Dec 25 20:09:21.591093 2025] [:error] [pid 64820:tid 64839] [client 4.241.194.62:16646] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aU0pccSuTdTvkipi541NxgAAAU8"]
[Thu Dec 25 20:09:22.442883 2025] [:error] [pid 64910:tid 64951] [client 4.241.194.62:41289] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aU0pcues2ob7vYHBZqB-kQAAAgo"]
[Thu Dec 25 20:09:23.178237 2025] [:error] [pid 31571:tid 31648] [client 4.241.194.62:16693] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0pc-7e_lLK2X5wU8nJsgAAAJU"]
[Thu Dec 25 20:09:24.187592 2025] [:error] [pid 31571:tid 31636] [client 4.241.194.62:36233] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0pdO7e_lLK2X5wU8nJswAAAIk"]
[Thu Dec 25 20:09:24.745793 2025] [:error] [pid 64971:tid 64981] [client 4.241.194.62:54432] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0pdKqyk1GkxTrDJixRUAAAAkQ"]
[Thu Dec 25 20:09:25.228233 2025] [:error] [pid 64909:tid 64923] [client 4.241.194.62:61726] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU0pdR45RBsBaT7_YDVoFAAAAck"]
[Thu Dec 25 20:09:26.239729 2025] [:error] [pid 64820:tid 64840] [client 4.241.194.62:61728] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aU0pdsSuTdTvkipi541N2QAAAVA"]
[Thu Dec 25 20:09:27.425824 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:41340] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aU0pd2iSFBH7Ee_uldXnmgAAABY"]
[Thu Dec 25 20:09:27.867679 2025] [:error] [pid 31569:tid 31587] [client 4.241.194.62:46901] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aU0pd2iSFBH7Ee_uldXnmwAAAA4"]
[Thu Dec 25 20:09:28.510503 2025] [:error] [pid 64909:tid 64924] [client 4.241.194.62:65356] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aU0peB45RBsBaT7_YDVoFQAAAco"]
[Thu Dec 25 20:09:29.554602 2025] [:error] [pid 64820:tid 64845] [client 4.241.194.62:41287] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aU0pecSuTdTvkipi541N4gAAAVU"]
[Thu Dec 25 20:09:30.774064 2025] [:error] [pid 64820:tid 64838] [client 4.241.194.62:36232] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aU0pesSuTdTvkipi541N5QAAAU4"]
[Thu Dec 25 20:09:31.507280 2025] [:error] [pid 31570:tid 31614] [client 4.241.194.62:55525] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aU0pe2Py2DpAzW_4a2hSPQAAAE4"]
[Thu Dec 25 20:09:32.101654 2025] [:error] [pid 31569:tid 31593] [client 4.241.194.62:16680] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aU0pfGiSFBH7Ee_uldXnvgAAABQ"]
[Thu Dec 25 20:09:32.875809 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:16694] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aU0pfGiSFBH7Ee_uldXnwgAAABA"]
[Thu Dec 25 20:09:33.349690 2025] [:error] [pid 64973:tid 65005] [client 4.241.194.62:17360] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aU0pfeqHYEKj6K8dhUE7ZwAAAoE"]
[Thu Dec 25 20:09:34.449459 2025] [:error] [pid 64973:tid 65018] [client 4.241.194.62:41863] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aU0pfuqHYEKj6K8dhUE7aQAAAo4"]
[Thu Dec 25 20:09:35.114729 2025] [:error] [pid 64820:tid 64829] [client 4.241.194.62:45557] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aU0pf8SuTdTvkipi541N7wAAAUU"]
[Thu Dec 25 20:09:35.587506 2025] [:error] [pid 31570:tid 31607] [client 4.241.194.62:41337] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0pf2Py2DpAzW_4a2hSQQAAAEc"]
[Thu Dec 25 20:09:36.015292 2025] [:error] [pid 31570:tid 31618] [client 4.241.194.62:46907] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0pgGPy2DpAzW_4a2hSQwAAAFI"]
[Thu Dec 25 20:09:36.691886 2025] [:error] [pid 64820:tid 64838] [client 4.241.194.62:41309] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0pgMSuTdTvkipi541N8gAAAU4"]
[Thu Dec 25 20:09:37.754591 2025] [:error] [pid 64971:tid 64991] [client 4.241.194.62:46872] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU0pgaqyk1GkxTrDJixRVQAAAk4"]
[Thu Dec 25 20:09:38.845196 2025] [:error] [pid 31571:tid 31628] [client 4.241.194.62:46857] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aU0pgu7e_lLK2X5wU8nJvAAAAIE"]
[Thu Dec 25 20:09:39.656184 2025] [:error] [pid 64909:tid 64936] [client 4.241.194.62:46867] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aU0pgx45RBsBaT7_YDVoZQAAAdY"]
[Thu Dec 25 20:09:40.445070 2025] [:error] [pid 64973:tid 65024] [client 4.241.194.62:55512] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aU0phOqHYEKj6K8dhUE7cAAAApQ"]
[Thu Dec 25 20:09:41.439711 2025] [:error] [pid 64971:tid 64989] [client 4.241.194.62:16674] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aU0phaqyk1GkxTrDJixRWAAAAkw"]
[Thu Dec 25 20:09:42.028898 2025] [:error] [pid 31571:tid 31643] [client 4.241.194.62:36225] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU0phu7e_lLK2X5wU8nJvgAAAJA"]
[Thu Dec 25 20:09:42.680100 2025] [:error] [pid 64973:tid 65025] [client 4.241.194.62:55541] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU0phuqHYEKj6K8dhUE7cwAAApU"]
[Thu Dec 25 20:09:43.470640 2025] [:error] [pid 64909:tid 64915] [client 4.241.194.62:55489] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU0phx45RBsBaT7_YDVoZwAAAcE"]
[Thu Dec 25 20:09:44.534428 2025] [:error] [pid 64971:tid 64978] [client 4.241.194.62:16655] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU0piKqyk1GkxTrDJixRWwAAAkE"]
[Thu Dec 25 20:09:45.471330 2025] [:error] [pid 64975:tid 65059] [client 4.241.194.62:46882] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/m.php"] [unique_id "aU0piSXyboSuXIThjj6cPQAAAwE"]
[Thu Dec 25 20:09:45.880329 2025] [:error] [pid 64820:tid 64846] [client 4.241.194.62:41910] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/m.php"] [unique_id "aU0picSuTdTvkipi541N_AAAAVY"]
[Thu Dec 25 20:09:46.310017 2025] [:error] [pid 31570:tid 31612] [client 4.241.194.62:41308] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/m.php"] [unique_id "aU0pimPy2DpAzW_4a2hSUwAAAEw"]
[Thu Dec 25 20:09:46.980164 2025] [:error] [pid 64971:tid 64990] [client 4.241.194.62:41288] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/m.php"] [unique_id "aU0piqqyk1GkxTrDJixRXgAAAk0"]
[Thu Dec 25 20:09:47.840348 2025] [:error] [pid 31655:tid 31667] [client 4.241.194.62:55540] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aU0pi5ozPMk9HPtIJPOsTwAAAMo"]
[Thu Dec 25 20:09:48.321052 2025] [:error] [pid 31571:tid 31651] [client 4.241.194.62:65389] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aU0pjO7e_lLK2X5wU8nJwQAAAJg"]
[Thu Dec 25 20:09:48.833849 2025] [:error] [pid 31571:tid 31647] [client 4.241.194.62:61741] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aU0pjO7e_lLK2X5wU8nJwwAAAJQ"]
[Thu Dec 25 20:09:49.731365 2025] [:error] [pid 31571:tid 31644] [client 4.241.194.62:61708] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aU0pje7e_lLK2X5wU8nJyAAAAJE"]
[Thu Dec 25 20:09:50.338298 2025] [:error] [pid 31571:tid 31632] [client 4.241.194.62:36255] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aU0pju7e_lLK2X5wU8nJzAAAAIU"]
[Thu Dec 25 20:09:51.138125 2025] [:error] [pid 64975:tid 65073] [client 4.241.194.62:25655] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aU0pjyXyboSuXIThjj6cQwAAAw8"]
[Thu Dec 25 20:09:51.806600 2025] [:error] [pid 64975:tid 65068] [client 4.241.194.62:16676] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aU0pjyXyboSuXIThjj6cRQAAAwo"]
[Thu Dec 25 20:09:52.750666 2025] [:error] [pid 64971:tid 64984] [client 4.241.194.62:54411] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aU0pkKqyk1GkxTrDJixRYAAAAkc"]
[Thu Dec 25 20:09:53.414090 2025] [:error] [pid 64975:tid 65072] [client 4.241.194.62:46911] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aU0pkSXyboSuXIThjj6cSAAAAw4"]
[Thu Dec 25 20:09:53.991857 2025] [:error] [pid 31655:tid 31673] [client 4.241.194.62:65351] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aU0pkZozPMk9HPtIJPOsUwAAANA"]
[Thu Dec 25 20:09:54.411760 2025] [:error] [pid 64820:tid 64831] [client 4.241.194.62:36259] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aU0pksSuTdTvkipi541OAAAAAUc"]
[Thu Dec 25 20:09:55.300679 2025] [:error] [pid 31571:tid 31646] [client 4.241.194.62:41896] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aU0pk-7e_lLK2X5wU8nJ0gAAAJM"]
[Thu Dec 25 20:09:56.113829 2025] [:error] [pid 31569:tid 31585] [client 4.241.194.62:65364] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aU0plGiSFBH7Ee_uldXnywAAAAw"]
[Thu Dec 25 20:09:57.003764 2025] [:error] [pid 31570:tid 31622] [client 4.241.194.62:36284] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aU0plWPy2DpAzW_4a2hSXQAAAFY"]
[Thu Dec 25 20:09:57.960632 2025] [:error] [pid 31655:tid 31666] [client 4.241.194.62:46884] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aU0plZozPMk9HPtIJPOsVQAAAMk"]
[Thu Dec 25 20:09:58.488525 2025] [:error] [pid 31655:tid 31672] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Dec 25 20:09:58.841082 2025] [:error] [pid 31655:tid 31674] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Thu Dec 25 20:09:58.987267 2025] [:error] [pid 31655:tid 31660] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Thu Dec 25 20:09:59.433956 2025] [:error] [pid 31655:tid 31675] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Thu Dec 25 20:09:59.672171 2025] [:error] [pid 31655:tid 31665] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Thu Dec 25 20:09:59.808034 2025] [:error] [pid 31655:tid 31667] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Thu Dec 25 20:10:00.323627 2025] [:error] [pid 31655:tid 31658] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Dec 25 20:10:00.470444 2025] [:error] [pid 31655:tid 31659] [client 4.241.194.62:41311] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Dec 25 20:10:00.584612 2025] [:error] [pid 31655:tid 31662] [client 4.241.194.62:41311] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aU0pmJozPMk9HPtIJPOsaQAAAMU"]
[Thu Dec 25 20:10:02.333888 2025] [:error] [pid 64910:tid 64963] [client 4.241.194.62:55518] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aU0pmues2ob7vYHBZqB-qQAAAhY"]
[Thu Dec 25 20:10:03.789450 2025] [:error] [pid 64971:tid 64994] [client 4.241.194.62:16647] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aU0pm6qyk1GkxTrDJixRaAAAAlE"]
[Thu Dec 25 20:10:05.085092 2025] [:error] [pid 64820:tid 64840] [client 4.241.194.62:50551] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aU0pncSuTdTvkipi541OBAAAAVA"]
[Thu Dec 25 20:10:05.680775 2025] [:error] [pid 31569:tid 31589] [client 4.241.194.62:55500] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aU0pnWiSFBH7Ee_uldXnzgAAABA"]
[Thu Dec 25 20:10:06.391349 2025] [:error] [pid 64975:tid 65059] [client 4.241.194.62:61709] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aU0pniXyboSuXIThjj6cSwAAAwE"]
[Thu Dec 25 20:10:06.928400 2025] [:error] [pid 31569:tid 31595] [client 4.241.194.62:65358] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aU0pnmiSFBH7Ee_uldXn0AAAABY"]
[Thu Dec 25 20:10:07.660823 2025] [:error] [pid 31569:tid 31587] [client 4.241.194.62:50515] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aU0pn2iSFBH7Ee_uldXn0gAAAA4"]
[Thu Dec 25 20:10:08.274076 2025] [:error] [pid 64820:tid 64826] [client 4.241.194.62:41307] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU0poMSuTdTvkipi541OBgAAAUI"]
[Thu Dec 25 20:10:09.328149 2025] [:error] [pid 64975:tid 65058] [client 4.241.194.62:46880] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU0poSXyboSuXIThjj6cTwAAAwA"]
[Thu Dec 25 20:10:09.880229 2025] [:error] [pid 31569:tid 31577] [client 4.241.194.62:36252] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU0poWiSFBH7Ee_uldXn1AAAAAQ"]
[Thu Dec 25 20:10:10.381783 2025] [:error] [pid 31571:tid 31632] [client 4.241.194.62:61732] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU0pou7e_lLK2X5wU8nJ2AAAAIU"]
[Thu Dec 25 20:10:10.736955 2025] [:error] [pid 64973:tid 65008] [client 4.241.194.62:46863] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aU0pouqHYEKj6K8dhUE7eQAAAoQ"]
[Thu Dec 25 20:10:11.156388 2025] [:error] [pid 31571:tid 31629] [client 4.241.194.62:65353] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aU0po-7e_lLK2X5wU8nJ2QAAAII"]
[Thu Dec 25 20:10:11.944822 2025] [:error] [pid 31655:tid 31664] [client 4.241.194.62:55519] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aU0po5ozPMk9HPtIJPOsfQAAAMc"]
[Thu Dec 25 20:10:12.326636 2025] [:error] [pid 31655:tid 31674] [client 4.241.194.62:41322] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aU0ppJozPMk9HPtIJPOsfgAAANE"]
[Thu Dec 25 20:10:12.689749 2025] [:error] [pid 64975:tid 65080] [client 4.241.194.62:41299] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU0ppCXyboSuXIThjj6cUgAAAxY"]
[Thu Dec 25 20:10:13.149961 2025] [:error] [pid 31570:tid 31623] [client 4.241.194.62:41326] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU0ppWPy2DpAzW_4a2hScAAAAFc"]
[Thu Dec 25 20:10:13.573469 2025] [:error] [pid 64910:tid 64942] [client 4.241.194.62:55528] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU0ppees2ob7vYHBZqB-uAAAAgE"]
[Thu Dec 25 20:10:13.937645 2025] [:error] [pid 31569:tid 31579] [client 4.241.194.62:36245] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU0ppWiSFBH7Ee_uldXn1wAAAAY"]
[Thu Dec 25 20:10:14.431987 2025] [:error] [pid 64910:tid 64958] [client 4.241.194.62:65368] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU0ppues2ob7vYHBZqB-ugAAAhE"]
[Thu Dec 25 20:10:15.174954 2025] [:error] [pid 31570:tid 31624] [client 4.241.194.62:46892] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU0pp2Py2DpAzW_4a2hSdAAAAFg"]
[Thu Dec 25 20:10:15.839203 2025] [:error] [pid 64820:tid 64828] [client 4.241.194.62:41329] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU0pp8SuTdTvkipi541OCgAAAUQ"]
[Thu Dec 25 20:10:16.516898 2025] [:error] [pid 64820:tid 64833] [client 4.241.194.62:16666] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU0pqMSuTdTvkipi541ODQAAAUk"]
[Thu Dec 25 20:10:17.328809 2025] [:error] [pid 64820:tid 64835] [client 4.241.194.62:41281] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aU0pqcSuTdTvkipi541OEAAAAUs"]
[Thu Dec 25 20:10:17.768034 2025] [:error] [pid 64971:tid 64985] [client 4.241.194.62:41286] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aU0pqaqyk1GkxTrDJixRdAAAAkg"]
[Thu Dec 25 20:10:18.282882 2025] [:error] [pid 64820:tid 64838] [client 4.241.194.62:61720] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aU0pqsSuTdTvkipi541OEQAAAU4"]
[Thu Dec 25 20:10:18.934988 2025] [:error] [pid 64971:tid 64983] [client 4.241.194.62:25640] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aU0pqqqyk1GkxTrDJixRdgAAAkY"]
[Thu Dec 25 20:10:20.002511 2025] [:error] [pid 64820:tid 64848] [client 4.241.194.62:36281] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aU0prMSuTdTvkipi541OGgAAAVg"]
[Thu Dec 25 20:10:20.473161 2025] [:error] [pid 64975:tid 65074] [client 4.241.194.62:36248] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aU0prCXyboSuXIThjj6cXAAAAxA"]
[Thu Dec 25 20:10:20.814140 2025] [:error] [pid 64909:tid 64919] [client 4.241.194.62:55535] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aU0prB45RBsBaT7_YDVobwAAAcU"]
[Thu Dec 25 20:10:21.438794 2025] [:error] [pid 64971:tid 64978] [client 4.241.194.62:41327] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aU0praqyk1GkxTrDJixReQAAAkE"]
[Thu Dec 25 22:02:13.041932 2025] [:error] [pid 27869:tid 27895] [client 38.127.60.232:55947] [client 38.127.60.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.127.60.232, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aU1D5RNK7_n86kBD7qfW7AAAAJg"]
[Thu Dec 25 22:02:13.045176 2025] [:error] [pid 27869:tid 27895] [client 38.127.60.232:55947] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 25 22:02:14.463720 2025] [:error] [pid 22043:tid 22048] [client 38.127.60.232:65517] [client 38.127.60.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.232, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aU1D5j4YVtlb2Iz_QE5QDAAAAAA"]
[Thu Dec 25 22:02:14.467512 2025] [:error] [pid 22043:tid 22048] [client 38.127.60.232:65517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 25 23:46:37.379882 2025] [:error] [pid 22044:tid 22080] [client 35.230.23.55:53509] [client 35.230.23.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.23.55, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aU1cXXPTC5rQKTB0FQ_EYAAAAMU"]
[Thu Dec 25 23:46:37.383389 2025] [:error] [pid 22044:tid 22080] [client 35.230.23.55:53509] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 25 23:46:39.903609 2025] [:error] [pid 22044:tid 22079] [client 35.230.23.55:53509] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aU1cX3PTC5rQKTB0FQ_EeAAAAMQ"]
[Thu Dec 25 23:46:40.275671 2025] [:error] [pid 22131:tid 22147] [client 35.230.23.55:65488] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aU1cYJvVMtSTB4lX2fZTowAAAEw"]
[Thu Dec 25 23:46:40.635472 2025] [:error] [pid 22043:tid 22060] [client 35.230.23.55:61668] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aU1cYD4YVtlb2Iz_QE5vLwAAAAw"]
[Thu Dec 25 23:46:41.008637 2025] [:error] [pid 27869:tid 27879] [client 35.230.23.55:50467] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aU1cYRNK7_n86kBD7qcI2AAAAIg"]
[Thu Dec 25 23:46:41.390475 2025] [:error] [pid 22044:tid 22092] [client 35.230.23.55:62938] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aU1cYXPTC5rQKTB0FQ_EewAAANE"]
[Thu Dec 25 23:46:41.848522 2025] [:error] [pid 22045:tid 22126] [client 35.230.23.55:59137] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aU1cYasGGmXjDnvlmHuK-AAAAVg"]
[Thu Dec 25 23:46:42.323655 2025] [:error] [pid 22043:tid 22053] [client 35.230.23.55:60254] [client 35.230.23.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aU1cYj4YVtlb2Iz_QE5vMQAAAAU"]
[Fri Dec 26 07:24:34.545927 2025] [:error] [pid 28355:tid 28359] [client 114.80.36.40:43524] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aU3HsrsFqKXf7ADZcTYv4AAAAMI"]
[Fri Dec 26 14:38:02.814095 2025] [:error] [pid 28355:tid 28366] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Dec 26 14:38:03.283306 2025] [:error] [pid 28355:tid 28361] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Dec 26 14:38:03.798089 2025] [:error] [pid 28355:tid 28378] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Dec 26 14:38:04.300017 2025] [:error] [pid 28355:tid 28361] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Dec 26 14:38:04.754152 2025] [:error] [pid 28355:tid 28378] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Dec 26 14:38:05.219933 2025] [:error] [pid 28355:tid 28371] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Dec 26 14:38:05.669390 2025] [:error] [pid 28355:tid 28365] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Dec 26 14:38:06.248457 2025] [:error] [pid 28355:tid 28359] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 26 14:38:07.239942 2025] [:error] [pid 28355:tid 28363] [client 203.159.81.35:62919] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Dec 26 14:38:08.191480 2025] [:error] [pid 28355:tid 28360] [client 203.159.81.35:62919] [client 203.159.81.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aU4tULsFqKXf7ADZcTa8LAAAAMM"]
[Fri Dec 26 14:38:09.127119 2025] [:error] [pid 15063:tid 15084] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Dec 26 14:38:09.647806 2025] [:error] [pid 15063:tid 15075] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Dec 26 14:38:10.146502 2025] [:error] [pid 15063:tid 15078] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Dec 26 14:38:10.651170 2025] [:error] [pid 15063:tid 15078] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Dec 26 14:38:11.138375 2025] [:error] [pid 15063:tid 15078] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Dec 26 14:38:11.608686 2025] [:error] [pid 15063:tid 15070] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Dec 26 14:38:12.099772 2025] [:error] [pid 15063:tid 15076] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Dec 26 14:38:12.566939 2025] [:error] [pid 15063:tid 15070] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Dec 26 14:38:13.158966 2025] [:error] [pid 15063:tid 15088] [client 203.159.81.39:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Dec 26 14:38:19.284942 2025] [:error] [pid 15063:tid 15080] [client 203.159.81.39:34665] [client 203.159.81.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aU4tW-Dsf_aL46Jy7z-izAAAAQ8"]
[Fri Dec 26 14:38:21.480412 2025] [:error] [pid 28268:tid 28278] [client 203.159.81.26:49601] [client 203.159.81.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4tXXc_KuO_55-uPTRXswAAAAM"]
[Fri Dec 26 14:38:24.598946 2025] [:error] [pid 28268:tid 28292] [client 203.159.81.3:62423] [client 203.159.81.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4tYHc_KuO_55-uPTRX6gAAABE"]
[Fri Dec 26 14:38:27.485184 2025] [:error] [pid 7160:tid 7186] [client 203.159.81.46:59357] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Dec 26 14:38:29.006187 2025] [:error] [pid 7160:tid 7178] [client 203.159.81.46:59357] [client 203.159.81.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aU4tZew_ihNZR5L8vEUQVAAAAY8"]
[Fri Dec 26 14:38:31.053361 2025] [:error] [pid 7160:tid 7174] [client 203.159.81.10:58127] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Dec 26 14:38:31.988388 2025] [:error] [pid 7160:tid 7164] [client 203.159.81.10:58127] [client 203.159.81.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aU4tZ-w_ihNZR5L8vEUQcQAAAYE"]
[Fri Dec 26 14:38:34.921354 2025] [:error] [pid 28269:tid 28318] [client 203.159.81.39:62745] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Dec 26 14:38:37.276959 2025] [:error] [pid 28269:tid 28320] [client 203.159.81.39:62745] [client 203.159.81.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aU4tbZ3ZK8bJ-c9-kjPtVAAAAFI"]
[Fri Dec 26 14:38:40.431438 2025] [:error] [pid 34865:tid 34872] [client 203.159.81.26:65111] [client 203.159.81.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU4tcKi4zjVVKBdvuTSNrAAAAUU"]
[Fri Dec 26 14:38:41.535671 2025] [:error] [pid 28270:tid 28347] [client 203.159.81.39:47291] [client 203.159.81.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aU4tcV9Ac79_ckdPN5L8cQAAAJI"]
[Fri Dec 26 14:38:42.417234 2025] [:error] [pid 15063:tid 15072] [client 203.159.81.6:46761] [client 203.159.81.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aU4tcuDsf_aL46Jy7z-kPQAAAQc"]
[Fri Dec 26 14:38:43.417478 2025] [:error] [pid 15063:tid 15076] [client 203.159.81.28:32963] [client 203.159.81.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aU4tc-Dsf_aL46Jy7z-kSgAAAQs"]
[Fri Dec 26 14:38:45.027524 2025] [:error] [pid 34865:tid 34867] [client 203.159.81.30:28441] [client 203.159.81.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aU4tdai4zjVVKBdvuTSN3wAAAUA"]
[Fri Dec 26 14:38:46.478864 2025] [:error] [pid 28270:tid 28349] [client 203.159.81.9:46597] [client 203.159.81.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aU4tdl9Ac79_ckdPN5L8qwAAAJQ"]
[Fri Dec 26 14:38:48.228316 2025] [:error] [pid 34865:tid 34882] [client 203.159.81.30:64883] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Dec 26 14:38:49.149826 2025] [:error] [pid 34865:tid 34868] [client 203.159.81.30:64883] [client 203.159.81.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aU4teai4zjVVKBdvuTSOJgAAAUE"]
[Fri Dec 26 14:38:51.399452 2025] [:error] [pid 28270:tid 28329] [client 203.159.81.34:62153] [client 203.159.81.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aU4te19Ac79_ckdPN5L85QAAAIA"]
[Fri Dec 26 14:38:52.868827 2025] [:error] [pid 34865:tid 34870] [client 203.159.81.14:28481] [client 203.159.81.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU4tfKi4zjVVKBdvuTSOXQAAAUM"]
[Fri Dec 26 14:38:53.920804 2025] [:error] [pid 34865:tid 34873] [client 203.159.81.34:46467] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Dec 26 14:38:54.398266 2025] [:error] [pid 34865:tid 34876] [client 203.159.81.34:46467] [client 203.159.81.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aU4tfqi4zjVVKBdvuTSOeAAAAUk"]
[Fri Dec 26 14:38:55.318776 2025] [:error] [pid 15063:tid 15069] [client 203.159.81.8:30169] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Dec 26 14:38:56.873074 2025] [:error] [pid 15063:tid 15085] [client 203.159.81.8:30169] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Dec 26 14:38:58.393566 2025] [:error] [pid 15063:tid 15068] [client 203.159.81.8:30169] [client 203.159.81.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aU4tguDsf_aL46Jy7z-lLQAAAQM"]
[Fri Dec 26 14:39:34.315083 2025] [:error] [pid 28355:tid 28369] [client 203.159.81.6:53607] [client 203.159.81.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aU4tprsFqKXf7ADZcTbAvgAAAMw"]
[Fri Dec 26 14:39:57.912481 2025] [:error] [pid 34865:tid 34869] [client 203.159.81.41:61865] [client 203.159.81.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aU4tvai4zjVVKBdvuTSQ9QAAAUI"]
[Fri Dec 26 14:40:15.378632 2025] [:error] [pid 28269:tid 28319] [client 203.159.81.15:33399] [client 203.159.81.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/patriotic/wp-includes/images/smilies/"] [unique_id "aU4tz53ZK8bJ-c9-kjPxegAAAFE"]
[Fri Dec 26 14:40:17.782458 2025] [:error] [pid 28355:tid 28374] [client 203.159.81.12:30263] [client 203.159.81.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/alera/"] [unique_id "aU4t0bsFqKXf7ADZcTbCzAAAANE"]
[Fri Dec 26 14:40:53.019411 2025] [:error] [pid 7160:tid 7178] [client 203.159.81.20:37295] [client 203.159.81.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/pridmag/"] [unique_id "aU4t9ew_ihNZR5L8vEUVxQAAAY8"]
[Fri Dec 26 18:20:34.924058 2025] [:error] [pid 15063:tid 15080] [client 170.106.161.78:42162] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aU5hcuDsf_aL46Jy7z_pFAAAAQ8"]
[Fri Dec 26 23:09:36.370632 2025] [:error] [pid 28268:tid 28297] [client 223.185.42.115:21469] [client 223.185.42.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.42.115, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aU6lMHc_KuO_55-uPTTSVQAAABY"]
[Fri Dec 26 23:09:36.375382 2025] [:error] [pid 28268:tid 28297] [client 223.185.42.115:21469] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Dec 27 00:20:00.457776 2025] [:error] [pid 34274:tid 34293] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 27 00:20:00.615404 2025] [:error] [pid 34274:tid 34294] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 27 00:20:02.067867 2025] [:error] [pid 34274:tid 34283] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/maint.php
[Sat Dec 27 00:20:02.186396 2025] [:error] [pid 34274:tid 34278] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Dec 27 00:20:02.307052 2025] [:error] [pid 34274:tid 34292] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Dec 27 00:20:02.428844 2025] [:error] [pid 34274:tid 34291] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Dec 27 00:20:02.548964 2025] [:error] [pid 34274:tid 34293] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Dec 27 00:20:02.699494 2025] [:error] [pid 34274:tid 34280] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sat Dec 27 00:20:02.820651 2025] [:error] [pid 34274:tid 34294] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 27 00:20:03.321066 2025] [:error] [pid 34274:tid 34287] [client 65.52.164.177:1370] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Dec 27 00:20:03.465304 2025] [:error] [pid 34274:tid 34286] [client 65.52.164.177:1370] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aU61s86fabpS0mfhiCHc1gAAAMo"]
[Sat Dec 27 00:20:05.246895 2025] [:error] [pid 34187:tid 34198] [client 65.52.164.177:6664] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aU61tav8srZGEpsIm8DZaQAAAAY"]
[Sat Dec 27 00:20:06.693662 2025] [:error] [pid 34274:tid 34282] [client 65.52.164.177:6716] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aU61ts6fabpS0mfhiCHc4wAAAMY"]
[Sat Dec 27 00:20:07.319300 2025] [:error] [pid 34187:tid 34193] [client 65.52.164.177:3963] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aU61t6v8srZGEpsIm8DZcgAAAAE"]
[Sat Dec 27 00:20:10.761087 2025] [:error] [pid 34274:tid 34286] [client 65.52.164.177:7137] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU61us6fabpS0mfhiCHc7wAAAMo"]
[Sat Dec 27 00:20:12.110324 2025] [:error] [pid 34274:tid 34288] [client 65.52.164.177:3907] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU61vM6fabpS0mfhiCHc9AAAAMw"]
[Sat Dec 27 00:20:13.286148 2025] [:error] [pid 34274:tid 34297] [client 65.52.164.177:6693] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU61vc6fabpS0mfhiCHc9wAAANU"]
[Sat Dec 27 00:20:14.305042 2025] [:error] [pid 34187:tid 34206] [client 65.52.164.177:4119] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aU61vqv8srZGEpsIm8DZdgAAAA4"]
[Sat Dec 27 00:20:16.288139 2025] [:error] [pid 34187:tid 34216] [client 65.52.164.177:1241] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aU61wKv8srZGEpsIm8DZegAAABg"]
[Sat Dec 27 00:20:17.916188 2025] [:error] [pid 34189:tid 34269] [client 65.52.164.177:2247] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aU61wQnn007DnMwSsfcAggAAAJY"]
[Sat Dec 27 00:20:19.069009 2025] [:error] [pid 34187:tid 34214] [client 65.52.164.177:6768] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aU61w6v8srZGEpsIm8DZggAAABY"]
[Sat Dec 27 00:20:21.308693 2025] [:error] [pid 34274:tid 34291] [client 65.52.164.177:4365] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aU61xc6fabpS0mfhiCHdDgAAAM8"]
[Sat Dec 27 00:20:22.517226 2025] [:error] [pid 34187:tid 34205] [client 65.52.164.177:5686] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aU61xqv8srZGEpsIm8DZiQAAAA0"]
[Sat Dec 27 00:20:24.665342 2025] [:error] [pid 34188:tid 34223] [client 65.52.164.177:4376] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aU61yA54j0mXgip5BAGJPgAAAEM"]
[Sat Dec 27 00:20:26.413835 2025] [:error] [pid 34274:tid 34297] [client 65.52.164.177:6663] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aU61ys6fabpS0mfhiCHdKwAAANU"]
[Sat Dec 27 00:20:27.841624 2025] [:error] [pid 34189:tid 34255] [client 65.52.164.177:2288] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aU61ywnn007DnMwSsfcAngAAAIg"]
[Sat Dec 27 00:20:29.750121 2025] [:error] [pid 34189:tid 34263] [client 65.52.164.177:4151] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin2.php"] [unique_id "aU61zQnn007DnMwSsfcAoQAAAJA"]
[Sat Dec 27 00:20:31.404337 2025] [:error] [pid 34274:tid 34285] [client 65.52.164.177:1472] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin2.php"] [unique_id "aU61z86fabpS0mfhiCHdNAAAAMk"]
[Sat Dec 27 00:20:33.979896 2025] [:error] [pid 34189:tid 34261] [client 65.52.164.177:4973] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin2.php"] [unique_id "aU610Qnn007DnMwSsfcApgAAAI4"]
[Sat Dec 27 00:20:35.645580 2025] [:error] [pid 34187:tid 34199] [client 65.52.164.177:7815] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin2.php"] [unique_id "aU6106v8srZGEpsIm8DZmwAAAAc"]
[Sat Dec 27 00:20:36.432914 2025] [:error] [pid 34189:tid 34267] [client 65.52.164.177:2309] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aU611Ann007DnMwSsfcAqwAAAJQ"]
[Sat Dec 27 00:20:37.071022 2025] [:error] [pid 34274:tid 34286] [client 65.52.164.177:1488] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aU611c6fabpS0mfhiCHdOgAAAMo"]
[Sat Dec 27 00:20:37.683942 2025] [:error] [pid 34189:tid 34262] [client 65.52.164.177:3821] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aU611Qnn007DnMwSsfcArgAAAI8"]
[Sat Dec 27 00:20:39.232979 2025] [:error] [pid 34188:tid 34237] [client 65.52.164.177:5145] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aU611w54j0mXgip5BAGJYQAAAFE"]
[Sat Dec 27 00:20:41.176591 2025] [:error] [pid 34274:tid 34288] [client 65.52.164.177:2318] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aU612c6fabpS0mfhiCHdUAAAAMw"]
[Sat Dec 27 00:20:45.005680 2025] [:error] [pid 34187:tid 34196] [client 65.52.164.177:4095] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aU613av8srZGEpsIm8DZogAAAAQ"]
[Sat Dec 27 00:20:46.430254 2025] [:error] [pid 34187:tid 34202] [client 65.52.164.177:5002] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aU613qv8srZGEpsIm8DZqAAAAAo"]
[Sat Dec 27 00:20:47.157781 2025] [:error] [pid 34274:tid 34294] [client 65.52.164.177:4068] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aU61386fabpS0mfhiCHdVgAAANI"]
[Sat Dec 27 00:20:48.032456 2025] [:error] [pid 34188:tid 34231] [client 65.52.164.177:5050] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aU614A54j0mXgip5BAGJawAAAEs"]
[Sat Dec 27 00:20:49.701873 2025] [:error] [pid 34187:tid 34195] [client 65.52.164.177:3417] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aU614av8srZGEpsIm8DZtgAAAAM"]
[Sat Dec 27 00:20:51.199796 2025] [:error] [pid 34189:tid 34249] [client 65.52.164.177:5208] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aU614wnn007DnMwSsfcA1gAAAII"]
[Sat Dec 27 00:20:52.978867 2025] [:error] [pid 34189:tid 34253] [client 65.52.164.177:5009] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aU615Ann007DnMwSsfcA5QAAAIY"]
[Sat Dec 27 00:20:55.320443 2025] [:error] [pid 34187:tid 34206] [client 65.52.164.177:3983] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU6156v8srZGEpsIm8DZzAAAAA4"]
[Sat Dec 27 00:20:57.132251 2025] [:error] [pid 34274:tid 34276] [client 65.52.164.177:2797] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU616c6fabpS0mfhiCHdawAAAMA"]
[Sat Dec 27 00:20:58.745072 2025] [:error] [pid 34274:tid 34296] [client 65.52.164.177:1779] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU616s6fabpS0mfhiCHddAAAANQ"]
[Sat Dec 27 00:21:00.839119 2025] [:error] [pid 34274:tid 34276] [client 65.52.164.177:5206] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aU617M6fabpS0mfhiCHdfAAAAMA"]
[Sat Dec 27 00:21:02.713533 2025] [:error] [pid 34187:tid 34207] [client 65.52.164.177:5213] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aU617qv8srZGEpsIm8DZ4gAAAA8"]
[Sat Dec 27 00:21:03.810864 2025] [:error] [pid 34187:tid 34209] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Dec 27 00:21:03.976175 2025] [:error] [pid 34187:tid 34203] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sat Dec 27 00:21:04.165862 2025] [:error] [pid 34187:tid 34204] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/ki1k.php
[Sat Dec 27 00:21:04.336204 2025] [:error] [pid 34187:tid 34195] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sat Dec 27 00:21:04.515984 2025] [:error] [pid 34187:tid 34215] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Sat Dec 27 00:21:04.680228 2025] [:error] [pid 34187:tid 34214] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Sat Dec 27 00:21:04.837898 2025] [:error] [pid 34187:tid 34216] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Dec 27 00:21:05.015933 2025] [:error] [pid 34187:tid 34206] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Dec 27 00:21:05.204915 2025] [:error] [pid 34187:tid 34198] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Sat Dec 27 00:21:05.375559 2025] [:error] [pid 34187:tid 34202] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sat Dec 27 00:21:05.535997 2025] [:error] [pid 34187:tid 34196] [client 65.52.164.177:2720] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Sat Dec 27 00:21:05.681704 2025] [:error] [pid 34187:tid 34213] [client 65.52.164.177:2720] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aU618av8srZGEpsIm8DZ9gAAABU"]
[Sat Dec 27 00:21:07.222829 2025] [:error] [pid 34187:tid 34194] [client 65.52.164.177:1745] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aU6186v8srZGEpsIm8DZ-wAAAAI"]
[Sat Dec 27 00:21:07.878608 2025] [:error] [pid 34188:tid 34227] [client 65.52.164.177:1303] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aU618w54j0mXgip5BAGJeAAAAEc"]
[Sat Dec 27 00:21:08.696044 2025] [:error] [pid 34187:tid 34204] [client 65.52.164.177:5203] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system_log.php"] [unique_id "aU619Kv8srZGEpsIm8DaAAAAAAw"]
[Sat Dec 27 00:21:11.726443 2025] [:error] [pid 34189:tid 34258] [client 65.52.164.177:1728] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/options.php"] [unique_id "aU619wnn007DnMwSsfcBEgAAAIs"]
[Sat Dec 27 00:21:13.379171 2025] [:error] [pid 34274:tid 34296] [client 65.52.164.177:2692] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/options.php"] [unique_id "aU61-c6fabpS0mfhiCHdmAAAANQ"]
[Sat Dec 27 00:21:15.150785 2025] [:error] [pid 34187:tid 34198] [client 65.52.164.177:1764] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/options.php"] [unique_id "aU61-6v8srZGEpsIm8DaEgAAAAY"]
[Sat Dec 27 00:21:17.129912 2025] [:error] [pid 34189:tid 34252] [client 65.52.164.177:4027] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/options.php"] [unique_id "aU61_Qnn007DnMwSsfcBLgAAAIU"]
[Sat Dec 27 00:21:18.371983 2025] [:error] [pid 34188:tid 34238] [client 65.52.164.177:6624] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brand.php"] [unique_id "aU61_g54j0mXgip5BAGJigAAAFI"]
[Sat Dec 27 00:21:19.999434 2025] [:error] [pid 34274:tid 34278] [client 65.52.164.177:6625] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brand.php"] [unique_id "aU61_86fabpS0mfhiCHdrAAAAMI"]
[Sat Dec 27 00:21:20.948365 2025] [:error] [pid 34187:tid 34216] [client 65.52.164.177:2749] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brand.php"] [unique_id "aU62AKv8srZGEpsIm8DaIwAAABg"]
[Sat Dec 27 00:21:22.433512 2025] [:error] [pid 34274:tid 34295] [client 65.52.164.177:5240] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brand.php"] [unique_id "aU62As6fabpS0mfhiCHdvAAAANM"]
[Sat Dec 27 00:21:23.944644 2025] [:error] [pid 34188:tid 34232] [client 65.52.164.177:4021] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aU62Aw54j0mXgip5BAGJmAAAAEw"]
[Sat Dec 27 00:21:25.784626 2025] [:error] [pid 34274:tid 34284] [client 65.52.164.177:3690] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aU62Bc6fabpS0mfhiCHdxwAAAMg"]
[Sat Dec 27 00:21:27.089360 2025] [:error] [pid 34274:tid 34297] [client 65.52.164.177:4000] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aU62B86fabpS0mfhiCHdzwAAANU"]
[Sat Dec 27 00:21:29.011373 2025] [:error] [pid 34274:tid 34281] [client 65.52.164.177:7214] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aU62Cc6fabpS0mfhiCHd0wAAAMU"]
[Sat Dec 27 00:21:32.132250 2025] [:error] [pid 34274:tid 34289] [client 65.52.164.177:6294] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pwnd.php"] [unique_id "aU62DM6fabpS0mfhiCHd3QAAAM0"]
[Sat Dec 27 00:21:33.026059 2025] [:error] [pid 34189:tid 34267] [client 65.52.164.177:2734] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pwnd.php"] [unique_id "aU62DQnn007DnMwSsfcBTwAAAJQ"]
[Sat Dec 27 00:21:35.207773 2025] [:error] [pid 34187:tid 34195] [client 65.52.164.177:1941] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pwnd.php"] [unique_id "aU62D6v8srZGEpsIm8DaUQAAAAM"]
[Sat Dec 27 00:21:36.410108 2025] [:error] [pid 34188:tid 34243] [client 65.52.164.177:6286] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pwnd.php"] [unique_id "aU62EA54j0mXgip5BAGJvwAAAFc"]
[Sat Dec 27 00:21:37.974675 2025] [:error] [pid 34189:tid 34250] [client 65.52.164.177:6275] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aU62EQnn007DnMwSsfcBXgAAAIM"]
[Sat Dec 27 00:21:39.028157 2025] [:error] [pid 34187:tid 34213] [client 65.52.164.177:3971] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aU62E6v8srZGEpsIm8DaWQAAABU"]
[Sat Dec 27 00:21:39.829688 2025] [:error] [pid 34274:tid 34299] [client 65.52.164.177:3662] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aU62E86fabpS0mfhiCHd7QAAANc"]
[Sat Dec 27 00:21:45.267856 2025] [:error] [pid 34274:tid 34283] [client 65.52.164.177:6629] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aU62Gc6fabpS0mfhiCHeAgAAAMc"]
[Sat Dec 27 00:21:45.704129 2025] [:error] [pid 34188:tid 34239] [client 65.52.164.177:3675] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714170928.php"] [unique_id "aU62GQ54j0mXgip5BAGJ3AAAAFM"]
[Sat Dec 27 00:21:46.233659 2025] [:error] [pid 34274:tid 34295] [client 65.52.164.177:2731] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714170928.php"] [unique_id "aU62Gs6fabpS0mfhiCHeDQAAANM"]
[Sat Dec 27 00:21:47.358755 2025] [:error] [pid 34188:tid 34230] [client 65.52.164.177:4023] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714170928.php"] [unique_id "aU62Gw54j0mXgip5BAGJ3gAAAEo"]
[Sat Dec 27 00:21:48.063669 2025] [:error] [pid 34187:tid 34214] [client 65.52.164.177:4028] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714170928.php"] [unique_id "aU62HKv8srZGEpsIm8DabwAAABY"]
[Sat Dec 27 00:21:50.001030 2025] [:error] [pid 34187:tid 34203] [client 65.52.164.177:1935] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714203832.php"] [unique_id "aU62Hqv8srZGEpsIm8DadQAAAAs"]
[Sat Dec 27 00:21:52.541729 2025] [:error] [pid 34188:tid 34242] [client 65.52.164.177:3672] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714203832.php"] [unique_id "aU62IA54j0mXgip5BAGJ7wAAAFY"]
[Sat Dec 27 00:21:56.301221 2025] [:error] [pid 34189:tid 34271] [client 65.52.164.177:2411] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714203832.php"] [unique_id "aU62JAnn007DnMwSsfcBmwAAAJg"]
[Sat Dec 27 00:21:57.015422 2025] [:error] [pid 34187:tid 34209] [client 65.52.164.177:2377] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin_250714203832.php"] [unique_id "aU62Jav8srZGEpsIm8DafQAAABE"]
[Sat Dec 27 00:21:57.843800 2025] [:error] [pid 34188:tid 34236] [client 65.52.164.177:1974] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links.php"] [unique_id "aU62JQ54j0mXgip5BAGKEQAAAFA"]
[Sat Dec 27 00:21:58.809215 2025] [:error] [pid 34274:tid 34296] [client 65.52.164.177:7226] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links.php"] [unique_id "aU62Js6fabpS0mfhiCHeSAAAANQ"]
[Sat Dec 27 00:21:59.780405 2025] [:error] [pid 34189:tid 34268] [client 65.52.164.177:6307] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links.php"] [unique_id "aU62Jwnn007DnMwSsfcBpgAAAJU"]
[Sat Dec 27 00:22:01.183450 2025] [:error] [pid 34274:tid 34280] [client 65.52.164.177:2729] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links.php"] [unique_id "aU62Kc6fabpS0mfhiCHeUQAAAMQ"]
[Sat Dec 27 00:22:02.582854 2025] [:error] [pid 34187:tid 34206] [client 65.52.164.177:7206] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin-post.php"] [unique_id "aU62Kqv8srZGEpsIm8DakQAAAA4"]
[Sat Dec 27 00:22:04.100645 2025] [:error] [pid 34187:tid 34209] [client 65.52.164.177:6635] [client 65.52.164.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin-post.php"] [unique_id "aU62LKv8srZGEpsIm8DakwAAABE"]
[Sat Dec 27 00:22:05.497668 2025] [:error] [pid 34187:tid 34193] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Sat Dec 27 00:22:05.646854 2025] [:error] [pid 34187:tid 34195] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sat Dec 27 00:22:05.787858 2025] [:error] [pid 34187:tid 34205] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Dec 27 00:22:05.999301 2025] [:error] [pid 34187:tid 34204] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Dec 27 00:22:06.131507 2025] [:error] [pid 34187:tid 34212] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/priv.php
[Sat Dec 27 00:22:06.274993 2025] [:error] [pid 34187:tid 34198] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/allez.php
[Sat Dec 27 00:22:06.414532 2025] [:error] [pid 34187:tid 34202] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Dec 27 00:22:06.560200 2025] [:error] [pid 34187:tid 34210] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sat Dec 27 00:22:06.708768 2025] [:error] [pid 34187:tid 34192] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Sat Dec 27 00:22:06.846528 2025] [:error] [pid 34187:tid 34206] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/class-envato-market-github.php
[Sat Dec 27 00:22:06.992272 2025] [:error] [pid 34187:tid 34196] [client 65.52.164.177:6594] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Sat Dec 27 09:07:05.034061 2025] [:error] [pid 32191:tid 32206] [client 111.172.249.49:59366] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aU8xObPNtMgrjVCHIdGnAwAAAAs"]
[Sat Dec 27 15:24:52.310046 2025] [:error] [pid 3114:tid 3128] [client 49.233.45.47:42148] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aU-JxGJGrIkLOdbPpJh56gAAAYo"]
[Sat Dec 27 17:46:03.279912 2025] [:error] [pid 32191:tid 32196] [client 170.106.11.6:57338] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aU-q27PNtMgrjVCHIdEYpwAAAAE"]
[Sat Dec 27 17:57:17.341951 2025] [:error] [pid 31933:tid 31946] [client 162.62.213.187:39480] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aU-tfcGr1WIJr39uqaq-RgAAAcs"]
[Sat Dec 27 22:04:13.936684 2025] [:error] [pid 31933:tid 31955] [client 182.43.70.143:50257] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aU_nXcGr1WIJr39uqaoB4gAAAdQ"]
[Sun Dec 28 00:55:09.499351 2025] [:error] [pid 46655:tid 46726] [client 120.89.67.62:20744] [client 120.89.67.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.89.67.62, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVAPbRJiIF9AF5FHxvB35QAAAI0"]
[Sun Dec 28 00:55:09.504598 2025] [:error] [pid 46655:tid 46726] [client 120.89.67.62:20744] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 28 02:16:24.207303 2025] [:error] [pid 46655:tid 46737] [client 43.157.82.252:41702] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVAieBJiIF9AF5FHxvCXywAAAJg"]
[Sun Dec 28 02:38:34.855964 2025] [:error] [pid 46654:tid 46703] [client 43.130.116.87:52170] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVAnqqyyuBQW4Tqizy6i5wAAAFE"]
[Sun Dec 28 02:57:24.695520 2025] [:error] [pid 46653:tid 46661] [client 45.95.214.151:50340] File does not exist: /usr/local/apache/htdocs/suspended-page/accesson.php
[Sun Dec 28 07:38:55.060930 2025] [:error] [pid 29436:tid 29453] [client 146.70.188.190:53625] [client 146.70.188.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aVBuD7chzOOtNL9VPNJUkgAAAY4"]
[Sun Dec 28 07:38:55.890834 2025] [:error] [pid 29437:tid 29473] [client 146.70.188.190:53805] [client 146.70.188.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aVBuDxhDotAbVk6pZLc26AAAAcc"]
[Sun Dec 28 14:35:45.844786 2025] [:error] [pid 29436:tid 29462] [client 172.86.90.24:57147] File does not exist: /usr/local/apache/htdocs/suspended-page/unzipper.php
[Sun Dec 28 18:44:45.920669 2025] [:error] [pid 29436:tid 29442] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sun Dec 28 18:44:46.059603 2025] [:error] [pid 29436:tid 29455] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Dec 28 18:44:46.199366 2025] [:error] [pid 29436:tid 29439] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/Cachex.php
[Sun Dec 28 18:44:46.338623 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/wpup.php
[Sun Dec 28 18:44:46.478045 2025] [:error] [pid 29436:tid 29443] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sun Dec 28 18:44:46.646402 2025] [:error] [pid 29436:tid 29452] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/wpupex.php
[Sun Dec 28 18:44:46.786859 2025] [:error] [pid 29436:tid 29453] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/halo.php
[Sun Dec 28 18:44:47.077469 2025] [:error] [pid 29436:tid 29457] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/nck.php
[Sun Dec 28 18:44:47.215433 2025] [:error] [pid 29436:tid 29460] [client 4.213.33.27:16994] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 28 18:44:47.351942 2025] [:error] [pid 29436:tid 29458] [client 4.213.33.27:16994] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVEKH7chzOOtNL9VPNLUuAAAAZM"]
[Sun Dec 28 18:44:47.681477 2025] [:error] [pid 42294:tid 42372] [client 4.213.33.27:16899] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVEKH9TE5kYcYCOzl9GuQAAAAJY"]
[Sun Dec 28 18:44:48.168826 2025] [:error] [pid 29388:tid 29419] [client 4.213.33.27:16975] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVEKINoLv2L2zI_SpdXNoQAAAVc"]
[Sun Dec 28 18:44:48.667150 2025] [:error] [pid 42293:tid 42334] [client 4.213.33.27:16912] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVEKIMvc9B-5cwN385LRZAAAAEs"]
[Sun Dec 28 18:44:49.684926 2025] [:error] [pid 42378:tid 42382] [client 4.213.33.27:16910] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVEKITgtcN-KHAjWrX8I6gAAAMI"]
[Sun Dec 28 18:44:50.850963 2025] [:error] [pid 43789:tid 43795] [client 4.213.33.27:16965] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVEKIga-tUppni4CcCYhYwAAAQQ"]
[Sun Dec 28 18:44:51.792939 2025] [:error] [pid 42378:tid 42397] [client 4.213.33.27:17013] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVEKIzgtcN-KHAjWrX8I7QAAANE"]
[Sun Dec 28 18:44:52.596844 2025] [:error] [pid 29388:tid 29408] [client 4.213.33.27:17002] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVEKJNoLv2L2zI_SpdXNogAAAUw"]
[Sun Dec 28 18:44:53.003600 2025] [:error] [pid 29436:tid 29456] [client 4.213.33.27:16919] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVEKJbchzOOtNL9VPNLUvQAAAZE"]
[Sun Dec 28 18:44:53.486508 2025] [:error] [pid 29388:tid 29416] [client 4.213.33.27:16980] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVEKJdoLv2L2zI_SpdXNpAAAAVQ"]
[Sun Dec 28 18:44:53.892518 2025] [:error] [pid 29388:tid 29400] [client 4.213.33.27:16915] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVEKJdoLv2L2zI_SpdXNpQAAAUQ"]
[Sun Dec 28 18:44:54.280290 2025] [:error] [pid 42293:tid 42337] [client 4.213.33.27:16907] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVEKJsvc9B-5cwN385LRagAAAE4"]
[Sun Dec 28 18:44:54.676793 2025] [:error] [pid 29388:tid 29399] [client 4.213.33.27:17005] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVEKJtoLv2L2zI_SpdXNpwAAAUM"]
[Sun Dec 28 18:44:55.235521 2025] [:error] [pid 42293:tid 42327] [client 4.213.33.27:16986] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVEKJ8vc9B-5cwN385LRbAAAAEQ"]
[Sun Dec 28 18:44:56.242967 2025] [:error] [pid 29388:tid 29398] [client 4.213.33.27:17009] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVEKKNoLv2L2zI_SpdXNqwAAAUI"]
[Sun Dec 28 18:44:56.944964 2025] [:error] [pid 42293:tid 42335] [client 4.213.33.27:17019] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVEKKMvc9B-5cwN385LRcAAAAEw"]
[Sun Dec 28 18:44:57.322149 2025] [:error] [pid 42292:tid 42304] [client 4.213.33.27:17011] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKKZyOrM_vaFx1osY5ygAAAAg"]
[Sun Dec 28 18:44:58.232456 2025] [:error] [pid 42294:tid 42358] [client 4.213.33.27:17015] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKKtTE5kYcYCOzl9GuQwAAAIg"]
[Sun Dec 28 18:44:58.648093 2025] [:error] [pid 29436:tid 29443] [client 4.213.33.27:16990] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKKrchzOOtNL9VPNLUwgAAAYQ"]
[Sun Dec 28 18:44:59.341932 2025] [:error] [pid 29436:tid 29453] [client 4.213.33.27:16897] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKK7chzOOtNL9VPNLUwwAAAY4"]
[Sun Dec 28 18:45:00.778700 2025] [:error] [pid 43789:tid 43803] [client 4.213.33.27:16963] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVEKLAa-tUppni4CcCYhaQAAAQw"]
[Sun Dec 28 18:45:01.830058 2025] [:error] [pid 29437:tid 29474] [client 4.213.33.27:13287] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVEKLRhDotAbVk6pZLevDAAAAcg"]
[Sun Dec 28 18:45:02.324108 2025] [:error] [pid 42292:tid 42310] [client 4.213.33.27:13250] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVEKLpyOrM_vaFx1osY52wAAAA4"]
[Sun Dec 28 18:45:03.197077 2025] [:error] [pid 43789:tid 43798] [client 4.213.33.27:16964] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVEKLwa-tUppni4CcCYhbQAAAQc"]
[Sun Dec 28 18:45:03.941275 2025] [:error] [pid 29437:tid 29477] [client 4.213.33.27:16991] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVEKLxhDotAbVk6pZLevDgAAAcs"]
[Sun Dec 28 18:45:04.535737 2025] [:error] [pid 29437:tid 29475] [client 4.213.33.27:16923] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVEKMBhDotAbVk6pZLevEgAAAck"]
[Sun Dec 28 18:45:05.533436 2025] [:error] [pid 29436:tid 29445] [client 4.213.33.27:16970] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVEKMbchzOOtNL9VPNLUywAAAYY"]
[Sun Dec 28 18:45:06.065102 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:16982] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVEKMrchzOOtNL9VPNLUzgAAAYo"]
[Sun Dec 28 18:45:06.358773 2025] [:error] [pid 42294:tid 42355] [client 4.213.33.27:16976] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVEKMtTE5kYcYCOzl9GuRgAAAIU"]
[Sun Dec 28 18:45:06.727564 2025] [:error] [pid 42293:tid 42337] [client 4.213.33.27:16958] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVEKMsvc9B-5cwN385LReAAAAE4"]
[Sun Dec 28 18:45:07.071856 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:16977] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVEKMxhDotAbVk6pZLevGgAAAcc"]
[Sun Dec 28 18:45:07.585793 2025] [:error] [pid 29436:tid 29453] [client 4.213.33.27:16996] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVEKM7chzOOtNL9VPNLU5QAAAY4"]
[Sun Dec 28 18:45:08.065918 2025] [:error] [pid 42293:tid 42324] [client 4.213.33.27:16971] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVEKNMvc9B-5cwN385LRhQAAAEE"]
[Sun Dec 28 18:45:08.480045 2025] [:error] [pid 43789:tid 43815] [client 4.213.33.27:16987] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVEKNAa-tUppni4CcCYhcgAAARg"]
[Sun Dec 28 18:45:09.316452 2025] [:error] [pid 29388:tid 29419] [client 4.213.33.27:17010] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVEKNdoLv2L2zI_SpdXNrwAAAVc"]
[Sun Dec 28 18:45:10.191689 2025] [:error] [pid 29388:tid 29408] [client 4.213.33.27:16926] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVEKNtoLv2L2zI_SpdXNsAAAAUw"]
[Sun Dec 28 18:45:10.645052 2025] [:error] [pid 43789:tid 43809] [client 4.213.33.27:17004] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVEKNga-tUppni4CcCYhcwAAARI"]
[Sun Dec 28 18:45:11.305984 2025] [:error] [pid 29437:tid 29488] [client 4.213.33.27:16937] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVEKNxhDotAbVk6pZLevNAAAAdY"]
[Sun Dec 28 18:45:11.769607 2025] [:error] [pid 29436:tid 29458] [client 4.213.33.27:16932] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVEKN7chzOOtNL9VPNLU_QAAAZM"]
[Sun Dec 28 18:45:12.571445 2025] [:error] [pid 29388:tid 29416] [client 4.213.33.27:16914] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVEKONoLv2L2zI_SpdXNsgAAAVQ"]
[Sun Dec 28 18:45:13.238922 2025] [:error] [pid 29437:tid 29489] [client 4.213.33.27:16988] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVEKORhDotAbVk6pZLevOAAAAdc"]
[Sun Dec 28 18:45:13.527607 2025] [:error] [pid 43789:tid 43796] [client 4.213.33.27:13251] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVEKOQa-tUppni4CcCYhdAAAAQU"]
[Sun Dec 28 18:45:14.045882 2025] [:error] [pid 42378:tid 42397] [client 4.213.33.27:16904] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVEKOjgtcN-KHAjWrX8I-QAAANE"]
[Sun Dec 28 18:45:14.526233 2025] [:error] [pid 43789:tid 43808] [client 4.213.33.27:16997] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVEKOga-tUppni4CcCYheQAAARE"]
[Sun Dec 28 18:45:15.566769 2025] [:error] [pid 29437:tid 29471] [client 4.213.33.27:16954] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVEKOxhDotAbVk6pZLevOgAAAcU"]
[Sun Dec 28 18:45:16.964393 2025] [:error] [pid 42378:tid 42398] [client 4.213.33.27:16945] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVEKPDgtcN-KHAjWrX8I_gAAANI"]
[Sun Dec 28 18:45:18.509668 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:16998] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVEKPhhDotAbVk6pZLevPwAAAcc"]
[Sun Dec 28 18:45:19.168001 2025] [:error] [pid 42293:tid 42329] [client 4.213.33.27:16906] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVEKP8vc9B-5cwN385LRiwAAAEY"]
[Sun Dec 28 18:45:20.103986 2025] [:error] [pid 29437:tid 29488] [client 4.213.33.27:16927] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVEKQBhDotAbVk6pZLevQwAAAdY"]
[Sun Dec 28 18:45:20.646700 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:17001] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVEKQBhDotAbVk6pZLevRAAAAc4"]
[Sun Dec 28 18:45:21.774518 2025] [:error] [pid 29388:tid 29398] [client 4.213.33.27:16951] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVEKQdoLv2L2zI_SpdXNuAAAAUI"]
[Sun Dec 28 18:45:22.099856 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:16908] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVEKQsvc9B-5cwN385LRjgAAAFU"]
[Sun Dec 28 18:45:22.736464 2025] [:error] [pid 42293:tid 42324] [client 4.213.33.27:16943] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVEKQsvc9B-5cwN385LRjwAAAEE"]
[Sun Dec 28 18:45:23.947600 2025] [:error] [pid 29388:tid 29397] [client 4.213.33.27:16973] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVEKQ9oLv2L2zI_SpdXNuwAAAUE"]
[Sun Dec 28 18:45:25.078238 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:13273] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVEKRbchzOOtNL9VPNLVBAAAAYo"]
[Sun Dec 28 18:45:25.619595 2025] [:error] [pid 29436:tid 29442] [client 4.213.33.27:16921] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVEKRbchzOOtNL9VPNLVBQAAAYM"]
[Sun Dec 28 18:45:26.030497 2025] [:error] [pid 29388:tid 29419] [client 4.213.33.27:16959] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aVEKRtoLv2L2zI_SpdXNvgAAAVc"]
[Sun Dec 28 18:45:26.476787 2025] [:error] [pid 42378:tid 42390] [client 4.213.33.27:16931] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aVEKRjgtcN-KHAjWrX8JAgAAAMo"]
[Sun Dec 28 18:45:27.509880 2025] [:error] [pid 29436:tid 29457] [client 4.213.33.27:17020] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aVEKR7chzOOtNL9VPNLVCQAAAZI"]
[Sun Dec 28 18:45:27.995883 2025] [:error] [pid 29388:tid 29416] [client 4.213.33.27:16995] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aVEKR9oLv2L2zI_SpdXNwAAAAVQ"]
[Sun Dec 28 18:45:28.356040 2025] [:error] [pid 43789:tid 43803] [client 4.213.33.27:16950] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aVEKSAa-tUppni4CcCYhgwAAAQw"]
[Sun Dec 28 18:45:28.853387 2025] [:error] [pid 29436:tid 29444] [client 4.213.33.27:16901] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aVEKSLchzOOtNL9VPNLVCwAAAYU"]
[Sun Dec 28 18:45:29.530140 2025] [:error] [pid 42378:tid 42397] [client 4.213.33.27:16979] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aVEKSTgtcN-KHAjWrX8JBwAAANE"]
[Sun Dec 28 18:45:30.457841 2025] [:error] [pid 42378:tid 42400] [client 4.213.33.27:13210] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aVEKSjgtcN-KHAjWrX8JCQAAANQ"]
[Sun Dec 28 18:45:32.216328 2025] [:error] [pid 29436:tid 29445] [client 4.213.33.27:16917] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aVEKTLchzOOtNL9VPNLVEgAAAYY"]
[Sun Dec 28 18:45:33.455167 2025] [:error] [pid 42293:tid 42342] [client 4.213.33.27:16961] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aVEKTcvc9B-5cwN385LRkwAAAFM"]
[Sun Dec 28 18:45:34.860721 2025] [:error] [pid 42294:tid 42372] [client 4.213.33.27:16925] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aVEKTtTE5kYcYCOzl9GuTQAAAJY"]
[Sun Dec 28 18:45:36.386584 2025] [:error] [pid 42378:tid 42385] [client 4.213.33.27:16916] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/af32.php"] [unique_id "aVEKUDgtcN-KHAjWrX8JCgAAAMU"]
[Sun Dec 28 18:45:37.864711 2025] [:error] [pid 42292:tid 42301] [client 4.213.33.27:13279] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aVEKUZyOrM_vaFx1osY55AAAAAU"]
[Sun Dec 28 18:45:39.321101 2025] [:error] [pid 42292:tid 42310] [client 4.213.33.27:13266] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aVEKU5yOrM_vaFx1osY55gAAAA4"]
[Sun Dec 28 18:45:39.893180 2025] [:error] [pid 29388:tid 29410] [client 4.213.33.27:16913] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aVEKU9oLv2L2zI_SpdXNxAAAAU4"]
[Sun Dec 28 18:45:40.525005 2025] [:error] [pid 29437:tid 29487] [client 4.213.33.27:13282] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rz.php"] [unique_id "aVEKVBhDotAbVk6pZLevTgAAAdU"]
[Sun Dec 28 18:45:41.523847 2025] [:error] [pid 29437:tid 29469] [client 4.213.33.27:16902] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aVEKVRhDotAbVk6pZLevUAAAAcM"]
[Sun Dec 28 18:45:42.142247 2025] [:error] [pid 29388:tid 29396] [client 4.213.33.27:13274] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aVEKVtoLv2L2zI_SpdXNyAAAAUA"]
[Sun Dec 28 18:45:43.528217 2025] [:error] [pid 29437:tid 29489] [client 4.213.33.27:16960] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aVEKVxhDotAbVk6pZLevUwAAAdc"]
[Sun Dec 28 18:45:44.899651 2025] [:error] [pid 42294:tid 42357] [client 4.213.33.27:16992] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hugo.php"] [unique_id "aVEKWNTE5kYcYCOzl9GuUAAAAIc"]
[Sun Dec 28 18:45:46.370786 2025] [:error] [pid 42294:tid 42358] [client 4.213.33.27:16962] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aVEKWtTE5kYcYCOzl9GuUgAAAIg"]
[Sun Dec 28 18:45:46.899233 2025] [:error] [pid 42292:tid 42304] [client 4.213.33.27:13280] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aVEKWpyOrM_vaFx1osY56gAAAAg"]
[Sun Dec 28 18:45:47.326200 2025] [:error] [pid 42378:tid 42401] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Sun Dec 28 18:45:47.633644 2025] [:error] [pid 42378:tid 42390] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/lzyrj.php
[Sun Dec 28 18:45:47.774495 2025] [:error] [pid 42378:tid 42404] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/laudq.php
[Sun Dec 28 18:45:47.918191 2025] [:error] [pid 42378:tid 42387] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/anjay.php
[Sun Dec 28 18:45:48.057517 2025] [:error] [pid 42378:tid 42396] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/let.php
[Sun Dec 28 18:45:48.196986 2025] [:error] [pid 42378:tid 42397] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sun Dec 28 18:45:48.338609 2025] [:error] [pid 42378:tid 42382] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Dec 28 18:45:48.477954 2025] [:error] [pid 42378:tid 42400] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/pn.php
[Sun Dec 28 18:45:48.617769 2025] [:error] [pid 42378:tid 42389] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sun Dec 28 18:45:49.950128 2025] [:error] [pid 42378:tid 42389] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/abe.php
[Sun Dec 28 18:45:50.117282 2025] [:error] [pid 42378:tid 42386] [client 4.213.33.27:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Dec 28 18:45:50.253792 2025] [:error] [pid 42378:tid 42399] [client 4.213.33.27:13188] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVEKXjgtcN-KHAjWrX8JGwAAANM"]
[Sun Dec 28 18:45:50.844867 2025] [:error] [pid 43789:tid 43793] [client 4.213.33.27:16909] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVEKXga-tUppni4CcCYhkQAAAQI"]
[Sun Dec 28 18:45:51.958391 2025] [:error] [pid 29388:tid 29407] [client 4.213.33.27:17018] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVEKX9oLv2L2zI_SpdXN1gAAAUs"]
[Sun Dec 28 18:45:52.316376 2025] [:error] [pid 29388:tid 29403] [client 4.213.33.27:16898] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVEKYNoLv2L2zI_SpdXN1wAAAUc"]
[Sun Dec 28 18:45:52.610096 2025] [:error] [pid 29388:tid 29412] [client 4.213.33.27:16935] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVEKYNoLv2L2zI_SpdXN2AAAAVA"]
[Sun Dec 28 18:45:52.914197 2025] [:error] [pid 42378:tid 42380] [client 4.213.33.27:16942] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVEKYDgtcN-KHAjWrX8JHAAAAMA"]
[Sun Dec 28 18:45:53.363435 2025] [:error] [pid 42378:tid 42398] [client 4.213.33.27:16933] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVEKYTgtcN-KHAjWrX8JHgAAANI"]
[Sun Dec 28 18:45:54.191111 2025] [:error] [pid 42378:tid 42403] [client 4.213.33.27:16968] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVEKYjgtcN-KHAjWrX8JHwAAANc"]
[Sun Dec 28 18:45:54.883671 2025] [:error] [pid 42294:tid 42360] [client 4.213.33.27:17012] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVEKYtTE5kYcYCOzl9GuWQAAAIo"]
[Sun Dec 28 18:45:55.413125 2025] [:error] [pid 42294:tid 42372] [client 4.213.33.27:16966] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVEKY9TE5kYcYCOzl9GuXgAAAJY"]
[Sun Dec 28 18:45:55.860842 2025] [:error] [pid 29437:tid 29488] [client 4.213.33.27:16967] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVEKYxhDotAbVk6pZLevXgAAAdY"]
[Sun Dec 28 18:45:56.204701 2025] [:error] [pid 29437:tid 29479] [client 4.213.33.27:16952] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVEKZBhDotAbVk6pZLevXwAAAc0"]
[Sun Dec 28 18:45:56.547124 2025] [:error] [pid 42293:tid 42335] [client 4.213.33.27:13281] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKZMvc9B-5cwN385LRmgAAAEw"]
[Sun Dec 28 18:45:56.883152 2025] [:error] [pid 42293:tid 42331] [client 4.213.33.27:16934] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKZMvc9B-5cwN385LRmwAAAEg"]
[Sun Dec 28 18:45:57.252577 2025] [:error] [pid 29436:tid 29458] [client 4.213.33.27:13293] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKZbchzOOtNL9VPNLVGQAAAZM"]
[Sun Dec 28 18:45:57.655798 2025] [:error] [pid 29437:tid 29471] [client 4.213.33.27:16900] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKZRhDotAbVk6pZLevYwAAAcU"]
[Sun Dec 28 18:45:58.070585 2025] [:error] [pid 43789:tid 43801] [client 4.213.33.27:13284] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVEKZga-tUppni4CcCYhmQAAAQo"]
[Sun Dec 28 18:45:58.464734 2025] [:error] [pid 29436:tid 29456] [client 4.213.33.27:17021] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVEKZrchzOOtNL9VPNLVGwAAAZE"]
[Sun Dec 28 18:45:58.779129 2025] [:error] [pid 43789:tid 43809] [client 4.213.33.27:16957] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVEKZga-tUppni4CcCYhmgAAARI"]
[Sun Dec 28 18:45:59.174214 2025] [:error] [pid 29437:tid 29470] [client 4.213.33.27:16930] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVEKZxhDotAbVk6pZLevZAAAAcQ"]
[Sun Dec 28 18:45:59.665343 2025] [:error] [pid 29437:tid 29483] [client 4.213.33.27:16969] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVEKZxhDotAbVk6pZLevZQAAAdE"]
[Sun Dec 28 18:46:00.137366 2025] [:error] [pid 29436:tid 29450] [client 4.213.33.27:16928] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVEKaLchzOOtNL9VPNLVHwAAAYs"]
[Sun Dec 28 18:46:00.841773 2025] [:error] [pid 29437:tid 29478] [client 4.213.33.27:16948] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVEKaBhDotAbVk6pZLevZwAAAcw"]
[Sun Dec 28 18:46:01.199446 2025] [:error] [pid 29437:tid 29472] [client 4.213.33.27:13275] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVEKaRhDotAbVk6pZLevaAAAAcY"]
[Sun Dec 28 18:46:01.727173 2025] [:error] [pid 29436:tid 29442] [client 4.213.33.27:17014] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVEKabchzOOtNL9VPNLVIQAAAYM"]
[Sun Dec 28 18:46:02.275116 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:16938] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVEKahhDotAbVk6pZLevagAAAc4"]
[Sun Dec 28 18:46:02.664316 2025] [:error] [pid 29436:tid 29443] [client 4.213.33.27:13189] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVEKarchzOOtNL9VPNLVJAAAAYQ"]
[Sun Dec 28 18:46:03.241771 2025] [:error] [pid 29436:tid 29460] [client 4.213.33.27:16978] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVEKa7chzOOtNL9VPNLVJgAAAZU"]
[Sun Dec 28 18:46:03.645712 2025] [:error] [pid 29436:tid 29451] [client 4.213.33.27:17006] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKa7chzOOtNL9VPNLVJwAAAYw"]
[Sun Dec 28 18:46:04.199844 2025] [:error] [pid 42294:tid 42364] [client 4.213.33.27:13294] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKbNTE5kYcYCOzl9GuYQAAAI4"]
[Sun Dec 28 18:46:04.680641 2025] [:error] [pid 42293:tid 42334] [client 4.213.33.27:16999] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKbMvc9B-5cwN385LRnQAAAEs"]
[Sun Dec 28 18:46:05.219128 2025] [:error] [pid 42292:tid 42319] [client 4.213.33.27:13258] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKbZyOrM_vaFx1osY58QAAABc"]
[Sun Dec 28 18:46:05.902705 2025] [:error] [pid 42378:tid 42396] [client 4.213.33.27:13204] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVEKbTgtcN-KHAjWrX8JJAAAANA"]
[Sun Dec 28 18:46:06.229261 2025] [:error] [pid 29436:tid 29439] [client 4.213.33.27:16949] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVEKbrchzOOtNL9VPNLVKQAAAYA"]
[Sun Dec 28 18:46:06.725910 2025] [:error] [pid 29437:tid 29466] [client 4.213.33.27:16922] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVEKbhhDotAbVk6pZLevdQAAAcA"]
[Sun Dec 28 18:46:07.048496 2025] [:error] [pid 29437:tid 29472] [client 4.213.33.27:13227] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVEKbxhDotAbVk6pZLevdwAAAcY"]
[Sun Dec 28 18:46:07.598960 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:13299] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVEKbxhDotAbVk6pZLeveAAAAc4"]
[Sun Dec 28 18:46:07.979815 2025] [:error] [pid 29437:tid 29484] [client 4.213.33.27:16944] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVEKbxhDotAbVk6pZLevfAAAAdI"]
[Sun Dec 28 18:46:08.437411 2025] [:error] [pid 29437:tid 29485] [client 4.213.33.27:13130] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVEKcBhDotAbVk6pZLevfQAAAdM"]
[Sun Dec 28 18:46:08.777068 2025] [:error] [pid 29388:tid 29417] [client 4.213.33.27:16940] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVEKcNoLv2L2zI_SpdXN6wAAAVU"]
[Sun Dec 28 18:46:09.163835 2025] [:error] [pid 42292:tid 42307] [client 4.213.33.27:16947] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVEKcZyOrM_vaFx1osY58wAAAAs"]
[Sun Dec 28 18:46:09.533654 2025] [:error] [pid 42293:tid 42330] [client 4.213.33.27:16924] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVEKccvc9B-5cwN385LRnwAAAEc"]
[Sun Dec 28 18:46:09.999714 2025] [:error] [pid 43789:tid 43803] [client 4.213.33.27:13278] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVEKcQa-tUppni4CcCYhnQAAAQw"]
[Sun Dec 28 18:46:10.529812 2025] [:error] [pid 29437:tid 29470] [client 4.213.33.27:13268] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVEKchhDotAbVk6pZLevgwAAAcQ"]
[Sun Dec 28 18:46:10.961882 2025] [:error] [pid 29437:tid 29472] [client 4.213.33.27:13310] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVEKchhDotAbVk6pZLevhQAAAcY"]
[Sun Dec 28 18:46:11.447526 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:16936] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVEKcxhDotAbVk6pZLeviQAAAcc"]
[Sun Dec 28 18:46:12.208299 2025] [:error] [pid 29437:tid 29486] [client 4.213.33.27:16972] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVEKdBhDotAbVk6pZLevigAAAdQ"]
[Sun Dec 28 18:46:12.592657 2025] [:error] [pid 29437:tid 29485] [client 4.213.33.27:16941] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVEKdBhDotAbVk6pZLevjQAAAdM"]
[Sun Dec 28 18:46:12.987542 2025] [:error] [pid 29437:tid 29479] [client 4.213.33.27:16956] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVEKdBhDotAbVk6pZLevjwAAAc0"]
[Sun Dec 28 18:46:13.705732 2025] [:error] [pid 42378:tid 42400] [client 4.213.33.27:13286] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVEKdTgtcN-KHAjWrX8JJwAAANQ"]
[Sun Dec 28 18:46:14.030992 2025] [:error] [pid 29437:tid 29483] [client 4.213.33.27:16953] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVEKdhhDotAbVk6pZLevkwAAAdE"]
[Sun Dec 28 18:46:14.390027 2025] [:error] [pid 29437:tid 29472] [client 4.213.33.27:13254] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVEKdhhDotAbVk6pZLevlgAAAcY"]
[Sun Dec 28 18:46:14.746691 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:17003] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVEKdhhDotAbVk6pZLevlwAAAcc"]
[Sun Dec 28 18:46:15.340680 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:13311] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVEKdxhDotAbVk6pZLevmAAAAc4"]
[Sun Dec 28 18:46:15.760895 2025] [:error] [pid 29437:tid 29486] [client 4.213.33.27:16946] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVEKdxhDotAbVk6pZLevmQAAAdQ"]
[Sun Dec 28 18:46:16.097237 2025] [:error] [pid 29437:tid 29469] [client 4.213.33.27:13199] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVEKeBhDotAbVk6pZLevmgAAAcM"]
[Sun Dec 28 18:46:16.418285 2025] [:error] [pid 29437:tid 29468] [client 4.213.33.27:13255] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVEKeBhDotAbVk6pZLevmwAAAcI"]
[Sun Dec 28 18:46:16.897688 2025] [:error] [pid 29437:tid 29471] [client 4.213.33.27:13186] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVEKeBhDotAbVk6pZLevngAAAcU"]
[Sun Dec 28 18:46:17.265277 2025] [:error] [pid 29437:tid 29466] [client 4.213.33.27:16920] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVEKeRhDotAbVk6pZLevoQAAAcA"]
[Sun Dec 28 18:46:17.691192 2025] [:error] [pid 29437:tid 29479] [client 4.213.33.27:13269] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVEKeRhDotAbVk6pZLevogAAAc0"]
[Sun Dec 28 18:46:18.172078 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:13289] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVEKehhDotAbVk6pZLevpQAAAc4"]
[Sun Dec 28 18:46:18.787584 2025] [:error] [pid 29437:tid 29478] [client 4.213.33.27:13285] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVEKehhDotAbVk6pZLevqgAAAcw"]
[Sun Dec 28 18:46:19.418126 2025] [:error] [pid 29437:tid 29466] [client 4.213.33.27:13184] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVEKexhDotAbVk6pZLevrgAAAcA"]
[Sun Dec 28 18:46:19.888077 2025] [:error] [pid 29437:tid 29483] [client 4.213.33.27:13296] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVEKexhDotAbVk6pZLevsQAAAdE"]
[Sun Dec 28 18:46:20.313703 2025] [:error] [pid 29437:tid 29481] [client 4.213.33.27:16903] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVEKfBhDotAbVk6pZLevswAAAc8"]
[Sun Dec 28 18:46:21.028848 2025] [:error] [pid 42293:tid 42339] [client 4.213.33.27:13272] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVEKfcvc9B-5cwN385LRoAAAAFA"]
[Sun Dec 28 18:46:21.949232 2025] [:error] [pid 29437:tid 29468] [client 4.213.33.27:13264] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVEKfRhDotAbVk6pZLevtQAAAcI"]
[Sun Dec 28 18:46:23.261689 2025] [:error] [pid 29388:tid 29400] [client 4.213.33.27:13276] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVEKf9oLv2L2zI_SpdXN8QAAAUQ"]
[Sun Dec 28 18:46:24.001157 2025] [:error] [pid 42292:tid 42305] [client 4.213.33.27:13120] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVEKgJyOrM_vaFx1osY59QAAAAk"]
[Sun Dec 28 18:46:24.290893 2025] [:error] [pid 42292:tid 42300] [client 4.213.33.27:13261] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVEKgJyOrM_vaFx1osY59gAAAAQ"]
[Sun Dec 28 18:46:24.706897 2025] [:error] [pid 29436:tid 29447] [client 4.213.33.27:13210] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVEKgLchzOOtNL9VPNLVOAAAAYg"]
[Sun Dec 28 18:46:25.187247 2025] [:error] [pid 42378:tid 42395] [client 4.213.33.27:16989] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVEKgTgtcN-KHAjWrX8JLwAAAM8"]
[Sun Dec 28 18:46:25.607234 2025] [:error] [pid 42292:tid 42304] [client 4.213.33.27:13257] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVEKgZyOrM_vaFx1osY5-QAAAAg"]
[Sun Dec 28 18:46:26.179349 2025] [:error] [pid 43789:tid 43791] [client 4.213.33.27:17017] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVEKgga-tUppni4CcCYhogAAAQA"]
[Sun Dec 28 18:46:26.646407 2025] [:error] [pid 42294:tid 42371] [client 4.213.33.27:13198] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVEKgtTE5kYcYCOzl9GubAAAAJU"]
[Sun Dec 28 18:46:27.068195 2025] [:error] [pid 29388:tid 29413] [client 4.213.33.27:16939] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVEKg9oLv2L2zI_SpdXN8wAAAVE"]
[Sun Dec 28 18:46:27.424405 2025] [:error] [pid 42292:tid 42303] [client 4.213.33.27:16905] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVEKg5yOrM_vaFx1osY5-gAAAAc"]
[Sun Dec 28 18:46:27.744044 2025] [:error] [pid 29388:tid 29411] [client 4.213.33.27:13205] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVEKg9oLv2L2zI_SpdXN9QAAAU8"]
[Sun Dec 28 18:46:28.066310 2025] [:error] [pid 43789:tid 43810] [client 4.213.33.27:16911] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVEKhAa-tUppni4CcCYhpAAAARM"]
[Sun Dec 28 18:46:28.682740 2025] [:error] [pid 29436:tid 29455] [client 4.213.33.27:13237] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVEKhLchzOOtNL9VPNLVPwAAAZA"]
[Sun Dec 28 18:46:29.254646 2025] [:error] [pid 42293:tid 42337] [client 4.213.33.27:13206] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEKhcvc9B-5cwN385LRpQAAAE4"]
[Sun Dec 28 18:46:29.987814 2025] [:error] [pid 42294:tid 42356] [client 4.213.33.27:13247] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEKhdTE5kYcYCOzl9GucgAAAIY"]
[Sun Dec 28 18:46:30.947469 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:13265] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEKhrchzOOtNL9VPNLVQQAAAYo"]
[Sun Dec 28 18:46:31.720826 2025] [:error] [pid 43789:tid 43807] [client 4.213.33.27:17022] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEKhwa-tUppni4CcCYhpgAAARA"]
[Sun Dec 28 18:46:32.096034 2025] [:error] [pid 43789:tid 43801] [client 4.213.33.27:13298] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVEKiAa-tUppni4CcCYhpwAAAQo"]
[Sun Dec 28 18:46:32.541133 2025] [:error] [pid 42293:tid 42330] [client 4.213.33.27:13283] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVEKiMvc9B-5cwN385LRrQAAAEc"]
[Sun Dec 28 18:46:32.890039 2025] [:error] [pid 42378:tid 42404] [client 4.213.33.27:13162] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVEKiDgtcN-KHAjWrX8JMQAAANg"]
[Sun Dec 28 18:46:33.238041 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:13208] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVEKiRhDotAbVk6pZLevvgAAAc4"]
[Sun Dec 28 18:46:33.604371 2025] [:error] [pid 42378:tid 42390] [client 4.213.33.27:16983] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aVEKiTgtcN-KHAjWrX8JMgAAAMo"]
[Sun Dec 28 18:46:34.235890 2025] [:error] [pid 42294:tid 42365] [client 4.213.33.27:13295] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aVEKitTE5kYcYCOzl9GudAAAAI8"]
[Sun Dec 28 18:46:34.531122 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:17000] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aVEKihhDotAbVk6pZLevwgAAAcc"]
[Sun Dec 28 18:46:34.831180 2025] [:error] [pid 29436:tid 29454] [client 4.213.33.27:13263] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-info.php"] [unique_id "aVEKirchzOOtNL9VPNLVQwAAAY8"]
[Sun Dec 28 18:46:35.156778 2025] [:error] [pid 29388:tid 29419] [client 4.213.33.27:13271] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aVEKi9oLv2L2zI_SpdXN-gAAAVc"]
[Sun Dec 28 18:46:35.833507 2025] [:error] [pid 29388:tid 29399] [client 4.213.33.27:13303] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aVEKi9oLv2L2zI_SpdXN_QAAAUM"]
[Sun Dec 28 18:46:36.398052 2025] [:error] [pid 43789:tid 43809] [client 4.213.33.27:13235] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aVEKjAa-tUppni4CcCYhqAAAARI"]
[Sun Dec 28 18:46:37.070124 2025] [:error] [pid 43789:tid 43802] [client 4.213.33.27:13259] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/warm.PhP7"] [unique_id "aVEKjQa-tUppni4CcCYhqQAAAQs"]
[Sun Dec 28 18:46:37.604785 2025] [:error] [pid 42292:tid 42318] [client 4.213.33.27:13300] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aVEKjZyOrM_vaFx1osY5_QAAABY"]
[Sun Dec 28 18:46:38.130836 2025] [:error] [pid 43789:tid 43796] [client 4.213.33.27:16955] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aVEKjga-tUppni4CcCYhqwAAAQU"]
[Sun Dec 28 18:46:38.688639 2025] [:error] [pid 42378:tid 42400] [client 4.213.33.27:16896] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aVEKjjgtcN-KHAjWrX8JNQAAANQ"]
[Sun Dec 28 18:46:38.980892 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:13223] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aVEKjhhDotAbVk6pZLevzgAAAcc"]
[Sun Dec 28 18:46:39.336869 2025] [:error] [pid 43789:tid 43811] [client 4.213.33.27:13309] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aVEKjwa-tUppni4CcCYhrAAAARQ"]
[Sun Dec 28 18:46:39.701475 2025] [:error] [pid 42293:tid 42342] [client 4.213.33.27:13240] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aVEKj8vc9B-5cwN385LRrwAAAFM"]
[Sun Dec 28 18:46:40.120522 2025] [:error] [pid 42294:tid 42353] [client 4.213.33.27:13248] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aVEKkNTE5kYcYCOzl9GueAAAAIM"]
[Sun Dec 28 18:46:41.049109 2025] [:error] [pid 42292:tid 42298] [client 4.213.33.27:17023] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rss.php"] [unique_id "aVEKkZyOrM_vaFx1osY6AAAAAAI"]
[Sun Dec 28 18:46:41.867196 2025] [:error] [pid 42378:tid 42380] [client 4.213.33.27:17016] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aVEKkTgtcN-KHAjWrX8JOQAAAMA"]
[Sun Dec 28 18:46:42.665431 2025] [:error] [pid 42294:tid 42350] [client 4.213.33.27:13253] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aVEKktTE5kYcYCOzl9GuegAAAIA"]
[Sun Dec 28 18:46:43.238358 2025] [:error] [pid 42378:tid 42385] [client 4.213.33.27:13222] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aVEKkzgtcN-KHAjWrX8JOwAAAMU"]
[Sun Dec 28 18:46:43.779169 2025] [:error] [pid 29437:tid 29475] [client 4.213.33.27:13207] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pekok.php"] [unique_id "aVEKkxhDotAbVk6pZLev0QAAAck"]
[Sun Dec 28 18:46:44.402178 2025] [:error] [pid 42294:tid 42374] [client 4.213.33.27:13233] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aVEKlNTE5kYcYCOzl9GufAAAAJg"]
[Sun Dec 28 18:46:45.188796 2025] [:error] [pid 29436:tid 29444] [client 4.213.33.27:13219] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aVEKlbchzOOtNL9VPNLVRgAAAYU"]
[Sun Dec 28 18:46:45.495008 2025] [:error] [pid 29437:tid 29484] [client 4.213.33.27:13154] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aVEKlRhDotAbVk6pZLev0gAAAdI"]
[Sun Dec 28 18:46:45.989678 2025] [:error] [pid 43789:tid 43805] [client 4.213.33.27:16929] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aVEKlQa-tUppni4CcCYhswAAAQ4"]
[Sun Dec 28 18:46:46.631768 2025] [:error] [pid 43789:tid 43810] [client 4.213.33.27:13185] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aVEKlga-tUppni4CcCYhtAAAARM"]
[Sun Dec 28 18:46:47.296486 2025] [:error] [pid 29388:tid 29396] [client 4.213.33.27:13126] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aVEKl9oLv2L2zI_SpdXOAAAAAUA"]
[Sun Dec 28 18:46:47.666400 2025] [:error] [pid 42378:tid 42402] [client 4.213.33.27:13196] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aVEKlzgtcN-KHAjWrX8JPwAAANY"]
[Sun Dec 28 18:46:48.737437 2025] [:error] [pid 42292:tid 42307] [client 4.213.33.27:13246] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-aa.php"] [unique_id "aVEKmJyOrM_vaFx1osY6MgAAAAs"]
[Sun Dec 28 18:46:49.825689 2025] [:error] [pid 42293:tid 42332] [client 4.213.33.27:13277] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart.php"] [unique_id "aVEKmcvc9B-5cwN385LRtAAAAEk"]
[Sun Dec 28 18:46:50.278759 2025] [:error] [pid 29388:tid 29404] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/cart.php
[Sun Dec 28 18:46:50.418618 2025] [:error] [pid 29388:tid 29397] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/compare.php
[Sun Dec 28 18:46:50.581810 2025] [:error] [pid 29388:tid 29408] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Dec 28 18:46:50.722385 2025] [:error] [pid 29388:tid 29399] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Sun Dec 28 18:46:50.862577 2025] [:error] [pid 29388:tid 29402] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Dec 28 18:46:51.001391 2025] [:error] [pid 29388:tid 29406] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/atom.php
[Sun Dec 28 18:46:51.141220 2025] [:error] [pid 29388:tid 29418] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/case.php
[Sun Dec 28 18:46:51.281240 2025] [:error] [pid 29388:tid 29400] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/docs.php
[Sun Dec 28 18:46:51.422136 2025] [:error] [pid 29388:tid 29413] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/ios.php
[Sun Dec 28 18:46:51.585338 2025] [:error] [pid 29388:tid 29411] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Dec 28 18:46:51.756758 2025] [:error] [pid 29388:tid 29410] [client 4.213.33.27:13226] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Dec 28 18:46:51.893935 2025] [:error] [pid 29388:tid 29396] [client 4.213.33.27:13226] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVEKm9oLv2L2zI_SpdXOEgAAAUA"]
[Sun Dec 28 18:46:52.534051 2025] [:error] [pid 43789:tid 43809] [client 4.213.33.27:13288] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVEKnAa-tUppni4CcCYhuAAAARI"]
[Sun Dec 28 18:46:52.881019 2025] [:error] [pid 29388:tid 29405] [client 4.213.33.27:13270] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVEKnNoLv2L2zI_SpdXOEwAAAUk"]
[Sun Dec 28 18:46:53.476669 2025] [:error] [pid 42294:tid 42365] [client 4.213.33.27:13305] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVEKndTE5kYcYCOzl9GuhAAAAI8"]
[Sun Dec 28 18:46:53.969167 2025] [:error] [pid 29388:tid 29420] [client 4.213.33.27:16978] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVEKndoLv2L2zI_SpdXOFwAAAVg"]
[Sun Dec 28 18:46:54.298920 2025] [:error] [pid 29388:tid 29398] [client 4.213.33.27:16985] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVEKntoLv2L2zI_SpdXOGAAAAUI"]
[Sun Dec 28 18:46:54.708983 2025] [:error] [pid 42294:tid 42352] [client 4.213.33.27:13121] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVEKntTE5kYcYCOzl9GuhwAAAII"]
[Sun Dec 28 18:46:55.105185 2025] [:error] [pid 29437:tid 29466] [client 4.213.33.27:13231] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVEKnxhDotAbVk6pZLev5wAAAcA"]
[Sun Dec 28 18:46:55.746512 2025] [:error] [pid 42292:tid 42309] [client 4.213.33.27:16993] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVEKn5yOrM_vaFx1osY6XwAAAA0"]
[Sun Dec 28 18:46:56.185983 2025] [:error] [pid 29436:tid 29461] [client 4.213.33.27:16981] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVEKoLchzOOtNL9VPNLVSwAAAZY"]
[Sun Dec 28 18:46:56.496347 2025] [:error] [pid 42294:tid 42350] [client 4.213.33.27:13252] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVEKoNTE5kYcYCOzl9GuiwAAAIA"]
[Sun Dec 28 18:46:56.775038 2025] [:error] [pid 42294:tid 42374] [client 4.213.33.27:13229] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVEKoNTE5kYcYCOzl9GujAAAAJg"]
[Sun Dec 28 18:46:57.067906 2025] [:error] [pid 29388:tid 29408] [client 4.213.33.27:13307] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVEKodoLv2L2zI_SpdXOGwAAAUw"]
[Sun Dec 28 18:46:57.604158 2025] [:error] [pid 42294:tid 42370] [client 4.213.33.27:13211] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVEKodTE5kYcYCOzl9GukgAAAJQ"]
[Sun Dec 28 18:46:58.154604 2025] [:error] [pid 29436:tid 29439] [client 4.213.33.27:13245] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVEKorchzOOtNL9VPNLVTAAAAYA"]
[Sun Dec 28 18:46:58.688698 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:13297] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVEKorchzOOtNL9VPNLVTgAAAYo"]
[Sun Dec 28 18:46:59.052591 2025] [:error] [pid 29436:tid 29443] [client 4.213.33.27:13212] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVEKo7chzOOtNL9VPNLVUAAAAYQ"]
[Sun Dec 28 18:46:59.583415 2025] [:error] [pid 42378:tid 42382] [client 4.213.33.27:13260] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVEKozgtcN-KHAjWrX8JRAAAAMI"]
[Sun Dec 28 18:46:59.925247 2025] [:error] [pid 42294:tid 42356] [client 4.213.33.27:13308] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVEKo9TE5kYcYCOzl9GulgAAAIY"]
[Sun Dec 28 18:47:00.275045 2025] [:error] [pid 42378:tid 42389] [client 4.213.33.27:13181] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVEKpDgtcN-KHAjWrX8JRQAAAMk"]
[Sun Dec 28 18:47:01.056760 2025] [:error] [pid 42294:tid 42352] [client 4.213.33.27:13168] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVEKpdTE5kYcYCOzl9GumQAAAII"]
[Sun Dec 28 18:47:01.639279 2025] [:error] [pid 42378:tid 42385] [client 4.213.33.27:13249] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVEKpTgtcN-KHAjWrX8JSgAAAMU"]
[Sun Dec 28 18:47:02.343011 2025] [:error] [pid 42378:tid 42383] [client 4.213.33.27:13236] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVEKpjgtcN-KHAjWrX8JUAAAAMM"]
[Sun Dec 28 18:47:02.658283 2025] [:error] [pid 42378:tid 42384] [client 4.213.33.27:13217] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVEKpjgtcN-KHAjWrX8JVAAAAMQ"]
[Sun Dec 28 18:47:03.172064 2025] [:error] [pid 42378:tid 42385] [client 4.213.33.27:13060] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVEKpzgtcN-KHAjWrX8JWgAAAMU"]
[Sun Dec 28 18:47:03.560690 2025] [:error] [pid 42294:tid 42374] [client 4.213.33.27:13155] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVEKp9TE5kYcYCOzl9GunQAAAJg"]
[Sun Dec 28 18:47:03.903352 2025] [:error] [pid 29437:tid 29472] [client 4.213.33.27:13290] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVEKpxhDotAbVk6pZLev6wAAAcY"]
[Sun Dec 28 18:47:04.223981 2025] [:error] [pid 29436:tid 29457] [client 4.213.33.27:13156] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVEKqLchzOOtNL9VPNLVVAAAAZI"]
[Sun Dec 28 18:47:04.568197 2025] [:error] [pid 42294:tid 42354] [client 4.213.33.27:13216] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKqNTE5kYcYCOzl9GuoAAAAIQ"]
[Sun Dec 28 18:47:04.881695 2025] [:error] [pid 42294:tid 42361] [client 4.213.33.27:13224] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKqNTE5kYcYCOzl9GuoQAAAIs"]
[Sun Dec 28 18:47:05.246042 2025] [:error] [pid 42294:tid 42363] [client 4.213.33.27:13195] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKqdTE5kYcYCOzl9GuogAAAI0"]
[Sun Dec 28 18:47:05.570120 2025] [:error] [pid 29437:tid 29487] [client 4.213.33.27:13187] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVEKqRhDotAbVk6pZLev7QAAAdU"]
[Sun Dec 28 18:47:05.924987 2025] [:error] [pid 29436:tid 29447] [client 4.213.33.27:13200] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVEKqbchzOOtNL9VPNLVVwAAAYg"]
[Sun Dec 28 18:47:06.264422 2025] [:error] [pid 29437:tid 29478] [client 4.213.33.27:13241] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVEKqhhDotAbVk6pZLev7wAAAcw"]
[Sun Dec 28 18:47:06.567409 2025] [:error] [pid 42292:tid 42303] [client 4.213.33.27:13140] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVEKqpyOrM_vaFx1osY6bAAAAAc"]
[Sun Dec 28 18:47:06.844793 2025] [:error] [pid 29388:tid 29402] [client 4.213.33.27:13302] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVEKqtoLv2L2zI_SpdXOIwAAAUY"]
[Sun Dec 28 18:47:07.214833 2025] [:error] [pid 29436:tid 29440] [client 4.213.33.27:13082] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKq7chzOOtNL9VPNLVWQAAAYE"]
[Sun Dec 28 18:47:07.537161 2025] [:error] [pid 29437:tid 29484] [client 4.213.33.27:13179] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKqxhDotAbVk6pZLev8wAAAdI"]
[Sun Dec 28 18:47:07.949847 2025] [:error] [pid 29436:tid 29452] [client 4.213.33.27:13071] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKq7chzOOtNL9VPNLVXAAAAY0"]
[Sun Dec 28 18:47:08.324414 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:13214] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVEKrLchzOOtNL9VPNLVYAAAAYo"]
[Sun Dec 28 18:47:08.718874 2025] [:error] [pid 29437:tid 29482] [client 4.213.33.27:13193] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVEKrBhDotAbVk6pZLev9gAAAdA"]
[Sun Dec 28 18:47:09.023628 2025] [:error] [pid 29436:tid 29451] [client 4.213.33.27:13137] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVEKrbchzOOtNL9VPNLVYwAAAYw"]
[Sun Dec 28 18:47:10.066487 2025] [:error] [pid 29437:tid 29470] [client 4.213.33.27:13178] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVEKrhhDotAbVk6pZLev-AAAAcQ"]
[Sun Dec 28 18:47:10.713801 2025] [:error] [pid 29436:tid 29440] [client 4.213.33.27:13158] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVEKrrchzOOtNL9VPNLVZgAAAYE"]
[Sun Dec 28 18:47:11.048587 2025] [:error] [pid 42292:tid 42320] [client 4.213.33.27:13132] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVEKr5yOrM_vaFx1osY6cAAAABg"]
[Sun Dec 28 18:47:11.619257 2025] [:error] [pid 29388:tid 29419] [client 4.213.33.27:13141] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVEKr9oLv2L2zI_SpdXOJgAAAVc"]
[Sun Dec 28 18:47:12.541785 2025] [:error] [pid 42293:tid 42331] [client 4.213.33.27:13225] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVEKsMvc9B-5cwN385LRtwAAAEg"]
[Sun Dec 28 18:47:13.196294 2025] [:error] [pid 42292:tid 42309] [client 4.213.33.27:13146] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVEKsZyOrM_vaFx1osY6cgAAAA0"]
[Sun Dec 28 18:47:13.734622 2025] [:error] [pid 43789:tid 43807] [client 4.213.33.27:13291] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVEKsQa-tUppni4CcCYhwQAAARA"]
[Sun Dec 28 18:47:14.022883 2025] [:error] [pid 42292:tid 42301] [client 4.213.33.27:13201] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVEKspyOrM_vaFx1osY6cwAAAAU"]
[Sun Dec 28 18:47:14.635751 2025] [:error] [pid 29436:tid 29453] [client 4.213.33.27:16984] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVEKsrchzOOtNL9VPNLVaQAAAY4"]
[Sun Dec 28 18:47:15.607869 2025] [:error] [pid 29436:tid 29457] [client 4.213.33.27:13192] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVEKs7chzOOtNL9VPNLVcQAAAZI"]
[Sun Dec 28 18:47:16.239602 2025] [:error] [pid 43789:tid 43792] [client 4.213.33.27:13138] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aVEKtAa-tUppni4CcCYhxQAAAQE"]
[Sun Dec 28 18:47:17.175657 2025] [:error] [pid 29436:tid 29445] [client 4.213.33.27:13306] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aVEKtbchzOOtNL9VPNLVdgAAAYY"]
[Sun Dec 28 18:47:17.514226 2025] [:error] [pid 42292:tid 42319] [client 4.213.33.27:13262] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aVEKtZyOrM_vaFx1osY6dgAAABc"]
[Sun Dec 28 18:47:17.850533 2025] [:error] [pid 42292:tid 42299] [client 4.213.33.27:13066] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aVEKtZyOrM_vaFx1osY6dwAAAAM"]
[Sun Dec 28 18:47:18.549526 2025] [:error] [pid 29436:tid 29454] [client 4.213.33.27:13218] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aVEKtrchzOOtNL9VPNLVegAAAY8"]
[Sun Dec 28 18:47:19.172423 2025] [:error] [pid 29388:tid 29402] [client 4.213.33.27:13202] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aVEKt9oLv2L2zI_SpdXONAAAAUY"]
[Sun Dec 28 18:47:19.528467 2025] [:error] [pid 42292:tid 42314] [client 4.213.33.27:17007] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aVEKt5yOrM_vaFx1osY6eAAAABI"]
[Sun Dec 28 18:47:19.941609 2025] [:error] [pid 42294:tid 42365] [client 4.213.33.27:13065] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aVEKt9TE5kYcYCOzl9GurAAAAI8"]
[Sun Dec 28 18:47:20.718332 2025] [:error] [pid 42293:tid 42343] [client 4.213.33.27:13194] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVEKuMvc9B-5cwN385LRvwAAAFQ"]
[Sun Dec 28 18:47:21.678259 2025] [:error] [pid 42293:tid 42326] [client 4.213.33.27:17008] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVEKucvc9B-5cwN385LRwgAAAEM"]
[Sun Dec 28 18:47:23.037528 2025] [:error] [pid 29388:tid 29401] [client 4.213.33.27:13221] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVEKu9oLv2L2zI_SpdXOPQAAAUU"]
[Sun Dec 28 18:47:23.781216 2025] [:error] [pid 42293:tid 42336] [client 4.213.33.27:13197] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVEKu8vc9B-5cwN385LR0QAAAE0"]
[Sun Dec 28 18:47:24.876046 2025] [:error] [pid 42292:tid 42312] [client 4.213.33.27:13152] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aVEKvJyOrM_vaFx1osY6fQAAABA"]
[Sun Dec 28 18:47:26.840294 2025] [:error] [pid 42292:tid 42308] [client 4.213.33.27:13220] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aVEKvpyOrM_vaFx1osY6ggAAAAw"]
[Sun Dec 28 18:47:28.180702 2025] [:error] [pid 43789:tid 43814] [client 4.213.33.27:16918] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aVEKwAa-tUppni4CcCYh1wAAARc"]
[Sun Dec 28 18:47:29.528939 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:13175] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aVEKwcvc9B-5cwN385LR3wAAAFU"]
[Sun Dec 28 18:47:31.206387 2025] [:error] [pid 29437:tid 29470] [client 4.213.33.27:13215] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVEKwxhDotAbVk6pZLewCAAAAcQ"]
[Sun Dec 28 18:47:31.948224 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:13164] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVEKwxhDotAbVk6pZLewCwAAAc4"]
[Sun Dec 28 18:47:32.676034 2025] [:error] [pid 42293:tid 42345] [client 4.213.33.27:13133] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVEKxMvc9B-5cwN385LR6gAAAFY"]
[Sun Dec 28 18:47:33.597335 2025] [:error] [pid 42293:tid 42325] [client 4.213.33.27:13190] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVEKxcvc9B-5cwN385LR7AAAAEI"]
[Sun Dec 28 18:47:34.748755 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:13191] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVEKxsvc9B-5cwN385LR8wAAAFU"]
[Sun Dec 28 18:47:36.731746 2025] [:error] [pid 43789:tid 43794] [client 4.213.33.27:13084] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVEKyAa-tUppni4CcCYh8QAAAQM"]
[Sun Dec 28 18:47:37.403344 2025] [:error] [pid 43789:tid 43795] [client 4.213.33.27:13244] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVEKyQa-tUppni4CcCYh8wAAAQQ"]
[Sun Dec 28 18:47:38.086078 2025] [:error] [pid 29437:tid 29476] [client 4.213.33.27:13170] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVEKyhhDotAbVk6pZLewIgAAAco"]
[Sun Dec 28 18:47:38.596398 2025] [:error] [pid 29388:tid 29412] [client 4.213.33.27:13127] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aVEKytoLv2L2zI_SpdXOVAAAAVA"]
[Sun Dec 28 18:47:39.022222 2025] [:error] [pid 43789:tid 43805] [client 4.213.33.27:13165] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aVEKywa-tUppni4CcCYh9gAAAQ4"]
[Sun Dec 28 18:47:39.483016 2025] [:error] [pid 42294:tid 42368] [client 4.213.33.27:16950] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aVEKy9TE5kYcYCOzl9Gu1AAAAJI"]
[Sun Dec 28 18:47:39.861953 2025] [:error] [pid 42294:tid 42373] [client 4.213.33.27:13292] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/go.php"] [unique_id "aVEKy9TE5kYcYCOzl9Gu1QAAAJc"]
[Sun Dec 28 18:47:40.230069 2025] [:error] [pid 29436:tid 29448] [client 4.213.33.27:16974] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVEKzLchzOOtNL9VPNLVlQAAAYk"]
[Sun Dec 28 18:47:41.020134 2025] [:error] [pid 42294:tid 42360] [client 4.213.33.27:13142] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVEKzdTE5kYcYCOzl9Gu2QAAAIo"]
[Sun Dec 28 18:47:41.600814 2025] [:error] [pid 42293:tid 42335] [client 4.213.33.27:13124] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVEKzcvc9B-5cwN385LR_wAAAEw"]
[Sun Dec 28 18:47:42.244267 2025] [:error] [pid 42378:tid 42388] [client 4.213.33.27:13145] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVEKzjgtcN-KHAjWrX8JvgAAAMg"]
[Sun Dec 28 18:47:42.889695 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:13267] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aVEKzhhDotAbVk6pZLewLQAAAc4"]
[Sun Dec 28 18:47:43.187998 2025] [:error] [pid 29388:tid 29397] [client 4.213.33.27:13203] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aVEKz9oLv2L2zI_SpdXOVwAAAUE"]
[Sun Dec 28 18:47:43.752124 2025] [:error] [pid 42294:tid 42372] [client 4.213.33.27:13163] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aVEKz9TE5kYcYCOzl9Gu4AAAAJY"]
[Sun Dec 28 18:47:44.450901 2025] [:error] [pid 42294:tid 42371] [client 4.213.33.27:13148] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11.php"] [unique_id "aVEK0NTE5kYcYCOzl9Gu4QAAAJU"]
[Sun Dec 28 18:47:45.363946 2025] [:error] [pid 29436:tid 29439] [client 4.213.33.27:13034] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aVEK0bchzOOtNL9VPNLVpAAAAYA"]
[Sun Dec 28 18:47:45.742535 2025] [:error] [pid 29388:tid 29401] [client 4.213.33.27:13091] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aVEK0doLv2L2zI_SpdXOWAAAAUU"]
[Sun Dec 28 18:47:46.233800 2025] [:error] [pid 42293:tid 42330] [client 4.213.33.27:13238] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aVEK0svc9B-5cwN385LSCQAAAEc"]
[Sun Dec 28 18:47:46.716643 2025] [:error] [pid 29388:tid 29403] [client 4.213.33.27:13176] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conflg.php"] [unique_id "aVEK0toLv2L2zI_SpdXOXgAAAUc"]
[Sun Dec 28 18:47:46.992642 2025] [:error] [pid 29388:tid 29408] [client 4.213.33.27:13228] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVEK0toLv2L2zI_SpdXOYAAAAUw"]
[Sun Dec 28 18:47:47.607828 2025] [:error] [pid 29388:tid 29418] [client 4.213.33.27:13166] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVEK09oLv2L2zI_SpdXOZAAAAVY"]
[Sun Dec 28 18:47:49.228657 2025] [:error] [pid 42292:tid 42308] [client 4.213.33.27:13075] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVEK1ZyOrM_vaFx1osY6lQAAAAw"]
[Sun Dec 28 18:47:49.651220 2025] [:error] [pid 29388:tid 29417] [client 4.213.33.27:13087] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVEK1doLv2L2zI_SpdXOagAAAVU"]
[Sun Dec 28 18:47:50.207295 2025] [:error] [pid 42292:tid 42296] [client 4.213.33.27:13230] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVEK1pyOrM_vaFx1osY6mQAAAAA"]
[Sun Dec 28 18:47:50.515884 2025] [:error] [pid 42292:tid 42301] [client 4.213.33.27:13171] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVEK1pyOrM_vaFx1osY6mwAAAAU"]
[Sun Dec 28 18:47:50.937211 2025] [:error] [pid 29437:tid 29479] [client 4.213.33.27:13243] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVEK1hhDotAbVk6pZLewOgAAAc0"]
[Sun Dec 28 18:47:51.315098 2025] [:error] [pid 29436:tid 29456] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/asas.php
[Sun Dec 28 18:47:51.466323 2025] [:error] [pid 29436:tid 29460] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Dec 28 18:47:51.611157 2025] [:error] [pid 29436:tid 29458] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Dec 28 18:47:51.766463 2025] [:error] [pid 29436:tid 29459] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Sun Dec 28 18:47:51.909002 2025] [:error] [pid 29436:tid 29462] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/zxl.php
[Sun Dec 28 18:47:52.052030 2025] [:error] [pid 29436:tid 29452] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Sun Dec 28 18:47:52.195354 2025] [:error] [pid 29436:tid 29453] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Sun Dec 28 18:47:52.451952 2025] [:error] [pid 29436:tid 29444] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Sun Dec 28 18:47:52.609138 2025] [:error] [pid 29436:tid 29460] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Sun Dec 28 18:47:52.749448 2025] [:error] [pid 29436:tid 29448] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Dec 28 18:47:52.888786 2025] [:error] [pid 29436:tid 29445] [client 4.213.33.27:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Sun Dec 28 18:47:53.025297 2025] [:error] [pid 29436:tid 29458] [client 4.213.33.27:13134] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVEK2bchzOOtNL9VPNLVwQAAAZM"]
[Sun Dec 28 18:47:53.350166 2025] [:error] [pid 29436:tid 29452] [client 4.213.33.27:13096] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVEK2bchzOOtNL9VPNLVxQAAAY0"]
[Sun Dec 28 18:47:53.690538 2025] [:error] [pid 29388:tid 29404] [client 4.213.33.27:13173] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVEK2doLv2L2zI_SpdXOcAAAAUg"]
[Sun Dec 28 18:47:54.116440 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:13234] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVEK2rchzOOtNL9VPNLVyAAAAYo"]
[Sun Dec 28 18:47:54.695849 2025] [:error] [pid 29437:tid 29477] [client 4.213.33.27:13128] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVEK2hhDotAbVk6pZLewRgAAAcs"]
[Sun Dec 28 18:47:55.038614 2025] [:error] [pid 29388:tid 29406] [client 4.213.33.27:13232] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVEK29oLv2L2zI_SpdXOdwAAAUo"]
[Sun Dec 28 18:47:55.456501 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:13180] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVEK28vc9B-5cwN385LSHwAAAFU"]
[Sun Dec 28 18:47:55.766484 2025] [:error] [pid 29436:tid 29448] [client 4.213.33.27:13169] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVEK27chzOOtNL9VPNLV0QAAAYk"]
[Sun Dec 28 18:47:56.089133 2025] [:error] [pid 29437:tid 29470] [client 4.213.33.27:13135] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVEK3BhDotAbVk6pZLewSAAAAcQ"]
[Sun Dec 28 18:47:56.527781 2025] [:error] [pid 42378:tid 42391] [client 4.213.33.27:13144] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVEK3DgtcN-KHAjWrX8J0QAAAMs"]
[Sun Dec 28 18:47:57.204308 2025] [:error] [pid 43789:tid 43803] [client 4.213.33.27:13099] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVEK3Qa-tUppni4CcCYiCQAAAQw"]
[Sun Dec 28 18:47:57.548587 2025] [:error] [pid 42292:tid 42312] [client 4.213.33.27:13123] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVEK3ZyOrM_vaFx1osY6ogAAABA"]
[Sun Dec 28 18:47:57.969237 2025] [:error] [pid 42294:tid 42369] [client 4.213.33.27:13016] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVEK3dTE5kYcYCOzl9Gu6AAAAJM"]
[Sun Dec 28 18:47:58.624135 2025] [:error] [pid 42292:tid 42297] [client 4.213.33.27:13012] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVEK3pyOrM_vaFx1osY6owAAAAE"]
[Sun Dec 28 18:47:59.099145 2025] [:error] [pid 29437:tid 29473] [client 4.213.33.27:13078] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVEK3xhDotAbVk6pZLewTwAAAcc"]
[Sun Dec 28 18:48:00.002822 2025] [:error] [pid 42292:tid 42311] [client 4.213.33.27:13113] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVEK4JyOrM_vaFx1osY6pwAAAA8"]
[Sun Dec 28 18:48:00.285831 2025] [:error] [pid 42293:tid 42335] [client 4.213.33.27:13104] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVEK4Mvc9B-5cwN385LSLgAAAEw"]
[Sun Dec 28 18:48:00.850785 2025] [:error] [pid 42292:tid 42308] [client 4.213.33.27:13111] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVEK4JyOrM_vaFx1osY6qAAAAAw"]
[Sun Dec 28 18:48:02.154962 2025] [:error] [pid 42293:tid 42346] [client 4.213.33.27:13088] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVEK4svc9B-5cwN385LSLwAAAFc"]
[Sun Dec 28 18:48:03.524655 2025] [:error] [pid 29436:tid 29459] [client 4.213.33.27:12996] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVEK47chzOOtNL9VPNLV3gAAAZQ"]
[Sun Dec 28 18:48:04.187641 2025] [:error] [pid 29388:tid 29414] [client 4.213.33.27:13086] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVEK5NoLv2L2zI_SpdXOfgAAAVI"]
[Sun Dec 28 18:48:04.752192 2025] [:error] [pid 29388:tid 29416] [client 4.213.33.27:13239] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVEK5NoLv2L2zI_SpdXOfwAAAVQ"]
[Sun Dec 28 18:48:05.151248 2025] [:error] [pid 42292:tid 42320] [client 4.213.33.27:13061] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVEK5ZyOrM_vaFx1osY6qwAAABg"]
[Sun Dec 28 18:48:05.525661 2025] [:error] [pid 29436:tid 29447] [client 4.213.33.27:13106] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVEK5bchzOOtNL9VPNLV4gAAAYg"]
[Sun Dec 28 18:48:05.935864 2025] [:error] [pid 43789:tid 43807] [client 4.213.33.27:13149] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVEK5Qa-tUppni4CcCYiFAAAARA"]
[Sun Dec 28 18:48:06.234867 2025] [:error] [pid 42292:tid 42301] [client 4.213.33.27:13157] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVEK5pyOrM_vaFx1osY6rgAAAAU"]
[Sun Dec 28 18:48:06.538202 2025] [:error] [pid 42293:tid 42329] [client 4.213.33.27:13139] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVEK5svc9B-5cwN385LSOAAAAEY"]
[Sun Dec 28 18:48:06.899957 2025] [:error] [pid 42292:tid 42315] [client 4.213.33.27:13151] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVEK5pyOrM_vaFx1osY6rwAAABM"]
[Sun Dec 28 18:48:07.284960 2025] [:error] [pid 42292:tid 42309] [client 4.213.33.27:13182] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVEK55yOrM_vaFx1osY6sgAAAA0"]
[Sun Dec 28 18:48:07.571454 2025] [:error] [pid 42292:tid 42314] [client 4.213.33.27:13050] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVEK55yOrM_vaFx1osY6swAAABI"]
[Sun Dec 28 18:48:07.966349 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:13304] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVEK58vc9B-5cwN385LSOwAAAFU"]
[Sun Dec 28 18:48:08.775256 2025] [:error] [pid 42293:tid 42335] [client 4.213.33.27:13019] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVEK6Mvc9B-5cwN385LSPQAAAEw"]
[Sun Dec 28 18:48:11.281826 2025] [:error] [pid 29436:tid 29449] [client 4.213.33.27:13301] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVEK67chzOOtNL9VPNLV7gAAAYo"]
[Sun Dec 28 18:48:11.575459 2025] [:error] [pid 42292:tid 42320] [client 4.213.33.27:13090] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVEK65yOrM_vaFx1osY6vwAAABg"]
[Sun Dec 28 18:48:11.922854 2025] [:error] [pid 43789:tid 43796] [client 4.213.33.27:13083] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVEK6wa-tUppni4CcCYiHQAAAQU"]
[Sun Dec 28 18:48:12.601267 2025] [:error] [pid 43789:tid 43810] [client 4.213.33.27:13098] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVEK7Aa-tUppni4CcCYiJAAAARM"]
[Sun Dec 28 18:48:13.483008 2025] [:error] [pid 42293:tid 42335] [client 4.213.33.27:13085] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVEK7cvc9B-5cwN385LSTgAAAEw"]
[Sun Dec 28 18:48:14.296328 2025] [:error] [pid 42292:tid 42319] [client 4.213.33.27:13136] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVEK7pyOrM_vaFx1osY6xgAAABc"]
[Sun Dec 28 18:48:14.699631 2025] [:error] [pid 43789:tid 43797] [client 4.213.33.27:13077] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVEK7ga-tUppni4CcCYiLQAAAQY"]
[Sun Dec 28 18:48:15.386016 2025] [:error] [pid 42293:tid 42337] [client 4.213.33.27:12992] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVEK78vc9B-5cwN385LSUwAAAE4"]
[Sun Dec 28 18:48:15.685906 2025] [:error] [pid 29388:tid 29403] [client 4.213.33.27:13074] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVEK79oLv2L2zI_SpdXOiAAAAUc"]
[Sun Dec 28 18:48:16.069265 2025] [:error] [pid 29437:tid 29484] [client 4.213.33.27:13067] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVEK8BhDotAbVk6pZLewYQAAAdI"]
[Sun Dec 28 18:48:16.676714 2025] [:error] [pid 29388:tid 29414] [client 4.213.33.27:13108] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVEK8NoLv2L2zI_SpdXOjQAAAVI"]
[Sun Dec 28 18:48:17.073454 2025] [:error] [pid 29388:tid 29400] [client 4.213.33.27:13102] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVEK8doLv2L2zI_SpdXOjwAAAUQ"]
[Sun Dec 28 18:48:17.691841 2025] [:error] [pid 42292:tid 42296] [client 4.213.33.27:13010] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVEK8ZyOrM_vaFx1osY61QAAAAA"]
[Sun Dec 28 18:48:18.046132 2025] [:error] [pid 42378:tid 42383] [client 4.213.33.27:13147] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVEK8jgtcN-KHAjWrX8J9gAAAMM"]
[Sun Dec 28 18:48:19.123451 2025] [:error] [pid 29437:tid 29470] [client 4.213.33.27:13057] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVEK8xhDotAbVk6pZLewZQAAAcQ"]
[Sun Dec 28 18:48:20.003593 2025] [:error] [pid 42378:tid 42401] [client 4.213.33.27:13129] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVEK9DgtcN-KHAjWrX8J-AAAANU"]
[Sun Dec 28 18:48:20.559286 2025] [:error] [pid 42378:tid 42387] [client 4.213.33.27:13143] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVEK9DgtcN-KHAjWrX8J-gAAAMc"]
[Sun Dec 28 18:48:21.142440 2025] [:error] [pid 29437:tid 29469] [client 4.213.33.27:13131] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVEK9RhDotAbVk6pZLewbwAAAcM"]
[Sun Dec 28 18:48:21.537659 2025] [:error] [pid 29388:tid 29407] [client 4.213.33.27:13001] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVEK9doLv2L2zI_SpdXOlwAAAUs"]
[Sun Dec 28 18:48:22.068357 2025] [:error] [pid 42294:tid 42360] [client 4.213.33.27:13070] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVEK9tTE5kYcYCOzl9GvBQAAAIo"]
[Sun Dec 28 18:48:22.556663 2025] [:error] [pid 29388:tid 29417] [client 4.213.33.27:13018] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVEK9toLv2L2zI_SpdXOmQAAAVU"]
[Sun Dec 28 18:48:23.363660 2025] [:error] [pid 29436:tid 29443] [client 4.213.33.27:13107] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVEK97chzOOtNL9VPNLWCwAAAYQ"]
[Sun Dec 28 18:48:23.988951 2025] [:error] [pid 43789:tid 43812] [client 4.213.33.27:13064] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVEK9wa-tUppni4CcCYiPQAAARU"]
[Sun Dec 28 18:48:24.310584 2025] [:error] [pid 42294:tid 42352] [client 4.213.33.27:13242] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVEK-NTE5kYcYCOzl9GvFQAAAII"]
[Sun Dec 28 18:48:24.641288 2025] [:error] [pid 42292:tid 42302] [client 4.213.33.27:13115] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aVEK-JyOrM_vaFx1osY63AAAAAY"]
[Sun Dec 28 18:48:25.211128 2025] [:error] [pid 43789:tid 43814] [client 4.213.33.27:13088] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aVEK-Qa-tUppni4CcCYiQwAAARc"]
[Sun Dec 28 18:48:25.612685 2025] [:error] [pid 42378:tid 42388] [client 4.213.33.27:13079] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aVEK-TgtcN-KHAjWrX8KAgAAAMg"]
[Sun Dec 28 18:48:25.899365 2025] [:error] [pid 42294:tid 42369] [client 4.213.33.27:12928] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aVEK-dTE5kYcYCOzl9GvGgAAAJM"]
[Sun Dec 28 18:48:26.378167 2025] [:error] [pid 42378:tid 42381] [client 4.213.33.27:13063] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aVEK-jgtcN-KHAjWrX8KBgAAAME"]
[Sun Dec 28 18:48:27.481518 2025] [:error] [pid 29437:tid 29488] [client 4.213.33.27:13160] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aVEK-xhDotAbVk6pZLewiQAAAdY"]
[Sun Dec 28 18:48:28.527717 2025] [:error] [pid 42378:tid 42404] [client 4.213.33.27:13029] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aVEK_DgtcN-KHAjWrX8KCAAAANg"]
[Sun Dec 28 18:48:29.765871 2025] [:error] [pid 42294:tid 42370] [client 4.213.33.27:13059] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aVEK_dTE5kYcYCOzl9GvJAAAAJQ"]
[Sun Dec 28 18:48:31.092466 2025] [:error] [pid 43789:tid 43813] [client 4.213.33.27:13159] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aVEK_wa-tUppni4CcCYiTAAAARY"]
[Sun Dec 28 18:48:32.117639 2025] [:error] [pid 43789:tid 43797] [client 4.213.33.27:13026] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aVELAAa-tUppni4CcCYiTwAAAQY"]
[Sun Dec 28 18:48:33.385253 2025] [:error] [pid 29436:tid 29447] [client 4.213.33.27:13093] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aVELAbchzOOtNL9VPNLWHgAAAYg"]
[Sun Dec 28 18:48:33.894696 2025] [:error] [pid 42293:tid 42331] [client 4.213.33.27:13081] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aVELAcvc9B-5cwN385LSfAAAAEg"]
[Sun Dec 28 18:48:34.280656 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:13031] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVELAsvc9B-5cwN385LSfgAAAFU"]
[Sun Dec 28 18:48:34.791718 2025] [:error] [pid 42292:tid 42312] [client 4.213.33.27:13166] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVELApyOrM_vaFx1osY68QAAABA"]
[Sun Dec 28 18:48:35.337235 2025] [:error] [pid 42378:tid 42380] [client 4.213.33.27:13049] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVELAzgtcN-KHAjWrX8KFAAAAMA"]
[Sun Dec 28 18:48:35.668708 2025] [:error] [pid 42294:tid 42372] [client 4.213.33.27:13258] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVELA9TE5kYcYCOzl9GvLQAAAJY"]
[Sun Dec 28 18:48:35.952594 2025] [:error] [pid 29436:tid 29450] [client 4.213.33.27:12994] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aVELA7chzOOtNL9VPNLWIQAAAYs"]
[Sun Dec 28 18:48:36.829172 2025] [:error] [pid 29436:tid 29444] [client 4.213.33.27:13080] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aVELBLchzOOtNL9VPNLWIwAAAYU"]
[Sun Dec 28 18:48:37.514331 2025] [:error] [pid 29436:tid 29448] [client 4.213.33.27:12972] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aVELBbchzOOtNL9VPNLWJQAAAYk"]
[Sun Dec 28 18:48:37.901129 2025] [:error] [pid 42292:tid 42320] [client 4.213.33.27:13058] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/406.php"] [unique_id "aVELBZyOrM_vaFx1osY69gAAABg"]
[Sun Dec 28 18:48:38.703878 2025] [:error] [pid 29388:tid 29413] [client 4.213.33.27:13122] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aVELBtoLv2L2zI_SpdXOrQAAAVE"]
[Sun Dec 28 18:48:39.333038 2025] [:error] [pid 29388:tid 29403] [client 4.213.33.27:13174] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aVELB9oLv2L2zI_SpdXOrgAAAUc"]
[Sun Dec 28 18:48:40.119763 2025] [:error] [pid 42293:tid 42342] [client 4.213.33.27:13112] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aVELCMvc9B-5cwN385LShAAAAFM"]
[Sun Dec 28 18:48:41.551307 2025] [:error] [pid 43789:tid 43804] [client 4.213.33.27:13007] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mariju.php"] [unique_id "aVELCQa-tUppni4CcCYiWwAAAQ0"]
[Sun Dec 28 18:48:42.209874 2025] [:error] [pid 29436:tid 29461] [client 4.213.33.27:13037] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVELCrchzOOtNL9VPNLWKAAAAZY"]
[Sun Dec 28 18:48:43.156313 2025] [:error] [pid 29436:tid 29455] [client 4.213.33.27:13116] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVELC7chzOOtNL9VPNLWLAAAAZA"]
[Sun Dec 28 18:48:43.957612 2025] [:error] [pid 29388:tid 29404] [client 4.213.33.27:13002] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVELC9oLv2L2zI_SpdXOrwAAAUg"]
[Sun Dec 28 18:48:44.465152 2025] [:error] [pid 42378:tid 42390] [client 4.213.33.27:13038] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVELDDgtcN-KHAjWrX8KGgAAAMo"]
[Sun Dec 28 18:48:44.979455 2025] [:error] [pid 42292:tid 42319] [client 4.213.33.27:13041] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aVELDJyOrM_vaFx1osY6-gAAABc"]
[Sun Dec 28 18:48:45.333765 2025] [:error] [pid 42378:tid 42387] [client 4.213.33.27:13040] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aVELDTgtcN-KHAjWrX8KHgAAAMc"]
[Sun Dec 28 18:48:45.613954 2025] [:error] [pid 42293:tid 42334] [client 4.213.33.27:13177] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aVELDcvc9B-5cwN385LShwAAAEs"]
[Sun Dec 28 18:48:45.902206 2025] [:error] [pid 42293:tid 42337] [client 4.213.33.27:13069] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aVELDcvc9B-5cwN385LSiQAAAE4"]
[Sun Dec 28 18:48:46.477722 2025] [:error] [pid 43789:tid 43795] [client 4.213.33.27:13153] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aVELDga-tUppni4CcCYiZwAAAQQ"]
[Sun Dec 28 18:48:46.969893 2025] [:error] [pid 42292:tid 42299] [client 4.213.33.27:13045] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aVELDpyOrM_vaFx1osY6_AAAAAM"]
[Sun Dec 28 18:48:47.406703 2025] [:error] [pid 42292:tid 42317] [client 4.213.33.27:13209] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aVELD5yOrM_vaFx1osY6_gAAABU"]
[Sun Dec 28 18:48:48.179919 2025] [:error] [pid 43789:tid 43791] [client 4.213.33.27:13172] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aVELEAa-tUppni4CcCYibQAAAQA"]
[Sun Dec 28 18:48:49.336071 2025] [:error] [pid 29437:tid 29478] [client 4.213.33.27:13097] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVELERhDotAbVk6pZLewnAAAAcw"]
[Sun Dec 28 18:48:50.760829 2025] [:error] [pid 29436:tid 29440] [client 4.213.33.27:12938] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVELErchzOOtNL9VPNLWMwAAAYE"]
[Sun Dec 28 18:48:51.887768 2025] [:error] [pid 42293:tid 42344] [client 4.213.33.27:13167] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVELE8vc9B-5cwN385LSjgAAAFU"]
[Sun Dec 28 18:48:53.805465 2025] [:error] [pid 29436:tid 29452] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Dec 28 18:48:54.924334 2025] [:error] [pid 29436:tid 29451] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/des.php
[Sun Dec 28 18:48:55.068109 2025] [:error] [pid 29436:tid 29444] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Sun Dec 28 18:48:55.223153 2025] [:error] [pid 29436:tid 29439] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sun Dec 28 18:48:55.364902 2025] [:error] [pid 29436:tid 29441] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Dec 28 18:48:55.506993 2025] [:error] [pid 29436:tid 29448] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Sun Dec 28 18:48:55.657853 2025] [:error] [pid 29436:tid 29440] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Dec 28 18:48:55.821137 2025] [:error] [pid 29436:tid 29454] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc.php
[Sun Dec 28 18:48:55.992719 2025] [:error] [pid 29436:tid 29460] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Sun Dec 28 18:48:56.133831 2025] [:error] [pid 29436:tid 29445] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/mlex.php
[Sun Dec 28 18:48:57.333665 2025] [:error] [pid 29436:tid 29455] [client 4.213.33.27:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Sun Dec 28 18:48:57.497916 2025] [:error] [pid 29436:tid 29447] [client 4.213.33.27:13125] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVELGbchzOOtNL9VPNLWTAAAAYg"]
[Sun Dec 28 18:48:59.180013 2025] [:error] [pid 42292:tid 42300] [client 4.213.33.27:13092] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVELG5yOrM_vaFx1osY7EAAAAAQ"]
[Sun Dec 28 18:49:00.640967 2025] [:error] [pid 42294:tid 42366] [client 4.213.33.27:13000] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVELHNTE5kYcYCOzl9GvOAAAAJA"]
[Sun Dec 28 18:49:01.731728 2025] [:error] [pid 29388:tid 29414] [client 4.213.33.27:13119] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVELHdoLv2L2zI_SpdXOwAAAAVI"]
[Sun Dec 28 18:49:02.328444 2025] [:error] [pid 29388:tid 29412] [client 4.213.33.27:13006] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVELHtoLv2L2zI_SpdXOwwAAAVA"]
[Sun Dec 28 18:49:02.704149 2025] [:error] [pid 29437:tid 29480] [client 4.213.33.27:12995] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVELHhhDotAbVk6pZLewpAAAAc4"]
[Sun Dec 28 18:49:03.247455 2025] [:error] [pid 42293:tid 42334] [client 4.213.33.27:13183] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVELH8vc9B-5cwN385LSlgAAAEs"]
[Sun Dec 28 18:49:03.907648 2025] [:error] [pid 43789:tid 43805] [client 4.213.33.27:13110] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVELHwa-tUppni4CcCYifAAAAQ4"]
[Sun Dec 28 18:49:04.499915 2025] [:error] [pid 42293:tid 42330] [client 4.213.33.27:13056] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVELIMvc9B-5cwN385LSlwAAAEc"]
[Sun Dec 28 18:49:04.809327 2025] [:error] [pid 42293:tid 42323] [client 4.213.33.27:13105] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVELIMvc9B-5cwN385LSmAAAAEA"]
[Sun Dec 28 18:49:05.214597 2025] [:error] [pid 29437:tid 29482] [client 4.213.33.27:13068] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVELIRhDotAbVk6pZLewqgAAAdA"]
[Sun Dec 28 18:49:05.762125 2025] [:error] [pid 42292:tid 42318] [client 4.213.33.27:13161] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVELIZyOrM_vaFx1osY7GQAAABY"]
[Sun Dec 28 18:49:06.272937 2025] [:error] [pid 42293:tid 42329] [client 4.213.33.27:13073] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVELIsvc9B-5cwN385LSmgAAAEY"]
[Sun Dec 28 18:49:06.799310 2025] [:error] [pid 42293:tid 42340] [client 4.213.33.27:13118] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVELIsvc9B-5cwN385LSnAAAAFE"]
[Sun Dec 28 18:49:07.411811 2025] [:error] [pid 29436:tid 29460] [client 4.213.33.27:13181] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVELI7chzOOtNL9VPNLWYwAAAZU"]
[Sun Dec 28 18:49:07.722242 2025] [:error] [pid 29388:tid 29399] [client 4.213.33.27:13004] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVELI9oLv2L2zI_SpdXOyQAAAUM"]
[Sun Dec 28 18:49:08.032675 2025] [:error] [pid 42292:tid 42312] [client 4.213.33.27:13100] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVELJJyOrM_vaFx1osY7GgAAABA"]
[Sun Dec 28 18:49:08.389166 2025] [:error] [pid 42292:tid 42301] [client 4.213.33.27:13054] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVELJJyOrM_vaFx1osY7GwAAAAU"]
[Sun Dec 28 18:49:08.668641 2025] [:error] [pid 29388:tid 29414] [client 4.213.33.27:12937] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVELJNoLv2L2zI_SpdXOywAAAVI"]
[Sun Dec 28 18:49:09.204599 2025] [:error] [pid 42293:tid 42332] [client 4.213.33.27:12998] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVELJcvc9B-5cwN385LSowAAAEk"]
[Sun Dec 28 18:49:09.479830 2025] [:error] [pid 29436:tid 29444] [client 4.213.33.27:13042] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVELJbchzOOtNL9VPNLWZQAAAYU"]
[Sun Dec 28 18:49:09.994126 2025] [:error] [pid 29437:tid 29469] [client 4.213.33.27:13015] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVELJRhDotAbVk6pZLewrAAAAcM"]
[Sun Dec 28 18:49:10.312215 2025] [:error] [pid 43789:tid 43795] [client 4.213.33.27:12965] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVELJga-tUppni4CcCYifQAAAQQ"]
[Sun Dec 28 18:49:10.713050 2025] [:error] [pid 29436:tid 29455] [client 4.213.33.27:13020] [client 4.213.33.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVELJrchzOOtNL9VPNLWZwAAAZA"]
[Sun Dec 28 21:54:10.377851 2025] [:error] [pid 29388:tid 29398] [client 124.156.225.181:60698] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVE2gtoLv2L2zI_SpdUBKgAAAUI"]
[Sun Dec 28 23:32:04.146458 2025] [:error] [pid 42294:tid 42370] [client 34.139.44.113:64746] [client 34.139.44.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.44.113, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVFNdNTE5kYcYCOzl9HmrwAAAJQ"]
[Sun Dec 28 23:32:04.150035 2025] [:error] [pid 42294:tid 42370] [client 34.139.44.113:64746] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 28 23:32:07.937971 2025] [:error] [pid 42294:tid 42353] [client 34.139.44.113:64746] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aVFNd9TE5kYcYCOzl9HmuwAAAIM"]
[Sun Dec 28 23:32:08.567857 2025] [:error] [pid 42293:tid 42332] [client 34.139.44.113:61932] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aVFNeMvc9B-5cwN385IZogAAAEk"]
[Sun Dec 28 23:32:09.106499 2025] [:error] [pid 42378:tid 42386] [client 34.139.44.113:57436] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aVFNeTgtcN-KHAjWrX9EvAAAAMY"]
[Sun Dec 28 23:32:09.644770 2025] [:error] [pid 43789:tid 43799] [client 34.139.44.113:61017] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aVFNeQa-tUppni4CcCZgaQAAAQg"]
[Sun Dec 28 23:32:10.126395 2025] [:error] [pid 42294:tid 42366] [client 34.139.44.113:55414] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aVFNetTE5kYcYCOzl9HmvQAAAJA"]
[Sun Dec 28 23:32:10.760339 2025] [:error] [pid 29436:tid 29442] [client 34.139.44.113:60559] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aVFNerchzOOtNL9VPNIwHgAAAYM"]
[Sun Dec 28 23:32:11.318037 2025] [:error] [pid 29436:tid 29461] [client 34.139.44.113:52891] [client 34.139.44.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aVFNe7chzOOtNL9VPNIwHwAAAZY"]
[Sun Dec 28 23:45:12.231091 2025] [:error] [pid 29436:tid 29454] [client 182.42.111.213:47572] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVFQiLchzOOtNL9VPNIyRQAAAY8"]
[Mon Dec 29 05:58:17.163000 2025] [:error] [pid 11451:tid 11465] [client 182.42.105.144:41653] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVGn-ZDUmxySx0Vynm-UNAAAAAo"]
[Mon Dec 29 12:52:38.255479 2025] [:error] [pid 24343:tid 24365] [client 129.226.93.214:42890] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVIJFsvqvAa0rISAVIQvWwAAAhE"]
[Mon Dec 29 13:02:20.285837 2025] [:error] [pid 11453:tid 11509] [client 43.166.247.82:36846] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVILXLy-FXnKT7-6pt6qRwAAAIA"]
[Mon Dec 29 23:09:32.090649 2025] [:error] [pid 24343:tid 24361] [client 144.24.1.18:56804] [client 144.24.1.18] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVKZrMvqvAa0rISAVIR4HwAAAg0"]
[Mon Dec 29 23:09:32.698961 2025] [:error] [pid 24343:tid 24366] [client 144.24.1.18:56804] [client 144.24.1.18] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVKZrMvqvAa0rISAVIR4IAAAAhI"]
[Mon Dec 29 23:45:49.425963 2025] [:error] [pid 24343:tid 24369] [client 159.203.73.141:41724] [client 159.203.73.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aVKiLcvqvAa0rISAVIR7tAAAAhU"]
[Tue Dec 30 08:06:19.009752 2025] [:error] [pid 55721:tid 55735] [client 138.197.102.217:43134] [client 138.197.102.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aVMXez7Pjf1FlL091oXFPAAAAAQ"]
[Tue Dec 30 11:04:15.070639 2025] [:error] [pid 28954:tid 28962] [client 43.153.49.151:38836] [client 43.153.49.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVNBL6RZgqk7uuu8M0y_6wAAAAY"]
[Tue Dec 30 11:12:11.841931 2025] [:error] [pid 28826:tid 28917] [client 52.102.18.37:40324] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Dec 30 11:12:20.794599 2025] [:error] [pid 28826:tid 28908] [client 208.56.43.174:17848] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Dec 30 11:12:21.084303 2025] [:error] [pid 38777:tid 38785] [client 34.237.216.14:35088] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Dec 30 11:12:25.522472 2025] [:error] [pid 28825:tid 28887] [client 72.145.76.104:17473] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Dec 30 11:12:28.259981 2025] [:error] [pid 28825:tid 28885] [client 185.225.106.195:41701] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Dec 30 11:12:55.597531 2025] [:error] [pid 38777:tid 38784] [client 38.205.0.229:59966] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Dec 30 13:06:43.378985 2025] [:error] [pid 28824:tid 28856] [client 182.44.10.67:54758] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVNd438FhtgLvBhuCR0BfQAAAIs"]
[Tue Dec 30 13:14:14.821218 2025] [:error] [pid 38777:tid 38797] [client 103.77.107.57:51681] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aVNfpmLn9GPxJXPhnHawrgAAAFE"]
[Tue Dec 30 15:28:39.066805 2025] [:error] [pid 28825:tid 28882] [client 194.26.192.112:54068] [client 194.26.192.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.26.192.112, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVN_Jz6dbc1G2hX-KfQqEwAAAMM"]
[Tue Dec 30 15:28:39.070390 2025] [:error] [pid 28825:tid 28882] [client 194.26.192.112:54068] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 30 15:38:38.719375 2025] [:error] [pid 28824:tid 28864] [client 103.65.236.149:52695] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aVOBfn8FhtgLvBhuCR0cngAAAJM"]
[Tue Dec 30 15:38:40.350803 2025] [:error] [pid 47553:tid 47558] [client 103.65.236.149:52760] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aVOBgLvhy9HerwSnwIS9qgAAAYM"]
[Tue Dec 30 18:34:02.175239 2025] [:error] [pid 47441:tid 47464] [client 43.157.179.227:57272] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVOqmi6d2esGSN6Ne3M31wAAAVQ"]
[Tue Dec 30 20:54:19.331955 2025] [:error] [pid 28954:tid 28973] [client 103.77.106.57:54733] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aVPLe6RZgqk7uuu8M0w-LwAAABE"]
[Tue Dec 30 20:54:21.224920 2025] [:error] [pid 47553:tid 47579] [client 103.77.106.57:55253] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/postnews.php"] [unique_id "aVPLfbvhy9HerwSnwIQQ3AAAAZg"]
[Tue Dec 30 20:54:22.507709 2025] [:error] [pid 47553:tid 47568] [client 103.77.106.57:55679] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLfrvhy9HerwSnwIQQ6AAAAY0"]
[Tue Dec 30 21:59:32.108356 2025] [:error] [pid 47553:tid 47572] [client 104.223.56.245:58170] [client 104.223.56.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.223.56.245, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aVPaxLvhy9HerwSnwIQfQAAAAZE"]
[Tue Dec 30 21:59:32.112786 2025] [:error] [pid 47553:tid 47572] [client 104.223.56.245:58170] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Dec 31 01:36:01.351311 2025] [:error] [pid 50266:tid 50282] [client 43.153.27.244:39296] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVQNgfw6SPY9puCUnH9_fAAAAE4"]
[Wed Dec 31 01:41:45.279425 2025] [:error] [pid 1651:tid 1706] [client 182.44.10.67:48714] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVQO2XAnYt-Xi20L7fD5jwAAAU8"]
[Wed Dec 31 02:22:15.085566 2025] [:error] [pid 49981:tid 49998] [client 177.82.64.232:64345] [client 177.82.64.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.82.64.232, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVQYV5CCXHPw9uuzhEx4EQAAAI0"]
[Wed Dec 31 02:22:15.090562 2025] [:error] [pid 49981:tid 49998] [client 177.82.64.232:64345] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 31 03:26:30.006777 2025] [:error] [pid 1651:tid 1698] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php, referer: https://www.google.co.uk/
[Wed Dec 31 03:26:30.146506 2025] [:error] [pid 1651:tid 1700] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.bing.com/
[Wed Dec 31 03:26:30.286787 2025] [:error] [pid 1651:tid 1711] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:30.429842 2025] [:error] [pid 1651:tid 1715] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.fr/
[Wed Dec 31 03:26:30.570910 2025] [:error] [pid 1651:tid 1707] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.co.uk/
[Wed Dec 31 03:26:30.711484 2025] [:error] [pid 1651:tid 1706] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.bing.com/
[Wed Dec 31 03:26:30.852527 2025] [:error] [pid 1651:tid 1703] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:31.133234 2025] [:error] [pid 1651:tid 1712] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.com/
[Wed Dec 31 03:26:31.273591 2025] [:error] [pid 1651:tid 1693] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:31.417471 2025] [:error] [pid 1651:tid 1714] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:31.557847 2025] [:error] [pid 1651:tid 1699] [client 4.213.160.187:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:31.695002 2025] [:error] [pid 1651:tid 1695] [client 4.213.160.187:36185] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVQnZ3AnYt-Xi20L7fAsFAAAAUQ"], referer: https://www.google.fr/
[Wed Dec 31 03:26:31.969743 2025] [:error] [pid 50266:tid 50282] [client 4.213.160.187:55152] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVQnZ_w6SPY9puCUnH-ooQAAAE4"], referer: https://www.yahoo.com/
[Wed Dec 31 03:26:32.386396 2025] [:error] [pid 49982:tid 50028] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/alfav4.1-tesla.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:32.526105 2025] [:error] [pid 49982:tid 50033] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.fr/
[Wed Dec 31 03:26:32.667584 2025] [:error] [pid 49982:tid 50025] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/black.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:32.808489 2025] [:error] [pid 49982:tid 50019] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:32.948416 2025] [:error] [pid 49982:tid 50020] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Wed Dec 31 03:26:33.088543 2025] [:error] [pid 49982:tid 50035] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:33.369250 2025] [:error] [pid 49982:tid 50031] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/cyber.php, referer: https://www.google.com/
[Wed Dec 31 03:26:33.509813 2025] [:error] [pid 49982:tid 50036] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:33.650323 2025] [:error] [pid 49982:tid 50021] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/fx.php, referer: https://www.google.de/
[Wed Dec 31 03:26:34.491044 2025] [:error] [pid 49982:tid 50027] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php, referer: https://www.bing.com/
[Wed Dec 31 03:26:34.630996 2025] [:error] [pid 49982:tid 50037] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:34.787433 2025] [:error] [pid 49982:tid 50038] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php, referer: https://www.google.com/
[Wed Dec 31 03:26:34.927818 2025] [:error] [pid 49982:tid 50032] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:35.067868 2025] [:error] [pid 49982:tid 50018] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://www.bing.com/
[Wed Dec 31 03:26:35.207721 2025] [:error] [pid 49982:tid 50016] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Wed Dec 31 03:26:35.347472 2025] [:error] [pid 49982:tid 50034] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://www.google.fr/
[Wed Dec 31 03:26:35.487427 2025] [:error] [pid 49982:tid 50028] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.fr/
[Wed Dec 31 03:26:35.627347 2025] [:error] [pid 49982:tid 50033] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/tmp.php, referer: https://www.yahoo.com/
[Wed Dec 31 03:26:35.767318 2025] [:error] [pid 49982:tid 50025] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php, referer: https://duckduckgo.com/
[Wed Dec 31 03:26:35.921262 2025] [:error] [pid 49982:tid 50019] [client 4.213.160.187:33477] File does not exist: /usr/local/apache/htdocs/suspended-page/uploaded_script.php, referer: https://www.bing.com/
[Wed Dec 31 04:03:55.314384 2025] [:error] [pid 33004:tid 33074] [client 195.178.110.190:47836] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aVQwK_ogj9CrK-80KNzxJAAAAIk"]
[Wed Dec 31 04:55:17.222449 2025] [:error] [pid 33109:tid 33126] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/mda.php
[Wed Dec 31 04:55:17.382256 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/cheka.php
[Wed Dec 31 04:55:17.542181 2025] [:error] [pid 33109:tid 33115] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Wed Dec 31 04:55:17.704516 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Wed Dec 31 04:55:17.864272 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/zsz.php
[Wed Dec 31 04:55:18.033638 2025] [:error] [pid 33109:tid 33122] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Wed Dec 31 04:55:18.207913 2025] [:error] [pid 33109:tid 33111] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Wed Dec 31 04:55:18.366937 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/bby.php
[Wed Dec 31 04:55:18.528452 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/get.php
[Wed Dec 31 04:55:18.694910 2025] [:error] [pid 33109:tid 33121] [client 20.171.250.68:6429] File does not exist: /usr/local/apache/htdocs/suspended-page/xtride.php
[Wed Dec 31 04:55:18.853015 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:6429] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVQ8NsYN9k_fnLM-n47M3wAAAMg"]
[Wed Dec 31 04:55:19.347040 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:6484] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVQ8N8YN9k_fnLM-n47M4QAAAME"]
[Wed Dec 31 04:55:19.689941 2025] [:error] [pid 33004:tid 33072] [client 20.171.250.68:6490] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVQ8N_ogj9CrK-80KNwFVgAAAIc"]
[Wed Dec 31 04:55:20.122437 2025] [:error] [pid 33004:tid 33067] [client 20.171.250.68:6514] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVQ8OPogj9CrK-80KNwFVwAAAII"]
[Wed Dec 31 04:55:20.450225 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:6400] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVQ8OLOkdrCgTt0MxWLS_wAAAFQ"]
[Wed Dec 31 04:55:20.803082 2025] [:error] [pid 33004:tid 33083] [client 20.171.250.68:6401] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVQ8OPogj9CrK-80KNwFWgAAAJI"]
[Wed Dec 31 04:55:21.239645 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:6425] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVQ8OcYN9k_fnLM-n47M5QAAANM"]
[Wed Dec 31 04:55:21.652721 2025] [:error] [pid 33002:tid 33029] [client 20.171.250.68:6505] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVQ8OfnsZEcORmTFnribdAAAABI"]
[Wed Dec 31 04:55:22.037943 2025] [:error] [pid 33109:tid 33118] [client 20.171.250.68:6491] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVQ8OsYN9k_fnLM-n47M6QAAAMc"]
[Wed Dec 31 04:55:22.413056 2025] [:error] [pid 33109:tid 33120] [client 20.171.250.68:6419] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVQ8OsYN9k_fnLM-n47M6gAAAMk"]
[Wed Dec 31 04:55:22.873454 2025] [:error] [pid 33002:tid 33013] [client 20.171.250.68:6469] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVQ8OvnsZEcORmTFnribdgAAAAI"]
[Wed Dec 31 04:55:23.290698 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:6519] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVQ8O_nsZEcORmTFnribeAAAAAw"]
[Wed Dec 31 04:55:23.644104 2025] [:error] [pid 33002:tid 33019] [client 20.171.250.68:6509] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVQ8O_nsZEcORmTFnribfAAAAAg"]
[Wed Dec 31 04:55:24.031926 2025] [:error] [pid 33004:tid 33075] [client 20.171.250.68:6498] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVQ8PPogj9CrK-80KNwFXAAAAIo"]
[Wed Dec 31 04:55:24.432079 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:6489] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVQ8PMYN9k_fnLM-n47M7QAAAMM"]
[Wed Dec 31 04:55:24.772803 2025] [:error] [pid 33002:tid 33021] [client 20.171.250.68:6526] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVQ8PPnsZEcORmTFnribfgAAAAo"]
[Wed Dec 31 04:55:25.111766 2025] [:error] [pid 33002:tid 33016] [client 20.171.250.68:6416] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVQ8PfnsZEcORmTFnribfwAAAAU"]
[Wed Dec 31 04:55:25.442911 2025] [:error] [pid 33109:tid 33126] [client 20.171.250.68:6463] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVQ8PcYN9k_fnLM-n47M8AAAAM8"]
[Wed Dec 31 04:55:25.758060 2025] [:error] [pid 33004:tid 33088] [client 20.171.250.68:6407] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVQ8Pfogj9CrK-80KNwFXQAAAJc"]
[Wed Dec 31 04:55:26.155927 2025] [:error] [pid 33109:tid 33115] [client 20.171.250.68:6479] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVQ8PsYN9k_fnLM-n47M8wAAAMQ"]
[Wed Dec 31 04:55:26.475905 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:6520] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVQ8PsYN9k_fnLM-n47M9QAAAMg"]
[Wed Dec 31 04:55:26.816045 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:6414] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVQ8PsYN9k_fnLM-n47M9wAAANE"]
[Wed Dec 31 04:55:27.133319 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:6487] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVQ8P8YN9k_fnLM-n47M-AAAANY"]
[Wed Dec 31 04:55:27.450518 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:6476] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVQ8P8YN9k_fnLM-n47M-gAAAMY"]
[Wed Dec 31 04:55:27.834942 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:6428] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file51.php"] [unique_id "aVQ8P8YN9k_fnLM-n47M-wAAAME"]
[Wed Dec 31 04:55:28.205798 2025] [:error] [pid 33109:tid 33123] [client 20.171.250.68:6524] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file51.php"] [unique_id "aVQ8QMYN9k_fnLM-n47M_AAAAMw"]
[Wed Dec 31 04:55:28.616216 2025] [:error] [pid 33109:tid 33111] [client 20.171.250.68:6513] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file51.php"] [unique_id "aVQ8QMYN9k_fnLM-n47M_wAAAMA"]
[Wed Dec 31 04:55:28.958124 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:6525] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file51.php"] [unique_id "aVQ8QMYN9k_fnLM-n47NAQAAANM"]
[Wed Dec 31 04:55:29.301228 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:6434] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVQ8QcYN9k_fnLM-n47NAgAAANQ"]
[Wed Dec 31 04:55:29.657332 2025] [:error] [pid 33002:tid 33012] [client 20.171.250.68:6430] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVQ8QfnsZEcORmTFnribgwAAAAE"]
[Wed Dec 31 04:55:29.984160 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:6499] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVQ8QcYN9k_fnLM-n47NBAAAANc"]
[Wed Dec 31 04:55:30.419703 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:6517] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVQ8QsYN9k_fnLM-n47NBQAAAMI"]
[Wed Dec 31 04:55:30.781209 2025] [:error] [pid 33109:tid 33118] [client 20.171.250.68:6494] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVQ8QsYN9k_fnLM-n47NBwAAAMc"]
[Wed Dec 31 04:55:31.128377 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:1988] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVQ8Q8YN9k_fnLM-n47NCAAAANU"]
[Wed Dec 31 04:55:31.470408 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:6423] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVQ8Q7OkdrCgTt0MxWLTBQAAAEI"]
[Wed Dec 31 04:55:31.785236 2025] [:error] [pid 33003:tid 33061] [client 20.171.250.68:6522] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVQ8Q7OkdrCgTt0MxWLTBgAAAFc"]
[Wed Dec 31 04:55:32.105278 2025] [:error] [pid 33002:tid 33026] [client 20.171.250.68:6455] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aVQ8RPnsZEcORmTFnribhgAAAA8"]
[Wed Dec 31 04:55:32.423147 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:6512] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aVQ8RMYN9k_fnLM-n47NDQAAAM4"]
[Wed Dec 31 04:55:32.777451 2025] [:error] [pid 33004:tid 33071] [client 20.171.250.68:6458] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aVQ8RPogj9CrK-80KNwFYwAAAIY"]
[Wed Dec 31 04:55:33.105286 2025] [:error] [pid 33003:tid 33054] [client 20.171.250.68:6500] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/File.php"] [unique_id "aVQ8RbOkdrCgTt0MxWLTCQAAAFA"]
[Wed Dec 31 04:55:33.423952 2025] [:error] [pid 33002:tid 33018] [client 20.171.250.68:6492] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aVQ8RfnsZEcORmTFnribiAAAAAc"]
[Wed Dec 31 04:55:33.767301 2025] [:error] [pid 33002:tid 33028] [client 20.171.250.68:6482] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aVQ8RfnsZEcORmTFnribiQAAABE"]
[Wed Dec 31 04:55:34.090300 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:6411] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aVQ8RrOkdrCgTt0MxWLTCgAAAFQ"]
[Wed Dec 31 04:55:34.433836 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:6414] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all.php"] [unique_id "aVQ8RsYN9k_fnLM-n47NDwAAANA"]
[Wed Dec 31 04:55:34.797840 2025] [:error] [pid 33002:tid 33030] [client 20.171.250.68:6426] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVQ8RvnsZEcORmTFnribigAAABM"]
[Wed Dec 31 04:55:35.195869 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:6496] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVQ8R8YN9k_fnLM-n47NEQAAAMU"]
[Wed Dec 31 04:55:35.513035 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:6449] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVQ8R7OkdrCgTt0MxWLTCwAAAEQ"]
[Wed Dec 31 04:55:35.830672 2025] [:error] [pid 33003:tid 33049] [client 20.171.250.68:6404] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVQ8R7OkdrCgTt0MxWLTDAAAAEs"]
[Wed Dec 31 04:55:36.216933 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:1986] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aVQ8SLOkdrCgTt0MxWLTDQAAAFg"]
[Wed Dec 31 04:55:36.559067 2025] [:error] [pid 33003:tid 33060] [client 20.171.250.68:6457] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aVQ8SLOkdrCgTt0MxWLTDgAAAFY"]
[Wed Dec 31 04:55:36.909255 2025] [:error] [pid 33003:tid 33041] [client 20.171.250.68:6406] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aVQ8SLOkdrCgTt0MxWLTDwAAAEM"]
[Wed Dec 31 04:55:37.233302 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:2009] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aVQ8ScYN9k_fnLM-n47NIgAAANM"]
[Wed Dec 31 04:55:37.571911 2025] [:error] [pid 33004:tid 33084] [client 20.171.250.68:2003] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVQ8Sfogj9CrK-80KNwFZwAAAJM"]
[Wed Dec 31 04:55:37.956638 2025] [:error] [pid 33004:tid 33075] [client 20.171.250.68:6433] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVQ8Sfogj9CrK-80KNwFaAAAAIo"]
[Wed Dec 31 04:55:38.310716 2025] [:error] [pid 33004:tid 33079] [client 20.171.250.68:2005] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVQ8Svogj9CrK-80KNwFaQAAAI4"]
[Wed Dec 31 04:55:38.625435 2025] [:error] [pid 33002:tid 33029] [client 20.171.250.68:6506] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVQ8SvnsZEcORmTFnribjAAAABI"]
[Wed Dec 31 04:55:38.955376 2025] [:error] [pid 33004:tid 33078] [client 20.171.250.68:6518] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVQ8Svogj9CrK-80KNwFbQAAAI0"]
[Wed Dec 31 04:55:39.287190 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:6523] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVQ8S8YN9k_fnLM-n47NMQAAANE"]
[Wed Dec 31 04:55:39.612395 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:6427] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVQ8S7OkdrCgTt0MxWLTEQAAAEk"]
[Wed Dec 31 04:55:39.986449 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:6488] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVQ8S8YN9k_fnLM-n47NOAAAAM0"]
[Wed Dec 31 04:55:40.328800 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:6470] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aVQ8TPnsZEcORmTFnribjgAAAAw"]
[Wed Dec 31 04:55:40.706285 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:6483] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aVQ8TMYN9k_fnLM-n47NPgAAANU"]
[Wed Dec 31 04:55:41.038718 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:6504] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aVQ8TcYN9k_fnLM-n47NQwAAANE"]
[Wed Dec 31 04:55:41.404838 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1957] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thai.php"] [unique_id "aVQ8TcYN9k_fnLM-n47NRAAAAM4"]
[Wed Dec 31 04:55:41.752351 2025] [:error] [pid 33003:tid 33044] [client 20.171.250.68:6453] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aVQ8TbOkdrCgTt0MxWLTFQAAAEY"]
[Wed Dec 31 04:55:42.067263 2025] [:error] [pid 33003:tid 33046] [client 20.171.250.68:2038] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aVQ8TrOkdrCgTt0MxWLTFgAAAEg"]
[Wed Dec 31 04:55:42.381939 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:6480] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aVQ8TsYN9k_fnLM-n47NRwAAAM0"]
[Wed Dec 31 04:55:42.701945 2025] [:error] [pid 33109:tid 33126] [client 20.171.250.68:2015] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lopst.php"] [unique_id "aVQ8TsYN9k_fnLM-n47NSQAAAM8"]
[Wed Dec 31 04:55:43.031937 2025] [:error] [pid 33002:tid 33014] [client 20.171.250.68:6410] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVQ8T_nsZEcORmTFnribkgAAAAM"]
[Wed Dec 31 04:55:43.360425 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:6481] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVQ8T8YN9k_fnLM-n47NSwAAAMg"]
[Wed Dec 31 04:55:43.764322 2025] [:error] [pid 33002:tid 33026] [client 20.171.250.68:6439] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVQ8T_nsZEcORmTFnriblAAAAA8"]
[Wed Dec 31 04:55:44.168965 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:6502] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVQ8UMYN9k_fnLM-n47NUAAAAMI"]
[Wed Dec 31 04:55:44.568325 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:2000] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVQ8UMYN9k_fnLM-n47NUQAAANM"]
[Wed Dec 31 04:55:44.917153 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:6446] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVQ8ULOkdrCgTt0MxWLTHAAAAEQ"]
[Wed Dec 31 04:55:45.269453 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:6451] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVQ8UcYN9k_fnLM-n47NVgAAAMM"]
[Wed Dec 31 04:55:45.585870 2025] [:error] [pid 33003:tid 33060] [client 20.171.250.68:6431] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVQ8UbOkdrCgTt0MxWLTHQAAAFY"]
[Wed Dec 31 04:55:45.943952 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:2007] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVQ8UbOkdrCgTt0MxWLTHgAAAE4"]
[Wed Dec 31 04:55:46.258168 2025] [:error] [pid 33002:tid 33021] [client 20.171.250.68:6412] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVQ8UvnsZEcORmTFnriblwAAAAo"]
[Wed Dec 31 04:55:46.588449 2025] [:error] [pid 33004:tid 33073] [client 20.171.250.68:6456] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVQ8Uvogj9CrK-80KNwFbwAAAIg"]
[Wed Dec 31 04:55:46.945149 2025] [:error] [pid 33004:tid 33071] [client 20.171.250.68:6417] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVQ8Uvogj9CrK-80KNwFcQAAAIY"]
[Wed Dec 31 04:55:47.296866 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:6448] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aVQ8U7OkdrCgTt0MxWLTIAAAAEk"]
[Wed Dec 31 04:55:47.703606 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:2004] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aVQ8U_ogj9CrK-80KNwFdAAAAIQ"]
[Wed Dec 31 04:55:48.081454 2025] [:error] [pid 33004:tid 33083] [client 20.171.250.68:2017] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aVQ8VPogj9CrK-80KNwFdQAAAJI"]
[Wed Dec 31 04:55:48.403807 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:2027] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vbbn.php"] [unique_id "aVQ8VMYN9k_fnLM-n47NWQAAAMY"]
[Wed Dec 31 04:55:48.793496 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:6403] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVQ8VPogj9CrK-80KNwFeQAAAJE"]
[Wed Dec 31 04:55:49.116760 2025] [:error] [pid 33004:tid 33084] [client 20.171.250.68:6516] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVQ8Vfogj9CrK-80KNwFegAAAJM"]
[Wed Dec 31 04:55:49.432149 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:2046] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVQ8VbOkdrCgTt0MxWLTIgAAAEI"]
[Wed Dec 31 04:55:49.765941 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:6472] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVQ8VcYN9k_fnLM-n47NXQAAANY"]
[Wed Dec 31 04:55:50.139442 2025] [:error] [pid 33004:tid 33078] [client 20.171.250.68:6497] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVQ8Vvogj9CrK-80KNwFfQAAAI0"]
[Wed Dec 31 04:55:50.498602 2025] [:error] [pid 33109:tid 33121] [client 20.171.250.68:2013] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVQ8VsYN9k_fnLM-n47NXgAAAMo"]
[Wed Dec 31 04:55:50.851808 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:6521] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVQ8VsYN9k_fnLM-n47NYAAAAM0"]
[Wed Dec 31 04:55:51.172996 2025] [:error] [pid 33004:tid 33077] [client 20.171.250.68:6418] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVQ8V_ogj9CrK-80KNwFfwAAAIw"]
[Wed Dec 31 04:55:51.506267 2025] [:error] [pid 33004:tid 33066] [client 20.171.250.68:6477] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVQ8V_ogj9CrK-80KNwFgAAAAIE"]
[Wed Dec 31 04:55:51.842163 2025] [:error] [pid 33002:tid 33019] [client 20.171.250.68:6510] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVQ8V_nsZEcORmTFnribnAAAAAg"]
[Wed Dec 31 04:55:52.187806 2025] [:error] [pid 33002:tid 33012] [client 20.171.250.68:6461] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVQ8WPnsZEcORmTFnribnQAAAAE"]
[Wed Dec 31 04:55:52.545888 2025] [:error] [pid 33003:tid 33054] [client 20.171.250.68:6409] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVQ8WLOkdrCgTt0MxWLTJQAAAFA"]
[Wed Dec 31 04:55:52.941813 2025] [:error] [pid 33003:tid 33043] [client 20.171.250.68:6464] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVQ8WLOkdrCgTt0MxWLTJwAAAEU"]
[Wed Dec 31 04:55:53.323787 2025] [:error] [pid 33002:tid 33014] [client 20.171.250.68:1992] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVQ8WfnsZEcORmTFnriboAAAAAM"]
[Wed Dec 31 04:55:53.696544 2025] [:error] [pid 33004:tid 33079] [client 20.171.250.68:1989] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVQ8Wfogj9CrK-80KNwFjAAAAI4"]
[Wed Dec 31 04:55:54.014841 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:6424] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVQ8WsYN9k_fnLM-n47NbQAAANY"]
[Wed Dec 31 04:55:54.366439 2025] [:error] [pid 33004:tid 33066] [client 20.171.250.68:2042] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVQ8Wvogj9CrK-80KNwFkwAAAIE"]
[Wed Dec 31 04:55:54.735444 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:1998] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVQ8WrOkdrCgTt0MxWLTKgAAAEQ"]
[Wed Dec 31 04:55:55.050214 2025] [:error] [pid 33003:tid 33041] [client 20.171.250.68:1959] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVQ8W7OkdrCgTt0MxWLTLQAAAEM"]
[Wed Dec 31 04:55:55.455973 2025] [:error] [pid 33002:tid 33028] [client 20.171.250.68:6467] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVQ8W_nsZEcORmTFnribogAAABE"]
[Wed Dec 31 04:55:55.788587 2025] [:error] [pid 33002:tid 33031] [client 20.171.250.68:6501] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVQ8W_nsZEcORmTFnribpQAAABQ"]
[Wed Dec 31 04:55:56.147264 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:6415] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVQ8XMYN9k_fnLM-n47NcwAAANA"]
[Wed Dec 31 04:55:56.477032 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:2014] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVQ8XPnsZEcORmTFnribqQAAAAw"]
[Wed Dec 31 04:55:56.806157 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:1937] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVQ8XPogj9CrK-80KNwFlgAAAJE"]
[Wed Dec 31 04:55:57.118549 2025] [:error] [pid 33004:tid 33080] [client 20.171.250.68:6437] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVQ8Xfogj9CrK-80KNwFlwAAAI8"]
[Wed Dec 31 04:55:57.446796 2025] [:error] [pid 33002:tid 33034] [client 20.171.250.68:2045] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVQ8XfnsZEcORmTFnribrAAAABc"]
[Wed Dec 31 04:55:57.798190 2025] [:error] [pid 33004:tid 33075] [client 20.171.250.68:6511] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVQ8Xfogj9CrK-80KNwFmQAAAIo"]
[Wed Dec 31 04:55:58.133162 2025] [:error] [pid 33004:tid 33088] [client 20.171.250.68:6450] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVQ8Xvogj9CrK-80KNwFmwAAAJc"]
[Wed Dec 31 04:55:58.450641 2025] [:error] [pid 33002:tid 33024] [client 20.171.250.68:2018] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVQ8XvnsZEcORmTFnribrwAAAA0"]
[Wed Dec 31 04:55:58.770368 2025] [:error] [pid 33002:tid 33025] [client 20.171.250.68:6508] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVQ8XvnsZEcORmTFnribsAAAAA4"]
[Wed Dec 31 04:55:59.103016 2025] [:error] [pid 33004:tid 33073] [client 20.171.250.68:1926] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVQ8X_ogj9CrK-80KNwFnAAAAIg"]
[Wed Dec 31 04:55:59.430251 2025] [:error] [pid 33109:tid 33120] [client 20.171.250.68:1920] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVQ8X8YN9k_fnLM-n47NeQAAAMk"]
[Wed Dec 31 04:55:59.743859 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:6459] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVQ8X8YN9k_fnLM-n47NfAAAANc"]
[Wed Dec 31 04:56:00.104119 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:1967] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVQ8YLOkdrCgTt0MxWLTTQAAAFg"]
[Wed Dec 31 04:56:00.427110 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:1952] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVQ8YLOkdrCgTt0MxWLTUAAAAE4"]
[Wed Dec 31 04:56:00.831733 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1997] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVQ8YMYN9k_fnLM-n47NfwAAANg"]
[Wed Dec 31 04:56:01.208596 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:1962] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8YcYN9k_fnLM-n47NggAAAME"]
[Wed Dec 31 04:56:01.536369 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:6473] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8Yfogj9CrK-80KNwFpAAAAIQ"]
[Wed Dec 31 04:56:01.852422 2025] [:error] [pid 33004:tid 33067] [client 20.171.250.68:2012] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8Yfogj9CrK-80KNwFpQAAAII"]
[Wed Dec 31 04:56:02.242471 2025] [:error] [pid 33002:tid 33014] [client 20.171.250.68:1994] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8YvnsZEcORmTFnribuAAAAAM"]
[Wed Dec 31 04:56:02.613117 2025] [:error] [pid 33003:tid 33044] [client 20.171.250.68:2041] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aVQ8YrOkdrCgTt0MxWLTVQAAAEY"]
[Wed Dec 31 04:56:02.970804 2025] [:error] [pid 33004:tid 33078] [client 20.171.250.68:2025] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aVQ8Yvogj9CrK-80KNwFqAAAAI0"]
[Wed Dec 31 04:56:03.323033 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:2016] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aVQ8Y8YN9k_fnLM-n47NigAAAM0"]
[Wed Dec 31 04:56:03.649224 2025] [:error] [pid 33003:tid 33039] [client 20.171.250.68:1939] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aVQ8Y7OkdrCgTt0MxWLTWgAAAEE"]
[Wed Dec 31 04:56:03.974185 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:1984] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVQ8Y8YN9k_fnLM-n47NjwAAAMI"]
[Wed Dec 31 04:56:04.304181 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:6515] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVQ8ZLOkdrCgTt0MxWLTWwAAAFg"]
[Wed Dec 31 04:56:04.660437 2025] [:error] [pid 33003:tid 33041] [client 20.171.250.68:6402] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVQ8ZLOkdrCgTt0MxWLTXgAAAEM"]
[Wed Dec 31 04:56:04.980511 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:6527] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVQ8ZLOkdrCgTt0MxWLTYgAAAEk"]
[Wed Dec 31 04:56:05.349874 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:2002] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVQ8ZcYN9k_fnLM-n47NlAAAAM0"]
[Wed Dec 31 04:56:05.727513 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:1957] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVQ8ZcYN9k_fnLM-n47NlgAAANQ"]
[Wed Dec 31 04:56:06.096623 2025] [:error] [pid 33002:tid 33013] [client 20.171.250.68:6445] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVQ8ZvnsZEcORmTFnribvAAAAAI"]
[Wed Dec 31 04:56:06.486291 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:6460] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVQ8ZsYN9k_fnLM-n47NmQAAAMg"]
[Wed Dec 31 04:56:06.804428 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:1938] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVQ8ZsYN9k_fnLM-n47NmwAAAMU"]
[Wed Dec 31 04:56:07.125483 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:6486] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVQ8Z8YN9k_fnLM-n47NnAAAAME"]
[Wed Dec 31 04:56:07.490163 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:6447] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVQ8Z8YN9k_fnLM-n47NngAAANU"]
[Wed Dec 31 04:56:07.813398 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:1990] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVQ8Z8YN9k_fnLM-n47NnwAAANE"]
[Wed Dec 31 04:56:08.140437 2025] [:error] [pid 33003:tid 33057] [client 20.171.250.68:1941] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVQ8aLOkdrCgTt0MxWLTZgAAAFM"]
[Wed Dec 31 04:56:08.475287 2025] [:error] [pid 33002:tid 33035] [client 20.171.250.68:6408] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVQ8aPnsZEcORmTFnribwQAAABg"]
[Wed Dec 31 04:56:08.794869 2025] [:error] [pid 33004:tid 33076] [client 20.171.250.68:2035] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVQ8aPogj9CrK-80KNwFrgAAAIs"]
[Wed Dec 31 04:56:09.171289 2025] [:error] [pid 33003:tid 33038] [client 20.171.250.68:1978] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVQ8abOkdrCgTt0MxWLTaAAAAEA"]
[Wed Dec 31 04:56:09.554596 2025] [:error] [pid 33004:tid 33068] [client 20.171.250.68:2001] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aVQ8afogj9CrK-80KNwFrwAAAIM"]
[Wed Dec 31 04:56:09.894535 2025] [:error] [pid 33004:tid 33067] [client 20.171.250.68:2031] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aVQ8afogj9CrK-80KNwFsAAAAII"]
[Wed Dec 31 04:56:10.336481 2025] [:error] [pid 33002:tid 33019] [client 20.171.250.68:6485] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aVQ8avnsZEcORmTFnribwgAAAAg"]
[Wed Dec 31 04:56:10.754622 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:6454] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aVQ8avogj9CrK-80KNwFswAAAJE"]
[Wed Dec 31 04:56:11.161955 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:2023] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVQ8a8YN9k_fnLM-n47NowAAAM4"]
[Wed Dec 31 04:56:11.521220 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:2019] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVQ8a_ogj9CrK-80KNwFtQAAAJg"]
[Wed Dec 31 04:56:11.950865 2025] [:error] [pid 33002:tid 33017] [client 20.171.250.68:6435] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVQ8a_nsZEcORmTFnribxAAAAAY"]
[Wed Dec 31 04:56:12.273270 2025] [:error] [pid 33004:tid 33086] [client 20.171.250.68:1979] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVQ8bPogj9CrK-80KNwFtwAAAJU"]
[Wed Dec 31 04:56:12.639807 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:1902] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVQ8bLOkdrCgTt0MxWLTcAAAAE4"]
[Wed Dec 31 04:56:13.043037 2025] [:error] [pid 33002:tid 33028] [client 20.171.250.68:1953] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVQ8bfnsZEcORmTFnribxgAAABE"]
[Wed Dec 31 04:56:13.387489 2025] [:error] [pid 33003:tid 33044] [client 20.171.250.68:1942] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVQ8bbOkdrCgTt0MxWLTdAAAAEY"]
[Wed Dec 31 04:56:13.752006 2025] [:error] [pid 33002:tid 33020] [client 20.171.250.68:2040] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVQ8bfnsZEcORmTFnribyQAAAAk"]
[Wed Dec 31 04:56:14.097306 2025] [:error] [pid 33002:tid 33018] [client 20.171.250.68:1924] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aVQ8bvnsZEcORmTFnribygAAAAc"]
[Wed Dec 31 04:56:14.432637 2025] [:error] [pid 33004:tid 33071] [client 20.171.250.68:2022] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aVQ8bvogj9CrK-80KNwFuQAAAIY"]
[Wed Dec 31 04:56:14.805758 2025] [:error] [pid 33004:tid 33076] [client 20.171.250.68:6462] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aVQ8bvogj9CrK-80KNwFvgAAAIs"]
[Wed Dec 31 04:56:15.129578 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:6443] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aVQ8b_ogj9CrK-80KNwFwQAAAJg"]
[Wed Dec 31 04:56:15.503867 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:1965] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVQ8b8YN9k_fnLM-n47NpgAAANE"]
[Wed Dec 31 04:56:15.833439 2025] [:error] [pid 33002:tid 33029] [client 20.171.250.68:1991] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVQ8b_nsZEcORmTFnribywAAABI"]
[Wed Dec 31 04:56:16.167649 2025] [:error] [pid 33003:tid 33053] [client 20.171.250.68:1993] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVQ8cLOkdrCgTt0MxWLTeQAAAE8"]
[Wed Dec 31 04:56:16.488871 2025] [:error] [pid 33004:tid 33074] [client 20.171.250.68:1865] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVQ8cPogj9CrK-80KNwFywAAAIk"]
[Wed Dec 31 04:56:16.807708 2025] [:error] [pid 33109:tid 33129] [client 20.171.250.68:6441] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVQ8cMYN9k_fnLM-n47NqQAAANI"]
[Wed Dec 31 04:56:17.164905 2025] [:error] [pid 33004:tid 33067] [client 20.171.250.68:2006] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVQ8cfogj9CrK-80KNwFzAAAAII"]
[Wed Dec 31 04:56:17.518300 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:2028] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVQ8ccYN9k_fnLM-n47NrQAAAM0"]
[Wed Dec 31 04:56:17.875216 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:6405] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVQ8cfogj9CrK-80KNwF0AAAAJg"]
[Wed Dec 31 04:56:18.215504 2025] [:error] [pid 33109:tid 33118] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Wed Dec 31 04:56:18.374851 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Wed Dec 31 04:56:18.535173 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Wed Dec 31 04:56:18.716046 2025] [:error] [pid 33109:tid 33120] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Dec 31 04:56:18.884508 2025] [:error] [pid 33109:tid 33111] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Dec 31 04:56:19.380111 2025] [:error] [pid 33109:tid 33123] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Dec 31 04:56:19.540237 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Dec 31 04:56:19.707869 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Dec 31 04:56:19.899972 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:2034] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Dec 31 04:56:20.077596 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:2034] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVQ8dMYN9k_fnLM-n47NwwAAAME"]
[Wed Dec 31 04:56:20.409875 2025] [:error] [pid 33002:tid 33035] [client 20.171.250.68:6475] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVQ8dPnsZEcORmTFnribzgAAABg"]
[Wed Dec 31 04:56:20.722811 2025] [:error] [pid 33002:tid 33022] [client 20.171.250.68:6503] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVQ8dPnsZEcORmTFnribzwAAAAs"]
[Wed Dec 31 04:56:21.067125 2025] [:error] [pid 33002:tid 33015] [client 20.171.250.68:2043] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVQ8dfnsZEcORmTFnrib0gAAAAQ"]
[Wed Dec 31 04:56:21.386275 2025] [:error] [pid 33002:tid 33014] [client 20.171.250.68:2010] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVQ8dfnsZEcORmTFnrib1gAAAAM"]
[Wed Dec 31 04:56:21.706661 2025] [:error] [pid 33002:tid 33020] [client 20.171.250.68:1960] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVQ8dfnsZEcORmTFnrib2AAAAAk"]
[Wed Dec 31 04:56:22.031979 2025] [:error] [pid 33004:tid 33088] [client 20.171.250.68:1996] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVQ8dvogj9CrK-80KNwF3AAAAJc"]
[Wed Dec 31 04:56:22.371319 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:2044] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVQ8dsYN9k_fnLM-n47NxAAAANQ"]
[Wed Dec 31 04:56:22.712919 2025] [:error] [pid 33109:tid 33121] [client 20.171.250.68:1936] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8dsYN9k_fnLM-n47NxQAAAMo"]
[Wed Dec 31 04:56:23.033607 2025] [:error] [pid 33002:tid 33024] [client 20.171.250.68:1929] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8d_nsZEcORmTFnrib2wAAAA0"]
[Wed Dec 31 04:56:23.348204 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:6474] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8d_nsZEcORmTFnrib3QAAAAw"]
[Wed Dec 31 04:56:23.670974 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:1987] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8d8YN9k_fnLM-n47NywAAAM0"]
[Wed Dec 31 04:56:23.994532 2025] [:error] [pid 33002:tid 33022] [client 20.171.250.68:2020] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVQ8d_nsZEcORmTFnrib4AAAAAs"]
[Wed Dec 31 04:56:24.367708 2025] [:error] [pid 33002:tid 33034] [client 20.171.250.68:1922] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVQ8ePnsZEcORmTFnrib4QAAABc"]
[Wed Dec 31 04:56:24.843605 2025] [:error] [pid 33002:tid 33025] [client 20.171.250.68:6420] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVQ8ePnsZEcORmTFnrib5QAAAA4"]
[Wed Dec 31 04:56:25.235700 2025] [:error] [pid 33003:tid 33038] [client 20.171.250.68:1946] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVQ8ebOkdrCgTt0MxWLTfgAAAEA"]
[Wed Dec 31 04:56:25.626369 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:1921] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVQ8ebOkdrCgTt0MxWLTfwAAAEc"]
[Wed Dec 31 04:56:25.975170 2025] [:error] [pid 33002:tid 33017] [client 20.171.250.68:6444] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVQ8efnsZEcORmTFnrib5wAAAAY"]
[Wed Dec 31 04:56:26.295985 2025] [:error] [pid 33003:tid 33039] [client 20.171.250.68:1870] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVQ8erOkdrCgTt0MxWLTgQAAAEE"]
[Wed Dec 31 04:56:26.690347 2025] [:error] [pid 33002:tid 33027] [client 20.171.250.68:6442] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVQ8evnsZEcORmTFnrib6gAAABA"]
[Wed Dec 31 04:56:27.009721 2025] [:error] [pid 33003:tid 33053] [client 20.171.250.68:1947] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVQ8e7OkdrCgTt0MxWLTgwAAAE8"]
[Wed Dec 31 04:56:27.340258 2025] [:error] [pid 33003:tid 33041] [client 20.171.250.68:1956] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVQ8e7OkdrCgTt0MxWLThAAAAEM"]
[Wed Dec 31 04:56:27.681087 2025] [:error] [pid 33003:tid 33049] [client 20.171.250.68:1940] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVQ8e7OkdrCgTt0MxWLThgAAAEs"]
[Wed Dec 31 04:56:27.997968 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:1985] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVQ8e7OkdrCgTt0MxWLTiQAAAE4"]
[Wed Dec 31 04:56:28.358913 2025] [:error] [pid 33002:tid 33031] [client 20.171.250.68:2036] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVQ8fPnsZEcORmTFnrib7AAAABQ"]
[Wed Dec 31 04:56:28.672783 2025] [:error] [pid 33002:tid 33011] [client 20.171.250.68:2033] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVQ8fPnsZEcORmTFnrib7gAAAAA"]
[Wed Dec 31 04:56:28.988189 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1896] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVQ8fLOkdrCgTt0MxWLTiwAAAE0"]
[Wed Dec 31 04:56:29.326317 2025] [:error] [pid 33003:tid 33059] [client 20.171.250.68:6495] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVQ8fbOkdrCgTt0MxWLTjAAAAFU"]
[Wed Dec 31 04:56:29.680365 2025] [:error] [pid 33002:tid 33013] [client 20.171.250.68:1983] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aVQ8ffnsZEcORmTFnrib8wAAAAI"]
[Wed Dec 31 04:56:30.020262 2025] [:error] [pid 33004:tid 33070] [client 20.171.250.68:1955] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aVQ8fvogj9CrK-80KNwF4AAAAIU"]
[Wed Dec 31 04:56:30.344846 2025] [:error] [pid 33109:tid 33129] [client 20.171.250.68:1792] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aVQ8fsYN9k_fnLM-n47N6wAAANI"]
[Wed Dec 31 04:56:30.674748 2025] [:error] [pid 33109:tid 33122] [client 20.171.250.68:6471] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aVQ8fsYN9k_fnLM-n47N7QAAAMs"]
[Wed Dec 31 04:56:31.019539 2025] [:error] [pid 33004:tid 33075] [client 20.171.250.68:1948] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8f_ogj9CrK-80KNwF5AAAAIo"]
[Wed Dec 31 04:56:31.333136 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:1975] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8f7OkdrCgTt0MxWLTkAAAAFQ"]
[Wed Dec 31 04:56:31.647392 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:1869] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8f_ogj9CrK-80KNwF5gAAAIQ"]
[Wed Dec 31 04:56:31.967735 2025] [:error] [pid 33002:tid 33022] [client 20.171.250.68:1897] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVQ8f_nsZEcORmTFnrib9wAAAAs"]
[Wed Dec 31 04:56:32.313052 2025] [:error] [pid 33003:tid 33041] [client 20.171.250.68:1871] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVQ8gLOkdrCgTt0MxWLTkQAAAEM"]
[Wed Dec 31 04:56:32.631012 2025] [:error] [pid 33002:tid 33028] [client 20.171.250.68:6421] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVQ8gPnsZEcORmTFnrib-QAAABE"]
[Wed Dec 31 04:56:32.944602 2025] [:error] [pid 33002:tid 33011] [client 20.171.250.68:1868] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVQ8gPnsZEcORmTFnrib-gAAAAA"]
[Wed Dec 31 04:56:33.291048 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:6465] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVQ8gbOkdrCgTt0MxWLTlAAAAEI"]
[Wed Dec 31 04:56:33.608739 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:1876] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVQ8gfnsZEcORmTFnrib_gAAAAw"]
[Wed Dec 31 04:56:33.959923 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1968] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVQ8gbOkdrCgTt0MxWLTlgAAAE0"]
[Wed Dec 31 04:56:34.329568 2025] [:error] [pid 33004:tid 33076] [client 20.171.250.68:2041] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVQ8gvogj9CrK-80KNwF6gAAAIs"]
[Wed Dec 31 04:56:34.660876 2025] [:error] [pid 33004:tid 33085] [client 20.171.250.68:1925] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVQ8gvogj9CrK-80KNwF6wAAAJQ"]
[Wed Dec 31 04:56:34.980168 2025] [:error] [pid 33004:tid 33080] [client 20.171.250.68:1899] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVQ8gvogj9CrK-80KNwF7AAAAI8"]
[Wed Dec 31 04:56:35.333948 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:1951] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVQ8g8YN9k_fnLM-n47N8wAAAMY"]
[Wed Dec 31 04:56:35.666612 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:1898] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVQ8g8YN9k_fnLM-n47N9AAAAMU"]
[Wed Dec 31 04:56:36.016245 2025] [:error] [pid 33004:tid 33070] [client 20.171.250.68:1928] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVQ8hPogj9CrK-80KNwF7wAAAIU"]
[Wed Dec 31 04:56:36.475278 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:1980] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVQ8hMYN9k_fnLM-n47N9gAAANA"]
[Wed Dec 31 04:56:36.800914 2025] [:error] [pid 33002:tid 33015] [client 20.171.250.68:1868] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVQ8hPnsZEcORmTFnricBgAAAAQ"]
[Wed Dec 31 04:56:37.129372 2025] [:error] [pid 33004:tid 33074] [client 20.171.250.68:1973] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVQ8hfogj9CrK-80KNwF8AAAAIk"]
[Wed Dec 31 04:56:37.470030 2025] [:error] [pid 33002:tid 33019] [client 20.171.250.68:1971] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVQ8hfnsZEcORmTFnricBwAAAAg"]
[Wed Dec 31 04:56:37.783954 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:1909] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVQ8hbOkdrCgTt0MxWLTmwAAAEc"]
[Wed Dec 31 04:56:38.116626 2025] [:error] [pid 33004:tid 33075] [client 20.171.250.68:1812] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVQ8hvogj9CrK-80KNwF8gAAAIo"]
[Wed Dec 31 04:56:38.478137 2025] [:error] [pid 33003:tid 33039] [client 20.171.250.68:2029] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVQ8hrOkdrCgTt0MxWLTnQAAAEE"]
[Wed Dec 31 04:56:38.800117 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:1804] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVQ8hvogj9CrK-80KNwF9QAAAIQ"]
[Wed Dec 31 04:56:39.134316 2025] [:error] [pid 33002:tid 33025] [client 20.171.250.68:2008] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aVQ8h_nsZEcORmTFnricCwAAAA4"]
[Wed Dec 31 04:56:39.556966 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:1934] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aVQ8h7OkdrCgTt0MxWLTngAAAEQ"]
[Wed Dec 31 04:56:39.905469 2025] [:error] [pid 33003:tid 33060] [client 20.171.250.68:1886] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aVQ8h7OkdrCgTt0MxWLTnwAAAFY"]
[Wed Dec 31 04:56:40.354501 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:2037] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about3.php"] [unique_id "aVQ8iMYN9k_fnLM-n47N-QAAANM"]
[Wed Dec 31 04:56:40.700307 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:1857] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVQ8iLOkdrCgTt0MxWLTogAAAEI"]
[Wed Dec 31 04:56:41.074738 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1881] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVQ8ibOkdrCgTt0MxWLTpAAAAE0"]
[Wed Dec 31 04:56:41.606224 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:1935] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVQ8icYN9k_fnLM-n47N_AAAANY"]
[Wed Dec 31 04:56:41.963203 2025] [:error] [pid 33002:tid 33031] [client 20.171.250.68:2024] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVQ8ifnsZEcORmTFnricDAAAABQ"]
[Wed Dec 31 04:56:42.343369 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:1950] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVQ8irOkdrCgTt0MxWLTqAAAAFQ"]
[Wed Dec 31 04:56:42.682631 2025] [:error] [pid 33004:tid 33085] [client 20.171.250.68:6452] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVQ8ivogj9CrK-80KNwF-QAAAJQ"]
[Wed Dec 31 04:56:43.103134 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:1943] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVQ8i8YN9k_fnLM-n47N_wAAAMY"]
[Wed Dec 31 04:56:43.417796 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1966] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVQ8i8YN9k_fnLM-n47OAQAAANg"]
[Wed Dec 31 04:56:43.733156 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:1884] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVQ8i8YN9k_fnLM-n47OAwAAANA"]
[Wed Dec 31 04:56:44.108929 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1932] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVQ8jMYN9k_fnLM-n47OBwAAAM4"]
[Wed Dec 31 04:56:44.427523 2025] [:error] [pid 33004:tid 33065] [client 20.171.250.68:2030] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVQ8jPogj9CrK-80KNwF-gAAAIA"]
[Wed Dec 31 04:56:44.743643 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:1819] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVQ8jMYN9k_fnLM-n47OCwAAAMI"]
[Wed Dec 31 04:56:45.063777 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:1961] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVQ8jcYN9k_fnLM-n47ODwAAANA"]
[Wed Dec 31 04:56:45.418690 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:1963] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVQ8jcYN9k_fnLM-n47OEQAAANE"]
[Wed Dec 31 04:56:45.744676 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:1907] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVQ8jcYN9k_fnLM-n47OEwAAAM0"]
[Wed Dec 31 04:56:46.087888 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1933] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVQ8jrOkdrCgTt0MxWLTrgAAAEw"]
[Wed Dec 31 04:56:46.440732 2025] [:error] [pid 33003:tid 33059] [client 20.171.250.68:1910] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVQ8jrOkdrCgTt0MxWLTsQAAAFU"]
[Wed Dec 31 04:56:46.760953 2025] [:error] [pid 33003:tid 33053] [client 20.171.250.68:1856] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVQ8jrOkdrCgTt0MxWLTswAAAE8"]
[Wed Dec 31 04:56:47.098798 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:6413] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVQ8j7OkdrCgTt0MxWLTtQAAAEc"]
[Wed Dec 31 04:56:47.423376 2025] [:error] [pid 33004:tid 33072] [client 20.171.250.68:6507] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVQ8j_ogj9CrK-80KNwF_QAAAIc"]
[Wed Dec 31 04:56:47.836861 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1904] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVQ8j8YN9k_fnLM-n47OGQAAANg"]
[Wed Dec 31 04:56:48.158682 2025] [:error] [pid 33003:tid 33061] [client 20.171.250.68:1999] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVQ8kLOkdrCgTt0MxWLTtgAAAFc"]
[Wed Dec 31 04:56:48.476984 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1949] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVQ8kMYN9k_fnLM-n47OHQAAAM4"]
[Wed Dec 31 04:56:48.806225 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1914] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVQ8kLOkdrCgTt0MxWLTugAAAEw"]
[Wed Dec 31 04:56:49.146200 2025] [:error] [pid 33109:tid 33115] [client 20.171.250.68:2039] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8kcYN9k_fnLM-n47OIwAAAMQ"]
[Wed Dec 31 04:56:49.509297 2025] [:error] [pid 33003:tid 33059] [client 20.171.250.68:1730] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8kbOkdrCgTt0MxWLTuwAAAFU"]
[Wed Dec 31 04:56:49.897677 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:1755] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8kfogj9CrK-80KNwGAAAAAIQ"]
[Wed Dec 31 04:56:50.215641 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:6436] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVQ8ksYN9k_fnLM-n47OKAAAANg"]
[Wed Dec 31 04:56:50.639499 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1891] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVQ8ksYN9k_fnLM-n47OKwAAAM4"]
[Wed Dec 31 04:56:50.990746 2025] [:error] [pid 33002:tid 33018] [client 20.171.250.68:1734] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVQ8kvnsZEcORmTFnricFAAAAAc"]
[Wed Dec 31 04:56:51.379443 2025] [:error] [pid 33003:tid 33043] [client 20.171.250.68:1923] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVQ8k7OkdrCgTt0MxWLTvQAAAEU"]
[Wed Dec 31 04:56:51.756600 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:1803] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVQ8k_ogj9CrK-80KNwGBQAAAJE"]
[Wed Dec 31 04:56:52.130612 2025] [:error] [pid 33004:tid 33066] [client 20.171.250.68:1995] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVQ8lPogj9CrK-80KNwGBwAAAIE"]
[Wed Dec 31 04:56:52.451432 2025] [:error] [pid 33004:tid 33085] [client 20.171.250.68:1800] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVQ8lPogj9CrK-80KNwGCAAAAJQ"]
[Wed Dec 31 04:56:52.775918 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1927] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVQ8lLOkdrCgTt0MxWLTwAAAAE0"]
[Wed Dec 31 04:56:53.126796 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:6432] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVQ8lcYN9k_fnLM-n47OOQAAAMM"]
[Wed Dec 31 04:56:53.460858 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:1918] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVQ8lbOkdrCgTt0MxWLTyAAAAE4"]
[Wed Dec 31 04:56:53.773396 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:1872] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVQ8lcYN9k_fnLM-n47ORQAAAM0"]
[Wed Dec 31 04:56:54.142297 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:1969] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVQ8lsYN9k_fnLM-n47ORgAAAME"]
[Wed Dec 31 04:56:54.551012 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1887] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVQ8lsYN9k_fnLM-n47ORwAAANc"]
[Wed Dec 31 04:56:54.983780 2025] [:error] [pid 33002:tid 33011] [client 20.171.250.68:1761] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVQ8lvnsZEcORmTFnricIgAAAAA"]
[Wed Dec 31 04:56:55.341938 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:1888] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVQ8l8YN9k_fnLM-n47OTgAAANU"]
[Wed Dec 31 04:56:55.658786 2025] [:error] [pid 33003:tid 33044] [client 20.171.250.68:1890] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVQ8l7OkdrCgTt0MxWLTywAAAEY"]
[Wed Dec 31 04:56:55.976148 2025] [:error] [pid 33003:tid 33059] [client 20.171.250.68:1974] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVQ8l7OkdrCgTt0MxWLTzAAAAFU"]
[Wed Dec 31 04:56:56.322838 2025] [:error] [pid 33002:tid 33025] [client 20.171.250.68:1900] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aVQ8mPnsZEcORmTFnricJAAAAA4"]
[Wed Dec 31 04:56:56.639512 2025] [:error] [pid 33003:tid 33056] [client 20.171.250.68:1893] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aVQ8mLOkdrCgTt0MxWLTzQAAAFI"]
[Wed Dec 31 04:56:56.995315 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:1802] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aVQ8mLOkdrCgTt0MxWLTzwAAAEk"]
[Wed Dec 31 04:56:57.344111 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:1911] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aVQ8mcYN9k_fnLM-n47OYgAAANY"]
[Wed Dec 31 04:56:57.681874 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:1972] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aVQ8mcYN9k_fnLM-n47OYwAAAMI"]
[Wed Dec 31 04:56:58.007685 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:1796] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aVQ8msYN9k_fnLM-n47OZQAAANA"]
[Wed Dec 31 04:56:58.340526 2025] [:error] [pid 33004:tid 33081] [client 20.171.250.68:2010] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aVQ8mvogj9CrK-80KNwGIgAAAJA"]
[Wed Dec 31 04:56:58.655165 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1877] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aVQ8mrOkdrCgTt0MxWLT2wAAAEw"]
[Wed Dec 31 04:56:59.005777 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:1982] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aVQ8m7OkdrCgTt0MxWLT3AAAAEI"]
[Wed Dec 31 04:56:59.325864 2025] [:error] [pid 33004:tid 33080] [client 20.171.250.68:1895] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aVQ8m_ogj9CrK-80KNwGIwAAAI8"]
[Wed Dec 31 04:56:59.723767 2025] [:error] [pid 33002:tid 33015] [client 20.171.250.68:1858] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aVQ8m_nsZEcORmTFnricKwAAAAQ"]
[Wed Dec 31 04:57:00.037652 2025] [:error] [pid 33004:tid 33072] [client 20.171.250.68:6468] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aVQ8nPogj9CrK-80KNwGJgAAAIc"]
[Wed Dec 31 04:57:00.386368 2025] [:error] [pid 33004:tid 33074] [client 20.171.250.68:2026] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVQ8nPogj9CrK-80KNwGJwAAAIk"]
[Wed Dec 31 04:57:00.784339 2025] [:error] [pid 33004:tid 33076] [client 20.171.250.68:1817] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aVQ8nPogj9CrK-80KNwGKAAAAIs"]
[Wed Dec 31 04:57:01.097851 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:1799] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aVQ8ncYN9k_fnLM-n47OcwAAAMI"]
[Wed Dec 31 04:57:01.411664 2025] [:error] [pid 33004:tid 33079] [client 20.171.250.68:1954] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aVQ8nfogj9CrK-80KNwGKgAAAI4"]
[Wed Dec 31 04:57:01.835628 2025] [:error] [pid 33003:tid 33043] [client 20.171.250.68:1798] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aVQ8nbOkdrCgTt0MxWLT4AAAAEU"]
[Wed Dec 31 04:57:02.165384 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:1917] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVQ8nrOkdrCgTt0MxWLT4QAAAEc"]
[Wed Dec 31 04:57:02.485015 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:1794] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVQ8nsYN9k_fnLM-n47OewAAANQ"]
[Wed Dec 31 04:57:02.804723 2025] [:error] [pid 33109:tid 33118] [client 20.171.250.68:1894] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVQ8nsYN9k_fnLM-n47OfQAAAMc"]
[Wed Dec 31 04:57:03.160378 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:1958] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVQ8n_ogj9CrK-80KNwGLAAAAIQ"]
[Wed Dec 31 04:57:03.511487 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:1906] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVQ8n8YN9k_fnLM-n47OfgAAANM"]
[Wed Dec 31 04:57:03.828933 2025] [:error] [pid 33003:tid 33060] [client 20.171.250.68:1826] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVQ8n7OkdrCgTt0MxWLT5QAAAFY"]
[Wed Dec 31 04:57:04.193634 2025] [:error] [pid 33004:tid 33078] [client 20.171.250.68:1931] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVQ8oPogj9CrK-80KNwGLwAAAI0"]
[Wed Dec 31 04:57:04.525281 2025] [:error] [pid 33004:tid 33068] [client 20.171.250.68:1824] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVQ8oPogj9CrK-80KNwGMAAAAIM"]
[Wed Dec 31 04:57:04.873883 2025] [:error] [pid 33002:tid 33018] [client 20.171.250.68:1976] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVQ8oPnsZEcORmTFnricNgAAAAc"]
[Wed Dec 31 04:57:05.187564 2025] [:error] [pid 33004:tid 33081] [client 20.171.250.68:6422] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aVQ8ofogj9CrK-80KNwGMgAAAJA"]
[Wed Dec 31 04:57:05.501436 2025] [:error] [pid 33002:tid 33013] [client 20.171.250.68:1964] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVQ8ofnsZEcORmTFnricNwAAAAI"]
[Wed Dec 31 04:57:05.828456 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:2047] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVQ8ocYN9k_fnLM-n47OgwAAANA"]
[Wed Dec 31 04:57:06.156171 2025] [:error] [pid 33003:tid 33038] [client 20.171.250.68:1811] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVQ8orOkdrCgTt0MxWLT7QAAAEA"]
[Wed Dec 31 04:57:06.572364 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:1737] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVQ8osYN9k_fnLM-n47OhAAAAME"]
[Wed Dec 31 04:57:06.909771 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:1892] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aVQ8osYN9k_fnLM-n47OhQAAAMU"]
[Wed Dec 31 04:57:07.236663 2025] [:error] [pid 33004:tid 33072] [client 20.171.250.68:1862] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aVQ8o_ogj9CrK-80KNwGNAAAAIc"]
[Wed Dec 31 04:57:07.590968 2025] [:error] [pid 33109:tid 33118] [client 20.171.250.68:1912] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aVQ8o8YN9k_fnLM-n47OiwAAAMc"]
[Wed Dec 31 04:57:07.970496 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:1801] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aVQ8o8YN9k_fnLM-n47OjAAAANE"]
[Wed Dec 31 04:57:08.414268 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:1875] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aVQ8pMYN9k_fnLM-n47OjQAAANM"]
[Wed Dec 31 04:57:08.762645 2025] [:error] [pid 33002:tid 33030] [client 20.171.250.68:1793] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aVQ8pPnsZEcORmTFnricPAAAABM"]
[Wed Dec 31 04:57:09.136139 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:1806] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aVQ8pcYN9k_fnLM-n47OjwAAANY"]
[Wed Dec 31 04:57:09.462791 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:1795] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aVQ8pfogj9CrK-80KNwGNQAAAJE"]
[Wed Dec 31 04:57:09.803865 2025] [:error] [pid 33004:tid 33079] [client 20.171.250.68:1930] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aVQ8pfogj9CrK-80KNwGNgAAAI4"]
[Wed Dec 31 04:57:10.127897 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:1861] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aVQ8prOkdrCgTt0MxWLT9QAAAEQ"]
[Wed Dec 31 04:57:10.461928 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:1728] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aVQ8prOkdrCgTt0MxWLT9gAAAE4"]
[Wed Dec 31 04:57:10.780813 2025] [:error] [pid 33004:tid 33077] [client 20.171.250.68:1873] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aVQ8pvogj9CrK-80KNwGOwAAAIw"]
[Wed Dec 31 04:57:11.146429 2025] [:error] [pid 33004:tid 33078] [client 20.171.250.68:1854] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVQ8p_ogj9CrK-80KNwGPQAAAI0"]
[Wed Dec 31 04:57:11.462563 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:1850] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVQ8p_nsZEcORmTFnricPgAAAAw"]
[Wed Dec 31 04:57:11.789615 2025] [:error] [pid 33003:tid 33048] [client 20.171.250.68:1813] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVQ8p7OkdrCgTt0MxWLT9wAAAEo"]
[Wed Dec 31 04:57:12.106946 2025] [:error] [pid 33004:tid 33073] [client 20.171.250.68:1841] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVQ8qPogj9CrK-80KNwGPgAAAIg"]
[Wed Dec 31 04:57:12.424424 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:1880] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVQ8qLOkdrCgTt0MxWLT-gAAAEI"]
[Wed Dec 31 04:57:12.791656 2025] [:error] [pid 33004:tid 33085] [client 20.171.250.68:1731] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVQ8qPogj9CrK-80KNwGQAAAAJQ"]
[Wed Dec 31 04:57:13.118085 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:1807] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVQ8qcYN9k_fnLM-n47OlAAAAMg"]
[Wed Dec 31 04:57:13.431851 2025] [:error] [pid 33003:tid 33044] [client 20.171.250.68:1913] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVQ8qbOkdrCgTt0MxWLT_gAAAEY"]
[Wed Dec 31 04:57:13.756597 2025] [:error] [pid 33109:tid 33129] [client 20.171.250.68:1810] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aVQ8qcYN9k_fnLM-n47OlgAAANI"]
[Wed Dec 31 04:57:14.069729 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:2021] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aVQ8qsYN9k_fnLM-n47OlwAAAM0"]
[Wed Dec 31 04:57:14.415037 2025] [:error] [pid 33002:tid 33031] [client 20.171.250.68:1809] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aVQ8qvnsZEcORmTFnricQwAAABQ"]
[Wed Dec 31 04:57:14.738412 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:1825] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aVQ8qrOkdrCgTt0MxWLUAAAAAFQ"]
[Wed Dec 31 04:57:15.096969 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:1740] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVQ8q8YN9k_fnLM-n47OnAAAAMY"]
[Wed Dec 31 04:57:15.430129 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1846] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVQ8q8YN9k_fnLM-n47OngAAANg"]
[Wed Dec 31 04:57:15.770783 2025] [:error] [pid 33002:tid 33011] [client 20.171.250.68:1729] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVQ8q_nsZEcORmTFnricRwAAAAA"]
[Wed Dec 31 04:57:16.103247 2025] [:error] [pid 33109:tid 33120] [client 20.171.250.68:1730] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVQ8rMYN9k_fnLM-n47OoQAAAMk"]
[Wed Dec 31 04:57:16.452110 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:6493] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVQ8rPogj9CrK-80KNwGRAAAAJE"]
[Wed Dec 31 04:57:16.773173 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:1777] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVQ8rLOkdrCgTt0MxWLUAgAAAEQ"]
[Wed Dec 31 04:57:17.129736 2025] [:error] [pid 33002:tid 33025] [client 20.171.250.68:1845] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVQ8rfnsZEcORmTFnricSQAAAA4"]
[Wed Dec 31 04:57:17.445457 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:1905] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVQ8rcYN9k_fnLM-n47OpwAAANQ"]
[Wed Dec 31 04:57:17.763776 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:6438] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVQ8rcYN9k_fnLM-n47OqAAAANc"]
[Wed Dec 31 04:57:18.088850 2025] [:error] [pid 33004:tid 33074] [client 20.171.250.68:1735] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVQ8rvogj9CrK-80KNwGRQAAAIk"]
[Wed Dec 31 04:57:18.415097 2025] [:error] [pid 33002:tid 33023] [client 20.171.250.68:1821] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVQ8rvnsZEcORmTFnricTQAAAAw"]
[Wed Dec 31 04:57:18.810699 2025] [:error] [pid 33002:tid 33034] [client 20.171.250.68:1749] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVQ8rvnsZEcORmTFnricTgAAABc"]
[Wed Dec 31 04:57:19.126451 2025] [:error] [pid 33002:tid 33029] [client 20.171.250.68:1864] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aVQ8r_nsZEcORmTFnricUAAAABI"]
[Wed Dec 31 04:57:20.454028 2025] [:error] [pid 33109:tid 33121] [client 20.171.250.68:1859] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Dec 31 04:57:20.612398 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1859] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Wed Dec 31 04:57:20.772430 2025] [:error] [pid 33109:tid 33129] [client 20.171.250.68:1859] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Dec 31 04:57:20.935402 2025] [:error] [pid 33109:tid 33111] [client 20.171.250.68:1859] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Dec 31 04:57:21.114282 2025] [:error] [pid 33109:tid 33115] [client 20.171.250.68:1859] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Wed Dec 31 04:57:21.274985 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1859] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVQ8scYN9k_fnLM-n47OvwAAANg"]
[Wed Dec 31 04:57:21.595751 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:1805] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVQ8scYN9k_fnLM-n47OwAAAAME"]
[Wed Dec 31 04:57:21.912729 2025] [:error] [pid 33002:tid 33014] [client 20.171.250.68:1928] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVQ8sfnsZEcORmTFnricVQAAAAM"]
[Wed Dec 31 04:57:22.241229 2025] [:error] [pid 33002:tid 33011] [client 20.171.250.68:1833] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVQ8svnsZEcORmTFnricVgAAAAA"]
[Wed Dec 31 04:57:22.569347 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1874] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVQ8ssYN9k_fnLM-n47OxQAAANc"]
[Wed Dec 31 04:57:22.902233 2025] [:error] [pid 33002:tid 33030] [client 20.171.250.68:6466] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVQ8svnsZEcORmTFnricWAAAABM"]
[Wed Dec 31 04:57:23.216737 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:1733] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVQ8s8YN9k_fnLM-n47OyQAAAMM"]
[Wed Dec 31 04:57:23.555477 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:1945] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVQ8s8YN9k_fnLM-n47OygAAAM0"]
[Wed Dec 31 04:57:23.883619 2025] [:error] [pid 33109:tid 33115] [client 20.171.250.68:1970] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVQ8s8YN9k_fnLM-n47OywAAAMQ"]
[Wed Dec 31 04:57:24.211403 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:1760] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVQ8tMYN9k_fnLM-n47OzAAAAMY"]
[Wed Dec 31 04:57:24.528270 2025] [:error] [pid 33109:tid 33120] [client 20.171.250.68:1738] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVQ8tMYN9k_fnLM-n47OzQAAAMk"]
[Wed Dec 31 04:57:24.847062 2025] [:error] [pid 33002:tid 33032] [client 20.171.250.68:1753] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVQ8tPnsZEcORmTFnricXAAAABU"]
[Wed Dec 31 04:57:25.181792 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1915] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVQ8tcYN9k_fnLM-n47OzgAAANc"]
[Wed Dec 31 04:57:25.505534 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1764] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVQ8tbOkdrCgTt0MxWLUBAAAAE0"]
[Wed Dec 31 04:57:25.823273 2025] [:error] [pid 33002:tid 33035] [client 20.171.250.68:1863] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVQ8tfnsZEcORmTFnricXwAAABg"]
[Wed Dec 31 04:57:26.203196 2025] [:error] [pid 33002:tid 33026] [client 20.171.250.68:1827] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVQ8tvnsZEcORmTFnricYAAAAA8"]
[Wed Dec 31 04:57:26.524437 2025] [:error] [pid 33003:tid 33038] [client 20.171.250.68:1866] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVQ8trOkdrCgTt0MxWLUBgAAAEA"]
[Wed Dec 31 04:57:26.838944 2025] [:error] [pid 33003:tid 33059] [client 20.171.250.68:1829] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVQ8trOkdrCgTt0MxWLUBwAAAFU"]
[Wed Dec 31 04:57:27.188837 2025] [:error] [pid 33002:tid 33024] [client 20.171.250.68:1944] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVQ8t_nsZEcORmTFnricYQAAAA0"]
[Wed Dec 31 04:57:27.508978 2025] [:error] [pid 33004:tid 33067] [client 20.171.250.68:1867] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVQ8t_ogj9CrK-80KNwGSAAAAII"]
[Wed Dec 31 04:57:27.824534 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:1849] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVQ8t8YN9k_fnLM-n47O0wAAANM"]
[Wed Dec 31 04:57:28.218514 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:1684] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVQ8uPogj9CrK-80KNwGSgAAAIQ"]
[Wed Dec 31 04:57:28.590408 2025] [:error] [pid 33004:tid 33081] [client 20.171.250.68:1844] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVQ8uPogj9CrK-80KNwGSwAAAJA"]
[Wed Dec 31 04:57:28.910013 2025] [:error] [pid 33002:tid 33021] [client 20.171.250.68:1816] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVQ8uPnsZEcORmTFnricYgAAAAo"]
[Wed Dec 31 04:57:29.238845 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:1667] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVQ8ucYN9k_fnLM-n47O1QAAAMg"]
[Wed Dec 31 04:57:29.595111 2025] [:error] [pid 33003:tid 33044] [client 20.171.250.68:1808] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVQ8ubOkdrCgTt0MxWLUCQAAAEY"]
[Wed Dec 31 04:57:29.931701 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:1889] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVQ8ubOkdrCgTt0MxWLUCgAAAEk"]
[Wed Dec 31 04:57:30.285367 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:1823] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVQ8urOkdrCgTt0MxWLUDAAAAFQ"]
[Wed Dec 31 04:57:30.655180 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:1746] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs15.php"] [unique_id "aVQ8urOkdrCgTt0MxWLUDgAAAEc"]
[Wed Dec 31 04:57:31.085564 2025] [:error] [pid 33002:tid 33016] [client 20.171.250.68:1780] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs15.php"] [unique_id "aVQ8u_nsZEcORmTFnricZQAAAAU"]
[Wed Dec 31 04:57:31.398243 2025] [:error] [pid 33002:tid 33019] [client 20.171.250.68:1834] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs15.php"] [unique_id "aVQ8u_nsZEcORmTFnricZgAAAAg"]
[Wed Dec 31 04:57:31.731378 2025] [:error] [pid 33004:tid 33070] [client 20.171.250.68:1879] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs15.php"] [unique_id "aVQ8u_ogj9CrK-80KNwGTQAAAIU"]
[Wed Dec 31 04:57:32.061687 2025] [:error] [pid 33004:tid 33065] [client 20.171.250.68:1840] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aVQ8vPogj9CrK-80KNwGUAAAAIA"]
[Wed Dec 31 04:57:32.378723 2025] [:error] [pid 33002:tid 33029] [client 20.171.250.68:1744] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aVQ8vPnsZEcORmTFnricaAAAABI"]
[Wed Dec 31 04:57:32.708365 2025] [:error] [pid 33004:tid 33086] [client 20.171.250.68:1787] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aVQ8vPogj9CrK-80KNwGUQAAAJU"]
[Wed Dec 31 04:57:33.022438 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:1742] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aVQ8vfogj9CrK-80KNwGUgAAAJg"]
[Wed Dec 31 04:57:33.341124 2025] [:error] [pid 33004:tid 33071] [client 20.171.250.68:1736] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVQ8vfogj9CrK-80KNwGVAAAAIY"]
[Wed Dec 31 04:57:33.699853 2025] [:error] [pid 33003:tid 33061] [client 20.171.250.68:1837] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVQ8vbOkdrCgTt0MxWLUEQAAAFc"]
[Wed Dec 31 04:57:34.021644 2025] [:error] [pid 33002:tid 33017] [client 20.171.250.68:1916] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVQ8vvnsZEcORmTFnricawAAAAY"]
[Wed Dec 31 04:57:34.372771 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:1836] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVQ8vrOkdrCgTt0MxWLUEwAAAFg"]
[Wed Dec 31 04:57:34.689105 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1848] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVQ8vrOkdrCgTt0MxWLUFAAAAEw"]
[Wed Dec 31 04:57:35.018993 2025] [:error] [pid 33002:tid 33013] [client 20.171.250.68:1981] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVQ8v_nsZEcORmTFnricbAAAAAI"]
[Wed Dec 31 04:57:35.373115 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:1748] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVQ8v8YN9k_fnLM-n47O1wAAAMU"]
[Wed Dec 31 04:57:35.689222 2025] [:error] [pid 33002:tid 33026] [client 20.171.250.68:1788] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVQ8v_nsZEcORmTFnricbQAAAA8"]
[Wed Dec 31 04:57:36.003183 2025] [:error] [pid 33002:tid 33031] [client 20.171.250.68:1779] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVQ8wPnsZEcORmTFnricbwAAABQ"]
[Wed Dec 31 04:57:36.317161 2025] [:error] [pid 33002:tid 33024] [client 20.171.250.68:1830] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVQ8wPnsZEcORmTFnriccAAAAA0"]
[Wed Dec 31 04:57:36.636868 2025] [:error] [pid 33002:tid 33028] [client 20.171.250.68:1766] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVQ8wPnsZEcORmTFnriccgAAABE"]
[Wed Dec 31 04:57:36.959215 2025] [:error] [pid 33109:tid 33127] [client 20.171.250.68:1818] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVQ8wMYN9k_fnLM-n47O2QAAANA"]
[Wed Dec 31 04:57:37.293113 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1835] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVQ8wcYN9k_fnLM-n47O2gAAANc"]
[Wed Dec 31 04:57:37.608396 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:1843] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVQ8wbOkdrCgTt0MxWLUGgAAAEc"]
[Wed Dec 31 04:57:37.934332 2025] [:error] [pid 33004:tid 33080] [client 20.171.250.68:1619] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVQ8wfogj9CrK-80KNwGXwAAAI8"]
[Wed Dec 31 04:57:38.320373 2025] [:error] [pid 33109:tid 33126] [client 20.171.250.68:1903] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVQ8wsYN9k_fnLM-n47O3AAAAM8"]
[Wed Dec 31 04:57:38.636308 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1852] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVQ8wsYN9k_fnLM-n47O4AAAAM4"]
[Wed Dec 31 04:57:38.964954 2025] [:error] [pid 33004:tid 33070] [client 20.171.250.68:1754] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVQ8wvogj9CrK-80KNwGYAAAAIU"]
[Wed Dec 31 04:57:39.313090 2025] [:error] [pid 33003:tid 33055] [client 20.171.250.68:1675] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVQ8w7OkdrCgTt0MxWLUHAAAAFE"]
[Wed Dec 31 04:57:39.629594 2025] [:error] [pid 33003:tid 33054] [client 20.171.250.68:1797] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVQ8w7OkdrCgTt0MxWLUHQAAAFA"]
[Wed Dec 31 04:57:39.962277 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:1673] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aVQ8w_ogj9CrK-80KNwGYgAAAJg"]
[Wed Dec 31 04:57:40.322721 2025] [:error] [pid 33004:tid 33071] [client 20.171.250.68:1855] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aVQ8xPogj9CrK-80KNwGYwAAAIY"]
[Wed Dec 31 04:57:40.636628 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:2032] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aVQ8xMYN9k_fnLM-n47O5QAAANc"]
[Wed Dec 31 04:57:40.982294 2025] [:error] [pid 33109:tid 33125] [client 20.171.250.68:1776] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aVQ8xMYN9k_fnLM-n47O5wAAAM4"]
[Wed Dec 31 04:57:41.446884 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:2011] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVQ8xbOkdrCgTt0MxWLUIAAAAE4"]
[Wed Dec 31 04:57:41.801332 2025] [:error] [pid 33003:tid 33061] [client 20.171.250.68:1668] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVQ8xbOkdrCgTt0MxWLUIQAAAFc"]
[Wed Dec 31 04:57:42.340706 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1759] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVQ8xrOkdrCgTt0MxWLUIgAAAEw"]
[Wed Dec 31 04:57:42.700680 2025] [:error] [pid 33002:tid 33017] [client 20.171.250.68:1820] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVQ8xvnsZEcORmTFnriceAAAAAY"]
[Wed Dec 31 04:57:43.205602 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1689] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVQ8x7OkdrCgTt0MxWLUJAAAAE0"]
[Wed Dec 31 04:57:43.573595 2025] [:error] [pid 33004:tid 33076] [client 20.171.250.68:1739] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVQ8x_ogj9CrK-80KNwGZgAAAIs"]
[Wed Dec 31 04:57:44.220071 2025] [:error] [pid 33002:tid 33024] [client 20.171.250.68:1716] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVQ8yPnsZEcORmTFnricgQAAAA0"]
[Wed Dec 31 04:57:44.615409 2025] [:error] [pid 33002:tid 33021] [client 20.171.250.68:1690] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVQ8yPnsZEcORmTFnrichQAAAAo"]
[Wed Dec 31 04:57:45.085407 2025] [:error] [pid 33109:tid 33121] [client 20.171.250.68:1878] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVQ8ycYN9k_fnLM-n47O7AAAAMo"]
[Wed Dec 31 04:57:45.655623 2025] [:error] [pid 33002:tid 33015] [client 20.171.250.68:1697] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVQ8yfnsZEcORmTFnricjQAAAAQ"]
[Wed Dec 31 04:57:46.411831 2025] [:error] [pid 33003:tid 33043] [client 20.171.250.68:1680] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVQ8yrOkdrCgTt0MxWLUNAAAAEU"]
[Wed Dec 31 04:57:46.935271 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:1860] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVQ8yrOkdrCgTt0MxWLUNQAAAFg"]
[Wed Dec 31 04:57:47.400370 2025] [:error] [pid 33002:tid 33024] [client 20.171.250.68:1822] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVQ8y_nsZEcORmTFnrickgAAAA0"]
[Wed Dec 31 04:57:47.861627 2025] [:error] [pid 33004:tid 33075] [client 20.171.250.68:1791] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVQ8y_ogj9CrK-80KNwGegAAAIo"]
[Wed Dec 31 04:57:48.237770 2025] [:error] [pid 33109:tid 33126] [client 20.171.250.68:1781] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVQ8zMYN9k_fnLM-n47O8AAAAM8"]
[Wed Dec 31 04:57:48.576129 2025] [:error] [pid 33109:tid 33122] [client 20.171.250.68:1623] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVQ8zMYN9k_fnLM-n47O8gAAAMs"]
[Wed Dec 31 04:57:48.895723 2025] [:error] [pid 33004:tid 33078] [client 20.171.250.68:1773] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVQ8zPogj9CrK-80KNwGfgAAAI0"]
[Wed Dec 31 04:57:49.249148 2025] [:error] [pid 33003:tid 33058] [client 20.171.250.68:1688] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVQ8zbOkdrCgTt0MxWLUPQAAAFQ"]
[Wed Dec 31 04:57:49.616392 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:1606] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVQ8zfogj9CrK-80KNwGgAAAAJg"]
[Wed Dec 31 04:57:49.948441 2025] [:error] [pid 33003:tid 33053] [client 20.171.250.68:1669] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVQ8zbOkdrCgTt0MxWLUPwAAAE8"]
[Wed Dec 31 04:57:50.273873 2025] [:error] [pid 33004:tid 33074] [client 20.171.250.68:1698] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVQ8zvogj9CrK-80KNwGggAAAIk"]
[Wed Dec 31 04:57:50.705761 2025] [:error] [pid 33004:tid 33088] [client 20.171.250.68:1670] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVQ8zvogj9CrK-80KNwGhAAAAJc"]
[Wed Dec 31 04:57:51.037700 2025] [:error] [pid 33003:tid 33054] [client 20.171.250.68:1919] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVQ8z7OkdrCgTt0MxWLUQQAAAFA"]
[Wed Dec 31 04:57:51.354721 2025] [:error] [pid 33003:tid 33060] [client 20.171.250.68:1814] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVQ8z7OkdrCgTt0MxWLUQwAAAFY"]
[Wed Dec 31 04:57:51.717654 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:1767] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVQ8z8YN9k_fnLM-n47O9gAAAMg"]
[Wed Dec 31 04:57:52.031278 2025] [:error] [pid 33004:tid 33079] [client 20.171.250.68:1853] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVQ80Pogj9CrK-80KNwGiAAAAI4"]
[Wed Dec 31 04:57:52.350150 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:6440] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVQ80MYN9k_fnLM-n47O-QAAANQ"]
[Wed Dec 31 04:57:52.679365 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:1676] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVQ80MYN9k_fnLM-n47O-gAAAM0"]
[Wed Dec 31 04:57:53.090228 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:1768] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVQ80cYN9k_fnLM-n47O_QAAAME"]
[Wed Dec 31 04:57:53.406728 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1832] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVQ80cYN9k_fnLM-n47O_wAAANc"]
[Wed Dec 31 04:57:53.724056 2025] [:error] [pid 33109:tid 33120] [client 20.171.250.68:1703] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVQ80cYN9k_fnLM-n47PAAAAAMk"]
[Wed Dec 31 04:57:54.049469 2025] [:error] [pid 33109:tid 33126] [client 20.171.250.68:1847] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVQ80sYN9k_fnLM-n47PAQAAAM8"]
[Wed Dec 31 04:57:54.363857 2025] [:error] [pid 33109:tid 33129] [client 20.171.250.68:1752] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVQ80sYN9k_fnLM-n47PAgAAANI"]
[Wed Dec 31 04:57:54.699683 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1757] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVQ80sYN9k_fnLM-n47PBAAAANg"]
[Wed Dec 31 04:57:55.016289 2025] [:error] [pid 33002:tid 33027] [client 20.171.250.68:1763] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVQ80_nsZEcORmTFnricngAAABA"]
[Wed Dec 31 04:57:55.346889 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:1702] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVQ808YN9k_fnLM-n47PBwAAAMM"]
[Wed Dec 31 04:57:55.661595 2025] [:error] [pid 33004:tid 33068] [client 20.171.250.68:1784] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVQ80_ogj9CrK-80KNwGiQAAAIM"]
[Wed Dec 31 04:57:56.005018 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:1704] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVQ81MYN9k_fnLM-n47PCgAAAMU"]
[Wed Dec 31 04:57:56.379912 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:1785] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVQ81MYN9k_fnLM-n47PEAAAANM"]
[Wed Dec 31 04:57:56.729564 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:1681] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVQ81LOkdrCgTt0MxWLUSwAAAFg"]
[Wed Dec 31 04:57:57.054052 2025] [:error] [pid 33002:tid 33012] [client 20.171.250.68:1714] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVQ81fnsZEcORmTFnricogAAAAE"]
[Wed Dec 31 04:57:57.368075 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1765] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVQ81bOkdrCgTt0MxWLUTgAAAE0"]
[Wed Dec 31 04:57:57.701631 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:1838] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVQ81cYN9k_fnLM-n47PJgAAANU"]
[Wed Dec 31 04:57:58.019699 2025] [:error] [pid 33002:tid 33013] [client 20.171.250.68:1786] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVQ81vnsZEcORmTFnricowAAAAI"]
[Wed Dec 31 04:57:58.334117 2025] [:error] [pid 33004:tid 33071] [client 20.171.250.68:1707] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVQ81vogj9CrK-80KNwGjQAAAIY"]
[Wed Dec 31 04:57:58.650631 2025] [:error] [pid 33004:tid 33072] [client 20.171.250.68:1678] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVQ81vogj9CrK-80KNwGkQAAAIc"]
[Wed Dec 31 04:57:58.964662 2025] [:error] [pid 33003:tid 33041] [client 20.171.250.68:1741] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVQ81rOkdrCgTt0MxWLUUQAAAEM"]
[Wed Dec 31 04:57:59.278819 2025] [:error] [pid 33002:tid 33026] [client 20.171.250.68:1882] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVQ81_nsZEcORmTFnricpAAAAA8"]
[Wed Dec 31 04:57:59.655407 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1722] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVQ818YN9k_fnLM-n47PLAAAANg"]
[Wed Dec 31 04:57:59.973982 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1745] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVQ818YN9k_fnLM-n47PLQAAANc"]
[Wed Dec 31 04:58:00.288892 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:1677] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVQ82LOkdrCgTt0MxWLUVAAAAEQ"]
[Wed Dec 31 04:58:00.605996 2025] [:error] [pid 33002:tid 33028] [client 20.171.250.68:1790] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVQ82PnsZEcORmTFnricpQAAABE"]
[Wed Dec 31 04:58:00.952206 2025] [:error] [pid 33002:tid 33021] [client 20.171.250.68:1699] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aVQ82PnsZEcORmTFnricpgAAAAo"]
[Wed Dec 31 04:58:01.276737 2025] [:error] [pid 33003:tid 33055] [client 20.171.250.68:1762] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aVQ82bOkdrCgTt0MxWLUWAAAAFE"]
[Wed Dec 31 04:58:01.591775 2025] [:error] [pid 33004:tid 33073] [client 20.171.250.68:1687] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aVQ82fogj9CrK-80KNwGlwAAAIg"]
[Wed Dec 31 04:58:01.907329 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:1694] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aVQ82cYN9k_fnLM-n47PLwAAAMI"]
[Wed Dec 31 04:58:02.221092 2025] [:error] [pid 33109:tid 33117] [client 20.171.250.68:1691] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aVQ82sYN9k_fnLM-n47PMAAAAMY"]
[Wed Dec 31 04:58:02.539165 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1726] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aVQ82rOkdrCgTt0MxWLUWwAAAEw"]
[Wed Dec 31 04:58:02.861930 2025] [:error] [pid 33109:tid 33116] [client 20.171.250.68:1725] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aVQ82sYN9k_fnLM-n47PMwAAAMU"]
[Wed Dec 31 04:58:03.209801 2025] [:error] [pid 33002:tid 33018] [client 20.171.250.68:1696] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aVQ82_nsZEcORmTFnricqQAAAAc"]
[Wed Dec 31 04:58:03.543240 2025] [:error] [pid 33109:tid 33112] [client 20.171.250.68:1778] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVQ828YN9k_fnLM-n47PNQAAAME"]
[Wed Dec 31 04:58:03.952685 2025] [:error] [pid 33004:tid 33074] [client 20.171.250.68:1607] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVQ82_ogj9CrK-80KNwGnwAAAIk"]
[Wed Dec 31 04:58:04.272878 2025] [:error] [pid 33109:tid 33128] [client 20.171.250.68:1614] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVQ83MYN9k_fnLM-n47PNwAAANE"]
[Wed Dec 31 04:58:04.626079 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:1772] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVQ83MYN9k_fnLM-n47POAAAANY"]
[Wed Dec 31 04:58:05.050285 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:1671] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVQ83cYN9k_fnLM-n47POQAAAMM"]
[Wed Dec 31 04:58:05.410796 2025] [:error] [pid 33109:tid 33123] [client 20.171.250.68:1842] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVQ83cYN9k_fnLM-n47POwAAAMw"]
[Wed Dec 31 04:58:05.767877 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:1955] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVQ83cYN9k_fnLM-n47PPwAAANQ"]
[Wed Dec 31 04:58:06.196366 2025] [:error] [pid 33109:tid 33132] [client 20.171.250.68:1537] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVQ83sYN9k_fnLM-n47PQAAAANU"]
[Wed Dec 31 04:58:06.693414 2025] [:error] [pid 33003:tid 33054] [client 20.171.250.68:1751] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVQ83rOkdrCgTt0MxWLUZQAAAFA"]
[Wed Dec 31 04:58:07.065281 2025] [:error] [pid 33003:tid 33053] [client 20.171.250.68:1666] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVQ837OkdrCgTt0MxWLUZwAAAE8"]
[Wed Dec 31 04:58:07.760055 2025] [:error] [pid 33003:tid 33050] [client 20.171.250.68:1782] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVQ837OkdrCgTt0MxWLUaQAAAEw"]
[Wed Dec 31 04:58:08.159057 2025] [:error] [pid 33003:tid 33043] [client 20.171.250.68:1657] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVQ84LOkdrCgTt0MxWLUawAAAEU"]
[Wed Dec 31 04:58:08.486156 2025] [:error] [pid 33004:tid 33085] [client 20.171.250.68:1612] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVQ84Pogj9CrK-80KNwGpAAAAJQ"]
[Wed Dec 31 04:58:08.824384 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:1640] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVQ84LOkdrCgTt0MxWLUbgAAAEk"]
[Wed Dec 31 04:58:09.307607 2025] [:error] [pid 33003:tid 33038] [client 20.171.250.68:1624] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVQ84bOkdrCgTt0MxWLUcAAAAEA"]
[Wed Dec 31 04:58:09.645529 2025] [:error] [pid 33004:tid 33089] [client 20.171.250.68:1665] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVQ84fogj9CrK-80KNwGpgAAAJg"]
[Wed Dec 31 04:58:09.967569 2025] [:error] [pid 33004:tid 33088] [client 20.171.250.68:1775] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVQ84fogj9CrK-80KNwGqAAAAJc"]
[Wed Dec 31 04:58:10.318620 2025] [:error] [pid 33109:tid 33113] [client 20.171.250.68:1692] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVQ84sYN9k_fnLM-n47PRwAAAMI"]
[Wed Dec 31 04:58:10.633493 2025] [:error] [pid 33004:tid 33066] [client 20.171.250.68:1977] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVQ84vogj9CrK-80KNwGqQAAAIE"]
[Wed Dec 31 04:58:10.950448 2025] [:error] [pid 33109:tid 33124] [client 20.171.250.68:1685] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVQ84sYN9k_fnLM-n47PSAAAAM0"]
[Wed Dec 31 04:58:11.262929 2025] [:error] [pid 33004:tid 33069] [client 20.171.250.68:1556] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aVQ84_ogj9CrK-80KNwGrAAAAIQ"]
[Wed Dec 31 04:58:11.583186 2025] [:error] [pid 33109:tid 33131] [client 20.171.250.68:1710] [client 20.171.250.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVQ848YN9k_fnLM-n47PSgAAANQ"]
[Wed Dec 31 04:58:11.898518 2025] [:error] [pid 33109:tid 33130] [client 20.171.250.68:1602] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVQ848YN9k_fnLM-n47PTAAAANM"]
[Wed Dec 31 04:58:12.234966 2025] [:error] [pid 33109:tid 33135] [client 20.171.250.68:1743] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVQ85MYN9k_fnLM-n47PTQAAANg"]
[Wed Dec 31 04:58:12.642290 2025] [:error] [pid 33002:tid 33026] [client 20.171.250.68:1544] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVQ85PnsZEcORmTFnricrAAAAA8"]
[Wed Dec 31 04:58:12.957033 2025] [:error] [pid 33004:tid 33082] [client 20.171.250.68:2045] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aVQ85Pogj9CrK-80KNwGrgAAAJE"]
[Wed Dec 31 04:58:13.313506 2025] [:error] [pid 33003:tid 33045] [client 20.171.250.68:2039] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aVQ85bOkdrCgTt0MxWLUcQAAAEc"]
[Wed Dec 31 04:58:13.635528 2025] [:error] [pid 33004:tid 33087] [client 20.171.250.68:1789] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aVQ85fogj9CrK-80KNwGrwAAAJY"]
[Wed Dec 31 04:58:13.948675 2025] [:error] [pid 33004:tid 33080] [client 20.171.250.68:1831] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aVQ85fogj9CrK-80KNwGsQAAAI8"]
[Wed Dec 31 04:58:14.282931 2025] [:error] [pid 33109:tid 33133] [client 20.171.250.68:1622] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aVQ85sYN9k_fnLM-n47PTgAAANY"]
[Wed Dec 31 04:58:14.607392 2025] [:error] [pid 33003:tid 33039] [client 20.171.250.68:1727] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aVQ85rOkdrCgTt0MxWLUcwAAAEE"]
[Wed Dec 31 04:58:14.932773 2025] [:error] [pid 33003:tid 33054] [client 20.171.250.68:1783] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aVQ85rOkdrCgTt0MxWLUdAAAAFA"]
[Wed Dec 31 04:58:15.258417 2025] [:error] [pid 33109:tid 33114] [client 20.171.250.68:1771] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah24.php"] [unique_id "aVQ858YN9k_fnLM-n47PUAAAAMM"]
[Wed Dec 31 04:58:15.620022 2025] [:error] [pid 33002:tid 33035] [client 20.171.250.68:1901] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVQ85_nsZEcORmTFnricswAAABg"]
[Wed Dec 31 04:58:15.933725 2025] [:error] [pid 33004:tid 33068] [client 20.171.250.68:1705] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVQ85_ogj9CrK-80KNwGtAAAAIM"]
[Wed Dec 31 04:58:16.254993 2025] [:error] [pid 33003:tid 33056] [client 20.171.250.68:1545] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVQ86LOkdrCgTt0MxWLUdgAAAFI"]
[Wed Dec 31 04:58:16.596229 2025] [:error] [pid 33109:tid 33119] [client 20.171.250.68:1701] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVQ86MYN9k_fnLM-n47PUQAAAMg"]
[Wed Dec 31 04:58:16.914812 2025] [:error] [pid 33109:tid 33129] [client 20.171.250.68:1634] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVQ86MYN9k_fnLM-n47PUgAAANI"]
[Wed Dec 31 04:58:17.235977 2025] [:error] [pid 33003:tid 33046] [client 20.171.250.68:1700] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVQ86bOkdrCgTt0MxWLUeAAAAEg"]
[Wed Dec 31 04:58:17.571069 2025] [:error] [pid 33003:tid 33061] [client 20.171.250.68:1644] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVQ86bOkdrCgTt0MxWLUeQAAAFc"]
[Wed Dec 31 04:58:17.890895 2025] [:error] [pid 33003:tid 33043] [client 20.171.250.68:1723] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVQ86bOkdrCgTt0MxWLUegAAAEU"]
[Wed Dec 31 04:58:18.211092 2025] [:error] [pid 33003:tid 33051] [client 20.171.250.68:1613] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVQ86rOkdrCgTt0MxWLUewAAAE0"]
[Wed Dec 31 04:58:18.635916 2025] [:error] [pid 33003:tid 33040] [client 20.171.250.68:1770] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVQ86rOkdrCgTt0MxWLUfAAAAEI"]
[Wed Dec 31 04:58:19.067392 2025] [:error] [pid 33003:tid 33047] [client 20.171.250.68:1851] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVQ867OkdrCgTt0MxWLUfgAAAEk"]
[Wed Dec 31 04:58:19.418885 2025] [:error] [pid 33003:tid 33052] [client 20.171.250.68:1712] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVQ867OkdrCgTt0MxWLUfwAAAE4"]
[Wed Dec 31 04:58:19.787805 2025] [:error] [pid 33003:tid 33062] [client 20.171.250.68:1750] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVQ867OkdrCgTt0MxWLUgAAAAFg"]
[Wed Dec 31 04:58:20.102095 2025] [:error] [pid 33003:tid 33059] [client 20.171.250.68:1908] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVQ87LOkdrCgTt0MxWLUgQAAAFU"]
[Wed Dec 31 04:58:20.425890 2025] [:error] [pid 33109:tid 33134] [client 20.171.250.68:1643] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVQ87MYN9k_fnLM-n47PVAAAANc"]
[Wed Dec 31 04:58:20.740457 2025] [:error] [pid 33003:tid 33038] [client 20.171.250.68:1651] [client 20.171.250.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVQ87LOkdrCgTt0MxWLUggAAAEA"]
[Wed Dec 31 04:58:21.065740 2025] [:error] [pid 33003:tid 33048] [client 20.171.250.68:1695] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs18.php
[Wed Dec 31 04:58:21.226139 2025] [:error] [pid 33003:tid 33042] [client 20.171.250.68:1695] File does not exist: /usr/local/apache/htdocs/suspended-page/claa.php
[Wed Dec 31 06:44:36.924315 2025] [:error] [pid 33004:tid 33089] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php, referer: https://duckduckgo.com/
[Wed Dec 31 06:44:37.015038 2025] [:error] [pid 33004:tid 33071] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.de/
[Wed Dec 31 06:44:37.106732 2025] [:error] [pid 33004:tid 33082] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php, referer: https://www.yahoo.com/
[Wed Dec 31 06:44:37.199350 2025] [:error] [pid 33004:tid 33085] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.co.uk/
[Wed Dec 31 06:44:37.292339 2025] [:error] [pid 33004:tid 33066] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.com/
[Wed Dec 31 06:44:37.383098 2025] [:error] [pid 33004:tid 33069] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.google.de/
[Wed Dec 31 06:44:37.475491 2025] [:error] [pid 33004:tid 33079] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.de/
[Wed Dec 31 06:44:37.656806 2025] [:error] [pid 33004:tid 33087] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.com/
[Wed Dec 31 06:44:37.747927 2025] [:error] [pid 33004:tid 33081] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.yahoo.com/
[Wed Dec 31 06:44:37.838267 2025] [:error] [pid 33004:tid 33070] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.de/
[Wed Dec 31 06:44:37.929006 2025] [:error] [pid 33004:tid 33067] [client 4.194.133.126:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php, referer: https://www.google.com/
[Wed Dec 31 06:44:39.357984 2025] [:error] [pid 33004:tid 33067] [client 4.194.133.126:36474] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRV1_ogj9CrK-80KNwz9AAAAII"], referer: https://www.google.co.uk/
[Wed Dec 31 06:44:39.564619 2025] [:error] [pid 33003:tid 33061] [client 4.194.133.126:36427] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRV17OkdrCgTt0MxWL_YgAAAFc"], referer: https://www.bing.com/
[Wed Dec 31 06:44:39.833526 2025] [:error] [pid 26113:tid 26129] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/alfav4.1-tesla.php, referer: https://www.google.co.uk/
[Wed Dec 31 06:44:39.923819 2025] [:error] [pid 26113:tid 26125] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.com/
[Wed Dec 31 06:44:40.013500 2025] [:error] [pid 26113:tid 26135] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/black.php, referer: https://www.google.fr/
[Wed Dec 31 06:44:40.103686 2025] [:error] [pid 26113:tid 26133] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.yahoo.com/
[Wed Dec 31 06:44:40.196252 2025] [:error] [pid 26113:tid 26121] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://duckduckgo.com/
[Wed Dec 31 06:44:40.286151 2025] [:error] [pid 26113:tid 26128] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://duckduckgo.com/
[Wed Dec 31 06:44:40.465953 2025] [:error] [pid 26113:tid 26139] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/cyber.php, referer: https://www.google.fr/
[Wed Dec 31 06:44:40.556473 2025] [:error] [pid 26113:tid 26120] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.co.uk/
[Wed Dec 31 06:44:40.646915 2025] [:error] [pid 26113:tid 26126] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/fx.php, referer: https://duckduckgo.com/
[Wed Dec 31 06:44:41.190336 2025] [:error] [pid 26113:tid 26132] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php, referer: https://www.yahoo.com/
[Wed Dec 31 06:44:41.282404 2025] [:error] [pid 26113:tid 26116] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.fr/
[Wed Dec 31 06:44:41.372798 2025] [:error] [pid 26113:tid 26130] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php, referer: https://www.google.de/
[Wed Dec 31 06:44:41.462999 2025] [:error] [pid 26113:tid 26117] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.de/
[Wed Dec 31 06:44:41.552878 2025] [:error] [pid 26113:tid 26129] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://www.google.fr/
[Wed Dec 31 06:44:41.644728 2025] [:error] [pid 26113:tid 26125] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Wed Dec 31 06:44:41.735255 2025] [:error] [pid 26113:tid 26135] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://www.google.com/
[Wed Dec 31 06:44:41.825310 2025] [:error] [pid 26113:tid 26121] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.com/
[Wed Dec 31 06:44:41.921283 2025] [:error] [pid 26113:tid 26128] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/tmp.php, referer: https://duckduckgo.com/
[Wed Dec 31 06:44:42.011869 2025] [:error] [pid 26113:tid 26124] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php, referer: https://www.google.de/
[Wed Dec 31 06:44:42.103132 2025] [:error] [pid 26113:tid 26139] [client 4.194.133.126:36476] File does not exist: /usr/local/apache/htdocs/suspended-page/uploaded_script.php, referer: https://www.google.de/
[Wed Dec 31 09:01:51.249442 2025] [:error] [pid 16597:tid 16667] [client 49.51.245.241:51508] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVR1_9vhHXdsvqaiLQErBgAAAU0"]
[Wed Dec 31 09:24:51.105250 2025] [:error] [pid 20484:tid 20505] [client 43.167.232.38:39706] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVR7Y5hjQxR09ihThyTnTAAAARM"]
[Wed Dec 31 14:06:05.171879 2025] [:error] [pid 48833:tid 48850] [client 60.188.57.0:43792] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVS9TWPnRNOqqZ1OQg-k1gAAAE8"]
[Wed Dec 31 16:08:10.807243 2025] [:error] [pid 48713:tid 48742] [client 138.197.17.1:62691] [client 138.197.17.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aVTZ6kyNMVAGtWvMliPHJAAAANg"], referer: binance.com
[Wed Dec 31 16:08:16.588904 2025] [:error] [pid 48713:tid 48719] [client 138.197.17.1:55350] [client 138.197.17.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/files/"] [unique_id "aVTZ8EyNMVAGtWvMliPHKQAAAME"], referer: binance.com
[Wed Dec 31 16:45:39.049372 2025] [:error] [pid 48715:tid 48779] [client 43.135.138.128:34850] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVTis2amQpQY7KfuoW1EXAAAAIc"]
[Wed Dec 31 16:54:51.145954 2025] [:error] [pid 48713:tid 48740] [client 43.153.122.30:56724] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVTk20yNMVAGtWvMliPQSgAAANY"]
[Wed Dec 31 20:23:14.993057 2025] [:error] [pid 48714:tid 48754] [client 43.138.68.113:52612] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVUVsr9PcChEHWa6ViuTjAAAAAk"]
[Thu Jan 01 07:55:31.047888 2026] [:error] [pid 58818:tid 58854] [client 49.51.39.209:53270] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVW382r6b3Nsqkrqu83vEgAAAEE"]
[Thu Jan 01 15:19:58.473801 2026] [:error] [pid 53873:tid 53897] [client 43.157.147.3:43150] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVYgHjmhp5IRNxK0rglMRgAAAZQ"]
[Thu Jan 01 15:33:16.234048 2026] [:error] [pid 58817:tid 58844] [client 43.165.65.75:33828] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVYjPFebWGLeUWiwYf9N3QAAABI"]
[Thu Jan 01 15:35:25.787762 2026] [:error] [pid 58924:tid 58950] [client 60.188.57.0:35876] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVYjvTYXM8NvhWQPUGtH2QAAANg"]
[Thu Jan 01 22:27:07.852881 2026] [:error] [pid 63887:tid 63900] [client 43.157.150.69:46068] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVaEOzYeTZeQR8aqQeV_twAAAEk"]
[Thu Jan 01 22:39:27.654667 2026] [:error] [pid 63889:tid 63950] [client 43.165.135.242:53134] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVaHH9U3sRpsUcz9MOCK2wAAAAQ"]
[Fri Jan 02 04:39:05.165720 2026] [:error] [pid 63208:tid 63232] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.google.de/
[Fri Jan 02 04:39:05.305860 2026] [:error] [pid 63208:tid 63215] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.com/
[Fri Jan 02 04:39:05.444388 2026] [:error] [pid 63208:tid 63227] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:05.583605 2026] [:error] [pid 63208:tid 63231] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:05.723910 2026] [:error] [pid 63208:tid 63229] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:05.864994 2026] [:error] [pid 63208:tid 63234] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:06.004262 2026] [:error] [pid 63208:tid 63211] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.com/
[Fri Jan 02 04:39:06.143347 2026] [:error] [pid 63208:tid 63225] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php, referer: https://www.google.com/
[Fri Jan 02 04:39:06.285558 2026] [:error] [pid 63208:tid 63217] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:06.430193 2026] [:error] [pid 63208:tid 63219] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:06.569405 2026] [:error] [pid 63208:tid 63222] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:07.919126 2026] [:error] [pid 63208:tid 63222] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Fri Jan 02 04:39:08.058745 2026] [:error] [pid 63208:tid 63212] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-header.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:08.198564 2026] [:error] [pid 63208:tid 63232] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:08.338918 2026] [:error] [pid 63208:tid 63216] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:08.478434 2026] [:error] [pid 63208:tid 63215] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Fri Jan 02 04:39:08.617789 2026] [:error] [pid 63208:tid 63230] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/alf.php, referer: https://www.google.de/
[Fri Jan 02 04:39:08.763976 2026] [:error] [pid 63208:tid 63227] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:08.905013 2026] [:error] [pid 63208:tid 63231] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php, referer: https://www.google.de/
[Fri Jan 02 04:39:09.044746 2026] [:error] [pid 63208:tid 63229] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:09.184050 2026] [:error] [pid 63208:tid 63235] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:09.325762 2026] [:error] [pid 63208:tid 63233] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:09.465249 2026] [:error] [pid 63208:tid 63214] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.com/
[Fri Jan 02 04:39:09.604047 2026] [:error] [pid 63208:tid 63211] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Fri Jan 02 04:39:09.744045 2026] [:error] [pid 63208:tid 63217] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:09.883055 2026] [:error] [pid 63208:tid 63219] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:10.022353 2026] [:error] [pid 63208:tid 63218] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.bing.com/
[Fri Jan 02 04:39:10.161531 2026] [:error] [pid 63208:tid 63212] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:10.300899 2026] [:error] [pid 63208:tid 63216] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:10.439928 2026] [:error] [pid 63208:tid 63215] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:10.579298 2026] [:error] [pid 63208:tid 63230] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:10.718923 2026] [:error] [pid 63208:tid 63227] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:10.858861 2026] [:error] [pid 63208:tid 63228] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:10.998403 2026] [:error] [pid 63208:tid 63231] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/favicon.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:11.138031 2026] [:error] [pid 63208:tid 63213] [client 74.225.136.96:35916] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:11.273944 2026] [:error] [pid 63208:tid 63221] [client 74.225.136.96:35916] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aVbbb3KLI9INGPLzfndc-QAAAMo"], referer: https://duckduckgo.com/
[Fri Jan 02 04:39:11.549972 2026] [:error] [pid 63208:tid 63214] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/fx.php, referer: https://www.bing.com/
[Fri Jan 02 04:39:11.689962 2026] [:error] [pid 63208:tid 63211] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.google.de/
[Fri Jan 02 04:39:11.830302 2026] [:error] [pid 63208:tid 63217] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php, referer: https://www.google.de/
[Fri Jan 02 04:39:11.969691 2026] [:error] [pid 63208:tid 63219] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:12.111209 2026] [:error] [pid 63208:tid 63226] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://www.bing.com/
[Fri Jan 02 04:39:12.251849 2026] [:error] [pid 63208:tid 63212] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:13.683998 2026] [:error] [pid 63208:tid 63212] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/help.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:13.823330 2026] [:error] [pid 63208:tid 63211] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:13.963994 2026] [:error] [pid 63208:tid 63217] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php, referer: https://www.bing.com/
[Fri Jan 02 04:39:14.104238 2026] [:error] [pid 63208:tid 63234] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:14.244721 2026] [:error] [pid 63208:tid 63219] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.de/
[Fri Jan 02 04:39:14.386636 2026] [:error] [pid 63208:tid 63218] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:15.861413 2026] [:error] [pid 63208:tid 63218] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:16.002091 2026] [:error] [pid 63208:tid 63215] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:16.142888 2026] [:error] [pid 63208:tid 63230] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.google.com/
[Fri Jan 02 04:39:16.282744 2026] [:error] [pid 63208:tid 63227] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:16.425004 2026] [:error] [pid 63208:tid 63231] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.google.com/
[Fri Jan 02 04:39:16.564988 2026] [:error] [pid 63208:tid 63220] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/root.php, referer: https://www.google.com/
[Fri Jan 02 04:39:16.704280 2026] [:error] [pid 63208:tid 63213] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:16.844309 2026] [:error] [pid 63208:tid 63221] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php, referer: https://www.bing.com/
[Fri Jan 02 04:39:16.984649 2026] [:error] [pid 63208:tid 63211] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/termps.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:17.127130 2026] [:error] [pid 63208:tid 63217] [client 74.225.136.96:25693] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:17.264267 2026] [:error] [pid 63208:tid 63219] [client 74.225.136.96:25693] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aVbbdXKLI9INGPLzfnddIQAAAMg"], referer: https://www.bing.com/
[Fri Jan 02 04:39:17.540974 2026] [:error] [pid 63098:tid 63131] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:17.680958 2026] [:error] [pid 63098:tid 63125] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:17.823327 2026] [:error] [pid 63098:tid 63116] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:17.964217 2026] [:error] [pid 63098:tid 63119] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:18.105929 2026] [:error] [pid 63098:tid 63109] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Fri Jan 02 04:39:18.245777 2026] [:error] [pid 63098:tid 63110] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-include.php, referer: https://www.google.fr/
[Fri Jan 02 04:39:18.384976 2026] [:error] [pid 63098:tid 63126] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php, referer: https://duckduckgo.com/
[Fri Jan 02 04:39:18.524787 2026] [:error] [pid 63098:tid 63115] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:18.698011 2026] [:error] [pid 63098:tid 63128] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.yahoo.com/
[Fri Jan 02 04:39:18.837877 2026] [:error] [pid 63098:tid 63112] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.com/
[Fri Jan 02 04:39:18.986271 2026] [:error] [pid 63098:tid 63124] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.google.com/
[Fri Jan 02 04:39:19.123047 2026] [:error] [pid 63098:tid 63111] [client 74.225.136.96:24266] [client 74.225.136.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.225.136.96, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVbbd8ez9k78gUs48kp9VQAAAAQ"], referer: https://www.google.co.uk/
[Fri Jan 02 04:39:19.126734 2026] [:error] [pid 63098:tid 63111] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:39:20.525933 2026] [:error] [pid 63098:tid 63111] [client 74.225.136.96:24266] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.co.uk/
[Fri Jan 02 04:43:27.319594 2026] [:error] [pid 63208:tid 63221] [client 117.62.235.53:33789] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVbcb3KLI9INGPLzfnde3gAAAMo"]
[Fri Jan 02 06:27:40.676738 2026] [:error] [pid 63208:tid 63230] [client 43.155.188.157:40258] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVb03HKLI9INGPLzfneOmwAAANM"]
[Fri Jan 02 06:38:38.392752 2026] [:error] [pid 63098:tid 63125] [client 43.173.1.57:36992] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVb3bsez9k78gUs48kqhJgAAABI"]
[Fri Jan 02 10:53:31.982100 2026] [:error] [pid 63099:tid 63142] [client 36.41.75.167:44966] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVczK8mCZokRPYUhzvhnWwAAAEg"]
[Fri Jan 02 19:43:17.598511 2026] [:error] [pid 63098:tid 63116] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Fri Jan 02 19:43:17.856663 2026] [:error] [pid 63098:tid 63124] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Jan 02 19:43:18.109489 2026] [:error] [pid 63098:tid 63128] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Fri Jan 02 19:43:18.362946 2026] [:error] [pid 63098:tid 63126] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Fri Jan 02 19:43:18.615081 2026] [:error] [pid 63098:tid 63120] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Fri Jan 02 19:43:18.867723 2026] [:error] [pid 63098:tid 63113] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Fri Jan 02 19:43:19.119984 2026] [:error] [pid 63098:tid 63117] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Fri Jan 02 19:43:19.371869 2026] [:error] [pid 63098:tid 63122] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Jan 02 19:43:19.625131 2026] [:error] [pid 63098:tid 63121] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Fri Jan 02 19:43:19.877350 2026] [:error] [pid 63098:tid 63127] [client 13.74.186.197:1224] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Fri Jan 02 19:43:21.332921 2026] [:error] [pid 63098:tid 63127] [client 13.74.186.197:1224] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVevWcez9k78gUs48kpDzAAAABQ"]
[Fri Jan 02 19:43:21.852449 2026] [:error] [pid 63098:tid 63119] [client 13.74.186.197:8771] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVevWcez9k78gUs48kpDzQAAAAw"]
[Fri Jan 02 19:43:22.358767 2026] [:error] [pid 50186:tid 50212] [client 13.74.186.197:6309] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVevWlXqK_iX4f-S70JhXQAAAZg"]
[Fri Jan 02 19:43:22.859368 2026] [:error] [pid 50186:tid 50209] [client 13.74.186.197:12842] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVevWlXqK_iX4f-S70JhYAAAAZU"]
[Fri Jan 02 19:43:23.361158 2026] [:error] [pid 29316:tid 29320] [client 13.74.186.197:6274] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVevW9fT9ty-7jZmgf-d9AAAAQI"]
[Fri Jan 02 19:43:23.867869 2026] [:error] [pid 63208:tid 63233] [client 13.74.186.197:1230] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVevW3KLI9INGPLzfnc4_wAAANY"]
[Fri Jan 02 19:43:24.368778 2026] [:error] [pid 63208:tid 63213] [client 13.74.186.197:9104] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVevXHKLI9INGPLzfnc5AQAAAMI"]
[Fri Jan 02 19:43:24.871141 2026] [:error] [pid 63098:tid 63120] [client 13.74.186.197:8563] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVevXMez9k78gUs48kpD0wAAAA0"]
[Fri Jan 02 19:43:25.371816 2026] [:error] [pid 63098:tid 63117] [client 13.74.186.197:3329] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVevXcez9k78gUs48kpD1QAAAAo"]
[Fri Jan 02 19:43:25.872192 2026] [:error] [pid 50186:tid 50191] [client 13.74.186.197:8772] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVevXVXqK_iX4f-S70JhZgAAAYM"]
[Fri Jan 02 19:43:26.376768 2026] [:error] [pid 63100:tid 63181] [client 13.74.186.197:2767] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVevXjuUXUKd3KTnKl9AFQAAAJQ"]
[Fri Jan 02 19:43:26.893683 2026] [:error] [pid 63099:tid 63141] [client 13.74.186.197:8779] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVevXsmCZokRPYUhzvivwQAAAEc"]
[Fri Jan 02 19:43:27.478112 2026] [:error] [pid 63099:tid 63155] [client 13.74.186.197:6904] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ths.php"] [unique_id "aVevX8mCZokRPYUhzvivwwAAAFU"]
[Fri Jan 02 19:43:27.993173 2026] [:error] [pid 63098:tid 63109] [client 13.74.186.197:1268] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ths.php"] [unique_id "aVevX8ez9k78gUs48kpD2wAAAAI"]
[Fri Jan 02 19:43:28.501467 2026] [:error] [pid 63098:tid 63124] [client 13.74.186.197:2779] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amax.php"] [unique_id "aVevYMez9k78gUs48kpD3QAAABE"]
[Fri Jan 02 19:43:29.034430 2026] [:error] [pid 63098:tid 63115] [client 13.74.186.197:8999] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVevYcez9k78gUs48kpD4AAAAAg"]
[Fri Jan 02 19:43:29.544766 2026] [:error] [pid 50186:tid 50197] [client 13.74.186.197:8455] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVevYVXqK_iX4f-S70JhcAAAAYk"]
[Fri Jan 02 19:43:30.043806 2026] [:error] [pid 63208:tid 63221] [client 13.74.186.197:6293] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVevYnKLI9INGPLzfnc5CwAAAMo"]
[Fri Jan 02 19:43:30.555823 2026] [:error] [pid 63098:tid 63126] [client 13.74.186.197:13623] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVevYsez9k78gUs48kpD4wAAABM"]
[Fri Jan 02 19:43:31.054818 2026] [:error] [pid 29316:tid 29318] [client 13.74.186.197:8797] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d996699999.php"] [unique_id "aVevY9fT9ty-7jZmgf-d9wAAAQA"]
[Fri Jan 02 19:43:31.567213 2026] [:error] [pid 43358:tid 43361] [client 13.74.186.197:9022] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVevYwncbHK9auzvrA9HuAAAAcE"]
[Fri Jan 02 19:43:32.068405 2026] [:error] [pid 43358:tid 43374] [client 13.74.186.197:6889] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVevZAncbHK9auzvrA9HuwAAAc4"]
[Fri Jan 02 19:43:32.572610 2026] [:error] [pid 50046:tid 50071] [client 13.74.186.197:1385] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVevZCzv7fgIiwkQYNCgUQAAAVc"]
[Fri Jan 02 19:43:33.082092 2026] [:error] [pid 29316:tid 29336] [client 13.74.186.197:12259] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVevZdfT9ty-7jZmgf-d_QAAARI"]
[Fri Jan 02 19:43:33.587819 2026] [:error] [pid 43358:tid 43379] [client 13.74.186.197:8451] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aVevZQncbHK9auzvrA9HvwAAAdM"]
[Fri Jan 02 19:43:34.085912 2026] [:error] [pid 63100:tid 63184] [client 13.74.186.197:12848] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aVevZjuUXUKd3KTnKl9AIQAAAJc"]
[Fri Jan 02 19:43:34.583947 2026] [:error] [pid 63098:tid 63116] [client 13.74.186.197:3179] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aVevZsez9k78gUs48kpD5gAAAAk"]
[Fri Jan 02 19:43:35.091703 2026] [:error] [pid 63100:tid 63162] [client 13.74.186.197:5739] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aVevZzuUXUKd3KTnKl9AIwAAAIE"]
[Sat Jan 03 00:16:18.644220 2026] [:error] [pid 24659:tid 24666] [client 101.91.148.219:40370] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVfvUmucj-rXdFUnVEsWsgAAAAI"]
[Sat Jan 03 00:47:22.605657 2026] [:error] [pid 24659:tid 24676] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sat Jan 03 00:47:22.857183 2026] [:error] [pid 24659:tid 24682] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Jan 03 00:47:23.113429 2026] [:error] [pid 24659:tid 24666] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Jan 03 00:47:24.454360 2026] [:error] [pid 24659:tid 24666] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sat Jan 03 00:47:24.720194 2026] [:error] [pid 24659:tid 24679] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sat Jan 03 00:47:24.973186 2026] [:error] [pid 24659:tid 24673] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Sat Jan 03 00:47:25.224303 2026] [:error] [pid 24659:tid 24686] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sat Jan 03 00:47:25.475493 2026] [:error] [pid 24659:tid 24684] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Jan 03 00:47:25.734634 2026] [:error] [pid 24659:tid 24681] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Sat Jan 03 00:47:26.012479 2026] [:error] [pid 24659:tid 24683] [client 13.74.186.197:4956] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Sat Jan 03 00:47:26.263699 2026] [:error] [pid 24659:tid 24677] [client 13.74.186.197:4956] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVf2nmucj-rXdFUnVEsjKAAAAA0"]
[Sat Jan 03 00:47:26.815140 2026] [:error] [pid 24749:tid 24760] [client 13.74.186.197:4946] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVf2nkiv6Q9UlqwBJkZA-QAAAMk"]
[Sat Jan 03 00:47:27.314176 2026] [:error] [pid 24660:tid 24699] [client 13.74.186.197:4296] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/s1.php"] [unique_id "aVf2n2ZwWsLNsJ3ZH7a7vwAAAEY"]
[Sat Jan 03 00:47:27.859493 2026] [:error] [pid 24660:tid 24696] [client 13.74.186.197:10689] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ths.php"] [unique_id "aVf2n2ZwWsLNsJ3ZH7a7wAAAAEM"]
[Sat Jan 03 00:47:28.355954 2026] [:error] [pid 24661:tid 24738] [client 13.74.186.197:15656] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ths.php"] [unique_id "aVf2oBfxsu5kmLDAcZt-1wAAAJI"]
[Sat Jan 03 00:47:28.852597 2026] [:error] [pid 24660:tid 24709] [client 13.74.186.197:4974] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ths.php"] [unique_id "aVf2oGZwWsLNsJ3ZH7a7xAAAAFA"]
[Sat Jan 03 00:47:29.362655 2026] [:error] [pid 24659:tid 24664] [client 13.74.186.197:1641] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amax.php"] [unique_id "aVf2oWucj-rXdFUnVEsjMgAAAAA"]
[Sat Jan 03 00:47:29.871777 2026] [:error] [pid 24660:tid 24701] [client 13.74.186.197:11217] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amax.php"] [unique_id "aVf2oWZwWsLNsJ3ZH7a7xgAAAEg"]
[Sat Jan 03 00:47:30.369161 2026] [:error] [pid 24660:tid 24707] [client 13.74.186.197:10492] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amax.php"] [unique_id "aVf2omZwWsLNsJ3ZH7a7xwAAAE4"]
[Sat Jan 03 00:47:30.875588 2026] [:error] [pid 24661:tid 24734] [client 13.74.186.197:4334] [client 13.74.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amax.php"] [unique_id "aVf2ohfxsu5kmLDAcZt-3AAAAI4"]
[Sat Jan 03 05:19:07.924040 2026] [:error] [pid 2083:tid 2097] [client 106.219.156.49:4184] [client 106.219.156.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.156.49, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVg2SzVlR_BmlMPnhV7JYQAAAMw"]
[Sat Jan 03 05:19:07.928658 2026] [:error] [pid 2083:tid 2097] [client 106.219.156.49:4184] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 03 06:19:37.515685 2026] [:error] [pid 1929:tid 1945] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sat Jan 03 06:19:37.691966 2026] [:error] [pid 1929:tid 1962] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Jan 03 06:19:37.711088 2026] [:error] [pid 1929:tid 1956] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Jan 03 06:19:37.749653 2026] [:error] [pid 1929:tid 1938] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sat Jan 03 06:19:37.769137 2026] [:error] [pid 1929:tid 1948] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sat Jan 03 06:19:38.045479 2026] [:error] [pid 1929:tid 1957] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Sat Jan 03 06:19:38.173078 2026] [:error] [pid 1929:tid 1944] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sat Jan 03 06:19:38.193408 2026] [:error] [pid 1929:tid 1959] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Jan 03 06:19:38.212670 2026] [:error] [pid 1929:tid 1939] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Sat Jan 03 06:19:38.230323 2026] [:error] [pid 1929:tid 1954] [client 4.196.97.109:39143] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Sat Jan 03 06:19:38.385234 2026] [:error] [pid 1929:tid 1951] [client 4.196.97.109:39143] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhEeucFqdpu6TNsuWrrBAAAAA0"]
[Sat Jan 03 06:19:39.337536 2026] [:error] [pid 1929:tid 1960] [client 4.196.97.109:57686] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhEe-cFqdpu6TNsuWrrBQAAABY"]
[Sat Jan 03 06:19:39.932160 2026] [:error] [pid 1930:tid 1972] [client 4.196.97.109:57726] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhEe5P-6mqhfUDa89z3FQAAAEY"]
[Sat Jan 03 06:19:41.326339 2026] [:error] [pid 34260:tid 34267] [client 4.196.97.109:36495] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhEfUWWhyvZ0O9KNVTFlQAAAQU"]
[Sat Jan 03 06:19:42.421367 2026] [:error] [pid 1930:tid 1986] [client 4.196.97.109:27599] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhEfpP-6mqhfUDa89z3IAAAAFQ"]
[Sat Jan 03 06:19:43.232726 2026] [:error] [pid 1931:tid 2034] [client 4.196.97.109:39492] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhEfx8Tyw7ZoIdXlcYc9QAAAIo"]
[Sat Jan 03 06:19:44.392705 2026] [:error] [pid 1931:tid 2044] [client 4.196.97.109:35742] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhEgB8Tyw7ZoIdXlcYc-AAAAJQ"]
[Sat Jan 03 06:19:46.178937 2026] [:error] [pid 2083:tid 2107] [client 4.196.97.109:32642] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhEgjVlR_BmlMPnhV7k2wAAANY"]
[Sat Jan 03 06:19:49.604127 2026] [:error] [pid 34260:tid 34278] [client 4.196.97.109:36481] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVhEhUWWhyvZ0O9KNVTFowAAARA"]
[Sat Jan 03 06:19:51.648652 2026] [:error] [pid 2083:tid 2091] [client 4.196.97.109:27630] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVhEhzVlR_BmlMPnhV7k7AAAAMY"]
[Sat Jan 03 06:20:04.143594 2026] [:error] [pid 2083:tid 2106] [client 4.196.97.109:26566] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhElDVlR_BmlMPnhV7lDQAAANU"]
[Sat Jan 03 06:20:06.264408 2026] [:error] [pid 1931:tid 2033] [client 4.196.97.109:28786] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhElh8Tyw7ZoIdXlcYdNQAAAIk"]
[Sat Jan 03 06:20:06.567419 2026] [:error] [pid 1930:tid 1976] [client 4.196.97.109:28743] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhElpP-6mqhfUDa89z3RAAAAEo"]
[Sat Jan 03 06:20:08.666620 2026] [:error] [pid 1929:tid 1953] [client 4.196.97.109:33057] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhEmOcFqdpu6TNsuWrrZwAAAA8"]
[Sat Jan 03 06:20:11.137284 2026] [:error] [pid 34260:tid 34274] [client 4.196.97.109:26587] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhEm0WWhyvZ0O9KNVTF2AAAAQw"]
[Sat Jan 03 06:20:13.548461 2026] [:error] [pid 1929:tid 1941] [client 4.196.97.109:30786] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhEnecFqdpu6TNsuWrrbwAAAAM"]
[Sat Jan 03 06:20:17.476254 2026] [:error] [pid 2083:tid 2102] [client 4.196.97.109:3605] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhEoTVlR_BmlMPnhV7lIQAAANE"]
[Sat Jan 03 06:20:20.658966 2026] [:error] [pid 1931:tid 2031] [client 4.196.97.109:40114] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhEpB8Tyw7ZoIdXlcYdUAAAAIc"]
[Sat Jan 03 06:20:22.012045 2026] [:error] [pid 1929:tid 1938] [client 4.196.97.109:3606] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhEpucFqdpu6TNsuWrrewAAAAA"]
[Sat Jan 03 06:20:23.592973 2026] [:error] [pid 1930:tid 1969] [client 4.196.97.109:41253] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhEp5P-6mqhfUDa89z3YgAAAEM"]
[Sat Jan 03 06:20:24.201924 2026] [:error] [pid 34260:tid 34272] [client 4.196.97.109:30839] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhEqEWWhyvZ0O9KNVTF7gAAAQo"]
[Sat Jan 03 06:20:29.156071 2026] [:error] [pid 34260:tid 34270] [client 4.196.97.109:40088] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhErUWWhyvZ0O9KNVTF9AAAAQg"]
[Sat Jan 03 06:20:32.147062 2026] [:error] [pid 2083:tid 2108] [client 4.196.97.109:33586] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhEsDVlR_BmlMPnhV7lOAAAANc"]
[Sat Jan 03 06:20:34.337332 2026] [:error] [pid 1929:tid 1955] [client 4.196.97.109:33542] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhEsucFqdpu6TNsuWrrhAAAABE"]
[Sat Jan 03 06:20:34.997730 2026] [:error] [pid 1930:tid 1978] [client 4.196.97.109:25389] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhEspP-6mqhfUDa89z3dgAAAEw"]
[Sat Jan 03 06:20:36.276509 2026] [:error] [pid 1929:tid 1957] [client 4.196.97.109:3493] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhEtOcFqdpu6TNsuWrrjAAAABM"]
[Sat Jan 03 06:20:38.097362 2026] [:error] [pid 1931:tid 2043] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Sat Jan 03 06:20:38.395193 2026] [:error] [pid 1931:tid 2045] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Sat Jan 03 06:20:38.416564 2026] [:error] [pid 1931:tid 1994] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/asf.php
[Sat Jan 03 06:20:38.444892 2026] [:error] [pid 1931:tid 2033] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/lanz.php
[Sat Jan 03 06:20:38.479091 2026] [:error] [pid 1931:tid 1996] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/xeeex.php
[Sat Jan 03 06:20:38.512620 2026] [:error] [pid 1931:tid 1999] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/tons.php
[Sat Jan 03 06:20:38.553987 2026] [:error] [pid 1931:tid 2036] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/wpup.php
[Sat Jan 03 06:20:38.601120 2026] [:error] [pid 1931:tid 2035] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Jan 03 06:20:38.630306 2026] [:error] [pid 1931:tid 2039] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/f2f.php
[Sat Jan 03 06:20:38.649876 2026] [:error] [pid 1931:tid 2046] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/ths.php
[Sat Jan 03 06:20:38.669664 2026] [:error] [pid 1931:tid 2040] [client 4.196.97.109:30757] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Jan 03 06:20:38.688439 2026] [:error] [pid 1931:tid 2031] [client 4.196.97.109:30757] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVhEth8Tyw7ZoIdXlcYdewAAAIc"]
[Sat Jan 03 06:20:50.037750 2026] [:error] [pid 1930:tid 1966] [client 4.196.97.109:3249] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVhEwpP-6mqhfUDa89z3kQAAAEA"]
[Sat Jan 03 06:20:52.457778 2026] [:error] [pid 34260:tid 34267] [client 4.196.97.109:33490] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVhExEWWhyvZ0O9KNVTGEwAAAQU"]
[Sat Jan 03 06:20:53.225729 2026] [:error] [pid 34260:tid 34269] [client 4.196.97.109:38003] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/990.php"] [unique_id "aVhExUWWhyvZ0O9KNVTGFAAAAQc"]
[Sat Jan 03 06:20:54.082617 2026] [:error] [pid 2083:tid 2109] [client 4.196.97.109:39168] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d996699999.php"] [unique_id "aVhExjVlR_BmlMPnhV7lUQAAANg"]
[Sat Jan 03 06:20:57.785754 2026] [:error] [pid 2083:tid 2104] [client 4.196.97.109:40824] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d996699999.php"] [unique_id "aVhEyTVlR_BmlMPnhV7lWQAAANM"]
[Sat Jan 03 06:20:59.322824 2026] [:error] [pid 34260:tid 34281] [client 4.196.97.109:39191] [client 4.196.97.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/d996699999.php"] [unique_id "aVhEy0WWhyvZ0O9KNVTGGwAAARM"]
[Sat Jan 03 06:21:45.934471 2026] [:error] [pid 2083:tid 2100] [client 4.196.97.109:28272] File does not exist: /usr/local/apache/htdocs/suspended-page/1yade.php
[Sat Jan 03 06:21:45.958327 2026] [:error] [pid 2083:tid 2099] [client 4.196.97.109:28272] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat Jan 03 06:21:45.975558 2026] [:error] [pid 2083:tid 2090] [client 4.196.97.109:28272] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sat Jan 03 07:13:07.985419 2026] [:error] [pid 1931:tid 2032] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sat Jan 03 07:13:08.077817 2026] [:error] [pid 1931:tid 1993] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Jan 03 07:13:08.167316 2026] [:error] [pid 1931:tid 2033] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Jan 03 07:13:08.288833 2026] [:error] [pid 1931:tid 2030] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sat Jan 03 07:13:08.379598 2026] [:error] [pid 1931:tid 2043] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sat Jan 03 07:13:08.471855 2026] [:error] [pid 1931:tid 2037] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Sat Jan 03 07:13:08.661059 2026] [:error] [pid 1931:tid 2034] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sat Jan 03 07:13:08.899016 2026] [:error] [pid 1931:tid 2031] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Jan 03 07:13:09.001183 2026] [:error] [pid 1931:tid 2040] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Sat Jan 03 07:13:09.091063 2026] [:error] [pid 1931:tid 1999] [client 4.194.56.148:6398] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Sat Jan 03 07:13:09.185688 2026] [:error] [pid 1931:tid 2046] [client 4.194.56.148:6398] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhRBR8Tyw7ZoIdXlcY1IAAAAJY"]
[Sat Jan 03 07:13:10.391020 2026] [:error] [pid 1929:tid 1938] [client 4.194.56.148:38317] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhRBucFqdpu6TNsuWoCAAAAAAA"]
[Sat Jan 03 07:13:11.034831 2026] [:error] [pid 2083:tid 2106] [client 4.194.56.148:6384] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhRBzVlR_BmlMPnhV4BFwAAANU"]
[Sat Jan 03 07:13:11.760857 2026] [:error] [pid 2083:tid 2098] [client 4.194.56.148:38280] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bras.php"] [unique_id "aVhRBzVlR_BmlMPnhV4BHwAAAM0"]
[Sat Jan 03 07:13:12.060706 2026] [:error] [pid 2083:tid 2092] [client 4.194.56.148:38298] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhRCDVlR_BmlMPnhV4BJwAAAMc"]
[Sat Jan 03 07:13:13.652705 2026] [:error] [pid 1930:tid 1971] [client 4.194.56.148:6372] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhRCZP-6mqhfUDa89wQdwAAAEU"]
[Sat Jan 03 07:13:14.020509 2026] [:error] [pid 1930:tid 1976] [client 4.194.56.148:6361] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhRCpP-6mqhfUDa89wQegAAAEo"]
[Sat Jan 03 07:13:14.771806 2026] [:error] [pid 1930:tid 1967] [client 4.194.56.148:6160] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/an8.php"] [unique_id "aVhRCpP-6mqhfUDa89wQgAAAAEE"]
[Sat Jan 03 07:13:15.708003 2026] [:error] [pid 1930:tid 1988] [client 4.194.56.148:7013] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVhRC5P-6mqhfUDa89wQiAAAAFY"]
[Sat Jan 03 07:13:16.683818 2026] [:error] [pid 1931:tid 2036] [client 4.194.56.148:7005] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVhRDB8Tyw7ZoIdXlcY1IwAAAIw"]
[Sat Jan 03 07:13:17.445334 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:6821] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVhRDUWWhyvZ0O9KNVTi7wAAARE"]
[Sat Jan 03 07:13:18.126586 2026] [:error] [pid 1930:tid 1990] [client 4.194.56.148:38305] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/esp.php"] [unique_id "aVhRDpP-6mqhfUDa89wQmAAAAFg"]
[Sat Jan 03 07:13:18.713120 2026] [:error] [pid 1929:tid 1960] [client 4.194.56.148:6146] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhRDucFqdpu6TNsuWoCFgAAABY"]
[Sat Jan 03 07:13:19.543845 2026] [:error] [pid 1929:tid 1943] [client 4.194.56.148:6561] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhRD-cFqdpu6TNsuWoCGgAAAAU"]
[Sat Jan 03 07:13:20.053333 2026] [:error] [pid 1930:tid 1984] [client 4.194.56.148:6531] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhREJP-6mqhfUDa89wQngAAAFI"]
[Sat Jan 03 07:13:21.604732 2026] [:error] [pid 2083:tid 2103] [client 4.194.56.148:37160] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/21x.php"] [unique_id "aVhRETVlR_BmlMPnhV4BQgAAANI"]
[Sat Jan 03 07:13:22.257943 2026] [:error] [pid 19639:tid 19662] [client 4.194.56.148:38307] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhREiQ7fWZUytnlHEw3lQAAAVU"]
[Sat Jan 03 07:13:23.181606 2026] [:error] [pid 2083:tid 2095] [client 4.194.56.148:6570] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhREzVlR_BmlMPnhV4BSgAAAMo"]
[Sat Jan 03 07:13:24.352416 2026] [:error] [pid 2083:tid 2104] [client 4.194.56.148:7016] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhRFDVlR_BmlMPnhV4BUQAAANM"]
[Sat Jan 03 07:13:25.155170 2026] [:error] [pid 1931:tid 1996] [client 4.194.56.148:7001] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/out.php"] [unique_id "aVhRFR8Tyw7ZoIdXlcY1LwAAAII"]
[Sat Jan 03 07:13:27.397433 2026] [:error] [pid 1929:tid 1944] [client 4.194.56.148:45161] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhRF-cFqdpu6TNsuWoCLwAAAAY"]
[Sat Jan 03 07:13:29.031638 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:45156] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhRGUWWhyvZ0O9KNVTi9QAAAQ8"]
[Sat Jan 03 07:13:29.698953 2026] [:error] [pid 19639:tid 19649] [client 4.194.56.148:6553] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhRGSQ7fWZUytnlHEw3ogAAAUg"]
[Sat Jan 03 07:13:30.338430 2026] [:error] [pid 1929:tid 1946] [client 4.194.56.148:6362] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVhRGucFqdpu6TNsuWoCOAAAAAg"]
[Sat Jan 03 07:13:30.756648 2026] [:error] [pid 34260:tid 34265] [client 4.194.56.148:6815] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhRGkWWhyvZ0O9KNVTi-gAAAQM"]
[Sat Jan 03 07:13:32.095220 2026] [:error] [pid 34260:tid 34281] [client 4.194.56.148:7032] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhRHEWWhyvZ0O9KNVTi_QAAARM"]
[Sat Jan 03 07:13:32.653800 2026] [:error] [pid 1930:tid 1989] [client 4.194.56.148:6985] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhRHJP-6mqhfUDa89wQqwAAAFc"]
[Sat Jan 03 07:13:33.239491 2026] [:error] [pid 1930:tid 1985] [client 4.194.56.148:6548] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/family.php"] [unique_id "aVhRHZP-6mqhfUDa89wQrQAAAFM"]
[Sat Jan 03 07:13:33.749085 2026] [:error] [pid 1931:tid 2027] [client 4.194.56.148:45155] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/s1.php"] [unique_id "aVhRHR8Tyw7ZoIdXlcY1TAAAAIQ"]
[Sat Jan 03 07:13:34.526982 2026] [:error] [pid 34260:tid 34278] [client 4.194.56.148:38318] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/s1.php"] [unique_id "aVhRHkWWhyvZ0O9KNVTjAgAAARA"]
[Sat Jan 03 07:13:35.372923 2026] [:error] [pid 1930:tid 1990] [client 4.194.56.148:7012] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/s1.php"] [unique_id "aVhRH5P-6mqhfUDa89wQuwAAAFg"]
[Sat Jan 03 07:13:36.896518 2026] [:error] [pid 1930:tid 1974] [client 4.194.56.148:37169] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/s1.php"] [unique_id "aVhRIJP-6mqhfUDa89wQwwAAAEg"]
[Sat Jan 03 07:13:37.264789 2026] [:error] [pid 1930:tid 1986] [client 4.194.56.148:7003] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ma.php"] [unique_id "aVhRIZP-6mqhfUDa89wQxQAAAFQ"]
[Sat Jan 03 07:13:37.768307 2026] [:error] [pid 2083:tid 2109] [client 4.194.56.148:38276] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ma.php"] [unique_id "aVhRITVlR_BmlMPnhV4BaAAAANg"]
[Sat Jan 03 07:13:38.505262 2026] [:error] [pid 2083:tid 2089] [client 4.194.56.148:6845] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ma.php"] [unique_id "aVhRIjVlR_BmlMPnhV4BagAAAMQ"]
[Sat Jan 03 07:13:38.918176 2026] [:error] [pid 19639:tid 19652] [client 4.194.56.148:7008] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ma.php"] [unique_id "aVhRIiQ7fWZUytnlHEw3sgAAAUs"]
[Sat Jan 03 07:13:39.879944 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:38281] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVhRI0WWhyvZ0O9KNVTjEwAAARE"]
[Sat Jan 03 07:13:40.829944 2026] [:error] [pid 19639:tid 19663] [client 4.194.56.148:6565] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVhRJCQ7fWZUytnlHEw3tgAAAVY"]
[Sat Jan 03 07:13:41.396602 2026] [:error] [pid 19639:tid 19643] [client 4.194.56.148:58621] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVhRJSQ7fWZUytnlHEw3twAAAUI"]
[Sat Jan 03 07:13:42.400242 2026] [:error] [pid 2083:tid 2085] [client 4.194.56.148:45175] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/asf.php"] [unique_id "aVhRJjVlR_BmlMPnhV4BcQAAAMA"]
[Sat Jan 03 07:13:44.637926 2026] [:error] [pid 19639:tid 19652] [client 4.194.56.148:6978] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVhRKCQ7fWZUytnlHEw3vgAAAUs"]
[Sat Jan 03 07:13:49.244673 2026] [:error] [pid 34260:tid 34267] [client 4.194.56.148:37154] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVhRLUWWhyvZ0O9KNVTjMQAAAQU"]
[Sat Jan 03 07:13:50.198932 2026] [:error] [pid 1930:tid 1980] [client 4.194.56.148:6789] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVhRLpP-6mqhfUDa89wQ4gAAAE4"]
[Sat Jan 03 07:13:51.418319 2026] [:error] [pid 34260:tid 34262] [client 4.194.56.148:38290] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVhRL0WWhyvZ0O9KNVTjOAAAAQA"]
[Sat Jan 03 07:13:52.701373 2026] [:error] [pid 2083:tid 2089] [client 4.194.56.148:6805] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aVhRMDVlR_BmlMPnhV4BmwAAAMQ"]
[Sat Jan 03 07:13:54.044459 2026] [:error] [pid 1929:tid 1954] [client 4.194.56.148:7033] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aVhRMucFqdpu6TNsuWoCWgAAABA"]
[Sat Jan 03 07:13:55.377262 2026] [:error] [pid 2083:tid 2093] [client 4.194.56.148:6537] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aVhRMzVlR_BmlMPnhV4BpAAAAMg"]
[Sat Jan 03 07:13:56.701923 2026] [:error] [pid 1929:tid 1956] [client 4.194.56.148:6563] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aVhRNOcFqdpu6TNsuWoCYQAAABI"]
[Sat Jan 03 07:13:58.159643 2026] [:error] [pid 1930:tid 1967] [client 4.194.56.148:6393] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/tons.php"] [unique_id "aVhRNpP-6mqhfUDa89wQ7wAAAEE"]
[Sat Jan 03 07:13:59.884235 2026] [:error] [pid 1930:tid 1973] [client 4.194.56.148:47206] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/tons.php"] [unique_id "aVhRN5P-6mqhfUDa89wQ9gAAAEc"]
[Sat Jan 03 07:14:00.578098 2026] [:error] [pid 1930:tid 1972] [client 4.194.56.148:45122] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/tons.php"] [unique_id "aVhROJP-6mqhfUDa89wQ-wAAAEY"]
[Sat Jan 03 07:14:01.652223 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:6581] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/tons.php"] [unique_id "aVhROUWWhyvZ0O9KNVTjQwAAAQ8"]
[Sat Jan 03 07:14:03.119588 2026] [:error] [pid 2083:tid 2086] [client 4.194.56.148:6816] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVhROzVlR_BmlMPnhV4BuQAAAME"]
[Sat Jan 03 07:14:04.140946 2026] [:error] [pid 1929:tid 1953] [client 4.194.56.148:7086] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVhRPOcFqdpu6TNsuWoCZwAAAA8"]
[Sat Jan 03 07:14:04.836237 2026] [:error] [pid 34260:tid 34284] [client 4.194.56.148:38318] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVhRPEWWhyvZ0O9KNVTjTwAAARY"]
[Sat Jan 03 07:14:06.085750 2026] [:error] [pid 1931:tid 2041] [client 4.194.56.148:47230] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVhRPh8Tyw7ZoIdXlcY1gAAAAJE"]
[Sat Jan 03 07:14:06.628581 2026] [:error] [pid 34260:tid 34275] [client 4.194.56.148:58591] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xa.php"] [unique_id "aVhRPkWWhyvZ0O9KNVTjXQAAAQ0"]
[Sat Jan 03 07:14:08.808817 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:7049] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xa.php"] [unique_id "aVhRQEWWhyvZ0O9KNVTjYwAAAQ8"]
[Sat Jan 03 07:14:10.220257 2026] [:error] [pid 2083:tid 2099] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Jan 03 07:14:10.310479 2026] [:error] [pid 2083:tid 2105] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/f2f.php
[Sat Jan 03 07:14:10.404124 2026] [:error] [pid 2083:tid 2103] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/ths.php
[Sat Jan 03 07:14:10.594012 2026] [:error] [pid 2083:tid 2085] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Jan 03 07:14:10.706918 2026] [:error] [pid 2083:tid 2089] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Sat Jan 03 07:14:10.798155 2026] [:error] [pid 2083:tid 2094] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/d996699999.php
[Sat Jan 03 07:14:10.886764 2026] [:error] [pid 2083:tid 2101] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/ierne.php
[Sat Jan 03 07:14:10.977564 2026] [:error] [pid 2083:tid 2095] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/xde.php
[Sat Jan 03 07:14:11.153658 2026] [:error] [pid 2083:tid 2092] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/1yade.php
[Sat Jan 03 07:14:11.591703 2026] [:error] [pid 2083:tid 2107] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat Jan 03 07:14:11.731941 2026] [:error] [pid 2083:tid 2096] [client 4.194.56.148:58579] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sat Jan 03 11:41:08.545198 2026] [:error] [pid 1931:tid 2029] [client 43.130.37.243:36480] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aViP1B8Tyw7ZoIdXlcZ7XgAAAIU"]
[Sat Jan 03 20:41:25.749179 2026] [:error] [pid 1931:tid 2045] [client 162.62.213.187:52512] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVkOdR8Tyw7ZoIdXlcbwiAAAAJU"]
[Sat Jan 03 20:50:25.693218 2026] [:error] [pid 2083:tid 2103] [client 43.159.143.190:58818] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVkQkTVlR_BmlMPnhV4OxAAAANI"]
[Sat Jan 03 21:15:40.057267 2026] [:error] [pid 31222:tid 31227] [client 4.193.242.138:26332] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Jan 03 21:15:40.150506 2026] [:error] [pid 31222:tid 31239] [client 4.193.242.138:26332] File does not exist: /usr/local/apache/htdocs/suspended-page/ups.php
[Sat Jan 03 21:15:40.332290 2026] [:error] [pid 31222:tid 31225] [client 4.193.242.138:26332] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Jan 03 21:15:40.427696 2026] [:error] [pid 31222:tid 31229] [client 4.193.242.138:26332] File does not exist: /usr/local/apache/htdocs/suspended-page/tgrs.php
[Sat Jan 03 21:15:40.515850 2026] [:error] [pid 31222:tid 31237] [client 4.193.242.138:26332] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Sat Jan 03 21:15:40.603068 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:26332] [client 4.193.242.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aVkWfKHw6nASHXAc2v_fmwAAAcg"]
[Sat Jan 03 21:15:40.891877 2026] [:error] [pid 31222:tid 31243] [client 4.193.242.138:21663] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Jan 03 21:15:40.983474 2026] [:error] [pid 31222:tid 31224] [client 4.193.242.138:21663] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the1me.php
[Sat Jan 03 21:15:41.074476 2026] [:error] [pid 31222:tid 31246] [client 4.193.242.138:21663] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sat Jan 03 21:15:41.295247 2026] [:error] [pid 31222:tid 31233] [client 4.193.242.138:21663] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aVkWfaHw6nASHXAc2v_foQAAAck"]
[Sat Jan 03 21:15:42.052480 2026] [:error] [pid 1930:tid 1982] [client 4.193.242.138:1293] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aVkWfpP-6mqhfUDa89zglAAAAFA"]
[Sat Jan 03 21:15:42.787643 2026] [:error] [pid 1930:tid 1980] [client 4.193.242.138:26353] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aVkWfpP-6mqhfUDa89zglgAAAE4"]
[Sat Jan 03 21:15:44.182387 2026] [:error] [pid 19639:tid 19645] [client 4.193.242.138:21635] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aVkWgCQ7fWZUytnlHEz7KgAAAUQ"]
[Sat Jan 03 21:15:45.426080 2026] [:error] [pid 1931:tid 2042] [client 4.193.242.138:26341] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVkWgR8Tyw7ZoIdXlcb6CwAAAJI"]
[Sat Jan 03 21:15:47.655276 2026] [:error] [pid 1929:tid 1955] [client 4.193.242.138:26359] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVkWg-cFqdpu6TNsuWrocgAAABE"]
[Sat Jan 03 21:15:49.136180 2026] [:error] [pid 19639:tid 19648] [client 4.193.242.138:22060] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVkWhSQ7fWZUytnlHEz7MgAAAUc"]
[Sat Jan 03 21:15:50.260263 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:21658] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVkWhvUV_PU2SWgLPuhbeQAAAZQ"]
[Sat Jan 03 21:15:51.007455 2026] [:error] [pid 31630:tid 31653] [client 4.193.242.138:22024] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVkWh_UV_PU2SWgLPuhbewAAAZU"]
[Sat Jan 03 21:15:51.323873 2026] [:error] [pid 31630:tid 31644] [client 4.193.242.138:21637] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVkWh_UV_PU2SWgLPuhbfQAAAYw"]
[Sat Jan 03 21:15:51.696372 2026] [:error] [pid 34260:tid 34268] [client 4.193.242.138:22022] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVkWh0WWhyvZ0O9KNVQenQAAAQY"]
[Sat Jan 03 21:15:52.490977 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:21638] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVkWiKHw6nASHXAc2v_fqgAAAdU"]
[Sat Jan 03 21:15:53.221986 2026] [:error] [pid 31630:tid 31639] [client 4.193.242.138:26345] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxz.php"] [unique_id "aVkWifUV_PU2SWgLPuhbgAAAAYc"]
[Sat Jan 03 21:15:54.248056 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:21641] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxz.php"] [unique_id "aVkWivUV_PU2SWgLPuhbgwAAAY8"]
[Sat Jan 03 21:15:54.845871 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:22017] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxz.php"] [unique_id "aVkWipP-6mqhfUDa89zgnwAAAEo"]
[Sat Jan 03 21:15:55.335406 2026] [:error] [pid 31222:tid 31225] [client 4.193.242.138:19868] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxz.php"] [unique_id "aVkWi6Hw6nASHXAc2v_frwAAAcE"]
[Sat Jan 03 21:15:56.021600 2026] [:error] [pid 31222:tid 31240] [client 4.193.242.138:22030] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aVkWjKHw6nASHXAc2v_fsgAAAdA"]
[Sat Jan 03 21:15:57.444633 2026] [:error] [pid 34260:tid 34282] [client 4.193.242.138:26324] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aVkWjUWWhyvZ0O9KNVQesAAAARQ"]
[Sat Jan 03 21:15:58.200688 2026] [:error] [pid 34260:tid 34267] [client 4.193.242.138:21681] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aVkWjkWWhyvZ0O9KNVQetQAAAQU"]
[Sat Jan 03 21:15:58.733394 2026] [:error] [pid 2083:tid 2098] [client 4.193.242.138:19858] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aVkWjjVlR_BmlMPnhV4WBAAAAM0"]
[Sat Jan 03 21:15:59.193514 2026] [:error] [pid 31222:tid 31224] [client 4.193.242.138:29039] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVkWj6Hw6nASHXAc2v_ftQAAAcA"]
[Sat Jan 03 21:16:00.036765 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:19877] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVkWkKHw6nASHXAc2v_fuQAAAdU"]
[Sat Jan 03 21:16:00.753546 2026] [:error] [pid 19639:tid 19655] [client 4.193.242.138:26339] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVkWkCQ7fWZUytnlHEz7NgAAAU4"]
[Sat Jan 03 21:16:01.606195 2026] [:error] [pid 1931:tid 2048] [client 4.193.242.138:21634] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVkWkR8Tyw7ZoIdXlcb6FgAAAJg"]
[Sat Jan 03 21:16:02.056772 2026] [:error] [pid 19639:tid 19664] [client 4.193.242.138:21678] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVkWkiQ7fWZUytnlHEz7OgAAAVc"]
[Sat Jan 03 21:16:02.727063 2026] [:error] [pid 19639:tid 19648] [client 4.193.242.138:22023] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVkWkiQ7fWZUytnlHEz7PQAAAUc"]
[Sat Jan 03 21:16:03.132393 2026] [:error] [pid 2083:tid 2085] [client 4.193.242.138:19844] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVkWkzVlR_BmlMPnhV4WDAAAAMA"]
[Sat Jan 03 21:16:03.524145 2026] [:error] [pid 2083:tid 2100] [client 4.193.242.138:1339] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVkWkzVlR_BmlMPnhV4WDgAAAM8"]
[Sat Jan 03 21:16:04.695051 2026] [:error] [pid 19639:tid 19647] [client 4.193.242.138:21684] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aVkWlCQ7fWZUytnlHEz7QgAAAUY"]
[Sat Jan 03 21:16:06.031594 2026] [:error] [pid 1930:tid 1973] [client 4.193.242.138:21644] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aVkWlpP-6mqhfUDa89zgpgAAAEc"]
[Sat Jan 03 21:16:06.573221 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:19849] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aVkWlkWWhyvZ0O9KNVQeyQAAARc"]
[Sat Jan 03 21:16:07.594229 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:19840] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell1.php"] [unique_id "aVkWl_UV_PU2SWgLPuhboQAAAY8"]
[Sat Jan 03 21:16:08.029241 2026] [:error] [pid 31222:tid 31234] [client 4.193.242.138:21659] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVkWmKHw6nASHXAc2v_fxQAAAco"]
[Sat Jan 03 21:16:08.775455 2026] [:error] [pid 1929:tid 1952] [client 4.193.242.138:1100] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVkWmOcFqdpu6TNsuWrofAAAAA4"]
[Sat Jan 03 21:16:09.316407 2026] [:error] [pid 1929:tid 1959] [client 4.193.242.138:26343] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVkWmecFqdpu6TNsuWrogAAAABU"]
[Sat Jan 03 21:16:09.889435 2026] [:error] [pid 1931:tid 2045] [client 4.193.242.138:26319] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aVkWmR8Tyw7ZoIdXlcb6GQAAAJU"]
[Sat Jan 03 21:16:11.061004 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:1117] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aVkWm_UV_PU2SWgLPuhbowAAAYs"]
[Sat Jan 03 21:16:11.997128 2026] [:error] [pid 1930:tid 1982] [client 4.193.242.138:1115] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aVkWm5P-6mqhfUDa89zgqwAAAFA"]
[Sat Jan 03 21:16:12.375147 2026] [:error] [pid 34260:tid 34269] [client 4.193.242.138:19854] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aVkWnEWWhyvZ0O9KNVQe0AAAAQc"]
[Sat Jan 03 21:16:12.897129 2026] [:error] [pid 2083:tid 2104] [client 4.193.242.138:29020] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sid3.php"] [unique_id "aVkWnDVlR_BmlMPnhV4WFgAAANM"]
[Sat Jan 03 21:16:13.848973 2026] [:error] [pid 31630:tid 31637] [client 4.193.242.138:21653] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n.php"] [unique_id "aVkWnfUV_PU2SWgLPuhbqQAAAYU"]
[Sat Jan 03 21:16:14.315350 2026] [:error] [pid 1931:tid 2027] [client 4.193.242.138:1095] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n.php"] [unique_id "aVkWnh8Tyw7ZoIdXlcb6HwAAAIQ"]
[Sat Jan 03 21:16:14.883638 2026] [:error] [pid 1929:tid 1957] [client 4.193.242.138:29053] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n.php"] [unique_id "aVkWnucFqdpu6TNsuWromQAAABM"]
[Sat Jan 03 21:16:15.760497 2026] [:error] [pid 2083:tid 2089] [client 4.193.242.138:21671] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n.php"] [unique_id "aVkWnzVlR_BmlMPnhV4WFwAAAMQ"]
[Sat Jan 03 21:16:16.030172 2026] [:error] [pid 2083:tid 2108] [client 4.193.242.138:1108] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jmfi2.php"] [unique_id "aVkWoDVlR_BmlMPnhV4WGgAAANc"]
[Sat Jan 03 21:16:16.428246 2026] [:error] [pid 2083:tid 2091] [client 4.193.242.138:26358] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jmfi2.php"] [unique_id "aVkWoDVlR_BmlMPnhV4WHQAAAMY"]
[Sat Jan 03 21:16:17.294853 2026] [:error] [pid 1929:tid 1947] [client 4.193.242.138:26351] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jmfi2.php"] [unique_id "aVkWoecFqdpu6TNsuWronwAAAAk"]
[Sat Jan 03 21:16:18.785235 2026] [:error] [pid 31630:tid 31653] [client 4.193.242.138:1113] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jmfi2.php"] [unique_id "aVkWovUV_PU2SWgLPuhbtAAAAZU"]
[Sat Jan 03 21:16:19.415903 2026] [:error] [pid 34260:tid 34284] [client 4.193.242.138:19853] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aVkWo0WWhyvZ0O9KNVQe3QAAARY"]
[Sat Jan 03 21:16:19.974621 2026] [:error] [pid 34260:tid 34266] [client 4.193.242.138:1150] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aVkWo0WWhyvZ0O9KNVQe3wAAAQQ"]
[Sat Jan 03 21:16:20.801279 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:19903] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aVkWpDVlR_BmlMPnhV4WJAAAAMk"]
[Sat Jan 03 21:16:21.454114 2026] [:error] [pid 1929:tid 1946] [client 4.193.242.138:1137] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nij.php"] [unique_id "aVkWpecFqdpu6TNsuWropgAAAAg"]
[Sat Jan 03 21:16:21.941399 2026] [:error] [pid 34260:tid 34282] [client 4.193.242.138:21650] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVkWpUWWhyvZ0O9KNVQe5wAAARQ"]
[Sat Jan 03 21:16:23.146872 2026] [:error] [pid 34260:tid 34280] [client 4.193.242.138:1140] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVkWp0WWhyvZ0O9KNVQe6gAAARI"]
[Sat Jan 03 21:16:23.704762 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:23246] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVkWp0WWhyvZ0O9KNVQe6wAAARc"]
[Sat Jan 03 21:16:24.003140 2026] [:error] [pid 31222:tid 31233] [client 4.193.242.138:19860] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aVkWqKHw6nASHXAc2v_f4AAAAck"]
[Sat Jan 03 21:16:24.632355 2026] [:error] [pid 31222:tid 31248] [client 4.193.242.138:1697] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVkWqKHw6nASHXAc2v_f4wAAAdg"]
[Sat Jan 03 21:16:25.810671 2026] [:error] [pid 31222:tid 31225] [client 4.193.242.138:19871] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVkWqaHw6nASHXAc2v_f5QAAAcE"]
[Sat Jan 03 21:16:26.766989 2026] [:error] [pid 2083:tid 2089] [client 4.193.242.138:19435] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVkWqjVlR_BmlMPnhV4WLwAAAMQ"]
[Sat Jan 03 21:16:27.630232 2026] [:error] [pid 1929:tid 1961] [client 4.193.242.138:19443] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVkWq-cFqdpu6TNsuWrosAAAABc"]
[Sat Jan 03 21:16:28.075170 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:23238] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth.php"] [unique_id "aVkWrEWWhyvZ0O9KNVQe8gAAARc"]
[Sat Jan 03 21:16:29.070947 2026] [:error] [pid 1930:tid 1986] [client 4.193.242.138:1151] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth.php"] [unique_id "aVkWrZP-6mqhfUDa89zgsAAAAFQ"]
[Sat Jan 03 21:16:30.088341 2026] [:error] [pid 19639:tid 19645] [client 4.193.242.138:26310] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth.php"] [unique_id "aVkWriQ7fWZUytnlHEz7TwAAAUQ"]
[Sat Jan 03 21:16:30.814663 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:26318] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth.php"] [unique_id "aVkWrkWWhyvZ0O9KNVQe9AAAAQg"]
[Sat Jan 03 21:16:32.099154 2026] [:error] [pid 1931:tid 1994] [client 4.193.242.138:1145] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVkWsB8Tyw7ZoIdXlcb6KwAAAIE"]
[Sat Jan 03 21:16:33.839875 2026] [:error] [pid 19639:tid 19664] [client 4.193.242.138:19422] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVkWsSQ7fWZUytnlHEz7UQAAAVc"]
[Sat Jan 03 21:16:36.038210 2026] [:error] [pid 19639:tid 19649] [client 4.193.242.138:19438] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVkWtCQ7fWZUytnlHEz7VAAAAUg"]
[Sat Jan 03 21:16:37.931713 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:19410] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aVkWtfUV_PU2SWgLPuhbwQAAAYs"]
[Sat Jan 03 21:16:39.569168 2026] [:error] [pid 1929:tid 1951] [client 4.193.242.138:22435] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVkWt-cFqdpu6TNsuWrovwAAAA0"]
[Sat Jan 03 21:16:41.796062 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sat Jan 03 21:16:42.558607 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Jan 03 21:16:42.790881 2026] [:error] [pid 31630:tid 31633] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-903.php
[Sat Jan 03 21:16:42.948053 2026] [:error] [pid 31630:tid 31656] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Jan 03 21:16:43.066912 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Sat Jan 03 21:16:43.515095 2026] [:error] [pid 31630:tid 31640] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Sat Jan 03 21:16:43.606424 2026] [:error] [pid 31630:tid 31634] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sat Jan 03 21:16:43.717968 2026] [:error] [pid 31630:tid 31650] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Jan 03 21:16:43.807894 2026] [:error] [pid 31630:tid 31637] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Sat Jan 03 21:16:43.899095 2026] [:error] [pid 31630:tid 31651] [client 4.193.242.138:23288] File does not exist: /usr/local/apache/htdocs/suspended-page/wcas.php
[Sat Jan 03 21:16:43.991606 2026] [:error] [pid 31630:tid 31654] [client 4.193.242.138:23288] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aVkWu_UV_PU2SWgLPuhb4AAAAZY"]
[Sat Jan 03 21:16:45.357988 2026] [:error] [pid 1929:tid 1939] [client 4.193.242.138:22437] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aVkWvecFqdpu6TNsuWroxQAAAAE"]
[Sat Jan 03 21:16:47.521188 2026] [:error] [pid 31222:tid 31235] [client 4.193.242.138:2035] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aVkWv6Hw6nASHXAc2v_gCwAAAcs"]
[Sat Jan 03 21:16:48.352642 2026] [:error] [pid 1931:tid 2035] [client 4.193.242.138:21739] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aVkWwB8Tyw7ZoIdXlcb6SAAAAIs"]
[Sat Jan 03 21:16:48.913992 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:21758] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aVkWwJP-6mqhfUDa89zgvwAAAEo"]
[Sat Jan 03 21:16:49.849062 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:1594] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aVkWwfUV_PU2SWgLPuhb5QAAAZE"]
[Sat Jan 03 21:16:50.577861 2026] [:error] [pid 1929:tid 1948] [client 4.193.242.138:21751] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aVkWwucFqdpu6TNsuWrozQAAAAo"]
[Sat Jan 03 21:16:51.502448 2026] [:error] [pid 19639:tid 19658] [client 4.193.242.138:2006] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aVkWwyQ7fWZUytnlHEz7ZwAAAVE"]
[Sat Jan 03 21:16:52.704458 2026] [:error] [pid 31630:tid 31640] [client 4.193.242.138:1586] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVkWxPUV_PU2SWgLPuhb6wAAAYg"]
[Sat Jan 03 21:16:53.457052 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:21727] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVkWxTVlR_BmlMPnhV4WRQAAAMk"]
[Sat Jan 03 21:16:54.389847 2026] [:error] [pid 31630:tid 31655] [client 4.193.242.138:2025] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVkWxvUV_PU2SWgLPuhb7wAAAZc"]
[Sat Jan 03 21:16:55.088671 2026] [:error] [pid 1929:tid 1953] [client 4.193.242.138:22427] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVkWx-cFqdpu6TNsuWro3QAAAA8"]
[Sat Jan 03 21:16:55.679178 2026] [:error] [pid 1929:tid 1949] [client 4.193.242.138:22436] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVkWx-cFqdpu6TNsuWro3wAAAAs"]
[Sat Jan 03 21:16:56.333086 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:22420] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVkWyPUV_PU2SWgLPuhb9AAAAYs"]
[Sat Jan 03 21:16:56.746395 2026] [:error] [pid 34260:tid 34267] [client 4.193.242.138:21732] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVkWyEWWhyvZ0O9KNVQe_wAAAQU"]
[Sat Jan 03 21:16:57.343959 2026] [:error] [pid 1929:tid 1942] [client 4.193.242.138:21740] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVkWyecFqdpu6TNsuWro4QAAAAQ"]
[Sat Jan 03 21:16:57.916296 2026] [:error] [pid 31222:tid 31226] [client 4.193.242.138:1593] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVkWyaHw6nASHXAc2v_gGwAAAcI"]
[Sat Jan 03 21:16:58.322662 2026] [:error] [pid 19639:tid 19659] [client 4.193.242.138:1557] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVkWyiQ7fWZUytnlHEz7bwAAAVI"]
[Sat Jan 03 21:16:58.898797 2026] [:error] [pid 31222:tid 31229] [client 4.193.242.138:1560] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVkWyqHw6nASHXAc2v_gHQAAAcU"]
[Sat Jan 03 21:16:59.176767 2026] [:error] [pid 31630:tid 31633] [client 4.193.242.138:22426] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVkWy_UV_PU2SWgLPuhcAQAAAYE"]
[Sat Jan 03 21:16:59.498224 2026] [:error] [pid 1930:tid 1979] [client 4.193.242.138:21696] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/himu.php"] [unique_id "aVkWy5P-6mqhfUDa89zgzAAAAE0"]
[Sat Jan 03 21:16:59.898206 2026] [:error] [pid 31630:tid 31640] [client 4.193.242.138:22419] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/himu.php"] [unique_id "aVkWy_UV_PU2SWgLPuhcBgAAAYg"]
[Sat Jan 03 21:17:00.514080 2026] [:error] [pid 2083:tid 2085] [client 4.193.242.138:22478] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/himu.php"] [unique_id "aVkWzDVlR_BmlMPnhV4WTwAAAMA"]
[Sat Jan 03 21:17:01.198859 2026] [:error] [pid 31222:tid 31236] [client 4.193.242.138:1988] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/himu.php"] [unique_id "aVkWzaHw6nASHXAc2v_gHwAAAcw"]
[Sat Jan 03 21:17:02.212516 2026] [:error] [pid 31222:tid 31247] [client 4.193.242.138:22480] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aVkWzqHw6nASHXAc2v_gJQAAAdc"]
[Sat Jan 03 21:17:03.568127 2026] [:error] [pid 31222:tid 31238] [client 4.193.242.138:21744] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aVkWz6Hw6nASHXAc2v_gKwAAAc4"]
[Sat Jan 03 21:17:04.595822 2026] [:error] [pid 31222:tid 31224] [client 4.193.242.138:21731] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aVkW0KHw6nASHXAc2v_gLgAAAcA"]
[Sat Jan 03 21:17:05.372758 2026] [:error] [pid 34260:tid 34266] [client 4.193.242.138:2013] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aVkW0UWWhyvZ0O9KNVQfBwAAAQQ"]
[Sat Jan 03 21:17:06.376657 2026] [:error] [pid 1931:tid 2029] [client 4.193.242.138:21737] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aVkW0h8Tyw7ZoIdXlcb6WwAAAIU"]
[Sat Jan 03 21:17:07.166917 2026] [:error] [pid 34260:tid 34281] [client 4.193.242.138:21742] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aVkW00WWhyvZ0O9KNVQfCAAAARM"]
[Sat Jan 03 21:17:08.279097 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:21726] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aVkW1KHw6nASHXAc2v_gPAAAAcg"]
[Sat Jan 03 21:17:09.094645 2026] [:error] [pid 31222:tid 31247] [client 4.193.242.138:1996] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aVkW1aHw6nASHXAc2v_gQAAAAdc"]
[Sat Jan 03 21:17:10.002584 2026] [:error] [pid 34260:tid 34262] [client 4.193.242.138:1537] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abt.php"] [unique_id "aVkW1kWWhyvZ0O9KNVQfDAAAAQA"]
[Sat Jan 03 21:17:10.513220 2026] [:error] [pid 1929:tid 1950] [client 4.193.242.138:1553] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abt.php"] [unique_id "aVkW1ucFqdpu6TNsuWro5AAAAAw"]
[Sat Jan 03 21:17:11.158452 2026] [:error] [pid 1930:tid 1971] [client 4.193.242.138:21748] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abt.php"] [unique_id "aVkW15P-6mqhfUDa89zg2wAAAEU"]
[Sat Jan 03 21:17:11.589616 2026] [:error] [pid 1930:tid 1974] [client 4.193.242.138:1587] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abt.php"] [unique_id "aVkW15P-6mqhfUDa89zg3QAAAEg"]
[Sat Jan 03 21:17:11.852798 2026] [:error] [pid 1930:tid 1981] [client 4.193.242.138:28950] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aVkW15P-6mqhfUDa89zg4AAAAE8"]
[Sat Jan 03 21:17:12.566472 2026] [:error] [pid 1929:tid 1938] [client 4.193.242.138:23571] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aVkW2OcFqdpu6TNsuWro5gAAAAA"]
[Sat Jan 03 21:17:13.621834 2026] [:error] [pid 1930:tid 1987] [client 4.193.242.138:22432] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aVkW2ZP-6mqhfUDa89zg6QAAAFU"]
[Sat Jan 03 21:17:15.078523 2026] [:error] [pid 1930:tid 1966] [client 4.193.242.138:23563] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aVkW25P-6mqhfUDa89zg7AAAAEA"]
[Sat Jan 03 21:17:15.844361 2026] [:error] [pid 31630:tid 31656] [client 4.193.242.138:1569] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aVkW2_UV_PU2SWgLPuhcIwAAAZg"]
[Sat Jan 03 21:17:16.771837 2026] [:error] [pid 1930:tid 1978] [client 4.193.242.138:22449] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aVkW3JP-6mqhfUDa89zg7wAAAEw"]
[Sat Jan 03 21:17:17.993607 2026] [:error] [pid 31630:tid 31642] [client 4.193.242.138:23614] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aVkW3fUV_PU2SWgLPuhcKwAAAYo"]
[Sat Jan 03 21:17:18.899688 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:23555] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "aVkW3kWWhyvZ0O9KNVQfEgAAARc"]
[Sat Jan 03 21:17:19.764109 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:33010] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aVkW3_UV_PU2SWgLPuhcLwAAAYk"]
[Sat Jan 03 21:17:20.722169 2026] [:error] [pid 31630:tid 31634] [client 4.193.242.138:32969] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aVkW4PUV_PU2SWgLPuhcMgAAAYI"]
[Sat Jan 03 21:17:21.459030 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:28930] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aVkW4aHw6nASHXAc2v_gZgAAAdI"]
[Sat Jan 03 21:17:22.058881 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:28939] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wb.php"] [unique_id "aVkW4pP-6mqhfUDa89zg-gAAAEo"]
[Sat Jan 03 21:17:22.825896 2026] [:error] [pid 31222:tid 31225] [client 4.193.242.138:22466] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aVkW4qHw6nASHXAc2v_gbAAAAcE"]
[Sat Jan 03 21:17:23.940221 2026] [:error] [pid 34260:tid 34271] [client 4.193.242.138:32988] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aVkW40WWhyvZ0O9KNVQfHAAAAQk"]
[Sat Jan 03 21:17:24.759059 2026] [:error] [pid 1930:tid 1967] [client 4.193.242.138:1563] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aVkW5JP-6mqhfUDa89zhBgAAAEE"]
[Sat Jan 03 21:17:25.576333 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:28940] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mnkalo.php"] [unique_id "aVkW5fUV_PU2SWgLPuhcOgAAAYk"]
[Sat Jan 03 21:17:26.110249 2026] [:error] [pid 31222:tid 31237] [client 4.193.242.138:23573] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aVkW5qHw6nASHXAc2v_gbwAAAc0"]
[Sat Jan 03 21:17:26.812343 2026] [:error] [pid 1930:tid 1987] [client 4.193.242.138:28971] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aVkW5pP-6mqhfUDa89zhCgAAAFU"]
[Sat Jan 03 21:17:27.853399 2026] [:error] [pid 31222:tid 31228] [client 4.193.242.138:23652] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aVkW56Hw6nASHXAc2v_gdQAAAcQ"]
[Sat Jan 03 21:17:28.390123 2026] [:error] [pid 19639:tid 19658] [client 4.193.242.138:23628] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-x7.php"] [unique_id "aVkW6CQ7fWZUytnlHEz7eAAAAVE"]
[Sat Jan 03 21:17:29.578504 2026] [:error] [pid 19639:tid 19651] [client 4.193.242.138:23630] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd67.php"] [unique_id "aVkW6SQ7fWZUytnlHEz7egAAAUo"]
[Sat Jan 03 21:17:31.274805 2026] [:error] [pid 1929:tid 1949] [client 4.193.242.138:33003] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd67.php"] [unique_id "aVkW6-cFqdpu6TNsuWro9AAAAAs"]
[Sat Jan 03 21:17:32.834127 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:23572] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd67.php"] [unique_id "aVkW7KHw6nASHXAc2v_gggAAAdU"]
[Sat Jan 03 21:17:33.530123 2026] [:error] [pid 34260:tid 34266] [client 4.193.242.138:23665] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd67.php"] [unique_id "aVkW7UWWhyvZ0O9KNVQfKgAAAQQ"]
[Sat Jan 03 21:17:34.451355 2026] [:error] [pid 1930:tid 1977] [client 4.193.242.138:21699] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVkW7pP-6mqhfUDa89zhGAAAAEs"]
[Sat Jan 03 21:17:35.093811 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:32989] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVkW7_UV_PU2SWgLPuhcPgAAAZE"]
[Sat Jan 03 21:17:35.635701 2026] [:error] [pid 31630:tid 31650] [client 4.193.242.138:33023] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVkW7_UV_PU2SWgLPuhcQAAAAZI"]
[Sat Jan 03 21:17:36.202152 2026] [:error] [pid 31630:tid 31653] [client 4.193.242.138:28935] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVkW8PUV_PU2SWgLPuhcQgAAAZU"]
[Sat Jan 03 21:17:36.969375 2026] [:error] [pid 31222:tid 31240] [client 4.193.242.138:21708] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVkW8KHw6nASHXAc2v_ghwAAAdA"]
[Sat Jan 03 21:17:37.447907 2026] [:error] [pid 1929:tid 1962] [client 4.193.242.138:28972] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVkW8ecFqdpu6TNsuWro_gAAABg"]
[Sat Jan 03 21:17:37.683934 2026] [:error] [pid 1929:tid 1957] [client 4.193.242.138:33011] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVkW8ecFqdpu6TNsuWro_wAAABM"]
[Sat Jan 03 21:17:38.077812 2026] [:error] [pid 1929:tid 1949] [client 4.193.242.138:28969] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVkW8ucFqdpu6TNsuWrpAwAAAAs"]
[Sat Jan 03 21:17:38.809849 2026] [:error] [pid 1929:tid 1948] [client 4.193.242.138:1537] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVkW8ucFqdpu6TNsuWrpBQAAAAo"]
[Sat Jan 03 21:17:39.120534 2026] [:error] [pid 1931:tid 2044] [client 4.193.242.138:23605] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVkW8x8Tyw7ZoIdXlcb6gAAAAJQ"]
[Sat Jan 03 21:17:39.659393 2026] [:error] [pid 31222:tid 31239] [client 4.193.242.138:28934] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVkW86Hw6nASHXAc2v_giQAAAc8"]
[Sat Jan 03 21:17:46.590665 2026] [:error] [pid 31222:tid 31237] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Jan 03 21:17:47.397989 2026] [:error] [pid 31222:tid 31240] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sat Jan 03 21:17:47.489941 2026] [:error] [pid 31222:tid 31235] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Jan 03 21:17:47.580721 2026] [:error] [pid 31222:tid 31234] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sat Jan 03 21:17:47.690139 2026] [:error] [pid 31222:tid 31230] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Jan 03 21:17:47.780215 2026] [:error] [pid 31222:tid 31226] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Jan 03 21:17:47.872729 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp.php
[Sat Jan 03 21:17:48.150271 2026] [:error] [pid 31222:tid 31241] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Sat Jan 03 21:17:48.263671 2026] [:error] [pid 31222:tid 31243] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Jan 03 21:17:48.513637 2026] [:error] [pid 31222:tid 31224] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Sat Jan 03 21:17:48.720843 2026] [:error] [pid 31222:tid 31229] [client 4.193.242.138:22416] File does not exist: /usr/local/apache/htdocs/suspended-page/mans.php
[Sat Jan 03 21:17:48.815623 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:22416] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aVkW_KHw6nASHXAc2v_gpQAAAcg"]
[Sat Jan 03 21:17:49.809319 2026] [:error] [pid 31630:tid 31632] [client 4.193.242.138:28988] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aVkW_fUV_PU2SWgLPuhcVwAAAYA"]
[Sat Jan 03 21:17:50.682308 2026] [:error] [pid 34260:tid 34283] [client 4.193.242.138:23613] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aVkW_kWWhyvZ0O9KNVQfOQAAARU"]
[Sat Jan 03 21:17:51.170253 2026] [:error] [pid 34260:tid 34280] [client 4.193.242.138:32993] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aVkW_0WWhyvZ0O9KNVQfPQAAARI"]
[Sat Jan 03 21:17:51.647915 2026] [:error] [pid 1929:tid 1957] [client 4.193.242.138:23636] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVkW_-cFqdpu6TNsuWrpFwAAABM"]
[Sat Jan 03 21:17:52.158123 2026] [:error] [pid 31222:tid 31244] [client 4.193.242.138:23604] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVkXAKHw6nASHXAc2v_gtgAAAdQ"]
[Sat Jan 03 21:17:52.811128 2026] [:error] [pid 31222:tid 31247] [client 4.193.242.138:23609] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVkXAKHw6nASHXAc2v_gugAAAdc"]
[Sat Jan 03 21:17:53.383000 2026] [:error] [pid 1929:tid 1945] [client 4.193.242.138:21729] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVkXAecFqdpu6TNsuWrpHwAAAAc"]
[Sat Jan 03 21:17:53.977502 2026] [:error] [pid 2083:tid 2090] [client 4.193.242.138:32984] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usep.php"] [unique_id "aVkXATVlR_BmlMPnhV4WbAAAAMU"]
[Sat Jan 03 21:17:54.458685 2026] [:error] [pid 2083:tid 2109] [client 4.193.242.138:28933] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usep.php"] [unique_id "aVkXAjVlR_BmlMPnhV4WbgAAANg"]
[Sat Jan 03 21:17:54.912782 2026] [:error] [pid 31630:tid 31642] [client 4.193.242.138:23586] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usep.php"] [unique_id "aVkXAvUV_PU2SWgLPuhcYQAAAYo"]
[Sat Jan 03 21:17:55.280904 2026] [:error] [pid 1929:tid 1962] [client 4.193.242.138:23678] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/usep.php"] [unique_id "aVkXA-cFqdpu6TNsuWrpJwAAABg"]
[Sat Jan 03 21:17:56.349025 2026] [:error] [pid 34260:tid 34262] [client 4.193.242.138:23580] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVkXBEWWhyvZ0O9KNVQfRQAAAQA"]
[Sat Jan 03 21:17:56.746104 2026] [:error] [pid 2083:tid 2097] [client 4.193.242.138:2045] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVkXBDVlR_BmlMPnhV4WbwAAAMw"]
[Sat Jan 03 21:17:57.250144 2026] [:error] [pid 31630:tid 31635] [client 4.193.242.138:32981] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVkXBfUV_PU2SWgLPuhcZgAAAYM"]
[Sat Jan 03 21:17:57.923811 2026] [:error] [pid 2083:tid 2089] [client 4.193.242.138:32970] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aVkXBTVlR_BmlMPnhV4WcAAAAMQ"]
[Sat Jan 03 21:17:58.236414 2026] [:error] [pid 1931:tid 2040] [client 4.193.242.138:23670] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc.php"] [unique_id "aVkXBh8Tyw7ZoIdXlcb6jAAAAJA"]
[Sat Jan 03 21:17:58.694834 2026] [:error] [pid 31630:tid 31654] [client 4.193.242.138:21722] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc.php"] [unique_id "aVkXBvUV_PU2SWgLPuhccAAAAZY"]
[Sat Jan 03 21:17:59.176707 2026] [:error] [pid 1929:tid 1960] [client 4.193.242.138:32998] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc.php"] [unique_id "aVkXB-cFqdpu6TNsuWrpLAAAABY"]
[Sat Jan 03 21:17:59.625013 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:32997] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc.php"] [unique_id "aVkXB_UV_PU2SWgLPuhcdAAAAYs"]
[Sat Jan 03 21:18:00.033468 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:22516] [client 4.193.242.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aVkXCJP-6mqhfUDa89zhLQAAAFE"]
[Sat Jan 03 21:18:00.670874 2026] [:error] [pid 31222:tid 31238] [client 4.193.242.138:23640] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aVkXCKHw6nASHXAc2v_gvgAAAc4"]
[Sat Jan 03 21:18:01.028858 2026] [:error] [pid 34260:tid 34281] [client 4.193.242.138:32973] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aVkXCUWWhyvZ0O9KNVQfSgAAARM"]
[Sat Jan 03 21:18:02.111521 2026] [:error] [pid 2083:tid 2104] [client 4.193.242.138:28949] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gdn.php"] [unique_id "aVkXCjVlR_BmlMPnhV4WeAAAANM"]
[Sat Jan 03 21:18:02.722683 2026] [:error] [pid 31222:tid 31235] [client 4.193.242.138:28985] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aVkXCqHw6nASHXAc2v_gxQAAAcs"]
[Sat Jan 03 21:18:03.569559 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:23565] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aVkXC0WWhyvZ0O9KNVQfTQAAAQg"]
[Sat Jan 03 21:18:04.688003 2026] [:error] [pid 2083:tid 2086] [client 4.193.242.138:23645] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aVkXDDVlR_BmlMPnhV4WgwAAAME"]
[Sat Jan 03 21:18:05.313425 2026] [:error] [pid 31222:tid 31243] [client 4.193.242.138:1567] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aVkXDaHw6nASHXAc2v_gzQAAAdM"]
[Sat Jan 03 21:18:05.757384 2026] [:error] [pid 34260:tid 34286] [client 4.193.242.138:28948] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aVkXDUWWhyvZ0O9KNVQfVQAAARg"]
[Sat Jan 03 21:18:06.093244 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:21743] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aVkXDvUV_PU2SWgLPuhcfAAAAYk"]
[Sat Jan 03 21:18:06.487316 2026] [:error] [pid 34260:tid 34284] [client 4.193.242.138:33008] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aVkXDkWWhyvZ0O9KNVQfWQAAARY"]
[Sat Jan 03 21:18:07.068893 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:23570] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an.php"] [unique_id "aVkXD6Hw6nASHXAc2v_g0wAAAdI"]
[Sat Jan 03 21:18:07.438707 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:23601] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVkXD0WWhyvZ0O9KNVQfXAAAARc"]
[Sat Jan 03 21:18:08.354188 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:23606] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVkXEEWWhyvZ0O9KNVQfYQAAAQE"]
[Sat Jan 03 21:18:08.771089 2026] [:error] [pid 34260:tid 34283] [client 4.193.242.138:23643] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVkXEEWWhyvZ0O9KNVQfZAAAARU"]
[Sat Jan 03 21:18:09.567700 2026] [:error] [pid 31222:tid 31231] [client 4.193.242.138:23558] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVkXEaHw6nASHXAc2v_g3gAAAcc"]
[Sat Jan 03 21:18:10.333236 2026] [:error] [pid 2083:tid 2101] [client 4.193.242.138:28932] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkXEjVlR_BmlMPnhV4WigAAANA"]
[Sat Jan 03 21:18:10.892843 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:23552] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkXEqHw6nASHXAc2v_g5QAAAdU"]
[Sat Jan 03 21:18:11.279329 2026] [:error] [pid 2083:tid 2102] [client 4.193.242.138:2030] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkXEzVlR_BmlMPnhV4WiwAAANE"]
[Sat Jan 03 21:18:11.740497 2026] [:error] [pid 2083:tid 2109] [client 4.193.242.138:22505] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkXEzVlR_BmlMPnhV4WjQAAANg"]
[Sat Jan 03 21:18:12.255207 2026] [:error] [pid 2083:tid 2100] [client 4.193.242.138:28961] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aVkXFDVlR_BmlMPnhV4WjwAAAM8"]
[Sat Jan 03 21:18:12.897953 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:33018] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aVkXFEWWhyvZ0O9KNVQfbgAAAQE"]
[Sat Jan 03 21:18:13.497511 2026] [:error] [pid 34260:tid 34280] [client 4.193.242.138:23647] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aVkXFUWWhyvZ0O9KNVQfcgAAARI"]
[Sat Jan 03 21:18:13.840208 2026] [:error] [pid 34260:tid 34284] [client 4.193.242.138:21728] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/png.php"] [unique_id "aVkXFUWWhyvZ0O9KNVQfdgAAARY"]
[Sat Jan 03 21:18:14.031927 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:28965] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aVkXFkWWhyvZ0O9KNVQfdwAAARc"]
[Sat Jan 03 21:18:14.366197 2026] [:error] [pid 34260:tid 34279] [client 4.193.242.138:32999] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aVkXFkWWhyvZ0O9KNVQfewAAARE"]
[Sat Jan 03 21:18:14.770278 2026] [:error] [pid 31630:tid 31651] [client 4.193.242.138:23642] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aVkXFvUV_PU2SWgLPuhcggAAAZM"]
[Sat Jan 03 21:18:15.282793 2026] [:error] [pid 34260:tid 34282] [client 4.193.242.138:23649] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aVkXF0WWhyvZ0O9KNVQfgAAAARQ"]
[Sat Jan 03 21:18:15.677364 2026] [:error] [pid 34260:tid 34271] [client 4.193.242.138:21721] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aVkXF0WWhyvZ0O9KNVQfhQAAAQk"]
[Sat Jan 03 21:18:16.098247 2026] [:error] [pid 31222:tid 31225] [client 4.193.242.138:23615] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aVkXGKHw6nASHXAc2v_g-AAAAcE"]
[Sat Jan 03 21:18:16.493135 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:23583] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aVkXGEWWhyvZ0O9KNVQfiQAAAQE"]
[Sat Jan 03 21:18:16.946849 2026] [:error] [pid 34260:tid 34268] [client 4.193.242.138:23629] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtt.php"] [unique_id "aVkXGEWWhyvZ0O9KNVQfjQAAAQY"]
[Sat Jan 03 21:18:17.258285 2026] [:error] [pid 34260:tid 34275] [client 4.193.242.138:23658] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVkXGUWWhyvZ0O9KNVQfjgAAAQ0"]
[Sat Jan 03 21:18:17.713789 2026] [:error] [pid 1930:tid 1987] [client 4.193.242.138:1597] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVkXGZP-6mqhfUDa89zhOAAAAFU"]
[Sat Jan 03 21:18:18.363842 2026] [:error] [pid 1930:tid 1973] [client 4.193.242.138:23625] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVkXGpP-6mqhfUDa89zhOQAAAEc"]
[Sat Jan 03 21:18:18.863226 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:23639] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVkXGvUV_PU2SWgLPuhchgAAAZE"]
[Sat Jan 03 21:18:19.565868 2026] [:error] [pid 31222:tid 31240] [client 4.193.242.138:28991] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luxe.php"] [unique_id "aVkXG6Hw6nASHXAc2v_g_AAAAdA"]
[Sat Jan 03 21:18:19.894234 2026] [:error] [pid 1930:tid 1972] [client 4.193.242.138:32995] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luxe.php"] [unique_id "aVkXG5P-6mqhfUDa89zhPwAAAEY"]
[Sat Jan 03 21:18:20.401299 2026] [:error] [pid 19639:tid 19661] [client 4.193.242.138:22438] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luxe.php"] [unique_id "aVkXHCQ7fWZUytnlHEz7pgAAAVQ"]
[Sat Jan 03 21:18:20.652228 2026] [:error] [pid 31222:tid 31228] [client 4.193.242.138:23579] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luxe.php"] [unique_id "aVkXHKHw6nASHXAc2v_g_wAAAcQ"]
[Sat Jan 03 21:18:21.079262 2026] [:error] [pid 31630:tid 31655] [client 4.193.242.138:28943] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aVkXHfUV_PU2SWgLPuhcjwAAAZc"]
[Sat Jan 03 21:18:21.391723 2026] [:error] [pid 31630:tid 31639] [client 4.193.242.138:32971] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aVkXHfUV_PU2SWgLPuhckQAAAYc"]
[Sat Jan 03 21:18:21.784821 2026] [:error] [pid 31630:tid 31640] [client 4.193.242.138:23596] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aVkXHfUV_PU2SWgLPuhclAAAAYg"]
[Sat Jan 03 21:18:22.169497 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:28958] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aVkXHqHw6nASHXAc2v_hAwAAAdU"]
[Sat Jan 03 21:18:22.667404 2026] [:error] [pid 31630:tid 31653] [client 4.193.242.138:28973] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVkXHvUV_PU2SWgLPuhcmgAAAZU"]
[Sat Jan 03 21:18:23.263719 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:21700] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVkXH_UV_PU2SWgLPuhcnQAAAYk"]
[Sat Jan 03 21:18:24.005371 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:23576] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVkXIKHw6nASHXAc2v_hDwAAAdI"]
[Sat Jan 03 21:18:24.376632 2026] [:error] [pid 31222:tid 31246] [client 4.193.242.138:32967] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVkXIKHw6nASHXAc2v_hEQAAAdY"]
[Sat Jan 03 21:18:24.917793 2026] [:error] [pid 1930:tid 1971] [client 4.193.242.138:32980] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aVkXIJP-6mqhfUDa89zhQwAAAEU"]
[Sat Jan 03 21:18:25.489300 2026] [:error] [pid 1930:tid 1990] [client 4.193.242.138:23575] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aVkXIZP-6mqhfUDa89zhRAAAAFg"]
[Sat Jan 03 21:18:26.642225 2026] [:error] [pid 34260:tid 34262] [client 4.193.242.138:22430] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aVkXIkWWhyvZ0O9KNVQflgAAAQA"]
[Sat Jan 03 21:18:27.357584 2026] [:error] [pid 2083:tid 2092] [client 4.193.242.138:23561] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indo.php"] [unique_id "aVkXIzVlR_BmlMPnhV4WkwAAAMc"]
[Sat Jan 03 21:18:27.850456 2026] [:error] [pid 34260:tid 34275] [client 4.193.242.138:22520] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aVkXI0WWhyvZ0O9KNVQfmAAAAQ0"]
[Sat Jan 03 21:18:28.125524 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:28964] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aVkXJKHw6nASHXAc2v_hHQAAAdI"]
[Sat Jan 03 21:18:28.625142 2026] [:error] [pid 31222:tid 31226] [client 4.193.242.138:21715] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aVkXJKHw6nASHXAc2v_hIgAAAcI"]
[Sat Jan 03 21:18:28.873963 2026] [:error] [pid 31630:tid 31654] [client 4.193.242.138:32978] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aVkXJPUV_PU2SWgLPuhcqQAAAZY"]
[Sat Jan 03 21:18:29.100911 2026] [:error] [pid 1930:tid 1970] [client 4.193.242.138:23603] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVkXJZP-6mqhfUDa89zhTgAAAEQ"]
[Sat Jan 03 21:18:29.434150 2026] [:error] [pid 31630:tid 31645] [client 4.193.242.138:23554] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVkXJfUV_PU2SWgLPuhcqwAAAY0"]
[Sat Jan 03 21:18:29.769260 2026] [:error] [pid 19639:tid 19656] [client 4.193.242.138:23600] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVkXJSQ7fWZUytnlHEz7sgAAAU8"]
[Sat Jan 03 21:18:30.058287 2026] [:error] [pid 1930:tid 1989] [client 4.193.242.138:33004] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVkXJpP-6mqhfUDa89zhUQAAAFc"]
[Sat Jan 03 21:18:30.580831 2026] [:error] [pid 31630:tid 31655] [client 4.193.242.138:28984] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVkXJvUV_PU2SWgLPuhcrwAAAZc"]
[Sat Jan 03 21:18:31.010952 2026] [:error] [pid 34260:tid 34269] [client 4.193.242.138:23593] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVkXJ0WWhyvZ0O9KNVQfngAAAQc"]
[Sat Jan 03 21:18:31.499624 2026] [:error] [pid 31630:tid 31632] [client 4.193.242.138:28989] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVkXJ_UV_PU2SWgLPuhcswAAAYA"]
[Sat Jan 03 21:18:31.800477 2026] [:error] [pid 19639:tid 19663] [client 4.193.242.138:1592] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVkXJyQ7fWZUytnlHEz7tQAAAVY"]
[Sat Jan 03 21:18:32.172868 2026] [:error] [pid 1930:tid 1977] [client 4.193.242.138:23602] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aVkXKJP-6mqhfUDa89zhVwAAAEs"]
[Sat Jan 03 21:18:32.464057 2026] [:error] [pid 31222:tid 31233] [client 4.193.242.138:1551] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aVkXKKHw6nASHXAc2v_hKQAAAck"]
[Sat Jan 03 21:18:32.769742 2026] [:error] [pid 31222:tid 31224] [client 4.193.242.138:28970] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aVkXKKHw6nASHXAc2v_hKgAAAcA"]
[Sat Jan 03 21:18:33.374158 2026] [:error] [pid 1930:tid 1972] [client 4.193.242.138:1581] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aVkXKZP-6mqhfUDa89zhWwAAAEY"]
[Sat Jan 03 21:18:33.822638 2026] [:error] [pid 31222:tid 31244] [client 4.193.242.138:32960] [client 4.193.242.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aVkXKaHw6nASHXAc2v_hNAAAAdQ"]
[Sat Jan 03 21:18:34.302195 2026] [:error] [pid 19639:tid 19654] [client 4.193.242.138:28987] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aVkXKiQ7fWZUytnlHEz7uQAAAU0"]
[Sat Jan 03 21:18:34.679989 2026] [:error] [pid 31222:tid 31246] [client 4.193.242.138:2046] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aVkXKqHw6nASHXAc2v_hOAAAAdY"]
[Sat Jan 03 21:18:35.270489 2026] [:error] [pid 19639:tid 19652] [client 4.193.242.138:2008] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aVkXKyQ7fWZUytnlHEz7vAAAAUs"]
[Sat Jan 03 21:18:35.794462 2026] [:error] [pid 19639:tid 19662] [client 4.193.242.138:33022] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aVkXKyQ7fWZUytnlHEz7wAAAAVU"]
[Sat Jan 03 21:18:36.447522 2026] [:error] [pid 19639:tid 19656] [client 4.193.242.138:33016] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aVkXLCQ7fWZUytnlHEz7wwAAAU8"]
[Sat Jan 03 21:18:36.757362 2026] [:error] [pid 34260:tid 34272] [client 4.193.242.138:23620] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aVkXLEWWhyvZ0O9KNVQfpQAAAQo"]
[Sat Jan 03 21:18:37.061260 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:19437] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aVkXLZP-6mqhfUDa89zhYAAAAFE"]
[Sat Jan 03 21:18:37.479524 2026] [:error] [pid 31630:tid 31656] [client 4.193.242.138:23585] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aVkXLfUV_PU2SWgLPuhcuQAAAZg"]
[Sat Jan 03 21:18:38.208701 2026] [:error] [pid 1929:tid 1947] [client 4.193.242.138:21752] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVkXLucFqdpu6TNsuWrpTQAAAAk"]
[Sat Jan 03 21:18:39.115162 2026] [:error] [pid 1930:tid 1980] [client 4.193.242.138:1123] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVkXL5P-6mqhfUDa89zhZAAAAE4"]
[Sat Jan 03 21:18:39.793295 2026] [:error] [pid 31222:tid 31243] [client 4.193.242.138:22488] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVkXL6Hw6nASHXAc2v_hPQAAAdM"]
[Sat Jan 03 21:18:40.222490 2026] [:error] [pid 1929:tid 1948] [client 4.193.242.138:23659] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVkXMOcFqdpu6TNsuWrpVAAAAAo"]
[Sat Jan 03 21:18:40.609815 2026] [:error] [pid 1930:tid 1978] [client 4.193.242.138:33014] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aVkXMJP-6mqhfUDa89zhaAAAAEw"]
[Sat Jan 03 21:18:41.017126 2026] [:error] [pid 1929:tid 1939] [client 4.193.242.138:21702] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aVkXMecFqdpu6TNsuWrpVgAAAAE"]
[Sat Jan 03 21:18:41.430231 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:23610] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aVkXMZP-6mqhfUDa89zhbwAAAFE"]
[Sat Jan 03 21:18:41.778032 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:23560] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file3.php"] [unique_id "aVkXMfUV_PU2SWgLPuhcugAAAY8"]
[Sat Jan 03 21:18:42.370950 2026] [:error] [pid 31222:tid 31228] [client 4.193.242.138:21697] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aVkXMqHw6nASHXAc2v_hPwAAAcQ"]
[Sat Jan 03 21:18:42.990199 2026] [:error] [pid 2083:tid 2109] [client 4.193.242.138:21725] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aVkXMjVlR_BmlMPnhV4WlgAAANg"]
[Sat Jan 03 21:18:43.250077 2026] [:error] [pid 31222:tid 31226] [client 4.193.242.138:19865] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aVkXM6Hw6nASHXAc2v_hQgAAAcI"]
[Sat Jan 03 21:18:43.669842 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:22526] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media.php"] [unique_id "aVkXM0WWhyvZ0O9KNVQfsgAAAQg"]
[Sat Jan 03 21:18:44.260599 2026] [:error] [pid 19639:tid 19665] [client 4.193.242.138:21723] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aVkXNCQ7fWZUytnlHEz7zwAAAVg"]
[Sat Jan 03 21:18:44.568014 2026] [:error] [pid 1931:tid 2048] [client 4.193.242.138:22486] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aVkXNB8Tyw7ZoIdXlcb6lQAAAJg"]
[Sat Jan 03 21:18:45.041911 2026] [:error] [pid 19639:tid 19643] [client 4.193.242.138:1556] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aVkXNSQ7fWZUytnlHEz70AAAAUI"]
[Sat Jan 03 21:18:45.423844 2026] [:error] [pid 34260:tid 34276] [client 4.193.242.138:21756] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r4f_1.php"] [unique_id "aVkXNUWWhyvZ0O9KNVQfuQAAAQ4"]
[Sat Jan 03 21:18:45.965022 2026] [:error] [pid 19639:tid 19647] [client 4.193.242.138:21745] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aVkXNSQ7fWZUytnlHEz70wAAAUY"]
[Sat Jan 03 21:18:46.406203 2026] [:error] [pid 31222:tid 31238] [client 4.193.242.138:33021] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aVkXNqHw6nASHXAc2v_hRwAAAc4"]
[Sat Jan 03 21:18:46.738562 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:28929] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aVkXNkWWhyvZ0O9KNVQfvwAAAQg"]
[Sat Jan 03 21:18:47.316457 2026] [:error] [pid 34260:tid 34264] [client 4.193.242.138:22492] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aVkXN0WWhyvZ0O9KNVQfwwAAAQI"]
[Sat Jan 03 21:18:47.776321 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:23669] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AxAo.php"] [unique_id "aVkXN6Hw6nASHXAc2v_hSQAAAdI"]
[Sat Jan 03 21:18:48.103720 2026] [:error] [pid 34260:tid 34271] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Sat Jan 03 21:18:48.230150 2026] [:error] [pid 34260:tid 34267] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/shellalfa.php
[Sat Jan 03 21:18:48.320058 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Jan 03 21:18:48.444337 2026] [:error] [pid 34260:tid 34279] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Jan 03 21:18:48.535023 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Jan 03 21:18:48.628135 2026] [:error] [pid 34260:tid 34262] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sat Jan 03 21:18:48.848535 2026] [:error] [pid 34260:tid 34277] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Jan 03 21:18:48.938931 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Jan 03 21:18:49.179095 2026] [:error] [pid 34260:tid 34280] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Jan 03 21:18:49.392296 2026] [:error] [pid 34260:tid 34266] [client 4.193.242.138:28982] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Jan 03 21:18:49.480034 2026] [:error] [pid 34260:tid 34275] [client 4.193.242.138:28982] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVkXOUWWhyvZ0O9KNVQf1wAAAQ0"]
[Sat Jan 03 21:18:49.851001 2026] [:error] [pid 31630:tid 31648] [client 4.193.242.138:23668] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVkXOfUV_PU2SWgLPuhcyAAAAZA"]
[Sat Jan 03 21:18:50.368893 2026] [:error] [pid 1929:tid 1958] [client 4.193.242.138:1558] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVkXOucFqdpu6TNsuWrpXwAAABQ"]
[Sat Jan 03 21:18:50.704851 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:23679] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/NewFile.php"] [unique_id "aVkXOpP-6mqhfUDa89zhdwAAAFE"]
[Sat Jan 03 21:18:51.054742 2026] [:error] [pid 19639:tid 19653] [client 4.193.242.138:21749] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aVkXOyQ7fWZUytnlHEz74AAAAUw"]
[Sat Jan 03 21:18:51.341163 2026] [:error] [pid 1929:tid 1944] [client 4.193.242.138:22442] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aVkXO-cFqdpu6TNsuWrpZQAAAAY"]
[Sat Jan 03 21:18:51.637713 2026] [:error] [pid 19639:tid 19648] [client 4.193.242.138:23631] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aVkXOyQ7fWZUytnlHEz75QAAAUc"]
[Sat Jan 03 21:18:51.951268 2026] [:error] [pid 1929:tid 1947] [client 4.193.242.138:23574] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aVkXO-cFqdpu6TNsuWrpZwAAAAk"]
[Sat Jan 03 21:18:52.312788 2026] [:error] [pid 1929:tid 1953] [client 4.193.242.138:21724] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aVkXPOcFqdpu6TNsuWrpagAAAA8"]
[Sat Jan 03 21:18:52.724343 2026] [:error] [pid 19639:tid 19649] [client 4.193.242.138:19421] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aVkXPCQ7fWZUytnlHEz76AAAAUg"]
[Sat Jan 03 21:18:53.229030 2026] [:error] [pid 31630:tid 31650] [client 4.193.242.138:21706] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aVkXPfUV_PU2SWgLPuhczgAAAZI"]
[Sat Jan 03 21:18:53.568085 2026] [:error] [pid 31222:tid 31227] [client 4.193.242.138:1544] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mo.php"] [unique_id "aVkXPaHw6nASHXAc2v_hUQAAAcM"]
[Sat Jan 03 21:18:54.145672 2026] [:error] [pid 31222:tid 31234] [client 4.193.242.138:28957] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVkXPqHw6nASHXAc2v_hUgAAAco"]
[Sat Jan 03 21:18:55.217202 2026] [:error] [pid 31630:tid 31639] [client 4.193.242.138:28966] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVkXP_UV_PU2SWgLPuhc0AAAAYc"]
[Sat Jan 03 21:18:56.520935 2026] [:error] [pid 19639:tid 19641] [client 4.193.242.138:28980] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVkXQCQ7fWZUytnlHEz79AAAAUA"]
[Sat Jan 03 21:18:56.900833 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:23562] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVkXQPUV_PU2SWgLPuhc0gAAAZE"]
[Sat Jan 03 21:18:57.434359 2026] [:error] [pid 1931:tid 2045] [client 4.193.242.138:23591] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aVkXQR8Tyw7ZoIdXlcb6nQAAAJU"]
[Sat Jan 03 21:18:58.155809 2026] [:error] [pid 1931:tid 2037] [client 4.193.242.138:32969] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aVkXQh8Tyw7ZoIdXlcb6nwAAAI0"]
[Sat Jan 03 21:18:58.736859 2026] [:error] [pid 34260:tid 34279] [client 4.193.242.138:28947] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aVkXQkWWhyvZ0O9KNVQf2QAAARE"]
[Sat Jan 03 21:18:59.308443 2026] [:error] [pid 31222:tid 31231] [client 4.193.242.138:21704] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aVkXQ6Hw6nASHXAc2v_hbQAAAcc"]
[Sat Jan 03 21:19:00.152290 2026] [:error] [pid 1930:tid 1968] [client 4.193.242.138:28986] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVkXRJP-6mqhfUDa89zhfgAAAEI"]
[Sat Jan 03 21:19:01.014021 2026] [:error] [pid 2083:tid 2107] [client 4.193.242.138:19853] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVkXRTVlR_BmlMPnhV4WnwAAANY"]
[Sat Jan 03 21:19:01.559103 2026] [:error] [pid 2083:tid 2091] [client 4.193.242.138:32991] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVkXRTVlR_BmlMPnhV4WoQAAAMY"]
[Sat Jan 03 21:19:01.985753 2026] [:error] [pid 31222:tid 31244] [client 4.193.242.138:23556] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aVkXRaHw6nASHXAc2v_hfgAAAdQ"]
[Sat Jan 03 21:19:02.670242 2026] [:error] [pid 34260:tid 34275] [client 4.193.242.138:32964] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVkXRkWWhyvZ0O9KNVQf3wAAAQ0"]
[Sat Jan 03 21:19:03.480659 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:28955] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVkXR5P-6mqhfUDa89zhggAAAEo"]
[Sat Jan 03 21:19:03.966449 2026] [:error] [pid 31630:tid 31640] [client 4.193.242.138:28951] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVkXR_UV_PU2SWgLPuhc2AAAAYg"]
[Sat Jan 03 21:19:04.532491 2026] [:error] [pid 1930:tid 1972] [client 4.193.242.138:21716] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVkXSJP-6mqhfUDa89zhgwAAAEY"]
[Sat Jan 03 21:19:05.470482 2026] [:error] [pid 31222:tid 31230] [client 4.193.242.138:2024] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVkXSaHw6nASHXAc2v_hlwAAAcY"]
[Sat Jan 03 21:19:06.261595 2026] [:error] [pid 1930:tid 1970] [client 4.193.242.138:32985] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVkXSpP-6mqhfUDa89zhhQAAAEQ"]
[Sat Jan 03 21:19:06.610307 2026] [:error] [pid 34260:tid 34284] [client 4.193.242.138:28928] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVkXSkWWhyvZ0O9KNVQf7AAAARY"]
[Sat Jan 03 21:19:07.515621 2026] [:error] [pid 2083:tid 2106] [client 4.193.242.138:23564] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVkXSzVlR_BmlMPnhV4WpwAAANU"]
[Sat Jan 03 21:19:08.145925 2026] [:error] [pid 34260:tid 34276] [client 4.193.242.138:1141] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aVkXTEWWhyvZ0O9KNVQf8QAAAQ4"]
[Sat Jan 03 21:19:08.774157 2026] [:error] [pid 34260:tid 34286] [client 4.193.242.138:23648] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aVkXTEWWhyvZ0O9KNVQf9QAAARg"]
[Sat Jan 03 21:19:09.774080 2026] [:error] [pid 34260:tid 34269] [client 4.193.242.138:1564] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aVkXTUWWhyvZ0O9KNVQf9wAAAQc"]
[Sat Jan 03 21:19:10.293903 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:21710] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aVkXTqHw6nASHXAc2v_hrQAAAcg"]
[Sat Jan 03 21:19:10.857430 2026] [:error] [pid 1930:tid 1973] [client 4.193.242.138:32982] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aVkXTpP-6mqhfUDa89zhjgAAAEc"]
[Sat Jan 03 21:19:11.516680 2026] [:error] [pid 2083:tid 2101] [client 4.193.242.138:22457] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aVkXTzVlR_BmlMPnhV4WtgAAANA"]
[Sat Jan 03 21:19:12.072435 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:23627] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aVkXUKHw6nASHXAc2v_htgAAAdU"]
[Sat Jan 03 21:19:12.653391 2026] [:error] [pid 1930:tid 1978] [client 4.193.242.138:23634] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aVkXUJP-6mqhfUDa89zhlAAAAEw"]
[Sat Jan 03 21:19:13.098062 2026] [:error] [pid 34260:tid 34282] [client 4.193.242.138:21738] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVkXUUWWhyvZ0O9KNVQf_gAAARQ"]
[Sat Jan 03 21:19:13.608164 2026] [:error] [pid 1931:tid 2035] [client 4.193.242.138:23673] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVkXUR8Tyw7ZoIdXlcb6uAAAAIs"]
[Sat Jan 03 21:19:13.929566 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:33019] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVkXUZP-6mqhfUDa89zhmgAAAFE"]
[Sat Jan 03 21:19:14.250606 2026] [:error] [pid 1931:tid 2043] [client 4.193.242.138:2011] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVkXUh8Tyw7ZoIdXlcb6vAAAAJM"]
[Sat Jan 03 21:19:14.578264 2026] [:error] [pid 1930:tid 1971] [client 4.193.242.138:28977] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVkXUpP-6mqhfUDa89zhngAAAEU"]
[Sat Jan 03 21:19:14.925513 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:32975] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVkXUkWWhyvZ0O9KNVQgAwAAARc"]
[Sat Jan 03 21:19:15.388707 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:21746] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVkXU_UV_PU2SWgLPuhc4QAAAYk"]
[Sat Jan 03 21:19:15.666244 2026] [:error] [pid 31630:tid 31646] [client 4.193.242.138:23632] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVkXU_UV_PU2SWgLPuhc4wAAAY4"]
[Sat Jan 03 21:19:15.988189 2026] [:error] [pid 34260:tid 34269] [client 4.193.242.138:1577] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVkXU0WWhyvZ0O9KNVQgBAAAAQc"]
[Sat Jan 03 21:19:16.596294 2026] [:error] [pid 1931:tid 2032] [client 4.193.242.138:21747] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVkXVB8Tyw7ZoIdXlcb6vgAAAIg"]
[Sat Jan 03 21:19:16.856058 2026] [:error] [pid 1931:tid 2030] [client 4.193.242.138:22495] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVkXVB8Tyw7ZoIdXlcb6wgAAAIY"]
[Sat Jan 03 21:19:17.467198 2026] [:error] [pid 1929:tid 1949] [client 4.193.242.138:28944] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVkXVecFqdpu6TNsuWrpdAAAAAs"]
[Sat Jan 03 21:19:18.284692 2026] [:error] [pid 1931:tid 2046] [client 4.193.242.138:33015] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVkXVh8Tyw7ZoIdXlcb6xgAAAJY"]
[Sat Jan 03 21:19:18.720182 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:21707] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVkXVqHw6nASHXAc2v_huwAAAdI"]
[Sat Jan 03 21:19:19.160898 2026] [:error] [pid 34260:tid 34280] [client 4.193.242.138:21750] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVkXV0WWhyvZ0O9KNVQgCwAAARI"]
[Sat Jan 03 21:19:19.543104 2026] [:error] [pid 2083:tid 2102] [client 4.193.242.138:22458] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVkXVzVlR_BmlMPnhV4WwwAAANE"]
[Sat Jan 03 21:19:20.089097 2026] [:error] [pid 31222:tid 31236] [client 4.193.242.138:32966] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aVkXWKHw6nASHXAc2v_hvgAAAcw"]
[Sat Jan 03 21:19:20.784706 2026] [:error] [pid 1931:tid 2042] [client 4.193.242.138:23608] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aVkXWB8Tyw7ZoIdXlcb6ygAAAJI"]
[Sat Jan 03 21:19:21.875652 2026] [:error] [pid 34260:tid 34272] [client 4.193.242.138:28975] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aVkXWUWWhyvZ0O9KNVQgEgAAAQo"]
[Sat Jan 03 21:19:22.328145 2026] [:error] [pid 1931:tid 2039] [client 4.193.242.138:21759] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aVkXWh8Tyw7ZoIdXlcb6zQAAAI8"]
[Sat Jan 03 21:19:22.788008 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:22482] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVkXWvUV_PU2SWgLPuhc8gAAAY8"]
[Sat Jan 03 21:19:23.922346 2026] [:error] [pid 1931:tid 1999] [client 4.193.242.138:23621] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVkXWx8Tyw7ZoIdXlcb60QAAAIM"]
[Sat Jan 03 21:19:25.478947 2026] [:error] [pid 1930:tid 1977] [client 4.193.242.138:23619] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVkXXZP-6mqhfUDa89zhqAAAAEs"]
[Sat Jan 03 21:19:26.578301 2026] [:error] [pid 31630:tid 31654] [client 4.193.242.138:23637] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVkXXvUV_PU2SWgLPuhc-AAAAZY"]
[Sat Jan 03 21:19:27.361493 2026] [:error] [pid 34260:tid 34283] [client 4.193.242.138:23664] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aVkXX0WWhyvZ0O9KNVQgKAAAARU"]
[Sat Jan 03 21:19:28.087191 2026] [:error] [pid 31630:tid 31639] [client 4.193.242.138:21712] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aVkXYPUV_PU2SWgLPuhc-gAAAYc"]
[Sat Jan 03 21:19:28.994878 2026] [:error] [pid 1930:tid 1987] [client 4.193.242.138:21741] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aVkXYJP-6mqhfUDa89zhrQAAAFU"]
[Sat Jan 03 21:19:29.633022 2026] [:error] [pid 1930:tid 1980] [client 4.193.242.138:23666] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aVkXYZP-6mqhfUDa89zhrgAAAE4"]
[Sat Jan 03 21:19:30.334279 2026] [:error] [pid 2083:tid 2101] [client 4.193.242.138:23646] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVkXYjVlR_BmlMPnhV4WzQAAANA"]
[Sat Jan 03 21:19:31.452668 2026] [:error] [pid 31222:tid 31238] [client 4.193.242.138:1595] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVkXY6Hw6nASHXAc2v_h1wAAAc4"]
[Sat Jan 03 21:19:32.142403 2026] [:error] [pid 1929:tid 1939] [client 4.193.242.138:23582] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVkXZOcFqdpu6TNsuWrphwAAAAE"]
[Sat Jan 03 21:19:32.495312 2026] [:error] [pid 2083:tid 2099] [client 4.193.242.138:1543] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aVkXZDVlR_BmlMPnhV4WzwAAAM4"]
[Sat Jan 03 21:19:33.266537 2026] [:error] [pid 1929:tid 1961] [client 4.193.242.138:1583] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sto.php"] [unique_id "aVkXZecFqdpu6TNsuWrpiQAAABc"]
[Sat Jan 03 21:19:34.626786 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:23660] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sto.php"] [unique_id "aVkXZpP-6mqhfUDa89zhvwAAAEo"]
[Sat Jan 03 21:19:35.338683 2026] [:error] [pid 1930:tid 1980] [client 4.193.242.138:19416] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sto.php"] [unique_id "aVkXZ5P-6mqhfUDa89zhwQAAAE4"]
[Sat Jan 03 21:19:35.945323 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:1540] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sto.php"] [unique_id "aVkXZ6Hw6nASHXAc2v_h4QAAAcg"]
[Sat Jan 03 21:19:36.606291 2026] [:error] [pid 31222:tid 31230] [client 4.193.242.138:46884] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aVkXaKHw6nASHXAc2v_h5gAAAcY"]
[Sat Jan 03 21:19:37.150214 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:23677] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aVkXafUV_PU2SWgLPuhdBgAAAZE"]
[Sat Jan 03 21:19:37.478024 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:23193] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aVkXaZP-6mqhfUDa89zhxQAAAFE"]
[Sat Jan 03 21:19:37.919697 2026] [:error] [pid 1931:tid 2035] [client 4.193.242.138:46911] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aVkXaR8Tyw7ZoIdXlcb61QAAAIs"]
[Sat Jan 03 21:19:38.653540 2026] [:error] [pid 34260:tid 34264] [client 4.193.242.138:46879] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mds.php"] [unique_id "aVkXakWWhyvZ0O9KNVQgNQAAAQI"]
[Sat Jan 03 21:19:39.954798 2026] [:error] [pid 1929:tid 1950] [client 4.193.242.138:46854] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mds.php"] [unique_id "aVkXa-cFqdpu6TNsuWrpjgAAAAw"]
[Sat Jan 03 21:19:41.518041 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:23567] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mds.php"] [unique_id "aVkXbfUV_PU2SWgLPuhdBwAAAYs"]
[Sat Jan 03 21:19:42.959241 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:23597] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mds.php"] [unique_id "aVkXbvUV_PU2SWgLPuhdDgAAAY8"]
[Sat Jan 03 21:19:45.015210 2026] [:error] [pid 31630:tid 31639] [client 4.193.242.138:32962] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aVkXcfUV_PU2SWgLPuhdEgAAAYc"]
[Sat Jan 03 21:19:45.875515 2026] [:error] [pid 31222:tid 31236] [client 4.193.242.138:46857] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aVkXcaHw6nASHXAc2v_h8gAAAcw"]
[Sat Jan 03 21:19:47.003358 2026] [:error] [pid 34260:tid 34281] [client 4.193.242.138:21265] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fileas.php"] [unique_id "aVkXc0WWhyvZ0O9KNVQgRAAAARM"]
[Sat Jan 03 21:19:49.035155 2026] [:error] [pid 1931:tid 2036] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/fileas.php
[Sat Jan 03 21:19:50.433981 2026] [:error] [pid 1931:tid 2036] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Jan 03 21:19:50.527753 2026] [:error] [pid 1931:tid 2040] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat Jan 03 21:19:50.616998 2026] [:error] [pid 1931:tid 2046] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Sat Jan 03 21:19:50.711056 2026] [:error] [pid 1931:tid 1999] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sat Jan 03 21:19:50.800903 2026] [:error] [pid 1931:tid 2029] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Sat Jan 03 21:19:50.958355 2026] [:error] [pid 1931:tid 2045] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sat Jan 03 21:19:51.137991 2026] [:error] [pid 1931:tid 2034] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Jan 03 21:19:51.706770 2026] [:error] [pid 1931:tid 2044] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Jan 03 21:19:51.796858 2026] [:error] [pid 1931:tid 2043] [client 4.193.242.138:46906] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Sat Jan 03 21:19:51.883900 2026] [:error] [pid 1931:tid 2042] [client 4.193.242.138:46906] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVkXdx8Tyw7ZoIdXlcb68wAAAJI"]
[Sat Jan 03 21:19:53.106777 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:21300] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVkXefUV_PU2SWgLPuhdJAAAAYk"]
[Sat Jan 03 21:19:55.674963 2026] [:error] [pid 1930:tid 1978] [client 4.193.242.138:23295] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVkXe5P-6mqhfUDa89zh5wAAAEw"]
[Sat Jan 03 21:19:57.513131 2026] [:error] [pid 1929:tid 1957] [client 4.193.242.138:28979] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVkXfecFqdpu6TNsuWrpqwAAABM"]
[Sat Jan 03 21:19:58.606150 2026] [:error] [pid 1930:tid 1983] [client 4.193.242.138:32963] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aVkXfpP-6mqhfUDa89zh9AAAAFE"]
[Sat Jan 03 21:19:59.122026 2026] [:error] [pid 2083:tid 2109] [client 4.193.242.138:46896] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aVkXfzVlR_BmlMPnhV4XAAAAANg"]
[Sat Jan 03 21:20:00.163770 2026] [:error] [pid 34260:tid 34265] [client 4.193.242.138:2014] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aVkXgEWWhyvZ0O9KNVQgXgAAAQM"]
[Sat Jan 03 21:20:00.727961 2026] [:error] [pid 2083:tid 2091] [client 4.193.242.138:28956] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/owl.php"] [unique_id "aVkXgDVlR_BmlMPnhV4XCQAAAMY"]
[Sat Jan 03 21:20:00.959401 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:1999] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yas.php"] [unique_id "aVkXgDVlR_BmlMPnhV4XCwAAAMk"]
[Sat Jan 03 21:20:01.428518 2026] [:error] [pid 34260:tid 34281] [client 4.193.242.138:23650] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yas.php"] [unique_id "aVkXgUWWhyvZ0O9KNVQgYQAAARM"]
[Sat Jan 03 21:20:02.606606 2026] [:error] [pid 1931:tid 1993] [client 4.193.242.138:23225] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yas.php"] [unique_id "aVkXgh8Tyw7ZoIdXlcb6-gAAAIA"]
[Sat Jan 03 21:20:03.550677 2026] [:error] [pid 1929:tid 1942] [client 4.193.242.138:21283] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yas.php"] [unique_id "aVkXg-cFqdpu6TNsuWrprgAAAAQ"]
[Sat Jan 03 21:20:04.142133 2026] [:error] [pid 1931:tid 2041] [client 4.193.242.138:21293] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVkXhB8Tyw7ZoIdXlcb6_AAAAJE"]
[Sat Jan 03 21:20:05.251576 2026] [:error] [pid 31630:tid 31642] [client 4.193.242.138:23611] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVkXhfUV_PU2SWgLPuhdMAAAAYo"]
[Sat Jan 03 21:20:06.619738 2026] [:error] [pid 31630:tid 31638] [client 4.193.242.138:19138] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVkXhvUV_PU2SWgLPuhdMgAAAYY"]
[Sat Jan 03 21:20:08.094099 2026] [:error] [pid 31630:tid 31635] [client 4.193.242.138:21267] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVkXiPUV_PU2SWgLPuhdNAAAAYM"]
[Sat Jan 03 21:20:08.645457 2026] [:error] [pid 31630:tid 31637] [client 4.193.242.138:19179] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aVkXiPUV_PU2SWgLPuhdNQAAAYU"]
[Sat Jan 03 21:20:09.089972 2026] [:error] [pid 2083:tid 2103] [client 4.193.242.138:23224] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aVkXiTVlR_BmlMPnhV4XDgAAANI"]
[Sat Jan 03 21:20:10.079818 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:21270] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aVkXiqHw6nASHXAc2v_iIQAAAdU"]
[Sat Jan 03 21:20:11.018328 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:21301] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "aVkXi0WWhyvZ0O9KNVQgaAAAAQE"]
[Sat Jan 03 21:20:11.640469 2026] [:error] [pid 1929:tid 1955] [client 4.193.242.138:22900] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVkXi-cFqdpu6TNsuWrptQAAABE"]
[Sat Jan 03 21:20:12.443609 2026] [:error] [pid 1930:tid 1986] [client 4.193.242.138:28256] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVkXjJP-6mqhfUDa89ziCgAAAFQ"]
[Sat Jan 03 21:20:13.494199 2026] [:error] [pid 34260:tid 34272] [client 4.193.242.138:22874] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVkXjUWWhyvZ0O9KNVQgagAAAQo"]
[Sat Jan 03 21:20:14.123960 2026] [:error] [pid 34260:tid 34265] [client 4.193.242.138:19185] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVkXjkWWhyvZ0O9KNVQgbgAAAQM"]
[Sat Jan 03 21:20:14.896461 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:28284] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVkXjvUV_PU2SWgLPuhdPAAAAY8"]
[Sat Jan 03 21:20:15.221369 2026] [:error] [pid 31630:tid 31642] [client 4.193.242.138:22878] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVkXj_UV_PU2SWgLPuhdPQAAAYo"]
[Sat Jan 03 21:20:15.451116 2026] [:error] [pid 31630:tid 31653] [client 4.193.242.138:19182] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVkXj_UV_PU2SWgLPuhdPwAAAZU"]
[Sat Jan 03 21:20:15.725394 2026] [:error] [pid 31630:tid 31638] [client 4.193.242.138:21299] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVkXj_UV_PU2SWgLPuhdQAAAAYY"]
[Sat Jan 03 21:20:15.992847 2026] [:error] [pid 1930:tid 1974] [client 4.193.242.138:21286] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVkXj5P-6mqhfUDa89ziFQAAAEg"]
[Sat Jan 03 21:20:16.751893 2026] [:error] [pid 1931:tid 2027] [client 4.193.242.138:28245] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVkXkB8Tyw7ZoIdXlcb7CQAAAIQ"]
[Sat Jan 03 21:20:17.455405 2026] [:error] [pid 2083:tid 2089] [client 4.193.242.138:28279] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVkXkTVlR_BmlMPnhV4XKAAAAMQ"]
[Sat Jan 03 21:20:18.065538 2026] [:error] [pid 19639:tid 19663] [client 4.193.242.138:23175] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aVkXkiQ7fWZUytnlHEz8NwAAAVY"]
[Sat Jan 03 21:20:19.285356 2026] [:error] [pid 31222:tid 31239] [client 4.193.242.138:19177] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aVkXk6Hw6nASHXAc2v_iJAAAAc8"]
[Sat Jan 03 21:20:20.460879 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:28273] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aVkXlPUV_PU2SWgLPuhdSwAAAZQ"]
[Sat Jan 03 21:20:21.698597 2026] [:error] [pid 1929:tid 1954] [client 4.193.242.138:28234] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aVkXlecFqdpu6TNsuWrpyQAAABA"]
[Sat Jan 03 21:20:22.709856 2026] [:error] [pid 1930:tid 1973] [client 4.193.242.138:22875] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-is.php"] [unique_id "aVkXlpP-6mqhfUDa89ziHwAAAEc"]
[Sat Jan 03 21:20:23.376614 2026] [:error] [pid 2083:tid 2089] [client 4.193.242.138:1035] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aVkXlzVlR_BmlMPnhV4XMgAAAMQ"]
[Sat Jan 03 21:20:23.924635 2026] [:error] [pid 1929:tid 1952] [client 4.193.242.138:19175] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aVkXl-cFqdpu6TNsuWrpywAAAA4"]
[Sat Jan 03 21:20:24.375705 2026] [:error] [pid 31630:tid 31636] [client 4.193.242.138:19176] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aVkXmPUV_PU2SWgLPuhdUQAAAYQ"]
[Sat Jan 03 21:20:25.491230 2026] [:error] [pid 1931:tid 2031] [client 4.193.242.138:19153] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolv2.php"] [unique_id "aVkXmR8Tyw7ZoIdXlcb7EwAAAIc"]
[Sat Jan 03 21:20:27.020711 2026] [:error] [pid 31222:tid 31244] [client 4.193.242.138:28257] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aVkXm6Hw6nASHXAc2v_iOwAAAdQ"]
[Sat Jan 03 21:20:27.721804 2026] [:error] [pid 1930:tid 1978] [client 4.193.242.138:1028] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aVkXm5P-6mqhfUDa89ziJgAAAEw"]
[Sat Jan 03 21:20:28.021865 2026] [:error] [pid 34260:tid 34278] [client 4.193.242.138:19152] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aVkXnEWWhyvZ0O9KNVQghAAAARA"]
[Sat Jan 03 21:20:28.713359 2026] [:error] [pid 19639:tid 19656] [client 4.193.242.138:46894] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftp.php"] [unique_id "aVkXnCQ7fWZUytnlHEz8RQAAAU8"]
[Sat Jan 03 21:20:29.318684 2026] [:error] [pid 1930:tid 1972] [client 4.193.242.138:28268] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aVkXnZP-6mqhfUDa89ziKAAAAEY"]
[Sat Jan 03 21:20:29.639766 2026] [:error] [pid 34260:tid 34282] [client 4.193.242.138:23222] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aVkXnUWWhyvZ0O9KNVQgiQAAARQ"]
[Sat Jan 03 21:20:30.064047 2026] [:error] [pid 34260:tid 34284] [client 4.193.242.138:21269] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aVkXnkWWhyvZ0O9KNVQgiwAAARY"]
[Sat Jan 03 21:20:30.513160 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:22882] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ouh.php"] [unique_id "aVkXnkWWhyvZ0O9KNVQgjQAAARc"]
[Sat Jan 03 21:20:30.793678 2026] [:error] [pid 1930:tid 1989] [client 4.193.242.138:22901] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVkXnpP-6mqhfUDa89ziKQAAAFc"]
[Sat Jan 03 21:20:31.237212 2026] [:error] [pid 31630:tid 31634] [client 4.193.242.138:28252] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVkXn_UV_PU2SWgLPuhdWAAAAYI"]
[Sat Jan 03 21:20:31.716139 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:22907] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVkXnzVlR_BmlMPnhV4XNQAAAMk"]
[Sat Jan 03 21:20:32.080049 2026] [:error] [pid 31222:tid 31235] [client 4.193.242.138:1059] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVkXoKHw6nASHXAc2v_iRQAAAcs"]
[Sat Jan 03 21:20:32.578587 2026] [:error] [pid 2083:tid 2085] [client 4.193.242.138:19188] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVkXoDVlR_BmlMPnhV4XOQAAAMA"]
[Sat Jan 03 21:20:32.916403 2026] [:error] [pid 2083:tid 2107] [client 4.193.242.138:28270] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVkXoDVlR_BmlMPnhV4XOgAAANY"]
[Sat Jan 03 21:20:33.231593 2026] [:error] [pid 34260:tid 34267] [client 4.193.242.138:29252] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVkXoUWWhyvZ0O9KNVQgkAAAAQU"]
[Sat Jan 03 21:20:33.551534 2026] [:error] [pid 31630:tid 31653] [client 4.193.242.138:29301] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aVkXofUV_PU2SWgLPuhdWwAAAZU"]
[Sat Jan 03 21:20:34.011839 2026] [:error] [pid 31630:tid 31635] [client 4.193.242.138:28227] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aVkXovUV_PU2SWgLPuhdXwAAAYM"]
[Sat Jan 03 21:20:34.311155 2026] [:error] [pid 34260:tid 34273] [client 4.193.242.138:22883] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aVkXokWWhyvZ0O9KNVQgkwAAAQs"]
[Sat Jan 03 21:20:34.987640 2026] [:error] [pid 1929:tid 1946] [client 4.193.242.138:28281] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aVkXoucFqdpu6TNsuWrp4AAAAAg"]
[Sat Jan 03 21:20:35.409334 2026] [:error] [pid 2083:tid 2104] [client 4.193.242.138:22891] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mws.php"] [unique_id "aVkXozVlR_BmlMPnhV4XPQAAANM"]
[Sat Jan 03 21:20:35.754895 2026] [:error] [pid 34260:tid 34275] [client 4.193.242.138:29259] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVkXo0WWhyvZ0O9KNVQglgAAAQ0"]
[Sat Jan 03 21:20:36.556694 2026] [:error] [pid 1929:tid 1948] [client 4.193.242.138:23227] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVkXpOcFqdpu6TNsuWrp4wAAAAo"]
[Sat Jan 03 21:20:36.986056 2026] [:error] [pid 1931:tid 2046] [client 4.193.242.138:1032] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVkXpB8Tyw7ZoIdXlcb7IQAAAJY"]
[Sat Jan 03 21:20:37.460638 2026] [:error] [pid 1931:tid 2029] [client 4.193.242.138:28264] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doc.php"] [unique_id "aVkXpR8Tyw7ZoIdXlcb7IwAAAIU"]
[Sat Jan 03 21:20:38.082853 2026] [:error] [pid 34260:tid 34274] [client 4.193.242.138:1043] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aVkXpkWWhyvZ0O9KNVQglwAAAQw"]
[Sat Jan 03 21:20:38.980401 2026] [:error] [pid 34260:tid 34281] [client 4.193.242.138:29302] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aVkXpkWWhyvZ0O9KNVQgnwAAARM"]
[Sat Jan 03 21:20:39.438519 2026] [:error] [pid 1931:tid 2038] [client 4.193.242.138:29261] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aVkXpx8Tyw7ZoIdXlcb7KgAAAI4"]
[Sat Jan 03 21:20:39.860164 2026] [:error] [pid 1931:tid 2042] [client 4.193.242.138:1037] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aVkXpx8Tyw7ZoIdXlcb7KwAAAJI"]
[Sat Jan 03 21:20:40.200231 2026] [:error] [pid 31222:tid 31237] [client 4.193.242.138:19137] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aVkXqKHw6nASHXAc2v_iUgAAAc0"]
[Sat Jan 03 21:20:40.718284 2026] [:error] [pid 31630:tid 31635] [client 4.193.242.138:1065] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aVkXqPUV_PU2SWgLPuhdaAAAAYM"]
[Sat Jan 03 21:20:41.317026 2026] [:error] [pid 34260:tid 34272] [client 4.193.242.138:1058] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aVkXqUWWhyvZ0O9KNVQgqgAAAQo"]
[Sat Jan 03 21:20:41.764246 2026] [:error] [pid 1931:tid 1999] [client 4.193.242.138:28235] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/te.php"] [unique_id "aVkXqR8Tyw7ZoIdXlcb7NQAAAIM"]
[Sat Jan 03 21:20:42.276633 2026] [:error] [pid 34260:tid 34268] [client 4.193.242.138:28247] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aVkXqkWWhyvZ0O9KNVQgsQAAAQY"]
[Sat Jan 03 21:20:42.969892 2026] [:error] [pid 1929:tid 1943] [client 4.193.242.138:29310] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aVkXqucFqdpu6TNsuWrp6wAAAAU"]
[Sat Jan 03 21:20:43.341113 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:46440] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aVkXq0WWhyvZ0O9KNVQgtgAAAQg"]
[Sat Jan 03 21:20:43.855389 2026] [:error] [pid 34260:tid 34277] [client 4.193.242.138:29279] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aVkXq0WWhyvZ0O9KNVQguAAAAQ8"]
[Sat Jan 03 21:20:44.058909 2026] [:error] [pid 34260:tid 34273] [client 4.193.242.138:28283] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/33.php"] [unique_id "aVkXrEWWhyvZ0O9KNVQguQAAAQs"]
[Sat Jan 03 21:20:44.395520 2026] [:error] [pid 19639:tid 19652] [client 4.193.242.138:22873] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/33.php"] [unique_id "aVkXrCQ7fWZUytnlHEz8XQAAAUs"]
[Sat Jan 03 21:20:44.961148 2026] [:error] [pid 19639:tid 19647] [client 4.193.242.138:46437] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/33.php"] [unique_id "aVkXrCQ7fWZUytnlHEz8XgAAAUY"]
[Sat Jan 03 21:20:45.262421 2026] [:error] [pid 34260:tid 34282] [client 4.193.242.138:1072] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/33.php"] [unique_id "aVkXrUWWhyvZ0O9KNVQgvwAAARQ"]
[Sat Jan 03 21:20:45.594494 2026] [:error] [pid 31630:tid 31645] [client 4.193.242.138:1026] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aVkXrfUV_PU2SWgLPuhdaQAAAY0"]
[Sat Jan 03 21:20:45.974811 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:46430] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aVkXrZP-6mqhfUDa89ziPQAAAEo"]
[Sat Jan 03 21:20:46.960067 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:29275] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aVkXrvUV_PU2SWgLPuhdcQAAAZE"]
[Sat Jan 03 21:20:47.304324 2026] [:error] [pid 1930:tid 1987] [client 4.193.242.138:1046] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aVkXr5P-6mqhfUDa89ziPwAAAFU"]
[Sat Jan 03 21:20:47.934134 2026] [:error] [pid 31222:tid 31241] [client 4.193.242.138:29307] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aVkXr6Hw6nASHXAc2v_iWQAAAdE"]
[Sat Jan 03 21:20:48.320424 2026] [:error] [pid 31630:tid 31635] [client 4.193.242.138:28272] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aVkXsPUV_PU2SWgLPuhdeQAAAYM"]
[Sat Jan 03 21:20:49.053367 2026] [:error] [pid 1930:tid 1974] [client 4.193.242.138:22897] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aVkXsZP-6mqhfUDa89ziRQAAAEg"]
[Sat Jan 03 21:20:50.373513 2026] [:error] [pid 31630:tid 31649] [client 4.193.242.138:21258] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tox.php"] [unique_id "aVkXsvUV_PU2SWgLPuhdgQAAAZE"]
[Sat Jan 03 21:20:51.080127 2026] [:error] [pid 31630:tid 31642] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Sat Jan 03 21:20:51.425492 2026] [:error] [pid 31630:tid 31643] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Sat Jan 03 21:20:51.589845 2026] [:error] [pid 31630:tid 31644] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Sat Jan 03 21:20:51.681226 2026] [:error] [pid 31630:tid 31633] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat Jan 03 21:20:51.787225 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php
[Sat Jan 03 21:20:51.879020 2026] [:error] [pid 31630:tid 31655] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Jan 03 21:20:51.969262 2026] [:error] [pid 31630:tid 31646] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/noe.php
[Sat Jan 03 21:20:52.072872 2026] [:error] [pid 31630:tid 31656] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Sat Jan 03 21:20:52.748329 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sat Jan 03 21:20:52.869399 2026] [:error] [pid 31630:tid 31632] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/gelap.php
[Sat Jan 03 21:20:52.962112 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:28236] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Jan 03 21:20:53.049986 2026] [:error] [pid 31630:tid 31647] [client 4.193.242.138:28236] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVkXtfUV_PU2SWgLPuhdqgAAAY8"]
[Sat Jan 03 21:20:53.666954 2026] [:error] [pid 34260:tid 34286] [client 4.193.242.138:1057] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVkXtUWWhyvZ0O9KNVQgywAAARg"]
[Sat Jan 03 21:20:54.329801 2026] [:error] [pid 34260:tid 34279] [client 4.193.242.138:29306] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVkXtkWWhyvZ0O9KNVQgzwAAARE"]
[Sat Jan 03 21:20:56.491399 2026] [:error] [pid 31630:tid 31636] [client 4.193.242.138:29308] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVkXuPUV_PU2SWgLPuhduQAAAYQ"]
[Sat Jan 03 21:20:57.347493 2026] [:error] [pid 19639:tid 19642] [client 4.193.242.138:46448] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aVkXuSQ7fWZUytnlHEz8eAAAAUE"]
[Sat Jan 03 21:20:58.065165 2026] [:error] [pid 34260:tid 34262] [client 4.193.242.138:28280] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aVkXukWWhyvZ0O9KNVQg2gAAAQA"]
[Sat Jan 03 21:20:58.746258 2026] [:error] [pid 31630:tid 31645] [client 4.193.242.138:46426] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aVkXuvUV_PU2SWgLPuhdvgAAAY0"]
[Sat Jan 03 21:20:59.319309 2026] [:error] [pid 1931:tid 2038] [client 4.193.242.138:46429] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aVkXux8Tyw7ZoIdXlcb7PwAAAI4"]
[Sat Jan 03 21:21:00.551622 2026] [:error] [pid 34260:tid 34266] [client 4.193.242.138:29252] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aVkXvEWWhyvZ0O9KNVQg4AAAAQQ"]
[Sat Jan 03 21:21:01.534596 2026] [:error] [pid 31222:tid 31240] [client 4.193.242.138:29277] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aVkXvaHw6nASHXAc2v_iegAAAdA"]
[Sat Jan 03 21:21:03.014449 2026] [:error] [pid 1931:tid 2031] [client 4.193.242.138:28239] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aVkXvx8Tyw7ZoIdXlcb7SAAAAIc"]
[Sat Jan 03 21:21:03.788741 2026] [:error] [pid 1931:tid 2043] [client 4.193.242.138:29283] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aVkXvx8Tyw7ZoIdXlcb7SQAAAJM"]
[Sat Jan 03 21:21:04.634493 2026] [:error] [pid 31222:tid 31235] [client 4.193.242.138:1755] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/up.php"] [unique_id "aVkXwKHw6nASHXAc2v_igwAAAcs"]
[Sat Jan 03 21:21:05.314236 2026] [:error] [pid 1930:tid 1976] [client 4.193.242.138:28607] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/up.php"] [unique_id "aVkXwZP-6mqhfUDa89ziVgAAAEo"]
[Sat Jan 03 21:21:06.286634 2026] [:error] [pid 31222:tid 31225] [client 4.193.242.138:29253] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/up.php"] [unique_id "aVkXwqHw6nASHXAc2v_ihwAAAcE"]
[Sat Jan 03 21:21:08.941648 2026] [:error] [pid 31630:tid 31655] [client 4.193.242.138:1778] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/up.php"] [unique_id "aVkXxPUV_PU2SWgLPuhdygAAAZc"]
[Sat Jan 03 21:21:09.923365 2026] [:error] [pid 19639:tid 19651] [client 4.193.242.138:1867] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inde.php"] [unique_id "aVkXxSQ7fWZUytnlHEz8gQAAAUo"]
[Sat Jan 03 21:21:11.888231 2026] [:error] [pid 34260:tid 34265] [client 4.193.242.138:32907] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inde.php"] [unique_id "aVkXx0WWhyvZ0O9KNVQg8AAAAQM"]
[Sat Jan 03 21:21:12.295687 2026] [:error] [pid 31630:tid 31644] [client 4.193.242.138:1754] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inde.php"] [unique_id "aVkXyPUV_PU2SWgLPuhd1AAAAYw"]
[Sat Jan 03 21:21:12.793118 2026] [:error] [pid 1929:tid 1948] [client 4.193.242.138:46431] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inde.php"] [unique_id "aVkXyOcFqdpu6TNsuWrqCgAAAAo"]
[Sat Jan 03 21:21:13.913290 2026] [:error] [pid 19639:tid 19653] [client 4.193.242.138:1864] [client 4.193.242.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVkXySQ7fWZUytnlHEz8iAAAAUw"]
[Sat Jan 03 21:21:14.434274 2026] [:error] [pid 31222:tid 31231] [client 4.193.242.138:32919] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admir.php"] [unique_id "aVkXyqHw6nASHXAc2v_ilgAAAcc"]
[Sat Jan 03 21:21:14.971203 2026] [:error] [pid 1931:tid 2039] [client 4.193.242.138:1871] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admir.php"] [unique_id "aVkXyh8Tyw7ZoIdXlcb7TQAAAI8"]
[Sat Jan 03 21:21:15.747056 2026] [:error] [pid 19639:tid 19654] [client 4.193.242.138:1895] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admir.php"] [unique_id "aVkXyyQ7fWZUytnlHEz8jwAAAU0"]
[Sat Jan 03 21:21:16.858519 2026] [:error] [pid 2083:tid 2095] [client 4.193.242.138:46419] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admir.php"] [unique_id "aVkXzDVlR_BmlMPnhV4XVgAAAMo"]
[Sat Jan 03 21:21:18.148495 2026] [:error] [pid 2083:tid 2096] [client 4.193.242.138:32939] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aVkXzjVlR_BmlMPnhV4XXgAAAMs"]
[Sat Jan 03 21:21:18.662925 2026] [:error] [pid 31222:tid 31247] [client 4.193.242.138:1899] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aVkXzqHw6nASHXAc2v_iowAAAdc"]
[Sat Jan 03 21:21:18.983084 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:32914] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aVkXzqHw6nASHXAc2v_iqQAAAdI"]
[Sat Jan 03 21:21:20.085117 2026] [:error] [pid 31630:tid 31652] [client 4.193.242.138:28564] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aVkX0PUV_PU2SWgLPuhd2wAAAZQ"]
[Sat Jan 03 21:21:21.170471 2026] [:error] [pid 34260:tid 34279] [client 4.193.242.138:19962] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aVkX0UWWhyvZ0O9KNVQhBQAAARE"]
[Sat Jan 03 21:21:21.899100 2026] [:error] [pid 34260:tid 34264] [client 4.193.242.138:19641] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aVkX0UWWhyvZ0O9KNVQhCwAAAQI"]
[Sat Jan 03 21:21:22.424306 2026] [:error] [pid 31630:tid 31651] [client 4.193.242.138:1914] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aVkX0vUV_PU2SWgLPuhd4wAAAZM"]
[Sat Jan 03 21:21:23.559996 2026] [:error] [pid 2083:tid 2107] [client 4.193.242.138:19913] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aVkX0zVlR_BmlMPnhV4XYgAAANY"]
[Sat Jan 03 21:21:24.781980 2026] [:error] [pid 19639:tid 19661] [client 4.193.242.138:1872] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVkX1CQ7fWZUytnlHEz8nQAAAVQ"]
[Sat Jan 03 21:21:26.886994 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:1905] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVkX1vUV_PU2SWgLPuhd7gAAAYk"]
[Sat Jan 03 21:21:28.411417 2026] [:error] [pid 19639:tid 19649] [client 4.193.242.138:28984] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVkX2CQ7fWZUytnlHEz8qgAAAUg"]
[Sat Jan 03 21:21:29.288766 2026] [:error] [pid 31222:tid 31247] [client 4.193.242.138:23593] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVkX2aHw6nASHXAc2v_ivwAAAdc"]
[Sat Jan 03 21:21:30.463757 2026] [:error] [pid 2083:tid 2089] [client 4.193.242.138:46386] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aVkX2jVlR_BmlMPnhV4XZgAAAMQ"]
[Sat Jan 03 21:21:31.539782 2026] [:error] [pid 1931:tid 1993] [client 4.193.242.138:19636] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aVkX2x8Tyw7ZoIdXlcb7XQAAAIA"]
[Sat Jan 03 21:21:32.422605 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:1741] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aVkX3DVlR_BmlMPnhV4XbgAAAMk"]
[Sat Jan 03 21:21:32.918807 2026] [:error] [pid 19639:tid 19649] [client 4.193.242.138:19623] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aVkX3CQ7fWZUytnlHEz8twAAAUg"]
[Sat Jan 03 21:21:33.510923 2026] [:error] [pid 1931:tid 2030] [client 4.193.242.138:19952] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aVkX3R8Tyw7ZoIdXlcb7ZQAAAIY"]
[Sat Jan 03 21:21:34.112286 2026] [:error] [pid 1930:tid 1967] [client 4.193.242.138:46351] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aVkX3pP-6mqhfUDa89ziegAAAEE"]
[Sat Jan 03 21:21:34.971562 2026] [:error] [pid 31222:tid 31244] [client 4.193.242.138:1868] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aVkX3qHw6nASHXAc2v_iyAAAAdQ"]
[Sat Jan 03 21:21:36.058182 2026] [:error] [pid 1931:tid 2043] [client 4.193.242.138:32901] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aVkX4B8Tyw7ZoIdXlcb7agAAAJM"]
[Sat Jan 03 21:21:37.957210 2026] [:error] [pid 19639:tid 19652] [client 4.193.242.138:46344] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVkX4SQ7fWZUytnlHEz8wQAAAUs"]
[Sat Jan 03 21:21:39.041818 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:26273] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVkX40WWhyvZ0O9KNVQhJAAAAQE"]
[Sat Jan 03 21:21:40.010430 2026] [:error] [pid 34260:tid 34274] [client 4.193.242.138:28649] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVkX5EWWhyvZ0O9KNVQhKQAAAQw"]
[Sat Jan 03 21:21:41.099988 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:26264] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVkX5TVlR_BmlMPnhV4XeAAAAMk"]
[Sat Jan 03 21:21:42.357137 2026] [:error] [pid 1930:tid 1975] [client 4.193.242.138:26244] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVkX5pP-6mqhfUDa89zigwAAAEk"]
[Sat Jan 03 21:21:42.894645 2026] [:error] [pid 1929:tid 1958] [client 4.193.242.138:1520] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVkX5ucFqdpu6TNsuWrqOgAAABQ"]
[Sat Jan 03 21:21:43.322477 2026] [:error] [pid 31222:tid 31233] [client 4.193.242.138:46349] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVkX56Hw6nASHXAc2v_i1gAAAck"]
[Sat Jan 03 21:21:43.854835 2026] [:error] [pid 2083:tid 2086] [client 4.193.242.138:26671] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVkX5zVlR_BmlMPnhV4XfgAAAME"]
[Sat Jan 03 21:21:45.262139 2026] [:error] [pid 2083:tid 2088] [client 4.193.242.138:21725] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVkX6TVlR_BmlMPnhV4XgwAAAMM"]
[Sat Jan 03 21:21:45.905756 2026] [:error] [pid 2083:tid 2108] [client 4.193.242.138:28621] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVkX6TVlR_BmlMPnhV4XhQAAANc"]
[Sat Jan 03 21:21:46.843238 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:19086] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVkX6jVlR_BmlMPnhV4XigAAAMk"]
[Sat Jan 03 21:21:47.770042 2026] [:error] [pid 19639:tid 19663] [client 4.193.242.138:26250] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aVkX6yQ7fWZUytnlHEz8zAAAAVY"]
[Sat Jan 03 21:21:48.419742 2026] [:error] [pid 34260:tid 34276] [client 4.193.242.138:32998] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aVkX7EWWhyvZ0O9KNVQhQwAAAQ4"]
[Sat Jan 03 21:21:49.451642 2026] [:error] [pid 31222:tid 31244] [client 4.193.242.138:28633] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aVkX7aHw6nASHXAc2v_i4QAAAdQ"]
[Sat Jan 03 21:21:49.924704 2026] [:error] [pid 1929:tid 1953] [client 4.193.242.138:46336] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aVkX7ecFqdpu6TNsuWrqQQAAAA8"]
[Sat Jan 03 21:21:50.179033 2026] [:error] [pid 34260:tid 34263] [client 4.193.242.138:28629] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aVkX7kWWhyvZ0O9KNVQhSQAAAQE"]
[Sat Jan 03 21:21:51.107952 2026] [:error] [pid 1929:tid 1946] [client 4.193.242.138:19073] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVkX7-cFqdpu6TNsuWrqQwAAAAg"]
[Sat Jan 03 21:21:56.771949 2026] [:error] [pid 1930:tid 1984] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Jan 03 21:21:56.861935 2026] [:error] [pid 1930:tid 1985] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat Jan 03 21:21:56.955967 2026] [:error] [pid 1930:tid 1968] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Jan 03 21:21:57.046154 2026] [:error] [pid 1930:tid 1980] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/CLA.php
[Sat Jan 03 21:21:57.269382 2026] [:error] [pid 1930:tid 1971] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sat Jan 03 21:21:57.359374 2026] [:error] [pid 1930:tid 1974] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Sat Jan 03 21:21:57.685793 2026] [:error] [pid 1930:tid 1981] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Jan 03 21:21:57.779669 2026] [:error] [pid 1930:tid 1988] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/cccc.php
[Sat Jan 03 21:21:58.560839 2026] [:error] [pid 1930:tid 1986] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sat Jan 03 21:21:58.653889 2026] [:error] [pid 1930:tid 1970] [client 4.193.242.138:19105] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Jan 03 21:21:58.752061 2026] [:error] [pid 1930:tid 1984] [client 4.193.242.138:19105] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq.php"] [unique_id "aVkX9pP-6mqhfUDa89zirQAAAFI"]
[Sat Jan 03 21:21:59.619663 2026] [:error] [pid 1930:tid 1985] [client 4.193.242.138:19693] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq.php"] [unique_id "aVkX95P-6mqhfUDa89zirgAAAFM"]
[Sat Jan 03 21:22:00.135823 2026] [:error] [pid 1930:tid 1975] [client 4.193.242.138:28270] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq.php"] [unique_id "aVkX-JP-6mqhfUDa89zisAAAAEk"]
[Sat Jan 03 21:22:01.291976 2026] [:error] [pid 31222:tid 31247] [client 4.193.242.138:19694] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq.php"] [unique_id "aVkX-aHw6nASHXAc2v_jDQAAAdc"]
[Sat Jan 03 21:22:02.006608 2026] [:error] [pid 31222:tid 31241] [client 4.193.242.138:26682] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVkX-qHw6nASHXAc2v_jDwAAAdE"]
[Sat Jan 03 21:22:02.657113 2026] [:error] [pid 1930:tid 1978] [client 4.193.242.138:26684] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVkX-pP-6mqhfUDa89zitAAAAEw"]
[Sat Jan 03 21:22:03.259016 2026] [:error] [pid 34260:tid 34278] [client 4.193.242.138:26698] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVkX-0WWhyvZ0O9KNVQhXwAAARA"]
[Sat Jan 03 21:22:04.507996 2026] [:error] [pid 2083:tid 2098] [client 4.193.242.138:26644] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aVkX_DVlR_BmlMPnhV4XkgAAAM0"]
[Sat Jan 03 21:22:06.452207 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:26706] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVkX_jVlR_BmlMPnhV4XlQAAAMk"]
[Sat Jan 03 21:22:08.321407 2026] [:error] [pid 34260:tid 34268] [client 4.193.242.138:46948] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVkYAEWWhyvZ0O9KNVQhdwAAAQY"]
[Sat Jan 03 21:22:09.746119 2026] [:error] [pid 1930:tid 1972] [client 4.193.242.138:28196] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVkYAZP-6mqhfUDa89ziwQAAAEY"]
[Sat Jan 03 21:22:11.418068 2026] [:error] [pid 1930:tid 1986] [client 4.193.242.138:28190] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVkYA5P-6mqhfUDa89zixAAAAFQ"]
[Sat Jan 03 21:22:12.883443 2026] [:error] [pid 34260:tid 34265] [client 4.193.242.138:46914] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxx.php"] [unique_id "aVkYBEWWhyvZ0O9KNVQhfwAAAQM"]
[Sat Jan 03 21:22:16.170544 2026] [:error] [pid 34260:tid 34285] [client 4.193.242.138:46955] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxx.php"] [unique_id "aVkYCEWWhyvZ0O9KNVQhhgAAARc"]
[Sat Jan 03 21:22:17.387843 2026] [:error] [pid 31222:tid 31242] [client 4.193.242.138:26744] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxx.php"] [unique_id "aVkYCaHw6nASHXAc2v_jNwAAAdI"]
[Sat Jan 03 21:22:19.586486 2026] [:error] [pid 1930:tid 1970] [client 4.193.242.138:19084] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxx.php"] [unique_id "aVkYC5P-6mqhfUDa89zizgAAAEQ"]
[Sat Jan 03 21:22:21.359029 2026] [:error] [pid 1931:tid 2048] [client 4.193.242.138:19962] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ana.php"] [unique_id "aVkYDR8Tyw7ZoIdXlcb7kAAAAJg"]
[Sat Jan 03 21:22:22.382391 2026] [:error] [pid 31222:tid 31243] [client 4.193.242.138:19134] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ana.php"] [unique_id "aVkYDqHw6nASHXAc2v_jQgAAAdM"]
[Sat Jan 03 21:22:23.412377 2026] [:error] [pid 31222:tid 31245] [client 4.193.242.138:19701] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ana.php"] [unique_id "aVkYD6Hw6nASHXAc2v_jRwAAAdU"]
[Sat Jan 03 21:22:24.831301 2026] [:error] [pid 1930:tid 1988] [client 4.193.242.138:46930] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ana.php"] [unique_id "aVkYEJP-6mqhfUDa89zi2AAAAFY"]
[Sat Jan 03 21:22:25.680072 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:28208] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aVkYEaHw6nASHXAc2v_jSgAAAcg"]
[Sat Jan 03 21:22:26.230000 2026] [:error] [pid 1930:tid 1986] [client 4.193.242.138:19088] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aVkYEpP-6mqhfUDa89zi3QAAAFQ"]
[Sat Jan 03 21:22:26.634688 2026] [:error] [pid 2083:tid 2102] [client 4.193.242.138:46921] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aVkYEjVlR_BmlMPnhV4XtwAAANE"]
[Sat Jan 03 21:22:27.404900 2026] [:error] [pid 2083:tid 2087] [client 4.193.242.138:19711] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aVkYEzVlR_BmlMPnhV4XuQAAAMI"]
[Sat Jan 03 21:22:28.210378 2026] [:error] [pid 34260:tid 34284] [client 4.193.242.138:19670] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVkYFEWWhyvZ0O9KNVQhkQAAARY"]
[Sat Jan 03 21:22:28.679388 2026] [:error] [pid 1930:tid 1968] [client 4.193.242.138:19658] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVkYFJP-6mqhfUDa89zi4QAAAEI"]
[Sat Jan 03 21:22:29.112143 2026] [:error] [pid 31630:tid 31635] [client 4.193.242.138:46961] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVkYFfUV_PU2SWgLPuheMAAAAYM"]
[Sat Jan 03 21:22:29.424243 2026] [:error] [pid 1931:tid 2042] [client 4.193.242.138:19101] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVkYFR8Tyw7ZoIdXlcb7lgAAAJI"]
[Sat Jan 03 21:22:30.277118 2026] [:error] [pid 31630:tid 31642] [client 4.193.242.138:28199] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/she.php"] [unique_id "aVkYFvUV_PU2SWgLPuheMwAAAYo"]
[Sat Jan 03 21:22:30.893507 2026] [:error] [pid 31222:tid 31226] [client 4.193.242.138:19696] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/she.php"] [unique_id "aVkYFqHw6nASHXAc2v_jVgAAAcI"]
[Sat Jan 03 21:22:31.436565 2026] [:error] [pid 34260:tid 34266] [client 4.193.242.138:22787] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/she.php"] [unique_id "aVkYF0WWhyvZ0O9KNVQhlAAAAQQ"]
[Sat Jan 03 21:22:32.128655 2026] [:error] [pid 31222:tid 31232] [client 4.193.242.138:28201] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/she.php"] [unique_id "aVkYGKHw6nASHXAc2v_jWgAAAcg"]
[Sat Jan 03 21:22:32.612427 2026] [:error] [pid 1930:tid 1969] [client 4.193.242.138:22797] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVkYGJP-6mqhfUDa89zi6wAAAEM"]
[Sat Jan 03 21:22:32.959194 2026] [:error] [pid 34260:tid 34271] [client 4.193.242.138:46939] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVkYGEWWhyvZ0O9KNVQhlgAAAQk"]
[Sat Jan 03 21:22:33.305154 2026] [:error] [pid 34260:tid 34269] [client 4.193.242.138:19698] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVkYGUWWhyvZ0O9KNVQhmgAAAQc"]
[Sat Jan 03 21:22:33.700332 2026] [:error] [pid 34260:tid 34270] [client 4.193.242.138:19092] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVkYGUWWhyvZ0O9KNVQhnQAAAQg"]
[Sat Jan 03 21:22:33.924364 2026] [:error] [pid 1931:tid 2040] [client 4.193.242.138:19121] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/excel.php"] [unique_id "aVkYGR8Tyw7ZoIdXlcb7mwAAAJA"]
[Sat Jan 03 21:22:34.216060 2026] [:error] [pid 31222:tid 31235] [client 4.193.242.138:46959] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/excel.php"] [unique_id "aVkYGqHw6nASHXAc2v_jXQAAAcs"]
[Sat Jan 03 21:22:34.450606 2026] [:error] [pid 1931:tid 1993] [client 4.193.242.138:22813] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/excel.php"] [unique_id "aVkYGh8Tyw7ZoIdXlcb7nQAAAIA"]
[Sat Jan 03 21:22:34.808186 2026] [:error] [pid 1931:tid 1994] [client 4.193.242.138:26693] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/excel.php"] [unique_id "aVkYGh8Tyw7ZoIdXlcb7ngAAAIE"]
[Sat Jan 03 21:22:35.287608 2026] [:error] [pid 34260:tid 34279] [client 4.193.242.138:22811] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVkYG0WWhyvZ0O9KNVQhogAAARE"]
[Sat Jan 03 21:22:35.878088 2026] [:error] [pid 1929:tid 1958] [client 4.193.242.138:19081] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVkYG-cFqdpu6TNsuWrqbQAAABQ"]
[Sat Jan 03 21:22:36.696808 2026] [:error] [pid 1929:tid 1957] [client 4.193.242.138:22791] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVkYHOcFqdpu6TNsuWrqcgAAABM"]
[Sat Jan 03 21:22:38.514198 2026] [:error] [pid 34260:tid 34274] [client 4.193.242.138:22803] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVkYHkWWhyvZ0O9KNVQhsgAAAQw"]
[Sat Jan 03 21:22:39.823514 2026] [:error] [pid 31222:tid 31224] [client 4.193.242.138:46951] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ap.php"] [unique_id "aVkYH6Hw6nASHXAc2v_jYgAAAcA"]
[Sat Jan 03 21:22:40.891503 2026] [:error] [pid 34260:tid 34269] [client 4.193.242.138:22822] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ap.php"] [unique_id "aVkYIEWWhyvZ0O9KNVQhvgAAAQc"]
[Sat Jan 03 21:22:42.145120 2026] [:error] [pid 1931:tid 2041] [client 4.193.242.138:28172] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ap.php"] [unique_id "aVkYIh8Tyw7ZoIdXlcb7rQAAAJE"]
[Sat Jan 03 21:22:43.201031 2026] [:error] [pid 1929:tid 1959] [client 4.193.242.138:46920] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ap.php"] [unique_id "aVkYI-cFqdpu6TNsuWrqfAAAABU"]
[Sat Jan 03 21:22:45.470032 2026] [:error] [pid 31222:tid 31231] [client 4.193.242.138:22788] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aVkYJaHw6nASHXAc2v_jcAAAAcc"]
[Sat Jan 03 21:22:47.794518 2026] [:error] [pid 19639:tid 19649] [client 4.193.242.138:28165] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aVkYJyQ7fWZUytnlHEz9AQAAAUg"]
[Sat Jan 03 21:22:48.960038 2026] [:error] [pid 1931:tid 2036] [client 4.193.242.138:28219] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aVkYKB8Tyw7ZoIdXlcb7sgAAAIw"]
[Sat Jan 03 21:22:49.849108 2026] [:error] [pid 2083:tid 2095] [client 4.193.242.138:28178] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aVkYKTVlR_BmlMPnhV4X1gAAAMo"]
[Sat Jan 03 21:22:50.343399 2026] [:error] [pid 34260:tid 34281] [client 4.193.242.138:19093] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVkYKkWWhyvZ0O9KNVQhxQAAARM"]
[Sat Jan 03 21:22:50.950344 2026] [:error] [pid 31630:tid 31641] [client 4.193.242.138:19099] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVkYKvUV_PU2SWgLPuheQAAAAYk"]
[Sat Jan 03 21:22:51.763233 2026] [:error] [pid 2083:tid 2106] [client 4.193.242.138:28210] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVkYKzVlR_BmlMPnhV4X3QAAANU"]
[Sat Jan 03 21:22:52.541189 2026] [:error] [pid 2083:tid 2086] [client 4.193.242.138:46958] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVkYLDVlR_BmlMPnhV4X4AAAAME"]
[Sat Jan 03 21:22:53.911467 2026] [:error] [pid 2083:tid 2090] [client 4.193.242.138:19671] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/love.php"] [unique_id "aVkYLTVlR_BmlMPnhV4X4QAAAMU"]
[Sat Jan 03 21:22:55.424819 2026] [:error] [pid 2083:tid 2101] [client 4.193.242.138:46924] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/love.php"] [unique_id "aVkYLzVlR_BmlMPnhV4X5wAAANA"]
[Sat Jan 03 21:22:56.098194 2026] [:error] [pid 2083:tid 2094] [client 4.193.242.138:28166] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/love.php"] [unique_id "aVkYMDVlR_BmlMPnhV4X6AAAAMk"]
[Sat Jan 03 21:22:56.710956 2026] [:error] [pid 19639:tid 19642] [client 4.193.242.138:22805] [client 4.193.242.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/love.php"] [unique_id "aVkYMCQ7fWZUytnlHEz9DAAAAUE"]
[Sat Jan 03 21:22:58.815799 2026] [:error] [pid 2083:tid 2087] [client 4.193.242.138:46968] File does not exist: /usr/local/apache/htdocs/suspended-page/wso3.php
[Sat Jan 03 21:22:59.763007 2026] [:error] [pid 2083:tid 2101] [client 4.193.242.138:46968] File does not exist: /usr/local/apache/htdocs/suspended-page/x7.php
[Sat Jan 03 21:23:00.074167 2026] [:error] [pid 2083:tid 2100] [client 4.193.242.138:46968] File does not exist: /usr/local/apache/htdocs/suspended-page/xxl.php
[Sun Jan 04 01:54:25.212014 2026] [:error] [pid 49229:tid 49268] [client 125.94.144.102:45276] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVlX0VCM4R1akb8JNI68EQAAAEc"]
[Sun Jan 04 02:24:16.729126 2026] [:error] [pid 49229:tid 49280] [client 103.77.106.81:63479] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aVle0FCM4R1akb8JNI7NPQAAAFM"]
[Sun Jan 04 02:24:19.956721 2026] [:error] [pid 49230:tid 49294] [client 103.77.106.81:63792] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aVle032klmw7JRfgM3jehQAAAIY"]
[Sun Jan 04 05:24:04.300537 2026] [:error] [pid 37538:tid 37617] [client 103.77.107.178:54870] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aVmI9IzU2j98LiSLQvRMNwAAAJE"]
[Sun Jan 04 05:24:04.843406 2026] [:error] [pid 37636:tid 37647] [client 103.77.107.178:54977] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aVmI9C3kmZpEf9yy2b09xgAAAMc"]
[Sun Jan 04 05:59:20.666164 2026] [:error] [pid 37636:tid 37652] [client 49.51.39.209:37242] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVmROC3kmZpEf9yy2b1NRwAAAMw"]
[Sun Jan 04 17:56:06.252463 2026] [:error] [pid 56796:tid 56813] [client 143.110.243.127:57214] [client 143.110.243.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.243.127, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aVo5NoXa4dVs9ML_oAYDegAAAc4"]
[Sun Jan 04 17:56:06.256319 2026] [:error] [pid 56796:tid 56813] [client 143.110.243.127:57214] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Jan 04 20:46:25.624283 2026] [:error] [pid 23868:tid 23889] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sun Jan 04 20:46:25.744685 2026] [:error] [pid 23868:tid 23894] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/nwflm.php
[Sun Jan 04 20:46:25.863711 2026] [:error] [pid 23868:tid 23893] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/qa.php
[Sun Jan 04 20:46:25.983808 2026] [:error] [pid 23868:tid 23877] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/sidfile.php
[Sun Jan 04 20:46:26.104199 2026] [:error] [pid 23868:tid 23879] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/bnn_.php
[Sun Jan 04 20:46:26.224686 2026] [:error] [pid 23868:tid 23878] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/file58.php
[Sun Jan 04 20:46:26.345027 2026] [:error] [pid 23868:tid 23900] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/0w1d.php
[Sun Jan 04 20:46:26.464277 2026] [:error] [pid 23868:tid 23897] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/ff.php
[Sun Jan 04 20:46:26.583912 2026] [:error] [pid 23868:tid 23886] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/strift.php
[Sun Jan 04 20:46:26.703680 2026] [:error] [pid 23868:tid 23892] [client 104.208.65.11:16086] File does not exist: /usr/local/apache/htdocs/suspended-page/bel.php
[Sun Jan 04 20:46:26.822160 2026] [:error] [pid 23868:tid 23887] [client 104.208.65.11:16086] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk1.php"] [unique_id "aVphIrbaf-JYFyQL_053WQAAAEs"]
[Sun Jan 04 20:46:27.058086 2026] [:error] [pid 23967:tid 23989] [client 104.208.65.11:16111] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk1.php"] [unique_id "aVphIz0PhjBsUtIi4VV6ZwAAAZI"]
[Sun Jan 04 20:46:27.311607 2026] [:error] [pid 21812:tid 21863] [client 104.208.65.11:16093] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk1.php"] [unique_id "aVphI-2lkeIp6bksZx2BUwAAA1Q"]
[Sun Jan 04 20:46:27.555106 2026] [:error] [pid 23967:tid 23972] [client 104.208.65.11:16064] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk1.php"] [unique_id "aVphIz0PhjBsUtIi4VV6awAAAYE"]
[Sun Jan 04 20:46:27.788493 2026] [:error] [pid 23903:tid 23924] [client 104.208.65.11:16005] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aVphIz_yzB-omvQP-LLGxAAAAM8"]
[Sun Jan 04 20:46:28.023779 2026] [:error] [pid 23904:tid 23960] [client 104.208.65.11:16110] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aVphJP3FRCMgI2cXAQEwggAAARg"]
[Sun Jan 04 20:46:28.265909 2026] [:error] [pid 21812:tid 21845] [client 104.208.65.11:16109] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aVphJO2lkeIp6bksZx2BVAAAA0I"]
[Sun Jan 04 20:46:28.509080 2026] [:error] [pid 23967:tid 23974] [client 104.208.65.11:16007] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aVphJD0PhjBsUtIi4VV6eQAAAYM"]
[Sun Jan 04 20:46:28.751347 2026] [:error] [pid 23968:tid 24009] [client 104.208.65.11:16103] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVphJGzpAzHWBUMs-z549gAAAgs"]
[Sun Jan 04 20:46:28.988346 2026] [:error] [pid 23968:tid 24007] [client 104.208.65.11:16010] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVphJGzpAzHWBUMs-z54-QAAAgk"]
[Sun Jan 04 20:46:29.235943 2026] [:error] [pid 21720:tid 21726] [client 104.208.65.11:16022] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVphJX5pkDWzwRcldOpKLAAAAIQ"]
[Sun Jan 04 20:46:29.483279 2026] [:error] [pid 21753:tid 21760] [client 104.208.65.11:16085] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aVphJV4xwAtqKablc077bAAAAkQ"]
[Sun Jan 04 20:46:29.716248 2026] [:error] [pid 21720:tid 21744] [client 104.208.65.11:1997] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/51.php"] [unique_id "aVphJX5pkDWzwRcldOpKLgAAAJY"]
[Sun Jan 04 20:46:29.952111 2026] [:error] [pid 21720:tid 21743] [client 104.208.65.11:16087] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/51.php"] [unique_id "aVphJX5pkDWzwRcldOpKMAAAAJU"]
[Sun Jan 04 20:46:30.189835 2026] [:error] [pid 23903:tid 23933] [client 104.208.65.11:16104] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/51.php"] [unique_id "aVphJj_yzB-omvQP-LLGzgAAANg"]
[Sun Jan 04 20:46:30.444876 2026] [:error] [pid 21720:tid 21732] [client 104.208.65.11:16009] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/51.php"] [unique_id "aVphJn5pkDWzwRcldOpKMQAAAIo"]
[Sun Jan 04 20:46:30.690259 2026] [:error] [pid 1297:tid 1315] [client 104.208.65.11:16114] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVphJhf98x0RBG23PjfgAgAAABA"]
[Sun Jan 04 20:46:30.924163 2026] [:error] [pid 1297:tid 1305] [client 104.208.65.11:16125] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVphJhf98x0RBG23PjfgAwAAAAY"]
[Sun Jan 04 20:46:31.161052 2026] [:error] [pid 23903:tid 23925] [client 104.208.65.11:1986] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVphJz_yzB-omvQP-LLG0wAAANA"]
[Sun Jan 04 20:46:31.395406 2026] [:error] [pid 21753:tid 21772] [client 104.208.65.11:16025] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVphJ14xwAtqKablc077cAAAAlA"]
[Sun Jan 04 20:46:31.631411 2026] [:error] [pid 21753:tid 21766] [client 104.208.65.11:16018] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aVphJ14xwAtqKablc077cgAAAko"]
[Sun Jan 04 20:46:31.877140 2026] [:error] [pid 21753:tid 21769] [client 104.208.65.11:16021] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aVphJ14xwAtqKablc077cwAAAk0"]
[Sun Jan 04 20:46:32.116192 2026] [:error] [pid 23968:tid 24005] [client 104.208.65.11:16023] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aVphKGzpAzHWBUMs-z54_AAAAgc"]
[Sun Jan 04 20:46:32.352004 2026] [:error] [pid 23868:tid 23890] [client 104.208.65.11:16119] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aVphKLbaf-JYFyQL_053WgAAAE4"]
[Sun Jan 04 20:46:32.585944 2026] [:error] [pid 21720:tid 21740] [client 104.208.65.11:16107] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f2f.php"] [unique_id "aVphKH5pkDWzwRcldOpKNQAAAJI"]
[Sun Jan 04 20:46:32.819085 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:16072] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f2f.php"] [unique_id "aVphKGzpAzHWBUMs-z54_gAAAgE"]
[Sun Jan 04 20:46:33.059466 2026] [:error] [pid 23967:tid 23980] [client 104.208.65.11:16003] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f2f.php"] [unique_id "aVphKT0PhjBsUtIi4VV6hQAAAYk"]
[Sun Jan 04 20:46:33.298137 2026] [:error] [pid 23868:tid 23896] [client 104.208.65.11:16002] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f2f.php"] [unique_id "aVphKbbaf-JYFyQL_053XAAAAFQ"]
[Sun Jan 04 20:46:33.532917 2026] [:error] [pid 23968:tid 24011] [client 104.208.65.11:16123] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aVphKWzpAzHWBUMs-z54_wAAAg0"]
[Sun Jan 04 20:46:33.771134 2026] [:error] [pid 23968:tid 24012] [client 104.208.65.11:16117] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aVphKWzpAzHWBUMs-z55AgAAAg4"]
[Sun Jan 04 20:46:34.004879 2026] [:error] [pid 23968:tid 24022] [client 104.208.65.11:16112] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aVphKmzpAzHWBUMs-z55BQAAAhg"]
[Sun Jan 04 20:46:34.246537 2026] [:error] [pid 23968:tid 24018] [client 104.208.65.11:16024] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aVphKmzpAzHWBUMs-z55CAAAAhQ"]
[Sun Jan 04 20:46:34.497435 2026] [:error] [pid 23904:tid 23951] [client 104.208.65.11:2013] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xw.php"] [unique_id "aVphKv3FRCMgI2cXAQEwhwAAAQ8"]
[Sun Jan 04 20:46:34.734056 2026] [:error] [pid 21720:tid 21733] [client 104.208.65.11:16000] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xw.php"] [unique_id "aVphKn5pkDWzwRcldOpKNwAAAIs"]
[Sun Jan 04 20:46:34.968123 2026] [:error] [pid 17268:tid 17277] [client 104.208.65.11:16052] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xw.php"] [unique_id "aVphKrPW8UB8HzRRfIdAfgAAAUY"]
[Sun Jan 04 20:46:35.204470 2026] [:error] [pid 23904:tid 23950] [client 104.208.65.11:16029] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xw.php"] [unique_id "aVphK_3FRCMgI2cXAQEwigAAAQ4"]
[Sun Jan 04 20:46:35.449983 2026] [:error] [pid 23904:tid 23957] [client 104.208.65.11:16028] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aVphK_3FRCMgI2cXAQEwjQAAARU"]
[Sun Jan 04 20:46:35.682717 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:1999] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aVphK2zpAzHWBUMs-z55DwAAAgE"]
[Sun Jan 04 20:46:35.922048 2026] [:error] [pid 17268:tid 17293] [client 104.208.65.11:16099] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aVphK7PW8UB8HzRRfIdAfwAAAVY"]
[Sun Jan 04 20:46:36.166090 2026] [:error] [pid 17268:tid 17282] [client 104.208.65.11:2000] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aVphLLPW8UB8HzRRfIdAggAAAUs"]
[Sun Jan 04 20:46:36.417441 2026] [:error] [pid 23967:tid 23973] [client 104.208.65.11:16074] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVphLD0PhjBsUtIi4VV6iwAAAYI"]
[Sun Jan 04 20:46:36.651024 2026] [:error] [pid 23968:tid 24015] [client 104.208.65.11:16084] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVphLGzpAzHWBUMs-z55EQAAAhE"]
[Sun Jan 04 20:46:36.885224 2026] [:error] [pid 21720:tid 21745] [client 104.208.65.11:16070] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVphLH5pkDWzwRcldOpKOQAAAJc"]
[Sun Jan 04 20:46:37.123126 2026] [:error] [pid 21720:tid 21736] [client 104.208.65.11:16077] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aVphLX5pkDWzwRcldOpKOgAAAI4"]
[Sun Jan 04 20:46:37.362305 2026] [:error] [pid 21753:tid 21770] [client 104.208.65.11:2021] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aVphLV4xwAtqKablc077egAAAk4"]
[Sun Jan 04 20:46:37.597362 2026] [:error] [pid 21753:tid 21778] [client 104.208.65.11:16067] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aVphLV4xwAtqKablc077ewAAAlY"]
[Sun Jan 04 20:46:37.830155 2026] [:error] [pid 23968:tid 23998] [client 104.208.65.11:16116] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aVphLWzpAzHWBUMs-z55FQAAAgA"]
[Sun Jan 04 20:46:38.063517 2026] [:error] [pid 21720:tid 21731] [client 104.208.65.11:2002] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aVphLn5pkDWzwRcldOpKPQAAAIk"]
[Sun Jan 04 20:46:38.297668 2026] [:error] [pid 17268:tid 17276] [client 104.208.65.11:16126] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aVphLrPW8UB8HzRRfIdAhAAAAUU"]
[Sun Jan 04 20:46:38.533055 2026] [:error] [pid 1297:tid 1302] [client 104.208.65.11:16027] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aVphLhf98x0RBG23PjfgBgAAAAM"]
[Sun Jan 04 20:46:38.765776 2026] [:error] [pid 23868:tid 23888] [client 104.208.65.11:16088] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aVphLrbaf-JYFyQL_053XgAAAEw"]
[Sun Jan 04 20:46:39.009031 2026] [:error] [pid 21812:tid 21851] [client 104.208.65.11:1998] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aVphL-2lkeIp6bksZx2BWwAAA0g"]
[Sun Jan 04 20:46:39.243095 2026] [:error] [pid 17268:tid 17284] [client 104.208.65.11:16042] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aVphL7PW8UB8HzRRfIdAiQAAAU0"]
[Sun Jan 04 20:46:39.502805 2026] [:error] [pid 23967:tid 23977] [client 104.208.65.11:2027] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aVphLz0PhjBsUtIi4VV6jwAAAYY"]
[Sun Jan 04 20:46:39.736669 2026] [:error] [pid 21753:tid 21760] [client 104.208.65.11:2042] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aVphL14xwAtqKablc077fQAAAkQ"]
[Sun Jan 04 20:46:39.969476 2026] [:error] [pid 17268:tid 17287] [client 104.208.65.11:16015] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aVphL7PW8UB8HzRRfIdAiwAAAVA"]
[Sun Jan 04 20:46:40.204413 2026] [:error] [pid 21812:tid 21865] [client 104.208.65.11:16066] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aVphMO2lkeIp6bksZx2BXAAAA1Y"]
[Sun Jan 04 20:46:40.437731 2026] [:error] [pid 23967:tid 23987] [client 104.208.65.11:16096] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aVphMD0PhjBsUtIi4VV6kgAAAZA"]
[Sun Jan 04 20:46:40.670596 2026] [:error] [pid 21812:tid 21844] [client 104.208.65.11:16100] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aVphMO2lkeIp6bksZx2BXQAAA0E"]
[Sun Jan 04 20:46:40.907871 2026] [:error] [pid 21720:tid 21725] [client 104.208.65.11:16068] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aVphMH5pkDWzwRcldOpKSQAAAIM"]
[Sun Jan 04 20:46:41.152835 2026] [:error] [pid 23868:tid 23885] [client 104.208.65.11:16090] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bras.php"] [unique_id "aVphMbbaf-JYFyQL_053YQAAAEk"]
[Sun Jan 04 20:46:41.392631 2026] [:error] [pid 21720:tid 21737] [client 104.208.65.11:16032] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bras.php"] [unique_id "aVphMX5pkDWzwRcldOpKTgAAAI8"]
[Sun Jan 04 20:46:41.633369 2026] [:error] [pid 23968:tid 24017] [client 104.208.65.11:16020] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bras.php"] [unique_id "aVphMWzpAzHWBUMs-z55IwAAAhM"]
[Sun Jan 04 20:46:41.868046 2026] [:error] [pid 23968:tid 24009] [client 104.208.65.11:2037] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bras.php"] [unique_id "aVphMWzpAzHWBUMs-z55JgAAAgs"]
[Sun Jan 04 20:46:42.107411 2026] [:error] [pid 23968:tid 24000] [client 104.208.65.11:16079] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aVphMmzpAzHWBUMs-z55KgAAAgI"]
[Sun Jan 04 20:46:42.344083 2026] [:error] [pid 23904:tid 23958] [client 104.208.65.11:16108] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aVphMv3FRCMgI2cXAQEwlQAAARY"]
[Sun Jan 04 20:46:42.582259 2026] [:error] [pid 23868:tid 23876] [client 104.208.65.11:16069] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aVphMrbaf-JYFyQL_053ZAAAAEA"]
[Sun Jan 04 20:46:42.821241 2026] [:error] [pid 21753:tid 21772] [client 104.208.65.11:16065] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aVphMl4xwAtqKablc077gQAAAlA"]
[Sun Jan 04 20:46:43.063387 2026] [:error] [pid 21753:tid 21769] [client 104.208.65.11:16083] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aVphM14xwAtqKablc077gwAAAk0"]
[Sun Jan 04 20:46:43.298940 2026] [:error] [pid 21753:tid 21768] [client 104.208.65.11:16036] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aVphM14xwAtqKablc077hAAAAkw"]
[Sun Jan 04 20:46:43.570955 2026] [:error] [pid 17268:tid 17292] [client 104.208.65.11:16006] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aVphM7PW8UB8HzRRfIdAkAAAAVU"]
[Sun Jan 04 20:46:43.804750 2026] [:error] [pid 23967:tid 23978] [client 104.208.65.11:16102] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aVphMz0PhjBsUtIi4VV6lgAAAYc"]
[Sun Jan 04 20:46:44.044124 2026] [:error] [pid 23904:tid 23957] [client 104.208.65.11:16001] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aVphNP3FRCMgI2cXAQEwlgAAARU"]
[Sun Jan 04 20:46:44.281736 2026] [:error] [pid 23904:tid 23941] [client 104.208.65.11:2023] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aVphNP3FRCMgI2cXAQEwmgAAAQU"]
[Sun Jan 04 20:46:44.516678 2026] [:error] [pid 23868:tid 23879] [client 104.208.65.11:16127] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aVphNLbaf-JYFyQL_053aAAAAEM"]
[Sun Jan 04 20:46:44.755153 2026] [:error] [pid 21812:tid 21849] [client 104.208.65.11:16004] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aVphNO2lkeIp6bksZx2BYgAAA0Y"]
[Sun Jan 04 20:46:44.988310 2026] [:error] [pid 21812:tid 21857] [client 104.208.65.11:16063] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xe.php"] [unique_id "aVphNO2lkeIp6bksZx2BYwAAA04"]
[Sun Jan 04 20:46:45.223706 2026] [:error] [pid 23868:tid 23900] [client 104.208.65.11:16124] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xe.php"] [unique_id "aVphNbbaf-JYFyQL_053aQAAAFg"]
[Sun Jan 04 20:46:45.471341 2026] [:error] [pid 23903:tid 23910] [client 104.208.65.11:16094] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xe.php"] [unique_id "aVphNT_yzB-omvQP-LLG2QAAAME"]
[Sun Jan 04 20:46:45.721786 2026] [:error] [pid 23868:tid 23897] [client 104.208.65.11:16031] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xe.php"] [unique_id "aVphNbbaf-JYFyQL_053awAAAFU"]
[Sun Jan 04 20:46:45.958347 2026] [:error] [pid 1297:tid 1304] [client 104.208.65.11:16014] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVphNRf98x0RBG23PjfgFwAAAAU"]
[Sun Jan 04 20:46:46.223721 2026] [:error] [pid 23967:tid 23991] [client 104.208.65.11:16085] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVphNj0PhjBsUtIi4VV6mgAAAZQ"]
[Sun Jan 04 20:46:46.458150 2026] [:error] [pid 21753:tid 21758] [client 104.208.65.11:16050] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVphNl4xwAtqKablc077iQAAAkI"]
[Sun Jan 04 20:46:46.706572 2026] [:error] [pid 23903:tid 23930] [client 104.208.65.11:2012] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aVphNj_yzB-omvQP-LLG3QAAANU"]
[Sun Jan 04 20:46:46.947735 2026] [:error] [pid 21812:tid 21867] [client 104.208.65.11:1989] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aVphNu2lkeIp6bksZx2BZwAAA1g"]
[Sun Jan 04 20:46:47.189682 2026] [:error] [pid 23967:tid 23993] [client 104.208.65.11:16047] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aVphNz0PhjBsUtIi4VV6nAAAAZY"]
[Sun Jan 04 20:46:47.422419 2026] [:error] [pid 23968:tid 24012] [client 104.208.65.11:16034] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aVphN2zpAzHWBUMs-z55NAAAAg4"]
[Sun Jan 04 20:46:47.687563 2026] [:error] [pid 23868:tid 23899] [client 104.208.65.11:16092] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aVphN7baf-JYFyQL_053bQAAAFc"]
[Sun Jan 04 20:46:47.920290 2026] [:error] [pid 23968:tid 24014] [client 104.208.65.11:16035] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphN2zpAzHWBUMs-z55NgAAAhA"]
[Sun Jan 04 20:46:48.152509 2026] [:error] [pid 23968:tid 24020] [client 104.208.65.11:16113] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphOGzpAzHWBUMs-z55OAAAAhY"]
[Sun Jan 04 20:46:48.385921 2026] [:error] [pid 23968:tid 24015] [client 104.208.65.11:16057] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphOGzpAzHWBUMs-z55OgAAAhE"]
[Sun Jan 04 20:46:48.619079 2026] [:error] [pid 21753:tid 21776] [client 104.208.65.11:16012] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphOF4xwAtqKablc077jgAAAlQ"]
[Sun Jan 04 20:46:48.853201 2026] [:error] [pid 23968:tid 24011] [client 104.208.65.11:1941] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws13.php"] [unique_id "aVphOGzpAzHWBUMs-z55PgAAAg0"]
[Sun Jan 04 20:46:49.089613 2026] [:error] [pid 23968:tid 24018] [client 104.208.65.11:16076] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws13.php"] [unique_id "aVphOWzpAzHWBUMs-z55QgAAAhQ"]
[Sun Jan 04 20:46:49.323813 2026] [:error] [pid 23903:tid 23918] [client 104.208.65.11:16075] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws13.php"] [unique_id "aVphOT_yzB-omvQP-LLG4AAAAMk"]
[Sun Jan 04 20:46:49.572442 2026] [:error] [pid 23968:tid 24014] [client 104.208.65.11:1992] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws13.php"] [unique_id "aVphOWzpAzHWBUMs-z55RwAAAhA"]
[Sun Jan 04 20:46:49.805975 2026] [:error] [pid 23903:tid 23931] [client 104.208.65.11:16051] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss1.php"] [unique_id "aVphOT_yzB-omvQP-LLG4wAAANY"]
[Sun Jan 04 20:46:50.040664 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:16016] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss1.php"] [unique_id "aVphOmzpAzHWBUMs-z55SgAAAgE"]
[Sun Jan 04 20:46:50.279748 2026] [:error] [pid 23868:tid 23882] [client 104.208.65.11:16041] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss1.php"] [unique_id "aVphOrbaf-JYFyQL_053cQAAAEY"]
[Sun Jan 04 20:46:50.513035 2026] [:error] [pid 23904:tid 23943] [client 104.208.65.11:16046] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss1.php"] [unique_id "aVphOv3FRCMgI2cXAQEwngAAAQc"]
[Sun Jan 04 20:46:50.759869 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:1990] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww7.php"] [unique_id "aVphOmzpAzHWBUMs-z55TgAAAhI"]
[Sun Jan 04 20:46:50.992606 2026] [:error] [pid 21812:tid 21851] [client 104.208.65.11:16059] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww7.php"] [unique_id "aVphOu2lkeIp6bksZx2BaQAAA0g"]
[Sun Jan 04 20:46:51.225746 2026] [:error] [pid 23968:tid 24021] [client 104.208.65.11:1923] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww7.php"] [unique_id "aVphO2zpAzHWBUMs-z55UAAAAhc"]
[Sun Jan 04 20:46:51.459570 2026] [:error] [pid 23968:tid 24002] [client 104.208.65.11:2010] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww7.php"] [unique_id "aVphO2zpAzHWBUMs-z55UQAAAgQ"]
[Sun Jan 04 20:46:51.695327 2026] [:error] [pid 23903:tid 23916] [client 104.208.65.11:2020] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aVphOz_yzB-omvQP-LLG7QAAAMc"]
[Sun Jan 04 20:46:51.932325 2026] [:error] [pid 23903:tid 23913] [client 104.208.65.11:1993] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aVphOz_yzB-omvQP-LLG7wAAAMQ"]
[Sun Jan 04 20:46:52.165490 2026] [:error] [pid 21753:tid 21780] [client 104.208.65.11:2011] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aVphPF4xwAtqKablc077nAAAAlg"]
[Sun Jan 04 20:46:52.399461 2026] [:error] [pid 23968:tid 24013] [client 104.208.65.11:16056] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aVphPGzpAzHWBUMs-z55WAAAAg8"]
[Sun Jan 04 20:46:52.633821 2026] [:error] [pid 23904:tid 23953] [client 104.208.65.11:1938] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lisa.php"] [unique_id "aVphPP3FRCMgI2cXAQEwoAAAARE"]
[Sun Jan 04 20:46:52.890854 2026] [:error] [pid 21812:tid 21852] [client 104.208.65.11:16055] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lisa.php"] [unique_id "aVphPO2lkeIp6bksZx2BbQAAA0k"]
[Sun Jan 04 20:46:53.126821 2026] [:error] [pid 23968:tid 24007] [client 104.208.65.11:16091] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lisa.php"] [unique_id "aVphPWzpAzHWBUMs-z55YAAAAgk"]
[Sun Jan 04 20:46:53.361238 2026] [:error] [pid 21753:tid 21770] [client 104.208.65.11:16044] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lisa.php"] [unique_id "aVphPV4xwAtqKablc077nwAAAk4"]
[Sun Jan 04 20:46:53.594746 2026] [:error] [pid 23904:tid 23937] [client 104.208.65.11:16013] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aVphPf3FRCMgI2cXAQEwogAAAQE"]
[Sun Jan 04 20:46:53.831594 2026] [:error] [pid 21812:tid 21863] [client 104.208.65.11:2006] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aVphPe2lkeIp6bksZx2BcwAAA1Q"]
[Sun Jan 04 20:46:54.064667 2026] [:error] [pid 23903:tid 23930] [client 104.208.65.11:16122] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aVphPj_yzB-omvQP-LLG8QAAANU"]
[Sun Jan 04 20:46:54.296987 2026] [:error] [pid 21812:tid 21856] [client 104.208.65.11:2026] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aVphPu2lkeIp6bksZx2BdgAAA00"]
[Sun Jan 04 20:46:54.533053 2026] [:error] [pid 23868:tid 23880] [client 104.208.65.11:2032] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aVphPrbaf-JYFyQL_053fAAAAEQ"]
[Sun Jan 04 20:46:54.792287 2026] [:error] [pid 23868:tid 23896] [client 104.208.65.11:2008] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aVphPrbaf-JYFyQL_053fwAAAFQ"]
[Sun Jan 04 20:46:55.030794 2026] [:error] [pid 23868:tid 23888] [client 104.208.65.11:16115] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aVphP7baf-JYFyQL_053ggAAAEw"]
[Sun Jan 04 20:46:55.267618 2026] [:error] [pid 21812:tid 21850] [client 104.208.65.11:16019] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aVphP-2lkeIp6bksZx2BfAAAA0c"]
[Sun Jan 04 20:46:55.501304 2026] [:error] [pid 23868:tid 23884] [client 104.208.65.11:16042] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVphP7baf-JYFyQL_053hQAAAEg"]
[Sun Jan 04 20:46:55.736160 2026] [:error] [pid 17268:tid 17279] [client 104.208.65.11:16038] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVphP7PW8UB8HzRRfIdAlAAAAUg"]
[Sun Jan 04 20:46:55.969851 2026] [:error] [pid 23968:tid 24003] [client 104.208.65.11:2003] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVphP2zpAzHWBUMs-z55cQAAAgU"]
[Sun Jan 04 20:46:56.203554 2026] [:error] [pid 23968:tid 24006] [client 104.208.65.11:16095] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aVphQGzpAzHWBUMs-z55dAAAAgg"]
[Sun Jan 04 20:46:56.437564 2026] [:error] [pid 23968:tid 24005] [client 104.208.65.11:2004] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVphQGzpAzHWBUMs-z55eAAAAgc"]
[Sun Jan 04 20:46:56.671586 2026] [:error] [pid 23903:tid 23917] [client 104.208.65.11:1996] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVphQD_yzB-omvQP-LLG-AAAAMg"]
[Sun Jan 04 20:46:56.911786 2026] [:error] [pid 23968:tid 24015] [client 104.208.65.11:1972] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVphQGzpAzHWBUMs-z55fQAAAhE"]
[Sun Jan 04 20:46:57.155682 2026] [:error] [pid 23968:tid 24022] [client 104.208.65.11:1921] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVphQWzpAzHWBUMs-z55fwAAAhg"]
[Sun Jan 04 20:46:57.400899 2026] [:error] [pid 23903:tid 23927] [client 104.208.65.11:16030] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVphQT_yzB-omvQP-LLG-QAAANI"]
[Sun Jan 04 20:46:57.638968 2026] [:error] [pid 23903:tid 23923] [client 104.208.65.11:1939] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVphQT_yzB-omvQP-LLG-gAAAM4"]
[Sun Jan 04 20:46:57.877491 2026] [:error] [pid 17268:tid 17288] [client 104.208.65.11:1950] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVphQbPW8UB8HzRRfIdAlgAAAVE"]
[Sun Jan 04 20:46:58.112960 2026] [:error] [pid 17268:tid 17274] [client 104.208.65.11:1957] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aVphQrPW8UB8HzRRfIdAmAAAAUM"]
[Sun Jan 04 20:46:58.346484 2026] [:error] [pid 23868:tid 23890] [client 104.208.65.11:1964] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVphQrbaf-JYFyQL_053jgAAAE4"]
[Sun Jan 04 20:46:58.582588 2026] [:error] [pid 23968:tid 24005] [client 104.208.65.11:1973] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVphQmzpAzHWBUMs-z55hgAAAgc"]
[Sun Jan 04 20:46:58.818966 2026] [:error] [pid 23968:tid 24008] [client 104.208.65.11:1960] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVphQmzpAzHWBUMs-z55hwAAAgo"]
[Sun Jan 04 20:46:59.051185 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:2007] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bipas.php"] [unique_id "aVphQ2zpAzHWBUMs-z55iwAAAhI"]
[Sun Jan 04 20:46:59.287652 2026] [:error] [pid 23868:tid 23888] [client 104.208.65.11:1995] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVphQ7baf-JYFyQL_053kQAAAEw"]
[Sun Jan 04 20:46:59.521383 2026] [:error] [pid 23904:tid 23948] [client 104.208.65.11:1932] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVphQ_3FRCMgI2cXAQEwqAAAAQw"]
[Sun Jan 04 20:46:59.760735 2026] [:error] [pid 17268:tid 17286] [client 104.208.65.11:2009] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVphQ7PW8UB8HzRRfIdAnAAAAU8"]
[Sun Jan 04 20:47:00.001124 2026] [:error] [pid 23904:tid 23952] [client 104.208.65.11:2014] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/conte.php"] [unique_id "aVphRP3FRCMgI2cXAQEwrgAAARA"]
[Sun Jan 04 20:47:00.264095 2026] [:error] [pid 21812:tid 21862] [client 104.208.65.11:2022] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVphRO2lkeIp6bksZx2BhwAAA1M"]
[Sun Jan 04 20:47:00.500776 2026] [:error] [pid 23904:tid 23953] [client 104.208.65.11:1933] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVphRP3FRCMgI2cXAQEwsgAAARE"]
[Sun Jan 04 20:47:00.739335 2026] [:error] [pid 23904:tid 23937] [client 104.208.65.11:16062] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVphRP3FRCMgI2cXAQEwtQAAAQE"]
[Sun Jan 04 20:47:00.972696 2026] [:error] [pid 21812:tid 21866] [client 104.208.65.11:16080] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class3.php"] [unique_id "aVphRO2lkeIp6bksZx2BjAAAA1c"]
[Sun Jan 04 20:47:01.208104 2026] [:error] [pid 23868:tid 23883] [client 104.208.65.11:16098] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aVphRbbaf-JYFyQL_053kgAAAEc"]
[Sun Jan 04 20:47:01.441781 2026] [:error] [pid 21812:tid 21845] [client 104.208.65.11:16081] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aVphRe2lkeIp6bksZx2BjwAAA0I"]
[Sun Jan 04 20:47:01.684499 2026] [:error] [pid 23903:tid 23932] [client 104.208.65.11:1991] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aVphRT_yzB-omvQP-LLHAQAAANc"]
[Sun Jan 04 20:47:01.950069 2026] [:error] [pid 23968:tid 24017] [client 104.208.65.11:16033] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aVphRWzpAzHWBUMs-z55kwAAAhM"]
[Sun Jan 04 20:47:02.413176 2026] [:error] [pid 23868:tid 23884] [client 104.208.65.11:1985] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aVphRrbaf-JYFyQL_053lAAAAEg"]
[Sun Jan 04 20:47:02.646448 2026] [:error] [pid 21753:tid 21760] [client 104.208.65.11:1926] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aVphRl4xwAtqKablc077oAAAAkQ"]
[Sun Jan 04 20:47:02.885629 2026] [:error] [pid 23903:tid 23920] [client 104.208.65.11:2030] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aVphRj_yzB-omvQP-LLHBQAAAMs"]
[Sun Jan 04 20:47:03.122075 2026] [:error] [pid 23904:tid 23955] [client 104.208.65.11:16017] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claa.php"] [unique_id "aVphR_3FRCMgI2cXAQEwuQAAARM"]
[Sun Jan 04 20:47:03.371008 2026] [:error] [pid 21812:tid 21855] [client 104.208.65.11:2005] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVphR-2lkeIp6bksZx2BkQAAA0w"]
[Sun Jan 04 20:47:03.618087 2026] [:error] [pid 21812:tid 21864] [client 104.208.65.11:16045] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVphR-2lkeIp6bksZx2BkgAAA1U"]
[Sun Jan 04 20:47:03.875781 2026] [:error] [pid 21720:tid 21728] [client 104.208.65.11:2018] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVphR35pkDWzwRcldOpKXQAAAIY"]
[Sun Jan 04 20:47:04.112438 2026] [:error] [pid 23967:tid 23992] [client 104.208.65.11:2001] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shoyo.php"] [unique_id "aVphSD0PhjBsUtIi4VV6rwAAAZU"]
[Sun Jan 04 20:47:04.347498 2026] [:error] [pid 21812:tid 21865] [client 104.208.65.11:16060] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVphSO2lkeIp6bksZx2BkwAAA1Y"]
[Sun Jan 04 20:47:04.580737 2026] [:error] [pid 23967:tid 23988] [client 104.208.65.11:16011] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVphSD0PhjBsUtIi4VV6sQAAAZE"]
[Sun Jan 04 20:47:04.815248 2026] [:error] [pid 23868:tid 23887] [client 104.208.65.11:16049] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVphSLbaf-JYFyQL_053mQAAAEs"]
[Sun Jan 04 20:47:05.048962 2026] [:error] [pid 21720:tid 21736] [client 104.208.65.11:2024] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aVphSX5pkDWzwRcldOpKYgAAAI4"]
[Sun Jan 04 20:47:05.281601 2026] [:error] [pid 23868:tid 23894] [client 104.208.65.11:1979] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVphSbbaf-JYFyQL_053mwAAAFI"]
[Sun Jan 04 20:47:05.516757 2026] [:error] [pid 23868:tid 23886] [client 104.208.65.11:2015] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVphSbbaf-JYFyQL_053nAAAAEo"]
[Sun Jan 04 20:47:05.750118 2026] [:error] [pid 21720:tid 21722] [client 104.208.65.11:1951] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVphSX5pkDWzwRcldOpKZgAAAIA"]
[Sun Jan 04 20:47:05.983957 2026] [:error] [pid 23968:tid 24013] [client 104.208.65.11:2040] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/waq.php"] [unique_id "aVphSWzpAzHWBUMs-z55nQAAAg8"]
[Sun Jan 04 20:47:06.221335 2026] [:error] [pid 23968:tid 24015] [client 104.208.65.11:1967] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVphSmzpAzHWBUMs-z55nwAAAhE"]
[Sun Jan 04 20:47:06.460361 2026] [:error] [pid 23968:tid 23998] [client 104.208.65.11:1943] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVphSmzpAzHWBUMs-z55owAAAgA"]
[Sun Jan 04 20:47:06.694221 2026] [:error] [pid 23868:tid 23896] [client 104.208.65.11:2039] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVphSrbaf-JYFyQL_053ogAAAFQ"]
[Sun Jan 04 20:47:06.931706 2026] [:error] [pid 23968:tid 24006] [client 104.208.65.11:2031] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wakak.php"] [unique_id "aVphSmzpAzHWBUMs-z55pQAAAgg"]
[Sun Jan 04 20:47:07.169007 2026] [:error] [pid 23868:tid 23888] [client 104.208.65.11:1948] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVphS7baf-JYFyQL_053pAAAAEw"]
[Sun Jan 04 20:47:07.404613 2026] [:error] [pid 23904:tid 23960] [client 104.208.65.11:1949] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVphS_3FRCMgI2cXAQEwvwAAARg"]
[Sun Jan 04 20:47:07.638142 2026] [:error] [pid 23868:tid 23898] [client 104.208.65.11:16078] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVphS7baf-JYFyQL_053pQAAAFY"]
[Sun Jan 04 20:47:07.871366 2026] [:error] [pid 23904:tid 23958] [client 104.208.65.11:2043] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aVphS_3FRCMgI2cXAQEwwwAAARY"]
[Sun Jan 04 20:47:08.104993 2026] [:error] [pid 23868:tid 23885] [client 104.208.65.11:2036] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVphTLbaf-JYFyQL_053qAAAAEk"]
[Sun Jan 04 20:47:08.339231 2026] [:error] [pid 21753:tid 21773] [client 104.208.65.11:1862] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVphTF4xwAtqKablc077ogAAAlE"]
[Sun Jan 04 20:47:08.574557 2026] [:error] [pid 21720:tid 21746] [client 104.208.65.11:1935] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVphTH5pkDWzwRcldOpKaAAAAJg"]
[Sun Jan 04 20:47:08.812412 2026] [:error] [pid 21720:tid 21742] [client 104.208.65.11:16040] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aVphTH5pkDWzwRcldOpKagAAAJQ"]
[Sun Jan 04 20:47:09.084821 2026] [:error] [pid 23904:tid 23940] [client 104.208.65.11:16039] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVphTf3FRCMgI2cXAQEwxwAAAQQ"]
[Sun Jan 04 20:47:09.320194 2026] [:error] [pid 17268:tid 17272] [client 104.208.65.11:1927] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVphTbPW8UB8HzRRfIdAowAAAUE"]
[Sun Jan 04 20:47:09.561586 2026] [:error] [pid 23868:tid 23895] [client 104.208.65.11:2029] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVphTbbaf-JYFyQL_053qgAAAFM"]
[Sun Jan 04 20:47:09.796560 2026] [:error] [pid 23868:tid 23889] [client 104.208.65.11:16118] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xse25.php"] [unique_id "aVphTbbaf-JYFyQL_053qwAAAE0"]
[Sun Jan 04 20:47:10.029310 2026] [:error] [pid 21812:tid 21856] [client 104.208.65.11:2034] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphTu2lkeIp6bksZx2BmgAAA00"]
[Sun Jan 04 20:47:10.267652 2026] [:error] [pid 23868:tid 23894] [client 104.208.65.11:1931] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphTrbaf-JYFyQL_053sAAAAFI"]
[Sun Jan 04 20:47:10.501459 2026] [:error] [pid 21812:tid 21850] [client 104.208.65.11:1863] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphTu2lkeIp6bksZx2BoAAAA0c"]
[Sun Jan 04 20:47:10.734978 2026] [:error] [pid 21812:tid 21845] [client 104.208.65.11:2017] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aVphTu2lkeIp6bksZx2BogAAA0I"]
[Sun Jan 04 20:47:10.967010 2026] [:error] [pid 23868:tid 23878] [client 104.208.65.11:1966] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVphTrbaf-JYFyQL_053swAAAEI"]
[Sun Jan 04 20:47:11.199862 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:1928] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVphT2zpAzHWBUMs-z55rQAAAhI"]
[Sun Jan 04 20:47:11.434244 2026] [:error] [pid 21720:tid 21725] [client 104.208.65.11:1984] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVphT35pkDWzwRcldOpKbQAAAIM"]
[Sun Jan 04 20:47:11.670338 2026] [:error] [pid 21812:tid 21853] [client 104.208.65.11:1922] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aVphT-2lkeIp6bksZx2BpgAAA0o"]
[Sun Jan 04 20:47:11.902790 2026] [:error] [pid 21812:tid 21846] [client 104.208.65.11:1859] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVphT-2lkeIp6bksZx2BpwAAA0M"]
[Sun Jan 04 20:47:12.167570 2026] [:error] [pid 21812:tid 21861] [client 104.208.65.11:1977] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVphUO2lkeIp6bksZx2BqQAAA1I"]
[Sun Jan 04 20:47:12.400661 2026] [:error] [pid 23904:tid 23955] [client 104.208.65.11:16097] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVphUP3FRCMgI2cXAQEwzAAAARM"]
[Sun Jan 04 20:47:12.635092 2026] [:error] [pid 23868:tid 23898] [client 104.208.65.11:2041] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aVphULbaf-JYFyQL_053vAAAAFY"]
[Sun Jan 04 20:47:12.867711 2026] [:error] [pid 23904:tid 23941] [client 104.208.65.11:1988] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVphUP3FRCMgI2cXAQEwzQAAAQU"]
[Sun Jan 04 20:47:13.101172 2026] [:error] [pid 23904:tid 23959] [client 104.208.65.11:16037] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVphUf3FRCMgI2cXAQEwzgAAARc"]
[Sun Jan 04 20:47:13.339262 2026] [:error] [pid 17268:tid 17288] [client 104.208.65.11:1965] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVphUbPW8UB8HzRRfIdArAAAAVE"]
[Sun Jan 04 20:47:13.581590 2026] [:error] [pid 21812:tid 21844] [client 104.208.65.11:16071] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aVphUe2lkeIp6bksZx2BrQAAA0E"]
[Sun Jan 04 20:47:13.814822 2026] [:error] [pid 23904:tid 23944] [client 104.208.65.11:16120] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVphUf3FRCMgI2cXAQEw0AAAAQg"]
[Sun Jan 04 20:47:14.059661 2026] [:error] [pid 23904:tid 23939] [client 104.208.65.11:16061] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVphUv3FRCMgI2cXAQEw0QAAAQM"]
[Sun Jan 04 20:47:14.293074 2026] [:error] [pid 21812:tid 21860] [client 104.208.65.11:1811] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVphUu2lkeIp6bksZx2BsQAAA1E"]
[Sun Jan 04 20:47:14.525907 2026] [:error] [pid 21812:tid 21859] [client 104.208.65.11:1978] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aVphUu2lkeIp6bksZx2BsgAAA1A"]
[Sun Jan 04 20:47:14.766934 2026] [:error] [pid 23868:tid 23887] [client 104.208.65.11:1962] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVphUrbaf-JYFyQL_053wAAAAEs"]
[Sun Jan 04 20:47:15.002357 2026] [:error] [pid 21720:tid 21722] [client 104.208.65.11:2035] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVphU35pkDWzwRcldOpKcwAAAIA"]
[Sun Jan 04 20:47:15.251806 2026] [:error] [pid 23868:tid 23900] [client 104.208.65.11:2016] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVphU7baf-JYFyQL_053wQAAAFg"]
[Sun Jan 04 20:47:15.490246 2026] [:error] [pid 21812:tid 21845] [client 104.208.65.11:1974] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aVphU-2lkeIp6bksZx2BtgAAA0I"]
[Sun Jan 04 20:47:15.723672 2026] [:error] [pid 23967:tid 23980] [client 104.208.65.11:1803] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVphUz0PhjBsUtIi4VV6wwAAAYk"]
[Sun Jan 04 20:47:15.960695 2026] [:error] [pid 23868:tid 23892] [client 104.208.65.11:1963] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVphU7baf-JYFyQL_053xAAAAFA"]
[Sun Jan 04 20:47:16.197606 2026] [:error] [pid 23904:tid 23956] [client 104.208.65.11:1799] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVphVP3FRCMgI2cXAQEw1AAAARQ"]
[Sun Jan 04 20:47:16.430887 2026] [:error] [pid 23868:tid 23878] [client 104.208.65.11:16089] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aVphVLbaf-JYFyQL_053xQAAAEI"]
[Sun Jan 04 20:47:16.673010 2026] [:error] [pid 23868:tid 23893] [client 104.208.65.11:16008] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVphVLbaf-JYFyQL_053xgAAAFE"]
[Sun Jan 04 20:47:16.907918 2026] [:error] [pid 21812:tid 21854] [client 104.208.65.11:1981] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVphVO2lkeIp6bksZx2BuwAAA0s"]
[Sun Jan 04 20:47:17.164468 2026] [:error] [pid 21812:tid 21866] [client 104.208.65.11:16054] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVphVe2lkeIp6bksZx2BvQAAA1c"]
[Sun Jan 04 20:47:17.398688 2026] [:error] [pid 1297:tid 1323] [client 104.208.65.11:1953] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aVphVRf98x0RBG23PjfgHQAAABg"]
[Sun Jan 04 20:47:17.636204 2026] [:error] [pid 21812:tid 21852] [client 104.208.65.11:1892] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVphVe2lkeIp6bksZx2BwAAAA0k"]
[Sun Jan 04 20:47:17.869413 2026] [:error] [pid 21812:tid 21856] [client 104.208.65.11:16103] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVphVe2lkeIp6bksZx2BwgAAA00"]
[Sun Jan 04 20:47:18.101734 2026] [:error] [pid 23904:tid 23937] [client 104.208.65.11:1879] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVphVv3FRCMgI2cXAQEw1wAAAQE"]
[Sun Jan 04 20:47:18.335485 2026] [:error] [pid 23868:tid 23885] [client 104.208.65.11:1866] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aVphVrbaf-JYFyQL_053zQAAAEk"]
[Sun Jan 04 20:47:18.587845 2026] [:error] [pid 23868:tid 23883] [client 104.208.65.11:1876] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVphVrbaf-JYFyQL_053zgAAAEc"]
[Sun Jan 04 20:47:18.821349 2026] [:error] [pid 23868:tid 23895] [client 104.208.65.11:2019] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVphVrbaf-JYFyQL_0530AAAAFM"]
[Sun Jan 04 20:47:19.056098 2026] [:error] [pid 21812:tid 21854] [client 104.208.65.11:1934] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVphV-2lkeIp6bksZx2ByAAAA0s"]
[Sun Jan 04 20:47:19.318193 2026] [:error] [pid 23868:tid 23882] [client 104.208.65.11:1888] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aVphV7baf-JYFyQL_0530gAAAEY"]
[Sun Jan 04 20:47:19.556387 2026] [:error] [pid 23868:tid 23897] [client 104.208.65.11:16082] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVphV7baf-JYFyQL_0530wAAAFU"]
[Sun Jan 04 20:47:19.789826 2026] [:error] [pid 21753:tid 21774] [client 104.208.65.11:1958] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVphV14xwAtqKablc077qgAAAlI"]
[Sun Jan 04 20:47:20.025754 2026] [:error] [pid 23967:tid 23993] [client 104.208.65.11:1873] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVphWD0PhjBsUtIi4VV6xwAAAZY"]
[Sun Jan 04 20:47:20.259745 2026] [:error] [pid 23968:tid 24005] [client 104.208.65.11:1895] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aVphWGzpAzHWBUMs-z55tAAAAgc"]
[Sun Jan 04 20:47:20.502729 2026] [:error] [pid 21753:tid 21758] [client 104.208.65.11:1982] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVphWF4xwAtqKablc077swAAAkI"]
[Sun Jan 04 20:47:20.754814 2026] [:error] [pid 1297:tid 1316] [client 104.208.65.11:1980] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVphWBf98x0RBG23PjfgIgAAABE"]
[Sun Jan 04 20:47:20.997397 2026] [:error] [pid 23904:tid 23955] [client 104.208.65.11:1920] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVphWP3FRCMgI2cXAQEw3QAAARM"]
[Sun Jan 04 20:47:21.242068 2026] [:error] [pid 17268:tid 17285] [client 104.208.65.11:1937] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVphWbPW8UB8HzRRfIdAsgAAAU4"]
[Sun Jan 04 20:47:21.474914 2026] [:error] [pid 23968:tid 24021] [client 104.208.65.11:16107] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVphWWzpAzHWBUMs-z55twAAAhc"]
[Sun Jan 04 20:47:21.708205 2026] [:error] [pid 23967:tid 23972] [client 104.208.65.11:16043] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVphWT0PhjBsUtIi4VV6yAAAAYE"]
[Sun Jan 04 20:47:21.942328 2026] [:error] [pid 23903:tid 23929] [client 104.208.65.11:2028] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVphWT_yzB-omvQP-LLHFQAAANQ"]
[Sun Jan 04 20:47:22.185748 2026] [:error] [pid 23903:tid 23931] [client 104.208.65.11:1955] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVphWj_yzB-omvQP-LLHGAAAANY"]
[Sun Jan 04 20:47:22.436861 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:16105] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aVphWmzpAzHWBUMs-z55ugAAAhI"]
[Sun Jan 04 20:47:22.671523 2026] [:error] [pid 17268:tid 17281] [client 104.208.65.11:1885] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aVphWrPW8UB8HzRRfIdAswAAAUo"]
[Sun Jan 04 20:47:22.906626 2026] [:error] [pid 23903:tid 23927] [client 104.208.65.11:16121] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aVphWj_yzB-omvQP-LLHHgAAANI"]
[Sun Jan 04 20:47:23.152778 2026] [:error] [pid 23903:tid 23922] [client 104.208.65.11:1961] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aVphWz_yzB-omvQP-LLHIAAAAM0"]
[Sun Jan 04 20:47:23.392817 2026] [:error] [pid 23903:tid 23909] [client 104.208.65.11:1872] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVphWz_yzB-omvQP-LLHIgAAAMA"]
[Sun Jan 04 20:47:23.627246 2026] [:error] [pid 17268:tid 17289] [client 104.208.65.11:1969] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVphW7PW8UB8HzRRfIdAuAAAAVI"]
[Sun Jan 04 20:47:23.859970 2026] [:error] [pid 23903:tid 23910] [client 104.208.65.11:1890] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVphWz_yzB-omvQP-LLHJQAAAME"]
[Sun Jan 04 20:47:24.105751 2026] [:error] [pid 21812:tid 21859] [client 104.208.65.11:1924] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVphXO2lkeIp6bksZx2BzAAAA1A"]
[Sun Jan 04 20:47:24.338826 2026] [:error] [pid 21812:tid 21850] [client 104.208.65.11:2045] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aVphXO2lkeIp6bksZx2BzgAAA0c"]
[Sun Jan 04 20:47:24.571025 2026] [:error] [pid 17268:tid 17273] [client 104.208.65.11:1954] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aVphXLPW8UB8HzRRfIdAugAAAUI"]
[Sun Jan 04 20:47:24.804310 2026] [:error] [pid 17268:tid 17288] [client 104.208.65.11:2038] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aVphXLPW8UB8HzRRfIdAvwAAAVE"]
[Sun Jan 04 20:47:25.047679 2026] [:error] [pid 23904:tid 23936] [client 104.208.65.11:16053] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aVphXf3FRCMgI2cXAQEw9gAAAQA"]
[Sun Jan 04 20:47:25.287912 2026] [:error] [pid 21720:tid 21732] [client 104.208.65.11:2025] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVphXX5pkDWzwRcldOpKeQAAAIo"]
[Sun Jan 04 20:47:25.546783 2026] [:error] [pid 17268:tid 17276] [client 104.208.65.11:1946] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVphXbPW8UB8HzRRfIdAwQAAAUU"]
[Sun Jan 04 20:47:25.779368 2026] [:error] [pid 23967:tid 23976] [client 104.208.65.11:1886] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aVphXT0PhjBsUtIi4VV6ywAAAYU"]
[Sun Jan 04 20:47:26.034205 2026] [:error] [pid 23904:tid 23952] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Sun Jan 04 20:47:26.154659 2026] [:error] [pid 23904:tid 23956] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sun Jan 04 20:47:26.273507 2026] [:error] [pid 23904:tid 23960] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Sun Jan 04 20:47:26.394349 2026] [:error] [pid 23904:tid 23948] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Jan 04 20:47:26.513732 2026] [:error] [pid 23904:tid 23958] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Jan 04 20:47:26.634294 2026] [:error] [pid 23904:tid 23937] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Sun Jan 04 20:47:26.755542 2026] [:error] [pid 23904:tid 23951] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Jan 04 20:47:26.876426 2026] [:error] [pid 23904:tid 23947] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs15.php
[Sun Jan 04 20:47:26.996288 2026] [:error] [pid 23904:tid 23957] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Jan 04 20:47:27.115693 2026] [:error] [pid 23904:tid 23954] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sun Jan 04 20:47:27.235808 2026] [:error] [pid 23904:tid 23955] [client 104.208.65.11:2047] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Sun Jan 04 20:47:27.352452 2026] [:error] [pid 23904:tid 23941] [client 104.208.65.11:2047] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVphX_3FRCMgI2cXAQExCgAAAQU"]
[Sun Jan 04 20:47:27.593700 2026] [:error] [pid 23903:tid 23927] [client 104.208.65.11:1968] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVphXz_yzB-omvQP-LLHMwAAANI"]
[Sun Jan 04 20:47:27.826717 2026] [:error] [pid 23903:tid 23923] [client 104.208.65.11:1945] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVphXz_yzB-omvQP-LLHNQAAAM4"]
[Sun Jan 04 20:47:28.059724 2026] [:error] [pid 23904:tid 23946] [client 104.208.65.11:1877] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVphYP3FRCMgI2cXAQExDAAAAQo"]
[Sun Jan 04 20:47:28.292749 2026] [:error] [pid 23904:tid 23960] [client 104.208.65.11:2046] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVphYP3FRCMgI2cXAQExDgAAARg"]
[Sun Jan 04 20:47:28.528715 2026] [:error] [pid 23904:tid 23948] [client 104.208.65.11:1914] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVphYP3FRCMgI2cXAQExDwAAAQw"]
[Sun Jan 04 20:47:28.765623 2026] [:error] [pid 21753:tid 21774] [client 104.208.65.11:16020] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVphYF4xwAtqKablc0771AAAAlI"]
[Sun Jan 04 20:47:29.003874 2026] [:error] [pid 21812:tid 21854] [client 104.208.65.11:1802] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aVphYe2lkeIp6bksZx2B0wAAA0s"]
[Sun Jan 04 20:47:29.237211 2026] [:error] [pid 21812:tid 21866] [client 104.208.65.11:1870] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVphYe2lkeIp6bksZx2B1AAAA1c"]
[Sun Jan 04 20:47:29.472260 2026] [:error] [pid 23903:tid 23924] [client 104.208.65.11:1893] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVphYT_yzB-omvQP-LLHPwAAAM8"]
[Sun Jan 04 20:47:29.706577 2026] [:error] [pid 21720:tid 21737] [client 104.208.65.11:16026] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVphYX5pkDWzwRcldOpKgQAAAI8"]
[Sun Jan 04 20:47:29.939294 2026] [:error] [pid 23904:tid 23940] [client 104.208.65.11:1929] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aVphYf3FRCMgI2cXAQExEgAAAQQ"]
[Sun Jan 04 20:47:30.181946 2026] [:error] [pid 23903:tid 23917] [client 104.208.65.11:1987] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVphYj_yzB-omvQP-LLHQgAAAMg"]
[Sun Jan 04 20:47:30.441903 2026] [:error] [pid 21812:tid 21852] [client 104.208.65.11:1971] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVphYu2lkeIp6bksZx2B2AAAA0k"]
[Sun Jan 04 20:47:30.678260 2026] [:error] [pid 21720:tid 21733] [client 104.208.65.11:1911] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVphYn5pkDWzwRcldOpKggAAAIs"]
[Sun Jan 04 20:47:30.917153 2026] [:error] [pid 17268:tid 17281] [client 104.208.65.11:1942] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aVphYrPW8UB8HzRRfIdAxQAAAUo"]
[Sun Jan 04 20:47:31.169693 2026] [:error] [pid 21720:tid 21734] [client 104.208.65.11:1947] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVphY35pkDWzwRcldOpKhQAAAIw"]
[Sun Jan 04 20:47:31.402119 2026] [:error] [pid 21812:tid 21844] [client 104.208.65.11:16062] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVphY-2lkeIp6bksZx2B2QAAA0E"]
[Sun Jan 04 20:47:31.672371 2026] [:error] [pid 1297:tid 1304] [client 104.208.65.11:1865] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVphYxf98x0RBG23PjfgMgAAAAU"]
[Sun Jan 04 20:47:31.907918 2026] [:error] [pid 23904:tid 23949] [client 104.208.65.11:1875] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVphY_3FRCMgI2cXAQExFAAAAQ0"]
[Sun Jan 04 20:47:32.148717 2026] [:error] [pid 17268:tid 17272] [client 104.208.65.11:1917] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVphZLPW8UB8HzRRfIdAyAAAAUE"]
[Sun Jan 04 20:47:32.383367 2026] [:error] [pid 1297:tid 1311] [client 104.208.65.11:2033] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVphZBf98x0RBG23PjfgMwAAAAw"]
[Sun Jan 04 20:47:32.617580 2026] [:error] [pid 17268:tid 17293] [client 104.208.65.11:1959] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVphZLPW8UB8HzRRfIdAyQAAAVY"]
[Sun Jan 04 20:47:32.850525 2026] [:error] [pid 1297:tid 1315] [client 104.208.65.11:1905] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVphZBf98x0RBG23PjfgNwAAABA"]
[Sun Jan 04 20:47:33.083474 2026] [:error] [pid 23904:tid 23941] [client 104.208.65.11:16058] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVphZf3FRCMgI2cXAQExFgAAAQU"]
[Sun Jan 04 20:47:33.320603 2026] [:error] [pid 23904:tid 23936] [client 104.208.65.11:1897] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVphZf3FRCMgI2cXAQExFwAAAQA"]
[Sun Jan 04 20:47:33.553169 2026] [:error] [pid 21720:tid 21735] [client 104.208.65.11:1793] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVphZX5pkDWzwRcldOpKiQAAAI0"]
[Sun Jan 04 20:47:33.798666 2026] [:error] [pid 21812:tid 21850] [client 104.208.65.11:1970] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVphZe2lkeIp6bksZx2B3wAAA0c"]
[Sun Jan 04 20:47:34.031639 2026] [:error] [pid 17268:tid 17278] [client 104.208.65.11:16106] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVphZrPW8UB8HzRRfIdAygAAAUc"]
[Sun Jan 04 20:47:34.283932 2026] [:error] [pid 23968:tid 24015] [client 104.208.65.11:1910] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVphZmzpAzHWBUMs-z55vgAAAhE"]
[Sun Jan 04 20:47:34.527293 2026] [:error] [pid 17268:tid 17294] [client 104.208.65.11:1944] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVphZrPW8UB8HzRRfIdAzAAAAVc"]
[Sun Jan 04 20:47:34.761253 2026] [:error] [pid 21812:tid 21855] [client 104.208.65.11:1956] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVphZu2lkeIp6bksZx2B4QAAA0w"]
[Sun Jan 04 20:47:34.994514 2026] [:error] [pid 23903:tid 23930] [client 104.208.65.11:1857] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphZj_yzB-omvQP-LLHSgAAANU"]
[Sun Jan 04 20:47:35.227210 2026] [:error] [pid 23904:tid 23960] [client 104.208.65.11:1906] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphZ_3FRCMgI2cXAQExHAAAARg"]
[Sun Jan 04 20:47:35.468050 2026] [:error] [pid 21753:tid 21778] [client 104.208.65.11:1891] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphZ14xwAtqKablc0773AAAAlY"]
[Sun Jan 04 20:47:35.710382 2026] [:error] [pid 23904:tid 23958] [client 104.208.65.11:1867] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphZ_3FRCMgI2cXAQExHwAAARY"]
[Sun Jan 04 20:47:35.948663 2026] [:error] [pid 17268:tid 17280] [client 104.208.65.11:1909] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVphZ7PW8UB8HzRRfIdAzgAAAUk"]
[Sun Jan 04 20:47:36.181588 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:16048] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVphaGzpAzHWBUMs-z55wAAAAgE"]
[Sun Jan 04 20:47:36.430043 2026] [:error] [pid 21753:tid 21767] [client 104.208.65.11:1952] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVphaF4xwAtqKablc0774wAAAks"]
[Sun Jan 04 20:47:36.678281 2026] [:error] [pid 23968:tid 23998] [client 104.208.65.11:1823] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aVphaGzpAzHWBUMs-z55wgAAAgA"]
[Sun Jan 04 20:47:36.918759 2026] [:error] [pid 23968:tid 24003] [client 104.208.65.11:1821] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVphaGzpAzHWBUMs-z55xAAAAgU"]
[Sun Jan 04 20:47:37.156170 2026] [:error] [pid 21753:tid 21775] [client 104.208.65.11:1902] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVphaV4xwAtqKablc0775AAAAlM"]
[Sun Jan 04 20:47:37.389094 2026] [:error] [pid 1297:tid 1321] [client 104.208.65.11:1919] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVphaRf98x0RBG23PjfgPAAAABY"]
[Sun Jan 04 20:47:37.643298 2026] [:error] [pid 23968:tid 24017] [client 104.208.65.11:1869] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVphaWzpAzHWBUMs-z55xwAAAhM"]
[Sun Jan 04 20:47:37.885857 2026] [:error] [pid 23903:tid 23925] [client 104.208.65.11:1796] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVphaT_yzB-omvQP-LLHTwAAANA"]
[Sun Jan 04 20:47:38.130400 2026] [:error] [pid 21812:tid 21851] [client 104.208.65.11:1983] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVphau2lkeIp6bksZx2B5gAAA0g"]
[Sun Jan 04 20:47:38.372168 2026] [:error] [pid 23904:tid 23954] [client 104.208.65.11:1860] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVphav3FRCMgI2cXAQExJgAAARI"]
[Sun Jan 04 20:47:38.607757 2026] [:error] [pid 21753:tid 21770] [client 104.208.65.11:1856] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVphal4xwAtqKablc0776AAAAk4"]
[Sun Jan 04 20:47:38.842663 2026] [:error] [pid 21720:tid 21736] [client 104.208.65.11:16073] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVphan5pkDWzwRcldOpKkwAAAI4"]
[Sun Jan 04 20:47:39.079289 2026] [:error] [pid 21753:tid 21763] [client 104.208.65.11:1819] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVpha14xwAtqKablc0777QAAAkc"]
[Sun Jan 04 20:47:39.316997 2026] [:error] [pid 23903:tid 23927] [client 104.208.65.11:1801] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVphaz_yzB-omvQP-LLHUQAAANI"]
[Sun Jan 04 20:47:39.567604 2026] [:error] [pid 1297:tid 1299] [client 104.208.65.11:1903] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aVphaxf98x0RBG23PjfgPgAAAAA"]
[Sun Jan 04 20:47:39.799703 2026] [:error] [pid 23903:tid 23923] [client 104.208.65.11:1936] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphaz_yzB-omvQP-LLHUgAAAM4"]
[Sun Jan 04 20:47:40.033437 2026] [:error] [pid 21720:tid 21733] [client 104.208.65.11:1913] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphbH5pkDWzwRcldOpKlQAAAIs"]
[Sun Jan 04 20:47:40.266659 2026] [:error] [pid 23904:tid 23955] [client 104.208.65.11:1887] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphbP3FRCMgI2cXAQExKAAAARM"]
[Sun Jan 04 20:47:40.510238 2026] [:error] [pid 23967:tid 23981] [client 104.208.65.11:1825] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphbD0PhjBsUtIi4VV60QAAAYo"]
[Sun Jan 04 20:47:40.760776 2026] [:error] [pid 23967:tid 23992] [client 104.208.65.11:2044] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVphbD0PhjBsUtIi4VV61AAAAZU"]
[Sun Jan 04 20:47:40.994048 2026] [:error] [pid 23903:tid 23910] [client 104.208.65.11:1976] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVphbD_yzB-omvQP-LLHVAAAAME"]
[Sun Jan 04 20:47:41.226579 2026] [:error] [pid 17268:tid 17284] [client 104.208.65.11:1810] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVphbbPW8UB8HzRRfIdA0QAAAU0"]
[Sun Jan 04 20:47:41.459879 2026] [:error] [pid 17268:tid 17291] [client 104.208.65.11:16037] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVphbbPW8UB8HzRRfIdA0wAAAVQ"]
[Sun Jan 04 20:47:41.696137 2026] [:error] [pid 21812:tid 21849] [client 104.208.65.11:1804] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVphbe2lkeIp6bksZx2B6QAAA0Y"]
[Sun Jan 04 20:47:41.929495 2026] [:error] [pid 17268:tid 17286] [client 104.208.65.11:1880] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVphbbPW8UB8HzRRfIdA1AAAAU8"]
[Sun Jan 04 20:47:42.162487 2026] [:error] [pid 23904:tid 23936] [client 104.208.65.11:1808] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVphbv3FRCMgI2cXAQExKwAAAQA"]
[Sun Jan 04 20:47:42.395261 2026] [:error] [pid 23904:tid 23939] [client 104.208.65.11:1831] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVphbv3FRCMgI2cXAQExLAAAAQM"]
[Sun Jan 04 20:47:42.628825 2026] [:error] [pid 1297:tid 1309] [client 104.208.65.11:1738] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aVphbhf98x0RBG23PjfgQAAAAAo"]
[Sun Jan 04 20:47:42.861749 2026] [:error] [pid 23903:tid 23912] [client 104.208.65.11:1893] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aVphbj_yzB-omvQP-LLHVQAAAMM"]
[Sun Jan 04 20:47:43.102849 2026] [:error] [pid 21720:tid 21741] [client 104.208.65.11:1842] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aVphb35pkDWzwRcldOpKmgAAAJM"]
[Sun Jan 04 20:47:43.453727 2026] [:error] [pid 23968:tid 24011] [client 104.208.65.11:1925] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aVphb2zpAzHWBUMs-z55zgAAAg0"]
[Sun Jan 04 20:47:43.702739 2026] [:error] [pid 23968:tid 24013] [client 104.208.65.11:1742] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVphb2zpAzHWBUMs-z550QAAAg8"]
[Sun Jan 04 20:47:43.936280 2026] [:error] [pid 21812:tid 21848] [client 104.208.65.11:1994] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVphb-2lkeIp6bksZx2B7AAAA0U"]
[Sun Jan 04 20:47:44.168338 2026] [:error] [pid 21812:tid 21858] [client 104.208.65.11:1908] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVphcO2lkeIp6bksZx2B7QAAA08"]
[Sun Jan 04 20:47:44.417663 2026] [:error] [pid 17268:tid 17285] [client 104.208.65.11:1839] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVphcLPW8UB8HzRRfIdA1wAAAU4"]
[Sun Jan 04 20:47:44.649892 2026] [:error] [pid 21812:tid 21860] [client 104.208.65.11:1904] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphcO2lkeIp6bksZx2B8AAAA1E"]
[Sun Jan 04 20:47:44.888494 2026] [:error] [pid 17268:tid 17281] [client 104.208.65.11:1835] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphcLPW8UB8HzRRfIdA2QAAAUo"]
[Sun Jan 04 20:47:45.121258 2026] [:error] [pid 21753:tid 21778] [client 104.208.65.11:1733] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphcV4xwAtqKablc0778AAAAlY"]
[Sun Jan 04 20:47:45.354701 2026] [:error] [pid 23903:tid 23929] [client 104.208.65.11:1889] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVphcT_yzB-omvQP-LLHWAAAANQ"]
[Sun Jan 04 20:47:45.592870 2026] [:error] [pid 23904:tid 23942] [client 104.208.65.11:1817] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma1.php"] [unique_id "aVphcf3FRCMgI2cXAQExMQAAAQY"]
[Sun Jan 04 20:47:45.856223 2026] [:error] [pid 23904:tid 23944] [client 104.208.65.11:1878] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma1.php"] [unique_id "aVphcf3FRCMgI2cXAQExMwAAAQg"]
[Sun Jan 04 20:47:46.090686 2026] [:error] [pid 23904:tid 23958] [client 104.208.65.11:1847] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma1.php"] [unique_id "aVphcv3FRCMgI2cXAQExNAAAARY"]
[Sun Jan 04 20:47:46.334376 2026] [:error] [pid 21812:tid 21845] [client 104.208.65.11:1896] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma1.php"] [unique_id "aVphcu2lkeIp6bksZx2B9QAAA0I"]
[Sun Jan 04 20:47:46.576650 2026] [:error] [pid 1297:tid 1316] [client 104.208.65.11:1900] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVphchf98x0RBG23PjfgQwAAABE"]
[Sun Jan 04 20:47:46.809878 2026] [:error] [pid 23903:tid 23919] [client 104.208.65.11:1884] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVphcj_yzB-omvQP-LLHXQAAAMo"]
[Sun Jan 04 20:47:47.044366 2026] [:error] [pid 17268:tid 17272] [client 104.208.65.11:1883] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVphc7PW8UB8HzRRfIdA2wAAAUE"]
[Sun Jan 04 20:47:47.279080 2026] [:error] [pid 21812:tid 21851] [client 104.208.65.11:1841] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aVphc-2lkeIp6bksZx2B-AAAA0g"]
[Sun Jan 04 20:47:47.516592 2026] [:error] [pid 23903:tid 23915] [client 104.208.65.11:1832] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVphcz_yzB-omvQP-LLHYQAAAMY"]
[Sun Jan 04 20:47:47.778841 2026] [:error] [pid 23967:tid 23979] [client 104.208.65.11:16101] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVphcz0PhjBsUtIi4VV62QAAAYg"]
[Sun Jan 04 20:47:48.011485 2026] [:error] [pid 23968:tid 24007] [client 104.208.65.11:1940] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVphdGzpAzHWBUMs-z550wAAAgk"]
[Sun Jan 04 20:47:48.245330 2026] [:error] [pid 17268:tid 17293] [client 104.208.65.11:1826] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aVphdLPW8UB8HzRRfIdA3AAAAVY"]
[Sun Jan 04 20:47:48.479637 2026] [:error] [pid 23903:tid 23909] [client 104.208.65.11:1737] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphdD_yzB-omvQP-LLHZwAAAMA"]
[Sun Jan 04 20:47:48.716604 2026] [:error] [pid 23968:tid 24003] [client 104.208.65.11:1858] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphdGzpAzHWBUMs-z551AAAAgU"]
[Sun Jan 04 20:47:48.950076 2026] [:error] [pid 23967:tid 23978] [client 104.208.65.11:1812] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphdD0PhjBsUtIi4VV63QAAAYc"]
[Sun Jan 04 20:47:49.185799 2026] [:error] [pid 23868:tid 23881] [client 104.208.65.11:1864] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVphdbbaf-JYFyQL_0537gAAAEU"]
[Sun Jan 04 20:47:49.429007 2026] [:error] [pid 23967:tid 23981] [client 104.208.65.11:1838] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVphdT0PhjBsUtIi4VV64QAAAYo"]
[Sun Jan 04 20:47:49.682879 2026] [:error] [pid 23903:tid 23933] [client 104.208.65.11:1907] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVphdT_yzB-omvQP-LLHbQAAANg"]
[Sun Jan 04 20:47:49.936703 2026] [:error] [pid 23868:tid 23885] [client 104.208.65.11:1829] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVphdbbaf-JYFyQL_0538gAAAEk"]
[Sun Jan 04 20:47:50.171177 2026] [:error] [pid 21753:tid 21769] [client 104.208.65.11:1815] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fwe.php"] [unique_id "aVphdl4xwAtqKablc0779AAAAk0"]
[Sun Jan 04 20:47:50.405985 2026] [:error] [pid 23967:tid 23986] [client 104.208.65.11:1837] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVphdj0PhjBsUtIi4VV65QAAAY8"]
[Sun Jan 04 20:47:50.643348 2026] [:error] [pid 23903:tid 23920] [client 104.208.65.11:1845] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVphdj_yzB-omvQP-LLHcwAAAMs"]
[Sun Jan 04 20:47:50.876615 2026] [:error] [pid 23903:tid 23925] [client 104.208.65.11:1844] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVphdj_yzB-omvQP-LLHdQAAANA"]
[Sun Jan 04 20:47:51.111902 2026] [:error] [pid 23967:tid 23972] [client 104.208.65.11:1874] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aVphdz0PhjBsUtIi4VV66AAAAYE"]
[Sun Jan 04 20:47:51.347487 2026] [:error] [pid 23903:tid 23917] [client 104.208.65.11:1975] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVphdz_yzB-omvQP-LLHdwAAAMg"]
[Sun Jan 04 20:47:51.581071 2026] [:error] [pid 23868:tid 23879] [client 104.208.65.11:1871] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVphd7baf-JYFyQL_054AAAAAEM"]
[Sun Jan 04 20:47:51.819215 2026] [:error] [pid 23868:tid 23899] [client 104.208.65.11:1741] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVphd7baf-JYFyQL_054BAAAAFc"]
[Sun Jan 04 20:47:52.054344 2026] [:error] [pid 21753:tid 21762] [client 104.208.65.11:1805] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aVpheF4xwAtqKablc0779QAAAkY"]
[Sun Jan 04 20:47:52.298410 2026] [:error] [pid 23903:tid 23923] [client 104.208.65.11:1827] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVpheD_yzB-omvQP-LLHewAAAM4"]
[Sun Jan 04 20:47:52.542471 2026] [:error] [pid 23903:tid 23916] [client 104.208.65.11:1764] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVpheD_yzB-omvQP-LLHfAAAAMc"]
[Sun Jan 04 20:47:52.775225 2026] [:error] [pid 23903:tid 23921] [client 104.208.65.11:1763] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVpheD_yzB-omvQP-LLHfgAAAMw"]
[Sun Jan 04 20:47:53.007738 2026] [:error] [pid 23868:tid 23895] [client 104.208.65.11:1901] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aVphebbaf-JYFyQL_054CQAAAFM"]
[Sun Jan 04 20:47:53.240817 2026] [:error] [pid 23868:tid 23882] [client 104.208.65.11:1936] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVphebbaf-JYFyQL_054CwAAAEY"]
[Sun Jan 04 20:47:53.473842 2026] [:error] [pid 23903:tid 23929] [client 104.208.65.11:1777] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVpheT_yzB-omvQP-LLHgwAAANQ"]
[Sun Jan 04 20:47:53.706629 2026] [:error] [pid 23968:tid 24012] [client 104.208.65.11:1882] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVpheWzpAzHWBUMs-z551wAAAg4"]
[Sun Jan 04 20:47:53.945324 2026] [:error] [pid 23968:tid 24009] [client 104.208.65.11:1788] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aVpheWzpAzHWBUMs-z552QAAAgs"]
[Sun Jan 04 20:47:54.179262 2026] [:error] [pid 21753:tid 21775] [client 104.208.65.11:1849] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVphel4xwAtqKablc077-AAAAlM"]
[Sun Jan 04 20:47:54.413256 2026] [:error] [pid 21812:tid 21858] [client 104.208.65.11:1747] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVpheu2lkeIp6bksZx2CAAAAA08"]
[Sun Jan 04 20:47:54.646370 2026] [:error] [pid 21753:tid 21756] [client 104.208.65.11:1756] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVphel4xwAtqKablc077_AAAAkA"]
[Sun Jan 04 20:47:54.880211 2026] [:error] [pid 23903:tid 23924] [client 104.208.65.11:1730] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVphej_yzB-omvQP-LLHhAAAAM8"]
[Sun Jan 04 20:47:55.146278 2026] [:error] [pid 23868:tid 23893] [client 104.208.65.11:1809] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVphe7baf-JYFyQL_054FgAAAFE"]
[Sun Jan 04 20:47:55.382318 2026] [:error] [pid 23967:tid 23977] [client 104.208.65.11:1881] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVphez0PhjBsUtIi4VV69wAAAYY"]
[Sun Jan 04 20:47:55.615259 2026] [:error] [pid 23968:tid 24002] [client 104.208.65.11:1740] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVphe2zpAzHWBUMs-z552wAAAgQ"]
[Sun Jan 04 20:47:55.848668 2026] [:error] [pid 23868:tid 23879] [client 104.208.65.11:1794] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aVphe7baf-JYFyQL_054FwAAAEM"]
[Sun Jan 04 20:47:56.099389 2026] [:error] [pid 21753:tid 21774] [client 104.208.65.11:1800] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aVphfF4xwAtqKablc078AAAAAlI"]
[Sun Jan 04 20:47:56.333095 2026] [:error] [pid 21753:tid 21758] [client 104.208.65.11:1916] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aVphfF4xwAtqKablc078AQAAAkI"]
[Sun Jan 04 20:47:56.569797 2026] [:error] [pid 21812:tid 21845] [client 104.208.65.11:1739] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aVphfO2lkeIp6bksZx2CCQAAA0I"]
[Sun Jan 04 20:47:56.807159 2026] [:error] [pid 1297:tid 1315] [client 104.208.65.11:1786] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aVphfBf98x0RBG23PjfgSAAAABA"]
[Sun Jan 04 20:47:57.069456 2026] [:error] [pid 23903:tid 23925] [client 104.208.65.11:1843] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aVphfT_yzB-omvQP-LLHiAAAANA"]
[Sun Jan 04 20:47:57.304464 2026] [:error] [pid 1297:tid 1322] [client 104.208.65.11:1868] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aVphfRf98x0RBG23PjfgSgAAABc"]
[Sun Jan 04 20:47:57.539652 2026] [:error] [pid 23903:tid 23931] [client 104.208.65.11:1848] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aVphfT_yzB-omvQP-LLHiQAAANY"]
[Sun Jan 04 20:47:57.773011 2026] [:error] [pid 1297:tid 1305] [client 104.208.65.11:1795] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aVphfRf98x0RBG23PjfgSwAAAAY"]
[Sun Jan 04 20:47:58.007029 2026] [:error] [pid 23968:tid 24000] [client 104.208.65.11:1816] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aVphfmzpAzHWBUMs-z553QAAAgI"]
[Sun Jan 04 20:47:58.240080 2026] [:error] [pid 1297:tid 1318] [client 104.208.65.11:1680] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aVphfhf98x0RBG23PjfgTQAAABM"]
[Sun Jan 04 20:47:58.478013 2026] [:error] [pid 23968:tid 24021] [client 104.208.65.11:1694] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aVphfmzpAzHWBUMs-z553gAAAhc"]
[Sun Jan 04 20:47:58.711239 2026] [:error] [pid 23868:tid 23888] [client 104.208.65.11:1807] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aVphfrbaf-JYFyQL_054GwAAAEw"]
[Sun Jan 04 20:47:58.954180 2026] [:error] [pid 1297:tid 1323] [client 104.208.65.11:1667] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cheka.php"] [unique_id "aVphfhf98x0RBG23PjfgUwAAABg"]
[Sun Jan 04 20:47:59.188077 2026] [:error] [pid 23903:tid 23916] [client 104.208.65.11:1846] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cheka.php"] [unique_id "aVphfz_yzB-omvQP-LLHjgAAAMc"]
[Sun Jan 04 20:47:59.421623 2026] [:error] [pid 1297:tid 1309] [client 104.208.65.11:1628] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cheka.php"] [unique_id "aVphfxf98x0RBG23PjfgVAAAAAo"]
[Sun Jan 04 20:47:59.654821 2026] [:error] [pid 23868:tid 23900] [client 104.208.65.11:1798] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cheka.php"] [unique_id "aVphf7baf-JYFyQL_054HgAAAFg"]
[Sun Jan 04 20:47:59.898274 2026] [:error] [pid 21812:tid 21846] [client 104.208.65.11:1766] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classgoto24.php"] [unique_id "aVphf-2lkeIp6bksZx2CDwAAA0M"]
[Sun Jan 04 20:48:00.159079 2026] [:error] [pid 23967:tid 23988] [client 104.208.65.11:1833] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classgoto24.php"] [unique_id "aVphgD0PhjBsUtIi4VV7AgAAAZE"]
[Sun Jan 04 20:48:00.393943 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:1822] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classgoto24.php"] [unique_id "aVphgGzpAzHWBUMs-z555AAAAhI"]
[Sun Jan 04 20:48:00.631703 2026] [:error] [pid 23968:tid 24008] [client 104.208.65.11:1840] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classgoto24.php"] [unique_id "aVphgGzpAzHWBUMs-z555gAAAgo"]
[Sun Jan 04 20:48:00.869527 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:1820] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtride.php"] [unique_id "aVphgGzpAzHWBUMs-z556QAAAgE"]
[Sun Jan 04 20:48:01.144230 2026] [:error] [pid 23968:tid 23998] [client 104.208.65.11:1915] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtride.php"] [unique_id "aVphgWzpAzHWBUMs-z556wAAAgA"]
[Sun Jan 04 20:48:01.380842 2026] [:error] [pid 23968:tid 24007] [client 104.208.65.11:1797] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtride.php"] [unique_id "aVphgWzpAzHWBUMs-z557AAAAgk"]
[Sun Jan 04 20:48:01.617311 2026] [:error] [pid 21753:tid 21767] [client 104.208.65.11:1899] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xtride.php"] [unique_id "aVphgV4xwAtqKablc078CgAAAks"]
[Sun Jan 04 20:48:01.853577 2026] [:error] [pid 21753:tid 21775] [client 104.208.65.11:1665] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVphgV4xwAtqKablc078CwAAAlM"]
[Sun Jan 04 20:48:02.089298 2026] [:error] [pid 23968:tid 24002] [client 104.208.65.11:1681] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVphgmzpAzHWBUMs-z559AAAAgQ"]
[Sun Jan 04 20:48:02.327486 2026] [:error] [pid 21753:tid 21756] [client 104.208.65.11:1771] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVphgl4xwAtqKablc078DQAAAkA"]
[Sun Jan 04 20:48:02.562479 2026] [:error] [pid 17268:tid 17276] [client 104.208.65.11:1755] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aVphgrPW8UB8HzRRfIdA4wAAAUU"]
[Sun Jan 04 20:48:02.796400 2026] [:error] [pid 21812:tid 21853] [client 104.208.65.11:1664] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVphgu2lkeIp6bksZx2CGwAAA0o"]
[Sun Jan 04 20:48:03.029878 2026] [:error] [pid 23967:tid 23984] [client 104.208.65.11:1918] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVphgz0PhjBsUtIi4VV7CAAAAY0"]
[Sun Jan 04 20:48:03.263155 2026] [:error] [pid 23968:tid 24013] [client 104.208.65.11:1774] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVphg2zpAzHWBUMs-z55-gAAAg8"]
[Sun Jan 04 20:48:03.499348 2026] [:error] [pid 17268:tid 17295] [client 104.208.65.11:1735] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oo.php"] [unique_id "aVphg7PW8UB8HzRRfIdA5QAAAVg"]
[Sun Jan 04 20:48:03.750288 2026] [:error] [pid 17268:tid 17290] [client 104.208.65.11:1743] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVphg7PW8UB8HzRRfIdA7AAAAVM"]
[Sun Jan 04 20:48:03.982676 2026] [:error] [pid 23968:tid 24013] [client 104.208.65.11:1687] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVphg2zpAzHWBUMs-z56EQAAAg8"]
[Sun Jan 04 20:48:04.244977 2026] [:error] [pid 1297:tid 1316] [client 104.208.65.11:1792] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVphhBf98x0RBG23PjfgWAAAABE"]
[Sun Jan 04 20:48:04.482315 2026] [:error] [pid 17268:tid 17293] [client 104.208.65.11:1796] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s11.php"] [unique_id "aVphhLPW8UB8HzRRfIdA8AAAAVY"]
[Sun Jan 04 20:48:04.718681 2026] [:error] [pid 1297:tid 1312] [client 104.208.65.11:1770] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVphhBf98x0RBG23PjfgWwAAAA0"]
[Sun Jan 04 20:48:04.952105 2026] [:error] [pid 23967:tid 23976] [client 104.208.65.11:1753] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVphhD0PhjBsUtIi4VV7CQAAAYU"]
[Sun Jan 04 20:48:05.185364 2026] [:error] [pid 1297:tid 1314] [client 104.208.65.11:16118] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVphhRf98x0RBG23PjfgXAAAAA8"]
[Sun Jan 04 20:48:05.427082 2026] [:error] [pid 21812:tid 21846] [client 104.208.65.11:1715] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dir.php"] [unique_id "aVphhe2lkeIp6bksZx2CHAAAA0M"]
[Sun Jan 04 20:48:05.726297 2026] [:error] [pid 23968:tid 24009] [client 104.208.65.11:1671] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVphhWzpAzHWBUMs-z56IQAAAgs"]
[Sun Jan 04 20:48:05.982074 2026] [:error] [pid 21720:tid 21731] [client 104.208.65.11:1930] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVphhX5pkDWzwRcldOpKtQAAAIk"]
[Sun Jan 04 20:48:06.216181 2026] [:error] [pid 1297:tid 1302] [client 104.208.65.11:1854] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVphhhf98x0RBG23PjfgYQAAAAM"]
[Sun Jan 04 20:48:06.450198 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:1785] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aqw.php"] [unique_id "aVphhmzpAzHWBUMs-z56JgAAAhI"]
[Sun Jan 04 20:48:06.695275 2026] [:error] [pid 21753:tid 21778] [client 104.208.65.11:1813] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVphhl4xwAtqKablc078LAAAAlY"]
[Sun Jan 04 20:48:06.928530 2026] [:error] [pid 17268:tid 17279] [client 104.208.65.11:1677] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVphhrPW8UB8HzRRfIdA9gAAAUg"]
[Sun Jan 04 20:48:07.188182 2026] [:error] [pid 23968:tid 24020] [client 104.208.65.11:1732] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVphh2zpAzHWBUMs-z56KQAAAhY"]
[Sun Jan 04 20:48:07.427652 2026] [:error] [pid 21812:tid 21859] [client 104.208.65.11:1789] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ca1.php"] [unique_id "aVphh-2lkeIp6bksZx2CJgAAA1A"]
[Sun Jan 04 20:48:07.659358 2026] [:error] [pid 21812:tid 21867] [client 104.208.65.11:1688] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVphh-2lkeIp6bksZx2CKQAAA1g"]
[Sun Jan 04 20:48:07.895757 2026] [:error] [pid 23904:tid 23938] [client 104.208.65.11:1775] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVphh_3FRCMgI2cXAQExOwAAAQI"]
[Sun Jan 04 20:48:08.128925 2026] [:error] [pid 1297:tid 1312] [client 104.208.65.11:1673] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVphiBf98x0RBG23PjfgdAAAAA0"]
[Sun Jan 04 20:48:08.362465 2026] [:error] [pid 23968:tid 24010] [client 104.208.65.11:1731] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouta.php"] [unique_id "aVphiGzpAzHWBUMs-z56KwAAAgw"]
[Sun Jan 04 20:48:08.604626 2026] [:error] [pid 23968:tid 24017] [client 104.208.65.11:1850] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVphiGzpAzHWBUMs-z56LgAAAhM"]
[Sun Jan 04 20:48:08.848898 2026] [:error] [pid 23967:tid 23985] [client 104.208.65.11:1768] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVphiD0PhjBsUtIi4VV7IQAAAY4"]
[Sun Jan 04 20:48:09.091092 2026] [:error] [pid 23967:tid 23971] [client 104.208.65.11:1746] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVphiT0PhjBsUtIi4VV7JAAAAYA"]
[Sun Jan 04 20:48:09.343399 2026] [:error] [pid 17268:tid 17274] [client 104.208.65.11:1725] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fclas.php"] [unique_id "aVphibPW8UB8HzRRfIdA-QAAAUM"]
[Sun Jan 04 20:48:09.578113 2026] [:error] [pid 17268:tid 17276] [client 104.208.65.11:1828] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVphibPW8UB8HzRRfIdA-gAAAUU"]
[Sun Jan 04 20:48:09.813405 2026] [:error] [pid 21812:tid 21856] [client 104.208.65.11:1713] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVphie2lkeIp6bksZx2CLAAAA00"]
[Sun Jan 04 20:48:10.046701 2026] [:error] [pid 23967:tid 23974] [client 104.208.65.11:1898] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVphij0PhjBsUtIi4VV7JwAAAYM"]
[Sun Jan 04 20:48:10.321267 2026] [:error] [pid 21720:tid 21735] [client 104.208.65.11:1769] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bbn.php"] [unique_id "aVphin5pkDWzwRcldOpKvwAAAI0"]
[Sun Jan 04 20:48:10.559050 2026] [:error] [pid 21720:tid 21722] [client 104.208.65.11:1733] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVphin5pkDWzwRcldOpKwAAAAIA"]
[Sun Jan 04 20:48:10.802071 2026] [:error] [pid 23868:tid 23877] [client 104.208.65.11:1610] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVphirbaf-JYFyQL_054JQAAAEE"]
[Sun Jan 04 20:48:11.034588 2026] [:error] [pid 21720:tid 21738] [client 104.208.65.11:1697] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVphi35pkDWzwRcldOpKwQAAAJA"]
[Sun Jan 04 20:48:11.267538 2026] [:error] [pid 23968:tid 24016] [client 104.208.65.11:1684] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aVphi2zpAzHWBUMs-z56NQAAAhI"]
[Sun Jan 04 20:48:11.500835 2026] [:error] [pid 23968:tid 24008] [client 104.208.65.11:1861] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVphi2zpAzHWBUMs-z56OQAAAgo"]
[Sun Jan 04 20:48:11.734867 2026] [:error] [pid 21720:tid 21741] [client 104.208.65.11:1790] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVphi35pkDWzwRcldOpKxAAAAJM"]
[Sun Jan 04 20:48:11.967764 2026] [:error] [pid 21720:tid 21725] [client 104.208.65.11:1705] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVphi35pkDWzwRcldOpKxQAAAIM"]
[Sun Jan 04 20:48:12.202574 2026] [:error] [pid 23904:tid 23955] [client 104.208.65.11:1675] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aVphjP3FRCMgI2cXAQExPgAAARM"]
[Sun Jan 04 20:48:12.465148 2026] [:error] [pid 23968:tid 24003] [client 104.208.65.11:1776] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVphjGzpAzHWBUMs-z56PAAAAgU"]
[Sun Jan 04 20:48:12.701799 2026] [:error] [pid 23868:tid 23883] [client 104.208.65.11:1752] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVphjLbaf-JYFyQL_054KAAAAEc"]
[Sun Jan 04 20:48:12.943906 2026] [:error] [pid 23868:tid 23896] [client 104.208.65.11:1618] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVphjLbaf-JYFyQL_054KwAAAFQ"]
[Sun Jan 04 20:48:13.176910 2026] [:error] [pid 23968:tid 24010] [client 104.208.65.11:1754] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wft.php"] [unique_id "aVphjWzpAzHWBUMs-z56PgAAAgw"]
[Sun Jan 04 20:48:13.426625 2026] [:error] [pid 21720:tid 21731] [client 104.208.65.11:1836] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVphjX5pkDWzwRcldOpKyAAAAIk"]
[Sun Jan 04 20:48:13.660741 2026] [:error] [pid 21753:tid 21758] [client 104.208.65.11:1855] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVphjV4xwAtqKablc078OAAAAkI"]
[Sun Jan 04 20:48:13.904163 2026] [:error] [pid 21753:tid 21774] [client 104.208.65.11:1666] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVphjV4xwAtqKablc078OQAAAlI"]
[Sun Jan 04 20:48:14.148734 2026] [:error] [pid 23868:tid 23897] [client 104.208.65.11:1729] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aVphjrbaf-JYFyQL_054LwAAAFU"]
[Sun Jan 04 20:48:14.393418 2026] [:error] [pid 23968:tid 24020] [client 104.208.65.11:1834] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVphjmzpAzHWBUMs-z56QgAAAhY"]
[Sun Jan 04 20:48:14.626587 2026] [:error] [pid 23903:tid 23926] [client 104.208.65.11:1602] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVphjj_yzB-omvQP-LLHlwAAANE"]
[Sun Jan 04 20:48:14.859813 2026] [:error] [pid 23903:tid 23928] [client 104.208.65.11:1778] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVphjj_yzB-omvQP-LLHmgAAANM"]
[Sun Jan 04 20:48:15.093069 2026] [:error] [pid 23967:tid 23992] [client 104.208.65.11:1830] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aVphjz0PhjBsUtIi4VV7KgAAAZU"]
[Sun Jan 04 20:48:15.338081 2026] [:error] [pid 23968:tid 24014] [client 104.208.65.11:1720] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVphj2zpAzHWBUMs-z56RAAAAhA"]
[Sun Jan 04 20:48:15.571823 2026] [:error] [pid 23868:tid 23894] [client 104.208.65.11:1762] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVphj7baf-JYFyQL_054NAAAAFI"]
[Sun Jan 04 20:48:15.827356 2026] [:error] [pid 23868:tid 23879] [client 104.208.65.11:1912] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVphj7baf-JYFyQL_054NgAAAEM"]
[Sun Jan 04 20:48:16.069598 2026] [:error] [pid 23868:tid 23892] [client 104.208.65.11:1852] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pn.php"] [unique_id "aVphkLbaf-JYFyQL_054NwAAAFA"]
[Sun Jan 04 20:48:16.315463 2026] [:error] [pid 23967:tid 23977] [client 104.208.65.11:1782] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVphkD0PhjBsUtIi4VV7KwAAAYY"]
[Sun Jan 04 20:48:16.549701 2026] [:error] [pid 23904:tid 23946] [client 104.208.65.11:1734] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVphkP3FRCMgI2cXAQExQgAAAQo"]
[Sun Jan 04 20:48:16.784404 2026] [:error] [pid 23904:tid 23952] [client 104.208.65.11:1600] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVphkP3FRCMgI2cXAQExQwAAARA"]
[Sun Jan 04 20:48:17.018861 2026] [:error] [pid 23904:tid 23956] [client 104.208.65.11:1603] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fz.php"] [unique_id "aVphkf3FRCMgI2cXAQExRAAAARQ"]
[Sun Jan 04 20:48:17.253179 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:1696] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVphkWzpAzHWBUMs-z56TgAAAgE"]
[Sun Jan 04 20:48:17.487005 2026] [:error] [pid 23904:tid 23948] [client 104.208.65.11:1744] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVphkf3FRCMgI2cXAQExRgAAAQw"]
[Sun Jan 04 20:48:17.722019 2026] [:error] [pid 23967:tid 23989] [client 104.208.65.11:16100] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVphkT0PhjBsUtIi4VV7LAAAAZI"]
[Sun Jan 04 20:48:17.955682 2026] [:error] [pid 23904:tid 23960] [client 104.208.65.11:1814] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sang.php"] [unique_id "aVphkf3FRCMgI2cXAQExSAAAARg"]
[Sun Jan 04 20:48:18.188757 2026] [:error] [pid 23903:tid 23918] [client 104.208.65.11:1607] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVphkj_yzB-omvQP-LLHqQAAAMk"]
[Sun Jan 04 20:48:18.431363 2026] [:error] [pid 23868:tid 23898] [client 104.208.65.11:1759] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVphkrbaf-JYFyQL_054OgAAAFY"]
[Sun Jan 04 20:48:18.664240 2026] [:error] [pid 23868:tid 23888] [client 104.208.65.11:1760] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVphkrbaf-JYFyQL_054OwAAAEw"]
[Sun Jan 04 20:48:18.897785 2026] [:error] [pid 23868:tid 23883] [client 104.208.65.11:1631] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0o0.php"] [unique_id "aVphkrbaf-JYFyQL_054PAAAAEc"]
[Sun Jan 04 20:48:19.131892 2026] [:error] [pid 21720:tid 21736] [client 104.208.65.11:1728] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVphk35pkDWzwRcldOpKzQAAAI4"]
[Sun Jan 04 20:48:19.374838 2026] [:error] [pid 23968:tid 24012] [client 104.208.65.11:1672] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVphk2zpAzHWBUMs-z56VAAAAg4"]
[Sun Jan 04 20:48:19.610255 2026] [:error] [pid 21720:tid 21737] [client 104.208.65.11:1703] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVphk35pkDWzwRcldOpKzgAAAI8"]
[Sun Jan 04 20:48:19.842494 2026] [:error] [pid 1297:tid 1299] [client 104.208.65.11:1706] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVphkxf98x0RBG23PjfgegAAAAA"]
[Sun Jan 04 20:48:20.075821 2026] [:error] [pid 21812:tid 21858] [client 104.208.65.11:1669] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVphlO2lkeIp6bksZx2CMgAAA08"]
[Sun Jan 04 20:48:20.317039 2026] [:error] [pid 23968:tid 24000] [client 104.208.65.11:1736] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVphlGzpAzHWBUMs-z56VgAAAgI"]
[Sun Jan 04 20:48:20.550218 2026] [:error] [pid 1297:tid 1306] [client 104.208.65.11:1889] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVphlBf98x0RBG23PjfgfAAAAAc"]
[Sun Jan 04 20:48:20.784387 2026] [:error] [pid 23968:tid 24020] [client 104.208.65.11:1690] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aVphlGzpAzHWBUMs-z56VwAAAhY"]
[Sun Jan 04 20:48:21.021632 2026] [:error] [pid 23968:tid 24021] [client 104.208.65.11:1604] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aVphlWzpAzHWBUMs-z56WAAAAhc"]
[Sun Jan 04 20:48:21.261501 2026] [:error] [pid 21812:tid 21844] [client 104.208.65.11:1717] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aVphle2lkeIp6bksZx2CNAAAA0E"]
[Sun Jan 04 20:48:21.494597 2026] [:error] [pid 23904:tid 23941] [client 104.208.65.11:1790] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aVphlf3FRCMgI2cXAQExUwAAAQU"]
[Sun Jan 04 20:48:21.742124 2026] [:error] [pid 1297:tid 1300] [client 104.208.65.11:1767] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aVphlRf98x0RBG23PjfgfwAAAAE"]
[Sun Jan 04 20:48:21.975592 2026] [:error] [pid 23903:tid 23923] [client 104.208.65.11:1751] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVphlT_yzB-omvQP-LLHrwAAAM4"]
[Sun Jan 04 20:48:22.216226 2026] [:error] [pid 23904:tid 23952] [client 104.208.65.11:1707] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVphlv3FRCMgI2cXAQExVwAAARA"]
[Sun Jan 04 20:48:22.466187 2026] [:error] [pid 23967:tid 23995] [client 104.208.65.11:1772] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVphlj0PhjBsUtIi4VV7NgAAAZg"]
[Sun Jan 04 20:48:22.701701 2026] [:error] [pid 23967:tid 23994] [client 104.208.65.11:1781] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aVphlj0PhjBsUtIi4VV7NwAAAZc"]
[Sun Jan 04 20:48:22.934615 2026] [:error] [pid 23868:tid 23876] [client 104.208.65.11:1689] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aVphlrbaf-JYFyQL_054QwAAAEA"]
[Sun Jan 04 20:48:23.197166 2026] [:error] [pid 21812:tid 21863] [client 104.208.65.11:1636] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aVphl-2lkeIp6bksZx2CNwAAA1Q"]
[Sun Jan 04 20:48:23.441712 2026] [:error] [pid 23903:tid 23911] [client 104.208.65.11:1711] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aVphlz_yzB-omvQP-LLHsAAAAMI"]
[Sun Jan 04 20:48:23.675965 2026] [:error] [pid 21720:tid 21738] [client 104.208.65.11:1678] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aVphl35pkDWzwRcldOpK1gAAAJA"]
[Sun Jan 04 20:48:23.914127 2026] [:error] [pid 21720:tid 21740] [client 104.208.65.11:1654] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVphl35pkDWzwRcldOpK1wAAAJI"]
[Sun Jan 04 20:48:24.147958 2026] [:error] [pid 23903:tid 23929] [client 104.208.65.11:1637] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVphmD_yzB-omvQP-LLHsgAAANQ"]
[Sun Jan 04 20:48:24.382309 2026] [:error] [pid 17268:tid 17291] [client 104.208.65.11:1757] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVphmLPW8UB8HzRRfIdA_AAAAVQ"]
[Sun Jan 04 20:48:24.617094 2026] [:error] [pid 23967:tid 23972] [client 104.208.65.11:1676] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/12.php"] [unique_id "aVphmD0PhjBsUtIi4VV7PwAAAYE"]
[Sun Jan 04 20:48:24.856597 2026] [:error] [pid 23967:tid 23987] [client 104.208.65.11:1614] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsrer.php"] [unique_id "aVphmD0PhjBsUtIi4VV7QAAAAZA"]
[Sun Jan 04 20:48:25.095030 2026] [:error] [pid 17268:tid 17286] [client 104.208.65.11:1806] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsrer.php"] [unique_id "aVphmbPW8UB8HzRRfIdA_QAAAU8"]
[Sun Jan 04 20:48:25.345971 2026] [:error] [pid 17268:tid 17285] [client 104.208.65.11:1716] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsrer.php"] [unique_id "aVphmbPW8UB8HzRRfIdA_wAAAU4"]
[Sun Jan 04 20:48:25.589663 2026] [:error] [pid 21753:tid 21760] [client 104.208.65.11:1605] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsrer.php"] [unique_id "aVphmV4xwAtqKablc078PAAAAkQ"]
[Sun Jan 04 20:48:25.822764 2026] [:error] [pid 23968:tid 24012] [client 104.208.65.11:1745] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVphmWzpAzHWBUMs-z56YwAAAg4"]
[Sun Jan 04 20:48:26.057394 2026] [:error] [pid 21720:tid 21724] [client 104.208.65.11:1615] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVphmn5pkDWzwRcldOpK3QAAAII"]
[Sun Jan 04 20:48:26.331009 2026] [:error] [pid 23968:tid 23998] [client 104.208.65.11:1698] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVphmmzpAzHWBUMs-z56aAAAAgA"]
[Sun Jan 04 20:48:26.603541 2026] [:error] [pid 21720:tid 21737] [client 104.208.65.11:1651] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aVphmn5pkDWzwRcldOpK4AAAAI8"]
[Sun Jan 04 20:48:26.838712 2026] [:error] [pid 23968:tid 23999] [client 104.208.65.11:1712] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/enclas.php"] [unique_id "aVphmmzpAzHWBUMs-z56bQAAAgE"]
[Sun Jan 04 20:48:27.082767 2026] [:error] [pid 23968:tid 24013] [client 104.208.65.11:1749] File does not exist: /usr/local/apache/htdocs/suspended-page/enclas.php
[Sun Jan 04 20:48:27.202899 2026] [:error] [pid 23968:tid 24006] [client 104.208.65.11:1749] File does not exist: /usr/local/apache/htdocs/suspended-page/he.php
[Sun Jan 04 20:48:27.323518 2026] [:error] [pid 23968:tid 24011] [client 104.208.65.11:1749] File does not exist: /usr/local/apache/htdocs/suspended-page/sid.php
[Sun Jan 04 20:48:27.447283 2026] [:error] [pid 23968:tid 24007] [client 104.208.65.11:1749] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Jan 04 20:48:27.566586 2026] [:error] [pid 23968:tid 24012] [client 104.208.65.11:1749] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Sun Jan 04 20:48:28.408170 2026] [:error] [pid 23968:tid 24008] [client 104.208.65.11:1749] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVphnGzpAzHWBUMs-z56gQAAAgo"]
[Sun Jan 04 20:48:28.660015 2026] [:error] [pid 23967:tid 23990] [client 104.208.65.11:1645] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVphnD0PhjBsUtIi4VV7QwAAAZM"]
[Sun Jan 04 20:48:28.892897 2026] [:error] [pid 21720:tid 21730] [client 104.208.65.11:1724] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVphnH5pkDWzwRcldOpK4wAAAIg"]
[Sun Jan 04 20:48:29.132137 2026] [:error] [pid 21720:tid 21735] [client 104.208.65.11:1653] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVphnX5pkDWzwRcldOpK5QAAAI0"]
[Sun Jan 04 20:48:29.367377 2026] [:error] [pid 21720:tid 21722] [client 104.208.65.11:1670] [client 104.208.65.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aVphnX5pkDWzwRcldOpK6AAAAIA"]
[Sun Jan 04 20:48:29.627656 2026] [:error] [pid 23967:tid 23995] [client 104.208.65.11:1750] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVphnT0PhjBsUtIi4VV7RQAAAZg"]
[Sun Jan 04 20:48:29.874569 2026] [:error] [pid 23903:tid 23926] [client 104.208.65.11:1640] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVphnT_yzB-omvQP-LLHtQAAANE"]
[Sun Jan 04 20:48:30.109715 2026] [:error] [pid 23968:tid 24018] [client 104.208.65.11:1634] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVphnmzpAzHWBUMs-z56iQAAAhQ"]
[Sun Jan 04 20:48:30.343686 2026] [:error] [pid 21720:tid 21741] [client 104.208.65.11:1554] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVphnn5pkDWzwRcldOpK6gAAAJM"]
[Sun Jan 04 20:48:30.591528 2026] [:error] [pid 23968:tid 24015] [client 104.208.65.11:1622] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aVphnmzpAzHWBUMs-z56iwAAAhE"]
[Sun Jan 04 20:48:30.827572 2026] [:error] [pid 23968:tid 24021] [client 104.208.65.11:1818] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aVphnmzpAzHWBUMs-z56jQAAAhc"]
[Sun Jan 04 20:48:31.063310 2026] [:error] [pid 23904:tid 23957] [client 104.208.65.11:1616] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aVphn_3FRCMgI2cXAQExZAAAARU"]
[Sun Jan 04 20:48:31.303356 2026] [:error] [pid 21720:tid 21724] [client 104.208.65.11:1539] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aVphn35pkDWzwRcldOpK7gAAAII"]
[Sun Jan 04 21:21:27.545723 2026] [:error] [pid 21720:tid 21745] [client 4.217.235.251:17055] [client 4.217.235.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVppV35pkDWzwRcldOpTVQAAAJc"]
[Sun Jan 04 21:21:27.979529 2026] [:error] [pid 23903:tid 23921] [client 4.217.235.251:17045] [client 4.217.235.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVppVz_yzB-omvQP-LLQLQAAAMw"]
[Sun Jan 04 21:21:28.328809 2026] [:error] [pid 21720:tid 21726] [client 4.217.235.251:17128] [client 4.217.235.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVppWH5pkDWzwRcldOpTWgAAAIQ"]
[Sun Jan 04 21:21:28.638027 2026] [:error] [pid 21720:tid 21742] [client 4.217.235.251:17136] [client 4.217.235.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVppWH5pkDWzwRcldOpTXAAAAJQ"]
[Sun Jan 04 23:20:43.349091 2026] [:error] [pid 45949:tid 45954] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Sun Jan 04 23:20:43.558792 2026] [:error] [pid 45949:tid 45959] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun Jan 04 23:20:43.696917 2026] [:error] [pid 45949:tid 45963] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/inwp.php
[Sun Jan 04 23:20:44.151874 2026] [:error] [pid 45949:tid 45978] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Sun Jan 04 23:20:44.424277 2026] [:error] [pid 45949:tid 45960] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sun Jan 04 23:20:44.655630 2026] [:error] [pid 45949:tid 45966] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Sun Jan 04 23:20:44.821713 2026] [:error] [pid 45949:tid 45970] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Sun Jan 04 23:20:44.962051 2026] [:error] [pid 45949:tid 45956] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Sun Jan 04 23:20:49.836280 2026] [:error] [pid 45949:tid 45968] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sun Jan 04 23:20:50.183783 2026] [:error] [pid 45949:tid 45964] [client 4.217.180.194:42955] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sun Jan 04 23:20:50.584751 2026] [:error] [pid 45949:tid 45965] [client 4.217.180.194:42955] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aVqFUqWUhIYCdxgkhpBXFAAAAgs"]
[Sun Jan 04 23:20:55.591486 2026] [:error] [pid 48727:tid 48761] [client 4.217.180.194:3291] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aVqFV_gJtUs-E_QT0ibjawAAA0Q"]
[Sun Jan 04 23:21:02.256971 2026] [:error] [pid 42666:tid 42697] [client 4.217.180.194:55905] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aVqFXvc221c7vwWrOjcb9wAAAwA"]
[Sun Jan 04 23:21:04.828420 2026] [:error] [pid 48727:tid 48760] [client 4.217.180.194:3268] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aVqFYPgJtUs-E_QT0ibjcQAAA0M"]
[Sun Jan 04 23:21:23.431981 2026] [:error] [pid 45949:tid 45969] [client 4.217.180.194:48342] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aVqFc6WUhIYCdxgkhpBXLgAAAg8"]
[Sun Jan 04 23:21:28.992825 2026] [:error] [pid 50288:tid 50361] [client 4.217.180.194:40813] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aVqFeK_n0RHxRx0wErHYZgAAA9E"]
[Sun Jan 04 23:21:33.201774 2026] [:error] [pid 50229:tid 50235] [client 4.217.180.194:43560] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aVqFfahKBHGV8WZnituAxgAAAMM"]
[Sun Jan 04 23:21:37.868254 2026] [:error] [pid 45949:tid 45966] [client 4.217.180.194:55431] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aVqFgaWUhIYCdxgkhpBXOAAAAgw"]
[Sun Jan 04 23:21:38.580765 2026] [:error] [pid 50286:tid 50298] [client 4.217.180.194:45201] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aVqFgosZ42BFbcA1SgEMiQAAAkg"]
[Sun Jan 04 23:21:42.924022 2026] [:error] [pid 50286:tid 50302] [client 4.217.180.194:3218] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aVqFhosZ42BFbcA1SgEMoAAAAkw"]
[Sun Jan 04 23:21:45.999753 2026] [:error] [pid 50286:tid 50303] [client 4.217.180.194:45829] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aVqFiYsZ42BFbcA1SgEMpwAAAk0"]
[Sun Jan 04 23:21:48.302035 2026] [:error] [pid 48667:tid 48707] [client 4.217.180.194:3209] [client 4.217.180.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kure.php"] [unique_id "aVqFjHO6aihVIlrNAPgAtQAAAQo"]
[Sun Jan 04 23:22:11.281095 2026] [:error] [pid 50198:tid 50208] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/gaje.php
[Sun Jan 04 23:22:11.486152 2026] [:error] [pid 50198:tid 50215] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Sun Jan 04 23:22:11.640590 2026] [:error] [pid 50198:tid 50217] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Sun Jan 04 23:22:11.920374 2026] [:error] [pid 50198:tid 50219] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/msy.php
[Sun Jan 04 23:22:12.069484 2026] [:error] [pid 50198:tid 50200] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/alog.php
[Sun Jan 04 23:22:12.207514 2026] [:error] [pid 50198:tid 50216] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/X7T6.php
[Sun Jan 04 23:22:12.346222 2026] [:error] [pid 50198:tid 50201] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sun Jan 04 23:22:12.484491 2026] [:error] [pid 50198:tid 50210] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/Rk41.php
[Sun Jan 04 23:22:12.639868 2026] [:error] [pid 50198:tid 50211] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/ztv.php
[Sun Jan 04 23:22:12.791771 2026] [:error] [pid 50198:tid 50221] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/sef.php
[Sun Jan 04 23:22:12.942640 2026] [:error] [pid 50198:tid 50220] [client 4.217.180.194:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sun Jan 04 23:38:33.932241 2026] [:error] [pid 50288:tid 50351] [client 43.135.133.241:57786] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVqJea_n0RHxRx0wErHdlQAAA8c"]
[Mon Jan 05 00:33:21.206925 2026] [:error] [pid 22540:tid 22594] [client 223.181.120.188:29658] [client 223.181.120.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.120.188, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVqWUTQAa5AoSeJHBNp1hQAAABQ"]
[Mon Jan 05 00:33:21.213286 2026] [:error] [pid 22540:tid 22594] [client 223.181.120.188:29658] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 05 05:05:21.056175 2026] [:error] [pid 6680:tid 6683] [client 159.195.70.223:62837] [client 159.195.70.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVrWEaE58uNoazzTmx3HkAAAAQE"]
[Mon Jan 05 05:05:21.660585 2026] [:error] [pid 5535:tid 5592] [client 159.195.70.223:57759] [client 159.195.70.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aVrWEWnkedMjhVX0PTV_UgAAAFY"]
[Mon Jan 05 05:05:22.257432 2026] [:error] [pid 5632:tid 5649] [client 159.195.70.223:64199] [client 159.195.70.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/media/system/js/core.js"] [unique_id "aVrWEoN3ZWvlOh-nbt-edgAAAMU"]
[Mon Jan 05 06:53:02.095035 2026] [:error] [pid 5632:tid 5659] [client 74.225.204.9:16421] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVrvToN3ZWvlOh-nbt_HaAAAAM8"]
[Mon Jan 05 06:53:03.350357 2026] [:error] [pid 5536:tid 5618] [client 74.225.204.9:19182] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVrvTwRtMZNG6xI8yDzjwgAAAJU"]
[Mon Jan 05 06:53:04.245633 2026] [:error] [pid 5632:tid 5653] [client 74.225.204.9:25385] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVrvUIN3ZWvlOh-nbt_HcwAAAMk"]
[Mon Jan 05 06:53:06.132909 2026] [:error] [pid 6680:tid 6703] [client 74.225.204.9:25384] [client 74.225.204.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVrvUqE58uNoazzTmx39QwAAARU"]
[Mon Jan 05 16:20:24.825574 2026] [:error] [pid 5534:tid 5555] [client 114.80.36.40:37792] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVt0SJNs9XmbR6unB0xldAAAAAw"]
[Mon Jan 05 17:43:41.959739 2026] [:error] [pid 6680:tid 6685] [client 94.130.222.48:61579] [client 94.130.222.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/userfuns.php"] [unique_id "aVuHzaE58uNoazzTmx3F2wAAAQM"], referer: www.google.com
[Mon Jan 05 18:37:58.605135 2026] [:error] [pid 5534:tid 5562] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Mon Jan 05 18:37:59.044906 2026] [:error] [pid 5534:tid 5547] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Jan 05 18:37:59.198703 2026] [:error] [pid 5534:tid 5556] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/rezor.php
[Mon Jan 05 18:37:59.340166 2026] [:error] [pid 5534:tid 5544] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/windex.php
[Mon Jan 05 18:37:59.494625 2026] [:error] [pid 5534:tid 5566] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/ajq1s.php
[Mon Jan 05 18:37:59.636347 2026] [:error] [pid 5534:tid 5567] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/world.php
[Mon Jan 05 18:37:59.788938 2026] [:error] [pid 5534:tid 5563] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Mon Jan 05 18:37:59.927402 2026] [:error] [pid 5534:tid 5555] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/spip.php
[Mon Jan 05 18:38:00.425928 2026] [:error] [pid 5534:tid 5546] [client 4.240.125.246:28299] File does not exist: /usr/local/apache/htdocs/suspended-page/geido.php
[Mon Jan 05 18:38:00.560263 2026] [:error] [pid 5534:tid 5554] [client 4.240.125.246:28299] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cachex.php"] [unique_id "aVuUiJNs9XmbR6unB0yhMQAAAAs"]
[Mon Jan 05 18:38:01.115705 2026] [:error] [pid 5534:tid 5556] [client 4.240.125.246:28392] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cachex.php"] [unique_id "aVuUiZNs9XmbR6unB0yhNQAAAA0"]
[Mon Jan 05 18:38:01.416133 2026] [:error] [pid 5534:tid 5552] [client 4.240.125.246:28397] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cachex.php"] [unique_id "aVuUiZNs9XmbR6unB0yhNgAAAAk"]
[Mon Jan 05 18:38:01.694632 2026] [:error] [pid 54081:tid 54091] [client 4.240.125.246:28354] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cachex.php"] [unique_id "aVuUiVL4jLgtF-b9w4dsnQAAAUc"]
[Mon Jan 05 18:38:02.377407 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:28318] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVuUigRtMZNG6xI8yDzKJQAAAJU"]
[Mon Jan 05 18:38:03.478232 2026] [:error] [pid 5534:tid 5563] [client 4.240.125.246:28400] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVuUi5Ns9XmbR6unB0yhOgAAABQ"]
[Mon Jan 05 18:38:03.820683 2026] [:error] [pid 5535:tid 5584] [client 4.240.125.246:28352] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVuUi2nkedMjhVX0PTVaWAAAAE4"]
[Mon Jan 05 18:38:04.150044 2026] [:error] [pid 5534:tid 5557] [client 4.240.125.246:28301] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpup.php"] [unique_id "aVuUjJNs9XmbR6unB0yhPAAAAA4"]
[Mon Jan 05 18:38:04.733203 2026] [:error] [pid 5534:tid 5546] [client 4.240.125.246:28369] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aVuUjJNs9XmbR6unB0yhPQAAAAM"]
[Mon Jan 05 18:38:05.253494 2026] [:error] [pid 5632:tid 5655] [client 4.240.125.246:28314] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aVuUjYN3ZWvlOh-nbt-uTAAAAMs"]
[Mon Jan 05 18:38:05.854875 2026] [:error] [pid 54081:tid 54087] [client 4.240.125.246:28313] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aVuUjVL4jLgtF-b9w4dsnwAAAUM"]
[Mon Jan 05 18:38:07.776964 2026] [:error] [pid 5534:tid 5566] [client 4.240.125.246:8131] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aVuUj5Ns9XmbR6unB0yhPgAAABc"]
[Mon Jan 05 18:38:08.283414 2026] [:error] [pid 5536:tid 5604] [client 4.240.125.246:28323] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpupex.php"] [unique_id "aVuUkARtMZNG6xI8yDzKLQAAAIc"]
[Mon Jan 05 18:38:08.755774 2026] [:error] [pid 6680:tid 6698] [client 4.240.125.246:28319] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpupex.php"] [unique_id "aVuUkKE58uNoazzTmx3V1wAAARA"]
[Mon Jan 05 18:38:09.541829 2026] [:error] [pid 5536:tid 5606] [client 4.240.125.246:28412] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpupex.php"] [unique_id "aVuUkQRtMZNG6xI8yDzKLwAAAIk"]
[Mon Jan 05 18:38:10.282802 2026] [:error] [pid 5534:tid 5562] [client 4.240.125.246:28385] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpupex.php"] [unique_id "aVuUkpNs9XmbR6unB0yhQwAAABM"]
[Mon Jan 05 18:38:11.599653 2026] [:error] [pid 5536:tid 5601] [client 4.240.125.246:28371] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nck.php"] [unique_id "aVuUkwRtMZNG6xI8yDzKMQAAAIQ"]
[Mon Jan 05 18:38:12.094239 2026] [:error] [pid 6680:tid 6691] [client 4.240.125.246:28376] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nck.php"] [unique_id "aVuUlKE58uNoazzTmx3V3QAAAQk"]
[Mon Jan 05 18:38:12.836690 2026] [:error] [pid 54081:tid 54102] [client 4.240.125.246:28402] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nck.php"] [unique_id "aVuUlFL4jLgtF-b9w4dsogAAAVI"]
[Mon Jan 05 18:38:13.423313 2026] [:error] [pid 54081:tid 54105] [client 4.240.125.246:28294] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nck.php"] [unique_id "aVuUlVL4jLgtF-b9w4dspQAAAVU"]
[Mon Jan 05 18:38:14.179416 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:28302] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVuUlgRtMZNG6xI8yDzKOQAAAIs"]
[Mon Jan 05 18:38:15.332066 2026] [:error] [pid 5536:tid 5612] [client 4.240.125.246:28375] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVuUlwRtMZNG6xI8yDzKOwAAAI8"]
[Mon Jan 05 18:38:15.764405 2026] [:error] [pid 28407:tid 28412] [client 4.240.125.246:28336] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVuUl9ercd3ptydUzM0uIgAAAYI"]
[Mon Jan 05 18:38:16.482335 2026] [:error] [pid 54081:tid 54094] [client 4.240.125.246:28359] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aVuUmFL4jLgtF-b9w4dspgAAAUo"]
[Mon Jan 05 18:38:17.596132 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:28389] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVuUmQRtMZNG6xI8yDzKPwAAAJU"]
[Mon Jan 05 18:38:18.487187 2026] [:error] [pid 54081:tid 54101] [client 4.240.125.246:28388] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVuUmlL4jLgtF-b9w4dsqQAAAVE"]
[Mon Jan 05 18:38:19.372660 2026] [:error] [pid 5535:tid 5587] [client 4.240.125.246:28293] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVuUm2nkedMjhVX0PTVacQAAAFE"]
[Mon Jan 05 18:38:20.578598 2026] [:error] [pid 5536:tid 5610] [client 4.240.125.246:28413] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aVuUnARtMZNG6xI8yDzKZAAAAI0"]
[Mon Jan 05 18:38:24.681691 2026] [:error] [pid 6680:tid 6705] [client 4.240.125.246:28290] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVuUoKE58uNoazzTmx3V5AAAARc"]
[Mon Jan 05 18:38:25.882084 2026] [:error] [pid 5632:tid 5655] [client 4.240.125.246:28386] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVuUoYN3ZWvlOh-nbt-uWQAAAMs"]
[Mon Jan 05 18:38:26.214618 2026] [:error] [pid 5535:tid 5583] [client 4.240.125.246:28332] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVuUomnkedMjhVX0PTVadQAAAE0"]
[Mon Jan 05 18:38:26.740597 2026] [:error] [pid 6680:tid 6695] [client 4.240.125.246:8134] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-activate.php"] [unique_id "aVuUoqE58uNoazzTmx3V5QAAAQ0"]
[Mon Jan 05 18:38:27.319160 2026] [:error] [pid 5534:tid 5562] [client 4.240.125.246:28310] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVuUo5Ns9XmbR6unB0yhTgAAABM"]
[Mon Jan 05 18:38:27.954565 2026] [:error] [pid 5535:tid 5571] [client 4.240.125.246:28353] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVuUo2nkedMjhVX0PTVadgAAAEE"]
[Mon Jan 05 18:38:28.582742 2026] [:error] [pid 54081:tid 54087] [client 4.240.125.246:28300] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVuUpFL4jLgtF-b9w4dsrQAAAUM"]
[Mon Jan 05 18:38:29.177873 2026] [:error] [pid 54081:tid 54092] [client 4.240.125.246:28309] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/db.php"] [unique_id "aVuUpVL4jLgtF-b9w4dssAAAAUg"]
[Mon Jan 05 18:38:30.287109 2026] [:error] [pid 5534:tid 5547] [client 4.240.125.246:28295] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVuUppNs9XmbR6unB0yhUgAAAAQ"]
[Mon Jan 05 18:38:31.258414 2026] [:error] [pid 5534:tid 5544] [client 4.240.125.246:28406] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVuUp5Ns9XmbR6unB0yhUwAAAAE"]
[Mon Jan 05 18:38:31.928284 2026] [:error] [pid 5534:tid 5550] [client 4.240.125.246:28357] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVuUp5Ns9XmbR6unB0yhVgAAAAc"]
[Mon Jan 05 18:38:32.512635 2026] [:error] [pid 5632:tid 5659] [client 4.240.125.246:28381] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aVuUqIN3ZWvlOh-nbt-uXQAAAM8"]
[Mon Jan 05 18:38:33.075528 2026] [:error] [pid 5536:tid 5602] [client 4.240.125.246:28405] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuUqQRtMZNG6xI8yDzKcQAAAIU"]
[Mon Jan 05 18:38:33.745526 2026] [:error] [pid 6680:tid 6699] [client 4.240.125.246:28317] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuUqaE58uNoazzTmx3V7AAAARE"]
[Mon Jan 05 18:38:34.242492 2026] [:error] [pid 28407:tid 28416] [client 4.240.125.246:28355] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuUqtercd3ptydUzM0uNQAAAYY"]
[Mon Jan 05 18:38:34.548196 2026] [:error] [pid 5535:tid 5572] [client 4.240.125.246:8181] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuUqmnkedMjhVX0PTVagAAAAEI"]
[Mon Jan 05 18:38:35.241186 2026] [:error] [pid 28407:tid 28435] [client 4.240.125.246:28303] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVuUq9ercd3ptydUzM0uNwAAAZg"]
[Mon Jan 05 18:38:35.783728 2026] [:error] [pid 28407:tid 28429] [client 4.240.125.246:28374] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVuUq9ercd3ptydUzM0uOQAAAZI"]
[Mon Jan 05 18:38:37.427978 2026] [:error] [pid 5534:tid 5549] [client 4.240.125.246:28298] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVuUrZNs9XmbR6unB0yhWgAAAAY"]
[Mon Jan 05 18:38:38.529781 2026] [:error] [pid 5632:tid 5652] [client 4.240.125.246:28366] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs.php"] [unique_id "aVuUroN3ZWvlOh-nbt-uYAAAAMg"]
[Mon Jan 05 18:38:39.147171 2026] [:error] [pid 5535:tid 5571] [client 4.240.125.246:28398] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVuUr2nkedMjhVX0PTVahQAAAEE"]
[Mon Jan 05 18:38:39.458170 2026] [:error] [pid 28407:tid 28427] [client 4.240.125.246:28304] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVuUr9ercd3ptydUzM0uPAAAAZA"]
[Mon Jan 05 18:38:39.814052 2026] [:error] [pid 6680:tid 6705] [client 4.240.125.246:8133] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVuUr6E58uNoazzTmx3V7wAAARc"]
[Mon Jan 05 18:38:40.126426 2026] [:error] [pid 28407:tid 28425] [client 4.240.125.246:28372] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cord.php"] [unique_id "aVuUsNercd3ptydUzM0uPQAAAY4"]
[Mon Jan 05 18:38:40.641309 2026] [:error] [pid 5535:tid 5594] [client 4.240.125.246:28331] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVuUsGnkedMjhVX0PTVaigAAAFg"]
[Mon Jan 05 18:38:41.336127 2026] [:error] [pid 5536:tid 5619] [client 4.240.125.246:28315] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVuUsQRtMZNG6xI8yDzKdQAAAJY"]
[Mon Jan 05 18:38:41.954791 2026] [:error] [pid 54081:tid 54105] [client 4.240.125.246:8159] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVuUsVL4jLgtF-b9w4dsuAAAAVU"]
[Mon Jan 05 18:38:42.301942 2026] [:error] [pid 28407:tid 28412] [client 4.240.125.246:8164] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aVuUstercd3ptydUzM0uQAAAAYI"]
[Mon Jan 05 18:38:42.635836 2026] [:error] [pid 5535:tid 5590] [client 4.240.125.246:8129] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVuUsmnkedMjhVX0PTVajgAAAFQ"]
[Mon Jan 05 18:38:43.260767 2026] [:error] [pid 5535:tid 5574] [client 4.240.125.246:8169] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVuUs2nkedMjhVX0PTVajwAAAEQ"]
[Mon Jan 05 18:38:43.854255 2026] [:error] [pid 5535:tid 5585] [client 4.240.125.246:8176] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVuUs2nkedMjhVX0PTVakgAAAE8"]
[Mon Jan 05 18:38:44.347255 2026] [:error] [pid 54081:tid 54098] [client 4.240.125.246:28395] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mail.php"] [unique_id "aVuUtFL4jLgtF-b9w4dsugAAAU4"]
[Mon Jan 05 18:38:45.362234 2026] [:error] [pid 5535:tid 5581] [client 4.240.125.246:28361] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVuUtWnkedMjhVX0PTValQAAAEs"]
[Mon Jan 05 18:38:46.350642 2026] [:error] [pid 5535:tid 5587] [client 4.240.125.246:28320] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVuUtmnkedMjhVX0PTVamQAAAFE"]
[Mon Jan 05 18:38:47.164281 2026] [:error] [pid 5535:tid 5571] [client 4.240.125.246:28305] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVuUt2nkedMjhVX0PTVamwAAAEE"]
[Mon Jan 05 18:38:47.720260 2026] [:error] [pid 5534:tid 5557] [client 4.240.125.246:8067] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aVuUt5Ns9XmbR6unB0yhXwAAAA4"]
[Mon Jan 05 18:38:48.048396 2026] [:error] [pid 6680:tid 6698] [client 4.240.125.246:8135] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVuUuKE58uNoazzTmx3V-QAAARA"]
[Mon Jan 05 18:38:48.438555 2026] [:error] [pid 5534:tid 5565] [client 4.240.125.246:8140] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVuUuJNs9XmbR6unB0yhYAAAABY"]
[Mon Jan 05 18:38:48.980613 2026] [:error] [pid 5536:tid 5599] [client 4.240.125.246:28380] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVuUuARtMZNG6xI8yDzKfAAAAII"]
[Mon Jan 05 18:38:49.289243 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:8160] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OK.php"] [unique_id "aVuUuQRtMZNG6xI8yDzKfQAAAJU"]
[Mon Jan 05 18:38:49.719949 2026] [:error] [pid 5536:tid 5620] [client 4.240.125.246:8171] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVuUuQRtMZNG6xI8yDzKfgAAAJc"]
[Mon Jan 05 18:38:50.207042 2026] [:error] [pid 5536:tid 5615] [client 4.240.125.246:28367] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVuUugRtMZNG6xI8yDzKfwAAAJI"]
[Mon Jan 05 18:38:50.726640 2026] [:error] [pid 5534:tid 5549] [client 4.240.125.246:28312] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVuUupNs9XmbR6unB0yhYQAAAAY"]
[Mon Jan 05 18:38:51.335305 2026] [:error] [pid 5536:tid 5598] [client 4.240.125.246:28383] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php"] [unique_id "aVuUuwRtMZNG6xI8yDzKgQAAAIE"]
[Mon Jan 05 18:38:51.772828 2026] [:error] [pid 5535:tid 5580] [client 4.240.125.246:28311] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVuUu2nkedMjhVX0PTVangAAAEo"]
[Mon Jan 05 18:38:52.598141 2026] [:error] [pid 54081:tid 54086] [client 4.240.125.246:28364] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVuUvFL4jLgtF-b9w4dsvQAAAUI"]
[Mon Jan 05 18:38:53.489667 2026] [:error] [pid 54081:tid 54091] [client 4.240.125.246:8143] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVuUvVL4jLgtF-b9w4dswQAAAUc"]
[Mon Jan 05 18:38:53.902176 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:8139] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aVuUvQRtMZNG6xI8yDzKgwAAAIs"]
[Mon Jan 05 18:38:54.697175 2026] [:error] [pid 5536:tid 5613] [client 4.240.125.246:28384] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVuUvgRtMZNG6xI8yDzKhQAAAJA"]
[Mon Jan 05 18:38:55.443906 2026] [:error] [pid 5632:tid 5659] [client 4.240.125.246:28322] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVuUv4N3ZWvlOh-nbt-uaQAAAM8"]
[Mon Jan 05 18:38:56.511864 2026] [:error] [pid 28407:tid 28433] [client 4.240.125.246:28360] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVuUwNercd3ptydUzM0uSQAAAZY"]
[Mon Jan 05 18:38:58.197334 2026] [:error] [pid 5536:tid 5611] [client 4.240.125.246:8073] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aVuUwgRtMZNG6xI8yDzKigAAAI4"]
[Mon Jan 05 18:38:59.113830 2026] [:error] [pid 5536:tid 5621] [client 4.240.125.246:28407] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin1.php"] [unique_id "aVuUwwRtMZNG6xI8yDzKjAAAAJg"]
[Mon Jan 05 18:39:00.964858 2026] [:error] [pid 5536:tid 5600] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Mon Jan 05 18:39:01.102734 2026] [:error] [pid 5536:tid 5617] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Mon Jan 05 18:39:01.255071 2026] [:error] [pid 5536:tid 5619] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/af32.php
[Mon Jan 05 18:39:01.392694 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/rz.php
[Mon Jan 05 18:39:01.530742 2026] [:error] [pid 5536:tid 5605] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/hugo.php
[Mon Jan 05 18:39:01.680738 2026] [:error] [pid 5536:tid 5613] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Mon Jan 05 18:39:01.818477 2026] [:error] [pid 5536:tid 5609] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/anjay.php
[Mon Jan 05 18:39:01.956472 2026] [:error] [pid 5536:tid 5607] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/let.php
[Mon Jan 05 18:39:02.094965 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon Jan 05 18:39:02.232653 2026] [:error] [pid 5536:tid 5612] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Jan 05 18:39:02.372142 2026] [:error] [pid 5536:tid 5610] [client 4.240.125.246:8149] File does not exist: /usr/local/apache/htdocs/suspended-page/pn.php
[Mon Jan 05 18:39:02.506495 2026] [:error] [pid 5536:tid 5616] [client 4.240.125.246:8149] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aVuUxgRtMZNG6xI8yDzKmQAAAJM"]
[Mon Jan 05 18:39:03.400040 2026] [:error] [pid 5536:tid 5611] [client 4.240.125.246:28335] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aVuUxwRtMZNG6xI8yDzKmgAAAI4"]
[Mon Jan 05 18:39:03.977261 2026] [:error] [pid 54081:tid 54090] [client 4.240.125.246:28363] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aVuUx1L4jLgtF-b9w4dsxwAAAUY"]
[Mon Jan 05 18:39:04.489774 2026] [:error] [pid 6680:tid 6683] [client 4.240.125.246:28325] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aVuUyKE58uNoazzTmx3V_gAAAQE"]
[Mon Jan 05 18:39:05.671892 2026] [:error] [pid 5536:tid 5599] [client 4.240.125.246:28328] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aVuUyQRtMZNG6xI8yDzKnAAAAII"]
[Mon Jan 05 18:39:07.232535 2026] [:error] [pid 5536:tid 5615] [client 4.240.125.246:8116] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aVuUywRtMZNG6xI8yDzKngAAAJI"]
[Mon Jan 05 18:39:08.109412 2026] [:error] [pid 5534:tid 5559] [client 4.240.125.246:28327] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aVuUzJNs9XmbR6unB0yhcgAAABA"]
[Mon Jan 05 18:39:08.858165 2026] [:error] [pid 5536:tid 5597] [client 4.240.125.246:28377] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aVuUzARtMZNG6xI8yDzKnwAAAIA"]
[Mon Jan 05 18:39:09.342874 2026] [:error] [pid 5632:tid 5659] [client 4.240.125.246:28382] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aVuUzYN3ZWvlOh-nbt-ucQAAAM8"]
[Mon Jan 05 18:39:09.894856 2026] [:error] [pid 28407:tid 28427] [client 4.240.125.246:28343] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aVuUzdercd3ptydUzM0uUAAAAZA"]
[Mon Jan 05 18:39:10.573340 2026] [:error] [pid 5536:tid 5619] [client 4.240.125.246:28415] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aVuUzgRtMZNG6xI8yDzKogAAAJY"]
[Mon Jan 05 18:39:11.036759 2026] [:error] [pid 6680:tid 6695] [client 4.240.125.246:28410] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aVuUz6E58uNoazzTmx3WDAAAAQ0"]
[Mon Jan 05 18:39:11.492521 2026] [:error] [pid 5632:tid 5663] [client 4.240.125.246:28373] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVuUz4N3ZWvlOh-nbt-ucgAAANM"]
[Mon Jan 05 18:39:11.779028 2026] [:error] [pid 5632:tid 5658] [client 4.240.125.246:8153] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVuUz4N3ZWvlOh-nbt-ucwAAAM4"]
[Mon Jan 05 18:39:12.093086 2026] [:error] [pid 5535:tid 5581] [client 4.240.125.246:8130] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVuU0GnkedMjhVX0PTVaqAAAAEs"]
[Mon Jan 05 18:39:12.574234 2026] [:error] [pid 5535:tid 5572] [client 4.240.125.246:28297] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aVuU0GnkedMjhVX0PTVaqQAAAEI"]
[Mon Jan 05 18:39:12.865077 2026] [:error] [pid 5534:tid 5564] [client 4.240.125.246:28387] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVuU0JNs9XmbR6unB0yheAAAABU"]
[Mon Jan 05 18:39:13.168806 2026] [:error] [pid 5535:tid 5593] [client 4.240.125.246:8138] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVuU0WnkedMjhVX0PTVaqgAAAFc"]
[Mon Jan 05 18:39:13.451538 2026] [:error] [pid 6680:tid 6702] [client 4.240.125.246:28345] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVuU0aE58uNoazzTmx3WKAAAARQ"]
[Mon Jan 05 18:39:13.843841 2026] [:error] [pid 5536:tid 5607] [client 4.240.125.246:28404] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aVuU0QRtMZNG6xI8yDzKpAAAAIo"]
[Mon Jan 05 18:39:14.511862 2026] [:error] [pid 5536:tid 5614] [client 4.240.125.246:28411] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVuU0gRtMZNG6xI8yDzKpwAAAJE"]
[Mon Jan 05 18:39:15.391077 2026] [:error] [pid 5534:tid 5562] [client 4.240.125.246:8156] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVuU05Ns9XmbR6unB0yhfQAAABM"]
[Mon Jan 05 18:39:15.964802 2026] [:error] [pid 54081:tid 54084] [client 4.240.125.246:8005] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVuU01L4jLgtF-b9w4ds0QAAAUA"]
[Mon Jan 05 18:39:16.943512 2026] [:error] [pid 5536:tid 5612] [client 4.240.125.246:28409] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aVuU1ARtMZNG6xI8yDzKqAAAAI8"]
[Mon Jan 05 18:39:17.658432 2026] [:error] [pid 28407:tid 28421] [client 4.240.125.246:28321] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVuU1dercd3ptydUzM0uVAAAAYo"]
[Mon Jan 05 18:39:18.092314 2026] [:error] [pid 5536:tid 5616] [client 4.240.125.246:8155] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVuU1gRtMZNG6xI8yDzKqgAAAJM"]
[Mon Jan 05 18:39:18.802882 2026] [:error] [pid 5632:tid 5649] [client 4.240.125.246:28330] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVuU1oN3ZWvlOh-nbt-udAAAAMU"]
[Mon Jan 05 18:39:19.322804 2026] [:error] [pid 5534:tid 5550] [client 4.240.125.246:28401] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aVuU15Ns9XmbR6unB0yhgAAAAAc"]
[Mon Jan 05 18:39:19.721497 2026] [:error] [pid 5534:tid 5563] [client 4.240.125.246:28362] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVuU15Ns9XmbR6unB0yhggAAABQ"]
[Mon Jan 05 18:39:20.074003 2026] [:error] [pid 54081:tid 54094] [client 4.240.125.246:8147] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVuU2FL4jLgtF-b9w4ds0wAAAUo"]
[Mon Jan 05 18:39:21.076752 2026] [:error] [pid 5632:tid 5647] [client 4.240.125.246:8141] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVuU2YN3ZWvlOh-nbt-udgAAAMM"]
[Mon Jan 05 18:39:21.627260 2026] [:error] [pid 5534:tid 5559] [client 4.240.125.246:8106] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aVuU2ZNs9XmbR6unB0yhgwAAABA"]
[Mon Jan 05 18:39:22.909787 2026] [:error] [pid 5534:tid 5545] [client 4.240.125.246:28370] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVuU2pNs9XmbR6unB0yhhQAAAAI"]
[Mon Jan 05 18:39:23.386628 2026] [:error] [pid 5534:tid 5564] [client 4.240.125.246:28316] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVuU25Ns9XmbR6unB0yhhwAAABU"]
[Mon Jan 05 18:39:24.321158 2026] [:error] [pid 5534:tid 5554] [client 4.240.125.246:28307] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVuU3JNs9XmbR6unB0yhiQAAAAs"]
[Mon Jan 05 18:39:25.096055 2026] [:error] [pid 5536:tid 5602] [client 4.240.125.246:28399] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aVuU3QRtMZNG6xI8yDzKrAAAAIU"]
[Mon Jan 05 18:39:25.985045 2026] [:error] [pid 5536:tid 5601] [client 4.240.125.246:28306] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuU3QRtMZNG6xI8yDzKrQAAAIQ"]
[Mon Jan 05 18:39:26.777620 2026] [:error] [pid 5534:tid 5567] [client 4.240.125.246:8068] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuU3pNs9XmbR6unB0yhlQAAABg"]
[Mon Jan 05 18:39:27.701179 2026] [:error] [pid 6680:tid 6701] [client 4.240.125.246:28393] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuU36E58uNoazzTmx3WUAAAARM"]
[Mon Jan 05 18:39:28.483202 2026] [:error] [pid 5535:tid 5592] [client 4.240.125.246:28356] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuU4GnkedMjhVX0PTVasAAAAFY"]
[Mon Jan 05 18:39:29.398839 2026] [:error] [pid 5534:tid 5548] [client 4.240.125.246:8180] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVuU4ZNs9XmbR6unB0yhpAAAAAU"]
[Mon Jan 05 18:39:30.046405 2026] [:error] [pid 5534:tid 5556] [client 4.240.125.246:8150] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVuU4pNs9XmbR6unB0yhpwAAAA0"]
[Mon Jan 05 18:39:31.030644 2026] [:error] [pid 28407:tid 28426] [client 4.240.125.246:8152] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVuU49ercd3ptydUzM0uXgAAAY8"]
[Mon Jan 05 18:39:31.456361 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:8154] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aVuU4wRtMZNG6xI8yDzKrwAAAJU"]
[Mon Jan 05 18:39:32.318366 2026] [:error] [pid 54081:tid 54092] [client 4.240.125.246:8088] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVuU5FL4jLgtF-b9w4ds3QAAAUg"]
[Mon Jan 05 18:39:33.318208 2026] [:error] [pid 5535:tid 5570] [client 4.240.125.246:8145] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVuU5WnkedMjhVX0PTVasQAAAEA"]
[Mon Jan 05 18:39:34.785564 2026] [:error] [pid 5536:tid 5615] [client 4.240.125.246:8104] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVuU5gRtMZNG6xI8yDzKsQAAAJI"]
[Mon Jan 05 18:39:35.629734 2026] [:error] [pid 5534:tid 5558] [client 4.240.125.246:8102] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aVuU55Ns9XmbR6unB0yhuAAAAA8"]
[Mon Jan 05 18:39:36.124012 2026] [:error] [pid 5536:tid 5619] [client 4.240.125.246:8182] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVuU6ARtMZNG6xI8yDzKsgAAAJY"]
[Mon Jan 05 18:39:36.625545 2026] [:error] [pid 28407:tid 28425] [client 4.240.125.246:8184] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVuU6Nercd3ptydUzM0uYQAAAY4"]
[Mon Jan 05 18:39:37.448639 2026] [:error] [pid 5632:tid 5660] [client 4.240.125.246:8158] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVuU6YN3ZWvlOh-nbt-ugAAAANA"]
[Mon Jan 05 18:39:38.186886 2026] [:error] [pid 5632:tid 5667] [client 4.240.125.246:8014] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aVuU6oN3ZWvlOh-nbt-ugQAAANc"]
[Mon Jan 05 18:39:38.644659 2026] [:error] [pid 28407:tid 28421] [client 4.240.125.246:8092] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVuU6tercd3ptydUzM0uZAAAAYo"]
[Mon Jan 05 18:39:38.951681 2026] [:error] [pid 5534:tid 5544] [client 4.240.125.246:28337] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVuU6pNs9XmbR6unB0yhuwAAAAE"]
[Mon Jan 05 18:39:39.271947 2026] [:error] [pid 28407:tid 28435] [client 4.240.125.246:28368] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVuU69ercd3ptydUzM0uawAAAZg"]
[Mon Jan 05 18:39:39.651022 2026] [:error] [pid 5534:tid 5565] [client 4.240.125.246:28358] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aVuU65Ns9XmbR6unB0yhywAAABY"]
[Mon Jan 05 18:39:40.053081 2026] [:error] [pid 5535:tid 5580] [client 4.240.125.246:8090] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVuU7GnkedMjhVX0PTVatAAAAEo"]
[Mon Jan 05 18:39:40.503733 2026] [:error] [pid 54081:tid 54091] [client 4.240.125.246:8122] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVuU7FL4jLgtF-b9w4dtBgAAAUc"]
[Mon Jan 05 18:39:41.215807 2026] [:error] [pid 28407:tid 28425] [client 4.240.125.246:8103] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVuU7dercd3ptydUzM0udwAAAY4"]
[Mon Jan 05 18:39:41.605039 2026] [:error] [pid 6680:tid 6702] [client 4.240.125.246:8186] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aVuU7aE58uNoazzTmx3WVQAAARQ"]
[Mon Jan 05 18:39:42.096022 2026] [:error] [pid 5536:tid 5601] [client 4.240.125.246:8174] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVuU7gRtMZNG6xI8yDzKuwAAAIQ"]
[Mon Jan 05 18:39:42.457858 2026] [:error] [pid 6680:tid 6684] [client 4.240.125.246:8170] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVuU7qE58uNoazzTmx3WVgAAAQI"]
[Mon Jan 05 18:39:42.913616 2026] [:error] [pid 6680:tid 6694] [client 4.240.125.246:28344] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVuU7qE58uNoazzTmx3WVwAAAQw"]
[Mon Jan 05 18:39:43.526820 2026] [:error] [pid 5535:tid 5581] [client 4.240.125.246:28390] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aVuU72nkedMjhVX0PTVatwAAAEs"]
[Mon Jan 05 18:39:44.053075 2026] [:error] [pid 28407:tid 28415] [client 4.240.125.246:8148] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVuU8Nercd3ptydUzM0uegAAAYU"]
[Mon Jan 05 18:39:44.373059 2026] [:error] [pid 28407:tid 28412] [client 4.240.125.246:8077] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVuU8Nercd3ptydUzM0uewAAAYI"]
[Mon Jan 05 18:39:44.788404 2026] [:error] [pid 6680:tid 6696] [client 4.240.125.246:28291] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVuU8KE58uNoazzTmx3WWQAAAQ4"]
[Mon Jan 05 18:39:45.166640 2026] [:error] [pid 6680:tid 6688] [client 4.240.125.246:28351] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uana.php"] [unique_id "aVuU8aE58uNoazzTmx3WWgAAAQY"]
[Mon Jan 05 18:39:45.603336 2026] [:error] [pid 5535:tid 5593] [client 4.240.125.246:28414] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVuU8WnkedMjhVX0PTVauQAAAFc"]
[Mon Jan 05 18:39:45.899656 2026] [:error] [pid 5534:tid 5550] [client 4.240.125.246:8023] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVuU8ZNs9XmbR6unB0yhzwAAAAc"]
[Mon Jan 05 18:39:46.404181 2026] [:error] [pid 54081:tid 54103] [client 4.240.125.246:8072] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVuU8lL4jLgtF-b9w4dtCAAAAVM"]
[Mon Jan 05 18:39:47.225839 2026] [:error] [pid 5632:tid 5645] [client 4.240.125.246:8188] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aVuU84N3ZWvlOh-nbt-upwAAAME"]
[Mon Jan 05 18:39:48.134885 2026] [:error] [pid 6680:tid 6687] [client 4.240.125.246:8096] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVuU9KE58uNoazzTmx3WYAAAAQU"]
[Mon Jan 05 18:39:49.253400 2026] [:error] [pid 5632:tid 5649] [client 4.240.125.246:8178] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVuU9YN3ZWvlOh-nbt-uqgAAAMU"]
[Mon Jan 05 18:39:50.526189 2026] [:error] [pid 28407:tid 28434] [client 4.240.125.246:8066] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVuU9tercd3ptydUzM0ufQAAAZc"]
[Mon Jan 05 18:39:50.955452 2026] [:error] [pid 5534:tid 5566] [client 4.240.125.246:8137] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aVuU9pNs9XmbR6unB0yh0QAAABc"]
[Mon Jan 05 18:39:51.571030 2026] [:error] [pid 5534:tid 5551] [client 4.240.125.246:8151] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVuU95Ns9XmbR6unB0yh0wAAAAg"]
[Mon Jan 05 18:39:52.088497 2026] [:error] [pid 5536:tid 5609] [client 4.240.125.246:8089] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVuU-ARtMZNG6xI8yDzKwQAAAIw"]
[Mon Jan 05 18:39:52.547894 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:8162] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVuU-ARtMZNG6xI8yDzKwgAAAIY"]
[Mon Jan 05 18:39:52.916839 2026] [:error] [pid 5536:tid 5612] [client 4.240.125.246:28334] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aVuU-ARtMZNG6xI8yDzKwwAAAI8"]
[Mon Jan 05 18:39:53.321714 2026] [:error] [pid 5536:tid 5610] [client 4.240.125.246:8185] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVuU-QRtMZNG6xI8yDzKxAAAAI0"]
[Mon Jan 05 18:39:53.788330 2026] [:error] [pid 5632:tid 5662] [client 4.240.125.246:28394] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVuU-YN3ZWvlOh-nbt-urAAAANI"]
[Mon Jan 05 18:39:54.241894 2026] [:error] [pid 6680:tid 6706] [client 4.240.125.246:8175] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVuU-qE58uNoazzTmx3WZQAAARg"]
[Mon Jan 05 18:39:54.752830 2026] [:error] [pid 5534:tid 5557] [client 4.240.125.246:8179] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aVuU-pNs9XmbR6unB0yh1gAAAA4"]
[Mon Jan 05 18:39:55.271452 2026] [:error] [pid 28407:tid 28427] [client 4.240.125.246:28308] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVuU-9ercd3ptydUzM0uhAAAAZA"]
[Mon Jan 05 18:39:55.628201 2026] [:error] [pid 54081:tid 54108] [client 4.240.125.246:28396] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVuU-1L4jLgtF-b9w4dtDQAAAVg"]
[Mon Jan 05 18:39:56.666370 2026] [:error] [pid 5534:tid 5549] [client 4.240.125.246:8039] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVuU_JNs9XmbR6unB0yh2AAAAAY"]
[Mon Jan 05 18:39:57.043784 2026] [:error] [pid 54081:tid 54101] [client 4.240.125.246:8029] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aVuU_VL4jLgtF-b9w4dtDgAAAVE"]
[Mon Jan 05 18:39:57.317335 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:7939] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVuU_QRtMZNG6xI8yDzKxwAAAJU"]
[Mon Jan 05 18:39:57.979403 2026] [:error] [pid 5632:tid 5657] [client 4.240.125.246:28378] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVuU_YN3ZWvlOh-nbt-urwAAAM0"]
[Mon Jan 05 18:39:58.951465 2026] [:error] [pid 5534:tid 5547] [client 4.240.125.246:28324] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVuU_pNs9XmbR6unB0yh2gAAAAQ"]
[Mon Jan 05 18:39:59.459022 2026] [:error] [pid 5534:tid 5558] [client 4.240.125.246:8166] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVuU_5Ns9XmbR6unB0yh2wAAAA8"]
[Mon Jan 05 18:39:59.776638 2026] [:error] [pid 5534:tid 5546] [client 4.240.125.246:28391] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVuU_5Ns9XmbR6unB0yh3AAAAAM"]
[Mon Jan 05 18:40:00.494911 2026] [:error] [pid 54081:tid 54090] [client 4.240.125.246:28333] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVuVAFL4jLgtF-b9w4dtEgAAAUY"]
[Mon Jan 05 18:40:01.085763 2026] [:error] [pid 5536:tid 5597] [client 4.240.125.246:8114] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVuVAQRtMZNG6xI8yDzKyQAAAIA"]
[Mon Jan 05 18:40:01.595850 2026] [:error] [pid 5632:tid 5665] [client 4.240.125.246:8094] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aVuVAYN3ZWvlOh-nbt-usgAAANU"]
[Mon Jan 05 18:40:02.347599 2026] [:error] [pid 5536:tid 5620] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Mon Jan 05 18:40:02.839956 2026] [:error] [pid 5536:tid 5604] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php
[Mon Jan 05 18:40:02.981175 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/pekok.php
[Mon Jan 05 18:40:03.147713 2026] [:error] [pid 5536:tid 5612] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Jan 05 18:40:03.288914 2026] [:error] [pid 5536:tid 5605] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php
[Mon Jan 05 18:40:03.430740 2026] [:error] [pid 5536:tid 5610] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/cart.php
[Mon Jan 05 18:40:03.588002 2026] [:error] [pid 5536:tid 5611] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/compare.php
[Mon Jan 05 18:40:03.728179 2026] [:error] [pid 5536:tid 5613] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Mon Jan 05 18:40:03.867756 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:28350] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Mon Jan 05 18:40:04.004493 2026] [:error] [pid 5536:tid 5621] [client 4.240.125.246:28350] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVuVBARtMZNG6xI8yDzK1gAAAJg"]
[Mon Jan 05 18:40:04.401779 2026] [:error] [pid 5632:tid 5664] [client 4.240.125.246:8105] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVuVBIN3ZWvlOh-nbt-utAAAANQ"]
[Mon Jan 05 18:40:05.077029 2026] [:error] [pid 5536:tid 5616] [client 4.240.125.246:28325] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVuVBQRtMZNG6xI8yDzK1wAAAJM"]
[Mon Jan 05 18:40:05.461811 2026] [:error] [pid 5536:tid 5606] [client 4.240.125.246:8080] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aVuVBQRtMZNG6xI8yDzK2AAAAIk"]
[Mon Jan 05 18:40:06.056985 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:28348] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aVuVBgRtMZNG6xI8yDzK2gAAAJU"]
[Mon Jan 05 18:40:06.790275 2026] [:error] [pid 5534:tid 5548] [client 4.240.125.246:8109] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aVuVBpNs9XmbR6unB0yh3QAAAAU"]
[Mon Jan 05 18:40:09.264006 2026] [:error] [pid 5632:tid 5666] [client 4.240.125.246:8097] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aVuVCYN3ZWvlOh-nbt-utQAAANY"]
[Mon Jan 05 18:40:10.276824 2026] [:error] [pid 5536:tid 5597] [client 4.240.125.246:8034] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atom.php"] [unique_id "aVuVCgRtMZNG6xI8yDzK3QAAAIA"]
[Mon Jan 05 18:40:11.614836 2026] [:error] [pid 5632:tid 5654] [client 4.240.125.246:8065] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aVuVC4N3ZWvlOh-nbt-utwAAAMo"]
[Mon Jan 05 18:40:12.658070 2026] [:error] [pid 6680:tid 6705] [client 4.240.125.246:28340] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aVuVDKE58uNoazzTmx3WagAAARc"]
[Mon Jan 05 18:40:13.489126 2026] [:error] [pid 5536:tid 5619] [client 4.240.125.246:8083] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aVuVDQRtMZNG6xI8yDzK3wAAAJY"]
[Mon Jan 05 18:40:14.442346 2026] [:error] [pid 5536:tid 5600] [client 4.240.125.246:8076] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/case.php"] [unique_id "aVuVDgRtMZNG6xI8yDzK4AAAAIM"]
[Mon Jan 05 18:40:15.748996 2026] [:error] [pid 6680:tid 6691] [client 4.240.125.246:8187] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aVuVD6E58uNoazzTmx3WbQAAAQk"]
[Mon Jan 05 18:40:16.431213 2026] [:error] [pid 5536:tid 5620] [client 4.240.125.246:8112] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aVuVEARtMZNG6xI8yDzK4QAAAJc"]
[Mon Jan 05 18:40:18.103951 2026] [:error] [pid 6680:tid 6686] [client 4.240.125.246:8163] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aVuVEqE58uNoazzTmx3WbwAAAQQ"]
[Mon Jan 05 18:40:20.328368 2026] [:error] [pid 5632:tid 5657] [client 4.240.125.246:8189] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/docs.php"] [unique_id "aVuVFIN3ZWvlOh-nbt-uvAAAAM0"]
[Mon Jan 05 18:40:21.693534 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:8004] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aVuVFQRtMZNG6xI8yDzK6QAAAIs"]
[Mon Jan 05 18:40:22.800769 2026] [:error] [pid 28407:tid 28421] [client 4.240.125.246:8142] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aVuVFtercd3ptydUzM0unwAAAYo"]
[Mon Jan 05 18:40:23.518490 2026] [:error] [pid 5632:tid 5648] [client 4.240.125.246:28338] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aVuVF4N3ZWvlOh-nbt-uvgAAAMQ"]
[Mon Jan 05 18:40:24.052439 2026] [:error] [pid 5632:tid 5653] [client 4.240.125.246:8093] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ios.php"] [unique_id "aVuVGIN3ZWvlOh-nbt-uvwAAAMk"]
[Mon Jan 05 18:40:24.889511 2026] [:error] [pid 5534:tid 5559] [client 4.240.125.246:28300] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVuVGJNs9XmbR6unB0yh6AAAABA"]
[Mon Jan 05 18:40:25.865383 2026] [:error] [pid 5534:tid 5546] [client 4.240.125.246:8084] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVuVGZNs9XmbR6unB0yh6gAAAAM"]
[Mon Jan 05 18:40:28.095899 2026] [:error] [pid 54081:tid 54089] [client 4.240.125.246:8183] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVuVHFL4jLgtF-b9w4dtHQAAAUU"]
[Mon Jan 05 18:40:28.488912 2026] [:error] [pid 5536:tid 5609] [client 4.240.125.246:28379] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aVuVHARtMZNG6xI8yDzK7wAAAIw"]
[Mon Jan 05 18:40:29.056559 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:8013] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVuVHQRtMZNG6xI8yDzK8QAAAIY"]
[Mon Jan 05 18:40:30.068943 2026] [:error] [pid 5534:tid 5550] [client 4.240.125.246:8120] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVuVHpNs9XmbR6unB0yh7AAAAAc"]
[Mon Jan 05 18:40:30.685358 2026] [:error] [pid 5534:tid 5552] [client 4.240.125.246:8017] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVuVHpNs9XmbR6unB0yh7QAAAAk"]
[Mon Jan 05 18:40:31.367159 2026] [:error] [pid 5534:tid 5566] [client 4.240.125.246:8038] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aVuVH5Ns9XmbR6unB0yh7gAAABc"]
[Mon Jan 05 18:40:31.791838 2026] [:error] [pid 5534:tid 5545] [client 4.240.125.246:8044] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVuVH5Ns9XmbR6unB0yh7wAAAAI"]
[Mon Jan 05 18:40:32.281483 2026] [:error] [pid 6680:tid 6688] [client 4.240.125.246:8008] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVuVIKE58uNoazzTmx3WdwAAAQY"]
[Mon Jan 05 18:40:32.718724 2026] [:error] [pid 5632:tid 5664] [client 4.240.125.246:8012] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVuVIIN3ZWvlOh-nbt-uwQAAANQ"]
[Mon Jan 05 18:40:33.420193 2026] [:error] [pid 54081:tid 54100] [client 4.240.125.246:8168] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aVuVIVL4jLgtF-b9w4dtLQAAAVA"]
[Mon Jan 05 18:40:33.783990 2026] [:error] [pid 54081:tid 54096] [client 4.240.125.246:8033] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVuVIVL4jLgtF-b9w4dtLgAAAUw"]
[Mon Jan 05 18:40:34.233177 2026] [:error] [pid 54081:tid 54099] [client 4.240.125.246:8098] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVuVIlL4jLgtF-b9w4dtMQAAAU8"]
[Mon Jan 05 18:40:34.794530 2026] [:error] [pid 28407:tid 28417] [client 4.240.125.246:8099] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVuVItercd3ptydUzM0upgAAAYc"]
[Mon Jan 05 18:40:35.212712 2026] [:error] [pid 5534:tid 5547] [client 4.240.125.246:8030] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aVuVI5Ns9XmbR6unB0yh9QAAAAQ"]
[Mon Jan 05 18:40:35.911343 2026] [:error] [pid 5536:tid 5604] [client 4.240.125.246:28288] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVuVIwRtMZNG6xI8yDzK8wAAAIc"]
[Mon Jan 05 18:40:36.666128 2026] [:error] [pid 5535:tid 5572] [client 4.240.125.246:8000] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVuVJGnkedMjhVX0PTVa3gAAAEI"]
[Mon Jan 05 18:40:37.323726 2026] [:error] [pid 5632:tid 5667] [client 4.240.125.246:8157] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVuVJYN3ZWvlOh-nbt-uxQAAANc"]
[Mon Jan 05 18:40:37.744474 2026] [:error] [pid 6680:tid 6700] [client 4.240.125.246:8016] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aVuVJaE58uNoazzTmx3WegAAARI"]
[Mon Jan 05 18:40:38.450777 2026] [:error] [pid 5632:tid 5649] [client 4.240.125.246:8002] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVuVJoN3ZWvlOh-nbt-uxwAAAMU"]
[Mon Jan 05 18:40:38.848010 2026] [:error] [pid 6680:tid 6703] [client 4.240.125.246:8091] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVuVJqE58uNoazzTmx3WfQAAARU"]
[Mon Jan 05 18:40:39.503370 2026] [:error] [pid 5534:tid 5546] [client 4.240.125.246:8117] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVuVJ5Ns9XmbR6unB0yh9wAAAAM"]
[Mon Jan 05 18:40:39.916362 2026] [:error] [pid 5632:tid 5652] [client 4.240.125.246:8167] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat1.php"] [unique_id "aVuVJ4N3ZWvlOh-nbt-uyAAAAMg"]
[Mon Jan 05 18:40:40.494326 2026] [:error] [pid 5535:tid 5576] [client 4.240.125.246:8071] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVuVKGnkedMjhVX0PTVa5AAAAEY"]
[Mon Jan 05 18:40:41.080305 2026] [:error] [pid 5632:tid 5668] [client 4.240.125.246:8064] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVuVKYN3ZWvlOh-nbt-uygAAANg"]
[Mon Jan 05 18:40:41.717472 2026] [:error] [pid 5632:tid 5647] [client 4.240.125.246:28346] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVuVKYN3ZWvlOh-nbt-uywAAAMM"]
[Mon Jan 05 18:40:42.116032 2026] [:error] [pid 5535:tid 5578] [client 4.240.125.246:28292] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aVuVKmnkedMjhVX0PTVa5wAAAEg"]
[Mon Jan 05 18:40:42.803163 2026] [:error] [pid 5535:tid 5590] [client 4.240.125.246:8021] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVuVKmnkedMjhVX0PTVa6AAAAFQ"]
[Mon Jan 05 18:40:43.401155 2026] [:error] [pid 5632:tid 5653] [client 4.240.125.246:28326] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVuVK4N3ZWvlOh-nbt-uzwAAAMk"]
[Mon Jan 05 18:40:44.558450 2026] [:error] [pid 5632:tid 5665] [client 4.240.125.246:28408] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVuVLIN3ZWvlOh-nbt-u0wAAANU"]
[Mon Jan 05 18:40:46.871094 2026] [:error] [pid 54081:tid 54106] [client 4.240.125.246:8070] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "aVuVLlL4jLgtF-b9w4dtNQAAAVY"]
[Mon Jan 05 18:40:47.865499 2026] [:error] [pid 5535:tid 5581] [client 4.240.125.246:8127] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVuVL2nkedMjhVX0PTVa7QAAAEs"]
[Mon Jan 05 18:40:48.913145 2026] [:error] [pid 5535:tid 5593] [client 4.240.125.246:8107] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVuVMGnkedMjhVX0PTVa7wAAAFc"]
[Mon Jan 05 18:40:49.732305 2026] [:error] [pid 54081:tid 54093] [client 4.240.125.246:8113] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVuVMVL4jLgtF-b9w4dtOAAAAUk"]
[Mon Jan 05 18:40:50.051154 2026] [:error] [pid 54081:tid 54108] [client 4.240.125.246:8079] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aVuVMlL4jLgtF-b9w4dtOQAAAVg"]
[Mon Jan 05 18:40:50.332792 2026] [:error] [pid 5535:tid 5572] [client 4.240.125.246:28329] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuVMmnkedMjhVX0PTVa8QAAAEI"]
[Mon Jan 05 18:40:50.743617 2026] [:error] [pid 5536:tid 5606] [client 4.240.125.246:8074] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuVMgRtMZNG6xI8yDzK9gAAAIk"]
[Mon Jan 05 18:40:51.034308 2026] [:error] [pid 5536:tid 5616] [client 4.240.125.246:8081] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuVMwRtMZNG6xI8yDzK9wAAAJM"]
[Mon Jan 05 18:40:51.403006 2026] [:error] [pid 6680:tid 6684] [client 4.240.125.246:8172] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aVuVM6E58uNoazzTmx3WgwAAAQI"]
[Mon Jan 05 18:40:51.713117 2026] [:error] [pid 54081:tid 54085] [client 4.240.125.246:8132] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVuVM1L4jLgtF-b9w4dtOwAAAUE"]
[Mon Jan 05 18:40:52.054878 2026] [:error] [pid 6680:tid 6696] [client 4.240.125.246:8020] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVuVNKE58uNoazzTmx3WhQAAAQ4"]
[Mon Jan 05 18:40:52.580575 2026] [:error] [pid 5536:tid 5601] [client 4.240.125.246:7937] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVuVNARtMZNG6xI8yDzK-AAAAIQ"]
[Mon Jan 05 18:40:53.081092 2026] [:error] [pid 5536:tid 5602] [client 4.240.125.246:8144] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v.php"] [unique_id "aVuVNQRtMZNG6xI8yDzK-QAAAIU"]
[Mon Jan 05 18:40:53.582597 2026] [:error] [pid 5535:tid 5575] [client 4.240.125.246:8015] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuVNWnkedMjhVX0PTVa8gAAAEU"]
[Mon Jan 05 18:40:54.192661 2026] [:error] [pid 6680:tid 6683] [client 4.240.125.246:7982] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuVNqE58uNoazzTmx3WhwAAAQE"]
[Mon Jan 05 18:40:54.802963 2026] [:error] [pid 6680:tid 6704] [client 4.240.125.246:8010] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuVNqE58uNoazzTmx3WiAAAARY"]
[Mon Jan 05 18:40:55.675352 2026] [:error] [pid 54081:tid 54096] [client 4.240.125.246:28339] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aVuVN1L4jLgtF-b9w4dtPQAAAUw"]
[Mon Jan 05 18:40:56.180529 2026] [:error] [pid 54081:tid 54099] [client 4.240.125.246:7983] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVuVOFL4jLgtF-b9w4dtPwAAAU8"]
[Mon Jan 05 18:40:57.243514 2026] [:error] [pid 28407:tid 28435] [client 4.240.125.246:7998] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVuVOdercd3ptydUzM0uuwAAAZg"]
[Mon Jan 05 18:40:58.034361 2026] [:error] [pid 5534:tid 5545] [client 4.240.125.246:8035] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVuVOpNs9XmbR6unB0yh_wAAAAI"]
[Mon Jan 05 18:40:58.603426 2026] [:error] [pid 5534:tid 5567] [client 4.240.125.246:28349] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vv.php"] [unique_id "aVuVOpNs9XmbR6unB0yiAAAAABg"]
[Mon Jan 05 18:40:59.044509 2026] [:error] [pid 5534:tid 5555] [client 4.240.125.246:7965] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVuVO5Ns9XmbR6unB0yiAgAAAAw"]
[Mon Jan 05 18:40:59.865091 2026] [:error] [pid 6680:tid 6703] [client 4.240.125.246:8101] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVuVO6E58uNoazzTmx3WiwAAARU"]
[Mon Jan 05 18:41:02.058819 2026] [:error] [pid 6680:tid 6691] [client 4.240.125.246:8136] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVuVPqE58uNoazzTmx3WjAAAAQk"]
[Mon Jan 05 18:41:02.940459 2026] [:error] [pid 6680:tid 6686] [client 4.240.125.246:28365] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aVuVPqE58uNoazzTmx3WjQAAAQQ"]
[Mon Jan 05 18:41:04.382594 2026] [:error] [pid 6680:tid 6682] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Jan 05 18:41:05.081776 2026] [:error] [pid 6680:tid 6689] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Mon Jan 05 18:41:05.219075 2026] [:error] [pid 6680:tid 6695] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Jan 05 18:41:05.357874 2026] [:error] [pid 6680:tid 6706] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Jan 05 18:41:05.495942 2026] [:error] [pid 6680:tid 6702] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Jan 05 18:41:05.633455 2026] [:error] [pid 6680:tid 6692] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Jan 05 18:41:05.772823 2026] [:error] [pid 6680:tid 6684] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Jan 05 18:41:05.913453 2026] [:error] [pid 6680:tid 6696] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Jan 05 18:41:06.051002 2026] [:error] [pid 6680:tid 6694] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Jan 05 18:41:06.188842 2026] [:error] [pid 6680:tid 6688] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Mon Jan 05 18:41:06.347917 2026] [:error] [pid 6680:tid 6698] [client 4.240.125.246:8173] File does not exist: /usr/local/apache/htdocs/suspended-page/conflg.php
[Mon Jan 05 18:41:06.482289 2026] [:error] [pid 6680:tid 6683] [client 4.240.125.246:8173] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVuVQqE58uNoazzTmx3WmgAAAQE"]
[Mon Jan 05 18:41:06.893439 2026] [:error] [pid 28407:tid 28425] [client 4.240.125.246:7966] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVuVQtercd3ptydUzM0uxgAAAY4"]
[Mon Jan 05 18:41:07.229235 2026] [:error] [pid 28407:tid 28421] [client 4.240.125.246:7955] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVuVQ9ercd3ptydUzM0uyAAAAYo"]
[Mon Jan 05 18:41:07.909926 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:7943] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aVuVQwRtMZNG6xI8yDzLBAAAAIs"]
[Mon Jan 05 18:41:08.444147 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:8161] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVuVRARtMZNG6xI8yDzLBgAAAJU"]
[Mon Jan 05 18:41:09.231511 2026] [:error] [pid 5536:tid 5600] [client 4.240.125.246:7975] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVuVRQRtMZNG6xI8yDzLBwAAAIM"]
[Mon Jan 05 18:41:10.094674 2026] [:error] [pid 5536:tid 5619] [client 4.240.125.246:28403] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVuVRgRtMZNG6xI8yDzLCgAAAJY"]
[Mon Jan 05 18:41:10.862813 2026] [:error] [pid 5535:tid 5583] [client 4.240.125.246:7946] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asas.php"] [unique_id "aVuVRmnkedMjhVX0PTVa9QAAAE0"]
[Mon Jan 05 18:41:11.559614 2026] [:error] [pid 5632:tid 5666] [client 4.240.125.246:7989] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVuVR4N3ZWvlOh-nbt-u4AAAANY"]
[Mon Jan 05 18:41:12.039719 2026] [:error] [pid 5536:tid 5599] [client 4.240.125.246:28342] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVuVSARtMZNG6xI8yDzLDQAAAII"]
[Mon Jan 05 18:41:12.777602 2026] [:error] [pid 54081:tid 54104] [client 4.240.125.246:7953] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVuVSFL4jLgtF-b9w4dtTAAAAVQ"]
[Mon Jan 05 18:41:13.201328 2026] [:error] [pid 28407:tid 28423] [client 4.240.125.246:8045] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aVuVSdercd3ptydUzM0uzwAAAYw"]
[Mon Jan 05 18:41:13.657083 2026] [:error] [pid 54081:tid 54089] [client 4.240.125.246:8111] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVuVSVL4jLgtF-b9w4dtTgAAAUU"]
[Mon Jan 05 18:41:13.981016 2026] [:error] [pid 5632:tid 5645] [client 4.240.125.246:8025] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVuVSYN3ZWvlOh-nbt-u4wAAAME"]
[Mon Jan 05 18:41:14.497894 2026] [:error] [pid 54081:tid 54091] [client 4.240.125.246:8100] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVuVSlL4jLgtF-b9w4dtUAAAAUc"]
[Mon Jan 05 18:41:15.099532 2026] [:error] [pid 6680:tid 6704] [client 4.240.125.246:8031] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aVuVS6E58uNoazzTmx3WmwAAARY"]
[Mon Jan 05 18:41:15.653181 2026] [:error] [pid 6680:tid 6699] [client 4.240.125.246:8011] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aVuVS6E58uNoazzTmx3WnAAAARE"]
[Mon Jan 05 18:41:15.956104 2026] [:error] [pid 6680:tid 6705] [client 4.240.125.246:8028] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aVuVS6E58uNoazzTmx3WnQAAARc"]
[Mon Jan 05 18:41:16.225439 2026] [:error] [pid 5536:tid 5608] [client 4.240.125.246:28341] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aVuVTARtMZNG6xI8yDzLEgAAAIs"]
[Mon Jan 05 18:41:16.547487 2026] [:error] [pid 5534:tid 5554] [client 4.240.125.246:7987] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aVuVTJNs9XmbR6unB0yiEQAAAAs"]
[Mon Jan 05 18:41:16.903996 2026] [:error] [pid 54081:tid 54088] [client 4.240.125.246:8047] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVuVTFL4jLgtF-b9w4dtUQAAAUQ"]
[Mon Jan 05 18:41:17.187999 2026] [:error] [pid 5536:tid 5618] [client 4.240.125.246:8108] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVuVTQRtMZNG6xI8yDzLFgAAAJU"]
[Mon Jan 05 18:41:17.665981 2026] [:error] [pid 28407:tid 28413] [client 4.240.125.246:8095] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVuVTdercd3ptydUzM0u1AAAAYM"]
[Mon Jan 05 18:41:18.350328 2026] [:error] [pid 54081:tid 54092] [client 4.240.125.246:8003] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxl.php"] [unique_id "aVuVTlL4jLgtF-b9w4dtVAAAAUg"]
[Mon Jan 05 18:41:20.274519 2026] [:error] [pid 28407:tid 28430] [client 4.240.125.246:7888] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aVuVUNercd3ptydUzM0u2AAAAZM"]
[Mon Jan 05 18:41:21.173987 2026] [:error] [pid 5534:tid 5548] [client 4.240.125.246:8041] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aVuVUZNs9XmbR6unB0yiFgAAAAU"]
[Mon Jan 05 18:41:22.633946 2026] [:error] [pid 5536:tid 5605] [client 4.240.125.246:8086] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aVuVUgRtMZNG6xI8yDzLIAAAAIg"]
[Mon Jan 05 18:41:23.339100 2026] [:error] [pid 5536:tid 5598] [client 4.240.125.246:8087] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aVuVUwRtMZNG6xI8yDzLIgAAAIE"]
[Mon Jan 05 18:41:23.681050 2026] [:error] [pid 5535:tid 5578] [client 4.240.125.246:8115] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVuVU2nkedMjhVX0PTVa9wAAAEg"]
[Mon Jan 05 18:41:24.214941 2026] [:error] [pid 54081:tid 54101] [client 4.240.125.246:8007] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVuVVFL4jLgtF-b9w4dtWQAAAVE"]
[Mon Jan 05 18:41:24.533224 2026] [:error] [pid 5536:tid 5604] [client 4.240.125.246:7936] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVuVVARtMZNG6xI8yDzLJQAAAIc"]
[Mon Jan 05 18:41:24.873050 2026] [:error] [pid 54081:tid 54095] [client 4.240.125.246:8050] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aVuVVFL4jLgtF-b9w4dtWgAAAUs"]
[Mon Jan 05 18:41:25.425842 2026] [:error] [pid 5536:tid 5615] [client 4.240.125.246:7991] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVuVVQRtMZNG6xI8yDzLJwAAAJI"]
[Mon Jan 05 18:41:26.079959 2026] [:error] [pid 5534:tid 5549] [client 4.240.125.246:28298] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVuVVpNs9XmbR6unB0yiHwAAAAY"]
[Mon Jan 05 18:41:27.443666 2026] [:error] [pid 28407:tid 28433] [client 4.240.125.246:8053] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVuVV9ercd3ptydUzM0u4AAAAZY"]
[Mon Jan 05 18:41:27.793175 2026] [:error] [pid 28407:tid 28422] [client 4.240.125.246:28289] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js.php"] [unique_id "aVuVV9ercd3ptydUzM0u4QAAAYs"]
[Mon Jan 05 18:41:28.071246 2026] [:error] [pid 28407:tid 28419] [client 4.240.125.246:8075] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aVuVWNercd3ptydUzM0u5AAAAYg"]
[Mon Jan 05 18:41:28.457224 2026] [:error] [pid 5534:tid 5556] [client 4.240.125.246:7942] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aVuVWJNs9XmbR6unB0yiJgAAAA0"]
[Mon Jan 05 18:41:28.742128 2026] [:error] [pid 54081:tid 54090] [client 4.240.125.246:8110] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aVuVWFL4jLgtF-b9w4dtXwAAAUY"]
[Mon Jan 05 18:41:29.030145 2026] [:error] [pid 5534:tid 5553] [client 4.240.125.246:7938] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file1.php"] [unique_id "aVuVWZNs9XmbR6unB0yiKAAAAAo"]
[Mon Jan 05 18:41:29.329756 2026] [:error] [pid 5536:tid 5609] [client 4.240.125.246:7954] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aVuVWQRtMZNG6xI8yDzLLgAAAIw"]
[Mon Jan 05 18:41:29.690649 2026] [:error] [pid 5534:tid 5566] [client 4.240.125.246:8085] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aVuVWZNs9XmbR6unB0yiKgAAABc"]
[Mon Jan 05 18:41:30.006031 2026] [:error] [pid 28407:tid 28424] [client 4.240.125.246:7962] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aVuVWtercd3ptydUzM0u5wAAAY0"]
[Mon Jan 05 18:41:30.359675 2026] [:error] [pid 28407:tid 28417] [client 4.240.125.246:8126] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mar.php"] [unique_id "aVuVWtercd3ptydUzM0u6AAAAYc"]
[Mon Jan 05 18:41:30.725338 2026] [:error] [pid 5534:tid 5544] [client 4.240.125.246:7978] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVuVWpNs9XmbR6unB0yiLQAAAAE"]
[Mon Jan 05 18:41:31.033179 2026] [:error] [pid 5535:tid 5586] [client 4.240.125.246:8128] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVuVW2nkedMjhVX0PTVa_wAAAFA"]
[Mon Jan 05 18:41:31.360253 2026] [:error] [pid 5535:tid 5575] [client 4.240.125.246:8082] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVuVW2nkedMjhVX0PTVbAwAAAEU"]
[Mon Jan 05 18:41:31.727552 2026] [:error] [pid 5536:tid 5615] [client 4.240.125.246:7940] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aVuVWwRtMZNG6xI8yDzLMQAAAJI"]
[Mon Jan 05 18:41:32.344054 2026] [:error] [pid 5535:tid 5590] [client 4.240.125.246:8146] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVuVXGnkedMjhVX0PTVbCwAAAFQ"]
[Mon Jan 05 18:41:32.666870 2026] [:error] [pid 54081:tid 54087] [client 4.240.125.246:8125] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVuVXFL4jLgtF-b9w4dtZQAAAUM"]
[Mon Jan 05 18:41:32.948343 2026] [:error] [pid 5534:tid 5543] [client 4.240.125.246:8009] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVuVXJNs9XmbR6unB0yiMQAAAAA"]
[Mon Jan 05 18:41:33.285615 2026] [:error] [pid 5535:tid 5580] [client 4.240.125.246:7974] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aVuVXWnkedMjhVX0PTVbDAAAAEo"]
[Mon Jan 05 18:41:33.562623 2026] [:error] [pid 5536:tid 5600] [client 4.240.125.246:7963] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVuVXQRtMZNG6xI8yDzLNAAAAIM"]
[Mon Jan 05 18:41:33.880284 2026] [:error] [pid 5632:tid 5668] [client 4.240.125.246:8043] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVuVXYN3ZWvlOh-nbt-u6QAAANg"]
[Mon Jan 05 18:41:34.711921 2026] [:error] [pid 5535:tid 5584] [client 4.240.125.246:8061] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVuVXmnkedMjhVX0PTVbEAAAAE4"]
[Mon Jan 05 18:41:35.581051 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:8006] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aVuVXwRtMZNG6xI8yDzLNQAAAIY"]
[Mon Jan 05 18:41:36.147082 2026] [:error] [pid 5536:tid 5609] [client 4.240.125.246:7898] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVuVYARtMZNG6xI8yDzLNwAAAIw"]
[Mon Jan 05 18:41:36.713903 2026] [:error] [pid 5535:tid 5573] [client 4.240.125.246:8054] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVuVYGnkedMjhVX0PTVbEwAAAEM"]
[Mon Jan 05 18:41:37.173348 2026] [:error] [pid 5535:tid 5589] [client 4.240.125.246:8058] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVuVYWnkedMjhVX0PTVbFAAAAFM"]
[Mon Jan 05 18:41:37.728297 2026] [:error] [pid 5632:tid 5651] [client 4.240.125.246:8118] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aVuVYYN3ZWvlOh-nbt-u6gAAAMc"]
[Mon Jan 05 18:41:38.134252 2026] [:error] [pid 54081:tid 54096] [client 4.240.125.246:8024] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVuVYlL4jLgtF-b9w4dtaAAAAUw"]
[Mon Jan 05 18:41:38.681849 2026] [:error] [pid 54081:tid 54099] [client 4.240.125.246:8032] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVuVYlL4jLgtF-b9w4dtagAAAU8"]
[Mon Jan 05 18:41:39.068833 2026] [:error] [pid 54081:tid 54106] [client 4.240.125.246:8121] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVuVY1L4jLgtF-b9w4dtawAAAVY"]
[Mon Jan 05 18:41:39.408171 2026] [:error] [pid 28407:tid 28428] [client 4.240.125.246:8057] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aVuVY9ercd3ptydUzM0u9gAAAZE"]
[Mon Jan 05 18:41:39.705214 2026] [:error] [pid 5632:tid 5655] [client 4.240.125.246:8018] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVuVY4N3ZWvlOh-nbt-u7AAAAMs"]
[Mon Jan 05 18:41:40.065739 2026] [:error] [pid 6680:tid 6698] [client 4.240.125.246:8036] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVuVZKE58uNoazzTmx3WqgAAARA"]
[Mon Jan 05 18:41:40.488449 2026] [:error] [pid 5632:tid 5666] [client 4.240.125.246:7922] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVuVZIN3ZWvlOh-nbt-u7gAAANY"]
[Mon Jan 05 18:41:40.881485 2026] [:error] [pid 5536:tid 5617] [client 4.240.125.246:28347] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aVuVZARtMZNG6xI8yDzLPAAAAJQ"]
[Mon Jan 05 18:41:41.727601 2026] [:error] [pid 6680:tid 6690] [client 4.240.125.246:7967] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVuVZaE58uNoazzTmx3WrgAAAQg"]
[Mon Jan 05 18:41:42.315145 2026] [:error] [pid 54081:tid 54086] [client 4.240.125.246:7903] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVuVZlL4jLgtF-b9w4dtbAAAAUI"]
[Mon Jan 05 18:41:43.330219 2026] [:error] [pid 5534:tid 5544] [client 4.240.125.246:7947] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVuVZ5Ns9XmbR6unB0yiPgAAAAE"]
[Mon Jan 05 18:41:43.891172 2026] [:error] [pid 6680:tid 6692] [client 4.240.125.246:8026] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aVuVZ6E58uNoazzTmx3WswAAAQo"]
[Mon Jan 05 18:41:44.673974 2026] [:error] [pid 5632:tid 5660] [client 4.240.125.246:8062] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVuVaIN3ZWvlOh-nbt-u9AAAANA"]
[Mon Jan 05 18:41:45.248815 2026] [:error] [pid 5535:tid 5588] [client 4.240.125.246:7949] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVuVaWnkedMjhVX0PTVbHQAAAFI"]
[Mon Jan 05 18:41:45.626487 2026] [:error] [pid 5632:tid 5668] [client 4.240.125.246:7941] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVuVaYN3ZWvlOh-nbt-u9wAAANg"]
[Mon Jan 05 18:41:45.940231 2026] [:error] [pid 5534:tid 5567] [client 4.240.125.246:8124] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aVuVaZNs9XmbR6unB0yiQAAAABg"]
[Mon Jan 05 18:41:46.323083 2026] [:error] [pid 54081:tid 54090] [client 4.240.125.246:7997] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVuValL4jLgtF-b9w4dtbQAAAUY"]
[Mon Jan 05 18:41:46.758565 2026] [:error] [pid 54081:tid 54104] [client 4.240.125.246:8037] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVuValL4jLgtF-b9w4dtbgAAAVQ"]
[Mon Jan 05 18:41:47.239786 2026] [:error] [pid 5536:tid 5611] [client 4.240.125.246:8048] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVuVawRtMZNG6xI8yDzLQwAAAI4"]
[Mon Jan 05 18:41:47.965695 2026] [:error] [pid 5535:tid 5582] [client 4.240.125.246:7952] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aVuVa2nkedMjhVX0PTVbIQAAAEw"]
[Mon Jan 05 18:41:49.253873 2026] [:error] [pid 5534:tid 5561] [client 4.240.125.246:7901] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVuVbZNs9XmbR6unB0yiQwAAABI"]
[Mon Jan 05 18:41:49.733693 2026] [:error] [pid 5535:tid 5578] [client 4.240.125.246:7889] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVuVbWnkedMjhVX0PTVbJwAAAEg"]
[Mon Jan 05 18:41:50.400260 2026] [:error] [pid 54081:tid 54107] [client 4.240.125.246:7986] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVuVblL4jLgtF-b9w4dtcwAAAVc"]
[Mon Jan 05 18:41:50.826454 2026] [:error] [pid 28407:tid 28420] [client 4.240.125.246:8165] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aVuVbtercd3ptydUzM0u_wAAAYk"]
[Mon Jan 05 18:41:51.327164 2026] [:error] [pid 54081:tid 54093] [client 4.240.125.246:7964] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVuVb1L4jLgtF-b9w4dtdAAAAUk"]
[Mon Jan 05 18:41:51.993593 2026] [:error] [pid 5632:tid 5660] [client 4.240.125.246:8027] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVuVb4N3ZWvlOh-nbt-u_QAAANA"]
[Mon Jan 05 18:41:52.451647 2026] [:error] [pid 54081:tid 54100] [client 4.240.125.246:8040] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVuVcFL4jLgtF-b9w4dteQAAAVA"]
[Mon Jan 05 18:41:52.835827 2026] [:error] [pid 54081:tid 54099] [client 4.240.125.246:28365] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aVuVcFL4jLgtF-b9w4dtegAAAU8"]
[Mon Jan 05 18:41:53.473603 2026] [:error] [pid 5535:tid 5591] [client 4.240.125.246:7835] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVuVcWnkedMjhVX0PTVbKwAAAFU"]
[Mon Jan 05 18:41:53.842017 2026] [:error] [pid 5632:tid 5652] [client 4.240.125.246:8177] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVuVcYN3ZWvlOh-nbt-u_wAAAMg"]
[Mon Jan 05 18:41:54.167858 2026] [:error] [pid 54081:tid 54097] [client 4.240.125.246:7984] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVuVclL4jLgtF-b9w4dtfwAAAU0"]
[Mon Jan 05 18:41:54.918752 2026] [:error] [pid 54081:tid 54105] [client 4.240.125.246:7981] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.php"] [unique_id "aVuVclL4jLgtF-b9w4dthQAAAVU"]
[Mon Jan 05 18:41:56.016808 2026] [:error] [pid 54081:tid 54099] [client 4.240.125.246:7914] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVuVdFL4jLgtF-b9w4dtiAAAAU8"]
[Mon Jan 05 18:41:56.489054 2026] [:error] [pid 5632:tid 5661] [client 4.240.125.246:7945] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVuVdIN3ZWvlOh-nbt-vAgAAANE"]
[Mon Jan 05 18:41:57.324850 2026] [:error] [pid 5536:tid 5613] [client 4.240.125.246:7999] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVuVdQRtMZNG6xI8yDzLTgAAAJA"]
[Mon Jan 05 18:41:58.610684 2026] [:error] [pid 5536:tid 5620] [client 4.240.125.246:7951] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aVuVdgRtMZNG6xI8yDzLUgAAAJc"]
[Mon Jan 05 18:41:59.349130 2026] [:error] [pid 54081:tid 54085] [client 4.240.125.246:7944] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVuVd1L4jLgtF-b9w4dtiQAAAUE"]
[Mon Jan 05 18:42:00.266146 2026] [:error] [pid 6680:tid 6702] [client 4.240.125.246:7885] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVuVeKE58uNoazzTmx3WwgAAARQ"]
[Mon Jan 05 18:42:00.907149 2026] [:error] [pid 6680:tid 6685] [client 4.240.125.246:7956] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVuVeKE58uNoazzTmx3WzAAAAQM"]
[Mon Jan 05 18:42:01.247730 2026] [:error] [pid 6680:tid 6692] [client 4.240.125.246:8160] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlu.php"] [unique_id "aVuVeaE58uNoazzTmx3W0QAAAQo"]
[Mon Jan 05 18:42:01.607798 2026] [:error] [pid 28407:tid 28410] [client 4.240.125.246:7970] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVuVedercd3ptydUzM0vCgAAAYA"]
[Mon Jan 05 18:42:02.568358 2026] [:error] [pid 54081:tid 54102] [client 4.240.125.246:7977] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVuVelL4jLgtF-b9w4dtiwAAAVI"]
[Mon Jan 05 18:42:03.343028 2026] [:error] [pid 5536:tid 5615] [client 4.240.125.246:8063] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVuVewRtMZNG6xI8yDzLYAAAAJI"]
[Mon Jan 05 18:42:04.316773 2026] [:error] [pid 5535:tid 5581] [client 4.240.125.246:8046] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rk2.php"] [unique_id "aVuVfGnkedMjhVX0PTVbMAAAAEs"]
[Mon Jan 05 18:42:04.927122 2026] [:error] [pid 54081:tid 54095] [client 4.240.125.246:7973] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aVuVfFL4jLgtF-b9w4dtkAAAAUs"]
[Mon Jan 05 18:42:06.201634 2026] [:error] [pid 54081:tid 54089] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Jan 05 18:42:06.341885 2026] [:error] [pid 54081:tid 54087] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Mon Jan 05 18:42:06.483324 2026] [:error] [pid 54081:tid 54107] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/karak.php
[Mon Jan 05 18:42:06.636449 2026] [:error] [pid 54081:tid 54094] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Mon Jan 05 18:42:06.777316 2026] [:error] [pid 54081:tid 54092] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/406.php
[Mon Jan 05 18:42:06.918239 2026] [:error] [pid 54081:tid 54101] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Mon Jan 05 18:42:07.078497 2026] [:error] [pid 54081:tid 54100] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Jan 05 18:42:07.302192 2026] [:error] [pid 54081:tid 54100] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Jan 05 18:42:07.443717 2026] [:error] [pid 54081:tid 54096] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/zfile.php
[Mon Jan 05 18:42:07.585364 2026] [:error] [pid 54081:tid 54091] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Mon Jan 05 18:42:07.726277 2026] [:error] [pid 54081:tid 54097] [client 4.240.125.246:7816] File does not exist: /usr/local/apache/htdocs/suspended-page/des.php
[Mon Jan 05 18:42:07.865787 2026] [:error] [pid 54081:tid 54108] [client 4.240.125.246:7816] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aVuVf1L4jLgtF-b9w4dtqgAAAVg"]
[Mon Jan 05 18:42:08.821764 2026] [:error] [pid 5632:tid 5647] [client 4.240.125.246:7961] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aVuVgIN3ZWvlOh-nbt-vDwAAAMM"]
[Mon Jan 05 18:42:09.287096 2026] [:error] [pid 28407:tid 28412] [client 4.240.125.246:8056] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aVuVgdercd3ptydUzM0vFAAAAYI"]
[Mon Jan 05 18:42:09.711989 2026] [:error] [pid 5632:tid 5653] [client 4.240.125.246:7971] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aVuVgYN3ZWvlOh-nbt-vEAAAAMk"]
[Mon Jan 05 18:42:10.462973 2026] [:error] [pid 5536:tid 5621] [client 4.240.125.246:7887] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aVuVggRtMZNG6xI8yDzLdwAAAJg"]
[Mon Jan 05 18:42:10.824940 2026] [:error] [pid 28407:tid 28432] [client 4.240.125.246:7949] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aVuVgtercd3ptydUzM0vGgAAAZU"]
[Mon Jan 05 18:42:11.246225 2026] [:error] [pid 5535:tid 5579] [client 4.240.125.246:8022] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aVuVg2nkedMjhVX0PTVbOgAAAEk"]
[Mon Jan 05 18:42:11.701862 2026] [:error] [pid 28407:tid 28413] [client 4.240.125.246:7927] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jlex.php"] [unique_id "aVuVg9ercd3ptydUzM0vHwAAAYM"]
[Mon Jan 05 18:42:12.047742 2026] [:error] [pid 28407:tid 28430] [client 4.240.125.246:7976] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVuVhNercd3ptydUzM0vIAAAAZM"]
[Mon Jan 05 18:42:12.907584 2026] [:error] [pid 6680:tid 6692] [client 4.240.125.246:7873] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVuVhKE58uNoazzTmx3W2QAAAQo"]
[Mon Jan 05 18:42:13.338378 2026] [:error] [pid 5632:tid 5656] [client 4.240.125.246:7809] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVuVhYN3ZWvlOh-nbt-vFAAAAMw"]
[Mon Jan 05 18:42:13.926010 2026] [:error] [pid 5536:tid 5605] [client 4.240.125.246:8019] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aVuVhQRtMZNG6xI8yDzLfwAAAIg"]
[Mon Jan 05 18:42:14.900395 2026] [:error] [pid 28407:tid 28420] [client 4.240.125.246:7884] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aVuVhtercd3ptydUzM0vLQAAAYk"]
[Mon Jan 05 18:42:15.222795 2026] [:error] [pid 28407:tid 28432] [client 4.240.125.246:7908] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aVuVh9ercd3ptydUzM0vLgAAAZU"]
[Mon Jan 05 18:42:15.570622 2026] [:error] [pid 54081:tid 54103] [client 4.240.125.246:7969] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aVuVh1L4jLgtF-b9w4dtugAAAVM"]
[Mon Jan 05 18:42:16.097796 2026] [:error] [pid 28407:tid 28417] [client 4.240.125.246:28296] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aVuViNercd3ptydUzM0vMAAAAYc"]
[Mon Jan 05 18:42:16.411644 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:8158] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVuViARtMZNG6xI8yDzLjQAAAIY"]
[Mon Jan 05 18:42:16.700957 2026] [:error] [pid 5536:tid 5620] [client 4.240.125.246:7957] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVuViARtMZNG6xI8yDzLjgAAAJc"]
[Mon Jan 05 18:42:17.152518 2026] [:error] [pid 28407:tid 28425] [client 4.240.125.246:7881] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVuVidercd3ptydUzM0vNAAAAY4"]
[Mon Jan 05 18:42:17.748982 2026] [:error] [pid 5534:tid 5561] [client 4.240.125.246:7915] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aVuViZNs9XmbR6unB0yiYgAAABI"]
[Mon Jan 05 18:42:19.099820 2026] [:error] [pid 5632:tid 5659] [client 4.240.125.246:7948] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aVuVi4N3ZWvlOh-nbt-vGgAAAM8"]
[Mon Jan 05 18:42:20.793695 2026] [:error] [pid 28407:tid 28423] [client 4.240.125.246:7893] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aVuVjNercd3ptydUzM0vOgAAAYw"]
[Mon Jan 05 18:42:21.230527 2026] [:error] [pid 5632:tid 5649] [client 4.240.125.246:7929] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aVuVjYN3ZWvlOh-nbt-vHwAAAMU"]
[Mon Jan 05 18:42:21.794975 2026] [:error] [pid 5536:tid 5600] [client 4.240.125.246:7959] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpc.php"] [unique_id "aVuVjQRtMZNG6xI8yDzLkQAAAIM"]
[Mon Jan 05 18:42:22.814098 2026] [:error] [pid 5536:tid 5611] [client 4.240.125.246:7988] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aVuVjgRtMZNG6xI8yDzLkwAAAI4"]
[Mon Jan 05 18:42:23.860597 2026] [:error] [pid 6680:tid 6682] [client 4.240.125.246:7906] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aVuVj6E58uNoazzTmx3W6wAAAQA"]
[Mon Jan 05 18:42:25.741765 2026] [:error] [pid 28407:tid 28431] [client 4.240.125.246:7859] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aVuVkdercd3ptydUzM0vQgAAAZQ"]
[Mon Jan 05 18:42:26.416355 2026] [:error] [pid 5534:tid 5550] [client 4.240.125.246:7907] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aVuVkpNs9XmbR6unB0yikwAAAAc"]
[Mon Jan 05 18:42:26.827048 2026] [:error] [pid 28407:tid 28419] [client 4.240.125.246:8055] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aVuVktercd3ptydUzM0vRgAAAYg"]
[Mon Jan 05 18:42:27.535356 2026] [:error] [pid 54081:tid 54104] [client 4.240.125.246:7920] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aVuVk1L4jLgtF-b9w4dtyAAAAVQ"]
[Mon Jan 05 18:42:32.766877 2026] [:error] [pid 5632:tid 5645] [client 4.240.125.246:7926] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aVuVmIN3ZWvlOh-nbt-vJAAAAME"]
[Mon Jan 05 18:42:33.243351 2026] [:error] [pid 54081:tid 54100] [client 4.240.125.246:8089] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mlex.php"] [unique_id "aVuVmVL4jLgtF-b9w4dt3AAAAVA"]
[Mon Jan 05 18:42:33.721432 2026] [:error] [pid 28407:tid 28433] [client 4.240.125.246:7924] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVuVmdercd3ptydUzM0vYAAAAZY"]
[Mon Jan 05 18:42:34.301683 2026] [:error] [pid 6680:tid 6692] [client 4.240.125.246:7993] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVuVmqE58uNoazzTmx3XAgAAAQo"]
[Mon Jan 05 18:42:34.823361 2026] [:error] [pid 5535:tid 5592] [client 4.240.125.246:7812] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVuVmmnkedMjhVX0PTVbTwAAAFY"]
[Mon Jan 05 18:42:35.233523 2026] [:error] [pid 5632:tid 5649] [client 4.240.125.246:8052] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aVuVm4N3ZWvlOh-nbt-vKgAAAMU"]
[Mon Jan 05 18:42:35.832833 2026] [:error] [pid 6680:tid 6689] [client 4.240.125.246:7834] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVuVm6E58uNoazzTmx3XBwAAAQc"]
[Mon Jan 05 18:42:37.013245 2026] [:error] [pid 5534:tid 5561] [client 4.240.125.246:7904] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVuVnZNs9XmbR6unB0yingAAABI"]
[Mon Jan 05 18:42:37.591310 2026] [:error] [pid 5536:tid 5597] [client 4.240.125.246:7875] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVuVnQRtMZNG6xI8yDzLngAAAIA"]
[Mon Jan 05 18:42:38.390376 2026] [:error] [pid 5632:tid 5665] [client 4.240.125.246:28306] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aVuVnoN3ZWvlOh-nbt-vMAAAANU"]
[Mon Jan 05 18:42:39.577479 2026] [:error] [pid 5632:tid 5658] [client 4.240.125.246:8119] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVuVn4N3ZWvlOh-nbt-vMwAAAM4"]
[Mon Jan 05 18:42:40.225691 2026] [:error] [pid 6680:tid 6686] [client 4.240.125.246:8060] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVuVoKE58uNoazzTmx3XDQAAAQQ"]
[Mon Jan 05 18:42:40.709058 2026] [:error] [pid 5536:tid 5603] [client 4.240.125.246:7825] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVuVoARtMZNG6xI8yDzLpAAAAIY"]
[Mon Jan 05 18:42:41.187345 2026] [:error] [pid 28407:tid 28433] [client 4.240.125.246:7972] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mpvloi.php"] [unique_id "aVuVodercd3ptydUzM0vagAAAZY"]
[Mon Jan 05 18:42:41.546783 2026] [:error] [pid 54081:tid 54089] [client 4.240.125.246:7950] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVuVoVL4jLgtF-b9w4dt8gAAAUU"]
[Mon Jan 05 18:42:42.049282 2026] [:error] [pid 5536:tid 5613] [client 4.240.125.246:8123] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVuVogRtMZNG6xI8yDzLqAAAAJA"]
[Mon Jan 05 18:42:42.488832 2026] [:error] [pid 6680:tid 6694] [client 4.240.125.246:8152] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVuVoqE58uNoazzTmx3XEwAAAQw"]
[Mon Jan 05 18:42:42.978679 2026] [:error] [pid 54081:tid 54107] [client 4.240.125.246:8069] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aVuVolL4jLgtF-b9w4dt9gAAAVc"]
[Mon Jan 05 18:42:43.941670 2026] [:error] [pid 5632:tid 5660] [client 4.240.125.246:7814] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVuVo4N3ZWvlOh-nbt-vOAAAANA"]
[Mon Jan 05 18:42:46.420463 2026] [:error] [pid 5536:tid 5598] [client 4.240.125.246:7996] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVuVpgRtMZNG6xI8yDzLrAAAAIE"]
[Mon Jan 05 18:42:49.429192 2026] [:error] [pid 54081:tid 54088] [client 4.240.125.246:7818] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVuVqVL4jLgtF-b9w4dt-wAAAUQ"]
[Mon Jan 05 18:42:50.755086 2026] [:error] [pid 28407:tid 28433] [client 4.240.125.246:7925] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "aVuVqtercd3ptydUzM0veQAAAZY"]
[Mon Jan 05 18:42:51.888335 2026] [:error] [pid 54081:tid 54104] [client 4.240.125.246:7900] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVuVq1L4jLgtF-b9w4duAAAAAVQ"]
[Mon Jan 05 18:42:53.494824 2026] [:error] [pid 28407:tid 28431] [client 4.240.125.246:7879] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVuVrdercd3ptydUzM0vfgAAAZQ"]
[Mon Jan 05 18:42:54.801943 2026] [:error] [pid 5632:tid 5645] [client 4.240.125.246:8051] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVuVroN3ZWvlOh-nbt-vRQAAAME"]
[Mon Jan 05 18:42:56.292626 2026] [:error] [pid 5632:tid 5659] [client 4.240.125.246:7958] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dex.php"] [unique_id "aVuVsIN3ZWvlOh-nbt-vSQAAAM8"]
[Mon Jan 05 18:42:57.137441 2026] [:error] [pid 28407:tid 28412] [client 4.240.125.246:7876] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVuVsdercd3ptydUzM0vgQAAAYI"]
[Mon Jan 05 18:42:58.487417 2026] [:error] [pid 6680:tid 6706] [client 4.240.125.246:7848] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVuVsqE58uNoazzTmx3XKgAAARg"]
[Mon Jan 05 18:42:59.217179 2026] [:error] [pid 54081:tid 54097] [client 4.240.125.246:7980] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVuVs1L4jLgtF-b9w4duAwAAAU0"]
[Mon Jan 05 18:43:00.086194 2026] [:error] [pid 5535:tid 5572] [client 4.240.125.246:7895] [client 4.240.125.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/angelV2.php"] [unique_id "aVuVtGnkedMjhVX0PTVbZAAAAEI"]
[Mon Jan 05 20:04:01.845835 2026] [:error] [pid 6680:tid 6684] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Mon Jan 05 20:04:01.963788 2026] [:error] [pid 6680:tid 6706] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Mon Jan 05 20:04:02.102604 2026] [:error] [pid 6680:tid 6688] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/inwp.php
[Mon Jan 05 20:04:02.222223 2026] [:error] [pid 6680:tid 6695] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Mon Jan 05 20:04:02.496775 2026] [:error] [pid 6680:tid 6685] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Mon Jan 05 20:04:02.614752 2026] [:error] [pid 6680:tid 6691] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Mon Jan 05 20:04:02.858529 2026] [:error] [pid 6680:tid 6696] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Mon Jan 05 20:04:02.992249 2026] [:error] [pid 6680:tid 6699] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Mon Jan 05 20:04:03.208594 2026] [:error] [pid 6680:tid 6701] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Mon Jan 05 20:04:03.539904 2026] [:error] [pid 6680:tid 6703] [client 172.192.68.8:41199] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Mon Jan 05 20:04:03.660216 2026] [:error] [pid 6680:tid 6702] [client 172.192.68.8:41199] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/anz.php"] [unique_id "aVuos6E58uNoazzTmx3tzAAAARQ"]
[Mon Jan 05 20:04:04.734820 2026] [:error] [pid 54081:tid 54087] [client 172.192.68.8:15898] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/anz.php"] [unique_id "aVuotFL4jLgtF-b9w4d_OgAAAUM"]
[Mon Jan 05 20:04:05.086478 2026] [:error] [pid 54081:tid 54094] [client 172.192.68.8:40619] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/anz.php"] [unique_id "aVuotVL4jLgtF-b9w4d_PAAAAUo"]
[Mon Jan 05 20:04:05.753889 2026] [:error] [pid 5535:tid 5573] [client 172.192.68.8:15893] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/anz.php"] [unique_id "aVuotWnkedMjhVX0PTVsqQAAAEM"]
[Mon Jan 05 20:04:07.965354 2026] [:error] [pid 5632:tid 5645] [client 172.192.68.8:15872] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aVuot4N3ZWvlOh-nbt_CGAAAAME"]
[Mon Jan 05 20:04:11.000366 2026] [:error] [pid 5536:tid 5615] [client 172.192.68.8:41172] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aVuougRtMZNG6xI8yDzlAAAAAJI"]
[Mon Jan 05 20:04:12.927360 2026] [:error] [pid 5632:tid 5652] [client 172.192.68.8:40578] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aVuovIN3ZWvlOh-nbt_CHAAAAMg"]
[Mon Jan 05 20:04:13.627249 2026] [:error] [pid 5536:tid 5605] [client 172.192.68.8:15896] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aVuovQRtMZNG6xI8yDzlAwAAAIg"]
[Mon Jan 05 20:04:14.679818 2026] [:error] [pid 5536:tid 5610] [client 172.192.68.8:40576] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/motu.php"] [unique_id "aVuovgRtMZNG6xI8yDzlCAAAAI0"]
[Mon Jan 05 20:04:16.851980 2026] [:error] [pid 54081:tid 54092] [client 172.192.68.8:40618] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/motu.php"] [unique_id "aVuowFL4jLgtF-b9w4d_SQAAAUg"]
[Mon Jan 05 20:04:18.273029 2026] [:error] [pid 6680:tid 6694] [client 172.192.68.8:40614] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/motu.php"] [unique_id "aVuowqE58uNoazzTmx3tzgAAAQw"]
[Mon Jan 05 20:04:18.733540 2026] [:error] [pid 28407:tid 28424] [client 172.192.68.8:40596] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/motu.php"] [unique_id "aVuowtercd3ptydUzM1BpgAAAY0"]
[Mon Jan 05 20:04:20.445394 2026] [:error] [pid 28407:tid 28431] [client 172.192.68.8:15879] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file66.php"] [unique_id "aVuoxNercd3ptydUzM1BqwAAAZQ"]
[Mon Jan 05 20:04:21.118958 2026] [:error] [pid 5632:tid 5647] [client 172.192.68.8:15876] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file66.php"] [unique_id "aVuoxYN3ZWvlOh-nbt_CIAAAAMM"]
[Mon Jan 05 20:04:22.184109 2026] [:error] [pid 5535:tid 5571] [client 172.192.68.8:40635] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file66.php"] [unique_id "aVuoxmnkedMjhVX0PTVstAAAAEE"]
[Mon Jan 05 20:04:24.248416 2026] [:error] [pid 54081:tid 54107] [client 172.192.68.8:40210] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/file66.php"] [unique_id "aVuoyFL4jLgtF-b9w4d_UgAAAVc"]
[Mon Jan 05 20:04:25.426475 2026] [:error] [pid 5534:tid 5558] [client 172.192.68.8:41190] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kure.php"] [unique_id "aVuoyZNs9XmbR6unB0zBOQAAAA8"]
[Mon Jan 05 20:04:28.251887 2026] [:error] [pid 5534:tid 5553] [client 172.192.68.8:40211] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kure.php"] [unique_id "aVuozJNs9XmbR6unB0zBPwAAAAo"]
[Mon Jan 05 20:04:29.184058 2026] [:error] [pid 5632:tid 5661] [client 172.192.68.8:41154] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kure.php"] [unique_id "aVuozYN3ZWvlOh-nbt_CIwAAANE"]
[Mon Jan 05 20:04:29.942238 2026] [:error] [pid 5535:tid 5584] [client 172.192.68.8:40621] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kure.php"] [unique_id "aVuozWnkedMjhVX0PTVstwAAAE4"]
[Mon Jan 05 20:04:30.514261 2026] [:error] [pid 5534:tid 5547] [client 172.192.68.8:41185] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gaje.php"] [unique_id "aVuozpNs9XmbR6unB0zBRwAAAAQ"]
[Mon Jan 05 20:04:31.556826 2026] [:error] [pid 5632:tid 5662] [client 172.192.68.8:40585] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gaje.php"] [unique_id "aVuoz4N3ZWvlOh-nbt_CKAAAANI"]
[Mon Jan 05 20:04:32.315822 2026] [:error] [pid 6680:tid 6706] [client 172.192.68.8:15886] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gaje.php"] [unique_id "aVuo0KE58uNoazzTmx3t0gAAARg"]
[Mon Jan 05 20:04:32.649182 2026] [:error] [pid 6680:tid 6688] [client 172.192.68.8:41160] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gaje.php"] [unique_id "aVuo0KE58uNoazzTmx3t0wAAAQY"]
[Mon Jan 05 20:04:33.523031 2026] [:error] [pid 28407:tid 28424] [client 172.192.68.8:40586] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blnux.php"] [unique_id "aVuo0dercd3ptydUzM1BtQAAAY0"]
[Mon Jan 05 20:04:38.862205 2026] [:error] [pid 5536:tid 5605] [client 172.192.68.8:15907] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blnux.php"] [unique_id "aVuo1gRtMZNG6xI8yDzlEwAAAIg"]
[Mon Jan 05 20:04:40.368771 2026] [:error] [pid 5535:tid 5594] [client 172.192.68.8:40624] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blnux.php"] [unique_id "aVuo2GnkedMjhVX0PTVswAAAAFg"]
[Mon Jan 05 20:04:41.321650 2026] [:error] [pid 54081:tid 54106] [client 172.192.68.8:15913] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/blnux.php"] [unique_id "aVuo2VL4jLgtF-b9w4d_WAAAAVY"]
[Mon Jan 05 20:04:42.609852 2026] [:error] [pid 5535:tid 5583] [client 172.192.68.8:15904] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fgd.php"] [unique_id "aVuo2mnkedMjhVX0PTVswgAAAE0"]
[Mon Jan 05 20:04:43.488251 2026] [:error] [pid 28407:tid 28416] [client 172.192.68.8:40622] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fgd.php"] [unique_id "aVuo29ercd3ptydUzM1BuAAAAYY"]
[Mon Jan 05 20:04:44.975420 2026] [:error] [pid 5632:tid 5664] [client 172.192.68.8:15925] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fgd.php"] [unique_id "aVuo3IN3ZWvlOh-nbt_COwAAANQ"]
[Mon Jan 05 20:04:48.660843 2026] [:error] [pid 5534:tid 5546] [client 172.192.68.8:41208] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fgd.php"] [unique_id "aVuo4JNs9XmbR6unB0zBaQAAAAM"]
[Mon Jan 05 20:04:49.844795 2026] [:error] [pid 54081:tid 54094] [client 172.192.68.8:15916] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/msy.php"] [unique_id "aVuo4VL4jLgtF-b9w4d_XAAAAUo"]
[Mon Jan 05 20:04:51.123889 2026] [:error] [pid 54081:tid 54089] [client 172.192.68.8:40835] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/msy.php"] [unique_id "aVuo41L4jLgtF-b9w4d_XQAAAUU"]
[Mon Jan 05 20:04:52.043308 2026] [:error] [pid 6680:tid 6686] [client 172.192.68.8:40204] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/msy.php"] [unique_id "aVuo5KE58uNoazzTmx3t4gAAAQQ"]
[Mon Jan 05 20:04:53.904806 2026] [:error] [pid 5535:tid 5574] [client 172.192.68.8:40247] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/msy.php"] [unique_id "aVuo5WnkedMjhVX0PTVsyAAAAEQ"]
[Mon Jan 05 20:04:55.087653 2026] [:error] [pid 5535:tid 5580] [client 172.192.68.8:41154] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alog.php"] [unique_id "aVuo52nkedMjhVX0PTVsywAAAEo"]
[Mon Jan 05 20:04:56.971012 2026] [:error] [pid 5536:tid 5618] [client 172.192.68.8:40592] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alog.php"] [unique_id "aVuo6ARtMZNG6xI8yDzlXQAAAJU"]
[Mon Jan 05 20:04:58.759847 2026] [:error] [pid 6680:tid 6688] [client 172.192.68.8:40594] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alog.php"] [unique_id "aVuo6qE58uNoazzTmx3t5gAAAQY"]
[Mon Jan 05 20:05:01.086661 2026] [:error] [pid 5632:tid 5657] [client 172.192.68.8:15924] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/alog.php"] [unique_id "aVuo7YN3ZWvlOh-nbt_CVwAAAM0"]
[Mon Jan 05 20:05:02.566448 2026] [:error] [pid 54081:tid 54107] [client 172.192.68.8:41184] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/X7T6.php"] [unique_id "aVuo7lL4jLgtF-b9w4d_YgAAAVc"]
[Mon Jan 05 20:05:03.999984 2026] [:error] [pid 54081:tid 54098] [client 172.192.68.8:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/X7T6.php
[Mon Jan 05 20:05:04.117614 2026] [:error] [pid 54081:tid 54102] [client 172.192.68.8:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Mon Jan 05 20:05:04.239412 2026] [:error] [pid 54081:tid 54101] [client 172.192.68.8:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/Rk41.php
[Mon Jan 05 20:05:04.358363 2026] [:error] [pid 54081:tid 54108] [client 172.192.68.8:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/ztv.php
[Mon Jan 05 20:05:04.477424 2026] [:error] [pid 54081:tid 54105] [client 172.192.68.8:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/sef.php
[Mon Jan 05 20:05:04.712496 2026] [:error] [pid 54081:tid 54088] [client 172.192.68.8:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Mon Jan 05 21:48:19.891403 2026] [:error] [pid 54081:tid 54095] [client 68.218.74.211:17475] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Mon Jan 05 21:48:19.910035 2026] [:error] [pid 54081:tid 54084] [client 68.218.74.211:17475] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Mon Jan 05 21:48:19.969753 2026] [:error] [pid 54081:tid 54086] [client 68.218.74.211:17475] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Mon Jan 05 21:48:19.988512 2026] [:error] [pid 54081:tid 54103] [client 68.218.74.211:17475] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon Jan 05 22:58:23.001839 2026] [:error] [pid 6680:tid 6685] [client 111.172.249.49:54312] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aVvRjqE58uNoazzTmx0lgQAAAQM"]
[Tue Jan 06 08:51:09.363092 2026] [:error] [pid 44904:tid 44944] [client 43.153.58.28:55186] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVxcfTtieuI1BJEZcveP-QAAAEM"]
[Tue Jan 06 11:30:58.398403 2026] [:error] [pid 35140:tid 35144] [client 157.230.18.173:54255] [client 157.230.18.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.18.173, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aVyB8noQaIDFMbT-XMxW8gAAAQI"]
[Tue Jan 06 11:30:58.402289 2026] [:error] [pid 35140:tid 35144] [client 157.230.18.173:54255] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Jan 06 13:15:03.254879 2026] [:error] [pid 44905:tid 44974] [client 45.148.10.250:37922] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aVyaV7u7ufwWVst9EAt0zgAAAIY"]
[Tue Jan 06 14:57:40.593394 2026] [:error] [pid 44905:tid 44973] [client 3.83.129.12:43560] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aVyyZLu7ufwWVst9EAuL4gAAAIU"]
[Tue Jan 06 16:50:15.168706 2026] [:error] [pid 35140:tid 35154] [client 43.130.74.193:46234] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aVzMx3oQaIDFMbT-XMyYhAAAAQw"]
[Tue Jan 06 18:38:28.965967 2026] [:error] [pid 44904:tid 44946] [client 3.83.129.12:45434] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aVzmJDtieuI1BJEZcvcPzgAAAEU"]
[Tue Jan 06 19:04:28.614665 2026] [:error] [pid 44905:tid 44985] [client 180.195.71.129:12894] [client 180.195.71.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.71.129, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aVzsPLu7ufwWVst9EAu_TAAAAJE"]
[Tue Jan 06 19:04:28.619714 2026] [:error] [pid 44905:tid 44985] [client 180.195.71.129:12894] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 06 19:44:04.575735 2026] [:error] [pid 45012:tid 45021] [client 155.117.98.117:64001] [client 155.117.98.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/e/data/js/ajax.js"] [unique_id "aVz1hBaMAxCuju1d0ubj-QAAAMc"]
[Tue Jan 06 20:14:17.860444 2026] [:error] [pid 44904:tid 44957] [client 111.68.9.66:59171] [client 111.68.9.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/js/welcome.min.js"] [unique_id "aVz8mTtieuI1BJEZcvcoDgAAAFA"]
[Tue Jan 06 23:19:40.568249 2026] [:error] [pid 44904:tid 44957] [client 4.247.167.136:4598] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDDtieuI1BJEZcvdZqwAAAFA"]
[Tue Jan 06 23:19:43.356057 2026] [:error] [pid 44904:tid 44949] [client 4.247.167.136:4590] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDztieuI1BJEZcvdZwgAAAEg"]
[Tue Jan 06 23:19:51.181902 2026] [:error] [pid 45012:tid 45032] [client 4.247.167.136:4811] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFxaMAxCuju1d0uYsowAAANI"]
[Tue Jan 06 23:19:52.974743 2026] [:error] [pid 35140:tid 35157] [client 4.247.167.136:4891] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oGHoQaIDFMbT-XMz2kQAAAQ8"]
[Wed Jan 07 00:44:34.823803 2026] [:error] [pid 44904:tid 44965] [client 1.15.52.154:50846] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV078jtieuI1BJEZcvd0xwAAAFg"]
[Wed Jan 07 00:51:02.785419 2026] [:error] [pid 44904:tid 44960] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Wed Jan 07 00:51:02.904387 2026] [:error] [pid 44904:tid 44945] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Wed Jan 07 00:51:03.040134 2026] [:error] [pid 44904:tid 44948] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/inwp.php
[Wed Jan 07 00:51:03.537161 2026] [:error] [pid 44904:tid 44952] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Wed Jan 07 00:51:03.951939 2026] [:error] [pid 44904:tid 44954] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Wed Jan 07 00:51:04.094151 2026] [:error] [pid 44904:tid 44942] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Wed Jan 07 00:51:04.540815 2026] [:error] [pid 44904:tid 44943] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Wed Jan 07 00:51:04.807026 2026] [:error] [pid 44904:tid 44958] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Wed Jan 07 00:51:04.924138 2026] [:error] [pid 44904:tid 44956] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Wed Jan 07 00:51:05.045276 2026] [:error] [pid 44904:tid 44950] [client 4.241.228.4:18442] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Wed Jan 07 00:51:05.175157 2026] [:error] [pid 44904:tid 44961] [client 4.241.228.4:18442] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aV09eTtieuI1BJEZcvd3CwAAAFQ"]
[Wed Jan 07 00:51:09.816047 2026] [:error] [pid 45959:tid 45973] [client 4.241.228.4:18515] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aV09fVajdn8P3hjgMYxETwAAAUs"]
[Wed Jan 07 00:51:14.863807 2026] [:error] [pid 35140:tid 35165] [client 4.241.228.4:18528] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aV09gnoQaIDFMbT-XMwSzAAAARc"]
[Wed Jan 07 00:51:16.975412 2026] [:error] [pid 35140:tid 35160] [client 4.241.228.4:18537] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/anz.php"] [unique_id "aV09hHoQaIDFMbT-XMwSzwAAARI"]
[Wed Jan 07 00:51:17.660297 2026] [:error] [pid 45012:tid 45038] [client 4.241.228.4:18510] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aV09hRaMAxCuju1d0uZQBAAAANg"]
[Wed Jan 07 00:51:18.078562 2026] [:error] [pid 35140:tid 35145] [client 4.241.228.4:18542] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aV09hnoQaIDFMbT-XMwS0QAAAQM"]
[Wed Jan 07 00:51:19.236305 2026] [:error] [pid 45959:tid 45967] [client 4.241.228.4:18519] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aV09h1ajdn8P3hjgMYxEXwAAAUU"]
[Wed Jan 07 00:51:19.731074 2026] [:error] [pid 45959:tid 45975] [client 4.241.228.4:18443] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnn_.php"] [unique_id "aV09h1ajdn8P3hjgMYxEYAAAAU0"]
[Wed Jan 07 00:51:20.223814 2026] [:error] [pid 45959:tid 45986] [client 4.241.228.4:18502] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aV09iFajdn8P3hjgMYxEZAAAAVg"]
[Wed Jan 07 00:51:20.610939 2026] [:error] [pid 45959:tid 45980] [client 4.241.228.4:18499] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aV09iFajdn8P3hjgMYxEZgAAAVI"]
[Wed Jan 07 00:51:21.832991 2026] [:error] [pid 45959:tid 45966] [client 4.241.228.4:18447] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aV09iVajdn8P3hjgMYxEawAAAUQ"]
[Wed Jan 07 00:51:26.556082 2026] [:error] [pid 44904:tid 44965] [client 4.241.228.4:18505] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aV09jjtieuI1BJEZcvd3OAAAAFg"]
[Wed Jan 07 00:51:32.884456 2026] [:error] [pid 45959:tid 45968] [client 4.241.228.4:18529] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aV09lFajdn8P3hjgMYxEeQAAAUY"]
[Wed Jan 07 00:51:35.960203 2026] [:error] [pid 45959:tid 45970] [client 4.241.228.4:18521] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aV09l1ajdn8P3hjgMYxEfwAAAUg"]
[Wed Jan 07 00:51:37.310968 2026] [:error] [pid 44905:tid 44971] [client 4.241.228.4:18500] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aV09mbu7ufwWVst9EAstnAAAAIM"]
[Wed Jan 07 00:51:37.962626 2026] [:error] [pid 44904:tid 44960] [client 4.241.228.4:18450] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file66.php"] [unique_id "aV09mTtieuI1BJEZcvd3QwAAAFM"]
[Wed Jan 07 00:51:39.804310 2026] [:error] [pid 44904:tid 44947] [client 4.241.228.4:18509] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kure.php"] [unique_id "aV09mztieuI1BJEZcvd3SAAAAEY"]
[Wed Jan 07 00:51:40.943437 2026] [:error] [pid 44903:tid 44919] [client 4.241.228.4:18440] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kure.php"] [unique_id "aV09nNhHqjs38zbkQPBcVQAAAAw"]
[Wed Jan 07 00:51:41.595779 2026] [:error] [pid 35140:tid 35142] [client 4.241.228.4:18520] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kure.php"] [unique_id "aV09nXoQaIDFMbT-XMwS-AAAAQA"]
[Wed Jan 07 00:51:42.188921 2026] [:error] [pid 44903:tid 44928] [client 4.241.228.4:18449] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kure.php"] [unique_id "aV09nthHqjs38zbkQPBcVgAAABU"]
[Wed Jan 07 00:51:42.864349 2026] [:error] [pid 44905:tid 44973] [client 4.241.228.4:18513] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaje.php"] [unique_id "aV09nru7ufwWVst9EAstoAAAAIU"]
[Wed Jan 07 00:51:43.778752 2026] [:error] [pid 45959:tid 45972] [client 4.241.228.4:18436] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaje.php"] [unique_id "aV09n1ajdn8P3hjgMYxEiwAAAUo"]
[Wed Jan 07 00:51:45.018110 2026] [:error] [pid 44905:tid 44972] [client 4.241.228.4:18530] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaje.php"] [unique_id "aV09obu7ufwWVst9EAstpgAAAIQ"]
[Wed Jan 07 00:51:45.462489 2026] [:error] [pid 35140:tid 35159] [client 4.241.228.4:18444] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gaje.php"] [unique_id "aV09oXoQaIDFMbT-XMwS-wAAARE"]
[Wed Jan 07 00:51:45.973932 2026] [:error] [pid 35140:tid 35153] [client 4.241.228.4:18512] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blnux.php"] [unique_id "aV09oXoQaIDFMbT-XMwS_AAAAQs"]
[Wed Jan 07 00:51:47.717207 2026] [:error] [pid 35140:tid 35164] [client 4.241.228.4:18527] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blnux.php"] [unique_id "aV09o3oQaIDFMbT-XMwS_gAAARY"]
[Wed Jan 07 00:51:48.537628 2026] [:error] [pid 35140:tid 35152] [client 4.241.228.4:13280] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blnux.php"] [unique_id "aV09pHoQaIDFMbT-XMwS_wAAAQo"]
[Wed Jan 07 00:51:51.419396 2026] [:error] [pid 44905:tid 44978] [client 4.241.228.4:18550] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blnux.php"] [unique_id "aV09p7u7ufwWVst9EAstrwAAAIo"]
[Wed Jan 07 00:51:52.632316 2026] [:error] [pid 44904:tid 44946] [client 4.241.228.4:18438] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fgd.php"] [unique_id "aV09qDtieuI1BJEZcvd3XgAAAEU"]
[Wed Jan 07 00:51:53.169014 2026] [:error] [pid 45959:tid 45964] [client 4.241.228.4:18531] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fgd.php"] [unique_id "aV09qVajdn8P3hjgMYxEswAAAUI"]
[Wed Jan 07 00:51:53.960560 2026] [:error] [pid 44904:tid 44943] [client 4.241.228.4:18485] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fgd.php"] [unique_id "aV09qTtieuI1BJEZcvd3YAAAAEI"]
[Wed Jan 07 00:51:54.823406 2026] [:error] [pid 44903:tid 44927] [client 4.241.228.4:18465] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fgd.php"] [unique_id "aV09qthHqjs38zbkQPBcdAAAABQ"]
[Wed Jan 07 00:51:55.901605 2026] [:error] [pid 44903:tid 44918] [client 4.241.228.4:18545] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/msy.php"] [unique_id "aV09q9hHqjs38zbkQPBcdgAAAAs"]
[Wed Jan 07 00:51:57.323710 2026] [:error] [pid 44903:tid 44914] [client 4.241.228.4:18543] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/msy.php"] [unique_id "aV09rdhHqjs38zbkQPBceAAAAAc"]
[Wed Jan 07 00:51:57.714031 2026] [:error] [pid 35140:tid 35160] [client 4.241.228.4:18501] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/msy.php"] [unique_id "aV09rXoQaIDFMbT-XMwTCgAAARI"]
[Wed Jan 07 00:51:58.254792 2026] [:error] [pid 44904:tid 44961] [client 4.241.228.4:18439] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/msy.php"] [unique_id "aV09rjtieuI1BJEZcvd3bQAAAFQ"]
[Wed Jan 07 00:51:58.908980 2026] [:error] [pid 44905:tid 44984] [client 4.241.228.4:18460] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alog.php"] [unique_id "aV09rru7ufwWVst9EAstwQAAAJA"]
[Wed Jan 07 00:51:59.723020 2026] [:error] [pid 44903:tid 44920] [client 4.241.228.4:18448] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alog.php"] [unique_id "aV09r9hHqjs38zbkQPBcfQAAAA0"]
[Wed Jan 07 00:52:00.584044 2026] [:error] [pid 44905:tid 44981] [client 4.241.228.4:13275] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alog.php"] [unique_id "aV09sLu7ufwWVst9EAstwwAAAI0"]
[Wed Jan 07 00:52:01.523731 2026] [:error] [pid 45959:tid 45974] [client 4.241.228.4:18514] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alog.php"] [unique_id "aV09sVajdn8P3hjgMYxEwAAAAUw"]
[Wed Jan 07 00:52:03.652223 2026] [:error] [pid 45959:tid 45984] [client 4.241.228.4:18457] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7T6.php"] [unique_id "aV09s1ajdn8P3hjgMYxExQAAAVY"]
[Wed Jan 07 00:52:04.418210 2026] [:error] [pid 44905:tid 44971] [client 4.241.228.4:18434] [client 4.241.228.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7T6.php"] [unique_id "aV09tLu7ufwWVst9EAstzQAAAIM"]
[Wed Jan 07 00:52:05.536329 2026] [:error] [pid 35140:tid 35163] [client 4.241.228.4:18526] File does not exist: /usr/local/apache/htdocs/suspended-page/X7T6.php
[Wed Jan 07 00:52:05.654167 2026] [:error] [pid 35140:tid 35145] [client 4.241.228.4:18526] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Wed Jan 07 00:52:05.773031 2026] [:error] [pid 35140:tid 35150] [client 4.241.228.4:18526] File does not exist: /usr/local/apache/htdocs/suspended-page/Rk41.php
[Wed Jan 07 00:52:05.897435 2026] [:error] [pid 35140:tid 35165] [client 4.241.228.4:18526] File does not exist: /usr/local/apache/htdocs/suspended-page/ztv.php
[Wed Jan 07 00:52:06.023182 2026] [:error] [pid 35140:tid 35154] [client 4.241.228.4:18526] File does not exist: /usr/local/apache/htdocs/suspended-page/sef.php
[Wed Jan 07 00:52:06.144472 2026] [:error] [pid 35140:tid 35144] [client 4.241.228.4:18526] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Wed Jan 07 01:32:09.233923 2026] [:error] [pid 44904:tid 44958] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Wed Jan 07 01:32:09.362151 2026] [:error] [pid 44904:tid 44950] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Wed Jan 07 01:32:09.482372 2026] [:error] [pid 44904:tid 44954] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Wed Jan 07 01:32:09.602792 2026] [:error] [pid 44904:tid 44964] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Wed Jan 07 01:32:09.723646 2026] [:error] [pid 44904:tid 44942] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Jan 07 01:32:10.043738 2026] [:error] [pid 44904:tid 44949] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Jan 07 01:32:10.189030 2026] [:error] [pid 44904:tid 44945] [client 52.175.70.127:6191] File does not exist: /usr/local/apache/htdocs/suspended-page/ADMIN.php
[Wed Jan 07 06:25:54.148948 2026] [:error] [pid 6572:tid 6651] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Wed Jan 07 06:25:54.303935 2026] [:error] [pid 6572:tid 6662] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Jan 07 06:25:54.431091 2026] [:error] [pid 6572:tid 6648] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Jan 07 06:25:54.574925 2026] [:error] [pid 6572:tid 6664] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Jan 07 06:25:54.695205 2026] [:error] [pid 6572:tid 6650] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/an8.php
[Wed Jan 07 06:25:54.819635 2026] [:error] [pid 6572:tid 6640] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed Jan 07 06:25:54.942326 2026] [:error] [pid 6572:tid 6645] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Jan 07 06:25:55.062558 2026] [:error] [pid 6572:tid 6646] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Wed Jan 07 06:25:55.201074 2026] [:error] [pid 6572:tid 6659] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Wed Jan 07 06:25:55.404833 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:51850] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Wed Jan 07 06:25:55.580696 2026] [:error] [pid 6572:tid 6660] [client 20.239.71.136:51850] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xrp.php"] [unique_id "aV2L83VZKKyUNbqWyYI_6QAAAJQ"]
[Wed Jan 07 06:25:55.956032 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:39933] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xrp.php"] [unique_id "aV2L84jhb00oxKSD4leqVgAAARE"]
[Wed Jan 07 06:25:56.622797 2026] [:error] [pid 51200:tid 51252] [client 20.239.71.136:1379] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xrp.php"] [unique_id "aV2L9Ijhb00oxKSD4leqVwAAAQQ"]
[Wed Jan 07 06:25:57.245757 2026] [:error] [pid 6677:tid 6704] [client 20.239.71.136:51849] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xrp.php"] [unique_id "aV2L9X1cbekSFYxHbiMlLgAAAMw"]
[Wed Jan 07 06:25:57.840842 2026] [:error] [pid 6677:tid 6700] [client 20.239.71.136:3311] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aV2L9X1cbekSFYxHbiMlLwAAAMg"]
[Wed Jan 07 06:25:58.727018 2026] [:error] [pid 6570:tid 6592] [client 20.239.71.136:18055] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aV2L9pmjKDvKV_Af0erxjgAAAAY"]
[Wed Jan 07 06:25:59.152999 2026] [:error] [pid 6570:tid 6598] [client 20.239.71.136:23069] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aV2L95mjKDvKV_Af0erxjwAAAAw"]
[Wed Jan 07 06:26:00.058161 2026] [:error] [pid 6677:tid 6696] [client 20.239.71.136:1394] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aV2L-H1cbekSFYxHbiMlMwAAAMQ"]
[Wed Jan 07 06:26:00.755069 2026] [:error] [pid 6571:tid 6613] [client 20.239.71.136:23424] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aV2L-A_rJpa_Vt6ZE1D3HgAAAEA"]
[Wed Jan 07 06:26:01.322700 2026] [:error] [pid 6677:tid 6699] [client 20.239.71.136:1675] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aV2L-X1cbekSFYxHbiMlNAAAAMc"]
[Wed Jan 07 06:26:01.731847 2026] [:error] [pid 6677:tid 6692] [client 20.239.71.136:18109] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aV2L-X1cbekSFYxHbiMlNQAAAMA"]
[Wed Jan 07 06:26:02.335814 2026] [:error] [pid 51200:tid 51248] [client 20.239.71.136:18071] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws28.php"] [unique_id "aV2L-ojhb00oxKSD4leqXgAAAQA"]
[Wed Jan 07 06:26:02.985356 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:3268] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aV2L-ojhb00oxKSD4leqXwAAARU"]
[Wed Jan 07 06:26:03.504885 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:39894] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aV2L-4jhb00oxKSD4leqYAAAARI"]
[Wed Jan 07 06:26:04.234096 2026] [:error] [pid 6677:tid 6714] [client 20.239.71.136:13513] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aV2L_H1cbekSFYxHbiMlNgAAANY"]
[Wed Jan 07 06:26:05.016360 2026] [:error] [pid 6572:tid 6664] [client 20.239.71.136:3267] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aV2L_XVZKKyUNbqWyYI_8AAAAJg"]
[Wed Jan 07 06:26:05.388451 2026] [:error] [pid 6571:tid 6627] [client 20.239.71.136:3295] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aV2L_Q_rJpa_Vt6ZE1D3HwAAAE4"]
[Wed Jan 07 06:26:05.910028 2026] [:error] [pid 6572:tid 6646] [client 20.239.71.136:13539] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aV2L_XVZKKyUNbqWyYI_8QAAAIY"]
[Wed Jan 07 06:26:06.992192 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:3296] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aV2L_nVZKKyUNbqWyYI_8gAAAJI"]
[Wed Jan 07 06:26:07.381242 2026] [:error] [pid 6571:tid 6633] [client 20.239.71.136:3318] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aV2L_w_rJpa_Vt6ZE1D3IQAAAFQ"]
[Wed Jan 07 06:26:08.030830 2026] [:error] [pid 6572:tid 6660] [client 20.239.71.136:13561] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aV2MAHVZKKyUNbqWyYI_9AAAAJQ"]
[Wed Jan 07 06:26:08.603677 2026] [:error] [pid 6677:tid 6711] [client 20.239.71.136:39922] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aV2MAH1cbekSFYxHbiMlOgAAANM"]
[Wed Jan 07 06:26:09.302618 2026] [:error] [pid 6571:tid 6632] [client 20.239.71.136:20296] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aV2MAQ_rJpa_Vt6ZE1D3JQAAAFM"]
[Wed Jan 07 06:26:09.980427 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:31931] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aV2MAYjhb00oxKSD4leqYwAAARE"]
[Wed Jan 07 06:26:10.884083 2026] [:error] [pid 6571:tid 6626] [client 20.239.71.136:44323] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aV2MAg_rJpa_Vt6ZE1D3JgAAAE0"]
[Wed Jan 07 06:26:11.611778 2026] [:error] [pid 6571:tid 6635] [client 20.239.71.136:12343] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aV2MAw_rJpa_Vt6ZE1D3KAAAAFY"]
[Wed Jan 07 06:26:12.591951 2026] [:error] [pid 6571:tid 6634] [client 20.239.71.136:31900] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aV2MBA_rJpa_Vt6ZE1D3KQAAAFU"]
[Wed Jan 07 06:26:12.949199 2026] [:error] [pid 6571:tid 6616] [client 20.239.71.136:23426] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aV2MBA_rJpa_Vt6ZE1D3LAAAAEM"]
[Wed Jan 07 06:26:13.523546 2026] [:error] [pid 6572:tid 6656] [client 20.239.71.136:24494] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dox.php"] [unique_id "aV2MBXVZKKyUNbqWyYI_9gAAAJA"]
[Wed Jan 07 06:26:14.221876 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:23464] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dox.php"] [unique_id "aV2MBojhb00oxKSD4leqagAAARI"]
[Wed Jan 07 06:26:14.692286 2026] [:error] [pid 6677:tid 6716] [client 20.239.71.136:3714] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dox.php"] [unique_id "aV2MBn1cbekSFYxHbiMlPQAAANg"]
[Wed Jan 07 06:26:15.073592 2026] [:error] [pid 6572:tid 6653] [client 20.239.71.136:12333] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dox.php"] [unique_id "aV2MB3VZKKyUNbqWyYI_9wAAAI0"]
[Wed Jan 07 06:26:15.780151 2026] [:error] [pid 6572:tid 6644] [client 20.239.71.136:44347] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aV2MB3VZKKyUNbqWyYI_-QAAAIQ"]
[Wed Jan 07 06:26:16.355013 2026] [:error] [pid 6572:tid 6663] [client 20.239.71.136:44350] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aV2MCHVZKKyUNbqWyYI_-gAAAJc"]
[Wed Jan 07 06:26:16.879109 2026] [:error] [pid 6572:tid 6661] [client 20.239.71.136:31926] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aV2MCHVZKKyUNbqWyYI_-wAAAJU"]
[Wed Jan 07 06:26:17.498618 2026] [:error] [pid 51200:tid 51258] [client 20.239.71.136:3740] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aV2MCYjhb00oxKSD4leqbgAAAQo"]
[Wed Jan 07 06:26:18.059744 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:12291] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aV2MCojhb00oxKSD4leqcQAAAQc"]
[Wed Jan 07 06:26:18.650688 2026] [:error] [pid 51200:tid 51261] [client 20.239.71.136:31883] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aV2MCojhb00oxKSD4leqcgAAAQ0"]
[Wed Jan 07 06:26:19.098452 2026] [:error] [pid 6572:tid 6649] [client 20.239.71.136:31925] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aV2MC3VZKKyUNbqWyYI__QAAAIk"]
[Wed Jan 07 06:26:19.482472 2026] [:error] [pid 6570:tid 6602] [client 20.239.71.136:1216] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aV2MC5mjKDvKV_Af0erxoAAAABA"]
[Wed Jan 07 06:26:20.211533 2026] [:error] [pid 51200:tid 51249] [client 20.239.71.136:12309] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aV2MDIjhb00oxKSD4leqdQAAAQE"]
[Wed Jan 07 06:26:21.675909 2026] [:error] [pid 6572:tid 6664] [client 20.239.71.136:1276] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aV2MDXVZKKyUNbqWyYI__gAAAJg"]
[Wed Jan 07 06:26:22.206107 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:41315] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aV2MDojhb00oxKSD4leqegAAARc"]
[Wed Jan 07 06:26:22.660919 2026] [:error] [pid 6570:tid 6598] [client 20.239.71.136:3768] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aV2MDpmjKDvKV_Af0erxogAAAAw"]
[Wed Jan 07 06:26:23.520906 2026] [:error] [pid 6570:tid 6608] [client 20.239.71.136:41285] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aV2MD5mjKDvKV_Af0erxowAAABY"]
[Wed Jan 07 06:26:23.953631 2026] [:error] [pid 6570:tid 6604] [client 20.239.71.136:44305] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aV2MD5mjKDvKV_Af0erxpAAAABI"]
[Wed Jan 07 06:26:24.466831 2026] [:error] [pid 6677:tid 6702] [client 20.239.71.136:41280] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aV2MEH1cbekSFYxHbiMlRAAAAMo"]
[Wed Jan 07 06:26:24.959332 2026] [:error] [pid 6677:tid 6715] [client 20.239.71.136:23025] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aV2MEH1cbekSFYxHbiMlRQAAANc"]
[Wed Jan 07 06:26:25.646244 2026] [:error] [pid 6677:tid 6711] [client 20.239.71.136:3820] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aV2MEX1cbekSFYxHbiMlRgAAANM"]
[Wed Jan 07 06:26:26.645131 2026] [:error] [pid 6570:tid 6595] [client 20.239.71.136:1269] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aV2MEpmjKDvKV_Af0erxpwAAAAk"]
[Wed Jan 07 06:26:27.421890 2026] [:error] [pid 51200:tid 51259] [client 20.239.71.136:5981] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aV2ME4jhb00oxKSD4leqfgAAAQs"]
[Wed Jan 07 06:26:28.012008 2026] [:error] [pid 6570:tid 6596] [client 20.239.71.136:3821] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aV2MFJmjKDvKV_Af0erxqAAAAAo"]
[Wed Jan 07 06:26:28.448671 2026] [:error] [pid 6570:tid 6589] [client 20.239.71.136:41340] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aV2MFJmjKDvKV_Af0erxqgAAAAM"]
[Wed Jan 07 06:26:29.226046 2026] [:error] [pid 6677:tid 6716] [client 20.239.71.136:23013] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aV2MFX1cbekSFYxHbiMlSQAAANg"]
[Wed Jan 07 06:26:29.757148 2026] [:error] [pid 6571:tid 6633] [client 20.239.71.136:22995] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aV2MFQ_rJpa_Vt6ZE1D3MAAAAFQ"]
[Wed Jan 07 06:26:30.689611 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:3797] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aV2MFojhb00oxKSD4leqggAAAQ4"]
[Wed Jan 07 06:26:31.624524 2026] [:error] [pid 6677:tid 6708] [client 20.239.71.136:23019] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aV2MF31cbekSFYxHbiMlTQAAANA"]
[Wed Jan 07 06:26:32.229560 2026] [:error] [pid 6571:tid 6614] [client 20.239.71.136:5987] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aV2MGA_rJpa_Vt6ZE1D3MQAAAEE"]
[Wed Jan 07 06:26:32.960518 2026] [:error] [pid 6570:tid 6592] [client 20.239.71.136:41310] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aV2MGJmjKDvKV_Af0erxswAAAAY"]
[Wed Jan 07 06:26:34.048445 2026] [:error] [pid 6572:tid 6642] [client 20.239.71.136:5970] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffile.php"] [unique_id "aV2MGnVZKKyUNbqWyYJACQAAAII"]
[Wed Jan 07 06:26:34.462351 2026] [:error] [pid 6572:tid 6649] [client 20.239.71.136:41326] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aV2MGnVZKKyUNbqWyYJACgAAAIk"]
[Wed Jan 07 06:26:35.570278 2026] [:error] [pid 6571:tid 6637] [client 20.239.71.136:20165] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aV2MGw_rJpa_Vt6ZE1D3MwAAAFg"]
[Wed Jan 07 06:26:36.229037 2026] [:error] [pid 51200:tid 51248] [client 20.239.71.136:44312] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aV2MHIjhb00oxKSD4leqgwAAAQA"]
[Wed Jan 07 06:26:37.319591 2026] [:error] [pid 6572:tid 6655] [client 20.239.71.136:3810] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aV2MHXVZKKyUNbqWyYJACwAAAI8"]
[Wed Jan 07 06:26:38.449867 2026] [:error] [pid 51200:tid 51273] [client 20.239.71.136:3826] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aV2MHojhb00oxKSD4leqhAAAARg"]
[Wed Jan 07 06:26:39.113092 2026] [:error] [pid 51200:tid 51250] [client 20.239.71.136:22976] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aV2MH4jhb00oxKSD4leqhgAAAQI"]
[Wed Jan 07 06:26:40.674176 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:5967] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aV2MIIjhb00oxKSD4leqigAAARI"]
[Wed Jan 07 06:26:41.740942 2026] [:error] [pid 51200:tid 51267] [client 20.239.71.136:44349] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aV2MIYjhb00oxKSD4leqjAAAARM"]
[Wed Jan 07 06:26:43.843087 2026] [:error] [pid 6570:tid 6601] [client 20.239.71.136:24312] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aV2MI5mjKDvKV_Af0erxvQAAAA8"]
[Wed Jan 07 06:26:44.503005 2026] [:error] [pid 6570:tid 6595] [client 20.239.71.136:23018] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aV2MJJmjKDvKV_Af0erxvwAAAAk"]
[Wed Jan 07 06:26:45.012834 2026] [:error] [pid 6570:tid 6605] [client 20.239.71.136:41298] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aV2MJZmjKDvKV_Af0erxwgAAABM"]
[Wed Jan 07 06:26:45.999915 2026] [:error] [pid 6570:tid 6593] [client 20.239.71.136:41286] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aV2MJZmjKDvKV_Af0erxxAAAAAc"]
[Wed Jan 07 06:26:47.639509 2026] [:error] [pid 6572:tid 6648] [client 20.239.71.136:1797] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aV2MJ3VZKKyUNbqWyYJAEAAAAIg"]
[Wed Jan 07 06:26:48.343536 2026] [:error] [pid 6572:tid 6660] [client 20.239.71.136:3817] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aV2MKHVZKKyUNbqWyYJAEgAAAJQ"]
[Wed Jan 07 06:26:49.143099 2026] [:error] [pid 6677:tid 6709] [client 20.239.71.136:5962] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aV2MKX1cbekSFYxHbiMlZAAAANE"]
[Wed Jan 07 06:26:49.657498 2026] [:error] [pid 6570:tid 6604] [client 20.239.71.136:11796] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aV2MKZmjKDvKV_Af0erxxwAAABI"]
[Wed Jan 07 06:26:50.362159 2026] [:error] [pid 6570:tid 6598] [client 20.239.71.136:24450] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aV2MKpmjKDvKV_Af0erxyAAAAAw"]
[Wed Jan 07 06:26:51.590333 2026] [:error] [pid 6570:tid 6602] [client 20.239.71.136:44351] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aV2MK5mjKDvKV_Af0erxyQAAABA"]
[Wed Jan 07 06:26:52.519693 2026] [:error] [pid 6570:tid 6606] [client 20.239.71.136:24492] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aV2MLJmjKDvKV_Af0erxzAAAABQ"]
[Wed Jan 07 06:26:53.268237 2026] [:error] [pid 6572:tid 6654] [client 20.239.71.136:1082] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aV2MLXVZKKyUNbqWyYJAFQAAAI4"]
[Wed Jan 07 06:26:53.753833 2026] [:error] [pid 6677:tid 6710] [client 20.239.71.136:1072] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aV2MLX1cbekSFYxHbiMlaQAAANI"]
[Wed Jan 07 06:26:54.276417 2026] [:error] [pid 6571:tid 6633] [client 20.239.71.136:46719] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aV2MLg_rJpa_Vt6ZE1D3OQAAAFQ"]
[Wed Jan 07 06:26:55.548153 2026] [:error] [pid 51200:tid 51273] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Wed Jan 07 06:26:55.671796 2026] [:error] [pid 51200:tid 51250] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Wed Jan 07 06:26:55.837894 2026] [:error] [pid 51200:tid 51270] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Jan 07 06:26:55.959789 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Wed Jan 07 06:26:56.080070 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Wed Jan 07 06:26:56.200975 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Jan 07 06:26:56.323810 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Wed Jan 07 06:26:56.530702 2026] [:error] [pid 51200:tid 51254] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Jan 07 06:26:56.652829 2026] [:error] [pid 51200:tid 51267] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Jan 07 06:26:56.790400 2026] [:error] [pid 51200:tid 51251] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Wed Jan 07 06:26:56.918365 2026] [:error] [pid 51200:tid 51259] [client 20.239.71.136:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Wed Jan 07 06:26:57.458210 2026] [:error] [pid 51200:tid 51258] [client 20.239.71.136:11797] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/new2.php"] [unique_id "aV2MMYjhb00oxKSD4leqoAAAAQo"]
[Wed Jan 07 06:26:59.207752 2026] [:error] [pid 6570:tid 6609] [client 20.239.71.136:3799] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/new2.php"] [unique_id "aV2MM5mjKDvKV_Af0erx0gAAABc"]
[Wed Jan 07 06:26:59.711335 2026] [:error] [pid 6677:tid 6700] [client 20.239.71.136:3829] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/new2.php"] [unique_id "aV2MM31cbekSFYxHbiMlbQAAAMg"]
[Wed Jan 07 06:27:00.576818 2026] [:error] [pid 6572:tid 6649] [client 20.239.71.136:41293] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/new2.php"] [unique_id "aV2MNHVZKKyUNbqWyYJAGgAAAIk"]
[Wed Jan 07 06:27:01.054677 2026] [:error] [pid 6677:tid 6702] [client 20.239.71.136:24501] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aV2MNX1cbekSFYxHbiMlbwAAAMo"]
[Wed Jan 07 06:27:01.548459 2026] [:error] [pid 51200:tid 51249] [client 20.239.71.136:5990] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aV2MNYjhb00oxKSD4leqowAAAQE"]
[Wed Jan 07 06:27:02.164404 2026] [:error] [pid 6571:tid 6636] [client 20.239.71.136:24454] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aV2MNg_rJpa_Vt6ZE1D3QQAAAFc"]
[Wed Jan 07 06:27:02.895352 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:44342] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws29.php"] [unique_id "aV2MNojhb00oxKSD4leqpAAAAQ4"]
[Wed Jan 07 06:27:03.434128 2026] [:error] [pid 6570:tid 6602] [client 20.239.71.136:3793] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aV2MN5mjKDvKV_Af0erx1wAAABA"]
[Wed Jan 07 06:27:03.973564 2026] [:error] [pid 6570:tid 6601] [client 20.239.71.136:1821] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aV2MN5mjKDvKV_Af0erx2AAAAA8"]
[Wed Jan 07 06:27:04.572288 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:35262] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aV2MOIjhb00oxKSD4leqqQAAARc"]
[Wed Jan 07 06:27:04.853636 2026] [:error] [pid 6572:tid 6648] [client 20.239.71.136:35245] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "aV2MOHVZKKyUNbqWyYJAHgAAAIg"]
[Wed Jan 07 06:27:05.578718 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:3779] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass.php"] [unique_id "aV2MOYjhb00oxKSD4leqqgAAARA"]
[Wed Jan 07 06:27:06.985136 2026] [:error] [pid 6572:tid 6647] [client 20.239.71.136:24301] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass.php"] [unique_id "aV2MOnVZKKyUNbqWyYJAIAAAAIc"]
[Wed Jan 07 06:27:07.662036 2026] [:error] [pid 6677:tid 6712] [client 20.239.71.136:5958] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass.php"] [unique_id "aV2MO31cbekSFYxHbiMldQAAANQ"]
[Wed Jan 07 06:27:08.690881 2026] [:error] [pid 6572:tid 6641] [client 20.239.71.136:19718] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass.php"] [unique_id "aV2MPHVZKKyUNbqWyYJAIQAAAIE"]
[Wed Jan 07 06:27:09.534219 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:40070] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aV2MPXVZKKyUNbqWyYJAIwAAAJI"]
[Wed Jan 07 06:27:09.943913 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:35253] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aV2MPYjhb00oxKSD4leqrAAAAQc"]
[Wed Jan 07 06:27:10.866834 2026] [:error] [pid 6677:tid 6711] [client 20.239.71.136:40121] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aV2MPn1cbekSFYxHbiMleAAAANM"]
[Wed Jan 07 06:27:11.350041 2026] [:error] [pid 6571:tid 6615] [client 20.239.71.136:35219] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aV2MPw_rJpa_Vt6ZE1D3SQAAAEI"]
[Wed Jan 07 06:27:12.377757 2026] [:error] [pid 51200:tid 51256] [client 20.239.71.136:12895] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aV2MQIjhb00oxKSD4leqsAAAAQg"]
[Wed Jan 07 06:27:13.596182 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:25110] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aV2MQYjhb00oxKSD4leqtAAAARE"]
[Wed Jan 07 06:27:14.189042 2026] [:error] [pid 6571:tid 6621] [client 20.239.71.136:41328] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aV2MQg_rJpa_Vt6ZE1D3TAAAAEg"]
[Wed Jan 07 06:27:14.909729 2026] [:error] [pid 6677:tid 6697] [client 20.239.71.136:24297] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aV2MQn1cbekSFYxHbiMlfQAAAMU"]
[Wed Jan 07 06:27:16.046817 2026] [:error] [pid 6677:tid 6709] [client 20.239.71.136:3780] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sitemaps.php"] [unique_id "aV2MRH1cbekSFYxHbiMlgAAAANE"]
[Wed Jan 07 06:27:16.764704 2026] [:error] [pid 6570:tid 6593] [client 20.239.71.136:35215] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sitemaps.php"] [unique_id "aV2MRJmjKDvKV_Af0erx3AAAAAc"]
[Wed Jan 07 06:27:17.388386 2026] [:error] [pid 6571:tid 6616] [client 20.239.71.136:12868] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sitemaps.php"] [unique_id "aV2MRQ_rJpa_Vt6ZE1D3UAAAAEM"]
[Wed Jan 07 06:27:18.044581 2026] [:error] [pid 6571:tid 6630] [client 20.239.71.136:19722] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sitemaps.php"] [unique_id "aV2MRg_rJpa_Vt6ZE1D3UwAAAFE"]
[Wed Jan 07 06:27:19.096177 2026] [:error] [pid 6572:tid 6642] [client 20.239.71.136:24303] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aV2MR3VZKKyUNbqWyYJAKwAAAII"]
[Wed Jan 07 06:27:19.793921 2026] [:error] [pid 6572:tid 6650] [client 20.239.71.136:40091] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aV2MR3VZKKyUNbqWyYJALQAAAIo"]
[Wed Jan 07 06:27:20.942610 2026] [:error] [pid 6570:tid 6607] [client 20.239.71.136:23034] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aV2MSJmjKDvKV_Af0erx4AAAABU"]
[Wed Jan 07 06:27:21.560525 2026] [:error] [pid 6570:tid 6586] [client 20.239.71.136:19750] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aV2MSZmjKDvKV_Af0erx4wAAAAA"]
[Wed Jan 07 06:27:22.846739 2026] [:error] [pid 6572:tid 6656] [client 20.239.71.136:35200] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/install.php"] [unique_id "aV2MSnVZKKyUNbqWyYJAMwAAAJA"]
[Wed Jan 07 06:27:23.495600 2026] [:error] [pid 6571:tid 6634] [client 20.239.71.136:19739] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/install.php"] [unique_id "aV2MSw_rJpa_Vt6ZE1D3WwAAAFU"]
[Wed Jan 07 06:27:24.675808 2026] [:error] [pid 6572:tid 6653] [client 20.239.71.136:27095] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/install.php"] [unique_id "aV2MTHVZKKyUNbqWyYJANQAAAI0"]
[Wed Jan 07 06:27:25.223394 2026] [:error] [pid 6570:tid 6605] [client 20.239.71.136:27098] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/install.php"] [unique_id "aV2MTZmjKDvKV_Af0erx6gAAABM"]
[Wed Jan 07 06:27:25.847143 2026] [:error] [pid 6570:tid 6588] [client 20.239.71.136:40116] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aV2MTZmjKDvKV_Af0erx6wAAAAI"]
[Wed Jan 07 06:27:26.246688 2026] [:error] [pid 6570:tid 6593] [client 20.239.71.136:40360] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aV2MTpmjKDvKV_Af0erx7AAAAAc"]
[Wed Jan 07 06:27:26.589323 2026] [:error] [pid 51200:tid 51252] [client 20.239.71.136:12898] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aV2MTojhb00oxKSD4leqvAAAAQQ"]
[Wed Jan 07 06:27:27.481040 2026] [:error] [pid 6571:tid 6620] [client 20.239.71.136:35248] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aV2MTw_rJpa_Vt6ZE1D3ZAAAAEc"]
[Wed Jan 07 06:27:28.130836 2026] [:error] [pid 6570:tid 6604] [client 20.239.71.136:27074] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aV2MUJmjKDvKV_Af0erx8QAAABI"]
[Wed Jan 07 06:27:29.256976 2026] [:error] [pid 6572:tid 6643] [client 20.239.71.136:40100] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aV2MUXVZKKyUNbqWyYJAPQAAAIM"]
[Wed Jan 07 06:27:30.319543 2026] [:error] [pid 6570:tid 6602] [client 20.239.71.136:12867] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aV2MUpmjKDvKV_Af0erx9QAAABA"]
[Wed Jan 07 06:27:30.746025 2026] [:error] [pid 6571:tid 6618] [client 20.239.71.136:40362] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aV2MUg_rJpa_Vt6ZE1D3agAAAEU"]
[Wed Jan 07 06:27:31.473364 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:24263] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/img.php"] [unique_id "aV2MU4jhb00oxKSD4leqvwAAAQ4"]
[Wed Jan 07 06:27:32.058714 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:40083] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/img.php"] [unique_id "aV2MVIjhb00oxKSD4leqwAAAARE"]
[Wed Jan 07 06:27:32.598679 2026] [:error] [pid 6572:tid 6664] [client 20.239.71.136:19731] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/img.php"] [unique_id "aV2MVHVZKKyUNbqWyYJAQwAAAJg"]
[Wed Jan 07 06:27:33.427320 2026] [:error] [pid 6571:tid 6620] [client 20.239.71.136:19743] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/img.php"] [unique_id "aV2MVQ_rJpa_Vt6ZE1D3bAAAAEc"]
[Wed Jan 07 06:27:33.984048 2026] [:error] [pid 6572:tid 6648] [client 20.239.71.136:19726] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aV2MVXVZKKyUNbqWyYJARQAAAIg"]
[Wed Jan 07 06:27:34.424406 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:24310] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aV2MVojhb00oxKSD4leqwwAAARA"]
[Wed Jan 07 06:27:35.254842 2026] [:error] [pid 6571:tid 6617] [client 20.239.71.136:40350] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aV2MVw_rJpa_Vt6ZE1D3bgAAAEQ"]
[Wed Jan 07 06:27:36.049359 2026] [:error] [pid 6677:tid 6707] [client 20.239.71.136:29775] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aV2MWH1cbekSFYxHbiMlnwAAAM8"]
[Wed Jan 07 06:27:36.571257 2026] [:error] [pid 6572:tid 6651] [client 20.239.71.136:19757] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aV2MWHVZKKyUNbqWyYJASAAAAIs"]
[Wed Jan 07 06:27:37.163867 2026] [:error] [pid 6572:tid 6650] [client 20.239.71.136:19766] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aV2MWXVZKKyUNbqWyYJASQAAAIo"]
[Wed Jan 07 06:27:37.916172 2026] [:error] [pid 51200:tid 51267] [client 20.239.71.136:35208] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aV2MWYjhb00oxKSD4leqxAAAARM"]
[Wed Jan 07 06:27:38.473464 2026] [:error] [pid 51200:tid 51251] [client 20.239.71.136:12915] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aV2MWojhb00oxKSD4leqxQAAAQM"]
[Wed Jan 07 06:27:39.125046 2026] [:error] [pid 6677:tid 6702] [client 20.239.71.136:35205] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aV2MW31cbekSFYxHbiMlqAAAAMo"]
[Wed Jan 07 06:27:39.844368 2026] [:error] [pid 6677:tid 6708] [client 20.239.71.136:35230] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aV2MW31cbekSFYxHbiMlqQAAANA"]
[Wed Jan 07 06:27:40.508070 2026] [:error] [pid 6677:tid 6704] [client 20.239.71.136:40373] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aV2MXH1cbekSFYxHbiMlqgAAAMw"]
[Wed Jan 07 06:27:41.722675 2026] [:error] [pid 6677:tid 6713] [client 20.239.71.136:24298] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user.php"] [unique_id "aV2MXX1cbekSFYxHbiMlrQAAANU"]
[Wed Jan 07 06:27:42.314713 2026] [:error] [pid 6677:tid 6695] [client 20.239.71.136:19764] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aV2MXn1cbekSFYxHbiMlrgAAAMM"]
[Wed Jan 07 06:27:42.824661 2026] [:error] [pid 51200:tid 51252] [client 20.239.71.136:27107] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aV2MXojhb00oxKSD4leqygAAAQQ"]
[Wed Jan 07 06:27:43.579225 2026] [:error] [pid 6570:tid 6595] [client 20.239.71.136:19760] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aV2MX5mjKDvKV_Af0eryAQAAAAk"]
[Wed Jan 07 06:27:44.220307 2026] [:error] [pid 6570:tid 6605] [client 20.239.71.136:40346] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aV2MYJmjKDvKV_Af0eryAwAAABM"]
[Wed Jan 07 06:27:45.219526 2026] [:error] [pid 6572:tid 6659] [client 20.239.71.136:19712] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aV2MYXVZKKyUNbqWyYJATQAAAJM"]
[Wed Jan 07 06:27:46.357241 2026] [:error] [pid 6570:tid 6610] [client 20.239.71.136:27078] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aV2MYpmjKDvKV_Af0eryBQAAABg"]
[Wed Jan 07 06:27:46.769621 2026] [:error] [pid 6677:tid 6710] [client 20.239.71.136:12890] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aV2MYn1cbekSFYxHbiMlsgAAANI"]
[Wed Jan 07 06:27:47.320708 2026] [:error] [pid 6570:tid 6588] [client 20.239.71.136:27109] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aV2MY5mjKDvKV_Af0eryCAAAAAI"]
[Wed Jan 07 06:27:47.796844 2026] [:error] [pid 6570:tid 6597] [client 20.239.71.136:29778] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aV2MY5mjKDvKV_Af0eryDAAAAAs"]
[Wed Jan 07 06:27:49.165709 2026] [:error] [pid 6677:tid 6713] [client 20.239.71.136:24278] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aV2MZX1cbekSFYxHbiMlvAAAANU"]
[Wed Jan 07 06:27:50.408476 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:40335] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aV2MZojhb00oxKSD4leqzwAAARE"]
[Wed Jan 07 06:27:50.801376 2026] [:error] [pid 6677:tid 6693] [client 20.239.71.136:40077] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aV2MZn1cbekSFYxHbiMlvwAAAME"]
[Wed Jan 07 06:27:51.321800 2026] [:error] [pid 51200:tid 51254] [client 20.239.71.136:12882] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sign.php"] [unique_id "aV2MZ4jhb00oxKSD4leq0QAAAQY"]
[Wed Jan 07 06:27:52.112378 2026] [:error] [pid 6572:tid 6650] [client 20.239.71.136:4649] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sign.php"] [unique_id "aV2MaHVZKKyUNbqWyYJAVQAAAIo"]
[Wed Jan 07 06:27:52.691932 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:27092] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sign.php"] [unique_id "aV2MaIjhb00oxKSD4leq1AAAARc"]
[Wed Jan 07 06:27:54.034949 2026] [:error] [pid 51200:tid 51257] [client 20.239.71.136:40103] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-sign.php"] [unique_id "aV2Maojhb00oxKSD4leq2QAAAQk"]
[Wed Jan 07 06:27:54.834888 2026] [:error] [pid 6677:tid 6701] [client 20.239.71.136:4618] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ppp.php"] [unique_id "aV2Man1cbekSFYxHbiMlyAAAAMk"]
[Wed Jan 07 06:27:55.379797 2026] [:error] [pid 6677:tid 6713] [client 20.239.71.136:27083] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ppp.php"] [unique_id "aV2Ma31cbekSFYxHbiMlygAAANU"]
[Wed Jan 07 06:27:55.937237 2026] [:error] [pid 6570:tid 6599] [client 20.239.71.136:29821] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ppp.php"] [unique_id "aV2Ma5mjKDvKV_Af0eryFQAAAA0"]
[Wed Jan 07 06:27:56.526094 2026] [:error] [pid 51200:tid 51273] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/ppp.php
[Wed Jan 07 06:27:56.651812 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Jan 07 06:27:56.777860 2026] [:error] [pid 51200:tid 51254] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Wed Jan 07 06:27:56.898042 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Jan 07 06:27:57.040471 2026] [:error] [pid 51200:tid 51251] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Wed Jan 07 06:27:57.176269 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-help.php
[Wed Jan 07 06:27:57.297734 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Wed Jan 07 06:27:57.552709 2026] [:error] [pid 51200:tid 51270] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Wed Jan 07 06:27:57.672928 2026] [:error] [pid 51200:tid 51261] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/hly.php
[Wed Jan 07 06:27:57.794256 2026] [:error] [pid 51200:tid 51260] [client 20.239.71.136:40118] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Wed Jan 07 06:27:57.911435 2026] [:error] [pid 51200:tid 51252] [client 20.239.71.136:40118] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aV2MbYjhb00oxKSD4leq6QAAAQQ"]
[Wed Jan 07 06:27:58.611674 2026] [:error] [pid 6570:tid 6593] [client 20.239.71.136:13953] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aV2MbpmjKDvKV_Af0eryGAAAAAc"]
[Wed Jan 07 06:27:59.170540 2026] [:error] [pid 6570:tid 6587] [client 20.239.71.136:29808] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aV2Mb5mjKDvKV_Af0eryGQAAAAE"]
[Wed Jan 07 06:27:59.670948 2026] [:error] [pid 51200:tid 51268] [client 20.239.71.136:29761] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aV2Mb4jhb00oxKSD4leq6gAAARQ"]
[Wed Jan 07 06:28:00.072040 2026] [:error] [pid 6677:tid 6703] [client 20.239.71.136:13997] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aV2McH1cbekSFYxHbiMlzwAAAMs"]
[Wed Jan 07 06:28:01.040313 2026] [:error] [pid 6570:tid 6592] [client 20.239.71.136:25128] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aV2McZmjKDvKV_Af0eryGwAAAAY"]
[Wed Jan 07 06:28:01.889568 2026] [:error] [pid 51200:tid 51248] [client 20.239.71.136:27116] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aV2McYjhb00oxKSD4leq6wAAAQA"]
[Wed Jan 07 06:28:02.284301 2026] [:error] [pid 51200:tid 51267] [client 20.239.71.136:24620] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aV2Mcojhb00oxKSD4leq7QAAARM"]
[Wed Jan 07 06:28:02.699325 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:29799] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aV2Mcojhb00oxKSD4leq7gAAARc"]
[Wed Jan 07 06:28:03.451528 2026] [:error] [pid 51200:tid 51260] [client 20.239.71.136:12377] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aV2Mc4jhb00oxKSD4leq8gAAAQw"]
[Wed Jan 07 06:28:04.046638 2026] [:error] [pid 51200:tid 51257] [client 20.239.71.136:22943] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aV2MdIjhb00oxKSD4leq9AAAAQk"]
[Wed Jan 07 06:28:04.484822 2026] [:error] [pid 6571:tid 6625] [client 20.239.71.136:12379] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aV2MdA_rJpa_Vt6ZE1D3fQAAAEw"]
[Wed Jan 07 06:28:05.944700 2026] [:error] [pid 51200:tid 51256] [client 20.239.71.136:24577] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aV2MdYjhb00oxKSD4leq-AAAAQg"]
[Wed Jan 07 06:28:07.309412 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:12360] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aV2Md4jhb00oxKSD4leq-QAAAQ8"]
[Wed Jan 07 06:28:08.373925 2026] [:error] [pid 6570:tid 6594] [client 20.239.71.136:4410] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aV2MeJmjKDvKV_Af0eryIQAAAAg"]
[Wed Jan 07 06:28:10.374028 2026] [:error] [pid 6572:tid 6653] [client 20.239.71.136:1659] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aV2MenVZKKyUNbqWyYJAawAAAI0"]
[Wed Jan 07 06:28:10.910035 2026] [:error] [pid 6572:tid 6642] [client 20.239.71.136:37379] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xp.php"] [unique_id "aV2MenVZKKyUNbqWyYJAbQAAAII"]
[Wed Jan 07 06:28:11.627808 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:23552] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xp.php"] [unique_id "aV2Me4jhb00oxKSD4leq-wAAARU"]
[Wed Jan 07 06:28:11.944416 2026] [:error] [pid 6677:tid 6707] [client 20.239.71.136:24190] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xp.php"] [unique_id "aV2Me31cbekSFYxHbiMl2wAAAM8"]
[Wed Jan 07 06:28:12.656370 2026] [:error] [pid 6572:tid 6648] [client 20.239.71.136:1489] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xp.php"] [unique_id "aV2MfHVZKKyUNbqWyYJAcgAAAIg"]
[Wed Jan 07 06:28:13.062798 2026] [:error] [pid 6572:tid 6660] [client 20.239.71.136:23736] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yes.php"] [unique_id "aV2MfXVZKKyUNbqWyYJAdAAAAJQ"]
[Wed Jan 07 06:28:13.542868 2026] [:error] [pid 6677:tid 6700] [client 20.239.71.136:24163] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yes.php"] [unique_id "aV2MfX1cbekSFYxHbiMl3QAAAMg"]
[Wed Jan 07 06:28:14.435125 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:17911] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yes.php"] [unique_id "aV2MfnVZKKyUNbqWyYJAdgAAAJI"]
[Wed Jan 07 06:28:15.194092 2026] [:error] [pid 6677:tid 6698] [client 20.239.71.136:1478] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yes.php"] [unique_id "aV2Mf31cbekSFYxHbiMl3wAAAMY"]
[Wed Jan 07 06:28:15.993069 2026] [:error] [pid 51200:tid 51250] [client 20.239.71.136:24158] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/09fa6.php"] [unique_id "aV2Mf4jhb00oxKSD4lerAQAAAQI"]
[Wed Jan 07 06:28:16.719931 2026] [:error] [pid 51200:tid 51251] [client 20.239.71.136:23714] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/09fa6.php"] [unique_id "aV2MgIjhb00oxKSD4lerAgAAAQM"]
[Wed Jan 07 06:28:17.435755 2026] [:error] [pid 51200:tid 51259] [client 20.239.71.136:37424] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/09fa6.php"] [unique_id "aV2MgYjhb00oxKSD4lerAwAAAQs"]
[Wed Jan 07 06:28:18.555241 2026] [:error] [pid 6571:tid 6617] [client 20.239.71.136:17857] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/09fa6.php"] [unique_id "aV2Mgg_rJpa_Vt6ZE1D3hAAAAEQ"]
[Wed Jan 07 06:28:19.204642 2026] [:error] [pid 51200:tid 51256] [client 20.239.71.136:23720] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/89.php"] [unique_id "aV2Mg4jhb00oxKSD4lerBAAAAQg"]
[Wed Jan 07 06:28:19.548473 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:24097] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/89.php"] [unique_id "aV2Mg4jhb00oxKSD4lerBQAAAQ8"]
[Wed Jan 07 06:28:20.297162 2026] [:error] [pid 6571:tid 6614] [client 20.239.71.136:24106] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/89.php"] [unique_id "aV2MhA_rJpa_Vt6ZE1D3hQAAAEE"]
[Wed Jan 07 06:28:20.744465 2026] [:error] [pid 6571:tid 6633] [client 20.239.71.136:1564] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/89.php"] [unique_id "aV2MhA_rJpa_Vt6ZE1D3hgAAAFQ"]
[Wed Jan 07 06:28:21.251892 2026] [:error] [pid 6677:tid 6697] [client 20.239.71.136:17918] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/has.php"] [unique_id "aV2MhX1cbekSFYxHbiMl6QAAAMU"]
[Wed Jan 07 06:28:21.915471 2026] [:error] [pid 6677:tid 6693] [client 20.239.71.136:24112] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/has.php"] [unique_id "aV2MhX1cbekSFYxHbiMl6gAAAME"]
[Wed Jan 07 06:28:22.667547 2026] [:error] [pid 6677:tid 6700] [client 20.239.71.136:24144] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/has.php"] [unique_id "aV2Mhn1cbekSFYxHbiMl7QAAAMg"]
[Wed Jan 07 06:28:23.389690 2026] [:error] [pid 6677:tid 6709] [client 20.239.71.136:1549] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/has.php"] [unique_id "aV2Mh31cbekSFYxHbiMl7gAAANE"]
[Wed Jan 07 06:28:24.082062 2026] [:error] [pid 6677:tid 6714] [client 20.239.71.136:17896] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nax.php"] [unique_id "aV2MiH1cbekSFYxHbiMl8QAAANY"]
[Wed Jan 07 06:28:25.351832 2026] [:error] [pid 6677:tid 6712] [client 20.239.71.136:1583] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nax.php"] [unique_id "aV2MiX1cbekSFYxHbiMl9gAAANQ"]
[Wed Jan 07 06:28:26.955227 2026] [:error] [pid 6570:tid 6586] [client 20.239.71.136:1306] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nax.php"] [unique_id "aV2MipmjKDvKV_Af0eryJQAAAAA"]
[Wed Jan 07 06:28:27.476483 2026] [:error] [pid 6677:tid 6711] [client 20.239.71.136:24104] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nax.php"] [unique_id "aV2Mi31cbekSFYxHbiMl-AAAANM"]
[Wed Jan 07 06:28:28.005252 2026] [:error] [pid 6677:tid 6705] [client 20.239.71.136:1598] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ooj.php"] [unique_id "aV2MjH1cbekSFYxHbiMl-gAAAM0"]
[Wed Jan 07 06:28:28.442654 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:1560] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ooj.php"] [unique_id "aV2MjIjhb00oxKSD4lerDgAAARI"]
[Wed Jan 07 06:28:29.225130 2026] [:error] [pid 51200:tid 51268] [client 20.239.71.136:23253] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ooj.php"] [unique_id "aV2MjYjhb00oxKSD4lerEAAAARQ"]
[Wed Jan 07 06:28:31.111609 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:17912] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ooj.php"] [unique_id "aV2Mj4jhb00oxKSD4lerEwAAARE"]
[Wed Jan 07 06:28:32.033526 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:45518] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/orm.php"] [unique_id "aV2MkIjhb00oxKSD4lerFgAAARU"]
[Wed Jan 07 06:28:33.325145 2026] [:error] [pid 51200:tid 51270] [client 20.239.71.136:1548] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/orm.php"] [unique_id "aV2MkYjhb00oxKSD4lerGAAAARY"]
[Wed Jan 07 06:28:34.340137 2026] [:error] [pid 51200:tid 51257] [client 20.239.71.136:1572] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/orm.php"] [unique_id "aV2Mkojhb00oxKSD4lerGgAAAQk"]
[Wed Jan 07 06:28:34.926963 2026] [:error] [pid 6571:tid 6626] [client 20.239.71.136:24951] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/orm.php"] [unique_id "aV2Mkg_rJpa_Vt6ZE1D3kQAAAE0"]
[Wed Jan 07 06:28:35.274459 2026] [:error] [pid 6571:tid 6633] [client 20.239.71.136:17808] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yep.php"] [unique_id "aV2Mkw_rJpa_Vt6ZE1D3kgAAAFQ"]
[Wed Jan 07 06:28:36.549313 2026] [:error] [pid 6677:tid 6705] [client 20.239.71.136:45554] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yep.php"] [unique_id "aV2MlH1cbekSFYxHbiMmBwAAAM0"]
[Wed Jan 07 06:28:37.258632 2026] [:error] [pid 51200:tid 51249] [client 20.239.71.136:17832] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yep.php"] [unique_id "aV2MlYjhb00oxKSD4lerHQAAAQE"]
[Wed Jan 07 06:28:37.800745 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:1309] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yep.php"] [unique_id "aV2MlYjhb00oxKSD4lerHwAAAQ4"]
[Wed Jan 07 06:28:38.618188 2026] [:error] [pid 6570:tid 6590] [client 20.239.71.136:24571] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x3.php"] [unique_id "aV2MlpmjKDvKV_Af0eryKgAAAAQ"]
[Wed Jan 07 06:28:38.988010 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:40399] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x3.php"] [unique_id "aV2Mlojhb00oxKSD4lerIAAAARE"]
[Wed Jan 07 06:28:40.383705 2026] [:error] [pid 6570:tid 6595] [client 20.239.71.136:1895] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x3.php"] [unique_id "aV2MmJmjKDvKV_Af0eryKwAAAAk"]
[Wed Jan 07 06:28:40.899115 2026] [:error] [pid 6572:tid 6664] [client 20.239.71.136:14067] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x3.php"] [unique_id "aV2MmHVZKKyUNbqWyYJAgQAAAJg"]
[Wed Jan 07 06:28:41.617156 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:24552] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6erg.php"] [unique_id "aV2MmYjhb00oxKSD4lerJQAAARc"]
[Wed Jan 07 06:28:42.214259 2026] [:error] [pid 6571:tid 6628] [client 20.239.71.136:24556] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6erg.php"] [unique_id "aV2Mmg_rJpa_Vt6ZE1D3mgAAAE8"]
[Wed Jan 07 06:28:43.923829 2026] [:error] [pid 6677:tid 6701] [client 20.239.71.136:24904] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6erg.php"] [unique_id "aV2Mm31cbekSFYxHbiMmCQAAAMk"]
[Wed Jan 07 06:28:44.281348 2026] [:error] [pid 6677:tid 6699] [client 20.239.71.136:24897] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6erg.php"] [unique_id "aV2MnH1cbekSFYxHbiMmCgAAAMc"]
[Wed Jan 07 06:28:44.640957 2026] [:error] [pid 6677:tid 6695] [client 20.239.71.136:20805] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggfi.php"] [unique_id "aV2MnH1cbekSFYxHbiMmCwAAAMM"]
[Wed Jan 07 06:28:45.171375 2026] [:error] [pid 6677:tid 6716] [client 20.239.71.136:1318] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggfi.php"] [unique_id "aV2MnX1cbekSFYxHbiMmDAAAANg"]
[Wed Jan 07 06:28:46.935835 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:20800] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggfi.php"] [unique_id "aV2MnnVZKKyUNbqWyYJAhAAAAJI"]
[Wed Jan 07 06:28:47.751460 2026] [:error] [pid 6572:tid 6650] [client 20.239.71.136:3143] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggfi.php"] [unique_id "aV2Mn3VZKKyUNbqWyYJAhQAAAIo"]
[Wed Jan 07 06:28:48.316260 2026] [:error] [pid 6571:tid 6635] [client 20.239.71.136:40438] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aV2MoA_rJpa_Vt6ZE1D3nQAAAFY"]
[Wed Jan 07 06:28:48.969339 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:45504] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aV2MoIjhb00oxKSD4lerLAAAAQ4"]
[Wed Jan 07 06:28:49.233026 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:24531] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aV2MoYjhb00oxKSD4lerLQAAARE"]
[Wed Jan 07 06:28:49.906863 2026] [:error] [pid 6572:tid 6640] [client 20.239.71.136:14064] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aV2MoXVZKKyUNbqWyYJAhgAAAIA"]
[Wed Jan 07 06:28:50.428641 2026] [:error] [pid 6572:tid 6654] [client 20.239.71.136:24527] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jju.php"] [unique_id "aV2MonVZKKyUNbqWyYJAhwAAAI4"]
[Wed Jan 07 06:28:51.387896 2026] [:error] [pid 6571:tid 6636] [client 20.239.71.136:24574] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jju.php"] [unique_id "aV2Mow_rJpa_Vt6ZE1D3oQAAAFc"]
[Wed Jan 07 06:28:52.128676 2026] [:error] [pid 6570:tid 6600] [client 20.239.71.136:20862] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jju.php"] [unique_id "aV2MpJmjKDvKV_Af0eryLgAAAA4"]
[Wed Jan 07 06:28:52.852590 2026] [:error] [pid 6677:tid 6708] [client 20.239.71.136:1904] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jju.php"] [unique_id "aV2MpH1cbekSFYxHbiMmDwAAANA"]
[Wed Jan 07 06:28:53.617898 2026] [:error] [pid 6571:tid 6627] [client 20.239.71.136:24940] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rsnu.php"] [unique_id "aV2MpQ_rJpa_Vt6ZE1D3ogAAAE4"]
[Wed Jan 07 06:28:54.115004 2026] [:error] [pid 6571:tid 6629] [client 20.239.71.136:42786] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rsnu.php"] [unique_id "aV2Mpg_rJpa_Vt6ZE1D3owAAAFA"]
[Wed Jan 07 06:28:55.145561 2026] [:error] [pid 51200:tid 51261] [client 20.239.71.136:1742] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rsnu.php"] [unique_id "aV2Mp4jhb00oxKSD4lerNQAAAQ0"]
[Wed Jan 07 06:28:55.842607 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:24941] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rsnu.php"] [unique_id "aV2Mp4jhb00oxKSD4lerOAAAARI"]
[Wed Jan 07 06:28:56.502988 2026] [:error] [pid 6572:tid 6661] [client 20.239.71.136:42789] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aV2MqHVZKKyUNbqWyYJAiwAAAJU"]
[Wed Jan 07 06:28:57.089745 2026] [:error] [pid 6571:tid 6621] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Wed Jan 07 06:28:57.221598 2026] [:error] [pid 6571:tid 6627] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Wed Jan 07 06:28:57.341498 2026] [:error] [pid 6571:tid 6626] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Wed Jan 07 06:28:57.461809 2026] [:error] [pid 6571:tid 6614] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Jan 07 06:28:57.583516 2026] [:error] [pid 6571:tid 6624] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/aua.php
[Wed Jan 07 06:28:57.704460 2026] [:error] [pid 6571:tid 6630] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/great.php
[Wed Jan 07 06:28:57.838255 2026] [:error] [pid 6571:tid 6616] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Wed Jan 07 06:28:58.007739 2026] [:error] [pid 6571:tid 6622] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Wed Jan 07 06:28:58.165241 2026] [:error] [pid 6571:tid 6628] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/witmm.php
[Wed Jan 07 06:28:58.293572 2026] [:error] [pid 6571:tid 6623] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/ocxla.php
[Wed Jan 07 06:28:58.586950 2026] [:error] [pid 6571:tid 6637] [client 20.239.71.136:24223] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Wed Jan 07 06:28:58.704831 2026] [:error] [pid 6571:tid 6632] [client 20.239.71.136:24223] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aV2Mqg_rJpa_Vt6ZE1D3wQAAAFM"]
[Wed Jan 07 06:28:59.627115 2026] [:error] [pid 6572:tid 6645] [client 20.239.71.136:24541] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aV2Mq3VZKKyUNbqWyYJAjgAAAIU"]
[Wed Jan 07 06:29:00.247723 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:31239] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aV2MrIjhb00oxKSD4lerQwAAARA"]
[Wed Jan 07 06:29:01.186184 2026] [:error] [pid 6677:tid 6702] [client 20.239.71.136:14060] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aV2MrX1cbekSFYxHbiMmGgAAAMo"]
[Wed Jan 07 06:29:01.867899 2026] [:error] [pid 6571:tid 6634] [client 20.239.71.136:1789] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/100.kb.php"] [unique_id "aV2MrQ_rJpa_Vt6ZE1D3xAAAAFU"]
[Wed Jan 07 06:29:02.275283 2026] [:error] [pid 6571:tid 6631] [client 20.239.71.136:1791] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/100.kb.php"] [unique_id "aV2Mrg_rJpa_Vt6ZE1D3xQAAAFI"]
[Wed Jan 07 06:29:02.626512 2026] [:error] [pid 6571:tid 6633] [client 20.239.71.136:45556] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/100.kb.php"] [unique_id "aV2Mrg_rJpa_Vt6ZE1D3xgAAAFQ"]
[Wed Jan 07 06:29:04.000440 2026] [:error] [pid 6571:tid 6629] [client 20.239.71.136:14050] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/100.kb.php"] [unique_id "aV2Mrw_rJpa_Vt6ZE1D3ygAAAFA"]
[Wed Jan 07 06:29:04.897055 2026] [:error] [pid 6572:tid 6648] [client 20.239.71.136:42797] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wqqs.php"] [unique_id "aV2MsHVZKKyUNbqWyYJAlgAAAIg"]
[Wed Jan 07 06:29:05.445641 2026] [:error] [pid 6677:tid 6708] [client 20.239.71.136:37440] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wqqs.php"] [unique_id "aV2MsX1cbekSFYxHbiMmHgAAANA"]
[Wed Jan 07 06:29:06.017263 2026] [:error] [pid 6571:tid 6616] [client 20.239.71.136:1787] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wqqs.php"] [unique_id "aV2Msg_rJpa_Vt6ZE1D3zwAAAEM"]
[Wed Jan 07 06:29:06.437006 2026] [:error] [pid 6572:tid 6647] [client 20.239.71.136:3190] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wqqs.php"] [unique_id "aV2MsnVZKKyUNbqWyYJAmQAAAIc"]
[Wed Jan 07 06:29:06.901927 2026] [:error] [pid 6571:tid 6623] [client 20.239.71.136:45559] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aV2Msg_rJpa_Vt6ZE1D30gAAAEo"]
[Wed Jan 07 06:29:07.613929 2026] [:error] [pid 6570:tid 6607] [client 20.239.71.136:45513] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aV2Ms5mjKDvKV_Af0eryOAAAABU"]
[Wed Jan 07 06:29:07.994698 2026] [:error] [pid 6677:tid 6696] [client 20.239.71.136:14068] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aV2Ms31cbekSFYxHbiMmIgAAAMQ"]
[Wed Jan 07 06:29:08.564485 2026] [:error] [pid 6572:tid 6653] [client 20.239.71.136:31288] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aV2MtHVZKKyUNbqWyYJAnAAAAI0"]
[Wed Jan 07 06:29:09.192732 2026] [:error] [pid 51200:tid 51261] [client 20.239.71.136:40405] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aV2MtYjhb00oxKSD4lerTgAAAQ0"]
[Wed Jan 07 06:29:09.663900 2026] [:error] [pid 6571:tid 6632] [client 20.239.71.136:31272] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aV2MtQ_rJpa_Vt6ZE1D31AAAAFM"]
[Wed Jan 07 06:29:10.027928 2026] [:error] [pid 6570:tid 6588] [client 20.239.71.136:25029] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aV2MtpmjKDvKV_Af0eryPAAAAAI"]
[Wed Jan 07 06:29:10.338272 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:25052] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aV2Mtojhb00oxKSD4lerUQAAAQ4"]
[Wed Jan 07 06:29:10.746202 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:37464] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aV2Mtojhb00oxKSD4lerVAAAAQ8"]
[Wed Jan 07 06:29:12.202184 2026] [:error] [pid 6572:tid 6662] [client 20.239.71.136:14020] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aV2MuHVZKKyUNbqWyYJAnwAAAJY"]
[Wed Jan 07 06:29:12.640700 2026] [:error] [pid 6572:tid 6663] [client 20.239.71.136:31281] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aV2MuHVZKKyUNbqWyYJAoAAAAJc"]
[Wed Jan 07 06:29:12.981919 2026] [:error] [pid 6572:tid 6643] [client 20.239.71.136:14040] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aV2MuHVZKKyUNbqWyYJAogAAAIM"]
[Wed Jan 07 06:29:13.498392 2026] [:error] [pid 6572:tid 6660] [client 20.239.71.136:3175] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "aV2MuXVZKKyUNbqWyYJAowAAAJQ"]
[Wed Jan 07 06:29:14.767452 2026] [:error] [pid 6571:tid 6626] [client 20.239.71.136:31292] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "aV2Mug_rJpa_Vt6ZE1D32wAAAE0"]
[Wed Jan 07 06:29:16.156107 2026] [:error] [pid 51200:tid 51261] [client 20.239.71.136:1873] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "aV2MvIjhb00oxKSD4lerXAAAAQ0"]
[Wed Jan 07 06:29:17.119907 2026] [:error] [pid 6677:tid 6711] [client 20.239.71.136:40418] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "aV2MvX1cbekSFYxHbiMmJAAAANM"]
[Wed Jan 07 06:29:17.462014 2026] [:error] [pid 6572:tid 6646] [client 20.239.71.136:31265] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aV2MvXVZKKyUNbqWyYJApQAAAIY"]
[Wed Jan 07 06:29:17.857856 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:20856] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aV2MvXVZKKyUNbqWyYJApwAAAJI"]
[Wed Jan 07 06:29:19.516054 2026] [:error] [pid 6570:tid 6586] [client 20.239.71.136:25046] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aV2Mv5mjKDvKV_Af0eryQgAAAAA"]
[Wed Jan 07 06:29:19.961675 2026] [:error] [pid 6570:tid 6596] [client 20.239.71.136:3318] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aV2Mv5mjKDvKV_Af0eryRAAAAAo"]
[Wed Jan 07 06:29:20.467014 2026] [:error] [pid 6570:tid 6598] [client 20.239.71.136:1887] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fasx.php"] [unique_id "aV2MwJmjKDvKV_Af0eryRgAAAAw"]
[Wed Jan 07 06:29:21.008890 2026] [:error] [pid 6571:tid 6632] [client 20.239.71.136:1897] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fasx.php"] [unique_id "aV2MwQ_rJpa_Vt6ZE1D35AAAAFM"]
[Wed Jan 07 06:29:21.636796 2026] [:error] [pid 6677:tid 6709] [client 20.239.71.136:40839] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fasx.php"] [unique_id "aV2MwX1cbekSFYxHbiMmJQAAANE"]
[Wed Jan 07 06:29:22.699473 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:40863] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fasx.php"] [unique_id "aV2Mwojhb00oxKSD4lerYwAAARU"]
[Wed Jan 07 06:29:23.420044 2026] [:error] [pid 6677:tid 6700] [client 20.239.71.136:25049] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c4.php"] [unique_id "aV2Mw31cbekSFYxHbiMmJwAAAMg"]
[Wed Jan 07 06:29:24.188531 2026] [:error] [pid 6572:tid 6664] [client 20.239.71.136:42790] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c4.php"] [unique_id "aV2MxHVZKKyUNbqWyYJAsAAAAJg"]
[Wed Jan 07 06:29:24.753297 2026] [:error] [pid 6570:tid 6606] [client 20.239.71.136:37451] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c4.php"] [unique_id "aV2MxJmjKDvKV_Af0erySgAAABQ"]
[Wed Jan 07 06:29:25.202688 2026] [:error] [pid 6677:tid 6716] [client 20.239.71.136:40838] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c4.php"] [unique_id "aV2MxX1cbekSFYxHbiMmKwAAANg"]
[Wed Jan 07 06:29:25.939529 2026] [:error] [pid 6570:tid 6605] [client 20.239.71.136:33658] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock1.php"] [unique_id "aV2MxZmjKDvKV_Af0eryTAAAABM"]
[Wed Jan 07 06:29:27.157836 2026] [:error] [pid 6677:tid 6712] [client 20.239.71.136:42774] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock1.php"] [unique_id "aV2Mx31cbekSFYxHbiMmLwAAANQ"]
[Wed Jan 07 06:29:27.839455 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:31234] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock1.php"] [unique_id "aV2Mx4jhb00oxKSD4lerZQAAAQc"]
[Wed Jan 07 06:29:28.403941 2026] [:error] [pid 6570:tid 6609] [client 20.239.71.136:4159] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock1.php"] [unique_id "aV2MyJmjKDvKV_Af0eryTwAAABc"]
[Wed Jan 07 06:29:29.208593 2026] [:error] [pid 6570:tid 6599] [client 20.239.71.136:19503] [client 20.239.71.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV2MyZmjKDvKV_Af0eryUgAAAA0"]
[Wed Jan 07 06:29:30.036163 2026] [:error] [pid 6570:tid 6596] [client 20.239.71.136:1747] [client 20.239.71.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/info.php"] [unique_id "aV2MypmjKDvKV_Af0eryVgAAAAo"]
[Wed Jan 07 06:29:30.589505 2026] [:error] [pid 6570:tid 6602] [client 20.239.71.136:4649] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/en/gastenboek.php"] [unique_id "aV2MypmjKDvKV_Af0eryWAAAABA"]
[Wed Jan 07 06:29:30.919290 2026] [:error] [pid 6570:tid 6595] [client 20.239.71.136:37462] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/en/gastenboek.php"] [unique_id "aV2MypmjKDvKV_Af0eryWQAAAAk"]
[Wed Jan 07 06:29:31.330629 2026] [:error] [pid 6677:tid 6705] [client 20.239.71.136:24230] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/en/gastenboek.php"] [unique_id "aV2My31cbekSFYxHbiMmMwAAAM0"]
[Wed Jan 07 06:29:31.878570 2026] [:error] [pid 51200:tid 51248] [client 20.239.71.136:33625] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/en/gastenboek.php"] [unique_id "aV2My4jhb00oxKSD4lerbAAAAQA"]
[Wed Jan 07 06:29:32.476607 2026] [:error] [pid 6570:tid 6607] [client 20.239.71.136:42815] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV2MzJmjKDvKV_Af0eryWwAAABU"]
[Wed Jan 07 06:29:33.882655 2026] [:error] [pid 6677:tid 6711] [client 20.239.71.136:4150] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV2MzX1cbekSFYxHbiMmNgAAANM"]
[Wed Jan 07 06:29:34.468694 2026] [:error] [pid 6570:tid 6591] [client 20.239.71.136:3193] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV2MzpmjKDvKV_Af0eryXwAAAAU"]
[Wed Jan 07 06:29:35.458868 2026] [:error] [pid 6570:tid 6599] [client 20.239.71.136:37444] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV2Mz5mjKDvKV_Af0eryYAAAAA0"]
[Wed Jan 07 06:29:36.222407 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:3177] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock11.php"] [unique_id "aV2M0Ijhb00oxKSD4lercQAAARE"]
[Wed Jan 07 06:29:36.560461 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:37466] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock11.php"] [unique_id "aV2M0Ijhb00oxKSD4lercgAAAQ8"]
[Wed Jan 07 06:29:36.956762 2026] [:error] [pid 51200:tid 51256] [client 20.239.71.136:4142] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock11.php"] [unique_id "aV2M0Ijhb00oxKSD4lerdQAAAQg"]
[Wed Jan 07 06:29:37.957138 2026] [:error] [pid 6571:tid 6619] [client 20.239.71.136:19718] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock11.php"] [unique_id "aV2M0Q_rJpa_Vt6ZE1D37wAAAEY"]
[Wed Jan 07 06:29:38.560707 2026] [:error] [pid 6571:tid 6627] [client 20.239.71.136:4100] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api137.php"] [unique_id "aV2M0g_rJpa_Vt6ZE1D38AAAAE4"]
[Wed Jan 07 06:29:40.320025 2026] [:error] [pid 6571:tid 6625] [client 20.239.71.136:40887] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api137.php"] [unique_id "aV2M1A_rJpa_Vt6ZE1D38wAAAEw"]
[Wed Jan 07 06:29:41.139693 2026] [:error] [pid 6570:tid 6586] [client 20.239.71.136:4143] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api137.php"] [unique_id "aV2M1ZmjKDvKV_Af0eryZAAAAAA"]
[Wed Jan 07 06:29:41.852361 2026] [:error] [pid 6677:tid 6697] [client 20.239.71.136:4101] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api137.php"] [unique_id "aV2M1X1cbekSFYxHbiMmPgAAAMU"]
[Wed Jan 07 06:29:42.520294 2026] [:error] [pid 6572:tid 6662] [client 20.239.71.136:19489] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class629.php"] [unique_id "aV2M1nVZKKyUNbqWyYJAvAAAAJY"]
[Wed Jan 07 06:29:42.946648 2026] [:error] [pid 6572:tid 6663] [client 20.239.71.136:19463] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class629.php"] [unique_id "aV2M1nVZKKyUNbqWyYJAvQAAAJc"]
[Wed Jan 07 06:29:43.440608 2026] [:error] [pid 51200:tid 51250] [client 20.239.71.136:40861] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class629.php"] [unique_id "aV2M14jhb00oxKSD4leregAAAQI"]
[Wed Jan 07 06:29:44.048362 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:40834] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class629.php"] [unique_id "aV2M2Ijhb00oxKSD4lerfwAAAQ8"]
[Wed Jan 07 06:29:44.851771 2026] [:error] [pid 51200:tid 51257] [client 20.239.71.136:11649] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp670.php"] [unique_id "aV2M2Ijhb00oxKSD4lerhQAAAQk"]
[Wed Jan 07 06:29:45.355679 2026] [:error] [pid 6572:tid 6660] [client 20.239.71.136:33628] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp670.php"] [unique_id "aV2M2XVZKKyUNbqWyYJAwAAAAJQ"]
[Wed Jan 07 06:29:45.789670 2026] [:error] [pid 6571:tid 6637] [client 20.239.71.136:23806] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp670.php"] [unique_id "aV2M2Q_rJpa_Vt6ZE1D39QAAAFg"]
[Wed Jan 07 06:29:46.201934 2026] [:error] [pid 6570:tid 6596] [client 20.239.71.136:31258] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp670.php"] [unique_id "aV2M2pmjKDvKV_Af0eryeQAAAAo"]
[Wed Jan 07 06:29:46.696272 2026] [:error] [pid 6570:tid 6587] [client 20.239.71.136:23791] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aV2M2pmjKDvKV_Af0eryewAAAAE"]
[Wed Jan 07 06:29:47.766706 2026] [:error] [pid 51200:tid 51266] [client 20.239.71.136:33614] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aV2M24jhb00oxKSD4lerjgAAARI"]
[Wed Jan 07 06:29:48.603137 2026] [:error] [pid 51200:tid 51256] [client 20.239.71.136:4116] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aV2M3Ijhb00oxKSD4lerkwAAAQg"]
[Wed Jan 07 06:29:48.966842 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:1753] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v1.php"] [unique_id "aV2M3Ijhb00oxKSD4lerlQAAAQc"]
[Wed Jan 07 06:29:49.646538 2026] [:error] [pid 51200:tid 51260] [client 20.239.71.136:25061] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aV2M3Yjhb00oxKSD4lermQAAAQw"]
[Wed Jan 07 06:29:50.294982 2026] [:error] [pid 6570:tid 6610] [client 20.239.71.136:37441] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aV2M3pmjKDvKV_Af0eryiQAAABg"]
[Wed Jan 07 06:29:50.937285 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:25053] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aV2M3ojhb00oxKSD4leroAAAARU"]
[Wed Jan 07 06:29:51.489050 2026] [:error] [pid 6572:tid 6640] [client 20.239.71.136:1728] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aV2M33VZKKyUNbqWyYJAwwAAAIA"]
[Wed Jan 07 06:29:52.383115 2026] [:error] [pid 6570:tid 6600] [client 20.239.71.136:40886] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/userk.php"] [unique_id "aV2M4JmjKDvKV_Af0eryjQAAAA4"]
[Wed Jan 07 06:29:53.475684 2026] [:error] [pid 6570:tid 6605] [client 20.239.71.136:25057] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/userk.php"] [unique_id "aV2M4ZmjKDvKV_Af0eryjwAAABM"]
[Wed Jan 07 06:29:54.350218 2026] [:error] [pid 6677:tid 6707] [client 20.239.71.136:33633] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/userk.php"] [unique_id "aV2M4n1cbekSFYxHbiMmQwAAAM8"]
[Wed Jan 07 06:29:55.248024 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:40007] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/userk.php"] [unique_id "aV2M44jhb00oxKSD4lerpgAAAQ8"]
[Wed Jan 07 06:29:55.563024 2026] [:error] [pid 6677:tid 6706] [client 20.239.71.136:40867] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/skinmain.php"] [unique_id "aV2M431cbekSFYxHbiMmRwAAAM4"]
[Wed Jan 07 06:29:56.544594 2026] [:error] [pid 6571:tid 6626] [client 20.239.71.136:23748] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/skinmain.php"] [unique_id "aV2M5A_rJpa_Vt6ZE1D3-gAAAE0"]
[Wed Jan 07 06:29:57.418323 2026] [:error] [pid 6571:tid 6624] [client 20.239.71.136:1777] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/skinmain.php"] [unique_id "aV2M5Q_rJpa_Vt6ZE1D3_AAAAEs"]
[Wed Jan 07 06:29:57.860434 2026] [:error] [pid 6571:tid 6627] [client 20.239.71.136:19499] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/skinmain.php"] [unique_id "aV2M5Q_rJpa_Vt6ZE1D3_QAAAE4"]
[Wed Jan 07 06:29:58.635375 2026] [:error] [pid 51200:tid 51248] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/orxnwdbb.php
[Wed Jan 07 06:29:58.756072 2026] [:error] [pid 51200:tid 51260] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Wed Jan 07 06:29:58.877285 2026] [:error] [pid 51200:tid 51268] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/fs8.php
[Wed Jan 07 06:30:00.699069 2026] [:error] [pid 51200:tid 51258] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.5.0-mysql.php
[Wed Jan 07 06:30:00.952149 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/video.php
[Wed Jan 07 06:30:01.090704 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/scgi-bin.php
[Wed Jan 07 06:30:01.291775 2026] [:error] [pid 51200:tid 51248] [client 20.239.71.136:24243] File does not exist: /usr/local/apache/htdocs/suspended-page/finest09.php
[Wed Jan 07 06:30:01.422924 2026] [:error] [pid 51200:tid 51251] [client 20.239.71.136:24243] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1100.php"] [unique_id "aV2M6Yjhb00oxKSD4lerwwAAAQM"]
[Wed Jan 07 06:30:01.759136 2026] [:error] [pid 6571:tid 6637] [client 20.239.71.136:40843] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1100.php"] [unique_id "aV2M6Q_rJpa_Vt6ZE1D4AgAAAFg"]
[Wed Jan 07 06:30:02.131413 2026] [:error] [pid 6571:tid 6620] [client 20.239.71.136:23801] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1100.php"] [unique_id "aV2M6g_rJpa_Vt6ZE1D4AwAAAEc"]
[Wed Jan 07 06:30:02.958451 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:4104] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1100.php"] [unique_id "aV2M6ojhb00oxKSD4leryQAAARA"]
[Wed Jan 07 06:30:03.580604 2026] [:error] [pid 6571:tid 6614] [client 20.239.71.136:11696] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iov.php"] [unique_id "aV2M6w_rJpa_Vt6ZE1D4BQAAAEE"]
[Wed Jan 07 06:30:04.045049 2026] [:error] [pid 51200:tid 51263] [client 20.239.71.136:19472] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iov.php"] [unique_id "aV2M7Ijhb00oxKSD4ler0gAAAQ8"]
[Wed Jan 07 06:30:04.371856 2026] [:error] [pid 51200:tid 51258] [client 20.239.71.136:40851] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iov.php"] [unique_id "aV2M7Ijhb00oxKSD4ler1gAAAQo"]
[Wed Jan 07 06:30:05.004525 2026] [:error] [pid 6570:tid 6591] [client 20.239.71.136:19471] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iov.php"] [unique_id "aV2M7ZmjKDvKV_Af0erykgAAAAU"]
[Wed Jan 07 06:30:05.380340 2026] [:error] [pid 6572:tid 6647] [client 20.239.71.136:37482] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/config.php"] [unique_id "aV2M7XVZKKyUNbqWyYJA2gAAAIc"]
[Wed Jan 07 06:30:05.809417 2026] [:error] [pid 6571:tid 6635] [client 20.239.71.136:40840] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/config.php"] [unique_id "aV2M7Q_rJpa_Vt6ZE1D4BgAAAFY"]
[Wed Jan 07 06:30:06.494076 2026] [:error] [pid 51200:tid 51270] [client 20.239.71.136:23772] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/config.php"] [unique_id "aV2M7ojhb00oxKSD4ler3AAAARY"]
[Wed Jan 07 06:30:07.143186 2026] [:error] [pid 6571:tid 6617] [client 20.239.71.136:4157] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/config.php"] [unique_id "aV2M7w_rJpa_Vt6ZE1D4CQAAAEQ"]
[Wed Jan 07 06:30:07.925773 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:45589] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2M74jhb00oxKSD4ler3gAAAQc"]
[Wed Jan 07 06:30:08.893826 2026] [:error] [pid 6571:tid 6626] [client 20.239.71.136:19480] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2M8A_rJpa_Vt6ZE1D4CgAAAE0"]
[Wed Jan 07 06:30:09.232319 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:11507] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2M8Yjhb00oxKSD4ler4wAAARc"]
[Wed Jan 07 06:30:09.984199 2026] [:error] [pid 51200:tid 51267] [client 20.239.71.136:11483] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV2M8Yjhb00oxKSD4ler5wAAARM"]
[Wed Jan 07 06:30:10.802796 2026] [:error] [pid 6571:tid 6624] [client 20.239.71.136:24209] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known.php"] [unique_id "aV2M8g_rJpa_Vt6ZE1D4CwAAAEs"]
[Wed Jan 07 06:30:11.834398 2026] [:error] [pid 6570:tid 6606] [client 20.239.71.136:33632] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known.php"] [unique_id "aV2M85mjKDvKV_Af0erylwAAABQ"]
[Wed Jan 07 06:30:12.801598 2026] [:error] [pid 6677:tid 6706] [client 20.239.71.136:1669] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known.php"] [unique_id "aV2M9H1cbekSFYxHbiMmVgAAAM4"]
[Wed Jan 07 06:30:13.230721 2026] [:error] [pid 6572:tid 6656] [client 20.239.71.136:24204] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known.php"] [unique_id "aV2M9XVZKKyUNbqWyYJA3wAAAJA"]
[Wed Jan 07 06:30:13.641466 2026] [:error] [pid 6571:tid 6615] [client 20.239.71.136:19481] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/02.php"] [unique_id "aV2M9Q_rJpa_Vt6ZE1D4DwAAAEI"]
[Wed Jan 07 06:30:14.585130 2026] [:error] [pid 6571:tid 6625] [client 20.239.71.136:23464] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/02.php"] [unique_id "aV2M9g_rJpa_Vt6ZE1D4EQAAAEw"]
[Wed Jan 07 06:30:15.054009 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:33613] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/02.php"] [unique_id "aV2M94jhb00oxKSD4ler7gAAARc"]
[Wed Jan 07 06:30:15.856675 2026] [:error] [pid 6572:tid 6646] [client 20.239.71.136:11511] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/02.php"] [unique_id "aV2M93VZKKyUNbqWyYJA4gAAAIY"]
[Wed Jan 07 06:30:16.718674 2026] [:error] [pid 6677:tid 6698] [client 20.239.71.136:23800] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aV2M-H1cbekSFYxHbiMmWgAAAMY"]
[Wed Jan 07 06:30:17.705722 2026] [:error] [pid 6571:tid 6622] [client 20.239.71.136:11480] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aV2M-Q_rJpa_Vt6ZE1D4EgAAAEk"]
[Wed Jan 07 06:30:18.242315 2026] [:error] [pid 6570:tid 6593] [client 20.239.71.136:19519] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aV2M-pmjKDvKV_Af0erynAAAAAc"]
[Wed Jan 07 06:30:18.683731 2026] [:error] [pid 6570:tid 6601] [client 20.239.71.136:24725] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aV2M-pmjKDvKV_Af0erynQAAAA8"]
[Wed Jan 07 06:30:19.011806 2026] [:error] [pid 6677:tid 6713] [client 20.239.71.136:24718] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2024.php"] [unique_id "aV2M-31cbekSFYxHbiMmXgAAANU"]
[Wed Jan 07 06:30:19.792776 2026] [:error] [pid 6677:tid 6697] [client 20.239.71.136:40028] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2024.php"] [unique_id "aV2M-31cbekSFYxHbiMmXwAAAMU"]
[Wed Jan 07 06:30:20.347462 2026] [:error] [pid 51200:tid 51265] [client 20.239.71.136:40833] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2024.php"] [unique_id "aV2M_Ijhb00oxKSD4ler9QAAARE"]
[Wed Jan 07 06:30:20.868598 2026] [:error] [pid 6677:tid 6701] [client 20.239.71.136:24706] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2024.php"] [unique_id "aV2M_H1cbekSFYxHbiMmYAAAAMk"]
[Wed Jan 07 06:30:21.293304 2026] [:error] [pid 51200:tid 51269] [client 20.239.71.136:18093] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aV2M_Yjhb00oxKSD4ler-AAAARU"]
[Wed Jan 07 06:30:22.351642 2026] [:error] [pid 6570:tid 6591] [client 20.239.71.136:45584] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aV2M_pmjKDvKV_Af0eryoQAAAAU"]
[Wed Jan 07 06:30:24.611762 2026] [:error] [pid 51200:tid 51259] [client 20.239.71.136:19458] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aV2NAIjhb00oxKSD4ler_QAAAQs"]
[Wed Jan 07 06:30:25.157298 2026] [:error] [pid 6570:tid 6586] [client 20.239.71.136:24222] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aV2NAZmjKDvKV_Af0erypAAAAAA"]
[Wed Jan 07 06:30:25.580736 2026] [:error] [pid 6570:tid 6608] [client 20.239.71.136:24715] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Diff.php"] [unique_id "aV2NAZmjKDvKV_Af0erypQAAABY"]
[Wed Jan 07 06:30:26.957677 2026] [:error] [pid 51200:tid 51260] [client 20.239.71.136:24762] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Diff.php"] [unique_id "aV2NAojhb00oxKSD4lesAAAAAQw"]
[Wed Jan 07 06:30:27.565465 2026] [:error] [pid 6571:tid 6618] [client 20.239.71.136:24255] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Diff.php"] [unique_id "aV2NAw_rJpa_Vt6ZE1D4HAAAAEU"]
[Wed Jan 07 06:30:28.391097 2026] [:error] [pid 51200:tid 51261] [client 20.239.71.136:11675] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Diff.php"] [unique_id "aV2NBIjhb00oxKSD4lesAgAAAQ0"]
[Wed Jan 07 06:30:29.099439 2026] [:error] [pid 6677:tid 6714] [client 20.239.71.136:24705] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Engine.php"] [unique_id "aV2NBX1cbekSFYxHbiMmawAAANY"]
[Wed Jan 07 06:30:29.579863 2026] [:error] [pid 6677:tid 6694] [client 20.239.71.136:23780] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Engine.php"] [unique_id "aV2NBX1cbekSFYxHbiMmbAAAAMI"]
[Wed Jan 07 06:30:30.188540 2026] [:error] [pid 51200:tid 51273] [client 20.239.71.136:19482] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Engine.php"] [unique_id "aV2NBojhb00oxKSD4lesBwAAARg"]
[Wed Jan 07 06:30:31.341818 2026] [:error] [pid 6572:tid 6659] [client 20.239.71.136:20182] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Engine.php"] [unique_id "aV2NB3VZKKyUNbqWyYJA5wAAAJM"]
[Wed Jan 07 06:30:31.926393 2026] [:error] [pid 51200:tid 51259] [client 20.239.71.136:11679] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ID3.php"] [unique_id "aV2NB4jhb00oxKSD4lesDAAAAQs"]
[Wed Jan 07 06:30:32.459850 2026] [:error] [pid 6570:tid 6591] [client 20.239.71.136:39910] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ID3.php"] [unique_id "aV2NCJmjKDvKV_Af0eryrwAAAAU"]
[Wed Jan 07 06:30:33.093829 2026] [:error] [pid 6677:tid 6695] [client 20.239.71.136:24233] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ID3.php"] [unique_id "aV2NCX1cbekSFYxHbiMmbwAAAMM"]
[Wed Jan 07 06:30:33.862453 2026] [:error] [pid 51200:tid 51253] [client 20.239.71.136:40014] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ID3.php"] [unique_id "aV2NCYjhb00oxKSD4lesDgAAAQU"]
[Wed Jan 07 06:30:34.472940 2026] [:error] [pid 6571:tid 6625] [client 20.239.71.136:3753] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/IXR.php"] [unique_id "aV2NCg_rJpa_Vt6ZE1D4IgAAAEw"]
[Wed Jan 07 06:30:35.320696 2026] [:error] [pid 6571:tid 6622] [client 20.239.71.136:20314] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/IXR.php"] [unique_id "aV2NCw_rJpa_Vt6ZE1D4IwAAAEk"]
[Wed Jan 07 06:30:35.637618 2026] [:error] [pid 6571:tid 6628] [client 20.239.71.136:11456] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/IXR.php"] [unique_id "aV2NCw_rJpa_Vt6ZE1D4JAAAAE8"]
[Wed Jan 07 06:30:36.158176 2026] [:error] [pid 6677:tid 6701] [client 20.239.71.136:23783] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/IXR.php"] [unique_id "aV2NDH1cbekSFYxHbiMmcgAAAMk"]
[Wed Jan 07 06:30:36.924349 2026] [:error] [pid 6571:tid 6619] [client 20.239.71.136:24226] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/SimplePie.php"] [unique_id "aV2NDA_rJpa_Vt6ZE1D4JwAAAEY"]
[Wed Jan 07 06:30:37.580479 2026] [:error] [pid 6571:tid 6614] [client 20.239.71.136:40038] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/SimplePie.php"] [unique_id "aV2NDQ_rJpa_Vt6ZE1D4KAAAAEE"]
[Wed Jan 07 06:30:38.022954 2026] [:error] [pid 6571:tid 6613] [client 20.239.71.136:23333] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/SimplePie.php"] [unique_id "aV2NDg_rJpa_Vt6ZE1D4KQAAAEA"]
[Wed Jan 07 06:30:38.511612 2026] [:error] [pid 51200:tid 51272] [client 20.239.71.136:23770] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/SimplePie.php"] [unique_id "aV2NDojhb00oxKSD4lesFAAAARc"]
[Wed Jan 07 06:30:39.096520 2026] [:error] [pid 51200:tid 51273] [client 20.239.71.136:40050] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Text.php"] [unique_id "aV2ND4jhb00oxKSD4lesFQAAARg"]
[Wed Jan 07 06:30:39.588945 2026] [:error] [pid 6570:tid 6598] [client 20.239.71.136:24735] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Text.php"] [unique_id "aV2ND5mjKDvKV_Af0erytgAAAAw"]
[Wed Jan 07 06:30:40.277594 2026] [:error] [pid 6570:tid 6587] [client 20.239.71.136:11702] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Text.php"] [unique_id "aV2NEJmjKDvKV_Af0erytwAAAAE"]
[Wed Jan 07 06:30:40.723680 2026] [:error] [pid 6572:tid 6651] [client 20.239.71.136:11510] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Text.php"] [unique_id "aV2NEHVZKKyUNbqWyYJA7wAAAIs"]
[Wed Jan 07 06:30:41.240300 2026] [:error] [pid 51200:tid 51264] [client 20.239.71.136:1219] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aahana.php"] [unique_id "aV2NEYjhb00oxKSD4lesGQAAARA"]
[Wed Jan 07 06:30:41.574012 2026] [:error] [pid 51200:tid 51249] [client 20.239.71.136:40027] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aahana.php"] [unique_id "aV2NEYjhb00oxKSD4lesGgAAAQE"]
[Wed Jan 07 06:30:42.283281 2026] [:error] [pid 51200:tid 51255] [client 20.239.71.136:11472] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aahana.php"] [unique_id "aV2NEojhb00oxKSD4lesGwAAAQc"]
[Wed Jan 07 06:30:42.982164 2026] [:error] [pid 6572:tid 6657] [client 20.239.71.136:40055] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aahana.php"] [unique_id "aV2NEnVZKKyUNbqWyYJA8gAAAJE"]
[Wed Jan 07 06:30:43.471611 2026] [:error] [pid 51200:tid 51270] [client 20.239.71.136:23081] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aV2NE4jhb00oxKSD4lesHwAAARY"]
[Wed Jan 07 06:30:44.059167 2026] [:error] [pid 6572:tid 6658] [client 20.239.71.136:3256] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aV2NFHVZKKyUNbqWyYJA9AAAAJI"]
[Wed Jan 07 06:30:44.490111 2026] [:error] [pid 51200:tid 51262] [client 20.239.71.136:24756] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aV2NFIjhb00oxKSD4lesIQAAAQ4"]
[Wed Jan 07 06:30:45.278081 2026] [:error] [pid 6572:tid 6641] [client 20.239.71.136:23930] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aV2NFXVZKKyUNbqWyYJA9wAAAIE"]
[Wed Jan 07 07:07:20.695271 2026] [:error] [pid 51200:tid 51262] [client 43.157.53.115:51194] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV2VqIjhb00oxKSD4le5GwAAAQ4"]
[Wed Jan 07 07:09:00.461028 2026] [:error] [pid 6677:tid 6711] [client 182.40.104.255:55114] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV2WDH1cbekSFYxHbiMxvAAAANM"]
[Wed Jan 07 14:39:22.940381 2026] [:error] [pid 30633:tid 30675] [client 43.135.142.7:36772] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV3_mvZiVWlF7303nMhfrwAAAEw"]
[Wed Jan 07 14:49:30.541422 2026] [:error] [pid 30632:tid 30646] [client 43.130.101.151:56738] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV4B-ud3_LCpBJzo02e_1wAAAAo"]
[Wed Jan 07 18:42:40.260679 2026] [:error] [pid 30632:tid 30655] [client 167.71.90.72:59715] [client 167.71.90.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "aV44oOd3_LCpBJzo02fqKAAAABM"], referer: binance.com
[Wed Jan 07 18:42:43.574436 2026] [:error] [pid 30634:tid 30704] [client 167.71.90.72:49190] [client 167.71.90.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/files/"] [unique_id "aV44o4CIPBibObtmZtv0UwAAAM4"], referer: binance.com
[Wed Jan 07 21:45:14.584931 2026] [:error] [pid 50838:tid 50863] [client 136.158.2.237:22420] [client 136.158.2.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.2.237, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aV5jarSweZ27JIN4H8vU7QAAAdc"]
[Wed Jan 07 21:45:14.589760 2026] [:error] [pid 50838:tid 50863] [client 136.158.2.237:22420] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 07 21:46:12.889681 2026] [:error] [pid 30633:tid 30678] [client 193.163.187.232:60892] [client 193.163.187.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.163.187.232, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aV5jpPZiVWlF7303nMi8DAAAAE8"]
[Wed Jan 07 21:46:12.895739 2026] [:error] [pid 30633:tid 30678] [client 193.163.187.232:60892] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 07 21:48:13.140966 2026] [:error] [pid 58330:tid 58356] [client 43.130.60.195:37634] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV5kHQ8kGngKGK7_wncLRwAAARg"]
[Wed Jan 07 23:12:20.338045 2026] [:error] [pid 30632:tid 30658] [client 104.28.235.58:55685] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aV531Od3_LCpBJzo02ck3wAAABY"]
[Thu Jan 08 01:54:27.622419 2026] [:error] [pid 51128:tid 51141] [client 138.197.32.240:64448] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/"] [unique_id "aV6d00GjtE8U88mrwufSqwAAAYs"], referer: binance.com
[Thu Jan 08 01:54:32.396091 2026] [:error] [pid 30633:tid 30676] [client 138.197.32.240:49582] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/"] [unique_id "aV6d2PZiVWlF7303nMjh0gAAAE0"], referer: binance.com
[Thu Jan 08 02:53:33.407399 2026] [:error] [pid 58330:tid 58338] [client 182.44.10.67:35534] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV6rrQ8kGngKGK7_wndHwwAAAQY"]
[Thu Jan 08 05:35:49.884906 2026] [:error] [pid 2484:tid 2505] [client 155.117.98.100:64568] File does not exist: /usr/local/apache/htdocs/suspended-page/baker.php
[Thu Jan 08 05:51:10.814213 2026] [:error] [pid 2424:tid 2429] [client 43.130.9.111:40372] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV7VTrTDJR8aofkBk9RiZQAAAQM"]
[Thu Jan 08 05:59:24.403866 2026] [:error] [pid 15264:tid 15313] [client 43.153.67.21:40286] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV7XPIov6_kvS0Owh-p_PwAAAE4"]
[Thu Jan 08 10:30:53.401246 2026] [:error] [pid 2424:tid 2427] [client 103.77.107.178:61761] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aV8W3bTDJR8aofkBk9SWwAAAAQE"]
[Thu Jan 08 10:30:53.932227 2026] [:error] [pid 2484:tid 2501] [client 103.77.107.178:62196] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aV8W3TiDlnlaQQK_AEPIcQAAAU0"]
[Thu Jan 08 13:46:18.806070 2026] [:error] [pid 15263:tid 15290] [client 43.157.170.13:56336] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV9Eqtv61bxum7WG_e_EYQAAABI"]
[Thu Jan 08 13:54:32.034877 2026] [:error] [pid 2424:tid 2436] [client 43.157.53.115:57574] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV9GmLTDJR8aofkBk9TPvwAAAQo"]
[Thu Jan 08 15:48:57.532371 2026] [:error] [pid 15264:tid 15307] [client 60.188.57.0:56657] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aV9haYov6_kvS0Owh-rnMAAAAEg"]
[Thu Jan 08 16:22:12.176385 2026] [:error] [pid 15264:tid 15317] [client 93.115.28.158:51232] [client 93.115.28.158] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/zip"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV9pNIov6_kvS0Owh-rrWwAAAFI"]
[Thu Jan 08 19:08:19.696493 2026] [:error] [pid 7586:tid 7612] [client 103.77.107.178:65321] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aV-QI8Jyk37GdXP5TmVaeAAAAdY"]
[Thu Jan 08 20:56:44.194379 2026] [:error] [pid 15264:tid 15300] [client 49.51.196.42:58396] [client 49.51.196.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aV-pjIov6_kvS0Owh-oSsgAAAEE"]
[Thu Jan 08 22:48:27.590311 2026] [:error] [pid 17404:tid 17418] [client 179.76.61.250:63953] [client 179.76.61.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.76.61.250, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aV_Du2Vd_oH193N6AnXSrQAAAYw"]
[Thu Jan 08 22:48:27.594875 2026] [:error] [pid 17404:tid 17418] [client 179.76.61.250:63953] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 09 00:54:58.539784 2026] [:error] [pid 2424:tid 2441] [client 136.116.164.24:61179] [client 136.116.164.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.164.24, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aV_hYrTDJR8aofkBk9RiHgAAAQ8"]
[Fri Jan 09 00:54:58.543227 2026] [:error] [pid 2424:tid 2441] [client 136.116.164.24:61179] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 09 00:55:00.916890 2026] [:error] [pid 2424:tid 2426] [client 136.116.164.24:61179] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV_hZLTDJR8aofkBk9RiKgAAAQA"]
[Fri Jan 09 00:55:01.394237 2026] [:error] [pid 15358:tid 15382] [client 136.116.164.24:59477] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV_hZSoRk9xWJ3toSBKv-wAAAMw"]
[Fri Jan 09 00:55:02.272772 2026] [:error] [pid 15263:tid 15280] [client 136.116.164.24:60821] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV_hZtv61bxum7WG_e8t7QAAAAg"]
[Fri Jan 09 00:55:02.972221 2026] [:error] [pid 2484:tid 2494] [client 136.116.164.24:63496] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV_hZjiDlnlaQQK_AEPRjQAAAUc"]
[Fri Jan 09 00:55:03.653312 2026] [:error] [pid 15358:tid 15385] [client 136.116.164.24:63894] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV_hZyoRk9xWJ3toSBKwAAAAAM8"]
[Fri Jan 09 00:55:04.185723 2026] [:error] [pid 15264:tid 15302] [client 136.116.164.24:65107] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV_haIov6_kvS0Owh-o5RQAAAEM"]
[Fri Jan 09 00:55:04.856561 2026] [:error] [pid 2484:tid 2488] [client 136.116.164.24:59767] [client 136.116.164.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV_haDiDlnlaQQK_AEPRkQAAAUI"]
[Fri Jan 09 04:13:21.156763 2026] [:error] [pid 35811:tid 35852] [client 216.81.248.94:50162] [client 216.81.248.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aWAP4W7lx9V0CvYJJf2d6AAAAEU"]
[Fri Jan 09 04:41:48.956132 2026] [:error] [pid 10431:tid 10444] [client 170.106.180.153:48686] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWAWjCkUbiVdwQzsJJSwlAAAAQo"]
[Fri Jan 09 05:05:47.304761 2026] [:error] [pid 35810:tid 35819] [client 49.235.136.28:32858] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWAcK4rJrhH8tOUNM5Dn0wAAAAA"]
[Fri Jan 09 10:03:15.054705 2026] [:error] [pid 30021:tid 30098] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Jan 09 10:03:15.177674 2026] [:error] [pid 30021:tid 30097] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Fri Jan 09 10:03:15.298192 2026] [:error] [pid 30021:tid 30082] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Fri Jan 09 10:03:15.489007 2026] [:error] [pid 30021:tid 30089] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Jan 09 10:03:15.640615 2026] [:error] [pid 30021:tid 30102] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Fri Jan 09 10:03:15.762121 2026] [:error] [pid 30021:tid 30096] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Fri Jan 09 10:03:16.091808 2026] [:error] [pid 30021:tid 30084] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/b374k.php
[Fri Jan 09 10:03:16.229232 2026] [:error] [pid 30021:tid 30094] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Jan 09 10:03:16.365020 2026] [:error] [pid 30021:tid 30088] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/k8.php
[Fri Jan 09 10:03:16.485344 2026] [:error] [pid 30021:tid 30090] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Jan 09 10:03:16.602683 2026] [:error] [pid 30021:tid 30095] [client 20.205.0.118:2146] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWBh5A_M8aRtsTog5J8VyAAAAM4"]
[Fri Jan 09 10:03:18.755601 2026] [:error] [pid 30019:tid 30038] [client 20.205.0.118:2120] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWBh5kz3igHGwX5f7IplMAAAAA4"]
[Fri Jan 09 10:03:20.844425 2026] [:error] [pid 30021:tid 30088] [client 20.205.0.118:2139] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWBh6A_M8aRtsTog5J8VzgAAAMc"]
[Fri Jan 09 10:03:22.150648 2026] [:error] [pid 30113:tid 30122] [client 20.205.0.118:2138] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWBh6qsz80DbrolLWsHiqQAAAQY"]
[Fri Jan 09 10:03:30.993902 2026] [:error] [pid 44848:tid 44861] [client 20.205.0.118:2170] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/private.php"] [unique_id "aWBh8qjajoTJAbEk87wfggAAAEs"]
[Fri Jan 09 10:03:34.170417 2026] [:error] [pid 30019:tid 30043] [client 20.205.0.118:2133] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/private.php"] [unique_id "aWBh9kz3igHGwX5f7IplTwAAABM"]
[Fri Jan 09 10:03:35.067519 2026] [:error] [pid 30019:tid 30025] [client 20.205.0.118:2114] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/private.php"] [unique_id "aWBh90z3igHGwX5f7IplUwAAAAE"]
[Fri Jan 09 10:03:36.205379 2026] [:error] [pid 44848:tid 44870] [client 20.205.0.118:2075] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/private.php"] [unique_id "aWBh-KjajoTJAbEk87wfjQAAAFQ"]
[Fri Jan 09 10:03:39.271132 2026] [:error] [pid 30020:tid 30064] [client 20.205.0.118:2052] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secret.php"] [unique_id "aWBh-8rjc66qOisG6L1yiQAAAIo"]
[Fri Jan 09 10:03:42.701261 2026] [:error] [pid 30019:tid 30028] [client 20.205.0.118:1987] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secret.php"] [unique_id "aWBh_kz3igHGwX5f7IplWgAAAAQ"]
[Fri Jan 09 10:03:43.664011 2026] [:error] [pid 44848:tid 44866] [client 20.205.0.118:2068] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secret.php"] [unique_id "aWBh_6jajoTJAbEk87wfmAAAAFA"]
[Fri Jan 09 10:03:45.192327 2026] [:error] [pid 30020:tid 30073] [client 20.205.0.118:2055] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/secret.php"] [unique_id "aWBiAcrjc66qOisG6L1ylAAAAJM"]
[Fri Jan 09 10:03:46.838448 2026] [:error] [pid 30019:tid 30026] [client 20.205.0.118:2131] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aWBiAkz3igHGwX5f7IplYgAAAAI"]
[Fri Jan 09 10:03:50.839711 2026] [:error] [pid 30021:tid 30088] [client 20.205.0.118:2060] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aWBiBg_M8aRtsTog5J8V_gAAAMc"]
[Fri Jan 09 10:03:55.343803 2026] [:error] [pid 30021:tid 30088] [client 20.205.0.118:2061] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aWBiCw_M8aRtsTog5J8WCgAAAMc"]
[Fri Jan 09 10:03:57.029501 2026] [:error] [pid 44848:tid 44860] [client 20.205.0.118:2163] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "aWBiDajajoTJAbEk87wfsQAAAEo"]
[Fri Jan 09 10:04:01.666593 2026] [:error] [pid 30021:tid 30098] [client 20.205.0.118:2132] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aWBiEQ_M8aRtsTog5J8WGgAAANE"]
[Fri Jan 09 10:04:13.760303 2026] [:error] [pid 30020:tid 30069] [client 20.205.0.118:2142] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/panel.php"] [unique_id "aWBiHcrjc66qOisG6L1yrAAAAI8"]
[Fri Jan 09 10:04:15.758175 2026] [:error] [pid 30020:tid 30072] [client 20.205.0.118:2149] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/panel.php"] [unique_id "aWBiH8rjc66qOisG6L1ysAAAAJI"]
[Fri Jan 09 10:04:18.090486 2026] [:error] [pid 30113:tid 30120] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/panel.php
[Fri Jan 09 10:04:18.218847 2026] [:error] [pid 30113:tid 30125] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/console.php
[Fri Jan 09 10:04:18.364129 2026] [:error] [pid 30113:tid 30133] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/terminal.php
[Fri Jan 09 10:04:18.484520 2026] [:error] [pid 30113:tid 30135] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/exec.php
[Fri Jan 09 10:04:18.626822 2026] [:error] [pid 30113:tid 30122] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/eval.php
[Fri Jan 09 10:04:18.746614 2026] [:error] [pid 30113:tid 30130] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Jan 09 10:04:18.875486 2026] [:error] [pid 30113:tid 30140] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Jan 09 10:04:19.017399 2026] [:error] [pid 30113:tid 30127] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Fri Jan 09 10:04:19.162062 2026] [:error] [pid 30113:tid 30129] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php
[Fri Jan 09 10:04:19.311575 2026] [:error] [pid 30113:tid 30123] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/dump.php
[Fri Jan 09 10:04:19.433517 2026] [:error] [pid 30113:tid 30116] [client 20.205.0.118:2167] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Jan 09 10:04:19.551581 2026] [:error] [pid 30113:tid 30124] [client 20.205.0.118:2167] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWBiI6sz80DbrolLWsHi_QAAAQg"]
[Fri Jan 09 10:04:33.565643 2026] [:error] [pid 30113:tid 30125] [client 20.205.0.118:2051] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWBiMasz80DbrolLWsHjFQAAAQk"]
[Fri Jan 09 10:04:34.506948 2026] [:error] [pid 30021:tid 30083] [client 20.205.0.118:2165] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWBiMg_M8aRtsTog5J8WYQAAAMI"]
[Fri Jan 09 10:04:46.129330 2026] [:error] [pid 30113:tid 30119] [client 20.205.0.118:2072] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmp.php"] [unique_id "aWBiPqsz80DbrolLWsHjLAAAAQM"]
[Fri Jan 09 10:04:46.941392 2026] [:error] [pid 30019:tid 30026] [client 20.205.0.118:2066] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmp.php"] [unique_id "aWBiPkz3igHGwX5f7IplugAAAAI"]
[Fri Jan 09 10:04:51.057739 2026] [:error] [pid 44848:tid 44869] [client 20.205.0.118:2129] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/temp.php"] [unique_id "aWBiQ6jajoTJAbEk87wgnQAAAFM"]
[Fri Jan 09 10:04:54.593724 2026] [:error] [pid 30113:tid 30120] [client 20.205.0.118:2144] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/temp.php"] [unique_id "aWBiRqsz80DbrolLWsHjSwAAAQQ"]
[Fri Jan 09 10:04:55.668119 2026] [:error] [pid 44848:tid 44851] [client 20.205.0.118:2122] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/temp.php"] [unique_id "aWBiR6jajoTJAbEk87wgpgAAAEE"]
[Fri Jan 09 10:04:57.080603 2026] [:error] [pid 44848:tid 44865] [client 20.205.0.118:2125] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/temp.php"] [unique_id "aWBiSajajoTJAbEk87wgqAAAAE8"]
[Fri Jan 09 10:05:01.802432 2026] [:error] [pid 30020:tid 30068] [client 20.205.0.118:2153] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aWBiTcrjc66qOisG6L1y7gAAAI4"]
[Fri Jan 09 10:05:03.066742 2026] [:error] [pid 30021:tid 30097] [client 20.205.0.118:2158] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aWBiTw_M8aRtsTog5J8WxAAAANA"]
[Fri Jan 09 10:05:04.573760 2026] [:error] [pid 30021:tid 30090] [client 20.205.0.118:2143] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aWBiUA_M8aRtsTog5J8WygAAAMk"]
[Fri Jan 09 10:05:08.477584 2026] [:error] [pid 44848:tid 44854] [client 20.205.0.118:2095] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aWBiVKjajoTJAbEk87wgxAAAAEQ"]
[Fri Jan 09 10:05:09.830243 2026] [:error] [pid 30113:tid 30140] [client 20.205.0.118:2124] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aWBiVasz80DbrolLWsHjbQAAARg"]
[Fri Jan 09 10:05:12.061355 2026] [:error] [pid 30020:tid 30055] [client 20.205.0.118:2172] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aWBiWMrjc66qOisG6L1y-AAAAIE"]
[Fri Jan 09 10:05:15.803709 2026] [:error] [pid 44848:tid 44874] [client 20.205.0.118:2065] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aWBiW6jajoTJAbEk87wg1gAAAFg"]
[Fri Jan 09 10:05:18.003091 2026] [:error] [pid 44848:tid 44858] [client 20.205.0.118:2077] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aWBiXqjajoTJAbEk87wg3wAAAEg"]
[Fri Jan 09 10:05:20.542805 2026] [:error] [pid 44848:tid 44854] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Jan 09 10:05:20.677320 2026] [:error] [pid 44848:tid 44857] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Jan 09 10:05:20.936062 2026] [:error] [pid 44848:tid 44852] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Fri Jan 09 10:05:21.059507 2026] [:error] [pid 44848:tid 44859] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Jan 09 10:05:21.389390 2026] [:error] [pid 44848:tid 44861] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Jan 09 10:05:21.512829 2026] [:error] [pid 44848:tid 44865] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Jan 09 10:05:21.889173 2026] [:error] [pid 44848:tid 44874] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Jan 09 10:05:22.351140 2026] [:error] [pid 44848:tid 44864] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Jan 09 10:05:22.476818 2026] [:error] [pid 44848:tid 44855] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri Jan 09 10:05:22.608815 2026] [:error] [pid 44848:tid 44851] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Fri Jan 09 10:05:22.744896 2026] [:error] [pid 44848:tid 44872] [client 20.205.0.118:2148] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Jan 09 10:05:22.886611 2026] [:error] [pid 44848:tid 44854] [client 20.205.0.118:2148] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aWBiYqjajoTJAbEk87wg9gAAAEQ"]
[Fri Jan 09 10:05:28.491858 2026] [:error] [pid 30020:tid 30063] [client 20.205.0.118:2069] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aWBiaMrjc66qOisG6L1zDQAAAIk"]
[Fri Jan 09 10:05:34.654575 2026] [:error] [pid 30021:tid 30090] [client 20.205.0.118:2106] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aWBibg_M8aRtsTog5J8XDQAAAMk"]
[Fri Jan 09 10:05:56.926338 2026] [:error] [pid 30020:tid 30066] [client 20.205.0.118:2105] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aWBihMrjc66qOisG6L1zLwAAAIw"]
[Fri Jan 09 10:05:57.759255 2026] [:error] [pid 30021:tid 30085] [client 20.205.0.118:1986] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aWBihQ_M8aRtsTog5J8XYgAAAMQ"]
[Fri Jan 09 10:05:59.600568 2026] [:error] [pid 30020:tid 30078] [client 20.205.0.118:2076] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "aWBih8rjc66qOisG6L1zMQAAAJg"]
[Fri Jan 09 10:06:14.728322 2026] [:error] [pid 30020:tid 30072] [client 20.205.0.118:2064] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWBilsrjc66qOisG6L1zNQAAAJI"]
[Fri Jan 09 10:06:16.131751 2026] [:error] [pid 44848:tid 44858] [client 20.205.0.118:2088] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWBimKjajoTJAbEk87whXQAAAEg"]
[Fri Jan 09 10:06:17.156360 2026] [:error] [pid 44848:tid 44867] [client 20.205.0.118:2101] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWBimajajoTJAbEk87whZAAAAFE"]
[Fri Jan 09 10:06:18.150564 2026] [:error] [pid 44848:tid 44865] [client 20.205.0.118:2089] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWBimqjajoTJAbEk87whawAAAE8"]
[Fri Jan 09 10:06:18.728771 2026] [:error] [pid 30113:tid 30134] [client 20.205.0.118:1999] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/u.php"] [unique_id "aWBimqsz80DbrolLWsHj0QAAARI"]
[Fri Jan 09 10:06:21.416512 2026] [:error] [pid 30021:tid 30099] [client 20.205.0.118:2048] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/u.php"] [unique_id "aWBinQ_M8aRtsTog5J8XlgAAANI"]
[Fri Jan 09 10:06:23.499597 2026] [:error] [pid 44848:tid 44867] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/u.php
[Fri Jan 09 10:06:23.619891 2026] [:error] [pid 44848:tid 44863] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Fri Jan 09 10:06:24.086127 2026] [:error] [pid 44848:tid 44857] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Fri Jan 09 10:06:24.444103 2026] [:error] [pid 44848:tid 44859] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Fri Jan 09 10:06:24.873762 2026] [:error] [pid 44848:tid 44860] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Fri Jan 09 10:06:25.017107 2026] [:error] [pid 44848:tid 44864] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/00.php
[Fri Jan 09 10:06:26.555356 2026] [:error] [pid 44848:tid 44864] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Jan 09 10:06:26.929964 2026] [:error] [pid 44848:tid 44852] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Jan 09 10:06:27.067041 2026] [:error] [pid 44848:tid 44854] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Fri Jan 09 10:06:27.190022 2026] [:error] [pid 44848:tid 44855] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Jan 09 10:06:27.439293 2026] [:error] [pid 44848:tid 44871] [client 20.205.0.118:2136] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Fri Jan 09 10:06:27.566736 2026] [:error] [pid 44848:tid 44851] [client 20.205.0.118:2136] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWBio6jajoTJAbEk87whkAAAAEE"]
[Fri Jan 09 10:06:30.284855 2026] [:error] [pid 30019:tid 30041] [client 20.205.0.118:2169] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWBipkz3igHGwX5f7IpmpwAAABE"]
[Fri Jan 09 10:06:30.804734 2026] [:error] [pid 30020:tid 30059] [client 20.205.0.118:2130] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWBipsrjc66qOisG6L1zTAAAAIU"]
[Fri Jan 09 10:06:32.677423 2026] [:error] [pid 30019:tid 30029] [client 20.205.0.118:2127] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWBiqEz3igHGwX5f7IpmrgAAAAU"]
[Fri Jan 09 10:06:41.572785 2026] [:error] [pid 44848:tid 44872] [client 20.205.0.118:2160] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/555.php"] [unique_id "aWBisajajoTJAbEk87whrQAAAFY"]
[Fri Jan 09 10:06:51.102593 2026] [:error] [pid 44848:tid 44873] [client 20.205.0.118:2053] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aWBiu6jajoTJAbEk87whvwAAAFc"]
[Fri Jan 09 10:06:54.731034 2026] [:error] [pid 30019:tid 30041] [client 20.205.0.118:2090] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aWBivkz3igHGwX5f7IpmyQAAABE"]
[Fri Jan 09 10:06:58.860609 2026] [:error] [pid 30113:tid 30126] [client 20.205.0.118:2151] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aWBiwqsz80DbrolLWsHkFgAAAQo"]
[Fri Jan 09 10:07:06.197644 2026] [:error] [pid 30019:tid 30039] [client 20.205.0.118:1984] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aWBiykz3igHGwX5f7Ipm0gAAAA8"]
[Fri Jan 09 10:07:07.654674 2026] [:error] [pid 30021:tid 30098] [client 20.205.0.118:2173] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aWBiyw_M8aRtsTog5J8X4AAAANE"]
[Fri Jan 09 10:07:09.171258 2026] [:error] [pid 30021:tid 30105] [client 20.205.0.118:2000] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aWBizQ_M8aRtsTog5J8X4wAAANg"]
[Fri Jan 09 10:07:11.912433 2026] [:error] [pid 30113:tid 30130] [client 20.205.0.118:2049] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777.php"] [unique_id "aWBiz6sz80DbrolLWsHkIgAAAQ4"]
[Fri Jan 09 10:07:13.451465 2026] [:error] [pid 30113:tid 30127] [client 20.205.0.118:2006] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888.php"] [unique_id "aWBi0asz80DbrolLWsHkJAAAAQs"]
[Fri Jan 09 10:07:14.179700 2026] [:error] [pid 30019:tid 30032] [client 20.205.0.118:2078] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888.php"] [unique_id "aWBi0kz3igHGwX5f7Ipm3AAAAAg"]
[Fri Jan 09 10:07:15.947826 2026] [:error] [pid 44848:tid 44860] [client 20.205.0.118:2147] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888.php"] [unique_id "aWBi06jajoTJAbEk87wh9QAAAEo"]
[Fri Jan 09 10:07:23.980351 2026] [:error] [pid 30113:tid 30125] [client 20.205.0.118:2079] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888.php"] [unique_id "aWBi26sz80DbrolLWsHkMQAAAQk"]
[Fri Jan 09 10:07:25.217168 2026] [:error] [pid 30019:tid 30034] [client 20.205.0.118:2026] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aWBi3Uz3igHGwX5f7Ipm5wAAAAo"]
[Fri Jan 09 10:07:27.560918 2026] [:error] [pid 30019:tid 30024] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/999.php
[Fri Jan 09 10:07:27.816179 2026] [:error] [pid 30019:tid 30027] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri Jan 09 10:07:27.939656 2026] [:error] [pid 30019:tid 30044] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/xyz.php
[Fri Jan 09 10:07:28.059534 2026] [:error] [pid 30019:tid 30036] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/hack.php
[Fri Jan 09 10:07:28.210003 2026] [:error] [pid 30019:tid 30037] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/exploit.php
[Fri Jan 09 10:07:28.365788 2026] [:error] [pid 30019:tid 30030] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/backdoor.php
[Fri Jan 09 10:07:28.876335 2026] [:error] [pid 30019:tid 30039] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/rce.php
[Fri Jan 09 10:07:28.998667 2026] [:error] [pid 30019:tid 30038] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/lfi.php
[Fri Jan 09 10:07:29.173234 2026] [:error] [pid 30019:tid 30048] [client 20.205.0.118:2054] File does not exist: /usr/local/apache/htdocs/suspended-page/rfi.php
[Fri Jan 09 10:07:29.530228 2026] [:error] [pid 30019:tid 30045] [client 20.205.0.118:2054] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.exe"] [unique_id "aWBi4Uz3igHGwX5f7Ipm9AAAABU"]
[Fri Jan 09 10:07:33.063973 2026] [:error] [pid 44848:tid 44863] [client 20.205.0.118:2091] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.exe"] [unique_id "aWBi5ajajoTJAbEk87wiCwAAAE0"]
[Fri Jan 09 10:07:37.704064 2026] [:error] [pid 30021:tid 30087] [client 20.205.0.118:2117] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.exe"] [unique_id "aWBi6Q_M8aRtsTog5J8YEAAAAMY"]
[Fri Jan 09 10:07:38.385643 2026] [:error] [pid 30020:tid 30056] [client 20.205.0.118:1990] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.exe"] [unique_id "aWBi6srjc66qOisG6L1zmAAAAII"]
[Fri Jan 09 10:07:40.680264 2026] [:error] [pid 30021:tid 30081] [client 20.205.0.118:2094] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.exe"] [unique_id "aWBi7A_M8aRtsTog5J8YFAAAAMA"]
[Fri Jan 09 10:07:52.417442 2026] [:error] [pid 30020:tid 30070] [client 20.205.0.118:2036] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/c.exe"] [unique_id "aWBi-Mrjc66qOisG6L1ztQAAAJA"]
[Fri Jan 09 10:07:55.860382 2026] [:error] [pid 30019:tid 30036] [client 20.205.0.118:2150] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/payload.php"] [unique_id "aWBi-0z3igHGwX5f7IpnDgAAAAw"]
[Fri Jan 09 10:07:58.503141 2026] [:error] [pid 44848:tid 44860] [client 20.205.0.118:2157] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/payload.php"] [unique_id "aWBi_qjajoTJAbEk87wiQAAAAEo"]
[Fri Jan 09 10:08:00.153911 2026] [:error] [pid 30113:tid 30124] [client 20.205.0.118:1922] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/payload.php"] [unique_id "aWBjAKsz80DbrolLWsHkXgAAAQg"]
[Fri Jan 09 10:08:11.341229 2026] [:error] [pid 30113:tid 30120] [client 20.205.0.118:2110] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWBjC6sz80DbrolLWsHkagAAAQQ"]
[Fri Jan 09 10:08:12.452936 2026] [:error] [pid 30113:tid 30134] [client 20.205.0.118:2029] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWBjDKsz80DbrolLWsHkbgAAARI"]
[Fri Jan 09 10:08:13.463311 2026] [:error] [pid 30020:tid 30073] [client 20.205.0.118:1992] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWBjDcrjc66qOisG6L1z6wAAAJM"]
[Fri Jan 09 10:08:14.244810 2026] [:error] [pid 30113:tid 30135] [client 20.205.0.118:2133] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWBjDqsz80DbrolLWsHkdQAAARM"]
[Fri Jan 09 10:08:19.718127 2026] [:error] [pid 30113:tid 30116] [client 20.205.0.118:2062] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWBjE6sz80DbrolLWsHkewAAAQA"]
[Fri Jan 09 10:08:20.175094 2026] [:error] [pid 30021:tid 30103] [client 20.205.0.118:1978] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWBjFA_M8aRtsTog5J8YSgAAANY"]
[Fri Jan 09 10:08:24.872005 2026] [:error] [pid 30019:tid 30030] [client 20.205.0.118:2023] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWBjGEz3igHGwX5f7IpnOQAAAAY"]
[Fri Jan 09 10:08:26.604750 2026] [:error] [pid 30019:tid 30028] [client 20.205.0.118:2082] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWBjGkz3igHGwX5f7IpnPQAAAAQ"]
[Fri Jan 09 10:08:29.016311 2026] [:error] [pid 30021:tid 30081] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/waf.php
[Fri Jan 09 10:08:29.138779 2026] [:error] [pid 30021:tid 30104] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/attack.php
[Fri Jan 09 10:08:29.261841 2026] [:error] [pid 30021:tid 30086] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/pentest.php
[Fri Jan 09 10:08:29.505989 2026] [:error] [pid 30021:tid 30098] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Fri Jan 09 10:08:29.629431 2026] [:error] [pid 30021:tid 30094] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/scan.php
[Fri Jan 09 10:08:29.872102 2026] [:error] [pid 30021:tid 30100] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/check.php
[Fri Jan 09 10:08:30.009560 2026] [:error] [pid 30021:tid 30085] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/ver.php
[Fri Jan 09 10:08:30.248728 2026] [:error] [pid 30021:tid 30082] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Fri Jan 09 10:08:30.390901 2026] [:error] [pid 30021:tid 30087] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 09 10:08:30.573737 2026] [:error] [pid 30021:tid 30083] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 10:08:31.019041 2026] [:error] [pid 30021:tid 30105] [client 20.205.0.118:2146] File does not exist: /usr/local/apache/htdocs/suspended-page/test123.php
[Fri Jan 09 10:08:31.143228 2026] [:error] [pid 30021:tid 30097] [client 20.205.0.118:2146] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin123.php"] [unique_id "aWBjHw_M8aRtsTog5J8YZQAAANA"]
[Fri Jan 09 10:08:32.528676 2026] [:error] [pid 30113:tid 30137] [client 20.205.0.118:2067] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin123.php"] [unique_id "aWBjIKsz80DbrolLWsHkiQAAARU"]
[Fri Jan 09 10:08:34.513691 2026] [:error] [pid 44848:tid 44860] [client 20.205.0.118:2161] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin123.php"] [unique_id "aWBjIqjajoTJAbEk87wigQAAAEo"]
[Fri Jan 09 10:08:37.713666 2026] [:error] [pid 44848:tid 44874] [client 20.205.0.118:2080] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin123.php"] [unique_id "aWBjJajajoTJAbEk87wihwAAAFg"]
[Fri Jan 09 10:08:45.665087 2026] [:error] [pid 44848:tid 44874] [client 20.205.0.118:2104] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super.php"] [unique_id "aWBjLajajoTJAbEk87wijgAAAFg"]
[Fri Jan 09 10:08:50.482645 2026] [:error] [pid 44848:tid 44858] [client 20.205.0.118:2008] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super.php"] [unique_id "aWBjMqjajoTJAbEk87wilwAAAEg"]
[Fri Jan 09 10:08:51.713036 2026] [:error] [pid 30019:tid 30046] [client 20.205.0.118:2074] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super.php"] [unique_id "aWBjM0z3igHGwX5f7IpnWgAAABY"]
[Fri Jan 09 10:08:54.692010 2026] [:error] [pid 30113:tid 30136] [client 20.205.0.118:1946] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega.php"] [unique_id "aWBjNqsz80DbrolLWsHkqQAAARQ"]
[Fri Jan 09 10:08:56.864326 2026] [:error] [pid 30113:tid 30135] [client 20.205.0.118:2068] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega.php"] [unique_id "aWBjOKsz80DbrolLWsHkrwAAARM"]
[Fri Jan 09 10:08:57.995776 2026] [:error] [pid 44848:tid 44855] [client 20.205.0.118:2093] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega.php"] [unique_id "aWBjOajajoTJAbEk87wioQAAAEU"]
[Fri Jan 09 10:09:00.250832 2026] [:error] [pid 44848:tid 44870] [client 20.205.0.118:2175] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega.php"] [unique_id "aWBjPKjajoTJAbEk87wipwAAAFQ"]
[Fri Jan 09 10:09:02.539279 2026] [:error] [pid 30020:tid 30066] [client 20.205.0.118:2021] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ultra.php"] [unique_id "aWBjPsrjc66qOisG6L10UQAAAIw"]
[Fri Jan 09 10:09:03.301835 2026] [:error] [pid 30113:tid 30117] [client 20.205.0.118:2070] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ultra.php"] [unique_id "aWBjP6sz80DbrolLWsHktgAAAQE"]
[Fri Jan 09 10:09:04.683831 2026] [:error] [pid 44848:tid 44860] [client 20.205.0.118:1988] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ultra.php"] [unique_id "aWBjQKjajoTJAbEk87wiqwAAAEo"]
[Fri Jan 09 10:09:06.340851 2026] [:error] [pid 30113:tid 30139] [client 20.205.0.118:1928] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ultra.php"] [unique_id "aWBjQqsz80DbrolLWsHkugAAARc"]
[Fri Jan 09 10:09:08.385306 2026] [:error] [pid 30113:tid 30124] [client 20.205.0.118:2031] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWBjRKsz80DbrolLWsHkvAAAAQg"]
[Fri Jan 09 10:09:09.193320 2026] [:error] [pid 30113:tid 30126] [client 20.205.0.118:2096] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWBjRasz80DbrolLWsHkvQAAAQo"]
[Fri Jan 09 10:09:11.495991 2026] [:error] [pid 44848:tid 44855] [client 20.205.0.118:2119] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWBjR6jajoTJAbEk87witAAAAEU"]
[Fri Jan 09 10:09:14.480219 2026] [:error] [pid 44848:tid 44867] [client 20.205.0.118:1997] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWBjSqjajoTJAbEk87wiugAAAFE"]
[Fri Jan 09 10:09:15.481597 2026] [:error] [pid 30113:tid 30140] [client 20.205.0.118:2071] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/advanced.php"] [unique_id "aWBjS6sz80DbrolLWsHkwQAAARg"]
[Fri Jan 09 10:09:16.396853 2026] [:error] [pid 30021:tid 30095] [client 20.205.0.118:1985] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/advanced.php"] [unique_id "aWBjTA_M8aRtsTog5J8YjAAAAM4"]
[Fri Jan 09 10:09:17.493668 2026] [:error] [pid 30113:tid 30138] [client 20.205.0.118:2166] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/advanced.php"] [unique_id "aWBjTasz80DbrolLWsHkxAAAARY"]
[Fri Jan 09 10:09:20.260590 2026] [:error] [pid 30113:tid 30128] [client 20.205.0.118:2009] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/advanced.php"] [unique_id "aWBjUKsz80DbrolLWsHkygAAAQw"]
[Fri Jan 09 10:09:23.418993 2026] [:error] [pid 44848:tid 44868] [client 20.205.0.118:2005] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aWBjU6jajoTJAbEk87wi1wAAAFI"]
[Fri Jan 09 10:09:27.018973 2026] [:error] [pid 30020:tid 30071] [client 20.205.0.118:2164] [client 20.205.0.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aWBjV8rjc66qOisG6L10aQAAAJE"]
[Fri Jan 09 10:09:33.854026 2026] [:error] [pid 30021:tid 30096] [client 20.205.0.118:2131] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Jan 09 10:09:33.974169 2026] [:error] [pid 30021:tid 30105] [client 20.205.0.118:2131] File does not exist: /usr/local/apache/htdocs/suspended-page/basic.php
[Fri Jan 09 13:45:47.650691 2026] [:error] [pid 30019:tid 30037] [client 194.163.150.79:63148] [client 194.163.150.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.150.79, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aWCWC0z3igHGwX5f7IqdIgAAAA0"]
[Fri Jan 09 13:45:47.654265 2026] [:error] [pid 30019:tid 30037] [client 194.163.150.79:63148] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 09 13:45:50.969404 2026] [:error] [pid 30019:tid 30036] [client 194.163.150.79:59280] [client 194.163.150.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.150.79, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aWCWDkz3igHGwX5f7IqdJwAAAAw"]
[Fri Jan 09 13:45:50.973489 2026] [:error] [pid 30019:tid 30036] [client 194.163.150.79:59280] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Jan 10 00:33:00.191074 2026] [:error] [pid 14831:tid 14851] [client 182.42.104.32:56855] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWEtvPaKOMCmJcAyBm1cewAAApI"]
[Sat Jan 10 00:36:24.559669 2026] [:error] [pid 30020:tid 30058] [client 106.215.164.189:30040] [client 106.215.164.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.164.189, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWEuiMrjc66qOisG6L354gAAAIQ"]
[Sat Jan 10 00:36:24.564825 2026] [:error] [pid 30020:tid 30058] [client 106.215.164.189:30040] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 10 01:45:23.667612 2026] [:error] [pid 30020:tid 30058] [client 161.118.211.239:59894] [client 161.118.211.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWE-s8rjc66qOisG6L0DXAAAAIQ"]
[Sat Jan 10 01:45:24.029156 2026] [:error] [pid 14801:tid 14816] [client 161.118.211.239:53230] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aWE-tN8UWXrz_OQYgF2SNwAAAk0"]
[Sat Jan 10 01:45:24.766940 2026] [:error] [pid 30021:tid 30088] [client 161.118.211.239:53402] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login"] [unique_id "aWE-tA_M8aRtsTog5J_VnQAAAMc"]
[Sat Jan 10 04:27:29.557612 2026] [:error] [pid 20647:tid 20692] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Sat Jan 10 04:27:29.674742 2026] [:error] [pid 20647:tid 20703] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sample-load.php
[Sat Jan 10 04:27:30.143368 2026] [:error] [pid 20647:tid 20697] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header-json.php
[Sat Jan 10 04:27:30.265067 2026] [:error] [pid 20647:tid 20684] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Jan 10 04:27:30.496389 2026] [:error] [pid 20647:tid 20696] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Sat Jan 10 04:27:30.615131 2026] [:error] [pid 20647:tid 20694] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Jan 10 04:27:30.758999 2026] [:error] [pid 20647:tid 20693] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Sat Jan 10 04:27:30.875930 2026] [:error] [pid 20647:tid 20695] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Jan 10 04:27:30.993052 2026] [:error] [pid 20647:tid 20688] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Jan 10 04:27:31.109211 2026] [:error] [pid 20647:tid 20687] [client 4.214.16.213:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Jan 10 04:27:31.222304 2026] [:error] [pid 20647:tid 20704] [client 4.214.16.213:25801] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aWFks6vb0x69MarUHzCQxgAAAFY"]
[Sat Jan 10 04:27:31.768104 2026] [:error] [pid 20646:tid 20666] [client 4.214.16.213:25808] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aWFksyKwdq_UhOM64b6X9wAAAAs"]
[Sat Jan 10 04:27:32.215383 2026] [:error] [pid 20647:tid 20686] [client 4.214.16.213:25731] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aWFktKvb0x69MarUHzCQyQAAAEQ"]
[Sat Jan 10 04:27:32.811088 2026] [:error] [pid 20648:tid 20723] [client 4.214.16.213:25752] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aWFktDBnnIoBkEBdx9DvLwAAAI4"]
[Sat Jan 10 04:27:33.571438 2026] [:error] [pid 20647:tid 20682] [client 4.214.16.213:25821] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aWFktavb0x69MarUHzCQywAAAEA"]
[Sat Jan 10 04:27:34.065672 2026] [:error] [pid 20647:tid 20698] [client 4.214.16.213:25855] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aWFktqvb0x69MarUHzCQzQAAAFA"]
[Sat Jan 10 04:27:34.655862 2026] [:error] [pid 20646:tid 20675] [client 4.214.16.213:25728] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aWFktiKwdq_UhOM64b6X-AAAABQ"]
[Sat Jan 10 04:27:35.815660 2026] [:error] [pid 20646:tid 20677] [client 4.214.16.213:25753] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aWFktyKwdq_UhOM64b6X-gAAABY"]
[Sat Jan 10 04:27:36.433775 2026] [:error] [pid 20648:tid 20709] [client 4.214.16.213:25845] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aWFkuDBnnIoBkEBdx9DvMwAAAIA"]
[Sat Jan 10 04:27:36.763322 2026] [:error] [pid 20648:tid 20714] [client 4.214.16.213:25798] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aWFkuDBnnIoBkEBdx9DvNAAAAIU"]
[Sat Jan 10 04:27:37.046477 2026] [:error] [pid 20647:tid 20703] [client 4.214.16.213:25835] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aWFkuavb0x69MarUHzCQzgAAAFU"]
[Sat Jan 10 04:27:37.449617 2026] [:error] [pid 20646:tid 20678] [client 4.214.16.213:25826] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aWFkuSKwdq_UhOM64b6X_AAAABc"]
[Sat Jan 10 04:27:37.814074 2026] [:error] [pid 20648:tid 20713] [client 4.214.16.213:25800] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWFkuTBnnIoBkEBdx9DvNQAAAIQ"]
[Sat Jan 10 04:27:38.174759 2026] [:error] [pid 20646:tid 20674] [client 4.214.16.213:25754] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWFkuiKwdq_UhOM64b6X_gAAABM"]
[Sat Jan 10 04:27:38.611094 2026] [:error] [pid 20744:tid 20777] [client 4.214.16.213:25854] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWFkukA8oR5jvkFpcP9F-AAAANQ"]
[Sat Jan 10 04:27:39.098993 2026] [:error] [pid 20744:tid 20761] [client 4.214.16.213:25819] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWFku0A8oR5jvkFpcP9F-gAAAMQ"]
[Sat Jan 10 04:27:39.579301 2026] [:error] [pid 20744:tid 20774] [client 4.214.16.213:25756] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWFku0A8oR5jvkFpcP9F-wAAANE"]
[Sat Jan 10 04:27:39.901290 2026] [:error] [pid 20648:tid 20719] [client 4.214.16.213:25825] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWFkuzBnnIoBkEBdx9DvOQAAAIo"]
[Sat Jan 10 04:27:40.385809 2026] [:error] [pid 20744:tid 20765] [client 4.214.16.213:25821] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWFkvEA8oR5jvkFpcP9F_AAAAMg"]
[Sat Jan 10 04:27:41.049841 2026] [:error] [pid 20744:tid 20767] [client 4.214.16.213:25804] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aWFkvUA8oR5jvkFpcP9F_gAAAMo"]
[Sat Jan 10 04:27:41.597243 2026] [:error] [pid 20744:tid 20772] [client 4.214.16.213:8147] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWFkvUA8oR5jvkFpcP9GAAAAAM8"]
[Sat Jan 10 04:27:41.937187 2026] [:error] [pid 20646:tid 20664] [client 4.214.16.213:8130] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWFkvSKwdq_UhOM64b6YAAAAAAk"]
[Sat Jan 10 04:27:42.275562 2026] [:error] [pid 20648:tid 20716] [client 4.214.16.213:25844] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWFkvjBnnIoBkEBdx9DvOwAAAIc"]
[Sat Jan 10 04:27:42.609348 2026] [:error] [pid 20648:tid 20723] [client 4.214.16.213:25811] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aWFkvjBnnIoBkEBdx9DvPQAAAI4"]
[Sat Jan 10 04:27:42.876251 2026] [:error] [pid 20744:tid 20768] [client 4.214.16.213:25739] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWFkvkA8oR5jvkFpcP9GBQAAAMs"]
[Sat Jan 10 04:27:43.296677 2026] [:error] [pid 20648:tid 20722] [client 4.214.16.213:25795] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWFkvzBnnIoBkEBdx9DvPgAAAI0"]
[Sat Jan 10 04:27:43.945862 2026] [:error] [pid 20646:tid 20666] [client 4.214.16.213:25748] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWFkvyKwdq_UhOM64b6YCgAAAAs"]
[Sat Jan 10 04:27:44.280204 2026] [:error] [pid 20647:tid 20696] [client 4.214.16.213:25830] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aWFkwKvb0x69MarUHzCQ0AAAAE4"]
[Sat Jan 10 04:27:44.959002 2026] [:error] [pid 20648:tid 20727] [client 4.214.16.213:25796] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aWFkwDBnnIoBkEBdx9DvWQAAAJI"]
[Sat Jan 10 04:27:45.295275 2026] [:error] [pid 20647:tid 20694] [client 4.214.16.213:25817] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aWFkwavb0x69MarUHzCQ0QAAAEw"]
[Sat Jan 10 04:27:45.763684 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:25832] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aWFkwUA8oR5jvkFpcP9GTgAAANM"]
[Sat Jan 10 04:27:47.062141 2026] [:error] [pid 20647:tid 20687] [client 4.214.16.213:25750] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aWFkw6vb0x69MarUHzCQ1AAAAEU"]
[Sat Jan 10 04:27:47.442302 2026] [:error] [pid 20647:tid 20704] [client 4.214.16.213:25827] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aWFkw6vb0x69MarUHzCQ1QAAAFY"]
[Sat Jan 10 04:27:47.918312 2026] [:error] [pid 20646:tid 20664] [client 4.214.16.213:25742] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aWFkwyKwdq_UhOM64b6YGAAAAAk"]
[Sat Jan 10 04:27:48.365910 2026] [:error] [pid 20647:tid 20706] [client 4.214.16.213:25734] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aWFkxKvb0x69MarUHzCQ1gAAAFg"]
[Sat Jan 10 04:27:48.915653 2026] [:error] [pid 20646:tid 20676] [client 4.214.16.213:25833] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aWFkxCKwdq_UhOM64b6YGwAAABU"]
[Sat Jan 10 04:27:49.403377 2026] [:error] [pid 20744:tid 20779] [client 4.214.16.213:25828] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aWFkxUA8oR5jvkFpcP9GXgAAANY"]
[Sat Jan 10 04:27:49.984632 2026] [:error] [pid 20744:tid 20758] [client 4.214.16.213:25799] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aWFkxUA8oR5jvkFpcP9GYgAAAME"]
[Sat Jan 10 04:27:51.124540 2026] [:error] [pid 20744:tid 20781] [client 4.214.16.213:25755] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aWFkx0A8oR5jvkFpcP9GZQAAANg"]
[Sat Jan 10 04:27:51.766561 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:25778] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aWFkx0A8oR5jvkFpcP9GZwAAANM"]
[Sat Jan 10 04:27:52.058891 2026] [:error] [pid 20744:tid 20762] [client 4.214.16.213:8142] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWFkyEA8oR5jvkFpcP9GaQAAAMU"]
[Sat Jan 10 04:27:52.505050 2026] [:error] [pid 20744:tid 20766] [client 4.214.16.213:25810] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWFkyEA8oR5jvkFpcP9GawAAAMk"]
[Sat Jan 10 04:27:52.776746 2026] [:error] [pid 20646:tid 20675] [client 4.214.16.213:25758] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWFkyCKwdq_UhOM64b6YHQAAABQ"]
[Sat Jan 10 04:27:53.100520 2026] [:error] [pid 20744:tid 20757] [client 4.214.16.213:8155] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aWFkyUA8oR5jvkFpcP9GbgAAAMA"]
[Sat Jan 10 04:27:53.725377 2026] [:error] [pid 20744:tid 20777] [client 4.214.16.213:25749] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWFkyUA8oR5jvkFpcP9GbwAAANQ"]
[Sat Jan 10 04:27:54.052403 2026] [:error] [pid 20744:tid 20758] [client 4.214.16.213:25751] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWFkykA8oR5jvkFpcP9GcAAAAME"]
[Sat Jan 10 04:27:54.723047 2026] [:error] [pid 20744:tid 20761] [client 4.214.16.213:25838] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWFkykA8oR5jvkFpcP9GcQAAAMQ"]
[Sat Jan 10 04:27:55.008949 2026] [:error] [pid 20744:tid 20768] [client 4.214.16.213:25841] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWFky0A8oR5jvkFpcP9GcwAAAMs"]
[Sat Jan 10 04:27:55.644273 2026] [:error] [pid 20646:tid 20679] [client 4.214.16.213:25839] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aWFkyyKwdq_UhOM64b6YHgAAABg"]
[Sat Jan 10 04:27:56.254441 2026] [:error] [pid 20744:tid 20773] [client 4.214.16.213:25737] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aWFkzEA8oR5jvkFpcP9GdAAAANA"]
[Sat Jan 10 04:27:56.906954 2026] [:error] [pid 20647:tid 20683] [client 4.214.16.213:25768] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aWFkzKvb0x69MarUHzCQ2wAAAEE"]
[Sat Jan 10 04:27:57.933410 2026] [:error] [pid 20646:tid 20658] [client 4.214.16.213:8165] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aWFkzSKwdq_UhOM64b6YHwAAAAM"]
[Sat Jan 10 04:27:59.042732 2026] [:error] [pid 20647:tid 20703] [client 4.214.16.213:8148] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWFkz6vb0x69MarUHzCQ3AAAAFU"]
[Sat Jan 10 04:28:00.778779 2026] [:error] [pid 20744:tid 20768] [client 4.214.16.213:25831] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWFk0EA8oR5jvkFpcP9GggAAAMs"]
[Sat Jan 10 04:28:01.268008 2026] [:error] [pid 20647:tid 20694] [client 4.214.16.213:25785] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWFk0avb0x69MarUHzCQ3wAAAEw"]
[Sat Jan 10 04:28:02.025108 2026] [:error] [pid 20646:tid 20672] [client 4.214.16.213:25813] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWFk0iKwdq_UhOM64b6YIQAAABE"]
[Sat Jan 10 04:28:02.542662 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:25802] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aWFk0kA8oR5jvkFpcP9GhgAAANM"]
[Sat Jan 10 04:28:03.188887 2026] [:error] [pid 20744:tid 20760] [client 4.214.16.213:8182] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aWFk00A8oR5jvkFpcP9GhwAAAMM"]
[Sat Jan 10 04:28:03.587336 2026] [:error] [pid 20646:tid 20657] [client 4.214.16.213:25840] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aWFk0yKwdq_UhOM64b6YKAAAAAI"]
[Sat Jan 10 04:28:03.959001 2026] [:error] [pid 20648:tid 20714] [client 4.214.16.213:25783] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aWFk0zBnnIoBkEBdx9DvaAAAAIU"]
[Sat Jan 10 04:28:04.469383 2026] [:error] [pid 20647:tid 20704] [client 4.214.16.213:25815] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aWFk1Kvb0x69MarUHzCQ4wAAAFY"]
[Sat Jan 10 04:28:04.854240 2026] [:error] [pid 20647:tid 20689] [client 4.214.16.213:25809] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aWFk1Kvb0x69MarUHzCQ5AAAAEc"]
[Sat Jan 10 04:28:05.140254 2026] [:error] [pid 20648:tid 20713] [client 4.214.16.213:25851] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aWFk1TBnnIoBkEBdx9DvawAAAIQ"]
[Sat Jan 10 04:28:05.792049 2026] [:error] [pid 20744:tid 20770] [client 4.214.16.213:25735] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aWFk1UA8oR5jvkFpcP9GiwAAAM0"]
[Sat Jan 10 04:28:06.050569 2026] [:error] [pid 20647:tid 20698] [client 4.214.16.213:25805] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aWFk1qvb0x69MarUHzCQ6AAAAFA"]
[Sat Jan 10 04:28:06.740662 2026] [:error] [pid 20647:tid 20700] [client 4.214.16.213:25792] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aWFk1qvb0x69MarUHzCQ6wAAAFI"]
[Sat Jan 10 04:28:07.417317 2026] [:error] [pid 20648:tid 20728] [client 4.214.16.213:25848] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aWFk1zBnnIoBkEBdx9DvbQAAAJM"]
[Sat Jan 10 04:28:07.754475 2026] [:error] [pid 20744:tid 20757] [client 4.214.16.213:25806] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aWFk10A8oR5jvkFpcP9GjwAAAMA"]
[Sat Jan 10 04:28:08.449107 2026] [:error] [pid 20646:tid 20661] [client 4.214.16.213:25746] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aWFk2CKwdq_UhOM64b6YMAAAAAY"]
[Sat Jan 10 04:28:08.830865 2026] [:error] [pid 20646:tid 20667] [client 4.214.16.213:8144] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aWFk2CKwdq_UhOM64b6YMQAAAAw"]
[Sat Jan 10 04:28:09.440454 2026] [:error] [pid 20646:tid 20666] [client 4.214.16.213:8141] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aWFk2SKwdq_UhOM64b6YMgAAAAs"]
[Sat Jan 10 04:28:10.039464 2026] [:error] [pid 20646:tid 20675] [client 4.214.16.213:8167] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aWFk2iKwdq_UhOM64b6YMwAAABQ"]
[Sat Jan 10 04:28:10.514071 2026] [:error] [pid 20744:tid 20768] [client 4.214.16.213:25764] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aWFk2kA8oR5jvkFpcP9GkwAAAMs"]
[Sat Jan 10 04:28:10.853841 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:25842] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aWFk2kA8oR5jvkFpcP9GlAAAANM"]
[Sat Jan 10 04:28:11.362723 2026] [:error] [pid 20744:tid 20774] [client 4.214.16.213:8067] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aWFk20A8oR5jvkFpcP9GlwAAANE"]
[Sat Jan 10 04:28:11.811697 2026] [:error] [pid 20744:tid 20759] [client 4.214.16.213:8154] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aWFk20A8oR5jvkFpcP9GmQAAAMI"]
[Sat Jan 10 04:28:12.225620 2026] [:error] [pid 20744:tid 20766] [client 4.214.16.213:25851] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aWFk3EA8oR5jvkFpcP9GmgAAAMk"]
[Sat Jan 10 04:28:12.777675 2026] [:error] [pid 20647:tid 20688] [client 4.214.16.213:25791] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aWFk3Kvb0x69MarUHzCQ8QAAAEY"]
[Sat Jan 10 04:28:14.394278 2026] [:error] [pid 20744:tid 20780] [client 4.214.16.213:25745] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aWFk3kA8oR5jvkFpcP9GngAAANc"]
[Sat Jan 10 04:28:15.340163 2026] [:error] [pid 20744:tid 20773] [client 4.214.16.213:8151] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aWFk30A8oR5jvkFpcP9GoQAAANA"]
[Sat Jan 10 04:28:16.472326 2026] [:error] [pid 20744:tid 20758] [client 4.214.16.213:25744] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aWFk4EA8oR5jvkFpcP9GowAAAME"]
[Sat Jan 10 04:28:17.886590 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:25760] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aWFk4UA8oR5jvkFpcP9GpgAAANM"]
[Sat Jan 10 04:28:18.941186 2026] [:error] [pid 20744:tid 20764] [client 4.214.16.213:25837] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aWFk4kA8oR5jvkFpcP9GqQAAAMc"]
[Sat Jan 10 04:28:19.345725 2026] [:error] [pid 20744:tid 20766] [client 4.214.16.213:25803] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aWFk40A8oR5jvkFpcP9GrQAAAMk"]
[Sat Jan 10 04:28:19.965216 2026] [:error] [pid 20744:tid 20779] [client 4.214.16.213:25846] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWFk40A8oR5jvkFpcP9GrwAAANY"]
[Sat Jan 10 04:28:20.251060 2026] [:error] [pid 20648:tid 20731] [client 4.214.16.213:25853] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWFk5DBnnIoBkEBdx9DvcAAAAJY"]
[Sat Jan 10 04:28:20.596075 2026] [:error] [pid 20744:tid 20773] [client 4.214.16.213:25772] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWFk5EA8oR5jvkFpcP9GsgAAANA"]
[Sat Jan 10 04:28:21.064299 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:25807] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aWFk5UA8oR5jvkFpcP9GtQAAANM"]
[Sat Jan 10 04:28:21.667140 2026] [:error] [pid 20744:tid 20781] [client 4.214.16.213:25784] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWFk5UA8oR5jvkFpcP9GuAAAANg"]
[Sat Jan 10 04:28:22.443193 2026] [:error] [pid 20744:tid 20775] [client 4.214.16.213:25786] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWFk5kA8oR5jvkFpcP9GugAAANI"]
[Sat Jan 10 04:28:22.849658 2026] [:error] [pid 20648:tid 20729] [client 4.214.16.213:25824] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWFk5jBnnIoBkEBdx9DvcwAAAJQ"]
[Sat Jan 10 04:28:23.788782 2026] [:error] [pid 20646:tid 20656] [client 4.214.16.213:25733] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aWFk5yKwdq_UhOM64b6YOgAAAAE"]
[Sat Jan 10 04:28:24.266392 2026] [:error] [pid 20744:tid 20766] [client 4.214.16.213:25770] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aWFk6EA8oR5jvkFpcP9GuwAAAMk"]
[Sat Jan 10 04:28:25.006612 2026] [:error] [pid 20646:tid 20676] [client 4.214.16.213:25761] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aWFk6SKwdq_UhOM64b6YPgAAABU"]
[Sat Jan 10 04:28:26.197661 2026] [:error] [pid 20648:tid 20730] [client 4.214.16.213:8090] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aWFk6jBnnIoBkEBdx9DvdgAAAJU"]
[Sat Jan 10 04:28:26.830969 2026] [:error] [pid 20744:tid 20762] [client 4.214.16.213:8161] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aWFk6kA8oR5jvkFpcP9GvwAAAMU"]
[Sat Jan 10 04:28:27.550949 2026] [:error] [pid 20648:tid 20721] [client 4.214.16.213:25743] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aWFk6zBnnIoBkEBdx9DveAAAAIw"]
[Sat Jan 10 04:28:28.197836 2026] [:error] [pid 20744:tid 20772] [client 4.214.16.213:25818] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aWFk7EA8oR5jvkFpcP9GxQAAAM8"]
[Sat Jan 10 04:28:28.626074 2026] [:error] [pid 20646:tid 20675] [client 4.214.16.213:25843] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aWFk7CKwdq_UhOM64b6YQwAAABQ"]
[Sat Jan 10 04:28:29.435085 2026] [:error] [pid 20647:tid 20695] [client 4.214.16.213:25834] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aWFk7avb0x69MarUHzCQ9QAAAE0"]
[Sat Jan 10 04:28:30.260371 2026] [:error] [pid 20646:tid 20679] [client 4.214.16.213:8068] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aWFk7iKwdq_UhOM64b6YRAAAABg"]
[Sat Jan 10 04:28:30.784743 2026] [:error] [pid 20646:tid 20677] [client 4.214.16.213:8143] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aWFk7iKwdq_UhOM64b6YRQAAABY"]
[Sat Jan 10 04:28:31.299908 2026] [:error] [pid 20648:tid 20725] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php
[Sat Jan 10 04:28:31.426739 2026] [:error] [pid 20648:tid 20710] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Jan 10 04:28:31.592135 2026] [:error] [pid 20648:tid 20713] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sat Jan 10 04:28:31.708066 2026] [:error] [pid 20648:tid 20718] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sat Jan 10 04:28:31.823828 2026] [:error] [pid 20648:tid 20717] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Jan 10 04:28:32.006533 2026] [:error] [pid 20648:tid 20724] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Jan 10 04:28:32.123811 2026] [:error] [pid 20648:tid 20719] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Sat Jan 10 04:28:32.241825 2026] [:error] [pid 20648:tid 20731] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Jan 10 04:28:32.372562 2026] [:error] [pid 20648:tid 20723] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Jan 10 04:28:32.610253 2026] [:error] [pid 20648:tid 20720] [client 4.214.16.213:25836] File does not exist: /usr/local/apache/htdocs/suspended-page/u.php
[Sat Jan 10 04:28:32.738894 2026] [:error] [pid 20648:tid 20715] [client 4.214.16.213:25836] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aWFk8DBnnIoBkEBdx9DviAAAAIY"]
[Sat Jan 10 04:28:33.275992 2026] [:error] [pid 20647:tid 20697] [client 4.214.16.213:8164] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aWFk8avb0x69MarUHzCQ-wAAAE8"]
[Sat Jan 10 04:28:33.749778 2026] [:error] [pid 20648:tid 20730] [client 4.214.16.213:25763] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aWFk8TBnnIoBkEBdx9DvigAAAJU"]
[Sat Jan 10 04:28:34.342045 2026] [:error] [pid 20744:tid 20777] [client 4.214.16.213:8188] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aWFk8kA8oR5jvkFpcP9GzQAAANQ"]
[Sat Jan 10 04:28:34.911645 2026] [:error] [pid 20648:tid 20725] [client 4.214.16.213:25759] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.phpquebecoils.com"] [unique_id "aWFk8jBnnIoBkEBdx9DvkAAAAJA"]
[Sat Jan 10 04:28:36.006635 2026] [:error] [pid 20744:tid 20776] [client 4.214.16.213:8177] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.phpquebecoils.com"] [unique_id "aWFk9EA8oR5jvkFpcP9G6QAAANM"]
[Sat Jan 10 04:28:36.777587 2026] [:error] [pid 20744:tid 20762] [client 4.214.16.213:25738] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.phpquebecoils.com"] [unique_id "aWFk9EA8oR5jvkFpcP9G8AAAAMU"]
[Sat Jan 10 04:28:37.412946 2026] [:error] [pid 20744:tid 20770] [client 4.214.16.213:25757] [client 4.214.16.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.phpquebecoils.com"] [unique_id "aWFk9UA8oR5jvkFpcP9G8wAAAM0"]
[Sat Jan 10 08:25:47.579000 2026] [:error] [pid 19926:tid 19933] [client 43.157.142.101:58622] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWGciyS03bq9jOoBYpNFYwAAAQU"]
[Sat Jan 10 12:56:07.168062 2026] [:error] [pid 56852:tid 56863] [client 110.166.71.39:49123] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWHb53YqmLUNT8pxJ0hrQQAAAcc"]
[Sat Jan 10 18:46:41.649023 2026] [:error] [pid 57649:tid 57661] [client 43.130.91.95:40766] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWIuEVcvIwrych3kBnorJwAAAoo"]
[Sat Jan 10 23:06:06.961851 2026] [:error] [pid 64621:tid 64624] [client 138.197.13.155:49614] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aWJq3oa9na_3sfYAP9q__gAAAwE"], referer: binance.com
[Sun Jan 11 03:53:55.647975 2026] [:error] [pid 63048:tid 63146] [client 177.10.226.192:11296] [client 177.10.226.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.226.192, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWKuUwI2qxfhtBNr4vD_sgAAABU"]
[Sun Jan 11 03:53:55.653767 2026] [:error] [pid 63048:tid 63146] [client 177.10.226.192:11296] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Jan 11 19:13:36.783522 2026] [:error] [pid 40191:tid 40193] [client 146.70.89.118:59998] [client 146.70.89.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.89.118, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aWOF4Em2BH1CV1p0EUHFQAAAAsA"]
[Sun Jan 11 19:13:36.787037 2026] [:error] [pid 40191:tid 40193] [client 146.70.89.118:59998] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Jan 11 20:46:46.571696 2026] [:error] [pid 11748:tid 11801] [client 182.44.12.37:59238] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWObtgC5xybrWOCNnoYBiQAAAZc"]
[Mon Jan 12 03:19:06.593135 2026] [:error] [pid 5152:tid 5172] [client 106.54.62.156:48060] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWP3qhm0axGMFrpuXHDP4gAAAAo"]
[Mon Jan 12 04:23:20.969227 2026] [:error] [pid 23184:tid 23206] [client 34.60.3.196:57182] [client 34.60.3.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.3.196, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWQGuBKkZNnMA7VuWCFkmQAAARQ"]
[Mon Jan 12 04:23:20.973455 2026] [:error] [pid 23184:tid 23206] [client 34.60.3.196:57182] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 12 04:23:23.317899 2026] [:error] [pid 23184:tid 23188] [client 34.60.3.196:57182] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWQGuxKkZNnMA7VuWCFkpgAAAQI"]
[Mon Jan 12 04:23:23.763085 2026] [:error] [pid 48106:tid 48185] [client 34.60.3.196:53354] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWQGu-_rz8jTZY4aXpTG4gAAAJI"]
[Mon Jan 12 04:23:24.197189 2026] [:error] [pid 48105:tid 48159] [client 34.60.3.196:52552] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWQGvDbe4SdLfSmtJe3OCQAAAFM"]
[Mon Jan 12 04:23:24.594158 2026] [:error] [pid 23184:tid 23197] [client 34.60.3.196:58795] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWQGvBKkZNnMA7VuWCFkqAAAAQs"]
[Mon Jan 12 04:23:25.000028 2026] [:error] [pid 23184:tid 23204] [client 34.60.3.196:55211] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWQGvBKkZNnMA7VuWCFkqQAAARI"]
[Mon Jan 12 04:23:25.658686 2026] [:error] [pid 48104:tid 48116] [client 34.60.3.196:49324] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWQGvU4huT4DhLwu2Vu4ugAAAAM"]
[Mon Jan 12 04:23:26.064890 2026] [:error] [pid 48106:tid 48176] [client 34.60.3.196:56218] [client 34.60.3.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWQGvu_rz8jTZY4aXpTG5gAAAIk"]
[Mon Jan 12 05:02:56.157671 2026] [:error] [pid 48213:tid 48237] [client 43.130.71.237:57492] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWQQAGRmaItaLCBvAhgkvgAAANY"]
[Mon Jan 12 05:11:43.017442 2026] [:error] [pid 48213:tid 48239] [client 43.153.67.21:50694] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWQSD2RmaItaLCBvAhgo0QAAANg"]
[Mon Jan 12 09:29:31.527276 2026] [:error] [pid 9303:tid 9315] [client 182.42.105.144:59181] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWROe9EoWhpeQ69gVtFehwAAAUk"]
[Mon Jan 12 12:32:22.361455 2026] [:error] [pid 51896:tid 51920] [client 170.106.35.153:33810] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWR5Vt2Y52W2afNXn_VgigAAAlU"]
[Mon Jan 12 12:42:10.707680 2026] [:error] [pid 51986:tid 52034] [client 170.106.180.246:55754] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWR7ohiI5CoFGIbwGZYtigAAA1M"]
[Mon Jan 12 15:51:58.707825 2026] [:error] [pid 51956:tid 51982] [client 182.42.105.144:53278] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWSoHkb_j3zpZfEgGM8FtQAAAtg"]
[Mon Jan 12 20:04:27.387194 2026] [:error] [pid 48106:tid 48187] [client 35.245.236.109:56640] [client 35.245.236.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.236.109, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWTjS-_rz8jTZY4aXpR05gAAAJQ"]
[Mon Jan 12 20:04:27.390812 2026] [:error] [pid 48106:tid 48187] [client 35.245.236.109:56640] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 12 20:04:30.222432 2026] [:error] [pid 48106:tid 48175] [client 35.245.236.109:56640] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWTjTu_rz8jTZY4aXpR08wAAAIg"]
[Mon Jan 12 20:04:30.704982 2026] [:error] [pid 48106:tid 48168] [client 35.245.236.109:56251] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWTjTu_rz8jTZY4aXpR09AAAAIE"]
[Mon Jan 12 20:04:31.155412 2026] [:error] [pid 51637:tid 51650] [client 35.245.236.109:63661] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWTjT3rTvTmO_ovDgVDQfwAAAYc"]
[Mon Jan 12 20:04:31.769826 2026] [:error] [pid 48213:tid 48227] [client 35.245.236.109:61228] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWTjT2RmaItaLCBvAhj8sgAAAMw"]
[Mon Jan 12 20:04:32.380735 2026] [:error] [pid 51637:tid 51659] [client 35.245.236.109:59949] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWTjUHrTvTmO_ovDgVDQgAAAAZA"]
[Mon Jan 12 20:04:32.870138 2026] [:error] [pid 51986:tid 52022] [client 35.245.236.109:49596] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWTjUBiI5CoFGIbwGZZpXwAAA0c"]
[Mon Jan 12 20:04:33.411282 2026] [:error] [pid 51986:tid 52036] [client 35.245.236.109:53572] [client 35.245.236.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWTjURiI5CoFGIbwGZZpYAAAA1U"]
[Mon Jan 12 20:05:41.440897 2026] [:error] [pid 51956:tid 51968] [client 167.172.235.216:57821] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aWTjlUb_j3zpZfEgGM8i5wAAAso"], referer: binance.com
[Mon Jan 12 22:26:40.601173 2026] [:error] [pid 51896:tid 51918] [client 106.227.49.113:49404] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWUEoN2Y52W2afNXn_WiNwAAAlM"]
[Mon Jan 12 23:11:37.811756 2026] [:error] [pid 51986:tid 52018] [client 34.86.77.168:56068] [client 34.86.77.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.77.168, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWUPKRiI5CoFGIbwGZaC2wAAA0M"]
[Mon Jan 12 23:11:37.815066 2026] [:error] [pid 51986:tid 52018] [client 34.86.77.168:56068] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 12 23:11:40.401574 2026] [:error] [pid 51986:tid 52025] [client 34.86.77.168:56068] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWUPLBiI5CoFGIbwGZaC5gAAA0o"]
[Mon Jan 12 23:11:40.948012 2026] [:error] [pid 48213:tid 48222] [client 34.86.77.168:65418] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWUPLGRmaItaLCBvAhgXTwAAAMc"]
[Mon Jan 12 23:11:41.392351 2026] [:error] [pid 9303:tid 9307] [client 34.86.77.168:63567] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWUPLdEoWhpeQ69gVtELdAAAAUE"]
[Mon Jan 12 23:11:41.874154 2026] [:error] [pid 9303:tid 9329] [client 34.86.77.168:64746] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWUPLdEoWhpeQ69gVtELdQAAAVc"]
[Mon Jan 12 23:11:42.304196 2026] [:error] [pid 51637:tid 51659] [client 34.86.77.168:49592] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWUPLnrTvTmO_ovDgVAALgAAAZA"]
[Mon Jan 12 23:11:42.779210 2026] [:error] [pid 9303:tid 9324] [client 34.86.77.168:51530] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWUPLtEoWhpeQ69gVtELdwAAAVI"]
[Mon Jan 12 23:11:43.255152 2026] [:error] [pid 48213:tid 48217] [client 34.86.77.168:52062] [client 34.86.77.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWUPL2RmaItaLCBvAhgXUQAAAMI"]
[Tue Jan 13 01:53:15.979277 2026] [:error] [pid 48106:tid 48172] [client 35.221.9.151:61746] [client 35.221.9.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.221.9.151, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWU1C-_rz8jTZY4aXpSaiwAAAIU"]
[Tue Jan 13 01:53:15.982963 2026] [:error] [pid 48106:tid 48172] [client 35.221.9.151:61746] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 13 01:53:19.286304 2026] [:error] [pid 48106:tid 48179] [client 35.221.9.151:61746] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWU1D-_rz8jTZY4aXpSamAAAAIw"]
[Tue Jan 13 01:53:19.837755 2026] [:error] [pid 51986:tid 52037] [client 35.221.9.151:59801] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWU1DxiI5CoFGIbwGZaUTQAAA1Y"]
[Tue Jan 13 01:53:20.282740 2026] [:error] [pid 51986:tid 52036] [client 35.221.9.151:49565] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWU1EBiI5CoFGIbwGZaUTwAAA1U"]
[Tue Jan 13 01:53:20.721298 2026] [:error] [pid 9303:tid 9316] [client 35.221.9.151:60673] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWU1ENEoWhpeQ69gVtEhZwAAAUo"]
[Tue Jan 13 01:53:21.260116 2026] [:error] [pid 51897:tid 51937] [client 35.221.9.151:49787] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWU1EdwDOJmYnFxYfDUcjgAAAos"]
[Tue Jan 13 01:53:21.738124 2026] [:error] [pid 51897:tid 51928] [client 35.221.9.151:49769] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWU1EdwDOJmYnFxYfDUcjwAAAoI"]
[Tue Jan 13 01:53:22.229245 2026] [:error] [pid 48213:tid 48219] [client 35.221.9.151:63163] [client 35.221.9.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWU1EmRmaItaLCBvAhgp8wAAAMQ"]
[Tue Jan 13 02:12:33.156590 2026] [:error] [pid 48106:tid 48183] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php, referer: https://www.google.fr/
[Tue Jan 13 02:12:33.273976 2026] [:error] [pid 48106:tid 48172] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://duckduckgo.com/
[Tue Jan 13 02:12:33.391959 2026] [:error] [pid 48106:tid 48177] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.yahoo.com/
[Tue Jan 13 02:12:33.510627 2026] [:error] [pid 48106:tid 48187] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.com/
[Tue Jan 13 02:12:33.627339 2026] [:error] [pid 48106:tid 48178] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.fr/
[Tue Jan 13 02:12:33.742754 2026] [:error] [pid 48106:tid 48182] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.com/
[Tue Jan 13 02:12:33.859941 2026] [:error] [pid 48106:tid 48184] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.com/
[Tue Jan 13 02:12:33.977192 2026] [:error] [pid 48106:tid 48176] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Tue Jan 13 02:12:34.094405 2026] [:error] [pid 48106:tid 48168] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.co.uk/
[Tue Jan 13 02:12:34.211429 2026] [:error] [pid 48106:tid 48181] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.bing.com/
[Tue Jan 13 02:12:34.328333 2026] [:error] [pid 48106:tid 48167] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.fr/
[Tue Jan 13 02:12:35.759485 2026] [:error] [pid 48106:tid 48167] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.yahoo.com/
[Tue Jan 13 02:12:35.876464 2026] [:error] [pid 48106:tid 48173] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Tue Jan 13 02:12:35.994872 2026] [:error] [pid 48106:tid 48189] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://www.bing.com/
[Tue Jan 13 02:12:36.111928 2026] [:error] [pid 48106:tid 48171] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.co.uk/
[Tue Jan 13 02:12:36.229121 2026] [:error] [pid 48106:tid 48169] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php, referer: https://www.bing.com/
[Tue Jan 13 02:12:36.346000 2026] [:error] [pid 48106:tid 48185] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.google.de/
[Tue Jan 13 02:12:36.462637 2026] [:error] [pid 48106:tid 48188] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Tue Jan 13 02:12:36.580584 2026] [:error] [pid 48106:tid 48190] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.yahoo.com/
[Tue Jan 13 02:12:36.814544 2026] [:error] [pid 48106:tid 48170] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.yahoo.com/
[Tue Jan 13 02:12:36.931412 2026] [:error] [pid 48106:tid 48179] [client 4.189.120.245:26216] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Tue Jan 13 02:12:40.219658 2026] [:error] [pid 48106:tid 48171] [client 4.189.120.245:26216] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWU5mO_rz8jTZY4aXpScyAAAAIQ"], referer: https://www.google.de/
[Tue Jan 13 02:12:40.563728 2026] [:error] [pid 9303:tid 9323] [client 4.189.120.245:26130] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWU5mNEoWhpeQ69gVtEj4wAAAVE"], referer: https://duckduckgo.com/
[Tue Jan 13 02:12:40.798525 2026] [:error] [pid 51637:tid 51655] [client 4.189.120.245:26152] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWU5mHrTvTmO_ovDgVAk0gAAAYw"], referer: https://www.google.co.uk/
[Tue Jan 13 02:12:41.029006 2026] [:error] [pid 48106:tid 48185] [client 4.189.120.245:26196] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWU5me_rz8jTZY4aXpScyQAAAJI"], referer: https://www.google.de/
[Tue Jan 13 02:12:41.256496 2026] [:error] [pid 51637:tid 51645] [client 4.189.120.245:26118] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWU5mXrTvTmO_ovDgVAk0wAAAYI"], referer: https://www.google.fr/
[Tue Jan 13 02:12:41.483751 2026] [:error] [pid 51637:tid 51651] [client 4.189.120.245:26191] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWU5mXrTvTmO_ovDgVAk1AAAAYg"], referer: https://www.bing.com/
[Tue Jan 13 02:12:41.711398 2026] [:error] [pid 51637:tid 51658] [client 4.189.120.245:26113] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWU5mXrTvTmO_ovDgVAk1QAAAY8"], referer: https://www.yahoo.com/
[Tue Jan 13 02:12:41.947351 2026] [:error] [pid 51986:tid 52037] [client 4.189.120.245:24838] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWU5mRiI5CoFGIbwGZaWMAAAA1Y"], referer: https://www.google.de/
[Tue Jan 13 02:12:42.174381 2026] [:error] [pid 51986:tid 52031] [client 4.189.120.245:26230] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aWU5mhiI5CoFGIbwGZaWMQAAA1A"], referer: https://www.google.co.uk/
[Tue Jan 13 02:12:42.414167 2026] [:error] [pid 51637:tid 51647] [client 4.189.120.245:26189] [client 4.189.120.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWU5mnrTvTmO_ovDgVAk1gAAAYQ"], referer: https://www.google.com/
[Tue Jan 13 02:50:25.129374 2026] [:error] [pid 48105:tid 48151] [client 170.106.152.218:40032] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWVCcTbe4SdLfSmtJe3BCgAAAEs"]
[Tue Jan 13 04:49:06.118747 2026] [:error] [pid 57659:tid 57699] [client 182.44.8.254:34699] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWVeQopeWOFQSBXk4xqrVQAAAEk"]
[Tue Jan 13 06:22:56.857007 2026] [:error] [pid 64816:tid 64860] [client 45.144.212.169:56646] [client 45.144.212.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aWV0QD7hQ-K4Qk-LZFxHbgAAAo4"]
[Tue Jan 13 09:40:28.386454 2026] [:error] [pid 26395:tid 26413] [client 52.102.18.37:25022] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:40:29.594750 2026] [:error] [pid 57653:tid 57670] [client 52.102.13.69:48328] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:40:30.270733 2026] [:error] [pid 57660:tid 57723] [client 34.99.21.210:60906] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:40:39.033884 2026] [:error] [pid 57660:tid 57741] [client 72.145.93.164:27265] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:40:41.634322 2026] [:error] [pid 64635:tid 64662] [client 94.139.41.18:46557] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:40:42.008931 2026] [:error] [pid 57659:tid 57700] [client 48.215.3.166:9240] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:40:46.740353 2026] [:error] [pid 64816:tid 64858] [client 83.229.107.129:37825] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 13 09:57:32.696632 2026] [:error] [pid 64636:tid 64676] [client 43.153.54.14:41666] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWWmjPGqpzg-cXyoK5l4FgAAAco"]
[Tue Jan 13 10:09:32.935883 2026] [:error] [pid 57756:tid 57773] [client 43.153.58.28:60942] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWWpXBb7B3uqOEHw10npygAAAM8"]
[Tue Jan 13 14:14:25.353897 2026] [:error] [pid 22426:tid 22471] [client 189.12.73.230:13948] [client 189.12.73.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.12.73.230, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWXiwdy1Q5toryYTHgNsjAAAAM0"]
[Tue Jan 13 14:14:25.358908 2026] [:error] [pid 22426:tid 22471] [client 189.12.73.230:13948] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 13 17:14:42.212067 2026] [:error] [pid 22389:tid 22392] [client 43.166.237.57:38598] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWYNAiLIB_8b411qalInRgAAAUE"]
[Tue Jan 13 17:28:39.353503 2026] [:error] [pid 22426:tid 22459] [client 49.233.45.47:35356] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWYQR9y1Q5toryYTHgOVgQAAAME"]
[Wed Jan 14 01:12:08.024615 2026] [:error] [pid 43385:tid 43419] [client 140.245.117.185:60168] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWZ858FJIMneckmN0mrnxwAAARc"]
[Wed Jan 14 01:12:08.663879 2026] [:error] [pid 43385:tid 43404] [client 140.245.117.185:64991] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWZ86MFJIMneckmN0mrn5AAAAQk"]
[Wed Jan 14 03:59:04.160857 2026] [:error] [pid 59074:tid 59098] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php, referer: https://www.bing.com/
[Wed Jan 14 03:59:04.303441 2026] [:error] [pid 59074:tid 59092] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.fr/
[Wed Jan 14 03:59:04.442764 2026] [:error] [pid 59074:tid 59079] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.yahoo.com/
[Wed Jan 14 03:59:04.581893 2026] [:error] [pid 59074:tid 59094] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Wed Jan 14 03:59:04.719622 2026] [:error] [pid 59074:tid 59089] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.bing.com/
[Wed Jan 14 03:59:04.857692 2026] [:error] [pid 59074:tid 59099] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Wed Jan 14 03:59:05.008871 2026] [:error] [pid 59074:tid 59093] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.fr/
[Wed Jan 14 03:59:05.159565 2026] [:error] [pid 59074:tid 59096] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.com/
[Wed Jan 14 03:59:05.300684 2026] [:error] [pid 59074:tid 59088] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.fr/
[Wed Jan 14 03:59:05.438645 2026] [:error] [pid 59074:tid 59100] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Wed Jan 14 03:59:05.578205 2026] [:error] [pid 59074:tid 59086] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Wed Jan 14 03:59:05.715391 2026] [:error] [pid 59074:tid 59087] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Wed Jan 14 03:59:05.853862 2026] [:error] [pid 59074:tid 59078] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Wed Jan 14 03:59:05.993421 2026] [:error] [pid 59074:tid 59090] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://www.yahoo.com/
[Wed Jan 14 03:59:06.131817 2026] [:error] [pid 59074:tid 59084] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://duckduckgo.com/
[Wed Jan 14 03:59:06.272235 2026] [:error] [pid 59074:tid 59082] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php, referer: https://www.bing.com/
[Wed Jan 14 03:59:06.410607 2026] [:error] [pid 59074:tid 59085] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.bing.com/
[Wed Jan 14 03:59:06.549228 2026] [:error] [pid 59074:tid 59083] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Wed Jan 14 03:59:06.686941 2026] [:error] [pid 59074:tid 59098] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Wed Jan 14 03:59:06.965646 2026] [:error] [pid 59074:tid 59079] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Wed Jan 14 03:59:07.105230 2026] [:error] [pid 59074:tid 59094] [client 4.217.232.162:14770] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://duckduckgo.com/
[Wed Jan 14 03:59:10.718045 2026] [:error] [pid 59074:tid 59077] [client 4.217.232.162:14770] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWakDk_KrJ818pzhB3xXbAAAAkE"], referer: https://www.google.fr/
[Wed Jan 14 03:59:11.138093 2026] [:error] [pid 58699:tid 58719] [client 4.217.232.162:14748] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWakD-YdPBtkMLK2SdqeggAAARE"], referer: https://www.google.de/
[Wed Jan 14 03:59:11.409869 2026] [:error] [pid 58901:tid 58938] [client 4.217.232.162:60648] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWakD73kQSrcqIWtO0oabQAAAcg"], referer: https://www.yahoo.com/
[Wed Jan 14 06:38:16.017417 2026] [autoindex:error] [pid 24603:tid 24689] [client 4.217.232.162:10855] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:16.156795 2026] [:error] [pid 24603:tid 24682] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:17.849899 2026] [:error] [pid 24603:tid 24682] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.com/
[Wed Jan 14 06:38:17.988587 2026] [:error] [pid 24603:tid 24665] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Wed Jan 14 06:38:18.128221 2026] [:error] [pid 24603:tid 24670] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.com/
[Wed Jan 14 06:38:18.267657 2026] [:error] [pid 24603:tid 24679] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:18.413311 2026] [:error] [pid 24603:tid 24674] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.google.com/
[Wed Jan 14 06:38:18.552057 2026] [:error] [pid 24603:tid 24680] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.com/
[Wed Jan 14 06:38:18.690334 2026] [:error] [pid 24603:tid 24686] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.com/
[Wed Jan 14 06:38:18.829449 2026] [:error] [pid 24603:tid 24677] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:18.968465 2026] [:error] [pid 24603:tid 24676] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:19.107432 2026] [:error] [pid 24603:tid 24667] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:20.788155 2026] [:error] [pid 24603:tid 24687] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.com/
[Wed Jan 14 06:38:22.712602 2026] [:error] [pid 24603:tid 24678] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:23.830187 2026] [:error] [pid 24603:tid 24676] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:23.968899 2026] [:error] [pid 24603:tid 24666] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:24.107964 2026] [:error] [pid 24603:tid 24675] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:24.247415 2026] [:error] [pid 24603:tid 24667] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.fr/
[Wed Jan 14 06:38:24.386477 2026] [:error] [pid 24603:tid 24688] [client 4.217.232.162:10855] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:24.660463 2026] [:error] [pid 24603:tid 24681] [client 4.217.232.162:10855] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbJYJPBJGFGN8VT8_Sz1AAAAJA"], referer: https://www.google.com/
[Wed Jan 14 06:38:24.930714 2026] [:error] [pid 58901:tid 58944] [client 4.217.232.162:10790] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWbJYL3kQSrcqIWtO0o7WQAAAc4"], referer: https://www.yahoo.com/
[Wed Jan 14 06:38:25.200313 2026] [:error] [pid 58901:tid 58953] [client 4.217.232.162:10734] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWbJYb3kQSrcqIWtO0o7WgAAAdc"], referer: https://www.yahoo.com/
[Wed Jan 14 06:38:25.471030 2026] [:error] [pid 24603:tid 24683] [client 4.217.232.162:10698] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWbJYZPBJGFGN8VT8_Sz1QAAAJI"], referer: https://www.bing.com/
[Wed Jan 14 06:38:25.748585 2026] [:error] [pid 24603:tid 24668] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:25.887145 2026] [:error] [pid 24603:tid 24678] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:26.025452 2026] [:error] [pid 24603:tid 24682] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.fr/
[Wed Jan 14 06:38:26.163270 2026] [:error] [pid 24603:tid 24671] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.de/
[Wed Jan 14 06:38:26.301378 2026] [:error] [pid 24603:tid 24665] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:26.439833 2026] [:error] [pid 24603:tid 24670] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:26.577936 2026] [:error] [pid 24603:tid 24679] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:26.716480 2026] [:error] [pid 24603:tid 24674] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:26.856655 2026] [:error] [pid 24603:tid 24672] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.com/
[Wed Jan 14 06:38:26.997304 2026] [:error] [pid 24603:tid 24680] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:27.135424 2026] [:error] [pid 24603:tid 24686] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:27.273903 2026] [:error] [pid 24603:tid 24677] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:27.412308 2026] [:error] [pid 24603:tid 24676] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:27.551342 2026] [:error] [pid 24603:tid 24666] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:27.690693 2026] [:error] [pid 24603:tid 24675] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:27.829695 2026] [:error] [pid 24603:tid 24667] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:27.968257 2026] [:error] [pid 24603:tid 24688] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:28.109275 2026] [:error] [pid 24603:tid 24673] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.google.com/
[Wed Jan 14 06:38:28.249347 2026] [:error] [pid 24603:tid 24681] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.com/
[Wed Jan 14 06:38:28.387415 2026] [:error] [pid 24603:tid 24687] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:28.537345 2026] [:error] [pid 24603:tid 24684] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.com/
[Wed Jan 14 06:38:28.676104 2026] [:error] [pid 24603:tid 24685] [client 4.217.232.162:10728] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:28.811817 2026] [:error] [pid 24603:tid 24683] [client 4.217.232.162:10728] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aWbJZJPBJGFGN8VT8_Sz7AAAAJI"], referer: https://www.yahoo.com/
[Wed Jan 14 06:38:29.085029 2026] [:error] [pid 58901:tid 58954] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:29.223623 2026] [:error] [pid 58901:tid 58933] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:29.363893 2026] [:error] [pid 58901:tid 58943] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.google.de/
[Wed Jan 14 06:38:29.507596 2026] [:error] [pid 58901:tid 58939] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:29.646627 2026] [:error] [pid 58901:tid 58936] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.bing.com/
[Wed Jan 14 06:38:29.786490 2026] [:error] [pid 58901:tid 58930] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.fr/
[Wed Jan 14 06:38:29.925532 2026] [:error] [pid 58901:tid 58946] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:38:30.066129 2026] [:error] [pid 58901:tid 58952] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:30.204461 2026] [:error] [pid 58901:tid 58948] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.google.de/
[Wed Jan 14 06:38:30.345519 2026] [:error] [pid 58901:tid 58945] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:30.484762 2026] [:error] [pid 58901:tid 58940] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:38:30.620093 2026] [:error] [pid 58901:tid 58942] [client 4.217.232.162:10377] [client 4.217.232.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.232.162, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWbJZr3kQSrcqIWtO0o7ZgAAAcw"], referer: https://duckduckgo.com/
[Wed Jan 14 06:38:30.624781 2026] [:error] [pid 58901:tid 58942] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:38:30.764516 2026] [:error] [pid 58901:tid 58932] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.de/
[Wed Jan 14 06:38:30.915776 2026] [:error] [pid 58901:tid 58937] [client 4.217.232.162:10377] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.bing.com/
[Wed Jan 14 07:13:20.492490 2026] [:error] [pid 58899:tid 58905] [client 43.153.192.98:48276] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWbRkAWViGQd5R44tHGE7QAAAYI"]
[Wed Jan 14 12:27:34.309353 2026] [:error] [pid 36986:tid 37002] [client 182.42.111.213:52583] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWcbNte0JvHv1YdpWx4DOgAAAI0"]
[Wed Jan 14 12:44:37.206967 2026] [:error] [pid 19187:tid 19211] [client 104.28.246.115:41037] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aWcfNc9QVhFYhOfPPbPwGQAAAFM"]
[Wed Jan 14 14:44:42.204044 2026] [:error] [pid 61468:tid 61482] [client 43.128.67.187:33926] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWc7WtfEBBL2jp9TJvKLMAAAAIs"]
[Wed Jan 14 16:34:18.971005 2026] [:error] [pid 61378:tid 61460] [client 202.47.53.127:38911] [client 202.47.53.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.53.127, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWdVChGjJjuJmoPOtlobVwAAABc"]
[Wed Jan 14 16:34:18.976667 2026] [:error] [pid 61378:tid 61460] [client 202.47.53.127:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 14 21:39:49.810696 2026] [:error] [pid 61377:tid 61417] [client 43.166.250.187:51324] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWecpcx0Xs4tcq6R-WiEiwAAAcc"]
[Thu Jan 15 00:45:19.545284 2026] [:error] [pid 23266:tid 23324] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/dox.php
[Thu Jan 15 00:45:19.799299 2026] [:error] [pid 23266:tid 23330] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/rrr.php
[Thu Jan 15 00:45:20.053295 2026] [:error] [pid 23266:tid 23326] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Thu Jan 15 00:45:20.308526 2026] [:error] [pid 23266:tid 23325] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Thu Jan 15 00:45:20.564842 2026] [:error] [pid 23266:tid 23333] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/bala.php
[Thu Jan 15 00:45:20.819110 2026] [:error] [pid 23266:tid 23340] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Thu Jan 15 00:45:21.085165 2026] [:error] [pid 23266:tid 23331] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Thu Jan 15 00:45:21.340319 2026] [:error] [pid 23266:tid 23343] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Jan 15 00:45:21.594160 2026] [:error] [pid 23266:tid 23329] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanzorng.php
[Thu Jan 15 00:45:21.847807 2026] [:error] [pid 23266:tid 23335] [client 52.169.148.186:6927] File does not exist: /usr/local/apache/htdocs/suspended-page/alf.php
[Thu Jan 15 00:45:23.245645 2026] [:error] [pid 23266:tid 23335] [client 52.169.148.186:6927] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc2.php"] [unique_id "aWfII3BtBrkcKkbU8Y6g-QAAAE0"]
[Thu Jan 15 00:45:23.745730 2026] [:error] [pid 23355:tid 23361] [client 52.169.148.186:5295] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc2.php"] [unique_id "aWfII4gRLUaz7Nmrre2kDQAAAMQ"]
[Thu Jan 15 00:45:24.245649 2026] [:error] [pid 23355:tid 23367] [client 52.169.148.186:5297] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc2.php"] [unique_id "aWfIJIgRLUaz7Nmrre2kDgAAAMo"]
[Thu Jan 15 00:45:24.747501 2026] [:error] [pid 23355:tid 23380] [client 52.169.148.186:4325] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc2.php"] [unique_id "aWfIJIgRLUaz7Nmrre2kDwAAANc"]
[Thu Jan 15 00:45:25.247853 2026] [:error] [pid 23355:tid 23378] [client 52.169.148.186:4912] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/evil.php"] [unique_id "aWfIJYgRLUaz7Nmrre2kEQAAANU"]
[Thu Jan 15 00:45:25.749135 2026] [:error] [pid 23355:tid 23369] [client 52.169.148.186:2641] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/evil.php"] [unique_id "aWfIJYgRLUaz7Nmrre2kEwAAAMw"]
[Thu Jan 15 00:45:26.249527 2026] [:error] [pid 23265:tid 23307] [client 52.169.148.186:15605] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/evil.php"] [unique_id "aWfIJqMIMikX8ofnAA3Z3gAAAAw"]
[Thu Jan 15 00:45:26.749773 2026] [:error] [pid 25012:tid 25026] [client 52.169.148.186:5261] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demo.php"] [unique_id "aWfIJj-ru-9lIsqx5CnuRgAAAIs"]
[Thu Jan 15 00:45:27.253074 2026] [:error] [pid 23355:tid 23375] [client 52.169.148.186:4334] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demo.php"] [unique_id "aWfIJ4gRLUaz7Nmrre2kFQAAANI"]
[Thu Jan 15 00:45:27.761882 2026] [:error] [pid 25012:tid 25030] [client 52.169.148.186:3293] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmpshell.php"] [unique_id "aWfIJz-ru-9lIsqx5CnuSQAAAI8"]
[Thu Jan 15 00:45:28.270142 2026] [:error] [pid 25012:tid 25027] [client 52.169.148.186:3290] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/columns.php"] [unique_id "aWfIKD-ru-9lIsqx5CnuSwAAAIw"]
[Thu Jan 15 00:45:28.773087 2026] [:error] [pid 25012:tid 25025] [client 52.169.148.186:4345] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/utchiha.php"] [unique_id "aWfIKD-ru-9lIsqx5CnuTAAAAIo"]
[Thu Jan 15 00:45:29.367745 2026] [:error] [pid 25012:tid 25019] [client 52.169.148.186:9305] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php/wp-cron.php"] [unique_id "aWfIKT-ru-9lIsqx5CnuTgAAAIQ"]
[Thu Jan 15 00:45:29.870847 2026] [:error] [pid 23266:tid 23322] [client 52.169.148.186:14507] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php/wp-cron.php"] [unique_id "aWfIKXBtBrkcKkbU8Y6g_wAAAEA"]
[Thu Jan 15 00:45:30.370529 2026] [:error] [pid 23264:tid 23276] [client 52.169.148.186:9827] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php/wp-cron.php"] [unique_id "aWfIKjxGR-Yo9U5nM0BsCgAAAUg"]
[Thu Jan 15 00:45:30.870975 2026] [:error] [pid 23355:tid 23373] [client 52.169.148.186:7501] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php/wp-cron.php"] [unique_id "aWfIKogRLUaz7Nmrre2kFwAAANA"]
[Thu Jan 15 00:45:31.449950 2026] [:error] [pid 25012:tid 25020] [client 52.169.148.186:4868] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWfIKz-ru-9lIsqx5CnuUAAAAIU"]
[Thu Jan 15 00:45:31.950357 2026] [:error] [pid 25012:tid 25034] [client 52.169.148.186:3326] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWfIKz-ru-9lIsqx5CnuUQAAAJM"]
[Thu Jan 15 00:45:32.450484 2026] [:error] [pid 25012:tid 25018] [client 52.169.148.186:10358] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWfILD-ru-9lIsqx5CnuUgAAAIM"]
[Thu Jan 15 00:45:32.957915 2026] [:error] [pid 25012:tid 25026] [client 52.169.148.186:14159] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aWfILD-ru-9lIsqx5CnuUwAAAIs"]
[Thu Jan 15 00:45:33.471297 2026] [:error] [pid 25012:tid 25037] [client 52.169.148.186:5250] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acwfihfh.php"] [unique_id "aWfILT-ru-9lIsqx5CnuVAAAAJY"]
[Thu Jan 15 00:45:33.974486 2026] [:error] [pid 25012:tid 25036] [client 52.169.148.186:9105] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aWfILT-ru-9lIsqx5CnuVQAAAJU"]
[Thu Jan 15 00:45:34.474450 2026] [:error] [pid 23355:tid 23379] [client 52.169.148.186:4864] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aWfILogRLUaz7Nmrre2kGgAAANY"]
[Thu Jan 15 00:45:34.985108 2026] [:error] [pid 23355:tid 23365] [client 52.169.148.186:3284] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aWfILogRLUaz7Nmrre2kGwAAAMg"]
[Thu Jan 15 00:45:35.484689 2026] [:error] [pid 25012:tid 25031] [client 52.169.148.186:11145] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aWfILz-ru-9lIsqx5CnuWQAAAJA"]
[Thu Jan 15 00:45:35.985407 2026] [:error] [pid 23355:tid 23367] [client 52.169.148.186:15523] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ea.php"] [unique_id "aWfIL4gRLUaz7Nmrre2kHQAAAMo"]
[Thu Jan 15 00:45:36.485649 2026] [:error] [pid 23265:tid 23318] [client 52.169.148.186:15565] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ea.php"] [unique_id "aWfIMKMIMikX8ofnAA3Z7AAAABc"]
[Thu Jan 15 00:45:36.987199 2026] [:error] [pid 23266:tid 23346] [client 52.169.148.186:9282] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ea.php"] [unique_id "aWfIMHBtBrkcKkbU8Y6hAQAAAFg"]
[Thu Jan 15 00:45:37.490539 2026] [:error] [pid 23264:tid 23271] [client 52.169.148.186:9985] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ea.php"] [unique_id "aWfIMTxGR-Yo9U5nM0BsDgAAAUM"]
[Thu Jan 15 00:45:37.990143 2026] [:error] [pid 23355:tid 23364] [client 52.169.148.186:11715] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aWfIMYgRLUaz7Nmrre2kHwAAAMc"]
[Thu Jan 15 00:45:38.490622 2026] [:error] [pid 25012:tid 25016] [client 52.169.148.186:1716] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aWfIMj-ru-9lIsqx5CnuXAAAAIE"]
[Thu Jan 15 00:45:39.000756 2026] [:error] [pid 25012:tid 25019] [client 52.169.148.186:1970] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aWfIMj-ru-9lIsqx5CnuXgAAAIQ"]
[Thu Jan 15 00:45:39.501746 2026] [:error] [pid 25012:tid 25032] [client 52.169.148.186:4889] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aWfIMz-ru-9lIsqx5CnuXwAAAJE"]
[Thu Jan 15 00:45:40.002617 2026] [:error] [pid 23264:tid 23289] [client 52.169.148.186:4326] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aWfINDxGR-Yo9U5nM0BsDwAAAVU"]
[Thu Jan 15 00:45:40.502428 2026] [:error] [pid 23264:tid 23286] [client 52.169.148.186:15572] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aWfINDxGR-Yo9U5nM0BsEQAAAVI"]
[Thu Jan 15 00:45:41.002050 2026] [:error] [pid 25012:tid 25020] [client 52.169.148.186:5306] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aWfINT-ru-9lIsqx5CnuYAAAAIU"]
[Thu Jan 15 00:45:41.502368 2026] [:error] [pid 23265:tid 23304] [client 52.169.148.186:9088] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aWfINaMIMikX8ofnAA3Z8AAAAAk"]
[Thu Jan 15 00:45:42.002412 2026] [:error] [pid 23355:tid 23370] [client 52.169.148.186:14166] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x0x.php"] [unique_id "aWfINogRLUaz7Nmrre2kJAAAAM0"]
[Thu Jan 15 00:45:42.502904 2026] [:error] [pid 23266:tid 23330] [client 52.169.148.186:9148] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x0x.php"] [unique_id "aWfINnBtBrkcKkbU8Y6hCAAAAEg"]
[Thu Jan 15 00:45:43.004679 2026] [:error] [pid 23266:tid 23326] [client 52.169.148.186:10036] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x0x.php"] [unique_id "aWfIN3BtBrkcKkbU8Y6hCQAAAEQ"]
[Thu Jan 15 00:45:43.505454 2026] [:error] [pid 23266:tid 23342] [client 52.169.148.186:10046] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x0x.php"] [unique_id "aWfIN3BtBrkcKkbU8Y6hCgAAAFQ"]
[Thu Jan 15 00:45:44.011512 2026] [:error] [pid 23264:tid 23292] [client 52.169.148.186:14199] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aWfIODxGR-Yo9U5nM0BsFwAAAVg"]
[Thu Jan 15 00:45:44.517797 2026] [:error] [pid 23355:tid 23372] [client 52.169.148.186:15583] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cjfuns.php"] [unique_id "aWfIOIgRLUaz7Nmrre2kJgAAAM8"]
[Thu Jan 15 00:45:45.017237 2026] [:error] [pid 23355:tid 23357] [client 52.169.148.186:14152] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cjfuns.php"] [unique_id "aWfIOYgRLUaz7Nmrre2kKAAAAMA"]
[Thu Jan 15 00:45:45.522818 2026] [:error] [pid 25012:tid 25029] [client 52.169.148.186:15513] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cjfuns.php"] [unique_id "aWfIOT-ru-9lIsqx5CnuZAAAAI4"]
[Thu Jan 15 00:45:46.022486 2026] [:error] [pid 23264:tid 23283] [client 52.169.148.186:14485] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cjfuns.php"] [unique_id "aWfIOjxGR-Yo9U5nM0BsGgAAAU8"]
[Thu Jan 15 00:45:46.596024 2026] [:error] [pid 23265:tid 23309] [client 52.169.148.186:5282] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aWfIOqMIMikX8ofnAA3Z9gAAAA4"]
[Thu Jan 15 00:45:47.096681 2026] [:error] [pid 23264:tid 23289] [client 52.169.148.186:10032] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aWfIOzxGR-Yo9U5nM0BsHQAAAVU"]
[Thu Jan 15 00:45:47.598586 2026] [:error] [pid 23265:tid 23315] [client 52.169.148.186:12067] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aWfIO6MIMikX8ofnAA3Z9wAAABQ"]
[Thu Jan 15 00:45:48.099618 2026] [:error] [pid 23265:tid 23305] [client 52.169.148.186:14428] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class19.php"] [unique_id "aWfIPKMIMikX8ofnAA3Z-AAAAAo"]
[Thu Jan 15 00:45:48.694771 2026] [:error] [pid 23266:tid 23328] [client 52.169.148.186:14196] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWfIPHBtBrkcKkbU8Y6hEAAAAEY"]
[Thu Jan 15 00:45:49.195003 2026] [:error] [pid 23265:tid 23310] [client 52.169.148.186:11499] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWfIPaMIMikX8ofnAA3Z-gAAAA8"]
[Thu Jan 15 00:45:49.696764 2026] [:error] [pid 23265:tid 23302] [client 52.169.148.186:15490] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWfIPaMIMikX8ofnAA3Z-wAAAAc"]
[Thu Jan 15 00:45:50.206370 2026] [:error] [pid 23265:tid 23307] [client 52.169.148.186:12039] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWfIPqMIMikX8ofnAA3Z_QAAAAw"]
[Thu Jan 15 00:45:50.707096 2026] [:error] [pid 23266:tid 23323] [client 52.169.148.186:13943] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWfIPnBtBrkcKkbU8Y6hEgAAAEE"]
[Thu Jan 15 00:45:51.209744 2026] [:error] [pid 23266:tid 23345] [client 52.169.148.186:9329] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWfIP3BtBrkcKkbU8Y6hEwAAAFc"]
[Thu Jan 15 00:45:51.712989 2026] [:error] [pid 23355:tid 23364] [client 52.169.148.186:15541] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWfIP4gRLUaz7Nmrre2kKwAAAMc"]
[Thu Jan 15 00:45:52.222217 2026] [:error] [pid 23264:tid 23268] [client 52.169.148.186:7523] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/444.php"] [unique_id "aWfIQDxGR-Yo9U5nM0BsHgAAAUA"]
[Thu Jan 15 00:45:52.722246 2026] [:error] [pid 23266:tid 23330] [client 52.169.148.186:13940] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nx1.php"] [unique_id "aWfIQHBtBrkcKkbU8Y6hFQAAAEg"]
[Thu Jan 15 00:45:53.229884 2026] [:error] [pid 23265:tid 23310] [client 52.169.148.186:15538] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nx1.php"] [unique_id "aWfIQaMIMikX8ofnAA3aCAAAAA8"]
[Thu Jan 15 00:45:53.728523 2026] [:error] [pid 23264:tid 23281] [client 52.169.148.186:9134] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nx1.php"] [unique_id "aWfIQTxGR-Yo9U5nM0BsIAAAAU0"]
[Thu Jan 15 00:45:54.230151 2026] [:error] [pid 23266:tid 23322] [client 52.169.148.186:15659] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nx1.php"] [unique_id "aWfIQnBtBrkcKkbU8Y6hGQAAAEA"]
[Thu Jan 15 00:45:54.730924 2026] [:error] [pid 23265:tid 23303] [client 52.169.148.186:14176] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aWfIQqMIMikX8ofnAA3aDAAAAAg"]
[Thu Jan 15 00:45:55.230278 2026] [:error] [pid 23265:tid 23319] [client 52.169.148.186:15619] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aWfIQ6MIMikX8ofnAA3aEQAAABg"]
[Thu Jan 15 00:45:55.728726 2026] [:error] [pid 23266:tid 23328] [client 52.169.148.186:15207] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aWfIQ3BtBrkcKkbU8Y6hHAAAAEY"]
[Thu Jan 15 00:45:56.232454 2026] [:error] [pid 25012:tid 25033] [client 52.169.148.186:14182] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aWfIRD-ru-9lIsqx5CnuaQAAAJI"]
[Thu Jan 15 00:45:56.735764 2026] [:error] [pid 23355:tid 23378] [client 52.169.148.186:15543] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aWfIRIgRLUaz7Nmrre2kMAAAANU"]
[Thu Jan 15 00:45:57.238610 2026] [:error] [pid 23355:tid 23370] [client 52.169.148.186:18770] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aWfIRYgRLUaz7Nmrre2kMQAAAM0"]
[Thu Jan 15 00:45:57.745960 2026] [:error] [pid 23355:tid 23373] [client 52.169.148.186:4867] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aWfIRYgRLUaz7Nmrre2kMwAAANA"]
[Thu Jan 15 00:45:58.258516 2026] [:error] [pid 25012:tid 25032] [client 52.169.148.186:5305] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aWfIRj-ru-9lIsqx5CnubAAAAJE"]
[Thu Jan 15 00:45:58.770294 2026] [:error] [pid 25012:tid 25036] [client 52.169.148.186:15492] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aWfIRj-ru-9lIsqx5CnubgAAAJU"]
[Thu Jan 15 00:45:59.271255 2026] [:error] [pid 23355:tid 23363] [client 52.169.148.186:15598] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aWfIR4gRLUaz7Nmrre2kNQAAAMY"]
[Thu Jan 15 00:45:59.824690 2026] [:error] [pid 25012:tid 25029] [client 52.169.148.186:11477] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aWfIRz-ru-9lIsqx5CnucgAAAI4"]
[Thu Jan 15 00:46:00.325805 2026] [:error] [pid 23355:tid 23379] [client 52.169.148.186:14436] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aWfISIgRLUaz7Nmrre2kNwAAANY"]
[Thu Jan 15 00:46:00.837625 2026] [:error] [pid 23355:tid 23365] [client 52.169.148.186:9120] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aWfISIgRLUaz7Nmrre2kOAAAAMg"]
[Thu Jan 15 00:46:01.355048 2026] [:error] [pid 23355:tid 23377] [client 52.169.148.186:5293] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpup.php"] [unique_id "aWfISYgRLUaz7Nmrre2kOQAAANQ"]
[Thu Jan 15 00:46:01.899470 2026] [:error] [pid 23266:tid 23341] [client 52.169.148.186:5302] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aWfISXBtBrkcKkbU8Y6hIgAAAFM"]
[Thu Jan 15 00:46:02.410945 2026] [:error] [pid 25012:tid 25023] [client 52.169.148.186:4869] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aWfISj-ru-9lIsqx5CnucwAAAIg"]
[Thu Jan 15 00:46:02.911372 2026] [:error] [pid 23355:tid 23380] [client 52.169.148.186:4894] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aWfISogRLUaz7Nmrre2kOwAAANc"]
[Thu Jan 15 00:46:03.412078 2026] [:error] [pid 25012:tid 25039] [client 52.169.148.186:14104] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hk.php"] [unique_id "aWfISz-ru-9lIsqx5CnudQAAAJg"]
[Thu Jan 15 00:46:03.911755 2026] [:error] [pid 25012:tid 25022] [client 52.169.148.186:7540] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWfISz-ru-9lIsqx5CnudwAAAIc"]
[Thu Jan 15 00:46:04.413239 2026] [:error] [pid 23355:tid 23374] [client 52.169.148.186:4896] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWfITIgRLUaz7Nmrre2kPQAAANE"]
[Thu Jan 15 00:46:04.922098 2026] [:error] [pid 23266:tid 23344] [client 52.169.148.186:9143] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWfITHBtBrkcKkbU8Y6hJAAAAFY"]
[Thu Jan 15 00:46:05.433303 2026] [:error] [pid 23264:tid 23292] [client 52.169.148.186:2480] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aWfITTxGR-Yo9U5nM0BsIwAAAVg"]
[Thu Jan 15 00:46:05.937326 2026] [:error] [pid 23266:tid 23333] [client 52.169.148.186:15662] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWfITXBtBrkcKkbU8Y6hJgAAAEs"]
[Thu Jan 15 00:46:06.438017 2026] [:error] [pid 25012:tid 25028] [client 52.169.148.186:6160] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWfITj-ru-9lIsqx5CnueAAAAI0"]
[Thu Jan 15 00:46:06.938830 2026] [:error] [pid 25012:tid 25032] [client 52.169.148.186:2325] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWfITj-ru-9lIsqx5CnueQAAAJE"]
[Thu Jan 15 00:46:07.438927 2026] [:error] [pid 23265:tid 23306] [client 52.169.148.186:7492] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWfIT6MIMikX8ofnAA3aHAAAAAs"]
[Thu Jan 15 00:46:07.939122 2026] [:error] [pid 23265:tid 23302] [client 52.169.148.186:2470] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aWfIT6MIMikX8ofnAA3aHwAAAAc"]
[Thu Jan 15 00:46:08.441082 2026] [:error] [pid 23265:tid 23301] [client 52.169.148.186:4906] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aWfIUKMIMikX8ofnAA3aIQAAAAY"]
[Thu Jan 15 00:46:08.965434 2026] [:error] [pid 23355:tid 23372] [client 52.169.148.186:15578] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aWfIUIgRLUaz7Nmrre2kQQAAAM8"]
[Thu Jan 15 00:46:09.466067 2026] [:error] [pid 23266:tid 23329] [client 52.169.148.186:15632] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aWfIUXBtBrkcKkbU8Y6hKAAAAEc"]
[Thu Jan 15 00:46:09.968406 2026] [:error] [pid 23266:tid 23336] [client 52.169.148.186:7537] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aWfIUXBtBrkcKkbU8Y6hKQAAAE4"]
[Thu Jan 15 00:46:10.468718 2026] [:error] [pid 23355:tid 23376] [client 52.169.148.186:2472] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aWfIUogRLUaz7Nmrre2kQwAAANM"]
[Thu Jan 15 00:46:10.969342 2026] [:error] [pid 23265:tid 23296] [client 52.169.148.186:6201] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aWfIUqMIMikX8ofnAA3aJgAAAAE"]
[Thu Jan 15 00:46:11.469838 2026] [:error] [pid 23266:tid 23331] [client 52.169.148.186:7608] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class20.php"] [unique_id "aWfIU3BtBrkcKkbU8Y6hLAAAAEk"]
[Thu Jan 15 00:46:11.970945 2026] [:error] [pid 23355:tid 23361] [client 52.169.148.186:6178] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "aWfIU4gRLUaz7Nmrre2kRwAAAMQ"]
[Thu Jan 15 00:46:12.480330 2026] [:error] [pid 23265:tid 23319] [client 52.169.148.186:15563] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "aWfIVKMIMikX8ofnAA3aJwAAABg"]
[Thu Jan 15 00:46:12.982592 2026] [:error] [pid 23355:tid 23380] [client 52.169.148.186:14096] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/031.php"] [unique_id "aWfIVIgRLUaz7Nmrre2kSgAAANc"]
[Thu Jan 15 00:46:13.488412 2026] [:error] [pid 23355:tid 23360] [client 52.169.148.186:15563] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file5.php"] [unique_id "aWfIVYgRLUaz7Nmrre2kTAAAAMM"]
[Thu Jan 15 00:46:14.066671 2026] [:error] [pid 25012:tid 25026] [client 52.169.148.186:1839] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aWfIVj-ru-9lIsqx5CnuewAAAIs"]
[Thu Jan 15 00:46:14.580372 2026] [:error] [pid 23266:tid 23337] [client 52.169.148.186:15448] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aWfIVnBtBrkcKkbU8Y6hLwAAAE8"]
[Thu Jan 15 00:46:15.081668 2026] [:error] [pid 25012:tid 25017] [client 52.169.148.186:1228] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aWfIVz-ru-9lIsqx5CnufAAAAII"]
[Thu Jan 15 00:46:15.582122 2026] [:error] [pid 23264:tid 23292] [client 52.169.148.186:4879] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aWfIVzxGR-Yo9U5nM0BsLgAAAVg"]
[Thu Jan 15 00:46:16.091097 2026] [:error] [pid 23355:tid 23373] [client 52.169.148.186:1239] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aWfIWIgRLUaz7Nmrre2kUAAAANA"]
[Thu Jan 15 00:46:16.595772 2026] [:error] [pid 23264:tid 23270] [client 52.169.148.186:12695] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aWfIWDxGR-Yo9U5nM0BsMAAAAUI"]
[Thu Jan 15 00:46:17.095603 2026] [:error] [pid 23355:tid 23379] [client 52.169.148.186:2714] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ths.php"] [unique_id "aWfIWYgRLUaz7Nmrre2kVQAAANY"]
[Thu Jan 15 00:46:17.595849 2026] [:error] [pid 25012:tid 25030] [client 52.169.148.186:4571] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aWfIWT-ru-9lIsqx5CnugAAAAI8"]
[Thu Jan 15 00:46:18.101312 2026] [:error] [pid 23264:tid 23289] [client 52.169.148.186:1484] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aWfIWjxGR-Yo9U5nM0BsMgAAAVU"]
[Thu Jan 15 00:46:18.609878 2026] [:error] [pid 25012:tid 25015] [client 52.169.148.186:5289] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWfIWj-ru-9lIsqx5CnugwAAAIA"]
[Thu Jan 15 00:46:19.113718 2026] [:error] [pid 23264:tid 23284] [client 52.169.148.186:15478] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWfIWzxGR-Yo9U5nM0BsOAAAAVA"]
[Thu Jan 15 00:46:19.615893 2026] [:error] [pid 23264:tid 23287] [client 52.169.148.186:4652] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWfIWzxGR-Yo9U5nM0BsPAAAAVM"]
[Thu Jan 15 00:46:20.116558 2026] [:error] [pid 23264:tid 23280] [client 52.169.148.186:12388] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWfIXDxGR-Yo9U5nM0BsPgAAAUw"]
[Thu Jan 15 00:46:20.618280 2026] [:error] [pid 23355:tid 23373] [client 52.169.148.186:12735] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aWfIXIgRLUaz7Nmrre2kWwAAANA"]
[Thu Jan 15 00:46:21.125403 2026] [:error] [pid 23265:tid 23307] [client 52.169.148.186:12699] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Jan 15 00:46:21.380653 2026] [:error] [pid 23265:tid 23308] [client 52.169.148.186:12699] File does not exist: /usr/local/apache/htdocs/suspended-page/f2f.php
[Thu Jan 15 00:46:21.633862 2026] [:error] [pid 23265:tid 23301] [client 52.169.148.186:12699] File does not exist: /usr/local/apache/htdocs/suspended-page/anskrit.php
[Thu Jan 15 00:46:21.887024 2026] [:error] [pid 23265:tid 23309] [client 52.169.148.186:12699] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Jan 15 00:46:22.140698 2026] [:error] [pid 23265:tid 23313] [client 52.169.148.186:12699] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Jan 15 00:46:22.391501 2026] [:error] [pid 23265:tid 23298] [client 52.169.148.186:12699] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aWfIXqMIMikX8ofnAA3aMQAAAAM"]
[Thu Jan 15 00:46:22.898289 2026] [:error] [pid 23355:tid 23357] [client 52.169.148.186:15575] File does not exist: /usr/local/apache/htdocs/suspended-page/alpa.php
[Thu Jan 15 00:46:23.152022 2026] [:error] [pid 23355:tid 23365] [client 52.169.148.186:15575] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Thu Jan 15 00:46:23.406080 2026] [:error] [pid 23355:tid 23361] [client 52.169.148.186:15575] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Jan 15 00:46:23.659756 2026] [:error] [pid 23355:tid 23377] [client 52.169.148.186:15575] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Jan 15 00:46:23.917703 2026] [:error] [pid 23355:tid 23380] [client 52.169.148.186:15575] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Jan 15 00:46:24.176969 2026] [:error] [pid 23355:tid 23364] [client 52.169.148.186:15575] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Thu Jan 15 00:46:24.427675 2026] [:error] [pid 23355:tid 23374] [client 52.169.148.186:15575] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aWfIYIgRLUaz7Nmrre2kaQAAANE"]
[Thu Jan 15 00:46:24.928149 2026] [:error] [pid 25012:tid 25021] [client 52.169.148.186:8486] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aWfIYD-ru-9lIsqx5CnuiwAAAIY"]
[Thu Jan 15 00:46:25.428715 2026] [:error] [pid 25012:tid 25023] [client 52.169.148.186:6185] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aWfIYT-ru-9lIsqx5CnujgAAAIg"]
[Thu Jan 15 00:46:25.929114 2026] [:error] [pid 25012:tid 25038] [client 52.169.148.186:9694] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aWfIYT-ru-9lIsqx5CnujwAAAJc"]
[Thu Jan 15 00:46:26.430998 2026] [:error] [pid 23355:tid 23360] [client 52.169.148.186:15676] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "aWfIYogRLUaz7Nmrre2kawAAAMM"]
[Thu Jan 15 00:46:26.931496 2026] [:error] [pid 25012:tid 25025] [client 52.169.148.186:7785] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "aWfIYj-ru-9lIsqx5CnukQAAAIo"]
[Thu Jan 15 00:46:27.446138 2026] [:error] [pid 25012:tid 25022] [client 52.169.148.186:7497] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aWfIYz-ru-9lIsqx5CnukwAAAIc"]
[Thu Jan 15 00:46:27.948351 2026] [:error] [pid 23355:tid 23362] [client 52.169.148.186:1218] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aWfIY4gRLUaz7Nmrre2kbgAAAMU"]
[Thu Jan 15 00:46:28.459603 2026] [:error] [pid 25012:tid 25018] [client 52.169.148.186:10021] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aWfIZD-ru-9lIsqx5CnulQAAAIM"]
[Thu Jan 15 00:46:29.006747 2026] [:error] [pid 25012:tid 25037] [client 52.169.148.186:12683] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filesss.php"] [unique_id "aWfIZT-ru-9lIsqx5CnumQAAAJY"]
[Thu Jan 15 00:46:29.508848 2026] [:error] [pid 25012:tid 25036] [client 52.169.148.186:1509] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filesss.php"] [unique_id "aWfIZT-ru-9lIsqx5CnunQAAAJU"]
[Thu Jan 15 00:46:30.009036 2026] [:error] [pid 23355:tid 23358] [client 52.169.148.186:4877] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filesss.php"] [unique_id "aWfIZogRLUaz7Nmrre2kcAAAAME"]
[Thu Jan 15 00:46:30.509607 2026] [:error] [pid 23355:tid 23371] [client 52.169.148.186:1478] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filesss.php"] [unique_id "aWfIZogRLUaz7Nmrre2kcgAAAM4"]
[Thu Jan 15 00:46:31.021311 2026] [:error] [pid 23355:tid 23357] [client 52.169.148.186:7754] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWfIZ4gRLUaz7Nmrre2kdQAAAMA"]
[Thu Jan 15 00:46:31.549455 2026] [:error] [pid 23265:tid 23300] [client 52.169.148.186:9109] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWfIZ6MIMikX8ofnAA3aNgAAAAU"]
[Thu Jan 15 00:46:32.049132 2026] [:error] [pid 25012:tid 25017] [client 52.169.148.186:7247] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWfIaD-ru-9lIsqx5CnuowAAAII"]
[Thu Jan 15 00:46:32.551268 2026] [:error] [pid 23265:tid 23316] [client 52.169.148.186:15508] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWfIaKMIMikX8ofnAA3aNwAAABU"]
[Thu Jan 15 00:46:33.052270 2026] [:error] [pid 23355:tid 23366] [client 52.169.148.186:2436] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo.php"] [unique_id "aWfIaYgRLUaz7Nmrre2keAAAAMk"]
[Thu Jan 15 00:46:33.609141 2026] [:error] [pid 23265:tid 23307] [client 52.169.148.186:7753] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWfIaaMIMikX8ofnAA3aOQAAAAw"]
[Thu Jan 15 00:46:34.112299 2026] [:error] [pid 25012:tid 25029] [client 52.169.148.186:9243] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWfIaj-ru-9lIsqx5CnupwAAAI4"]
[Thu Jan 15 00:46:34.612727 2026] [:error] [pid 23355:tid 23381] [client 52.169.148.186:12036] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWfIaogRLUaz7Nmrre2kfAAAANg"]
[Thu Jan 15 00:46:35.115946 2026] [:error] [pid 25012:tid 25035] [client 52.169.148.186:15657] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWfIaz-ru-9lIsqx5CnuqAAAAJQ"]
[Thu Jan 15 01:15:40.985329 2026] [:error] [pid 23266:tid 23326] [client 106.119.167.146:60046] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWfPPHBtBrkcKkbU8Y6nRgAAAEQ"]
[Thu Jan 15 05:14:28.783952 2026] [:error] [pid 51807:tid 51812] [client 170.106.107.87:46604] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWgHNMMrH4_ge4gLwN3gVQAAAQM"]
[Thu Jan 15 05:27:18.658058 2026] [:error] [pid 5291:tid 5350] [client 43.130.9.111:33922] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWgKNjp5twZ54fay3Rd7lQAAAFc"]
[Thu Jan 15 07:18:52.595825 2026] [:error] [pid 51807:tid 51824] [client 182.44.8.254:47528] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWgkXMMrH4_ge4gLwN0nhAAAAQ8"]
[Thu Jan 15 08:01:49.552284 2026] [:error] [pid 51807:tid 51812] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Thu Jan 15 08:01:49.823439 2026] [:error] [pid 51807:tid 51827] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Thu Jan 15 08:01:50.096793 2026] [:error] [pid 51807:tid 51817] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/abt.php
[Thu Jan 15 08:01:50.370473 2026] [:error] [pid 51807:tid 51809] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu Jan 15 08:01:50.646083 2026] [:error] [pid 51807:tid 51825] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Thu Jan 15 08:01:50.916802 2026] [:error] [pid 51807:tid 51821] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php
[Thu Jan 15 08:01:51.196842 2026] [:error] [pid 51807:tid 51833] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Thu Jan 15 08:01:51.478826 2026] [:error] [pid 51807:tid 51813] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/t1.php
[Thu Jan 15 08:01:51.750093 2026] [:error] [pid 51807:tid 51822] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Thu Jan 15 08:01:52.021601 2026] [:error] [pid 51807:tid 51824] [client 40.69.66.178:12200] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Jan 15 08:01:52.290236 2026] [:error] [pid 51807:tid 51812] [client 40.69.66.178:12200] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aWgucMMrH4_ge4gLwN1AWgAAAQM"]
[Thu Jan 15 08:01:52.825946 2026] [:error] [pid 5291:tid 5336] [client 40.69.66.178:15436] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aWgucDp5twZ54fay3Rez1gAAAEk"]
[Thu Jan 15 08:01:53.392816 2026] [:error] [pid 5291:tid 5341] [client 40.69.66.178:15583] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aWgucTp5twZ54fay3Rez2wAAAE4"]
[Thu Jan 15 08:01:53.936396 2026] [:error] [pid 5389:tid 5413] [client 40.69.66.178:8146] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aWgucUkzfklDSWCNrVJ3egAAANY"]
[Thu Jan 15 08:01:54.480639 2026] [:error] [pid 5290:tid 5319] [client 40.69.66.178:11559] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aWgucjiQRfcmyoePXPfcawAAABQ"]
[Thu Jan 15 08:01:55.038850 2026] [:error] [pid 5290:tid 5318] [client 40.69.66.178:7254] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gm.php"] [unique_id "aWgucziQRfcmyoePXPfcbQAAABM"]
[Thu Jan 15 08:01:55.671166 2026] [:error] [pid 5290:tid 5315] [client 40.69.66.178:5416] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless14.php"] [unique_id "aWgucziQRfcmyoePXPfcbgAAABA"]
[Thu Jan 15 08:01:56.188427 2026] [:error] [pid 5389:tid 5398] [client 40.69.66.178:5929] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless14.php"] [unique_id "aWgudEkzfklDSWCNrVJ3gQAAAMc"]
[Thu Jan 15 08:01:56.814455 2026] [:error] [pid 5291:tid 5331] [client 40.69.66.178:12202] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWgudDp5twZ54fay3Rez4AAAAEQ"]
[Thu Jan 15 08:01:57.348378 2026] [:error] [pid 5292:tid 5371] [client 40.69.66.178:15574] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWgudWWxK-ai3L9DjxYhmQAAAJA"]
[Thu Jan 15 08:01:57.879226 2026] [:error] [pid 5290:tid 5323] [client 40.69.66.178:5923] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWgudTiQRfcmyoePXPfccwAAABg"]
[Thu Jan 15 08:01:58.416167 2026] [:error] [pid 51807:tid 51827] [client 40.69.66.178:1729] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWgudsMrH4_ge4gLwN1AaAAAARI"]
[Thu Jan 15 08:01:58.962807 2026] [:error] [pid 5292:tid 5372] [client 40.69.66.178:13234] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bras.php"] [unique_id "aWgudmWxK-ai3L9DjxYhngAAAJE"]
[Thu Jan 15 08:01:59.483398 2026] [:error] [pid 5389:tid 5392] [client 40.69.66.178:1431] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWgud0kzfklDSWCNrVJ3hAAAAME"]
[Thu Jan 15 08:01:59.997983 2026] [:error] [pid 5291:tid 5343] [client 40.69.66.178:1781] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aWgudzp5twZ54fay3Rez6wAAAFA"]
[Thu Jan 15 08:02:00.499180 2026] [:error] [pid 5290:tid 5312] [client 40.69.66.178:3771] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aWgueDiQRfcmyoePXPfcdwAAAA0"]
[Thu Jan 15 08:02:01.001846 2026] [:error] [pid 51807:tid 51825] [client 40.69.66.178:15612] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aWguecMrH4_ge4gLwN1AcgAAARA"]
[Thu Jan 15 08:02:01.519923 2026] [:error] [pid 5291:tid 5347] [client 40.69.66.178:5902] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aWgueTp5twZ54fay3Rez7wAAAFQ"]
[Thu Jan 15 08:02:02.037025 2026] [:error] [pid 5291:tid 5335] [client 40.69.66.178:10063] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/family.php"] [unique_id "aWguejp5twZ54fay3Rez8QAAAEg"]
[Thu Jan 15 08:02:02.538602 2026] [:error] [pid 5389:tid 5405] [client 40.69.66.178:3739] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aWguekkzfklDSWCNrVJ3iAAAAM4"]
[Thu Jan 15 08:02:03.041206 2026] [:error] [pid 5292:tid 5375] [client 40.69.66.178:9835] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aWgue2WxK-ai3L9DjxYhqAAAAJQ"]
[Thu Jan 15 08:02:03.558243 2026] [:error] [pid 5389:tid 5400] [client 40.69.66.178:3350] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aWgue0kzfklDSWCNrVJ3jgAAAMk"]
[Thu Jan 15 08:02:04.075620 2026] [:error] [pid 5291:tid 5328] [client 40.69.66.178:13857] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aWgufDp5twZ54fay3Re0GQAAAEE"]
[Thu Jan 15 08:02:04.593316 2026] [:error] [pid 5389:tid 5415] [client 40.69.66.178:7555] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aWgufEkzfklDSWCNrVJ3kwAAANg"]
[Thu Jan 15 08:02:05.113050 2026] [:error] [pid 5290:tid 5301] [client 40.69.66.178:3726] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aWgufTiQRfcmyoePXPfchAAAAAI"]
[Thu Jan 15 08:02:05.632678 2026] [:error] [pid 5290:tid 5303] [client 40.69.66.178:13550] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ma.php"] [unique_id "aWgufTiQRfcmyoePXPfchQAAAAQ"]
[Thu Jan 15 08:02:06.165016 2026] [:error] [pid 5290:tid 5300] [client 40.69.66.178:13530] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aWgufjiQRfcmyoePXPfcigAAAAE"]
[Thu Jan 15 08:02:06.671809 2026] [:error] [pid 5292:tid 5373] [client 40.69.66.178:1463] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aWgufmWxK-ai3L9DjxYhqwAAAJI"]
[Thu Jan 15 08:02:07.177740 2026] [:error] [pid 51807:tid 51832] [client 40.69.66.178:7564] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aWguf8MrH4_ge4gLwN1AgwAAARc"]
[Thu Jan 15 08:02:07.704298 2026] [:error] [pid 51807:tid 51829] [client 40.69.66.178:12210] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanz.php"] [unique_id "aWguf8MrH4_ge4gLwN1AhQAAARQ"]
[Thu Jan 15 08:02:08.270728 2026] [:error] [pid 5290:tid 5318] [client 40.69.66.178:13186] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWgugDiQRfcmyoePXPfckgAAABM"]
[Thu Jan 15 08:02:08.797427 2026] [:error] [pid 5291:tid 5343] [client 40.69.66.178:13242] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWgugDp5twZ54fay3Re0IwAAAFA"]
[Thu Jan 15 08:02:09.298450 2026] [:error] [pid 5389:tid 5412] [client 40.69.66.178:7271] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWgugUkzfklDSWCNrVJ3ngAAANU"]
[Thu Jan 15 08:02:09.800039 2026] [:error] [pid 5389:tid 5401] [client 40.69.66.178:16128] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tons.php"] [unique_id "aWgugUkzfklDSWCNrVJ3oQAAAMo"]
[Thu Jan 15 08:02:10.306509 2026] [:error] [pid 5389:tid 5398] [client 40.69.66.178:16160] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpup.php"] [unique_id "aWgugkkzfklDSWCNrVJ3pQAAAMc"]
[Thu Jan 15 12:48:37.905932 2026] [:error] [pid 51857:tid 51868] [client 49.51.233.46:54134] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWhxpXDlXoqhkNNyf_zrXwAAAUk"]
[Thu Jan 15 12:56:29.299932 2026] [:error] [pid 51807:tid 51833] [client 43.166.142.76:44470] [client 43.166.142.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWhzfcMrH4_ge4gLwN2UwAAAARg"]
[Thu Jan 15 13:29:11.696121 2026] [:error] [pid 51857:tid 51868] [client 101.91.148.219:38341] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWh7J3DlXoqhkNNyf_wDGAAAAUk"]
[Thu Jan 15 19:14:17.726779 2026] [:error] [pid 51857:tid 51862] [client 49.207.250.135:36507] [client 49.207.250.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.250.135, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWjMCXDlXoqhkNNyf_yP3AAAAUM"]
[Thu Jan 15 19:14:17.731399 2026] [:error] [pid 51857:tid 51862] [client 49.207.250.135:36507] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 15 19:20:32.793030 2026] [:error] [pid 5290:tid 5303] [client 223.181.109.60:25869] [client 223.181.109.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.109.60, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWjNgDiQRfcmyoePXPeytAAAAAQ"]
[Thu Jan 15 19:20:32.797238 2026] [:error] [pid 5290:tid 5303] [client 223.181.109.60:25869] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 15 22:33:47.295762 2026] [:error] [pid 5290:tid 5314] [client 35.192.78.89:51362] [client 35.192.78.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aWj6yziQRfcmyoePXPfadgAAAA8"]
[Fri Jan 16 03:10:02.553372 2026] [:error] [pid 5389:tid 5407] [client 170.106.35.153:60798] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWk7ikkzfklDSWCNrVLikwAAANA"]
[Fri Jan 16 08:28:06.244270 2026] [:error] [pid 21390:tid 21411] [client 192.144.148.122:49464] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWmGFi36FXzBBxHIrPbXjgAAAVM"]
[Fri Jan 16 11:57:16.625777 2026] [:error] [pid 9260:tid 9267] [client 49.51.33.159:34802] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWm3HF3AAooR8oZsCwljpwAAAAU"]
[Fri Jan 16 17:01:27.430764 2026] [:error] [pid 30925:tid 30945] [client 84.247.169.220:54561] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWn-Z7Pyx6TwF5dNaFqiIgAAAZI"]
[Fri Jan 16 17:01:28.712100 2026] [:error] [pid 30925:tid 30929] [client 84.247.169.220:54714] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-aLPyx6TwF5dNaFqiJAAAAYI"]
[Fri Jan 16 17:01:30.115070 2026] [:error] [pid 54008:tid 54017] [client 84.247.169.220:54838] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-aseowS6CyLOmCzOi_QAAAIc"]
[Fri Jan 16 17:01:31.524399 2026] [:error] [pid 30865:tid 30891] [client 84.247.169.220:55008] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-axCR_HCYGnC3FS-zIQAAAVc"]
[Fri Jan 16 17:01:32.801159 2026] [:error] [pid 30865:tid 30868] [client 84.247.169.220:55178] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-bBCR_HCYGnC3FS-zIwAAAUA"]
[Fri Jan 16 19:25:07.941564 2026] [:error] [pid 30866:tid 30898] [client 43.135.145.73:50364] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWogEyfb83E1Tbd0nr-WLAAAAAM"]
[Fri Jan 16 19:36:16.549761 2026] [:error] [pid 30925:tid 30951] [client 170.106.107.87:60706] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWoisLPyx6TwF5dNaFrRTAAAAZg"]
[Fri Jan 16 21:12:33.213109 2026] [:error] [pid 54008:tid 54034] [client 110.166.71.39:37636] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWo5QceowS6CyLOmCzMAJQAAAJg"]
[Fri Jan 16 21:57:29.548385 2026] [:error] [pid 30866:tid 30915] [client 34.31.242.2:47936] [client 34.31.242.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aWpDySfb83E1Tbd0nr_CTwAAABQ"]
[Fri Jan 16 22:31:11.607746 2026] [:error] [pid 54008:tid 54017] [client 45.250.246.145:53023] [client 45.250.246.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.250.246.145, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWpLr8eowS6CyLOmCzMYIwAAAIc"]
[Fri Jan 16 22:31:11.612253 2026] [:error] [pid 54008:tid 54017] [client 45.250.246.145:53023] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 17 12:24:10.550795 2026] [:error] [pid 31223:tid 31249] [client 178.16.53.34:51562] [client 178.16.53.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.16.53.34, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aWsO6kMnpeq0T1sEOlKVsQAAABA"], referer: https://www.reddit.com/
[Sat Jan 17 12:24:10.554678 2026] [:error] [pid 31223:tid 31249] [client 178.16.53.34:51562] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.reddit.com/
[Sat Jan 17 12:24:11.246686 2026] [:error] [pid 31698:tid 31708] [client 178.16.53.34:55207] [client 178.16.53.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.16.53.34, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aWsO67jKZJSxKAfZqrJtEgAAAQY"], referer: https://www.google.jp/search?q=wordpress
[Sat Jan 17 12:24:11.250433 2026] [:error] [pid 31698:tid 31708] [client 178.16.53.34:55207] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.jp/search?q=wordpress
[Sat Jan 17 16:53:02.200061 2026] [:error] [pid 31225:tid 31292] [client 101.42.46.71:46196] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWtN7unu2L2yWFDbzyW7kgAAAIQ"]
[Sat Jan 17 16:56:18.277614 2026] [:error] [pid 31698:tid 31723] [client 49.51.36.179:51114] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWtOsrjKZJSxKAfZqrKsugAAARU"]
[Sat Jan 17 23:23:48.488596 2026] [:error] [pid 31698:tid 31719] [client 36.41.75.167:56215] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWuphLjKZJSxKAfZqrL1zQAAARE"]
[Sun Jan 18 00:15:18.044775 2026] [:error] [pid 31698:tid 31725] [client 43.157.52.37:48820] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWu1lrjKZJSxKAfZqrL7gQAAARc"]
[Sun Jan 18 03:29:10.099085 2026] [:error] [pid 31224:tid 31280] [client 177.102.205.232:59899] [client 177.102.205.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.102.205.232, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aWvjBjgpVpEMk8-OQkiTYQAAAFM"]
[Sun Jan 18 03:29:10.104066 2026] [:error] [pid 31224:tid 31280] [client 177.102.205.232:59899] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Jan 18 08:17:41.048814 2026] [:error] [pid 12925:tid 13002] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sun Jan 18 08:17:41.299723 2026] [:error] [pid 12925:tid 12988] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sun Jan 18 08:17:41.564035 2026] [:error] [pid 12925:tid 13010] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/abt.php
[Sun Jan 18 08:17:41.816364 2026] [:error] [pid 12925:tid 13006] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Jan 18 08:17:42.068885 2026] [:error] [pid 12925:tid 13003] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Sun Jan 18 08:17:42.322123 2026] [:error] [pid 12925:tid 12998] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php
[Sun Jan 18 08:17:42.578135 2026] [:error] [pid 12925:tid 12990] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sun Jan 18 08:17:42.835080 2026] [:error] [pid 12925:tid 13008] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/t1.php
[Sun Jan 18 08:17:43.088156 2026] [:error] [pid 12925:tid 12995] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Sun Jan 18 08:17:43.339597 2026] [:error] [pid 12925:tid 13007] [client 52.169.119.118:17350] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Jan 18 08:17:43.589179 2026] [:error] [pid 12925:tid 12996] [client 52.169.119.118:17350] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aWwmp_sBL-4pnmSbzihqsgAAAIg"]
[Sun Jan 18 08:17:44.088709 2026] [:error] [pid 12924:tid 12964] [client 52.169.119.118:10905] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aWwmqCuv3PUo9LR6V6ZLCwAAAEQ"]
[Sun Jan 18 08:17:44.607823 2026] [:error] [pid 12925:tid 13001] [client 52.169.119.118:11053] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aWwmqPsBL-4pnmSbzihqtAAAAI0"]
[Sun Jan 18 08:17:45.105942 2026] [:error] [pid 12923:tid 12940] [client 52.169.119.118:1112] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aWwmqesWURrrC-4Rx5KykAAAAAg"]
[Sun Jan 18 08:17:45.605989 2026] [:error] [pid 12925:tid 13005] [client 52.169.119.118:10971] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aWwmqfsBL-4pnmSbzihqtgAAAJE"]
[Sun Jan 18 08:17:46.133029 2026] [:error] [pid 12924:tid 12980] [client 52.169.119.118:6771] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aWwmqiuv3PUo9LR6V6ZLDgAAAFQ"]
[Sun Jan 18 08:17:46.663507 2026] [:error] [pid 12924:tid 12982] [client 52.169.119.118:13414] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aWwmqiuv3PUo9LR6V6ZLEAAAAFY"]
[Sun Jan 18 08:17:47.161540 2026] [:error] [pid 13034:tid 13059] [client 52.169.119.118:11002] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aWwmq8RGpUu1E8cmbmhSrwAAANU"]
[Sun Jan 18 08:17:47.674626 2026] [:error] [pid 12924:tid 12974] [client 52.169.119.118:7673] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aWwmqyuv3PUo9LR6V6ZLEQAAAE4"]
[Sun Jan 18 08:17:48.269691 2026] [:error] [pid 13034:tid 13045] [client 52.169.119.118:14278] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfile.php"] [unique_id "aWwmrMRGpUu1E8cmbmhSsQAAAMc"]
[Sun Jan 18 08:17:48.854520 2026] [:error] [pid 13034:tid 13058] [client 52.169.119.118:1097] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfile.php"] [unique_id "aWwmrMRGpUu1E8cmbmhSsgAAANQ"]
[Sun Jan 18 08:17:49.367065 2026] [:error] [pid 12925:tid 12992] [client 52.169.119.118:6732] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aWwmrfsBL-4pnmSbzihqvAAAAIQ"]
[Sun Jan 18 08:17:49.865868 2026] [:error] [pid 13034:tid 13050] [client 52.169.119.118:7872] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aWwmrcRGpUu1E8cmbmhStAAAAMw"]
[Sun Jan 18 08:17:50.367242 2026] [:error] [pid 12925:tid 12998] [client 52.169.119.118:7662] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aWwmrvsBL-4pnmSbzihqvgAAAIo"]
[Sun Jan 18 08:17:50.868257 2026] [:error] [pid 13034:tid 13053] [client 52.169.119.118:11519] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aWwmrsRGpUu1E8cmbmhStQAAAM8"]
[Sun Jan 18 08:17:51.369539 2026] [:error] [pid 12925:tid 13008] [client 52.169.119.118:14834] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aWwmr_sBL-4pnmSbzihqvwAAAJQ"]
[Sun Jan 18 08:17:51.887445 2026] [:error] [pid 13034:tid 13041] [client 52.169.119.118:14275] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aWwmr8RGpUu1E8cmbmhSuQAAAMM"]
[Sun Jan 18 08:17:52.388665 2026] [:error] [pid 12925:tid 13012] [client 52.169.119.118:10910] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aWwmsPsBL-4pnmSbzihqwwAAAJg"]
[Sun Jan 18 08:17:52.923505 2026] [:error] [pid 13034:tid 13052] [client 52.169.119.118:17353] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless14.php"] [unique_id "aWwmsMRGpUu1E8cmbmhSvAAAAM4"]
[Sun Jan 18 08:17:53.598883 2026] [:error] [pid 12923:tid 12942] [client 52.169.119.118:11957] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWwmsesWURrrC-4Rx5KymAAAAAo"]
[Sun Jan 18 08:17:54.139022 2026] [:error] [pid 13034:tid 13059] [client 52.169.119.118:17369] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWwmssRGpUu1E8cmbmhSvgAAANU"]
[Sun Jan 18 08:17:54.752499 2026] [:error] [pid 12924:tid 12970] [client 52.169.119.118:1203] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWwmsiuv3PUo9LR6V6ZLGAAAAEo"]
[Sun Jan 18 08:17:55.262146 2026] [:error] [pid 13034:tid 13050] [client 52.169.119.118:10909] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws35.php"] [unique_id "aWwms8RGpUu1E8cmbmhSwwAAAMw"]
[Sun Jan 18 08:17:55.763888 2026] [:error] [pid 12923:tid 12936] [client 52.169.119.118:3561] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWwms-sWURrrC-4Rx5KynAAAAAQ"]
[Sun Jan 18 08:17:56.271019 2026] [:error] [pid 12924:tid 12980] [client 52.169.119.118:4088] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWwmtCuv3PUo9LR6V6ZLGQAAAFQ"]
[Sun Jan 18 08:17:56.779952 2026] [:error] [pid 12924:tid 12982] [client 52.169.119.118:10145] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWwmtCuv3PUo9LR6V6ZLGgAAAFY"]
[Sun Jan 18 08:17:57.283179 2026] [:error] [pid 12924:tid 12974] [client 52.169.119.118:2498] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/87.php"] [unique_id "aWwmtSuv3PUo9LR6V6ZLHwAAAE4"]
[Sun Jan 18 08:17:57.782939 2026] [:error] [pid 13034:tid 13042] [client 52.169.119.118:8200] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aWwmtcRGpUu1E8cmbmhSxgAAAMQ"]
[Sun Jan 18 08:17:58.331797 2026] [:error] [pid 12923:tid 12940] [client 52.169.119.118:11925] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aWwmtusWURrrC-4Rx5KyoAAAAAg"]
[Sun Jan 18 08:17:58.834113 2026] [:error] [pid 12925:tid 13005] [client 52.169.119.118:3402] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aWwmtvsBL-4pnmSbzihqyAAAAJE"]
[Sun Jan 18 08:17:59.335643 2026] [:error] [pid 12924:tid 12970] [client 52.169.119.118:17390] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aWwmtyuv3PUo9LR6V6ZLIwAAAEo"]
[Sun Jan 18 08:17:59.840176 2026] [:error] [pid 12924:tid 12973] [client 52.169.119.118:4095] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWwmtyuv3PUo9LR6V6ZLJAAAAE0"]
[Sun Jan 18 08:18:00.339385 2026] [:error] [pid 12925:tid 12988] [client 52.169.119.118:3533] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWwmuPsBL-4pnmSbzihqywAAAIA"]
[Sun Jan 18 08:18:00.852860 2026] [:error] [pid 13034:tid 13056] [client 52.169.119.118:14297] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWwmuMRGpUu1E8cmbmhSywAAANI"]
[Sun Jan 18 08:18:01.351038 2026] [:error] [pid 12925:tid 13000] [client 52.169.119.118:6782] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aWwmufsBL-4pnmSbzihqzgAAAIw"]
[Sun Jan 18 08:18:01.849858 2026] [:error] [pid 13034:tid 13052] [client 52.169.119.118:11911] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acwfihfh.php"] [unique_id "aWwmucRGpUu1E8cmbmhSzAAAAM4"]
[Sun Jan 18 08:18:02.356678 2026] [:error] [pid 13034:tid 13060] [client 52.169.119.118:13421] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acwfihfh.php"] [unique_id "aWwmusRGpUu1E8cmbmhSzQAAANY"]
[Sun Jan 18 08:18:02.861170 2026] [:error] [pid 13034:tid 13036] [client 52.169.119.118:4044] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acwfihfh.php"] [unique_id "aWwmusRGpUu1E8cmbmhSzwAAAMA"]
[Sun Jan 18 08:18:03.359876 2026] [:error] [pid 12924:tid 12982] [client 52.169.119.118:11301] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acwfihfh.php"] [unique_id "aWwmuyuv3PUo9LR6V6ZLJwAAAFY"]
[Sun Jan 18 08:18:03.860518 2026] [:error] [pid 12923:tid 12932] [client 52.169.119.118:2556] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWwmu-sWURrrC-4Rx5KypAAAAAA"]
[Sun Jan 18 08:18:04.369355 2026] [:error] [pid 13034:tid 13058] [client 52.169.119.118:10969] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWwmvMRGpUu1E8cmbmhS0AAAANQ"]
[Sun Jan 18 08:18:04.870965 2026] [:error] [pid 13034:tid 13047] [client 52.169.119.118:11495] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWwmvMRGpUu1E8cmbmhS0QAAAMk"]
[Sun Jan 18 08:18:05.375656 2026] [:error] [pid 12923:tid 12946] [client 52.169.119.118:14817] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f8.php"] [unique_id "aWwmvesWURrrC-4Rx5KypwAAAA4"]
[Sun Jan 18 08:18:05.917160 2026] [:error] [pid 12925:tid 12996] [client 52.169.119.118:4084] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bras.php"] [unique_id "aWwmvfsBL-4pnmSbzihq0QAAAIg"]
[Sun Jan 18 08:18:06.540299 2026] [:error] [pid 12924:tid 12961] [client 52.169.119.118:11303] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWwmviuv3PUo9LR6V6ZLLQAAAEE"]
[Sun Jan 18 08:18:07.040837 2026] [:error] [pid 13034:tid 13050] [client 52.169.119.118:13408] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWwmv8RGpUu1E8cmbmhS1AAAAMw"]
[Sun Jan 18 08:18:07.539700 2026] [:error] [pid 12924:tid 12963] [client 52.169.119.118:10894] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWwmvyuv3PUo9LR6V6ZLLwAAAEM"]
[Sun Jan 18 08:18:08.046917 2026] [:error] [pid 12925:tid 12997] [client 52.169.119.118:4966] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an8.php"] [unique_id "aWwmwPsBL-4pnmSbzihq0gAAAIk"]
[Sun Jan 18 08:18:08.645650 2026] [:error] [pid 12924:tid 12976] [client 52.169.119.118:10529] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aWwmwCuv3PUo9LR6V6ZLMgAAAFA"]
[Sun Jan 18 08:18:09.143999 2026] [:error] [pid 13034:tid 13048] [client 52.169.119.118:4071] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aWwmwcRGpUu1E8cmbmhS1gAAAMo"]
[Sun Jan 18 08:18:09.671195 2026] [:error] [pid 13034:tid 13062] [client 52.169.119.118:14308] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aWwmwcRGpUu1E8cmbmhS2AAAANg"]
[Sun Jan 18 08:18:10.178091 2026] [:error] [pid 12924:tid 12965] [client 52.169.119.118:8223] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/esp.php"] [unique_id "aWwmwiuv3PUo9LR6V6ZLNAAAAEU"]
[Sun Jan 18 08:18:10.690385 2026] [:error] [pid 13034:tid 13052] [client 52.169.119.118:17404] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aWwmwsRGpUu1E8cmbmhS3AAAAM4"]
[Sun Jan 18 08:18:11.189379 2026] [:error] [pid 12923:tid 12936] [client 52.169.119.118:10559] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aWwmw-sWURrrC-4Rx5KyqAAAAAQ"]
[Sun Jan 18 08:18:11.721734 2026] [:error] [pid 13034:tid 13057] [client 52.169.119.118:5561] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aWwmw8RGpUu1E8cmbmhS3QAAANM"]
[Sun Jan 18 08:18:12.244011 2026] [:error] [pid 12924:tid 12981] [client 52.169.119.118:4083] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/21x.php"] [unique_id "aWwmxCuv3PUo9LR6V6ZLOAAAAFU"]
[Sun Jan 18 08:18:12.778880 2026] [:error] [pid 12924:tid 12982] [client 52.169.119.118:7883] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/out.php"] [unique_id "aWwmxCuv3PUo9LR6V6ZLOgAAAFY"]
[Sun Jan 18 08:18:13.287874 2026] [:error] [pid 12924:tid 12974] [client 52.169.119.118:6715] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/out.php"] [unique_id "aWwmxSuv3PUo9LR6V6ZLPAAAAE4"]
[Sun Jan 18 08:18:13.952083 2026] [:error] [pid 12924:tid 12969] [client 52.169.119.118:4058] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/out.php"] [unique_id "aWwmxSuv3PUo9LR6V6ZLPgAAAEk"]
[Sun Jan 18 08:18:14.467094 2026] [:error] [pid 13034:tid 13043] [client 52.169.119.118:2520] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/out.php"] [unique_id "aWwmxsRGpUu1E8cmbmhS4AAAAMU"]
[Sun Jan 18 08:18:15.170587 2026] [:error] [pid 12924:tid 12983] [client 52.169.119.118:7877] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s1.php"] [unique_id "aWwmxyuv3PUo9LR6V6ZLQQAAAFc"]
[Sun Jan 18 08:18:15.910463 2026] [:error] [pid 12924:tid 12984] [client 52.169.119.118:6935] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aWwmxyuv3PUo9LR6V6ZLQgAAAFg"]
[Sun Jan 18 08:18:16.410749 2026] [:error] [pid 12925:tid 12992] [client 52.169.119.118:10570] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aWwmyPsBL-4pnmSbzihq2AAAAIQ"]
[Sun Jan 18 08:18:16.911728 2026] [:error] [pid 12923:tid 12940] [client 52.169.119.118:6950] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aWwmyOsWURrrC-4Rx5KyrAAAAAg"]
[Sun Jan 18 08:18:17.439585 2026] [:error] [pid 13034:tid 13046] [client 52.169.119.118:16191] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xeeex.php"] [unique_id "aWwmycRGpUu1E8cmbmhS5QAAAMg"]
[Sun Jan 18 08:18:18.083836 2026] [:error] [pid 12923:tid 12950] [client 52.169.119.118:11477] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aWwmyusWURrrC-4Rx5KyrwAAABI"]
[Sun Jan 18 08:18:18.661795 2026] [:error] [pid 13034:tid 13060] [client 52.169.119.118:3440] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aWwmysRGpUu1E8cmbmhS5wAAANY"]
[Sun Jan 18 08:18:19.366831 2026] [:error] [pid 13034:tid 13036] [client 52.169.119.118:6950] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d996699999.php"] [unique_id "aWwmy8RGpUu1E8cmbmhS6QAAAMA"]
[Sun Jan 18 08:18:19.907368 2026] [:error] [pid 12923:tid 12951] [client 52.169.119.118:4037] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d996699999.php"] [unique_id "aWwmy-sWURrrC-4Rx5KysQAAABM"]
[Sun Jan 18 08:18:20.596631 2026] [:error] [pid 12925:tid 13012] [client 52.169.119.118:14286] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1yade.php"] [unique_id "aWwmzPsBL-4pnmSbzihq3AAAAJg"]
[Sun Jan 18 11:02:16.635853 2026] [:error] [pid 12925:tid 13002] [client 43.155.129.131:40474] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWxNOPsBL-4pnmSbziinHAAAAI4"]
[Sun Jan 18 19:09:59.673677 2026] [:error] [pid 13034:tid 13045] [client 170.106.35.137:45886] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aWy_h8RGpUu1E8cmbmiOVQAAAMc"]
[Sun Jan 18 19:18:08.201004 2026] [:error] [pid 13034:tid 13059] [client 43.130.31.17:53194] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aWzBcMRGpUu1E8cmbmiQ2wAAANU"]
[Mon Jan 19 02:15:42.738403 2026] [:error] [pid 33494:tid 33500] [client 43.131.39.179:40240] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aW0jTrxmLR_50TtKxDJbuQAAAQI"]
[Mon Jan 19 02:30:43.532030 2026] [:error] [pid 25717:tid 25766] [client 170.106.37.134:47978] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aW0m0yxj7QZ8bca7eMNo7AAAAEE"]
[Mon Jan 19 09:58:09.674211 2026] [:error] [pid 1540:tid 1563] [client 173.214.167.46:65008] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aW2PscXMVWEs9OcVpliMqAAAABI"]
[Mon Jan 19 12:49:09.392481 2026] [:error] [pid 45562:tid 45600] [client 103.77.106.118:49469] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aW23xToUil_kwpvtDW5b9wAAAEY"]
[Mon Jan 19 12:49:09.894226 2026] [:error] [pid 45563:tid 45626] [client 103.77.106.118:52905] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aW23xZI4--OKA-PqumwORQAAAIU"]
[Mon Jan 19 13:56:43.817892 2026] [:error] [pid 45561:tid 45566] [client 157.119.200.51:49637] [client 157.119.200.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.200.51, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aW3Hm64ONSZn4nkTayL5MgAAAAA"]
[Mon Jan 19 13:56:43.823612 2026] [:error] [pid 45561:tid 45566] [client 157.119.200.51:49637] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 19 17:18:13.368285 2026] [:error] [pid 45562:tid 45610] [client 216.118.251.70:52249] [client 216.118.251.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apps/admin/view/default/images/logo.png"] [unique_id "aW321ToUil_kwpvtDW6t-gAAAFA"]
[Mon Jan 19 17:18:15.045290 2026] [:error] [pid 47089:tid 47102] [client 112.121.183.178:51026] [client 112.121.183.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/Public/ckeditor/styles.js"] [unique_id "aW321xlIzijVNfdIsZ7DygAAAQs"]
[Mon Jan 19 17:27:18.802312 2026] [:error] [pid 47089:tid 47104] [client 112.121.183.178:53117] [client 112.121.183.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/Public/ckeditor/styles.js"] [unique_id "aW349hlIzijVNfdIsZ7HiQAAAQ0"]
[Mon Jan 19 17:28:39.746654 2026] [:error] [pid 45563:tid 45622] [client 216.118.251.70:63157] [client 216.118.251.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apps/admin/view/default/images/logo.png"] [unique_id "aW35R5I4--OKA-PqumxsqQAAAIE"]
[Mon Jan 19 17:57:32.743941 2026] [:error] [pid 36216:tid 36238] [client 103.163.208.106:64412] [client 103.163.208.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/login.php"] [unique_id "aW4ADMIpfKKs9fzB-yBYYQAAAVQ"]
[Mon Jan 19 18:20:25.076894 2026] [:error] [pid 45657:tid 45672] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/ver.php
[Mon Jan 19 18:20:25.286015 2026] [:error] [pid 45657:tid 45682] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Mon Jan 19 18:20:25.529529 2026] [:error] [pid 45657:tid 45679] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/pro.php
[Mon Jan 19 18:20:25.735304 2026] [:error] [pid 45657:tid 45678] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Jan 19 18:20:25.931091 2026] [:error] [pid 45657:tid 45683] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Mon Jan 19 18:20:26.125706 2026] [:error] [pid 45657:tid 45671] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/data.php
[Mon Jan 19 18:20:26.320360 2026] [:error] [pid 45657:tid 45662] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Jan 19 18:20:26.635308 2026] [:error] [pid 45657:tid 45675] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Mon Jan 19 18:20:26.869523 2026] [:error] [pid 45657:tid 45681] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Jan 19 18:20:27.063655 2026] [:error] [pid 45657:tid 45667] [client 68.155.153.238:24084] File does not exist: /usr/local/apache/htdocs/suspended-page/image.php
[Mon Jan 19 18:20:27.255788 2026] [:error] [pid 45657:tid 45669] [client 68.155.153.238:24084] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aW4Faw4XFYp2OcwCx-BqHwAAAMo"]
[Mon Jan 19 18:20:35.797702 2026] [:error] [pid 45563:tid 45628] [client 68.155.153.238:24128] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aW4Fc5I4--OKA-PqumyA9AAAAIc"]
[Mon Jan 19 18:20:37.953769 2026] [:error] [pid 47089:tid 47108] [client 68.155.153.238:24182] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aW4FdRlIzijVNfdIsZ7Y_QAAARE"]
[Mon Jan 19 18:20:41.924607 2026] [:error] [pid 36216:tid 36223] [client 68.155.153.238:24187] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aW4FecIpfKKs9fzB-yBmEwAAAUU"]
[Mon Jan 19 18:20:47.262232 2026] [:error] [pid 36216:tid 36229] [client 68.155.153.238:24077] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aW4Ff8IpfKKs9fzB-yBmHwAAAUs"]
[Mon Jan 19 18:20:56.479946 2026] [:error] [pid 45563:tid 45629] [client 68.155.153.238:24166] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/check.php"] [unique_id "aW4FiJI4--OKA-PqumyBRgAAAIg"]
[Mon Jan 19 18:21:03.584286 2026] [:error] [pid 45562:tid 45605] [client 68.155.153.238:24079] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-header-json.php"] [unique_id "aW4FjzoUil_kwpvtDW6_GgAAAEs"]
[Mon Jan 19 18:21:06.416370 2026] [:error] [pid 45563:tid 45627] [client 68.155.153.238:24070] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-header-json.php"] [unique_id "aW4FkpI4--OKA-PqumyBWAAAAIY"]
[Mon Jan 19 18:21:13.142482 2026] [:error] [pid 45561:tid 45575] [client 68.155.153.238:24086] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-header-json.php"] [unique_id "aW4Fma4ONSZn4nkTayJHgwAAAAk"]
[Mon Jan 19 18:21:15.429810 2026] [:error] [pid 36216:tid 36229] [client 68.155.153.238:24179] [client 68.155.153.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aW4Fm8IpfKKs9fzB-yBmYAAAAUs"]
[Mon Jan 19 18:21:17.417494 2026] [:error] [pid 45562:tid 45611] [client 68.155.153.238:24136] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aW4FnToUil_kwpvtDW6_KQAAAFE"]
[Mon Jan 19 18:21:21.590674 2026] [:error] [pid 45561:tid 45574] [client 68.155.153.238:24148] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aW4Foa4ONSZn4nkTayJHjwAAAAg"]
[Mon Jan 19 18:21:24.452046 2026] [:error] [pid 45561:tid 45581] [client 68.155.153.238:24072] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aW4FpK4ONSZn4nkTayJHkwAAAA8"]
[Mon Jan 19 18:21:27.991230 2026] [:error] [pid 45562:tid 45601] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Mon Jan 19 18:21:28.200847 2026] [:error] [pid 45562:tid 45600] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Mon Jan 19 18:21:28.397921 2026] [:error] [pid 45562:tid 45606] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Mon Jan 19 18:21:28.595126 2026] [:error] [pid 45562:tid 45613] [client 68.155.153.238:24121] [client 68.155.153.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.155.153.238, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aW4FqDoUil_kwpvtDW6_OQAAAFM"]
[Mon Jan 19 18:21:28.598621 2026] [:error] [pid 45562:tid 45613] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 19 18:21:28.801637 2026] [:error] [pid 45562:tid 45617] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/file56.php
[Mon Jan 19 18:21:29.007078 2026] [:error] [pid 45562:tid 45598] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Mon Jan 19 18:21:29.506992 2026] [:error] [pid 45562:tid 45604] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Mon Jan 19 18:21:29.699790 2026] [:error] [pid 45562:tid 45616] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Jan 19 18:21:29.893672 2026] [:error] [pid 45562:tid 45611] [client 68.155.153.238:24121] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Jan 19 18:22:06.586751 2026] [:error] [pid 47089:tid 47115] [client 103.70.76.30:52109] [client 103.70.76.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yseoa/login.php"] [unique_id "aW4FzhlIzijVNfdIsZ7ZfAAAARg"]
[Mon Jan 19 23:49:42.666307 2026] [:error] [pid 36216:tid 36225] [client 43.173.1.69:48064] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aW5SlsIpfKKs9fzB-yDYIwAAAUc"]
[Mon Jan 19 23:57:44.871209 2026] [:error] [pid 45562:tid 45615] [client 43.157.180.116:53746] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aW5UeDoUil_kwpvtDW4EygAAAFU"]
[Tue Jan 20 03:09:12.932417 2026] [:error] [pid 45561:tid 45582] [client 64.23.155.245:53561] [client 64.23.155.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.23.155.245, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aW6BWK4ONSZn4nkTayLPlAAAABA"]
[Tue Jan 20 03:09:12.935990 2026] [:error] [pid 45561:tid 45582] [client 64.23.155.245:53561] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 20 03:09:15.470720 2026] [:error] [pid 45561:tid 45576] [client 64.23.155.245:53561] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aW6BW64ONSZn4nkTayLPqAAAAAo"]
[Tue Jan 20 03:09:15.796228 2026] [:error] [pid 45657:tid 45683] [client 64.23.155.245:60399] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aW6BWw4XFYp2OcwCx-DZkQAAANg"]
[Tue Jan 20 03:09:16.126373 2026] [:error] [pid 45657:tid 45661] [client 64.23.155.245:58587] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aW6BXA4XFYp2OcwCx-DZkwAAAMI"]
[Tue Jan 20 03:09:16.495957 2026] [:error] [pid 36216:tid 36242] [client 64.23.155.245:58809] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aW6BXMIpfKKs9fzB-yAIEgAAAVg"]
[Tue Jan 20 03:09:16.822825 2026] [:error] [pid 45561:tid 45579] [client 64.23.155.245:57996] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aW6BXK4ONSZn4nkTayLPqwAAAA0"]
[Tue Jan 20 03:09:17.160621 2026] [:error] [pid 45561:tid 45566] [client 64.23.155.245:54079] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aW6BXa4ONSZn4nkTayLPrAAAAAA"]
[Tue Jan 20 03:09:17.492981 2026] [:error] [pid 45563:tid 45630] [client 64.23.155.245:51377] [client 64.23.155.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aW6BXZI4--OKA-PqumwHNQAAAIk"]
[Tue Jan 20 07:03:13.201479 2026] [:error] [pid 35048:tid 35055] [client 43.153.79.218:49266] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aW64MULtSXQ_M3-vlIbi3AAAAQQ"]
[Tue Jan 20 08:15:46.577637 2026] [autoindex:error] [pid 48976:tid 48984] [client 4.189.152.8:20653] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 08:15:46.714144 2026] [:error] [pid 48976:tid 49000] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Jan 20 08:15:46.833008 2026] [:error] [pid 48976:tid 48993] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Jan 20 08:15:46.959648 2026] [:error] [pid 48976:tid 48981] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Jan 20 08:15:47.092814 2026] [:error] [pid 48976:tid 48997] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Jan 20 08:15:47.438788 2026] [:error] [pid 48976:tid 48986] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php
[Tue Jan 20 08:15:47.565273 2026] [:error] [pid 48976:tid 48980] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Tue Jan 20 08:15:47.693511 2026] [:error] [pid 48976:tid 48991] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Jan 20 08:15:47.810802 2026] [:error] [pid 48976:tid 48996] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Jan 20 08:15:47.932901 2026] [:error] [pid 48976:tid 48998] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/deepseek_d.php
[Tue Jan 20 08:15:49.373361 2026] [:error] [pid 48976:tid 48983] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/pu9.php
[Tue Jan 20 08:15:49.500284 2026] [:error] [pid 48976:tid 48990] [client 4.189.152.8:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-bat.php
[Tue Jan 20 08:15:49.623113 2026] [:error] [pid 48976:tid 49001] [client 4.189.152.8:20653] [client 4.189.152.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aW7JNRXWmk4jsnRVwQeU_QAAAVc"]
[Tue Jan 20 08:15:50.137161 2026] [:error] [pid 17622:tid 17690] [client 4.189.152.8:20119] [client 4.189.152.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aW7JNi4cbbp8XKl0AhmFxwAAAIU"]
[Tue Jan 20 08:15:50.609666 2026] [:error] [pid 35048:tid 35065] [client 4.189.152.8:38070] [client 4.189.152.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aW7JNkLtSXQ_M3-vlIb5WAAAAQ4"]
[Tue Jan 20 08:15:51.068451 2026] [:error] [pid 35048:tid 35067] [client 4.189.152.8:2388] [client 4.189.152.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aW7JN0LtSXQ_M3-vlIb5WQAAARA"]
[Tue Jan 20 13:31:43.526396 2026] [:error] [pid 54261:tid 54340] [client 103.77.107.178:63385] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aW8TPwESZyr5alDl9Tu4hwAAAcU"]
[Tue Jan 20 13:31:43.905967 2026] [:error] [pid 63647:tid 63666] [client 103.77.107.178:52239] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aW8TP1UaYw1xHOoaFFLBvAAAAhE"]
[Tue Jan 20 14:01:10.363495 2026] [:error] [pid 54259:tid 54284] [client 43.155.195.141:33114] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aW8aJg2q1USrePnOoFS4DQAAAIc"]
[Tue Jan 20 17:37:56.600444 2026] [:error] [pid 56326:tid 56329] [client 88.170.30.75:56278] [client 88.170.30.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.170.30.75, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aW9M9BA6mi8Uwf45Uy8GQAAAAME"]
[Tue Jan 20 17:37:56.605215 2026] [:error] [pid 56326:tid 56329] [client 88.170.30.75:56278] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 20 20:45:24.033113 2026] [:error] [pid 8416:tid 8434] [client 101.32.15.141:33676] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aW945DN6cbQyA2ecQV3WZwAAAxA"]
[Tue Jan 20 21:28:33.813193 2026] [:error] [pid 54259:tid 54299] [client 122.51.236.174:53490] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aW-DAQ2q1USrePnOoFT2xQAAAJY"]
[Tue Jan 20 23:22:05.207320 2026] [:error] [pid 56326:tid 56351] [client 34.168.233.55:52133] [client 34.168.233.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.233.55, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aW-dnRA6mi8Uwf45Uy9QYwAAANc"]
[Tue Jan 20 23:22:05.211297 2026] [:error] [pid 56326:tid 56351] [client 34.168.233.55:52133] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 20 23:22:07.308515 2026] [:error] [pid 56326:tid 56336] [client 34.168.233.55:52133] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aW-dnxA6mi8Uwf45Uy9QcAAAAMg"]
[Tue Jan 20 23:22:07.683163 2026] [:error] [pid 17295:tid 17321] [client 34.168.233.55:64146] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aW-dn_ZJhGdrcqZICT-iaQAAAZc"]
[Tue Jan 20 23:22:08.039078 2026] [:error] [pid 54259:tid 54294] [client 34.168.233.55:59884] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aW-doA2q1USrePnOoFQNWAAAAJE"]
[Tue Jan 20 23:22:08.400082 2026] [:error] [pid 8455:tid 8462] [client 34.168.233.55:54227] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aW-doIJiHdPVtruynXDQ7AAAA0U"]
[Tue Jan 20 23:22:08.760387 2026] [:error] [pid 54382:tid 54397] [client 34.168.233.55:50288] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aW-doETJlZ9SJ6sBOEvUvwAAAAw"]
[Tue Jan 20 23:22:09.114670 2026] [:error] [pid 17295:tid 17303] [client 34.168.233.55:50116] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aW-dofZJhGdrcqZICT-iawAAAYU"]
[Tue Jan 20 23:22:09.488967 2026] [:error] [pid 63647:tid 63660] [client 34.168.233.55:61166] [client 34.168.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aW-doVUaYw1xHOoaFFIwVwAAAgs"]
[Wed Jan 21 03:42:07.542215 2026] [:error] [pid 55977:tid 56029] [client 101.32.208.70:40618] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aW_aj50AdqGwiWe1FItMzAAAAFU"]
[Wed Jan 21 03:49:50.547732 2026] [:error] [pid 21456:tid 21538] [client 43.133.91.48:48940] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aW_cXgKyVQ9Ob2YxRApp9QAAAJQ"]
[Wed Jan 21 05:17:42.470915 2026] [:error] [pid 21455:tid 21493] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Jan 21 05:17:42.631692 2026] [:error] [pid 21455:tid 21491] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Jan 21 05:17:42.780273 2026] [:error] [pid 21455:tid 21514] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Jan 21 05:17:42.931334 2026] [:error] [pid 21455:tid 21492] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Jan 21 05:17:43.081678 2026] [:error] [pid 21455:tid 21500] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Jan 21 05:17:43.222229 2026] [:error] [pid 21455:tid 21501] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Jan 21 05:17:43.505716 2026] [:error] [pid 21455:tid 21515] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Jan 21 05:17:43.646061 2026] [:error] [pid 21455:tid 21509] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Wed Jan 21 05:17:43.789959 2026] [:error] [pid 21455:tid 21502] [client 4.213.18.145:4032] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Jan 21 05:17:43.927890 2026] [:error] [pid 21455:tid 21505] [client 4.213.18.145:4032] [client 4.213.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aW_w94pOKALCSo1URZFBRwAAAE4"]
[Wed Jan 21 05:17:44.475186 2026] [:error] [pid 59863:tid 59870] [client 4.213.18.145:14466] [client 4.213.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aW_w-LHQ1zVZ4yLuI-zS3wAAAQM"]
[Wed Jan 21 05:17:45.036457 2026] [:error] [pid 21563:tid 21565] [client 4.213.18.145:15877] [client 4.213.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aW_w-RZq__dTorabEoyVRQAAAMA"]
[Wed Jan 21 05:17:45.649703 2026] [:error] [pid 59863:tid 59888] [client 4.213.18.145:4085] [client 4.213.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aW_w-bHQ1zVZ4yLuI-zS4AAAARU"]
[Wed Jan 21 06:06:26.785422 2026] [:error] [pid 21563:tid 21584] [client 103.65.236.149:58309] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aW_8YhZq__dTorabEoyjYgAAANM"]
[Wed Jan 21 06:06:27.321950 2026] [:error] [pid 59863:tid 59883] [client 103.65.236.149:58701] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aW_8Y7HQ1zVZ4yLuI-znvQAAARA"]
[Wed Jan 21 09:02:20.424107 2026] [:error] [pid 21456:tid 21518] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Jan 21 09:02:20.575960 2026] [:error] [pid 21456:tid 21537] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Jan 21 09:02:20.719684 2026] [:error] [pid 21456:tid 21520] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Jan 21 09:02:20.865857 2026] [:error] [pid 21456:tid 21528] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Jan 21 09:02:21.018439 2026] [:error] [pid 21456:tid 21533] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Jan 21 09:02:21.164585 2026] [:error] [pid 21456:tid 21527] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Jan 21 09:02:21.452576 2026] [:error] [pid 21456:tid 21532] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Jan 21 09:02:21.596321 2026] [:error] [pid 21456:tid 21540] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Wed Jan 21 09:02:21.740419 2026] [:error] [pid 21456:tid 21526] [client 20.192.24.172:16587] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Jan 21 09:02:21.881178 2026] [:error] [pid 21456:tid 21524] [client 20.192.24.172:16587] [client 20.192.24.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aXAlnQKyVQ9Ob2YxRAq_TgAAAIY"]
[Wed Jan 21 09:02:22.445240 2026] [:error] [pid 56352:tid 56355] [client 20.192.24.172:49914] [client 20.192.24.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aXAlntWN6wYNPTU3efV_qwAAAUE"]
[Wed Jan 21 09:02:22.995135 2026] [:error] [pid 21563:tid 21573] [client 20.192.24.172:16601] [client 20.192.24.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aXAlnhZq__dTorabEozbQAAAAMg"]
[Wed Jan 21 09:02:23.548455 2026] [:error] [pid 21455:tid 21495] [client 20.192.24.172:50674] [client 20.192.24.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aXAln4pOKALCSo1URZF9-AAAAEQ"]
[Wed Jan 21 11:03:27.355625 2026] [:error] [pid 21455:tid 21514] [client 43.157.95.131:56084] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXBB_4pOKALCSo1URZGg3AAAAFc"]
[Wed Jan 21 17:51:03.463313 2026] [:error] [pid 21563:tid 21584] [client 34.132.177.249:55388] [client 34.132.177.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.177.249, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXChhxZq__dTorabEoxpuQAAANM"]
[Wed Jan 21 17:51:03.465385 2026] [:error] [pid 21563:tid 21584] [client 34.132.177.249:55388] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 21 17:51:05.812797 2026] [:error] [pid 21563:tid 21569] [client 34.132.177.249:55388] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXChiRZq__dTorabEoxp6AAAAMQ"]
[Wed Jan 21 17:51:06.211447 2026] [:error] [pid 21455:tid 21508] [client 34.132.177.249:63045] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXChiopOKALCSo1URZEHnwAAAFE"]
[Wed Jan 21 17:51:06.699526 2026] [:error] [pid 59863:tid 59875] [client 34.132.177.249:65125] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXChirHQ1zVZ4yLuI-yvBwAAAQg"]
[Wed Jan 21 17:51:07.106323 2026] [:error] [pid 56352:tid 56378] [client 34.132.177.249:61837] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXChi9WN6wYNPTU3efX0eQAAAVg"]
[Wed Jan 21 17:51:07.621179 2026] [:error] [pid 4382:tid 4385] [client 34.132.177.249:51778] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXChi5Hg0falVG3JFbAvngAAAYE"]
[Wed Jan 21 17:51:08.020251 2026] [:error] [pid 59863:tid 59883] [client 34.132.177.249:55441] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXChjLHQ1zVZ4yLuI-yvDAAAARA"]
[Wed Jan 21 17:51:08.489652 2026] [:error] [pid 21563:tid 21578] [client 34.132.177.249:50854] [client 34.132.177.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXChjBZq__dTorabEoxp6wAAAM0"]
[Wed Jan 21 18:00:51.493452 2026] [:error] [pid 4382:tid 4392] [client 43.159.143.139:50292] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXCj05Hg0falVG3JFbAxuAAAAYg"]
[Wed Jan 21 21:06:32.958153 2026] [:error] [pid 56352:tid 56366] [client 103.77.139.164:63644] [client 103.77.139.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.77.139.164, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXDPWNWN6wYNPTU3efUV4QAAAUw"]
[Wed Jan 21 21:06:32.964733 2026] [:error] [pid 56352:tid 56366] [client 103.77.139.164:63644] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 21 21:07:03.858821 2026] [:error] [pid 4382:tid 4384] [client 49.149.90.109:48681] [client 49.149.90.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.90.109, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXDPd5Hg0falVG3JFbBVowAAAYA"]
[Wed Jan 21 21:07:03.863909 2026] [:error] [pid 4382:tid 4384] [client 49.149.90.109:48681] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 22 00:43:48.616954 2026] [:error] [pid 21563:tid 21587] [client 43.164.197.224:36922] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXECRBZq__dTorabEozHjgAAANY"]
[Thu Jan 22 00:52:26.023067 2026] [:error] [pid 21455:tid 21501] [client 43.153.10.13:40806] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXEESopOKALCSo1URZFpsQAAAEo"]
[Thu Jan 22 03:11:23.279561 2026] [:error] [pid 21455:tid 21510] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Jan 22 03:11:24.657899 2026] [:error] [pid 21455:tid 21492] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Thu Jan 22 03:11:24.679416 2026] [:error] [pid 21455:tid 21498] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Thu Jan 22 03:11:24.700345 2026] [:error] [pid 21455:tid 21493] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Thu Jan 22 03:11:24.720312 2026] [:error] [pid 21455:tid 21496] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Jan 22 03:11:24.744924 2026] [:error] [pid 21455:tid 21515] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Jan 22 03:11:24.768115 2026] [:error] [pid 21455:tid 21507] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Jan 22 03:11:24.789357 2026] [:error] [pid 21455:tid 21509] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Thu Jan 22 03:11:24.809411 2026] [:error] [pid 21455:tid 21495] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Jan 22 03:11:24.829877 2026] [:error] [pid 21455:tid 21500] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/fast.php
[Thu Jan 22 03:11:24.849308 2026] [:error] [pid 21455:tid 21503] [client 13.70.106.199:6139] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Jan 22 03:11:24.868723 2026] [:error] [pid 21455:tid 21513] [client 13.70.106.199:6139] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aXEk3IpOKALCSo1URZGEhgAAAFY"]
[Thu Jan 22 03:11:24.940034 2026] [:error] [pid 21563:tid 21586] [client 13.70.106.199:6101] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aXEk3BZq__dTorabEozjkgAAANU"]
[Thu Jan 22 03:11:25.000228 2026] [:error] [pid 56352:tid 56363] [client 13.70.106.199:6081] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aXEk3NWN6wYNPTU3efVcNwAAAUk"]
[Thu Jan 22 03:11:25.069992 2026] [:error] [pid 21455:tid 21499] [client 13.70.106.199:6040] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aXEk3YpOKALCSo1URZGEhwAAAEg"]
[Thu Jan 22 06:12:57.119974 2026] [:error] [pid 52447:tid 52524] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Jan 22 06:12:57.268356 2026] [:error] [pid 52447:tid 52516] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Jan 22 06:12:57.414369 2026] [:error] [pid 52447:tid 52519] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Jan 22 06:12:57.558869 2026] [:error] [pid 52447:tid 52523] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Jan 22 06:12:57.855304 2026] [:error] [pid 52447:tid 52518] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Jan 22 06:12:57.999517 2026] [:error] [pid 52447:tid 52514] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Jan 22 06:12:58.142342 2026] [:error] [pid 52447:tid 52532] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Jan 22 06:12:58.440003 2026] [:error] [pid 52447:tid 52509] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Jan 22 06:12:58.586477 2026] [:error] [pid 52447:tid 52525] [client 20.207.207.58:38016] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Jan 22 06:12:58.727811 2026] [:error] [pid 52447:tid 52511] [client 20.207.207.58:38016] [client 20.207.207.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aXFPanRLA2NsdGqJzotDaQAAAII"]
[Thu Jan 22 06:12:59.277679 2026] [:error] [pid 52445:tid 52471] [client 20.207.207.58:46610] [client 20.207.207.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aXFPa-vMmsFgpSSb5L2SJwAAABE"]
[Thu Jan 22 06:12:59.828884 2026] [:error] [pid 27550:tid 27576] [client 20.207.207.58:46627] [client 20.207.207.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aXFPa-OQDPzfV5R2LYREtAAAARg"]
[Thu Jan 22 06:13:00.381855 2026] [:error] [pid 52445:tid 52464] [client 20.207.207.58:49416] [client 20.207.207.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aXFPbOvMmsFgpSSb5L2SKQAAAAo"]
[Thu Jan 22 08:25:54.863660 2026] [:error] [pid 52447:tid 52509] [client 173.239.218.44:51709] [client 173.239.218.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.218.44, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXFuknRLA2NsdGqJzot8-gAAAIA"]
[Thu Jan 22 08:25:54.866944 2026] [:error] [pid 52447:tid 52509] [client 173.239.218.44:51709] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 22 08:25:55.309051 2026] [:error] [pid 52447:tid 52526] [client 173.239.218.26:42841] [client 173.239.218.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.26, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXFuk3RLA2NsdGqJzot8-wAAAJE"]
[Thu Jan 22 08:25:55.312777 2026] [:error] [pid 52447:tid 52526] [client 173.239.218.26:42841] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Jan 22 08:48:33.781189 2026] [:error] [pid 52445:tid 52470] [client 43.159.141.150:34786] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXFz4evMmsFgpSSb5L2ytgAAABA"]
[Thu Jan 22 10:14:26.765336 2026] [:error] [pid 27550:tid 27563] [client 3.142.184.156:53186] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manage"] [unique_id "aXGIAuOQDPzfV5R2LYSCYgAAAQs"]
[Thu Jan 22 10:14:27.605994 2026] [:error] [pid 52446:tid 52499] [client 3.142.184.156:53202] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manage"] [unique_id "aXGIA7J6clMw4kdrHYGKPQAAAFE"]
[Thu Jan 22 10:14:28.441461 2026] [:error] [pid 52556:tid 52566] [client 3.142.184.156:53218] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/manage"] [unique_id "aXGIBOg4y1NKM4AgfjCmGQAAAMg"]
[Thu Jan 22 10:14:29.276634 2026] [:error] [pid 52447:tid 52526] [client 3.142.184.156:53232] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/management"] [unique_id "aXGIBXRLA2NsdGqJzoumIgAAAJE"]
[Thu Jan 22 10:14:30.109582 2026] [:error] [pid 52446:tid 52501] [client 3.142.184.156:53244] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/management"] [unique_id "aXGIBrJ6clMw4kdrHYGKRgAAAFM"]
[Thu Jan 22 10:14:30.933046 2026] [:error] [pid 52447:tid 52518] [client 3.142.184.156:37218] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/management"] [unique_id "aXGIBnRLA2NsdGqJzoumJQAAAIk"]
[Thu Jan 22 10:14:31.752261 2026] [:error] [pid 52556:tid 52561] [client 3.142.184.156:37222] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/portal"] [unique_id "aXGIB-g4y1NKM4AgfjCmHAAAAMM"]
[Thu Jan 22 10:14:32.586216 2026] [:error] [pid 52445:tid 52476] [client 3.142.184.156:37224] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/portal"] [unique_id "aXGICOvMmsFgpSSb5L3BngAAABY"]
[Thu Jan 22 10:14:33.421715 2026] [:error] [pid 27550:tid 27572] [client 3.142.184.156:37234] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/portal"] [unique_id "aXGICeOQDPzfV5R2LYSCZgAAARQ"]
[Thu Jan 22 10:14:34.254461 2026] [:error] [pid 36083:tid 36087] [client 3.142.184.156:37244] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api"] [unique_id "aXGICpCng2nQoR5iqwr3ZAAAAUE"]
[Thu Jan 22 10:14:35.089379 2026] [:error] [pid 36083:tid 36107] [client 3.142.184.156:37258] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api"] [unique_id "aXGIC5Cng2nQoR5iqwr3ZgAAAVU"]
[Thu Jan 22 10:14:35.912016 2026] [:error] [pid 52445:tid 52473] [client 3.142.184.156:37274] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api"] [unique_id "aXGIC-vMmsFgpSSb5L3BoQAAABM"]
[Thu Jan 22 10:14:36.746345 2026] [:error] [pid 52556:tid 52571] [client 3.142.184.156:37290] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/v1"] [unique_id "aXGIDOg4y1NKM4AgfjCmIAAAAM0"]
[Thu Jan 22 10:14:37.572725 2026] [:error] [pid 52556:tid 52574] [client 3.142.184.156:37306] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/v1"] [unique_id "aXGIDeg4y1NKM4AgfjCmIgAAANA"]
[Thu Jan 22 10:14:38.406307 2026] [:error] [pid 52447:tid 52513] [client 3.142.184.156:37318] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/v1"] [unique_id "aXGIDnRLA2NsdGqJzoumKgAAAIQ"]
[Thu Jan 22 10:14:39.248743 2026] [:error] [pid 27550:tid 27556] [client 3.142.184.156:37324] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/v2"] [unique_id "aXGID-OQDPzfV5R2LYSCaQAAAQQ"]
[Thu Jan 22 10:14:40.090889 2026] [:error] [pid 27550:tid 27561] [client 3.142.184.156:37328] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/v2"] [unique_id "aXGIEOOQDPzfV5R2LYSCbAAAAQk"]
[Thu Jan 22 10:14:40.912086 2026] [:error] [pid 52556:tid 52580] [client 3.142.184.156:38294] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/api/v2"] [unique_id "aXGIEOg4y1NKM4AgfjCmJQAAANY"]
[Thu Jan 22 10:14:41.751370 2026] [:error] [pid 27550:tid 27554] [client 3.142.184.156:38296] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/graphql"] [unique_id "aXGIEeOQDPzfV5R2LYSCbgAAAQI"]
[Thu Jan 22 10:14:42.569302 2026] [:error] [pid 52446:tid 52494] [client 3.142.184.156:38308] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/graphql"] [unique_id "aXGIErJ6clMw4kdrHYGKUAAAAEw"]
[Thu Jan 22 10:14:43.389756 2026] [:error] [pid 52445:tid 52463] [client 3.142.184.156:38310] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/graphql"] [unique_id "aXGIE-vMmsFgpSSb5L3BpgAAAAk"]
[Thu Jan 22 10:14:44.217678 2026] [:error] [pid 52446:tid 52500] [client 3.142.184.156:38314] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rest"] [unique_id "aXGIFLJ6clMw4kdrHYGKUwAAAFI"]
[Thu Jan 22 10:14:45.042805 2026] [:error] [pid 52447:tid 52524] [client 3.142.184.156:38320] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rest"] [unique_id "aXGIFXRLA2NsdGqJzoumLgAAAI8"]
[Thu Jan 22 10:14:45.866602 2026] [:error] [pid 52445:tid 52475] [client 3.142.184.156:38334] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/rest"] [unique_id "aXGIFevMmsFgpSSb5L3BqAAAABU"]
[Thu Jan 22 10:14:46.685973 2026] [:error] [pid 52445:tid 52471] [client 3.142.184.156:38350] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/backend"] [unique_id "aXGIFuvMmsFgpSSb5L3BqgAAABE"]
[Thu Jan 22 10:14:47.493911 2026] [:error] [pid 52445:tid 52477] [client 3.142.184.156:38354] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/backend"] [unique_id "aXGIF-vMmsFgpSSb5L3BrQAAABc"]
[Thu Jan 22 10:14:48.328585 2026] [:error] [pid 52447:tid 52529] [client 3.142.184.156:38368] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/backend"] [unique_id "aXGIGHRLA2NsdGqJzoumMQAAAJQ"]
[Thu Jan 22 10:14:49.156061 2026] [:error] [pid 52447:tid 52510] [client 3.142.184.156:38382] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/server"] [unique_id "aXGIGXRLA2NsdGqJzoumNwAAAIE"]
[Thu Jan 22 10:14:49.995328 2026] [:error] [pid 52446:tid 52485] [client 3.142.184.156:38396] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/server"] [unique_id "aXGIGbJ6clMw4kdrHYGKVQAAAEM"]
[Thu Jan 22 10:14:50.823168 2026] [:error] [pid 52445:tid 52466] [client 3.142.184.156:54590] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/server"] [unique_id "aXGIGuvMmsFgpSSb5L3BsQAAAAw"]
[Thu Jan 22 10:14:51.653456 2026] [:error] [pid 52447:tid 52526] [client 3.142.184.156:54606] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auth"] [unique_id "aXGIG3RLA2NsdGqJzoumOgAAAJE"]
[Thu Jan 22 10:14:52.468733 2026] [:error] [pid 36083:tid 36093] [client 3.142.184.156:54612] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auth"] [unique_id "aXGIHJCng2nQoR5iqwr3bAAAAUc"]
[Thu Jan 22 10:14:53.294976 2026] [:error] [pid 52445:tid 52477] [client 3.142.184.156:54616] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auth"] [unique_id "aXGIHevMmsFgpSSb5L3BuAAAABc"]
[Thu Jan 22 10:14:54.138116 2026] [:error] [pid 52556:tid 52560] [client 3.142.184.156:54618] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/login"] [unique_id "aXGIHug4y1NKM4AgfjCmKQAAAMI"]
[Thu Jan 22 10:14:54.959814 2026] [:error] [pid 52447:tid 52525] [client 3.142.184.156:54628] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/login"] [unique_id "aXGIHnRLA2NsdGqJzoumPQAAAJA"]
[Thu Jan 22 10:14:55.806072 2026] [:error] [pid 36083:tid 36094] [client 3.142.184.156:54634] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/login"] [unique_id "aXGIH5Cng2nQoR5iqwr3cQAAAUg"]
[Thu Jan 22 10:14:56.657702 2026] [:error] [pid 52446:tid 52488] [client 3.142.184.156:54640] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/signin"] [unique_id "aXGIILJ6clMw4kdrHYGKWwAAAEY"]
[Thu Jan 22 10:14:57.485164 2026] [:error] [pid 52445:tid 52463] [client 3.142.184.156:54652] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/signin"] [unique_id "aXGIIevMmsFgpSSb5L3BugAAAAk"]
[Thu Jan 22 10:14:58.301907 2026] [:error] [pid 52445:tid 52474] [client 3.142.184.156:54656] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/signin"] [unique_id "aXGIIuvMmsFgpSSb5L3BvQAAABQ"]
[Thu Jan 22 10:14:59.128715 2026] [:error] [pid 52447:tid 52510] [client 3.142.184.156:54670] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/signup"] [unique_id "aXGII3RLA2NsdGqJzoumPwAAAIE"]
[Thu Jan 22 10:14:59.947629 2026] [:error] [pid 36083:tid 36090] [client 3.142.184.156:54680] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/signup"] [unique_id "aXGII5Cng2nQoR5iqwr3dQAAAUQ"]
[Thu Jan 22 10:15:00.786272 2026] [:error] [pid 52446:tid 52482] [client 3.142.184.156:41286] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/signup"] [unique_id "aXGIJLJ6clMw4kdrHYGKYwAAAEA"]
[Thu Jan 22 10:15:01.627449 2026] [:error] [pid 52556:tid 52559] [client 3.142.184.156:41290] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/register"] [unique_id "aXGIJeg4y1NKM4AgfjCmMQAAAME"]
[Thu Jan 22 10:15:02.449166 2026] [:error] [pid 52556:tid 52578] [client 3.142.184.156:41300] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/register"] [unique_id "aXGIJug4y1NKM4AgfjCmMwAAANQ"]
[Thu Jan 22 10:15:03.283309 2026] [:error] [pid 52446:tid 52490] [client 3.142.184.156:41310] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/register"] [unique_id "aXGIJ7J6clMw4kdrHYGKZgAAAEg"]
[Thu Jan 22 10:15:04.126125 2026] [:error] [pid 52556:tid 52569] [client 3.142.184.156:41312] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/account"] [unique_id "aXGIKOg4y1NKM4AgfjCmNAAAAMs"]
[Thu Jan 22 10:15:04.963125 2026] [:error] [pid 52446:tid 52504] [client 3.142.184.156:41322] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/account"] [unique_id "aXGIKLJ6clMw4kdrHYGKbQAAAFY"]
[Thu Jan 22 10:15:05.796716 2026] [:error] [pid 36083:tid 36091] [client 3.142.184.156:41324] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/account"] [unique_id "aXGIKZCng2nQoR5iqwr3fwAAAUU"]
[Thu Jan 22 10:15:06.655014 2026] [:error] [pid 52556:tid 52558] [client 3.142.184.156:41338] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/user"] [unique_id "aXGIKug4y1NKM4AgfjCmOAAAAMA"]
[Thu Jan 22 10:15:07.479929 2026] [:error] [pid 52446:tid 52500] [client 3.142.184.156:41342] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/user"] [unique_id "aXGIK7J6clMw4kdrHYGKcgAAAFI"]
[Thu Jan 22 10:15:08.308754 2026] [:error] [pid 52445:tid 52472] [client 3.142.184.156:41350] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/user"] [unique_id "aXGILOvMmsFgpSSb5L3BxwAAABI"]
[Thu Jan 22 10:15:09.138287 2026] [:error] [pid 52445:tid 52466] [client 3.142.184.156:41360] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/home"] [unique_id "aXGILevMmsFgpSSb5L3BywAAAAw"]
[Thu Jan 22 10:15:09.962950 2026] [:error] [pid 52446:tid 52492] [client 3.142.184.156:41372] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/home"] [unique_id "aXGILbJ6clMw4kdrHYGKeAAAAEo"]
[Thu Jan 22 10:15:10.801285 2026] [:error] [pid 52446:tid 52485] [client 3.142.184.156:43496] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/home"] [unique_id "aXGILrJ6clMw4kdrHYGKegAAAEM"]
[Thu Jan 22 10:15:11.633186 2026] [:error] [pid 52446:tid 52487] [client 3.142.184.156:43502] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/main"] [unique_id "aXGIL7J6clMw4kdrHYGKgAAAAEU"]
[Thu Jan 22 10:15:12.464024 2026] [:error] [pid 52447:tid 52532] [client 3.142.184.156:43504] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/main"] [unique_id "aXGIMHRLA2NsdGqJzoumRwAAAJc"]
[Thu Jan 22 10:15:13.307878 2026] [:error] [pid 52447:tid 52519] [client 3.142.184.156:43512] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/main"] [unique_id "aXGIMXRLA2NsdGqJzoumSQAAAIo"]
[Thu Jan 22 10:15:14.132868 2026] [:error] [pid 36083:tid 36100] [client 3.142.184.156:43526] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index"] [unique_id "aXGIMpCng2nQoR5iqwr3gQAAAU4"]
[Thu Jan 22 10:15:14.955022 2026] [:error] [pid 52447:tid 52521] [client 3.142.184.156:43536] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index"] [unique_id "aXGIMnRLA2NsdGqJzoumTAAAAIw"]
[Thu Jan 22 10:15:15.799724 2026] [:error] [pid 52447:tid 52525] [client 3.142.184.156:43548] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/index"] [unique_id "aXGIM3RLA2NsdGqJzoumUQAAAJA"]
[Thu Jan 22 10:15:16.662051 2026] [:error] [pid 52556:tid 52567] [client 3.142.184.156:43550] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/start"] [unique_id "aXGINOg4y1NKM4AgfjCmPQAAAMk"]
[Thu Jan 22 10:15:17.504312 2026] [:error] [pid 52447:tid 52509] [client 3.142.184.156:43560] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/start"] [unique_id "aXGINXRLA2NsdGqJzoumVQAAAIA"]
[Thu Jan 22 10:15:18.357792 2026] [:error] [pid 52447:tid 52517] [client 3.142.184.156:43576] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/start"] [unique_id "aXGINnRLA2NsdGqJzoumVwAAAIg"]
[Thu Jan 22 10:15:19.186126 2026] [:error] [pid 52445:tid 52476] [client 3.142.184.156:43578] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/workspace"] [unique_id "aXGIN-vMmsFgpSSb5L3BzwAAABY"]
[Thu Jan 22 10:15:20.033620 2026] [:error] [pid 36083:tid 36102] [client 3.142.184.156:43582] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/workspace"] [unique_id "aXGIOJCng2nQoR5iqwr3hwAAAVA"]
[Thu Jan 22 10:15:20.888568 2026] [:error] [pid 52556:tid 52564] [client 3.142.184.156:54702] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/workspace"] [unique_id "aXGIOOg4y1NKM4AgfjCmQQAAAMY"]
[Thu Jan 22 10:15:21.728393 2026] [:error] [pid 36083:tid 36108] [client 3.142.184.156:54708] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/project"] [unique_id "aXGIOZCng2nQoR5iqwr3iQAAAVY"]
[Thu Jan 22 10:15:22.581716 2026] [:error] [pid 27550:tid 27563] [client 3.142.184.156:54722] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/project"] [unique_id "aXGIOuOQDPzfV5R2LYSCfQAAAQs"]
[Thu Jan 22 10:15:23.409848 2026] [:error] [pid 52445:tid 52462] [client 3.142.184.156:54732] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/project"] [unique_id "aXGIO-vMmsFgpSSb5L3B2AAAAAg"]
[Thu Jan 22 10:15:24.233957 2026] [:error] [pid 52446:tid 52487] [client 3.142.184.156:54748] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/projects"] [unique_id "aXGIPLJ6clMw4kdrHYGKiAAAAEU"]
[Thu Jan 22 10:15:25.081949 2026] [:error] [pid 52446:tid 52499] [client 3.142.184.156:54752] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/projects"] [unique_id "aXGIPbJ6clMw4kdrHYGKigAAAFE"]
[Thu Jan 22 10:15:25.901564 2026] [:error] [pid 52447:tid 52516] [client 3.142.184.156:54760] [client 3.142.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/projects"] [unique_id "aXGIPXRLA2NsdGqJzoumZQAAAIc"]
[Thu Jan 22 10:15:30.700760 2026] [:error] [pid 36083:tid 36089] [client 3.142.184.156:45986] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config/.git/git/config/.env"] [unique_id "aXGIQpCng2nQoR5iqwr3jgAAAUM"]
[Thu Jan 22 10:15:31.552755 2026] [:error] [pid 36083:tid 36106] [client 3.142.184.156:45988] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.local"] [unique_id "aXGIQ5Cng2nQoR5iqwr3kQAAAVQ"]
[Thu Jan 22 10:15:32.403368 2026] [:error] [pid 52447:tid 52517] [client 3.142.184.156:45998] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.production"] [unique_id "aXGIRHRLA2NsdGqJzoumbAAAAIg"]
[Thu Jan 22 10:15:33.258430 2026] [:error] [pid 27550:tid 27567] [client 3.142.184.156:46006] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.development"] [unique_id "aXGIReOQDPzfV5R2LYSChQAAAQ8"]
[Thu Jan 22 10:15:34.100078 2026] [:error] [pid 52556:tid 52569] [client 3.142.184.156:46016] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.staging"] [unique_id "aXGIRug4y1NKM4AgfjCmRQAAAMs"]
[Thu Jan 22 10:15:34.926625 2026] [:error] [pid 36083:tid 36088] [client 3.142.184.156:46032] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.prod"] [unique_id "aXGIRpCng2nQoR5iqwr3lAAAAUI"]
[Thu Jan 22 10:15:35.739465 2026] [:error] [pid 27550:tid 27559] [client 3.142.184.156:46048] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.dev"] [unique_id "aXGIR-OQDPzfV5R2LYSCiAAAAQc"]
[Thu Jan 22 10:15:36.564616 2026] [:error] [pid 52445:tid 52455] [client 3.142.184.156:46050] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.test"] [unique_id "aXGISOvMmsFgpSSb5L3B3gAAAAE"]
[Thu Jan 22 10:15:37.410911 2026] [:error] [pid 52446:tid 52484] [client 3.142.184.156:46052] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.backup"] [unique_id "aXGISbJ6clMw4kdrHYGKpwAAAEI"]
[Thu Jan 22 10:15:38.253695 2026] [:error] [pid 52556:tid 52564] [client 3.142.184.156:46056] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.old"] [unique_id "aXGISug4y1NKM4AgfjCmSgAAAMY"]
[Thu Jan 22 10:15:39.097394 2026] [:error] [pid 52556:tid 52558] [client 3.142.184.156:46070] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.bak"] [unique_id "aXGIS-g4y1NKM4AgfjCmSwAAAMA"]
[Thu Jan 22 10:15:39.961519 2026] [:error] [pid 52447:tid 52516] [client 3.142.184.156:46082] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.save"] [unique_id "aXGIS3RLA2NsdGqJzoumcwAAAIc"]
[Thu Jan 22 10:15:40.803191 2026] [:error] [pid 52447:tid 52526] [client 3.142.184.156:57692] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/api/.env"] [unique_id "aXGITHRLA2NsdGqJzoumdwAAAJE"]
[Thu Jan 22 10:15:41.641816 2026] [:error] [pid 52447:tid 52524] [client 3.142.184.156:57700] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/app/.env"] [unique_id "aXGITXRLA2NsdGqJzoumewAAAI8"]
[Thu Jan 22 10:15:42.471294 2026] [:error] [pid 52556:tid 52579] [client 3.142.184.156:57706] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/backend/.env"] [unique_id "aXGITug4y1NKM4AgfjCmTgAAANU"]
[Thu Jan 22 10:15:43.312290 2026] [:error] [pid 52447:tid 52515] [client 3.142.184.156:57708] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/frontend/.env"] [unique_id "aXGIT3RLA2NsdGqJzoumgQAAAIY"]
[Thu Jan 22 10:15:44.167213 2026] [:error] [pid 52556:tid 52575] [client 3.142.184.156:57710] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/server/.env"] [unique_id "aXGIUOg4y1NKM4AgfjCmUAAAANE"]
[Thu Jan 22 10:15:45.021257 2026] [:error] [pid 36083:tid 36104] [client 3.142.184.156:57724] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/src/.env"] [unique_id "aXGIUZCng2nQoR5iqwr3mQAAAVI"]
[Thu Jan 22 10:15:45.881624 2026] [:error] [pid 52445:tid 52457] [client 3.142.184.156:57740] [client 3.142.184.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/config/.env"] [unique_id "aXGIUevMmsFgpSSb5L3B6wAAAAM"]
[Thu Jan 22 11:52:27.825088 2026] [:error] [pid 52445:tid 52460] [client 119.96.24.54:39790] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXGe--vMmsFgpSSb5L3d3wAAAAY"]
[Thu Jan 22 13:08:56.143863 2026] [:error] [pid 20418:tid 20424] [client 16.148.252.126:47478] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manage"] [unique_id "aXGw6BahoKEa6eS4cSoKogAAAYI"]
[Thu Jan 22 13:08:56.908088 2026] [:error] [pid 52447:tid 52527] [client 16.148.252.126:60200] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manage"] [unique_id "aXGw6HRLA2NsdGqJzovmqAAAAJI"]
[Thu Jan 22 13:08:57.650656 2026] [:error] [pid 20418:tid 20422] [client 16.148.252.126:60202] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manage"] [unique_id "aXGw6RahoKEa6eS4cSoKpwAAAYA"]
[Thu Jan 22 13:08:58.410708 2026] [:error] [pid 20418:tid 20427] [client 16.148.252.126:60204] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/management"] [unique_id "aXGw6hahoKEa6eS4cSoKqwAAAYU"]
[Thu Jan 22 13:08:59.152470 2026] [:error] [pid 52556:tid 52576] [client 16.148.252.126:60210] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/management"] [unique_id "aXGw6-g4y1NKM4AgfjDjbwAAANI"]
[Thu Jan 22 13:08:59.899323 2026] [:error] [pid 27550:tid 27556] [client 16.148.252.126:60218] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/management"] [unique_id "aXGw6-OQDPzfV5R2LYTCegAAAQQ"]
[Thu Jan 22 13:09:00.645971 2026] [:error] [pid 36083:tid 36096] [client 16.148.252.126:60228] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal"] [unique_id "aXGw7JCng2nQoR5iqwoxgwAAAUo"]
[Thu Jan 22 13:09:01.398821 2026] [:error] [pid 52445:tid 52478] [client 16.148.252.126:60232] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal"] [unique_id "aXGw7evMmsFgpSSb5L31SQAAABg"]
[Thu Jan 22 13:09:02.132583 2026] [:error] [pid 27550:tid 27565] [client 16.148.252.126:60240] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal"] [unique_id "aXGw7uOQDPzfV5R2LYTChQAAAQ0"]
[Thu Jan 22 13:09:02.876460 2026] [:error] [pid 52445:tid 52459] [client 16.148.252.126:60248] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api"] [unique_id "aXGw7uvMmsFgpSSb5L31TQAAAAU"]
[Thu Jan 22 13:09:03.620221 2026] [:error] [pid 52447:tid 52525] [client 16.148.252.126:60250] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api"] [unique_id "aXGw73RLA2NsdGqJzovmugAAAJA"]
[Thu Jan 22 13:09:04.354927 2026] [:error] [pid 20418:tid 20441] [client 16.148.252.126:60252] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api"] [unique_id "aXGw8BahoKEa6eS4cSoKtgAAAZM"]
[Thu Jan 22 13:09:05.114534 2026] [:error] [pid 20418:tid 20444] [client 16.148.252.126:52006] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v1"] [unique_id "aXGw8RahoKEa6eS4cSoKtwAAAZY"]
[Thu Jan 22 13:09:05.853427 2026] [:error] [pid 20418:tid 20434] [client 16.148.252.126:52010] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v1"] [unique_id "aXGw8RahoKEa6eS4cSoKuAAAAYw"]
[Thu Jan 22 13:09:06.596674 2026] [:error] [pid 52556:tid 52561] [client 16.148.252.126:52022] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v1"] [unique_id "aXGw8ug4y1NKM4AgfjDjdwAAAMM"]
[Thu Jan 22 13:09:07.341016 2026] [:error] [pid 52447:tid 52519] [client 16.148.252.126:52030] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v2"] [unique_id "aXGw83RLA2NsdGqJzovmvgAAAIo"]
[Thu Jan 22 13:09:08.091697 2026] [:error] [pid 52447:tid 52512] [client 16.148.252.126:52046] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v2"] [unique_id "aXGw9HRLA2NsdGqJzovmwAAAAIM"]
[Thu Jan 22 13:09:08.857858 2026] [:error] [pid 36083:tid 36110] [client 16.148.252.126:52050] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v2"] [unique_id "aXGw9JCng2nQoR5iqwoxkgAAAVg"]
[Thu Jan 22 13:09:09.609084 2026] [:error] [pid 52445:tid 52472] [client 16.148.252.126:52064] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/graphql"] [unique_id "aXGw9evMmsFgpSSb5L31UQAAABI"]
[Thu Jan 22 13:09:10.352497 2026] [:error] [pid 52447:tid 52526] [client 16.148.252.126:52076] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/graphql"] [unique_id "aXGw9nRLA2NsdGqJzovmxAAAAJE"]
[Thu Jan 22 13:09:11.103832 2026] [:error] [pid 36083:tid 36106] [client 16.148.252.126:52086] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/graphql"] [unique_id "aXGw95Cng2nQoR5iqwoxlQAAAVQ"]
[Thu Jan 22 13:09:11.850670 2026] [:error] [pid 52446:tid 52502] [client 16.148.252.126:52102] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rest"] [unique_id "aXGw97J6clMw4kdrHYG7ogAAAFQ"]
[Thu Jan 22 13:09:12.597146 2026] [:error] [pid 20418:tid 20434] [client 16.148.252.126:52114] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rest"] [unique_id "aXGw-BahoKEa6eS4cSoKxAAAAYw"]
[Thu Jan 22 13:09:13.349621 2026] [:error] [pid 36083:tid 36091] [client 16.148.252.126:52122] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rest"] [unique_id "aXGw-ZCng2nQoR5iqwoxlwAAAUU"]
[Thu Jan 22 13:09:14.106681 2026] [:error] [pid 52445:tid 52475] [client 16.148.252.126:52128] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend"] [unique_id "aXGw-uvMmsFgpSSb5L31XgAAABU"]
[Thu Jan 22 13:09:14.859070 2026] [:error] [pid 52445:tid 52478] [client 16.148.252.126:53072] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend"] [unique_id "aXGw-uvMmsFgpSSb5L31ZQAAABg"]
[Thu Jan 22 13:09:15.612459 2026] [:error] [pid 27550:tid 27573] [client 16.148.252.126:53088] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend"] [unique_id "aXGw--OQDPzfV5R2LYTCkAAAARU"]
[Thu Jan 22 13:09:16.360658 2026] [:error] [pid 52446:tid 52496] [client 16.148.252.126:53096] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server"] [unique_id "aXGw_LJ6clMw4kdrHYG7tQAAAE4"]
[Thu Jan 22 13:09:17.100931 2026] [:error] [pid 52446:tid 52485] [client 16.148.252.126:53110] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server"] [unique_id "aXGw_bJ6clMw4kdrHYG7uAAAAEM"]
[Thu Jan 22 13:09:17.851651 2026] [:error] [pid 27550:tid 27575] [client 16.148.252.126:53112] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server"] [unique_id "aXGw_eOQDPzfV5R2LYTCmwAAARc"]
[Thu Jan 22 13:09:18.594758 2026] [:error] [pid 36083:tid 36107] [client 16.148.252.126:53116] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth"] [unique_id "aXGw_pCng2nQoR5iqwoxpwAAAVU"]
[Thu Jan 22 13:09:19.336566 2026] [:error] [pid 52445:tid 52478] [client 16.148.252.126:53126] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth"] [unique_id "aXGw_-vMmsFgpSSb5L31kAAAABg"]
[Thu Jan 22 13:09:20.089238 2026] [:error] [pid 52556:tid 52560] [client 16.148.252.126:53134] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auth"] [unique_id "aXGxAOg4y1NKM4AgfjDjjAAAAMI"]
[Thu Jan 22 13:09:20.835810 2026] [:error] [pid 52556:tid 52559] [client 16.148.252.126:53148] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login"] [unique_id "aXGxAOg4y1NKM4AgfjDjjwAAAME"]
[Thu Jan 22 13:09:21.585074 2026] [:error] [pid 36083:tid 36104] [client 16.148.252.126:53152] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login"] [unique_id "aXGxAZCng2nQoR5iqwoxrwAAAVI"]
[Thu Jan 22 13:09:22.335166 2026] [:error] [pid 52556:tid 52564] [client 16.148.252.126:53164] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login"] [unique_id "aXGxAug4y1NKM4AgfjDjlwAAAMY"]
[Thu Jan 22 13:09:23.105127 2026] [:error] [pid 52556:tid 52581] [client 16.148.252.126:53180] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/signin"] [unique_id "aXGxA-g4y1NKM4AgfjDjmgAAANc"]
[Thu Jan 22 13:09:23.844305 2026] [:error] [pid 52445:tid 52467] [client 16.148.252.126:53196] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/signin"] [unique_id "aXGxA-vMmsFgpSSb5L31nAAAAA0"]
[Thu Jan 22 13:09:24.593667 2026] [:error] [pid 27550:tid 27553] [client 16.148.252.126:40096] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/signin"] [unique_id "aXGxBOOQDPzfV5R2LYTCqgAAAQE"]
[Thu Jan 22 13:09:25.353851 2026] [:error] [pid 52556:tid 52579] [client 16.148.252.126:40106] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/signup"] [unique_id "aXGxBeg4y1NKM4AgfjDjpQAAANU"]
[Thu Jan 22 13:09:26.115880 2026] [:error] [pid 52445:tid 52457] [client 16.148.252.126:40120] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/signup"] [unique_id "aXGxBuvMmsFgpSSb5L31oAAAAAM"]
[Thu Jan 22 13:09:26.869761 2026] [:error] [pid 20418:tid 20423] [client 16.148.252.126:40132] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/signup"] [unique_id "aXGxBhahoKEa6eS4cSoK8AAAAYE"]
[Thu Jan 22 13:09:27.637692 2026] [:error] [pid 52447:tid 52530] [client 16.148.252.126:40134] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/register"] [unique_id "aXGxB3RLA2NsdGqJzovm9wAAAJU"]
[Thu Jan 22 13:09:28.394395 2026] [:error] [pid 52556:tid 52558] [client 16.148.252.126:40144] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/register"] [unique_id "aXGxCOg4y1NKM4AgfjDjqwAAAMA"]
[Thu Jan 22 13:09:29.147987 2026] [:error] [pid 20418:tid 20433] [client 16.148.252.126:40154] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/register"] [unique_id "aXGxCRahoKEa6eS4cSoK-AAAAYs"]
[Thu Jan 22 13:09:29.899338 2026] [:error] [pid 52446:tid 52491] [client 16.148.252.126:40164] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/account"] [unique_id "aXGxCbJ6clMw4kdrHYG7ygAAAEk"]
[Thu Jan 22 13:09:30.648704 2026] [:error] [pid 52446:tid 52492] [client 16.148.252.126:40174] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/account"] [unique_id "aXGxCrJ6clMw4kdrHYG7zAAAAEo"]
[Thu Jan 22 13:09:31.400013 2026] [:error] [pid 52445:tid 52463] [client 16.148.252.126:40180] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/account"] [unique_id "aXGxC-vMmsFgpSSb5L31pAAAAAk"]
[Thu Jan 22 13:09:32.157611 2026] [:error] [pid 52446:tid 52485] [client 16.148.252.126:40188] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user"] [unique_id "aXGxDLJ6clMw4kdrHYG70wAAAEM"]
[Thu Jan 22 13:09:32.902641 2026] [:error] [pid 52445:tid 52475] [client 16.148.252.126:40198] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user"] [unique_id "aXGxDOvMmsFgpSSb5L31qgAAABU"]
[Thu Jan 22 13:09:33.644760 2026] [:error] [pid 52445:tid 52457] [client 16.148.252.126:40214] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user"] [unique_id "aXGxDevMmsFgpSSb5L31qwAAAAM"]
[Thu Jan 22 13:09:34.391677 2026] [:error] [pid 52445:tid 52469] [client 16.148.252.126:40228] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/home"] [unique_id "aXGxDuvMmsFgpSSb5L31rQAAAA8"]
[Thu Jan 22 13:09:35.141176 2026] [:error] [pid 52445:tid 52478] [client 16.148.252.126:55658] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/home"] [unique_id "aXGxD-vMmsFgpSSb5L31sAAAABg"]
[Thu Jan 22 13:09:35.888052 2026] [:error] [pid 27550:tid 27557] [client 16.148.252.126:55668] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/home"] [unique_id "aXGxD-OQDPzfV5R2LYTCywAAAQU"]
[Thu Jan 22 13:09:36.633230 2026] [:error] [pid 52446:tid 52503] [client 16.148.252.126:55670] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main"] [unique_id "aXGxELJ6clMw4kdrHYG73AAAAFU"]
[Thu Jan 22 13:09:37.381062 2026] [:error] [pid 27550:tid 27559] [client 16.148.252.126:55678] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main"] [unique_id "aXGxEeOQDPzfV5R2LYTCzgAAAQc"]
[Thu Jan 22 13:09:38.142638 2026] [:error] [pid 20418:tid 20424] [client 16.148.252.126:55692] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main"] [unique_id "aXGxEhahoKEa6eS4cSoLBwAAAYI"]
[Thu Jan 22 13:09:38.888578 2026] [:error] [pid 20418:tid 20423] [client 16.148.252.126:55708] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index"] [unique_id "aXGxEhahoKEa6eS4cSoLCgAAAYE"]
[Thu Jan 22 13:09:39.640598 2026] [:error] [pid 52445:tid 52461] [client 16.148.252.126:55722] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index"] [unique_id "aXGxE-vMmsFgpSSb5L31twAAAAc"]
[Thu Jan 22 13:09:40.387613 2026] [:error] [pid 52556:tid 52567] [client 16.148.252.126:55734] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index"] [unique_id "aXGxFOg4y1NKM4AgfjDjuAAAAMk"]
[Thu Jan 22 13:09:41.144816 2026] [:error] [pid 52446:tid 52502] [client 16.148.252.126:55748] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/start"] [unique_id "aXGxFbJ6clMw4kdrHYG76AAAAFQ"]
[Thu Jan 22 13:09:41.887032 2026] [:error] [pid 52556:tid 52565] [client 16.148.252.126:55762] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/start"] [unique_id "aXGxFeg4y1NKM4AgfjDjvAAAAMc"]
[Thu Jan 22 13:09:42.629872 2026] [:error] [pid 27550:tid 27573] [client 16.148.252.126:55768] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/start"] [unique_id "aXGxFuOQDPzfV5R2LYTC2gAAARU"]
[Thu Jan 22 13:09:43.373764 2026] [:error] [pid 27550:tid 27575] [client 16.148.252.126:55778] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/workspace"] [unique_id "aXGxF-OQDPzfV5R2LYTC3wAAARc"]
[Thu Jan 22 13:09:44.131610 2026] [:error] [pid 52446:tid 52497] [client 16.148.252.126:55794] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/workspace"] [unique_id "aXGxGLJ6clMw4kdrHYG77QAAAE8"]
[Thu Jan 22 13:09:44.867690 2026] [:error] [pid 52445:tid 52455] [client 16.148.252.126:53506] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/workspace"] [unique_id "aXGxGOvMmsFgpSSb5L31vgAAAAE"]
[Thu Jan 22 13:09:45.614039 2026] [:error] [pid 52556:tid 52561] [client 16.148.252.126:53522] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/project"] [unique_id "aXGxGeg4y1NKM4AgfjDjwgAAAMM"]
[Thu Jan 22 13:09:46.364832 2026] [:error] [pid 52556:tid 52576] [client 16.148.252.126:53536] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/project"] [unique_id "aXGxGug4y1NKM4AgfjDjxQAAANI"]
[Thu Jan 22 13:09:47.116206 2026] [:error] [pid 52446:tid 52486] [client 16.148.252.126:53538] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/project"] [unique_id "aXGxG7J6clMw4kdrHYG77wAAAEQ"]
[Thu Jan 22 13:09:47.863802 2026] [:error] [pid 27550:tid 27575] [client 16.148.252.126:53550] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/projects"] [unique_id "aXGxG-OQDPzfV5R2LYTC6QAAARc"]
[Thu Jan 22 13:09:48.609231 2026] [:error] [pid 52556:tid 52559] [client 16.148.252.126:53556] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/projects"] [unique_id "aXGxHOg4y1NKM4AgfjDjyQAAAME"]
[Thu Jan 22 13:09:49.354162 2026] [:error] [pid 27550:tid 27552] [client 16.148.252.126:53558] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/projects"] [unique_id "aXGxHeOQDPzfV5R2LYTC7gAAAQA"]
[Thu Jan 22 13:09:50.110669 2026] [:error] [pid 52556:tid 52573] [client 16.148.252.126:53574] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop"] [unique_id "aXGxHug4y1NKM4AgfjDjzAAAAM8"]
[Thu Jan 22 13:09:50.862369 2026] [:error] [pid 52556:tid 52563] [client 16.148.252.126:53586] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop"] [unique_id "aXGxHug4y1NKM4AgfjDjzwAAAMU"]
[Thu Jan 22 13:09:51.612853 2026] [:error] [pid 52556:tid 52560] [client 16.148.252.126:53590] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop"] [unique_id "aXGxH-g4y1NKM4AgfjDj1QAAAMI"]
[Thu Jan 22 13:09:52.366684 2026] [:error] [pid 27550:tid 27561] [client 16.148.252.126:53598] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/store"] [unique_id "aXGxIOOQDPzfV5R2LYTC9gAAAQk"]
[Thu Jan 22 13:09:53.105332 2026] [:error] [pid 52556:tid 52570] [client 16.148.252.126:53600] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/store"] [unique_id "aXGxIeg4y1NKM4AgfjDj2QAAAMw"]
[Thu Jan 22 13:09:53.843118 2026] [:error] [pid 20418:tid 20439] [client 16.148.252.126:53606] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/store"] [unique_id "aXGxIRahoKEa6eS4cSoLRwAAAZE"]
[Thu Jan 22 13:09:54.593753 2026] [:error] [pid 52447:tid 52517] [client 16.148.252.126:47696] [client 16.148.252.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cart"] [unique_id "aXGxInRLA2NsdGqJzovnEQAAAIg"]
[Thu Jan 22 13:09:58.394913 2026] [:error] [pid 36083:tid 36096] [client 16.148.252.126:47724] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config/.git/git/config/.env"] [unique_id "aXGxJpCng2nQoR5iqwox3wAAAUo"]
[Thu Jan 22 13:09:59.134425 2026] [:error] [pid 27550:tid 27566] [client 16.148.252.126:47732] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aXGxJ-OQDPzfV5R2LYTDAQAAAQ4"]
[Thu Jan 22 13:09:59.871378 2026] [:error] [pid 27550:tid 27565] [client 16.148.252.126:47740] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aXGxJ-OQDPzfV5R2LYTDAgAAAQ0"]
[Thu Jan 22 13:10:00.626562 2026] [:error] [pid 52447:tid 52524] [client 16.148.252.126:47752] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development"] [unique_id "aXGxKHRLA2NsdGqJzovnJgAAAI8"]
[Thu Jan 22 13:10:01.372300 2026] [:error] [pid 27550:tid 27568] [client 16.148.252.126:47764] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aXGxKeOQDPzfV5R2LYTDAwAAARA"]
[Thu Jan 22 13:10:02.110792 2026] [:error] [pid 36083:tid 36089] [client 16.148.252.126:47772] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod"] [unique_id "aXGxKpCng2nQoR5iqwox5wAAAUM"]
[Thu Jan 22 13:10:02.854490 2026] [:error] [pid 36083:tid 36097] [client 16.148.252.126:47776] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.dev"] [unique_id "aXGxKpCng2nQoR5iqwox6gAAAUs"]
[Thu Jan 22 13:10:03.594198 2026] [:error] [pid 52556:tid 52581] [client 16.148.252.126:47790] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test"] [unique_id "aXGxK-g4y1NKM4AgfjDj4gAAANc"]
[Thu Jan 22 13:10:04.339898 2026] [:error] [pid 52446:tid 52494] [client 16.148.252.126:47806] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aXGxLLJ6clMw4kdrHYG8AQAAAEw"]
[Thu Jan 22 13:10:05.080346 2026] [:error] [pid 36083:tid 36106] [client 16.148.252.126:54112] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aXGxLZCng2nQoR5iqwox8QAAAVQ"]
[Thu Jan 22 13:10:05.825964 2026] [:error] [pid 52446:tid 52491] [client 16.148.252.126:54118] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aXGxLbJ6clMw4kdrHYG8BgAAAEk"]
[Thu Jan 22 13:10:06.570185 2026] [:error] [pid 52447:tid 52523] [client 16.148.252.126:54132] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aXGxLnRLA2NsdGqJzovnMgAAAI4"]
[Thu Jan 22 13:10:07.318400 2026] [:error] [pid 52447:tid 52514] [client 16.148.252.126:54146] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aXGxL3RLA2NsdGqJzovnPgAAAIU"]
[Thu Jan 22 13:10:08.069459 2026] [:error] [pid 52556:tid 52574] [client 16.148.252.126:54150] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aXGxMOg4y1NKM4AgfjDj6gAAANA"]
[Thu Jan 22 13:10:08.823248 2026] [:error] [pid 52556:tid 52569] [client 16.148.252.126:54158] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backend/.env"] [unique_id "aXGxMOg4y1NKM4AgfjDj7QAAAMs"]
[Thu Jan 22 13:10:09.570501 2026] [:error] [pid 36083:tid 36106] [client 16.148.252.126:54172] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/frontend/.env"] [unique_id "aXGxMZCng2nQoR5iqwox-AAAAVQ"]
[Thu Jan 22 13:10:10.312945 2026] [:error] [pid 52556:tid 52578] [client 16.148.252.126:54184] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/server/.env"] [unique_id "aXGxMug4y1NKM4AgfjDj7wAAANQ"]
[Thu Jan 22 13:10:11.067064 2026] [:error] [pid 52446:tid 52505] [client 16.148.252.126:54198] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/src/.env"] [unique_id "aXGxM7J6clMw4kdrHYG8CwAAAFc"]
[Thu Jan 22 13:10:11.813599 2026] [:error] [pid 36083:tid 36094] [client 16.148.252.126:54200] [client 16.148.252.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aXGxM5Cng2nQoR5iqwox_QAAAUg"]
[Thu Jan 22 16:30:24.172711 2026] [:error] [pid 52445:tid 52474] [client 43.157.67.70:47012] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXHgIOvMmsFgpSSb5L0pcgAAABQ"]
[Thu Jan 22 22:34:10.073688 2026] [:error] [pid 52447:tid 52521] [client 95.216.63.67:53058] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php, referer: www.google.com
[Thu Jan 22 23:36:10.175198 2026] [:error] [pid 20418:tid 20445] [client 95.216.63.67:57118] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/woocommerce-payments/readme.txt"] [unique_id "aXJD6hahoKEa6eS4cSqclAAAAZc"], referer: www.google.com
[Fri Jan 23 00:43:34.239770 2026] [:error] [pid 52446:tid 52482] [client 103.166.244.92:19824] [client 103.166.244.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.244.92, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXJTtrJ6clMw4kdrHYFGkwAAAEA"]
[Fri Jan 23 00:43:34.245779 2026] [:error] [pid 52446:tid 52482] [client 103.166.244.92:19824] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 23 00:44:03.682781 2026] [:error] [pid 20418:tid 20425] [client 223.235.166.0:7262] [client 223.235.166.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.235.166.0, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXJT0xahoKEa6eS4cSqmngAAAYM"]
[Fri Jan 23 00:44:03.687713 2026] [:error] [pid 20418:tid 20425] [client 223.235.166.0:7262] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 23 00:44:34.560293 2026] [:error] [pid 20418:tid 20442] [client 49.235.136.28:37176] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXJT8hahoKEa6eS4cSqmswAAAZQ"]
[Fri Jan 23 00:46:30.136201 2026] [:error] [pid 34321:tid 34341] [client 24.77.77.1:6858] [client 24.77.77.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.77.1, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXJUZhLMkukwqSCtKrDelwAAAdE"]
[Fri Jan 23 00:46:30.141984 2026] [:error] [pid 34321:tid 34341] [client 24.77.77.1:6858] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 23 01:22:38.485355 2026] [:error] [pid 52445:tid 52478] [client 142.93.167.5:55561] [client 142.93.167.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.167.5, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXJc3uvMmsFgpSSb5L26WQAAABg"]
[Fri Jan 23 01:22:38.489336 2026] [:error] [pid 52445:tid 52478] [client 142.93.167.5:55561] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 23 03:49:24.782602 2026] [:error] [pid 11607:tid 11644] [client 188.166.83.121:60380] [client 188.166.83.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.83.121, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXJ_RAucTAUsUUzKw5fuFwAAAEA"]
[Fri Jan 23 03:49:24.786160 2026] [:error] [pid 11607:tid 11644] [client 188.166.83.121:60380] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 23 05:24:22.878929 2026] [:error] [pid 11732:tid 11742] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Jan 23 05:24:23.031501 2026] [:error] [pid 11732:tid 11754] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Jan 23 05:24:23.296353 2026] [:error] [pid 11732:tid 11746] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Jan 23 05:24:23.789266 2026] [:error] [pid 11732:tid 11735] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php
[Fri Jan 23 05:24:23.911306 2026] [:error] [pid 11732:tid 11744] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri Jan 23 05:24:24.268402 2026] [:error] [pid 11732:tid 11756] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Jan 23 05:24:24.389151 2026] [:error] [pid 11732:tid 11745] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Jan 23 05:24:24.680406 2026] [:error] [pid 11732:tid 11750] [client 20.205.10.3:18042] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Fri Jan 23 05:24:24.808048 2026] [:error] [pid 11732:tid 11749] [client 20.205.10.3:18042] [client 20.205.10.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aXKViOfd54xxq04JKuNLNwAAAM8"]
[Fri Jan 23 05:24:25.304187 2026] [:error] [pid 11608:tid 11676] [client 20.205.10.3:31734] [client 20.205.10.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aXKVib4alK6RZLlMctpnDAAAAIQ"]
[Fri Jan 23 05:24:25.795705 2026] [:error] [pid 11608:tid 11685] [client 20.205.10.3:31687] [client 20.205.10.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aXKVib4alK6RZLlMctpnDgAAAI0"]
[Fri Jan 23 05:24:26.300235 2026] [:error] [pid 11732:tid 11757] [client 20.205.10.3:29774] [client 20.205.10.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aXKViufd54xxq04JKuNLOgAAANc"]
[Fri Jan 23 06:39:02.656219 2026] [:error] [pid 11607:tid 11653] [client 45.82.13.200:59220] [client 45.82.13.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aXKnBgucTAUsUUzKw5cx4gAAAEk"]
[Fri Jan 23 07:05:26.432645 2026] [:error] [pid 11607:tid 11669] [client 110.166.71.39:59626] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXKtNgucTAUsUUzKw5c9CgAAAFg"]
[Fri Jan 23 13:01:22.934308 2026] [:error] [pid 11606:tid 11620] [client 129.212.186.67:55179] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/panel/administrator/"] [unique_id "aXMAolnjAJqfHEQLcsgdhwAAAAU"]
[Fri Jan 23 15:19:32.784374 2026] [:error] [pid 62368:tid 62371] [client 212.227.175.43:58932] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 23 15:19:40.381440 2026] [:error] [pid 62368:tid 62392] [client 212.227.175.43:62980] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 23 15:19:49.752602 2026] [:error] [pid 11732:tid 11747] [client 212.227.175.43:51142] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Jan 23 15:19:59.792735 2026] [:error] [pid 11732:tid 11742] [client 212.227.175.43:61991] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aXMhH-fd54xxq04JKuMu0AAAAMg"], referer: www.google.com
[Fri Jan 23 21:39:44.797321 2026] [:error] [pid 64230:tid 64233] [client 43.164.195.17:56718] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXN6IK2JXmVjD91caKLN1wAAAUA"]
[Sat Jan 24 08:35:44.769612 2026] [:error] [pid 22900:tid 22910] [client 170.205.31.138:58381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Sat Jan 24 08:55:09.118885 2026] [:error] [pid 40905:tid 40984] [client 170.205.31.138:50602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Sat Jan 24 18:55:42.608117 2026] [:error] [pid 14976:tid 14978] [client 43.130.67.33:48094] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXSlLmvdigydYOB2KS9QlAAAAYA"]
[Sat Jan 24 19:05:13.309450 2026] [:error] [pid 22900:tid 22909] [client 49.51.183.15:41004] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXSnaVr6h1PpdlYV7gX4VgAAAQY"]
[Sat Jan 24 21:33:35.089629 2026] [:error] [pid 60761:tid 60784] [client 110.166.71.39:59622] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXTKL1ZQvxLvEbXXh9J_UgAAAVQ"]
[Sat Jan 24 21:55:16.610122 2026] [:error] [pid 40903:tid 40954] [client 213.209.159.55:40252] [client 213.209.159.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "aXTPRBxw3xvyqXTcGl-4XQAAAE8"]
[Sun Jan 25 00:57:05.295531 2026] [:error] [pid 60761:tid 60783] [client 64.89.163.25:58630] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXT54VZQvxLvEbXXh9KgPQAAAVM"]
[Sun Jan 25 00:57:05.929786 2026] [:error] [pid 41009:tid 41015] [client 64.89.163.25:58870] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXT54WrewfoFUDD3TM3_ngAAAMQ"]
[Sun Jan 25 00:57:06.566796 2026] [:error] [pid 60761:tid 60766] [client 64.89.163.25:59095] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXT54lZQvxLvEbXXh9KgewAAAUI"]
[Sun Jan 25 00:57:07.200183 2026] [:error] [pid 40902:tid 40913] [client 64.89.163.25:59326] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXT54wSCceZpurDgOesezAAAAAE"]
[Sun Jan 25 00:57:07.834985 2026] [:error] [pid 40902:tid 40913] [client 64.89.163.25:59558] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXT54wSCceZpurDgOese5QAAAAE"]
[Sun Jan 25 06:37:29.806390 2026] [:error] [pid 53419:tid 53436] [client 3.127.203.41:65142] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sun Jan 25 10:12:55.130760 2026] [:error] [pid 53521:tid 53539] [client 182.43.70.143:53664] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXV8J0AzLL1HphkAdX7JVAAAAMY"]
[Sun Jan 25 10:38:50.629242 2026] [:error] [pid 53420:tid 53470] [client 103.77.106.81:62840] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aXWCOo5y-t2ZKNqnnbXC3gAAAE4"]
[Sun Jan 25 10:38:50.995838 2026] [:error] [pid 53420:tid 53456] [client 103.77.106.81:63019] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aXWCOo5y-t2ZKNqnnbXC4QAAAEA"]
[Sun Jan 25 12:56:17.884454 2026] [:error] [pid 9122:tid 9132] [client 43.153.86.78:50528] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXWicWgJ3AtoqtQp2gSiDwAAAYg"]
[Sun Jan 25 13:11:25.888767 2026] [:error] [pid 33687:tid 33706] [client 43.157.67.70:43486] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXWl_Yc6VUyZP5DZSy5DugAAARA"]
[Sun Jan 25 15:48:30.881108 2026] [:error] [pid 53420:tid 53469] [client 137.184.44.51:64520] [client 137.184.44.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.44.51, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXXKzo5y-t2ZKNqnnbUGkwAAAE0"], referer: http://projekt.vinteligencija.hr//wp-login.php
[Sun Jan 25 15:48:30.887267 2026] [:error] [pid 53420:tid 53469] [client 137.184.44.51:64520] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: http://projekt.vinteligencija.hr//wp-login.php
[Sun Jan 25 16:41:55.429044 2026] [:error] [pid 9070:tid 9091] [client 49.235.136.28:40142] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXXXU7LNl7Vxe1mYetE1gAAAAVM"]
[Sun Jan 25 20:54:27.698567 2026] [:error] [pid 9122:tid 9129] [client 43.153.204.189:42390] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXYSg2gJ3AtoqtQp2gREVwAAAYU"]
[Sun Jan 25 23:16:14.471728 2026] [:error] [pid 33687:tid 33702] [client 203.2.64.59:46541] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXYzvoc6VUyZP5DZSy7D8QAAAQw"]
[Mon Jan 26 02:56:01.178090 2026] [:error] [pid 6612:tid 6636] [client 105.156.71.29:51997] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aXZnQQ7OocbZdUpuWVtIBAAAABY"], referer: https://www.walmart.com/search?q=organic+coffee&cat_id=0
[Mon Jan 26 02:56:03.063849 2026] [:error] [pid 48918:tid 48928] [client 105.156.71.29:53400] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aXZnQ7FdNV6RkULOt6E93QAAAIA"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Mon Jan 26 02:56:05.728411 2026] [:error] [pid 13569:tid 13615] [client 105.156.71.29:54351] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aXZnRfjY_vt91DmOz5Xi-QAAAYM"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Mon Jan 26 02:56:07.320774 2026] [:error] [pid 6612:tid 6632] [client 105.156.71.29:49301] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aXZnRw7OocbZdUpuWVtICgAAABI"], referer: https://vimeo.com/search?q=short+film+festival
[Mon Jan 26 02:56:09.001182 2026] [:error] [pid 13569:tid 13636] [client 105.156.71.29:50439] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aXZnSfjY_vt91DmOz5Xi_gAAAZg"], referer: https://www.google.com/search?q=weather+new+york&client=firefox-b-d
[Mon Jan 26 02:56:10.657013 2026] [:error] [pid 49084:tid 49109] [client 105.156.71.29:51279] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aXZnSpHUOXll3XccoO46UgAAAVc"], referer: https://l.facebook.com/
[Mon Jan 26 02:56:12.286379 2026] [:error] [pid 13569:tid 13626] [client 105.156.71.29:52113] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.development"] [unique_id "aXZnTPjY_vt91DmOz5XjAwAAAY4"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Mon Jan 26 02:56:13.942464 2026] [:error] [pid 13569:tid 13630] [client 105.156.71.29:53071] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.test"] [unique_id "aXZnTfjY_vt91DmOz5XjCAAAAZI"], referer: https://duckduckgo.com/?q=best+hiking+trails+near+me&ia=web
[Mon Jan 26 02:56:15.569833 2026] [:error] [pid 48920:tid 48988] [client 105.156.71.29:54039] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aXZnT5snZS3G6U7VdJMsBAAAAQQ"], referer: https://medium.com/search?q=productivity+tips
[Mon Jan 26 02:56:18.288413 2026] [:error] [pid 48920:tid 48987] [client 105.156.71.29:54921] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php"] [unique_id "aXZnUpsnZS3G6U7VdJMsCQAAAQM"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Mon Jan 26 02:56:23.303742 2026] [:error] [pid 48920:tid 48994] [client 105.156.71.29:56297] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php, referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Mon Jan 26 02:56:23.797633 2026] [:error] [pid 48920:tid 48988] [client 105.156.71.29:56297] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php"] [unique_id "aXZnV5snZS3G6U7VdJMsEQAAAQQ"], referer: https://www.reddit.com/r/all/
[Mon Jan 26 02:56:28.124589 2026] [:error] [pid 13569:tid 13615] [client 105.156.71.29:58814] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/config.ini"] [unique_id "aXZnXPjY_vt91DmOz5XjIQAAAYM"], referer: https://www.youtube.com/
[Mon Jan 26 02:56:28.632594 2026] [:error] [pid 13569:tid 13631] [client 105.156.71.29:58814] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/web.config"] [unique_id "aXZnXPjY_vt91DmOz5XjIwAAAZM"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Mon Jan 26 02:56:30.258523 2026] [:error] [pid 48920:tid 49000] [client 105.156.71.29:60934] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/app.config"] [unique_id "aXZnXpsnZS3G6U7VdJMsGAAAARA"], referer: https://www.google.de/
[Mon Jan 26 02:56:39.053481 2026] [:error] [pid 6612:tid 6630] [client 105.156.71.29:60639] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aXZnZw7OocbZdUpuWVtIFwAAABA"], referer: https://www.linkedin.com/feed/update/def456/
[Mon Jan 26 02:56:39.950946 2026] [:error] [pid 13569:tid 13623] [client 105.156.71.29:61050] [client 105.156.71.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "aXZnZ_jY_vt91DmOz5XjNgAAAYs"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Mon Jan 26 02:59:57.580957 2026] [:error] [pid 13569:tid 13614] [client 45.141.215.153:43566] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aXZoLfjY_vt91DmOz5Xj2QAAAYI"]
[Mon Jan 26 02:59:57.603353 2026] [:error] [pid 49084:tid 49090] [client 45.141.215.153:43580] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aXZoLZHUOXll3XccoO47VAAAAUQ"]
[Mon Jan 26 03:36:04.339668 2026] [:error] [pid 6738:tid 6770] [client 38.54.110.93:63002] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/env.js"] [unique_id "aXZwpGxKUXbdUVtnLFaINgAAAEg"]
[Mon Jan 26 03:36:04.394113 2026] [:error] [pid 6612:tid 6631] [client 38.54.110.93:62858] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/build/root.js"] [unique_id "aXZwpA7OocbZdUpuWVtOZQAAABE"]
[Mon Jan 26 03:36:04.396283 2026] [:error] [pid 49084:tid 49087] [client 38.54.110.93:61690] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bundle.js"] [unique_id "aXZwpJHUOXll3XccoO5DnQAAAUE"]
[Mon Jan 26 03:36:04.402317 2026] [:error] [pid 48919:tid 48956] [client 38.54.110.93:62276] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/settings.json"] [unique_id "aXZwpDVs1aLFg9jpyYrNrAAAAME"]
[Mon Jan 26 03:36:04.432754 2026] [:error] [pid 6612:tid 6620] [client 38.54.110.93:62052] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/main.js.map"] [unique_id "aXZwpA7OocbZdUpuWVtOZgAAAAY"]
[Mon Jan 26 03:36:04.456140 2026] [:error] [pid 48919:tid 48976] [client 38.54.110.93:62216] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/src/config.js"] [unique_id "aXZwpDVs1aLFg9jpyYrNrQAAANU"]
[Mon Jan 26 03:36:04.476495 2026] [:error] [pid 48918:tid 48934] [client 38.54.110.93:62450] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/serviceworker.js"] [unique_id "aXZwpLFdNV6RkULOt6FE_wAAAIY"]
[Mon Jan 26 03:36:04.477021 2026] [:error] [pid 48919:tid 48966] [client 38.54.110.93:62252] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/env-config.js"] [unique_id "aXZwpDVs1aLFg9jpyYrNrgAAAMs"]
[Mon Jan 26 03:36:04.478468 2026] [:error] [pid 6612:tid 6615] [client 38.54.110.93:62576] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/3.chunk.js"] [unique_id "aXZwpA7OocbZdUpuWVtOZwAAAAE"]
[Mon Jan 26 03:36:04.483135 2026] [:error] [pid 49084:tid 49107] [client 38.54.110.93:62164] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/runtime-main.js"] [unique_id "aXZwpJHUOXll3XccoO5DngAAAVU"]
[Mon Jan 26 03:36:04.587844 2026] [:error] [pid 48918:tid 48947] [client 38.54.110.93:62432] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sw.js"] [unique_id "aXZwpLFdNV6RkULOt6FFAQAAAJM"]
[Mon Jan 26 03:36:04.591070 2026] [:error] [pid 6738:tid 6778] [client 38.54.110.93:62620] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_next/static/chunks/1.js"] [unique_id "aXZwpGxKUXbdUVtnLFaINwAAAFA"]
[Mon Jan 26 03:36:04.594667 2026] [:error] [pid 48919:tid 48971] [client 38.54.110.93:62200] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/keys.js"] [unique_id "aXZwpDVs1aLFg9jpyYrNsAAAANA"]
[Mon Jan 26 03:36:04.661642 2026] [:error] [pid 6738:tid 6765] [client 38.54.110.93:63042] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.chunk.js"] [unique_id "aXZwpGxKUXbdUVtnLFaIOQAAAEM"]
[Mon Jan 26 03:36:04.669117 2026] [:error] [pid 6738:tid 6782] [client 38.54.110.93:62782] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_app/env.js"] [unique_id "aXZwpGxKUXbdUVtnLFaIOgAAAFQ"]
[Mon Jan 26 03:36:04.828262 2026] [:error] [pid 6612:tid 6627] [client 38.54.110.93:62034] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/bundle.js.map"] [unique_id "aXZwpA7OocbZdUpuWVtOaAAAAA0"]
[Mon Jan 26 03:36:04.829738 2026] [:error] [pid 49084:tid 49105] [client 38.54.110.93:62180] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/index.js"] [unique_id "aXZwpJHUOXll3XccoO5DnwAAAVM"]
[Mon Jan 26 03:36:04.829738 2026] [:error] [pid 48919:tid 48972] [client 38.54.110.93:62332] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/subscribe"] [unique_id "aXZwpDVs1aLFg9jpyYrNswAAANE"]
[Mon Jan 26 03:36:04.838067 2026] [:error] [pid 49084:tid 49099] [client 38.54.110.93:61740] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dist/main.js"] [unique_id "aXZwpJHUOXll3XccoO5DoAAAAU0"]
[Mon Jan 26 03:36:04.839511 2026] [:error] [pid 49084:tid 49100] [client 38.54.110.93:61714] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/runtime.js"] [unique_id "aXZwpJHUOXll3XccoO5DogAAAU4"]
[Mon Jan 26 03:36:04.840177 2026] [:error] [pid 6612:tid 6623] [client 38.54.110.93:61860] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/main.js"] [unique_id "aXZwpA7OocbZdUpuWVtOaQAAAAk"]
[Mon Jan 26 03:36:04.900105 2026] [:error] [pid 6738:tid 6786] [client 38.54.110.93:62502] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/v1/config"] [unique_id "aXZwpGxKUXbdUVtnLFaIPAAAAFg"]
[Mon Jan 26 03:36:04.900983 2026] [:error] [pid 48919:tid 48957] [client 38.54.110.93:62310] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/payment"] [unique_id "aXZwpDVs1aLFg9jpyYrNtgAAAMI"]
[Mon Jan 26 03:36:04.912649 2026] [:error] [pid 6612:tid 6616] [client 38.54.110.93:62552] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/webpack-runtime.js"] [unique_id "aXZwpA7OocbZdUpuWVtOawAAAAI"]
[Mon Jan 26 03:36:04.956333 2026] [:error] [pid 48918:tid 48937] [client 38.54.110.93:62000] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/static/js/main.js.map"] [unique_id "aXZwpLFdNV6RkULOt6FFBwAAAIk"]
[Mon Jan 26 03:36:04.966792 2026] [:error] [pid 6738:tid 6768] [client 38.54.110.93:61858] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/app.js"] [unique_id "aXZwpGxKUXbdUVtnLFaIPQAAAEY"]
[Mon Jan 26 03:36:04.969878 2026] [:error] [pid 18842:tid 18863] [client 38.54.110.93:62072] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/main.js.map"] [unique_id "aXZwpNpB7q_9Hs26mzhFhAAAAlI"]
[Mon Jan 26 03:36:04.970206 2026] [:error] [pid 18842:tid 18865] [client 38.54.110.93:62886] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/remix.config.js"] [unique_id "aXZwpNpB7q_9Hs26mzhFhQAAAlQ"]
[Mon Jan 26 03:36:05.050039 2026] [:error] [pid 6612:tid 6633] [client 38.54.110.93:62694] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vite/deps/_metadata.json"] [unique_id "aXZwpQ7OocbZdUpuWVtObAAAABM"]
[Mon Jan 26 03:36:05.054882 2026] [:error] [pid 48918:tid 48947] [client 38.54.110.93:62730] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vite.config.js"] [unique_id "aXZwpbFdNV6RkULOt6FFCQAAAJM"]
[Mon Jan 26 03:36:05.055338 2026] [:error] [pid 18842:tid 18869] [client 38.54.110.93:62868] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/root.tsx"] [unique_id "aXZwpdpB7q_9Hs26mzhFmAAAAlg"]
[Mon Jan 26 03:36:05.055890 2026] [:error] [pid 18842:tid 18864] [client 38.54.110.93:61852] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aXZwpdpB7q_9Hs26mzhFmQAAAlM"]
[Mon Jan 26 03:36:05.057361 2026] [:error] [pid 18842:tid 18868] [client 38.54.110.93:62872] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app/entry.client.tsx"] [unique_id "aXZwpdpB7q_9Hs26mzhFnAAAAlc"]
[Mon Jan 26 03:36:05.057250 2026] [:error] [pid 18842:tid 18861] [client 38.54.110.93:61778] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aXZwpdpB7q_9Hs26mzhFnQAAAlA"]
[Mon Jan 26 03:36:05.058257 2026] [:error] [pid 6738:tid 6770] [client 38.54.110.93:61702] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vendor.js"] [unique_id "aXZwpWxKUXbdUVtnLFaIQAAAAEg"]
[Mon Jan 26 03:36:05.058945 2026] [:error] [pid 18842:tid 18866] [client 38.54.110.93:61830] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/js/app.js"] [unique_id "aXZwpdpB7q_9Hs26mzhFmwAAAlU"]
[Mon Jan 26 03:36:05.059891 2026] [:error] [pid 18842:tid 18867] [client 38.54.110.93:63006] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/keys.js"] [unique_id "aXZwpdpB7q_9Hs26mzhFlwAAAlY"]
[Mon Jan 26 03:36:05.060892 2026] [:error] [pid 18842:tid 18862] [client 38.54.110.93:62986] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.js"] [unique_id "aXZwpdpB7q_9Hs26mzhFmgAAAlE"]
[Mon Jan 26 03:36:05.097746 2026] [:error] [pid 48920:tid 48990] [client 38.54.110.93:62152] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_nuxt/config.js"] [unique_id "aXZwpZsnZS3G6U7VdJMzMQAAAQY"]
[Mon Jan 26 03:36:05.098649 2026] [:error] [pid 48920:tid 48986] [client 38.54.110.93:62224] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/src/constants.js"] [unique_id "aXZwpZsnZS3G6U7VdJMzMgAAAQI"]
[Mon Jan 26 03:36:05.119342 2026] [:error] [pid 48918:tid 48938] [client 38.54.110.93:62048] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/index.js.map"] [unique_id "aXZwpbFdNV6RkULOt6FFCwAAAIo"]
[Mon Jan 26 03:36:05.119342 2026] [:error] [pid 18764:tid 18783] [client 38.54.110.93:61926] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chunk.js.map"] [unique_id "aXZwpVCABNzeL6qbEBRmGAAAAdE"]
[Mon Jan 26 03:36:05.120683 2026] [:error] [pid 18764:tid 18773] [client 38.54.110.93:62190] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/env.js"] [unique_id "aXZwpVCABNzeL6qbEBRmGgAAAcc"]
[Mon Jan 26 03:36:05.121020 2026] [:error] [pid 6738:tid 6782] [client 38.54.110.93:62270] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.json"] [unique_id "aXZwpWxKUXbdUVtnLFaIQQAAAFQ"]
[Mon Jan 26 03:36:05.121101 2026] [:error] [pid 48919:tid 48965] [client 38.54.110.93:62290] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXZwpTVs1aLFg9jpyYrNuQAAAMo"]
[Mon Jan 26 03:36:05.121453 2026] [:error] [pid 18764:tid 18781] [client 38.54.110.93:62124] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_next/static/chunks/pages/_app.js"] [unique_id "aXZwpVCABNzeL6qbEBRmGQAAAc8"]
[Mon Jan 26 03:36:05.156958 2026] [:error] [pid 48920:tid 48995] [client 38.54.110.93:61772] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/main.js"] [unique_id "aXZwpZsnZS3G6U7VdJMzMwAAAQs"]
[Mon Jan 26 03:36:05.157779 2026] [:error] [pid 18764:tid 18785] [client 38.54.110.93:61814] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/app.js"] [unique_id "aXZwpVCABNzeL6qbEBRmHAAAAdM"]
[Mon Jan 26 03:36:05.165579 2026] [:error] [pid 48919:tid 48980] [client 38.54.110.93:62360] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/asset-manifest.json"] [unique_id "aXZwpTVs1aLFg9jpyYrNugAAANg"]
[Mon Jan 26 03:36:05.166564 2026] [:error] [pid 48918:tid 48930] [client 38.54.110.93:61900] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js.map"] [unique_id "aXZwpbFdNV6RkULOt6FFDAAAAII"]
[Mon Jan 26 03:36:05.176927 2026] [:error] [pid 18797:tid 18814] [client 38.54.110.93:62562] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/webpack.runtime.js"] [unique_id "aXZwpe8xJhKC38ipIF4m3wAAAg8"]
[Mon Jan 26 03:36:05.190667 2026] [:error] [pid 48918:tid 48951] [client 38.54.110.93:61876] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/config.js"] [unique_id "aXZwpbFdNV6RkULOt6FFDQAAAJc"]
[Mon Jan 26 03:36:05.191044 2026] [:error] [pid 48918:tid 48952] [client 38.54.110.93:62238] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/runtime-config.js"] [unique_id "aXZwpbFdNV6RkULOt6FFDgAAAJg"]
[Mon Jan 26 03:36:05.191195 2026] [:error] [pid 48918:tid 48933] [client 38.54.110.93:62220] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/src/env.js"] [unique_id "aXZwpbFdNV6RkULOt6FFDwAAAIU"]
[Mon Jan 26 03:36:05.192302 2026] [:error] [pid 48919:tid 48969] [client 38.54.110.93:62368] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vite/manifest.json"] [unique_id "aXZwpTVs1aLFg9jpyYrNuwAAAM4"]
[Mon Jan 26 03:36:05.192916 2026] [:error] [pid 6738:tid 6765] [client 38.54.110.93:62386] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manifest.json"] [unique_id "aXZwpWxKUXbdUVtnLFaIQgAAAEM"]
[Mon Jan 26 03:36:05.226426 2026] [:error] [pid 6738:tid 6780] [client 38.54.110.93:61648] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.js"] [unique_id "aXZwpWxKUXbdUVtnLFaIQwAAAFI"]
[Mon Jan 26 03:36:05.232842 2026] [:error] [pid 49084:tid 49092] [client 38.54.110.93:61730] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dist/app.js"] [unique_id "aXZwpZHUOXll3XccoO5DpQAAAUY"]
[Mon Jan 26 03:36:05.233781 2026] [:error] [pid 6612:tid 6614] [client 38.54.110.93:61980] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/bundle.js.map"] [unique_id "aXZwpQ7OocbZdUpuWVtObQAAAAA"]
[Mon Jan 26 03:36:05.249141 2026] [:error] [pid 18797:tid 18808] [client 38.54.110.93:62754] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_app/immutable/chunks/index.js"] [unique_id "aXZwpe8xJhKC38ipIF4m4AAAAgk"]
[Mon Jan 26 03:36:05.257040 2026] [:error] [pid 18797:tid 18812] [client 38.54.110.93:62810] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/svelte.config.js"] [unique_id "aXZwpe8xJhKC38ipIF4m4gAAAg0"]
[Mon Jan 26 03:36:05.261272 2026] [:error] [pid 48919:tid 48976] [client 38.54.110.93:61892] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bundle.js.map"] [unique_id "aXZwpTVs1aLFg9jpyYrNvAAAANU"]
[Mon Jan 26 03:36:05.263071 2026] [:error] [pid 48919:tid 48955] [client 38.54.110.93:62120] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_next/static/chunks/webpack.js"] [unique_id "aXZwpTVs1aLFg9jpyYrNvQAAAMA"]
[Mon Jan 26 03:36:05.265686 2026] [:error] [pid 18797:tid 18822] [client 38.54.110.93:62280] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/env.json"] [unique_id "aXZwpe8xJhKC38ipIF4m4wAAAhc"]
[Mon Jan 26 03:36:05.284801 2026] [:error] [pid 49084:tid 49106] [client 38.54.110.93:61854] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/js/main.js"] [unique_id "aXZwpZHUOXll3XccoO5DpgAAAVQ"]
[Mon Jan 26 03:36:05.292439 2026] [:error] [pid 18764:tid 18782] [client 38.54.110.93:61722] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dist/bundle.js"] [unique_id "aXZwpVCABNzeL6qbEBRmHgAAAdA"]
[Mon Jan 26 03:36:05.304869 2026] [:error] [pid 49084:tid 49110] [client 38.54.110.93:61806] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.js"] [unique_id "aXZwpZHUOXll3XccoO5DpwAAAVg"]
[Mon Jan 26 03:36:05.390935 2026] [:error] [pid 18797:tid 18815] [client 38.54.110.93:62456] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/workbox.js"] [unique_id "aXZwpe8xJhKC38ipIF4m5AAAAhA"]
[Mon Jan 26 03:36:05.445949 2026] [:error] [pid 48918:tid 48946] [client 38.54.110.93:62416] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_next/static/chunks/_ssgManifest.js"] [unique_id "aXZwpbFdNV6RkULOt6FFEQAAAJI"]
[Mon Jan 26 03:36:05.450008 2026] [:error] [pid 6612:tid 6631] [client 38.54.110.93:61668] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/payment.js"] [unique_id "aXZwpQ7OocbZdUpuWVtObwAAABE"]
[Mon Jan 26 03:36:05.451165 2026] [:error] [pid 49084:tid 49087] [client 38.54.110.93:61666] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/checkout.js"] [unique_id "aXZwpZHUOXll3XccoO5DqAAAAUE"]
[Mon Jan 26 03:36:05.463476 2026] [:error] [pid 6612:tid 6629] [client 38.54.110.93:62474] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/bundle.js"] [unique_id "aXZwpQ7OocbZdUpuWVtOcAAAAA8"]
[Mon Jan 26 03:36:05.666049 2026] [:error] [pid 6612:tid 6632] [client 38.54.110.93:62900] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/astro.config.mjs"] [unique_id "aXZwpQ7OocbZdUpuWVtOcQAAABI"]
[Mon Jan 26 03:36:05.682400 2026] [:error] [pid 18797:tid 18807] [client 38.54.110.93:62846] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/build/manifest.json"] [unique_id "aXZwpe8xJhKC38ipIF4m5QAAAgg"]
[Mon Jan 26 03:36:05.837643 2026] [:error] [pid 49084:tid 49090] [client 38.54.110.93:62756] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asset-manifest.json"] [unique_id "aXZwpZHUOXll3XccoO5DqQAAAUQ"]
[Mon Jan 26 03:36:05.837684 2026] [:error] [pid 6612:tid 6624] [client 38.54.110.93:61908] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vendor.js.map"] [unique_id "aXZwpQ7OocbZdUpuWVtOcwAAAAo"]
[Mon Jan 26 03:36:05.838306 2026] [:error] [pid 13569:tid 13623] [client 38.54.110.93:62020] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/index.js"] [unique_id "aXZwpfjY_vt91DmOz5XuWAAAAYs"]
[Mon Jan 26 03:36:05.838460 2026] [:error] [pid 49084:tid 49088] [client 38.54.110.93:61796] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/4.chunk.js"] [unique_id "aXZwpZHUOXll3XccoO5DqgAAAUI"]
[Mon Jan 26 03:36:05.838865 2026] [:error] [pid 6612:tid 6637] [client 38.54.110.93:62862] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/settings"] [unique_id "aXZwpQ7OocbZdUpuWVtOcgAAABc"]
[Mon Jan 26 03:36:05.842483 2026] [:error] [pid 18797:tid 18810] [client 38.54.110.93:62830] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/root.js"] [unique_id "aXZwpe8xJhKC38ipIF4m5gAAAgs"]
[Mon Jan 26 03:36:05.843311 2026] [:error] [pid 18797:tid 18818] [client 38.54.110.93:62370] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_astro/page.js"] [unique_id "aXZwpe8xJhKC38ipIF4m5wAAAhM"]
[Mon Jan 26 03:36:05.844716 2026] [:error] [pid 6738:tid 6762] [client 38.54.110.93:62590] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/_astro/hoisted.js"] [unique_id "aXZwpWxKUXbdUVtnLFaISAAAAEA"]
[Mon Jan 26 03:36:05.879785 2026] [:error] [pid 6612:tid 6626] [client 38.54.110.93:62774] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dist/solid.js"] [unique_id "aXZwpQ7OocbZdUpuWVtOdAAAAAw"]
[Mon Jan 26 03:36:05.879866 2026] [:error] [pid 18797:tid 18821] [client 38.54.110.93:62114] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.astro/types.d.ts"] [unique_id "aXZwpe8xJhKC38ipIF4m6AAAAhY"]
[Mon Jan 26 03:36:05.944679 2026] [:error] [pid 6738:tid 6771] [client 38.54.110.93:62964] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.cache/page-ssr/routes/render-page.js"] [unique_id "aXZwpWxKUXbdUVtnLFaISQAAAEk"]
[Mon Jan 26 03:36:05.954528 2026] [:error] [pid 18764:tid 18768] [client 38.54.110.93:61750] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/stripe.js"] [unique_id "aXZwpVCABNzeL6qbEBRmIQAAAcI"]
[Mon Jan 26 03:36:05.962970 2026] [:error] [pid 18764:tid 18769] [client 38.54.110.93:61842] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/app.js"] [unique_id "aXZwpVCABNzeL6qbEBRmIgAAAcM"]
[Mon Jan 26 03:36:05.962970 2026] [:error] [pid 13569:tid 13630] [client 38.54.110.93:61794] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build/static/js/bundle.js"] [unique_id "aXZwpfjY_vt91DmOz5XuWQAAAZI"]
[Mon Jan 26 03:36:05.963204 2026] [:error] [pid 6612:tid 6620] [client 38.54.110.93:62014] [client 38.54.110.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.js.map"] [unique_id "aXZwpQ7OocbZdUpuWVtOdgAAAAY"]
[Mon Jan 26 04:30:16.806786 2026] [:error] [pid 24558:tid 24625] [client 159.203.3.128:65528] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXZ9WAo1PXqeJqIMTQbsaAAAAIQ"]
[Mon Jan 26 04:30:17.243311 2026] [:error] [pid 24666:tid 24668] [client 159.203.3.128:49387] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXZ9WZmH-L0_jbK3i9EE8QAAAMA"]
[Mon Jan 26 04:30:17.680794 2026] [:error] [pid 61252:tid 61268] [client 159.203.3.128:49605] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9WbrGlf8FG2etxUCq8gAAAQ4"]
[Mon Jan 26 05:41:21.146406 2026] [:error] [pid 24558:tid 24622] [client 36.111.67.189:34477] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXaOAQo1PXqeJqIMTQb4kQAAAIE"]
[Mon Jan 26 11:40:35.613135 2026] [:error] [pid 61286:tid 61298] [client 150.109.230.210:34492] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXbiM8nVt687wYGMPn_A_AAAAUg"]
[Mon Jan 26 12:26:21.060706 2026] [:error] [pid 24557:tid 24616] [client 159.89.161.202:49553] [client 159.89.161.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.161.202, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXbs7erlG7Vm9pxV14ywZAAAAFY"]
[Mon Jan 26 12:26:21.065508 2026] [:error] [pid 24557:tid 24616] [client 159.89.161.202:49553] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Jan 26 18:17:13.090179 2026] [:error] [pid 61252:tid 61270] [client 123.187.240.242:49602] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXc_KbrGlf8FG2etxUB1pgAAARA"]
[Mon Jan 26 22:07:55.481117 2026] [:error] [pid 24556:tid 24565] [client 45.130.203.231:26401] [client 45.130.203.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "aXd1O0yDW1_EbgDa3XJ3KAAAAAA"]
[Mon Jan 26 23:14:12.767934 2026] [:error] [pid 24556:tid 24582] [client 45.133.5.90:62085] [client 45.133.5.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.90, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXeExEyDW1_EbgDa3XKFnwAAABE"]
[Mon Jan 26 23:14:12.770600 2026] [:error] [pid 24556:tid 24582] [client 45.133.5.90:62085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Jan 26 23:56:50.538895 2026] [:error] [pid 24557:tid 24612] [client 9.163.251.5:57591] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:56:50.786145 2026] [:error] [pid 24557:tid 24610] [client 9.163.251.5:57591] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:56:51.038128 2026] [:error] [pid 24557:tid 24609] [client 9.163.251.5:57591] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:56:51.284233 2026] [:error] [pid 24557:tid 24602] [client 9.163.251.5:57591] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:57:02.304884 2026] [:error] [pid 24557:tid 24607] [client 47.84.37.124:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:57:02.481236 2026] [:error] [pid 24557:tid 24595] [client 47.84.37.124:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:57:02.656949 2026] [:error] [pid 24557:tid 24603] [client 47.84.37.124:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 23:57:02.832832 2026] [:error] [pid 24557:tid 24617] [client 47.84.37.124:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 04:45:21.755342 2026] [:error] [pid 7454:tid 7521] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Jan 27 04:45:21.928666 2026] [:error] [pid 7454:tid 7530] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Tue Jan 27 04:45:22.054293 2026] [:error] [pid 7454:tid 7539] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Tue Jan 27 04:45:22.180748 2026] [:error] [pid 7454:tid 7537] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Jan 27 04:45:22.307592 2026] [:error] [pid 7454:tid 7527] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Tue Jan 27 04:45:22.437840 2026] [:error] [pid 7454:tid 7534] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Tue Jan 27 04:45:22.657295 2026] [:error] [pid 7454:tid 7517] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Jan 27 04:45:22.799694 2026] [:error] [pid 7454:tid 7532] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Tue Jan 27 04:45:22.932765 2026] [:error] [pid 7454:tid 7526] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue Jan 27 04:45:23.058944 2026] [:error] [pid 7454:tid 7529] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Jan 27 04:45:23.183679 2026] [:error] [pid 7454:tid 7524] [client 20.89.233.56:26252] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Jan 27 04:45:23.355592 2026] [:error] [pid 7454:tid 7520] [client 20.89.233.56:26252] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aXfSY5ltCoZEfMmfl8BE2gAAAIQ"]
[Tue Jan 27 04:45:23.844856 2026] [:error] [pid 7453:tid 7502] [client 20.89.233.56:29624] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aXfSYxfsyA2ws_ADquiFBAAAAE0"]
[Tue Jan 27 04:45:24.335754 2026] [:error] [pid 7453:tid 7513] [client 20.89.233.56:29600] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aXfSZBfsyA2ws_ADquiFBgAAAFg"]
[Tue Jan 27 04:45:24.838370 2026] [:error] [pid 7452:tid 7469] [client 20.89.233.56:26241] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aXfSZGlXocEpHDB6FUZciwAAAAg"]
[Tue Jan 27 05:06:17.433804 2026] [:error] [pid 7453:tid 7491] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Jan 27 05:06:17.576673 2026] [:error] [pid 7453:tid 7507] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/bnn_.php
[Tue Jan 27 05:06:17.738824 2026] [:error] [pid 7453:tid 7511] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/35.php
[Tue Jan 27 05:06:17.888646 2026] [:error] [pid 7453:tid 7504] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/sidfile.php
[Tue Jan 27 05:06:18.051113 2026] [:error] [pid 7453:tid 7496] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/rum.php
[Tue Jan 27 05:06:18.206174 2026] [:error] [pid 7453:tid 7513] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Jan 27 05:06:18.368935 2026] [:error] [pid 7453:tid 7503] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Jan 27 05:06:18.532497 2026] [:error] [pid 7453:tid 7492] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Tue Jan 27 05:06:18.674641 2026] [:error] [pid 7453:tid 7502] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aoisuki.php
[Tue Jan 27 05:06:18.839475 2026] [:error] [pid 7453:tid 7495] [client 20.197.56.186:2377] File does not exist: /usr/local/apache/htdocs/suspended-page/naritai.php
[Tue Jan 27 05:06:18.977836 2026] [:error] [pid 7453:tid 7491] [client 20.197.56.186:2377] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXfXShfsyA2ws_ADquiJdwAAAEI"]
[Tue Jan 27 05:06:23.959839 2026] [:error] [pid 7454:tid 7519] [client 20.197.56.186:7499] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXfXT5ltCoZEfMmfl8BOvgAAAIM"]
[Tue Jan 27 05:07:04.266733 2026] [:error] [pid 41780:tid 41793] [client 20.197.56.186:18599] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXfXeFvu-XLQ0TaZ4FFbBQAAAQs"]
[Tue Jan 27 05:07:05.477810 2026] [:error] [pid 41780:tid 41784] [client 20.197.56.186:14347] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXfXeVvu-XLQ0TaZ4FFbBgAAAQI"]
[Tue Jan 27 05:07:08.208662 2026] [:error] [pid 41780:tid 41786] [client 20.197.56.186:18596] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXfXfFvu-XLQ0TaZ4FFbBwAAAQQ"]
[Tue Jan 27 05:07:10.528599 2026] [:error] [pid 7453:tid 7495] [client 20.197.56.186:2671] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXfXfhfsyA2ws_ADquiJkQAAAEY"]
[Tue Jan 27 05:07:11.514143 2026] [:error] [pid 7452:tid 7482] [client 20.197.56.186:2648] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXfXf2lXocEpHDB6FUZh6gAAABU"]
[Tue Jan 27 05:07:12.501318 2026] [:error] [pid 7454:tid 7536] [client 20.197.56.186:9040] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXfXgJltCoZEfMmfl8BO6gAAAJQ"]
[Tue Jan 27 05:07:14.421628 2026] [:error] [pid 7454:tid 7532] [client 20.197.56.186:10046] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXfXgpltCoZEfMmfl8BO7wAAAJA"]
[Tue Jan 27 05:07:18.668774 2026] [:error] [pid 7454:tid 7524] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/geaitasa.php
[Tue Jan 27 05:07:18.825635 2026] [:error] [pid 7454:tid 7540] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Tue Jan 27 05:07:18.968849 2026] [:error] [pid 7454:tid 7520] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/reze.php
[Tue Jan 27 05:07:19.414409 2026] [:error] [pid 7454:tid 7527] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/11092null.php
[Tue Jan 27 05:07:19.571315 2026] [:error] [pid 7454:tid 7522] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o2.php
[Tue Jan 27 05:07:19.729314 2026] [:error] [pid 7454:tid 7525] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Tue Jan 27 05:07:19.870485 2026] [:error] [pid 7454:tid 7534] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Jan 27 05:07:20.014800 2026] [:error] [pid 7454:tid 7538] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/zz8.php
[Tue Jan 27 05:07:20.154355 2026] [:error] [pid 7454:tid 7518] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Tue Jan 27 05:07:20.311027 2026] [:error] [pid 7454:tid 7528] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/ah21.php
[Tue Jan 27 05:07:20.457073 2026] [:error] [pid 7454:tid 7517] [client 20.197.56.186:14340] File does not exist: /usr/local/apache/htdocs/suspended-page/ah22.php
[Tue Jan 27 05:07:20.594331 2026] [:error] [pid 7454:tid 7530] [client 20.197.56.186:14340] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws38.php"] [unique_id "aXfXiJltCoZEfMmfl8BPCAAAAI4"]
[Tue Jan 27 05:07:26.836129 2026] [:error] [pid 7452:tid 7467] [client 20.197.56.186:2662] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws38.php"] [unique_id "aXfXjmlXocEpHDB6FUZh8gAAAAY"]
[Tue Jan 27 05:07:40.016912 2026] [:error] [pid 7561:tid 7578] [client 20.197.56.186:14396] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXfXnLXGI6mgvHQqkXwFqgAAAM4"]
[Tue Jan 27 05:07:40.700426 2026] [:error] [pid 7453:tid 7499] [client 20.197.56.186:2461] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXfXnBfsyA2ws_ADquiJmQAAAEo"]
[Tue Jan 27 05:08:06.664644 2026] [:error] [pid 7561:tid 7565] [client 20.197.56.186:9084] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploaxa1.php"] [unique_id "aXfXtrXGI6mgvHQqkXwFvgAAAME"]
[Tue Jan 27 05:08:08.010729 2026] [:error] [pid 7453:tid 7510] [client 20.197.56.186:18572] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploaxa1.php"] [unique_id "aXfXuBfsyA2ws_ADquiJrQAAAFU"]
[Tue Jan 27 05:08:10.220102 2026] [:error] [pid 7561:tid 7568] [client 20.197.56.186:18579] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXfXurXGI6mgvHQqkXwFvwAAAMQ"]
[Tue Jan 27 05:08:13.560477 2026] [:error] [pid 41780:tid 41793] [client 20.197.56.186:18611] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXfXvVvu-XLQ0TaZ4FFbFgAAAQs"]
[Tue Jan 27 05:08:18.201813 2026] [:error] [pid 7453:tid 7509] [client 20.197.56.186:9042] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXfXwhfsyA2ws_ADquiJsgAAAFQ"]
[Tue Jan 27 05:08:19.047398 2026] [:error] [pid 7561:tid 7584] [client 20.197.56.186:14379] [client 20.197.56.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXfXw7XGI6mgvHQqkXwFxQAAANQ"]
[Tue Jan 27 05:08:20.295462 2026] [:error] [pid 7454:tid 7516] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/rzzaq.php
[Tue Jan 27 05:08:20.456136 2026] [:error] [pid 7454:tid 7537] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/abtpn.php
[Tue Jan 27 05:08:20.612907 2026] [:error] [pid 7454:tid 7521] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/my1.php
[Tue Jan 27 05:08:20.811904 2026] [:error] [pid 7454:tid 7527] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/taktak.php
[Tue Jan 27 05:08:21.189270 2026] [:error] [pid 7454:tid 7529] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Tue Jan 27 05:08:21.349495 2026] [:error] [pid 7454:tid 7535] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Tue Jan 27 05:08:21.506155 2026] [:error] [pid 7454:tid 7538] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/ypukprhr.php
[Tue Jan 27 05:08:21.655046 2026] [:error] [pid 7454:tid 7522] [client 20.197.56.186:2471] File does not exist: /usr/local/apache/htdocs/suspended-page/tcnyz.php
[Tue Jan 27 09:14:12.871485 2026] [:error] [pid 7561:tid 7585] [client 43.204.133.228:48846] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 09:14:13.113157 2026] [:error] [pid 7561:tid 7577] [client 43.204.133.228:48846] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 09:14:13.414408 2026] [:error] [pid 7561:tid 7570] [client 43.204.133.228:48846] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 09:14:13.656713 2026] [:error] [pid 7561:tid 7583] [client 43.204.133.228:48846] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 11:42:02.383841 2026] [:error] [pid 48445:tid 48465] [client 64.225.49.30:54095] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aXg0ChFh_QNUhZ0HkzeTTwAAAZA"], referer: binance.com
[Tue Jan 27 13:25:05.126624 2026] [:error] [pid 41780:tid 41789] [client 182.44.12.37:42603] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXhMMVvu-XLQ0TaZ4FHVSwAAAQc"]
[Tue Jan 27 13:32:20.785083 2026] [:error] [pid 7454:tid 7524] [client 50.7.157.45:58426] [client 50.7.157.45] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=application/javascript"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXhN5JltCoZEfMmfl8DqQwAAAIg"]
[Tue Jan 27 16:55:14.568850 2026] [:error] [pid 48528:tid 48538] [client 49.51.132.100:48808] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXh9cgOGRrquT9N7CZpcBgAAAgg"]
[Tue Jan 27 17:05:04.373116 2026] [:error] [pid 7561:tid 7584] [client 43.165.67.57:47282] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXh_wLXGI6mgvHQqkXy8tAAAANQ"]
[Tue Jan 27 20:04:41.117431 2026] [:error] [pid 48662:tid 48686] [client 43.140.247.223:54002] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXip2eD8iESUP9uRiRPvdQAAApI"]
[Tue Jan 27 22:52:35.739429 2026] [:error] [pid 39017:tid 39057] [client 192.209.63.200:41724] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 22:52:35.945044 2026] [:error] [pid 39017:tid 39054] [client 192.209.63.200:41724] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 22:52:36.150853 2026] [:error] [pid 39017:tid 39070] [client 192.209.63.200:41724] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 22:52:36.355887 2026] [:error] [pid 39017:tid 39056] [client 192.209.63.200:41724] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 23:32:32.144376 2026] [:error] [pid 48446:tid 48487] [client 150.136.172.193:60958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 23:32:32.352769 2026] [:error] [pid 48446:tid 48491] [client 150.136.172.193:60958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 23:32:32.561142 2026] [:error] [pid 48446:tid 48502] [client 150.136.172.193:60958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Jan 27 23:32:34.017736 2026] [:error] [pid 48446:tid 48493] [client 150.136.172.193:60958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Wed Jan 28 00:00:48.270164 2026] [:error] [pid 7454:tid 7518] [client 43.159.132.207:50156] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXjhMJltCoZEfMmfl8A1KQAAAII"]
[Wed Jan 28 01:22:55.600909 2026] [:error] [pid 24426:tid 24469] [client 152.53.187.237:34740] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20vip.aspx"] [unique_id "aXj0b_bw8B_M5J5XrXT0TQAAAUs"]
[Wed Jan 28 01:22:57.973492 2026] [:error] [pid 24425:tid 24453] [client 152.53.187.237:52580] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXj0cR_qUCA3SusVe0uAlwAAARc"]
[Wed Jan 28 01:23:00.667421 2026] [:error] [pid 24427:tid 24503] [client 152.53.187.237:51000] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aXj0dE5-wqSNb5f_hOL5bQAAAZI"]
[Wed Jan 28 01:23:04.284178 2026] [:error] [pid 24427:tid 24494] [client 152.53.187.237:51006] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3slotxo.aspx"] [unique_id "aXj0eE5-wqSNb5f_hOL5cAAAAYk"]
[Wed Jan 28 01:23:06.595433 2026] [:error] [pid 41678:tid 41712] [client 152.53.187.237:51010] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%201688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXj0eqja89ZyPVwMdiggEAAAABM"]
[Wed Jan 28 01:23:09.455809 2026] [:error] [pid 41678:tid 41699] [client 152.53.187.237:51014] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%202024.aspx"] [unique_id "aXj0faja89ZyPVwMdiggGQAAAAY"]
[Wed Jan 28 01:23:12.040822 2026] [:error] [pid 24511:tid 24529] [client 152.53.187.237:40132] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx"] [unique_id "aXj0gGmoieLyDzs0AST75AAAAI4"]
[Wed Jan 28 01:23:14.904962 2026] [:error] [pid 24426:tid 24482] [client 152.53.187.237:40146] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXj0gvbw8B_M5J5XrXT0fwAAAVg"]
[Wed Jan 28 01:23:17.598673 2026] [:error] [pid 24511:tid 24534] [client 152.53.187.237:40152] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXj0hWmoieLyDzs0AST76AAAAJM"]
[Wed Jan 28 01:23:20.056755 2026] [:error] [pid 24425:tid 24436] [client 152.53.187.237:40164] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aXj0iB_qUCA3SusVe0uAswAAAQY"]
[Wed Jan 28 01:23:36.135862 2026] [:error] [pid 24425:tid 24430] [client 152.53.187.237:65326] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXj0mB_qUCA3SusVe0uAxwAAAQA"]
[Wed Jan 28 01:23:38.368146 2026] [:error] [pid 41678:tid 41700] [client 152.53.187.237:65342] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXj0mqja89ZyPVwMdiggTwAAAAc"]
[Wed Jan 28 01:23:41.752756 2026] [:error] [pid 24511:tid 24524] [client 152.53.187.237:55446] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXj0nWmoieLyDzs0AST8AAAAAIk"]
[Wed Jan 28 01:23:44.644381 2026] [:error] [pid 24511:tid 24535] [client 152.53.187.237:55452] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXj0oGmoieLyDzs0AST8AwAAAJQ"]
[Wed Jan 28 01:23:47.630819 2026] [:error] [pid 24425:tid 24450] [client 152.53.187.237:55458] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXj0ox_qUCA3SusVe0uA0QAAARQ"]
[Wed Jan 28 01:23:50.228811 2026] [:error] [pid 24427:tid 24500] [client 152.53.187.237:55464] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C888.aspx"] [unique_id "aXj0pk5-wqSNb5f_hOL5qAAAAY8"]
[Wed Jan 28 01:24:24.808492 2026] [:error] [pid 24427:tid 24508] [client 152.53.187.237:35344] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXj0yE5-wqSNb5f_hOL5zwAAAZc"]
[Wed Jan 28 01:24:27.481182 2026] [:error] [pid 41678:tid 41699] [client 152.53.187.237:65472] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXj0y6ja89ZyPVwMdiggeQAAAAY"]
[Wed Jan 28 01:24:30.875332 2026] [:error] [pid 24511:tid 24531] [client 152.53.187.237:39880] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777.aspx"] [unique_id "aXj0zmmoieLyDzs0AST8IgAAAJA"]
[Wed Jan 28 01:24:33.668288 2026] [:error] [pid 24425:tid 24430] [client 152.53.187.237:39882] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/victory%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXj00R_qUCA3SusVe0uA6wAAAQA"]
[Wed Jan 28 01:24:37.183030 2026] [:error] [pid 41678:tid 41699] [client 152.53.187.237:39898] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/woloplay%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXj01aja89ZyPVwMdiggiwAAAAY"]
[Wed Jan 28 02:39:01.338915 2026] [:error] [pid 24511:tid 24529] [client 182.44.67.97:59942] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXkGRWmoieLyDzs0ASQYZgAAAI4"]
[Wed Jan 28 05:09:55.653481 2026] [:error] [pid 17535:tid 17545] [client 45.154.138.7:55267] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Jan 28 05:09:56.593777 2026] [:error] [pid 17535:tid 17562] [client 45.154.138.7:55267] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Jan 28 05:09:57.069532 2026] [:error] [pid 17535:tid 17542] [client 45.154.138.7:55267] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkppa3QiSMgVscnN5L_ugAAAMQ"]
[Wed Jan 28 05:09:57.995335 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.6:46175] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Jan 28 05:09:58.457662 2026] [:error] [pid 17426:tid 17513] [client 45.154.138.6:46175] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkppk8zvf_03BnziRfn6AAAAJg"]
[Wed Jan 28 05:09:59.383902 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.23:62947] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Jan 28 05:10:00.321982 2026] [:error] [pid 17425:tid 17486] [client 45.154.138.23:62947] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Jan 28 05:10:00.929056 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.23:62947] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Jan 28 05:10:01.415100 2026] [:error] [pid 17425:tid 17463] [client 45.154.138.23:62947] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Jan 28 05:10:02.347633 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.23:62947] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkpqqrcODKH1Dl7aZAOwQAAAEg"]
[Wed Jan 28 05:10:03.272082 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.33:26281] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Jan 28 05:10:03.735997 2026] [:error] [pid 17424:tid 17448] [client 45.154.138.33:26281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Jan 28 05:10:04.196683 2026] [:error] [pid 17424:tid 17452] [client 45.154.138.33:26281] [client 45.154.138.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkprGRvtDRvGDe-pIsx1wAAABM"]
[Wed Jan 28 05:10:05.145703 2026] [:error] [pid 17535:tid 17544] [client 45.154.138.44:22135] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkpra3QiSMgVscnN5L_6QAAAMY"]
[Wed Jan 28 05:10:06.068135 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.27:43851] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkprqrcODKH1Dl7aZAO1AAAAEA"]
[Wed Jan 28 05:10:07.469006 2026] [:error] [pid 17426:tid 17490] [client 45.154.138.5:35813] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkpr08zvf_03BnziRfoHgAAAIE"]
[Wed Jan 28 05:10:08.850860 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.11:24761] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXkpsE8zvf_03BnziRfoJQAAAJU"]
[Wed Jan 28 05:10:10.704007 2026] [:error] [pid 64842:tid 64852] [client 45.154.138.20:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Jan 28 05:10:12.095771 2026] [:error] [pid 64842:tid 64852] [client 45.154.138.20:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Jan 28 05:10:12.558042 2026] [:error] [pid 64842:tid 64856] [client 45.154.138.20:58011] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXkptFuAAQZ5AN_SnDbjBgAAAUw"]
[Wed Jan 28 05:10:13.478000 2026] [:error] [pid 17426:tid 17497] [client 45.154.138.5:25821] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aXkptU8zvf_03BnziRfoUQAAAIg"]
[Wed Jan 28 05:10:14.874050 2026] [:error] [pid 17424:tid 17447] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Jan 28 05:10:15.338203 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Wed Jan 28 05:10:15.802452 2026] [:error] [pid 17424:tid 17449] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Jan 28 05:10:16.274267 2026] [:error] [pid 17424:tid 17455] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Jan 28 05:10:16.742702 2026] [:error] [pid 17424:tid 17444] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Wed Jan 28 05:10:17.207626 2026] [:error] [pid 17424:tid 17435] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Wed Jan 28 05:10:17.672567 2026] [:error] [pid 17424:tid 17439] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Wed Jan 28 05:10:18.144091 2026] [:error] [pid 17424:tid 17444] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Jan 28 05:10:18.610238 2026] [:error] [pid 17424:tid 17443] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Wed Jan 28 05:10:19.075173 2026] [:error] [pid 17424:tid 17446] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Jan 28 05:10:19.553190 2026] [:error] [pid 17424:tid 17456] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Wed Jan 28 05:10:20.033320 2026] [:error] [pid 17424:tid 17433] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Jan 28 05:10:20.497675 2026] [:error] [pid 17424:tid 17443] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Jan 28 05:10:20.973971 2026] [:error] [pid 17424:tid 17435] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Wed Jan 28 05:10:23.331361 2026] [:error] [pid 17424:tid 17435] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Wed Jan 28 05:10:23.794707 2026] [:error] [pid 17424:tid 17440] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Jan 28 05:10:24.262458 2026] [:error] [pid 17424:tid 17436] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Wed Jan 28 05:10:24.729821 2026] [:error] [pid 17424:tid 17444] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Jan 28 05:10:25.191865 2026] [:error] [pid 17424:tid 17435] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Wed Jan 28 05:10:25.660713 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Jan 28 05:10:26.133317 2026] [:error] [pid 17424:tid 17448] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Wed Jan 28 05:10:28.108122 2026] [:error] [pid 17424:tid 17448] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Jan 28 05:10:28.586594 2026] [:error] [pid 17424:tid 17438] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Jan 28 05:10:29.053636 2026] [:error] [pid 17424:tid 17442] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Jan 28 05:10:29.519871 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Jan 28 05:10:30.013425 2026] [:error] [pid 17424:tid 17448] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Jan 28 05:10:30.476556 2026] [:error] [pid 17424:tid 17441] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Jan 28 05:10:30.968588 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Wed Jan 28 05:10:31.439654 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Wed Jan 28 05:10:31.904636 2026] [:error] [pid 17424:tid 17440] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Jan 28 05:10:32.388136 2026] [:error] [pid 17424:tid 17444] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Wed Jan 28 05:10:32.852080 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Wed Jan 28 05:10:33.317919 2026] [:error] [pid 17424:tid 17437] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Jan 28 05:10:33.779040 2026] [:error] [pid 17424:tid 17453] [client 45.154.138.235:36155] [client 45.154.138.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.235, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXkpyWRvtDRvGDe-pIsy2QAAABQ"]
[Wed Jan 28 05:10:33.785408 2026] [:error] [pid 17424:tid 17453] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Jan 28 05:10:34.716823 2026] [:error] [pid 17424:tid 17455] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Wed Jan 28 05:10:35.181720 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.235:36155] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Jan 28 05:10:35.641845 2026] [:error] [pid 17424:tid 17445] [client 45.154.138.235:36155] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aXkpy2RvtDRvGDe-pIsy6QAAAAw"]
[Wed Jan 28 05:10:36.576309 2026] [:error] [pid 64842:tid 64854] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Wed Jan 28 05:10:37.041051 2026] [:error] [pid 64842:tid 64857] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Jan 28 05:10:37.986689 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Wed Jan 28 05:10:38.453228 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Wed Jan 28 05:10:38.915567 2026] [:error] [pid 64842:tid 64845] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Wed Jan 28 05:10:39.380831 2026] [:error] [pid 64842:tid 64851] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Wed Jan 28 05:10:39.844904 2026] [:error] [pid 64842:tid 64868] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Wed Jan 28 05:10:40.307119 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Wed Jan 28 05:10:40.771818 2026] [:error] [pid 64842:tid 64860] [client 45.154.138.34:34013] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Wed Jan 28 05:10:41.699482 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.34:34013] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aXkp0VuAAQZ5AN_SnDbj8gAAAUQ"]
[Wed Jan 28 05:10:42.624693 2026] [:error] [pid 64842:tid 64864] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Wed Jan 28 05:10:43.088197 2026] [:error] [pid 64842:tid 64851] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Wed Jan 28 05:10:45.441069 2026] [:error] [pid 64842:tid 64868] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Jan 28 05:10:45.905017 2026] [:error] [pid 64842:tid 64856] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Wed Jan 28 05:10:46.379933 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Wed Jan 28 05:10:46.846364 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Wed Jan 28 05:10:47.311698 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Wed Jan 28 05:10:48.715939 2026] [:error] [pid 64842:tid 64852] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Wed Jan 28 05:10:49.188911 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Wed Jan 28 05:10:49.653293 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Wed Jan 28 05:10:50.119780 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Wed Jan 28 05:10:50.584624 2026] [:error] [pid 64842:tid 64862] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Wed Jan 28 05:10:51.049973 2026] [:error] [pid 64842:tid 64858] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Wed Jan 28 05:10:51.523156 2026] [:error] [pid 64842:tid 64854] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Wed Jan 28 05:10:52.452850 2026] [:error] [pid 64842:tid 64845] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Wed Jan 28 05:10:52.918702 2026] [:error] [pid 64842:tid 64858] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Wed Jan 28 05:10:53.851696 2026] [:error] [pid 64842:tid 64863] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Wed Jan 28 05:10:54.323001 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Wed Jan 28 05:10:54.788008 2026] [:error] [pid 64842:tid 64867] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Wed Jan 28 05:10:55.253794 2026] [:error] [pid 64842:tid 64863] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Wed Jan 28 05:10:55.718795 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.40:48889] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Wed Jan 28 05:10:56.182801 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.40:48889] [client 45.154.138.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aXkp4FuAAQZ5AN_SnDbklgAAAUA"]
[Wed Jan 28 05:10:58.035436 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Wed Jan 28 05:10:58.499615 2026] [:error] [pid 64842:tid 64852] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Wed Jan 28 05:10:58.968564 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Wed Jan 28 05:10:59.432418 2026] [:error] [pid 64842:tid 64866] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Wed Jan 28 05:10:59.897509 2026] [:error] [pid 64842:tid 64851] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Wed Jan 28 05:11:00.406132 2026] [:error] [pid 64842:tid 64867] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed Jan 28 05:11:00.933789 2026] [:error] [pid 64842:tid 64850] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Wed Jan 28 05:11:01.403113 2026] [:error] [pid 64842:tid 64846] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Wed Jan 28 05:11:01.883940 2026] [:error] [pid 64842:tid 64849] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Wed Jan 28 05:11:02.356874 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Wed Jan 28 05:11:02.828655 2026] [:error] [pid 64842:tid 64864] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Jan 28 05:11:03.292531 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Wed Jan 28 05:11:03.759309 2026] [:error] [pid 64842:tid 64857] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Wed Jan 28 05:11:04.228999 2026] [:error] [pid 64842:tid 64862] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Wed Jan 28 05:11:04.693287 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Wed Jan 28 05:11:05.158321 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Wed Jan 28 05:11:05.621465 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Wed Jan 28 05:11:06.083923 2026] [:error] [pid 64842:tid 64857] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Wed Jan 28 05:11:06.547737 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Wed Jan 28 05:11:07.011559 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Wed Jan 28 05:11:07.480272 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Wed Jan 28 05:11:07.943693 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Jan 28 05:11:08.407356 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Wed Jan 28 05:11:08.882466 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Wed Jan 28 05:11:09.347052 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Wed Jan 28 05:11:09.816435 2026] [:error] [pid 64842:tid 64846] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Jan 28 05:11:10.285784 2026] [:error] [pid 64842:tid 64863] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Wed Jan 28 05:11:10.751471 2026] [:error] [pid 64842:tid 64851] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Jan 28 05:11:11.221426 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.16:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Wed Jan 28 05:11:20.574358 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.16:35433] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aXkp-FuAAQZ5AN_SnDblVgAAAUA"]
[Wed Jan 28 05:11:21.963831 2026] [:error] [pid 17535:tid 17543] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Wed Jan 28 05:11:27.875463 2026] [:error] [pid 17535:tid 17541] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Wed Jan 28 05:11:28.340623 2026] [:error] [pid 17535:tid 17552] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Wed Jan 28 05:11:28.804132 2026] [:error] [pid 17535:tid 17543] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Wed Jan 28 05:11:30.202319 2026] [:error] [pid 17535:tid 17557] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Wed Jan 28 05:11:33.050033 2026] [:error] [pid 17535:tid 17555] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Wed Jan 28 05:11:33.516967 2026] [:error] [pid 17535:tid 17545] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Jan 28 05:11:33.982713 2026] [:error] [pid 17535:tid 17546] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Jan 28 05:11:34.457355 2026] [:error] [pid 17535:tid 17556] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Jan 28 05:11:34.940171 2026] [:error] [pid 17535:tid 17555] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Wed Jan 28 05:11:35.466055 2026] [:error] [pid 17535:tid 17554] [client 45.154.138.44:64963] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Wed Jan 28 05:11:36.433119 2026] [:error] [pid 17535:tid 17557] [client 45.154.138.44:64963] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXkqCK3QiSMgVscnN5IDEwAAANM"]
[Wed Jan 28 05:11:37.444731 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.101:46467] [client 45.154.138.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.138.101, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXkqCarcODKH1Dl7aZASXQAAAEg"]
[Wed Jan 28 05:11:37.449107 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.101:46467] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 28 05:11:37.915884 2026] [:error] [pid 17425:tid 17464] [client 45.154.138.101:46467] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Jan 28 05:11:38.875396 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.101:46467] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXkqCqrcODKH1Dl7aZASbAAAAEA"]
[Wed Jan 28 05:11:40.282008 2026] [:error] [pid 64842:tid 64846] [client 45.154.138.21:23181] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Wed Jan 28 05:11:42.627017 2026] [:error] [pid 64842:tid 64849] [client 45.154.138.21:23181] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Jan 28 05:11:43.561848 2026] [:error] [pid 64842:tid 64857] [client 45.154.138.21:23181] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Wed Jan 28 05:11:44.030682 2026] [:error] [pid 64842:tid 64863] [client 45.154.138.21:23181] [client 45.154.138.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXkqEFuAAQZ5AN_SnDbmAgAAAVM"]
[Wed Jan 28 05:11:44.958797 2026] [:error] [pid 64842:tid 64856] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Wed Jan 28 05:11:45.421872 2026] [:error] [pid 64842:tid 64867] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Wed Jan 28 05:11:45.885231 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Wed Jan 28 05:11:47.743722 2026] [:error] [pid 64842:tid 64863] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Wed Jan 28 05:11:48.205874 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Jan 28 05:11:48.670678 2026] [:error] [pid 64842:tid 64860] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Jan 28 05:11:49.147752 2026] [:error] [pid 64842:tid 64858] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Wed Jan 28 05:11:51.019155 2026] [:error] [pid 64842:tid 64849] [client 45.154.138.20:49397] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Jan 28 05:11:51.940989 2026] [:error] [pid 64842:tid 64849] [client 45.154.138.20:49397] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aXkqF1uAAQZ5AN_SnDbmXQAAAUU"]
[Wed Jan 28 05:11:52.860532 2026] [:error] [pid 58254:tid 58276] [client 45.154.138.30:51361] [client 45.154.138.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXkqGPF8nSyBg9wOsa_8NQAAARQ"]
[Wed Jan 28 05:11:53.779881 2026] [:error] [pid 17535:tid 17560] [client 45.154.138.11:37461] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aXkqGa3QiSMgVscnN5IDxAAAANY"]
[Wed Jan 28 05:11:54.700624 2026] [:error] [pid 64842:tid 64864] [client 45.154.138.5:65151] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aXkqGluAAQZ5AN_SnDbmewAAAVQ"]
[Wed Jan 28 05:11:55.622402 2026] [:error] [pid 58254:tid 58262] [client 45.154.138.14:36445] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Wed Jan 28 05:11:56.088622 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.14:36445] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Wed Jan 28 05:11:57.017158 2026] [:error] [pid 58254:tid 58279] [client 45.154.138.14:36445] [client 45.154.138.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.14, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aXkqHfF8nSyBg9wOsa_8cAAAARc"]
[Wed Jan 28 05:11:59.865096 2026] [:error] [pid 58254:tid 58271] [client 45.154.138.14:36445] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Jan 28 05:12:00.897592 2026] [:error] [pid 58254:tid 58279] [client 45.154.138.14:36445] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Jan 28 05:12:03.714714 2026] [:error] [pid 58254:tid 58268] [client 45.154.138.14:36445] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aXkqI_F8nSyBg9wOsa_8ygAAAQw"]
[Wed Jan 28 05:12:04.638423 2026] [:error] [pid 17425:tid 17479] [client 45.154.138.15:34397] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Jan 28 05:12:06.057660 2026] [:error] [pid 17425:tid 17481] [client 45.154.138.15:34397] [client 45.154.138.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.15, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aXkqJqrcODKH1Dl7aZATswAAAFM"]
[Wed Jan 28 05:12:06.530700 2026] [:error] [pid 17425:tid 17473] [client 45.154.138.15:34397] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Wed Jan 28 05:12:07.480712 2026] [:error] [pid 17425:tid 17478] [client 45.154.138.15:34397] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Wed Jan 28 05:12:07.943812 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.15:34397] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Wed Jan 28 05:12:08.873774 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.15:34397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Jan 28 05:12:09.340926 2026] [:error] [pid 17425:tid 17485] [client 45.154.138.15:34397] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Jan 28 05:12:09.808471 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.15:34397] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aXkqKarcODKH1Dl7aZAT4QAAAFg"]
[Wed Jan 28 05:12:10.731437 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.101:43659] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aXkqKluAAQZ5AN_SnDbnAgAAAUQ"]
[Wed Jan 28 05:12:11.654269 2026] [:error] [pid 17535:tid 17539] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Wed Jan 28 05:12:12.124884 2026] [:error] [pid 17535:tid 17555] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Wed Jan 28 05:12:12.589051 2026] [:error] [pid 17535:tid 17560] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Jan 28 05:12:13.053995 2026] [:error] [pid 17535:tid 17548] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Jan 28 05:12:13.987875 2026] [:error] [pid 17535:tid 17547] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Wed Jan 28 05:12:15.858652 2026] [:error] [pid 17535:tid 17544] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Wed Jan 28 05:12:20.038379 2026] [:error] [pid 17535:tid 17546] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Wed Jan 28 05:12:20.503878 2026] [:error] [pid 17535:tid 17554] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Jan 28 05:12:20.967934 2026] [:error] [pid 17535:tid 17552] [client 45.154.138.5:63923] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Wed Jan 28 05:12:21.897565 2026] [:error] [pid 17535:tid 17546] [client 45.154.138.5:63923] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXkqNa3QiSMgVscnN5IFGAAAAMg"]
[Wed Jan 28 05:12:24.682901 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.34:53669] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aXkqOPF8nSyBg9wOsa_-EwAAARM"]
[Wed Jan 28 05:12:25.605656 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.11:40919] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Wed Jan 28 05:12:26.064673 2026] [:error] [pid 17425:tid 17464] [client 45.154.138.11:40919] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXkqOqrcODKH1Dl7aZAUmwAAAEI"]
[Wed Jan 28 05:12:28.941878 2026] [:error] [pid 17424:tid 17451] [client 45.154.138.7:45055] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Wed Jan 28 05:12:29.876143 2026] [:error] [pid 17424:tid 17457] [client 45.154.138.7:45055] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Jan 28 05:12:30.340629 2026] [:error] [pid 17424:tid 17445] [client 45.154.138.7:45055] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aXkqPmRvtDRvGDe-pIs2sgAAAAw"]
[Wed Jan 28 05:12:47.198957 2026] [autoindex:error] [pid 58254:tid 58279] [client 45.154.138.37:25859] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:33:25.408828 2026] [:error] [pid 2454:tid 2458] [client 144.31.128.3:51982] [client 144.31.128.3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/ld+json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXkvJZvv4I21Ywd7NNYa5gAAAYA"]
[Wed Jan 28 07:09:04.056429 2026] [:error] [pid 58254:tid 58260] [client 141.98.11.239:63460] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXlFkPF8nSyBg9wOsa9QawAAAQQ"]
[Wed Jan 28 07:09:04.056506 2026] [:error] [pid 58254:tid 58260] [client 141.98.11.239:63460] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 130"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXlFkPF8nSyBg9wOsa9QawAAAQQ"]
[Wed Jan 28 07:15:30.996062 2026] [:error] [pid 17535:tid 17553] [client 43.135.140.225:35588] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXlHEq3QiSMgVscnN5JW3wAAAM8"]
[Wed Jan 28 07:38:48.785514 2026] [:error] [pid 26993:tid 27015] [client 45.169.255.206:4482] [client 45.169.255.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.169.255.206, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXlMiGnuZQRiIvPvxUtkwAAAAdI"]
[Wed Jan 28 07:38:48.791831 2026] [:error] [pid 26993:tid 27015] [client 45.169.255.206:4482] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 28 14:36:00.849427 2026] [:error] [pid 33489:tid 33493] [client 43.153.204.189:32896] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXmuUBZrVZwQUFWC7_8JTgAAAAA"]
[Wed Jan 28 18:42:38.204809 2026] [:error] [pid 33580:tid 33589] [client 62.84.185.55:46440] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnoHplb0QJtwfka8l5EbgAAAQI"]
[Wed Jan 28 18:42:40.503237 2026] [:error] [pid 24482:tid 24498] [client 62.84.185.55:46442] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%202024.aspx"] [unique_id "aXnoIKLaUZr_xWekSHOG3QAAAcw"]
[Wed Jan 28 18:42:42.776170 2026] [:error] [pid 24452:tid 24469] [client 62.84.185.55:46458] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnoIv0RQOh_GmqmVyZNnQAAAY8"]
[Wed Jan 28 18:42:44.898296 2026] [:error] [pid 2625:tid 2650] [client 62.84.185.55:46460] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXnoJFZhY64HvuPd7w1IHgAAAVM"]
[Wed Jan 28 18:42:47.009883 2026] [:error] [pid 33580:tid 33587] [client 62.84.185.55:46466] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20joker.aspx"] [unique_id "aXnoJ5lb0QJtwfka8l5EfAAAAQA"]
[Wed Jan 28 18:42:49.208155 2026] [:error] [pid 42740:tid 42753] [client 62.84.185.55:55846] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5xo.aspx"] [unique_id "aXnoKVnjAS34srJlXgSIfwAAAIs"]
[Wed Jan 28 18:42:51.512841 2026] [:error] [pid 24452:tid 24454] [client 62.84.185.55:55852] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXnoK_0RQOh_GmqmVyZNqAAAAYA"]
[Wed Jan 28 18:42:53.826199 2026] [:error] [pid 33490:tid 33524] [client 62.84.185.55:55862] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20joker%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnoLWjexcy58gsBPJGC1QAAAEA"]
[Wed Jan 28 18:42:55.843924 2026] [:error] [pid 33490:tid 33526] [client 62.84.185.55:55872] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXnoL2jexcy58gsBPJGC2QAAAEI"]
[Wed Jan 28 18:42:57.943739 2026] [:error] [pid 33580:tid 33602] [client 62.84.185.55:17416] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXnoMZlb0QJtwfka8l5EgQAAAQ8"]
[Wed Jan 28 18:43:00.008338 2026] [:error] [pid 42740:tid 42763] [client 62.84.185.55:17418] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXnoNFnjAS34srJlXgSIhgAAAJU"]
[Wed Jan 28 18:43:02.212785 2026] [:error] [pid 33489:tid 33498] [client 62.84.185.55:17422] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20joker%20%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXnoNhZrVZwQUFWC7_82zQAAAAU"]
[Wed Jan 28 18:43:04.240175 2026] [:error] [pid 24482:tid 24502] [client 62.84.185.55:17428] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufa365%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXnoOKLaUZr_xWekSHOG6gAAAdA"]
[Wed Jan 28 18:43:06.277674 2026] [:error] [pid 33490:tid 33543] [client 62.84.185.55:17432] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet.aspx"] [unique_id "aXnoOmjexcy58gsBPJGC5AAAAFM"]
[Wed Jan 28 18:43:08.404967 2026] [:error] [pid 33490:tid 33536] [client 62.84.185.55:38662] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168.aspx"] [unique_id "aXnoPGjexcy58gsBPJGDFgAAAEw"]
[Wed Jan 28 18:43:10.486186 2026] [:error] [pid 33580:tid 33600] [client 62.84.185.55:38672] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99superslot.aspx"] [unique_id "aXnoPplb0QJtwfka8l5EhQAAAQ0"]
[Wed Jan 28 18:43:12.449660 2026] [:error] [pid 33580:tid 33608] [client 62.84.185.55:38674] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2joker123%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnoQJlb0QJtwfka8l5EiAAAARU"]
[Wed Jan 28 18:43:14.551893 2026] [:error] [pid 33580:tid 33596] [client 62.84.185.55:38690] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXnoQplb0QJtwfka8l5EjgAAAQk"]
[Wed Jan 28 18:43:16.544469 2026] [:error] [pid 2625:tid 2633] [client 62.84.185.55:38696] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20soft.aspx"] [unique_id "aXnoRFZhY64HvuPd7w1IQAAAAUI"]
[Wed Jan 28 18:43:18.933120 2026] [:error] [pid 33489:tid 33497] [client 62.84.185.55:48154] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo.aspx"] [unique_id "aXnoRhZrVZwQUFWC7_822wAAAAQ"]
[Wed Jan 28 18:43:21.138647 2026] [:error] [pid 33489:tid 33513] [client 62.84.185.55:48156] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2superslot.aspx"] [unique_id "aXnoSRZrVZwQUFWC7_824AAAABQ"]
[Wed Jan 28 18:43:23.439652 2026] [:error] [pid 33489:tid 33495] [client 62.84.185.55:48170] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXnoSxZrVZwQUFWC7_825wAAAAI"]
[Wed Jan 28 18:43:25.484196 2026] [:error] [pid 33490:tid 33524] [client 62.84.185.55:48178] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87777.aspx"] [unique_id "aXnoTWjexcy58gsBPJGDIgAAAEA"]
[Wed Jan 28 18:43:27.792249 2026] [:error] [pid 33580:tid 33590] [client 62.84.185.55:43666] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXnoT5lb0QJtwfka8l5ElAAAAQM"]
[Wed Jan 28 18:43:30.881793 2026] [:error] [pid 33490:tid 33524] [client 62.84.185.55:43668] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXnoUmjexcy58gsBPJGDMAAAAEA"]
[Wed Jan 28 18:43:33.028374 2026] [:error] [pid 42740:tid 42765] [client 62.84.185.55:43676] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXnoVVnjAS34srJlXgSI-QAAAJc"]
[Wed Jan 28 18:43:59.149742 2026] [:error] [pid 33491:tid 33551] [client 62.84.185.55:53126] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXnob2P9UY0x3irkINAP7gAAAMA"]
[Wed Jan 28 18:44:01.201994 2026] [:error] [pid 33489:tid 33509] [client 62.84.185.55:53130] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx"] [unique_id "aXnocRZrVZwQUFWC7_82_gAAABA"]
[Wed Jan 28 18:44:03.404961 2026] [:error] [pid 2625:tid 2648] [client 62.84.185.55:53144] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aXnoc1ZhY64HvuPd7w1IZQAAAVE"]
[Wed Jan 28 18:44:05.507991 2026] [:error] [pid 24482:tid 24501] [client 62.84.185.55:53156] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnodaLaUZr_xWekSHOHFwAAAc8"]
[Wed Jan 28 18:44:07.540181 2026] [:error] [pid 24482:tid 24488] [client 62.84.185.55:21658] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnod6LaUZr_xWekSHOHGgAAAcI"]
[Wed Jan 28 18:44:09.689095 2026] [:error] [pid 2625:tid 2650] [client 62.84.185.55:21668] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXnoeVZhY64HvuPd7w1IbQAAAVM"]
[Wed Jan 28 18:44:11.890888 2026] [:error] [pid 33491:tid 33551] [client 62.84.185.55:21670] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnoe2P9UY0x3irkINAP9wAAAMA"]
[Wed Jan 28 18:44:14.045604 2026] [:error] [pid 24452:tid 24478] [client 62.84.185.55:21676] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXnofv0RQOh_GmqmVyZN2gAAAZg"]
[Wed Jan 28 18:44:16.290223 2026] [:error] [pid 33491:tid 33552] [client 62.84.185.55:21688] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnogGP9UY0x3irkINAQAAAAAME"]
[Wed Jan 28 18:44:18.521744 2026] [:error] [pid 33489:tid 33516] [client 62.84.185.55:2516] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnoghZrVZwQUFWC7_83BAAAABc"]
[Wed Jan 28 18:44:20.524422 2026] [:error] [pid 33490:tid 33536] [client 62.84.185.55:2528] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXnohGjexcy58gsBPJGDSgAAAEw"]
[Wed Jan 28 18:44:22.498170 2026] [:error] [pid 33580:tid 33596] [client 62.84.185.55:2540] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%AD%E0%B8%9E%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXnohplb0QJtwfka8l5EqgAAAQk"]
[Wed Jan 28 18:44:24.680820 2026] [:error] [pid 33636:tid 33657] [client 62.84.185.55:2556] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXnoiNIVZAudQH0BSC4h-gAAAhM"]
[Wed Jan 28 18:44:26.846636 2026] [:error] [pid 24482:tid 24490] [client 62.84.185.55:2568] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXnoiqLaUZr_xWekSHOHJwAAAcQ"]
[Wed Jan 28 18:44:28.904134 2026] [:error] [pid 33491:tid 33552] [client 62.84.185.55:44116] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXnojGP9UY0x3irkINAQCAAAAME"]
[Wed Jan 28 18:44:31.054336 2026] [:error] [pid 24452:tid 24455] [client 62.84.185.55:44120] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnoj_0RQOh_GmqmVyZN4wAAAYE"]
[Wed Jan 28 18:44:32.992924 2026] [:error] [pid 33580:tid 33611] [client 62.84.185.55:44128] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXnokJlb0QJtwfka8l5EtAAAARg"]
[Wed Jan 28 18:44:35.277307 2026] [:error] [pid 33491:tid 33562] [client 62.84.185.55:44144] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXnok2P9UY0x3irkINAQDwAAAMs"]
[Wed Jan 28 18:44:37.315493 2026] [:error] [pid 33490:tid 33535] [client 62.84.185.55:60164] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "aXnolWjexcy58gsBPJGDUQAAAEs"]
[Wed Jan 28 18:44:39.501690 2026] [:error] [pid 2625:tid 2654] [client 62.84.185.55:60176] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/15%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXnol1ZhY64HvuPd7w1IiwAAAVc"]
[Wed Jan 28 18:44:41.722070 2026] [:error] [pid 24452:tid 24469] [client 62.84.185.55:60186] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/168slot.aspx"] [unique_id "aXnomf0RQOh_GmqmVyZN7wAAAY8"]
[Wed Jan 28 18:44:43.778240 2026] [:error] [pid 42740:tid 42759] [client 62.84.185.55:60190] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aXnom1njAS34srJlXgSJGAAAAJE"]
[Wed Jan 28 18:44:45.955416 2026] [:error] [pid 42740:tid 42764] [client 62.84.185.55:60200] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/460bet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnonVnjAS34srJlXgSJGwAAAJY"]
[Wed Jan 28 18:44:48.102587 2026] [:error] [pid 42740:tid 42757] [client 62.84.185.55:31048] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/789gbet.aspx"] [unique_id "aXnooFnjAS34srJlXgSJHAAAAI8"]
[Wed Jan 28 18:44:50.239284 2026] [:error] [pid 33491:tid 33556] [client 62.84.185.55:31050] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXnoomP9UY0x3irkINAQJAAAAMU"]
[Wed Jan 28 18:44:52.291483 2026] [:error] [pid 42740:tid 42755] [client 62.84.185.55:31052] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot789.aspx"] [unique_id "aXnopFnjAS34srJlXgSJIQAAAI0"]
[Wed Jan 28 18:44:54.492330 2026] [:error] [pid 33490:tid 33538] [client 62.84.185.55:31068] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXnopmjexcy58gsBPJGDYAAAAE4"]
[Wed Jan 28 18:44:56.586961 2026] [:error] [pid 2625:tid 2636] [client 62.84.185.55:31084] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXnoqFZhY64HvuPd7w1IoAAAAUU"]
[Wed Jan 28 18:45:23.341573 2026] [:error] [pid 33580:tid 33603] [client 62.84.185.55:43878] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnow5lb0QJtwfka8l5EywAAARA"]
[Wed Jan 28 18:45:25.662895 2026] [:error] [pid 2625:tid 2633] [client 62.84.185.55:43880] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnoxVZhY64HvuPd7w1IuQAAAUI"]
[Wed Jan 28 18:45:27.805866 2026] [:error] [pid 33489:tid 33515] [client 62.84.185.55:49908] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnoxxZrVZwQUFWC7_83IgAAABY"]
[Wed Jan 28 18:45:29.987654 2026] [:error] [pid 33489:tid 33505] [client 62.84.185.55:49924] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnoyRZrVZwQUFWC7_83JgAAAAw"]
[Wed Jan 28 18:45:32.180319 2026] [:error] [pid 24482:tid 24503] [client 62.84.185.55:49938] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnozKLaUZr_xWekSHOHQQAAAdE"]
[Wed Jan 28 18:45:34.327657 2026] [:error] [pid 24482:tid 24509] [client 62.84.185.55:49952] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXnozqLaUZr_xWekSHOHRAAAAdc"]
[Wed Jan 28 18:45:36.431841 2026] [:error] [pid 2625:tid 2650] [client 62.84.185.55:49964] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXno0FZhY64HvuPd7w1IwAAAAVM"]
[Wed Jan 28 18:45:38.431057 2026] [:error] [pid 24452:tid 24457] [client 62.84.185.55:4088] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXno0v0RQOh_GmqmVyZOEQAAAYM"]
[Wed Jan 28 18:45:40.604725 2026] [:error] [pid 42740:tid 42747] [client 62.84.185.55:4104] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXno1FnjAS34srJlXgSJWQAAAIU"]
[Wed Jan 28 18:45:42.589394 2026] [:error] [pid 33491:tid 33554] [client 62.84.185.55:4110] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXno1mP9UY0x3irkINAQTAAAAMM"]
[Wed Jan 28 18:45:44.702168 2026] [:error] [pid 33580:tid 33590] [client 62.84.185.55:4126] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXno2Jlb0QJtwfka8l5E8wAAAQM"]
[Wed Jan 28 18:45:46.733063 2026] [:error] [pid 2625:tid 2631] [client 62.84.185.55:4140] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXno2lZhY64HvuPd7w1IxgAAAUA"]
[Wed Jan 28 18:45:48.701418 2026] [:error] [pid 33490:tid 33530] [client 62.84.185.55:63610] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXno3Gjexcy58gsBPJGDuAAAAEY"]
[Wed Jan 28 18:45:50.939471 2026] [:error] [pid 33580:tid 33597] [client 62.84.185.55:63626] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXno3plb0QJtwfka8l5E9QAAAQo"]
[Wed Jan 28 18:45:53.004700 2026] [:error] [pid 2625:tid 2641] [client 62.84.185.55:63632] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXno4VZhY64HvuPd7w1IywAAAUo"]
[Wed Jan 28 18:45:55.021410 2026] [:error] [pid 33636:tid 33648] [client 62.84.185.55:63646] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXno49IVZAudQH0BSC4iLAAAAgo"]
[Wed Jan 28 18:45:57.086356 2026] [:error] [pid 2625:tid 2635] [client 62.84.185.55:29976] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXno5VZhY64HvuPd7w1I0gAAAUQ"]
[Wed Jan 28 18:45:59.084832 2026] [:error] [pid 33580:tid 33594] [client 62.84.185.55:29978] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aXno55lb0QJtwfka8l5E-wAAAQc"]
[Wed Jan 28 18:46:01.199034 2026] [:error] [pid 33489:tid 33494] [client 62.84.185.55:29984] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aXno6RZrVZwQUFWC7_83QgAAAAE"]
[Wed Jan 28 18:46:03.254239 2026] [:error] [pid 33491:tid 33562] [client 62.84.185.55:29992] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXno62P9UY0x3irkINAQVwAAAMs"]
[Wed Jan 28 18:46:05.407873 2026] [:error] [pid 33490:tid 33545] [client 62.84.185.55:30002] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXno7Wjexcy58gsBPJGDzQAAAFU"]
[Wed Jan 28 18:46:07.501143 2026] [:error] [pid 2625:tid 2654] [client 62.84.185.55:17386] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXno71ZhY64HvuPd7w1I3gAAAVc"]
[Wed Jan 28 18:46:09.600276 2026] [:error] [pid 24482:tid 24488] [client 62.84.185.55:17392] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot.aspx"] [unique_id "aXno8aLaUZr_xWekSHOHWwAAAcI"]
[Wed Jan 28 18:46:11.702090 2026] [:error] [pid 33636:tid 33646] [client 62.84.185.55:17408] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXno89IVZAudQH0BSC4iMgAAAgg"]
[Wed Jan 28 18:46:13.930288 2026] [:error] [pid 24452:tid 24457] [client 62.84.185.55:17416] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXno9f0RQOh_GmqmVyZOOQAAAYM"]
[Wed Jan 28 18:46:16.063861 2026] [:error] [pid 33491:tid 33570] [client 62.84.185.55:17430] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXno-GP9UY0x3irkINAQYAAAANM"]
[Wed Jan 28 18:46:18.497736 2026] [:error] [pid 24452:tid 24463] [client 62.84.185.55:6832] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXno-v0RQOh_GmqmVyZOPgAAAYk"]
[Wed Jan 28 18:46:20.646625 2026] [:error] [pid 33636:tid 33657] [client 62.84.185.55:6836] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXno_NIVZAudQH0BSC4iOAAAAhM"]
[Wed Jan 28 18:46:46.336940 2026] [:error] [pid 24452:tid 24454] [client 62.84.185.55:1948] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot666.aspx"] [unique_id "aXnpFv0RQOh_GmqmVyZOdgAAAYA"]
[Wed Jan 28 18:46:48.486768 2026] [:error] [pid 33491:tid 33569] [client 62.84.185.55:17100] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot999.aspx"] [unique_id "aXnpGGP9UY0x3irkINAQbwAAANI"]
[Wed Jan 28 18:46:50.485645 2026] [:error] [pid 33636:tid 33647] [client 62.84.185.55:17108] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXnpGtIVZAudQH0BSC4iRAAAAgk"]
[Wed Jan 28 18:46:52.678980 2026] [:error] [pid 33491:tid 33556] [client 62.84.185.55:17124] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20otp.aspx"] [unique_id "aXnpHGP9UY0x3irkINAQdAAAAMU"]
[Wed Jan 28 18:46:54.822848 2026] [:error] [pid 24482:tid 24496] [client 62.84.185.55:17138] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnpHqLaUZr_xWekSHOHewAAAco"]
[Wed Jan 28 18:46:56.981715 2026] [:error] [pid 33490:tid 33533] [client 62.84.185.55:17142] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnpIGjexcy58gsBPJGErgAAAEk"]
[Wed Jan 28 18:46:59.043910 2026] [:error] [pid 33490:tid 33541] [client 62.84.185.55:29030] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20444%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXnpI2jexcy58gsBPJGEsgAAAFE"]
[Wed Jan 28 18:47:01.390910 2026] [:error] [pid 24482:tid 24499] [client 62.84.185.55:29036] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXnpJaLaUZr_xWekSHOHhgAAAc0"]
[Wed Jan 28 18:47:03.612075 2026] [:error] [pid 33491:tid 33552] [client 62.84.185.55:29052] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168.aspx"] [unique_id "aXnpJ2P9UY0x3irkINAQfAAAAME"]
[Wed Jan 28 18:47:05.731801 2026] [:error] [pid 33636:tid 33650] [client 62.84.185.55:29062] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot777.aspx"] [unique_id "aXnpKdIVZAudQH0BSC4iTAAAAgw"]
[Wed Jan 28 18:47:07.784510 2026] [:error] [pid 33489:tid 33502] [client 62.84.185.55:57600] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aXnpKxZrVZwQUFWC7_83WQAAAAk"]
[Wed Jan 28 18:47:09.941655 2026] [:error] [pid 24482:tid 24509] [client 62.84.185.55:57606] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnpLaLaUZr_xWekSHOHiAAAAdc"]
[Wed Jan 28 18:47:12.017294 2026] [:error] [pid 33580:tid 33604] [client 62.84.185.55:57616] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168bet.aspx"] [unique_id "aXnpMJlb0QJtwfka8l5FLAAAARE"]
[Wed Jan 28 18:47:14.229678 2026] [:error] [pid 33491:tid 33566] [client 62.84.185.55:57630] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa369.aspx"] [unique_id "aXnpMmP9UY0x3irkINAQhgAAAM8"]
[Wed Jan 28 18:47:16.147688 2026] [:error] [pid 33490:tid 33542] [client 62.84.185.55:57634] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXnpNGjexcy58gsBPJGE0gAAAFI"]
[Wed Jan 28 18:47:18.387567 2026] [:error] [pid 24452:tid 24476] [client 62.84.185.55:15172] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnpNv0RQOh_GmqmVyZOhgAAAZY"]
[Wed Jan 28 18:47:20.488982 2026] [:error] [pid 33489:tid 33505] [client 62.84.185.55:15176] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnpOBZrVZwQUFWC7_83XwAAAAw"]
[Wed Jan 28 18:47:22.607059 2026] [:error] [pid 33489:tid 33507] [client 62.84.185.55:15190] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnpOhZrVZwQUFWC7_83YwAAAA4"]
[Wed Jan 28 18:47:24.626959 2026] [:error] [pid 42740:tid 42754] [client 62.84.185.55:15204] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnpPFnjAS34srJlXgSJfQAAAIw"]
[Wed Jan 28 18:47:26.944676 2026] [:error] [pid 33491:tid 33570] [client 62.84.185.55:15214] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnpPmP9UY0x3irkINAQkwAAANM"]
[Wed Jan 28 18:47:28.978849 2026] [:error] [pid 33489:tid 33495] [client 62.84.185.55:63912] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXnpQBZrVZwQUFWC7_83agAAAAI"]
[Wed Jan 28 18:47:31.037175 2026] [:error] [pid 2625:tid 2649] [client 62.84.185.55:63916] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aXnpQ1ZhY64HvuPd7w1JOAAAAVI"]
[Wed Jan 28 18:47:33.256083 2026] [:error] [pid 33636:tid 33653] [client 62.84.185.55:63926] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet1212%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnpRdIVZAudQH0BSC4iWAAAAg8"]
[Wed Jan 28 18:47:35.232295 2026] [:error] [pid 33636:tid 33656] [client 62.84.185.55:63932] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet168%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnpR9IVZAudQH0BSC4iWQAAAhI"]
[Wed Jan 28 18:47:37.333115 2026] [:error] [pid 33491:tid 33556] [client 62.84.185.55:41142] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet777.aspx"] [unique_id "aXnpSWP9UY0x3irkINAQmAAAAMU"]
[Wed Jan 28 18:47:39.604815 2026] [:error] [pid 24452:tid 24469] [client 62.84.185.55:41148] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www.lotto.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXnpS_0RQOh_GmqmVyZOkgAAAY8"]
[Wed Jan 28 18:47:41.733270 2026] [:error] [pid 2625:tid 2643] [client 62.84.185.55:41150] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXnpTVZhY64HvuPd7w1JRAAAAUw"]
[Wed Jan 28 18:47:43.674246 2026] [:error] [pid 33491:tid 33552] [client 62.84.185.55:41152] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aXnpT2P9UY0x3irkINAQnAAAAME"]
[Wed Jan 28 19:31:35.488006 2026] [:error] [pid 33490:tid 33531] [client 51.161.84.110:40212] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnzl2jexcy58gsBPJGU3gAAAEc"]
[Wed Jan 28 19:31:36.474147 2026] [:error] [pid 42740:tid 42763] [client 51.161.84.110:40220] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnzmFnjAS34srJlXgSSFQAAAJU"]
[Wed Jan 28 19:31:36.793406 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:40228] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnzmGjexcy58gsBPJGU4AAAAFE"]
[Wed Jan 28 19:31:38.388855 2026] [:error] [pid 33490:tid 33538] [client 51.161.84.110:55274] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXnzmmjexcy58gsBPJGU4gAAAE4"]
[Wed Jan 28 19:31:42.902823 2026] [:error] [pid 33489:tid 33493] [client 51.161.84.110:53178] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXnznhZrVZwQUFWC7_8_cQAAAAA"]
[Wed Jan 28 19:31:43.408608 2026] [:error] [pid 33489:tid 33501] [client 51.161.84.110:53194] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnznxZrVZwQUFWC7_8_cwAAAAg"]
[Wed Jan 28 19:31:43.727441 2026] [:error] [pid 33490:tid 33526] [client 51.161.84.110:53208] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnzn2jexcy58gsBPJGU_QAAAEI"]
[Wed Jan 28 19:31:45.563652 2026] [:error] [pid 33490:tid 33548] [client 51.161.84.110:53210] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnzoWjexcy58gsBPJGVBQAAAFg"]
[Wed Jan 28 19:31:48.099289 2026] [:error] [pid 33489:tid 33507] [client 51.161.84.110:53224] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXnzpBZrVZwQUFWC7_8_egAAAA4"]
[Wed Jan 28 19:31:49.807802 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:32850] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXnzpWjexcy58gsBPJGVDAAAAEU"]
[Wed Jan 28 19:31:51.406460 2026] [:error] [pid 33490:tid 33526] [client 51.161.84.110:32864] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXnzp2jexcy58gsBPJGVFgAAAEI"]
[Wed Jan 28 19:31:52.052633 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:32876] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXnzqGjexcy58gsBPJGVGQAAAEU"]
[Wed Jan 28 19:31:54.804644 2026] [:error] [pid 42740:tid 42746] [client 51.161.84.110:32890] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXnzqlnjAS34srJlXgSSGwAAAIQ"]
[Wed Jan 28 19:31:55.240289 2026] [:error] [pid 33580:tid 33591] [client 51.161.84.110:32892] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnzq5lb0QJtwfka8l5MQQAAAQQ"]
[Wed Jan 28 19:31:57.379514 2026] [:error] [pid 24482:tid 24500] [client 51.161.84.110:32906] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnzraLaUZr_xWekSHOSFAAAAc4"]
[Wed Jan 28 19:31:57.906785 2026] [:error] [pid 2625:tid 2642] [client 51.161.84.110:32914] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXnzrVZhY64HvuPd7w1SmgAAAUs"]
[Wed Jan 28 19:31:59.651816 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:32920] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnzr2jexcy58gsBPJGVNgAAAFQ"]
[Wed Jan 28 19:32:00.788829 2026] [:error] [pid 33489:tid 33507] [client 51.161.84.110:49166] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXnzsBZrVZwQUFWC7_8_iwAAAA4"]
[Wed Jan 28 19:32:01.368047 2026] [:error] [pid 33491:tid 33553] [client 51.161.84.110:49170] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnzsWP9UY0x3irkINAanwAAAMI"]
[Wed Jan 28 19:32:02.799428 2026] [:error] [pid 33491:tid 33573] [client 51.161.84.110:49184] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXnzsmP9UY0x3irkINAaogAAANY"]
[Wed Jan 28 19:32:02.850646 2026] [:error] [pid 24452:tid 24467] [client 51.161.84.110:49198] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnzsv0RQOh_GmqmVyZaIwAAAY0"]
[Wed Jan 28 19:32:04.987484 2026] [:error] [pid 42740:tid 42749] [client 51.161.84.110:49206] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXnztFnjAS34srJlXgSSNAAAAIc"]
[Wed Jan 28 19:32:06.973407 2026] [:error] [pid 33580:tid 33592] [client 51.161.84.110:49220] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXnztplb0QJtwfka8l5MVgAAAQU"]
[Wed Jan 28 19:32:09.187438 2026] [:error] [pid 33580:tid 33609] [client 51.161.84.110:49222] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXnzuZlb0QJtwfka8l5MWAAAARY"]
[Wed Jan 28 19:32:09.502074 2026] [:error] [pid 24452:tid 24467] [client 51.161.84.110:52564] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXnzuf0RQOh_GmqmVyZaLwAAAY0"]
[Wed Jan 28 19:32:11.820818 2026] [:error] [pid 24482:tid 24489] [client 51.161.84.110:52568] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXnzu6LaUZr_xWekSHOSJgAAAcM"]
[Wed Jan 28 19:32:12.463107 2026] [:error] [pid 33636:tid 33658] [client 51.161.84.110:52578] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXnzvNIVZAudQH0BSC4rGgAAAhQ"]
[Wed Jan 28 19:32:13.095601 2026] [:error] [pid 24452:tid 24456] [client 51.161.84.110:52572] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnzvf0RQOh_GmqmVyZaNgAAAYI"]
[Wed Jan 28 19:32:14.863731 2026] [:error] [pid 33491:tid 33570] [client 51.161.84.110:52590] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXnzvmP9UY0x3irkINAasgAAANM"]
[Wed Jan 28 19:32:14.892362 2026] [:error] [pid 24452:tid 24460] [client 51.161.84.110:52602] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXnzvv0RQOh_GmqmVyZaOgAAAYY"]
[Wed Jan 28 19:32:16.304068 2026] [:error] [pid 33580:tid 33611] [client 51.161.84.110:52608] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXnzwJlb0QJtwfka8l5MXwAAARg"]
[Wed Jan 28 19:32:17.483929 2026] [:error] [pid 2625:tid 2642] [client 51.161.84.110:52624] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnzwVZhY64HvuPd7w1SsAAAAUs"]
[Wed Jan 28 19:32:18.124394 2026] [:error] [pid 42740:tid 42746] [client 51.161.84.110:52638] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXnzwlnjAS34srJlXgSSRgAAAIQ"]
[Wed Jan 28 19:32:19.654263 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:52484] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnzw2jexcy58gsBPJGVYQAAAFE"]
[Wed Jan 28 19:32:20.996210 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:52492] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnzxP0RQOh_GmqmVyZaQwAAAZA"]
[Wed Jan 28 19:32:22.959828 2026] [:error] [pid 42740:tid 42764] [client 51.161.84.110:52502] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnzxlnjAS34srJlXgSSUgAAAJY"]
[Wed Jan 28 19:32:24.345529 2026] [:error] [pid 24452:tid 24455] [client 51.161.84.110:52516] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnzyP0RQOh_GmqmVyZaSgAAAYE"]
[Wed Jan 28 19:32:25.428763 2026] [:error] [pid 24452:tid 24472] [client 51.161.84.110:52522] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnzyf0RQOh_GmqmVyZaSwAAAZI"]
[Wed Jan 28 19:32:26.176937 2026] [:error] [pid 33491:tid 33567] [client 51.161.84.110:52534] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXnzymP9UY0x3irkINAatAAAANA"]
[Wed Jan 28 19:32:30.387798 2026] [:error] [pid 2625:tid 2638] [client 51.161.84.110:42242] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnzzlZhY64HvuPd7w1SugAAAUc"]
[Wed Jan 28 19:32:30.468844 2026] [:error] [pid 33489:tid 33498] [client 51.161.84.110:42258] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXnzzhZrVZwQUFWC7_8_ngAAAAU"]
[Wed Jan 28 19:32:45.614025 2026] [:error] [pid 24452:tid 24471] [client 51.161.84.110:42276] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXnz3f0RQOh_GmqmVyZadgAAAZE"]
[Wed Jan 28 19:32:46.746616 2026] [:error] [pid 33636:tid 33662] [client 51.161.84.110:42260] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXnz3tIVZAudQH0BSC4rbwAAAhg"]
[Wed Jan 28 19:32:47.428197 2026] [:error] [pid 24452:tid 24465] [client 51.161.84.110:34328] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXnz3_0RQOh_GmqmVyZadwAAAYs"]
[Wed Jan 28 19:32:48.087128 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:34336] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnz4GP9UY0x3irkINAa0AAAAMw"]
[Wed Jan 28 19:32:49.417790 2026] [:error] [pid 24452:tid 24475] [client 51.161.84.110:34352] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXnz4f0RQOh_GmqmVyZaeQAAAZU"]
[Wed Jan 28 19:32:50.582911 2026] [:error] [pid 42740:tid 42766] [client 51.161.84.110:58266] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20k9win.aspx"] [unique_id "aXnz4lnjAS34srJlXgSSYQAAAJg"]
[Wed Jan 28 19:32:50.707984 2026] [:error] [pid 42740:tid 42748] [client 51.161.84.110:58282] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXnz4lnjAS34srJlXgSSYgAAAIY"]
[Wed Jan 28 19:32:51.737610 2026] [:error] [pid 33489:tid 33495] [client 51.161.84.110:58284] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXnz4xZrVZwQUFWC7_8_uAAAAAI"]
[Wed Jan 28 19:32:52.947444 2026] [:error] [pid 24482:tid 24509] [client 51.161.84.110:58298] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnz5KLaUZr_xWekSHOSXwAAAdc"]
[Wed Jan 28 19:32:53.212047 2026] [:error] [pid 2625:tid 2647] [client 51.161.84.110:58300] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnz5VZhY64HvuPd7w1S1AAAAVA"]
[Wed Jan 28 19:32:53.980564 2026] [:error] [pid 2625:tid 2631] [client 51.161.84.110:58302] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXnz5VZhY64HvuPd7w1S1QAAAUA"]
[Wed Jan 28 19:32:54.637360 2026] [:error] [pid 24452:tid 24463] [client 51.161.84.110:58314] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnz5v0RQOh_GmqmVyZagQAAAYk"]
[Wed Jan 28 19:32:55.361835 2026] [:error] [pid 24452:tid 24471] [client 51.161.84.110:58318] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXnz5_0RQOh_GmqmVyZaggAAAZE"]
[Wed Jan 28 19:32:56.134391 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:58324] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnz6P0RQOh_GmqmVyZahAAAAYA"]
[Wed Jan 28 19:32:57.309388 2026] [:error] [pid 33580:tid 33593] [client 51.161.84.110:58326] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXnz6Zlb0QJtwfka8l5MegAAAQY"]
[Wed Jan 28 19:32:57.680981 2026] [:error] [pid 33580:tid 33602] [client 51.161.84.110:58340] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnz6Zlb0QJtwfka8l5MewAAAQ8"]
[Wed Jan 28 19:32:58.334331 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:58348] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXnz6mjexcy58gsBPJGVswAAAFQ"]
[Wed Jan 28 19:32:59.295213 2026] [:error] [pid 33636:tid 33649] [client 51.161.84.110:58362] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXnz69IVZAudQH0BSC4rfgAAAgs"]
[Wed Jan 28 19:33:00.100896 2026] [:error] [pid 2625:tid 2653] [client 51.161.84.110:38320] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXnz7FZhY64HvuPd7w1S3QAAAVY"]
[Wed Jan 28 19:33:01.121877 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:38326] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnz7WP9UY0x3irkINAa2wAAANI"]
[Wed Jan 28 19:33:01.293375 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:38342] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXnz7f0RQOh_GmqmVyZakgAAAYA"]
[Wed Jan 28 19:33:01.888790 2026] [:error] [pid 33636:tid 33648] [client 51.161.84.110:38350] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXnz7dIVZAudQH0BSC4rgAAAAgo"]
[Wed Jan 28 19:33:03.814118 2026] [:error] [pid 33489:tid 33510] [client 51.161.84.110:38358] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXnz7xZrVZwQUFWC7_8_wQAAABE"]
[Wed Jan 28 19:33:03.923701 2026] [:error] [pid 42740:tid 42742] [client 51.161.84.110:38360] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnz71njAS34srJlXgSSaQAAAIA"]
[Wed Jan 28 19:33:04.340200 2026] [:error] [pid 24482:tid 24486] [client 51.161.84.110:38372] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXnz8KLaUZr_xWekSHOSbgAAAcA"]
[Wed Jan 28 19:33:04.875171 2026] [:error] [pid 24482:tid 24491] [client 51.161.84.110:38384] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXnz8KLaUZr_xWekSHOSbwAAAcU"]
[Wed Jan 28 19:33:07.417459 2026] [:error] [pid 33491:tid 33564] [client 51.161.84.110:38400] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXnz82P9UY0x3irkINAa4AAAAM0"]
[Wed Jan 28 19:33:07.958122 2026] [:error] [pid 33491:tid 33575] [client 51.161.84.110:38408] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXnz82P9UY0x3irkINAa5QAAANg"]
[Wed Jan 28 19:33:07.963141 2026] [:error] [pid 33491:tid 33551] [client 51.161.84.110:38402] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXnz82P9UY0x3irkINAa5gAAAMA"]
[Wed Jan 28 19:33:09.971753 2026] [:error] [pid 33580:tid 33597] [client 51.161.84.110:36562] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXnz9Zlb0QJtwfka8l5MgwAAAQo"]
[Wed Jan 28 19:33:10.608345 2026] [:error] [pid 24452:tid 24468] [client 51.161.84.110:36566] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXnz9v0RQOh_GmqmVyZanQAAAY4"]
[Wed Jan 28 19:33:10.622124 2026] [:error] [pid 42740:tid 42745] [client 51.161.84.110:36578] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXnz9lnjAS34srJlXgSScwAAAIM"]
[Wed Jan 28 19:33:10.902939 2026] [:error] [pid 33491:tid 33557] [client 51.161.84.110:36592] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXnz9mP9UY0x3irkINAa6QAAAMY"]
[Wed Jan 28 19:33:12.839470 2026] [:error] [pid 24482:tid 24487] [client 51.161.84.110:36600] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnz-KLaUZr_xWekSHOSdwAAAcE"]
[Wed Jan 28 19:33:13.501419 2026] [:error] [pid 33636:tid 33656] [client 51.161.84.110:36612] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXnz-dIVZAudQH0BSC4rjAAAAhI"]
[Wed Jan 28 19:33:15.059041 2026] [:error] [pid 33636:tid 33654] [client 51.161.84.110:36626] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXnz-9IVZAudQH0BSC4rmgAAAhA"]
[Wed Jan 28 19:33:15.557646 2026] [:error] [pid 33491:tid 33572] [client 51.161.84.110:36630] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnz-2P9UY0x3irkINAa8QAAANU"]
[Wed Jan 28 19:33:16.586084 2026] [:error] [pid 24482:tid 24503] [client 51.161.84.110:36644] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXnz_KLaUZr_xWekSHOSfwAAAdE"]
[Wed Jan 28 19:33:17.056049 2026] [:error] [pid 24452:tid 24469] [client 51.161.84.110:36646] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXnz_f0RQOh_GmqmVyZasgAAAY8"]
[Wed Jan 28 19:33:18.342458 2026] [:error] [pid 2625:tid 2651] [client 51.161.84.110:36658] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXnz_lZhY64HvuPd7w1S5gAAAVQ"]
[Wed Jan 28 19:33:19.898973 2026] [:error] [pid 24452:tid 24458] [client 51.161.84.110:54954] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXnz__0RQOh_GmqmVyZauAAAAYQ"]
[Wed Jan 28 19:33:19.915210 2026] [:error] [pid 24482:tid 24499] [client 51.161.84.110:54940] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXnz_6LaUZr_xWekSHOShAAAAc0"]
[Wed Jan 28 19:33:20.294252 2026] [:error] [pid 24452:tid 24472] [client 51.161.84.110:54964] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn0AP0RQOh_GmqmVyZauwAAAZI"]
[Wed Jan 28 19:33:21.044095 2026] [:error] [pid 33636:tid 33662] [client 51.161.84.110:54974] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn0AdIVZAudQH0BSC4rowAAAhg"]
[Wed Jan 28 19:33:22.054089 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:54976] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXn0Amjexcy58gsBPJGVxAAAAFQ"]
[Wed Jan 28 19:33:23.739956 2026] [:error] [pid 24452:tid 24462] [client 51.161.84.110:54988] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXn0A_0RQOh_GmqmVyZayQAAAYg"]
[Wed Jan 28 19:33:23.958485 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:54994] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0A_0RQOh_GmqmVyZazAAAAZc"]
[Wed Jan 28 19:33:24.166206 2026] [:error] [pid 33580:tid 33606] [client 51.161.84.110:55004] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXn0BJlb0QJtwfka8l5MiwAAARM"]
[Wed Jan 28 19:33:24.709204 2026] [:error] [pid 2625:tid 2644] [client 51.161.84.110:55016] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn0BFZhY64HvuPd7w1S6gAAAU0"]
[Wed Jan 28 19:33:26.220779 2026] [:error] [pid 33490:tid 33540] [client 51.161.84.110:55018] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXn0Bmjexcy58gsBPJGVywAAAFA"]
[Wed Jan 28 19:33:26.432725 2026] [:error] [pid 33490:tid 33543] [client 51.161.84.110:55034] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn0Bmjexcy58gsBPJGVzAAAAFM"]
[Wed Jan 28 19:33:27.233652 2026] [:error] [pid 33490:tid 33533] [client 51.161.84.110:55050] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0B2jexcy58gsBPJGV0AAAAEk"]
[Wed Jan 28 19:33:28.766645 2026] [:error] [pid 33491:tid 33571] [client 51.161.84.110:55080] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXn0CGP9UY0x3irkINAa_gAAANQ"]
[Wed Jan 28 19:33:28.827255 2026] [:error] [pid 33491:tid 33561] [client 51.161.84.110:55064] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXn0CGP9UY0x3irkINAa_wAAAMo"]
[Wed Jan 28 19:33:30.239736 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:51752] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn0Cmjexcy58gsBPJGV2AAAAEY"]
[Wed Jan 28 19:33:30.860430 2026] [:error] [pid 24482:tid 24492] [client 51.161.84.110:51754] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXn0CqLaUZr_xWekSHOSjgAAAcY"]
[Wed Jan 28 19:33:31.623434 2026] [:error] [pid 24452:tid 24475] [client 51.161.84.110:51758] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95999%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0C_0RQOh_GmqmVyZa2wAAAZU"]
[Wed Jan 28 19:33:32.856777 2026] [:error] [pid 2625:tid 2632] [client 51.161.84.110:51770] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXn0DFZhY64HvuPd7w1S8wAAAUE"]
[Wed Jan 28 19:33:33.888468 2026] [:error] [pid 42740:tid 42762] [client 51.161.84.110:51772] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0DVnjAS34srJlXgSSewAAAJQ"]
[Wed Jan 28 19:33:34.016842 2026] [:error] [pid 24452:tid 24456] [client 51.161.84.110:51798] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXn0Dv0RQOh_GmqmVyZa3gAAAYI"]
[Wed Jan 28 19:33:34.150961 2026] [:error] [pid 33636:tid 33652] [client 51.161.84.110:51784] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXn0DtIVZAudQH0BSC4rqAAAAg4"]
[Wed Jan 28 19:33:36.415045 2026] [:error] [pid 24482:tid 24501] [client 51.161.84.110:51808] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0EKLaUZr_xWekSHOSkQAAAc8"]
[Wed Jan 28 19:33:37.340808 2026] [:error] [pid 33490:tid 33536] [client 51.161.84.110:51818] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0EWjexcy58gsBPJGV5gAAAEw"]
[Wed Jan 28 19:33:37.880849 2026] [:error] [pid 42740:tid 42765] [client 51.161.84.110:51826] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95999%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0EVnjAS34srJlXgSSgAAAAJc"]
[Wed Jan 28 19:33:38.173049 2026] [:error] [pid 42740:tid 42763] [client 51.161.84.110:51834] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXn0ElnjAS34srJlXgSSgQAAAJU"]
[Wed Jan 28 19:33:40.640092 2026] [:error] [pid 33636:tid 33646] [client 51.161.84.110:60100] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXn0FNIVZAudQH0BSC4rrQAAAgg"]
[Wed Jan 28 19:33:40.658813 2026] [:error] [pid 33490:tid 33524] [client 51.161.84.110:60084] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0FGjexcy58gsBPJGV7AAAAEA"]
[Wed Jan 28 19:33:40.787507 2026] [:error] [pid 33491:tid 33553] [client 51.161.84.110:60096] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXn0FGP9UY0x3irkINAbEAAAAMI"]
[Wed Jan 28 19:33:41.146594 2026] [:error] [pid 33489:tid 33498] [client 51.161.84.110:60102] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0FRZrVZwQUFWC7_8_4gAAAAU"]
[Wed Jan 28 19:33:41.259841 2026] [:error] [pid 24452:tid 24460] [client 51.161.84.110:60108] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXn0Ff0RQOh_GmqmVyZa7QAAAYY"]
[Wed Jan 28 19:33:43.583202 2026] [:error] [pid 24482:tid 24505] [client 51.161.84.110:60122] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn0F6LaUZr_xWekSHOSmgAAAdM"]
[Wed Jan 28 19:33:44.201772 2026] [:error] [pid 24482:tid 24510] [client 51.161.84.110:60128] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXn0GKLaUZr_xWekSHOSnAAAAdg"]
[Wed Jan 28 19:33:55.097157 2026] [:error] [pid 33490:tid 33546] [client 51.161.84.110:60142] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXn0I2jexcy58gsBPJGWEwAAAFY"]
[Wed Jan 28 19:33:55.361905 2026] [:error] [pid 24482:tid 24490] [client 51.161.84.110:33342] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn0I6LaUZr_xWekSHOSqQAAAcQ"]
[Wed Jan 28 19:33:56.402085 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:60150] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXn0JGjexcy58gsBPJGWGAAAAEY"]
[Wed Jan 28 19:33:56.860507 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:60166] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXn0JGP9UY0x3irkINAbKAAAAMw"]
[Wed Jan 28 19:33:57.868279 2026] [:error] [pid 33491:tid 33573] [client 51.161.84.110:33356] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXn0JWP9UY0x3irkINAbKQAAANY"]
[Wed Jan 28 19:33:59.204621 2026] [:error] [pid 33491:tid 33554] [client 51.161.84.110:33360] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0J2P9UY0x3irkINAbKgAAAMM"]
[Wed Jan 28 19:34:00.374036 2026] [:error] [pid 33580:tid 33600] [client 51.161.84.110:56862] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXn0KJlb0QJtwfka8l5MpAAAAQ0"]
[Wed Jan 28 19:34:01.144363 2026] [:error] [pid 33636:tid 33658] [client 51.161.84.110:56864] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0KdIVZAudQH0BSC4rvgAAAhQ"]
[Wed Jan 28 19:34:02.811790 2026] [:error] [pid 42740:tid 42764] [client 51.161.84.110:56884] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXn0KlnjAS34srJlXgSSmwAAAJY"]
[Wed Jan 28 19:34:02.908727 2026] [:error] [pid 42740:tid 42758] [client 51.161.84.110:56876] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0KlnjAS34srJlXgSSnAAAAJA"]
[Wed Jan 28 19:34:03.379809 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:56888] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0K_0RQOh_GmqmVyZbBwAAAYA"]
[Wed Jan 28 19:34:03.561438 2026] [:error] [pid 24452:tid 24458] [client 51.161.84.110:56890] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn0K_0RQOh_GmqmVyZbCAAAAYQ"]
[Wed Jan 28 19:34:05.356220 2026] [:error] [pid 33580:tid 33591] [client 51.161.84.110:56896] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXn0LZlb0QJtwfka8l5MqwAAAQQ"]
[Wed Jan 28 19:34:06.095118 2026] [:error] [pid 33580:tid 33593] [client 51.161.84.110:56918] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0Lplb0QJtwfka8l5MrQAAAQY"]
[Wed Jan 28 19:34:06.270058 2026] [:error] [pid 24482:tid 24494] [client 51.161.84.110:56910] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXn0LqLaUZr_xWekSHOSswAAAcg"]
[Wed Jan 28 19:34:08.824816 2026] [:error] [pid 42740:tid 42755] [client 51.161.84.110:56938] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0MFnjAS34srJlXgSSngAAAI0"]
[Wed Jan 28 19:34:08.868143 2026] [:error] [pid 2625:tid 2644] [client 51.161.84.110:56922] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0MFZhY64HvuPd7w1TDQAAAU0"]
[Wed Jan 28 19:34:09.559008 2026] [:error] [pid 2625:tid 2639] [client 51.161.84.110:59384] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0MVZhY64HvuPd7w1TEAAAAUg"]
[Wed Jan 28 19:34:09.563296 2026] [:error] [pid 24452:tid 24475] [client 51.161.84.110:59388] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXn0Mf0RQOh_GmqmVyZbEAAAAZU"]
[Wed Jan 28 19:34:11.524942 2026] [:error] [pid 42740:tid 42749] [client 51.161.84.110:59402] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0M1njAS34srJlXgSSoAAAAIc"]
[Wed Jan 28 19:34:13.037615 2026] [:error] [pid 33491:tid 33567] [client 51.161.84.110:59410] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0NWP9UY0x3irkINAbNAAAANA"]
[Wed Jan 28 19:34:13.483925 2026] [:error] [pid 33490:tid 33528] [client 51.161.84.110:59414] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXn0NWjexcy58gsBPJGWKAAAAEQ"]
[Wed Jan 28 19:34:15.012430 2026] [:error] [pid 33636:tid 33649] [client 51.161.84.110:59424] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXn0N9IVZAudQH0BSC4r1QAAAgs"]
[Wed Jan 28 19:34:15.606830 2026] [:error] [pid 33491:tid 33552] [client 51.161.84.110:59450] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXn0N2P9UY0x3irkINAbNwAAAME"]
[Wed Jan 28 19:34:15.634146 2026] [:error] [pid 33636:tid 33660] [client 51.161.84.110:59434] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXn0N9IVZAudQH0BSC4r2gAAAhY"]
[Wed Jan 28 19:34:16.188346 2026] [:error] [pid 33490:tid 33533] [client 51.161.84.110:59466] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXn0OGjexcy58gsBPJGWLwAAAEk"]
[Wed Jan 28 19:34:17.488343 2026] [:error] [pid 24452:tid 24456] [client 51.161.84.110:59476] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXn0Of0RQOh_GmqmVyZbHwAAAYI"]
[Wed Jan 28 19:34:20.672908 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:46936] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXn0PGjexcy58gsBPJGWPAAAAFE"]
[Wed Jan 28 19:34:21.303639 2026] [:error] [pid 33491:tid 33568] [client 51.161.84.110:46960] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0PWP9UY0x3irkINAbPQAAANE"]
[Wed Jan 28 19:34:21.533565 2026] [:error] [pid 42740:tid 42757] [client 51.161.84.110:46950] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXn0PVnjAS34srJlXgSSrgAAAI8"]
[Wed Jan 28 19:34:24.235323 2026] [:error] [pid 33636:tid 33657] [client 51.161.84.110:46966] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXn0QNIVZAudQH0BSC4r6AAAAhM"]
[Wed Jan 28 19:34:24.707541 2026] [:error] [pid 33580:tid 33609] [client 51.161.84.110:46978] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXn0QJlb0QJtwfka8l5MvgAAARY"]
[Wed Jan 28 19:34:25.876080 2026] [:error] [pid 33491:tid 33555] [client 51.161.84.110:46994] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXn0QWP9UY0x3irkINAbQgAAAMQ"]
[Wed Jan 28 19:34:26.459689 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:47006] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXn0Qv0RQOh_GmqmVyZbJAAAAZM"]
[Wed Jan 28 19:34:26.572830 2026] [:error] [pid 33491:tid 33567] [client 51.161.84.110:47008] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXn0QmP9UY0x3irkINAbQwAAANA"]
[Wed Jan 28 19:34:27.083530 2026] [:error] [pid 33489:tid 33511] [client 51.161.84.110:47020] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXn0QxZrVZwQUFWC7_9AAQAAABI"]
[Wed Jan 28 19:34:29.860348 2026] [:error] [pid 33490:tid 33527] [client 51.161.84.110:49832] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXn0RWjexcy58gsBPJGWUgAAAEM"]
[Wed Jan 28 19:34:29.962813 2026] [:error] [pid 33489:tid 33512] [client 51.161.84.110:49848] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXn0RRZrVZwQUFWC7_9ABAAAABM"]
[Wed Jan 28 19:34:30.597716 2026] [:error] [pid 33636:tid 33658] [client 51.161.84.110:49854] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXn0RtIVZAudQH0BSC4r7QAAAhQ"]
[Wed Jan 28 19:34:30.838498 2026] [:error] [pid 33491:tid 33558] [client 51.161.84.110:49856] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0RmP9UY0x3irkINAbRAAAAMc"]
[Wed Jan 28 19:34:32.762669 2026] [:error] [pid 42740:tid 42760] [client 51.161.84.110:49866] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx"] [unique_id "aXn0SFnjAS34srJlXgSStQAAAJI"]
[Wed Jan 28 19:34:33.725661 2026] [:error] [pid 24482:tid 24495] [client 51.161.84.110:49872] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXn0SaLaUZr_xWekSHOS0wAAAck"]
[Wed Jan 28 19:34:34.461183 2026] [:error] [pid 24452:tid 24469] [client 51.161.84.110:49882] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn0Sv0RQOh_GmqmVyZbOQAAAY8"]
[Wed Jan 28 19:34:35.787041 2026] [:error] [pid 24482:tid 24497] [client 51.161.84.110:49896] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0S6LaUZr_xWekSHOS1gAAAcs"]
[Wed Jan 28 19:34:36.000728 2026] [:error] [pid 33490:tid 33526] [client 51.161.84.110:49912] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXn0S2jexcy58gsBPJGWZQAAAEI"]
[Wed Jan 28 19:34:36.110129 2026] [:error] [pid 42740:tid 42752] [client 51.161.84.110:49924] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXn0TFnjAS34srJlXgSStwAAAIo"]
[Wed Jan 28 19:34:38.170193 2026] [:error] [pid 33580:tid 33596] [client 51.161.84.110:49932] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx"] [unique_id "aXn0Tplb0QJtwfka8l5MxQAAAQk"]
[Wed Jan 28 19:34:39.210625 2026] [:error] [pid 2625:tid 2642] [client 51.161.84.110:49938] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXn0T1ZhY64HvuPd7w1TLwAAAUs"]
[Wed Jan 28 19:34:39.325360 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:55146] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx"] [unique_id "aXn0T2P9UY0x3irkINAbUwAAAMw"]
[Wed Jan 28 19:34:39.754028 2026] [:error] [pid 42740:tid 42751] [client 51.161.84.110:55158] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0T1njAS34srJlXgSSvAAAAIk"]
[Wed Jan 28 19:34:41.986629 2026] [:error] [pid 24482:tid 24499] [client 51.161.84.110:55170] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0UaLaUZr_xWekSHOS3AAAAc0"]
[Wed Jan 28 19:34:42.199504 2026] [:error] [pid 24452:tid 24476] [client 51.161.84.110:55184] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn0Uv0RQOh_GmqmVyZbPQAAAZY"]
[Wed Jan 28 19:34:42.329270 2026] [:error] [pid 2625:tid 2647] [client 51.161.84.110:55198] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXn0UlZhY64HvuPd7w1TNAAAAVA"]
[Wed Jan 28 19:34:44.287856 2026] [:error] [pid 24452:tid 24478] [client 51.161.84.110:55210] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B9%80%E0%B8%99%E0%B9%88%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0VP0RQOh_GmqmVyZbPwAAAZg"]
[Wed Jan 28 19:34:44.758492 2026] [:error] [pid 24452:tid 24472] [client 51.161.84.110:55218] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXn0VP0RQOh_GmqmVyZbQAAAAZI"]
[Wed Jan 28 19:34:45.216592 2026] [:error] [pid 33491:tid 33573] [client 51.161.84.110:55230] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx"] [unique_id "aXn0VWP9UY0x3irkINAbVwAAANY"]
[Wed Jan 28 19:34:46.116063 2026] [:error] [pid 24482:tid 24510] [client 51.161.84.110:55240] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0VqLaUZr_xWekSHOS4gAAAdg"]
[Wed Jan 28 19:34:47.418582 2026] [:error] [pid 33636:tid 33655] [client 51.161.84.110:55254] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0V9IVZAudQH0BSC4sBQAAAhE"]
[Wed Jan 28 19:34:47.480711 2026] [:error] [pid 33636:tid 33643] [client 51.161.84.110:55260] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0V9IVZAudQH0BSC4sBgAAAgU"]
[Wed Jan 28 19:34:47.755009 2026] [:error] [pid 42740:tid 42747] [client 51.161.84.110:55242] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXn0V1njAS34srJlXgSSyAAAAIU"]
[Wed Jan 28 19:34:49.915869 2026] [:error] [pid 33490:tid 33534] [client 51.161.84.110:32830] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0WWjexcy58gsBPJGWcQAAAEo"]
[Wed Jan 28 19:34:50.381911 2026] [:error] [pid 33636:tid 33639] [client 51.161.84.110:32840] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0WtIVZAudQH0BSC4sCwAAAgE"]
[Wed Jan 28 19:34:50.493561 2026] [:error] [pid 33636:tid 33649] [client 51.161.84.110:32850] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn0WtIVZAudQH0BSC4sDAAAAgs"]
[Wed Jan 28 19:34:50.991306 2026] [:error] [pid 2625:tid 2653] [client 51.161.84.110:32862] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0WlZhY64HvuPd7w1TNQAAAVY"]
[Wed Jan 28 19:34:51.436397 2026] [:error] [pid 24482:tid 24486] [client 51.161.84.110:32872] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B9%80%E0%B8%99%E0%B9%88%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0W6LaUZr_xWekSHOS5QAAAcA"]
[Wed Jan 28 19:35:03.026749 2026] [:error] [pid 24452:tid 24458] [client 51.161.84.110:32902] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B9%80%E0%B8%A7%E0%B8%81%E0%B8%B1%E0%B8%AA.aspx"] [unique_id "aXn0Z_0RQOh_GmqmVyZbYwAAAYQ"]
[Wed Jan 28 19:35:05.603961 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:32892] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0af0RQOh_GmqmVyZbZQAAAYc"]
[Wed Jan 28 19:35:06.391925 2026] [:error] [pid 24452:tid 24467] [client 51.161.84.110:60402] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXn0av0RQOh_GmqmVyZbZgAAAY0"]
[Wed Jan 28 19:35:07.221613 2026] [:error] [pid 33636:tid 33656] [client 51.161.84.110:60408] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0a9IVZAudQH0BSC4sGwAAAhI"]
[Wed Jan 28 19:35:08.162168 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:60424] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXn0bP0RQOh_GmqmVyZbagAAAZM"]
[Wed Jan 28 19:35:10.529502 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:33336] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0blZhY64HvuPd7w1TSwAAAUM"]
[Wed Jan 28 19:35:10.814819 2026] [:error] [pid 33636:tid 33662] [client 51.161.84.110:33340] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXn0btIVZAudQH0BSC4sJQAAAhg"]
[Wed Jan 28 19:35:12.268776 2026] [:error] [pid 33490:tid 33525] [client 51.161.84.110:33350] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0cGjexcy58gsBPJGWkwAAAEE"]
[Wed Jan 28 19:35:12.308891 2026] [:error] [pid 33490:tid 33534] [client 51.161.84.110:33364] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0cGjexcy58gsBPJGWlQAAAEo"]
[Wed Jan 28 19:35:14.999881 2026] [:error] [pid 33489:tid 33504] [client 51.161.84.110:33376] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXn0chZrVZwQUFWC7_9ANwAAAAs"]
[Wed Jan 28 19:35:15.098808 2026] [:error] [pid 33489:tid 33501] [client 51.161.84.110:33392] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXn0cxZrVZwQUFWC7_9AOAAAAAg"]
[Wed Jan 28 19:35:15.402826 2026] [:error] [pid 33489:tid 33495] [client 51.161.84.110:33396] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXn0cxZrVZwQUFWC7_9AOgAAAAI"]
[Wed Jan 28 19:35:16.395662 2026] [:error] [pid 42740:tid 42746] [client 51.161.84.110:33406] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0dFnjAS34srJlXgSS3QAAAIQ"]
[Wed Jan 28 19:35:17.425166 2026] [:error] [pid 33490:tid 33536] [client 51.161.84.110:33418] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXn0dWjexcy58gsBPJGWmwAAAEw"]
[Wed Jan 28 19:35:18.227889 2026] [:error] [pid 33490:tid 33525] [client 51.161.84.110:33422] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0dmjexcy58gsBPJGWnQAAAEE"]
[Wed Jan 28 19:35:19.060207 2026] [:error] [pid 2625:tid 2653] [client 51.161.84.110:33434] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0d1ZhY64HvuPd7w1TWgAAAVY"]
[Wed Jan 28 19:35:19.470673 2026] [:error] [pid 33490:tid 33540] [client 51.161.84.110:56902] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXn0d2jexcy58gsBPJGWoAAAAFA"]
[Wed Jan 28 19:35:21.007709 2026] [:error] [pid 24452:tid 24464] [client 51.161.84.110:56906] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXn0ef0RQOh_GmqmVyZbdAAAAYo"]
[Wed Jan 28 19:35:22.308002 2026] [:error] [pid 33491:tid 33560] [client 51.161.84.110:56914] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXn0emP9UY0x3irkINAbhgAAAMk"]
[Wed Jan 28 19:35:23.392258 2026] [:error] [pid 2625:tid 2654] [client 51.161.84.110:56916] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0e1ZhY64HvuPd7w1TYAAAAVc"]
[Wed Jan 28 19:35:23.940822 2026] [:error] [pid 24482:tid 24493] [client 51.161.84.110:56922] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0e6LaUZr_xWekSHOS-AAAAcc"]
[Wed Jan 28 19:35:24.098581 2026] [:error] [pid 24452:tid 24456] [client 51.161.84.110:56928] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXn0fP0RQOh_GmqmVyZbfAAAAYI"]
[Wed Jan 28 19:35:24.739542 2026] [:error] [pid 24452:tid 24474] [client 51.161.84.110:56938] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXn0fP0RQOh_GmqmVyZbgAAAAZQ"]
[Wed Jan 28 19:35:25.350601 2026] [:error] [pid 24482:tid 24498] [client 51.161.84.110:56942] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn0faLaUZr_xWekSHOS-gAAAcw"]
[Wed Jan 28 19:35:26.305021 2026] [:error] [pid 42740:tid 42764] [client 51.161.84.110:56948] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0flnjAS34srJlXgSS5gAAAJY"]
[Wed Jan 28 19:35:27.028745 2026] [:error] [pid 24482:tid 24494] [client 51.161.84.110:56960] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0f6LaUZr_xWekSHOS_AAAAcg"]
[Wed Jan 28 19:35:28.183719 2026] [:error] [pid 42740:tid 42756] [client 51.161.84.110:56968] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0gFnjAS34srJlXgSS6QAAAI4"]
[Wed Jan 28 19:35:29.793454 2026] [:error] [pid 33489:tid 33513] [client 51.161.84.110:57826] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXn0gRZrVZwQUFWC7_9ATAAAABQ"]
[Wed Jan 28 19:35:30.413157 2026] [:error] [pid 33636:tid 33639] [client 51.161.84.110:57828] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXn0gtIVZAudQH0BSC4sOwAAAgE"]
[Wed Jan 28 19:35:30.879978 2026] [:error] [pid 24482:tid 24498] [client 51.161.84.110:57838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXn0gqLaUZr_xWekSHOTDgAAAcw"]
[Wed Jan 28 19:35:32.069836 2026] [:error] [pid 33490:tid 33535] [client 51.161.84.110:57842] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0hGjexcy58gsBPJGWrAAAAEs"]
[Wed Jan 28 19:35:33.782783 2026] [:error] [pid 33490:tid 33531] [client 51.161.84.110:57846] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXn0hWjexcy58gsBPJGWrQAAAEc"]
[Wed Jan 28 19:35:34.418325 2026] [:error] [pid 33490:tid 33538] [client 51.161.84.110:57864] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXn0hmjexcy58gsBPJGWsAAAAE4"]
[Wed Jan 28 19:35:34.512442 2026] [:error] [pid 33490:tid 33532] [client 51.161.84.110:57860] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0hmjexcy58gsBPJGWsQAAAEg"]
[Wed Jan 28 19:35:35.923583 2026] [:error] [pid 2625:tid 2636] [client 51.161.84.110:57870] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXn0h1ZhY64HvuPd7w1TZgAAAUU"]
[Wed Jan 28 19:35:36.244341 2026] [:error] [pid 33490:tid 33534] [client 51.161.84.110:57884] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXn0iGjexcy58gsBPJGWuAAAAEo"]
[Wed Jan 28 19:35:36.928642 2026] [:error] [pid 33490:tid 33545] [client 51.161.84.110:57896] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0iGjexcy58gsBPJGWwAAAAFU"]
[Wed Jan 28 19:35:37.877485 2026] [:error] [pid 24482:tid 24496] [client 51.161.84.110:57902] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXn0iaLaUZr_xWekSHOTGgAAAco"]
[Wed Jan 28 19:35:38.064200 2026] [:error] [pid 2625:tid 2638] [client 51.161.84.110:57900] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0ilZhY64HvuPd7w1TaAAAAUc"]
[Wed Jan 28 19:35:38.465107 2026] [:error] [pid 33491:tid 33568] [client 51.161.84.110:57912] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0imP9UY0x3irkINAbogAAANE"]
[Wed Jan 28 19:35:39.036291 2026] [:error] [pid 33490:tid 33533] [client 51.161.84.110:57928] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0i2jexcy58gsBPJGWwQAAAEk"]
[Wed Jan 28 19:35:40.519739 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:51620] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0jP0RQOh_GmqmVyZbjgAAAYc"]
[Wed Jan 28 19:35:41.303332 2026] [:error] [pid 33490:tid 33537] [client 51.161.84.110:51634] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXn0jWjexcy58gsBPJGWzAAAAE0"]
[Wed Jan 28 19:35:41.495078 2026] [:error] [pid 33489:tid 33506] [client 51.161.84.110:51656] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0jRZrVZwQUFWC7_9AXgAAAA0"]
[Wed Jan 28 19:35:41.511870 2026] [:error] [pid 33491:tid 33561] [client 51.161.84.110:51650] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0jWP9UY0x3irkINAbowAAAMo"]
[Wed Jan 28 19:35:41.614901 2026] [:error] [pid 42740:tid 42745] [client 51.161.84.110:51668] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95999%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0jVnjAS34srJlXgSTAQAAAIM"]
[Wed Jan 28 19:35:43.746973 2026] [:error] [pid 33489:tid 33515] [client 51.161.84.110:51684] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXn0jxZrVZwQUFWC7_9AaAAAABY"]
[Wed Jan 28 19:35:44.418222 2026] [:error] [pid 33489:tid 33514] [client 51.161.84.110:51688] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn0kBZrVZwQUFWC7_9AagAAABU"]
[Wed Jan 28 19:35:44.705434 2026] [:error] [pid 33580:tid 33610] [client 51.161.84.110:51704] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXn0kJlb0QJtwfka8l5M9QAAARc"]
[Wed Jan 28 19:35:45.087971 2026] [:error] [pid 33490:tid 33527] [client 51.161.84.110:51714] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXn0kWjexcy58gsBPJGW1QAAAEM"]
[Wed Jan 28 19:35:47.040642 2026] [:error] [pid 33491:tid 33560] [client 51.161.84.110:51726] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXn0k2P9UY0x3irkINAbqAAAAMk"]
[Wed Jan 28 19:35:47.772722 2026] [:error] [pid 33491:tid 33570] [client 51.161.84.110:51742] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0k2P9UY0x3irkINAbqwAAANM"]
[Wed Jan 28 19:35:48.043645 2026] [:error] [pid 2625:tid 2636] [client 51.161.84.110:51744] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXn0lFZhY64HvuPd7w1TcAAAAUU"]
[Wed Jan 28 19:35:49.479249 2026] [:error] [pid 2625:tid 2637] [client 51.161.84.110:53652] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0lVZhY64HvuPd7w1TcgAAAUY"]
[Wed Jan 28 19:35:50.044380 2026] [:error] [pid 2625:tid 2644] [client 51.161.84.110:53668] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0llZhY64HvuPd7w1TcwAAAU0"]
[Wed Jan 28 19:35:50.175076 2026] [:error] [pid 33491:tid 33567] [client 51.161.84.110:53684] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0lmP9UY0x3irkINAbrQAAANA"]
[Wed Jan 28 19:35:51.667921 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:53694] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXn0l2jexcy58gsBPJGW4QAAAEU"]
[Wed Jan 28 19:35:52.225235 2026] [:error] [pid 33636:tid 33650] [client 51.161.84.110:53710] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXn0mNIVZAudQH0BSC4sSwAAAgw"]
[Wed Jan 28 19:35:53.084277 2026] [:error] [pid 24482:tid 24500] [client 51.161.84.110:53712] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%A7%E0%B8%B4%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0maLaUZr_xWekSHOTMgAAAc4"]
[Wed Jan 28 19:35:54.707036 2026] [:error] [pid 24452:tid 24472] [client 51.161.84.110:53714] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXn0mv0RQOh_GmqmVyZbpgAAAZI"]
[Wed Jan 28 19:35:54.852589 2026] [:error] [pid 2625:tid 2648] [client 51.161.84.110:53720] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXn0mlZhY64HvuPd7w1TdgAAAVE"]
[Wed Jan 28 19:35:55.819002 2026] [:error] [pid 33491:tid 33575] [client 51.161.84.110:53726] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0m2P9UY0x3irkINAbswAAANg"]
[Wed Jan 28 19:35:56.989487 2026] [:error] [pid 24482:tid 24501] [client 51.161.84.110:53736] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXn0nKLaUZr_xWekSHOTNwAAAc8"]
[Wed Jan 28 19:35:58.102888 2026] [:error] [pid 33491:tid 33572] [client 51.161.84.110:53740] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0nmP9UY0x3irkINAbuAAAANU"]
[Wed Jan 28 19:35:58.261902 2026] [:error] [pid 2625:tid 2637] [client 51.161.84.110:53744] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXn0nlZhY64HvuPd7w1TggAAAUY"]
[Wed Jan 28 19:35:59.336831 2026] [:error] [pid 2625:tid 2633] [client 51.161.84.110:46690] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0n1ZhY64HvuPd7w1ThAAAAUI"]
[Wed Jan 28 19:36:00.295475 2026] [:error] [pid 24482:tid 24498] [client 51.161.84.110:46696] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXn0oKLaUZr_xWekSHOTPAAAAcw"]
[Wed Jan 28 19:36:00.786452 2026] [:error] [pid 33489:tid 33516] [client 51.161.84.110:46712] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXn0oBZrVZwQUFWC7_9AgAAAABc"]
[Wed Jan 28 19:36:09.090112 2026] [:error] [pid 42740:tid 42748] [client 51.161.84.110:46744] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXn0qVnjAS34srJlXgSTPgAAAIY"]
[Wed Jan 28 19:36:12.153820 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:46728] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXn0rGjexcy58gsBPJGW9QAAAFE"]
[Wed Jan 28 19:36:12.517217 2026] [:error] [pid 33490:tid 33534] [client 51.161.84.110:53960] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx"] [unique_id "aXn0rGjexcy58gsBPJGW9gAAAEo"]
[Wed Jan 28 19:36:12.535692 2026] [:error] [pid 33580:tid 33596] [client 51.161.84.110:46716] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0rJlb0QJtwfka8l5NGQAAAQk"]
[Wed Jan 28 19:36:16.696059 2026] [:error] [pid 42740:tid 42766] [client 51.161.84.110:53970] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXn0sFnjAS34srJlXgSTTAAAAJg"]
[Wed Jan 28 19:36:16.856377 2026] [:error] [pid 33490:tid 33546] [client 51.161.84.110:53974] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5188.aspx"] [unique_id "aXn0sGjexcy58gsBPJGW-AAAAFY"]
[Wed Jan 28 19:36:17.424259 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:53982] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0sWjexcy58gsBPJGW-QAAAEY"]
[Wed Jan 28 19:36:20.079502 2026] [:error] [pid 2625:tid 2636] [client 51.161.84.110:51454] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXn0tFZhY64HvuPd7w1TlgAAAUU"]
[Wed Jan 28 19:36:20.695217 2026] [:error] [pid 24452:tid 24456] [client 51.161.84.110:51456] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0tP0RQOh_GmqmVyZbyAAAAYI"]
[Wed Jan 28 19:36:21.933935 2026] [:error] [pid 24452:tid 24476] [client 51.161.84.110:51468] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B9%80%E0%B8%99%E0%B9%88%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0tf0RQOh_GmqmVyZbzQAAAZY"]
[Wed Jan 28 19:36:24.444590 2026] [:error] [pid 33580:tid 33611] [client 51.161.84.110:51484] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXn0uJlb0QJtwfka8l5NHwAAARg"]
[Wed Jan 28 19:36:25.036097 2026] [:error] [pid 2625:tid 2639] [client 51.161.84.110:51498] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXn0uVZhY64HvuPd7w1TmQAAAUg"]
[Wed Jan 28 19:36:25.264733 2026] [:error] [pid 33636:tid 33644] [client 51.161.84.110:51500] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXn0udIVZAudQH0BSC4sewAAAgY"]
[Wed Jan 28 19:36:28.565746 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:51510] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0vGjexcy58gsBPJGXGAAAAEY"]
[Wed Jan 28 19:36:29.342054 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:51516] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0vf0RQOh_GmqmVyZb3QAAAZc"]
[Wed Jan 28 19:36:30.240115 2026] [:error] [pid 2625:tid 2638] [client 51.161.84.110:56156] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXn0vlZhY64HvuPd7w1TnwAAAUc"]
[Wed Jan 28 19:36:30.980669 2026] [:error] [pid 33580:tid 33592] [client 51.161.84.110:56170] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXn0vplb0QJtwfka8l5NLQAAAQU"]
[Wed Jan 28 19:36:32.513892 2026] [:error] [pid 24452:tid 24471] [client 51.161.84.110:56186] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXn0wP0RQOh_GmqmVyZb5QAAAZE"]
[Wed Jan 28 19:36:36.093256 2026] [:error] [pid 33491:tid 33560] [client 51.161.84.110:56198] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXn0xGP9UY0x3irkINAb-QAAAMk"]
[Wed Jan 28 19:36:36.674387 2026] [:error] [pid 33491:tid 33574] [client 51.161.84.110:56212] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B9%80%E0%B8%A7%E0%B8%81%E0%B8%B1%E0%B8%AA.aspx"] [unique_id "aXn0xGP9UY0x3irkINAb-gAAANc"]
[Wed Jan 28 19:36:37.341837 2026] [:error] [pid 33491:tid 33571] [client 51.161.84.110:56218] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXn0xWP9UY0x3irkINAb_QAAANQ"]
[Wed Jan 28 19:36:39.530815 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:37360] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn0x_0RQOh_GmqmVyZcFQAAAZA"]
[Wed Jan 28 19:36:40.626670 2026] [:error] [pid 42740:tid 42766] [client 51.161.84.110:37368] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn0yFnjAS34srJlXgSTcAAAAJg"]
[Wed Jan 28 19:36:42.373739 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:37382] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0ylZhY64HvuPd7w1TqwAAAUM"]
[Wed Jan 28 19:36:42.866754 2026] [:error] [pid 33489:tid 33510] [client 51.161.84.110:37390] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0yhZrVZwQUFWC7_9AugAAABE"]
[Wed Jan 28 19:36:44.474152 2026] [:error] [pid 33580:tid 33597] [client 51.161.84.110:37398] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn0zJlb0QJtwfka8l5NRgAAAQo"]
[Wed Jan 28 19:36:45.648071 2026] [:error] [pid 33489:tid 33498] [client 51.161.84.110:37414] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXn0zRZrVZwQUFWC7_9AvgAAAAU"]
[Wed Jan 28 19:36:48.426598 2026] [:error] [pid 24482:tid 24491] [client 51.161.84.110:37416] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXn00KLaUZr_xWekSHOTdwAAAcU"]
[Wed Jan 28 19:36:48.637880 2026] [:error] [pid 2625:tid 2646] [client 51.161.84.110:37430] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXn00FZhY64HvuPd7w1TsAAAAU8"]
[Wed Jan 28 19:36:49.014721 2026] [:error] [pid 24452:tid 24464] [client 51.161.84.110:37442] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn00f0RQOh_GmqmVyZcJgAAAYo"]
[Wed Jan 28 19:36:49.481991 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:60168] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXn00Wjexcy58gsBPJGXXAAAAFQ"]
[Wed Jan 28 19:36:50.892078 2026] [:error] [pid 33490:tid 33528] [client 51.161.84.110:60178] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn00mjexcy58gsBPJGXYwAAAEQ"]
[Wed Jan 28 19:36:51.455786 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:60194] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn002P9UY0x3irkINAcEQAAANI"]
[Wed Jan 28 19:36:52.098284 2026] [:error] [pid 24482:tid 24502] [client 51.161.84.110:60204] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn01KLaUZr_xWekSHOTfAAAAdA"]
[Wed Jan 28 19:36:55.082593 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:60212] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXn011ZhY64HvuPd7w1TuAAAAUM"]
[Wed Jan 28 19:36:55.447681 2026] [:error] [pid 33580:tid 33609] [client 51.161.84.110:60206] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXn015lb0QJtwfka8l5NUwAAARY"]
[Wed Jan 28 19:36:56.360433 2026] [:error] [pid 33636:tid 33659] [client 51.161.84.110:60222] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXn02NIVZAudQH0BSC4sqgAAAhU"]
[Wed Jan 28 19:36:57.822887 2026] [:error] [pid 33636:tid 33654] [client 51.161.84.110:60230] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXn02dIVZAudQH0BSC4ssgAAAhA"]
[Wed Jan 28 19:36:58.462689 2026] [:error] [pid 33490:tid 33532] [client 51.161.84.110:60242] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXn02mjexcy58gsBPJGXcAAAAEg"]
[Wed Jan 28 19:37:00.981901 2026] [:error] [pid 42740:tid 42744] [client 51.161.84.110:51562] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXn03FnjAS34srJlXgSThgAAAII"]
[Wed Jan 28 19:37:01.724508 2026] [:error] [pid 2625:tid 2635] [client 51.161.84.110:51564] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn03VZhY64HvuPd7w1TyQAAAUQ"]
[Wed Jan 28 19:37:03.397004 2026] [:error] [pid 2625:tid 2641] [client 51.161.84.110:51572] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXn031ZhY64HvuPd7w1TzAAAAUo"]
[Wed Jan 28 19:37:03.949924 2026] [:error] [pid 2625:tid 2655] [client 51.161.84.110:51580] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot789.aspx"] [unique_id "aXn031ZhY64HvuPd7w1TzwAAAVg"]
[Wed Jan 28 19:37:04.315566 2026] [:error] [pid 33489:tid 33501] [client 51.161.84.110:51588] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXn04BZrVZwQUFWC7_9AzQAAAAg"]
[Wed Jan 28 19:37:05.094858 2026] [:error] [pid 33489:tid 33509] [client 51.161.84.110:51598] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXn04RZrVZwQUFWC7_9A0AAAABA"]
[Wed Jan 28 19:37:07.155613 2026] [:error] [pid 24452:tid 24466] [client 51.161.84.110:51612] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn04_0RQOh_GmqmVyZcPAAAAYw"]
[Wed Jan 28 19:37:23.052778 2026] [:error] [pid 33491:tid 33551] [client 51.161.84.110:46624] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXn082P9UY0x3irkINAcVgAAAMA"]
[Wed Jan 28 19:37:23.381131 2026] [:error] [pid 33490:tid 33531] [client 51.161.84.110:46618] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXn082jexcy58gsBPJGX2QAAAEc"]
[Wed Jan 28 19:37:25.371920 2026] [:error] [pid 33490:tid 33527] [client 51.161.84.110:39984] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXn09Wjexcy58gsBPJGX3gAAAEM"]
[Wed Jan 28 19:37:27.318675 2026] [:error] [pid 2625:tid 2645] [client 51.161.84.110:46628] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn091ZhY64HvuPd7w1T_AAAAU4"]
[Wed Jan 28 19:37:28.187870 2026] [:error] [pid 42740:tid 42744] [client 51.161.84.110:46640] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn0-FnjAS34srJlXgSTrgAAAII"]
[Wed Jan 28 19:37:28.468242 2026] [:error] [pid 33636:tid 33639] [client 51.161.84.110:46650] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0-NIVZAudQH0BSC4s3AAAAgE"]
[Wed Jan 28 19:37:28.800042 2026] [:error] [pid 33489:tid 33500] [client 51.161.84.110:46660] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn0-BZrVZwQUFWC7_9A7QAAAAc"]
[Wed Jan 28 19:37:31.223707 2026] [:error] [pid 33636:tid 33655] [client 51.161.84.110:55744] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXn0-9IVZAudQH0BSC4s5AAAAhE"]
[Wed Jan 28 19:37:31.497546 2026] [:error] [pid 33490:tid 33545] [client 51.161.84.110:55742] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn0-2jexcy58gsBPJGX5QAAAFU"]
[Wed Jan 28 19:37:31.689211 2026] [:error] [pid 33491:tid 33568] [client 51.161.84.110:55774] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fullslot.aspx"] [unique_id "aXn0-2P9UY0x3irkINAcZAAAANE"]
[Wed Jan 28 19:37:31.727135 2026] [:error] [pid 33636:tid 33662] [client 51.161.84.110:55758] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn0-9IVZAudQH0BSC4s5QAAAhg"]
[Wed Jan 28 19:37:33.855805 2026] [:error] [pid 33636:tid 33644] [client 51.161.84.110:55782] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goatbet909.aspx"] [unique_id "aXn0_dIVZAudQH0BSC4s6AAAAgY"]
[Wed Jan 28 19:37:35.103387 2026] [:error] [pid 24482:tid 24488] [client 51.161.84.110:55784] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn0_6LaUZr_xWekSHOT3gAAAcI"]
[Wed Jan 28 19:37:35.633628 2026] [:error] [pid 2625:tid 2642] [client 51.161.84.110:55786] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXn0_1ZhY64HvuPd7w1UDQAAAUs"]
[Wed Jan 28 19:37:36.156981 2026] [:error] [pid 24452:tid 24476] [client 51.161.84.110:55792] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1AP0RQOh_GmqmVyZclAAAAZY"]
[Wed Jan 28 19:37:38.391704 2026] [:error] [pid 24482:tid 24500] [client 51.161.84.110:55806] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker999.aspx"] [unique_id "aXn1AqLaUZr_xWekSHOT4AAAAc4"]
[Wed Jan 28 19:37:38.934652 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:55810] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXn1Amjexcy58gsBPJGX-AAAAEU"]
[Wed Jan 28 19:37:39.101644 2026] [:error] [pid 2625:tid 2638] [client 51.161.84.110:55824] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fullslot.aspx"] [unique_id "aXn1A1ZhY64HvuPd7w1UEwAAAUc"]
[Wed Jan 28 19:37:40.411831 2026] [:error] [pid 33636:tid 33644] [client 51.161.84.110:46580] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXn1BNIVZAudQH0BSC4s8AAAAgY"]
[Wed Jan 28 19:37:41.884688 2026] [:error] [pid 2625:tid 2641] [client 51.161.84.110:46586] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goatbet909.aspx"] [unique_id "aXn1BVZhY64HvuPd7w1UFAAAAUo"]
[Wed Jan 28 19:37:41.941821 2026] [:error] [pid 2625:tid 2637] [client 51.161.84.110:46596] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1BVZhY64HvuPd7w1UFQAAAUY"]
[Wed Jan 28 19:37:43.297509 2026] [:error] [pid 24452:tid 24465] [client 51.161.84.110:46602] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aXn1B_0RQOh_GmqmVyZcmQAAAYs"]
[Wed Jan 28 19:37:44.719369 2026] [:error] [pid 33580:tid 33595] [client 51.161.84.110:46608] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1CJlb0QJtwfka8l5NrgAAAQg"]
[Wed Jan 28 19:37:44.721511 2026] [:error] [pid 33580:tid 33594] [client 51.161.84.110:46606] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%A7%E0%B8%B4%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1CJlb0QJtwfka8l5NrwAAAQc"]
[Wed Jan 28 19:37:45.777901 2026] [:error] [pid 24482:tid 24497] [client 51.161.84.110:46612] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker999.aspx"] [unique_id "aXn1CaLaUZr_xWekSHOT5QAAAcs"]
[Wed Jan 28 19:37:45.835875 2026] [:error] [pid 24482:tid 24510] [client 51.161.84.110:46614] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aXn1CaLaUZr_xWekSHOT5gAAAdg"]
[Wed Jan 28 19:37:48.864952 2026] [:error] [pid 2625:tid 2654] [client 51.161.84.110:46632] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn1DFZhY64HvuPd7w1UHAAAAVc"]
[Wed Jan 28 19:37:50.272172 2026] [:error] [pid 42740:tid 42757] [client 51.161.84.110:49098] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXn1DlnjAS34srJlXgST2AAAAI8"]
[Wed Jan 28 19:37:50.309765 2026] [:error] [pid 33491:tid 33570] [client 51.161.84.110:49104] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aXn1DmP9UY0x3irkINAclAAAANM"]
[Wed Jan 28 19:37:50.451880 2026] [:error] [pid 2625:tid 2655] [client 51.161.84.110:46624] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1DlZhY64HvuPd7w1UHwAAAVg"]
[Wed Jan 28 19:37:52.310525 2026] [:error] [pid 2625:tid 2645] [client 51.161.84.110:49116] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aXn1EFZhY64HvuPd7w1UIgAAAU4"]
[Wed Jan 28 19:37:52.594252 2026] [:error] [pid 33636:tid 33642] [client 51.161.84.110:49124] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn1ENIVZAudQH0BSC4s_wAAAgQ"]
[Wed Jan 28 19:37:53.973396 2026] [:error] [pid 33580:tid 33590] [client 51.161.84.110:49140] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1EZlb0QJtwfka8l5NvgAAAQM"]
[Wed Jan 28 19:37:55.026014 2026] [:error] [pid 2625:tid 2647] [client 51.161.84.110:49154] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn1E1ZhY64HvuPd7w1UJAAAAVA"]
[Wed Jan 28 19:37:55.190699 2026] [:error] [pid 33489:tid 33513] [client 51.161.84.110:49142] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn1ExZrVZwQUFWC7_9BFAAAABQ"]
[Wed Jan 28 19:37:57.398437 2026] [:error] [pid 33489:tid 33514] [client 51.161.84.110:49160] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1FRZrVZwQUFWC7_9BFwAAABU"]
[Wed Jan 28 19:37:57.712947 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:49174] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1Ff0RQOh_GmqmVyZcrAAAAYA"]
[Wed Jan 28 19:37:57.868441 2026] [:error] [pid 42740:tid 42763] [client 51.161.84.110:49172] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1FVnjAS34srJlXgST_QAAAJU"]
[Wed Jan 28 19:37:58.964370 2026] [:error] [pid 33490:tid 33539] [client 51.161.84.110:49180] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5188.aspx"] [unique_id "aXn1Fmjexcy58gsBPJGYKAAAAE8"]
[Wed Jan 28 19:38:00.001693 2026] [:error] [pid 2625:tid 2638] [client 51.161.84.110:53768] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1GFZhY64HvuPd7w1UKwAAAUc"]
[Wed Jan 28 19:38:00.444978 2026] [:error] [pid 24452:tid 24467] [client 51.161.84.110:53782] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn1GP0RQOh_GmqmVyZctQAAAY0"]
[Wed Jan 28 19:38:02.053872 2026] [:error] [pid 33489:tid 33501] [client 51.161.84.110:53798] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1GhZrVZwQUFWC7_9BGQAAAAg"]
[Wed Jan 28 19:38:02.888852 2026] [:error] [pid 33491:tid 33554] [client 51.161.84.110:53802] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1GmP9UY0x3irkINAc0AAAAMM"]
[Wed Jan 28 19:38:03.610939 2026] [:error] [pid 42740:tid 42761] [client 51.161.84.110:53816] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1G1njAS34srJlXgSUBgAAAJM"]
[Wed Jan 28 19:38:05.032236 2026] [:error] [pid 33580:tid 33593] [client 51.161.84.110:53824] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXn1HZlb0QJtwfka8l5NyAAAAQY"]
[Wed Jan 28 19:38:05.130363 2026] [:error] [pid 33580:tid 33610] [client 51.161.84.110:53838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXn1HZlb0QJtwfka8l5NyQAAARc"]
[Wed Jan 28 19:38:05.839201 2026] [:error] [pid 33490:tid 33542] [client 51.161.84.110:53858] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXn1HWjexcy58gsBPJGYMQAAAFI"]
[Wed Jan 28 19:38:05.858430 2026] [:error] [pid 33580:tid 33598] [client 51.161.84.110:53850] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn1HZlb0QJtwfka8l5NywAAAQs"]
[Wed Jan 28 19:38:08.519161 2026] [:error] [pid 33636:tid 33651] [client 51.161.84.110:53874] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1INIVZAudQH0BSC4tFQAAAg0"]
[Wed Jan 28 19:38:08.689464 2026] [:error] [pid 42740:tid 42743] [client 51.161.84.110:53886] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXn1IFnjAS34srJlXgSUDQAAAIE"]
[Wed Jan 28 19:38:08.836003 2026] [:error] [pid 33490:tid 33548] [client 51.161.84.110:53902] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXn1IGjexcy58gsBPJGYOAAAAFg"]
[Wed Jan 28 19:38:11.759322 2026] [:error] [pid 33636:tid 33638] [client 51.161.84.110:34940] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXn1I9IVZAudQH0BSC4tFwAAAgA"]
[Wed Jan 28 19:38:12.202651 2026] [:error] [pid 33636:tid 33658] [client 51.161.84.110:34956] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1JNIVZAudQH0BSC4tGQAAAhQ"]
[Wed Jan 28 19:38:13.022159 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:34964] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1Jf0RQOh_GmqmVyZcyAAAAZc"]
[Wed Jan 28 19:38:14.538365 2026] [:error] [pid 24452:tid 24460] [client 51.161.84.110:34966] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXn1Jv0RQOh_GmqmVyZcygAAAYY"]
[Wed Jan 28 19:38:15.987421 2026] [:error] [pid 33489:tid 33512] [client 51.161.84.110:34976] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1JxZrVZwQUFWC7_9BJQAAABM"]
[Wed Jan 28 19:38:16.497059 2026] [:error] [pid 24482:tid 24508] [client 51.161.84.110:34984] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1KKLaUZr_xWekSHOUCQAAAdY"]
[Wed Jan 28 19:38:18.332859 2026] [:error] [pid 33489:tid 33494] [client 51.161.84.110:35014] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1KhZrVZwQUFWC7_9BLAAAAAE"]
[Wed Jan 28 19:38:19.117341 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:35000] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXn1K_0RQOh_GmqmVyZc0AAAAZA"]
[Wed Jan 28 19:38:20.091730 2026] [:error] [pid 33491:tid 33558] [client 51.161.84.110:58490] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1LGP9UY0x3irkINAc6QAAAMc"]
[Wed Jan 28 19:38:31.413251 2026] [:error] [pid 2625:tid 2653] [client 51.161.84.110:58506] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn1N1ZhY64HvuPd7w1UVwAAAVY"]
[Wed Jan 28 19:38:31.722632 2026] [:error] [pid 42740:tid 42756] [client 51.161.84.110:58502] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx"] [unique_id "aXn1N1njAS34srJlXgSUMAAAAI4"]
[Wed Jan 28 19:38:33.256442 2026] [:error] [pid 24452:tid 24455] [client 51.161.84.110:60456] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn1Of0RQOh_GmqmVyZdGAAAAYE"]
[Wed Jan 28 19:38:34.115882 2026] [:error] [pid 24482:tid 24499] [client 51.161.84.110:60464] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1OqLaUZr_xWekSHOUHAAAAc0"]
[Wed Jan 28 19:38:35.830011 2026] [:error] [pid 33491:tid 33566] [client 51.161.84.110:60476] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXn1O2P9UY0x3irkINAc9AAAAM8"]
[Wed Jan 28 19:38:36.722032 2026] [:error] [pid 33491:tid 33553] [client 51.161.84.110:60490] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B9%80%E0%B8%99%E0%B9%88%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1PGP9UY0x3irkINAc-AAAAMI"]
[Wed Jan 28 19:38:38.056780 2026] [:error] [pid 33491:tid 33554] [client 51.161.84.110:60500] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXn1PmP9UY0x3irkINAc-QAAAMM"]
[Wed Jan 28 19:38:38.962350 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:60508] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXn1Pmjexcy58gsBPJGYYgAAAFQ"]
[Wed Jan 28 19:38:39.964743 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:43856] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aXn1P2P9UY0x3irkINAc-wAAANI"]
[Wed Jan 28 19:38:41.637280 2026] [:error] [pid 24452:tid 24455] [client 51.161.84.110:43866] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn1Qf0RQOh_GmqmVyZdNgAAAYE"]
[Wed Jan 28 19:38:41.919071 2026] [:error] [pid 24452:tid 24457] [client 51.161.84.110:43868] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1Qf0RQOh_GmqmVyZdNwAAAYM"]
[Wed Jan 28 19:38:42.010768 2026] [:error] [pid 33491:tid 33559] [client 51.161.84.110:43870] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXn1QmP9UY0x3irkINAc_wAAAMg"]
[Wed Jan 28 19:38:42.470811 2026] [:error] [pid 2625:tid 2645] [client 51.161.84.110:43886] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1QlZhY64HvuPd7w1UXwAAAU4"]
[Wed Jan 28 19:38:44.252174 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:43898] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXn1RGjexcy58gsBPJGYagAAAEU"]
[Wed Jan 28 19:38:44.306971 2026] [:error] [pid 42740:tid 42742] [client 51.161.84.110:43914] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn1RFnjAS34srJlXgSUPAAAAIA"]
[Wed Jan 28 19:38:45.854037 2026] [:error] [pid 33491:tid 33562] [client 51.161.84.110:43916] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1RWP9UY0x3irkINAdBAAAAMs"]
[Wed Jan 28 19:38:46.190830 2026] [:error] [pid 33489:tid 33507] [client 51.161.84.110:43926] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1RhZrVZwQUFWC7_9BUgAAAA4"]
[Wed Jan 28 19:38:46.730270 2026] [:error] [pid 2625:tid 2640] [client 51.161.84.110:43932] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1RlZhY64HvuPd7w1UYgAAAUk"]
[Wed Jan 28 19:38:46.942819 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:43938] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B9%80%E0%B8%A7%E0%B8%81%E0%B8%B1%E0%B8%AA.aspx"] [unique_id "aXn1Rmjexcy58gsBPJGYcQAAAEY"]
[Wed Jan 28 19:38:48.432933 2026] [:error] [pid 33580:tid 33602] [client 51.161.84.110:43940] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot.aspx"] [unique_id "aXn1SJlb0QJtwfka8l5OAAAAAQ8"]
[Wed Jan 28 19:38:49.095222 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:43952] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn1Sf0RQOh_GmqmVyZdRQAAAYc"]
[Wed Jan 28 19:38:50.354539 2026] [:error] [pid 33636:tid 33656] [client 51.161.84.110:34962] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXn1StIVZAudQH0BSC4tOwAAAhI"]
[Wed Jan 28 19:38:51.096716 2026] [:error] [pid 42740:tid 42744] [client 51.161.84.110:34976] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn1S1njAS34srJlXgSUUAAAAII"]
[Wed Jan 28 19:38:52.591816 2026] [:error] [pid 33580:tid 33608] [client 51.161.84.110:34982] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXn1TJlb0QJtwfka8l5OBwAAARU"]
[Wed Jan 28 19:38:53.052253 2026] [:error] [pid 24482:tid 24508] [client 51.161.84.110:34986] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXn1TaLaUZr_xWekSHOUKQAAAdY"]
[Wed Jan 28 19:38:54.681658 2026] [:error] [pid 24452:tid 24465] [client 51.161.84.110:34996] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXn1Tv0RQOh_GmqmVyZdTAAAAYs"]
[Wed Jan 28 19:38:55.263912 2026] [:error] [pid 33490:tid 33527] [client 51.161.84.110:34998] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1T2jexcy58gsBPJGYgQAAAEM"]
[Wed Jan 28 19:38:56.997443 2026] [:error] [pid 42740:tid 42742] [client 51.161.84.110:35000] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXn1UFnjAS34srJlXgSUXAAAAIA"]
[Wed Jan 28 19:38:57.166248 2026] [:error] [pid 42740:tid 42748] [client 51.161.84.110:35004] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXn1UVnjAS34srJlXgSUXQAAAIY"]
[Wed Jan 28 19:38:58.991041 2026] [:error] [pid 33489:tid 33494] [client 51.161.84.110:35006] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn1UhZrVZwQUFWC7_9BWAAAAAE"]
[Wed Jan 28 19:38:59.498563 2026] [:error] [pid 24452:tid 24468] [client 51.161.84.110:60910] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXn1U_0RQOh_GmqmVyZdWQAAAY4"]
[Wed Jan 28 19:39:01.153404 2026] [:error] [pid 33491:tid 33566] [client 51.161.84.110:60920] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXn1VWP9UY0x3irkINAdEAAAAM8"]
[Wed Jan 28 19:39:01.864708 2026] [:error] [pid 33636:tid 33646] [client 51.161.84.110:60922] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXn1VdIVZAudQH0BSC4tSgAAAgg"]
[Wed Jan 28 19:39:03.587811 2026] [:error] [pid 33490:tid 33538] [client 51.161.84.110:60924] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet.aspx"] [unique_id "aXn1V2jexcy58gsBPJGYjwAAAE4"]
[Wed Jan 28 19:39:03.988912 2026] [:error] [pid 24452:tid 24476] [client 51.161.84.110:60926] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1V_0RQOh_GmqmVyZdZgAAAZY"]
[Wed Jan 28 19:39:05.958017 2026] [:error] [pid 33489:tid 33497] [client 51.161.84.110:60942] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1WRZrVZwQUFWC7_9BXgAAAAQ"]
[Wed Jan 28 19:39:06.534592 2026] [:error] [pid 24452:tid 24475] [client 51.161.84.110:60944] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn1Wv0RQOh_GmqmVyZdawAAAZU"]
[Wed Jan 28 19:39:08.231005 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:60946] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1XGP9UY0x3irkINAdFQAAAMw"]
[Wed Jan 28 19:39:08.755933 2026] [:error] [pid 33491:tid 33558] [client 51.161.84.110:60948] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXn1XGP9UY0x3irkINAdHAAAAMc"]
[Wed Jan 28 19:39:10.187288 2026] [:error] [pid 24482:tid 24496] [client 51.161.84.110:50672] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn1XqLaUZr_xWekSHOUNgAAAco"]
[Wed Jan 28 19:39:11.674572 2026] [:error] [pid 33580:tid 33604] [client 51.161.84.110:50686] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXn1X5lb0QJtwfka8l5OFgAAARE"]
[Wed Jan 28 19:39:12.152916 2026] [:error] [pid 33489:tid 33497] [client 51.161.84.110:50698] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXn1YBZrVZwQUFWC7_9BaAAAAAQ"]
[Wed Jan 28 19:39:13.651219 2026] [:error] [pid 33489:tid 33508] [client 51.161.84.110:50706] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXn1YRZrVZwQUFWC7_9BaQAAAA8"]
[Wed Jan 28 19:39:14.464371 2026] [:error] [pid 24452:tid 24465] [client 51.161.84.110:50710] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXn1Yv0RQOh_GmqmVyZdcgAAAYs"]
[Wed Jan 28 19:39:15.488761 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:50718] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn1Y_0RQOh_GmqmVyZddQAAAYc"]
[Wed Jan 28 19:39:16.893834 2026] [:error] [pid 33636:tid 33641] [client 51.161.84.110:50724] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXn1ZNIVZAudQH0BSC4tWAAAAgM"]
[Wed Jan 28 19:39:17.511695 2026] [:error] [pid 33489:tid 33494] [client 51.161.84.110:50734] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1ZRZrVZwQUFWC7_9BawAAAAE"]
[Wed Jan 28 19:39:19.263742 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:50740] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXn1Z_0RQOh_GmqmVyZddwAAAZc"]
[Wed Jan 28 19:39:20.768327 2026] [:error] [pid 33490:tid 33535] [client 51.161.84.110:39132] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXn1aGjexcy58gsBPJGYqwAAAEs"]
[Wed Jan 28 19:39:21.193707 2026] [:error] [pid 33489:tid 33501] [client 51.161.84.110:39138] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn1aRZrVZwQUFWC7_9BcQAAAAg"]
[Wed Jan 28 19:39:22.890483 2026] [:error] [pid 2625:tid 2632] [client 51.161.84.110:39142] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXn1alZhY64HvuPd7w1UewAAAUE"]
[Wed Jan 28 19:39:23.849672 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:39152] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1a2jexcy58gsBPJGYtwAAAFE"]
[Wed Jan 28 19:39:25.751664 2026] [:error] [pid 33580:tid 33598] [client 51.161.84.110:39168] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1bZlb0QJtwfka8l5OGgAAAQs"]
[Wed Jan 28 19:39:26.517035 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:39174] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168bet.aspx"] [unique_id "aXn1bmjexcy58gsBPJGYwwAAAFQ"]
[Wed Jan 28 19:39:28.423508 2026] [:error] [pid 33489:tid 33494] [client 51.161.84.110:39182] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%A7%E0%B8%B4%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1cBZrVZwQUFWC7_9BdgAAAAE"]
[Wed Jan 28 19:39:28.619301 2026] [:error] [pid 33491:tid 33561] [client 51.161.84.110:39194] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa369.aspx"] [unique_id "aXn1cGP9UY0x3irkINAdOQAAAMo"]
[Wed Jan 28 19:39:40.450435 2026] [:error] [pid 33490:tid 33543] [client 51.161.84.110:38290] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXn1fGjexcy58gsBPJGY8AAAAFM"]
[Wed Jan 28 19:39:40.804585 2026] [:error] [pid 24452:tid 24460] [client 51.161.84.110:38304] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa168%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn1fP0RQOh_GmqmVyZdlgAAAYY"]
[Wed Jan 28 19:39:41.303650 2026] [:error] [pid 42740:tid 42744] [client 51.161.84.110:48866] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1fVnjAS34srJlXgSUeAAAAII"]
[Wed Jan 28 19:39:42.536499 2026] [:error] [pid 33489:tid 33508] [client 51.161.84.110:48882] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXn1fhZrVZwQUFWC7_9BgAAAAA8"]
[Wed Jan 28 19:39:44.412961 2026] [:error] [pid 33489:tid 33499] [client 51.161.84.110:48892] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXn1gBZrVZwQUFWC7_9BgwAAAAY"]
[Wed Jan 28 19:39:45.034661 2026] [:error] [pid 2625:tid 2648] [client 51.161.84.110:48908] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn1gVZhY64HvuPd7w1UigAAAVE"]
[Wed Jan 28 19:39:46.968405 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:48922] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXn1glZhY64HvuPd7w1UjQAAAUM"]
[Wed Jan 28 19:39:49.718333 2026] [:error] [pid 33636:tid 33651] [client 51.161.84.110:36736] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1hdIVZAudQH0BSC4tcgAAAg0"]
[Wed Jan 28 19:39:51.679606 2026] [:error] [pid 33636:tid 33660] [client 51.161.84.110:36744] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXn1h9IVZAudQH0BSC4tcwAAAhY"]
[Wed Jan 28 19:39:54.079346 2026] [:error] [pid 33636:tid 33658] [client 51.161.84.110:36748] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn1itIVZAudQH0BSC4tdgAAAhQ"]
[Wed Jan 28 19:39:56.340225 2026] [:error] [pid 24452:tid 24464] [client 51.161.84.110:36764] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn1jP0RQOh_GmqmVyZdpQAAAYo"]
[Wed Jan 28 19:39:59.046753 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:36776] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXn1j_0RQOh_GmqmVyZdqQAAAZA"]
[Wed Jan 28 19:40:01.749794 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:52536] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1kWjexcy58gsBPJGZGQAAAFE"]
[Wed Jan 28 19:40:04.793097 2026] [:error] [pid 33580:tid 33597] [client 51.161.84.110:52538] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXn1lJlb0QJtwfka8l5OQQAAAQo"]
[Wed Jan 28 19:40:06.854329 2026] [:error] [pid 33490:tid 33526] [client 51.161.84.110:52552] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXn1lmjexcy58gsBPJGZIQAAAEI"]
[Wed Jan 28 19:40:09.219310 2026] [:error] [pid 33490:tid 33537] [client 51.161.84.110:52566] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot789.aspx"] [unique_id "aXn1mWjexcy58gsBPJGZJwAAAE0"]
[Wed Jan 28 19:40:11.953727 2026] [:error] [pid 2625:tid 2644] [client 51.161.84.110:36838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXn1m1ZhY64HvuPd7w1UpwAAAU0"]
[Wed Jan 28 19:40:14.518382 2026] [:error] [pid 2625:tid 2635] [client 51.161.84.110:36854] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXn1nlZhY64HvuPd7w1UqQAAAUQ"]
[Wed Jan 28 19:40:16.844291 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:36870] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn1oGP9UY0x3irkINAdYwAAAMw"]
[Wed Jan 28 19:40:29.282435 2026] [:error] [pid 2625:tid 2653] [client 51.161.84.110:34280] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXn1rVZhY64HvuPd7w1UuQAAAVY"]
[Wed Jan 28 19:40:31.470929 2026] [:error] [pid 33489:tid 33494] [client 51.161.84.110:37094] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn1rxZrVZwQUFWC7_9BogAAAAE"]
[Wed Jan 28 19:40:33.500542 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:37106] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fullslot.aspx"] [unique_id "aXn1sf0RQOh_GmqmVyZd7gAAAZM"]
[Wed Jan 28 19:40:35.700341 2026] [:error] [pid 24452:tid 24462] [client 51.161.84.110:37108] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goatbet909.aspx"] [unique_id "aXn1s_0RQOh_GmqmVyZd8gAAAYg"]
[Wed Jan 28 19:40:37.925312 2026] [:error] [pid 24482:tid 24510] [client 51.161.84.110:37110] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker999.aspx"] [unique_id "aXn1taLaUZr_xWekSHOUggAAAdg"]
[Wed Jan 28 19:40:59.304829 2026] [:error] [pid 33490:tid 33548] [client 51.161.84.110:58702] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1y2jexcy58gsBPJGZhAAAAFg"]
[Wed Jan 28 19:41:01.142618 2026] [:error] [pid 42740:tid 42766] [client 51.161.84.110:51106] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn1zVnjAS34srJlXgSUzwAAAJg"]
[Wed Jan 28 19:41:02.972985 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:51112] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aXn1zlZhY64HvuPd7w1U2AAAAUM"]
[Wed Jan 28 19:41:04.985031 2026] [:error] [pid 33489:tid 33517] [client 51.161.84.110:51122] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXn10BZrVZwQUFWC7_9ByQAAABg"]
[Wed Jan 28 19:41:06.816336 2026] [:error] [pid 2625:tid 2631] [client 51.161.84.110:51132] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn10lZhY64HvuPd7w1U3wAAAUA"]
[Wed Jan 28 19:41:08.919806 2026] [:error] [pid 33580:tid 33588] [client 51.161.84.110:51134] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn11Jlb0QJtwfka8l5OkgAAAQE"]
[Wed Jan 28 19:41:10.900156 2026] [:error] [pid 33490:tid 33534] [client 51.161.84.110:48946] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXn11mjexcy58gsBPJGZjAAAAEo"]
[Wed Jan 28 19:41:12.925694 2026] [:error] [pid 24482:tid 24505] [client 51.161.84.110:48948] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXn12KLaUZr_xWekSHOUrgAAAdM"]
[Wed Jan 28 19:41:14.754612 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:48962] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aXn12v0RQOh_GmqmVyZeJgAAAZM"]
[Wed Jan 28 19:41:16.682892 2026] [:error] [pid 24452:tid 24465] [client 51.161.84.110:48978] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXn13P0RQOh_GmqmVyZeKgAAAYs"]
[Wed Jan 28 19:41:18.803012 2026] [:error] [pid 2625:tid 2653] [client 51.161.84.110:48988] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn13lZhY64HvuPd7w1U7gAAAVY"]
[Wed Jan 28 19:41:20.710654 2026] [:error] [pid 24452:tid 24472] [client 51.161.84.110:60492] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn14P0RQOh_GmqmVyZeNQAAAZI"]
[Wed Jan 28 19:41:22.636622 2026] [:error] [pid 33491:tid 33572] [client 51.161.84.110:60502] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot.aspx"] [unique_id "aXn14mP9UY0x3irkINAduQAAANU"]
[Wed Jan 28 19:41:24.542757 2026] [:error] [pid 2625:tid 2652] [client 51.161.84.110:60506] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXn15FZhY64HvuPd7w1VGgAAAVU"]
[Wed Jan 28 19:41:26.698056 2026] [:error] [pid 33490:tid 33545] [client 51.161.84.110:60520] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXn15mjexcy58gsBPJGZ2wAAAFU"]
[Wed Jan 28 19:41:28.607256 2026] [:error] [pid 33490:tid 33539] [client 51.161.84.110:60522] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXn16Gjexcy58gsBPJGZ4gAAAE8"]
[Wed Jan 28 19:41:30.426292 2026] [:error] [pid 33636:tid 33647] [client 51.161.84.110:36686] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXn16tIVZAudQH0BSC4txAAAAgk"]
[Wed Jan 28 19:41:32.585006 2026] [:error] [pid 33636:tid 33650] [client 51.161.84.110:36694] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn17NIVZAudQH0BSC4txwAAAgw"]
[Wed Jan 28 19:41:34.503300 2026] [:error] [pid 24482:tid 24488] [client 51.161.84.110:36706] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXn17qLaUZr_xWekSHOUzwAAAcI"]
[Wed Jan 28 19:41:35.548607 2026] [:error] [pid 2625:tid 2639] [client 51.161.84.110:36722] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXn171ZhY64HvuPd7w1VIAAAAUg"]
[Wed Jan 28 19:41:37.225270 2026] [:error] [pid 33489:tid 33493] [client 51.161.84.110:36724] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet.aspx"] [unique_id "aXn18RZrVZwQUFWC7_9B6AAAAAA"]
[Wed Jan 28 19:41:38.703385 2026] [:error] [pid 24452:tid 24455] [client 51.161.84.110:36726] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn18v0RQOh_GmqmVyZeUQAAAYE"]
[Wed Jan 28 19:41:38.984695 2026] [:error] [pid 24482:tid 24503] [client 144.172.112.114:32858] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aXn18qLaUZr_xWekSHOU0QAAAdE"]
[Wed Jan 28 19:41:40.750665 2026] [:error] [pid 42740:tid 42761] [client 51.161.84.110:33324] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn19FnjAS34srJlXgSVSQAAAJM"]
[Wed Jan 28 19:41:40.854773 2026] [:error] [pid 33580:tid 33607] [client 51.161.84.110:33338] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn19Jlb0QJtwfka8l5OvAAAARQ"]
[Wed Jan 28 19:41:42.742415 2026] [:error] [pid 33489:tid 33500] [client 51.161.84.110:33352] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXn19hZrVZwQUFWC7_9B7AAAAAc"]
[Wed Jan 28 19:41:44.365686 2026] [:error] [pid 33580:tid 33589] [client 51.161.84.110:33360] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn1-Jlb0QJtwfka8l5OvgAAAQI"]
[Wed Jan 28 19:41:44.960690 2026] [:error] [pid 2625:tid 2646] [client 51.161.84.110:33364] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn1-FZhY64HvuPd7w1VLAAAAU8"]
[Wed Jan 28 19:41:47.141267 2026] [:error] [pid 24452:tid 24460] [client 51.161.84.110:33374] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXn1-_0RQOh_GmqmVyZeZgAAAYY"]
[Wed Jan 28 19:41:47.506876 2026] [:error] [pid 33490:tid 33542] [client 51.161.84.110:33370] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn1-2jexcy58gsBPJGZ8QAAAFI"]
[Wed Jan 28 19:41:49.038167 2026] [:error] [pid 33491:tid 33559] [client 51.161.84.110:33390] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXn1_WP9UY0x3irkINAd7wAAAMg"]
[Wed Jan 28 19:41:50.856541 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:57154] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot789.aspx"] [unique_id "aXn1_v0RQOh_GmqmVyZecwAAAZA"]
[Wed Jan 28 19:41:52.184723 2026] [:error] [pid 24452:tid 24471] [client 51.161.84.110:57166] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXn2AP0RQOh_GmqmVyZedgAAAZE"]
[Wed Jan 28 19:41:52.902722 2026] [:error] [pid 33489:tid 33507] [client 51.161.84.110:57180] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXn2ABZrVZwQUFWC7_9B-QAAAA4"]
[Wed Jan 28 19:41:54.980055 2026] [:error] [pid 33491:tid 33557] [client 51.161.84.110:57182] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXn2AmP9UY0x3irkINAd9gAAAMY"]
[Wed Jan 28 19:41:55.110834 2026] [:error] [pid 24482:tid 24490] [client 51.161.84.110:57196] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXn2A6LaUZr_xWekSHOU1wAAAcQ"]
[Wed Jan 28 19:42:11.559198 2026] [:error] [pid 2625:tid 2631] [client 51.161.84.110:57208] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2E1ZhY64HvuPd7w1VQwAAAUA"]
[Wed Jan 28 19:42:12.037052 2026] [:error] [pid 42740:tid 42752] [client 51.161.84.110:57204] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2FFnjAS34srJlXgSVaQAAAIo"]
[Wed Jan 28 19:42:13.833140 2026] [:error] [pid 24452:tid 24476] [client 51.161.84.110:53552] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168bet.aspx"] [unique_id "aXn2Ff0RQOh_GmqmVyZepAAAAZY"]
[Wed Jan 28 19:42:14.570431 2026] [:error] [pid 2625:tid 2652] [client 51.161.84.110:53568] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2FlZhY64HvuPd7w1VSwAAAVU"]
[Wed Jan 28 19:42:16.719267 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:53580] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2GP0RQOh_GmqmVyZetAAAAYA"]
[Wed Jan 28 19:42:17.471361 2026] [:error] [pid 24482:tid 24498] [client 51.161.84.110:53592] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa369.aspx"] [unique_id "aXn2GaLaUZr_xWekSHOU9AAAAcw"]
[Wed Jan 28 19:42:19.348839 2026] [:error] [pid 33580:tid 33588] [client 51.161.84.110:35328] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2G5lb0QJtwfka8l5O1AAAAQE"]
[Wed Jan 28 19:42:20.699889 2026] [:error] [pid 24482:tid 24486] [client 51.161.84.110:35340] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXn2HKLaUZr_xWekSHOU-gAAAcA"]
[Wed Jan 28 19:42:21.351830 2026] [:error] [pid 33636:tid 33655] [client 51.161.84.110:35346] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXn2HdIVZAudQH0BSC4uDAAAAhE"]
[Wed Jan 28 19:42:23.682310 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:35350] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2H1ZhY64HvuPd7w1VVwAAAUM"]
[Wed Jan 28 19:42:25.045196 2026] [:error] [pid 33580:tid 33608] [client 51.161.84.110:35362] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2IZlb0QJtwfka8l5O1gAAARU"]
[Wed Jan 28 19:42:26.060049 2026] [:error] [pid 33490:tid 33540] [client 51.161.84.110:35366] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2Imjexcy58gsBPJGaOQAAAFA"]
[Wed Jan 28 19:42:27.847965 2026] [:error] [pid 33490:tid 33527] [client 51.161.84.110:35378] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2I2jexcy58gsBPJGaPQAAAEM"]
[Wed Jan 28 19:42:29.605794 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:37778] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2JWjexcy58gsBPJGaPwAAAEY"]
[Wed Jan 28 19:42:30.392132 2026] [:error] [pid 33580:tid 33606] [client 51.161.84.110:37786] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2Jplb0QJtwfka8l5O2wAAARM"]
[Wed Jan 28 19:42:31.588239 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:37790] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2J2jexcy58gsBPJGaQAAAAFE"]
[Wed Jan 28 19:42:33.945961 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:37800] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn2KWP9UY0x3irkINAeJgAAAMw"]
[Wed Jan 28 19:42:34.076605 2026] [:error] [pid 24482:tid 24492] [client 51.161.84.110:37802] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn2KqLaUZr_xWekSHOVBwAAAcY"]
[Wed Jan 28 19:42:36.313356 2026] [:error] [pid 33636:tid 33648] [client 51.161.84.110:37818] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aXn2LNIVZAudQH0BSC4uHQAAAgo"]
[Wed Jan 28 19:42:38.704873 2026] [:error] [pid 42740:tid 42749] [client 51.161.84.110:37824] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXn2LlnjAS34srJlXgSVfQAAAIc"]
[Wed Jan 28 19:42:40.409946 2026] [:error] [pid 42740:tid 42765] [client 51.161.84.110:34012] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2MFnjAS34srJlXgSVhAAAAJc"]
[Wed Jan 28 19:42:40.983789 2026] [:error] [pid 33580:tid 33589] [client 51.161.84.110:34016] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2MJlb0QJtwfka8l5O7AAAAQI"]
[Wed Jan 28 19:42:43.068062 2026] [:error] [pid 24482:tid 24504] [client 51.161.84.110:34030] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn2M6LaUZr_xWekSHOVDAAAAdI"]
[Wed Jan 28 19:42:44.907111 2026] [:error] [pid 33636:tid 33644] [client 51.161.84.110:34038] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXn2NNIVZAudQH0BSC4uLAAAAgY"]
[Wed Jan 28 19:42:45.623911 2026] [:error] [pid 2625:tid 2643] [client 51.161.84.110:34054] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2NVZhY64HvuPd7w1VbAAAAUw"]
[Wed Jan 28 19:42:46.985383 2026] [:error] [pid 24482:tid 24506] [client 51.161.84.110:34070] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXn2NqLaUZr_xWekSHOVDgAAAdQ"]
[Wed Jan 28 19:42:48.894322 2026] [:error] [pid 24452:tid 24478] [client 51.161.84.110:34082] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aXn2OP0RQOh_GmqmVyZe6QAAAZg"]
[Wed Jan 28 19:42:51.091297 2026] [:error] [pid 24482:tid 24501] [client 51.161.84.110:36588] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXn2O6LaUZr_xWekSHOVEgAAAc8"]
[Wed Jan 28 19:42:52.978511 2026] [:error] [pid 33491:tid 33561] [client 51.161.84.110:36594] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2PGP9UY0x3irkINAeTQAAAMo"]
[Wed Jan 28 19:42:53.076379 2026] [:error] [pid 33489:tid 33509] [client 51.161.84.110:36606] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn2PRZrVZwQUFWC7_9COAAAABA"]
[Wed Jan 28 19:42:55.738731 2026] [:error] [pid 42740:tid 42761] [client 51.161.84.110:36614] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2P1njAS34srJlXgSVmwAAAJM"]
[Wed Jan 28 19:42:56.683704 2026] [:error] [pid 33636:tid 33648] [client 51.161.84.110:36628] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2QNIVZAudQH0BSC4uNAAAAgo"]
[Wed Jan 28 19:42:58.400865 2026] [:error] [pid 33580:tid 33603] [client 51.161.84.110:36632] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot.aspx"] [unique_id "aXn2Qplb0QJtwfka8l5O9gAAARA"]
[Wed Jan 28 19:43:00.694954 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:59864] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXn2RP0RQOh_GmqmVyZe9wAAAYA"]
[Wed Jan 28 19:43:02.591308 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:59874] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXn2RmP9UY0x3irkINAeWQAAANI"]
[Wed Jan 28 19:43:04.898496 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:59880] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXn2SGjexcy58gsBPJGabQAAAFQ"]
[Wed Jan 28 19:43:07.865918 2026] [:error] [pid 2625:tid 2631] [client 51.161.84.110:59888] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXn2S1ZhY64HvuPd7w1VfAAAAUA"]
[Wed Jan 28 19:43:09.663498 2026] [:error] [pid 33490:tid 33535] [client 51.161.84.110:41376] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2TWjexcy58gsBPJGadgAAAEs"]
[Wed Jan 28 19:43:28.604029 2026] [:error] [pid 24452:tid 24457] [client 51.161.84.110:41402] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aXn2YP0RQOh_GmqmVyZfMAAAAYM"]
[Wed Jan 28 19:43:29.995175 2026] [:error] [pid 33491:tid 33563] [client 51.161.84.110:41390] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXn2YWP9UY0x3irkINAedQAAAMw"]
[Wed Jan 28 19:43:31.347822 2026] [:error] [pid 24452:tid 24468] [client 51.161.84.110:45114] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXn2Y_0RQOh_GmqmVyZfOgAAAY4"]
[Wed Jan 28 19:43:33.359720 2026] [:error] [pid 33490:tid 33526] [client 51.161.84.110:45124] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXn2ZWjexcy58gsBPJGapAAAAEI"]
[Wed Jan 28 19:43:34.658210 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:45132] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2ZmP9UY0x3irkINAeewAAANI"]
[Wed Jan 28 19:43:35.887602 2026] [:error] [pid 24452:tid 24458] [client 51.161.84.110:45138] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn2Z_0RQOh_GmqmVyZfRAAAAYQ"]
[Wed Jan 28 19:43:37.176490 2026] [:error] [pid 2625:tid 2652] [client 51.161.84.110:45140] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn2aVZhY64HvuPd7w1VnAAAAVU"]
[Wed Jan 28 19:43:38.215829 2026] [:error] [pid 33489:tid 33494] [client 51.161.84.110:45146] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2ahZrVZwQUFWC7_9CTwAAAAE"]
[Wed Jan 28 19:43:40.107652 2026] [:error] [pid 42740:tid 42761] [client 51.161.84.110:52930] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168bet.aspx"] [unique_id "aXn2bFnjAS34srJlXgSVuAAAAJM"]
[Wed Jan 28 19:43:40.895324 2026] [:error] [pid 33491:tid 33552] [client 51.161.84.110:52932] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXn2bGP9UY0x3irkINAegAAAAME"]
[Wed Jan 28 19:43:43.132738 2026] [:error] [pid 24452:tid 24458] [client 51.161.84.110:52948] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa369.aspx"] [unique_id "aXn2b_0RQOh_GmqmVyZfYQAAAYQ"]
[Wed Jan 28 19:43:46.231805 2026] [:error] [pid 24452:tid 24468] [client 51.161.84.110:52952] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXn2cv0RQOh_GmqmVyZfaAAAAY4"]
[Wed Jan 28 19:43:46.442432 2026] [:error] [pid 42740:tid 42761] [client 51.161.84.110:52958] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXn2clnjAS34srJlXgSVxQAAAJM"]
[Wed Jan 28 19:43:48.133284 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:52960] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aXn2dFZhY64HvuPd7w1VoQAAAUM"]
[Wed Jan 28 19:43:48.551611 2026] [:error] [pid 2625:tid 2639] [client 51.161.84.110:52962] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2dFZhY64HvuPd7w1VogAAAUg"]
[Wed Jan 28 19:43:50.179519 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:39956] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXn2dmP9UY0x3irkINAeigAAANI"]
[Wed Jan 28 19:43:50.631300 2026] [:error] [pid 33489:tid 33513] [client 51.161.84.110:39968] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn2dhZrVZwQUFWC7_9CYQAAABQ"]
[Wed Jan 28 19:43:52.482696 2026] [:error] [pid 33489:tid 33508] [client 51.161.84.110:39978] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn2eBZrVZwQUFWC7_9CZAAAAA8"]
[Wed Jan 28 19:43:52.859852 2026] [:error] [pid 33489:tid 33502] [client 51.161.84.110:39982] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn2eBZrVZwQUFWC7_9CZQAAAAk"]
[Wed Jan 28 19:43:54.463730 2026] [:error] [pid 33491:tid 33570] [client 51.161.84.110:39990] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2emP9UY0x3irkINAejgAAANM"]
[Wed Jan 28 19:43:54.898704 2026] [:error] [pid 2625:tid 2641] [client 51.161.84.110:40002] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2elZhY64HvuPd7w1VsQAAAUo"]
[Wed Jan 28 19:43:58.058331 2026] [:error] [pid 42740:tid 42763] [client 51.161.84.110:40010] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2flnjAS34srJlXgSVzQAAAJU"]
[Wed Jan 28 19:43:58.101265 2026] [:error] [pid 42740:tid 42745] [client 51.161.84.110:40022] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot.aspx"] [unique_id "aXn2flnjAS34srJlXgSVzgAAAIM"]
[Wed Jan 28 19:44:00.254505 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:57696] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXn2gGjexcy58gsBPJGayQAAAEU"]
[Wed Jan 28 19:44:02.563615 2026] [:error] [pid 24482:tid 24493] [client 51.161.84.110:57710] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXn2gqLaUZr_xWekSHOVmwAAAcc"]
[Wed Jan 28 19:44:04.929997 2026] [:error] [pid 24482:tid 24508] [client 51.161.84.110:57722] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXn2hKLaUZr_xWekSHOVogAAAdY"]
[Wed Jan 28 19:44:06.857714 2026] [:error] [pid 33580:tid 33609] [client 51.161.84.110:57726] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXn2hplb0QJtwfka8l5PJQAAARY"]
[Wed Jan 28 19:44:08.658007 2026] [:error] [pid 42740:tid 42751] [client 51.161.84.110:57740] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn2iFnjAS34srJlXgSV1QAAAIk"]
[Wed Jan 28 19:44:11.314698 2026] [:error] [pid 33490:tid 33534] [client 51.161.84.110:56880] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXn2i2jexcy58gsBPJGa3AAAAEo"]
[Wed Jan 28 19:44:13.186830 2026] [:error] [pid 33490:tid 33535] [client 51.161.84.110:56894] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet.aspx"] [unique_id "aXn2jWjexcy58gsBPJGa3gAAAEs"]
[Wed Jan 28 19:44:15.473675 2026] [:error] [pid 24452:tid 24474] [client 51.161.84.110:56902] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2j_0RQOh_GmqmVyZfkQAAAZQ"]
[Wed Jan 28 19:44:17.824071 2026] [:error] [pid 42740:tid 42753] [client 51.161.84.110:56904] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn2kVnjAS34srJlXgSV3AAAAIs"]
[Wed Jan 28 19:44:19.838931 2026] [:error] [pid 33489:tid 33513] [client 51.161.84.110:49724] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn2kxZrVZwQUFWC7_9ChQAAABQ"]
[Wed Jan 28 19:44:21.637758 2026] [:error] [pid 2625:tid 2645] [client 51.161.84.110:49728] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXn2lVZhY64HvuPd7w1VvgAAAU4"]
[Wed Jan 28 19:44:24.454297 2026] [:error] [pid 33491:tid 33551] [client 51.161.84.110:49736] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXn2mGP9UY0x3irkINAeswAAAMA"]
[Wed Jan 28 19:44:26.426219 2026] [:error] [pid 24482:tid 24496] [client 51.161.84.110:49738] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXn2mqLaUZr_xWekSHOVzAAAAco"]
[Wed Jan 28 19:44:45.989222 2026] [:error] [pid 33490:tid 33540] [client 51.161.84.110:32804] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2rWjexcy58gsBPJGbEwAAAFA"]
[Wed Jan 28 19:44:49.820183 2026] [:error] [pid 33580:tid 33606] [client 51.161.84.110:53200] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2sZlb0QJtwfka8l5PRAAAARM"]
[Wed Jan 28 19:45:16.106306 2026] [:error] [pid 33489:tid 33509] [client 51.161.84.110:32824] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn2zBZrVZwQUFWC7_9CxgAAABA"]
[Wed Jan 28 19:45:20.197582 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:56048] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn20Gjexcy58gsBPJGbPQAAAEU"]
[Wed Jan 28 20:03:18.878800 2026] [:error] [pid 33489:tid 33504] [client 51.161.84.110:47468] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn7BhZrVZwQUFWC7_9GFwAAAAs"]
[Wed Jan 28 20:03:20.981509 2026] [:error] [pid 33489:tid 33507] [client 51.161.84.110:33882] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXn7CBZrVZwQUFWC7_9GGQAAAA4"]
[Wed Jan 28 20:03:22.878990 2026] [:error] [pid 33636:tid 33652] [client 51.161.84.110:33886] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXn7CtIVZAudQH0BSC4yMgAAAg4"]
[Wed Jan 28 20:03:24.964341 2026] [:error] [pid 33490:tid 33532] [client 51.161.84.110:33900] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXn7DGjexcy58gsBPJGhnAAAAEg"]
[Wed Jan 28 20:03:27.033332 2026] [:error] [pid 33580:tid 33597] [client 51.161.84.110:33906] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXn7D5lb0QJtwfka8l5SpQAAAQo"]
[Wed Jan 28 20:03:29.209141 2026] [:error] [pid 33636:tid 33659] [client 51.161.84.110:33912] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXn7EdIVZAudQH0BSC4yOgAAAhU"]
[Wed Jan 28 20:03:31.108186 2026] [:error] [pid 33580:tid 33593] [client 51.161.84.110:40426] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn7E5lb0QJtwfka8l5SqgAAAQY"]
[Wed Jan 28 20:03:33.331181 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:40430] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn7FWjexcy58gsBPJGhpgAAAFQ"]
[Wed Jan 28 20:03:35.490330 2026] [:error] [pid 42740:tid 42762] [client 51.161.84.110:40432] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn7F1njAS34srJlXgSaAgAAAJQ"]
[Wed Jan 28 20:03:37.480889 2026] [:error] [pid 33580:tid 33607] [client 51.161.84.110:40440] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXn7GZlb0QJtwfka8l5SsgAAARQ"]
[Wed Jan 28 20:03:39.528819 2026] [:error] [pid 33636:tid 33640] [client 51.161.84.110:41362] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXn7G9IVZAudQH0BSC4yRQAAAgI"]
[Wed Jan 28 20:03:41.643400 2026] [:error] [pid 2625:tid 2648] [client 51.161.84.110:41364] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn7HVZhY64HvuPd7w1aIgAAAVE"]
[Wed Jan 28 20:03:43.508135 2026] [:error] [pid 33491:tid 33561] [client 51.161.84.110:41370] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXn7H2P9UY0x3irkINAjUAAAAMo"]
[Wed Jan 28 20:03:45.620417 2026] [:error] [pid 33490:tid 33524] [client 51.161.84.110:41378] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXn7IWjexcy58gsBPJGhtAAAAEA"]
[Wed Jan 28 20:03:47.952231 2026] [:error] [pid 33491:tid 33556] [client 51.161.84.110:41388] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn7I2P9UY0x3irkINAjWwAAAMU"]
[Wed Jan 28 20:03:50.332891 2026] [:error] [pid 33636:tid 33648] [client 51.161.84.110:50610] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7JtIVZAudQH0BSC4yWwAAAgo"]
[Wed Jan 28 20:03:52.167492 2026] [:error] [pid 33636:tid 33638] [client 51.161.84.110:50616] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn7KNIVZAudQH0BSC4yXwAAAgA"]
[Wed Jan 28 20:03:54.009844 2026] [:error] [pid 33636:tid 33643] [client 51.161.84.110:50620] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXn7KtIVZAudQH0BSC4yYwAAAgU"]
[Wed Jan 28 20:03:55.822117 2026] [:error] [pid 33489:tid 33505] [client 51.161.84.110:50630] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXn7KxZrVZwQUFWC7_9GLwAAAAw"]
[Wed Jan 28 20:03:57.674530 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:50646] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXn7LVZhY64HvuPd7w1aLAAAAUM"]
[Wed Jan 28 20:03:59.564604 2026] [:error] [pid 33636:tid 33652] [client 51.161.84.110:33782] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXn7L9IVZAudQH0BSC4yaQAAAg4"]
[Wed Jan 28 20:04:01.352918 2026] [:error] [pid 24452:tid 24469] [client 51.161.84.110:33792] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXn7Mf0RQOh_GmqmVyZlSwAAAY8"]
[Wed Jan 28 20:04:03.193506 2026] [:error] [pid 33490:tid 33531] [client 51.161.84.110:33804] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn7M2jexcy58gsBPJGhzAAAAEc"]
[Wed Jan 28 20:04:05.028246 2026] [:error] [pid 33580:tid 33604] [client 51.161.84.110:33818] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn7NZlb0QJtwfka8l5SzQAAARE"]
[Wed Jan 28 20:04:06.957422 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:33830] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXn7Nv0RQOh_GmqmVyZlWQAAAYc"]
[Wed Jan 28 20:04:09.507172 2026] [:error] [pid 33491:tid 33569] [client 51.161.84.110:36148] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn7OWP9UY0x3irkINAjbAAAANI"]
[Wed Jan 28 20:04:11.560692 2026] [:error] [pid 33489:tid 33504] [client 51.161.84.110:36152] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn7OxZrVZwQUFWC7_9GPAAAAAs"]
[Wed Jan 28 20:04:13.442481 2026] [:error] [pid 33580:tid 33598] [client 51.161.84.110:36160] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn7PZlb0QJtwfka8l5S2gAAAQs"]
[Wed Jan 28 20:04:15.409974 2026] [:error] [pid 33636:tid 33656] [client 51.161.84.110:36162] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXn7P9IVZAudQH0BSC4ydQAAAhI"]
[Wed Jan 28 20:04:37.308341 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:36172] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7Vf0RQOh_GmqmVyZlywAAAZc"]
[Wed Jan 28 20:04:39.334662 2026] [:error] [pid 24482:tid 24495] [client 51.161.84.110:53130] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXn7V6LaUZr_xWekSHOa9QAAAck"]
[Wed Jan 28 20:04:41.133171 2026] [:error] [pid 33490:tid 33531] [client 51.161.84.110:53142] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXn7WWjexcy58gsBPJGh_QAAAEc"]
[Wed Jan 28 20:04:43.230377 2026] [:error] [pid 24482:tid 24508] [client 51.161.84.110:53148] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn7W6LaUZr_xWekSHOa_AAAAdY"]
[Wed Jan 28 20:04:45.207957 2026] [:error] [pid 33580:tid 33596] [client 51.161.84.110:53150] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXn7XZlb0QJtwfka8l5TCgAAAQk"]
[Wed Jan 28 20:04:47.156771 2026] [:error] [pid 24482:tid 24507] [client 51.161.84.110:53158] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXn7X6LaUZr_xWekSHObBAAAAdU"]
[Wed Jan 28 20:04:49.032126 2026] [:error] [pid 42740:tid 42749] [client 51.161.84.110:53168] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXn7YVnjAS34srJlXgSaQQAAAIc"]
[Wed Jan 28 20:04:50.902710 2026] [:error] [pid 33491:tid 33553] [client 51.161.84.110:36184] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXn7YmP9UY0x3irkINAjpgAAAMI"]
[Wed Jan 28 20:04:52.828003 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:36192] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx"] [unique_id "aXn7ZP0RQOh_GmqmVyZl6QAAAZc"]
[Wed Jan 28 20:04:54.663950 2026] [:error] [pid 33580:tid 33603] [client 51.161.84.110:36196] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXn7Zplb0QJtwfka8l5TEQAAARA"]
[Wed Jan 28 20:04:56.515118 2026] [:error] [pid 24482:tid 24506] [client 51.161.84.110:36204] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%88%E0%B8%B5%E0%B9%8A%E0%B8%A2%E0%B8%9A777.aspx"] [unique_id "aXn7aKLaUZr_xWekSHObCwAAAdQ"]
[Wed Jan 28 20:04:58.421948 2026] [:error] [pid 24482:tid 24505] [client 51.161.84.110:36218] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B1%E0%B8%9E%E0%B8%97%E0%B8%B9%E0%B8%A2%E0%B8%B9%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7aqLaUZr_xWekSHObFQAAAdM"]
[Wed Jan 28 20:05:00.419768 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:38248] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B9%80%E0%B8%99%E0%B9%88%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7bP0RQOh_GmqmVyZl-gAAAZA"]
[Wed Jan 28 20:05:02.324775 2026] [:error] [pid 33491:tid 33557] [client 51.161.84.110:38258] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXn7bmP9UY0x3irkINAjsQAAAMY"]
[Wed Jan 28 20:05:04.040645 2026] [:error] [pid 33490:tid 33546] [client 51.161.84.110:38274] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn7cGjexcy58gsBPJGiMAAAAFY"]
[Wed Jan 28 20:05:06.111799 2026] [:error] [pid 33491:tid 33560] [client 51.161.84.110:38276] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXn7cmP9UY0x3irkINAjxwAAAMk"]
[Wed Jan 28 20:05:08.066646 2026] [:error] [pid 2625:tid 2641] [client 51.161.84.110:38282] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B9%80%E0%B8%A7%E0%B8%81%E0%B8%B1%E0%B8%AA.aspx"] [unique_id "aXn7dFZhY64HvuPd7w1anwAAAUo"]
[Wed Jan 28 20:05:10.148009 2026] [:error] [pid 24482:tid 24487] [client 51.161.84.110:47804] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn7dqLaUZr_xWekSHObJwAAAcE"]
[Wed Jan 28 20:05:11.913799 2026] [:error] [pid 33490:tid 33527] [client 51.161.84.110:47812] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn7d2jexcy58gsBPJGiQAAAAEM"]
[Wed Jan 28 20:05:13.832245 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:47828] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXn7ef0RQOh_GmqmVyZmLAAAAZA"]
[Wed Jan 28 20:05:15.605877 2026] [:error] [pid 2625:tid 2633] [client 51.161.84.110:47838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7e1ZhY64HvuPd7w1apwAAAUI"]
[Wed Jan 28 20:05:17.386276 2026] [:error] [pid 33490:tid 33533] [client 51.161.84.110:47854] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXn7fWjexcy58gsBPJGiZQAAAEk"]
[Wed Jan 28 20:05:19.366490 2026] [:error] [pid 24482:tid 24509] [client 51.161.84.110:47866] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXn7f6LaUZr_xWekSHObLwAAAdc"]
[Wed Jan 28 20:05:21.295010 2026] [:error] [pid 33491:tid 33554] [client 51.161.84.110:54462] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXn7gWP9UY0x3irkINAj7wAAAMM"]
[Wed Jan 28 20:05:23.181517 2026] [:error] [pid 42740:tid 42760] [client 51.161.84.110:54478] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn7g1njAS34srJlXgSadwAAAJI"]
[Wed Jan 28 20:05:24.938909 2026] [:error] [pid 33491:tid 33564] [client 51.161.84.110:54482] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn7hGP9UY0x3irkINAj8QAAAM0"]
[Wed Jan 28 20:05:26.876156 2026] [:error] [pid 24482:tid 24509] [client 51.161.84.110:54488] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXn7hqLaUZr_xWekSHObOQAAAdc"]
[Wed Jan 28 20:05:28.663674 2026] [:error] [pid 2625:tid 2643] [client 51.161.84.110:54502] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXn7iFZhY64HvuPd7w1arAAAAUw"]
[Wed Jan 28 20:05:30.727463 2026] [:error] [pid 24452:tid 24475] [client 51.161.84.110:45090] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXn7iv0RQOh_GmqmVyZmSgAAAZU"]
[Wed Jan 28 20:05:32.638999 2026] [:error] [pid 33489:tid 33510] [client 51.161.84.110:45106] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn7jBZrVZwQUFWC7_9GogAAABE"]
[Wed Jan 28 20:05:34.603129 2026] [:error] [pid 42740:tid 42755] [client 51.161.84.110:45120] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXn7jlnjAS34srJlXgSaggAAAI0"]
[Wed Jan 28 20:05:55.797978 2026] [:error] [pid 42740:tid 42755] [client 51.161.84.110:45128] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXn7o1njAS34srJlXgSapQAAAI0"]
[Wed Jan 28 20:05:57.817092 2026] [:error] [pid 33580:tid 33588] [client 51.161.84.110:43104] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXn7pZlb0QJtwfka8l5TSAAAAQE"]
[Wed Jan 28 20:05:59.606709 2026] [:error] [pid 2625:tid 2646] [client 51.161.84.110:57460] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7p1ZhY64HvuPd7w1awAAAAU8"]
[Wed Jan 28 20:06:01.691328 2026] [:error] [pid 24452:tid 24460] [client 51.161.84.110:57476] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXn7qf0RQOh_GmqmVyZmdAAAAYY"]
[Wed Jan 28 20:06:03.682516 2026] [:error] [pid 33636:tid 33642] [client 51.161.84.110:57486] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn7q9IVZAudQH0BSC4y5wAAAgQ"]
[Wed Jan 28 20:06:05.586003 2026] [:error] [pid 2625:tid 2644] [client 51.161.84.110:57488] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn7rVZhY64HvuPd7w1azAAAAU0"]
[Wed Jan 28 20:06:07.485441 2026] [:error] [pid 33580:tid 33607] [client 51.161.84.110:57492] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXn7r5lb0QJtwfka8l5TUgAAARQ"]
[Wed Jan 28 20:06:09.210836 2026] [:error] [pid 33580:tid 33596] [client 51.161.84.110:57494] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn7sZlb0QJtwfka8l5TVQAAAQk"]
[Wed Jan 28 20:06:11.172976 2026] [:error] [pid 42740:tid 42747] [client 51.161.84.110:48908] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXn7s1njAS34srJlXgSaqAAAAIU"]
[Wed Jan 28 20:06:13.110060 2026] [:error] [pid 33580:tid 33601] [client 51.161.84.110:48920] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXn7tZlb0QJtwfka8l5TWQAAAQ4"]
[Wed Jan 28 20:06:15.013162 2026] [:error] [pid 33489:tid 33497] [client 51.161.84.110:48930] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot789.aspx"] [unique_id "aXn7txZrVZwQUFWC7_9GyAAAAAQ"]
[Wed Jan 28 20:06:16.996042 2026] [:error] [pid 24482:tid 24502] [client 51.161.84.110:48944] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXn7uKLaUZr_xWekSHObZQAAAdA"]
[Wed Jan 28 20:06:18.954921 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:48948] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXn7umjexcy58gsBPJGioAAAAEY"]
[Wed Jan 28 20:06:20.891256 2026] [:error] [pid 33491:tid 33572] [client 51.161.84.110:55950] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn7vGP9UY0x3irkINAkHgAAANU"]
[Wed Jan 28 20:06:22.746094 2026] [:error] [pid 33489:tid 33499] [client 51.161.84.110:55954] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXn7vhZrVZwQUFWC7_9G0AAAAAY"]
[Wed Jan 28 20:06:24.486303 2026] [:error] [pid 2625:tid 2648] [client 51.161.84.110:55958] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn7wFZhY64HvuPd7w1a3AAAAVE"]
[Wed Jan 28 20:06:26.422344 2026] [:error] [pid 33491:tid 33555] [client 51.161.84.110:55970] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fullslot.aspx"] [unique_id "aXn7wmP9UY0x3irkINAkJgAAAMQ"]
[Wed Jan 28 20:06:28.326114 2026] [:error] [pid 33489:tid 33514] [client 51.161.84.110:55978] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goatbet909.aspx"] [unique_id "aXn7xBZrVZwQUFWC7_9G2AAAABU"]
[Wed Jan 28 20:06:30.278183 2026] [:error] [pid 2625:tid 2654] [client 51.161.84.110:47736] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker999.aspx"] [unique_id "aXn7xlZhY64HvuPd7w1a5AAAAVc"]
[Wed Jan 28 20:06:32.006207 2026] [:error] [pid 33636:tid 33649] [client 51.161.84.110:47738] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aXn7yNIVZAudQH0BSC4y_wAAAgs"]
[Wed Jan 28 20:06:34.007687 2026] [:error] [pid 33491:tid 33564] [client 51.161.84.110:47740] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aXn7ymP9UY0x3irkINAkMAAAAM0"]
[Wed Jan 28 20:06:35.780752 2026] [:error] [pid 33636:tid 33646] [client 51.161.84.110:47748] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn7y9IVZAudQH0BSC4zBAAAAgg"]
[Wed Jan 28 20:06:37.781128 2026] [:error] [pid 33489:tid 33504] [client 51.161.84.110:47750] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn7zRZrVZwQUFWC7_9G4QAAAAs"]
[Wed Jan 28 20:06:39.544795 2026] [:error] [pid 24452:tid 24465] [client 51.161.84.110:55620] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn7z_0RQOh_GmqmVyZmtAAAAYs"]
[Wed Jan 28 20:06:41.353426 2026] [:error] [pid 33636:tid 33651] [client 51.161.84.110:55630] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn70dIVZAudQH0BSC4zCgAAAg0"]
[Wed Jan 28 20:06:43.274104 2026] [:error] [pid 33636:tid 33662] [client 51.161.84.110:55646] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXn709IVZAudQH0BSC4zDwAAAhg"]
[Wed Jan 28 20:06:45.142376 2026] [:error] [pid 24452:tid 24468] [client 51.161.84.110:55654] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn71f0RQOh_GmqmVyZmugAAAY4"]
[Wed Jan 28 20:06:46.897296 2026] [:error] [pid 33490:tid 33530] [client 51.161.84.110:55658] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn71mjexcy58gsBPJGi1AAAAEY"]
[Wed Jan 28 20:06:48.599068 2026] [:error] [pid 2625:tid 2648] [client 51.161.84.110:55668] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn72FZhY64HvuPd7w1a8AAAAVE"]
[Wed Jan 28 20:06:50.476020 2026] [:error] [pid 33491:tid 33571] [client 51.161.84.110:55118] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn72mP9UY0x3irkINAkOQAAANQ"]
[Wed Jan 28 20:06:52.239050 2026] [:error] [pid 24482:tid 24503] [client 51.161.84.110:55134] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn73KLaUZr_xWekSHObdgAAAdE"]
[Wed Jan 28 20:07:12.747257 2026] [:error] [pid 33490:tid 33537] [client 51.161.84.110:55146] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot.aspx"] [unique_id "aXn78Gjexcy58gsBPJGi_AAAAE0"]
[Wed Jan 28 20:07:14.671811 2026] [:error] [pid 33490:tid 33539] [client 51.161.84.110:43896] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXn78mjexcy58gsBPJGjAQAAAE8"]
[Wed Jan 28 20:07:16.571861 2026] [:error] [pid 33491:tid 33561] [client 51.161.84.110:43902] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXn79GP9UY0x3irkINAkUAAAAMo"]
[Wed Jan 28 20:07:18.338104 2026] [:error] [pid 24452:tid 24477] [client 51.161.84.110:43910] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXn79v0RQOh_GmqmVyZm5wAAAZc"]
[Wed Jan 28 20:07:20.201397 2026] [:error] [pid 33491:tid 33555] [client 51.161.84.110:50538] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXn7-GP9UY0x3irkINAkVgAAAMQ"]
[Wed Jan 28 20:07:22.067444 2026] [:error] [pid 33489:tid 33501] [client 51.161.84.110:50546] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn7-hZrVZwQUFWC7_9G_wAAAAg"]
[Wed Jan 28 20:07:23.910972 2026] [:error] [pid 24452:tid 24474] [client 51.161.84.110:50554] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXn7-_0RQOh_GmqmVyZm8wAAAZQ"]
[Wed Jan 28 20:07:25.926687 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:50570] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet.aspx"] [unique_id "aXn7_f0RQOh_GmqmVyZm-AAAAZM"]
[Wed Jan 28 20:07:27.790466 2026] [:error] [pid 33490:tid 33531] [client 51.161.84.110:50582] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn7_2jexcy58gsBPJGjHgAAAEc"]
[Wed Jan 28 20:07:29.625101 2026] [:error] [pid 2625:tid 2639] [client 51.161.84.110:58028] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXn8AVZhY64HvuPd7w1bCQAAAUg"]
[Wed Jan 28 20:07:31.414565 2026] [:error] [pid 33580:tid 33600] [client 51.161.84.110:58040] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXn8A5lb0QJtwfka8l5TigAAAQ0"]
[Wed Jan 28 20:07:33.349344 2026] [:error] [pid 24482:tid 24505] [client 51.161.84.110:58048] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXn8BaLaUZr_xWekSHOblgAAAdM"]
[Wed Jan 28 20:07:35.168542 2026] [:error] [pid 33491:tid 33558] [client 51.161.84.110:58058] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXn8B2P9UY0x3irkINAkZAAAAMc"]
[Wed Jan 28 20:07:36.948461 2026] [:error] [pid 33580:tid 33610] [client 51.161.84.110:58060] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXn8CJlb0QJtwfka8l5TjgAAARc"]
[Wed Jan 28 20:07:38.992381 2026] [:error] [pid 33490:tid 33542] [client 51.161.84.110:58074] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXn8Cmjexcy58gsBPJGjJQAAAFI"]
[Wed Jan 28 20:07:40.911199 2026] [:error] [pid 24482:tid 24490] [client 51.161.84.110:35738] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8DKLaUZr_xWekSHOboQAAAcQ"]
[Wed Jan 28 20:07:42.702281 2026] [:error] [pid 33490:tid 33541] [client 51.161.84.110:35748] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn8Dmjexcy58gsBPJGjKAAAAFE"]
[Wed Jan 28 20:07:44.505895 2026] [:error] [pid 33636:tid 33643] [client 51.161.84.110:35758] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168bet.aspx"] [unique_id "aXn8ENIVZAudQH0BSC4zSgAAAgU"]
[Wed Jan 28 20:07:46.369133 2026] [:error] [pid 33580:tid 33606] [client 51.161.84.110:35762] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa369.aspx"] [unique_id "aXn8Eplb0QJtwfka8l5TlAAAARM"]
[Wed Jan 28 20:07:48.333142 2026] [:error] [pid 33490:tid 33539] [client 51.161.84.110:35778] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXn8FGjexcy58gsBPJGjMQAAAE8"]
[Wed Jan 28 20:07:50.184860 2026] [:error] [pid 24482:tid 24489] [client 51.161.84.110:43738] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXn8FqLaUZr_xWekSHObpwAAAcM"]
[Wed Jan 28 20:07:52.231118 2026] [:error] [pid 33490:tid 33539] [client 51.161.84.110:43750] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXn8GGjexcy58gsBPJGjOQAAAE8"]
[Wed Jan 28 20:07:54.014909 2026] [:error] [pid 24482:tid 24499] [client 51.161.84.110:43760] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXn8GqLaUZr_xWekSHObrQAAAc0"]
[Wed Jan 28 20:07:55.129286 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:43766] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn8G_0RQOh_GmqmVyZnDAAAAYc"]
[Wed Jan 28 20:07:58.785698 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:43768] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXn8Hv0RQOh_GmqmVyZnGgAAAZM"]
[Wed Jan 28 20:08:13.533851 2026] [:error] [pid 24452:tid 24454] [client 67.144.17.59:50695] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXn8Lf0RQOh_GmqmVyZnRwAAAYA"]
[Wed Jan 28 20:08:14.074088 2026] [:error] [pid 33636:tid 33655] [client 67.144.17.59:50882] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXn8LtIVZAudQH0BSC4zZgAAAhE"]
[Wed Jan 28 20:08:14.543051 2026] [:error] [pid 33490:tid 33534] [client 67.144.17.59:50883] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXn8Lmjexcy58gsBPJGjZgAAAEo"]
[Wed Jan 28 20:08:16.708474 2026] [:error] [pid 33489:tid 33502] [client 67.144.17.59:50894] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn8MBZrVZwQUFWC7_9HKAAAAAk"]
[Wed Jan 28 20:08:17.173444 2026] [:error] [pid 24452:tid 24471] [client 67.144.17.59:50898] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXn8Mf0RQOh_GmqmVyZnTAAAAZE"]
[Wed Jan 28 20:08:19.152110 2026] [:error] [pid 33489:tid 33516] [client 67.144.17.59:50910] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20pg.aspx"] [unique_id "aXn8MxZrVZwQUFWC7_9HLgAAABc"]
[Wed Jan 28 20:08:19.623243 2026] [:error] [pid 24482:tid 24490] [client 67.144.17.59:50921] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20pg.aspx"] [unique_id "aXn8M6LaUZr_xWekSHOb4wAAAcQ"]
[Wed Jan 28 20:08:21.724431 2026] [:error] [pid 33491:tid 33569] [client 67.144.17.59:50941] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn8NWP9UY0x3irkINAkvwAAANI"]
[Wed Jan 28 20:08:22.188240 2026] [:error] [pid 24482:tid 24494] [client 67.144.17.59:50946] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn8NqLaUZr_xWekSHOb5QAAAcg"]
[Wed Jan 28 20:08:24.307760 2026] [:error] [pid 2625:tid 2647] [client 67.144.17.59:50963] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.aspx"] [unique_id "aXn8OFZhY64HvuPd7w1bMwAAAVA"]
[Wed Jan 28 20:08:24.783642 2026] [:error] [pid 24482:tid 24487] [client 67.144.17.59:50970] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.aspx"] [unique_id "aXn8OKLaUZr_xWekSHOb6AAAAcE"]
[Wed Jan 28 20:08:27.008327 2026] [:error] [pid 33490:tid 33533] [client 67.144.17.59:50992] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXn8O2jexcy58gsBPJGjcQAAAEk"]
[Wed Jan 28 20:08:27.473330 2026] [:error] [pid 33490:tid 33536] [client 67.144.17.59:50996] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXn8O2jexcy58gsBPJGjcwAAAEw"]
[Wed Jan 28 20:08:29.631363 2026] [:error] [pid 2625:tid 2655] [client 67.144.17.59:51015] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn8PVZhY64HvuPd7w1bNQAAAVg"]
[Wed Jan 28 20:08:30.095140 2026] [:error] [pid 33636:tid 33656] [client 67.144.17.59:51016] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn8PtIVZAudQH0BSC4zcwAAAhI"]
[Wed Jan 28 20:08:32.163697 2026] [:error] [pid 33489:tid 33515] [client 67.144.17.59:51040] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXn8QBZrVZwQUFWC7_9HNQAAABY"]
[Wed Jan 28 20:08:32.645887 2026] [:error] [pid 2625:tid 2652] [client 67.144.17.59:51045] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXn8QFZhY64HvuPd7w1bNwAAAVU"]
[Wed Jan 28 20:08:34.524308 2026] [:error] [pid 24482:tid 24495] [client 67.144.17.59:51057] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8QqLaUZr_xWekSHOb7wAAAck"]
[Wed Jan 28 20:08:34.989630 2026] [:error] [pid 24482:tid 24499] [client 67.144.17.59:51064] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8QqLaUZr_xWekSHOb8AAAAc0"]
[Wed Jan 28 20:08:37.093769 2026] [:error] [pid 33490:tid 33544] [client 67.144.17.59:51085] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aXn8RWjexcy58gsBPJGjfgAAAFQ"]
[Wed Jan 28 20:08:37.563692 2026] [:error] [pid 33491:tid 33566] [client 67.144.17.59:51086] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aXn8RWP9UY0x3irkINAk0AAAAM8"]
[Wed Jan 28 20:08:39.702824 2026] [:error] [pid 24482:tid 24492] [client 67.144.17.59:51111] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXn8R6LaUZr_xWekSHOb9QAAAcY"]
[Wed Jan 28 20:08:40.169037 2026] [:error] [pid 2625:tid 2632] [client 67.144.17.59:51117] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXn8SFZhY64HvuPd7w1bPwAAAUE"]
[Wed Jan 28 20:08:42.354618 2026] [:error] [pid 2625:tid 2645] [client 67.144.17.59:51136] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXn8SlZhY64HvuPd7w1bQgAAAU4"]
[Wed Jan 28 20:08:42.818150 2026] [:error] [pid 2625:tid 2633] [client 67.144.17.59:51143] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXn8SlZhY64HvuPd7w1bRAAAAUI"]
[Wed Jan 28 20:08:45.207595 2026] [:error] [pid 24482:tid 24499] [client 67.144.17.59:51170] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn8TaLaUZr_xWekSHOb_QAAAc0"]
[Wed Jan 28 20:08:45.682788 2026] [:error] [pid 33491:tid 33565] [client 67.144.17.59:51177] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn8TWP9UY0x3irkINAk3AAAAM4"]
[Wed Jan 28 20:08:47.639021 2026] [:error] [pid 2625:tid 2644] [client 67.144.17.59:51202] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%202024.aspx"] [unique_id "aXn8T1ZhY64HvuPd7w1bSgAAAU0"]
[Wed Jan 28 20:08:48.103188 2026] [:error] [pid 33580:tid 33596] [client 67.144.17.59:51211] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%202024.aspx"] [unique_id "aXn8UJlb0QJtwfka8l5T4gAAAQk"]
[Wed Jan 28 20:08:50.360616 2026] [:error] [pid 33636:tid 33659] [client 67.144.17.59:51241] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXn8UtIVZAudQH0BSC4zgAAAAhU"]
[Wed Jan 28 20:08:50.853523 2026] [:error] [pid 33636:tid 33647] [client 67.144.17.59:51246] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXn8UtIVZAudQH0BSC4zgQAAAgk"]
[Wed Jan 28 20:08:52.906612 2026] [:error] [pid 2625:tid 2654] [client 67.144.17.59:51269] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXn8VFZhY64HvuPd7w1bTQAAAVc"]
[Wed Jan 28 20:08:53.370028 2026] [:error] [pid 33580:tid 33611] [client 67.144.17.59:51276] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXn8VZlb0QJtwfka8l5T6gAAARg"]
[Wed Jan 28 20:08:55.291386 2026] [:error] [pid 33489:tid 33493] [client 67.144.17.59:51302] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXn8VxZrVZwQUFWC7_9HPgAAAAA"]
[Wed Jan 28 20:08:55.776484 2026] [:error] [pid 33636:tid 33650] [client 67.144.17.59:51310] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXn8V9IVZAudQH0BSC4zhAAAAgw"]
[Wed Jan 28 20:08:57.892139 2026] [:error] [pid 24452:tid 24470] [client 67.144.17.59:51332] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%202021.aspx"] [unique_id "aXn8Wf0RQOh_GmqmVyZnbAAAAZA"]
[Wed Jan 28 20:08:58.358490 2026] [:error] [pid 24452:tid 24478] [client 67.144.17.59:51336] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%202021.aspx"] [unique_id "aXn8Wv0RQOh_GmqmVyZnbQAAAZg"]
[Wed Jan 28 20:09:00.426072 2026] [:error] [pid 33636:tid 33641] [client 67.144.17.59:51369] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXn8XNIVZAudQH0BSC4zhQAAAgM"]
[Wed Jan 28 20:09:00.930730 2026] [:error] [pid 33580:tid 33600] [client 67.144.17.59:51386] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXn8XJlb0QJtwfka8l5T8AAAAQ0"]
[Wed Jan 28 20:09:02.945269 2026] [:error] [pid 24452:tid 24458] [client 67.144.17.59:51421] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8Xv0RQOh_GmqmVyZndQAAAYQ"]
[Wed Jan 28 20:09:03.408523 2026] [:error] [pid 33489:tid 33507] [client 67.144.17.59:51430] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8XxZrVZwQUFWC7_9HQwAAAA4"]
[Wed Jan 28 20:09:35.683091 2026] [:error] [pid 33636:tid 33660] [client 67.144.17.59:51553] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXn8f9IVZAudQH0BSC4zpAAAAhY"]
[Wed Jan 28 20:09:36.147483 2026] [:error] [pid 33580:tid 33610] [client 67.144.17.59:51935] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXn8gJlb0QJtwfka8l5UBwAAARc"]
[Wed Jan 28 20:09:36.613814 2026] [:error] [pid 24452:tid 24461] [client 67.144.17.59:51944] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXn8gP0RQOh_GmqmVyZnqwAAAYc"]
[Wed Jan 28 20:09:38.801721 2026] [:error] [pid 33490:tid 33534] [client 67.144.17.59:51979] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn8gmjexcy58gsBPJGjswAAAEo"]
[Wed Jan 28 20:09:39.265296 2026] [:error] [pid 33491:tid 33566] [client 67.144.17.59:51992] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXn8g2P9UY0x3irkINAlDAAAAM8"]
[Wed Jan 28 20:09:41.325893 2026] [:error] [pid 2625:tid 2637] [client 67.144.17.59:52033] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXn8hVZhY64HvuPd7w1bbgAAAUY"]
[Wed Jan 28 20:09:41.792942 2026] [:error] [pid 33490:tid 33544] [client 67.144.17.59:52044] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXn8hWjexcy58gsBPJGjtQAAAFQ"]
[Wed Jan 28 20:09:43.699271 2026] [:error] [pid 33490:tid 33545] [client 67.144.17.59:52076] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXn8h2jexcy58gsBPJGjuQAAAFU"]
[Wed Jan 28 20:09:44.164050 2026] [:error] [pid 33490:tid 33538] [client 67.144.17.59:52087] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXn8iGjexcy58gsBPJGjvAAAAE4"]
[Wed Jan 28 20:09:46.289289 2026] [:error] [pid 33489:tid 33493] [client 67.144.17.59:52120] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%A3%E0%B8%B9%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn8ihZrVZwQUFWC7_9HWgAAAAA"]
[Wed Jan 28 20:09:46.760617 2026] [:error] [pid 24482:tid 24492] [client 67.144.17.59:52128] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%A3%E0%B8%B9%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXn8iqLaUZr_xWekSHOcHAAAAcY"]
[Wed Jan 28 20:09:48.635401 2026] [:error] [pid 24452:tid 24454] [client 67.144.17.59:52155] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8jP0RQOh_GmqmVyZnvQAAAYA"]
[Wed Jan 28 20:09:49.099463 2026] [:error] [pid 24452:tid 24462] [client 67.144.17.59:52164] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8jf0RQOh_GmqmVyZnvgAAAYg"]
[Wed Jan 28 20:09:51.003671 2026] [:error] [pid 33490:tid 33545] [client 67.144.17.59:52191] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn8j2jexcy58gsBPJGjxwAAAFU"]
[Wed Jan 28 20:09:51.522739 2026] [:error] [pid 24452:tid 24474] [client 67.144.17.59:52198] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXn8j_0RQOh_GmqmVyZnwwAAAZQ"]
[Wed Jan 28 20:09:53.427445 2026] [:error] [pid 33490:tid 33543] [client 67.144.17.59:52228] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXn8kWjexcy58gsBPJGjygAAAFM"]
[Wed Jan 28 20:09:53.918036 2026] [:error] [pid 33580:tid 33605] [client 67.144.17.59:52230] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXn8kZlb0QJtwfka8l5UEQAAARI"]
[Wed Jan 28 20:09:55.818793 2026] [:error] [pid 33491:tid 33573] [client 67.144.17.59:52261] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20168.aspx"] [unique_id "aXn8k2P9UY0x3irkINAlEQAAANY"]
[Wed Jan 28 20:09:56.289433 2026] [:error] [pid 2625:tid 2655] [client 67.144.17.59:52267] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20168.aspx"] [unique_id "aXn8lFZhY64HvuPd7w1bfwAAAVg"]
[Wed Jan 28 20:09:58.243167 2026] [:error] [pid 33490:tid 33542] [client 67.144.17.59:52292] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20888.aspx"] [unique_id "aXn8lmjexcy58gsBPJGj2QAAAFI"]
[Wed Jan 28 20:09:58.728084 2026] [:error] [pid 24452:tid 24461] [client 67.144.17.59:52306] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20888.aspx"] [unique_id "aXn8lv0RQOh_GmqmVyZnyAAAAYc"]
[Wed Jan 28 20:10:00.662312 2026] [:error] [pid 33491:tid 33559] [client 67.144.17.59:52333] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C168.aspx"] [unique_id "aXn8mGP9UY0x3irkINAlGAAAAMg"]
[Wed Jan 28 20:10:01.126039 2026] [:error] [pid 33580:tid 33607] [client 67.144.17.59:52338] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C168.aspx"] [unique_id "aXn8mZlb0QJtwfka8l5UFAAAARQ"]
[Wed Jan 28 20:10:03.083246 2026] [:error] [pid 33489:tid 33512] [client 67.144.17.59:52372] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXn8mxZrVZwQUFWC7_9HZgAAABM"]
[Wed Jan 28 20:10:03.564953 2026] [:error] [pid 33489:tid 33516] [client 67.144.17.59:52381] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXn8mxZrVZwQUFWC7_9HZwAAABc"]
[Wed Jan 28 20:10:05.901807 2026] [:error] [pid 33580:tid 33587] [client 67.144.17.59:52412] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXn8nZlb0QJtwfka8l5UGAAAAQA"]
[Wed Jan 28 20:10:06.374467 2026] [:error] [pid 33636:tid 33642] [client 67.144.17.59:52422] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXn8ntIVZAudQH0BSC4zswAAAgQ"]
[Wed Jan 28 20:10:08.415518 2026] [:error] [pid 24482:tid 24486] [client 67.144.17.59:52451] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8oKLaUZr_xWekSHOcLwAAAcA"]
[Wed Jan 28 20:10:08.886407 2026] [:error] [pid 33491:tid 33571] [client 67.144.17.59:52458] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8oGP9UY0x3irkINAlHgAAANQ"]
[Wed Jan 28 20:10:10.788284 2026] [:error] [pid 33636:tid 33652] [client 67.144.17.59:52491] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXn8otIVZAudQH0BSC4ztgAAAg4"]
[Wed Jan 28 20:10:11.252547 2026] [:error] [pid 33636:tid 33645] [client 67.144.17.59:52498] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXn8o9IVZAudQH0BSC4ztwAAAgc"]
[Wed Jan 28 20:10:13.199785 2026] [:error] [pid 33490:tid 33538] [client 67.144.17.59:52527] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn8pWjexcy58gsBPJGj4wAAAE4"]
[Wed Jan 28 20:10:13.692434 2026] [:error] [pid 24482:tid 24489] [client 67.144.17.59:52535] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXn8paLaUZr_xWekSHOcMQAAAcM"]
[Wed Jan 28 20:10:15.806205 2026] [:error] [pid 24452:tid 24463] [client 67.144.17.59:52562] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXn8p_0RQOh_GmqmVyZn2QAAAYk"]
[Wed Jan 28 20:10:16.284895 2026] [:error] [pid 33580:tid 33595] [client 67.144.17.59:52569] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXn8qJlb0QJtwfka8l5UIAAAAQg"]
[Wed Jan 28 20:10:18.474422 2026] [:error] [pid 33490:tid 33527] [client 67.144.17.59:52594] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8qmjexcy58gsBPJGj9wAAAEM"]
[Wed Jan 28 20:10:19.018504 2026] [:error] [pid 24482:tid 24497] [client 67.144.17.59:52606] [client 67.144.17.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXn8q6LaUZr_xWekSHOcOgAAAcs"]
[Wed Jan 28 20:48:08.291748 2026] [:error] [pid 33489:tid 33516] [client 84.239.45.16:34049] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoFiBZrVZwQUFWC7_9PpAAAABc"]
[Wed Jan 28 20:48:12.317092 2026] [:error] [pid 33636:tid 33646] [client 84.239.45.16:57418] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFjNIVZAudQH0BSC48FAAAAgg"]
[Wed Jan 28 20:48:13.017927 2026] [:error] [pid 33490:tid 33542] [client 84.239.45.16:38674] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoFjWjexcy58gsBPJGy-wAAAFI"]
[Wed Jan 28 20:48:15.392391 2026] [:error] [pid 33580:tid 33609] [client 84.239.45.16:28219] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFj5lb0QJtwfka8l5cLAAAARY"]
[Wed Jan 28 20:48:18.126470 2026] [:error] [pid 24482:tid 24501] [client 84.239.45.16:22577] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFkqLaUZr_xWekSHOlOwAAAc8"]
[Wed Jan 28 20:48:18.574148 2026] [:error] [pid 33580:tid 33590] [client 84.239.45.16:28219] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFkplb0QJtwfka8l5cLwAAAQM"]
[Wed Jan 28 20:48:20.857685 2026] [:error] [pid 33580:tid 33597] [client 84.239.45.16:28219] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFlJlb0QJtwfka8l5cNQAAAQo"]
[Wed Jan 28 20:48:23.377708 2026] [:error] [pid 33490:tid 33540] [client 84.239.45.16:1777] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFl2jexcy58gsBPJGzFAAAAFA"]
[Wed Jan 28 20:48:25.618676 2026] [:error] [pid 33489:tid 33502] [client 84.239.45.16:35210] [client 84.239.45.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoFmRZrVZwQUFWC7_9PtQAAAAk"]
[Wed Jan 28 21:31:42.182294 2026] [:error] [pid 2625:tid 2650] [client 147.135.214.95:55056] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%AD%E0%B8%A5%2069.aspx"] [unique_id "aXoPvlZhY64HvuPd7w1s7wAAAVM"]
[Wed Jan 28 21:31:44.855388 2026] [:error] [pid 24452:tid 24464] [client 147.135.214.95:45516] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%20%E0%B8%84%E0%B8%B2.aspx"] [unique_id "aXoPwP0RQOh_GmqmVyaApwAAAYo"]
[Wed Jan 28 21:31:47.342848 2026] [:error] [pid 24452:tid 24474] [client 147.135.214.95:51800] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoPw_0RQOh_GmqmVyaArwAAAZQ"]
[Wed Jan 28 21:31:49.959833 2026] [:error] [pid 33491:tid 33560] [client 147.135.214.95:51816] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXoPxWP9UY0x3irkINA6DAAAAMk"]
[Wed Jan 28 21:31:52.207521 2026] [:error] [pid 2625:tid 2639] [client 147.135.214.95:51826] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXoPyFZhY64HvuPd7w1s9gAAAUg"]
[Wed Jan 28 21:31:54.441227 2026] [:error] [pid 24452:tid 24472] [client 147.135.214.95:51836] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXoPyv0RQOh_GmqmVyaAtQAAAZI"]
[Wed Jan 28 21:31:57.799146 2026] [:error] [pid 33491:tid 33566] [client 147.135.214.95:51884] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoPzWP9UY0x3irkINA6IQAAAM8"]
[Wed Jan 28 21:31:59.773509 2026] [:error] [pid 33489:tid 33515] [client 147.135.214.95:51896] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXoPzxZrVZwQUFWC7_9YLQAAABY"]
[Wed Jan 28 21:32:03.357268 2026] [:error] [pid 2625:tid 2654] [client 147.135.214.95:51906] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoP01ZhY64HvuPd7w1tAAAAAVc"]
[Wed Jan 28 21:32:06.229580 2026] [:error] [pid 33490:tid 33529] [client 147.135.214.95:54456] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20%E0%B8%A0%E0%B8%B2%E0%B8%A9%E0%B8%B2%20%E0%B9%84%E0%B8%97%E0%B8%A2%20thscore.aspx"] [unique_id "aXoP1mjexcy58gsBPJHCmQAAAEU"]
[Wed Jan 28 21:32:08.415836 2026] [:error] [pid 2625:tid 2631] [client 147.135.214.95:54464] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20thscore%20vip.aspx"] [unique_id "aXoP2FZhY64HvuPd7w1tBgAAAUA"]
[Wed Jan 28 21:32:10.442871 2026] [:error] [pid 33489:tid 33502] [client 147.135.214.95:54466] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94%E0%B9%84%E0%B8%97%E0%B8%A2%20thscore.aspx"] [unique_id "aXoP2hZrVZwQUFWC7_9YLwAAAAk"]
[Wed Jan 28 21:32:13.612004 2026] [:error] [pid 2625:tid 2640] [client 147.135.214.95:54482] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2020%20%E0%B8%97%E0%B8%B3%20100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%2050.aspx"] [unique_id "aXoP3VZhY64HvuPd7w1tFwAAAUk"]
[Wed Jan 28 21:32:15.471651 2026] [:error] [pid 42740:tid 42763] [client 147.135.214.95:54492] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoP31njAS34srJlXgSuJgAAAJU"]
[Wed Jan 28 21:32:16.182347 2026] [:error] [pid 24482:tid 24490] [client 147.135.214.95:54500] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXoP4KLaUZr_xWekSHOuCwAAAcQ"]
[Wed Jan 28 21:32:18.798417 2026] [:error] [pid 33491:tid 33551] [client 147.135.214.95:49844] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoP4mP9UY0x3irkINA6MgAAAMA"]
[Wed Jan 28 21:32:20.530248 2026] [:error] [pid 42740:tid 42742] [client 147.135.214.95:49856] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoP5FnjAS34srJlXgSuMgAAAIA"]
[Wed Jan 28 21:32:21.660991 2026] [:error] [pid 33636:tid 33640] [client 147.135.214.95:49872] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20ufa365.aspx"] [unique_id "aXoP5dIVZAudQH0BSC5FOQAAAgI"]
[Wed Jan 28 21:32:24.885734 2026] [:error] [pid 33491:tid 33565] [client 147.135.214.95:49876] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202020.aspx"] [unique_id "aXoP6GP9UY0x3irkINA6PAAAAM4"]
[Wed Jan 28 21:32:26.964978 2026] [:error] [pid 33490:tid 33529] [client 147.135.214.95:38922] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoP6mjexcy58gsBPJHCrwAAAEU"]
[Wed Jan 28 21:32:30.069402 2026] [:error] [pid 33580:tid 33606] [client 147.135.214.95:38938] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%20%E0%B8%9A%E0%B8%B1%E0%B8%95%E0%B8%A3%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B8%8A%E0%B8%B2%E0%B8%8A%E0%B8%99%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoP7plb0QJtwfka8l5kVgAAARM"]
[Wed Jan 28 21:32:32.863435 2026] [:error] [pid 33489:tid 33513] [client 147.135.214.95:38940] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoP8BZrVZwQUFWC7_9YYQAAABQ"]
[Wed Jan 28 21:32:35.409941 2026] [:error] [pid 24452:tid 24473] [client 147.135.214.95:38954] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97168%20vip.aspx"] [unique_id "aXoP8_0RQOh_GmqmVyaA5AAAAZM"]
[Wed Jan 28 21:32:37.955377 2026] [:error] [pid 33580:tid 33590] [client 147.135.214.95:38368] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2168.aspx"] [unique_id "aXoP9Zlb0QJtwfka8l5kYAAAAQM"]
[Wed Jan 28 21:33:15.152894 2026] [:error] [pid 24482:tid 24487] [client 147.135.214.95:38380] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXoQG6LaUZr_xWekSHOuUgAAAcE"]
[Wed Jan 28 21:33:17.659964 2026] [:error] [pid 24452:tid 24461] [client 147.135.214.95:40422] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXoQHf0RQOh_GmqmVyaBCQAAAYc"]
[Wed Jan 28 21:33:21.038681 2026] [:error] [pid 33491:tid 33553] [client 147.135.214.95:40426] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXoQIWP9UY0x3irkINA6bAAAAMI"]
[Wed Jan 28 21:33:24.149226 2026] [:error] [pid 2625:tid 2632] [client 147.135.214.95:40436] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%811%E0%B8%A3%E0%B8%B1%E0%B8%9A50.aspx"] [unique_id "aXoQJFZhY64HvuPd7w1tagAAAUE"]
[Wed Jan 28 21:33:26.470882 2026] [:error] [pid 24452:tid 24477] [client 147.135.214.95:52700] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B9%84%E0%B8%94%E0%B9%89100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoQJv0RQOh_GmqmVyaBFwAAAZc"]
[Wed Jan 28 21:33:30.426216 2026] [:error] [pid 2625:tid 2640] [client 147.135.214.95:52716] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoQKlZhY64HvuPd7w1tbwAAAUk"]
[Wed Jan 28 21:33:33.084459 2026] [:error] [pid 42740:tid 42759] [client 147.135.214.95:52728] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXoQLVnjAS34srJlXgSugQAAAJE"]
[Wed Jan 28 21:33:36.838278 2026] [:error] [pid 24452:tid 24467] [client 147.135.214.95:45216] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXoQMP0RQOh_GmqmVyaBIwAAAY0"]
[Wed Jan 28 21:33:39.132277 2026] [:error] [pid 33636:tid 33655] [client 147.135.214.95:45218] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoQM9IVZAudQH0BSC5FZgAAAhE"]
[Wed Jan 28 21:33:42.802146 2026] [:error] [pid 24482:tid 24509] [client 147.135.214.95:45220] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%9F%E0%B8%B5%E0%B8%A2%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXoQNqLaUZr_xWekSHOudgAAAdc"]
[Wed Jan 28 21:33:45.614078 2026] [:error] [pid 33636:tid 33649] [client 147.135.214.95:45230] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoQOdIVZAudQH0BSC5FaAAAAgs"]
[Wed Jan 28 21:33:48.869147 2026] [:error] [pid 33491:tid 33560] [client 147.135.214.95:52530] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoQPGP9UY0x3irkINA6lQAAAMk"]
[Wed Jan 28 21:33:52.753084 2026] [:error] [pid 2625:tid 2639] [client 147.135.214.95:52536] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXoQQFZhY64HvuPd7w1tkgAAAUg"]
[Wed Jan 28 21:33:55.236317 2026] [:error] [pid 33580:tid 33603] [client 147.135.214.95:52552] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXoQQ5lb0QJtwfka8l5kmwAAARA"]
[Wed Jan 28 21:33:57.437226 2026] [:error] [pid 33490:tid 33536] [client 147.135.214.95:59280] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoQRWjexcy58gsBPJHDgAAAAEw"]
[Wed Jan 28 21:34:01.619852 2026] [:error] [pid 33489:tid 33502] [client 147.135.214.95:59286] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202024.aspx"] [unique_id "aXoQSRZrVZwQUFWC7_9YzAAAAAk"]
[Wed Jan 28 21:34:03.873613 2026] [:error] [pid 24482:tid 24508] [client 147.135.214.95:59296] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXoQS6LaUZr_xWekSHOuiwAAAdY"]
[Wed Jan 28 21:34:06.221162 2026] [:error] [pid 33490:tid 33526] [client 147.135.214.95:59664] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20mukob.aspx"] [unique_id "aXoQTmjexcy58gsBPJHDkAAAAEI"]
[Wed Jan 28 21:34:10.824763 2026] [:error] [pid 33636:tid 33638] [client 147.135.214.95:59668] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoQUtIVZAudQH0BSC5FfQAAAgA"]
[Wed Jan 28 21:34:42.873143 2026] [:error] [pid 24482:tid 24487] [client 147.135.214.95:59682] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoQcqLaUZr_xWekSHOutgAAAcE"]
[Wed Jan 28 21:34:45.720925 2026] [:error] [pid 24482:tid 24504] [client 147.135.214.95:37548] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoQdaLaUZr_xWekSHOuuAAAAdI"]
[Wed Jan 28 21:34:48.563801 2026] [:error] [pid 2625:tid 2646] [client 147.135.214.95:43042] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXoQeFZhY64HvuPd7w1t0AAAAU8"]
[Wed Jan 28 21:34:51.856760 2026] [:error] [pid 33580:tid 33600] [client 147.135.214.95:43050] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXoQe5lb0QJtwfka8l5kuwAAAQ0"]
[Wed Jan 28 21:34:54.372688 2026] [:error] [pid 24482:tid 24507] [client 147.135.214.95:43052] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%97%E0%B9%88%E0%B8%87%E0%B8%AB%E0%B8%A7%E0%B8%A224%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoQfqLaUZr_xWekSHOuvQAAAdU"]
[Wed Jan 28 21:34:57.478696 2026] [:error] [pid 24452:tid 24464] [client 147.135.214.95:48308] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXoQgf0RQOh_GmqmVyaBewAAAYo"]
[Wed Jan 28 21:35:00.271128 2026] [:error] [pid 24482:tid 24487] [client 147.135.214.95:48324] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoQhKLaUZr_xWekSHOuxAAAAcE"]
[Wed Jan 28 21:35:02.281205 2026] [:error] [pid 33491:tid 33564] [client 147.135.214.95:48330] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2.aspx"] [unique_id "aXoQhmP9UY0x3irkINA66AAAAM0"]
[Wed Jan 28 21:35:04.951402 2026] [:error] [pid 42740:tid 42749] [client 147.135.214.95:48338] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx"] [unique_id "aXoQiFnjAS34srJlXgSutQAAAIc"]
[Wed Jan 28 21:35:07.724656 2026] [:error] [pid 33636:tid 33652] [client 147.135.214.95:59254] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXoQi9IVZAudQH0BSC5FtgAAAg4"]
[Wed Jan 28 21:35:10.587389 2026] [:error] [pid 33491:tid 33571] [client 147.135.214.95:59266] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoQjmP9UY0x3irkINA68wAAANQ"]
[Wed Jan 28 21:35:13.818193 2026] [:error] [pid 24452:tid 24456] [client 147.135.214.95:59278] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoQkf0RQOh_GmqmVyaBigAAAYI"]
[Wed Jan 28 21:35:16.227157 2026] [:error] [pid 33580:tid 33588] [client 147.135.214.95:49316] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89100%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXoQlJlb0QJtwfka8l5kyQAAAQE"]
[Wed Jan 28 21:35:19.494212 2026] [:error] [pid 33580:tid 33602] [client 147.135.214.95:49324] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXoQl5lb0QJtwfka8l5kzwAAAQ8"]
[Wed Jan 28 21:35:23.382746 2026] [:error] [pid 33490:tid 33538] [client 147.135.214.95:49328] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m98%20bet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXoQm2jexcy58gsBPJHELwAAAE4"]
[Wed Jan 28 21:35:26.803496 2026] [:error] [pid 33490:tid 33547] [client 147.135.214.95:47938] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/megaways%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoQnmjexcy58gsBPJHEMgAAAFc"]
[Wed Jan 28 21:35:28.807507 2026] [:error] [pid 33636:tid 33643] [client 147.135.214.95:47954] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aXoQoNIVZAudQH0BSC5FzwAAAgU"]
[Wed Jan 28 21:35:31.042354 2026] [:error] [pid 33490:tid 33537] [client 147.135.214.95:47970] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoQo2jexcy58gsBPJHENwAAAE0"]
[Wed Jan 28 21:35:35.066567 2026] [:error] [pid 42740:tid 42755] [client 147.135.214.95:47976] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXoQp1njAS34srJlXgSuzQAAAI0"]
[Wed Jan 28 21:35:37.402659 2026] [:error] [pid 24452:tid 24456] [client 147.135.214.95:60910] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aXoQqf0RQOh_GmqmVyaBqQAAAYI"]
[Wed Jan 28 21:36:29.184485 2026] [:error] [pid 24452:tid 24464] [client 51.161.84.110:55562] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXoQ3f0RQOh_GmqmVyaB6AAAAYo"]
[Wed Jan 28 21:36:31.344827 2026] [:error] [pid 42740:tid 42766] [client 51.161.84.110:42244] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXoQ31njAS34srJlXgSvDwAAAJg"]
[Wed Jan 28 21:36:34.515061 2026] [:error] [pid 33489:tid 33512] [client 51.161.84.110:42256] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXoQ4hZrVZwQUFWC7_9ZTgAAABM"]
[Wed Jan 28 21:36:36.928376 2026] [:error] [pid 33489:tid 33506] [client 51.161.84.110:42266] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXoQ5BZrVZwQUFWC7_9ZUQAAAA0"]
[Wed Jan 28 21:36:40.369467 2026] [:error] [pid 33491:tid 33570] [client 51.161.84.110:37918] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXoQ6GP9UY0x3irkINA7PQAAANM"]
[Wed Jan 28 21:36:42.944817 2026] [:error] [pid 24452:tid 24474] [client 51.161.84.110:37926] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXoQ6v0RQOh_GmqmVyaB9AAAAZQ"]
[Wed Jan 28 21:36:45.519703 2026] [:error] [pid 24452:tid 24473] [client 51.161.84.110:37928] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoQ7f0RQOh_GmqmVyaB-gAAAZM"]
[Wed Jan 28 21:36:48.801806 2026] [:error] [pid 33636:tid 33640] [client 51.161.84.110:37940] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoQ8NIVZAudQH0BSC5F_QAAAgI"]
[Wed Jan 28 21:36:51.444828 2026] [:error] [pid 2625:tid 2654] [client 51.161.84.110:48930] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXoQ81ZhY64HvuPd7w1uIQAAAVc"]
[Wed Jan 28 21:36:53.699333 2026] [:error] [pid 33491:tid 33560] [client 51.161.84.110:48944] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXoQ9WP9UY0x3irkINA7SAAAAMk"]
[Wed Jan 28 21:36:56.549636 2026] [:error] [pid 24452:tid 24464] [client 51.161.84.110:48950] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXoQ-P0RQOh_GmqmVyaCBwAAAYo"]
[Wed Jan 28 21:36:58.667747 2026] [:error] [pid 24482:tid 24496] [client 51.161.84.110:48952] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoQ-qLaUZr_xWekSHOvPAAAAco"]
[Wed Jan 28 21:37:01.741439 2026] [:error] [pid 33490:tid 33538] [client 51.161.84.110:46926] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXoQ_Wjexcy58gsBPJHEvQAAAE4"]
[Wed Jan 28 21:37:03.820469 2026] [:error] [pid 24452:tid 24472] [client 51.161.84.110:46928] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoQ__0RQOh_GmqmVyaCDAAAAZI"]
[Wed Jan 28 21:37:08.679020 2026] [:error] [pid 33489:tid 33499] [client 51.161.84.110:46942] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXoRBBZrVZwQUFWC7_9ZZQAAAAY"]
[Wed Jan 28 21:37:10.868595 2026] [:error] [pid 24482:tid 24510] [client 51.161.84.110:39874] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoRBqLaUZr_xWekSHOvSQAAAdg"]
[Wed Jan 28 21:37:14.146629 2026] [:error] [pid 42740:tid 42743] [client 51.161.84.110:39886] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoRClnjAS34srJlXgSvMwAAAIE"]
[Wed Jan 28 21:37:16.912875 2026] [:error] [pid 33490:tid 33537] [client 51.161.84.110:39894] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoRDGjexcy58gsBPJHE0AAAAE0"]
[Wed Jan 28 21:37:19.481857 2026] [:error] [pid 33490:tid 33543] [client 51.161.84.110:39910] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXoRD2jexcy58gsBPJHE0wAAAFM"]
[Wed Jan 28 21:37:23.325384 2026] [:error] [pid 24452:tid 24469] [client 51.161.84.110:54810] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXoRE_0RQOh_GmqmVyaCHwAAAY8"]
[Wed Jan 28 21:38:01.482677 2026] [:error] [pid 33491:tid 33557] [client 51.161.84.110:54818] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXoROWP9UY0x3irkINA7kwAAAMY"]
[Wed Jan 28 21:38:05.689624 2026] [:error] [pid 2625:tid 2634] [client 51.161.84.110:42052] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXoRPVZhY64HvuPd7w1uXAAAAUM"]
[Wed Jan 28 21:38:08.821526 2026] [:error] [pid 2625:tid 2632] [client 51.161.84.110:42068] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXoRQFZhY64HvuPd7w1uYAAAAUE"]
[Wed Jan 28 21:38:12.181378 2026] [:error] [pid 33580:tid 33609] [client 51.161.84.110:38966] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXoRRJlb0QJtwfka8l5lRQAAARY"]
[Wed Jan 28 21:38:14.785492 2026] [:error] [pid 33580:tid 33598] [client 51.161.84.110:38972] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXoRRplb0QJtwfka8l5lSQAAAQs"]
[Wed Jan 28 21:38:17.636655 2026] [:error] [pid 33580:tid 33594] [client 51.161.84.110:38980] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoRSZlb0QJtwfka8l5lSgAAAQc"]
[Wed Jan 28 21:38:22.111384 2026] [:error] [pid 33580:tid 33605] [client 51.161.84.110:55208] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXoRTplb0QJtwfka8l5lUAAAARI"]
[Wed Jan 28 21:38:25.925787 2026] [:error] [pid 42740:tid 42744] [client 51.161.84.110:55218] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXoRUVnjAS34srJlXgSveAAAAII"]
[Wed Jan 28 21:38:28.034915 2026] [:error] [pid 33490:tid 33548] [client 51.161.84.110:55234] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXoRVGjexcy58gsBPJHFMwAAAFg"]
[Wed Jan 28 21:38:33.666991 2026] [:error] [pid 24452:tid 24461] [client 51.161.84.110:34208] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoRWf0RQOh_GmqmVyaCTgAAAYc"]
[Wed Jan 28 21:38:36.400111 2026] [:error] [pid 33491:tid 33565] [client 51.161.84.110:34218] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXoRXGP9UY0x3irkINA7ugAAAM4"]
[Wed Jan 28 21:38:39.162634 2026] [:error] [pid 24452:tid 24457] [client 51.161.84.110:34224] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXoRX_0RQOh_GmqmVyaCVAAAAYM"]
[Wed Jan 28 21:38:43.426971 2026] [:error] [pid 42740:tid 42752] [client 51.161.84.110:43014] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoRY1njAS34srJlXgSvhgAAAIo"]
[Wed Jan 28 21:38:45.338898 2026] [:error] [pid 2625:tid 2652] [client 51.161.84.110:43030] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXoRZVZhY64HvuPd7w1ugAAAAVU"]
[Wed Jan 28 21:38:47.464200 2026] [:error] [pid 24482:tid 24498] [client 51.161.84.110:43038] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXoRZ6LaUZr_xWekSHOvjAAAAcw"]
[Wed Jan 28 21:38:50.318624 2026] [:error] [pid 33636:tid 33654] [client 51.161.84.110:47258] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXoRatIVZAudQH0BSC5GYAAAAhA"]
[Wed Jan 28 21:38:52.748858 2026] [:error] [pid 24482:tid 24489] [client 51.161.84.110:47272] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXoRbKLaUZr_xWekSHOvkwAAAcM"]
[Wed Jan 28 21:38:55.773219 2026] [:error] [pid 33636:tid 33650] [client 51.161.84.110:47280] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx"] [unique_id "aXoRb9IVZAudQH0BSC5GYwAAAgw"]
[Wed Jan 28 21:39:23.947559 2026] [:error] [pid 33491:tid 33574] [client 51.161.84.110:47286] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoRi2P9UY0x3irkINA77AAAANc"]
[Wed Jan 28 21:39:25.967707 2026] [:error] [pid 42740:tid 42752] [client 51.161.84.110:41182] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXoRjVnjAS34srJlXgSvoAAAAIo"]
[Wed Jan 28 21:39:28.868940 2026] [:error] [pid 33636:tid 33649] [client 51.161.84.110:41196] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXoRkNIVZAudQH0BSC5GdgAAAgs"]
[Wed Jan 28 21:39:31.721170 2026] [:error] [pid 33636:tid 33661] [client 51.161.84.110:46082] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXoRk9IVZAudQH0BSC5GeAAAAhc"]
[Wed Jan 28 21:39:33.737068 2026] [:error] [pid 2625:tid 2633] [client 51.161.84.110:46088] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoRlVZhY64HvuPd7w1uvwAAAUI"]
[Wed Jan 28 21:39:36.391395 2026] [:error] [pid 33489:tid 33511] [client 43.166.244.192:37132] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXoRmBZrVZwQUFWC7_9Z2AAAABI"]
[Wed Jan 28 21:39:36.498879 2026] [:error] [pid 33491:tid 33567] [client 51.161.84.110:46098] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoRmGP9UY0x3irkINA79AAAANA"]
[Wed Jan 28 21:39:39.723418 2026] [:error] [pid 33489:tid 33499] [client 51.161.84.110:45168] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXoRmxZrVZwQUFWC7_9Z2wAAAAY"]
[Wed Jan 28 21:39:42.555698 2026] [:error] [pid 33490:tid 33529] [client 51.161.84.110:45172] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXoRnmjexcy58gsBPJHFdQAAAEU"]
[Wed Jan 28 21:39:44.641039 2026] [:error] [pid 24482:tid 24504] [client 51.161.84.110:45186] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXoRoKLaUZr_xWekSHOvwgAAAdI"]
[Wed Jan 28 21:39:47.504702 2026] [:error] [pid 33490:tid 33525] [client 51.161.84.110:45202] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXoRo2jexcy58gsBPJHFgwAAAEE"]
[Wed Jan 28 21:39:50.012913 2026] [:error] [pid 33636:tid 33643] [client 51.161.84.110:39040] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoRptIVZAudQH0BSC5GgwAAAgU"]
[Wed Jan 28 21:39:51.915389 2026] [:error] [pid 33489:tid 33512] [client 51.161.84.110:39054] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXoRpxZrVZwQUFWC7_9Z5AAAABM"]
[Wed Jan 28 21:39:55.714268 2026] [:error] [pid 24482:tid 24504] [client 51.161.84.110:39064] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXoRq6LaUZr_xWekSHOvzAAAAdI"]
[Wed Jan 28 21:39:57.883419 2026] [:error] [pid 33491:tid 33554] [client 51.161.84.110:39078] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoRrWP9UY0x3irkINA8EQAAAMM"]
[Wed Jan 28 21:40:00.142938 2026] [:error] [pid 33490:tid 33547] [client 51.161.84.110:54108] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%A7%E0%B8%B4%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoRsGjexcy58gsBPJHFjwAAAFc"]
[Wed Jan 28 21:40:02.676397 2026] [:error] [pid 33580:tid 33601] [client 51.161.84.110:54118] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXoRsplb0QJtwfka8l5llQAAAQ4"]
[Wed Jan 28 21:40:05.700187 2026] [:error] [pid 33491:tid 33565] [client 51.161.84.110:54120] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoRtWP9UY0x3irkINA8JQAAAM4"]
[Wed Jan 28 21:40:08.492925 2026] [:error] [pid 24482:tid 24509] [client 51.161.84.110:54128] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoRuKLaUZr_xWekSHOv1gAAAdc"]
[Wed Jan 28 21:40:10.828744 2026] [:error] [pid 24482:tid 24503] [client 51.161.84.110:44872] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5188.aspx"] [unique_id "aXoRuqLaUZr_xWekSHOv2gAAAdE"]
[Wed Jan 28 21:40:13.430310 2026] [:error] [pid 33490:tid 33548] [client 51.161.84.110:44880] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoRvWjexcy58gsBPJHFpAAAAFg"]
[Wed Jan 28 21:40:15.675474 2026] [:error] [pid 42740:tid 42755] [client 51.161.84.110:44882] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXoRv1njAS34srJlXgSvyAAAAI0"]
[Wed Jan 28 21:40:18.015878 2026] [:error] [pid 33636:tid 33653] [client 51.161.84.110:44888] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXoRwtIVZAudQH0BSC5GlwAAAg8"]
[Wed Jan 28 21:40:21.524560 2026] [:error] [pid 33491:tid 33551] [client 51.161.84.110:60294] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXoRxWP9UY0x3irkINA8NAAAAMA"]
[Wed Jan 28 21:40:51.772565 2026] [:error] [pid 33636:tid 33648] [client 51.161.84.110:60310] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXoR49IVZAudQH0BSC5GtAAAAgo"]
[Wed Jan 28 21:40:53.943078 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:56176] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoR5f0RQOh_GmqmVyaC9wAAAYA"]
[Wed Jan 28 21:40:56.222370 2026] [:error] [pid 33491:tid 33553] [client 51.161.84.110:56188] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXoR6GP9UY0x3irkINA8VAAAAMI"]
[Wed Jan 28 21:40:58.727370 2026] [:error] [pid 33636:tid 33656] [client 51.161.84.110:56190] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoR6tIVZAudQH0BSC5GugAAAhI"]
[Wed Jan 28 21:41:00.433910 2026] [:error] [pid 42740:tid 42742] [client 51.161.84.110:51036] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fullslot.aspx"] [unique_id "aXoR7FnjAS34srJlXgSv6gAAAIA"]
[Wed Jan 28 21:41:02.556085 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:51040] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goatbet909.aspx"] [unique_id "aXoR7mjexcy58gsBPJHF2QAAAFQ"]
[Wed Jan 28 21:41:04.621080 2026] [:error] [pid 33490:tid 33537] [client 51.161.84.110:51050] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker999.aspx"] [unique_id "aXoR8Gjexcy58gsBPJHF3QAAAE0"]
[Wed Jan 28 21:41:07.766696 2026] [:error] [pid 33490:tid 33544] [client 51.161.84.110:51054] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aXoR82jexcy58gsBPJHF5AAAAFQ"]
[Wed Jan 28 21:41:10.248495 2026] [:error] [pid 33580:tid 33593] [client 51.161.84.110:33220] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aXoR9plb0QJtwfka8l5lwwAAAQY"]
[Wed Jan 28 21:41:12.423421 2026] [:error] [pid 33489:tid 33515] [client 51.161.84.110:33226] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoR-BZrVZwQUFWC7_9aMwAAABY"]
[Wed Jan 28 21:41:14.590729 2026] [:error] [pid 42740:tid 42758] [client 51.161.84.110:33240] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoR-lnjAS34srJlXgSv-AAAAJA"]
[Wed Jan 28 21:41:16.647373 2026] [:error] [pid 33580:tid 33609] [client 51.161.84.110:33246] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lottovip.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoR_Jlb0QJtwfka8l5lyQAAARY"]
[Wed Jan 28 21:41:18.624663 2026] [:error] [pid 33491:tid 33565] [client 51.161.84.110:33262] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoR_mP9UY0x3irkINA8agAAAM4"]
[Wed Jan 28 21:41:20.443923 2026] [:error] [pid 2625:tid 2635] [client 51.161.84.110:36316] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXoSAFZhY64HvuPd7w1vJwAAAUQ"]
[Wed Jan 28 21:41:22.323333 2026] [:error] [pid 2625:tid 2642] [client 51.161.84.110:36332] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSAlZhY64HvuPd7w1vKQAAAUs"]
[Wed Jan 28 21:41:24.428033 2026] [:error] [pid 33490:tid 33524] [client 51.161.84.110:36336] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSBGjexcy58gsBPJHF5wAAAEA"]
[Wed Jan 28 21:41:27.152251 2026] [:error] [pid 24482:tid 24507] [client 51.161.84.110:36350] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSB6LaUZr_xWekSHOwFwAAAdU"]
[Wed Jan 28 21:41:29.737936 2026] [:error] [pid 33636:tid 33659] [client 51.161.84.110:38798] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSCdIVZAudQH0BSC5GzgAAAhU"]
[Wed Jan 28 21:41:32.176950 2026] [:error] [pid 33490:tid 33538] [client 51.161.84.110:38800] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSDGjexcy58gsBPJHGDQAAAE4"]
[Wed Jan 28 21:41:34.154271 2026] [:error] [pid 24482:tid 24492] [client 51.161.84.110:38808] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXoSDqLaUZr_xWekSHOwGwAAAcY"]
[Wed Jan 28 21:41:36.138036 2026] [:error] [pid 33580:tid 33603] [client 51.161.84.110:38814] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aXoSEJlb0QJtwfka8l5l8AAAARA"]
[Wed Jan 28 21:41:39.049652 2026] [:error] [pid 33491:tid 33562] [client 51.161.84.110:38820] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXoSE2P9UY0x3irkINA8jgAAAMs"]
[Wed Jan 28 21:41:41.228595 2026] [:error] [pid 2625:tid 2633] [client 51.161.84.110:43562] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoSFVZhY64HvuPd7w1vQgAAAUI"]
[Wed Jan 28 21:41:41.810232 2026] [:error] [pid 24482:tid 24508] [client 223.15.245.170:53396] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXoSFaLaUZr_xWekSHOwIgAAAdY"]
[Wed Jan 28 21:41:43.331369 2026] [:error] [pid 24452:tid 24454] [client 51.161.84.110:43572] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoSF_0RQOh_GmqmVyaDmwAAAYA"]
[Wed Jan 28 21:41:45.554015 2026] [:error] [pid 42740:tid 42757] [client 51.161.84.110:43586] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXoSGVnjAS34srJlXgSwLgAAAI8"]
[Wed Jan 28 21:41:47.598321 2026] [:error] [pid 24452:tid 24470] [client 51.161.84.110:43598] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXoSG_0RQOh_GmqmVyaDpAAAAZA"]
[Wed Jan 28 21:42:11.413475 2026] [:error] [pid 33489:tid 33495] [client 51.161.84.110:43750] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet.aspx"] [unique_id "aXoSMxZrVZwQUFWC7_9abAAAAAI"]
[Wed Jan 28 21:42:14.779101 2026] [:error] [pid 33580:tid 33602] [client 51.161.84.110:56110] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSNplb0QJtwfka8l5mGgAAAQ8"]
[Wed Jan 28 21:42:17.608354 2026] [:error] [pid 33636:tid 33649] [client 51.161.84.110:56122] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoSOdIVZAudQH0BSC5HDwAAAgs"]
[Wed Jan 28 21:42:19.714594 2026] [:error] [pid 33636:tid 33661] [client 51.161.84.110:40380] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoSO9IVZAudQH0BSC5HFgAAAhc"]
[Wed Jan 28 21:42:21.785801 2026] [:error] [pid 24482:tid 24496] [client 51.161.84.110:40396] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXoSPaLaUZr_xWekSHOwOgAAAco"]
[Wed Jan 28 21:42:23.760979 2026] [:error] [pid 33489:tid 33500] [client 51.161.84.110:40412] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXoSPxZrVZwQUFWC7_9acAAAAAc"]
[Wed Jan 28 21:42:26.590741 2026] [:error] [pid 33580:tid 33596] [client 51.161.84.110:40416] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXoSQplb0QJtwfka8l5mKAAAAQk"]
[Wed Jan 28 21:42:28.702823 2026] [:error] [pid 33491:tid 33553] [client 51.161.84.110:40418] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXoSRGP9UY0x3irkINA8tgAAAMI"]
[Wed Jan 28 21:42:30.606399 2026] [:error] [pid 24482:tid 24503] [client 51.161.84.110:41496] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoSRqLaUZr_xWekSHOwPwAAAdE"]
[Wed Jan 28 21:42:32.750644 2026] [:error] [pid 33491:tid 33567] [client 51.161.84.110:41512] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoSSGP9UY0x3irkINA8uAAAANA"]
[Wed Jan 28 21:42:35.601857 2026] [:error] [pid 33580:tid 33606] [client 51.161.84.110:41516] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168bet.aspx"] [unique_id "aXoSS5lb0QJtwfka8l5mOwAAARM"]
[Wed Jan 28 21:42:37.724300 2026] [:error] [pid 42740:tid 42744] [client 51.161.84.110:41530] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa369.aspx"] [unique_id "aXoSTVnjAS34srJlXgSwUQAAAII"]
[Wed Jan 28 21:42:39.845106 2026] [:error] [pid 33491:tid 33564] [client 51.161.84.110:60154] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXoST2P9UY0x3irkINA8vgAAAM0"]
[Wed Jan 28 21:42:42.702910 2026] [:error] [pid 33490:tid 33525] [client 51.161.84.110:60164] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoSUmjexcy58gsBPJHGawAAAEE"]
[Wed Jan 28 21:42:45.707808 2026] [:error] [pid 33491:tid 33560] [client 51.161.84.110:60170] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoSVWP9UY0x3irkINA8wgAAAMk"]
[Wed Jan 28 21:42:49.292404 2026] [:error] [pid 42740:tid 42745] [client 51.161.84.110:59394] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoSWVnjAS34srJlXgSwWwAAAIM"]
[Wed Jan 28 21:42:50.616015 2026] [:error] [pid 2625:tid 2631] [client 51.161.84.110:59400] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoSWlZhY64HvuPd7w1veQAAAUA"]
[Wed Jan 28 21:42:55.102611 2026] [:error] [pid 33489:tid 33495] [client 51.161.84.110:59410] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoSXxZrVZwQUFWC7_9ajwAAAAI"]
[Wed Jan 28 22:12:28.279845 2026] [:error] [pid 33491:tid 33551] [client 81.167.26.57:29106] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoZTGP9UY0x3irkINBEoAAAAMA"]
[Wed Jan 28 22:12:32.261115 2026] [:error] [pid 33580:tid 33603] [client 81.167.26.57:16930] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoZUJlb0QJtwfka8l5sKAAAARA"]
[Wed Jan 28 22:49:19.337102 2026] [:error] [pid 24452:tid 24465] [client 195.201.199.99:45580] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXoh7_0RQOh_GmqmVyaY-AAAAYs"]
[Wed Jan 28 22:49:21.656200 2026] [:error] [pid 33636:tid 33642] [client 195.201.199.99:50752] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXoh8dIVZAudQH0BSC5XCgAAAgQ"]
[Wed Jan 28 22:49:23.822328 2026] [:error] [pid 24452:tid 24478] [client 195.201.199.99:51194] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234superslot.aspx"] [unique_id "aXoh8_0RQOh_GmqmVyaZAQAAAZg"]
[Wed Jan 28 22:49:25.842332 2026] [:error] [pid 33636:tid 33655] [client 195.201.199.99:51576] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123betting.aspx"] [unique_id "aXoh9dIVZAudQH0BSC5XFgAAAhE"]
[Wed Jan 28 22:49:27.912017 2026] [:error] [pid 33580:tid 33592] [client 195.201.199.99:51990] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/168%20slot.aspx"] [unique_id "aXoh95lb0QJtwfka8l50gQAAAQU"]
[Wed Jan 28 22:49:29.969137 2026] [:error] [pid 33489:tid 33500] [client 195.201.199.99:52424] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/168vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoh-RZrVZwQUFWC7_9pKwAAAAc"]
[Wed Jan 28 22:49:32.127300 2026] [:error] [pid 33580:tid 33604] [client 195.201.199.99:53002] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/188bet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXoh_Jlb0QJtwfka8l50jAAAARE"]
[Wed Jan 28 22:49:34.270852 2026] [:error] [pid 33489:tid 33503] [client 195.201.199.99:53550] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/19%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoh_hZrVZwQUFWC7_9pMgAAAAo"]
[Wed Jan 28 22:49:36.356152 2026] [:error] [pid 24452:tid 24458] [client 195.201.199.99:54042] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1xbet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXoiAP0RQOh_GmqmVyaZEAAAAYQ"]
[Wed Jan 28 22:49:38.746423 2026] [:error] [pid 33491:tid 33555] [client 195.201.199.99:54550] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/20%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoiAmP9UY0x3irkINBQdgAAAMQ"]
[Wed Jan 28 22:49:41.013633 2026] [:error] [pid 24482:tid 24498] [client 195.201.199.99:55032] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXoiBaLaUZr_xWekSHPB5AAAAcw"]
[Wed Jan 28 22:49:43.212417 2026] [:error] [pid 2625:tid 2636] [client 195.201.199.99:55450] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24th%20slot.aspx"] [unique_id "aXoiB1ZhY64HvuPd7w1_1QAAAUU"]
[Wed Jan 28 22:49:45.309524 2026] [:error] [pid 24452:tid 24466] [client 195.201.199.99:55846] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/365bet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXoiCf0RQOh_GmqmVyaZHQAAAYw"]
[Wed Jan 28 22:49:47.469617 2026] [:error] [pid 33490:tid 33544] [client 195.201.199.99:56298] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55%20superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXoiC2jexcy58gsBPJHhSgAAAFQ"]
[Wed Jan 28 22:49:49.595463 2026] [:error] [pid 33491:tid 33554] [client 195.201.199.99:56800] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoiDWP9UY0x3irkINBQfAAAAMM"]
[Wed Jan 28 22:49:51.522744 2026] [:error] [pid 33490:tid 33533] [client 195.201.199.99:57234] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777slot.aspx"] [unique_id "aXoiD2jexcy58gsBPJHhTAAAAEk"]
[Wed Jan 28 22:49:53.665527 2026] [:error] [pid 33489:tid 33512] [client 195.201.199.99:57748] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/777superslot.aspx"] [unique_id "aXoiERZrVZwQUFWC7_9pSQAAABM"]
[Wed Jan 28 22:49:55.792597 2026] [:error] [pid 33490:tid 33530] [client 195.201.199.99:58184] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/789%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoiE2jexcy58gsBPJHhTgAAAEY"]
[Wed Jan 28 22:49:57.966495 2026] [:error] [pid 42740:tid 42753] [client 195.201.199.99:58652] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aXoiFVnjAS34srJlXgTBUwAAAIs"]
[Wed Jan 28 22:49:59.998188 2026] [:error] [pid 33490:tid 33524] [client 195.201.199.99:59160] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/789bet%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2058.aspx"] [unique_id "aXoiF2jexcy58gsBPJHhVQAAAEA"]
[Wed Jan 28 22:50:02.238596 2026] [:error] [pid 24452:tid 24474] [client 195.201.199.99:59612] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoiGv0RQOh_GmqmVyaZMgAAAZQ"]
[Wed Jan 28 22:50:04.501529 2026] [:error] [pid 33580:tid 33607] [client 195.201.199.99:60076] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/99mb%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoiHJlb0QJtwfka8l50sgAAARQ"]
[Wed Jan 28 22:50:06.548346 2026] [:error] [pid 24452:tid 24467] [client 195.201.199.99:60544] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aXoiHv0RQOh_GmqmVyaZNwAAAY0"]
[Wed Jan 28 22:50:08.830987 2026] [:error] [pid 33636:tid 33662] [client 195.201.199.99:60990] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot%20master%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoiINIVZAudQH0BSC5XSAAAAhg"]
[Wed Jan 28 22:50:11.152343 2026] [:error] [pid 33636:tid 33650] [client 195.201.199.99:33220] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot%20wallet%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXoiI9IVZAudQH0BSC5XTQAAAgw"]
[Wed Jan 28 22:50:13.381241 2026] [:error] [pid 33580:tid 33587] [client 195.201.199.99:33646] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot%20wallet%2010%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXoiJZlb0QJtwfka8l50vAAAAQA"]
[Wed Jan 28 22:50:15.411712 2026] [:error] [pid 33489:tid 33502] [client 195.201.199.99:34062] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot888.aspx"] [unique_id "aXoiJxZrVZwQUFWC7_9pYgAAAAk"]
[Wed Jan 28 22:50:38.476382 2026] [:error] [pid 42740:tid 42749] [client 195.201.199.99:34540] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/u31%20game%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoiPlnjAS34srJlXgTBfQAAAIc"]
[Wed Jan 28 22:50:40.489141 2026] [:error] [pid 24482:tid 24486] [client 195.201.199.99:39396] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/u31.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoiQKLaUZr_xWekSHPCJAAAAcA"]
[Wed Jan 28 22:50:42.499357 2026] [:error] [pid 33636:tid 33652] [client 195.201.199.99:39884] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aXoiQtIVZAudQH0BSC5XZAAAAg4"]
[Wed Jan 28 22:50:44.691301 2026] [:error] [pid 33490:tid 33544] [client 195.201.199.99:40398] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aXoiRGjexcy58gsBPJHhgwAAAFQ"]
[Wed Jan 28 22:50:46.733630 2026] [:error] [pid 24452:tid 24458] [client 195.201.199.99:40798] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXoiRv0RQOh_GmqmVyaZbQAAAYQ"]
[Wed Jan 28 22:50:49.058190 2026] [:error] [pid 33636:tid 33658] [client 195.201.199.99:41300] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aXoiSdIVZAudQH0BSC5XbgAAAhQ"]
[Wed Jan 28 22:50:51.061711 2026] [:error] [pid 42740:tid 42764] [client 195.201.199.99:41714] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa10.aspx"] [unique_id "aXoiS1njAS34srJlXgTBiAAAAJY"]
[Wed Jan 28 22:50:53.213649 2026] [:error] [pid 33489:tid 33498] [client 195.201.199.99:42102] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa168%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoiTRZrVZwQUFWC7_9pewAAAAU"]
[Wed Jan 28 22:50:55.313121 2026] [:error] [pid 2625:tid 2636] [client 195.201.199.99:42484] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa1688.aspx"] [unique_id "aXoiT1ZhY64HvuPd7w2AIwAAAUU"]
[Wed Jan 28 22:50:57.357099 2026] [:error] [pid 33489:tid 33494] [client 195.201.199.99:42838] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa356%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoiURZrVZwQUFWC7_9pfgAAAAE"]
[Wed Jan 28 22:50:59.946459 2026] [:error] [pid 33490:tid 33532] [client 195.201.199.99:43324] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoiU2jexcy58gsBPJHhnQAAAEg"]
[Wed Jan 28 22:51:02.031480 2026] [:error] [pid 33580:tid 33605] [client 195.201.199.99:43700] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa678.aspx"] [unique_id "aXoiVplb0QJtwfka8l507gAAARI"]
[Wed Jan 28 22:51:04.115497 2026] [:error] [pid 33636:tid 33660] [client 195.201.199.99:44064] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa7.aspx"] [unique_id "aXoiWNIVZAudQH0BSC5XgQAAAhY"]
[Wed Jan 28 22:51:06.271220 2026] [:error] [pid 33490:tid 33544] [client 195.201.199.99:44432] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa700.aspx"] [unique_id "aXoiWmjexcy58gsBPJHhowAAAFQ"]
[Wed Jan 28 22:51:08.427350 2026] [:error] [pid 2625:tid 2648] [client 195.201.199.99:44782] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa77.aspx"] [unique_id "aXoiXFZhY64HvuPd7w2AMgAAAVE"]
[Wed Jan 28 22:51:10.547384 2026] [:error] [pid 33490:tid 33533] [client 195.201.199.99:45228] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXoiXmjexcy58gsBPJHhrwAAAEk"]
[Wed Jan 28 22:51:12.793744 2026] [:error] [pid 42740:tid 42761] [client 195.201.199.99:45656] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa7777.aspx"] [unique_id "aXoiYFnjAS34srJlXgTBlAAAAJM"]
[Wed Jan 28 22:51:15.009594 2026] [:error] [pid 24452:tid 24471] [client 195.201.199.99:46056] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa789.aspx"] [unique_id "aXoiY_0RQOh_GmqmVyaZigAAAZE"]
[Wed Jan 28 22:51:17.039744 2026] [:error] [pid 24452:tid 24468] [client 195.201.199.99:46462] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXoiZf0RQOh_GmqmVyaZjgAAAY4"]
[Wed Jan 28 22:51:19.045814 2026] [:error] [pid 24452:tid 24476] [client 195.201.199.99:46868] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoiZ_0RQOh_GmqmVyaZkwAAAZY"]
[Wed Jan 28 22:51:21.285761 2026] [:error] [pid 33580:tid 33602] [client 195.201.199.99:47336] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoiaZlb0QJtwfka8l50_gAAAQ8"]
[Wed Jan 28 22:51:23.520198 2026] [:error] [pid 2625:tid 2652] [client 195.201.199.99:47768] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXoia1ZhY64HvuPd7w2AOgAAAVU"]
[Wed Jan 28 22:51:25.569727 2026] [:error] [pid 33580:tid 33592] [client 195.201.199.99:48188] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20168.aspx"] [unique_id "aXoibZlb0QJtwfka8l51AwAAAQU"]
[Wed Jan 28 22:51:27.689310 2026] [:error] [pid 2625:tid 2639] [client 195.201.199.99:48642] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoib1ZhY64HvuPd7w2AQQAAAUg"]
[Wed Jan 28 22:51:29.702194 2026] [:error] [pid 33491:tid 33571] [client 195.201.199.99:49012] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A365.aspx"] [unique_id "aXoicWP9UY0x3irkINBQ1QAAANQ"]
[Wed Jan 28 22:51:31.730087 2026] [:error] [pid 42740:tid 42757] [client 195.201.199.99:49434] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXoic1njAS34srJlXgTBqgAAAI8"]
[Wed Jan 28 22:51:33.934136 2026] [:error] [pid 33490:tid 33536] [client 195.201.199.99:49876] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXoidWjexcy58gsBPJHhyAAAAEw"]
[Wed Jan 28 22:51:56.887843 2026] [:error] [pid 33491:tid 33561] [client 195.201.199.99:50386] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet289.aspx"] [unique_id "aXoijGP9UY0x3irkINBQ9gAAAMo"]
[Wed Jan 28 22:51:58.930929 2026] [:error] [pid 33489:tid 33493] [client 195.201.199.99:55044] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoijhZrVZwQUFWC7_9puwAAAAA"]
[Wed Jan 28 22:52:00.854338 2026] [:error] [pid 2625:tid 2649] [client 195.201.199.99:55414] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet88.aspx"] [unique_id "aXoikFZhY64HvuPd7w2AXwAAAVI"]
[Wed Jan 28 22:52:03.055109 2026] [:error] [pid 2625:tid 2637] [client 195.201.199.99:55758] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufacash%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXoik1ZhY64HvuPd7w2AYwAAAUY"]
[Wed Jan 28 22:52:05.103092 2026] [:error] [pid 2625:tid 2643] [client 195.201.199.99:56098] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufavip.aspx"] [unique_id "aXoilVZhY64HvuPd7w2AaQAAAUw"]
[Wed Jan 28 22:52:07.334160 2026] [:error] [pid 33580:tid 33601] [client 195.201.199.99:56446] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoil5lb0QJtwfka8l51LAAAAQ4"]
[Wed Jan 28 22:52:09.461611 2026] [:error] [pid 33491:tid 33562] [client 195.201.199.99:56788] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aXoimWP9UY0x3irkINBQ-QAAAMs"]
[Wed Jan 28 22:52:11.495475 2026] [:error] [pid 33491:tid 33570] [client 195.201.199.99:57130] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXoim2P9UY0x3irkINBQ_QAAANM"]
[Wed Jan 28 22:52:13.609483 2026] [:error] [pid 33636:tid 33639] [client 195.201.199.99:57456] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aXoindIVZAudQH0BSC5XrQAAAgE"]
[Wed Jan 28 22:52:15.612126 2026] [:error] [pid 33490:tid 33538] [client 195.201.199.99:57748] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aXoin2jexcy58gsBPJHh_gAAAE4"]
[Wed Jan 28 22:52:17.524914 2026] [:error] [pid 33490:tid 33534] [client 195.201.199.99:58040] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wow%20slot%20%E0%B8%A1%E0%B8%B2%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXoioWjexcy58gsBPJHiCgAAAEo"]
[Wed Jan 28 22:52:19.698326 2026] [:error] [pid 2625:tid 2648] [client 195.201.199.99:58340] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z16%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXoio1ZhY64HvuPd7w2AdwAAAVE"]
[Wed Jan 28 22:52:21.751295 2026] [:error] [pid 33490:tid 33539] [client 195.201.199.99:58646] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoipWjexcy58gsBPJHiGQAAAE8"]
[Wed Jan 28 22:52:25.618712 2026] [:error] [pid 33489:tid 33506] [client 195.201.199.99:59184] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXoiqRZrVZwQUFWC7_9p2wAAAA0"]
[Wed Jan 28 23:15:51.186201 2026] [:error] [pid 33636:tid 33653] [client 213.209.159.151:46178] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXooJ9IVZAudQH0BSC5cAQAAAg8"]
[Wed Jan 28 23:20:41.624717 2026] [:error] [pid 24482:tid 24487] [client 209.9.200.163:26163] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXopSaLaUZr_xWekSHPJRAAAAcE"]
[Wed Jan 28 23:20:41.954702 2026] [:error] [pid 2625:tid 2655] [client 209.9.200.163:36882] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXopSVZhY64HvuPd7w2GigAAAVg"]
[Wed Jan 28 23:20:42.286944 2026] [:error] [pid 24452:tid 24458] [client 209.9.200.163:23264] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXopSv0RQOh_GmqmVyah4gAAAYQ"]
[Wed Jan 28 23:20:44.325785 2026] [:error] [pid 33580:tid 33587] [client 209.9.200.163:21034] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%A2%E0%B8%B4%E0%B8%87%E0%B8%9B%E0%B8%A5%E0%B8%B2.aspx"] [unique_id "aXopTJlb0QJtwfka8l56sQAAAQA"]
[Wed Jan 28 23:20:44.656189 2026] [:error] [pid 24452:tid 24477] [client 209.9.200.163:52707] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%A2%E0%B8%B4%E0%B8%87%E0%B8%9B%E0%B8%A5%E0%B8%B2.aspx"] [unique_id "aXopTP0RQOh_GmqmVyah5QAAAZc"]
[Wed Jan 28 23:20:46.579143 2026] [:error] [pid 24452:tid 24454] [client 209.9.200.163:62202] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXopTv0RQOh_GmqmVyah6wAAAYA"]
[Wed Jan 28 23:20:46.897513 2026] [:error] [pid 33580:tid 33606] [client 209.9.200.163:40671] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXopTplb0QJtwfka8l56swAAARM"]
[Wed Jan 28 23:20:49.691386 2026] [:error] [pid 33489:tid 33493] [client 209.9.200.163:60094] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXopURZrVZwQUFWC7_9v8AAAAAA"]
[Wed Jan 28 23:20:50.016924 2026] [:error] [pid 33489:tid 33504] [client 209.9.200.163:52877] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXopUhZrVZwQUFWC7_9v8QAAAAs"]
[Wed Jan 28 23:20:52.103781 2026] [:error] [pid 33491:tid 33572] [client 209.9.200.163:11412] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopVGP9UY0x3irkINBXjwAAANU"]
[Wed Jan 28 23:20:52.426786 2026] [:error] [pid 33490:tid 33548] [client 209.9.200.163:19200] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopVGjexcy58gsBPJHr4AAAAFg"]
[Wed Jan 28 23:20:54.463170 2026] [:error] [pid 33580:tid 33604] [client 209.9.200.163:39676] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20sa.aspx"] [unique_id "aXopVplb0QJtwfka8l56uwAAARE"]
[Wed Jan 28 23:20:54.853025 2026] [:error] [pid 33489:tid 33502] [client 209.9.200.163:62430] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20sa.aspx"] [unique_id "aXopVhZrVZwQUFWC7_9v8wAAAAk"]
[Wed Jan 28 23:20:57.322488 2026] [:error] [pid 24452:tid 24462] [client 209.9.200.163:16077] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2010000.aspx"] [unique_id "aXopWf0RQOh_GmqmVyah-AAAAYg"]
[Wed Jan 28 23:20:57.655382 2026] [:error] [pid 24452:tid 24472] [client 209.9.200.163:21076] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2010000.aspx"] [unique_id "aXopWf0RQOh_GmqmVyah-gAAAZI"]
[Wed Jan 28 23:20:59.929822 2026] [:error] [pid 33580:tid 33600] [client 209.9.200.163:27055] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXopW5lb0QJtwfka8l56wgAAAQ0"]
[Wed Jan 28 23:21:00.280576 2026] [:error] [pid 42740:tid 42760] [client 209.9.200.163:61261] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXopXFnjAS34srJlXgTHCQAAAJI"]
[Wed Jan 28 23:21:02.261821 2026] [:error] [pid 24482:tid 24495] [client 209.9.200.163:43105] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88.aspx"] [unique_id "aXopXqLaUZr_xWekSHPJWwAAAck"]
[Wed Jan 28 23:21:02.591451 2026] [:error] [pid 33491:tid 33560] [client 209.9.200.163:19926] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88.aspx"] [unique_id "aXopXmP9UY0x3irkINBXngAAAMk"]
[Wed Jan 28 23:21:04.592413 2026] [:error] [pid 24482:tid 24500] [client 209.9.200.163:12918] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXopYKLaUZr_xWekSHPJXgAAAc4"]
[Wed Jan 28 23:21:04.908767 2026] [:error] [pid 33491:tid 33563] [client 209.9.200.163:51425] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXopYGP9UY0x3irkINBXpAAAAMw"]
[Wed Jan 28 23:21:06.730047 2026] [:error] [pid 33490:tid 33528] [client 209.9.200.163:27817] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopYmjexcy58gsBPJHr6gAAAEQ"]
[Wed Jan 28 23:21:07.063192 2026] [:error] [pid 33490:tid 33544] [client 209.9.200.163:59061] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopY2jexcy58gsBPJHr6wAAAFQ"]
[Wed Jan 28 23:21:09.007716 2026] [:error] [pid 33489:tid 33517] [client 209.9.200.163:56504] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXopZRZrVZwQUFWC7_9wBgAAABg"]
[Wed Jan 28 23:21:09.532295 2026] [:error] [pid 33490:tid 33545] [client 209.9.200.163:55068] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXopZWjexcy58gsBPJHr8AAAAFU"]
[Wed Jan 28 23:21:11.857566 2026] [:error] [pid 33580:tid 33609] [client 209.9.200.163:8639] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXopZ5lb0QJtwfka8l56yAAAARY"]
[Wed Jan 28 23:21:12.185319 2026] [:error] [pid 33490:tid 33525] [client 209.9.200.163:43752] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXopaGjexcy58gsBPJHr8wAAAEE"]
[Wed Jan 28 23:21:14.844832 2026] [:error] [pid 2625:tid 2642] [client 209.9.200.163:45083] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXopalZhY64HvuPd7w2GmwAAAUs"]
[Wed Jan 28 23:21:15.163655 2026] [:error] [pid 24482:tid 24509] [client 209.9.200.163:46484] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXopa6LaUZr_xWekSHPJagAAAdc"]
[Wed Jan 28 23:21:17.315205 2026] [:error] [pid 2625:tid 2631] [client 209.9.200.163:45463] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2lsm99.aspx"] [unique_id "aXopbVZhY64HvuPd7w2GnQAAAUA"]
[Wed Jan 28 23:21:17.633068 2026] [:error] [pid 33580:tid 33611] [client 209.9.200.163:13296] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2lsm99.aspx"] [unique_id "aXopbZlb0QJtwfka8l56zgAAARg"]
[Wed Jan 28 23:21:19.396733 2026] [:error] [pid 24482:tid 24496] [client 209.9.200.163:32887] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20auto%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXopb6LaUZr_xWekSHPJbwAAAco"]
[Wed Jan 28 23:21:19.718188 2026] [:error] [pid 33580:tid 33594] [client 209.9.200.163:24400] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20auto%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXopb5lb0QJtwfka8l560QAAAQc"]
[Wed Jan 28 23:21:21.635121 2026] [:error] [pid 33580:tid 33601] [client 209.9.200.163:51951] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20auto.aspx"] [unique_id "aXopcZlb0QJtwfka8l560wAAAQ4"]
[Wed Jan 28 23:21:21.969842 2026] [:error] [pid 33491:tid 33564] [client 209.9.200.163:3963] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20auto.aspx"] [unique_id "aXopcWP9UY0x3irkINBXrgAAAM0"]
[Wed Jan 28 23:21:24.211848 2026] [:error] [pid 33489:tid 33510] [client 209.9.200.163:47753] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXopdBZrVZwQUFWC7_9wEgAAABE"]
[Wed Jan 28 23:21:24.531592 2026] [:error] [pid 33636:tid 33652] [client 209.9.200.163:18130] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXopdNIVZAudQH0BSC5dFQAAAg4"]
[Wed Jan 28 23:21:26.517985 2026] [:error] [pid 33580:tid 33600] [client 209.9.200.163:45017] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXopdplb0QJtwfka8l561QAAAQ0"]
[Wed Jan 28 23:21:26.865992 2026] [:error] [pid 42740:tid 42746] [client 209.9.200.163:31984] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXopdlnjAS34srJlXgTHKgAAAIQ"]
[Wed Jan 28 23:21:28.882677 2026] [:error] [pid 42740:tid 42753] [client 209.9.200.163:8807] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXopeFnjAS34srJlXgTHLgAAAIs"]
[Wed Jan 28 23:21:29.213260 2026] [:error] [pid 2625:tid 2655] [client 209.9.200.163:53467] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXopeVZhY64HvuPd7w2GqgAAAVg"]
[Wed Jan 28 23:21:31.015869 2026] [:error] [pid 24482:tid 24510] [client 209.9.200.163:25863] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXope6LaUZr_xWekSHPJdwAAAdg"]
[Wed Jan 28 23:21:31.335608 2026] [:error] [pid 24452:tid 24470] [client 209.9.200.163:43320] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXope_0RQOh_GmqmVyaiCwAAAZA"]
[Wed Jan 28 23:21:33.342629 2026] [:error] [pid 33491:tid 33570] [client 209.9.200.163:6409] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXopfWP9UY0x3irkINBXtwAAANM"]
[Wed Jan 28 23:21:33.660776 2026] [:error] [pid 2625:tid 2641] [client 209.9.200.163:21906] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXopfVZhY64HvuPd7w2GswAAAUo"]
[Wed Jan 28 23:21:35.840080 2026] [:error] [pid 33491:tid 33557] [client 209.9.200.163:45865] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXopf2P9UY0x3irkINBXuwAAAMY"]
[Wed Jan 28 23:21:36.175016 2026] [:error] [pid 33490:tid 33529] [client 209.9.200.163:29443] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXopgGjexcy58gsBPJHsCAAAAEU"]
[Wed Jan 28 23:21:59.683282 2026] [:error] [pid 33490:tid 33541] [client 209.9.200.163:28818] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A1.aspx"] [unique_id "aXopl2jexcy58gsBPJHsQAAAAFE"]
[Wed Jan 28 23:21:59.998999 2026] [:error] [pid 24452:tid 24475] [client 209.9.200.163:49673] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A1.aspx"] [unique_id "aXopl_0RQOh_GmqmVyaiMwAAAZU"]
[Wed Jan 28 23:22:00.363980 2026] [:error] [pid 2625:tid 2649] [client 209.9.200.163:24810] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A1.aspx"] [unique_id "aXopmFZhY64HvuPd7w2G0gAAAVI"]
[Wed Jan 28 23:22:02.594840 2026] [:error] [pid 24482:tid 24498] [client 209.9.200.163:13151] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%99%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%80%E0%B8%A2%E0%B8%AD%E0%B8%B0%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopmqLaUZr_xWekSHPJngAAAcw"]
[Wed Jan 28 23:22:03.026343 2026] [:error] [pid 33580:tid 33589] [client 209.9.200.163:12193] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%99%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%80%E0%B8%A2%E0%B8%AD%E0%B8%B0%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopm5lb0QJtwfka8l567wAAAQI"]
[Wed Jan 28 23:22:05.532067 2026] [:error] [pid 33491:tid 33555] [client 209.9.200.163:31127] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXopnWP9UY0x3irkINBX0gAAAMQ"]
[Wed Jan 28 23:22:05.869732 2026] [:error] [pid 42740:tid 42750] [client 209.9.200.163:12320] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXopnVnjAS34srJlXgTHNwAAAIg"]
[Wed Jan 28 23:22:07.766509 2026] [:error] [pid 24482:tid 24505] [client 209.9.200.163:27442] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20888%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXopn6LaUZr_xWekSHPJogAAAdM"]
[Wed Jan 28 23:22:08.128266 2026] [:error] [pid 33489:tid 33503] [client 209.9.200.163:44981] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20888%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXopoBZrVZwQUFWC7_9wJgAAAAo"]
[Wed Jan 28 23:22:10.320776 2026] [:error] [pid 33491:tid 33551] [client 209.9.200.163:9949] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXopomP9UY0x3irkINBX1QAAAMA"]
[Wed Jan 28 23:22:10.637593 2026] [:error] [pid 33636:tid 33651] [client 209.9.200.163:29715] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXopotIVZAudQH0BSC5dOgAAAg0"]
[Wed Jan 28 23:22:12.579432 2026] [:error] [pid 33491:tid 33557] [client 209.9.200.163:24301] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2020%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXoppGP9UY0x3irkINBX2QAAAMY"]
[Wed Jan 28 23:22:12.935709 2026] [:error] [pid 33489:tid 33499] [client 209.9.200.163:6488] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2020%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXoppBZrVZwQUFWC7_9wKgAAAAY"]
[Wed Jan 28 23:22:15.156149 2026] [:error] [pid 33490:tid 33539] [client 209.9.200.163:22315] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXopp2jexcy58gsBPJHsWgAAAE8"]
[Wed Jan 28 23:22:15.524074 2026] [:error] [pid 33489:tid 33497] [client 209.9.200.163:54902] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXoppxZrVZwQUFWC7_9wLQAAAAQ"]
[Wed Jan 28 23:22:17.611382 2026] [:error] [pid 2625:tid 2633] [client 209.9.200.163:63642] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXopqVZhY64HvuPd7w2G4QAAAUI"]
[Wed Jan 28 23:22:17.942223 2026] [:error] [pid 24482:tid 24509] [client 209.9.200.163:48829] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXopqaLaUZr_xWekSHPJswAAAdc"]
[Wed Jan 28 23:22:20.074063 2026] [:error] [pid 24482:tid 24498] [client 209.9.200.163:44268] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoprKLaUZr_xWekSHPJtQAAAcw"]
[Wed Jan 28 23:22:20.532711 2026] [:error] [pid 33489:tid 33505] [client 209.9.200.163:15700] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoprBZrVZwQUFWC7_9wNAAAAAw"]
[Wed Jan 28 23:22:22.337103 2026] [:error] [pid 42740:tid 42743] [client 209.9.200.163:46544] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A888%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoprlnjAS34srJlXgTHQgAAAIE"]
[Wed Jan 28 23:22:22.655225 2026] [:error] [pid 33489:tid 33497] [client 209.9.200.163:53192] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A888%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXoprhZrVZwQUFWC7_9wNgAAAAQ"]
[Wed Jan 28 23:22:24.671652 2026] [:error] [pid 42740:tid 42745] [client 209.9.200.163:13765] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopsFnjAS34srJlXgTHRwAAAIM"]
[Wed Jan 28 23:22:24.991080 2026] [:error] [pid 42740:tid 42758] [client 209.9.200.163:38994] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXopsFnjAS34srJlXgTHSQAAAJA"]
[Wed Jan 28 23:22:27.058520 2026] [:error] [pid 33490:tid 33525] [client 209.9.200.163:48491] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet.aspx"] [unique_id "aXops2jexcy58gsBPJHsbQAAAEE"]
[Wed Jan 28 23:22:27.377560 2026] [:error] [pid 33636:tid 33639] [client 209.9.200.163:15685] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet.aspx"] [unique_id "aXops9IVZAudQH0BSC5dSAAAAgE"]
[Wed Jan 28 23:22:29.226767 2026] [:error] [pid 33491:tid 33554] [client 209.9.200.163:26302] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx"] [unique_id "aXoptWP9UY0x3irkINBX4wAAAMM"]
[Wed Jan 28 23:22:29.552519 2026] [:error] [pid 42740:tid 42751] [client 209.9.200.163:33101] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20wallet.aspx"] [unique_id "aXoptVnjAS34srJlXgTHUAAAAIk"]
[Wed Jan 28 23:22:31.902194 2026] [:error] [pid 42740:tid 42759] [client 209.9.200.163:33785] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXopt1njAS34srJlXgTHVQAAAJE"]
[Wed Jan 28 23:22:32.219459 2026] [:error] [pid 33580:tid 33592] [client 209.9.200.163:28470] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXopuJlb0QJtwfka8l57AwAAAQU"]
[Wed Jan 28 23:22:34.255656 2026] [:error] [pid 42740:tid 42753] [client 209.9.200.163:42784] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXopulnjAS34srJlXgTHWAAAAIs"]
[Wed Jan 28 23:22:34.593991 2026] [:error] [pid 2625:tid 2652] [client 209.9.200.163:24720] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXopulZhY64HvuPd7w2HAgAAAVU"]
[Wed Jan 28 23:22:36.782396 2026] [:error] [pid 33636:tid 33652] [client 209.9.200.163:43636] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "aXopvNIVZAudQH0BSC5dVAAAAg4"]
[Wed Jan 28 23:22:37.103802 2026] [:error] [pid 33489:tid 33501] [client 209.9.200.163:45922] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "aXopvRZrVZwQUFWC7_9wQwAAAAg"]
[Thu Jan 29 00:46:34.580583 2026] [:error] [pid 30729:tid 30802] [client 81.167.26.57:42808] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aXo9aoHlkRFkYwysACccLwAAAM4"]
[Thu Jan 29 00:46:36.636755 2026] [:error] [pid 30817:tid 30825] [client 81.167.26.57:19271] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet.aspx"] [unique_id "aXo9bJkL00co11SGgyofkwAAAIU"]
[Thu Jan 29 00:46:38.786292 2026] [:error] [pid 30728:tid 30766] [client 81.167.26.57:60824] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20369.aspx"] [unique_id "aXo9bsON3lWQ9OS6bgubbQAAAEU"]
[Thu Jan 29 00:46:40.807708 2026] [:error] [pid 30728:tid 30781] [client 81.167.26.57:14179] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg.aspx"] [unique_id "aXo9cMON3lWQ9OS6bgubcAAAAFQ"]
[Thu Jan 29 00:46:42.050471 2026] [:error] [pid 30817:tid 30837] [client 81.167.26.57:15025] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXo9cpkL00co11SGgyofqwAAAJE"]
[Thu Jan 29 00:46:45.802318 2026] [:error] [pid 30728:tid 30771] [client 81.167.26.57:60729] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXo9dcON3lWQ9OS6bgubfwAAAEo"]
[Thu Jan 29 03:11:08.358740 2026] [:error] [pid 30729:tid 30804] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Jan 29 03:11:08.481785 2026] [:error] [pid 30729:tid 30806] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/bnn_.php
[Thu Jan 29 03:11:08.602605 2026] [:error] [pid 30729:tid 30801] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/35.php
[Thu Jan 29 03:11:08.736494 2026] [:error] [pid 30729:tid 30800] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/sidfile.php
[Thu Jan 29 03:11:09.056442 2026] [:error] [pid 30729:tid 30808] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/rum.php
[Thu Jan 29 03:11:09.186641 2026] [:error] [pid 30729:tid 30799] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Jan 29 03:11:09.439671 2026] [:error] [pid 30729:tid 30809] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Jan 29 03:11:10.701661 2026] [:error] [pid 30729:tid 30809] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Thu Jan 29 03:11:10.821900 2026] [:error] [pid 30729:tid 30805] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aoisuki.php
[Thu Jan 29 03:11:10.949097 2026] [:error] [pid 30729:tid 30812] [client 13.70.56.12:5538] File does not exist: /usr/local/apache/htdocs/suspended-page/naritai.php
[Thu Jan 29 03:11:11.316328 2026] [:error] [pid 30729:tid 30810] [client 13.70.56.12:5538] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXpfT4HlkRFkYwysACc_7AAAANY"]
[Thu Jan 29 03:11:14.837305 2026] [:error] [pid 32747:tid 32755] [client 13.70.56.12:5116] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXpfUv0et-wQsmVMWlkznQAAAcY"]
[Thu Jan 29 03:11:19.435710 2026] [:error] [pid 64139:tid 64145] [client 13.70.56.12:5552] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXpfV08_llMXywnNBzhXjwAAAwQ"]
[Thu Jan 29 03:11:25.240824 2026] [:error] [pid 32598:tid 32611] [client 13.70.56.12:3961] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXpfXVY4u2FXFuCu0C4kmwAAAYs"]
[Thu Jan 29 03:11:33.153375 2026] [:error] [pid 32451:tid 32473] [client 13.70.56.12:5106] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aXpfZRnhmSN6e0P4d6tZSgAAAVQ"]
[Thu Jan 29 03:11:37.587260 2026] [:error] [pid 32451:tid 32462] [client 13.70.56.12:2161] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aXpfaRnhmSN6e0P4d6tZTAAAAUk"]
[Thu Jan 29 03:11:44.177630 2026] [:error] [pid 30729:tid 30788] [client 13.70.56.12:2164] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXpfcIHlkRFkYwysACdACQAAAMA"]
[Thu Jan 29 03:11:59.697680 2026] [:error] [pid 32747:tid 32759] [client 13.70.56.12:2158] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXpff_0et-wQsmVMWlkzzQAAAco"]
[Thu Jan 29 03:12:33.086023 2026] [:error] [pid 64076:tid 64102] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/reze.php
[Thu Jan 29 03:12:33.206091 2026] [:error] [pid 64076:tid 64088] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/11092null.php
[Thu Jan 29 03:12:33.348824 2026] [:error] [pid 64076:tid 64090] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o2.php
[Thu Jan 29 03:12:33.476793 2026] [:error] [pid 64076:tid 64095] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Thu Jan 29 03:12:33.598121 2026] [:error] [pid 64076:tid 64097] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Thu Jan 29 03:12:33.732448 2026] [:error] [pid 64076:tid 64101] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/zz8.php
[Thu Jan 29 03:12:33.857188 2026] [:error] [pid 64076:tid 64081] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu Jan 29 03:12:33.977670 2026] [:error] [pid 64076:tid 64082] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/ah21.php
[Thu Jan 29 03:12:34.161457 2026] [:error] [pid 64076:tid 64091] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/ah22.php
[Thu Jan 29 03:12:34.295354 2026] [:error] [pid 64076:tid 64089] [client 13.70.56.12:5090] File does not exist: /usr/local/apache/htdocs/suspended-page/ws38.php
[Thu Jan 29 03:12:34.998656 2026] [:error] [pid 64076:tid 64084] [client 13.70.56.12:5090] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploaxa1.php"] [unique_id "aXpfosgWS9sk7GfiNFebyAAAAoY"]
[Thu Jan 29 03:12:37.903391 2026] [:error] [pid 30817:tid 30826] [client 13.70.56.12:3003] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploaxa1.php"] [unique_id "aXpfpZkL00co11SGgypJ6AAAAIY"]
[Thu Jan 29 03:12:40.076132 2026] [:error] [pid 32598:tid 32622] [client 13.70.56.12:2769] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploaxa1.php"] [unique_id "aXpfqFY4u2FXFuCu0C4k8AAAAZY"]
[Thu Jan 29 03:12:41.344686 2026] [:error] [pid 33151:tid 33197] [client 13.70.56.12:2150] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploaxa1.php"] [unique_id "aXpfqWtRH8LcJJ0AyU7FgAAAAkA"]
[Thu Jan 29 03:12:43.853757 2026] [:error] [pid 32451:tid 32470] [client 13.70.56.12:3007] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXpfqxnhmSN6e0P4d6tZbwAAAVE"]
[Thu Jan 29 03:12:47.005130 2026] [:error] [pid 30727:tid 30739] [client 13.70.56.12:1628] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXpfr56XAsWrB4DloY_c4wAAAAg"]
[Thu Jan 29 03:12:50.743953 2026] [:error] [pid 33151:tid 33215] [client 13.70.56.12:5122] [client 13.70.56.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-su.php"] [unique_id "aXpfsmtRH8LcJJ0AyU7FiQAAAlE"]
[Thu Jan 29 03:14:22.332655 2026] [:error] [pid 32598:tid 32619] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/rzzaq.php
[Thu Jan 29 03:14:22.452089 2026] [:error] [pid 32598:tid 32602] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/abtpn.php
[Thu Jan 29 03:14:22.572199 2026] [:error] [pid 32598:tid 32613] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/my1.php
[Thu Jan 29 03:14:22.694481 2026] [:error] [pid 32598:tid 32622] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/taktak.php
[Thu Jan 29 03:14:22.843490 2026] [:error] [pid 32598:tid 32618] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Thu Jan 29 03:14:22.997176 2026] [:error] [pid 32598:tid 32609] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/ypukprhr.php
[Thu Jan 29 03:14:23.136122 2026] [:error] [pid 32598:tid 32616] [client 13.70.56.12:2067] File does not exist: /usr/local/apache/htdocs/suspended-page/tcnyz.php
[Thu Jan 29 03:34:01.552103 2026] [:error] [pid 15949:tid 16013] [client 47.90.227.150:53550] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXpkqSUUtCw0-hDUhapNVAAAAFU"]
[Thu Jan 29 03:34:02.164998 2026] [:error] [pid 16050:tid 16057] [client 47.90.227.150:57456] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXpkquFPpSEbViHfa9KQoAAAAMM"]
[Thu Jan 29 04:08:01.124961 2026] [:error] [pid 20486:tid 20493] [client 185.213.175.121:34528] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20k9win.aspx"] [unique_id "aXpsoXgqSZb6GBx5nnPCIQAAAQQ"]
[Thu Jan 29 04:08:03.689320 2026] [:error] [pid 19177:tid 19196] [client 185.213.175.121:43802] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B9%80%E0%B8%A7%E0%B8%81%E0%B8%B1%E0%B8%AA.aspx"] [unique_id "aXpso3ipGz0PT8TrQv7crQAAANE"]
[Thu Jan 29 04:08:08.598633 2026] [:error] [pid 20579:tid 20655] [client 185.213.175.121:43814] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXpsqDVXNopcNyjJc9VVIQAAAk4"]
[Thu Jan 29 04:08:11.256208 2026] [:error] [pid 20578:tid 20619] [client 185.213.175.121:39894] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXpsqw6UX7yOMwQFiydvJAAAAgY"]
[Thu Jan 29 04:08:18.076314 2026] [:error] [pid 20486:tid 20506] [client 185.213.175.121:39896] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXpssngqSZb6GBx5nnPCPAAAARE"]
[Thu Jan 29 04:08:22.821963 2026] [:error] [pid 20486:tid 20501] [client 185.213.175.121:33446] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXpstngqSZb6GBx5nnPCTAAAAQw"]
[Thu Jan 29 04:08:27.632907 2026] [:error] [pid 20578:tid 20624] [client 185.213.175.121:33458] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpsuw6UX7yOMwQFiydvOAAAAgs"]
[Thu Jan 29 04:08:30.417702 2026] [:error] [pid 20576:tid 20597] [client 185.213.175.121:56762] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpsvirDZws_FlQGi9e9lQAAAcs"]
[Thu Jan 29 04:08:35.022564 2026] [:error] [pid 19069:tid 19098] [client 185.213.175.121:56764] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpsw_DHsRM4BJ9a4QtDVwAAABQ"]
[Thu Jan 29 04:08:42.363458 2026] [:error] [pid 20578:tid 20615] [client 185.213.175.121:56780] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXpsyg6UX7yOMwQFiydvRQAAAgI"]
[Thu Jan 29 04:08:47.077065 2026] [:error] [pid 19070:tid 19123] [client 185.213.175.121:54842] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpsz7ou83lIon_aKgYAoAAAAFE"]
[Thu Jan 29 04:09:48.991893 2026] [:error] [pid 19070:tid 19124] [client 185.213.175.121:39796] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXptDLou83lIon_aKgYA1wAAAFI"]
[Thu Jan 29 04:09:51.573193 2026] [:error] [pid 20576:tid 20598] [client 185.213.175.121:36862] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXptDyrDZws_FlQGi9e9_QAAAcw"]
[Thu Jan 29 04:09:55.238873 2026] [:error] [pid 20579:tid 20664] [client 185.213.175.121:36870] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXptEzVXNopcNyjJc9VV1wAAAlY"]
[Thu Jan 29 04:10:03.337725 2026] [:error] [pid 20580:tid 20687] [client 185.213.175.121:36880] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXptG5CZ5HHdXPmeL585AQAAApM"]
[Thu Jan 29 04:10:21.637928 2026] [:error] [pid 20486:tid 20511] [client 185.213.175.121:53324] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXptLXgqSZb6GBx5nnPDYgAAARY"]
[Thu Jan 29 04:10:24.448103 2026] [:error] [pid 19069:tid 19087] [client 185.213.175.121:56020] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A1.aspx"] [unique_id "aXptMPDHsRM4BJ9a4QtD9gAAAAk"]
[Thu Jan 29 04:10:28.596484 2026] [:error] [pid 20580:tid 20691] [client 185.213.175.121:56022] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%99%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%80%E0%B8%A2%E0%B8%AD%E0%B8%B0%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXptNJCZ5HHdXPmeL585KAAAApc"]
[Thu Jan 29 04:10:31.180759 2026] [:error] [pid 20486:tid 20493] [client 185.213.175.121:46584] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXptN3gqSZb6GBx5nnPDbQAAAQQ"]
[Thu Jan 29 04:10:35.268322 2026] [:error] [pid 20486:tid 20500] [client 185.213.175.121:46592] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20888%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXptO3gqSZb6GBx5nnPDcwAAAQs"]
[Thu Jan 29 04:10:41.184044 2026] [:error] [pid 20486:tid 20507] [client 185.213.175.121:46608] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20ufabet.aspx"] [unique_id "aXptQXgqSZb6GBx5nnPDegAAARI"]
[Thu Jan 29 04:10:45.303074 2026] [:error] [pid 20486:tid 20506] [client 185.213.175.121:37992] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXptRXgqSZb6GBx5nnPDgwAAARE"]
[Thu Jan 29 04:10:55.376864 2026] [:error] [pid 20486:tid 20491] [client 182.42.111.156:49084] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXptT3gqSZb6GBx5nnPDkAAAAQI"]
[Thu Jan 29 04:11:30.578099 2026] [:error] [pid 20519:tid 20548] [client 185.213.175.121:50314] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx"] [unique_id "aXptcgo4s4fyROrkyRkuBwAAAYA"]
[Thu Jan 29 04:11:35.794594 2026] [:error] [pid 20579:tid 20646] [client 185.213.175.121:59520] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXptdzVXNopcNyjJc9VWPAAAAkU"]
[Thu Jan 29 04:11:38.510908 2026] [:error] [pid 20486:tid 20512] [client 185.213.175.121:59526] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%97%E0%B9%88%E0%B8%87%E0%B8%AB%E0%B8%A7%E0%B8%A224%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXptengqSZb6GBx5nnPDwQAAARc"]
[Thu Jan 29 04:11:41.276874 2026] [:error] [pid 20578:tid 20632] [client 185.213.175.121:34976] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%AD%E0%B8%9E%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXptfQ6UX7yOMwQFiydwGgAAAhM"]
[Thu Jan 29 04:11:47.081097 2026] [:error] [pid 20580:tid 20678] [client 185.213.175.121:34986] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXptg5CZ5HHdXPmeL585lQAAAoo"]
[Thu Jan 29 04:11:51.803981 2026] [:error] [pid 19071:tid 19155] [client 185.213.175.121:56066] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXpth5fa8Ix5wWmtmJyEOwAAAJY"]
[Thu Jan 29 04:11:56.421709 2026] [:error] [pid 20519:tid 20571] [client 185.213.175.121:56082] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89100%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXptjAo4s4fyROrkyRkuHAAAAZc"]
[Thu Jan 29 04:12:03.430656 2026] [:error] [pid 20580:tid 20683] [client 185.213.175.121:42844] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXptk5CZ5HHdXPmeL585qAAAAo8"]
[Thu Jan 29 04:12:06.216710 2026] [:error] [pid 19069:tid 19101] [client 185.213.175.121:42860] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "aXptlvDHsRM4BJ9a4QtEaAAAABc"]
[Thu Jan 29 04:12:09.003318 2026] [:error] [pid 20486:tid 20497] [client 185.213.175.121:38738] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/123betting.aspx"] [unique_id "aXptmXgqSZb6GBx5nnPD4QAAAQg"]
[Thu Jan 29 04:12:11.665129 2026] [:error] [pid 20519:tid 20562] [client 185.213.175.121:38754] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168slot.aspx"] [unique_id "aXptmwo4s4fyROrkyRkuLwAAAY4"]
[Thu Jan 29 04:12:14.327944 2026] [:error] [pid 20486:tid 20506] [client 185.213.175.121:38766] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXptnngqSZb6GBx5nnPD6gAAARE"]
[Thu Jan 29 04:12:18.019849 2026] [:error] [pid 20519:tid 20564] [client 185.213.175.121:38780] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXptogo4s4fyROrkyRkuPQAAAZA"]
[Thu Jan 29 04:13:12.100330 2026] [:error] [pid 20580:tid 20676] [client 185.213.175.121:54130] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg888th%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXpt2JCZ5HHdXPmeL586GQAAAog"]
[Thu Jan 29 04:13:22.197906 2026] [:error] [pid 20486:tid 20500] [client 185.213.175.121:50870] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpt4ngqSZb6GBx5nnPEZAAAAQs"]
[Thu Jan 29 04:13:25.976666 2026] [:error] [pid 19069:tid 19094] [client 185.213.175.121:51196] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXpt5fDHsRM4BJ9a4QtE2gAAABA"]
[Thu Jan 29 04:13:28.752970 2026] [:error] [pid 20519:tid 20556] [client 185.213.175.121:51206] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pk789%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpt6Ao4s4fyROrkyRkuowAAAYg"]
[Thu Jan 29 04:13:33.074369 2026] [:error] [pid 19070:tid 19114] [client 185.213.175.121:43156] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pxj.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpt7bou83lIon_aKgYB-wAAAEg"]
[Thu Jan 29 04:13:35.726012 2026] [:error] [pid 20579:tid 20657] [client 185.213.175.121:43160] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXpt7zVXNopcNyjJc9VW7QAAAlA"]
[Thu Jan 29 04:13:39.419896 2026] [:error] [pid 20486:tid 20503] [client 185.213.175.121:43170] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aXpt83gqSZb6GBx5nnPEgwAAAQ4"]
[Thu Jan 29 04:13:42.086092 2026] [:error] [pid 19069:tid 19085] [client 185.213.175.121:48760] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ruay.%20org%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpt9vDHsRM4BJ9a4QtE6QAAAAc"]
[Thu Jan 29 04:13:44.816845 2026] [:error] [pid 20580:tid 20692] [client 185.213.175.121:48764] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpt-JCZ5HHdXPmeL586QQAAApg"]
[Thu Jan 29 04:13:47.372558 2026] [:error] [pid 19071:tid 19157] [client 185.213.175.121:48778] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXpt-5fa8Ix5wWmtmJyE2gAAAJg"]
[Thu Jan 29 04:13:49.995065 2026] [:error] [pid 19069:tid 19089] [client 185.213.175.121:43248] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXpt_fDHsRM4BJ9a4QtE9AAAAAs"]
[Thu Jan 29 04:13:54.755695 2026] [:error] [pid 19071:tid 19148] [client 185.213.175.121:43252] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aXpuApfa8Ix5wWmtmJyE5gAAAI8"]
[Thu Jan 29 04:13:57.368415 2026] [:error] [pid 19177:tid 19181] [client 185.213.175.121:43256] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet.aspx"] [unique_id "aXpuBXipGz0PT8TrQv7eKAAAAMI"]
[Thu Jan 29 04:14:04.072247 2026] [:error] [pid 19071:tid 19148] [client 185.213.175.121:52560] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aXpuDJfa8Ix5wWmtmJyE9QAAAI8"]
[Thu Jan 29 04:14:06.729984 2026] [:error] [pid 20519:tid 20563] [client 185.213.175.121:52574] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aXpuDgo4s4fyROrkyRku1AAAAY8"]
[Thu Jan 29 06:03:36.142952 2026] [:error] [pid 20579:tid 20642] [client 51.83.7.88:45856] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXqHuDVXNopcNyjJc9VtewAAAkE"]
[Thu Jan 29 06:03:38.090680 2026] [:error] [pid 19069:tid 19084] [client 51.83.7.88:58580] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXqHuvDHsRM4BJ9a4QtfQwAAAAY"]
[Thu Jan 29 06:03:40.084801 2026] [:error] [pid 19069:tid 19078] [client 51.83.7.88:58588] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%811%E0%B8%A3%E0%B8%B1%E0%B8%9A50.aspx"] [unique_id "aXqHvPDHsRM4BJ9a4QtfRQAAAAA"]
[Thu Jan 29 06:03:42.066820 2026] [:error] [pid 19070:tid 19106] [client 51.83.7.88:43518] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B9%84%E0%B8%94%E0%B9%89100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqHvrou83lIon_aKgYajAAAAEA"]
[Thu Jan 29 06:03:44.199684 2026] [:error] [pid 19070:tid 19123] [client 51.83.7.88:43522] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXqHwLou83lIon_aKgYajwAAAFE"]
[Thu Jan 29 06:03:46.206929 2026] [:error] [pid 20578:tid 20629] [client 51.83.7.88:43532] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXqHwg6UX7yOMwQFiyeG_QAAAhA"]
[Thu Jan 29 06:03:48.191428 2026] [:error] [pid 20579:tid 20653] [client 51.83.7.88:43548] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx"] [unique_id "aXqHxDVXNopcNyjJc9VthgAAAkw"]
[Thu Jan 29 06:03:50.265288 2026] [:error] [pid 19071:tid 19149] [client 51.83.7.88:43550] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%9F%E0%B8%B5%E0%B8%A2%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXqHxpfa8Ix5wWmtmJyk4QAAAJA"]
[Thu Jan 29 06:03:52.437753 2026] [:error] [pid 20576:tid 20586] [client 51.83.7.88:51518] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2888.aspx"] [unique_id "aXqHyCrDZws_FlQGi9fTmgAAAcA"]
[Thu Jan 29 06:03:54.732637 2026] [:error] [pid 20486:tid 20505] [client 51.83.7.88:51534] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqHyngqSZb6GBx5nnPq9gAAARA"]
[Thu Jan 29 06:03:56.819921 2026] [:error] [pid 20580:tid 20684] [client 51.83.7.88:51536] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXqHzJCZ5HHdXPmeL59SlgAAApA"]
[Thu Jan 29 06:03:58.768985 2026] [:error] [pid 20519:tid 20562] [client 51.83.7.88:51542] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXqHzgo4s4fyROrkyRlD6gAAAY4"]
[Thu Jan 29 06:04:01.339777 2026] [:error] [pid 19070:tid 19130] [client 51.83.7.88:51548] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXqH0bou83lIon_aKgYaowAAAFg"]
[Thu Jan 29 06:04:03.333363 2026] [:error] [pid 20579:tid 20646] [client 51.83.7.88:41834] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXqH0zVXNopcNyjJc9VtkQAAAkU"]
[Thu Jan 29 06:04:05.466169 2026] [:error] [pid 20486:tid 20500] [client 51.83.7.88:41836] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202024.aspx"] [unique_id "aXqH1XgqSZb6GBx5nnPrBwAAAQs"]
[Thu Jan 29 06:04:07.370187 2026] [:error] [pid 19070:tid 19125] [client 51.83.7.88:41838] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXqH17ou83lIon_aKgYaqQAAAFM"]
[Thu Jan 29 06:04:09.380238 2026] [:error] [pid 20579:tid 20652] [client 51.83.7.88:41842] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20mukob.aspx"] [unique_id "aXqH2TVXNopcNyjJc9VtlgAAAks"]
[Thu Jan 29 06:04:11.309364 2026] [:error] [pid 19069:tid 19091] [client 51.83.7.88:41844] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXqH2_DHsRM4BJ9a4QtfVwAAAA0"]
[Thu Jan 29 06:04:13.377236 2026] [:error] [pid 20580:tid 20667] [client 51.83.7.88:43540] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqH3ZCZ5HHdXPmeL59SnwAAAoE"]
[Thu Jan 29 06:04:15.448440 2026] [:error] [pid 19070:tid 19124] [client 51.83.7.88:43548] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B22020.aspx"] [unique_id "aXqH37ou83lIon_aKgYasQAAAFI"]
[Thu Jan 29 06:04:17.334258 2026] [:error] [pid 19071:tid 19151] [client 51.83.7.88:43560] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXqH4Zfa8Ix5wWmtmJylEwAAAJI"]
[Thu Jan 29 06:04:19.228091 2026] [:error] [pid 20519:tid 20560] [client 51.83.7.88:43576] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202024.aspx"] [unique_id "aXqH4wo4s4fyROrkyRlD9gAAAYw"]
[Thu Jan 29 06:04:21.294677 2026] [:error] [pid 20580:tid 20673] [client 51.83.7.88:43578] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXqH5ZCZ5HHdXPmeL59SpAAAAoU"]
[Thu Jan 29 06:04:23.344838 2026] [:error] [pid 19071:tid 19151] [client 51.83.7.88:57812] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXqH55fa8Ix5wWmtmJylJAAAAJI"]
[Thu Jan 29 06:04:25.373799 2026] [:error] [pid 19177:tid 19184] [client 51.83.7.88:57818] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXqH6XipGz0PT8TrQv7yrAAAAMU"]
[Thu Jan 29 06:04:27.253267 2026] [:error] [pid 20519:tid 20550] [client 51.83.7.88:57820] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXqH6wo4s4fyROrkyRlD_wAAAYI"]
[Thu Jan 29 06:04:29.291852 2026] [:error] [pid 20486:tid 20490] [client 51.83.7.88:57826] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXqH7XgqSZb6GBx5nnPrGQAAAQE"]
[Thu Jan 29 06:04:31.309217 2026] [:error] [pid 19071:tid 19156] [client 51.83.7.88:57842] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXqH75fa8Ix5wWmtmJylKwAAAJc"]
[Thu Jan 29 06:04:33.335122 2026] [:error] [pid 19071:tid 19149] [client 51.83.7.88:45456] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXqH8Zfa8Ix5wWmtmJylLQAAAJA"]
[Thu Jan 29 06:04:53.666050 2026] [:error] [pid 20580:tid 20678] [client 51.83.7.88:45462] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXqIBZCZ5HHdXPmeL59SxgAAAoo"]
[Thu Jan 29 06:04:55.645236 2026] [:error] [pid 19071:tid 19136] [client 51.83.7.88:33270] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXqIB5fa8Ix5wWmtmJylTAAAAIM"]
[Thu Jan 29 06:04:57.696122 2026] [:error] [pid 20486:tid 20507] [client 51.83.7.88:33276] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXqICXgqSZb6GBx5nnPrPgAAARI"]
[Thu Jan 29 06:04:59.547903 2026] [:error] [pid 20486:tid 20489] [client 51.83.7.88:33290] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXqIC3gqSZb6GBx5nnPrQAAAAQA"]
[Thu Jan 29 06:05:01.414614 2026] [:error] [pid 20486:tid 20499] [client 51.83.7.88:33306] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIDXgqSZb6GBx5nnPrQwAAAQo"]
[Thu Jan 29 06:05:03.432231 2026] [:error] [pid 19071:tid 19138] [client 51.83.7.88:40712] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81.aspx"] [unique_id "aXqID5fa8Ix5wWmtmJylVQAAAIU"]
[Thu Jan 29 06:05:05.454024 2026] [:error] [pid 20578:tid 20614] [client 51.83.7.88:40722] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqIEQ6UX7yOMwQFiyeHJAAAAgE"]
[Thu Jan 29 06:05:07.462878 2026] [:error] [pid 19071:tid 19151] [client 51.83.7.88:40726] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXqIE5fa8Ix5wWmtmJylZwAAAJI"]
[Thu Jan 29 06:05:09.336546 2026] [:error] [pid 20580:tid 20676] [client 51.83.7.88:40738] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXqIFZCZ5HHdXPmeL59S0gAAAog"]
[Thu Jan 29 06:05:11.342524 2026] [:error] [pid 19177:tid 19199] [client 51.83.7.88:40748] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXqIF3ipGz0PT8TrQv7y3gAAANQ"]
[Thu Jan 29 06:05:13.351879 2026] [:error] [pid 20576:tid 20598] [client 51.83.7.88:44554] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXqIGSrDZws_FlQGi9fTugAAAcw"]
[Thu Jan 29 06:05:15.358929 2026] [:error] [pid 19070:tid 19118] [client 51.83.7.88:44564] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C168.aspx"] [unique_id "aXqIG7ou83lIon_aKgYa3gAAAEw"]
[Thu Jan 29 06:05:17.375947 2026] [:error] [pid 20486:tid 20506] [client 51.83.7.88:44568] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXqIHXgqSZb6GBx5nnPrTgAAARE"]
[Thu Jan 29 06:05:19.363279 2026] [:error] [pid 20579:tid 20653] [client 51.83.7.88:44580] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXqIHzVXNopcNyjJc9VtwwAAAkw"]
[Thu Jan 29 06:05:21.365045 2026] [:error] [pid 20576:tid 20588] [client 51.83.7.88:44594] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXqIISrDZws_FlQGi9fTwQAAAcI"]
[Thu Jan 29 06:05:23.362900 2026] [:error] [pid 20519:tid 20562] [client 51.83.7.88:52890] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIIwo4s4fyROrkyRlEGgAAAY4"]
[Thu Jan 29 06:05:25.365933 2026] [:error] [pid 19071:tid 19146] [client 51.83.7.88:52904] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIJZfa8Ix5wWmtmJyleAAAAI0"]
[Thu Jan 29 06:05:27.363821 2026] [:error] [pid 20519:tid 20559] [client 51.83.7.88:52910] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXqIJwo4s4fyROrkyRlEHQAAAYs"]
[Thu Jan 29 06:05:29.369327 2026] [:error] [pid 20580:tid 20676] [client 51.83.7.88:52918] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aXqIKZCZ5HHdXPmeL59S3wAAAog"]
[Thu Jan 29 06:05:31.361314 2026] [:error] [pid 19071:tid 19149] [client 51.83.7.88:52926] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIK5fa8Ix5wWmtmJylfgAAAJA"]
[Thu Jan 29 06:05:33.353651 2026] [:error] [pid 20579:tid 20666] [client 51.83.7.88:46966] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95369.aspx"] [unique_id "aXqILTVXNopcNyjJc9VtyQAAAlc"]
[Thu Jan 29 06:05:35.358107 2026] [:error] [pid 20579:tid 20648] [client 51.83.7.88:46968] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXqILzVXNopcNyjJc9VtywAAAkc"]
[Thu Jan 29 06:05:37.347690 2026] [:error] [pid 20579:tid 20657] [client 51.83.7.88:46984] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXqIMTVXNopcNyjJc9VtzAAAAlA"]
[Thu Jan 29 06:05:39.178906 2026] [:error] [pid 19177:tid 19184] [client 51.83.7.88:46992] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXqIM3ipGz0PT8TrQv7y9wAAAMU"]
[Thu Jan 29 06:05:41.175448 2026] [:error] [pid 20486:tid 20497] [client 51.83.7.88:47002] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXqINXgqSZb6GBx5nnPragAAAQg"]
[Thu Jan 29 06:05:43.171308 2026] [:error] [pid 19070:tid 19122] [client 51.83.7.88:41612] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIN7ou83lIon_aKgYbFgAAAFA"]
[Thu Jan 29 06:05:45.164269 2026] [:error] [pid 20578:tid 20637] [client 51.83.7.88:41624] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqIOQ6UX7yOMwQFiyeHNQAAAhg"]
[Thu Jan 29 06:05:47.154770 2026] [:error] [pid 19069:tid 19079] [client 51.83.7.88:41636] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXqIO_DHsRM4BJ9a4QtfqgAAAAE"]
[Thu Jan 29 06:05:49.001096 2026] [:error] [pid 20576:tid 20606] [client 51.83.7.88:41642] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIPCrDZws_FlQGi9fT3QAAAdQ"]
[Thu Jan 29 06:05:50.995364 2026] [:error] [pid 20486:tid 20499] [client 51.83.7.88:41658] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXqIPngqSZb6GBx5nnPrdgAAAQo"]
[Thu Jan 29 06:06:11.402613 2026] [:error] [pid 20519:tid 20555] [client 51.83.7.88:54672] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXqIUwo4s4fyROrkyRlEOgAAAYc"]
[Thu Jan 29 06:06:13.357148 2026] [:error] [pid 19069:tid 19093] [client 51.83.7.88:50656] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqIVfDHsRM4BJ9a4QtfvQAAAA8"]
[Thu Jan 29 06:06:15.347649 2026] [:error] [pid 19070:tid 19114] [client 51.83.7.88:50662] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXqIV7ou83lIon_aKgYbOwAAAEg"]
[Thu Jan 29 06:06:17.343667 2026] [:error] [pid 20486:tid 20511] [client 51.83.7.88:50668] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B8%AD%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B9%80%E0%B8%99%E0%B9%88%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIWXgqSZb6GBx5nnPrhgAAARY"]
[Thu Jan 29 06:06:19.335925 2026] [:error] [pid 20576:tid 20608] [client 51.83.7.88:50672] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIWyrDZws_FlQGi9fT6AAAAdY"]
[Thu Jan 29 06:06:21.318374 2026] [:error] [pid 20486:tid 20501] [client 51.83.7.88:50676] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXqIXXgqSZb6GBx5nnPriAAAAQw"]
[Thu Jan 29 06:06:23.320750 2026] [:error] [pid 19177:tid 19200] [client 51.83.7.88:50522] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIX3ipGz0PT8TrQv7zIwAAANU"]
[Thu Jan 29 06:06:25.309046 2026] [:error] [pid 20580:tid 20665] [client 51.83.7.88:50536] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIYZCZ5HHdXPmeL59THAAAAoA"]
[Thu Jan 29 06:06:27.295788 2026] [:error] [pid 20580:tid 20692] [client 51.83.7.88:50540] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIY5CZ5HHdXPmeL59THQAAApg"]
[Thu Jan 29 06:06:29.129371 2026] [:error] [pid 19071:tid 19140] [client 51.83.7.88:50544] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20pg.aspx"] [unique_id "aXqIZZfa8Ix5wWmtmJylnwAAAIc"]
[Thu Jan 29 06:06:31.128161 2026] [:error] [pid 19071:tid 19144] [client 51.83.7.88:50548] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXqIZ5fa8Ix5wWmtmJyloQAAAIs"]
[Thu Jan 29 06:06:33.119581 2026] [:error] [pid 20576:tid 20594] [client 51.83.7.88:50144] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXqIaSrDZws_FlQGi9fT8gAAAcg"]
[Thu Jan 29 06:06:35.105408 2026] [:error] [pid 20578:tid 20614] [client 51.83.7.88:50154] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXqIaw6UX7yOMwQFiyeHWwAAAgE"]
[Thu Jan 29 06:06:37.103336 2026] [:error] [pid 20580:tid 20671] [client 51.83.7.88:50166] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXqIbZCZ5HHdXPmeL59TLAAAAoM"]
[Thu Jan 29 06:06:38.938682 2026] [:error] [pid 20580:tid 20683] [client 51.83.7.88:50178] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIbpCZ5HHdXPmeL59TMAAAAo8"]
[Thu Jan 29 06:06:40.919489 2026] [:error] [pid 19069:tid 19101] [client 51.83.7.88:50186] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIcPDHsRM4BJ9a4Qtf1gAAABc"]
[Thu Jan 29 06:06:42.916972 2026] [:error] [pid 20486:tid 20497] [client 51.83.7.88:36082] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXqIcngqSZb6GBx5nnPrkAAAAQg"]
[Thu Jan 29 06:06:44.913438 2026] [:error] [pid 20486:tid 20490] [client 51.83.7.88:36090] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIdHgqSZb6GBx5nnPrkwAAAQE"]
[Thu Jan 29 06:06:46.924877 2026] [:error] [pid 20486:tid 20492] [client 51.83.7.88:36102] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXqIdngqSZb6GBx5nnPrmQAAAQM"]
[Thu Jan 29 06:06:48.923058 2026] [:error] [pid 19071:tid 19156] [client 51.83.7.88:36110] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/19%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXqIeJfa8Ix5wWmtmJylrgAAAJc"]
[Thu Jan 29 06:06:50.754120 2026] [:error] [pid 20580:tid 20685] [client 51.83.7.88:36114] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aXqIepCZ5HHdXPmeL59TPAAAApE"]
[Thu Jan 29 06:06:52.739833 2026] [:error] [pid 20578:tid 20621] [client 51.83.7.88:37476] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/369%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIfA6UX7yOMwQFiyeHigAAAgg"]
[Thu Jan 29 06:06:54.743991 2026] [:error] [pid 20576:tid 20591] [client 51.83.7.88:37482] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIfirDZws_FlQGi9fUAAAAAcU"]
[Thu Jan 29 06:06:56.731258 2026] [:error] [pid 20579:tid 20659] [client 51.83.7.88:37492] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/99mb%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIgDVXNopcNyjJc9VuHwAAAlI"]
[Thu Jan 29 06:06:58.723135 2026] [:error] [pid 19177:tid 19180] [client 51.83.7.88:37506] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20master%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXqIgnipGz0PT8TrQv7zZgAAAME"]
[Thu Jan 29 06:07:00.724056 2026] [:error] [pid 20519:tid 20551] [client 51.83.7.88:37512] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet%2010%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXqIhAo4s4fyROrkyRlETgAAAYM"]
[Thu Jan 29 06:07:02.556941 2026] [:error] [pid 19069:tid 19094] [client 51.83.7.88:40640] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ambbet.aspx"] [unique_id "aXqIhvDHsRM4BJ9a4Qtf4wAAABA"]
[Thu Jan 29 06:07:04.541767 2026] [:error] [pid 20579:tid 20641] [client 51.83.7.88:40654] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/bet365%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXqIiDVXNopcNyjJc9VuJwAAAkA"]
[Thu Jan 29 06:07:06.545736 2026] [:error] [pid 20486:tid 20507] [client 51.83.7.88:40656] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXqIingqSZb6GBx5nnPrwQAAARI"]
[Thu Jan 29 06:07:08.380762 2026] [:error] [pid 19069:tid 19097] [client 51.83.7.88:40662] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aXqIjPDHsRM4BJ9a4Qtf5QAAABM"]
[Thu Jan 29 06:07:28.327217 2026] [:error] [pid 20486:tid 20499] [client 51.83.7.88:40670] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m24%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIoHgqSZb6GBx5nnPr4gAAAQo"]
[Thu Jan 29 06:07:30.294840 2026] [:error] [pid 20580:tid 20687] [client 51.83.7.88:49622] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/m98%20bet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXqIopCZ5HHdXPmeL59TZwAAApM"]
[Thu Jan 29 06:07:32.285523 2026] [:error] [pid 19071:tid 19149] [client 51.83.7.88:46870] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIpJfa8Ix5wWmtmJymCQAAAJA"]
[Thu Jan 29 06:07:34.271338 2026] [:error] [pid 20580:tid 20684] [client 51.83.7.88:46884] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/magnum%204d%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%20%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%A5%20%E0%B8%A2%E0%B9%8C%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXqIppCZ5HHdXPmeL59TbgAAApA"]
[Thu Jan 29 06:07:36.276246 2026] [:error] [pid 19070:tid 19109] [client 51.83.7.88:46900] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXqIqLou83lIon_aKgYbhQAAAEM"]
[Thu Jan 29 06:07:38.121901 2026] [:error] [pid 20519:tid 20571] [client 51.83.7.88:46910] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIqgo4s4fyROrkyRlEeAAAAZc"]
[Thu Jan 29 06:07:40.107662 2026] [:error] [pid 20578:tid 20635] [client 51.83.7.88:46920] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIrA6UX7yOMwQFiyeHnAAAAhY"]
[Thu Jan 29 06:07:42.106820 2026] [:error] [pid 19070:tid 19117] [client 51.83.7.88:38904] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqIrrou83lIon_aKgYbkgAAAEs"]
[Thu Jan 29 06:07:44.095915 2026] [:error] [pid 19177:tid 19197] [client 51.83.7.88:38908] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mm88rich%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqIsHipGz0PT8TrQv7zegAAANI"]
[Thu Jan 29 06:07:46.089333 2026] [:error] [pid 19177:tid 19187] [client 51.83.7.88:38918] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/myslot.aspx"] [unique_id "aXqIsnipGz0PT8TrQv7zfAAAAMg"]
[Thu Jan 29 06:07:47.922425 2026] [:error] [pid 20576:tid 20592] [client 51.83.7.88:38930] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIsyrDZws_FlQGi9fUMQAAAcY"]
[Thu Jan 29 06:07:49.925625 2026] [:error] [pid 19177:tid 19202] [client 51.83.7.88:38934] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqItXipGz0PT8TrQv7zhAAAANc"]
[Thu Jan 29 06:07:51.918956 2026] [:error] [pid 20578:tid 20633] [client 51.83.7.88:47200] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqItw6UX7yOMwQFiyeHoQAAAhQ"]
[Thu Jan 29 06:07:53.909889 2026] [:error] [pid 19069:tid 19095] [client 51.83.7.88:47208] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIufDHsRM4BJ9a4QtgDAAAABE"]
[Thu Jan 29 06:07:55.895346 2026] [:error] [pid 19070:tid 19123] [client 51.83.7.88:47218] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXqIu7ou83lIon_aKgYbmgAAAFE"]
[Thu Jan 29 06:07:57.734754 2026] [:error] [pid 20578:tid 20630] [client 51.83.7.88:47232] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pay69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIvQ6UX7yOMwQFiyeHpAAAAhE"]
[Thu Jan 29 06:07:59.725407 2026] [:error] [pid 20576:tid 20596] [client 51.83.7.88:47248] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXqIvyrDZws_FlQGi9fUSQAAAco"]
[Thu Jan 29 06:08:01.720812 2026] [:error] [pid 20576:tid 20595] [client 51.83.7.88:47258] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXqIwSrDZws_FlQGi9fUTQAAAck"]
[Thu Jan 29 06:08:03.708523 2026] [:error] [pid 20519:tid 20564] [client 51.83.7.88:45296] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIwwo4s4fyROrkyRlEiwAAAZA"]
[Thu Jan 29 06:08:05.538948 2026] [:error] [pid 19071:tid 19137] [client 51.83.7.88:45310] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aXqIxZfa8Ix5wWmtmJymMgAAAIQ"]
[Thu Jan 29 06:08:07.527174 2026] [:error] [pid 19177:tid 19184] [client 51.83.7.88:45322] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aXqIx3ipGz0PT8TrQv7zkAAAAMU"]
[Thu Jan 29 06:08:09.517811 2026] [:error] [pid 19070:tid 19128] [client 51.83.7.88:45330] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXqIybou83lIon_aKgYboQAAAFY"]
[Thu Jan 29 06:08:11.345333 2026] [:error] [pid 19071:tid 19136] [client 51.83.7.88:45332] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aXqIy5fa8Ix5wWmtmJymPwAAAIM"]
[Thu Jan 29 06:08:13.324934 2026] [:error] [pid 20579:tid 20654] [client 51.83.7.88:48794] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aXqIzTVXNopcNyjJc9VuhAAAAk0"]
[Thu Jan 29 06:08:15.308534 2026] [:error] [pid 19071:tid 19144] [client 51.83.7.88:48804] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXqIz5fa8Ix5wWmtmJymRAAAAIs"]
[Thu Jan 29 06:08:17.173543 2026] [:error] [pid 20579:tid 20651] [client 51.83.7.88:48810] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXqI0TVXNopcNyjJc9VuiAAAAko"]
[Thu Jan 29 06:08:19.198555 2026] [:error] [pid 20580:tid 20682] [client 51.83.7.88:48820] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXqI05CZ5HHdXPmeL59TigAAAo4"]
[Thu Jan 29 06:08:21.327672 2026] [:error] [pid 20579:tid 20668] [client 51.83.7.88:48828] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXqI1TVXNopcNyjJc9VujQAAAlg"]
[Thu Jan 29 11:12:57.054289 2026] [:error] [pid 20486:tid 20499] [client 95.217.109.26:42076] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXrQOXgqSZb6GBx5nnNeDgAAAQo"]
[Thu Jan 29 11:12:58.973691 2026] [:error] [pid 20486:tid 20492] [client 95.217.109.26:42082] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%9A%20%E0%B8%97%20365.aspx"] [unique_id "aXrQOngqSZb6GBx5nnNeHAAAAQM"]
[Thu Jan 29 11:13:00.920167 2026] [:error] [pid 20519:tid 20550] [client 95.217.109.26:42096] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXrQPAo4s4fyROrkyRl6DgAAAYI"]
[Thu Jan 29 11:13:02.951966 2026] [:error] [pid 20486:tid 20507] [client 95.217.109.26:42108] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQPngqSZb6GBx5nnNeSQAAARI"]
[Thu Jan 29 11:13:04.975469 2026] [:error] [pid 20486:tid 20513] [client 95.217.109.26:42118] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQQHgqSZb6GBx5nnNeYgAAARg"]
[Thu Jan 29 11:13:06.931603 2026] [:error] [pid 20576:tid 20604] [client 95.217.109.26:40196] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrQQirDZws_FlQGi9cJcgAAAdI"]
[Thu Jan 29 11:13:09.061735 2026] [:error] [pid 20578:tid 20631] [client 95.217.109.26:40204] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrQRQ6UX7yOMwQFiyfB3QAAAhI"]
[Thu Jan 29 11:13:11.201042 2026] [:error] [pid 19070:tid 19121] [client 95.217.109.26:40210] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXrQR7ou83lIon_aKgZohgAAAE8"]
[Thu Jan 29 11:13:13.359958 2026] [:error] [pid 20486:tid 20511] [client 95.217.109.26:40220] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrQSXgqSZb6GBx5nnNeiAAAARY"]
[Thu Jan 29 11:13:15.412949 2026] [:error] [pid 20519:tid 20550] [client 95.217.109.26:40232] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXrQSwo4s4fyROrkyRl6GQAAAYI"]
[Thu Jan 29 11:13:17.399851 2026] [:error] [pid 20576:tid 20591] [client 95.217.109.26:51404] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXrQTSrDZws_FlQGi9cJewAAAcU"]
[Thu Jan 29 11:13:19.485699 2026] [:error] [pid 19071:tid 19153] [client 95.217.109.26:51418] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXrQT5fa8Ix5wWmtmJz8VQAAAJQ"]
[Thu Jan 29 11:13:21.578895 2026] [:error] [pid 19071:tid 19143] [client 95.217.109.26:51428] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20%E0%B8%94%E0%B8%B5%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQUZfa8Ix5wWmtmJz8WAAAAIo"]
[Thu Jan 29 11:13:23.582299 2026] [:error] [pid 20579:tid 20656] [client 95.217.109.26:51444] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrQUzVXNopcNyjJc9WpeQAAAk8"]
[Thu Jan 29 11:13:25.576908 2026] [:error] [pid 20579:tid 20648] [client 95.217.109.26:51454] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQVTVXNopcNyjJc9WpfAAAAkc"]
[Thu Jan 29 11:13:27.672581 2026] [:error] [pid 20576:tid 20587] [client 95.217.109.26:30998] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXrQVyrDZws_FlQGi9cJgQAAAcE"]
[Thu Jan 29 11:13:29.753380 2026] [:error] [pid 20486:tid 20497] [client 95.217.109.26:31010] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXrQWXgqSZb6GBx5nnNemQAAAQg"]
[Thu Jan 29 11:13:31.818786 2026] [:error] [pid 19071:tid 19143] [client 95.217.109.26:31020] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXrQW5fa8Ix5wWmtmJz8XwAAAIo"]
[Thu Jan 29 11:13:33.786256 2026] [:error] [pid 20519:tid 20556] [client 95.217.109.26:31024] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXrQXQo4s4fyROrkyRl6JQAAAYg"]
[Thu Jan 29 11:13:35.899717 2026] [:error] [pid 20486:tid 20503] [client 95.217.109.26:15680] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXrQX3gqSZb6GBx5nnNengAAAQ4"]
[Thu Jan 29 11:13:38.076984 2026] [:error] [pid 20519:tid 20560] [client 95.217.109.26:15684] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrQYgo4s4fyROrkyRl6KAAAAYw"]
[Thu Jan 29 11:13:40.043181 2026] [:error] [pid 20576:tid 20603] [client 95.217.109.26:15690] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQZCrDZws_FlQGi9cJigAAAdE"]
[Thu Jan 29 11:13:41.967633 2026] [:error] [pid 19070:tid 19116] [client 95.217.109.26:15696] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQZbou83lIon_aKgZopwAAAEo"]
[Thu Jan 29 11:13:44.100224 2026] [:error] [pid 19069:tid 19100] [client 95.217.109.26:15704] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C888.aspx"] [unique_id "aXrQaPDHsRM4BJ9a4QukiwAAABY"]
[Thu Jan 29 11:13:46.052944 2026] [:error] [pid 19070:tid 19121] [client 95.217.109.26:4154] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQarou83lIon_aKgZorQAAAE8"]
[Thu Jan 29 11:13:48.172714 2026] [:error] [pid 19070:tid 19107] [client 95.217.109.26:4170] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%80%E0%B8%AE%E0%B8%87%20999.aspx"] [unique_id "aXrQbLou83lIon_aKgZotQAAAEE"]
[Thu Jan 29 11:13:50.164030 2026] [:error] [pid 19071:tid 19150] [client 95.217.109.26:4176] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXrQbpfa8Ix5wWmtmJz8cgAAAJE"]
[Thu Jan 29 11:13:52.274205 2026] [:error] [pid 19070:tid 19113] [client 95.217.109.26:4184] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrQcLou83lIon_aKgZouQAAAEc"]
[Thu Jan 29 11:13:54.239096 2026] [:error] [pid 19070:tid 19125] [client 95.217.109.26:4196] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQcrou83lIon_aKgZowAAAAFM"]
[Thu Jan 29 11:14:18.475920 2026] [:error] [pid 20486:tid 20505] [client 95.217.109.26:28022] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXrQingqSZb6GBx5nnNexwAAARA"]
[Thu Jan 29 11:14:20.484082 2026] [:error] [pid 20519:tid 20565] [client 95.217.109.26:28024] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXrQjAo4s4fyROrkyRl6OAAAAZE"]
[Thu Jan 29 11:14:22.383308 2026] [:error] [pid 19071:tid 19155] [client 95.217.109.26:28028] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQjpfa8Ix5wWmtmJz8kgAAAJY"]
[Thu Jan 29 11:14:24.460064 2026] [:error] [pid 19071:tid 19145] [client 95.217.109.26:28038] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet.aspx"] [unique_id "aXrQkJfa8Ix5wWmtmJz8mAAAAIw"]
[Thu Jan 29 11:14:26.368100 2026] [:error] [pid 19071:tid 19153] [client 95.217.109.26:34830] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXrQkpfa8Ix5wWmtmJz8oQAAAJQ"]
[Thu Jan 29 11:14:28.266703 2026] [:error] [pid 20576:tid 20598] [client 95.217.109.26:34846] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/15%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXrQlCrDZws_FlQGi9cJrgAAAcw"]
[Thu Jan 29 11:14:30.262424 2026] [:error] [pid 20580:tid 20678] [client 95.217.109.26:34850] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168%20slot.aspx"] [unique_id "aXrQlpCZ5HHdXPmeL5-UsgAAAoo"]
[Thu Jan 29 11:14:32.281900 2026] [:error] [pid 20579:tid 20649] [client 95.217.109.26:34856] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrQmDVXNopcNyjJc9WppgAAAkg"]
[Thu Jan 29 11:14:34.225776 2026] [:error] [pid 20576:tid 20599] [client 95.217.109.26:34868] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/188bet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXrQmirDZws_FlQGi9cJsAAAAc0"]
[Thu Jan 29 11:14:36.246244 2026] [:error] [pid 20578:tid 20624] [client 95.217.109.26:36456] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1xbet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXrQnA6UX7yOMwQFiyfCDAAAAgs"]
[Thu Jan 29 11:14:38.243402 2026] [:error] [pid 19070:tid 19123] [client 95.217.109.26:36470] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/20%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXrQnrou83lIon_aKgZo_gAAAFE"]
[Thu Jan 29 11:14:40.339972 2026] [:error] [pid 20580:tid 20681] [client 95.217.109.26:36482] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/24%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXrQoJCZ5HHdXPmeL5-UuQAAAo0"]
[Thu Jan 29 11:14:42.274028 2026] [:error] [pid 20579:tid 20651] [client 95.217.109.26:36486] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/365bet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXrQojVXNopcNyjJc9WpsQAAAko"]
[Thu Jan 29 11:14:44.437652 2026] [:error] [pid 20576:tid 20591] [client 95.217.109.26:36502] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/460bet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrQpCrDZws_FlQGi9cJugAAAcU"]
[Thu Jan 29 11:14:46.504407 2026] [:error] [pid 20519:tid 20554] [client 95.217.109.26:57866] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/55%20superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXrQpgo4s4fyROrkyRl6WQAAAYY"]
[Thu Jan 29 11:14:48.541509 2026] [:error] [pid 19070:tid 19122] [client 95.217.109.26:57882] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/777slot.aspx"] [unique_id "aXrQqLou83lIon_aKgZpBgAAAFA"]
[Thu Jan 29 11:14:50.626629 2026] [:error] [pid 20578:tid 20626] [client 95.217.109.26:57898] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/777superslot.aspx"] [unique_id "aXrQqg6UX7yOMwQFiyfCFwAAAg0"]
[Thu Jan 29 11:14:52.725382 2026] [:error] [pid 20519:tid 20564] [client 95.217.109.26:57906] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aXrQrAo4s4fyROrkyRl6WwAAAZA"]
[Thu Jan 29 11:14:54.676390 2026] [:error] [pid 20578:tid 20621] [client 95.217.109.26:57910] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789bet%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2058.aspx"] [unique_id "aXrQrg6UX7yOMwQFiyfCGwAAAgg"]
[Thu Jan 29 11:14:56.653312 2026] [:error] [pid 19069:tid 19086] [client 95.217.109.26:59272] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789gbet.aspx"] [unique_id "aXrQsPDHsRM4BJ9a4Quk-wAAAAg"]
[Thu Jan 29 11:14:58.699774 2026] [:error] [pid 19069:tid 19090] [client 95.217.109.26:59286] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXrQsvDHsRM4BJ9a4Quk_gAAAAw"]
[Thu Jan 29 11:15:00.770833 2026] [:error] [pid 19070:tid 19108] [client 95.217.109.26:59290] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aXrQtLou83lIon_aKgZpFAAAAEI"]
[Thu Jan 29 11:15:02.667615 2026] [:error] [pid 20580:tid 20691] [client 95.217.109.26:59306] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXrQtpCZ5HHdXPmeL5-UyQAAApc"]
[Thu Jan 29 11:15:04.620452 2026] [:error] [pid 20580:tid 20673] [client 95.217.109.26:59320] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aXrQuJCZ5HHdXPmeL5-UzQAAAoU"]
[Thu Jan 29 11:15:06.610801 2026] [:error] [pid 20578:tid 20613] [client 95.217.109.26:60952] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot.aspx"] [unique_id "aXrQug6UX7yOMwQFiyfCJwAAAgA"]
[Thu Jan 29 11:15:08.706543 2026] [:error] [pid 19071:tid 19149] [client 95.217.109.26:60958] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot789.aspx"] [unique_id "aXrQvJfa8Ix5wWmtmJz8xQAAAJA"]
[Thu Jan 29 11:15:10.634807 2026] [:error] [pid 20578:tid 20614] [client 95.217.109.26:60966] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot888.aspx"] [unique_id "aXrQvg6UX7yOMwQFiyfCKgAAAgE"]
[Thu Jan 29 11:15:12.548435 2026] [:error] [pid 19069:tid 19097] [client 95.217.109.26:60978] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aXrQwPDHsRM4BJ9a4QulDgAAABM"]
[Thu Jan 29 11:15:14.676708 2026] [:error] [pid 20519:tid 20558] [client 95.217.109.26:60988] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/autobet.aspx"] [unique_id "aXrQwgo4s4fyROrkyRl6bAAAAYo"]
[Thu Jan 29 11:15:38.690077 2026] [:error] [pid 19071:tid 19152] [client 95.217.109.26:39794] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXrQ2pfa8Ix5wWmtmJz86AAAAJM"]
[Thu Jan 29 11:15:40.720434 2026] [:error] [pid 19069:tid 19083] [client 95.217.109.26:39804] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aXrQ3PDHsRM4BJ9a4QulPQAAAAU"]
[Thu Jan 29 11:15:42.761460 2026] [:error] [pid 19071:tid 19154] [client 95.217.109.26:39812] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aXrQ3pfa8Ix5wWmtmJz88AAAAJU"]
[Thu Jan 29 11:15:44.640920 2026] [:error] [pid 19069:tid 19095] [client 95.217.109.26:39818] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix168.aspx"] [unique_id "aXrQ4PDHsRM4BJ9a4QulQQAAABE"]
[Thu Jan 29 11:15:46.687820 2026] [:error] [pid 20580:tid 20678] [client 95.217.109.26:11250] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aXrQ4pCZ5HHdXPmeL5-VEwAAAoo"]
[Thu Jan 29 11:15:48.595523 2026] [:error] [pid 20576:tid 20590] [client 95.217.109.26:11264] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aXrQ5CrDZws_FlQGi9cKAQAAAcQ"]
[Thu Jan 29 11:15:50.511402 2026] [:error] [pid 19177:tid 19198] [client 95.217.109.26:11280] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/cat888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrQ5nipGz0PT8TrQv4qXwAAANM"]
[Thu Jan 29 11:15:52.631138 2026] [:error] [pid 20486:tid 20499] [client 95.217.109.26:11282] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXrQ6HgqSZb6GBx5nnNfOQAAAQo"]
[Thu Jan 29 11:15:54.737178 2026] [:error] [pid 20580:tid 20672] [client 95.217.109.26:11284] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aXrQ6pCZ5HHdXPmeL5-VHwAAAoQ"]
[Thu Jan 29 11:15:56.662050 2026] [:error] [pid 20580:tid 20688] [client 95.217.109.26:50200] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrQ7JCZ5HHdXPmeL5-VJQAAApQ"]
[Thu Jan 29 11:15:58.556212 2026] [:error] [pid 20576:tid 20587] [client 95.217.109.26:50212] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fullslot.aspx"] [unique_id "aXrQ7irDZws_FlQGi9cKBgAAAcE"]
[Thu Jan 29 11:16:00.471695 2026] [:error] [pid 19069:tid 19101] [client 95.217.109.26:50222] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fun88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXrQ8PDHsRM4BJ9a4QuleAAAABc"]
[Thu Jan 29 11:16:02.419085 2026] [:error] [pid 19070:tid 19117] [client 95.217.109.26:50236] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/fun88%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrQ8rou83lIon_aKgZpSgAAAEs"]
[Thu Jan 29 11:16:04.357716 2026] [:error] [pid 20576:tid 20606] [client 95.217.109.26:50246] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQ9CrDZws_FlQGi9cKCwAAAdQ"]
[Thu Jan 29 11:16:06.378214 2026] [:error] [pid 20519:tid 20567] [client 95.217.109.26:14768] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXrQ9go4s4fyROrkyRl6pAAAAZM"]
[Thu Jan 29 11:16:08.470662 2026] [:error] [pid 20576:tid 20588] [client 95.217.109.26:14772] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g1bet.aspx"] [unique_id "aXrQ-CrDZws_FlQGi9cKDwAAAcI"]
[Thu Jan 29 11:16:10.543618 2026] [:error] [pid 20486:tid 20489] [client 95.217.109.26:14782] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXrQ-ngqSZb6GBx5nnNfUQAAAQA"]
[Thu Jan 29 11:16:12.591927 2026] [:error] [pid 19069:tid 19085] [client 95.217.109.26:14788] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aXrQ_PDHsRM4BJ9a4QulfwAAAAc"]
[Thu Jan 29 11:16:14.702152 2026] [:error] [pid 20578:tid 20625] [client 95.217.109.26:14792] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gclub%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQ_g6UX7yOMwQFiyfCWwAAAgw"]
[Thu Jan 29 11:16:16.716501 2026] [:error] [pid 20578:tid 20620] [client 95.217.109.26:24788] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/gclub%20%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXrRAA6UX7yOMwQFiyfCXwAAAgc"]
[Thu Jan 29 11:16:18.788273 2026] [:error] [pid 20486:tid 20500] [client 95.217.109.26:24796] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/goatbet909.aspx"] [unique_id "aXrRAngqSZb6GBx5nnNfbwAAAQs"]
[Thu Jan 29 11:16:20.844918 2026] [:error] [pid 20580:tid 20681] [client 95.217.109.26:24812] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/grand%20lisboa%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrRBJCZ5HHdXPmeL5-VOQAAAo0"]
[Thu Jan 29 11:16:22.767468 2026] [:error] [pid 20578:tid 20615] [client 95.217.109.26:24824] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrRBg6UX7yOMwQFiyfCaAAAAgI"]
[Thu Jan 29 11:16:24.686856 2026] [:error] [pid 20579:tid 20645] [client 95.217.109.26:24832] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aXrRCDVXNopcNyjJc9Wp-gAAAkQ"]
[Thu Jan 29 11:16:26.684512 2026] [:error] [pid 20579:tid 20659] [client 95.217.109.26:5286] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aXrRCjVXNopcNyjJc9Wp_AAAAlI"]
[Thu Jan 29 11:16:28.714942 2026] [:error] [pid 19070:tid 19118] [client 95.217.109.26:5290] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrRDLou83lIon_aKgZpoAAAAEw"]
[Thu Jan 29 11:16:30.697665 2026] [:error] [pid 20519:tid 20570] [client 95.217.109.26:5304] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aXrRDgo4s4fyROrkyRl6twAAAZY"]
[Thu Jan 29 11:16:32.818654 2026] [:error] [pid 20519:tid 20559] [client 95.217.109.26:5308] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker888.aspx"] [unique_id "aXrREAo4s4fyROrkyRl6ugAAAYs"]
[Thu Jan 29 11:16:34.748190 2026] [:error] [pid 19177:tid 19179] [client 95.217.109.26:5310] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrREnipGz0PT8TrQv4qhAAAAMA"]
[Thu Jan 29 11:16:58.763030 2026] [:error] [pid 19070:tid 19106] [client 95.217.109.26:57518] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa7777.aspx"] [unique_id "aXrRKrou83lIon_aKgZpvgAAAEA"]
[Thu Jan 29 11:17:00.735736 2026] [:error] [pid 19177:tid 19187] [client 95.217.109.26:57524] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa789.aspx"] [unique_id "aXrRLHipGz0PT8TrQv4qkwAAAMg"]
[Thu Jan 29 11:17:02.658162 2026] [:error] [pid 19177:tid 19185] [client 95.217.109.26:57540] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufaauto.aspx"] [unique_id "aXrRLnipGz0PT8TrQv4qlgAAAMY"]
[Thu Jan 29 11:17:04.620576 2026] [:error] [pid 19070:tid 19109] [client 95.217.109.26:57542] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrRMLou83lIon_aKgZpwgAAAEM"]
[Thu Jan 29 11:17:06.718687 2026] [:error] [pid 20576:tid 20602] [client 95.217.109.26:20060] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXrRMirDZws_FlQGi9cKUgAAAdA"]
[Thu Jan 29 11:17:08.621115 2026] [:error] [pid 20576:tid 20599] [client 95.217.109.26:20072] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrRNCrDZws_FlQGi9cKUwAAAc0"]
[Thu Jan 29 11:17:10.526990 2026] [:error] [pid 20486:tid 20512] [client 95.217.109.26:20080] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXrRNngqSZb6GBx5nnNfmQAAARc"]
[Thu Jan 29 11:17:12.660444 2026] [:error] [pid 20580:tid 20687] [client 95.217.109.26:20100] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXrROJCZ5HHdXPmeL5-VVgAAApM"]
[Thu Jan 29 11:17:14.691276 2026] [:error] [pid 20580:tid 20674] [client 95.217.109.26:20114] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrROpCZ5HHdXPmeL5-VVwAAAoY"]
[Thu Jan 29 11:17:16.644696 2026] [:error] [pid 19069:tid 19079] [client 95.217.109.26:23448] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrRPPDHsRM4BJ9a4Qul0wAAAAE"]
[Thu Jan 29 11:17:18.544790 2026] [:error] [pid 20578:tid 20622] [client 95.217.109.26:23450] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A365.aspx"] [unique_id "aXrRPg6UX7yOMwQFiyfCmwAAAgk"]
[Thu Jan 29 11:17:20.524940 2026] [:error] [pid 19069:tid 19088] [client 95.217.109.26:23452] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A777.aspx"] [unique_id "aXrRQPDHsRM4BJ9a4Qul1wAAAAo"]
[Thu Jan 29 11:17:22.468424 2026] [:error] [pid 20580:tid 20681] [client 95.217.109.26:23456] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A888.aspx"] [unique_id "aXrRQpCZ5HHdXPmeL5-VYgAAAo0"]
[Thu Jan 29 11:17:24.464944 2026] [:error] [pid 20580:tid 20671] [client 95.217.109.26:23466] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXrRRJCZ5HHdXPmeL5-VZQAAAoM"]
[Thu Jan 29 11:17:26.395806 2026] [:error] [pid 20519:tid 20550] [client 95.217.109.26:53596] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%81%E0%B8%A1%E0%B9%88.aspx"] [unique_id "aXrRRgo4s4fyROrkyRl60wAAAYI"]
[Thu Jan 29 11:17:28.339329 2026] [:error] [pid 20578:tid 20626] [client 95.217.109.26:53606] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXrRSA6UX7yOMwQFiyfCoQAAAg0"]
[Thu Jan 29 11:17:30.324504 2026] [:error] [pid 19177:tid 19203] [client 95.217.109.26:53612] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXrRSnipGz0PT8TrQv4qngAAANg"]
[Thu Jan 29 11:17:32.281071 2026] [:error] [pid 20576:tid 20587] [client 95.217.109.26:53616] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aXrRTCrDZws_FlQGi9cKWgAAAcE"]
[Thu Jan 29 11:17:34.170646 2026] [:error] [pid 19069:tid 19097] [client 95.217.109.26:53632] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aXrRTvDHsRM4BJ9a4Qul4gAAABM"]
[Thu Jan 29 11:17:36.268385 2026] [:error] [pid 19069:tid 19100] [client 95.217.109.26:25442] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXrRUPDHsRM4BJ9a4Qul5wAAABY"]
[Thu Jan 29 11:17:38.325310 2026] [:error] [pid 20519:tid 20560] [client 95.217.109.26:25454] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXrRUgo4s4fyROrkyRl61gAAAYw"]
[Thu Jan 29 11:17:40.381849 2026] [:error] [pid 19071:tid 19152] [client 95.217.109.26:25458] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrRVJfa8Ix5wWmtmJz9SwAAAJM"]
[Thu Jan 29 11:17:42.427414 2026] [:error] [pid 20579:tid 20659] [client 95.217.109.26:25462] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet1212%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrRVjVXNopcNyjJc9WqSAAAAlI"]
[Thu Jan 29 11:17:44.320692 2026] [:error] [pid 19070:tid 19127] [client 95.217.109.26:25476] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www.lotto.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXrRWLou83lIon_aKgZp2wAAAFU"]
[Thu Jan 29 11:17:46.263674 2026] [:error] [pid 20519:tid 20572] [client 95.217.109.26:35418] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www.ufabet.com%20%E0%B8%A5%E0%B8%B4%E0%B9%89%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A24.aspx"] [unique_id "aXrRWgo4s4fyROrkyRl63AAAAZg"]
[Thu Jan 29 11:17:48.130374 2026] [:error] [pid 19069:tid 19102] [client 95.217.109.26:35434] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrRXPDHsRM4BJ9a4Qul8gAAABg"]
[Thu Jan 29 11:17:50.119617 2026] [:error] [pid 20486:tid 20492] [client 95.217.109.26:35450] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aXrRXngqSZb6GBx5nnNf2gAAAQM"]
[Thu Jan 29 11:17:52.214372 2026] [:error] [pid 20578:tid 20630] [client 95.217.109.26:35456] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrRYA6UX7yOMwQFiyfCwwAAAhE"]
[Thu Jan 29 11:17:54.277403 2026] [:error] [pid 19069:tid 19086] [client 95.217.109.26:35462] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xoslotz.aspx"] [unique_id "aXrRYvDHsRM4BJ9a4Qul9gAAAAg"]
[Thu Jan 29 12:47:45.096320 2026] [:error] [pid 20486:tid 20508] [client 217.182.195.225:33202] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aXrmcXgqSZb6GBx5nnODSAAAARM"]
[Thu Jan 29 12:47:48.620278 2026] [:error] [pid 19069:tid 19098] [client 217.182.195.225:52534] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXrmdPDHsRM4BJ9a4Qu7twAAABQ"]
[Thu Jan 29 12:47:52.540186 2026] [:error] [pid 20579:tid 20642] [client 217.182.195.225:52550] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXrmeDVXNopcNyjJc9W9swAAAkE"]
[Thu Jan 29 13:47:02.722975 2026] [:error] [pid 19177:tid 19198] [client 185.209.196.217:51004] [client 185.209.196.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.209.196.217, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXr0VnipGz0PT8TrQv5HDQAAANM"], referer: https://www.google.com/
[Thu Jan 29 13:47:02.727070 2026] [:error] [pid 19177:tid 19198] [client 185.209.196.217:51004] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Thu Jan 29 13:47:14.340820 2026] [:error] [pid 20486:tid 20502] [client 185.209.196.217:54869] [client 185.209.196.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.209.196.217, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXr0YngqSZb6GBx5nnOXUQAAAQ0"], referer: https://www.bing.com/
[Thu Jan 29 13:47:14.345849 2026] [:error] [pid 20486:tid 20502] [client 185.209.196.217:54869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Thu Jan 29 14:43:44.749630 2026] [:error] [pid 20579:tid 20641] [client 147.135.252.179:47228] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXsBoDVXNopcNyjJc9XWoAAAAkA"]
[Thu Jan 29 14:43:46.796080 2026] [:error] [pid 19071:tid 19136] [client 147.135.252.179:35830] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aXsBopfa8Ix5wWmtmJw5OQAAAIM"]
[Thu Jan 29 14:43:48.835759 2026] [:error] [pid 20576:tid 20607] [client 147.135.252.179:60068] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXsBpCrDZws_FlQGi9cyXAAAAdU"]
[Thu Jan 29 14:43:50.941771 2026] [:error] [pid 20576:tid 20596] [client 147.135.252.179:60084] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXsBpirDZws_FlQGi9cyXgAAAco"]
[Thu Jan 29 14:43:53.053939 2026] [:error] [pid 19071:tid 19137] [client 147.135.252.179:60100] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXsBqZfa8Ix5wWmtmJw5OwAAAIQ"]
[Thu Jan 29 14:43:55.133737 2026] [:error] [pid 20578:tid 20625] [client 147.135.252.179:60106] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXsBqw6UX7yOMwQFiyfuEQAAAgw"]
[Thu Jan 29 14:43:57.214798 2026] [:error] [pid 20519:tid 20565] [client 147.135.252.179:60112] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXsBrQo4s4fyROrkyRmj5gAAAZE"]
[Thu Jan 29 14:43:59.310676 2026] [:error] [pid 20578:tid 20629] [client 147.135.252.179:50180] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXsBrw6UX7yOMwQFiyfuFAAAAhA"]
[Thu Jan 29 14:44:01.479424 2026] [:error] [pid 20486:tid 20513] [client 147.135.252.179:50182] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXsBsXgqSZb6GBx5nnOmLAAAARg"]
[Thu Jan 29 14:44:03.587178 2026] [:error] [pid 20519:tid 20555] [client 147.135.252.179:50184] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXsBswo4s4fyROrkyRmj7AAAAYc"]
[Thu Jan 29 14:44:05.657256 2026] [:error] [pid 19071:tid 19143] [client 147.135.252.179:50196] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXsBtZfa8Ix5wWmtmJw5TgAAAIo"]
[Thu Jan 29 14:44:07.799288 2026] [:error] [pid 20579:tid 20652] [client 147.135.252.179:50208] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXsBtzVXNopcNyjJc9XWtQAAAks"]
[Thu Jan 29 14:44:11.361811 2026] [:error] [pid 20580:tid 20674] [client 147.135.252.179:54138] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXsBu5CZ5HHdXPmeL5_L6wAAAoY"]
[Thu Jan 29 14:44:15.366475 2026] [:error] [pid 20519:tid 20558] [client 147.135.252.179:54152] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXsBvwo4s4fyROrkyRmkAwAAAYo"]
[Thu Jan 29 15:56:53.091392 2026] [:error] [pid 20576:tid 20606] [client 183.82.7.39:50123] [client 183.82.7.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.7.39, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXsSxSrDZws_FlQGi9c_fQAAAdQ"]
[Thu Jan 29 15:56:53.095453 2026] [:error] [pid 20576:tid 20606] [client 183.82.7.39:50123] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 29 17:46:16.174392 2026] [:error] [pid 20579:tid 20641] [client 136.109.173.174:61485] [client 136.109.173.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.173.174, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXssaDVXNopcNyjJc9X3UAAAAkA"]
[Thu Jan 29 17:46:16.178416 2026] [:error] [pid 20579:tid 20641] [client 136.109.173.174:61485] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 29 17:46:18.466498 2026] [:error] [pid 20579:tid 20668] [client 136.109.173.174:61485] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXssajVXNopcNyjJc9X3WwAAAlg"]
[Thu Jan 29 17:46:18.851773 2026] [:error] [pid 19070:tid 19110] [client 136.109.173.174:54956] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXssarou83lIon_aKgbCVwAAAEQ"]
[Thu Jan 29 17:46:19.222765 2026] [:error] [pid 19070:tid 19112] [client 136.109.173.174:64316] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXssa7ou83lIon_aKgbCWQAAAEY"]
[Thu Jan 29 17:46:19.622482 2026] [:error] [pid 20576:tid 20586] [client 136.109.173.174:57915] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXssayrDZws_FlQGi9dQrgAAAcA"]
[Thu Jan 29 17:46:20.012339 2026] [:error] [pid 20519:tid 20553] [client 136.109.173.174:56968] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXssbAo4s4fyROrkyRnC8QAAAYU"]
[Thu Jan 29 17:46:20.398862 2026] [:error] [pid 20578:tid 20635] [client 136.109.173.174:49820] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXssbA6UX7yOMwQFiycQ0QAAAhY"]
[Thu Jan 29 17:46:20.832756 2026] [:error] [pid 19070:tid 19119] [client 136.109.173.174:61612] [client 136.109.173.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXssbLou83lIon_aKgbCWwAAAE0"]
[Thu Jan 29 19:57:51.557112 2026] [:error] [pid 20579:tid 20652] [client 49.51.38.193:51120] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXtLPzVXNopcNyjJc9UTnQAAAks"]
[Thu Jan 29 20:21:27.989487 2026] [:error] [pid 19177:tid 19183] [client 144.172.112.114:56202] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aXtQx3ipGz0PT8TrQv6NDAAAAMQ"]
[Thu Jan 29 22:28:32.246223 2026] [:error] [pid 19069:tid 19085] [client 47.90.227.150:44326] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXtukPDHsRM4BJ9a4QuBtwAAAAc"]
[Thu Jan 29 22:28:32.879791 2026] [:error] [pid 20576:tid 20610] [client 47.90.227.150:60638] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXtukCrDZws_FlQGi9eHHQAAAdg"]
[Fri Jan 30 00:25:31.057663 2026] [:error] [pid 39501:tid 39518] [client 144.172.112.114:40558] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aXuJ-y_BLgXFo3daaZimiQAAAAk"]
[Fri Jan 30 03:02:22.424466 2026] [:error] [pid 39501:tid 39514] [client 43.166.238.12:37284] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXuuvi_BLgXFo3daaZjfJQAAAAU"]
[Fri Jan 30 04:27:38.746094 2026] [:error] [pid 47021:tid 47026] [client 217.154.172.107:57426] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 30 04:27:43.390928 2026] [:error] [pid 46914:tid 46996] [client 217.154.172.107:54362] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 30 04:27:47.376735 2026] [:error] [pid 46913:tid 46952] [client 217.154.172.107:55513] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Jan 30 04:27:52.376307 2026] [:error] [pid 46913:tid 46959] [client 217.154.172.107:49766] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Jan 30 05:07:50.137861 2026] [:error] [pid 24681:tid 24695] [client 5.182.17.127:62799] [client 5.182.17.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aXvMJoE368IXQpahn0KthwAAAQw"], referer: binance.com
[Fri Jan 30 05:12:59.727647 2026] [:error] [pid 24681:tid 24690] [client 135.181.213.219:29634] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aXvNW4E368IXQpahn0Ku0wAAAQc"]
[Fri Jan 30 05:13:01.696641 2026] [:error] [pid 46913:tid 46965] [client 135.181.213.219:29642] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aXvNXTMWmKL8hOfC3uQNggAAAE4"]
[Fri Jan 30 05:13:03.676571 2026] [:error] [pid 46913:tid 46970] [client 135.181.213.219:29646] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aXvNXzMWmKL8hOfC3uQNhwAAAFM"]
[Fri Jan 30 05:13:05.642771 2026] [:error] [pid 46914:tid 46990] [client 135.181.213.219:29656] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aXvNYVgSfJ4kZxNKlb-tIgAAAIw"]
[Fri Jan 30 05:13:07.623764 2026] [:error] [pid 46913:tid 46952] [client 135.181.213.219:3984] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXvNYzMWmKL8hOfC3uQNkwAAAEE"]
[Fri Jan 30 05:13:09.484079 2026] [:error] [pid 24711:tid 24733] [client 135.181.213.219:3992] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXvNZa5Gwh4var6T23I7ywAAAVM"]
[Fri Jan 30 05:13:11.460757 2026] [:error] [pid 46914:tid 46996] [client 135.181.213.219:4000] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXvNZ1gSfJ4kZxNKlb-tLAAAAJI"]
[Fri Jan 30 05:13:13.288171 2026] [:error] [pid 46913:tid 46967] [client 135.181.213.219:4010] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aXvNaTMWmKL8hOfC3uQNmwAAAFA"]
[Fri Jan 30 05:13:15.259082 2026] [:error] [pid 46913:tid 46971] [client 135.181.213.219:4014] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aXvNazMWmKL8hOfC3uQNoAAAAFQ"]
[Fri Jan 30 05:13:17.224610 2026] [:error] [pid 47021:tid 47045] [client 135.181.213.219:4030] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aXvNbdap1k13UdZUNSQxMAAAANY"]
[Fri Jan 30 05:13:19.188945 2026] [:error] [pid 47021:tid 47025] [client 135.181.213.219:4378] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aXvNb9ap1k13UdZUNSQxNQAAAMI"]
[Fri Jan 30 05:13:21.156939 2026] [:error] [pid 46913:tid 46959] [client 135.181.213.219:4382] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aXvNcTMWmKL8hOfC3uQNqwAAAEg"]
[Fri Jan 30 05:13:23.122562 2026] [:error] [pid 24681:tid 24706] [client 135.181.213.219:4396] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aXvNc4E368IXQpahn0KvAwAAARc"]
[Fri Jan 30 05:13:25.095079 2026] [:error] [pid 24681:tid 24687] [client 135.181.213.219:4406] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aXvNdYE368IXQpahn0KvCAAAAQQ"]
[Fri Jan 30 05:13:27.073868 2026] [:error] [pid 24712:tid 24745] [client 135.181.213.219:4414] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aXvNd4RLQrFiQF3h9-tNPQAAAYQ"]
[Fri Jan 30 05:13:29.035796 2026] [:error] [pid 24711:tid 24731] [client 135.181.213.219:5158] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXvNea5Gwh4var6T23I74wAAAVE"]
[Fri Jan 30 05:13:31.006308 2026] [:error] [pid 24712:tid 24765] [client 135.181.213.219:5164] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aXvNe4RLQrFiQF3h9-tNRAAAAZc"]
[Fri Jan 30 05:13:32.833788 2026] [:error] [pid 46912:tid 46930] [client 135.181.213.219:5174] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXvNfD6yiVW7A9NwFFn9qQAAAAY"]
[Fri Jan 30 05:13:34.803882 2026] [:error] [pid 24711:tid 24722] [client 135.181.213.219:5178] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aXvNfq5Gwh4var6T23I77QAAAUg"]
[Fri Jan 30 05:13:36.626365 2026] [:error] [pid 46914:tid 46998] [client 135.181.213.219:5182] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXvNgFgSfJ4kZxNKlb-tSQAAAJQ"]
[Fri Jan 30 05:13:38.594227 2026] [:error] [pid 46914:tid 46981] [client 135.181.213.219:16616] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXvNglgSfJ4kZxNKlb-tTgAAAIM"]
[Fri Jan 30 05:13:40.568032 2026] [:error] [pid 24712:tid 24746] [client 135.181.213.219:16632] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXvNhIRLQrFiQF3h9-tNSwAAAYU"]
[Fri Jan 30 05:13:42.532981 2026] [:error] [pid 46913:tid 46951] [client 135.181.213.219:16640] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXvNhjMWmKL8hOfC3uQN1wAAAEA"]
[Fri Jan 30 05:13:44.516769 2026] [:error] [pid 46914:tid 46994] [client 135.181.213.219:16654] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXvNiFgSfJ4kZxNKlb-tUwAAAJA"]
[Fri Jan 30 05:13:46.347724 2026] [:error] [pid 46913:tid 46954] [client 135.181.213.219:16668] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXvNijMWmKL8hOfC3uQN3wAAAEM"]
[Fri Jan 30 05:13:48.320833 2026] [:error] [pid 24681:tid 24683] [client 135.181.213.219:39948] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXvNjIE368IXQpahn0KvGQAAAQA"]
[Fri Jan 30 05:13:50.138900 2026] [:error] [pid 47021:tid 47047] [client 135.181.213.219:39956] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aXvNjtap1k13UdZUNSQxRQAAANg"]
[Fri Jan 30 05:13:52.120087 2026] [:error] [pid 46913:tid 46974] [client 135.181.213.219:39970] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aXvNkDMWmKL8hOfC3uQN8QAAAFc"]
[Fri Jan 30 05:13:54.088602 2026] [:error] [pid 46913:tid 46971] [client 135.181.213.219:39972] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aXvNkjMWmKL8hOfC3uQN9wAAAFQ"]
[Fri Jan 30 05:13:56.075623 2026] [:error] [pid 46914:tid 46995] [client 135.181.213.219:39986] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aXvNlFgSfJ4kZxNKlb-tWQAAAJE"]
[Fri Jan 30 05:14:19.611716 2026] [:error] [pid 24712:tid 24748] [client 135.181.213.219:12952] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXvNq4RLQrFiQF3h9-tNbwAAAYc"]
[Fri Jan 30 05:14:21.578731 2026] [:error] [pid 24681:tid 24698] [client 135.181.213.219:12958] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXvNrYE368IXQpahn0KvPQAAAQ8"]
[Fri Jan 30 05:14:23.402263 2026] [:error] [pid 24712:tid 24760] [client 135.181.213.219:12974] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aXvNr4RLQrFiQF3h9-tNdAAAAZI"]
[Fri Jan 30 05:14:25.364773 2026] [:error] [pid 47021:tid 47047] [client 135.181.213.219:12990] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aXvNsdap1k13UdZUNSQxYwAAANg"]
[Fri Jan 30 05:14:27.335694 2026] [:error] [pid 24681:tid 24706] [client 135.181.213.219:3738] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aXvNs4E368IXQpahn0KvSwAAARc"]
[Fri Jan 30 05:14:29.292881 2026] [:error] [pid 46913:tid 46955] [client 135.181.213.219:3750] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aXvNtTMWmKL8hOfC3uQOSQAAAEQ"]
[Fri Jan 30 05:14:31.106696 2026] [:error] [pid 24681:tid 24685] [client 135.181.213.219:3766] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXvNt4E368IXQpahn0KvTwAAAQI"]
[Fri Jan 30 05:14:33.071388 2026] [:error] [pid 24712:tid 24752] [client 135.181.213.219:3770] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aXvNuYRLQrFiQF3h9-tNfwAAAYs"]
[Fri Jan 30 05:14:34.746922 2026] [:error] [pid 47021:tid 47043] [client 135.181.213.219:3772] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXvNutap1k13UdZUNSQxZwAAANQ"]
[Fri Jan 30 05:14:38.524785 2026] [:error] [pid 24712:tid 24756] [client 135.181.213.219:14964] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXvNvoRLQrFiQF3h9-tNhwAAAY8"]
[Fri Jan 30 06:33:39.580119 2026] [:error] [pid 38980:tid 38992] [client 95.91.110.210:3006] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXvgQ7YByxUZEaKXdHrq2QAAAgU"]
[Fri Jan 30 06:33:41.697897 2026] [:error] [pid 46912:tid 46925] [client 95.91.110.210:64306] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aXvgRT6yiVW7A9NwFFkQVAAAAAE"]
[Fri Jan 30 06:33:43.863972 2026] [:error] [pid 24711:tid 24717] [client 95.91.110.210:31708] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aXvgR65Gwh4var6T23JQtQAAAUM"]
[Fri Jan 30 06:33:45.995843 2026] [:error] [pid 24712:tid 24750] [client 95.91.110.210:31724] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aXvgSYRLQrFiQF3h9-thAAAAAYk"]
[Fri Jan 30 06:33:48.111228 2026] [:error] [pid 47021:tid 47029] [client 95.91.110.210:31738] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aXvgTNap1k13UdZUNSRPCQAAAMY"]
[Fri Jan 30 06:33:50.238300 2026] [:error] [pid 24712:tid 24763] [client 95.91.110.210:31740] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXvgToRLQrFiQF3h9-thBQAAAZU"]
[Fri Jan 30 06:33:52.404594 2026] [:error] [pid 46914:tid 47002] [client 95.91.110.210:31754] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXvgUFgSfJ4kZxNKlb-_2AAAAJg"]
[Fri Jan 30 06:33:54.517162 2026] [:error] [pid 24681:tid 24690] [client 95.91.110.210:5676] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aXvgUoE368IXQpahn0LFqAAAAQc"]
[Fri Jan 30 06:33:56.625721 2026] [:error] [pid 46913:tid 46965] [client 95.91.110.210:5690] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aXvgVDMWmKL8hOfC3uQhXwAAAE4"]
[Fri Jan 30 06:33:58.744571 2026] [:error] [pid 24681:tid 24685] [client 95.91.110.210:5696] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXvgVoE368IXQpahn0LFrgAAAQI"]
[Fri Jan 30 06:34:00.850169 2026] [:error] [pid 47021:tid 47025] [client 95.91.110.210:5710] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aXvgWNap1k13UdZUNSRPJAAAAMI"]
[Fri Jan 30 06:34:02.955776 2026] [:error] [pid 46914:tid 46993] [client 95.91.110.210:5714] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aXvgWlgSfJ4kZxNKlb-_4wAAAI8"]
[Fri Jan 30 06:34:04.964985 2026] [:error] [pid 24681:tid 24693] [client 95.91.110.210:24738] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aXvgXIE368IXQpahn0LFugAAAQo"]
[Fri Jan 30 06:34:07.093853 2026] [:error] [pid 47021:tid 47042] [client 95.91.110.210:24742] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aXvgX9ap1k13UdZUNSRPMgAAANM"]
[Fri Jan 30 06:34:09.197039 2026] [:error] [pid 24711:tid 24722] [client 95.91.110.210:24750] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXvgYa5Gwh4var6T23JQ0QAAAUg"]
[Fri Jan 30 06:34:11.344727 2026] [:error] [pid 24711:tid 24721] [client 95.91.110.210:24760] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXvgY65Gwh4var6T23JQ0wAAAUc"]
[Fri Jan 30 06:34:13.452430 2026] [:error] [pid 38686:tid 38701] [client 95.91.110.210:51058] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aXvgZQoE8BAjgw1_sAWf5QAAAcs"]
[Fri Jan 30 06:34:15.571787 2026] [:error] [pid 24711:tid 24720] [client 95.91.110.210:51070] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXvgZ65Gwh4var6T23JQ2wAAAUY"]
[Fri Jan 30 06:34:17.557317 2026] [:error] [pid 38686:tid 38699] [client 95.91.110.210:51074] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aXvgaQoE8BAjgw1_sAWf7wAAAck"]
[Fri Jan 30 06:34:20.879246 2026] [:error] [pid 38686:tid 38697] [client 95.91.110.210:51082] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aXvgbAoE8BAjgw1_sAWf8QAAAcc"]
[Fri Jan 30 06:34:28.390838 2026] [:error] [pid 46912:tid 46942] [client 95.91.110.210:51094] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aXvgdD6yiVW7A9NwFFkQowAAABI"]
[Fri Jan 30 06:34:30.452840 2026] [:error] [pid 47021:tid 47038] [client 95.91.110.210:35776] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXvgdtap1k13UdZUNSRPUQAAAM8"]
[Fri Jan 30 06:34:32.472650 2026] [:error] [pid 24681:tid 24685] [client 95.91.110.210:35780] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aXvgeIE368IXQpahn0LF7gAAAQI"]
[Fri Jan 30 06:34:34.589520 2026] [:error] [pid 24681:tid 24705] [client 95.91.110.210:19780] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXvgeoE368IXQpahn0LF8gAAARY"]
[Fri Jan 30 06:34:36.700652 2026] [:error] [pid 38980:tid 39007] [client 95.91.110.210:19784] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXvgfLYByxUZEaKXdHrrJAAAAhQ"]
[Fri Jan 30 06:34:58.964910 2026] [:error] [pid 24681:tid 24704] [client 95.91.110.210:31658] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "aXvgkoE368IXQpahn0LGIQAAARU"]
[Fri Jan 30 06:35:01.100645 2026] [:error] [pid 24712:tid 24745] [client 95.91.110.210:31664] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168%20slot.aspx"] [unique_id "aXvglYRLQrFiQF3h9-thaAAAAYQ"]
[Fri Jan 30 06:35:03.084282 2026] [:error] [pid 46912:tid 46929] [client 95.91.110.210:31668] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/24th%20slot.aspx"] [unique_id "aXvglz6yiVW7A9NwFFkQ0QAAAAU"]
[Fri Jan 30 06:35:05.081753 2026] [:error] [pid 46913:tid 46960] [client 95.91.110.210:4020] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aXvgmTMWmKL8hOfC3uQhngAAAEk"]
[Fri Jan 30 06:35:07.189560 2026] [:error] [pid 24681:tid 24699] [client 95.91.110.210:4034] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aXvgm4E368IXQpahn0LGKgAAARA"]
[Fri Jan 30 06:35:09.199567 2026] [:error] [pid 24711:tid 24735] [client 95.91.110.210:4048] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXvgna5Gwh4var6T23JRDwAAAVU"]
[Fri Jan 30 06:35:11.210899 2026] [:error] [pid 24712:tid 24747] [client 95.91.110.210:4054] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aXvgn4RLQrFiQF3h9-thcwAAAYY"]
[Fri Jan 30 06:35:13.185912 2026] [:error] [pid 46914:tid 46998] [client 95.91.110.210:4056] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aXvgoVgSfJ4kZxNKlb_APAAAAJQ"]
[Fri Jan 30 06:35:15.292839 2026] [:error] [pid 46913:tid 46965] [client 95.91.110.210:64872] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXvgozMWmKL8hOfC3uQhowAAAE4"]
[Fri Jan 30 06:35:17.442203 2026] [:error] [pid 38980:tid 38987] [client 95.91.110.210:64884] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXvgpbYByxUZEaKXdHrrTAAAAgA"]
[Fri Jan 30 06:35:19.519892 2026] [:error] [pid 24681:tid 24696] [client 95.91.110.210:64896] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aXvgp4E368IXQpahn0LGMAAAAQ0"]
[Fri Jan 30 06:35:21.638071 2026] [:error] [pid 38980:tid 39008] [client 95.91.110.210:64906] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aXvgqbYByxUZEaKXdHrrVgAAAhU"]
[Fri Jan 30 06:35:23.755944 2026] [:error] [pid 47021:tid 47033] [client 95.91.110.210:61040] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXvgq9ap1k13UdZUNSRPrQAAAMo"]
[Fri Jan 30 06:35:26.881151 2026] [:error] [pid 24712:tid 24763] [client 95.91.110.210:61056] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aXvgroRLQrFiQF3h9-thiQAAAZU"]
[Fri Jan 30 06:35:28.988246 2026] [:error] [pid 47021:tid 47034] [client 95.91.110.210:61068] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aXvgsNap1k13UdZUNSRPugAAAMs"]
[Fri Jan 30 06:35:33.704681 2026] [:error] [pid 38686:tid 38713] [client 95.91.110.210:61074] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aXvgtQoE8BAjgw1_sAWgeAAAAdc"]
[Fri Jan 30 06:35:35.970147 2026] [:error] [pid 46914:tid 46994] [client 95.91.110.210:11944] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aXvgt1gSfJ4kZxNKlb_AXwAAAJA"]
[Fri Jan 30 06:35:38.178388 2026] [:error] [pid 38686:tid 38709] [client 95.91.110.210:11952] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aXvgugoE8BAjgw1_sAWghgAAAdM"]
[Fri Jan 30 06:35:41.589732 2026] [:error] [pid 46912:tid 46939] [client 95.91.110.210:11968] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aXvgvT6yiVW7A9NwFFkRBAAAAA8"]
[Fri Jan 30 06:35:44.719390 2026] [:error] [pid 24711:tid 24731] [client 95.91.110.210:53250] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXvgwK5Gwh4var6T23JRMwAAAVE"]
[Fri Jan 30 06:35:47.604863 2026] [:error] [pid 38686:tid 38702] [client 95.91.110.210:53264] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aXvgwwoE8BAjgw1_sAWglwAAAcw"]
[Fri Jan 30 06:35:49.718854 2026] [:error] [pid 46912:tid 46928] [client 95.91.110.210:53266] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aXvgxT6yiVW7A9NwFFkRCwAAAAQ"]
[Fri Jan 30 06:35:51.833047 2026] [:error] [pid 47021:tid 47041] [client 95.91.110.210:53270] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aXvgx9ap1k13UdZUNSRP1wAAANI"]
[Fri Jan 30 06:35:53.962782 2026] [:error] [pid 38686:tid 38697] [client 95.91.110.210:23982] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aXvgyQoE8BAjgw1_sAWgpgAAAcc"]
[Fri Jan 30 06:35:56.059539 2026] [:error] [pid 24711:tid 24737] [client 95.91.110.210:23992] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aXvgzK5Gwh4var6T23JRPwAAAVc"]
[Fri Jan 30 06:36:18.018727 2026] [:error] [pid 24711:tid 24717] [client 95.91.110.210:24000] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aXvg4q5Gwh4var6T23JRegAAAUM"]
[Fri Jan 30 06:36:20.140837 2026] [:error] [pid 47021:tid 47036] [client 95.91.110.210:22610] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aXvg5Nap1k13UdZUNSRP9AAAAM0"]
[Fri Jan 30 06:36:22.261090 2026] [:error] [pid 47021:tid 47038] [client 95.91.110.210:22620] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aXvg5tap1k13UdZUNSRP_QAAAM8"]
[Fri Jan 30 06:36:24.381423 2026] [:error] [pid 47021:tid 47029] [client 95.91.110.210:31182] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aXvg6Nap1k13UdZUNSRQAgAAAMY"]
[Fri Jan 30 06:36:26.493582 2026] [:error] [pid 24712:tid 24764] [client 95.91.110.210:31190] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aXvg6oRLQrFiQF3h9-thxgAAAZY"]
[Fri Jan 30 06:36:28.609111 2026] [:error] [pid 46914:tid 46984] [client 95.91.110.210:31196] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aXvg7FgSfJ4kZxNKlb_AjAAAAIY"]
[Fri Jan 30 06:36:30.643749 2026] [:error] [pid 24711:tid 24738] [client 95.91.110.210:31198] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXvg7q5Gwh4var6T23JRhgAAAVg"]
[Fri Jan 30 06:36:32.753865 2026] [:error] [pid 46912:tid 46926] [client 95.91.110.210:31208] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aXvg8D6yiVW7A9NwFFkRLwAAAAI"]
[Fri Jan 30 06:36:34.888706 2026] [:error] [pid 46912:tid 46941] [client 95.91.110.210:36930] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXvg8j6yiVW7A9NwFFkRNgAAABE"]
[Fri Jan 30 06:36:36.990284 2026] [:error] [pid 46913:tid 46974] [client 95.91.110.210:36942] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aXvg9DMWmKL8hOfC3uQh-wAAAFc"]
[Fri Jan 30 06:36:38.977685 2026] [:error] [pid 24681:tid 24695] [client 95.91.110.210:36946] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aXvg9oE368IXQpahn0LGdwAAAQw"]
[Fri Jan 30 06:36:41.099197 2026] [:error] [pid 24681:tid 24692] [client 95.91.110.210:36954] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXvg-YE368IXQpahn0LGfgAAAQk"]
[Fri Jan 30 06:36:43.209058 2026] [:error] [pid 38980:tid 39002] [client 95.91.110.210:36962] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXvg-7YByxUZEaKXdHrrsQAAAg8"]
[Fri Jan 30 06:36:45.193652 2026] [:error] [pid 24712:tid 24752] [client 95.91.110.210:1740] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXvg_YRLQrFiQF3h9-th3gAAAYs"]
[Fri Jan 30 06:36:47.322441 2026] [:error] [pid 24711:tid 24719] [client 95.91.110.210:1752] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXvg_65Gwh4var6T23JRowAAAUU"]
[Fri Jan 30 06:36:49.574514 2026] [:error] [pid 38686:tid 38706] [client 95.91.110.210:1764] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXvhAQoE8BAjgw1_sAWg8QAAAdA"]
[Fri Jan 30 06:36:51.938836 2026] [:error] [pid 46913:tid 46965] [client 95.91.110.210:1772] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXvhAzMWmKL8hOfC3uQiAgAAAE4"]
[Fri Jan 30 06:36:55.346041 2026] [:error] [pid 46912:tid 46925] [client 95.91.110.210:55410] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXvhBz6yiVW7A9NwFFkRRwAAAAE"]
[Fri Jan 30 06:36:58.597347 2026] [:error] [pid 46914:tid 46986] [client 95.91.110.210:55414] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXvhClgSfJ4kZxNKlb_ArgAAAIg"]
[Fri Jan 30 06:37:01.645425 2026] [:error] [pid 24712:tid 24763] [client 95.91.110.210:55418] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXvhDYRLQrFiQF3h9-th7QAAAZU"]
[Fri Jan 30 06:37:04.988080 2026] [:error] [pid 38980:tid 38987] [client 95.91.110.210:19536] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXvhELYByxUZEaKXdHrrxgAAAgA"]
[Fri Jan 30 06:37:07.368756 2026] [:error] [pid 46913:tid 46961] [client 95.91.110.210:19542] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aXvhEzMWmKL8hOfC3uQiDAAAAEo"]
[Fri Jan 30 06:37:10.653005 2026] [:error] [pid 38686:tid 38709] [client 95.91.110.210:19544] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXvhFgoE8BAjgw1_sAWhBwAAAdM"]
[Fri Jan 30 06:37:56.502229 2026] [:error] [pid 46914:tid 46999] [client 95.91.110.210:21316] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aXvhRFgSfJ4kZxNKlb_A5QAAAJU"]
[Fri Jan 30 06:38:06.753755 2026] [:error] [pid 24681:tid 24683] [client 95.91.110.210:14204] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXvhToE368IXQpahn0LHMgAAAQA"]
[Fri Jan 30 06:38:08.956738 2026] [:error] [pid 24681:tid 24691] [client 95.91.110.210:18428] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXvhUIE368IXQpahn0LHNgAAAQg"]
[Fri Jan 30 06:38:13.257902 2026] [:error] [pid 38686:tid 38706] [client 95.91.110.210:18444] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aXvhVQoE8BAjgw1_sAWhZwAAAdA"]
[Fri Jan 30 06:38:16.476663 2026] [:error] [pid 24681:tid 24690] [client 95.91.110.210:32522] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aXvhWIE368IXQpahn0LHOAAAAQc"]
[Fri Jan 30 06:38:21.141697 2026] [:error] [pid 46914:tid 46997] [client 95.91.110.210:32526] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aXvhXVgSfJ4kZxNKlb_BCwAAAJM"]
[Fri Jan 30 06:38:28.532402 2026] [:error] [pid 47021:tid 47024] [client 95.91.110.210:52046] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aXvhZNap1k13UdZUNSRQzgAAAME"]
[Fri Jan 30 06:38:35.177575 2026] [:error] [pid 24712:tid 24742] [client 95.91.110.210:52060] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aXvha4RLQrFiQF3h9-tiOgAAAYE"]
[Fri Jan 30 06:38:38.598854 2026] [:error] [pid 24681:tid 24696] [client 95.91.110.210:42768] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXvhboE368IXQpahn0LHWAAAAQ0"]
[Fri Jan 30 06:38:50.345000 2026] [:error] [pid 46912:tid 46940] [client 95.91.110.210:34392] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aXvhej6yiVW7A9NwFFkSeAAAABA"]
[Fri Jan 30 06:38:52.733638 2026] [:error] [pid 46914:tid 47000] [client 95.91.110.210:34394] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXvhfFgSfJ4kZxNKlb_BJgAAAJY"]
[Fri Jan 30 06:39:15.897987 2026] [:error] [pid 38686:tid 38706] [client 95.91.110.210:44684] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aXvhkwoE8BAjgw1_sAWhyQAAAdA"]
[Fri Jan 30 06:39:17.996166 2026] [:error] [pid 38686:tid 38694] [client 95.91.110.210:7168] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aXvhlQoE8BAjgw1_sAWhzQAAAcQ"]
[Fri Jan 30 08:26:27.524801 2026] [:error] [pid 46912:tid 46930] [client 147.135.213.9:49374] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXv6sz6yiVW7A9NwFFkucQAAAAY"]
[Fri Jan 30 08:26:29.642943 2026] [:error] [pid 38980:tid 39000] [client 147.135.213.9:47316] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXv6tbYByxUZEaKXdHoDzQAAAg0"]
[Fri Jan 30 08:26:31.655195 2026] [:error] [pid 47021:tid 47038] [client 147.135.213.9:47328] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXv6t9ap1k13UdZUNSR9iwAAAM8"]
[Fri Jan 30 08:26:33.760947 2026] [:error] [pid 38980:tid 39007] [client 147.135.213.9:47332] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXv6ubYByxUZEaKXdHoD0gAAAhQ"]
[Fri Jan 30 08:26:35.846232 2026] [:error] [pid 46914:tid 46987] [client 147.135.213.9:47336] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXv6u1gSfJ4kZxNKlb_cmAAAAIk"]
[Fri Jan 30 08:26:37.891196 2026] [:error] [pid 24681:tid 24694] [client 147.135.213.9:37140] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXv6vYE368IXQpahn0Ll7gAAAQs"]
[Fri Jan 30 08:26:39.915285 2026] [:error] [pid 46913:tid 46962] [client 147.135.213.9:37154] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXv6vzMWmKL8hOfC3uQ7HgAAAEs"]
[Fri Jan 30 08:26:42.109972 2026] [:error] [pid 46912:tid 46938] [client 147.135.213.9:37166] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXv6wj6yiVW7A9NwFFkugwAAAA4"]
[Fri Jan 30 08:26:44.171742 2026] [:error] [pid 46914:tid 46992] [client 147.135.213.9:37176] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXv6xFgSfJ4kZxNKlb_cnwAAAI4"]
[Fri Jan 30 08:26:46.139772 2026] [:error] [pid 46912:tid 46925] [client 147.135.213.9:37184] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXv6xj6yiVW7A9NwFFkuhgAAAAE"]
[Fri Jan 30 09:07:06.683944 2026] [:error] [pid 24711:tid 24717] [client 217.182.194.45:55354] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXwEOq5Gwh4var6T23J7TgAAAUM"]
[Fri Jan 30 09:07:10.848002 2026] [:error] [pid 38980:tid 38991] [client 217.182.194.45:40372] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aXwEPrYByxUZEaKXdHoO7gAAAgQ"]
[Fri Jan 30 09:07:15.943448 2026] [:error] [pid 24681:tid 24705] [client 217.182.194.45:40386] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXwEQ4E368IXQpahn0LytwAAARY"]
[Fri Jan 30 09:07:20.542483 2026] [:error] [pid 38686:tid 38710] [client 217.182.194.45:39740] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aXwESAoE8BAjgw1_sAXWZAAAAdQ"]
[Fri Jan 30 09:07:23.647658 2026] [:error] [pid 46912:tid 46948] [client 217.182.194.45:39746] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXwESz6yiVW7A9NwFFk63gAAABg"]
[Fri Jan 30 09:07:26.585710 2026] [:error] [pid 24711:tid 24720] [client 217.182.194.45:39760] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aXwETq5Gwh4var6T23J7dQAAAUY"]
[Fri Jan 30 09:24:28.551478 2026] [:error] [pid 24711:tid 24736] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Jan 30 09:24:28.659108 2026] [:error] [pid 24711:tid 24717] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Jan 30 09:24:28.753276 2026] [:error] [pid 24711:tid 24733] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/bnn_.php
[Fri Jan 30 09:24:28.848279 2026] [:error] [pid 24711:tid 24714] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/35.php
[Fri Jan 30 09:24:28.956930 2026] [:error] [pid 24711:tid 24738] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/sidfile.php
[Fri Jan 30 09:24:29.320520 2026] [:error] [pid 24711:tid 24722] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/rum.php
[Fri Jan 30 09:24:29.677922 2026] [:error] [pid 24711:tid 24726] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Jan 30 09:24:29.784824 2026] [:error] [pid 24711:tid 24737] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Fri Jan 30 09:24:29.878976 2026] [:error] [pid 24711:tid 24736] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aoisuki.php
[Fri Jan 30 09:24:30.099276 2026] [:error] [pid 24711:tid 24717] [client 4.193.184.23:10590] File does not exist: /usr/local/apache/htdocs/suspended-page/naritai.php
[Fri Jan 30 09:24:30.188215 2026] [:error] [pid 24711:tid 24718] [client 4.193.184.23:10590] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXwITq5Gwh4var6T23KAVAAAAUQ"]
[Fri Jan 30 09:24:31.405672 2026] [:error] [pid 38980:tid 38996] [client 4.193.184.23:3772] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXwIT7YByxUZEaKXdHoTUwAAAgk"]
[Fri Jan 30 09:24:31.896893 2026] [:error] [pid 38980:tid 38993] [client 4.193.184.23:10570] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXwIT7YByxUZEaKXdHoTWgAAAgY"]
[Fri Jan 30 09:24:33.105426 2026] [:error] [pid 46912:tid 46943] [client 4.193.184.23:3723] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w2025.php"] [unique_id "aXwIUT6yiVW7A9NwFFlBRwAAABM"]
[Fri Jan 30 09:24:35.549680 2026] [:error] [pid 38686:tid 38705] [client 4.193.184.23:3742] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aXwIUwoE8BAjgw1_sAXctwAAAc8"]
[Fri Jan 30 09:24:37.191269 2026] [:error] [pid 38686:tid 38711] [client 4.193.184.23:3775] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aXwIVQoE8BAjgw1_sAXcugAAAdU"]
[Fri Jan 30 09:24:38.796049 2026] [:error] [pid 46912:tid 46930] [client 4.193.184.23:10609] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aXwIVj6yiVW7A9NwFFlBWgAAAAY"]
[Fri Jan 30 09:24:39.320493 2026] [:error] [pid 24712:tid 24755] [client 4.193.184.23:3749] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aXwIV4RLQrFiQF3h9-uMdgAAAY4"]
[Fri Jan 30 09:24:40.413176 2026] [:error] [pid 46913:tid 46967] [client 4.193.184.23:3745] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXwIWDMWmKL8hOfC3uRJNwAAAFA"]
[Fri Jan 30 09:24:42.065898 2026] [:error] [pid 47021:tid 47032] [client 4.193.184.23:3768] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXwIWtap1k13UdZUNSSaSwAAAMk"]
[Fri Jan 30 09:24:44.129518 2026] [:error] [pid 38980:tid 38993] [client 4.193.184.23:3755] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXwIXLYByxUZEaKXdHoTaAAAAgY"]
[Fri Jan 30 09:24:45.722515 2026] [:error] [pid 38980:tid 39001] [client 4.193.184.23:10560] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aXwIXbYByxUZEaKXdHoTagAAAg4"]
[Fri Jan 30 09:24:47.489662 2026] [:error] [pid 46914:tid 46988] [client 4.193.184.23:3737] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXwIX1gSfJ4kZxNKlb_tNwAAAIo"]
[Fri Jan 30 09:24:48.774707 2026] [:error] [pid 38686:tid 38693] [client 4.193.184.23:10586] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXwIYAoE8BAjgw1_sAXcxQAAAcM"]
[Fri Jan 30 09:24:49.425280 2026] [:error] [pid 46912:tid 46943] [client 4.193.184.23:3715] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXwIYT6yiVW7A9NwFFlBZwAAABM"]
[Fri Jan 30 09:24:51.615096 2026] [:error] [pid 38686:tid 38698] [client 4.193.184.23:3738] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geaitasa.php"] [unique_id "aXwIYwoE8BAjgw1_sAXcywAAAcg"]
[Fri Jan 30 09:24:52.214198 2026] [:error] [pid 46912:tid 46937] [client 4.193.184.23:10567] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-cc.php"] [unique_id "aXwIZD6yiVW7A9NwFFlBfQAAAA0"]
[Fri Jan 30 09:24:53.578156 2026] [:error] [pid 24712:tid 24760] [client 4.193.184.23:10569] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-cc.php"] [unique_id "aXwIZYRLQrFiQF3h9-uMgQAAAZI"]
[Fri Jan 30 09:24:55.895417 2026] [:error] [pid 47021:tid 47024] [client 4.193.184.23:3724] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-cc.php"] [unique_id "aXwIZ9ap1k13UdZUNSSaZQAAAME"]
[Fri Jan 30 09:24:57.827030 2026] [:error] [pid 47021:tid 47045] [client 4.193.184.23:3736] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-cc.php"] [unique_id "aXwIadap1k13UdZUNSSaagAAANY"]
[Fri Jan 30 09:24:59.121915 2026] [:error] [pid 24711:tid 24716] [client 4.193.184.23:10568] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aXwIa65Gwh4var6T23KAzgAAAUI"]
[Fri Jan 30 09:25:05.789034 2026] [:error] [pid 24711:tid 24732] [client 4.193.184.23:10579] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aXwIca5Gwh4var6T23KA4gAAAVI"]
[Fri Jan 30 09:25:08.784944 2026] [:error] [pid 24681:tid 24702] [client 4.193.184.23:3718] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aXwIdIE368IXQpahn0L4NgAAARM"]
[Fri Jan 30 09:25:10.862115 2026] [:error] [pid 46912:tid 46932] [client 4.193.184.23:10563] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aXwIdj6yiVW7A9NwFFlBpwAAAAg"]
[Fri Jan 30 09:25:11.334520 2026] [:error] [pid 47021:tid 47027] [client 4.193.184.23:3727] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11092null.php"] [unique_id "aXwId9ap1k13UdZUNSSanwAAAMQ"]
[Fri Jan 30 09:25:12.413351 2026] [:error] [pid 46912:tid 46935] [client 4.193.184.23:3753] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11092null.php"] [unique_id "aXwIeD6yiVW7A9NwFFlBqQAAAAs"]
[Fri Jan 30 09:25:15.631860 2026] [:error] [pid 24711:tid 24726] [client 4.193.184.23:10578] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11092null.php"] [unique_id "aXwIe65Gwh4var6T23KA8AAAAUw"]
[Fri Jan 30 09:25:16.262083 2026] [:error] [pid 24681:tid 24691] [client 4.193.184.23:3712] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/11092null.php"] [unique_id "aXwIfIE368IXQpahn0L4PQAAAQg"]
[Fri Jan 30 09:25:16.958202 2026] [:error] [pid 46913:tid 46973] [client 4.193.184.23:10562] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aXwIfDMWmKL8hOfC3uRJgwAAAFY"]
[Fri Jan 30 09:25:19.479180 2026] [:error] [pid 24711:tid 24725] [client 4.193.184.23:10566] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aXwIf65Gwh4var6T23KA-AAAAUs"]
[Fri Jan 30 09:25:21.971174 2026] [:error] [pid 24712:tid 24742] [client 4.193.184.23:3656] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aXwIgYRLQrFiQF3h9-uMmAAAAYE"]
[Fri Jan 30 09:25:23.494966 2026] [:error] [pid 46912:tid 46942] [client 4.193.184.23:3650] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o2.php"] [unique_id "aXwIgz6yiVW7A9NwFFlByQAAABI"]
[Fri Jan 30 09:25:24.469101 2026] [:error] [pid 46913:tid 46952] [client 4.193.184.23:3752] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aXwIhDMWmKL8hOfC3uRJiQAAAEE"]
[Fri Jan 30 09:25:29.453202 2026] [:error] [pid 38686:tid 38693] [client 4.193.184.23:10561] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aXwIiQoE8BAjgw1_sAXdIwAAAcM"]
[Fri Jan 30 09:25:34.805349 2026] [:error] [pid 46914:tid 47000] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Fri Jan 30 09:25:34.896361 2026] [:error] [pid 46914:tid 46988] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Fri Jan 30 09:25:34.986940 2026] [:error] [pid 46914:tid 46993] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/zz8.php
[Fri Jan 30 09:25:35.318495 2026] [:error] [pid 46914:tid 46982] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Fri Jan 30 09:25:35.429895 2026] [:error] [pid 46914:tid 46999] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/ah21.php
[Fri Jan 30 09:25:35.531156 2026] [:error] [pid 46914:tid 47002] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/ah22.php
[Fri Jan 30 09:25:35.621403 2026] [:error] [pid 46914:tid 46983] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/ws38.php
[Fri Jan 30 09:25:35.805378 2026] [:error] [pid 46914:tid 46996] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/uploaxa1.php
[Fri Jan 30 09:25:36.019648 2026] [:error] [pid 46914:tid 46986] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-su.php
[Fri Jan 30 09:25:36.112683 2026] [:error] [pid 46914:tid 46984] [client 4.193.184.23:10564] File does not exist: /usr/local/apache/htdocs/suspended-page/rzzaq.php
[Fri Jan 30 09:25:36.204234 2026] [:error] [pid 46914:tid 46992] [client 4.193.184.23:10564] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abtpn.php"] [unique_id "aXwIkFgSfJ4kZxNKlb_tbQAAAI4"]
[Fri Jan 30 09:25:36.979054 2026] [:error] [pid 46912:tid 46931] [client 4.193.184.23:3752] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abtpn.php"] [unique_id "aXwIkD6yiVW7A9NwFFlB4QAAAAc"]
[Fri Jan 30 09:25:39.387817 2026] [:error] [pid 38980:tid 38998] [client 4.193.184.23:3722] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abtpn.php"] [unique_id "aXwIk7YByxUZEaKXdHoTxgAAAgs"]
[Fri Jan 30 09:25:40.588635 2026] [:error] [pid 38980:tid 38987] [client 4.193.184.23:3751] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abtpn.php"] [unique_id "aXwIlLYByxUZEaKXdHoTzAAAAgA"]
[Fri Jan 30 09:25:42.005728 2026] [:error] [pid 24712:tid 24766] [client 4.193.184.23:3766] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/my1.php"] [unique_id "aXwIloRLQrFiQF3h9-uMqgAAAZg"]
[Fri Jan 30 09:25:42.664153 2026] [:error] [pid 46913:tid 46954] [client 4.193.184.23:3764] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/my1.php"] [unique_id "aXwIljMWmKL8hOfC3uRJnwAAAEM"]
[Fri Jan 30 09:25:44.751480 2026] [:error] [pid 24711:tid 24730] [client 4.193.184.23:3666] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/my1.php"] [unique_id "aXwImK5Gwh4var6T23KBGgAAAVA"]
[Fri Jan 30 09:25:46.429013 2026] [:error] [pid 46914:tid 46986] [client 4.193.184.23:10584] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/my1.php"] [unique_id "aXwImlgSfJ4kZxNKlb_tdAAAAIg"]
[Fri Jan 30 09:25:49.233175 2026] [:error] [pid 38686:tid 38694] [client 4.193.184.23:3775] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/taktak.php"] [unique_id "aXwInQoE8BAjgw1_sAXdNAAAAcQ"]
[Fri Jan 30 09:25:51.363962 2026] [:error] [pid 46913:tid 46967] [client 4.193.184.23:10574] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/taktak.php"] [unique_id "aXwInzMWmKL8hOfC3uRJrQAAAFA"]
[Fri Jan 30 09:25:54.446535 2026] [:error] [pid 24681:tid 24707] [client 4.193.184.23:3733] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/taktak.php"] [unique_id "aXwIooE368IXQpahn0L4ZQAAARg"]
[Fri Jan 30 09:25:55.360928 2026] [:error] [pid 38980:tid 39004] [client 4.193.184.23:10587] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/taktak.php"] [unique_id "aXwIo7YByxUZEaKXdHoT3gAAAhE"]
[Fri Jan 30 09:25:56.284233 2026] [:error] [pid 38980:tid 38989] [client 4.193.184.23:10572] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sfcl.php"] [unique_id "aXwIpLYByxUZEaKXdHoT4QAAAgI"]
[Fri Jan 30 09:25:56.917830 2026] [:error] [pid 38980:tid 39005] [client 4.193.184.23:3692] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sfcl.php"] [unique_id "aXwIpLYByxUZEaKXdHoT4gAAAhI"]
[Fri Jan 30 09:25:58.752014 2026] [:error] [pid 24712:tid 24747] [client 4.193.184.23:10573] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sfcl.php"] [unique_id "aXwIpoRLQrFiQF3h9-uMuwAAAYY"]
[Fri Jan 30 09:26:00.264658 2026] [:error] [pid 24681:tid 24696] [client 4.193.184.23:3651] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sfcl.php"] [unique_id "aXwIqIE368IXQpahn0L4bwAAAQ0"]
[Fri Jan 30 09:26:02.726607 2026] [:error] [pid 24681:tid 24694] [client 4.193.184.23:3765] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ypukprhr.php"] [unique_id "aXwIqoE368IXQpahn0L4cQAAAQs"]
[Fri Jan 30 09:26:03.786536 2026] [:error] [pid 24711:tid 24734] [client 4.193.184.23:3743] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ypukprhr.php"] [unique_id "aXwIq65Gwh4var6T23KBSQAAAVQ"]
[Fri Jan 30 09:26:04.930234 2026] [:error] [pid 38980:tid 39003] [client 4.193.184.23:10582] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ypukprhr.php"] [unique_id "aXwIrLYByxUZEaKXdHoT7QAAAhA"]
[Fri Jan 30 09:26:05.323603 2026] [:error] [pid 46913:tid 46963] [client 4.193.184.23:3717] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ypukprhr.php"] [unique_id "aXwIrTMWmKL8hOfC3uRJvQAAAEw"]
[Fri Jan 30 09:26:05.657394 2026] [:error] [pid 38686:tid 38714] [client 4.193.184.23:3757] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcnyz.php"] [unique_id "aXwIrQoE8BAjgw1_sAXdTgAAAdg"]
[Fri Jan 30 09:26:06.251296 2026] [:error] [pid 46914:tid 46985] [client 4.193.184.23:10595] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcnyz.php"] [unique_id "aXwIrlgSfJ4kZxNKlb_tlAAAAIc"]
[Fri Jan 30 09:26:06.931337 2026] [:error] [pid 47021:tid 47035] [client 4.193.184.23:3748] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcnyz.php"] [unique_id "aXwIrtap1k13UdZUNSSazQAAAMw"]
[Fri Jan 30 09:26:07.303971 2026] [:error] [pid 46912:tid 46928] [client 4.193.184.23:10589] [client 4.193.184.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcnyz.php"] [unique_id "aXwIrz6yiVW7A9NwFFlCMgAAAAQ"]
[Fri Jan 30 11:07:51.175681 2026] [:error] [pid 24712:tid 24744] [client 43.153.96.233:41294] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXwgh4RLQrFiQF3h9-ut4AAAAYM"]
[Fri Jan 30 11:18:13.599530 2026] [:error] [pid 38686:tid 38714] [client 43.130.32.245:42492] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXwi9QoE8BAjgw1_sAX7NwAAAdg"]
[Fri Jan 30 16:10:55.509900 2026] [:error] [pid 24712:tid 24743] [client 91.217.249.198:64557] [client 91.217.249.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.198, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aXxnj4RLQrFiQF3h9-sF6gAAAYI"]
[Fri Jan 30 16:10:55.513746 2026] [:error] [pid 24712:tid 24743] [client 91.217.249.198:64557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 30 18:22:40.292025 2026] [:error] [pid 46913:tid 46974] [client 122.51.236.174:41270] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXyGcDMWmKL8hOfC3uS1_AAAAFc"]
[Fri Jan 30 18:54:43.736099 2026] [:error] [pid 24711:tid 24736] [client 43.153.104.196:60982] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aXyN865Gwh4var6T23Js5wAAAVY"]
[Fri Jan 30 19:02:18.722791 2026] [:error] [pid 24681:tid 24706] [client 43.157.149.188:40568] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aXyPuoE368IXQpahn0JtwQAAARc"]
[Fri Jan 30 19:31:38.902357 2026] [:error] [pid 24711:tid 24725] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Fri Jan 30 19:31:39.185027 2026] [:error] [pid 24711:tid 24733] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Jan 30 19:31:39.466802 2026] [:error] [pid 24711:tid 24731] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/sanity.php
[Fri Jan 30 19:31:39.774473 2026] [:error] [pid 24711:tid 24716] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/anj.php
[Fri Jan 30 19:31:40.070448 2026] [:error] [pid 24711:tid 24729] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Fri Jan 30 19:31:40.493896 2026] [:error] [pid 24711:tid 24724] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Fri Jan 30 19:31:40.777252 2026] [:error] [pid 24711:tid 24719] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Fri Jan 30 19:31:41.086797 2026] [:error] [pid 24711:tid 24720] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Fri Jan 30 19:31:41.368105 2026] [:error] [pid 24711:tid 24714] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/zmia.php
[Fri Jan 30 19:31:41.665798 2026] [:error] [pid 24711:tid 24732] [client 20.223.150.246:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/edorxrr.php
[Fri Jan 30 19:31:42.168204 2026] [:error] [pid 24711:tid 24734] [client 20.223.150.246:43518] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doko.php"] [unique_id "aXyWnq5Gwh4var6T23J6lwAAAVQ"]
[Fri Jan 30 19:31:45.782133 2026] [:error] [pid 46913:tid 46953] [client 20.223.150.246:32472] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doko.php"] [unique_id "aXyWoTMWmKL8hOfC3uTBFAAAAEI"]
[Fri Jan 30 19:31:48.323530 2026] [:error] [pid 24712:tid 24759] [client 20.223.150.246:32483] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doko.php"] [unique_id "aXyWpIRLQrFiQF3h9-s1TQAAAZE"]
[Fri Jan 30 19:31:49.804183 2026] [:error] [pid 47663:tid 47677] [client 20.223.150.246:40357] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/doko.php"] [unique_id "aXyWpUHGTrgIKCqEYbWLYAAAAkw"]
[Fri Jan 30 19:31:51.131809 2026] [:error] [pid 46912:tid 46946] [client 20.223.150.246:35707] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sst.php"] [unique_id "aXyWpz6yiVW7A9NwFFnRPwAAABY"]
[Fri Jan 30 19:31:57.792268 2026] [:error] [pid 24681:tid 24706] [client 20.223.150.246:12153] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sst.php"] [unique_id "aXyWrYE368IXQpahn0Jy2AAAARc"]
[Fri Jan 30 19:32:00.304584 2026] [:error] [pid 24711:tid 24715] [client 20.223.150.246:50250] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sst.php"] [unique_id "aXyWsK5Gwh4var6T23J6qwAAAUE"]
[Fri Jan 30 19:32:13.701263 2026] [:error] [pid 24681:tid 24700] [client 20.223.150.246:43493] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/easy.php"] [unique_id "aXyWvYE368IXQpahn0Jy4AAAARE"]
[Fri Jan 30 19:32:19.403670 2026] [:error] [pid 38686:tid 38698] [client 20.223.150.246:36256] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/easy.php"] [unique_id "aXyWwwoE8BAjgw1_sAVZyAAAAcg"]
[Fri Jan 30 19:32:22.374431 2026] [:error] [pid 46914:tid 46993] [client 20.223.150.246:19999] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-rss4.php"] [unique_id "aXyWxlgSfJ4kZxNKlb-yrQAAAI8"]
[Fri Jan 30 19:32:26.333515 2026] [:error] [pid 46914:tid 46997] [client 20.223.150.246:42960] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-rss4.php"] [unique_id "aXyWylgSfJ4kZxNKlb-yrwAAAJM"]
[Fri Jan 30 19:32:28.769850 2026] [:error] [pid 47021:tid 47023] [client 20.223.150.246:36256] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-rss4.php"] [unique_id "aXyWzNap1k13UdZUNSQ1MgAAAMA"]
[Fri Jan 30 19:32:30.728092 2026] [:error] [pid 46914:tid 46987] [client 20.223.150.246:23617] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-rss4.php"] [unique_id "aXyWzlgSfJ4kZxNKlb-yuwAAAIk"]
[Fri Jan 30 19:32:33.086371 2026] [:error] [pid 24711:tid 24718] [client 20.223.150.246:36260] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nlvbr.php"] [unique_id "aXyW0a5Gwh4var6T23J62QAAAUQ"]
[Fri Jan 30 19:32:37.397927 2026] [:error] [pid 24711:tid 24723] [client 20.223.150.246:33151] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nlvbr.php"] [unique_id "aXyW1a5Gwh4var6T23J63QAAAUk"]
[Fri Jan 30 19:32:47.843761 2026] [:error] [pid 47021:tid 47037] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Fri Jan 30 19:32:48.124889 2026] [:error] [pid 47021:tid 47047] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/icoxp.php
[Fri Jan 30 19:32:48.420636 2026] [:error] [pid 47021:tid 47024] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Fri Jan 30 19:32:48.805321 2026] [:error] [pid 47021:tid 47025] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Jan 30 19:32:49.099429 2026] [:error] [pid 47021:tid 47036] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Jan 30 19:32:49.391787 2026] [:error] [pid 47021:tid 47041] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Fri Jan 30 19:32:49.686976 2026] [:error] [pid 47021:tid 47042] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/tempae.php
[Fri Jan 30 19:32:49.966788 2026] [:error] [pid 47021:tid 47030] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/drfabyqp.php
[Fri Jan 30 19:32:50.249622 2026] [:error] [pid 47021:tid 47039] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Jan 30 19:32:50.638304 2026] [:error] [pid 47021:tid 47038] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Fri Jan 30 19:32:50.929588 2026] [:error] [pid 47021:tid 47023] [client 20.223.150.246:26794] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Fri Jan 30 19:32:51.207207 2026] [:error] [pid 47021:tid 47034] [client 20.223.150.246:26794] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bayss.php"] [unique_id "aXyW49ap1k13UdZUNSQ1TQAAAMs"]
[Fri Jan 30 19:32:53.830455 2026] [:error] [pid 38980:tid 38996] [client 20.223.150.246:33125] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bayss.php"] [unique_id "aXyW5bYByxUZEaKXdHqUwAAAAgk"]
[Fri Jan 30 19:32:57.387217 2026] [:error] [pid 24711:tid 24738] [client 20.223.150.246:22622] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bayss.php"] [unique_id "aXyW6a5Gwh4var6T23J7FAAAAVg"]
[Fri Jan 30 19:33:03.006009 2026] [:error] [pid 47021:tid 47029] [client 20.223.150.246:29203] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bayss.php"] [unique_id "aXyW79ap1k13UdZUNSQ1XAAAAMY"]
[Fri Jan 30 19:33:04.160235 2026] [:error] [pid 24711:tid 24715] [client 20.223.150.246:46365] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w1.php"] [unique_id "aXyW8K5Gwh4var6T23J7HgAAAUE"]
[Fri Jan 30 19:33:23.521440 2026] [:error] [pid 24711:tid 24729] [client 20.223.150.246:30488] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dgdaolin.php"] [unique_id "aXyXA65Gwh4var6T23J7PQAAAU8"]
[Fri Jan 30 19:33:25.019617 2026] [:error] [pid 47021:tid 47024] [client 20.223.150.246:22637] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dgdaolin.php"] [unique_id "aXyXBdap1k13UdZUNSQ1eAAAAME"]
[Fri Jan 30 19:33:41.683204 2026] [:error] [pid 46913:tid 46975] [client 20.223.150.246:43436] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rrhbdzdz.php"] [unique_id "aXyXFTMWmKL8hOfC3uTBYAAAAFg"]
[Fri Jan 30 19:33:45.442621 2026] [:error] [pid 24711:tid 24729] [client 20.223.150.246:33121] [client 20.223.150.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rrhbdzdz.php"] [unique_id "aXyXGa5Gwh4var6T23J7UAAAAU8"]
[Fri Jan 30 19:33:54.178119 2026] [:error] [pid 24681:tid 24688] [client 20.223.150.246:26756] File does not exist: /usr/local/apache/htdocs/suspended-page/rrhbdzdz.php
[Fri Jan 30 19:33:54.456329 2026] [:error] [pid 24681:tid 24696] [client 20.223.150.246:26756] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Jan 30 22:13:00.230309 2026] [:error] [pid 24681:tid 24701] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Jan 30 22:13:00.821718 2026] [:error] [pid 24681:tid 24697] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Jan 30 22:13:01.377714 2026] [:error] [pid 24681:tid 24707] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Jan 30 22:13:01.935925 2026] [:error] [pid 24681:tid 24705] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Jan 30 22:13:02.489324 2026] [:error] [pid 24681:tid 24699] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Jan 30 22:13:03.039431 2026] [:error] [pid 24681:tid 24697] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Jan 30 22:13:03.604279 2026] [:error] [pid 24681:tid 24683] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Jan 30 22:13:04.160994 2026] [:error] [pid 24681:tid 24700] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Jan 30 22:13:05.271917 2026] [:error] [pid 24681:tid 24703] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Jan 30 22:13:06.382439 2026] [:error] [pid 24681:tid 24688] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Jan 30 22:13:06.933965 2026] [:error] [pid 24681:tid 24687] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Jan 30 22:13:07.492812 2026] [:error] [pid 24681:tid 24703] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Jan 30 22:13:08.044132 2026] [:error] [pid 24681:tid 24702] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Jan 30 22:13:08.608302 2026] [:error] [pid 24681:tid 24707] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Jan 30 22:13:09.162278 2026] [:error] [pid 24681:tid 24705] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Jan 30 22:13:13.122718 2026] [:error] [pid 24681:tid 24705] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Jan 30 22:13:13.676300 2026] [:error] [pid 24681:tid 24702] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Jan 30 22:13:14.232843 2026] [:error] [pid 24681:tid 24698] [client 45.137.126.27:21909] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Jan 30 22:13:22.075168 2026] [:error] [pid 24681:tid 24693] [client 45.137.126.27:21909] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy8goE368IXQpahn0KUSgAAAQo"]
[Fri Jan 30 22:13:24.879478 2026] [:error] [pid 38980:tid 38988] [client 45.137.126.16:54229] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy8hLYByxUZEaKXdHq4ZgAAAgE"]
[Fri Jan 30 22:13:27.671677 2026] [:error] [pid 38980:tid 38990] [client 45.137.126.20:55855] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Jan 30 22:13:29.360891 2026] [:error] [pid 38980:tid 38990] [client 45.137.126.20:55855] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aXy8ibYByxUZEaKXdHq4kgAAAgM"]
[Fri Jan 30 22:13:31.626186 2026] [:error] [pid 38980:tid 39008] [client 45.137.126.49:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Jan 30 22:13:32.176730 2026] [:error] [pid 38980:tid 38988] [client 45.137.126.49:45239] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aXy8jLYByxUZEaKXdHq4vAAAAgE"]
[Fri Jan 30 22:13:33.834259 2026] [:error] [pid 24711:tid 24724] [client 45.137.126.26:65275] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Jan 30 22:13:36.601592 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.26:65275] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy8kK5Gwh4var6T23K6kwAAAVM"]
[Fri Jan 30 22:13:38.248528 2026] [:error] [pid 47021:tid 47027] [client 45.137.126.9:38017] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy8ktap1k13UdZUNSRfTAAAAMQ"]
[Fri Jan 30 22:13:39.340665 2026] [:error] [pid 38980:tid 38987] [client 45.137.126.30:21405] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy8k7YByxUZEaKXdHq5CQAAAgA"]
[Fri Jan 30 22:13:40.433784 2026] [:error] [pid 46913:tid 46965] [client 45.137.126.6:63911] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy8lDMWmKL8hOfC3uThEAAAAE4"]
[Fri Jan 30 22:13:41.560681 2026] [:error] [pid 47663:tid 47678] [client 45.137.126.2:32361] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy8lUHGTrgIKCqEYbWq0AAAAk0"]
[Fri Jan 30 22:13:42.656093 2026] [:error] [pid 38686:tid 38711] [client 45.137.126.24:29335] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy8lgoE8BAjgw1_sAV-RwAAAdU"]
[Fri Jan 30 22:13:44.316667 2026] [:error] [pid 46914:tid 46998] [client 45.137.126.10:44107] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy8mFgSfJ4kZxNKlb_lHQAAAJQ"]
[Fri Jan 30 22:13:45.420188 2026] [:error] [pid 24712:tid 24766] [client 45.137.126.17:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Jan 30 22:13:46.533119 2026] [:error] [pid 24712:tid 24748] [client 45.137.126.17:64599] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aXy8moRLQrFiQF3h9-timAAAAYc"]
[Fri Jan 30 22:13:48.737667 2026] [:error] [pid 24712:tid 24746] [client 45.137.126.8:29827] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy8nIRLQrFiQF3h9-tioAAAAYU"]
[Fri Jan 30 22:13:50.394854 2026] [:error] [pid 24712:tid 24743] [client 45.137.126.7:34939] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy8noRLQrFiQF3h9-tiqAAAAYI"]
[Fri Jan 30 22:13:51.492339 2026] [:error] [pid 47663:tid 47680] [client 45.137.126.35:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Jan 30 22:13:52.043783 2026] [:error] [pid 47663:tid 47684] [client 45.137.126.35:38965] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy8oEHGTrgIKCqEYbWrOwAAAlM"]
[Fri Jan 30 22:13:53.160570 2026] [:error] [pid 24711:tid 24732] [client 45.137.126.17:45455] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Jan 30 22:13:54.835613 2026] [:error] [pid 24711:tid 24727] [client 45.137.126.17:45455] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Jan 30 22:13:56.500066 2026] [:error] [pid 24711:tid 24737] [client 45.137.126.17:45455] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy8pK5Gwh4var6T23K7YAAAAVc"]
[Fri Jan 30 22:13:57.603086 2026] [:error] [pid 24711:tid 24730] [client 45.137.126.42:55335] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Jan 30 22:13:58.163981 2026] [:error] [pid 24711:tid 24714] [client 45.137.126.42:55335] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy8pq5Gwh4var6T23K7cAAAAUA"]
[Fri Jan 30 22:13:59.288035 2026] [:error] [pid 24711:tid 24727] [client 45.137.126.53:38241] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Jan 30 22:14:00.391023 2026] [:error] [pid 24711:tid 24720] [client 45.137.126.53:38241] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aXy8qK5Gwh4var6T23K7iAAAAUY"]
[Fri Jan 30 22:14:02.070718 2026] [:error] [pid 38686:tid 38695] [client 45.137.126.51:24341] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy8qgoE8BAjgw1_sAV-uwAAAcU"]
[Fri Jan 30 22:14:03.785688 2026] [:error] [pid 24711:tid 24738] [client 45.137.126.22:61577] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Jan 30 22:14:04.345136 2026] [:error] [pid 24711:tid 24718] [client 45.137.126.22:61577] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Jan 30 22:14:05.496091 2026] [:error] [pid 24711:tid 24722] [client 45.137.126.22:61577] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy8ra5Gwh4var6T23K7xAAAAUg"]
[Fri Jan 30 22:14:07.216615 2026] [:error] [pid 24712:tid 24762] [client 45.137.126.13:23249] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy8r4RLQrFiQF3h9-tjGgAAAZQ"]
[Fri Jan 30 22:14:08.885287 2026] [:error] [pid 24681:tid 24688] [client 45.137.126.13:61115] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy8sIE368IXQpahn0KVvwAAAQU"]
[Fri Jan 30 22:14:09.981851 2026] [:error] [pid 38980:tid 39008] [client 45.137.126.45:33147] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy8sbYByxUZEaKXdHq6OwAAAhU"]
[Fri Jan 30 22:14:11.076994 2026] [:error] [pid 24711:tid 24738] [client 45.137.126.34:26197] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy8s65Gwh4var6T23K8EAAAAVg"]
[Fri Jan 30 22:14:13.321463 2026] [:error] [pid 47663:tid 47675] [client 45.137.126.47:52511] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Jan 30 22:14:13.873641 2026] [:error] [pid 47663:tid 47671] [client 45.137.126.47:52511] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aXy8tUHGTrgIKCqEYbWrrgAAAkY"]
[Fri Jan 30 22:14:14.972855 2026] [:error] [pid 46912:tid 46922] [client 45.137.126.4:34825] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aXy8tj6yiVW7A9NwFFn6ugAAAAA"]
[Fri Jan 30 22:14:16.084006 2026] [:error] [pid 38686:tid 38704] [client 45.137.126.51:41503] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXy8uAoE8BAjgw1_sAV_FAAAAc4"]
[Fri Jan 30 22:14:18.291033 2026] [:error] [pid 47663:tid 47673] [client 45.137.126.33:32055] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Jan 30 22:14:19.425566 2026] [:error] [pid 47663:tid 47674] [client 45.137.126.33:32055] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Jan 30 22:14:21.674363 2026] [:error] [pid 47663:tid 47676] [client 45.137.126.33:32055] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aXy8vUHGTrgIKCqEYbWr3QAAAks"]
[Fri Jan 30 22:14:24.491561 2026] [:error] [pid 46914:tid 46985] [client 45.137.126.3:58721] [client 45.137.126.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.3, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aXy8wFgSfJ4kZxNKlb_mTAAAAIc"]
[Fri Jan 30 22:14:25.094290 2026] [:error] [pid 46914:tid 46981] [client 45.137.126.3:58721] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Jan 30 22:14:35.511151 2026] [:error] [pid 46914:tid 47002] [client 45.137.126.3:58721] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Jan 30 22:14:36.073309 2026] [:error] [pid 46914:tid 46997] [client 45.137.126.3:58721] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Jan 30 22:14:38.295822 2026] [:error] [pid 46914:tid 46996] [client 45.137.126.3:58721] [client 45.137.126.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/ask.php"] [unique_id "aXy8zlgSfJ4kZxNKlb_msAAAAJI"]
[Fri Jan 30 22:14:39.955131 2026] [:error] [pid 38686:tid 38696] [client 45.137.126.16:27983] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXy8zwoE8BAjgw1_sAV_jAAAAcY"]
[Fri Jan 30 22:14:41.626101 2026] [:error] [pid 47021:tid 47038] [client 45.137.126.10:25965] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Jan 30 22:14:42.195649 2026] [:error] [pid 47021:tid 47035] [client 45.137.126.10:25965] [client 45.137.126.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.10, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXy80tap1k13UdZUNSRiNQAAAMw"]
[Fri Jan 30 22:14:43.297961 2026] [:error] [pid 47021:tid 47038] [client 45.137.126.10:25965] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aXy809ap1k13UdZUNSRiPwAAAM8"]
[Fri Jan 30 22:14:46.626100 2026] [:error] [pid 24681:tid 24695] [client 45.137.126.19:56585] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Jan 30 22:14:47.754942 2026] [:error] [pid 24681:tid 24707] [client 45.137.126.19:56585] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Jan 30 22:14:48.869090 2026] [:error] [pid 24681:tid 24706] [client 45.137.126.19:56585] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aXy82IE368IXQpahn0KW0AAAARc"]
[Fri Jan 30 22:14:49.962500 2026] [:error] [pid 46914:tid 46994] [client 45.137.126.26:44625] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Jan 30 22:14:51.675048 2026] [:error] [pid 46914:tid 46992] [client 45.137.126.26:44625] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Jan 30 22:14:52.809798 2026] [:error] [pid 46914:tid 46989] [client 45.137.126.26:44625] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Jan 30 22:14:53.943168 2026] [:error] [pid 46914:tid 46986] [client 45.137.126.26:44625] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Jan 30 22:14:54.497838 2026] [:error] [pid 46914:tid 47000] [client 45.137.126.26:44625] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aXy83lgSfJ4kZxNKlb_nKAAAAJY"]
[Fri Jan 30 22:14:55.598325 2026] [:error] [pid 38980:tid 39002] [client 45.137.126.20:41693] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Jan 30 22:14:56.151892 2026] [:error] [pid 38980:tid 38999] [client 45.137.126.20:41693] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Jan 30 22:14:56.706400 2026] [:error] [pid 38980:tid 38995] [client 45.137.126.20:41693] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aXy84LYByxUZEaKXdHq7qwAAAgg"]
[Fri Jan 30 22:14:58.362925 2026] [:error] [pid 24711:tid 24732] [client 45.137.126.10:40839] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Jan 30 22:14:59.466083 2026] [:error] [pid 24711:tid 24715] [client 45.137.126.10:40839] [client 45.137.126.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.10, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aXy8465Gwh4var6T23K-pwAAAUE"]
[Fri Jan 30 22:15:00.016681 2026] [:error] [pid 24711:tid 24715] [client 45.137.126.10:40839] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aXy85K5Gwh4var6T23K-rwAAAUE"]
[Fri Jan 30 22:15:10.988093 2026] [:error] [pid 24712:tid 24748] [client 45.137.126.22:56493] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Jan 30 22:15:14.350662 2026] [:error] [pid 24712:tid 24761] [client 45.137.126.22:56493] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Jan 30 22:15:14.916205 2026] [:error] [pid 24712:tid 24756] [client 45.137.126.22:56493] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aXy88oRLQrFiQF3h9-tlWgAAAY8"]
[Fri Jan 30 22:15:16.021816 2026] [:error] [pid 24681:tid 24697] [client 45.137.126.44:58853] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Jan 30 22:15:17.699051 2026] [:error] [pid 24681:tid 24687] [client 45.137.126.44:58853] [client 45.137.126.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.44, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aXy89YE368IXQpahn0KXmwAAAQQ"]
[Fri Jan 30 22:15:18.259590 2026] [:error] [pid 24681:tid 24692] [client 45.137.126.44:58853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Jan 30 22:15:18.819945 2026] [:error] [pid 24681:tid 24705] [client 45.137.126.44:58853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Jan 30 22:15:19.383556 2026] [:error] [pid 24681:tid 24692] [client 45.137.126.44:58853] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Jan 30 22:15:19.936896 2026] [:error] [pid 24681:tid 24705] [client 45.137.126.44:58853] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aXy894E368IXQpahn0KXtwAAARY"]
[Fri Jan 30 22:15:21.037120 2026] [:error] [pid 24712:tid 24752] [client 45.137.126.7:61501] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Jan 30 22:15:21.620932 2026] [:error] [pid 24712:tid 24746] [client 45.137.126.7:61501] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aXy8-YRLQrFiQF3h9-tlggAAAYU"]
[Fri Jan 30 22:15:23.286307 2026] [:error] [pid 24711:tid 24717] [client 45.137.126.4:60543] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Jan 30 22:15:23.836586 2026] [:error] [pid 24711:tid 24716] [client 45.137.126.4:60543] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXy8-65Gwh4var6T23K_uwAAAUI"]
[Fri Jan 30 22:15:26.064629 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.45:28899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Jan 30 22:15:26.627153 2026] [:error] [pid 24711:tid 24714] [client 45.137.126.45:28899] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aXy8_q5Gwh4var6T23K_1QAAAUA"]
[Fri Jan 30 22:15:27.718094 2026] [:error] [pid 46914:tid 46995] [client 45.137.126.50:42121] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aXy8_1gSfJ4kZxNKlb_oLQAAAJE"]
[Fri Jan 30 22:15:28.821036 2026] [:error] [pid 46914:tid 46978] [client 45.137.126.36:26651] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Jan 30 22:15:29.372647 2026] [:error] [pid 46914:tid 46994] [client 45.137.126.36:26651] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Jan 30 22:15:31.607761 2026] [:error] [pid 46914:tid 47000] [client 45.137.126.36:26651] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aXy9A1gSfJ4kZxNKlb_oWQAAAJY"]
[Fri Jan 30 22:15:33.341280 2026] [:error] [pid 24712:tid 24754] [client 45.137.126.18:57951] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aXy9BYRLQrFiQF3h9-tlsQAAAY0"]
[Fri Jan 30 22:15:36.103566 2026] [:error] [pid 38686:tid 38702] [client 45.137.126.29:56445] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aXy9CAoE8BAjgw1_sAWBlQAAAcw"]
[Fri Jan 30 22:15:37.200134 2026] [:error] [pid 24712:tid 24765] [client 45.137.126.48:21735] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Jan 30 22:15:38.307528 2026] [:error] [pid 24712:tid 24741] [client 45.137.126.48:21735] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Jan 30 22:15:38.853160 2026] [:error] [pid 24712:tid 24762] [client 45.137.126.48:21735] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aXy9CoRLQrFiQF3h9-tl5gAAAZQ"]
[Fri Jan 30 22:15:39.949597 2026] [:error] [pid 47021:tid 47031] [client 45.137.126.51:26679] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Jan 30 22:15:41.049108 2026] [:error] [pid 47021:tid 47046] [client 45.137.126.51:26679] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aXy9Ddap1k13UdZUNSRkCgAAANc"]
[Fri Jan 30 22:15:43.805714 2026] [:error] [pid 46912:tid 46929] [client 45.137.126.38:64247] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aXy9Dz6yiVW7A9NwFFn99QAAAAU"]
[Fri Jan 30 22:15:45.463388 2026] [:error] [pid 24712:tid 24742] [client 45.137.126.7:24615] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Jan 30 22:15:47.168904 2026] [:error] [pid 24712:tid 24762] [client 45.137.126.7:24615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Jan 30 22:15:48.278284 2026] [:error] [pid 24712:tid 24760] [client 45.137.126.7:24615] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Jan 30 22:15:48.823666 2026] [:error] [pid 24712:tid 24754] [client 45.137.126.7:24615] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aXy9FIRLQrFiQF3h9-tmMAAAAY0"]
[Fri Jan 30 22:15:49.917663 2026] [:error] [pid 38686:tid 38695] [client 45.137.126.16:60961] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aXy9FQoE8BAjgw1_sAWB7wAAAcU"]
[Fri Jan 30 22:15:51.012634 2026] [:error] [pid 24711:tid 24732] [client 45.137.126.31:21483] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aXy9F65Gwh4var6T23LAngAAAVI"]
[Fri Jan 30 22:15:52.111744 2026] [:error] [pid 24712:tid 24766] [client 45.137.126.32:57977] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aXy9GIRLQrFiQF3h9-tmPwAAAZg"]
[Fri Jan 30 22:15:53.220339 2026] [:error] [pid 46912:tid 46928] [client 45.137.126.36:32765] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Jan 30 22:15:53.766927 2026] [:error] [pid 46912:tid 46948] [client 45.137.126.36:32765] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aXy9GT6yiVW7A9NwFFn-YgAAABg"]
[Fri Jan 30 22:15:54.882745 2026] [:error] [pid 47663:tid 47685] [client 45.137.126.27:34425] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aXy9GkHGTrgIKCqEYbWu_AAAAlQ"]
[Fri Jan 30 22:17:11.393178 2026] [:error] [pid 24711:tid 24738] [client 45.137.126.36:60589] [client 45.137.126.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/prenota/"] [unique_id "aXy9Z65Gwh4var6T23LCQAAAAVg"]
[Fri Jan 30 22:17:39.275946 2026] [:error] [pid 46913:tid 46970] [client 45.137.126.12:46027] [client 45.137.126.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/"] [unique_id "aXy9gzMWmKL8hOfC3uTnjAAAAFM"]
[Fri Jan 30 22:22:53.772878 2026] [:error] [pid 46914:tid 46989] [client 152.58.87.254:51424] [client 152.58.87.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.87.254, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aXy-vVgSfJ4kZxNKlb_wDgAAAIs"]
[Fri Jan 30 22:22:53.779161 2026] [:error] [pid 46914:tid 46989] [client 152.58.87.254:51424] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 30 22:26:30.736877 2026] [:error] [pid 47663:tid 47666] [client 51.83.7.81:58688] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aXy_lkHGTrgIKCqEYbW1HgAAAkE"]
[Fri Jan 30 22:26:33.061103 2026] [:error] [pid 46913:tid 46956] [client 51.83.7.81:36438] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aXy_mTMWmKL8hOfC3uTqpQAAAEU"]
[Fri Jan 30 22:26:35.205083 2026] [:error] [pid 46914:tid 46997] [client 51.83.7.81:36450] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aXy_m1gSfJ4kZxNKlb_xoAAAAJM"]
[Fri Jan 30 22:26:37.263998 2026] [:error] [pid 38980:tid 39005] [client 51.83.7.81:36460] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aXy_nbYByxUZEaKXdHrEhAAAAhI"]
[Fri Jan 30 22:26:39.565520 2026] [:error] [pid 47663:tid 47685] [client 51.83.7.81:36468] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXy_n0HGTrgIKCqEYbW1IwAAAlQ"]
[Fri Jan 30 22:26:41.496170 2026] [:error] [pid 38980:tid 38991] [client 51.83.7.81:45208] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXy_obYByxUZEaKXdHrEhwAAAgQ"]
[Fri Jan 30 22:26:43.363613 2026] [:error] [pid 46914:tid 46987] [client 51.83.7.81:45212] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXy_o1gSfJ4kZxNKlb_xqAAAAIk"]
[Fri Jan 30 22:26:45.549196 2026] [:error] [pid 24681:tid 24690] [client 51.83.7.81:45218] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aXy_pYE368IXQpahn0KfHAAAAQc"]
[Fri Jan 30 22:26:47.685764 2026] [:error] [pid 46914:tid 46988] [client 51.83.7.81:45226] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aXy_p1gSfJ4kZxNKlb_xrAAAAIo"]
[Fri Jan 30 22:26:49.925025 2026] [:error] [pid 46913:tid 46963] [client 51.83.7.81:45236] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aXy_qTMWmKL8hOfC3uTqtgAAAEw"]
[Fri Jan 30 22:26:51.839994 2026] [:error] [pid 38686:tid 38707] [client 51.83.7.81:41242] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aXy_qwoE8BAjgw1_sAWKVgAAAdE"]
[Fri Jan 30 22:26:53.963673 2026] [:error] [pid 38980:tid 38996] [client 51.83.7.81:41256] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aXy_rbYByxUZEaKXdHrEkAAAAgk"]
[Fri Jan 30 22:26:55.866787 2026] [:error] [pid 47663:tid 47687] [client 51.83.7.81:41268] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aXy_r0HGTrgIKCqEYbW1MgAAAlY"]
[Fri Jan 30 22:26:57.880733 2026] [:error] [pid 47663:tid 47681] [client 51.83.7.81:41282] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aXy_sUHGTrgIKCqEYbW1NAAAAlA"]
[Fri Jan 30 22:26:59.951766 2026] [:error] [pid 46914:tid 46990] [client 51.83.7.81:41292] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aXy_s1gSfJ4kZxNKlb_xwgAAAIw"]
[Fri Jan 30 22:27:02.040198 2026] [:error] [pid 47663:tid 47673] [client 51.83.7.81:53560] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXy_tkHGTrgIKCqEYbW1OAAAAkg"]
[Fri Jan 30 22:27:04.120905 2026] [:error] [pid 24681:tid 24685] [client 51.83.7.81:53576] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aXy_uIE368IXQpahn0KfLAAAAQI"]
[Fri Jan 30 22:27:06.012943 2026] [:error] [pid 46912:tid 46935] [client 51.83.7.81:53582] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXy_uj6yiVW7A9NwFFkKWAAAAAs"]
[Fri Jan 30 22:27:08.070171 2026] [:error] [pid 24711:tid 24734] [client 51.83.7.81:53586] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aXy_vK5Gwh4var6T23LJ1QAAAVQ"]
[Fri Jan 30 22:27:10.151222 2026] [:error] [pid 47021:tid 47043] [client 51.83.7.81:53590] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXy_vtap1k13UdZUNSRsdgAAANQ"]
[Fri Jan 30 22:27:12.219100 2026] [:error] [pid 47663:tid 47678] [client 51.83.7.81:46226] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXy_wEHGTrgIKCqEYbW1PwAAAk0"]
[Fri Jan 30 22:27:14.260807 2026] [:error] [pid 24712:tid 24743] [client 51.83.7.81:46234] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXy_woRLQrFiQF3h9-tu9wAAAYI"]
[Fri Jan 30 22:27:16.160012 2026] [:error] [pid 46914:tid 46983] [client 51.83.7.81:46238] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXy_xFgSfJ4kZxNKlb_x1QAAAIU"]
[Fri Jan 30 22:27:18.195795 2026] [:error] [pid 38980:tid 38997] [client 51.83.7.81:46252] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXy_xrYByxUZEaKXdHrEqwAAAgo"]
[Fri Jan 30 22:27:20.235570 2026] [:error] [pid 24681:tid 24688] [client 51.83.7.81:46260] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXy_yIE368IXQpahn0KfNAAAAQU"]
[Fri Jan 30 22:27:22.250624 2026] [:error] [pid 38980:tid 39009] [client 51.83.7.81:39058] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXy_yrYByxUZEaKXdHrEsgAAAhY"]
[Fri Jan 30 22:27:24.246787 2026] [:error] [pid 24711:tid 24721] [client 51.83.7.81:39064] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aXy_zK5Gwh4var6T23LJ5AAAAUc"]
[Fri Jan 30 22:27:26.129979 2026] [:error] [pid 47663:tid 47673] [client 51.83.7.81:39076] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aXy_zkHGTrgIKCqEYbW1WQAAAkg"]
[Fri Jan 30 22:27:46.809711 2026] [:error] [pid 46912:tid 46925] [client 51.83.7.81:39092] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aXy_4j6yiVW7A9NwFFkLEQAAAAE"]
[Fri Jan 30 22:27:48.777178 2026] [:error] [pid 24711:tid 24729] [client 51.83.7.81:53792] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXy_5K5Gwh4var6T23LJ9AAAAU8"]
[Fri Jan 30 22:27:50.810188 2026] [:error] [pid 38686:tid 38710] [client 51.83.7.81:53798] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXy_5goE8BAjgw1_sAWKmwAAAdQ"]
[Fri Jan 30 22:27:52.800354 2026] [:error] [pid 46913:tid 46965] [client 51.83.7.81:56670] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXy_6DMWmKL8hOfC3uTrAgAAAE4"]
[Fri Jan 30 22:27:54.821168 2026] [:error] [pid 38686:tid 38705] [client 51.83.7.81:56686] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aXy_6goE8BAjgw1_sAWKoAAAAc8"]
[Fri Jan 30 22:27:56.826168 2026] [:error] [pid 38980:tid 39000] [client 51.83.7.81:56700] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aXy_7LYByxUZEaKXdHrExQAAAg0"]
[Fri Jan 30 22:27:58.838517 2026] [:error] [pid 46913:tid 46971] [client 51.83.7.81:56708] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aXy_7jMWmKL8hOfC3uTrFwAAAFQ"]
[Fri Jan 30 22:28:00.833081 2026] [:error] [pid 46914:tid 46983] [client 51.83.7.81:56712] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aXy_8FgSfJ4kZxNKlb_yDAAAAIU"]
[Fri Jan 30 22:28:02.849789 2026] [:error] [pid 24711:tid 24735] [client 51.83.7.81:41048] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXy_8q5Gwh4var6T23LKDAAAAVU"]
[Fri Jan 30 22:28:04.865625 2026] [:error] [pid 46913:tid 46962] [client 51.83.7.81:41058] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aXy_9DMWmKL8hOfC3uTrKQAAAEs"]
[Fri Jan 30 22:28:11.218120 2026] [:error] [pid 46912:tid 46944] [client 51.83.7.81:41074] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXy_-z6yiVW7A9NwFFkLKwAAABQ"]
[Fri Jan 30 22:28:15.053983 2026] [:error] [pid 46912:tid 46948] [client 51.83.7.81:46904] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aXy__z6yiVW7A9NwFFkLLwAAABg"]
[Sat Jan 31 00:56:29.816332 2026] [:error] [pid 59662:tid 59737] [client 88.89.67.172:35520] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXzivQ7k73dlTgySEchL_wAAAJM"]
[Sat Jan 31 00:56:31.820731 2026] [:error] [pid 59662:tid 59718] [client 88.89.67.172:49880] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aXzivw7k73dlTgySEchMBAAAAIA"]
[Sat Jan 31 00:56:33.813303 2026] [:error] [pid 59662:tid 59738] [client 88.89.67.172:49888] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aXziwQ7k73dlTgySEchMCwAAAJQ"]
[Sat Jan 31 00:56:35.812926 2026] [:error] [pid 59662:tid 59725] [client 88.89.67.172:49896] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aXziww7k73dlTgySEchMDwAAAIc"]
[Sat Jan 31 00:56:37.948444 2026] [:error] [pid 60001:tid 60003] [client 88.89.67.172:38018] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aXzixaM2ziQ7JN4IjDxGrAAAAQA"]
[Sat Jan 31 00:56:40.089181 2026] [:error] [pid 59660:tid 59671] [client 88.89.67.172:38024] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXziyCwTX33V6TPUqxPewAAAAAc"]
[Sat Jan 31 00:56:42.229699 2026] [:error] [pid 59748:tid 59760] [client 88.89.67.172:38026] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXziymlxTen-ziDxotR1wQAAAMk"]
[Sat Jan 31 00:56:44.219005 2026] [:error] [pid 59660:tid 59670] [client 88.89.67.172:38032] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aXzizCwTX33V6TPUqxPezQAAAAY"]
[Sat Jan 31 00:56:46.065402 2026] [:error] [pid 59660:tid 59680] [client 88.89.67.172:38046] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aXziziwTX33V6TPUqxPe1wAAABA"]
[Sat Jan 31 00:56:48.065290 2026] [:error] [pid 59748:tid 59761] [client 88.89.67.172:36198] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXzi0GlxTen-ziDxotR11QAAAMo"]
[Sat Jan 31 00:56:50.193735 2026] [:error] [pid 59662:tid 59722] [client 88.89.67.172:36204] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aXzi0g7k73dlTgySEchMJAAAAIQ"]
[Sat Jan 31 00:56:52.184649 2026] [:error] [pid 60001:tid 60012] [client 88.89.67.172:36214] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aXzi1KM2ziQ7JN4IjDxGuwAAAQk"]
[Sat Jan 31 00:56:54.179277 2026] [:error] [pid 59662:tid 59741] [client 88.89.67.172:36220] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aXzi1g7k73dlTgySEchMLQAAAJc"]
[Sat Jan 31 00:56:56.166235 2026] [:error] [pid 59748:tid 59757] [client 88.89.67.172:36236] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aXzi2GlxTen-ziDxotR16QAAAMY"]
[Sat Jan 31 00:56:58.312029 2026] [:error] [pid 59662:tid 59731] [client 88.89.67.172:43158] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXzi2g7k73dlTgySEchMPAAAAI0"]
[Sat Jan 31 00:57:00.443777 2026] [:error] [pid 60001:tid 60012] [client 88.89.67.172:43164] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXzi3KM2ziQ7JN4IjDxGwwAAAQk"]
[Sat Jan 31 00:57:02.588594 2026] [:error] [pid 59660:tid 59667] [client 88.89.67.172:43168] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aXzi3iwTX33V6TPUqxPfBwAAAAM"]
[Sat Jan 31 00:57:04.716903 2026] [:error] [pid 59661:tid 59693] [client 88.89.67.172:43174] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXzi4Jw_qINw5Uk-43XOOwAAAEI"]
[Sat Jan 31 00:57:06.865879 2026] [:error] [pid 59661:tid 59712] [client 88.89.67.172:55136] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aXzi4pw_qINw5Uk-43XORAAAAFU"]
[Sat Jan 31 00:57:09.001427 2026] [:error] [pid 59661:tid 59693] [client 88.89.67.172:55146] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aXzi5Zw_qINw5Uk-43XORwAAAEI"]
[Sat Jan 31 00:57:10.988756 2026] [:error] [pid 60001:tid 60018] [client 88.89.67.172:55158] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aXzi5qM2ziQ7JN4IjDxG0wAAAQ8"]
[Sat Jan 31 00:57:13.133232 2026] [:error] [pid 59660:tid 59676] [client 88.89.67.172:55168] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXzi6SwTX33V6TPUqxPfHwAAAAw"]
[Sat Jan 31 00:57:15.397513 2026] [:error] [pid 59661:tid 59691] [client 88.89.67.172:55182] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aXzi65w_qINw5Uk-43XOWgAAAEA"]
[Sat Jan 31 00:57:17.397469 2026] [:error] [pid 59660:tid 59676] [client 88.89.67.172:60538] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXzi7SwTX33V6TPUqxPfKgAAAAw"]
[Sat Jan 31 00:57:19.387874 2026] [:error] [pid 59662:tid 59739] [client 88.89.67.172:60542] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXzi7w7k73dlTgySEchMcwAAAJU"]
[Sat Jan 31 00:57:21.533430 2026] [:error] [pid 59660:tid 59684] [client 88.89.67.172:60558] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXzi8SwTX33V6TPUqxPfOwAAABQ"]
[Sat Jan 31 00:57:23.522927 2026] [:error] [pid 60001:tid 60025] [client 88.89.67.172:60570] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aXzi86M2ziQ7JN4IjDxG6AAAARY"]
[Sat Jan 31 00:57:25.658119 2026] [:error] [pid 59661:tid 59710] [client 88.89.67.172:60578] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aXzi9Zw_qINw5Uk-43XOYwAAAFM"]
[Sat Jan 31 00:57:48.577287 2026] [:error] [pid 59660:tid 59664] [client 88.89.67.172:54450] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aXzjDCwTX33V6TPUqxPfiAAAAAA"]
[Sat Jan 31 00:57:50.724995 2026] [:error] [pid 59661:tid 59694] [client 88.89.67.172:39208] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aXzjDpw_qINw5Uk-43XOmQAAAEM"]
[Sat Jan 31 00:57:52.865692 2026] [:error] [pid 60001:tid 60014] [client 88.89.67.172:39222] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aXzjEKM2ziQ7JN4IjDxG_gAAAQs"]
[Sat Jan 31 00:57:54.931315 2026] [:error] [pid 59661:tid 59698] [client 88.89.67.172:39238] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aXzjEpw_qINw5Uk-43XOowAAAEc"]
[Sat Jan 31 00:57:57.067992 2026] [:error] [pid 59661:tid 59692] [client 88.89.67.172:36200] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aXzjFZw_qINw5Uk-43XOqQAAAEE"]
[Sat Jan 31 00:57:59.195593 2026] [:error] [pid 59662:tid 59732] [client 88.89.67.172:36208] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXzjFw7k73dlTgySEchM6AAAAI4"]
[Sat Jan 31 00:58:01.326183 2026] [:error] [pid 60001:tid 60010] [client 88.89.67.172:36214] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXzjGaM2ziQ7JN4IjDxHBQAAAQc"]
[Sat Jan 31 00:58:03.458287 2026] [:error] [pid 59748:tid 59761] [client 88.89.67.172:36216] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aXzjG2lxTen-ziDxotR2VwAAAMo"]
[Sat Jan 31 00:58:05.596341 2026] [:error] [pid 59748:tid 59767] [client 88.89.67.172:36218] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aXzjHWlxTen-ziDxotR2XAAAANA"]
[Sat Jan 31 00:58:07.738306 2026] [:error] [pid 59660:tid 59685] [client 88.89.67.172:44824] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aXzjHywTX33V6TPUqxPfpgAAABU"]
[Sat Jan 31 00:58:09.719972 2026] [:error] [pid 60001:tid 60022] [client 88.89.67.172:44826] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aXzjIaM2ziQ7JN4IjDxHGQAAARM"]
[Sat Jan 31 00:58:11.862781 2026] [:error] [pid 60001:tid 60006] [client 88.89.67.172:44842] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aXzjI6M2ziQ7JN4IjDxHHgAAAQM"]
[Sat Jan 31 00:58:13.839730 2026] [:error] [pid 59660:tid 59683] [client 88.89.67.172:44844] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aXzjJSwTX33V6TPUqxPfqwAAABM"]
[Sat Jan 31 00:58:15.977160 2026] [:error] [pid 59661:tid 59697] [client 88.89.67.172:44858] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aXzjJ5w_qINw5Uk-43XOywAAAEY"]
[Sat Jan 31 00:58:17.957285 2026] [:error] [pid 60001:tid 60013] [client 88.89.67.172:45284] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aXzjKaM2ziQ7JN4IjDxHKQAAAQo"]
[Sat Jan 31 00:58:20.092190 2026] [:error] [pid 59661:tid 59697] [client 88.89.67.172:45290] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aXzjLJw_qINw5Uk-43XO0gAAAEY"]
[Sat Jan 31 00:58:22.227608 2026] [:error] [pid 59662:tid 59741] [client 88.89.67.172:45292] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aXzjLg7k73dlTgySEchNEQAAAJc"]
[Sat Jan 31 00:58:24.361296 2026] [:error] [pid 60001:tid 60006] [client 88.89.67.172:45300] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aXzjMKM2ziQ7JN4IjDxHNAAAAQM"]
[Sat Jan 31 00:58:26.495312 2026] [:error] [pid 59661:tid 59694] [client 88.89.67.172:47390] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aXzjMpw_qINw5Uk-43XO2QAAAEM"]
[Sat Jan 31 00:58:28.573349 2026] [:error] [pid 59660:tid 59676] [client 88.89.67.172:47406] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aXzjNCwTX33V6TPUqxPfxAAAAAw"]
[Sat Jan 31 00:58:30.611090 2026] [:error] [pid 59748:tid 59768] [client 88.89.67.172:47410] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aXzjNmlxTen-ziDxotR2eAAAANE"]
[Sat Jan 31 00:58:32.757592 2026] [:error] [pid 59748:tid 59758] [client 88.89.67.172:47416] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aXzjOGlxTen-ziDxotR2egAAAMc"]
[Sat Jan 31 00:58:34.888426 2026] [:error] [pid 59661:tid 59710] [client 88.89.67.172:47432] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aXzjOpw_qINw5Uk-43XO3wAAAFM"]
[Sat Jan 31 00:58:37.020646 2026] [:error] [pid 60001:tid 60006] [client 88.89.67.172:50504] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXzjPaM2ziQ7JN4IjDxHPwAAAQM"]
[Sat Jan 31 00:58:38.998764 2026] [:error] [pid 59660:tid 59686] [client 88.89.67.172:50516] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aXzjPiwTX33V6TPUqxPf1AAAABY"]
[Sat Jan 31 00:58:41.118126 2026] [:error] [pid 59660:tid 59667] [client 88.89.67.172:50530] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXzjQSwTX33V6TPUqxPf2wAAAAM"]
[Sat Jan 31 00:58:43.112768 2026] [:error] [pid 59662:tid 59725] [client 88.89.67.172:50532] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXzjQw7k73dlTgySEchNOwAAAIc"]
[Sat Jan 31 00:58:45.231660 2026] [:error] [pid 59748:tid 59751] [client 88.89.67.172:50538] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXzjRWlxTen-ziDxotR2hQAAAMA"]
[Sat Jan 31 00:59:07.194999 2026] [:error] [pid 60001:tid 60017] [client 88.89.67.172:46950] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXzjW6M2ziQ7JN4IjDxHfwAAAQ4"]
[Sat Jan 31 00:59:09.332288 2026] [:error] [pid 59661:tid 59697] [client 88.89.67.172:43460] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aXzjXZw_qINw5Uk-43XPAQAAAEY"]
[Sat Jan 31 00:59:11.460179 2026] [:error] [pid 59661:tid 59706] [client 88.89.67.172:43462] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXzjX5w_qINw5Uk-43XPCAAAAE8"]
[Sat Jan 31 00:59:13.601633 2026] [:error] [pid 59748:tid 59765] [client 88.89.67.172:43464] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aXzjYWlxTen-ziDxotR2rAAAAM4"]
[Sat Jan 31 00:59:15.589147 2026] [:error] [pid 59660:tid 59682] [client 88.89.67.172:43466] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aXzjYywTX33V6TPUqxPgHgAAABI"]
[Sat Jan 31 00:59:17.718824 2026] [:error] [pid 59660:tid 59676] [client 88.89.67.172:55864] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aXzjZSwTX33V6TPUqxPgIwAAAAw"]
[Sat Jan 31 00:59:19.701783 2026] [:error] [pid 59748:tid 59759] [client 88.89.67.172:55870] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXzjZ2lxTen-ziDxotR2tAAAAMg"]
[Sat Jan 31 00:59:21.827879 2026] [:error] [pid 59661:tid 59699] [client 88.89.67.172:55878] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXzjaZw_qINw5Uk-43XPGAAAAEg"]
[Sat Jan 31 00:59:23.971107 2026] [:error] [pid 59661:tid 59705] [client 88.89.67.172:55892] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXzja5w_qINw5Uk-43XPHQAAAE4"]
[Sat Jan 31 00:59:26.108110 2026] [:error] [pid 60001:tid 60005] [client 88.89.67.172:55908] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXzjbqM2ziQ7JN4IjDxHiQAAAQI"]
[Sat Jan 31 00:59:28.244234 2026] [:error] [pid 59660:tid 59685] [client 88.89.67.172:51088] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXzjcCwTX33V6TPUqxPgPwAAABU"]
[Sat Jan 31 00:59:30.385666 2026] [:error] [pid 59661:tid 59713] [client 88.89.67.172:51098] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXzjcpw_qINw5Uk-43XPJwAAAFY"]
[Sat Jan 31 00:59:32.512072 2026] [:error] [pid 59660:tid 59685] [client 88.89.67.172:51104] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXzjdCwTX33V6TPUqxPgTQAAABU"]
[Sat Jan 31 00:59:34.649912 2026] [:error] [pid 59660:tid 59674] [client 88.89.67.172:51118] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXzjdiwTX33V6TPUqxPgVQAAAAo"]
[Sat Jan 31 00:59:36.788084 2026] [:error] [pid 59748:tid 59758] [client 88.89.67.172:34144] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXzjeGlxTen-ziDxotR2zwAAAMc"]
[Sat Jan 31 00:59:38.912090 2026] [:error] [pid 59661:tid 59701] [client 88.89.67.172:34148] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aXzjepw_qINw5Uk-43XPNgAAAEo"]
[Sat Jan 31 00:59:41.045763 2026] [:error] [pid 59660:tid 59666] [client 88.89.67.172:34160] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXzjfSwTX33V6TPUqxPgaQAAAAI"]
[Sat Jan 31 00:59:43.173391 2026] [:error] [pid 59748:tid 59762] [client 88.89.67.172:34174] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aXzjf2lxTen-ziDxotR21QAAAMs"]
[Sat Jan 31 00:59:45.301769 2026] [:error] [pid 59748:tid 59775] [client 88.89.67.172:34182] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXzjgWlxTen-ziDxotR22gAAANg"]
[Sat Jan 31 00:59:47.441270 2026] [:error] [pid 59660:tid 59683] [client 88.89.67.172:48186] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aXzjgywTX33V6TPUqxPgeAAAABM"]
[Sat Jan 31 00:59:49.567614 2026] [:error] [pid 59662:tid 59741] [client 88.89.67.172:48192] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aXzjhQ7k73dlTgySEchNkQAAAJc"]
[Sat Jan 31 00:59:51.546524 2026] [:error] [pid 59661:tid 59708] [client 88.89.67.172:48194] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aXzjh5w_qINw5Uk-43XPQAAAAFE"]
[Sat Jan 31 00:59:53.676031 2026] [:error] [pid 60001:tid 60016] [client 88.89.67.172:48202] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aXzjiaM2ziQ7JN4IjDxHrAAAAQ0"]
[Sat Jan 31 00:59:55.648654 2026] [:error] [pid 59661:tid 59701] [client 88.89.67.172:48204] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aXzji5w_qINw5Uk-43XPRwAAAEo"]
[Sat Jan 31 00:59:57.776935 2026] [:error] [pid 59660:tid 59667] [client 88.89.67.172:52566] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aXzjjSwTX33V6TPUqxPglgAAAAM"]
[Sat Jan 31 00:59:59.758635 2026] [:error] [pid 59748:tid 59752] [client 88.89.67.172:62613] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXzjj2lxTen-ziDxotR28AAAAME"]
[Sat Jan 31 01:00:01.885682 2026] [:error] [pid 59748:tid 59772] [client 88.89.67.172:52578] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXzjkWlxTen-ziDxotR29QAAANU"]
[Sat Jan 31 01:00:03.863411 2026] [:error] [pid 59660:tid 59677] [client 88.89.67.172:52586] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXzjkywTX33V6TPUqxPgpAAAAA0"]
[Sat Jan 31 01:00:26.100378 2026] [:error] [pid 59662:tid 59722] [client 88.89.67.172:52594] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXzjqg7k73dlTgySEchNvQAAAIQ"]
[Sat Jan 31 01:00:28.248311 2026] [:error] [pid 59662:tid 59725] [client 88.89.67.172:40976] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXzjrA7k73dlTgySEchNwwAAAIc"]
[Sat Jan 31 01:00:30.390577 2026] [:error] [pid 59662:tid 59720] [client 88.89.67.172:40986] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aXzjrg7k73dlTgySEchNxQAAAII"]
[Sat Jan 31 01:00:32.530394 2026] [:error] [pid 59748:tid 59766] [client 88.89.67.172:41000] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXzjsGlxTen-ziDxotR3HAAAAM8"]
[Sat Jan 31 01:00:34.665028 2026] [:error] [pid 59660:tid 59673] [client 88.89.67.172:41006] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aXzjsiwTX33V6TPUqxPg3wAAAAk"]
[Sat Jan 31 01:00:36.804325 2026] [:error] [pid 60001:tid 60022] [client 88.89.67.172:45492] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aXzjtKM2ziQ7JN4IjDxH5AAAARM"]
[Sat Jan 31 01:00:38.944107 2026] [:error] [pid 59661:tid 59699] [client 88.89.67.172:45494] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXzjtpw_qINw5Uk-43XPfwAAAEg"]
[Sat Jan 31 01:00:40.925862 2026] [:error] [pid 59661:tid 59694] [client 88.89.67.172:45510] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXzjuJw_qINw5Uk-43XPgwAAAEM"]
[Sat Jan 31 01:00:43.058059 2026] [:error] [pid 59748:tid 59771] [client 88.89.67.172:45526] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aXzju2lxTen-ziDxotR3LwAAANQ"]
[Sat Jan 31 01:00:45.189932 2026] [:error] [pid 59748:tid 59756] [client 88.89.67.172:45538] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aXzjvWlxTen-ziDxotR3MwAAAMU"]
[Sat Jan 31 01:00:47.326008 2026] [:error] [pid 60001:tid 60015] [client 88.89.67.172:47834] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aXzjv6M2ziQ7JN4IjDxH7gAAAQw"]
[Sat Jan 31 01:00:49.464832 2026] [:error] [pid 59660:tid 59670] [client 88.89.67.172:47848] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXzjwSwTX33V6TPUqxPg9wAAAAY"]
[Sat Jan 31 01:00:51.603652 2026] [:error] [pid 60001:tid 60024] [client 88.89.67.172:47854] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aXzjw6M2ziQ7JN4IjDxH_wAAARU"]
[Sat Jan 31 01:00:53.438672 2026] [:error] [pid 59661:tid 59708] [client 88.89.67.172:47858] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aXzjxZw_qINw5Uk-43XPkgAAAFE"]
[Sat Jan 31 02:11:25.524914 2026] [:error] [pid 59660:tid 59671] [client 149.233.191.20:63841] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aXz0TSwTX33V6TPUqxMCPwAAAAc"]
[Sat Jan 31 02:11:27.715767 2026] [:error] [pid 10720:tid 10730] [client 149.233.191.20:64046] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXz0T0mcu3PWs0UerXLINgAAA0g"]
[Sat Jan 31 02:11:29.939867 2026] [:error] [pid 59748:tid 59752] [client 149.233.191.20:63590] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aXz0UWlxTen-ziDxotSPyAAAAME"]
[Sat Jan 31 02:11:31.978876 2026] [:error] [pid 8386:tid 8398] [client 149.233.191.20:65178] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aXz0U9ZVZWDVqOkRRiJb6wAAAco"]
[Sat Jan 31 02:11:34.084908 2026] [:error] [pid 60001:tid 60007] [client 149.233.191.20:60420] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aXz0VqM2ziQ7JN4IjDxdPwAAAQQ"]
[Sat Jan 31 02:11:36.261025 2026] [:error] [pid 59660:tid 59682] [client 149.233.191.20:63926] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aXz0WCwTX33V6TPUqxMCWgAAABI"]
[Sat Jan 31 02:11:39.428049 2026] [:error] [pid 59660:tid 59675] [client 149.233.191.20:63955] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXz0WywTX33V6TPUqxMCXwAAAAs"]
[Sat Jan 31 02:11:42.794603 2026] [:error] [pid 8386:tid 8412] [client 149.233.191.20:61006] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aXz0XtZVZWDVqOkRRiJcBAAAAdg"]
[Sat Jan 31 02:11:44.855792 2026] [:error] [pid 8354:tid 8379] [client 149.233.191.20:60950] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXz0YN27IpxWjEJXCd8dXwAAAZc"]
[Sat Jan 31 02:11:48.005459 2026] [:error] [pid 10752:tid 10768] [client 149.233.191.20:60891] [client 149.233.191.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXz0ZNnA3-xSNwP9jig36AAAA4o"]
[Sat Jan 31 03:25:44.150512 2026] [:error] [pid 7999:tid 8077] [client 20.78.152.240:34457] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0FuB44Pt5VkBPGzznxOAAAAI4"]
[Sat Jan 31 03:25:44.639324 2026] [:error] [pid 7997:tid 8032] [client 20.78.152.240:13511] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0FuBWqEFkwQN5MQrcOiAAAABc"]
[Sat Jan 31 03:25:45.120624 2026] [:error] [pid 7999:tid 8081] [client 20.78.152.240:35680] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0FuR44Pt5VkBPGzznxOQAAAJI"]
[Sat Jan 31 03:25:45.612312 2026] [:error] [pid 7998:tid 8049] [client 20.78.152.240:13534] [client 20.78.152.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aX0FubacrQg_B7dixHHW-QAAAE0"]
[Sat Jan 31 04:08:12.863291 2026] [:error] [pid 39339:tid 39353] [client 74.248.24.238:24878] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Jan 31 04:43:40.774480 2026] [:error] [pid 39244:tid 39333] [client 43.135.144.81:39380] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aX0X_Ho-KRTvg3jHEDzFnQAAAJc"]
[Sat Jan 31 04:59:09.302134 2026] [:error] [pid 39339:tid 39342] [client 43.166.246.180:39352] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aX0bncWi-IjigR3oHY6KOgAAAME"]
[Sat Jan 31 05:51:53.115498 2026] [:error] [pid 20836:tid 20844] [client 135.181.180.59:32032] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX0n-YACllgWRWVrYITpEAAAAUM"]
[Sat Jan 31 05:51:54.945106 2026] [:error] [pid 39242:tid 39263] [client 135.181.180.59:22916] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aX0n-tOgXnkKGGSSCINwxAAAAAk"]
[Sat Jan 31 05:51:56.920201 2026] [:error] [pid 39242:tid 39259] [client 135.181.180.59:22920] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX0n_NOgXnkKGGSSCINwxwAAAAU"]
[Sat Jan 31 05:51:58.749758 2026] [:error] [pid 20836:tid 20852] [client 135.181.180.59:22926] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aX0n_oACllgWRWVrYITpGwAAAUs"]
[Sat Jan 31 05:52:00.713759 2026] [:error] [pid 20210:tid 20225] [client 135.181.180.59:22934] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX0oAHKy7OGBlTY8MCe6uQAAAQ0"]
[Sat Jan 31 05:52:02.693951 2026] [:error] [pid 20836:tid 20861] [client 135.181.180.59:22948] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aX0oAoACllgWRWVrYITpKAAAAVQ"]
[Sat Jan 31 06:20:20.909370 2026] [:error] [pid 20210:tid 20221] [client 158.158.35.58:45013] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Sat Jan 31 07:39:44.695043 2026] [:error] [pid 20210:tid 20216] [client 4.193.194.148:33415] [client 4.193.194.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.194.148, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aX1BQHKy7OGBlTY8MCfUAwAAAQQ"]
[Sat Jan 31 07:39:44.698943 2026] [:error] [pid 20210:tid 20216] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 31 07:39:44.795970 2026] [:error] [pid 20210:tid 20230] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Jan 31 07:39:44.888062 2026] [:error] [pid 20210:tid 20228] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Jan 31 07:39:44.984626 2026] [:error] [pid 20210:tid 20214] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Jan 31 07:39:45.078175 2026] [:error] [pid 20210:tid 20217] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Jan 31 07:39:45.177560 2026] [:error] [pid 20210:tid 20227] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Jan 31 07:39:45.269598 2026] [:error] [pid 20210:tid 20219] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Jan 31 07:39:45.361929 2026] [:error] [pid 20210:tid 20213] [client 4.193.194.148:33415] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Sat Jan 31 07:39:45.546048 2026] [:error] [pid 20210:tid 20218] [client 4.193.194.148:33415] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/"] [unique_id "aX1BQXKy7OGBlTY8MCfUDAAAAQY"]
[Sat Jan 31 07:39:45.897480 2026] [:error] [pid 52415:tid 52418] [client 4.193.194.148:37195] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/"] [unique_id "aX1BQZ-DUxb_li2fU6IdDQAAAYE"]
[Sat Jan 31 07:39:46.247533 2026] [:error] [pid 52520:tid 52527] [client 4.193.194.148:36097] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/"] [unique_id "aX1BQmS_bInnwm0xKSqvFwAAAkU"]
[Sat Jan 31 07:39:46.597175 2026] [:error] [pid 52451:tid 52473] [client 4.193.194.148:36127] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/"] [unique_id "aX1BQnubVy7MGYWM2NYtPAAAAdM"]
[Sat Jan 31 07:52:24.522670 2026] [:error] [pid 39243:tid 39301] [client 4.193.194.148:51882] [client 4.193.194.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aX1EOBBW1k4JK8a4v0ZohAAAAFM"]
[Sat Jan 31 07:52:24.965744 2026] [:error] [pid 20210:tid 20220] [client 4.193.194.148:62322] [client 4.193.194.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aX1EOHKy7OGBlTY8MCfWLQAAAQg"]
[Sat Jan 31 07:52:25.318720 2026] [:error] [pid 20210:tid 20221] [client 4.193.194.148:51852] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aX1EOXKy7OGBlTY8MCfWLwAAAQk"]
[Sat Jan 31 07:52:25.667574 2026] [:error] [pid 20836:tid 20859] [client 4.193.194.148:7331] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aX1EOYACllgWRWVrYIQHzAAAAVI"]
[Sat Jan 31 07:52:26.018262 2026] [:error] [pid 20836:tid 20846] [client 4.193.194.148:53943] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aX1EOoACllgWRWVrYIQHzgAAAUU"]
[Sat Jan 31 09:23:31.278729 2026] [:error] [pid 39339:tid 39363] [client 20.100.196.146:18458] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Sat Jan 31 10:50:24.523260 2026] [:error] [pid 52451:tid 52468] [client 3.127.203.41:42747] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Jan 31 15:33:17.587912 2026] [:error] [pid 13863:tid 13869] [client 51.83.7.88:49598] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX2wPebxuFqFYLV42hThvAAAAQI"]
[Sat Jan 31 15:33:19.616816 2026] [:error] [pid 18803:tid 18822] [client 51.83.7.88:58916] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aX2wPy2kTcRk9EBIxOFMqQAAAhA"]
[Sat Jan 31 15:33:21.707379 2026] [:error] [pid 59581:tid 59584] [client 51.83.7.88:58930] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aX2wQbpwqlqnnPNSmoG-fwAAA4A"]
[Sat Jan 31 15:33:23.961488 2026] [:error] [pid 18773:tid 18777] [client 51.83.7.88:55070] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aX2wQ9Hy21j24IPrB1XBwwAAAYI"]
[Sat Jan 31 15:33:25.959623 2026] [:error] [pid 59581:tid 59595] [client 51.83.7.88:55080] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX2wRbpwqlqnnPNSmoG-gwAAA4s"]
[Sat Jan 31 15:33:28.020404 2026] [:error] [pid 59582:tid 59622] [client 51.83.7.88:55096] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX2wSI5dwpvvp1Lc6f1JQQAAA8s"]
[Sat Jan 31 15:33:30.105187 2026] [:error] [pid 13863:tid 13887] [client 51.83.7.88:55110] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX2wSubxuFqFYLV42hThxgAAARQ"]
[Sat Jan 31 15:33:32.226751 2026] [:error] [pid 18803:tid 18823] [client 51.83.7.88:37276] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX2wTC2kTcRk9EBIxOFMvQAAAhE"]
[Sat Jan 31 15:33:34.440846 2026] [:error] [pid 39242:tid 39265] [client 51.83.7.88:37282] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aX2wTtOgXnkKGGSSCIMCawAAAAs"]
[Sat Jan 31 15:33:36.436065 2026] [:error] [pid 18803:tid 18811] [client 51.83.7.88:37284] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aX2wUC2kTcRk9EBIxOFMwAAAAgU"]
[Sat Jan 31 15:33:38.399662 2026] [:error] [pid 39339:tid 39364] [client 51.83.7.88:37296] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aX2wUsWi-IjigR3oHY4s9AAAANc"]
[Sat Jan 31 15:33:40.493302 2026] [:error] [pid 31465:tid 31500] [client 51.83.7.88:37312] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aX2wVDkaGp475ez0mlytqwAAAkY"]
[Sat Jan 31 15:33:42.586759 2026] [:error] [pid 59523:tid 59528] [client 51.83.7.88:45034] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aX2wVpEkxOIGmVhqUWJQuwAAAwE"]
[Sat Jan 31 15:33:44.659310 2026] [:error] [pid 13863:tid 13886] [client 51.83.7.88:45046] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aX2wWObxuFqFYLV42hTh1wAAARM"]
[Sat Jan 31 15:33:46.601413 2026] [:error] [pid 18773:tid 18796] [client 51.83.7.88:45054] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aX2wWtHy21j24IPrB1XB4wAAAZU"]
[Sat Jan 31 15:33:48.586186 2026] [:error] [pid 59523:tid 59549] [client 51.83.7.88:45056] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aX2wXJEkxOIGmVhqUWJQwwAAAxY"]
[Sat Jan 31 15:33:50.561680 2026] [:error] [pid 39242:tid 39278] [client 51.83.7.88:45058] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aX2wXtOgXnkKGGSSCIMCgQAAABg"]
[Sat Jan 31 15:33:52.488301 2026] [:error] [pid 39339:tid 39343] [client 51.83.7.88:60398] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX2wYMWi-IjigR3oHY4s_gAAAMI"]
[Sat Jan 31 15:33:54.660395 2026] [:error] [pid 59523:tid 59528] [client 51.83.7.88:60414] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aX2wYpEkxOIGmVhqUWJQxQAAAwE"]
[Sat Jan 31 15:33:56.594354 2026] [:error] [pid 39242:tid 39267] [client 51.83.7.88:60426] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX2wZNOgXnkKGGSSCIMCiQAAAA0"]
[Sat Jan 31 15:33:58.641616 2026] [:error] [pid 39339:tid 39346] [client 51.83.7.88:60434] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX2wZsWi-IjigR3oHY4tDQAAAMU"]
[Sat Jan 31 15:34:00.550768 2026] [:error] [pid 31465:tid 31514] [client 51.83.7.88:60442] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX2waDkaGp475ez0mlytugAAAlQ"]
[Sat Jan 31 15:34:02.623708 2026] [:error] [pid 31430:tid 31455] [client 51.83.7.88:56622] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX2wascb14YPxXg_g5EaIgAAAFU"]
[Sat Jan 31 15:34:04.564050 2026] [:error] [pid 31430:tid 31442] [client 51.83.7.88:56636] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX2wbMcb14YPxXg_g5EaIwAAAEg"]
[Sat Jan 31 15:34:06.481920 2026] [:error] [pid 39339:tid 39350] [client 51.83.7.88:56642] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX2wbsWi-IjigR3oHY4tGwAAAMk"]
[Sat Jan 31 15:34:08.370925 2026] [:error] [pid 18803:tid 18827] [client 51.83.7.88:56648] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX2wcC2kTcRk9EBIxOFM0QAAAhU"]
[Sat Jan 31 15:34:10.291881 2026] [:error] [pid 59581:tid 59600] [client 51.83.7.88:56650] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aX2wcrpwqlqnnPNSmoG-pQAAA5A"]
[Sat Jan 31 15:34:12.342054 2026] [:error] [pid 18773:tid 18779] [client 51.83.7.88:36270] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aX2wdNHy21j24IPrB1XB8AAAAYQ"]
[Sat Jan 31 15:34:14.260784 2026] [:error] [pid 39339:tid 39350] [client 51.83.7.88:36276] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aX2wdsWi-IjigR3oHY4tJgAAAMk"]
[Sat Jan 31 15:34:34.560575 2026] [:error] [pid 18773:tid 18782] [client 51.83.7.88:36286] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX2witHy21j24IPrB1XCBAAAAYc"]
[Sat Jan 31 15:34:36.540470 2026] [:error] [pid 18773:tid 18789] [client 51.83.7.88:46926] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX2wjNHy21j24IPrB1XCBQAAAY4"]
[Sat Jan 31 15:34:38.547632 2026] [:error] [pid 31430:tid 31457] [client 51.83.7.88:46942] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX2wjscb14YPxXg_g5EaMwAAAFc"]
[Sat Jan 31 15:34:40.603554 2026] [:error] [pid 59582:tid 59625] [client 51.83.7.88:46948] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aX2wkI5dwpvvp1Lc6f1JmAAAA84"]
[Sat Jan 31 15:34:42.630482 2026] [:error] [pid 59523:tid 59527] [client 51.83.7.88:35392] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aX2wkpEkxOIGmVhqUWJQ4QAAAwA"]
[Sat Jan 31 15:34:44.652116 2026] [:error] [pid 18773:tid 18776] [client 51.83.7.88:35394] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aX2wlNHy21j24IPrB1XCDwAAAYE"]
[Sat Jan 31 15:34:46.696259 2026] [:error] [pid 59581:tid 59592] [client 51.83.7.88:35402] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aX2wlrpwqlqnnPNSmoG-xgAAA4g"]
[Sat Jan 31 15:34:48.751405 2026] [:error] [pid 31465:tid 31505] [client 51.83.7.88:35410] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX2wmDkaGp475ez0mlyt3AAAAks"]
[Sat Jan 31 15:34:50.783996 2026] [:error] [pid 39339:tid 39362] [client 51.83.7.88:35416] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aX2wmsWi-IjigR3oHY4tYAAAANU"]
[Sat Jan 31 15:34:54.502846 2026] [:error] [pid 59523:tid 59540] [client 51.83.7.88:51946] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX2wnpEkxOIGmVhqUWJQ6AAAAw0"]
[Sat Jan 31 15:34:58.524513 2026] [:error] [pid 18803:tid 18821] [client 51.83.7.88:51960] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX2woi2kTcRk9EBIxOFM9QAAAg8"]
[Sat Jan 31 18:31:44.528085 2026] [:error] [pid 44533:tid 44584] [client 138.124.66.82:59698] [client 138.124.66.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aX3aEINjc98kHMNVmnstpwAAAdU"]
[Sat Jan 31 18:54:25.899718 2026] [:error] [pid 44533:tid 44587] [client 51.75.119.173:37456] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX3fYYNjc98kHMNVmnsx0AAAAdg"]
[Sat Jan 31 18:54:27.978071 2026] [:error] [pid 59582:tid 59618] [client 51.75.119.173:34876] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aX3fY45dwpvvp1Lc6f1oJwAAA8c"]
[Sat Jan 31 18:54:30.011265 2026] [:error] [pid 39339:tid 39349] [client 51.75.119.173:34884] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aX3fZsWi-IjigR3oHY5eJgAAAMg"]
[Sat Jan 31 18:54:32.035872 2026] [:error] [pid 44533:tid 44567] [client 51.75.119.173:34890] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aX3faINjc98kHMNVmnsx2gAAAcQ"]
[Sat Jan 31 18:54:33.907448 2026] [:error] [pid 31465:tid 31508] [client 51.75.119.173:34900] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aX3faTkaGp475ez0mlzmawAAAk4"]
[Sat Jan 31 18:54:35.975636 2026] [:error] [pid 31465:tid 31512] [client 51.75.119.173:34910] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX3fazkaGp475ez0mlzmcgAAAlI"]
[Sat Jan 31 18:54:38.006890 2026] [:error] [pid 39339:tid 39362] [client 51.75.119.173:33534] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX3fbsWi-IjigR3oHY5eLAAAANU"]
[Sat Jan 31 18:54:39.912144 2026] [:error] [pid 44533:tid 44566] [client 51.75.119.173:33538] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aX3fb4Njc98kHMNVmnsx5QAAAcM"]
[Sat Jan 31 18:54:41.952885 2026] [:error] [pid 59523:tid 59551] [client 51.75.119.173:33540] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX3fcZEkxOIGmVhqUWJwHQAAAxg"]
[Sat Jan 31 18:54:43.825530 2026] [:error] [pid 44532:tid 44553] [client 51.75.119.173:33556] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX3fc8H-68uYbAtfrZ13OwAAAVE"]
[Sat Jan 31 18:54:45.716935 2026] [:error] [pid 31465:tid 31514] [client 51.75.119.173:33558] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aX3fdTkaGp475ez0mlzmegAAAlQ"]
[Sat Jan 31 18:54:47.739093 2026] [:error] [pid 59523:tid 59529] [client 51.75.119.173:36834] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aX3fd5EkxOIGmVhqUWJwIgAAAwI"]
[Sat Jan 31 18:54:49.622106 2026] [:error] [pid 39242:tid 39276] [client 51.75.119.173:36850] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aX3fedOgXnkKGGSSCIMnYAAAABY"]
[Sat Jan 31 18:54:51.609288 2026] [:error] [pid 18803:tid 18825] [client 51.75.119.173:36856] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aX3fey2kTcRk9EBIxOF3RwAAAhM"]
[Sat Jan 31 18:54:53.622985 2026] [:error] [pid 59582:tid 59624] [client 51.75.119.173:36868] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX3ffY5dwpvvp1Lc6f1oNQAAA80"]
[Sat Jan 31 18:54:55.616845 2026] [:error] [pid 39242:tid 39262] [client 51.75.119.173:36878] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX3ff9OgXnkKGGSSCIMnZQAAAAg"]
[Sat Jan 31 18:54:57.660399 2026] [:error] [pid 31465:tid 31508] [client 51.75.119.173:48290] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aX3fgTkaGp475ez0mlzmiQAAAk4"]
[Sat Jan 31 18:54:59.553512 2026] [:error] [pid 44533:tid 44582] [client 51.75.119.173:48292] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX3fg4Njc98kHMNVmnsx7wAAAdM"]
[Sat Jan 31 18:55:01.572689 2026] [:error] [pid 31430:tid 31439] [client 51.75.119.173:48298] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aX3fhccb14YPxXg_g5E5jwAAAEU"]
[Sat Jan 31 18:55:03.594012 2026] [:error] [pid 39242:tid 39262] [client 51.75.119.173:48306] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aX3fh9OgXnkKGGSSCIMncAAAAAg"]
[Sat Jan 31 18:55:05.605193 2026] [:error] [pid 44533:tid 44575] [client 51.75.119.173:48322] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aX3fiYNjc98kHMNVmnsx-AAAAcw"]
[Sat Jan 31 18:55:07.471946 2026] [:error] [pid 59582:tid 59616] [client 51.75.119.173:51538] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX3fi45dwpvvp1Lc6f1oPAAAA8U"]
[Sat Jan 31 18:55:09.509964 2026] [:error] [pid 44533:tid 44578] [client 51.75.119.173:51548] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aX3fjYNjc98kHMNVmnsx-wAAAc8"]
[Sat Jan 31 18:55:11.381056 2026] [:error] [pid 39339:tid 39354] [client 51.75.119.173:51560] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aX3fj8Wi-IjigR3oHY5eTAAAAM0"]
[Sat Jan 31 18:55:13.409304 2026] [:error] [pid 39339:tid 39343] [client 51.75.119.173:51564] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aX3fkcWi-IjigR3oHY5eUgAAAMI"]
[Sat Jan 31 18:55:15.409690 2026] [:error] [pid 44533:tid 44566] [client 51.75.119.173:51574] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX3fk4Njc98kHMNVmnsx_wAAAcM"]
[Sat Jan 31 18:55:17.408272 2026] [:error] [pid 18803:tid 18814] [client 51.75.119.173:47088] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aX3flS2kTcRk9EBIxOF3XgAAAgg"]
[Sat Jan 31 18:55:19.412581 2026] [:error] [pid 44532:tid 44556] [client 51.75.119.173:47092] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aX3fl8H-68uYbAtfrZ13WgAAAVQ"]
[Sat Jan 31 18:55:21.424873 2026] [:error] [pid 18803:tid 18823] [client 51.75.119.173:47106] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX3fmS2kTcRk9EBIxOF3ZAAAAhE"]
[Sat Jan 31 18:55:23.434288 2026] [:error] [pid 39339:tid 39353] [client 51.75.119.173:47114] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX3fm8Wi-IjigR3oHY5eYgAAAMw"]
[Sat Jan 31 18:55:44.564102 2026] [:error] [pid 59582:tid 59636] [client 51.75.119.173:54764] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aX3fsI5dwpvvp1Lc6f1oZAAAA9c"]
[Sat Jan 31 18:55:46.519964 2026] [:error] [pid 44533:tid 44572] [client 51.75.119.173:57906] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aX3fsoNjc98kHMNVmnsyHwAAAck"]
[Sat Jan 31 18:55:48.507687 2026] [:error] [pid 39242:tid 39266] [client 51.75.119.173:38430] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aX3ftNOgXnkKGGSSCIMnnAAAAAw"]
[Sat Jan 31 18:55:50.520817 2026] [:error] [pid 44533:tid 44573] [client 51.75.119.173:38432] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aX3ftoNjc98kHMNVmnsyIQAAAco"]
[Sat Jan 31 18:55:52.537176 2026] [:error] [pid 44533:tid 44569] [client 51.75.119.173:38442] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX3fuINjc98kHMNVmnsyIwAAAcY"]
[Sat Jan 31 18:55:54.528580 2026] [:error] [pid 44532:tid 44556] [client 51.75.119.173:38454] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aX3fusH-68uYbAtfrZ13eQAAAVQ"]
[Sat Jan 31 18:55:56.532265 2026] [:error] [pid 44533:tid 44563] [client 51.75.119.173:38462] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aX3fvINjc98kHMNVmnsyKAAAAcA"]
[Sat Jan 31 18:55:58.537475 2026] [:error] [pid 18773:tid 18779] [client 51.75.119.173:35688] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aX3fvtHy21j24IPrB1XemwAAAYQ"]
[Sat Jan 31 18:56:00.526514 2026] [:error] [pid 31465:tid 31514] [client 51.75.119.173:35694] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aX3fwDkaGp475ez0mlzm3wAAAlQ"]
[Sat Jan 31 18:56:02.514592 2026] [:error] [pid 44533:tid 44570] [client 51.75.119.173:35702] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aX3fwoNjc98kHMNVmnsyMQAAAcc"]
[Sat Jan 31 18:56:04.522191 2026] [:error] [pid 39339:tid 39348] [client 51.75.119.173:35712] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aX3fxMWi-IjigR3oHY5emwAAAMc"]
[Sat Jan 31 18:56:06.361128 2026] [:error] [pid 39339:tid 39352] [client 51.75.119.173:35726] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aX3fxsWi-IjigR3oHY5enAAAAMs"]
[Sat Jan 31 18:56:08.348032 2026] [:error] [pid 39242:tid 39262] [client 51.75.119.173:37988] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aX3fyNOgXnkKGGSSCIMnrwAAAAg"]
[Sat Jan 31 18:56:10.357880 2026] [:error] [pid 18803:tid 18829] [client 51.75.119.173:38002] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aX3fyi2kTcRk9EBIxOF3lwAAAhc"]
[Sat Jan 31 18:56:12.349150 2026] [:error] [pid 39242:tid 39273] [client 51.75.119.173:38012] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aX3fzNOgXnkKGGSSCIMntQAAABM"]
[Sat Jan 31 18:56:14.334443 2026] [:error] [pid 31465:tid 31518] [client 51.75.119.173:38026] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aX3fzjkaGp475ez0mlzm6QAAAlg"]
[Sat Jan 31 18:56:16.342207 2026] [:error] [pid 59582:tid 59618] [client 51.75.119.173:38038] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aX3f0I5dwpvvp1Lc6f1odQAAA8c"]
[Sat Jan 31 18:56:18.329660 2026] [:error] [pid 44532:tid 44547] [client 51.75.119.173:33936] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX3f0sH-68uYbAtfrZ13jQAAAUs"]
[Sat Jan 31 18:56:20.162743 2026] [:error] [pid 44533:tid 44573] [client 51.75.119.173:33940] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aX3f1INjc98kHMNVmnsyPwAAAco"]
[Sat Jan 31 18:56:22.153139 2026] [:error] [pid 44532:tid 44545] [client 51.75.119.173:33948] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aX3f1sH-68uYbAtfrZ13kwAAAUk"]
[Sat Jan 31 18:56:24.153245 2026] [:error] [pid 39242:tid 39277] [client 51.75.119.173:33956] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aX3f2NOgXnkKGGSSCIMnuAAAABc"]
[Sat Jan 31 18:56:26.140207 2026] [:error] [pid 39339:tid 39348] [client 51.75.119.173:33964] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX3f2sWi-IjigR3oHY5erQAAAMc"]
[Sat Jan 31 18:56:28.140372 2026] [:error] [pid 18803:tid 18826] [client 51.75.119.173:39210] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aX3f3C2kTcRk9EBIxOF3oAAAAhQ"]
[Sat Jan 31 18:56:29.974619 2026] [:error] [pid 39242:tid 39274] [client 51.75.119.173:39212] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX3f3dOgXnkKGGSSCIMnwQAAABQ"]
[Sat Jan 31 18:56:31.965411 2026] [:error] [pid 31465:tid 31494] [client 51.75.119.173:39214] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX3f3zkaGp475ez0mlzm-wAAAkA"]
[Sat Jan 31 18:56:33.967749 2026] [:error] [pid 39339:tid 39341] [client 51.75.119.173:39224] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX3f4cWi-IjigR3oHY5etgAAAMA"]
[Sat Jan 31 18:56:35.956969 2026] [:error] [pid 59582:tid 59614] [client 51.75.119.173:39230] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX3f445dwpvvp1Lc6f1ofwAAA8M"]
[Sat Jan 31 18:56:37.806048 2026] [:error] [pid 31430:tid 31435] [client 51.75.119.173:34140] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aX3f5ccb14YPxXg_g5E53AAAAEE"]
[Sat Jan 31 18:56:39.794683 2026] [:error] [pid 39242:tid 39261] [client 51.75.119.173:34154] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aX3f59OgXnkKGGSSCIMnyAAAAAc"]
[Sat Jan 31 18:56:41.788018 2026] [:error] [pid 59523:tid 59533] [client 51.75.119.173:34168] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aX3f6ZEkxOIGmVhqUWJwcgAAAwY"]
[Sat Jan 31 18:57:01.913864 2026] [:error] [pid 31465:tid 31504] [client 51.75.119.173:34172] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aX3f_TkaGp475ez0mlznIgAAAko"]
[Sat Jan 31 18:57:03.711972 2026] [:error] [pid 18803:tid 18827] [client 51.75.119.173:45638] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aX3f_y2kTcRk9EBIxOF3tAAAAhU"]
[Sat Jan 31 18:57:05.696271 2026] [:error] [pid 59523:tid 59549] [client 51.75.119.173:45648] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX3gAZEkxOIGmVhqUWJwhgAAAxY"]
[Sat Jan 31 18:57:07.679151 2026] [:error] [pid 39339:tid 39351] [client 51.75.119.173:45000] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX3gA8Wi-IjigR3oHY5e6QAAAMo"]
[Sat Jan 31 18:57:09.512341 2026] [:error] [pid 39339:tid 39361] [client 51.75.119.173:45012] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX3gBcWi-IjigR3oHY5e7AAAANQ"]
[Sat Jan 31 18:57:11.506020 2026] [:error] [pid 39242:tid 39277] [client 51.75.119.173:45016] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX3gB9OgXnkKGGSSCIMn4AAAABc"]
[Sat Jan 31 18:57:13.490537 2026] [:error] [pid 44532:tid 44537] [client 51.75.119.173:45026] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX3gCcH-68uYbAtfrZ13swAAAUE"]
[Sat Jan 31 18:57:15.324588 2026] [:error] [pid 59582:tid 59613] [client 51.75.119.173:45030] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX3gC45dwpvvp1Lc6f1okwAAA8I"]
[Sat Jan 31 18:57:17.319080 2026] [:error] [pid 31465:tid 31504] [client 51.75.119.173:35732] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX3gDTkaGp475ez0mlznLwAAAko"]
[Sat Jan 31 18:57:19.323462 2026] [:error] [pid 31430:tid 31442] [client 51.75.119.173:35736] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX3gD8cb14YPxXg_g5E5_QAAAEg"]
[Sat Jan 31 18:57:21.317106 2026] [:error] [pid 39242:tid 39272] [client 51.75.119.173:35748] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aX3gEdOgXnkKGGSSCIMn5gAAABI"]
[Sat Jan 31 18:57:23.306798 2026] [:error] [pid 59523:tid 59543] [client 51.75.119.173:35764] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aX3gE5EkxOIGmVhqUWJwlAAAAxA"]
[Sat Jan 31 18:57:25.292897 2026] [:error] [pid 39339:tid 39344] [client 51.75.119.173:35772] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX3gFcWi-IjigR3oHY5e-wAAAMM"]
[Sat Jan 31 18:57:27.126883 2026] [:error] [pid 18803:tid 18821] [client 51.75.119.173:35784] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aX3gFy2kTcRk9EBIxOF30QAAAg8"]
[Sat Jan 31 18:57:29.119211 2026] [:error] [pid 39339:tid 39347] [client 51.75.119.173:37844] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aX3gGcWi-IjigR3oHY5fAgAAAMY"]
[Sat Jan 31 18:57:31.101289 2026] [:error] [pid 39339:tid 39348] [client 51.75.119.173:37854] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aX3gG8Wi-IjigR3oHY5fBAAAAMc"]
[Sat Jan 31 18:57:33.086499 2026] [:error] [pid 31465:tid 31508] [client 51.75.119.173:37868] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aX3gHTkaGp475ez0mlznQAAAAk4"]
[Sat Jan 31 18:57:34.924238 2026] [:error] [pid 18803:tid 18828] [client 51.75.119.173:37874] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aX3gHi2kTcRk9EBIxOF32QAAAhY"]
[Sat Jan 31 18:57:36.920755 2026] [:error] [pid 18803:tid 18807] [client 51.75.119.173:37876] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aX3gIC2kTcRk9EBIxOF32wAAAgE"]
[Sat Jan 31 18:57:38.913701 2026] [:error] [pid 31465:tid 31516] [client 51.75.119.173:39620] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aX3gIjkaGp475ez0mlznSAAAAlY"]
[Sat Jan 31 18:57:40.899896 2026] [:error] [pid 59582:tid 59613] [client 51.75.119.173:39626] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aX3gJI5dwpvvp1Lc6f1omgAAA8I"]
[Sat Jan 31 18:57:42.734258 2026] [:error] [pid 59523:tid 59531] [client 51.75.119.173:39634] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aX3gJpEkxOIGmVhqUWJwnQAAAwQ"]
[Sat Jan 31 18:57:44.741309 2026] [:error] [pid 18803:tid 18818] [client 51.75.119.173:39644] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aX3gKC2kTcRk9EBIxOF4FQAAAgw"]
[Sat Jan 31 18:57:46.731844 2026] [:error] [pid 44533:tid 44567] [client 51.75.119.173:39654] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX3gKoNjc98kHMNVmnsybwAAAcQ"]
[Sat Jan 31 18:57:48.725365 2026] [:error] [pid 44532:tid 44540] [client 51.75.119.173:51846] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aX3gLMH-68uYbAtfrZ13vwAAAUQ"]
[Sat Jan 31 18:57:50.719771 2026] [:error] [pid 18803:tid 18814] [client 51.75.119.173:51854] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aX3gLi2kTcRk9EBIxOF4HAAAAgg"]
[Sat Jan 31 18:57:52.735673 2026] [:error] [pid 31465:tid 31496] [client 51.75.119.173:51864] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX3gMDkaGp475ez0mlznXQAAAkI"]
[Sat Jan 31 18:57:54.728694 2026] [:error] [pid 44532:tid 44553] [client 51.75.119.173:51874] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX3gMsH-68uYbAtfrZ13yAAAAVE"]
[Sat Jan 31 18:57:56.722346 2026] [:error] [pid 18773:tid 18783] [client 51.75.119.173:51886] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aX3gNNHy21j24IPrB1Xe6gAAAYg"]
[Sat Jan 31 18:57:58.708620 2026] [:error] [pid 18803:tid 18829] [client 51.75.119.173:47246] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aX3gNi2kTcRk9EBIxOF4IwAAAhc"]
[Sat Jan 31 18:58:18.977390 2026] [:error] [pid 18803:tid 18822] [client 51.75.119.173:47258] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX3gSi2kTcRk9EBIxOF4QgAAAhA"]
[Sat Jan 31 18:58:20.925456 2026] [:error] [pid 59582:tid 59632] [client 51.75.119.173:54532] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX3gTI5dwpvvp1Lc6f1otQAAA9M"]
[Sat Jan 31 18:58:22.760140 2026] [:error] [pid 18773:tid 18775] [client 51.75.119.173:54544] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aX3gTtHy21j24IPrB1Xe9gAAAYA"]
[Sat Jan 31 18:58:24.749640 2026] [:error] [pid 39242:tid 39257] [client 51.75.119.173:54550] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aX3gUNOgXnkKGGSSCIMoKwAAAAM"]
[Sat Jan 31 18:58:26.742815 2026] [:error] [pid 18803:tid 18815] [client 51.75.119.173:54552] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aX3gUi2kTcRk9EBIxOF4SAAAAgk"]
[Sat Jan 31 18:58:28.744105 2026] [:error] [pid 39339:tid 39343] [client 51.75.119.173:45294] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX3gVMWi-IjigR3oHY5fTwAAAMI"]
[Sat Jan 31 18:58:30.735623 2026] [:error] [pid 39339:tid 39359] [client 51.75.119.173:45304] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aX3gVsWi-IjigR3oHY5fUgAAANI"]
[Sat Jan 31 18:58:32.567689 2026] [:error] [pid 44533:tid 44568] [client 51.75.119.173:45320] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aX3gWINjc98kHMNVmnsygQAAAcU"]
[Sat Jan 31 20:07:10.806410 2026] [:error] [pid 44533:tid 44584] [client 91.137.27.140:46701] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aX3wboNjc98kHMNVmns-NgAAAdU"]
[Sat Jan 31 20:07:12.797181 2026] [:error] [pid 44533:tid 44576] [client 91.137.27.140:60220] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX3wcINjc98kHMNVmns-OAAAAc0"]
[Sat Jan 31 20:07:14.804846 2026] [:error] [pid 59582:tid 59622] [client 91.137.27.140:44454] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aX3wco5dwpvvp1Lc6f1yvQAAA8s"]
[Sat Jan 31 20:07:16.805375 2026] [:error] [pid 18803:tid 18829] [client 91.137.27.140:3197] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aX3wdC2kTcRk9EBIxOGGYwAAAhc"]
[Sat Jan 31 20:07:18.816333 2026] [:error] [pid 39339:tid 39348] [client 91.137.27.140:25645] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aX3wdsWi-IjigR3oHY5vIAAAAMc"]
[Sat Jan 31 20:07:20.834250 2026] [:error] [pid 59523:tid 59538] [client 91.137.27.140:29796] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aX3weJEkxOIGmVhqUWJ7XQAAAws"]
[Sat Jan 31 20:07:22.852715 2026] [:error] [pid 31465:tid 31514] [client 91.137.27.140:54197] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aX3wejkaGp475ez0mlz85QAAAlQ"]
[Sat Jan 31 20:07:24.875038 2026] [:error] [pid 59582:tid 59637] [client 91.137.27.140:1992] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aX3wfI5dwpvvp1Lc6f1yyAAAA9g"]
[Sat Jan 31 20:28:26.235827 2026] [:error] [pid 31465:tid 31500] [client 106.227.49.113:39267] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aX31ajkaGp475ez0mlwEagAAAkY"]
[Sat Jan 31 21:13:10.771055 2026] [:error] [pid 18803:tid 18817] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Jan 31 21:13:10.887457 2026] [:error] [pid 18803:tid 18818] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Sat Jan 31 21:13:11.006353 2026] [:error] [pid 18803:tid 18828] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/ver.php
[Sat Jan 31 21:13:11.140168 2026] [:error] [pid 18803:tid 18824] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Jan 31 21:13:11.265140 2026] [:error] [pid 18803:tid 18829] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Sat Jan 31 21:13:11.408280 2026] [:error] [pid 18803:tid 18813] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Jan 31 21:13:11.525161 2026] [:error] [pid 18803:tid 18826] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sat Jan 31 21:13:11.644308 2026] [:error] [pid 18803:tid 18814] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Jan 31 21:13:11.815951 2026] [:error] [pid 18803:tid 18825] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Jan 31 21:13:11.932088 2026] [:error] [pid 18803:tid 18820] [client 20.210.88.226:5330] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Jan 31 21:13:12.045896 2026] [:error] [pid 18803:tid 18810] [client 20.210.88.226:5330] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aX3_6C2kTcRk9EBIxOGTzwAAAgQ"]
[Sat Jan 31 21:13:14.638834 2026] [:error] [pid 44533:tid 44585] [client 20.210.88.226:1330] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aX3_6oNjc98kHMNVmntKVgAAAdY"]
[Sat Jan 31 21:13:19.580700 2026] [:error] [pid 44532:tid 44538] [client 20.210.88.226:21473] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aX3_78H-68uYbAtfrZ2OCgAAAUI"]
[Sat Jan 31 21:13:22.935726 2026] [:error] [pid 39242:tid 39268] [client 20.210.88.226:21461] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aX3_8tOgXnkKGGSSCINBpQAAAA4"]
[Sat Jan 31 21:13:28.979885 2026] [:error] [pid 39339:tid 39358] [client 20.210.88.226:5652] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aX3_-MWi-IjigR3oHY6AnwAAANE"]
[Sat Jan 31 21:13:33.043048 2026] [:error] [pid 31465:tid 31511] [client 20.210.88.226:1291] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aX3__TkaGp475ez0mlwRSwAAAlE"]
[Sat Jan 31 21:13:35.966849 2026] [:error] [pid 39339:tid 39352] [client 20.210.88.226:5359] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aX3__8Wi-IjigR3oHY6AqAAAAMs"]
[Sat Jan 31 21:13:39.689636 2026] [:error] [pid 31430:tid 31442] [client 20.210.88.226:5371] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amax.php"] [unique_id "aX4AA8cb14YPxXg_g5FOxQAAAEg"]
[Sat Jan 31 21:13:42.471195 2026] [:error] [pid 44533:tid 44586] [client 20.210.88.226:5643] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amax.php"] [unique_id "aX4ABoNjc98kHMNVmntKbQAAAdc"]
[Sat Jan 31 21:13:43.098922 2026] [:error] [pid 31430:tid 31451] [client 20.210.88.226:5659] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amax.php"] [unique_id "aX4AB8cb14YPxXg_g5FOxgAAAFE"]
[Sat Jan 31 21:13:45.880483 2026] [:error] [pid 44533:tid 44576] [client 20.210.88.226:1504] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amax.php"] [unique_id "aX4ACYNjc98kHMNVmntKcgAAAc0"]
[Sat Jan 31 21:13:48.386598 2026] [:error] [pid 31430:tid 31439] [client 20.210.88.226:5964] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/image.php"] [unique_id "aX4ADMcb14YPxXg_g5FOxwAAAEU"]
[Sat Jan 31 21:13:50.747076 2026] [:error] [pid 31465:tid 31510] [client 20.210.88.226:5641] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/image.php"] [unique_id "aX4ADjkaGp475ez0mlwRUgAAAlA"]
[Sat Jan 31 21:13:53.031587 2026] [:error] [pid 31465:tid 31518] [client 20.210.88.226:6140] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/image.php"] [unique_id "aX4AETkaGp475ez0mlwRXAAAAlg"]
[Sat Jan 31 21:13:54.755866 2026] [:error] [pid 59523:tid 59541] [client 20.210.88.226:7490] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/image.php"] [unique_id "aX4AEpEkxOIGmVhqUWKFYgAAAw4"]
[Sat Jan 31 21:13:57.554353 2026] [:error] [pid 59523:tid 59528] [client 20.210.88.226:5277] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/990.php"] [unique_id "aX4AFZEkxOIGmVhqUWKFZAAAAwE"]
[Sat Jan 31 21:14:00.639403 2026] [:error] [pid 31465:tid 31494] [client 20.210.88.226:7048] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/990.php"] [unique_id "aX4AGDkaGp475ez0mlwRagAAAkA"]
[Sat Jan 31 21:14:02.219886 2026] [:error] [pid 31465:tid 31505] [client 20.210.88.226:6585] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/990.php"] [unique_id "aX4AGjkaGp475ez0mlwRbQAAAks"]
[Sat Jan 31 21:14:15.854354 2026] [:error] [pid 18803:tid 18820] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Jan 31 21:14:15.972100 2026] [:error] [pid 18803:tid 18813] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Sat Jan 31 21:14:16.090995 2026] [:error] [pid 18803:tid 18812] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Jan 31 21:14:16.209902 2026] [:error] [pid 18803:tid 18825] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/data.php
[Sat Jan 31 21:14:16.557635 2026] [:error] [pid 18803:tid 18817] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/check.php
[Sat Jan 31 21:14:16.680203 2026] [:error] [pid 18803:tid 18818] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Sat Jan 31 21:14:16.804800 2026] [:error] [pid 18803:tid 18816] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header-json.php
[Sat Jan 31 21:14:18.148880 2026] [:error] [pid 18803:tid 18816] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Sat Jan 31 21:14:18.270980 2026] [:error] [pid 18803:tid 18806] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Jan 31 21:14:18.394284 2026] [:error] [pid 18803:tid 18823] [client 20.210.88.226:1870] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sat Jan 31 21:14:18.507538 2026] [:error] [pid 18803:tid 18822] [client 20.210.88.226:1870] [client 20.210.88.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aX4AKi2kTcRk9EBIxOGUEAAAAhA"]
[Sat Jan 31 21:14:21.960717 2026] [:error] [pid 39242:tid 39278] [client 20.210.88.226:6353] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Jan 31 21:14:22.078187 2026] [:error] [pid 39242:tid 39267] [client 20.210.88.226:6353] [client 20.210.88.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aX4ALtOgXnkKGGSSCINBwQAAAA0"]
[Sat Jan 31 21:14:49.797538 2026] [:error] [pid 18773:tid 18798] [client 20.210.88.226:6360] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aX4ASdHy21j24IPrB1XxnQAAAZc"]
[Sat Jan 31 21:15:00.172769 2026] [:error] [pid 59523:tid 59536] [client 20.210.88.226:5458] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aX4AVJEkxOIGmVhqUWKFgwAAAwk"]
[Sat Jan 31 21:15:23.394351 2026] [:error] [pid 39339:tid 39345] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Jan 31 21:15:23.820361 2026] [:error] [pid 39339:tid 39342] [client 20.210.88.226:6168] [client 20.210.88.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.210.88.226, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aX4Aa8Wi-IjigR3oHY6A-AAAAME"]
[Sat Jan 31 21:15:23.823684 2026] [:error] [pid 39339:tid 39342] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 31 21:15:23.956476 2026] [:error] [pid 39339:tid 39343] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Jan 31 21:15:24.072923 2026] [:error] [pid 39339:tid 39352] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Jan 31 21:15:24.195652 2026] [:error] [pid 39339:tid 39353] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Jan 31 21:15:24.508271 2026] [:error] [pid 39339:tid 39362] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat Jan 31 21:15:24.628373 2026] [:error] [pid 39339:tid 39355] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/999.php
[Sat Jan 31 21:15:24.764718 2026] [:error] [pid 39339:tid 39347] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Jan 31 21:15:26.242793 2026] [:error] [pid 39339:tid 39347] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Jan 31 21:15:26.369656 2026] [:error] [pid 39339:tid 39356] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Sat Jan 31 21:15:26.487073 2026] [:error] [pid 39339:tid 39341] [client 20.210.88.226:6168] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Jan 31 21:15:26.600070 2026] [:error] [pid 39339:tid 39360] [client 20.210.88.226:6168] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aX4AbsWi-IjigR3oHY6BBQAAANM"]
[Sat Jan 31 21:15:27.692988 2026] [:error] [pid 59523:tid 59547] [client 20.210.88.226:6357] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aX4Ab5EkxOIGmVhqUWKFkQAAAxQ"]
[Sat Jan 31 21:15:30.340592 2026] [:error] [pid 31465:tid 31503] [client 20.210.88.226:6147] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aX4AcjkaGp475ez0mlwRqgAAAkk"]
[Sat Jan 31 21:15:31.277101 2026] [:error] [pid 59582:tid 59635] [client 20.210.88.226:17196] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aX4Ac45dwpvvp1Lc6f18mgAAA9Y"]
[Sat Jan 31 21:15:33.597930 2026] [:error] [pid 31465:tid 31506] [client 20.210.88.226:17161] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file56.php"] [unique_id "aX4AdTkaGp475ez0mlwRuQAAAkw"]
[Sat Jan 31 21:15:34.506843 2026] [:error] [pid 59523:tid 59549] [client 20.210.88.226:7744] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file56.php"] [unique_id "aX4AdpEkxOIGmVhqUWKFkwAAAxY"]
[Sat Jan 31 21:15:40.684266 2026] [:error] [pid 39242:tid 39256] [client 20.210.88.226:7186] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file56.php"] [unique_id "aX4AfNOgXnkKGGSSCINCCwAAAAI"]
[Sat Jan 31 21:15:46.488019 2026] [:error] [pid 44533:tid 44575] [client 20.210.88.226:7777] [client 20.210.88.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file56.php"] [unique_id "aX4AgoNjc98kHMNVmntKtgAAAcw"]
[Sun Feb 01 00:28:41.632900 2026] [:error] [pid 18803:tid 18821] [client 43.130.141.193:37424] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aX4tuS2kTcRk9EBIxOG61QAAAg8"]
[Sun Feb 01 00:35:07.129179 2026] [:error] [pid 18803:tid 18821] [client 65.108.78.33:54798] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX4vOy2kTcRk9EBIxOG8TwAAAg8"]
[Sun Feb 01 00:35:09.007108 2026] [:error] [pid 39339:tid 39353] [client 65.108.78.33:54800] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aX4vPcWi-IjigR3oHY6u3wAAAMw"]
[Sun Feb 01 00:35:11.003387 2026] [:error] [pid 31465:tid 31494] [client 65.108.78.33:54808] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX4vPzkaGp475ez0mlxMjAAAAkA"]
[Sun Feb 01 00:35:13.029655 2026] [:error] [pid 39339:tid 39361] [client 65.108.78.33:18512] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aX4vQcWi-IjigR3oHY6u4wAAANQ"]
[Sun Feb 01 00:35:14.928087 2026] [:error] [pid 39242:tid 39271] [client 65.108.78.33:18522] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX4vQtOgXnkKGGSSCINmGwAAABE"]
[Sun Feb 01 00:35:16.984375 2026] [:error] [pid 44533:tid 44570] [client 65.108.78.33:18534] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aX4vRINjc98kHMNVmnttQgAAAcc"]
[Sun Feb 01 05:23:01.184621 2026] [:error] [pid 10616:tid 10640] [client 91.224.92.127:56635] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Feb 01 05:23:12.697387 2026] [:error] [pid 10506:tid 10522] [client 91.224.92.127:54842] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Feb 01 05:23:18.793165 2026] [:error] [pid 10509:tid 10592] [client 91.224.92.127:64649] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Feb 01 05:23:35.937310 2026] [:error] [pid 10506:tid 10528] [client 91.224.92.127:62947] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Feb 01 08:27:21.080254 2026] [:error] [pid 10616:tid 10642] [client 106.219.90.192:1619] [client 106.219.90.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.90.192, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aX6d6Wd8pZdmVx6pUp4ZUgAAANY"]
[Sun Feb 01 08:27:21.086474 2026] [:error] [pid 10616:tid 10642] [client 106.219.90.192:1619] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Feb 01 08:29:39.868591 2026] [:error] [pid 10506:tid 10529] [client 177.223.245.244:4496] [client 177.223.245.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.223.245.244, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aX6ec632IC2Db4uwFyPIOgAAAA0"]
[Sun Feb 01 08:29:39.874064 2026] [:error] [pid 10506:tid 10529] [client 177.223.245.244:4496] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Feb 01 08:49:27.834377 2026] [:error] [pid 10508:tid 10559] [client 185.209.56.235:45070] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX6jFwFwdoMQv5EWp9uY1gAAAE8"]
[Sun Feb 01 08:49:28.493063 2026] [:error] [pid 10616:tid 10641] [client 185.209.56.235:59773] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX6jGGd8pZdmVx6pUp4hwQAAANU"]
[Sun Feb 01 08:49:29.136694 2026] [:error] [pid 10616:tid 10633] [client 185.209.56.235:59791] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX6jGWd8pZdmVx6pUp4hwwAAAM0"]
[Sun Feb 01 08:49:31.622148 2026] [:error] [pid 10616:tid 10634] [client 185.209.56.235:59860] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aX6jG2d8pZdmVx6pUp4hygAAAM4"]
[Sun Feb 01 08:49:32.271232 2026] [:error] [pid 10506:tid 10537] [client 185.209.56.235:59877] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aX6jHK32IC2Db4uwFyPNLwAAABU"]
[Sun Feb 01 08:49:34.685440 2026] [:error] [pid 10616:tid 10636] [client 185.209.56.235:59940] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aX6jHmd8pZdmVx6pUp4h0AAAANA"]
[Sun Feb 01 08:49:35.328822 2026] [:error] [pid 2033:tid 2052] [client 185.209.56.235:59955] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aX6jH_F7B4oR5nK3T_NJFQAAARE"]
[Sun Feb 01 08:49:37.792337 2026] [:error] [pid 10508:tid 10548] [client 185.209.56.235:59997] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aX6jIQFwdoMQv5EWp9uY2wAAAEQ"]
[Sun Feb 01 08:49:38.452260 2026] [:error] [pid 10616:tid 10627] [client 185.209.56.235:60017] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aX6jImd8pZdmVx6pUp4h2wAAAMc"]
[Sun Feb 01 08:49:40.873170 2026] [:error] [pid 10616:tid 10629] [client 185.209.56.235:60099] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX6jJGd8pZdmVx6pUp4h4AAAAMk"]
[Sun Feb 01 08:49:41.516443 2026] [:error] [pid 10509:tid 10590] [client 185.209.56.235:60120] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX6jJVMNpJBihOJgwVsa0wAAAJM"]
[Sun Feb 01 08:49:43.862340 2026] [:error] [pid 10509:tid 10575] [client 185.209.56.235:60182] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX6jJ1MNpJBihOJgwVsa1wAAAIQ"]
[Sun Feb 01 08:49:44.505544 2026] [:error] [pid 10509:tid 10573] [client 185.209.56.235:60205] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX6jKFMNpJBihOJgwVsa3AAAAII"]
[Sun Feb 01 08:49:47.148667 2026] [:error] [pid 10509:tid 10581] [client 185.209.56.235:60268] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX6jK1MNpJBihOJgwVsa3QAAAIo"]
[Sun Feb 01 08:49:47.792031 2026] [:error] [pid 10506:tid 10532] [client 185.209.56.235:60282] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX6jK632IC2Db4uwFyPNPAAAABA"]
[Sun Feb 01 08:49:49.995128 2026] [:error] [pid 10506:tid 10523] [client 185.209.56.235:60348] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX6jLa32IC2Db4uwFyPNPQAAAAc"]
[Sun Feb 01 08:49:50.638734 2026] [:error] [pid 2033:tid 2056] [client 185.209.56.235:60361] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX6jLvF7B4oR5nK3T_NJKAAAARM"]
[Sun Feb 01 08:49:52.790950 2026] [:error] [pid 2033:tid 2069] [client 185.209.56.235:60434] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aX6jMPF7B4oR5nK3T_NJLQAAARg"]
[Sun Feb 01 08:49:53.447271 2026] [:error] [pid 10508:tid 10553] [client 185.209.56.235:60446] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aX6jMQFwdoMQv5EWp9uY6wAAAEk"]
[Sun Feb 01 08:49:55.796850 2026] [:error] [pid 10508:tid 10546] [client 185.209.56.235:60503] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aX6jMwFwdoMQv5EWp9uY7gAAAEI"]
[Sun Feb 01 08:49:56.442208 2026] [:error] [pid 10506:tid 10533] [client 185.209.56.235:60519] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aX6jNK32IC2Db4uwFyPNRAAAABE"]
[Sun Feb 01 08:49:58.636435 2026] [:error] [pid 10616:tid 10641] [client 185.209.56.235:60573] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aX6jNmd8pZdmVx6pUp4h_gAAANU"]
[Sun Feb 01 08:49:59.283324 2026] [:error] [pid 2033:tid 2037] [client 185.209.56.235:60580] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aX6jN_F7B4oR5nK3T_NJNgAAAQI"]
[Sun Feb 01 08:50:01.496304 2026] [:error] [pid 10508:tid 10552] [client 185.209.56.235:60643] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aX6jOQFwdoMQv5EWp9uY8gAAAEg"]
[Sun Feb 01 08:50:02.139638 2026] [:error] [pid 10616:tid 10630] [client 185.209.56.235:60650] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aX6jOmd8pZdmVx6pUp4iBQAAAMo"]
[Sun Feb 01 08:50:04.477913 2026] [:error] [pid 10506:tid 10519] [client 185.209.56.235:60732] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aX6jPK32IC2Db4uwFyPNVgAAAAM"]
[Sun Feb 01 08:50:05.121347 2026] [:error] [pid 10508:tid 10564] [client 185.209.56.235:60744] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aX6jPQFwdoMQv5EWp9uY-AAAAFQ"]
[Sun Feb 01 08:50:07.428890 2026] [:error] [pid 10616:tid 10620] [client 185.209.56.235:60825] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aX6jP2d8pZdmVx6pUp4iDAAAAMA"]
[Sun Feb 01 08:50:08.073034 2026] [:error] [pid 10508:tid 10544] [client 185.209.56.235:60852] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aX6jQAFwdoMQv5EWp9uY_AAAAEA"]
[Sun Feb 01 08:50:10.558626 2026] [:error] [pid 10509:tid 10587] [client 185.209.56.235:60920] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aX6jQlMNpJBihOJgwVsa8gAAAJA"]
[Sun Feb 01 08:50:11.202186 2026] [:error] [pid 2033:tid 2051] [client 185.209.56.235:60948] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aX6jQ_F7B4oR5nK3T_NJSAAAARA"]
[Sun Feb 01 08:50:13.634236 2026] [:error] [pid 10506:tid 10537] [client 185.209.56.235:61018] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aX6jRa32IC2Db4uwFyPNZAAAABU"]
[Sun Feb 01 08:50:14.281727 2026] [:error] [pid 2033:tid 2036] [client 185.209.56.235:61035] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aX6jRvF7B4oR5nK3T_NJUAAAAQE"]
[Sun Feb 01 08:50:16.705661 2026] [:error] [pid 2033:tid 2052] [client 185.209.56.235:61077] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aX6jSPF7B4oR5nK3T_NJUgAAARE"]
[Sun Feb 01 08:50:17.348507 2026] [:error] [pid 10506:tid 10533] [client 185.209.56.235:61092] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aX6jSa32IC2Db4uwFyPNagAAABE"]
[Sun Feb 01 08:50:19.705601 2026] [:error] [pid 10506:tid 10540] [client 185.209.56.235:61145] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX6jS632IC2Db4uwFyPNbgAAABg"]
[Sun Feb 01 08:50:20.349441 2026] [:error] [pid 10509:tid 10586] [client 185.209.56.235:61156] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX6jTFMNpJBihOJgwVsbFwAAAI8"]
[Sun Feb 01 08:50:22.821966 2026] [:error] [pid 2033:tid 2042] [client 185.209.56.235:61201] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aX6jTvF7B4oR5nK3T_NJagAAAQc"]
[Sun Feb 01 08:50:23.465943 2026] [:error] [pid 10509:tid 10574] [client 185.209.56.235:61210] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aX6jT1MNpJBihOJgwVsbKwAAAIM"]
[Sun Feb 01 08:50:49.547207 2026] [:error] [pid 10508:tid 10544] [client 185.209.56.235:61332] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aX6jaQFwdoMQv5EWp9uZYAAAAEA"]
[Sun Feb 01 08:50:50.190360 2026] [:error] [pid 10509:tid 10593] [client 185.209.56.235:61665] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aX6jalMNpJBihOJgwVsbeAAAAJY"]
[Sun Feb 01 08:50:50.833888 2026] [:error] [pid 10616:tid 10644] [client 185.209.56.235:61676] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aX6jamd8pZdmVx6pUp4iSQAAANg"]
[Sun Feb 01 08:50:53.297446 2026] [:error] [pid 10506:tid 10534] [client 185.209.56.235:61723] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aX6jba32IC2Db4uwFyPN2QAAABI"]
[Sun Feb 01 08:50:53.941053 2026] [:error] [pid 10509:tid 10579] [client 185.209.56.235:61739] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aX6jbVMNpJBihOJgwVsbggAAAIg"]
[Sun Feb 01 08:50:56.271113 2026] [:error] [pid 2033:tid 2036] [client 185.209.56.235:61773] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aX6jcPF7B4oR5nK3T_NJqwAAAQE"]
[Sun Feb 01 08:50:56.913277 2026] [:error] [pid 2033:tid 2048] [client 185.209.56.235:61781] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aX6jcPF7B4oR5nK3T_NJrgAAAQ0"]
[Sun Feb 01 08:50:59.361997 2026] [:error] [pid 2033:tid 2051] [client 185.209.56.235:61827] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aX6jc_F7B4oR5nK3T_NJvQAAARA"]
[Sun Feb 01 08:51:00.005645 2026] [:error] [pid 10509:tid 10571] [client 185.209.56.235:61836] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aX6jdFMNpJBihOJgwVsbiQAAAIA"]
[Sun Feb 01 08:51:02.362403 2026] [:error] [pid 2033:tid 2036] [client 185.209.56.235:61874] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aX6jdvF7B4oR5nK3T_NJxAAAAQE"]
[Sun Feb 01 08:51:03.025110 2026] [:error] [pid 2033:tid 2043] [client 185.209.56.235:61888] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aX6jd_F7B4oR5nK3T_NJyAAAAQg"]
[Sun Feb 01 08:51:05.300082 2026] [:error] [pid 10509:tid 10591] [client 185.209.56.235:61923] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aX6jeVMNpJBihOJgwVsbkwAAAJQ"]
[Sun Feb 01 08:51:05.943520 2026] [:error] [pid 10508:tid 10561] [client 185.209.56.235:61938] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aX6jeQFwdoMQv5EWp9uZcwAAAFE"]
[Sun Feb 01 08:51:08.165129 2026] [:error] [pid 2033:tid 2036] [client 185.209.56.235:21583] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aX6jfPF7B4oR5nK3T_NJ0AAAAQE"]
[Sun Feb 01 08:51:08.808374 2026] [:error] [pid 10506:tid 10517] [client 185.209.56.235:61977] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aX6jfK32IC2Db4uwFyPN7gAAAAE"]
[Sun Feb 01 08:51:11.230878 2026] [:error] [pid 10506:tid 10528] [client 185.209.56.235:62013] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aX6jf632IC2Db4uwFyPN-gAAAAw"]
[Sun Feb 01 08:51:11.873869 2026] [:error] [pid 10508:tid 10555] [client 185.209.56.235:62024] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aX6jfwFwdoMQv5EWp9uZegAAAEs"]
[Sun Feb 01 08:51:14.333878 2026] [:error] [pid 10509:tid 10590] [client 185.209.56.235:62069] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aX6jglMNpJBihOJgwVsboAAAAJM"]
[Sun Feb 01 08:51:14.977823 2026] [:error] [pid 10508:tid 10553] [client 185.209.56.235:62079] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aX6jggFwdoMQv5EWp9uZhAAAAEk"]
[Sun Feb 01 08:51:17.355042 2026] [:error] [pid 10616:tid 10623] [client 185.209.56.235:62123] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aX6jhWd8pZdmVx6pUp4ifQAAAMM"]
[Sun Feb 01 08:51:17.997865 2026] [:error] [pid 10509:tid 10593] [client 185.209.56.235:62133] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aX6jhVMNpJBihOJgwVsbqgAAAJY"]
[Sun Feb 01 08:51:20.207865 2026] [:error] [pid 10506:tid 10526] [client 185.209.56.235:62164] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX6jiK32IC2Db4uwFyPOAgAAAAo"]
[Sun Feb 01 08:51:20.851815 2026] [:error] [pid 2033:tid 2063] [client 185.209.56.235:62178] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX6jiPF7B4oR5nK3T_NJ2AAAARY"]
[Sun Feb 01 08:51:23.467383 2026] [:error] [pid 10508:tid 10562] [client 185.209.56.235:62218] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX6jiwFwdoMQv5EWp9uZlwAAAFI"]
[Sun Feb 01 08:51:24.110042 2026] [:error] [pid 10508:tid 10555] [client 185.209.56.235:62232] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX6jjAFwdoMQv5EWp9uZmQAAAEs"]
[Sun Feb 01 08:51:26.455644 2026] [:error] [pid 10509:tid 10594] [client 185.209.56.235:62276] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX6jjlMNpJBihOJgwVsbuAAAAJc"]
[Sun Feb 01 08:51:27.098832 2026] [:error] [pid 2033:tid 2041] [client 185.209.56.235:62284] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX6jj_F7B4oR5nK3T_NJ4gAAAQY"]
[Sun Feb 01 08:51:29.310105 2026] [:error] [pid 2033:tid 2036] [client 185.209.56.235:62317] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aX6jkfF7B4oR5nK3T_NJ6QAAAQE"]
[Sun Feb 01 08:51:29.955009 2026] [:error] [pid 10616:tid 10639] [client 185.209.56.235:62325] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aX6jkWd8pZdmVx6pUp4ikwAAANM"]
[Sun Feb 01 08:51:32.277420 2026] [:error] [pid 2033:tid 2052] [client 185.209.56.235:62361] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aX6jlPF7B4oR5nK3T_NJ9AAAARE"]
[Sun Feb 01 08:51:32.921319 2026] [:error] [pid 10506:tid 10520] [client 185.209.56.235:62372] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aX6jlK32IC2Db4uwFyPOEAAAAAQ"]
[Sun Feb 01 08:51:35.300670 2026] [:error] [pid 10509:tid 10582] [client 185.209.56.235:62404] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aX6jl1MNpJBihOJgwVsbygAAAIs"]
[Sun Feb 01 08:51:35.943230 2026] [:error] [pid 10616:tid 10637] [client 185.209.56.235:62424] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aX6jl2d8pZdmVx6pUp4ioQAAANE"]
[Sun Feb 01 08:51:38.186904 2026] [:error] [pid 2033:tid 2035] [client 185.209.56.235:62461] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aX6jmvF7B4oR5nK3T_NJ_gAAAQA"]
[Sun Feb 01 08:51:38.830242 2026] [:error] [pid 10508:tid 10554] [client 185.209.56.235:36344] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aX6jmgFwdoMQv5EWp9uZowAAAEo"]
[Sun Feb 01 08:51:41.200857 2026] [:error] [pid 10616:tid 10637] [client 185.209.56.235:62499] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX6jnWd8pZdmVx6pUp4iqgAAANE"]
[Sun Feb 01 08:51:41.844657 2026] [:error] [pid 2033:tid 2051] [client 185.209.56.235:62508] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX6jnfF7B4oR5nK3T_NKBgAAARA"]
[Sun Feb 01 08:51:44.351771 2026] [:error] [pid 10509:tid 10588] [client 185.209.56.235:62540] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aX6joFMNpJBihOJgwVsb0QAAAJE"]
[Sun Feb 01 08:51:45.005392 2026] [:error] [pid 10506:tid 10538] [client 185.209.56.235:62550] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aX6joa32IC2Db4uwFyPOGwAAABY"]
[Sun Feb 01 08:51:46.594367 2026] [:error] [pid 2033:tid 2040] [client 185.209.56.235:62582] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX6jovF7B4oR5nK3T_NKCwAAAQU"]
[Sun Feb 01 08:52:10.078205 2026] [:error] [pid 10508:tid 10558] [client 185.209.56.235:62653] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aX6jugFwdoMQv5EWp9uZ2AAAAE4"]
[Sun Feb 01 08:52:10.721861 2026] [:error] [pid 2033:tid 2042] [client 185.209.56.235:62913] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aX6juvF7B4oR5nK3T_NKIwAAAQc"]
[Sun Feb 01 08:52:11.365700 2026] [:error] [pid 10616:tid 10643] [client 185.209.56.235:62916] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aX6ju2d8pZdmVx6pUp4i6QAAANc"]
[Sun Feb 01 08:52:13.474680 2026] [:error] [pid 2033:tid 2049] [client 185.209.56.235:62950] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aX6jvfF7B4oR5nK3T_NKKgAAAQ4"]
[Sun Feb 01 08:52:14.117862 2026] [:error] [pid 10508:tid 10546] [client 185.209.56.235:62952] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aX6jvgFwdoMQv5EWp9uZ4AAAAEI"]
[Sun Feb 01 08:52:16.551663 2026] [:error] [pid 2033:tid 2064] [client 185.209.56.235:62983] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aX6jwPF7B4oR5nK3T_NKMwAAARc"]
[Sun Feb 01 08:52:17.195274 2026] [:error] [pid 2033:tid 2051] [client 185.209.56.235:62991] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aX6jwfF7B4oR5nK3T_NKNAAAARA"]
[Sun Feb 01 08:52:19.831431 2026] [:error] [pid 10509:tid 10589] [client 185.209.56.235:63030] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aX6jw1MNpJBihOJgwVscAgAAAJI"]
[Sun Feb 01 08:52:20.474795 2026] [:error] [pid 10508:tid 10549] [client 185.209.56.235:63041] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aX6jxAFwdoMQv5EWp9uZ5wAAAEU"]
[Sun Feb 01 08:52:22.690175 2026] [:error] [pid 10616:tid 10623] [client 185.209.56.235:44557] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX6jxmd8pZdmVx6pUp4i_gAAAMM"]
[Sun Feb 01 08:52:23.336895 2026] [:error] [pid 10508:tid 10563] [client 185.209.56.235:63077] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX6jxwFwdoMQv5EWp9uZ9AAAAFM"]
[Sun Feb 01 08:52:25.765154 2026] [:error] [pid 10508:tid 10555] [client 185.209.56.235:63109] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aX6jyQFwdoMQv5EWp9uZ-QAAAEs"]
[Sun Feb 01 08:52:26.411331 2026] [:error] [pid 10506:tid 10535] [client 185.209.56.235:63115] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aX6jyq32IC2Db4uwFyPOVAAAABM"]
[Sun Feb 01 08:52:28.925116 2026] [:error] [pid 2033:tid 2039] [client 185.209.56.235:63146] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aX6jzPF7B4oR5nK3T_NKRAAAAQQ"]
[Sun Feb 01 08:52:29.568533 2026] [:error] [pid 10616:tid 10632] [client 185.209.56.235:63155] [client 185.209.56.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aX6jzWd8pZdmVx6pUp4jCwAAAMw"]
[Sun Feb 01 09:32:29.678984 2026] [:error] [pid 10616:tid 10631] [client 204.10.194.20:56972] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Feb 01 09:32:35.289714 2026] [:error] [pid 2033:tid 2042] [client 204.10.194.20:56345] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Feb 01 12:40:40.893259 2026] [:error] [pid 2033:tid 2060] [client 147.135.213.153:49172] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX7ZSPF7B4oR5nK3T_OX5QAAARU"]
[Sun Feb 01 12:40:42.717681 2026] [:error] [pid 10616:tid 10632] [client 147.135.213.153:55390] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aX7ZSmd8pZdmVx6pUp5_dQAAAMw"]
[Sun Feb 01 12:40:44.757228 2026] [:error] [pid 51610:tid 51629] [client 147.135.213.153:55394] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aX7ZTN7GFdNFAqImMQCldAAAAU8"]
[Sun Feb 01 12:40:46.765768 2026] [:error] [pid 10508:tid 10545] [client 147.135.213.153:34080] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aX7ZTgFwdoMQv5EWp9vTzQAAAEE"]
[Sun Feb 01 12:40:48.837927 2026] [:error] [pid 10508:tid 10555] [client 147.135.213.153:34096] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aX7ZUAFwdoMQv5EWp9vT1gAAAEs"]
[Sun Feb 01 12:40:50.867218 2026] [:error] [pid 51610:tid 51623] [client 147.135.213.153:34104] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX7ZUt7GFdNFAqImMQClhAAAAUk"]
[Sun Feb 01 12:40:52.742560 2026] [:error] [pid 10506:tid 10537] [client 147.135.213.153:34114] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX7ZVK32IC2Db4uwFyMO6AAAABU"]
[Sun Feb 01 12:40:54.760317 2026] [:error] [pid 51610:tid 51627] [client 147.135.213.153:34122] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aX7ZVt7GFdNFAqImMQCligAAAU0"]
[Sun Feb 01 12:40:56.773994 2026] [:error] [pid 2033:tid 2037] [client 147.135.213.153:36412] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX7ZWPF7B4oR5nK3T_OYCQAAAQI"]
[Sun Feb 01 12:40:58.785933 2026] [:error] [pid 51610:tid 51616] [client 147.135.213.153:36426] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX7ZWt7GFdNFAqImMQClkwAAAUI"]
[Sun Feb 01 12:41:00.803192 2026] [:error] [pid 10506:tid 10526] [client 147.135.213.153:36436] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aX7ZXK32IC2Db4uwFyMO8gAAAAo"]
[Sun Feb 01 12:41:02.815382 2026] [:error] [pid 10508:tid 10559] [client 147.135.213.153:36444] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aX7ZXgFwdoMQv5EWp9vT8QAAAE8"]
[Sun Feb 01 12:41:04.679695 2026] [:error] [pid 10616:tid 10621] [client 147.135.213.153:36458] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aX7ZYGd8pZdmVx6pUp5_lgAAAME"]
[Sun Feb 01 12:41:06.721962 2026] [:error] [pid 10616:tid 10620] [client 147.135.213.153:51840] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aX7ZYmd8pZdmVx6pUp5_ngAAAMA"]
[Sun Feb 01 12:41:08.602400 2026] [:error] [pid 10506:tid 10534] [client 147.135.213.153:51852] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX7ZZK32IC2Db4uwFyMO_gAAABI"]
[Sun Feb 01 12:41:10.626987 2026] [:error] [pid 10509:tid 10594] [client 147.135.213.153:51862] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX7ZZlMNpJBihOJgwVta7QAAAJc"]
[Sun Feb 01 12:41:12.507241 2026] [:error] [pid 10508:tid 10552] [client 147.135.213.153:51872] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aX7ZaAFwdoMQv5EWp9vT8wAAAEg"]
[Sun Feb 01 12:41:14.556230 2026] [:error] [pid 10509:tid 10584] [client 147.135.213.153:51880] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX7ZalMNpJBihOJgwVta8gAAAI0"]
[Sun Feb 01 12:41:16.589239 2026] [:error] [pid 51610:tid 51622] [client 147.135.213.153:56422] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aX7ZbN7GFdNFAqImMQClugAAAUg"]
[Sun Feb 01 12:41:18.625582 2026] [:error] [pid 2033:tid 2063] [client 147.135.213.153:56428] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aX7ZbvF7B4oR5nK3T_OYHgAAARY"]
[Sun Feb 01 12:41:20.656568 2026] [:error] [pid 2033:tid 2035] [client 147.135.213.153:56440] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aX7ZcPF7B4oR5nK3T_OYIAAAAQA"]
[Sun Feb 01 12:41:22.688631 2026] [:error] [pid 10506:tid 10519] [client 147.135.213.153:56442] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX7Zcq32IC2Db4uwFyMPEgAAAAM"]
[Sun Feb 01 12:41:24.716039 2026] [:error] [pid 10506:tid 10532] [client 147.135.213.153:56458] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aX7ZdK32IC2Db4uwFyMPFAAAABA"]
[Sun Feb 01 12:41:26.746039 2026] [:error] [pid 2033:tid 2035] [client 147.135.213.153:49276] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aX7ZdvF7B4oR5nK3T_OYLgAAAQA"]
[Sun Feb 01 12:41:28.769522 2026] [:error] [pid 10506:tid 10517] [client 147.135.213.153:49290] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aX7ZeK32IC2Db4uwFyMPGAAAAAE"]
[Sun Feb 01 12:41:30.809364 2026] [:error] [pid 51610:tid 51629] [client 147.135.213.153:49302] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX7Zet7GFdNFAqImMQClzAAAAU8"]
[Sun Feb 01 12:41:32.681306 2026] [:error] [pid 10616:tid 10620] [client 147.135.213.153:49314] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aX7ZfGd8pZdmVx6pUp5_2QAAAMA"]
[Sun Feb 01 12:41:34.711251 2026] [:error] [pid 10509:tid 10585] [client 147.135.213.153:49322] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aX7ZflMNpJBihOJgwVtbFQAAAI4"]
[Sun Feb 01 12:41:36.744691 2026] [:error] [pid 10616:tid 10620] [client 147.135.213.153:33886] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX7ZgGd8pZdmVx6pUp5_5AAAAMA"]
[Sun Feb 01 12:41:38.629526 2026] [:error] [pid 10616:tid 10621] [client 147.135.213.153:33898] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX7Zgmd8pZdmVx6pUp5_6gAAAME"]
[Sun Feb 01 12:41:59.174761 2026] [:error] [pid 10616:tid 10627] [client 147.135.213.153:49642] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aX7Zl2d8pZdmVx6pUp6AJQAAAMc"]
[Sun Feb 01 12:42:01.143817 2026] [:error] [pid 10616:tid 10636] [client 147.135.213.153:41990] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aX7ZmWd8pZdmVx6pUp6AKQAAANA"]
[Sun Feb 01 12:42:03.173806 2026] [:error] [pid 10616:tid 10622] [client 147.135.213.153:41996] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aX7Zm2d8pZdmVx6pUp6ALQAAAMI"]
[Sun Feb 01 12:42:05.051457 2026] [:error] [pid 10509:tid 10583] [client 147.135.213.153:42010] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aX7ZnVMNpJBihOJgwVtbQwAAAIw"]
[Sun Feb 01 12:42:07.076179 2026] [:error] [pid 2033:tid 2038] [client 147.135.213.153:56414] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX7Zn_F7B4oR5nK3T_OYcwAAAQM"]
[Sun Feb 01 12:42:09.095822 2026] [:error] [pid 10506:tid 10516] [client 147.135.213.153:56418] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aX7Zoa32IC2Db4uwFyMPRQAAAAA"]
[Sun Feb 01 12:42:10.965851 2026] [:error] [pid 2033:tid 2052] [client 147.135.213.153:56422] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aX7ZovF7B4oR5nK3T_OYfQAAARE"]
[Sun Feb 01 12:42:12.988323 2026] [:error] [pid 51610:tid 51620] [client 147.135.213.153:56426] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aX7ZpN7GFdNFAqImMQCmDwAAAUY"]
[Sun Feb 01 12:42:15.004723 2026] [:error] [pid 10616:tid 10640] [client 147.135.213.153:56434] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aX7Zp2d8pZdmVx6pUp6ARgAAANQ"]
[Sun Feb 01 12:42:17.025575 2026] [:error] [pid 51610:tid 51624] [client 147.135.213.153:52868] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aX7Zqd7GFdNFAqImMQCmGAAAAUo"]
[Sun Feb 01 12:42:18.926630 2026] [:error] [pid 10506:tid 10531] [client 147.135.213.153:52870] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aX7Zqq32IC2Db4uwFyMPUwAAAA8"]
[Sun Feb 01 12:42:20.945908 2026] [:error] [pid 51610:tid 51617] [client 147.135.213.153:52872] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aX7ZrN7GFdNFAqImMQCmHgAAAUM"]
[Sun Feb 01 12:42:22.951114 2026] [:error] [pid 10508:tid 10566] [client 147.135.213.153:52884] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aX7ZrgFwdoMQv5EWp9vUOgAAAFY"]
[Sun Feb 01 12:42:24.851784 2026] [:error] [pid 10508:tid 10549] [client 147.135.213.153:52886] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aX7ZsAFwdoMQv5EWp9vUQAAAAEU"]
[Sun Feb 01 12:42:26.869857 2026] [:error] [pid 10508:tid 10556] [client 147.135.213.153:49054] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aX7ZsgFwdoMQv5EWp9vURAAAAEw"]
[Sun Feb 01 12:42:28.746264 2026] [:error] [pid 51610:tid 51634] [client 147.135.213.153:49056] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aX7ZtN7GFdNFAqImMQCmMgAAAVQ"]
[Sun Feb 01 12:42:30.782329 2026] [:error] [pid 10616:tid 10623] [client 147.135.213.153:49058] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aX7Ztmd8pZdmVx6pUp6AXQAAAMM"]
[Sun Feb 01 12:42:32.670335 2026] [:error] [pid 10616:tid 10627] [client 147.135.213.153:49070] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX7ZuGd8pZdmVx6pUp6AXgAAAMc"]
[Sun Feb 01 12:42:34.560268 2026] [:error] [pid 10506:tid 10522] [client 147.135.213.153:49078] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aX7Zuq32IC2Db4uwFyMPXwAAAAY"]
[Sun Feb 01 12:42:36.610849 2026] [:error] [pid 2033:tid 2064] [client 147.135.213.153:54110] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aX7ZvPF7B4oR5nK3T_OYnwAAARc"]
[Sun Feb 01 12:42:38.493125 2026] [:error] [pid 51610:tid 51624] [client 147.135.213.153:54116] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aX7Zvt7GFdNFAqImMQCmRQAAAUo"]
[Sun Feb 01 12:42:40.399092 2026] [:error] [pid 10616:tid 10640] [client 147.135.213.153:54126] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX7ZwGd8pZdmVx6pUp6AdQAAANQ"]
[Sun Feb 01 12:42:42.291359 2026] [:error] [pid 2033:tid 2042] [client 147.135.213.153:54140] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aX7ZwvF7B4oR5nK3T_OYpwAAAQc"]
[Sun Feb 01 12:42:44.188379 2026] [:error] [pid 10506:tid 10523] [client 147.135.213.153:54152] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX7ZxK32IC2Db4uwFyMPbAAAAAc"]
[Sun Feb 01 12:42:46.098698 2026] [:error] [pid 2033:tid 2057] [client 147.135.213.153:54154] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX7ZxvF7B4oR5nK3T_OYqwAAARQ"]
[Sun Feb 01 12:42:48.129699 2026] [:error] [pid 10616:tid 10643] [client 147.135.213.153:37144] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX7ZyGd8pZdmVx6pUp6AhQAAANc"]
[Sun Feb 01 12:42:50.022160 2026] [:error] [pid 2033:tid 2064] [client 147.135.213.153:37150] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX7ZyvF7B4oR5nK3T_OYtAAAARc"]
[Sun Feb 01 12:42:52.064854 2026] [:error] [pid 2033:tid 2057] [client 147.135.213.153:37154] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aX7ZzPF7B4oR5nK3T_OYuQAAARQ"]
[Sun Feb 01 12:42:53.950233 2026] [:error] [pid 10509:tid 10573] [client 147.135.213.153:37166] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aX7ZzVMNpJBihOJgwVtbdQAAAII"]
[Sun Feb 01 12:42:55.853690 2026] [:error] [pid 51610:tid 51616] [client 147.135.213.153:37176] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aX7Zz97GFdNFAqImMQCmWwAAAUI"]
[Sun Feb 01 12:43:15.974235 2026] [:error] [pid 51610:tid 51616] [client 147.135.213.153:42374] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aX7Z497GFdNFAqImMQCmfgAAAUI"]
[Sun Feb 01 12:43:17.803501 2026] [:error] [pid 10616:tid 10629] [client 147.135.213.153:39876] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aX7Z5Wd8pZdmVx6pUp6AtQAAAMk"]
[Sun Feb 01 12:43:19.715203 2026] [:error] [pid 51610:tid 51638] [client 147.135.213.153:39888] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX7Z597GFdNFAqImMQCmhgAAAVg"]
[Sun Feb 01 12:43:21.760295 2026] [:error] [pid 10508:tid 10563] [client 147.135.213.153:39894] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX7Z6QFwdoMQv5EWp9vUYQAAAFM"]
[Sun Feb 01 12:43:23.662719 2026] [:error] [pid 10616:tid 10638] [client 147.135.213.153:39906] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX7Z62d8pZdmVx6pUp6AxQAAANI"]
[Sun Feb 01 12:43:25.547309 2026] [:error] [pid 51610:tid 51636] [client 147.135.213.153:39912] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX7Z7d7GFdNFAqImMQCmhwAAAVY"]
[Sun Feb 01 12:43:27.440491 2026] [:error] [pid 10616:tid 10643] [client 147.135.213.153:60656] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX7Z72d8pZdmVx6pUp6AyQAAANc"]
[Sun Feb 01 12:43:29.470930 2026] [:error] [pid 10506:tid 10524] [client 147.135.213.153:60664] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX7Z8a32IC2Db4uwFyMPkwAAAAg"]
[Sun Feb 01 12:43:31.361319 2026] [:error] [pid 10616:tid 10626] [client 147.135.213.153:60672] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX7Z82d8pZdmVx6pUp6AzgAAAMY"]
[Sun Feb 01 12:43:33.380753 2026] [:error] [pid 2033:tid 2041] [client 147.135.213.153:60686] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX7Z9fF7B4oR5nK3T_OY-QAAAQY"]
[Sun Feb 01 12:43:35.266951 2026] [:error] [pid 51610:tid 51631] [client 147.135.213.153:60694] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aX7Z997GFdNFAqImMQCmlQAAAVE"]
[Sun Feb 01 12:43:37.186756 2026] [:error] [pid 2033:tid 2053] [client 147.135.213.153:46740] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aX7Z-fF7B4oR5nK3T_OY_AAAARI"]
[Sun Feb 01 12:43:39.211829 2026] [:error] [pid 10616:tid 10643] [client 147.135.213.153:46752] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX7Z-2d8pZdmVx6pUp6A2gAAANc"]
[Sun Feb 01 12:43:41.302045 2026] [:error] [pid 10506:tid 10525] [client 147.135.213.153:46768] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aX7Z_a32IC2Db4uwFyMPlwAAAAk"]
[Sun Feb 01 12:43:43.219470 2026] [:error] [pid 10506:tid 10540] [client 147.135.213.153:46780] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aX7Z_632IC2Db4uwFyMPmgAAABg"]
[Sun Feb 01 12:43:45.100063 2026] [:error] [pid 10508:tid 10544] [client 147.135.213.153:46792] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aX7aAQFwdoMQv5EWp9vUcAAAAEA"]
[Sun Feb 01 12:43:47.000916 2026] [:error] [pid 2033:tid 2050] [client 147.135.213.153:43144] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aX7aAvF7B4oR5nK3T_OZBQAAAQ8"]
[Sun Feb 01 12:43:49.054090 2026] [:error] [pid 10508:tid 10550] [client 147.135.213.153:43150] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aX7aBQFwdoMQv5EWp9vUdgAAAEY"]
[Sun Feb 01 12:43:50.967252 2026] [:error] [pid 2033:tid 2060] [client 147.135.213.153:43164] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aX7aBvF7B4oR5nK3T_OZDQAAARU"]
[Sun Feb 01 12:43:53.033218 2026] [:error] [pid 10508:tid 10546] [client 147.135.213.153:43176] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aX7aCQFwdoMQv5EWp9vUfQAAAEI"]
[Sun Feb 01 12:43:54.932821 2026] [:error] [pid 10616:tid 10620] [client 147.135.213.153:43186] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aX7aCmd8pZdmVx6pUp6A-AAAAMA"]
[Sun Feb 01 12:43:56.839065 2026] [:error] [pid 10616:tid 10625] [client 147.135.213.153:48828] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aX7aDGd8pZdmVx6pUp6A_QAAAMU"]
[Sun Feb 01 12:43:58.741646 2026] [:error] [pid 10508:tid 10549] [client 147.135.213.153:48844] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aX7aDgFwdoMQv5EWp9vUjAAAAEU"]
[Sun Feb 01 12:44:00.659730 2026] [:error] [pid 10616:tid 10638] [client 147.135.213.153:48848] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX7aEGd8pZdmVx6pUp6BAwAAANI"]
[Sun Feb 01 12:44:02.700456 2026] [:error] [pid 10616:tid 10624] [client 147.135.213.153:48852] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aX7aEmd8pZdmVx6pUp6BCQAAAMQ"]
[Sun Feb 01 12:44:04.777032 2026] [:error] [pid 10506:tid 10517] [client 147.135.213.153:48862] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aX7aFK32IC2Db4uwFyMPtAAAAAE"]
[Sun Feb 01 12:44:06.661634 2026] [:error] [pid 10616:tid 10623] [client 147.135.213.153:55096] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX7aFmd8pZdmVx6pUp6BEgAAAMM"]
[Sun Feb 01 12:44:08.581178 2026] [:error] [pid 10508:tid 10551] [client 147.135.213.153:55100] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX7aGAFwdoMQv5EWp9vUkgAAAEc"]
[Sun Feb 01 12:44:10.611242 2026] [:error] [pid 10508:tid 10555] [client 147.135.213.153:55106] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aX7aGgFwdoMQv5EWp9vUlQAAAEs"]
[Sun Feb 01 12:44:12.490265 2026] [:error] [pid 2033:tid 2064] [client 147.135.213.153:55122] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aX7aHPF7B4oR5nK3T_OZIwAAARc"]
[Sun Feb 01 12:44:32.398851 2026] [:error] [pid 51610:tid 51623] [client 147.135.213.153:55130] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX7aMN7GFdNFAqImMQCm9gAAAUk"]
[Sun Feb 01 12:44:34.240383 2026] [:error] [pid 10506:tid 10526] [client 147.135.213.153:40606] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX7aMq32IC2Db4uwFyMPwwAAAAo"]
[Sun Feb 01 12:44:36.156183 2026] [:error] [pid 2033:tid 2060] [client 147.135.213.153:40612] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aX7aNPF7B4oR5nK3T_OZTgAAARU"]
[Sun Feb 01 12:44:38.050129 2026] [:error] [pid 10616:tid 10643] [client 147.135.213.153:33878] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aX7aNmd8pZdmVx6pUp6BhwAAANc"]
[Sun Feb 01 12:44:39.954282 2026] [:error] [pid 2033:tid 2052] [client 147.135.213.153:33884] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aX7aN_F7B4oR5nK3T_OZUgAAARE"]
[Sun Feb 01 12:44:41.865752 2026] [:error] [pid 10506:tid 10538] [client 147.135.213.153:33888] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX7aOa32IC2Db4uwFyMP1gAAABY"]
[Sun Feb 01 12:44:43.756790 2026] [:error] [pid 10508:tid 10555] [client 147.135.213.153:33890] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aX7aOwFwdoMQv5EWp9vUtgAAAEs"]
[Sun Feb 01 12:44:45.661724 2026] [:error] [pid 10616:tid 10633] [client 147.135.213.153:33896] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aX7aPWd8pZdmVx6pUp6BlwAAAM0"]
[Sun Feb 01 13:17:40.070836 2026] [:error] [pid 10509:tid 10571] [client 147.135.253.47:49162] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aX7h9FMNpJBihOJgwVtpUwAAAIA"]
[Sun Feb 01 13:17:43.452512 2026] [:error] [pid 10509:tid 10577] [client 147.135.253.47:37994] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX7h91MNpJBihOJgwVtpWgAAAIY"]
[Sun Feb 01 13:17:46.465203 2026] [:error] [pid 2033:tid 2045] [client 147.135.253.47:37996] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aX7h-vF7B4oR5nK3T_OjAQAAAQo"]
[Sun Feb 01 13:17:48.988865 2026] [:error] [pid 2033:tid 2060] [client 147.135.253.47:45200] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aX7h_PF7B4oR5nK3T_OjAwAAARU"]
[Sun Feb 01 13:17:52.547796 2026] [:error] [pid 10508:tid 10559] [client 147.135.253.47:45216] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aX7iAAFwdoMQv5EWp9vfBQAAAE8"]
[Sun Feb 01 13:17:55.019991 2026] [:error] [pid 10616:tid 10633] [client 147.135.253.47:45228] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aX7iA2d8pZdmVx6pUp6M_AAAAM0"]
[Sun Feb 01 13:17:57.642914 2026] [:error] [pid 10506:tid 10523] [client 147.135.253.47:45240] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aX7iBa32IC2Db4uwFyMazAAAAAc"]
[Sun Feb 01 13:18:00.249503 2026] [:error] [pid 51610:tid 51633] [client 147.135.253.47:58614] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aX7iCN7GFdNFAqImMQCxiAAAAVM"]
[Sun Feb 01 16:10:20.378503 2026] [:error] [pid 10508:tid 10544] [client 36.41.75.167:52218] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aX8KbAFwdoMQv5EWp9sURwAAAEA"]
[Sun Feb 01 18:12:07.080752 2026] [:error] [pid 10509:tid 10587] [client 51.83.7.81:38000] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX8m91MNpJBihOJgwVvUmAAAAJA"]
[Sun Feb 01 18:12:10.127218 2026] [:error] [pid 10509:tid 10592] [client 51.83.7.81:51112] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aX8m-lMNpJBihOJgwVvUnwAAAJU"]
[Sun Feb 01 18:12:14.196972 2026] [:error] [pid 10509:tid 10571] [client 51.83.7.81:50168] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX8m_lMNpJBihOJgwVvUqQAAAIA"]
[Sun Feb 01 18:12:16.488294 2026] [:error] [pid 2033:tid 2053] [client 51.83.7.81:50172] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aX8nAPF7B4oR5nK3T_PwewAAARI"]
[Sun Feb 01 18:12:19.905225 2026] [:error] [pid 10508:tid 10549] [client 51.83.7.81:50182] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX8nAwFwdoMQv5EWp9s6MwAAAEU"]
[Sun Feb 01 18:12:22.468435 2026] [:error] [pid 10509:tid 10576] [client 51.83.7.81:53938] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aX8nBlMNpJBihOJgwVvUuAAAAIU"]
[Mon Feb 02 02:06:47.252078 2026] [:error] [pid 10616:tid 10638] [client 217.182.194.3:58958] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX-WN2d8pZdmVx6pUp411wAAANI"]
[Mon Feb 02 02:06:49.726902 2026] [:error] [pid 8965:tid 8989] [client 217.182.194.3:50596] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aX-WOeNHEHhgRhn3G7RfWgAAAxU"]
[Mon Feb 02 02:06:52.115308 2026] [:error] [pid 29578:tid 29588] [client 217.182.194.3:50612] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aX-WPEwa4IUBrS8Q04H9XwAAAYY"]
[Mon Feb 02 02:06:54.390249 2026] [:error] [pid 8780:tid 8793] [client 217.182.194.3:50620] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aX-WPqG6IrMzWSzSdUfb_AAAAkg"]
[Mon Feb 02 02:06:56.831762 2026] [:error] [pid 8752:tid 8775] [client 217.182.194.3:50630] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX-WQEFFilE3DptZFco73gAAAhU"]
[Mon Feb 02 02:06:58.970747 2026] [:error] [pid 10616:tid 10631] [client 217.182.194.3:60854] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX-WQmd8pZdmVx6pUp416AAAAMs"]
[Mon Feb 02 02:07:01.198964 2026] [:error] [pid 29578:tid 29604] [client 217.182.194.3:60856] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX-WRUwa4IUBrS8Q04H9cgAAAZY"]
[Mon Feb 02 02:07:03.225316 2026] [:error] [pid 8752:tid 8758] [client 217.182.194.3:60858] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX-WR0FFilE3DptZFco74AAAAgQ"]
[Mon Feb 02 02:07:05.623460 2026] [:error] [pid 10616:tid 10634] [client 217.182.194.3:60874] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aX-WSWd8pZdmVx6pUp419QAAAM4"]
[Mon Feb 02 02:07:07.978502 2026] [:error] [pid 8965:tid 8986] [client 217.182.194.3:60888] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aX-WS-NHEHhgRhn3G7RfYgAAAxI"]
[Mon Feb 02 02:07:10.795964 2026] [:error] [pid 8781:tid 8819] [client 217.182.194.3:40732] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aX-WTi8oB7b2tIX_lkWGwAAAAoc"]
[Mon Feb 02 02:07:13.007283 2026] [:error] [pid 29578:tid 29597] [client 217.182.194.3:40748] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aX-WUUwa4IUBrS8Q04H9igAAAY8"]
[Mon Feb 02 02:07:15.602390 2026] [:error] [pid 8965:tid 8978] [client 217.182.194.3:40752] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aX-WU-NHEHhgRhn3G7RfagAAAwo"]
[Mon Feb 02 02:07:17.558244 2026] [:error] [pid 8780:tid 8798] [client 217.182.194.3:40760] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aX-WVaG6IrMzWSzSdUfcBQAAAk0"]
[Mon Feb 02 02:07:21.208393 2026] [:error] [pid 8780:tid 8789] [client 217.182.194.3:55210] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aX-WWaG6IrMzWSzSdUfcCgAAAkQ"]
[Mon Feb 02 02:07:24.924074 2026] [:error] [pid 8752:tid 8772] [client 217.182.194.3:55222] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aX-WXEFFilE3DptZFco78QAAAhI"]
[Mon Feb 02 02:07:27.129702 2026] [:error] [pid 8752:tid 8764] [client 217.182.194.3:55224] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aX-WX0FFilE3DptZFco79QAAAgo"]
[Mon Feb 02 02:07:29.488937 2026] [:error] [pid 10509:tid 10580] [client 217.182.194.3:41580] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX-WYVMNpJBihOJgwVtG9gAAAIk"]
[Mon Feb 02 02:07:32.600347 2026] [:error] [pid 8780:tid 8799] [client 217.182.194.3:41592] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aX-WZKG6IrMzWSzSdUfcEQAAAk4"]
[Mon Feb 02 02:07:35.498801 2026] [:error] [pid 8965:tid 8981] [client 217.182.194.3:41604] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX-WZ-NHEHhgRhn3G7RfdQAAAw0"]
[Mon Feb 02 02:07:37.633563 2026] [:error] [pid 29578:tid 29582] [client 217.182.194.3:41614] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX-WaUwa4IUBrS8Q04H9rwAAAYA"]
[Mon Feb 02 02:07:40.089438 2026] [:error] [pid 8877:tid 8882] [client 217.182.194.3:41942] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX-WbFjWRgIEkmjg6ouslQAAAsE"]
[Mon Feb 02 02:07:42.659715 2026] [:error] [pid 8877:tid 8894] [client 217.182.194.3:41944] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX-WbljWRgIEkmjg6ousmQAAAs0"]
[Mon Feb 02 02:08:14.322244 2026] [:error] [pid 8965:tid 8985] [client 217.182.194.3:41950] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aX-WjuNHEHhgRhn3G7RfjwAAAxE"]
[Mon Feb 02 02:08:16.763372 2026] [:error] [pid 29578:tid 29604] [client 217.182.194.3:43110] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aX-WkEwa4IUBrS8Q04H98QAAAZY"]
[Mon Feb 02 02:08:19.473504 2026] [:error] [pid 29578:tid 29605] [client 217.182.194.3:41890] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aX-Wk0wa4IUBrS8Q04H9-wAAAZc"]
[Mon Feb 02 02:08:22.501321 2026] [:error] [pid 8965:tid 8989] [client 217.182.194.3:41896] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aX-WluNHEHhgRhn3G7RflgAAAxU"]
[Mon Feb 02 02:08:25.565133 2026] [:error] [pid 8965:tid 8983] [client 217.182.194.3:41910] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aX-WmeNHEHhgRhn3G7RfmwAAAw8"]
[Mon Feb 02 02:08:28.663442 2026] [:error] [pid 10616:tid 10644] [client 217.182.194.3:54188] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aX-WnGd8pZdmVx6pUp42awAAANg"]
[Mon Feb 02 02:08:31.122780 2026] [:error] [pid 10616:tid 10639] [client 217.182.194.3:54198] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX-Wn2d8pZdmVx6pUp42bwAAANM"]
[Mon Feb 02 02:08:33.289596 2026] [:error] [pid 10616:tid 10633] [client 217.182.194.3:54202] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX-WoWd8pZdmVx6pUp42dQAAAM0"]
[Mon Feb 02 02:08:36.527942 2026] [:error] [pid 10509:tid 10580] [client 217.182.194.3:54204] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX-WpFMNpJBihOJgwVtHMAAAAIk"]
[Mon Feb 02 02:08:39.690600 2026] [:error] [pid 29578:tid 29590] [client 217.182.194.3:34648] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aX-Wp0wa4IUBrS8Q04H-EwAAAYg"]
[Mon Feb 02 02:08:42.631716 2026] [:error] [pid 10509:tid 10594] [client 217.182.194.3:34658] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aX-WqlMNpJBihOJgwVtHOQAAAJc"]
[Mon Feb 02 02:08:44.688892 2026] [:error] [pid 10509:tid 10575] [client 217.182.194.3:34672] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aX-WrFMNpJBihOJgwVtHPAAAAIQ"]
[Mon Feb 02 02:08:48.021087 2026] [:error] [pid 8965:tid 8970] [client 217.182.194.3:34688] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aX-WsONHEHhgRhn3G7RfsQAAAwI"]
[Mon Feb 02 02:08:50.080159 2026] [:error] [pid 10509:tid 10574] [client 217.182.194.3:55762] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX-WslMNpJBihOJgwVtHQQAAAIM"]
[Mon Feb 02 02:08:53.127838 2026] [:error] [pid 8752:tid 8767] [client 217.182.194.3:55776] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aX-WtUFFilE3DptZFco8IwAAAg0"]
[Mon Feb 02 02:08:56.566158 2026] [:error] [pid 8780:tid 8788] [client 217.182.194.3:55788] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX-WuKG6IrMzWSzSdUfcKQAAAkM"]
[Mon Feb 02 02:09:01.485031 2026] [:error] [pid 8780:tid 8790] [client 217.182.194.3:39022] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX-WvaG6IrMzWSzSdUfcLwAAAkU"]
[Mon Feb 02 04:08:14.545466 2026] [:error] [pid 63032:tid 63071] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Mon Feb 02 04:08:14.637019 2026] [:error] [pid 63032:tid 63066] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Mon Feb 02 04:08:14.729474 2026] [:error] [pid 63032:tid 63079] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Feb 02 04:08:14.820772 2026] [:error] [pid 63032:tid 63083] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/tempae.php
[Mon Feb 02 04:08:15.069363 2026] [:error] [pid 63032:tid 63085] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/bayss.php
[Mon Feb 02 04:08:15.163302 2026] [:error] [pid 63032:tid 63073] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon Feb 02 04:08:15.321599 2026] [:error] [pid 63032:tid 63077] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Feb 02 04:08:15.419687 2026] [:error] [pid 63032:tid 63075] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Mon Feb 02 04:08:15.513899 2026] [:error] [pid 63032:tid 63063] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Feb 02 04:08:17.100504 2026] [:error] [pid 63032:tid 63063] [client 138.91.34.29:28454] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Feb 02 04:08:17.359118 2026] [:error] [pid 63032:tid 63087] [client 138.91.34.29:28454] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aX-ysXyEQ1PkpebvdRgAjgAAABg"]
[Mon Feb 02 04:08:17.748637 2026] [:error] [pid 63033:tid 63092] [client 138.91.34.29:25820] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aX-ysfeMX2QyIh3K16oHtwAAAEE"]
[Mon Feb 02 04:08:18.473432 2026] [:error] [pid 63034:tid 63127] [client 138.91.34.29:25845] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aX-ysuKXlgw75_wfbHoBQwAAAIk"]
[Mon Feb 02 04:08:19.781152 2026] [:error] [pid 63153:tid 63176] [client 138.91.34.29:20677] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aX-ys3C9GXHnmLkdgdmSQAAAAM8"]
[Mon Feb 02 04:08:20.405156 2026] [:error] [pid 63034:tid 63135] [client 138.91.34.29:1708] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-ytOKXlgw75_wfbHoBSAAAAJE"]
[Mon Feb 02 04:08:21.494881 2026] [:error] [pid 63032:tid 63080] [client 138.91.34.29:13819] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-ytXyEQ1PkpebvdRgAmAAAABE"]
[Mon Feb 02 04:08:23.246069 2026] [:error] [pid 63153:tid 63176] [client 138.91.34.29:25854] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-yt3C9GXHnmLkdgdmSSQAAAM8"]
[Mon Feb 02 04:08:23.996433 2026] [:error] [pid 63034:tid 63133] [client 138.91.34.29:13450] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-yt-KXlgw75_wfbHoBUwAAAI8"]
[Mon Feb 02 04:08:24.973656 2026] [:error] [pid 63153:tid 63183] [client 138.91.34.29:20725] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws53.php"] [unique_id "aX-yuHC9GXHnmLkdgdmSTQAAANY"]
[Mon Feb 02 04:08:29.818698 2026] [:error] [pid 63034:tid 63119] [client 138.91.34.29:25831] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws53.php"] [unique_id "aX-yveKXlgw75_wfbHoBZAAAAIE"]
[Mon Feb 02 04:08:30.269731 2026] [:error] [pid 63032:tid 63073] [client 138.91.34.29:28442] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws53.php"] [unique_id "aX-yvnyEQ1PkpebvdRgArAAAAAo"]
[Mon Feb 02 04:08:30.656702 2026] [:error] [pid 63033:tid 63110] [client 138.91.34.29:23210] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws53.php"] [unique_id "aX-yvveMX2QyIh3K16oH0AAAAFM"]
[Mon Feb 02 04:08:37.437893 2026] [:error] [pid 63033:tid 63110] [client 138.91.34.29:13477] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/revealability.php"] [unique_id "aX-yxfeMX2QyIh3K16oH3QAAAFM"]
[Mon Feb 02 04:08:39.349842 2026] [:error] [pid 63032:tid 63071] [client 138.91.34.29:13502] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/revealability.php"] [unique_id "aX-yx3yEQ1PkpebvdRgAvwAAAAg"]
[Mon Feb 02 04:08:39.800306 2026] [:error] [pid 63153:tid 63174] [client 138.91.34.29:22582] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/revealability.php"] [unique_id "aX-yx3C9GXHnmLkdgdmSfQAAAM0"]
[Mon Feb 02 04:08:41.235058 2026] [:error] [pid 63153:tid 63184] [client 138.91.34.29:20673] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/revealability.php"] [unique_id "aX-yyXC9GXHnmLkdgdmSgwAAANc"]
[Mon Feb 02 04:08:42.108727 2026] [:error] [pid 63153:tid 63182] [client 138.91.34.29:20690] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/soniau.php"] [unique_id "aX-yynC9GXHnmLkdgdmSiAAAANU"]
[Mon Feb 02 04:08:45.668060 2026] [:error] [pid 63153:tid 63174] [client 138.91.34.29:20693] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/soniau.php"] [unique_id "aX-yzXC9GXHnmLkdgdmSlwAAAM0"]
[Mon Feb 02 04:08:47.946810 2026] [:error] [pid 63033:tid 63106] [client 138.91.34.29:22567] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/soniau.php"] [unique_id "aX-yz_eMX2QyIh3K16oH7AAAAE8"]
[Mon Feb 02 04:08:51.689316 2026] [:error] [pid 63153:tid 63163] [client 138.91.34.29:13815] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/soniau.php"] [unique_id "aX-y03C9GXHnmLkdgdmSqAAAAMI"]
[Mon Feb 02 04:08:57.873819 2026] [:error] [pid 63034:tid 63125] [client 138.91.34.29:20694] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws55.php"] [unique_id "aX-y2eKXlgw75_wfbHoBpQAAAIc"]
[Mon Feb 02 04:08:59.506732 2026] [:error] [pid 63034:tid 63124] [client 138.91.34.29:22594] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws55.php"] [unique_id "aX-y2-KXlgw75_wfbHoBqQAAAIY"]
[Mon Feb 02 04:09:04.436796 2026] [:error] [pid 63034:tid 63132] [client 138.91.34.29:15153] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws55.php"] [unique_id "aX-y4OKXlgw75_wfbHoBwAAAAI4"]
[Mon Feb 02 04:09:06.656888 2026] [:error] [pid 63033:tid 63100] [client 138.91.34.29:15122] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws55.php"] [unique_id "aX-y4veMX2QyIh3K16oICAAAAEk"]
[Mon Feb 02 04:09:08.056705 2026] [:error] [pid 63153:tid 63174] [client 138.91.34.29:38497] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aX-y5HC9GXHnmLkdgdmS1gAAAM0"]
[Mon Feb 02 04:09:08.873978 2026] [:error] [pid 63034:tid 63125] [client 138.91.34.29:22529] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aX-y5OKXlgw75_wfbHoB1AAAAIc"]
[Mon Feb 02 04:09:09.924704 2026] [:error] [pid 63032:tid 63076] [client 138.91.34.29:23218] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aX-y5XyEQ1PkpebvdRgA-wAAAA0"]
[Mon Feb 02 04:09:10.571961 2026] [:error] [pid 63153:tid 63180] [client 138.91.34.29:15127] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aX-y5nC9GXHnmLkdgdmS3QAAANM"]
[Mon Feb 02 04:09:19.467753 2026] [:error] [pid 63033:tid 63094] [client 138.91.34.29:20697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Feb 02 04:09:19.650221 2026] [:error] [pid 63033:tid 63098] [client 138.91.34.29:20697] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Mon Feb 02 04:34:15.319302 2026] [:error] [pid 63032:tid 63081] [client 170.106.180.139:38276] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aX-4x3yEQ1PkpebvdRgJrAAAABI"]
[Mon Feb 02 04:47:59.930069 2026] [:error] [pid 63153:tid 63175] [client 45.130.83.164:60435] [client 45.130.83.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aX-7_3C9GXHnmLkdgdmjcQAAAM4"]
[Mon Feb 02 05:02:09.630221 2026] [:error] [pid 33612:tid 33635] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Mon Feb 02 05:02:09.719343 2026] [:error] [pid 33612:tid 33624] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Mon Feb 02 05:02:09.842426 2026] [:error] [pid 33612:tid 33615] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Feb 02 05:02:09.938702 2026] [:error] [pid 33612:tid 33623] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/tempae.php
[Mon Feb 02 05:02:10.036278 2026] [:error] [pid 33612:tid 33630] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/bayss.php
[Mon Feb 02 05:02:10.141325 2026] [:error] [pid 33612:tid 33619] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon Feb 02 05:02:10.244165 2026] [:error] [pid 33612:tid 33628] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Feb 02 05:02:10.363225 2026] [:error] [pid 33612:tid 33614] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Mon Feb 02 05:02:10.461908 2026] [:error] [pid 33612:tid 33622] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Feb 02 05:02:10.555675 2026] [:error] [pid 33612:tid 33638] [client 138.91.34.29:1081] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Feb 02 05:02:10.644825 2026] [:error] [pid 33612:tid 33625] [client 138.91.34.29:1081] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aX-_UstFn80qQEmo5QovoQAAAQs"]
[Mon Feb 02 05:02:52.259010 2026] [:error] [pid 46008:tid 46035] [client 138.91.34.29:28424] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-_fCRa52iYn7SlSMnSiAAAAVg"]
[Mon Feb 02 05:02:55.280377 2026] [:error] [pid 63034:tid 63136] [client 138.91.34.29:16850] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-_f-KXlgw75_wfbHoWQwAAAJI"]
[Mon Feb 02 05:02:58.677290 2026] [:error] [pid 63033:tid 63096] [client 138.91.34.29:58158] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aX-_gveMX2QyIh3K16obFQAAAEU"]
[Mon Feb 02 05:03:19.194280 2026] [:error] [pid 63033:tid 63101] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/ws53.php
[Mon Feb 02 05:03:19.303756 2026] [:error] [pid 63033:tid 63112] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/revealability.php
[Mon Feb 02 05:03:19.395405 2026] [:error] [pid 63033:tid 63114] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/soniau.php
[Mon Feb 02 05:03:19.486547 2026] [:error] [pid 63033:tid 63113] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/ws55.php
[Mon Feb 02 05:03:19.577979 2026] [:error] [pid 63033:tid 63115] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Feb 02 05:03:19.685840 2026] [:error] [pid 63033:tid 63092] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Feb 02 05:03:19.872784 2026] [:error] [pid 63033:tid 63107] [client 138.91.34.29:1065] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Mon Feb 02 05:21:04.360762 2026] [:error] [pid 63032:tid 63066] [client 104.46.229.159:61472] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Feb 02 06:53:44.732468 2026] [:error] [pid 46008:tid 46015] [client 209.9.200.163:25982] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aX_ZeCRa52iYn7SlSMnzIQAAAUU"]
[Mon Feb 02 06:53:46.797112 2026] [:error] [pid 62826:tid 62842] [client 209.9.200.163:48827] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aX_ZeoF6vPvg_C5dUL-hegAAAY4"]
[Mon Feb 02 06:53:48.907933 2026] [:error] [pid 63034:tid 63126] [client 209.9.200.163:61332] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aX_ZfOKXlgw75_wfbHoxlQAAAIg"]
[Mon Feb 02 06:53:51.004759 2026] [:error] [pid 33612:tid 33627] [client 209.9.200.163:33530] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX_Zf8tFn80qQEmo5QpW0wAAAQ0"]
[Mon Feb 02 06:53:53.025536 2026] [:error] [pid 63153:tid 63176] [client 209.9.200.163:57086] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aX_ZgXC9GXHnmLkdgdnJPwAAAM8"]
[Mon Feb 02 06:53:55.071190 2026] [:error] [pid 63153:tid 63172] [client 209.9.200.163:52280] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aX_Zg3C9GXHnmLkdgdnJQAAAAMs"]
[Mon Feb 02 06:53:57.204850 2026] [:error] [pid 63034:tid 63127] [client 209.9.200.163:23790] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aX_ZheKXlgw75_wfbHoxnAAAAIk"]
[Mon Feb 02 06:53:59.256369 2026] [:error] [pid 63032:tid 63078] [client 209.9.200.163:1757] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aX_Zh3yEQ1PkpebvdRgsTwAAAA8"]
[Mon Feb 02 06:54:01.241792 2026] [:error] [pid 33612:tid 33622] [client 209.9.200.163:31386] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aX_ZictFn80qQEmo5QpW2gAAAQg"]
[Mon Feb 02 06:54:03.181873 2026] [:error] [pid 33612:tid 33624] [client 209.9.200.163:8842] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aX_Zi8tFn80qQEmo5QpW3wAAAQo"]
[Mon Feb 02 06:54:05.224565 2026] [:error] [pid 63153:tid 63164] [client 209.9.200.163:10743] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX_ZjXC9GXHnmLkdgdnJRgAAAMM"]
[Mon Feb 02 06:54:07.152356 2026] [:error] [pid 63153:tid 63181] [client 209.9.200.163:24545] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aX_Zj3C9GXHnmLkdgdnJSAAAANQ"]
[Mon Feb 02 06:54:09.300040 2026] [:error] [pid 33612:tid 33635] [client 209.9.200.163:32752] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aX_ZkctFn80qQEmo5QpW7AAAARU"]
[Mon Feb 02 06:54:11.366264 2026] [:error] [pid 63033:tid 63108] [client 209.9.200.163:2591] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aX_Zk_eMX2QyIh3K16o2TwAAAFE"]
[Mon Feb 02 06:54:13.402690 2026] [:error] [pid 63033:tid 63095] [client 209.9.200.163:38803] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aX_ZlfeMX2QyIh3K16o2UAAAAEQ"]
[Mon Feb 02 06:54:15.526773 2026] [:error] [pid 63032:tid 63066] [client 209.9.200.163:49435] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aX_Zl3yEQ1PkpebvdRgsZgAAAAM"]
[Mon Feb 02 06:54:17.784208 2026] [:error] [pid 63153:tid 63174] [client 209.9.200.163:5764] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX_ZmXC9GXHnmLkdgdnJYgAAAM0"]
[Mon Feb 02 06:54:19.768795 2026] [:error] [pid 33612:tid 33637] [client 209.9.200.163:19539] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aX_Zm8tFn80qQEmo5QpW9gAAARc"]
[Mon Feb 02 06:54:21.746659 2026] [:error] [pid 33612:tid 33622] [client 209.9.200.163:1515] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aX_ZnctFn80qQEmo5QpW-AAAAQg"]
[Mon Feb 02 06:54:23.868955 2026] [:error] [pid 63153:tid 63169] [client 209.9.200.163:2973] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aX_Zn3C9GXHnmLkdgdnJbAAAAMg"]
[Mon Feb 02 06:54:25.848960 2026] [:error] [pid 63153:tid 63164] [client 209.9.200.163:17325] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aX_ZoXC9GXHnmLkdgdnJcQAAAMM"]
[Mon Feb 02 06:54:27.960243 2026] [:error] [pid 63033:tid 63101] [client 209.9.200.163:48988] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aX_Zo_eMX2QyIh3K16o2XQAAAEo"]
[Mon Feb 02 06:54:30.160820 2026] [:error] [pid 33612:tid 33637] [client 209.9.200.163:9326] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aX_ZpstFn80qQEmo5QpXBQAAARc"]
[Mon Feb 02 06:54:32.281339 2026] [:error] [pid 63033:tid 63106] [client 209.9.200.163:28174] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX_ZqPeMX2QyIh3K16o2ZQAAAE8"]
[Mon Feb 02 06:54:34.293911 2026] [:error] [pid 62826:tid 62838] [client 209.9.200.163:47978] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX_ZqoF6vPvg_C5dUL-htQAAAYo"]
[Mon Feb 02 06:54:36.334207 2026] [:error] [pid 62826:tid 62835] [client 209.9.200.163:59766] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aX_ZrIF6vPvg_C5dUL-hvQAAAYc"]
[Mon Feb 02 06:54:38.507627 2026] [:error] [pid 62826:tid 62841] [client 209.9.200.163:11599] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX_ZroF6vPvg_C5dUL-hxgAAAY0"]
[Mon Feb 02 06:54:40.905419 2026] [:error] [pid 62826:tid 62838] [client 209.9.200.163:48027] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX_ZsIF6vPvg_C5dUL-hzAAAAYo"]
[Mon Feb 02 06:55:03.343906 2026] [:error] [pid 33612:tid 33615] [client 209.9.200.163:33158] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX_Zx8tFn80qQEmo5QpXKwAAAQE"]
[Mon Feb 02 06:55:05.384889 2026] [:error] [pid 62826:tid 62852] [client 209.9.200.163:56784] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aX_ZyYF6vPvg_C5dUL-h6wAAAZg"]
[Mon Feb 02 06:55:07.504907 2026] [:error] [pid 46008:tid 46013] [client 209.9.200.163:1495] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aX_ZyyRa52iYn7SlSMnzWQAAAUM"]
[Mon Feb 02 06:55:09.589819 2026] [:error] [pid 63034:tid 63127] [client 209.9.200.163:39663] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aX_ZzeKXlgw75_wfbHox3wAAAIk"]
[Mon Feb 02 06:55:11.626058 2026] [:error] [pid 46008:tid 46035] [client 209.9.200.163:30984] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX_ZzyRa52iYn7SlSMnzYwAAAVg"]
[Mon Feb 02 06:55:13.657748 2026] [:error] [pid 62826:tid 62828] [client 209.9.200.163:53405] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aX_Z0YF6vPvg_C5dUL-h7gAAAYA"]
[Mon Feb 02 06:55:15.628695 2026] [:error] [pid 33612:tid 33615] [client 209.9.200.163:58528] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aX_Z08tFn80qQEmo5QpXNgAAAQE"]
[Mon Feb 02 06:55:17.646263 2026] [:error] [pid 33612:tid 33620] [client 209.9.200.163:36666] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX_Z1ctFn80qQEmo5QpXOwAAAQY"]
[Mon Feb 02 06:55:19.620427 2026] [:error] [pid 63033:tid 63101] [client 209.9.200.163:30744] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX_Z1_eMX2QyIh3K16o2nwAAAEo"]
[Mon Feb 02 06:55:21.820473 2026] [:error] [pid 63153:tid 63183] [client 209.9.200.163:31722] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aX_Z2XC9GXHnmLkdgdnJvQAAANY"]
[Mon Feb 02 06:55:23.923998 2026] [:error] [pid 62826:tid 62845] [client 209.9.200.163:19452] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aX_Z24F6vPvg_C5dUL-iBAAAAZE"]
[Mon Feb 02 06:55:25.894765 2026] [:error] [pid 46008:tid 46034] [client 209.9.200.163:53389] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aX_Z3SRa52iYn7SlSMnzbQAAAVc"]
[Mon Feb 02 06:55:27.898183 2026] [:error] [pid 63153:tid 63185] [client 209.9.200.163:43795] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aX_Z33C9GXHnmLkdgdnJygAAANg"]
[Mon Feb 02 06:55:29.727249 2026] [:error] [pid 63033:tid 63096] [client 209.9.200.163:33695] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX_Z4feMX2QyIh3K16o2tAAAAEU"]
[Mon Feb 02 06:55:33.383713 2026] [:error] [pid 63032:tid 63075] [client 209.9.200.163:36111] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aX_Z5XyEQ1PkpebvdRgsogAAAAw"]
[Mon Feb 02 11:49:13.658421 2026] [:error] [pid 63032:tid 63082] [client 185.241.211.8:64341] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYAeuXyEQ1PkpebvdRh5cQAAABM"]
[Mon Feb 02 11:49:14.092193 2026] [:error] [pid 56989:tid 56993] [client 185.241.211.8:64503] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYAeukp44HnChN-GZlhuLwAAAgI"]
[Mon Feb 02 11:49:14.519224 2026] [:error] [pid 57080:tid 57108] [client 185.241.211.8:64691] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYAeuo9Utn0ZlfnF10PvwQAAAtU"]
[Mon Feb 02 11:49:14.955567 2026] [:error] [pid 63034:tid 63122] [client 185.241.211.8:64890] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYAeuuKXlgw75_wfbHpx8QAAAIQ"]
[Mon Feb 02 11:49:15.387838 2026] [:error] [pid 57022:tid 57054] [client 185.241.211.8:65074] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYAeuxnEgLMzfcurxfn0cwAAAoI"]
[Mon Feb 02 12:07:21.090710 2026] [:error] [pid 33612:tid 33630] [client 91.137.27.140:42385] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYAi-ctFn80qQEmo5QqoqAAAARA"]
[Mon Feb 02 12:07:22.953490 2026] [:error] [pid 56989:tid 57001] [client 91.137.27.140:43592] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYAi-kp44HnChN-GZlh17AAAAgo"]
[Mon Feb 02 12:07:24.973971 2026] [:error] [pid 57022:tid 57072] [client 91.137.27.140:6333] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYAi_BnEgLMzfcurxfn3ogAAApQ"]
[Mon Feb 02 12:07:26.854348 2026] [:error] [pid 56989:tid 56994] [client 91.137.27.140:52778] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYAi_kp44HnChN-GZlh18AAAAgM"]
[Mon Feb 02 12:07:28.870088 2026] [:error] [pid 57081:tid 57116] [client 91.137.27.140:39661] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYAjAGvouJ2Jkm6HfBjbswAAAwE"]
[Mon Feb 02 12:07:30.895677 2026] [:error] [pid 33612:tid 33618] [client 91.137.27.140:52242] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYAjAstFn80qQEmo5QqosQAAAQQ"]
[Mon Feb 02 12:45:11.202683 2026] [:error] [pid 63034:tid 63140] [client 43.166.245.120:52464] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYAr1-KXlgw75_wfbHp_QQAAAJY"]
[Mon Feb 02 12:53:07.966694 2026] [:error] [pid 57080:tid 57102] [client 43.131.36.84:48276] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYAts49Utn0ZlfnF10MBzAAAAs8"]
[Mon Feb 02 13:44:58.724780 2026] [:error] [pid 33612:tid 33628] [client 193.36.225.246:32553] [client 193.36.225.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.246, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYA52stFn80qQEmo5Qq8tQAAAQ4"]
[Mon Feb 02 13:44:58.730020 2026] [:error] [pid 33612:tid 33628] [client 193.36.225.246:32553] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Feb 02 19:15:11.871838 2026] [:error] [pid 63153:tid 63181] [client 79.137.67.86:58380] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYCHP3C9GXHnmLkdgdlzWgAAANQ"]
[Mon Feb 02 19:15:14.500175 2026] [:error] [pid 33612:tid 33628] [client 79.137.67.86:40760] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYCHQstFn80qQEmo5Qr21QAAAQ4"]
[Mon Feb 02 19:15:17.367250 2026] [:error] [pid 46008:tid 46018] [client 79.137.67.86:50140] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYCHRSRa52iYn7SlSMmXDQAAAUc"]
[Mon Feb 02 19:15:20.590254 2026] [:error] [pid 56989:tid 57003] [client 79.137.67.86:50148] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYCHSEp44HnChN-GZlj91wAAAgw"]
[Mon Feb 02 19:15:23.777826 2026] [:error] [pid 57081:tid 57122] [client 79.137.67.86:50150] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYCHS2vouJ2Jkm6HfBgu2gAAAwc"]
[Mon Feb 02 19:15:26.487883 2026] [:error] [pid 63153:tid 63185] [client 79.137.67.86:50160] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYCHTnC9GXHnmLkdgdlzaQAAANg"]
[Mon Feb 02 19:15:29.712882 2026] [:error] [pid 63153:tid 63177] [client 79.137.67.86:52064] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYCHUXC9GXHnmLkdgdlzbwAAANA"]
[Mon Feb 02 19:15:33.406411 2026] [:error] [pid 63153:tid 63168] [client 79.137.67.86:52080] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYCHVXC9GXHnmLkdgdlzcAAAAMc"]
[Mon Feb 02 19:15:37.172131 2026] [:error] [pid 33612:tid 33634] [client 79.137.67.86:52088] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYCHWctFn80qQEmo5Qr23gAAARQ"]
[Mon Feb 02 19:15:39.697253 2026] [:error] [pid 63153:tid 63176] [client 79.137.67.86:55578] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYCHW3C9GXHnmLkdgdlzeQAAAM8"]
[Mon Feb 02 19:15:42.181636 2026] [:error] [pid 63153:tid 63173] [client 79.137.67.86:55582] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYCHXnC9GXHnmLkdgdlzgQAAAMw"]
[Mon Feb 02 19:15:45.185642 2026] [:error] [pid 33612:tid 33638] [client 79.137.67.86:55598] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYCHYctFn80qQEmo5Qr24wAAARg"]
[Mon Feb 02 19:15:47.679453 2026] [:error] [pid 57022:tid 57056] [client 79.137.67.86:60448] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYCHYxnEgLMzfcurxflBJAAAAoQ"]
[Mon Feb 02 19:15:50.273900 2026] [:error] [pid 56989:tid 57007] [client 79.137.67.86:60456] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYCHZkp44HnChN-GZlj9-wAAAhA"]
[Mon Feb 02 19:15:53.083205 2026] [:error] [pid 63034:tid 63128] [client 79.137.67.86:60470] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYCHaeKXlgw75_wfbHrPrQAAAIo"]
[Mon Feb 02 19:15:55.608210 2026] [:error] [pid 56989:tid 56996] [client 79.137.67.86:60474] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYCHa0p44HnChN-GZlj-BAAAAgU"]
[Mon Feb 02 19:15:58.387051 2026] [:error] [pid 56989:tid 57001] [client 79.137.67.86:58154] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYCHbkp44HnChN-GZlj-DwAAAgo"]
[Mon Feb 02 19:16:01.439050 2026] [:error] [pid 57021:tid 57033] [client 79.137.67.86:58158] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYCHcf7AEpx7VcmYK3HxlAAAAkg"]
[Mon Feb 02 19:16:04.043005 2026] [:error] [pid 63153:tid 63164] [client 79.137.67.86:58174] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYCHdHC9GXHnmLkdgdlzjgAAAMM"]
[Mon Feb 02 19:16:06.516606 2026] [:error] [pid 57080:tid 57110] [client 79.137.67.86:58186] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYCHdo9Utn0ZlfnF10NPxgAAAtc"]
[Mon Feb 02 19:16:08.908853 2026] [:error] [pid 46008:tid 46018] [client 79.137.67.86:58546] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYCHeCRa52iYn7SlSMmXLAAAAUc"]
[Mon Feb 02 19:16:35.412912 2026] [:error] [pid 63153:tid 63182] [client 79.137.67.86:58552] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYCHk3C9GXHnmLkdgdlz1gAAANU"]
[Mon Feb 02 19:16:37.615713 2026] [:error] [pid 63034:tid 63126] [client 79.137.67.86:47160] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYCHleKXlgw75_wfbHrPxwAAAIg"]
[Mon Feb 02 19:16:40.057754 2026] [:error] [pid 63153:tid 63170] [client 79.137.67.86:47174] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYCHmHC9GXHnmLkdgdlz4AAAAMk"]
[Mon Feb 02 19:16:42.705746 2026] [:error] [pid 63034:tid 63133] [client 79.137.67.86:47188] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYCHmuKXlgw75_wfbHrPzAAAAI8"]
[Mon Feb 02 19:16:45.077031 2026] [:error] [pid 57081:tid 57139] [client 79.137.67.86:47194] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYCHnWvouJ2Jkm6HfBgvJgAAAxg"]
[Mon Feb 02 19:16:47.416221 2026] [:error] [pid 46008:tid 46016] [client 79.137.67.86:45886] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYCHnyRa52iYn7SlSMmXPwAAAUY"]
[Mon Feb 02 19:16:49.673752 2026] [:error] [pid 56989:tid 56993] [client 79.137.67.86:45896] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYCHoUp44HnChN-GZlj-LAAAAgI"]
[Mon Feb 02 19:16:52.665299 2026] [:error] [pid 56989:tid 57012] [client 79.137.67.86:45900] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYCHpEp44HnChN-GZlj-MwAAAhU"]
[Mon Feb 02 19:16:55.055028 2026] [:error] [pid 57081:tid 57125] [client 79.137.67.86:45914] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYCHp2vouJ2Jkm6HfBgvMQAAAwo"]
[Mon Feb 02 19:16:57.658912 2026] [:error] [pid 56989:tid 57004] [client 79.137.67.86:49802] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYCHqUp44HnChN-GZlj-NQAAAg0"]
[Mon Feb 02 19:16:59.860543 2026] [:error] [pid 63153:tid 63177] [client 79.137.67.86:49816] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYCHq3C9GXHnmLkdgdlz8AAAANA"]
[Mon Feb 02 19:17:02.110213 2026] [:error] [pid 33612:tid 33637] [client 79.137.67.86:49832] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYCHrstFn80qQEmo5Qr2_QAAARc"]
[Mon Feb 02 19:17:04.339193 2026] [:error] [pid 56989:tid 57004] [client 79.137.67.86:49838] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYCHsEp44HnChN-GZlj-PgAAAg0"]
[Mon Feb 02 19:17:06.867659 2026] [:error] [pid 63153:tid 63175] [client 79.137.67.86:49840] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYCHsnC9GXHnmLkdgdlz-gAAAM4"]
[Mon Feb 02 19:17:09.163464 2026] [:error] [pid 46008:tid 46026] [client 79.137.67.86:51018] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYCHtSRa52iYn7SlSMmXTwAAAU8"]
[Mon Feb 02 19:17:11.446173 2026] [:error] [pid 46008:tid 46029] [client 79.137.67.86:51028] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYCHtyRa52iYn7SlSMmXUQAAAVI"]
[Mon Feb 02 19:17:13.965019 2026] [:error] [pid 57080:tid 57087] [client 79.137.67.86:51032] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYCHuY9Utn0ZlfnF10NP8wAAAsA"]
[Mon Feb 02 19:17:16.344921 2026] [:error] [pid 63153:tid 63175] [client 79.137.67.86:51034] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYCHvHC9GXHnmLkdgdl0AwAAAM4"]
[Mon Feb 02 19:17:20.326678 2026] [:error] [pid 56989:tid 56998] [client 79.137.67.86:44306] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYCHwEp44HnChN-GZlj-UQAAAgc"]
[Mon Feb 02 19:34:53.946869 2026] [:error] [pid 63032:tid 63069] [client 191.240.131.51:60961] [client 191.240.131.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.240.131.51, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYCL3XyEQ1PkpebvdRjZpwAAAAY"]
[Mon Feb 02 19:34:53.951390 2026] [:error] [pid 63032:tid 63069] [client 191.240.131.51:60961] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 02 19:52:34.903816 2026] [:error] [pid 63153:tid 63162] [client 35.231.52.90:54581] [client 35.231.52.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.52.90, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYCQAnC9GXHnmLkdgdl-KwAAAME"]
[Mon Feb 02 19:52:34.907600 2026] [:error] [pid 63153:tid 63162] [client 35.231.52.90:54581] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 02 19:52:37.480923 2026] [:error] [pid 63153:tid 63172] [client 35.231.52.90:54581] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCQBXC9GXHnmLkdgdl-SwAAAMs"]
[Mon Feb 02 19:52:37.912841 2026] [:error] [pid 57022:tid 57054] [client 35.231.52.90:61905] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCQBRnEgLMzfcurxflGJAAAAoI"]
[Mon Feb 02 19:52:38.337732 2026] [:error] [pid 33612:tid 33622] [client 35.231.52.90:63283] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCQBstFn80qQEmo5Qr8FQAAAQg"]
[Mon Feb 02 19:52:38.780535 2026] [:error] [pid 63034:tid 63140] [client 35.231.52.90:57798] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCQBuKXlgw75_wfbHrWBwAAAJY"]
[Mon Feb 02 19:52:39.231545 2026] [:error] [pid 63034:tid 63139] [client 35.231.52.90:63392] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCQB-KXlgw75_wfbHrWCAAAAJU"]
[Mon Feb 02 19:52:39.668428 2026] [:error] [pid 57022:tid 57073] [client 35.231.52.90:61675] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCQBxnEgLMzfcurxflGKQAAApU"]
[Mon Feb 02 19:52:40.094209 2026] [:error] [pid 63034:tid 63128] [client 35.231.52.90:50552] [client 35.231.52.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCQCOKXlgw75_wfbHrWCQAAAIo"]
[Mon Feb 02 21:40:57.183662 2026] [:error] [pid 63153:tid 63180] [client 51.38.110.0:36154] [client 51.38.110.0] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYCpaXC9GXHnmLkdgdmgGgAAANM"]
[Mon Feb 02 21:40:57.185776 2026] [:error] [pid 63153:tid 63180] [client 51.38.110.0:36154] [client 51.38.110.0] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.pumpbooking.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYCpaXC9GXHnmLkdgdmgGgAAANM"]
[Mon Feb 02 21:42:13.217472 2026] [:error] [pid 33612:tid 33634] [client 195.178.110.109:9764] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aYCptctFn80qQEmo5QoO1gAAARQ"]
[Mon Feb 02 21:42:16.033216 2026] [:error] [pid 57022:tid 57058] [client 195.178.110.109:60530] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aYCpuBnEgLMzfcurxflXyQAAAoY"]
[Mon Feb 02 21:42:17.776011 2026] [:error] [pid 57022:tid 57065] [client 195.178.110.109:60536] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Mon Feb 02 21:42:18.117858 2026] [:error] [pid 57022:tid 57074] [client 195.178.110.109:60536] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/portal/.env"] [unique_id "aYCpuhnEgLMzfcurxflXzgAAApY"]
[Mon Feb 02 21:42:19.460095 2026] [:error] [pid 57021:tid 57029] [client 195.178.110.109:60546] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/env/.env"] [unique_id "aYCpu_7AEpx7VcmYK3EI0gAAAkQ"]
[Mon Feb 02 21:42:38.396332 2026] [:error] [pid 57081:tid 57131] [client 195.178.110.109:4478] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aYCpzmvouJ2Jkm6HfBhKFgAAAxA"]
[Mon Feb 02 21:42:40.164323 2026] [:error] [pid 46008:tid 46031] [client 195.178.110.109:20410] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aYCp0CRa52iYn7SlSMmxbwAAAVQ"]
[Mon Feb 02 21:42:41.660175 2026] [:error] [pid 57081:tid 57124] [client 195.178.110.109:20424] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/dev/.env"] [unique_id "aYCp0WvouJ2Jkm6HfBhKHgAAAwk"]
[Mon Feb 02 22:14:16.657476 2026] [:error] [pid 57080:tid 57108] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Mon Feb 02 22:14:16.748216 2026] [:error] [pid 57080:tid 57100] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Mon Feb 02 22:14:16.932752 2026] [:error] [pid 57080:tid 57095] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Feb 02 22:14:17.301854 2026] [:error] [pid 57080:tid 57087] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/tempae.php
[Mon Feb 02 22:14:17.550404 2026] [:error] [pid 57080:tid 57110] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/bayss.php
[Mon Feb 02 22:14:17.658374 2026] [:error] [pid 57080:tid 57088] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon Feb 02 22:14:17.828564 2026] [:error] [pid 57080:tid 57091] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Feb 02 22:14:17.934415 2026] [:error] [pid 57080:tid 57107] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Mon Feb 02 22:14:18.049978 2026] [:error] [pid 57080:tid 57097] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Feb 02 22:14:18.351134 2026] [:error] [pid 57080:tid 57090] [client 4.194.216.14:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Feb 02 22:14:18.690124 2026] [:error] [pid 57080:tid 57089] [client 4.194.216.14:55453] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aYCxOo9Utn0ZlfnF10NsEAAAAsI"]
[Mon Feb 02 22:14:20.442368 2026] [:error] [pid 57081:tid 57139] [client 4.194.216.14:20539] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aYCxPGvouJ2Jkm6HfBhQjwAAAxg"]
[Mon Feb 02 22:14:30.314041 2026] [:error] [pid 63034:tid 63136] [client 4.194.216.14:22123] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bk.php"] [unique_id "aYCxRuKXlgw75_wfbHryVgAAAJI"]
[Mon Feb 02 22:14:41.926901 2026] [:error] [pid 57021:tid 57043] [client 4.194.216.14:19772] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aYCxUf7AEpx7VcmYK3EOLQAAAlI"]
[Mon Feb 02 22:14:43.146239 2026] [:error] [pid 63032:tid 63084] [client 4.194.216.14:22090] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aYCxU3yEQ1PkpebvdRj6FgAAABU"]
[Mon Feb 02 22:14:45.267225 2026] [:error] [pid 63032:tid 63079] [client 4.194.216.14:55487] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aYCxVXyEQ1PkpebvdRj6GQAAABA"]
[Mon Feb 02 22:14:46.919662 2026] [:error] [pid 57081:tid 57122] [client 4.194.216.14:20528] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aYCxVmvouJ2Jkm6HfBhQrQAAAwc"]
[Mon Feb 02 22:14:54.164798 2026] [:error] [pid 63153:tid 63183] [client 4.194.216.14:20508] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws53.php"] [unique_id "aYCxXnC9GXHnmLkdgdmqtQAAANY"]
[Mon Feb 02 22:14:55.105963 2026] [:error] [pid 33612:tid 33634] [client 4.194.216.14:55457] [client 4.194.216.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws53.php"] [unique_id "aYCxX8tFn80qQEmo5QoU-AAAARQ"]
[Mon Feb 02 22:15:23.212201 2026] [:error] [pid 57021:tid 57039] [client 4.194.216.14:55484] File does not exist: /usr/local/apache/htdocs/suspended-page/revealability.php
[Mon Feb 02 22:15:23.316900 2026] [:error] [pid 57021:tid 57037] [client 4.194.216.14:55484] File does not exist: /usr/local/apache/htdocs/suspended-page/soniau.php
[Mon Feb 02 22:15:23.414207 2026] [:error] [pid 57021:tid 57048] [client 4.194.216.14:55484] File does not exist: /usr/local/apache/htdocs/suspended-page/ws55.php
[Mon Feb 02 22:15:23.523822 2026] [:error] [pid 57021:tid 57031] [client 4.194.216.14:55484] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Feb 02 22:15:23.622884 2026] [:error] [pid 57021:tid 57026] [client 4.194.216.14:55484] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Feb 02 22:15:23.821712 2026] [:error] [pid 57021:tid 57047] [client 4.194.216.14:55484] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Tue Feb 03 00:23:48.880241 2026] [:error] [pid 63153:tid 63182] [client 193.36.225.30:61573] [client 193.36.225.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.30, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYDPlHC9GXHnmLkdgdnTUwAAANU"]
[Tue Feb 03 00:23:48.882610 2026] [:error] [pid 63153:tid 63182] [client 193.36.225.30:61573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Feb 03 00:32:11.992019 2026] [:error] [pid 46008:tid 46034] [client 213.87.162.75:9580] [client 213.87.162.75] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=video/mpeg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYDRiyRa52iYn7SlSMnOGwAAAVc"]
[Tue Feb 03 00:32:12.403039 2026] [:error] [pid 46008:tid 46013] [client 213.87.162.75:9580] [client 213.87.162.75] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=video/mpeg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYDRjCRa52iYn7SlSMnOHAAAAUM"]
[Tue Feb 03 00:32:12.806948 2026] [:error] [pid 46008:tid 46023] [client 213.87.162.75:9580] [client 213.87.162.75] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=video/mpeg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYDRjCRa52iYn7SlSMnOHQAAAUw"]
[Tue Feb 03 01:00:34.295327 2026] [:error] [pid 56989:tid 57013] [client 65.108.125.120:57304] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYDYMkp44HnChN-GZlhPRgAAAhY"]
[Tue Feb 03 01:00:36.175974 2026] [:error] [pid 56989:tid 57014] [client 65.108.125.120:57318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYDYNEp44HnChN-GZlhPSwAAAhc"]
[Tue Feb 03 01:00:38.080958 2026] [:error] [pid 63034:tid 63140] [client 65.108.125.120:49266] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYDYNuKXlgw75_wfbHoQrgAAAJY"]
[Tue Feb 03 01:00:40.093143 2026] [:error] [pid 63153:tid 63163] [client 65.108.125.120:49268] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYDYOHC9GXHnmLkdgdnfogAAAMI"]
[Tue Feb 03 01:00:42.121961 2026] [:error] [pid 57081:tid 57132] [client 65.108.125.120:49284] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYDYOmvouJ2Jkm6HfBhtjgAAAxE"]
[Tue Feb 03 01:00:44.134791 2026] [:error] [pid 63153:tid 63179] [client 65.108.125.120:49300] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYDYPHC9GXHnmLkdgdnfpQAAANI"]
[Tue Feb 03 01:00:46.046041 2026] [:error] [pid 63153:tid 63167] [client 65.108.125.120:49306] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYDYPnC9GXHnmLkdgdnfpgAAAMY"]
[Tue Feb 03 01:00:48.117880 2026] [:error] [pid 63032:tid 63081] [client 65.108.125.120:11608] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYDYQHyEQ1PkpebvdRgb1QAAABI"]
[Tue Feb 03 01:00:50.127289 2026] [:error] [pid 33612:tid 33630] [client 65.108.125.120:11614] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYDYQstFn80qQEmo5QovagAAARA"]
[Tue Feb 03 01:00:52.140572 2026] [:error] [pid 33612:tid 33624] [client 65.108.125.120:11624] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYDYRMtFn80qQEmo5QovawAAAQo"]
[Tue Feb 03 01:00:54.139398 2026] [:error] [pid 57080:tid 57095] [client 65.108.125.120:11636] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYDYRo9Utn0ZlfnF10OEtgAAAsg"]
[Tue Feb 03 01:00:56.157830 2026] [:error] [pid 57021:tid 57042] [client 65.108.125.120:11646] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYDYSP7AEpx7VcmYK3EoEwAAAlE"]
[Tue Feb 03 01:00:58.192778 2026] [:error] [pid 63032:tid 63078] [client 65.108.125.120:4360] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYDYSnyEQ1PkpebvdRgb2gAAAA8"]
[Tue Feb 03 01:01:00.226696 2026] [:error] [pid 63032:tid 63087] [client 65.108.125.120:4374] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYDYTHyEQ1PkpebvdRgb2wAAABg"]
[Tue Feb 03 01:01:02.244137 2026] [:error] [pid 63153:tid 63183] [client 65.108.125.120:4382] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYDYTnC9GXHnmLkdgdnfuQAAANY"]
[Tue Feb 03 01:01:04.127306 2026] [:error] [pid 63032:tid 63070] [client 65.108.125.120:4398] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYDYUHyEQ1PkpebvdRgb3wAAAAc"]
[Tue Feb 03 01:01:06.182043 2026] [:error] [pid 33612:tid 33619] [client 65.108.125.120:4408] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYDYUstFn80qQEmo5QovdQAAAQU"]
[Tue Feb 03 01:01:08.091765 2026] [:error] [pid 33612:tid 33616] [client 65.108.125.120:49650] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYDYVMtFn80qQEmo5QoveQAAAQI"]
[Tue Feb 03 01:01:10.110790 2026] [:error] [pid 56989:tid 57008] [client 65.108.125.120:49652] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYDYVkp44HnChN-GZlhPYgAAAhE"]
[Tue Feb 03 01:01:12.161062 2026] [:error] [pid 63153:tid 63168] [client 65.108.125.120:49666] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYDYWHC9GXHnmLkdgdnfvQAAAMc"]
[Tue Feb 03 01:01:14.175161 2026] [:error] [pid 63034:tid 63121] [client 65.108.125.120:49678] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYDYWuKXlgw75_wfbHoQxQAAAIM"]
[Tue Feb 03 01:01:16.065055 2026] [:error] [pid 63153:tid 63176] [client 65.108.125.120:49686] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYDYXHC9GXHnmLkdgdnfwQAAAM8"]
[Tue Feb 03 01:01:18.129731 2026] [:error] [pid 63153:tid 63174] [client 65.108.125.120:65506] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYDYXnC9GXHnmLkdgdnfxwAAAM0"]
[Tue Feb 03 01:01:20.019924 2026] [:error] [pid 63032:tid 63087] [client 65.108.125.120:65508] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYDYYHyEQ1PkpebvdRgb8AAAABg"]
[Tue Feb 03 01:01:22.048294 2026] [:error] [pid 56989:tid 57014] [client 65.108.125.120:65518] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYDYYkp44HnChN-GZlhPaQAAAhc"]
[Tue Feb 03 01:01:24.084714 2026] [:error] [pid 57081:tid 57120] [client 65.108.125.120:65530] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYDYZGvouJ2Jkm6HfBhtpQAAAwU"]
[Tue Feb 03 01:01:26.091066 2026] [:error] [pid 57080:tid 57087] [client 65.108.125.120:65534] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYDYZo9Utn0ZlfnF10OEzwAAAsA"]
[Tue Feb 03 01:01:28.220334 2026] [:error] [pid 56989:tid 57001] [client 65.108.125.120:27934] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYDYaEp44HnChN-GZlhPawAAAgo"]
[Tue Feb 03 01:01:30.087728 2026] [:error] [pid 57080:tid 57109] [client 65.108.125.120:27936] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYDYao9Utn0ZlfnF10OE0QAAAtY"]
[Tue Feb 03 01:01:31.970275 2026] [:error] [pid 57022:tid 57072] [client 65.108.125.120:27946] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYDYaxnEgLMzfcurxfl1PgAAApQ"]
[Tue Feb 03 01:01:56.198853 2026] [:error] [pid 57022:tid 57069] [client 65.108.125.120:18330] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYDYhBnEgLMzfcurxfl1SwAAApE"]
[Tue Feb 03 01:01:58.098172 2026] [:error] [pid 57081:tid 57136] [client 65.108.125.120:1312] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYDYhmvouJ2Jkm6HfBhtsQAAAxU"]
[Tue Feb 03 01:02:03.853048 2026] [:error] [pid 57022:tid 57061] [client 65.108.125.120:1320] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYDYixnEgLMzfcurxfl1UAAAAok"]
[Tue Feb 03 01:02:05.980190 2026] [:error] [pid 57022:tid 57073] [client 65.108.125.120:1330] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYDYjRnEgLMzfcurxfl1VQAAApU"]
[Tue Feb 03 01:02:07.821148 2026] [:error] [pid 56989:tid 57007] [client 65.108.125.120:52680] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYDYj0p44HnChN-GZlhPkwAAAhA"]
[Tue Feb 03 01:02:09.872861 2026] [:error] [pid 63034:tid 63120] [client 65.108.125.120:52690] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYDYkeKXlgw75_wfbHoQ_gAAAII"]
[Tue Feb 03 01:02:11.791351 2026] [:error] [pid 57081:tid 57122] [client 65.108.125.120:52698] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYDYk2vouJ2Jkm6HfBhttAAAAwc"]
[Tue Feb 03 01:02:13.727106 2026] [:error] [pid 57080:tid 57102] [client 65.108.125.120:52708] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYDYlY9Utn0ZlfnF10OE4gAAAs8"]
[Tue Feb 03 01:02:15.704813 2026] [:error] [pid 63153:tid 63176] [client 65.108.125.120:52710] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYDYl3C9GXHnmLkdgdngCQAAAM8"]
[Tue Feb 03 01:02:17.809508 2026] [:error] [pid 56989:tid 57010] [client 65.108.125.120:30008] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYDYmUp44HnChN-GZlhPnQAAAhM"]
[Tue Feb 03 01:02:19.717210 2026] [:error] [pid 63034:tid 63129] [client 65.108.125.120:30020] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYDYm-KXlgw75_wfbHoRAAAAAIs"]
[Tue Feb 03 01:02:22.626903 2026] [:error] [pid 63153:tid 63170] [client 65.108.125.120:30028] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYDYnnC9GXHnmLkdgdngDwAAAMk"]
[Tue Feb 03 01:02:26.588520 2026] [:error] [pid 63032:tid 63082] [client 65.108.125.120:30036] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYDYonyEQ1PkpebvdRgcEgAAABM"]
[Tue Feb 03 02:28:45.283493 2026] [:error] [pid 46008:tid 46021] [client 192.144.148.122:60180] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYDs3SRa52iYn7SlSMno0gAAAUo"]
[Tue Feb 03 02:48:52.111104 2026] [:error] [pid 46008:tid 46026] [client 49.51.132.100:58676] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYDxlCRa52iYn7SlSMnvIQAAAU8"]
[Tue Feb 03 06:24:43.074452 2026] [:error] [pid 42922:tid 43005] [client 152.53.197.67:53606] [client 152.53.197.67] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/x-shockwave-flash"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYEkK2azX4WPS_dQRkiuQgAAAJQ"]
[Tue Feb 03 10:12:26.697411 2026] [:error] [pid 5229:tid 5253] [client 49.51.245.241:44738] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYFZikKmEgmJub93yUr5-gAAAZY"]
[Tue Feb 03 10:24:29.490655 2026] [:error] [pid 42920:tid 42941] [client 150.109.119.38:43770] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYFcXSix3YKltG4EU0nnDgAAAAw"]
[Tue Feb 03 12:31:09.823609 2026] [:error] [pid 42921:tid 42967] [client 145.239.69.44:56858] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYF6DYblShffGl-01of9lgAAAEk"]
[Tue Feb 03 12:31:11.786406 2026] [:error] [pid 5229:tid 5233] [client 145.239.69.44:36438] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYF6D0KmEgmJub93yUo4UQAAAYI"]
[Tue Feb 03 12:31:13.844935 2026] [:error] [pid 43028:tid 43035] [client 145.239.69.44:36450] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYF6EVnHWnJD4cJC5DsSPwAAAMU"]
[Tue Feb 03 12:31:15.942861 2026] [:error] [pid 5148:tid 5173] [client 145.239.69.44:36464] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYF6E783HCHLtUIbS7JLqAAAAVY"]
[Tue Feb 03 12:31:17.884652 2026] [:error] [pid 43028:tid 43049] [client 145.239.69.44:36476] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYF6FVnHWnJD4cJC5DsSRAAAANM"]
[Tue Feb 03 12:31:20.026505 2026] [:error] [pid 43028:tid 43046] [client 145.239.69.44:36482] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYF6GFnHWnJD4cJC5DsSRgAAANA"]
[Tue Feb 03 12:31:22.172374 2026] [:error] [pid 5229:tid 5254] [client 145.239.69.44:52482] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYF6GkKmEgmJub93yUo4cwAAAZc"]
[Tue Feb 03 12:31:24.235283 2026] [:error] [pid 28720:tid 28726] [client 145.239.69.44:52498] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYF6HGmRXm2bmr_sYiZMeAAAAQQ"]
[Tue Feb 03 12:31:26.182228 2026] [:error] [pid 28720:tid 28741] [client 145.239.69.44:52510] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYF6HmmRXm2bmr_sYiZMfAAAARM"]
[Tue Feb 03 12:31:28.194140 2026] [:error] [pid 5229:tid 5237] [client 145.239.69.44:52520] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYF6IEKmEgmJub93yUo4fAAAAYY"]
[Tue Feb 03 12:31:30.304123 2026] [:error] [pid 5229:tid 5234] [client 145.239.69.44:52534] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYF6IkKmEgmJub93yUo4gAAAAYM"]
[Tue Feb 03 12:31:32.419389 2026] [:error] [pid 43028:tid 43051] [client 145.239.69.44:33508] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYF6JFnHWnJD4cJC5DsSUgAAANU"]
[Tue Feb 03 12:31:34.390781 2026] [:error] [pid 28720:tid 28725] [client 145.239.69.44:33518] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYF6JmmRXm2bmr_sYiZMhwAAAQM"]
[Tue Feb 03 12:31:36.316830 2026] [:error] [pid 5148:tid 5171] [client 145.239.69.44:33526] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYF6KL83HCHLtUIbS7JL0AAAAVQ"]
[Tue Feb 03 12:31:38.233697 2026] [:error] [pid 42922:tid 43006] [client 145.239.69.44:33538] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYF6KmazX4WPS_dQRkgeggAAAJU"]
[Tue Feb 03 12:31:40.209798 2026] [:error] [pid 42922:tid 42996] [client 145.239.69.44:33552] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYF6LGazX4WPS_dQRkgehQAAAIs"]
[Tue Feb 03 12:31:42.117913 2026] [:error] [pid 5229:tid 5234] [client 145.239.69.44:40286] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYF6LkKmEgmJub93yUo4kgAAAYM"]
[Tue Feb 03 12:31:44.022112 2026] [:error] [pid 42921:tid 42977] [client 145.239.69.44:40290] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYF6MIblShffGl-01of92wAAAFM"]
[Tue Feb 03 12:31:45.934957 2026] [:error] [pid 5148:tid 5170] [client 145.239.69.44:40300] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYF6Mb83HCHLtUIbS7JL3wAAAVM"]
[Tue Feb 03 12:31:47.868675 2026] [:error] [pid 28720:tid 28722] [client 145.239.69.44:40314] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYF6M2mRXm2bmr_sYiZMmwAAAQA"]
[Tue Feb 03 12:31:50.270048 2026] [:error] [pid 28720:tid 28730] [client 145.239.69.44:40320] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYF6NmmRXm2bmr_sYiZMnwAAAQg"]
[Tue Feb 03 12:31:52.175343 2026] [:error] [pid 28720:tid 28727] [client 145.239.69.44:50874] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYF6OGmRXm2bmr_sYiZMpwAAAQU"]
[Tue Feb 03 12:31:54.083015 2026] [:error] [pid 5229:tid 5249] [client 145.239.69.44:50876] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYF6OkKmEgmJub93yUo4ogAAAZI"]
[Tue Feb 03 12:31:55.982557 2026] [:error] [pid 5148:tid 5173] [client 145.239.69.44:50888] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYF6O783HCHLtUIbS7JL7AAAAVY"]
[Tue Feb 03 12:31:57.878795 2026] [:error] [pid 43028:tid 43034] [client 145.239.69.44:50896] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYF6PVnHWnJD4cJC5DsSbQAAAMQ"]
[Tue Feb 03 12:31:59.765649 2026] [:error] [pid 42921:tid 42958] [client 145.239.69.44:50904] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYF6P4blShffGl-01of95QAAAEA"]
[Tue Feb 03 12:32:01.702856 2026] [:error] [pid 42922:tid 43008] [client 145.239.69.44:53298] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYF6QWazX4WPS_dQRkgenwAAAJc"]
[Tue Feb 03 12:32:03.604991 2026] [:error] [pid 5148:tid 5175] [client 145.239.69.44:53308] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYF6Q783HCHLtUIbS7JMAAAAAVg"]
[Tue Feb 03 12:32:05.506253 2026] [:error] [pid 42921:tid 42977] [client 145.239.69.44:53320] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYF6RYblShffGl-01of97wAAAFM"]
[Tue Feb 03 12:32:25.417736 2026] [:error] [pid 42922:tid 42988] [client 145.239.69.44:53328] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYF6WWazX4WPS_dQRkgevwAAAIM"]
[Tue Feb 03 12:32:27.279674 2026] [:error] [pid 28720:tid 28732] [client 145.239.69.44:60116] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYF6W2mRXm2bmr_sYiZM3QAAAQo"]
[Tue Feb 03 12:32:29.191939 2026] [:error] [pid 28720:tid 28733] [client 145.239.69.44:60120] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYF6XWmRXm2bmr_sYiZM4AAAAQs"]
[Tue Feb 03 12:32:31.220629 2026] [:error] [pid 42920:tid 42933] [client 145.239.69.44:60128] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYF6Xyix3YKltG4EU0kIigAAAAQ"]
[Tue Feb 03 12:32:33.288343 2026] [:error] [pid 42921:tid 42978] [client 145.239.69.44:41856] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYF6YYblShffGl-01of-CQAAAFQ"]
[Tue Feb 03 12:32:35.232158 2026] [:error] [pid 43028:tid 43034] [client 145.239.69.44:41872] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYF6Y1nHWnJD4cJC5DsSogAAAMQ"]
[Tue Feb 03 12:32:37.112202 2026] [:error] [pid 5229:tid 5233] [client 145.239.69.44:41880] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYF6ZUKmEgmJub93yUo40AAAAYI"]
[Tue Feb 03 12:32:39.036719 2026] [:error] [pid 5229:tid 5245] [client 145.239.69.44:41896] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYF6Z0KmEgmJub93yUo40wAAAY4"]
[Tue Feb 03 12:32:41.025035 2026] [:error] [pid 42920:tid 42949] [client 145.239.69.44:41898] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYF6aSix3YKltG4EU0kIlQAAABQ"]
[Tue Feb 03 12:32:44.223272 2026] [:error] [pid 5148:tid 5152] [client 145.239.69.44:45708] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYF6bL83HCHLtUIbS7JMNAAAAUE"]
[Tue Feb 03 12:32:48.108396 2026] [:error] [pid 28720:tid 28741] [client 145.239.69.44:45718] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYF6cGmRXm2bmr_sYiZM7wAAARM"]
[Tue Feb 03 12:56:38.698617 2026] [:error] [pid 28720:tid 28735] [client 62.84.185.52:21888] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYGABmmRXm2bmr_sYiZTIQAAAQ0"]
[Tue Feb 03 12:56:40.809310 2026] [:error] [pid 5229:tid 5253] [client 62.84.185.52:21898] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYGACEKmEgmJub93yUpC4gAAAZY"]
[Tue Feb 03 12:56:42.840558 2026] [:error] [pid 5229:tid 5252] [client 62.84.185.52:21914] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYGACkKmEgmJub93yUpC5gAAAZU"]
[Tue Feb 03 12:56:44.957061 2026] [:error] [pid 5229:tid 5244] [client 62.84.185.52:21928] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYGADEKmEgmJub93yUpC7AAAAY0"]
[Tue Feb 03 12:56:47.121706 2026] [:error] [pid 42922:tid 42993] [client 62.84.185.52:9170] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYGAD2azX4WPS_dQRkgkoQAAAIg"]
[Tue Feb 03 12:56:49.140057 2026] [:error] [pid 42921:tid 42968] [client 62.84.185.52:9182] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYGAEYblShffGl-01ocC4gAAAEo"]
[Tue Feb 03 17:04:33.516391 2026] [:error] [pid 43028:tid 43035] [client 43.134.141.244:45050] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYG6IVnHWnJD4cJC5DtYSgAAAMU"]
[Tue Feb 03 18:34:39.193721 2026] [:error] [pid 5148:tid 5162] [client 145.239.65.236:51152] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYHPP783HCHLtUIbS7K8egAAAUs"]
[Tue Feb 03 18:34:41.951663 2026] [:error] [pid 28720:tid 28724] [client 145.239.65.236:41884] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYHPQWmRXm2bmr_sYiaqhgAAAQI"]
[Tue Feb 03 18:34:44.365488 2026] [:error] [pid 5229:tid 5251] [client 145.239.65.236:41890] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYHPREKmEgmJub93yUrJUwAAAZQ"]
[Tue Feb 03 18:34:46.848260 2026] [:error] [pid 42920:tid 42944] [client 145.239.65.236:41900] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYHPRiix3YKltG4EU0lfpgAAAA8"]
[Tue Feb 03 18:34:49.354027 2026] [:error] [pid 42920:tid 42937] [client 145.239.65.236:46986] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYHPSSix3YKltG4EU0lfqwAAAAg"]
[Tue Feb 03 18:34:51.976201 2026] [:error] [pid 42921:tid 42968] [client 145.239.65.236:46996] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYHPS4blShffGl-01odUWgAAAEo"]
[Tue Feb 03 18:34:54.306586 2026] [:error] [pid 42920:tid 42951] [client 145.239.65.236:47002] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYHPTiix3YKltG4EU0lftQAAABY"]
[Tue Feb 03 18:34:56.883396 2026] [:error] [pid 5229:tid 5247] [client 145.239.65.236:47016] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYHPUEKmEgmJub93yUrJVwAAAZA"]
[Tue Feb 03 18:34:58.987689 2026] [:error] [pid 42920:tid 42932] [client 145.239.65.236:46218] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYHPUiix3YKltG4EU0lfwAAAAAM"]
[Tue Feb 03 18:35:01.203039 2026] [:error] [pid 5229:tid 5234] [client 145.239.65.236:46234] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYHPVUKmEgmJub93yUrJZQAAAYM"]
[Tue Feb 03 18:35:03.433404 2026] [:error] [pid 43028:tid 43034] [client 145.239.65.236:46244] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYHPV1nHWnJD4cJC5DtvfwAAAMQ"]
[Tue Feb 03 18:35:05.657039 2026] [:error] [pid 42921:tid 42972] [client 145.239.65.236:46252] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYHPWYblShffGl-01odUdQAAAE4"]
[Tue Feb 03 18:35:07.882686 2026] [:error] [pid 5148:tid 5154] [client 145.239.65.236:46256] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYHPW783HCHLtUIbS7K8mAAAAUM"]
[Tue Feb 03 18:35:10.128930 2026] [:error] [pid 5229:tid 5242] [client 145.239.65.236:40900] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYHPXkKmEgmJub93yUrJegAAAYs"]
[Tue Feb 03 18:35:12.218143 2026] [:error] [pid 42922:tid 42994] [client 145.239.65.236:40914] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYHPYGazX4WPS_dQRkh1PgAAAIk"]
[Tue Feb 03 18:35:14.325533 2026] [:error] [pid 5229:tid 5247] [client 145.239.65.236:40916] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYHPYkKmEgmJub93yUrJgAAAAZA"]
[Tue Feb 03 18:35:16.527227 2026] [:error] [pid 5148:tid 5167] [client 145.239.65.236:40922] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYHPZL83HCHLtUIbS7K8pQAAAVA"]
[Tue Feb 03 18:35:18.649587 2026] [:error] [pid 5229:tid 5243] [client 145.239.65.236:50704] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYHPZkKmEgmJub93yUrJgwAAAYw"]
[Tue Feb 03 18:35:20.954747 2026] [:error] [pid 42920:tid 42944] [client 145.239.65.236:50714] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYHPaCix3YKltG4EU0lf2wAAAA8"]
[Tue Feb 03 18:35:23.225997 2026] [:error] [pid 42920:tid 42938] [client 145.239.65.236:50726] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYHPayix3YKltG4EU0lf3QAAAAk"]
[Tue Feb 03 18:35:25.345056 2026] [:error] [pid 42921:tid 42964] [client 145.239.65.236:50728] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYHPbYblShffGl-01odUiAAAAEY"]
[Tue Feb 03 18:35:27.534077 2026] [:error] [pid 28720:tid 28728] [client 145.239.65.236:50732] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYHPb2mRXm2bmr_sYiaquQAAAQY"]
[Tue Feb 03 18:35:29.687258 2026] [:error] [pid 5148:tid 5155] [client 145.239.65.236:57664] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYHPcb83HCHLtUIbS7K8qgAAAUQ"]
[Tue Feb 03 18:35:31.718538 2026] [:error] [pid 5229:tid 5246] [client 145.239.65.236:57680] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYHPc0KmEgmJub93yUrJjwAAAY8"]
[Tue Feb 03 18:35:33.905069 2026] [:error] [pid 5229:tid 5247] [client 145.239.65.236:57694] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYHPdUKmEgmJub93yUrJlAAAAZA"]
[Tue Feb 03 18:35:36.119009 2026] [:error] [pid 43028:tid 43053] [client 145.239.65.236:57710] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYHPeFnHWnJD4cJC5DtvoQAAANc"]
[Tue Feb 03 18:35:58.171194 2026] [:error] [pid 42921:tid 42981] [client 145.239.65.236:33884] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYHPjoblShffGl-01odUsAAAAFc"]
[Tue Feb 03 18:36:00.187906 2026] [:error] [pid 42921:tid 42982] [client 145.239.65.236:54774] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYHPkIblShffGl-01odUsQAAAFg"]
[Tue Feb 03 18:36:02.177378 2026] [:error] [pid 5148:tid 5170] [client 145.239.65.236:54786] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYHPkr83HCHLtUIbS7K87gAAAVM"]
[Tue Feb 03 18:36:04.209837 2026] [:error] [pid 42920:tid 42939] [client 145.239.65.236:54796] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYHPlCix3YKltG4EU0lgEwAAAAo"]
[Tue Feb 03 18:36:06.209629 2026] [:error] [pid 5229:tid 5234] [client 145.239.65.236:54804] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYHPlkKmEgmJub93yUrJuwAAAYM"]
[Tue Feb 03 18:36:08.183346 2026] [:error] [pid 5229:tid 5248] [client 145.239.65.236:54808] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYHPmEKmEgmJub93yUrJvgAAAZE"]
[Tue Feb 03 18:36:10.108475 2026] [:error] [pid 42922:tid 43007] [client 145.239.65.236:36838] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYHPmmazX4WPS_dQRkh1dwAAAJY"]
[Tue Feb 03 18:36:12.070196 2026] [:error] [pid 42920:tid 42950] [client 145.239.65.236:36852] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYHPnCix3YKltG4EU0lgHQAAABU"]
[Tue Feb 03 18:36:14.007528 2026] [:error] [pid 5229:tid 5249] [client 145.239.65.236:36866] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYHPnkKmEgmJub93yUrJwwAAAZI"]
[Tue Feb 03 18:36:15.921940 2026] [:error] [pid 42920:tid 42941] [client 145.239.65.236:36878] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYHPnyix3YKltG4EU0lgIgAAAAw"]
[Tue Feb 03 18:36:17.845542 2026] [:error] [pid 5148:tid 5161] [client 145.239.65.236:36880] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYHPob83HCHLtUIbS7K8_wAAAUo"]
[Tue Feb 03 18:36:19.905005 2026] [:error] [pid 5229:tid 5247] [client 145.239.65.236:42276] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYHPo0KmEgmJub93yUrJzgAAAZA"]
[Tue Feb 03 18:36:21.833867 2026] [:error] [pid 42920:tid 42943] [client 145.239.65.236:42280] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYHPpSix3YKltG4EU0lgNQAAAA4"]
[Tue Feb 03 18:36:23.745910 2026] [:error] [pid 43028:tid 43043] [client 145.239.65.236:42284] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYHPp1nHWnJD4cJC5DtwFwAAAM0"]
[Tue Feb 03 18:36:25.648004 2026] [:error] [pid 5229:tid 5252] [client 145.239.65.236:42300] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYHPqUKmEgmJub93yUrJ2gAAAZU"]
[Tue Feb 03 18:36:28.855685 2026] [:error] [pid 42922:tid 43000] [client 145.239.65.236:60620] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYHPrGazX4WPS_dQRkh1iwAAAI8"]
[Tue Feb 03 18:36:32.610865 2026] [:error] [pid 5148:tid 5164] [client 145.239.65.236:60626] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYHPsL83HCHLtUIbS7K9DQAAAU0"]
[Tue Feb 03 19:34:38.238455 2026] [:error] [pid 42920:tid 42944] [client 103.65.236.149:50594] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aYHdTiix3YKltG4EU0lufAAAAA8"]
[Tue Feb 03 19:34:38.552098 2026] [:error] [pid 42921:tid 42978] [client 103.65.236.149:50632] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aYHdToblShffGl-01odilgAAAFQ"]
[Tue Feb 03 19:52:13.472821 2026] [:error] [pid 42920:tid 42936] [client 20.205.110.134:4025] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 03 20:05:55.410018 2026] [:error] [pid 5148:tid 5169] [client 20.212.208.117:1336] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 03 23:45:14.054261 2026] [:error] [pid 42920:tid 42952] [client 43.130.67.6:36114] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYIYCiix3YKltG4EU0mxbwAAABc"]
[Wed Feb 04 01:14:20.620104 2026] [:error] [pid 42920:tid 42950] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 04 01:14:20.848115 2026] [:error] [pid 42920:tid 42949] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 04 01:14:21.008433 2026] [:error] [pid 42920:tid 42947] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Feb 04 01:14:21.162139 2026] [:error] [pid 42920:tid 42952] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 04 01:14:21.316024 2026] [:error] [pid 42920:tid 42946] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Feb 04 01:14:21.487720 2026] [:error] [pid 42920:tid 42939] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 04 01:14:21.674251 2026] [:error] [pid 42920:tid 42935] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 04 01:14:21.868026 2026] [:error] [pid 42920:tid 42938] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 04 01:14:22.237637 2026] [:error] [pid 42920:tid 42937] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 04 01:14:22.640042 2026] [:error] [pid 42920:tid 42933] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Feb 04 01:14:22.804562 2026] [:error] [pid 42920:tid 42951] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Feb 04 01:14:22.957677 2026] [:error] [pid 42920:tid 42943] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 04 01:14:23.149761 2026] [:error] [pid 42920:tid 42930] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Feb 04 01:14:23.312948 2026] [:error] [pid 42920:tid 42936] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Feb 04 01:14:23.479188 2026] [:error] [pid 42920:tid 42940] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Feb 04 01:14:23.628305 2026] [:error] [pid 42920:tid 42944] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Feb 04 01:14:23.779567 2026] [:error] [pid 42920:tid 42941] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Feb 04 01:14:23.957485 2026] [:error] [pid 42920:tid 42948] [client 173.239.196.169:57877] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Feb 04 01:14:26.352688 2026] [:error] [pid 42920:tid 42931] [client 173.239.196.169:57877] [client 173.239.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYIs8iix3YKltG4EU0nHQQAAAAI"]
[Wed Feb 04 01:14:27.192756 2026] [:error] [pid 42920:tid 42942] [client 173.239.196.170:37107] [client 173.239.196.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYIs8yix3YKltG4EU0nHSQAAAA0"]
[Wed Feb 04 01:14:28.018426 2026] [:error] [pid 28720:tid 28741] [client 173.239.196.175:55509] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Feb 04 01:14:28.534526 2026] [:error] [pid 28720:tid 28744] [client 173.239.196.175:55509] [client 173.239.196.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aYIs9GmRXm2bmr_sYiYVjQAAARY"]
[Wed Feb 04 01:14:29.233899 2026] [:error] [pid 42920:tid 42952] [client 173.239.196.172:27571] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 04 01:14:29.409034 2026] [:error] [pid 42920:tid 42947] [client 173.239.196.172:27571] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYIs9Six3YKltG4EU0nHVQAAABI"]
[Wed Feb 04 01:14:29.934502 2026] [:error] [pid 43028:tid 43033] [client 173.239.196.173:63147] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Feb 04 01:14:30.750810 2026] [:error] [pid 43028:tid 43042] [client 173.239.196.173:63147] [client 173.239.196.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYIs9lnHWnJD4cJC5DsTrQAAAMw"]
[Wed Feb 04 01:14:31.230490 2026] [:error] [pid 42921:tid 42969] [client 173.239.196.170:40843] [client 173.239.196.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYIs94blShffGl-01oe92AAAAEs"]
[Wed Feb 04 01:14:31.626822 2026] [:error] [pid 5229:tid 5240] [client 173.239.196.168:28715] [client 173.239.196.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYIs90KmEgmJub93yUpVcgAAAYk"]
[Wed Feb 04 01:14:31.921069 2026] [:error] [pid 5148:tid 5164] [client 173.239.196.171:48489] [client 173.239.196.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYIs9783HCHLtUIbS7I0KQAAAU0"]
[Wed Feb 04 01:14:32.314590 2026] [:error] [pid 5229:tid 5246] [client 173.239.196.174:55391] [client 173.239.196.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYIs-EKmEgmJub93yUpVdQAAAY8"]
[Wed Feb 04 01:14:32.603792 2026] [:error] [pid 43028:tid 43036] [client 173.239.196.172:54205] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYIs-FnHWnJD4cJC5DsTtgAAAMY"]
[Wed Feb 04 01:14:33.119077 2026] [:error] [pid 5229:tid 5253] [client 173.239.196.172:22669] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYIs-UKmEgmJub93yUpVeQAAAZY"]
[Wed Feb 04 01:14:33.459430 2026] [:error] [pid 42920:tid 42940] [client 173.239.196.175:57809] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Feb 04 01:14:33.804091 2026] [:error] [pid 42920:tid 42951] [client 173.239.196.175:57809] [client 173.239.196.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aYIs-Six3YKltG4EU0nHagAAABY"]
[Wed Feb 04 01:14:34.584729 2026] [:error] [pid 28720:tid 28743] [client 173.239.196.172:23229] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYIs-mmRXm2bmr_sYiYVrwAAARU"]
[Wed Feb 04 01:14:35.176612 2026] [:error] [pid 5229:tid 5246] [client 173.239.196.171:23365] [client 173.239.196.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYIs-0KmEgmJub93yUpVgwAAAY8"]
[Wed Feb 04 01:14:35.498888 2026] [:error] [pid 43028:tid 43045] [client 173.239.196.170:21221] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Feb 04 01:14:35.695566 2026] [:error] [pid 43028:tid 43047] [client 173.239.196.170:21221] [client 173.239.196.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYIs-1nHWnJD4cJC5DsTvAAAANE"]
[Wed Feb 04 01:14:37.667776 2026] [:error] [pid 42921:tid 42980] [client 173.239.196.172:47907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Feb 04 01:14:38.162091 2026] [:error] [pid 42921:tid 42968] [client 173.239.196.172:47907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Feb 04 01:14:38.691768 2026] [:error] [pid 42921:tid 42981] [client 173.239.196.172:47907] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYIs_oblShffGl-01oe98wAAAFc"]
[Wed Feb 04 01:14:39.073530 2026] [:error] [pid 42920:tid 42930] [client 173.239.196.170:35221] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Feb 04 01:14:39.222170 2026] [:error] [pid 42920:tid 42933] [client 173.239.196.170:35221] [client 173.239.196.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYIs_yix3YKltG4EU0nHgwAAAAQ"]
[Wed Feb 04 01:14:39.613257 2026] [:error] [pid 42921:tid 42958] [client 173.239.196.171:55925] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Feb 04 01:14:39.987849 2026] [:error] [pid 42921:tid 42976] [client 173.239.196.171:55925] [client 173.239.196.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aYIs_4blShffGl-01oe9-wAAAFI"]
[Wed Feb 04 01:14:40.621435 2026] [:error] [pid 28720:tid 28740] [client 173.239.196.169:64383] [client 173.239.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYItAGmRXm2bmr_sYiYVwAAAARI"]
[Wed Feb 04 01:14:41.132341 2026] [:error] [pid 5229:tid 5249] [client 173.239.196.175:21579] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Feb 04 01:14:41.293761 2026] [:error] [pid 5229:tid 5254] [client 173.239.196.175:21579] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Feb 04 01:14:41.665569 2026] [:error] [pid 5229:tid 5255] [client 173.239.196.175:21579] [client 173.239.196.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYItAUKmEgmJub93yUpVqAAAAZg"]
[Wed Feb 04 01:14:42.181874 2026] [:error] [pid 42921:tid 42967] [client 173.239.196.173:49329] [client 173.239.196.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYItAoblShffGl-01oe-AgAAAEk"]
[Wed Feb 04 01:14:42.678837 2026] [:error] [pid 42920:tid 42944] [client 173.239.196.172:57063] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYItAiix3YKltG4EU0nHkAAAAA8"]
[Wed Feb 04 01:14:43.173709 2026] [:error] [pid 42922:tid 42994] [client 173.239.196.174:20357] [client 173.239.196.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYItA2azX4WPS_dQRkjgvQAAAIk"]
[Wed Feb 04 01:14:43.540727 2026] [:error] [pid 5229:tid 5253] [client 173.239.196.174:56199] [client 173.239.196.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYItA0KmEgmJub93yUpVuAAAAZY"]
[Wed Feb 04 01:14:44.237241 2026] [:error] [pid 42920:tid 42951] [client 173.239.196.172:58527] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Feb 04 01:14:44.389778 2026] [:error] [pid 42920:tid 42946] [client 173.239.196.172:58527] [client 173.239.196.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aYItBCix3YKltG4EU0nHmAAAABE"]
[Wed Feb 04 01:14:44.721034 2026] [:error] [pid 28720:tid 28741] [client 173.239.196.169:52591] [client 173.239.196.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aYItBGmRXm2bmr_sYiYV1QAAARM"]
[Wed Feb 04 01:14:45.077706 2026] [:error] [pid 42922:tid 43003] [client 173.239.196.173:41265] [client 173.239.196.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYItBWazX4WPS_dQRkjgwgAAAJI"]
[Wed Feb 04 01:14:45.779785 2026] [:error] [pid 42920:tid 42944] [client 173.239.196.170:35477] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Feb 04 01:14:46.114233 2026] [:error] [pid 42920:tid 42932] [client 173.239.196.170:35477] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Feb 04 01:14:46.978758 2026] [:error] [pid 42920:tid 42938] [client 173.239.196.170:35477] [client 173.239.196.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aYItBiix3YKltG4EU0nHrAAAAAk"]
[Wed Feb 04 02:03:59.436945 2026] [:error] [pid 43028:tid 43045] [client 185.137.164.10:57569] [client 185.137.164.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "aYI4j1nHWnJD4cJC5DssygAAAM8"]
[Wed Feb 04 02:37:41.400636 2026] [:error] [pid 42921:tid 42964] [client 200.101.188.62:57545] [client 200.101.188.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.101.188.62, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYJAdYblShffGl-01ofXFgAAAEY"]
[Wed Feb 04 02:37:41.405189 2026] [:error] [pid 42921:tid 42964] [client 200.101.188.62:57545] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 04 02:41:44.523471 2026] [:error] [pid 42920:tid 42936] [client 132.255.157.35:39625] [client 132.255.157.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.255.157.35, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYJBaCix3YKltG4EU0nh4wAAAAc"]
[Wed Feb 04 02:41:44.527900 2026] [:error] [pid 42920:tid 42936] [client 132.255.157.35:39625] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 04 03:24:43.381483 2026] [:error] [pid 16861:tid 16911] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Feb 04 03:24:43.564784 2026] [:error] [pid 16861:tid 16912] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Wed Feb 04 03:24:43.671500 2026] [:error] [pid 16861:tid 16910] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Wed Feb 04 03:24:43.784694 2026] [:error] [pid 16861:tid 16915] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 04 03:24:43.876666 2026] [:error] [pid 16861:tid 16913] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Wed Feb 04 03:24:44.152443 2026] [:error] [pid 16861:tid 16902] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Wed Feb 04 03:24:44.372959 2026] [:error] [pid 16861:tid 16919] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Wed Feb 04 03:24:44.942764 2026] [:error] [pid 16861:tid 16924] [client 20.212.106.95:11486] File does not exist: /usr/local/apache/htdocs/suspended-page/tx1.php
[Wed Feb 04 03:24:45.341608 2026] [:error] [pid 16861:tid 16920] [client 20.212.106.95:11486] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYJLff9YMG-KYdJ2gPCh9QAAAFM"]
[Wed Feb 04 03:24:46.555446 2026] [:error] [pid 16861:tid 16918] [client 20.212.106.95:27540] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYJLfv9YMG-KYdJ2gPCh9gAAAFE"]
[Wed Feb 04 03:24:47.983982 2026] [:error] [pid 16862:tid 16944] [client 20.212.106.95:36036] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYJLf_GO7AI3pfxBWeCgxQAAAJA"]
[Wed Feb 04 03:25:21.514379 2026] [:error] [pid 16958:tid 16964] [client 20.212.106.95:27575] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYJLofsRIl-kVnfUdfCDMgAAAMQ"]
[Wed Feb 04 03:25:24.504705 2026] [:error] [pid 16861:tid 16915] [client 20.212.106.95:11782] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYJLpP9YMG-KYdJ2gPCiHwAAAE4"]
[Wed Feb 04 03:25:27.160429 2026] [:error] [pid 16861:tid 16916] [client 20.212.106.95:27571] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYJLp_9YMG-KYdJ2gPCiKAAAAE8"]
[Wed Feb 04 03:26:28.073865 2026] [:error] [pid 16861:tid 16901] [client 193.36.225.28:50495] [client 193.36.225.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.28, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYJL5P9YMG-KYdJ2gPCieQAAAEA"]
[Wed Feb 04 03:26:28.078430 2026] [:error] [pid 16861:tid 16901] [client 193.36.225.28:50495] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Feb 04 03:26:46.734523 2026] [:error] [pid 16860:tid 16889] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Wed Feb 04 03:26:46.855069 2026] [:error] [pid 16860:tid 16883] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/x50.php
[Wed Feb 04 03:26:46.950536 2026] [:error] [pid 16860:tid 16895] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/fv.php
[Wed Feb 04 03:26:47.361494 2026] [:error] [pid 16860:tid 16878] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 04 03:26:47.471823 2026] [:error] [pid 16860:tid 16885] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/lsd.php
[Wed Feb 04 03:26:47.767110 2026] [:error] [pid 16860:tid 16880] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Feb 04 03:26:47.866106 2026] [:error] [pid 16860:tid 16893] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Wed Feb 04 03:26:47.959793 2026] [:error] [pid 16860:tid 16894] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Wed Feb 04 03:26:48.051371 2026] [:error] [pid 16860:tid 16884] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Wed Feb 04 03:26:48.146405 2026] [:error] [pid 16860:tid 16888] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Wed Feb 04 03:26:48.422473 2026] [:error] [pid 16860:tid 16891] [client 20.212.106.95:37320] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Feb 04 03:26:48.509916 2026] [:error] [pid 16860:tid 16872] [client 20.212.106.95:37320] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aYJL-D18YldW5ODbQKT-aQAAAAE"]
[Wed Feb 04 03:27:10.406912 2026] [:error] [pid 16861:tid 16908] [client 20.212.106.95:30019] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aYJMDv9YMG-KYdJ2gPCi0gAAAEc"]
[Wed Feb 04 03:28:32.491849 2026] [:error] [pid 16862:tid 16950] [client 20.212.106.95:34610] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Feb 04 03:28:32.583040 2026] [:error] [pid 16862:tid 16939] [client 20.212.106.95:34610] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Feb 04 03:28:32.675731 2026] [:error] [pid 16862:tid 16946] [client 20.212.106.95:34610] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Feb 04 03:28:33.067623 2026] [:error] [pid 16862:tid 16932] [client 20.212.106.95:34610] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Feb 04 03:28:33.328290 2026] [:error] [pid 16862:tid 16937] [client 20.212.106.95:34610] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Feb 04 03:28:33.420715 2026] [:error] [pid 16862:tid 16929] [client 20.212.106.95:34610] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Feb 04 03:28:33.512494 2026] [:error] [pid 16862:tid 16952] [client 20.212.106.95:34610] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYJMYfGO7AI3pfxBWeCiuAAAAJg"]
[Wed Feb 04 03:28:34.618595 2026] [:error] [pid 16862:tid 16935] [client 20.212.106.95:56232] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Feb 04 03:28:34.728432 2026] [:error] [pid 16862:tid 16941] [client 20.212.106.95:56232] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Wed Feb 04 03:28:34.834268 2026] [:error] [pid 16862:tid 16945] [client 20.212.106.95:56232] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed Feb 04 03:28:35.068580 2026] [:error] [pid 16862:tid 16950] [client 20.212.106.95:56232] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYJMY_GO7AI3pfxBWeCivgAAAJY"]
[Wed Feb 04 03:28:36.246424 2026] [:error] [pid 29874:tid 29886] [client 20.212.106.95:34574] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYJMZPtd9qYYVqfx39WJBQAAAQA"]
[Wed Feb 04 03:28:48.405445 2026] [:error] [pid 29874:tid 29900] [client 20.212.106.95:12267] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYJMcPtd9qYYVqfx39WJEgAAAQ4"]
[Wed Feb 04 03:28:52.314380 2026] [:error] [pid 16861:tid 16902] [client 20.212.106.95:28885] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYJMdP9YMG-KYdJ2gPCjUAAAAEE"]
[Wed Feb 04 03:28:57.650251 2026] [:error] [pid 16958:tid 16979] [client 20.212.106.95:27470] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYJMefsRIl-kVnfUdfCEAwAAANM"]
[Wed Feb 04 03:29:08.382620 2026] [:error] [pid 29874:tid 29890] [client 20.212.106.95:12225] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYJMhPtd9qYYVqfx39WJMQAAAQQ"]
[Wed Feb 04 03:29:11.067472 2026] [:error] [pid 16862:tid 16937] [client 20.212.106.95:12238] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYJMh_GO7AI3pfxBWeCi5wAAAIk"]
[Wed Feb 04 03:29:15.728100 2026] [:error] [pid 29874:tid 29898] [client 20.212.106.95:32804] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYJMi_td9qYYVqfx39WJQwAAAQw"]
[Wed Feb 04 03:29:29.630023 2026] [:error] [pid 16862:tid 16948] [client 20.212.106.95:32822] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aYJMmfGO7AI3pfxBWeCi9AAAAJQ"]
[Wed Feb 04 03:29:55.583256 2026] [:error] [pid 47577:tid 47589] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 04 03:29:55.777816 2026] [:error] [pid 47577:tid 47587] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Feb 04 03:29:57.259247 2026] [:error] [pid 47577:tid 47587] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Feb 04 03:29:57.791952 2026] [:error] [pid 47577:tid 47588] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Feb 04 03:29:57.973709 2026] [:error] [pid 47577:tid 47597] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 04 03:29:58.086420 2026] [:error] [pid 47577:tid 47598] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 04 03:29:58.542852 2026] [:error] [pid 47577:tid 47590] [client 20.212.106.95:11590] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Feb 04 03:29:58.943733 2026] [:error] [pid 47577:tid 47604] [client 20.212.106.95:11590] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYJMtqvA4Yp0Sov-3kTDXgAAABc"]
[Wed Feb 04 03:30:08.764049 2026] [:error] [pid 47578:tid 47627] [client 20.212.106.95:33505] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYJMwJ5oatM9u8-yDv-7DQAAAEw"]
[Wed Feb 04 03:30:18.294783 2026] [:error] [pid 47578:tid 47619] [client 20.212.106.95:36095] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYJMyp5oatM9u8-yDv-7GAAAAEQ"]
[Wed Feb 04 03:30:20.181304 2026] [:error] [pid 47579:tid 47654] [client 20.212.106.95:11787] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYJMzPuxWks846_Vi2yJuwAAAIo"]
[Wed Feb 04 03:30:30.667711 2026] [:error] [pid 47579:tid 47664] [client 20.212.106.95:27542] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYJM1vuxWks846_Vi2yJzQAAAJQ"]
[Wed Feb 04 03:30:31.822584 2026] [:error] [pid 47577:tid 47589] [client 20.212.106.95:56190] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYJM16vA4Yp0Sov-3kTDgwAAAAg"]
[Wed Feb 04 03:30:35.517566 2026] [:error] [pid 47579:tid 47661] [client 20.212.106.95:56172] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYJM2_uxWks846_Vi2yJ2QAAAJE"]
[Wed Feb 04 03:30:43.818771 2026] [:error] [pid 47579:tid 47665] [client 20.212.106.95:34018] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYJM4_uxWks846_Vi2yJ6gAAAJU"]
[Wed Feb 04 03:30:47.377233 2026] [:error] [pid 47577:tid 47595] [client 20.212.106.95:28066] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYJM56vA4Yp0Sov-3kTDnAAAAA4"]
[Wed Feb 04 03:30:50.193894 2026] [:error] [pid 47578:tid 47620] [client 20.212.106.95:29361] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYJM6p5oatM9u8-yDv-7XQAAAEU"]
[Wed Feb 04 03:30:51.857567 2026] [:error] [pid 47676:tid 47696] [client 20.212.106.95:29287] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYJM6wrYSkTgZEfUDqEsawAAANI"]
[Wed Feb 04 03:30:56.851537 2026] [:error] [pid 47579:tid 47654] [client 20.212.106.95:11431] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYJM8PuxWks846_Vi2yKFAAAAIo"]
[Wed Feb 04 03:30:58.458392 2026] [:error] [pid 47577:tid 47585] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed Feb 04 03:30:59.044154 2026] [:error] [pid 47577:tid 47604] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Wed Feb 04 03:30:59.295097 2026] [:error] [pid 47577:tid 47594] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Wed Feb 04 03:30:59.506810 2026] [:error] [pid 47577:tid 47588] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Feb 04 03:30:59.600073 2026] [:error] [pid 47577:tid 47584] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Feb 04 03:30:59.697060 2026] [:error] [pid 47577:tid 47591] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Feb 04 03:30:59.787912 2026] [:error] [pid 47577:tid 47600] [client 20.212.106.95:11435] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Feb 04 03:31:00.071840 2026] [:error] [pid 47577:tid 47597] [client 20.212.106.95:11435] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYJM9KvA4Yp0Sov-3kTDvAAAABA"]
[Wed Feb 04 03:31:01.082661 2026] [:error] [pid 47676:tid 47689] [client 20.212.106.95:26905] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYJM9QrYSkTgZEfUDqEsdwAAAMs"]
[Wed Feb 04 03:31:02.696366 2026] [:error] [pid 47579:tid 47665] [client 20.212.106.95:28533] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYJM9vuxWks846_Vi2yKJQAAAJU"]
[Wed Feb 04 03:31:04.718242 2026] [:error] [pid 47676:tid 47692] [client 20.212.106.95:28492] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYJM-ArYSkTgZEfUDqEsfwAAAM4"]
[Wed Feb 04 03:31:07.878993 2026] [:error] [pid 47676:tid 47694] [client 20.212.106.95:28512] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYJM-wrYSkTgZEfUDqEsigAAANA"]
[Wed Feb 04 03:31:08.859660 2026] [:error] [pid 47579:tid 47665] [client 20.212.106.95:28509] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYJM_PuxWks846_Vi2yKNQAAAJU"]
[Wed Feb 04 03:31:10.690276 2026] [:error] [pid 47676:tid 47683] [client 20.212.106.95:28539] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYJM_grYSkTgZEfUDqEskQAAAMU"]
[Wed Feb 04 03:31:13.226958 2026] [:error] [pid 47578:tid 47638] [client 20.212.106.95:11317] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYJNAZ5oatM9u8-yDv-7dgAAAFY"]
[Wed Feb 04 03:31:15.610838 2026] [:error] [pid 47578:tid 47632] [client 20.212.106.95:26923] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYJNA55oatM9u8-yDv-7fAAAAFE"]
[Wed Feb 04 03:31:17.659057 2026] [:error] [pid 47577:tid 47603] [client 20.212.106.95:38895] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aYJNBavA4Yp0Sov-3kTDywAAABY"]
[Wed Feb 04 03:31:38.031303 2026] [:error] [pid 47676:tid 47682] [client 20.212.106.95:11420] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYJNGgrYSkTgZEfUDqEswwAAAMQ"]
[Wed Feb 04 03:31:45.925306 2026] [:error] [pid 47676:tid 47692] [client 20.212.106.95:29267] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYJNIQrYSkTgZEfUDqEsyQAAAM4"]
[Wed Feb 04 03:31:46.881745 2026] [:error] [pid 47579:tid 47645] [client 20.212.106.95:11453] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYJNIvuxWks846_Vi2yKggAAAIE"]
[Wed Feb 04 03:31:48.432222 2026] [:error] [pid 47676:tid 47699] [client 20.212.106.95:29363] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYJNJArYSkTgZEfUDqEszwAAANU"]
[Wed Feb 04 03:31:50.341142 2026] [:error] [pid 47579:tid 47644] [client 20.212.106.95:29358] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYJNJvuxWks846_Vi2yKigAAAIA"]
[Wed Feb 04 03:31:51.679214 2026] [:error] [pid 47676:tid 47688] [client 20.212.106.95:11418] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aYJNJwrYSkTgZEfUDqEs2gAAAMo"]
[Wed Feb 04 03:31:53.913477 2026] [:error] [pid 47676:tid 47691] [client 20.212.106.95:29250] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aYJNKQrYSkTgZEfUDqEs6AAAAM0"]
[Wed Feb 04 03:32:17.544300 2026] [:error] [pid 47577:tid 47592] [client 20.212.106.95:36943] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYJNQavA4Yp0Sov-3kTELgAAAAs"]
[Wed Feb 04 03:32:19.994556 2026] [:error] [pid 47579:tid 47656] [client 20.212.106.95:29714] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYJNQ_uxWks846_Vi2yK4QAAAIw"]
[Wed Feb 04 03:32:21.557928 2026] [:error] [pid 47676:tid 47702] [client 20.212.106.95:26849] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Wed Feb 04 03:32:21.842351 2026] [:error] [pid 47676:tid 47700] [client 20.212.106.95:26849] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Feb 04 03:32:22.024591 2026] [:error] [pid 47676:tid 47698] [client 20.212.106.95:26849] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Wed Feb 04 03:32:22.376986 2026] [:error] [pid 47676:tid 47682] [client 20.212.106.95:26849] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYJNRgrYSkTgZEfUDqEtHwAAAMQ"]
[Wed Feb 04 03:32:26.548154 2026] [:error] [pid 47676:tid 47702] [client 20.212.106.95:26839] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYJNSgrYSkTgZEfUDqEtKAAAANc"]
[Wed Feb 04 03:32:34.231850 2026] [:error] [pid 47577:tid 47590] [client 20.212.106.95:11527] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYJNUqvA4Yp0Sov-3kTENwAAAAk"]
[Wed Feb 04 03:32:36.098529 2026] [:error] [pid 47578:tid 47622] [client 20.212.106.95:11773] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYJNVJ5oatM9u8-yDv-76QAAAEc"]
[Wed Feb 04 03:32:37.983442 2026] [:error] [pid 47676:tid 47684] [client 20.212.106.95:11715] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYJNVQrYSkTgZEfUDqEtRQAAAMY"]
[Wed Feb 04 03:32:38.947068 2026] [:error] [pid 47579:tid 47646] [client 20.212.106.95:37697] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aYJNVvuxWks846_Vi2yLCwAAAII"]
[Wed Feb 04 03:32:40.272514 2026] [:error] [pid 47578:tid 47631] [client 20.212.106.95:11524] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aYJNWJ5oatM9u8-yDv-78QAAAFA"]
[Wed Feb 04 03:32:44.921734 2026] [:error] [pid 47577:tid 47584] [client 20.212.106.95:39307] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aYJNXKvA4Yp0Sov-3kTEQgAAAAM"]
[Wed Feb 04 03:32:46.225689 2026] [:error] [pid 47579:tid 47655] [client 20.212.106.95:56234] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aYJNXvuxWks846_Vi2yLFAAAAIs"]
[Wed Feb 04 03:33:09.354909 2026] [:error] [pid 47579:tid 47652] [client 20.212.106.95:39337] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aYJNdfuxWks846_Vi2yLLgAAAIg"]
[Wed Feb 04 03:33:11.103485 2026] [:error] [pid 47578:tid 47624] [client 20.212.106.95:37750] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aYJNd55oatM9u8-yDv-8FQAAAEk"]
[Wed Feb 04 03:33:13.180580 2026] [:error] [pid 47577:tid 47596] [client 20.212.106.95:29702] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aYJNeavA4Yp0Sov-3kTEWwAAAA8"]
[Wed Feb 04 03:33:30.913111 2026] [:error] [pid 47676:tid 47697] [client 20.212.106.95:36148] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Feb 04 03:33:31.009399 2026] [:error] [pid 47676:tid 47681] [client 20.212.106.95:36148] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Wed Feb 04 03:33:31.103907 2026] [:error] [pid 47676:tid 47688] [client 20.212.106.95:36148] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYJNiwrYSkTgZEfUDqEtqwAAAMo"]
[Wed Feb 04 03:33:32.215295 2026] [:error] [pid 47577:tid 47592] [client 20.212.106.95:28007] [client 20.212.106.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYJNjKvA4Yp0Sov-3kTEawAAAAs"]
[Wed Feb 04 03:33:35.241101 2026] [:error] [pid 47577:tid 47587] [client 20.212.106.95:11662] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 04 03:33:35.334894 2026] [:error] [pid 47577:tid 47588] [client 20.212.106.95:11662] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Wed Feb 04 03:33:35.431826 2026] [:error] [pid 47577:tid 47596] [client 20.212.106.95:11662] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Wed Feb 04 03:33:35.535935 2026] [:error] [pid 47577:tid 47593] [client 20.212.106.95:11662] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Wed Feb 04 03:33:35.648432 2026] [:error] [pid 47577:tid 47602] [client 20.212.106.95:11662] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Wed Feb 04 03:33:35.746490 2026] [:error] [pid 47577:tid 47591] [client 20.212.106.95:11662] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYJNj6vA4Yp0Sov-3kTEdAAAAAo"]
[Wed Feb 04 03:33:37.795410 2026] [:error] [pid 47676:tid 47700] [client 20.212.106.95:36703] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYJNkQrYSkTgZEfUDqEtsAAAANY"]
[Wed Feb 04 03:33:39.813566 2026] [:error] [pid 47578:tid 47627] [client 20.212.106.95:37722] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYJNk55oatM9u8-yDv-8NAAAAEw"]
[Wed Feb 04 03:33:46.134430 2026] [:error] [pid 47676:tid 47688] [client 20.212.106.95:36101] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYJNmgrYSkTgZEfUDqEtwQAAAMo"]
[Wed Feb 04 03:33:50.387241 2026] [:error] [pid 47577:tid 47588] [client 20.212.106.95:37737] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYJNnqvA4Yp0Sov-3kTEjQAAAAc"]
[Wed Feb 04 03:33:50.988618 2026] [:error] [pid 47579:tid 47668] [client 20.212.106.95:36152] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYJNnvuxWks846_Vi2yLYAAAAJg"]
[Wed Feb 04 03:33:55.992183 2026] [:error] [pid 47577:tid 47590] [client 20.212.106.95:35356] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYJNo6vA4Yp0Sov-3kTElQAAAAk"]
[Wed Feb 04 03:33:57.902565 2026] [:error] [pid 47578:tid 47626] [client 20.212.106.95:11770] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYJNpZ5oatM9u8-yDv-8TgAAAEs"]
[Wed Feb 04 03:35:14.927838 2026] [:error] [pid 47578:tid 47625] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Wed Feb 04 03:35:15.231906 2026] [:error] [pid 47578:tid 47623] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Wed Feb 04 03:35:15.348712 2026] [:error] [pid 47578:tid 47632] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Feb 04 03:35:15.439076 2026] [:error] [pid 47578:tid 47628] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Feb 04 03:35:15.551562 2026] [:error] [pid 47578:tid 47616] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Wed Feb 04 03:35:16.264779 2026] [:error] [pid 47578:tid 47631] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Wed Feb 04 03:35:16.357273 2026] [:error] [pid 47578:tid 47621] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Wed Feb 04 03:35:16.463505 2026] [:error] [pid 47578:tid 47635] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Wed Feb 04 03:35:16.558972 2026] [:error] [pid 47578:tid 47618] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Wed Feb 04 03:35:16.648817 2026] [:error] [pid 47578:tid 47620] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Feb 04 03:35:16.738897 2026] [:error] [pid 47578:tid 47615] [client 20.212.106.95:11918] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Wed Feb 04 03:35:16.826011 2026] [:error] [pid 47578:tid 47624] [client 20.212.106.95:11918] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYJN9J5oatM9u8-yDv-8xgAAAEk"]
[Wed Feb 04 03:35:18.956343 2026] [:error] [pid 47577:tid 47603] [client 20.212.106.95:34073] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYJN9qvA4Yp0Sov-3kTE-AAAABY"]
[Wed Feb 04 03:35:26.984800 2026] [:error] [pid 47676:tid 47699] [client 20.212.106.95:11746] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYJN_grYSkTgZEfUDqEuwAAAANU"]
[Wed Feb 04 03:35:29.815775 2026] [:error] [pid 47577:tid 47586] [client 20.212.106.95:33599] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYJOAavA4Yp0Sov-3kTFCAAAAAU"]
[Wed Feb 04 03:36:06.820387 2026] [:error] [pid 47577:tid 47600] [client 20.212.106.95:29318] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYJOJqvA4Yp0Sov-3kTFLQAAABM"]
[Wed Feb 04 03:36:10.040571 2026] [:error] [pid 47579:tid 47651] [client 20.212.106.95:11449] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYJOKvuxWks846_Vi2yMMAAAAIc"]
[Wed Feb 04 03:36:12.102525 2026] [:error] [pid 47578:tid 47616] [client 20.212.106.95:29644] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYJOLJ5oatM9u8-yDv-9JgAAAEE"]
[Wed Feb 04 03:36:47.389096 2026] [:error] [pid 47676:tid 47679] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Wed Feb 04 03:36:47.491461 2026] [:error] [pid 47676:tid 47703] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Wed Feb 04 03:36:47.610563 2026] [:error] [pid 47676:tid 47687] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 04 03:36:47.724477 2026] [:error] [pid 47676:tid 47678] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Wed Feb 04 03:36:47.833151 2026] [:error] [pid 47676:tid 47692] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Wed Feb 04 03:36:47.947563 2026] [:error] [pid 47676:tid 47690] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Wed Feb 04 03:36:48.077333 2026] [:error] [pid 47676:tid 47680] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Wed Feb 04 03:36:48.207647 2026] [:error] [pid 47676:tid 47681] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Wed Feb 04 03:36:48.325772 2026] [:error] [pid 47676:tid 47684] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Feb 04 03:36:48.437436 2026] [:error] [pid 47676:tid 47696] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Wed Feb 04 03:36:48.539658 2026] [:error] [pid 47676:tid 47683] [client 20.212.106.95:29666] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Wed Feb 04 03:36:48.630637 2026] [:error] [pid 47676:tid 47693] [client 20.212.106.95:29666] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aYJOUArYSkTgZEfUDqEv4QAAAM8"]
[Wed Feb 04 03:36:59.415691 2026] [:error] [pid 47577:tid 47605] [client 20.212.106.95:11979] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aYJOW6vA4Yp0Sov-3kTFlgAAABg"]
[Wed Feb 04 03:37:00.965246 2026] [:error] [pid 47577:tid 47592] [client 20.212.106.95:11411] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aYJOXKvA4Yp0Sov-3kTFmQAAAAs"]
[Wed Feb 04 03:37:15.623340 2026] [:error] [pid 47577:tid 47587] [client 20.212.106.95:11431] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aYJOa6vA4Yp0Sov-3kTFqAAAAAY"]
[Wed Feb 04 03:37:25.948219 2026] [:error] [pid 47676:tid 47681] [client 20.212.106.95:11425] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aYJOdQrYSkTgZEfUDqEwLQAAAMM"]
[Wed Feb 04 03:37:28.225706 2026] [:error] [pid 47676:tid 47694] [client 20.212.106.95:30042] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aYJOeArYSkTgZEfUDqEwNAAAANA"]
[Wed Feb 04 03:37:30.516233 2026] [:error] [pid 47579:tid 47660] [client 20.212.106.95:37367] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aYJOevuxWks846_Vi2yMoQAAAJA"]
[Wed Feb 04 03:37:31.670517 2026] [:error] [pid 47579:tid 47658] [client 20.212.106.95:56226] [client 20.212.106.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aYJOe_uxWks846_Vi2yMpwAAAI4"]
[Wed Feb 04 03:37:49.028010 2026] [:error] [pid 47579:tid 47656] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Wed Feb 04 03:37:49.135156 2026] [:error] [pid 47579:tid 47653] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Wed Feb 04 03:37:49.229764 2026] [:error] [pid 47579:tid 47647] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Wed Feb 04 03:37:49.344124 2026] [:error] [pid 47579:tid 47646] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Feb 04 03:37:49.452369 2026] [:error] [pid 47579:tid 47651] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Wed Feb 04 03:37:49.570967 2026] [:error] [pid 47579:tid 47668] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Wed Feb 04 03:37:49.664203 2026] [:error] [pid 47579:tid 47659] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Wed Feb 04 03:37:49.776154 2026] [:error] [pid 47579:tid 47664] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Wed Feb 04 03:37:49.886007 2026] [:error] [pid 47579:tid 47652] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Wed Feb 04 03:37:49.993746 2026] [:error] [pid 47579:tid 47660] [client 20.212.106.95:56219] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Wed Feb 04 04:26:19.498015 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 04 04:26:19.799204 2026] [:error] [pid 47578:tid 47628] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 04 04:26:20.064414 2026] [:error] [pid 47578:tid 47620] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Feb 04 04:26:20.463648 2026] [:error] [pid 47578:tid 47630] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 04 04:26:20.740002 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Feb 04 04:26:21.049719 2026] [:error] [pid 47578:tid 47633] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 04 04:26:21.345640 2026] [:error] [pid 47578:tid 47615] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 04 04:26:21.680406 2026] [:error] [pid 47578:tid 47622] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 04 04:26:22.261907 2026] [:error] [pid 47578:tid 47640] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 04 04:26:23.040395 2026] [:error] [pid 47578:tid 47631] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Feb 04 04:26:23.595074 2026] [:error] [pid 47578:tid 47629] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Feb 04 04:26:23.901389 2026] [:error] [pid 47578:tid 47630] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 04 04:26:24.213432 2026] [:error] [pid 47578:tid 47619] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Feb 04 04:26:24.512017 2026] [:error] [pid 47578:tid 47615] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Feb 04 04:26:25.124886 2026] [:error] [pid 47578:tid 47625] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Feb 04 04:26:25.544556 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Feb 04 04:26:25.804735 2026] [:error] [pid 47578:tid 47632] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Feb 04 04:26:26.190671 2026] [:error] [pid 47578:tid 47634] [client 173.239.236.18:29981] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Feb 04 04:26:30.940095 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.18:29981] [client 173.239.236.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYJZ9p5oatM9u8-yDv_MAQAAAFQ"]
[Wed Feb 04 04:26:32.379407 2026] [:error] [pid 47676:tid 47700] [client 173.239.236.54:62395] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYJZ-ArYSkTgZEfUDqFCzgAAANY"]
[Wed Feb 04 04:26:33.882561 2026] [:error] [pid 18816:tid 18822] [client 173.239.236.18:25669] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Feb 04 04:26:34.648792 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.18:25669] [client 173.239.236.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aYJZ-sszZcOol_Iv-0UDAgAAAQQ"]
[Wed Feb 04 04:26:35.973972 2026] [:error] [pid 47579:tid 47667] [client 173.239.236.121:46933] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 04 04:26:36.351641 2026] [:error] [pid 47579:tid 47650] [client 173.239.236.121:46933] [client 173.239.236.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYJZ_PuxWks846_Vi2yc8AAAAIY"]
[Wed Feb 04 04:26:37.860589 2026] [:error] [pid 47579:tid 47662] [client 173.239.236.54:26459] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Feb 04 04:26:39.881011 2026] [:error] [pid 47579:tid 47657] [client 173.239.236.54:26459] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYJZ__uxWks846_Vi2ydBwAAAI0"]
[Wed Feb 04 04:26:40.815461 2026] [:error] [pid 47578:tid 47628] [client 173.239.236.190:27619] [client 173.239.236.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYJaAJ5oatM9u8-yDv_MNAAAAE0"]
[Wed Feb 04 04:26:41.409069 2026] [:error] [pid 47676:tid 47678] [client 173.239.236.21:31317] [client 173.239.236.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYJaAQrYSkTgZEfUDqFC-gAAAMA"]
[Wed Feb 04 04:26:41.982690 2026] [:error] [pid 47676:tid 47700] [client 173.239.236.211:49701] [client 173.239.236.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYJaAQrYSkTgZEfUDqFC_gAAANY"]
[Wed Feb 04 04:26:42.769219 2026] [:error] [pid 47577:tid 47599] [client 173.239.236.53:59277] [client 173.239.236.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYJaAqvA4Yp0Sov-3kTSgwAAABI"]
[Wed Feb 04 04:26:44.440625 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.149:57767] [client 173.239.236.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYJaBPuxWks846_Vi2ydIQAAAII"]
[Wed Feb 04 04:26:45.700604 2026] [:error] [pid 18816:tid 18833] [client 173.239.236.69:35139] [client 173.239.236.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYJaBcszZcOol_Iv-0UDRAAAAQ4"]
[Wed Feb 04 04:26:46.695210 2026] [:error] [pid 47676:tid 47681] [client 173.239.236.151:37233] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Feb 04 04:26:47.309452 2026] [:error] [pid 47676:tid 47703] [client 173.239.236.151:37233] [client 173.239.236.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aYJaBwrYSkTgZEfUDqFDFAAAANg"]
[Wed Feb 04 04:26:48.429278 2026] [:error] [pid 47577:tid 47602] [client 173.239.236.107:40933] [client 173.239.236.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYJaCKvA4Yp0Sov-3kTSvQAAABU"]
[Wed Feb 04 04:26:49.356476 2026] [:error] [pid 47579:tid 47647] [client 173.239.236.181:22277] [client 173.239.236.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYJaCfuxWks846_Vi2ydTwAAAIM"]
[Wed Feb 04 04:26:50.037560 2026] [:error] [pid 47578:tid 47626] [client 173.239.236.181:51317] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Feb 04 04:26:50.324917 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.181:51317] [client 173.239.236.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYJaCp5oatM9u8-yDv_MVAAAAEk"]
[Wed Feb 04 04:26:51.953173 2026] [:error] [pid 47676:tid 47699] [client 173.239.236.190:41795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Feb 04 04:26:52.812186 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.190:41795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Feb 04 04:26:54.345985 2026] [:error] [pid 47676:tid 47683] [client 173.239.236.190:41795] [client 173.239.236.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYJaDgrYSkTgZEfUDqFDSwAAAMU"]
[Wed Feb 04 04:26:54.864058 2026] [:error] [pid 47578:tid 47627] [client 173.239.236.215:27829] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Feb 04 04:26:55.119786 2026] [:error] [pid 47578:tid 47621] [client 173.239.236.215:27829] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYJaD55oatM9u8-yDv_MYwAAAEY"]
[Wed Feb 04 04:26:55.660073 2026] [:error] [pid 47676:tid 47694] [client 173.239.236.3:30629] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Feb 04 04:26:56.257317 2026] [:error] [pid 47676:tid 47691] [client 173.239.236.3:30629] [client 173.239.236.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aYJaEArYSkTgZEfUDqFDWQAAAM0"]
[Wed Feb 04 04:26:57.114544 2026] [:error] [pid 18816:tid 18825] [client 173.239.236.176:31755] [client 173.239.236.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYJaEcszZcOol_Iv-0UDqQAAAQY"]
[Wed Feb 04 04:26:57.932218 2026] [:error] [pid 47577:tid 47593] [client 173.239.236.224:51777] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Feb 04 04:26:58.247058 2026] [:error] [pid 47577:tid 47601] [client 173.239.236.224:51777] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Feb 04 04:26:58.752978 2026] [:error] [pid 47577:tid 47602] [client 173.239.236.224:51777] [client 173.239.236.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYJaEqvA4Yp0Sov-3kTTBgAAABU"]
[Wed Feb 04 04:26:59.603725 2026] [:error] [pid 47676:tid 47688] [client 173.239.236.66:22591] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYJaEwrYSkTgZEfUDqFDawAAAMo"]
[Wed Feb 04 04:27:00.693752 2026] [:error] [pid 47579:tid 47648] [client 173.239.236.1:44739] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYJaFPuxWks846_Vi2yd5AAAAIQ"]
[Wed Feb 04 04:27:01.312103 2026] [:error] [pid 18816:tid 18827] [client 173.239.236.73:26023] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYJaFcszZcOol_Iv-0UDvQAAAQg"]
[Wed Feb 04 04:27:01.943216 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.66:32193] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYJaFZ5oatM9u8-yDv_MiAAAAEk"]
[Wed Feb 04 04:27:03.069898 2026] [:error] [pid 47578:tid 47640] [client 173.239.236.153:58979] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Feb 04 04:27:03.371136 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.153:58979] [client 173.239.236.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aYJaF55oatM9u8-yDv_MlwAAAEk"]
[Wed Feb 04 04:27:03.917881 2026] [:error] [pid 47577:tid 47592] [client 173.239.236.31:48681] [client 173.239.236.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aYJaF6vA4Yp0Sov-3kTTMAAAAAs"]
[Wed Feb 04 04:27:04.458068 2026] [:error] [pid 47579:tid 47649] [client 173.239.236.182:43605] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYJaGPuxWks846_Vi2yeDQAAAIU"]
[Wed Feb 04 04:27:05.566837 2026] [:error] [pid 47578:tid 47627] [client 173.239.236.66:65097] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Feb 04 04:27:06.291444 2026] [:error] [pid 47578:tid 47638] [client 173.239.236.66:65097] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Feb 04 04:27:07.716908 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.66:65097] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aYJaG55oatM9u8-yDv_MuQAAAEk"]
[Wed Feb 04 04:27:09.162654 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.54:23407] [client 173.239.236.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYJaHZ5oatM9u8-yDv_MxQAAAEk"]
[Wed Feb 04 04:27:09.439154 2026] [:error] [pid 47578:tid 47625] [client 173.239.236.54:23407] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Feb 04 04:27:10.884515 2026] [:error] [pid 47578:tid 47627] [client 173.239.236.54:23407] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Feb 04 04:27:11.252578 2026] [:error] [pid 47578:tid 47620] [client 173.239.236.54:23407] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Feb 04 04:27:12.667912 2026] [:error] [pid 47578:tid 47636] [client 173.239.236.54:23407] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYJaIJ5oatM9u8-yDv_M5AAAAFU"]
[Wed Feb 04 04:27:13.967151 2026] [:error] [pid 47578:tid 47623] [client 173.239.236.76:34895] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Feb 04 04:27:14.213647 2026] [:error] [pid 47578:tid 47633] [client 173.239.236.76:34895] [client 173.239.236.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.76, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYJaIp5oatM9u8-yDv_M8gAAAFI"]
[Wed Feb 04 04:27:15.093596 2026] [:error] [pid 47578:tid 47619] [client 173.239.236.76:34895] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aYJaI55oatM9u8-yDv_M-gAAAEQ"]
[Wed Feb 04 04:27:16.754795 2026] [:error] [pid 47577:tid 47605] [client 173.239.236.215:64047] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Feb 04 04:27:17.264059 2026] [:error] [pid 47577:tid 47583] [client 173.239.236.215:64047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Wed Feb 04 04:27:17.798695 2026] [:error] [pid 47577:tid 47602] [client 173.239.236.215:64047] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYJaJavA4Yp0Sov-3kTTqAAAABU"]
[Wed Feb 04 04:27:18.375049 2026] [:error] [pid 47577:tid 47581] [client 173.239.236.153:64293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Feb 04 04:27:19.217563 2026] [:error] [pid 47577:tid 47585] [client 173.239.236.153:64293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Feb 04 04:27:19.783075 2026] [:error] [pid 47577:tid 47583] [client 173.239.236.153:64293] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Feb 04 04:27:20.338478 2026] [:error] [pid 47577:tid 47597] [client 173.239.236.153:64293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Feb 04 04:27:20.622316 2026] [:error] [pid 47577:tid 47596] [client 173.239.236.153:64293] [client 173.239.236.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYJaKKvA4Yp0Sov-3kTTvQAAAA8"]
[Wed Feb 04 04:27:21.212820 2026] [:error] [pid 47676:tid 47696] [client 173.239.236.142:33767] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Feb 04 04:27:21.447177 2026] [:error] [pid 47676:tid 47686] [client 173.239.236.142:33767] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Feb 04 04:27:21.759771 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.142:33767] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYJaKQrYSkTgZEfUDqFEHgAAANM"]
[Wed Feb 04 04:27:22.582239 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.110:57093] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Feb 04 04:27:23.523221 2026] [:error] [pid 47578:tid 47625] [client 173.239.236.110:57093] [client 173.239.236.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.110, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aYJaK55oatM9u8-yDv_NPwAAAEo"]
[Wed Feb 04 04:27:23.867785 2026] [:error] [pid 47578:tid 47638] [client 173.239.236.110:57093] [client 173.239.236.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYJaK55oatM9u8-yDv_NRgAAAFY"]
[Wed Feb 04 04:27:27.101895 2026] [:error] [pid 18816:tid 18822] [client 173.239.236.176:61063] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Feb 04 04:27:28.756813 2026] [:error] [pid 18816:tid 18827] [client 173.239.236.176:61063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Feb 04 04:27:29.136501 2026] [:error] [pid 18816:tid 18820] [client 173.239.236.176:61063] [client 173.239.236.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYJaMcszZcOol_Iv-0UEXwAAAQE"]
[Wed Feb 04 04:27:29.695418 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.39:37497] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Feb 04 04:27:30.688332 2026] [:error] [pid 47676:tid 47687] [client 173.239.236.39:37497] [client 173.239.236.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.39, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYJaMgrYSkTgZEfUDqFEVwAAAMk"]
[Wed Feb 04 04:27:31.284448 2026] [:error] [pid 47676:tid 47694] [client 173.239.236.39:37497] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Feb 04 04:27:31.556171 2026] [:error] [pid 47676:tid 47681] [client 173.239.236.39:37497] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Feb 04 04:27:32.152675 2026] [:error] [pid 47676:tid 47682] [client 173.239.236.39:37497] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Feb 04 04:27:32.415666 2026] [:error] [pid 47676:tid 47685] [client 173.239.236.39:37497] [client 173.239.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aYJaNArYSkTgZEfUDqFEXgAAAMc"]
[Wed Feb 04 04:27:32.998057 2026] [:error] [pid 47577:tid 47597] [client 173.239.236.151:57723] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Feb 04 04:27:33.261188 2026] [:error] [pid 47577:tid 47594] [client 173.239.236.151:57723] [client 173.239.236.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aYJaNavA4Yp0Sov-3kTUBwAAAA0"]
[Wed Feb 04 04:27:34.188367 2026] [:error] [pid 47577:tid 47582] [client 173.239.236.190:23293] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Feb 04 04:27:34.470593 2026] [:error] [pid 47577:tid 47586] [client 173.239.236.190:23293] [client 173.239.236.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYJaNqvA4Yp0Sov-3kTUDQAAAAU"]
[Wed Feb 04 04:27:36.474350 2026] [:error] [pid 47676:tid 47683] [client 173.239.236.158:55149] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Feb 04 04:27:36.711141 2026] [:error] [pid 47676:tid 47691] [client 173.239.236.158:55149] [client 173.239.236.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYJaOArYSkTgZEfUDqFEdwAAAM0"]
[Wed Feb 04 04:27:37.311828 2026] [:error] [pid 18816:tid 18841] [client 173.239.236.223:57375] [client 173.239.236.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYJaOcszZcOol_Iv-0UEnQAAARY"]
[Wed Feb 04 04:27:37.819931 2026] [:error] [pid 47577:tid 47598] [client 173.239.236.153:20771] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Feb 04 04:27:38.128986 2026] [:error] [pid 47577:tid 47601] [client 173.239.236.153:20771] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Wed Feb 04 04:27:39.491378 2026] [:error] [pid 47577:tid 47603] [client 173.239.236.153:20771] [client 173.239.236.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYJaO6vA4Yp0Sov-3kTUPgAAABY"]
[Wed Feb 04 04:27:40.382058 2026] [:error] [pid 47577:tid 47582] [client 173.239.236.94:22843] [client 173.239.236.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYJaPKvA4Yp0Sov-3kTURwAAAAE"]
[Wed Feb 04 04:27:41.950952 2026] [:error] [pid 47579:tid 47651] [client 173.239.236.1:49415] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aYJaPfuxWks846_Vi2yfVgAAAIc"]
[Wed Feb 04 04:27:42.569862 2026] [:error] [pid 47579:tid 47649] [client 173.239.236.39:32791] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Feb 04 04:27:43.196960 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.39:32791] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Feb 04 04:27:43.502277 2026] [:error] [pid 47579:tid 47660] [client 173.239.236.39:32791] [client 173.239.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYJaP_uxWks846_Vi2yfZQAAAJA"]
[Wed Feb 04 04:27:44.088398 2026] [:error] [pid 47577:tid 47585] [client 173.239.236.53:63761] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Feb 04 04:27:44.660310 2026] [:error] [pid 47577:tid 47582] [client 173.239.236.53:63761] [client 173.239.236.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aYJaQKvA4Yp0Sov-3kTUaAAAAAE"]
[Wed Feb 04 04:27:46.334425 2026] [:error] [pid 47577:tid 47587] [client 173.239.236.130:29391] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYJaQqvA4Yp0Sov-3kTUeAAAAAY"]
[Wed Feb 04 04:27:47.264194 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.142:47729] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Feb 04 04:27:48.097626 2026] [:error] [pid 18816:tid 18825] [client 173.239.236.142:47729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Feb 04 04:27:48.794833 2026] [:error] [pid 18816:tid 18832] [client 173.239.236.142:47729] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Feb 04 04:27:49.072479 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.142:47729] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYJaRcszZcOol_Iv-0UE8gAAAQQ"]
[Wed Feb 04 04:27:49.773472 2026] [:error] [pid 47577:tid 47592] [client 173.239.236.118:23249] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aYJaRavA4Yp0Sov-3kTUkgAAAAs"]
[Wed Feb 04 04:27:50.524486 2026] [:error] [pid 18816:tid 18821] [client 173.239.236.3:29857] [client 173.239.236.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYJaRsszZcOol_Iv-0UE_wAAAQI"]
[Wed Feb 04 04:27:51.049167 2026] [:error] [pid 47577:tid 47597] [client 173.239.236.76:58215] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYJaR6vA4Yp0Sov-3kTUoAAAABA"]
[Wed Feb 04 04:27:51.592817 2026] [:error] [pid 47578:tid 47641] [client 173.239.236.118:42359] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Wed Feb 04 04:27:51.876623 2026] [:error] [pid 47578:tid 47615] [client 173.239.236.118:42359] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYJaR55oatM9u8-yDv_OTAAAAEA"]
[Wed Feb 04 04:27:52.603056 2026] [:error] [pid 47676:tid 47702] [client 173.239.236.36:58723] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYJaSArYSkTgZEfUDqFEygAAANc"]
[Wed Feb 04 04:27:53.137036 2026] [:error] [pid 18816:tid 18828] [client 173.239.236.73:43803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Feb 04 04:27:53.658094 2026] [:error] [pid 18816:tid 18824] [client 173.239.236.73:43803] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aYJaScszZcOol_Iv-0UFGgAAAQU"]
[Wed Feb 04 04:27:54.279865 2026] [:error] [pid 18816:tid 18839] [client 173.239.236.54:60721] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYJaSsszZcOol_Iv-0UFHwAAARQ"]
[Wed Feb 04 04:27:54.858107 2026] [:error] [pid 18816:tid 18831] [client 173.239.236.41:29007] [client 173.239.236.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYJaSsszZcOol_Iv-0UFIwAAAQw"]
[Wed Feb 04 04:27:55.433116 2026] [:error] [pid 47577:tid 47583] [client 173.239.236.36:56269] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYJaS6vA4Yp0Sov-3kTU5QAAAAI"]
[Wed Feb 04 04:27:56.332200 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.41:52559] [client 173.239.236.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYJaTArYSkTgZEfUDqFE4wAAANM"]
[Wed Feb 04 04:27:57.615766 2026] [:error] [pid 47578:tid 47633] [client 173.239.236.171:30305] [client 173.239.236.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYJaTZ5oatM9u8-yDv_ObQAAAFI"]
[Wed Feb 04 04:27:58.238597 2026] [:error] [pid 47676:tid 47694] [client 173.239.236.129:43767] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Feb 04 04:27:59.128667 2026] [:error] [pid 47676:tid 47691] [client 173.239.236.129:43767] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Feb 04 04:27:59.372839 2026] [:error] [pid 47676:tid 47699] [client 173.239.236.129:43767] [client 173.239.236.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYJaTwrYSkTgZEfUDqFFBgAAANU"]
[Wed Feb 04 04:28:00.469182 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.215:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Feb 04 04:28:00.779102 2026] [:error] [pid 47676:tid 47679] [client 173.239.236.215:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Feb 04 04:28:02.424953 2026] [:error] [pid 47676:tid 47685] [client 173.239.236.215:21283] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aYJaUgrYSkTgZEfUDqFFHwAAAMc"]
[Wed Feb 04 04:28:04.001655 2026] [:error] [pid 18816:tid 18836] [client 173.239.236.78:44407] [client 173.239.236.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYJaVMszZcOol_Iv-0UFcwAAARE"]
[Wed Feb 04 04:28:04.574330 2026] [:error] [pid 47577:tid 47585] [client 173.239.236.76:22221] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYJaVKvA4Yp0Sov-3kTVIwAAAAQ"]
[Wed Feb 04 04:28:06.784428 2026] [:error] [pid 47676:tid 47695] [client 173.239.236.223:20163] [client 173.239.236.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYJaVgrYSkTgZEfUDqFFNwAAANE"]
[Wed Feb 04 04:28:08.136456 2026] [:error] [pid 47579:tid 47645] [client 173.239.236.231:48535] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Wed Feb 04 04:28:08.419062 2026] [:error] [pid 47579:tid 47657] [client 173.239.236.231:48535] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Wed Feb 04 04:28:08.770254 2026] [:error] [pid 47579:tid 47667] [client 173.239.236.231:48535] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Wed Feb 04 04:28:09.178693 2026] [:error] [pid 47579:tid 47660] [client 173.239.236.231:48535] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Wed Feb 04 04:28:10.559418 2026] [:error] [pid 47579:tid 47654] [client 173.239.236.231:48535] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYJaWvuxWks846_Vi2ygIQAAAIo"]
[Wed Feb 04 04:28:11.153078 2026] [:error] [pid 47579:tid 47655] [client 173.239.236.1:64013] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYJaW_uxWks846_Vi2ygJgAAAIs"]
[Wed Feb 04 04:28:11.680197 2026] [:error] [pid 18816:tid 18827] [client 173.239.236.118:54239] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYJaW8szZcOol_Iv-0UFvQAAAQg"]
[Wed Feb 04 04:28:12.331350 2026] [:error] [pid 18816:tid 18832] [client 173.239.236.250:20059] [client 173.239.236.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYJaXMszZcOol_Iv-0UFxwAAAQ0"]
[Wed Feb 04 04:28:12.844084 2026] [:error] [pid 47578:tid 47622] [client 173.239.236.130:37093] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYJaXJ5oatM9u8-yDv_OzwAAAEc"]
[Wed Feb 04 04:28:14.428978 2026] [:error] [pid 47577:tid 47602] [client 173.239.236.200:35245] [client 173.239.236.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYJaXqvA4Yp0Sov-3kTVXgAAABU"]
[Wed Feb 04 04:28:15.408627 2026] [:error] [pid 47578:tid 47617] [client 173.239.236.121:26557] [client 173.239.236.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYJaX55oatM9u8-yDv_O6AAAAEI"]
[Wed Feb 04 04:28:16.017064 2026] [:error] [pid 47577:tid 47581] [client 173.239.236.132:32145] [client 173.239.236.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYJaYKvA4Yp0Sov-3kTVaQAAAAA"]
[Wed Feb 04 04:28:18.938567 2026] [:error] [pid 47577:tid 47591] [client 173.239.236.94:20379] [client 173.239.236.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYJaYqvA4Yp0Sov-3kTVhQAAAAo"]
[Wed Feb 04 04:28:19.497899 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.132:27505] [client 173.239.236.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYJaY_uxWks846_Vi2ygTgAAAII"]
[Wed Feb 04 04:28:21.755538 2026] [:error] [pid 47676:tid 47699] [client 173.239.236.110:33763] [client 173.239.236.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYJaZQrYSkTgZEfUDqFFhwAAANU"]
[Wed Feb 04 04:28:22.950740 2026] [:error] [pid 47578:tid 47616] [client 173.239.236.163:26749] [client 173.239.236.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYJaZp5oatM9u8-yDv_PDQAAAEE"]
[Wed Feb 04 04:28:23.510855 2026] [:error] [pid 47579:tid 47666] [client 173.239.236.73:59329] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Feb 04 04:28:24.047948 2026] [:error] [pid 47579:tid 47656] [client 173.239.236.73:59329] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aYJaaPuxWks846_Vi2ygagAAAIw"]
[Wed Feb 04 04:28:26.235991 2026] [:error] [pid 47577:tid 47590] [client 173.239.236.190:25387] [client 173.239.236.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYJaaqvA4Yp0Sov-3kTVtwAAAAk"]
[Wed Feb 04 04:28:27.385295 2026] [:error] [pid 18816:tid 18831] [client 173.239.236.11:46969] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Feb 04 04:28:27.683658 2026] [:error] [pid 18816:tid 18830] [client 173.239.236.11:46969] [client 173.239.236.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aYJaa8szZcOol_Iv-0UGaQAAAQs"]
[Wed Feb 04 04:28:28.571140 2026] [:error] [pid 47578:tid 47626] [client 173.239.236.163:45839] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Feb 04 04:28:28.925809 2026] [:error] [pid 47578:tid 47633] [client 173.239.236.163:45839] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Wed Feb 04 04:28:29.256724 2026] [:error] [pid 47578:tid 47631] [client 173.239.236.163:45839] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Feb 04 04:28:29.575058 2026] [:error] [pid 47578:tid 47638] [client 173.239.236.163:45839] [client 173.239.236.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYJabZ5oatM9u8-yDv_PMAAAAFY"]
[Wed Feb 04 04:28:30.214098 2026] [:error] [pid 47579:tid 47661] [client 173.239.236.73:64175] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Feb 04 04:28:30.614075 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.73:64175] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aYJabvuxWks846_Vi2ygjgAAAII"]
[Wed Feb 04 04:28:32.091675 2026] [:error] [pid 47579:tid 47656] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Feb 04 04:28:32.394100 2026] [:error] [pid 47579:tid 47645] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 04 04:28:32.702665 2026] [:error] [pid 47579:tid 47659] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Wed Feb 04 04:28:34.176820 2026] [:error] [pid 47579:tid 47651] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Feb 04 04:28:34.511407 2026] [:error] [pid 47579:tid 47647] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Wed Feb 04 04:28:35.109843 2026] [:error] [pid 47579:tid 47661] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Wed Feb 04 04:28:35.995186 2026] [:error] [pid 47579:tid 47645] [client 173.239.236.250:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Feb 04 04:28:36.280162 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.250:38873] [client 173.239.236.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aYJadPuxWks846_Vi2yg0QAAAIA"]
[Wed Feb 04 04:28:36.867653 2026] [:error] [pid 18816:tid 18821] [client 173.239.236.66:46849] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYJadMszZcOol_Iv-0UGzwAAAQI"]
[Wed Feb 04 04:28:38.589682 2026] [:error] [pid 18816:tid 18829] [client 173.239.236.129:26413] [client 173.239.236.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.129, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYJadsszZcOol_Iv-0UG6gAAAQo"]
[Wed Feb 04 04:28:38.594174 2026] [:error] [pid 18816:tid 18829] [client 173.239.236.129:26413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Feb 04 04:28:38.886372 2026] [:error] [pid 18816:tid 18831] [client 173.239.236.129:26413] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Wed Feb 04 04:28:39.168638 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.129:26413] [client 173.239.236.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aYJad8szZcOol_Iv-0UG8QAAAQA"]
[Wed Feb 04 04:28:41.129984 2026] [:error] [pid 18816:tid 18828] [client 173.239.236.231:63227] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Feb 04 04:28:41.491722 2026] [:error] [pid 18816:tid 18841] [client 173.239.236.231:63227] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYJaecszZcOol_Iv-0UHBAAAARY"]
[Wed Feb 04 04:28:42.086718 2026] [:error] [pid 18816:tid 18828] [client 173.239.236.181:44043] [client 173.239.236.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aYJaesszZcOol_Iv-0UHCwAAAQk"]
[Wed Feb 04 04:28:43.945908 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.31:26225] [client 173.239.236.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYJae_uxWks846_Vi2yg-gAAAII"]
[Wed Feb 04 04:28:44.520326 2026] [:error] [pid 47579:tid 47654] [client 173.239.236.94:51677] [client 173.239.236.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aYJafPuxWks846_Vi2yg_wAAAIo"]
[Wed Feb 04 04:28:46.113394 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.39:36343] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Feb 04 04:28:46.694340 2026] [:error] [pid 47676:tid 47680] [client 173.239.236.39:36343] [client 173.239.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aYJafgrYSkTgZEfUDqFGJwAAAMI"]
[Wed Feb 04 04:28:48.996007 2026] [:error] [pid 47676:tid 47685] [client 173.239.236.110:24461] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Wed Feb 04 04:28:49.528771 2026] [:error] [pid 47676:tid 47693] [client 173.239.236.110:24461] [client 173.239.236.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aYJagQrYSkTgZEfUDqFGSAAAAM8"]
[Wed Feb 04 04:28:50.251475 2026] [:error] [pid 47578:tid 47631] [client 173.239.236.70:41295] [client 173.239.236.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aYJagp5oatM9u8-yDv_PmQAAAFA"]
[Wed Feb 04 04:28:51.068492 2026] [:error] [pid 47676:tid 47694] [client 173.239.236.211:42459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Feb 04 04:28:51.285910 2026] [:error] [pid 47676:tid 47679] [client 173.239.236.211:42459] [client 173.239.236.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aYJagwrYSkTgZEfUDqFGVQAAAME"]
[Wed Feb 04 04:28:51.795563 2026] [:error] [pid 18816:tid 18834] [client 173.239.236.228:27385] [client 173.239.236.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYJag8szZcOol_Iv-0UHTAAAAQ8"]
[Wed Feb 04 04:28:52.965960 2026] [:error] [pid 47579:tid 47653] [client 173.239.236.176:58381] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Wed Feb 04 04:28:53.214138 2026] [:error] [pid 47579:tid 47667] [client 173.239.236.176:58381] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Wed Feb 04 04:28:53.834712 2026] [:error] [pid 47579:tid 47661] [client 173.239.236.176:58381] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Wed Feb 04 04:28:54.405106 2026] [:error] [pid 47579:tid 47652] [client 173.239.236.176:58381] [client 173.239.236.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aYJahvuxWks846_Vi2yhaAAAAIg"]
[Wed Feb 04 04:28:54.974023 2026] [:error] [pid 47578:tid 47628] [client 173.239.236.98:52917] [client 173.239.236.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aYJahp5oatM9u8-yDv_PswAAAE0"]
[Wed Feb 04 04:28:56.582021 2026] [:error] [pid 18816:tid 18824] [client 173.239.236.250:49277] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Feb 04 04:28:56.861650 2026] [:error] [pid 18816:tid 18838] [client 173.239.236.250:49277] [client 173.239.236.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aYJaiMszZcOol_Iv-0UHfQAAARM"]
[Wed Feb 04 04:28:57.410936 2026] [:error] [pid 47578:tid 47626] [client 173.239.236.215:47763] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYJaiZ5oatM9u8-yDv_PyQAAAEs"]
[Wed Feb 04 04:28:57.860490 2026] [:error] [pid 47577:tid 47588] [client 173.239.236.76:29771] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYJaiavA4Yp0Sov-3kTWfwAAAAc"]
[Wed Feb 04 04:28:59.848854 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.118:60205] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Wed Feb 04 04:29:00.248321 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.118:60205] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aYJajMszZcOol_Iv-0UHnwAAAQQ"]
[Wed Feb 04 04:29:01.549918 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.3:32521] [client 173.239.236.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYJajfuxWks846_Vi2yhkAAAAJg"]
[Wed Feb 04 04:29:02.158486 2026] [:error] [pid 47579:tid 47645] [client 173.239.236.79:61871] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Feb 04 04:29:02.443319 2026] [:error] [pid 47579:tid 47664] [client 173.239.236.79:61871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Feb 04 04:29:03.100238 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.79:61871] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Wed Feb 04 04:29:04.439913 2026] [:error] [pid 47579:tid 47654] [client 173.239.236.79:61871] [client 173.239.236.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.79, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aYJakPuxWks846_Vi2yhpAAAAIo"]
[Wed Feb 04 04:29:05.132703 2026] [:error] [pid 47579:tid 47661] [client 173.239.236.79:61871] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Wed Feb 04 04:29:05.544155 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.79:61871] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Wed Feb 04 04:29:05.873272 2026] [:error] [pid 47579:tid 47660] [client 173.239.236.79:61871] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Wed Feb 04 04:29:06.447398 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.79:61871] [client 173.239.236.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aYJakvuxWks846_Vi2yhtwAAAJg"]
[Wed Feb 04 04:29:07.018762 2026] [:error] [pid 18816:tid 18838] [client 173.239.236.69:32759] [client 173.239.236.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.69, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aYJak8szZcOol_Iv-0UHyQAAARM"]
[Wed Feb 04 04:29:07.980615 2026] [:error] [pid 18816:tid 18838] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Wed Feb 04 04:29:08.286151 2026] [:error] [pid 18816:tid 18824] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Wed Feb 04 04:29:08.834892 2026] [:error] [pid 18816:tid 18820] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Wed Feb 04 04:29:09.554673 2026] [:error] [pid 18816:tid 18837] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Feb 04 04:29:10.402417 2026] [:error] [pid 18816:tid 18839] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Wed Feb 04 04:29:12.588017 2026] [:error] [pid 18816:tid 18825] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Feb 04 04:29:12.861797 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Wed Feb 04 04:29:14.358432 2026] [:error] [pid 18816:tid 18830] [client 173.239.236.69:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Feb 04 04:29:14.927963 2026] [:error] [pid 18816:tid 18833] [client 173.239.236.69:32759] [client 173.239.236.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aYJamsszZcOol_Iv-0UIKAAAAQ4"]
[Wed Feb 04 04:29:16.060878 2026] [:error] [pid 47579:tid 47658] [client 173.239.236.250:57065] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Feb 04 04:29:16.364378 2026] [:error] [pid 47579:tid 47647] [client 173.239.236.250:57065] [client 173.239.236.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYJanPuxWks846_Vi2yiNAAAAIM"]
[Wed Feb 04 04:29:17.605738 2026] [:error] [pid 18816:tid 18836] [client 173.239.236.31:29743] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Wed Feb 04 04:29:17.866063 2026] [:error] [pid 18816:tid 18820] [client 173.239.236.31:29743] [client 173.239.236.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aYJancszZcOol_Iv-0UIQwAAAQE"]
[Wed Feb 04 04:29:19.052173 2026] [:error] [pid 47578:tid 47631] [client 173.239.236.200:64807] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Feb 04 04:29:19.617541 2026] [:error] [pid 47578:tid 47616] [client 173.239.236.200:64807] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Wed Feb 04 04:29:20.161369 2026] [:error] [pid 47578:tid 47630] [client 173.239.236.200:64807] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Wed Feb 04 04:29:20.478248 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.200:64807] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Feb 04 04:29:20.983480 2026] [:error] [pid 47578:tid 47629] [client 173.239.236.200:64807] [client 173.239.236.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYJaoJ5oatM9u8-yDv_QfwAAAE4"]
[Wed Feb 04 04:29:21.494659 2026] [:error] [pid 18816:tid 18840] [client 173.239.236.157:61669] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Wed Feb 04 04:29:21.780608 2026] [:error] [pid 18816:tid 18834] [client 173.239.236.157:61669] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Wed Feb 04 04:29:22.069686 2026] [:error] [pid 18816:tid 18825] [client 173.239.236.157:61669] [client 173.239.236.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYJaosszZcOol_Iv-0UIYwAAAQY"]
[Wed Feb 04 04:29:22.946398 2026] [:error] [pid 47676:tid 47687] [client 173.239.236.223:58407] [client 173.239.236.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aYJaogrYSkTgZEfUDqFHfQAAAMk"]
[Wed Feb 04 04:29:23.804270 2026] [:error] [pid 47579:tid 47657] [client 173.239.236.118:24443] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Feb 04 04:29:24.718505 2026] [:error] [pid 47579:tid 47660] [client 173.239.236.118:24443] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Wed Feb 04 04:29:25.020300 2026] [:error] [pid 47579:tid 47667] [client 173.239.236.118:24443] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Wed Feb 04 04:29:25.307856 2026] [:error] [pid 47579:tid 47664] [client 173.239.236.118:24443] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aYJapfuxWks846_Vi2yijAAAAJQ"]
[Wed Feb 04 04:29:26.414922 2026] [:error] [pid 47579:tid 47653] [client 173.239.236.224:25523] [client 173.239.236.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aYJapvuxWks846_Vi2yilwAAAIk"]
[Wed Feb 04 04:29:28.954489 2026] [:error] [pid 47577:tid 47591] [client 173.239.236.160:24459] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Wed Feb 04 04:29:29.862029 2026] [:error] [pid 47577:tid 47586] [client 173.239.236.160:24459] [client 173.239.236.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aYJaqavA4Yp0Sov-3kTXRAAAAAU"]
[Wed Feb 04 04:29:30.723000 2026] [:error] [pid 47579:tid 47645] [client 173.239.236.215:28325] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aYJaqvuxWks846_Vi2yi0AAAAIE"]
[Wed Feb 04 04:29:31.613712 2026] [:error] [pid 47579:tid 47653] [client 173.239.236.98:49415] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Feb 04 04:29:31.899444 2026] [:error] [pid 47579:tid 47648] [client 173.239.236.98:49415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Wed Feb 04 04:29:32.160335 2026] [:error] [pid 47579:tid 47647] [client 173.239.236.98:49415] [client 173.239.236.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aYJarPuxWks846_Vi2yi5QAAAIM"]
[Wed Feb 04 04:29:33.031011 2026] [:error] [pid 47577:tid 47604] [client 173.239.236.36:57961] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Wed Feb 04 04:29:33.316564 2026] [:error] [pid 47577:tid 47600] [client 173.239.236.36:57961] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Wed Feb 04 04:29:33.876178 2026] [:error] [pid 47577:tid 47597] [client 173.239.236.36:57961] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Feb 04 04:29:34.670949 2026] [:error] [pid 47577:tid 47595] [client 173.239.236.36:57961] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aYJarqvA4Yp0Sov-3kTXaQAAAA4"]
[Wed Feb 04 04:29:35.214178 2026] [:error] [pid 47577:tid 47596] [client 173.239.236.107:32509] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Wed Feb 04 04:29:36.183670 2026] [:error] [pid 47577:tid 47593] [client 173.239.236.107:32509] [client 173.239.236.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYJasKvA4Yp0Sov-3kTXdQAAAAw"]
[Wed Feb 04 04:29:37.155879 2026] [:error] [pid 47578:tid 47629] [client 173.239.236.118:50421] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Wed Feb 04 04:29:38.068478 2026] [:error] [pid 47578:tid 47620] [client 173.239.236.118:50421] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Wed Feb 04 04:29:38.344642 2026] [:error] [pid 47578:tid 47633] [client 173.239.236.118:50421] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Feb 04 04:29:39.267058 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.118:50421] [client 173.239.236.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.118, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aYJas55oatM9u8-yDv_RBAAAAEM"]
[Wed Feb 04 04:29:40.849173 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.118:50421] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aYJatJ5oatM9u8-yDv_RFgAAAEM"]
[Wed Feb 04 04:29:41.495025 2026] [:error] [pid 47578:tid 47615] [client 173.239.236.178:35857] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Wed Feb 04 04:29:41.815056 2026] [:error] [pid 47578:tid 47634] [client 173.239.236.178:35857] [client 173.239.236.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aYJatZ5oatM9u8-yDv_RIAAAAFM"]
[Wed Feb 04 04:29:42.338797 2026] [:error] [pid 47577:tid 47582] [client 173.239.236.130:29067] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Wed Feb 04 04:29:43.193149 2026] [:error] [pid 47577:tid 47596] [client 173.239.236.130:29067] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Wed Feb 04 04:29:43.879681 2026] [:error] [pid 47577:tid 47592] [client 173.239.236.130:29067] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aYJat6vA4Yp0Sov-3kTXmgAAAAs"]
[Wed Feb 04 04:29:44.746272 2026] [:error] [pid 47577:tid 47590] [client 173.239.236.116:32261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Wed Feb 04 04:29:45.042353 2026] [:error] [pid 47577:tid 47588] [client 173.239.236.116:32261] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Wed Feb 04 04:29:45.783658 2026] [:error] [pid 47577:tid 47583] [client 173.239.236.116:32261] [client 173.239.236.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aYJauavA4Yp0Sov-3kTXrAAAAAI"]
[Wed Feb 04 04:29:47.088742 2026] [:error] [pid 47579:tid 47651] [client 173.239.236.142:36425] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYJau_uxWks846_Vi2yjRwAAAIc"]
[Wed Feb 04 04:29:47.705951 2026] [:error] [pid 18816:tid 18843] [client 173.239.236.200:44587] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Wed Feb 04 04:29:48.020575 2026] [:error] [pid 18816:tid 18831] [client 173.239.236.200:44587] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Wed Feb 04 04:29:48.670716 2026] [:error] [pid 18816:tid 18824] [client 173.239.236.200:44587] [client 173.239.236.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aYJavMszZcOol_Iv-0UJPAAAAQU"]
[Wed Feb 04 04:29:49.277134 2026] [:error] [pid 47577:tid 47584] [client 173.239.236.53:32559] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Wed Feb 04 04:29:50.465204 2026] [:error] [pid 47577:tid 47584] [client 173.239.236.53:32559] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Wed Feb 04 04:29:50.758634 2026] [:error] [pid 47577:tid 47588] [client 173.239.236.53:32559] [client 173.239.236.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aYJavqvA4Yp0Sov-3kTX1gAAAAc"]
[Wed Feb 04 04:29:51.592734 2026] [:error] [pid 47676:tid 47703] [client 173.239.236.215:37681] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aYJavwrYSkTgZEfUDqFIGAAAANg"]
[Wed Feb 04 04:29:52.017701 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.79:21109] [client 173.239.236.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aYJawPuxWks846_Vi2yjaQAAAIA"]
[Wed Feb 04 04:29:52.627733 2026] [:error] [pid 18816:tid 18829] [client 173.239.236.129:40341] [client 173.239.236.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aYJawMszZcOol_Iv-0UJcQAAAQo"]
[Wed Feb 04 04:29:53.211514 2026] [:error] [pid 47676:tid 47694] [client 173.239.236.1:36955] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aYJawQrYSkTgZEfUDqFIKgAAANA"]
[Wed Feb 04 04:29:53.894831 2026] [:error] [pid 47577:tid 47584] [client 173.239.236.215:51481] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aYJawavA4Yp0Sov-3kTX6gAAAAM"]
[Wed Feb 04 04:29:55.083455 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.54:25109] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aYJaw_uxWks846_Vi2yjdgAAAIA"]
[Wed Feb 04 04:29:56.352606 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.142:25025] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aYJaxPuxWks846_Vi2yjgQAAAJg"]
[Wed Feb 04 04:29:56.906931 2026] [:error] [pid 47579:tid 47650] [client 173.239.236.39:61245] [client 173.239.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aYJaxPuxWks846_Vi2yjhgAAAIY"]
[Wed Feb 04 04:29:58.557942 2026] [:error] [pid 47578:tid 47616] [client 173.239.236.76:34661] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aYJaxp5oatM9u8-yDv_RcAAAAEE"]
[Wed Feb 04 04:29:59.415774 2026] [:error] [pid 47578:tid 47619] [client 173.239.236.118:27091] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aYJax55oatM9u8-yDv_ReQAAAEQ"]
[Wed Feb 04 04:30:01.108686 2026] [:error] [pid 47577:tid 47601] [client 173.239.236.121:32613] [client 173.239.236.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aYJayavA4Yp0Sov-3kTYMAAAABQ"]
[Wed Feb 04 04:30:01.719741 2026] [:error] [pid 47579:tid 47650] [client 173.239.236.224:27447] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Wed Feb 04 04:30:04.589759 2026] [:error] [pid 47579:tid 47660] [client 173.239.236.224:27447] [client 173.239.236.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.224, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYJazPuxWks846_Vi2yjuQAAAJA"]
[Wed Feb 04 04:30:06.393849 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.224:27447] [client 173.239.236.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aYJazvuxWks846_Vi2yjxwAAAII"]
[Wed Feb 04 04:30:06.973096 2026] [:error] [pid 47676:tid 47698] [client 173.239.236.53:48077] [client 173.239.236.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aYJazgrYSkTgZEfUDqFIdAAAANQ"]
[Wed Feb 04 04:30:08.477286 2026] [:error] [pid 47579:tid 47658] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Wed Feb 04 04:30:08.786719 2026] [:error] [pid 47579:tid 47657] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Wed Feb 04 04:30:10.043893 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Wed Feb 04 04:30:10.371929 2026] [:error] [pid 47579:tid 47662] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Wed Feb 04 04:30:11.466827 2026] [:error] [pid 47579:tid 47648] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Wed Feb 04 04:30:11.751440 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Wed Feb 04 04:30:12.027035 2026] [:error] [pid 47579:tid 47662] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Wed Feb 04 04:30:12.313387 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.3:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Wed Feb 04 04:30:12.772983 2026] [:error] [pid 47579:tid 47664] [client 173.239.236.3:60625] [client 173.239.236.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYJa1PuxWks846_Vi2yj9gAAAJQ"]
[Wed Feb 04 04:30:13.307898 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.18:30987] [client 173.239.236.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aYJa1fuxWks846_Vi2yj-QAAAII"]
[Wed Feb 04 04:30:13.928775 2026] [:error] [pid 47578:tid 47617] [client 173.239.236.61:54553] [client 173.239.236.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aYJa1Z5oatM9u8-yDv_R2AAAAEI"]
[Wed Feb 04 04:30:15.530658 2026] [:error] [pid 18816:tid 18821] [client 173.239.236.78:59977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Wed Feb 04 04:30:15.781205 2026] [:error] [pid 18816:tid 18843] [client 173.239.236.78:59977] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Wed Feb 04 04:30:16.359762 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.78:59977] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Wed Feb 04 04:30:17.054836 2026] [:error] [pid 18816:tid 18834] [client 173.239.236.78:59977] [client 173.239.236.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aYJa2cszZcOol_Iv-0UJ-wAAAQ8"]
[Wed Feb 04 04:30:17.652416 2026] [:error] [pid 47577:tid 47596] [client 173.239.236.163:40903] [client 173.239.236.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aYJa2avA4Yp0Sov-3kTYowAAAA8"]
[Wed Feb 04 04:30:18.229643 2026] [:error] [pid 47577:tid 47593] [client 173.239.236.151:34639] [client 173.239.236.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aYJa2qvA4Yp0Sov-3kTYqAAAAAw"]
[Wed Feb 04 04:30:20.033626 2026] [:error] [pid 47676:tid 47687] [client 173.239.236.224:31149] [client 173.239.236.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aYJa3ArYSkTgZEfUDqFI-AAAAMk"]
[Wed Feb 04 04:30:21.059175 2026] [:error] [pid 47578:tid 47632] [client 173.239.236.11:44805] [client 173.239.236.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aYJa3Z5oatM9u8-yDv_R8wAAAFE"]
[Wed Feb 04 04:30:22.358462 2026] [:error] [pid 47676:tid 47699] [client 173.239.236.178:26499] [client 173.239.236.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aYJa3grYSkTgZEfUDqFJBQAAANU"]
[Wed Feb 04 04:30:26.393980 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.231:37785] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aYJa4p5oatM9u8-yDv_SJgAAAEk"]
[Wed Feb 04 04:30:27.136976 2026] [:error] [pid 18816:tid 18836] [client 173.239.236.66:20023] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Wed Feb 04 04:30:27.730611 2026] [:error] [pid 18816:tid 18828] [client 173.239.236.66:20023] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aYJa48szZcOol_Iv-0UKdgAAAQk"]
[Wed Feb 04 04:30:29.681390 2026] [:error] [pid 47577:tid 47596] [client 173.239.236.54:55917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Wed Feb 04 04:30:31.167737 2026] [:error] [pid 47577:tid 47589] [client 173.239.236.54:55917] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Feb 04 04:30:31.437420 2026] [:error] [pid 47577:tid 47603] [client 173.239.236.54:55917] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aYJa56vA4Yp0Sov-3kTZCgAAABY"]
[Wed Feb 04 04:30:32.596503 2026] [:error] [pid 47579:tid 47661] [client 173.239.236.223:61883] [client 173.239.236.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aYJa6PuxWks846_Vi2ykfgAAAJE"]
[Wed Feb 04 04:30:36.917054 2026] [:error] [pid 47577:tid 47600] [client 173.239.236.121:29765] [client 173.239.236.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aYJa7KvA4Yp0Sov-3kTZHwAAABM"]
[Wed Feb 04 04:30:40.712313 2026] [:error] [pid 18816:tid 18839] [client 173.239.236.250:21455] [client 173.239.236.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aYJa8MszZcOol_Iv-0UKxAAAARQ"]
[Wed Feb 04 04:30:41.728337 2026] [:error] [pid 47676:tid 47683] [client 173.239.236.76:53905] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Feb 04 04:30:42.119104 2026] [:error] [pid 47676:tid 47703] [client 173.239.236.76:53905] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aYJa8grYSkTgZEfUDqFJbwAAANg"]
[Wed Feb 04 04:30:42.729240 2026] [:error] [pid 18816:tid 18820] [client 173.239.236.130:34249] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aYJa8sszZcOol_Iv-0UK2QAAAQE"]
[Wed Feb 04 04:30:48.346119 2026] [:error] [pid 18816:tid 18825] [client 173.239.236.78:28735] [client 173.239.236.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aYJa-MszZcOol_Iv-0ULCgAAAQY"]
[Wed Feb 04 04:30:49.129983 2026] [:error] [pid 47579:tid 47659] [client 173.239.236.215:59811] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Feb 04 04:30:50.329369 2026] [:error] [pid 47579:tid 47647] [client 173.239.236.215:59811] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Wed Feb 04 04:30:51.205805 2026] [:error] [pid 47579:tid 47659] [client 173.239.236.215:59811] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aYJa-_uxWks846_Vi2yk4wAAAI8"]
[Wed Feb 04 04:30:52.540838 2026] [:error] [pid 47579:tid 47667] [client 173.239.236.79:46123] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Wed Feb 04 04:30:53.188857 2026] [:error] [pid 47579:tid 47664] [client 173.239.236.79:46123] [client 173.239.236.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYJa_fuxWks846_Vi2yk-AAAAJQ"]
[Wed Feb 04 04:30:53.819844 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.41:35883] [client 173.239.236.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aYJa_Z5oatM9u8-yDv_S4AAAAEM"]
[Wed Feb 04 04:30:55.197477 2026] [:error] [pid 47579:tid 47657] [client 173.239.236.36:57227] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aYJa__uxWks846_Vi2ylBQAAAI0"]
[Wed Feb 04 04:30:56.590286 2026] [:error] [pid 47577:tid 47595] [client 173.239.236.54:58119] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aYJbAKvA4Yp0Sov-3kTZjwAAAA4"]
[Wed Feb 04 04:30:57.153709 2026] [:error] [pid 47578:tid 47621] [client 173.239.236.39:51811] [client 173.239.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aYJbAZ5oatM9u8-yDv_S_AAAAEY"]
[Wed Feb 04 04:30:58.023240 2026] [:error] [pid 47676:tid 47692] [client 173.239.236.228:56049] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Wed Feb 04 04:30:59.868679 2026] [:error] [pid 47676:tid 47692] [client 173.239.236.228:56049] [client 173.239.236.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aYJbAwrYSkTgZEfUDqFJ5AAAAM4"]
[Wed Feb 04 04:31:01.247985 2026] [:error] [pid 47578:tid 47636] [client 173.239.236.176:58293] [client 173.239.236.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aYJbBZ5oatM9u8-yDv_THgAAAFU"]
[Wed Feb 04 04:31:01.696993 2026] [:error] [pid 18816:tid 18832] [client 173.239.236.215:32541] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aYJbBcszZcOol_Iv-0ULagAAAQ0"]
[Wed Feb 04 04:31:02.603094 2026] [:error] [pid 47578:tid 47629] [client 173.239.236.121:33355] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Wed Feb 04 04:31:02.894169 2026] [:error] [pid 47578:tid 47617] [client 173.239.236.121:33355] [client 173.239.236.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aYJbBp5oatM9u8-yDv_TMQAAAEI"]
[Wed Feb 04 04:31:03.763631 2026] [:error] [pid 18816:tid 18835] [client 173.239.236.132:26953] [client 173.239.236.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aYJbB8szZcOol_Iv-0ULdAAAARA"]
[Wed Feb 04 04:31:05.757514 2026] [:error] [pid 47578:tid 47617] [client 173.239.236.176:57173] [client 173.239.236.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aYJbCZ5oatM9u8-yDv_TYwAAAEI"]
[Wed Feb 04 04:31:06.836811 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.182:25723] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Wed Feb 04 04:31:07.089669 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.182:25723] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aYJbC55oatM9u8-yDv_TdAAAAFQ"]
[Wed Feb 04 04:31:08.238340 2026] [:error] [pid 47578:tid 47626] [client 173.239.236.54:58969] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aYJbDJ5oatM9u8-yDv_ThAAAAEs"]
[Wed Feb 04 04:31:09.142380 2026] [:error] [pid 47676:tid 47695] [client 173.239.236.61:64983] [client 173.239.236.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aYJbDQrYSkTgZEfUDqFKQQAAANE"]
[Wed Feb 04 04:31:11.017061 2026] [:error] [pid 47676:tid 47684] [client 173.239.236.70:40691] [client 173.239.236.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aYJbDwrYSkTgZEfUDqFKVAAAAMY"]
[Wed Feb 04 04:31:11.579482 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.190:39255] [client 173.239.236.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aYJbD55oatM9u8-yDv_ToAAAAFQ"]
[Wed Feb 04 04:31:12.133441 2026] [:error] [pid 47579:tid 47658] [client 173.239.236.158:45563] [client 173.239.236.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aYJbEPuxWks846_Vi2ylUwAAAI4"]
[Wed Feb 04 04:31:14.359936 2026] [:error] [pid 47577:tid 47602] [client 173.239.236.70:63141] [client 173.239.236.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aYJbEqvA4Yp0Sov-3kTZ5QAAABU"]
[Wed Feb 04 04:31:15.919795 2026] [:error] [pid 47577:tid 47595] [client 173.239.236.36:36557] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aYJbE6vA4Yp0Sov-3kTZ7QAAAA4"]
[Wed Feb 04 04:31:17.312700 2026] [:error] [pid 47577:tid 47592] [client 173.239.236.3:36241] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Feb 04 04:31:17.615361 2026] [:error] [pid 47577:tid 47595] [client 173.239.236.3:36241] [client 173.239.236.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aYJbFavA4Yp0Sov-3kTaAgAAAA4"]
[Wed Feb 04 04:31:18.943043 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.98:64501] [client 173.239.236.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aYJbFvuxWks846_Vi2yliwAAAJg"]
[Wed Feb 04 04:31:19.600279 2026] [:error] [pid 47578:tid 47619] [client 173.239.236.1:58933] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Wed Feb 04 04:31:22.169170 2026] [:error] [pid 47578:tid 47629] [client 173.239.236.1:58933] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aYJbGp5oatM9u8-yDv_T6wAAAE4"]
[Wed Feb 04 04:31:23.076423 2026] [:error] [pid 47676:tid 47681] [client 173.239.236.132:31875] [client 173.239.236.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aYJbGwrYSkTgZEfUDqFKzQAAAMM"]
[Wed Feb 04 04:31:24.051937 2026] [:error] [pid 47579:tid 47664] [client 173.239.236.200:42681] [client 173.239.236.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aYJbHPuxWks846_Vi2ylqQAAAJQ"]
[Wed Feb 04 04:31:25.924951 2026] [:error] [pid 47676:tid 47703] [client 173.239.236.118:65105] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aYJbHQrYSkTgZEfUDqFK6wAAANg"]
[Wed Feb 04 04:31:29.563578 2026] [:error] [pid 47577:tid 47585] [client 173.239.236.73:49823] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aYJbIavA4Yp0Sov-3kTaPAAAAAQ"]
[Wed Feb 04 04:31:30.143394 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.1:43363] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aYJbIsszZcOol_Iv-0UMRQAAAQA"]
[Wed Feb 04 04:31:31.890420 2026] [:error] [pid 47577:tid 47594] [client 173.239.236.151:42169] [client 173.239.236.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aYJbI6vA4Yp0Sov-3kTaVQAAAA0"]
[Wed Feb 04 04:31:32.490463 2026] [:error] [pid 18816:tid 18821] [client 173.239.236.181:51269] [client 173.239.236.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYJbJMszZcOol_Iv-0UMVwAAAQI"]
[Wed Feb 04 04:31:35.778834 2026] [:error] [pid 18816:tid 18822] [client 173.239.236.182:48333] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aYJbJ8szZcOol_Iv-0UMdwAAAQM"]
[Wed Feb 04 04:31:37.024930 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.121:33253] [client 173.239.236.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aYJbKcszZcOol_Iv-0UMhAAAAQA"]
[Wed Feb 04 04:31:37.681618 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.110:41513] [client 173.239.236.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.110, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aYJbKcszZcOol_Iv-0UMjgAAAQQ"]
[Wed Feb 04 04:31:37.685622 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.110:41513] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Wed Feb 04 04:31:38.002904 2026] [:error] [pid 18816:tid 18837] [client 173.239.236.110:41513] [client 173.239.236.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aYJbKsszZcOol_Iv-0UMkgAAARI"]
[Wed Feb 04 04:31:39.314987 2026] [:error] [pid 47579:tid 47661] [client 173.239.236.36:46677] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Wed Feb 04 04:31:39.592853 2026] [:error] [pid 47579:tid 47646] [client 173.239.236.36:46677] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYJbK_uxWks846_Vi2ymCwAAAII"]
[Wed Feb 04 04:31:41.302683 2026] [:error] [pid 18816:tid 18832] [client 173.239.236.151:61761] [client 173.239.236.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aYJbLcszZcOol_Iv-0UMpQAAAQ0"]
[Wed Feb 04 04:31:42.012911 2026] [:error] [pid 47579:tid 47644] [client 173.239.236.190:54813] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Wed Feb 04 04:31:45.158235 2026] [:error] [pid 47579:tid 47651] [client 173.239.236.190:54813] [client 173.239.236.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aYJbMfuxWks846_Vi2ymLAAAAIc"]
[Wed Feb 04 04:31:45.787900 2026] [:error] [pid 47577:tid 47585] [client 173.239.236.158:39363] [client 173.239.236.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aYJbMavA4Yp0Sov-3kTamwAAAAQ"]
[Wed Feb 04 04:31:48.405851 2026] [:error] [pid 47577:tid 47594] [client 173.239.236.70:61695] [client 173.239.236.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aYJbNKvA4Yp0Sov-3kTapwAAAA0"]
[Wed Feb 04 04:31:50.091385 2026] [:error] [pid 18816:tid 18834] [client 173.239.236.171:50615] [client 173.239.236.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aYJbNsszZcOol_Iv-0UM1gAAAQ8"]
[Wed Feb 04 04:31:50.728934 2026] [:error] [pid 47577:tid 47595] [client 173.239.236.182:35835] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Wed Feb 04 04:31:51.029053 2026] [:error] [pid 47577:tid 47592] [client 173.239.236.182:35835] [client 173.239.236.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.236.182, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aYJbN6vA4Yp0Sov-3kTauAAAAAs"]
[Wed Feb 04 04:31:51.612692 2026] [:error] [pid 47577:tid 47590] [client 173.239.236.182:35835] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aYJbN6vA4Yp0Sov-3kTavgAAAAk"]
[Wed Feb 04 04:31:54.081288 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.76:38829] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aYJbOsszZcOol_Iv-0UM9gAAAQA"]
[Wed Feb 04 04:31:54.703926 2026] [:error] [pid 47676:tid 47692] [client 173.239.236.41:35415] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Feb 04 04:31:55.040479 2026] [:error] [pid 47676:tid 47683] [client 173.239.236.41:35415] [client 173.239.236.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aYJbOwrYSkTgZEfUDqFLowAAAMU"]
[Wed Feb 04 04:31:55.729653 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.61:49269] [client 173.239.236.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aYJbO8szZcOol_Iv-0UM_wAAAQA"]
[Wed Feb 04 04:31:56.417236 2026] [:error] [pid 47578:tid 47638] [client 173.239.236.41:29501] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Wed Feb 04 04:31:57.926754 2026] [:error] [pid 47578:tid 47620] [client 173.239.236.41:29501] [client 173.239.236.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYJbPZ5oatM9u8-yDv_VEwAAAEU"]
[Wed Feb 04 04:31:59.286654 2026] [:error] [pid 18816:tid 18843] [client 173.239.236.160:46847] [client 173.239.236.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYJbP8szZcOol_Iv-0UNDQAAARg"]
[Wed Feb 04 04:31:59.942995 2026] [:error] [pid 47577:tid 47590] [client 173.239.236.1:35453] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Wed Feb 04 04:32:00.663735 2026] [:error] [pid 47577:tid 47594] [client 173.239.236.1:35453] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Feb 04 04:32:01.335136 2026] [:error] [pid 47577:tid 47598] [client 173.239.236.1:35453] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aYJbQavA4Yp0Sov-3kTa-gAAABE"]
[Wed Feb 04 04:32:01.878438 2026] [:error] [pid 47578:tid 47630] [client 173.239.236.11:52841] [client 173.239.236.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aYJbQZ5oatM9u8-yDv_VKAAAAE8"]
[Wed Feb 04 04:32:02.784751 2026] [:error] [pid 47578:tid 47621] [client 173.239.236.66:64427] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aYJbQp5oatM9u8-yDv_VMgAAAEY"]
[Wed Feb 04 04:32:03.940420 2026] [:error] [pid 47579:tid 47662] [client 173.239.236.54:30945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Wed Feb 04 04:32:06.387568 2026] [:error] [pid 47579:tid 47656] [client 173.239.236.54:30945] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYJbRvuxWks846_Vi2ym6wAAAIw"]
[Wed Feb 04 04:32:08.925798 2026] [:error] [pid 47577:tid 47599] [client 173.239.236.182:26931] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aYJbSKvA4Yp0Sov-3kTbHgAAABI"]
[Wed Feb 04 04:32:09.492784 2026] [:error] [pid 47577:tid 47598] [client 173.239.236.182:26931] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aYJbSavA4Yp0Sov-3kTbIQAAABE"]
[Wed Feb 04 04:32:10.910391 2026] [:error] [pid 18816:tid 18820] [client 173.239.236.149:33185] [client 173.239.236.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aYJbSsszZcOol_Iv-0UNYgAAAQE"]
[Wed Feb 04 04:32:11.576155 2026] [:error] [pid 47577:tid 47587] [client 173.239.236.163:61307] [client 173.239.236.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aYJbS6vA4Yp0Sov-3kTbLQAAAAY"]
[Wed Feb 04 04:32:12.765076 2026] [:error] [pid 18816:tid 18824] [client 173.239.236.228:49905] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Wed Feb 04 04:32:13.819712 2026] [:error] [pid 18816:tid 18831] [client 173.239.236.228:49905] [client 173.239.236.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aYJbTcszZcOol_Iv-0UNeQAAAQw"]
[Wed Feb 04 04:32:15.106430 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.78:22631] [client 173.239.236.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aYJbT8szZcOol_Iv-0UNggAAAQQ"]
[Wed Feb 04 04:32:15.926618 2026] [:error] [pid 47578:tid 47629] [client 173.239.236.54:45409] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aYJbT55oatM9u8-yDv_VbQAAAE4"]
[Wed Feb 04 04:32:16.542677 2026] [:error] [pid 47578:tid 47633] [client 173.239.236.130:57725] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Wed Feb 04 04:32:17.982783 2026] [:error] [pid 47578:tid 47640] [client 173.239.236.130:57725] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aYJbUZ5oatM9u8-yDv_VdQAAAFc"]
[Wed Feb 04 04:32:18.924232 2026] [:error] [pid 47579:tid 47658] [client 173.239.236.157:53995] [client 173.239.236.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aYJbUvuxWks846_Vi2ynSQAAAI4"]
[Wed Feb 04 04:32:19.573952 2026] [:error] [pid 18816:tid 18832] [client 173.239.236.231:51249] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Feb 04 04:32:19.850497 2026] [:error] [pid 18816:tid 18835] [client 173.239.236.231:51249] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aYJbU8szZcOol_Iv-0UNpAAAARA"]
[Wed Feb 04 04:32:20.402140 2026] [:error] [pid 47676:tid 47702] [client 173.239.236.200:65001] [client 173.239.236.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aYJbVArYSkTgZEfUDqFMYAAAANc"]
[Wed Feb 04 04:32:21.796263 2026] [:error] [pid 18816:tid 18823] [client 173.239.236.211:46335] [client 173.239.236.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aYJbVcszZcOol_Iv-0UNvQAAAQQ"]
[Wed Feb 04 04:32:23.243968 2026] [:error] [pid 18816:tid 18829] [client 173.239.236.182:40459] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Wed Feb 04 04:32:23.533669 2026] [:error] [pid 18816:tid 18835] [client 173.239.236.182:40459] [client 173.239.236.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aYJbV8szZcOol_Iv-0UN0wAAARA"]
[Wed Feb 04 04:32:25.164918 2026] [:error] [pid 47676:tid 47685] [client 173.239.236.66:64435] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aYJbWQrYSkTgZEfUDqFMjgAAAMc"]
[Wed Feb 04 04:32:27.046711 2026] [:error] [pid 47577:tid 47581] [client 173.239.236.231:58177] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aYJbW6vA4Yp0Sov-3kTbngAAAAA"]
[Wed Feb 04 04:32:29.671043 2026] [:error] [pid 47577:tid 47596] [client 173.239.236.130:49887] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aYJbXavA4Yp0Sov-3kTbswAAAA8"]
[Wed Feb 04 04:32:30.246810 2026] [:error] [pid 47578:tid 47619] [client 173.239.236.200:41593] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Wed Feb 04 04:32:31.162565 2026] [:error] [pid 47578:tid 47630] [client 173.239.236.200:41593] [client 173.239.236.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYJbX55oatM9u8-yDv_VvwAAAE8"]
[Wed Feb 04 04:32:32.814705 2026] [:error] [pid 18816:tid 18839] [client 173.239.236.53:28477] [client 173.239.236.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aYJbYMszZcOol_Iv-0UOBAAAARQ"]
[Wed Feb 04 04:32:33.673525 2026] [:error] [pid 47676:tid 47678] [client 173.239.236.69:33531] [client 173.239.236.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aYJbYQrYSkTgZEfUDqFM4AAAAMA"]
[Wed Feb 04 04:32:34.700276 2026] [:error] [pid 47578:tid 47634] [client 173.239.236.79:34357] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Wed Feb 04 04:32:35.348953 2026] [:error] [pid 47578:tid 47621] [client 173.239.236.79:34357] [client 173.239.236.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aYJbY55oatM9u8-yDv_V1wAAAEY"]
[Wed Feb 04 04:32:35.941010 2026] [:error] [pid 47676:tid 47679] [client 173.239.236.223:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Wed Feb 04 04:32:36.542681 2026] [:error] [pid 47676:tid 47678] [client 173.239.236.223:36807] [client 173.239.236.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aYJbZArYSkTgZEfUDqFM_wAAAMA"]
[Wed Feb 04 04:32:37.102779 2026] [:error] [pid 47676:tid 47687] [client 173.239.236.118:52407] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aYJbZQrYSkTgZEfUDqFNCwAAAMk"]
[Wed Feb 04 04:32:38.580081 2026] [:error] [pid 47578:tid 47622] [client 173.239.236.1:22123] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYJbZp5oatM9u8-yDv_V4wAAAEc"]
[Wed Feb 04 04:32:39.615835 2026] [:error] [pid 47579:tid 47664] [client 173.239.236.151:24561] [client 173.239.236.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aYJbZ_uxWks846_Vi2yn4wAAAJQ"]
[Wed Feb 04 04:32:41.149675 2026] [:error] [pid 47577:tid 47604] [client 173.239.236.171:61909] [client 173.239.236.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aYJbaavA4Yp0Sov-3kTb8wAAABc"]
[Wed Feb 04 04:32:41.989742 2026] [:error] [pid 47676:tid 47684] [client 173.239.236.250:55157] [client 173.239.236.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aYJbaQrYSkTgZEfUDqFNSQAAAMY"]
[Wed Feb 04 04:32:42.604114 2026] [:error] [pid 18816:tid 18827] [client 173.239.236.231:21213] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aYJbasszZcOol_Iv-0UOKQAAAQg"]
[Wed Feb 04 04:32:43.482758 2026] [:error] [pid 47676:tid 47702] [client 173.239.236.142:62753] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aYJbawrYSkTgZEfUDqFNVgAAANc"]
[Wed Feb 04 04:32:46.776592 2026] [:error] [pid 18816:tid 18820] [client 173.239.236.73:42411] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aYJbbsszZcOol_Iv-0UOQAAAAQE"]
[Wed Feb 04 04:32:47.981591 2026] [:error] [pid 47578:tid 47634] [client 173.239.236.118:62605] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aYJbb55oatM9u8-yDv_WIAAAAFM"]
[Wed Feb 04 04:32:48.861116 2026] [:error] [pid 47578:tid 47626] [client 173.239.236.158:51065] [client 173.239.236.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aYJbcJ5oatM9u8-yDv_WIwAAAEs"]
[Wed Feb 04 04:32:49.717763 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.132:58111] [client 173.239.236.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYJbcZ5oatM9u8-yDv_WJwAAAEM"]
[Wed Feb 04 04:32:50.778050 2026] [:error] [pid 18816:tid 18835] [client 173.239.236.1:55841] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Wed Feb 04 04:32:52.088626 2026] [:error] [pid 18816:tid 18842] [client 173.239.236.1:55841] [client 173.239.236.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aYJbdMszZcOol_Iv-0UOfAAAARc"]
[Wed Feb 04 04:32:53.077635 2026] [:error] [pid 47676:tid 47681] [client 173.239.236.78:55179] [client 173.239.236.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aYJbdQrYSkTgZEfUDqFNkAAAAMM"]
[Wed Feb 04 04:32:53.868379 2026] [:error] [pid 47578:tid 47626] [client 173.239.236.76:41877] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Wed Feb 04 04:32:54.147806 2026] [:error] [pid 47578:tid 47624] [client 173.239.236.76:41877] [client 173.239.236.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aYJbdp5oatM9u8-yDv_WPwAAAEk"]
[Wed Feb 04 04:32:55.891027 2026] [:error] [pid 18816:tid 18843] [client 173.239.236.171:35069] [client 173.239.236.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aYJbd8szZcOol_Iv-0UOpwAAARg"]
[Wed Feb 04 04:32:56.849416 2026] [:error] [pid 47579:tid 47663] [client 173.239.236.181:51577] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Wed Feb 04 04:32:57.137774 2026] [:error] [pid 47579:tid 47649] [client 173.239.236.181:51577] [client 173.239.236.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aYJbefuxWks846_Vi2yoaAAAAIU"]
[Wed Feb 04 04:32:58.517463 2026] [:error] [pid 47578:tid 47632] [client 173.239.236.116:49971] [client 173.239.236.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aYJbep5oatM9u8-yDv_WWQAAAFE"]
[Wed Feb 04 04:32:59.070851 2026] [:error] [pid 18816:tid 18825] [client 173.239.236.78:35673] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Feb 04 04:32:59.361219 2026] [:error] [pid 18816:tid 18835] [client 173.239.236.78:35673] [client 173.239.236.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aYJbe8szZcOol_Iv-0UO1gAAARA"]
[Wed Feb 04 04:33:00.353277 2026] [:error] [pid 18816:tid 18835] [client 173.239.236.116:63581] [client 173.239.236.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aYJbfMszZcOol_Iv-0UO4wAAARA"]
[Wed Feb 04 04:33:01.943194 2026] [:error] [pid 47676:tid 47689] [client 173.239.236.223:50143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Wed Feb 04 04:33:02.199121 2026] [:error] [pid 47676:tid 47702] [client 173.239.236.223:50143] [client 173.239.236.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aYJbfgrYSkTgZEfUDqFNtAAAANc"]
[Wed Feb 04 04:33:03.670892 2026] [:error] [pid 47577:tid 47598] [client 173.239.236.18:47093] [client 173.239.236.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aYJbf6vA4Yp0Sov-3kTcgQAAABE"]
[Wed Feb 04 04:33:04.253287 2026] [:error] [pid 18816:tid 18819] [client 173.239.236.132:31139] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Wed Feb 04 04:33:04.536787 2026] [:error] [pid 18816:tid 18839] [client 173.239.236.132:31139] [client 173.239.236.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aYJbgMszZcOol_Iv-0UO_AAAARQ"]
[Wed Feb 04 04:33:05.122869 2026] [:error] [pid 47676:tid 47689] [client 173.239.236.116:58167] [client 173.239.236.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aYJbgQrYSkTgZEfUDqFNvgAAAMs"]
[Wed Feb 04 04:33:05.670069 2026] [:error] [pid 47577:tid 47595] [client 173.239.236.171:33919] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Wed Feb 04 04:33:06.213254 2026] [:error] [pid 47577:tid 47585] [client 173.239.236.171:33919] [client 173.239.236.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aYJbgqvA4Yp0Sov-3kTcjwAAAAQ"]
[Wed Feb 04 04:33:06.736662 2026] [:error] [pid 47578:tid 47631] [client 173.239.236.118:31217] [client 173.239.236.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aYJbgp5oatM9u8-yDv_WjwAAAFA"]
[Wed Feb 04 04:33:08.831907 2026] [:error] [pid 47578:tid 47619] [client 173.239.236.231:38103] [client 173.239.236.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aYJbhJ5oatM9u8-yDv_WpgAAAEQ"]
[Wed Feb 04 04:33:09.358820 2026] [:error] [pid 47676:tid 47678] [client 173.239.236.142:27611] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aYJbhQrYSkTgZEfUDqFN1QAAAMA"]
[Wed Feb 04 04:33:10.206510 2026] [:error] [pid 18816:tid 18842] [client 173.239.236.73:49565] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aYJbhsszZcOol_Iv-0UPEgAAARc"]
[Wed Feb 04 04:33:10.730050 2026] [:error] [pid 47577:tid 47605] [client 173.239.236.178:29185] [client 173.239.236.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aYJbhqvA4Yp0Sov-3kTcrgAAABg"]
[Wed Feb 04 04:33:11.264179 2026] [:error] [pid 47579:tid 47650] [client 173.239.236.130:61375] [client 173.239.236.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aYJbh_uxWks846_Vi2yovwAAAIY"]
[Wed Feb 04 04:33:11.833085 2026] [:error] [pid 47577:tid 47588] [client 173.239.236.54:21497] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aYJbh6vA4Yp0Sov-3kTcuwAAAAc"]
[Wed Feb 04 04:33:13.491283 2026] [:error] [pid 18816:tid 18831] [client 173.239.236.211:63305] [client 173.239.236.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aYJbicszZcOol_Iv-0UPLwAAAQw"]
[Wed Feb 04 04:33:13.932091 2026] [:error] [pid 47676:tid 47683] [client 173.239.236.21:63249] [client 173.239.236.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aYJbiQrYSkTgZEfUDqFN_gAAAMU"]
[Wed Feb 04 04:33:14.790652 2026] [:error] [pid 47579:tid 47665] [client 173.239.236.73:23321] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Wed Feb 04 04:33:15.052569 2026] [:error] [pid 47579:tid 47668] [client 173.239.236.73:23321] [client 173.239.236.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aYJbi_uxWks846_Vi2yo2QAAAJg"]
[Wed Feb 04 04:33:15.729505 2026] [:error] [pid 47577:tid 47600] [client 173.239.236.149:57797] [client 173.239.236.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aYJbi6vA4Yp0Sov-3kTcyQAAABM"]
[Wed Feb 04 04:33:16.924545 2026] [:error] [pid 47577:tid 47604] [client 173.239.236.149:45735] [client 173.239.236.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aYJbjKvA4Yp0Sov-3kTc0wAAABc"]
[Wed Feb 04 04:33:17.820225 2026] [:error] [pid 47578:tid 47627] [client 173.239.236.31:34259] [client 173.239.236.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aYJbjZ5oatM9u8-yDv_W6QAAAEw"]
[Wed Feb 04 04:33:20.356681 2026] [:error] [pid 18816:tid 18843] [client 173.239.236.211:60927] [client 173.239.236.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aYJbkMszZcOol_Iv-0UPawAAARg"]
[Wed Feb 04 04:33:20.926772 2026] [:error] [pid 47577:tid 47592] [client 173.239.236.66:47901] [client 173.239.236.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aYJbkKvA4Yp0Sov-3kTc9QAAAAs"]
[Wed Feb 04 04:33:21.911578 2026] [:error] [pid 18816:tid 18829] [client 173.239.236.142:54967] [client 173.239.236.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aYJbkcszZcOol_Iv-0UPgAAAAQo"]
[Wed Feb 04 04:33:22.691233 2026] [:error] [pid 47577:tid 47605] [client 173.239.236.181:58439] [client 173.239.236.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aYJbkqvA4Yp0Sov-3kTc_wAAABg"]
[Wed Feb 04 04:33:23.457490 2026] [:error] [pid 47577:tid 47587] [client 173.239.236.53:65345] [client 173.239.236.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aYJbk6vA4Yp0Sov-3kTdBwAAAAY"]
[Wed Feb 04 04:33:23.946641 2026] [:error] [pid 47676:tid 47682] [client 173.239.236.116:60277] [client 173.239.236.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aYJbkwrYSkTgZEfUDqFONAAAAMQ"]
[Wed Feb 04 04:33:24.435784 2026] [:error] [pid 47579:tid 47654] [client 173.239.236.31:28901] [client 173.239.236.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aYJblPuxWks846_Vi2ypIwAAAIo"]
[Wed Feb 04 04:33:25.868625 2026] [:error] [pid 47578:tid 47620] [client 173.239.236.228:63629] [client 173.239.236.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aYJblZ5oatM9u8-yDv_XOQAAAEU"]
[Wed Feb 04 04:33:26.400733 2026] [:error] [pid 47579:tid 47659] [client 173.239.236.94:29589] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Wed Feb 04 04:33:26.713513 2026] [:error] [pid 47579:tid 47666] [client 173.239.236.94:29589] [client 173.239.236.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aYJblvuxWks846_Vi2ypNQAAAJY"]
[Wed Feb 04 04:33:28.083850 2026] [:error] [pid 47578:tid 47634] [client 173.239.236.18:25645] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Wed Feb 04 04:33:28.336018 2026] [:error] [pid 47578:tid 47618] [client 173.239.236.18:25645] [client 173.239.236.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aYJbmJ5oatM9u8-yDv_XUwAAAEM"]
[Wed Feb 04 04:33:28.868414 2026] [:error] [pid 47578:tid 47635] [client 173.239.236.129:31075] [client 173.239.236.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aYJbmJ5oatM9u8-yDv_XWwAAAFQ"]
[Wed Feb 04 04:33:30.772635 2026] [:error] [pid 47578:tid 47636] [client 173.239.236.158:33629] [client 173.239.236.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aYJbmp5oatM9u8-yDv_XaQAAAFU"]
[Wed Feb 04 04:33:32.710808 2026] [:error] [pid 18816:tid 18833] [client 173.239.236.215:40589] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Wed Feb 04 04:33:33.796431 2026] [:error] [pid 18816:tid 18821] [client 173.239.236.215:40589] [client 173.239.236.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aYJbncszZcOol_Iv-0UPyQAAAQI"]
[Wed Feb 04 04:33:36.648237 2026] [:error] [pid 18816:tid 18827] [client 173.239.236.224:22251] [client 173.239.236.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aYJboMszZcOol_Iv-0UP1AAAAQg"]
[Wed Feb 04 04:33:38.808985 2026] [:error] [pid 47676:tid 47697] [client 173.239.236.176:40659] [client 173.239.236.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aYJbogrYSkTgZEfUDqFOgwAAANM"]
[Wed Feb 04 04:33:40.347935 2026] [:error] [pid 18816:tid 18833] [client 173.239.236.54:51615] [client 173.239.236.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYJbpMszZcOol_Iv-0UP5gAAAQ4"]
[Wed Feb 04 04:33:40.856015 2026] [:error] [pid 47579:tid 47652] [client 173.239.236.11:49833] [client 173.239.236.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aYJbpPuxWks846_Vi2ypqgAAAIg"]
[Wed Feb 04 06:21:52.514065 2026] [:error] [pid 47577:tid 47593] [client 145.239.66.34:52708] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYJ1AKvA4Yp0Sov-3kQE4wAAAAw"]
[Wed Feb 04 06:21:55.116487 2026] [:error] [pid 47577:tid 47599] [client 145.239.66.34:46682] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYJ1A6vA4Yp0Sov-3kQE6QAAABI"]
[Wed Feb 04 06:21:58.147042 2026] [:error] [pid 47578:tid 47638] [client 145.239.66.34:46690] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYJ1Bp5oatM9u8-yDv_-hwAAAFY"]
[Wed Feb 04 06:22:01.657217 2026] [:error] [pid 47578:tid 47636] [client 145.239.66.34:46290] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYJ1CZ5oatM9u8-yDv_-iwAAAFU"]
[Wed Feb 04 06:22:04.061609 2026] [:error] [pid 47676:tid 47693] [client 145.239.66.34:46306] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYJ1DArYSkTgZEfUDqF5qwAAAM8"]
[Wed Feb 04 06:22:07.374812 2026] [:error] [pid 18816:tid 18837] [client 145.239.66.34:46312] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYJ1D8szZcOol_Iv-0VLtAAAARI"]
[Wed Feb 04 08:32:21.082969 2026] [:error] [pid 47579:tid 47654] [client 45.92.1.79:54214] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYKTlfuxWks846_Vi2z1XQAAAIo"]
[Wed Feb 04 08:32:21.755116 2026] [:error] [pid 18816:tid 18828] [client 45.92.1.79:54480] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYKTlcszZcOol_Iv-0V8mAAAAQk"]
[Wed Feb 04 08:32:22.348439 2026] [:error] [pid 18816:tid 18837] [client 45.92.1.79:54827] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYKTlsszZcOol_Iv-0V8wQAAARI"]
[Wed Feb 04 08:32:22.938066 2026] [:error] [pid 47579:tid 47659] [client 45.92.1.79:55079] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYKTlvuxWks846_Vi2z1ewAAAI8"]
[Wed Feb 04 08:32:23.520839 2026] [:error] [pid 47577:tid 47596] [client 45.92.1.79:55353] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYKTl6vA4Yp0Sov-3kQtgAAAAA8"]
[Wed Feb 04 10:23:20.476437 2026] [:error] [pid 50578:tid 50587] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Feb 04 10:23:20.499192 2026] [:error] [pid 50578:tid 50595] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Wed Feb 04 10:23:20.701906 2026] [:error] [pid 50578:tid 50591] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Wed Feb 04 10:23:20.725434 2026] [:error] [pid 50578:tid 50603] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Wed Feb 04 10:23:20.759210 2026] [:error] [pid 50578:tid 50601] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Feb 04 10:23:21.128822 2026] [:error] [pid 50578:tid 50588] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 04 10:23:21.152066 2026] [:error] [pid 50578:tid 50593] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 04 10:23:21.174065 2026] [:error] [pid 50578:tid 50602] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Wed Feb 04 10:23:21.611104 2026] [:error] [pid 50578:tid 50592] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Feb 04 10:23:22.093731 2026] [:error] [pid 50578:tid 50583] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/fast.php
[Wed Feb 04 10:23:22.113881 2026] [:error] [pid 50578:tid 50600] [client 20.58.166.68:6850] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Wed Feb 04 10:23:22.148713 2026] [:error] [pid 50578:tid 50596] [client 20.58.166.68:6850] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aYKtmtYUQBXdXxfW1me7yAAAABA"]
[Wed Feb 04 10:23:22.248608 2026] [:error] [pid 47500:tid 47517] [client 20.58.166.68:6866] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aYKtmrrUat0rhPdY3A1scgAAAU0"]
[Wed Feb 04 10:23:22.327024 2026] [:error] [pid 47405:tid 47448] [client 20.58.166.68:8123] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aYKtmqTmhSrwHQTn6I7I2AAAAMg"]
[Wed Feb 04 10:23:22.415852 2026] [:error] [pid 47500:tid 47510] [client 20.58.166.68:4192] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r.php"] [unique_id "aYKtmrrUat0rhPdY3A1sdQAAAUY"]
[Wed Feb 04 14:07:17.905304 2026] [:error] [pid 47404:tid 47430] [client 43.166.224.244:48910] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYLiFVtGjJnGFKjTTua8XgAAAJQ"]
[Wed Feb 04 16:54:52.347296 2026] [:error] [pid 47404:tid 47410] [client 37.27.119.185:51270] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYMJXFtGjJnGFKjTTubpvwAAAIA"], referer: https://www.wired.com
[Wed Feb 04 16:54:53.279632 2026] [:error] [pid 47404:tid 47423] [client 37.27.119.185:52187] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYMJXVtGjJnGFKjTTubpwQAAAI0"], referer: https://www.reddit.com/r/food
[Wed Feb 04 16:54:55.308146 2026] [:error] [pid 47404:tid 47422] [client 37.27.119.185:52892] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYMJX1tGjJnGFKjTTubpxQAAAIw"], referer: https://www.wired.com
[Wed Feb 04 16:54:56.263690 2026] [:error] [pid 47404:tid 47431] [client 37.27.119.185:53792] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYMJYFtGjJnGFKjTTubpxgAAAJU"], referer: https://www.slashdot.org
[Wed Feb 04 19:31:41.146878 2026] [:error] [pid 55160:tid 55181] [client 114.80.36.40:50268] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYMuHeTAiAYDLSDaxdctrAAAAZM"]
[Wed Feb 04 20:59:21.071753 2026] [:error] [pid 55160:tid 55168] [client 162.62.132.25:45940] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYNCqeTAiAYDLSDaxddNHwAAAYY"]
[Wed Feb 04 21:06:50.289437 2026] [:error] [pid 47404:tid 47427] [client 43.156.232.190:37990] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYNEaltGjJnGFKjTTuYzwwAAAJE"]
[Thu Feb 05 01:38:44.652143 2026] [:error] [pid 26443:tid 26448] [client 81.167.26.57:30998] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aYOEJNRUJ4b_jBAfhPJwugAAAUM"]
[Thu Feb 05 01:38:46.938648 2026] [:error] [pid 26443:tid 26466] [client 81.167.26.57:58610] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aYOEJtRUJ4b_jBAfhPJwwQAAAVU"]
[Thu Feb 05 01:38:49.211800 2026] [:error] [pid 63686:tid 63757] [client 81.167.26.57:63792] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aYOEKRyaRl9O5jmngTwcJgAAAQ4"]
[Thu Feb 05 01:38:51.496265 2026] [:error] [pid 63686:tid 63767] [client 81.167.26.57:20427] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aYOEKxyaRl9O5jmngTwcKQAAARg"]
[Thu Feb 05 01:38:54.653354 2026] [:error] [pid 63684:tid 63708] [client 81.167.26.57:14979] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aYOELtsfhS3nNwjjsUPO1wAAAJM"]
[Thu Feb 05 01:38:56.818009 2026] [:error] [pid 63684:tid 63707] [client 81.167.26.57:38715] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYOEMNsfhS3nNwjjsUPO2gAAAJI"]
[Thu Feb 05 01:39:02.134803 2026] [:error] [pid 26443:tid 26467] [client 81.167.26.57:52953] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYOENtRUJ4b_jBAfhPJw9gAAAVY"]
[Thu Feb 05 01:39:05.399621 2026] [:error] [pid 63685:tid 63720] [client 81.167.26.57:18363] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYOEOY6Dyg716yRb8FCn1wAAAMQ"]
[Thu Feb 05 01:39:07.721158 2026] [:error] [pid 6490:tid 6497] [client 81.167.26.57:29384] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYOEO_jiJaSp2OpoDUl-FgAAAEQ"]
[Thu Feb 05 01:39:11.030412 2026] [:error] [pid 63685:tid 63721] [client 81.167.26.57:13484] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYOEP46Dyg716yRb8FCn3gAAAMU"]
[Thu Feb 05 01:39:13.332470 2026] [:error] [pid 26443:tid 26463] [client 81.167.26.57:36979] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYOEQdRUJ4b_jBAfhPJxGQAAAVI"]
[Thu Feb 05 01:39:15.608493 2026] [:error] [pid 63777:tid 63791] [client 81.167.26.57:58795] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYOEQ_Q-YVerd_zSVS-LsAAAAAw"]
[Thu Feb 05 01:39:18.773903 2026] [:error] [pid 6490:tid 6510] [client 81.167.26.57:23879] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYOERvjiJaSp2OpoDUl-IwAAAFE"]
[Thu Feb 05 01:39:22.103029 2026] [:error] [pid 6490:tid 6506] [client 81.167.26.57:8062] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYOESvjiJaSp2OpoDUl-KwAAAE0"]
[Thu Feb 05 01:39:25.312702 2026] [:error] [pid 63777:tid 63802] [client 81.167.26.57:41807] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYOETfQ-YVerd_zSVS-LvAAAABc"]
[Thu Feb 05 01:39:27.599659 2026] [:error] [pid 26443:tid 26445] [client 81.167.26.57:18043] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYOET9RUJ4b_jBAfhPJxRQAAAUA"]
[Thu Feb 05 01:39:30.767173 2026] [:error] [pid 6490:tid 6499] [client 81.167.26.57:35795] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYOEUvjiJaSp2OpoDUl-NQAAAEY"]
[Thu Feb 05 01:39:33.037519 2026] [:error] [pid 63777:tid 63798] [client 81.167.26.57:39771] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYOEVfQ-YVerd_zSVS-LwwAAABM"]
[Thu Feb 05 01:39:36.303341 2026] [:error] [pid 26443:tid 26464] [client 81.167.26.57:51172] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYOEWNRUJ4b_jBAfhPJxXwAAAVM"]
[Thu Feb 05 01:39:58.472498 2026] [:error] [pid 26443:tid 26455] [client 81.167.26.57:52549] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYOEbtRUJ4b_jBAfhPJxkwAAAUo"]
[Thu Feb 05 01:40:01.447198 2026] [:error] [pid 26443:tid 26465] [client 81.167.26.57:13226] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYOEcdRUJ4b_jBAfhPJxmQAAAVQ"]
[Thu Feb 05 01:40:04.617034 2026] [:error] [pid 6490:tid 6516] [client 81.167.26.57:60931] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYOEdPjiJaSp2OpoDUl-cgAAAFc"]
[Thu Feb 05 01:40:06.891837 2026] [:error] [pid 6490:tid 6495] [client 81.167.26.57:31701] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYOEdvjiJaSp2OpoDUl-ewAAAEI"]
[Thu Feb 05 01:40:09.171618 2026] [:error] [pid 26443:tid 26460] [client 81.167.26.57:34846] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYOEedRUJ4b_jBAfhPJxqwAAAU8"]
[Thu Feb 05 01:40:12.470684 2026] [:error] [pid 26443:tid 26466] [client 81.167.26.57:19040] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYOEfNRUJ4b_jBAfhPJxtgAAAVU"]
[Thu Feb 05 01:40:16.886689 2026] [:error] [pid 6490:tid 6495] [client 81.167.26.57:56702] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYOEgPjiJaSp2OpoDUl-jwAAAEI"]
[Thu Feb 05 01:40:19.156323 2026] [:error] [pid 63685:tid 63739] [client 81.167.26.57:43840] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYOEg46Dyg716yRb8FCoKgAAANc"]
[Thu Feb 05 01:40:24.572954 2026] [:error] [pid 63686:tid 63755] [client 81.167.26.57:1185] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYOEiByaRl9O5jmngTwc4AAAAQw"]
[Thu Feb 05 01:40:26.883021 2026] [:error] [pid 6490:tid 6515] [client 81.167.26.57:24778] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYOEivjiJaSp2OpoDUl-mwAAAFY"]
[Thu Feb 05 01:40:29.154292 2026] [:error] [pid 63777:tid 63800] [client 81.167.26.57:61159] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYOEjfQ-YVerd_zSVS-MUQAAABU"]
[Thu Feb 05 01:40:31.432410 2026] [:error] [pid 63684:tid 63705] [client 81.167.26.57:22266] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYOEj9sfhS3nNwjjsUPPeAAAAJA"]
[Thu Feb 05 01:40:33.700030 2026] [:error] [pid 6490:tid 6504] [client 81.167.26.57:32213] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYOEkfjiJaSp2OpoDUl-rgAAAEs"]
[Thu Feb 05 01:40:36.896184 2026] [:error] [pid 6490:tid 6501] [client 81.167.26.57:40231] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYOElPjiJaSp2OpoDUl-tAAAAEg"]
[Thu Feb 05 01:40:39.164390 2026] [:error] [pid 6490:tid 6494] [client 81.167.26.57:5009] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYOEl_jiJaSp2OpoDUl-uwAAAEE"]
[Thu Feb 05 01:40:41.447115 2026] [:error] [pid 26443:tid 26467] [client 81.167.26.57:55777] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYOEmdRUJ4b_jBAfhPJx8gAAAVY"]
[Thu Feb 05 01:40:43.723855 2026] [:error] [pid 26443:tid 26460] [client 81.167.26.57:25158] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYOEm9RUJ4b_jBAfhPJx-wAAAU8"]
[Thu Feb 05 01:40:45.985733 2026] [:error] [pid 6490:tid 6517] [client 81.167.26.57:47618] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYOEnfjiJaSp2OpoDUl-vgAAAFg"]
[Thu Feb 05 01:40:49.158840 2026] [:error] [pid 6490:tid 6507] [client 81.167.26.57:11318] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYOEofjiJaSp2OpoDUl-wgAAAE4"]
[Thu Feb 05 01:40:51.426238 2026] [:error] [pid 26443:tid 26456] [client 81.167.26.57:21548] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYOEo9RUJ4b_jBAfhPJyCAAAAUs"]
[Thu Feb 05 01:40:53.694458 2026] [:error] [pid 26443:tid 26453] [client 81.167.26.57:33690] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYOEpdRUJ4b_jBAfhPJyHAAAAUg"]
[Thu Feb 05 01:41:17.569240 2026] [:error] [pid 63685:tid 63740] [client 81.167.26.57:42686] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYOEvY6Dyg716yRb8FCoewAAANg"]
[Thu Feb 05 01:41:19.802748 2026] [:error] [pid 63777:tid 63790] [client 81.167.26.57:62310] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYOEv_Q-YVerd_zSVS-MngAAAAs"]
[Thu Feb 05 01:41:22.073933 2026] [:error] [pid 26443:tid 26449] [client 81.167.26.57:8716] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYOEwtRUJ4b_jBAfhPJyZgAAAUQ"]
[Thu Feb 05 01:41:26.262190 2026] [:error] [pid 63777:tid 63796] [client 81.167.26.57:7027] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYOExvQ-YVerd_zSVS-MrgAAABE"]
[Thu Feb 05 01:41:28.651071 2026] [:error] [pid 63685:tid 63722] [client 81.167.26.57:40414] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYOEyI6Dyg716yRb8FColgAAAMY"]
[Thu Feb 05 02:56:04.445970 2026] [:error] [pid 6490:tid 6506] [client 217.77.10.74:56953] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aYOWRPjiJaSp2OpoDUmaQQAAAE0"]
[Thu Feb 05 04:44:50.134583 2026] [:error] [pid 12188:tid 12225] [client 43.135.139.165:37952] [client 43.135.139.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYOvwjKWpl9mNO_-qzPVYQAAAEE"]
[Thu Feb 05 05:39:14.544915 2026] [:error] [pid 12189:tid 12251] [client 136.144.33.14:64405] [client 136.144.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.14, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYO8gr10V_VY_a0vRT59aQAAAIA"]
[Thu Feb 05 05:39:14.550902 2026] [:error] [pid 12189:tid 12251] [client 136.144.33.14:64405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Feb 05 10:30:53.237804 2026] [:error] [pid 31739:tid 31757] [client 45.92.1.79:62933] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYQA3QGrHl_5BvMstJIwrwAAABA"]
[Thu Feb 05 10:30:53.880972 2026] [:error] [pid 31739:tid 31756] [client 45.92.1.79:63363] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYQA3QGrHl_5BvMstJIw0gAAAA8"]
[Thu Feb 05 10:30:54.491355 2026] [:error] [pid 31774:tid 31778] [client 45.92.1.79:63831] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYQA3qjDlLg1NOhSOXWAcgAAAIA"]
[Thu Feb 05 10:30:55.268647 2026] [:error] [pid 31739:tid 31763] [client 45.92.1.79:64262] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYQA3wGrHl_5BvMstJIxIQAAABY"]
[Thu Feb 05 10:30:56.991707 2026] [:error] [pid 33396:tid 33412] [client 45.92.1.79:64695] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYQA4PTgp_Ev6LiSSgApvQAAAMk"]
[Thu Feb 05 12:42:21.508613 2026] [:error] [pid 31833:tid 31843] [client 62.84.185.55:27356] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYQfrRzypZt5yekRAkHVOgAAAYg"]
[Thu Feb 05 12:42:23.811611 2026] [:error] [pid 31833:tid 31859] [client 62.84.185.55:27366] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYQfrxzypZt5yekRAkHVPwAAAZg"]
[Thu Feb 05 12:42:25.902706 2026] [:error] [pid 33122:tid 33137] [client 62.84.185.55:27372] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYQfsfW0IebAnFB9KDC-vgAAAE0"]
[Thu Feb 05 12:42:27.845439 2026] [:error] [pid 33396:tid 33426] [client 62.84.185.55:13712] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYQfs_Tgp_Ev6LiSSgBXwAAAANc"]
[Thu Feb 05 12:42:30.109836 2026] [:error] [pid 33396:tid 33414] [client 62.84.185.55:13722] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYQftvTgp_Ev6LiSSgBXxwAAAMs"]
[Thu Feb 05 12:42:32.340977 2026] [:error] [pid 31774:tid 31793] [client 62.84.185.55:13730] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYQfuKjDlLg1NOhSOXW8wQAAAI8"]
[Thu Feb 05 12:42:34.415574 2026] [:error] [pid 31833:tid 31852] [client 62.84.185.55:13740] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYQfuhzypZt5yekRAkHVXgAAAZE"]
[Thu Feb 05 12:42:36.383999 2026] [:error] [pid 33396:tid 33404] [client 62.84.185.55:13744] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYQfvPTgp_Ev6LiSSgBXzAAAAME"]
[Thu Feb 05 12:42:38.510304 2026] [:error] [pid 31833:tid 31848] [client 62.84.185.55:9306] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYQfvhzypZt5yekRAkHVYwAAAY0"]
[Thu Feb 05 12:42:40.612170 2026] [:error] [pid 31833:tid 31846] [client 62.84.185.55:9322] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYQfwBzypZt5yekRAkHVaQAAAYs"]
[Thu Feb 05 12:42:42.859082 2026] [:error] [pid 31774:tid 31790] [client 62.84.185.55:9324] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYQfwqjDlLg1NOhSOXW8xgAAAIw"]
[Thu Feb 05 12:42:45.031797 2026] [:error] [pid 31775:tid 31819] [client 62.84.185.55:9332] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYQfxRNlTj92HTKsJN2V8QAAAQ4"]
[Thu Feb 05 12:42:47.298962 2026] [:error] [pid 31775:tid 31828] [client 62.84.185.55:39234] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYQfxxNlTj92HTKsJN2V9gAAARc"]
[Thu Feb 05 12:42:49.576198 2026] [:error] [pid 31739:tid 31747] [client 62.84.185.55:39244] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYQfyQGrHl_5BvMstJJV1QAAAAY"]
[Thu Feb 05 12:42:51.532161 2026] [:error] [pid 31739:tid 31746] [client 62.84.185.55:39246] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYQfywGrHl_5BvMstJJV2AAAAAU"]
[Thu Feb 05 12:42:53.708696 2026] [:error] [pid 33396:tid 33410] [client 62.84.185.55:39254] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYQfzfTgp_Ev6LiSSgBX2wAAAMc"]
[Thu Feb 05 12:42:55.827108 2026] [:error] [pid 31775:tid 31810] [client 62.84.185.55:39258] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYQfzxNlTj92HTKsJN2V-gAAAQU"]
[Thu Feb 05 12:42:57.794145 2026] [:error] [pid 31774:tid 31782] [client 62.84.185.55:8280] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYQf0ajDlLg1NOhSOXW82wAAAIQ"]
[Thu Feb 05 12:42:59.980063 2026] [:error] [pid 31774:tid 31796] [client 62.84.185.55:8288] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYQf06jDlLg1NOhSOXW84gAAAJI"]
[Thu Feb 05 12:43:02.381342 2026] [:error] [pid 31774:tid 31800] [client 62.84.185.55:8296] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYQf1qjDlLg1NOhSOXW85QAAAJY"]
[Thu Feb 05 12:43:04.846296 2026] [:error] [pid 31739:tid 31758] [client 62.84.185.55:8306] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYQf2AGrHl_5BvMstJJV5gAAABE"]
[Thu Feb 05 12:43:06.904744 2026] [:error] [pid 31833:tid 31859] [client 62.84.185.55:8322] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYQf2hzypZt5yekRAkHVkgAAAZg"]
[Thu Feb 05 12:43:09.210708 2026] [:error] [pid 31739:tid 31742] [client 62.84.185.55:61384] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYQf3QGrHl_5BvMstJJV6wAAAAE"]
[Thu Feb 05 12:43:11.297024 2026] [:error] [pid 31775:tid 31829] [client 62.84.185.55:61400] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYQf3xNlTj92HTKsJN2WCgAAARg"]
[Thu Feb 05 12:43:13.635585 2026] [:error] [pid 31774:tid 31784] [client 62.84.185.55:61416] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYQf4ajDlLg1NOhSOXW87gAAAIY"]
[Thu Feb 05 12:43:15.825277 2026] [:error] [pid 31833:tid 31858] [client 62.84.185.55:61422] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYQf4xzypZt5yekRAkHVpAAAAZc"]
[Thu Feb 05 12:43:18.039302 2026] [:error] [pid 31739:tid 31751] [client 62.84.185.55:2418] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYQf5gGrHl_5BvMstJJV9gAAAAo"]
[Thu Feb 05 12:43:44.144300 2026] [:error] [pid 31774:tid 31801] [client 62.84.185.55:30876] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYQgAKjDlLg1NOhSOXW9EgAAAJc"]
[Thu Feb 05 12:43:46.131121 2026] [:error] [pid 31833:tid 31851] [client 62.84.185.55:30892] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYQgAhzypZt5yekRAkHV2AAAAZA"]
[Thu Feb 05 12:43:48.443732 2026] [:error] [pid 31775:tid 31825] [client 62.84.185.55:61564] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYQgBBNlTj92HTKsJN2WHgAAARQ"]
[Thu Feb 05 12:43:50.426106 2026] [:error] [pid 33396:tid 33415] [client 62.84.185.55:61576] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYQgBvTgp_Ev6LiSSgBYAQAAAMw"]
[Thu Feb 05 12:43:52.439816 2026] [:error] [pid 33396:tid 33404] [client 62.84.185.55:61580] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYQgCPTgp_Ev6LiSSgBYBwAAAME"]
[Thu Feb 05 12:43:54.639907 2026] [:error] [pid 33122:tid 33137] [client 62.84.185.55:61590] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYQgCvW0IebAnFB9KDC--QAAAE0"]
[Thu Feb 05 12:43:56.887265 2026] [:error] [pid 31833:tid 31846] [client 62.84.185.55:61596] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYQgDBzypZt5yekRAkHV5gAAAYs"]
[Thu Feb 05 12:43:58.973893 2026] [:error] [pid 33122:tid 33131] [client 62.84.185.55:47234] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYQgDvW0IebAnFB9KDC_AQAAAEc"]
[Thu Feb 05 12:44:01.108653 2026] [:error] [pid 31833:tid 31859] [client 62.84.185.55:47236] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYQgERzypZt5yekRAkHV7AAAAZg"]
[Thu Feb 05 12:44:03.302177 2026] [:error] [pid 31774:tid 31786] [client 62.84.185.55:47248] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYQgE6jDlLg1NOhSOXW9IQAAAIg"]
[Thu Feb 05 12:44:05.359487 2026] [:error] [pid 31833:tid 31853] [client 62.84.185.55:47260] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYQgFRzypZt5yekRAkHV9AAAAZI"]
[Thu Feb 05 12:44:07.486238 2026] [:error] [pid 33122:tid 33134] [client 62.84.185.55:26340] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYQgF_W0IebAnFB9KDC_BwAAAEo"]
[Thu Feb 05 12:44:09.544922 2026] [:error] [pid 33396:tid 33424] [client 62.84.185.55:26356] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYQgGfTgp_Ev6LiSSgBYDAAAANU"]
[Thu Feb 05 12:44:11.809447 2026] [:error] [pid 31774:tid 31785] [client 62.84.185.55:26362] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYQgG6jDlLg1NOhSOXW9LQAAAIc"]
[Thu Feb 05 12:44:13.494667 2026] [:error] [pid 31775:tid 31824] [client 62.84.185.55:26368] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYQgHRNlTj92HTKsJN2WNAAAARM"]
[Thu Feb 05 12:44:17.451895 2026] [:error] [pid 31833:tid 31856] [client 62.84.185.55:34338] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYQgIRzypZt5yekRAkHWDQAAAZU"]
[Thu Feb 05 13:41:10.634889 2026] [:error] [pid 33396:tid 33427] [client 45.139.104.214:50590] [client 45.139.104.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aYQtdvTgp_Ev6LiSSgBqYAAAANg"]
[Thu Feb 05 14:29:30.573110 2026] [:error] [pid 31775:tid 31807] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Feb 05 14:29:31.101376 2026] [:error] [pid 31775:tid 31824] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Feb 05 14:29:31.552907 2026] [:error] [pid 31775:tid 31819] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Feb 05 14:29:32.007918 2026] [:error] [pid 31775:tid 31817] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 05 14:29:32.511061 2026] [:error] [pid 31775:tid 31807] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Feb 05 14:29:33.033721 2026] [:error] [pid 31775:tid 31822] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Feb 05 14:29:33.483807 2026] [:error] [pid 31775:tid 31812] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 05 14:29:33.988506 2026] [:error] [pid 31775:tid 31829] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 05 14:29:34.885358 2026] [:error] [pid 31775:tid 31821] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Feb 05 14:29:35.814140 2026] [:error] [pid 31775:tid 31827] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Feb 05 14:29:36.262707 2026] [:error] [pid 31775:tid 31808] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Feb 05 14:29:36.732832 2026] [:error] [pid 31775:tid 31826] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Feb 05 14:29:37.184334 2026] [:error] [pid 31775:tid 31824] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Feb 05 14:29:37.696464 2026] [:error] [pid 31775:tid 31816] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Feb 05 14:29:38.159717 2026] [:error] [pid 31775:tid 31817] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Feb 05 14:29:38.614865 2026] [:error] [pid 31775:tid 31805] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Feb 05 14:29:39.119217 2026] [:error] [pid 31775:tid 31806] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Feb 05 14:29:39.566979 2026] [:error] [pid 31775:tid 31827] [client 212.30.36.52:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Feb 05 14:29:46.021006 2026] [:error] [pid 31775:tid 31810] [client 212.30.36.52:20367] [client 212.30.36.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYQ42hNlTj92HTKsJN2zfgAAAQU"]
[Thu Feb 05 14:29:48.321582 2026] [:error] [pid 31739:tid 31743] [client 212.30.36.23:45925] [client 212.30.36.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYQ43AGrHl_5BvMstJJ4xgAAAAI"]
[Thu Feb 05 14:29:50.667374 2026] [:error] [pid 33396:tid 33421] [client 212.30.36.46:24811] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Feb 05 14:29:52.058932 2026] [:error] [pid 33396:tid 33417] [client 212.30.36.46:24811] [client 212.30.36.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aYQ44PTgp_Ev6LiSSgB6PgAAAM4"]
[Thu Feb 05 14:29:54.007330 2026] [:error] [pid 33396:tid 33414] [client 212.30.36.19:37529] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Feb 05 14:29:54.453059 2026] [:error] [pid 33396:tid 33415] [client 212.30.36.19:37529] [client 212.30.36.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYQ44vTgp_Ev6LiSSgB6TgAAAMw"]
[Thu Feb 05 16:10:53.988193 2026] [:error] [pid 31833:tid 31858] [client 193.201.126.129:60320] [client 193.201.126.129] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=text/css"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYRQjRzypZt5yekRAkElxwAAAZc"]
[Thu Feb 05 17:31:30.865753 2026] [:error] [pid 31739:tid 31754] [client 35.226.48.109:59119] [client 35.226.48.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.48.109, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYRjcgGrHl_5BvMstJK16QAAAA0"]
[Thu Feb 05 17:31:30.869258 2026] [:error] [pid 31739:tid 31754] [client 35.226.48.109:59119] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 05 17:31:33.134311 2026] [:error] [pid 31739:tid 31752] [client 35.226.48.109:59119] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYRjdQGrHl_5BvMstJK19QAAAAs"]
[Thu Feb 05 17:31:33.560799 2026] [:error] [pid 31774:tid 31798] [client 35.226.48.109:64228] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYRjdajDlLg1NOhSOXULKgAAAJQ"]
[Thu Feb 05 17:31:34.073909 2026] [:error] [pid 33396:tid 33421] [client 35.226.48.109:56577] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYRjdvTgp_Ev6LiSSgCongAAANI"]
[Thu Feb 05 17:31:34.591009 2026] [:error] [pid 33122:tid 33124] [client 35.226.48.109:64919] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYRjdvW0IebAnFB9KDAFXAAAAEA"]
[Thu Feb 05 17:31:35.034998 2026] [:error] [pid 19213:tid 19217] [client 35.226.48.109:50884] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYRjd17WBXhXgHKWAIA8fgAAAcA"]
[Thu Feb 05 17:31:35.560269 2026] [:error] [pid 33122:tid 33136] [client 35.226.48.109:64281] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYRjd_W0IebAnFB9KDAFXQAAAEw"]
[Thu Feb 05 17:31:36.123922 2026] [:error] [pid 33396:tid 33425] [client 35.226.48.109:54492] [client 35.226.48.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYRjePTgp_Ev6LiSSgConwAAANY"]
[Thu Feb 05 18:37:46.428512 2026] [:error] [pid 19246:tid 19252] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Feb 05 18:37:47.009621 2026] [:error] [pid 19246:tid 19261] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Feb 05 18:37:47.596379 2026] [:error] [pid 19246:tid 19265] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Feb 05 18:37:48.209388 2026] [:error] [pid 19246:tid 19271] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 05 18:37:48.817313 2026] [:error] [pid 19246:tid 19255] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Feb 05 18:37:49.450454 2026] [:error] [pid 19246:tid 19269] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Feb 05 18:37:50.047846 2026] [:error] [pid 19246:tid 19251] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 05 18:37:50.651755 2026] [:error] [pid 19246:tid 19257] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 05 18:37:51.829982 2026] [:error] [pid 19246:tid 19265] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Feb 05 18:37:53.048017 2026] [:error] [pid 19246:tid 19263] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Feb 05 18:37:53.647767 2026] [:error] [pid 19246:tid 19269] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Feb 05 18:37:54.236123 2026] [:error] [pid 19246:tid 19272] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Feb 05 18:37:54.836964 2026] [:error] [pid 19246:tid 19251] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Feb 05 18:37:55.442029 2026] [:error] [pid 19246:tid 19268] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Feb 05 18:37:56.032862 2026] [:error] [pid 19246:tid 19257] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Feb 05 18:37:56.633494 2026] [:error] [pid 19246:tid 19256] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Feb 05 18:37:57.219739 2026] [:error] [pid 19246:tid 19261] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Feb 05 18:37:57.842842 2026] [:error] [pid 19246:tid 19252] [client 45.137.126.105:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Feb 05 18:38:06.204975 2026] [:error] [pid 19246:tid 19267] [client 45.137.126.105:24679] [client 45.137.126.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYRzDnE1Gc0V44f4mCcv7AAAAhA"]
[Thu Feb 05 18:38:09.088006 2026] [:error] [pid 19213:tid 19235] [client 45.137.126.80:55621] [client 45.137.126.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYRzEV7WBXhXgHKWAIBH3gAAAdE"]
[Thu Feb 05 18:38:11.987413 2026] [:error] [pid 33122:tid 33138] [client 45.137.126.54:57279] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Feb 05 18:38:13.786441 2026] [:error] [pid 33122:tid 33131] [client 45.137.126.54:57279] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aYRzFfW0IebAnFB9KDAPuQAAAEc"]
[Thu Feb 05 18:38:16.131298 2026] [:error] [pid 33396:tid 33418] [client 45.137.126.95:30421] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Feb 05 18:38:16.695110 2026] [:error] [pid 33396:tid 33426] [client 45.137.126.95:30421] [client 45.137.126.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYRzGPTgp_Ev6LiSSgC0AgAAANc"]
[Thu Feb 05 18:38:18.454029 2026] [:error] [pid 33122:tid 33133] [client 45.137.126.106:31793] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Feb 05 18:38:21.441663 2026] [:error] [pid 33122:tid 33128] [client 45.137.126.106:31793] [client 45.137.126.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYRzHfW0IebAnFB9KDAPyAAAAEQ"]
[Thu Feb 05 18:38:23.176749 2026] [:error] [pid 31775:tid 31809] [client 45.137.126.81:62129] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYRzHxNlTj92HTKsJN0FaAAAAQQ"]
[Thu Feb 05 18:38:24.380604 2026] [:error] [pid 33396:tid 33414] [client 45.137.126.58:56725] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYRzIPTgp_Ev6LiSSgC0GwAAAMs"]
[Thu Feb 05 18:38:25.564424 2026] [:error] [pid 33396:tid 33421] [client 45.137.126.93:25673] [client 45.137.126.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYRzIfTgp_Ev6LiSSgC0IAAAANI"]
[Thu Feb 05 18:38:26.735056 2026] [:error] [pid 31739:tid 31764] [client 45.137.126.56:30525] [client 45.137.126.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYRzIgGrHl_5BvMstJLDJAAAABc"]
[Thu Feb 05 18:38:27.929804 2026] [:error] [pid 19246:tid 19263] [client 45.137.126.58:24323] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYRzI3E1Gc0V44f4mCcv_QAAAgw"]
[Thu Feb 05 18:38:29.687068 2026] [:error] [pid 31775:tid 31808] [client 45.137.126.94:25399] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYRzJRNlTj92HTKsJN0FiQAAAQM"]
[Thu Feb 05 18:38:30.866904 2026] [:error] [pid 31833:tid 31839] [client 45.137.126.67:54869] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Feb 05 18:38:32.023480 2026] [:error] [pid 31833:tid 31847] [client 45.137.126.67:54869] [client 45.137.126.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aYRzKBzypZt5yekRAkFBoQAAAYw"]
[Thu Feb 05 18:38:36.267196 2026] [:error] [pid 33122:tid 33142] [client 45.137.126.67:38539] [client 45.137.126.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYRzLPW0IebAnFB9KDAP3QAAAFI"]
[Thu Feb 05 18:38:38.070610 2026] [:error] [pid 33122:tid 33134] [client 45.137.126.63:58715] [client 45.137.126.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYRzLvW0IebAnFB9KDAP4gAAAEo"]
[Thu Feb 05 18:38:39.285372 2026] [:error] [pid 31739:tid 31744] [client 45.137.126.83:58957] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Feb 05 18:38:39.876186 2026] [:error] [pid 31739:tid 31753] [client 45.137.126.83:58957] [client 45.137.126.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYRzLwGrHl_5BvMstJLDPQAAAAw"]
[Thu Feb 05 18:38:41.054822 2026] [:error] [pid 31833:tid 31853] [client 45.137.126.106:45557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Feb 05 18:38:42.869006 2026] [:error] [pid 31833:tid 31851] [client 45.137.126.106:45557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Feb 05 18:38:44.602655 2026] [:error] [pid 31833:tid 31856] [client 45.137.126.106:45557] [client 45.137.126.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYRzNBzypZt5yekRAkFBugAAAZU"]
[Thu Feb 05 18:38:45.806860 2026] [:error] [pid 31833:tid 31850] [client 45.137.126.97:61925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Feb 05 18:38:46.407273 2026] [:error] [pid 31833:tid 31844] [client 45.137.126.97:61925] [client 45.137.126.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYRzNhzypZt5yekRAkFBxAAAAYk"]
[Thu Feb 05 18:38:47.543727 2026] [:error] [pid 14577:tid 14581] [client 45.137.126.91:20019] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Feb 05 18:38:48.740032 2026] [:error] [pid 14577:tid 14579] [client 45.137.126.91:20019] [client 45.137.126.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aYRzOJZbKwRdMc_HlgJsBQAAAUA"]
[Thu Feb 05 18:38:50.493593 2026] [:error] [pid 31739:tid 31750] [client 45.137.126.84:57585] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYRzOgGrHl_5BvMstJLDRgAAAAk"]
[Thu Feb 05 18:38:52.307781 2026] [:error] [pid 19246:tid 19263] [client 45.137.126.90:58577] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Feb 05 18:38:52.925283 2026] [:error] [pid 19246:tid 19264] [client 45.137.126.90:58577] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Feb 05 18:38:54.128190 2026] [:error] [pid 19246:tid 19271] [client 45.137.126.90:58577] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYRzPnE1Gc0V44f4mCcwNwAAAhQ"]
[Thu Feb 05 18:38:55.874010 2026] [:error] [pid 19246:tid 19275] [client 45.137.126.89:27975] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYRzP3E1Gc0V44f4mCcwOgAAAhg"]
[Thu Feb 05 18:38:57.617634 2026] [:error] [pid 14577:tid 14581] [client 45.137.126.64:60595] [client 45.137.126.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYRzQZZbKwRdMc_HlgJsEgAAAUI"]
[Thu Feb 05 18:38:58.800799 2026] [:error] [pid 31833:tid 31859] [client 45.137.126.76:59199] [client 45.137.126.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYRzQhzypZt5yekRAkFB4AAAAZg"]
[Thu Feb 05 18:38:59.954316 2026] [:error] [pid 31833:tid 31838] [client 45.137.126.103:49667] [client 45.137.126.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYRzQxzypZt5yekRAkFB5QAAAYM"]
[Thu Feb 05 18:39:02.364501 2026] [:error] [pid 19213:tid 19239] [client 45.137.126.74:46115] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Feb 05 18:39:02.927767 2026] [:error] [pid 19213:tid 19224] [client 45.137.126.74:46115] [client 45.137.126.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aYRzRl7WBXhXgHKWAIBIZwAAAcY"]
[Thu Feb 05 18:39:04.135451 2026] [:error] [pid 33396:tid 33409] [client 45.137.126.79:27459] [client 45.137.126.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aYRzSPTgp_Ev6LiSSgC0aAAAAMY"]
[Thu Feb 05 18:39:05.314912 2026] [:error] [pid 31775:tid 31808] [client 45.137.126.55:41183] [client 45.137.126.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYRzSRNlTj92HTKsJN0GOgAAAQM"]
[Thu Feb 05 18:39:07.705107 2026] [:error] [pid 31739:tid 31764] [client 45.137.126.77:20709] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Feb 05 18:39:08.876201 2026] [:error] [pid 31739:tid 31749] [client 45.137.126.77:20709] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Feb 05 18:39:11.226825 2026] [:error] [pid 31739:tid 31757] [client 45.137.126.77:20709] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aYRzTwGrHl_5BvMstJLDcAAAABA"]
[Thu Feb 05 18:39:14.227732 2026] [:error] [pid 31774:tid 31802] [client 45.137.126.71:64849] [client 45.137.126.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.71, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYRzUqjDlLg1NOhSOXUX_wAAAJg"]
[Thu Feb 05 18:39:14.848290 2026] [:error] [pid 31774:tid 31796] [client 45.137.126.71:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Feb 05 18:39:17.740435 2026] [:error] [pid 31774:tid 31795] [client 45.137.126.71:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Feb 05 18:39:18.344080 2026] [:error] [pid 31774:tid 31783] [client 45.137.126.71:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Feb 05 18:39:21.239327 2026] [:error] [pid 31774:tid 31785] [client 45.137.126.71:64849] [client 45.137.126.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYRzWajDlLg1NOhSOXUYFgAAAIc"]
[Thu Feb 05 18:39:23.027451 2026] [:error] [pid 19213:tid 19222] [client 45.137.126.92:28869] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Feb 05 18:39:23.589659 2026] [:error] [pid 19213:tid 19217] [client 45.137.126.92:28869] [client 45.137.126.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.92, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYRzW17WBXhXgHKWAIBIjwAAAcA"]
[Thu Feb 05 18:39:24.764576 2026] [:error] [pid 19213:tid 19240] [client 45.137.126.92:28869] [client 45.137.126.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aYRzXF7WBXhXgHKWAIBIkgAAAdY"]
[Thu Feb 05 18:39:28.435663 2026] [:error] [pid 19213:tid 19232] [client 45.137.126.99:32351] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Feb 05 18:39:29.626637 2026] [:error] [pid 19213:tid 19234] [client 45.137.126.99:32351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Feb 05 18:39:32.883651 2026] [:error] [pid 19213:tid 19218] [client 45.137.126.99:32351] [client 45.137.126.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYRzZF7WBXhXgHKWAIBItwAAAcE"]
[Thu Feb 05 18:39:34.236953 2026] [:error] [pid 14577:tid 14601] [client 45.137.126.104:36527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Feb 05 18:39:36.178591 2026] [:error] [pid 14577:tid 14592] [client 45.137.126.104:36527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Feb 05 18:39:37.377818 2026] [:error] [pid 14577:tid 14599] [client 45.137.126.104:36527] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Feb 05 18:39:38.572247 2026] [:error] [pid 14577:tid 14581] [client 45.137.126.104:36527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Feb 05 18:39:39.137729 2026] [:error] [pid 14577:tid 14592] [client 45.137.126.104:36527] [client 45.137.126.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYRza5ZbKwRdMc_HlgJsggAAAU0"]
[Thu Feb 05 18:39:40.373294 2026] [:error] [pid 33396:tid 33419] [client 45.137.126.72:53071] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Feb 05 18:39:40.999816 2026] [:error] [pid 33396:tid 33425] [client 45.137.126.72:53071] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Feb 05 18:39:41.565482 2026] [:error] [pid 33396:tid 33406] [client 45.137.126.72:53071] [client 45.137.126.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYRzbfTgp_Ev6LiSSgC0pQAAAMM"]
[Thu Feb 05 18:39:43.329467 2026] [:error] [pid 19246:tid 19274] [client 45.137.126.58:22743] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Feb 05 18:39:44.522380 2026] [:error] [pid 19246:tid 19261] [client 45.137.126.58:22743] [client 45.137.126.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.58, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aYRzcHE1Gc0V44f4mCcwxQAAAgo"]
[Thu Feb 05 18:39:45.148637 2026] [:error] [pid 19246:tid 19269] [client 45.137.126.58:22743] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYRzcXE1Gc0V44f4mCcwyAAAAhI"]
[Thu Feb 05 18:39:52.969166 2026] [:error] [pid 33396:tid 33412] [client 45.137.126.88:54709] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Feb 05 18:39:56.830952 2026] [:error] [pid 33396:tid 33411] [client 45.137.126.88:54709] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Feb 05 18:39:57.425265 2026] [:error] [pid 33396:tid 33403] [client 45.137.126.88:54709] [client 45.137.126.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYRzffTgp_Ev6LiSSgC03gAAAMA"]
[Thu Feb 05 18:39:58.701995 2026] [:error] [pid 19213:tid 19242] [client 45.137.126.61:39291] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Feb 05 18:40:00.454762 2026] [:error] [pid 19213:tid 19223] [client 45.137.126.61:39291] [client 45.137.126.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.61, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYRzgF7WBXhXgHKWAIBI-AAAAcU"]
[Thu Feb 05 18:40:01.080421 2026] [:error] [pid 19213:tid 19236] [client 45.137.126.61:39291] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Feb 05 18:40:01.675109 2026] [:error] [pid 19213:tid 19238] [client 45.137.126.61:39291] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Feb 05 18:40:02.262253 2026] [:error] [pid 19213:tid 19220] [client 45.137.126.61:39291] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Feb 05 18:40:02.829972 2026] [:error] [pid 19213:tid 19217] [client 45.137.126.61:39291] [client 45.137.126.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aYRzgl7WBXhXgHKWAIBJAwAAAcA"]
[Thu Feb 05 18:40:04.048725 2026] [:error] [pid 33396:tid 33415] [client 45.137.126.80:20583] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Feb 05 18:40:04.625681 2026] [:error] [pid 33396:tid 33426] [client 45.137.126.80:20583] [client 45.137.126.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aYRzhPTgp_Ev6LiSSgC08AAAANc"]
[Thu Feb 05 18:40:06.460547 2026] [:error] [pid 33122:tid 33124] [client 45.137.126.101:37603] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Feb 05 18:40:07.023641 2026] [:error] [pid 33122:tid 33127] [client 45.137.126.101:37603] [client 45.137.126.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYRzh_W0IebAnFB9KDAQdAAAAEM"]
[Thu Feb 05 18:40:09.458882 2026] [:error] [pid 14577:tid 14601] [client 45.137.126.98:33731] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Feb 05 18:40:10.072964 2026] [:error] [pid 14577:tid 14598] [client 45.137.126.98:33731] [client 45.137.126.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYRzipZbKwRdMc_HlgJtGQAAAVM"]
[Thu Feb 05 18:40:11.251176 2026] [:error] [pid 31775:tid 31820] [client 45.137.126.100:49587] [client 45.137.126.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYRzixNlTj92HTKsJN0HNgAAAQ8"]
[Thu Feb 05 18:40:12.411546 2026] [:error] [pid 19246:tid 19268] [client 45.137.126.85:27173] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Feb 05 18:40:13.020794 2026] [:error] [pid 19246:tid 19271] [client 45.137.126.85:27173] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Feb 05 18:40:15.385374 2026] [:error] [pid 19246:tid 19267] [client 45.137.126.85:27173] [client 45.137.126.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYRzj3E1Gc0V44f4mCcxFwAAAhA"]
[Thu Feb 05 18:40:17.170985 2026] [:error] [pid 14577:tid 14581] [client 45.137.126.77:58319] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYRzkZZbKwRdMc_HlgJtRAAAAUI"]
[Thu Feb 05 18:40:20.107433 2026] [:error] [pid 19213:tid 19239] [client 45.137.126.94:46867] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aYRzlF7WBXhXgHKWAIBJGQAAAdU"]
[Thu Feb 05 18:40:21.296608 2026] [:error] [pid 33396:tid 33423] [client 45.137.126.59:60419] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Feb 05 18:40:22.492425 2026] [:error] [pid 33396:tid 33415] [client 45.137.126.59:60419] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Feb 05 18:40:23.078784 2026] [:error] [pid 33396:tid 33416] [client 45.137.126.59:60419] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYRzl_Tgp_Ev6LiSSgC1KAAAAM0"]
[Thu Feb 05 18:40:24.277518 2026] [:error] [pid 19246:tid 19255] [client 45.137.126.58:34169] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 05 18:40:25.461642 2026] [:error] [pid 19246:tid 19263] [client 45.137.126.58:34169] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aYRzmXE1Gc0V44f4mCcxLQAAAgw"]
[Thu Feb 05 18:40:28.443595 2026] [:error] [pid 14577:tid 14583] [client 45.137.126.103:51617] [client 45.137.126.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYRznJZbKwRdMc_HlgJtXgAAAUQ"]
[Thu Feb 05 18:40:30.250894 2026] [:error] [pid 31739:tid 31744] [client 45.137.126.102:40469] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Feb 05 18:40:32.150324 2026] [:error] [pid 31739:tid 31759] [client 45.137.126.102:40469] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Feb 05 18:40:33.352034 2026] [:error] [pid 31739:tid 31764] [client 45.137.126.102:40469] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Feb 05 18:40:33.942627 2026] [:error] [pid 31739:tid 31745] [client 45.137.126.102:40469] [client 45.137.126.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYRzoQGrHl_5BvMstJLEHQAAAAQ"]
[Thu Feb 05 18:40:35.089668 2026] [:error] [pid 19213:tid 19241] [client 45.137.126.90:64139] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aYRzo17WBXhXgHKWAIBJPgAAAdc"]
[Thu Feb 05 18:40:36.278729 2026] [:error] [pid 31833:tid 31852] [client 45.137.126.90:24367] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYRzpBzypZt5yekRAkFCtQAAAZE"]
[Thu Feb 05 18:40:37.445503 2026] [:error] [pid 31775:tid 31826] [client 45.137.126.84:39781] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYRzpRNlTj92HTKsJN0HkAAAARU"]
[Thu Feb 05 18:40:38.637657 2026] [:error] [pid 31774:tid 31778] [client 45.137.126.66:31349] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Feb 05 18:40:39.264825 2026] [:error] [pid 31774:tid 31802] [client 45.137.126.66:31349] [client 45.137.126.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYRzp6jDlLg1NOhSOXUYxwAAAJg"]
[Thu Feb 05 18:40:40.431041 2026] [:error] [pid 19213:tid 19231] [client 45.137.126.64:58757] [client 45.137.126.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYRzqF7WBXhXgHKWAIBJWAAAAc0"]
[Thu Feb 05 18:40:41.599308 2026] [:error] [pid 33122:tid 33125] [client 45.137.126.88:51815] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Feb 05 18:40:42.808538 2026] [:error] [pid 33122:tid 33127] [client 45.137.126.88:51815] [client 45.137.126.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aYRzqvW0IebAnFB9KDAQ1AAAAEM"]
[Thu Feb 05 18:40:44.016489 2026] [:error] [pid 19246:tid 19270] [client 45.137.126.89:25845] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYRzrHE1Gc0V44f4mCcxTwAAAhM"]
[Thu Feb 05 18:40:45.187214 2026] [:error] [pid 33396:tid 33423] [client 45.137.126.103:33093] [client 45.137.126.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYRzrfTgp_Ev6LiSSgC1YwAAANQ"]
[Thu Feb 05 18:40:46.381223 2026] [:error] [pid 33396:tid 33405] [client 45.137.126.90:63685] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYRzrvTgp_Ev6LiSSgC1ZwAAAMI"]
[Thu Feb 05 18:40:48.142705 2026] [:error] [pid 31774:tid 31788] [client 45.137.126.82:56405] [client 45.137.126.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYRzsKjDlLg1NOhSOXUY5AAAAIo"]
[Thu Feb 05 18:40:52.102273 2026] [:error] [pid 19213:tid 19221] [client 45.137.126.61:24045] [client 45.137.126.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYRztF7WBXhXgHKWAIBJjAAAAcM"]
[Thu Feb 05 18:40:53.288797 2026] [:error] [pid 31833:tid 31844] [client 45.137.126.95:47089] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Feb 05 18:40:55.111703 2026] [:error] [pid 31833:tid 31848] [client 45.137.126.95:47089] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Feb 05 18:40:55.707488 2026] [:error] [pid 31833:tid 31835] [client 45.137.126.95:47089] [client 45.137.126.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYRztxzypZt5yekRAkFC9gAAAYA"]
[Thu Feb 05 18:40:57.505920 2026] [:error] [pid 31774:tid 31800] [client 45.137.126.101:37507] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Feb 05 18:40:58.140331 2026] [:error] [pid 31774:tid 31801] [client 45.137.126.101:37507] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Feb 05 18:41:01.153185 2026] [:error] [pid 31774:tid 31798] [client 45.137.126.101:37507] [client 45.137.126.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aYRzvajDlLg1NOhSOXUZFAAAAJQ"]
[Thu Feb 05 18:41:04.136504 2026] [:error] [pid 33122:tid 33126] [client 45.137.126.88:43513] [client 45.137.126.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYRzwPW0IebAnFB9KDARGwAAAEI"]
[Thu Feb 05 18:41:05.266649 2026] [:error] [pid 14577:tid 14593] [client 45.137.126.59:46311] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYRzwZZbKwRdMc_HlgJt2QAAAU4"]
[Thu Feb 05 18:41:08.816560 2026] [:error] [pid 33396:tid 33424] [client 45.137.126.76:53997] [client 45.137.126.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYRzxPTgp_Ev6LiSSgC1pwAAANU"]
[Thu Feb 05 18:41:11.194969 2026] [:error] [pid 19246:tid 19256] [client 45.137.126.93:29569] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Feb 05 18:41:11.761209 2026] [:error] [pid 19246:tid 19269] [client 45.137.126.93:29569] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Feb 05 18:41:12.372195 2026] [:error] [pid 19246:tid 19258] [client 45.137.126.93:29569] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Feb 05 18:41:12.944645 2026] [:error] [pid 19246:tid 19271] [client 45.137.126.93:29569] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Feb 05 18:41:15.895708 2026] [:error] [pid 19246:tid 19272] [client 45.137.126.93:29569] [client 45.137.126.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYRzy3E1Gc0V44f4mCcxvwAAAhU"]
[Thu Feb 05 18:41:17.061065 2026] [:error] [pid 19213:tid 19234] [client 45.137.126.106:48617] [client 45.137.126.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYRzzV7WBXhXgHKWAIBJywAAAdA"]
[Thu Feb 05 18:41:18.233725 2026] [:error] [pid 31774:tid 31789] [client 45.137.126.58:40949] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYRzzqjDlLg1NOhSOXUZOgAAAIs"]
[Thu Feb 05 18:41:19.460971 2026] [:error] [pid 31775:tid 31805] [client 45.137.126.62:44853] [client 45.137.126.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYRzzxNlTj92HTKsJN0ILwAAAQA"]
[Thu Feb 05 18:41:20.635704 2026] [:error] [pid 31833:tid 31849] [client 45.137.126.86:48905] [client 45.137.126.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYRz0BzypZt5yekRAkFDSAAAAY4"]
[Thu Feb 05 18:41:22.875778 2026] [:error] [pid 31774:tid 31789] [client 45.137.126.97:56539] [client 45.137.126.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYRz0qjDlLg1NOhSOXUZTgAAAIs"]
[Thu Feb 05 18:41:24.638690 2026] [:error] [pid 14577:tid 14590] [client 45.137.126.90:40127] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYRz1JZbKwRdMc_HlgJuDwAAAUs"]
[Thu Feb 05 18:41:25.816024 2026] [:error] [pid 33122:tid 33132] [client 45.137.126.58:22725] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYRz1fW0IebAnFB9KDARVwAAAEg"]
[Thu Feb 05 18:41:27.035864 2026] [:error] [pid 31774:tid 31786] [client 45.137.126.81:45483] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYRz16jDlLg1NOhSOXUZXwAAAIg"]
[Thu Feb 05 18:41:28.221766 2026] [:error] [pid 14577:tid 14597] [client 45.137.126.77:31317] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYRz2JZbKwRdMc_HlgJuJgAAAVI"]
[Thu Feb 05 18:41:30.636456 2026] [:error] [pid 31739:tid 31747] [client 45.137.126.68:39067] [client 45.137.126.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYRz2gGrHl_5BvMstJLEoQAAAAY"]
[Thu Feb 05 18:41:32.497786 2026] [:error] [pid 31775:tid 31817] [client 45.137.126.85:28045] [client 45.137.126.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYRz3BNlTj92HTKsJN0IfQAAAQw"]
[Thu Feb 05 18:41:33.634820 2026] [:error] [pid 31775:tid 31806] [client 45.137.126.74:62385] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Feb 05 18:41:34.799171 2026] [:error] [pid 31775:tid 31822] [client 45.137.126.74:62385] [client 45.137.126.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aYRz3hNlTj92HTKsJN0IiQAAARE"]
[Thu Feb 05 18:41:37.108964 2026] [:error] [pid 31774:tid 31790] [client 45.137.126.86:58187] [client 45.137.126.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYRz4ajDlLg1NOhSOXUZjwAAAIw"]
[Thu Feb 05 18:41:39.480615 2026] [:error] [pid 31775:tid 31807] [client 45.137.126.101:26021] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Feb 05 18:41:40.072184 2026] [:error] [pid 31775:tid 31809] [client 45.137.126.101:26021] [client 45.137.126.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aYRz5BNlTj92HTKsJN0IvwAAAQQ"]
[Thu Feb 05 18:41:41.904957 2026] [:error] [pid 19213:tid 19233] [client 45.137.126.54:43573] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Feb 05 18:41:42.493216 2026] [:error] [pid 19213:tid 19231] [client 45.137.126.54:43573] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Feb 05 18:41:43.079299 2026] [:error] [pid 19213:tid 19225] [client 45.137.126.54:43573] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Feb 05 18:41:43.693715 2026] [:error] [pid 19213:tid 19236] [client 45.137.126.54:43573] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYRz517WBXhXgHKWAIBKGAAAAdI"]
[Thu Feb 05 18:41:44.855269 2026] [:error] [pid 14577:tid 14583] [client 45.137.126.99:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Feb 05 18:41:45.467609 2026] [:error] [pid 14577:tid 14603] [client 45.137.126.99:31981] [client 45.137.126.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aYRz6ZZbKwRdMc_HlgJuZQAAAVg"]
[Thu Feb 05 18:41:47.842684 2026] [:error] [pid 31774:tid 31797] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Feb 05 18:41:48.442233 2026] [:error] [pid 31774:tid 31790] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 05 18:41:49.023898 2026] [:error] [pid 31774:tid 31780] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Feb 05 18:41:51.997917 2026] [:error] [pid 31774:tid 31778] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Feb 05 18:41:52.631459 2026] [:error] [pid 31774:tid 31797] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Feb 05 18:41:53.813161 2026] [:error] [pid 31774:tid 31790] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Feb 05 18:41:55.571716 2026] [:error] [pid 31774:tid 31796] [client 45.137.126.61:51543] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Feb 05 18:41:56.173944 2026] [:error] [pid 31774:tid 31793] [client 45.137.126.61:51543] [client 45.137.126.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aYRz9KjDlLg1NOhSOXUZzwAAAI8"]
[Thu Feb 05 18:41:57.326698 2026] [:error] [pid 19213:tid 19242] [client 45.137.126.96:59077] [client 45.137.126.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYRz9V7WBXhXgHKWAIBKQwAAAdg"]
[Thu Feb 05 18:41:58.501820 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.72:28593] [client 45.137.126.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.72, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYRz9hNlTj92HTKsJN0JdgAAARA"]
[Thu Feb 05 18:41:58.505728 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.72:28593] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Feb 05 18:41:59.091904 2026] [:error] [pid 31775:tid 31805] [client 45.137.126.72:28593] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Feb 05 18:41:59.718958 2026] [:error] [pid 31775:tid 31829] [client 45.137.126.72:28593] [client 45.137.126.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aYRz9xNlTj92HTKsJN0JfQAAARg"]
[Thu Feb 05 18:42:01.467260 2026] [:error] [pid 14577:tid 14602] [client 45.137.126.92:51509] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Feb 05 18:42:02.093713 2026] [:error] [pid 14577:tid 14594] [client 45.137.126.92:51509] [client 45.137.126.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYRz-pZbKwRdMc_HlgJuqQAAAU8"]
[Thu Feb 05 18:42:03.240057 2026] [:error] [pid 31775:tid 31819] [client 45.137.126.89:35445] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aYRz-xNlTj92HTKsJN0JiwAAAQ4"]
[Thu Feb 05 18:42:06.778165 2026] [:error] [pid 33396:tid 33403] [client 45.137.126.60:34113] [client 45.137.126.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYRz_vTgp_Ev6LiSSgC2kwAAAMA"]
[Thu Feb 05 18:42:07.964706 2026] [:error] [pid 19246:tid 19265] [client 45.137.126.73:52159] [client 45.137.126.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aYRz_3E1Gc0V44f4mCcy4gAAAg4"]
[Thu Feb 05 18:42:10.943202 2026] [:error] [pid 14577:tid 14580] [client 45.137.126.90:62271] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Feb 05 18:42:12.140692 2026] [:error] [pid 14577:tid 14589] [client 45.137.126.90:62271] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aYR0BJZbKwRdMc_HlgJu1QAAAUo"]
[Thu Feb 05 18:42:14.491225 2026] [:error] [pid 19246:tid 19264] [client 45.137.126.75:54485] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Feb 05 18:42:15.633161 2026] [:error] [pid 19246:tid 19260] [client 45.137.126.75:54485] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aYR0B3E1Gc0V44f4mCcy-gAAAgk"]
[Thu Feb 05 18:42:16.797511 2026] [:error] [pid 19213:tid 19228] [client 45.137.126.84:41607] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aYR0CF7WBXhXgHKWAIBKcAAAAco"]
[Thu Feb 05 18:42:18.544730 2026] [:error] [pid 33122:tid 33144] [client 45.137.126.64:51699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Feb 05 18:42:19.107727 2026] [:error] [pid 33122:tid 33148] [client 45.137.126.64:51699] [client 45.137.126.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aYR0C_W0IebAnFB9KDAR1wAAAFg"]
[Thu Feb 05 18:42:20.356934 2026] [:error] [pid 33122:tid 33135] [client 45.137.126.67:32745] [client 45.137.126.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYR0DPW0IebAnFB9KDAR2wAAAEs"]
[Thu Feb 05 18:42:22.688215 2026] [:error] [pid 19246:tid 19254] [client 45.137.126.64:33471] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Feb 05 18:42:23.262669 2026] [:error] [pid 19246:tid 19255] [client 45.137.126.64:33471] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Feb 05 18:42:24.422804 2026] [:error] [pid 19246:tid 19262] [client 45.137.126.64:33471] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Feb 05 18:42:26.660281 2026] [:error] [pid 19246:tid 19268] [client 45.137.126.64:33471] [client 45.137.126.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aYR0EnE1Gc0V44f4mCczEQAAAhE"]
[Thu Feb 05 18:42:27.804924 2026] [:error] [pid 14577:tid 14592] [client 45.137.126.87:56157] [client 45.137.126.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aYR0E5ZbKwRdMc_HlgJvAgAAAU0"]
[Thu Feb 05 18:42:30.711975 2026] [:error] [pid 33396:tid 33418] [client 45.137.126.97:57063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Feb 05 18:42:31.330218 2026] [:error] [pid 33396:tid 33414] [client 45.137.126.97:57063] [client 45.137.126.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aYR0F_Tgp_Ev6LiSSgC27QAAAMs"]
[Thu Feb 05 18:42:32.492474 2026] [:error] [pid 33122:tid 33132] [client 45.137.126.106:24033] [client 45.137.126.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYR0GPW0IebAnFB9KDAR_wAAAEg"]
[Thu Feb 05 18:42:33.682430 2026] [:error] [pid 33122:tid 33146] [client 45.137.126.95:27003] [client 45.137.126.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYR0GfW0IebAnFB9KDASBgAAAFY"]
[Thu Feb 05 18:42:37.268238 2026] [:error] [pid 19246:tid 19254] [client 45.137.126.102:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Feb 05 18:42:37.851935 2026] [:error] [pid 19246:tid 19266] [client 45.137.126.102:57595] [client 45.137.126.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aYR0HXE1Gc0V44f4mCczLgAAAg8"]
[Thu Feb 05 18:42:39.635529 2026] [:error] [pid 33396:tid 33419] [client 45.137.126.90:26173] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYR0H_Tgp_Ev6LiSSgC3GwAAANA"]
[Thu Feb 05 18:42:40.828730 2026] [:error] [pid 31774:tid 31784] [client 45.137.126.85:64281] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Feb 05 18:42:41.396982 2026] [:error] [pid 31774:tid 31787] [client 45.137.126.85:64281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Feb 05 18:42:42.578469 2026] [:error] [pid 31774:tid 31796] [client 45.137.126.85:64281] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Feb 05 18:42:44.991128 2026] [:error] [pid 31774:tid 31793] [client 45.137.126.85:64281] [client 45.137.126.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.85, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aYR0JKjDlLg1NOhSOXUadAAAAI8"]
[Thu Feb 05 18:42:46.205692 2026] [:error] [pid 31774:tid 31800] [client 45.137.126.85:64281] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Feb 05 18:42:46.827969 2026] [:error] [pid 31774:tid 31796] [client 45.137.126.85:64281] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Feb 05 18:42:47.454332 2026] [:error] [pid 31774:tid 31778] [client 45.137.126.85:64281] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Feb 05 18:42:48.621709 2026] [:error] [pid 31774:tid 31782] [client 45.137.126.85:64281] [client 45.137.126.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aYR0KKjDlLg1NOhSOXUaiAAAAIQ"]
[Thu Feb 05 18:42:49.750652 2026] [:error] [pid 33122:tid 33140] [client 45.137.126.76:45459] [client 45.137.126.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.76, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aYR0KfW0IebAnFB9KDASNQAAAFA"]
[Thu Feb 05 18:42:51.545595 2026] [:error] [pid 33122:tid 33143] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Feb 05 18:42:52.127671 2026] [:error] [pid 33122:tid 33135] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Feb 05 18:42:53.348732 2026] [:error] [pid 33122:tid 33139] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Feb 05 18:42:54.531060 2026] [:error] [pid 33122:tid 33142] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Feb 05 18:42:56.333482 2026] [:error] [pid 33122:tid 33136] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Feb 05 18:43:00.544353 2026] [:error] [pid 33122:tid 33145] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Feb 05 18:43:01.135412 2026] [:error] [pid 33122:tid 33137] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Feb 05 18:43:04.124914 2026] [:error] [pid 33122:tid 33141] [client 45.137.126.76:45459] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Feb 05 18:43:05.289723 2026] [:error] [pid 33122:tid 33134] [client 45.137.126.76:45459] [client 45.137.126.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aYR0OfW0IebAnFB9KDASeQAAAEo"]
[Thu Feb 05 18:43:07.679966 2026] [:error] [pid 31775:tid 31826] [client 45.137.126.56:54293] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Feb 05 18:43:08.294855 2026] [:error] [pid 31775:tid 31818] [client 45.137.126.56:54293] [client 45.137.126.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYR0PBNlTj92HTKsJN0KawAAAQ0"]
[Thu Feb 05 18:43:10.092876 2026] [:error] [pid 33396:tid 33405] [client 45.137.126.97:43355] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Feb 05 18:43:10.675871 2026] [:error] [pid 33396:tid 33416] [client 45.137.126.97:43355] [client 45.137.126.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aYR0PvTgp_Ev6LiSSgC3XAAAAM0"]
[Thu Feb 05 18:43:13.017048 2026] [:error] [pid 19213:tid 19230] [client 45.137.126.87:60001] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Feb 05 18:43:14.204331 2026] [:error] [pid 19213:tid 19227] [client 45.137.126.87:60001] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Feb 05 18:43:15.378138 2026] [:error] [pid 19213:tid 19226] [client 45.137.126.87:60001] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Feb 05 18:43:15.979687 2026] [:error] [pid 19213:tid 19230] [client 45.137.126.87:60001] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Feb 05 18:43:17.172236 2026] [:error] [pid 19213:tid 19227] [client 45.137.126.87:60001] [client 45.137.126.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYR0RV7WBXhXgHKWAIBLGQAAAck"]
[Thu Feb 05 18:43:18.356650 2026] [:error] [pid 19246:tid 19261] [client 45.137.126.76:23293] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Feb 05 18:43:18.997943 2026] [:error] [pid 19246:tid 19264] [client 45.137.126.76:23293] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Feb 05 18:43:19.565637 2026] [:error] [pid 19246:tid 19257] [client 45.137.126.76:23293] [client 45.137.126.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYR0R3E1Gc0V44f4mCcznQAAAgY"]
[Thu Feb 05 18:43:21.430123 2026] [:error] [pid 31775:tid 31810] [client 45.137.126.54:29347] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aYR0SRNlTj92HTKsJN0KoQAAAQU"]
[Thu Feb 05 18:43:23.149907 2026] [:error] [pid 31775:tid 31827] [client 45.137.126.74:32155] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Feb 05 18:43:24.916379 2026] [:error] [pid 31775:tid 31807] [client 45.137.126.74:32155] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Feb 05 18:43:25.546715 2026] [:error] [pid 31775:tid 31806] [client 45.137.126.74:32155] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Feb 05 18:43:26.123983 2026] [:error] [pid 31775:tid 31815] [client 45.137.126.74:32155] [client 45.137.126.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aYR0ThNlTj92HTKsJN0KtgAAAQo"]
[Thu Feb 05 18:43:28.592471 2026] [:error] [pid 14577:tid 14597] [client 45.137.126.81:25297] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aYR0UJZbKwRdMc_HlgJwLgAAAVI"]
[Thu Feb 05 18:43:32.837987 2026] [:error] [pid 31833:tid 31835] [client 45.137.126.81:53927] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Feb 05 18:43:34.021716 2026] [:error] [pid 31833:tid 31848] [client 45.137.126.81:53927] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aYR0VhzypZt5yekRAkFEuwAAAY0"]
[Thu Feb 05 18:43:35.876638 2026] [:error] [pid 31774:tid 31792] [client 45.137.126.81:44963] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aYR0V6jDlLg1NOhSOXUbBwAAAI4"]
[Thu Feb 05 18:43:37.591735 2026] [:error] [pid 31775:tid 31828] [client 45.137.126.54:61403] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 05 18:43:38.158099 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.54:61403] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Feb 05 18:43:38.746771 2026] [:error] [pid 31775:tid 31811] [client 45.137.126.54:61403] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aYR0WhNlTj92HTKsJN0K8AAAAQY"]
[Thu Feb 05 18:43:40.474433 2026] [:error] [pid 31775:tid 31826] [client 45.137.126.81:42019] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Feb 05 18:43:41.065722 2026] [:error] [pid 31775:tid 31824] [client 45.137.126.81:42019] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Feb 05 18:43:42.303976 2026] [:error] [pid 31775:tid 31811] [client 45.137.126.81:42019] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Feb 05 18:43:46.379798 2026] [:error] [pid 31775:tid 31824] [client 45.137.126.81:42019] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aYR0YhNlTj92HTKsJN0LEAAAARM"]
[Thu Feb 05 18:43:47.534520 2026] [:error] [pid 31774:tid 31778] [client 45.137.126.84:26739] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Feb 05 18:43:49.371012 2026] [:error] [pid 31774:tid 31791] [client 45.137.126.84:26739] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYR0ZajDlLg1NOhSOXUbNQAAAI0"]
[Thu Feb 05 18:43:51.103703 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.80:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Feb 05 18:43:52.880269 2026] [:error] [pid 31775:tid 31812] [client 45.137.126.80:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Feb 05 18:43:53.492158 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.80:32461] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Feb 05 18:43:54.696516 2026] [:error] [pid 31775:tid 31819] [client 45.137.126.80:32461] [client 45.137.126.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.80, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aYR0ahNlTj92HTKsJN0LPQAAAQ4"]
[Thu Feb 05 18:43:57.695809 2026] [:error] [pid 31775:tid 31806] [client 45.137.126.80:32461] [client 45.137.126.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aYR0bRNlTj92HTKsJN0LTAAAAQE"]
[Thu Feb 05 18:43:58.938490 2026] [:error] [pid 14577:tid 14582] [client 45.137.126.89:24071] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Feb 05 18:44:00.063512 2026] [:error] [pid 14577:tid 14582] [client 45.137.126.89:24071] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aYR0cJZbKwRdMc_HlgJwtAAAAUM"]
[Thu Feb 05 18:44:01.264649 2026] [:error] [pid 31774:tid 31802] [client 45.137.126.65:31373] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Feb 05 18:44:02.439733 2026] [:error] [pid 31774:tid 31791] [client 45.137.126.65:31373] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Feb 05 18:44:03.614978 2026] [:error] [pid 31774:tid 31787] [client 45.137.126.65:31373] [client 45.137.126.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aYR0c6jDlLg1NOhSOXUbUgAAAIk"]
[Thu Feb 05 18:44:05.405404 2026] [:error] [pid 31774:tid 31780] [client 45.137.126.74:45949] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Feb 05 18:44:05.978473 2026] [:error] [pid 31774:tid 31782] [client 45.137.126.74:45949] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Feb 05 18:44:07.207673 2026] [:error] [pid 31774:tid 31800] [client 45.137.126.74:45949] [client 45.137.126.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aYR0d6jDlLg1NOhSOXUbWwAAAJY"]
[Thu Feb 05 18:44:09.051590 2026] [:error] [pid 31833:tid 31840] [client 45.137.126.104:53327] [client 45.137.126.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYR0eRzypZt5yekRAkFFAQAAAYU"]
[Thu Feb 05 18:44:10.226378 2026] [:error] [pid 14577:tid 14597] [client 45.137.126.88:39123] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Feb 05 18:44:10.791897 2026] [:error] [pid 14577:tid 14580] [client 45.137.126.88:39123] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Feb 05 18:44:11.964383 2026] [:error] [pid 14577:tid 14598] [client 45.137.126.88:39123] [client 45.137.126.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aYR0e5ZbKwRdMc_HlgJxJgAAAVM"]
[Thu Feb 05 18:44:13.155336 2026] [:error] [pid 31775:tid 31829] [client 45.137.126.97:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Feb 05 18:44:14.350739 2026] [:error] [pid 31775:tid 31818] [client 45.137.126.97:47091] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Feb 05 18:44:14.921684 2026] [:error] [pid 31775:tid 31823] [client 45.137.126.97:47091] [client 45.137.126.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aYR0fhNlTj92HTKsJN0LowAAARI"]
[Thu Feb 05 18:44:16.733830 2026] [:error] [pid 19246:tid 19255] [client 45.137.126.72:36985] [client 45.137.126.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aYR0gHE1Gc0V44f4mCc0IQAAAgQ"]
[Thu Feb 05 18:44:17.922647 2026] [:error] [pid 31774:tid 31791] [client 45.137.126.83:29955] [client 45.137.126.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aYR0gajDlLg1NOhSOXUbhQAAAI0"]
[Thu Feb 05 18:44:19.124567 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.66:53041] [client 45.137.126.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aYR0gxNlTj92HTKsJN0LtwAAARA"]
[Thu Feb 05 18:44:20.353677 2026] [:error] [pid 14577:tid 14579] [client 45.137.126.60:59949] [client 45.137.126.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aYR0hJZbKwRdMc_HlgJxSAAAAUA"]
[Thu Feb 05 18:44:21.571684 2026] [:error] [pid 19246:tid 19252] [client 45.137.126.77:54707] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aYR0hXE1Gc0V44f4mCc0LAAAAgE"]
[Thu Feb 05 18:44:22.796085 2026] [:error] [pid 31774:tid 31794] [client 45.137.126.98:22171] [client 45.137.126.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aYR0hqjDlLg1NOhSOXUbmAAAAJA"]
[Thu Feb 05 18:44:25.126934 2026] [:error] [pid 31775:tid 31810] [client 45.137.126.82:38595] [client 45.137.126.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aYR0iRNlTj92HTKsJN0LzAAAAQU"]
[Thu Feb 05 18:44:26.291756 2026] [:error] [pid 31775:tid 31820] [client 45.137.126.55:63267] [client 45.137.126.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aYR0ihNlTj92HTKsJN0L0gAAAQ8"]
[Thu Feb 05 18:44:27.444100 2026] [:error] [pid 33122:tid 33146] [client 45.137.126.55:54435] [client 45.137.126.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aYR0i_W0IebAnFB9KDATfAAAAFY"]
[Thu Feb 05 18:44:29.246089 2026] [:error] [pid 14577:tid 14594] [client 45.137.126.66:44293] [client 45.137.126.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aYR0jZZbKwRdMc_HlgJxjwAAAU8"]
[Thu Feb 05 18:44:31.722822 2026] [:error] [pid 19213:tid 19230] [client 45.137.126.71:34701] [client 45.137.126.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aYR0j17WBXhXgHKWAIBMSwAAAcw"]
[Thu Feb 05 18:44:32.888932 2026] [:error] [pid 31833:tid 31839] [client 45.137.126.69:38219] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Feb 05 18:44:35.254667 2026] [:error] [pid 31833:tid 31835] [client 45.137.126.69:38219] [client 45.137.126.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.69, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYR0kxzypZt5yekRAkFFSwAAAYA"]
[Thu Feb 05 18:44:38.797727 2026] [:error] [pid 31833:tid 31842] [client 45.137.126.69:38219] [client 45.137.126.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aYR0lhzypZt5yekRAkFFWgAAAYc"]
[Thu Feb 05 18:44:40.048726 2026] [:error] [pid 14577:tid 14593] [client 45.137.126.87:45569] [client 45.137.126.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aYR0mJZbKwRdMc_HlgJx0wAAAU4"]
[Thu Feb 05 18:44:43.030148 2026] [:error] [pid 33396:tid 33404] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Feb 05 18:44:43.673433 2026] [:error] [pid 33396:tid 33407] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Feb 05 18:44:46.017771 2026] [:error] [pid 33396:tid 33408] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Feb 05 18:44:46.584851 2026] [:error] [pid 33396:tid 33403] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Feb 05 18:44:48.966244 2026] [:error] [pid 33396:tid 33416] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Feb 05 18:44:49.538312 2026] [:error] [pid 33396:tid 33419] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Feb 05 18:44:50.145857 2026] [:error] [pid 33396:tid 33426] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Feb 05 18:44:50.721254 2026] [:error] [pid 33396:tid 33412] [client 45.137.126.104:36865] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Feb 05 18:44:51.340524 2026] [:error] [pid 33396:tid 33405] [client 45.137.126.104:36865] [client 45.137.126.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYR0o_Tgp_Ev6LiSSgC4QwAAAMI"]
[Thu Feb 05 18:44:52.511751 2026] [:error] [pid 31833:tid 31859] [client 45.137.126.102:46305] [client 45.137.126.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aYR0pBzypZt5yekRAkFFfgAAAZg"]
[Thu Feb 05 18:44:53.642278 2026] [:error] [pid 31775:tid 31821] [client 45.137.126.59:62243] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aYR0pRNlTj92HTKsJN0MYAAAARA"]
[Thu Feb 05 18:44:55.467948 2026] [:error] [pid 14577:tid 14602] [client 45.137.126.72:29929] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Feb 05 18:44:56.036669 2026] [:error] [pid 14577:tid 14584] [client 45.137.126.72:29929] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Feb 05 18:44:57.199778 2026] [:error] [pid 14577:tid 14585] [client 45.137.126.72:29929] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Feb 05 18:44:59.460142 2026] [:error] [pid 14577:tid 14586] [client 45.137.126.72:29929] [client 45.137.126.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aYR0q5ZbKwRdMc_HlgJyQwAAAUc"]
[Thu Feb 05 18:45:00.605700 2026] [:error] [pid 33122:tid 33147] [client 45.137.126.94:25315] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aYR0rPW0IebAnFB9KDAT5AAAAFc"]
[Thu Feb 05 18:45:01.807943 2026] [:error] [pid 31774:tid 31786] [client 45.137.126.93:65059] [client 45.137.126.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aYR0rajDlLg1NOhSOXUcDgAAAIg"]
[Thu Feb 05 18:45:05.388102 2026] [:error] [pid 14577:tid 14599] [client 45.137.126.65:24011] [client 45.137.126.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aYR0sZZbKwRdMc_HlgJyZgAAAVQ"]
[Thu Feb 05 18:45:07.192618 2026] [:error] [pid 33122:tid 33129] [client 45.137.126.74:23379] [client 45.137.126.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aYR0s_W0IebAnFB9KDAT8gAAAEU"]
[Thu Feb 05 18:45:09.655402 2026] [:error] [pid 19213:tid 19238] [client 45.137.126.103:42493] [client 45.137.126.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aYR0tV7WBXhXgHKWAIBM3AAAAdQ"]
[Thu Feb 05 18:45:17.510051 2026] [:error] [pid 19246:tid 19273] [client 45.137.126.100:29305] [client 45.137.126.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aYR0vXE1Gc0V44f4mCc04AAAAhY"]
[Thu Feb 05 18:45:18.700792 2026] [:error] [pid 31775:tid 31827] [client 45.137.126.105:23777] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Feb 05 18:45:19.899461 2026] [:error] [pid 31775:tid 31807] [client 45.137.126.105:23777] [client 45.137.126.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aYR0vxNlTj92HTKsJN0MwQAAAQI"]
[Thu Feb 05 18:45:22.272139 2026] [:error] [pid 31739:tid 31762] [client 45.137.126.59:55427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Feb 05 18:45:24.046498 2026] [:error] [pid 31739:tid 31742] [client 45.137.126.59:55427] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Feb 05 18:45:24.623367 2026] [:error] [pid 31739:tid 31741] [client 45.137.126.59:55427] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aYR0xAGrHl_5BvMstJLG1QAAAAA"]
[Thu Feb 05 18:45:26.991818 2026] [:error] [pid 19246:tid 19259] [client 45.137.126.90:47113] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aYR0xnE1Gc0V44f4mCc08AAAAgg"]
[Thu Feb 05 18:45:30.549101 2026] [:error] [pid 31833:tid 31838] [client 45.137.126.60:41753] [client 45.137.126.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aYR0yhzypZt5yekRAkFFxQAAAYM"]
[Thu Feb 05 18:45:34.719562 2026] [:error] [pid 19246:tid 19254] [client 45.137.126.56:21953] [client 45.137.126.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aYR0znE1Gc0V44f4mCc1GgAAAgM"]
[Thu Feb 05 18:45:36.464258 2026] [:error] [pid 31774:tid 31789] [client 45.137.126.75:20525] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Feb 05 18:45:37.086658 2026] [:error] [pid 31774:tid 31778] [client 45.137.126.75:20525] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aYR00ajDlLg1NOhSOXUcrwAAAIA"]
[Thu Feb 05 18:45:38.243025 2026] [:error] [pid 33122:tid 33137] [client 45.137.126.84:53305] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aYR00vW0IebAnFB9KDAUHQAAAE0"]
[Thu Feb 05 18:45:42.422818 2026] [:error] [pid 19213:tid 19224] [client 45.137.126.100:36389] [client 45.137.126.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aYR01l7WBXhXgHKWAIBNNwAAAcY"]
[Thu Feb 05 18:45:43.570363 2026] [:error] [pid 33396:tid 33418] [client 45.137.126.83:63157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Feb 05 18:45:45.942018 2026] [:error] [pid 33396:tid 33414] [client 45.137.126.83:63157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Feb 05 18:45:46.526391 2026] [:error] [pid 33396:tid 33405] [client 45.137.126.83:63157] [client 45.137.126.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aYR02vTgp_Ev6LiSSgC43gAAAMI"]
[Thu Feb 05 18:45:48.887057 2026] [:error] [pid 31739:tid 31743] [client 45.137.126.55:63741] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Feb 05 18:45:50.116615 2026] [:error] [pid 31739:tid 31747] [client 45.137.126.55:63741] [client 45.137.126.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYR03gGrHl_5BvMstJLG8QAAAAY"]
[Thu Feb 05 18:45:51.296691 2026] [:error] [pid 14577:tid 14580] [client 45.137.126.89:56065] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aYR035ZbKwRdMc_HlgJzDgAAAUE"]
[Thu Feb 05 18:45:53.695762 2026] [:error] [pid 14577:tid 14585] [client 45.137.126.66:41435] [client 45.137.126.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aYR04ZZbKwRdMc_HlgJzGQAAAUY"]
[Thu Feb 05 18:45:56.686469 2026] [:error] [pid 31775:tid 31805] [client 45.137.126.72:64471] [client 45.137.126.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aYR05BNlTj92HTKsJN0NbwAAAQA"]
[Thu Feb 05 18:45:57.837459 2026] [:error] [pid 31774:tid 31793] [client 45.137.126.63:33513] [client 45.137.126.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aYR05ajDlLg1NOhSOXUc9AAAAI8"]
[Thu Feb 05 18:45:59.669508 2026] [:error] [pid 19213:tid 19217] [client 45.137.126.90:48253] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Feb 05 18:46:02.768746 2026] [:error] [pid 19213:tid 19221] [client 45.137.126.90:48253] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aYR06l7WBXhXgHKWAIBNmwAAAcM"]
[Thu Feb 05 18:46:05.114081 2026] [:error] [pid 31775:tid 31816] [client 45.137.126.69:64523] [client 45.137.126.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aYR07RNlTj92HTKsJN0NvQAAAQs"]
[Thu Feb 05 18:46:06.252188 2026] [:error] [pid 31739:tid 31762] [client 45.137.126.98:30491] [client 45.137.126.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aYR07gGrHl_5BvMstJLHOAAAABU"]
[Thu Feb 05 18:46:08.070482 2026] [:error] [pid 31775:tid 31814] [client 45.137.126.85:64175] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Feb 05 18:46:08.644811 2026] [:error] [pid 31775:tid 31823] [client 45.137.126.85:64175] [client 45.137.126.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aYR08BNlTj92HTKsJN0N3wAAARI"]
[Thu Feb 05 18:46:10.480891 2026] [:error] [pid 14577:tid 14600] [client 45.137.126.58:46125] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aYR08pZbKwRdMc_HlgJzPwAAAVU"]
[Thu Feb 05 18:46:14.600012 2026] [:error] [pid 31739:tid 31756] [client 45.137.126.67:37305] [client 45.137.126.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aYR09gGrHl_5BvMstJLHSQAAAA8"]
[Thu Feb 05 18:46:16.380331 2026] [:error] [pid 31774:tid 31781] [client 45.137.126.95:57809] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Feb 05 18:46:16.993185 2026] [:error] [pid 31774:tid 31793] [client 45.137.126.95:57809] [client 45.137.126.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aYR0-KjDlLg1NOhSOXUdNwAAAI8"]
[Thu Feb 05 18:46:19.331709 2026] [:error] [pid 31774:tid 31783] [client 45.137.126.88:45689] [client 45.137.126.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aYR0-6jDlLg1NOhSOXUdQQAAAIU"]
[Thu Feb 05 18:46:21.144361 2026] [:error] [pid 31833:tid 31839] [client 45.137.126.100:52121] [client 45.137.126.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aYR0_RzypZt5yekRAkFGUAAAAYQ"]
[Thu Feb 05 18:46:22.858167 2026] [:error] [pid 33396:tid 33419] [client 45.137.126.79:62531] [client 45.137.126.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aYR0_vTgp_Ev6LiSSgC5aAAAANA"]
[Thu Feb 05 18:46:24.039748 2026] [:error] [pid 31774:tid 31792] [client 45.137.126.94:36341] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aYR1AKjDlLg1NOhSOXUdVAAAAI4"]
[Thu Feb 05 18:46:25.155581 2026] [:error] [pid 31739:tid 31757] [client 45.137.126.58:62009] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aYR1AQGrHl_5BvMstJLHZgAAABA"]
[Thu Feb 05 18:46:31.090739 2026] [:error] [pid 31774:tid 31800] [client 45.137.126.102:28255] [client 45.137.126.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aYR1B6jDlLg1NOhSOXUddwAAAJY"]
[Thu Feb 05 18:46:34.104145 2026] [:error] [pid 19246:tid 19265] [client 45.137.126.96:42031] [client 45.137.126.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aYR1CnE1Gc0V44f4mCc2EQAAAg4"]
[Thu Feb 05 18:46:36.520892 2026] [:error] [pid 14577:tid 14603] [client 45.137.126.75:36379] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Feb 05 18:46:37.116675 2026] [:error] [pid 14577:tid 14598] [client 45.137.126.75:36379] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aYR1DZZbKwRdMc_HlgJztwAAAVM"]
[Thu Feb 05 18:46:40.101072 2026] [:error] [pid 31775:tid 31812] [client 45.137.126.57:64413] [client 45.137.126.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aYR1EBNlTj92HTKsJN0OfAAAAQc"]
[Thu Feb 05 18:46:42.376357 2026] [:error] [pid 31833:tid 31836] [client 45.137.126.82:32399] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Feb 05 18:46:45.906600 2026] [:error] [pid 31833:tid 31858] [client 45.137.126.82:32399] [client 45.137.126.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aYR1FRzypZt5yekRAkFGoQAAAZc"]
[Thu Feb 05 18:46:48.822916 2026] [:error] [pid 19246:tid 19268] [client 45.137.126.58:45727] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aYR1GHE1Gc0V44f4mCc2YQAAAhE"]
[Thu Feb 05 18:46:50.623156 2026] [:error] [pid 33396:tid 33422] [client 45.137.126.101:33535] [client 45.137.126.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aYR1GvTgp_Ev6LiSSgC5pQAAANM"]
[Thu Feb 05 18:46:52.931694 2026] [:error] [pid 31775:tid 31829] [client 45.137.126.96:28877] [client 45.137.126.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aYR1HBNlTj92HTKsJN0OzQAAARg"]
[Thu Feb 05 18:46:58.831634 2026] [:error] [pid 31775:tid 31824] [client 45.137.126.86:30453] [client 45.137.126.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aYR1IhNlTj92HTKsJN0O7wAAARM"]
[Thu Feb 05 18:46:59.957042 2026] [:error] [pid 14577:tid 14599] [client 45.137.126.105:46339] [client 45.137.126.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aYR1I5ZbKwRdMc_HlgJ0CQAAAVQ"]
[Thu Feb 05 18:47:02.959057 2026] [:error] [pid 33122:tid 33137] [client 45.137.126.75:37887] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aYR1JvW0IebAnFB9KDAVmgAAAE0"]
[Thu Feb 05 18:47:04.139903 2026] [:error] [pid 14577:tid 14581] [client 45.137.126.101:25307] [client 45.137.126.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYR1KJZbKwRdMc_HlgJ0EAAAAUI"]
[Thu Feb 05 18:47:06.500068 2026] [:error] [pid 19213:tid 19238] [client 45.137.126.90:38413] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aYR1Kl7WBXhXgHKWAIBOcAAAAdQ"]
[Thu Feb 05 18:47:07.636796 2026] [:error] [pid 19213:tid 19233] [client 45.137.126.99:45323] [client 45.137.126.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aYR1K17WBXhXgHKWAIBOcwAAAc8"]
[Thu Feb 05 18:47:08.808774 2026] [:error] [pid 31775:tid 31805] [client 45.137.126.54:32779] [client 45.137.126.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aYR1LBNlTj92HTKsJN0PDgAAAQA"]
[Thu Feb 05 18:47:08.812737 2026] [:error] [pid 31775:tid 31805] [client 45.137.126.54:32779] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Feb 05 18:47:09.418071 2026] [:error] [pid 31775:tid 31807] [client 45.137.126.54:32779] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aYR1LRNlTj92HTKsJN0PEQAAAQI"]
[Thu Feb 05 18:47:11.822503 2026] [:error] [pid 33396:tid 33403] [client 45.137.126.75:32669] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Feb 05 18:47:12.380659 2026] [:error] [pid 33396:tid 33422] [client 45.137.126.75:32669] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYR1MPTgp_Ev6LiSSgC56QAAANM"]
[Thu Feb 05 18:47:13.549212 2026] [:error] [pid 19246:tid 19273] [client 45.137.126.71:53175] [client 45.137.126.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aYR1MXE1Gc0V44f4mCc2pQAAAhY"]
[Thu Feb 05 18:47:14.716486 2026] [:error] [pid 19213:tid 19223] [client 45.137.126.57:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Feb 05 18:47:18.870608 2026] [:error] [pid 19213:tid 19223] [client 45.137.126.57:37555] [client 45.137.126.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aYR1Nl7WBXhXgHKWAIBOmQAAAcU"]
[Thu Feb 05 18:47:20.064053 2026] [:error] [pid 31833:tid 31844] [client 45.137.126.55:22867] [client 45.137.126.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aYR1OBzypZt5yekRAkFHhAAAAYk"]
[Thu Feb 05 18:47:22.379642 2026] [:error] [pid 14577:tid 14602] [client 45.137.126.83:22719] [client 45.137.126.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aYR1OpZbKwRdMc_HlgJ0SQAAAVc"]
[Thu Feb 05 18:47:23.520359 2026] [:error] [pid 33122:tid 33140] [client 45.137.126.55:23193] [client 45.137.126.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aYR1O_W0IebAnFB9KDAV3gAAAFA"]
[Thu Feb 05 18:47:24.736973 2026] [:error] [pid 31833:tid 31846] [client 45.137.126.59:62961] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Feb 05 18:47:25.338364 2026] [:error] [pid 31833:tid 31856] [client 45.137.126.59:62961] [client 45.137.126.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.59, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aYR1PRzypZt5yekRAkFHlQAAAZU"]
[Thu Feb 05 18:47:26.488717 2026] [:error] [pid 31833:tid 31836] [client 45.137.126.59:62961] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aYR1PhzypZt5yekRAkFHmAAAAYE"]
[Thu Feb 05 18:47:30.053178 2026] [:error] [pid 14577:tid 14603] [client 45.137.126.94:61875] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aYR1QpZbKwRdMc_HlgJ0dwAAAVg"]
[Thu Feb 05 18:47:31.270065 2026] [:error] [pid 31774:tid 31793] [client 45.137.126.92:41123] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Feb 05 18:47:31.878918 2026] [:error] [pid 31774:tid 31788] [client 45.137.126.92:41123] [client 45.137.126.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aYR1Q6jDlLg1NOhSOXUeawAAAIo"]
[Thu Feb 05 18:47:33.020195 2026] [:error] [pid 19246:tid 19251] [client 45.137.126.87:21239] [client 45.137.126.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aYR1RXE1Gc0V44f4mCc3BAAAAgA"]
[Thu Feb 05 18:47:34.242389 2026] [:error] [pid 31774:tid 31784] [client 45.137.126.80:26361] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Feb 05 18:47:35.989773 2026] [:error] [pid 31774:tid 31792] [client 45.137.126.80:26361] [client 45.137.126.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYR1R6jDlLg1NOhSOXUefwAAAI4"]
[Thu Feb 05 18:47:38.323076 2026] [:error] [pid 19213:tid 19231] [client 45.137.126.75:38533] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYR1Sl7WBXhXgHKWAIBOxgAAAc0"]
[Thu Feb 05 18:47:39.568747 2026] [:error] [pid 31833:tid 31840] [client 45.137.126.63:59469] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Feb 05 18:47:40.879862 2026] [:error] [pid 31833:tid 31852] [client 45.137.126.63:59469] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Feb 05 18:47:42.060716 2026] [:error] [pid 31833:tid 31853] [client 45.137.126.63:59469] [client 45.137.126.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aYR1ThzypZt5yekRAkFH2gAAAZI"]
[Thu Feb 05 18:47:43.255251 2026] [:error] [pid 31775:tid 31815] [client 45.137.126.54:47701] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aYR1TxNlTj92HTKsJN0P1wAAAQo"]
[Thu Feb 05 18:47:45.074072 2026] [:error] [pid 31775:tid 31829] [client 45.137.126.56:53655] [client 45.137.126.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aYR1URNlTj92HTKsJN0P3wAAARg"]
[Thu Feb 05 18:47:46.253887 2026] [:error] [pid 19213:tid 19227] [client 45.137.126.54:20237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Feb 05 18:47:49.871459 2026] [:error] [pid 19213:tid 19233] [client 45.137.126.54:20237] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYR1VV7WBXhXgHKWAIBO_QAAAc8"]
[Thu Feb 05 18:47:52.226844 2026] [:error] [pid 33396:tid 33426] [client 45.137.126.89:37147] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aYR1WPTgp_Ev6LiSSgC6egAAANc"]
[Thu Feb 05 18:47:52.787877 2026] [:error] [pid 33396:tid 33418] [client 45.137.126.89:37147] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aYR1WPTgp_Ev6LiSSgC6fAAAAM8"]
[Thu Feb 05 18:47:55.157228 2026] [:error] [pid 31775:tid 31818] [client 45.137.126.61:56809] [client 45.137.126.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aYR1WxNlTj92HTKsJN0QAAAAAQ0"]
[Thu Feb 05 18:47:56.310931 2026] [:error] [pid 31775:tid 31811] [client 45.137.126.70:42683] [client 45.137.126.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aYR1XBNlTj92HTKsJN0QAwAAAQY"]
[Thu Feb 05 18:47:58.666332 2026] [:error] [pid 33122:tid 33139] [client 45.137.126.96:24969] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Feb 05 18:48:01.161915 2026] [:error] [pid 33122:tid 33124] [client 45.137.126.96:24969] [client 45.137.126.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aYR1YfW0IebAnFB9KDAWJgAAAEA"]
[Thu Feb 05 18:48:05.309497 2026] [:error] [pid 33122:tid 33145] [client 45.137.126.88:47251] [client 45.137.126.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aYR1ZfW0IebAnFB9KDAWMwAAAFU"]
[Thu Feb 05 18:48:07.071872 2026] [:error] [pid 31833:tid 31844] [client 45.137.126.99:53533] [client 45.137.126.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aYR1ZxzypZt5yekRAkFIGAAAAYk"]
[Thu Feb 05 18:48:08.252034 2026] [:error] [pid 14577:tid 14581] [client 45.137.126.91:36039] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Feb 05 18:48:11.175837 2026] [:error] [pid 14577:tid 14587] [client 45.137.126.91:36039] [client 45.137.126.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aYR1a5ZbKwRdMc_HlgJ1DAAAAUg"]
[Thu Feb 05 18:48:12.900696 2026] [:error] [pid 19213:tid 19241] [client 45.137.126.98:23703] [client 45.137.126.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aYR1bF7WBXhXgHKWAIBPQgAAAdc"]
[Thu Feb 05 18:48:14.084093 2026] [:error] [pid 31774:tid 31787] [client 45.137.126.99:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Feb 05 18:48:14.712623 2026] [:error] [pid 31774:tid 31790] [client 45.137.126.99:52255] [client 45.137.126.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aYR1bqjDlLg1NOhSOXUe7wAAAIw"]
[Thu Feb 05 18:48:15.841957 2026] [:error] [pid 14577:tid 14587] [client 45.137.126.54:56201] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aYR1b5ZbKwRdMc_HlgJ1IQAAAUg"]
[Thu Feb 05 18:48:19.003638 2026] [:error] [pid 31775:tid 31818] [client 45.137.126.58:61289] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aYR1cxNlTj92HTKsJN0QZAAAAQ0"]
[Thu Feb 05 18:48:21.957524 2026] [:error] [pid 31739:tid 31751] [client 45.137.126.82:37077] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Thu Feb 05 18:48:22.538218 2026] [:error] [pid 31739:tid 31753] [client 45.137.126.82:37077] [client 45.137.126.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aYR1dgGrHl_5BvMstJLIsgAAAAw"]
[Thu Feb 05 18:48:23.682746 2026] [:error] [pid 33122:tid 33140] [client 45.137.126.84:48317] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aYR1d_W0IebAnFB9KDAWVAAAAFA"]
[Thu Feb 05 18:48:27.822602 2026] [:error] [pid 14577:tid 14584] [client 45.137.126.92:34811] [client 45.137.126.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aYR1e5ZbKwRdMc_HlgJ1VwAAAUU"]
[Thu Feb 05 18:48:30.128088 2026] [:error] [pid 19213:tid 19231] [client 45.137.126.54:52759] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aYR1fl7WBXhXgHKWAIBPYwAAAc0"]
[Thu Feb 05 18:48:31.435190 2026] [:error] [pid 31774:tid 31798] [client 45.137.126.71:51939] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Thu Feb 05 18:48:33.242300 2026] [:error] [pid 31774:tid 31802] [client 45.137.126.71:51939] [client 45.137.126.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYR1gajDlLg1NOhSOXUfIwAAAJg"]
[Thu Feb 05 18:48:34.483509 2026] [:error] [pid 31739:tid 31759] [client 45.137.126.84:40981] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aYR1ggGrHl_5BvMstJLI2wAAABI"]
[Thu Feb 05 18:48:36.255851 2026] [:error] [pid 14577:tid 14589] [client 45.137.126.70:32109] [client 45.137.126.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aYR1hJZbKwRdMc_HlgJ1bAAAAUo"]
[Thu Feb 05 18:48:37.411983 2026] [:error] [pid 31775:tid 31817] [client 45.137.126.61:23085] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Thu Feb 05 18:48:38.556725 2026] [:error] [pid 31775:tid 31815] [client 45.137.126.61:23085] [client 45.137.126.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aYR1hhNlTj92HTKsJN0Q-gAAAQo"]
[Thu Feb 05 18:48:39.714456 2026] [:error] [pid 31775:tid 31811] [client 45.137.126.84:23485] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Feb 05 18:48:40.903577 2026] [:error] [pid 31775:tid 31815] [client 45.137.126.84:23485] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aYR1iBNlTj92HTKsJN0RDQAAAQo"]
[Thu Feb 05 18:48:42.127046 2026] [:error] [pid 31775:tid 31827] [client 45.137.126.106:45225] [client 45.137.126.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aYR1ihNlTj92HTKsJN0RHwAAARY"]
[Thu Feb 05 18:48:43.959951 2026] [:error] [pid 31739:tid 31749] [client 45.137.126.106:42277] [client 45.137.126.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYR1iwGrHl_5BvMstJLI-gAAAAg"]
[Thu Feb 05 18:48:45.131696 2026] [:error] [pid 31774:tid 31790] [client 45.137.126.67:43071] [client 45.137.126.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aYR1jajDlLg1NOhSOXUfcAAAAIw"]
[Thu Feb 05 18:48:47.511952 2026] [:error] [pid 33396:tid 33403] [client 45.137.126.75:31335] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aYR1j_Tgp_Ev6LiSSgC66wAAAMA"]
[Thu Feb 05 18:48:49.345654 2026] [:error] [pid 31775:tid 31827] [client 45.137.126.70:50005] [client 45.137.126.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aYR1kRNlTj92HTKsJN0RZQAAARY"]
[Thu Feb 05 18:48:50.501772 2026] [:error] [pid 33396:tid 33404] [client 45.137.126.59:49347] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aYR1kvTgp_Ev6LiSSgC67wAAAME"]
[Thu Feb 05 18:48:51.698149 2026] [:error] [pid 14577:tid 14600] [client 45.137.126.61:48941] [client 45.137.126.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aYR1k5ZbKwRdMc_HlgJ1xAAAAVU"]
[Thu Feb 05 18:48:54.727679 2026] [:error] [pid 31775:tid 31819] [client 45.137.126.77:27957] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aYR1lhNlTj92HTKsJN0RgQAAAQ4"]
[Thu Feb 05 18:48:57.068124 2026] [:error] [pid 14577:tid 14588] [client 45.137.126.102:25679] [client 45.137.126.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aYR1mZZbKwRdMc_HlgJ10wAAAUk"]
[Thu Feb 05 18:48:58.854291 2026] [:error] [pid 14577:tid 14590] [client 45.137.126.73:23025] [client 45.137.126.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aYR1mpZbKwRdMc_HlgJ12wAAAUs"]
[Thu Feb 05 18:49:00.580640 2026] [:error] [pid 31774:tid 31779] [client 45.137.126.105:55957] [client 45.137.126.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYR1nKjDlLg1NOhSOXUfmQAAAIE"]
[Thu Feb 05 18:49:03.048490 2026] [:error] [pid 19246:tid 19265] [client 45.137.126.89:39477] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Thu Feb 05 18:49:05.349364 2026] [:error] [pid 19246:tid 19272] [client 45.137.126.89:39477] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aYR1oXE1Gc0V44f4mCc4jQAAAhU"]
[Thu Feb 05 18:49:06.475728 2026] [:error] [pid 33396:tid 33415] [client 45.137.126.77:33013] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aYR1ovTgp_Ev6LiSSgC7HQAAAMw"]
[Thu Feb 05 18:49:08.205318 2026] [:error] [pid 14577:tid 14600] [client 45.137.126.80:46963] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Thu Feb 05 18:49:08.815355 2026] [:error] [pid 14577:tid 14596] [client 45.137.126.80:46963] [client 45.137.126.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aYR1pJZbKwRdMc_HlgJ1-AAAAVE"]
[Thu Feb 05 18:49:12.405493 2026] [:error] [pid 31774:tid 31793] [client 45.137.126.94:47971] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aYR1qKjDlLg1NOhSOXUfsQAAAI8"]
[Thu Feb 05 18:49:14.171916 2026] [:error] [pid 33122:tid 33141] [client 45.137.126.64:37385] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Thu Feb 05 18:49:14.757808 2026] [:error] [pid 33122:tid 33126] [client 45.137.126.64:37385] [client 45.137.126.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aYR1qvW0IebAnFB9KDAW7AAAAEI"]
[Thu Feb 05 18:49:17.050390 2026] [:error] [pid 31833:tid 31859] [client 45.137.126.93:56025] [client 45.137.126.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aYR1rRzypZt5yekRAkFI_wAAAZg"]
[Thu Feb 05 18:49:18.276641 2026] [:error] [pid 31833:tid 31840] [client 45.137.126.77:34555] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Feb 05 18:49:18.901598 2026] [:error] [pid 31833:tid 31857] [client 45.137.126.77:34555] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aYR1rhzypZt5yekRAkFJBAAAAZY"]
[Thu Feb 05 18:49:20.624131 2026] [:error] [pid 31775:tid 31807] [client 45.137.126.101:46253] [client 45.137.126.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aYR1sBNlTj92HTKsJN0R1wAAAQI"]
[Thu Feb 05 18:49:23.609369 2026] [:error] [pid 33396:tid 33406] [client 45.137.126.75:51815] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Feb 05 18:49:24.249660 2026] [:error] [pid 33396:tid 33407] [client 45.137.126.75:51815] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aYR1tPTgp_Ev6LiSSgC7TAAAAMQ"]
[Thu Feb 05 18:49:27.153421 2026] [:error] [pid 31739:tid 31758] [client 45.137.126.59:64035] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aYR1twGrHl_5BvMstJLJUgAAABE"]
[Thu Feb 05 18:49:28.349266 2026] [:error] [pid 31774:tid 31788] [client 45.137.126.60:26061] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Thu Feb 05 18:49:28.913482 2026] [:error] [pid 31774:tid 31791] [client 45.137.126.60:26061] [client 45.137.126.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aYR1uKjDlLg1NOhSOXUf0gAAAI0"]
[Thu Feb 05 18:49:30.097730 2026] [:error] [pid 31775:tid 31819] [client 45.137.126.84:22525] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aYR1uhNlTj92HTKsJN0SDQAAAQ4"]
[Thu Feb 05 18:49:31.485507 2026] [:error] [pid 33396:tid 33407] [client 45.137.126.105:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Feb 05 18:49:32.657190 2026] [:error] [pid 33396:tid 33405] [client 45.137.126.105:35455] [client 45.137.126.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aYR1vPTgp_Ev6LiSSgC7YAAAAMI"]
[Thu Feb 05 18:49:33.875963 2026] [:error] [pid 33396:tid 33420] [client 45.137.126.76:49489] [client 45.137.126.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aYR1vfTgp_Ev6LiSSgC7ZAAAANE"]
[Thu Feb 05 18:49:38.637291 2026] [:error] [pid 19213:tid 19235] [client 45.137.126.94:60555] [client 45.137.126.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aYR1wl7WBXhXgHKWAIBQUgAAAdE"]
[Thu Feb 05 18:49:39.819787 2026] [:error] [pid 31833:tid 31857] [client 45.137.126.95:20261] [client 45.137.126.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aYR1wxzypZt5yekRAkFJNgAAAZY"]
[Thu Feb 05 18:49:41.603782 2026] [:error] [pid 14577:tid 14602] [client 45.137.126.69:33381] [client 45.137.126.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aYR1xZZbKwRdMc_HlgJ2RwAAAVc"]
[Thu Feb 05 18:49:42.812322 2026] [:error] [pid 33396:tid 33417] [client 45.137.126.105:22865] [client 45.137.126.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aYR1xvTgp_Ev6LiSSgC7igAAAM4"]
[Thu Feb 05 18:49:43.980330 2026] [:error] [pid 31775:tid 31813] [client 45.137.126.54:22557] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aYR1xxNlTj92HTKsJN0SKQAAAQg"]
[Thu Feb 05 18:49:45.139525 2026] [:error] [pid 33396:tid 33413] [client 45.137.126.90:62887] [client 45.137.126.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aYR1yfTgp_Ev6LiSSgC7kQAAAMo"]
[Thu Feb 05 18:49:48.762649 2026] [:error] [pid 31833:tid 31850] [client 45.137.126.89:37337] [client 45.137.126.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aYR1zBzypZt5yekRAkFJUgAAAY8"]
[Thu Feb 05 18:49:49.924161 2026] [:error] [pid 31774:tid 31800] [client 45.137.126.69:56727] [client 45.137.126.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aYR1zajDlLg1NOhSOXUgDwAAAJY"]
[Thu Feb 05 18:49:51.624893 2026] [:error] [pid 31774:tid 31797] [client 45.137.126.87:60125] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Feb 05 18:49:52.200398 2026] [:error] [pid 31774:tid 31794] [client 45.137.126.87:60125] [client 45.137.126.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aYR10KjDlLg1NOhSOXUgHwAAAJA"]
[Thu Feb 05 18:49:53.349271 2026] [:error] [pid 19246:tid 19273] [client 45.137.126.87:34745] [client 45.137.126.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aYR10XE1Gc0V44f4mCc5GgAAAhY"]
[Thu Feb 05 18:49:55.667720 2026] [:error] [pid 14577:tid 14600] [client 45.137.126.85:43679] [client 45.137.126.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aYR105ZbKwRdMc_HlgJ2YQAAAVU"]
[Thu Feb 05 18:49:56.898265 2026] [:error] [pid 31774:tid 31781] [client 45.137.126.77:26133] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aYR11KjDlLg1NOhSOXUgMgAAAIM"]
[Thu Feb 05 18:50:03.079542 2026] [:error] [pid 31774:tid 31783] [client 45.137.126.62:54389] [client 45.137.126.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aYR126jDlLg1NOhSOXUgUQAAAIU"]
[Thu Feb 05 18:50:04.205914 2026] [:error] [pid 31833:tid 31848] [client 45.137.126.54:59921] [client 45.137.126.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aYR13BzypZt5yekRAkFJdAAAAY0"]
[Thu Feb 05 18:50:06.551218 2026] [:error] [pid 19246:tid 19262] [client 45.137.126.97:58637] [client 45.137.126.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aYR13nE1Gc0V44f4mCc5PgAAAgs"]
[Thu Feb 05 18:50:08.332802 2026] [:error] [pid 31833:tid 31846] [client 45.137.126.85:28061] [client 45.137.126.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aYR14BzypZt5yekRAkFJfwAAAYs"]
[Thu Feb 05 18:50:10.024637 2026] [:error] [pid 31739:tid 31751] [client 45.137.126.75:62223] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aYR14gGrHl_5BvMstJLJrgAAAAo"]
[Thu Feb 05 18:50:11.216077 2026] [:error] [pid 31775:tid 31826] [client 45.137.126.69:43673] [client 45.137.126.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aYR14xNlTj92HTKsJN0SsAAAARU"]
[Thu Feb 05 18:50:12.406055 2026] [:error] [pid 14577:tid 14594] [client 45.137.126.103:44055] [client 45.137.126.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aYR15JZbKwRdMc_HlgJ2gwAAAU8"]
[Thu Feb 05 18:50:15.298801 2026] [:error] [pid 14577:tid 14587] [client 45.137.126.95:24085] [client 45.137.126.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aYR155ZbKwRdMc_HlgJ2iQAAAUg"]
[Thu Feb 05 18:50:16.461020 2026] [:error] [pid 31775:tid 31809] [client 45.137.126.59:33663] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Thu Feb 05 18:50:17.030089 2026] [:error] [pid 31775:tid 31805] [client 45.137.126.59:33663] [client 45.137.126.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aYR16RNlTj92HTKsJN0S1gAAAQA"]
[Thu Feb 05 18:50:19.413019 2026] [:error] [pid 31775:tid 31816] [client 45.137.126.77:31037] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Thu Feb 05 18:50:19.990828 2026] [:error] [pid 31775:tid 31811] [client 45.137.126.77:31037] [client 45.137.126.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aYR16xNlTj92HTKsJN0S5wAAAQY"]
[Thu Feb 05 18:50:21.167187 2026] [:error] [pid 33396:tid 33425] [client 45.137.126.57:30525] [client 45.137.126.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aYR17fTgp_Ev6LiSSgC78gAAANY"]
[Thu Feb 05 18:50:22.906743 2026] [:error] [pid 19213:tid 19235] [client 45.137.126.70:62437] [client 45.137.126.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aYR17l7WBXhXgHKWAIBQvgAAAdE"]
[Thu Feb 05 18:50:27.018823 2026] [:error] [pid 31739:tid 31746] [client 45.137.126.81:24361] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Feb 05 18:50:29.378643 2026] [:error] [pid 31739:tid 31742] [client 45.137.126.81:24361] [client 45.137.126.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aYR19QGrHl_5BvMstJLKDwAAAAE"]
[Thu Feb 05 18:50:31.243518 2026] [:error] [pid 14577:tid 14593] [client 45.137.126.75:61737] [client 45.137.126.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aYR195ZbKwRdMc_HlgJ2rQAAAU4"]
[Thu Feb 05 18:50:33.556162 2026] [:error] [pid 31774:tid 31782] [client 45.137.126.84:23091] [client 45.137.126.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aYR1-ajDlLg1NOhSOXUgtwAAAIQ"]
[Thu Feb 05 18:50:34.675369 2026] [:error] [pid 14577:tid 14592] [client 45.137.126.100:30715] [client 45.137.126.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYR1-pZbKwRdMc_HlgJ2swAAAU0"]
[Thu Feb 05 18:50:35.809054 2026] [:error] [pid 33122:tid 33142] [client 45.137.126.58:39007] [client 45.137.126.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aYR1-_W0IebAnFB9KDAXjQAAAFI"]
[Thu Feb 05 19:25:55.864636 2026] [:error] [pid 31739:tid 31760] [client 43.153.48.240:38312] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYR-QwGrHl_5BvMstJLTIwAAABM"]
[Thu Feb 05 19:34:21.114303 2026] [:error] [pid 31775:tid 31823] [client 147.135.215.173:54596] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYSAPRNlTj92HTKsJN0jZgAAARI"]
[Thu Feb 05 19:34:24.027432 2026] [:error] [pid 14577:tid 14597] [client 147.135.215.173:58402] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYSAQJZbKwRdMc_HlgKEIAAAAVI"]
[Thu Feb 05 19:34:26.261258 2026] [:error] [pid 31739:tid 31761] [client 147.135.215.173:58418] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYSAQgGrHl_5BvMstJLU-gAAABQ"]
[Thu Feb 05 19:34:28.275468 2026] [:error] [pid 31833:tid 31851] [client 147.135.215.173:58432] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYSARBzypZt5yekRAkFUaAAAAZA"]
[Thu Feb 05 19:34:31.692998 2026] [:error] [pid 19213:tid 19242] [client 147.135.215.173:58018] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYSAR17WBXhXgHKWAIBdHwAAAdg"]
[Thu Feb 05 19:34:34.327619 2026] [:error] [pid 19246:tid 19254] [client 147.135.215.173:58026] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYSASnE1Gc0V44f4mCdJ7wAAAgM"]
[Thu Feb 05 19:34:36.695997 2026] [:error] [pid 19213:tid 19230] [client 147.135.215.173:58040] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYSATF7WBXhXgHKWAIBdJAAAAcw"]
[Thu Feb 05 19:34:39.198743 2026] [:error] [pid 31775:tid 31815] [client 147.135.215.173:58044] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYSATxNlTj92HTKsJN0jcAAAAQo"]
[Thu Feb 05 19:34:41.548964 2026] [:error] [pid 19246:tid 19272] [client 147.135.215.173:52330] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYSAUXE1Gc0V44f4mCdJ-QAAAhU"]
[Thu Feb 05 19:34:44.478398 2026] [:error] [pid 14577:tid 14600] [client 147.135.215.173:52342] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYSAVJZbKwRdMc_HlgKELwAAAVU"]
[Thu Feb 05 19:34:46.835669 2026] [:error] [pid 19246:tid 19274] [client 147.135.215.173:52350] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYSAVnE1Gc0V44f4mCdKBQAAAhc"]
[Thu Feb 05 19:34:49.386660 2026] [:error] [pid 31774:tid 31787] [client 147.135.215.173:52362] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYSAWajDlLg1NOhSOXUtCgAAAIk"]
[Thu Feb 05 19:34:51.698570 2026] [:error] [pid 19246:tid 19258] [client 147.135.215.173:53854] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYSAW3E1Gc0V44f4mCdKQAAAAgc"]
[Thu Feb 05 19:34:53.924906 2026] [:error] [pid 31775:tid 31820] [client 147.135.215.173:53870] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYSAXRNlTj92HTKsJN0jhwAAAQ8"]
[Thu Feb 05 19:34:56.189493 2026] [:error] [pid 31774:tid 31778] [client 147.135.215.173:53876] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYSAYKjDlLg1NOhSOXUtFAAAAIA"]
[Thu Feb 05 19:34:58.357711 2026] [:error] [pid 31739:tid 31747] [client 147.135.215.173:53880] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYSAYgGrHl_5BvMstJLVEQAAAAY"]
[Thu Feb 05 19:35:00.894648 2026] [:error] [pid 31775:tid 31821] [client 147.135.215.173:53888] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYSAZBNlTj92HTKsJN0jjgAAARA"]
[Thu Feb 05 19:35:03.358465 2026] [:error] [pid 31774:tid 31782] [client 147.135.215.173:37794] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYSAZ6jDlLg1NOhSOXUtGQAAAIQ"]
[Thu Feb 05 19:35:05.741781 2026] [:error] [pid 19246:tid 19257] [client 147.135.215.173:37796] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYSAaXE1Gc0V44f4mCdKVAAAAgY"]
[Thu Feb 05 19:35:08.075948 2026] [:error] [pid 33396:tid 33421] [client 147.135.215.173:37812] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYSAbPTgp_Ev6LiSSgDHyAAAANI"]
[Thu Feb 05 19:35:10.102177 2026] [:error] [pid 31774:tid 31793] [client 170.106.72.93:59190] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYSAbqjDlLg1NOhSOXUtHAAAAI8"]
[Thu Feb 05 19:35:10.529805 2026] [:error] [pid 31774:tid 31792] [client 147.135.215.173:37816] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYSAbqjDlLg1NOhSOXUtHQAAAI4"]
[Thu Feb 05 19:35:12.879804 2026] [:error] [pid 19246:tid 19268] [client 147.135.215.173:58068] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYSAcHE1Gc0V44f4mCdKiAAAAhE"]
[Thu Feb 05 19:35:15.067631 2026] [:error] [pid 33396:tid 33413] [client 147.135.215.173:58078] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYSAc_Tgp_Ev6LiSSgDH1gAAAMo"]
[Thu Feb 05 19:35:17.420705 2026] [:error] [pid 33122:tid 33143] [client 147.135.215.173:58082] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYSAdfW0IebAnFB9KDAmcwAAAFM"]
[Thu Feb 05 19:35:40.185442 2026] [:error] [pid 19213:tid 19228] [client 147.135.215.173:58086] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYSAjF7WBXhXgHKWAIBdhAAAAco"]
[Thu Feb 05 19:35:42.075597 2026] [:error] [pid 31739:tid 31760] [client 147.135.215.173:41252] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYSAjgGrHl_5BvMstJLVKgAAABM"]
[Thu Feb 05 19:35:44.308849 2026] [:error] [pid 19213:tid 19217] [client 147.135.215.173:41266] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYSAkF7WBXhXgHKWAIBdhQAAAcA"]
[Thu Feb 05 19:35:46.467043 2026] [:error] [pid 31739:tid 31742] [client 147.135.215.173:41268] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYSAkgGrHl_5BvMstJLVMAAAAAE"]
[Thu Feb 05 19:35:48.487897 2026] [:error] [pid 33396:tid 33412] [client 147.135.215.173:41282] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYSAlPTgp_Ev6LiSSgDH8AAAAMk"]
[Thu Feb 05 19:35:50.613853 2026] [:error] [pid 31774:tid 31787] [client 147.135.215.173:41288] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYSAlqjDlLg1NOhSOXUtVgAAAIk"]
[Thu Feb 05 19:35:52.648514 2026] [:error] [pid 33396:tid 33410] [client 147.135.215.173:42468] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYSAmPTgp_Ev6LiSSgDH9AAAAMc"]
[Thu Feb 05 19:35:54.591595 2026] [:error] [pid 33122:tid 33127] [client 147.135.215.173:42472] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYSAmvW0IebAnFB9KDAmnQAAAEM"]
[Thu Feb 05 19:35:56.636508 2026] [:error] [pid 33122:tid 33136] [client 147.135.215.173:42484] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYSAnPW0IebAnFB9KDAmogAAAEw"]
[Thu Feb 05 19:35:58.711602 2026] [:error] [pid 33122:tid 33127] [client 147.135.215.173:42500] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYSAnvW0IebAnFB9KDAmrwAAAEM"]
[Thu Feb 05 19:36:00.843170 2026] [:error] [pid 31774:tid 31787] [client 147.135.215.173:42504] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYSAoKjDlLg1NOhSOXUtYQAAAIk"]
[Thu Feb 05 19:36:02.887427 2026] [:error] [pid 31775:tid 31813] [client 147.135.215.173:52844] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYSAohNlTj92HTKsJN0j5wAAAQg"]
[Thu Feb 05 19:36:04.970611 2026] [:error] [pid 31774:tid 31788] [client 147.135.215.173:52860] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYSApKjDlLg1NOhSOXUtagAAAIo"]
[Thu Feb 05 19:36:07.042474 2026] [:error] [pid 19213:tid 19224] [client 147.135.215.173:52862] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYSAp17WBXhXgHKWAIBdlAAAAcY"]
[Thu Feb 05 19:36:09.161438 2026] [:error] [pid 19213:tid 19237] [client 147.135.215.173:52868] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYSAqV7WBXhXgHKWAIBdmgAAAdM"]
[Thu Feb 05 19:36:11.195212 2026] [:error] [pid 33122:tid 33142] [client 147.135.215.173:52878] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYSAq_W0IebAnFB9KDAmxgAAAFI"]
[Thu Feb 05 19:36:13.143311 2026] [:error] [pid 33396:tid 33419] [client 147.135.215.173:36136] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYSArfTgp_Ev6LiSSgDIEgAAANA"]
[Thu Feb 05 19:36:25.395853 2026] [:error] [pid 31775:tid 31805] [client 147.135.215.173:37580] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYSAuRNlTj92HTKsJN0kEAAAAQA"]
[Thu Feb 05 19:36:29.168079 2026] [:error] [pid 33122:tid 33147] [client 147.135.215.173:37592] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYSAvfW0IebAnFB9KDAm-gAAAFc"]
[Thu Feb 05 21:56:50.089604 2026] [:error] [pid 33122:tid 33145] [client 106.227.49.113:35621] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYShovW0IebAnFB9KDBJ8gAAAFU"]
[Thu Feb 05 23:23:02.442447 2026] [:error] [pid 19246:tid 19256] [client 20.220.62.160:20429] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Feb 06 00:33:37.159082 2026] [:error] [pid 11123:tid 11200] [client 89.208.230.76:44718] [client 89.208.230.76] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=video/webm"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYTGYaJk7pHfPArl4eWbfwAAARA"]
[Fri Feb 06 00:33:37.159411 2026] [:error] [pid 11123:tid 11200] [client 89.208.230.76:44718] [client 89.208.230.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYTGYaJk7pHfPArl4eWbfwAAARA"]
[Fri Feb 06 02:43:38.426285 2026] [:error] [pid 64116:tid 64142] [client 43.165.65.75:51638] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYTk2rq-pUXYJUX2oz8idwAAANM"]
[Fri Feb 06 03:47:13.806377 2026] [:error] [pid 1664:tid 1710] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Feb 06 03:47:14.019621 2026] [:error] [pid 1664:tid 1714] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Fri Feb 06 03:47:14.229710 2026] [:error] [pid 1664:tid 1707] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Fri Feb 06 03:47:14.436673 2026] [:error] [pid 1664:tid 1717] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 06 03:47:14.696718 2026] [:error] [pid 1664:tid 1700] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Feb 06 03:47:14.900180 2026] [:error] [pid 1664:tid 1713] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Fri Feb 06 03:47:15.123096 2026] [:error] [pid 1664:tid 1718] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/shlo.php
[Fri Feb 06 03:47:15.385799 2026] [:error] [pid 1664:tid 1711] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/itil.php
[Fri Feb 06 03:47:15.591991 2026] [:error] [pid 1664:tid 1706] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/jack.php
[Fri Feb 06 03:47:15.824941 2026] [:error] [pid 1664:tid 1719] [client 20.119.172.147:6947] File does not exist: /usr/local/apache/htdocs/suspended-page/sudo.php
[Fri Feb 06 03:47:16.026990 2026] [:error] [pid 1664:tid 1721] [client 20.119.172.147:6947] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law.php"] [unique_id "aYTzxO_0lM6yA3VnvQVRrwAAAFU"]
[Fri Feb 06 03:47:19.617108 2026] [:error] [pid 34582:tid 34603] [client 20.119.172.147:11531] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law.php"] [unique_id "aYTzx-DeJq1JGssYG6xEpgAAARI"]
[Fri Feb 06 03:47:42.804831 2026] [:error] [pid 34582:tid 34608] [client 20.119.172.147:1502] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-xx.php"] [unique_id "aYTz3uDeJq1JGssYG6xE0wAAARc"]
[Fri Feb 06 03:48:02.132378 2026] [:error] [pid 34582:tid 34585] [client 20.119.172.147:12382] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-xx.php"] [unique_id "aYTz8uDeJq1JGssYG6xFBwAAAQA"]
[Fri Feb 06 03:48:12.870416 2026] [:error] [pid 1773:tid 1787] [client 20.119.172.147:8519] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aYTz_DYbySBHYmKOdJ-CVQAAAMQ"]
[Fri Feb 06 03:48:27.430667 2026] [:error] [pid 1663:tid 1681] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/oxse.php
[Fri Feb 06 03:48:27.653599 2026] [:error] [pid 1663:tid 1687] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 06 03:48:27.882195 2026] [:error] [pid 1663:tid 1692] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Fri Feb 06 03:48:28.087987 2026] [:error] [pid 1663:tid 1677] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Fri Feb 06 03:48:28.313440 2026] [:error] [pid 1663:tid 1697] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/men.php
[Fri Feb 06 03:48:28.517868 2026] [:error] [pid 1663:tid 1696] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/test2.php
[Fri Feb 06 03:48:28.738988 2026] [:error] [pid 1663:tid 1678] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Feb 06 03:48:28.960769 2026] [:error] [pid 1663:tid 1694] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Fri Feb 06 03:48:29.221228 2026] [:error] [pid 1663:tid 1690] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/whm-cp.php
[Fri Feb 06 03:48:29.464154 2026] [:error] [pid 1663:tid 1695] [client 20.119.172.147:3775] File does not exist: /usr/local/apache/htdocs/suspended-page/pu.php
[Fri Feb 06 03:48:29.684953 2026] [:error] [pid 1663:tid 1682] [client 20.119.172.147:3775] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aYT0DV9EQrJaKkABjK99qgAAAAk"]
[Fri Feb 06 03:48:33.282312 2026] [:error] [pid 34582:tid 34601] [client 20.119.172.147:8594] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aYT0EeDeJq1JGssYG6xFSAAAARA"]
[Fri Feb 06 03:48:36.192734 2026] [:error] [pid 34582:tid 34597] [client 20.119.172.147:12850] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aYT0FODeJq1JGssYG6xFWAAAAQw"]
[Fri Feb 06 03:48:49.724468 2026] [:error] [pid 1664:tid 1716] [client 20.119.172.147:7376] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/za2.php"] [unique_id "aYT0Ie_0lM6yA3VnvQVSWwAAAFA"]
[Fri Feb 06 03:48:53.242424 2026] [:error] [pid 1665:tid 1741] [client 20.119.172.147:13370] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/za2.php"] [unique_id "aYT0JTYZLE6gThXvZMp7nQAAAI4"]
[Fri Feb 06 03:48:54.648572 2026] [:error] [pid 1665:tid 1738] [client 20.119.172.147:4195] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/za2.php"] [unique_id "aYT0JjYZLE6gThXvZMp7ogAAAIs"]
[Fri Feb 06 03:48:58.400714 2026] [:error] [pid 1773:tid 1797] [client 20.119.172.147:4986] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/za2.php"] [unique_id "aYT0KjYbySBHYmKOdJ-CqAAAAM4"]
[Fri Feb 06 03:49:02.220363 2026] [:error] [pid 1663:tid 1687] [client 20.119.172.147:1095] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z.php"] [unique_id "aYT0Ll9EQrJaKkABjK996AAAAA4"]
[Fri Feb 06 03:49:16.468705 2026] [:error] [pid 1663:tid 1691] [client 20.119.172.147:4955] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmanz.php"] [unique_id "aYT0PF9EQrJaKkABjK99_QAAABI"]
[Fri Feb 06 03:49:18.831030 2026] [:error] [pid 1663:tid 1692] [client 20.119.172.147:4227] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmanz.php"] [unique_id "aYT0Pl9EQrJaKkABjK9-AwAAABM"]
[Fri Feb 06 03:49:22.488194 2026] [:error] [pid 1773:tid 1784] [client 20.119.172.147:13339] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmanz.php"] [unique_id "aYT0QjYbySBHYmKOdJ-C0gAAAMM"]
[Fri Feb 06 03:49:27.805561 2026] [:error] [pid 1663:tid 1689] [client 20.119.172.147:4258] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmanz.php"] [unique_id "aYT0R19EQrJaKkABjK9-EwAAABA"]
[Fri Feb 06 03:49:32.660987 2026] [:error] [pid 34582:tid 34598] [client 20.119.172.147:9132] File does not exist: /usr/local/apache/htdocs/suspended-page/zzz.php
[Fri Feb 06 03:49:32.864249 2026] [:error] [pid 34582:tid 34602] [client 20.119.172.147:9132] File does not exist: /usr/local/apache/htdocs/suspended-page/codehu.php
[Fri Feb 06 03:49:33.087703 2026] [:error] [pid 34582:tid 34587] [client 20.119.172.147:9132] File does not exist: /usr/local/apache/htdocs/suspended-page/resp.php
[Fri Feb 06 03:49:33.287759 2026] [:error] [pid 34582:tid 34609] [client 20.119.172.147:9132] [client 20.119.172.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYT0TeDeJq1JGssYG6xF5QAAARg"]
[Fri Feb 06 03:49:35.574354 2026] [:error] [pid 34582:tid 34585] [client 20.119.172.147:13330] [client 20.119.172.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYT0T-DeJq1JGssYG6xF8AAAAQA"]
[Fri Feb 06 03:49:36.844484 2026] [:error] [pid 34582:tid 34590] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Feb 06 03:49:37.073298 2026] [:error] [pid 34582:tid 34594] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Feb 06 03:49:37.278972 2026] [:error] [pid 34582:tid 34605] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/bs5.php
[Fri Feb 06 03:49:37.520879 2026] [:error] [pid 34582:tid 34600] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/ednse.php
[Fri Feb 06 03:49:37.790029 2026] [:error] [pid 34582:tid 34603] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Feb 06 03:49:38.141047 2026] [:error] [pid 34582:tid 34607] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/niett.php
[Fri Feb 06 03:49:38.393897 2026] [:error] [pid 34582:tid 34602] [client 20.119.172.147:11725] File does not exist: /usr/local/apache/htdocs/suspended-page/puibr.php
[Fri Feb 06 03:49:38.595150 2026] [:error] [pid 34582:tid 34597] [client 20.119.172.147:11725] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/past1.php"] [unique_id "aYT0UuDeJq1JGssYG6xGAwAAAQw"]
[Fri Feb 06 03:49:40.523041 2026] [:error] [pid 1665:tid 1741] [client 20.119.172.147:7731] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/past1.php"] [unique_id "aYT0VDYZLE6gThXvZMp70QAAAI4"]
[Fri Feb 06 03:49:42.222635 2026] [:error] [pid 34582:tid 34607] [client 20.119.172.147:13734] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/past1.php"] [unique_id "aYT0VuDeJq1JGssYG6xGFgAAARY"]
[Fri Feb 06 03:49:43.053951 2026] [:error] [pid 1665:tid 1740] [client 20.119.172.147:5680] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/past1.php"] [unique_id "aYT0VzYZLE6gThXvZMp71QAAAI0"]
[Fri Feb 06 03:49:47.864382 2026] [:error] [pid 1665:tid 1735] [client 20.119.172.147:4982] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/smp.php"] [unique_id "aYT0WzYZLE6gThXvZMp71wAAAIg"]
[Fri Feb 06 03:49:52.843610 2026] [:error] [pid 1663:tid 1679] [client 20.119.172.147:13313] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/smp.php"] [unique_id "aYT0YF9EQrJaKkABjK9-MwAAAAY"]
[Fri Feb 06 03:49:55.340634 2026] [:error] [pid 1665:tid 1737] [client 20.119.172.147:5289] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/smp.php"] [unique_id "aYT0YzYZLE6gThXvZMp76QAAAIo"]
[Fri Feb 06 03:49:56.979198 2026] [:error] [pid 1663:tid 1686] [client 20.119.172.147:4215] [client 20.119.172.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/smp.php"] [unique_id "aYT0ZF9EQrJaKkABjK9-OgAAAA0"]
[Fri Feb 06 04:28:22.138198 2026] [:error] [pid 1663:tid 1673] [client 20.119.174.73:4772] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Feb 06 06:07:05.457362 2026] [:error] [pid 1665:tid 1727] [client 147.135.212.202:50434] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYUUiTYZLE6gThXvZMqmiwAAAIA"]
[Fri Feb 06 06:07:07.495437 2026] [:error] [pid 1773:tid 1803] [client 147.135.212.202:49622] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYUUizYbySBHYmKOdJ-6CAAAANQ"]
[Fri Feb 06 06:07:09.563657 2026] [:error] [pid 1663:tid 1694] [client 147.135.212.202:49624] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYUUjV9EQrJaKkABjK-pUgAAABU"]
[Fri Feb 06 06:07:11.665069 2026] [:error] [pid 1665:tid 1742] [client 147.135.212.202:49634] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYUUjzYZLE6gThXvZMqmwwAAAI8"]
[Fri Feb 06 06:07:13.858281 2026] [:error] [pid 1664:tid 1706] [client 147.135.212.202:49644] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYUUke_0lM6yA3VnvQWAeQAAAEY"]
[Fri Feb 06 06:07:16.019627 2026] [:error] [pid 1773:tid 1792] [client 147.135.212.202:49370] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYUUlDYbySBHYmKOdJ-6bgAAAMk"]
[Fri Feb 06 06:07:17.996742 2026] [:error] [pid 1773:tid 1796] [client 147.135.212.202:49374] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYUUlTYbySBHYmKOdJ-6iAAAAM0"]
[Fri Feb 06 06:07:20.301001 2026] [:error] [pid 1665:tid 1732] [client 147.135.212.202:49378] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYUUmDYZLE6gThXvZMqnOgAAAIU"]
[Fri Feb 06 06:07:22.392648 2026] [:error] [pid 34582:tid 34590] [client 147.135.212.202:49386] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYUUmuDeJq1JGssYG6yOBQAAAQU"]
[Fri Feb 06 06:07:24.461042 2026] [:error] [pid 1664:tid 1712] [client 147.135.212.202:49390] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYUUnO_0lM6yA3VnvQWBJwAAAEw"]
[Fri Feb 06 06:07:26.368570 2026] [:error] [pid 1663:tid 1690] [client 147.135.212.202:55216] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYUUnl9EQrJaKkABjK-qhQAAABE"]
[Fri Feb 06 06:07:28.487267 2026] [:error] [pid 1665:tid 1731] [client 147.135.212.202:55218] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYUUoDYZLE6gThXvZMqn2AAAAIQ"]
[Fri Feb 06 06:07:30.544966 2026] [:error] [pid 1663:tid 1678] [client 147.135.212.202:55230] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYUUol9EQrJaKkABjK-q6gAAAAU"]
[Fri Feb 06 06:07:32.529781 2026] [:error] [pid 1665:tid 1739] [client 147.135.212.202:55232] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYUUpDYZLE6gThXvZMqoJAAAAIw"]
[Fri Feb 06 06:07:34.541507 2026] [:error] [pid 1773:tid 1807] [client 147.135.212.202:55242] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYUUpjYbySBHYmKOdJ-7dgAAANg"]
[Fri Feb 06 06:07:36.541605 2026] [:error] [pid 34582:tid 34599] [client 147.135.212.202:44750] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYUUqODeJq1JGssYG6yPPgAAAQ4"]
[Fri Feb 06 06:07:38.615071 2026] [:error] [pid 1664:tid 1711] [client 147.135.212.202:44760] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYUUqu_0lM6yA3VnvQWCTwAAAEs"]
[Fri Feb 06 06:07:40.662040 2026] [:error] [pid 1665:tid 1749] [client 147.135.212.202:44766] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYUUrDYZLE6gThXvZMqo7gAAAJY"]
[Fri Feb 06 06:07:42.677158 2026] [:error] [pid 1665:tid 1732] [client 147.135.212.202:44772] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYUUrjYZLE6gThXvZMqpIAAAAIU"]
[Fri Feb 06 06:07:44.654388 2026] [:error] [pid 1665:tid 1744] [client 147.135.212.202:44782] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYUUsDYZLE6gThXvZMqpUAAAAJE"]
[Fri Feb 06 06:07:46.630598 2026] [:error] [pid 1664:tid 1710] [client 147.135.212.202:34642] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYUUsu_0lM6yA3VnvQWC_wAAAEo"]
[Fri Feb 06 06:07:48.637187 2026] [:error] [pid 34582:tid 34609] [client 147.135.212.202:34652] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYUUtODeJq1JGssYG6yQTwAAARg"]
[Fri Feb 06 06:07:50.605100 2026] [:error] [pid 1773:tid 1790] [client 147.135.212.202:34666] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYUUtjYbySBHYmKOdJ-85wAAAMc"]
[Fri Feb 06 06:07:52.617299 2026] [:error] [pid 34582:tid 34600] [client 147.135.212.202:34678] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYUUuODeJq1JGssYG6yQtAAAAQ8"]
[Fri Feb 06 06:07:54.587968 2026] [:error] [pid 34582:tid 34602] [client 147.135.212.202:34690] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYUUuuDeJq1JGssYG6yQ8QAAARE"]
[Fri Feb 06 06:07:56.535208 2026] [:error] [pid 1665:tid 1751] [client 147.135.212.202:56140] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYUUvDYZLE6gThXvZMqqTQAAAJg"]
[Fri Feb 06 06:07:58.513972 2026] [:error] [pid 1665:tid 1730] [client 147.135.212.202:56156] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYUUvjYZLE6gThXvZMqqgwAAAIM"]
[Fri Feb 06 06:08:00.449607 2026] [:error] [pid 1773:tid 1788] [client 147.135.212.202:56164] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYUUwDYbySBHYmKOdJ-9ywAAAMU"]
[Fri Feb 06 06:08:02.599742 2026] [:error] [pid 1664:tid 1718] [client 147.135.212.202:56166] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYUUwu_0lM6yA3VnvQWEowAAAFI"]
[Fri Feb 06 06:08:23.257648 2026] [:error] [pid 1665:tid 1736] [client 147.135.212.202:56180] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYUU1zYZLE6gThXvZMqsvgAAAIk"]
[Fri Feb 06 06:08:25.156621 2026] [:error] [pid 1663:tid 1682] [client 147.135.212.202:48268] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYUU2V9EQrJaKkABjK-vngAAAAk"]
[Fri Feb 06 06:08:27.236608 2026] [:error] [pid 34582:tid 34586] [client 147.135.212.202:42370] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYUU2-DeJq1JGssYG6yUzwAAAQE"]
[Fri Feb 06 06:08:29.377074 2026] [:error] [pid 1773:tid 1805] [client 147.135.212.202:42380] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYUU3TYbySBHYmKOdJ_APQAAANY"]
[Fri Feb 06 06:08:31.473924 2026] [:error] [pid 1664:tid 1700] [client 147.135.212.202:42394] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYUU3-_0lM6yA3VnvQWHewAAAEA"]
[Fri Feb 06 06:08:33.436053 2026] [:error] [pid 1773:tid 1797] [client 147.135.212.202:42398] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYUU4TYbySBHYmKOdJ_AqQAAAM4"]
[Fri Feb 06 06:08:35.547422 2026] [:error] [pid 1773:tid 1802] [client 147.135.212.202:58676] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYUU4zYbySBHYmKOdJ_BHgAAANM"]
[Fri Feb 06 06:08:37.628618 2026] [:error] [pid 34582:tid 34605] [client 147.135.212.202:58688] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYUU5eDeJq1JGssYG6yV2QAAARQ"]
[Fri Feb 06 06:08:39.569188 2026] [:error] [pid 1664:tid 1714] [client 147.135.212.202:58698] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYUU5-_0lM6yA3VnvQWIGgAAAE4"]
[Fri Feb 06 06:08:41.477868 2026] [:error] [pid 1664:tid 1709] [client 147.135.212.202:58710] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYUU6e_0lM6yA3VnvQWIUgAAAEk"]
[Fri Feb 06 06:08:43.384004 2026] [:error] [pid 1665:tid 1736] [client 147.135.212.202:58724] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYUU6zYZLE6gThXvZMqungAAAIk"]
[Fri Feb 06 06:08:45.337752 2026] [:error] [pid 34582:tid 34590] [client 147.135.212.202:36196] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYUU7eDeJq1JGssYG6yWiQAAAQU"]
[Fri Feb 06 06:08:48.736392 2026] [:error] [pid 1773:tid 1794] [client 147.135.212.202:36202] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYUU8DYbySBHYmKOdJ_CkwAAAMs"]
[Fri Feb 06 06:08:52.473630 2026] [:error] [pid 1665:tid 1732] [client 147.135.212.202:36218] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYUU9DYZLE6gThXvZMqv1QAAAIU"]
[Fri Feb 06 10:55:57.704919 2026] [:error] [pid 3513:tid 3527] [client 111.172.249.49:57092] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYVYPTSw3-HAlzpqSxzqKAAAAUw"]
[Fri Feb 06 12:57:21.095693 2026] [:error] [pid 3380:tid 3387] [client 51.83.237.175:60920] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYV0sRFAlUvBGSBK2jeXewAAAAM"]
[Fri Feb 06 12:57:22.194158 2026] [:error] [pid 3380:tid 3399] [client 51.83.237.175:46758] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aYV0shFAlUvBGSBK2jeXfQAAAA8"]
[Fri Feb 06 12:57:23.299974 2026] [:error] [pid 3513:tid 3524] [client 51.83.237.175:46770] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYV0szSw3-HAlzpqSxwl0AAAAUk"]
[Fri Feb 06 12:57:24.460816 2026] [:error] [pid 3382:tid 3442] [client 51.83.237.175:46776] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aYV0tMIgU1HR0rhYrE-aLgAAAII"]
[Fri Feb 06 12:57:25.342416 2026] [:error] [pid 3513:tid 3534] [client 51.83.237.175:46790] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYV0tTSw3-HAlzpqSxwl3AAAAVM"]
[Fri Feb 06 12:57:26.583234 2026] [:error] [pid 3513:tid 3539] [client 51.83.237.175:46804] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aYV0tjSw3-HAlzpqSxwl4AAAAVg"]
[Fri Feb 06 12:57:27.410885 2026] [:error] [pid 3381:tid 3426] [client 51.83.237.175:49022] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYV0ty81zqRg96ZREgi9VwAAAE0"]
[Fri Feb 06 12:57:28.924687 2026] [:error] [pid 3380:tid 3408] [client 51.83.237.175:49036] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aYV0uBFAlUvBGSBK2jeXqwAAABg"]
[Fri Feb 06 12:57:29.681854 2026] [:error] [pid 3477:tid 3493] [client 51.83.237.175:49038] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYV0ubL0Hdh40C7HYgW9ZgAAAM4"]
[Fri Feb 06 12:57:31.101461 2026] [:error] [pid 3381:tid 3419] [client 51.83.237.175:49052] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aYV0uy81zqRg96ZREgi9XwAAAEY"]
[Fri Feb 06 12:57:32.075799 2026] [:error] [pid 3477:tid 3492] [client 51.83.237.175:49066] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYV0vLL0Hdh40C7HYgW9bwAAAM0"]
[Fri Feb 06 12:57:33.064225 2026] [:error] [pid 3380:tid 3400] [client 51.83.237.175:49070] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYV0vRFAlUvBGSBK2jeXvQAAABA"]
[Fri Feb 06 12:57:34.491346 2026] [:error] [pid 3381:tid 3435] [client 51.83.237.175:49076] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYV0vi81zqRg96ZREgi9bgAAAFY"]
[Fri Feb 06 12:57:35.216248 2026] [:error] [pid 3513:tid 3524] [client 51.83.237.175:49084] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYV0vzSw3-HAlzpqSxwmCgAAAUk"]
[Fri Feb 06 12:57:37.170408 2026] [:error] [pid 3382:tid 3464] [client 51.83.237.175:54358] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYV0wcIgU1HR0rhYrE-aVgAAAJg"]
[Fri Feb 06 12:57:37.331159 2026] [:error] [pid 3381:tid 3435] [client 51.83.237.175:54372] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYV0wS81zqRg96ZREgi9gAAAAFY"]
[Fri Feb 06 12:57:39.368263 2026] [:error] [pid 3477:tid 3491] [client 51.83.237.175:54382] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYV0w7L0Hdh40C7HYgW9fwAAAMw"]
[Fri Feb 06 12:57:39.789328 2026] [:error] [pid 3513:tid 3518] [client 51.83.237.175:54396] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYV0wzSw3-HAlzpqSxwmMwAAAUM"]
[Fri Feb 06 12:57:41.628814 2026] [:error] [pid 3382:tid 3449] [client 51.83.237.175:54402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYV0xcIgU1HR0rhYrE-acAAAAIk"]
[Fri Feb 06 12:57:41.792464 2026] [:error] [pid 3380:tid 3388] [client 51.83.237.175:54412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYV0xRFAlUvBGSBK2jeYAQAAAAQ"]
[Fri Feb 06 12:57:43.799986 2026] [:error] [pid 3382:tid 3442] [client 51.83.237.175:54422] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYV0x8IgU1HR0rhYrE-aegAAAII"]
[Fri Feb 06 12:57:43.820877 2026] [:error] [pid 3477:tid 3492] [client 51.83.237.175:54434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYV0x7L0Hdh40C7HYgW9iAAAAM0"]
[Fri Feb 06 12:57:45.866184 2026] [:error] [pid 3380:tid 3396] [client 51.83.237.175:54450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYV0yRFAlUvBGSBK2jeYKQAAAAw"]
[Fri Feb 06 12:57:46.720139 2026] [:error] [pid 3380:tid 3398] [client 51.83.237.175:54466] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYV0yhFAlUvBGSBK2jeYMgAAAA4"]
[Fri Feb 06 12:57:48.492151 2026] [:error] [pid 3513:tid 3518] [client 51.83.237.175:42884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYV0zDSw3-HAlzpqSxwmdwAAAUM"]
[Fri Feb 06 12:57:49.378256 2026] [:error] [pid 3381:tid 3425] [client 51.83.237.175:42888] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYV0zS81zqRg96ZREgi9zAAAAEw"]
[Fri Feb 06 12:57:50.592979 2026] [:error] [pid 3380:tid 3401] [client 51.83.237.175:42902] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYV0zhFAlUvBGSBK2jeYSQAAABE"]
[Fri Feb 06 12:57:51.978980 2026] [:error] [pid 3477:tid 3491] [client 51.83.237.175:42906] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYV0z7L0Hdh40C7HYgW9mgAAAMw"]
[Fri Feb 06 12:57:52.660214 2026] [:error] [pid 3381:tid 3422] [client 51.83.237.175:42908] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYV00C81zqRg96ZREgi98AAAAEk"]
[Fri Feb 06 12:57:54.241492 2026] [:error] [pid 3477:tid 3490] [client 51.83.237.175:42910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYV00rL0Hdh40C7HYgW9oAAAAMs"]
[Fri Feb 06 12:57:54.736445 2026] [:error] [pid 3513:tid 3519] [client 51.83.237.175:42918] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYV00jSw3-HAlzpqSxwmuQAAAUQ"]
[Fri Feb 06 12:57:57.022885 2026] [:error] [pid 3380:tid 3392] [client 51.83.237.175:45568] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYV01RFAlUvBGSBK2jeYZgAAAAg"]
[Fri Feb 06 12:57:58.087649 2026] [:error] [pid 3477:tid 3491] [client 51.83.237.175:45584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYV01rL0Hdh40C7HYgW9qAAAAMw"]
[Fri Feb 06 12:57:59.680389 2026] [:error] [pid 3380:tid 3401] [client 51.83.237.175:45596] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYV01xFAlUvBGSBK2jeYdgAAABE"]
[Fri Feb 06 12:58:00.408307 2026] [:error] [pid 3382:tid 3458] [client 51.83.237.175:45612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYV02MIgU1HR0rhYrE-auwAAAJI"]
[Fri Feb 06 12:58:02.132476 2026] [:error] [pid 3380:tid 3407] [client 51.83.237.175:45614] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYV02hFAlUvBGSBK2jeYhQAAABc"]
[Fri Feb 06 12:58:03.479702 2026] [:error] [pid 3477:tid 3491] [client 51.83.237.175:45622] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYV027L0Hdh40C7HYgW9tgAAAMw"]
[Fri Feb 06 12:58:04.189389 2026] [:error] [pid 3380:tid 3391] [client 51.83.237.175:45638] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYV03BFAlUvBGSBK2jeYlgAAAAc"]
[Fri Feb 06 12:58:06.171504 2026] [:error] [pid 3380:tid 3397] [client 51.83.237.175:45644] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYV03hFAlUvBGSBK2jeYqwAAAA0"]
[Fri Feb 06 12:58:06.271405 2026] [:error] [pid 3380:tid 3385] [client 51.83.237.175:45652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYV03hFAlUvBGSBK2jeYrAAAAAE"]
[Fri Feb 06 12:58:08.597366 2026] [:error] [pid 3380:tid 3397] [client 51.83.237.175:60740] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYV04BFAlUvBGSBK2jeYxQAAAA0"]
[Fri Feb 06 12:58:08.793239 2026] [:error] [pid 3477:tid 3499] [client 51.83.237.175:60752] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYV04LL0Hdh40C7HYgW9wAAAANQ"]
[Fri Feb 06 12:58:10.833965 2026] [:error] [pid 3382:tid 3458] [client 51.83.237.175:60760] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYV04sIgU1HR0rhYrE-bFgAAAJI"]
[Fri Feb 06 12:58:10.997222 2026] [:error] [pid 3513:tid 3534] [client 51.83.237.175:60764] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYV04jSw3-HAlzpqSxwnMAAAAVM"]
[Fri Feb 06 12:58:12.833834 2026] [:error] [pid 3380:tid 3407] [client 51.83.237.175:60770] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYV05BFAlUvBGSBK2jeZGQAAABc"]
[Fri Feb 06 12:58:13.243022 2026] [:error] [pid 3380:tid 3400] [client 51.83.237.175:60778] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYV05RFAlUvBGSBK2jeZJQAAABA"]
[Fri Feb 06 12:58:15.296682 2026] [:error] [pid 3380:tid 3384] [client 51.83.237.175:60786] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYV05xFAlUvBGSBK2jeZUAAAAAA"]
[Fri Feb 06 12:58:15.348680 2026] [:error] [pid 3380:tid 3406] [client 51.83.237.175:60802] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYV05xFAlUvBGSBK2jeZUwAAABY"]
[Fri Feb 06 12:58:17.321338 2026] [:error] [pid 3382:tid 3451] [client 51.83.237.175:35616] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYV06cIgU1HR0rhYrE-bNgAAAIs"]
[Fri Feb 06 12:58:18.186953 2026] [:error] [pid 3380:tid 3401] [client 51.83.237.175:35626] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYV06hFAlUvBGSBK2jeZkQAAABE"]
[Fri Feb 06 12:58:19.503162 2026] [:error] [pid 3513:tid 3517] [client 51.83.237.175:35640] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYV06zSw3-HAlzpqSxwndwAAAUI"]
[Fri Feb 06 12:58:31.695945 2026] [:error] [pid 3380:tid 3400] [client 51.83.237.175:35652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYV09xFAlUvBGSBK2jeaiAAAABA"]
[Fri Feb 06 12:58:33.472822 2026] [:error] [pid 3382:tid 3442] [client 51.83.237.175:35642] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYV0-cIgU1HR0rhYrE-bYgAAAII"]
[Fri Feb 06 12:58:33.669999 2026] [:error] [pid 3382:tid 3458] [client 51.83.237.175:50106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYV0-cIgU1HR0rhYrE-bZAAAAJI"]
[Fri Feb 06 12:58:35.692595 2026] [:error] [pid 3382:tid 3445] [client 51.83.237.175:50122] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYV0-8IgU1HR0rhYrE-baAAAAIU"]
[Fri Feb 06 12:58:37.043725 2026] [:error] [pid 3513:tid 3531] [client 51.83.237.175:46144] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYV0_TSw3-HAlzpqSxwnwQAAAVA"]
[Fri Feb 06 12:58:38.564082 2026] [:error] [pid 3381:tid 3428] [client 51.83.237.175:46148] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYV0_i81zqRg96ZREgi_XwAAAE8"]
[Fri Feb 06 12:58:39.229583 2026] [:error] [pid 3513:tid 3528] [client 51.83.237.175:46162] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYV0_zSw3-HAlzpqSxwn1QAAAU0"]
[Fri Feb 06 12:58:40.888711 2026] [:error] [pid 3380:tid 3396] [client 51.83.237.175:46172] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYV1ABFAlUvBGSBK2jebCwAAAAw"]
[Fri Feb 06 12:58:42.334828 2026] [:error] [pid 3380:tid 3387] [client 51.83.237.175:46176] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1AhFAlUvBGSBK2jebIgAAAAM"]
[Fri Feb 06 12:58:42.604046 2026] [:error] [pid 3513:tid 3523] [client 51.83.237.175:46188] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYV1AjSw3-HAlzpqSxwn6wAAAUg"]
[Fri Feb 06 12:58:43.211703 2026] [:error] [pid 3513:tid 3528] [client 51.83.237.175:46194] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYV1AzSw3-HAlzpqSxwn8AAAAU0"]
[Fri Feb 06 12:58:45.916205 2026] [:error] [pid 3382:tid 3461] [client 51.83.237.175:46196] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYV1BcIgU1HR0rhYrE-b0AAAAJU"]
[Fri Feb 06 12:58:46.091567 2026] [:error] [pid 3380:tid 3406] [client 51.83.237.175:46208] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYV1BhFAlUvBGSBK2jebWgAAABY"]
[Fri Feb 06 12:58:47.214792 2026] [:error] [pid 3513:tid 3523] [client 51.83.237.175:56556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1BzSw3-HAlzpqSxwoCwAAAUg"]
[Fri Feb 06 12:58:48.210369 2026] [:error] [pid 3380:tid 3406] [client 51.83.237.175:56566] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYV1CBFAlUvBGSBK2jebewAAABY"]
[Fri Feb 06 12:58:48.712429 2026] [:error] [pid 3381:tid 3421] [client 51.83.237.175:56580] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYV1CC81zqRg96ZREgi_yQAAAEg"]
[Fri Feb 06 12:58:48.784729 2026] [:error] [pid 3381:tid 3417] [client 51.83.237.175:56596] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1CC81zqRg96ZREgi_ygAAAEQ"]
[Fri Feb 06 12:58:50.318651 2026] [:error] [pid 3381:tid 3434] [client 51.83.237.175:56604] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYV1Ci81zqRg96ZREgi_2wAAAFU"]
[Fri Feb 06 12:58:51.726741 2026] [:error] [pid 3477:tid 3483] [client 51.83.237.175:56614] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYV1C7L0Hdh40C7HYgW_JAAAAMQ"]
[Fri Feb 06 12:58:52.923061 2026] [:error] [pid 3477:tid 3494] [client 51.83.237.175:56618] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1DLL0Hdh40C7HYgW_LAAAAM8"]
[Fri Feb 06 12:58:53.695158 2026] [:error] [pid 3477:tid 3485] [client 51.83.237.175:56624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYV1DbL0Hdh40C7HYgW_MgAAAMY"]
[Fri Feb 06 12:58:54.742820 2026] [:error] [pid 3513:tid 3520] [client 51.83.237.175:56626] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYV1DjSw3-HAlzpqSxwoRAAAAUU"]
[Fri Feb 06 12:58:56.897700 2026] [:error] [pid 3477:tid 3488] [client 51.83.237.175:59472] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYV1ELL0Hdh40C7HYgW_TgAAAMk"]
[Fri Feb 06 12:58:57.589852 2026] [:error] [pid 3381:tid 3434] [client 51.83.237.175:59478] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYV1ES81zqRg96ZREgjALgAAAFU"]
[Fri Feb 06 12:59:00.670967 2026] [:error] [pid 3513:tid 3534] [client 51.83.237.175:59484] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYV1FDSw3-HAlzpqSxwoXgAAAVM"]
[Fri Feb 06 12:59:00.933775 2026] [:error] [pid 3380:tid 3401] [client 51.83.237.175:59490] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYV1FBFAlUvBGSBK2jeb2AAAABE"]
[Fri Feb 06 12:59:03.451269 2026] [:error] [pid 3381:tid 3429] [client 51.83.237.175:59506] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYV1Fy81zqRg96ZREgjAWAAAAFA"]
[Fri Feb 06 12:59:03.897736 2026] [:error] [pid 3380:tid 3391] [client 51.83.237.175:59518] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYV1FxFAlUvBGSBK2jeb7AAAAAc"]
[Fri Feb 06 12:59:05.643761 2026] [:error] [pid 3380:tid 3406] [client 51.83.237.175:59532] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYV1GRFAlUvBGSBK2jeb-AAAABY"]
[Fri Feb 06 12:59:06.782457 2026] [:error] [pid 3477:tid 3500] [client 51.83.237.175:59536] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYV1GrL0Hdh40C7HYgW_swAAANU"]
[Fri Feb 06 12:59:07.557133 2026] [:error] [pid 3513:tid 3519] [client 51.83.237.175:40736] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYV1GzSw3-HAlzpqSxwoowAAAUQ"]
[Fri Feb 06 12:59:09.232340 2026] [:error] [pid 3477:tid 3500] [client 51.83.237.175:40742] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYV1HbL0Hdh40C7HYgW_zAAAANU"]
[Fri Feb 06 12:59:09.751330 2026] [:error] [pid 3380:tid 3390] [client 51.83.237.175:40746] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYV1HRFAlUvBGSBK2jecGAAAAAY"]
[Fri Feb 06 12:59:11.384252 2026] [:error] [pid 3513:tid 3523] [client 51.83.237.175:40762] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYV1HzSw3-HAlzpqSxwowgAAAUg"]
[Fri Feb 06 12:59:12.152802 2026] [:error] [pid 3381:tid 3421] [client 51.83.237.175:40774] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYV1IC81zqRg96ZREgjA_AAAAEg"]
[Fri Feb 06 12:59:14.086509 2026] [:error] [pid 3381:tid 3414] [client 51.83.237.175:40786] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYV1Ii81zqRg96ZREgjBLQAAAEE"]
[Fri Feb 06 12:59:14.141147 2026] [:error] [pid 3477:tid 3484] [client 51.83.237.175:40802] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYV1IrL0Hdh40C7HYgW_3QAAAMU"]
[Fri Feb 06 12:59:16.679050 2026] [:error] [pid 3380:tid 3403] [client 51.83.237.175:40816] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYV1JBFAlUvBGSBK2jecZAAAABM"]
[Fri Feb 06 12:59:16.978823 2026] [:error] [pid 3380:tid 3408] [client 51.83.237.175:45602] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYV1JBFAlUvBGSBK2jecagAAABg"]
[Fri Feb 06 12:59:19.467761 2026] [:error] [pid 3513:tid 3535] [client 51.83.237.175:45606] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYV1JzSw3-HAlzpqSxwpBAAAAVQ"]
[Fri Feb 06 12:59:21.830163 2026] [:error] [pid 3477:tid 3489] [client 51.83.237.175:45608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYV1KbL0Hdh40C7HYgXAFwAAAMo"]
[Fri Feb 06 12:59:23.953950 2026] [:error] [pid 3382:tid 3464] [client 51.83.237.175:45614] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYV1K8IgU1HR0rhYrE-dfQAAAJg"]
[Fri Feb 06 12:59:24.006109 2026] [:error] [pid 3513:tid 3535] [client 51.83.237.175:45630] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYV1LDSw3-HAlzpqSxwpRAAAAVQ"]
[Fri Feb 06 12:59:26.457564 2026] [:error] [pid 3382:tid 3443] [client 51.83.237.175:45636] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYV1LsIgU1HR0rhYrE-dhgAAAIM"]
[Fri Feb 06 12:59:27.089064 2026] [:error] [pid 3381:tid 3426] [client 51.83.237.175:59134] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYV1Ly81zqRg96ZREgjBrwAAAE0"]
[Fri Feb 06 12:59:28.942816 2026] [:error] [pid 3382:tid 3441] [client 51.83.237.175:59142] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYV1MMIgU1HR0rhYrE-dmgAAAIE"]
[Fri Feb 06 12:59:30.490230 2026] [:error] [pid 3382:tid 3459] [client 51.83.237.175:59154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYV1MsIgU1HR0rhYrE-dowAAAJM"]
[Fri Feb 06 12:59:40.939191 2026] [:error] [pid 3382:tid 3447] [client 51.83.237.175:35768] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYV1PMIgU1HR0rhYrE-d-gAAAIc"]
[Fri Feb 06 12:59:41.732765 2026] [:error] [pid 3513:tid 3527] [client 51.83.237.175:59186] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYV1PTSw3-HAlzpqSxwqLAAAAUw"]
[Fri Feb 06 12:59:43.466186 2026] [:error] [pid 3513:tid 3528] [client 51.83.237.175:35772] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1PzSw3-HAlzpqSxwqTQAAAU0"]
[Fri Feb 06 12:59:43.527131 2026] [:error] [pid 3380:tid 3387] [client 51.83.237.175:35774] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYV1PxFAlUvBGSBK2jedFwAAAAM"]
[Fri Feb 06 12:59:43.969200 2026] [:error] [pid 3477:tid 3502] [client 51.83.237.175:35788] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYV1P7L0Hdh40C7HYgXA6gAAANc"]
[Fri Feb 06 12:59:44.078015 2026] [:error] [pid 3381:tid 3428] [client 51.83.237.175:59176] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYV1QC81zqRg96ZREgjCMAAAAE8"]
[Fri Feb 06 12:59:46.424222 2026] [:error] [pid 3381:tid 3429] [client 51.83.237.175:35800] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYV1Qi81zqRg96ZREgjCPAAAAFA"]
[Fri Feb 06 12:59:47.102238 2026] [:error] [pid 3513:tid 3531] [client 51.83.237.175:53144] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYV1QzSw3-HAlzpqSxwqWAAAAVA"]
[Fri Feb 06 12:59:47.194953 2026] [:error] [pid 3380:tid 3386] [client 51.83.237.175:53154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYV1QxFAlUvBGSBK2jedMAAAAAI"]
[Fri Feb 06 12:59:48.138005 2026] [:error] [pid 3513:tid 3533] [client 51.83.237.175:53170] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1RDSw3-HAlzpqSxwqXwAAAVI"]
[Fri Feb 06 12:59:49.308905 2026] [:error] [pid 3382:tid 3454] [client 51.83.237.175:53180] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYV1RcIgU1HR0rhYrE-eJQAAAI4"]
[Fri Feb 06 12:59:51.232611 2026] [:error] [pid 3380:tid 3405] [client 51.83.237.175:53186] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYV1RxFAlUvBGSBK2jedVAAAABU"]
[Fri Feb 06 12:59:51.389617 2026] [:error] [pid 3381:tid 3422] [client 51.83.237.175:53188] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYV1Ry81zqRg96ZREgjCagAAAEk"]
[Fri Feb 06 12:59:52.371419 2026] [:error] [pid 3477:tid 3485] [client 51.83.237.175:53196] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYV1SLL0Hdh40C7HYgXBHAAAAMY"]
[Fri Feb 06 12:59:54.623334 2026] [:error] [pid 3513:tid 3531] [client 51.83.237.175:53202] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYV1SjSw3-HAlzpqSxwqhAAAAVA"]
[Fri Feb 06 12:59:54.849116 2026] [:error] [pid 3513:tid 3526] [client 51.83.237.175:53204] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYV1SjSw3-HAlzpqSxwqhwAAAUs"]
[Fri Feb 06 12:59:55.282705 2026] [:error] [pid 3477:tid 3499] [client 51.83.237.175:53218] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYV1S7L0Hdh40C7HYgXBKAAAANQ"]
[Fri Feb 06 12:59:56.929831 2026] [:error] [pid 3381:tid 3424] [client 51.83.237.175:51584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYV1TC81zqRg96ZREgjCiwAAAEs"]
[Fri Feb 06 12:59:57.701756 2026] [:error] [pid 3380:tid 3391] [client 51.83.237.175:51594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYV1TRFAlUvBGSBK2jedgAAAAAc"]
[Fri Feb 06 12:59:57.773168 2026] [:error] [pid 3381:tid 3433] [client 51.83.237.175:51602] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYV1TS81zqRg96ZREgjCkQAAAFQ"]
[Fri Feb 06 12:59:59.614011 2026] [:error] [pid 3381:tid 3428] [client 51.83.237.175:51608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYV1Ty81zqRg96ZREgjCpAAAAE8"]
[Fri Feb 06 13:00:00.471372 2026] [:error] [pid 3513:tid 3527] [client 51.83.237.175:51622] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYV1UDSw3-HAlzpqSxwqpgAAAUw"]
[Fri Feb 06 13:00:00.906125 2026] [:error] [pid 3477:tid 3487] [client 51.83.237.175:51634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYV1ULL0Hdh40C7HYgXBOgAAAMg"]
[Fri Feb 06 13:00:02.310512 2026] [:error] [pid 3380:tid 3405] [client 51.83.237.175:51646] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1UhFAlUvBGSBK2jedkgAAABU"]
[Fri Feb 06 13:00:03.656884 2026] [:error] [pid 3381:tid 3414] [client 51.83.237.175:51654] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYV1Uy81zqRg96ZREgjCrwAAAEE"]
[Fri Feb 06 13:00:04.006790 2026] [:error] [pid 3513:tid 3527] [client 51.83.237.175:51658] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYV1VDSw3-HAlzpqSxwqrgAAAUw"]
[Fri Feb 06 13:00:05.962171 2026] [:error] [pid 3513:tid 3521] [client 51.83.237.175:51666] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYV1VTSw3-HAlzpqSxwqtAAAAUY"]
[Fri Feb 06 13:00:06.474372 2026] [:error] [pid 3380:tid 3404] [client 51.83.237.175:51676] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV1VhFAlUvBGSBK2jedpgAAABQ"]
[Fri Feb 06 13:00:07.244343 2026] [:error] [pid 3513:tid 3515] [client 51.83.237.175:33900] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYV1VzSw3-HAlzpqSxwqtQAAAUA"]
[Fri Feb 06 13:00:08.483147 2026] [:error] [pid 3513:tid 3517] [client 51.83.237.175:33916] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYV1WDSw3-HAlzpqSxwqtwAAAUI"]
[Fri Feb 06 13:00:09.764571 2026] [:error] [pid 3513:tid 3531] [client 51.83.237.175:33928] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYV1WTSw3-HAlzpqSxwqvQAAAVA"]
[Fri Feb 06 13:00:11.188171 2026] [:error] [pid 3381:tid 3430] [client 51.83.237.175:33942] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYV1Wy81zqRg96ZREgjCzQAAAFE"]
[Fri Feb 06 13:00:12.069183 2026] [:error] [pid 3382:tid 3464] [client 51.83.237.175:33944] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYV1XMIgU1HR0rhYrE-ekwAAAJg"]
[Fri Feb 06 13:00:14.744603 2026] [:error] [pid 3382:tid 3452] [client 51.83.237.175:33966] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYV1XsIgU1HR0rhYrE-enwAAAIw"]
[Fri Feb 06 13:00:14.778141 2026] [:error] [pid 3513:tid 3526] [client 51.83.237.175:33952] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYV1XjSw3-HAlzpqSxwqxwAAAUs"]
[Fri Feb 06 13:00:17.110185 2026] [:error] [pid 3477:tid 3491] [client 51.83.237.175:37242] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYV1YbL0Hdh40C7HYgXB2AAAAMw"]
[Fri Feb 06 13:00:17.951808 2026] [:error] [pid 3380:tid 3391] [client 51.83.237.175:37254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYV1YRFAlUvBGSBK2jed7QAAAAc"]
[Fri Feb 06 13:00:19.394845 2026] [:error] [pid 3477:tid 3499] [client 51.83.237.175:37260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYV1Y7L0Hdh40C7HYgXB3QAAANQ"]
[Fri Feb 06 13:00:20.747144 2026] [:error] [pid 3381:tid 3418] [client 51.83.237.175:37274] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYV1ZC81zqRg96ZREgjC_gAAAEU"]
[Fri Feb 06 13:00:22.133796 2026] [:error] [pid 3380:tid 3396] [client 51.83.237.175:37290] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYV1ZhFAlUvBGSBK2jeeBQAAAAw"]
[Fri Feb 06 13:00:23.325220 2026] [:error] [pid 3382:tid 3463] [client 51.83.237.175:37292] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYV1Z8IgU1HR0rhYrE-e2gAAAJc"]
[Fri Feb 06 13:00:24.043051 2026] [:error] [pid 3477:tid 3493] [client 51.83.237.175:37300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYV1aLL0Hdh40C7HYgXB7AAAAM4"]
[Fri Feb 06 13:00:25.486889 2026] [:error] [pid 3477:tid 3494] [client 51.83.237.175:37314] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYV1abL0Hdh40C7HYgXB9wAAAM8"]
[Fri Feb 06 13:00:26.981943 2026] [:error] [pid 3382:tid 3446] [client 51.83.237.175:44012] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYV1asIgU1HR0rhYrE-e_gAAAIY"]
[Fri Feb 06 13:00:28.820618 2026] [:error] [pid 3513:tid 3537] [client 51.83.237.175:44026] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYV1bDSw3-HAlzpqSxwrHAAAAVY"]
[Fri Feb 06 13:00:29.643821 2026] [:error] [pid 3381:tid 3424] [client 51.83.237.175:44036] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYV1bS81zqRg96ZREgjDRgAAAEs"]
[Fri Feb 06 13:00:31.910583 2026] [:error] [pid 3380:tid 3393] [client 51.83.237.175:44040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYV1bxFAlUvBGSBK2jeecQAAAAk"]
[Fri Feb 06 13:00:32.117057 2026] [:error] [pid 3382:tid 3448] [client 51.83.237.175:44054] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYV1cMIgU1HR0rhYrE-fLQAAAIg"]
[Fri Feb 06 13:00:34.199226 2026] [:error] [pid 3381:tid 3433] [client 51.83.237.175:44068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYV1ci81zqRg96ZREgjDYAAAAFQ"]
[Fri Feb 06 13:00:34.584050 2026] [:error] [pid 3513:tid 3538] [client 51.83.237.175:44080] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYV1cjSw3-HAlzpqSxwrQgAAAVc"]
[Fri Feb 06 13:00:36.710864 2026] [:error] [pid 3381:tid 3433] [client 51.83.237.175:44096] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYV1dC81zqRg96ZREgjDbwAAAFQ"]
[Fri Feb 06 13:00:39.755143 2026] [:error] [pid 3477:tid 3491] [client 51.83.237.175:52844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYV1d7L0Hdh40C7HYgXCRgAAAMw"]
[Fri Feb 06 13:01:06.586569 2026] [:error] [pid 3380:tid 3389] [client 51.83.237.175:49564] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aYV1khFAlUvBGSBK2jegEQAAAAU"]
[Fri Feb 06 13:01:09.714192 2026] [:error] [pid 3513:tid 3527] [client 51.83.237.175:40898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYV1lTSw3-HAlzpqSxwsFQAAAUw"]
[Fri Feb 06 13:01:13.226081 2026] [:error] [pid 3380:tid 3401] [client 51.83.237.175:40910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYV1mRFAlUvBGSBK2jegRgAAABE"]
[Fri Feb 06 13:05:58.637533 2026] [:error] [pid 3381:tid 3420] [client 51.83.237.175:51912] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYV2ti81zqRg96ZREgjHuwAAAEc"]
[Fri Feb 06 13:06:00.936260 2026] [:error] [pid 3513:tid 3515] [client 51.83.237.175:42464] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYV2uDSw3-HAlzpqSxwv-AAAAUA"]
[Fri Feb 06 13:06:03.793205 2026] [:error] [pid 3513:tid 3520] [client 51.83.237.175:42476] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYV2uzSw3-HAlzpqSxwwAQAAAUU"]
[Fri Feb 06 13:06:06.973329 2026] [:error] [pid 3477:tid 3484] [client 51.83.237.175:38640] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYV2vrL0Hdh40C7HYgXHogAAAMU"]
[Fri Feb 06 13:06:11.569672 2026] [:error] [pid 3382:tid 3460] [client 51.83.237.175:38652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYV2w8IgU1HR0rhYrE-jqwAAAJQ"]
[Fri Feb 06 13:06:15.365537 2026] [:error] [pid 3382:tid 3447] [client 51.83.237.175:38660] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYV2x8IgU1HR0rhYrE-jrAAAAIc"]
[Fri Feb 06 13:06:20.872919 2026] [:error] [pid 3477:tid 3503] [client 51.83.237.175:45692] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYV2zLL0Hdh40C7HYgXHxAAAANg"]
[Fri Feb 06 13:06:24.632818 2026] [:error] [pid 3477:tid 3493] [client 51.83.237.175:45698] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYV20LL0Hdh40C7HYgXHzQAAAM4"]
[Fri Feb 06 13:06:28.232977 2026] [:error] [pid 3513:tid 3524] [client 51.83.237.175:37706] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYV21DSw3-HAlzpqSxwwPgAAAUk"]
[Fri Feb 06 13:06:30.502410 2026] [:error] [pid 3381:tid 3436] [client 51.83.237.175:37718] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYV21i81zqRg96ZREgjH8QAAAFc"]
[Fri Feb 06 13:06:33.553327 2026] [:error] [pid 3380:tid 3389] [client 51.83.237.175:37734] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYV22RFAlUvBGSBK2jem_wAAAAU"]
[Fri Feb 06 13:06:38.925744 2026] [:error] [pid 3380:tid 3386] [client 51.83.237.175:51556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYV23hFAlUvBGSBK2jenFwAAAAI"]
[Fri Feb 06 13:07:34.019949 2026] [:error] [pid 3380:tid 3387] [client 51.83.237.175:46584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYV3FhFAlUvBGSBK2jenqwAAAAM"]
[Fri Feb 06 13:07:36.982893 2026] [:error] [pid 3477:tid 3482] [client 51.83.237.175:46434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYV3GLL0Hdh40C7HYgXIZwAAAMM"]
[Fri Feb 06 13:07:40.909083 2026] [:error] [pid 3382:tid 3453] [client 51.83.237.175:46450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYV3HMIgU1HR0rhYrE-kQAAAAI0"]
[Fri Feb 06 13:07:43.929246 2026] [:error] [pid 3477:tid 3480] [client 51.83.237.175:46456] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYV3H7L0Hdh40C7HYgXIdAAAAME"]
[Fri Feb 06 13:07:49.688689 2026] [:error] [pid 3380:tid 3408] [client 51.83.237.175:56056] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYV3JRFAlUvBGSBK2jenzQAAABg"]
[Fri Feb 06 13:07:53.184213 2026] [:error] [pid 3513:tid 3527] [client 51.83.237.175:56070] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYV3KTSw3-HAlzpqSxwxCwAAAUw"]
[Fri Feb 06 13:07:56.280254 2026] [:error] [pid 3380:tid 3385] [client 51.83.237.175:56078] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYV3LBFAlUvBGSBK2jen5gAAAAE"]
[Fri Feb 06 13:07:59.232959 2026] [:error] [pid 3382:tid 3462] [client 51.83.237.175:33246] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYV3L8IgU1HR0rhYrE-kXwAAAJY"]
[Fri Feb 06 13:08:02.318990 2026] [:error] [pid 3381:tid 3418] [client 51.83.237.175:33256] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYV3Mi81zqRg96ZREgjIqQAAAEU"]
[Fri Feb 06 13:08:05.239198 2026] [:error] [pid 3477:tid 3497] [client 51.83.237.175:33260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYV3NbL0Hdh40C7HYgXI1QAAANI"]
[Fri Feb 06 13:08:09.040563 2026] [:error] [pid 3477:tid 3500] [client 51.83.237.175:56928] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYV3ObL0Hdh40C7HYgXI3gAAANU"]
[Fri Feb 06 13:08:13.594216 2026] [:error] [pid 3477:tid 3479] [client 51.83.237.175:56938] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYV3PbL0Hdh40C7HYgXI5gAAAMA"]
[Fri Feb 06 13:08:16.813423 2026] [:error] [pid 3381:tid 3426] [client 51.83.237.175:56942] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYV3QC81zqRg96ZREgjIywAAAE0"]
[Fri Feb 06 13:08:18.974298 2026] [:error] [pid 3382:tid 3445] [client 51.83.237.175:44336] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYV3QsIgU1HR0rhYrE-kmQAAAIU"]
[Fri Feb 06 13:08:22.764842 2026] [:error] [pid 3381:tid 3437] [client 51.83.237.175:44348] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYV3Ri81zqRg96ZREgjI1gAAAFg"]
[Fri Feb 06 13:08:26.836590 2026] [:error] [pid 3381:tid 3415] [client 51.83.237.175:44356] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYV3Si81zqRg96ZREgjI8QAAAEI"]
[Fri Feb 06 13:08:57.729932 2026] [:error] [pid 3513:tid 3530] [client 51.83.237.175:41814] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYV3aTSw3-HAlzpqSxwxlAAAAU8"]
[Fri Feb 06 13:09:00.372449 2026] [:error] [pid 3380:tid 3406] [client 51.83.237.175:53910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYV3bBFAlUvBGSBK2jeoiAAAABY"]
[Fri Feb 06 13:09:04.064295 2026] [:error] [pid 3477:tid 3501] [client 51.83.237.175:53912] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYV3cLL0Hdh40C7HYgXJRQAAANY"]
[Fri Feb 06 13:09:07.363616 2026] [:error] [pid 3382:tid 3445] [client 51.83.237.175:52456] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYV3c8IgU1HR0rhYrE-lCQAAAIU"]
[Fri Feb 06 13:09:09.019039 2026] [:error] [pid 3477:tid 3488] [client 51.83.237.175:52468] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV3dbL0Hdh40C7HYgXJTgAAAMk"]
[Fri Feb 06 13:09:13.597304 2026] [:error] [pid 3477:tid 3489] [client 51.83.237.175:52472] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV3ebL0Hdh40C7HYgXJUwAAAMo"]
[Fri Feb 06 13:15:45.669346 2026] [:error] [pid 3513:tid 3538] [client 51.83.237.175:43052] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYV5ATSw3-HAlzpqSxw01wAAAVc"]
[Fri Feb 06 13:15:54.652052 2026] [:error] [pid 3477:tid 3503] [client 51.83.237.175:42838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYV5CrL0Hdh40C7HYgXMcwAAANg"]
[Fri Feb 06 13:16:02.926887 2026] [:error] [pid 3380:tid 3403] [client 51.83.237.175:33014] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYV5EhFAlUvBGSBK2jeszwAAABM"]
[Fri Feb 06 13:16:05.727514 2026] [:error] [pid 3513:tid 3519] [client 51.83.237.175:33020] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYV5FTSw3-HAlzpqSxw0_QAAAUQ"]
[Fri Feb 06 13:16:10.217044 2026] [:error] [pid 3380:tid 3397] [client 51.83.237.175:50454] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYV5GhFAlUvBGSBK2jes5AAAAA0"]
[Fri Feb 06 13:16:22.193739 2026] [:error] [pid 3513:tid 3539] [client 51.83.237.175:44884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYV5JjSw3-HAlzpqSxw1KgAAAVg"]
[Fri Feb 06 13:16:26.512258 2026] [:error] [pid 3380:tid 3408] [client 51.83.237.175:44898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYV5KhFAlUvBGSBK2jethAAAABg"]
[Fri Feb 06 13:16:35.019674 2026] [:error] [pid 3381:tid 3429] [client 51.83.237.175:52164] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYV5My81zqRg96ZREgjMKQAAAFA"]
[Fri Feb 06 13:17:34.466002 2026] [:error] [pid 3513:tid 3520] [client 51.83.237.175:53896] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYV5bjSw3-HAlzpqSxw1xgAAAUU"]
[Fri Feb 06 13:17:40.384626 2026] [:error] [pid 3513:tid 3522] [client 51.83.237.175:59488] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYV5dDSw3-HAlzpqSxw1zwAAAUc"]
[Fri Feb 06 13:17:43.607159 2026] [:error] [pid 3381:tid 3427] [client 51.83.237.175:59498] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYV5dy81zqRg96ZREgjMjwAAAE4"]
[Fri Feb 06 13:17:48.094217 2026] [:error] [pid 3513:tid 3526] [client 51.83.237.175:35230] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYV5fDSw3-HAlzpqSxw11gAAAUs"]
[Fri Feb 06 13:17:51.165311 2026] [:error] [pid 3380:tid 3406] [client 51.83.237.175:35244] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYV5fxFAlUvBGSBK2jeu6QAAABY"]
[Fri Feb 06 13:17:58.623987 2026] [:error] [pid 3477:tid 3500] [client 51.83.237.175:59262] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYV5hrL0Hdh40C7HYgXNzQAAANU"]
[Fri Feb 06 13:18:03.029856 2026] [:error] [pid 3513:tid 3525] [client 51.83.237.175:59272] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYV5izSw3-HAlzpqSxw18wAAAUo"]
[Fri Feb 06 13:18:08.206791 2026] [:error] [pid 3381:tid 3432] [client 51.83.237.175:43364] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYV5kC81zqRg96ZREgjMuAAAAFM"]
[Fri Feb 06 13:18:15.461223 2026] [:error] [pid 3477:tid 3496] [client 51.83.237.175:43370] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYV5l7L0Hdh40C7HYgXN7QAAANE"]
[Fri Feb 06 13:18:18.174143 2026] [:error] [pid 3381:tid 3428] [client 51.83.237.175:50598] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYV5mi81zqRg96ZREgjMygAAAE8"]
[Fri Feb 06 13:18:20.961134 2026] [:error] [pid 3381:tid 3420] [client 51.83.237.175:50602] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYV5nC81zqRg96ZREgjMzgAAAEc"]
[Fri Feb 06 13:18:24.136865 2026] [:error] [pid 3477:tid 3498] [client 51.83.237.175:50612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYV5oLL0Hdh40C7HYgXOBAAAANM"]
[Fri Feb 06 13:18:27.221707 2026] [:error] [pid 3380:tid 3395] [client 51.83.237.175:44280] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYV5oxFAlUvBGSBK2jevIgAAAAs"]
[Fri Feb 06 13:19:18.489877 2026] [:error] [pid 3513:tid 3525] [client 51.83.237.175:42742] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYV51jSw3-HAlzpqSxw2ewAAAUo"]
[Fri Feb 06 13:19:20.958071 2026] [:error] [pid 3513:tid 3525] [client 51.83.237.175:56976] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYV52DSw3-HAlzpqSxw2gwAAAUo"]
[Fri Feb 06 13:19:26.172138 2026] [:error] [pid 3380:tid 3398] [client 51.83.237.175:56982] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYV53hFAlUvBGSBK2jevkAAAAA4"]
[Fri Feb 06 13:19:30.533871 2026] [:error] [pid 3380:tid 3395] [client 51.83.237.175:42852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYV54hFAlUvBGSBK2jevmAAAAAs"]
[Fri Feb 06 13:19:34.477530 2026] [:error] [pid 3380:tid 3391] [client 51.83.237.175:42866] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYV55hFAlUvBGSBK2jevnwAAAAc"]
[Fri Feb 06 13:19:37.146443 2026] [:error] [pid 3513:tid 3532] [client 51.83.237.175:35898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYV56TSw3-HAlzpqSxw2lwAAAVE"]
[Fri Feb 06 13:19:40.768564 2026] [:error] [pid 3381:tid 3421] [client 51.83.237.175:35914] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV57C81zqRg96ZREgjNXwAAAEg"]
[Fri Feb 06 13:19:46.105929 2026] [:error] [pid 3513:tid 3531] [client 51.83.237.175:35916] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYV58jSw3-HAlzpqSxw2qQAAAVA"]
[Fri Feb 06 17:39:10.481209 2026] [:error] [pid 3513:tid 3529] [client 175.6.217.4:45985] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYW2vjSw3-HAlzpqSxyuHQAAAU4"]
[Fri Feb 06 18:48:35.534980 2026] [:error] [pid 3381:tid 3421] [client 43.131.243.61:38804] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYXHAy81zqRg96ZREghOwgAAAEg"]
[Fri Feb 06 21:54:22.202686 2026] [:error] [pid 3380:tid 3401] [client 143.110.178.154:50230] [client 143.110.178.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.178.154, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYXyjhFAlUvBGSBK2jdtUAAAABE"]
[Fri Feb 06 21:54:22.206993 2026] [:error] [pid 3380:tid 3401] [client 143.110.178.154:50230] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 06 21:54:37.010644 2026] [:error] [pid 15821:tid 15846] [client 146.70.250.132:30612] [client 146.70.250.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aYXynXARQa67J4c772kVoQAAARU"]
[Fri Feb 06 21:54:39.273810 2026] [:error] [pid 3382:tid 3459] [client 146.70.250.132:39194] [client 146.70.250.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aYXyn8IgU1HR0rhYrE9jbwAAAJM"]
[Sat Feb 07 00:15:17.789598 2026] [:error] [pid 3380:tid 3395] [client 217.182.195.176:42846] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYYTlRFAlUvBGSBK2jd8vQAAAAs"]
[Sat Feb 07 00:15:19.777043 2026] [:error] [pid 36857:tid 36883] [client 217.182.195.176:57440] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYYTl5VQwfj7Kp4Dd0EHiwAAAZg"]
[Sat Feb 07 00:15:21.888011 2026] [:error] [pid 3477:tid 3500] [client 217.182.195.176:57456] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYYTmbL0Hdh40C7HYgWSXgAAANU"]
[Sat Feb 07 00:15:23.971902 2026] [:error] [pid 3380:tid 3396] [client 217.182.195.176:57458] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYYTmxFAlUvBGSBK2jd8yAAAAAw"]
[Sat Feb 07 00:15:26.037931 2026] [:error] [pid 3381:tid 3427] [client 217.182.195.176:57468] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYYTni81zqRg96ZREgiREAAAAE4"]
[Sat Feb 07 00:15:28.210099 2026] [:error] [pid 15821:tid 15829] [client 217.182.195.176:48636] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYYToHARQa67J4c772knvwAAAQQ"]
[Sat Feb 07 00:15:30.347826 2026] [:error] [pid 3382:tid 3463] [client 217.182.195.176:48644] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYYTosIgU1HR0rhYrE959QAAAJc"]
[Sat Feb 07 00:15:32.326959 2026] [:error] [pid 37019:tid 37021] [client 217.182.195.176:48650] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYYTpAkAjqd3bcgYBrt-3wAAAgA"]
[Sat Feb 07 00:15:34.202438 2026] [:error] [pid 3382:tid 3453] [client 217.182.195.176:48656] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYYTpsIgU1HR0rhYrE96BwAAAI0"]
[Sat Feb 07 00:15:36.271058 2026] [:error] [pid 3382:tid 3463] [client 217.182.195.176:48518] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYYTqMIgU1HR0rhYrE96DQAAAJc"]
[Sat Feb 07 00:16:06.389656 2026] [:error] [pid 3381:tid 3437] [client 182.43.70.143:48537] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYYTxi81zqRg96ZREgiRMgAAAFg"]
[Sat Feb 07 00:17:34.916637 2026] [:error] [pid 15821:tid 15839] [client 217.182.195.176:38172] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYYUHnARQa67J4c772koRAAAAQ4"]
[Sat Feb 07 00:17:36.739660 2026] [:error] [pid 3513:tid 3523] [client 217.182.195.176:48328] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYYUIDSw3-HAlzpqSxzpWgAAAUg"]
[Sat Feb 07 00:17:38.768967 2026] [:error] [pid 3382:tid 3443] [client 217.182.195.176:48334] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYYUIsIgU1HR0rhYrE97EwAAAIM"]
[Sat Feb 07 00:17:40.661949 2026] [:error] [pid 3513:tid 3536] [client 217.182.195.176:48346] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYYUJDSw3-HAlzpqSxzpXQAAAVU"]
[Sat Feb 07 00:17:42.678396 2026] [:error] [pid 3381:tid 3424] [client 217.182.195.176:48356] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYYUJi81zqRg96ZREgiRngAAAEs"]
[Sat Feb 07 00:17:44.692804 2026] [:error] [pid 36928:tid 36940] [client 217.182.195.176:48370] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYYUKJs7fyU8D36r-OqZlQAAAcg"]
[Sat Feb 07 00:17:46.591148 2026] [:error] [pid 3513:tid 3531] [client 217.182.195.176:44632] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYYUKjSw3-HAlzpqSxzpZwAAAVA"]
[Sat Feb 07 00:17:48.616143 2026] [:error] [pid 3382:tid 3453] [client 217.182.195.176:44634] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYYULMIgU1HR0rhYrE97JgAAAI0"]
[Sat Feb 07 00:17:50.641740 2026] [:error] [pid 3380:tid 3404] [client 217.182.195.176:44642] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYYULhFAlUvBGSBK2jd9NQAAABQ"]
[Sat Feb 07 00:17:52.519282 2026] [:error] [pid 15821:tid 15833] [client 217.182.195.176:44648] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYYUMHARQa67J4c772koTQAAAQg"]
[Sat Feb 07 00:17:54.538797 2026] [:error] [pid 15821:tid 15838] [client 217.182.195.176:44662] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aYYUMnARQa67J4c772koTwAAAQ0"]
[Sat Feb 07 00:17:56.417910 2026] [:error] [pid 36928:tid 36951] [client 217.182.195.176:58898] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aYYUNJs7fyU8D36r-OqZogAAAdM"]
[Sat Feb 07 00:17:58.424823 2026] [:error] [pid 36857:tid 36868] [client 217.182.195.176:58906] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYYUNpVQwfj7Kp4Dd0EIOgAAAYk"]
[Sat Feb 07 00:18:00.440189 2026] [:error] [pid 37019:tid 37027] [client 217.182.195.176:58916] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYYUOAkAjqd3bcgYBrt_MAAAAgY"]
[Sat Feb 07 00:18:02.470268 2026] [:error] [pid 37019:tid 37033] [client 217.182.195.176:58928] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYYUOgkAjqd3bcgYBrt_NAAAAgw"]
[Sat Feb 07 00:18:04.335877 2026] [:error] [pid 15821:tid 15846] [client 217.182.195.176:58930] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYYUPHARQa67J4c772koUwAAARU"]
[Sat Feb 07 00:18:06.362304 2026] [:error] [pid 3381:tid 3417] [client 217.182.195.176:44784] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYYUPi81zqRg96ZREgiRqQAAAEQ"]
[Sat Feb 07 00:18:08.387033 2026] [:error] [pid 3381:tid 3418] [client 217.182.195.176:44800] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYYUQC81zqRg96ZREgiRsQAAAEU"]
[Sat Feb 07 00:18:10.380882 2026] [:error] [pid 15821:tid 15838] [client 217.182.195.176:44810] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYYUQnARQa67J4c772koWwAAAQ0"]
[Sat Feb 07 00:18:12.382889 2026] [:error] [pid 3382:tid 3460] [client 217.182.195.176:44816] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYYURMIgU1HR0rhYrE97QAAAAJQ"]
[Sat Feb 07 00:18:14.401935 2026] [:error] [pid 3382:tid 3445] [client 217.182.195.176:44828] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYYURsIgU1HR0rhYrE97RAAAAIU"]
[Sat Feb 07 00:18:16.411617 2026] [:error] [pid 3381:tid 3421] [client 217.182.195.176:47134] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYYUSC81zqRg96ZREgiRygAAAEg"]
[Sat Feb 07 00:18:18.439272 2026] [:error] [pid 3382:tid 3457] [client 217.182.195.176:47142] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYYUSsIgU1HR0rhYrE97SAAAAJE"]
[Sat Feb 07 00:18:20.414403 2026] [:error] [pid 15821:tid 15833] [client 217.182.195.176:47150] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYYUTHARQa67J4c772koZQAAAQg"]
[Sat Feb 07 00:18:22.437721 2026] [:error] [pid 15821:tid 15838] [client 217.182.195.176:47154] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYYUTnARQa67J4c772koZgAAAQ0"]
[Sat Feb 07 00:18:24.421711 2026] [:error] [pid 3382:tid 3447] [client 217.182.195.176:47156] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYYUUMIgU1HR0rhYrE97UgAAAIc"]
[Sat Feb 07 00:18:26.422830 2026] [:error] [pid 3513:tid 3515] [client 217.182.195.176:34674] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYYUUjSw3-HAlzpqSxzpdwAAAUA"]
[Sat Feb 07 00:18:28.435351 2026] [:error] [pid 36928:tid 36938] [client 217.182.195.176:34690] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYYUVJs7fyU8D36r-OqZswAAAcY"]
[Sat Feb 07 00:18:30.450396 2026] [:error] [pid 36928:tid 36947] [client 217.182.195.176:34692] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYYUVps7fyU8D36r-OqZtQAAAc8"]
[Sat Feb 07 00:18:32.434733 2026] [:error] [pid 3477:tid 3484] [client 217.182.195.176:34694] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYYUWLL0Hdh40C7HYgWTCgAAAMU"]
[Sat Feb 07 00:18:54.728699 2026] [:error] [pid 3513:tid 3532] [client 217.182.195.176:38302] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aYYUbjSw3-HAlzpqSxzpigAAAVE"]
[Sat Feb 07 00:18:56.680133 2026] [:error] [pid 3381:tid 3423] [client 217.182.195.176:45454] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aYYUcC81zqRg96ZREgiR8gAAAEo"]
[Sat Feb 07 00:18:58.528117 2026] [:error] [pid 36928:tid 36942] [client 217.182.195.176:45456] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYYUcps7fyU8D36r-OqZ_wAAAco"]
[Sat Feb 07 00:19:00.523261 2026] [:error] [pid 46432:tid 46455] [client 217.182.195.176:45472] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aYYUdAbwJwu_od0kZjNGUwAAAlU"]
[Sat Feb 07 00:19:02.527737 2026] [:error] [pid 3381:tid 3417] [client 217.182.195.176:45488] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aYYUdi81zqRg96ZREgiR-QAAAEQ"]
[Sat Feb 07 00:19:04.544684 2026] [:error] [pid 36928:tid 36952] [client 217.182.195.176:45496] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYYUeJs7fyU8D36r-OqaGQAAAdQ"]
[Sat Feb 07 00:19:06.549787 2026] [:error] [pid 3382:tid 3441] [client 217.182.195.176:47852] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aYYUesIgU1HR0rhYrE97gwAAAIE"]
[Sat Feb 07 00:19:08.555893 2026] [:error] [pid 46432:tid 46453] [client 217.182.195.176:47866] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aYYUfAbwJwu_od0kZjNGVgAAAlM"]
[Sat Feb 07 00:19:10.564616 2026] [:error] [pid 3381:tid 3419] [client 217.182.195.176:47878] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYYUfi81zqRg96ZREgiR_wAAAEY"]
[Sat Feb 07 00:19:12.573275 2026] [:error] [pid 3382:tid 3447] [client 217.182.195.176:47894] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYYUgMIgU1HR0rhYrE97igAAAIc"]
[Sat Feb 07 00:19:14.586470 2026] [:error] [pid 3513:tid 3525] [client 217.182.195.176:47898] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYYUgjSw3-HAlzpqSxzpnAAAAUo"]
[Sat Feb 07 00:19:16.604353 2026] [:error] [pid 36857:tid 36871] [client 217.182.195.176:52120] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYYUhJVQwfj7Kp4Dd0EIYgAAAYw"]
[Sat Feb 07 00:19:18.660609 2026] [:error] [pid 36928:tid 36932] [client 217.182.195.176:52124] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYYUhps7fyU8D36r-OqaIgAAAcA"]
[Sat Feb 07 00:19:20.617523 2026] [:error] [pid 37019:tid 37031] [client 217.182.195.176:52138] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYYUiAkAjqd3bcgYBrt_iwAAAgo"]
[Sat Feb 07 00:19:22.541222 2026] [:error] [pid 37019:tid 37025] [client 217.182.195.176:52146] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYYUigkAjqd3bcgYBrt_jQAAAgQ"]
[Sat Feb 07 00:19:24.602110 2026] [:error] [pid 3381:tid 3424] [client 217.182.195.176:52160] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYYUjC81zqRg96ZREgiSCQAAAEs"]
[Sat Feb 07 00:19:26.566177 2026] [:error] [pid 46432:tid 46444] [client 217.182.195.176:43788] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYYUjgbwJwu_od0kZjNGXgAAAko"]
[Sat Feb 07 00:19:28.611631 2026] [:error] [pid 36857:tid 36870] [client 217.182.195.176:43792] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYYUkJVQwfj7Kp4Dd0EIZwAAAYs"]
[Sat Feb 07 00:19:30.610967 2026] [:error] [pid 3380:tid 3390] [client 217.182.195.176:43796] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYYUkhFAlUvBGSBK2jd9VwAAAAY"]
[Sat Feb 07 00:19:32.481219 2026] [:error] [pid 37019:tid 37032] [client 217.182.195.176:43800] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYYUlAkAjqd3bcgYBrt_mQAAAgs"]
[Sat Feb 07 00:19:34.495342 2026] [:error] [pid 3380:tid 3396] [client 217.182.195.176:43802] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYYUlhFAlUvBGSBK2jd9WAAAAAw"]
[Sat Feb 07 00:19:36.523264 2026] [:error] [pid 37019:tid 37023] [client 217.182.195.176:57494] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYYUmAkAjqd3bcgYBrt_oQAAAgI"]
[Sat Feb 07 00:19:38.472183 2026] [:error] [pid 46432:tid 46452] [client 217.182.195.176:57506] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYYUmgbwJwu_od0kZjNGZgAAAlI"]
[Sat Feb 07 00:19:40.550273 2026] [:error] [pid 15821:tid 15839] [client 217.182.195.176:57508] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYYUnHARQa67J4c772kopAAAAQ4"]
[Sat Feb 07 00:19:42.463593 2026] [:error] [pid 3382:tid 3443] [client 217.182.195.176:57522] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYYUnsIgU1HR0rhYrE97owAAAIM"]
[Sat Feb 07 00:19:44.506595 2026] [:error] [pid 3381:tid 3437] [client 217.182.195.176:57534] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYYUoC81zqRg96ZREgiSHwAAAFg"]
[Sat Feb 07 00:19:46.645633 2026] [:error] [pid 36857:tid 36866] [client 217.182.195.176:35172] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYYUopVQwfj7Kp4Dd0EIdQAAAYc"]
[Sat Feb 07 00:19:48.556886 2026] [:error] [pid 3382:tid 3459] [client 217.182.195.176:35178] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYYUpMIgU1HR0rhYrE97qQAAAJM"]
[Sat Feb 07 00:19:50.591085 2026] [:error] [pid 3381:tid 3428] [client 217.182.195.176:35190] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYYUpi81zqRg96ZREgiSJgAAAE8"]
[Sat Feb 07 00:19:52.471929 2026] [:error] [pid 36928:tid 36945] [client 217.182.195.176:35200] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYYUqJs7fyU8D36r-OqaQgAAAc0"]
[Sat Feb 07 00:20:13.103388 2026] [:error] [pid 46432:tid 46457] [client 217.182.195.176:35212] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYYUvQbwJwu_od0kZjNGhAAAAlc"]
[Sat Feb 07 00:20:15.067719 2026] [:error] [pid 46432:tid 46436] [client 217.182.195.176:46406] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYYUvwbwJwu_od0kZjNGhQAAAkI"]
[Sat Feb 07 00:20:17.170782 2026] [:error] [pid 3382:tid 3458] [client 217.182.195.176:37674] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYYUwcIgU1HR0rhYrE97xwAAAJI"]
[Sat Feb 07 00:20:19.187045 2026] [:error] [pid 3477:tid 3499] [client 217.182.195.176:37682] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYYUw7L0Hdh40C7HYgWTSQAAANQ"]
[Sat Feb 07 00:20:21.126632 2026] [:error] [pid 3382:tid 3451] [client 217.182.195.176:37698] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYYUxcIgU1HR0rhYrE97yQAAAIs"]
[Sat Feb 07 00:20:23.108614 2026] [:error] [pid 3382:tid 3452] [client 217.182.195.176:37704] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYYUx8IgU1HR0rhYrE97ywAAAIw"]
[Sat Feb 07 00:20:25.130023 2026] [:error] [pid 3382:tid 3446] [client 217.182.195.176:37706] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYYUycIgU1HR0rhYrE97zQAAAIY"]
[Sat Feb 07 00:20:27.135711 2026] [:error] [pid 15821:tid 15828] [client 217.182.195.176:44250] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYYUy3ARQa67J4c772kowgAAAQM"]
[Sat Feb 07 00:20:29.152800 2026] [:error] [pid 15821:tid 15825] [client 217.182.195.176:44252] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYYUzXARQa67J4c772koxQAAAQA"]
[Sat Feb 07 00:20:31.152940 2026] [:error] [pid 3381:tid 3435] [client 217.182.195.176:44266] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYYUzy81zqRg96ZREgiSRwAAAFY"]
[Sat Feb 07 00:20:33.150832 2026] [:error] [pid 36928:tid 36947] [client 217.182.195.176:44270] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYYU0Zs7fyU8D36r-OqaVgAAAc8"]
[Sat Feb 07 00:20:35.146771 2026] [:error] [pid 15821:tid 15847] [client 217.182.195.176:44276] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYYU03ARQa67J4c772koxwAAARY"]
[Sat Feb 07 00:20:37.018911 2026] [:error] [pid 3381:tid 3417] [client 217.182.195.176:52940] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYYU1S81zqRg96ZREgiSTAAAAEQ"]
[Sat Feb 07 00:20:39.021330 2026] [:error] [pid 46432:tid 46444] [client 217.182.195.176:52950] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYYU1wbwJwu_od0kZjNGkwAAAko"]
[Sat Feb 07 00:20:41.041239 2026] [:error] [pid 15821:tid 15833] [client 217.182.195.176:52956] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYYU2XARQa67J4c772koyQAAAQg"]
[Sat Feb 07 00:20:43.037700 2026] [:error] [pid 37019:tid 37026] [client 217.182.195.176:52968] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYYU2wkAjqd3bcgYBrt_4AAAAgU"]
[Sat Feb 07 00:20:45.050871 2026] [:error] [pid 36928:tid 36956] [client 217.182.195.176:52980] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYYU3Zs7fyU8D36r-OqaaAAAAdg"]
[Sat Feb 07 00:20:47.040480 2026] [:error] [pid 3381:tid 3420] [client 217.182.195.176:60150] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYYU3y81zqRg96ZREgiSUwAAAEc"]
[Sat Feb 07 00:20:49.045701 2026] [:error] [pid 3513:tid 3534] [client 217.182.195.176:60166] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYYU4TSw3-HAlzpqSxzpvAAAAVM"]
[Sat Feb 07 00:20:51.051365 2026] [:error] [pid 15821:tid 15825] [client 217.182.195.176:60178] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYYU43ARQa67J4c772ko0AAAAQA"]
[Sat Feb 07 00:20:53.052903 2026] [:error] [pid 46432:tid 46458] [client 217.182.195.176:60182] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYYU5QbwJwu_od0kZjNGoAAAAlg"]
[Sat Feb 07 00:20:54.907701 2026] [:error] [pid 3381:tid 3426] [client 217.182.195.176:60188] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYYU5i81zqRg96ZREgiSWgAAAE0"]
[Sat Feb 07 00:20:56.903075 2026] [:error] [pid 3513:tid 3516] [client 217.182.195.176:38092] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYYU6DSw3-HAlzpqSxzpwgAAAUE"]
[Sat Feb 07 00:20:58.912226 2026] [:error] [pid 15821:tid 15826] [client 217.182.195.176:38094] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYYU6nARQa67J4c772ko1gAAAQE"]
[Sat Feb 07 00:21:00.920773 2026] [:error] [pid 3381:tid 3436] [client 217.182.195.176:38104] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYYU7C81zqRg96ZREgiSXAAAAFc"]
[Sat Feb 07 00:21:02.911044 2026] [:error] [pid 46432:tid 46447] [client 217.182.195.176:38114] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYYU7gbwJwu_od0kZjNGpAAAAk0"]
[Sat Feb 07 00:21:04.906822 2026] [:error] [pid 3382:tid 3459] [client 217.182.195.176:38126] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYYU8MIgU1HR0rhYrE98AwAAAJM"]
[Sat Feb 07 00:21:06.926315 2026] [:error] [pid 3380:tid 3384] [client 217.182.195.176:57676] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYYU8hFAlUvBGSBK2jd9bgAAAAA"]
[Sat Feb 07 00:21:08.940254 2026] [:error] [pid 3381:tid 3437] [client 217.182.195.176:57690] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYYU9C81zqRg96ZREgiSYQAAAFg"]
[Sat Feb 07 00:21:10.942824 2026] [:error] [pid 3382:tid 3445] [client 217.182.195.176:57692] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYYU9sIgU1HR0rhYrE98BgAAAIU"]
[Sat Feb 07 00:21:31.255665 2026] [:error] [pid 37019:tid 37042] [client 217.182.195.176:57704] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYYVCwkAjqd3bcgYBruAJAAAAhU"]
[Sat Feb 07 00:21:33.208416 2026] [:error] [pid 15821:tid 15842] [client 217.182.195.176:45482] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYYVDXARQa67J4c772ko5gAAARE"]
[Sat Feb 07 00:21:35.197504 2026] [:error] [pid 15821:tid 15849] [client 217.182.195.176:45484] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYYVD3ARQa67J4c772ko6QAAARg"]
[Sat Feb 07 00:21:37.198022 2026] [:error] [pid 3477:tid 3498] [client 217.182.195.176:44490] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYYVEbL0Hdh40C7HYgWTbgAAANM"]
[Sat Feb 07 00:21:39.188416 2026] [:error] [pid 3381:tid 3436] [client 217.182.195.176:44494] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYYVEy81zqRg96ZREgiShQAAAFc"]
[Sat Feb 07 00:21:41.034482 2026] [:error] [pid 36928:tid 36941] [client 217.182.195.176:44510] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYYVFZs7fyU8D36r-OqahQAAAck"]
[Sat Feb 07 02:43:55.358880 2026] [:error] [pid 55701:tid 55774] [client 87.106.209.183:62660] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Sat Feb 07 02:44:01.248587 2026] [:error] [pid 35307:tid 35385] [client 87.106.209.183:61214] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Sat Feb 07 02:44:08.091348 2026] [:error] [pid 55701:tid 55774] [client 87.106.209.183:57022] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Sat Feb 07 02:44:14.438677 2026] [:error] [pid 55701:tid 55755] [client 87.106.209.183:63790] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Sat Feb 07 03:19:32.587786 2026] [:error] [pid 47481:tid 47558] [client 49.51.245.241:48450] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYY-xMulwWMbl78qphurdQAAAFM"]
[Sat Feb 07 03:46:21.891018 2026] [:error] [pid 55157:tid 55169] [client 43.157.20.63:51682] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYZFDX36JdtTn2bTEoyY0QAAAQc"]
[Sat Feb 07 06:33:06.536422 2026] [:error] [pid 55157:tid 55182] [client 147.135.213.153:43256] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYZsIn36JdtTn2bTEozt6QAAARQ"]
[Sat Feb 07 06:33:08.391100 2026] [:error] [pid 55157:tid 55171] [client 147.135.213.153:52564] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYZsJH36JdtTn2bTEozt8wAAAQk"]
[Sat Feb 07 06:33:10.311394 2026] [:error] [pid 43182:tid 43207] [client 147.135.213.153:52574] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYZsJvEC82JnxmrnFYnMywAAAVc"]
[Sat Feb 07 06:33:12.214490 2026] [:error] [pid 50672:tid 50713] [client 147.135.213.153:45326] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYZsKA9o0jq1XS8Nv7OPDwAAAEU"]
[Sat Feb 07 06:33:14.121738 2026] [:error] [pid 50671:tid 50688] [client 147.135.213.153:45336] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYZsKrvqLohWBI_mqBPvUgAAAAg"]
[Sat Feb 07 06:33:16.013817 2026] [:error] [pid 50673:tid 50759] [client 147.135.213.153:45342] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYZsLGVwLsaZ7aKO2ckKYwAAAJg"]
[Sat Feb 07 06:33:17.897844 2026] [:error] [pid 50672:tid 50720] [client 147.135.213.153:45352] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYZsLQ9o0jq1XS8Nv7OPGQAAAEw"]
[Sat Feb 07 06:33:19.943953 2026] [:error] [pid 50780:tid 50795] [client 147.135.213.153:45366] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYZsL-tUmIu2JHM2CruzdQAAAM0"]
[Sat Feb 07 06:33:22.012946 2026] [:error] [pid 50780:tid 50788] [client 147.135.213.153:36202] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYZsMutUmIu2JHM2CruzdwAAAMY"]
[Sat Feb 07 06:33:24.055024 2026] [:error] [pid 50780:tid 50805] [client 147.135.213.153:36216] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYZsNOtUmIu2JHM2CruzfAAAANc"]
[Sat Feb 07 06:33:25.953798 2026] [:error] [pid 43182:tid 43193] [client 147.135.213.153:36226] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYZsNfEC82JnxmrnFYnM3QAAAUk"]
[Sat Feb 07 06:33:27.839256 2026] [:error] [pid 43182:tid 43203] [client 147.135.213.153:36230] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYZsN_EC82JnxmrnFYnM3wAAAVM"]
[Sat Feb 07 06:33:29.870968 2026] [:error] [pid 55157:tid 55168] [client 147.135.213.153:36234] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYZsOX36JdtTn2bTEozuQwAAAQY"]
[Sat Feb 07 06:33:31.913011 2026] [:error] [pid 55157:tid 55176] [client 147.135.213.153:55496] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYZsO336JdtTn2bTEozucAAAAQ4"]
[Sat Feb 07 06:33:33.892136 2026] [:error] [pid 50673:tid 50738] [client 147.135.213.153:55498] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYZsPWVwLsaZ7aKO2ckKewAAAIM"]
[Sat Feb 07 06:33:35.846707 2026] [:error] [pid 43182:tid 43196] [client 147.135.213.153:55504] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYZsP_EC82JnxmrnFYnM5wAAAUw"]
[Sat Feb 07 06:33:37.820489 2026] [:error] [pid 55157:tid 55168] [client 147.135.213.153:55514] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYZsQX36JdtTn2bTEozuywAAAQY"]
[Sat Feb 07 06:33:39.775710 2026] [:error] [pid 50780:tid 50801] [client 147.135.213.153:55518] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYZsQ-tUmIu2JHM2CruzpAAAANM"]
[Sat Feb 07 06:33:41.762784 2026] [:error] [pid 50672:tid 50728] [client 147.135.213.153:55520] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYZsRQ9o0jq1XS8Nv7OPYwAAAFQ"]
[Sat Feb 07 06:33:43.729566 2026] [:error] [pid 55157:tid 55182] [client 147.135.213.153:57194] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYZsR336JdtTn2bTEozvFgAAARQ"]
[Sat Feb 07 06:33:45.834198 2026] [:error] [pid 50672:tid 50718] [client 147.135.213.153:57208] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYZsSQ9o0jq1XS8Nv7OPagAAAEo"]
[Sat Feb 07 06:33:47.825669 2026] [:error] [pid 50780:tid 50783] [client 147.135.213.153:57210] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYZsS-tUmIu2JHM2CruzvwAAAME"]
[Sat Feb 07 06:33:49.963500 2026] [:error] [pid 50671:tid 50685] [client 147.135.213.153:57212] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYZsTbvqLohWBI_mqBPvrAAAAAU"]
[Sat Feb 07 06:33:52.080612 2026] [:error] [pid 50672:tid 50718] [client 147.135.213.153:45160] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYZsUA9o0jq1XS8Nv7OPfAAAAEo"]
[Sat Feb 07 06:33:54.195406 2026] [:error] [pid 55157:tid 55163] [client 147.135.213.153:45166] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYZsUn36JdtTn2bTEozvKwAAAQE"]
[Sat Feb 07 06:33:56.310836 2026] [:error] [pid 50671:tid 50680] [client 147.135.213.153:45172] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYZsVLvqLohWBI_mqBPvtQAAAAA"]
[Sat Feb 07 06:33:58.275368 2026] [:error] [pid 50672:tid 50716] [client 147.135.213.153:45178] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYZsVg9o0jq1XS8Nv7OPoAAAAEg"]
[Sat Feb 07 06:34:00.233843 2026] [:error] [pid 50673:tid 50740] [client 147.135.213.153:45186] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYZsWGVwLsaZ7aKO2ckLOgAAAIU"]
[Sat Feb 07 06:34:02.301594 2026] [:error] [pid 43182:tid 43206] [client 147.135.213.153:33392] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYZsWvEC82JnxmrnFYnNNAAAAVY"]
[Sat Feb 07 06:34:22.760088 2026] [:error] [pid 55157:tid 55171] [client 147.135.213.153:33404] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYZsbn36JdtTn2bTEozv6AAAAQk"]
[Sat Feb 07 06:34:24.808235 2026] [:error] [pid 50673:tid 50741] [client 147.135.213.153:43866] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYZscGVwLsaZ7aKO2ckLbAAAAIY"]
[Sat Feb 07 06:34:26.793080 2026] [:error] [pid 43182:tid 43202] [client 147.135.213.153:43876] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYZscvEC82JnxmrnFYnNXgAAAVI"]
[Sat Feb 07 06:34:28.759976 2026] [:error] [pid 55157:tid 55179] [client 147.135.213.153:43882] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYZsdH36JdtTn2bTEozv_wAAARE"]
[Sat Feb 07 06:34:30.719645 2026] [:error] [pid 55157:tid 55185] [client 147.135.213.153:43886] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYZsdn36JdtTn2bTEozwEwAAARc"]
[Sat Feb 07 06:34:32.682285 2026] [:error] [pid 55157:tid 55165] [client 147.135.213.153:59354] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYZseH36JdtTn2bTEozwMAAAAQM"]
[Sat Feb 07 06:34:34.639656 2026] [:error] [pid 55157:tid 55175] [client 147.135.213.153:59370] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYZsen36JdtTn2bTEozwQwAAAQ0"]
[Sat Feb 07 06:34:36.595182 2026] [:error] [pid 43182:tid 43201] [client 147.135.213.153:59372] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYZsfPEC82JnxmrnFYnNegAAAVE"]
[Sat Feb 07 06:34:38.566854 2026] [:error] [pid 55157:tid 55176] [client 147.135.213.153:59378] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYZsfn36JdtTn2bTEozwTQAAAQ4"]
[Sat Feb 07 06:34:40.717755 2026] [:error] [pid 50671:tid 50695] [client 147.135.213.153:59394] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYZsgLvqLohWBI_mqBPv_gAAAA8"]
[Sat Feb 07 06:34:42.704712 2026] [:error] [pid 50780:tid 50786] [client 147.135.213.153:42558] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYZsgutUmIu2JHM2Cru0ggAAAMQ"]
[Sat Feb 07 06:34:44.676994 2026] [:error] [pid 50673:tid 50746] [client 147.135.213.153:42564] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYZshGVwLsaZ7aKO2ckLmwAAAIs"]
[Sat Feb 07 06:34:46.605812 2026] [:error] [pid 50671:tid 50690] [client 147.135.213.153:42574] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYZshrvqLohWBI_mqBPwBAAAAAo"]
[Sat Feb 07 06:34:48.411638 2026] [:error] [pid 55157:tid 55186] [client 147.135.213.153:42576] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYZsiH36JdtTn2bTEozwcwAAARg"]
[Sat Feb 07 06:34:52.348015 2026] [:error] [pid 55157:tid 55184] [client 147.135.213.153:48446] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYZsjH36JdtTn2bTEozwigAAARY"]
[Sat Feb 07 07:28:08.768567 2026] [:error] [pid 43182:tid 43185] [client 20.205.200.255:6066] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Feb 07 07:28:09.375316 2026] [:error] [pid 43182:tid 43203] [client 20.205.200.255:6066] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 07 07:28:09.925848 2026] [:error] [pid 43182:tid 43208] [client 20.205.200.255:6066] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 07 07:28:10.256212 2026] [:error] [pid 43182:tid 43191] [client 20.205.200.255:6066] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Feb 07 07:28:10.542059 2026] [:error] [pid 43182:tid 43198] [client 20.205.200.255:6066] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 07 07:28:10.740165 2026] [:error] [pid 43182:tid 43187] [client 20.205.200.255:6066] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sat Feb 07 07:28:11.554246 2026] [:error] [pid 43182:tid 43194] [client 20.205.200.255:6066] [client 20.205.200.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/"] [unique_id "aYZ5C_EC82JnxmrnFYnoeAAAAUo"]
[Sat Feb 07 07:28:11.935799 2026] [:error] [pid 43182:tid 43188] [client 20.205.200.255:5130] [client 20.205.200.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/"] [unique_id "aYZ5C_EC82JnxmrnFYnoegAAAUQ"]
[Sat Feb 07 07:28:12.307251 2026] [:error] [pid 50780:tid 50789] [client 20.205.200.255:5159] [client 20.205.200.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/"] [unique_id "aYZ5DOtUmIu2JHM2CrvHCgAAAMc"]
[Sat Feb 07 07:28:12.683565 2026] [:error] [pid 50780:tid 50787] [client 20.205.200.255:5135] [client 20.205.200.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/"] [unique_id "aYZ5DOtUmIu2JHM2CrvHCwAAAMU"]
[Sat Feb 07 11:31:45.127009 2026] [:error] [pid 50673:tid 50750] [client 104.248.243.73:55115] [client 104.248.243.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.243.73, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYayIWVwLsaZ7aKO2cllhgAAAI8"]
[Sat Feb 07 11:31:45.131329 2026] [:error] [pid 50673:tid 50750] [client 104.248.243.73:55115] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 07 12:27:31.827229 2026] [:error] [pid 43182:tid 43199] [client 165.22.216.175:55934] [client 165.22.216.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.216.175, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYa_M_EC82JnxmrnFYlDagAAAU8"]
[Sat Feb 07 12:27:31.830937 2026] [:error] [pid 43182:tid 43199] [client 165.22.216.175:55934] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 07 13:51:54.258155 2026] [:error] [pid 50672:tid 50729] [client 34.55.143.124:49576] [client 34.55.143.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.143.124, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYbS-g9o0jq1XS8Nv7PxDgAAAFU"]
[Sat Feb 07 13:51:54.262151 2026] [:error] [pid 50672:tid 50729] [client 34.55.143.124:49576] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 07 13:51:56.757998 2026] [:error] [pid 50672:tid 50716] [client 34.55.143.124:49576] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYbS_A9o0jq1XS8Nv7PxGgAAAEg"]
[Sat Feb 07 13:51:57.154475 2026] [:error] [pid 50780:tid 50791] [client 34.55.143.124:54592] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYbS_etUmIu2JHM2CrsrhQAAAMk"]
[Sat Feb 07 13:51:57.658952 2026] [:error] [pid 55157:tid 55169] [client 34.55.143.124:56279] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYbS_X36JdtTn2bTEoxuKQAAAQc"]
[Sat Feb 07 13:51:58.083122 2026] [:error] [pid 43182:tid 43184] [client 34.55.143.124:57527] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYbS_vEC82JnxmrnFYlVswAAAUA"]
[Sat Feb 07 13:51:58.536716 2026] [:error] [pid 50671:tid 50703] [client 34.55.143.124:61352] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYbS_rvqLohWBI_mqBNQtAAAABc"]
[Sat Feb 07 13:51:58.986500 2026] [:error] [pid 43182:tid 43187] [client 34.55.143.124:57275] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYbS_vEC82JnxmrnFYlVtQAAAUM"]
[Sat Feb 07 13:51:59.439542 2026] [:error] [pid 43182:tid 43193] [client 34.55.143.124:53841] [client 34.55.143.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYbS__EC82JnxmrnFYlVtgAAAUk"]
[Sat Feb 07 15:29:54.939239 2026] [:error] [pid 50672:tid 50711] [client 170.106.163.48:49986] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYbp8g9o0jq1XS8Nv7MGtgAAAEM"]
[Sat Feb 07 17:35:16.254770 2026] [:error] [pid 50780:tid 50785] [client 152.53.187.237:35604] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYcHVOtUmIu2JHM2Crt48AAAAMM"]
[Sat Feb 07 17:35:18.822345 2026] [:error] [pid 50780:tid 50794] [client 152.53.187.237:63778] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYcHVutUmIu2JHM2Crt48wAAAMw"]
[Sat Feb 07 17:35:21.432260 2026] [:error] [pid 58058:tid 58074] [client 152.53.187.237:50614] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYcHWbz-Qlvs65S4DP_w_QAAAY0"]
[Sat Feb 07 17:35:23.833971 2026] [:error] [pid 50672:tid 50731] [client 152.53.187.237:50618] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYcHWw9o0jq1XS8Nv7MbCwAAAFc"]
[Sat Feb 07 17:35:27.565999 2026] [:error] [pid 50671:tid 50696] [client 152.53.187.237:50620] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYcHX7vqLohWBI_mqBN7vgAAABA"]
[Sat Feb 07 17:35:30.842250 2026] [:error] [pid 55157:tid 55163] [client 152.53.187.237:40992] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYcHYn36JdtTn2bTEoydvAAAAQE"]
[Sat Feb 07 17:35:33.130229 2026] [:error] [pid 50673:tid 50753] [client 152.53.187.237:41006] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYcHZWVwLsaZ7aKO2cnTVAAAAJI"]
[Sat Feb 07 17:35:35.847765 2026] [:error] [pid 50673:tid 50739] [client 152.53.187.237:41022] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYcHZ2VwLsaZ7aKO2cnTVwAAAIQ"]
[Sat Feb 07 17:35:38.211470 2026] [:error] [pid 50672:tid 50730] [client 152.53.187.237:41026] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYcHag9o0jq1XS8Nv7MbGQAAAFY"]
[Sat Feb 07 17:35:41.312252 2026] [:error] [pid 58058:tid 58061] [client 152.53.187.237:43546] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYcHbbz-Qlvs65S4DP_xFQAAAYA"]
[Sat Feb 07 17:35:56.472344 2026] [:error] [pid 50673:tid 50740] [client 152.53.187.237:34308] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYcHfGVwLsaZ7aKO2cnTbQAAAIU"]
[Sat Feb 07 17:36:00.485101 2026] [:error] [pid 50671:tid 50691] [client 152.53.187.237:35384] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYcHgLvqLohWBI_mqBN70gAAAAs"]
[Sat Feb 07 17:36:05.069954 2026] [:error] [pid 58058:tid 58083] [client 152.53.187.237:35386] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYcHhbz-Qlvs65S4DP_xMwAAAZY"]
[Sat Feb 07 17:36:09.128196 2026] [:error] [pid 50673:tid 50737] [client 152.53.187.237:35388] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYcHiWVwLsaZ7aKO2cnTewAAAII"]
[Sat Feb 07 17:36:12.361961 2026] [:error] [pid 55157:tid 55163] [client 152.53.187.237:55028] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYcHjH36JdtTn2bTEoyd1wAAAQE"]
[Sat Feb 07 17:36:48.518085 2026] [:error] [pid 50672:tid 50717] [client 152.53.187.237:35080] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYcHsA9o0jq1XS8Nv7MbWwAAAEk"]
[Sat Feb 07 17:36:51.015559 2026] [:error] [pid 50780:tid 50802] [client 152.53.187.237:63750] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYcHs-tUmIu2JHM2Crt5bgAAANQ"]
[Sat Feb 07 17:36:53.739736 2026] [:error] [pid 50780:tid 50786] [client 152.53.187.237:63766] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYcHtetUmIu2JHM2Crt5dAAAAMQ"]
[Sat Feb 07 17:36:56.457218 2026] [:error] [pid 50673:tid 50755] [client 152.53.187.237:63780] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYcHuGVwLsaZ7aKO2cnTpwAAAJQ"]
[Sat Feb 07 17:36:58.874079 2026] [:error] [pid 58058:tid 58066] [client 152.53.187.237:63792] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aYcHurz-Qlvs65S4DP_xUwAAAYU"]
[Sat Feb 07 17:37:01.600687 2026] [:error] [pid 43182:tid 43202] [client 152.53.187.237:41802] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aYcHvfEC82JnxmrnFYmF9wAAAVI"]
[Sat Feb 07 17:37:04.641938 2026] [:error] [pid 50780:tid 50783] [client 152.53.187.237:41814] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYcHwOtUmIu2JHM2Crt5gQAAAME"]
[Sat Feb 07 17:37:07.433130 2026] [:error] [pid 50780:tid 50791] [client 152.53.187.237:41816] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYcHw-tUmIu2JHM2Crt5iQAAAMk"]
[Sat Feb 07 17:37:09.689338 2026] [:error] [pid 55157:tid 55177] [client 152.53.187.237:41824] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYcHxX36JdtTn2bTEoyeLAAAAQ8"]
[Sat Feb 07 17:37:11.906536 2026] [:error] [pid 55157:tid 55185] [client 152.53.187.237:58124] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYcHx336JdtTn2bTEoyeMAAAARc"]
[Sat Feb 07 17:37:14.132609 2026] [:error] [pid 58058:tid 58061] [client 152.53.187.237:58140] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYcHyrz-Qlvs65S4DP_xXwAAAYA"]
[Sat Feb 07 17:37:16.492191 2026] [:error] [pid 50780:tid 50801] [client 152.53.187.237:58142] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYcHzOtUmIu2JHM2Crt5kgAAANM"]
[Sat Feb 07 17:37:20.701343 2026] [:error] [pid 55157:tid 55177] [client 152.53.187.237:61606] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYcH0H36JdtTn2bTEoyeSgAAAQ8"]
[Sat Feb 07 17:37:24.950288 2026] [:error] [pid 50780:tid 50783] [client 152.53.187.237:61610] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYcH1OtUmIu2JHM2Crt5qAAAAME"]
[Sat Feb 07 17:37:28.038074 2026] [:error] [pid 55157:tid 55172] [client 152.53.187.237:61618] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYcH2H36JdtTn2bTEoyeVAAAAQo"]
[Sat Feb 07 17:37:30.581486 2026] [:error] [pid 58058:tid 58072] [client 152.53.187.237:37800] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYcH2rz-Qlvs65S4DP_xbAAAAYs"]
[Sat Feb 07 17:37:33.704443 2026] [:error] [pid 50671:tid 50680] [client 152.53.187.237:37810] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYcH3bvqLohWBI_mqBN8JAAAAAA"]
[Sat Feb 07 17:37:36.443849 2026] [:error] [pid 58058:tid 58079] [client 152.53.187.237:37814] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYcH4Lz-Qlvs65S4DP_xdQAAAZI"]
[Sat Feb 07 17:37:39.848978 2026] [:error] [pid 50673:tid 50739] [client 152.53.187.237:37828] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYcH42VwLsaZ7aKO2cnTvwAAAIQ"]
[Sat Feb 07 17:37:42.563945 2026] [:error] [pid 50671:tid 50698] [client 152.53.187.237:47978] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYcH5rvqLohWBI_mqBN8LQAAABI"]
[Sat Feb 07 17:37:45.787714 2026] [:error] [pid 50780:tid 50787] [client 152.53.187.237:47986] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYcH6etUmIu2JHM2Crt52AAAAMU"]
[Sat Feb 07 17:38:18.087442 2026] [:error] [pid 50673:tid 50740] [client 152.53.187.237:47366] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aYcICmVwLsaZ7aKO2cnT7gAAAIU"]
[Sat Feb 07 17:38:20.521981 2026] [:error] [pid 50672:tid 50731] [client 152.53.187.237:44800] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aYcIDA9o0jq1XS8Nv7MbnAAAAFc"]
[Sat Feb 07 17:38:23.600114 2026] [:error] [pid 55157:tid 55167] [client 152.53.187.237:44816] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aYcID336JdtTn2bTEoyepgAAAQU"]
[Sat Feb 07 17:38:26.709744 2026] [:error] [pid 55157:tid 55162] [client 152.53.187.237:44826] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aYcIEn36JdtTn2bTEoyerAAAAQA"]
[Sat Feb 07 17:38:35.066644 2026] [:error] [pid 50780:tid 50785] [client 152.53.187.237:64078] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aYcIG-tUmIu2JHM2Crt6BAAAAMM"]
[Sat Feb 07 17:38:37.810448 2026] [:error] [pid 50673:tid 50752] [client 152.53.187.237:64084] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYcIHWVwLsaZ7aKO2cnT-AAAAJE"]
[Sat Feb 07 17:38:40.286719 2026] [:error] [pid 50673:tid 50751] [client 152.53.187.237:64100] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aYcIIGVwLsaZ7aKO2cnT_gAAAJA"]
[Sat Feb 07 17:38:43.705279 2026] [:error] [pid 50673:tid 50750] [client 152.53.187.237:39276] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aYcII2VwLsaZ7aKO2cnUAwAAAI8"]
[Sat Feb 07 17:38:58.801606 2026] [:error] [pid 58058:tid 58066] [client 152.53.187.237:45324] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYcIMrz-Qlvs65S4DP_xwwAAAYU"]
[Sat Feb 07 17:39:01.163165 2026] [:error] [pid 43182:tid 43194] [client 152.53.187.237:40446] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aYcINfEC82JnxmrnFYmGRwAAAUo"]
[Sat Feb 07 17:39:04.574129 2026] [:error] [pid 50671:tid 50698] [client 152.53.187.237:40458] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aYcIOLvqLohWBI_mqBN8ZQAAABI"]
[Sat Feb 07 17:39:07.489053 2026] [:error] [pid 55157:tid 55174] [client 152.53.187.237:40464] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYcIO336JdtTn2bTEoye5gAAAQw"]
[Sat Feb 07 17:39:10.548796 2026] [:error] [pid 50673:tid 50748] [client 152.53.187.237:63726] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYcIPmVwLsaZ7aKO2cnUGgAAAI0"]
[Sat Feb 07 17:39:13.335719 2026] [:error] [pid 50780:tid 50801] [client 152.53.187.237:63730] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYcIQetUmIu2JHM2Crt6NgAAANM"]
[Sat Feb 07 17:39:42.247995 2026] [:error] [pid 43182:tid 43191] [client 152.53.187.237:63742] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYcIXvEC82JnxmrnFYmGcwAAAUc"]
[Sat Feb 07 17:39:45.202238 2026] [:error] [pid 50671:tid 50682] [client 152.53.187.237:60372] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYcIYbvqLohWBI_mqBN8lQAAAAI"]
[Sat Feb 07 17:39:48.158988 2026] [:error] [pid 43182:tid 43184] [client 152.53.187.237:60388] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYcIZPEC82JnxmrnFYmGegAAAUA"]
[Sat Feb 07 17:39:50.706779 2026] [:error] [pid 50673:tid 50753] [client 152.53.187.237:65510] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYcIZmVwLsaZ7aKO2cnUTwAAAJI"]
[Sat Feb 07 17:39:53.543783 2026] [:error] [pid 50671:tid 50694] [client 152.53.187.237:65516] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYcIabvqLohWBI_mqBN8oAAAAA4"]
[Sat Feb 07 17:39:58.092416 2026] [:error] [pid 50673:tid 50754] [client 152.53.187.237:65532] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYcIbmVwLsaZ7aKO2cnUVQAAAJM"]
[Sat Feb 07 17:40:00.144737 2026] [:error] [pid 50673:tid 50747] [client 152.53.187.237:32778] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYcIcGVwLsaZ7aKO2cnUVgAAAIw"]
[Sat Feb 07 17:40:03.083159 2026] [:error] [pid 58058:tid 58076] [client 152.53.187.237:46636] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYcIc7z-Qlvs65S4DP_x-gAAAY8"]
[Sat Feb 07 17:40:05.349402 2026] [:error] [pid 50672:tid 50727] [client 152.53.187.237:46646] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYcIdQ9o0jq1XS8Nv7Mb5QAAAFM"]
[Sat Feb 07 17:40:07.800833 2026] [:error] [pid 55157:tid 55172] [client 152.53.187.237:46662] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYcId336JdtTn2bTEoyfOwAAAQo"]
[Sat Feb 07 17:40:10.574445 2026] [:error] [pid 50672:tid 50710] [client 152.53.187.237:40746] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYcIeg9o0jq1XS8Nv7Mb6AAAAEI"]
[Sat Feb 07 17:40:13.392700 2026] [:error] [pid 58058:tid 58072] [client 152.53.187.237:40750] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYcIfbz-Qlvs65S4DP_yCgAAAYs"]
[Sat Feb 07 17:40:15.911368 2026] [:error] [pid 58058:tid 58083] [client 152.53.187.237:40756] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYcIf7z-Qlvs65S4DP_yDQAAAZY"]
[Sat Feb 07 17:40:18.703210 2026] [:error] [pid 50673:tid 50735] [client 152.53.187.237:40764] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYcIgmVwLsaZ7aKO2cnUZAAAAIA"]
[Sat Feb 07 17:40:21.213271 2026] [:error] [pid 50671:tid 50680] [client 152.53.187.237:56958] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYcIhbvqLohWBI_mqBN8wwAAAAA"]
[Sat Feb 07 17:40:24.153297 2026] [:error] [pid 58058:tid 58070] [client 152.53.187.237:56972] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYcIiLz-Qlvs65S4DP_yFwAAAYk"]
[Sat Feb 07 17:40:26.389123 2026] [:error] [pid 43182:tid 43194] [client 152.53.187.237:56980] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYcIivEC82JnxmrnFYmGowAAAUo"]
[Sat Feb 07 17:40:28.722958 2026] [:error] [pid 50672:tid 50729] [client 152.53.187.237:56990] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYcIjA9o0jq1XS8Nv7McTwAAAFU"]
[Sat Feb 07 17:40:31.074211 2026] [:error] [pid 43182:tid 43197] [client 152.53.187.237:61958] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYcIj_EC82JnxmrnFYmGqgAAAU0"]
[Sat Feb 07 17:40:33.737724 2026] [:error] [pid 50780:tid 50796] [client 152.53.187.237:61974] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYcIketUmIu2JHM2Crt7EAAAAM4"]
[Sat Feb 07 17:40:36.228228 2026] [:error] [pid 50671:tid 50702] [client 152.53.187.237:61982] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYcIlLvqLohWBI_mqBN83wAAABY"]
[Sat Feb 07 17:40:38.907454 2026] [:error] [pid 50672:tid 50716] [client 152.53.187.237:61990] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYcIlg9o0jq1XS8Nv7McYAAAAEg"]
[Sat Feb 07 17:41:09.808722 2026] [:error] [pid 55157:tid 55174] [client 152.53.187.237:60120] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYcItX36JdtTn2bTEoyfgAAAAQw"]
[Sat Feb 07 17:41:13.779536 2026] [:error] [pid 43182:tid 43186] [client 152.53.187.237:47278] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYcIufEC82JnxmrnFYmG0AAAAUI"]
[Sat Feb 07 17:41:18.687017 2026] [:error] [pid 50673:tid 50755] [client 152.53.187.237:47286] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYcIvmVwLsaZ7aKO2cnUqQAAAJQ"]
[Sat Feb 07 17:41:21.933157 2026] [:error] [pid 50672:tid 50714] [client 152.53.187.237:61594] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYcIwQ9o0jq1XS8Nv7McjwAAAEY"]
[Sat Feb 07 17:41:24.706187 2026] [:error] [pid 43182:tid 43186] [client 152.53.187.237:61604] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYcIxPEC82JnxmrnFYmG3gAAAUI"]
[Sat Feb 07 17:41:27.987732 2026] [:error] [pid 50672:tid 50725] [client 152.53.187.237:61620] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYcIxw9o0jq1XS8Nv7McmQAAAFE"]
[Sat Feb 07 17:41:30.367768 2026] [:error] [pid 55157:tid 55173] [client 152.53.187.237:56960] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYcIyn36JdtTn2bTEoyfjQAAAQs"]
[Sat Feb 07 17:41:33.592336 2026] [:error] [pid 58058:tid 58082] [client 152.53.187.237:56976] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYcIzbz-Qlvs65S4DP_yVgAAAZU"]
[Sat Feb 07 17:41:36.649163 2026] [:error] [pid 55157:tid 55182] [client 152.53.187.237:56992] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYcI0H36JdtTn2bTEoyfmAAAARQ"]
[Sat Feb 07 17:41:39.359295 2026] [:error] [pid 50673:tid 50758] [client 152.53.187.237:57008] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYcI02VwLsaZ7aKO2cnUvAAAAJc"]
[Sat Feb 07 17:41:56.724138 2026] [:error] [pid 50672:tid 50725] [client 152.53.187.237:47052] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYcI5A9o0jq1XS8Nv7McuAAAAFE"]
[Sat Feb 07 17:41:59.144086 2026] [:error] [pid 43182:tid 43202] [client 152.53.187.237:47058] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYcI5_EC82JnxmrnFYmG7wAAAVI"]
[Sat Feb 07 17:42:02.096503 2026] [:error] [pid 50672:tid 50723] [client 152.53.187.237:53096] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYcI6g9o0jq1XS8Nv7McygAAAE8"]
[Sat Feb 07 17:42:05.771793 2026] [:error] [pid 50673:tid 50751] [client 152.53.187.237:53104] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYcI7WVwLsaZ7aKO2cnU1QAAAJA"]
[Sat Feb 07 17:42:38.098388 2026] [:error] [pid 50671:tid 50704] [client 152.53.187.237:53112] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYcJDrvqLohWBI_mqBN9RgAAABg"]
[Sat Feb 07 17:42:41.249313 2026] [:error] [pid 50672:tid 50728] [client 152.53.187.237:49934] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYcJEQ9o0jq1XS8Nv7Mc9wAAAFQ"]
[Sat Feb 07 17:42:44.123233 2026] [:error] [pid 43182:tid 43202] [client 152.53.187.237:49942] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYcJFPEC82JnxmrnFYmHEgAAAVI"]
[Sat Feb 07 17:42:47.153137 2026] [:error] [pid 50671:tid 50698] [client 152.53.187.237:49954] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYcJF7vqLohWBI_mqBN9TQAAABI"]
[Sat Feb 07 17:42:50.274234 2026] [:error] [pid 50673:tid 50747] [client 152.53.187.237:49962] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYcJGmVwLsaZ7aKO2cnVAAAAAIw"]
[Sat Feb 07 17:42:55.369384 2026] [:error] [pid 58058:tid 58081] [client 152.53.187.237:65078] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYcJH7z-Qlvs65S4DP_yogAAAZQ"]
[Sat Feb 07 17:43:00.533474 2026] [:error] [pid 50673:tid 50754] [client 152.53.187.237:63298] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYcJJGVwLsaZ7aKO2cnVDAAAAJM"]
[Sat Feb 07 17:43:04.143876 2026] [:error] [pid 55157:tid 55167] [client 152.53.187.237:63314] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYcJKH36JdtTn2bTEoyf_wAAAQU"]
[Sat Feb 07 19:47:11.747738 2026] [:error] [pid 50780:tid 50790] [client 52.201.4.175:53148] File does not exist: /usr/local/apache/htdocs/suspended-page/connector.php
[Sat Feb 07 19:49:32.818385 2026] [:error] [pid 50672:tid 50708] [client 182.44.8.254:43540] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYcmzA9o0jq1XS8Nv7M5XAAAAEA"]
[Sat Feb 07 20:53:54.788864 2026] [:error] [pid 50671:tid 50685] [client 45.92.29.144:50227] [client 45.92.29.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aYc14rvqLohWBI_mqBOjkgAAAAU"]
[Sat Feb 07 22:00:17.823957 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Feb 07 22:00:18.345597 2026] [:error] [pid 50673:tid 50750] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 07 22:00:18.874133 2026] [:error] [pid 50673:tid 50752] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Feb 07 22:00:19.357715 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Feb 07 22:00:19.843691 2026] [:error] [pid 50673:tid 50739] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Feb 07 22:00:20.352234 2026] [:error] [pid 50673:tid 50746] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Feb 07 22:00:20.832883 2026] [:error] [pid 50673:tid 50741] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 07 22:00:21.324468 2026] [:error] [pid 50673:tid 50755] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 07 22:00:22.307629 2026] [:error] [pid 50673:tid 50748] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Feb 07 22:00:23.285025 2026] [:error] [pid 50673:tid 50744] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 07 22:00:23.801935 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Feb 07 22:00:24.289734 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Feb 07 22:00:24.770114 2026] [:error] [pid 50673:tid 50750] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Feb 07 22:00:25.253777 2026] [:error] [pid 50673:tid 50753] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 07 22:00:25.766007 2026] [:error] [pid 50673:tid 50746] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Feb 07 22:00:26.248988 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Feb 07 22:00:26.742013 2026] [:error] [pid 50673:tid 50750] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Feb 07 22:00:27.226204 2026] [:error] [pid 50673:tid 50748] [client 31.171.130.134:51071] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Feb 07 22:00:34.115429 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.134:51071] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdFgmVwLsaZ7aKO2ckdNgAAAIU"]
[Sat Feb 07 22:00:36.643660 2026] [:error] [pid 50673:tid 50758] [client 31.171.130.161:47129] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdFhGVwLsaZ7aKO2ckdTQAAAJc"]
[Sat Feb 07 22:00:39.177238 2026] [:error] [pid 50673:tid 50757] [client 31.171.130.160:60823] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Feb 07 22:00:40.632567 2026] [:error] [pid 50673:tid 50736] [client 31.171.130.160:60823] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aYdFiGVwLsaZ7aKO2ckdcQAAAIE"]
[Sat Feb 07 22:00:42.592416 2026] [:error] [pid 50671:tid 50682] [client 31.171.130.164:40739] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 07 22:00:43.108949 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.164:40739] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYdFi7vqLohWBI_mqBOzLwAAAAY"]
[Sat Feb 07 22:00:44.622174 2026] [:error] [pid 50672:tid 50729] [client 31.171.130.140:43975] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Feb 07 22:00:47.150428 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.140:43975] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdFjw9o0jq1XS8Nv7NWPAAAAEA"]
[Sat Feb 07 22:00:48.625970 2026] [:error] [pid 55157:tid 55182] [client 31.171.130.135:31833] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdFkH36JdtTn2bTEozZjgAAARQ"]
[Sat Feb 07 22:00:49.598323 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.110:61067] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdFkWVwLsaZ7aKO2ckdrAAAAIg"]
[Sat Feb 07 22:00:50.602306 2026] [:error] [pid 50672:tid 50724] [client 31.171.130.112:38783] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdFkg9o0jq1XS8Nv7NWUgAAAFA"]
[Sat Feb 07 22:00:51.619482 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.118:54239] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdFk-tUmIu2JHM2CrvMPAAAAMM"]
[Sat Feb 07 22:00:52.621787 2026] [:error] [pid 50673:tid 50739] [client 31.171.130.136:34091] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdFlGVwLsaZ7aKO2ckdywAAAIQ"]
[Sat Feb 07 22:00:54.144894 2026] [:error] [pid 30684:tid 30699] [client 31.171.130.116:37655] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdFlrqwdxwowLt-_LwecAAAAcw"]
[Sat Feb 07 22:00:55.201985 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.113:46999] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Feb 07 22:00:56.279464 2026] [:error] [pid 50780:tid 50783] [client 31.171.130.113:46999] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aYdFmOtUmIu2JHM2CrvMbQAAAME"]
[Sat Feb 07 22:00:58.264984 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.148:44677] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdFmvEC82JnxmrnFYnbJAAAAU4"]
[Sat Feb 07 22:00:59.737569 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.141:30703] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdFm-tUmIu2JHM2CrvMlQAAAMg"]
[Sat Feb 07 22:01:00.777801 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.146:61889] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Feb 07 22:01:01.277407 2026] [:error] [pid 50673:tid 50749] [client 31.171.130.146:61889] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdFnWVwLsaZ7aKO2ckeEAAAAI4"]
[Sat Feb 07 22:01:02.241658 2026] [:error] [pid 30684:tid 30707] [client 31.171.130.155:60137] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Feb 07 22:01:03.790703 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.155:60137] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Feb 07 22:01:05.282774 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.155:60137] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdFobqwdxwowLt-_LweugAAAc0"]
[Sat Feb 07 22:01:06.303265 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.143:41493] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Feb 07 22:01:06.796675 2026] [:error] [pid 50673:tid 50736] [client 31.171.130.143:41493] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdFomVwLsaZ7aKO2ckeNgAAAIE"]
[Sat Feb 07 22:01:07.769698 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.122:22617] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Feb 07 22:01:10.900523 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.122:22617] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aYdFputUmIu2JHM2CrvM-QAAANQ"]
[Sat Feb 07 22:01:12.451052 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.113:42307] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdFqA9o0jq1XS8Nv7NW0wAAAEQ"]
[Sat Feb 07 22:01:13.927123 2026] [:error] [pid 55157:tid 55182] [client 31.171.130.147:61649] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Feb 07 22:01:14.413586 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.147:61649] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Feb 07 22:01:15.372991 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.147:61649] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdFq336JdtTn2bTEozaAQAAAQw"]
[Sat Feb 07 22:01:16.844645 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.107:32923] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdFrH36JdtTn2bTEozaCwAAARg"]
[Sat Feb 07 22:01:18.410102 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.138:28445] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdFrrz-Qlvs65S4DP8yngAAAYs"]
[Sat Feb 07 22:01:19.488761 2026] [:error] [pid 50673:tid 50747] [client 31.171.130.140:28659] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdFr2VwLsaZ7aKO2ckeawAAAIw"]
[Sat Feb 07 22:01:20.528646 2026] [:error] [pid 50780:tid 50799] [client 31.171.130.132:21475] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdFsOtUmIu2JHM2CrvNRgAAANE"]
[Sat Feb 07 22:01:22.604083 2026] [:error] [pid 50780:tid 50795] [client 31.171.130.152:25427] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Feb 07 22:01:23.096713 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.152:25427] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aYdFs-tUmIu2JHM2CrvNaAAAAM4"]
[Sat Feb 07 22:01:24.102803 2026] [:error] [pid 58058:tid 58083] [client 31.171.130.118:34851] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aYdFtLz-Qlvs65S4DP8yvgAAAZY"]
[Sat Feb 07 22:01:25.127802 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.108:31265] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYdFtbvqLohWBI_mqBO0HAAAAAs"]
[Sat Feb 07 22:01:27.134220 2026] [:error] [pid 43182:tid 43205] [client 31.171.130.140:33353] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Feb 07 22:01:28.200007 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.140:33353] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Feb 07 22:01:30.260859 2026] [:error] [pid 43182:tid 43207] [client 31.171.130.140:33353] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aYdFuvEC82JnxmrnFYncAgAAAVc"]
[Sat Feb 07 22:01:32.825721 2026] [:error] [pid 55157:tid 55173] [client 31.171.130.161:63907] [client 31.171.130.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.161, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYdFvH36JdtTn2bTEozacQAAAQs"]
[Sat Feb 07 22:01:33.315738 2026] [:error] [pid 55157:tid 55175] [client 31.171.130.161:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Feb 07 22:01:35.768329 2026] [:error] [pid 55157:tid 55168] [client 31.171.130.161:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Feb 07 22:01:36.324194 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.161:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Feb 07 22:01:38.782757 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.161:63907] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYdFwn36JdtTn2bTEozaoAAAAQ8"]
[Sat Feb 07 22:01:40.314036 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.107:20077] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Feb 07 22:01:40.830477 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.107:20077] [client 31.171.130.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.107, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYdFxH36JdtTn2bTEozasQAAARY"]
[Sat Feb 07 22:01:41.823297 2026] [:error] [pid 55157:tid 55170] [client 31.171.130.107:20077] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aYdFxX36JdtTn2bTEozaugAAAQg"]
[Sat Feb 07 22:01:44.836519 2026] [:error] [pid 58058:tid 58071] [client 31.171.130.154:33707] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Feb 07 22:01:45.844229 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.154:33707] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Feb 07 22:01:46.838992 2026] [:error] [pid 58058:tid 58068] [client 31.171.130.154:33707] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYdFyrz-Qlvs65S4DP8zgQAAAYc"]
[Sat Feb 07 22:01:47.861873 2026] [:error] [pid 58058:tid 58076] [client 31.171.130.149:44343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Feb 07 22:01:49.369216 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.149:44343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Feb 07 22:01:50.357086 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.149:44343] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Feb 07 22:01:51.336484 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.149:44343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Feb 07 22:01:51.814012 2026] [:error] [pid 58058:tid 58083] [client 31.171.130.149:44343] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYdFz7z-Qlvs65S4DP8zoAAAAZY"]
[Sat Feb 07 22:01:52.853447 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.164:40621] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Feb 07 22:01:53.334298 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.164:40621] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Feb 07 22:01:53.813489 2026] [:error] [pid 55157:tid 55173] [client 31.171.130.164:40621] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYdF0X36JdtTn2bTEozbEQAAAQs"]
[Sat Feb 07 22:01:55.282097 2026] [:error] [pid 55157:tid 55171] [client 31.171.130.110:49939] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Feb 07 22:01:56.246634 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.110:49939] [client 31.171.130.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.110, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aYdF1H36JdtTn2bTEozbIgAAAQ4"]
[Sat Feb 07 22:01:56.729715 2026] [:error] [pid 55157:tid 55181] [client 31.171.130.110:49939] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYdF1H36JdtTn2bTEozbJQAAARM"]
[Sat Feb 07 22:02:02.714396 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.111:27573] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Feb 07 22:02:05.665705 2026] [:error] [pid 50672:tid 50717] [client 31.171.130.111:27573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Feb 07 22:02:06.160330 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.111:27573] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYdF3g9o0jq1XS8Nv7NXrgAAAEA"]
[Sat Feb 07 22:02:07.191105 2026] [:error] [pid 55157:tid 55185] [client 31.171.130.160:57103] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Feb 07 22:02:08.680175 2026] [:error] [pid 55157:tid 55179] [client 31.171.130.160:57103] [client 31.171.130.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.160, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYdF4H36JdtTn2bTEozbfwAAARE"]
[Sat Feb 07 22:02:09.180799 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.160:57103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Feb 07 22:02:09.669825 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.160:57103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Feb 07 22:02:10.155612 2026] [:error] [pid 55157:tid 55185] [client 31.171.130.160:57103] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Feb 07 22:02:10.631856 2026] [:error] [pid 55157:tid 55172] [client 31.171.130.160:57103] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aYdF4n36JdtTn2bTEozbkgAAAQo"]
[Sat Feb 07 22:02:11.632596 2026] [:error] [pid 50671:tid 50701] [client 31.171.130.159:31353] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Feb 07 22:02:12.155499 2026] [:error] [pid 50671:tid 50680] [client 31.171.130.159:31353] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aYdF5LvqLohWBI_mqBO0_gAAAAA"]
[Sat Feb 07 22:02:13.618009 2026] [:error] [pid 50780:tid 50795] [client 31.171.130.151:55837] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Feb 07 22:02:14.104708 2026] [:error] [pid 50780:tid 50786] [client 31.171.130.151:55837] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYdF5utUmIu2JHM2CrvPRQAAAMQ"]
[Sat Feb 07 22:02:16.058847 2026] [:error] [pid 58058:tid 58063] [client 31.171.130.115:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Feb 07 22:02:16.540443 2026] [:error] [pid 58058:tid 58077] [client 31.171.130.115:27617] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYdF6Lz-Qlvs65S4DP80JQAAAZA"]
[Sat Feb 07 22:02:17.565241 2026] [:error] [pid 30684:tid 30691] [client 31.171.130.121:63237] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYdF6bqwdxwowLt-_LwglwAAAcQ"]
[Sat Feb 07 22:02:18.556089 2026] [:error] [pid 58058:tid 58071] [client 31.171.130.139:43745] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Feb 07 22:02:19.047128 2026] [:error] [pid 58058:tid 58070] [client 31.171.130.139:43745] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sat Feb 07 22:02:21.035950 2026] [:error] [pid 58058:tid 58079] [client 31.171.130.139:43745] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYdF7bz-Qlvs65S4DP80RwAAAZI"]
[Sat Feb 07 22:02:22.515636 2026] [:error] [pid 43182:tid 43203] [client 31.171.130.138:28675] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYdF7vEC82JnxmrnFYneRQAAAVM"]
[Sat Feb 07 22:02:24.923632 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.160:47323] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aYdF8PEC82JnxmrnFYneawAAAVE"]
[Sat Feb 07 22:02:25.897485 2026] [:error] [pid 30684:tid 30689] [client 31.171.130.113:43559] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Feb 07 22:02:26.874486 2026] [:error] [pid 30684:tid 30694] [client 31.171.130.113:43559] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Feb 07 22:02:27.355661 2026] [:error] [pid 30684:tid 30688] [client 31.171.130.113:43559] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYdF87qwdxwowLt-_Lwg1wAAAcE"]
[Sat Feb 07 22:02:28.315604 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.115:40613] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Feb 07 22:02:29.281484 2026] [:error] [pid 50672:tid 50711] [client 31.171.130.115:40613] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aYdF9Q9o0jq1XS8Nv7NYEgAAAEM"]
[Sat Feb 07 22:02:31.714650 2026] [:error] [pid 30684:tid 30710] [client 31.171.130.142:50049] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYdF97qwdxwowLt-_Lwg-QAAAdc"]
[Sat Feb 07 22:02:33.197339 2026] [:error] [pid 50671:tid 50682] [client 31.171.130.147:57753] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Feb 07 22:02:34.682807 2026] [:error] [pid 50671:tid 50690] [client 31.171.130.147:57753] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Feb 07 22:02:35.673674 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.147:57753] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Feb 07 22:02:36.159663 2026] [:error] [pid 50671:tid 50697] [client 31.171.130.147:57753] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYdF_LvqLohWBI_mqBO1YAAAABE"]
[Sat Feb 07 22:02:37.143770 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.147:39367] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aYdF_fEC82JnxmrnFYne8AAAAUg"]
[Sat Feb 07 22:02:38.099108 2026] [:error] [pid 50673:tid 50751] [client 31.171.130.160:50551] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYdF_mVwLsaZ7aKO2ckgXAAAAJA"]
[Sat Feb 07 22:02:39.068876 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.111:35877] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYdF__EC82JnxmrnFYnfAwAAAUs"]
[Sat Feb 07 22:02:40.054273 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.134:31677] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sat Feb 07 22:02:40.542914 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.134:31677] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYdGAOtUmIu2JHM2CrvQMQAAAM4"]
[Sat Feb 07 22:02:41.515296 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.152:53735] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYdGAetUmIu2JHM2CrvQPQAAANU"]
[Sat Feb 07 22:02:42.477303 2026] [:error] [pid 50671:tid 50680] [client 31.171.130.158:24591] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Feb 07 22:02:43.484737 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.158:24591] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aYdGA7vqLohWBI_mqBO1kAAAAA4"]
[Sat Feb 07 22:02:44.441522 2026] [:error] [pid 50673:tid 50751] [client 31.171.130.131:52765] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYdGBGVwLsaZ7aKO2ckgiwAAAJA"]
[Sat Feb 07 22:02:45.400367 2026] [:error] [pid 50673:tid 50747] [client 31.171.130.157:42125] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYdGBWVwLsaZ7aKO2ckglwAAAIw"]
[Sat Feb 07 22:02:46.378715 2026] [:error] [pid 55157:tid 55180] [client 31.171.130.141:44635] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYdGBn36JdtTn2bTEozcwQAAARI"]
[Sat Feb 07 22:02:47.871066 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.164:52321] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYdGBw9o0jq1XS8Nv7NYZwAAAEw"]
[Sat Feb 07 22:02:49.887018 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.118:65155] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYdGCfEC82JnxmrnFYnfWwAAAUA"]
[Sat Feb 07 22:02:50.865948 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.118:62333] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Feb 07 22:02:52.314856 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.118:62333] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Feb 07 22:02:52.790709 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.118:62333] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYdGDOtUmIu2JHM2CrvQsQAAANg"]
[Sat Feb 07 22:02:54.272236 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.134:63675] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Feb 07 22:02:54.757943 2026] [:error] [pid 55157:tid 55185] [client 31.171.130.134:63675] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Feb 07 22:02:57.168227 2026] [:error] [pid 55157:tid 55173] [client 31.171.130.134:63675] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aYdGEX36JdtTn2bTEozc9QAAAQs"]
[Sat Feb 07 22:02:59.630970 2026] [:error] [pid 30684:tid 30704] [client 31.171.130.160:32101] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYdGE7qwdxwowLt-_LwhtAAAAdE"]
[Sat Feb 07 22:03:00.647011 2026] [:error] [pid 30684:tid 30702] [client 31.171.130.114:27347] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYdGFLqwdxwowLt-_LwhuwAAAc8"]
[Sat Feb 07 22:03:03.651370 2026] [:error] [pid 43182:tid 43189] [client 31.171.130.136:56751] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYdGF_EC82JnxmrnFYnf0AAAAUU"]
[Sat Feb 07 22:03:05.624122 2026] [:error] [pid 43182:tid 43207] [client 31.171.130.135:44405] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Feb 07 22:03:06.113007 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.135:44405] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sat Feb 07 22:03:06.607995 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.135:44405] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sat Feb 07 22:03:07.097193 2026] [:error] [pid 43182:tid 43200] [client 31.171.130.135:44405] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Feb 07 22:03:09.526641 2026] [:error] [pid 43182:tid 43193] [client 31.171.130.135:44405] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYdGHfEC82JnxmrnFYngEAAAAUk"]
[Sat Feb 07 22:03:10.500111 2026] [:error] [pid 43182:tid 43190] [client 31.171.130.149:29031] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYdGHvEC82JnxmrnFYngHAAAAUY"]
[Sat Feb 07 22:03:11.457681 2026] [:error] [pid 55157:tid 55179] [client 31.171.130.162:42921] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYdGH336JdtTn2bTEozdFwAAARE"]
[Sat Feb 07 22:03:12.421494 2026] [:error] [pid 30684:tid 30697] [client 31.171.130.132:58899] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYdGILqwdxwowLt-_LwiCwAAAco"]
[Sat Feb 07 22:03:13.400158 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.140:43025] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYdGIbz-Qlvs65S4DP81owAAAYs"]
[Sat Feb 07 22:03:14.359751 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.149:20621] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYdGIvEC82JnxmrnFYngSQAAAUg"]
[Sat Feb 07 22:03:15.842948 2026] [:error] [pid 50671:tid 50704] [client 31.171.130.113:33441] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYdGI7vqLohWBI_mqBO2awAAABg"]
[Sat Feb 07 22:03:16.816571 2026] [:error] [pid 50673:tid 50758] [client 31.171.130.160:44557] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYdGJGVwLsaZ7aKO2ckhrAAAAJc"]
[Sat Feb 07 22:03:17.790061 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.142:45997] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYdGJbz-Qlvs65S4DP81rQAAAZM"]
[Sat Feb 07 22:03:18.768295 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.143:28731] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYdGJvEC82JnxmrnFYngdAAAAUI"]
[Sat Feb 07 22:03:20.760301 2026] [:error] [pid 50780:tid 50797] [client 31.171.130.121:23517] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYdGKOtUmIu2JHM2CrvRcAAAAM8"]
[Sat Feb 07 22:03:22.264769 2026] [:error] [pid 50671:tid 50684] [client 31.171.130.129:43625] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYdGKrvqLohWBI_mqBO2owAAAAQ"]
[Sat Feb 07 22:03:23.240117 2026] [:error] [pid 43182:tid 43189] [client 31.171.130.159:44497] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Feb 07 22:03:24.245195 2026] [:error] [pid 43182:tid 43200] [client 31.171.130.159:44497] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aYdGLPEC82JnxmrnFYngugAAAVA"]
[Sat Feb 07 22:03:26.246167 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.115:21905] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYdGLn36JdtTn2bTEozdRAAAAQ4"]
[Sat Feb 07 22:03:29.773287 2026] [:error] [pid 50673:tid 50747] [client 31.171.130.115:41635] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Feb 07 22:03:30.268058 2026] [:error] [pid 50673:tid 50746] [client 31.171.130.115:41635] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aYdGMmVwLsaZ7aKO2ckh_AAAAIs"]
[Sat Feb 07 22:03:31.773063 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.139:61195] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Feb 07 22:03:32.277625 2026] [:error] [pid 50780:tid 50801] [client 31.171.130.139:61195] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sat Feb 07 22:03:32.780414 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.139:61195] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Feb 07 22:03:33.275672 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.139:61195] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYdGNetUmIu2JHM2CrvRoQAAANU"]
[Sat Feb 07 22:03:34.272693 2026] [:error] [pid 50672:tid 50717] [client 31.171.130.131:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Feb 07 22:03:34.748650 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.131:53711] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aYdGNg9o0jq1XS8Nv7NZDAAAAEg"]
[Sat Feb 07 22:03:36.687992 2026] [:error] [pid 55157:tid 55178] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Feb 07 22:03:37.186293 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Feb 07 22:03:37.671133 2026] [:error] [pid 55157:tid 55170] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sat Feb 07 22:03:40.110481 2026] [:error] [pid 55157:tid 55167] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Feb 07 22:03:40.606902 2026] [:error] [pid 55157:tid 55180] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sat Feb 07 22:03:41.575895 2026] [:error] [pid 55157:tid 55162] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sat Feb 07 22:03:43.039264 2026] [:error] [pid 55157:tid 55176] [client 31.171.130.164:23565] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Feb 07 22:03:43.534619 2026] [:error] [pid 55157:tid 55181] [client 31.171.130.164:23565] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aYdGP336JdtTn2bTEozdigAAARM"]
[Sat Feb 07 22:03:44.591693 2026] [:error] [pid 50671:tid 50697] [client 31.171.130.136:28433] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYdGQLvqLohWBI_mqBO3ZwAAABE"]
[Sat Feb 07 22:03:45.568689 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.165:63001] [client 31.171.130.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.165, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYdGQQ9o0jq1XS8Nv7NZfwAAAEg"]
[Sat Feb 07 22:03:45.572415 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.165:63001] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 07 22:03:46.059092 2026] [:error] [pid 50672:tid 50730] [client 31.171.130.165:63001] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Feb 07 22:03:46.538618 2026] [:error] [pid 50672:tid 50727] [client 31.171.130.165:63001] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aYdGQg9o0jq1XS8Nv7NZhgAAAFM"]
[Sat Feb 07 22:03:49.896653 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.165:31177] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Feb 07 22:03:50.378077 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.165:31177] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYdGRutUmIu2JHM2CrvR5AAAANg"]
[Sat Feb 07 22:03:51.336972 2026] [:error] [pid 43182:tid 43199] [client 31.171.130.108:29773] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aYdGR_EC82JnxmrnFYnh3AAAAU8"]
[Sat Feb 07 22:03:54.302491 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.115:37097] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYdGSrqwdxwowLt-_LwjAwAAAcs"]
[Sat Feb 07 22:03:55.289020 2026] [:error] [pid 55157:tid 55170] [client 31.171.130.158:58283] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aYdGS336JdtTn2bTEozduAAAAQg"]
[Sat Feb 07 22:03:57.685971 2026] [:error] [pid 50780:tid 50801] [client 31.171.130.163:23595] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Feb 07 22:03:58.658175 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.163:23595] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aYdGTutUmIu2JHM2CrvSFQAAANA"]
[Sat Feb 07 22:04:00.611070 2026] [:error] [pid 50780:tid 50804] [client 31.171.130.137:45425] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Feb 07 22:04:01.585623 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.137:45425] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aYdGUetUmIu2JHM2CrvSNQAAANU"]
[Sat Feb 07 22:04:02.565606 2026] [:error] [pid 55157:tid 55162] [client 31.171.130.149:55889] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aYdGUn36JdtTn2bTEozd7AAAAQA"]
[Sat Feb 07 22:04:04.004569 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.118:58349] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Feb 07 22:04:04.498837 2026] [:error] [pid 58058:tid 58071] [client 31.171.130.118:58349] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aYdGVLz-Qlvs65S4DP82ugAAAYo"]
[Sat Feb 07 22:04:05.457408 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.139:34177] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYdGVX36JdtTn2bTEozd-wAAARg"]
[Sat Feb 07 22:04:07.376006 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.109:42311] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Feb 07 22:04:07.856331 2026] [:error] [pid 43182:tid 43189] [client 31.171.130.109:42311] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sat Feb 07 22:04:08.857987 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.109:42311] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Feb 07 22:04:09.822658 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.109:42311] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aYdGWfEC82JnxmrnFYniigAAAUE"]
[Sat Feb 07 22:04:10.813662 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.139:54393] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aYdGWutUmIu2JHM2CrvShQAAAMM"]
[Sat Feb 07 22:04:13.193591 2026] [:error] [pid 58058:tid 58066] [client 31.171.130.120:36881] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Feb 07 22:04:13.664661 2026] [:error] [pid 58058:tid 58073] [client 31.171.130.120:36881] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aYdGXbz-Qlvs65S4DP828AAAAYw"]
[Sat Feb 07 22:04:14.612672 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.149:38527] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYdGXg9o0jq1XS8Nv7NaOwAAAEw"]
[Sat Feb 07 22:04:15.574625 2026] [:error] [pid 58058:tid 58070] [client 31.171.130.132:48005] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYdGX7z-Qlvs65S4DP829AAAAYk"]
[Sat Feb 07 22:04:18.444892 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.116:38451] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sat Feb 07 22:04:18.925035 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.116:38451] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aYdGYrz-Qlvs65S4DP83CQAAAZc"]
[Sat Feb 07 22:04:20.338076 2026] [:error] [pid 30684:tid 30697] [client 31.171.130.149:45407] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYdGZLqwdxwowLt-_LwjfAAAAco"]
[Sat Feb 07 22:04:21.329966 2026] [:error] [pid 50672:tid 50732] [client 31.171.130.136:28261] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Feb 07 22:04:21.810061 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.136:28261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Feb 07 22:04:22.766542 2026] [:error] [pid 50672:tid 50710] [client 31.171.130.136:28261] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Feb 07 22:04:24.698649 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.136:28261] [client 31.171.130.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.136, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aYdGaA9o0jq1XS8Nv7NaigAAAEA"]
[Sat Feb 07 22:04:25.644787 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.136:28261] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sat Feb 07 22:04:26.152717 2026] [:error] [pid 50672:tid 50728] [client 31.171.130.136:28261] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sat Feb 07 22:04:26.636317 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.136:28261] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Feb 07 22:04:27.577611 2026] [:error] [pid 50672:tid 50730] [client 31.171.130.136:28261] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aYdGaw9o0jq1XS8Nv7NaowAAAFY"]
[Sat Feb 07 22:04:28.525089 2026] [:error] [pid 58058:tid 58067] [client 31.171.130.139:55927] [client 31.171.130.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.139, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aYdGbLz-Qlvs65S4DP83SgAAAYY"]
[Sat Feb 07 22:04:29.972982 2026] [:error] [pid 58058:tid 58083] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Feb 07 22:04:30.485435 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Feb 07 22:04:31.456953 2026] [:error] [pid 58058:tid 58077] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Feb 07 22:04:32.429974 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Feb 07 22:04:33.854813 2026] [:error] [pid 58058:tid 58067] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Feb 07 22:04:37.202683 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Feb 07 22:04:37.702644 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sat Feb 07 22:04:40.108862 2026] [:error] [pid 58058:tid 58076] [client 31.171.130.139:55927] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Feb 07 22:04:41.050949 2026] [:error] [pid 58058:tid 58073] [client 31.171.130.139:55927] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aYdGebz-Qlvs65S4DP830AAAAYw"]
[Sat Feb 07 22:04:44.917569 2026] [:error] [pid 50673:tid 50753] [client 31.171.130.137:54975] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Feb 07 22:04:45.390218 2026] [:error] [pid 50673:tid 50756] [client 31.171.130.137:54975] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYdGfWVwLsaZ7aKO2ckkIgAAAJU"]
[Sat Feb 07 22:04:46.833112 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.145:54041] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Feb 07 22:04:47.304366 2026] [:error] [pid 58058:tid 58081] [client 31.171.130.145:54041] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aYdGf7z-Qlvs65S4DP84AQAAAZQ"]
[Sat Feb 07 22:04:49.215671 2026] [:error] [pid 50780:tid 50784] [client 31.171.130.130:39039] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Feb 07 22:04:50.164848 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.130:39039] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Feb 07 22:04:51.121175 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.130:39039] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Feb 07 22:04:51.590730 2026] [:error] [pid 50780:tid 50800] [client 31.171.130.130:39039] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Feb 07 22:04:52.534249 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.130:39039] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYdGhOtUmIu2JHM2CrvUAgAAAM4"]
[Sat Feb 07 22:04:53.502182 2026] [:error] [pid 58058:tid 58070] [client 31.171.130.133:32539] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sat Feb 07 22:04:53.977707 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.133:32539] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Feb 07 22:04:54.454447 2026] [:error] [pid 58058:tid 58081] [client 31.171.130.133:32539] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYdGhrz-Qlvs65S4DP84LQAAAZQ"]
[Sat Feb 07 22:04:55.871497 2026] [:error] [pid 58058:tid 58075] [client 31.171.130.114:63275] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aYdGh7z-Qlvs65S4DP84QgAAAY4"]
[Sat Feb 07 22:04:57.301780 2026] [:error] [pid 50671:tid 50697] [client 31.171.130.108:45159] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Feb 07 22:04:58.754279 2026] [:error] [pid 50671:tid 50704] [client 31.171.130.108:45159] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Feb 07 22:04:59.241403 2026] [:error] [pid 50671:tid 50702] [client 31.171.130.108:45159] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sat Feb 07 22:04:59.760627 2026] [:error] [pid 50671:tid 50695] [client 31.171.130.108:45159] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aYdGi7vqLohWBI_mqBO5DAAAAA8"]
[Sat Feb 07 22:05:00.725001 2026] [:error] [pid 30684:tid 30706] [client 31.171.130.150:28181] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aYdGjLqwdxwowLt-_LwksgAAAdM"]
[Sat Feb 07 22:05:04.172443 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.139:30269] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sat Feb 07 22:05:05.129145 2026] [:error] [pid 50780:tid 50805] [client 31.171.130.139:30269] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aYdGketUmIu2JHM2CrvUgAAAANc"]
[Sat Feb 07 22:05:06.575837 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.120:40181] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aYdGkrz-Qlvs65S4DP84fQAAAYs"]
[Sat Feb 07 22:05:08.041220 2026] [:error] [pid 50780:tid 50791] [client 31.171.130.137:52683] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Feb 07 22:05:08.521029 2026] [:error] [pid 50780:tid 50797] [client 31.171.130.137:52683] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Feb 07 22:05:08.994826 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.137:52683] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aYdGlOtUmIu2JHM2CrvUmwAAAM4"]
[Sat Feb 07 22:05:10.436925 2026] [:error] [pid 50672:tid 50731] [client 31.171.130.115:53849] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Feb 07 22:05:10.913946 2026] [:error] [pid 50672:tid 50730] [client 31.171.130.115:53849] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sat Feb 07 22:05:11.895301 2026] [:error] [pid 50672:tid 50714] [client 31.171.130.115:53849] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Feb 07 22:05:13.380976 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.115:53849] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aYdGmQ9o0jq1XS8Nv7Nb1wAAAEg"]
[Sat Feb 07 22:05:14.332977 2026] [:error] [pid 50780:tid 50800] [client 31.171.130.108:35087] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Feb 07 22:05:15.774923 2026] [:error] [pid 50780:tid 50783] [client 31.171.130.108:35087] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYdGm-tUmIu2JHM2CrvUvgAAAME"]
[Sat Feb 07 22:05:17.234718 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.142:63095] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sat Feb 07 22:05:18.685946 2026] [:error] [pid 58058:tid 58068] [client 31.171.130.142:63095] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Feb 07 22:05:19.165973 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.142:63095] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Feb 07 22:05:20.123856 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.142:63095] [client 31.171.130.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.142, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aYdGoLz-Qlvs65S4DP84xwAAAY0"]
[Sat Feb 07 22:05:22.521598 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.142:63095] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aYdGorz-Qlvs65S4DP842QAAAYs"]
[Sat Feb 07 22:05:23.471208 2026] [:error] [pid 50671:tid 50696] [client 31.171.130.152:62981] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sat Feb 07 22:05:23.945593 2026] [:error] [pid 50671:tid 50702] [client 31.171.130.152:62981] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aYdGo7vqLohWBI_mqBO5nAAAABY"]
[Sat Feb 07 22:05:27.801267 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.115:37607] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Feb 07 22:05:28.790960 2026] [:error] [pid 55157:tid 55165] [client 31.171.130.115:37607] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Feb 07 22:05:29.766694 2026] [:error] [pid 55157:tid 55185] [client 31.171.130.115:37607] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aYdGqX36JdtTn2bTEozgMgAAARc"]
[Sat Feb 07 22:05:31.200702 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.120:43303] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Feb 07 22:05:31.673506 2026] [:error] [pid 50671:tid 50681] [client 31.171.130.120:43303] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sat Feb 07 22:05:32.624792 2026] [:error] [pid 50671:tid 50698] [client 31.171.130.120:43303] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aYdGrLvqLohWBI_mqBO53gAAABI"]
[Sat Feb 07 22:05:34.055664 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.149:34289] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYdGrvEC82JnxmrnFYnlZQAAAUg"]
[Sat Feb 07 22:05:35.008059 2026] [:error] [pid 58058:tid 58068] [client 31.171.130.163:59755] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sat Feb 07 22:05:35.490869 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.163:59755] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sat Feb 07 22:05:36.451741 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.163:59755] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aYdGsLz-Qlvs65S4DP85MQAAAZc"]
[Sat Feb 07 22:05:37.433452 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.138:53163] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Feb 07 22:05:38.403020 2026] [:error] [pid 50780:tid 50793] [client 31.171.130.138:53163] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sat Feb 07 22:05:38.901766 2026] [:error] [pid 50780:tid 50792] [client 31.171.130.138:53163] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aYdGsutUmIu2JHM2CrvVMwAAAMo"]
[Sat Feb 07 22:05:40.352913 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.143:51439] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aYdGtH36JdtTn2bTEozgYwAAARU"]
[Sat Feb 07 22:05:41.334033 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.129:38853] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aYdGtbvqLohWBI_mqBO6HgAAAAs"]
[Sat Feb 07 22:05:42.277619 2026] [:error] [pid 50672:tid 50718] [client 31.171.130.146:40779] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aYdGtg9o0jq1XS8Nv7NcTwAAAEo"]
[Sat Feb 07 22:05:43.243576 2026] [:error] [pid 30684:tid 30701] [client 31.171.130.163:32743] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aYdGt7qwdxwowLt-_Lwl7AAAAc4"]
[Sat Feb 07 22:05:44.186647 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.150:43135] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aYdGuH36JdtTn2bTEozgfgAAAQc"]
[Sat Feb 07 22:05:45.123057 2026] [:error] [pid 50672:tid 50724] [client 31.171.130.123:42283] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aYdGuQ9o0jq1XS8Nv7NcXwAAAFA"]
[Sat Feb 07 22:05:47.087007 2026] [:error] [pid 55157:tid 55172] [client 31.171.130.146:61911] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aYdGu336JdtTn2bTEozglQAAAQo"]
[Sat Feb 07 22:05:48.046747 2026] [:error] [pid 30684:tid 30705] [client 31.171.130.115:49919] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aYdGvLqwdxwowLt-_LwmEQAAAdI"]
[Sat Feb 07 22:05:49.000970 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.118:46739] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aYdGvOtUmIu2JHM2CrvVbAAAAMc"]
[Sat Feb 07 22:05:50.426790 2026] [:error] [pid 50673:tid 50759] [client 31.171.130.109:41619] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aYdGvmVwLsaZ7aKO2ckmOwAAAJg"]
[Sat Feb 07 22:05:52.340948 2026] [:error] [pid 58058:tid 58063] [client 31.171.130.143:20563] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aYdGwLz-Qlvs65S4DP85mwAAAYI"]
[Sat Feb 07 22:05:53.292653 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.165:55775] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sat Feb 07 22:05:55.273252 2026] [:error] [pid 50673:tid 50736] [client 31.171.130.165:55775] [client 31.171.130.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.165, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYdGw2VwLsaZ7aKO2ckmaAAAAIE"]
[Sat Feb 07 22:05:58.123762 2026] [:error] [pid 50673:tid 50741] [client 31.171.130.165:55775] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aYdGxmVwLsaZ7aKO2ckmfgAAAIY"]
[Sat Feb 07 22:05:59.080827 2026] [:error] [pid 50780:tid 50782] [client 31.171.130.111:52361] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aYdGx-tUmIu2JHM2CrvVrAAAAMA"]
[Sat Feb 07 22:06:01.505240 2026] [:error] [pid 50671:tid 50685] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Feb 07 22:06:01.993171 2026] [:error] [pid 50671:tid 50696] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sat Feb 07 22:06:03.913460 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sat Feb 07 22:06:04.440060 2026] [:error] [pid 50671:tid 50697] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sat Feb 07 22:06:06.376335 2026] [:error] [pid 50671:tid 50683] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sat Feb 07 22:06:06.858127 2026] [:error] [pid 50671:tid 50698] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Feb 07 22:06:07.330368 2026] [:error] [pid 50671:tid 50684] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sat Feb 07 22:06:07.817821 2026] [:error] [pid 50671:tid 50688] [client 31.171.130.114:58397] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sat Feb 07 22:06:08.288526 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.114:58397] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYdG0LvqLohWBI_mqBO6wgAAAA4"]
[Sat Feb 07 22:06:09.227948 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.108:59357] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aYdG0bqwdxwowLt-_LwmnAAAAc0"]
[Sat Feb 07 22:06:10.212979 2026] [:error] [pid 50673:tid 50737] [client 31.171.130.137:27697] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aYdG0mVwLsaZ7aKO2ckm-AAAAII"]
[Sat Feb 07 22:06:11.652843 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.162:56103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sat Feb 07 22:06:12.133591 2026] [:error] [pid 50780:tid 50792] [client 31.171.130.162:56103] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Feb 07 22:06:13.111941 2026] [:error] [pid 50780:tid 50784] [client 31.171.130.162:56103] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Feb 07 22:06:14.057598 2026] [:error] [pid 50780:tid 50801] [client 31.171.130.162:56103] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aYdG1utUmIu2JHM2CrvWAwAAANM"]
[Sat Feb 07 22:06:17.605868 2026] [:error] [pid 50780:tid 50799] [client 31.171.130.109:26333] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aYdG2etUmIu2JHM2CrvWEgAAANE"]
[Sat Feb 07 22:06:18.543995 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.108:40235] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aYdG2rqwdxwowLt-_Lwm4QAAAc0"]
[Sat Feb 07 22:06:21.426527 2026] [:error] [pid 43182:tid 43187] [client 31.171.130.119:51209] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aYdG3fEC82JnxmrnFYnnEgAAAUM"]
[Sat Feb 07 22:06:22.844134 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.109:52979] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aYdG3rz-Qlvs65S4DP86cQAAAY0"]
[Sat Feb 07 22:06:24.789967 2026] [:error] [pid 55157:tid 55162] [client 31.171.130.136:29003] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aYdG4H36JdtTn2bTEozhNAAAAQA"]
[Sat Feb 07 22:06:33.333377 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.138:26591] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aYdG6etUmIu2JHM2CrvWbwAAANg"]
[Sat Feb 07 22:06:34.327566 2026] [:error] [pid 50780:tid 50792] [client 31.171.130.146:35453] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sat Feb 07 22:06:35.287608 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.146:35453] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aYdG6-tUmIu2JHM2CrvWfgAAAM4"]
[Sat Feb 07 22:06:37.230811 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.123:40391] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Feb 07 22:06:38.663869 2026] [:error] [pid 55157:tid 55185] [client 31.171.130.123:40391] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Feb 07 22:06:39.137755 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.123:40391] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aYdG7336JdtTn2bTEozhiAAAARY"]
[Sat Feb 07 22:06:41.065099 2026] [:error] [pid 50672:tid 50731] [client 31.171.130.130:26851] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aYdG8Q9o0jq1XS8Nv7Nd3wAAAFc"]
[Sat Feb 07 22:06:44.015711 2026] [:error] [pid 55157:tid 55166] [client 31.171.130.140:39893] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aYdG9H36JdtTn2bTEozhowAAAQQ"]
[Sat Feb 07 22:06:47.345097 2026] [:error] [pid 50673:tid 50741] [client 31.171.130.160:27727] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aYdG92VwLsaZ7aKO2ckoQgAAAIY"]
[Sat Feb 07 22:06:48.759069 2026] [:error] [pid 50671:tid 50690] [client 31.171.130.145:52717] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Feb 07 22:06:49.269162 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.145:52717] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aYdG-bvqLohWBI_mqBO7kQAAAAY"]
[Sat Feb 07 22:06:50.232606 2026] [:error] [pid 50780:tid 50804] [client 31.171.130.122:52295] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aYdG-utUmIu2JHM2CrvW4gAAANY"]
[Sat Feb 07 22:06:53.635632 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.162:32147] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aYdG_X36JdtTn2bTEozh2wAAARU"]
[Sat Feb 07 22:06:54.582268 2026] [:error] [pid 55157:tid 55172] [client 31.171.130.139:50937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Feb 07 22:06:56.499688 2026] [:error] [pid 55157:tid 55167] [client 31.171.130.139:50937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Feb 07 22:06:56.972633 2026] [:error] [pid 55157:tid 55182] [client 31.171.130.139:50937] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aYdHAH36JdtTn2bTEozh7wAAARQ"]
[Sat Feb 07 22:06:58.901983 2026] [:error] [pid 50780:tid 50793] [client 31.171.130.145:27811] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sat Feb 07 22:06:59.854029 2026] [:error] [pid 50780:tid 50805] [client 31.171.130.145:27811] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYdHA-tUmIu2JHM2CrvXMgAAANc"]
[Sat Feb 07 22:07:00.828725 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.109:53469] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aYdHBLz-Qlvs65S4DP87cwAAAZU"]
[Sat Feb 07 22:07:02.749607 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.121:42665] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aYdHBvEC82JnxmrnFYnoOAAAAUI"]
[Sat Feb 07 22:07:05.152522 2026] [:error] [pid 55157:tid 55171] [client 31.171.130.157:24107] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aYdHCX36JdtTn2bTEoziIwAAAQk"]
[Sat Feb 07 22:07:06.109625 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.138:34807] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aYdHCvEC82JnxmrnFYnoVgAAAU4"]
[Sat Feb 07 22:07:09.865986 2026] [:error] [pid 50780:tid 50784] [client 31.171.130.133:46215] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sat Feb 07 22:07:12.339797 2026] [:error] [pid 50780:tid 50787] [client 31.171.130.133:46215] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aYdHEOtUmIu2JHM2CrvXdgAAAMU"]
[Sat Feb 07 22:07:14.318798 2026] [:error] [pid 50673:tid 50757] [client 31.171.130.137:20521] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aYdHEmVwLsaZ7aKO2cko7QAAAJY"]
[Sat Feb 07 22:07:15.267596 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.119:50617] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aYdHE7vqLohWBI_mqBO8CQAAAAw"]
[Sat Feb 07 22:07:16.696151 2026] [:error] [pid 50780:tid 50786] [client 31.171.130.122:64077] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat Feb 07 22:07:17.170166 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.122:64077] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aYdHFetUmIu2JHM2CrvXiwAAANA"]
[Sat Feb 07 22:07:18.621749 2026] [:error] [pid 50672:tid 50715] [client 31.171.130.147:42511] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aYdHFg9o0jq1XS8Nv7Ne4AAAAEc"]
[Sat Feb 07 22:07:21.967122 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.135:46553] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aYdHGbvqLohWBI_mqBO8PwAAAA4"]
[Sat Feb 07 22:07:23.389156 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.131:33149] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Feb 07 22:07:23.860243 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.131:33149] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aYdHG_EC82JnxmrnFYnoswAAAUA"]
[Sat Feb 07 22:07:25.761890 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.108:42251] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aYdHHfEC82JnxmrnFYnowQAAAU4"]
[Sat Feb 07 22:07:27.212503 2026] [:error] [pid 50671:tid 50682] [client 31.171.130.152:36031] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aYdHH7vqLohWBI_mqBO8bgAAAAI"]
[Sat Feb 07 22:07:28.636516 2026] [:error] [pid 58058:tid 58075] [client 31.171.130.164:53615] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aYdHILz-Qlvs65S4DP88UAAAAY4"]
[Sat Feb 07 22:07:29.576697 2026] [:error] [pid 58058:tid 58078] [client 31.171.130.165:56099] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aYdHIbz-Qlvs65S4DP88VwAAAZE"]
[Sat Feb 07 22:07:30.531735 2026] [:error] [pid 50673:tid 50744] [client 31.171.130.129:24299] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aYdHImVwLsaZ7aKO2ckpJAAAAIk"]
[Sat Feb 07 22:07:34.443993 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.158:31723] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aYdHJrz-Qlvs65S4DP88hwAAAZc"]
[Sat Feb 07 22:07:36.956740 2026] [:error] [pid 30684:tid 30710] [client 31.171.130.145:47207] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aYdHKLqwdxwowLt-_LwolAAAAdc"]
[Sat Feb 07 22:07:38.880963 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.115:21575] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Feb 07 22:07:39.414405 2026] [:error] [pid 50780:tid 50804] [client 31.171.130.115:21575] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aYdHK-tUmIu2JHM2CrvYQwAAANY"]
[Sat Feb 07 22:07:42.042646 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.149:41119] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aYdHLutUmIu2JHM2CrvYWQAAAMc"]
[Sat Feb 07 22:07:42.980806 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.112:38575] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sat Feb 07 22:07:46.110651 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.112:38575] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aYdHMvEC82JnxmrnFYnpWgAAAVE"]
[Sat Feb 07 22:07:47.615909 2026] [:error] [pid 50673:tid 50752] [client 31.171.130.110:54841] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aYdHM2VwLsaZ7aKO2ckpgQAAAJE"]
[Sat Feb 07 22:07:49.069827 2026] [:error] [pid 58058:tid 58064] [client 31.171.130.148:40719] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aYdHNbz-Qlvs65S4DP886QAAAYM"]
[Sat Feb 07 22:07:51.175916 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.139:62849] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aYdHN7vqLohWBI_mqBO9GQAAABQ"]
[Sat Feb 07 22:07:56.882052 2026] [:error] [pid 55157:tid 55181] [client 31.171.130.148:42567] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aYdHPH36JdtTn2bTEozjMAAAARM"]
[Sat Feb 07 22:07:57.860793 2026] [:error] [pid 58058:tid 58085] [client 31.171.130.122:59731] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aYdHPbz-Qlvs65S4DP89LgAAAZg"]
[Sat Feb 07 22:08:00.405729 2026] [:error] [pid 50672:tid 50719] [client 31.171.130.164:39331] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aYdHQA9o0jq1XS8Nv7NfewAAAEs"]
[Sat Feb 07 22:08:01.470783 2026] [:error] [pid 50671:tid 50683] [client 31.171.130.149:36389] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYdHQbvqLohWBI_mqBO9WAAAAAM"]
[Sat Feb 07 22:08:03.519918 2026] [:error] [pid 50671:tid 50701] [client 31.171.130.144:21805] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aYdHQ7vqLohWBI_mqBO9bAAAABU"]
[Sat Feb 07 22:08:04.476867 2026] [:error] [pid 30684:tid 30688] [client 31.171.130.150:55769] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aYdHRLqwdxwowLt-_LwpWwAAAcE"]
[Sat Feb 07 22:08:05.412617 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.148:38515] [client 31.171.130.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.148, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aYdHRbqwdxwowLt-_LwpYAAAAc0"]
[Sat Feb 07 22:08:05.416280 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.148:38515] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Feb 07 22:08:05.888202 2026] [:error] [pid 30684:tid 30706] [client 31.171.130.148:38515] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aYdHRbqwdxwowLt-_LwpZAAAAdM"]
[Sat Feb 07 22:08:07.824754 2026] [:error] [pid 43182:tid 43194] [client 31.171.130.149:37725] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Feb 07 22:08:08.307158 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.149:37725] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYdHSPEC82JnxmrnFYnpwQAAAUs"]
[Sat Feb 07 22:08:09.247661 2026] [:error] [pid 30684:tid 30688] [client 31.171.130.109:52103] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aYdHSbqwdxwowLt-_LwpfAAAAcE"]
[Sat Feb 07 22:08:10.197050 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.145:39229] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sat Feb 07 22:08:13.589025 2026] [:error] [pid 50672:tid 50711] [client 31.171.130.145:39229] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aYdHTQ9o0jq1XS8Nv7NfmwAAAEM"]
[Sat Feb 07 22:08:14.558500 2026] [:error] [pid 50672:tid 50732] [client 31.171.130.121:28003] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aYdHTg9o0jq1XS8Nv7NfowAAAFg"]
[Sat Feb 07 22:08:16.490922 2026] [:error] [pid 30684:tid 30692] [client 31.171.130.110:29029] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aYdHULqwdxwowLt-_LwpqgAAAcU"]
[Sat Feb 07 22:08:17.447980 2026] [:error] [pid 30684:tid 30708] [client 31.171.130.137:25767] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aYdHUbqwdxwowLt-_LwpsAAAAdU"]
[Sat Feb 07 22:08:18.404341 2026] [:error] [pid 43182:tid 43189] [client 31.171.130.149:40591] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sat Feb 07 22:08:18.896813 2026] [:error] [pid 43182:tid 43194] [client 31.171.130.149:40591] [client 31.171.130.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.149, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aYdHUvEC82JnxmrnFYnqAAAAAUo"]
[Sat Feb 07 22:08:19.852608 2026] [:error] [pid 43182:tid 43199] [client 31.171.130.149:40591] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aYdHU_EC82JnxmrnFYnqBAAAAU8"]
[Sat Feb 07 22:08:22.732793 2026] [:error] [pid 50671:tid 50693] [client 31.171.130.110:24839] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aYdHVrvqLohWBI_mqBO9_AAAAA0"]
[Sat Feb 07 22:08:23.690246 2026] [:error] [pid 43182:tid 43208] [client 31.171.130.133:45309] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Feb 07 22:08:24.180912 2026] [:error] [pid 43182:tid 43187] [client 31.171.130.133:45309] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aYdHWPEC82JnxmrnFYnqDwAAAUM"]
[Sat Feb 07 22:08:25.136651 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.164:38887] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aYdHWbqwdxwowLt-_Lwp5wAAAc0"]
[Sat Feb 07 22:08:26.092353 2026] [:error] [pid 50672:tid 50730] [client 31.171.130.140:54021] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Feb 07 22:08:27.539099 2026] [:error] [pid 50672:tid 50723] [client 31.171.130.140:54021] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYdHWw9o0jq1XS8Nv7Nf_QAAAE8"]
[Sat Feb 07 22:08:29.454635 2026] [:error] [pid 50780:tid 50800] [client 31.171.130.112:40191] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYdHXetUmIu2JHM2CrvZsAAAANI"]
[Sat Feb 07 22:08:30.404730 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.146:35819] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sat Feb 07 22:08:31.436026 2026] [:error] [pid 43182:tid 43208] [client 31.171.130.146:35819] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Feb 07 22:08:32.417338 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.146:35819] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aYdHYPEC82JnxmrnFYnqOgAAAUQ"]
[Sat Feb 07 22:45:14.135244 2026] [:error] [pid 58058:tid 58061] [client 101.33.66.34:47234] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYdP-rz-Qlvs65S4DP9ZKwAAAYA"]
[Sun Feb 08 00:16:56.559068 2026] [:error] [pid 50780:tid 50798] [client 103.77.107.178:54040] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aYdleOtUmIu2JHM2CrsIrQAAANA"]
[Sun Feb 08 00:16:57.233453 2026] [:error] [pid 50671:tid 50696] [client 103.77.107.178:54406] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aYdlebvqLohWBI_mqBPmcgAAABA"]
[Sun Feb 08 02:02:48.919660 2026] [:error] [pid 46302:tid 46356] [client 54.90.128.13:42746] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sun Feb 08 02:02:54.745743 2026] [:error] [pid 46302:tid 46350] [client 54.90.128.13:42758] [client 54.90.128.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aYd-TuLz0c8aDYK5YhbXGgAAAQA"]
[Sun Feb 08 02:08:39.909522 2026] [:error] [pid 17001:tid 17032] [client 193.180.209.38:48366] [client 193.180.209.38] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=application/pdf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYd_p90X31QDRSlPKmR9IAAAAZA"]
[Sun Feb 08 04:24:15.714146 2026] [:error] [pid 24421:tid 24439] [client 23.100.66.55:58676] File does not exist: /usr/local/apache/htdocs/suspended-page/x9.php
[Sun Feb 08 04:24:15.917663 2026] [:error] [pid 24421:tid 24441] [client 23.100.66.55:58676] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 04:24:16.122181 2026] [:error] [pid 24421:tid 24455] [client 23.100.66.55:58676] File does not exist: /usr/local/apache/htdocs/suspended-page/byel.php
[Sun Feb 08 04:24:16.325044 2026] [:error] [pid 24421:tid 24449] [client 23.100.66.55:58676] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/layou.php"] [unique_id "aYefcKp7cTzhX5M1IP8DdQAAABI"]
[Sun Feb 08 04:24:16.813865 2026] [:error] [pid 24423:tid 24505] [client 23.100.66.55:58683] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/layou.php"] [unique_id "aYefcE3f9n1Y0TpV5YZtogAAAJQ"]
[Sun Feb 08 04:24:17.290615 2026] [:error] [pid 24423:tid 24496] [client 23.100.66.55:49170] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/layou.php"] [unique_id "aYefcU3f9n1Y0TpV5YZtpAAAAIs"]
[Sun Feb 08 04:24:17.867823 2026] [:error] [pid 56906:tid 56922] [client 23.100.66.55:58670] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/layou.php"] [unique_id "aYefcfxl3WX27-WXfDh2aAAAAQ4"]
[Sun Feb 08 04:24:19.261042 2026] [:error] [pid 24423:tid 24503] [client 23.100.66.55:49169] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tourpa.php"] [unique_id "aYefc03f9n1Y0TpV5YZtqAAAAJI"]
[Sun Feb 08 04:24:19.937040 2026] [:error] [pid 24421:tid 24440] [client 23.100.66.55:49156] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tourpa.php"] [unique_id "aYefc6p7cTzhX5M1IP8DegAAAAk"]
[Sun Feb 08 04:24:21.790558 2026] [:error] [pid 24423:tid 24491] [client 23.100.66.55:58639] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mln.php"] [unique_id "aYefdU3f9n1Y0TpV5YZtrgAAAIY"]
[Sun Feb 08 04:24:23.015343 2026] [:error] [pid 56906:tid 56909] [client 23.100.66.55:49196] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inege.php"] [unique_id "aYefd_xl3WX27-WXfDh2dQAAAQE"]
[Sun Feb 08 04:24:23.715254 2026] [:error] [pid 24423:tid 24509] [client 23.100.66.55:58671] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inege.php"] [unique_id "aYefd03f9n1Y0TpV5YZtswAAAJg"]
[Sun Feb 08 04:24:24.991879 2026] [:error] [pid 24422:tid 24465] [client 23.100.66.55:58679] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inege.php"] [unique_id "aYefeCNNjcLoSCLKhTdwkAAAAEc"]
[Sun Feb 08 04:24:26.330196 2026] [:error] [pid 24423:tid 24490] [client 23.100.66.55:49192] [client 23.100.66.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inege.php"] [unique_id "aYefek3f9n1Y0TpV5YZtugAAAIU"]
[Sun Feb 08 04:39:23.686531 2026] [:error] [pid 24421:tid 24444] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/x9.php
[Sun Feb 08 04:39:23.928507 2026] [:error] [pid 24421:tid 24440] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 04:39:24.317436 2026] [:error] [pid 24421:tid 24439] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/byel.php
[Sun Feb 08 04:39:24.564180 2026] [:error] [pid 24421:tid 24438] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/layou.php
[Sun Feb 08 04:39:24.812078 2026] [:error] [pid 24421:tid 24445] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/lgsts.php
[Sun Feb 08 04:39:25.053629 2026] [:error] [pid 24421:tid 24455] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/tourpa.php
[Sun Feb 08 04:39:25.293959 2026] [:error] [pid 24421:tid 24441] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/yvtuizub.php
[Sun Feb 08 04:39:25.540710 2026] [:error] [pid 24421:tid 24433] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/mln.php
[Sun Feb 08 04:39:25.781440 2026] [:error] [pid 24421:tid 24451] [client 20.203.129.2:43943] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Feb 08 06:24:25.691734 2026] [:error] [pid 24423:tid 24487] [client 20.193.65.50:25820] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYe7mU3f9n1Y0TpV5YaSwQAAAII"]
[Sun Feb 08 06:24:29.207040 2026] [:error] [pid 24423:tid 24499] [client 20.193.65.50:28081] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYe7nU3f9n1Y0TpV5YaSxgAAAI4"]
[Sun Feb 08 06:24:31.497171 2026] [:error] [pid 24421:tid 24444] [client 20.193.65.50:46274] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYe7n6p7cTzhX5M1IP8yjQAAAA0"]
[Sun Feb 08 06:24:32.478098 2026] [:error] [pid 24423:tid 24488] [client 20.193.65.50:28047] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYe7oE3f9n1Y0TpV5YaSzQAAAIM"]
[Sun Feb 08 08:48:48.893894 2026] [:error] [pid 24423:tid 24489] [client 170.106.110.146:32776] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYfdcE3f9n1Y0TpV5YbHHAAAAIQ"]
[Sun Feb 08 08:56:40.913346 2026] [:error] [pid 56906:tid 56909] [client 117.33.163.216:53690] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYffSPxl3WX27-WXfDgJUQAAAQE"]
[Sun Feb 08 09:53:46.275719 2026] [:error] [pid 56906:tid 56919] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/x9.php
[Sun Feb 08 09:53:46.485071 2026] [:error] [pid 56906:tid 56931] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 09:53:46.700007 2026] [:error] [pid 56906:tid 56917] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/byel.php
[Sun Feb 08 09:53:46.912771 2026] [:error] [pid 56906:tid 56924] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/layou.php
[Sun Feb 08 09:53:47.123134 2026] [:error] [pid 56906:tid 56915] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/lgsts.php
[Sun Feb 08 09:53:47.341966 2026] [:error] [pid 56906:tid 56913] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/tourpa.php
[Sun Feb 08 09:53:47.563222 2026] [:error] [pid 56906:tid 56916] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/yvtuizub.php
[Sun Feb 08 09:53:47.777831 2026] [:error] [pid 56906:tid 56925] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/mln.php
[Sun Feb 08 09:53:47.995461 2026] [:error] [pid 56906:tid 56911] [client 20.151.2.11:17487] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Feb 08 09:56:52.539717 2026] [:error] [pid 24422:tid 24463] [client 20.203.129.2:35821] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 09:56:52.779244 2026] [:error] [pid 24422:tid 24459] [client 20.203.129.2:35821] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Feb 08 09:56:53.020520 2026] [:error] [pid 24422:tid 24478] [client 20.203.129.2:35821] File does not exist: /usr/local/apache/htdocs/suspended-page/;k.php
[Sun Feb 08 13:28:02.888135 2026] [:error] [pid 43900:tid 43921] [client 45.157.234.162:59152] [client 45.157.234.162] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=video/x-flv"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYge4uWrhnpm_Csk3klETAAAAVI"]
[Sun Feb 08 17:22:04.017763 2026] [:error] [pid 24530:tid 24534] [client 147.135.212.201:57240] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYhVvEazNRCs1GRWrh71MAAAAMI"]
[Sun Feb 08 17:22:05.913827 2026] [:error] [pid 24422:tid 24460] [client 147.135.212.201:42160] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYhVvSNNjcLoSCLKhTdZWgAAAEI"]
[Sun Feb 08 17:22:08.071607 2026] [:error] [pid 24421:tid 24437] [client 147.135.212.201:42174] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYhVwKp7cTzhX5M1IP8OQAAAAAY"]
[Sun Feb 08 17:22:09.994392 2026] [:error] [pid 24422:tid 24477] [client 147.135.212.201:42182] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYhVwSNNjcLoSCLKhTdZYwAAAFM"]
[Sun Feb 08 17:22:12.078774 2026] [:error] [pid 24421:tid 24446] [client 147.135.212.201:59006] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYhVxKp7cTzhX5M1IP8ORwAAAA8"]
[Sun Feb 08 17:22:14.165436 2026] [:error] [pid 24423:tid 24494] [client 147.135.212.201:59014] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYhVxk3f9n1Y0TpV5YZKyAAAAIk"]
[Sun Feb 08 17:22:16.299240 2026] [:error] [pid 24530:tid 24544] [client 147.135.212.201:59026] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYhVyEazNRCs1GRWrh71QgAAAMw"]
[Sun Feb 08 17:22:18.283943 2026] [:error] [pid 58631:tid 58638] [client 147.135.212.201:59038] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYhVyn-r9Xz6zi7KqKxGmwAAAcU"]
[Sun Feb 08 17:22:20.470911 2026] [:error] [pid 24530:tid 24554] [client 147.135.212.201:59042] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYhVzEazNRCs1GRWrh71RgAAANY"]
[Sun Feb 08 17:22:22.555918 2026] [:error] [pid 24423:tid 24487] [client 147.135.212.201:39716] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYhVzk3f9n1Y0TpV5YZK0gAAAII"]
[Sun Feb 08 17:22:24.592431 2026] [:error] [pid 58631:tid 58648] [client 147.135.212.201:39732] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYhV0H-r9Xz6zi7KqKxGpQAAAc8"]
[Sun Feb 08 17:22:26.510030 2026] [:error] [pid 24530:tid 24541] [client 147.135.212.201:39738] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYhV0kazNRCs1GRWrh71TQAAAMk"]
[Sun Feb 08 17:22:28.564163 2026] [:error] [pid 24421:tid 24442] [client 147.135.212.201:39740] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYhV1Kp7cTzhX5M1IP8OVwAAAAs"]
[Sun Feb 08 17:22:30.638079 2026] [:error] [pid 24422:tid 24462] [client 147.135.212.201:39754] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYhV1iNNjcLoSCLKhTdZeQAAAEQ"]
[Sun Feb 08 17:22:32.695230 2026] [:error] [pid 43900:tid 43913] [client 147.135.212.201:37070] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYhV2OWrhnpm_Csk3kmB_gAAAUo"]
[Sun Feb 08 17:22:34.570081 2026] [:error] [pid 58631:tid 58654] [client 147.135.212.201:37080] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYhV2n-r9Xz6zi7KqKxGtQAAAdU"]
[Sun Feb 08 17:22:36.634841 2026] [:error] [pid 58631:tid 58649] [client 147.135.212.201:37094] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYhV3H-r9Xz6zi7KqKxGuQAAAdA"]
[Sun Feb 08 17:22:38.558230 2026] [:error] [pid 54609:tid 54615] [client 147.135.212.201:37096] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYhV3qRRnRH9N52BW9KChgAAAYQ"]
[Sun Feb 08 17:22:40.447649 2026] [:error] [pid 56906:tid 56925] [client 147.135.212.201:37098] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYhV4Pxl3WX27-WXfDipowAAARE"]
[Sun Feb 08 17:22:42.485316 2026] [:error] [pid 24423:tid 24500] [client 147.135.212.201:43920] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYhV4k3f9n1Y0TpV5YZK3wAAAI8"]
[Sun Feb 08 17:22:44.571662 2026] [:error] [pid 54609:tid 54618] [client 147.135.212.201:43922] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYhV5KRRnRH9N52BW9KCjwAAAYc"]
[Sun Feb 08 17:22:46.495384 2026] [:error] [pid 54609:tid 54616] [client 147.135.212.201:43928] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYhV5qRRnRH9N52BW9KCkgAAAYU"]
[Sun Feb 08 17:22:48.382325 2026] [:error] [pid 24423:tid 24486] [client 147.135.212.201:43934] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYhV6E3f9n1Y0TpV5YZK4gAAAIE"]
[Sun Feb 08 17:22:50.427667 2026] [:error] [pid 56906:tid 56920] [client 147.135.212.201:43940] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYhV6vxl3WX27-WXfDipqQAAAQw"]
[Sun Feb 08 17:22:52.508129 2026] [:error] [pid 24530:tid 24551] [client 147.135.212.201:49516] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYhV7EazNRCs1GRWrh71WQAAANM"]
[Sun Feb 08 17:22:54.644414 2026] [:error] [pid 58631:tid 58643] [client 147.135.212.201:49532] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYhV7n-r9Xz6zi7KqKxG1QAAAco"]
[Sun Feb 08 17:22:56.624540 2026] [:error] [pid 54609:tid 54619] [client 147.135.212.201:49534] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYhV8KRRnRH9N52BW9KCqwAAAYg"]
[Sun Feb 08 17:22:58.587834 2026] [:error] [pid 58631:tid 58642] [client 147.135.212.201:49548] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYhV8n-r9Xz6zi7KqKxG2QAAAck"]
[Sun Feb 08 17:23:00.720054 2026] [:error] [pid 54609:tid 54623] [client 147.135.212.201:47036] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYhV9KRRnRH9N52BW9KCsQAAAYw"]
[Sun Feb 08 17:23:21.566760 2026] [:error] [pid 24422:tid 24465] [client 147.135.212.201:47048] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYhWCSNNjcLoSCLKhTdZwAAAAEc"]
[Sun Feb 08 17:23:23.540955 2026] [:error] [pid 56906:tid 56910] [client 147.135.212.201:49048] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYhWC_xl3WX27-WXfDipxQAAAQI"]
[Sun Feb 08 17:23:25.548753 2026] [:error] [pid 24421:tid 24437] [client 147.135.212.201:49062] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYhWDap7cTzhX5M1IP8OkQAAAAY"]
[Sun Feb 08 17:23:27.444392 2026] [:error] [pid 24530:tid 24541] [client 147.135.212.201:49070] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYhWD0azNRCs1GRWrh71eAAAAMk"]
[Sun Feb 08 17:23:29.468354 2026] [:error] [pid 24423:tid 24486] [client 147.135.212.201:49072] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYhWEU3f9n1Y0TpV5YZLAgAAAIE"]
[Sun Feb 08 17:23:31.469810 2026] [:error] [pid 24423:tid 24485] [client 147.135.212.201:60342] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYhWE03f9n1Y0TpV5YZLBAAAAIA"]
[Sun Feb 08 17:23:33.845462 2026] [:error] [pid 56906:tid 56919] [client 147.135.212.201:60352] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYhWFfxl3WX27-WXfDipyAAAAQs"]
[Sun Feb 08 17:23:37.708341 2026] [:error] [pid 58631:tid 58651] [client 147.135.212.201:60360] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYhWGX-r9Xz6zi7KqKxHEQAAAdI"]
[Sun Feb 08 17:26:17.423017 2026] [:error] [pid 24421:tid 24442] [client 43.135.139.165:48600] [client 43.135.139.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYhWuap7cTzhX5M1IP8PQQAAAAs"]
[Sun Feb 08 18:45:37.820516 2026] [:error] [pid 24423:tid 24493] [client 145.239.69.153:50614] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYhpUU3f9n1Y0TpV5YZZigAAAIg"]
[Sun Feb 08 18:45:40.371130 2026] [:error] [pid 54609:tid 54634] [client 145.239.69.153:53710] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYhpVKRRnRH9N52BW9KX1AAAAZY"]
[Sun Feb 08 18:45:42.498405 2026] [:error] [pid 54609:tid 54621] [client 145.239.69.153:53724] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYhpVqRRnRH9N52BW9KX1wAAAYo"]
[Sun Feb 08 18:45:45.225659 2026] [:error] [pid 56906:tid 56910] [client 145.239.69.153:53730] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYhpWfxl3WX27-WXfDi4xgAAAQI"]
[Sun Feb 08 18:45:47.415564 2026] [:error] [pid 58631:tid 58651] [client 145.239.69.153:53744] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYhpW3-r9Xz6zi7KqKxiuQAAAdI"]
[Sun Feb 08 18:45:49.955251 2026] [:error] [pid 24423:tid 24509] [client 145.239.69.153:53750] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYhpXU3f9n1Y0TpV5YZZkgAAAJg"]
[Sun Feb 08 18:45:51.956474 2026] [:error] [pid 24423:tid 24508] [client 145.239.69.153:37952] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYhpX03f9n1Y0TpV5YZZlQAAAJc"]
[Sun Feb 08 18:45:54.554777 2026] [:error] [pid 24421:tid 24436] [client 145.239.69.153:37964] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYhpYqp7cTzhX5M1IP8fbgAAAAU"]
[Sun Feb 08 18:45:56.457660 2026] [:error] [pid 24421:tid 24442] [client 145.239.69.153:37976] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYhpZKp7cTzhX5M1IP8fcgAAAAs"]
[Sun Feb 08 18:45:58.997709 2026] [:error] [pid 24422:tid 24474] [client 145.239.69.153:37990] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYhpZiNNjcLoSCLKhTdukwAAAFA"]
[Sun Feb 08 18:46:01.132989 2026] [:error] [pid 24423:tid 24509] [client 145.239.69.153:40980] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYhpaU3f9n1Y0TpV5YZZngAAAJg"]
[Sun Feb 08 18:46:03.469753 2026] [:error] [pid 24422:tid 24479] [client 145.239.69.153:40984] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYhpayNNjcLoSCLKhTdunQAAAFU"]
[Sun Feb 08 18:46:05.755428 2026] [:error] [pid 43900:tid 43914] [client 145.239.69.153:40988] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYhpbeWrhnpm_Csk3kmTGAAAAUs"]
[Sun Feb 08 18:46:08.083100 2026] [:error] [pid 56906:tid 56928] [client 145.239.69.153:41002] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYhpcPxl3WX27-WXfDi45AAAARQ"]
[Sun Feb 08 18:46:10.178047 2026] [:error] [pid 54609:tid 54618] [client 145.239.69.153:41004] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYhpcqRRnRH9N52BW9KX9AAAAYc"]
[Sun Feb 08 18:46:12.417078 2026] [:error] [pid 54609:tid 54611] [client 145.239.69.153:39828] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYhpdKRRnRH9N52BW9KX_wAAAYA"]
[Sun Feb 08 18:46:14.684407 2026] [:error] [pid 24423:tid 24501] [client 145.239.69.153:39832] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYhpdk3f9n1Y0TpV5YZZqQAAAJA"]
[Sun Feb 08 18:46:16.776295 2026] [:error] [pid 24530:tid 24534] [client 145.239.69.153:39838] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYhpeEazNRCs1GRWrh4GOgAAAMI"]
[Sun Feb 08 18:46:18.838268 2026] [:error] [pid 24423:tid 24503] [client 145.239.69.153:39842] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYhpek3f9n1Y0TpV5YZZrAAAAJI"]
[Sun Feb 08 18:46:20.966072 2026] [:error] [pid 54609:tid 54633] [client 145.239.69.153:41722] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYhpfKRRnRH9N52BW9KYDAAAAZU"]
[Sun Feb 08 18:46:23.181137 2026] [:error] [pid 24530:tid 24554] [client 145.239.69.153:41730] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYhpf0azNRCs1GRWrh4GRgAAANY"]
[Sun Feb 08 18:46:25.337904 2026] [:error] [pid 54609:tid 54623] [client 145.239.69.153:41738] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYhpgaRRnRH9N52BW9KYFAAAAYw"]
[Sun Feb 08 18:46:27.471679 2026] [:error] [pid 43900:tid 43912] [client 145.239.69.153:41740] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYhpg-Wrhnpm_Csk3kmTLQAAAUk"]
[Sun Feb 08 18:46:29.506415 2026] [:error] [pid 24422:tid 24466] [client 145.239.69.153:41754] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYhphSNNjcLoSCLKhTduzQAAAEg"]
[Sun Feb 08 18:46:31.701396 2026] [:error] [pid 56906:tid 56909] [client 145.239.69.153:41468] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYhph_xl3WX27-WXfDi48wAAAQE"]
[Sun Feb 08 18:46:33.701304 2026] [:error] [pid 43900:tid 43920] [client 145.239.69.153:41478] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYhpieWrhnpm_Csk3kmTNQAAAVE"]
[Sun Feb 08 18:46:56.017682 2026] [:error] [pid 24422:tid 24475] [client 145.239.69.153:41480] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYhpoCNNjcLoSCLKhTdvQQAAAFE"]
[Sun Feb 08 18:46:58.293133 2026] [:error] [pid 24530:tid 24555] [client 145.239.69.153:36718] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYhpokazNRCs1GRWrh4GYQAAANc"]
[Sun Feb 08 18:47:00.289837 2026] [:error] [pid 54609:tid 54617] [client 145.239.69.153:43950] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYhppKRRnRH9N52BW9KYMgAAAYY"]
[Sun Feb 08 18:47:02.298846 2026] [:error] [pid 58631:tid 58646] [client 145.239.69.153:43966] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYhppn-r9Xz6zi7KqKxjIAAAAc0"]
[Sun Feb 08 18:47:04.300908 2026] [:error] [pid 58631:tid 58644] [client 145.239.69.153:43982] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYhpqH-r9Xz6zi7KqKxjIgAAAcs"]
[Sun Feb 08 18:47:06.644999 2026] [:error] [pid 24530:tid 24553] [client 145.239.69.153:43986] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYhpqkazNRCs1GRWrh4GZwAAANU"]
[Sun Feb 08 18:47:08.989410 2026] [:error] [pid 58631:tid 58646] [client 145.239.69.153:43988] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYhprH-r9Xz6zi7KqKxjKgAAAc0"]
[Sun Feb 08 18:47:11.342910 2026] [:error] [pid 43900:tid 43922] [client 145.239.69.153:44702] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYhpr-Wrhnpm_Csk3kmTQwAAAVM"]
[Sun Feb 08 18:47:13.514240 2026] [:error] [pid 58631:tid 58642] [client 145.239.69.153:44716] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYhpsX-r9Xz6zi7KqKxjMgAAAck"]
[Sun Feb 08 18:47:15.764969 2026] [:error] [pid 24530:tid 24537] [client 145.239.69.153:44722] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYhps0azNRCs1GRWrh4GawAAAMU"]
[Sun Feb 08 18:47:18.103230 2026] [:error] [pid 24530:tid 24539] [client 145.239.69.153:44734] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYhptkazNRCs1GRWrh4GbAAAAMc"]
[Sun Feb 08 18:47:20.403739 2026] [:error] [pid 43900:tid 43922] [client 145.239.69.153:40136] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYhpuOWrhnpm_Csk3kmTTgAAAVM"]
[Sun Feb 08 18:47:22.639404 2026] [:error] [pid 58631:tid 58640] [client 145.239.69.153:40146] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYhpun-r9Xz6zi7KqKxjOwAAAcc"]
[Sun Feb 08 18:47:24.974778 2026] [:error] [pid 24422:tid 24471] [client 145.239.69.153:40158] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYhpvCNNjcLoSCLKhTdvYgAAAE0"]
[Sun Feb 08 18:47:27.176351 2026] [:error] [pid 58631:tid 58633] [client 145.239.69.153:40162] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYhpv3-r9Xz6zi7KqKxjQQAAAcA"]
[Sun Feb 08 18:47:29.534420 2026] [:error] [pid 24422:tid 24459] [client 145.239.69.153:40178] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYhpwSNNjcLoSCLKhTdvaQAAAEE"]
[Sun Feb 08 18:47:31.691632 2026] [:error] [pid 24422:tid 24476] [client 145.239.69.153:35388] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYhpwyNNjcLoSCLKhTdvbQAAAFI"]
[Sun Feb 08 18:47:33.900332 2026] [:error] [pid 54609:tid 54615] [client 145.239.69.153:35400] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYhpxaRRnRH9N52BW9KYUQAAAYQ"]
[Sun Feb 08 18:47:36.132158 2026] [:error] [pid 56906:tid 56919] [client 145.239.69.153:35402] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYhpyPxl3WX27-WXfDi5DgAAAQs"]
[Sun Feb 08 18:47:38.148810 2026] [:error] [pid 54609:tid 54622] [client 145.239.69.153:35408] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYhpyqRRnRH9N52BW9KYVAAAAYs"]
[Sun Feb 08 18:47:40.576754 2026] [:error] [pid 54609:tid 54629] [client 145.239.69.153:43688] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYhpzKRRnRH9N52BW9KYWAAAAZI"]
[Sun Feb 08 18:47:43.408297 2026] [:error] [pid 58631:tid 58647] [client 145.239.69.153:43694] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYhpz3-r9Xz6zi7KqKxjWQAAAc4"]
[Sun Feb 08 18:47:47.295224 2026] [:error] [pid 54609:tid 54616] [client 145.239.69.153:43710] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYhp06RRnRH9N52BW9KYWwAAAYU"]
[Mon Feb 09 00:28:39.505439 2026] [:error] [pid 43900:tid 43919] [client 43.152.72.244:42456] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYi5t-Wrhnpm_Csk3knGPAAAAVA"]
[Mon Feb 09 00:56:54.243080 2026] [:error] [pid 6723:tid 6796] [client 104.28.160.80:30015] [client 104.28.160.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aYjAVjkiu6gHwS33P0qUWgAAA0s"]
[Mon Feb 09 08:01:38.809290 2026] [:error] [pid 60679:tid 60761] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Feb 09 08:01:39.216509 2026] [:error] [pid 60679:tid 60768] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Mon Feb 09 08:01:39.419725 2026] [:error] [pid 60679:tid 60741] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Mon Feb 09 08:01:39.623351 2026] [:error] [pid 60679:tid 60769] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Feb 09 08:01:39.827452 2026] [:error] [pid 60679:tid 60750] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Feb 09 08:01:40.029954 2026] [:error] [pid 60679:tid 60779] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Feb 09 08:01:40.234311 2026] [:error] [pid 60679:tid 60759] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Feb 09 08:01:40.694644 2026] [:error] [pid 60679:tid 60730] [client 20.69.252.116:24534] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Feb 09 08:01:40.897364 2026] [:error] [pid 60679:tid 60775] [client 20.69.252.116:24534] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aYkj5MixhoT1e6Iv6g9WwQAAA1U"]
[Mon Feb 09 08:01:41.367441 2026] [:error] [pid 60508:tid 60523] [client 20.69.252.116:24527] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aYkj5eXDvLC4ADfnEzMkwgAAAY0"]
[Mon Feb 09 08:01:41.895295 2026] [:error] [pid 60619:tid 60650] [client 20.69.252.116:24546] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aYkj5XEpg0UoeR8kJ-11lQAAAkg"]
[Mon Feb 09 08:01:42.342791 2026] [:error] [pid 18303:tid 18325] [client 20.69.252.116:24501] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aYkj5kY7TEaZkFrGG4kTnwAAARQ"]
[Mon Feb 09 08:01:42.872730 2026] [:error] [pid 60678:tid 60788] [client 20.69.252.116:24566] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYkj5u8Gd_fDFrcNu4MtNwAAAxc"]
[Mon Feb 09 08:01:43.330317 2026] [:error] [pid 18303:tid 18310] [client 20.69.252.116:24457] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYkj50Y7TEaZkFrGG4kTogAAAQU"]
[Mon Feb 09 08:01:43.779943 2026] [:error] [pid 18303:tid 18321] [client 20.69.252.116:24464] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYkj50Y7TEaZkFrGG4kTowAAARA"]
[Mon Feb 09 08:01:44.195422 2026] [:error] [pid 60589:tid 60610] [client 20.69.252.116:24555] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aYkj6DIJyhPWC0JyMLzW3wAAAdM"]
[Mon Feb 09 08:01:44.741618 2026] [:error] [pid 47937:tid 47963] [client 20.69.252.116:24451] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aYkj6M4Fd42MP2DhNrVQ_gAAABE"]
[Mon Feb 09 08:01:45.174199 2026] [:error] [pid 60508:tid 60526] [client 20.69.252.116:24456] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aYkj6eXDvLC4ADfnEzMk0AAAAZA"]
[Mon Feb 09 08:01:45.591631 2026] [:error] [pid 47938:tid 47981] [client 20.69.252.116:24517] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aYkj6bVCzWE6fQJEkNJNsAAAAEI"]
[Mon Feb 09 08:01:46.045661 2026] [:error] [pid 60508:tid 60518] [client 20.69.252.116:24541] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aYkj6uXDvLC4ADfnEzMk0QAAAYg"]
[Mon Feb 09 08:01:46.759031 2026] [:error] [pid 60678:tid 60765] [client 20.69.252.116:24554] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYkj6u8Gd_fDFrcNu4MtOwAAAw4"]
[Mon Feb 09 08:01:47.183927 2026] [:error] [pid 60678:tid 60740] [client 20.69.252.116:24567] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYkj6-8Gd_fDFrcNu4MtPQAAAwU"]
[Mon Feb 09 08:01:47.619207 2026] [:error] [pid 60679:tid 60754] [client 20.69.252.116:24465] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYkj68ixhoT1e6Iv6g9WwwAAA0w"]
[Mon Feb 09 08:01:48.058907 2026] [:error] [pid 60619:tid 60670] [client 20.69.252.116:24523] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aYkj7HEpg0UoeR8kJ-11ogAAAlQ"]
[Mon Feb 09 08:01:48.532564 2026] [:error] [pid 60678:tid 60763] [client 20.69.252.116:24563] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aYkj7O8Gd_fDFrcNu4MtQwAAAw0"]
[Mon Feb 09 08:01:49.163380 2026] [:error] [pid 60619:tid 60640] [client 20.69.252.116:24466] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aYkj7XEpg0UoeR8kJ-11pQAAAkA"]
[Mon Feb 09 08:01:49.649628 2026] [:error] [pid 47937:tid 47951] [client 20.69.252.116:24459] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aYkj7c4Fd42MP2DhNrVRBAAAAAU"]
[Mon Feb 09 08:01:50.068626 2026] [:error] [pid 47938:tid 47979] [client 20.69.252.116:24564] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aYkj7rVCzWE6fQJEkNJNuwAAAEA"]
[Mon Feb 09 08:01:50.658637 2026] [:error] [pid 47937:tid 47955] [client 20.69.252.116:24516] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aYkj7s4Fd42MP2DhNrVRBwAAAAk"]
[Mon Feb 09 08:01:51.114190 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24458] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aYkj7zIJyhPWC0JyMLzW5wAAAdY"]
[Mon Feb 09 08:01:51.621044 2026] [:error] [pid 60619:tid 60661] [client 20.69.252.116:24460] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aYkj73Epg0UoeR8kJ-11qgAAAkw"]
[Mon Feb 09 08:01:52.103399 2026] [:error] [pid 18303:tid 18308] [client 20.69.252.116:24524] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aYkj8EY7TEaZkFrGG4kTrgAAAQM"]
[Mon Feb 09 08:01:52.577845 2026] [:error] [pid 60679:tid 60779] [client 20.69.252.116:24562] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aYkj8MixhoT1e6Iv6g9WzQAAA1Y"]
[Mon Feb 09 08:01:53.014712 2026] [:error] [pid 60619:tid 60647] [client 20.69.252.116:24463] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aYkj8XEpg0UoeR8kJ-11sAAAAkY"]
[Mon Feb 09 08:01:53.583158 2026] [:error] [pid 60589:tid 60603] [client 20.69.252.116:24575] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aYkj8TIJyhPWC0JyMLzW7AAAAcw"]
[Mon Feb 09 08:01:54.006888 2026] [:error] [pid 47938:tid 47987] [client 20.69.252.116:24450] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aYkj8rVCzWE6fQJEkNJNyQAAAEg"]
[Mon Feb 09 08:01:54.506616 2026] [:error] [pid 47937:tid 47967] [client 20.69.252.116:24559] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aYkj8s4Fd42MP2DhNrVRCwAAABU"]
[Mon Feb 09 08:01:54.971900 2026] [:error] [pid 60589:tid 60604] [client 20.69.252.116:24385] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aYkj8jIJyhPWC0JyMLzW8AAAAc0"]
[Mon Feb 09 08:01:55.453238 2026] [:error] [pid 60677:tid 60713] [client 20.69.252.116:24574] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aYkj81yBgzfmDf6Gaeu_VgAAAsI"]
[Mon Feb 09 08:01:55.856462 2026] [:error] [pid 60619:tid 60655] [client 20.69.252.116:24518] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aYkj83Epg0UoeR8kJ-11uwAAAko"]
[Mon Feb 09 08:01:56.540145 2026] [:error] [pid 60589:tid 60612] [client 20.69.252.116:24538] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aYkj9DIJyhPWC0JyMLzW9AAAAdU"]
[Mon Feb 09 08:01:57.122829 2026] [:error] [pid 60677:tid 60716] [client 20.69.252.116:24552] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aYkj9VyBgzfmDf6Gaeu_WQAAAsU"]
[Mon Feb 09 08:01:57.663489 2026] [:error] [pid 18303:tid 18325] [client 20.69.252.116:24570] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aYkj9UY7TEaZkFrGG4kTtwAAARQ"]
[Mon Feb 09 08:01:58.078919 2026] [:error] [pid 60678:tid 60760] [client 20.69.252.116:24462] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aYkj9u8Gd_fDFrcNu4MtUgAAAww"]
[Mon Feb 09 08:01:58.518781 2026] [:error] [pid 60589:tid 60614] [client 20.69.252.116:24536] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aYkj9jIJyhPWC0JyMLzW-AAAAdc"]
[Mon Feb 09 08:01:59.012615 2026] [:error] [pid 18303:tid 18310] [client 20.69.252.116:24467] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aYkj90Y7TEaZkFrGG4kTuQAAAQU"]
[Mon Feb 09 08:01:59.505976 2026] [:error] [pid 60678:tid 60724] [client 20.69.252.116:24461] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aYkj9-8Gd_fDFrcNu4MtVgAAAwE"]
[Mon Feb 09 08:02:00.117231 2026] [:error] [pid 60589:tid 60595] [client 20.69.252.116:24389] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aYkj-DIJyhPWC0JyMLzW-gAAAcQ"]
[Mon Feb 09 08:02:00.540075 2026] [:error] [pid 60619:tid 60661] [client 20.69.252.116:24571] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aYkj-HEpg0UoeR8kJ-11xAAAAkw"]
[Mon Feb 09 08:02:00.954730 2026] [:error] [pid 60677:tid 60718] [client 20.69.252.116:24568] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aYkj-FyBgzfmDf6Gaeu_XwAAAsc"]
[Mon Feb 09 08:02:01.374452 2026] [:error] [pid 18303:tid 18327] [client 20.69.252.116:24551] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aYkj-UY7TEaZkFrGG4kTxAAAARY"]
[Mon Feb 09 08:02:01.816171 2026] [:error] [pid 60676:tid 60691] [client 20.69.252.116:24522] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aYkj-XhKcn7mJYMx5_AbhQAAAoc"]
[Mon Feb 09 08:02:02.266421 2026] [:error] [pid 60508:tid 60524] [client 20.69.252.116:24494] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aYkj-uXDvLC4ADfnEzMk3AAAAY4"]
[Mon Feb 09 08:02:02.683513 2026] [:error] [pid 60679:tid 60750] [client 20.69.252.116:24449] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aYkj-sixhoT1e6Iv6g9W1QAAA0s"]
[Mon Feb 09 08:02:03.102726 2026] [:error] [pid 60508:tid 60512] [client 20.69.252.116:24480] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aYkj--XDvLC4ADfnEzMk3QAAAYI"]
[Mon Feb 09 08:02:03.553144 2026] [:error] [pid 47937:tid 47961] [client 20.69.252.116:24468] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gtc.php"] [unique_id "aYkj-84Fd42MP2DhNrVREgAAAA8"]
[Mon Feb 09 08:02:04.036375 2026] [:error] [pid 60508:tid 60513] [client 20.69.252.116:24572] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aYkj_OXDvLC4ADfnEzMk4AAAAYM"]
[Mon Feb 09 08:02:04.449645 2026] [:error] [pid 60589:tid 60597] [client 20.69.252.116:24394] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aYkj_DIJyhPWC0JyMLzW_wAAAcY"]
[Mon Feb 09 08:02:04.892176 2026] [:error] [pid 47937:tid 47969] [client 20.69.252.116:24556] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aYkj_M4Fd42MP2DhNrVRFgAAABc"]
[Mon Feb 09 08:02:05.338264 2026] [:error] [pid 47937:tid 47951] [client 20.69.252.116:24482] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atx.php"] [unique_id "aYkj_c4Fd42MP2DhNrVRFwAAAAU"]
[Mon Feb 09 08:02:05.766366 2026] [:error] [pid 47937:tid 47949] [client 20.69.252.116:24548] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aYkj_c4Fd42MP2DhNrVRGQAAAAM"]
[Mon Feb 09 08:02:06.275084 2026] [:error] [pid 60679:tid 60735] [client 20.69.252.116:24473] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aYkj_sixhoT1e6Iv6g9W2QAAA0U"]
[Mon Feb 09 08:02:06.732177 2026] [:error] [pid 60508:tid 60512] [client 20.69.252.116:24400] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aYkj_uXDvLC4ADfnEzMk6QAAAYI"]
[Mon Feb 09 08:02:07.192898 2026] [:error] [pid 60677:tid 60711] [client 20.69.252.116:24519] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aYkj_1yBgzfmDf6Gaeu_ZgAAAsA"]
[Mon Feb 09 08:02:07.612611 2026] [:error] [pid 47937:tid 47968] [client 20.69.252.116:24561] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aYkj_84Fd42MP2DhNrVRHAAAABY"]
[Mon Feb 09 08:02:08.031888 2026] [:error] [pid 60678:tid 60723] [client 20.69.252.116:24493] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aYkkAO8Gd_fDFrcNu4MtaAAAAwA"]
[Mon Feb 09 08:02:08.598358 2026] [:error] [pid 60619:tid 60673] [client 20.69.252.116:24491] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aYkkAHEpg0UoeR8kJ-110gAAAlc"]
[Mon Feb 09 08:02:09.007914 2026] [:error] [pid 47938:tid 47981] [client 20.69.252.116:24515] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aYkkAbVCzWE6fQJEkNJN4QAAAEI"]
[Mon Feb 09 08:02:09.553138 2026] [:error] [pid 47938:tid 48001] [client 20.69.252.116:24434] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aYkkAbVCzWE6fQJEkNJN4wAAAFY"]
[Mon Feb 09 08:02:10.185711 2026] [:error] [pid 47937:tid 47960] [client 20.69.252.116:24403] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aYkkAs4Fd42MP2DhNrVRHwAAAA4"]
[Mon Feb 09 08:02:10.613877 2026] [:error] [pid 60589:tid 60597] [client 20.69.252.116:24520] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aYkkAjIJyhPWC0JyMLzXCwAAAcY"]
[Mon Feb 09 08:02:11.049977 2026] [:error] [pid 60679:tid 60768] [client 20.69.252.116:24409] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aYkkA8ixhoT1e6Iv6g9W4wAAA1I"]
[Mon Feb 09 08:02:11.532161 2026] [:error] [pid 60677:tid 60717] [client 20.69.252.116:24487] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aYkkA1yBgzfmDf6Gaeu_awAAAsY"]
[Mon Feb 09 08:02:12.017944 2026] [:error] [pid 60677:tid 60712] [client 20.69.252.116:24544] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aYkkBFyBgzfmDf6Gaeu_bQAAAsE"]
[Mon Feb 09 08:02:12.450459 2026] [:error] [pid 60589:tid 60598] [client 20.69.252.116:24489] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aYkkBDIJyhPWC0JyMLzXDAAAAcc"]
[Mon Feb 09 08:02:12.887987 2026] [:error] [pid 47937:tid 47969] [client 20.69.252.116:24543] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aYkkBM4Fd42MP2DhNrVRMQAAABc"]
[Mon Feb 09 08:02:13.461161 2026] [:error] [pid 60589:tid 60593] [client 20.69.252.116:24411] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYkkBTIJyhPWC0JyMLzXDQAAAcI"]
[Mon Feb 09 08:02:14.092809 2026] [:error] [pid 18303:tid 18306] [client 20.69.252.116:24475] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYkkBkY7TEaZkFrGG4kT0QAAAQE"]
[Mon Feb 09 08:02:14.519210 2026] [:error] [pid 60508:tid 60511] [client 20.69.252.116:24472] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYkkBuXDvLC4ADfnEzMk9wAAAYE"]
[Mon Feb 09 08:02:14.947937 2026] [:error] [pid 60677:tid 60753] [client 20.69.252.116:24436] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYkkBlyBgzfmDf6Gaeu_cQAAAtE"]
[Mon Feb 09 08:02:15.366945 2026] [:error] [pid 47937:tid 47968] [client 20.69.252.116:24453] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYkkB84Fd42MP2DhNrVROQAAABY"]
[Mon Feb 09 08:02:15.832172 2026] [:error] [pid 60679:tid 60735] [client 20.69.252.116:24484] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYkkB8ixhoT1e6Iv6g9W6AAAA0U"]
[Mon Feb 09 08:02:16.366261 2026] [:error] [pid 47937:tid 47961] [client 20.69.252.116:24558] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYkkCM4Fd42MP2DhNrVRPAAAAA8"]
[Mon Feb 09 08:02:17.174438 2026] [:error] [pid 60677:tid 60712] [client 20.69.252.116:24431] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYkkCVyBgzfmDf6Gaeu_dwAAAsE"]
[Mon Feb 09 08:02:17.601084 2026] [:error] [pid 60679:tid 60748] [client 20.69.252.116:24500] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aYkkCcixhoT1e6Iv6g9W6wAAA0o"]
[Mon Feb 09 08:02:18.040106 2026] [:error] [pid 60677:tid 60737] [client 20.69.252.116:24532] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aYkkClyBgzfmDf6Gaeu_eAAAAs0"]
[Mon Feb 09 08:02:18.448071 2026] [:error] [pid 60508:tid 60534] [client 20.69.252.116:24531] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aYkkCuXDvLC4ADfnEzMk_QAAAZg"]
[Mon Feb 09 08:02:18.867604 2026] [:error] [pid 60677:tid 60713] [client 20.69.252.116:24483] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/click.php"] [unique_id "aYkkClyBgzfmDf6Gaeu_ewAAAsI"]
[Mon Feb 09 08:02:19.272815 2026] [:error] [pid 60619:tid 60640] [client 20.69.252.116:24507] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aYkkC3Epg0UoeR8kJ-116gAAAkA"]
[Mon Feb 09 08:02:19.690333 2026] [:error] [pid 60589:tid 60609] [client 20.69.252.116:24455] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aYkkCzIJyhPWC0JyMLzXGQAAAdI"]
[Mon Feb 09 08:02:20.293151 2026] [:error] [pid 60677:tid 60716] [client 20.69.252.116:24521] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aYkkDFyBgzfmDf6Gaeu_gAAAAsU"]
[Mon Feb 09 08:02:20.721591 2026] [:error] [pid 60677:tid 60725] [client 20.69.252.116:24509] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aYkkDFyBgzfmDf6Gaeu_ggAAAss"]
[Mon Feb 09 08:02:21.122978 2026] [:error] [pid 18303:tid 18311] [client 20.69.252.116:24526] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aYkkDUY7TEaZkFrGG4kT2gAAAQY"]
[Mon Feb 09 08:02:21.534062 2026] [:error] [pid 60619:tid 60645] [client 20.69.252.116:24476] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aYkkDXEpg0UoeR8kJ-117gAAAkQ"]
[Mon Feb 09 08:02:21.947021 2026] [:error] [pid 47937:tid 47961] [client 20.69.252.116:24537] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aYkkDc4Fd42MP2DhNrVRRAAAAA8"]
[Mon Feb 09 08:02:22.384151 2026] [:error] [pid 60508:tid 60510] [client 20.69.252.116:24545] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aYkkDuXDvLC4ADfnEzMlBQAAAYA"]
[Mon Feb 09 08:02:22.801302 2026] [:error] [pid 60508:tid 60516] [client 20.69.252.116:24533] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aYkkDuXDvLC4ADfnEzMlBgAAAYY"]
[Mon Feb 09 08:02:23.213843 2026] [:error] [pid 18303:tid 18316] [client 20.69.252.116:24513] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aYkkD0Y7TEaZkFrGG4kT3QAAAQs"]
[Mon Feb 09 08:02:23.625720 2026] [:error] [pid 60676:tid 60708] [client 20.69.252.116:24479] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aYkkD3hKcn7mJYMx5_AbmAAAApg"]
[Mon Feb 09 08:02:24.024161 2026] [:error] [pid 60619:tid 60674] [client 20.69.252.116:24477] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aYkkEHEpg0UoeR8kJ-118AAAAlg"]
[Mon Feb 09 08:02:24.442450 2026] [:error] [pid 60619:tid 60658] [client 20.69.252.116:24396] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkEHEpg0UoeR8kJ-118wAAAks"]
[Mon Feb 09 08:02:24.884984 2026] [:error] [pid 60619:tid 60672] [client 20.69.252.116:24390] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkEHEpg0UoeR8kJ-119gAAAlY"]
[Mon Feb 09 08:02:25.354320 2026] [:error] [pid 47937:tid 47963] [client 20.69.252.116:24412] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkEc4Fd42MP2DhNrVRTgAAABE"]
[Mon Feb 09 08:02:25.790672 2026] [:error] [pid 60676:tid 60700] [client 20.69.252.116:24445] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkEXhKcn7mJYMx5_AbmgAAApA"]
[Mon Feb 09 08:02:26.197271 2026] [:error] [pid 18303:tid 18323] [client 20.69.252.116:24573] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkEkY7TEaZkFrGG4kT3gAAARI"]
[Mon Feb 09 08:02:26.608824 2026] [:error] [pid 60676:tid 60705] [client 20.69.252.116:24490] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkEnhKcn7mJYMx5_AbmwAAApU"]
[Mon Feb 09 08:02:27.022794 2026] [:error] [pid 60676:tid 60690] [client 20.69.252.116:24504] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkE3hKcn7mJYMx5_AbnAAAAoY"]
[Mon Feb 09 08:02:27.466963 2026] [:error] [pid 60619:tid 60674] [client 20.69.252.116:24402] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkE3Epg0UoeR8kJ-11_gAAAlg"]
[Mon Feb 09 08:02:27.866390 2026] [:error] [pid 60678:tid 60747] [client 20.69.252.116:24497] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYkkE-8Gd_fDFrcNu4MtlgAAAwg"]
[Mon Feb 09 08:02:28.267643 2026] [:error] [pid 18303:tid 18328] [client 20.69.252.116:24387] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkFEY7TEaZkFrGG4kT3wAAARc"]
[Mon Feb 09 08:02:28.689176 2026] [:error] [pid 60677:tid 60778] [client 20.69.252.116:24553] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkFFyBgzfmDf6Gaeu_igAAAtg"]
[Mon Feb 09 08:02:29.092231 2026] [:error] [pid 60678:tid 60767] [client 20.69.252.116:24406] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aYkkFe8Gd_fDFrcNu4MtmwAAAw8"]
[Mon Feb 09 08:02:29.512651 2026] [:error] [pid 60619:tid 60640] [client 20.69.252.116:24355] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aYkkFXEpg0UoeR8kJ-12BAAAAkA"]
[Mon Feb 09 08:02:29.983513 2026] [:error] [pid 60619:tid 60671] [client 20.69.252.116:24410] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aYkkFXEpg0UoeR8kJ-12BQAAAlU"]
[Mon Feb 09 08:02:30.384751 2026] [:error] [pid 47937:tid 47963] [client 20.69.252.116:24547] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aYkkFs4Fd42MP2DhNrVRWAAAABE"]
[Mon Feb 09 08:02:30.787255 2026] [:error] [pid 60678:tid 60752] [client 20.69.252.116:24565] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aYkkFu8Gd_fDFrcNu4MtoAAAAwo"]
[Mon Feb 09 08:02:31.191134 2026] [:error] [pid 47938:tid 47991] [client 20.69.252.116:24569] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkF7VCzWE6fQJEkNJOAAAAAEw"]
[Mon Feb 09 08:02:31.627001 2026] [:error] [pid 60678:tid 60771] [client 20.69.252.116:24474] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkF-8Gd_fDFrcNu4MtpAAAAxA"]
[Mon Feb 09 08:02:32.034793 2026] [:error] [pid 60676:tid 60696] [client 20.69.252.116:24397] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkGHhKcn7mJYMx5_AboQAAAow"]
[Mon Feb 09 08:02:32.442769 2026] [:error] [pid 60508:tid 60519] [client 20.69.252.116:24339] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkGOXDvLC4ADfnEzMlGQAAAYk"]
[Mon Feb 09 08:02:32.844853 2026] [:error] [pid 60677:tid 60715] [client 20.69.252.116:24424] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYkkGFyBgzfmDf6Gaeu_jgAAAsQ"]
[Mon Feb 09 08:02:33.279126 2026] [:error] [pid 60619:tid 60653] [client 20.69.252.116:24342] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYkkGXEpg0UoeR8kJ-12EQAAAkk"]
[Mon Feb 09 08:02:33.709841 2026] [:error] [pid 60677:tid 60739] [client 20.69.252.116:24512] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYkkGVyBgzfmDf6Gaeu_jwAAAs4"]
[Mon Feb 09 08:02:34.158619 2026] [:error] [pid 60677:tid 60753] [client 20.69.252.116:24469] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aYkkGlyBgzfmDf6Gaeu_kQAAAtE"]
[Mon Feb 09 08:02:34.569196 2026] [:error] [pid 60508:tid 60510] [client 20.69.252.116:24334] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkGuXDvLC4ADfnEzMlHQAAAYA"]
[Mon Feb 09 08:02:35.021157 2026] [:error] [pid 60508:tid 60520] [client 20.69.252.116:24322] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkG-XDvLC4ADfnEzMlIAAAAYo"]
[Mon Feb 09 08:02:35.842697 2026] [:error] [pid 60619:tid 60650] [client 20.69.252.116:24386] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkG3Epg0UoeR8kJ-12FgAAAkg"]
[Mon Feb 09 08:02:36.332253 2026] [:error] [pid 60508:tid 60517] [client 20.69.252.116:24542] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aYkkHOXDvLC4ADfnEzMlJQAAAYc"]
[Mon Feb 09 08:02:36.775176 2026] [:error] [pid 18303:tid 18310] [client 20.69.252.116:24398] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYkkHEY7TEaZkFrGG4kT5wAAAQU"]
[Mon Feb 09 08:02:37.218349 2026] [:error] [pid 60679:tid 60735] [client 20.69.252.116:24488] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYkkHcixhoT1e6Iv6g9W_QAAA0U"]
[Mon Feb 09 08:02:37.647030 2026] [:error] [pid 60589:tid 60605] [client 20.69.252.116:24399] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYkkHTIJyhPWC0JyMLzXLAAAAc4"]
[Mon Feb 09 08:02:38.129273 2026] [:error] [pid 60678:tid 60752] [client 20.69.252.116:24506] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aYkkHu8Gd_fDFrcNu4MtrwAAAwo"]
[Mon Feb 09 08:02:38.652364 2026] [:error] [pid 60676:tid 60686] [client 20.69.252.116:24350] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aYkkHnhKcn7mJYMx5_AbrQAAAoI"]
[Mon Feb 09 08:02:39.235682 2026] [:error] [pid 60679:tid 60748] [client 20.69.252.116:24446] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aYkkH8ixhoT1e6Iv6g9XAAAAA0o"]
[Mon Feb 09 08:02:39.641701 2026] [:error] [pid 60678:tid 60777] [client 20.69.252.116:24260] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aYkkH-8Gd_fDFrcNu4MtsQAAAxI"]
[Mon Feb 09 08:02:40.269027 2026] [:error] [pid 60589:tid 60591] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Feb 09 08:02:40.725054 2026] [:error] [pid 60589:tid 60611] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Feb 09 08:02:40.935074 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Feb 09 08:02:41.150713 2026] [:error] [pid 60589:tid 60601] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Feb 09 08:02:41.380669 2026] [:error] [pid 60589:tid 60594] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Feb 09 08:02:41.589493 2026] [:error] [pid 60589:tid 60612] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Feb 09 08:02:41.806161 2026] [:error] [pid 60589:tid 60599] [client 20.69.252.116:24528] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Feb 09 08:02:42.467118 2026] [:error] [pid 60589:tid 60605] [client 20.69.252.116:24528] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYkkIjIJyhPWC0JyMLzXPwAAAc4"]
[Mon Feb 09 08:02:42.910803 2026] [:error] [pid 47937:tid 47958] [client 20.69.252.116:24486] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYkkIs4Fd42MP2DhNrVRfAAAAAw"]
[Mon Feb 09 08:02:43.327842 2026] [:error] [pid 60679:tid 60759] [client 20.69.252.116:24391] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYkkI8ixhoT1e6Iv6g9XCwAAA04"]
[Mon Feb 09 08:02:43.752387 2026] [:error] [pid 18303:tid 18320] [client 20.69.252.116:24384] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYkkI0Y7TEaZkFrGG4kT7wAAAQ8"]
[Mon Feb 09 08:02:44.305345 2026] [:error] [pid 60619:tid 60641] [client 20.69.252.116:24377] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYkkJHEpg0UoeR8kJ-12IgAAAkE"]
[Mon Feb 09 08:02:46.060639 2026] [:error] [pid 60677:tid 60722] [client 20.69.252.116:24408] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYkkJlyBgzfmDf6Gaeu_pQAAAso"]
[Mon Feb 09 08:02:46.836923 2026] [:error] [pid 60589:tid 60599] [client 20.69.252.116:24454] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYkkJjIJyhPWC0JyMLzXSQAAAcg"]
[Mon Feb 09 08:02:47.398767 2026] [:error] [pid 47937:tid 47946] [client 20.69.252.116:24529] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYkkJ84Fd42MP2DhNrVRhgAAAAA"]
[Mon Feb 09 08:02:47.813289 2026] [:error] [pid 60589:tid 60606] [client 20.69.252.116:24371] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYkkJzIJyhPWC0JyMLzXTgAAAc8"]
[Mon Feb 09 08:02:48.218851 2026] [:error] [pid 60508:tid 60522] [client 20.69.252.116:24514] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYkkKOXDvLC4ADfnEzMlWAAAAYw"]
[Mon Feb 09 08:02:48.636238 2026] [:error] [pid 60508:tid 60529] [client 20.69.252.116:24471] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYkkKOXDvLC4ADfnEzMlWQAAAZM"]
[Mon Feb 09 08:02:49.103432 2026] [:error] [pid 60619:tid 60640] [client 20.69.252.116:24508] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aYkkKXEpg0UoeR8kJ-12KQAAAkA"]
[Mon Feb 09 08:02:49.530704 2026] [:error] [pid 47938:tid 47994] [client 20.69.252.116:24505] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYkkKbVCzWE6fQJEkNJODwAAAE8"]
[Mon Feb 09 08:02:50.004693 2026] [:error] [pid 60589:tid 60596] [client 20.69.252.116:24365] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYkkKjIJyhPWC0JyMLzXUgAAAcU"]
[Mon Feb 09 08:02:50.526976 2026] [:error] [pid 47938:tid 47996] [client 20.69.252.116:24447] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYkkKrVCzWE6fQJEkNJOEgAAAFE"]
[Mon Feb 09 08:02:51.035291 2026] [:error] [pid 60508:tid 60532] [client 20.69.252.116:24530] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aYkkK-XDvLC4ADfnEzMlYQAAAZY"]
[Mon Feb 09 08:02:51.502150 2026] [:error] [pid 60508:tid 60517] [client 20.69.252.116:24511] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYkkK-XDvLC4ADfnEzMlZQAAAYc"]
[Mon Feb 09 08:02:51.963773 2026] [:error] [pid 47938:tid 47998] [client 20.69.252.116:24481] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYkkK7VCzWE6fQJEkNJOFwAAAFM"]
[Mon Feb 09 08:02:52.418008 2026] [:error] [pid 60508:tid 60513] [client 20.69.252.116:24365] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYkkLOXDvLC4ADfnEzMlbAAAAYM"]
[Mon Feb 09 08:02:52.877616 2026] [:error] [pid 18303:tid 18322] [client 20.69.252.116:24549] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aYkkLEY7TEaZkFrGG4kT-wAAARE"]
[Mon Feb 09 08:02:53.298244 2026] [:error] [pid 47938:tid 48002] [client 20.69.252.116:24393] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkLbVCzWE6fQJEkNJOGwAAAFc"]
[Mon Feb 09 08:02:53.778318 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24435] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkLXEpg0UoeR8kJ-12MgAAAk8"]
[Mon Feb 09 08:02:54.281061 2026] [:error] [pid 18303:tid 18318] [client 20.69.252.116:24492] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkLkY7TEaZkFrGG4kT_wAAAQ0"]
[Mon Feb 09 08:02:54.722407 2026] [:error] [pid 60619:tid 60673] [client 20.69.252.116:24419] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aYkkLnEpg0UoeR8kJ-12MwAAAlc"]
[Mon Feb 09 08:02:55.218282 2026] [:error] [pid 47938:tid 47986] [client 20.69.252.116:24329] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aYkkL7VCzWE6fQJEkNJOHgAAAEc"]
[Mon Feb 09 08:02:55.739186 2026] [:error] [pid 60589:tid 60610] [client 20.69.252.116:24367] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aYkkLzIJyhPWC0JyMLzXWgAAAdM"]
[Mon Feb 09 08:02:56.140469 2026] [:error] [pid 60678:tid 60755] [client 20.69.252.116:24320] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aYkkMO8Gd_fDFrcNu4MtzQAAAws"]
[Mon Feb 09 08:02:56.670126 2026] [:error] [pid 60678:tid 60783] [client 20.69.252.116:24392] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aYkkMO8Gd_fDFrcNu4MtzgAAAxQ"]
[Mon Feb 09 08:02:57.100848 2026] [:error] [pid 18303:tid 18309] [client 20.69.252.116:24421] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYkkMUY7TEaZkFrGG4kUAwAAAQQ"]
[Mon Feb 09 08:02:57.561139 2026] [:error] [pid 60508:tid 60523] [client 20.69.252.116:24470] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYkkMeXDvLC4ADfnEzMliAAAAY0"]
[Mon Feb 09 08:02:57.970344 2026] [:error] [pid 60676:tid 60704] [client 20.69.252.116:24496] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYkkMXhKcn7mJYMx5_AbvQAAApQ"]
[Mon Feb 09 08:02:58.374142 2026] [:error] [pid 60676:tid 60689] [client 20.69.252.116:24327] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYkkMnhKcn7mJYMx5_AbwAAAAoU"]
[Mon Feb 09 08:02:58.779126 2026] [:error] [pid 18303:tid 18312] [client 20.69.252.116:24324] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aYkkMkY7TEaZkFrGG4kUBQAAAQc"]
[Mon Feb 09 08:02:59.224207 2026] [:error] [pid 60508:tid 60512] [client 20.69.252.116:24444] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aYkkM-XDvLC4ADfnEzMljwAAAYI"]
[Mon Feb 09 08:02:59.655744 2026] [:error] [pid 60676:tid 60702] [client 20.69.252.116:24427] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aYkkM3hKcn7mJYMx5_AbwgAAApI"]
[Mon Feb 09 08:03:00.130812 2026] [:error] [pid 60508:tid 60511] [client 20.69.252.116:24341] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aYkkNOXDvLC4ADfnEzMlkQAAAYE"]
[Mon Feb 09 08:03:00.562643 2026] [:error] [pid 47937:tid 47961] [client 20.69.252.116:24539] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYkkNM4Fd42MP2DhNrVRmgAAAA8"]
[Mon Feb 09 08:03:01.041260 2026] [:error] [pid 18303:tid 18315] [client 20.69.252.116:24437] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYkkNUY7TEaZkFrGG4kUCgAAAQo"]
[Mon Feb 09 08:03:01.578765 2026] [:error] [pid 18303:tid 18313] [client 20.69.252.116:24323] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYkkNUY7TEaZkFrGG4kUCwAAAQg"]
[Mon Feb 09 08:03:02.023870 2026] [:error] [pid 60508:tid 60513] [client 20.69.252.116:24404] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYkkNuXDvLC4ADfnEzMlnAAAAYM"]
[Mon Feb 09 08:03:02.423658 2026] [:error] [pid 47938:tid 47990] [client 20.69.252.116:24368] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aYkkNrVCzWE6fQJEkNJOJAAAAEs"]
[Mon Feb 09 08:03:02.823795 2026] [:error] [pid 60677:tid 60739] [client 20.69.252.116:24270] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aYkkNlyBgzfmDf6Gaeu_vAAAAs4"]
[Mon Feb 09 08:03:03.238383 2026] [:error] [pid 60677:tid 60773] [client 20.69.252.116:24535] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aYkkN1yBgzfmDf6Gaeu_vQAAAtY"]
[Mon Feb 09 08:03:03.771359 2026] [:error] [pid 60508:tid 60512] [client 20.69.252.116:24422] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aYkkN-XDvLC4ADfnEzMlqwAAAYI"]
[Mon Feb 09 08:03:04.176871 2026] [:error] [pid 60678:tid 60780] [client 20.69.252.116:24433] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aYkkOO8Gd_fDFrcNu4Mt2AAAAxM"]
[Mon Feb 09 08:03:04.662099 2026] [:error] [pid 47937:tid 47947] [client 20.69.252.116:24395] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aYkkOM4Fd42MP2DhNrVRngAAAAE"]
[Mon Feb 09 08:03:05.147797 2026] [:error] [pid 60679:tid 60746] [client 20.69.252.116:24414] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aYkkOcixhoT1e6Iv6g9XMwAAA0k"]
[Mon Feb 09 08:03:05.563640 2026] [:error] [pid 60508:tid 60510] [client 20.69.252.116:24282] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aYkkOeXDvLC4ADfnEzMlswAAAYA"]
[Mon Feb 09 08:03:06.005477 2026] [:error] [pid 60589:tid 60593] [client 20.69.252.116:24430] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aYkkOjIJyhPWC0JyMLzXbQAAAcI"]
[Mon Feb 09 08:03:06.433798 2026] [:error] [pid 60619:tid 60658] [client 20.69.252.116:24263] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aYkkOnEpg0UoeR8kJ-12QwAAAks"]
[Mon Feb 09 08:03:06.896475 2026] [:error] [pid 60619:tid 60664] [client 20.69.252.116:24362] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aYkkOnEpg0UoeR8kJ-12RAAAAk4"]
[Mon Feb 09 08:03:07.335819 2026] [:error] [pid 60508:tid 60516] [client 20.69.252.116:24321] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aYkkO-XDvLC4ADfnEzMlwgAAAYY"]
[Mon Feb 09 08:03:07.742946 2026] [:error] [pid 60589:tid 60614] [client 20.69.252.116:24388] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aYkkOzIJyhPWC0JyMLzXdgAAAdc"]
[Mon Feb 09 08:03:08.150608 2026] [:error] [pid 60619:tid 60661] [client 20.69.252.116:24407] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aYkkPHEpg0UoeR8kJ-12RwAAAkw"]
[Mon Feb 09 08:03:08.568207 2026] [:error] [pid 60619:tid 60669] [client 20.69.252.116:24286] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aYkkPHEpg0UoeR8kJ-12SAAAAlM"]
[Mon Feb 09 08:03:09.020565 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24485] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aYkkPTIJyhPWC0JyMLzXfAAAAdY"]
[Mon Feb 09 08:03:09.544282 2026] [:error] [pid 60589:tid 60611] [client 20.69.252.116:24348] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aYkkPTIJyhPWC0JyMLzXfgAAAdQ"]
[Mon Feb 09 08:03:09.997849 2026] [:error] [pid 47937:tid 47970] [client 20.69.252.116:24287] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aYkkPc4Fd42MP2DhNrVRogAAABg"]
[Mon Feb 09 08:03:10.560025 2026] [:error] [pid 60589:tid 60610] [client 20.69.252.116:24401] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aYkkPjIJyhPWC0JyMLzXgwAAAdM"]
[Mon Feb 09 08:03:10.973513 2026] [:error] [pid 60678:tid 60723] [client 20.69.252.116:24540] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aYkkPu8Gd_fDFrcNu4Mt3gAAAwA"]
[Mon Feb 09 08:03:11.388648 2026] [:error] [pid 60678:tid 60787] [client 20.69.252.116:24349] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYkkP-8Gd_fDFrcNu4Mt3wAAAxY"]
[Mon Feb 09 08:03:11.872400 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24478] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYkkPzIJyhPWC0JyMLzXhwAAAdY"]
[Mon Feb 09 08:03:12.286850 2026] [:error] [pid 60619:tid 60646] [client 20.69.252.116:24326] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYkkQHEpg0UoeR8kJ-12TgAAAkU"]
[Mon Feb 09 08:03:12.784545 2026] [:error] [pid 60676:tid 60684] [client 20.69.252.116:24279] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYkkQHhKcn7mJYMx5_AbzgAAAoA"]
[Mon Feb 09 08:03:13.185225 2026] [:error] [pid 60678:tid 60777] [client 20.69.252.116:24495] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYkkQe8Gd_fDFrcNu4Mt5AAAAxI"]
[Mon Feb 09 08:03:13.584942 2026] [:error] [pid 47937:tid 47953] [client 20.69.252.116:24336] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYkkQc4Fd42MP2DhNrVRpgAAAAc"]
[Mon Feb 09 08:03:14.013497 2026] [:error] [pid 60677:tid 60773] [client 20.69.252.116:24438] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYkkQlyBgzfmDf6Gaeu_yAAAAtY"]
[Mon Feb 09 08:03:14.547677 2026] [:error] [pid 60677:tid 60770] [client 20.69.252.116:24296] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aYkkQlyBgzfmDf6Gaeu_yQAAAtU"]
[Mon Feb 09 08:03:14.963898 2026] [:error] [pid 60589:tid 60604] [client 20.69.252.116:24503] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYkkQjIJyhPWC0JyMLzXkAAAAc0"]
[Mon Feb 09 08:03:15.374506 2026] [:error] [pid 60619:tid 60671] [client 20.69.252.116:24452] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYkkQ3Epg0UoeR8kJ-12YwAAAlU"]
[Mon Feb 09 08:03:15.836309 2026] [:error] [pid 47938:tid 47991] [client 20.69.252.116:24418] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYkkQ7VCzWE6fQJEkNJOMAAAAEw"]
[Mon Feb 09 08:03:16.256144 2026] [:error] [pid 47937:tid 47960] [client 20.69.252.116:24429] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gmo.php"] [unique_id "aYkkRM4Fd42MP2DhNrVRrQAAAA4"]
[Mon Feb 09 08:03:16.683144 2026] [:error] [pid 60676:tid 60687] [client 20.69.252.116:24510] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYkkRHhKcn7mJYMx5_Ab2AAAAoM"]
[Mon Feb 09 08:03:17.099723 2026] [:error] [pid 60676:tid 60702] [client 20.69.252.116:24413] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aYkkRXhKcn7mJYMx5_Ab2gAAApI"]
[Mon Feb 09 08:03:17.509260 2026] [:error] [pid 60678:tid 60774] [client 20.69.252.116:24352] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aYkkRe8Gd_fDFrcNu4Mt-QAAAxE"]
[Mon Feb 09 08:03:17.982017 2026] [:error] [pid 18303:tid 18307] [client 20.69.252.116:24425] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "aYkkRUY7TEaZkFrGG4kUHAAAAQI"]
[Mon Feb 09 08:03:18.467212 2026] [:error] [pid 60619:tid 60653] [client 20.69.252.116:24364] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYkkRnEpg0UoeR8kJ-12cAAAAkk"]
[Mon Feb 09 08:03:18.900528 2026] [:error] [pid 60679:tid 60772] [client 20.69.252.116:24380] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYkkRsixhoT1e6Iv6g9XZgAAA1Q"]
[Mon Feb 09 08:03:19.439327 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24275] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYkkR3Epg0UoeR8kJ-12dgAAAk8"]
[Mon Feb 09 08:03:19.923787 2026] [:error] [pid 60677:tid 60718] [client 20.69.252.116:24441] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYkkR1yBgzfmDf6Gaeu_0QAAAsc"]
[Mon Feb 09 08:03:20.364440 2026] [:error] [pid 60508:tid 60522] [client 20.69.252.116:24372] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYkkSOXDvLC4ADfnEzMl4AAAAYw"]
[Mon Feb 09 08:03:20.787195 2026] [:error] [pid 60619:tid 60641] [client 20.69.252.116:24333] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aYkkSHEpg0UoeR8kJ-12eAAAAkE"]
[Mon Feb 09 08:03:21.274490 2026] [:error] [pid 60677:tid 60715] [client 20.69.252.116:24432] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aYkkSVyBgzfmDf6Gaeu_1QAAAsQ"]
[Mon Feb 09 08:03:21.687597 2026] [:error] [pid 47937:tid 47951] [client 20.69.252.116:24264] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aYkkSc4Fd42MP2DhNrVRuAAAAAU"]
[Mon Feb 09 08:03:22.108329 2026] [:error] [pid 47938:tid 47985] [client 20.69.252.116:24332] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aYkkSrVCzWE6fQJEkNJOQQAAAEY"]
[Mon Feb 09 08:03:22.543858 2026] [:error] [pid 60679:tid 60768] [client 20.69.252.116:24366] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aYkkSsixhoT1e6Iv6g9XbAAAA1I"]
[Mon Feb 09 08:03:22.970899 2026] [:error] [pid 18303:tid 18307] [client 20.69.252.116:24331] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aYkkSkY7TEaZkFrGG4kUKwAAAQI"]
[Mon Feb 09 08:03:23.508567 2026] [:error] [pid 60678:tid 60765] [client 20.69.252.116:24278] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aYkkS-8Gd_fDFrcNu4MuGAAAAw4"]
[Mon Feb 09 08:03:23.986493 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24417] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aYkkS3Epg0UoeR8kJ-12ewAAAk8"]
[Mon Feb 09 08:03:24.453197 2026] [:error] [pid 47937:tid 47962] [client 20.69.252.116:24405] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYkkTM4Fd42MP2DhNrVRvQAAABA"]
[Mon Feb 09 08:03:24.878958 2026] [:error] [pid 60679:tid 60748] [client 20.69.252.116:24323] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aYkkTMixhoT1e6Iv6g9XbwAAA0o"]
[Mon Feb 09 08:03:25.317661 2026] [:error] [pid 60678:tid 60783] [client 20.69.252.116:24378] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aYkkTe8Gd_fDFrcNu4MuHgAAAxQ"]
[Mon Feb 09 08:03:25.728049 2026] [:error] [pid 60508:tid 60522] [client 20.69.252.116:24272] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index/function.php"] [unique_id "aYkkTeXDvLC4ADfnEzMl6gAAAYw"]
[Mon Feb 09 08:03:26.139147 2026] [:error] [pid 60678:tid 60752] [client 20.69.252.116:24328] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYkkTu8Gd_fDFrcNu4MuIgAAAwo"]
[Mon Feb 09 08:03:26.547858 2026] [:error] [pid 60679:tid 60781] [client 20.69.252.116:24358] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYkkTsixhoT1e6Iv6g9XcAAAA1c"]
[Mon Feb 09 08:03:26.963969 2026] [:error] [pid 60589:tid 60597] [client 20.69.252.116:24325] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYkkTjIJyhPWC0JyMLzXqwAAAcY"]
[Mon Feb 09 08:03:27.372091 2026] [:error] [pid 18303:tid 18328] [client 20.69.252.116:24289] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYkkT0Y7TEaZkFrGG4kUNQAAARc"]
[Mon Feb 09 08:03:27.792397 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24338] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYkkTzIJyhPWC0JyMLzXrgAAAdY"]
[Mon Feb 09 08:03:28.208742 2026] [:error] [pid 18303:tid 18320] [client 20.69.252.116:24373] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aYkkUEY7TEaZkFrGG4kUNwAAAQ8"]
[Mon Feb 09 08:03:28.685287 2026] [:error] [pid 18303:tid 18308] [client 20.69.252.116:24550] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aYkkUEY7TEaZkFrGG4kUOAAAAQM"]
[Mon Feb 09 08:03:29.116982 2026] [:error] [pid 60619:tid 60669] [client 20.69.252.116:24357] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aYkkUXEpg0UoeR8kJ-12ggAAAlM"]
[Mon Feb 09 08:03:29.524682 2026] [:error] [pid 60678:tid 60774] [client 20.69.252.116:24265] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aYkkUe8Gd_fDFrcNu4MuKAAAAxE"]
[Mon Feb 09 08:03:29.943971 2026] [:error] [pid 60508:tid 60512] [client 20.69.252.116:24353] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aYkkUeXDvLC4ADfnEzMl7wAAAYI"]
[Mon Feb 09 08:03:30.372621 2026] [:error] [pid 47937:tid 47946] [client 20.69.252.116:24416] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aYkkUs4Fd42MP2DhNrVRwQAAAAA"]
[Mon Feb 09 08:03:30.774264 2026] [:error] [pid 60619:tid 60647] [client 20.69.252.116:24448] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aYkkUnEpg0UoeR8kJ-12hQAAAkY"]
[Mon Feb 09 08:03:31.213446 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24346] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aYkkU3Epg0UoeR8kJ-12hgAAAk8"]
[Mon Feb 09 08:03:31.715044 2026] [:error] [pid 47937:tid 47957] [client 20.69.252.116:24285] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aYkkU84Fd42MP2DhNrVRwwAAAAs"]
[Mon Feb 09 08:03:32.138970 2026] [:error] [pid 60589:tid 60607] [client 20.69.252.116:24383] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aYkkVDIJyhPWC0JyMLzXswAAAdA"]
[Mon Feb 09 08:03:32.552090 2026] [:error] [pid 60508:tid 60525] [client 20.69.252.116:24330] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aYkkVOXDvLC4ADfnEzMl9AAAAY8"]
[Mon Feb 09 08:03:32.954112 2026] [:error] [pid 60508:tid 60528] [client 20.69.252.116:24343] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aYkkVOXDvLC4ADfnEzMl-AAAAZI"]
[Mon Feb 09 08:03:33.444466 2026] [:error] [pid 60676:tid 60686] [client 20.69.252.116:24439] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYkkVXhKcn7mJYMx5_Ab-QAAAoI"]
[Mon Feb 09 08:03:33.875763 2026] [:error] [pid 60679:tid 60730] [client 20.69.252.116:24256] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYkkVcixhoT1e6Iv6g9XeQAAA0E"]
[Mon Feb 09 08:03:34.305186 2026] [:error] [pid 60678:tid 60723] [client 20.69.252.116:24354] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYkkVu8Gd_fDFrcNu4MuMAAAAwA"]
[Mon Feb 09 08:03:34.737316 2026] [:error] [pid 60679:tid 60743] [client 20.69.252.116:24284] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYkkVsixhoT1e6Iv6g9XfQAAA0g"]
[Mon Feb 09 08:03:35.166746 2026] [:error] [pid 60677:tid 60773] [client 20.69.252.116:24309] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aYkkV1yBgzfmDf6Gaeu_5AAAAtY"]
[Mon Feb 09 08:03:35.636278 2026] [:error] [pid 60676:tid 60708] [client 20.69.252.116:24420] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aYkkV3hKcn7mJYMx5_Ab_AAAApg"]
[Mon Feb 09 08:03:36.090325 2026] [:error] [pid 60677:tid 60722] [client 20.69.252.116:24557] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aYkkWFyBgzfmDf6Gaeu_5wAAAso"]
[Mon Feb 09 08:03:36.498110 2026] [:error] [pid 60589:tid 60596] [client 20.69.252.116:24292] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aYkkWDIJyhPWC0JyMLzXvgAAAcU"]
[Mon Feb 09 08:03:36.916888 2026] [:error] [pid 60678:tid 60788] [client 20.69.252.116:24314] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aYkkWO8Gd_fDFrcNu4MuNAAAAxc"]
[Mon Feb 09 08:03:37.423863 2026] [:error] [pid 60508:tid 60513] [client 20.69.252.116:24444] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aYkkWeXDvLC4ADfnEzMl-wAAAYM"]
[Mon Feb 09 08:03:37.860048 2026] [:error] [pid 60679:tid 60759] [client 20.69.252.116:24376] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aYkkWcixhoT1e6Iv6g9XhAAAA04"]
[Mon Feb 09 08:03:38.404822 2026] [:error] [pid 60677:tid 60737] [client 20.69.252.116:24301] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aYkkWlyBgzfmDf6Gaeu_6AAAAs0"]
[Mon Feb 09 08:03:38.839719 2026] [:error] [pid 60676:tid 60695] [client 20.69.252.116:24273] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYkkWnhKcn7mJYMx5_Ab_wAAAos"]
[Mon Feb 09 08:03:39.283732 2026] [:error] [pid 47938:tid 48003] [client 20.69.252.116:24344] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYkkW7VCzWE6fQJEkNJOTQAAAFg"]
[Mon Feb 09 08:03:39.698018 2026] [:error] [pid 60508:tid 60534] [client 20.69.252.116:24281] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYkkW-XDvLC4ADfnEzMl_gAAAZg"]
[Mon Feb 09 08:03:40.107532 2026] [:error] [pid 60676:tid 60686] [client 20.69.252.116:24298] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYkkXHhKcn7mJYMx5_AcAgAAAoI"]
[Mon Feb 09 08:03:40.569085 2026] [:error] [pid 60508:tid 60525] [client 20.69.252.116:24498] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkkXOXDvLC4ADfnEzMmAAAAAY8"]
[Mon Feb 09 08:03:41.153823 2026] [:error] [pid 60676:tid 60685] [client 20.69.252.116:24195] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkkXXhKcn7mJYMx5_AcBAAAAoE"]
[Mon Feb 09 08:03:41.639363 2026] [:error] [pid 60508:tid 60521] [client 20.69.252.116:24258] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkkXeXDvLC4ADfnEzMmBQAAAYs"]
[Mon Feb 09 08:03:42.530560 2026] [:error] [pid 47937:tid 47961] [client 20.69.252.116:24257] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYkkXs4Fd42MP2DhNrVR0wAAAA8"]
[Mon Feb 09 08:03:44.568135 2026] [:error] [pid 60679:tid 60781] [client 20.69.252.116:24502] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Feb 09 08:03:44.775057 2026] [:error] [pid 60679:tid 60761] [client 20.69.252.116:24502] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Mon Feb 09 08:03:44.974120 2026] [:error] [pid 60679:tid 60757] [client 20.69.252.116:24502] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYkkYMixhoT1e6Iv6g9XnwAAA00"]
[Mon Feb 09 08:03:45.404682 2026] [:error] [pid 60508:tid 60513] [client 20.69.252.116:24335] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYkkYeXDvLC4ADfnEzMmBwAAAYM"]
[Mon Feb 09 08:03:45.850822 2026] [:error] [pid 18303:tid 18326] [client 20.69.252.116:24374] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aYkkYUY7TEaZkFrGG4kUQwAAARU"]
[Mon Feb 09 08:03:46.300033 2026] [:error] [pid 18303:tid 18322] [client 20.69.252.116:24347] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aYkkYkY7TEaZkFrGG4kURgAAARE"]
[Mon Feb 09 08:03:46.789384 2026] [:error] [pid 60508:tid 60531] [client 20.69.252.116:24370] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aYkkYuXDvLC4ADfnEzMmCwAAAZU"]
[Mon Feb 09 08:03:47.225475 2026] [:error] [pid 18303:tid 18312] [client 20.69.252.116:24290] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aYkkY0Y7TEaZkFrGG4kUSAAAAQc"]
[Mon Feb 09 08:03:47.704126 2026] [:error] [pid 60676:tid 60704] [client 20.69.252.116:24382] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYkkY3hKcn7mJYMx5_AcEwAAApQ"]
[Mon Feb 09 08:03:48.142468 2026] [:error] [pid 60619:tid 60640] [client 20.69.252.116:24443] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYkkZHEpg0UoeR8kJ-12sAAAAkA"]
[Mon Feb 09 08:03:48.580867 2026] [:error] [pid 60589:tid 60594] [client 20.69.252.116:24359] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYkkZDIJyhPWC0JyMLzX2gAAAcM"]
[Mon Feb 09 08:03:49.097651 2026] [:error] [pid 60676:tid 60690] [client 20.69.252.116:24315] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYkkZXhKcn7mJYMx5_AcFgAAAoY"]
[Mon Feb 09 08:03:49.544458 2026] [:error] [pid 60677:tid 60715] [client 20.69.252.116:24318] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYkkZVyBgzfmDf6Gaeu_-AAAAsQ"]
[Mon Feb 09 08:03:50.120215 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24271] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYkkZnEpg0UoeR8kJ-12sQAAAk8"]
[Mon Feb 09 08:03:50.805319 2026] [:error] [pid 60677:tid 60758] [client 20.69.252.116:24363] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYkkZlyBgzfmDf6Gaeu_-QAAAtM"]
[Mon Feb 09 08:03:51.229640 2026] [:error] [pid 60589:tid 60599] [client 20.69.252.116:24228] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYkkZzIJyhPWC0JyMLzX2wAAAcg"]
[Mon Feb 09 08:03:51.678091 2026] [:error] [pid 60508:tid 60533] [client 20.69.252.116:24379] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYkkZ-XDvLC4ADfnEzMmEAAAAZc"]
[Mon Feb 09 08:03:52.129413 2026] [:error] [pid 60619:tid 60642] [client 20.69.252.116:24304] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYkkaHEpg0UoeR8kJ-12tgAAAkI"]
[Mon Feb 09 08:03:52.594568 2026] [:error] [pid 18303:tid 18313] [client 20.69.252.116:24206] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYkkaEY7TEaZkFrGG4kUTgAAAQg"]
[Mon Feb 09 08:03:53.022081 2026] [:error] [pid 60508:tid 60532] [client 20.69.252.116:24193] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYkkaeXDvLC4ADfnEzMmEwAAAZY"]
[Mon Feb 09 08:03:53.446021 2026] [:error] [pid 47937:tid 47958] [client 20.69.252.116:24442] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aYkkac4Fd42MP2DhNrVR6gAAAAw"]
[Mon Feb 09 08:03:53.864767 2026] [:error] [pid 60678:tid 60752] [client 20.69.252.116:24276] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aYkkae8Gd_fDFrcNu4MuTgAAAwo"]
[Mon Feb 09 08:03:54.314755 2026] [:error] [pid 60678:tid 60729] [client 20.69.252.116:24201] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aYkkau8Gd_fDFrcNu4MuUQAAAwM"]
[Mon Feb 09 08:03:54.775619 2026] [:error] [pid 60508:tid 60524] [client 20.69.252.116:24280] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aYkkauXDvLC4ADfnEzMmFgAAAY4"]
[Mon Feb 09 08:03:55.207448 2026] [:error] [pid 47938:tid 47994] [client 20.69.252.116:24299] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYkka7VCzWE6fQJEkNJOYgAAAE8"]
[Mon Feb 09 08:03:55.630206 2026] [:error] [pid 18303:tid 18310] [client 20.69.252.116:24361] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYkka0Y7TEaZkFrGG4kUUwAAAQU"]
[Mon Feb 09 08:03:56.059182 2026] [:error] [pid 60678:tid 60723] [client 20.69.252.116:24218] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYkkbO8Gd_fDFrcNu4MuVAAAAwA"]
[Mon Feb 09 08:03:56.488344 2026] [:error] [pid 60679:tid 60730] [client 20.69.252.116:24303] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYkkbMixhoT1e6Iv6g9XogAAA0E"]
[Mon Feb 09 08:03:56.972151 2026] [:error] [pid 60678:tid 60736] [client 20.69.252.116:24440] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYkkbO8Gd_fDFrcNu4MuVgAAAwQ"]
[Mon Feb 09 08:03:57.417575 2026] [:error] [pid 60508:tid 60511] [client 20.69.252.116:24266] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYkkbeXDvLC4ADfnEzMmIAAAAYE"]
[Mon Feb 09 08:03:57.861865 2026] [:error] [pid 60619:tid 60672] [client 20.69.252.116:24351] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYkkbXEpg0UoeR8kJ-12xwAAAlY"]
[Mon Feb 09 08:03:58.286745 2026] [:error] [pid 60619:tid 60668] [client 20.69.252.116:24525] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYkkbnEpg0UoeR8kJ-12yQAAAlI"]
[Mon Feb 09 08:03:58.758640 2026] [:error] [pid 60619:tid 60663] [client 20.69.252.116:24499] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aYkkbnEpg0UoeR8kJ-12ygAAAk0"]
[Mon Feb 09 08:03:59.234564 2026] [:error] [pid 60676:tid 60693] [client 20.69.252.116:24208] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aYkkb3hKcn7mJYMx5_AcJwAAAok"]
[Mon Feb 09 08:03:59.892332 2026] [:error] [pid 18303:tid 18317] [client 20.69.252.116:24356] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aYkkb0Y7TEaZkFrGG4kUWQAAAQw"]
[Mon Feb 09 08:04:00.332683 2026] [:error] [pid 60508:tid 60525] [client 20.69.252.116:24360] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aYkkcOXDvLC4ADfnEzMmKgAAAY8"]
[Mon Feb 09 08:04:00.803346 2026] [:error] [pid 60679:tid 60766] [client 20.69.252.116:24283] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aYkkcMixhoT1e6Iv6g9XpwAAA1E"]
[Mon Feb 09 08:04:01.257920 2026] [:error] [pid 60678:tid 60763] [client 20.69.252.116:24211] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aYkkce8Gd_fDFrcNu4MuWwAAAw0"]
[Mon Feb 09 08:04:01.723857 2026] [:error] [pid 60508:tid 60512] [client 20.69.252.116:24199] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aYkkceXDvLC4ADfnEzMmLQAAAYI"]
[Mon Feb 09 08:04:02.253952 2026] [:error] [pid 60679:tid 60761] [client 20.69.252.116:24381] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aYkkcsixhoT1e6Iv6g9XqgAAA08"]
[Mon Feb 09 08:04:02.809976 2026] [:error] [pid 47937:tid 47963] [client 20.69.252.116:24225] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aYkkcs4Fd42MP2DhNrVR7gAAABE"]
[Mon Feb 09 08:04:03.279783 2026] [:error] [pid 60679:tid 60741] [client 20.69.252.116:24375] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aYkkc8ixhoT1e6Iv6g9XrAAAA0c"]
[Mon Feb 09 08:04:03.852116 2026] [:error] [pid 60589:tid 60615] [client 20.69.252.116:24197] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aYkkczIJyhPWC0JyMLzX6gAAAdg"]
[Mon Feb 09 08:04:04.466281 2026] [:error] [pid 60589:tid 60593] [client 20.69.252.116:24221] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aYkkdDIJyhPWC0JyMLzX7QAAAcI"]
[Mon Feb 09 08:04:05.013965 2026] [:error] [pid 47938:tid 47998] [client 20.69.252.116:24213] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aYkkdbVCzWE6fQJEkNJOcwAAAFM"]
[Mon Feb 09 08:04:05.545030 2026] [:error] [pid 60508:tid 60515] [client 20.69.252.116:24300] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aYkkdeXDvLC4ADfnEzMmNQAAAYU"]
[Mon Feb 09 08:04:06.273839 2026] [:error] [pid 60589:tid 60599] [client 20.69.252.116:24423] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aYkkdjIJyhPWC0JyMLzX8AAAAcg"]
[Mon Feb 09 08:04:06.788118 2026] [:error] [pid 60619:tid 60645] [client 20.69.252.116:24243] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aYkkdnEpg0UoeR8kJ-120wAAAkQ"]
[Mon Feb 09 08:04:07.323877 2026] [:error] [pid 60619:tid 60674] [client 20.69.252.116:24217] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aYkkd3Epg0UoeR8kJ-121QAAAlg"]
[Mon Feb 09 08:04:07.748970 2026] [:error] [pid 60619:tid 60641] [client 20.69.252.116:24307] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aYkkd3Epg0UoeR8kJ-121gAAAkE"]
[Mon Feb 09 08:04:08.193790 2026] [:error] [pid 18303:tid 18320] [client 20.69.252.116:24261] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aYkkeEY7TEaZkFrGG4kUXwAAAQ8"]
[Mon Feb 09 08:04:08.672519 2026] [:error] [pid 18303:tid 18316] [client 20.69.252.116:24306] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aYkkeEY7TEaZkFrGG4kUYQAAAQs"]
[Mon Feb 09 08:04:09.205223 2026] [:error] [pid 60677:tid 60712] [client 20.69.252.116:24302] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aYkkeVyBgzfmDf6GaevABwAAAsE"]
[Mon Feb 09 08:04:09.775030 2026] [:error] [pid 60589:tid 60605] [client 20.69.252.116:24200] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aYkkeTIJyhPWC0JyMLzX9wAAAc4"]
[Mon Feb 09 08:04:10.288185 2026] [:error] [pid 60508:tid 60518] [client 20.69.252.116:24457] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aYkkeuXDvLC4ADfnEzMmQAAAAYg"]
[Mon Feb 09 08:04:10.794236 2026] [:error] [pid 18303:tid 18328] [client 20.69.252.116:24234] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aYkkekY7TEaZkFrGG4kUbQAAARc"]
[Mon Feb 09 08:04:11.342002 2026] [:error] [pid 60619:tid 60655] [client 20.69.252.116:24248] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aYkke3Epg0UoeR8kJ-123QAAAko"]
[Mon Feb 09 08:04:11.807400 2026] [:error] [pid 60508:tid 60528] [client 20.69.252.116:24259] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aYkke-XDvLC4ADfnEzMmRAAAAZI"]
[Mon Feb 09 08:04:12.584113 2026] [:error] [pid 47937:tid 47964] [client 20.69.252.116:24143] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aYkkfM4Fd42MP2DhNrVR_QAAABI"]
[Mon Feb 09 08:04:13.012825 2026] [:error] [pid 60679:tid 60728] [client 20.69.252.116:24244] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aYkkfcixhoT1e6Iv6g9XswAAA0A"]
[Mon Feb 09 08:04:13.575467 2026] [:error] [pid 47938:tid 47994] [client 20.69.252.116:24233] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aYkkfbVCzWE6fQJEkNJOfwAAAE8"]
[Mon Feb 09 08:04:13.987207 2026] [:error] [pid 60676:tid 60694] [client 20.69.252.116:24203] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aYkkfXhKcn7mJYMx5_AcOwAAAoo"]
[Mon Feb 09 08:04:14.476890 2026] [:error] [pid 60677:tid 60776] [client 20.69.252.116:24242] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aYkkflyBgzfmDf6GaevACQAAAtc"]
[Mon Feb 09 08:04:14.902799 2026] [:error] [pid 47938:tid 47995] [client 20.69.252.116:24433] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aYkkfrVCzWE6fQJEkNJOgQAAAFA"]
[Mon Feb 09 08:04:15.440880 2026] [:error] [pid 60678:tid 60751] [client 20.69.252.116:24220] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aYkkf-8Gd_fDFrcNu4MuXgAAAwk"]
[Mon Feb 09 08:04:15.848028 2026] [:error] [pid 60589:tid 60595] [client 20.69.252.116:24214] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aYkkfzIJyhPWC0JyMLzX_QAAAcQ"]
[Mon Feb 09 08:04:16.433745 2026] [:error] [pid 60676:tid 60696] [client 20.69.252.116:24154] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aYkkgHhKcn7mJYMx5_AcPwAAAow"]
[Mon Feb 09 08:04:16.925625 2026] [:error] [pid 60677:tid 60711] [client 20.69.252.116:24244] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aYkkgFyBgzfmDf6GaevADQAAAsA"]
[Mon Feb 09 08:04:17.392434 2026] [:error] [pid 60679:tid 60784] [client 20.69.252.116:24071] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aYkkgcixhoT1e6Iv6g9XuAAAA1g"]
[Mon Feb 09 08:04:17.923410 2026] [:error] [pid 60619:tid 60655] [client 20.69.252.116:24428] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aYkkgXEpg0UoeR8kJ-125gAAAko"]
[Mon Feb 09 08:04:18.451981 2026] [:error] [pid 60589:tid 60597] [client 20.69.252.116:24269] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aYkkgjIJyhPWC0JyMLzX_wAAAcY"]
[Mon Feb 09 08:04:18.915711 2026] [:error] [pid 60589:tid 60603] [client 20.69.252.116:24262] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aYkkgjIJyhPWC0JyMLzYAAAAAcw"]
[Mon Feb 09 08:04:19.410214 2026] [:error] [pid 60619:tid 60664] [client 20.69.252.116:24245] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYkkg3Epg0UoeR8kJ-126wAAAk4"]
[Mon Feb 09 08:04:19.826758 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24316] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYkkg3Epg0UoeR8kJ-127QAAAk8"]
[Mon Feb 09 08:04:20.344473 2026] [:error] [pid 60677:tid 60731] [client 20.69.252.116:24192] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYkkhFyBgzfmDf6GaevAEQAAAsw"]
[Mon Feb 09 08:04:20.809887 2026] [:error] [pid 47938:tid 47990] [client 20.69.252.116:24345] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYkkhLVCzWE6fQJEkNJOhgAAAEs"]
[Mon Feb 09 08:04:21.538453 2026] [:error] [pid 60679:tid 60769] [client 20.69.252.116:24426] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYkkhcixhoT1e6Iv6g9XuwAAA1M"]
[Mon Feb 09 08:04:22.209517 2026] [:error] [pid 60508:tid 60528] [client 20.69.252.116:24311] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYkkhuXDvLC4ADfnEzMmUAAAAZI"]
[Mon Feb 09 08:04:22.659800 2026] [:error] [pid 60677:tid 60737] [client 20.69.252.116:24293] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYkkhlyBgzfmDf6GaevAFQAAAs0"]
[Mon Feb 09 08:04:23.069869 2026] [:error] [pid 60619:tid 60673] [client 20.69.252.116:24202] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYkkh3Epg0UoeR8kJ-129wAAAlc"]
[Mon Feb 09 08:04:23.488683 2026] [:error] [pid 60679:tid 60732] [client 20.69.252.116:24204] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYkkh8ixhoT1e6Iv6g9XvAAAA0I"]
[Mon Feb 09 08:04:23.937904 2026] [:error] [pid 60676:tid 60684] [client 20.69.252.116:24251] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYkkh3hKcn7mJYMx5_AcSwAAAoA"]
[Mon Feb 09 08:04:24.609266 2026] [:error] [pid 60676:tid 60696] [client 20.69.252.116:24236] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYkkiHhKcn7mJYMx5_AcTQAAAow"]
[Mon Feb 09 08:04:25.214792 2026] [:error] [pid 60679:tid 60741] [client 20.69.252.116:24132] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYkkicixhoT1e6Iv6g9XvwAAA0c"]
[Mon Feb 09 08:04:25.703566 2026] [:error] [pid 60619:tid 60650] [client 20.69.252.116:24340] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYkkiXEpg0UoeR8kJ-12_QAAAkg"]
[Mon Feb 09 08:04:26.459134 2026] [:error] [pid 60619:tid 60669] [client 20.69.252.116:24249] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYkkinEpg0UoeR8kJ-13AAAAAlM"]
[Mon Feb 09 08:04:27.001065 2026] [:error] [pid 60589:tid 60606] [client 20.69.252.116:24312] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYkkizIJyhPWC0JyMLzYEwAAAc8"]
[Mon Feb 09 08:04:27.616212 2026] [:error] [pid 18303:tid 18307] [client 20.69.252.116:24205] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYkki0Y7TEaZkFrGG4kUiQAAAQI"]
[Mon Feb 09 08:04:28.148286 2026] [:error] [pid 60679:tid 60738] [client 20.69.252.116:24274] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYkkjMixhoT1e6Iv6g9XxgAAA0Y"]
[Mon Feb 09 08:04:28.747604 2026] [:error] [pid 60619:tid 60641] [client 20.69.252.116:24308] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYkkjHEpg0UoeR8kJ-13BgAAAkE"]
[Mon Feb 09 08:04:29.207488 2026] [:error] [pid 60508:tid 60517] [client 20.69.252.116:24227] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYkkjeXDvLC4ADfnEzMmVwAAAYc"]
[Mon Feb 09 08:04:30.100219 2026] [:error] [pid 60679:tid 60734] [client 20.69.252.116:24207] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYkkjsixhoT1e6Iv6g9XzAAAA0Q"]
[Mon Feb 09 08:04:30.936196 2026] [:error] [pid 18303:tid 18319] [client 20.69.252.116:24131] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYkkjkY7TEaZkFrGG4kUjQAAAQ4"]
[Mon Feb 09 08:04:31.458906 2026] [:error] [pid 47937:tid 47962] [client 20.69.252.116:24297] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYkkj84Fd42MP2DhNrVSAgAAABA"]
[Mon Feb 09 08:04:32.138030 2026] [:error] [pid 60589:tid 60596] [client 20.69.252.116:24415] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYkkkDIJyhPWC0JyMLzYGwAAAcU"]
[Mon Feb 09 08:04:32.613850 2026] [:error] [pid 60619:tid 60645] [client 20.69.252.116:24210] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYkkkHEpg0UoeR8kJ-13EgAAAkQ"]
[Mon Feb 09 08:04:33.196340 2026] [:error] [pid 18303:tid 18323] [client 20.69.252.116:24317] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYkkkUY7TEaZkFrGG4kUkQAAARI"]
[Mon Feb 09 08:04:33.707763 2026] [:error] [pid 60676:tid 60684] [client 20.69.252.116:24162] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYkkkXhKcn7mJYMx5_AcUQAAAoA"]
[Mon Feb 09 08:04:34.347049 2026] [:error] [pid 60619:tid 60643] [client 20.69.252.116:24209] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYkkknEpg0UoeR8kJ-13FwAAAkM"]
[Mon Feb 09 08:04:34.966711 2026] [:error] [pid 60679:tid 60735] [client 20.69.252.116:24187] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYkkksixhoT1e6Iv6g9X1AAAA0U"]
[Mon Feb 09 08:04:35.561600 2026] [:error] [pid 60508:tid 60514] [client 20.69.252.116:24198] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYkkk-XDvLC4ADfnEzMmXQAAAYQ"]
[Mon Feb 09 08:04:36.067175 2026] [:error] [pid 18303:tid 18315] [client 20.69.252.116:24156] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYkklEY7TEaZkFrGG4kUmwAAAQo"]
[Mon Feb 09 08:04:36.548097 2026] [:error] [pid 47937:tid 47947] [client 20.69.252.116:24167] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYkklM4Fd42MP2DhNrVSCQAAAAE"]
[Mon Feb 09 08:04:37.410998 2026] [:error] [pid 60589:tid 60607] [client 20.69.252.116:24288] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYkklTIJyhPWC0JyMLzYJAAAAdA"]
[Mon Feb 09 08:04:38.093883 2026] [:error] [pid 60678:tid 60726] [client 20.69.252.116:24268] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aYkklu8Gd_fDFrcNu4MuaAAAAwI"]
[Mon Feb 09 08:04:38.659147 2026] [:error] [pid 60678:tid 60767] [client 20.69.252.116:24145] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aYkklu8Gd_fDFrcNu4MuaQAAAw8"]
[Mon Feb 09 08:04:39.313924 2026] [:error] [pid 47938:tid 47994] [client 20.69.252.116:24229] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aYkkl7VCzWE6fQJEkNJOkgAAAE8"]
[Mon Feb 09 08:04:40.200926 2026] [:error] [pid 60589:tid 60604] [client 20.69.252.116:24239] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class9.php"] [unique_id "aYkkmDIJyhPWC0JyMLzYKAAAAc0"]
[Mon Feb 09 08:04:40.624509 2026] [:error] [pid 60676:tid 60695] [client 20.69.252.116:24153] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aYkkmHhKcn7mJYMx5_AcVwAAAos"]
[Mon Feb 09 08:04:41.148135 2026] [:error] [pid 60678:tid 60747] [client 20.69.252.116:24169] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aYkkme8Gd_fDFrcNu4MubQAAAwg"]
[Mon Feb 09 08:04:41.793157 2026] [:error] [pid 60589:tid 60612] [client 20.69.252.116:24149] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aYkkmTIJyhPWC0JyMLzYLQAAAdU"]
[Mon Feb 09 08:04:42.270667 2026] [:error] [pid 60589:tid 60608] [client 20.69.252.116:24135] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aYkkmjIJyhPWC0JyMLzYMAAAAdE"]
[Mon Feb 09 08:04:42.754942 2026] [:error] [pid 47937:tid 47965] [client 20.69.252.116:24175] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aYkkms4Fd42MP2DhNrVSEgAAABM"]
[Mon Feb 09 08:04:43.215593 2026] [:error] [pid 60589:tid 60614] [client 20.69.252.116:24267] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aYkkmzIJyhPWC0JyMLzYMgAAAdc"]
[Mon Feb 09 08:04:43.639265 2026] [:error] [pid 47938:tid 47980] [client 20.69.252.116:24158] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aYkkm7VCzWE6fQJEkNJOnAAAAEE"]
[Mon Feb 09 08:04:44.105104 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Mon Feb 09 08:04:44.331262 2026] [:error] [pid 60589:tid 60613] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Mon Feb 09 08:04:44.535911 2026] [:error] [pid 60589:tid 60598] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Mon Feb 09 08:04:44.752499 2026] [:error] [pid 60589:tid 60602] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Feb 09 08:04:45.023428 2026] [:error] [pid 60589:tid 60591] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Mon Feb 09 08:04:45.227266 2026] [:error] [pid 60589:tid 60609] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Mon Feb 09 08:04:45.435351 2026] [:error] [pid 60589:tid 60612] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Feb 09 08:04:45.639154 2026] [:error] [pid 60589:tid 60592] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Mon Feb 09 08:04:45.876486 2026] [:error] [pid 60589:tid 60608] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Mon Feb 09 08:04:46.079772 2026] [:error] [pid 60589:tid 60603] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Mon Feb 09 08:04:46.331132 2026] [:error] [pid 60589:tid 60605] [client 20.69.252.116:24277] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Mon Feb 09 08:04:46.533528 2026] [:error] [pid 60589:tid 60614] [client 20.69.252.116:24277] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYkknjIJyhPWC0JyMLzYQwAAAdc"]
[Mon Feb 09 08:04:49.569715 2026] [:error] [pid 60589:tid 60600] [client 20.69.252.116:24313] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYkkoTIJyhPWC0JyMLzYRwAAAck"]
[Mon Feb 09 08:04:50.767825 2026] [:error] [pid 18303:tid 18316] [client 20.69.252.116:24319] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYkkokY7TEaZkFrGG4kUqAAAAQs"]
[Mon Feb 09 08:04:51.523021 2026] [:error] [pid 47938:tid 48001] [client 20.69.252.116:24215] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYkko7VCzWE6fQJEkNJOrQAAAFY"]
[Mon Feb 09 08:04:53.195376 2026] [:error] [pid 60619:tid 60670] [client 20.69.252.116:24337] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aYkkpXEpg0UoeR8kJ-13KAAAAlQ"]
[Mon Feb 09 08:04:55.135905 2026] [:error] [pid 60677:tid 60712] [client 20.69.252.116:24163] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aYkkp1yBgzfmDf6GaevALwAAAsE"]
[Mon Feb 09 08:04:56.190295 2026] [:error] [pid 60679:tid 60761] [client 20.69.252.116:24305] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aYkkqMixhoT1e6Iv6g9X4AAAA08"]
[Mon Feb 09 08:04:56.811654 2026] [:error] [pid 60679:tid 60757] [client 20.69.252.116:24151] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aYkkqMixhoT1e6Iv6g9X4gAAA00"]
[Mon Feb 09 08:04:57.423300 2026] [:error] [pid 60619:tid 60666] [client 20.69.252.116:24134] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aYkkqXEpg0UoeR8kJ-13MwAAAlA"]
[Mon Feb 09 08:04:57.906191 2026] [:error] [pid 60678:tid 60726] [client 20.69.252.116:24129] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aYkkqe8Gd_fDFrcNu4MueAAAAwI"]
[Mon Feb 09 08:04:58.395083 2026] [:error] [pid 18303:tid 18326] [client 20.69.252.116:24237] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aYkkqkY7TEaZkFrGG4kUsAAAARU"]
[Mon Feb 09 08:04:58.893900 2026] [:error] [pid 47938:tid 47988] [client 20.69.252.116:24223] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aYkkqrVCzWE6fQJEkNJOtwAAAEk"]
[Mon Feb 09 08:04:59.408674 2026] [:error] [pid 60678:tid 60787] [client 20.69.252.116:24235] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aYkkq-8Gd_fDFrcNu4MuegAAAxY"]
[Mon Feb 09 08:04:59.909189 2026] [:error] [pid 60677:tid 60715] [client 20.69.252.116:24196] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aYkkq1yBgzfmDf6GaevANAAAAsQ"]
[Mon Feb 09 08:05:00.350493 2026] [:error] [pid 60589:tid 60611] [client 20.69.252.116:24212] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aYkkrDIJyhPWC0JyMLzYTwAAAdQ"]
[Mon Feb 09 08:05:00.813911 2026] [:error] [pid 60679:tid 60746] [client 20.69.252.116:24194] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aYkkrMixhoT1e6Iv6g9X6gAAA0k"]
[Mon Feb 09 08:05:01.319853 2026] [:error] [pid 47937:tid 47948] [client 20.69.252.116:24161] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aYkkrc4Fd42MP2DhNrVSKgAAAAI"]
[Mon Feb 09 08:05:01.879876 2026] [:error] [pid 60589:tid 60604] [client 20.69.252.116:24226] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aYkkrTIJyhPWC0JyMLzYUQAAAc0"]
[Mon Feb 09 08:05:02.358624 2026] [:error] [pid 60589:tid 60605] [client 20.69.252.116:24295] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aYkkrjIJyhPWC0JyMLzYUwAAAc4"]
[Mon Feb 09 08:05:02.818254 2026] [:error] [pid 60589:tid 60601] [client 20.69.252.116:24076] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aYkkrjIJyhPWC0JyMLzYVAAAAco"]
[Mon Feb 09 08:05:03.346155 2026] [:error] [pid 60678:tid 60783] [client 20.69.252.116:24146] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova.php"] [unique_id "aYkkr-8Gd_fDFrcNu4MufAAAAxQ"]
[Mon Feb 09 08:05:03.829063 2026] [:error] [pid 60619:tid 60647] [client 20.69.252.116:24170] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova.php"] [unique_id "aYkkr3Epg0UoeR8kJ-13NwAAAkY"]
[Mon Feb 09 08:05:04.293509 2026] [:error] [pid 60619:tid 60658] [client 20.69.252.116:24133] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova.php"] [unique_id "aYkksHEpg0UoeR8kJ-13OAAAAks"]
[Mon Feb 09 08:05:04.694662 2026] [:error] [pid 60619:tid 60653] [client 20.69.252.116:24107] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova.php"] [unique_id "aYkksHEpg0UoeR8kJ-13OwAAAkk"]
[Mon Feb 09 08:05:05.116746 2026] [:error] [pid 60619:tid 60661] [client 20.69.252.116:24144] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aYkksXEpg0UoeR8kJ-13PAAAAkw"]
[Mon Feb 09 08:05:05.615702 2026] [:error] [pid 60508:tid 60518] [client 20.69.252.116:24142] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aYkkseXDvLC4ADfnEzMmeAAAAYg"]
[Mon Feb 09 08:05:06.059860 2026] [:error] [pid 60508:tid 60525] [client 20.69.252.116:24222] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aYkksuXDvLC4ADfnEzMmeQAAAY8"]
[Mon Feb 09 08:05:06.498076 2026] [:error] [pid 60676:tid 60705] [client 20.69.252.116:24216] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aYkksnhKcn7mJYMx5_AcbwAAApU"]
[Mon Feb 09 08:05:07.113131 2026] [:error] [pid 60619:tid 60667] [client 20.69.252.116:24231] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aYkks3Epg0UoeR8kJ-13PwAAAlE"]
[Mon Feb 09 08:05:07.617865 2026] [:error] [pid 60678:tid 60724] [client 20.69.252.116:24254] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aYkks-8Gd_fDFrcNu4MugQAAAwE"]
[Mon Feb 09 08:05:08.125639 2026] [:error] [pid 60589:tid 60592] [client 20.69.252.116:24159] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aYkktDIJyhPWC0JyMLzYWAAAAcE"]
[Mon Feb 09 08:05:08.580139 2026] [:error] [pid 18303:tid 18309] [client 20.69.252.116:24294] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aYkktEY7TEaZkFrGG4kUtgAAAQQ"]
[Mon Feb 09 08:05:09.176354 2026] [:error] [pid 60619:tid 60642] [client 20.69.252.116:24190] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYkktXEpg0UoeR8kJ-13QgAAAkI"]
[Mon Feb 09 08:05:09.614411 2026] [:error] [pid 60589:tid 60611] [client 20.69.252.116:24181] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYkktTIJyhPWC0JyMLzYWgAAAdQ"]
[Mon Feb 09 08:05:10.055730 2026] [:error] [pid 47938:tid 47995] [client 20.69.252.116:24219] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYkktrVCzWE6fQJEkNJOvwAAAFA"]
[Mon Feb 09 08:05:10.767271 2026] [:error] [pid 60589:tid 60614] [client 20.69.252.116:24247] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYkktjIJyhPWC0JyMLzYWwAAAdc"]
[Mon Feb 09 08:05:11.452942 2026] [:error] [pid 47938:tid 47989] [client 20.69.252.116:24177] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spip.php"] [unique_id "aYkkt7VCzWE6fQJEkNJOwQAAAEo"]
[Mon Feb 09 08:05:11.966626 2026] [:error] [pid 60678:tid 60755] [client 20.69.252.116:24068] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spip.php"] [unique_id "aYkkt-8Gd_fDFrcNu4MuhAAAAws"]
[Mon Feb 09 08:05:12.628173 2026] [:error] [pid 60677:tid 60717] [client 20.69.252.116:24138] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spip.php"] [unique_id "aYkkuFyBgzfmDf6GaevAQAAAAsY"]
[Mon Feb 09 08:05:13.163409 2026] [:error] [pid 60619:tid 60674] [client 20.69.252.116:24069] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spip.php"] [unique_id "aYkkuXEpg0UoeR8kJ-13SAAAAlg"]
[Mon Feb 09 08:05:13.619849 2026] [:error] [pid 60679:tid 60769] [client 20.69.252.116:24074] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scripts/wpup.php"] [unique_id "aYkkucixhoT1e6Iv6g9X9QAAA1M"]
[Mon Feb 09 08:05:14.096651 2026] [:error] [pid 60677:tid 60739] [client 20.69.252.116:24141] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scripts/wpup.php"] [unique_id "aYkkulyBgzfmDf6GaevAQQAAAs4"]
[Mon Feb 09 08:05:14.531846 2026] [:error] [pid 60679:tid 60757] [client 20.69.252.116:24250] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scripts/wpup.php"] [unique_id "aYkkusixhoT1e6Iv6g9X9gAAA00"]
[Mon Feb 09 08:05:14.981569 2026] [:error] [pid 60677:tid 60758] [client 20.69.252.116:24179] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scripts/wpup.php"] [unique_id "aYkkulyBgzfmDf6GaevAQgAAAtM"]
[Mon Feb 09 08:05:15.418885 2026] [:error] [pid 60677:tid 60762] [client 20.69.252.116:24083] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYkku1yBgzfmDf6GaevAQwAAAtQ"]
[Mon Feb 09 08:05:15.876681 2026] [:error] [pid 60589:tid 60606] [client 20.69.252.116:24075] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYkkuzIJyhPWC0JyMLzYYQAAAc8"]
[Mon Feb 09 08:05:16.306854 2026] [:error] [pid 60676:tid 60684] [client 20.69.252.116:24072] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYkkvHhKcn7mJYMx5_AccgAAAoA"]
[Mon Feb 09 08:05:16.823506 2026] [:error] [pid 60619:tid 60670] [client 20.69.252.116:24130] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYkkvHEpg0UoeR8kJ-13UwAAAlQ"]
[Mon Feb 09 08:05:17.369831 2026] [:error] [pid 60589:tid 60611] [client 20.69.252.116:24230] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ho/wpup.php"] [unique_id "aYkkvTIJyhPWC0JyMLzYYwAAAdQ"]
[Mon Feb 09 08:05:17.771090 2026] [:error] [pid 47938:tid 47990] [client 20.69.252.116:24099] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ho/wpup.php"] [unique_id "aYkkvbVCzWE6fQJEkNJOxQAAAEs"]
[Mon Feb 09 08:05:18.339446 2026] [:error] [pid 60677:tid 60770] [client 20.69.252.116:24140] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ho/wpup.php"] [unique_id "aYkkvlyBgzfmDf6GaevARQAAAtU"]
[Mon Feb 09 08:05:18.779241 2026] [:error] [pid 60678:tid 60745] [client 20.69.252.116:24166] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ho/wpup.php"] [unique_id "aYkkvu8Gd_fDFrcNu4MuiAAAAwc"]
[Mon Feb 09 08:05:19.236519 2026] [:error] [pid 60589:tid 60603] [client 20.69.252.116:24090] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aYkkvzIJyhPWC0JyMLzYZgAAAcw"]
[Mon Feb 09 08:05:19.678808 2026] [:error] [pid 60677:tid 60718] [client 20.69.252.116:24006] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aYkkv1yBgzfmDf6GaevARgAAAsc"]
[Mon Feb 09 08:05:20.134528 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24082] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aYkkwHEpg0UoeR8kJ-13WwAAAk8"]
[Mon Feb 09 08:05:20.544582 2026] [:error] [pid 47937:tid 47946] [client 20.69.252.116:24148] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aYkkwM4Fd42MP2DhNrVSPwAAAAA"]
[Mon Feb 09 08:05:20.965959 2026] [:error] [pid 60589:tid 60600] [client 20.69.252.116:24094] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYkkwDIJyhPWC0JyMLzYagAAAck"]
[Mon Feb 09 08:05:21.456055 2026] [:error] [pid 60676:tid 60703] [client 20.69.252.116:24173] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYkkwXhKcn7mJYMx5_AcdQAAApM"]
[Mon Feb 09 08:05:21.930897 2026] [:error] [pid 60677:tid 60722] [client 20.69.252.116:24155] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYkkwVyBgzfmDf6GaevASAAAAso"]
[Mon Feb 09 08:05:22.410376 2026] [:error] [pid 60619:tid 60665] [client 20.69.252.116:24124] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYkkwnEpg0UoeR8kJ-13YAAAAk8"]
[Mon Feb 09 08:05:22.810326 2026] [:error] [pid 47937:tid 47948] [client 20.69.252.116:24095] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myy.php"] [unique_id "aYkkws4Fd42MP2DhNrVSQAAAAAI"]
[Mon Feb 09 08:05:23.270838 2026] [:error] [pid 60676:tid 60685] [client 20.69.252.116:24150] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myy.php"] [unique_id "aYkkw3hKcn7mJYMx5_AcdwAAAoE"]
[Mon Feb 09 08:05:23.706436 2026] [:error] [pid 60678:tid 60777] [client 20.69.252.116:24164] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myy.php"] [unique_id "aYkkw-8Gd_fDFrcNu4MuiwAAAxI"]
[Mon Feb 09 08:05:24.227386 2026] [:error] [pid 60508:tid 60523] [client 20.69.252.116:24089] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myy.php"] [unique_id "aYkkxOXDvLC4ADfnEzMmkQAAAY0"]
[Mon Feb 09 08:05:24.660954 2026] [:error] [pid 60677:tid 60714] [client 20.69.252.116:24183] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/halo.php"] [unique_id "aYkkxFyBgzfmDf6GaevATAAAAsM"]
[Mon Feb 09 08:05:25.146526 2026] [:error] [pid 60679:tid 60738] [client 20.69.252.116:24066] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/halo.php"] [unique_id "aYkkxcixhoT1e6Iv6g9X-gAAA0Y"]
[Mon Feb 09 08:05:25.610002 2026] [:error] [pid 60676:tid 60688] [client 20.69.252.116:24088] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/halo.php"] [unique_id "aYkkxXhKcn7mJYMx5_AceQAAAoQ"]
[Mon Feb 09 08:05:26.043357 2026] [:error] [pid 60678:tid 60780] [client 20.69.252.116:24026] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/halo.php"] [unique_id "aYkkxu8Gd_fDFrcNu4MujAAAAxM"]
[Mon Feb 09 08:05:26.518273 2026] [:error] [pid 60676:tid 60701] [client 20.69.252.116:24174] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aYkkxnhKcn7mJYMx5_AcegAAApE"]
[Mon Feb 09 08:05:26.941410 2026] [:error] [pid 60678:tid 60760] [client 20.69.252.116:24087] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aYkkxu8Gd_fDFrcNu4MujQAAAww"]
[Mon Feb 09 08:05:27.395826 2026] [:error] [pid 47938:tid 47992] [client 20.69.252.116:24255] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aYkkx7VCzWE6fQJEkNJOzQAAAE0"]
[Mon Feb 09 08:05:27.830511 2026] [:error] [pid 18303:tid 18326] [client 20.69.252.116:24081] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aYkkx0Y7TEaZkFrGG4kU9AAAARU"]
[Mon Feb 09 08:05:28.249297 2026] [:error] [pid 60589:tid 60596] [client 20.69.252.116:24096] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aYkkyDIJyhPWC0JyMLzYbwAAAcU"]
[Mon Feb 09 08:05:28.710504 2026] [:error] [pid 60678:tid 60755] [client 20.69.252.116:24098] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aYkkyO8Gd_fDFrcNu4MujgAAAws"]
[Mon Feb 09 08:05:29.149676 2026] [:error] [pid 60679:tid 60730] [client 20.69.252.116:24180] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aYkkycixhoT1e6Iv6g9YAAAAA0E"]
[Mon Feb 09 08:05:29.563529 2026] [:error] [pid 60678:tid 60767] [client 20.69.252.116:24176] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aYkkye8Gd_fDFrcNu4MukAAAAw8"]
[Mon Feb 09 08:05:29.976301 2026] [:error] [pid 60589:tid 60605] [client 20.69.252.116:24008] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkkyTIJyhPWC0JyMLzYcQAAAc4"]
[Mon Feb 09 08:05:30.400305 2026] [:error] [pid 60508:tid 60529] [client 20.69.252.116:24168] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkkyuXDvLC4ADfnEzMmmgAAAZM"]
[Mon Feb 09 08:05:30.831807 2026] [:error] [pid 60677:tid 60716] [client 20.69.252.116:24079] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkkylyBgzfmDf6GaevAUAAAAsU"]
[Mon Feb 09 08:05:31.286808 2026] [:error] [pid 18303:tid 18328] [client 20.69.252.116:24291] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYkky0Y7TEaZkFrGG4kU-AAAARc"]
[Mon Feb 09 08:05:31.708529 2026] [:error] [pid 47937:tid 47946] [client 20.69.252.116:24240] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dapa.php"] [unique_id "aYkky84Fd42MP2DhNrVSTQAAAAA"]
[Mon Feb 09 08:05:32.158720 2026] [:error] [pid 60678:tid 60744] [client 20.69.252.116:24560] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dapa.php"] [unique_id "aYkkzO8Gd_fDFrcNu4MulwAAAwY"]
[Mon Feb 09 08:05:32.570440 2026] [:error] [pid 60678:tid 60745] [client 20.69.252.116:24084] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dapa.php"] [unique_id "aYkkzO8Gd_fDFrcNu4MumAAAAwc"]
[Mon Feb 09 08:05:32.991441 2026] [:error] [pid 60677:tid 60725] [client 20.69.252.116:24104] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dapa.php"] [unique_id "aYkkzFyBgzfmDf6GaevAUQAAAss"]
[Mon Feb 09 08:47:27.601573 2026] [:error] [pid 60589:tid 60604] [client 43.157.150.69:33474] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYkunzIJyhPWC0JyMLzn3AAAAc0"]
[Mon Feb 09 08:59:12.185470 2026] [:error] [pid 18303:tid 18312] [client 43.166.224.244:42092] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYkxYEY7TEaZkFrGG4kicQAAAQc"]
[Mon Feb 09 09:47:58.140627 2026] [:error] [pid 18303:tid 18323] [client 103.236.192.226:58628] [client 103.236.192.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.236.192.226, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYk8zkY7TEaZkFrGG4ktHgAAARI"]
[Mon Feb 09 09:47:58.148681 2026] [:error] [pid 18303:tid 18323] [client 103.236.192.226:58628] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 09 10:41:46.832013 2026] [:error] [pid 60677:tid 60753] [client 109.123.251.96:39566] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYlJalyBgzfmDf6Gaev2HwAAAtE"]
[Mon Feb 09 10:41:49.472368 2026] [:error] [pid 18303:tid 18318] [client 109.123.251.96:35516] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYlJbUY7TEaZkFrGG4k22QAAAQ0"]
[Mon Feb 09 10:41:52.186335 2026] [:error] [pid 60677:tid 60722] [client 109.123.251.96:35532] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYlJcFyBgzfmDf6Gaev2JAAAAso"]
[Mon Feb 09 10:41:55.863643 2026] [:error] [pid 60679:tid 60781] [client 109.123.251.96:46158] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYlJc8ixhoT1e6Iv6g96FQAAA1c"]
[Mon Feb 09 10:41:58.246146 2026] [:error] [pid 60619:tid 60664] [client 109.123.251.96:46162] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYlJdnEpg0UoeR8kJ-2wIwAAAk4"]
[Mon Feb 09 10:42:00.647365 2026] [:error] [pid 18303:tid 18311] [client 109.123.251.96:46168] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYlJeEY7TEaZkFrGG4k23wAAAQY"]
[Mon Feb 09 10:42:03.511274 2026] [:error] [pid 47937:tid 47966] [client 109.123.251.96:46172] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYlJe84Fd42MP2DhNrV5tQAAABQ"]
[Mon Feb 09 10:42:05.845445 2026] [:error] [pid 47937:tid 47963] [client 109.123.251.96:40900] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYlJfc4Fd42MP2DhNrV5ugAAABE"]
[Mon Feb 09 10:42:08.390223 2026] [:error] [pid 60619:tid 60640] [client 109.123.251.96:40912] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYlJgHEpg0UoeR8kJ-2wMAAAAkA"]
[Mon Feb 09 10:42:12.052393 2026] [:error] [pid 60677:tid 60739] [client 109.123.251.96:40914] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYlJhFyBgzfmDf6Gaev2NgAAAs4"]
[Mon Feb 09 10:42:16.465078 2026] [:error] [pid 47938:tid 47993] [client 109.123.251.96:40922] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYlJiLVCzWE6fQJEkNKAigAAAE4"]
[Mon Feb 09 10:42:18.752779 2026] [:error] [pid 18303:tid 18329] [client 109.123.251.96:40274] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYlJikY7TEaZkFrGG4k26QAAARg"]
[Mon Feb 09 10:42:21.365353 2026] [:error] [pid 47938:tid 47980] [client 109.123.251.96:40286] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYlJjbVCzWE6fQJEkNKAkAAAAEE"]
[Mon Feb 09 10:42:23.684823 2026] [:error] [pid 60619:tid 60641] [client 109.123.251.96:40296] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYlJj3Epg0UoeR8kJ-2wSwAAAkE"]
[Mon Feb 09 10:42:26.378162 2026] [:error] [pid 60677:tid 60758] [client 109.123.251.96:51646] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYlJklyBgzfmDf6Gaev2SgAAAtM"]
[Mon Feb 09 10:42:28.686686 2026] [:error] [pid 60678:tid 60785] [client 109.123.251.96:51654] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYlJlO8Gd_fDFrcNu4NN_AAAAxU"]
[Mon Feb 09 10:42:30.834961 2026] [:error] [pid 47937:tid 47958] [client 109.123.251.96:51656] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYlJls4Fd42MP2DhNrV5yQAAAAw"]
[Mon Feb 09 10:42:33.049001 2026] [:error] [pid 60677:tid 60770] [client 109.123.251.96:51662] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYlJmVyBgzfmDf6Gaev2aQAAAtU"]
[Mon Feb 09 10:42:35.215897 2026] [:error] [pid 18303:tid 18321] [client 109.123.251.96:51670] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYlJm0Y7TEaZkFrGG4k28QAAARA"]
[Mon Feb 09 10:42:37.538525 2026] [:error] [pid 60679:tid 60738] [client 109.123.251.96:53204] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYlJncixhoT1e6Iv6g96PgAAA0Y"]
[Mon Feb 09 10:42:39.625033 2026] [:error] [pid 60508:tid 60519] [client 109.123.251.96:53216] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYlJn-XDvLC4ADfnEzNTNQAAAYk"]
[Mon Feb 09 10:42:41.856811 2026] [:error] [pid 18303:tid 18309] [client 109.123.251.96:53218] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYlJoUY7TEaZkFrGG4k29AAAAQQ"]
[Mon Feb 09 10:43:05.649484 2026] [:error] [pid 60676:tid 60694] [client 109.123.251.96:53228] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYlJuXhKcn7mJYMx5_A9uwAAAoo"]
[Mon Feb 09 10:43:07.796507 2026] [:error] [pid 60677:tid 60762] [client 109.123.251.96:41750] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYlJu1yBgzfmDf6Gaev2qAAAAtQ"]
[Mon Feb 09 10:43:09.822824 2026] [:error] [pid 47938:tid 47997] [client 109.123.251.96:41760] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYlJvbVCzWE6fQJEkNKA1wAAAFI"]
[Mon Feb 09 10:43:12.107731 2026] [:error] [pid 60589:tid 60603] [client 109.123.251.96:41762] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYlJwDIJyhPWC0JyMLwHRQAAAcw"]
[Mon Feb 09 10:43:14.336613 2026] [:error] [pid 60676:tid 60690] [client 109.123.251.96:41772] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYlJwnhKcn7mJYMx5_A9vwAAAoY"]
[Mon Feb 09 10:43:16.524201 2026] [:error] [pid 18303:tid 18306] [client 109.123.251.96:49050] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYlJxEY7TEaZkFrGG4k3QQAAAQE"]
[Mon Feb 09 10:43:19.594759 2026] [:error] [pid 18303:tid 18307] [client 109.123.251.96:49054] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYlJx0Y7TEaZkFrGG4k3QgAAAQI"]
[Mon Feb 09 10:43:22.854146 2026] [:error] [pid 47938:tid 47981] [client 109.123.251.96:49064] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYlJyrVCzWE6fQJEkNKA6wAAAEI"]
[Mon Feb 09 10:43:25.011189 2026] [:error] [pid 60676:tid 60695] [client 109.123.251.96:49076] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYlJzXhKcn7mJYMx5_A9zAAAAos"]
[Mon Feb 09 10:43:27.128131 2026] [:error] [pid 47937:tid 47960] [client 109.123.251.96:34368] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYlJz84Fd42MP2DhNrV59AAAAA4"]
[Mon Feb 09 10:43:29.255678 2026] [:error] [pid 60589:tid 60595] [client 109.123.251.96:34376] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYlJ0TIJyhPWC0JyMLwHXgAAAcQ"]
[Mon Feb 09 10:43:31.357565 2026] [:error] [pid 60678:tid 60783] [client 109.123.251.96:34384] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYlJ0-8Gd_fDFrcNu4NONgAAAxQ"]
[Mon Feb 09 10:43:34.234726 2026] [:error] [pid 60678:tid 60726] [client 109.123.251.96:34398] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYlJ1u8Gd_fDFrcNu4NOOgAAAwI"]
[Mon Feb 09 10:43:35.779766 2026] [:error] [pid 60679:tid 60775] [client 109.123.251.96:57904] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYlJ18ixhoT1e6Iv6g96YQAAA1U"]
[Mon Feb 09 10:43:39.699708 2026] [:error] [pid 60508:tid 60523] [client 109.123.251.96:57910] [client 109.123.251.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYlJ2-XDvLC4ADfnEzNTagAAAY0"]
[Mon Feb 09 12:35:41.832264 2026] [:error] [pid 18303:tid 18319] [client 147.135.252.179:41020] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYlkHUY7TEaZkFrGG4lLKAAAAQ4"]
[Mon Feb 09 12:35:43.920201 2026] [:error] [pid 60508:tid 60531] [client 147.135.252.179:37706] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYlkH-XDvLC4ADfnEzNr9AAAAZU"]
[Mon Feb 09 12:35:46.012170 2026] [:error] [pid 18303:tid 18314] [client 147.135.252.179:37720] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYlkIkY7TEaZkFrGG4lLLgAAAQk"]
[Mon Feb 09 12:35:48.065203 2026] [:error] [pid 60679:tid 60748] [client 147.135.252.179:37732] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYlkJMixhoT1e6Iv6g-QAwAAA0o"]
[Mon Feb 09 12:35:50.040279 2026] [:error] [pid 60678:tid 60783] [client 147.135.252.179:57052] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYlkJu8Gd_fDFrcNu4NhjgAAAxQ"]
[Mon Feb 09 12:35:52.348849 2026] [:error] [pid 60589:tid 60614] [client 147.135.252.179:57060] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYlkKDIJyhPWC0JyMLwh1wAAAdc"]
[Mon Feb 09 12:35:54.480718 2026] [:error] [pid 60589:tid 60600] [client 147.135.252.179:57064] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYlkKjIJyhPWC0JyMLwh2QAAAck"]
[Mon Feb 09 12:35:56.532873 2026] [:error] [pid 60589:tid 60613] [client 147.135.252.179:57066] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYlkLDIJyhPWC0JyMLwh3wAAAdY"]
[Mon Feb 09 12:35:58.507667 2026] [:error] [pid 60508:tid 60522] [client 147.135.252.179:41940] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYlkLuXDvLC4ADfnEzNsDQAAAYw"]
[Mon Feb 09 12:36:00.507335 2026] [:error] [pid 60619:tid 60666] [client 147.135.252.179:41952] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYlkMHEpg0UoeR8kJ-3N3QAAAlA"]
[Mon Feb 09 12:36:02.459652 2026] [:error] [pid 60676:tid 60696] [client 147.135.252.179:41966] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYlkMnhKcn7mJYMx5_BSdAAAAow"]
[Mon Feb 09 12:36:04.588584 2026] [:error] [pid 60676:tid 60689] [client 147.135.252.179:41976] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYlkNHhKcn7mJYMx5_BSeAAAAoU"]
[Mon Feb 09 12:36:06.595778 2026] [:error] [pid 47937:tid 47951] [client 147.135.252.179:41978] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYlkNs4Fd42MP2DhNrWRxQAAAAU"]
[Mon Feb 09 12:36:08.540609 2026] [:error] [pid 60677:tid 60753] [client 147.135.252.179:60548] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYlkOFyBgzfmDf6GaeskdgAAAtE"]
[Mon Feb 09 12:36:10.622110 2026] [:error] [pid 47938:tid 47997] [client 147.135.252.179:60552] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYlkOrVCzWE6fQJEkNKjZAAAAFI"]
[Mon Feb 09 12:36:12.699944 2026] [:error] [pid 60678:tid 60755] [client 147.135.252.179:60556] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYlkPO8Gd_fDFrcNu4NhnAAAAws"]
[Mon Feb 09 12:36:14.738661 2026] [:error] [pid 47938:tid 47991] [client 147.135.252.179:60572] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYlkPrVCzWE6fQJEkNKjbAAAAEw"]
[Mon Feb 09 12:36:16.748487 2026] [:error] [pid 60677:tid 60776] [client 147.135.252.179:60578] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYlkQFyBgzfmDf6GaeskjgAAAtc"]
[Mon Feb 09 12:36:18.739300 2026] [:error] [pid 60619:tid 60645] [client 147.135.252.179:49172] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYlkQnEpg0UoeR8kJ-3N7gAAAkQ"]
[Mon Feb 09 12:36:20.731946 2026] [:error] [pid 47938:tid 48003] [client 147.135.252.179:49184] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYlkRLVCzWE6fQJEkNKjegAAAFg"]
[Mon Feb 09 12:36:22.878470 2026] [:error] [pid 60677:tid 60716] [client 147.135.252.179:49192] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYlkRlyBgzfmDf6GaeskvAAAAsU"]
[Mon Feb 09 12:36:24.832939 2026] [:error] [pid 47938:tid 47992] [client 147.135.252.179:49208] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYlkSLVCzWE6fQJEkNKjkQAAAE0"]
[Mon Feb 09 12:36:26.782741 2026] [:error] [pid 60677:tid 60717] [client 147.135.252.179:49210] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYlkSlyBgzfmDf6GaeskzAAAAsY"]
[Mon Feb 09 12:36:28.785786 2026] [:error] [pid 18303:tid 18311] [client 147.135.252.179:49276] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYlkTEY7TEaZkFrGG4lLWQAAAQY"]
[Mon Feb 09 12:36:30.725359 2026] [:error] [pid 60679:tid 60735] [client 147.135.252.179:49280] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYlkTsixhoT1e6Iv6g-QJQAAA0U"]
[Mon Feb 09 12:36:32.650222 2026] [:error] [pid 60589:tid 60602] [client 147.135.252.179:49294] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYlkUDIJyhPWC0JyMLwiEwAAAcs"]
[Mon Feb 09 12:36:34.603290 2026] [:error] [pid 60589:tid 60610] [client 147.135.252.179:49296] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYlkUjIJyhPWC0JyMLwiFwAAAdM"]
[Mon Feb 09 12:36:36.566766 2026] [:error] [pid 60677:tid 60717] [client 147.135.252.179:49304] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYlkVFyBgzfmDf6Gaesk2QAAAsY"]
[Mon Feb 09 12:36:38.521090 2026] [:error] [pid 60589:tid 60606] [client 147.135.252.179:39736] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYlkVjIJyhPWC0JyMLwiHAAAAc8"]
[Mon Feb 09 12:36:58.816079 2026] [:error] [pid 60679:tid 60748] [client 147.135.252.179:39738] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYlkasixhoT1e6Iv6g-QPwAAA0o"]
[Mon Feb 09 12:37:00.684599 2026] [:error] [pid 18303:tid 18318] [client 147.135.252.179:40954] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYlkbEY7TEaZkFrGG4lLcAAAAQ0"]
[Mon Feb 09 12:37:02.674450 2026] [:error] [pid 60676:tid 60685] [client 147.135.252.179:40966] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYlkbnhKcn7mJYMx5_BSqwAAAoE"]
[Mon Feb 09 12:37:07.230820 2026] [:error] [pid 47938:tid 47994] [client 147.135.252.179:40968] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYlkc7VCzWE6fQJEkNKjxAAAAE8"]
[Mon Feb 09 12:37:09.203938 2026] [:error] [pid 60677:tid 60718] [client 147.135.252.179:53644] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYlkdVyBgzfmDf6GaeslEQAAAsc"]
[Mon Feb 09 12:37:11.173184 2026] [:error] [pid 60676:tid 60686] [client 147.135.252.179:53648] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYlkd3hKcn7mJYMx5_BStwAAAoI"]
[Mon Feb 09 12:37:13.174195 2026] [:error] [pid 60679:tid 60779] [client 147.135.252.179:53658] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYlkecixhoT1e6Iv6g-QQwAAA1Y"]
[Mon Feb 09 12:37:15.145073 2026] [:error] [pid 47937:tid 47953] [client 147.135.252.179:53662] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYlke84Fd42MP2DhNrWSAgAAAAc"]
[Mon Feb 09 12:37:17.091645 2026] [:error] [pid 47938:tid 47983] [client 147.135.252.179:53674] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYlkfbVCzWE6fQJEkNKjzwAAAEQ"]
[Mon Feb 09 12:37:19.100360 2026] [:error] [pid 47938:tid 47998] [client 147.135.252.179:57936] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYlkf7VCzWE6fQJEkNKj0QAAAFM"]
[Mon Feb 09 12:37:21.062942 2026] [:error] [pid 47938:tid 47989] [client 147.135.252.179:57938] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYlkgbVCzWE6fQJEkNKj2wAAAEo"]
[Mon Feb 09 12:37:22.997723 2026] [:error] [pid 60676:tid 60692] [client 147.135.252.179:57954] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYlkgnhKcn7mJYMx5_BSxQAAAog"]
[Mon Feb 09 12:37:25.049713 2026] [:error] [pid 18303:tid 18322] [client 147.135.252.179:57958] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYlkhUY7TEaZkFrGG4lLdwAAARE"]
[Mon Feb 09 12:37:27.027002 2026] [:error] [pid 47938:tid 47980] [client 147.135.252.179:57960] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYlkh7VCzWE6fQJEkNKj4wAAAEE"]
[Mon Feb 09 12:37:28.926608 2026] [:error] [pid 60679:tid 60750] [client 147.135.252.179:43936] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYlkiMixhoT1e6Iv6g-QVgAAA0s"]
[Mon Feb 09 12:37:30.880628 2026] [:error] [pid 60678:tid 60755] [client 147.135.252.179:43948] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYlkiu8Gd_fDFrcNu4NhzgAAAws"]
[Mon Feb 09 12:37:33.007769 2026] [:error] [pid 60508:tid 60533] [client 147.135.252.179:43956] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYlkjeXDvLC4ADfnEzNsWAAAAZc"]
[Mon Feb 09 12:37:35.107454 2026] [:error] [pid 60676:tid 60688] [client 147.135.252.179:43966] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYlkj3hKcn7mJYMx5_BS0QAAAoQ"]
[Mon Feb 09 12:37:37.388375 2026] [:error] [pid 60679:tid 60728] [client 147.135.252.179:43974] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYlkkcixhoT1e6Iv6g-QZwAAA0A"]
[Mon Feb 09 12:37:41.335276 2026] [:error] [pid 60677:tid 60716] [client 147.135.252.179:34604] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYlklVyBgzfmDf6GaeslQQAAAsU"]
[Mon Feb 09 16:24:16.059516 2026] [:error] [pid 47937:tid 47949] [client 43.156.202.34:59170] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYmZsM4Fd42MP2DhNrXBVAAAAAM"]
[Mon Feb 09 23:11:52.961905 2026] [:error] [pid 60676:tid 60684] [client 170.106.11.141:46914] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYn5OHhKcn7mJYMx5_C80gAAAoA"]
[Tue Feb 10 01:01:33.647616 2026] [:error] [pid 34139:tid 34160] [client 182.44.12.37:54523] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYoS7egedr85OdF4Mt3j0AAAAJE"]
[Tue Feb 10 01:29:03.546141 2026] [:error] [pid 34044:tid 34062] [client 104.28.160.81:18425] [client 104.28.160.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aYoZX3Kt48XODNt-cM95fwAAAA4"]
[Tue Feb 10 01:48:54.248831 2026] [:error] [pid 34046:tid 34114] [client 167.86.83.231:55562] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aYoeBnP7l4DEEA1DQG_TzAAAAQs"], referer: binance.com
[Tue Feb 10 04:22:39.153910 2026] [:error] [pid 47937:tid 47940] [client 37.187.27.125:34084] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYpCD8pqXpC2CvJ3fONpdwAAAME"]
[Tue Feb 10 04:22:42.265293 2026] [:error] [pid 47831:tid 47894] [client 37.187.27.125:42022] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYpCEidxbZYarWVkiAAcWwAAAFU"]
[Tue Feb 10 04:22:44.988358 2026] [:error] [pid 47830:tid 47869] [client 37.187.27.125:42648] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYpCFEco45BZs8e301AU4wAAABc"]
[Tue Feb 10 04:22:48.202956 2026] [:error] [pid 47831:tid 47881] [client 37.187.27.125:43352] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYpCGCdxbZYarWVkiAAcaQAAAEg"]
[Tue Feb 10 04:22:52.124600 2026] [:error] [pid 47831:tid 47888] [client 37.187.27.125:44480] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYpCHCdxbZYarWVkiAAccAAAAE8"]
[Tue Feb 10 04:22:55.899807 2026] [:error] [pid 47831:tid 47892] [client 37.187.27.125:45422] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYpCHydxbZYarWVkiAAcfgAAAFM"]
[Tue Feb 10 04:22:59.978670 2026] [:error] [pid 47830:tid 47866] [client 37.187.27.125:46398] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYpCI0co45BZs8e301AU-AAAABQ"]
[Tue Feb 10 04:23:04.034821 2026] [:error] [pid 47830:tid 47868] [client 37.187.27.125:47360] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYpCKEco45BZs8e301AU_AAAABY"]
[Tue Feb 10 04:23:07.882100 2026] [:error] [pid 47830:tid 47870] [client 37.187.27.125:48098] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYpCK0co45BZs8e301AVAgAAABg"]
[Tue Feb 10 04:23:10.534466 2026] [:error] [pid 47837:tid 47913] [client 37.187.27.125:48692] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYpCLnFY8KYFPX79Z4nBfgAAAI0"]
[Tue Feb 10 04:23:15.327783 2026] [:error] [pid 47937:tid 47954] [client 37.187.27.125:50050] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYpCM8pqXpC2CvJ3fONqCwAAAM8"]
[Tue Feb 10 04:23:18.900957 2026] [:error] [pid 47837:tid 47919] [client 37.187.27.125:50796] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYpCNnFY8KYFPX79Z4nBhgAAAJM"]
[Tue Feb 10 04:23:24.053679 2026] [:error] [pid 47837:tid 47904] [client 37.187.27.125:51988] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYpCPHFY8KYFPX79Z4nBjQAAAIQ"]
[Tue Feb 10 04:23:27.760400 2026] [:error] [pid 47831:tid 47884] [client 37.187.27.125:52760] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYpCPydxbZYarWVkiAAczAAAAEs"]
[Tue Feb 10 04:23:31.243998 2026] [:error] [pid 47937:tid 47959] [client 37.187.27.125:53650] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYpCQ8pqXpC2CvJ3fONqNwAAANQ"]
[Tue Feb 10 04:24:19.571128 2026] [:error] [pid 47937:tid 47951] [client 37.187.27.125:54702] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYpCc8pqXpC2CvJ3fONqyAAAAMw"]
[Tue Feb 10 04:24:23.260311 2026] [:error] [pid 47837:tid 47912] [client 37.187.27.125:36432] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYpCd3FY8KYFPX79Z4nCBgAAAIw"]
[Tue Feb 10 04:24:27.596524 2026] [:error] [pid 47837:tid 47911] [client 37.187.27.125:37302] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYpCe3FY8KYFPX79Z4nCEQAAAIs"]
[Tue Feb 10 04:24:30.923388 2026] [:error] [pid 47831:tid 47880] [client 37.187.27.125:37966] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYpCfidxbZYarWVkiAAdRgAAAEc"]
[Tue Feb 10 04:24:35.031736 2026] [:error] [pid 47830:tid 47860] [client 37.187.27.125:38632] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYpCg0co45BZs8e301AVhAAAAA4"]
[Tue Feb 10 04:24:37.907400 2026] [:error] [pid 47837:tid 47922] [client 37.187.27.125:39360] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYpChXFY8KYFPX79Z4nCHgAAAJY"]
[Tue Feb 10 04:24:43.176438 2026] [:error] [pid 47831:tid 47893] [client 37.187.27.125:40614] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYpCiydxbZYarWVkiAAdXwAAAFQ"]
[Tue Feb 10 04:24:46.405462 2026] [:error] [pid 47937:tid 47947] [client 37.187.27.125:41376] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYpCjspqXpC2CvJ3fONq-QAAAMg"]
[Tue Feb 10 04:24:50.235398 2026] [:error] [pid 47830:tid 47870] [client 37.187.27.125:42142] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYpCkkco45BZs8e301AVmgAAABg"]
[Tue Feb 10 04:24:59.535472 2026] [:error] [pid 47831:tid 47891] [client 37.187.27.125:43962] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYpCmydxbZYarWVkiAAdgQAAAFI"]
[Tue Feb 10 04:25:03.502950 2026] [:error] [pid 47937:tid 47949] [client 37.187.27.125:44896] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYpCn8pqXpC2CvJ3fONrDgAAAMo"]
[Tue Feb 10 04:25:06.382372 2026] [:error] [pid 47831:tid 47894] [client 37.187.27.125:45412] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYpCoidxbZYarWVkiAAdoAAAAFU"]
[Tue Feb 10 04:25:09.782949 2026] [:error] [pid 47937:tid 47950] [client 37.187.27.125:46066] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYpCpcpqXpC2CvJ3fONrNgAAAMs"]
[Tue Feb 10 04:25:13.258983 2026] [:error] [pid 47837:tid 47922] [client 37.187.27.125:46812] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYpCqXFY8KYFPX79Z4nCYwAAAJY"]
[Tue Feb 10 04:26:03.716526 2026] [:error] [pid 47837:tid 47908] [client 37.187.27.125:56684] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aYpC23FY8KYFPX79Z4nCzAAAAIg"]
[Tue Feb 10 04:26:07.065933 2026] [:error] [pid 47837:tid 47919] [client 37.187.27.125:57930] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYpC33FY8KYFPX79Z4nC1QAAAJM"]
[Tue Feb 10 04:26:10.699703 2026] [:error] [pid 47831:tid 47882] [client 37.187.27.125:58614] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aYpC4idxbZYarWVkiAAeBgAAAEk"]
[Tue Feb 10 04:26:14.320444 2026] [:error] [pid 47837:tid 47913] [client 37.187.27.125:59366] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aYpC5nFY8KYFPX79Z4nC3wAAAI0"]
[Tue Feb 10 04:26:19.889142 2026] [:error] [pid 47830:tid 47859] [client 37.187.27.125:60348] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYpC60co45BZs8e301AWJQAAAA0"]
[Tue Feb 10 04:26:23.567210 2026] [:error] [pid 47937:tid 47952] [client 37.187.27.125:32882] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aYpC78pqXpC2CvJ3fONsMgAAAM0"]
[Tue Feb 10 04:26:25.771699 2026] [:error] [pid 47937:tid 47949] [client 37.187.27.125:33272] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aYpC8cpqXpC2CvJ3fONsRwAAAMo"]
[Tue Feb 10 04:26:29.610189 2026] [:error] [pid 47837:tid 47901] [client 37.187.27.125:34000] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYpC9XFY8KYFPX79Z4nDEgAAAIE"]
[Tue Feb 10 04:26:34.179001 2026] [:error] [pid 47837:tid 47906] [client 37.187.27.125:34896] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYpC-nFY8KYFPX79Z4nDGQAAAIY"]
[Tue Feb 10 04:26:37.043567 2026] [:error] [pid 47831:tid 47889] [client 37.187.27.125:35330] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYpC_SdxbZYarWVkiAAeRgAAAFA"]
[Tue Feb 10 04:26:40.519923 2026] [:error] [pid 47831:tid 47878] [client 37.187.27.125:35846] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYpDACdxbZYarWVkiAAeTgAAAEU"]
[Tue Feb 10 04:26:44.017158 2026] [:error] [pid 47831:tid 47894] [client 37.187.27.125:36538] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYpDBCdxbZYarWVkiAAeUQAAAFU"]
[Tue Feb 10 04:26:47.766812 2026] [:error] [pid 47831:tid 47897] [client 37.187.27.125:37280] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYpDBydxbZYarWVkiAAeWwAAAFg"]
[Tue Feb 10 04:26:51.419291 2026] [:error] [pid 47937:tid 47944] [client 37.187.27.125:37960] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYpDC8pqXpC2CvJ3fONsfwAAAMU"]
[Tue Feb 10 04:26:54.758515 2026] [:error] [pid 47830:tid 47847] [client 37.187.27.125:38444] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYpDDkco45BZs8e301AWYwAAAAE"]
[Tue Feb 10 04:26:59.040746 2026] [:error] [pid 47937:tid 47939] [client 37.187.27.125:39098] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYpDE8pqXpC2CvJ3fONsmwAAAMA"]
[Tue Feb 10 04:27:41.727615 2026] [:error] [pid 47830:tid 47845] [client 37.187.27.125:39584] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYpDPUco45BZs8e301AWsgAAAAA"]
[Tue Feb 10 04:27:44.566170 2026] [:error] [pid 47937:tid 47958] [client 37.187.27.125:46342] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYpDQMpqXpC2CvJ3fONtEwAAANM"]
[Tue Feb 10 04:27:49.315896 2026] [:error] [pid 47830:tid 47849] [client 37.187.27.125:47106] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYpDRUco45BZs8e301AWygAAAAM"]
[Tue Feb 10 04:27:51.979155 2026] [:error] [pid 47937:tid 47947] [client 37.187.27.125:47454] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYpDR8pqXpC2CvJ3fONtIgAAAMg"]
[Tue Feb 10 04:27:55.087876 2026] [:error] [pid 47937:tid 47941] [client 37.187.27.125:47888] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYpDS8pqXpC2CvJ3fONtLQAAAMI"]
[Tue Feb 10 04:27:57.629318 2026] [:error] [pid 47937:tid 47941] [client 37.187.27.125:48286] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYpDTcpqXpC2CvJ3fONtOAAAAMI"]
[Tue Feb 10 04:28:01.232193 2026] [:error] [pid 47837:tid 47914] [client 37.187.27.125:48808] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYpDUXFY8KYFPX79Z4nDoQAAAI4"]
[Tue Feb 10 04:28:04.460435 2026] [:error] [pid 47831:tid 47876] [client 37.187.27.125:49346] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYpDVCdxbZYarWVkiAAe3gAAAEM"]
[Tue Feb 10 04:28:07.742005 2026] [:error] [pid 47937:tid 47947] [client 37.187.27.125:49942] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYpDV8pqXpC2CvJ3fONtTAAAAMg"]
[Tue Feb 10 04:28:11.639384 2026] [:error] [pid 47837:tid 47914] [client 37.187.27.125:50578] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYpDW3FY8KYFPX79Z4nDuAAAAI4"]
[Tue Feb 10 04:28:13.983944 2026] [:error] [pid 47830:tid 47849] [client 37.187.27.125:50964] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYpDXUco45BZs8e301AW_AAAAAM"]
[Tue Feb 10 04:28:17.051856 2026] [:error] [pid 47837:tid 47921] [client 37.187.27.125:51466] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYpDYXFY8KYFPX79Z4nDvgAAAJU"]
[Tue Feb 10 04:28:20.169207 2026] [:error] [pid 47837:tid 47915] [client 37.187.27.125:51884] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYpDZHFY8KYFPX79Z4nDxwAAAI8"]
[Tue Feb 10 04:28:23.841941 2026] [:error] [pid 47831:tid 47876] [client 37.187.27.125:52446] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYpDZydxbZYarWVkiAAfGwAAAEM"]
[Tue Feb 10 04:28:27.043561 2026] [:error] [pid 47937:tid 47939] [client 37.187.27.125:53158] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYpDa8pqXpC2CvJ3fONtkwAAAMA"]
[Tue Feb 10 04:28:29.503363 2026] [:error] [pid 47937:tid 47943] [client 37.187.27.125:53544] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYpDbcpqXpC2CvJ3fONtmAAAAMQ"]
[Tue Feb 10 04:28:32.982205 2026] [:error] [pid 47837:tid 47915] [client 37.187.27.125:54194] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYpDcHFY8KYFPX79Z4nEBQAAAI8"]
[Tue Feb 10 04:28:36.078831 2026] [:error] [pid 47837:tid 47916] [client 37.187.27.125:54698] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYpDdHFY8KYFPX79Z4nECwAAAJA"]
[Tue Feb 10 04:29:12.670723 2026] [:error] [pid 47830:tid 47850] [client 37.187.27.125:55128] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aYpDmEco45BZs8e301AXggAAAAQ"]
[Tue Feb 10 04:29:16.381924 2026] [:error] [pid 47837:tid 47900] [client 37.187.27.125:60906] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aYpDnHFY8KYFPX79Z4nESwAAAIA"]
[Tue Feb 10 04:29:19.350246 2026] [:error] [pid 47937:tid 47948] [client 37.187.27.125:33144] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aYpDn8pqXpC2CvJ3fONuBwAAAMk"]
[Tue Feb 10 04:29:22.343754 2026] [:error] [pid 47837:tid 47922] [client 37.187.27.125:33564] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aYpDonFY8KYFPX79Z4nEVwAAAJY"]
[Tue Feb 10 04:29:24.615695 2026] [:error] [pid 47837:tid 47921] [client 37.187.27.125:33786] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aYpDpHFY8KYFPX79Z4nEWgAAAJU"]
[Tue Feb 10 04:29:27.715077 2026] [:error] [pid 47831:tid 47887] [client 37.187.27.125:34222] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aYpDpydxbZYarWVkiAAftQAAAE4"]
[Tue Feb 10 04:29:31.028362 2026] [:error] [pid 47837:tid 47903] [client 37.187.27.125:34682] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aYpDq3FY8KYFPX79Z4nEYgAAAIM"]
[Tue Feb 10 04:29:33.632967 2026] [:error] [pid 47831:tid 47893] [client 37.187.27.125:35072] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYpDrSdxbZYarWVkiAAfwQAAAFQ"]
[Tue Feb 10 04:29:36.216778 2026] [:error] [pid 47837:tid 47903] [client 37.187.27.125:35456] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYpDsHFY8KYFPX79Z4nEbgAAAIM"]
[Tue Feb 10 04:29:38.759851 2026] [:error] [pid 47837:tid 47911] [client 37.187.27.125:35826] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYpDsnFY8KYFPX79Z4nEdAAAAIs"]
[Tue Feb 10 04:29:41.683964 2026] [:error] [pid 47831:tid 47889] [client 37.187.27.125:36362] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYpDtSdxbZYarWVkiAAfzQAAAFA"]
[Tue Feb 10 04:29:44.654903 2026] [:error] [pid 47831:tid 47883] [client 37.187.27.125:36898] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYpDuCdxbZYarWVkiAAf2wAAAEo"]
[Tue Feb 10 04:29:47.781871 2026] [:error] [pid 47830:tid 47862] [client 37.187.27.125:37398] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYpDu0co45BZs8e301AXuAAAABA"]
[Tue Feb 10 04:29:50.916168 2026] [:error] [pid 47937:tid 47945] [client 37.187.27.125:37942] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYpDvspqXpC2CvJ3fONuTwAAAMY"]
[Tue Feb 10 04:29:54.023937 2026] [:error] [pid 47831:tid 47882] [client 37.187.27.125:38660] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aYpDwidxbZYarWVkiAAf4wAAAEk"]
[Tue Feb 10 04:30:01.048907 2026] [:error] [pid 47937:tid 47954] [client 37.187.27.125:40062] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYpDycpqXpC2CvJ3fONuagAAAM8"]
[Tue Feb 10 04:30:04.079404 2026] [:error] [pid 47831:tid 47884] [client 37.187.27.125:40616] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aYpDzCdxbZYarWVkiAAf-gAAAEs"]
[Tue Feb 10 04:30:06.926970 2026] [:error] [pid 47837:tid 47923] [client 37.187.27.125:41110] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aYpDznFY8KYFPX79Z4nEoAAAAJc"]
[Tue Feb 10 04:30:41.940875 2026] [:error] [pid 47830:tid 47866] [client 37.187.27.125:41566] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYpD8Uco45BZs8e301AYEAAAABQ"]
[Tue Feb 10 04:30:44.621793 2026] [:error] [pid 47937:tid 47958] [client 37.187.27.125:46722] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYpD9MpqXpC2CvJ3fONu3wAAANM"]
[Tue Feb 10 04:30:47.642131 2026] [:error] [pid 47830:tid 47853] [client 37.187.27.125:47120] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYpD90co45BZs8e301AYHgAAAAc"]
[Tue Feb 10 04:30:50.664442 2026] [:error] [pid 47830:tid 47845] [client 37.187.27.125:47512] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYpD-kco45BZs8e301AYLQAAAAA"]
[Tue Feb 10 04:30:53.489410 2026] [:error] [pid 47831:tid 47897] [client 37.187.27.125:47868] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYpD_SdxbZYarWVkiAAgWgAAAFg"]
[Tue Feb 10 04:30:56.731735 2026] [:error] [pid 47837:tid 47905] [client 37.187.27.125:48308] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYpEAHFY8KYFPX79Z4nFDAAAAIU"]
[Tue Feb 10 04:30:59.375448 2026] [:error] [pid 47937:tid 47960] [client 37.187.27.125:48648] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYpEA8pqXpC2CvJ3fONvAwAAANU"]
[Tue Feb 10 04:31:02.145304 2026] [:error] [pid 47830:tid 47845] [client 37.187.27.125:48922] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYpEBkco45BZs8e301AYRQAAAAA"]
[Tue Feb 10 04:31:04.851873 2026] [:error] [pid 47837:tid 47906] [client 37.187.27.125:49316] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYpECHFY8KYFPX79Z4nFHgAAAIY"]
[Tue Feb 10 04:31:07.717039 2026] [:error] [pid 47830:tid 47852] [client 37.187.27.125:49684] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYpEC0co45BZs8e301AYVQAAAAY"]
[Tue Feb 10 04:31:10.866640 2026] [:error] [pid 47831:tid 47885] [client 37.187.27.125:50088] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYpEDidxbZYarWVkiAAgjAAAAEw"]
[Tue Feb 10 04:31:13.735062 2026] [:error] [pid 47830:tid 47852] [client 37.187.27.125:50416] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYpEEUco45BZs8e301AYZAAAAAY"]
[Tue Feb 10 04:31:16.929636 2026] [:error] [pid 47830:tid 47860] [client 37.187.27.125:50870] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYpEFEco45BZs8e301AYbQAAAA4"]
[Tue Feb 10 07:17:02.006048 2026] [:error] [pid 47937:tid 47946] [client 117.33.163.216:60708] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYpq7spqXpC2CvJ3fOO5SwAAAMc"]
[Tue Feb 10 09:35:03.444481 2026] [:error] [pid 47837:tid 47907] [client 51.222.105.197:53560] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqLR3FY8KYFPX79Z4k57QAAAIc"]
[Tue Feb 10 09:35:08.451392 2026] [:error] [pid 30054:tid 30060] [client 51.222.105.197:38266] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYqLTGecgOOXCu-GgYWi5gAAAQQ"]
[Tue Feb 10 09:35:12.924184 2026] [:error] [pid 59407:tid 59413] [client 51.222.105.197:34886] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYqLUGLlhBXE3qmX-JmD-gAAAUQ"]
[Tue Feb 10 12:20:03.197055 2026] [:error] [pid 30054:tid 30069] [client 141.98.10.134:50264] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Feb 10 12:20:10.669129 2026] [:error] [pid 47831:tid 47885] [client 141.98.10.134:50085] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Feb 10 12:58:40.887703 2026] [:error] [pid 30054:tid 30056] [client 94.154.239.69:35388] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYq7AGecgOOXCu-GgYXUDAAAAQA"]
[Tue Feb 10 12:58:42.884160 2026] [:error] [pid 7704:tid 7708] [client 94.154.239.69:51870] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYq7Av0EcqgVBUs6CW20wQAAAcE"]
[Tue Feb 10 12:58:44.924432 2026] [:error] [pid 47837:tid 47918] [client 94.154.239.69:51884] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYq7BHFY8KYFPX79Z4lzngAAAJI"]
[Tue Feb 10 12:58:47.021351 2026] [:error] [pid 47830:tid 47863] [client 94.154.239.69:51894] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYq7B0co45BZs8e301DrmgAAABE"]
[Tue Feb 10 12:58:48.983442 2026] [:error] [pid 59407:tid 59419] [client 94.154.239.69:43528] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYq7CGLlhBXE3qmX-Jm24wAAAUo"]
[Tue Feb 10 12:58:51.146178 2026] [:error] [pid 59407:tid 59425] [client 94.154.239.69:43536] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYq7C2LlhBXE3qmX-Jm3CAAAAVA"]
[Tue Feb 10 12:58:53.033142 2026] [:error] [pid 59544:tid 59556] [client 94.154.239.69:43542] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYq7DaZySR9mFY4BaimItQAAAYg"]
[Tue Feb 10 12:58:54.939309 2026] [:error] [pid 47837:tid 47914] [client 94.154.239.69:43556] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYq7DnFY8KYFPX79Z4lzwgAAAI4"]
[Tue Feb 10 12:58:56.965738 2026] [:error] [pid 47830:tid 47854] [client 94.154.239.69:43558] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYq7EEco45BZs8e301DrvgAAAAg"]
[Tue Feb 10 12:58:58.833440 2026] [:error] [pid 47937:tid 47940] [client 94.154.239.69:33136] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYq7EspqXpC2CvJ3fOMxHgAAAME"]
[Tue Feb 10 12:59:00.725389 2026] [:error] [pid 47837:tid 47923] [client 94.154.239.69:33138] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYq7FHFY8KYFPX79Z4lzxwAAAJc"]
[Tue Feb 10 12:59:02.725513 2026] [:error] [pid 47830:tid 47850] [client 94.154.239.69:33150] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYq7Fkco45BZs8e301DrygAAAAQ"]
[Tue Feb 10 12:59:04.744154 2026] [:error] [pid 47831:tid 47874] [client 94.154.239.69:33152] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYq7GCdxbZYarWVkiADXHQAAAEE"]
[Tue Feb 10 12:59:06.745106 2026] [:error] [pid 47831:tid 47886] [client 94.154.239.69:33166] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYq7GidxbZYarWVkiADXIAAAAE0"]
[Tue Feb 10 12:59:08.627791 2026] [:error] [pid 47937:tid 47950] [client 94.154.239.69:33178] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYq7HMpqXpC2CvJ3fOMxNAAAAMs"]
[Tue Feb 10 12:59:10.676488 2026] [:error] [pid 47837:tid 47909] [client 94.154.239.69:33474] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYq7HnFY8KYFPX79Z4lz1gAAAIk"]
[Tue Feb 10 12:59:12.690400 2026] [:error] [pid 47831:tid 47896] [client 94.154.239.69:33482] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYq7ICdxbZYarWVkiADXKQAAAFc"]
[Tue Feb 10 12:59:14.671003 2026] [:error] [pid 47830:tid 47860] [client 94.154.239.69:33486] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYq7Ikco45BZs8e301Dr2QAAAA4"]
[Tue Feb 10 12:59:16.668218 2026] [:error] [pid 47831:tid 47873] [client 94.154.239.69:33502] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYq7JCdxbZYarWVkiADXMAAAAEA"]
[Tue Feb 10 12:59:18.689424 2026] [:error] [pid 47937:tid 47942] [client 94.154.239.69:33506] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYq7JspqXpC2CvJ3fOMxSQAAAMM"]
[Tue Feb 10 12:59:20.700744 2026] [:error] [pid 47937:tid 47962] [client 94.154.239.69:48316] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYq7KMpqXpC2CvJ3fOMxTQAAANc"]
[Tue Feb 10 12:59:22.679538 2026] [:error] [pid 47830:tid 47857] [client 94.154.239.69:48326] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYq7Kkco45BZs8e301Dr6gAAAAs"]
[Tue Feb 10 12:59:24.632843 2026] [:error] [pid 47837:tid 47918] [client 94.154.239.69:48334] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYq7LHFY8KYFPX79Z4l0EQAAAJI"]
[Tue Feb 10 12:59:26.472675 2026] [:error] [pid 47837:tid 47915] [client 94.154.239.69:48342] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYq7LnFY8KYFPX79Z4l0FAAAAI8"]
[Tue Feb 10 12:59:28.496529 2026] [:error] [pid 47830:tid 47865] [client 94.154.239.69:48348] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aYq7MEco45BZs8e301Dr8QAAABM"]
[Tue Feb 10 12:59:30.492107 2026] [:error] [pid 7704:tid 7723] [client 94.154.239.69:44084] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYq7Mv0EcqgVBUs6CW20_QAAAdA"]
[Tue Feb 10 12:59:32.382260 2026] [:error] [pid 47831:tid 47873] [client 94.154.239.69:44096] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYq7NCdxbZYarWVkiADXVgAAAEA"]
[Tue Feb 10 12:59:34.385563 2026] [:error] [pid 59407:tid 59423] [client 94.154.239.69:44108] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYq7NmLlhBXE3qmX-Jm3QwAAAU4"]
[Tue Feb 10 12:59:36.389138 2026] [:error] [pid 47831:tid 47886] [client 94.154.239.69:44116] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYq7OCdxbZYarWVkiADXXgAAAE0"]
[Tue Feb 10 12:59:38.423837 2026] [:error] [pid 47937:tid 47953] [client 94.154.239.69:44130] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYq7OspqXpC2CvJ3fOMxcAAAAM4"]
[Tue Feb 10 12:59:58.746690 2026] [:error] [pid 47937:tid 47957] [client 94.154.239.69:59092] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYq7TspqXpC2CvJ3fOMxkQAAANI"]
[Tue Feb 10 13:00:00.743270 2026] [:error] [pid 59407:tid 59410] [client 94.154.239.69:35960] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYq7UGLlhBXE3qmX-Jm3bAAAAUE"]
[Tue Feb 10 13:00:02.764892 2026] [:error] [pid 47830:tid 47862] [client 94.154.239.69:35976] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYq7Ukco45BZs8e301DsZwAAABA"]
[Tue Feb 10 13:00:04.712244 2026] [:error] [pid 47837:tid 47917] [client 94.154.239.69:35988] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYq7VHFY8KYFPX79Z4l0PwAAAJE"]
[Tue Feb 10 13:00:06.742043 2026] [:error] [pid 47937:tid 47958] [client 94.154.239.69:36000] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYq7VspqXpC2CvJ3fOMxlwAAANM"]
[Tue Feb 10 13:00:08.746473 2026] [:error] [pid 47937:tid 47951] [client 94.154.239.69:40082] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYq7WMpqXpC2CvJ3fOMxmgAAAMw"]
[Tue Feb 10 13:00:10.762815 2026] [:error] [pid 47830:tid 47851] [client 94.154.239.69:40092] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYq7Wkco45BZs8e301DscgAAAAU"]
[Tue Feb 10 13:00:12.729960 2026] [:error] [pid 59544:tid 59555] [client 94.154.239.69:40098] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYq7XKZySR9mFY4BaimJQwAAAYc"]
[Tue Feb 10 13:00:14.869417 2026] [:error] [pid 59544:tid 59554] [client 94.154.239.69:40114] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYq7XqZySR9mFY4BaimJRgAAAYY"]
[Tue Feb 10 13:00:16.863055 2026] [:error] [pid 47937:tid 47958] [client 94.154.239.69:40124] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYq7YMpqXpC2CvJ3fOMxpQAAANM"]
[Tue Feb 10 13:00:18.863905 2026] [:error] [pid 47837:tid 47911] [client 94.154.239.69:50824] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYq7YnFY8KYFPX79Z4l0UQAAAIs"]
[Tue Feb 10 13:00:20.880877 2026] [:error] [pid 47831:tid 47892] [client 94.154.239.69:50832] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYq7ZCdxbZYarWVkiADXugAAAFM"]
[Tue Feb 10 13:00:22.883505 2026] [:error] [pid 47837:tid 47918] [client 94.154.239.69:50846] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYq7ZnFY8KYFPX79Z4l0YAAAAJI"]
[Tue Feb 10 13:00:24.893672 2026] [:error] [pid 47830:tid 47858] [client 94.154.239.69:50848] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYq7aEco45BZs8e301DskgAAAAw"]
[Tue Feb 10 13:00:26.923781 2026] [:error] [pid 47831:tid 47875] [client 94.154.239.69:50862] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYq7aidxbZYarWVkiADXyQAAAEI"]
[Tue Feb 10 13:00:30.760703 2026] [:error] [pid 47830:tid 47869] [client 94.154.239.69:60256] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYq7bkco45BZs8e301DsrQAAABc"]
[Tue Feb 10 13:20:51.908299 2026] [:error] [pid 47830:tid 47856] [client 94.154.239.69:56710] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYrAM0co45BZs8e301D1ygAAAAo"]
[Tue Feb 10 13:20:53.874914 2026] [:error] [pid 7704:tid 7712] [client 94.154.239.69:42662] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYrANf0EcqgVBUs6CW26VAAAAcU"]
[Tue Feb 10 13:20:55.916375 2026] [:error] [pid 59407:tid 59422] [client 94.154.239.69:42672] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYrAN2LlhBXE3qmX-Jm9xwAAAU0"]
[Tue Feb 10 13:20:57.890845 2026] [:error] [pid 47831:tid 47876] [client 94.154.239.69:35572] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYrAOSdxbZYarWVkiADdGQAAAEM"]
[Tue Feb 10 13:20:59.877523 2026] [:error] [pid 47937:tid 47944] [client 94.154.239.69:35586] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYrAO8pqXpC2CvJ3fOM5NAAAAMU"]
[Tue Feb 10 13:21:01.872751 2026] [:error] [pid 7704:tid 7731] [client 94.154.239.69:35588] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYrAPf0EcqgVBUs6CW26VwAAAdg"]
[Tue Feb 10 13:21:03.910499 2026] [:error] [pid 47831:tid 47878] [client 94.154.239.69:35598] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYrAPydxbZYarWVkiADdIwAAAEU"]
[Tue Feb 10 13:21:05.879919 2026] [:error] [pid 59407:tid 59427] [client 94.154.239.69:35606] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYrAQWLlhBXE3qmX-Jm91QAAAVI"]
[Tue Feb 10 13:21:07.893330 2026] [:error] [pid 59407:tid 59426] [client 94.154.239.69:57818] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYrAQ2LlhBXE3qmX-Jm91wAAAVE"]
[Tue Feb 10 13:21:09.883662 2026] [:error] [pid 47837:tid 47917] [client 94.154.239.69:57832] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYrARXFY8KYFPX79Z4l61QAAAJE"]
[Tue Feb 10 13:21:11.927900 2026] [:error] [pid 47830:tid 47851] [client 94.154.239.69:57848] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYrAR0co45BZs8e301D16AAAAAU"]
[Tue Feb 10 13:21:13.915588 2026] [:error] [pid 47830:tid 47855] [client 94.154.239.69:57858] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYrASUco45BZs8e301D16QAAAAk"]
[Tue Feb 10 13:21:15.894078 2026] [:error] [pid 30054:tid 30078] [client 94.154.239.69:57874] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aYrAS2ecgOOXCu-GgYXZjwAAARY"]
[Tue Feb 10 13:21:17.941059 2026] [:error] [pid 30054:tid 30072] [client 94.154.239.69:45386] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYrATWecgOOXCu-GgYXZkgAAARA"]
[Tue Feb 10 13:21:19.953288 2026] [:error] [pid 30054:tid 30080] [client 94.154.239.69:45400] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aYrAT2ecgOOXCu-GgYXZlwAAARg"]
[Tue Feb 10 13:21:22.062163 2026] [:error] [pid 47830:tid 47860] [client 94.154.239.69:45412] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aYrAUkco45BZs8e301D1-wAAAA4"]
[Tue Feb 10 13:50:26.979731 2026] [:error] [pid 47837:tid 47901] [client 43.166.255.102:42726] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYrHInFY8KYFPX79Z4mEjgAAAIE"]
[Tue Feb 10 18:31:57.721835 2026] [:error] [pid 47837:tid 47908] [client 144.48.121.112:35885] [client 144.48.121.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.121.112, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYsJHXFY8KYFPX79Z4nLcgAAAIg"]
[Tue Feb 10 18:31:57.727632 2026] [:error] [pid 47837:tid 47908] [client 144.48.121.112:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 11 02:58:52.739623 2026] [:error] [pid 46635:tid 46652] [client 43.130.110.130:52676] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYt_7EsK6EAyFtFakLpfiwAAAE8"]
[Wed Feb 11 04:40:01.044748 2026] [:error] [pid 27965:tid 28018] [client 147.135.213.9:53746] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYuXodHLAUAIo8qpZyExWAAAAE8"]
[Wed Feb 11 04:40:02.891502 2026] [:error] [pid 28073:tid 28085] [client 147.135.213.9:34816] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYuXooeHYIlOlF-DsMxtHAAAAMo"]
[Wed Feb 11 04:40:04.738676 2026] [:error] [pid 28073:tid 28078] [client 147.135.213.9:34828] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYuXpIeHYIlOlF-DsMxtJgAAAMM"]
[Wed Feb 11 04:40:06.852580 2026] [:error] [pid 27966:tid 28034] [client 147.135.213.9:59680] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYuXpl8HJ9ydyf0SPu6czwAAAIQ"]
[Wed Feb 11 04:40:08.758991 2026] [:error] [pid 27965:tid 28026] [client 147.135.213.9:59696] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYuXqNHLAUAIo8qpZyExXAAAAFc"]
[Wed Feb 11 04:40:10.781778 2026] [:error] [pid 27964:tid 27986] [client 147.135.213.9:59700] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYuXqsp0XgWYHLcQtEi-AgAAAAs"]
[Wed Feb 11 04:40:12.874741 2026] [:error] [pid 27964:tid 27995] [client 147.135.213.9:59714] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYuXrMp0XgWYHLcQtEi-BgAAABQ"]
[Wed Feb 11 04:40:14.922271 2026] [:error] [pid 27964:tid 27992] [client 147.135.213.9:59720] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYuXrsp0XgWYHLcQtEi-CgAAABE"]
[Wed Feb 11 04:40:16.952961 2026] [:error] [pid 28073:tid 28089] [client 147.135.213.9:60298] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYuXsIeHYIlOlF-DsMxtPQAAAM4"]
[Wed Feb 11 04:40:18.870628 2026] [:error] [pid 28073:tid 28095] [client 147.135.213.9:60306] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYuXsoeHYIlOlF-DsMxtRgAAANQ"]
[Wed Feb 11 04:40:20.772667 2026] [:error] [pid 27965:tid 28005] [client 147.135.213.9:60318] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYuXtNHLAUAIo8qpZyExbQAAAEI"]
[Wed Feb 11 04:40:22.746195 2026] [:error] [pid 27966:tid 28050] [client 147.135.213.9:60334] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYuXtl8HJ9ydyf0SPu6c7wAAAJQ"]
[Wed Feb 11 04:40:24.695316 2026] [:error] [pid 28073:tid 28082] [client 147.135.213.9:60344] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYuXuIeHYIlOlF-DsMxtXwAAAMc"]
[Wed Feb 11 04:40:26.570297 2026] [:error] [pid 27965:tid 28027] [client 147.135.213.9:43730] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYuXutHLAUAIo8qpZyExcwAAAFg"]
[Wed Feb 11 04:40:28.478557 2026] [:error] [pid 27966:tid 28047] [client 147.135.213.9:43740] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYuXvF8HJ9ydyf0SPu6c-wAAAJE"]
[Wed Feb 11 04:40:30.287918 2026] [:error] [pid 27965:tid 28019] [client 147.135.213.9:43750] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYuXvtHLAUAIo8qpZyExegAAAFA"]
[Wed Feb 11 04:40:32.257436 2026] [:error] [pid 27966:tid 28042] [client 147.135.213.9:43764] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYuXwF8HJ9ydyf0SPu6dAwAAAIw"]
[Wed Feb 11 04:40:34.314345 2026] [:error] [pid 27965:tid 28025] [client 147.135.213.9:43780] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYuXwtHLAUAIo8qpZyExhwAAAFY"]
[Wed Feb 11 04:40:36.378565 2026] [:error] [pid 27965:tid 28023] [client 147.135.213.9:47186] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYuXxNHLAUAIo8qpZyExiwAAAFQ"]
[Wed Feb 11 04:40:38.293029 2026] [:error] [pid 27966:tid 28040] [client 147.135.213.9:47194] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYuXxl8HJ9ydyf0SPu6dDwAAAIo"]
[Wed Feb 11 04:40:40.213046 2026] [:error] [pid 28073:tid 28081] [client 147.135.213.9:47202] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYuXyIeHYIlOlF-DsMxtewAAAMY"]
[Wed Feb 11 04:40:42.277796 2026] [:error] [pid 27966:tid 28037] [client 147.135.213.9:47214] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYuXyl8HJ9ydyf0SPu6dFgAAAIc"]
[Wed Feb 11 04:40:44.377873 2026] [:error] [pid 28073:tid 28097] [client 147.135.213.9:47220] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYuXzIeHYIlOlF-DsMxtjQAAANY"]
[Wed Feb 11 04:40:46.304763 2026] [:error] [pid 27966:tid 28042] [client 147.135.213.9:51172] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYuXzl8HJ9ydyf0SPu6dGwAAAIw"]
[Wed Feb 11 04:40:48.223246 2026] [:error] [pid 27964:tid 27981] [client 147.135.213.9:51184] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYuX0Mp0XgWYHLcQtEi-OwAAAAY"]
[Wed Feb 11 04:40:50.136214 2026] [:error] [pid 27966:tid 28034] [client 147.135.213.9:51192] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYuX0l8HJ9ydyf0SPu6dHwAAAIQ"]
[Wed Feb 11 04:40:52.076707 2026] [:error] [pid 28073:tid 28075] [client 147.135.213.9:51206] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYuX1IeHYIlOlF-DsMxtowAAAMA"]
[Wed Feb 11 04:40:53.849613 2026] [:error] [pid 27965:tid 28016] [client 147.135.213.9:51218] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYuX1dHLAUAIo8qpZyExrwAAAE0"]
[Wed Feb 11 04:40:55.785981 2026] [:error] [pid 27966:tid 28038] [client 147.135.213.9:51232] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aYuX118HJ9ydyf0SPu6dJQAAAIg"]
[Wed Feb 11 04:40:57.731376 2026] [:error] [pid 28073:tid 28076] [client 147.135.213.9:32904] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aYuX2YeHYIlOlF-DsMxtuAAAAME"]
[Wed Feb 11 04:41:17.789815 2026] [:error] [pid 28073:tid 28091] [client 147.135.213.9:32906] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYuX7YeHYIlOlF-DsMxuDgAAANA"]
[Wed Feb 11 04:41:19.787597 2026] [:error] [pid 28073:tid 28089] [client 147.135.213.9:46386] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYuX74eHYIlOlF-DsMxuFQAAAM4"]
[Wed Feb 11 04:41:21.679930 2026] [:error] [pid 27965:tid 28006] [client 147.135.213.9:46392] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYuX8dHLAUAIo8qpZyEx1wAAAEM"]
[Wed Feb 11 04:41:23.581721 2026] [:error] [pid 27966:tid 28031] [client 147.135.213.9:46394] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYuX818HJ9ydyf0SPu6dTwAAAIE"]
[Wed Feb 11 04:41:25.611271 2026] [:error] [pid 27964:tid 27990] [client 147.135.213.9:46398] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYuX9cp0XgWYHLcQtEi-XgAAAA8"]
[Wed Feb 11 04:41:28.620171 2026] [:error] [pid 27964:tid 27997] [client 147.135.213.9:54220] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYuX-Mp0XgWYHLcQtEi-YQAAABY"]
[Wed Feb 11 04:41:32.365856 2026] [:error] [pid 27964:tid 27975] [client 147.135.213.9:54232] [client 147.135.213.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYuX_Mp0XgWYHLcQtEi-ZwAAAAA"]
[Wed Feb 11 06:20:37.772652 2026] [:error] [pid 27966:tid 28051] [client 217.77.10.74:64628] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aYuvNV8HJ9ydyf0SPu7D1QAAAJU"]
[Wed Feb 11 10:19:14.568407 2026] [:error] [pid 27966:tid 28053] [client 43.157.156.190:41926] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYvnIl8HJ9ydyf0SPu4QLAAAAJc"]
[Wed Feb 11 11:59:00.857168 2026] [:error] [pid 28073:tid 28098] [client 194.5.82.38:23917] [client 194.5.82.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYv-hIeHYIlOlF-DsMwAigAAANc"]
[Wed Feb 11 11:59:01.043836 2026] [:error] [pid 28073:tid 28097] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Feb 11 11:59:01.146891 2026] [:error] [pid 28073:tid 28082] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Wed Feb 11 11:59:01.364767 2026] [:error] [pid 28073:tid 28078] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 11 11:59:01.468189 2026] [:error] [pid 28073:tid 28094] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 11 11:59:01.568041 2026] [:error] [pid 28073:tid 28093] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Wed Feb 11 11:59:03.126485 2026] [:error] [pid 28073:tid 28093] [client 194.5.82.25:60133] [client 194.5.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.25, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYv-h4eHYIlOlF-DsMwAlQAAANI"]
[Wed Feb 11 11:59:03.130288 2026] [:error] [pid 28073:tid 28093] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 11 11:59:03.355740 2026] [:error] [pid 28073:tid 28088] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Feb 11 11:59:03.457341 2026] [:error] [pid 28073:tid 28086] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 11 11:59:03.554322 2026] [:error] [pid 28073:tid 28080] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Feb 11 11:59:03.757509 2026] [:error] [pid 28073:tid 28097] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Feb 11 11:59:03.953284 2026] [:error] [pid 28073:tid 28092] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Feb 11 11:59:04.160318 2026] [:error] [pid 28073:tid 28078] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Feb 11 11:59:04.262096 2026] [:error] [pid 28073:tid 28094] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Wed Feb 11 11:59:04.473273 2026] [:error] [pid 28073:tid 28090] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Wed Feb 11 11:59:04.568763 2026] [:error] [pid 28073:tid 28091] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Feb 11 11:59:04.673000 2026] [:error] [pid 28073:tid 28084] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Wed Feb 11 11:59:04.768450 2026] [:error] [pid 28073:tid 28083] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 11 11:59:04.863527 2026] [:error] [pid 28073:tid 28096] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php
[Wed Feb 11 11:59:05.061578 2026] [:error] [pid 28073:tid 28088] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Feb 11 11:59:05.158705 2026] [:error] [pid 28073:tid 28098] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Feb 11 11:59:05.254989 2026] [:error] [pid 28073:tid 28087] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Feb 11 11:59:05.362692 2026] [:error] [pid 28073:tid 28099] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Feb 11 11:59:05.463253 2026] [:error] [pid 28073:tid 28078] [client 194.5.82.25:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 11 11:59:05.555475 2026] [:error] [pid 28073:tid 28094] [client 194.5.82.25:60133] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aYv-iYeHYIlOlF-DsMwArwAAANM"]
[Wed Feb 11 11:59:05.855131 2026] [:error] [pid 27965:tid 28008] [client 194.5.82.25:44759] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Wed Feb 11 11:59:05.948901 2026] [:error] [pid 27965:tid 28016] [client 194.5.82.25:44759] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYv-idHLAUAIo8qpZyHPfAAAAE0"]
[Wed Feb 11 11:59:06.154756 2026] [:error] [pid 22569:tid 22596] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed Feb 11 11:59:06.261436 2026] [:error] [pid 22569:tid 22586] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php
[Wed Feb 11 11:59:06.459812 2026] [:error] [pid 22569:tid 22593] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Feb 11 11:59:06.563515 2026] [:error] [pid 22569:tid 22580] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Wed Feb 11 11:59:06.665916 2026] [:error] [pid 22569:tid 22579] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Wed Feb 11 11:59:06.857431 2026] [:error] [pid 22569:tid 22594] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 11 11:59:06.953981 2026] [:error] [pid 22569:tid 22591] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 11 11:59:07.062678 2026] [:error] [pid 22569:tid 22590] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 11 11:59:07.160119 2026] [:error] [pid 22569:tid 22582] [client 194.5.82.32:28877] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Feb 11 11:59:07.251415 2026] [:error] [pid 22569:tid 22574] [client 194.5.82.32:28877] [client 194.5.82.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYv-i8AhSI7iX9G3eni27QAAAYE"]
[Wed Feb 11 11:59:07.466565 2026] [:error] [pid 27964:tid 27996] [client 194.5.82.33:38375] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Feb 11 11:59:07.564665 2026] [:error] [pid 27964:tid 27982] [client 194.5.82.33:38375] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Feb 11 11:59:07.663694 2026] [:error] [pid 27964:tid 27999] [client 194.5.82.33:38375] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "aYv-i8p0XgWYHLcQtEg3zAAAABg"]
[Wed Feb 11 11:59:07.856203 2026] [:error] [pid 27964:tid 27988] [client 194.5.82.9:44873] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Feb 11 11:59:07.952580 2026] [:error] [pid 27964:tid 27997] [client 194.5.82.9:44873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Wed Feb 11 11:59:08.259421 2026] [:error] [pid 27964:tid 27975] [client 194.5.82.9:44873] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Wed Feb 11 11:59:08.475313 2026] [:error] [pid 27964:tid 27985] [client 194.5.82.9:44873] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Wed Feb 11 11:59:08.566647 2026] [:error] [pid 27964:tid 27977] [client 194.5.82.9:44873] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aYv-jMp0XgWYHLcQtEg31AAAAAI"]
[Wed Feb 11 11:59:08.853380 2026] [:error] [pid 27964:tid 27978] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Feb 11 11:59:08.956205 2026] [:error] [pid 27964:tid 27994] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Feb 11 11:59:09.054098 2026] [:error] [pid 27964:tid 27979] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Feb 11 11:59:09.154470 2026] [:error] [pid 27964:tid 27989] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Feb 11 11:59:09.254389 2026] [:error] [pid 27964:tid 27995] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 11 11:59:09.353603 2026] [:error] [pid 27964:tid 27991] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 11 11:59:09.556327 2026] [:error] [pid 27964:tid 27987] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Feb 11 11:59:09.661430 2026] [:error] [pid 27964:tid 27996] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Feb 11 11:59:09.754056 2026] [:error] [pid 27964:tid 27982] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Feb 11 11:59:09.855943 2026] [:error] [pid 27964:tid 27999] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Wed Feb 11 11:59:10.050354 2026] [:error] [pid 27964:tid 27988] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Feb 11 11:59:10.153292 2026] [:error] [pid 27964:tid 27997] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Feb 11 11:59:10.257256 2026] [:error] [pid 27964:tid 27998] [client 194.5.82.45:63717] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 11 11:59:10.348303 2026] [:error] [pid 27964:tid 27992] [client 194.5.82.45:63717] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aYv-jsp0XgWYHLcQtEg35gAAABE"]
[Wed Feb 11 11:59:11.548806 2026] [:error] [pid 28073:tid 28092] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Feb 11 11:59:11.755870 2026] [:error] [pid 28073:tid 28085] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 11 11:59:11.857061 2026] [:error] [pid 28073:tid 28078] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Wed Feb 11 11:59:11.957457 2026] [:error] [pid 28073:tid 28089] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Feb 11 11:59:12.054994 2026] [:error] [pid 28073:tid 28094] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Wed Feb 11 11:59:12.150627 2026] [:error] [pid 28073:tid 28081] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Feb 11 11:59:12.360344 2026] [:error] [pid 28073:tid 28090] [client 194.5.82.34:31557] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Wed Feb 11 11:59:12.658479 2026] [:error] [pid 28073:tid 28097] [client 194.5.82.34:31557] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYv-kIeHYIlOlF-DsMwAvwAAANY"]
[Wed Feb 11 11:59:12.847402 2026] [:error] [pid 28073:tid 28083] [client 194.5.82.35:21185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Feb 11 11:59:12.948014 2026] [:error] [pid 28073:tid 28093] [client 194.5.82.35:21185] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Feb 11 11:59:13.052235 2026] [:error] [pid 28073:tid 28096] [client 194.5.82.35:21185] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Feb 11 11:59:13.152738 2026] [:error] [pid 28073:tid 28079] [client 194.5.82.35:21185] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Wed Feb 11 11:59:14.669215 2026] [:error] [pid 28073:tid 28079] [client 194.5.82.35:21185] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYv-koeHYIlOlF-DsMwAxgAAAMQ"]
[Wed Feb 11 11:59:14.863717 2026] [:error] [pid 17401:tid 17404] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Feb 11 11:59:14.957941 2026] [:error] [pid 17401:tid 17420] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Wed Feb 11 11:59:15.058131 2026] [:error] [pid 17401:tid 17409] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Feb 11 11:59:15.166685 2026] [:error] [pid 17401:tid 17426] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Wed Feb 11 11:59:15.265695 2026] [:error] [pid 17401:tid 17418] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Wed Feb 11 11:59:15.359178 2026] [:error] [pid 17401:tid 17421] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/xa.php
[Wed Feb 11 11:59:15.453138 2026] [:error] [pid 17401:tid 17411] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Feb 11 11:59:15.658304 2026] [:error] [pid 17401:tid 17422] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Feb 11 11:59:15.756725 2026] [:error] [pid 17401:tid 17427] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Feb 11 11:59:15.865535 2026] [:error] [pid 17401:tid 17424] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Feb 11 11:59:15.959801 2026] [:error] [pid 17401:tid 17407] [client 194.5.82.166:52219] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Feb 11 11:59:16.064165 2026] [:error] [pid 17401:tid 17417] [client 194.5.82.166:52219] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYv-lA0lHeayTY40t372DAAAAQ4"]
[Wed Feb 11 11:59:16.255739 2026] [:error] [pid 28073:tid 28095] [client 194.5.82.53:45329] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Feb 11 11:59:16.360721 2026] [:error] [pid 28073:tid 28090] [client 194.5.82.53:45329] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYv-lIeHYIlOlF-DsMwAyQAAAM8"]
[Wed Feb 11 11:59:16.646166 2026] [:error] [pid 27964:tid 27987] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Feb 11 11:59:16.961898 2026] [:error] [pid 27964:tid 27999] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 11 11:59:17.054615 2026] [:error] [pid 27964:tid 27983] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Wed Feb 11 11:59:17.357823 2026] [:error] [pid 27964:tid 27997] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Feb 11 11:59:17.452768 2026] [:error] [pid 27964:tid 27998] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Wed Feb 11 11:59:17.655531 2026] [:error] [pid 27964:tid 27993] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Feb 11 11:59:17.757451 2026] [:error] [pid 27964:tid 27985] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Feb 11 11:59:17.852627 2026] [:error] [pid 27964:tid 27984] [client 194.5.82.53:39447] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Feb 11 11:59:18.052365 2026] [:error] [pid 27964:tid 27978] [client 194.5.82.53:39447] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYv-lsp0XgWYHLcQtEg3_QAAAAM"]
[Wed Feb 11 11:59:18.349496 2026] [:error] [pid 27964:tid 27979] [client 194.5.82.27:58817] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYv-lsp0XgWYHLcQtEg3_wAAAAQ"]
[Wed Feb 11 11:59:37.259745 2026] [autoindex:error] [pid 22569:tid 22594] [client 194.5.82.165:51515] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 11:59:41.858993 2026] [:error] [pid 22569:tid 22590] [client 194.5.82.165:51515] [client 194.5.82.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager"] [unique_id "aYv-rcAhSI7iX9G3eni3dQAAAZE"]
[Wed Feb 11 12:39:48.491788 2026] [:error] [pid 22569:tid 22579] [client 95.91.110.210:15392] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYwIFMAhSI7iX9G3enjCWwAAAYY"]
[Wed Feb 11 12:39:50.633949 2026] [:error] [pid 28073:tid 28099] [client 95.91.110.210:29424] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aYwIFoeHYIlOlF-DsMwTDAAAANg"]
[Wed Feb 11 12:39:52.626238 2026] [:error] [pid 27965:tid 28026] [client 95.91.110.210:29428] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aYwIGNHLAUAIo8qpZyHa0AAAAFc"]
[Wed Feb 11 12:39:55.150062 2026] [:error] [pid 22537:tid 22546] [client 95.91.110.210:29436] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aYwIGyfg2TagwM3bvQOQDAAAAUc"]
[Wed Feb 11 12:39:57.329414 2026] [:error] [pid 22569:tid 22583] [client 95.91.110.210:29444] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aYwIHcAhSI7iX9G3enjCYAAAAYo"]
[Wed Feb 11 12:39:59.498899 2026] [:error] [pid 17401:tid 17414] [client 95.91.110.210:56998] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aYwIHw0lHeayTY40t37_0QAAAQs"]
[Wed Feb 11 12:40:03.783814 2026] [:error] [pid 22569:tid 22597] [client 95.91.110.210:57006] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aYwII8AhSI7iX9G3enjCaQAAAZg"]
[Wed Feb 11 12:40:11.050232 2026] [:error] [pid 27966:tid 28040] [client 95.91.110.210:57014] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aYwIK18HJ9ydyf0SPu46-AAAAIo"]
[Wed Feb 11 12:40:14.043656 2026] [:error] [pid 27964:tid 27980] [client 95.91.110.210:14394] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYwILsp0XgWYHLcQtEhFsgAAAAU"]
[Wed Feb 11 12:40:15.951388 2026] [:error] [pid 27964:tid 27985] [client 95.91.110.210:14410] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYwIL8p0XgWYHLcQtEhFtgAAAAo"]
[Wed Feb 11 12:40:18.004939 2026] [:error] [pid 27965:tid 28012] [client 95.91.110.210:23350] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aYwIMtHLAUAIo8qpZyHa_wAAAEk"]
[Wed Feb 11 12:40:20.120756 2026] [:error] [pid 27965:tid 28005] [client 95.91.110.210:23352] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYwINNHLAUAIo8qpZyHbAwAAAEI"]
[Wed Feb 11 12:40:22.292295 2026] [:error] [pid 28073:tid 28098] [client 95.91.110.210:23356] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYwINoeHYIlOlF-DsMwTLwAAANc"]
[Wed Feb 11 12:40:24.217189 2026] [:error] [pid 27964:tid 27977] [client 95.91.110.210:23368] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYwIOMp0XgWYHLcQtEhFwgAAAAI"]
[Wed Feb 11 12:40:26.264020 2026] [:error] [pid 22570:tid 22612] [client 95.91.110.210:23382] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYwIOiE5uSe043FXwQr90gAAAcw"]
[Wed Feb 11 12:40:28.152792 2026] [:error] [pid 17401:tid 17426] [client 95.91.110.210:42724] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYwIPA0lHeayTY40t37_5AAAARc"]
[Wed Feb 11 12:40:30.316117 2026] [:error] [pid 27964:tid 27998] [client 95.91.110.210:42736] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYwIPsp0XgWYHLcQtEhFxgAAABc"]
[Wed Feb 11 12:40:32.567695 2026] [:error] [pid 22570:tid 22605] [client 95.91.110.210:42740] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYwIQCE5uSe043FXwQr91wAAAcU"]
[Wed Feb 11 12:40:34.587052 2026] [:error] [pid 28073:tid 28090] [client 95.91.110.210:42756] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYwIQoeHYIlOlF-DsMwTPwAAAM8"]
[Wed Feb 11 12:40:36.536287 2026] [:error] [pid 22570:tid 22618] [client 95.91.110.210:42770] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYwIRCE5uSe043FXwQr93AAAAdI"]
[Wed Feb 11 12:40:38.678865 2026] [:error] [pid 22569:tid 22579] [client 95.91.110.210:54512] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aYwIRsAhSI7iX9G3enjCggAAAYY"]
[Wed Feb 11 12:40:41.213009 2026] [:error] [pid 27964:tid 27983] [client 95.91.110.210:54524] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aYwIScp0XgWYHLcQtEhFyQAAAAg"]
[Wed Feb 11 12:40:43.198443 2026] [:error] [pid 22537:tid 22550] [client 95.91.110.210:54536] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYwISyfg2TagwM3bvQOQLQAAAUs"]
[Wed Feb 11 12:40:45.255158 2026] [:error] [pid 27966:tid 28036] [client 95.91.110.210:54550] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aYwITV8HJ9ydyf0SPu47BwAAAIY"]
[Wed Feb 11 12:41:00.224818 2026] [:error] [pid 27965:tid 28015] [client 108.165.164.187:58574] [client 108.165.164.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new"] [unique_id "aYwIXNHLAUAIo8qpZyHbOgAAAEw"]
[Wed Feb 11 12:41:06.791120 2026] [:error] [pid 27964:tid 27983] [client 95.91.110.210:54566] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aYwIYsp0XgWYHLcQtEhGBQAAAAg"]
[Wed Feb 11 12:41:08.765842 2026] [:error] [pid 22569:tid 22594] [client 95.91.110.210:8744] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aYwIZMAhSI7iX9G3enjClAAAAZU"]
[Wed Feb 11 12:41:10.746069 2026] [:error] [pid 27964:tid 27985] [client 95.91.110.210:8756] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYwIZsp0XgWYHLcQtEhGDwAAAAo"]
[Wed Feb 11 12:41:15.954113 2026] [:error] [pid 28073:tid 28099] [client 95.91.110.210:8770] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aYwIa4eHYIlOlF-DsMwThQAAANg"]
[Wed Feb 11 12:41:22.258352 2026] [:error] [pid 17401:tid 17420] [client 95.91.110.210:38622] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aYwIcg0lHeayTY40t34AIgAAARE"]
[Wed Feb 11 12:41:24.873240 2026] [:error] [pid 28073:tid 28079] [client 95.91.110.210:38630] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aYwIdIeHYIlOlF-DsMwTlwAAAMQ"]
[Wed Feb 11 12:41:27.016247 2026] [:error] [pid 28073:tid 28088] [client 95.91.110.210:38640] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aYwId4eHYIlOlF-DsMwTnAAAAM0"]
[Wed Feb 11 12:41:29.113366 2026] [:error] [pid 17401:tid 17407] [client 95.91.110.210:62590] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aYwIeQ0lHeayTY40t34AIwAAAQQ"]
[Wed Feb 11 12:41:31.158995 2026] [:error] [pid 22570:tid 22607] [client 95.91.110.210:62594] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYwIeyE5uSe043FXwQr-IgAAAcc"]
[Wed Feb 11 12:41:33.093272 2026] [:error] [pid 22570:tid 22601] [client 95.91.110.210:62604] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aYwIfSE5uSe043FXwQr-JwAAAcE"]
[Wed Feb 11 12:41:35.088261 2026] [:error] [pid 27964:tid 27990] [client 95.91.110.210:62618] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYwIf8p0XgWYHLcQtEhGHQAAAA8"]
[Wed Feb 11 12:41:37.120212 2026] [:error] [pid 28073:tid 28076] [client 95.91.110.210:62632] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYwIgYeHYIlOlF-DsMwTpwAAAME"]
[Wed Feb 11 12:41:39.237619 2026] [:error] [pid 27965:tid 28006] [client 95.91.110.210:20670] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYwIg9HLAUAIo8qpZyHbYwAAAEM"]
[Wed Feb 11 12:41:41.309619 2026] [:error] [pid 27965:tid 28015] [client 95.91.110.210:20684] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYwIhdHLAUAIo8qpZyHbaAAAAEw"]
[Wed Feb 11 12:41:43.321888 2026] [:error] [pid 28073:tid 28075] [client 95.91.110.210:20686] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYwIh4eHYIlOlF-DsMwTtQAAAMA"]
[Wed Feb 11 12:41:45.431532 2026] [:error] [pid 28073:tid 28081] [client 95.91.110.210:20692] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYwIiYeHYIlOlF-DsMwTuAAAAMY"]
[Wed Feb 11 12:41:47.720782 2026] [:error] [pid 22569:tid 22575] [client 95.91.110.210:20700] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aYwIi8AhSI7iX9G3enjCpQAAAYI"]
[Wed Feb 11 12:41:49.599365 2026] [:error] [pid 27965:tid 28019] [client 95.91.110.210:6452] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYwIjdHLAUAIo8qpZyHbewAAAFA"]
[Wed Feb 11 12:41:51.510622 2026] [:error] [pid 27966:tid 28053] [client 95.91.110.210:6454] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aYwIj18HJ9ydyf0SPu47OwAAAJc"]
[Wed Feb 11 12:41:53.496176 2026] [:error] [pid 22570:tid 22604] [client 95.91.110.210:6466] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aYwIkSE5uSe043FXwQr-OAAAAcQ"]
[Wed Feb 11 12:41:55.939542 2026] [:error] [pid 27965:tid 28016] [client 95.91.110.210:6482] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYwIk9HLAUAIo8qpZyHbfgAAAE0"]
[Wed Feb 11 12:41:59.813180 2026] [:error] [pid 22570:tid 22623] [client 95.91.110.210:1856] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYwIlyE5uSe043FXwQr-PgAAAdc"]
[Wed Feb 11 12:55:55.348366 2026] [:error] [pid 27966:tid 28038] [client 173.239.224.202:38985] [client 173.239.224.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.202, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aYwL218HJ9ydyf0SPu4_KQAAAIg"]
[Wed Feb 11 12:55:55.352439 2026] [:error] [pid 27966:tid 28038] [client 173.239.224.202:38985] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Feb 11 16:00:32.774814 2026] [:error] [pid 27964:tid 27988] [client 172.213.26.245:2903] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Wed Feb 11 16:00:33.745285 2026] [:error] [pid 27964:tid 27994] [client 172.213.26.245:2903] [client 172.213.26.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYw3Icp0XgWYHLcQtEiKBAAAABM"]
[Wed Feb 11 16:00:59.564200 2026] [:error] [pid 17401:tid 17421] [client 172.213.26.245:48142] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/log.php"] [unique_id "aYw3Ow0lHeayTY40t34sTgAAARI"]
[Wed Feb 11 16:01:02.878191 2026] [:error] [pid 28073:tid 28088] [client 172.213.26.245:50112] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/log.php"] [unique_id "aYw3PoeHYIlOlF-DsMxrqgAAAM0"]
[Wed Feb 11 16:01:07.088498 2026] [:error] [pid 22537:tid 22550] [client 172.213.26.245:52831] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/log.php"] [unique_id "aYw3Qyfg2TagwM3bvQO99QAAAUs"]
[Wed Feb 11 16:01:11.914523 2026] [:error] [pid 28073:tid 28075] [client 172.213.26.245:47241] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/log.php"] [unique_id "aYw3R4eHYIlOlF-DsMxrtQAAAMA"]
[Wed Feb 11 16:01:14.229482 2026] [:error] [pid 27966:tid 28043] [client 172.213.26.245:52199] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aYw3Sl8HJ9ydyf0SPu5vugAAAI0"]
[Wed Feb 11 16:01:16.390942 2026] [:error] [pid 17401:tid 17412] [client 172.213.26.245:50118] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aYw3TA0lHeayTY40t34saAAAAQk"]
[Wed Feb 11 16:01:17.859284 2026] [:error] [pid 27964:tid 27985] [client 172.213.26.245:50088] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aYw3Tcp0XgWYHLcQtEiKPgAAAAo"]
[Wed Feb 11 16:01:18.714099 2026] [:error] [pid 22537:tid 22560] [client 172.213.26.245:47243] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aYw3Tifg2TagwM3bvQO-AAAAAVU"]
[Wed Feb 11 16:01:19.926270 2026] [:error] [pid 17401:tid 17410] [client 172.213.26.245:2528] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aYw3Tw0lHeayTY40t34saQAAAQc"]
[Wed Feb 11 16:01:20.772512 2026] [:error] [pid 27965:tid 28013] [client 172.213.26.245:50588] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aYw3UNHLAUAIo8qpZyEU-AAAAEo"]
[Wed Feb 11 16:01:21.695084 2026] [:error] [pid 28073:tid 28087] [client 172.213.26.245:51926] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aYw3UYeHYIlOlF-DsMxrxwAAAMw"]
[Wed Feb 11 16:01:23.605758 2026] [:error] [pid 27966:tid 28032] [client 172.213.26.245:62531] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aYw3U18HJ9ydyf0SPu5vwgAAAII"]
[Wed Feb 11 16:01:24.950287 2026] [:error] [pid 27965:tid 28017] [client 172.213.26.245:2516] [client 172.213.26.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYw3VNHLAUAIo8qpZyEU_QAAAE4"]
[Wed Feb 11 16:01:25.898332 2026] [:error] [pid 28073:tid 28096] [client 172.213.26.245:47239] [client 172.213.26.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYw3VYeHYIlOlF-DsMxrzgAAANU"]
[Wed Feb 11 16:01:28.475378 2026] [:error] [pid 27964:tid 27983] [client 172.213.26.245:45207] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYw3WMp0XgWYHLcQtEiKTQAAAAg"]
[Wed Feb 11 16:01:30.158332 2026] [:error] [pid 22569:tid 22592] [client 172.213.26.245:50095] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYw3WsAhSI7iX9G3enj0lwAAAZM"]
[Wed Feb 11 16:01:31.547454 2026] [:error] [pid 22570:tid 22605] [client 172.213.26.245:51085] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o1.php"] [unique_id "aYw3WyE5uSe043FXwQow9gAAAcU"]
[Wed Feb 11 16:01:32.695309 2026] [:error] [pid 17401:tid 17408] [client 172.213.26.245:51075] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYw3XA0lHeayTY40t34sbgAAAQU"]
[Wed Feb 11 16:01:34.063931 2026] [:error] [pid 27965:tid 28015] [client 172.213.26.245:50908] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYw3XtHLAUAIo8qpZyEVEAAAAEw"]
[Wed Feb 11 16:01:36.186677 2026] [:error] [pid 27965:tid 28003] [client 172.213.26.245:50524] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYw3YNHLAUAIo8qpZyEVFAAAAEA"]
[Wed Feb 11 16:01:38.684743 2026] [:error] [pid 17401:tid 17421] [client 172.213.26.245:47018] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/juuuu.php"] [unique_id "aYw3Yg0lHeayTY40t34sdAAAARI"]
[Wed Feb 11 16:01:39.772805 2026] [:error] [pid 22537:tid 22559] [client 172.213.26.245:50548] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYw3Yyfg2TagwM3bvQO-EwAAAVQ"]
[Wed Feb 11 16:01:41.633816 2026] [:error] [pid 17401:tid 17406] [client 172.213.26.245:50653] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYw3ZQ0lHeayTY40t34sewAAAQM"]
[Wed Feb 11 16:01:42.769418 2026] [:error] [pid 22537:tid 22554] [client 172.213.26.245:47284] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYw3Zifg2TagwM3bvQO-FQAAAU8"]
[Wed Feb 11 16:01:44.581599 2026] [:error] [pid 22537:tid 22556] [client 172.213.26.245:51096] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aYw3aCfg2TagwM3bvQO-FwAAAVE"]
[Wed Feb 11 16:01:46.085493 2026] [:error] [pid 27964:tid 27978] [client 172.213.26.245:52381] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYw3asp0XgWYHLcQtEiKXgAAAAM"]
[Wed Feb 11 16:01:48.976678 2026] [:error] [pid 22537:tid 22551] [client 172.213.26.245:2483] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYw3bCfg2TagwM3bvQO-GgAAAUw"]
[Wed Feb 11 16:01:51.689841 2026] [:error] [pid 28073:tid 28090] [client 172.213.26.245:50667] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYw3b4eHYIlOlF-DsMxr-gAAAM8"]
[Wed Feb 11 16:01:53.070125 2026] [:error] [pid 17401:tid 17426] [client 172.213.26.245:44782] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we2.php"] [unique_id "aYw3cQ0lHeayTY40t34shgAAARc"]
[Wed Feb 11 16:01:54.247089 2026] [:error] [pid 22570:tid 22616] [client 172.213.26.245:51949] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYw3ciE5uSe043FXwQoxEwAAAdA"]
[Wed Feb 11 16:01:55.682404 2026] [:error] [pid 17401:tid 17404] [client 172.213.26.245:56884] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYw3cw0lHeayTY40t34siQAAAQE"]
[Wed Feb 11 16:01:57.769266 2026] [:error] [pid 27964:tid 27977] [client 172.213.26.245:50167] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/04.php"] [unique_id "aYw3dcp0XgWYHLcQtEiKZQAAAAI"]
[Wed Feb 11 16:01:59.815522 2026] [:error] [pid 22537:tid 22546] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Wed Feb 11 16:02:02.880894 2026] [:error] [pid 22537:tid 22546] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Wed Feb 11 16:02:03.119659 2026] [:error] [pid 22537:tid 22539] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Wed Feb 11 16:02:03.368837 2026] [:error] [pid 22537:tid 22563] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Wed Feb 11 16:02:03.622385 2026] [:error] [pid 22537:tid 22541] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Feb 11 16:02:03.863422 2026] [:error] [pid 22537:tid 22540] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Feb 11 16:02:05.355168 2026] [:error] [pid 22537:tid 22540] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Wed Feb 11 16:02:05.592164 2026] [:error] [pid 22537:tid 22544] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Wed Feb 11 16:02:05.855181 2026] [:error] [pid 22537:tid 22556] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Wed Feb 11 16:02:06.096369 2026] [:error] [pid 22537:tid 22554] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Wed Feb 11 16:02:06.369143 2026] [:error] [pid 22537:tid 22558] [client 172.213.26.245:44780] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Wed Feb 11 16:02:06.865930 2026] [:error] [pid 22537:tid 22551] [client 172.213.26.245:44780] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYw3fifg2TagwM3bvQO-MwAAAUw"]
[Wed Feb 11 16:02:07.831098 2026] [:error] [pid 22569:tid 22593] [client 172.213.26.245:50844] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYw3f8AhSI7iX9G3enj0xwAAAZQ"]
[Wed Feb 11 16:02:09.092794 2026] [:error] [pid 27964:tid 27984] [client 172.213.26.245:51455] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYw3gcp0XgWYHLcQtEiKewAAAAk"]
[Wed Feb 11 16:02:10.098255 2026] [:error] [pid 22569:tid 22587] [client 172.213.26.245:52121] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aYw3gsAhSI7iX9G3enj0zAAAAY4"]
[Wed Feb 11 16:02:12.173278 2026] [:error] [pid 27966:tid 28052] [client 172.213.26.245:3024] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYw3hF8HJ9ydyf0SPu5v4wAAAJY"]
[Wed Feb 11 16:02:13.437708 2026] [:error] [pid 27966:tid 28031] [client 172.213.26.245:50421] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYw3hV8HJ9ydyf0SPu5v5gAAAIE"]
[Wed Feb 11 16:02:15.428198 2026] [:error] [pid 28073:tid 28076] [client 172.213.26.245:50915] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYw3h4eHYIlOlF-DsMxsJgAAAME"]
[Wed Feb 11 16:02:16.841671 2026] [:error] [pid 17401:tid 17410] [client 172.213.26.245:45565] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aYw3iA0lHeayTY40t34sxwAAAQc"]
[Wed Feb 11 16:02:18.624986 2026] [:error] [pid 27964:tid 27997] [client 172.213.26.245:53149] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYw3isp0XgWYHLcQtEiKiAAAABY"]
[Wed Feb 11 16:02:20.890281 2026] [:error] [pid 22569:tid 22589] [client 172.213.26.245:51421] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYw3jMAhSI7iX9G3enj03AAAAZA"]
[Wed Feb 11 16:02:21.863403 2026] [:error] [pid 17401:tid 17414] [client 172.213.26.245:44166] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYw3jQ0lHeayTY40t34sywAAAQs"]
[Wed Feb 11 16:02:23.358512 2026] [:error] [pid 22569:tid 22582] [client 172.213.26.245:44507] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aYw3j8AhSI7iX9G3enj04gAAAYk"]
[Wed Feb 11 16:02:24.993605 2026] [:error] [pid 22537:tid 22543] [client 172.213.26.245:45527] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYw3kCfg2TagwM3bvQO-QQAAAUQ"]
[Wed Feb 11 16:02:26.360722 2026] [:error] [pid 27964:tid 27994] [client 172.213.26.245:2694] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYw3ksp0XgWYHLcQtEiKkQAAABM"]
[Wed Feb 11 16:02:27.292448 2026] [:error] [pid 22570:tid 22624] [client 172.213.26.245:45821] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYw3kyE5uSe043FXwQoxNQAAAdg"]
[Wed Feb 11 16:02:30.323643 2026] [:error] [pid 27966:tid 28052] [client 172.213.26.245:58828] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aYw3ll8HJ9ydyf0SPu5wCgAAAJY"]
[Wed Feb 11 16:02:32.300107 2026] [:error] [pid 17401:tid 17417] [client 172.213.26.245:51085] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYw3mA0lHeayTY40t34s1AAAAQ4"]
[Wed Feb 11 16:02:33.955840 2026] [:error] [pid 28073:tid 28097] [client 172.213.26.245:44172] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYw3mYeHYIlOlF-DsMxsMwAAANY"]
[Wed Feb 11 16:02:36.298338 2026] [:error] [pid 17401:tid 17411] [client 172.213.26.245:47641] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYw3nA0lHeayTY40t34s2QAAAQg"]
[Wed Feb 11 16:02:37.641793 2026] [:error] [pid 28073:tid 28076] [client 172.213.26.245:45567] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYw3nYeHYIlOlF-DsMxsOgAAAME"]
[Wed Feb 11 16:02:39.461635 2026] [:error] [pid 27966:tid 28044] [client 172.213.26.245:44208] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYw3n18HJ9ydyf0SPu5wEQAAAI4"]
[Wed Feb 11 16:02:40.975612 2026] [:error] [pid 28073:tid 28090] [client 172.213.26.245:47671] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYw3oIeHYIlOlF-DsMxsQAAAAM8"]
[Wed Feb 11 16:02:43.420379 2026] [:error] [pid 22537:tid 22555] [client 172.213.26.245:52116] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYw3oyfg2TagwM3bvQO-TAAAAVA"]
[Wed Feb 11 16:02:46.010330 2026] [:error] [pid 27966:tid 28039] [client 172.213.26.245:49521] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nox.php"] [unique_id "aYw3pl8HJ9ydyf0SPu5wHAAAAIk"]
[Wed Feb 11 16:02:47.164013 2026] [:error] [pid 27966:tid 28045] [client 172.213.26.245:49522] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYw3p18HJ9ydyf0SPu5wIQAAAI8"]
[Wed Feb 11 16:02:50.182640 2026] [:error] [pid 27965:tid 28014] [client 172.213.26.245:43991] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYw3qtHLAUAIo8qpZyEVgQAAAEs"]
[Wed Feb 11 16:02:52.130120 2026] [:error] [pid 22570:tid 22613] [client 172.213.26.245:50750] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYw3rCE5uSe043FXwQoxSgAAAc0"]
[Wed Feb 11 16:02:53.027999 2026] [:error] [pid 22537:tid 22557] [client 172.213.26.245:45508] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file48.php"] [unique_id "aYw3rSfg2TagwM3bvQO-UgAAAVI"]
[Wed Feb 11 16:02:53.918444 2026] [:error] [pid 22569:tid 22587] [client 172.213.26.245:47673] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYw3rcAhSI7iX9G3enj1FAAAAY4"]
[Wed Feb 11 16:02:54.819198 2026] [:error] [pid 22537:tid 22555] [client 172.213.26.245:45520] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYw3rifg2TagwM3bvQO-VQAAAVA"]
[Wed Feb 11 16:02:55.533773 2026] [:error] [pid 17401:tid 17417] [client 172.213.26.245:50432] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYw3rw0lHeayTY40t34s5wAAAQ4"]
[Wed Feb 11 16:02:59.742223 2026] [:error] [pid 28073:tid 28080] [client 172.213.26.245:45573] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aYw3s4eHYIlOlF-DsMxsgwAAAMU"]
[Wed Feb 11 16:03:07.616929 2026] [:error] [pid 27965:tid 28010] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Wed Feb 11 16:03:07.855021 2026] [:error] [pid 27965:tid 28025] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Wed Feb 11 16:03:08.092492 2026] [:error] [pid 27965:tid 28022] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Wed Feb 11 16:03:08.334642 2026] [:error] [pid 27965:tid 28008] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Wed Feb 11 16:03:08.584293 2026] [:error] [pid 27965:tid 28003] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Wed Feb 11 16:03:10.268534 2026] [:error] [pid 27965:tid 28003] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Feb 11 16:03:10.515702 2026] [:error] [pid 27965:tid 28021] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Wed Feb 11 16:03:10.781505 2026] [:error] [pid 27965:tid 28010] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Wed Feb 11 16:03:11.048056 2026] [:error] [pid 27965:tid 28019] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Wed Feb 11 16:03:11.286002 2026] [:error] [pid 27965:tid 28027] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Wed Feb 11 16:03:11.523765 2026] [:error] [pid 27965:tid 28025] [client 172.213.26.245:48195] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Wed Feb 11 16:03:11.775785 2026] [:error] [pid 27965:tid 28023] [client 172.213.26.245:48195] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aYw3v9HLAUAIo8qpZyEVpQAAAFQ"]
[Wed Feb 11 16:03:15.192624 2026] [:error] [pid 27966:tid 28044] [client 172.213.26.245:49662] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aYw3w18HJ9ydyf0SPu5wQgAAAI4"]
[Wed Feb 11 16:03:23.370326 2026] [:error] [pid 27966:tid 28049] [client 172.213.26.245:47570] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aYw3y18HJ9ydyf0SPu5wYgAAAJM"]
[Wed Feb 11 16:03:32.021260 2026] [:error] [pid 22537:tid 22553] [client 172.213.26.245:59663] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up4.php"] [unique_id "aYw31Cfg2TagwM3bvQO-dAAAAU4"]
[Wed Feb 11 16:03:57.614847 2026] [:error] [pid 27965:tid 28022] [client 172.213.26.245:48728] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYw37dHLAUAIo8qpZyEV7QAAAFM"]
[Wed Feb 11 16:03:59.718092 2026] [:error] [pid 17401:tid 17427] [client 172.213.26.245:52749] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYw37w0lHeayTY40t34tMAAAARg"]
[Wed Feb 11 16:04:01.254465 2026] [:error] [pid 27965:tid 28006] [client 172.213.26.245:47309] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYw38dHLAUAIo8qpZyEV8wAAAEM"]
[Wed Feb 11 16:04:04.165694 2026] [:error] [pid 28073:tid 28091] [client 172.213.26.245:50693] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aYw39IeHYIlOlF-DsMxs8AAAANA"]
[Wed Feb 11 16:04:07.439939 2026] [:error] [pid 22569:tid 22579] [client 172.213.26.245:63121] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aYw398AhSI7iX9G3enj1bQAAAYY"]
[Wed Feb 11 16:04:09.559035 2026] [:error] [pid 22570:tid 22611] [client 172.213.26.245:52261] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aYw3-SE5uSe043FXwQoxlgAAAcs"]
[Wed Feb 11 16:04:11.104707 2026] [:error] [pid 22537:tid 22562] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Feb 11 16:04:11.397483 2026] [:error] [pid 22537:tid 22550] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Wed Feb 11 16:04:11.733075 2026] [:error] [pid 22537:tid 22539] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Wed Feb 11 16:04:11.971661 2026] [:error] [pid 22537:tid 22545] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Wed Feb 11 16:04:12.208371 2026] [:error] [pid 22537:tid 22541] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Wed Feb 11 16:04:12.834900 2026] [:error] [pid 22537:tid 22547] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Wed Feb 11 16:04:13.154224 2026] [:error] [pid 22537:tid 22558] [client 172.213.26.245:44256] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Wed Feb 11 17:22:57.407616 2026] [:error] [pid 22570:tid 22621] [client 43.135.186.135:58248] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aYxKcSE5uSe043FXwQpG_QAAAdU"]
[Wed Feb 11 19:34:24.854287 2026] [:error] [pid 22537:tid 22542] [client 45.148.10.99:44668] [client 45.148.10.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aYxpQCfg2TagwM3bvQPzJAAAAUM"]
[Wed Feb 11 19:34:27.795193 2026] [:error] [pid 22537:tid 22553] [client 45.148.10.99:48464] [client 45.148.10.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.svn/wc.db"] [unique_id "aYxpQyfg2TagwM3bvQPzKwAAAU4"]
[Wed Feb 11 19:34:30.667274 2026] [:error] [pid 22537:tid 22553] [client 45.148.10.99:48478] [client 45.148.10.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.svn/entries"] [unique_id "aYxpRifg2TagwM3bvQPzNQAAAU4"]
[Wed Feb 11 21:41:06.773841 2026] [:error] [pid 28073:tid 28089] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Feb 11 21:41:07.027824 2026] [:error] [pid 28073:tid 28083] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/.info.php
[Wed Feb 11 21:41:07.285287 2026] [:error] [pid 28073:tid 28099] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Wed Feb 11 21:41:07.539896 2026] [:error] [pid 28073:tid 28076] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Feb 11 21:41:07.793079 2026] [:error] [pid 28073:tid 28095] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Feb 11 21:41:08.048105 2026] [:error] [pid 28073:tid 28080] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Wed Feb 11 21:41:08.302251 2026] [:error] [pid 28073:tid 28075] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 11 21:41:08.556273 2026] [:error] [pid 28073:tid 28094] [client 20.107.195.240:62835] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Feb 11 22:10:46.483196 2026] [:error] [pid 28073:tid 28090] [client 185.231.100.76:49950] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aYyN5oeHYIlOlF-DsMwIwwAAAM8"]
[Wed Feb 11 22:10:48.287103 2026] [:error] [pid 27966:tid 28034] [client 185.231.100.76:51986] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aYyN6F8HJ9ydyf0SPu7TngAAAIQ"]
[Wed Feb 11 22:10:50.270697 2026] [:error] [pid 22570:tid 22605] [client 185.231.100.76:51988] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYyN6iE5uSe043FXwQqPEAAAAcU"]
[Wed Feb 11 22:10:52.259084 2026] [:error] [pid 28073:tid 28084] [client 185.231.100.76:51990] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aYyN7IeHYIlOlF-DsMwIyAAAAMk"]
[Wed Feb 11 22:10:54.097846 2026] [:error] [pid 27965:tid 28023] [client 185.231.100.76:35356] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYyN7tHLAUAIo8qpZyF-QAAAAFQ"]
[Wed Feb 11 22:10:56.084059 2026] [:error] [pid 22537:tid 22545] [client 185.231.100.76:35364] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYyN8Cfg2TagwM3bvQMTjwAAAUY"]
[Wed Feb 11 22:10:58.121330 2026] [:error] [pid 17401:tid 17403] [client 185.231.100.76:35374] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYyN8g0lHeayTY40t35_5gAAAQA"]
[Wed Feb 11 22:11:00.198308 2026] [:error] [pid 22537:tid 22551] [client 185.231.100.76:35384] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYyN9Cfg2TagwM3bvQMTkgAAAUw"]
[Wed Feb 11 22:11:02.216446 2026] [:error] [pid 17401:tid 17415] [client 185.231.100.76:35396] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYyN9g0lHeayTY40t35_7QAAAQw"]
[Wed Feb 11 22:11:04.097758 2026] [:error] [pid 28073:tid 28098] [client 185.231.100.76:50628] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYyN-IeHYIlOlF-DsMwI1QAAANc"]
[Wed Feb 11 22:11:06.103984 2026] [:error] [pid 27964:tid 27979] [client 185.231.100.76:50636] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aYyN-sp0XgWYHLcQtEgAvgAAAAQ"]
[Wed Feb 11 22:11:08.133915 2026] [:error] [pid 27964:tid 27993] [client 185.231.100.76:50652] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYyN_Mp0XgWYHLcQtEgAvwAAABI"]
[Wed Feb 11 22:11:10.185374 2026] [:error] [pid 22570:tid 22610] [client 185.231.100.76:50668] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aYyN_iE5uSe043FXwQqPGwAAAco"]
[Wed Feb 11 22:11:12.262609 2026] [:error] [pid 22570:tid 22609] [client 185.231.100.76:50684] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aYyOACE5uSe043FXwQqPIwAAAck"]
[Wed Feb 11 22:11:14.110371 2026] [:error] [pid 22537:tid 22543] [client 185.231.100.76:51540] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aYyOAifg2TagwM3bvQMTnwAAAUQ"]
[Wed Feb 11 22:11:16.119360 2026] [:error] [pid 22569:tid 22578] [client 185.231.100.76:51554] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aYyOBMAhSI7iX9G3enhNhwAAAYU"]
[Wed Feb 11 22:11:18.124602 2026] [:error] [pid 22537:tid 22548] [client 185.231.100.76:51558] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aYyOBifg2TagwM3bvQMTowAAAUk"]
[Wed Feb 11 22:11:20.123880 2026] [:error] [pid 17401:tid 17422] [client 185.231.100.76:51564] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYyOCA0lHeayTY40t35__AAAARM"]
[Wed Feb 11 22:11:22.149310 2026] [:error] [pid 22537:tid 22545] [client 185.231.100.76:51588] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aYyOCifg2TagwM3bvQMTqQAAAUY"]
[Wed Feb 11 22:11:24.183953 2026] [:error] [pid 17401:tid 17411] [client 185.231.100.76:38712] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYyODA0lHeayTY40t36AAAAAAQg"]
[Wed Feb 11 22:11:26.213448 2026] [:error] [pid 28073:tid 28088] [client 185.231.100.76:38714] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aYyODoeHYIlOlF-DsMwI4gAAAM0"]
[Wed Feb 11 22:11:28.269005 2026] [:error] [pid 27965:tid 28012] [client 185.231.100.76:38720] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYyOENHLAUAIo8qpZyF-VgAAAEk"]
[Wed Feb 11 22:11:30.371320 2026] [:error] [pid 28073:tid 28080] [client 185.231.100.76:38730] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aYyOEoeHYIlOlF-DsMwI6gAAAMU"]
[Wed Feb 11 22:11:32.289015 2026] [:error] [pid 27964:tid 27976] [client 185.231.100.76:38744] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aYyOFMp0XgWYHLcQtEgA1QAAAAE"]
[Wed Feb 11 22:11:34.309905 2026] [:error] [pid 17401:tid 17417] [client 185.231.100.76:46212] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aYyOFg0lHeayTY40t36ACQAAAQ4"]
[Wed Feb 11 22:11:36.320212 2026] [:error] [pid 28073:tid 28095] [client 185.231.100.76:46216] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYyOGIeHYIlOlF-DsMwI8QAAANQ"]
[Wed Feb 11 22:11:38.331124 2026] [:error] [pid 27965:tid 28020] [client 185.231.100.76:46230] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aYyOGtHLAUAIo8qpZyF-YAAAAFE"]
[Wed Feb 11 22:11:40.216153 2026] [:error] [pid 28073:tid 28089] [client 185.231.100.76:46240] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aYyOHIeHYIlOlF-DsMwI8wAAAM4"]
[Wed Feb 11 22:15:23.278690 2026] [:error] [pid 22569:tid 22579] [client 185.231.100.76:35632] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYyO-8AhSI7iX9G3enhONQAAAYY"]
[Wed Feb 11 22:15:25.239619 2026] [:error] [pid 27965:tid 28004] [client 185.231.100.76:43870] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYyO_dHLAUAIo8qpZyF-9wAAAEE"]
[Wed Feb 11 22:15:27.226835 2026] [:error] [pid 17401:tid 17418] [client 185.231.100.76:43872] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYyO_w0lHeayTY40t36ApAAAAQ8"]
[Wed Feb 11 22:15:29.228898 2026] [:error] [pid 22569:tid 22595] [client 185.231.100.76:43874] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aYyPAcAhSI7iX9G3enhOOgAAAZY"]
[Wed Feb 11 22:15:31.301078 2026] [:error] [pid 22537:tid 22544] [client 185.231.100.76:43890] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYyPAyfg2TagwM3bvQMULQAAAUU"]
[Wed Feb 11 22:15:33.251210 2026] [:error] [pid 22569:tid 22574] [client 185.231.100.76:47104] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYyPBcAhSI7iX9G3enhOPAAAAYE"]
[Wed Feb 11 22:15:35.135369 2026] [:error] [pid 27966:tid 28039] [client 185.231.100.76:47120] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYyPB18HJ9ydyf0SPu7UXgAAAIk"]
[Wed Feb 11 22:15:36.366361 2026] [:error] [pid 22569:tid 22596] [client 185.231.100.76:47122] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYyPCMAhSI7iX9G3enhOPQAAAZc"]
[Wed Feb 11 22:15:40.238796 2026] [:error] [pid 27966:tid 28035] [client 185.231.100.76:47138] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aYyPDF8HJ9ydyf0SPu7UYQAAAIU"]
[Wed Feb 11 23:12:15.690644 2026] [:error] [pid 27965:tid 28009] [client 138.124.66.82:33430] [client 138.124.66.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "aYycT9HLAUAIo8qpZyGLSwAAAEY"]
[Wed Feb 11 23:48:48.858298 2026] [:error] [pid 22570:tid 22606] [client 43.166.134.47:47938] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aYyk4CE5uSe043FXwQqkXAAAAcY"]
[Thu Feb 12 01:09:12.962348 2026] [:error] [pid 49095:tid 49174] [client 223.181.52.132:32937] [client 223.181.52.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.52.132, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYy3uIDzbTIrmslQGKTa2wAAARU"]
[Thu Feb 12 01:09:12.968848 2026] [:error] [pid 49095:tid 49174] [client 223.181.52.132:32937] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 01:58:11.632776 2026] [:error] [pid 49180:tid 49197] [client 34.148.198.67:52069] [client 34.148.198.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.198.67, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYzDM3D8wAezUtqGiU5udwAAAU8"]
[Thu Feb 12 01:58:11.635689 2026] [:error] [pid 49180:tid 49197] [client 34.148.198.67:52069] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 01:58:14.472219 2026] [:error] [pid 49180:tid 49206] [client 34.148.198.67:52069] [client 34.148.198.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYzDNnD8wAezUtqGiU5uiAAAAVg"]
[Thu Feb 12 01:58:14.974760 2026] [:error] [pid 49093:tid 49102] [client 34.148.198.67:50436] [client 34.148.198.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYzDNgYzxX9Zu4qZ-D2I6AAAAEQ"]
[Thu Feb 12 01:58:15.451689 2026] [:error] [pid 49093:tid 49105] [client 34.148.198.67:57890] [client 34.148.198.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYzDNwYzxX9Zu4qZ-D2I6QAAAEc"]
[Thu Feb 12 01:58:16.035501 2026] [:error] [pid 59768:tid 59790] [client 34.148.198.67:50736] [client 34.148.198.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYzDOC1wUqEWhF_w6UGrLwAAABQ"]
[Thu Feb 12 01:58:16.554741 2026] [:error] [pid 49093:tid 49098] [client 34.148.198.67:60277] [client 34.148.198.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYzDOAYzxX9Zu4qZ-D2I7AAAAEA"]
[Thu Feb 12 01:58:17.038159 2026] [:error] [pid 59768:tid 59779] [client 34.148.198.67:65333] [client 34.148.198.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYzDOS1wUqEWhF_w6UGrMgAAAAk"]
[Thu Feb 12 04:29:52.173654 2026] [:error] [pid 57533:tid 57580] [client 34.121.89.175:51829] [client 34.121.89.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.89.175, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aYzmwMBMbk5EwuXt4ZfEjQAAAEU"]
[Thu Feb 12 04:29:52.178258 2026] [:error] [pid 57533:tid 57580] [client 34.121.89.175:51829] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 04:29:56.241888 2026] [:error] [pid 57533:tid 57581] [client 34.121.89.175:51829] [client 34.121.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYzmxMBMbk5EwuXt4ZfEmgAAAEY"]
[Thu Feb 12 04:29:56.682114 2026] [:error] [pid 57641:tid 57660] [client 34.121.89.175:63220] [client 34.121.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYzmxHEGAHJopH5xQFwrLwAAANA"]
[Thu Feb 12 04:29:57.153172 2026] [:error] [pid 57641:tid 57651] [client 34.121.89.175:55399] [client 34.121.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYzmxXEGAHJopH5xQFwrMQAAAMg"]
[Thu Feb 12 04:29:57.584292 2026] [:error] [pid 57532:tid 57563] [client 34.121.89.175:58089] [client 34.121.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYzmxYfDW9Kql6FLJIM73AAAABU"]
[Thu Feb 12 04:29:58.078663 2026] [:error] [pid 57641:tid 57655] [client 34.121.89.175:64843] [client 34.121.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYzmxnEGAHJopH5xQFwrMwAAAMs"]
[Thu Feb 12 04:29:58.503704 2026] [:error] [pid 57532:tid 57549] [client 34.121.89.175:54960] [client 34.121.89.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYzmxofDW9Kql6FLJIM73QAAAAc"]
[Thu Feb 12 06:19:13.956300 2026] [:error] [pid 57641:tid 57649] [client 145.239.10.137:56617] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php, referer: http://pumpbooking.com/p.php
[Thu Feb 12 07:36:34.450260 2026] [:error] [pid 29368:tid 29392] [client 43.155.157.239:43574] [client 43.155.157.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aY0SgtNsoKUOH6cSt83ufgAAARY"]
[Thu Feb 12 08:22:51.140994 2026] [:error] [pid 57534:tid 57613] [client 74.248.129.73:41923] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Feb 12 08:22:51.406402 2026] [:error] [pid 57534:tid 57622] [client 74.248.129.73:41923] File does not exist: /usr/local/apache/htdocs/suspended-page/.info.php
[Thu Feb 12 08:22:51.667694 2026] [:error] [pid 57534:tid 57607] [client 74.248.129.73:41923] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 12 14:02:20.926912 2026] [:error] [pid 60619:tid 60632] [client 54.37.84.47:49878] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aY1s7EWmS0KSFtjY-wZx7wAAAAs"]
[Thu Feb 12 14:02:23.018087 2026] [:error] [pid 60619:tid 60634] [client 54.37.84.47:54856] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aY1s70WmS0KSFtjY-wZx8wAAAA0"]
[Thu Feb 12 14:02:25.170219 2026] [:error] [pid 50168:tid 50200] [client 54.37.84.47:54864] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aY1s8Qih-d2Mb0suxEccbQAAAYE"]
[Thu Feb 12 14:02:27.197710 2026] [:error] [pid 8824:tid 8843] [client 54.37.84.47:49804] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aY1s8_GtP-XDMTktFc1SRgAAAQc"]
[Thu Feb 12 14:02:29.267048 2026] [:error] [pid 60619:tid 60625] [client 54.37.84.47:49820] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aY1s9UWmS0KSFtjY-wZyAAAAAAQ"]
[Thu Feb 12 14:02:31.317318 2026] [:error] [pid 50168:tid 50219] [client 54.37.84.47:49832] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aY1s9wih-d2Mb0suxEcccwAAAZQ"]
[Thu Feb 12 14:02:33.200108 2026] [:error] [pid 50169:tid 50237] [client 54.37.84.47:49848] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aY1s-bQmA2Sph23KFXCZTAAAAcs"]
[Thu Feb 12 14:02:35.153123 2026] [:error] [pid 50169:tid 50247] [client 54.37.84.47:49854] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aY1s-7QmA2Sph23KFXCZTgAAAdU"]
[Thu Feb 12 14:02:37.370017 2026] [:error] [pid 3136:tid 3155] [client 54.37.84.47:36190] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aY1s_RiPjM-TIZEnQeFzzQAAAFE"]
[Thu Feb 12 14:02:39.264510 2026] [:error] [pid 50167:tid 50189] [client 54.37.84.47:36204] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY1s_zOWAjqME-_ayFPR1QAAANI"]
[Thu Feb 12 14:02:41.339807 2026] [:error] [pid 50168:tid 50209] [client 54.37.84.47:36210] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aY1tAQih-d2Mb0suxEccfgAAAYo"]
[Thu Feb 12 14:02:43.295748 2026] [:error] [pid 3188:tid 3198] [client 54.37.84.47:36216] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY1tA8YMNJKHx_XKcXwUXQAAAIg"]
[Thu Feb 12 14:02:45.208942 2026] [:error] [pid 50254:tid 50260] [client 54.37.84.47:36220] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY1tBVXkZ-o2G0C1rDHGfAAAAgE"]
[Thu Feb 12 14:02:47.146816 2026] [:error] [pid 50167:tid 50190] [client 54.37.84.47:56636] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aY1tBzOWAjqME-_ayFPR5QAAANM"]
[Thu Feb 12 14:02:49.206764 2026] [:error] [pid 8824:tid 8848] [client 54.37.84.47:56652] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aY1tCfGtP-XDMTktFc1SbgAAAQw"]
[Thu Feb 12 14:02:51.102856 2026] [:error] [pid 8824:tid 8854] [client 54.37.84.47:56666] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aY1tC_GtP-XDMTktFc1ScwAAARI"]
[Thu Feb 12 14:02:53.100290 2026] [:error] [pid 3136:tid 3154] [client 54.37.84.47:56670] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aY1tDRiPjM-TIZEnQeFz5gAAAFA"]
[Thu Feb 12 14:02:55.122579 2026] [:error] [pid 60619:tid 60631] [client 54.37.84.47:56672] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aY1tD0WmS0KSFtjY-wZyKQAAAAo"]
[Thu Feb 12 14:02:56.976098 2026] [:error] [pid 3136:tid 3148] [client 54.37.84.47:45724] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aY1tEBiPjM-TIZEnQeFz7wAAAEo"]
[Thu Feb 12 14:02:58.940367 2026] [:error] [pid 3136:tid 3138] [client 54.37.84.47:45730] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aY1tEhiPjM-TIZEnQeFz8wAAAEA"]
[Thu Feb 12 14:03:00.775109 2026] [:error] [pid 50168:tid 50203] [client 54.37.84.47:45746] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aY1tFAih-d2Mb0suxEccpQAAAYQ"]
[Thu Feb 12 14:03:02.887506 2026] [:error] [pid 50168:tid 50199] [client 54.37.84.47:45752] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY1tFgih-d2Mb0suxEccqwAAAYA"]
[Thu Feb 12 14:03:04.867243 2026] [:error] [pid 50167:tid 50186] [client 54.37.84.47:45758] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aY1tGDOWAjqME-_ayFPR9wAAAM8"]
[Thu Feb 12 14:03:06.806822 2026] [:error] [pid 50254:tid 50276] [client 54.37.84.47:57148] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aY1tGlXkZ-o2G0C1rDHGowAAAhE"]
[Thu Feb 12 14:03:08.857512 2026] [:error] [pid 3188:tid 3196] [client 54.37.84.47:57152] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aY1tHMYMNJKHx_XKcXwUfAAAAIY"]
[Thu Feb 12 14:03:10.731387 2026] [:error] [pid 50167:tid 50191] [client 54.37.84.47:57168] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY1tHjOWAjqME-_ayFPR_wAAANQ"]
[Thu Feb 12 14:03:12.705643 2026] [:error] [pid 50167:tid 50178] [client 54.37.84.47:57176] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aY1tIDOWAjqME-_ayFPSAgAAAMc"]
[Thu Feb 12 14:03:14.639507 2026] [:error] [pid 50254:tid 50276] [client 54.37.84.47:57180] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aY1tIlXkZ-o2G0C1rDHGrgAAAhE"]
[Thu Feb 12 14:03:16.617490 2026] [:error] [pid 50167:tid 50188] [client 54.37.84.47:55488] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aY1tJDOWAjqME-_ayFPSBwAAANE"]
[Thu Feb 12 14:03:18.375304 2026] [:error] [pid 50169:tid 50235] [client 54.37.84.47:55490] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aY1tJrQmA2Sph23KFXCZfwAAAck"]
[Thu Feb 12 14:03:39.497394 2026] [:error] [pid 60619:tid 60640] [client 54.37.84.47:55506] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aY1tO0WmS0KSFtjY-wZydAAAABM"]
[Thu Feb 12 14:03:41.441863 2026] [:error] [pid 8824:tid 8841] [client 54.37.84.47:39906] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY1tPfGtP-XDMTktFc1SrgAAAQU"]
[Thu Feb 12 14:03:43.252152 2026] [:error] [pid 50168:tid 50201] [client 54.37.84.47:39912] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aY1tPwih-d2Mb0suxEcc5gAAAYI"]
[Thu Feb 12 14:03:45.084127 2026] [:error] [pid 50168:tid 50202] [client 54.37.84.47:39914] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aY1tQQih-d2Mb0suxEcc6wAAAYM"]
[Thu Feb 12 14:03:46.935898 2026] [:error] [pid 3188:tid 3207] [client 54.37.84.47:54472] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aY1tQsYMNJKHx_XKcXwUqAAAAJE"]
[Thu Feb 12 14:03:48.929909 2026] [:error] [pid 60619:tid 60632] [client 54.37.84.47:54480] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aY1tREWmS0KSFtjY-wZyhAAAAAs"]
[Thu Feb 12 14:03:50.890775 2026] [:error] [pid 50167:tid 50171] [client 54.37.84.47:54482] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aY1tRjOWAjqME-_ayFPSLgAAAMA"]
[Thu Feb 12 14:03:53.592193 2026] [:error] [pid 8824:tid 8853] [client 54.37.84.47:54490] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY1tSfGtP-XDMTktFc1SuAAAARE"]
[Thu Feb 12 14:03:57.397615 2026] [:error] [pid 50254:tid 50259] [client 54.37.84.47:53742] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY1tTVXkZ-o2G0C1rDHG6QAAAgA"]
[Thu Feb 12 16:06:22.332341 2026] [:error] [pid 21434:tid 21497] [client 147.135.213.172:35340] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aY2J_gbL1v6OC5G-tE97jAAAAcA"]
[Thu Feb 12 16:06:24.369822 2026] [:error] [pid 21431:tid 21451] [client 147.135.213.172:35886] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aY2KAJgxKQsNF5X8gtRrowAAAM8"]
[Thu Feb 12 16:06:26.446176 2026] [:error] [pid 21431:tid 21438] [client 147.135.213.172:35890] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aY2KApgxKQsNF5X8gtRrqAAAAMI"]
[Thu Feb 12 16:06:28.458020 2026] [:error] [pid 21527:tid 21536] [client 147.135.213.172:35902] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aY2KBCaer9JPUXlMLuGX5wAAAAc"]
[Thu Feb 12 16:06:30.483475 2026] [:error] [pid 21434:tid 21500] [client 147.135.213.172:35910] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aY2KBgbL1v6OC5G-tE97mgAAAcM"]
[Thu Feb 12 16:06:32.806620 2026] [:error] [pid 39777:tid 39788] [client 147.135.213.172:38236] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aY2KCFzexR6hGUkt5pO1EQAAAEk"]
[Thu Feb 12 16:06:34.651114 2026] [:error] [pid 39777:tid 39802] [client 147.135.213.172:38240] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aY2KClzexR6hGUkt5pO1GwAAAFc"]
[Thu Feb 12 16:06:36.558833 2026] [:error] [pid 21433:tid 21490] [client 147.135.213.172:38248] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aY2KDNc_9AdG3uAKpzvPkQAAAZQ"]
[Thu Feb 12 16:06:38.435366 2026] [:error] [pid 39777:tid 39797] [client 147.135.213.172:38264] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aY2KDlzexR6hGUkt5pO1NQAAAFI"]
[Thu Feb 12 16:06:40.334989 2026] [:error] [pid 21527:tid 21547] [client 147.135.213.172:38274] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aY2KECaer9JPUXlMLuGYAAAAABI"]
[Thu Feb 12 16:06:42.267363 2026] [:error] [pid 39777:tid 39803] [client 147.135.213.172:54226] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY2KElzexR6hGUkt5pO1RQAAAFg"]
[Thu Feb 12 16:06:44.258572 2026] [:error] [pid 39777:tid 39784] [client 147.135.213.172:54230] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY2KFFzexR6hGUkt5pO1TAAAAEU"]
[Thu Feb 12 16:06:46.188128 2026] [:error] [pid 21433:tid 21484] [client 147.135.213.172:54236] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY2KFtc_9AdG3uAKpzvPpgAAAY4"]
[Thu Feb 12 16:06:48.129839 2026] [:error] [pid 21431:tid 21450] [client 147.135.213.172:54244] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY2KGJgxKQsNF5X8gtRrxgAAAM4"]
[Thu Feb 12 16:06:50.023423 2026] [:error] [pid 21527:tid 21548] [client 147.135.213.172:54256] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY2KGiaer9JPUXlMLuGYGgAAABM"]
[Thu Feb 12 16:06:51.974675 2026] [:error] [pid 39777:tid 39793] [client 147.135.213.172:46028] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY2KG1zexR6hGUkt5pO1XQAAAE4"]
[Thu Feb 12 16:06:53.985889 2026] [:error] [pid 21527:tid 21550] [client 147.135.213.172:46042] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aY2KHSaer9JPUXlMLuGYIgAAABU"]
[Thu Feb 12 16:06:56.185289 2026] [:error] [pid 21434:tid 21507] [client 147.135.213.172:46050] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aY2KIAbL1v6OC5G-tE97uAAAAco"]
[Thu Feb 12 16:06:58.123740 2026] [:error] [pid 21431:tid 21455] [client 147.135.213.172:46064] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aY2KIpgxKQsNF5X8gtRr3wAAANM"]
[Thu Feb 12 16:07:00.174831 2026] [:error] [pid 39777:tid 39793] [client 147.135.213.172:46072] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aY2KJFzexR6hGUkt5pO1dAAAAE4"]
[Thu Feb 12 16:07:02.303509 2026] [:error] [pid 39777:tid 39802] [client 147.135.213.172:52414] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aY2KJlzexR6hGUkt5pO1gQAAAFc"]
[Thu Feb 12 16:07:04.094651 2026] [:error] [pid 39777:tid 39791] [client 147.135.213.172:52416] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aY2KKFzexR6hGUkt5pO1iAAAAEw"]
[Thu Feb 12 16:07:06.030918 2026] [:error] [pid 21431:tid 21443] [client 147.135.213.172:52428] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aY2KKpgxKQsNF5X8gtRr-AAAAMc"]
[Thu Feb 12 16:07:07.847651 2026] [:error] [pid 21433:tid 21474] [client 147.135.213.172:52444] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aY2KK9c_9AdG3uAKpzvP1gAAAYQ"]
[Thu Feb 12 16:07:09.659790 2026] [:error] [pid 21527:tid 21541] [client 147.135.213.172:52454] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aY2KLSaer9JPUXlMLuGYVQAAAAw"]
[Thu Feb 12 16:07:11.564502 2026] [:error] [pid 21434:tid 21505] [client 147.135.213.172:40840] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY2KLwbL1v6OC5G-tE975wAAAcg"]
[Thu Feb 12 16:07:13.515322 2026] [:error] [pid 21527:tid 21547] [client 147.135.213.172:40850] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY2KMSaer9JPUXlMLuGYYQAAABI"]
[Thu Feb 12 16:07:15.420610 2026] [:error] [pid 21434:tid 21521] [client 147.135.213.172:40854] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY2KMwbL1v6OC5G-tE977gAAAdg"]
[Thu Feb 12 16:07:17.331770 2026] [:error] [pid 21431:tid 21446] [client 147.135.213.172:40870] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY2KNZgxKQsNF5X8gtRsHgAAAMo"]
[Thu Feb 12 16:07:19.218701 2026] [:error] [pid 21431:tid 21444] [client 147.135.213.172:40874] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY2KN5gxKQsNF5X8gtRsKwAAAMg"]
[Thu Feb 12 16:07:39.524601 2026] [:error] [pid 39777:tid 39802] [client 147.135.213.172:40880] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aY2KS1zexR6hGUkt5pO1-gAAAFc"]
[Thu Feb 12 16:07:41.348141 2026] [:error] [pid 21527:tid 21538] [client 147.135.213.172:46290] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aY2KTSaer9JPUXlMLuGYqQAAAAk"]
[Thu Feb 12 16:07:43.269850 2026] [:error] [pid 21433:tid 21482] [client 147.135.213.172:46304] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY2KT9c_9AdG3uAKpzvQGwAAAYw"]
[Thu Feb 12 16:07:45.163273 2026] [:error] [pid 21527:tid 21545] [client 147.135.213.172:46318] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aY2KUSaer9JPUXlMLuGYtQAAABA"]
[Thu Feb 12 16:07:47.191182 2026] [:error] [pid 21433:tid 21483] [client 147.135.213.172:46328] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aY2KU9c_9AdG3uAKpzvQIQAAAY0"]
[Thu Feb 12 16:07:49.105079 2026] [:error] [pid 21433:tid 21491] [client 147.135.213.172:46332] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aY2KVdc_9AdG3uAKpzvQJQAAAZU"]
[Thu Feb 12 16:07:50.998251 2026] [:error] [pid 21527:tid 21545] [client 147.135.213.172:46348] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY2KViaer9JPUXlMLuGYvgAAABA"]
[Thu Feb 12 16:07:52.930347 2026] [:error] [pid 21434:tid 21511] [client 147.135.213.172:53008] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aY2KWAbL1v6OC5G-tE98QgAAAc4"]
[Thu Feb 12 16:07:54.828157 2026] [:error] [pid 21527:tid 21548] [client 147.135.213.172:53020] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY2KWiaer9JPUXlMLuGYyQAAABM"]
[Thu Feb 12 16:07:56.755089 2026] [:error] [pid 21527:tid 21544] [client 147.135.213.172:53032] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY2KXCaer9JPUXlMLuGYzgAAAA8"]
[Thu Feb 12 16:07:58.647060 2026] [:error] [pid 21527:tid 21530] [client 147.135.213.172:53036] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aY2KXiaer9JPUXlMLuGY0wAAAAE"]
[Thu Feb 12 16:08:00.539016 2026] [:error] [pid 39777:tid 39780] [client 147.135.213.172:53048] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aY2KYFzexR6hGUkt5pO2IgAAAEE"]
[Thu Feb 12 16:08:02.480873 2026] [:error] [pid 21433:tid 21494] [client 147.135.213.172:53510] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aY2KYtc_9AdG3uAKpzvQQQAAAZg"]
[Thu Feb 12 16:08:04.437508 2026] [:error] [pid 21433:tid 21482] [client 147.135.213.172:53516] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aY2KZNc_9AdG3uAKpzvQRQAAAYw"]
[Thu Feb 12 16:08:07.260613 2026] [:error] [pid 21431:tid 21442] [client 147.135.213.172:53524] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY2KZ5gxKQsNF5X8gtRsoAAAAMY"]
[Thu Feb 12 16:08:11.053407 2026] [:error] [pid 21434:tid 21501] [client 147.135.213.172:53528] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY2KawbL1v6OC5G-tE98ZAAAAcQ"]
[Thu Feb 12 18:57:51.301855 2026] [:error] [pid 63418:tid 63498] [client 79.120.76.144:40506] [client 79.120.76.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aY2yL9zjh-bbJnStPZK4tQAAAJY"]
[Thu Feb 12 19:05:51.861520 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Feb 12 19:05:52.133673 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/xoot.php
[Thu Feb 12 19:05:52.379593 2026] [:error] [pid 65064:tid 65069] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/er.php
[Thu Feb 12 19:05:52.623327 2026] [:error] [pid 65064:tid 65087] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/fault.php
[Thu Feb 12 19:05:53.083716 2026] [:error] [pid 65064:tid 65084] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/x2x.php
[Thu Feb 12 19:05:53.420566 2026] [:error] [pid 65064:tid 65073] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Thu Feb 12 19:05:53.666594 2026] [:error] [pid 65064:tid 65088] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Thu Feb 12 19:05:53.910536 2026] [:error] [pid 65064:tid 65089] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/leuk.php
[Thu Feb 12 19:05:54.247396 2026] [:error] [pid 65064:tid 65074] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/bc-456.php
[Thu Feb 12 19:05:54.500361 2026] [:error] [pid 65064:tid 65079] [client 158.158.98.244:16909] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Thu Feb 12 19:05:54.975155 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:16909] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bvb.php"] [unique_id "aY20EhOvRgscTcqsMBm5KQAAAMQ"]
[Thu Feb 12 19:05:56.767238 2026] [:error] [pid 65064:tid 65075] [client 158.158.98.244:42704] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bvb.php"] [unique_id "aY20FBOvRgscTcqsMBm5LAAAAMg"]
[Thu Feb 12 19:05:59.049149 2026] [:error] [pid 63416:tid 63428] [client 158.158.98.244:27041] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bvb.php"] [unique_id "aY20F72wmecPaCHcM2-hJgAAAYc"]
[Thu Feb 12 19:06:00.092835 2026] [:error] [pid 63511:tid 63515] [client 158.158.98.244:38573] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bvb.php"] [unique_id "aY20GKQCQbD5BgeyIk3t1gAAAAI"]
[Thu Feb 12 19:06:01.326662 2026] [:error] [pid 65064:tid 65088] [client 158.158.98.244:14002] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aY20GROvRgscTcqsMBm5NwAAANU"]
[Thu Feb 12 19:06:03.176604 2026] [:error] [pid 63417:tid 63472] [client 158.158.98.244:12101] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aY20G_8gSb97qRMtXCLDawAAAFc"]
[Thu Feb 12 19:06:04.902251 2026] [:error] [pid 63511:tid 63526] [client 158.158.98.244:37092] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aY20HKQCQbD5BgeyIk3t4QAAAA0"]
[Thu Feb 12 19:06:08.061408 2026] [:error] [pid 63417:tid 63451] [client 158.158.98.244:42697] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aY20IP8gSb97qRMtXCLDdAAAAEI"]
[Thu Feb 12 19:06:10.878421 2026] [:error] [pid 63416:tid 63431] [client 158.158.98.244:38581] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aY20Ir2wmecPaCHcM2-hMwAAAYo"]
[Thu Feb 12 19:06:11.837346 2026] [:error] [pid 63416:tid 63421] [client 158.158.98.244:42213] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aY20I72wmecPaCHcM2-hNwAAAYA"]
[Thu Feb 12 19:06:13.749705 2026] [:error] [pid 63417:tid 63473] [client 158.158.98.244:15178] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aY20Jf8gSb97qRMtXCLDgwAAAFg"]
[Thu Feb 12 19:06:18.302487 2026] [:error] [pid 63418:tid 63488] [client 158.158.98.244:10249] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aY20Ktzjh-bbJnStPZK7kgAAAIw"]
[Thu Feb 12 19:06:19.809107 2026] [:error] [pid 63511:tid 63525] [client 158.158.98.244:12926] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aY20K6QCQbD5BgeyIk3uBwAAAAw"]
[Thu Feb 12 19:06:22.026705 2026] [:error] [pid 65064:tid 65074] [client 158.158.98.244:12902] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aY20LhOvRgscTcqsMBm5UQAAAMc"]
[Thu Feb 12 19:06:23.694424 2026] [:error] [pid 63511:tid 63537] [client 158.158.98.244:24480] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aY20L6QCQbD5BgeyIk3uDgAAABg"]
[Thu Feb 12 19:06:24.487615 2026] [:error] [pid 65064:tid 65073] [client 158.158.98.244:26008] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aY20MBOvRgscTcqsMBm5VgAAAMY"]
[Thu Feb 12 19:06:26.078314 2026] [:error] [pid 65064:tid 65070] [client 158.158.98.244:24502] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aY20MhOvRgscTcqsMBm5XAAAAMM"]
[Thu Feb 12 19:06:27.647709 2026] [:error] [pid 65064:tid 65079] [client 158.158.98.244:26026] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aY20MxOvRgscTcqsMBm5XwAAAMw"]
[Thu Feb 12 19:06:28.756685 2026] [:error] [pid 63416:tid 63436] [client 158.158.98.244:34511] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aY20NL2wmecPaCHcM2-hSwAAAY8"]
[Thu Feb 12 19:06:30.803680 2026] [:error] [pid 65064:tid 65067] [client 158.158.98.244:3676] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aY20NhOvRgscTcqsMBm5aAAAAMA"]
[Thu Feb 12 19:06:32.959649 2026] [:error] [pid 65064:tid 65090] [client 158.158.98.244:47124] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aY20OBOvRgscTcqsMBm5cAAAANc"]
[Thu Feb 12 19:06:34.347869 2026] [:error] [pid 65064:tid 65080] [client 158.158.98.244:13953] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aY20OhOvRgscTcqsMBm5eQAAAM0"]
[Thu Feb 12 19:06:36.338328 2026] [:error] [pid 63511:tid 63528] [client 158.158.98.244:34549] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aY20PKQCQbD5BgeyIk3uIQAAAA8"]
[Thu Feb 12 19:06:37.490847 2026] [:error] [pid 63418:tid 63484] [client 158.158.98.244:21961] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aY20Pdzjh-bbJnStPZK7tQAAAIg"]
[Thu Feb 12 19:06:38.621686 2026] [:error] [pid 65064:tid 65069] [client 158.158.98.244:22472] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aY20PhOvRgscTcqsMBm5jQAAAMI"]
[Thu Feb 12 19:06:39.379989 2026] [:error] [pid 63416:tid 63435] [client 158.158.98.244:35070] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aY20P72wmecPaCHcM2-hWQAAAY4"]
[Thu Feb 12 19:06:42.803289 2026] [:error] [pid 65064:tid 65089] [client 158.158.98.244:45570] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aY20QhOvRgscTcqsMBm5mAAAANY"]
[Thu Feb 12 19:06:43.847628 2026] [:error] [pid 65064:tid 65075] [client 158.158.98.244:34539] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aY20QxOvRgscTcqsMBm5nAAAAMg"]
[Thu Feb 12 19:06:46.360658 2026] [:error] [pid 63416:tid 63432] [client 158.158.98.244:24491] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aY20Rr2wmecPaCHcM2-hawAAAYs"]
[Thu Feb 12 19:06:47.277046 2026] [:error] [pid 63417:tid 63464] [client 158.158.98.244:22942] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aY20R_8gSb97qRMtXCLDrwAAAE8"]
[Thu Feb 12 19:06:48.082255 2026] [:error] [pid 63511:tid 63527] [client 158.158.98.244:34498] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aY20SKQCQbD5BgeyIk3uOQAAAA4"]
[Thu Feb 12 19:06:49.450817 2026] [:error] [pid 63417:tid 63460] [client 158.158.98.244:13962] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aY20Sf8gSb97qRMtXCLDtAAAAEs"]
[Thu Feb 12 19:06:50.541472 2026] [:error] [pid 63418:tid 63497] [client 158.158.98.244:22477] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aY20Stzjh-bbJnStPZK74AAAAJU"]
[Thu Feb 12 19:06:52.302174 2026] [:error] [pid 65064:tid 65085] [client 158.158.98.244:12112] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aY20TBOvRgscTcqsMBm5rQAAANI"]
[Thu Feb 12 19:06:55.150643 2026] [:error] [pid 63418:tid 63489] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Feb 12 19:06:55.392370 2026] [:error] [pid 63418:tid 63500] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/lts.php
[Thu Feb 12 19:06:55.641049 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Thu Feb 12 19:06:55.895321 2026] [:error] [pid 63418:tid 63485] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/login8.php
[Thu Feb 12 19:06:56.203350 2026] [:error] [pid 63418:tid 63494] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/nnyvn.php
[Thu Feb 12 19:06:56.445272 2026] [:error] [pid 63418:tid 63490] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Thu Feb 12 19:06:56.715797 2026] [:error] [pid 63418:tid 63477] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/lul.php
[Thu Feb 12 19:06:56.957410 2026] [:error] [pid 63418:tid 63495] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Thu Feb 12 19:06:57.376092 2026] [:error] [pid 63418:tid 63498] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Feb 12 19:06:57.631152 2026] [:error] [pid 63418:tid 63496] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/ya.php
[Thu Feb 12 19:06:57.895357 2026] [:error] [pid 63418:tid 63493] [client 158.158.98.244:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Thu Feb 12 19:06:58.398697 2026] [:error] [pid 63418:tid 63486] [client 158.158.98.244:26033] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aY20Utzjh-bbJnStPZK7-wAAAIo"]
[Thu Feb 12 19:07:01.583257 2026] [:error] [pid 63417:tid 63463] [client 158.158.98.244:27061] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aY20Vf8gSb97qRMtXCLDygAAAE4"]
[Thu Feb 12 19:07:05.833245 2026] [:error] [pid 63416:tid 63430] [client 158.158.98.244:27010] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aY20Wb2wmecPaCHcM2-hkgAAAYk"]
[Thu Feb 12 19:07:07.628057 2026] [:error] [pid 65064:tid 65076] [client 158.158.98.244:28350] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aY20WxOvRgscTcqsMBm53wAAAMk"]
[Thu Feb 12 19:07:08.402363 2026] [:error] [pid 63511:tid 63537] [client 158.158.98.244:13990] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftem.php"] [unique_id "aY20XKQCQbD5BgeyIk3uWgAAABg"]
[Thu Feb 12 19:07:10.298558 2026] [:error] [pid 63416:tid 63443] [client 158.158.98.244:21042] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftem.php"] [unique_id "aY20Xr2wmecPaCHcM2-hmgAAAZY"]
[Thu Feb 12 19:07:12.807680 2026] [:error] [pid 63418:tid 63491] [client 158.158.98.244:34552] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftem.php"] [unique_id "aY20YNzjh-bbJnStPZK8GQAAAI8"]
[Thu Feb 12 19:07:14.046368 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:34521] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ftem.php"] [unique_id "aY20Yv8gSb97qRMtXCLD0QAAAEA"]
[Thu Feb 12 19:07:15.699001 2026] [:error] [pid 65064:tid 65069] [client 158.158.98.244:42739] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/7wom.php"] [unique_id "aY20YxOvRgscTcqsMBm58QAAAMI"]
[Thu Feb 12 19:07:16.751038 2026] [:error] [pid 63416:tid 63426] [client 158.158.98.244:28302] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/7wom.php"] [unique_id "aY20ZL2wmecPaCHcM2-hrAAAAYU"]
[Thu Feb 12 19:07:18.919515 2026] [:error] [pid 63417:tid 63454] [client 158.158.98.244:44349] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/7wom.php"] [unique_id "aY20Zv8gSb97qRMtXCLD3QAAAEU"]
[Thu Feb 12 19:07:23.656428 2026] [:error] [pid 63417:tid 63465] [client 158.158.98.244:22497] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/7wom.php"] [unique_id "aY20a_8gSb97qRMtXCLD8wAAAFA"]
[Thu Feb 12 19:07:25.460591 2026] [:error] [pid 63418:tid 63484] [client 158.158.98.244:53092] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aY20bdzjh-bbJnStPZK8lwAAAIg"]
[Thu Feb 12 19:07:27.120123 2026] [:error] [pid 63417:tid 63456] [client 158.158.98.244:53068] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aY20b_8gSb97qRMtXCLEBwAAAEc"]
[Thu Feb 12 19:07:28.831504 2026] [:error] [pid 65064:tid 65087] [client 158.158.98.244:21932] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aY20cBOvRgscTcqsMBm6KwAAANQ"]
[Thu Feb 12 19:07:31.708717 2026] [:error] [pid 63511:tid 63515] [client 158.158.98.244:53083] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aY20c6QCQbD5BgeyIk3upgAAAAI"]
[Thu Feb 12 19:07:33.116473 2026] [:error] [pid 63417:tid 63456] [client 158.158.98.244:43804] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aY20df8gSb97qRMtXCLEDwAAAEc"]
[Thu Feb 12 19:07:36.195637 2026] [:error] [pid 63417:tid 63454] [client 158.158.98.244:31973] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aY20eP8gSb97qRMtXCLEGgAAAEU"]
[Thu Feb 12 19:07:38.959434 2026] [:error] [pid 63511:tid 63526] [client 158.158.98.244:31964] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aY20eqQCQbD5BgeyIk3uswAAAA0"]
[Thu Feb 12 19:07:44.774194 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:37801] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aY20gBOvRgscTcqsMBm6SQAAAM4"]
[Thu Feb 12 19:07:46.127793 2026] [:error] [pid 63418:tid 63483] [client 158.158.98.244:12472] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aY20gtzjh-bbJnStPZK8ygAAAIc"]
[Thu Feb 12 19:07:47.789540 2026] [:error] [pid 65064:tid 65075] [client 158.158.98.244:12468] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aY20gxOvRgscTcqsMBm6UwAAAMg"]
[Thu Feb 12 19:07:49.332963 2026] [:error] [pid 63416:tid 63439] [client 158.158.98.244:12824] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aY20hb2wmecPaCHcM2-h8QAAAZI"]
[Thu Feb 12 19:07:51.186387 2026] [:error] [pid 63418:tid 63496] [client 158.158.98.244:30414] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aY20h9zjh-bbJnStPZK80AAAAJQ"]
[Thu Feb 12 19:07:52.942631 2026] [:error] [pid 63417:tid 63465] [client 158.158.98.244:12464] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aY20iP8gSb97qRMtXCLEKQAAAFA"]
[Thu Feb 12 19:07:54.752482 2026] [:error] [pid 63418:tid 63486] [client 158.158.98.244:49998] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aY20itzjh-bbJnStPZK81gAAAIo"]
[Thu Feb 12 19:07:55.626866 2026] [:error] [pid 63417:tid 63453] [client 158.158.98.244:17957] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aY20i_8gSb97qRMtXCLEMwAAAEQ"]
[Thu Feb 12 19:07:56.510061 2026] [:error] [pid 63511:tid 63516] [client 158.158.98.244:31875] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aY20jKQCQbD5BgeyIk3uzgAAAAM"]
[Thu Feb 12 19:07:58.399878 2026] [:error] [pid 63511:tid 63532] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Thu Feb 12 19:07:58.666780 2026] [:error] [pid 63511:tid 63513] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Feb 12 19:07:59.049182 2026] [:error] [pid 63511:tid 63519] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/fot.php
[Thu Feb 12 19:07:59.311234 2026] [:error] [pid 63511:tid 63516] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Thu Feb 12 19:07:59.567141 2026] [:error] [pid 63511:tid 63529] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/forbidals.php
[Thu Feb 12 19:07:59.810971 2026] [:error] [pid 63511:tid 63537] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Thu Feb 12 19:08:00.076608 2026] [:error] [pid 63511:tid 63522] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/dev1s.php
[Thu Feb 12 19:08:00.355427 2026] [:error] [pid 63511:tid 63515] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/ffd.php
[Thu Feb 12 19:08:00.598878 2026] [:error] [pid 63511:tid 63532] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/admiin.php
[Thu Feb 12 19:08:00.848895 2026] [:error] [pid 63511:tid 63513] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Thu Feb 12 19:08:01.226868 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:11694] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Feb 12 19:08:01.471988 2026] [:error] [pid 63511:tid 63533] [client 158.158.98.244:11694] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20kaQCQbD5BgeyIk3u6QAAABQ"]
[Thu Feb 12 19:08:02.335177 2026] [:error] [pid 63416:tid 63437] [client 158.158.98.244:15125] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20kr2wmecPaCHcM2-iCAAAAZA"]
[Thu Feb 12 19:08:04.441052 2026] [:error] [pid 63511:tid 63530] [client 158.158.98.244:15906] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20lKQCQbD5BgeyIk3u7wAAABE"]
[Thu Feb 12 19:08:05.822910 2026] [:error] [pid 63511:tid 63525] [client 158.158.98.244:49028] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20laQCQbD5BgeyIk3u9QAAAAw"]
[Thu Feb 12 19:08:06.978727 2026] [:error] [pid 63416:tid 63423] [client 158.158.98.244:18475] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aY20lr2wmecPaCHcM2-iEwAAAYI"]
[Thu Feb 12 19:08:09.153978 2026] [:error] [pid 63418:tid 63479] [client 158.158.98.244:31912] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aY20mdzjh-bbJnStPZK85QAAAIM"]
[Thu Feb 12 19:08:09.801595 2026] [:error] [pid 63511:tid 63519] [client 158.158.98.244:30968] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aY20maQCQbD5BgeyIk3u_QAAAAY"]
[Thu Feb 12 19:08:11.355851 2026] [:error] [pid 65064:tid 65089] [client 158.158.98.244:10068] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aY20mxOvRgscTcqsMBm6hwAAANY"]
[Thu Feb 12 19:08:13.494817 2026] [:error] [pid 63418:tid 63487] [client 158.158.98.244:36049] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aY20ndzjh-bbJnStPZK86QAAAIs"]
[Thu Feb 12 19:08:16.809169 2026] [:error] [pid 65064:tid 65072] [client 158.158.98.244:14061] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aY20oBOvRgscTcqsMBm6vQAAAMU"]
[Thu Feb 12 19:08:18.255968 2026] [:error] [pid 63511:tid 63525] [client 158.158.98.244:12518] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aY20oqQCQbD5BgeyIk3vDwAAAAw"]
[Thu Feb 12 19:08:19.374151 2026] [:error] [pid 63416:tid 63426] [client 158.158.98.244:14049] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aY20o72wmecPaCHcM2-iRQAAAYU"]
[Thu Feb 12 19:08:21.603782 2026] [:error] [pid 63416:tid 63422] [client 158.158.98.244:47157] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aY20pb2wmecPaCHcM2-iSgAAAYE"]
[Thu Feb 12 19:08:22.591157 2026] [:error] [pid 65064:tid 65068] [client 158.158.98.244:45552] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aY20phOvRgscTcqsMBm6zQAAAME"]
[Thu Feb 12 19:08:23.398489 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:34972] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aY20p9zjh-bbJnStPZK8_AAAAIY"]
[Thu Feb 12 19:08:26.638510 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:43313] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/axx.php"] [unique_id "aY20qhOvRgscTcqsMBm62wAAAMQ"]
[Thu Feb 12 19:08:29.425337 2026] [:error] [pid 63416:tid 63432] [client 158.158.98.244:40807] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20rb2wmecPaCHcM2-iUwAAAYs"]
[Thu Feb 12 19:08:31.163856 2026] [:error] [pid 63418:tid 63485] [client 158.158.98.244:33523] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20r9zjh-bbJnStPZK9BgAAAIk"]
[Thu Feb 12 19:08:32.453337 2026] [:error] [pid 65064:tid 65077] [client 158.158.98.244:35994] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20sBOvRgscTcqsMBm69wAAAMo"]
[Thu Feb 12 19:08:34.168431 2026] [:error] [pid 63416:tid 63432] [client 158.158.98.244:27073] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aY20sr2wmecPaCHcM2-iWAAAAYs"]
[Thu Feb 12 19:08:38.268846 2026] [:error] [pid 65064:tid 65076] [client 158.158.98.244:14378] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aY20thOvRgscTcqsMBm6_gAAAMk"]
[Thu Feb 12 19:08:40.215197 2026] [:error] [pid 63511:tid 63517] [client 158.158.98.244:44286] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aY20uKQCQbD5BgeyIk3vMwAAAAQ"]
[Thu Feb 12 19:08:41.500413 2026] [:error] [pid 63417:tid 63454] [client 158.158.98.244:28359] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aY20uf8gSb97qRMtXCLEjAAAAEU"]
[Thu Feb 12 19:08:42.256312 2026] [:error] [pid 63416:tid 63422] [client 158.158.98.244:10329] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aY20ur2wmecPaCHcM2-iYQAAAYE"]
[Thu Feb 12 19:08:43.403427 2026] [:error] [pid 63418:tid 63497] [client 158.158.98.244:13203] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aY20u9zjh-bbJnStPZK9HAAAAJU"]
[Thu Feb 12 19:08:44.846779 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:31460] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aY20vBOvRgscTcqsMBm7DgAAAMQ"]
[Thu Feb 12 19:08:46.115119 2026] [:error] [pid 63511:tid 63528] [client 158.158.98.244:31474] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aY20vqQCQbD5BgeyIk3vPAAAAA8"]
[Thu Feb 12 19:08:49.028281 2026] [:error] [pid 65064:tid 65077] [client 158.158.98.244:17419] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aY20wROvRgscTcqsMBm7GAAAAMo"]
[Thu Feb 12 19:08:50.514669 2026] [:error] [pid 65064:tid 65082] [client 158.158.98.244:24054] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aY20whOvRgscTcqsMBm7HwAAAM8"]
[Thu Feb 12 19:08:51.724986 2026] [:error] [pid 63417:tid 63469] [client 158.158.98.244:31465] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aY20w_8gSb97qRMtXCLEnwAAAFQ"]
[Thu Feb 12 19:08:53.003216 2026] [:error] [pid 63416:tid 63421] [client 158.158.98.244:24053] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aY20xb2wmecPaCHcM2-ikgAAAYA"]
[Thu Feb 12 19:08:55.408722 2026] [:error] [pid 63417:tid 63455] [client 158.158.98.244:38915] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aY20x_8gSb97qRMtXCLEpwAAAEY"]
[Thu Feb 12 19:08:56.418707 2026] [:error] [pid 63417:tid 63459] [client 158.158.98.244:35556] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aY20yP8gSb97qRMtXCLErgAAAEo"]
[Thu Feb 12 19:08:57.771527 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:47071] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aY20yf8gSb97qRMtXCLEtgAAAEA"]
[Thu Feb 12 19:09:01.161141 2026] [:error] [pid 65064:tid 65078] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Feb 12 19:09:01.406822 2026] [:error] [pid 65064:tid 65079] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/karak.php
[Thu Feb 12 19:09:01.698085 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/trd.php
[Thu Feb 12 19:09:01.942010 2026] [:error] [pid 65064:tid 65076] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Thu Feb 12 19:09:02.448215 2026] [:error] [pid 65064:tid 65072] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Thu Feb 12 19:09:02.694695 2026] [:error] [pid 65064:tid 65085] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Thu Feb 12 19:09:03.674229 2026] [:error] [pid 65064:tid 65069] [client 158.158.98.244:35574] [client 158.158.98.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.158.98.244, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY20zxOvRgscTcqsMBm7RQAAAMI"]
[Thu Feb 12 19:09:03.677612 2026] [:error] [pid 65064:tid 65069] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 19:09:03.961748 2026] [:error] [pid 65064:tid 65067] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Thu Feb 12 19:09:04.268235 2026] [:error] [pid 65064:tid 65088] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Thu Feb 12 19:09:04.511859 2026] [:error] [pid 65064:tid 65078] [client 158.158.98.244:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 12 19:09:04.752539 2026] [:error] [pid 65064:tid 65079] [client 158.158.98.244:35574] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aY200BOvRgscTcqsMBm7TgAAAMw"]
[Thu Feb 12 19:09:05.679083 2026] [:error] [pid 63511:tid 63514] [client 158.158.98.244:25591] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aY200aQCQbD5BgeyIk3vXQAAAAE"]
[Thu Feb 12 19:09:06.660866 2026] [:error] [pid 65064:tid 65075] [client 158.158.98.244:25559] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aY200hOvRgscTcqsMBm7WAAAAMg"]
[Thu Feb 12 19:09:08.725375 2026] [:error] [pid 65064:tid 65070] [client 158.158.98.244:17527] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aY201BOvRgscTcqsMBm7XQAAAMM"]
[Thu Feb 12 19:09:09.383862 2026] [:error] [pid 63511:tid 63521] [client 158.158.98.244:17486] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aY201aQCQbD5BgeyIk3vZQAAAAg"]
[Thu Feb 12 19:09:10.922982 2026] [:error] [pid 63511:tid 63525] [client 158.158.98.244:10970] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aY201qQCQbD5BgeyIk3vaQAAAAw"]
[Thu Feb 12 19:09:12.501691 2026] [:error] [pid 63416:tid 63443] [client 158.158.98.244:17474] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aY202L2wmecPaCHcM2-jGgAAAZY"]
[Thu Feb 12 19:09:13.484420 2026] [:error] [pid 63416:tid 63444] [client 158.158.98.244:23972] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aY202b2wmecPaCHcM2-jHAAAAZc"]
[Thu Feb 12 19:09:14.184643 2026] [:error] [pid 63416:tid 63441] [client 158.158.98.244:37422] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcp.php"] [unique_id "aY202r2wmecPaCHcM2-jHwAAAZQ"]
[Thu Feb 12 19:09:15.112579 2026] [:error] [pid 63416:tid 63442] [client 158.158.98.244:27533] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcp.php"] [unique_id "aY20272wmecPaCHcM2-jIwAAAZU"]
[Thu Feb 12 19:09:16.989466 2026] [:error] [pid 63418:tid 63479] [client 158.158.98.244:34006] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcp.php"] [unique_id "aY203Nzjh-bbJnStPZK9XwAAAIM"]
[Thu Feb 12 19:09:18.855258 2026] [:error] [pid 65064:tid 65091] [client 158.158.98.244:25557] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tcp.php"] [unique_id "aY203hOvRgscTcqsMBm7dAAAANg"]
[Thu Feb 12 19:09:20.459775 2026] [:error] [pid 63417:tid 63466] [client 158.158.98.244:23455] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aY204P8gSb97qRMtXCLE8wAAAFE"]
[Thu Feb 12 19:09:22.301169 2026] [:error] [pid 63417:tid 63463] [client 158.158.98.244:34010] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aY204v8gSb97qRMtXCLE-gAAAE4"]
[Thu Feb 12 19:09:23.572973 2026] [:error] [pid 63416:tid 63438] [client 158.158.98.244:23997] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aY20472wmecPaCHcM2-jMQAAAZE"]
[Thu Feb 12 19:09:24.444271 2026] [:error] [pid 63417:tid 63469] [client 158.158.98.244:27556] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ext.php"] [unique_id "aY205P8gSb97qRMtXCLE_QAAAFQ"]
[Thu Feb 12 19:09:25.844632 2026] [:error] [pid 63511:tid 63516] [client 158.158.98.244:37399] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY205aQCQbD5BgeyIk3vfAAAAAM"]
[Thu Feb 12 19:09:27.589090 2026] [:error] [pid 63417:tid 63457] [client 158.158.98.244:53144] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY205_8gSb97qRMtXCLFBAAAAEg"]
[Thu Feb 12 19:09:30.070089 2026] [:error] [pid 63418:tid 63477] [client 158.158.98.244:53140] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY206tzjh-bbJnStPZK9dAAAAIE"]
[Thu Feb 12 19:09:32.620534 2026] [:error] [pid 63416:tid 63443] [client 158.158.98.244:40854] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY207L2wmecPaCHcM2-jPgAAAZY"]
[Thu Feb 12 19:09:34.101824 2026] [:error] [pid 63417:tid 63473] [client 158.158.98.244:27527] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY207v8gSb97qRMtXCLFEQAAAFg"]
[Thu Feb 12 19:09:34.978045 2026] [:error] [pid 63418:tid 63494] [client 158.158.98.244:37433] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY207tzjh-bbJnStPZK9fwAAAJI"]
[Thu Feb 12 19:09:35.920381 2026] [:error] [pid 63417:tid 63470] [client 158.158.98.244:48186] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY207_8gSb97qRMtXCLFHQAAAFU"]
[Thu Feb 12 19:09:37.538206 2026] [:error] [pid 63511:tid 63533] [client 158.158.98.244:40843] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY208aQCQbD5BgeyIk3vsQAAABQ"]
[Thu Feb 12 19:09:38.602417 2026] [:error] [pid 65064:tid 65080] [client 158.158.98.244:37436] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aY208hOvRgscTcqsMBm7swAAAM0"]
[Thu Feb 12 19:09:41.501149 2026] [:error] [pid 63418:tid 63496] [client 158.158.98.244:13690] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aY209dzjh-bbJnStPZK9jAAAAJQ"]
[Thu Feb 12 19:09:43.364460 2026] [:error] [pid 63511:tid 63526] [client 158.158.98.244:36954] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aY2096QCQbD5BgeyIk3vywAAAA0"]
[Thu Feb 12 19:09:46.175653 2026] [:error] [pid 63511:tid 63534] [client 158.158.98.244:53525] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aY20-qQCQbD5BgeyIk3v0wAAABU"]
[Thu Feb 12 19:09:58.295363 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:10903] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ov.php"] [unique_id "aY21Bv8gSb97qRMtXCLFYAAAAEA"]
[Thu Feb 12 19:09:59.080701 2026] [:error] [pid 65064:tid 65084] [client 158.158.98.244:22993] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ov.php"] [unique_id "aY21BxOvRgscTcqsMBm8HwAAANE"]
[Thu Feb 12 19:10:00.710724 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:36980] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ov.php"] [unique_id "aY21CBOvRgscTcqsMBm8JQAAAM4"]
[Thu Feb 12 19:10:09.092131 2026] [:error] [pid 63417:tid 63463] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/past1.php
[Thu Feb 12 19:10:09.669821 2026] [:error] [pid 63417:tid 63469] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Feb 12 19:10:09.934591 2026] [:error] [pid 63417:tid 63470] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Feb 12 19:10:10.196734 2026] [:error] [pid 63417:tid 63461] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Feb 12 19:10:10.439391 2026] [:error] [pid 63417:tid 63454] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/yos.php
[Thu Feb 12 19:10:10.700583 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Thu Feb 12 19:10:10.943447 2026] [:error] [pid 63417:tid 63451] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/class.1.php
[Thu Feb 12 19:10:11.333444 2026] [:error] [pid 63417:tid 63450] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Feb 12 19:10:11.576147 2026] [:error] [pid 63417:tid 63453] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/async.php
[Thu Feb 12 19:10:11.817465 2026] [:error] [pid 63417:tid 63466] [client 158.158.98.244:53510] File does not exist: /usr/local/apache/htdocs/suspended-page/ff.php
[Thu Feb 12 19:10:12.141048 2026] [:error] [pid 63417:tid 63470] [client 158.158.98.244:53510] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY21FP8gSb97qRMtXCLFnwAAAFU"]
[Thu Feb 12 19:10:13.065927 2026] [:error] [pid 63416:tid 63430] [client 158.158.98.244:25579] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY21Fb2wmecPaCHcM2-jlAAAAYk"]
[Thu Feb 12 19:10:14.564220 2026] [:error] [pid 63511:tid 63530] [client 158.158.98.244:53133] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY21FqQCQbD5BgeyIk3wIwAAABE"]
[Thu Feb 12 19:10:16.016643 2026] [:error] [pid 63417:tid 63454] [client 158.158.98.244:42228] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY21GP8gSb97qRMtXCLFswAAAEU"]
[Thu Feb 12 19:10:18.586735 2026] [:error] [pid 65064:tid 65074] [client 158.158.98.244:19456] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aY21GhOvRgscTcqsMBm8RwAAAMc"]
[Thu Feb 12 19:10:19.962678 2026] [:error] [pid 63417:tid 63466] [client 158.158.98.244:48089] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aY21G_8gSb97qRMtXCLFxgAAAFE"]
[Thu Feb 12 19:10:21.509594 2026] [:error] [pid 63511:tid 63516] [client 158.158.98.244:19470] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aY21HaQCQbD5BgeyIk3wQwAAAAM"]
[Thu Feb 12 19:10:23.521054 2026] [:error] [pid 65064:tid 65079] [client 158.158.98.244:36934] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aY21HxOvRgscTcqsMBm8TwAAAMw"]
[Thu Feb 12 19:10:25.037788 2026] [:error] [pid 63417:tid 63457] [client 158.158.98.244:12896] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aY21If8gSb97qRMtXCLF0AAAAEg"]
[Thu Feb 12 19:10:30.669457 2026] [:error] [pid 63418:tid 63491] [client 158.158.98.244:48117] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aY21Jtzjh-bbJnStPZK98gAAAI8"]
[Thu Feb 12 19:10:33.597343 2026] [:error] [pid 65064:tid 65072] [client 158.158.98.244:53519] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aY21KROvRgscTcqsMBm8ZwAAAMU"]
[Thu Feb 12 19:10:37.249091 2026] [:error] [pid 63511:tid 63535] [client 158.158.98.244:20579] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aY21LaQCQbD5BgeyIk3wYwAAABY"]
[Thu Feb 12 19:10:39.917223 2026] [:error] [pid 63417:tid 63460] [client 158.158.98.244:12876] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY21L_8gSb97qRMtXCLF-gAAAEs"]
[Thu Feb 12 19:10:40.844017 2026] [:error] [pid 63416:tid 63428] [client 158.158.98.244:15190] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY21ML2wmecPaCHcM2-jtAAAAYc"]
[Thu Feb 12 19:10:42.488693 2026] [:error] [pid 63418:tid 63498] [client 158.158.98.244:10545] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY21Mtzjh-bbJnStPZK-AAAAAJY"]
[Thu Feb 12 19:10:43.460100 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:34459] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY21MxOvRgscTcqsMBm8dgAAAMQ"]
[Thu Feb 12 19:10:44.945439 2026] [:error] [pid 63417:tid 63457] [client 158.158.98.244:22923] [client 158.158.98.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aY21NP8gSb97qRMtXCLF_AAAAEg"]
[Thu Feb 12 19:10:45.893879 2026] [:error] [pid 63511:tid 63522] [client 158.158.98.244:20604] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aY21NaQCQbD5BgeyIk3wcgAAAAk"]
[Thu Feb 12 19:10:47.274582 2026] [:error] [pid 63417:tid 63455] [client 158.158.98.244:36985] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aY21N_8gSb97qRMtXCLGAAAAAEY"]
[Thu Feb 12 19:10:48.012493 2026] [:error] [pid 63418:tid 63485] [client 158.158.98.244:45585] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aY21ONzjh-bbJnStPZK-CwAAAIk"]
[Thu Feb 12 19:10:49.847345 2026] [:error] [pid 63417:tid 63468] [client 158.158.98.244:15192] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aY21Of8gSb97qRMtXCLGBwAAAFM"]
[Thu Feb 12 19:10:52.157945 2026] [:error] [pid 63418:tid 63484] [client 158.158.98.244:13267] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hexx.php"] [unique_id "aY21PNzjh-bbJnStPZK-EQAAAIg"]
[Thu Feb 12 19:10:53.553432 2026] [:error] [pid 65064:tid 65073] [client 158.158.98.244:27542] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hexx.php"] [unique_id "aY21PROvRgscTcqsMBm8hAAAAMY"]
[Thu Feb 12 19:10:56.064622 2026] [:error] [pid 65064:tid 65067] [client 158.158.98.244:4050] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hexx.php"] [unique_id "aY21QBOvRgscTcqsMBm8jQAAAMA"]
[Thu Feb 12 19:10:57.916517 2026] [:error] [pid 63416:tid 63429] [client 158.158.98.244:36968] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hexx.php"] [unique_id "aY21Qb2wmecPaCHcM2-jywAAAYg"]
[Thu Feb 12 19:11:00.808366 2026] [:error] [pid 63416:tid 63432] [client 158.158.98.244:34006] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aY21RL2wmecPaCHcM2-jzwAAAYs"]
[Thu Feb 12 19:11:01.711673 2026] [:error] [pid 63418:tid 63476] [client 158.158.98.244:28920] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aY21Rdzjh-bbJnStPZK-JgAAAIA"]
[Thu Feb 12 19:11:03.032465 2026] [:error] [pid 63417:tid 63472] [client 158.158.98.244:13259] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aY21R_8gSb97qRMtXCLGFgAAAFc"]
[Thu Feb 12 19:11:03.868039 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:10539] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aY21R9zjh-bbJnStPZK-LAAAAIY"]
[Thu Feb 12 19:11:05.448688 2026] [:error] [pid 63417:tid 63461] [client 158.158.98.244:42194] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aY21Sf8gSb97qRMtXCLGIQAAAEw"]
[Thu Feb 12 19:11:12.702183 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:53565] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Feb 12 19:11:12.966623 2026] [:error] [pid 65064:tid 65076] [client 158.158.98.244:53565] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Feb 12 19:11:13.211736 2026] [:error] [pid 65064:tid 65085] [client 158.158.98.244:53565] File does not exist: /usr/local/apache/htdocs/suspended-page/miansha.php
[Thu Feb 12 19:11:13.452645 2026] [:error] [pid 65064:tid 65087] [client 158.158.98.244:53565] [client 158.158.98.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aY21UROvRgscTcqsMBm8vQAAANQ"]
[Thu Feb 12 19:11:14.531013 2026] [:error] [pid 63511:tid 63534] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/xfile25.php
[Thu Feb 12 19:11:14.992468 2026] [:error] [pid 63511:tid 63517] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Thu Feb 12 19:11:15.237897 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Thu Feb 12 19:11:15.563066 2026] [:error] [pid 63511:tid 63529] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Thu Feb 12 19:11:15.835477 2026] [:error] [pid 63511:tid 63530] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/reze.php
[Thu Feb 12 19:11:16.077404 2026] [:error] [pid 63511:tid 63520] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/styll.php
[Thu Feb 12 19:11:16.336953 2026] [:error] [pid 63511:tid 63513] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/x7.php
[Thu Feb 12 19:11:16.684041 2026] [:error] [pid 63511:tid 63525] [client 158.158.98.244:23427] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Thu Feb 12 19:11:16.924705 2026] [:error] [pid 63511:tid 63524] [client 158.158.98.244:23427] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aY21VKQCQbD5BgeyIk3wrQAAAAs"]
[Thu Feb 12 19:11:17.867796 2026] [:error] [pid 63417:tid 63460] [client 158.158.98.244:12908] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aY21Vf8gSb97qRMtXCLGPgAAAEs"]
[Thu Feb 12 19:11:19.192436 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:36958] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aY21V9zjh-bbJnStPZK-RwAAAIY"]
[Thu Feb 12 19:11:20.476485 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:22987] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aY21WP8gSb97qRMtXCLGRAAAAEA"]
[Thu Feb 12 19:11:21.261176 2026] [:error] [pid 63511:tid 63519] [client 158.158.98.244:19515] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "aY21WaQCQbD5BgeyIk3wsgAAAAY"]
[Thu Feb 12 19:11:22.647037 2026] [:error] [pid 63416:tid 63431] [client 158.158.98.244:53132] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "aY21Wr2wmecPaCHcM2-j8QAAAYo"]
[Thu Feb 12 19:11:23.900233 2026] [:error] [pid 63416:tid 63426] [client 158.158.98.244:26097] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "aY21W72wmecPaCHcM2-j9AAAAYU"]
[Thu Feb 12 19:11:25.223701 2026] [:error] [pid 63416:tid 63440] [client 158.158.98.244:19510] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "aY21Xb2wmecPaCHcM2-j_QAAAZM"]
[Thu Feb 12 19:11:27.441161 2026] [:error] [pid 63511:tid 63533] [client 158.158.98.244:13687] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aY21X6QCQbD5BgeyIk3wvAAAABQ"]
[Thu Feb 12 19:11:28.856674 2026] [:error] [pid 63418:tid 63484] [client 158.158.98.244:19040] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aY21YNzjh-bbJnStPZK-UwAAAIg"]
[Thu Feb 12 19:11:30.115330 2026] [:error] [pid 65064:tid 65088] [client 158.158.98.244:18530] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aY21YhOvRgscTcqsMBm85wAAANU"]
[Thu Feb 12 19:11:31.132813 2026] [:error] [pid 63416:tid 63434] [client 158.158.98.244:47056] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aY21Y72wmecPaCHcM2-kDQAAAY0"]
[Thu Feb 12 19:11:32.634054 2026] [:error] [pid 63416:tid 63424] [client 158.158.98.244:48550] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xyz.php"] [unique_id "aY21ZL2wmecPaCHcM2-kEQAAAYM"]
[Thu Feb 12 19:11:33.380013 2026] [:error] [pid 63416:tid 63427] [client 158.158.98.244:16435] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xyz.php"] [unique_id "aY21Zb2wmecPaCHcM2-kFAAAAYY"]
[Thu Feb 12 19:11:35.444253 2026] [:error] [pid 63418:tid 63493] [client 158.158.98.244:11310] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xyz.php"] [unique_id "aY21Z9zjh-bbJnStPZK-ZgAAAJE"]
[Thu Feb 12 19:11:36.122780 2026] [:error] [pid 65064:tid 65075] [client 158.158.98.244:42791] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8xyz.php"] [unique_id "aY21aBOvRgscTcqsMBm9AgAAAMg"]
[Thu Feb 12 19:11:37.506289 2026] [:error] [pid 63418:tid 63488] [client 158.158.98.244:3331] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aY21adzjh-bbJnStPZK-bAAAAIw"]
[Thu Feb 12 19:11:39.976732 2026] [:error] [pid 63416:tid 63439] [client 158.158.98.244:13227] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aY21a72wmecPaCHcM2-kHAAAAZI"]
[Thu Feb 12 19:11:41.456101 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:38621] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aY21baQCQbD5BgeyIk3w0AAAAAo"]
[Thu Feb 12 19:11:42.791865 2026] [:error] [pid 65064:tid 65076] [client 158.158.98.244:13618] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aY21bhOvRgscTcqsMBm9EQAAAMk"]
[Thu Feb 12 19:11:43.770360 2026] [:error] [pid 63417:tid 63453] [client 158.158.98.244:49532] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY21b_8gSb97qRMtXCLGWgAAAEQ"]
[Thu Feb 12 19:11:44.855628 2026] [:error] [pid 63418:tid 63494] [client 158.158.98.244:36520] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY21cNzjh-bbJnStPZK-dwAAAJI"]
[Thu Feb 12 19:11:46.370011 2026] [:error] [pid 63418:tid 63500] [client 158.158.98.244:24558] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY21ctzjh-bbJnStPZK-fgAAAJg"]
[Thu Feb 12 19:11:47.228176 2026] [:error] [pid 63416:tid 63429] [client 158.158.98.244:30384] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aY21c72wmecPaCHcM2-kMAAAAYg"]
[Thu Feb 12 19:11:48.788411 2026] [:error] [pid 63511:tid 63531] [client 158.158.98.244:50067] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aY21dKQCQbD5BgeyIk3w2QAAABI"]
[Thu Feb 12 19:11:50.914250 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:3865] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aY21dhOvRgscTcqsMBm9LQAAAM4"]
[Thu Feb 12 19:11:52.521776 2026] [:error] [pid 63511:tid 63522] [client 158.158.98.244:48993] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aY21eKQCQbD5BgeyIk3w4gAAAAk"]
[Thu Feb 12 19:11:53.632250 2026] [:error] [pid 63511:tid 63519] [client 158.158.98.244:17931] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aY21eaQCQbD5BgeyIk3w5gAAAAY"]
[Thu Feb 12 19:11:56.774915 2026] [:error] [pid 63416:tid 63436] [client 158.158.98.244:31988] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY21fL2wmecPaCHcM2-kRgAAAY8"]
[Thu Feb 12 19:11:58.918155 2026] [:error] [pid 65064:tid 65067] [client 158.158.98.244:20994] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY21fhOvRgscTcqsMBm9RwAAAMA"]
[Thu Feb 12 19:12:00.539230 2026] [:error] [pid 63418:tid 63477] [client 158.158.98.244:44332] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY21gNzjh-bbJnStPZK-nQAAAIE"]
[Thu Feb 12 19:12:03.821925 2026] [:error] [pid 63417:tid 63463] [client 158.158.98.244:48492] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY21g_8gSb97qRMtXCLGiwAAAE4"]
[Thu Feb 12 19:12:07.052925 2026] [:error] [pid 63511:tid 63519] [client 158.158.98.244:22494] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aY21h6QCQbD5BgeyIk3xBwAAAAY"]
[Thu Feb 12 19:12:08.560272 2026] [:error] [pid 63416:tid 63425] [client 158.158.98.244:43228] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aY21iL2wmecPaCHcM2-kWAAAAYQ"]
[Thu Feb 12 19:12:09.559191 2026] [:error] [pid 65064:tid 65087] [client 158.158.98.244:21022] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aY21iROvRgscTcqsMBm9awAAANQ"]
[Thu Feb 12 19:12:10.478398 2026] [:error] [pid 63416:tid 63434] [client 158.158.98.244:22493] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aY21ir2wmecPaCHcM2-kYAAAAY0"]
[Thu Feb 12 19:12:12.334220 2026] [:error] [pid 63418:tid 63494] [client 158.158.98.244:38540] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY21jNzjh-bbJnStPZK-sAAAAJI"]
[Thu Feb 12 19:12:13.478373 2026] [:error] [pid 63418:tid 63477] [client 158.158.98.244:12134] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY21jdzjh-bbJnStPZK-tQAAAIE"]
[Thu Feb 12 19:12:14.563348 2026] [:error] [pid 63417:tid 63468] [client 158.158.98.244:28024] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY21jv8gSb97qRMtXCLGnQAAAFM"]
[Thu Feb 12 19:12:15.650933 2026] [:error] [pid 65064:tid 65070] [client 158.158.98.244:30348] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY21jxOvRgscTcqsMBm9mAAAAMM"]
[Thu Feb 12 19:12:18.436938 2026] [:error] [pid 65064:tid 65086] [client 158.158.98.244:17994] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 12 19:12:18.679436 2026] [:error] [pid 65064:tid 65074] [client 158.158.98.244:17994] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 12 19:12:19.211772 2026] [:error] [pid 65064:tid 65068] [client 158.158.98.244:17994] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Feb 12 19:12:19.471250 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:17994] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Feb 12 19:12:19.972229 2026] [:error] [pid 65064:tid 65087] [client 158.158.98.244:17994] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Feb 12 19:12:20.515783 2026] [:error] [pid 65064:tid 65080] [client 158.158.98.244:17994] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aY21lBOvRgscTcqsMBm9uAAAAM0"]
[Thu Feb 12 19:12:21.360401 2026] [:error] [pid 63511:tid 63517] [client 158.158.98.244:44969] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aY21laQCQbD5BgeyIk3xLAAAAAQ"]
[Thu Feb 12 19:12:23.077390 2026] [:error] [pid 65064:tid 65088] [client 158.158.98.244:51555] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aY21lxOvRgscTcqsMBm96gAAANU"]
[Thu Feb 12 19:12:24.011179 2026] [:error] [pid 63417:tid 63451] [client 158.158.98.244:31405] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f5.php"] [unique_id "aY21mP8gSb97qRMtXCLGsgAAAEI"]
[Thu Feb 12 19:12:26.076869 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:46225] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aY21mqQCQbD5BgeyIk3xdAAAAAo"]
[Thu Feb 12 19:12:27.748783 2026] [:error] [pid 63511:tid 63535] [client 158.158.98.244:16956] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aY21m6QCQbD5BgeyIk3xggAAABY"]
[Thu Feb 12 19:12:28.440912 2026] [:error] [pid 63511:tid 63533] [client 158.158.98.244:31384] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aY21nKQCQbD5BgeyIk3xigAAABQ"]
[Thu Feb 12 19:12:29.697667 2026] [:error] [pid 63511:tid 63517] [client 158.158.98.244:27983] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aY21naQCQbD5BgeyIk3xjQAAAAQ"]
[Thu Feb 12 19:12:31.692129 2026] [:error] [pid 63418:tid 63483] [client 158.158.98.244:51081] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aY21n9zjh-bbJnStPZK-_AAAAIc"]
[Thu Feb 12 19:12:33.262591 2026] [:error] [pid 65064:tid 65082] [client 158.158.98.244:46240] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aY21oROvRgscTcqsMBm-RQAAAM8"]
[Thu Feb 12 19:12:34.957730 2026] [:error] [pid 65064:tid 65086] [client 158.158.98.244:31379] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aY21ohOvRgscTcqsMBm-TAAAANM"]
[Thu Feb 12 19:12:36.482828 2026] [:error] [pid 63416:tid 63439] [client 158.158.98.244:30895] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aY21pL2wmecPaCHcM2-k-wAAAZI"]
[Thu Feb 12 19:12:38.167774 2026] [:error] [pid 63418:tid 63490] [client 158.158.98.244:4027] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aY21ptzjh-bbJnStPZK_DAAAAI4"]
[Thu Feb 12 19:12:39.242982 2026] [:error] [pid 63416:tid 63426] [client 158.158.98.244:46742] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aY21p72wmecPaCHcM2-lBgAAAYU"]
[Thu Feb 12 19:12:40.095372 2026] [:error] [pid 63416:tid 63440] [client 158.158.98.244:46229] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aY21qL2wmecPaCHcM2-lCAAAAZM"]
[Thu Feb 12 19:12:41.312245 2026] [:error] [pid 63416:tid 63423] [client 158.158.98.244:45507] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aY21qb2wmecPaCHcM2-lCgAAAYI"]
[Thu Feb 12 19:12:43.684196 2026] [:error] [pid 65064:tid 65067] [client 158.158.98.244:16963] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aY21qxOvRgscTcqsMBm-WwAAAMA"]
[Thu Feb 12 19:12:45.319154 2026] [:error] [pid 63416:tid 63433] [client 158.158.98.244:43714] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aY21rb2wmecPaCHcM2-lEwAAAYw"]
[Thu Feb 12 19:12:46.990124 2026] [:error] [pid 65064:tid 65068] [client 158.158.98.244:24977] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aY21rhOvRgscTcqsMBm-ZgAAAME"]
[Thu Feb 12 19:12:47.713591 2026] [:error] [pid 63511:tid 63534] [client 158.158.98.244:17009] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aY21r6QCQbD5BgeyIk3xsAAAABU"]
[Thu Feb 12 19:12:49.980083 2026] [:error] [pid 63511:tid 63515] [client 158.158.98.244:54132] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aY21saQCQbD5BgeyIk3xtQAAAAI"]
[Thu Feb 12 19:12:51.198784 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:43757] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aY21s_8gSb97qRMtXCLG9wAAAEA"]
[Thu Feb 12 19:12:53.478518 2026] [:error] [pid 63416:tid 63434] [client 158.158.98.244:28014] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aY21tb2wmecPaCHcM2-lIQAAAY0"]
[Thu Feb 12 19:12:54.469116 2026] [:error] [pid 63416:tid 63438] [client 158.158.98.244:28030] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aY21tr2wmecPaCHcM2-lJAAAAZE"]
[Thu Feb 12 19:12:55.995692 2026] [:error] [pid 63417:tid 63460] [client 158.158.98.244:25017] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aY21t_8gSb97qRMtXCLG_wAAAEs"]
[Thu Feb 12 19:12:57.196717 2026] [:error] [pid 63418:tid 63493] [client 158.158.98.244:46661] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aY21udzjh-bbJnStPZK_MAAAAJE"]
[Thu Feb 12 19:12:59.431466 2026] [:error] [pid 65064:tid 65073] [client 158.158.98.244:46766] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aY21uxOvRgscTcqsMBm-kQAAAMY"]
[Thu Feb 12 19:13:00.408600 2026] [:error] [pid 63418:tid 63491] [client 158.158.98.244:43283] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aY21vNzjh-bbJnStPZK_NgAAAI8"]
[Thu Feb 12 19:13:01.420892 2026] [:error] [pid 65064:tid 65073] [client 158.158.98.244:30364] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aY21vROvRgscTcqsMBm-nAAAAMY"]
[Thu Feb 12 19:13:02.301677 2026] [:error] [pid 63417:tid 63454] [client 158.158.98.244:30363] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aY21vv8gSb97qRMtXCLHCQAAAEU"]
[Thu Feb 12 19:13:03.114040 2026] [:error] [pid 65064:tid 65072] [client 158.158.98.244:50571] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aY21vxOvRgscTcqsMBm-nwAAAMU"]
[Thu Feb 12 19:13:04.208435 2026] [:error] [pid 63511:tid 63536] [client 158.158.98.244:50623] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aY21wKQCQbD5BgeyIk3x0wAAABc"]
[Thu Feb 12 19:13:05.102820 2026] [:error] [pid 63418:tid 63478] [client 158.158.98.244:35515] [client 158.158.98.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aY21wdzjh-bbJnStPZK_QgAAAII"]
[Thu Feb 12 19:13:06.272478 2026] [:error] [pid 63418:tid 63481] [client 158.158.98.244:43324] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aY21wtzjh-bbJnStPZK_SgAAAIU"]
[Thu Feb 12 19:13:07.027372 2026] [:error] [pid 63416:tid 63425] [client 158.158.98.244:50618] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aY21w72wmecPaCHcM2-lOgAAAYQ"]
[Thu Feb 12 19:13:10.021824 2026] [:error] [pid 63418:tid 63477] [client 158.158.98.244:35519] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aY21xtzjh-bbJnStPZK_UgAAAIE"]
[Thu Feb 12 19:13:11.251033 2026] [:error] [pid 63417:tid 63457] [client 158.158.98.244:34960] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aY21x_8gSb97qRMtXCLHEQAAAEg"]
[Thu Feb 12 19:13:12.477656 2026] [:error] [pid 63416:tid 63427] [client 158.158.98.244:43304] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aY21yL2wmecPaCHcM2-lRQAAAYY"]
[Thu Feb 12 19:13:13.395674 2026] [:error] [pid 63511:tid 63536] [client 158.158.98.244:3723] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aY21yaQCQbD5BgeyIk3x6wAAABc"]
[Thu Feb 12 19:13:14.190898 2026] [:error] [pid 63417:tid 63458] [client 158.158.98.244:54138] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aY21yv8gSb97qRMtXCLHGAAAAEk"]
[Thu Feb 12 19:13:14.991830 2026] [:error] [pid 63418:tid 63479] [client 158.158.98.244:30342] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aY21ytzjh-bbJnStPZK_XAAAAIM"]
[Thu Feb 12 19:13:16.712865 2026] [:error] [pid 63416:tid 63422] [client 158.158.98.244:30360] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY21zL2wmecPaCHcM2-lTgAAAYE"]
[Thu Feb 12 19:13:17.692933 2026] [:error] [pid 63511:tid 63535] [client 158.158.98.244:35492] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY21zaQCQbD5BgeyIk3x9gAAABY"]
[Thu Feb 12 19:13:18.757867 2026] [:error] [pid 65064:tid 65083] [client 158.158.98.244:50619] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY21zhOvRgscTcqsMBm-rQAAANA"]
[Thu Feb 12 19:13:20.015674 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Feb 12 19:13:20.263780 2026] [:error] [pid 63511:tid 63517] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 12 19:13:20.506666 2026] [:error] [pid 63511:tid 63534] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Thu Feb 12 19:13:20.767302 2026] [:error] [pid 63511:tid 63531] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Feb 12 19:13:21.023684 2026] [:error] [pid 63511:tid 63514] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Thu Feb 12 19:13:21.290535 2026] [:error] [pid 63511:tid 63515] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Feb 12 19:13:21.535983 2026] [:error] [pid 63511:tid 63520] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Feb 12 19:13:22.539014 2026] [:error] [pid 63511:tid 63524] [client 158.158.98.244:31438] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Thu Feb 12 19:13:22.925003 2026] [:error] [pid 63511:tid 63514] [client 158.158.98.244:31438] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aY210qQCQbD5BgeyIk3yFAAAAAE"]
[Thu Feb 12 19:13:23.854311 2026] [:error] [pid 63417:tid 63450] [client 158.158.98.244:34989] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aY210_8gSb97qRMtXCLHJAAAAEE"]
[Thu Feb 12 19:13:25.218432 2026] [:error] [pid 65064:tid 65071] [client 158.158.98.244:13576] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aY211ROvRgscTcqsMBm-uQAAAMQ"]
[Thu Feb 12 19:13:26.762424 2026] [:error] [pid 63417:tid 63461] [client 158.158.98.244:13592] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blurbs18.php"] [unique_id "aY211v8gSb97qRMtXCLHKAAAAEw"]
[Thu Feb 12 19:13:28.495732 2026] [:error] [pid 63416:tid 63434] [client 158.158.98.244:17013] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY212L2wmecPaCHcM2-lWwAAAY0"]
[Thu Feb 12 19:13:29.821791 2026] [:error] [pid 65064:tid 65086] [client 158.158.98.244:30898] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY212ROvRgscTcqsMBm-xQAAANM"]
[Thu Feb 12 19:13:33.097414 2026] [:error] [pid 63511:tid 63534] [client 158.158.98.244:37849] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY213aQCQbD5BgeyIk3yIgAAABU"]
[Thu Feb 12 19:13:34.214774 2026] [:error] [pid 63418:tid 63481] [client 158.158.98.244:43732] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY213tzjh-bbJnStPZK_lAAAAIU"]
[Thu Feb 12 19:13:37.526452 2026] [:error] [pid 63418:tid 63487] [client 158.158.98.244:30861] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY214dzjh-bbJnStPZK_mgAAAIs"]
[Thu Feb 12 19:13:38.469206 2026] [:error] [pid 63511:tid 63514] [client 158.158.98.244:19565] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY214qQCQbD5BgeyIk3yRgAAAAE"]
[Thu Feb 12 19:13:40.790857 2026] [:error] [pid 65064:tid 65091] [client 158.158.98.244:17925] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY215BOvRgscTcqsMBm-2gAAANg"]
[Thu Feb 12 19:13:42.204603 2026] [:error] [pid 63418:tid 63491] [client 158.158.98.244:19572] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY215tzjh-bbJnStPZK_oAAAAI8"]
[Thu Feb 12 19:13:46.285139 2026] [:error] [pid 65064:tid 65090] [client 158.158.98.244:32473] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aY216hOvRgscTcqsMBm-7wAAANc"]
[Thu Feb 12 19:13:48.611546 2026] [:error] [pid 63416:tid 63429] [client 158.158.98.244:19572] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aY217L2wmecPaCHcM2-lqwAAAYg"]
[Thu Feb 12 19:13:49.701088 2026] [:error] [pid 63511:tid 63527] [client 158.158.98.244:3364] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aY217aQCQbD5BgeyIk3ydAAAAA4"]
[Thu Feb 12 19:13:50.968043 2026] [:error] [pid 63416:tid 63422] [client 158.158.98.244:24544] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aY217r2wmecPaCHcM2-lsAAAAYE"]
[Thu Feb 12 19:13:53.145209 2026] [:error] [pid 65064:tid 65074] [client 158.158.98.244:17975] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY218ROvRgscTcqsMBm_AgAAAMc"]
[Thu Feb 12 19:13:54.540778 2026] [:error] [pid 63416:tid 63440] [client 158.158.98.244:32468] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY218r2wmecPaCHcM2-ltwAAAZM"]
[Thu Feb 12 19:13:55.204113 2026] [:error] [pid 63417:tid 63458] [client 158.158.98.244:19521] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY218_8gSb97qRMtXCLHUgAAAEk"]
[Thu Feb 12 19:13:56.575725 2026] [:error] [pid 63416:tid 63431] [client 158.158.98.244:25039] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY219L2wmecPaCHcM2-lvwAAAYo"]
[Thu Feb 12 19:13:58.344745 2026] [:error] [pid 65064:tid 65076] [client 158.158.98.244:20508] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY219hOvRgscTcqsMBm_CgAAAMk"]
[Thu Feb 12 19:13:59.424185 2026] [:error] [pid 65064:tid 65081] [client 158.158.98.244:24525] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY219xOvRgscTcqsMBm_DgAAAM4"]
[Thu Feb 12 19:14:00.264211 2026] [:error] [pid 63511:tid 63513] [client 158.158.98.244:25054] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY21-KQCQbD5BgeyIk3yhwAAAAA"]
[Thu Feb 12 19:14:01.093814 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:35556] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY21-dzjh-bbJnStPZK_zQAAAIY"]
[Thu Feb 12 19:14:02.286462 2026] [:error] [pid 63511:tid 63530] [client 158.158.98.244:24520] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aY21-qQCQbD5BgeyIk3yjAAAABE"]
[Thu Feb 12 19:14:04.075906 2026] [:error] [pid 63416:tid 63431] [client 158.158.98.244:31935] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aY21_L2wmecPaCHcM2-lzQAAAYo"]
[Thu Feb 12 19:14:04.803488 2026] [:error] [pid 63418:tid 63480] [client 158.158.98.244:25056] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aY21_Nzjh-bbJnStPZK_1gAAAIQ"]
[Thu Feb 12 19:14:06.998899 2026] [:error] [pid 63511:tid 63521] [client 158.158.98.244:49062] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aY21_qQCQbD5BgeyIk3ylAAAAAg"]
[Thu Feb 12 19:14:09.212493 2026] [:error] [pid 63417:tid 63451] [client 158.158.98.244:46759] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aY22Af8gSb97qRMtXCLHbAAAAEI"]
[Thu Feb 12 19:14:10.936963 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:54115] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aY22AqQCQbD5BgeyIk3yngAAAAo"]
[Thu Feb 12 19:14:12.709868 2026] [:error] [pid 63417:tid 63470] [client 158.158.98.244:19573] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aY22BP8gSb97qRMtXCLHcwAAAFU"]
[Thu Feb 12 19:14:14.084675 2026] [:error] [pid 65064:tid 65078] [client 158.158.98.244:24517] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless11.php"] [unique_id "aY22BhOvRgscTcqsMBm_MgAAAMs"]
[Thu Feb 12 19:14:15.930362 2026] [:error] [pid 65064:tid 65082] [client 158.158.98.244:3079] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aY22BxOvRgscTcqsMBm_NgAAAM8"]
[Thu Feb 12 19:14:17.852378 2026] [:error] [pid 65064:tid 65091] [client 158.158.98.244:25087] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aY22CROvRgscTcqsMBm_OwAAANg"]
[Thu Feb 12 19:14:18.704122 2026] [:error] [pid 63418:tid 63488] [client 158.158.98.244:31929] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aY22Ctzjh-bbJnStPZK_7QAAAIw"]
[Thu Feb 12 19:14:19.367951 2026] [:error] [pid 63418:tid 63489] [client 158.158.98.244:37485] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aY22C9zjh-bbJnStPZK_8gAAAI0"]
[Thu Feb 12 19:14:21.138612 2026] [:error] [pid 63511:tid 63513] [client 158.158.98.244:25076] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY22DaQCQbD5BgeyIk3ytAAAAAA"]
[Thu Feb 12 19:14:23.018400 2026] [:error] [pid 63418:tid 63486] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Feb 12 19:14:23.285983 2026] [:error] [pid 63418:tid 63488] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Feb 12 19:14:23.577438 2026] [:error] [pid 63418:tid 63489] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Thu Feb 12 19:14:23.823640 2026] [:error] [pid 63418:tid 63495] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Thu Feb 12 19:14:24.067609 2026] [:error] [pid 63418:tid 63477] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Thu Feb 12 19:14:24.556416 2026] [:error] [pid 63418:tid 63480] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/admins.php
[Thu Feb 12 19:14:24.799916 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Feb 12 19:14:25.043810 2026] [:error] [pid 63418:tid 63486] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Thu Feb 12 19:14:25.288677 2026] [:error] [pid 63418:tid 63490] [client 158.158.98.244:47600] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Thu Feb 12 19:14:25.539282 2026] [:error] [pid 63418:tid 63488] [client 158.158.98.244:47600] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY22Edzjh-bbJnStPZLACwAAAIw"]
[Thu Feb 12 19:14:26.230372 2026] [:error] [pid 65064:tid 65091] [client 158.158.98.244:49065] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY22EhOvRgscTcqsMBm_VgAAANg"]
[Thu Feb 12 19:14:28.089948 2026] [:error] [pid 65064:tid 65082] [client 158.158.98.244:32469] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY22FBOvRgscTcqsMBm_WwAAAM8"]
[Thu Feb 12 19:14:29.857547 2026] [:error] [pid 63416:tid 63444] [client 158.158.98.244:39318] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aY22Fb2wmecPaCHcM2-mCQAAAZc"]
[Thu Feb 12 19:14:31.481686 2026] [:error] [pid 63417:tid 63455] [client 158.158.98.244:32452] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aY22F_8gSb97qRMtXCLHuAAAAEY"]
[Thu Feb 12 19:14:32.628113 2026] [:error] [pid 63416:tid 63435] [client 158.158.98.244:11732] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aY22GL2wmecPaCHcM2-mEQAAAY4"]
[Thu Feb 12 19:14:33.737778 2026] [:error] [pid 63511:tid 63535] [client 158.158.98.244:46164] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aY22GaQCQbD5BgeyIk3y_wAAABY"]
[Thu Feb 12 19:14:35.003768 2026] [:error] [pid 63511:tid 63519] [client 158.158.98.244:43719] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aY22G6QCQbD5BgeyIk3zAgAAAAY"]
[Thu Feb 12 19:14:35.979134 2026] [:error] [pid 63418:tid 63492] [client 158.158.98.244:46777] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aY22G9zjh-bbJnStPZLARQAAAJA"]
[Thu Feb 12 19:14:39.399746 2026] [:error] [pid 65064:tid 65067] [client 158.158.98.244:49084] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aY22HxOvRgscTcqsMBm_xAAAAMA"]
[Thu Feb 12 19:14:41.756321 2026] [:error] [pid 63417:tid 63462] [client 158.158.98.244:46193] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aY22If8gSb97qRMtXCLH1wAAAE0"]
[Thu Feb 12 19:14:42.815605 2026] [:error] [pid 63416:tid 63434] [client 158.158.98.244:47564] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aY22Ir2wmecPaCHcM2-mLQAAAY0"]
[Thu Feb 12 19:14:43.600760 2026] [:error] [pid 63417:tid 63449] [client 158.158.98.244:50060] [client 158.158.98.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aY22I_8gSb97qRMtXCLH2gAAAEA"]
[Thu Feb 12 19:14:44.464195 2026] [:error] [pid 63511:tid 63523] [client 158.158.98.244:47575] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY22JKQCQbD5BgeyIk3zEQAAAAo"]
[Thu Feb 12 19:14:45.415442 2026] [:error] [pid 63418:tid 63488] [client 158.158.98.244:37460] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY22Jdzjh-bbJnStPZLAiwAAAIw"]
[Thu Feb 12 19:14:46.150925 2026] [:error] [pid 65064:tid 65087] [client 158.158.98.244:47583] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY22JhOvRgscTcqsMBm_4AAAANQ"]
[Thu Feb 12 19:14:49.066404 2026] [:error] [pid 63418:tid 63483] [client 158.158.98.244:50094] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nyan.php"] [unique_id "aY22Kdzjh-bbJnStPZLAkwAAAIc"]
[Thu Feb 12 19:14:49.818788 2026] [:error] [pid 63418:tid 63487] [client 158.158.98.244:37013] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nyan.php"] [unique_id "aY22Kdzjh-bbJnStPZLAlQAAAIs"]
[Thu Feb 12 19:14:51.187433 2026] [:error] [pid 63418:tid 63482] [client 158.158.98.244:40289] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nyan.php"] [unique_id "aY22K9zjh-bbJnStPZLAmgAAAIY"]
[Thu Feb 12 19:14:52.042896 2026] [:error] [pid 63417:tid 63473] [client 158.158.98.244:39689] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nyan.php"] [unique_id "aY22LP8gSb97qRMtXCLH4gAAAFg"]
[Thu Feb 12 19:14:53.468731 2026] [:error] [pid 63418:tid 63479] [client 158.158.98.244:46195] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aY22Ldzjh-bbJnStPZLAngAAAIM"]
[Thu Feb 12 19:14:55.331086 2026] [:error] [pid 63418:tid 63481] [client 158.158.98.244:3914] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aY22L9zjh-bbJnStPZLApAAAAIU"]
[Thu Feb 12 19:14:56.418760 2026] [:error] [pid 65064:tid 65089] [client 158.158.98.244:3937] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aY22MBOvRgscTcqsMBm_8wAAANY"]
[Thu Feb 12 19:14:57.793745 2026] [:error] [pid 63416:tid 63433] [client 158.158.98.244:27073] [client 158.158.98.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aY22Mb2wmecPaCHcM2-mTQAAAYw"]
[Thu Feb 12 19:14:59.091118 2026] [:error] [pid 63511:tid 63532] [client 158.158.98.244:12530] [client 158.158.98.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-mail.php"] [unique_id "aY22M6QCQbD5BgeyIk3zKgAAABM"]
[Thu Feb 12 20:13:13.844487 2026] [:error] [pid 63416:tid 63432] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Thu Feb 12 20:13:14.097865 2026] [:error] [pid 63416:tid 63421] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Feb 12 20:13:14.369712 2026] [:error] [pid 63416:tid 63426] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 12 20:13:14.624281 2026] [:error] [pid 63416:tid 63441] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Feb 12 20:13:14.908566 2026] [:error] [pid 63416:tid 63436] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/luuuf.php
[Thu Feb 12 20:13:15.162819 2026] [:error] [pid 63416:tid 63442] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/maraz.php
[Thu Feb 12 20:13:15.438009 2026] [:error] [pid 63416:tid 63424] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/bayss.php
[Thu Feb 12 20:13:15.704957 2026] [:error] [pid 63416:tid 63431] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Thu Feb 12 20:13:15.959409 2026] [:error] [pid 63416:tid 63425] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Thu Feb 12 20:13:16.462805 2026] [:error] [pid 63416:tid 63439] [client 68.219.89.70:46784] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Thu Feb 12 20:13:16.713397 2026] [:error] [pid 63416:tid 63427] [client 68.219.89.70:46784] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3D3L2wmecPaCHcM2-8ggAAAYY"]
[Thu Feb 12 20:13:31.334168 2026] [:error] [pid 63511:tid 63513] [client 68.219.89.70:17483] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3D66QCQbD5BgeyIk0QfwAAAAA"]
[Thu Feb 12 20:13:35.568883 2026] [:error] [pid 65064:tid 65082] [client 68.219.89.70:22453] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/007xx.php"] [unique_id "aY3D7xOvRgscTcqsMBnlPAAAAM8"]
[Thu Feb 12 20:13:43.612925 2026] [:error] [pid 65064:tid 65074] [client 68.219.89.70:18947] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/007xx.php"] [unique_id "aY3D9xOvRgscTcqsMBnlVAAAAMc"]
[Thu Feb 12 20:13:46.306017 2026] [:error] [pid 65064:tid 65089] [client 68.219.89.70:14984] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/007xx.php"] [unique_id "aY3D-hOvRgscTcqsMBnlXAAAANY"]
[Thu Feb 12 20:13:47.789160 2026] [:error] [pid 65064:tid 65071] [client 68.219.89.70:2074] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/007xx.php"] [unique_id "aY3D-xOvRgscTcqsMBnlZQAAAMQ"]
[Thu Feb 12 20:13:49.039138 2026] [:error] [pid 63418:tid 63480] [client 68.219.89.70:28258] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aY3D_dzjh-bbJnStPZLaLQAAAIQ"]
[Thu Feb 12 20:13:50.462795 2026] [:error] [pid 63417:tid 63455] [client 68.219.89.70:29966] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aY3D_v8gSb97qRMtXCLe7gAAAEY"]
[Thu Feb 12 20:13:53.579040 2026] [:error] [pid 65064:tid 65074] [client 68.219.89.70:46551] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aY3EAROvRgscTcqsMBnldAAAAMc"]
[Thu Feb 12 20:13:55.548355 2026] [:error] [pid 63417:tid 63460] [client 68.219.89.70:29162] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/l3gi0n.php"] [unique_id "aY3EA_8gSb97qRMtXCLe-wAAAEs"]
[Thu Feb 12 20:13:58.108496 2026] [:error] [pid 63511:tid 63520] [client 68.219.89.70:22056] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sldnjqlm.php"] [unique_id "aY3EBqQCQbD5BgeyIk0QqwAAAAc"]
[Thu Feb 12 20:14:00.234042 2026] [:error] [pid 65064:tid 65074] [client 68.219.89.70:2747] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sldnjqlm.php"] [unique_id "aY3ECBOvRgscTcqsMBnleQAAAMc"]
[Thu Feb 12 20:14:22.134736 2026] [:error] [pid 63511:tid 63521] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/s3.php
[Thu Feb 12 20:14:22.411951 2026] [:error] [pid 63511:tid 63534] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Thu Feb 12 20:14:22.669484 2026] [:error] [pid 63511:tid 63526] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd2.php
[Thu Feb 12 20:14:22.924332 2026] [:error] [pid 63511:tid 63519] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/qasfrhau.php
[Thu Feb 12 20:14:23.177848 2026] [:error] [pid 63511:tid 63525] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Thu Feb 12 20:14:23.432041 2026] [:error] [pid 63511:tid 63514] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Thu Feb 12 20:14:23.686636 2026] [:error] [pid 63511:tid 63524] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Thu Feb 12 20:14:23.963856 2026] [:error] [pid 63511:tid 63522] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/kolda.php
[Thu Feb 12 20:14:24.218038 2026] [:error] [pid 63511:tid 63532] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/reujz.php
[Thu Feb 12 20:14:24.481107 2026] [:error] [pid 63511:tid 63515] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Thu Feb 12 20:14:24.735294 2026] [:error] [pid 63511:tid 63536] [client 68.219.89.70:18299] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Thu Feb 12 20:14:24.987114 2026] [:error] [pid 63511:tid 63530] [client 68.219.89.70:18299] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kgmuq.php"] [unique_id "aY3EIKQCQbD5BgeyIk0Q4wAAABE"]
[Thu Feb 12 20:14:39.944503 2026] [:error] [pid 63417:tid 63459] [client 68.219.89.70:18196] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kgmuq.php"] [unique_id "aY3EL_8gSb97qRMtXCLfiQAAAEo"]
[Thu Feb 12 20:14:42.797711 2026] [:error] [pid 63416:tid 63438] [client 68.219.89.70:29763] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aY3EMr2wmecPaCHcM2-9NwAAAZE"]
[Thu Feb 12 20:14:47.483305 2026] [:error] [pid 63418:tid 63495] [client 68.219.89.70:21868] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aY3EN9zjh-bbJnStPZLargAAAJM"]
[Thu Feb 12 20:14:50.801084 2026] [:error] [pid 65064:tid 65075] [client 68.219.89.70:21874] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aY3EOhOvRgscTcqsMBnmLAAAAMg"]
[Thu Feb 12 20:14:59.273174 2026] [:error] [pid 63418:tid 63484] [client 68.219.89.70:24515] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nux.php"] [unique_id "aY3EQ9zjh-bbJnStPZLawAAAAIg"]
[Thu Feb 12 20:15:05.522606 2026] [:error] [pid 65064:tid 65074] [client 68.219.89.70:21832] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nux.php"] [unique_id "aY3ESROvRgscTcqsMBnmZAAAAMc"]
[Thu Feb 12 20:15:07.913297 2026] [:error] [pid 63511:tid 63531] [client 68.219.89.70:26440] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nux.php"] [unique_id "aY3ES6QCQbD5BgeyIk0RSwAAABI"]
[Thu Feb 12 20:15:09.479719 2026] [:error] [pid 65064:tid 65091] [client 68.219.89.70:24529] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nux.php"] [unique_id "aY3ETROvRgscTcqsMBnmcQAAANg"]
[Thu Feb 12 20:15:10.969236 2026] [:error] [pid 63417:tid 63470] [client 68.219.89.70:18225] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aY3ETv8gSb97qRMtXCLf2AAAAFU"]
[Thu Feb 12 20:15:15.060436 2026] [:error] [pid 65064:tid 65074] [client 68.219.89.70:23680] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aY3EUxOvRgscTcqsMBnmeQAAAMc"]
[Thu Feb 12 20:15:16.423631 2026] [:error] [pid 63511:tid 63519] [client 68.219.89.70:27372] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aY3EVKQCQbD5BgeyIk0RaAAAAAY"]
[Thu Feb 12 20:15:25.780065 2026] [:error] [pid 63511:tid 63517] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Thu Feb 12 20:15:26.052303 2026] [:error] [pid 63511:tid 63529] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/wfwdhsjo.php
[Thu Feb 12 20:15:26.333600 2026] [:error] [pid 63511:tid 63535] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Feb 12 20:15:26.691010 2026] [:error] [pid 63511:tid 63524] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Thu Feb 12 20:15:26.960081 2026] [:error] [pid 63511:tid 63513] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Thu Feb 12 20:15:27.228237 2026] [:error] [pid 63511:tid 63528] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Thu Feb 12 20:15:27.496654 2026] [:error] [pid 63511:tid 63514] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/flex.php
[Thu Feb 12 20:15:27.765917 2026] [:error] [pid 63511:tid 63535] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Thu Feb 12 20:15:28.035652 2026] [:error] [pid 63511:tid 63532] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/zr.php
[Thu Feb 12 20:15:28.314957 2026] [:error] [pid 63511:tid 63519] [client 68.219.89.70:25921] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 12 22:17:25.855431 2026] [:error] [pid 63417:tid 63457] [client 136.116.191.175:63906] [client 136.116.191.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.191.175, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY3g9f8gSb97qRMtXCIDPgAAAEg"]
[Thu Feb 12 22:17:25.859684 2026] [:error] [pid 63417:tid 63457] [client 136.116.191.175:63906] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 22:17:28.380828 2026] [:error] [pid 63417:tid 63450] [client 136.116.191.175:63906] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-P8gSb97qRMtXCIDSQAAAEE"]
[Thu Feb 12 22:17:28.904108 2026] [:error] [pid 63511:tid 63526] [client 136.116.191.175:50437] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-KQCQbD5BgeyIk02pAAAAA0"]
[Thu Feb 12 22:17:29.330346 2026] [:error] [pid 63418:tid 63477] [client 136.116.191.175:59900] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-dzjh-bbJnStPZL94QAAAIE"]
[Thu Feb 12 22:17:29.823520 2026] [:error] [pid 46718:tid 46745] [client 136.116.191.175:50513] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-UdfX45LelQwruQ2VQAAAdg"]
[Thu Feb 12 22:17:30.291630 2026] [:error] [pid 63418:tid 63480] [client 136.116.191.175:58056] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-tzjh-bbJnStPZL94gAAAIQ"]
[Thu Feb 12 22:17:30.689545 2026] [:error] [pid 63418:tid 63479] [client 136.116.191.175:55283] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-tzjh-bbJnStPZL95QAAAIM"]
[Thu Feb 12 22:17:31.098567 2026] [:error] [pid 46603:tid 46618] [client 136.116.191.175:55484] [client 136.116.191.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY3g-_Ei6O39v05JNJeOsgAAAQ0"]
[Thu Feb 12 22:32:43.039881 2026] [:error] [pid 63418:tid 63488] [client 35.232.138.33:52515] [client 35.232.138.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.138.33, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY3ki9zjh-bbJnStPZICNgAAAIw"]
[Thu Feb 12 22:32:43.043949 2026] [:error] [pid 63418:tid 63488] [client 35.232.138.33:52515] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 22:32:45.444238 2026] [:error] [pid 63418:tid 63490] [client 35.232.138.33:52515] [client 35.232.138.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY3kjdzjh-bbJnStPZICQwAAAI4"]
[Thu Feb 12 22:32:45.870684 2026] [:error] [pid 63418:tid 63499] [client 35.232.138.33:63386] [client 35.232.138.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY3kjdzjh-bbJnStPZICRAAAAJc"]
[Thu Feb 12 22:32:46.298658 2026] [:error] [pid 46718:tid 46727] [client 35.232.138.33:60836] [client 35.232.138.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY3kjkdfX45LelQwruQ9XwAAAcY"]
[Thu Feb 12 22:32:46.752573 2026] [:error] [pid 46718:tid 46734] [client 35.232.138.33:53010] [client 35.232.138.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY3kjkdfX45LelQwruQ9YwAAAc0"]
[Thu Feb 12 22:32:47.184672 2026] [:error] [pid 46718:tid 46726] [client 35.232.138.33:52158] [client 35.232.138.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY3kj0dfX45LelQwruQ9ZQAAAcU"]
[Thu Feb 12 22:32:47.655673 2026] [:error] [pid 63416:tid 63436] [client 35.232.138.33:60022] [client 35.232.138.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY3kj72wmecPaCHcM2_gjwAAAY8"]
[Thu Feb 12 22:48:45.993355 2026] [:error] [pid 46718:tid 46724] [client 103.77.107.222:51290] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aY3oTUdfX45LelQwruREGQAAAcM"]
[Thu Feb 12 22:48:46.210583 2026] [:error] [pid 63416:tid 63432] [client 103.77.107.222:51318] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aY3oTr2wmecPaCHcM2_j9AAAAYs"]
[Fri Feb 13 00:33:59.155774 2026] [:error] [pid 37856:tid 37861] [client 64.89.163.24:58265] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aY4A95UcWP4qWM7hWsnvjQAAAMI"]
[Fri Feb 13 00:34:00.750477 2026] [:error] [pid 37511:tid 37580] [client 64.89.163.24:52005] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aY4A-O8EBJ86uZdxpA1pWQAAAEA"]
[Fri Feb 13 00:34:02.266173 2026] [:error] [pid 23410:tid 23426] [client 64.89.163.24:53792] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aY4A-hXZP6NFBacuW_0FtgAAAI4"]
[Fri Feb 13 00:34:04.582380 2026] [:error] [pid 37510:tid 37524] [client 64.89.163.24:62581] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aY4A_MUrqDPNSf1wYBWCKAAAAYg"]
[Fri Feb 13 00:34:06.166820 2026] [:error] [pid 37512:tid 37632] [client 64.89.163.24:63027] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aY4A_tDe69znS-f6vSY12QAAABU"]
[Fri Feb 13 02:30:57.811254 2026] [:error] [pid 23410:tid 23433] [client 34.82.225.229:55283] [client 34.82.225.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.225.229, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY4cYRXZP6NFBacuW_1FAwAAAJU"]
[Fri Feb 13 02:30:57.816608 2026] [:error] [pid 23410:tid 23433] [client 34.82.225.229:55283] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 13 02:30:59.675380 2026] [:error] [pid 23410:tid 23435] [client 34.82.225.229:55283] [client 34.82.225.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4cYxXZP6NFBacuW_1FFAAAAJc"]
[Fri Feb 13 02:31:00.002519 2026] [:error] [pid 23410:tid 23417] [client 34.82.225.229:55910] [client 34.82.225.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4cZBXZP6NFBacuW_1FFgAAAIU"]
[Fri Feb 13 02:31:00.372090 2026] [:error] [pid 37512:tid 37624] [client 34.82.225.229:55999] [client 34.82.225.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4cZNDe69znS-f6vSZgEQAAAA4"]
[Fri Feb 13 02:31:00.724613 2026] [:error] [pid 37510:tid 37535] [client 34.82.225.229:56083] [client 34.82.225.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4cZMUrqDPNSf1wYBWs-AAAAZM"]
[Fri Feb 13 02:31:01.077150 2026] [:error] [pid 37856:tid 37862] [client 34.82.225.229:56161] [client 34.82.225.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4cZZUcWP4qWM7hWskjDAAAAMM"]
[Fri Feb 13 02:31:01.403564 2026] [:error] [pid 37510:tid 37519] [client 34.82.225.229:56231] [client 34.82.225.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4cZcUrqDPNSf1wYBWs-gAAAYM"]
[Fri Feb 13 06:24:40.436437 2026] [:error] [pid 51243:tid 51253] [client 51.120.78.0:47957] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY5TKMim7ZTAHzi7xZvZNQAAAQg"]
[Fri Feb 13 06:24:51.162698 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:52783] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 13 06:24:51.943819 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:52783] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Feb 13 06:24:52.292697 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:52783] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Feb 13 06:24:53.009777 2026] [:error] [pid 49223:tid 49233] [client 51.120.78.0:52783] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aY5TNR8A_fZBamNLnfVF-AAAAAE"]
[Fri Feb 13 06:24:54.312377 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:48465] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY5TNh8A_fZBamNLnfVF-gAAAAg"]
[Fri Feb 13 06:24:55.470710 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:42830] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY5TN6p--SFY2nwOiqlN0AAAANI"]
[Fri Feb 13 06:24:56.290210 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:42837] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY5TOKp--SFY2nwOiqlN2AAAAM0"]
[Fri Feb 13 06:24:57.174145 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:52769] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY5TOap--SFY2nwOiqlN3wAAAMQ"]
[Fri Feb 13 06:24:58.001090 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:48464] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aY5TOdiAvPoWmw5Yhwmk7AAAAFE"]
[Fri Feb 13 06:24:58.989400 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:41204] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aY5TOtiAvPoWmw5Yhwmk8AAAAEk"]
[Fri Feb 13 06:24:59.995724 2026] [:error] [pid 49223:tid 49252] [client 51.120.78.0:47992] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aY5TOx8A_fZBamNLnfVGAwAAABQ"]
[Fri Feb 13 06:25:00.705514 2026] [:error] [pid 51243:tid 51254] [client 51.120.78.0:59690] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aY5TPMim7ZTAHzi7xZvZXQAAAQk"]
[Fri Feb 13 06:25:01.521899 2026] [:error] [pid 49335:tid 49343] [client 51.120.78.0:52785] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY5TPap--SFY2nwOiqlN9AAAAMY"]
[Fri Feb 13 06:25:02.260170 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:47949] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY5TPqp--SFY2nwOiqlN-AAAANg"]
[Fri Feb 13 06:25:03.108692 2026] [:error] [pid 49223:tid 49244] [client 51.120.78.0:48472] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY5TPx8A_fZBamNLnfVGCQAAAAw"]
[Fri Feb 13 06:25:04.061488 2026] [:error] [pid 51243:tid 51261] [client 51.120.78.0:47964] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY5TQMim7ZTAHzi7xZvZZwAAARA"]
[Fri Feb 13 06:25:05.011517 2026] [:error] [pid 49224:tid 49270] [client 51.120.78.0:41160] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aY5TQdiAvPoWmw5Yhwmk_QAAAEM"]
[Fri Feb 13 06:25:06.585195 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:42818] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aY5TQqp--SFY2nwOiqlN_wAAANM"]
[Fri Feb 13 06:25:07.365114 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:47993] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aY5TQ6p--SFY2nwOiqlOAQAAAMA"]
[Fri Feb 13 06:25:08.059815 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:52798] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aY5TRMim7ZTAHzi7xZvZawAAARU"]
[Fri Feb 13 06:25:08.914692 2026] [:error] [pid 49335:tid 49338] [client 51.120.78.0:47937] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aY5TRKp--SFY2nwOiqlOBwAAAME"]
[Fri Feb 13 06:25:09.536911 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:42843] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aY5TRap--SFY2nwOiqlODQAAAMQ"]
[Fri Feb 13 06:25:11.071625 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:42841] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aY5TR8im7ZTAHzi7xZvZdwAAAQU"]
[Fri Feb 13 06:25:11.841752 2026] [:error] [pid 49335:tid 49348] [client 51.120.78.0:41165] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aY5TR6p--SFY2nwOiqlOGQAAAMs"]
[Fri Feb 13 06:25:12.806136 2026] [:error] [pid 51243:tid 51261] [client 51.120.78.0:52796] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/images/about.php"] [unique_id "aY5TSMim7ZTAHzi7xZvZfgAAARA"]
[Fri Feb 13 06:25:13.959584 2026] [:error] [pid 51243:tid 51269] [client 51.120.78.0:48485] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/images/about.php"] [unique_id "aY5TScim7ZTAHzi7xZvZkgAAARg"]
[Fri Feb 13 06:25:14.900568 2026] [:error] [pid 51243:tid 51262] [client 51.120.78.0:42820] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/images/about.php"] [unique_id "aY5TSsim7ZTAHzi7xZvZ1QAAARE"]
[Fri Feb 13 06:25:15.762628 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:41161] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/images/about.php"] [unique_id "aY5TS6p--SFY2nwOiqlORQAAAMc"]
[Fri Feb 13 06:25:16.532780 2026] [:error] [pid 49225:tid 49307] [client 51.120.78.0:48501] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/themes.php"] [unique_id "aY5TTDwH8-zGxtAd3jvpmAAAAI0"]
[Fri Feb 13 06:25:17.438810 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:47950] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/themes.php"] [unique_id "aY5TTap--SFY2nwOiqlORwAAANc"]
[Fri Feb 13 06:25:18.175749 2026] [:error] [pid 49225:tid 49314] [client 51.120.78.0:48454] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/themes.php"] [unique_id "aY5TTjwH8-zGxtAd3jvpmwAAAJQ"]
[Fri Feb 13 06:25:19.053609 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:48463] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/themes.php"] [unique_id "aY5TT6p--SFY2nwOiqlOTAAAANM"]
[Fri Feb 13 06:25:19.827058 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:52753] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5TT9iAvPoWmw5YhwmlEAAAAEk"]
[Fri Feb 13 06:25:20.695276 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:48460] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5TUB8A_fZBamNLnfVGRQAAAAM"]
[Fri Feb 13 06:25:21.850995 2026] [:error] [pid 49223:tid 49249] [client 51.120.78.0:47972] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5TUR8A_fZBamNLnfVGRgAAABE"]
[Fri Feb 13 06:25:22.622922 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:55297] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5TUh8A_fZBamNLnfVGTQAAABU"]
[Fri Feb 13 06:25:23.397847 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:47983] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aY5TU6p--SFY2nwOiqlOVAAAAMk"]
[Fri Feb 13 06:25:24.433821 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:48502] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aY5TVDwH8-zGxtAd3jvpqAAAAII"]
[Fri Feb 13 06:25:25.492123 2026] [:error] [pid 49224:tid 49290] [client 51.120.78.0:47941] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aY5TVdiAvPoWmw5YhwmlGAAAAFc"]
[Fri Feb 13 06:25:26.593597 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:42871] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api.php"] [unique_id "aY5TVqp--SFY2nwOiqlOXQAAANc"]
[Fri Feb 13 06:25:27.553871 2026] [:error] [pid 49224:tid 49285] [client 51.120.78.0:52761] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY5TV9iAvPoWmw5YhwmlHwAAAFI"]
[Fri Feb 13 06:25:28.283683 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:52789] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY5TWKp--SFY2nwOiqlOXgAAANg"]
[Fri Feb 13 06:25:29.140072 2026] [:error] [pid 49223:tid 49247] [client 51.120.78.0:41159] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY5TWR8A_fZBamNLnfVGVwAAAA8"]
[Fri Feb 13 06:25:29.950300 2026] [:error] [pid 49335:tid 49354] [client 51.120.78.0:41192] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY5TWap--SFY2nwOiqlOYwAAANE"]
[Fri Feb 13 06:25:30.531684 2026] [:error] [pid 49224:tid 49289] [client 51.120.78.0:52773] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aY5TWtiAvPoWmw5YhwmlJAAAAFY"]
[Fri Feb 13 06:25:31.168602 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:42872] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aY5TWx8A_fZBamNLnfVGXAAAAAA"]
[Fri Feb 13 06:25:32.090271 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:59663] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aY5TXMim7ZTAHzi7xZvZ9wAAAQ0"]
[Fri Feb 13 06:25:32.808673 2026] [:error] [pid 49223:tid 49246] [client 51.120.78.0:42845] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aY5TXB8A_fZBamNLnfVGXgAAAA4"]
[Fri Feb 13 06:25:33.529919 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:52791] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aY5TXTwH8-zGxtAd3jvpvQAAAIk"]
[Fri Feb 13 06:25:34.398865 2026] [:error] [pid 49224:tid 49290] [client 51.120.78.0:42853] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aY5TXtiAvPoWmw5YhwmlMgAAAFc"]
[Fri Feb 13 06:25:35.207891 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:47973] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aY5TXx8A_fZBamNLnfVGZgAAABU"]
[Fri Feb 13 06:25:35.841175 2026] [:error] [pid 49225:tid 49298] [client 51.120.78.0:59195] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aY5TXzwH8-zGxtAd3jvpwAAAAIQ"]
[Fri Feb 13 06:25:36.537832 2026] [:error] [pid 49223:tid 49248] [client 51.120.78.0:48481] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aY5TYB8A_fZBamNLnfVGawAAABA"]
[Fri Feb 13 06:25:37.210566 2026] [:error] [pid 49223:tid 49241] [client 51.120.78.0:47977] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aY5TYR8A_fZBamNLnfVGbAAAAAk"]
[Fri Feb 13 06:25:37.861701 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:48481] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aY5TYdiAvPoWmw5YhwmlQQAAAEI"]
[Fri Feb 13 06:25:38.864754 2026] [:error] [pid 49335:tid 49359] [client 51.120.78.0:48484] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dropdown.php"] [unique_id "aY5TYqp--SFY2nwOiqlOcgAAANY"]
[Fri Feb 13 06:25:39.853505 2026] [:error] [pid 49225:tid 49307] [client 51.120.78.0:52765] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY5TYzwH8-zGxtAd3jvpxQAAAI0"]
[Fri Feb 13 06:25:40.794760 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:42866] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY5TZNiAvPoWmw5YhwmlSQAAAEI"]
[Fri Feb 13 06:25:41.694027 2026] [:error] [pid 49224:tid 49289] [client 51.120.78.0:48448] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY5TZdiAvPoWmw5YhwmlTAAAAFY"]
[Fri Feb 13 06:25:42.443702 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:47963] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY5TZtiAvPoWmw5YhwmlTwAAAEA"]
[Fri Feb 13 06:25:42.998874 2026] [:error] [pid 49224:tid 49278] [client 51.120.78.0:48504] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-file.php"] [unique_id "aY5TZtiAvPoWmw5YhwmlUwAAAEs"]
[Fri Feb 13 06:25:43.667196 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:59708] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-file.php"] [unique_id "aY5TZx8A_fZBamNLnfVGeQAAABM"]
[Fri Feb 13 06:25:44.529896 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:52749] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-file.php"] [unique_id "aY5TaNiAvPoWmw5YhwmlVgAAAEE"]
[Fri Feb 13 06:25:45.520283 2026] [:error] [pid 49335:tid 49347] [client 51.120.78.0:47970] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-file.php"] [unique_id "aY5Taap--SFY2nwOiqlOfAAAAMo"]
[Fri Feb 13 06:25:46.487450 2026] [:error] [pid 49225:tid 49299] [client 51.120.78.0:47984] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aY5TajwH8-zGxtAd3jvp0wAAAIU"]
[Fri Feb 13 06:25:47.170080 2026] [:error] [pid 51243:tid 51249] [client 51.120.78.0:47987] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aY5Ta8im7ZTAHzi7xZvaKQAAAQQ"]
[Fri Feb 13 06:25:48.303596 2026] [:error] [pid 51243:tid 51264] [client 51.120.78.0:52784] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aY5TbMim7ZTAHzi7xZvaKwAAARM"]
[Fri Feb 13 06:25:49.791820 2026] [:error] [pid 49224:tid 49278] [client 51.120.78.0:42854] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aY5TbdiAvPoWmw5YhwmlZwAAAEs"]
[Fri Feb 13 06:25:50.617328 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:47958] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aY5Tbqp--SFY2nwOiqlOhQAAANQ"]
[Fri Feb 13 06:25:51.619893 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:48462] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY5Tb9iAvPoWmw5YhwmlcQAAAEI"]
[Fri Feb 13 06:25:54.329207 2026] [:error] [pid 51243:tid 51256] [client 51.120.78.0:47978] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri Feb 13 06:25:54.876255 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:47978] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Feb 13 06:25:55.829230 2026] [:error] [pid 51243:tid 51248] [client 51.120.78.0:47978] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY5Tc8im7ZTAHzi7xZvaQQAAAQM"]
[Fri Feb 13 06:25:56.832053 2026] [:error] [pid 49225:tid 49295] [client 51.120.78.0:52766] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aY5TdDwH8-zGxtAd3jvp5wAAAIE"]
[Fri Feb 13 06:25:57.906637 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:47986] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aY5TdR8A_fZBamNLnfVGmQAAABY"]
[Fri Feb 13 06:25:58.785595 2026] [:error] [pid 49224:tid 49289] [client 51.120.78.0:48499] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aY5TdtiAvPoWmw5YhwmliwAAAFY"]
[Fri Feb 13 06:25:59.660195 2026] [:error] [pid 49335:tid 49353] [client 51.120.78.0:42840] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aY5Td6p--SFY2nwOiqlOogAAANA"]
[Fri Feb 13 06:26:00.500481 2026] [:error] [pid 49224:tid 49288] [client 51.120.78.0:47996] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY5TeNiAvPoWmw5YhwmlkwAAAFU"]
[Fri Feb 13 06:26:01.238871 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:52754] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY5Teap--SFY2nwOiqlOrQAAANQ"]
[Fri Feb 13 06:26:02.606419 2026] [:error] [pid 49224:tid 49273] [client 51.120.78.0:52799] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY5TetiAvPoWmw5YhwmlnQAAAEY"]
[Fri Feb 13 06:26:03.214274 2026] [:error] [pid 49225:tid 49318] [client 51.120.78.0:47976] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aY5TezwH8-zGxtAd3jvp7wAAAJg"]
[Fri Feb 13 06:26:03.950015 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:42839] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aY5Tex8A_fZBamNLnfVGqAAAAAM"]
[Fri Feb 13 06:26:04.941353 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:47982] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aY5TfDwH8-zGxtAd3jvp_AAAAIk"]
[Fri Feb 13 06:26:06.083943 2026] [:error] [pid 49225:tid 49294] [client 51.120.78.0:52740] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aY5TfjwH8-zGxtAd3jvp_gAAAIA"]
[Fri Feb 13 06:26:06.835129 2026] [:error] [pid 51243:tid 51265] [client 51.120.78.0:48469] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "aY5Tfsim7ZTAHzi7xZvaQwAAARQ"]
[Fri Feb 13 06:26:07.794442 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:48498] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aY5Tf6p--SFY2nwOiqlOwwAAANg"]
[Fri Feb 13 06:26:08.665391 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:52739] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aY5TgB8A_fZBamNLnfVGswAAAAA"]
[Fri Feb 13 06:26:09.526963 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:42819] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aY5TgR8A_fZBamNLnfVGtAAAABY"]
[Fri Feb 13 06:26:10.534153 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:52738] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aY5Tgsim7ZTAHzi7xZvaVQAAAQE"]
[Fri Feb 13 06:26:11.564297 2026] [:error] [pid 51243:tid 51255] [client 51.120.78.0:41152] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aY5Tg8im7ZTAHzi7xZvaWAAAAQo"]
[Fri Feb 13 06:26:12.452280 2026] [:error] [pid 49225:tid 49312] [client 51.120.78.0:59668] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aY5ThDwH8-zGxtAd3jvqEAAAAJI"]
[Fri Feb 13 06:26:13.596234 2026] [:error] [pid 49335:tid 49351] [client 51.120.78.0:51328] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aY5Thap--SFY2nwOiqlOygAAAM4"]
[Fri Feb 13 06:26:14.449618 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:47969] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aY5Thqp--SFY2nwOiqlOzwAAAMA"]
[Fri Feb 13 06:26:15.155329 2026] [:error] [pid 49225:tid 49305] [client 51.120.78.0:52782] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aY5ThzwH8-zGxtAd3jvqGgAAAIs"]
[Fri Feb 13 06:26:15.826161 2026] [:error] [pid 49335:tid 49345] [client 51.120.78.0:52786] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aY5Th6p--SFY2nwOiqlO2QAAAMg"]
[Fri Feb 13 06:26:16.550897 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:48506] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aY5TiNiAvPoWmw5YhwmltQAAAEA"]
[Fri Feb 13 06:26:17.226061 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:48511] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aY5TiR8A_fZBamNLnfVGxgAAABM"]
[Fri Feb 13 06:26:18.025274 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:48497] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY5Tiqp--SFY2nwOiqlO4gAAAMc"]
[Fri Feb 13 06:26:18.624653 2026] [:error] [pid 49225:tid 49304] [client 51.120.78.0:52758] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY5TijwH8-zGxtAd3jvqKQAAAIo"]
[Fri Feb 13 06:26:20.017257 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:48450] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY5TjKp--SFY2nwOiqlO6QAAANg"]
[Fri Feb 13 06:26:21.013828 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:52778] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY5TjdiAvPoWmw5YhwmlyAAAAEk"]
[Fri Feb 13 06:26:21.825398 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:42829] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY5TjR8A_fZBamNLnfVG0AAAABM"]
[Fri Feb 13 06:26:22.540674 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:48486] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY5Tjh8A_fZBamNLnfVG1gAAAAg"]
[Fri Feb 13 06:26:23.574477 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:48457] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY5Tjx8A_fZBamNLnfVG2wAAAAA"]
[Fri Feb 13 06:26:24.262689 2026] [:error] [pid 51243:tid 51247] [client 51.120.78.0:52792] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY5TkMim7ZTAHzi7xZvabgAAAQI"]
[Fri Feb 13 06:26:24.896898 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:42849] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aY5TkB8A_fZBamNLnfVG3wAAAAo"]
[Fri Feb 13 06:26:25.520352 2026] [:error] [pid 51243:tid 51245] [client 51.120.78.0:41163] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aY5Tkcim7ZTAHzi7xZvacgAAAQA"]
[Fri Feb 13 06:26:26.171837 2026] [:error] [pid 49225:tid 49295] [client 51.120.78.0:41166] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aY5TkjwH8-zGxtAd3jvqNwAAAIE"]
[Fri Feb 13 06:26:26.770071 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:48467] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aY5Tksim7ZTAHzi7xZvadQAAAQ0"]
[Fri Feb 13 06:26:27.467258 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:48495] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY5Tkx8A_fZBamNLnfVG4wAAAAY"]
[Fri Feb 13 06:26:28.217318 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:42865] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY5TlNiAvPoWmw5Yhwml2wAAAEg"]
[Fri Feb 13 06:26:29.332777 2026] [:error] [pid 49223:tid 49241] [client 51.120.78.0:41156] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY5TlR8A_fZBamNLnfVG5wAAAAk"]
[Fri Feb 13 06:26:29.881333 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:42844] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY5TlTwH8-zGxtAd3jvqSAAAAII"]
[Fri Feb 13 06:26:30.568516 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:47936] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aY5TltiAvPoWmw5Yhwml4wAAAFM"]
[Fri Feb 13 06:26:31.159818 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:42816] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aY5Tl6p--SFY2nwOiqlO8AAAAMc"]
[Fri Feb 13 06:26:31.792587 2026] [:error] [pid 51243:tid 51252] [client 51.120.78.0:48471] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aY5Tl8im7ZTAHzi7xZvaggAAAQc"]
[Fri Feb 13 06:26:32.407970 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:48503] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aY5TmNiAvPoWmw5Yhwml6QAAAFQ"]
[Fri Feb 13 06:26:33.069324 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:51332] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/theme.php"] [unique_id "aY5Tmcim7ZTAHzi7xZvahAAAAQU"]
[Fri Feb 13 06:26:33.628925 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:47959] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/theme.php"] [unique_id "aY5Tmap--SFY2nwOiqlPAgAAAMc"]
[Fri Feb 13 06:26:34.258177 2026] [:error] [pid 49225:tid 49301] [client 51.120.78.0:52756] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/theme.php"] [unique_id "aY5TmjwH8-zGxtAd3jvqUwAAAIc"]
[Fri Feb 13 06:26:34.860003 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:41208] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/theme.php"] [unique_id "aY5Tmqp--SFY2nwOiqlPEgAAANI"]
[Fri Feb 13 06:26:35.454769 2026] [:error] [pid 51243:tid 51263] [client 51.120.78.0:47979] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aY5Tm8im7ZTAHzi7xZvaiwAAARI"]
[Fri Feb 13 06:26:36.054377 2026] [:error] [pid 49335:tid 49349] [client 51.120.78.0:41158] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aY5TnKp--SFY2nwOiqlPHgAAAMw"]
[Fri Feb 13 06:26:36.726487 2026] [:error] [pid 49225:tid 49295] [client 51.120.78.0:52743] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aY5TnDwH8-zGxtAd3jvqYgAAAIE"]
[Fri Feb 13 06:26:37.419905 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:47952] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aY5Tnap--SFY2nwOiqlPLwAAAMU"]
[Fri Feb 13 06:26:38.183950 2026] [:error] [pid 49223:tid 49244] [client 51.120.78.0:55303] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aY5Tnh8A_fZBamNLnfVHMAAAAAw"]
[Fri Feb 13 06:26:38.919745 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:47955] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aY5Tnqp--SFY2nwOiqlPQwAAAM0"]
[Fri Feb 13 06:26:39.797711 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:59678] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aY5Tn6p--SFY2nwOiqlPTgAAAMU"]
[Fri Feb 13 06:26:40.585262 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:52790] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aY5ToB8A_fZBamNLnfVHOwAAAAM"]
[Fri Feb 13 06:26:41.173042 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:47954] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aY5TodiAvPoWmw5YhwmmRwAAAFQ"]
[Fri Feb 13 06:26:41.835541 2026] [:error] [pid 49223:tid 49245] [client 51.120.78.0:52797] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY5ToR8A_fZBamNLnfVHPAAAAA0"]
[Fri Feb 13 06:26:42.931274 2026] [:error] [pid 49335:tid 49354] [client 51.120.78.0:47985] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY5Toqp--SFY2nwOiqlPZQAAANE"]
[Fri Feb 13 06:26:44.003045 2026] [:error] [pid 49224:tid 49280] [client 51.120.78.0:52755] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY5TpNiAvPoWmw5YhwmmXAAAAE0"]
[Fri Feb 13 06:26:44.926734 2026] [:error] [pid 49225:tid 49304] [client 51.120.78.0:42862] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aY5TpDwH8-zGxtAd3jvqeAAAAIo"]
[Fri Feb 13 06:26:46.315068 2026] [:error] [pid 49335:tid 49354] [client 51.120.78.0:47991] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY5Tpqp--SFY2nwOiqlPbQAAANE"]
[Fri Feb 13 06:26:47.378707 2026] [:error] [pid 51243:tid 51267] [client 51.120.78.0:59673] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY5Tp8im7ZTAHzi7xZvapgAAARY"]
[Fri Feb 13 06:26:48.133152 2026] [:error] [pid 49225:tid 49313] [client 51.120.78.0:48468] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY5TqDwH8-zGxtAd3jvqgwAAAJM"]
[Fri Feb 13 06:26:49.165288 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:47962] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY5Tqcim7ZTAHzi7xZvarAAAAQ0"]
[Fri Feb 13 06:26:53.934041 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:59662] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aY5TrTwH8-zGxtAd3jvqhgAAAII"]
[Fri Feb 13 06:26:54.863315 2026] [:error] [pid 49223:tid 49255] [client 51.120.78.0:59165] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aY5Trh8A_fZBamNLnfVHSwAAABc"]
[Fri Feb 13 06:26:55.651079 2026] [:error] [pid 49223:tid 49243] [client 51.120.78.0:59188] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri Feb 13 06:26:55.968324 2026] [:error] [pid 49223:tid 49241] [client 51.120.78.0:59188] [client 51.120.78.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.120.78.0, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aY5Trx8A_fZBamNLnfVHTwAAAAk"]
[Fri Feb 13 06:26:55.972203 2026] [:error] [pid 49223:tid 49241] [client 51.120.78.0:59188] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 13 06:26:56.340102 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:59188] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aY5TsB8A_fZBamNLnfVHUAAAAAI"]
[Fri Feb 13 06:26:57.632964 2026] [:error] [pid 49224:tid 49281] [client 51.120.78.0:42842] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 13 06:26:57.906383 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:42842] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Feb 13 06:26:58.205904 2026] [:error] [pid 49224:tid 49285] [client 51.120.78.0:42842] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 13 06:26:58.923967 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:42842] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Feb 13 06:26:59.233370 2026] [:error] [pid 49224:tid 49283] [client 51.120.78.0:42842] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 13 06:26:59.571268 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:42842] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Feb 13 06:26:59.861712 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:42842] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aY5Ts9iAvPoWmw5YhwmmfgAAAEI"]
[Fri Feb 13 06:27:00.971051 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:41180] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aY5TtKp--SFY2nwOiqlPmgAAAM0"]
[Fri Feb 13 06:27:01.979842 2026] [:error] [pid 49225:tid 49295] [client 51.120.78.0:42855] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aY5TtTwH8-zGxtAd3jvqrAAAAIE"]
[Fri Feb 13 06:27:02.631384 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:42857] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aY5Ttsim7ZTAHzi7xZvawgAAAQU"]
[Fri Feb 13 06:27:03.376057 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:52745] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aY5Ttx8A_fZBamNLnfVHdAAAAAY"]
[Fri Feb 13 06:27:04.044131 2026] [:error] [pid 49335:tid 49358] [client 51.120.78.0:42848] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/index.php"] [unique_id "aY5TuKp--SFY2nwOiqlPnwAAANU"]
[Fri Feb 13 06:27:04.709128 2026] [:error] [pid 51243:tid 51251] [client 51.120.78.0:59674] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aY5TuMim7ZTAHzi7xZvaxAAAAQY"]
[Fri Feb 13 06:27:05.411132 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:55313] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aY5Tuap--SFY2nwOiqlPpAAAAMA"]
[Fri Feb 13 06:27:06.002091 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:42825] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aY5TutiAvPoWmw5YhwmmiQAAAEo"]
[Fri Feb 13 06:27:06.562704 2026] [:error] [pid 49335:tid 49349] [client 51.120.78.0:59154] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aY5Tuqp--SFY2nwOiqlPrQAAAMw"]
[Fri Feb 13 06:27:07.203425 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:59653] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aY5Tu9iAvPoWmw5YhwmmiwAAAEE"]
[Fri Feb 13 06:27:07.886756 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:59692] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aY5Tu6p--SFY2nwOiqlPuAAAAMQ"]
[Fri Feb 13 06:27:08.481337 2026] [:error] [pid 51243:tid 51247] [client 51.120.78.0:52787] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aY5TvMim7ZTAHzi7xZvaygAAAQI"]
[Fri Feb 13 06:27:09.031895 2026] [:error] [pid 49225:tid 49300] [client 51.120.78.0:59648] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aY5TvTwH8-zGxtAd3jvqwwAAAIY"]
[Fri Feb 13 06:27:09.741027 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:41171] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aY5TvR8A_fZBamNLnfVHfAAAABY"]
[Fri Feb 13 06:27:10.345343 2026] [:error] [pid 49225:tid 49295] [client 51.120.78.0:52768] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aY5TvjwH8-zGxtAd3jvqyAAAAIE"]
[Fri Feb 13 06:27:10.944874 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:55301] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aY5Tvqp--SFY2nwOiqlPxgAAAMQ"]
[Fri Feb 13 06:27:11.633747 2026] [:error] [pid 51243:tid 51267] [client 51.120.78.0:48492] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aY5Tv8im7ZTAHzi7xZva0QAAARY"]
[Fri Feb 13 06:27:12.236315 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:47990] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aY5TwMim7ZTAHzi7xZva1AAAARc"]
[Fri Feb 13 06:27:13.000313 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:59185] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aY5TwMim7ZTAHzi7xZva2QAAAQE"]
[Fri Feb 13 06:27:13.698614 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:52750] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aY5Twap--SFY2nwOiqlPzgAAANQ"]
[Fri Feb 13 06:27:14.393424 2026] [:error] [pid 49224:tid 49271] [client 51.120.78.0:42823] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aY5TwtiAvPoWmw5YhwmmkwAAAEQ"]
[Fri Feb 13 06:27:15.042402 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:52757] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aY5Twx8A_fZBamNLnfVHggAAAAU"]
[Fri Feb 13 06:27:16.669399 2026] [:error] [pid 49225:tid 49301] [client 51.120.78.0:52772] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aY5TxDwH8-zGxtAd3jvq0wAAAIc"]
[Fri Feb 13 06:27:17.504883 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:48509] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sim.php"] [unique_id "aY5TxR8A_fZBamNLnfVHiwAAAAg"]
[Fri Feb 13 06:27:18.121945 2026] [:error] [pid 49224:tid 49270] [client 51.120.78.0:42874] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sim.php"] [unique_id "aY5TxtiAvPoWmw5YhwmmmAAAAEM"]
[Fri Feb 13 06:27:18.668387 2026] [:error] [pid 49224:tid 49278] [client 51.120.78.0:47994] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sim.php"] [unique_id "aY5TxtiAvPoWmw5YhwmmnAAAAEs"]
[Fri Feb 13 06:27:19.307228 2026] [:error] [pid 51243:tid 51265] [client 51.120.78.0:59704] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sim.php"] [unique_id "aY5Tx8im7ZTAHzi7xZva3wAAARQ"]
[Fri Feb 13 06:27:19.827082 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:42836] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aY5Tx6p--SFY2nwOiqlP1QAAAMc"]
[Fri Feb 13 06:27:20.594149 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:41172] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aY5TyB8A_fZBamNLnfVHjAAAAAo"]
[Fri Feb 13 06:27:21.232360 2026] [:error] [pid 49225:tid 49313] [client 51.120.78.0:59168] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aY5TyTwH8-zGxtAd3jvq3gAAAJM"]
[Fri Feb 13 06:27:21.855484 2026] [:error] [pid 49224:tid 49282] [client 51.120.78.0:48478] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aY5TydiAvPoWmw5YhwmmogAAAE8"]
[Fri Feb 13 06:27:22.468883 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:48473] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aY5TytiAvPoWmw5YhwmmpAAAAFQ"]
[Fri Feb 13 06:27:23.177954 2026] [:error] [pid 49224:tid 49274] [client 51.120.78.0:59151] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aY5Ty9iAvPoWmw5YhwmmpwAAAEc"]
[Fri Feb 13 06:27:23.830085 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:42876] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aY5Ty6p--SFY2nwOiqlP4gAAANM"]
[Fri Feb 13 06:27:24.703997 2026] [:error] [pid 49224:tid 49285] [client 51.120.78.0:41190] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aY5TzNiAvPoWmw5YhwmmrgAAAFI"]
[Fri Feb 13 06:27:25.327985 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:48488] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY5TzdiAvPoWmw5YhwmmsQAAAFM"]
[Fri Feb 13 06:27:26.251623 2026] [:error] [pid 49225:tid 49311] [client 51.120.78.0:52762] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY5TzjwH8-zGxtAd3jvq4QAAAJE"]
[Fri Feb 13 06:27:27.146246 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:42870] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY5Tz6p--SFY2nwOiqlP6gAAANQ"]
[Fri Feb 13 06:27:27.816402 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:59682] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY5Tz6p--SFY2nwOiqlP7AAAAMk"]
[Fri Feb 13 06:27:28.504411 2026] [:error] [pid 51243:tid 51254] [client 51.120.78.0:47940] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aY5T0Mim7ZTAHzi7xZva5gAAAQk"]
[Fri Feb 13 06:27:29.174508 2026] [:error] [pid 49225:tid 49300] [client 51.120.78.0:59671] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aY5T0TwH8-zGxtAd3jvq6gAAAIY"]
[Fri Feb 13 06:27:30.374135 2026] [:error] [pid 51243:tid 51249] [client 51.120.78.0:47951] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aY5T0sim7ZTAHzi7xZva8QAAAQQ"]
[Fri Feb 13 06:27:31.504743 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:47975] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aY5T06p--SFY2nwOiqlP8QAAANc"]
[Fri Feb 13 06:27:32.564141 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:48485] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aY5T1Kp--SFY2nwOiqlP9QAAAMk"]
[Fri Feb 13 06:27:33.327451 2026] [:error] [pid 49224:tid 49271] [client 51.120.78.0:48487] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aY5T1diAvPoWmw5YhwmmvwAAAEQ"]
[Fri Feb 13 06:27:33.894994 2026] [:error] [pid 51243:tid 51269] [client 51.120.78.0:41169] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aY5T1cim7ZTAHzi7xZva9gAAARg"]
[Fri Feb 13 06:27:34.645985 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:48452] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aY5T1tiAvPoWmw5YhwmmxAAAAFE"]
[Fri Feb 13 06:27:36.029311 2026] [:error] [pid 49224:tid 49291] [client 51.120.78.0:52751] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY5T2NiAvPoWmw5YhwmmxgAAAFg"]
[Fri Feb 13 06:27:37.039849 2026] [:error] [pid 49224:tid 49272] [client 51.120.78.0:47953] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aY5T2diAvPoWmw5YhwmmyQAAAEU"]
[Fri Feb 13 06:27:38.055731 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:52781] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aY5T2tiAvPoWmw5YhwmmywAAAEk"]
[Fri Feb 13 06:27:38.839752 2026] [:error] [pid 49225:tid 49312] [client 51.120.78.0:41211] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aY5T2jwH8-zGxtAd3jvq9QAAAJI"]
[Fri Feb 13 06:27:39.692704 2026] [:error] [pid 49224:tid 49270] [client 51.120.78.0:59696] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aY5T29iAvPoWmw5YhwmmzwAAAEM"]
[Fri Feb 13 06:27:40.449453 2026] [:error] [pid 49335:tid 49352] [client 51.120.78.0:48461] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/"] [unique_id "aY5T3Kp--SFY2nwOiqlQAwAAAM8"]
[Fri Feb 13 06:27:41.261645 2026] [:error] [pid 49224:tid 49283] [client 51.120.78.0:47946] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/"] [unique_id "aY5T3diAvPoWmw5Yhwmm1gAAAFA"]
[Fri Feb 13 06:27:41.874228 2026] [:error] [pid 51243:tid 51253] [client 51.120.78.0:42859] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/"] [unique_id "aY5T3cim7ZTAHzi7xZvbAQAAAQg"]
[Fri Feb 13 06:27:42.490023 2026] [:error] [pid 49223:tid 49255] [client 51.120.78.0:48474] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/"] [unique_id "aY5T3h8A_fZBamNLnfVHlwAAABc"]
[Fri Feb 13 06:27:43.567813 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:48459] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aY5T36p--SFY2nwOiqlQCgAAANQ"]
[Fri Feb 13 06:27:44.227424 2026] [:error] [pid 49223:tid 49244] [client 51.120.78.0:42831] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aY5T4B8A_fZBamNLnfVHmAAAAAw"]
[Fri Feb 13 06:27:45.355745 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:63470] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aY5T4cim7ZTAHzi7xZvbCgAAAQ8"]
[Fri Feb 13 06:27:46.154012 2026] [:error] [pid 49223:tid 49243] [client 51.120.78.0:59147] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aY5T4h8A_fZBamNLnfVHmgAAAAs"]
[Fri Feb 13 06:27:47.031342 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:41196] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY5T46p--SFY2nwOiqlQEAAAANI"]
[Fri Feb 13 06:27:47.923140 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:41174] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY5T49iAvPoWmw5Yhwmm4QAAAEA"]
[Fri Feb 13 06:27:48.901136 2026] [:error] [pid 49224:tid 49270] [client 51.120.78.0:48500] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY5T5NiAvPoWmw5Yhwmm4wAAAEM"]
[Fri Feb 13 06:27:49.700759 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:47965] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY5T5diAvPoWmw5Yhwmm5gAAAEg"]
[Fri Feb 13 06:27:50.622848 2026] [:error] [pid 49335:tid 49348] [client 51.120.78.0:48466] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aY5T5qp--SFY2nwOiqlQGwAAAMs"]
[Fri Feb 13 06:27:51.329892 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:48508] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aY5T56p--SFY2nwOiqlQJwAAANM"]
[Fri Feb 13 06:27:51.893211 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:48468] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aY5T59iAvPoWmw5Yhwmm6wAAAFQ"]
[Fri Feb 13 06:27:52.511284 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:59181] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aY5T6DwH8-zGxtAd3jvrCgAAAIk"]
[Fri Feb 13 06:27:53.317029 2026] [:error] [pid 49224:tid 49273] [client 51.120.78.0:42860] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aY5T6diAvPoWmw5Yhwmm7gAAAEY"]
[Fri Feb 13 06:27:54.368843 2026] [:error] [pid 49225:tid 49317] [client 51.120.78.0:42875] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aY5T6jwH8-zGxtAd3jvrDQAAAJc"]
[Fri Feb 13 06:27:55.246497 2026] [:error] [pid 49223:tid 49239] [client 51.120.78.0:42878] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aY5T6x8A_fZBamNLnfVHpgAAAAc"]
[Fri Feb 13 06:27:55.836864 2026] [:error] [pid 49224:tid 49274] [client 51.120.78.0:52763] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aY5T69iAvPoWmw5Yhwmm8gAAAEc"]
[Fri Feb 13 06:27:56.565975 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:59138] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aY5T7B8A_fZBamNLnfVHqAAAAAI"]
[Fri Feb 13 06:27:57.347665 2026] [:error] [pid 49225:tid 49301] [client 51.120.78.0:55317] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aY5T7TwH8-zGxtAd3jvrEQAAAIc"]
[Fri Feb 13 06:27:58.139993 2026] [:error] [pid 49225:tid 49308] [client 51.120.78.0:52794] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aY5T7jwH8-zGxtAd3jvrEgAAAI4"]
[Fri Feb 13 06:27:59.741620 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:48477] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php
[Fri Feb 13 06:28:00.698284 2026] [:error] [pid 49223:tid 49239] [client 51.120.78.0:48477] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Feb 13 06:28:01.286679 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:48477] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 13 06:28:01.585159 2026] [:error] [pid 49223:tid 49246] [client 51.120.78.0:48477] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Feb 13 06:28:01.885518 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:48477] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Feb 13 06:28:02.157489 2026] [:error] [pid 49223:tid 49233] [client 51.120.78.0:48477] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Feb 13 06:28:02.739076 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:48477] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/"] [unique_id "aY5T8h8A_fZBamNLnfVHvQAAABU"]
[Fri Feb 13 06:28:03.499558 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:55321] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/"] [unique_id "aY5T88im7ZTAHzi7xZvbKQAAAQU"]
[Fri Feb 13 06:28:04.173140 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:52788] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/"] [unique_id "aY5T9B8A_fZBamNLnfVHwAAAAAA"]
[Fri Feb 13 06:28:04.800114 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:47961] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/"] [unique_id "aY5T9Kp--SFY2nwOiqlQWgAAANI"]
[Fri Feb 13 06:28:05.371202 2026] [:error] [pid 49223:tid 49246] [client 51.120.78.0:48476] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aY5T9R8A_fZBamNLnfVHxAAAAA4"]
[Fri Feb 13 06:28:06.116506 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:41198] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aY5T9qp--SFY2nwOiqlQYgAAAM0"]
[Fri Feb 13 06:28:06.767695 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:42833] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aY5T9tiAvPoWmw5Yhwmm_AAAAEI"]
[Fri Feb 13 06:28:07.311395 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:55323] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aY5T99iAvPoWmw5Yhwmm_QAAAFQ"]
[Fri Feb 13 06:28:07.900140 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:41186] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aY5T99iAvPoWmw5YhwmnAQAAAEE"]
[Fri Feb 13 06:28:08.559709 2026] [:error] [pid 51243:tid 51269] [client 51.120.78.0:47974] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aY5T-Mim7ZTAHzi7xZvbMQAAARg"]
[Fri Feb 13 06:28:09.108439 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:41184] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aY5T-cim7ZTAHzi7xZvbMwAAARU"]
[Fri Feb 13 06:28:09.711449 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:59136] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aY5T-R8A_fZBamNLnfVHxgAAAAM"]
[Fri Feb 13 06:28:10.360709 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:59652] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aY5T-h8A_fZBamNLnfVHygAAAAY"]
[Fri Feb 13 06:28:10.943897 2026] [:error] [pid 49335:tid 49352] [client 51.120.78.0:46177] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aY5T-qp--SFY2nwOiqlQfQAAAM8"]
[Fri Feb 13 06:28:11.798612 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:59173] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aY5T-6p--SFY2nwOiqlQhAAAANI"]
[Fri Feb 13 06:28:12.362423 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:42869] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aY5T_Kp--SFY2nwOiqlQiwAAAMk"]
[Fri Feb 13 06:28:12.969039 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:59198] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aY5T_B8A_fZBamNLnfVHzQAAAAg"]
[Fri Feb 13 06:28:13.619928 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:41164] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aY5T_R8A_fZBamNLnfVHzgAAAAA"]
[Fri Feb 13 06:28:14.253840 2026] [:error] [pid 49223:tid 49248] [client 51.120.78.0:52793] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aY5T_h8A_fZBamNLnfVHzwAAABA"]
[Fri Feb 13 06:28:14.793253 2026] [:error] [pid 49225:tid 49316] [client 51.120.78.0:47939] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aY5T_jwH8-zGxtAd3jvrHQAAAJY"]
[Fri Feb 13 06:28:15.393218 2026] [:error] [pid 49225:tid 49318] [client 51.120.78.0:48482] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aY5T_zwH8-zGxtAd3jvrHgAAAJg"]
[Fri Feb 13 06:28:15.936828 2026] [:error] [pid 49225:tid 49315] [client 51.120.78.0:59159] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aY5T_zwH8-zGxtAd3jvrIQAAAJU"]
[Fri Feb 13 06:28:16.609749 2026] [:error] [pid 51243:tid 51267] [client 51.120.78.0:48449] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aY5UAMim7ZTAHzi7xZvbQQAAARY"]
[Fri Feb 13 06:28:17.345396 2026] [:error] [pid 49225:tid 49304] [client 51.120.78.0:59649] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aY5UATwH8-zGxtAd3jvrIwAAAIo"]
[Fri Feb 13 06:28:17.879118 2026] [:error] [pid 49225:tid 49298] [client 51.120.78.0:41181] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aY5UATwH8-zGxtAd3jvrJQAAAIQ"]
[Fri Feb 13 06:28:18.487431 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:41185] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aY5UAtiAvPoWmw5YhwmnCQAAAFE"]
[Fri Feb 13 06:28:19.050090 2026] [:error] [pid 49223:tid 49233] [client 51.120.78.0:48458] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aY5UAx8A_fZBamNLnfVH1AAAAAE"]
[Fri Feb 13 06:28:19.600832 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:59193] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aY5UA9iAvPoWmw5YhwmnDwAAAEg"]
[Fri Feb 13 06:28:20.147199 2026] [:error] [pid 49335:tid 49338] [client 51.120.78.0:41155] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aY5UBKp--SFY2nwOiqlQsAAAAME"]
[Fri Feb 13 06:28:20.707682 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:41157] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aY5UBKp--SFY2nwOiqlQtwAAAMA"]
[Fri Feb 13 06:28:21.258827 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:47938] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aY5UBdiAvPoWmw5YhwmnFAAAAFM"]
[Fri Feb 13 06:28:21.888502 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:42863] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aY5UBdiAvPoWmw5YhwmnFQAAAEA"]
[Fri Feb 13 06:28:22.427110 2026] [:error] [pid 49223:tid 49252] [client 51.120.78.0:55337] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aY5UBh8A_fZBamNLnfVH1wAAABQ"]
[Fri Feb 13 06:28:22.952916 2026] [:error] [pid 49223:tid 49245] [client 51.120.78.0:42847] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aY5UBh8A_fZBamNLnfVH2AAAAA0"]
[Fri Feb 13 06:28:23.482475 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:55341] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aY5UB9iAvPoWmw5YhwmnHAAAAEo"]
[Fri Feb 13 06:28:24.014263 2026] [:error] [pid 49223:tid 49248] [client 51.120.78.0:59142] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aY5UCB8A_fZBamNLnfVH2QAAABA"]
[Fri Feb 13 06:28:24.558128 2026] [:error] [pid 49225:tid 49302] [client 51.120.78.0:59189] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aY5UCDwH8-zGxtAd3jvrKAAAAIg"]
[Fri Feb 13 06:28:25.145531 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:42867] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aY5UCR8A_fZBamNLnfVH3QAAAAI"]
[Fri Feb 13 06:28:25.745071 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:51346] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aY5UCR8A_fZBamNLnfVH3wAAAAU"]
[Fri Feb 13 06:28:26.276253 2026] [:error] [pid 49224:tid 49291] [client 51.120.78.0:41155] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aY5UCtiAvPoWmw5YhwmnJAAAAFg"]
[Fri Feb 13 06:28:26.802189 2026] [:error] [pid 49224:tid 49282] [client 51.120.78.0:52770] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aY5UCtiAvPoWmw5YhwmnJQAAAE8"]
[Fri Feb 13 06:28:27.337331 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:41162] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY5UCx8A_fZBamNLnfVH4AAAAAM"]
[Fri Feb 13 06:28:27.885382 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:59661] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY5UC6p--SFY2nwOiqlQ0wAAANg"]
[Fri Feb 13 06:28:28.435679 2026] [:error] [pid 49335:tid 49338] [client 51.120.78.0:59666] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY5UDKp--SFY2nwOiqlQ2AAAAME"]
[Fri Feb 13 06:28:28.964603 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:52775] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY5UDB8A_fZBamNLnfVH4wAAAAY"]
[Fri Feb 13 06:28:29.501669 2026] [:error] [pid 49223:tid 49252] [client 51.120.78.0:42824] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aY5UDR8A_fZBamNLnfVH5QAAABQ"]
[Fri Feb 13 06:28:30.025661 2026] [:error] [pid 49335:tid 49345] [client 51.120.78.0:55340] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aY5UDqp--SFY2nwOiqlQ4QAAAMg"]
[Fri Feb 13 06:28:30.773918 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:59160] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aY5UDh8A_fZBamNLnfVH6AAAAAI"]
[Fri Feb 13 06:28:31.336037 2026] [:error] [pid 49225:tid 49312] [client 51.120.78.0:52741] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aY5UDzwH8-zGxtAd3jvrMQAAAJI"]
[Fri Feb 13 06:28:31.889313 2026] [:error] [pid 49335:tid 49339] [client 51.120.78.0:42828] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aY5UD6p--SFY2nwOiqlQ5QAAAMI"]
[Fri Feb 13 06:28:32.498274 2026] [:error] [pid 51243:tid 51247] [client 51.120.78.0:52744] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aY5UEMim7ZTAHzi7xZvbSQAAAQI"]
[Fri Feb 13 06:28:33.199625 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:55302] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aY5UEdiAvPoWmw5YhwmnOQAAAFM"]
[Fri Feb 13 06:28:33.775068 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:52760] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aY5UEap--SFY2nwOiqlQ7QAAANQ"]
[Fri Feb 13 06:28:34.387540 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:59681] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aY5UEqp--SFY2nwOiqlQ8wAAAMU"]
[Fri Feb 13 06:28:34.964902 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:55312] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aY5UEh8A_fZBamNLnfVH9wAAAAI"]
[Fri Feb 13 06:28:35.514063 2026] [:error] [pid 49225:tid 49317] [client 51.120.78.0:59675] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aY5UEzwH8-zGxtAd3jvrNgAAAJc"]
[Fri Feb 13 06:28:36.049011 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:59186] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aY5UFKp--SFY2nwOiqlQ9gAAANM"]
[Fri Feb 13 06:28:36.650689 2026] [:error] [pid 49224:tid 49282] [client 51.120.78.0:48453] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aY5UFNiAvPoWmw5YhwmnTwAAAE8"]
[Fri Feb 13 06:28:37.189961 2026] [:error] [pid 49223:tid 49256] [client 51.120.78.0:41176] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-corn-sample.php"] [unique_id "aY5UFR8A_fZBamNLnfVH_wAAABg"]
[Fri Feb 13 06:28:37.727663 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:59166] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-corn-sample.php"] [unique_id "aY5UFR8A_fZBamNLnfVIAgAAAAY"]
[Fri Feb 13 06:28:38.279082 2026] [:error] [pid 51243:tid 51252] [client 51.120.78.0:59654] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-corn-sample.php"] [unique_id "aY5UFsim7ZTAHzi7xZvbWwAAAQc"]
[Fri Feb 13 06:28:38.817569 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:42817] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-corn-sample.php"] [unique_id "aY5UFsim7ZTAHzi7xZvbYQAAAQE"]
[Fri Feb 13 06:28:39.404445 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:41182] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aY5UF6p--SFY2nwOiqlRCAAAAMU"]
[Fri Feb 13 06:28:39.963419 2026] [:error] [pid 49224:tid 49289] [client 51.120.78.0:48480] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aY5UF9iAvPoWmw5YhwmnYAAAAFY"]
[Fri Feb 13 06:28:40.533522 2026] [:error] [pid 49225:tid 49304] [client 51.120.78.0:59665] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aY5UGDwH8-zGxtAd3jvrVQAAAIo"]
[Fri Feb 13 06:28:41.101622 2026] [:error] [pid 49225:tid 49310] [client 51.120.78.0:51361] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aY5UGTwH8-zGxtAd3jvrWgAAAJA"]
[Fri Feb 13 06:28:41.762615 2026] [:error] [pid 49223:tid 49236] [client 51.120.78.0:41212] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aY5UGR8A_fZBamNLnfVIFQAAAAQ"]
[Fri Feb 13 06:28:42.292353 2026] [:error] [pid 49223:tid 49249] [client 51.120.78.0:55356] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aY5UGh8A_fZBamNLnfVIFgAAABE"]
[Fri Feb 13 06:28:42.848705 2026] [:error] [pid 49335:tid 49359] [client 51.120.78.0:42852] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aY5UGqp--SFY2nwOiqlREwAAANY"]
[Fri Feb 13 06:28:43.426744 2026] [:error] [pid 51243:tid 51253] [client 51.120.78.0:51377] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aY5UG8im7ZTAHzi7xZvbcwAAAQg"]
[Fri Feb 13 06:28:43.948797 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:59169] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aY5UG6p--SFY2nwOiqlRGQAAANQ"]
[Fri Feb 13 06:28:44.523719 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:59158] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aY5UHMim7ZTAHzi7xZvbeQAAAQ8"]
[Fri Feb 13 06:28:45.098877 2026] [:error] [pid 51243:tid 51262] [client 51.120.78.0:55299] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aY5UHcim7ZTAHzi7xZvbewAAARE"]
[Fri Feb 13 06:28:45.675012 2026] [:error] [pid 51243:tid 51249] [client 51.120.78.0:52747] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aY5UHcim7ZTAHzi7xZvbfQAAAQQ"]
[Fri Feb 13 06:28:46.219376 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:52752] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aY5UHtiAvPoWmw5YhwmnjwAAAEg"]
[Fri Feb 13 06:28:46.757654 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:48510] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aY5UHsim7ZTAHzi7xZvbgQAAAQ4"]
[Fri Feb 13 06:28:47.284130 2026] [:error] [pid 49223:tid 49246] [client 51.120.78.0:59706] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aY5UHx8A_fZBamNLnfVILwAAAA4"]
[Fri Feb 13 06:28:47.814170 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:63429] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aY5UH8im7ZTAHzi7xZvbhwAAAQ0"]
[Fri Feb 13 06:28:48.589831 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:55354] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aY5UIKp--SFY2nwOiqlRJgAAAM0"]
[Fri Feb 13 06:28:49.234088 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:47966] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aY5UIcim7ZTAHzi7xZvbjAAAARc"]
[Fri Feb 13 06:28:49.826250 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:41195] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aY5UIcim7ZTAHzi7xZvbkAAAAQ4"]
[Fri Feb 13 06:28:50.663541 2026] [:error] [pid 51243:tid 51255] [client 51.120.78.0:59669] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aY5UIsim7ZTAHzi7xZvbkgAAAQo"]
[Fri Feb 13 06:28:51.303227 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:41189] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aY5UI8im7ZTAHzi7xZvblQAAARc"]
[Fri Feb 13 06:28:52.446252 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:47995] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aY5UJB8A_fZBamNLnfVINAAAABY"]
[Fri Feb 13 06:28:53.010897 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:42873] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aY5UJdiAvPoWmw5YhwmnnwAAAFM"]
[Fri Feb 13 06:28:53.644502 2026] [:error] [pid 49224:tid 49273] [client 51.120.78.0:43456] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aY5UJdiAvPoWmw5YhwmnoAAAAEY"]
[Fri Feb 13 06:28:54.613456 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:59700] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/"] [unique_id "aY5UJh8A_fZBamNLnfVIPAAAABM"]
[Fri Feb 13 06:28:57.137436 2026] [:error] [pid 49225:tid 49318] [client 51.120.78.0:48473] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/"] [unique_id "aY5UKTwH8-zGxtAd3jvrbgAAAJg"]
[Fri Feb 13 06:28:57.695560 2026] [:error] [pid 49225:tid 49308] [client 51.120.78.0:55307] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/"] [unique_id "aY5UKTwH8-zGxtAd3jvrcAAAAI4"]
[Fri Feb 13 06:28:58.379520 2026] [:error] [pid 49224:tid 49285] [client 51.120.78.0:55345] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/"] [unique_id "aY5UKtiAvPoWmw5YhwmnsQAAAFI"]
[Fri Feb 13 06:28:58.918625 2026] [:error] [pid 49225:tid 49317] [client 51.120.78.0:59139] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/"] [unique_id "aY5UKjwH8-zGxtAd3jvrcgAAAJc"]
[Fri Feb 13 06:28:59.528132 2026] [:error] [pid 49225:tid 49306] [client 51.120.78.0:59694] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/"] [unique_id "aY5UKzwH8-zGxtAd3jvrdAAAAIw"]
[Fri Feb 13 06:29:00.159262 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:55320] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/"] [unique_id "aY5ULMim7ZTAHzi7xZvbuQAAAQE"]
[Fri Feb 13 06:29:00.746910 2026] [:error] [pid 49335:tid 49347] [client 51.120.78.0:52795] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/"] [unique_id "aY5ULKp--SFY2nwOiqlRRwAAAMo"]
[Fri Feb 13 06:29:01.274873 2026] [:error] [pid 49223:tid 49250] [client 51.120.78.0:48489] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/"] [unique_id "aY5ULR8A_fZBamNLnfVISAAAABI"]
[Fri Feb 13 06:29:01.807022 2026] [:error] [pid 51243:tid 51267] [client 51.120.78.0:48491] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/"] [unique_id "aY5ULcim7ZTAHzi7xZvbvwAAARY"]
[Fri Feb 13 06:29:02.627851 2026] [:error] [pid 49335:tid 49345] [client 51.120.78.0:59163] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Fri Feb 13 06:29:03.510248 2026] [:error] [pid 49335:tid 49357] [client 51.120.78.0:59163] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 13 06:29:03.774381 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:59163] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Feb 13 06:29:04.836822 2026] [:error] [pid 49335:tid 49354] [client 51.120.78.0:59163] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/lv.php"] [unique_id "aY5UMKp--SFY2nwOiqlRYQAAANE"]
[Fri Feb 13 06:29:06.178423 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:51331] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aY5UMqp--SFY2nwOiqlRwQAAAMc"]
[Fri Feb 13 06:29:06.731348 2026] [:error] [pid 51243:tid 51256] [client 51.120.78.0:46173] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aY5UMsim7ZTAHzi7xZvbwwAAAQs"]
[Fri Feb 13 06:29:07.364118 2026] [:error] [pid 49225:tid 49304] [client 51.120.78.0:55329] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aY5UMzwH8-zGxtAd3jvrkwAAAIo"]
[Fri Feb 13 06:29:07.898310 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:59651] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aY5UM9iAvPoWmw5YhwmnvQAAAEE"]
[Fri Feb 13 06:29:08.417447 2026] [:error] [pid 49225:tid 49301] [client 51.120.78.0:47997] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aY5UNDwH8-zGxtAd3jvrlgAAAIc"]
[Fri Feb 13 06:29:09.034255 2026] [:error] [pid 51243:tid 51255] [client 51.120.78.0:59154] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aY5UNcim7ZTAHzi7xZvbxwAAAQo"]
[Fri Feb 13 06:29:09.629304 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:51349] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aY5UNap--SFY2nwOiqlRxQAAANc"]
[Fri Feb 13 06:29:10.268322 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:59178] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aY5UNh8A_fZBamNLnfVIUgAAAAo"]
[Fri Feb 13 06:29:10.867485 2026] [:error] [pid 49225:tid 49300] [client 51.120.78.0:55296] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-php"] [unique_id "aY5UNjwH8-zGxtAd3jvrmQAAAIY"]
[Fri Feb 13 06:29:11.429471 2026] [:error] [pid 49224:tid 49273] [client 51.120.78.0:59141] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-php"] [unique_id "aY5UN9iAvPoWmw5YhwmnywAAAEY"]
[Fri Feb 13 06:29:11.958939 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:47942] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-php"] [unique_id "aY5UNx8A_fZBamNLnfVIVQAAAAU"]
[Fri Feb 13 06:29:12.538788 2026] [:error] [pid 49225:tid 49305] [client 51.120.78.0:52737] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-php"] [unique_id "aY5UODwH8-zGxtAd3jvrnwAAAIs"]
[Fri Feb 13 06:29:13.140225 2026] [:error] [pid 49223:tid 49236] [client 51.120.78.0:48470] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aY5UOR8A_fZBamNLnfVIWQAAAAQ"]
[Fri Feb 13 06:29:13.744168 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:42858] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aY5UOTwH8-zGxtAd3jvrowAAAIk"]
[Fri Feb 13 06:29:14.329629 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:42830] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aY5UOqp--SFY2nwOiqlRywAAAMU"]
[Fri Feb 13 06:29:14.935814 2026] [:error] [pid 49225:tid 49297] [client 51.120.78.0:42834] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aY5UOjwH8-zGxtAd3jvrqQAAAIM"]
[Fri Feb 13 06:29:15.469842 2026] [:error] [pid 49335:tid 49359] [client 51.120.78.0:47999] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aY5UO6p--SFY2nwOiqlR0AAAANY"]
[Fri Feb 13 06:29:16.013167 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:59683] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aY5UPKp--SFY2nwOiqlR0wAAANc"]
[Fri Feb 13 06:29:16.578638 2026] [:error] [pid 49223:tid 49245] [client 51.120.78.0:55335] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aY5UPB8A_fZBamNLnfVIWgAAAA0"]
[Fri Feb 13 06:29:17.144791 2026] [:error] [pid 49225:tid 49302] [client 51.120.78.0:51337] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aY5UPTwH8-zGxtAd3jvrqgAAAIg"]
[Fri Feb 13 06:29:17.718124 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:42826] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aY5UPcim7ZTAHzi7xZvb0QAAAQ0"]
[Fri Feb 13 06:29:18.283478 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:52776] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aY5UPqp--SFY2nwOiqlR2QAAAMU"]
[Fri Feb 13 06:29:18.837269 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:55325] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aY5UPsim7ZTAHzi7xZvb1QAAAQ8"]
[Fri Feb 13 06:29:19.381779 2026] [:error] [pid 51243:tid 51269] [client 51.120.78.0:47980] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aY5UP8im7ZTAHzi7xZvb1gAAARg"]
[Fri Feb 13 06:29:19.933121 2026] [:error] [pid 49335:tid 49347] [client 51.120.78.0:59161] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aY5UP6p--SFY2nwOiqlR3AAAAMo"]
[Fri Feb 13 06:29:20.468123 2026] [:error] [pid 49225:tid 49310] [client 51.120.78.0:55304] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aY5UQDwH8-zGxtAd3jvrrwAAAJA"]
[Fri Feb 13 06:29:21.024544 2026] [:error] [pid 49224:tid 49289] [client 51.120.78.0:59146] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aY5UQdiAvPoWmw5Yhwmn2AAAAFY"]
[Fri Feb 13 06:29:21.608425 2026] [:error] [pid 49224:tid 49288] [client 51.120.78.0:59660] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aY5UQdiAvPoWmw5Yhwmn2gAAAFU"]
[Fri Feb 13 06:29:22.159366 2026] [:error] [pid 49335:tid 49351] [client 51.120.78.0:59190] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aY5UQqp--SFY2nwOiqlR4AAAAM4"]
[Fri Feb 13 06:29:22.707906 2026] [:error] [pid 49335:tid 49340] [client 51.120.78.0:59170] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aY5UQqp--SFY2nwOiqlR4wAAAMM"]
[Fri Feb 13 06:29:23.359258 2026] [:error] [pid 49225:tid 49307] [client 51.120.78.0:59157] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aY5UQzwH8-zGxtAd3jvrtQAAAI0"]
[Fri Feb 13 06:29:23.890653 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:63426] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aY5UQ8im7ZTAHzi7xZvb2wAAAQ0"]
[Fri Feb 13 06:29:24.434130 2026] [:error] [pid 49224:tid 49274] [client 51.120.78.0:46175] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aY5URNiAvPoWmw5Yhwmn3gAAAEc"]
[Fri Feb 13 06:29:25.081042 2026] [:error] [pid 51243:tid 51262] [client 51.120.78.0:51389] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aY5URcim7ZTAHzi7xZvb3QAAARE"]
[Fri Feb 13 06:29:25.628847 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:59167] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aY5URcim7ZTAHzi7xZvb5QAAARc"]
[Fri Feb 13 06:29:26.159651 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:59688] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aY5URqp--SFY2nwOiqlR7wAAAMQ"]
[Fri Feb 13 06:29:26.740468 2026] [:error] [pid 49335:tid 49359] [client 51.120.78.0:52748] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aY5URqp--SFY2nwOiqlR9gAAANY"]
[Fri Feb 13 06:29:27.325951 2026] [:error] [pid 49335:tid 49339] [client 51.120.78.0:41215] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aY5UR6p--SFY2nwOiqlR_AAAAMI"]
[Fri Feb 13 06:29:27.922632 2026] [:error] [pid 49335:tid 49347] [client 51.120.78.0:42843] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aY5UR6p--SFY2nwOiqlSBAAAAMo"]
[Fri Feb 13 06:29:28.469915 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:59137] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aY5USMim7ZTAHzi7xZvb-QAAAQE"]
[Fri Feb 13 06:29:29.099533 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:41202] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aY5UScim7ZTAHzi7xZvb_QAAAQU"]
[Fri Feb 13 06:29:29.669227 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:41200] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aY5USdiAvPoWmw5Yhwmn8wAAAFQ"]
[Fri Feb 13 06:29:30.199103 2026] [:error] [pid 49225:tid 49302] [client 51.120.78.0:41178] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aY5USjwH8-zGxtAd3jvrwAAAAIg"]
[Fri Feb 13 06:29:30.762352 2026] [:error] [pid 51243:tid 51262] [client 51.120.78.0:42832] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aY5USsim7ZTAHzi7xZvb_wAAARE"]
[Fri Feb 13 06:29:31.284409 2026] [:error] [pid 49224:tid 49273] [client 51.120.78.0:42868] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aY5US9iAvPoWmw5Yhwmn9AAAAEY"]
[Fri Feb 13 06:29:31.882477 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:47964] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aY5US8im7ZTAHzi7xZvcAQAAARc"]
[Fri Feb 13 06:29:32.535224 2026] [:error] [pid 51243:tid 51254] [client 51.120.78.0:41200] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aY5UTMim7ZTAHzi7xZvcAwAAAQk"]
[Fri Feb 13 06:29:33.067087 2026] [:error] [pid 49335:tid 49359] [client 51.120.78.0:41209] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aY5UTap--SFY2nwOiqlSDAAAANY"]
[Fri Feb 13 06:29:33.602323 2026] [:error] [pid 49335:tid 49358] [client 51.120.78.0:59659] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aY5UTap--SFY2nwOiqlSDgAAANU"]
[Fri Feb 13 06:29:34.149251 2026] [:error] [pid 49225:tid 49310] [client 51.120.78.0:48451] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aY5UTjwH8-zGxtAd3jvrxwAAAJA"]
[Fri Feb 13 06:29:34.780882 2026] [:error] [pid 49225:tid 49294] [client 51.120.78.0:63462] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aY5UTjwH8-zGxtAd3jvryQAAAIA"]
[Fri Feb 13 06:29:35.326918 2026] [:error] [pid 49224:tid 49290] [client 51.120.78.0:52767] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aY5UT9iAvPoWmw5Yhwmn-gAAAFc"]
[Fri Feb 13 06:29:35.885048 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:55352] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aY5UT9iAvPoWmw5Yhwmn_AAAAFQ"]
[Fri Feb 13 06:29:36.411862 2026] [:error] [pid 49335:tid 49340] [client 51.120.78.0:59172] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aY5UUKp--SFY2nwOiqlSFgAAAMM"]
[Fri Feb 13 06:29:37.015916 2026] [:error] [pid 49225:tid 49304] [client 51.120.78.0:63455] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY5UUTwH8-zGxtAd3jvrzAAAAIo"]
[Fri Feb 13 06:29:37.570954 2026] [:error] [pid 49223:tid 49248] [client 51.120.78.0:59194] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY5UUR8A_fZBamNLnfVIfAAAABA"]
[Fri Feb 13 06:29:38.131199 2026] [:error] [pid 49335:tid 49339] [client 51.120.78.0:48472] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY5UUqp--SFY2nwOiqlSGgAAAMI"]
[Fri Feb 13 06:29:38.762480 2026] [:error] [pid 49225:tid 49300] [client 51.120.78.0:55309] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY5UUjwH8-zGxtAd3jvr0AAAAIY"]
[Fri Feb 13 06:29:39.314703 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:59162] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY5UUx8A_fZBamNLnfVIfgAAABM"]
[Fri Feb 13 06:29:39.849750 2026] [:error] [pid 51243:tid 51245] [client 51.120.78.0:59650] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY5UU8im7ZTAHzi7xZvcCgAAAQA"]
[Fri Feb 13 06:29:40.447150 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:48475] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY5UVMim7ZTAHzi7xZvcCwAAARc"]
[Fri Feb 13 06:29:40.992392 2026] [:error] [pid 49225:tid 49294] [client 51.120.78.0:41201] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY5UVDwH8-zGxtAd3jvr1AAAAIA"]
[Fri Feb 13 06:29:41.575246 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:59698] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5UVap--SFY2nwOiqlSIAAAAMA"]
[Fri Feb 13 06:29:42.136601 2026] [:error] [pid 49223:tid 49233] [client 51.120.78.0:47944] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5UVh8A_fZBamNLnfVIhQAAAAE"]
[Fri Feb 13 06:29:42.726825 2026] [:error] [pid 49225:tid 49317] [client 51.120.78.0:41187] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5UVjwH8-zGxtAd3jvr2AAAAJc"]
[Fri Feb 13 06:29:43.343794 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:41199] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5UVx8A_fZBamNLnfVIiAAAABU"]
[Fri Feb 13 06:29:43.897491 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:59180] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css.php"] [unique_id "aY5UV6p--SFY2nwOiqlSJwAAANI"]
[Fri Feb 13 06:29:44.459022 2026] [:error] [pid 49225:tid 49318] [client 51.120.78.0:42846] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aY5UWDwH8-zGxtAd3jvr3QAAAJg"]
[Fri Feb 13 06:29:45.050772 2026] [:error] [pid 49224:tid 49285] [client 51.120.78.0:59701] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aY5UWdiAvPoWmw5YhwmoBQAAAFI"]
[Fri Feb 13 06:29:45.571624 2026] [:error] [pid 49335:tid 49351] [client 51.120.78.0:55305] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-links-opml.php"] [unique_id "aY5UWap--SFY2nwOiqlSLQAAAM4"]
[Fri Feb 13 06:29:46.145873 2026] [:error] [pid 49224:tid 49291] [client 51.120.78.0:55319] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aY5UWtiAvPoWmw5YhwmoBgAAAFg"]
[Fri Feb 13 06:29:46.692003 2026] [:error] [pid 49224:tid 49282] [client 51.120.78.0:63454] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/index.php"] [unique_id "aY5UWtiAvPoWmw5YhwmoCAAAAE8"]
[Fri Feb 13 06:29:47.246720 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:59164] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aY5UWx8A_fZBamNLnfVIiwAAAAY"]
[Fri Feb 13 06:29:47.835200 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:47973] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY5UW8im7ZTAHzi7xZvcFgAAAQ8"]
[Fri Feb 13 06:29:48.357792 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:47981] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY5UXKp--SFY2nwOiqlSMwAAANI"]
[Fri Feb 13 06:29:48.896957 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:55349] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY5UXMim7ZTAHzi7xZvcGAAAARU"]
[Fri Feb 13 06:29:49.420417 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:51334] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aY5UXcim7ZTAHzi7xZvcHgAAAQ4"]
[Fri Feb 13 06:29:49.985501 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:46165] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aY5UXap--SFY2nwOiqlSNwAAAMA"]
[Fri Feb 13 06:29:50.528315 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:47968] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aY5UXsim7ZTAHzi7xZvcIQAAAQ8"]
[Fri Feb 13 06:29:51.093161 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:41170] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aY5UX9iAvPoWmw5YhwmoIAAAAFE"]
[Fri Feb 13 06:29:51.621175 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:47967] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aY5UX9iAvPoWmw5YhwmoJgAAAEA"]
[Fri Feb 13 06:29:52.156059 2026] [:error] [pid 49225:tid 49297] [client 51.120.78.0:63459] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aY5UYDwH8-zGxtAd3jvr6QAAAIM"]
[Fri Feb 13 06:29:52.693926 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:48456] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aY5UYNiAvPoWmw5YhwmoKwAAAFE"]
[Fri Feb 13 06:29:53.244479 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:48481] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aY5UYdiAvPoWmw5YhwmoLQAAAEA"]
[Fri Feb 13 06:29:53.787489 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:42835] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY5UYdiAvPoWmw5YhwmoLwAAAEo"]
[Fri Feb 13 06:29:54.313139 2026] [:error] [pid 49225:tid 49299] [client 51.120.78.0:59664] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY5UYjwH8-zGxtAd3jvr7QAAAIU"]
[Fri Feb 13 06:29:54.838281 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:63443] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY5UYqp--SFY2nwOiqlSRQAAAMU"]
[Fri Feb 13 06:29:55.451088 2026] [:error] [pid 49335:tid 49344] [client 51.120.78.0:42850] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY5UY6p--SFY2nwOiqlSSAAAAMc"]
[Fri Feb 13 06:29:56.013909 2026] [:error] [pid 51243:tid 51256] [client 51.120.78.0:48464] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY5UZMim7ZTAHzi7xZvcLgAAAQs"]
[Fri Feb 13 06:29:56.698503 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:41179] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY5UZDwH8-zGxtAd3jvr8AAAAIk"]
[Fri Feb 13 06:29:57.260756 2026] [:error] [pid 49223:tid 49256] [client 51.120.78.0:47992] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY5UZR8A_fZBamNLnfVIlQAAABg"]
[Fri Feb 13 06:29:57.879954 2026] [:error] [pid 49225:tid 49300] [client 51.120.78.0:52769] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY5UZTwH8-zGxtAd3jvr8wAAAIY"]
[Fri Feb 13 06:29:58.429420 2026] [:error] [pid 49224:tid 49272] [client 51.120.78.0:47958] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aY5UZtiAvPoWmw5YhwmoMAAAAEU"]
[Fri Feb 13 06:29:59.013109 2026] [:error] [pid 49225:tid 49306] [client 51.120.78.0:59177] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aY5UZzwH8-zGxtAd3jvr9QAAAIw"]
[Fri Feb 13 06:29:59.647408 2026] [:error] [pid 49335:tid 49340] [client 51.120.78.0:47972] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aY5UZ6p--SFY2nwOiqlSTAAAAMM"]
[Fri Feb 13 06:30:00.299789 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:52746] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aY5UaKp--SFY2nwOiqlSTgAAANM"]
[Fri Feb 13 06:30:00.862211 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:51352] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aY5UaNiAvPoWmw5YhwmoOAAAAEg"]
[Fri Feb 13 06:30:01.417333 2026] [:error] [pid 49224:tid 49288] [client 51.120.78.0:51333] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aY5UadiAvPoWmw5YhwmoOwAAAFU"]
[Fri Feb 13 06:30:01.989227 2026] [:error] [pid 51243:tid 51251] [client 51.120.78.0:47977] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aY5Uacim7ZTAHzi7xZvcOwAAAQY"]
[Fri Feb 13 06:30:02.665071 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:52761] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aY5Uaqp--SFY2nwOiqlSUwAAAMk"]
[Fri Feb 13 06:30:03.287773 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:55308] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aY5Ua8im7ZTAHzi7xZvcPAAAARU"]
[Fri Feb 13 06:30:03.913250 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:59677] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aY5Ua6p--SFY2nwOiqlSVQAAANc"]
[Fri Feb 13 06:30:04.450186 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:55326] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aY5UbB8A_fZBamNLnfVImAAAABM"]
[Fri Feb 13 06:30:05.011312 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:48455] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Feb 13 06:30:05.847001 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:48455] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Feb 13 06:30:06.161540 2026] [:error] [pid 49224:tid 49279] [client 51.120.78.0:48455] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Feb 13 06:30:06.425292 2026] [:error] [pid 49224:tid 49273] [client 51.120.78.0:48455] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Feb 13 06:30:06.735789 2026] [:error] [pid 49224:tid 49270] [client 51.120.78.0:48455] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 13 06:30:07.079362 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:48455] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Feb 13 06:30:07.362350 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:48455] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aY5Ub9iAvPoWmw5YhwmoUAAAAFM"]
[Fri Feb 13 06:30:07.909365 2026] [:error] [pid 49225:tid 49306] [client 51.120.78.0:52789] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aY5UbzwH8-zGxtAd3jvr-wAAAIw"]
[Fri Feb 13 06:30:08.615068 2026] [:error] [pid 51243:tid 51251] [client 51.120.78.0:59695] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Fri Feb 13 06:30:09.155644 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:59695] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Feb 13 06:30:09.427481 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:59695] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aY5Uccim7ZTAHzi7xZvcSQAAARU"]
[Fri Feb 13 06:30:10.029889 2026] [:error] [pid 49223:tid 49241] [client 51.120.78.0:59149] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aY5Uch8A_fZBamNLnfVInAAAAAk"]
[Fri Feb 13 06:30:10.575447 2026] [:error] [pid 49335:tid 49340] [client 51.120.78.0:52779] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aY5Ucqp--SFY2nwOiqlSWwAAAMM"]
[Fri Feb 13 06:30:11.113186 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:48504] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aY5Uc9iAvPoWmw5YhwmoVwAAAFM"]
[Fri Feb 13 06:30:11.701281 2026] [:error] [pid 49223:tid 49246] [client 51.120.78.0:59187] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aY5Ucx8A_fZBamNLnfVIoAAAAA4"]
[Fri Feb 13 06:30:12.249271 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:41167] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aY5UdB8A_fZBamNLnfVIogAAABY"]
[Fri Feb 13 06:30:12.780518 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:55344] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aY5UdMim7ZTAHzi7xZvcSgAAAQE"]
[Fri Feb 13 06:30:13.344869 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:41168] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aY5UdR8A_fZBamNLnfVIpgAAABU"]
[Fri Feb 13 06:30:13.902986 2026] [:error] [pid 49224:tid 49281] [client 51.120.78.0:42845] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY5UddiAvPoWmw5YhwmoXQAAAE4"]
[Fri Feb 13 06:30:14.538440 2026] [:error] [pid 49224:tid 49288] [client 51.120.78.0:59670] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY5UdtiAvPoWmw5YhwmoXgAAAFU"]
[Fri Feb 13 06:30:15.130065 2026] [:error] [pid 49225:tid 49297] [client 51.120.78.0:59694] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY5UdzwH8-zGxtAd3jvsCAAAAIM"]
[Fri Feb 13 06:30:15.670180 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:41153] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aY5Ud8im7ZTAHzi7xZvcTgAAAQ4"]
[Fri Feb 13 06:30:16.209918 2026] [:error] [pid 49335:tid 49354] [client 51.120.78.0:42820] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/404.php"] [unique_id "aY5UeKp--SFY2nwOiqlSbQAAANE"]
[Fri Feb 13 06:30:16.757727 2026] [:error] [pid 49225:tid 49318] [client 51.120.78.0:48502] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/404.php"] [unique_id "aY5UeDwH8-zGxtAd3jvsEAAAAJg"]
[Fri Feb 13 06:30:17.420497 2026] [:error] [pid 49224:tid 49291] [client 51.120.78.0:42856] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/404.php"] [unique_id "aY5UediAvPoWmw5YhwmoZAAAAFg"]
[Fri Feb 13 06:30:17.955679 2026] [:error] [pid 49225:tid 49310] [client 51.120.78.0:59152] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/404.php"] [unique_id "aY5UeTwH8-zGxtAd3jvsFAAAAJA"]
[Fri Feb 13 06:30:18.489676 2026] [:error] [pid 49335:tid 49343] [client 51.120.78.0:47948] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aY5Ueqp--SFY2nwOiqlScgAAAMY"]
[Fri Feb 13 06:30:19.031929 2026] [:error] [pid 49225:tid 49299] [client 51.120.78.0:59148] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aY5UezwH8-zGxtAd3jvsGAAAAIU"]
[Fri Feb 13 06:30:19.596427 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:52740] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aY5Uex8A_fZBamNLnfVItQAAAAo"]
[Fri Feb 13 06:30:20.184034 2026] [:error] [pid 49223:tid 49236] [client 51.120.78.0:55353] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aY5UfB8A_fZBamNLnfVIuAAAAAQ"]
[Fri Feb 13 06:30:20.787705 2026] [:error] [pid 49223:tid 49246] [client 51.120.78.0:52783] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aY5UfB8A_fZBamNLnfVIvAAAAA4"]
[Fri Feb 13 06:30:21.460155 2026] [:error] [pid 49224:tid 49283] [client 51.120.78.0:42837] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aY5UfdiAvPoWmw5YhwmoagAAAFA"]
[Fri Feb 13 06:30:22.016337 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:63460] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aY5Ufsim7ZTAHzi7xZvcYgAAAQ0"]
[Fri Feb 13 06:30:22.657095 2026] [:error] [pid 51243:tid 51253] [client 51.120.78.0:43470] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aY5Ufsim7ZTAHzi7xZvcZwAAAQg"]
[Fri Feb 13 06:30:23.197859 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:47984] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aY5Uf8im7ZTAHzi7xZvcaQAAAQ4"]
[Fri Feb 13 06:30:23.753887 2026] [:error] [pid 51243:tid 51264] [client 51.120.78.0:52784] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aY5Uf8im7ZTAHzi7xZvcagAAARM"]
[Fri Feb 13 06:30:24.313456 2026] [:error] [pid 49335:tid 49339] [client 51.120.78.0:51360] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aY5UgKp--SFY2nwOiqlSfQAAAMI"]
[Fri Feb 13 06:30:24.857852 2026] [:error] [pid 49225:tid 49311] [client 51.120.78.0:51336] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aY5UgDwH8-zGxtAd3jvsKgAAAJE"]
[Fri Feb 13 06:30:25.395818 2026] [:error] [pid 49223:tid 49249] [client 51.120.78.0:46146] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aY5UgR8A_fZBamNLnfVIxwAAABE"]
[Fri Feb 13 06:30:25.931808 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:47947] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aY5Ugap--SFY2nwOiqlShQAAANc"]
[Fri Feb 13 06:30:26.557593 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:51342] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aY5Ugqp--SFY2nwOiqlSiwAAAM0"]
[Fri Feb 13 06:30:27.253672 2026] [:error] [pid 49225:tid 49302] [client 51.120.78.0:48506] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aY5UgzwH8-zGxtAd3jvsOQAAAIg"]
[Fri Feb 13 06:30:27.824027 2026] [:error] [pid 49224:tid 49290] [client 51.120.78.0:42840] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aY5Ug9iAvPoWmw5YhwmoewAAAFc"]
[Fri Feb 13 06:30:28.354819 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:51379] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aY5UhNiAvPoWmw5YhwmofgAAAEA"]
[Fri Feb 13 06:30:28.938306 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:41188] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5UhB8A_fZBamNLnfVI0AAAAAU"]
[Fri Feb 13 06:30:29.508503 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:52786] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5UhR8A_fZBamNLnfVI0QAAAAM"]
[Fri Feb 13 06:30:30.200464 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:47941] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5Uhh8A_fZBamNLnfVI1AAAABU"]
[Fri Feb 13 06:30:30.736663 2026] [:error] [pid 51243:tid 51265] [client 51.120.78.0:52753] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5Uhsim7ZTAHzi7xZvcfQAAARQ"]
[Fri Feb 13 06:30:31.305754 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:42877] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aY5Uh9iAvPoWmw5YhwmogAAAAEo"]
[Fri Feb 13 06:30:31.887769 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:41152] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aY5Uh8im7ZTAHzi7xZvcfgAAAQE"]
[Fri Feb 13 06:30:32.471087 2026] [:error] [pid 49335:tid 49348] [client 51.120.78.0:63437] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aY5UiKp--SFY2nwOiqlSkgAAAMs"]
[Fri Feb 13 06:30:33.042172 2026] [:error] [pid 49223:tid 49256] [client 51.120.78.0:51343] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aY5UiR8A_fZBamNLnfVI4gAAABg"]
[Fri Feb 13 06:30:33.570204 2026] [:error] [pid 49335:tid 49345] [client 51.120.78.0:51357] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aY5Uiap--SFY2nwOiqlSmAAAAMg"]
[Fri Feb 13 06:30:34.104072 2026] [:error] [pid 49224:tid 49291] [client 51.120.78.0:55318] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aY5UitiAvPoWmw5YhwmohgAAAFg"]
[Fri Feb 13 06:30:34.630913 2026] [:error] [pid 49223:tid 49236] [client 51.120.78.0:59697] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aY5Uih8A_fZBamNLnfVI5gAAAAQ"]
[Fri Feb 13 06:30:35.213834 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:46158] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aY5UizwH8-zGxtAd3jvsQgAAAII"]
[Fri Feb 13 06:30:35.763122 2026] [:error] [pid 49223:tid 49250] [client 51.120.78.0:41165] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aY5Uix8A_fZBamNLnfVI6AAAABI"]
[Fri Feb 13 06:30:36.370969 2026] [:error] [pid 51243:tid 51249] [client 51.120.78.0:46158] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aY5UjMim7ZTAHzi7xZvcigAAAQQ"]
[Fri Feb 13 06:30:37.031141 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:41210] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aY5UjdiAvPoWmw5YhwmoigAAAEo"]
[Fri Feb 13 06:30:37.571865 2026] [:error] [pid 49225:tid 49306] [client 51.120.78.0:59687] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aY5UjTwH8-zGxtAd3jvsSAAAAIw"]
[Fri Feb 13 06:30:38.184379 2026] [:error] [pid 51243:tid 51264] [client 51.120.78.0:59183] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aY5Ujsim7ZTAHzi7xZvcjgAAARM"]
[Fri Feb 13 06:30:38.708849 2026] [:error] [pid 51243:tid 51247] [client 51.120.78.0:42866] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aY5Ujsim7ZTAHzi7xZvckQAAAQI"]
[Fri Feb 13 06:30:39.284099 2026] [:error] [pid 51243:tid 51254] [client 51.120.78.0:42839] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aY5Uj8im7ZTAHzi7xZvckgAAAQk"]
[Fri Feb 13 06:30:39.832135 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:41161] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aY5Uj6p--SFY2nwOiqlSoQAAAMk"]
[Fri Feb 13 06:30:40.427109 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:48450] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aY5UkKp--SFY2nwOiqlSowAAAMQ"]
[Fri Feb 13 06:30:41.039304 2026] [:error] [pid 51243:tid 51245] [client 51.120.78.0:47963] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aY5Ukcim7ZTAHzi7xZvclwAAAQA"]
[Fri Feb 13 06:30:41.635804 2026] [:error] [pid 49225:tid 49311] [client 51.120.78.0:52736] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aY5UkTwH8-zGxtAd3jvsUAAAAJE"]
[Fri Feb 13 06:30:42.265426 2026] [:error] [pid 49223:tid 49252] [client 51.120.78.0:41204] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/index.php"] [unique_id "aY5Ukh8A_fZBamNLnfVI7QAAABQ"]
[Fri Feb 13 06:30:42.798018 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:48483] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/"] [unique_id "aY5UktiAvPoWmw5YhwmojwAAAFE"]
[Fri Feb 13 06:30:43.356780 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:52780] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/"] [unique_id "aY5Ukx8A_fZBamNLnfVI7wAAABM"]
[Fri Feb 13 06:30:43.891222 2026] [:error] [pid 49224:tid 49267] [client 51.120.78.0:48460] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/"] [unique_id "aY5Uk9iAvPoWmw5YhwmokwAAAEA"]
[Fri Feb 13 06:30:44.438978 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:51352] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/"] [unique_id "aY5UlB8A_fZBamNLnfVI8gAAABY"]
[Fri Feb 13 06:30:44.991569 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:47959] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/"] [unique_id "aY5UlMim7ZTAHzi7xZvcmwAAAQ0"]
[Fri Feb 13 06:30:45.537891 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:42851] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/"] [unique_id "aY5Ulap--SFY2nwOiqlSrQAAAMA"]
[Fri Feb 13 06:30:46.069020 2026] [:error] [pid 51243:tid 51268] [client 51.120.78.0:42854] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/"] [unique_id "aY5Ulsim7ZTAHzi7xZvcnAAAARc"]
[Fri Feb 13 06:30:46.643056 2026] [:error] [pid 51243:tid 51261] [client 51.120.78.0:55328] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/"] [unique_id "aY5Ulsim7ZTAHzi7xZvcngAAARA"]
[Fri Feb 13 06:30:47.191224 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:52754] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY5Ulx8A_fZBamNLnfVI8wAAAAg"]
[Fri Feb 13 06:30:47.755465 2026] [:error] [pid 49225:tid 49312] [client 51.120.78.0:51347] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY5UlzwH8-zGxtAd3jvsWwAAAJI"]
[Fri Feb 13 06:30:48.315980 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:47982] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY5UmMim7ZTAHzi7xZvcoAAAAQU"]
[Fri Feb 13 06:30:48.903777 2026] [:error] [pid 49224:tid 49287] [client 51.120.78.0:59654] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aY5UmNiAvPoWmw5YhwmomQAAAFQ"]
[Fri Feb 13 06:30:49.465196 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:59702] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aY5UmdiAvPoWmw5YhwmomwAAAFM"]
[Fri Feb 13 06:30:49.996673 2026] [:error] [pid 49335:tid 49349] [client 51.120.78.0:59657] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aY5Umap--SFY2nwOiqlSsgAAAMw"]
[Fri Feb 13 06:30:50.526653 2026] [:error] [pid 49335:tid 49348] [client 51.120.78.0:41160] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aY5Umqp--SFY2nwOiqlStQAAAMs"]
[Fri Feb 13 06:30:51.097055 2026] [:error] [pid 51243:tid 51256] [client 51.120.78.0:48479] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aY5Um8im7ZTAHzi7xZvcogAAAQs"]
[Fri Feb 13 06:30:51.632260 2026] [:error] [pid 51243:tid 51254] [client 51.120.78.0:59176] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY5Um8im7ZTAHzi7xZvcowAAAQk"]
[Fri Feb 13 06:30:52.253092 2026] [:error] [pid 49335:tid 49345] [client 51.120.78.0:63449] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY5UnKp--SFY2nwOiqlStgAAAMg"]
[Fri Feb 13 06:30:52.800533 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:52755] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY5UnKp--SFY2nwOiqlSugAAAMQ"]
[Fri Feb 13 06:30:53.358577 2026] [:error] [pid 49225:tid 49299] [client 51.120.78.0:52785] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY5UnTwH8-zGxtAd3jvsXwAAAIU"]
[Fri Feb 13 06:30:53.907092 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:52739] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY5Unap--SFY2nwOiqlSvQAAANM"]
[Fri Feb 13 06:30:54.507421 2026] [:error] [pid 49223:tid 49238] [client 51.120.78.0:51381] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY5Unh8A_fZBamNLnfVI_QAAAAY"]
[Fri Feb 13 06:30:55.031024 2026] [:error] [pid 49223:tid 49244] [client 51.120.78.0:41192] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY5Unx8A_fZBamNLnfVI_gAAAAw"]
[Fri Feb 13 06:30:55.727788 2026] [:error] [pid 51243:tid 51261] [client 51.120.78.0:55310] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY5Un8im7ZTAHzi7xZvcqQAAARA"]
[Fri Feb 13 06:30:56.348343 2026] [:error] [pid 49225:tid 49295] [client 51.120.78.0:52777] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aY5UoDwH8-zGxtAd3jvsZwAAAIE"]
[Fri Feb 13 06:30:56.905444 2026] [:error] [pid 51243:tid 51249] [client 51.120.78.0:48462] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aY5UoMim7ZTAHzi7xZvcqgAAAQQ"]
[Fri Feb 13 06:30:57.490026 2026] [:error] [pid 51243:tid 51265] [client 51.120.78.0:48504] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aY5Uocim7ZTAHzi7xZvcrgAAARQ"]
[Fri Feb 13 06:30:58.124218 2026] [:error] [pid 49223:tid 49243] [client 51.120.78.0:55316] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aY5Uoh8A_fZBamNLnfVJBQAAAAs"]
[Fri Feb 13 06:30:58.684751 2026] [:error] [pid 49223:tid 49236] [client 51.120.78.0:51329] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aY5Uoh8A_fZBamNLnfVJBgAAAAQ"]
[Fri Feb 13 06:30:59.280109 2026] [:error] [pid 51243:tid 51255] [client 51.120.78.0:41156] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aY5Uo8im7ZTAHzi7xZvcswAAAQo"]
[Fri Feb 13 06:30:59.921275 2026] [:error] [pid 49335:tid 49341] [client 51.120.78.0:59184] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aY5Uo6p--SFY2nwOiqlSxgAAAMQ"]
[Fri Feb 13 06:31:00.499121 2026] [:error] [pid 49335:tid 49353] [client 51.120.78.0:48493] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aY5UpKp--SFY2nwOiqlSxwAAANA"]
[Fri Feb 13 06:31:01.056862 2026] [:error] [pid 49224:tid 49289] [client 51.120.78.0:51364] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "aY5UpdiAvPoWmw5YhwmouAAAAFY"]
[Fri Feb 13 06:31:01.639132 2026] [:error] [pid 49225:tid 49302] [client 51.120.78.0:48511] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "aY5UpTwH8-zGxtAd3jvscAAAAIg"]
[Fri Feb 13 06:31:02.174869 2026] [:error] [pid 49223:tid 49245] [client 51.120.78.0:47978] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "aY5Uph8A_fZBamNLnfVJCAAAAA0"]
[Fri Feb 13 06:31:02.709525 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:48493] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "aY5UpjwH8-zGxtAd3jvsdAAAAII"]
[Fri Feb 13 06:31:03.339286 2026] [:error] [pid 51243:tid 51263] [client 51.120.78.0:41163] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aY5Up8im7ZTAHzi7xZvcugAAARI"]
[Fri Feb 13 06:31:03.913471 2026] [:error] [pid 51243:tid 51248] [client 51.120.78.0:59686] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aY5Up8im7ZTAHzi7xZvcvAAAAQM"]
[Fri Feb 13 06:31:04.456847 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:55347] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aY5UqKp--SFY2nwOiqlSywAAAMk"]
[Fri Feb 13 06:31:05.014772 2026] [:error] [pid 49225:tid 49307] [client 51.120.78.0:51386] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aY5UqTwH8-zGxtAd3jvseAAAAI0"]
[Fri Feb 13 06:31:05.538364 2026] [:error] [pid 49223:tid 49255] [client 51.120.78.0:42856] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aY5UqR8A_fZBamNLnfVJDAAAABc"]
[Fri Feb 13 06:31:06.190020 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:48469] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aY5Uqh8A_fZBamNLnfVJDQAAAAI"]
[Fri Feb 13 06:31:06.718567 2026] [:error] [pid 51243:tid 51258] [client 51.120.78.0:51383] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aY5Uqsim7ZTAHzi7xZvcvQAAAQ0"]
[Fri Feb 13 06:31:07.264613 2026] [:error] [pid 49225:tid 49298] [client 51.120.78.0:41191] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aY5UqzwH8-zGxtAd3jvsgAAAAIQ"]
[Fri Feb 13 06:31:07.844299 2026] [:error] [pid 49223:tid 49236] [client 51.120.78.0:59685] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aY5Uqx8A_fZBamNLnfVJEAAAAAQ"]
[Fri Feb 13 06:31:08.429314 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:47986] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aY5UrB8A_fZBamNLnfVJEQAAAAo"]
[Fri Feb 13 06:31:09.060154 2026] [:error] [pid 49335:tid 49354] [client 51.120.78.0:51356] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Feb 13 06:31:10.382822 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:51356] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aY5Urqp--SFY2nwOiqlS2QAAAM0"]
[Fri Feb 13 06:31:10.930947 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php
[Fri Feb 13 06:31:11.514394 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Feb 13 06:31:11.789022 2026] [:error] [pid 49224:tid 49280] [client 51.120.78.0:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Fri Feb 13 06:31:12.699356 2026] [:error] [pid 49224:tid 49288] [client 51.120.78.0:48495] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aY5UsNiAvPoWmw5YhwmozQAAAFU"]
[Fri Feb 13 06:31:13.278872 2026] [:error] [pid 49335:tid 49348] [client 51.120.78.0:63427] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aY5Usap--SFY2nwOiqlS4AAAAMs"]
[Fri Feb 13 06:31:13.904427 2026] [:error] [pid 49335:tid 49347] [client 51.120.78.0:47950] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aY5Usap--SFY2nwOiqlS4QAAAMo"]
[Fri Feb 13 06:31:14.773187 2026] [:error] [pid 51243:tid 51252] [client 51.120.78.0:47998] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aY5Ussim7ZTAHzi7xZvdCAAAAQc"]
[Fri Feb 13 06:31:15.448205 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:43516] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5Usx8A_fZBamNLnfVJFAAAAAg"]
[Fri Feb 13 06:31:16.007187 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:52765] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5UtB8A_fZBamNLnfVJFwAAABU"]
[Fri Feb 13 06:31:16.676130 2026] [:error] [pid 49223:tid 49234] [client 51.120.78.0:63425] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5UtB8A_fZBamNLnfVJGgAAAAI"]
[Fri Feb 13 06:31:17.249447 2026] [:error] [pid 49335:tid 49353] [client 51.120.78.0:48497] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aY5Utap--SFY2nwOiqlS8gAAANA"]
[Fri Feb 13 06:31:17.862637 2026] [:error] [pid 49225:tid 49318] [client 51.120.78.0:51359] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aY5UtTwH8-zGxtAd3jvsjgAAAJg"]
[Fri Feb 13 06:31:18.419079 2026] [:error] [pid 49225:tid 49309] [client 51.120.78.0:51384] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aY5UtjwH8-zGxtAd3jvskgAAAI8"]
[Fri Feb 13 06:31:19.005268 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:46170] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aY5Ut8im7ZTAHzi7xZvdGgAAARU"]
[Fri Feb 13 06:31:19.538527 2026] [:error] [pid 49224:tid 49286] [client 51.120.78.0:47988] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aY5Ut9iAvPoWmw5Yhwmo6gAAAFM"]
[Fri Feb 13 06:31:20.272860 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:48484] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aY5UuB8A_fZBamNLnfVJIwAAAAg"]
[Fri Feb 13 06:31:20.839030 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:59703] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aY5UuMim7ZTAHzi7xZvdHwAAAQU"]
[Fri Feb 13 06:31:21.437133 2026] [:error] [pid 51243:tid 51246] [client 51.120.78.0:59691] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aY5Uucim7ZTAHzi7xZvdIQAAAQE"]
[Fri Feb 13 06:31:21.970823 2026] [:error] [pid 49223:tid 49239] [client 51.120.78.0:52965] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aY5UuR8A_fZBamNLnfVJJQAAAAc"]
[Fri Feb 13 06:31:22.636573 2026] [:error] [pid 49335:tid 49345] [client 51.120.78.0:43500] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aY5Uuqp--SFY2nwOiqlS_gAAAMg"]
[Fri Feb 13 06:31:23.177009 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:51388] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aY5Uu6p--SFY2nwOiqlTAAAAAMU"]
[Fri Feb 13 06:31:23.764460 2026] [:error] [pid 49224:tid 49272] [client 51.120.78.0:42823] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aY5Uu9iAvPoWmw5Yhwmo8QAAAEU"]
[Fri Feb 13 06:31:24.336770 2026] [:error] [pid 49335:tid 49350] [client 51.120.78.0:55297] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aY5UvKp--SFY2nwOiqlTBgAAAM0"]
[Fri Feb 13 06:31:25.133987 2026] [:error] [pid 49335:tid 49343] [client 51.120.78.0:55342] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aY5Uvap--SFY2nwOiqlTCAAAAMY"]
[Fri Feb 13 06:31:25.680654 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:47985] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aY5UvR8A_fZBamNLnfVJKQAAAAU"]
[Fri Feb 13 06:31:26.271036 2026] [:error] [pid 49225:tid 49301] [client 51.120.78.0:47949] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aY5UvjwH8-zGxtAd3jvsnAAAAIc"]
[Fri Feb 13 06:31:26.870070 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:59699] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko.php"] [unique_id "aY5UvjwH8-zGxtAd3jvsnQAAAIk"]
[Fri Feb 13 06:31:27.433500 2026] [:error] [pid 49335:tid 49342] [client 51.120.78.0:52756] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aY5Uv6p--SFY2nwOiqlTCwAAAMU"]
[Fri Feb 13 06:31:27.970433 2026] [:error] [pid 49225:tid 49302] [client 51.120.78.0:55300] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aY5UvzwH8-zGxtAd3jvsoAAAAIg"]
[Fri Feb 13 06:31:28.490959 2026] [:error] [pid 49225:tid 49316] [client 51.120.78.0:42848] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aY5UwDwH8-zGxtAd3jvsogAAAJY"]
[Fri Feb 13 06:31:29.020508 2026] [:error] [pid 49335:tid 49338] [client 51.120.78.0:59656] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aY5Uwap--SFY2nwOiqlTDQAAAME"]
[Fri Feb 13 06:31:29.564835 2026] [:error] [pid 49335:tid 49353] [client 51.120.78.0:55298] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aY5Uwap--SFY2nwOiqlTEgAAANA"]
[Fri Feb 13 06:31:30.194850 2026] [:error] [pid 49223:tid 49233] [client 51.120.78.0:63481] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aY5Uwh8A_fZBamNLnfVJNgAAAAE"]
[Fri Feb 13 06:31:30.828729 2026] [:error] [pid 49225:tid 49299] [client 51.120.78.0:63439] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aY5UwjwH8-zGxtAd3jvspwAAAIU"]
[Fri Feb 13 06:31:31.421831 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:41166] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aY5Uw9iAvPoWmw5Yhwmo_gAAAEI"]
[Fri Feb 13 06:31:31.983564 2026] [:error] [pid 49223:tid 49249] [client 51.120.78.0:46152] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY5Uwx8A_fZBamNLnfVJOAAAABE"]
[Fri Feb 13 06:31:32.519704 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:52796] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY5UxDwH8-zGxtAd3jvsqQAAAII"]
[Fri Feb 13 06:31:33.096679 2026] [:error] [pid 49335:tid 49352] [client 51.120.78.0:48457] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY5Uxap--SFY2nwOiqlTGgAAAM8"]
[Fri Feb 13 06:31:33.658779 2026] [:error] [pid 51243:tid 51265] [client 51.120.78.0:51351] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aY5Uxcim7ZTAHzi7xZvdMAAAARQ"]
[Fri Feb 13 06:31:34.219963 2026] [:error] [pid 49335:tid 49351] [client 51.120.78.0:48509] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aY5Uxqp--SFY2nwOiqlTHAAAAM4"]
[Fri Feb 13 06:31:34.772458 2026] [:error] [pid 49335:tid 49360] [client 51.120.78.0:52792] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aY5Uxqp--SFY2nwOiqlTHQAAANc"]
[Fri Feb 13 06:31:35.402449 2026] [:error] [pid 51243:tid 51245] [client 51.120.78.0:52750] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aY5Ux8im7ZTAHzi7xZvdNwAAAQA"]
[Fri Feb 13 06:31:36.177443 2026] [:error] [pid 49223:tid 49252] [client 51.120.78.0:52757] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aY5UyB8A_fZBamNLnfVJPQAAABQ"]
[Fri Feb 13 06:31:36.717920 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:42819] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY5UyB8A_fZBamNLnfVJPgAAAAo"]
[Fri Feb 13 06:31:37.382693 2026] [:error] [pid 49223:tid 49249] [client 51.120.78.0:59679] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY5UyR8A_fZBamNLnfVJQQAAABE"]
[Fri Feb 13 06:31:37.974001 2026] [:error] [pid 49335:tid 49351] [client 51.120.78.0:52766] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY5Uyap--SFY2nwOiqlTJwAAAM4"]
[Fri Feb 13 06:31:38.531167 2026] [:error] [pid 49335:tid 49339] [client 51.120.78.0:48463] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY5Uyqp--SFY2nwOiqlTKgAAAMI"]
[Fri Feb 13 06:31:39.099176 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:42874] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY5Uy9iAvPoWmw5YhwmpAwAAAEk"]
[Fri Feb 13 06:31:39.657732 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:59684] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY5Uyx8A_fZBamNLnfVJRQAAABU"]
[Fri Feb 13 06:31:40.226000 2026] [:error] [pid 49224:tid 49271] [client 51.120.78.0:42821] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY5UzNiAvPoWmw5YhwmpBgAAAEQ"]
[Fri Feb 13 06:31:40.756341 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:48501] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY5UzMim7ZTAHzi7xZvdPQAAAQ4"]
[Fri Feb 13 06:31:41.528275 2026] [:error] [pid 49223:tid 49254] [client 51.120.78.0:51374] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aY5UzR8A_fZBamNLnfVJRwAAABY"]
[Fri Feb 13 06:31:42.131147 2026] [:error] [pid 49224:tid 49281] [client 51.120.78.0:63478] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aY5UztiAvPoWmw5YhwmpCQAAAE4"]
[Fri Feb 13 06:31:42.760010 2026] [:error] [pid 51243:tid 51251] [client 51.120.78.0:52743] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aY5Uzsim7ZTAHzi7xZvdQAAAAQY"]
[Fri Feb 13 06:31:43.395823 2026] [:error] [pid 49223:tid 49252] [client 51.120.78.0:52782] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aY5Uzx8A_fZBamNLnfVJSgAAABQ"]
[Fri Feb 13 06:31:43.936059 2026] [:error] [pid 49224:tid 49274] [client 51.120.78.0:47971] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aY5Uz9iAvPoWmw5YhwmpEQAAAEc"]
[Fri Feb 13 06:31:44.661213 2026] [:error] [pid 51243:tid 51245] [client 51.120.78.0:52773] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aY5U0Mim7ZTAHzi7xZvdSAAAAQA"]
[Fri Feb 13 06:31:45.516754 2026] [:error] [pid 51243:tid 51252] [client 51.120.78.0:47983] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aY5U0cim7ZTAHzi7xZvdSwAAAQc"]
[Fri Feb 13 06:31:46.362062 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:59143] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aY5U0jwH8-zGxtAd3jvsuAAAAII"]
[Fri Feb 13 06:31:47.018339 2026] [:error] [pid 49225:tid 49317] [client 51.120.78.0:42872] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.php"] [unique_id "aY5U0zwH8-zGxtAd3jvsuwAAAJc"]
[Fri Feb 13 06:31:47.598234 2026] [:error] [pid 51243:tid 51266] [client 51.120.78.0:48498] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.php"] [unique_id "aY5U08im7ZTAHzi7xZvdUAAAARU"]
[Fri Feb 13 06:31:48.166485 2026] [:error] [pid 49225:tid 49294] [client 51.120.78.0:41190] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.php"] [unique_id "aY5U1DwH8-zGxtAd3jvsvwAAAIA"]
[Fri Feb 13 06:31:48.794929 2026] [:error] [pid 51243:tid 51269] [client 51.120.78.0:47990] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.php"] [unique_id "aY5U1Mim7ZTAHzi7xZvdUwAAARg"]
[Fri Feb 13 06:31:49.356953 2026] [:error] [pid 49224:tid 49275] [client 51.120.78.0:59144] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aY5U1diAvPoWmw5YhwmpHwAAAEg"]
[Fri Feb 13 06:31:49.991495 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:43458] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aY5U1R8A_fZBamNLnfVJUwAAAAo"]
[Fri Feb 13 06:31:50.559993 2026] [:error] [pid 49223:tid 49245] [client 51.120.78.0:43466] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aY5U1h8A_fZBamNLnfVJVgAAAA0"]
[Fri Feb 13 06:31:51.223315 2026] [:error] [pid 49225:tid 49310] [client 51.120.78.0:52745] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aY5U1zwH8-zGxtAd3jvswQAAAJA"]
[Fri Feb 13 06:31:51.850756 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:43465] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aY5U18im7ZTAHzi7xZvdWwAAAQ4"]
[Fri Feb 13 06:31:52.459500 2026] [:error] [pid 49224:tid 49271] [client 51.120.78.0:48496] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aY5U2NiAvPoWmw5YhwmpJgAAAEQ"]
[Fri Feb 13 06:31:52.994270 2026] [:error] [pid 49224:tid 49278] [client 51.120.78.0:52791] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aY5U2NiAvPoWmw5YhwmpKgAAAEs"]
[Fri Feb 13 06:31:53.605751 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:51387] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aY5U2diAvPoWmw5YhwmpLQAAAEE"]
[Fri Feb 13 06:31:54.160130 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:52930] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aY5U2h8A_fZBamNLnfVJXAAAAAA"]
[Fri Feb 13 06:31:54.862021 2026] [:error] [pid 49335:tid 49349] [client 51.120.78.0:41211] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aY5U2qp--SFY2nwOiqlTQgAAAMw"]
[Fri Feb 13 06:31:55.504797 2026] [:error] [pid 49224:tid 49276] [client 51.120.78.0:48465] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aY5U29iAvPoWmw5YhwmpNQAAAEk"]
[Fri Feb 13 06:31:56.081810 2026] [:error] [pid 49224:tid 49284] [client 51.120.78.0:52799] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aY5U3NiAvPoWmw5YhwmpOAAAAFE"]
[Fri Feb 13 06:31:56.607588 2026] [:error] [pid 49225:tid 49311] [client 51.120.78.0:59705] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aY5U3DwH8-zGxtAd3jvsygAAAJE"]
[Fri Feb 13 06:31:57.172716 2026] [:error] [pid 51243:tid 51269] [client 51.120.78.0:42827] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aY5U3cim7ZTAHzi7xZvdXgAAARg"]
[Fri Feb 13 06:31:57.842830 2026] [:error] [pid 49225:tid 49296] [client 51.120.78.0:59678] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aY5U3TwH8-zGxtAd3jvszgAAAII"]
[Fri Feb 13 06:31:58.493647 2026] [:error] [pid 49225:tid 49313] [client 51.120.78.0:51373] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aY5U3jwH8-zGxtAd3jvszwAAAJM"]
[Fri Feb 13 06:31:59.163850 2026] [:error] [pid 49223:tid 49237] [client 51.120.78.0:46153] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aY5U3x8A_fZBamNLnfVJZAAAAAU"]
[Fri Feb 13 06:31:59.907460 2026] [:error] [pid 49335:tid 49359] [client 51.120.78.0:51337] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aY5U36p--SFY2nwOiqlTRQAAANY"]
[Fri Feb 13 06:32:00.480436 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:48454] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aY5U4DwH8-zGxtAd3jvs0gAAAIk"]
[Fri Feb 13 06:32:01.270685 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:59192] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aY5U4ap--SFY2nwOiqlTSAAAANg"]
[Fri Feb 13 06:32:02.144023 2026] [:error] [pid 49225:tid 49294] [client 51.120.78.0:41159] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aY5U4jwH8-zGxtAd3jvs1wAAAIA"]
[Fri Feb 13 06:32:02.910522 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:55339] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aY5U4tiAvPoWmw5YhwmpQwAAAEE"]
[Fri Feb 13 06:32:03.567424 2026] [:error] [pid 49224:tid 49282] [client 51.120.78.0:51372] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aY5U49iAvPoWmw5YhwmpRAAAAE8"]
[Fri Feb 13 06:32:04.136220 2026] [:error] [pid 49223:tid 49251] [client 51.120.78.0:52774] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.status"] [unique_id "aY5U5B8A_fZBamNLnfVJcwAAABM"]
[Fri Feb 13 06:32:04.690631 2026] [:error] [pid 49335:tid 49358] [client 51.120.78.0:41154] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.status"] [unique_id "aY5U5Kp--SFY2nwOiqlTUQAAANU"]
[Fri Feb 13 06:32:05.378203 2026] [:error] [pid 51243:tid 51257] [client 51.120.78.0:52790] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server.status"] [unique_id "aY5U5cim7ZTAHzi7xZvdcQAAAQw"]
[Fri Feb 13 06:32:06.033803 2026] [:error] [pid 49224:tid 49277] [client 51.120.78.0:48478] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aY5U5tiAvPoWmw5YhwmpSQAAAEo"]
[Fri Feb 13 06:32:06.652622 2026] [:error] [pid 49335:tid 49355] [client 51.120.78.0:63447] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aY5U5qp--SFY2nwOiqlTVgAAANI"]
[Fri Feb 13 06:32:07.347200 2026] [:error] [pid 51243:tid 51251] [client 51.120.78.0:42849] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aY5U58im7ZTAHzi7xZvdcwAAAQY"]
[Fri Feb 13 06:32:07.985803 2026] [:error] [pid 49224:tid 49268] [client 51.120.78.0:51344] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aY5U59iAvPoWmw5YhwmpTgAAAEE"]
[Fri Feb 13 06:32:08.607171 2026] [:error] [pid 49225:tid 49315] [client 51.120.78.0:59696] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aY5U6DwH8-zGxtAd3jvs2AAAAJU"]
[Fri Feb 13 06:32:09.148841 2026] [:error] [pid 49224:tid 49280] [client 51.120.78.0:42838] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aY5U6diAvPoWmw5YhwmpUAAAAE0"]
[Fri Feb 13 06:32:09.805171 2026] [:error] [pid 51243:tid 51254] [client 51.120.78.0:47951] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aY5U6cim7ZTAHzi7xZvddQAAAQk"]
[Fri Feb 13 06:32:10.352946 2026] [:error] [pid 49225:tid 49303] [client 51.120.78.0:42871] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aY5U6jwH8-zGxtAd3jvs2wAAAIk"]
[Fri Feb 13 06:32:10.907175 2026] [:error] [pid 49225:tid 49306] [client 51.120.78.0:59693] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/special.php"] [unique_id "aY5U6jwH8-zGxtAd3jvs3QAAAIw"]
[Fri Feb 13 06:32:11.510414 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:47952] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/special.php"] [unique_id "aY5U6x8A_fZBamNLnfVJfAAAAAA"]
[Fri Feb 13 06:32:12.135976 2026] [:error] [pid 49335:tid 49339] [client 51.120.78.0:41183] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Feb 13 06:32:12.406686 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:41183] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aY5U7Kp--SFY2nwOiqlTYQAAAMA"]
[Fri Feb 13 08:16:15.969694 2026] [:error] [pid 49225:tid 49294] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri Feb 13 08:16:16.228064 2026] [:error] [pid 49225:tid 49311] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Feb 13 08:16:16.487445 2026] [:error] [pid 49225:tid 49302] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Fri Feb 13 08:16:16.746600 2026] [:error] [pid 49225:tid 49298] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Feb 13 08:16:17.030947 2026] [:error] [pid 49225:tid 49315] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 13 08:16:17.307195 2026] [:error] [pid 49225:tid 49301] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Feb 13 08:16:17.568671 2026] [:error] [pid 49225:tid 49316] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Feb 13 08:16:17.827486 2026] [:error] [pid 49225:tid 49307] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Feb 13 08:16:18.103202 2026] [:error] [pid 49225:tid 49312] [client 20.215.56.176:18329] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Fri Feb 13 08:16:18.485678 2026] [:error] [pid 49225:tid 49313] [client 20.215.56.176:18329] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aY5tUjwH8-zGxtAd3jsewQAAAJM"]
[Fri Feb 13 08:16:20.320947 2026] [:error] [pid 49223:tid 49251] [client 20.215.56.176:13401] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aY5tVB8A_fZBamNLnfV23QAAABM"]
[Fri Feb 13 08:16:23.640474 2026] [:error] [pid 51243:tid 51253] [client 20.215.56.176:11949] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aY5tV8im7ZTAHzi7xZsOEQAAAQg"]
[Fri Feb 13 08:16:26.904567 2026] [:error] [pid 49225:tid 49311] [client 20.215.56.176:15490] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aY5tWjwH8-zGxtAd3jse2QAAAJE"]
[Fri Feb 13 08:16:28.452129 2026] [:error] [pid 49224:tid 49279] [client 20.215.56.176:4077] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5tXNiAvPoWmw5YhwniPQAAAEw"]
[Fri Feb 13 08:16:31.286174 2026] [:error] [pid 49335:tid 49337] [client 20.215.56.176:15311] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5tX6p--SFY2nwOiqmdiQAAAMA"]
[Fri Feb 13 08:16:34.960174 2026] [:error] [pid 49335:tid 49360] [client 20.215.56.176:26575] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5tYqp--SFY2nwOiqmdmAAAANc"]
[Fri Feb 13 08:16:38.795408 2026] [:error] [pid 49223:tid 49242] [client 20.215.56.176:26587] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aY5tZh8A_fZBamNLnfV3BgAAAAo"]
[Fri Feb 13 08:16:43.961989 2026] [:error] [pid 49225:tid 49296] [client 20.215.56.176:10972] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aY5tazwH8-zGxtAd3jsfGgAAAII"]
[Fri Feb 13 08:16:45.546057 2026] [:error] [pid 51243:tid 51254] [client 20.215.56.176:15505] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aY5tbcim7ZTAHzi7xZsOUQAAAQk"]
[Fri Feb 13 08:16:47.688982 2026] [:error] [pid 49335:tid 49358] [client 20.215.56.176:27132] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aY5tb6p--SFY2nwOiqmdvgAAANU"]
[Fri Feb 13 08:16:49.646940 2026] [:error] [pid 49224:tid 49275] [client 20.215.56.176:13419] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aY5tcdiAvPoWmw5YhwniawAAAEg"]
[Fri Feb 13 08:16:52.269163 2026] [:error] [pid 51243:tid 51265] [client 20.215.56.176:11227] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ans.php"] [unique_id "aY5tdMim7ZTAHzi7xZsOZQAAARQ"]
[Fri Feb 13 08:16:57.109075 2026] [:error] [pid 49335:tid 49351] [client 20.215.56.176:10421] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ans.php"] [unique_id "aY5teap--SFY2nwOiqmdzAAAAM4"]
[Fri Feb 13 08:17:26.608952 2026] [:error] [pid 49335:tid 49343] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Fri Feb 13 08:17:26.881496 2026] [:error] [pid 49335:tid 49345] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Feb 13 08:17:27.140289 2026] [:error] [pid 49335:tid 49358] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 13 08:17:27.690148 2026] [:error] [pid 49335:tid 49352] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 13 08:17:27.965391 2026] [:error] [pid 49335:tid 49347] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/el.php
[Fri Feb 13 08:17:28.225894 2026] [:error] [pid 49335:tid 49360] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Fri Feb 13 08:17:28.485067 2026] [:error] [pid 49335:tid 49351] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Fri Feb 13 08:17:28.756092 2026] [:error] [pid 49335:tid 49357] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Feb 13 08:17:29.027414 2026] [:error] [pid 49335:tid 49353] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Fri Feb 13 08:17:29.289065 2026] [:error] [pid 49335:tid 49346] [client 20.215.56.176:13082] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Feb 13 08:17:29.553601 2026] [:error] [pid 49335:tid 49347] [client 20.215.56.176:13082] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ot.php"] [unique_id "aY5tmap--SFY2nwOiqmeNQAAAMo"]
[Fri Feb 13 08:17:35.617072 2026] [:error] [pid 49223:tid 49250] [client 20.215.56.176:18371] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ot.php"] [unique_id "aY5tnx8A_fZBamNLnfV3pwAAABI"]
[Fri Feb 13 08:17:45.545537 2026] [:error] [pid 49224:tid 49287] [client 20.215.56.176:3858] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aY5tqdiAvPoWmw5Yhwni_wAAAFQ"]
[Fri Feb 13 08:17:48.403103 2026] [:error] [pid 51243:tid 51259] [client 20.215.56.176:10708] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aY5trMim7ZTAHzi7xZsO2QAAAQ4"]
[Fri Feb 13 08:17:53.635319 2026] [:error] [pid 49335:tid 49345] [client 20.215.56.176:3852] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aY5tsap--SFY2nwOiqmedwAAAMg"]
[Fri Feb 13 08:17:57.467293 2026] [:error] [pid 49225:tid 49297] [client 20.215.56.176:10927] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "aY5ttTwH8-zGxtAd3jsf4QAAAIM"]
[Fri Feb 13 08:18:03.228476 2026] [:error] [pid 49335:tid 49359] [client 20.215.56.176:23122] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass.php"] [unique_id "aY5tu6p--SFY2nwOiqmejwAAANY"]
[Fri Feb 13 08:18:07.239194 2026] [:error] [pid 49223:tid 49255] [client 20.215.56.176:3951] [client 20.215.56.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass.php"] [unique_id "aY5tvx8A_fZBamNLnfV38QAAABc"]
[Fri Feb 13 10:02:45.762031 2026] [:error] [pid 49223:tid 49234] [client 172.213.161.82:61742] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Fri Feb 13 13:58:39.458008 2026] [:error] [pid 49224:tid 49287] [client 193.36.225.165:50911] [client 193.36.225.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.165, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aY69j9iAvPoWmw5YhwmQKwAAAFQ"]
[Fri Feb 13 13:58:39.461759 2026] [:error] [pid 49224:tid 49287] [client 193.36.225.165:50911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 13 13:58:40.876309 2026] [:error] [pid 49223:tid 49240] [client 37.140.223.52:38129] [client 37.140.223.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.52, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aY69kB8A_fZBamNLnfXxjQAAAAg"]
[Fri Feb 13 13:58:40.882340 2026] [:error] [pid 49223:tid 49240] [client 37.140.223.52:38129] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 13 19:23:32.114723 2026] [:error] [pid 49223:tid 49252] [client 43.131.243.61:40590] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aY8JtB8A_fZBamNLnfVUlgAAABQ"]
[Fri Feb 13 23:33:29.943291 2026] [:error] [pid 47080:tid 47100] [client 79.137.65.139:44414] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aY9ESUbWJwYCVF39z6uCCwAAAcw"]
[Fri Feb 13 23:33:32.254694 2026] [:error] [pid 49223:tid 49232] [client 79.137.65.139:37080] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aY9ETB8A_fZBamNLnfWPQwAAAAA"]
[Fri Feb 13 23:33:35.033215 2026] [:error] [pid 49223:tid 49247] [client 79.137.65.139:37082] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aY9ETx8A_fZBamNLnfWPSQAAAA8"]
[Fri Feb 13 23:33:37.565211 2026] [:error] [pid 47358:tid 47387] [client 79.137.65.139:37098] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aY9EUcQFBuVVUQTESUw3vQAAApU"]
[Fri Feb 13 23:33:39.765255 2026] [:error] [pid 51243:tid 51252] [client 79.137.65.139:45674] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aY9EU8im7ZTAHzi7xZvsFgAAAQc"]
[Fri Feb 13 23:33:41.967309 2026] [:error] [pid 49335:tid 49350] [client 79.137.65.139:45684] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aY9EVap--SFY2nwOiqmNsgAAAM0"]
[Fri Feb 13 23:33:44.246760 2026] [:error] [pid 49335:tid 49357] [client 79.137.65.139:45700] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aY9EWKp--SFY2nwOiqmNswAAANQ"]
[Fri Feb 13 23:33:46.960083 2026] [:error] [pid 47575:tid 47599] [client 79.137.65.139:45706] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aY9EWgIPBuXb07mA_mTw4gAAAtI"]
[Fri Feb 13 23:33:49.488104 2026] [:error] [pid 49335:tid 49339] [client 79.137.65.139:39764] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aY9EXap--SFY2nwOiqmNtgAAAMI"]
[Fri Feb 13 23:33:51.656834 2026] [:error] [pid 49225:tid 49294] [client 79.137.65.139:39766] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aY9EXzwH8-zGxtAd3jsv_wAAAIA"]
[Fri Feb 13 23:33:54.283000 2026] [:error] [pid 46821:tid 46824] [client 79.137.65.139:39772] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aY9EYo6G1N5YSq0J0gc0CQAAAUE"]
[Fri Feb 13 23:33:56.615980 2026] [:error] [pid 47080:tid 47097] [client 79.137.65.139:39782] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY9EZEbWJwYCVF39z6uCPQAAAck"]
[Fri Feb 13 23:33:58.787976 2026] [:error] [pid 49223:tid 49253] [client 79.137.65.139:60532] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aY9EZh8A_fZBamNLnfWPWgAAABU"]
[Fri Feb 13 23:34:00.891850 2026] [:error] [pid 18097:tid 18107] [client 79.137.65.139:60544] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY9EaHFzYiQ_BfaDDlZbhwAAAYg"]
[Fri Feb 13 23:34:03.173425 2026] [:error] [pid 47575:tid 47599] [client 79.137.65.139:60560] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY9EawIPBuXb07mA_mTw9QAAAtI"]
[Fri Feb 13 23:34:05.211817 2026] [:error] [pid 49225:tid 49305] [client 79.137.65.139:60574] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aY9EbTwH8-zGxtAd3jswCAAAAIs"]
[Fri Feb 13 23:34:07.316270 2026] [:error] [pid 47575:tid 47604] [client 79.137.65.139:60590] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aY9EbwIPBuXb07mA_mTw_QAAAtc"]
[Fri Feb 13 23:34:09.353788 2026] [:error] [pid 49335:tid 49339] [client 79.137.65.139:43616] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aY9Ecap--SFY2nwOiqmNvwAAAMI"]
[Fri Feb 13 23:34:11.470501 2026] [:error] [pid 47080:tid 47094] [client 79.137.65.139:43620] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aY9Ec0bWJwYCVF39z6uCUAAAAcY"]
[Fri Feb 13 23:34:13.617314 2026] [:error] [pid 49335:tid 49348] [client 79.137.65.139:43626] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aY9Edap--SFY2nwOiqmNwgAAAMs"]
[Fri Feb 13 23:34:15.847728 2026] [:error] [pid 18097:tid 18106] [client 79.137.65.139:43640] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aY9Ed3FzYiQ_BfaDDlZbkAAAAYc"]
[Fri Feb 13 23:34:18.212936 2026] [:error] [pid 49225:tid 49300] [client 79.137.65.139:40938] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aY9EejwH8-zGxtAd3jswEAAAAIY"]
[Fri Feb 13 23:34:20.509984 2026] [:error] [pid 47080:tid 47100] [client 79.137.65.139:40946] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aY9EfEbWJwYCVF39z6uCWwAAAcw"]
[Fri Feb 13 23:34:22.784211 2026] [:error] [pid 49223:tid 49233] [client 79.137.65.139:40954] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY9Efh8A_fZBamNLnfWPeAAAAAE"]
[Fri Feb 13 23:34:24.968129 2026] [:error] [pid 47080:tid 47088] [client 79.137.65.139:40960] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aY9EgEbWJwYCVF39z6uCXQAAAcA"]
[Fri Feb 13 23:34:48.357405 2026] [:error] [pid 49223:tid 49233] [client 79.137.65.139:40972] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aY9EmB8A_fZBamNLnfWPmgAAAAE"]
[Fri Feb 13 23:34:50.458254 2026] [:error] [pid 47358:tid 47370] [client 79.137.65.139:39780] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aY9EmsQFBuVVUQTESUw32gAAAoU"]
[Fri Feb 13 23:34:52.398704 2026] [:error] [pid 47358:tid 47376] [client 79.137.65.139:39794] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aY9EnMQFBuVVUQTESUw33gAAAoo"]
[Fri Feb 13 23:34:54.399163 2026] [:error] [pid 47143:tid 47228] [client 79.137.65.139:39808] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aY9EnshV30NbMarHJLtkLAAAAk4"]
[Fri Feb 13 23:34:56.395299 2026] [:error] [pid 18097:tid 18119] [client 79.137.65.139:39810] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aY9EoHFzYiQ_BfaDDlZbsgAAAZQ"]
[Fri Feb 13 23:34:58.516415 2026] [:error] [pid 49223:tid 49238] [client 79.137.65.139:55802] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aY9Eoh8A_fZBamNLnfWPpQAAAAY"]
[Fri Feb 13 23:35:00.536478 2026] [:error] [pid 47143:tid 47224] [client 79.137.65.139:55814] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aY9EpMhV30NbMarHJLtkMAAAAko"]
[Fri Feb 13 23:35:02.529451 2026] [:error] [pid 47080:tid 47094] [client 79.137.65.139:55820] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY9EpkbWJwYCVF39z6uCgwAAAcY"]
[Fri Feb 13 23:35:04.580364 2026] [:error] [pid 49225:tid 49303] [client 79.137.65.139:55824] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY9EqDwH8-zGxtAd3jswOwAAAIk"]
[Fri Feb 13 23:35:06.577888 2026] [:error] [pid 47143:tid 47236] [client 79.137.65.139:55828] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aY9EqshV30NbMarHJLtkMgAAAlY"]
[Fri Feb 13 23:35:08.477948 2026] [:error] [pid 47575:tid 47590] [client 79.137.65.139:60958] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY9ErAIPBuXb07mA_mTxNgAAAso"]
[Fri Feb 13 23:35:10.372810 2026] [:error] [pid 47358:tid 47376] [client 79.137.65.139:60964] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aY9ErsQFBuVVUQTESUw35gAAAoo"]
[Fri Feb 13 23:35:12.281035 2026] [:error] [pid 49225:tid 49301] [client 79.137.65.139:60968] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aY9EsDwH8-zGxtAd3jswRQAAAIc"]
[Fri Feb 13 23:35:14.209872 2026] [:error] [pid 51243:tid 51262] [client 79.137.65.139:60984] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aY9Essim7ZTAHzi7xZvsQAAAARE"]
[Fri Feb 13 23:35:16.259972 2026] [:error] [pid 18097:tid 18101] [client 79.137.65.139:60992] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aY9EtHFzYiQ_BfaDDlZbwgAAAYI"]
[Fri Feb 13 23:35:18.287371 2026] [:error] [pid 47080:tid 47097] [client 79.137.65.139:32874] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aY9EtkbWJwYCVF39z6uCjgAAAck"]
[Fri Feb 13 23:35:21.421107 2026] [:error] [pid 47143:tid 47230] [client 79.137.65.139:32890] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY9EuchV30NbMarHJLtkOAAAAlA"]
[Fri Feb 13 23:35:25.239323 2026] [:error] [pid 47143:tid 47231] [client 79.137.65.139:32900] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY9EvchV30NbMarHJLtkOgAAAlE"]
[Sat Feb 14 00:59:24.676151 2026] [:error] [pid 18097:tid 18100] [client 54.37.252.137:34180] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aY9YbHFzYiQ_BfaDDlZt-AAAAYE"]
[Sat Feb 14 00:59:26.826516 2026] [:error] [pid 18097:tid 18114] [client 54.37.252.137:59640] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aY9YbnFzYiQ_BfaDDlZt-gAAAY8"]
[Sat Feb 14 00:59:28.935659 2026] [:error] [pid 18097:tid 18111] [client 54.37.252.137:59646] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aY9YcHFzYiQ_BfaDDlZt_QAAAYw"]
[Sat Feb 14 00:59:30.993180 2026] [:error] [pid 49335:tid 49347] [client 54.37.252.137:59652] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aY9Ycqp--SFY2nwOiqma8gAAAMo"]
[Sat Feb 14 00:59:32.796079 2026] [:error] [pid 47080:tid 47096] [client 54.37.252.137:59654] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aY9YdEbWJwYCVF39z6ubsAAAAcg"]
[Sat Feb 14 00:59:34.790041 2026] [:error] [pid 47080:tid 47098] [client 54.37.252.137:59668] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aY9YdkbWJwYCVF39z6ubtQAAAco"]
[Sat Feb 14 00:59:36.967104 2026] [:error] [pid 47080:tid 47097] [client 54.37.252.137:45872] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aY9YeEbWJwYCVF39z6ubvQAAAck"]
[Sat Feb 14 00:59:38.966786 2026] [:error] [pid 49223:tid 49243] [client 54.37.252.137:45888] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aY9Yeh8A_fZBamNLnfWjKQAAAAs"]
[Sat Feb 14 00:59:40.791106 2026] [:error] [pid 47358:tid 47382] [client 54.37.252.137:45904] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY9YfMQFBuVVUQTESUxFigAAApA"]
[Sat Feb 14 00:59:42.631459 2026] [:error] [pid 47080:tid 47088] [client 54.37.252.137:45918] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY9YfkbWJwYCVF39z6ubxwAAAcA"]
[Sat Feb 14 00:59:44.601835 2026] [:error] [pid 47575:tid 47590] [client 54.37.252.137:45932] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY9YgAIPBuXb07mA_mQByAAAAso"]
[Sat Feb 14 00:59:46.629153 2026] [:error] [pid 47358:tid 47370] [client 54.37.252.137:49106] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY9YgsQFBuVVUQTESUxFkAAAAoU"]
[Sat Feb 14 00:59:48.708659 2026] [:error] [pid 18097:tid 18123] [client 54.37.252.137:49122] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY9YhHFzYiQ_BfaDDlZuCAAAAZg"]
[Sat Feb 14 00:59:50.731931 2026] [:error] [pid 49225:tid 49306] [client 54.37.252.137:49126] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY9YhjwH8-zGxtAd3js-PgAAAIw"]
[Sat Feb 14 00:59:52.580879 2026] [:error] [pid 49335:tid 49359] [client 54.37.252.137:49142] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aY9YiKp--SFY2nwOiqma_wAAANY"]
[Sat Feb 14 00:59:54.734589 2026] [:error] [pid 18097:tid 18101] [client 54.37.252.137:49158] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aY9YinFzYiQ_BfaDDlZuDgAAAYI"]
[Sat Feb 14 00:59:56.794851 2026] [:error] [pid 49225:tid 49310] [client 54.37.252.137:53232] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aY9YjDwH8-zGxtAd3js-QgAAAJA"]
[Sat Feb 14 00:59:58.889994 2026] [:error] [pid 47080:tid 47099] [client 54.37.252.137:53238] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aY9YjkbWJwYCVF39z6ub2AAAAcs"]
[Sat Feb 14 01:00:00.793240 2026] [:error] [pid 47575:tid 47599] [client 54.37.252.137:53242] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aY9YkAIPBuXb07mA_mQB1wAAAtI"]
[Sat Feb 14 01:00:02.873668 2026] [:error] [pid 47143:tid 47216] [client 54.37.252.137:53256] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aY9YkshV30NbMarHJLtwKgAAAkI"]
[Sat Feb 14 01:00:04.779618 2026] [:error] [pid 47143:tid 47185] [client 54.37.252.137:53258] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aY9YlMhV30NbMarHJLtwKwAAAkA"]
[Sat Feb 14 01:00:06.686195 2026] [:error] [pid 51243:tid 51264] [client 54.37.252.137:56068] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY9Ylsim7ZTAHzi7xZv4MAAAARM"]
[Sat Feb 14 01:00:08.712673 2026] [:error] [pid 47575:tid 47595] [client 54.37.252.137:56078] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY9YmAIPBuXb07mA_mQB3gAAAs4"]
[Sat Feb 14 01:00:10.610304 2026] [:error] [pid 18097:tid 18118] [client 54.37.252.137:56090] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY9YmnFzYiQ_BfaDDlZuFAAAAZM"]
[Sat Feb 14 01:00:12.637939 2026] [:error] [pid 49225:tid 49300] [client 54.37.252.137:56092] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY9YnDwH8-zGxtAd3js-UwAAAIY"]
[Sat Feb 14 01:00:14.556261 2026] [:error] [pid 51243:tid 51252] [client 54.37.252.137:56102] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY9Ynsim7ZTAHzi7xZv4NwAAAQc"]
[Sat Feb 14 01:00:16.601045 2026] [:error] [pid 49223:tid 49241] [client 54.37.252.137:50364] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aY9YoB8A_fZBamNLnfWjVgAAAAk"]
[Sat Feb 14 01:00:18.577725 2026] [:error] [pid 47080:tid 47104] [client 54.37.252.137:50372] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aY9YokbWJwYCVF39z6ub6gAAAdA"]
[Sat Feb 14 01:00:20.701709 2026] [:error] [pid 47143:tid 47236] [client 54.37.252.137:50378] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aY9YpMhV30NbMarHJLtwMwAAAlY"]
[Sat Feb 14 01:00:41.085474 2026] [:error] [pid 47358:tid 47379] [client 54.37.252.137:50386] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aY9YucQFBuVVUQTESUxFuAAAAo0"]
[Sat Feb 14 01:00:43.004984 2026] [:error] [pid 51243:tid 51252] [client 54.37.252.137:52918] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aY9Yu8im7ZTAHzi7xZv4PwAAAQc"]
[Sat Feb 14 01:00:45.068403 2026] [:error] [pid 46821:tid 46847] [client 54.37.252.137:52928] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aY9YvY6G1N5YSq0J0gdAewAAAVg"]
[Sat Feb 14 01:00:47.109630 2026] [:error] [pid 49225:tid 49311] [client 54.37.252.137:36536] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY9YvzwH8-zGxtAd3js-ZgAAAJE"]
[Sat Feb 14 01:00:49.039068 2026] [:error] [pid 47080:tid 47095] [client 54.37.252.137:36544] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aY9YwUbWJwYCVF39z6ucCQAAAcc"]
[Sat Feb 14 01:00:50.964634 2026] [:error] [pid 47358:tid 47383] [client 54.37.252.137:36552] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY9YwsQFBuVVUQTESUxFvgAAApE"]
[Sat Feb 14 01:00:52.989567 2026] [:error] [pid 47080:tid 47092] [client 54.37.252.137:36562] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY9YxEbWJwYCVF39z6ucDgAAAcQ"]
[Sat Feb 14 01:00:54.991236 2026] [:error] [pid 46821:tid 46823] [client 54.37.252.137:36578] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aY9Yxo6G1N5YSq0J0gdAfgAAAUA"]
[Sat Feb 14 01:00:57.000684 2026] [:error] [pid 47143:tid 47231] [client 54.37.252.137:56002] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aY9YyMhV30NbMarHJLtwQgAAAlE"]
[Sat Feb 14 01:01:00.060164 2026] [:error] [pid 47358:tid 47361] [client 54.37.252.137:56004] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY9YzMQFBuVVUQTESUxFxQAAAoA"]
[Sat Feb 14 01:01:03.821102 2026] [:error] [pid 47358:tid 47382] [client 54.37.252.137:56006] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aY9Yz8QFBuVVUQTESUxFyAAAApA"]
[Sat Feb 14 01:50:38.814914 2026] [:error] [pid 47080:tid 47097] [client 45.90.236.73:34184] [client 45.90.236.73] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=video/x-ms-wmv"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aY9kbkbWJwYCVF39z6un6wAAAck"]
[Sat Feb 14 01:50:43.362267 2026] [:error] [pid 47080:tid 47093] [client 45.90.236.73:34184] [client 45.90.236.73] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=video/x-ms-wmv"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aY9kcEbWJwYCVF39z6un7gAAAcU"]
[Sat Feb 14 08:45:37.490724 2026] [:error] [pid 21195:tid 21234] [client 212.30.36.216:27815] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Feb 14 08:57:10.772097 2026] [:error] [pid 21194:tid 21220] [client 104.208.74.188:2111] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Feb 14 08:57:10.892275 2026] [:error] [pid 21194:tid 21207] [client 104.208.74.188:2111] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Feb 14 08:57:11.011724 2026] [:error] [pid 21194:tid 21213] [client 104.208.74.188:2111] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 14 08:57:11.374202 2026] [:error] [pid 21194:tid 21214] [client 104.208.74.188:2111] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 14 08:57:11.500891 2026] [:error] [pid 21194:tid 21216] [client 104.208.74.188:2111] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Feb 14 08:57:11.752901 2026] [:error] [pid 21194:tid 21222] [client 104.208.74.188:2111] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Feb 14 08:57:12.111832 2026] [:error] [pid 21194:tid 21206] [client 104.208.74.188:2111] [client 104.208.74.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aY_IaIW0MV8dvwNvAHo2pQAAAAM"]
[Sat Feb 14 08:57:12.585581 2026] [:error] [pid 21785:tid 21836] [client 104.208.74.188:10343] [client 104.208.74.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aY_IaAOBjP5pmZ2xNN5swgAAAZY"]
[Sat Feb 14 08:57:13.057995 2026] [:error] [pid 21785:tid 21826] [client 104.208.74.188:10080] [client 104.208.74.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aY_IaQOBjP5pmZ2xNN5sxQAAAYw"]
[Sat Feb 14 08:57:13.530088 2026] [:error] [pid 21195:tid 21240] [client 104.208.74.188:10059] [client 104.208.74.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aY_Iad_2sARdLQ6dpsVdTgAAAEk"]
[Sat Feb 14 11:17:26.069907 2026] [:error] [pid 58882:tid 58892] [client 120.71.59.24:44482] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aY_pRp5gZqnf2ItlwaqGeQAAAcg"]
[Sat Feb 14 15:02:34.677811 2026] [:error] [pid 2536:tid 2567] [client 43.135.142.37:43498] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZAeCti4vmAXN34vJYw0-QAAAcI"]
[Sat Feb 14 15:11:39.234005 2026] [:error] [pid 2599:tid 2634] [client 43.159.149.56:34424] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZAgK2Oe_Gk2k-YfhF_ukgAAA8g"]
[Sat Feb 14 17:01:50.912518 2026] [:error] [pid 56720:tid 56784] [client 147.135.214.166:55132] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZA5_njg3vzUoXJ19eD6yQAAA8c"]
[Sat Feb 14 17:01:52.778375 2026] [:error] [pid 35135:tid 35159] [client 147.135.214.166:40672] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZA6AIkSccJZYMDP04wWsAAAARU"]
[Sat Feb 14 17:01:54.848594 2026] [:error] [pid 63327:tid 63374] [client 147.135.214.166:40674] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZA6Ai9btvSz88ToHa-9lgAAAZI"]
[Sat Feb 14 17:01:56.929265 2026] [:error] [pid 35135:tid 35160] [client 147.135.214.166:48528] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZA6BIkSccJZYMDP04wWswAAARY"]
[Sat Feb 14 17:01:58.692524 2026] [:error] [pid 35135:tid 35147] [client 147.135.214.166:48534] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZA6BokSccJZYMDP04wWtQAAAQk"]
[Sat Feb 14 17:02:00.811746 2026] [:error] [pid 56719:tid 56759] [client 147.135.214.166:48538] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZA6CEBVs8LiCmFJP0CySAAAAsk"]
[Sat Feb 14 17:02:02.903875 2026] [:error] [pid 56718:tid 56739] [client 147.135.214.166:48548] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZA6Cgt_sRAfjbGa_J649wAAAlA"]
[Sat Feb 14 17:02:05.223471 2026] [:error] [pid 35135:tid 35148] [client 147.135.214.166:56804] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZA6DYkSccJZYMDP04wWugAAAQo"]
[Sat Feb 14 17:02:07.166890 2026] [:error] [pid 50401:tid 50470] [client 147.135.214.166:56814] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZA6D7OW7kXCx3N6fEiQZgAAA0s"]
[Sat Feb 14 17:02:09.727598 2026] [:error] [pid 50339:tid 50394] [client 147.135.214.166:56822] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZA6EcI6TclQ9GOl2Y1LiwAAAhg"]
[Sat Feb 14 17:02:11.782842 2026] [:error] [pid 63327:tid 63373] [client 147.135.214.166:56836] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZA6Ey9btvSz88ToHa-9ogAAAZE"]
[Sat Feb 14 17:02:14.043692 2026] [:error] [pid 50339:tid 50391] [client 147.135.214.166:56838] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZA6FsI6TclQ9GOl2Y1LjAAAAhU"]
[Sat Feb 14 17:02:16.335224 2026] [:error] [pid 56720:tid 56792] [client 147.135.214.166:41920] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZA6GHjg3vzUoXJ19eD62AAAA88"]
[Sat Feb 14 17:02:18.558129 2026] [:error] [pid 63327:tid 63372] [client 147.135.214.166:41924] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZA6Gi9btvSz88ToHa-9rwAAAZA"]
[Sat Feb 14 17:02:20.530160 2026] [:error] [pid 56720:tid 56801] [client 147.135.214.166:41936] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZA6HHjg3vzUoXJ19eD63AAAA9g"]
[Sat Feb 14 17:02:22.553461 2026] [:error] [pid 56718:tid 56745] [client 147.135.214.166:41942] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZA6Hgt_sRAfjbGa_J64_wAAAlY"]
[Sat Feb 14 17:02:24.603173 2026] [:error] [pid 50339:tid 50387] [client 147.135.214.166:41954] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZA6IMI6TclQ9GOl2Y1LlAAAAhE"]
[Sat Feb 14 17:02:26.994872 2026] [:error] [pid 36219:tid 36265] [client 147.135.214.166:36984] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZA6Ipe-m2OpEy0FNjgvFgAAA5E"]
[Sat Feb 14 17:02:29.185597 2026] [:error] [pid 63327:tid 63363] [client 147.135.214.166:36990] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZA6JS9btvSz88ToHa-9vgAAAYc"]
[Sat Feb 14 17:02:31.046952 2026] [:error] [pid 63327:tid 63358] [client 147.135.214.166:37002] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZA6Jy9btvSz88ToHa-9vwAAAYI"]
[Sat Feb 14 17:02:33.013448 2026] [:error] [pid 56718:tid 56732] [client 147.135.214.166:37014] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZA6KQt_sRAfjbGa_J65AgAAAkk"]
[Sat Feb 14 17:02:34.925480 2026] [:error] [pid 56718:tid 56735] [client 147.135.214.166:37030] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZA6Kgt_sRAfjbGa_J65BAAAAkw"]
[Sat Feb 14 17:02:36.963466 2026] [:error] [pid 50401:tid 50464] [client 147.135.214.166:50706] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZA6LLOW7kXCx3N6fEiQeQAAA0U"]
[Sat Feb 14 17:02:39.261199 2026] [:error] [pid 63327:tid 63356] [client 147.135.214.166:50714] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZA6Ly9btvSz88ToHa-9wwAAAYA"]
[Sat Feb 14 17:02:41.091101 2026] [:error] [pid 36056:tid 36062] [client 147.135.214.166:50716] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZA6Mbv3wQbSPS1vpOj0EAAAAAQ"]
[Sat Feb 14 17:02:42.981924 2026] [:error] [pid 63327:tid 63371] [client 147.135.214.166:50728] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZA6Mi9btvSz88ToHa-9xgAAAY8"]
[Sat Feb 14 17:02:45.078464 2026] [:error] [pid 50339:tid 50378] [client 147.135.214.166:50740] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZA6NcI6TclQ9GOl2Y1LnQAAAgg"]
[Sat Feb 14 17:02:47.112435 2026] [:error] [pid 56718:tid 56734] [client 147.135.214.166:50244] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZA6Nwt_sRAfjbGa_J65DAAAAks"]
[Sat Feb 14 17:03:08.587945 2026] [:error] [pid 63327:tid 63375] [client 147.135.214.166:50246] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZA6TC9btvSz88ToHa-95AAAAZM"]
[Sat Feb 14 17:03:10.618939 2026] [:error] [pid 50401:tid 50464] [client 147.135.214.166:52926] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZA6TrOW7kXCx3N6fEiQjQAAA0U"]
[Sat Feb 14 17:03:12.719518 2026] [:error] [pid 56718:tid 56735] [client 147.135.214.166:52940] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZA6UAt_sRAfjbGa_J65FwAAAkw"]
[Sat Feb 14 17:03:14.943934 2026] [:error] [pid 50401:tid 50471] [client 147.135.214.166:52944] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZA6UrOW7kXCx3N6fEiQkwAAA0w"]
[Sat Feb 14 17:03:17.128078 2026] [:error] [pid 63327:tid 63380] [client 147.135.214.166:54328] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZA6VS9btvSz88ToHa-97AAAAZg"]
[Sat Feb 14 17:03:19.401938 2026] [:error] [pid 50339:tid 50388] [client 147.135.214.166:54338] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZA6V8I6TclQ9GOl2Y1LrgAAAhI"]
[Sat Feb 14 17:03:21.507835 2026] [:error] [pid 63327:tid 63359] [client 147.135.214.166:54344] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZA6WS9btvSz88ToHa-98gAAAYM"]
[Sat Feb 14 17:03:23.417830 2026] [:error] [pid 36056:tid 36068] [client 147.135.214.166:54354] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZA6W7v3wQbSPS1vpOj0IQAAAAo"]
[Sat Feb 14 17:03:25.511863 2026] [:error] [pid 56720:tid 56796] [client 147.135.214.166:48504] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZA6XXjg3vzUoXJ19eD69gAAA9M"]
[Sat Feb 14 17:03:27.686224 2026] [:error] [pid 63327:tid 63375] [client 147.135.214.166:48514] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZA6Xy9btvSz88ToHa-98wAAAZM"]
[Sat Feb 14 17:03:29.700299 2026] [:error] [pid 28883:tid 28923] [client 147.135.214.166:48528] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZA6YWBZFo3PsPpATCzJtQAAAos"]
[Sat Feb 14 17:03:32.074626 2026] [:error] [pid 35135:tid 35148] [client 147.135.214.166:48542] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZA6ZIkSccJZYMDP04wW3QAAAQo"]
[Sat Feb 14 17:03:34.036339 2026] [:error] [pid 63327:tid 63369] [client 147.135.214.166:48552] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZA6Zi9btvSz88ToHa--AQAAAY0"]
[Sat Feb 14 17:03:35.856039 2026] [:error] [pid 28883:tid 28915] [client 147.135.214.166:48014] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZA6Z2BZFo3PsPpATCzJuQAAAoM"]
[Sat Feb 14 17:03:39.933143 2026] [:error] [pid 35135:tid 35153] [client 147.135.214.166:48028] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZA6a4kSccJZYMDP04wW4wAAAQ8"]
[Sat Feb 14 17:31:54.329355 2026] [:error] [pid 56720:tid 56788] [client 122.51.236.174:42660] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZBBCnjg3vzUoXJ19eD--gAAA8s"]
[Sat Feb 14 17:35:30.707402 2026] [:error] [pid 36219:tid 36267] [client 185.193.89.23:39148] [client 185.193.89.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aZBB4pe-m2OpEy0FNjg1awAAA5M"]
[Sat Feb 14 22:20:11.329588 2026] [:error] [pid 50339:tid 50379] [client 49.51.73.183:50200] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZCEm8I6TclQ9GOl2Y2J9gAAAgk"]
[Sat Feb 14 23:02:03.215255 2026] [:error] [pid 11801:tid 11881] [client 41.254.94.220:38917] [client 41.254.94.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.254.94.220, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZCOazP96sFUu5UWagzS6AAAA5Y"]
[Sat Feb 14 23:02:03.240117 2026] [:error] [pid 11801:tid 11881] [client 41.254.94.220:38917] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 14 23:46:04.576336 2026] [:error] [pid 53980:tid 54030] [client 159.65.178.41:41036] [client 159.65.178.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZCYvNposYBT7xU8oxTiVQAAAtQ"]
[Sat Feb 14 23:46:07.125146 2026] [:error] [pid 15954:tid 15998] [client 159.65.178.41:33852] [client 159.65.178.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZCYv-2YplA3pz7MAbVzcwAAAc4"]
[Sun Feb 15 00:10:11.483881 2026] [:error] [pid 15923:tid 15945] [client 159.65.178.41:48218] [client 159.65.178.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZCeY4WG-SihJvGpxeGenAAAAJM"]
[Sun Feb 15 00:10:14.484486 2026] [:error] [pid 31063:tid 31076] [client 159.65.178.41:35424] [client 159.65.178.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZCeZvIhM6awOECpMW3gyQAAAUk"]
[Sun Feb 15 00:15:58.805647 2026] [:error] [pid 53980:tid 54024] [client 62.84.185.52:11718] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZCfvtposYBT7xU8oxTmNQAAAs4"]
[Sun Feb 15 00:16:00.665522 2026] [:error] [pid 11800:tid 11839] [client 62.84.185.52:11726] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZCfwHFcWMbg_UEt9SEpBgAAA04"]
[Sun Feb 15 00:16:02.701529 2026] [:error] [pid 11800:tid 11849] [client 62.84.185.52:11740] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZCfwnFcWMbg_UEt9SEpCAAAA1E"]
[Sun Feb 15 00:16:04.706396 2026] [:error] [pid 11801:tid 11875] [client 62.84.185.52:11752] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZCfxDP96sFUu5UWagzgQQAAA5A"]
[Sun Feb 15 00:16:06.738771 2026] [:error] [pid 15954:tid 15994] [client 62.84.185.52:11766] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZCfxu2YplA3pz7MAbV7QwAAAco"]
[Sun Feb 15 00:16:08.750088 2026] [:error] [pid 11800:tid 11806] [client 62.84.185.52:34052] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZCfyHFcWMbg_UEt9SEpEwAAA0I"]
[Sun Feb 15 00:16:10.757293 2026] [:error] [pid 53980:tid 54020] [client 62.84.185.52:34066] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZCfytposYBT7xU8oxTmPwAAAso"]
[Sun Feb 15 00:16:12.753235 2026] [:error] [pid 31034:tid 31043] [client 62.84.185.52:34074] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZCfzGiCz8O3dMzY9qNLWQAAAMc"]
[Sun Feb 15 00:16:14.742411 2026] [:error] [pid 28512:tid 28547] [client 62.84.185.52:34090] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZCfzjzHOANQDtWwQYqUPQAAAYY"]
[Sun Feb 15 00:16:16.740210 2026] [:error] [pid 31063:tid 31089] [client 62.84.185.52:34102] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZCf0PIhM6awOECpMW3h_QAAAVY"]
[Sun Feb 15 00:16:18.743033 2026] [:error] [pid 15923:tid 15944] [client 62.84.185.52:23956] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZCf0oWG-SihJvGpxeGfpgAAAJI"]
[Sun Feb 15 00:16:20.771765 2026] [:error] [pid 11800:tid 11836] [client 62.84.185.52:23958] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZCf1HFcWMbg_UEt9SEpGAAAA0s"]
[Sun Feb 15 00:16:22.609593 2026] [:error] [pid 28511:tid 28522] [client 62.84.185.52:23970] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZCf1hZ3wyYJRs97ghpblgAAAQg"]
[Sun Feb 15 00:16:24.519805 2026] [:error] [pid 28511:tid 28528] [client 62.84.185.52:23986] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZCf2BZ3wyYJRs97ghpbmwAAAQ4"]
[Sun Feb 15 00:16:26.503561 2026] [:error] [pid 31063:tid 31077] [client 62.84.185.52:23998] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZCf2vIhM6awOECpMW3h_wAAAUo"]
[Sun Feb 15 00:16:28.532533 2026] [:error] [pid 11801:tid 11867] [client 62.84.185.52:41626] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZCf3DP96sFUu5UWagzgUgAAA4g"]
[Sun Feb 15 00:16:30.518257 2026] [:error] [pid 31034:tid 31046] [client 62.84.185.52:41640] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZCf3miCz8O3dMzY9qNLaAAAAMo"]
[Sun Feb 15 00:16:32.359164 2026] [:error] [pid 28512:tid 28544] [client 62.84.185.52:41650] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZCf4DzHOANQDtWwQYqUTQAAAYM"]
[Sun Feb 15 00:16:34.355375 2026] [:error] [pid 31063:tid 31067] [client 62.84.185.52:41656] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZCf4vIhM6awOECpMW3iBwAAAUA"]
[Sun Feb 15 00:16:36.373487 2026] [:error] [pid 15954:tid 15998] [client 62.84.185.52:41660] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZCf5O2YplA3pz7MAbV7XQAAAc4"]
[Sun Feb 15 00:16:38.388288 2026] [:error] [pid 15923:tid 15943] [client 62.84.185.52:36042] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZCf5oWG-SihJvGpxeGftAAAAJE"]
[Sun Feb 15 00:16:40.384980 2026] [:error] [pid 15923:tid 15938] [client 62.84.185.52:36050] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZCf6IWG-SihJvGpxeGftgAAAIw"]
[Sun Feb 15 00:16:42.358164 2026] [:error] [pid 53980:tid 54019] [client 62.84.185.52:36062] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZCf6tposYBT7xU8oxTmUgAAAsk"]
[Sun Feb 15 00:16:44.345339 2026] [:error] [pid 28512:tid 28549] [client 62.84.185.52:36078] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZCf7DzHOANQDtWwQYqUVwAAAYg"]
[Sun Feb 15 00:16:46.362239 2026] [:error] [pid 53980:tid 54031] [client 62.84.185.52:36082] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZCf7tposYBT7xU8oxTmVQAAAtU"]
[Sun Feb 15 00:16:48.346400 2026] [:error] [pid 15923:tid 15940] [client 62.84.185.52:28154] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZCf8IWG-SihJvGpxeGfuwAAAI4"]
[Sun Feb 15 00:16:50.351596 2026] [:error] [pid 28512:tid 28545] [client 62.84.185.52:28168] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZCf8jzHOANQDtWwQYqUXgAAAYQ"]
[Sun Feb 15 00:16:52.410045 2026] [:error] [pid 11801:tid 11871] [client 62.84.185.52:28178] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZCf9DP96sFUu5UWagzgaAAAA4w"]
[Sun Feb 15 00:16:54.416855 2026] [:error] [pid 31034:tid 31051] [client 62.84.185.52:28190] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZCf9miCz8O3dMzY9qNLegAAAM8"]
[Sun Feb 15 00:17:18.206598 2026] [:error] [pid 28512:tid 28557] [client 62.84.185.52:41474] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZCgDjzHOANQDtWwQYqUeQAAAZA"]
[Sun Feb 15 00:17:20.036182 2026] [:error] [pid 28511:tid 28536] [client 62.84.185.52:41482] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZCgEBZ3wyYJRs97ghpbyQAAARY"]
[Sun Feb 15 00:17:22.026596 2026] [:error] [pid 15954:tid 15999] [client 62.84.185.52:41496] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZCgEu2YplA3pz7MAbV7mQAAAc8"]
[Sun Feb 15 00:17:24.043161 2026] [:error] [pid 28511:tid 28521] [client 62.84.185.52:41506] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZCgFBZ3wyYJRs97ghpbywAAAQc"]
[Sun Feb 15 00:17:26.067938 2026] [:error] [pid 31063:tid 31080] [client 62.84.185.52:41512] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZCgFvIhM6awOECpMW3iFgAAAU0"]
[Sun Feb 15 00:17:28.066114 2026] [:error] [pid 15954:tid 15992] [client 62.84.185.52:3342] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZCgGO2YplA3pz7MAbV7nQAAAcg"]
[Sun Feb 15 00:17:30.061646 2026] [:error] [pid 53980:tid 54021] [client 62.84.185.52:3344] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZCgGtposYBT7xU8oxTmcAAAAss"]
[Sun Feb 15 00:17:32.034999 2026] [:error] [pid 15923:tid 15937] [client 62.84.185.52:3348] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZCgHIWG-SihJvGpxeGfyQAAAIs"]
[Sun Feb 15 00:17:33.409130 2026] [:error] [pid 11800:tid 11814] [client 62.84.185.52:3358] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZCgHXFcWMbg_UEt9SEpVQAAA0M"]
[Sun Feb 15 00:17:37.269215 2026] [:error] [pid 28512:tid 28556] [client 62.84.185.52:30032] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZCgITzHOANQDtWwQYqUjQAAAY8"]
[Sun Feb 15 00:20:26.791932 2026] [:error] [pid 31063:tid 31069] [client 120.71.59.24:51440] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZCgyvIhM6awOECpMW3ifgAAAUI"]
[Sun Feb 15 01:58:31.753098 2026] [:error] [pid 15954:tid 15993] [client 95.165.143.68:46042] [client 95.165.143.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZC3x-2YplA3pz7MAbWOQgAAAck"]
[Sun Feb 15 03:14:13.145776 2026] [:error] [pid 43945:tid 44100] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/88.php
[Sun Feb 15 03:14:13.399933 2026] [:error] [pid 43945:tid 44108] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sun Feb 15 03:14:13.653474 2026] [:error] [pid 43945:tid 44120] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Sun Feb 15 03:14:13.907973 2026] [:error] [pid 43945:tid 44113] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/cvtcosue.php
[Sun Feb 15 03:14:14.161564 2026] [:error] [pid 43945:tid 44129] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Feb 15 03:14:14.416339 2026] [:error] [pid 43945:tid 44123] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Sun Feb 15 03:14:14.669973 2026] [:error] [pid 43945:tid 44111] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/aer.php
[Sun Feb 15 03:14:14.922389 2026] [:error] [pid 43945:tid 44107] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Feb 15 03:14:15.177312 2026] [:error] [pid 43945:tid 44125] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/667.php
[Sun Feb 15 03:14:15.431013 2026] [:error] [pid 43945:tid 44126] [client 52.138.250.181:11768] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Sun Feb 15 03:14:15.681827 2026] [:error] [pid 43945:tid 44110] [client 52.138.250.181:11768] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZDJhwOG1NkcLbix8XUGuQAAAgs"]
[Sun Feb 15 03:14:16.182623 2026] [:error] [pid 38259:tid 38271] [client 52.138.250.181:10824] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZDJiI-VatmyqYpsnr0tXAAAAAo"]
[Sun Feb 15 03:14:16.682801 2026] [:error] [pid 27856:tid 27867] [client 52.138.250.181:15746] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZDJiDJpKS0cu-96viC0NwAAAog"]
[Sun Feb 15 03:14:17.183172 2026] [:error] [pid 38259:tid 38280] [client 52.138.250.181:15094] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZDJiY-VatmyqYpsnr0tXgAAABM"]
[Sun Feb 15 07:07:16.929591 2026] [:error] [pid 53689:tid 53756] [client 43.159.144.16:46794] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZEAJAdVuSk1xLp2CvBGkQAAA8o"]
[Sun Feb 15 07:18:59.237100 2026] [:error] [pid 53689:tid 53754] [client 124.156.225.181:56162] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZEC4wdVuSk1xLp2CvBIcgAAA8g"]
[Sun Feb 15 10:35:32.910633 2026] [:error] [pid 42659:tid 42685] [client 209.9.200.163:18714] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZEw9Oy3JGHOB-Rj_FYaKQAAAFg"]
[Sun Feb 15 10:35:33.211621 2026] [:error] [pid 31679:tid 31716] [client 209.9.200.163:37408] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZEw9Rz9Q_0Eh7M-Xr1SCAAAAgc"]
[Sun Feb 15 10:35:33.640347 2026] [:error] [pid 19652:tid 19656] [client 209.9.200.163:40173] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZEw9THg2T9K5fiyOL-KdgAAAAI"]
[Sun Feb 15 10:35:36.447705 2026] [:error] [pid 14577:tid 14597] [client 209.9.200.163:32511] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZEw-HTqrkuce6u39HusYAAAARE"]
[Sun Feb 15 10:35:36.712236 2026] [:error] [pid 42752:tid 42768] [client 209.9.200.163:4492] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZEw-MClY05C-Gq9l0gPFgAAAsk"]
[Sun Feb 15 10:35:39.208697 2026] [:error] [pid 42753:tid 42801] [client 209.9.200.163:16473] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZEw-whQMLzszrBLG6eoqgAAA44"]
[Sun Feb 15 10:35:39.525333 2026] [:error] [pid 35560:tid 35641] [client 209.9.200.163:1440] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZEw-wZSChHPc3occZ7sLQAAAxg"]
[Sun Feb 15 10:35:43.217783 2026] [:error] [pid 35497:tid 35546] [client 209.9.200.163:52086] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZEw_8yqpfYzoxiskhsWbwAAANM"]
[Sun Feb 15 10:35:43.527917 2026] [:error] [pid 19652:tid 19664] [client 209.9.200.163:50714] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZEw_zHg2T9K5fiyOL-KewAAAAo"]
[Sun Feb 15 10:35:47.839861 2026] [:error] [pid 35497:tid 35532] [client 209.9.200.163:22390] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZExA8yqpfYzoxiskhsWcwAAAMU"]
[Sun Feb 15 10:35:48.095140 2026] [:error] [pid 35497:tid 35530] [client 209.9.200.163:57177] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZExBMyqpfYzoxiskhsWdAAAAMM"]
[Sun Feb 15 10:35:50.798300 2026] [:error] [pid 35497:tid 35534] [client 209.9.200.163:20622] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZExBsyqpfYzoxiskhsWeQAAAMc"]
[Sun Feb 15 10:35:51.062337 2026] [:error] [pid 35497:tid 35548] [client 209.9.200.163:46186] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZExB8yqpfYzoxiskhsWegAAANU"]
[Sun Feb 15 10:35:53.522408 2026] [:error] [pid 42754:tid 42826] [client 209.9.200.163:1631] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZExCeiCZrZWT4BVy12DNQAAA8w"]
[Sun Feb 15 10:35:53.854951 2026] [:error] [pid 42754:tid 42834] [client 209.9.200.163:29090] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZExCeiCZrZWT4BVy12DNgAAA9Q"]
[Sun Feb 15 10:35:56.058587 2026] [:error] [pid 35497:tid 35544] [client 209.9.200.163:54075] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZExDMyqpfYzoxiskhsWfgAAANE"]
[Sun Feb 15 10:35:56.391817 2026] [:error] [pid 42659:tid 42662] [client 209.9.200.163:37032] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZExDOy3JGHOB-Rj_FYaOAAAAEE"]
[Sun Feb 15 10:35:59.131896 2026] [:error] [pid 35557:tid 35568] [client 209.9.200.163:53986] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZExD8I4REuGME4xEbPl2QAAAkU"]
[Sun Feb 15 10:35:59.463201 2026] [:error] [pid 19652:tid 19670] [client 209.9.200.163:43878] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZExDzHg2T9K5fiyOL-KggAAABA"]
[Sun Feb 15 10:36:03.035598 2026] [:error] [pid 42659:tid 42683] [client 209.9.200.163:58905] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZExE-y3JGHOB-Rj_FYaOwAAAFY"]
[Sun Feb 15 10:36:03.347981 2026] [:error] [pid 35560:tid 35640] [client 209.9.200.163:56440] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZExEwZSChHPc3occZ7sNQAAAxc"]
[Sun Feb 15 10:36:06.090628 2026] [:error] [pid 42752:tid 42760] [client 209.9.200.163:49693] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZExFsClY05C-Gq9l0gPLQAAAsE"]
[Sun Feb 15 10:36:06.356200 2026] [:error] [pid 14577:tid 14600] [client 209.9.200.163:15606] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZExFnTqrkuce6u39HuscgAAARQ"]
[Sun Feb 15 10:36:08.164965 2026] [:error] [pid 31679:tid 31732] [client 209.9.200.163:26201] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZExGBz9Q_0Eh7M-Xr1SJwAAAhc"]
[Sun Feb 15 10:36:08.467448 2026] [:error] [pid 31679:tid 31720] [client 209.9.200.163:17979] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZExGBz9Q_0Eh7M-Xr1SKQAAAgs"]
[Sun Feb 15 10:36:11.450627 2026] [:error] [pid 35560:tid 35621] [client 209.9.200.163:14384] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZExGwZSChHPc3occZ7sOQAAAwQ"]
[Sun Feb 15 10:36:12.096225 2026] [:error] [pid 14577:tid 14603] [client 209.9.200.163:53013] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZExHHTqrkuce6u39HusdQAAARc"]
[Sun Feb 15 10:36:14.305264 2026] [:error] [pid 35497:tid 35537] [client 209.9.200.163:25285] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZExHsyqpfYzoxiskhsWkAAAAMo"]
[Sun Feb 15 10:36:14.616717 2026] [:error] [pid 35497:tid 35543] [client 209.9.200.163:65249] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZExHsyqpfYzoxiskhsWkgAAANA"]
[Sun Feb 15 10:36:17.468067 2026] [:error] [pid 14577:tid 14596] [client 209.9.200.163:18569] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZExIXTqrkuce6u39HusegAAARA"]
[Sun Feb 15 10:36:17.773425 2026] [:error] [pid 42659:tid 42680] [client 209.9.200.163:63562] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZExIey3JGHOB-Rj_FYaRgAAAFM"]
[Sun Feb 15 10:36:20.116880 2026] [:error] [pid 42752:tid 42775] [client 209.9.200.163:54500] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZExJMClY05C-Gq9l0gPOQAAAtA"]
[Sun Feb 15 10:36:20.380083 2026] [:error] [pid 42753:tid 42792] [client 209.9.200.163:24287] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZExJAhQMLzszrBLG6eosgAAA4U"]
[Sun Feb 15 10:36:23.379752 2026] [:error] [pid 42753:tid 42794] [client 209.9.200.163:25742] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZExJwhQMLzszrBLG6eotAAAA4c"]
[Sun Feb 15 10:36:23.672694 2026] [:error] [pid 42752:tid 42765] [client 209.9.200.163:31153] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZExJ8ClY05C-Gq9l0gPOwAAAsY"]
[Sun Feb 15 10:36:26.616155 2026] [:error] [pid 42659:tid 42673] [client 209.9.200.163:25785] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZExKuy3JGHOB-Rj_FYaUAAAAEw"]
[Sun Feb 15 10:36:26.881135 2026] [:error] [pid 35497:tid 35537] [client 209.9.200.163:31599] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZExKsyqpfYzoxiskhsWmgAAAMo"]
[Sun Feb 15 10:36:29.297497 2026] [:error] [pid 35557:tid 35580] [client 209.9.200.163:40327] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZExLcI4REuGME4xEbPl6AAAAlE"]
[Sun Feb 15 10:36:29.581574 2026] [:error] [pid 42752:tid 42779] [client 209.9.200.163:10370] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZExLcClY05C-Gq9l0gPPQAAAtQ"]
[Sun Feb 15 10:36:59.373682 2026] [:error] [pid 35560:tid 35622] [client 209.9.200.163:50074] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZExSwZSChHPc3occZ7sWQAAAwU"]
[Sun Feb 15 10:36:59.684691 2026] [:error] [pid 35560:tid 35638] [client 209.9.200.163:38223] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZExSwZSChHPc3occZ7sWgAAAxU"]
[Sun Feb 15 10:36:59.947635 2026] [:error] [pid 35557:tid 35574] [client 209.9.200.163:18603] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZExS8I4REuGME4xEbPl-wAAAks"]
[Sun Feb 15 10:37:02.810800 2026] [:error] [pid 35497:tid 35536] [client 209.9.200.163:17288] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZExTsyqpfYzoxiskhsWsgAAAMk"]
[Sun Feb 15 10:37:03.088397 2026] [:error] [pid 35557:tid 35582] [client 209.9.200.163:32943] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZExT8I4REuGME4xEbPl_QAAAlM"]
[Sun Feb 15 10:37:05.968278 2026] [:error] [pid 42754:tid 42825] [client 209.9.200.163:18988] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZExUeiCZrZWT4BVy12DWwAAA8s"]
[Sun Feb 15 10:37:06.240197 2026] [:error] [pid 31679:tid 31719] [client 209.9.200.163:28394] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZExUhz9Q_0Eh7M-Xr1SPgAAAgo"]
[Sun Feb 15 10:37:09.861984 2026] [:error] [pid 19652:tid 19662] [client 209.9.200.163:61303] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZExVTHg2T9K5fiyOL-KqAAAAAg"]
[Sun Feb 15 10:37:10.135350 2026] [:error] [pid 42752:tid 42781] [client 209.9.200.163:46386] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZExVsClY05C-Gq9l0gPVQAAAtY"]
[Sun Feb 15 10:37:12.822332 2026] [:error] [pid 42753:tid 42803] [client 209.9.200.163:57306] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZExWAhQMLzszrBLG6eo1QAAA5A"]
[Sun Feb 15 10:37:13.079469 2026] [:error] [pid 42752:tid 42772] [client 209.9.200.163:26219] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZExWcClY05C-Gq9l0gPWAAAAs0"]
[Sun Feb 15 10:37:15.022295 2026] [:error] [pid 42659:tid 42667] [client 209.9.200.163:37934] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZExW-y3JGHOB-Rj_FYaeQAAAEY"]
[Sun Feb 15 10:37:15.294209 2026] [:error] [pid 42752:tid 42771] [client 209.9.200.163:23765] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZExW8ClY05C-Gq9l0gPXAAAAsw"]
[Sun Feb 15 10:37:18.124774 2026] [:error] [pid 14577:tid 14602] [client 209.9.200.163:38440] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZExXnTqrkuce6u39HusqgAAARY"]
[Sun Feb 15 10:37:18.404705 2026] [:error] [pid 14577:tid 14580] [client 209.9.200.163:57216] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZExXnTqrkuce6u39HusqwAAAQA"]
[Sun Feb 15 10:37:20.860326 2026] [:error] [pid 42754:tid 42822] [client 209.9.200.163:51895] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZExYOiCZrZWT4BVy12DZAAAA8g"]
[Sun Feb 15 10:37:21.132258 2026] [:error] [pid 31679:tid 31715] [client 209.9.200.163:4220] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZExYRz9Q_0Eh7M-Xr1SQgAAAgY"]
[Sun Feb 15 10:37:24.629199 2026] [:error] [pid 35497:tid 35533] [client 209.9.200.163:58758] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZExZMyqpfYzoxiskhsWwAAAAMY"]
[Sun Feb 15 10:37:24.884257 2026] [:error] [pid 35497:tid 35536] [client 209.9.200.163:2622] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZExZMyqpfYzoxiskhsWwgAAAMk"]
[Sun Feb 15 10:37:27.119082 2026] [:error] [pid 14577:tid 14583] [client 209.9.200.163:40404] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZExZ3Tqrkuce6u39HusrgAAAQM"]
[Sun Feb 15 10:37:27.375610 2026] [:error] [pid 42753:tid 42809] [client 209.9.200.163:19456] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZExZwhQMLzszrBLG6eo2wAAA5Y"]
[Sun Feb 15 10:37:29.944574 2026] [:error] [pid 31679:tid 31720] [client 209.9.200.163:5110] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZExaRz9Q_0Eh7M-Xr1SYQAAAgs"]
[Sun Feb 15 10:37:30.213189 2026] [:error] [pid 35557:tid 35576] [client 209.9.200.163:64847] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZExasI4REuGME4xEbPmAgAAAk0"]
[Sun Feb 15 10:37:33.564756 2026] [:error] [pid 42659:tid 42663] [client 209.9.200.163:36818] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZExbey3JGHOB-Rj_FYagQAAAEI"]
[Sun Feb 15 10:37:33.872331 2026] [:error] [pid 42659:tid 42673] [client 209.9.200.163:33205] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZExbey3JGHOB-Rj_FYaggAAAEw"]
[Sun Feb 15 10:37:35.981928 2026] [:error] [pid 35557:tid 35585] [client 209.9.200.163:49612] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZExb8I4REuGME4xEbPmBQAAAlY"]
[Sun Feb 15 10:37:36.249601 2026] [:error] [pid 19652:tid 19665] [client 209.9.200.163:58517] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZExcDHg2T9K5fiyOL-KswAAAAs"]
[Sun Feb 15 10:37:38.741195 2026] [:error] [pid 42753:tid 42789] [client 209.9.200.163:64829] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZExcghQMLzszrBLG6eo3QAAA4I"]
[Sun Feb 15 10:37:39.046789 2026] [:error] [pid 35557:tid 35569] [client 209.9.200.163:8173] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZExc8I4REuGME4xEbPmCAAAAkY"]
[Sun Feb 15 10:37:41.537451 2026] [:error] [pid 42659:tid 42685] [client 209.9.200.163:64066] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZExdey3JGHOB-Rj_FYaiAAAAFg"]
[Sun Feb 15 10:37:41.844956 2026] [:error] [pid 31679:tid 31710] [client 209.9.200.163:45693] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZExdRz9Q_0Eh7M-Xr1SZwAAAgE"]
[Sun Feb 15 10:37:45.743846 2026] [:error] [pid 42752:tid 42773] [client 209.9.200.163:1370] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZExecClY05C-Gq9l0gPaAAAAs4"]
[Sun Feb 15 10:37:46.009498 2026] [:error] [pid 35557:tid 35577] [client 209.9.200.163:28319] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZExesI4REuGME4xEbPmCwAAAk4"]
[Sun Feb 15 10:37:48.406057 2026] [:error] [pid 19652:tid 19666] [client 209.9.200.163:6793] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZExfDHg2T9K5fiyOL-KuAAAAAw"]
[Sun Feb 15 10:37:48.671014 2026] [:error] [pid 35497:tid 35541] [client 209.9.200.163:48358] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZExfMyqpfYzoxiskhsW_wAAAM4"]
[Sun Feb 15 10:37:51.359495 2026] [:error] [pid 14577:tid 14603] [client 209.9.200.163:16320] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZExf3Tqrkuce6u39HusxAAAARc"]
[Sun Feb 15 10:37:51.631786 2026] [:error] [pid 31679:tid 31720] [client 209.9.200.163:65472] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZExfxz9Q_0Eh7M-Xr1SawAAAgs"]
[Sun Feb 15 10:37:53.703892 2026] [:error] [pid 14577:tid 14595] [client 209.9.200.163:56218] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZExgXTqrkuce6u39HusygAAAQ8"]
[Sun Feb 15 10:37:53.994287 2026] [:error] [pid 14577:tid 14601] [client 209.9.200.163:47873] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZExgXTqrkuce6u39HusywAAARU"]
[Sun Feb 15 10:37:56.761222 2026] [:error] [pid 42659:tid 42678] [client 209.9.200.163:38607] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZExhOy3JGHOB-Rj_FYanwAAAFE"]
[Sun Feb 15 10:38:20.726754 2026] [:error] [pid 35497:tid 35541] [client 209.9.200.163:6085] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZExnMyqpfYzoxiskhsXSwAAAM4"]
[Sun Feb 15 10:38:21.040030 2026] [:error] [pid 42752:tid 42763] [client 209.9.200.163:30342] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZExncClY05C-Gq9l0gPcwAAAsQ"]
[Sun Feb 15 10:38:21.312160 2026] [:error] [pid 42752:tid 42773] [client 209.9.200.163:33885] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZExncClY05C-Gq9l0gPdAAAAs4"]
[Sun Feb 15 10:38:23.482653 2026] [:error] [pid 35497:tid 35537] [client 209.9.200.163:51084] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZExn8yqpfYzoxiskhsXTwAAAMo"]
[Sun Feb 15 10:38:23.822216 2026] [:error] [pid 35557:tid 35572] [client 209.9.200.163:13010] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZExn8I4REuGME4xEbPmLAAAAkk"]
[Sun Feb 15 10:38:25.921633 2026] [:error] [pid 42659:tid 42666] [client 209.9.200.163:54034] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZExoey3JGHOB-Rj_FYarwAAAEU"]
[Sun Feb 15 10:38:26.236448 2026] [:error] [pid 19652:tid 19663] [client 209.9.200.163:37517] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZExojHg2T9K5fiyOL-K4QAAAAk"]
[Sun Feb 15 10:38:28.268738 2026] [:error] [pid 14577:tid 14580] [client 209.9.200.163:55879] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZExpHTqrkuce6u39Hus7wAAAQA"]
[Sun Feb 15 10:38:28.526149 2026] [:error] [pid 31679:tid 31709] [client 209.9.200.163:14561] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZExpBz9Q_0Eh7M-Xr1SewAAAgA"]
[Sun Feb 15 10:38:30.739503 2026] [:error] [pid 42753:tid 42787] [client 209.9.200.163:8431] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZExpghQMLzszrBLG6eo-wAAA4A"]
[Sun Feb 15 10:38:31.009727 2026] [:error] [pid 42752:tid 42759] [client 209.9.200.163:64935] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZExp8ClY05C-Gq9l0gPewAAAsA"]
[Sun Feb 15 10:38:32.990649 2026] [:error] [pid 35560:tid 35633] [client 209.9.200.163:18008] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZExqAZSChHPc3occZ7soAAAAxA"]
[Sun Feb 15 10:38:33.303844 2026] [:error] [pid 42754:tid 42815] [client 209.9.200.163:41537] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZExqeiCZrZWT4BVy12DmAAAA8E"]
[Sun Feb 15 10:38:35.995642 2026] [:error] [pid 19652:tid 19675] [client 209.9.200.163:24031] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZExqzHg2T9K5fiyOL-K7QAAABU"]
[Sun Feb 15 10:38:36.260433 2026] [:error] [pid 42659:tid 42683] [client 209.9.200.163:38734] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZExrOy3JGHOB-Rj_FYatAAAAFY"]
[Sun Feb 15 10:38:38.163172 2026] [:error] [pid 42659:tid 42680] [client 209.9.200.163:50353] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aZExruy3JGHOB-Rj_FYatgAAAFM"]
[Sun Feb 15 10:38:38.435080 2026] [:error] [pid 42753:tid 42807] [client 209.9.200.163:49228] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aZExrghQMLzszrBLG6eo_wAAA5Q"]
[Sun Feb 15 10:38:40.448556 2026] [:error] [pid 42659:tid 42681] [client 209.9.200.163:23040] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZExsOy3JGHOB-Rj_FYavAAAAFQ"]
[Sun Feb 15 10:38:40.837734 2026] [:error] [pid 35497:tid 35545] [client 209.9.200.163:60019] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZExsMyqpfYzoxiskhsXYQAAANI"]
[Sun Feb 15 10:38:43.218411 2026] [:error] [pid 19652:tid 19654] [client 209.9.200.163:51884] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZExszHg2T9K5fiyOL-K8gAAAAA"]
[Sun Feb 15 10:38:43.482939 2026] [:error] [pid 35557:tid 35578] [client 209.9.200.163:51172] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZExs8I4REuGME4xEbPmNgAAAk8"]
[Sun Feb 15 10:38:45.404801 2026] [:error] [pid 35560:tid 35636] [client 209.9.200.163:2267] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZExtQZSChHPc3occZ7sqgAAAxM"]
[Sun Feb 15 10:38:45.670156 2026] [:error] [pid 42659:tid 42680] [client 209.9.200.163:41060] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZExtey3JGHOB-Rj_FYawwAAAFM"]
[Sun Feb 15 10:38:48.004366 2026] [:error] [pid 42752:tid 42760] [client 209.9.200.163:23822] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZExuMClY05C-Gq9l0gPigAAAsE"]
[Sun Feb 15 10:38:48.325933 2026] [:error] [pid 42752:tid 42768] [client 209.9.200.163:65386] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZExuMClY05C-Gq9l0gPjAAAAsk"]
[Sun Feb 15 10:38:50.548435 2026] [:error] [pid 35557:tid 35569] [client 209.9.200.163:37455] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aZExusI4REuGME4xEbPmQgAAAkY"]
[Sun Feb 15 10:38:51.077098 2026] [:error] [pid 31679:tid 31716] [client 209.9.200.163:46449] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aZExuxz9Q_0Eh7M-Xr1SigAAAgc"]
[Sun Feb 15 10:38:53.506727 2026] [:error] [pid 35497:tid 35545] [client 209.9.200.163:14795] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aZExvcyqpfYzoxiskhsXbgAAANI"]
[Sun Feb 15 10:38:53.770908 2026] [:error] [pid 35497:tid 35530] [client 209.9.200.163:1909] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aZExvcyqpfYzoxiskhsXcAAAAMM"]
[Sun Feb 15 10:38:55.816258 2026] [:error] [pid 42753:tid 42809] [client 209.9.200.163:9671] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZExvwhQMLzszrBLG6epCAAAA5Y"]
[Sun Feb 15 10:38:56.246477 2026] [:error] [pid 42752:tid 42777] [client 209.9.200.163:61915] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZExwMClY05C-Gq9l0gPkAAAAtI"]
[Sun Feb 15 10:38:58.908634 2026] [:error] [pid 35557:tid 35577] [client 209.9.200.163:22597] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aZExwsI4REuGME4xEbPmRgAAAk4"]
[Sun Feb 15 10:38:59.221023 2026] [:error] [pid 31679:tid 31712] [client 209.9.200.163:4038] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aZExwxz9Q_0Eh7M-Xr1SkAAAAgM"]
[Sun Feb 15 10:39:01.845266 2026] [:error] [pid 19652:tid 19676] [client 209.9.200.163:46734] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZExxTHg2T9K5fiyOL-K9gAAABY"]
[Sun Feb 15 10:39:02.116851 2026] [:error] [pid 42754:tid 42821] [client 209.9.200.163:32330] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZExxuiCZrZWT4BVy12DpQAAA8c"]
[Sun Feb 15 10:39:04.088448 2026] [:error] [pid 35497:tid 35548] [client 209.9.200.163:30325] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZExyMyqpfYzoxiskhsXegAAANU"]
[Sun Feb 15 10:39:04.365882 2026] [:error] [pid 42752:tid 42760] [client 209.9.200.163:17970] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZExyMClY05C-Gq9l0gPlwAAAsE"]
[Sun Feb 15 10:39:07.332992 2026] [:error] [pid 42753:tid 42807] [client 209.9.200.163:57202] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZExywhQMLzszrBLG6epDAAAA5Q"]
[Sun Feb 15 10:39:07.640416 2026] [:error] [pid 35560:tid 35623] [client 209.9.200.163:39075] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZExywZSChHPc3occZ7suwAAAwY"]
[Sun Feb 15 10:39:09.515647 2026] [:error] [pid 31679:tid 31723] [client 209.9.200.163:37970] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZExzRz9Q_0Eh7M-Xr1SmAAAAg4"]
[Sun Feb 15 10:39:09.779718 2026] [:error] [pid 42659:tid 42675] [client 209.9.200.163:38682] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZExzey3JGHOB-Rj_FYa2gAAAE4"]
[Sun Feb 15 10:39:12.029334 2026] [:error] [pid 35497:tid 35546] [client 209.9.200.163:65022] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aZEx0MyqpfYzoxiskhsXhAAAANM"]
[Sun Feb 15 10:39:12.303788 2026] [:error] [pid 31679:tid 31713] [client 209.9.200.163:61210] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aZEx0Bz9Q_0Eh7M-Xr1SmQAAAgQ"]
[Sun Feb 15 10:39:14.206446 2026] [:error] [pid 42659:tid 42674] [client 209.9.200.163:40867] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZEx0uy3JGHOB-Rj_FYa4AAAAE0"]
[Sun Feb 15 10:39:14.476937 2026] [:error] [pid 42659:tid 42681] [client 209.9.200.163:41315] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZEx0uy3JGHOB-Rj_FYa4QAAAFQ"]
[Sun Feb 15 10:39:17.103980 2026] [:error] [pid 35557:tid 35583] [client 209.9.200.163:10521] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZEx1cI4REuGME4xEbPmTwAAAlQ"]
[Sun Feb 15 10:39:17.369334 2026] [:error] [pid 42659:tid 42664] [client 209.9.200.163:11523] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZEx1ey3JGHOB-Rj_FYa5QAAAEM"]
[Sun Feb 15 10:39:41.345635 2026] [:error] [pid 35560:tid 35629] [client 209.9.200.163:19052] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZEx7QZSChHPc3occZ7sygAAAww"]
[Sun Feb 15 10:39:41.639978 2026] [:error] [pid 35557:tid 35575] [client 209.9.200.163:12248] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZEx7cI4REuGME4xEbPmWgAAAkw"]
[Sun Feb 15 10:39:41.929397 2026] [:error] [pid 35497:tid 35549] [client 209.9.200.163:11410] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZEx7cyqpfYzoxiskhsXpwAAANY"]
[Sun Feb 15 10:39:44.369134 2026] [:error] [pid 35560:tid 35637] [client 209.9.200.163:57844] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZEx8AZSChHPc3occZ7szAAAAxQ"]
[Sun Feb 15 10:39:44.656164 2026] [:error] [pid 42753:tid 42808] [client 209.9.200.163:32302] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZEx8AhQMLzszrBLG6epLgAAA5U"]
[Sun Feb 15 10:39:46.442337 2026] [:error] [pid 14577:tid 14592] [client 209.9.200.163:24256] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZEx8nTqrkuce6u39HutMwAAAQw"]
[Sun Feb 15 10:39:46.719209 2026] [:error] [pid 35560:tid 35626] [client 209.9.200.163:63082] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZEx8gZSChHPc3occZ7szwAAAwk"]
[Sun Feb 15 10:39:49.403806 2026] [:error] [pid 42659:tid 42664] [client 209.9.200.163:43594] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZEx9ey3JGHOB-Rj_FYbAQAAAEM"]
[Sun Feb 15 10:39:49.701189 2026] [:error] [pid 42659:tid 42672] [client 209.9.200.163:16207] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZEx9ey3JGHOB-Rj_FYbAgAAAEs"]
[Sun Feb 15 10:39:51.778967 2026] [:error] [pid 35560:tid 35623] [client 209.9.200.163:52563] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZEx9wZSChHPc3occZ7s1gAAAwY"]
[Sun Feb 15 10:39:52.091452 2026] [:error] [pid 35560:tid 35627] [client 209.9.200.163:31838] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZEx-AZSChHPc3occZ7s1wAAAwo"]
[Sun Feb 15 10:39:54.708700 2026] [:error] [pid 19652:tid 19668] [client 209.9.200.163:21271] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZEx-jHg2T9K5fiyOL-LCwAAAA4"]
[Sun Feb 15 10:39:54.995316 2026] [:error] [pid 42753:tid 42796] [client 209.9.200.163:37567] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZEx-ghQMLzszrBLG6epPAAAA4k"]
[Sun Feb 15 10:39:56.988925 2026] [:error] [pid 14577:tid 14604] [client 209.9.200.163:19414] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZEx_HTqrkuce6u39HutOAAAARg"]
[Sun Feb 15 10:39:57.252733 2026] [:error] [pid 42659:tid 42682] [client 209.9.200.163:22276] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZEx_ey3JGHOB-Rj_FYbCQAAAFU"]
[Sun Feb 15 10:39:59.662102 2026] [:error] [pid 14577:tid 14598] [client 209.9.200.163:32117] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZEx_3Tqrkuce6u39HutOwAAARI"]
[Sun Feb 15 10:39:59.932927 2026] [:error] [pid 14577:tid 14597] [client 209.9.200.163:48177] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZEx_3Tqrkuce6u39HutPQAAARE"]
[Sun Feb 15 10:40:01.955996 2026] [:error] [pid 14577:tid 14600] [client 209.9.200.163:45795] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZEyAXTqrkuce6u39HutPwAAARQ"]
[Sun Feb 15 10:40:02.235410 2026] [:error] [pid 35560:tid 35621] [client 209.9.200.163:42347] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZEyAgZSChHPc3occZ7s3QAAAwQ"]
[Sun Feb 15 10:40:04.736507 2026] [:error] [pid 42659:tid 42677] [client 209.9.200.163:59021] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZEyBOy3JGHOB-Rj_FYbDwAAAFA"]
[Sun Feb 15 10:40:05.000845 2026] [:error] [pid 31679:tid 31723] [client 209.9.200.163:47108] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZEyBBz9Q_0Eh7M-Xr1SsQAAAg4"]
[Sun Feb 15 10:40:07.188981 2026] [:error] [pid 42752:tid 42777] [client 209.9.200.163:10957] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZEyB8ClY05C-Gq9l0gPuAAAAtI"]
[Sun Feb 15 10:40:07.461652 2026] [:error] [pid 31679:tid 31717] [client 209.9.200.163:54629] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZEyBxz9Q_0Eh7M-Xr1StQAAAgg"]
[Sun Feb 15 10:40:10.201883 2026] [:error] [pid 19652:tid 19654] [client 209.9.200.163:34677] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZEyCjHg2T9K5fiyOL-LEwAAAAA"]
[Sun Feb 15 10:40:10.554680 2026] [:error] [pid 14577:tid 14597] [client 209.9.200.163:61982] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZEyCnTqrkuce6u39HutSwAAARE"]
[Sun Feb 15 10:40:12.652093 2026] [:error] [pid 42754:tid 42834] [client 209.9.200.163:50832] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZEyDOiCZrZWT4BVy12DxwAAA9Q"]
[Sun Feb 15 10:40:12.915879 2026] [:error] [pid 35497:tid 35551] [client 209.9.200.163:60656] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZEyDMyqpfYzoxiskhsXsgAAANg"]
[Sun Feb 15 10:40:15.241611 2026] [:error] [pid 42754:tid 42835] [client 209.9.200.163:36300] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZEyD-iCZrZWT4BVy12DzgAAA9U"]
[Sun Feb 15 10:40:15.512258 2026] [:error] [pid 42754:tid 42820] [client 209.9.200.163:25811] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZEyD-iCZrZWT4BVy12DzwAAA8Y"]
[Sun Feb 15 10:40:17.336733 2026] [:error] [pid 19652:tid 19668] [client 209.9.200.163:15109] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZEyETHg2T9K5fiyOL-LGQAAAA4"]
[Sun Feb 15 10:40:17.595073 2026] [:error] [pid 42752:tid 42778] [client 209.9.200.163:16640] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZEyEcClY05C-Gq9l0gPvwAAAtM"]
[Sun Feb 15 10:40:20.137914 2026] [:error] [pid 14577:tid 14598] [client 209.9.200.163:12851] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZEyFHTqrkuce6u39HutVQAAARI"]
[Sun Feb 15 10:40:20.441018 2026] [:error] [pid 14577:tid 14588] [client 209.9.200.163:54533] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZEyFHTqrkuce6u39HutWAAAAQg"]
[Sun Feb 15 10:40:22.235953 2026] [:error] [pid 42752:tid 42775] [client 209.9.200.163:58197] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZEyFsClY05C-Gq9l0gPxwAAAtA"]
[Sun Feb 15 10:40:22.541122 2026] [:error] [pid 42753:tid 42810] [client 209.9.200.163:47774] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZEyFghQMLzszrBLG6epSgAAA5c"]
[Sun Feb 15 10:40:25.097019 2026] [:error] [pid 42754:tid 42827] [client 209.9.200.163:24230] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZEyGeiCZrZWT4BVy12D1gAAA80"]
[Sun Feb 15 10:40:25.360690 2026] [:error] [pid 42753:tid 42795] [client 209.9.200.163:30015] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZEyGQhQMLzszrBLG6epUgAAA4g"]
[Sun Feb 15 10:40:29.395436 2026] [:error] [pid 42753:tid 42808] [client 209.9.200.163:58674] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZEyHQhQMLzszrBLG6epVwAAA5U"]
[Sun Feb 15 10:40:29.661372 2026] [:error] [pid 42659:tid 42677] [client 209.9.200.163:62726] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZEyHey3JGHOB-Rj_FYbHQAAAFA"]
[Sun Feb 15 10:40:31.627443 2026] [:error] [pid 42753:tid 42798] [client 209.9.200.163:22012] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZEyHwhQMLzszrBLG6epWAAAA4s"]
[Sun Feb 15 10:40:31.892217 2026] [:error] [pid 42753:tid 42799] [client 209.9.200.163:60485] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZEyHwhQMLzszrBLG6epWQAAA4w"]
[Sun Feb 15 10:40:34.079621 2026] [:error] [pid 35497:tid 35527] [client 209.9.200.163:47911] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZEyIsyqpfYzoxiskhsXwwAAAMA"]
[Sun Feb 15 10:40:34.362627 2026] [:error] [pid 14577:tid 14595] [client 209.9.200.163:61893] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZEyInTqrkuce6u39HutaAAAAQ8"]
[Sun Feb 15 10:40:36.699357 2026] [:error] [pid 31679:tid 31717] [client 209.9.200.163:17881] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZEyJBz9Q_0Eh7M-Xr1SwQAAAgg"]
[Sun Feb 15 10:40:36.963884 2026] [:error] [pid 35560:tid 35638] [client 209.9.200.163:50860] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZEyJAZSChHPc3occZ7s8AAAAxU"]
[Sun Feb 15 10:41:01.712846 2026] [:error] [pid 42659:tid 42662] [client 209.9.200.163:58491] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZEyPey3JGHOB-Rj_FYbPwAAAEE"]
[Sun Feb 15 10:41:01.987232 2026] [:error] [pid 42659:tid 42680] [client 209.9.200.163:4172] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZEyPey3JGHOB-Rj_FYbQQAAAFM"]
[Sun Feb 15 10:41:02.256108 2026] [:error] [pid 35497:tid 35534] [client 209.9.200.163:25296] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZEyPsyqpfYzoxiskhsXzwAAAMc"]
[Sun Feb 15 10:41:04.075563 2026] [:error] [pid 19652:tid 19661] [client 209.9.200.163:2776] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZEyQDHg2T9K5fiyOL-LMQAAAAc"]
[Sun Feb 15 10:41:04.366382 2026] [:error] [pid 42754:tid 42817] [client 209.9.200.163:1723] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZEyQOiCZrZWT4BVy12D5gAAA8M"]
[Sun Feb 15 10:41:07.022765 2026] [:error] [pid 42754:tid 42822] [client 209.9.200.163:30428] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZEyQ-iCZrZWT4BVy12D6wAAA8g"]
[Sun Feb 15 10:41:07.293022 2026] [:error] [pid 42753:tid 42810] [client 209.9.200.163:62567] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZEyQwhQMLzszrBLG6epYwAAA5c"]
[Sun Feb 15 10:41:09.418842 2026] [:error] [pid 35560:tid 35633] [client 209.9.200.163:21890] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZEyRQZSChHPc3occZ7s-wAAAxA"]
[Sun Feb 15 10:41:09.675170 2026] [:error] [pid 35557:tid 35579] [client 209.9.200.163:58379] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZEyRcI4REuGME4xEbPmfAAAAlA"]
[Sun Feb 15 10:41:12.061896 2026] [:error] [pid 19652:tid 19667] [client 209.9.200.163:32744] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZEySDHg2T9K5fiyOL-LNgAAAA0"]
[Sun Feb 15 10:41:12.334534 2026] [:error] [pid 35560:tid 35629] [client 209.9.200.163:65209] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZEySAZSChHPc3occZ7s_wAAAww"]
[Sun Feb 15 10:41:14.391175 2026] [:error] [pid 35557:tid 35566] [client 209.9.200.163:15391] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZEySsI4REuGME4xEbPmfwAAAkM"]
[Sun Feb 15 10:41:14.656462 2026] [:error] [pid 14577:tid 14603] [client 209.9.200.163:54340] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZEySnTqrkuce6u39HutegAAARc"]
[Sun Feb 15 10:41:17.253279 2026] [:error] [pid 35497:tid 35551] [client 209.9.200.163:45362] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZEyTcyqpfYzoxiskhsX2gAAANg"]
[Sun Feb 15 10:41:17.557396 2026] [:error] [pid 35497:tid 35549] [client 209.9.200.163:18159] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZEyTcyqpfYzoxiskhsX2wAAANY"]
[Sun Feb 15 10:41:19.443134 2026] [:error] [pid 42754:tid 42817] [client 209.9.200.163:43476] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZEyT-iCZrZWT4BVy12D8gAAA8M"]
[Sun Feb 15 10:41:19.747527 2026] [:error] [pid 14577:tid 14585] [client 209.9.200.163:49697] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZEyT3Tqrkuce6u39HutfgAAAQU"]
[Sun Feb 15 10:41:22.397104 2026] [:error] [pid 35557:tid 35583] [client 209.9.200.163:17431] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZEyUsI4REuGME4xEbPmgwAAAlQ"]
[Sun Feb 15 10:41:22.676260 2026] [:error] [pid 42659:tid 42672] [client 209.9.200.163:37262] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZEyUuy3JGHOB-Rj_FYbVAAAAEs"]
[Sun Feb 15 10:41:24.626180 2026] [:error] [pid 42754:tid 42831] [client 209.9.200.163:2761] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZEyVOiCZrZWT4BVy12D9QAAA9E"]
[Sun Feb 15 10:41:24.922041 2026] [:error] [pid 19652:tid 19664] [client 209.9.200.163:52974] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZEyVDHg2T9K5fiyOL-LOQAAAAo"]
[Sun Feb 15 10:41:27.331075 2026] [:error] [pid 35557:tid 35585] [client 209.9.200.163:50920] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZEyV8I4REuGME4xEbPmhQAAAlY"]
[Sun Feb 15 10:41:27.605925 2026] [:error] [pid 35557:tid 35567] [client 209.9.200.163:14470] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZEyV8I4REuGME4xEbPmhgAAAkQ"]
[Sun Feb 15 10:41:29.794083 2026] [:error] [pid 35557:tid 35572] [client 209.9.200.163:54667] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZEyWcI4REuGME4xEbPmjAAAAkk"]
[Sun Feb 15 10:41:30.059161 2026] [:error] [pid 19652:tid 19662] [client 209.9.200.163:15688] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZEyWjHg2T9K5fiyOL-LQAAAAAg"]
[Sun Feb 15 10:41:32.315123 2026] [:error] [pid 35497:tid 35550] [client 209.9.200.163:33705] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZEyXMyqpfYzoxiskhsX6QAAANc"]
[Sun Feb 15 10:41:32.572328 2026] [:error] [pid 19652:tid 19672] [client 209.9.200.163:38441] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZEyXDHg2T9K5fiyOL-LQgAAABI"]
[Sun Feb 15 10:41:34.415939 2026] [:error] [pid 42752:tid 42764] [client 209.9.200.163:39184] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZEyXsClY05C-Gq9l0gP6gAAAsU"]
[Sun Feb 15 10:41:34.672447 2026] [:error] [pid 42659:tid 42665] [client 209.9.200.163:30213] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZEyXuy3JGHOB-Rj_FYbXQAAAEQ"]
[Sun Feb 15 10:41:37.064208 2026] [:error] [pid 19652:tid 19656] [client 209.9.200.163:65365] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZEyYTHg2T9K5fiyOL-LRQAAAAI"]
[Sun Feb 15 10:41:37.327396 2026] [:error] [pid 31679:tid 31720] [client 209.9.200.163:64149] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZEyYRz9Q_0Eh7M-Xr1S0wAAAgs"]
[Sun Feb 15 10:41:39.486615 2026] [:error] [pid 42754:tid 42825] [client 209.9.200.163:25773] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZEyY-iCZrZWT4BVy12D_gAAA8s"]
[Sun Feb 15 10:41:39.752602 2026] [:error] [pid 35557:tid 35586] [client 209.9.200.163:17140] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZEyY8I4REuGME4xEbPmjwAAAlc"]
[Sun Feb 15 12:50:51.075610 2026] [:error] [pid 42754:tid 42828] [client 104.28.246.117:46439] [client 104.28.246.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aZFQq-iCZrZWT4BVy12aqgAAA84"]
[Sun Feb 15 12:50:58.513002 2026] [:error] [pid 14577:tid 14596] [client 104.28.246.117:47526] [client 104.28.246.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/style.php"] [unique_id "aZFQsnTqrkuce6u39HvW9wAAARA"]
[Sun Feb 15 13:02:27.749614 2026] [:error] [pid 42753:tid 42803] [client 182.42.111.156:58809] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZFTYwhQMLzszrBLG6fB3gAAA5A"]
[Sun Feb 15 14:48:53.244618 2026] [:error] [pid 42753:tid 42808] [client 128.140.3.253:11840] [client 128.140.3.253] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/pdf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZFsVQhQMLzszrBLG6fRNQAAA5U"]
[Sun Feb 15 15:28:23.151465 2026] [:error] [pid 42659:tid 42682] [client 65.109.202.117:57248] [client 65.109.202.117] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/ld+json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZF1l-y3JGHOB-Rj_FZeFwAAAFU"]
[Sun Feb 15 15:28:27.222428 2026] [:error] [pid 42659:tid 42672] [client 65.109.202.117:57248] [client 65.109.202.117] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/ld+json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZF1m-y3JGHOB-Rj_FZeHAAAAEs"]
[Sun Feb 15 15:28:27.630386 2026] [:error] [pid 42659:tid 42680] [client 65.109.202.117:57248] [client 65.109.202.117] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/ld+json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZF1m-y3JGHOB-Rj_FZeHQAAAFM"]
[Sun Feb 15 17:37:30.733786 2026] [:error] [pid 42659:tid 42672] [client 209.9.200.163:36542] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZGT2uy3JGHOB-Rj_FZ03gAAAEs"]
[Sun Feb 15 17:37:33.034922 2026] [:error] [pid 35557:tid 35576] [client 209.9.200.163:49026] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZGT3cI4REuGME4xEbM1TwAAAk0"]
[Sun Feb 15 17:37:35.252273 2026] [:error] [pid 42659:tid 42677] [client 209.9.200.163:25509] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZGT3-y3JGHOB-Rj_FZ04gAAAFA"]
[Sun Feb 15 17:37:38.660352 2026] [:error] [pid 35497:tid 35538] [client 209.9.200.163:14212] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZGT4syqpfYzoxiskhtz1AAAAMs"]
[Sun Feb 15 17:37:41.074322 2026] [:error] [pid 42753:tid 42787] [client 209.9.200.163:25348] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZGT5QhQMLzszrBLG6fr9gAAA4A"]
[Sun Feb 15 17:37:43.465737 2026] [:error] [pid 42753:tid 42792] [client 209.9.200.163:10919] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZGT5whQMLzszrBLG6fr-AAAA4U"]
[Sun Feb 15 17:37:45.825336 2026] [:error] [pid 42752:tid 42782] [client 209.9.200.163:11984] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZGT6cClY05C-Gq9l0hSaAAAAtc"]
[Sun Feb 15 17:37:48.815639 2026] [:error] [pid 19652:tid 19663] [client 209.9.200.163:16206] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZGT7DHg2T9K5fiyOL_syQAAAAk"]
[Sun Feb 15 17:37:52.464845 2026] [:error] [pid 19652:tid 19676] [client 209.9.200.163:37855] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZGT8DHg2T9K5fiyOL_s2AAAABY"]
[Sun Feb 15 17:37:54.759347 2026] [:error] [pid 42753:tid 42795] [client 209.9.200.163:33557] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZGT8ghQMLzszrBLG6fr_gAAA4g"]
[Sun Feb 15 17:38:01.304509 2026] [:error] [pid 42659:tid 42677] [client 209.9.200.163:62138] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZGT-ey3JGHOB-Rj_FZ09gAAAFA"]
[Sun Feb 15 17:38:03.732217 2026] [:error] [pid 31679:tid 31711] [client 209.9.200.163:43083] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZGT-xz9Q_0Eh7M-Xr2n5gAAAgI"]
[Sun Feb 15 17:38:05.768016 2026] [:error] [pid 42754:tid 42826] [client 209.9.200.163:33274] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZGT_eiCZrZWT4BVy13KqAAAA8w"]
[Sun Feb 15 17:38:07.816025 2026] [:error] [pid 42754:tid 42814] [client 209.9.200.163:32168] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZGT_-iCZrZWT4BVy13KqQAAA8A"]
[Sun Feb 15 17:38:10.175021 2026] [:error] [pid 42659:tid 42681] [client 209.9.200.163:60619] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZGUAuy3JGHOB-Rj_FZ0_gAAAFQ"]
[Sun Feb 15 17:38:12.236625 2026] [:error] [pid 42753:tid 42808] [client 209.9.200.163:43016] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZGUBAhQMLzszrBLG6fsBQAAA5U"]
[Sun Feb 15 17:38:14.337309 2026] [:error] [pid 35560:tid 35633] [client 209.9.200.163:47820] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZGUBgZSChHPc3occZ41EQAAAxA"]
[Sun Feb 15 17:38:16.222884 2026] [:error] [pid 31679:tid 31718] [client 209.9.200.163:34726] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZGUCBz9Q_0Eh7M-Xr2n7gAAAgk"]
[Sun Feb 15 17:38:18.726314 2026] [:error] [pid 35497:tid 35540] [client 209.9.200.163:48461] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZGUCsyqpfYzoxiskhtz6wAAAM0"]
[Sun Feb 15 17:38:20.875356 2026] [:error] [pid 19652:tid 19659] [client 209.9.200.163:60220] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZGUDDHg2T9K5fiyOL_s8gAAAAU"]
[Sun Feb 15 17:38:23.740487 2026] [:error] [pid 19652:tid 19678] [client 209.9.200.163:37566] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZGUDzHg2T9K5fiyOL_s9wAAABg"]
[Sun Feb 15 17:38:27.856982 2026] [:error] [pid 35497:tid 35527] [client 209.9.200.163:3619] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZGUE8yqpfYzoxiskhtz8wAAAMA"]
[Sun Feb 15 17:38:53.579165 2026] [:error] [pid 19652:tid 19657] [client 209.9.200.163:8512] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZGULTHg2T9K5fiyOL_tIgAAAAM"]
[Sun Feb 15 17:39:03.526838 2026] [:error] [pid 35560:tid 35624] [client 209.9.200.163:39431] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZGUNwZSChHPc3occZ41JgAAAwc"]
[Sun Feb 15 17:39:05.979713 2026] [:error] [pid 35557:tid 35570] [client 209.9.200.163:63457] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZGUOcI4REuGME4xEbM1mgAAAkc"]
[Sun Feb 15 17:39:08.621440 2026] [:error] [pid 42752:tid 42778] [client 209.9.200.163:25998] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZGUPMClY05C-Gq9l0hSlAAAAtM"]
[Sun Feb 15 17:39:10.988262 2026] [:error] [pid 14577:tid 14600] [client 209.9.200.163:53662] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZGUPnTqrkuce6u39HsiOQAAARQ"]
[Sun Feb 15 17:39:13.088711 2026] [:error] [pid 31679:tid 31729] [client 209.9.200.163:59866] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZGUQRz9Q_0Eh7M-Xr2oHAAAAhQ"]
[Sun Feb 15 17:39:15.473411 2026] [:error] [pid 35560:tid 35638] [client 209.9.200.163:2143] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZGUQwZSChHPc3occZ41LQAAAxU"]
[Sun Feb 15 17:39:17.991250 2026] [:error] [pid 35497:tid 35540] [client 209.9.200.163:30039] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZGURcyqpfYzoxiskht0FgAAAM0"]
[Sun Feb 15 17:39:20.569120 2026] [:error] [pid 19652:tid 19675] [client 209.9.200.163:37470] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZGUSDHg2T9K5fiyOL_tNAAAABU"]
[Sun Feb 15 17:39:22.477848 2026] [:error] [pid 35497:tid 35548] [client 209.9.200.163:3286] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZGUSsyqpfYzoxiskht0HAAAANU"]
[Sun Feb 15 17:39:25.423011 2026] [:error] [pid 31679:tid 31713] [client 209.9.200.163:27117] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZGUTRz9Q_0Eh7M-Xr2oLQAAAgQ"]
[Sun Feb 15 17:39:28.214314 2026] [:error] [pid 31679:tid 31712] [client 209.9.200.163:10908] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZGUUBz9Q_0Eh7M-Xr2oMwAAAgM"]
[Sun Feb 15 17:39:30.008917 2026] [:error] [pid 42752:tid 42765] [client 209.9.200.163:29518] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZGUUsClY05C-Gq9l0hSpgAAAsY"]
[Sun Feb 15 17:39:34.261312 2026] [:error] [pid 35557:tid 35579] [client 209.9.200.163:24479] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZGUVsI4REuGME4xEbM1pgAAAlA"]
[Sun Feb 15 19:00:06.322767 2026] [:error] [pid 42754:tid 42816] [client 104.207.58.212:15935] [client 104.207.58.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aZGnNuiCZrZWT4BVy13YogAAA8I"]
[Sun Feb 15 19:00:11.089057 2026] [:error] [pid 42659:tid 42666] [client 216.26.250.217:27233] [client 216.26.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aZGnO-y3JGHOB-Rj_FaEpAAAAEU"]
[Sun Feb 15 19:00:13.199952 2026] [:error] [pid 35560:tid 35625] [client 104.207.39.8:52065] [client 104.207.39.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aZGnPQZSChHPc3occZ5CaAAAAwg"]
[Sun Feb 15 19:00:14.638568 2026] [:error] [pid 35560:tid 35624] [client 209.50.170.33:17439] [client 209.50.170.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production"] [unique_id "aZGnPgZSChHPc3occZ5CbAAAAwc"]
[Sun Feb 15 19:00:17.120890 2026] [:error] [pid 35560:tid 35639] [client 65.111.14.119:55109] [client 65.111.14.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aZGnQQZSChHPc3occZ5CbgAAAxY"]
[Sun Feb 15 19:00:18.771775 2026] [:error] [pid 42754:tid 42814] [client 65.111.0.140:25397] [client 65.111.0.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.staging"] [unique_id "aZGnQuiCZrZWT4BVy13YyQAAA8A"]
[Sun Feb 15 19:00:21.357480 2026] [:error] [pid 42753:tid 42790] [client 209.50.175.40:46031] [client 209.50.175.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aZGnRQhQMLzszrBLG6f4hwAAA4M"]
[Sun Feb 15 19:00:22.302960 2026] [:error] [pid 42752:tid 42780] [client 209.50.181.183:12547] [client 209.50.181.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aZGnRsClY05C-Gq9l0he1QAAAtU"]
[Sun Feb 15 19:00:23.889636 2026] [:error] [pid 42754:tid 42836] [client 65.111.24.234:59917] [client 65.111.24.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env"] [unique_id "aZGnR-iCZrZWT4BVy13YzgAAA9Y"]
[Sun Feb 15 19:00:25.999465 2026] [:error] [pid 42753:tid 42800] [client 45.3.41.75:35815] [client 45.3.41.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env"] [unique_id "aZGnSQhQMLzszrBLG6f4jAAAA40"]
[Sun Feb 15 19:00:28.931145 2026] [:error] [pid 35560:tid 35632] [client 209.50.162.67:50659] [client 209.50.162.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aZGnTAZSChHPc3occZ5CegAAAw8"]
[Sun Feb 15 19:00:29.182459 2026] [:error] [pid 14577:tid 14591] [client 104.207.40.56:51003] [client 104.207.40.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.save"] [unique_id "aZGnTXTqrkuce6u39Hs3VAAAAQs"]
[Sun Feb 15 19:00:30.823637 2026] [:error] [pid 35560:tid 35617] [client 45.3.53.241:57955] [client 45.3.53.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aZGnTgZSChHPc3occZ5CfwAAAwA"]
[Sun Feb 15 19:00:32.593480 2026] [:error] [pid 42659:tid 42667] [client 104.207.35.100:17403] [client 104.207.35.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aZGnUOy3JGHOB-Rj_FaEtwAAAEY"]
[Sun Feb 15 19:00:35.160627 2026] [:error] [pid 35497:tid 35543] [client 45.3.48.96:37403] [client 45.3.48.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backend/.env"] [unique_id "aZGnU8yqpfYzoxiskhuElAAAANA"]
[Sun Feb 15 19:00:35.396883 2026] [:error] [pid 14577:tid 14589] [client 45.3.55.105:42597] [client 45.3.55.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backend/.env"] [unique_id "aZGnU3Tqrkuce6u39Hs3XAAAAQk"]
[Sun Feb 15 19:00:37.330974 2026] [:error] [pid 42659:tid 42685] [client 65.111.14.242:13897] [client 65.111.14.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/frontend/.env"] [unique_id "aZGnVey3JGHOB-Rj_FaEuwAAAFg"]
[Sun Feb 15 19:00:38.585980 2026] [:error] [pid 42659:tid 42665] [client 104.207.42.74:61013] [client 104.207.42.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/frontend/.env"] [unique_id "aZGnVuy3JGHOB-Rj_FaEwQAAAEQ"]
[Sun Feb 15 19:00:41.949226 2026] [:error] [pid 31679:tid 31729] [client 104.207.33.216:60105] [client 104.207.33.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aZGnWRz9Q_0Eh7M-Xr26cQAAAhQ"]
[Sun Feb 15 19:00:46.046641 2026] [:error] [pid 42659:tid 42668] [client 104.207.62.224:27763] [client 104.207.62.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aZGnXuy3JGHOB-Rj_FaEyQAAAEc"]
[Sun Feb 15 19:00:47.277517 2026] [:error] [pid 42659:tid 42683] [client 209.50.165.253:27595] [client 209.50.165.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/.env"] [unique_id "aZGnX-y3JGHOB-Rj_FaEygAAAFY"]
[Sun Feb 15 19:00:49.313031 2026] [:error] [pid 35497:tid 35542] [client 104.207.49.51:37249] [client 104.207.49.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZGnYcyqpfYzoxiskhuEogAAAM8"]
[Sun Feb 15 19:00:50.581290 2026] [:error] [pid 14577:tid 14587] [client 65.111.22.153:18677] [client 65.111.22.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZGnYnTqrkuce6u39Hs3YQAAAQc"]
[Sun Feb 15 19:00:52.680340 2026] [:error] [pid 19652:tid 19655] [client 209.50.168.2:49687] [client 209.50.168.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/dev/.git/config"] [unique_id "aZGnZDHg2T9K5fiyOL8FfwAAAAE"]
[Sun Feb 15 19:00:53.967229 2026] [:error] [pid 35497:tid 35548] [client 216.26.227.83:21983] [client 216.26.227.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/dev/.git/config"] [unique_id "aZGnZcyqpfYzoxiskhuEpgAAANU"]
[Sun Feb 15 19:00:57.216394 2026] [:error] [pid 14577:tid 14582] [client 104.207.54.27:13715] [client 104.207.54.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.git/config"] [unique_id "aZGnaXTqrkuce6u39Hs3ZwAAAQI"]
[Sun Feb 15 19:00:58.811050 2026] [:error] [pid 35557:tid 35581] [client 216.26.235.78:30099] [client 216.26.235.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.git/config"] [unique_id "aZGnasI4REuGME4xEbNE5QAAAlI"]
[Sun Feb 15 19:01:01.004792 2026] [:error] [pid 35560:tid 35623] [client 104.207.61.208:10731] [client 104.207.61.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/v2/.git/config"] [unique_id "aZGnbQZSChHPc3occZ5ClQAAAwY"]
[Sun Feb 15 19:01:02.095445 2026] [:error] [pid 42754:tid 42838] [client 216.26.249.27:38671] [client 216.26.249.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/v2/.git/config"] [unique_id "aZGnbuiCZrZWT4BVy13Y7QAAA9g"]
[Sun Feb 15 19:01:04.028204 2026] [:error] [pid 42754:tid 42823] [client 216.26.231.224:12307] [client 216.26.231.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp/.git/config"] [unique_id "aZGncOiCZrZWT4BVy13Y7wAAA8k"]
[Sun Feb 15 19:01:05.152832 2026] [:error] [pid 42753:tid 42791] [client 45.3.43.193:21169] [client 45.3.43.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp/.git/config"] [unique_id "aZGncQhQMLzszrBLG6f4qwAAA4Q"]
[Sun Feb 15 19:01:07.143423 2026] [:error] [pid 42754:tid 42821] [client 104.207.55.78:28303] [client 104.207.55.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/test/.git/config"] [unique_id "aZGnc-iCZrZWT4BVy13Y8QAAA8c"]
[Sun Feb 15 19:01:08.517832 2026] [:error] [pid 31679:tid 31726] [client 209.50.163.64:56319] [client 209.50.163.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/test/.git/config"] [unique_id "aZGndBz9Q_0Eh7M-Xr26gQAAAhE"]
[Sun Feb 15 19:01:10.403377 2026] [:error] [pid 42659:tid 42666] [client 104.207.34.90:25115] [client 104.207.34.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.git/config"] [unique_id "aZGnduy3JGHOB-Rj_FaE3gAAAEU"]
[Sun Feb 15 19:01:12.406696 2026] [:error] [pid 35497:tid 35539] [client 45.3.36.243:14151] [client 45.3.36.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.git/config"] [unique_id "aZGneMyqpfYzoxiskhuErQAAAMw"]
[Sun Feb 15 19:01:14.375284 2026] [:error] [pid 35497:tid 35541] [client 65.111.22.241:19251] [client 65.111.22.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backup/.git/config"] [unique_id "aZGnesyqpfYzoxiskhuErgAAAM4"]
[Sun Feb 15 19:01:15.573895 2026] [:error] [pid 42754:tid 42836] [client 216.26.243.221:33197] [client 216.26.243.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backup/.git/config"] [unique_id "aZGne-iCZrZWT4BVy13Y-AAAA9Y"]
[Sun Feb 15 19:01:17.150488 2026] [:error] [pid 42752:tid 42778] [client 216.26.228.83:47379] [client 216.26.228.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/site/.git/config"] [unique_id "aZGnfcClY05C-Gq9l0hfCQAAAtM"]
[Sun Feb 15 19:01:18.746627 2026] [:error] [pid 42752:tid 42760] [client 209.50.163.182:9855] [client 209.50.163.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/site/.git/config"] [unique_id "aZGnfsClY05C-Gq9l0hfDQAAAsE"]
[Sun Feb 15 19:01:20.342734 2026] [:error] [pid 42754:tid 42829] [client 216.26.227.83:25841] [client 216.26.227.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.git/config"] [unique_id "aZGngOiCZrZWT4BVy13Y-gAAA88"]
[Sun Feb 15 19:01:22.035362 2026] [:error] [pid 31679:tid 31725] [client 209.50.166.222:60167] [client 209.50.166.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.git/config"] [unique_id "aZGnghz9Q_0Eh7M-Xr26iQAAAhA"]
[Sun Feb 15 19:01:25.223585 2026] [:error] [pid 14577:tid 14602] [client 65.111.12.49:25247] [client 65.111.12.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.git/config"] [unique_id "aZGnhXTqrkuce6u39Hs3fQAAARY"]
[Sun Feb 15 19:01:28.182019 2026] [:error] [pid 14577:tid 14580] [client 216.26.237.19:58823] [client 216.26.237.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.git/config"] [unique_id "aZGniHTqrkuce6u39Hs3gwAAAQA"]
[Sun Feb 15 22:06:06.887357 2026] [:error] [pid 42752:tid 42777] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/88.php
[Sun Feb 15 22:06:07.141202 2026] [:error] [pid 42752:tid 42765] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sun Feb 15 22:06:07.395112 2026] [:error] [pid 42752:tid 42783] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Sun Feb 15 22:06:07.648167 2026] [:error] [pid 42752:tid 42770] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/cvtcosue.php
[Sun Feb 15 22:06:07.903241 2026] [:error] [pid 42752:tid 42763] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Feb 15 22:06:08.161168 2026] [:error] [pid 42752:tid 42776] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Sun Feb 15 22:06:08.415184 2026] [:error] [pid 42752:tid 42769] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/aer.php
[Sun Feb 15 22:06:08.668659 2026] [:error] [pid 42752:tid 42775] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Feb 15 22:06:08.924490 2026] [:error] [pid 42752:tid 42762] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/667.php
[Sun Feb 15 22:06:09.178894 2026] [:error] [pid 42752:tid 42774] [client 20.223.208.206:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Sun Feb 15 22:06:09.429294 2026] [:error] [pid 42752:tid 42759] [client 20.223.208.206:13340] [client 20.223.208.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZHS0cClY05C-Gq9l0h0mwAAAsA"]
[Sun Feb 15 22:06:09.933541 2026] [:error] [pid 14577:tid 14598] [client 20.223.208.206:3611] [client 20.223.208.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZHS0XTqrkuce6u39HtaTgAAARI"]
[Sun Feb 15 22:06:10.434779 2026] [:error] [pid 42659:tid 42684] [client 20.223.208.206:14118] [client 20.223.208.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZHS0uy3JGHOB-Rj_FackQAAAFc"]
[Sun Feb 15 22:06:10.934577 2026] [:error] [pid 42659:tid 42683] [client 20.223.208.206:5924] [client 20.223.208.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kimono.php"] [unique_id "aZHS0uy3JGHOB-Rj_FackgAAAFY"]
[Sun Feb 15 22:56:13.998924 2026] [:error] [pid 35497:tid 35545] [client 43.135.182.95:38192] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZHejcyqpfYzoxiskhulqwAAANI"]
[Mon Feb 16 02:06:24.819111 2026] [:error] [pid 19652:tid 19663] [client 180.110.203.108:57497] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZILIDHg2T9K5fiyOL9cqgAAAAk"]
[Mon Feb 16 03:06:45.125074 2026] [:error] [pid 42753:tid 42789] [client 159.65.178.41:37572] [client 159.65.178.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZIZRQhQMLzszrBLG6czEAAAA4I"]
[Mon Feb 16 03:06:46.306818 2026] [:error] [pid 35560:tid 35629] [client 159.65.178.41:45086] [client 159.65.178.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZIZRgZSChHPc3occZ6BlAAAAww"]
[Mon Feb 16 04:17:04.721143 2026] [:error] [pid 37004:tid 37006] [client 84.46.40.160:62487] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZIpwFXWqA9gxE5oGmbjrwAAAQA"]
[Mon Feb 16 04:17:07.020696 2026] [:error] [pid 4455:tid 4475] [client 84.46.40.160:63453] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZIpwwNa-4dvQCL0rupK3gAAANI"]
[Mon Feb 16 04:17:09.493480 2026] [:error] [pid 4347:tid 4388] [client 84.46.40.160:63037] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZIpxTFcjv6pEAnSEid69wAAABQ"]
[Mon Feb 16 04:17:11.580411 2026] [:error] [pid 37004:tid 37018] [client 84.46.40.160:62186] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZIpx1XWqA9gxE5oGmbjuAAAAQw"]
[Mon Feb 16 04:17:13.624409 2026] [:error] [pid 37004:tid 37009] [client 84.46.40.160:62499] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZIpyVXWqA9gxE5oGmbjwQAAAQM"]
[Mon Feb 16 04:17:15.874808 2026] [:error] [pid 4349:tid 4446] [client 84.46.40.160:59358] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZIpy8rbZYafUL_3QfzUFgAAAJg"]
[Mon Feb 16 04:17:18.111886 2026] [:error] [pid 4455:tid 4469] [client 84.46.40.160:63348] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZIpzgNa-4dvQCL0rupK5QAAAMw"]
[Mon Feb 16 04:17:20.424970 2026] [:error] [pid 4347:tid 4371] [client 84.46.40.160:62935] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZIp0DFcjv6pEAnSEid7BAAAAAM"]
[Mon Feb 16 04:17:22.415695 2026] [:error] [pid 4348:tid 4418] [client 84.46.40.160:63005] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZIp0nxbK-cCGKg9ayta0QAAAFc"]
[Mon Feb 16 04:17:24.443174 2026] [:error] [pid 37004:tid 37009] [client 84.46.40.160:64208] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZIp1FXWqA9gxE5oGmbj1AAAAQM"]
[Mon Feb 16 04:17:26.451685 2026] [:error] [pid 4348:tid 4403] [client 84.46.40.160:59171] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZIp1nxbK-cCGKg9ayta2QAAAEg"]
[Mon Feb 16 04:17:28.496478 2026] [:error] [pid 4349:tid 4424] [client 84.46.40.160:59538] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZIp2MrbZYafUL_3QfzUJgAAAII"]
[Mon Feb 16 04:17:30.507465 2026] [:error] [pid 4348:tid 4400] [client 84.46.40.160:62377] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZIp2nxbK-cCGKg9ayta3QAAAEU"]
[Mon Feb 16 04:17:32.837398 2026] [:error] [pid 4455:tid 4459] [client 84.46.40.160:64631] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZIp3ANa-4dvQCL0rupK9wAAAMI"]
[Mon Feb 16 04:17:34.762094 2026] [:error] [pid 37004:tid 37026] [client 84.46.40.160:60516] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZIp3lXWqA9gxE5oGmbj5QAAARQ"]
[Mon Feb 16 04:17:36.930288 2026] [:error] [pid 37004:tid 37008] [client 84.46.40.160:59219] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZIp4FXWqA9gxE5oGmbj7gAAAQI"]
[Mon Feb 16 04:17:39.043983 2026] [:error] [pid 4455:tid 4472] [client 84.46.40.160:59155] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZIp4wNa-4dvQCL0rupK-QAAAM8"]
[Mon Feb 16 04:17:41.511192 2026] [:error] [pid 4348:tid 4409] [client 84.46.40.160:60740] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZIp5XxbK-cCGKg9ayta4QAAAE4"]
[Mon Feb 16 04:17:44.483297 2026] [:error] [pid 4348:tid 4418] [client 84.46.40.160:59837] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZIp6HxbK-cCGKg9ayta5QAAAFc"]
[Mon Feb 16 04:17:46.721741 2026] [:error] [pid 4347:tid 4368] [client 84.46.40.160:61572] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZIp6jFcjv6pEAnSEid7FAAAAAA"]
[Mon Feb 16 04:17:48.799733 2026] [:error] [pid 4455:tid 4460] [client 84.46.40.160:62167] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZIp7ANa-4dvQCL0rupLAwAAAMM"]
[Mon Feb 16 04:17:51.405703 2026] [:error] [pid 4455:tid 4467] [client 84.46.40.160:62420] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZIp7wNa-4dvQCL0rupLCQAAAMo"]
[Mon Feb 16 04:17:53.721017 2026] [:error] [pid 4455:tid 4462] [client 84.46.40.160:59083] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZIp8QNa-4dvQCL0rupLDwAAAMU"]
[Mon Feb 16 04:17:56.800327 2026] [:error] [pid 4349:tid 4423] [client 84.46.40.160:60195] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZIp9MrbZYafUL_3QfzUPgAAAIE"]
[Mon Feb 16 04:17:58.952688 2026] [:error] [pid 37004:tid 37016] [client 84.46.40.160:63978] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZIp9lXWqA9gxE5oGmbkIgAAAQo"]
[Mon Feb 16 04:18:01.141135 2026] [:error] [pid 37004:tid 37008] [client 84.46.40.160:60495] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZIp-VXWqA9gxE5oGmbkJAAAAQI"]
[Mon Feb 16 04:18:26.492440 2026] [:error] [pid 37004:tid 37013] [client 84.46.40.160:64840] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZIqElXWqA9gxE5oGmbkaAAAAQc"]
[Mon Feb 16 04:18:28.583266 2026] [:error] [pid 37004:tid 37011] [client 84.46.40.160:60719] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZIqFFXWqA9gxE5oGmbkcwAAAQU"]
[Mon Feb 16 04:18:30.752668 2026] [:error] [pid 37004:tid 37022] [client 84.46.40.160:62866] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZIqFlXWqA9gxE5oGmbkdgAAARA"]
[Mon Feb 16 04:18:32.897685 2026] [:error] [pid 37004:tid 37013] [client 84.46.40.160:63862] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZIqGFXWqA9gxE5oGmbkfAAAAQc"]
[Mon Feb 16 04:18:42.485677 2026] [:error] [pid 4348:tid 4414] [client 84.46.40.160:63884] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZIqInxbK-cCGKg9aytbSAAAAFM"]
[Mon Feb 16 04:18:44.787233 2026] [:error] [pid 4349:tid 4436] [client 84.46.40.160:59752] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZIqJMrbZYafUL_3QfzUfAAAAI4"]
[Mon Feb 16 04:18:46.953405 2026] [:error] [pid 4348:tid 4397] [client 84.46.40.160:60861] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZIqJnxbK-cCGKg9aytbTAAAAEI"]
[Mon Feb 16 04:18:49.512208 2026] [:error] [pid 4455:tid 4465] [client 84.46.40.160:64126] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZIqKQNa-4dvQCL0rupLdgAAAMg"]
[Mon Feb 16 04:18:51.877320 2026] [:error] [pid 4455:tid 4458] [client 84.46.40.160:61317] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZIqKwNa-4dvQCL0rupLegAAAME"]
[Mon Feb 16 04:18:54.436755 2026] [:error] [pid 4349:tid 4422] [client 84.46.40.160:60139] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZIqLsrbZYafUL_3QfzUgQAAAIA"]
[Mon Feb 16 04:18:56.632274 2026] [:error] [pid 4455:tid 4471] [client 84.46.40.160:60299] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZIqMANa-4dvQCL0rupLhQAAAM4"]
[Mon Feb 16 04:18:59.044537 2026] [:error] [pid 4349:tid 4438] [client 84.46.40.160:62059] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZIqM8rbZYafUL_3QfzUiQAAAJA"]
[Mon Feb 16 04:19:01.329144 2026] [:error] [pid 37004:tid 37019] [client 84.46.40.160:64456] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZIqNVXWqA9gxE5oGmbktwAAAQ0"]
[Mon Feb 16 04:19:03.609932 2026] [:error] [pid 37004:tid 37029] [client 84.46.40.160:60079] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZIqN1XWqA9gxE5oGmbkvQAAARc"]
[Mon Feb 16 04:19:06.294351 2026] [:error] [pid 4455:tid 4475] [client 84.46.40.160:59666] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZIqOgNa-4dvQCL0rupLlwAAANI"]
[Mon Feb 16 04:19:08.633007 2026] [:error] [pid 4455:tid 4479] [client 84.46.40.160:65031] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZIqPANa-4dvQCL0rupLmwAAANY"]
[Mon Feb 16 04:19:12.420050 2026] [:error] [pid 4347:tid 4368] [client 84.46.40.160:60024] [client 84.46.40.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZIqQDFcjv6pEAnSEid7ogAAAAA"]
[Mon Feb 16 06:29:00.527909 2026] [:error] [pid 37004:tid 37021] [client 43.166.255.122:47362] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZJIrFXWqA9gxE5oGmYlhAAAAQ8"]
[Mon Feb 16 10:55:30.462380 2026] [:error] [pid 38888:tid 38911] [client 95.217.109.26:6036] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aZKHIqmDoBJWPvV4pcOWzwAAAVQ"]
[Mon Feb 16 11:22:30.940253 2026] [:error] [pid 26648:tid 26656] [client 51.75.116.202:60748] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZKNdjT55fUixS3gmyhdzgAAAYM"]
[Mon Feb 16 11:22:32.961885 2026] [:error] [pid 26648:tid 26671] [client 51.75.116.202:58298] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZKNeDT55fUixS3gmyhd0wAAAZI"]
[Mon Feb 16 11:22:34.847264 2026] [:error] [pid 37004:tid 37023] [client 51.75.116.202:58314] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZKNelXWqA9gxE5oGmadYwAAARE"]
[Mon Feb 16 11:22:36.717121 2026] [:error] [pid 4347:tid 4373] [client 51.75.116.202:58330] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZKNfDFcjv6pEAnSEicShAAAAAU"]
[Mon Feb 16 11:22:38.584702 2026] [:error] [pid 4348:tid 4416] [client 51.75.116.202:58336] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZKNfnxbK-cCGKg9ayv8DgAAAFU"]
[Mon Feb 16 11:22:40.362083 2026] [:error] [pid 4348:tid 4413] [client 51.75.116.202:58348] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZKNgHxbK-cCGKg9ayv8EgAAAFI"]
[Mon Feb 16 11:22:42.187963 2026] [:error] [pid 4455:tid 4465] [client 51.75.116.202:55378] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZKNggNa-4dvQCL0rur0WwAAAMg"]
[Mon Feb 16 11:22:44.134807 2026] [:error] [pid 4347:tid 4371] [client 51.75.116.202:55382] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZKNhDFcjv6pEAnSEicSiQAAAAM"]
[Mon Feb 16 11:22:46.124438 2026] [:error] [pid 4347:tid 4378] [client 51.75.116.202:55392] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZKNhjFcjv6pEAnSEicSkAAAAAo"]
[Mon Feb 16 11:22:48.023525 2026] [:error] [pid 38888:tid 38894] [client 51.75.116.202:55404] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZKNiKmDoBJWPvV4pcOkdgAAAUM"]
[Mon Feb 16 11:22:49.994841 2026] [:error] [pid 38888:tid 38892] [client 51.75.116.202:55414] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZKNiamDoBJWPvV4pcOkeQAAAUE"]
[Mon Feb 16 11:22:51.787086 2026] [:error] [pid 4455:tid 4479] [client 51.75.116.202:56840] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZKNiwNa-4dvQCL0rur0ZgAAANY"]
[Mon Feb 16 11:22:53.731217 2026] [:error] [pid 4348:tid 4396] [client 51.75.116.202:56844] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZKNjXxbK-cCGKg9ayv8JwAAAEE"]
[Mon Feb 16 11:22:55.837037 2026] [:error] [pid 26648:tid 26667] [client 51.75.116.202:56858] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZKNjzT55fUixS3gmyhePAAAAY4"]
[Mon Feb 16 11:22:57.790705 2026] [:error] [pid 4348:tid 4410] [client 51.75.116.202:56860] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZKNkXxbK-cCGKg9ayv8LQAAAE8"]
[Mon Feb 16 11:22:59.770190 2026] [:error] [pid 4348:tid 4418] [client 51.75.116.202:56874] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZKNk3xbK-cCGKg9ayv8MgAAAFc"]
[Mon Feb 16 11:23:01.553061 2026] [:error] [pid 38888:tid 38896] [client 51.75.116.202:56876] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZKNlamDoBJWPvV4pcOk0wAAAUU"]
[Mon Feb 16 11:23:03.516872 2026] [:error] [pid 4348:tid 4400] [client 51.75.116.202:59282] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZKNl3xbK-cCGKg9ayv8RgAAAEU"]
[Mon Feb 16 11:23:05.420860 2026] [:error] [pid 4347:tid 4383] [client 51.75.116.202:59298] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZKNmTFcjv6pEAnSEicTeQAAAA8"]
[Mon Feb 16 11:23:07.521000 2026] [:error] [pid 4349:tid 4445] [client 51.75.116.202:59302] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZKNm8rbZYafUL_3QfxpcAAAAJc"]
[Mon Feb 16 11:23:09.507029 2026] [:error] [pid 26648:tid 26664] [client 51.75.116.202:59304] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZKNnTT55fUixS3gmyhefAAAAYs"]
[Mon Feb 16 11:23:11.286618 2026] [:error] [pid 4349:tid 4434] [client 51.75.116.202:59308] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZKNn8rbZYafUL_3QfxpgwAAAIw"]
[Mon Feb 16 11:23:13.050471 2026] [:error] [pid 37004:tid 37017] [client 51.75.116.202:35024] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZKNoVXWqA9gxE5oGmadhQAAAQs"]
[Mon Feb 16 11:23:14.989615 2026] [:error] [pid 4349:tid 4431] [client 51.75.116.202:35036] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZKNosrbZYafUL_3QfxpjAAAAIk"]
[Mon Feb 16 11:23:16.914522 2026] [:error] [pid 4349:tid 4426] [client 51.75.116.202:35038] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZKNpMrbZYafUL_3QfxpjwAAAIQ"]
[Mon Feb 16 11:23:18.851490 2026] [:error] [pid 4348:tid 4419] [client 51.75.116.202:35044] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZKNpnxbK-cCGKg9ayv8pQAAAFg"]
[Mon Feb 16 11:23:20.659620 2026] [:error] [pid 4349:tid 4422] [client 51.75.116.202:35048] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZKNqMrbZYafUL_3QfxpkgAAAIA"]
[Mon Feb 16 11:23:22.454686 2026] [:error] [pid 26648:tid 26657] [client 51.75.116.202:57292] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZKNqjT55fUixS3gmyhelgAAAYQ"]
[Mon Feb 16 11:23:24.400741 2026] [:error] [pid 4348:tid 4406] [client 51.75.116.202:57296] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZKNrHxbK-cCGKg9ayv8tgAAAEs"]
[Mon Feb 16 11:23:26.399073 2026] [:error] [pid 4347:tid 4391] [client 51.75.116.202:57304] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZKNrjFcjv6pEAnSEicUCQAAABc"]
[Mon Feb 16 11:23:28.369102 2026] [:error] [pid 4349:tid 4424] [client 51.75.116.202:57320] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZKNsMrbZYafUL_3QfxpqgAAAII"]
[Mon Feb 16 11:23:48.344964 2026] [:error] [pid 38888:tid 38906] [client 51.75.116.202:57332] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZKNxKmDoBJWPvV4pcOlZgAAAU8"]
[Mon Feb 16 11:23:50.307696 2026] [:error] [pid 4455:tid 4471] [client 51.75.116.202:43900] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZKNxgNa-4dvQCL0rur02gAAAM4"]
[Mon Feb 16 11:23:52.210153 2026] [:error] [pid 4347:tid 4370] [client 51.75.116.202:49858] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZKNyDFcjv6pEAnSEicUQAAAAAI"]
[Mon Feb 16 11:23:54.111654 2026] [:error] [pid 4347:tid 4368] [client 51.75.116.202:49862] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZKNyjFcjv6pEAnSEicUQgAAAAA"]
[Mon Feb 16 11:23:56.015352 2026] [:error] [pid 4455:tid 4467] [client 51.75.116.202:49866] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZKNzANa-4dvQCL0rur04wAAAMo"]
[Mon Feb 16 11:23:58.079851 2026] [:error] [pid 37004:tid 37024] [client 51.75.116.202:49878] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZKNzlXWqA9gxE5oGmad6gAAARI"]
[Mon Feb 16 11:24:00.970651 2026] [:error] [pid 4455:tid 4465] [client 51.75.116.202:49884] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZKN0ANa-4dvQCL0rur07QAAAMg"]
[Mon Feb 16 11:24:04.696050 2026] [:error] [pid 4347:tid 4375] [client 51.75.116.202:45448] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZKN1DFcjv6pEAnSEicUWAAAAAc"]
[Mon Feb 16 11:24:05.122507 2026] [:error] [pid 37004:tid 37013] [client 72.62.240.129:59802] [client 72.62.240.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aZKN1VXWqA9gxE5oGmad-AAAAQc"]
[Mon Feb 16 15:32:58.600018 2026] [:error] [pid 4348:tid 4396] [client 84.115.228.96:16595] [client 84.115.228.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.115.228.96, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZLIKnxbK-cCGKg9aytL1gAAAEE"]
[Mon Feb 16 15:32:58.605010 2026] [:error] [pid 4348:tid 4396] [client 84.115.228.96:16595] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 16 18:17:06.968925 2026] [:error] [pid 4455:tid 4466] [client 185.200.118.10:22333] [client 185.200.118.10] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=video/quicktime"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZLuogNa-4dvQCL0ruppHgAAAMk"]
[Mon Feb 16 18:17:07.528637 2026] [:error] [pid 4455:tid 4476] [client 185.200.118.10:22333] [client 185.200.118.10] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=video/quicktime"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZLuowNa-4dvQCL0ruppIgAAANM"]
[Mon Feb 16 22:01:08.817665 2026] [:error] [pid 26648:tid 26653] [client 147.135.252.138:40302] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZMjJDT55fUixS3gmyhVJwAAAYA"]
[Mon Feb 16 22:01:11.141267 2026] [:error] [pid 26648:tid 26659] [client 147.135.252.138:50954] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZMjJzT55fUixS3gmyhVKwAAAYY"]
[Mon Feb 16 22:01:15.560593 2026] [:error] [pid 4347:tid 4371] [client 147.135.252.138:50968] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZMjKzFcjv6pEAnSEifz5gAAAAM"]
[Mon Feb 16 22:01:18.061618 2026] [:error] [pid 26648:tid 26654] [client 147.135.252.138:50980] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZMjLjT55fUixS3gmyhVMAAAAYE"]
[Mon Feb 16 22:01:20.194702 2026] [:error] [pid 37004:tid 37021] [client 147.135.252.138:50982] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZMjMFXWqA9gxE5oGmZEAgAAAQ8"]
[Mon Feb 16 22:01:22.343245 2026] [:error] [pid 4347:tid 4371] [client 147.135.252.138:50398] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZMjMjFcjv6pEAnSEifz8gAAAAM"]
[Mon Feb 16 22:01:24.692139 2026] [:error] [pid 26648:tid 26659] [client 147.135.252.138:50402] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZMjNDT55fUixS3gmyhVOgAAAYY"]
[Mon Feb 16 22:01:26.769414 2026] [:error] [pid 4348:tid 4403] [client 147.135.252.138:50408] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZMjNnxbK-cCGKg9ayvRRgAAAEg"]
[Mon Feb 16 22:01:28.930905 2026] [:error] [pid 37004:tid 37018] [client 147.135.252.138:50414] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZMjOFXWqA9gxE5oGmZECwAAAQw"]
[Mon Feb 16 22:01:30.992591 2026] [:error] [pid 4349:tid 4422] [client 147.135.252.138:49968] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZMjOsrbZYafUL_3QfwS2QAAAIA"]
[Mon Feb 16 22:01:32.950501 2026] [:error] [pid 4347:tid 4380] [client 147.135.252.138:49984] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZMjPDFcjv6pEAnSEif0CAAAAAw"]
[Mon Feb 16 22:01:35.206705 2026] [:error] [pid 4347:tid 4379] [client 147.135.252.138:49988] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZMjPzFcjv6pEAnSEif0CQAAAAs"]
[Mon Feb 16 22:01:37.386126 2026] [:error] [pid 26648:tid 26655] [client 147.135.252.138:50000] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZMjQTT55fUixS3gmyhVSgAAAYI"]
[Mon Feb 16 22:01:39.511171 2026] [:error] [pid 38888:tid 38893] [client 147.135.252.138:50014] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZMjQ6mDoBJWPvV4pcNyXwAAAUI"]
[Mon Feb 16 22:01:41.571756 2026] [:error] [pid 26648:tid 26675] [client 147.135.252.138:37876] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZMjRTT55fUixS3gmyhVUAAAAZY"]
[Mon Feb 16 22:01:43.830016 2026] [:error] [pid 4348:tid 4402] [client 147.135.252.138:37890] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZMjR3xbK-cCGKg9ayvRXwAAAEc"]
[Mon Feb 16 22:01:45.804553 2026] [:error] [pid 38888:tid 38898] [client 147.135.252.138:37902] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZMjSamDoBJWPvV4pcNyZAAAAUc"]
[Mon Feb 16 22:01:47.659629 2026] [:error] [pid 4347:tid 4390] [client 147.135.252.138:37908] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZMjSzFcjv6pEAnSEif0HgAAABY"]
[Mon Feb 16 22:01:49.565227 2026] [:error] [pid 4347:tid 4391] [client 147.135.252.138:37912] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZMjTTFcjv6pEAnSEif0IwAAABc"]
[Mon Feb 16 22:01:51.879112 2026] [:error] [pid 4347:tid 4377] [client 147.135.252.138:50890] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZMjTzFcjv6pEAnSEif0KAAAAAk"]
[Mon Feb 16 22:01:53.905314 2026] [:error] [pid 4347:tid 4388] [client 147.135.252.138:50906] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZMjUTFcjv6pEAnSEif0KQAAABQ"]
[Mon Feb 16 22:01:55.825748 2026] [:error] [pid 4348:tid 4398] [client 147.135.252.138:50922] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZMjU3xbK-cCGKg9ayvRaAAAAEM"]
[Mon Feb 16 22:01:57.640147 2026] [:error] [pid 4348:tid 4404] [client 147.135.252.138:50934] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZMjVXxbK-cCGKg9ayvRaQAAAEk"]
[Mon Feb 16 22:01:59.557659 2026] [:error] [pid 4455:tid 4465] [client 147.135.252.138:50948] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZMjVwNa-4dvQCL0ruqkygAAAMg"]
[Mon Feb 16 22:02:01.593125 2026] [:error] [pid 4347:tid 4389] [client 147.135.252.138:56854] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZMjWTFcjv6pEAnSEif0MQAAABU"]
[Mon Feb 16 22:02:03.567592 2026] [:error] [pid 4349:tid 4424] [client 147.135.252.138:56860] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZMjW8rbZYafUL_3QfwS_QAAAII"]
[Mon Feb 16 22:02:05.631402 2026] [:error] [pid 37004:tid 37014] [client 147.135.252.138:56874] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZMjXVXWqA9gxE5oGmZELAAAAQg"]
[Mon Feb 16 22:02:26.355479 2026] [:error] [pid 4455:tid 4474] [client 147.135.252.138:56882] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZMjcgNa-4dvQCL0ruqk7AAAANE"]
[Mon Feb 16 22:02:28.212189 2026] [:error] [pid 4348:tid 4404] [client 147.135.252.138:38992] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZMjdHxbK-cCGKg9ayvRpQAAAEk"]
[Mon Feb 16 22:02:30.183069 2026] [:error] [pid 38888:tid 38893] [client 147.135.252.138:40388] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZMjdqmDoBJWPvV4pcNypQAAAUI"]
[Mon Feb 16 22:02:31.954123 2026] [:error] [pid 4349:tid 4444] [client 147.135.252.138:40390] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZMjd8rbZYafUL_3QfwTEAAAAJY"]
[Mon Feb 16 22:02:33.932932 2026] [:error] [pid 4347:tid 4384] [client 147.135.252.138:40394] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZMjeTFcjv6pEAnSEif0YQAAABA"]
[Mon Feb 16 22:02:36.018235 2026] [:error] [pid 4347:tid 4392] [client 147.135.252.138:40408] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZMjfDFcjv6pEAnSEif0ZAAAABg"]
[Mon Feb 16 22:02:37.943698 2026] [:error] [pid 4348:tid 4416] [client 147.135.252.138:40416] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZMjfXxbK-cCGKg9ayvRrgAAAFU"]
[Mon Feb 16 22:02:39.816498 2026] [:error] [pid 4455:tid 4480] [client 147.135.252.138:40428] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZMjfwNa-4dvQCL0ruqk9gAAANc"]
[Mon Feb 16 22:02:41.786816 2026] [:error] [pid 4348:tid 4410] [client 147.135.252.138:57426] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZMjgXxbK-cCGKg9ayvRsgAAAE8"]
[Mon Feb 16 22:02:43.658737 2026] [:error] [pid 4347:tid 4389] [client 147.135.252.138:57440] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZMjgzFcjv6pEAnSEif0bgAAABU"]
[Mon Feb 16 22:02:45.592890 2026] [:error] [pid 4347:tid 4379] [client 147.135.252.138:57444] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZMjhTFcjv6pEAnSEif0cQAAAAs"]
[Mon Feb 16 22:02:47.493261 2026] [:error] [pid 37004:tid 37021] [client 147.135.252.138:57454] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZMjh1XWqA9gxE5oGmZEXgAAAQ8"]
[Mon Feb 16 22:02:49.461474 2026] [:error] [pid 4348:tid 4400] [client 147.135.252.138:57470] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZMjiXxbK-cCGKg9ayvRugAAAEU"]
[Mon Feb 16 22:02:51.234092 2026] [:error] [pid 4455:tid 4475] [client 147.135.252.138:37382] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZMjiwNa-4dvQCL0ruqk_AAAANI"]
[Mon Feb 16 22:02:53.204928 2026] [:error] [pid 4348:tid 4417] [client 147.135.252.138:37384] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZMjjXxbK-cCGKg9ayvRvgAAAFY"]
[Mon Feb 16 22:02:56.933632 2026] [:error] [pid 26648:tid 26675] [client 147.135.252.138:37398] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZMjkDT55fUixS3gmyhVygAAAZY"]
[Tue Feb 17 02:49:40.405490 2026] [:error] [pid 4349:tid 4426] [client 170.106.160.90:35682] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZNmxMrbZYafUL_3QfxTUwAAAIQ"]
[Tue Feb 17 03:33:47.389457 2026] [:error] [pid 55625:tid 55645] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Tue Feb 17 03:33:47.633839 2026] [:error] [pid 55625:tid 55647] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Feb 17 03:33:47.996622 2026] [:error] [pid 55625:tid 55648] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Tue Feb 17 03:33:48.278133 2026] [:error] [pid 55625:tid 55650] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Feb 17 03:33:48.523896 2026] [:error] [pid 55625:tid 55628] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/asax.php
[Tue Feb 17 03:33:48.767102 2026] [:error] [pid 55625:tid 55627] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Feb 17 03:33:49.101164 2026] [:error] [pid 55625:tid 55632] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k3w6g9s4h2.php
[Tue Feb 17 03:33:49.344990 2026] [:error] [pid 55625:tid 55635] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 17 03:33:49.650144 2026] [:error] [pid 55625:tid 55638] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 03:33:51.182287 2026] [:error] [pid 55625:tid 55638] [client 68.221.64.54:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Tue Feb 17 03:33:51.645088 2026] [:error] [pid 55625:tid 55651] [client 68.221.64.54:6437] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZNxH2CGg0IP0aZI0YJJ_QAAANg"]
[Tue Feb 17 03:33:56.245810 2026] [:error] [pid 55441:tid 55591] [client 68.221.64.54:11746] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZNxJN2c3fdwh_sSamFAAQAAAII"]
[Tue Feb 17 03:33:58.570788 2026] [:error] [pid 55437:tid 55534] [client 68.221.64.54:26199] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZNxJqxjwm1c8l04PC23jgAAAA0"]
[Tue Feb 17 03:33:59.420047 2026] [:error] [pid 55438:tid 55572] [client 68.221.64.54:29745] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZNxJ5DGW7K3zavhNkozuQAAAEs"]
[Tue Feb 17 03:34:01.892517 2026] [:error] [pid 55441:tid 55596] [client 68.221.64.54:10796] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZNxKd2c3fdwh_sSamFACQAAAIc"]
[Tue Feb 17 03:34:07.726767 2026] [:error] [pid 55625:tid 55637] [client 68.221.64.54:17481] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZNxL2CGg0IP0aZI0YJKIQAAAMo"]
[Tue Feb 17 03:34:10.818444 2026] [:error] [pid 55625:tid 55644] [client 68.221.64.54:9643] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZNxMmCGg0IP0aZI0YJKJgAAANE"]
[Tue Feb 17 03:34:12.922717 2026] [:error] [pid 55441:tid 55608] [client 68.221.64.54:6282] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZNxNN2c3fdwh_sSamFAHQAAAJM"]
[Tue Feb 17 03:34:15.888632 2026] [:error] [pid 55438:tid 55563] [client 68.221.64.54:6860] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZNxN5DGW7K3zavhNkozwgAAAEM"]
[Tue Feb 17 03:34:45.941868 2026] [:error] [pid 55437:tid 55526] [client 68.221.64.54:38788] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZNxVaxjwm1c8l04PC23xAAAAAU"]
[Tue Feb 17 03:34:47.220860 2026] [:error] [pid 55441:tid 55608] [client 68.221.64.54:32785] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZNxV92c3fdwh_sSamFASAAAAJM"]
[Tue Feb 17 03:34:50.119001 2026] [:error] [pid 55438:tid 55576] [client 68.221.64.54:27147] [client 68.221.64.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZNxWpDGW7K3zavhNkoz9gAAAE4"]
[Tue Feb 17 03:34:51.095430 2026] [:error] [pid 55441:tid 55591] [client 68.221.64.54:19477] File does not exist: /usr/local/apache/htdocs/suspended-page/ak.php
[Tue Feb 17 03:34:51.340163 2026] [:error] [pid 55441:tid 55604] [client 68.221.64.54:19477] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Tue Feb 17 03:34:51.583185 2026] [:error] [pid 55441:tid 55613] [client 68.221.64.54:19477] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Feb 17 03:34:51.835913 2026] [:error] [pid 55441:tid 55602] [client 68.221.64.54:19477] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Feb 17 03:34:52.081046 2026] [:error] [pid 55441:tid 55599] [client 68.221.64.54:19477] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Feb 17 03:34:52.333231 2026] [:error] [pid 55441:tid 55594] [client 68.221.64.54:19477] [client 68.221.64.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZNxXN2c3fdwh_sSamFAUwAAAIU"]
[Tue Feb 17 03:34:53.418648 2026] [:error] [pid 55625:tid 55637] [client 68.221.64.54:8874] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Feb 17 04:46:30.134086 2026] [:error] [pid 58659:tid 58676] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/tx64.php
[Tue Feb 17 04:46:30.397538 2026] [:error] [pid 58659:tid 58670] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/ZeLXoo.php
[Tue Feb 17 04:46:30.897034 2026] [:error] [pid 58659:tid 58683] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Tue Feb 17 04:46:31.168805 2026] [:error] [pid 58659:tid 58667] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/jzntz.php
[Tue Feb 17 04:46:31.437630 2026] [:error] [pid 58659:tid 58681] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/dunk.php
[Tue Feb 17 04:46:31.718165 2026] [:error] [pid 58659:tid 58675] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/bolaf.php
[Tue Feb 17 04:46:31.982034 2026] [:error] [pid 58659:tid 58685] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/bgwnfsal.php
[Tue Feb 17 04:46:32.245424 2026] [:error] [pid 58659:tid 58672] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/cap.php
[Tue Feb 17 04:46:32.685018 2026] [:error] [pid 58659:tid 58661] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Tue Feb 17 04:46:32.947148 2026] [:error] [pid 58659:tid 58682] [client 20.100.193.95:40325] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Tue Feb 17 04:46:33.211340 2026] [:error] [pid 58659:tid 58684] [client 20.100.193.95:40325] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aZOCKcDX32iTEO4jt2_KKwAAANc"]
[Tue Feb 17 04:46:35.413568 2026] [:error] [pid 58551:tid 58560] [client 20.100.193.95:41698] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aZOCK61t8eWr-MgFsppMHAAAAAA"]
[Tue Feb 17 04:46:37.652942 2026] [:error] [pid 32790:tid 32796] [client 20.100.193.95:59017] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aZOCLXs3HJP9ozPHsN6uJgAAAQI"]
[Tue Feb 17 04:46:40.519094 2026] [:error] [pid 58659:tid 58679] [client 20.100.193.95:36960] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cwclass.php"] [unique_id "aZOCMMDX32iTEO4jt2_KNwAAANI"]
[Tue Feb 17 04:46:41.656460 2026] [:error] [pid 58659:tid 58665] [client 20.100.193.95:59024] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab8.php"] [unique_id "aZOCMcDX32iTEO4jt2_KOAAAAMQ"]
[Tue Feb 17 04:46:42.594756 2026] [:error] [pid 32790:tid 32805] [client 20.100.193.95:36968] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab8.php"] [unique_id "aZOCMns3HJP9ozPHsN6uKQAAAQs"]
[Tue Feb 17 04:46:44.273249 2026] [:error] [pid 58552:tid 58605] [client 20.100.193.95:41355] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab8.php"] [unique_id "aZOCNDBHVJP2Oz3yR5fHawAAAEo"]
[Tue Feb 17 04:46:45.923773 2026] [:error] [pid 58551:tid 58583] [client 20.100.193.95:41691] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab8.php"] [unique_id "aZOCNa1t8eWr-MgFsppMJAAAABc"]
[Tue Feb 17 04:46:47.019513 2026] [:error] [pid 58659:tid 58668] [client 20.100.193.95:5207] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/001.php"] [unique_id "aZOCN8DX32iTEO4jt2_KPwAAAMc"]
[Tue Feb 17 04:46:48.920676 2026] [:error] [pid 32790:tid 32795] [client 20.100.193.95:64040] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/001.php"] [unique_id "aZOCOHs3HJP9ozPHsN6uOQAAAQE"]
[Tue Feb 17 04:46:50.089941 2026] [:error] [pid 58552:tid 58597] [client 20.100.193.95:36980] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/001.php"] [unique_id "aZOCOjBHVJP2Oz3yR5fHcQAAAEI"]
[Tue Feb 17 04:46:51.218181 2026] [:error] [pid 32790:tid 32809] [client 20.100.193.95:54563] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/001.php"] [unique_id "aZOCO3s3HJP9ozPHsN6uPQAAAQ8"]
[Tue Feb 17 04:46:52.211766 2026] [:error] [pid 32790:tid 32800] [client 20.100.193.95:64680] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/borax.php"] [unique_id "aZOCPHs3HJP9ozPHsN6uPwAAAQY"]
[Tue Feb 17 04:46:55.379139 2026] [:error] [pid 58551:tid 58567] [client 20.100.193.95:29150] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/borax.php"] [unique_id "aZOCP61t8eWr-MgFsppMKwAAAAc"]
[Tue Feb 17 04:47:01.776381 2026] [:error] [pid 58558:tid 58623] [client 20.100.193.95:41736] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/borax.php"] [unique_id "aZOCRSmIxlfUL2nViZyVuwAAAIE"]
[Tue Feb 17 04:47:03.144967 2026] [:error] [pid 32790:tid 32805] [client 20.100.193.95:64646] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/borax.php"] [unique_id "aZOCR3s3HJP9ozPHsN6uXAAAAQs"]
[Tue Feb 17 04:47:04.040912 2026] [:error] [pid 58558:tid 58645] [client 20.100.193.95:41674] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Knoxville.php"] [unique_id "aZOCSCmIxlfUL2nViZyVwQAAAJc"]
[Tue Feb 17 04:47:05.351391 2026] [:error] [pid 32790:tid 32794] [client 20.100.193.95:32526] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Knoxville.php"] [unique_id "aZOCSXs3HJP9ozPHsN6uXwAAAQA"]
[Tue Feb 17 04:47:06.047354 2026] [:error] [pid 58551:tid 58565] [client 20.100.193.95:32537] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Knoxville.php"] [unique_id "aZOCSq1t8eWr-MgFsppMMAAAAAU"]
[Tue Feb 17 04:47:09.357719 2026] [:error] [pid 58558:tid 58623] [client 20.100.193.95:32543] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Knoxville.php"] [unique_id "aZOCTSmIxlfUL2nViZyVxwAAAIE"]
[Tue Feb 17 04:47:11.892135 2026] [:error] [pid 58558:tid 58629] [client 20.100.193.95:64678] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fizsb.php"] [unique_id "aZOCTymIxlfUL2nViZyVyAAAAIc"]
[Tue Feb 17 04:47:16.447013 2026] [:error] [pid 32790:tid 32814] [client 20.100.193.95:35266] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fizsb.php"] [unique_id "aZOCVHs3HJP9ozPHsN6udAAAARQ"]
[Tue Feb 17 04:47:22.399049 2026] [:error] [pid 32790:tid 32805] [client 20.100.193.95:42982] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fizsb.php"] [unique_id "aZOCWns3HJP9ozPHsN6ufgAAAQs"]
[Tue Feb 17 04:47:23.454790 2026] [:error] [pid 58558:tid 58643] [client 20.100.193.95:43764] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fizsb.php"] [unique_id "aZOCWymIxlfUL2nViZyV1wAAAJU"]
[Tue Feb 17 04:47:27.848390 2026] [:error] [pid 58659:tid 58670] [client 20.100.193.95:33702] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vee.php"] [unique_id "aZOCX8DX32iTEO4jt2_KjAAAAMk"]
[Tue Feb 17 04:47:29.300859 2026] [:error] [pid 32790:tid 32816] [client 20.100.193.95:5210] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vee.php"] [unique_id "aZOCYXs3HJP9ozPHsN6ujQAAARY"]
[Tue Feb 17 04:47:32.626202 2026] [:error] [pid 58659:tid 58671] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Tue Feb 17 04:47:32.888837 2026] [:error] [pid 58659:tid 58664] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/invisi.php
[Tue Feb 17 04:47:33.155996 2026] [:error] [pid 58659:tid 58677] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue Feb 17 04:47:33.419762 2026] [:error] [pid 58659:tid 58675] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/lcyhl.php
[Tue Feb 17 04:47:33.684701 2026] [:error] [pid 58659:tid 58663] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 17 04:47:33.947622 2026] [:error] [pid 58659:tid 58669] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Tue Feb 17 04:47:34.228156 2026] [:error] [pid 58659:tid 58661] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Tue Feb 17 04:47:34.492328 2026] [:error] [pid 58659:tid 58665] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/reversely.php
[Tue Feb 17 04:47:34.772283 2026] [:error] [pid 58659:tid 58678] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Tue Feb 17 04:47:35.048295 2026] [:error] [pid 58659:tid 58683] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/pomzr.php
[Tue Feb 17 04:47:35.330816 2026] [:error] [pid 58659:tid 58671] [client 20.100.193.95:36952] File does not exist: /usr/local/apache/htdocs/suspended-page/momo.php
[Tue Feb 17 04:47:35.607373 2026] [:error] [pid 58659:tid 58681] [client 20.100.193.95:36952] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geju.php"] [unique_id "aZOCZ8DX32iTEO4jt2_KqQAAANQ"]
[Tue Feb 17 04:47:37.786386 2026] [:error] [pid 32790:tid 32817] [client 20.100.193.95:45663] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geju.php"] [unique_id "aZOCaXs3HJP9ozPHsN6umgAAARc"]
[Tue Feb 17 04:47:38.763933 2026] [:error] [pid 58558:tid 58644] [client 20.100.193.95:31329] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geju.php"] [unique_id "aZOCaimIxlfUL2nViZyV8QAAAJY"]
[Tue Feb 17 04:47:40.022333 2026] [:error] [pid 58551:tid 58567] [client 20.100.193.95:33246] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/geju.php"] [unique_id "aZOCbK1t8eWr-MgFsppMYgAAAAc"]
[Tue Feb 17 04:47:40.809801 2026] [:error] [pid 58659:tid 58661] [client 20.100.193.95:29143] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baidu.php"] [unique_id "aZOCbMDX32iTEO4jt2_KrwAAAMA"]
[Tue Feb 17 04:47:42.339760 2026] [:error] [pid 58659:tid 58671] [client 20.100.193.95:35920] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baidu.php"] [unique_id "aZOCbsDX32iTEO4jt2_KtQAAAMo"]
[Tue Feb 17 04:47:46.666952 2026] [:error] [pid 58552:tid 58603] [client 20.100.193.95:41684] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baidu.php"] [unique_id "aZOCcjBHVJP2Oz3yR5fHuQAAAEg"]
[Tue Feb 17 04:47:47.928515 2026] [:error] [pid 58552:tid 58608] [client 20.100.193.95:41751] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baidu.php"] [unique_id "aZOCczBHVJP2Oz3yR5fHuwAAAE0"]
[Tue Feb 17 04:47:49.240796 2026] [:error] [pid 58558:tid 58624] [client 20.100.193.95:32556] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aZOCdSmIxlfUL2nViZyWAwAAAII"]
[Tue Feb 17 04:47:53.570418 2026] [:error] [pid 32790:tid 32808] [client 20.100.193.95:29757] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aZOCeXs3HJP9ozPHsN6uwAAAAQ4"]
[Tue Feb 17 04:47:54.277377 2026] [:error] [pid 58558:tid 58631] [client 20.100.193.95:35952] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aZOCeimIxlfUL2nViZyWCAAAAIk"]
[Tue Feb 17 04:47:55.895611 2026] [:error] [pid 58552:tid 58618] [client 20.100.193.95:56397] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aZOCezBHVJP2Oz3yR5fHxgAAAFc"]
[Tue Feb 17 04:47:57.787790 2026] [:error] [pid 58551:tid 58561] [client 20.100.193.95:35904] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/japan.php"] [unique_id "aZOCfa1t8eWr-MgFsppMbgAAAAE"]
[Tue Feb 17 04:47:59.665923 2026] [:error] [pid 58659:tid 58666] [client 20.100.193.95:33720] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/japan.php"] [unique_id "aZOCf8DX32iTEO4jt2_K2gAAAMU"]
[Tue Feb 17 04:48:03.088707 2026] [:error] [pid 58558:tid 58636] [client 20.100.193.95:53396] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/japan.php"] [unique_id "aZOCgymIxlfUL2nViZyWEAAAAI4"]
[Tue Feb 17 04:48:05.814677 2026] [:error] [pid 58551:tid 58560] [client 20.100.193.95:48646] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/japan.php"] [unique_id "aZOCha1t8eWr-MgFsppMewAAAAA"]
[Tue Feb 17 04:48:09.084900 2026] [:error] [pid 32790:tid 32807] [client 20.100.193.95:48710] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rbvds.php"] [unique_id "aZOCiXs3HJP9ozPHsN6vAAAAAQ0"]
[Tue Feb 17 04:48:11.287869 2026] [:error] [pid 58552:tid 58608] [client 20.100.193.95:5449] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rbvds.php"] [unique_id "aZOCizBHVJP2Oz3yR5fH3gAAAE0"]
[Tue Feb 17 04:48:14.844274 2026] [:error] [pid 58659:tid 58663] [client 20.100.193.95:5528] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rbvds.php"] [unique_id "aZOCjsDX32iTEO4jt2_K8AAAAMI"]
[Tue Feb 17 04:48:16.134725 2026] [:error] [pid 58552:tid 58596] [client 20.100.193.95:5514] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rbvds.php"] [unique_id "aZOCkDBHVJP2Oz3yR5fH5wAAAEE"]
[Tue Feb 17 04:48:17.597823 2026] [:error] [pid 32790:tid 32809] [client 20.100.193.95:33674] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/knightly.php"] [unique_id "aZOCkXs3HJP9ozPHsN6vFAAAAQ8"]
[Tue Feb 17 04:48:20.920428 2026] [:error] [pid 58558:tid 58633] [client 20.100.193.95:5521] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/knightly.php"] [unique_id "aZOClCmIxlfUL2nViZyWMwAAAIs"]
[Tue Feb 17 04:48:22.366697 2026] [:error] [pid 58551:tid 58572] [client 20.100.193.95:34736] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/knightly.php"] [unique_id "aZOClq1t8eWr-MgFsppM0QAAAAw"]
[Tue Feb 17 04:48:24.714247 2026] [:error] [pid 58659:tid 58677] [client 20.100.193.95:36949] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/knightly.php"] [unique_id "aZOCmMDX32iTEO4jt2_LBgAAANA"]
[Tue Feb 17 04:48:25.900044 2026] [:error] [pid 32790:tid 32795] [client 20.100.193.95:48032] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oke.php"] [unique_id "aZOCmXs3HJP9ozPHsN6vMgAAAQE"]
[Tue Feb 17 04:48:30.326676 2026] [:error] [pid 58552:tid 58614] [client 20.100.193.95:48037] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oke.php"] [unique_id "aZOCnjBHVJP2Oz3yR5fIEwAAAFM"]
[Tue Feb 17 04:48:32.587629 2026] [:error] [pid 58659:tid 58663] [client 20.100.193.95:29159] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/oke.php"] [unique_id "aZOCoMDX32iTEO4jt2_LEAAAAMI"]
[Tue Feb 17 04:48:39.096646 2026] [:error] [pid 58551:tid 58583] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/oke.php
[Tue Feb 17 04:48:39.359549 2026] [:error] [pid 58551:tid 58560] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/likmt.php
[Tue Feb 17 04:48:39.626286 2026] [:error] [pid 58551:tid 58567] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Tue Feb 17 04:48:39.890094 2026] [:error] [pid 58551:tid 58565] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/foundling.php
[Tue Feb 17 04:48:40.153082 2026] [:error] [pid 58551:tid 58566] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/yrmeu.php
[Tue Feb 17 04:48:40.442441 2026] [:error] [pid 58551:tid 58572] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/securepassword.php
[Tue Feb 17 04:48:40.704633 2026] [:error] [pid 58551:tid 58563] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/inclusively.php
[Tue Feb 17 04:48:41.027302 2026] [:error] [pid 58551:tid 58569] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/ws67.php
[Tue Feb 17 04:48:41.292125 2026] [:error] [pid 58551:tid 58582] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/hg.php
[Tue Feb 17 04:48:41.728241 2026] [:error] [pid 58551:tid 58571] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift2.php
[Tue Feb 17 04:48:42.172507 2026] [:error] [pid 58551:tid 58562] [client 20.100.193.95:5463] File does not exist: /usr/local/apache/htdocs/suspended-page/hidedz.php
[Tue Feb 17 04:48:42.432878 2026] [:error] [pid 58551:tid 58570] [client 20.100.193.95:5463] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ujuqsqhd.php"] [unique_id "aZOCqq1t8eWr-MgFsppNCAAAAAo"]
[Tue Feb 17 04:48:44.535794 2026] [:error] [pid 58659:tid 58682] [client 20.100.193.95:28030] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ujuqsqhd.php"] [unique_id "aZOCrMDX32iTEO4jt2_LKQAAANU"]
[Tue Feb 17 04:48:47.727533 2026] [:error] [pid 58552:tid 58599] [client 20.100.193.95:60866] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ujuqsqhd.php"] [unique_id "aZOCrzBHVJP2Oz3yR5fIJwAAAEQ"]
[Tue Feb 17 04:48:53.601313 2026] [:error] [pid 32790:tid 32794] [client 20.100.193.95:62276] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ujuqsqhd.php"] [unique_id "aZOCtXs3HJP9ozPHsN6vhAAAAQA"]
[Tue Feb 17 04:48:56.055731 2026] [:error] [pid 58659:tid 58670] [client 20.100.193.95:35220] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iopra.php"] [unique_id "aZOCuMDX32iTEO4jt2_LOwAAAMk"]
[Tue Feb 17 04:49:02.656890 2026] [:error] [pid 58659:tid 58663] [client 20.100.193.95:36429] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iopra.php"] [unique_id "aZOCvsDX32iTEO4jt2_LSwAAAMI"]
[Tue Feb 17 04:49:05.610196 2026] [:error] [pid 58552:tid 58599] [client 20.100.193.95:41709] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iopra.php"] [unique_id "aZOCwTBHVJP2Oz3yR5fIRgAAAEQ"]
[Tue Feb 17 04:49:08.082046 2026] [:error] [pid 32790:tid 32814] [client 20.100.193.95:42893] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iopra.php"] [unique_id "aZOCxHs3HJP9ozPHsN6vrQAAARQ"]
[Tue Feb 17 04:49:10.236950 2026] [:error] [pid 32790:tid 32810] [client 20.100.193.95:36463] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aZOCxns3HJP9ozPHsN6vtAAAARA"]
[Tue Feb 17 04:49:11.565675 2026] [:error] [pid 32790:tid 32806] [client 20.100.193.95:64668] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aZOCx3s3HJP9ozPHsN6vuQAAAQw"]
[Tue Feb 17 04:49:12.597676 2026] [:error] [pid 58551:tid 58583] [client 20.100.193.95:46876] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aZOCyK1t8eWr-MgFsppNOAAAABc"]
[Tue Feb 17 04:49:15.336716 2026] [:error] [pid 32790:tid 32806] [client 20.100.193.95:41740] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aZOCy3s3HJP9ozPHsN6vxgAAAQw"]
[Tue Feb 17 04:49:16.158966 2026] [:error] [pid 58552:tid 58597] [client 20.100.193.95:57789] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lrzkh.php"] [unique_id "aZOCzDBHVJP2Oz3yR5fIYAAAAEI"]
[Tue Feb 17 04:49:17.819509 2026] [:error] [pid 32790:tid 32810] [client 20.100.193.95:48080] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lrzkh.php"] [unique_id "aZOCzXs3HJP9ozPHsN6v0AAAARA"]
[Tue Feb 17 04:49:18.484063 2026] [:error] [pid 58551:tid 58574] [client 20.100.193.95:58366] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lrzkh.php"] [unique_id "aZOCzq1t8eWr-MgFsppNQQAAAA4"]
[Tue Feb 17 04:49:20.359754 2026] [:error] [pid 32790:tid 32805] [client 20.100.193.95:36436] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lrzkh.php"] [unique_id "aZOC0Hs3HJP9ozPHsN6v2gAAAQs"]
[Tue Feb 17 04:49:22.830427 2026] [:error] [pid 58659:tid 58682] [client 20.100.193.95:29149] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mtmem.php"] [unique_id "aZOC0sDX32iTEO4jt2_LXgAAANU"]
[Tue Feb 17 04:49:28.159359 2026] [:error] [pid 58558:tid 58634] [client 20.100.193.95:64645] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mtmem.php"] [unique_id "aZOC2CmIxlfUL2nViZyWggAAAIw"]
[Tue Feb 17 04:49:29.600444 2026] [:error] [pid 58558:tid 58645] [client 20.100.193.95:40437] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mtmem.php"] [unique_id "aZOC2SmIxlfUL2nViZyWhgAAAJc"]
[Tue Feb 17 04:49:32.129030 2026] [:error] [pid 32790:tid 32794] [client 20.100.193.95:36454] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mtmem.php"] [unique_id "aZOC3Hs3HJP9ozPHsN6v7gAAAQA"]
[Tue Feb 17 04:49:34.668024 2026] [:error] [pid 58552:tid 58604] [client 20.100.193.95:34808] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/106.php"] [unique_id "aZOC3jBHVJP2Oz3yR5fIlQAAAEk"]
[Tue Feb 17 04:49:36.593493 2026] [:error] [pid 58552:tid 58598] [client 20.100.193.95:34230] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/106.php"] [unique_id "aZOC4DBHVJP2Oz3yR5fInAAAAEM"]
[Tue Feb 17 04:49:37.441557 2026] [:error] [pid 32790:tid 32804] [client 20.100.193.95:46924] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/106.php"] [unique_id "aZOC4Xs3HJP9ozPHsN6v9gAAAQo"]
[Tue Feb 17 04:49:38.359751 2026] [:error] [pid 58558:tid 58622] [client 20.100.193.95:40414] [client 20.100.193.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/106.php"] [unique_id "aZOC4imIxlfUL2nViZyWlgAAAIA"]
[Tue Feb 17 04:49:43.432817 2026] [:error] [pid 58558:tid 58630] [client 20.100.193.95:60970] File does not exist: /usr/local/apache/htdocs/suspended-page/bureaucrats.php
[Tue Feb 17 04:49:43.726963 2026] [:error] [pid 58558:tid 58632] [client 20.100.193.95:60970] File does not exist: /usr/local/apache/htdocs/suspended-page/v9.php
[Tue Feb 17 04:49:44.009371 2026] [:error] [pid 58558:tid 58626] [client 20.100.193.95:60970] File does not exist: /usr/local/apache/htdocs/suspended-page/auujk.php
[Tue Feb 17 05:51:02.492832 2026] [:error] [pid 58558:tid 58645] [client 54.37.86.225:57386] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZORRimIxlfUL2nViZysiwAAAJc"]
[Tue Feb 17 05:51:04.634710 2026] [:error] [pid 58659:tid 58679] [client 54.37.86.225:36310] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZORSMDX32iTEO4jt2_nBwAAANI"]
[Tue Feb 17 05:51:06.839888 2026] [:error] [pid 32790:tid 32810] [client 54.37.86.225:36314] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZORSns3HJP9ozPHsN7QAgAAARA"]
[Tue Feb 17 05:51:09.181462 2026] [:error] [pid 58551:tid 58567] [client 54.37.86.225:36322] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZORTa1t8eWr-MgFsppjLQAAAAc"]
[Tue Feb 17 05:51:11.150589 2026] [:error] [pid 58552:tid 58603] [client 54.37.86.225:36334] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZORTzBHVJP2Oz3yR5fgMQAAAEg"]
[Tue Feb 17 05:51:13.913460 2026] [:error] [pid 58551:tid 58578] [client 54.37.86.225:60458] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZORUa1t8eWr-MgFsppjOQAAABI"]
[Tue Feb 17 05:51:16.474039 2026] [:error] [pid 58659:tid 58671] [client 54.37.86.225:60460] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZORVMDX32iTEO4jt2_nQQAAAMo"]
[Tue Feb 17 05:51:18.695222 2026] [:error] [pid 58659:tid 58672] [client 54.37.86.225:60476] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZORVsDX32iTEO4jt2_nSAAAAMs"]
[Tue Feb 17 05:51:20.779109 2026] [:error] [pid 32790:tid 32796] [client 54.37.86.225:60478] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZORWHs3HJP9ozPHsN7QMQAAAQI"]
[Tue Feb 17 05:51:23.013205 2026] [:error] [pid 58552:tid 58595] [client 54.37.86.225:60430] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZORWzBHVJP2Oz3yR5fgUgAAAEA"]
[Tue Feb 17 05:51:25.060924 2026] [:error] [pid 58552:tid 58619] [client 54.37.86.225:60440] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZORXTBHVJP2Oz3yR5fgWQAAAFg"]
[Tue Feb 17 05:51:27.285889 2026] [:error] [pid 58558:tid 58636] [client 54.37.86.225:60456] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZORXymIxlfUL2nViZysrAAAAI4"]
[Tue Feb 17 05:51:29.355074 2026] [:error] [pid 58552:tid 58598] [client 54.37.86.225:60468] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZORYTBHVJP2Oz3yR5fgZwAAAEM"]
[Tue Feb 17 05:51:31.363941 2026] [:error] [pid 58552:tid 58597] [client 54.37.86.225:60474] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZORYzBHVJP2Oz3yR5fgbgAAAEI"]
[Tue Feb 17 05:51:33.326714 2026] [:error] [pid 32790:tid 32801] [client 54.37.86.225:44486] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZORZXs3HJP9ozPHsN7QXQAAAQc"]
[Tue Feb 17 05:51:35.285574 2026] [:error] [pid 58551:tid 58580] [client 54.37.86.225:44500] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZORZ61t8eWr-MgFsppjYwAAABQ"]
[Tue Feb 17 05:51:37.294993 2026] [:error] [pid 58558:tid 58634] [client 54.37.86.225:44510] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZORaSmIxlfUL2nViZysuAAAAIw"]
[Tue Feb 17 05:51:39.206986 2026] [:error] [pid 58558:tid 58632] [client 54.37.86.225:44520] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZORaymIxlfUL2nViZysvAAAAIo"]
[Tue Feb 17 05:51:41.102314 2026] [:error] [pid 58551:tid 58576] [client 54.37.86.225:44536] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZORba1t8eWr-MgFsppjbAAAABA"]
[Tue Feb 17 05:51:43.016215 2026] [:error] [pid 32790:tid 32803] [client 54.37.86.225:52252] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZORb3s3HJP9ozPHsN7QcQAAAQk"]
[Tue Feb 17 05:51:44.854125 2026] [:error] [pid 58552:tid 58618] [client 54.37.86.225:52264] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZORcDBHVJP2Oz3yR5fglQAAAFc"]
[Tue Feb 17 05:51:46.850901 2026] [:error] [pid 32790:tid 32806] [client 54.37.86.225:52272] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZORcns3HJP9ozPHsN7QfgAAAQw"]
[Tue Feb 17 05:51:48.714069 2026] [:error] [pid 58659:tid 58680] [client 54.37.86.225:52288] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZORdMDX32iTEO4jt2_nrgAAANM"]
[Tue Feb 17 05:51:50.568748 2026] [:error] [pid 58551:tid 58572] [client 54.37.86.225:52302] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZORdq1t8eWr-MgFsppjeAAAAAw"]
[Tue Feb 17 05:51:52.626852 2026] [:error] [pid 58558:tid 58624] [client 54.37.86.225:49024] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZOReCmIxlfUL2nViZysygAAAII"]
[Tue Feb 17 05:51:54.573467 2026] [:error] [pid 58552:tid 58616] [client 54.37.86.225:49030] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZORejBHVJP2Oz3yR5fgpAAAAFU"]
[Tue Feb 17 05:51:56.527776 2026] [:error] [pid 32790:tid 32802] [client 54.37.86.225:49042] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZORfHs3HJP9ozPHsN7QmAAAAQg"]
[Tue Feb 17 05:51:58.668668 2026] [:error] [pid 32790:tid 32800] [client 54.37.86.225:49052] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZORfns3HJP9ozPHsN7QngAAAQY"]
[Tue Feb 17 05:52:18.612803 2026] [:error] [pid 58558:tid 58630] [client 54.37.86.225:49058] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZORkimIxlfUL2nViZys9wAAAIg"]
[Tue Feb 17 05:52:20.481895 2026] [:error] [pid 58551:tid 58570] [client 54.37.86.225:47306] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZORlK1t8eWr-MgFsppjoQAAAAo"]
[Tue Feb 17 05:52:22.486865 2026] [:error] [pid 58551:tid 58583] [client 54.37.86.225:52308] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZORlq1t8eWr-MgFsppjpgAAABc"]
[Tue Feb 17 05:52:24.317799 2026] [:error] [pid 58659:tid 58661] [client 54.37.86.225:52318] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZORmMDX32iTEO4jt2_oDgAAAMA"]
[Tue Feb 17 05:52:26.427237 2026] [:error] [pid 58659:tid 58673] [client 54.37.86.225:52324] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZORmsDX32iTEO4jt2_oFAAAAMw"]
[Tue Feb 17 05:52:28.230019 2026] [:error] [pid 58558:tid 58638] [client 54.37.86.225:52338] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZORnCmIxlfUL2nViZytCAAAAJA"]
[Tue Feb 17 05:52:30.214683 2026] [:error] [pid 58552:tid 58612] [client 54.37.86.225:52344] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZORnjBHVJP2Oz3yR5fg0QAAAFE"]
[Tue Feb 17 05:52:32.045495 2026] [:error] [pid 58558:tid 58644] [client 54.37.86.225:52360] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZORoCmIxlfUL2nViZytCgAAAJY"]
[Tue Feb 17 05:52:33.871850 2026] [:error] [pid 58659:tid 58668] [client 54.37.86.225:58256] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZORocDX32iTEO4jt2_oLQAAAMc"]
[Tue Feb 17 05:52:37.485472 2026] [:error] [pid 32790:tid 32802] [client 54.37.86.225:58270] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZORpXs3HJP9ozPHsN7Q-QAAAQg"]
[Tue Feb 17 05:52:41.303230 2026] [:error] [pid 58558:tid 58625] [client 54.37.86.225:58284] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZORqSmIxlfUL2nViZytFQAAAIM"]
[Tue Feb 17 07:52:36.574095 2026] [:error] [pid 58558:tid 58629] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Feb 17 07:52:36.840399 2026] [:error] [pid 58558:tid 58624] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/ge.php
[Tue Feb 17 07:52:37.117030 2026] [:error] [pid 58558:tid 58643] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Tue Feb 17 07:52:37.380148 2026] [:error] [pid 58558:tid 58632] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/ssxsl.php
[Tue Feb 17 07:52:37.628071 2026] [:error] [pid 58558:tid 58636] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/str.php
[Tue Feb 17 07:52:37.870965 2026] [:error] [pid 58558:tid 58641] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Tue Feb 17 07:52:38.113360 2026] [:error] [pid 58558:tid 58640] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/zz.php
[Tue Feb 17 07:52:38.611096 2026] [:error] [pid 58558:tid 58642] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Tue Feb 17 07:52:38.853389 2026] [:error] [pid 58558:tid 58635] [client 158.158.33.103:19143] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Tue Feb 17 07:52:39.093029 2026] [:error] [pid 58558:tid 58637] [client 158.158.33.103:19143] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aZOtxymIxlfUL2nViZzk0wAAAI8"]
[Tue Feb 17 07:52:41.722019 2026] [:error] [pid 58551:tid 58570] [client 158.158.33.103:18370] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aZOtya1t8eWr-MgFspqXDwAAAAo"]
[Tue Feb 17 07:52:56.039342 2026] [:error] [pid 32790:tid 32812] [client 158.158.33.103:10908] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aZOt2Hs3HJP9ozPHsN4cqQAAARI"]
[Tue Feb 17 07:53:00.311118 2026] [:error] [pid 58552:tid 58595] [client 158.158.33.103:22617] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aZOt3DBHVJP2Oz3yR5cUBwAAAEA"]
[Tue Feb 17 07:53:05.855816 2026] [:error] [pid 58551:tid 58579] [client 158.158.33.103:13025] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nope.php"] [unique_id "aZOt4a1t8eWr-MgFspqXOgAAABM"]
[Tue Feb 17 07:53:24.640781 2026] [:error] [pid 58659:tid 58674] [client 158.158.33.103:24114] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kwm4.php"] [unique_id "aZOt9MDX32iTEO4jt28mhAAAAM0"]
[Tue Feb 17 07:53:42.555999 2026] [:error] [pid 58551:tid 58575] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Feb 17 07:53:42.798378 2026] [:error] [pid 58551:tid 58561] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Tue Feb 17 07:53:43.042987 2026] [:error] [pid 58551:tid 58564] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/F0x.php
[Tue Feb 17 07:53:43.286631 2026] [:error] [pid 58551:tid 58579] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Feb 17 07:53:43.591985 2026] [:error] [pid 58551:tid 58566] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/fan.php
[Tue Feb 17 07:53:43.834128 2026] [:error] [pid 58551:tid 58583] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/ztv.php
[Tue Feb 17 07:53:44.076302 2026] [:error] [pid 58551:tid 58584] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/bras.php
[Tue Feb 17 07:53:44.324953 2026] [:error] [pid 58551:tid 58563] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar.php
[Tue Feb 17 07:53:44.569013 2026] [:error] [pid 58551:tid 58580] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/wpup.php
[Tue Feb 17 07:53:44.814619 2026] [:error] [pid 58551:tid 58562] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/x50.php
[Tue Feb 17 07:53:45.056994 2026] [:error] [pid 58551:tid 58574] [client 158.158.33.103:27704] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Tue Feb 17 07:53:45.298946 2026] [:error] [pid 58551:tid 58577] [client 158.158.33.103:27704] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aZOuCa1t8eWr-MgFspqXrwAAABE"]
[Tue Feb 17 07:53:47.927841 2026] [:error] [pid 58552:tid 58618] [client 158.158.33.103:27687] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aZOuCzBHVJP2Oz3yR5cUYAAAAFc"]
[Tue Feb 17 07:53:51.519174 2026] [:error] [pid 58659:tid 58675] [client 158.158.33.103:31740] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aZOuD8DX32iTEO4jt28mtgAAAM4"]
[Tue Feb 17 07:53:53.450339 2026] [:error] [pid 58551:tid 58577] [client 158.158.33.103:13379] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xz89.php"] [unique_id "aZOuEa1t8eWr-MgFspqXuAAAABE"]
[Tue Feb 17 07:53:59.969913 2026] [:error] [pid 58659:tid 58673] [client 158.158.33.103:26854] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aZOuF8DX32iTEO4jt28mxwAAAMw"]
[Tue Feb 17 07:54:01.223826 2026] [:error] [pid 58558:tid 58630] [client 158.158.33.103:27711] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aZOuGSmIxlfUL2nViZzlRQAAAIg"]
[Tue Feb 17 07:54:02.163865 2026] [:error] [pid 58659:tid 58666] [client 158.158.33.103:16423] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aZOuGsDX32iTEO4jt28m3QAAAMU"]
[Tue Feb 17 07:54:02.832829 2026] [:error] [pid 32790:tid 32797] [client 158.158.33.103:19460] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php7"] [unique_id "aZOuGns3HJP9ozPHsN4dIgAAAQM"]
[Tue Feb 17 07:54:16.853464 2026] [:error] [pid 32790:tid 32818] [client 158.158.33.103:19488] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/updates.php"] [unique_id "aZOuKHs3HJP9ozPHsN4dUgAAARg"]
[Tue Feb 17 07:54:17.802264 2026] [:error] [pid 58558:tid 58629] [client 158.158.33.103:8913] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/updates.php"] [unique_id "aZOuKSmIxlfUL2nViZzlugAAAIc"]
[Tue Feb 17 07:54:22.469709 2026] [:error] [pid 58551:tid 58570] [client 158.158.33.103:4678] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxnxvgfw.php"] [unique_id "aZOuLq1t8eWr-MgFspqYAQAAAAo"]
[Tue Feb 17 07:54:23.924651 2026] [:error] [pid 58659:tid 58667] [client 158.158.33.103:28578] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxnxvgfw.php"] [unique_id "aZOuL8DX32iTEO4jt28nJwAAAMY"]
[Tue Feb 17 07:54:25.893467 2026] [:error] [pid 58558:tid 58626] [client 158.158.33.103:26855] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxnxvgfw.php"] [unique_id "aZOuMSmIxlfUL2nViZzlyAAAAIQ"]
[Tue Feb 17 07:54:27.557031 2026] [:error] [pid 58552:tid 58601] [client 158.158.33.103:16402] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxnxvgfw.php"] [unique_id "aZOuMzBHVJP2Oz3yR5cUzQAAAEY"]
[Tue Feb 17 07:54:31.071191 2026] [:error] [pid 32790:tid 32798] [client 158.158.33.103:19504] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mapi.php"] [unique_id "aZOuN3s3HJP9ozPHsN4dgAAAAQQ"]
[Tue Feb 17 07:54:32.497862 2026] [:error] [pid 58659:tid 58675] [client 158.158.33.103:27671] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mapi.php"] [unique_id "aZOuOMDX32iTEO4jt28nNAAAAM4"]
[Tue Feb 17 07:54:34.450918 2026] [:error] [pid 58551:tid 58562] [client 158.158.33.103:16389] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mapi.php"] [unique_id "aZOuOq1t8eWr-MgFspqYEwAAAAI"]
[Tue Feb 17 07:54:35.553624 2026] [:error] [pid 58551:tid 58565] [client 158.158.33.103:12619] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mapi.php"] [unique_id "aZOuO61t8eWr-MgFspqYFgAAAAU"]
[Tue Feb 17 07:54:36.509610 2026] [:error] [pid 58558:tid 58633] [client 158.158.33.103:19515] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f2r4.php"] [unique_id "aZOuPCmIxlfUL2nViZzl5QAAAIs"]
[Tue Feb 17 07:54:47.137851 2026] [:error] [pid 58552:tid 58615] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/f2r4.php
[Tue Feb 17 07:54:47.397810 2026] [:error] [pid 58552:tid 58616] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Feb 17 07:54:47.890003 2026] [:error] [pid 58552:tid 58601] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/xse25.php
[Tue Feb 17 07:54:48.133283 2026] [:error] [pid 58552:tid 58617] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/sf9.php
[Tue Feb 17 07:54:48.376616 2026] [:error] [pid 58552:tid 58605] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Tue Feb 17 07:54:48.863911 2026] [:error] [pid 58552:tid 58604] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Feb 17 07:54:49.106617 2026] [:error] [pid 58552:tid 58606] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/dump.php
[Tue Feb 17 07:54:49.471209 2026] [:error] [pid 58552:tid 58595] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Feb 17 07:54:49.731126 2026] [:error] [pid 58552:tid 58615] [client 158.158.33.103:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 07:54:49.971753 2026] [:error] [pid 58552:tid 58616] [client 158.158.33.103:26829] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZOuSTBHVJP2Oz3yR5cU-QAAAFU"]
[Tue Feb 17 07:54:52.359680 2026] [:error] [pid 32790:tid 32813] [client 158.158.33.103:4722] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZOuTHs3HJP9ozPHsN4dswAAARM"]
[Tue Feb 17 07:55:01.546428 2026] [:error] [pid 32790:tid 32807] [client 158.158.33.103:24621] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZOuVXs3HJP9ozPHsN4d1wAAAQ0"]
[Tue Feb 17 07:55:04.089113 2026] [:error] [pid 32790:tid 32799] [client 158.158.33.103:28560] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZOuWHs3HJP9ozPHsN4d5wAAAQU"]
[Tue Feb 17 07:55:13.308332 2026] [:error] [pid 32790:tid 32817] [client 158.158.33.103:12612] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZOuYXs3HJP9ozPHsN4d9wAAARc"]
[Tue Feb 17 07:55:14.441503 2026] [:error] [pid 58558:tid 58626] [client 158.158.33.103:31724] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZOuYimIxlfUL2nViZzmMAAAAIQ"]
[Tue Feb 17 07:55:15.255994 2026] [:error] [pid 58659:tid 58676] [client 158.158.33.103:31706] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZOuY8DX32iTEO4jt28nxgAAAM8"]
[Tue Feb 17 07:55:15.929116 2026] [:error] [pid 32790:tid 32815] [client 158.158.33.103:19482] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZOuY3s3HJP9ozPHsN4eAAAAARU"]
[Tue Feb 17 07:55:16.676350 2026] [:error] [pid 58558:tid 58646] [client 158.158.33.103:24576] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aZOuZCmIxlfUL2nViZzmNAAAAJg"]
[Tue Feb 17 07:55:17.721771 2026] [:error] [pid 58558:tid 58634] [client 158.158.33.103:51981] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aZOuZSmIxlfUL2nViZzmNwAAAIw"]
[Tue Feb 17 07:55:20.433654 2026] [:error] [pid 58558:tid 58642] [client 158.158.33.103:31686] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aZOuaCmIxlfUL2nViZzmPgAAAJQ"]
[Tue Feb 17 07:55:50.947603 2026] [:error] [pid 58659:tid 58666] [client 158.158.33.103:31741] File does not exist: /usr/local/apache/htdocs/suspended-page/np.php
[Tue Feb 17 07:55:51.196812 2026] [:error] [pid 58659:tid 58665] [client 158.158.33.103:31741] File does not exist: /usr/local/apache/htdocs/suspended-page/tx1.php
[Tue Feb 17 07:55:51.440606 2026] [:error] [pid 58659:tid 58677] [client 158.158.33.103:31741] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Tue Feb 17 07:59:36.386273 2026] [:error] [pid 58659:tid 58682] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Tue Feb 17 07:59:36.639334 2026] [:error] [pid 58659:tid 58669] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Feb 17 07:59:36.894039 2026] [:error] [pid 58659:tid 58663] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Tue Feb 17 07:59:37.216726 2026] [:error] [pid 58659:tid 58666] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Feb 17 07:59:37.473140 2026] [:error] [pid 58659:tid 58680] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/asax.php
[Tue Feb 17 07:59:37.908453 2026] [:error] [pid 58659:tid 58685] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Feb 17 07:59:38.171417 2026] [:error] [pid 58659:tid 58672] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k3w6g9s4h2.php
[Tue Feb 17 07:59:38.424800 2026] [:error] [pid 58659:tid 58681] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 17 07:59:38.680375 2026] [:error] [pid 58659:tid 58673] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 07:59:40.197763 2026] [:error] [pid 58659:tid 58673] [client 20.238.121.35:30412] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Tue Feb 17 07:59:40.448976 2026] [:error] [pid 58659:tid 58677] [client 20.238.121.35:30412] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZOvbMDX32iTEO4jt28pwgAAANA"]
[Tue Feb 17 07:59:44.233018 2026] [:error] [pid 32790:tid 32798] [client 20.238.121.35:4804] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZOvcHs3HJP9ozPHsN4ghgAAAQQ"]
[Tue Feb 17 07:59:47.522892 2026] [:error] [pid 32790:tid 32804] [client 20.238.121.35:62908] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZOvc3s3HJP9ozPHsN4glAAAAQo"]
[Tue Feb 17 07:59:53.733224 2026] [:error] [pid 58659:tid 58681] [client 20.238.121.35:62814] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZOvecDX32iTEO4jt28p2AAAANQ"]
[Tue Feb 17 07:59:56.391196 2026] [:error] [pid 58552:tid 58618] [client 20.238.121.35:11008] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZOvfDBHVJP2Oz3yR5cW0gAAAFc"]
[Tue Feb 17 08:00:02.506483 2026] [:error] [pid 58659:tid 58683] [client 20.238.121.35:32298] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZOvgsDX32iTEO4jt28p9wAAANY"]
[Tue Feb 17 08:00:04.536001 2026] [:error] [pid 58552:tid 58599] [client 20.238.121.35:14120] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZOvhDBHVJP2Oz3yR5cW6QAAAEQ"]
[Tue Feb 17 08:00:08.758319 2026] [:error] [pid 58552:tid 58607] [client 20.238.121.35:31833] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZOviDBHVJP2Oz3yR5cW8AAAAEw"]
[Tue Feb 17 08:00:09.607772 2026] [:error] [pid 58551:tid 58561] [client 20.238.121.35:9816] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZOvia1t8eWr-MgFspqaHwAAAAE"]
[Tue Feb 17 08:00:13.015118 2026] [:error] [pid 32790:tid 32808] [client 20.238.121.35:31846] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZOvjXs3HJP9ozPHsN4g9AAAAQ4"]
[Tue Feb 17 08:00:16.520423 2026] [:error] [pid 58551:tid 58562] [client 20.238.121.35:11027] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZOvkK1t8eWr-MgFspqaLwAAAAI"]
[Tue Feb 17 08:00:29.657445 2026] [:error] [pid 58552:tid 58611] [client 20.238.121.35:30932] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOvnTBHVJP2Oz3yR5cXAgAAAFA"]
[Tue Feb 17 08:00:31.005145 2026] [:error] [pid 32790:tid 32810] [client 20.238.121.35:25782] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOvn3s3HJP9ozPHsN4hnwAAARA"]
[Tue Feb 17 08:00:32.783105 2026] [:error] [pid 58659:tid 58661] [client 20.238.121.35:18362] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOvoMDX32iTEO4jt28qKAAAAMA"]
[Tue Feb 17 08:00:35.415539 2026] [:error] [pid 58551:tid 58574] [client 20.238.121.35:60397] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOvo61t8eWr-MgFspqabAAAAA4"]
[Tue Feb 17 08:00:36.588689 2026] [:error] [pid 58552:tid 58607] [client 20.238.121.35:43615] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZOvpDBHVJP2Oz3yR5cXCQAAAEw"]
[Tue Feb 17 08:00:38.382952 2026] [:error] [pid 58558:tid 58629] [client 20.238.121.35:25230] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZOvpimIxlfUL2nViZzoOAAAAIc"]
[Tue Feb 17 08:00:41.436751 2026] [:error] [pid 58552:tid 58608] [client 20.238.121.35:11453] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Tue Feb 17 08:00:41.713526 2026] [:error] [pid 58552:tid 58605] [client 20.238.121.35:11453] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Feb 17 08:00:42.040740 2026] [:error] [pid 58552:tid 58616] [client 20.238.121.35:11453] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Feb 17 08:00:42.307816 2026] [:error] [pid 58552:tid 58615] [client 20.238.121.35:11453] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Feb 17 08:00:42.568623 2026] [:error] [pid 58552:tid 58607] [client 20.238.121.35:11453] [client 20.238.121.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZOvqjBHVJP2Oz3yR5cXGAAAAEw"]
[Tue Feb 17 08:00:45.597877 2026] [:error] [pid 58558:tid 58646] [client 20.238.121.35:8195] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Feb 17 09:28:16.487344 2026] [:error] [pid 58551:tid 58565] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Tue Feb 17 09:28:16.736870 2026] [:error] [pid 58551:tid 58564] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Feb 17 09:28:16.980322 2026] [:error] [pid 58551:tid 58561] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Tue Feb 17 09:28:17.235802 2026] [:error] [pid 58551:tid 58578] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Feb 17 09:28:17.474832 2026] [:error] [pid 58551:tid 58584] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/asax.php
[Tue Feb 17 09:28:17.727029 2026] [:error] [pid 58551:tid 58562] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Feb 17 09:28:17.965941 2026] [:error] [pid 58551:tid 58577] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k3w6g9s4h2.php
[Tue Feb 17 09:28:18.212883 2026] [:error] [pid 58551:tid 58573] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 17 09:28:18.608728 2026] [:error] [pid 58551:tid 58569] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 09:28:18.848541 2026] [:error] [pid 58551:tid 58574] [client 20.111.44.121:57539] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Tue Feb 17 09:28:19.093656 2026] [:error] [pid 58551:tid 58563] [client 20.111.44.121:57539] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPEM61t8eWr-MgFsprB6wAAAAM"]
[Tue Feb 17 09:28:21.033635 2026] [:error] [pid 58551:tid 58564] [client 20.111.44.121:2096] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPENa1t8eWr-MgFsprB7wAAAAQ"]
[Tue Feb 17 09:28:29.810681 2026] [:error] [pid 58659:tid 58680] [client 20.111.44.121:38862] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPEPcDX32iTEO4jt29ZkQAAANM"]
[Tue Feb 17 09:28:32.681988 2026] [:error] [pid 58552:tid 58595] [client 20.111.44.121:38852] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPEQDBHVJP2Oz3yR5dADgAAAEA"]
[Tue Feb 17 09:28:39.921464 2026] [:error] [pid 58659:tid 58665] [client 20.111.44.121:40259] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPER8DX32iTEO4jt29ZpQAAAMQ"]
[Tue Feb 17 09:28:46.067150 2026] [:error] [pid 32790:tid 32816] [client 20.111.44.121:41328] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPETns3HJP9ozPHsN5a1wAAARY"]
[Tue Feb 17 09:28:51.181749 2026] [:error] [pid 58552:tid 58606] [client 20.111.44.121:54508] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPEUzBHVJP2Oz3yR5dAJAAAAEs"]
[Tue Feb 17 09:29:00.883626 2026] [:error] [pid 32790:tid 32794] [client 20.111.44.121:56509] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPEXHs3HJP9ozPHsN5a_wAAAQA"]
[Tue Feb 17 09:29:09.351223 2026] [:error] [pid 58551:tid 58571] [client 20.111.44.121:63871] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPEZa1t8eWr-MgFsprCNgAAAAs"]
[Tue Feb 17 09:29:12.296292 2026] [:error] [pid 58558:tid 58633] [client 20.111.44.121:63814] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPEaCmIxlfUL2nViZwS9AAAAIs"]
[Tue Feb 17 09:29:16.827537 2026] [:error] [pid 58558:tid 58627] [client 20.111.44.121:62987] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPEbCmIxlfUL2nViZwS_wAAAIU"]
[Tue Feb 17 09:29:19.340000 2026] [:error] [pid 32790:tid 32807] [client 20.111.44.121:56451] File does not exist: /usr/local/apache/htdocs/suspended-page/ak.php
[Tue Feb 17 09:29:19.937215 2026] [:error] [pid 32790:tid 32815] [client 20.111.44.121:56451] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Tue Feb 17 09:29:20.208454 2026] [:error] [pid 32790:tid 32798] [client 20.111.44.121:56451] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Feb 17 09:29:20.482868 2026] [:error] [pid 32790:tid 32795] [client 20.111.44.121:56451] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Feb 17 09:29:20.751920 2026] [:error] [pid 32790:tid 32796] [client 20.111.44.121:56451] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Feb 17 09:29:22.009381 2026] [:error] [pid 32790:tid 32796] [client 20.111.44.121:56451] [client 20.111.44.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZPEcns3HJP9ozPHsN5bQQAAAQI"]
[Tue Feb 17 09:29:24.734060 2026] [:error] [pid 58551:tid 58576] [client 20.111.44.121:63004] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Feb 17 09:30:40.816714 2026] [:error] [pid 32790:tid 32800] [client 182.44.12.37:48175] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZPEwHs3HJP9ozPHsN5b6gAAAQY"]
[Tue Feb 17 09:50:47.217764 2026] [:error] [pid 58558:tid 58637] [client 43.153.54.14:47772] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZPJdymIxlfUL2nViZwbjQAAAI8"]
[Tue Feb 17 10:02:21.760016 2026] [:error] [pid 58659:tid 58682] [client 43.159.152.4:37378] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZPMLcDX32iTEO4jt29qMgAAANU"]
[Tue Feb 17 10:04:56.039925 2026] [:error] [pid 58659:tid 58681] [client 20.238.121.35:46998] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aZPMyMDX32iTEO4jt29rjgAAANQ"]
[Tue Feb 17 10:04:57.397014 2026] [:error] [pid 32790:tid 32813] [client 20.238.121.35:44604] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aZPMyXs3HJP9ozPHsN5wuAAAARM"]
[Tue Feb 17 10:05:09.810046 2026] [:error] [pid 58551:tid 58567] [client 20.238.121.35:49663] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aZPM1a1t8eWr-MgFsprRvQAAAAc"]
[Tue Feb 17 10:05:12.786825 2026] [:error] [pid 32790:tid 32811] [client 20.238.121.35:51055] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "aZPM2Hs3HJP9ozPHsN5w4AAAARE"]
[Tue Feb 17 10:05:16.045955 2026] [:error] [pid 58659:tid 58680] [client 20.238.121.35:63751] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "aZPM3MDX32iTEO4jt29rqwAAANM"]
[Tue Feb 17 10:05:19.846318 2026] [:error] [pid 32790:tid 32815] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Tue Feb 17 10:05:20.098006 2026] [:error] [pid 32790:tid 32796] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Feb 17 10:05:20.179784 2026] [:error] [pid 58659:tid 58680] [client 20.238.121.35:61293] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "aZPM4MDX32iTEO4jt29rtwAAANM"]
[Tue Feb 17 10:05:20.337460 2026] [:error] [pid 32790:tid 32803] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Tue Feb 17 10:05:20.577301 2026] [:error] [pid 32790:tid 32805] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Feb 17 10:05:20.815808 2026] [:error] [pid 32790:tid 32799] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/asax.php
[Tue Feb 17 10:05:21.156318 2026] [:error] [pid 32790:tid 32807] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Feb 17 10:05:21.404838 2026] [:error] [pid 32790:tid 32817] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k3w6g9s4h2.php
[Tue Feb 17 10:05:22.965385 2026] [:error] [pid 32790:tid 32817] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 17 10:05:23.386652 2026] [:error] [pid 32790:tid 32795] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 10:05:23.626344 2026] [:error] [pid 32790:tid 32805] [client 51.107.69.151:26074] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Tue Feb 17 10:05:23.877635 2026] [:error] [pid 32790:tid 32804] [client 51.107.69.151:26074] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPM43s3HJP9ozPHsN5xBgAAAQo"]
[Tue Feb 17 10:05:26.243999 2026] [:error] [pid 58551:tid 58573] [client 51.107.69.151:24618] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPM5q1t8eWr-MgFsprR2AAAAA0"]
[Tue Feb 17 10:05:27.906619 2026] [:error] [pid 58551:tid 58568] [client 20.238.121.35:2853] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "aZPM561t8eWr-MgFsprR3QAAAAg"]
[Tue Feb 17 10:05:29.657191 2026] [:error] [pid 58551:tid 58565] [client 20.238.121.35:53521] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lp6.php"] [unique_id "aZPM6a1t8eWr-MgFsprR4wAAAAU"]
[Tue Feb 17 10:05:31.205347 2026] [:error] [pid 32790:tid 32799] [client 20.238.121.35:64546] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lp6.php"] [unique_id "aZPM63s3HJP9ozPHsN5xFgAAAQU"]
[Tue Feb 17 10:05:32.288912 2026] [:error] [pid 58558:tid 58630] [client 20.238.121.35:64552] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lp6.php"] [unique_id "aZPM7CmIxlfUL2nViZwieAAAAIg"]
[Tue Feb 17 10:05:33.247779 2026] [:error] [pid 32790:tid 32798] [client 20.238.121.35:55857] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lp6.php"] [unique_id "aZPM7Xs3HJP9ozPHsN5xHQAAAQQ"]
[Tue Feb 17 10:05:33.923489 2026] [:error] [pid 32790:tid 32815] [client 51.107.69.151:44118] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPM7Xs3HJP9ozPHsN5xIgAAARU"]
[Tue Feb 17 10:05:35.229870 2026] [:error] [pid 32790:tid 32809] [client 20.238.121.35:64545] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZPM73s3HJP9ozPHsN5xKQAAAQ8"]
[Tue Feb 17 10:05:36.827525 2026] [:error] [pid 32790:tid 32797] [client 51.107.69.151:31312] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aZPM8Hs3HJP9ozPHsN5xMwAAAQM"]
[Tue Feb 17 10:05:38.892070 2026] [:error] [pid 58552:tid 58602] [client 51.107.69.151:33647] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPM8jBHVJP2Oz3yR5dP7AAAAEc"]
[Tue Feb 17 10:05:40.798496 2026] [:error] [pid 58551:tid 58564] [client 20.238.121.35:40243] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZPM9K1t8eWr-MgFsprR7wAAAAQ"]
[Tue Feb 17 10:05:42.558194 2026] [:error] [pid 58551:tid 58568] [client 51.107.69.151:36767] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPM9q1t8eWr-MgFsprR8gAAAAg"]
[Tue Feb 17 10:05:43.781595 2026] [:error] [pid 32790:tid 32795] [client 20.238.121.35:42782] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZPM93s3HJP9ozPHsN5xRgAAAQE"]
[Tue Feb 17 10:05:44.313859 2026] [:error] [pid 32790:tid 32808] [client 51.107.69.151:18414] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPM-Hs3HJP9ozPHsN5xRwAAAQ4"]
[Tue Feb 17 10:05:46.819129 2026] [:error] [pid 58551:tid 58583] [client 51.107.69.151:18423] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPM-q1t8eWr-MgFsprR-gAAABc"]
[Tue Feb 17 10:05:46.903360 2026] [:error] [pid 58551:tid 58568] [client 20.238.121.35:42760] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZPM-q1t8eWr-MgFsprR_AAAAAg"]
[Tue Feb 17 10:05:48.221026 2026] [:error] [pid 32790:tid 32801] [client 20.238.121.35:40219] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asax.php"] [unique_id "aZPM_Hs3HJP9ozPHsN5xUQAAAQc"]
[Tue Feb 17 10:05:54.206695 2026] [:error] [pid 58552:tid 58605] [client 51.107.69.151:28946] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNAjBHVJP2Oz3yR5dP9wAAAEo"]
[Tue Feb 17 10:05:55.954644 2026] [:error] [pid 58551:tid 58571] [client 51.107.69.151:19327] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNA61t8eWr-MgFsprSFAAAAAs"]
[Tue Feb 17 10:06:00.406306 2026] [:error] [pid 58551:tid 58578] [client 51.107.69.151:32694] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNCK1t8eWr-MgFsprSIAAAABI"]
[Tue Feb 17 10:06:06.194733 2026] [:error] [pid 58558:tid 58645] [client 20.238.121.35:46573] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Feb 17 10:06:06.450319 2026] [:error] [pid 58558:tid 58630] [client 20.238.121.35:46573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k3w6g9s4h2.php
[Tue Feb 17 10:06:06.704114 2026] [:error] [pid 58558:tid 58622] [client 20.238.121.35:46573] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 17 10:06:06.958327 2026] [:error] [pid 58558:tid 58634] [client 20.238.121.35:46573] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 10:06:07.229406 2026] [:error] [pid 58558:tid 58625] [client 20.238.121.35:46573] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Tue Feb 17 10:06:07.498685 2026] [:error] [pid 58558:tid 58638] [client 20.238.121.35:46573] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Feb 17 10:06:07.750620 2026] [:error] [pid 58558:tid 58628] [client 20.238.121.35:46573] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPNDymIxlfUL2nViZwivAAAAIY"]
[Tue Feb 17 10:06:08.825840 2026] [:error] [pid 58558:tid 58640] [client 20.238.121.35:52683] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPNECmIxlfUL2nViZwiwwAAAJI"]
[Tue Feb 17 10:06:10.665840 2026] [:error] [pid 58659:tid 58670] [client 51.107.69.151:21199] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNEsDX32iTEO4jt29r_QAAAMk"]
[Tue Feb 17 10:06:13.883345 2026] [:error] [pid 58552:tid 58619] [client 51.107.69.151:28939] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNFTBHVJP2Oz3yR5dQEwAAAFg"]
[Tue Feb 17 10:06:15.934003 2026] [:error] [pid 32790:tid 32810] [client 51.107.69.151:35901] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNF3s3HJP9ozPHsN5xvgAAARA"]
[Tue Feb 17 10:06:17.937001 2026] [:error] [pid 58552:tid 58611] [client 51.107.69.151:25213] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNGTBHVJP2Oz3yR5dQGQAAAFA"]
[Tue Feb 17 10:06:19.531062 2026] [:error] [pid 58551:tid 58575] [client 51.107.69.151:49835] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZPNG61t8eWr-MgFsprSPgAAAA8"]
[Tue Feb 17 10:06:19.824402 2026] [:error] [pid 32790:tid 32799] [client 20.238.121.35:2790] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aZPNG3s3HJP9ozPHsN5xxgAAAQU"]
[Tue Feb 17 10:06:21.227052 2026] [:error] [pid 32790:tid 32802] [client 51.107.69.151:51636] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZPNHXs3HJP9ozPHsN5xygAAAQg"]
[Tue Feb 17 10:06:25.503236 2026] [:error] [pid 58551:tid 58563] [client 20.238.121.35:55638] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNIa1t8eWr-MgFsprSUwAAAAM"]
[Tue Feb 17 10:06:28.278752 2026] [:error] [pid 58659:tid 58684] [client 51.107.69.151:26499] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Tue Feb 17 10:06:28.534802 2026] [:error] [pid 58659:tid 58667] [client 51.107.69.151:26499] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Feb 17 10:06:28.785823 2026] [:error] [pid 58659:tid 58677] [client 51.107.69.151:26499] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Feb 17 10:06:29.029333 2026] [:error] [pid 58659:tid 58676] [client 51.107.69.151:26499] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Feb 17 10:06:29.282712 2026] [:error] [pid 58659:tid 58663] [client 51.107.69.151:26499] [client 51.107.69.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZPNJcDX32iTEO4jt29sKQAAAMI"]
[Tue Feb 17 10:06:30.658660 2026] [:error] [pid 58659:tid 58673] [client 20.238.121.35:49012] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNJsDX32iTEO4jt29sLgAAAMw"]
[Tue Feb 17 10:06:34.748149 2026] [:error] [pid 32790:tid 32802] [client 20.238.121.35:62596] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNKns3HJP9ozPHsN5yWAAAAQg"]
[Tue Feb 17 10:06:35.357744 2026] [:error] [pid 58659:tid 58663] [client 51.107.69.151:34862] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Feb 17 10:06:38.046103 2026] [:error] [pid 58551:tid 58560] [client 20.238.121.35:52710] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aZPNLq1t8eWr-MgFsprSewAAAAA"]
[Tue Feb 17 10:06:49.607916 2026] [:error] [pid 58558:tid 58630] [client 20.238.121.35:35977] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNOSmIxlfUL2nViZwi_wAAAIg"]
[Tue Feb 17 10:06:51.744697 2026] [:error] [pid 58558:tid 58623] [client 20.238.121.35:2510] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNOymIxlfUL2nViZwjBwAAAIE"]
[Tue Feb 17 10:06:52.722322 2026] [:error] [pid 58551:tid 58571] [client 20.238.121.35:52115] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPNPK1t8eWr-MgFsprSrAAAAAs"]
[Tue Feb 17 10:06:54.178696 2026] [:error] [pid 58558:tid 58646] [client 20.238.121.35:50313] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZPNPimIxlfUL2nViZwjDAAAAJg"]
[Tue Feb 17 10:06:58.927891 2026] [:error] [pid 58551:tid 58583] [client 20.238.121.35:64299] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZPNQq1t8eWr-MgFsprStwAAABc"]
[Tue Feb 17 10:07:01.730876 2026] [:error] [pid 58558:tid 58626] [client 20.238.121.35:55975] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZPNRSmIxlfUL2nViZwjGgAAAIQ"]
[Tue Feb 17 10:07:05.618923 2026] [:error] [pid 32790:tid 32812] [client 20.238.121.35:43861] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "aZPNSXs3HJP9ozPHsN5ylAAAARI"]
[Tue Feb 17 10:07:09.009532 2026] [:error] [pid 58552:tid 58600] [client 20.238.121.35:63861] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Feb 17 10:07:09.277758 2026] [:error] [pid 58552:tid 58613] [client 20.238.121.35:63861] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Feb 17 10:07:09.543145 2026] [:error] [pid 58552:tid 58598] [client 20.238.121.35:63861] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Feb 17 10:07:09.805563 2026] [:error] [pid 58552:tid 58605] [client 20.238.121.35:63861] [client 20.238.121.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZPNTTBHVJP2Oz3yR5dQcQAAAEo"]
[Tue Feb 17 10:07:14.195981 2026] [:error] [pid 58659:tid 58665] [client 20.238.121.35:64814] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Feb 17 10:40:46.865379 2026] [:error] [pid 58551:tid 58573] [client 158.94.208.230:61550] [client 158.94.208.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aZPVLq1t8eWr-MgFspre_wAAAA0"]
[Tue Feb 17 10:40:48.042105 2026] [:error] [pid 58659:tid 58672] [client 158.94.208.230:62042] [client 158.94.208.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aZPVMMDX32iTEO4jt297ZAAAAMs"]
[Tue Feb 17 12:20:38.106840 2026] [:error] [pid 58551:tid 58562] [client 167.71.244.81:50963] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPslq1t8eWr-MgFspoGcAAAAAI"]
[Tue Feb 17 14:01:35.026060 2026] [:error] [pid 58659:tid 58665] [client 89.105.204.146:2356] [client 89.105.204.146] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=application/ogg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZQEP8DX32iTEO4jt2_fCQAAAMQ"]
[Tue Feb 17 15:32:06.840663 2026] [:error] [pid 58551:tid 58568] [client 65.108.125.120:34372] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZQZdq1t8eWr-MgFsppOFwAAAAg"]
[Tue Feb 17 15:32:08.787929 2026] [:error] [pid 58551:tid 58575] [client 65.108.125.120:10868] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZQZeK1t8eWr-MgFsppOGQAAAA8"]
[Tue Feb 17 15:32:10.942404 2026] [:error] [pid 13106:tid 13111] [client 65.108.125.120:10870] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZQZerBEWrYCV-0FRdqtHAAAAUE"]
[Tue Feb 17 15:32:13.107772 2026] [:error] [pid 13106:tid 13119] [client 65.108.125.120:10874] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZQZfbBEWrYCV-0FRdqtIAAAAUk"]
[Tue Feb 17 15:32:15.097235 2026] [:error] [pid 58558:tid 58632] [client 65.108.125.120:10880] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZQZfymIxlfUL2nViZyqhAAAAIo"]
[Tue Feb 17 15:32:17.070764 2026] [:error] [pid 58551:tid 58576] [client 65.108.125.120:10890] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZQZga1t8eWr-MgFsppOKwAAABA"]
[Tue Feb 17 15:32:19.035325 2026] [:error] [pid 58558:tid 58639] [client 65.108.125.120:11070] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZQZgymIxlfUL2nViZyqjwAAAJE"]
[Tue Feb 17 15:32:20.990392 2026] [:error] [pid 13106:tid 13123] [client 65.108.125.120:11082] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZQZhLBEWrYCV-0FRdqtMAAAAU0"]
[Tue Feb 17 15:32:23.114296 2026] [:error] [pid 32790:tid 32798] [client 65.108.125.120:11098] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZQZh3s3HJP9ozPHsN4ruQAAAQQ"]
[Tue Feb 17 15:32:25.188784 2026] [:error] [pid 58558:tid 58641] [client 65.108.125.120:11112] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZQZiSmIxlfUL2nViZyqnAAAAJM"]
[Tue Feb 17 15:32:27.288060 2026] [:error] [pid 32790:tid 32818] [client 65.108.125.120:11120] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZQZi3s3HJP9ozPHsN4rugAAARg"]
[Tue Feb 17 15:32:29.301134 2026] [:error] [pid 13106:tid 13113] [client 65.108.125.120:55706] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZQZjbBEWrYCV-0FRdqtQgAAAUM"]
[Tue Feb 17 15:32:31.234351 2026] [:error] [pid 58558:tid 58641] [client 65.108.125.120:55718] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZQZjymIxlfUL2nViZyqpAAAAJM"]
[Tue Feb 17 15:32:33.155890 2026] [:error] [pid 32790:tid 32804] [client 65.108.125.120:55726] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZQZkXs3HJP9ozPHsN4rwwAAAQo"]
[Tue Feb 17 15:32:35.172987 2026] [:error] [pid 58551:tid 58577] [client 65.108.125.120:55730] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZQZk61t8eWr-MgFsppOPwAAABE"]
[Tue Feb 17 15:32:37.117025 2026] [:error] [pid 58552:tid 58607] [client 65.108.125.120:55744] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZQZlTBHVJP2Oz3yR5fQSgAAAEw"]
[Tue Feb 17 15:32:39.074273 2026] [:error] [pid 58552:tid 58616] [client 65.108.125.120:33292] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZQZlzBHVJP2Oz3yR5fQUAAAAFU"]
[Tue Feb 17 15:32:41.116436 2026] [:error] [pid 58558:tid 58634] [client 65.108.125.120:33298] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZQZmSmIxlfUL2nViZyqqAAAAIw"]
[Tue Feb 17 15:32:43.078261 2026] [:error] [pid 58558:tid 58641] [client 65.108.125.120:33300] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZQZmymIxlfUL2nViZyqqwAAAJM"]
[Tue Feb 17 15:32:44.999720 2026] [:error] [pid 58551:tid 58570] [client 65.108.125.120:33310] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZQZnK1t8eWr-MgFsppOUwAAAAo"]
[Tue Feb 17 15:32:46.937363 2026] [:error] [pid 13106:tid 13119] [client 65.108.125.120:33316] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZQZnrBEWrYCV-0FRdqtXwAAAUk"]
[Tue Feb 17 15:32:48.907336 2026] [:error] [pid 13106:tid 13125] [client 65.108.125.120:9780] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZQZoLBEWrYCV-0FRdqtYwAAAU8"]
[Tue Feb 17 15:32:50.809044 2026] [:error] [pid 58552:tid 58597] [client 65.108.125.120:9796] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZQZojBHVJP2Oz3yR5fQZQAAAEI"]
[Tue Feb 17 15:32:52.698809 2026] [:error] [pid 32790:tid 32797] [client 65.108.125.120:9804] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZQZpHs3HJP9ozPHsN4r3QAAAQM"]
[Tue Feb 17 15:32:54.806785 2026] [:error] [pid 58558:tid 58624] [client 65.108.125.120:9816] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZQZpimIxlfUL2nViZyqtwAAAII"]
[Tue Feb 17 15:32:56.789493 2026] [:error] [pid 13106:tid 13112] [client 65.108.125.120:9824] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZQZqLBEWrYCV-0FRdqtdAAAAUI"]
[Tue Feb 17 15:32:58.699822 2026] [:error] [pid 58551:tid 58564] [client 65.108.125.120:53846] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZQZqq1t8eWr-MgFsppOYQAAAAQ"]
[Tue Feb 17 15:33:00.846791 2026] [:error] [pid 58659:tid 58667] [client 65.108.125.120:53862] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZQZrMDX32iTEO4jt28FjQAAAMY"]
[Tue Feb 17 15:33:02.769365 2026] [:error] [pid 13106:tid 13112] [client 65.108.125.120:53874] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZQZrrBEWrYCV-0FRdqtfQAAAUI"]
[Tue Feb 17 15:33:26.564224 2026] [:error] [pid 58552:tid 58601] [client 65.108.125.120:35518] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZQZxjBHVJP2Oz3yR5fQlgAAAEY"]
[Tue Feb 17 15:33:28.539495 2026] [:error] [pid 58552:tid 58618] [client 65.108.125.120:10306] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZQZyDBHVJP2Oz3yR5fQmQAAAFc"]
[Tue Feb 17 15:33:32.491778 2026] [:error] [pid 13106:tid 13131] [client 65.108.125.120:10318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZQZzLBEWrYCV-0FRdqtqAAAAVU"]
[Tue Feb 17 16:35:05.511088 2026] [:error] [pid 58551:tid 58565] [client 43.166.242.189:55190] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZQoOa1t8eWr-MgFsppgbQAAAAU"]
[Tue Feb 17 18:40:21.384918 2026] [:error] [pid 58551:tid 58580] [client 80.68.7.50:34410] [client 80.68.7.50] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/xhtml+xml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZRFla1t8eWr-MgFspqDnAAAABQ"]
[Tue Feb 17 22:54:26.395757 2026] [:error] [pid 13106:tid 13129] [client 49.51.141.76:38252] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZSBIrBEWrYCV-0FRdowhgAAAVM"]
[Tue Feb 17 23:15:53.667656 2026] [:error] [pid 58551:tid 58567] [client 93.158.213.25:51112] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZSGKa1t8eWr-MgFsprWYwAAAAc"]
[Tue Feb 17 23:15:55.785054 2026] [:error] [pid 13106:tid 13125] [client 93.158.213.25:35098] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZSGK7BEWrYCV-0FRdo3FwAAAU8"]
[Tue Feb 17 23:15:57.724798 2026] [:error] [pid 58558:tid 58627] [client 93.158.213.25:35112] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZSGLSmIxlfUL2nViZwiLgAAAIU"]
[Tue Feb 17 23:15:59.733695 2026] [:error] [pid 58551:tid 58581] [client 93.158.213.25:35124] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZSGL61t8eWr-MgFsprWawAAABU"]
[Tue Feb 17 23:16:01.762996 2026] [:error] [pid 58659:tid 58684] [client 93.158.213.25:35134] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZSGMcDX32iTEO4jt29tkgAAANc"]
[Tue Feb 17 23:16:03.712112 2026] [:error] [pid 13106:tid 13118] [client 93.158.213.25:35136] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZSGM7BEWrYCV-0FRdo3HwAAAUg"]
[Tue Feb 17 23:16:05.706761 2026] [:error] [pid 58552:tid 58597] [client 93.158.213.25:41370] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZSGNTBHVJP2Oz3yR5dfpgAAAEI"]
[Tue Feb 17 23:16:07.570207 2026] [:error] [pid 2727:tid 2732] [client 93.158.213.25:41374] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZSGNyIYJerZs7d7DPujrQAAAoM"]
[Tue Feb 17 23:16:09.654633 2026] [:error] [pid 58659:tid 58662] [client 93.158.213.25:41382] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZSGOcDX32iTEO4jt29tmwAAAME"]
[Tue Feb 17 23:16:11.506615 2026] [:error] [pid 58552:tid 58598] [client 93.158.213.25:41392] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZSGOzBHVJP2Oz3yR5dfrAAAAEM"]
[Tue Feb 17 23:16:13.550176 2026] [:error] [pid 2727:tid 2748] [client 93.158.213.25:41404] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZSGPSIYJerZs7d7DPujswAAApM"]
[Tue Feb 17 23:16:15.701563 2026] [:error] [pid 13106:tid 13124] [client 93.158.213.25:41270] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZSGP7BEWrYCV-0FRdo3JgAAAU4"]
[Tue Feb 17 23:16:18.034182 2026] [:error] [pid 13106:tid 13122] [client 93.158.213.25:41272] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZSGQrBEWrYCV-0FRdo3KAAAAUw"]
[Tue Feb 17 23:16:20.027011 2026] [:error] [pid 42555:tid 42564] [client 93.158.213.25:41288] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZSGRPCCGB-bBphvas3VCwAAAYc"]
[Tue Feb 17 23:16:21.952844 2026] [:error] [pid 2727:tid 2740] [client 93.158.213.25:41302] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZSGRSIYJerZs7d7DPujuwAAAos"]
[Tue Feb 17 23:16:24.090629 2026] [:error] [pid 58552:tid 58609] [client 93.158.213.25:41304] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZSGSDBHVJP2Oz3yR5dfvgAAAE4"]
[Tue Feb 17 23:16:26.042192 2026] [:error] [pid 2605:tid 2612] [client 93.158.213.25:54112] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZSGShliizaiVjfuA2CeSAAAAgQ"]
[Tue Feb 17 23:16:28.132866 2026] [:error] [pid 42555:tid 42565] [client 93.158.213.25:54118] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZSGTPCCGB-bBphvas3VDgAAAYg"]
[Tue Feb 17 23:16:30.164484 2026] [:error] [pid 13106:tid 13128] [client 93.158.213.25:54128] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZSGTrBEWrYCV-0FRdo3SAAAAVI"]
[Tue Feb 17 23:16:32.058237 2026] [:error] [pid 58558:tid 58636] [client 93.158.213.25:54140] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZSGUCmIxlfUL2nViZwiQgAAAI4"]
[Tue Feb 17 23:16:33.961799 2026] [:error] [pid 2727:tid 2747] [client 93.158.213.25:54152] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZSGUSIYJerZs7d7DPuj0AAAApI"]
[Tue Feb 17 23:16:35.857407 2026] [:error] [pid 58552:tid 58611] [client 93.158.213.25:47872] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZSGUzBHVJP2Oz3yR5df0AAAAFA"]
[Tue Feb 17 23:16:37.793084 2026] [:error] [pid 58552:tid 58601] [client 93.158.213.25:47886] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZSGVTBHVJP2Oz3yR5df0wAAAEY"]
[Tue Feb 17 23:16:39.701263 2026] [:error] [pid 58552:tid 58603] [client 93.158.213.25:47898] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZSGVzBHVJP2Oz3yR5df1AAAAEg"]
[Tue Feb 17 23:16:41.822491 2026] [:error] [pid 13106:tid 13116] [client 93.158.213.25:47904] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZSGWbBEWrYCV-0FRdo3WgAAAUY"]
[Tue Feb 17 23:16:43.869947 2026] [:error] [pid 13106:tid 13117] [client 93.158.213.25:47916] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZSGW7BEWrYCV-0FRdo3YwAAAUc"]
[Tue Feb 17 23:16:46.113240 2026] [:error] [pid 13106:tid 13131] [client 93.158.213.25:54288] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZSGXrBEWrYCV-0FRdo3agAAAVU"]
[Tue Feb 17 23:16:48.178128 2026] [:error] [pid 2606:tid 2652] [client 93.158.213.25:54300] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZSGYFFV84PnUA8QSAjNEQAAAlE"]
[Tue Feb 17 23:16:50.201482 2026] [:error] [pid 2606:tid 2648] [client 93.158.213.25:54310] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZSGYlFV84PnUA8QSAjNFAAAAk0"]
[Tue Feb 17 23:17:12.388238 2026] [:error] [pid 42555:tid 42576] [client 93.158.213.25:54322] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZSGePCCGB-bBphvas3VMAAAAZM"]
[Tue Feb 17 23:17:14.398470 2026] [:error] [pid 2727:tid 2736] [client 93.158.213.25:58550] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZSGeiIYJerZs7d7DPuj5wAAAoc"]
[Tue Feb 17 23:17:16.499955 2026] [:error] [pid 58552:tid 58614] [client 93.158.213.25:34862] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZSGfDBHVJP2Oz3yR5df9gAAAFM"]
[Tue Feb 17 23:17:18.416539 2026] [:error] [pid 58552:tid 58605] [client 93.158.213.25:34876] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZSGfjBHVJP2Oz3yR5df-AAAAEo"]
[Tue Feb 17 23:17:20.458031 2026] [:error] [pid 2605:tid 2624] [client 93.158.213.25:34878] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZSGgBliizaiVjfuA2CeZQAAAhA"]
[Tue Feb 17 23:17:22.485718 2026] [:error] [pid 58558:tid 58623] [client 93.158.213.25:34892] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZSGgimIxlfUL2nViZwieQAAAIE"]
[Tue Feb 17 23:17:24.605462 2026] [:error] [pid 58659:tid 58683] [client 93.158.213.25:34908] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZSGhMDX32iTEO4jt29tugAAANY"]
[Tue Feb 17 23:17:26.672835 2026] [:error] [pid 2727:tid 2733] [client 93.158.213.25:52440] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZSGhiIYJerZs7d7DPuj7AAAAoQ"]
[Tue Feb 17 23:17:28.663044 2026] [:error] [pid 58551:tid 58568] [client 93.158.213.25:52456] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZSGiK1t8eWr-MgFsprWrgAAAAg"]
[Tue Feb 17 23:17:32.602297 2026] [:error] [pid 13106:tid 13133] [client 93.158.213.25:52472] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZSGjLBEWrYCV-0FRdo3pwAAAVc"]
[Wed Feb 18 03:57:03.036386 2026] [:error] [pid 21848:tid 21898] [client 158.158.51.6:19009] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Wed Feb 18 03:57:03.280605 2026] [:error] [pid 21848:tid 21908] [client 158.158.51.6:19009] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Wed Feb 18 03:57:03.523096 2026] [:error] [pid 21848:tid 21897] [client 158.158.51.6:19009] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Wed Feb 18 03:57:03.766847 2026] [:error] [pid 21848:tid 21891] [client 158.158.51.6:19009] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Wed Feb 18 03:57:04.006763 2026] [:error] [pid 21848:tid 21913] [client 158.158.51.6:19009] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZTIEPbG91VRkVidT5fz0gAAAFg"]
[Wed Feb 18 03:57:07.297598 2026] [:error] [pid 21847:tid 21865] [client 158.158.51.6:12695] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZTIE_y9A5wy4LuXmJ2P1wAAAAc"]
[Wed Feb 18 03:57:13.579166 2026] [:error] [pid 21849:tid 21933] [client 158.158.51.6:12680] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZTIGbx9a1XrfTYnuzJK5AAAAJE"]
[Wed Feb 18 03:57:17.070776 2026] [:error] [pid 21848:tid 21899] [client 158.158.51.6:12627] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZTIHfbG91VRkVidT5fz5AAAAEo"]
[Wed Feb 18 03:57:18.146996 2026] [:error] [pid 21847:tid 21858] [client 158.158.51.6:15407] [client 158.158.51.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZTIHvy9A5wy4LuXmJ2P6wAAAAA"]
[Wed Feb 18 03:57:20.703683 2026] [:error] [pid 21847:tid 21876] [client 158.158.51.6:12700] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZTIIPy9A5wy4LuXmJ2P7QAAABI"]
[Wed Feb 18 03:57:22.921993 2026] [:error] [pid 21849:tid 21923] [client 158.158.51.6:21664] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZTIIrx9a1XrfTYnuzJK9AAAAIc"]
[Wed Feb 18 03:57:23.963794 2026] [:error] [pid 21848:tid 21909] [client 158.158.51.6:21633] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZTII_bG91VRkVidT5fz6gAAAFQ"]
[Wed Feb 18 03:57:39.246432 2026] [:error] [pid 21848:tid 21906] [client 158.158.51.6:18179] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZTIM_bG91VRkVidT5fz_wAAAFE"]
[Wed Feb 18 03:57:45.445116 2026] [:error] [pid 21961:tid 21981] [client 158.158.51.6:16380] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZTIOcUBDt_-H0ms3gUp7wAAANI"]
[Wed Feb 18 03:57:47.040655 2026] [:error] [pid 21847:tid 21876] [client 158.158.51.6:15417] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZTIO_y9A5wy4LuXmJ2QCQAAABI"]
[Wed Feb 18 03:57:54.361696 2026] [:error] [pid 21961:tid 21968] [client 158.158.51.6:4935] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aZTIQsUBDt_-H0ms3gUqBwAAAMU"]
[Wed Feb 18 03:57:56.267227 2026] [:error] [pid 21961:tid 21969] [client 158.158.51.6:24051] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aZTIRMUBDt_-H0ms3gUqCwAAAMY"]
[Wed Feb 18 03:58:21.450665 2026] [:error] [pid 21848:tid 21892] [client 158.158.51.6:11286] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Feb 18 03:58:21.694012 2026] [:error] [pid 21848:tid 21907] [client 158.158.51.6:11286] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 18 04:56:50.600080 2026] [:error] [pid 21849:tid 21919] [client 182.42.111.156:49945] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZTWErx9a1XrfTYnuzJjVAAAAIM"]
[Wed Feb 18 08:48:39.288190 2026] [:error] [pid 5561:tid 5568] [client 45.67.97.53:20105] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 18 08:48:39.613936 2026] [:error] [pid 5561:tid 5571] [client 45.67.97.53:20105] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 18 08:48:39.967182 2026] [:error] [pid 5561:tid 5580] [client 45.67.97.53:20105] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Feb 18 08:48:40.292328 2026] [:error] [pid 5561:tid 5582] [client 45.67.97.53:20105] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 18 08:48:40.616681 2026] [:error] [pid 5561:tid 5568] [client 45.67.97.53:20105] [client 45.67.97.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aZUMaEoQssCZYQ4NexYWCgAAAUQ"]
[Wed Feb 18 08:48:41.760239 2026] [:error] [pid 21847:tid 21863] [client 45.67.97.54:48469] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Feb 18 08:48:42.842416 2026] [:error] [pid 21847:tid 21878] [client 45.67.97.54:48469] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 18 08:48:44.317891 2026] [:error] [pid 21847:tid 21881] [client 45.67.97.54:48469] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 18 08:48:45.326096 2026] [:error] [pid 21847:tid 21860] [client 45.67.97.54:48469] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 18 08:48:46.435176 2026] [:error] [pid 21847:tid 21876] [client 45.67.97.54:48469] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/login.php"] [unique_id "aZUMbvy9A5wy4LuXmJ0OIQAAABI"]
[Wed Feb 18 08:48:48.153787 2026] [:error] [pid 21961:tid 21972] [client 45.67.97.54:52855] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/login.php"] [unique_id "aZUMcMUBDt_-H0ms3gWWBQAAAMk"]
[Wed Feb 18 08:50:01.956420 2026] [:error] [pid 21848:tid 21906] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 18 08:50:02.551784 2026] [:error] [pid 21848:tid 21896] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 18 08:50:02.923662 2026] [:error] [pid 21848:tid 21900] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Feb 18 08:50:03.250599 2026] [:error] [pid 21848:tid 21902] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 18 08:50:03.614240 2026] [:error] [pid 21848:tid 21890] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Feb 18 08:50:04.035413 2026] [:error] [pid 21848:tid 21889] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 18 08:50:04.363242 2026] [:error] [pid 21848:tid 21909] [client 45.67.97.52:62349] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 18 08:50:04.685966 2026] [:error] [pid 21848:tid 21898] [client 45.67.97.52:62349] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aZUMvPbG91VRkVidT5diJgAAAEk"]
[Wed Feb 18 09:05:56.840534 2026] [:error] [pid 21847:tid 21878] [client 193.70.44.235:49632] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZUQdPy9A5wy4LuXmJ0alAAAABQ"]
[Wed Feb 18 09:05:58.945240 2026] [:error] [pid 21848:tid 21905] [client 193.70.44.235:58740] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZUQdvbG91VRkVidT5dpCgAAAFA"]
[Wed Feb 18 09:06:00.712117 2026] [:error] [pid 21849:tid 21918] [client 193.70.44.235:58744] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZUQeLx9a1XrfTYnuzK1rAAAAII"]
[Wed Feb 18 09:06:02.654355 2026] [:error] [pid 21848:tid 21904] [client 193.70.44.235:58752] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZUQevbG91VRkVidT5dpFwAAAE8"]
[Wed Feb 18 09:06:04.567404 2026] [:error] [pid 21847:tid 21878] [client 193.70.44.235:58766] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZUQfPy9A5wy4LuXmJ0awwAAABQ"]
[Wed Feb 18 09:06:06.461926 2026] [:error] [pid 21847:tid 21881] [client 193.70.44.235:35422] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZUQfvy9A5wy4LuXmJ0axwAAABc"]
[Wed Feb 18 09:06:08.250291 2026] [:error] [pid 21961:tid 21974] [client 193.70.44.235:35438] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZUQgMUBDt_-H0ms3gWebgAAAMs"]
[Wed Feb 18 09:06:10.191335 2026] [:error] [pid 21961:tid 21986] [client 193.70.44.235:35442] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZUQgsUBDt_-H0ms3gWecgAAANc"]
[Wed Feb 18 09:06:12.073094 2026] [:error] [pid 5561:tid 5575] [client 193.70.44.235:35454] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZUQhEoQssCZYQ4NexYd7AAAAUs"]
[Wed Feb 18 09:06:13.960507 2026] [:error] [pid 5561:tid 5568] [client 193.70.44.235:35458] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZUQhUoQssCZYQ4NexYd8gAAAUQ"]
[Wed Feb 18 09:06:15.996271 2026] [:error] [pid 21847:tid 21862] [client 193.70.44.235:38678] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZUQh_y9A5wy4LuXmJ0azgAAAAQ"]
[Wed Feb 18 09:06:17.882842 2026] [:error] [pid 21847:tid 21861] [client 193.70.44.235:38688] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZUQify9A5wy4LuXmJ0a1AAAAAM"]
[Wed Feb 18 09:06:19.786488 2026] [:error] [pid 21847:tid 21868] [client 193.70.44.235:38702] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZUQi_y9A5wy4LuXmJ0a1gAAAAo"]
[Wed Feb 18 09:06:21.819274 2026] [:error] [pid 21848:tid 21902] [client 193.70.44.235:38710] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZUQjfbG91VRkVidT5dpKwAAAE0"]
[Wed Feb 18 09:06:23.696808 2026] [:error] [pid 21961:tid 21975] [client 193.70.44.235:38716] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZUQj8UBDt_-H0ms3gWegwAAAMw"]
[Wed Feb 18 09:06:25.590718 2026] [:error] [pid 57014:tid 57022] [client 193.70.44.235:44148] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZUQkRNZnhS5qKtVIMJGYgAAAQU"]
[Wed Feb 18 09:06:27.467443 2026] [:error] [pid 5561:tid 5584] [client 193.70.44.235:44162] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZUQk0oQssCZYQ4NexYeAwAAAVQ"]
[Wed Feb 18 09:06:29.519365 2026] [:error] [pid 21848:tid 21911] [client 193.70.44.235:44168] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZUQlfbG91VRkVidT5dpNgAAAFY"]
[Wed Feb 18 09:06:31.390950 2026] [:error] [pid 21961:tid 21966] [client 193.70.44.235:44178] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZUQl8UBDt_-H0ms3gWehQAAAMM"]
[Wed Feb 18 09:06:33.434019 2026] [:error] [pid 5561:tid 5572] [client 193.70.44.235:44182] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZUQmUoQssCZYQ4NexYeDQAAAUg"]
[Wed Feb 18 09:06:35.353626 2026] [:error] [pid 21847:tid 21858] [client 193.70.44.235:60826] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZUQm_y9A5wy4LuXmJ0a3AAAAAA"]
[Wed Feb 18 09:06:37.230584 2026] [:error] [pid 21848:tid 21911] [client 193.70.44.235:60830] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZUQnfbG91VRkVidT5dpPgAAAFY"]
[Wed Feb 18 09:06:39.123188 2026] [:error] [pid 21848:tid 21910] [client 193.70.44.235:60832] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZUQn_bG91VRkVidT5dpPwAAAFU"]
[Wed Feb 18 09:06:41.025072 2026] [:error] [pid 21961:tid 21971] [client 193.70.44.235:60840] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZUQocUBDt_-H0ms3gWejgAAAMg"]
[Wed Feb 18 09:06:42.919216 2026] [:error] [pid 21847:tid 21864] [client 193.70.44.235:60846] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZUQovy9A5wy4LuXmJ0a5QAAAAY"]
[Wed Feb 18 09:06:44.953320 2026] [:error] [pid 57014:tid 57040] [client 193.70.44.235:60858] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZUQpBNZnhS5qKtVIMJGfQAAARc"]
[Wed Feb 18 09:06:46.844501 2026] [:error] [pid 57014:tid 57039] [client 193.70.44.235:54762] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZUQphNZnhS5qKtVIMJGfgAAARY"]
[Wed Feb 18 09:06:48.734005 2026] [:error] [pid 21961:tid 21974] [client 193.70.44.235:54772] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZUQqMUBDt_-H0ms3gWemQAAAMs"]
[Wed Feb 18 09:06:50.775002 2026] [:error] [pid 57014:tid 57041] [client 193.70.44.235:54788] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZUQqhNZnhS5qKtVIMJGgQAAARg"]
[Wed Feb 18 09:06:52.677829 2026] [:error] [pid 21847:tid 21873] [client 193.70.44.235:54790] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZUQrPy9A5wy4LuXmJ0a_gAAAA8"]
[Wed Feb 18 09:06:54.554144 2026] [:error] [pid 21848:tid 21899] [client 193.70.44.235:54802] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZUQrvbG91VRkVidT5dpWAAAAEo"]
[Wed Feb 18 09:07:15.205139 2026] [:error] [pid 21961:tid 21967] [client 193.70.44.235:36714] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZUQw8UBDt_-H0ms3gWewwAAAMQ"]
[Wed Feb 18 09:07:17.010265 2026] [:error] [pid 21849:tid 21916] [client 193.70.44.235:39090] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZUQxbx9a1XrfTYnuzK2IwAAAIA"]
[Wed Feb 18 09:07:19.035242 2026] [:error] [pid 5561:tid 5586] [client 193.70.44.235:39104] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZUQx0oQssCZYQ4NexYeLAAAAVY"]
[Wed Feb 18 09:07:21.037227 2026] [:error] [pid 57014:tid 57033] [client 193.70.44.235:39118] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZUQyRNZnhS5qKtVIMJGnwAAARA"]
[Wed Feb 18 09:07:23.062349 2026] [:error] [pid 21849:tid 21926] [client 193.70.44.235:39122] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZUQy7x9a1XrfTYnuzK2JwAAAIo"]
[Wed Feb 18 09:07:24.937254 2026] [:error] [pid 21961:tid 21966] [client 193.70.44.235:39126] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZUQzMUBDt_-H0ms3gWe0wAAAMM"]
[Wed Feb 18 09:07:26.952304 2026] [:error] [pid 57014:tid 57028] [client 193.70.44.235:34740] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZUQzhNZnhS5qKtVIMJGqwAAAQs"]
[Wed Feb 18 09:07:28.963657 2026] [:error] [pid 21848:tid 21891] [client 193.70.44.235:34752] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZUQ0PbG91VRkVidT5dpfwAAAEI"]
[Wed Feb 18 09:07:30.831158 2026] [:error] [pid 21847:tid 21875] [client 193.70.44.235:34754] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZUQ0vy9A5wy4LuXmJ0bPAAAABE"]
[Wed Feb 18 09:07:32.849311 2026] [:error] [pid 21847:tid 21876] [client 193.70.44.235:34764] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZUQ1Py9A5wy4LuXmJ0bQAAAABI"]
[Wed Feb 18 09:07:35.676738 2026] [:error] [pid 21849:tid 21937] [client 193.70.44.235:45296] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZUQ17x9a1XrfTYnuzK2MwAAAJU"]
[Wed Feb 18 09:07:39.389843 2026] [:error] [pid 57014:tid 57032] [client 193.70.44.235:45298] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZUQ2xNZnhS5qKtVIMJGugAAAQ8"]
[Wed Feb 18 10:42:56.436143 2026] [:error] [pid 21847:tid 21864] [client 165.245.187.140:57183] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnMPy9A5wy4LuXmJ1K0wAAAAY"]
[Wed Feb 18 11:18:59.616617 2026] [:error] [pid 21848:tid 21907] [client 106.119.167.146:33819] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZUvo_bG91VRkVidT5eWGgAAAFI"]
[Wed Feb 18 13:11:32.967746 2026] [:error] [pid 5561:tid 5576] [client 43.165.190.5:45528] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZVKBEoQssCZYQ4NexZqZAAAAUw"]
[Wed Feb 18 18:21:51.500055 2026] [:error] [pid 57014:tid 57023] [client 217.182.195.225:47882] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZWSvxNZnhS5qKtVIMIKgAAAAQY"]
[Wed Feb 18 18:21:53.548996 2026] [:error] [pid 21848:tid 21912] [client 217.182.195.225:54802] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZWSwfbG91VRkVidT5cg1AAAAFc"]
[Wed Feb 18 18:21:55.849237 2026] [:error] [pid 21847:tid 21877] [client 217.182.195.225:54810] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZWSw_y9A5wy4LuXmJ0A6AAAABM"]
[Wed Feb 18 18:21:57.817469 2026] [:error] [pid 57014:tid 57027] [client 217.182.195.225:56984] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZWSxRNZnhS5qKtVIMIKiwAAAQo"]
[Wed Feb 18 18:21:59.797258 2026] [:error] [pid 57014:tid 57040] [client 217.182.195.225:56988] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZWSxxNZnhS5qKtVIMIKkwAAARc"]
[Wed Feb 18 18:22:02.085912 2026] [:error] [pid 11548:tid 11593] [client 217.182.195.225:56992] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZWSyjSFZiBIZZvmIlP1NgAAAg8"]
[Wed Feb 18 18:22:04.379610 2026] [:error] [pid 21848:tid 21899] [client 217.182.195.225:57008] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZWSzPbG91VRkVidT5cg5QAAAEo"]
[Wed Feb 18 18:22:06.355287 2026] [:error] [pid 11607:tid 11631] [client 217.182.195.225:43102] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZWSzhw91ggRx3FA7BfSHAAAAlA"]
[Wed Feb 18 18:22:08.450136 2026] [:error] [pid 21847:tid 21871] [client 217.182.195.225:43118] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZWS0Py9A5wy4LuXmJ0A9QAAAA0"]
[Wed Feb 18 18:22:10.469625 2026] [:error] [pid 11609:tid 11654] [client 217.182.195.225:43132] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZWS0shm3UjgaKO2Na8bYQAAAos"]
[Wed Feb 18 18:22:12.513482 2026] [:error] [pid 5561:tid 5570] [client 217.182.195.225:43146] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZWS1EoQssCZYQ4NexbBngAAAUY"]
[Wed Feb 18 18:22:14.639722 2026] [:error] [pid 21848:tid 21913] [client 217.182.195.225:43148] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZWS1vbG91VRkVidT5cg7AAAAFg"]
[Wed Feb 18 18:22:16.661751 2026] [:error] [pid 57014:tid 57025] [client 217.182.195.225:44152] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZWS2BNZnhS5qKtVIMIKoQAAAQg"]
[Wed Feb 18 18:22:18.639621 2026] [:error] [pid 11548:tid 11598] [client 217.182.195.225:44166] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZWS2jSFZiBIZZvmIlP1QwAAAhQ"]
[Wed Feb 18 18:22:20.590332 2026] [:error] [pid 21847:tid 21882] [client 217.182.195.225:44176] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZWS3Py9A5wy4LuXmJ0BAgAAABg"]
[Wed Feb 18 18:22:22.644032 2026] [:error] [pid 11607:tid 11616] [client 217.182.195.225:44178] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZWS3hw91ggRx3FA7BfSLQAAAkE"]
[Wed Feb 18 18:22:24.680231 2026] [:error] [pid 11610:tid 11684] [client 217.182.195.225:44182] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZWS4LWMUt4MNfN7mx24HQAAAs0"]
[Wed Feb 18 18:22:26.689626 2026] [:error] [pid 21847:tid 21876] [client 217.182.195.225:42480] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZWS4vy9A5wy4LuXmJ0BCgAAABI"]
[Wed Feb 18 18:22:28.785826 2026] [:error] [pid 11607:tid 11626] [client 217.182.195.225:42492] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZWS5Bw91ggRx3FA7BfSNQAAAks"]
[Wed Feb 18 18:22:30.878757 2026] [:error] [pid 11609:tid 11664] [client 217.182.195.225:42494] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZWS5shm3UjgaKO2Na8bbwAAApQ"]
[Wed Feb 18 18:22:32.720657 2026] [:error] [pid 11611:tid 11710] [client 217.182.195.225:42508] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZWS6O2m6IPN_aBZuKZUxgAAAww"]
[Wed Feb 18 18:22:34.642705 2026] [:error] [pid 11609:tid 11659] [client 217.182.195.225:42524] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZWS6shm3UjgaKO2Na8bewAAApA"]
[Wed Feb 18 18:22:36.690308 2026] [:error] [pid 11607:tid 11623] [client 217.182.195.225:58394] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZWS7Bw91ggRx3FA7BfSQAAAAkg"]
[Wed Feb 18 18:22:38.690620 2026] [:error] [pid 11607:tid 11615] [client 217.182.195.225:58400] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZWS7hw91ggRx3FA7BfSSAAAAkA"]
[Wed Feb 18 18:22:40.977565 2026] [:error] [pid 11548:tid 11578] [client 217.182.195.225:58412] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZWS8DSFZiBIZZvmIlP1UAAAAgA"]
[Wed Feb 18 18:22:42.842090 2026] [:error] [pid 11607:tid 11615] [client 217.182.195.225:58428] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZWS8hw91ggRx3FA7BfSVgAAAkA"]
[Wed Feb 18 18:22:45.007510 2026] [:error] [pid 11607:tid 11619] [client 217.182.195.225:58434] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZWS9Rw91ggRx3FA7BfSYgAAAkQ"]
[Wed Feb 18 18:22:47.209439 2026] [:error] [pid 21847:tid 21860] [client 217.182.195.225:33078] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZWS9_y9A5wy4LuXmJ0BJQAAAAI"]
[Wed Feb 18 18:23:09.066291 2026] [:error] [pid 11610:tid 11694] [client 217.182.195.225:33088] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZWTDbWMUt4MNfN7mx24TAAAAtc"]
[Wed Feb 18 18:23:11.041433 2026] [:error] [pid 21847:tid 21862] [client 217.182.195.225:60626] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZWTD_y9A5wy4LuXmJ0BTgAAAAQ"]
[Wed Feb 18 18:23:13.173319 2026] [:error] [pid 11611:tid 11701] [client 217.182.195.225:60642] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZWTEe2m6IPN_aBZuKZU5QAAAwM"]
[Wed Feb 18 18:23:15.119397 2026] [:error] [pid 21848:tid 21912] [client 217.182.195.225:60658] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZWTE_bG91VRkVidT5chOwAAAFc"]
[Wed Feb 18 18:23:17.011765 2026] [:error] [pid 11607:tid 11637] [client 217.182.195.225:56514] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZWTFRw91ggRx3FA7BfSawAAAlY"]
[Wed Feb 18 18:23:19.155532 2026] [:error] [pid 11610:tid 11675] [client 217.182.195.225:56518] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZWTF7WMUt4MNfN7mx24XAAAAsQ"]
[Wed Feb 18 18:23:21.161922 2026] [:error] [pid 11607:tid 11636] [client 217.182.195.225:56524] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZWTGRw91ggRx3FA7BfSbwAAAlU"]
[Wed Feb 18 18:23:23.224852 2026] [:error] [pid 11609:tid 11665] [client 217.182.195.225:56534] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZWTG8hm3UjgaKO2Na8bmQAAApU"]
[Wed Feb 18 18:23:25.291968 2026] [:error] [pid 57014:tid 57036] [client 217.182.195.225:56538] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZWTHRNZnhS5qKtVIMIK-wAAARM"]
[Wed Feb 18 18:23:28.241653 2026] [:error] [pid 11512:tid 11527] [client 217.182.195.225:56112] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZWTIBGamu0xQuQ-jbFD4gAAAYo"]
[Wed Feb 18 18:23:32.045956 2026] [:error] [pid 11610:tid 11683] [client 217.182.195.225:56118] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZWTJLWMUt4MNfN7mx24ZAAAAsw"]
[Wed Feb 18 19:34:47.651097 2026] [:error] [pid 5561:tid 5581] [client 43.157.147.3:37512] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZWj10oQssCZYQ4NexbNaQAAAVE"]
[Wed Feb 18 19:44:17.247765 2026] [:error] [pid 11610:tid 11680] [client 43.157.175.122:35152] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZWmEbWMUt4MNfN7mx3GkwAAAsk"]
[Thu Feb 19 02:05:21.521949 2026] [:error] [pid 11548:tid 11588] [client 43.135.144.81:45522] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZX_YTSFZiBIZZvmIlNmKAAAAgo"]
[Thu Feb 19 02:17:25.437076 2026] [:error] [pid 11609:tid 11657] [client 103.65.236.149:52313] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aZYCNchm3UjgaKO2Na9ljwAAAo4"]
[Thu Feb 19 02:17:25.658582 2026] [:error] [pid 11548:tid 11585] [client 103.65.236.149:52349] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aZYCNTSFZiBIZZvmIlNpSAAAAgc"]
[Thu Feb 19 02:30:32.473220 2026] [:error] [pid 5561:tid 5567] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Feb 19 02:30:32.857850 2026] [:error] [pid 5561:tid 5573] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Thu Feb 19 02:30:33.085631 2026] [:error] [pid 5561:tid 5569] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/pouhg.php
[Thu Feb 19 02:30:33.234334 2026] [:error] [pid 5561:tid 5584] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Thu Feb 19 02:30:33.468011 2026] [:error] [pid 5561:tid 5566] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Thu Feb 19 02:30:33.617624 2026] [:error] [pid 5561:tid 5570] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Thu Feb 19 02:30:33.766526 2026] [:error] [pid 5561:tid 5574] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Thu Feb 19 02:30:33.915783 2026] [:error] [pid 5561:tid 5588] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Feb 19 02:30:35.327707 2026] [:error] [pid 5561:tid 5588] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/moshou.php
[Thu Feb 19 02:30:35.789644 2026] [:error] [pid 5561:tid 5575] [client 40.80.90.214:65124] File does not exist: /usr/local/apache/htdocs/suspended-page/seetox.php
[Thu Feb 19 02:30:36.203110 2026] [:error] [pid 5561:tid 5587] [client 40.80.90.214:65124] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZYFTEoQssCZYQ4NexYS1QAAAVc"]
[Thu Feb 19 02:30:37.440385 2026] [:error] [pid 57014:tid 57020] [client 40.80.90.214:65118] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZYFTRNZnhS5qKtVIMJoEQAAAQM"]
[Thu Feb 19 02:30:38.435677 2026] [:error] [pid 11610:tid 11686] [client 40.80.90.214:65090] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZYFTrWMUt4MNfN7mx0R_QAAAs8"]
[Thu Feb 19 02:30:39.410688 2026] [:error] [pid 5561:tid 5585] [client 40.80.90.214:65048] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZYFT0oQssCZYQ4NexYS1wAAAVU"]
[Thu Feb 19 02:30:41.179304 2026] [:error] [pid 11512:tid 11519] [client 40.80.90.214:63877] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aZYFURGamu0xQuQ-jbGKSgAAAYI"]
[Thu Feb 19 02:30:41.730348 2026] [:error] [pid 21847:tid 21860] [client 40.80.90.214:64617] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aZYFUfy9A5wy4LuXmJ1VUQAAAAI"]
[Thu Feb 19 02:30:42.836672 2026] [:error] [pid 21848:tid 21905] [client 40.80.90.214:65137] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aZYFUvbG91VRkVidT5eUoAAAAFA"]
[Thu Feb 19 02:30:44.899106 2026] [:error] [pid 11512:tid 11535] [client 40.80.90.214:64687] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aZYFVBGamu0xQuQ-jbGKTgAAAZI"]
[Thu Feb 19 02:30:45.618166 2026] [:error] [pid 21848:tid 21901] [client 40.80.90.214:65040] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZYFVfbG91VRkVidT5eUoQAAAEw"]
[Thu Feb 19 02:30:46.182897 2026] [:error] [pid 11548:tid 11588] [client 40.80.90.214:65079] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZYFVjSFZiBIZZvmIlNtLAAAAgo"]
[Thu Feb 19 02:30:47.307531 2026] [:error] [pid 11512:tid 11527] [client 40.80.90.214:65147] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZYFVxGamu0xQuQ-jbGKUgAAAYo"]
[Thu Feb 19 02:30:49.054986 2026] [:error] [pid 11548:tid 11594] [client 40.80.90.214:64589] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZYFWTSFZiBIZZvmIlNtLgAAAhA"]
[Thu Feb 19 02:30:49.907319 2026] [:error] [pid 11610:tid 11672] [client 40.80.90.214:65113] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZYFWbWMUt4MNfN7mx0SBwAAAsE"]
[Thu Feb 19 02:30:51.196627 2026] [:error] [pid 11512:tid 11525] [client 40.80.90.214:64610] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZYFWxGamu0xQuQ-jbGKVgAAAYg"]
[Thu Feb 19 02:30:52.340209 2026] [:error] [pid 11609:tid 11646] [client 40.80.90.214:64662] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZYFXMhm3UjgaKO2Na9nygAAAoM"]
[Thu Feb 19 02:30:53.427921 2026] [:error] [pid 11610:tid 11671] [client 40.80.90.214:65069] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZYFXbWMUt4MNfN7mx0SCgAAAsA"]
[Thu Feb 19 02:30:54.853337 2026] [:error] [pid 11611:tid 11699] [client 40.80.90.214:65110] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZYFXu2m6IPN_aBZuKanAAAAAwE"]
[Thu Feb 19 02:30:57.064588 2026] [:error] [pid 21848:tid 21889] [client 40.80.90.214:64599] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZYFYfbG91VRkVidT5eUrAAAAEA"]
[Thu Feb 19 02:30:57.787636 2026] [:error] [pid 11607:tid 11640] [client 40.80.90.214:65104] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZYFYRw91ggRx3FA7Bc0FAAAAlg"]
[Thu Feb 19 02:30:58.765696 2026] [:error] [pid 11610:tid 11683] [client 40.80.90.214:64676] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZYFYrWMUt4MNfN7mx0SEQAAAsw"]
[Thu Feb 19 02:30:59.934123 2026] [:error] [pid 11548:tid 11588] [client 40.80.90.214:64644] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZYFYzSFZiBIZZvmIlNtNQAAAgo"]
[Thu Feb 19 02:31:00.491426 2026] [:error] [pid 11607:tid 11619] [client 40.80.90.214:65029] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZYFZBw91ggRx3FA7Bc0GQAAAkQ"]
[Thu Feb 19 02:31:01.234052 2026] [:error] [pid 11607:tid 11617] [client 40.80.90.214:64682] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZYFZRw91ggRx3FA7Bc0GwAAAkI"]
[Thu Feb 19 02:31:02.546790 2026] [:error] [pid 11512:tid 11521] [client 40.80.90.214:65130] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZYFZhGamu0xQuQ-jbGKWAAAAYQ"]
[Thu Feb 19 02:31:03.660296 2026] [:error] [pid 57014:tid 57022] [client 40.80.90.214:64596] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZYFZxNZnhS5qKtVIMJoHgAAAQU"]
[Thu Feb 19 02:31:04.520802 2026] [:error] [pid 11609:tid 11653] [client 40.80.90.214:64614] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZYFaMhm3UjgaKO2Na9nywAAAoo"]
[Thu Feb 19 02:31:05.151069 2026] [:error] [pid 11611:tid 11698] [client 40.80.90.214:64586] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZYFae2m6IPN_aBZuKanBQAAAwA"]
[Thu Feb 19 02:31:05.534994 2026] [:error] [pid 57014:tid 57038] [client 40.80.90.214:65041] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZYFaRNZnhS5qKtVIMJoIgAAARU"]
[Thu Feb 19 02:31:06.189682 2026] [:error] [pid 57014:tid 57041] [client 40.80.90.214:64664] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZYFahNZnhS5qKtVIMJoJAAAARg"]
[Thu Feb 19 02:31:07.101490 2026] [:error] [pid 11610:tid 11679] [client 40.80.90.214:65140] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZYFa7WMUt4MNfN7mx0SGQAAAsg"]
[Thu Feb 19 02:31:07.817907 2026] [:error] [pid 11611:tid 11705] [client 40.80.90.214:65084] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZYFa-2m6IPN_aBZuKanCwAAAwc"]
[Thu Feb 19 02:31:08.317429 2026] [:error] [pid 5561:tid 5583] [client 40.80.90.214:64625] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZYFbEoQssCZYQ4NexYS7QAAAVM"]
[Thu Feb 19 02:31:08.956043 2026] [:error] [pid 11611:tid 11701] [client 40.80.90.214:64695] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYFbO2m6IPN_aBZuKanDwAAAwM"]
[Thu Feb 19 02:31:09.458259 2026] [:error] [pid 21847:tid 21874] [client 40.80.90.214:65033] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYFbfy9A5wy4LuXmJ1VVQAAABA"]
[Thu Feb 19 02:31:09.882479 2026] [:error] [pid 21847:tid 21867] [client 40.80.90.214:64679] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYFbfy9A5wy4LuXmJ1VVwAAAAk"]
[Thu Feb 19 02:31:10.321473 2026] [:error] [pid 21848:tid 21892] [client 40.80.90.214:64700] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYFbvbG91VRkVidT5eUsQAAAEM"]
[Thu Feb 19 02:31:11.002405 2026] [:error] [pid 11611:tid 11718] [client 40.80.90.214:64618] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZYFb-2m6IPN_aBZuKanFQAAAxQ"]
[Thu Feb 19 02:31:11.868119 2026] [:error] [pid 11607:tid 11616] [client 40.80.90.214:65089] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZYFbxw91ggRx3FA7Bc0JAAAAkE"]
[Thu Feb 19 02:31:12.289632 2026] [:error] [pid 21847:tid 21875] [client 40.80.90.214:64623] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZYFcPy9A5wy4LuXmJ1VXQAAABE"]
[Thu Feb 19 02:31:12.913222 2026] [:error] [pid 11611:tid 11699] [client 40.80.90.214:64670] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZYFcO2m6IPN_aBZuKanFwAAAwE"]
[Thu Feb 19 02:31:13.449016 2026] [:error] [pid 21847:tid 21868] [client 40.80.90.214:64609] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZYFcfy9A5wy4LuXmJ1VYgAAAAo"]
[Thu Feb 19 02:31:14.405283 2026] [:error] [pid 57014:tid 57018] [client 40.80.90.214:65027] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZYFchNZnhS5qKtVIMJoJwAAAQE"]
[Thu Feb 19 02:31:14.957238 2026] [:error] [pid 57014:tid 57026] [client 40.80.90.214:64703] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZYFchNZnhS5qKtVIMJoKAAAAQk"]
[Thu Feb 19 02:31:15.523603 2026] [:error] [pid 57014:tid 57034] [client 40.80.90.214:64613] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZYFcxNZnhS5qKtVIMJoOAAAARE"]
[Thu Feb 19 02:31:16.349326 2026] [:error] [pid 21847:tid 21866] [client 40.80.90.214:64585] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZYFdPy9A5wy4LuXmJ1VZgAAAAg"]
[Thu Feb 19 02:31:17.211914 2026] [:error] [pid 11548:tid 11594] [client 40.80.90.214:64592] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZYFdTSFZiBIZZvmIlNtRwAAAhA"]
[Thu Feb 19 02:31:17.658755 2026] [:error] [pid 21848:tid 21889] [client 40.80.90.214:64689] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZYFdfbG91VRkVidT5eUtAAAAEA"]
[Thu Feb 19 02:31:18.152422 2026] [:error] [pid 5561:tid 5575] [client 40.80.90.214:64598] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZYFdkoQssCZYQ4NexYS9gAAAUs"]
[Thu Feb 19 02:31:18.619688 2026] [:error] [pid 21847:tid 21877] [client 40.80.90.214:64577] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZYFdvy9A5wy4LuXmJ1VaAAAABM"]
[Thu Feb 19 02:31:19.007715 2026] [:error] [pid 11548:tid 11591] [client 40.80.90.214:64701] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZYFdzSFZiBIZZvmIlNtTAAAAg0"]
[Thu Feb 19 02:31:19.721519 2026] [:error] [pid 11611:tid 11706] [client 40.80.90.214:64657] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZYFd-2m6IPN_aBZuKanHAAAAwg"]
[Thu Feb 19 02:31:20.502422 2026] [:error] [pid 11609:tid 11663] [client 40.80.90.214:64630] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZYFeMhm3UjgaKO2Na9n1AAAApM"]
[Thu Feb 19 02:31:20.904144 2026] [:error] [pid 11548:tid 11597] [client 40.80.90.214:64591] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZYFeDSFZiBIZZvmIlNtTQAAAhM"]
[Thu Feb 19 02:31:21.403478 2026] [:error] [pid 11610:tid 11689] [client 40.80.90.214:63921] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZYFebWMUt4MNfN7mx0SKgAAAtI"]
[Thu Feb 19 02:31:21.743225 2026] [:error] [pid 5561:tid 5564] [client 40.80.90.214:64636] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZYFeUoQssCZYQ4NexYS-AAAAUA"]
[Thu Feb 19 02:31:22.607731 2026] [:error] [pid 21848:tid 21890] [client 40.80.90.214:65138] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZYFevbG91VRkVidT5eUtQAAAEE"]
[Thu Feb 19 02:31:23.154577 2026] [:error] [pid 11607:tid 11630] [client 40.80.90.214:64641] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZYFexw91ggRx3FA7Bc0VgAAAk8"]
[Thu Feb 19 02:31:23.571699 2026] [:error] [pid 11609:tid 11657] [client 40.80.90.214:64651] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZYFe8hm3UjgaKO2Na9n1gAAAo4"]
[Thu Feb 19 02:31:24.165084 2026] [:error] [pid 11607:tid 11635] [client 40.80.90.214:65112] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZYFfBw91ggRx3FA7Bc0WAAAAlQ"]
[Thu Feb 19 02:31:24.775481 2026] [:error] [pid 5561:tid 5579] [client 40.80.90.214:63950] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZYFfEoQssCZYQ4NexYS-gAAAU8"]
[Thu Feb 19 02:31:25.289320 2026] [:error] [pid 5561:tid 5568] [client 40.80.90.214:65035] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZYFfUoQssCZYQ4NexYS_AAAAUQ"]
[Thu Feb 19 02:31:26.073488 2026] [:error] [pid 11611:tid 11712] [client 40.80.90.214:64611] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZYFfu2m6IPN_aBZuKanIAAAAw4"]
[Thu Feb 19 02:31:26.672170 2026] [:error] [pid 11611:tid 11715] [client 40.80.90.214:64622] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZYFfu2m6IPN_aBZuKanIgAAAxE"]
[Thu Feb 19 02:31:27.213332 2026] [:error] [pid 11548:tid 11578] [client 40.80.90.214:64656] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZYFfzSFZiBIZZvmIlNtVAAAAgA"]
[Thu Feb 19 02:31:27.627432 2026] [:error] [pid 21847:tid 21882] [client 40.80.90.214:65108] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZYFf_y9A5wy4LuXmJ1VcAAAABg"]
[Thu Feb 19 02:31:28.898093 2026] [:error] [pid 11611:tid 11713] [client 40.80.90.214:65145] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZYFgO2m6IPN_aBZuKanKAAAAw8"]
[Thu Feb 19 02:31:30.323654 2026] [:error] [pid 11609:tid 11653] [client 40.80.90.214:65121] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZYFgshm3UjgaKO2Na9n2AAAAoo"]
[Thu Feb 19 02:31:30.797126 2026] [:error] [pid 11609:tid 11667] [client 40.80.90.214:63967] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZYFgshm3UjgaKO2Na9n2wAAApc"]
[Thu Feb 19 02:31:32.160800 2026] [:error] [pid 11609:tid 11652] [client 40.80.90.214:65076] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZYFhMhm3UjgaKO2Na9n3gAAAok"]
[Thu Feb 19 02:31:32.578337 2026] [:error] [pid 11512:tid 11536] [client 40.80.90.214:63875] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZYFhBGamu0xQuQ-jbGKeQAAAZM"]
[Thu Feb 19 02:31:33.524155 2026] [:error] [pid 11548:tid 11589] [client 40.80.90.214:64674] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZYFhTSFZiBIZZvmIlNtVgAAAgs"]
[Thu Feb 19 02:31:34.218444 2026] [:error] [pid 11610:tid 11689] [client 40.80.90.214:65092] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZYFhrWMUt4MNfN7mx0SMAAAAtI"]
[Thu Feb 19 02:31:34.548006 2026] [:error] [pid 57014:tid 57026] [client 40.80.90.214:65068] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aZYFhhNZnhS5qKtVIMJoTAAAAQk"]
[Thu Feb 19 02:31:34.922748 2026] [:error] [pid 11609:tid 11656] [client 40.80.90.214:64652] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aZYFhshm3UjgaKO2Na9n5AAAAo0"]
[Thu Feb 19 02:31:35.432217 2026] [:error] [pid 11610:tid 11681] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/kolda.php
[Thu Feb 19 02:31:35.583601 2026] [:error] [pid 11610:tid 11678] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Thu Feb 19 02:31:35.732010 2026] [:error] [pid 11610:tid 11676] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/god.php
[Thu Feb 19 02:31:35.896243 2026] [:error] [pid 11610:tid 11695] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Feb 19 02:31:36.045680 2026] [:error] [pid 11610:tid 11685] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Thu Feb 19 02:31:36.194188 2026] [:error] [pid 11610:tid 11680] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/un.php
[Thu Feb 19 02:31:36.453978 2026] [:error] [pid 11610:tid 11675] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Feb 19 02:31:36.603265 2026] [:error] [pid 11610:tid 11684] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Thu Feb 19 02:31:36.768864 2026] [:error] [pid 11610:tid 11671] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/login8.php
[Thu Feb 19 02:31:36.928525 2026] [:error] [pid 11610:tid 11691] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/nnyvn.php
[Thu Feb 19 02:31:37.078445 2026] [:error] [pid 11610:tid 11693] [client 40.80.90.214:64607] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Thu Feb 19 02:31:37.225019 2026] [:error] [pid 11610:tid 11673] [client 40.80.90.214:64607] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZYFibWMUt4MNfN7mx0SPwAAAsI"]
[Thu Feb 19 02:31:38.161726 2026] [:error] [pid 5561:tid 5564] [client 40.80.90.214:64677] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZYFikoQssCZYQ4NexYTDgAAAUA"]
[Thu Feb 19 02:31:38.607960 2026] [:error] [pid 11610:tid 11682] [client 40.80.90.214:64658] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZYFirWMUt4MNfN7mx0SQAAAAss"]
[Thu Feb 19 02:31:38.995458 2026] [:error] [pid 11610:tid 11681] [client 40.80.90.214:65025] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZYFirWMUt4MNfN7mx0SQgAAAso"]
[Thu Feb 19 02:31:40.233360 2026] [:error] [pid 11609:tid 11654] [client 40.80.90.214:65100] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZYFjMhm3UjgaKO2Na9n5wAAAos"]
[Thu Feb 19 02:31:40.959417 2026] [:error] [pid 11609:tid 11650] [client 40.80.90.214:65097] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZYFjMhm3UjgaKO2Na9n6AAAAoc"]
[Thu Feb 19 02:31:42.030775 2026] [:error] [pid 11512:tid 11534] [client 40.80.90.214:65101] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZYFjhGamu0xQuQ-jbGKgQAAAZE"]
[Thu Feb 19 02:31:43.242413 2026] [:error] [pid 11609:tid 11663] [client 40.80.90.214:64696] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZYFj8hm3UjgaKO2Na9n6wAAApM"]
[Thu Feb 19 02:31:44.427844 2026] [:error] [pid 5561:tid 5584] [client 40.80.90.214:64661] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aZYFkEoQssCZYQ4NexYTEQAAAVQ"]
[Thu Feb 19 02:31:45.449499 2026] [:error] [pid 11610:tid 11683] [client 40.80.90.214:64601] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aZYFkbWMUt4MNfN7mx0SRAAAAsw"]
[Thu Feb 19 02:31:46.224192 2026] [:error] [pid 5561:tid 5581] [client 40.80.90.214:65056] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aZYFkkoQssCZYQ4NexYTEwAAAVE"]
[Thu Feb 19 02:31:46.968491 2026] [:error] [pid 11611:tid 11707] [client 40.80.90.214:64659] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aZYFku2m6IPN_aBZuKanNgAAAwk"]
[Thu Feb 19 02:31:47.936252 2026] [:error] [pid 11548:tid 11600] [client 40.80.90.214:65075] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ya.php"] [unique_id "aZYFkzSFZiBIZZvmIlNtWwAAAhY"]
[Thu Feb 19 02:31:48.972076 2026] [:error] [pid 21848:tid 21893] [client 40.80.90.214:65051] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ya.php"] [unique_id "aZYFlPbG91VRkVidT5eUvQAAAEQ"]
[Thu Feb 19 02:31:49.789779 2026] [:error] [pid 11611:tid 11717] [client 40.80.90.214:64640] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ya.php"] [unique_id "aZYFle2m6IPN_aBZuKanOQAAAxM"]
[Thu Feb 19 02:31:50.893869 2026] [:error] [pid 11609:tid 11645] [client 40.80.90.214:65123] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ya.php"] [unique_id "aZYFlshm3UjgaKO2Na9n7QAAAoI"]
[Thu Feb 19 02:31:51.868987 2026] [:error] [pid 21848:tid 21891] [client 40.80.90.214:63463] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aZYFl_bG91VRkVidT5eUwQAAAEI"]
[Thu Feb 19 02:31:53.036282 2026] [:error] [pid 57014:tid 57017] [client 40.80.90.214:63966] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aZYFmRNZnhS5qKtVIMJoWgAAAQA"]
[Thu Feb 19 02:31:54.967469 2026] [:error] [pid 21848:tid 21911] [client 40.80.90.214:65107] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aZYFmvbG91VRkVidT5eUxwAAAFY"]
[Thu Feb 19 02:31:56.776864 2026] [:error] [pid 21848:tid 21893] [client 40.80.90.214:65049] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aZYFnPbG91VRkVidT5eUygAAAEQ"]
[Thu Feb 19 02:31:57.781469 2026] [:error] [pid 21848:tid 21899] [client 40.80.90.214:64699] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aZYFnfbG91VRkVidT5eUzAAAAEo"]
[Thu Feb 19 02:31:59.760701 2026] [:error] [pid 21847:tid 21875] [client 40.80.90.214:65082] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aZYFn_y9A5wy4LuXmJ1VjgAAABE"]
[Thu Feb 19 02:32:00.335392 2026] [:error] [pid 21848:tid 21895] [client 40.80.90.214:63894] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aZYFoPbG91VRkVidT5eU0gAAAEY"]
[Thu Feb 19 02:32:00.929602 2026] [:error] [pid 11512:tid 11526] [client 40.80.90.214:65031] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aZYFoBGamu0xQuQ-jbGKiAAAAYk"]
[Thu Feb 19 02:32:01.713965 2026] [:error] [pid 21848:tid 21897] [client 40.80.90.214:64576] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aZYFofbG91VRkVidT5eU0wAAAEg"]
[Thu Feb 19 02:32:02.261428 2026] [:error] [pid 21847:tid 21858] [client 40.80.90.214:65148] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aZYFovy9A5wy4LuXmJ1VkQAAAAA"]
[Thu Feb 19 02:32:02.855953 2026] [:error] [pid 11609:tid 11662] [client 40.80.90.214:64590] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aZYFoshm3UjgaKO2Na9n8gAAApI"]
[Thu Feb 19 02:32:03.870114 2026] [:error] [pid 5561:tid 5570] [client 40.80.90.214:63367] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aZYFo0oQssCZYQ4NexYTGgAAAUY"]
[Thu Feb 19 02:32:04.526962 2026] [:error] [pid 5561:tid 5574] [client 40.80.90.214:64675] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aZYFpEoQssCZYQ4NexYTGwAAAUo"]
[Thu Feb 19 02:32:05.102503 2026] [:error] [pid 11609:tid 11652] [client 40.80.90.214:64579] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aZYFpchm3UjgaKO2Na9n8wAAAok"]
[Thu Feb 19 02:32:05.863279 2026] [:error] [pid 11512:tid 11525] [client 40.80.90.214:64645] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aZYFpRGamu0xQuQ-jbGKjgAAAYg"]
[Thu Feb 19 02:32:06.471063 2026] [:error] [pid 57014:tid 57029] [client 40.80.90.214:64650] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aZYFphNZnhS5qKtVIMJoXwAAAQw"]
[Thu Feb 19 02:32:07.257172 2026] [:error] [pid 11610:tid 11684] [client 40.80.90.214:65126] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aZYFp7WMUt4MNfN7mx0SVgAAAs0"]
[Thu Feb 19 02:32:07.907518 2026] [:error] [pid 5561:tid 5582] [client 40.80.90.214:63984] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aZYFp0oQssCZYQ4NexYTHgAAAVI"]
[Thu Feb 19 02:32:08.864203 2026] [:error] [pid 11611:tid 11705] [client 40.80.90.214:64668] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aZYFqO2m6IPN_aBZuKanQgAAAwc"]
[Thu Feb 19 02:32:10.442380 2026] [:error] [pid 11512:tid 11520] [client 40.80.90.214:65026] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aZYFqhGamu0xQuQ-jbGKkQAAAYM"]
[Thu Feb 19 02:32:12.213262 2026] [:error] [pid 5561:tid 5581] [client 40.80.90.214:64616] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aZYFrEoQssCZYQ4NexYTIAAAAVE"]
[Thu Feb 19 02:32:13.248271 2026] [:error] [pid 57014:tid 57024] [client 40.80.90.214:63911] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aZYFrRNZnhS5qKtVIMJoZgAAAQc"]
[Thu Feb 19 02:32:14.431866 2026] [:error] [pid 11610:tid 11680] [client 40.80.90.214:65111] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aZYFrrWMUt4MNfN7mx0SYAAAAsk"]
[Thu Feb 19 02:32:15.285620 2026] [:error] [pid 11512:tid 11532] [client 40.80.90.214:65086] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aZYFrxGamu0xQuQ-jbGKlAAAAY8"]
[Thu Feb 19 02:32:16.294792 2026] [:error] [pid 11548:tid 11595] [client 40.80.90.214:65150] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aZYFsDSFZiBIZZvmIlNtgQAAAhE"]
[Thu Feb 19 02:32:16.783105 2026] [:error] [pid 21848:tid 21908] [client 40.80.90.214:64665] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aZYFsPbG91VRkVidT5eU2wAAAFM"]
[Thu Feb 19 02:32:18.250863 2026] [:error] [pid 21848:tid 21902] [client 40.80.90.214:65127] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aZYFsvbG91VRkVidT5eU3AAAAE0"]
[Thu Feb 19 02:32:19.002828 2026] [:error] [pid 21848:tid 21892] [client 40.80.90.214:65095] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aZYFs_bG91VRkVidT5eU3gAAAEM"]
[Thu Feb 19 02:32:19.634158 2026] [:error] [pid 11512:tid 11533] [client 40.80.90.214:65063] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aZYFsxGamu0xQuQ-jbGKlwAAAZA"]
[Thu Feb 19 02:32:20.301303 2026] [:error] [pid 11512:tid 11539] [client 40.80.90.214:64663] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aZYFtBGamu0xQuQ-jbGKmAAAAZY"]
[Thu Feb 19 02:32:21.568135 2026] [:error] [pid 11548:tid 11600] [client 40.80.90.214:64683] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aZYFtTSFZiBIZZvmIlNtiAAAAhY"]
[Thu Feb 19 02:32:21.948642 2026] [:error] [pid 21848:tid 21909] [client 40.80.90.214:63917] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aZYFtfbG91VRkVidT5eU5QAAAFQ"]
[Thu Feb 19 02:32:22.625671 2026] [:error] [pid 21848:tid 21895] [client 40.80.90.214:63954] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aZYFtvbG91VRkVidT5eU5gAAAEY"]
[Thu Feb 19 02:32:23.356495 2026] [:error] [pid 5561:tid 5585] [client 40.80.90.214:64639] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aZYFt0oQssCZYQ4NexYTLQAAAVU"]
[Thu Feb 19 02:32:24.291403 2026] [:error] [pid 21848:tid 21902] [client 40.80.90.214:63434] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aZYFuPbG91VRkVidT5eU6gAAAE0"]
[Thu Feb 19 02:32:24.839828 2026] [:error] [pid 21847:tid 21879] [client 40.80.90.214:63886] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aZYFuPy9A5wy4LuXmJ1VowAAABU"]
[Thu Feb 19 02:32:25.893687 2026] [:error] [pid 5561:tid 5567] [client 40.80.90.214:63448] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZYFuUoQssCZYQ4NexYTMQAAAUM"]
[Thu Feb 19 02:32:26.897589 2026] [:error] [pid 5561:tid 5581] [client 40.80.90.214:64694] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZYFukoQssCZYQ4NexYTNAAAAVE"]
[Thu Feb 19 02:32:27.490975 2026] [:error] [pid 11607:tid 11629] [client 40.80.90.214:64680] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZYFuxw91ggRx3FA7Bc0bQAAAk4"]
[Thu Feb 19 02:32:28.327597 2026] [:error] [pid 21848:tid 21891] [client 40.80.90.214:64693] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZYFvPbG91VRkVidT5eU7QAAAEI"]
[Thu Feb 19 02:32:29.633538 2026] [:error] [pid 11607:tid 11634] [client 40.80.90.214:65065] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZYFvRw91ggRx3FA7Bc0cAAAAlM"]
[Thu Feb 19 02:32:30.793019 2026] [:error] [pid 21848:tid 21906] [client 40.80.90.214:65094] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZYFvvbG91VRkVidT5eU7wAAAFE"]
[Thu Feb 19 02:32:31.819745 2026] [:error] [pid 5561:tid 5585] [client 40.80.90.214:64582] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZYFv0oQssCZYQ4NexYTNwAAAVU"]
[Thu Feb 19 02:32:32.686002 2026] [:error] [pid 11609:tid 11644] [client 40.80.90.214:65074] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZYFwMhm3UjgaKO2Na9n9wAAAoE"]
[Thu Feb 19 02:32:33.778023 2026] [:error] [pid 11609:tid 11646] [client 40.80.90.214:64621] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZYFwchm3UjgaKO2Na9n-wAAAoM"]
[Thu Feb 19 02:32:34.619783 2026] [:error] [pid 57014:tid 57021] [client 40.80.90.214:65131] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZYFwhNZnhS5qKtVIMJobAAAAQQ"]
[Thu Feb 19 02:32:35.201018 2026] [:error] [pid 11609:tid 11653] [client 40.80.90.214:63477] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZYFw8hm3UjgaKO2Na9n_AAAAoo"]
[Thu Feb 19 02:32:35.943940 2026] [:error] [pid 57014:tid 57038] [client 40.80.90.214:65059] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZYFwxNZnhS5qKtVIMJobgAAARU"]
[Thu Feb 19 02:32:36.635897 2026] [:error] [pid 21848:tid 21892] [client 40.80.90.214:62835] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aZYFxPbG91VRkVidT5eU8QAAAEM"]
[Thu Feb 19 02:32:37.595724 2026] [:error] [pid 11610:tid 11677] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/dev1s.php
[Thu Feb 19 02:32:38.017984 2026] [:error] [pid 11610:tid 11677] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/ffd.php
[Thu Feb 19 02:32:38.180454 2026] [:error] [pid 11610:tid 11675] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/admiin.php
[Thu Feb 19 02:32:38.347165 2026] [:error] [pid 11610:tid 11684] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Thu Feb 19 02:32:38.497321 2026] [:error] [pid 11610:tid 11679] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Feb 19 02:32:38.646989 2026] [:error] [pid 11610:tid 11673] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/vxrl.php
[Thu Feb 19 02:32:38.797056 2026] [:error] [pid 11610:tid 11691] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Thu Feb 19 02:32:38.946449 2026] [:error] [pid 11610:tid 11689] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Thu Feb 19 02:32:39.196817 2026] [:error] [pid 11610:tid 11682] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Thu Feb 19 02:32:39.350536 2026] [:error] [pid 11610:tid 11681] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/vxrl.php
[Thu Feb 19 02:32:39.521733 2026] [:error] [pid 11610:tid 11678] [client 40.80.90.214:65149] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Thu Feb 19 02:32:39.668891 2026] [:error] [pid 11610:tid 11688] [client 40.80.90.214:65149] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aZYFx7WMUt4MNfN7mx0SgAAAAtE"]
[Thu Feb 19 02:32:40.502474 2026] [:error] [pid 21847:tid 21862] [client 40.80.90.214:65030] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aZYFyPy9A5wy4LuXmJ1VsgAAAAQ"]
[Thu Feb 19 02:32:41.289584 2026] [:error] [pid 11609:tid 11643] [client 40.80.90.214:63433] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aZYFychm3UjgaKO2Na9oAgAAAoA"]
[Thu Feb 19 02:32:41.966230 2026] [:error] [pid 11548:tid 11598] [client 40.80.90.214:64619] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aZYFyTSFZiBIZZvmIlNtogAAAhQ"]
[Thu Feb 19 02:32:42.514110 2026] [:error] [pid 11609:tid 11651] [client 40.80.90.214:64648] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZYFyshm3UjgaKO2Na9oAwAAAog"]
[Thu Feb 19 02:32:43.513474 2026] [:error] [pid 11548:tid 11582] [client 40.80.90.214:63874] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZYFyzSFZiBIZZvmIlNtpQAAAgQ"]
[Thu Feb 19 02:32:44.112858 2026] [:error] [pid 5561:tid 5581] [client 40.80.90.214:65106] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZYFzEoQssCZYQ4NexYTPAAAAVE"]
[Thu Feb 19 02:32:45.247636 2026] [:error] [pid 11548:tid 11600] [client 40.80.90.214:63956] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aZYFzTSFZiBIZZvmIlNtqQAAAhY"]
[Thu Feb 19 02:32:46.228084 2026] [:error] [pid 11610:tid 11674] [client 40.80.90.214:63895] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aZYFzrWMUt4MNfN7mx0SgwAAAsM"]
[Thu Feb 19 02:32:48.155995 2026] [:error] [pid 11607:tid 11630] [client 40.80.90.214:65052] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aZYF0Bw91ggRx3FA7Bc0fgAAAk8"]
[Thu Feb 19 02:32:49.535991 2026] [:error] [pid 21847:tid 21874] [client 40.80.90.214:64594] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aZYF0fy9A5wy4LuXmJ1VtwAAABA"]
[Thu Feb 19 02:32:50.371542 2026] [:error] [pid 21847:tid 21878] [client 40.80.90.214:65091] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aZYF0vy9A5wy4LuXmJ1VugAAABQ"]
[Thu Feb 19 02:32:51.084087 2026] [:error] [pid 11607:tid 11629] [client 40.80.90.214:64628] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aZYF0xw91ggRx3FA7Bc0gwAAAk4"]
[Thu Feb 19 02:32:51.989571 2026] [:error] [pid 11607:tid 11618] [client 40.80.90.214:65109] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aZYF0xw91ggRx3FA7Bc0hwAAAkM"]
[Thu Feb 19 02:32:52.963041 2026] [:error] [pid 21848:tid 21906] [client 40.80.90.214:64584] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aZYF1PbG91VRkVidT5eU-gAAAFE"]
[Thu Feb 19 02:32:53.937257 2026] [:error] [pid 21848:tid 21898] [client 40.80.90.214:63876] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aZYF1fbG91VRkVidT5eU-wAAAEk"]
[Thu Feb 19 02:32:54.578504 2026] [:error] [pid 11611:tid 11712] [client 40.80.90.214:64578] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aZYF1u2m6IPN_aBZuKanUAAAAw4"]
[Thu Feb 19 02:32:55.572227 2026] [:error] [pid 57014:tid 57023] [client 40.80.90.214:65039] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aZYF1xNZnhS5qKtVIMJoeQAAAQY"]
[Thu Feb 19 02:32:56.408440 2026] [:error] [pid 11610:tid 11678] [client 40.80.90.214:65103] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aZYF2LWMUt4MNfN7mx0SiAAAAsc"]
[Thu Feb 19 02:32:57.402833 2026] [:error] [pid 57014:tid 57039] [client 40.80.90.214:65141] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aZYF2RNZnhS5qKtVIMJofAAAARY"]
[Thu Feb 19 02:32:58.537875 2026] [:error] [pid 21848:tid 21910] [client 40.80.90.214:63970] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/i.php"] [unique_id "aZYF2vbG91VRkVidT5eU_gAAAFU"]
[Thu Feb 19 02:32:59.240416 2026] [:error] [pid 11610:tid 11686] [client 40.80.90.214:64678] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/i.php"] [unique_id "aZYF27WMUt4MNfN7mx0SjQAAAs8"]
[Thu Feb 19 02:32:59.771131 2026] [:error] [pid 11548:tid 11600] [client 40.80.90.214:63955] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/i.php"] [unique_id "aZYF2zSFZiBIZZvmIlNtsAAAAhY"]
[Thu Feb 19 02:33:00.500493 2026] [:error] [pid 11548:tid 11579] [client 40.80.90.214:65038] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/i.php"] [unique_id "aZYF3DSFZiBIZZvmIlNtswAAAgE"]
[Thu Feb 19 02:33:01.509399 2026] [:error] [pid 11548:tid 11602] [client 40.80.90.214:65073] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZYF3TSFZiBIZZvmIlNtuAAAAhg"]
[Thu Feb 19 02:33:02.421947 2026] [:error] [pid 11609:tid 11666] [client 40.80.90.214:65044] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZYF3shm3UjgaKO2Na9oCQAAApY"]
[Thu Feb 19 02:33:03.738185 2026] [:error] [pid 11607:tid 11625] [client 40.80.90.214:63428] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZYF3xw91ggRx3FA7Bc0kgAAAko"]
[Thu Feb 19 02:33:05.004321 2026] [:error] [pid 11548:tid 11600] [client 40.80.90.214:64587] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZYF4TSFZiBIZZvmIlNtvQAAAhY"]
[Thu Feb 19 02:33:05.679014 2026] [:error] [pid 11548:tid 11601] [client 40.80.90.214:63443] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZYF4TSFZiBIZZvmIlNtwgAAAhc"]
[Thu Feb 19 02:33:06.146910 2026] [:error] [pid 11609:tid 11646] [client 40.80.90.214:63946] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZYF4shm3UjgaKO2Na9oDQAAAoM"]
[Thu Feb 19 02:33:06.535918 2026] [:error] [pid 11548:tid 11593] [client 40.80.90.214:64653] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZYF4jSFZiBIZZvmIlNtxQAAAg8"]
[Thu Feb 19 02:33:07.223314 2026] [:error] [pid 11512:tid 11541] [client 40.80.90.214:63901] [client 40.80.90.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZYF4xGamu0xQuQ-jbGKoQAAAZg"]
[Thu Feb 19 02:55:16.332894 2026] [:error] [pid 11512:tid 11531] [client 67.144.16.170:60507] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZYLFBGamu0xQuQ-jbGNxAAAAY4"]
[Thu Feb 19 02:55:16.797873 2026] [:error] [pid 11609:tid 11644] [client 67.144.16.170:60961] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZYLFMhm3UjgaKO2Na9rCQAAAoE"]
[Thu Feb 19 02:55:17.262612 2026] [:error] [pid 11548:tid 11595] [client 67.144.16.170:60968] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZYLFTSFZiBIZZvmIlNznQAAAhE"]
[Thu Feb 19 02:55:19.811279 2026] [:error] [pid 11548:tid 11584] [client 67.144.16.170:61004] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZYLFzSFZiBIZZvmIlNzngAAAgY"]
[Thu Feb 19 02:55:20.275926 2026] [:error] [pid 21847:tid 21881] [client 67.144.16.170:61020] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZYLGPy9A5wy4LuXmJ1ZJwAAABc"]
[Thu Feb 19 02:55:22.260660 2026] [:error] [pid 21847:tid 21880] [client 67.144.16.170:61053] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZYLGvy9A5wy4LuXmJ1ZLAAAABY"]
[Thu Feb 19 02:55:22.725691 2026] [:error] [pid 5561:tid 5579] [client 67.144.16.170:61058] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZYLGkoQssCZYQ4NexYW4wAAAU8"]
[Thu Feb 19 02:55:24.750040 2026] [:error] [pid 11610:tid 11686] [client 67.144.16.170:61095] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZYLHLWMUt4MNfN7mx0WrgAAAs8"]
[Thu Feb 19 02:55:25.215250 2026] [:error] [pid 11609:tid 11668] [client 67.144.16.170:61099] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZYLHchm3UjgaKO2Na9rDAAAApg"]
[Thu Feb 19 02:55:27.448170 2026] [:error] [pid 11611:tid 11701] [client 67.144.16.170:61147] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZYLH-2m6IPN_aBZuKaqzQAAAwM"]
[Thu Feb 19 02:55:27.913046 2026] [:error] [pid 11548:tid 11588] [client 67.144.16.170:61151] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZYLHzSFZiBIZZvmIlNzpQAAAgo"]
[Thu Feb 19 02:55:29.969261 2026] [:error] [pid 11512:tid 11522] [client 67.144.16.170:61186] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZYLIRGamu0xQuQ-jbGNzQAAAYU"]
[Thu Feb 19 02:55:30.432902 2026] [:error] [pid 11607:tid 11631] [client 67.144.16.170:61191] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZYLIhw91ggRx3FA7Bc5PgAAAlA"]
[Thu Feb 19 02:55:32.665767 2026] [:error] [pid 11611:tid 11713] [client 67.144.16.170:61229] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZYLJO2m6IPN_aBZuKaq0gAAAw8"]
[Thu Feb 19 02:55:33.135278 2026] [:error] [pid 11607:tid 11640] [client 67.144.16.170:61234] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZYLJRw91ggRx3FA7Bc5RwAAAlg"]
[Thu Feb 19 02:55:35.336776 2026] [:error] [pid 5561:tid 5582] [client 67.144.16.170:61282] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZYLJ0oQssCZYQ4NexYW7wAAAVI"]
[Thu Feb 19 02:55:35.800775 2026] [:error] [pid 11609:tid 11647] [client 67.144.16.170:61286] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZYLJ8hm3UjgaKO2Na9rEwAAAoQ"]
[Thu Feb 19 02:55:38.362338 2026] [:error] [pid 5561:tid 5567] [client 67.144.16.170:61337] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZYLKkoQssCZYQ4NexYW8gAAAUM"]
[Thu Feb 19 02:55:38.827011 2026] [:error] [pid 11611:tid 11720] [client 67.144.16.170:61348] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZYLKu2m6IPN_aBZuKaq2QAAAxY"]
[Thu Feb 19 02:55:41.002307 2026] [:error] [pid 11610:tid 11678] [client 67.144.16.170:61390] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZYLLbWMUt4MNfN7mx0WvgAAAsc"]
[Thu Feb 19 02:55:41.466695 2026] [:error] [pid 21848:tid 21901] [client 67.144.16.170:61401] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZYLLfbG91VRkVidT5ea6gAAAEw"]
[Thu Feb 19 02:55:43.906221 2026] [:error] [pid 21848:tid 21896] [client 67.144.16.170:61449] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZYLL_bG91VRkVidT5ea8AAAAEc"]
[Thu Feb 19 02:55:44.370754 2026] [:error] [pid 11609:tid 11646] [client 67.144.16.170:61468] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZYLMMhm3UjgaKO2Na9rGgAAAoM"]
[Thu Feb 19 02:55:46.606705 2026] [:error] [pid 11607:tid 11615] [client 67.144.16.170:61503] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZYLMhw91ggRx3FA7Bc5XwAAAkA"]
[Thu Feb 19 02:55:47.071740 2026] [:error] [pid 11607:tid 11634] [client 67.144.16.170:61512] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZYLMxw91ggRx3FA7Bc5YAAAAlM"]
[Thu Feb 19 02:55:49.283677 2026] [:error] [pid 11609:tid 11667] [client 67.144.16.170:61556] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZYLNchm3UjgaKO2Na9rHQAAApc"]
[Thu Feb 19 02:55:49.747591 2026] [:error] [pid 11611:tid 11703] [client 67.144.16.170:61564] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZYLNe2m6IPN_aBZuKaq5QAAAwU"]
[Thu Feb 19 02:55:51.920389 2026] [:error] [pid 11512:tid 11526] [client 67.144.16.170:61597] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZYLNxGamu0xQuQ-jbGN4gAAAYk"]
[Thu Feb 19 02:55:52.385462 2026] [:error] [pid 21847:tid 21882] [client 67.144.16.170:61606] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZYLOPy9A5wy4LuXmJ1ZUgAAABg"]
[Thu Feb 19 02:55:54.695324 2026] [:error] [pid 21847:tid 21881] [client 67.144.16.170:61665] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZYLOvy9A5wy4LuXmJ1ZVQAAABc"]
[Thu Feb 19 02:55:55.158827 2026] [:error] [pid 21848:tid 21893] [client 67.144.16.170:61681] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZYLO_bG91VRkVidT5ea-gAAAEQ"]
[Thu Feb 19 02:55:57.143689 2026] [:error] [pid 21848:tid 21897] [client 67.144.16.170:61731] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZYLPfbG91VRkVidT5ea_wAAAEg"]
[Thu Feb 19 02:55:57.608191 2026] [:error] [pid 57014:tid 57017] [client 67.144.16.170:61738] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZYLPRNZnhS5qKtVIMJrzwAAAQA"]
[Thu Feb 19 02:55:59.768557 2026] [:error] [pid 57014:tid 57019] [client 67.144.16.170:61768] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZYLPxNZnhS5qKtVIMJr0QAAAQI"]
[Thu Feb 19 02:56:00.232746 2026] [:error] [pid 11548:tid 11584] [client 67.144.16.170:61786] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZYLQDSFZiBIZZvmIlNzyAAAAgY"]
[Thu Feb 19 02:56:02.382841 2026] [:error] [pid 57014:tid 57040] [client 67.144.16.170:61809] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZYLQhNZnhS5qKtVIMJr1QAAARc"]
[Thu Feb 19 02:56:02.847143 2026] [:error] [pid 21847:tid 21862] [client 67.144.16.170:61818] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZYLQvy9A5wy4LuXmJ1ZWgAAAAQ"]
[Thu Feb 19 02:56:05.053260 2026] [:error] [pid 11548:tid 11596] [client 67.144.16.170:61858] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZYLRTSFZiBIZZvmIlNz0gAAAhI"]
[Thu Feb 19 02:56:05.519144 2026] [:error] [pid 11512:tid 11535] [client 67.144.16.170:61871] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZYLRRGamu0xQuQ-jbGN7gAAAZI"]
[Thu Feb 19 02:56:07.552328 2026] [:error] [pid 11611:tid 11717] [client 67.144.16.170:61905] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZYLR-2m6IPN_aBZuKaq9AAAAxM"]
[Thu Feb 19 02:56:08.016757 2026] [:error] [pid 11512:tid 11528] [client 67.144.16.170:61911] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZYLSBGamu0xQuQ-jbGN9AAAAYs"]
[Thu Feb 19 02:56:10.116843 2026] [:error] [pid 11609:tid 11650] [client 67.144.16.170:61945] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZYLSshm3UjgaKO2Na9rLQAAAoc"]
[Thu Feb 19 02:56:10.582942 2026] [:error] [pid 5561:tid 5568] [client 67.144.16.170:61957] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZYLSkoQssCZYQ4NexYXBgAAAUQ"]
[Thu Feb 19 02:56:12.783206 2026] [:error] [pid 11548:tid 11578] [client 67.144.16.170:61982] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZYLTDSFZiBIZZvmIlNz0wAAAgA"]
[Thu Feb 19 02:56:13.248496 2026] [:error] [pid 57014:tid 57038] [client 67.144.16.170:61988] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZYLTRNZnhS5qKtVIMJr3QAAARU"]
[Thu Feb 19 02:56:38.644864 2026] [:error] [pid 11607:tid 11640] [client 67.144.16.170:62126] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZYLZhw91ggRx3FA7Bc5jAAAAlg"]
[Thu Feb 19 02:56:39.111918 2026] [:error] [pid 11610:tid 11674] [client 67.144.16.170:62448] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZYLZ7WMUt4MNfN7mx0W4QAAAsM"]
[Thu Feb 19 02:56:39.576108 2026] [:error] [pid 21848:tid 21892] [client 67.144.16.170:62461] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZYLZ_bG91VRkVidT5ebIAAAAEM"]
[Thu Feb 19 02:56:41.485280 2026] [:error] [pid 57014:tid 57034] [client 67.144.16.170:62495] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZYLaRNZnhS5qKtVIMJr9AAAARE"]
[Thu Feb 19 02:56:41.949204 2026] [:error] [pid 21847:tid 21860] [client 67.144.16.170:62501] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZYLafy9A5wy4LuXmJ1ZcwAAAAI"]
[Thu Feb 19 02:56:44.161369 2026] [:error] [pid 11548:tid 11599] [client 67.144.16.170:62545] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZYLbDSFZiBIZZvmIlNz-QAAAhU"]
[Thu Feb 19 02:56:44.624877 2026] [:error] [pid 11548:tid 11598] [client 67.144.16.170:62556] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZYLbDSFZiBIZZvmIlNz-wAAAhQ"]
[Thu Feb 19 02:56:46.985601 2026] [:error] [pid 11611:tid 11706] [client 67.144.16.170:62610] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZYLbu2m6IPN_aBZuKarEAAAAwg"]
[Thu Feb 19 02:56:47.448493 2026] [:error] [pid 5561:tid 5578] [client 67.144.16.170:62623] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZYLb0oQssCZYQ4NexYXGgAAAU4"]
[Thu Feb 19 02:56:50.063777 2026] [:error] [pid 11607:tid 11634] [client 67.144.16.170:62672] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZYLchw91ggRx3FA7Bc5kAAAAlM"]
[Thu Feb 19 02:56:50.528669 2026] [:error] [pid 57014:tid 57029] [client 67.144.16.170:62690] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZYLchNZnhS5qKtVIMJr-gAAAQw"]
[Thu Feb 19 02:56:52.535029 2026] [:error] [pid 11512:tid 11517] [client 67.144.16.170:62742] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZYLdBGamu0xQuQ-jbGOFQAAAYA"]
[Thu Feb 19 02:56:53.000812 2026] [:error] [pid 5561:tid 5584] [client 67.144.16.170:62754] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZYLdEoQssCZYQ4NexYXHgAAAVQ"]
[Thu Feb 19 02:56:55.130825 2026] [:error] [pid 11548:tid 11602] [client 67.144.16.170:62788] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZYLdzSFZiBIZZvmIlN0BgAAAhg"]
[Thu Feb 19 02:56:55.594994 2026] [:error] [pid 11610:tid 11690] [client 67.144.16.170:62798] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZYLd7WMUt4MNfN7mx0W7gAAAtM"]
[Thu Feb 19 02:56:57.842213 2026] [:error] [pid 11611:tid 11715] [client 67.144.16.170:62844] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZYLee2m6IPN_aBZuKarEwAAAxE"]
[Thu Feb 19 02:56:58.306963 2026] [:error] [pid 21847:tid 21870] [client 67.144.16.170:62852] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZYLevy9A5wy4LuXmJ1ZfAAAAAw"]
[Thu Feb 19 02:57:00.548305 2026] [:error] [pid 11607:tid 11615] [client 67.144.16.170:62888] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZYLfBw91ggRx3FA7Bc5lgAAAkA"]
[Thu Feb 19 02:57:01.014133 2026] [:error] [pid 5561:tid 5578] [client 67.144.16.170:62897] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZYLfUoQssCZYQ4NexYXJAAAAU4"]
[Thu Feb 19 02:57:03.319844 2026] [:error] [pid 21848:tid 21890] [client 67.144.16.170:62934] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZYLf_bG91VRkVidT5ebLgAAAEE"]
[Thu Feb 19 02:57:03.784239 2026] [:error] [pid 11512:tid 11534] [client 67.144.16.170:62944] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZYLfxGamu0xQuQ-jbGOGAAAAZE"]
[Thu Feb 19 02:57:05.957390 2026] [:error] [pid 21848:tid 21899] [client 67.144.16.170:62977] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZYLgfbG91VRkVidT5ebMwAAAEo"]
[Thu Feb 19 02:57:06.422005 2026] [:error] [pid 5561:tid 5581] [client 67.144.16.170:62987] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZYLgkoQssCZYQ4NexYXKwAAAVE"]
[Thu Feb 19 02:57:08.540299 2026] [:error] [pid 11611:tid 11718] [client 67.144.16.170:63043] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZYLhO2m6IPN_aBZuKarGwAAAxQ"]
[Thu Feb 19 02:57:09.004183 2026] [:error] [pid 11611:tid 11711] [client 67.144.16.170:63054] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZYLhe2m6IPN_aBZuKarHAAAAw0"]
[Thu Feb 19 02:57:10.941928 2026] [:error] [pid 11548:tid 11583] [client 67.144.16.170:63096] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZYLhjSFZiBIZZvmIlN0FgAAAgU"]
[Thu Feb 19 02:57:11.407494 2026] [:error] [pid 11607:tid 11634] [client 67.144.16.170:63103] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZYLhxw91ggRx3FA7Bc5mgAAAlM"]
[Thu Feb 19 02:57:13.482310 2026] [:error] [pid 57014:tid 57024] [client 67.144.16.170:63140] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZYLiRNZnhS5qKtVIMJsBgAAAQc"]
[Thu Feb 19 02:57:13.947470 2026] [:error] [pid 11611:tid 11715] [client 67.144.16.170:63152] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZYLie2m6IPN_aBZuKarIwAAAxE"]
[Thu Feb 19 02:57:16.251246 2026] [:error] [pid 5561:tid 5585] [client 67.144.16.170:63212] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZYLjEoQssCZYQ4NexYXMwAAAVU"]
[Thu Feb 19 02:57:16.715732 2026] [:error] [pid 5561:tid 5579] [client 67.144.16.170:63223] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZYLjEoQssCZYQ4NexYXNgAAAU8"]
[Thu Feb 19 02:57:18.902862 2026] [:error] [pid 21847:tid 21867] [client 67.144.16.170:63269] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZYLjvy9A5wy4LuXmJ1ZhwAAAAk"]
[Thu Feb 19 02:57:19.367293 2026] [:error] [pid 11609:tid 11668] [client 67.144.16.170:63279] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZYLj8hm3UjgaKO2Na9rXwAAApg"]
[Thu Feb 19 02:57:21.332996 2026] [:error] [pid 11607:tid 11631] [client 67.144.16.170:63316] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZYLkRw91ggRx3FA7Bc5nQAAAlA"]
[Thu Feb 19 02:57:21.797822 2026] [:error] [pid 11607:tid 11623] [client 67.144.16.170:63322] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZYLkRw91ggRx3FA7Bc5nwAAAkg"]
[Thu Feb 19 02:57:23.930784 2026] [:error] [pid 11548:tid 11595] [client 67.144.16.170:63359] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZYLkzSFZiBIZZvmIlN0RgAAAhE"]
[Thu Feb 19 02:57:24.395143 2026] [:error] [pid 11548:tid 11587] [client 67.144.16.170:63366] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZYLlDSFZiBIZZvmIlN0SAAAAgk"]
[Thu Feb 19 02:57:27.002429 2026] [:error] [pid 21847:tid 21880] [client 67.144.16.170:63406] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZYLl_y9A5wy4LuXmJ1ZjwAAABY"]
[Thu Feb 19 02:57:27.467429 2026] [:error] [pid 11512:tid 11524] [client 67.144.16.170:63414] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZYLlxGamu0xQuQ-jbGOJwAAAYc"]
[Thu Feb 19 02:57:29.517760 2026] [:error] [pid 57014:tid 57037] [client 67.144.16.170:63443] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZYLmRNZnhS5qKtVIMJsDQAAARQ"]
[Thu Feb 19 02:57:29.982701 2026] [:error] [pid 57014:tid 57022] [client 67.144.16.170:63457] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZYLmRNZnhS5qKtVIMJsDgAAAQU"]
[Thu Feb 19 02:57:33.848124 2026] [:error] [pid 11609:tid 11662] [client 67.144.16.170:63516] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZYLnchm3UjgaKO2Na9rfwAAApI"]
[Thu Feb 19 02:57:34.313528 2026] [:error] [pid 11548:tid 11599] [client 67.144.16.170:63526] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZYLnjSFZiBIZZvmIlN0WwAAAhU"]
[Thu Feb 19 03:40:04.288606 2026] [:error] [pid 45469:tid 45564] [client 64.247.196.28:37192] [client 64.247.196.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZYVlMgAM1u0L_vaK3n_vAAAAEk"]
[Thu Feb 19 09:48:27.666485 2026] [:error] [pid 48903:tid 48978] [client 43.159.128.247:53430] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZZr646aTgKrpAR115tYiwAAAI0"]
[Thu Feb 19 11:35:56.382692 2026] [:error] [pid 15513:tid 15534] [client 217.182.194.3:42824] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZaFHMGTRTE022JWg18m8wAAARM"]
[Thu Feb 19 11:35:58.305992 2026] [:error] [pid 48902:tid 48962] [client 217.182.194.3:34366] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZaFHmcJ-6aYRpRRFsXC7gAAAFg"]
[Thu Feb 19 11:36:00.148497 2026] [:error] [pid 24048:tid 24055] [client 217.182.194.3:34372] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZaFIGug6wHHqU0QyDZtTAAAAUU"]
[Thu Feb 19 11:36:02.115818 2026] [:error] [pid 48902:tid 48952] [client 217.182.194.3:34382] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZaFImcJ-6aYRpRRFsXC9wAAAE4"]
[Thu Feb 19 11:36:04.181671 2026] [:error] [pid 49002:tid 49024] [client 217.182.194.3:34390] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZaFJFfcBtQ6hSJuEQkCrQAAAMo"]
[Thu Feb 19 11:36:06.144590 2026] [:error] [pid 24048:tid 24058] [client 217.182.194.3:34394] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZaFJmug6wHHqU0QyDZtUwAAAUg"]
[Thu Feb 19 11:36:08.017707 2026] [:error] [pid 15513:tid 15531] [client 217.182.194.3:34398] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZaFKMGTRTE022JWg18nCAAAARA"]
[Thu Feb 19 11:36:09.948033 2026] [:error] [pid 49002:tid 49030] [client 217.182.194.3:42892] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZaFKVfcBtQ6hSJuEQkCtAAAANA"]
[Thu Feb 19 11:36:11.832353 2026] [:error] [pid 15513:tid 15525] [client 217.182.194.3:42894] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZaFK8GTRTE022JWg18nFQAAAQo"]
[Thu Feb 19 11:36:13.737849 2026] [:error] [pid 49002:tid 49035] [client 217.182.194.3:42900] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZaFLVfcBtQ6hSJuEQkCuAAAANU"]
[Thu Feb 19 11:36:15.672177 2026] [:error] [pid 48901:tid 48931] [client 217.182.194.3:42908] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZaFL8ixYz-lHbN0WBIvKQAAABU"]
[Thu Feb 19 11:36:17.636802 2026] [:error] [pid 24048:tid 24069] [client 217.182.194.3:42922] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZaFMWug6wHHqU0QyDZtZQAAAVM"]
[Thu Feb 19 11:36:19.583742 2026] [:error] [pid 24048:tid 24068] [client 217.182.194.3:44546] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZaFM2ug6wHHqU0QyDZtawAAAVI"]
[Thu Feb 19 11:36:21.524192 2026] [:error] [pid 48903:tid 48975] [client 217.182.194.3:44554] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZaFNY6aTgKrpAR115t5NgAAAIo"]
[Thu Feb 19 11:36:23.616880 2026] [:error] [pid 48901:tid 48933] [client 217.182.194.3:44564] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZaFN8ixYz-lHbN0WBIvQAAAABc"]
[Thu Feb 19 11:36:25.633674 2026] [:error] [pid 24048:tid 24059] [client 217.182.194.3:44580] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZaFOWug6wHHqU0QyDZtbQAAAUk"]
[Thu Feb 19 11:36:27.569198 2026] [:error] [pid 48902:tid 48954] [client 217.182.194.3:44594] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZaFO2cJ-6aYRpRRFsXDFgAAAFA"]
[Thu Feb 19 11:36:29.481589 2026] [:error] [pid 24048:tid 24074] [client 217.182.194.3:41912] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZaFPWug6wHHqU0QyDZtiwAAAVg"]
[Thu Feb 19 11:36:31.627829 2026] [:error] [pid 48903:tid 48977] [client 217.182.194.3:41918] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZaFP46aTgKrpAR115t5VwAAAIw"]
[Thu Feb 19 11:36:33.522179 2026] [:error] [pid 24048:tid 24068] [client 217.182.194.3:41934] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZaFQWug6wHHqU0QyDZtogAAAVI"]
[Thu Feb 19 11:36:35.556479 2026] [:error] [pid 48901:tid 48916] [client 217.182.194.3:41944] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZaFQ8ixYz-lHbN0WBIvVgAAAAY"]
[Thu Feb 19 11:36:37.586402 2026] [:error] [pid 49002:tid 49023] [client 217.182.194.3:41950] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZaFRVfcBtQ6hSJuEQkC3QAAAMk"]
[Thu Feb 19 11:36:39.474649 2026] [:error] [pid 48902:tid 48943] [client 217.182.194.3:36702] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZaFR2cJ-6aYRpRRFsXDXAAAAEU"]
[Thu Feb 19 11:36:41.306014 2026] [:error] [pid 48902:tid 48944] [client 217.182.194.3:36704] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZaFSWcJ-6aYRpRRFsXDZAAAAEY"]
[Thu Feb 19 11:36:43.106165 2026] [:error] [pid 49002:tid 49016] [client 217.182.194.3:36712] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZaFS1fcBtQ6hSJuEQkC5QAAAMI"]
[Thu Feb 19 11:36:45.275666 2026] [:error] [pid 48902:tid 48947] [client 217.182.194.3:36716] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZaFTWcJ-6aYRpRRFsXDbgAAAEk"]
[Thu Feb 19 11:36:47.246991 2026] [:error] [pid 15513:tid 15518] [client 217.182.194.3:36720] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZaFT8GTRTE022JWg18nZgAAAQM"]
[Thu Feb 19 11:36:49.358140 2026] [:error] [pid 48903:tid 48982] [client 217.182.194.3:53600] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZaFUY6aTgKrpAR115t5cQAAAJE"]
[Thu Feb 19 11:36:51.438291 2026] [:error] [pid 48901:tid 48929] [client 217.182.194.3:53614] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZaFU8ixYz-lHbN0WBIvYgAAABM"]
[Thu Feb 19 11:36:53.515868 2026] [:error] [pid 48903:tid 48989] [client 217.182.194.3:53628] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZaFVY6aTgKrpAR115t5dQAAAJg"]
[Thu Feb 19 11:37:14.572018 2026] [:error] [pid 48902:tid 48950] [client 217.182.194.3:53640] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZaFamcJ-6aYRpRRFsXDuQAAAEw"]
[Thu Feb 19 11:37:16.418642 2026] [:error] [pid 24048:tid 24052] [client 217.182.194.3:55112] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZaFbGug6wHHqU0QyDZuBQAAAUI"]
[Thu Feb 19 11:37:18.407616 2026] [:error] [pid 24048:tid 24051] [client 217.182.194.3:45266] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZaFbmug6wHHqU0QyDZuCgAAAUE"]
[Thu Feb 19 11:37:20.503854 2026] [:error] [pid 49002:tid 49038] [client 217.182.194.3:45274] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZaFcFfcBtQ6hSJuEQkDEAAAANg"]
[Thu Feb 19 11:37:22.482771 2026] [:error] [pid 48901:tid 48925] [client 217.182.194.3:45288] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZaFcsixYz-lHbN0WBIviwAAAA8"]
[Thu Feb 19 11:37:24.564083 2026] [:error] [pid 48901:tid 48926] [client 217.182.194.3:45302] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZaFdMixYz-lHbN0WBIvkgAAABA"]
[Thu Feb 19 11:37:26.497180 2026] [:error] [pid 48902:tid 48955] [client 217.182.194.3:45316] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZaFdmcJ-6aYRpRRFsXDxwAAAFE"]
[Thu Feb 19 11:37:28.766298 2026] [:error] [pid 48901:tid 48931] [client 217.182.194.3:52360] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZaFeMixYz-lHbN0WBIvnAAAABU"]
[Thu Feb 19 11:37:32.673482 2026] [:error] [pid 24048:tid 24072] [client 217.182.194.3:52362] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZaFfGug6wHHqU0QyDZuJgAAAVY"]
[Thu Feb 19 13:05:57.426602 2026] [:error] [pid 15513:tid 15538] [client 216.81.248.151:47086] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aZaaNcGTRTE022JWg19GywAAARc"]
[Thu Feb 19 14:33:13.579499 2026] [:error] [pid 48903:tid 48988] [client 157.230.43.38:52522] [client 157.230.43.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZauqY6aTgKrpAR115uhZgAAAJc"]
[Thu Feb 19 15:47:43.709837 2026] [:error] [pid 48901:tid 48929] [client 45.154.138.58:36597] [client 45.154.138.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "aZbAH8ixYz-lHbN0WBJ2LgAAABM"]
[Thu Feb 19 16:43:56.671464 2026] [:error] [pid 15513:tid 15521] [client 101.33.55.204:46142] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZbNTMGTRTE022JWg1-X3wAAAQY"]
[Thu Feb 19 20:11:45.386283 2026] [:error] [pid 48901:tid 48912] [client 145.239.66.34:43132] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZb-AcixYz-lHbN0WBK9yQAAAAI"]
[Thu Feb 19 20:11:47.350400 2026] [:error] [pid 5548:tid 5558] [client 145.239.66.34:36316] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZb-A5MpsAkdKxbTbsO4MQAAAYc"]
[Thu Feb 19 20:11:49.253989 2026] [:error] [pid 49002:tid 49019] [client 145.239.66.34:36318] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZb-BVfcBtQ6hSJuEQljFQAAAMU"]
[Thu Feb 19 20:11:51.131036 2026] [:error] [pid 5548:tid 5573] [client 145.239.66.34:36322] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZb-B5MpsAkdKxbTbsO4NAAAAZY"]
[Thu Feb 19 20:11:53.164023 2026] [:error] [pid 48901:tid 48911] [client 145.239.66.34:35422] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZb-CcixYz-lHbN0WBK9zQAAAAE"]
[Thu Feb 19 20:11:55.028478 2026] [:error] [pid 49002:tid 49015] [client 145.239.66.34:35428] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZb-C1fcBtQ6hSJuEQljGgAAAME"]
[Thu Feb 19 20:11:57.041864 2026] [:error] [pid 48902:tid 48946] [client 145.239.66.34:35444] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZb-DWcJ-6aYRpRRFsUqZwAAAEg"]
[Thu Feb 19 20:11:59.057139 2026] [:error] [pid 48902:tid 48939] [client 145.239.66.34:35458] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZb-D2cJ-6aYRpRRFsUqaQAAAEE"]
[Thu Feb 19 20:12:01.061794 2026] [:error] [pid 48903:tid 48969] [client 145.239.66.34:35470] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZb-EY6aTgKrpAR115vq7gAAAIQ"]
[Thu Feb 19 20:12:03.075862 2026] [:error] [pid 5580:tid 5584] [client 145.239.66.34:35926] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZb-E4V24kZpmf6nh3AAVwAAAcE"]
[Thu Feb 19 20:12:05.089810 2026] [:error] [pid 48901:tid 48920] [client 145.239.66.34:35940] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZb-FcixYz-lHbN0WBK94QAAAAo"]
[Thu Feb 19 20:12:06.960834 2026] [:error] [pid 49002:tid 49028] [client 145.239.66.34:35944] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZb-FlfcBtQ6hSJuEQljIgAAAM4"]
[Thu Feb 19 20:12:08.962949 2026] [:error] [pid 24048:tid 24066] [client 145.239.66.34:35952] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZb-GGug6wHHqU0QyDbzhwAAAVA"]
[Thu Feb 19 20:12:10.981669 2026] [:error] [pid 48901:tid 48914] [client 145.239.66.34:35962] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZb-GsixYz-lHbN0WBK96gAAAAQ"]
[Thu Feb 19 20:12:12.865276 2026] [:error] [pid 5548:tid 5562] [client 145.239.66.34:42868] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZb-HJMpsAkdKxbTbsO4RAAAAYs"]
[Thu Feb 19 20:12:14.867467 2026] [:error] [pid 5548:tid 5567] [client 145.239.66.34:42884] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZb-HpMpsAkdKxbTbsO4SAAAAZA"]
[Thu Feb 19 20:12:16.891074 2026] [:error] [pid 5580:tid 5584] [client 145.239.66.34:42894] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZb-IIV24kZpmf6nh3AAZQAAAcE"]
[Thu Feb 19 20:12:18.898780 2026] [:error] [pid 48901:tid 48932] [client 145.239.66.34:42898] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZb-IsixYz-lHbN0WBK97QAAABY"]
[Thu Feb 19 20:12:20.758351 2026] [:error] [pid 48901:tid 48920] [client 145.239.66.34:42910] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZb-JMixYz-lHbN0WBK98wAAAAo"]
[Thu Feb 19 20:12:22.779117 2026] [:error] [pid 48902:tid 48946] [client 145.239.66.34:55384] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZb-JmcJ-6aYRpRRFsUqfQAAAEg"]
[Thu Feb 19 20:12:24.796492 2026] [:error] [pid 15513:tid 15534] [client 145.239.66.34:55392] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZb-KMGTRTE022JWg1_g2AAAARM"]
[Thu Feb 19 20:12:26.816763 2026] [:error] [pid 48901:tid 48916] [client 145.239.66.34:55396] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZb-KsixYz-lHbN0WBK9-QAAAAY"]
[Thu Feb 19 20:12:28.680931 2026] [:error] [pid 48903:tid 48978] [client 145.239.66.34:55410] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZb-LI6aTgKrpAR115vrCAAAAI0"]
[Thu Feb 19 20:12:30.691008 2026] [:error] [pid 5548:tid 5565] [client 145.239.66.34:55426] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZb-LpMpsAkdKxbTbsO4UgAAAY4"]
[Thu Feb 19 20:12:32.568145 2026] [:error] [pid 48903:tid 48967] [client 145.239.66.34:42016] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZb-MI6aTgKrpAR115vrDgAAAII"]
[Thu Feb 19 20:12:34.573445 2026] [:error] [pid 5548:tid 5562] [client 145.239.66.34:42028] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZb-MpMpsAkdKxbTbsO4VwAAAYs"]
[Thu Feb 19 20:12:36.583310 2026] [:error] [pid 49002:tid 49021] [client 145.239.66.34:42034] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZb-NFfcBtQ6hSJuEQljMgAAAMc"]
[Thu Feb 19 20:12:38.598786 2026] [:error] [pid 5581:tid 5611] [client 145.239.66.34:42036] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZb-NnIfW0xlXmrVd3rJpwAAAgA"]
[Thu Feb 19 20:12:40.610435 2026] [:error] [pid 5581:tid 5634] [client 145.239.66.34:42038] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZb-OHIfW0xlXmrVd3rJqgAAAhc"]
[Thu Feb 19 20:12:42.628782 2026] [:error] [pid 48903:tid 48965] [client 145.239.66.34:51918] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZb-Oo6aTgKrpAR115vrEwAAAIA"]
[Thu Feb 19 20:13:03.273965 2026] [:error] [pid 48901:tid 48919] [client 145.239.66.34:51930] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZb-T8ixYz-lHbN0WBK-NgAAAAk"]
[Thu Feb 19 20:13:05.208714 2026] [:error] [pid 15513:tid 15536] [client 145.239.66.34:33076] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZb-UcGTRTE022JWg1_hBgAAARU"]
[Thu Feb 19 20:13:07.240826 2026] [:error] [pid 5581:tid 5630] [client 145.239.66.34:33086] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZb-U3IfW0xlXmrVd3rJwAAAAhM"]
[Thu Feb 19 20:13:09.246804 2026] [:error] [pid 5581:tid 5611] [client 145.239.66.34:33102] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZb-VXIfW0xlXmrVd3rJywAAAgA"]
[Thu Feb 19 20:13:11.114637 2026] [:error] [pid 15513:tid 15530] [client 145.239.66.34:33116] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZb-V8GTRTE022JWg1_hDgAAAQ8"]
[Thu Feb 19 20:13:13.139369 2026] [:error] [pid 48903:tid 48976] [client 145.239.66.34:41920] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZb-WY6aTgKrpAR115vrSQAAAIs"]
[Thu Feb 19 20:13:15.139135 2026] [:error] [pid 15513:tid 15534] [client 145.239.66.34:41924] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZb-W8GTRTE022JWg1_hFwAAARM"]
[Thu Feb 19 20:13:17.146760 2026] [:error] [pid 24048:tid 24063] [client 145.239.66.34:41932] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZb-XWug6wHHqU0QyDbz8AAAAU0"]
[Thu Feb 19 20:13:19.016770 2026] [:error] [pid 48901:tid 48933] [client 145.239.66.34:41936] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZb-X8ixYz-lHbN0WBK-QgAAABc"]
[Thu Feb 19 20:13:21.020655 2026] [:error] [pid 48903:tid 48969] [client 145.239.66.34:41948] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZb-YY6aTgKrpAR115vrUQAAAIQ"]
[Thu Feb 19 20:13:23.674733 2026] [:error] [pid 24048:tid 24063] [client 145.239.66.34:38370] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZb-Y2ug6wHHqU0QyDbz-wAAAU0"]
[Thu Feb 19 20:13:27.537979 2026] [:error] [pid 15513:tid 15528] [client 145.239.66.34:38382] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZb-Z8GTRTE022JWg1_hJAAAAQ0"]
[Thu Feb 19 21:03:49.619039 2026] [:error] [pid 5548:tid 5571] [client 52.169.119.118:3753] File does not exist: /usr/local/apache/htdocs/suspended-page/priv.php
[Thu Feb 19 21:03:49.883628 2026] [:error] [pid 5548:tid 5553] [client 52.169.119.118:3753] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Thu Feb 19 21:03:50.149635 2026] [:error] [pid 5548:tid 5573] [client 52.169.119.118:3753] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Thu Feb 19 21:03:50.687441 2026] [:error] [pid 5548:tid 5562] [client 52.169.119.118:3753] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Feb 19 22:39:02.392442 2026] [:error] [pid 48901:tid 48925] [client 34.10.2.101:63934] [client 34.10.2.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.2.101, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZcghsixYz-lHbN0WBLi-QAAAA8"]
[Thu Feb 19 22:39:02.396047 2026] [:error] [pid 48901:tid 48925] [client 34.10.2.101:63934] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 19 22:39:04.627902 2026] [:error] [pid 48901:tid 48914] [client 34.10.2.101:63934] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZcgiMixYz-lHbN0WBLjBAAAAAQ"]
[Thu Feb 19 22:39:05.025094 2026] [:error] [pid 5548:tid 5574] [client 34.10.2.101:59064] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZcgiZMpsAkdKxbTbsPP1AAAAZc"]
[Thu Feb 19 22:39:05.427415 2026] [:error] [pid 48902:tid 48962] [client 34.10.2.101:53127] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZcgiWcJ-6aYRpRRFsVEEgAAAFg"]
[Thu Feb 19 22:39:05.840598 2026] [:error] [pid 5548:tid 5552] [client 34.10.2.101:57475] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZcgiZMpsAkdKxbTbsPP1QAAAYE"]
[Thu Feb 19 22:39:06.253271 2026] [:error] [pid 24048:tid 24071] [client 34.10.2.101:65315] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZcgimug6wHHqU0QyDYVWQAAAVU"]
[Thu Feb 19 22:39:06.659745 2026] [:error] [pid 15513:tid 15518] [client 34.10.2.101:56689] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZcgisGTRTE022JWg18OFAAAAQM"]
[Thu Feb 19 22:39:07.056812 2026] [:error] [pid 15513:tid 15516] [client 34.10.2.101:50092] [client 34.10.2.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZcgi8GTRTE022JWg18OFQAAAQE"]
[Thu Feb 19 22:56:44.589033 2026] [:error] [pid 15513:tid 15518] [client 43.135.211.148:42964] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZckrMGTRTE022JWg18TcQAAAQM"]
[Fri Feb 20 04:48:27.320388 2026] [:error] [pid 417:tid 442] [client 37.187.226.31:35346] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZd3G2Z8vv9H56paZ2DEhQAAARc"]
[Fri Feb 20 04:48:29.416889 2026] [:error] [pid 64405:tid 64481] [client 37.187.226.31:43460] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZd3HdSgDnQB5OAbOuSkhgAAAI4"]
[Fri Feb 20 04:48:31.307072 2026] [:error] [pid 64403:tid 64431] [client 37.187.226.31:43464] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZd3H2sY-w3EIXaNGw5h5AAAABI"]
[Fri Feb 20 04:48:33.309895 2026] [:error] [pid 64405:tid 64474] [client 37.187.226.31:45570] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZd3IdSgDnQB5OAbOuSkjAAAAIc"]
[Fri Feb 20 04:48:35.307931 2026] [:error] [pid 417:tid 425] [client 37.187.226.31:45586] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZd3I2Z8vv9H56paZ2DEkwAAAQY"]
[Fri Feb 20 04:48:37.190293 2026] [:error] [pid 64405:tid 64486] [client 37.187.226.31:45600] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZd3JdSgDnQB5OAbOuSkkAAAAJM"]
[Fri Feb 20 04:48:39.140671 2026] [:error] [pid 64510:tid 64528] [client 37.187.226.31:45604] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZd3JyxwOnmwqVfn93UmwAAAANA"]
[Fri Feb 20 04:48:40.974190 2026] [:error] [pid 64405:tid 64485] [client 37.187.226.31:45612] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZd3KNSgDnQB5OAbOuSkmQAAAJI"]
[Fri Feb 20 04:48:42.979640 2026] [:error] [pid 64404:tid 64442] [client 37.187.226.31:54980] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZd3Ksg5Wkqq1wjajcBvEgAAAEI"]
[Fri Feb 20 04:48:45.061106 2026] [:error] [pid 64403:tid 64430] [client 37.187.226.31:54992] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZd3LWsY-w3EIXaNGw5h9gAAABE"]
[Fri Feb 20 04:48:46.903612 2026] [:error] [pid 64404:tid 64444] [client 37.187.226.31:54996] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZd3Lsg5Wkqq1wjajcBvGgAAAEQ"]
[Fri Feb 20 04:48:48.822053 2026] [:error] [pid 417:tid 441] [client 37.187.226.31:55002] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZd3MGZ8vv9H56paZ2DEvAAAARY"]
[Fri Feb 20 04:48:50.781812 2026] [:error] [pid 417:tid 438] [client 37.187.226.31:55006] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZd3MmZ8vv9H56paZ2DExQAAARM"]
[Fri Feb 20 04:48:52.699602 2026] [:error] [pid 64510:tid 64513] [client 37.187.226.31:49442] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZd3NCxwOnmwqVfn93UmzwAAAME"]
[Fri Feb 20 04:48:54.685377 2026] [:error] [pid 64403:tid 64434] [client 37.187.226.31:49452] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZd3NmsY-w3EIXaNGw5iAQAAABU"]
[Fri Feb 20 04:48:56.606878 2026] [:error] [pid 64403:tid 64417] [client 37.187.226.31:49456] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZd3OGsY-w3EIXaNGw5iBgAAAAQ"]
[Fri Feb 20 04:48:58.570267 2026] [:error] [pid 64510:tid 64518] [client 37.187.226.31:49460] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZd3OixwOnmwqVfn93Um2QAAAMY"]
[Fri Feb 20 04:49:00.346783 2026] [:error] [pid 64405:tid 64491] [client 37.187.226.31:49476] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZd3PNSgDnQB5OAbOuSkrAAAAJg"]
[Fri Feb 20 04:49:02.268354 2026] [:error] [pid 64510:tid 64521] [client 37.187.226.31:48766] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZd3PixwOnmwqVfn93Um3wAAAMk"]
[Fri Feb 20 04:49:04.277991 2026] [:error] [pid 64510:tid 64524] [client 37.187.226.31:48778] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZd3QCxwOnmwqVfn93Um5QAAAMw"]
[Fri Feb 20 04:49:06.077882 2026] [:error] [pid 64404:tid 64454] [client 37.187.226.31:48782] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZd3Qsg5Wkqq1wjajcBvOAAAAE4"]
[Fri Feb 20 04:49:08.144000 2026] [:error] [pid 417:tid 443] [client 37.187.226.31:48798] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZd3RGZ8vv9H56paZ2DE-wAAARg"]
[Fri Feb 20 04:49:09.943659 2026] [:error] [pid 64510:tid 64529] [client 37.187.226.31:48802] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZd3RSxwOnmwqVfn93Um6QAAANE"]
[Fri Feb 20 04:49:11.889816 2026] [:error] [pid 64510:tid 64534] [client 37.187.226.31:48816] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZd3RyxwOnmwqVfn93Um7QAAANY"]
[Fri Feb 20 04:49:13.954242 2026] [:error] [pid 64404:tid 64464] [client 37.187.226.31:34126] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZd3Scg5Wkqq1wjajcBvRgAAAFg"]
[Fri Feb 20 04:49:15.886989 2026] [:error] [pid 417:tid 436] [client 37.187.226.31:34142] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZd3S2Z8vv9H56paZ2DFCAAAARE"]
[Fri Feb 20 04:49:17.826696 2026] [:error] [pid 64403:tid 64415] [client 37.187.226.31:34154] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZd3TWsY-w3EIXaNGw5iFgAAAAI"]
[Fri Feb 20 04:49:19.919551 2026] [:error] [pid 64510:tid 64514] [client 37.187.226.31:34160] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZd3TyxwOnmwqVfn93Um9QAAAMI"]
[Fri Feb 20 04:49:21.879175 2026] [:error] [pid 417:tid 442] [client 37.187.226.31:34162] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZd3UWZ8vv9H56paZ2DFEAAAARc"]
[Fri Feb 20 04:49:23.779487 2026] [:error] [pid 64510:tid 64530] [client 37.187.226.31:37370] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZd3UyxwOnmwqVfn93Um-AAAANI"]
[Fri Feb 20 04:49:43.759986 2026] [:error] [pid 64403:tid 64429] [client 37.187.226.31:37384] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZd3Z2sY-w3EIXaNGw5iMwAAABA"]
[Fri Feb 20 04:49:45.744765 2026] [:error] [pid 64510:tid 64515] [client 37.187.226.31:47612] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZd3aSxwOnmwqVfn93UnHAAAAMM"]
[Fri Feb 20 04:49:47.530967 2026] [:error] [pid 64403:tid 64417] [client 37.187.226.31:47614] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZd3a2sY-w3EIXaNGw5iOQAAAAQ"]
[Fri Feb 20 04:49:49.580193 2026] [:error] [pid 417:tid 443] [client 37.187.226.31:47616] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZd3bWZ8vv9H56paZ2DFTQAAARg"]
[Fri Feb 20 04:49:51.689049 2026] [:error] [pid 417:tid 442] [client 37.187.226.31:47630] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZd3b2Z8vv9H56paZ2DFWAAAARc"]
[Fri Feb 20 04:49:53.600520 2026] [:error] [pid 64404:tid 64446] [client 37.187.226.31:41222] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZd3ccg5Wkqq1wjajcBvnQAAAEY"]
[Fri Feb 20 04:49:55.527910 2026] [:error] [pid 64405:tid 64475] [client 37.187.226.31:41224] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZd3c9SgDnQB5OAbOuSk2gAAAIg"]
[Fri Feb 20 04:49:59.731281 2026] [:error] [pid 64404:tid 64463] [client 37.187.226.31:41240] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZd3d8g5Wkqq1wjajcBvqAAAAFc"]
[Fri Feb 20 04:50:03.512296 2026] [:error] [pid 417:tid 425] [client 37.187.226.31:51668] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZd3e2Z8vv9H56paZ2DFeQAAAQY"]
[Fri Feb 20 05:29:25.094101 2026] [:error] [pid 417:tid 437] [client 136.144.33.35:48253] [client 136.144.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.35, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aZeAtWZ8vv9H56paZ2DcUAAAARI"]
[Fri Feb 20 05:29:25.097848 2026] [:error] [pid 417:tid 437] [client 136.144.33.35:48253] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 20 06:30:29.214492 2026] [:error] [pid 64403:tid 64426] [client 43.156.204.134:59800] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZePBWsY-w3EIXaNGw6GCAAAAA0"]
[Fri Feb 20 11:57:31.894517 2026] [:error] [pid 59127:tid 59143] [client 206.189.87.233:47744] [client 206.189.87.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aZfbq3Sltzl55Qz-09ijnAAAAQ4"]
[Fri Feb 20 13:52:22.446908 2026] [:error] [pid 46012:tid 46022] [client 43.173.1.57:48470] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZf2ljXz-GTvuxLwgUGd_QAAAUg"]
[Fri Feb 20 13:52:47.154267 2026] [:error] [pid 54460:tid 54469] [client 188.165.217.198:56112] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZf2r8oUiaZ-Z7V-F9_yCQAAAAQ"]
[Fri Feb 20 13:53:00.551662 2026] [:error] [pid 59127:tid 59149] [client 188.165.217.198:33762] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZf2vHSltzl55Qz-09jPTAAAARQ"]
[Fri Feb 20 13:56:35.572225 2026] [:error] [pid 54520:tid 54537] [client 188.165.217.198:43028] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZf3k2QaQX7QUBqXcyF55wAAAI8"]
[Fri Feb 20 13:56:55.789014 2026] [:error] [pid 54460:tid 54474] [client 188.165.217.198:52242] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZf3p8oUiaZ-Z7V-F9_zaQAAAAk"]
[Fri Feb 20 13:57:16.768040 2026] [:error] [pid 54520:tid 54522] [client 188.165.217.198:32904] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZf3vGQaQX7QUBqXcyF6CwAAAIA"]
[Fri Feb 20 14:01:03.034752 2026] [:error] [pid 54552:tid 54562] [client 43.166.128.86:60296] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZf4n8e4t0F-_sbWepa-nwAAAMc"]
[Fri Feb 20 14:01:27.992306 2026] [:error] [pid 54461:tid 54507] [client 188.165.217.198:58194] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZf4ty372fkN0w39NDNHtQAAAE8"]
[Fri Feb 20 14:01:43.288594 2026] [:error] [pid 59127:tid 59144] [client 188.165.217.198:36642] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZf4x3Sltzl55Qz-09jR1gAAAQ8"]
[Fri Feb 20 14:02:01.503924 2026] [:error] [pid 46012:tid 46032] [client 188.165.217.198:43962] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZf42TXz-GTvuxLwgUGjCQAAAVI"]
[Fri Feb 20 14:05:51.234599 2026] [:error] [pid 46012:tid 46027] [client 188.165.217.198:56138] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZf5vzXz-GTvuxLwgUGkjQAAAU0"]
[Fri Feb 20 14:06:07.006528 2026] [:error] [pid 54461:tid 54496] [client 188.165.217.198:33666] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZf5zy372fkN0w39NDNJKAAAAEQ"]
[Fri Feb 20 14:06:28.654658 2026] [:error] [pid 59127:tid 59152] [client 188.165.217.198:42604] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZf55HSltzl55Qz-09jTawAAARc"]
[Fri Feb 20 14:10:14.813099 2026] [:error] [pid 54520:tid 54532] [client 188.165.217.198:48752] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZf6xmQaQX7QUBqXcyF_PAAAAIo"]
[Fri Feb 20 14:10:35.066771 2026] [:error] [pid 54552:tid 54576] [client 188.165.217.198:56306] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZf628e4t0F-_sbWepbBzQAAANU"]
[Fri Feb 20 14:10:52.865036 2026] [:error] [pid 46012:tid 46027] [client 188.165.217.198:35146] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZf67DXz-GTvuxLwgUGnMAAAAU0"]
[Fri Feb 20 14:14:40.696248 2026] [:error] [pid 59127:tid 59142] [client 188.165.217.198:35990] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZf70HSltzl55Qz-09jWYQAAAQ0"]
[Fri Feb 20 14:14:58.592186 2026] [:error] [pid 54520:tid 54544] [client 188.165.217.198:43070] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZf74mQaQX7QUBqXcyGAvwAAAJY"]
[Fri Feb 20 14:15:16.199776 2026] [:error] [pid 54552:tid 54569] [client 188.165.217.198:49856] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZf79Me4t0F-_sbWepbDYAAAAM4"]
[Fri Feb 20 14:19:19.892604 2026] [:error] [pid 54520:tid 54538] [client 188.165.217.198:37506] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZf852QaQX7QUBqXcyGCPwAAAJA"]
[Fri Feb 20 14:19:40.572456 2026] [:error] [pid 54520:tid 54531] [client 188.165.217.198:45452] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZf8_GQaQX7QUBqXcyGCUQAAAIk"]
[Fri Feb 20 14:23:57.868640 2026] [:error] [pid 54460:tid 54482] [client 188.165.217.198:39976] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZf9_coUiaZ-Z7V-F9_9_wAAABE"]
[Fri Feb 20 14:24:22.232307 2026] [:error] [pid 59127:tid 59136] [client 188.165.217.198:48398] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZf-FnSltzl55Qz-09jZyQAAAQc"]
[Fri Feb 20 14:28:56.082082 2026] [:error] [pid 54460:tid 54470] [client 188.165.217.198:45200] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZf_KMoUiaZ-Z7V-F9__6gAAAAU"]
[Fri Feb 20 14:34:00.394185 2026] [:error] [pid 46012:tid 46031] [client 188.165.217.198:49290] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZgAWDXz-GTvuxLwgUGybgAAAVE"]
[Fri Feb 20 14:34:23.093491 2026] [:error] [pid 59127:tid 59142] [client 188.165.217.198:58168] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZgAb3Sltzl55Qz-09jdsQAAAQ0"]
[Fri Feb 20 19:59:22.056409 2026] [:error] [pid 54552:tid 54568] [client 136.111.169.165:50649] [client 136.111.169.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.169.165, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZhMmse4t0F-_sbWepYsaQAAAM0"]
[Fri Feb 20 19:59:22.060871 2026] [:error] [pid 54552:tid 54568] [client 136.111.169.165:50649] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 20 19:59:24.826229 2026] [:error] [pid 54552:tid 54560] [client 136.111.169.165:50649] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZhMnMe4t0F-_sbWepYsdQAAAMU"]
[Fri Feb 20 19:59:25.339942 2026] [:error] [pid 54460:tid 54482] [client 136.111.169.165:64638] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZhMncoUiaZ-Z7V-F99vqAAAABE"]
[Fri Feb 20 19:59:25.771700 2026] [:error] [pid 54520:tid 54526] [client 136.111.169.165:49621] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZhMnWQaQX7QUBqXcyHmlwAAAIQ"]
[Fri Feb 20 19:59:26.250007 2026] [:error] [pid 54461:tid 54506] [client 136.111.169.165:64218] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZhMni372fkN0w39NDO41QAAAE4"]
[Fri Feb 20 19:59:26.683414 2026] [:error] [pid 54520:tid 54537] [client 136.111.169.165:62424] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZhMnmQaQX7QUBqXcyHmmAAAAI8"]
[Fri Feb 20 19:59:27.135886 2026] [:error] [pid 54552:tid 54571] [client 136.111.169.165:49423] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZhMn8e4t0F-_sbWepYseQAAANA"]
[Fri Feb 20 19:59:27.647014 2026] [:error] [pid 59127:tid 59132] [client 136.111.169.165:57108] [client 136.111.169.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZhMn3Sltzl55Qz-09g7HQAAAQM"]
[Fri Feb 20 20:17:01.303290 2026] [:error] [pid 54461:tid 54507] [client 180.110.203.108:51586] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZhQvS372fkN0w39NDO-FQAAAE8"]
[Sat Feb 21 00:38:56.918126 2026] [:error] [pid 54461:tid 54496] [client 31.217.165.194:29223] [client 31.217.165.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.194, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZiOIC372fkN0w39NDMGQwAAAEQ"]
[Sat Feb 21 00:38:56.923720 2026] [:error] [pid 54461:tid 54496] [client 31.217.165.194:29223] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 02:33:00.460262 2026] [:error] [pid 54520:tid 54540] [client 103.65.237.124:53759] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aZio3GQaQX7QUBqXcyFXrwAAAJI"]
[Sat Feb 21 02:44:54.690005 2026] [:error] [pid 25617:tid 25688] [client 49.7.227.204:57442] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZirptqt50qKix2zKUS6CgAAAZc"]
[Sat Feb 21 03:08:06.485572 2026] [:error] [pid 54461:tid 54512] [client 18.219.131.181:51299] [client 18.219.131.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZixFi372fkN0w39NDMrJgAAAFQ"]
[Sat Feb 21 03:08:06.875234 2026] [:error] [pid 59127:tid 59151] [client 18.219.131.181:63144] [client 18.219.131.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aZixFnSltzl55Qz-09iqPAAAARY"]
[Sat Feb 21 03:08:07.264514 2026] [:error] [pid 46012:tid 46029] [client 18.219.131.181:57134] [client 18.219.131.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/media/system/js/core.js"] [unique_id "aZixFzXz-GTvuxLwgUHFZQAAAU8"]
[Sat Feb 21 06:04:31.594398 2026] [:error] [pid 22558:tid 22578] [client 43.166.253.94:38402] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZjabyrVaIb2gXsVbDowpgAAARI"]
[Sat Feb 21 06:24:23.092528 2026] [:error] [pid 40756:tid 40772] [client 43.154.140.188:41438] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZjfFwNlDP60sLYgqXLgzQAAAAY"]
[Sat Feb 21 14:50:25.187018 2026] [:error] [pid 40757:tid 40819] [client 82.68.95.66:56462] [client 82.68.95.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.68.95.66, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZlVsag_MKVL7zhH7dzigAAAAFg"]
[Sat Feb 21 14:50:25.193687 2026] [:error] [pid 40757:tid 40819] [client 82.68.95.66:56462] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 22:57:26.707349 2026] [:error] [pid 40871:tid 40897] [client 43.130.3.120:40158] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZnH1jqDikjdiOZeJyW3wwAAANg"]
[Sun Feb 22 07:44:55.079704 2026] [:error] [pid 9587:tid 9611] [client 43.135.145.117:52308] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZpDd-hqt7NXCp-NupEeZAAAAA8"]
[Sun Feb 22 07:56:15.988684 2026] [:error] [pid 9589:tid 9665] [client 43.130.31.17:40386] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZpGH9r-1mylR_FoXQVZsQAAAI4"]
[Sun Feb 22 08:46:19.451090 2026] [:error] [pid 9695:tid 9720] [client 62.84.185.69:59660] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZpR21pPqolBNLmJ4eqO1AAAANc"]
[Sun Feb 22 08:46:21.459700 2026] [:error] [pid 9695:tid 9708] [client 62.84.185.69:59664] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZpR3VpPqolBNLmJ4eqO3QAAAMs"]
[Sun Feb 22 08:46:23.388866 2026] [:error] [pid 9587:tid 9617] [client 62.84.185.69:57304] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZpR3-hqt7NXCp-NupEyDAAAABU"]
[Sun Feb 22 08:46:25.515494 2026] [:error] [pid 9589:tid 9675] [client 62.84.185.69:57310] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZpR4dr-1mylR_FoXQVuzAAAAJg"]
[Sun Feb 22 08:46:27.597824 2026] [:error] [pid 9589:tid 9661] [client 62.84.185.69:57316] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZpR49r-1mylR_FoXQVu1wAAAIo"]
[Sun Feb 22 08:46:29.716562 2026] [:error] [pid 9695:tid 9721] [client 62.84.185.69:57326] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZpR5VpPqolBNLmJ4eqO6wAAANg"]
[Sun Feb 22 08:46:31.959682 2026] [:error] [pid 9695:tid 9716] [client 62.84.185.69:57332] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZpR51pPqolBNLmJ4eqO9wAAANM"]
[Sun Feb 22 08:46:34.215295 2026] [:error] [pid 9589:tid 9673] [client 62.84.185.69:41320] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZpR6tr-1mylR_FoXQVu6AAAAJY"]
[Sun Feb 22 08:46:46.714333 2026] [:error] [pid 9587:tid 9600] [client 62.84.185.69:6612] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZpR9uhqt7NXCp-NupEyLAAAAAQ"]
[Sun Feb 22 08:46:48.855588 2026] [:error] [pid 9588:tid 9630] [client 62.84.185.69:6614] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZpR-GjNBsxseiTcElmplQAAAEY"]
[Sun Feb 22 08:46:50.842607 2026] [:error] [pid 9589:tid 9665] [client 62.84.185.69:6616] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZpR-tr-1mylR_FoXQVvCAAAAI4"]
[Sun Feb 22 08:46:52.952691 2026] [:error] [pid 9588:tid 9627] [client 62.84.185.69:6628] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZpR_GjNBsxseiTcElmpngAAAEM"]
[Sun Feb 22 08:46:55.118091 2026] [:error] [pid 10537:tid 10550] [client 62.84.185.69:64754] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZpR_7gCiSojLQQBckhInwAAAQs"]
[Sun Feb 22 08:46:57.261877 2026] [:error] [pid 9589:tid 9674] [client 62.84.185.69:64760] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZpSAdr-1mylR_FoXQVvDwAAAJc"]
[Sun Feb 22 08:47:56.672930 2026] [:error] [pid 9588:tid 9646] [client 62.84.185.69:58066] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZpSPGjNBsxseiTcElmqCQAAAFY"]
[Sun Feb 22 08:47:58.688831 2026] [:error] [pid 9587:tid 9608] [client 62.84.185.69:58072] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZpSPuhqt7NXCp-NupEypgAAAAw"]
[Sun Feb 22 08:48:00.603449 2026] [:error] [pid 9695:tid 9700] [client 62.84.185.69:58080] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZpSQFpPqolBNLmJ4eqPtwAAAMM"]
[Sun Feb 22 08:48:02.472421 2026] [:error] [pid 9588:tid 9648] [client 62.84.185.69:58084] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZpSQmjNBsxseiTcElmqDAAAAFg"]
[Sun Feb 22 08:48:04.483058 2026] [:error] [pid 9589:tid 9675] [client 62.84.185.69:3634] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZpSRNr-1mylR_FoXQVveQAAAJg"]
[Sun Feb 22 08:48:06.566829 2026] [:error] [pid 12501:tid 12514] [client 62.84.185.69:3638] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZpSRpicztrbvinWGXMOnAAAAUs"]
[Sun Feb 22 08:48:08.753432 2026] [:error] [pid 9695:tid 9701] [client 62.84.185.69:3654] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZpSSFpPqolBNLmJ4eqPyQAAAMQ"]
[Sun Feb 22 08:48:10.886301 2026] [:error] [pid 9588:tid 9634] [client 62.84.185.69:3658] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZpSSmjNBsxseiTcElmqGgAAAEo"]
[Sun Feb 22 08:48:12.830855 2026] [:error] [pid 9695:tid 9715] [client 62.84.185.69:3668] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZpSTFpPqolBNLmJ4eqP1wAAANI"]
[Sun Feb 22 08:48:14.702539 2026] [:error] [pid 12501:tid 12521] [client 62.84.185.69:32416] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZpSTpicztrbvinWGXMOrwAAAVI"]
[Sun Feb 22 08:48:16.735998 2026] [:error] [pid 9695:tid 9718] [client 62.84.185.69:32420] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZpSUFpPqolBNLmJ4eqP4wAAANU"]
[Sun Feb 22 08:48:18.874036 2026] [:error] [pid 9695:tid 9716] [client 62.84.185.69:32428] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZpSUlpPqolBNLmJ4eqP5wAAANM"]
[Sun Feb 22 08:48:21.067058 2026] [:error] [pid 9588:tid 9628] [client 62.84.185.69:32432] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZpSVWjNBsxseiTcElmqJgAAAEQ"]
[Sun Feb 22 08:48:23.093872 2026] [:error] [pid 10537:tid 10552] [client 62.84.185.69:32440] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZpSV7gCiSojLQQBckhJMAAAAQ0"]
[Sun Feb 22 08:48:25.050692 2026] [:error] [pid 10537:tid 10548] [client 62.84.185.69:48216] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZpSWbgCiSojLQQBckhJMgAAAQk"]
[Sun Feb 22 08:48:27.025858 2026] [:error] [pid 9695:tid 9712] [client 62.84.185.69:48228] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZpSW1pPqolBNLmJ4eqP9wAAAM8"]
[Sun Feb 22 08:48:29.223419 2026] [:error] [pid 9587:tid 9603] [client 62.84.185.69:48230] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZpSXehqt7NXCp-NupEyxQAAAAc"]
[Sun Feb 22 08:48:31.197984 2026] [:error] [pid 10537:tid 10551] [client 62.84.185.69:48232] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZpSX7gCiSojLQQBckhJNgAAAQw"]
[Sun Feb 22 08:48:33.135218 2026] [:error] [pid 12501:tid 12510] [client 62.84.185.69:48248] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZpSYZicztrbvinWGXMOwQAAAUc"]
[Sun Feb 22 08:48:35.123676 2026] [:error] [pid 9588:tid 9646] [client 62.84.185.69:4076] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZpSY2jNBsxseiTcElmqNwAAAFY"]
[Sun Feb 22 08:48:37.327001 2026] [:error] [pid 9587:tid 9605] [client 62.84.185.69:4080] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZpSZehqt7NXCp-NupEyyQAAAAk"]
[Sun Feb 22 08:48:39.396858 2026] [:error] [pid 9695:tid 9700] [client 62.84.185.69:4096] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZpSZ1pPqolBNLmJ4eqP_gAAAMM"]
[Sun Feb 22 08:48:41.314771 2026] [:error] [pid 9588:tid 9641] [client 62.84.185.69:4112] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZpSaWjNBsxseiTcElmqRQAAAFE"]
[Sun Feb 22 08:48:43.310329 2026] [:error] [pid 10537:tid 10554] [client 62.84.185.69:4120] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZpSa7gCiSojLQQBckhJRAAAAQ8"]
[Sun Feb 22 08:48:45.526629 2026] [:error] [pid 10537:tid 10555] [client 62.84.185.69:18770] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZpSbbgCiSojLQQBckhJSgAAARA"]
[Sun Feb 22 08:48:47.491650 2026] [:error] [pid 10537:tid 10539] [client 62.84.185.69:18780] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZpSb7gCiSojLQQBckhJUwAAAQA"]
[Sun Feb 22 08:48:49.083147 2026] [:error] [pid 9589:tid 9658] [client 62.84.185.69:18784] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZpScdr-1mylR_FoXQVvsQAAAIc"]
[Sun Feb 22 08:48:53.157211 2026] [:error] [pid 9587:tid 9618] [client 62.84.185.69:18796] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZpSdehqt7NXCp-NupEy2gAAABY"]
[Sun Feb 22 10:03:17.831930 2026] [:error] [pid 9589:tid 9651] [client 36.111.67.189:55509] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZpj5dr-1mylR_FoXQWTVwAAAIA"]
[Sun Feb 22 10:14:28.221083 2026] [:error] [pid 9588:tid 9647] [client 209.9.200.163:49593] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZpmhGjNBsxseiTcElnH4gAAAFc"]
[Sun Feb 22 10:14:30.044446 2026] [:error] [pid 9589:tid 9661] [client 209.9.200.163:55487] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZpmhtr-1mylR_FoXQWX1gAAAIo"]
[Sun Feb 22 10:14:31.821490 2026] [:error] [pid 9587:tid 9600] [client 209.9.200.163:24379] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZpmh-hqt7NXCp-NupFSHAAAAAQ"]
[Sun Feb 22 10:14:33.664564 2026] [:error] [pid 9587:tid 9601] [client 209.9.200.163:3722] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZpmiehqt7NXCp-NupFSHQAAAAU"]
[Sun Feb 22 10:14:35.655440 2026] [:error] [pid 9589:tid 9656] [client 209.9.200.163:42498] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZpmi9r-1mylR_FoXQWX3wAAAIU"]
[Sun Feb 22 10:14:37.645536 2026] [:error] [pid 9589:tid 9660] [client 209.9.200.163:34170] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZpmjdr-1mylR_FoXQWX4wAAAIk"]
[Sun Feb 22 10:14:39.470421 2026] [:error] [pid 9589:tid 9671] [client 209.9.200.163:40246] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZpmj9r-1mylR_FoXQWX5gAAAJQ"]
[Sun Feb 22 10:14:41.569072 2026] [:error] [pid 9589:tid 9656] [client 209.9.200.163:5080] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZpmkdr-1mylR_FoXQWX8AAAAIU"]
[Sun Feb 22 10:14:43.428745 2026] [:error] [pid 10537:tid 10562] [client 209.9.200.163:50797] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZpmk7gCiSojLQQBckhoGAAAARc"]
[Sun Feb 22 10:14:45.257206 2026] [:error] [pid 12501:tid 12520] [client 209.9.200.163:50251] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZpmlZicztrbvinWGXM8SQAAAVE"]
[Sun Feb 22 10:14:47.075272 2026] [:error] [pid 9588:tid 9624] [client 209.9.200.163:1134] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZpml2jNBsxseiTcElnIAAAAAEA"]
[Sun Feb 22 10:14:48.935804 2026] [:error] [pid 9587:tid 9612] [client 209.9.200.163:15481] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZpmmOhqt7NXCp-NupFSNQAAABA"]
[Sun Feb 22 10:14:51.085508 2026] [:error] [pid 9695:tid 9697] [client 209.9.200.163:51968] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZpmm1pPqolBNLmJ4eqzoQAAAMA"]
[Sun Feb 22 10:14:52.924508 2026] [:error] [pid 12501:tid 12505] [client 209.9.200.163:57678] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZpmnJicztrbvinWGXM8WwAAAUI"]
[Sun Feb 22 10:14:54.702780 2026] [:error] [pid 9695:tid 9709] [client 209.9.200.163:52342] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZpmnlpPqolBNLmJ4eqzsAAAAMw"]
[Sun Feb 22 10:14:56.670048 2026] [:error] [pid 10537:tid 10554] [client 209.9.200.163:27145] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZpmoLgCiSojLQQBckhoKgAAAQ8"]
[Sun Feb 22 10:14:58.529019 2026] [:error] [pid 9588:tid 9628] [client 209.9.200.163:16335] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZpmomjNBsxseiTcElnIHAAAAEQ"]
[Sun Feb 22 10:15:00.430898 2026] [:error] [pid 9587:tid 9605] [client 209.9.200.163:62019] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZpmpOhqt7NXCp-NupFSWQAAAAk"]
[Sun Feb 22 10:15:02.544098 2026] [:error] [pid 10537:tid 10545] [client 209.9.200.163:41156] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZpmprgCiSojLQQBckhoNwAAAQY"]
[Sun Feb 22 10:15:04.346870 2026] [:error] [pid 9589:tid 9669] [client 209.9.200.163:12465] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZpmqNr-1mylR_FoXQWYLQAAAJI"]
[Sun Feb 22 10:15:06.159536 2026] [:error] [pid 12501:tid 12518] [client 209.9.200.163:27541] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZpmqpicztrbvinWGXM8dAAAAU8"]
[Sun Feb 22 10:15:08.077795 2026] [:error] [pid 9589:tid 9651] [client 209.9.200.163:18442] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZpmrNr-1mylR_FoXQWYNAAAAIA"]
[Sun Feb 22 10:15:10.151482 2026] [:error] [pid 9589:tid 9663] [client 209.9.200.163:38686] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZpmrtr-1mylR_FoXQWYNwAAAIw"]
[Sun Feb 22 10:15:14.365528 2026] [:error] [pid 9588:tid 9628] [client 209.9.200.163:51233] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZpmsmjNBsxseiTcElnIOAAAAEQ"]
[Sun Feb 22 10:15:16.604376 2026] [:error] [pid 12501:tid 12521] [client 209.9.200.163:41324] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZpmtJicztrbvinWGXM8iQAAAVI"]
[Sun Feb 22 10:15:20.863427 2026] [:error] [pid 9588:tid 9629] [client 209.9.200.163:42589] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZpmuGjNBsxseiTcElnISwAAAEU"]
[Sun Feb 22 10:15:22.675360 2026] [:error] [pid 9588:tid 9627] [client 209.9.200.163:40761] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZpmumjNBsxseiTcElnITwAAAEM"]
[Sun Feb 22 10:15:46.950785 2026] [:error] [pid 12501:tid 12521] [client 209.9.200.163:28347] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZpm0picztrbvinWGXM87gAAAVI"]
[Sun Feb 22 10:15:48.854609 2026] [:error] [pid 9587:tid 9606] [client 209.9.200.163:14555] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZpm1Ohqt7NXCp-NupFSigAAAAo"]
[Sun Feb 22 10:15:50.814738 2026] [:error] [pid 9589:tid 9659] [client 209.9.200.163:9324] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZpm1tr-1mylR_FoXQWYagAAAIg"]
[Sun Feb 22 10:15:54.659642 2026] [:error] [pid 9588:tid 9637] [client 209.9.200.163:44204] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZpm2mjNBsxseiTcElnIbAAAAE0"]
[Sun Feb 22 10:34:42.263168 2026] [:error] [pid 9695:tid 9702] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Feb 22 10:34:42.402935 2026] [:error] [pid 9695:tid 9716] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Feb 22 10:34:42.540708 2026] [:error] [pid 9695:tid 9712] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Feb 22 10:34:43.882593 2026] [:error] [pid 9695:tid 9710] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Feb 22 10:34:44.035884 2026] [:error] [pid 9695:tid 9715] [client 52.141.18.191:1459] [client 52.141.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.141.18.191, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZprRFpPqolBNLmJ4eq6XQAAANI"]
[Sun Feb 22 10:34:44.039228 2026] [:error] [pid 9695:tid 9715] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Feb 22 10:34:44.177196 2026] [:error] [pid 9695:tid 9698] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Feb 22 10:34:44.315521 2026] [:error] [pid 9695:tid 9701] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Feb 22 10:34:44.454292 2026] [:error] [pid 9695:tid 9709] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Feb 22 10:34:44.592422 2026] [:error] [pid 9695:tid 9717] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Feb 22 10:34:44.730519 2026] [:error] [pid 9695:tid 9707] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sun Feb 22 10:34:44.871603 2026] [:error] [pid 9695:tid 9718] [client 52.141.18.191:1459] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Feb 22 10:34:45.006795 2026] [:error] [pid 9695:tid 9703] [client 52.141.18.191:1459] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aZprRVpPqolBNLmJ4eq6ZQAAAMY"]
[Sun Feb 22 10:34:45.567955 2026] [:error] [pid 9588:tid 9645] [client 52.141.18.191:1473] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aZprRWjNBsxseiTcElnNZwAAAFU"]
[Sun Feb 22 10:34:46.125710 2026] [:error] [pid 9588:tid 9644] [client 52.141.18.191:1490] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aZprRmjNBsxseiTcElnNagAAAFQ"]
[Sun Feb 22 10:34:46.689092 2026] [:error] [pid 17328:tid 17373] [client 52.141.18.191:1526] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aZprRimytOXCmY4_PcaBNgAAAZU"]
[Sun Feb 22 19:56:38.606695 2026] [:error] [pid 2760:tid 2764] [client 185.34.89.160:65047] [client 185.34.89.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.34.89.160, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZru9r7Njw90g02i9RlvhwAAAAA"]
[Sun Feb 22 19:56:38.611130 2026] [:error] [pid 2760:tid 2764] [client 185.34.89.160:65047] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Feb 22 22:57:19.794551 2026] [:error] [pid 2628:tid 2636] [client 114.80.36.40:37524] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZsZT7K4woMTeUPH2nsrNgAAAQU"]
[Sun Feb 22 23:14:31.576065 2026] [:error] [pid 2474:tid 2534] [client 170.106.110.146:35066] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZsdV_hvE7P5hX_xKnSuoAAAAE8"]
[Sun Feb 22 23:34:01.478276 2026] [:error] [pid 26033:tid 26059] [client 185.137.164.20:64349] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZsh6UTRRZdhkkS8ouSJPgAAAdg"]
[Sun Feb 22 23:34:02.167969 2026] [:error] [pid 2474:tid 2526] [client 185.137.164.16:27293] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZsh6vhvE7P5hX_xKnS45QAAAEs"]
[Sun Feb 22 23:34:02.787604 2026] [:error] [pid 2628:tid 2637] [client 185.137.164.15:41587] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZsh6rK4woMTeUPH2ns8wwAAAQY"]
[Sun Feb 22 23:34:03.446307 2026] [:error] [pid 26033:tid 26039] [client 185.137.164.13:62143] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZsh60TRRZdhkkS8ouSJWQAAAcQ"]
[Sun Feb 22 23:34:03.973497 2026] [:error] [pid 2473:tid 2484] [client 185.137.164.14:50219] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZsh63ptAeV7-XzzNzg-NwAAAAc"]
[Sun Feb 22 23:34:04.506969 2026] [:error] [pid 2473:tid 2492] [client 185.137.164.18:27671] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZsh7HptAeV7-XzzNzg-QQAAAA8"]
[Sun Feb 22 23:34:05.042032 2026] [:error] [pid 2574:tid 2594] [client 185.137.164.19:60763] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZsh7ckPV7h4nTf-jiTnOAAAAM0"]
[Sun Feb 22 23:34:05.577504 2026] [:error] [pid 26033:tid 26054] [client 185.137.164.16:49971] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZsh7UTRRZdhkkS8ouSJfgAAAdM"]
[Sun Feb 22 23:34:06.144857 2026] [:error] [pid 2629:tid 2666] [client 185.137.164.20:28421] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZsh7glsXSV5M4mfwZ9bVwAAAUg"]
[Sun Feb 22 23:34:06.815002 2026] [:error] [pid 2473:tid 2492] [client 185.137.164.14:38175] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZsh7nptAeV7-XzzNzg-WQAAAA8"]
[Mon Feb 23 02:07:34.545528 2026] [:error] [pid 28425:tid 28512] [client 51.75.129.164:35468] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZtF5jO7QIkwG1UqFGz6xQAAAFM"]
[Mon Feb 23 02:07:36.548203 2026] [:error] [pid 28426:tid 28543] [client 51.75.129.164:47104] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZtF6GgbPVf4pO12NZni4QAAAJU"]
[Mon Feb 23 02:07:38.641807 2026] [:error] [pid 28558:tid 28573] [client 51.75.129.164:47120] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZtF6idFHR5e1Gd10veTtQAAAM0"]
[Mon Feb 23 02:07:40.529478 2026] [:error] [pid 28558:tid 28584] [client 51.75.129.164:47134] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZtF7CdFHR5e1Gd10veTwAAAANg"]
[Mon Feb 23 02:07:42.447028 2026] [:error] [pid 28425:tid 28512] [client 51.75.129.164:47150] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZtF7jO7QIkwG1UqFGz62wAAAFM"]
[Mon Feb 23 02:07:44.491009 2026] [:error] [pid 28424:tid 28445] [client 51.75.129.164:47166] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZtF8ABAZT_BJOxE-Z460gAAABE"]
[Mon Feb 23 02:07:46.378557 2026] [:error] [pid 28426:tid 28534] [client 51.75.129.164:51070] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZtF8mgbPVf4pO12NZni8gAAAIw"]
[Mon Feb 23 02:07:48.431115 2026] [:error] [pid 28425:tid 28505] [client 51.75.129.164:51086] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZtF9DO7QIkwG1UqFGz67gAAAEw"]
[Mon Feb 23 02:07:50.486110 2026] [:error] [pid 28426:tid 28541] [client 51.75.129.164:51102] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZtF9mgbPVf4pO12NZnjAwAAAJM"]
[Mon Feb 23 02:07:52.530373 2026] [:error] [pid 28558:tid 28578] [client 51.75.129.164:51106] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZtF-CdFHR5e1Gd10veT4wAAANI"]
[Mon Feb 23 02:07:54.427216 2026] [:error] [pid 4806:tid 4822] [client 51.75.129.164:51122] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZtF-vFTHI_ud-cTYbQNsAAAAQ4"]
[Mon Feb 23 02:07:56.456539 2026] [:error] [pid 4806:tid 4832] [client 51.75.129.164:33446] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZtF_PFTHI_ud-cTYbQNuwAAARg"]
[Mon Feb 23 02:07:58.473548 2026] [:error] [pid 28425:tid 28513] [client 51.75.129.164:33456] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZtF_jO7QIkwG1UqFGz6-wAAAFQ"]
[Mon Feb 23 02:08:00.366479 2026] [:error] [pid 4806:tid 4826] [client 51.75.129.164:33462] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZtGAPFTHI_ud-cTYbQNzQAAARI"]
[Mon Feb 23 02:08:02.418046 2026] [:error] [pid 28424:tid 28449] [client 51.75.129.164:33466] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZtGAgBAZT_BJOxE-Z46-AAAABU"]
[Mon Feb 23 02:08:04.446299 2026] [:error] [pid 28426:tid 28537] [client 51.75.129.164:33470] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZtGBGgbPVf4pO12NZnjGwAAAI8"]
[Mon Feb 23 02:08:06.464191 2026] [:error] [pid 4806:tid 4827] [client 51.75.129.164:48220] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZtGBvFTHI_ud-cTYbQN1wAAARM"]
[Mon Feb 23 02:08:08.505037 2026] [:error] [pid 4806:tid 4816] [client 51.75.129.164:48226] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZtGCPFTHI_ud-cTYbQN5gAAAQg"]
[Mon Feb 23 02:08:10.385639 2026] [:error] [pid 4806:tid 4815] [client 51.75.129.164:48228] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZtGCvFTHI_ud-cTYbQN7QAAAQc"]
[Mon Feb 23 02:08:12.422563 2026] [:error] [pid 28558:tid 28581] [client 51.75.129.164:48232] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZtGDCdFHR5e1Gd10veUEQAAANU"]
[Mon Feb 23 02:08:14.314160 2026] [:error] [pid 28558:tid 28579] [client 51.75.129.164:48244] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZtGDidFHR5e1Gd10veUFwAAANM"]
[Mon Feb 23 02:08:16.331608 2026] [:error] [pid 28425:tid 28516] [client 51.75.129.164:54314] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZtGEDO7QIkwG1UqFGz7GgAAAFc"]
[Mon Feb 23 02:08:18.360550 2026] [:error] [pid 28426:tid 28526] [client 51.75.129.164:54316] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZtGEmgbPVf4pO12NZnjOgAAAIU"]
[Mon Feb 23 02:08:20.376037 2026] [:error] [pid 28558:tid 28565] [client 51.75.129.164:54322] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZtGFCdFHR5e1Gd10veUIwAAAMU"]
[Mon Feb 23 02:08:22.436554 2026] [:error] [pid 28558:tid 28566] [client 51.75.129.164:54324] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZtGFidFHR5e1Gd10veUKQAAAMY"]
[Mon Feb 23 02:08:24.468941 2026] [:error] [pid 28425:tid 28516] [client 51.75.129.164:54336] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZtGGDO7QIkwG1UqFGz7QwAAAFc"]
[Mon Feb 23 02:08:26.482859 2026] [:error] [pid 28426:tid 28536] [client 51.75.129.164:53508] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZtGGmgbPVf4pO12NZnjSgAAAI4"]
[Mon Feb 23 02:08:28.514105 2026] [:error] [pid 4806:tid 4817] [client 51.75.129.164:53516] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZtGHPFTHI_ud-cTYbQONQAAAQk"]
[Mon Feb 23 02:08:30.544253 2026] [:error] [pid 4806:tid 4826] [client 51.75.129.164:53520] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZtGHvFTHI_ud-cTYbQOPgAAARI"]
[Mon Feb 23 02:08:50.853573 2026] [:error] [pid 4806:tid 4830] [client 51.75.129.164:53524] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZtGMvFTHI_ud-cTYbQOcQAAARY"]
[Mon Feb 23 02:08:52.842681 2026] [:error] [pid 28426:tid 28521] [client 51.75.129.164:39106] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZtGNGgbPVf4pO12NZnjiAAAAIA"]
[Mon Feb 23 02:08:54.857272 2026] [:error] [pid 4806:tid 4810] [client 51.75.129.164:39114] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZtGNvFTHI_ud-cTYbQOfgAAAQI"]
[Mon Feb 23 02:08:56.740173 2026] [:error] [pid 4806:tid 4819] [client 51.75.129.164:47472] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZtGOPFTHI_ud-cTYbQOiQAAAQs"]
[Mon Feb 23 02:08:58.772148 2026] [:error] [pid 28425:tid 28494] [client 51.75.129.164:47486] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZtGOjO7QIkwG1UqFGz7jwAAAEE"]
[Mon Feb 23 02:09:00.778669 2026] [:error] [pid 4806:tid 4816] [client 51.75.129.164:47502] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZtGPPFTHI_ud-cTYbQOlgAAAQg"]
[Mon Feb 23 02:09:02.782333 2026] [:error] [pid 4806:tid 4810] [client 51.75.129.164:47506] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZtGPvFTHI_ud-cTYbQOmwAAAQI"]
[Mon Feb 23 02:09:04.643077 2026] [:error] [pid 28558:tid 28579] [client 51.75.129.164:47520] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZtGQCdFHR5e1Gd10veUmwAAANM"]
[Mon Feb 23 02:09:06.652691 2026] [:error] [pid 28558:tid 28580] [client 51.75.129.164:47392] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZtGQidFHR5e1Gd10veUngAAANQ"]
[Mon Feb 23 02:09:08.665792 2026] [:error] [pid 4806:tid 4825] [client 51.75.129.164:47398] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZtGRPFTHI_ud-cTYbQOrQAAARE"]
[Mon Feb 23 02:09:10.690231 2026] [:error] [pid 28558:tid 28571] [client 51.75.129.164:47410] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZtGRidFHR5e1Gd10veUpAAAAMs"]
[Mon Feb 23 02:09:13.813417 2026] [:error] [pid 28425:tid 28513] [client 51.75.129.164:47420] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZtGSTO7QIkwG1UqFGz7sgAAAFQ"]
[Mon Feb 23 02:09:17.623897 2026] [:error] [pid 28426:tid 28542] [client 51.75.129.164:58204] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZtGTWgbPVf4pO12NZnjpwAAAJQ"]
[Mon Feb 23 06:08:00.238571 2026] [:error] [pid 2826:tid 2840] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Feb 23 06:08:00.549778 2026] [:error] [pid 2826:tid 2843] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Feb 23 06:08:00.789712 2026] [:error] [pid 2826:tid 2832] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Mon Feb 23 06:08:01.003790 2026] [:error] [pid 2826:tid 2830] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Feb 23 06:08:01.213799 2026] [:error] [pid 2826:tid 2841] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Feb 23 06:08:01.432533 2026] [:error] [pid 2826:tid 2844] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Feb 23 06:08:01.655896 2026] [:error] [pid 2826:tid 2852] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Feb 23 06:08:01.926973 2026] [:error] [pid 2826:tid 2833] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Feb 23 06:08:02.417318 2026] [:error] [pid 2826:tid 2829] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Feb 23 06:08:02.899931 2026] [:error] [pid 2826:tid 2851] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Mon Feb 23 06:08:03.147702 2026] [:error] [pid 2826:tid 2849] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Feb 23 06:08:03.371313 2026] [:error] [pid 2826:tid 2840] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Feb 23 06:08:03.623969 2026] [:error] [pid 2826:tid 2843] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Feb 23 06:08:03.988731 2026] [:error] [pid 2826:tid 2848] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Feb 23 06:08:04.231964 2026] [:error] [pid 2826:tid 2837] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Mon Feb 23 06:08:04.465437 2026] [:error] [pid 2826:tid 2841] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Mon Feb 23 06:08:04.682427 2026] [:error] [pid 2826:tid 2836] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Feb 23 06:08:04.927276 2026] [:error] [pid 2826:tid 2838] [client 91.200.133.2:20149] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Feb 23 06:08:08.374537 2026] [:error] [pid 2826:tid 2841] [client 91.200.133.2:20149] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZt-SD3FWVe0BC2oMiDMTwAAAQw"]
[Mon Feb 23 06:08:09.506288 2026] [:error] [pid 2570:tid 2581] [client 91.200.133.2:48523] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZt-Sah2MyYIw6djQ6WyOAAAAMM"]
[Mon Feb 23 06:08:10.647611 2026] [:error] [pid 2826:tid 2837] [client 91.200.133.4:52283] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Feb 23 06:08:11.284123 2026] [:error] [pid 2826:tid 2840] [client 91.200.133.4:52283] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aZt-Sz3FWVe0BC2oMiDMXQAAAQs"]
[Mon Feb 23 06:08:12.172100 2026] [:error] [pid 2826:tid 2846] [client 91.200.133.4:60659] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Feb 23 06:08:12.461293 2026] [:error] [pid 2826:tid 2844] [client 91.200.133.4:60659] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aZt-TD3FWVe0BC2oMiDMaAAAAQ8"]
[Mon Feb 23 06:08:13.153206 2026] [:error] [pid 2826:tid 2835] [client 91.200.133.4:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Feb 23 06:08:14.308666 2026] [:error] [pid 2826:tid 2847] [client 91.200.133.4:33573] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZt-Tj3FWVe0BC2oMiDMfAAAARI"]
[Mon Feb 23 06:08:14.969447 2026] [:error] [pid 2570:tid 2587] [client 91.200.133.8:51859] [client 91.200.133.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZt-Tqh2MyYIw6djQ6WySgAAAMk"]
[Mon Feb 23 06:08:15.388061 2026] [:error] [pid 2826:tid 2831] [client 91.200.133.5:44517] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZt-Tz3FWVe0BC2oMiDMgwAAAQI"]
[Mon Feb 23 06:08:15.829969 2026] [:error] [pid 2826:tid 2842] [client 91.200.133.3:62547] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZt-Tz3FWVe0BC2oMiDMhgAAAQ0"]
[Mon Feb 23 06:08:17.351913 2026] [:error] [pid 2826:tid 2829] [client 91.200.133.9:49927] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZt-UT3FWVe0BC2oMiDMiwAAAQA"]
[Mon Feb 23 06:08:17.780772 2026] [:error] [pid 2570:tid 2602] [client 91.200.133.6:38935] [client 91.200.133.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZt-Uah2MyYIw6djQ6WyUQAAANg"]
[Mon Feb 23 06:08:18.432890 2026] [:error] [pid 2570:tid 2583] [client 91.200.133.10:57879] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZt-Uqh2MyYIw6djQ6WyVQAAAMU"]
[Mon Feb 23 06:08:18.910579 2026] [:error] [pid 2445:tid 2488] [client 91.200.133.9:52555] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Mon Feb 23 06:08:19.335747 2026] [:error] [pid 2445:tid 2475] [client 91.200.133.9:52555] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aZt-Uz1z6EhBn71lCAF0lQAAAEA"]
[Mon Feb 23 06:08:21.342792 2026] [:error] [pid 2826:tid 2847] [client 91.200.133.10:57693] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZt-VT3FWVe0BC2oMiDMnQAAARI"]
[Mon Feb 23 06:08:21.979885 2026] [:error] [pid 2570:tid 2585] [client 91.200.133.2:62659] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZt-Vah2MyYIw6djQ6WyYgAAAMc"]
[Mon Feb 23 06:08:22.404564 2026] [:error] [pid 2445:tid 2500] [client 91.200.133.5:24187] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Feb 23 06:08:22.612138 2026] [:error] [pid 2445:tid 2497] [client 91.200.133.5:24187] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZt-Vj1z6EhBn71lCAF0mAAAAFU"]
[Mon Feb 23 06:08:23.033509 2026] [:error] [pid 2446:tid 2507] [client 91.200.133.8:37545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Feb 23 06:08:23.782337 2026] [:error] [pid 2446:tid 2511] [client 91.200.133.8:37545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Feb 23 06:08:24.533997 2026] [:error] [pid 2446:tid 2525] [client 91.200.133.8:37545] [client 91.200.133.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZt-WNMqX9gYEfsYvrilXAAAAJc"]
[Mon Feb 23 06:08:24.959327 2026] [:error] [pid 2446:tid 2514] [client 91.200.133.10:59513] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Mon Feb 23 06:08:25.177452 2026] [:error] [pid 2446:tid 2504] [client 91.200.133.10:59513] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZt-WdMqX9gYEfsYvrilYAAAAII"]
[Mon Feb 23 06:08:25.601317 2026] [:error] [pid 2445:tid 2486] [client 91.200.133.11:31267] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Feb 23 06:08:26.049871 2026] [:error] [pid 2445:tid 2483] [client 91.200.133.11:31267] [client 91.200.133.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aZt-Wj1z6EhBn71lCAF0owAAAEg"]
[Mon Feb 23 06:08:26.760729 2026] [:error] [pid 2570:tid 2583] [client 91.200.133.4:54273] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZt-Wqh2MyYIw6djQ6WyaQAAAMU"]
[Mon Feb 23 06:08:27.539181 2026] [:error] [pid 2570:tid 2587] [client 91.200.133.5:52579] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Mon Feb 23 06:08:27.756597 2026] [:error] [pid 2570:tid 2579] [client 91.200.133.5:52579] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Feb 23 06:08:28.223673 2026] [:error] [pid 2570:tid 2581] [client 91.200.133.5:52579] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZt-XKh2MyYIw6djQ6WydgAAAMM"]
[Mon Feb 23 06:08:28.902714 2026] [:error] [pid 2445:tid 2482] [client 91.200.133.9:51841] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZt-XD1z6EhBn71lCAF0pwAAAEc"]
[Mon Feb 23 06:08:29.609322 2026] [:error] [pid 2446:tid 2523] [client 91.200.133.3:55529] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZt-XdMqX9gYEfsYvrilZAAAAJU"]
[Mon Feb 23 06:08:30.071878 2026] [:error] [pid 2446:tid 2520] [client 91.200.133.10:26145] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZt-XtMqX9gYEfsYvrilaAAAAJI"]
[Mon Feb 23 06:08:31.600140 2026] [:error] [pid 2444:tid 2451] [client 91.200.133.4:26763] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZt-X7MHc-5h3vMZorAnggAAAAM"]
[Mon Feb 23 06:08:32.516060 2026] [:error] [pid 2570:tid 2589] [client 91.200.133.10:21315] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Feb 23 06:08:32.764336 2026] [:error] [pid 2570:tid 2600] [client 91.200.133.10:21315] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aZt-YKh2MyYIw6djQ6WygwAAANY"]
[Mon Feb 23 06:08:33.187001 2026] [:error] [pid 2826:tid 2850] [client 91.200.133.2:32369] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aZt-YT3FWVe0BC2oMiDMsAAAARU"]
[Mon Feb 23 06:08:35.055291 2026] [:error] [pid 2570:tid 2595] [client 91.200.133.10:50771] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZt-Y6h2MyYIw6djQ6WyhQAAANE"]
[Mon Feb 23 06:08:35.971932 2026] [:error] [pid 2445:tid 2483] [client 91.200.133.2:26791] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Mon Feb 23 06:08:36.431904 2026] [:error] [pid 2445:tid 2491] [client 91.200.133.2:26791] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Feb 23 06:08:37.295465 2026] [:error] [pid 2445:tid 2492] [client 91.200.133.2:26791] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aZt-ZT1z6EhBn71lCAF0twAAAFE"]
[Mon Feb 23 06:08:38.425479 2026] [:error] [pid 2446:tid 2506] [client 91.200.133.11:63907] [client 91.200.133.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.200.133.11, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZt-ZtMqX9gYEfsYvrildQAAAIQ"]
[Mon Feb 23 06:08:38.705030 2026] [:error] [pid 2446:tid 2517] [client 91.200.133.11:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Feb 23 06:08:39.873571 2026] [:error] [pid 2446:tid 2515] [client 91.200.133.11:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Mon Feb 23 06:08:40.086382 2026] [:error] [pid 2446:tid 2522] [client 91.200.133.11:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Feb 23 06:08:41.346841 2026] [:error] [pid 2446:tid 2506] [client 91.200.133.11:63907] [client 91.200.133.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZt-adMqX9gYEfsYvrilhwAAAIQ"]
[Mon Feb 23 06:08:42.127979 2026] [:error] [pid 2445:tid 2494] [client 91.200.133.3:31319] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Mon Feb 23 06:08:42.342829 2026] [:error] [pid 2445:tid 2498] [client 91.200.133.3:31319] [client 91.200.133.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.200.133.3, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZt-aj1z6EhBn71lCAF0vQAAAFY"]
[Mon Feb 23 06:08:42.896238 2026] [:error] [pid 2445:tid 2493] [client 91.200.133.3:31319] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aZt-aj1z6EhBn71lCAF0vwAAAFI"]
[Mon Feb 23 06:08:44.547238 2026] [:error] [pid 2826:tid 2832] [client 91.200.133.9:31801] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Feb 23 06:08:45.008102 2026] [:error] [pid 2826:tid 2837] [client 91.200.133.9:31801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Mon Feb 23 06:08:45.563433 2026] [:error] [pid 2826:tid 2851] [client 91.200.133.9:31801] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZt-bT3FWVe0BC2oMiDM2gAAARY"]
[Mon Feb 23 06:08:45.988162 2026] [:error] [pid 2826:tid 2845] [client 91.200.133.3:44745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Feb 23 06:08:46.631972 2026] [:error] [pid 2826:tid 2843] [client 91.200.133.3:44745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Mon Feb 23 06:08:47.069929 2026] [:error] [pid 2826:tid 2850] [client 91.200.133.3:44745] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Feb 23 06:08:47.645717 2026] [:error] [pid 2826:tid 2831] [client 91.200.133.3:44745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Feb 23 06:08:47.859923 2026] [:error] [pid 2826:tid 2837] [client 91.200.133.3:44745] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZt-bz3FWVe0BC2oMiDM-gAAAQg"]
[Mon Feb 23 06:08:48.412094 2026] [:error] [pid 2570:tid 2587] [client 91.200.133.3:52285] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Feb 23 06:08:48.623328 2026] [:error] [pid 2570:tid 2584] [client 91.200.133.3:52285] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Feb 23 06:08:48.846617 2026] [:error] [pid 2570:tid 2599] [client 91.200.133.3:52285] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZt-cKh2MyYIw6djQ6WyrAAAANU"]
[Mon Feb 23 06:08:49.540348 2026] [:error] [pid 2446:tid 2513] [client 91.200.133.2:61675] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Mon Feb 23 06:08:50.041273 2026] [:error] [pid 2446:tid 2526] [client 91.200.133.2:61675] [client 91.200.133.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.200.133.2, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aZt-ctMqX9gYEfsYvrimCQAAAJg"]
[Mon Feb 23 06:08:50.285860 2026] [:error] [pid 2446:tid 2508] [client 91.200.133.2:61675] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZt-ctMqX9gYEfsYvrimCgAAAIY"]
[Mon Feb 23 06:08:53.493610 2026] [:error] [pid 2826:tid 2832] [client 91.200.133.6:35727] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Mon Feb 23 06:08:54.990956 2026] [:error] [pid 2826:tid 2833] [client 91.200.133.6:35727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Feb 23 06:08:55.210933 2026] [:error] [pid 2826:tid 2851] [client 91.200.133.6:35727] [client 91.200.133.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZt-dz3FWVe0BC2oMiDNIgAAARY"]
[Mon Feb 23 06:08:55.732247 2026] [:error] [pid 2826:tid 2836] [client 91.200.133.9:32397] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Feb 23 06:08:56.386126 2026] [:error] [pid 2826:tid 2830] [client 91.200.133.9:32397] [client 91.200.133.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.200.133.9, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZt-eD3FWVe0BC2oMiDNKwAAAQE"]
[Mon Feb 23 06:08:56.639136 2026] [:error] [pid 2826:tid 2851] [client 91.200.133.9:32397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Mon Feb 23 06:08:56.864995 2026] [:error] [pid 2826:tid 2850] [client 91.200.133.9:32397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Mon Feb 23 06:08:57.075488 2026] [:error] [pid 2826:tid 2834] [client 91.200.133.9:32397] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Mon Feb 23 06:08:57.317868 2026] [:error] [pid 2826:tid 2844] [client 91.200.133.9:32397] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aZt-eT3FWVe0BC2oMiDNMwAAAQ8"]
[Mon Feb 23 06:08:57.750698 2026] [:error] [pid 2446:tid 2520] [client 91.200.133.3:23715] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Feb 23 06:08:57.972964 2026] [:error] [pid 2446:tid 2511] [client 91.200.133.3:23715] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aZt-edMqX9gYEfsYvrimGgAAAIk"]
[Mon Feb 23 06:08:58.610253 2026] [:error] [pid 2826:tid 2853] [client 91.200.133.3:42759] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Feb 23 06:08:58.860233 2026] [:error] [pid 2826:tid 2836] [client 91.200.133.3:42759] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZt-ej3FWVe0BC2oMiDNPQAAAQc"]
[Mon Feb 23 06:08:59.773640 2026] [:error] [pid 2826:tid 2840] [client 91.200.133.11:43235] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Mon Feb 23 06:08:59.994371 2026] [:error] [pid 2826:tid 2850] [client 91.200.133.11:43235] [client 91.200.133.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZt-ez3FWVe0BC2oMiDNRQAAARU"]
[Mon Feb 23 06:09:00.457087 2026] [:error] [pid 2444:tid 2462] [client 91.200.133.6:37641] [client 91.200.133.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZt-fLMHc-5h3vMZorAnmwAAAA4"]
[Mon Feb 23 06:09:00.887613 2026] [:error] [pid 2444:tid 2472] [client 91.200.133.2:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Mon Feb 23 06:09:01.135129 2026] [:error] [pid 2444:tid 2468] [client 91.200.133.2:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Mon Feb 23 06:09:02.311670 2026] [:error] [pid 2444:tid 2454] [client 91.200.133.2:38867] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZt-frMHc-5h3vMZorAnogAAAAY"]
[Mon Feb 23 06:09:03.961976 2026] [:error] [pid 2826:tid 2848] [client 91.200.133.10:50545] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZt-fz3FWVe0BC2oMiDNVAAAARM"]
[Mon Feb 23 06:09:05.085879 2026] [:error] [pid 2444:tid 2465] [client 91.200.133.2:49697] [client 91.200.133.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aZt-gbMHc-5h3vMZorAnqgAAABE"]
[Mon Feb 23 06:09:05.534275 2026] [:error] [pid 2444:tid 2462] [client 91.200.133.9:29439] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Mon Feb 23 06:09:05.995603 2026] [:error] [pid 2444:tid 2458] [client 91.200.133.9:29439] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Feb 23 06:09:06.251437 2026] [:error] [pid 2444:tid 2468] [client 91.200.133.9:29439] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZt-grMHc-5h3vMZorAnsAAAABQ"]
[Mon Feb 23 06:09:06.689406 2026] [:error] [pid 2570:tid 2591] [client 91.200.133.6:55181] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Feb 23 06:09:07.173290 2026] [:error] [pid 2570:tid 2597] [client 91.200.133.6:55181] [client 91.200.133.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aZt-g6h2MyYIw6djQ6WywQAAANM"]
[Mon Feb 23 06:09:08.243569 2026] [:error] [pid 2826:tid 2831] [client 91.200.133.10:50527] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZt-hD3FWVe0BC2oMiDNXwAAAQI"]
[Mon Feb 23 06:09:08.921209 2026] [:error] [pid 2570:tid 2592] [client 91.200.133.10:48397] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Feb 23 06:09:09.603427 2026] [:error] [pid 2570:tid 2600] [client 91.200.133.10:48397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Mon Feb 23 06:09:10.073307 2026] [:error] [pid 2570:tid 2589] [client 91.200.133.10:48397] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Feb 23 06:09:10.303579 2026] [:error] [pid 2570:tid 2594] [client 91.200.133.10:48397] [client 91.200.133.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZt-hqh2MyYIw6djQ6WyzAAAANA"]
[Mon Feb 23 06:09:10.756991 2026] [:error] [pid 2826:tid 2847] [client 91.200.133.5:65531] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aZt-hj3FWVe0BC2oMiDNaAAAARI"]
[Mon Feb 23 06:09:11.178584 2026] [:error] [pid 2445:tid 2484] [client 91.200.133.9:57167] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZt-hz1z6EhBn71lCAF0zwAAAEk"]
[Mon Feb 23 06:09:11.598441 2026] [:error] [pid 2445:tid 2476] [client 91.200.133.6:54129] [client 91.200.133.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZt-hz1z6EhBn71lCAF00AAAAEE"]
[Mon Feb 23 06:09:12.070902 2026] [:error] [pid 2445:tid 2475] [client 91.200.133.4:20641] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Mon Feb 23 06:09:12.278538 2026] [:error] [pid 2445:tid 2485] [client 91.200.133.4:20641] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZt-iD1z6EhBn71lCAF01QAAAEo"]
[Mon Feb 23 06:09:12.776374 2026] [:error] [pid 2444:tid 2464] [client 91.200.133.3:25989] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZt-iLMHc-5h3vMZorAnsgAAABA"]
[Mon Feb 23 06:09:14.308160 2026] [:error] [pid 2446:tid 2518] [client 91.200.133.4:22707] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Feb 23 06:09:14.774282 2026] [:error] [pid 2446:tid 2525] [client 91.200.133.4:22707] [client 91.200.133.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aZt-itMqX9gYEfsYvrimLwAAAJc"]
[Mon Feb 23 06:09:15.210460 2026] [:error] [pid 2570:tid 2584] [client 91.200.133.3:40813] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZt-i6h2MyYIw6djQ6WyzwAAAMY"]
[Mon Feb 23 06:09:15.628560 2026] [:error] [pid 2826:tid 2837] [client 91.200.133.7:46217] [client 91.200.133.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZt-iz3FWVe0BC2oMiDNdAAAAQg"]
[Mon Feb 23 06:09:16.194167 2026] [:error] [pid 2446:tid 2522] [client 91.200.133.6:22627] [client 91.200.133.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZt-jNMqX9gYEfsYvrimNAAAAJQ"]
[Mon Feb 23 06:09:16.864080 2026] [:error] [pid 2446:tid 2510] [client 91.200.133.5:42551] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZt-jNMqX9gYEfsYvrimOgAAAIg"]
[Mon Feb 23 06:09:17.814111 2026] [:error] [pid 2445:tid 2488] [client 91.200.133.9:42749] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZt-jT1z6EhBn71lCAF04AAAAE0"]
[Mon Feb 23 06:09:18.332029 2026] [:error] [pid 2446:tid 2509] [client 91.200.133.7:31873] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Feb 23 06:09:19.041641 2026] [:error] [pid 2446:tid 2516] [client 91.200.133.7:31873] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Mon Feb 23 06:09:19.290641 2026] [:error] [pid 2446:tid 2510] [client 91.200.133.7:31873] [client 91.200.133.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZt-j9MqX9gYEfsYvrimTgAAAIg"]
[Mon Feb 23 06:09:20.037507 2026] [:error] [pid 2446:tid 2523] [client 91.200.133.7:30361] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Mon Feb 23 06:09:20.265977 2026] [:error] [pid 2446:tid 2511] [client 91.200.133.7:30361] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Feb 23 06:09:21.488955 2026] [:error] [pid 2446:tid 2503] [client 91.200.133.7:30361] [client 91.200.133.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aZt-kdMqX9gYEfsYvrimYQAAAIE"]
[Mon Feb 23 06:09:22.603488 2026] [:error] [pid 2826:tid 2841] [client 91.200.133.7:47779] [client 91.200.133.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZt-kj3FWVe0BC2oMiDNfwAAAQw"]
[Mon Feb 23 06:09:23.135281 2026] [:error] [pid 2445:tid 2498] [client 91.200.133.3:63053] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZt-kz1z6EhBn71lCAF05AAAAFY"]
[Mon Feb 23 06:09:24.509081 2026] [:error] [pid 2445:tid 2491] [client 91.200.133.5:58923] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZt-lD1z6EhBn71lCAF06gAAAFA"]
[Mon Feb 23 06:09:25.360467 2026] [:error] [pid 2570:tid 2584] [client 91.200.133.3:50619] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Mon Feb 23 06:09:25.631954 2026] [:error] [pid 2570:tid 2601] [client 91.200.133.3:50619] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Mon Feb 23 06:09:25.846825 2026] [:error] [pid 2570:tid 2588] [client 91.200.133.3:50619] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Mon Feb 23 06:09:26.090079 2026] [:error] [pid 2570:tid 2586] [client 91.200.133.3:50619] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Mon Feb 23 06:09:27.409311 2026] [:error] [pid 2570:tid 2595] [client 91.200.133.3:50619] [client 91.200.133.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZt-l6h2MyYIw6djQ6Wy5wAAANE"]
[Mon Feb 23 06:09:27.829883 2026] [:error] [pid 2826:tid 2839] [client 91.200.133.7:30655] [client 91.200.133.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZt-lz3FWVe0BC2oMiDNjAAAAQo"]
[Mon Feb 23 06:09:28.262400 2026] [:error] [pid 2570:tid 2585] [client 91.200.133.9:25589] [client 91.200.133.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZt-mKh2MyYIw6djQ6Wy6gAAAMc"]
[Mon Feb 23 06:09:28.690922 2026] [:error] [pid 2826:tid 2847] [client 91.200.133.8:32303] [client 91.200.133.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZt-mD3FWVe0BC2oMiDNkQAAARI"]
[Mon Feb 23 06:09:29.197488 2026] [:error] [pid 2445:tid 2497] [client 91.200.133.5:22949] [client 91.200.133.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZt-mT1z6EhBn71lCAF07wAAAFU"]
[Mon Feb 23 06:10:46.097581 2026] [:error] [pid 2826:tid 2850] [client 49.51.195.195:46010] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZt-5j3FWVe0BC2oMiDOfQAAARU"]
[Mon Feb 23 06:19:38.155961 2026] [:error] [pid 2826:tid 2846] [client 101.33.80.42:50776] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZuA-j3FWVe0BC2oMiDVawAAARE"]
[Mon Feb 23 10:05:01.457181 2026] [:error] [pid 39540:tid 39587] [client 104.28.203.58:25053] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aZu1zbsgm9aTWhlRScKh2wAAAdI"]
[Mon Feb 23 10:21:52.848838 2026] [:error] [pid 39640:tid 39687] [client 195.178.110.190:20208] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aZu5wNsK--eVCgzvvudJywAAApE"]
[Mon Feb 23 10:34:11.699227 2026] [:error] [pid 39540:tid 39577] [client 158.115.254.0:10610] [client 158.115.254.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aZu8o7sgm9aTWhlRScK2GAAAAcg"]
[Mon Feb 23 12:35:45.579464 2026] [:error] [pid 25294:tid 25366] [client 221.229.106.25:33624] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZvZISRCFB3CqIo_jfaT8wAAAFA"]
[Mon Feb 23 13:17:35.694254 2026] [:error] [pid 39504:tid 39509] [client 170.106.15.3:52038] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZvi73LcHpOlI9gwwJr1SAAAAUM"]
[Mon Feb 23 14:56:34.579295 2026] [:error] [pid 39640:tid 39686] [client 51.77.43.72:46326] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/24th%20slot.aspx"] [unique_id "aZv6ItsK--eVCgzvvuebCwAAApA"]
[Mon Feb 23 14:57:26.212004 2026] [:error] [pid 25293:tid 25301] [client 51.77.43.72:53576] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZv6VuL9XfBf66iHi_ecUQAAAAI"]
[Mon Feb 23 14:57:31.048171 2026] [:error] [pid 39540:tid 39593] [client 51.77.43.72:53580] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZv6W7sgm9aTWhlRScI_LQAAAdg"]
[Mon Feb 23 19:15:28.766695 2026] [:error] [pid 25294:tid 25328] [client 54.38.38.130:41330] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZw20CRCFB3CqIo_jfbWeAAAAEA"]
[Mon Feb 23 19:15:30.761305 2026] [:error] [pid 29909:tid 29925] [client 54.38.38.130:60778] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZw20j9oc2QzltksUk7WFgAAAQ4"]
[Mon Feb 23 19:15:32.765957 2026] [:error] [pid 39540:tid 39583] [client 54.38.38.130:60792] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aZw21Lsgm9aTWhlRScKfNQAAAc4"]
[Mon Feb 23 19:43:10.067474 2026] [:error] [pid 39538:tid 39550] [client 182.44.10.67:54418] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZw9Ti4Zk8-cQOG3ZnpqngAAAYg"]
[Mon Feb 23 19:43:32.222629 2026] [:error] [pid 25380:tid 25384] [client 43.159.144.16:50288] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZw9ZKKrc8yFQ8fy78otZQAAAMI"]
[Mon Feb 23 19:51:05.779568 2026] [:error] [pid 25380:tid 25385] [client 43.157.181.189:46050] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZw_KaKrc8yFQ8fy78oxaAAAAMM"]
[Mon Feb 23 19:59:06.541177 2026] [:error] [pid 39538:tid 39553] [client 51.195.103.76:44748] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZxBCi4Zk8-cQOG3ZnpskAAAAYs"]
[Mon Feb 23 19:59:08.555175 2026] [:error] [pid 25380:tid 25397] [client 51.195.103.76:44752] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZxBDKKrc8yFQ8fy78ozwAAAAM8"]
[Mon Feb 23 19:59:10.588107 2026] [:error] [pid 25380:tid 25391] [client 51.195.103.76:44764] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZxBDqKrc8yFQ8fy78ozygAAAMk"]
[Mon Feb 23 19:59:12.499401 2026] [:error] [pid 25294:tid 25351] [client 51.195.103.76:32738] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZxBECRCFB3CqIo_jfbgAAAAAEk"]
[Mon Feb 23 19:59:14.402987 2026] [:error] [pid 39640:tid 39684] [client 51.195.103.76:32742] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZxBEtsK--eVCgzvvufaogAAAo4"]
[Mon Feb 23 19:59:16.423773 2026] [:error] [pid 39639:tid 39660] [client 51.195.103.76:32752] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZxBFBpFkMoMi8uTUUPAXQAAAlE"]
[Mon Feb 23 19:59:18.417225 2026] [:error] [pid 39639:tid 39643] [client 51.195.103.76:32762] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZxBFhpFkMoMi8uTUUPAZAAAAkA"]
[Mon Feb 23 19:59:20.417652 2026] [:error] [pid 25380:tid 25403] [client 51.195.103.76:32766] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZxBGKKrc8yFQ8fy78oz1AAAANU"]
[Mon Feb 23 19:59:22.344279 2026] [:error] [pid 39639:tid 39659] [client 51.195.103.76:56380] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZxBGhpFkMoMi8uTUUPAZgAAAlA"]
[Mon Feb 23 19:59:24.245675 2026] [:error] [pid 39639:tid 39653] [client 51.195.103.76:56384] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZxBHBpFkMoMi8uTUUPAawAAAko"]
[Mon Feb 23 19:59:26.291191 2026] [:error] [pid 39639:tid 39647] [client 51.195.103.76:56396] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZxBHhpFkMoMi8uTUUPAdQAAAkQ"]
[Mon Feb 23 19:59:28.276120 2026] [:error] [pid 25293:tid 25302] [client 51.195.103.76:56406] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZxBIOL9XfBf66iHi_eqngAAAAM"]
[Mon Feb 23 19:59:30.146257 2026] [:error] [pid 39639:tid 39653] [client 51.195.103.76:56412] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZxBIhpFkMoMi8uTUUPAeAAAAko"]
[Mon Feb 23 19:59:32.158067 2026] [:error] [pid 39538:tid 39560] [client 51.195.103.76:27886] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZxBJC4Zk8-cQOG3ZnpsoQAAAZI"]
[Mon Feb 23 19:59:34.010002 2026] [:error] [pid 25380:tid 25385] [client 51.195.103.76:27894] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZxBJqKrc8yFQ8fy78oz2gAAAMM"]
[Mon Feb 23 19:59:36.031112 2026] [:error] [pid 25380:tid 25389] [client 51.195.103.76:27896] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZxBKKKrc8yFQ8fy78oz4AAAAMc"]
[Mon Feb 23 19:59:37.910062 2026] [:error] [pid 39538:tid 39552] [client 51.195.103.76:27908] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZxBKS4Zk8-cQOG3ZnpspAAAAYo"]
[Mon Feb 23 19:59:39.912940 2026] [:error] [pid 39540:tid 39574] [client 51.195.103.76:27924] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZxBK7sgm9aTWhlRScKszQAAAcU"]
[Mon Feb 23 19:59:41.873071 2026] [:error] [pid 39639:tid 39651] [client 51.195.103.76:36464] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZxBLRpFkMoMi8uTUUPAhAAAAkg"]
[Mon Feb 23 19:59:43.895366 2026] [:error] [pid 39540:tid 39576] [client 51.195.103.76:36474] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZxBL7sgm9aTWhlRScKs1wAAAcc"]
[Mon Feb 23 19:59:45.840277 2026] [:error] [pid 39640:tid 39685] [client 51.195.103.76:36484] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZxBMdsK--eVCgzvvufaqQAAAo8"]
[Mon Feb 23 19:59:47.785473 2026] [:error] [pid 25293:tid 25308] [client 51.195.103.76:36492] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZxBM-L9XfBf66iHi_eqoQAAAAk"]
[Mon Feb 23 19:59:49.708033 2026] [:error] [pid 39538:tid 39543] [client 51.195.103.76:36498] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZxBNS4Zk8-cQOG3ZnpspgAAAYE"]
[Mon Feb 23 19:59:51.596794 2026] [:error] [pid 39640:tid 39688] [client 51.195.103.76:13370] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZxBN9sK--eVCgzvvufasgAAApI"]
[Mon Feb 23 19:59:53.498410 2026] [:error] [pid 39639:tid 39663] [client 51.195.103.76:13374] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZxBORpFkMoMi8uTUUPAiAAAAlQ"]
[Mon Feb 23 19:59:55.292951 2026] [:error] [pid 39639:tid 39645] [client 51.195.103.76:13386] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZxBOxpFkMoMi8uTUUPAjwAAAkI"]
[Mon Feb 23 19:59:57.308520 2026] [:error] [pid 25293:tid 25318] [client 51.195.103.76:13390] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZxBPeL9XfBf66iHi_eqogAAABM"]
[Mon Feb 23 19:59:59.319899 2026] [:error] [pid 29909:tid 29933] [client 51.195.103.76:13404] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZxBPz9oc2QzltksUk7agwAAARY"]
[Mon Feb 23 20:00:01.267748 2026] [:error] [pid 39540:tid 39573] [client 51.195.103.76:47164] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZxBQbsgm9aTWhlRScKs5AAAAcQ"]
[Mon Feb 23 20:00:03.623948 2026] [:error] [pid 39639:tid 39654] [client 51.195.103.76:47176] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZxBQxpFkMoMi8uTUUPAkgAAAks"]
[Mon Feb 23 20:00:28.690445 2026] [:error] [pid 25295:tid 25337] [client 51.195.103.76:63334] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZxBXI2Av4J1Jnqi7yLB-gAAAIY"]
[Mon Feb 23 20:00:30.756050 2026] [:error] [pid 39640:tid 39673] [client 51.195.103.76:63348] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZxBXtsK--eVCgzvvufaxAAAAoM"]
[Mon Feb 23 20:00:32.634008 2026] [:error] [pid 39540:tid 39587] [client 51.195.103.76:42450] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZxBYLsgm9aTWhlRScKtAQAAAdI"]
[Mon Feb 23 20:00:34.653412 2026] [:error] [pid 39639:tid 39662] [client 51.195.103.76:42466] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZxBYhpFkMoMi8uTUUPAtgAAAlM"]
[Mon Feb 23 20:00:36.679621 2026] [:error] [pid 39639:tid 39650] [client 51.195.103.76:42484] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZxBZBpFkMoMi8uTUUPAuwAAAkc"]
[Mon Feb 23 20:00:38.679000 2026] [:error] [pid 25380:tid 25388] [client 51.195.103.76:42514] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZxBZqKrc8yFQ8fy78oz_wAAAMY"]
[Mon Feb 23 20:00:40.685540 2026] [:error] [pid 39538:tid 39553] [client 51.195.103.76:42546] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZxBaC4Zk8-cQOG3ZnpswAAAAYs"]
[Mon Feb 23 20:00:42.670989 2026] [:error] [pid 25294:tid 25370] [client 51.195.103.76:16060] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZxBaiRCFB3CqIo_jfbgDgAAAFI"]
[Mon Feb 23 20:00:44.716687 2026] [:error] [pid 25294:tid 25377] [client 51.195.103.76:16074] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZxBbCRCFB3CqIo_jfbgEQAAAFg"]
[Mon Feb 23 20:00:46.796528 2026] [:error] [pid 25380:tid 25400] [client 51.195.103.76:16080] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZxBbqKrc8yFQ8fy78o0CAAAANI"]
[Mon Feb 23 20:00:48.987386 2026] [:error] [pid 39640:tid 39689] [client 51.195.103.76:16088] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZxBcNsK--eVCgzvvufa0AAAApM"]
[Mon Feb 23 20:00:52.830551 2026] [:error] [pid 39540:tid 39583] [client 51.195.103.76:54278] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZxBdLsgm9aTWhlRScKtDAAAAc4"]
[Tue Feb 24 02:53:00.437948 2026] [:error] [pid 29289:tid 29315] [client 49.233.45.47:45984] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZyiDPSAX3I9FAhm7jnTPQAAABY"]
[Tue Feb 24 08:58:43.434303 2026] [:error] [pid 41188:tid 41191] [client 43.135.183.82:52146] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZz3wwWRg7szIRhA0WiwjQAAAUA"]
[Tue Feb 24 09:13:01.281645 2026] [:error] [pid 11672:tid 11692] [client 43.130.228.73:45206] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZz7Hfa0fhnmfPYq92vfWgAAARI"]
[Tue Feb 24 09:21:41.368137 2026] [:error] [pid 41188:tid 41199] [client 203.2.64.59:58527] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZz9JQWRg7szIRhA0Wi7JQAAAUg"]
[Tue Feb 24 13:08:47.616770 2026] [:error] [pid 37540:tid 37619] [client 79.137.65.139:59878] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ0yXyahRAUBJS8hpJUM3gAAAJE"]
[Tue Feb 24 13:08:50.011694 2026] [:error] [pid 37538:tid 37552] [client 79.137.65.139:38422] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ0yYiynTiHZ9J0Y2naiRwAAAAQ"]
[Tue Feb 24 13:08:53.729762 2026] [:error] [pid 41188:tid 41197] [client 79.137.65.139:38440] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ0yZQWRg7szIRhA0WgBbQAAAUY"]
[Tue Feb 24 13:08:56.853700 2026] [:error] [pid 37539:tid 37589] [client 79.137.65.139:38454] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ0yaHEnr46jUQep9z8W3QAAAE4"]
[Tue Feb 24 13:09:02.331961 2026] [:error] [pid 37540:tid 37618] [client 79.137.65.139:45858] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aZ0ybiahRAUBJS8hpJUNBgAAAJA"]
[Tue Feb 24 13:47:44.537874 2026] [:error] [pid 34175:tid 34190] [client 217.182.195.176:56836] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ07gHNLnkJcHQ-bNtWJGAAAAY0"]
[Tue Feb 24 13:47:48.007551 2026] [:error] [pid 37539:tid 37597] [client 217.182.195.176:57716] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ07hHEnr46jUQep9z8adgAAAFY"]
[Tue Feb 24 13:47:50.730171 2026] [:error] [pid 34175:tid 34198] [client 217.182.195.176:57718] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ07hnNLnkJcHQ-bNtWJHgAAAZQ"]
[Tue Feb 24 13:47:53.400440 2026] [:error] [pid 37539:tid 37593] [client 217.182.195.176:57732] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ07iXEnr46jUQep9z8adwAAAFI"]
[Tue Feb 24 13:47:56.792212 2026] [:error] [pid 34175:tid 34188] [client 217.182.195.176:52954] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ07jHNLnkJcHQ-bNtWJLQAAAYs"]
[Tue Feb 24 13:47:59.615232 2026] [:error] [pid 11672:tid 11686] [client 217.182.195.176:52966] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ07j_a0fhnmfPYq92s5GgAAAQw"]
[Tue Feb 24 13:48:01.917550 2026] [:error] [pid 34175:tid 34179] [client 217.182.195.176:52972] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ07kXNLnkJcHQ-bNtWJSQAAAYI"]
[Tue Feb 24 13:48:04.477144 2026] [:error] [pid 37538:tid 37565] [client 217.182.195.176:52988] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ07lCynTiHZ9J0Y2naoPQAAABE"]
[Tue Feb 24 13:48:07.090947 2026] [:error] [pid 34175:tid 34189] [client 217.182.195.176:46118] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ07l3NLnkJcHQ-bNtWJVAAAAYw"]
[Tue Feb 24 13:48:09.736073 2026] [:error] [pid 34175:tid 34194] [client 217.182.195.176:46132] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ07mXNLnkJcHQ-bNtWJWAAAAZE"]
[Tue Feb 24 13:48:11.933612 2026] [:error] [pid 37644:tid 37648] [client 217.182.195.176:46140] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ07m0LaEhVDwBRydH2x1wAAAMI"]
[Tue Feb 24 13:48:14.281004 2026] [:error] [pid 37538:tid 37562] [client 217.182.195.176:46146] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ07niynTiHZ9J0Y2naoPwAAAA4"]
[Tue Feb 24 13:48:16.363850 2026] [:error] [pid 34175:tid 34181] [client 217.182.195.176:36634] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ07oHNLnkJcHQ-bNtWJWQAAAYQ"]
[Tue Feb 24 13:48:18.881843 2026] [:error] [pid 37540:tid 37623] [client 217.182.195.176:36640] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ07oiahRAUBJS8hpJUXEwAAAJU"]
[Tue Feb 24 13:48:21.091703 2026] [:error] [pid 37538:tid 37556] [client 217.182.195.176:36650] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ07pSynTiHZ9J0Y2naoRwAAAAg"]
[Tue Feb 24 13:48:23.554119 2026] [:error] [pid 41188:tid 41192] [client 217.182.195.176:36664] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ07pwWRg7szIRhA0WgHJgAAAUE"]
[Tue Feb 24 13:48:25.977174 2026] [:error] [pid 41188:tid 41207] [client 217.182.195.176:36672] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ07qQWRg7szIRhA0WgHJwAAAVA"]
[Tue Feb 24 13:48:28.463998 2026] [:error] [pid 37538:tid 37556] [client 217.182.195.176:51554] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ07rCynTiHZ9J0Y2naoVAAAAAg"]
[Tue Feb 24 13:48:30.692948 2026] [:error] [pid 37538:tid 37554] [client 217.182.195.176:51564] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ07riynTiHZ9J0Y2naoVQAAAAY"]
[Tue Feb 24 13:48:33.032930 2026] [:error] [pid 34175:tid 34190] [client 217.182.195.176:51566] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ07sXNLnkJcHQ-bNtWJZgAAAY0"]
[Tue Feb 24 13:48:35.311349 2026] [:error] [pid 34175:tid 34183] [client 217.182.195.176:51568] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ07s3NLnkJcHQ-bNtWJbQAAAYY"]
[Tue Feb 24 13:48:37.537542 2026] [:error] [pid 34175:tid 34185] [client 217.182.195.176:51182] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZ07tXNLnkJcHQ-bNtWJcwAAAYg"]
[Tue Feb 24 13:48:39.451064 2026] [:error] [pid 34175:tid 34193] [client 217.182.195.176:51190] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZ07t3NLnkJcHQ-bNtWJeQAAAZA"]
[Tue Feb 24 13:49:01.904435 2026] [:error] [pid 34175:tid 34189] [client 217.182.195.176:51194] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ07zXNLnkJcHQ-bNtWJqAAAAYw"]
[Tue Feb 24 13:49:04.133689 2026] [:error] [pid 11672:tid 11691] [client 217.182.195.176:43392] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ070Pa0fhnmfPYq92s5TwAAARE"]
[Tue Feb 24 13:49:06.066015 2026] [:error] [pid 34175:tid 34189] [client 217.182.195.176:43406] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ070nNLnkJcHQ-bNtWJtgAAAYw"]
[Tue Feb 24 13:49:08.067313 2026] [:error] [pid 37538:tid 37562] [client 217.182.195.176:58740] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ071CynTiHZ9J0Y2naoXQAAAA4"]
[Tue Feb 24 13:49:10.203268 2026] [:error] [pid 34175:tid 34192] [client 217.182.195.176:58750] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ071nNLnkJcHQ-bNtWJvQAAAY8"]
[Tue Feb 24 13:49:12.153158 2026] [:error] [pid 37540:tid 37609] [client 217.182.195.176:58752] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ072CahRAUBJS8hpJUXRAAAAIc"]
[Tue Feb 24 13:49:14.196343 2026] [:error] [pid 37540:tid 37612] [client 217.182.195.176:58756] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ072iahRAUBJS8hpJUXSQAAAIo"]
[Tue Feb 24 13:49:16.272320 2026] [:error] [pid 34175:tid 34184] [client 217.182.195.176:36588] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ073HNLnkJcHQ-bNtWJzwAAAYc"]
[Tue Feb 24 13:49:18.397484 2026] [:error] [pid 41188:tid 41210] [client 217.182.195.176:36602] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ073gWRg7szIRhA0WgHOgAAAVM"]
[Tue Feb 24 13:49:20.545611 2026] [:error] [pid 37539:tid 37598] [client 217.182.195.176:36618] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ074HEnr46jUQep9z8aiAAAAFc"]
[Tue Feb 24 13:49:22.728640 2026] [:error] [pid 34175:tid 34198] [client 217.182.195.176:36632] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ074nNLnkJcHQ-bNtWJ2wAAAZQ"]
[Tue Feb 24 13:49:24.787036 2026] [:error] [pid 34175:tid 34181] [client 217.182.195.176:36638] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ075HNLnkJcHQ-bNtWJ5AAAAYQ"]
[Tue Feb 24 13:49:26.828111 2026] [:error] [pid 37644:tid 37653] [client 217.182.195.176:36544] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ075kLaEhVDwBRydH2x5AAAAMc"]
[Tue Feb 24 13:49:28.680844 2026] [:error] [pid 34175:tid 34199] [client 217.182.195.176:36546] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ076HNLnkJcHQ-bNtWKJgAAAZU"]
[Tue Feb 24 13:49:30.734272 2026] [:error] [pid 37644:tid 37655] [client 217.182.195.176:36558] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ076kLaEhVDwBRydH2x5wAAAMk"]
[Tue Feb 24 13:49:32.667009 2026] [:error] [pid 11672:tid 11697] [client 217.182.195.176:36570] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ077Pa0fhnmfPYq92s5XQAAARc"]
[Tue Feb 24 13:49:34.641550 2026] [:error] [pid 37538:tid 37569] [client 217.182.195.176:36586] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ077iynTiHZ9J0Y2naobAAAABU"]
[Tue Feb 24 13:49:38.161161 2026] [:error] [pid 37538:tid 37562] [client 217.182.195.176:52110] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ078iynTiHZ9J0Y2naoegAAAA4"]
[Tue Feb 24 13:49:42.084035 2026] [:error] [pid 34175:tid 34185] [client 217.182.195.176:52120] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ079nNLnkJcHQ-bNtWKhgAAAYg"]
[Tue Feb 24 14:25:55.857350 2026] [:error] [pid 41188:tid 41200] [client 81.167.26.57:32339] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1EcwWRg7szIRhA0WgLsAAAAUk"]
[Tue Feb 24 14:25:59.705724 2026] [:error] [pid 37540:tid 37618] [client 81.167.26.57:3401] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1EdyahRAUBJS8hpJUesAAAAJA"]
[Tue Feb 24 15:36:39.643240 2026] [:error] [pid 25969:tid 25971] [client 43.167.241.46:51810] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ1VBw8BalASL0Ivc6n0zgAAAAA"]
[Tue Feb 24 15:41:57.539345 2026] [:error] [pid 25969:tid 25992] [client 141.94.101.142:45970] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ1WRQ8BalASL0Ivc6n2BgAAABU"]
[Tue Feb 24 15:41:59.590646 2026] [:error] [pid 23676:tid 23680] [client 141.94.101.142:51710] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ1WRwiFN7GzdxuWtpH7jwAAAEA"]
[Tue Feb 24 15:41:59.744072 2026] [:error] [pid 25969:tid 25994] [client 141.94.101.142:51712] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1WRw8BalASL0Ivc6n2CAAAABc"]
[Tue Feb 24 15:42:01.603175 2026] [:error] [pid 26105:tid 26116] [client 141.94.101.142:51714] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ1WSWAbosjpLmhyUBZhTgAAAMk"]
[Tue Feb 24 15:42:03.582944 2026] [:error] [pid 23678:tid 23741] [client 141.94.101.142:51720] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1WS0jfX6zv05Y7fF6ENgAAAUc"]
[Tue Feb 24 15:42:03.710386 2026] [:error] [pid 23676:tid 23684] [client 141.94.101.142:51734] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ1WSwiFN7GzdxuWtpH7kgAAAEQ"]
[Tue Feb 24 15:42:05.583417 2026] [:error] [pid 26105:tid 26128] [client 141.94.101.142:51742] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZ1WTWAbosjpLmhyUBZhUwAAANU"]
[Tue Feb 24 15:42:07.448563 2026] [:error] [pid 26105:tid 26118] [client 141.94.101.142:51758] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ1WT2AbosjpLmhyUBZhVAAAAMs"]
[Tue Feb 24 15:42:09.463984 2026] [:error] [pid 23677:tid 23715] [client 141.94.101.142:60810] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ1WUZ_1KUY5hVG_9Ou3BwAAAIg"]
[Tue Feb 24 15:42:11.676236 2026] [:error] [pid 25969:tid 25990] [client 141.94.101.142:60818] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ1WUw8BalASL0Ivc6n2FwAAABM"]
[Tue Feb 24 15:42:13.905690 2026] [:error] [pid 23762:tid 23779] [client 141.94.101.142:60832] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ1WVTBLAk0yYdnQXk0FrQAAAc0"]
[Tue Feb 24 15:42:15.947387 2026] [:error] [pid 23762:tid 23773] [client 141.94.101.142:60840] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ1WVzBLAk0yYdnQXk0FswAAAcc"]
[Tue Feb 24 15:42:17.885178 2026] [:error] [pid 25969:tid 25991] [client 141.94.101.142:47946] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ1WWQ8BalASL0Ivc6n2HAAAABQ"]
[Tue Feb 24 15:42:19.828576 2026] [:error] [pid 23678:tid 23737] [client 141.94.101.142:47948] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ1WW0jfX6zv05Y7fF6ERAAAAUM"]
[Tue Feb 24 15:42:21.958949 2026] [:error] [pid 23677:tid 23729] [client 141.94.101.142:47952] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZ1WXZ_1KUY5hVG_9Ou3FQAAAJY"]
[Tue Feb 24 15:42:23.920590 2026] [:error] [pid 26105:tid 26108] [client 141.94.101.142:47964] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZ1WX2AbosjpLmhyUBZhXAAAAME"]
[Tue Feb 24 15:42:25.784020 2026] [:error] [pid 25969:tid 25992] [client 141.94.101.142:47974] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ1WYQ8BalASL0Ivc6n2IQAAABU"]
[Tue Feb 24 15:42:27.938072 2026] [:error] [pid 25969:tid 25988] [client 141.94.101.142:50306] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZ1WYw8BalASL0Ivc6n2KQAAABE"]
[Tue Feb 24 15:42:29.911100 2026] [:error] [pid 23676:tid 23697] [client 141.94.101.142:50314] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ1WZQiFN7GzdxuWtpH7oAAAAFE"]
[Tue Feb 24 15:42:32.042000 2026] [:error] [pid 23677:tid 23714] [client 141.94.101.142:50318] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ1WaJ_1KUY5hVG_9Ou3HQAAAIc"]
[Tue Feb 24 15:42:33.786104 2026] [:error] [pid 25969:tid 25972] [client 141.94.101.142:50322] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1WaQ8BalASL0Ivc6n2KwAAAAE"]
[Tue Feb 24 15:42:34.233113 2026] [:error] [pid 26105:tid 26129] [client 141.94.101.142:50324] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZ1WamAbosjpLmhyUBZhYgAAANY"]
[Tue Feb 24 15:42:36.252524 2026] [:error] [pid 23676:tid 23694] [client 141.94.101.142:50332] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ1WbAiFN7GzdxuWtpH7rgAAAE4"]
[Tue Feb 24 15:42:37.841794 2026] [:error] [pid 23677:tid 23727] [client 141.94.101.142:54114] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1WbZ_1KUY5hVG_9Ou3IgAAAJQ"]
[Tue Feb 24 15:42:38.390489 2026] [:error] [pid 26105:tid 26117] [client 141.94.101.142:54118] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ1WbmAbosjpLmhyUBZhZgAAAMo"]
[Tue Feb 24 15:42:40.383286 2026] [:error] [pid 23762:tid 23789] [client 141.94.101.142:54124] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ1WcDBLAk0yYdnQXk0FwwAAAdc"]
[Tue Feb 24 15:42:42.454559 2026] [:error] [pid 26105:tid 26108] [client 141.94.101.142:54128] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ1WcmAbosjpLmhyUBZhagAAAME"]
[Tue Feb 24 15:42:44.367839 2026] [:error] [pid 25969:tid 25994] [client 141.94.101.142:54138] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ1WdA8BalASL0Ivc6n2LgAAABc"]
[Tue Feb 24 15:42:46.363224 2026] [:error] [pid 26105:tid 26117] [client 141.94.101.142:54144] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZ1WdmAbosjpLmhyUBZhdwAAAMo"]
[Tue Feb 24 15:42:48.179848 2026] [:error] [pid 23677:tid 23720] [client 141.94.101.142:43834] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZ1WeJ_1KUY5hVG_9Ou3KgAAAI0"]
[Tue Feb 24 15:42:50.203745 2026] [:error] [pid 23762:tid 23786] [client 141.94.101.142:43848] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZ1WejBLAk0yYdnQXk0FyQAAAdQ"]
[Tue Feb 24 15:42:52.048710 2026] [:error] [pid 26105:tid 26121] [client 141.94.101.142:43862] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZ1WfGAbosjpLmhyUBZhhQAAAM4"]
[Tue Feb 24 15:42:54.128620 2026] [:error] [pid 23676:tid 23698] [client 141.94.101.142:43866] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZ1WfgiFN7GzdxuWtpH7sAAAAFI"]
[Tue Feb 24 15:43:14.986254 2026] [:error] [pid 23676:tid 23689] [client 141.94.101.142:43872] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ1WkgiFN7GzdxuWtpH7yAAAAEk"]
[Tue Feb 24 15:43:16.956529 2026] [:error] [pid 25969:tid 25994] [client 141.94.101.142:50834] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ1WlA8BalASL0Ivc6n2RAAAABc"]
[Tue Feb 24 15:43:19.108729 2026] [:error] [pid 23678:tid 23742] [client 141.94.101.142:48172] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ1Wl0jfX6zv05Y7fF6EhgAAAUg"]
[Tue Feb 24 15:43:20.818886 2026] [:error] [pid 23677:tid 23707] [client 141.94.101.142:48182] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1WmJ_1KUY5hVG_9Ou3MwAAAIA"]
[Tue Feb 24 15:43:24.550057 2026] [:error] [pid 26105:tid 26119] [client 141.94.101.142:48198] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1WnGAbosjpLmhyUBZhsgAAAMw"]
[Tue Feb 24 15:47:11.197049 2026] [:error] [pid 23676:tid 23680] [client 101.33.66.34:48224] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ1XfwiFN7GzdxuWtpH8VwAAAEA"]
[Tue Feb 24 15:47:56.071063 2026] [:error] [pid 26105:tid 26113] [client 141.94.101.142:44370] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ1XrGAbosjpLmhyUBZjtAAAAMY"]
[Tue Feb 24 15:47:57.972841 2026] [:error] [pid 26105:tid 26122] [client 141.94.101.142:52224] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ1XrWAbosjpLmhyUBZjvgAAAM8"]
[Tue Feb 24 15:47:59.901845 2026] [:error] [pid 25969:tid 25980] [client 141.94.101.142:52240] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ1Xrw8BalASL0Ivc6n4fwAAAAk"]
[Tue Feb 24 15:48:01.738340 2026] [:error] [pid 26105:tid 26123] [client 141.94.101.142:52244] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ1XsWAbosjpLmhyUBZjzwAAANA"]
[Tue Feb 24 15:48:03.773769 2026] [:error] [pid 25969:tid 25991] [client 141.94.101.142:52246] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZ1Xsw8BalASL0Ivc6n4kwAAABQ"]
[Tue Feb 24 15:48:05.834832 2026] [:error] [pid 26105:tid 26113] [client 141.94.101.142:52258] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ1XtWAbosjpLmhyUBZj1gAAAMY"]
[Tue Feb 24 15:48:07.758498 2026] [:error] [pid 25969:tid 25978] [client 141.94.101.142:37626] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ1Xtw8BalASL0Ivc6n4rQAAAAc"]
[Tue Feb 24 15:48:09.807732 2026] [:error] [pid 23678:tid 23748] [client 141.94.101.142:37638] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ1XuUjfX6zv05Y7fF6FXQAAAU4"]
[Tue Feb 24 15:48:11.807426 2026] [:error] [pid 26105:tid 26109] [client 141.94.101.142:37646] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ1Xu2AbosjpLmhyUBZj4wAAAMI"]
[Tue Feb 24 15:48:13.810024 2026] [:error] [pid 23677:tid 23716] [client 141.94.101.142:37662] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ1XvZ_1KUY5hVG_9Ou3uwAAAIk"]
[Tue Feb 24 15:48:15.754141 2026] [:error] [pid 26105:tid 26118] [client 141.94.101.142:37674] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ1Xv2AbosjpLmhyUBZj7gAAAMs"]
[Tue Feb 24 15:48:17.782664 2026] [:error] [pid 23677:tid 23725] [client 141.94.101.142:53038] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ1XwZ_1KUY5hVG_9Ou3vAAAAJI"]
[Tue Feb 24 15:48:19.719826 2026] [:error] [pid 23678:tid 23734] [client 141.94.101.142:53046] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZ1Xw0jfX6zv05Y7fF6FZQAAAUA"]
[Tue Feb 24 15:48:21.775123 2026] [:error] [pid 26105:tid 26129] [client 141.94.101.142:53058] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZ1XxWAbosjpLmhyUBZj_AAAANY"]
[Tue Feb 24 15:48:23.977523 2026] [:error] [pid 26105:tid 26119] [client 141.94.101.142:53068] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ1Xx2AbosjpLmhyUBZj_wAAAMw"]
[Tue Feb 24 15:48:25.920112 2026] [:error] [pid 23762:tid 23789] [client 141.94.101.142:53084] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZ1XyTBLAk0yYdnQXk0HfQAAAdc"]
[Tue Feb 24 15:48:27.941848 2026] [:error] [pid 23677:tid 23724] [client 141.94.101.142:50994] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ1Xy5_1KUY5hVG_9Ou3yQAAAJE"]
[Tue Feb 24 15:48:30.000548 2026] [:error] [pid 25969:tid 25989] [client 141.94.101.142:50998] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ1XzQ8BalASL0Ivc6n47wAAABI"]
[Tue Feb 24 15:48:31.887096 2026] [:error] [pid 25969:tid 25979] [client 141.94.101.142:51004] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZ1Xzw8BalASL0Ivc6n49gAAAAg"]
[Tue Feb 24 15:48:33.773963 2026] [:error] [pid 25969:tid 25990] [client 141.94.101.142:51010] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ1X0Q8BalASL0Ivc6n4_AAAABM"]
[Tue Feb 24 15:48:35.756592 2026] [:error] [pid 25969:tid 25995] [client 141.94.101.142:51024] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ1X0w8BalASL0Ivc6n5AAAAABg"]
[Tue Feb 24 15:48:37.915387 2026] [:error] [pid 25969:tid 25980] [client 141.94.101.142:56302] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ1X1Q8BalASL0Ivc6n5DwAAAAk"]
[Tue Feb 24 15:48:39.968185 2026] [:error] [pid 26105:tid 26119] [client 141.94.101.142:56306] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ1X12AbosjpLmhyUBZkJgAAAMw"]
[Tue Feb 24 15:48:41.778354 2026] [:error] [pid 23678:tid 23754] [client 141.94.101.142:56314] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ1X2UjfX6zv05Y7fF6FdwAAAVQ"]
[Tue Feb 24 15:48:43.866242 2026] [:error] [pid 23678:tid 23753] [client 141.94.101.142:56316] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZ1X20jfX6zv05Y7fF6FeAAAAVM"]
[Tue Feb 24 15:48:46.006088 2026] [:error] [pid 23676:tid 23697] [client 141.94.101.142:56324] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZ1X3giFN7GzdxuWtpH85QAAAFE"]
[Tue Feb 24 15:48:48.039250 2026] [:error] [pid 23676:tid 23699] [client 141.94.101.142:58274] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZ1X4AiFN7GzdxuWtpH85wAAAFM"]
[Tue Feb 24 15:48:49.902464 2026] [:error] [pid 26105:tid 26126] [client 141.94.101.142:58282] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZ1X4WAbosjpLmhyUBZkSwAAANM"]
[Tue Feb 24 15:48:51.838547 2026] [:error] [pid 23762:tid 23766] [client 141.94.101.142:58292] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZ1X4zBLAk0yYdnQXk0HiwAAAcA"]
[Tue Feb 24 15:48:53.880850 2026] [:error] [pid 23677:tid 23721] [client 141.94.101.142:58294] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ1X5Z_1KUY5hVG_9Ou3zwAAAI4"]
[Tue Feb 24 15:49:15.454859 2026] [:error] [pid 23677:tid 23722] [client 141.94.101.142:58308] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ1X-5_1KUY5hVG_9Ou38wAAAI8"]
[Tue Feb 24 15:49:17.474485 2026] [:error] [pid 26105:tid 26117] [client 141.94.101.142:40372] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ1X_WAbosjpLmhyUBZkeQAAAMo"]
[Tue Feb 24 15:49:19.615106 2026] [:error] [pid 23678:tid 23735] [client 141.94.101.142:36032] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1X_0jfX6zv05Y7fF6FpAAAAUE"]
[Tue Feb 24 15:49:23.527131 2026] [:error] [pid 23676:tid 23693] [client 141.94.101.142:36042] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ1YAwiFN7GzdxuWtpH9GwAAAE0"]
[Tue Feb 24 16:08:18.417148 2026] [:error] [pid 34839:tid 34864] [client 223.244.35.77:42832] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ1ccmLpm0-tb2ey61GgvAAAABc"]
[Tue Feb 24 19:48:45.887882 2026] [:error] [pid 16805:tid 16826] [client 103.77.107.57:53340] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aZ2QHaYuGciBkyQZTxULvAAAAxM"]
[Tue Feb 24 19:48:46.113531 2026] [:error] [pid 16805:tid 16810] [client 103.77.107.57:53348] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aZ2QHqYuGciBkyQZTxULvgAAAwM"]
[Tue Feb 24 21:55:00.317510 2026] [:error] [pid 40456:tid 40508] [client 43.155.140.157:46620] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ2ttOP0ojUS1IXv0AXCkAAAAZU"]
[Tue Feb 24 22:03:28.275048 2026] [:error] [pid 40455:tid 40470] [client 49.51.183.15:56350] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ2vsFw13ca9RV2qrBmBswAAAUo"]
[Wed Feb 25 00:37:19.362838 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.140:45579] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Feb 25 00:37:19.595115 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.140:45579] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 25 00:37:19.757119 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.140:45579] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZ3Tv-DBmHucoAJRnqnZ1wAAAAA"]
[Wed Feb 25 00:37:19.994206 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.108:46897] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Feb 25 00:37:20.129337 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.108:46897] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aZ3TwHxLbzvRGuzwKjm6IwAAAE0"]
[Wed Feb 25 00:37:20.398652 2026] [:error] [pid 26872:tid 26885] [client 98.159.43.146:60071] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Feb 25 00:37:20.718118 2026] [:error] [pid 26872:tid 26877] [client 98.159.43.146:60071] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 25 00:37:20.882732 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.146:60071] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 25 00:37:21.025486 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.146:60071] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Feb 25 00:37:21.381688 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.146:60071] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aZ3TwXxLbzvRGuzwKjm6LQAAAFg"]
[Wed Feb 25 00:37:21.684289 2026] [:error] [pid 18441:tid 18710] [client 98.159.43.162:39325] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Feb 25 00:37:21.808611 2026] [:error] [pid 18441:tid 18719] [client 98.159.43.162:39325] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Feb 25 00:37:21.933454 2026] [:error] [pid 18441:tid 18716] [client 98.159.43.162:39325] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aZ3TwRYF1wpOnXIaHlOJlQAAAMg"]
[Wed Feb 25 00:37:22.180889 2026] [:error] [pid 18447:tid 18780] [client 98.159.43.109:57407] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aZ3Tws-TpHVc8yBj5eagQAAAAhE"]
[Wed Feb 25 00:37:22.455911 2026] [:error] [pid 18447:tid 18772] [client 98.159.43.163:40975] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aZ3Tws-TpHVc8yBj5eagQQAAAgk"]
[Wed Feb 25 00:37:22.894419 2026] [:error] [pid 18441:tid 18725] [client 98.159.43.120:35423] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZ3TwhYF1wpOnXIaHlOJlwAAANA"]
[Wed Feb 25 00:37:23.380644 2026] [:error] [pid 18441:tid 18724] [client 98.159.43.115:36295] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZ3TwxYF1wpOnXIaHlOJmgAAAM8"]
[Wed Feb 25 00:37:23.966673 2026] [:error] [pid 18458:tid 18804] [client 98.159.43.163:38619] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Feb 25 00:37:24.413705 2026] [:error] [pid 18458:tid 18812] [client 98.159.43.163:38619] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Feb 25 00:37:24.560473 2026] [:error] [pid 18458:tid 18795] [client 98.159.43.163:38619] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZ3TxAuir-tBe4tUislu6wAAAoI"]
[Wed Feb 25 00:37:24.903232 2026] [:error] [pid 18458:tid 18806] [client 98.159.43.129:63319] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZ3TxAuir-tBe4tUislu7QAAAow"]
[Wed Feb 25 00:37:25.404966 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Feb 25 00:37:25.564557 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Wed Feb 25 00:37:25.746075 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Feb 25 00:37:25.901707 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Feb 25 00:37:26.157939 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Wed Feb 25 00:37:26.302501 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Wed Feb 25 00:37:26.478725 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Wed Feb 25 00:37:26.632342 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Feb 25 00:37:26.779493 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Wed Feb 25 00:37:26.927841 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Feb 25 00:37:27.086789 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Wed Feb 25 00:37:27.240848 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Feb 25 00:37:27.444870 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Feb 25 00:37:27.574811 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Wed Feb 25 00:37:27.714518 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Wed Feb 25 00:37:27.865437 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Feb 25 00:37:28.005364 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Wed Feb 25 00:37:28.152237 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Feb 25 00:37:28.301942 2026] [:error] [pid 18850:tid 18860] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Wed Feb 25 00:37:28.482061 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Feb 25 00:37:28.616903 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Wed Feb 25 00:37:28.765352 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Feb 25 00:37:28.900744 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Feb 25 00:37:29.028957 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Feb 25 00:37:29.197371 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Feb 25 00:37:29.346167 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Feb 25 00:37:29.490972 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Feb 25 00:37:29.633856 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Wed Feb 25 00:37:29.799485 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Wed Feb 25 00:37:29.924295 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Feb 25 00:37:30.074400 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Wed Feb 25 00:37:30.202058 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Wed Feb 25 00:37:30.326450 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Feb 25 00:37:30.452414 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.123:21859] [client 98.159.43.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.123, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aZ3TyuDBmHucoAJRnqnaDwAAAA4"]
[Wed Feb 25 00:37:30.456284 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Feb 25 00:37:30.851648 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Wed Feb 25 00:37:30.973336 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.123:21859] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Feb 25 00:37:31.115059 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.123:21859] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aZ3Ty-DBmHucoAJRnqnaFAAAAA0"]
[Wed Feb 25 00:37:31.363778 2026] [:error] [pid 18447:tid 18770] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Wed Feb 25 00:37:31.498936 2026] [:error] [pid 18447:tid 18769] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Feb 25 00:37:31.766310 2026] [:error] [pid 18447:tid 18765] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Wed Feb 25 00:37:31.916811 2026] [:error] [pid 18447:tid 18771] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Wed Feb 25 00:37:32.051368 2026] [:error] [pid 18447:tid 18780] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Wed Feb 25 00:37:32.194283 2026] [:error] [pid 18447:tid 18763] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Wed Feb 25 00:37:32.374448 2026] [:error] [pid 18447:tid 18772] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Wed Feb 25 00:37:32.544891 2026] [:error] [pid 18447:tid 18781] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Wed Feb 25 00:37:32.667846 2026] [:error] [pid 18447:tid 18782] [client 98.159.43.107:21535] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Wed Feb 25 00:37:32.926465 2026] [:error] [pid 18447:tid 18784] [client 98.159.43.107:21535] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aZ3TzM-TpHVc8yBj5eagVAAAAhU"]
[Wed Feb 25 00:37:33.174555 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Wed Feb 25 00:37:33.324975 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Wed Feb 25 00:37:34.060400 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Feb 25 00:37:34.184629 2026] [:error] [pid 26872:tid 26890] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Wed Feb 25 00:37:34.333431 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Wed Feb 25 00:37:34.522892 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Wed Feb 25 00:37:34.653612 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Wed Feb 25 00:37:35.071732 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Wed Feb 25 00:37:35.232172 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Wed Feb 25 00:37:35.402725 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Wed Feb 25 00:37:35.529901 2026] [:error] [pid 26872:tid 26888] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Wed Feb 25 00:37:35.668591 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Wed Feb 25 00:37:35.779222 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Wed Feb 25 00:37:35.904223 2026] [:error] [pid 26872:tid 26894] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Wed Feb 25 00:37:36.164600 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Wed Feb 25 00:37:36.290681 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Wed Feb 25 00:37:36.555501 2026] [:error] [pid 26872:tid 26877] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Wed Feb 25 00:37:36.685184 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Wed Feb 25 00:37:36.816567 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Wed Feb 25 00:37:36.948307 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Wed Feb 25 00:37:37.095332 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.146:41849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Wed Feb 25 00:37:37.243868 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.146:41849] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aZ3T0XxLbzvRGuzwKjm6ZwAAAFc"]
[Wed Feb 25 00:37:37.832952 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Wed Feb 25 00:37:37.979622 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Wed Feb 25 00:37:38.100668 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Wed Feb 25 00:37:38.222105 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Wed Feb 25 00:37:38.354236 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Wed Feb 25 00:37:38.502326 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed Feb 25 00:37:38.682998 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Wed Feb 25 00:37:40.092498 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Wed Feb 25 00:37:40.240351 2026] [:error] [pid 18850:tid 18854] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Wed Feb 25 00:37:40.392497 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Wed Feb 25 00:37:40.524622 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Feb 25 00:37:40.628574 2026] [:error] [pid 18850:tid 18864] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Wed Feb 25 00:37:40.722635 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Wed Feb 25 00:37:40.843914 2026] [:error] [pid 18850:tid 18856] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Wed Feb 25 00:37:40.942764 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Wed Feb 25 00:37:41.058887 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Wed Feb 25 00:37:41.169155 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Wed Feb 25 00:37:41.285981 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Wed Feb 25 00:37:41.397808 2026] [:error] [pid 18850:tid 18860] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Wed Feb 25 00:37:41.491489 2026] [:error] [pid 18850:tid 18861] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Wed Feb 25 00:37:41.586043 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Wed Feb 25 00:37:41.694614 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Feb 25 00:37:41.834241 2026] [:error] [pid 18850:tid 18853] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Wed Feb 25 00:37:41.954776 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Wed Feb 25 00:37:42.066050 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Wed Feb 25 00:37:42.167236 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Feb 25 00:37:42.261003 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Wed Feb 25 00:37:42.377363 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Feb 25 00:37:42.480091 2026] [:error] [pid 18850:tid 18854] [client 98.159.43.110:23973] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Wed Feb 25 00:37:46.494056 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.110:23973] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aZ3T2uDBmHucoAJRnqnaVAAAABg"]
[Wed Feb 25 00:37:46.981355 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Wed Feb 25 00:37:48.429472 2026] [:error] [pid 26872:tid 26882] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Wed Feb 25 00:37:48.632852 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Wed Feb 25 00:37:48.786267 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Wed Feb 25 00:37:49.233103 2026] [:error] [pid 26872:tid 26894] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Wed Feb 25 00:37:50.259383 2026] [:error] [pid 26872:tid 26880] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Wed Feb 25 00:37:50.414535 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Feb 25 00:37:50.584958 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Feb 25 00:37:50.799585 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Feb 25 00:37:50.948358 2026] [:error] [pid 26872:tid 26890] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Wed Feb 25 00:37:51.116937 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.145:57813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Wed Feb 25 00:37:51.448272 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.145:57813] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZ3T33xLbzvRGuzwKjm6sQAAAEc"]
[Wed Feb 25 00:37:51.754083 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.132:28927] [client 98.159.43.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.159.43.132, incrementing ddos counter"] [hostname "www.pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZ3T33xLbzvRGuzwKjm6swAAAEE"]
[Wed Feb 25 00:37:51.757515 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.132:28927] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 25 00:37:51.903330 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.132:28927] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Feb 25 00:37:52.208790 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.132:28927] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ3T4HxLbzvRGuzwKjm6ugAAAEo"]
[Wed Feb 25 00:37:52.747986 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.135:57091] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Wed Feb 25 00:37:53.522956 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.135:57091] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 25 00:37:53.853208 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.135:57091] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Wed Feb 25 00:37:53.978983 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.135:57091] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ3T4eDBmHucoAJRnqnaYgAAAAc"]
[Wed Feb 25 00:37:54.223188 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Wed Feb 25 00:37:54.375182 2026] [:error] [pid 18850:tid 18864] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Wed Feb 25 00:37:54.519615 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Wed Feb 25 00:37:55.086064 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Wed Feb 25 00:37:55.214161 2026] [:error] [pid 18850:tid 18854] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Feb 25 00:37:55.342350 2026] [:error] [pid 18850:tid 18856] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 25 00:37:55.494424 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Wed Feb 25 00:37:56.068273 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.138:28923] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Feb 25 00:37:56.328457 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.138:28923] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aZ3T5ODBmHucoAJRnqnadgAAAAo"]
[Wed Feb 25 00:37:56.573305 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.141:41243] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ3T5HxLbzvRGuzwKjm60wAAAFc"]
[Wed Feb 25 00:37:56.896706 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.133:56973] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aZ3T5HxLbzvRGuzwKjm61AAAAFU"]
[Wed Feb 25 00:37:57.162917 2026] [:error] [pid 18447:tid 18777] [client 98.159.43.153:51569] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aZ3T5c-TpHVc8yBj5eagXQAAAg4"]
[Wed Feb 25 00:37:57.494260 2026] [:error] [pid 18447:tid 18782] [client 98.159.43.112:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Wed Feb 25 00:37:57.636459 2026] [:error] [pid 18447:tid 18779] [client 98.159.43.112:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Wed Feb 25 00:37:57.881886 2026] [:error] [pid 18447:tid 18766] [client 98.159.43.112:49329] [client 98.159.43.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.112, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aZ3T5c-TpHVc8yBj5eagYwAAAgM"]
[Wed Feb 25 00:37:58.713224 2026] [:error] [pid 18447:tid 18763] [client 98.159.43.112:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Feb 25 00:37:58.950157 2026] [:error] [pid 18447:tid 18772] [client 98.159.43.112:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Feb 25 00:37:59.734274 2026] [:error] [pid 18447:tid 18776] [client 98.159.43.112:49329] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZ3T58-TpHVc8yBj5eagdAAAAg0"]
[Wed Feb 25 00:37:59.977972 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.109:23977] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Feb 25 00:38:00.354472 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.109:23977] [client 98.159.43.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.109, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZ3T6ODBmHucoAJRnqnafAAAABI"]
[Wed Feb 25 00:38:00.453296 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.109:23977] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Wed Feb 25 00:38:00.876569 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.109:23977] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Wed Feb 25 00:38:01.014728 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.109:23977] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Wed Feb 25 00:38:01.216696 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.109:23977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Feb 25 00:38:01.327546 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.109:23977] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Feb 25 00:38:01.441585 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.109:23977] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aZ3T6eDBmHucoAJRnqnaiAAAAA4"]
[Wed Feb 25 00:38:01.700622 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.153:36153] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aZ3T6XxLbzvRGuzwKjm63gAAAFI"]
[Wed Feb 25 00:38:01.890323 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Wed Feb 25 00:38:02.000286 2026] [:error] [pid 26872:tid 26879] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Wed Feb 25 00:38:02.098685 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Feb 25 00:38:02.211439 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Feb 25 00:38:02.445397 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Wed Feb 25 00:38:02.850837 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Wed Feb 25 00:38:03.891039 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Wed Feb 25 00:38:04.001752 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Feb 25 00:38:04.101568 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.139:39689] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Wed Feb 25 00:38:04.298779 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.139:39689] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ3T7HxLbzvRGuzwKjm6_QAAAFY"]
[Wed Feb 25 00:38:04.976810 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.163:47121] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aZ3T7HxLbzvRGuzwKjm7BAAAAEo"]
[Wed Feb 25 00:38:05.188727 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.121:39307] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Wed Feb 25 00:38:05.285075 2026] [:error] [pid 18850:tid 18861] [client 98.159.43.121:39307] [client 98.159.43.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ3T7eDBmHucoAJRnqnajAAAAAk"]
[Wed Feb 25 00:38:05.732623 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.114:56145] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Wed Feb 25 00:38:05.935024 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.114:56145] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Feb 25 00:38:06.061136 2026] [:error] [pid 26872:tid 26894] [client 98.159.43.114:56145] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aZ3T7nxLbzvRGuzwKjm7EAAAAFQ"]
[Wed Feb 25 00:38:06.404626 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.132:39181] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ3T7uDBmHucoAJRnqnajwAAAAA"]
[Wed Feb 25 00:38:06.679444 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.134:54521] [client 98.159.43.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.134, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aZ3T7nxLbzvRGuzwKjm7FAAAAEE"]
[Wed Feb 25 00:38:06.855156 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.134:54521] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Wed Feb 25 00:38:07.161903 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.134:54521] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aZ3T73xLbzvRGuzwKjm7FwAAAFE"]
[Wed Feb 25 00:38:07.452710 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.110:41973] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 25 00:38:07.743788 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.110:41973] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Wed Feb 25 00:38:08.478209 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.110:41973] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aZ3T8HxLbzvRGuzwKjm7JAAAAFE"]
[Wed Feb 25 00:38:08.788092 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.133:28343] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Feb 25 00:38:09.186608 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.133:28343] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZ3T8eDBmHucoAJRnqnakgAAABY"]
[Wed Feb 25 00:38:09.792636 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.111:41119] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Wed Feb 25 00:38:09.934613 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.111:41119] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aZ3T8eDBmHucoAJRnqnamAAAAAU"]
[Wed Feb 25 00:38:10.487502 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.115:47675] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Wed Feb 25 00:38:10.644720 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.115:47675] [client 98.159.43.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.115, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aZ3T8uDBmHucoAJRnqnaoAAAAAM"]
[Wed Feb 25 00:38:11.103631 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.115:47675] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aZ3T8-DBmHucoAJRnqnapAAAAA0"]
[Wed Feb 25 00:38:11.439880 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.150:32049] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ3T8-DBmHucoAJRnqnapgAAAA8"]
[Wed Feb 25 00:38:12.149485 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.156:30613] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Wed Feb 25 00:38:12.615188 2026] [:error] [pid 18447:tid 18787] [client 98.159.43.156:30613] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Wed Feb 25 00:38:12.894901 2026] [:error] [pid 18447:tid 18765] [client 98.159.43.156:30613] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Feb 25 00:38:13.022686 2026] [:error] [pid 18447:tid 18777] [client 98.159.43.156:30613] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Wed Feb 25 00:38:13.403288 2026] [:error] [pid 18447:tid 18771] [client 98.159.43.156:30613] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZ3T9c-TpHVc8yBj5eaggwAAAgg"]
[Wed Feb 25 00:38:13.936246 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.138:27411] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aZ3T9eDBmHucoAJRnqnasAAAABE"]
[Wed Feb 25 00:38:14.237579 2026] [:error] [pid 18441:tid 18732] [client 98.159.43.135:64747] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZ3T9hYF1wpOnXIaHlOJuAAAANc"]
[Wed Feb 25 00:38:14.480482 2026] [:error] [pid 18447:tid 18781] [client 98.159.43.113:60411] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aZ3T9s-TpHVc8yBj5eaghQAAAhI"]
[Wed Feb 25 00:38:14.873293 2026] [:error] [pid 18458:tid 18811] [client 98.159.43.111:59589] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZ3T9guir-tBe4tUislvGgAAApA"]
[Wed Feb 25 00:38:15.698947 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.158:39175] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Wed Feb 25 00:38:15.822212 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.158:39175] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aZ3T9-DBmHucoAJRnqnauAAAAAU"]
[Wed Feb 25 00:38:16.189605 2026] [:error] [pid 18447:tid 18784] [client 98.159.43.123:31429] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Feb 25 00:38:16.323427 2026] [:error] [pid 18447:tid 18786] [client 98.159.43.123:31429] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Wed Feb 25 00:38:16.511740 2026] [:error] [pid 18447:tid 18768] [client 98.159.43.123:31429] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZ3T-M-TpHVc8yBj5eagjQAAAgU"]
[Wed Feb 25 00:38:16.718343 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.157:56883] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Feb 25 00:38:16.845353 2026] [:error] [pid 18850:tid 18856] [client 98.159.43.157:56883] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Wed Feb 25 00:38:16.955734 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.157:56883] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ3T-ODBmHucoAJRnqnauwAAABM"]
[Wed Feb 25 00:38:17.139629 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.144:55099] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Wed Feb 25 00:38:17.240406 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.144:55099] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aZ3T-XxLbzvRGuzwKjm7MgAAAEQ"]
[Wed Feb 25 00:38:17.752726 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.123:25947] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZ3T-XxLbzvRGuzwKjm7OQAAAFM"]
[Wed Feb 25 00:38:17.987511 2026] [:error] [pid 26872:tid 26880] [client 98.159.43.122:38675] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aZ3T-XxLbzvRGuzwKjm7OwAAAEY"]
[Wed Feb 25 00:38:18.312686 2026] [:error] [pid 18447:tid 18763] [client 98.159.43.144:41555] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZ3T-s-TpHVc8yBj5eagkAAAAgA"]
[Wed Feb 25 00:38:18.523137 2026] [:error] [pid 18447:tid 18782] [client 98.159.43.130:37263] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 25 00:38:18.725373 2026] [:error] [pid 18447:tid 18764] [client 98.159.43.130:37263] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Feb 25 00:38:18.852073 2026] [:error] [pid 18447:tid 18766] [client 98.159.43.130:37263] [client 98.159.43.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.130, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aZ3T-s-TpHVc8yBj5eaglwAAAgM"]
[Wed Feb 25 00:38:19.067654 2026] [:error] [pid 18447:tid 18776] [client 98.159.43.130:37263] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aZ3T-8-TpHVc8yBj5eagmQAAAg0"]
[Wed Feb 25 00:38:19.266246 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.105:25397] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ3T-3xLbzvRGuzwKjm7QgAAAE0"]
[Wed Feb 25 00:38:19.591457 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.116:35345] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Feb 25 00:38:19.729281 2026] [:error] [pid 18447:tid 18770] [client 98.159.43.116:35345] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Feb 25 00:38:20.186313 2026] [:error] [pid 18447:tid 18764] [client 98.159.43.116:35345] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Wed Feb 25 00:38:20.507816 2026] [:error] [pid 18447:tid 18784] [client 98.159.43.116:35345] [client 98.159.43.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.116, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aZ3T_M-TpHVc8yBj5eagqAAAAhU"]
[Wed Feb 25 00:38:20.642604 2026] [:error] [pid 18447:tid 18776] [client 98.159.43.116:35345] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZ3T_M-TpHVc8yBj5eagqgAAAg0"]
[Wed Feb 25 00:38:20.872694 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.130:39671] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aZ3T_HxLbzvRGuzwKjm7RgAAAE8"]
[Wed Feb 25 00:38:21.090131 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.155:36585] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aZ3T_XxLbzvRGuzwKjm7SAAAAEQ"]
[Wed Feb 25 00:38:21.758697 2026] [:error] [pid 26872:tid 26877] [client 98.159.43.151:52709] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Wed Feb 25 00:38:21.916526 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.151:52709] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aZ3T_XxLbzvRGuzwKjm7VwAAAFY"]
[Wed Feb 25 00:38:22.317591 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.151:54323] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Wed Feb 25 00:38:22.969674 2026] [:error] [pid 26872:tid 26885] [client 98.159.43.151:54323] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 25 00:38:23.350846 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.151:54323] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Wed Feb 25 00:38:24.668450 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.151:54323] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZ3UAHxLbzvRGuzwKjm7cQAAAEA"]
[Wed Feb 25 00:38:25.049342 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.113:26341] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Wed Feb 25 00:38:25.246208 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.113:26341] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ3UAeDBmHucoAJRnqnaxwAAABc"]
[Wed Feb 25 00:38:25.578851 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.144:44531] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Feb 25 00:38:25.982044 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.144:44531] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZ3UAXxLbzvRGuzwKjm7fgAAAFM"]
[Wed Feb 25 00:38:26.372831 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.151:50675] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZ3UAnxLbzvRGuzwKjm7gwAAAEo"]
[Wed Feb 25 00:38:26.774405 2026] [:error] [pid 18447:tid 18766] [client 98.159.43.142:31475] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aZ3UAs-TpHVc8yBj5eagsAAAAgM"]
[Wed Feb 25 00:38:27.117296 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.107:61665] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZ3UA3xLbzvRGuzwKjm7igAAAEk"]
[Wed Feb 25 00:38:27.592986 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.136:59377] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZ3UA3xLbzvRGuzwKjm7jgAAAEA"]
[Wed Feb 25 00:38:28.235493 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.132:30921] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ3UBHxLbzvRGuzwKjm7lgAAAEo"]
[Wed Feb 25 00:38:28.682007 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.105:41649] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Feb 25 00:38:29.010050 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.105:41649] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ3UBeDBmHucoAJRnqna0AAAAAs"]
[Wed Feb 25 00:38:29.439555 2026] [:error] [pid 18447:tid 18776] [client 98.159.43.118:37671] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Wed Feb 25 00:38:29.651204 2026] [:error] [pid 18447:tid 18777] [client 98.159.43.118:37671] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Wed Feb 25 00:38:29.794058 2026] [:error] [pid 18447:tid 18786] [client 98.159.43.118:37671] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ3UBc-TpHVc8yBj5eagtAAAAhc"]
[Wed Feb 25 00:38:30.356605 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.157:62627] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZ3UBs-TpHVc8yBj5eagtwAAAgs"]
[Wed Feb 25 00:38:30.643127 2026] [:error] [pid 18458:tid 18809] [client 98.159.43.120:27475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Wed Feb 25 00:38:32.117330 2026] [:error] [pid 18458:tid 18815] [client 98.159.43.120:27475] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Wed Feb 25 00:38:32.431320 2026] [:error] [pid 18458:tid 18804] [client 98.159.43.120:27475] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Feb 25 00:38:32.570651 2026] [:error] [pid 18458:tid 18805] [client 98.159.43.120:27475] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aZ3UCAuir-tBe4tUislvLAAAAos"]
[Wed Feb 25 00:38:33.058976 2026] [:error] [pid 18447:tid 18763] [client 98.159.43.136:53449] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Feb 25 00:38:33.491735 2026] [:error] [pid 18447:tid 18771] [client 98.159.43.136:53449] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Wed Feb 25 00:38:33.658029 2026] [:error] [pid 18447:tid 18764] [client 98.159.43.136:53449] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Feb 25 00:38:34.045057 2026] [:error] [pid 18447:tid 18766] [client 98.159.43.136:53449] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Wed Feb 25 00:38:34.156557 2026] [:error] [pid 18447:tid 18785] [client 98.159.43.136:53449] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Wed Feb 25 00:38:34.712061 2026] [:error] [pid 18447:tid 18772] [client 98.159.43.136:53449] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Wed Feb 25 00:38:34.850946 2026] [:error] [pid 18447:tid 18770] [client 98.159.43.136:53449] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aZ3UCs-TpHVc8yBj5eagywAAAgc"]
[Wed Feb 25 00:38:35.042234 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.129:31933] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ3UC3xLbzvRGuzwKjm7pwAAAFE"]
[Wed Feb 25 00:38:35.240505 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.110:29883] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 25 00:38:35.335666 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.110:29883] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Feb 25 00:38:35.461189 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.110:29883] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 25 00:38:35.555096 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.110:29883] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aZ3UC3xLbzvRGuzwKjm7rAAAAFY"]
[Wed Feb 25 00:38:35.771472 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.148:51447] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZ3UC3xLbzvRGuzwKjm7sAAAAFM"]
[Wed Feb 25 00:38:36.037364 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.141:58621] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Feb 25 00:38:36.157782 2026] [:error] [pid 18850:tid 18860] [client 98.159.43.141:58621] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aZ3UDODBmHucoAJRnqna2AAAAAg"]
[Wed Feb 25 00:38:36.423304 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.141:47939] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Wed Feb 25 00:38:36.524471 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.141:47939] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Wed Feb 25 00:38:36.624598 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.141:47939] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Wed Feb 25 00:38:38.178438 2026] [:error] [pid 18850:tid 18864] [client 98.159.43.141:47939] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Wed Feb 25 00:38:38.338093 2026] [:error] [pid 18850:tid 18861] [client 98.159.43.141:47939] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 25 00:38:38.479732 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.141:47939] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZ3UDuDBmHucoAJRnqna5AAAABc"]
[Wed Feb 25 00:38:38.820170 2026] [:error] [pid 18458:tid 18819] [client 98.159.43.110:49133] [client 98.159.43.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.110, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aZ3UDguir-tBe4tUislvMAAAApg"]
[Wed Feb 25 00:38:38.924090 2026] [:error] [pid 18458:tid 18816] [client 98.159.43.110:49133] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Wed Feb 25 00:38:39.015873 2026] [:error] [pid 18458:tid 18800] [client 98.159.43.110:49133] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZ3UDwuir-tBe4tUislvMwAAAoY"]
[Wed Feb 25 00:38:39.225619 2026] [:error] [pid 18441:tid 18721] [client 98.159.43.151:53429] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aZ3UDxYF1wpOnXIaHlOJyAAAAM0"]
[Wed Feb 25 00:38:39.601345 2026] [:error] [pid 26872:tid 26885] [client 98.159.43.141:54401] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 25 00:38:39.704110 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.141:54401] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Wed Feb 25 00:38:39.833816 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.141:54401] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aZ3UD3xLbzvRGuzwKjm7uQAAAEA"]
[Wed Feb 25 00:38:40.095704 2026] [:error] [pid 18458:tid 18795] [client 98.159.43.162:38375] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Wed Feb 25 00:38:40.233882 2026] [:error] [pid 18458:tid 18809] [client 98.159.43.162:38375] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aZ3UEAuir-tBe4tUislvNQAAAo4"]
[Wed Feb 25 00:38:40.527020 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.154:20705] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Feb 25 00:38:40.633966 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.154:20705] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Wed Feb 25 00:38:40.747847 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.154:20705] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php
[Wed Feb 25 00:38:41.301657 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.154:20705] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Wed Feb 25 00:38:41.409054 2026] [:error] [pid 18850:tid 18854] [client 98.159.43.154:20705] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class_api.php
[Wed Feb 25 00:38:41.652604 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.154:20705] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aZ3UEeDBmHucoAJRnqna9QAAAA8"]
[Wed Feb 25 00:38:41.854928 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.149:40189] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Wed Feb 25 00:38:42.105348 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.149:40189] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Wed Feb 25 00:38:42.270284 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.149:40189] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aZ3UEnxLbzvRGuzwKjm7wQAAAFE"]
[Wed Feb 25 00:38:42.686707 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.158:22953] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Feb 25 00:38:42.822618 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.158:22953] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Feb 25 00:38:42.952583 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.158:22953] [client 98.159.43.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.158, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZ3UEuDBmHucoAJRnqna-wAAABQ"]
[Wed Feb 25 00:38:42.956301 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.158:22953] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Wed Feb 25 00:38:44.760266 2026] [:error] [pid 18850:tid 18854] [client 98.159.43.158:22953] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Wed Feb 25 00:38:44.897048 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.158:22953] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 25 00:38:45.215276 2026] [:error] [pid 18850:tid 18864] [client 98.159.43.158:22953] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aZ3UFeDBmHucoAJRnqnbBQAAAAw"]
[Wed Feb 25 00:38:45.464686 2026] [:error] [pid 18441:tid 18711] [client 98.159.43.120:39865] [client 98.159.43.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.120, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aZ3UFRYF1wpOnXIaHlOJzAAAAMM"]
[Wed Feb 25 00:38:45.607149 2026] [:error] [pid 18441:tid 18714] [client 98.159.43.120:39865] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aZ3UFRYF1wpOnXIaHlOJzQAAAMY"]
[Wed Feb 25 00:38:46.663113 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.110:25205] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Wed Feb 25 00:38:47.030399 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.110:25205] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZ3UF3xLbzvRGuzwKjm72QAAAFE"]
[Wed Feb 25 00:38:47.372802 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.154:34597] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Feb 25 00:38:47.585680 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.154:34597] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aZ3UF-DBmHucoAJRnqnbDQAAAAA"]
[Wed Feb 25 00:38:47.943537 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.135:26873] [client 98.159.43.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.135, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aZ3UF3xLbzvRGuzwKjm74AAAAFY"]
[Wed Feb 25 00:38:48.393607 2026] [:error] [pid 26872:tid 26890] [client 98.159.43.135:26873] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Wed Feb 25 00:38:48.513908 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.135:26873] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Wed Feb 25 00:38:48.644877 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.135:26873] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Wed Feb 25 00:38:48.897948 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.135:26873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Wed Feb 25 00:38:49.015489 2026] [:error] [pid 26872:tid 26880] [client 98.159.43.135:26873] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aZ3UGXxLbzvRGuzwKjm77wAAAEY"]
[Wed Feb 25 00:38:49.471884 2026] [:error] [pid 26872:tid 26882] [client 98.159.43.110:36711] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/packed.php"] [unique_id "aZ3UGXxLbzvRGuzwKjm79AAAAEg"]
[Wed Feb 25 00:38:49.757279 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.161:49599] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Feb 25 00:38:49.885877 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.161:49599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Feb 25 00:38:50.293313 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.161:49599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Wed Feb 25 00:38:50.414849 2026] [:error] [pid 26872:tid 26880] [client 98.159.43.161:49599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Wed Feb 25 00:38:50.817818 2026] [:error] [pid 26872:tid 26894] [client 98.159.43.161:49599] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aZ3UGnxLbzvRGuzwKjm8AAAAAFQ"]
[Wed Feb 25 00:38:51.274510 2026] [:error] [pid 18441:tid 18731] [client 98.159.43.135:31347] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZ3UGxYF1wpOnXIaHlOJ1AAAANY"]
[Wed Feb 25 00:38:51.681819 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.149:56821] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aZ3UG-DBmHucoAJRnqnbEAAAAA8"]
[Wed Feb 25 00:38:51.981220 2026] [:error] [pid 18850:tid 18856] [client 98.159.43.118:59463] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Wed Feb 25 00:38:52.468898 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.118:59463] [client 98.159.43.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.118, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ3UHODBmHucoAJRnqnbGQAAABQ"]
[Wed Feb 25 00:38:52.600941 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.118:59463] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZ3UHODBmHucoAJRnqnbGgAAAAA"]
[Wed Feb 25 00:38:53.345180 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.108:64805] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Wed Feb 25 00:38:53.523594 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.108:64805] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Wed Feb 25 00:38:53.799490 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.108:64805] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZ3UHeDBmHucoAJRnqnbJQAAABU"]
[Wed Feb 25 00:38:54.057854 2026] [:error] [pid 18458:tid 18809] [client 98.159.43.105:59413] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aZ3UHguir-tBe4tUislvPwAAAo4"]
[Wed Feb 25 00:38:54.286130 2026] [:error] [pid 18458:tid 18807] [client 98.159.43.145:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Wed Feb 25 00:38:54.798031 2026] [:error] [pid 18458:tid 18813] [client 98.159.43.145:37897] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php
[Wed Feb 25 00:38:55.209915 2026] [:error] [pid 18458:tid 18798] [client 98.159.43.145:37897] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dropdown.php
[Wed Feb 25 00:38:55.414837 2026] [:error] [pid 18458:tid 18796] [client 98.159.43.145:37897] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aZ3UHwuir-tBe4tUislvSwAAAoM"]
[Wed Feb 25 00:38:55.641260 2026] [:error] [pid 18441:tid 18732] [client 98.159.43.152:35919] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Feb 25 00:38:55.791940 2026] [:error] [pid 18441:tid 18717] [client 98.159.43.152:35919] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Wed Feb 25 00:38:56.050543 2026] [:error] [pid 18441:tid 18709] [client 98.159.43.152:35919] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aZ3UIBYF1wpOnXIaHlOJ3gAAAME"]
[Wed Feb 25 00:38:56.902679 2026] [:error] [pid 18458:tid 18813] [client 98.159.43.141:29257] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Wed Feb 25 00:38:57.161834 2026] [:error] [pid 18458:tid 18805] [client 98.159.43.141:29257] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/blurbs.php
[Wed Feb 25 00:38:57.406986 2026] [:error] [pid 18458:tid 18803] [client 98.159.43.141:29257] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aZ3UIQuir-tBe4tUislvWwAAAok"]
[Wed Feb 25 00:38:58.220509 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.110:45787] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aZ3UIuDBmHucoAJRnqnbLQAAAAo"]
[Wed Feb 25 00:38:58.881047 2026] [:error] [pid 26872:tid 26880] [client 98.159.43.139:24681] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Wed Feb 25 00:38:59.283348 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.139:24681] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Feb 25 00:38:59.402859 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.139:24681] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Wed Feb 25 00:38:59.534617 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.139:24681] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Wed Feb 25 00:38:59.655921 2026] [:error] [pid 26872:tid 26882] [client 98.159.43.139:24681] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aZ3UI3xLbzvRGuzwKjm8EAAAAEg"]
[Wed Feb 25 00:38:59.894462 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.114:45631] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/doc.php
[Wed Feb 25 00:39:00.043312 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.114:45631] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Wed Feb 25 00:39:00.535179 2026] [:error] [pid 26872:tid 26885] [client 98.159.43.114:45631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Wed Feb 25 00:39:00.647220 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.114:45631] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZ3UJHxLbzvRGuzwKjm8GgAAAEc"]
[Wed Feb 25 00:39:01.074314 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.147:21699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Wed Feb 25 00:39:01.209740 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.147:21699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Feb 25 00:39:01.486278 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.147:21699] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Wed Feb 25 00:39:01.753844 2026] [:error] [pid 18850:tid 18856] [client 98.159.43.147:21699] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Wed Feb 25 00:39:02.135007 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.147:21699] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/item.php"] [unique_id "aZ3UJuDBmHucoAJRnqnbNwAAAAY"]
[Wed Feb 25 00:39:03.284713 2026] [:error] [pid 18850:tid 18867] [client 98.159.43.155:30379] [client 98.159.43.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.155, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aZ3UJ-DBmHucoAJRnqnbQAAAAA8"]
[Wed Feb 25 00:39:03.534139 2026] [:error] [pid 18850:tid 18854] [client 98.159.43.155:30379] [client 98.159.43.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.155, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aZ3UJ-DBmHucoAJRnqnbQgAAAAI"]
[Wed Feb 25 00:39:03.674807 2026] [:error] [pid 18850:tid 18865] [client 98.159.43.155:30379] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mani.php"] [unique_id "aZ3UJ-DBmHucoAJRnqnbQwAAAA0"]
[Wed Feb 25 00:39:04.086059 2026] [:error] [pid 18458:tid 18819] [client 98.159.43.122:47203] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Feb 25 00:39:05.291975 2026] [:error] [pid 18458:tid 18801] [client 98.159.43.122:47203] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aZ3UKQuir-tBe4tUislvcQAAAoc"]
[Wed Feb 25 00:39:05.587841 2026] [:error] [pid 18458:tid 18793] [client 98.159.43.132:61603] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Wed Feb 25 00:39:06.820926 2026] [:error] [pid 18458:tid 18793] [client 98.159.43.132:61603] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Wed Feb 25 00:39:06.977211 2026] [:error] [pid 18458:tid 18813] [client 98.159.43.132:61603] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aZ3UKguir-tBe4tUislveAAAApI"]
[Wed Feb 25 00:39:07.888922 2026] [:error] [pid 18458:tid 18802] [client 98.159.43.109:35765] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Wed Feb 25 00:39:08.347442 2026] [:error] [pid 18458:tid 18816] [client 98.159.43.109:35765] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/themes.php
[Wed Feb 25 00:39:08.693625 2026] [:error] [pid 18458:tid 18807] [client 98.159.43.109:35765] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZ3ULAuir-tBe4tUislvhAAAAo0"]
[Wed Feb 25 00:39:08.990986 2026] [:error] [pid 18447:tid 18773] [client 98.159.43.129:46425] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aZ3ULM-TpHVc8yBj5eag5wAAAgo"]
[Wed Feb 25 00:39:09.435849 2026] [:error] [pid 18447:tid 18776] [client 98.159.43.161:46635] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Feb 25 00:39:09.914953 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.161:46635] [client 98.159.43.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.161, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/wp-login.php"] [unique_id "aZ3ULc-TpHVc8yBj5eag8QAAAgs"]
[Wed Feb 25 00:39:10.530106 2026] [:error] [pid 18447:tid 18763] [client 98.159.43.161:46635] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aZ3ULs-TpHVc8yBj5eag9gAAAgA"]
[Wed Feb 25 00:39:10.842086 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.107:30653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Feb 25 00:39:10.981913 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.107:30653] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aZ3ULnxLbzvRGuzwKjm8KQAAAEA"]
[Wed Feb 25 00:39:11.266652 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.109:56899] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZ3UL-DBmHucoAJRnqnbUgAAABQ"]
[Wed Feb 25 00:39:11.761401 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.123:24477] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZ3UL3xLbzvRGuzwKjm8MgAAAEE"]
[Wed Feb 25 00:39:12.869038 2026] [:error] [pid 18441:tid 18726] [client 98.159.43.145:30879] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/parx.php
[Wed Feb 25 00:39:13.203131 2026] [:error] [pid 18441:tid 18721] [client 98.159.43.145:30879] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aZ3UMRYF1wpOnXIaHlOJ7gAAAM0"]
[Wed Feb 25 00:39:13.673866 2026] [:error] [pid 18458:tid 18817] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Wed Feb 25 00:39:13.820500 2026] [:error] [pid 18458:tid 18816] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Feb 25 00:39:14.462036 2026] [:error] [pid 18458:tid 18811] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Wed Feb 25 00:39:14.632797 2026] [:error] [pid 18458:tid 18793] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Wed Feb 25 00:39:14.791853 2026] [:error] [pid 18458:tid 18815] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Wed Feb 25 00:39:14.943636 2026] [:error] [pid 18458:tid 18805] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Feb 25 00:39:15.249519 2026] [:error] [pid 18458:tid 18817] [client 98.159.43.118:60531] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Feb 25 00:39:15.719517 2026] [:error] [pid 18458:tid 18806] [client 98.159.43.118:60531] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aZ3UMwuir-tBe4tUislvoQAAAow"]
[Wed Feb 25 00:39:16.266851 2026] [:error] [pid 18458:tid 18815] [client 98.159.43.120:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Wed Feb 25 00:39:16.406706 2026] [:error] [pid 18458:tid 18804] [client 98.159.43.120:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 25 00:39:16.550408 2026] [:error] [pid 18458:tid 18819] [client 98.159.43.120:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Feb 25 00:39:16.718955 2026] [:error] [pid 18458:tid 18796] [client 98.159.43.120:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Wed Feb 25 00:39:17.046650 2026] [:error] [pid 18458:tid 18816] [client 98.159.43.120:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Wed Feb 25 00:39:17.213491 2026] [:error] [pid 18458:tid 18795] [client 98.159.43.120:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Wed Feb 25 00:39:17.535901 2026] [:error] [pid 18458:tid 18807] [client 98.159.43.120:38353] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aZ3UNQuir-tBe4tUislvsgAAAo0"]
[Wed Feb 25 00:39:18.659825 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.106:29581] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aZ3UNuDBmHucoAJRnqnbXwAAABY"]
[Wed Feb 25 00:39:19.143106 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.163:61185] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aZ3UN8-TpHVc8yBj5eahAAAAAgs"]
[Wed Feb 25 00:39:19.427510 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.131:47373] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Feb 25 00:39:19.604578 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.131:47373] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Wed Feb 25 00:39:19.758254 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.131:47373] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Wed Feb 25 00:39:20.062897 2026] [:error] [pid 26872:tid 26888] [client 98.159.43.131:47373] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Wed Feb 25 00:39:20.235568 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.131:47373] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Wed Feb 25 00:39:20.377240 2026] [:error] [pid 26872:tid 26877] [client 98.159.43.131:47373] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Wed Feb 25 00:39:20.513343 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.131:47373] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aZ3UOHxLbzvRGuzwKjm8RwAAAFM"]
[Wed Feb 25 00:39:20.832052 2026] [:error] [pid 18447:tid 18783] [client 98.159.43.141:47995] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZ3UOM-TpHVc8yBj5eahBQAAAhQ"]
[Wed Feb 25 00:39:21.458642 2026] [:error] [pid 18447:tid 18764] [client 98.159.43.157:53073] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aZ3UOc-TpHVc8yBj5eahCQAAAgE"]
[Wed Feb 25 00:39:21.925540 2026] [:error] [pid 18447:tid 18778] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Wed Feb 25 00:39:22.085072 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Wed Feb 25 00:39:22.244236 2026] [:error] [pid 18447:tid 18787] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Wed Feb 25 00:39:22.398818 2026] [:error] [pid 18447:tid 18767] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Wed Feb 25 00:39:22.553914 2026] [:error] [pid 18447:tid 18777] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Feb 25 00:39:22.711744 2026] [:error] [pid 18447:tid 18779] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Wed Feb 25 00:39:22.893327 2026] [:error] [pid 18447:tid 18783] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Wed Feb 25 00:39:23.079131 2026] [:error] [pid 18447:tid 18770] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Wed Feb 25 00:39:24.414305 2026] [:error] [pid 18447:tid 18770] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Wed Feb 25 00:39:24.570801 2026] [:error] [pid 18447:tid 18781] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Wed Feb 25 00:39:24.722797 2026] [:error] [pid 18447:tid 18775] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Wed Feb 25 00:39:24.919364 2026] [:error] [pid 18447:tid 18766] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Wed Feb 25 00:39:25.082441 2026] [:error] [pid 18447:tid 18782] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Wed Feb 25 00:39:25.296085 2026] [:error] [pid 18447:tid 18776] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Wed Feb 25 00:39:25.457104 2026] [:error] [pid 18447:tid 18764] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Wed Feb 25 00:39:25.610683 2026] [:error] [pid 18447:tid 18772] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Wed Feb 25 00:39:25.763881 2026] [:error] [pid 18447:tid 18784] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Wed Feb 25 00:39:25.915100 2026] [:error] [pid 18447:tid 18786] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Feb 25 00:39:26.083119 2026] [:error] [pid 18447:tid 18774] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Wed Feb 25 00:39:26.257308 2026] [:error] [pid 18447:tid 18767] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Wed Feb 25 00:39:26.396509 2026] [:error] [pid 18447:tid 18765] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Wed Feb 25 00:39:26.568019 2026] [:error] [pid 18447:tid 18768] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Wed Feb 25 00:39:26.711921 2026] [:error] [pid 18447:tid 18777] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Wed Feb 25 00:39:26.861804 2026] [:error] [pid 18447:tid 18779] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Wed Feb 25 00:39:27.016074 2026] [:error] [pid 18447:tid 18783] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Wed Feb 25 00:39:27.170597 2026] [:error] [pid 18447:tid 18771] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Wed Feb 25 00:39:27.311610 2026] [:error] [pid 18447:tid 18780] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Feb 25 00:39:27.488111 2026] [:error] [pid 18447:tid 18770] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Wed Feb 25 00:39:27.650166 2026] [:error] [pid 18447:tid 18781] [client 98.159.43.139:57027] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Wed Feb 25 00:39:27.826734 2026] [:error] [pid 18447:tid 18763] [client 98.159.43.139:57027] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aZ3UP8-TpHVc8yBj5eahLAAAAgA"]
[Wed Feb 25 00:39:28.149516 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Wed Feb 25 00:39:28.291308 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Wed Feb 25 00:39:28.446814 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Wed Feb 25 00:39:28.602140 2026] [:error] [pid 26872:tid 26885] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Wed Feb 25 00:39:28.755042 2026] [:error] [pid 26872:tid 26879] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Wed Feb 25 00:39:28.896166 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Wed Feb 25 00:39:29.052833 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Wed Feb 25 00:39:29.211181 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Wed Feb 25 00:39:29.524854 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.110:26759] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Wed Feb 25 00:39:29.668434 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.110:26759] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aZ3UQXxLbzvRGuzwKjm8bAAAAEc"]
[Wed Feb 25 00:39:30.511436 2026] [:error] [pid 18441:tid 18720] [client 98.159.43.107:42259] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Wed Feb 25 00:39:32.358406 2026] [:error] [pid 18441:tid 18733] [client 98.159.43.107:42259] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aZ3URBYF1wpOnXIaHlOKCgAAANg"]
[Wed Feb 25 00:39:32.641235 2026] [:error] [pid 18441:tid 18728] [client 98.159.43.156:53279] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aZ3URBYF1wpOnXIaHlOKCwAAANM"]
[Wed Feb 25 00:39:33.257586 2026] [:error] [pid 18441:tid 18721] [client 98.159.43.134:46683] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aZ3URRYF1wpOnXIaHlOKDwAAAM0"]
[Wed Feb 25 00:39:33.791723 2026] [:error] [pid 18441:tid 18727] [client 98.159.43.115:58637] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/repeater.php"] [unique_id "aZ3URRYF1wpOnXIaHlOKEgAAANI"]
[Wed Feb 25 00:39:34.590988 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.137:47421] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php
[Wed Feb 25 00:39:34.748134 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.137:47421] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php
[Wed Feb 25 00:39:35.059213 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.137:47421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php
[Wed Feb 25 00:39:36.345833 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.137:47421] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aZ3USODBmHucoAJRnqnbjwAAABg"]
[Wed Feb 25 00:39:36.949422 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.115:52297] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aZ3USODBmHucoAJRnqnbkQAAABY"]
[Wed Feb 25 00:39:37.389610 2026] [:error] [pid 18850:tid 18861] [client 98.159.43.158:43683] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/options.php"] [unique_id "aZ3USeDBmHucoAJRnqnblAAAAAk"]
[Wed Feb 25 00:39:37.746955 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.123:52797] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Wed Feb 25 00:39:38.047553 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.123:52797] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aZ3USnxLbzvRGuzwKjm8egAAAE0"]
[Wed Feb 25 00:39:38.343242 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.131:25765] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aZ3USuDBmHucoAJRnqnbmAAAAA4"]
[Wed Feb 25 00:39:39.109948 2026] [:error] [pid 18850:tid 18861] [client 98.159.43.122:24505] [client 98.159.43.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.122, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/images/wp-login.php"] [unique_id "aZ3US-DBmHucoAJRnqnbngAAAAk"]
[Wed Feb 25 00:39:39.257215 2026] [:error] [pid 18850:tid 18864] [client 98.159.43.122:24505] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Feb 25 00:39:40.049872 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.122:24505] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aZ3UTODBmHucoAJRnqnbpAAAABI"]
[Wed Feb 25 00:39:40.337689 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.105:65219] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php
[Wed Feb 25 00:39:40.985582 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.105:65219] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aZ3UTODBmHucoAJRnqnbqwAAAAs"]
[Wed Feb 25 00:39:41.326967 2026] [:error] [pid 18850:tid 18856] [client 98.159.43.135:37253] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aZ3UTeDBmHucoAJRnqnbrgAAAAQ"]
[Wed Feb 25 00:39:41.650636 2026] [:error] [pid 18441:tid 18717] [client 98.159.43.144:45559] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/autoload_classmap.php
[Wed Feb 25 00:39:41.798846 2026] [:error] [pid 18441:tid 18732] [client 98.159.43.144:45559] [client 98.159.43.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.144, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aZ3UTRYF1wpOnXIaHlOKGQAAANc"]
[Wed Feb 25 00:39:41.948939 2026] [:error] [pid 18441:tid 18728] [client 98.159.43.144:45559] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Wed Feb 25 00:39:42.094904 2026] [:error] [pid 18441:tid 18709] [client 98.159.43.144:45559] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aZ3UThYF1wpOnXIaHlOKGwAAAME"]
[Wed Feb 25 00:39:42.426844 2026] [:error] [pid 18458:tid 18795] [client 98.159.43.134:40091] File does not exist: /usr/local/apache/htdocs/suspended-page/indeex.php
[Wed Feb 25 00:39:42.606326 2026] [:error] [pid 18458:tid 18810] [client 98.159.43.134:40091] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Feb 25 00:39:43.135888 2026] [:error] [pid 18458:tid 18806] [client 98.159.43.134:40091] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aZ3UTwuir-tBe4tUislv3AAAAow"]
[Wed Feb 25 00:39:43.441227 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Wed Feb 25 00:39:43.750261 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/credits.php
[Wed Feb 25 00:39:43.909464 2026] [:error] [pid 26872:tid 26894] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-comments.php
[Wed Feb 25 00:39:44.050863 2026] [:error] [pid 26872:tid 26878] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Wed Feb 25 00:39:44.212148 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Wed Feb 25 00:39:44.381858 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Wed Feb 25 00:39:44.560475 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/load-scripts.php
[Wed Feb 25 00:39:44.742233 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/load-styles.php
[Wed Feb 25 00:39:44.895937 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/options-discussion.php
[Wed Feb 25 00:39:46.362968 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php
[Wed Feb 25 00:39:46.525117 2026] [:error] [pid 26872:tid 26877] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/options-permalink.php
[Wed Feb 25 00:39:46.686770 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/options-privacy.php
[Wed Feb 25 00:39:46.824028 2026] [:error] [pid 26872:tid 26876] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Wed Feb 25 00:39:47.014051 2026] [:error] [pid 26872:tid 26888] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Wed Feb 25 00:39:47.182592 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/post-new.php
[Wed Feb 25 00:39:47.337522 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Wed Feb 25 00:39:47.511280 2026] [:error] [pid 26872:tid 26893] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Wed Feb 25 00:39:47.669066 2026] [:error] [pid 26872:tid 26880] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/site-health.php
[Wed Feb 25 00:39:47.831187 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Wed Feb 25 00:39:48.023949 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Wed Feb 25 00:39:48.167126 2026] [:error] [pid 26872:tid 26897] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php
[Wed Feb 25 00:39:48.311806 2026] [:error] [pid 26872:tid 26890] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/user-new.php
[Wed Feb 25 00:39:48.473887 2026] [:error] [pid 26872:tid 26882] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Wed Feb 25 00:39:48.624561 2026] [:error] [pid 26872:tid 26884] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/bar.php
[Wed Feb 25 00:39:48.846635 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Wed Feb 25 00:39:49.003013 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Feb 25 00:39:49.181777 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Feb 25 00:39:49.330806 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Wed Feb 25 00:39:49.494953 2026] [:error] [pid 26872:tid 26885] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/km.php
[Wed Feb 25 00:39:49.638687 2026] [:error] [pid 26872:tid 26883] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/LA.php
[Wed Feb 25 00:39:49.819265 2026] [:error] [pid 26872:tid 26879] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Feb 25 00:39:49.966132 2026] [:error] [pid 26872:tid 26877] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ldd.php
[Wed Feb 25 00:39:50.111854 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php
[Wed Feb 25 00:39:50.276332 2026] [:error] [pid 26872:tid 26895] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php
[Wed Feb 25 00:39:50.730113 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Feb 25 00:39:51.088908 2026] [:error] [pid 26872:tid 26894] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Feb 25 00:39:51.683870 2026] [:error] [pid 26872:tid 26881] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Feb 25 00:39:51.832804 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.114:35475] [client 98.159.43.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.114, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aZ3UV3xLbzvRGuzwKjm8sAAAAFE"]
[Wed Feb 25 00:39:51.959619 2026] [:error] [pid 26872:tid 26887] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Wed Feb 25 00:39:52.420059 2026] [:error] [pid 26872:tid 26892] [client 98.159.43.114:35475] [client 98.159.43.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.114, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.tmb/wp-login.php"] [unique_id "aZ3UWHxLbzvRGuzwKjm8tgAAAFI"]
[Wed Feb 25 00:39:52.784216 2026] [:error] [pid 26872:tid 26896] [client 98.159.43.114:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/FroggBaba.php
[Wed Feb 25 00:39:52.986110 2026] [:error] [pid 26872:tid 26898] [client 98.159.43.114:35475] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZ3UWHxLbzvRGuzwKjm8ugAAAFg"]
[Wed Feb 25 00:39:53.239202 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.111:48881] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aZ3UWXxLbzvRGuzwKjm8vQAAAE8"]
[Wed Feb 25 00:39:53.554670 2026] [:error] [pid 18458:tid 18803] [client 98.159.43.121:44887] [client 98.159.43.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aZ3UWQuir-tBe4tUislv8wAAAok"]
[Wed Feb 25 00:39:53.913312 2026] [:error] [pid 26872:tid 26875] [client 98.159.43.107:48403] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Wed Feb 25 00:39:54.818176 2026] [:error] [pid 26872:tid 26886] [client 98.159.43.107:48403] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Wed Feb 25 00:39:54.961873 2026] [:error] [pid 26872:tid 26889] [client 98.159.43.107:48403] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Wed Feb 25 00:39:55.559742 2026] [:error] [pid 26872:tid 26874] [client 98.159.43.107:48403] [client 98.159.43.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.107, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aZ3UW3xLbzvRGuzwKjm80AAAAEA"]
[Wed Feb 25 00:39:55.710881 2026] [:error] [pid 26872:tid 26891] [client 98.159.43.107:48403] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ3UW3xLbzvRGuzwKjm80gAAAFE"]
[Wed Feb 25 00:39:56.156204 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/crop.php
[Wed Feb 25 00:39:56.288509 2026] [:error] [pid 18850:tid 18861] [client 98.159.43.109:40819] [client 98.159.43.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.109, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZ3UXODBmHucoAJRnqnb0wAAAAk"]
[Wed Feb 25 00:39:56.596757 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/gali.php
[Wed Feb 25 00:39:57.051154 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Wed Feb 25 00:39:57.243161 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/dirs.php
[Wed Feb 25 00:39:57.375331 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Wed Feb 25 00:39:57.546940 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/malls.php
[Wed Feb 25 00:39:57.686003 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/liefs.php
[Wed Feb 25 00:39:57.828539 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/uc.php
[Wed Feb 25 00:39:57.971255 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Wed Feb 25 00:39:58.146782 2026] [:error] [pid 18850:tid 18873] [client 98.159.43.109:40819] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-dsdd.php
[Wed Feb 25 00:39:58.725700 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.109:40819] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aZ3UXuDBmHucoAJRnqnb5gAAAAM"]
[Wed Feb 25 00:39:59.002792 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Wed Feb 25 00:39:59.141807 2026] [:error] [pid 18850:tid 18870] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Wed Feb 25 00:39:59.292205 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Wed Feb 25 00:39:59.441703 2026] [:error] [pid 18850:tid 18860] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed Feb 25 00:39:59.583624 2026] [:error] [pid 18850:tid 18872] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php
[Wed Feb 25 00:39:59.723215 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Wed Feb 25 00:40:00.030629 2026] [:error] [pid 18850:tid 18869] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Wed Feb 25 00:40:00.175252 2026] [:error] [pid 18850:tid 18866] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Feb 25 00:40:00.327736 2026] [:error] [pid 18850:tid 18857] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Wed Feb 25 00:40:00.462596 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.142:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Wed Feb 25 00:40:00.592696 2026] [:error] [pid 18850:tid 18874] [client 98.159.43.142:38461] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZ3UYODBmHucoAJRnqnb9AAAABY"]
[Wed Feb 25 00:40:01.060529 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Feb 25 00:40:01.583954 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php
[Wed Feb 25 00:40:01.815950 2026] [:error] [pid 18850:tid 18852] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Wed Feb 25 00:40:02.810315 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Feb 25 00:40:03.448411 2026] [:error] [pid 18850:tid 18855] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Wed Feb 25 00:40:03.731561 2026] [:error] [pid 18850:tid 18868] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php
[Wed Feb 25 00:40:04.022529 2026] [:error] [pid 18850:tid 18871] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php
[Wed Feb 25 00:40:04.329504 2026] [:error] [pid 18850:tid 18875] [client 98.159.43.146:38135] [client 98.159.43.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.146, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZ3UZODBmHucoAJRnqncFAAAABc"]
[Wed Feb 25 00:40:04.493057 2026] [:error] [pid 18850:tid 18864] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Wed Feb 25 00:40:04.809875 2026] [:error] [pid 18850:tid 18862] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Wed Feb 25 00:40:04.979137 2026] [:error] [pid 18850:tid 18858] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Wed Feb 25 00:40:05.347091 2026] [:error] [pid 18850:tid 18859] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Feb 25 00:40:05.806164 2026] [:error] [pid 18850:tid 18863] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Feb 25 00:40:05.939058 2026] [:error] [pid 18850:tid 18876] [client 98.159.43.146:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Wed Feb 25 00:40:06.530086 2026] [autoindex:error] [pid 18850:tid 18852] [client 98.159.43.146:38135] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 02:26:40.532753 2026] [:error] [pid 26872:tid 26884] [client 20.104.200.115:16379] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/jga.php"] [unique_id "aZ3tYHxLbzvRGuzwKjkEawAAAEo"]
[Wed Feb 25 02:26:41.959599 2026] [:error] [pid 18458:tid 18798] [client 20.104.200.115:16375] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/widget-cache.php"] [unique_id "aZ3tYQuir-tBe4tUismZJgAAAoQ"]
[Wed Feb 25 02:26:43.179155 2026] [:error] [pid 18447:tid 18778] [client 20.104.200.115:16363] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-json-ajax.php"] [unique_id "aZ3tY8-TpHVc8yBj5ea7rQAAAg8"]
[Wed Feb 25 02:26:45.266125 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:16362] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/select_file2.php"] [unique_id "aZ3tZXxLbzvRGuzwKjkEgwAAAEY"]
[Wed Feb 25 02:26:46.164408 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16262] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/select_file2.php"] [unique_id "aZ3tZuDBmHucoAJRnqkVOQAAABI"]
[Wed Feb 25 02:26:47.040624 2026] [:error] [pid 18850:tid 18860] [client 20.104.200.115:16369] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/select_file2.php"] [unique_id "aZ3tZ-DBmHucoAJRnqkVPgAAAAg"]
[Wed Feb 25 02:26:48.354942 2026] [:error] [pid 18850:tid 18863] [client 20.104.200.115:16271] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/select_file2.php"] [unique_id "aZ3taODBmHucoAJRnqkVRQAAAAs"]
[Wed Feb 25 02:26:49.771344 2026] [:error] [pid 18441:tid 18717] [client 20.104.200.115:16356] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aZ3taRYF1wpOnXIaHlOgnQAAAMk"]
[Wed Feb 25 02:26:51.457822 2026] [:error] [pid 18850:tid 18876] [client 20.104.200.115:16270] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aZ3ta-DBmHucoAJRnqkVbQAAABg"]
[Wed Feb 25 02:26:52.157568 2026] [:error] [pid 18850:tid 18853] [client 20.104.200.115:16382] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aZ3tbODBmHucoAJRnqkVcgAAAAE"]
[Wed Feb 25 02:26:52.920102 2026] [:error] [pid 18850:tid 18863] [client 20.104.200.115:16344] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aZ3tbODBmHucoAJRnqkVdgAAAAs"]
[Wed Feb 25 02:26:53.657454 2026] [:error] [pid 26872:tid 26883] [client 20.104.200.115:16268] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/8.php"] [unique_id "aZ3tbXxLbzvRGuzwKjkEoAAAAEk"]
[Wed Feb 25 02:26:54.456191 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16367] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/8.php"] [unique_id "aZ3tbnxLbzvRGuzwKjkErwAAAEU"]
[Wed Feb 25 02:26:55.271585 2026] [:error] [pid 26872:tid 26893] [client 20.104.200.115:16373] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/8.php"] [unique_id "aZ3tb3xLbzvRGuzwKjkEsgAAAFM"]
[Wed Feb 25 02:26:56.150186 2026] [:error] [pid 26872:tid 26883] [client 20.104.200.115:16275] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/8.php"] [unique_id "aZ3tcHxLbzvRGuzwKjkEuwAAAEk"]
[Wed Feb 25 02:26:56.999126 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16342] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/sh.php"] [unique_id "aZ3tcHxLbzvRGuzwKjkEwQAAAFA"]
[Wed Feb 25 02:26:57.548941 2026] [:error] [pid 26872:tid 26884] [client 20.104.200.115:16351] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/sh.php"] [unique_id "aZ3tcXxLbzvRGuzwKjkEwwAAAEo"]
[Wed Feb 25 02:26:58.146612 2026] [:error] [pid 26872:tid 26878] [client 20.104.200.115:16322] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/sh.php"] [unique_id "aZ3tcnxLbzvRGuzwKjkExgAAAEQ"]
[Wed Feb 25 02:26:59.073629 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16353] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/sh.php"] [unique_id "aZ3tc3xLbzvRGuzwKjkEywAAAFA"]
[Wed Feb 25 02:26:59.752781 2026] [:error] [pid 18850:tid 18867] [client 20.104.200.115:16263] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aZ3tc-DBmHucoAJRnqkVnAAAAA8"]
[Wed Feb 25 02:27:00.753101 2026] [:error] [pid 18447:tid 18765] [client 20.104.200.115:16371] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aZ3tdM-TpHVc8yBj5ea71QAAAgI"]
[Wed Feb 25 02:27:01.879009 2026] [:error] [pid 18447:tid 18767] [client 20.104.200.115:16348] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aZ3tdc-TpHVc8yBj5ea72AAAAgQ"]
[Wed Feb 25 02:27:02.999952 2026] [:error] [pid 26872:tid 26881] [client 20.104.200.115:16272] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aZ3tdnxLbzvRGuzwKjkE2AAAAEc"]
[Wed Feb 25 02:27:03.479481 2026] [:error] [pid 26872:tid 26895] [client 20.104.200.115:16260] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/incl.php"] [unique_id "aZ3td3xLbzvRGuzwKjkE4AAAAFU"]
[Wed Feb 25 02:27:04.488282 2026] [:error] [pid 26872:tid 26896] [client 20.104.200.115:16318] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers.php"] [unique_id "aZ3teHxLbzvRGuzwKjkE7AAAAFY"]
[Wed Feb 25 02:27:05.262755 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16221] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aZ3teXxLbzvRGuzwKjkE9QAAAFA"]
[Wed Feb 25 02:27:06.437875 2026] [:error] [pid 18458:tid 18800] [client 20.104.200.115:16378] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aZ3teguir-tBe4tUismZhwAAAoY"]
[Wed Feb 25 02:27:07.428958 2026] [:error] [pid 18850:tid 18861] [client 20.104.200.115:16269] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aZ3te-DBmHucoAJRnqkVwgAAAAk"]
[Wed Feb 25 02:27:08.524012 2026] [:error] [pid 18850:tid 18857] [client 20.104.200.115:16360] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aZ3tfODBmHucoAJRnqkVygAAAAU"]
[Wed Feb 25 02:27:09.716750 2026] [:error] [pid 18850:tid 18874] [client 20.104.200.115:16259] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image.php"] [unique_id "aZ3tfeDBmHucoAJRnqkV0QAAABY"]
[Wed Feb 25 02:27:10.765784 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16323] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image.php"] [unique_id "aZ3tfuDBmHucoAJRnqkV4gAAABI"]
[Wed Feb 25 02:27:11.445743 2026] [:error] [pid 18458:tid 18793] [client 20.104.200.115:16352] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image.php"] [unique_id "aZ3tfwuir-tBe4tUismZlAAAAoA"]
[Wed Feb 25 02:27:12.350287 2026] [:error] [pid 18441:tid 18727] [client 20.104.200.115:16337] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image.php"] [unique_id "aZ3tgBYF1wpOnXIaHlOgqAAAANI"]
[Wed Feb 25 02:27:14.816266 2026] [:error] [pid 18441:tid 18717] [client 20.104.200.115:16359] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image2.php"] [unique_id "aZ3tghYF1wpOnXIaHlOgrAAAAMk"]
[Wed Feb 25 02:27:16.602608 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16210] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image2.php"] [unique_id "aZ3thHxLbzvRGuzwKjkFFQAAAEU"]
[Wed Feb 25 02:27:17.597821 2026] [:error] [pid 18850:tid 18867] [client 20.104.200.115:16313] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image2.php"] [unique_id "aZ3theDBmHucoAJRnqkV_QAAAA8"]
[Wed Feb 25 02:27:19.391862 2026] [:error] [pid 26872:tid 26892] [client 20.104.200.115:16380] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/image2.php"] [unique_id "aZ3th3xLbzvRGuzwKjkFJwAAAFI"]
[Wed Feb 25 02:27:20.794735 2026] [:error] [pid 18441:tid 18733] [client 20.104.200.115:16368] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aZ3tiBYF1wpOnXIaHlOgsgAAANg"]
[Wed Feb 25 02:27:21.343598 2026] [:error] [pid 18441:tid 18716] [client 20.104.200.115:16383] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aZ3tiRYF1wpOnXIaHlOgswAAAMg"]
[Wed Feb 25 02:27:21.997983 2026] [:error] [pid 18458:tid 18809] [client 20.104.200.115:16372] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aZ3tiQuir-tBe4tUismZwAAAAo4"]
[Wed Feb 25 02:27:22.683056 2026] [:error] [pid 26872:tid 26876] [client 20.104.200.115:16277] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aZ3tinxLbzvRGuzwKjkFSwAAAEI"]
[Wed Feb 25 02:27:23.342912 2026] [:error] [pid 26872:tid 26884] [client 20.104.200.115:16203] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/mandals.php"] [unique_id "aZ3ti3xLbzvRGuzwKjkFVwAAAEo"]
[Wed Feb 25 02:27:23.880087 2026] [:error] [pid 18447:tid 18769] [client 20.104.200.115:16278] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/mandals.php"] [unique_id "aZ3ti8-TpHVc8yBj5ea8CQAAAgY"]
[Wed Feb 25 02:27:24.572556 2026] [:error] [pid 18447:tid 18766] [client 20.104.200.115:16261] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/mandals.php"] [unique_id "aZ3tjM-TpHVc8yBj5ea8CgAAAgM"]
[Wed Feb 25 02:27:25.474243 2026] [:error] [pid 26872:tid 26897] [client 20.104.200.115:16312] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/mandals.php"] [unique_id "aZ3tjXxLbzvRGuzwKjkFagAAAFc"]
[Wed Feb 25 02:27:26.423757 2026] [:error] [pid 18850:tid 18863] [client 20.104.200.115:16267] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aZ3tjuDBmHucoAJRnqkWIQAAAAs"]
[Wed Feb 25 02:27:27.078669 2026] [:error] [pid 26872:tid 26876] [client 20.104.200.115:16370] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aZ3tj3xLbzvRGuzwKjkFbgAAAEI"]
[Wed Feb 25 02:27:28.099887 2026] [:error] [pid 18441:tid 18715] [client 20.104.200.115:16256] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aZ3tkBYF1wpOnXIaHlOguAAAAMc"]
[Wed Feb 25 02:27:28.737857 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16376] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aZ3tkHxLbzvRGuzwKjkFgQAAAFg"]
[Wed Feb 25 02:27:29.533487 2026] [:error] [pid 18447:tid 18773] [client 20.104.200.115:16257] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aZ3tkc-TpHVc8yBj5ea8DgAAAgo"]
[Wed Feb 25 02:27:30.180989 2026] [:error] [pid 26872:tid 26892] [client 20.104.200.115:16200] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/d.be.brow.php"] [unique_id "aZ3tknxLbzvRGuzwKjkFkwAAAFI"]
[Wed Feb 25 02:27:30.812071 2026] [:error] [pid 26872:tid 26894] [client 20.104.200.115:16291] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/d.be.brow.php"] [unique_id "aZ3tknxLbzvRGuzwKjkFmgAAAFQ"]
[Wed Feb 25 02:27:31.588344 2026] [:error] [pid 18458:tid 18818] [client 20.104.200.115:16265] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/d.be.brow.php"] [unique_id "aZ3tkwuir-tBe4tUismZ3gAAApc"]
[Wed Feb 25 02:27:32.593063 2026] [:error] [pid 26872:tid 26881] [client 20.104.200.115:16320] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/d.be.brow.php"] [unique_id "aZ3tlHxLbzvRGuzwKjkFvgAAAEc"]
[Wed Feb 25 02:27:33.697913 2026] [:error] [pid 18441:tid 18725] [client 20.104.200.115:16293] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/submitticket.php"] [unique_id "aZ3tlRYF1wpOnXIaHlOgvAAAANA"]
[Wed Feb 25 02:27:34.832067 2026] [:error] [pid 26872:tid 26886] [client 20.104.200.115:16331] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/submitticket.php"] [unique_id "aZ3tlnxLbzvRGuzwKjkFzwAAAEw"]
[Wed Feb 25 02:27:35.646648 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16355] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/submitticket.php"] [unique_id "aZ3tl3xLbzvRGuzwKjkF1AAAAEg"]
[Wed Feb 25 02:27:36.708301 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:16317] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/submitticket.php"] [unique_id "aZ3tmHxLbzvRGuzwKjkF4gAAAEM"]
[Wed Feb 25 02:27:38.306428 2026] [:error] [pid 18441:tid 18716] [client 20.104.200.115:16290] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/add_evento.php"] [unique_id "aZ3tmhYF1wpOnXIaHlOgwwAAAMg"]
[Wed Feb 25 02:27:39.239084 2026] [:error] [pid 18447:tid 18781] [client 20.104.200.115:16229] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/add_evento.php"] [unique_id "aZ3tm8-TpHVc8yBj5ea8IwAAAhI"]
[Wed Feb 25 02:27:39.683822 2026] [:error] [pid 18850:tid 18860] [client 20.104.200.115:16333] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/add_evento.php"] [unique_id "aZ3tm-DBmHucoAJRnqkWPQAAAAg"]
[Wed Feb 25 02:27:40.591704 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:16345] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/add_evento.php"] [unique_id "aZ3tnHxLbzvRGuzwKjkGBAAAAEM"]
[Wed Feb 25 02:27:41.657698 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16338] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aZ3tnXxLbzvRGuzwKjkGBwAAAFA"]
[Wed Feb 25 02:27:42.355248 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16281] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aZ3tnnxLbzvRGuzwKjkGCwAAAEU"]
[Wed Feb 25 02:27:43.259160 2026] [:error] [pid 18458:tid 18802] [client 20.104.200.115:16285] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aZ3tnwuir-tBe4tUismZ6AAAAog"]
[Wed Feb 25 02:27:43.848433 2026] [:error] [pid 18458:tid 18803] [client 20.104.200.115:16286] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aZ3tnwuir-tBe4tUismZ6gAAAok"]
[Wed Feb 25 02:27:44.543937 2026] [:error] [pid 26872:tid 26884] [client 20.104.200.115:16341] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/goods.php"] [unique_id "aZ3toHxLbzvRGuzwKjkGJgAAAEo"]
[Wed Feb 25 02:27:46.875267 2026] [:error] [pid 26872:tid 26883] [client 20.104.200.115:16308] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-settings2.php"] [unique_id "aZ3tonxLbzvRGuzwKjkGOQAAAEk"]
[Wed Feb 25 02:27:47.973354 2026] [:error] [pid 18850:tid 18876] [client 20.104.200.115:16357] [client 20.104.200.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.200.115, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aZ3to-DBmHucoAJRnqkWWgAAABg"]
[Wed Feb 25 02:27:48.769125 2026] [:error] [pid 18850:tid 18862] [client 20.104.200.115:16357] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aZ3tpODBmHucoAJRnqkWXQAAAAo"]
[Wed Feb 25 02:27:49.750919 2026] [:error] [pid 18458:tid 18794] [client 20.104.200.115:16208] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aZ3tpQuir-tBe4tUismaEwAAAoE"]
[Wed Feb 25 02:27:50.301204 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16310] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aZ3tpuDBmHucoAJRnqkWYAAAABI"]
[Wed Feb 25 02:27:51.132899 2026] [:error] [pid 18850:tid 18854] [client 20.104.200.115:16288] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aZ3tp-DBmHucoAJRnqkWYQAAAAI"]
[Wed Feb 25 02:27:51.945664 2026] [:error] [pid 18447:tid 18770] [client 20.104.200.115:16327] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ3tp8-TpHVc8yBj5ea8LQAAAgc"]
[Wed Feb 25 02:27:52.749133 2026] [:error] [pid 18447:tid 18781] [client 20.104.200.115:16274] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ3tqM-TpHVc8yBj5ea8MQAAAhI"]
[Wed Feb 25 02:27:54.006406 2026] [:error] [pid 26872:tid 26875] [client 20.104.200.115:16335] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ3tqnxLbzvRGuzwKjkGVgAAAEE"]
[Wed Feb 25 02:27:54.993811 2026] [:error] [pid 26872:tid 26893] [client 20.104.200.115:16328] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ3tqnxLbzvRGuzwKjkGXAAAAFM"]
[Wed Feb 25 02:27:55.673376 2026] [:error] [pid 18447:tid 18780] [client 20.104.200.115:16218] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aZ3tq8-TpHVc8yBj5ea8MwAAAhE"]
[Wed Feb 25 02:27:56.323246 2026] [:error] [pid 18458:tid 18807] [client 20.104.200.115:16197] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aZ3trAuir-tBe4tUismaKAAAAo0"]
[Wed Feb 25 02:27:57.245525 2026] [:error] [pid 18850:tid 18856] [client 20.104.200.115:16377] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aZ3treDBmHucoAJRnqkWegAAAAQ"]
[Wed Feb 25 02:27:57.985503 2026] [:error] [pid 18850:tid 18855] [client 20.104.200.115:16298] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aZ3treDBmHucoAJRnqkWfwAAAAM"]
[Wed Feb 25 02:27:58.921332 2026] [:error] [pid 18850:tid 18874] [client 20.104.200.115:16381] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/error.php"] [unique_id "aZ3truDBmHucoAJRnqkWiQAAABY"]
[Wed Feb 25 02:27:59.925530 2026] [:error] [pid 18458:tid 18816] [client 20.104.200.115:16365] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/error.php"] [unique_id "aZ3trwuir-tBe4tUismaKwAAApU"]
[Wed Feb 25 02:28:00.872976 2026] [:error] [pid 18441:tid 18718] [client 20.104.200.115:16346] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/error.php"] [unique_id "aZ3tsBYF1wpOnXIaHlOgzwAAAMo"]
[Wed Feb 25 02:28:01.930500 2026] [:error] [pid 26872:tid 26875] [client 20.104.200.115:16307] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/error.php"] [unique_id "aZ3tsXxLbzvRGuzwKjkGdAAAAEE"]
[Wed Feb 25 02:28:02.647257 2026] [:error] [pid 18447:tid 18765] [client 20.104.200.115:16202] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ3tss-TpHVc8yBj5ea8SgAAAgI"]
[Wed Feb 25 02:28:03.219049 2026] [:error] [pid 26872:tid 26886] [client 20.104.200.115:16321] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ3ts3xLbzvRGuzwKjkGfgAAAEw"]
[Wed Feb 25 02:28:04.019057 2026] [:error] [pid 26872:tid 26895] [client 20.104.200.115:16207] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ3ttHxLbzvRGuzwKjkGiQAAAFU"]
[Wed Feb 25 02:28:04.918455 2026] [:error] [pid 18441:tid 18727] [client 20.104.200.115:16213] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ3ttBYF1wpOnXIaHlOg0gAAANI"]
[Wed Feb 25 02:28:05.683464 2026] [:error] [pid 18447:tid 18784] [client 20.104.200.115:16302] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yereongu.php"] [unique_id "aZ3ttc-TpHVc8yBj5ea8TgAAAhU"]
[Wed Feb 25 02:28:06.297764 2026] [:error] [pid 18850:tid 18865] [client 20.104.200.115:16155] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yereongu.php"] [unique_id "aZ3ttuDBmHucoAJRnqkWpQAAAA0"]
[Wed Feb 25 02:28:07.084144 2026] [:error] [pid 18850:tid 18874] [client 20.104.200.115:16273] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yereongu.php"] [unique_id "aZ3tt-DBmHucoAJRnqkWqAAAABY"]
[Wed Feb 25 02:28:07.765023 2026] [:error] [pid 18458:tid 18801] [client 20.104.200.115:16329] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yereongu.php"] [unique_id "aZ3ttwuir-tBe4tUismaMAAAAoc"]
[Wed Feb 25 02:28:08.249199 2026] [:error] [pid 18850:tid 18853] [client 20.104.200.115:16239] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aZ3tuODBmHucoAJRnqkWqwAAAAE"]
[Wed Feb 25 02:28:09.048125 2026] [:error] [pid 18458:tid 18805] [client 20.104.200.115:16276] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aZ3tuQuir-tBe4tUismaMgAAAos"]
[Wed Feb 25 02:28:09.922430 2026] [:error] [pid 18458:tid 18809] [client 20.104.200.115:16240] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aZ3tuQuir-tBe4tUismaMwAAAo4"]
[Wed Feb 25 02:28:10.684876 2026] [:error] [pid 18447:tid 18783] [client 20.104.200.115:16297] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aZ3tus-TpHVc8yBj5ea8UAAAAhQ"]
[Wed Feb 25 02:28:11.301377 2026] [:error] [pid 18850:tid 18862] [client 20.104.200.115:16295] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/chris.php"] [unique_id "aZ3tu-DBmHucoAJRnqkWtgAAAAo"]
[Wed Feb 25 02:28:11.818674 2026] [:error] [pid 18441:tid 18711] [client 20.104.200.115:16206] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/chris.php"] [unique_id "aZ3tuxYF1wpOnXIaHlOg1QAAAMM"]
[Wed Feb 25 02:28:12.434787 2026] [:error] [pid 18447:tid 18781] [client 20.104.200.115:16349] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/chris.php"] [unique_id "aZ3tvM-TpHVc8yBj5ea8UwAAAhI"]
[Wed Feb 25 02:28:13.126463 2026] [:error] [pid 26872:tid 26891] [client 20.104.200.115:16316] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/chris.php"] [unique_id "aZ3tvXxLbzvRGuzwKjkG9gAAAFE"]
[Wed Feb 25 02:28:13.879711 2026] [:error] [pid 18458:tid 18813] [client 20.104.200.115:16294] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xx.php"] [unique_id "aZ3tvQuir-tBe4tUismaQAAAApI"]
[Wed Feb 25 02:28:14.491771 2026] [:error] [pid 18458:tid 18794] [client 20.104.200.115:16314] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/sql.php"] [unique_id "aZ3tvguir-tBe4tUismaQwAAAoE"]
[Wed Feb 25 02:28:14.956614 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:16304] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/sql.php"] [unique_id "aZ3tvnxLbzvRGuzwKjkHCgAAAEM"]
[Wed Feb 25 02:28:15.530651 2026] [:error] [pid 26872:tid 26887] [client 20.104.200.115:16192] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/sql.php"] [unique_id "aZ3tv3xLbzvRGuzwKjkHEgAAAE0"]
[Wed Feb 25 02:28:16.448461 2026] [:error] [pid 18850:tid 18863] [client 20.104.200.115:16205] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/wp.php"] [unique_id "aZ3twODBmHucoAJRnqkWwwAAAAs"]
[Wed Feb 25 02:28:17.034996 2026] [:error] [pid 18447:tid 18776] [client 20.104.200.115:16339] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/wp.php"] [unique_id "aZ3twc-TpHVc8yBj5ea8VAAAAg0"]
[Wed Feb 25 02:28:17.528806 2026] [:error] [pid 18447:tid 18786] [client 20.104.200.115:16220] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/wp.php"] [unique_id "aZ3twc-TpHVc8yBj5ea8VQAAAhc"]
[Wed Feb 25 02:28:18.014343 2026] [:error] [pid 18447:tid 18775] [client 20.104.200.115:16157] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uploads/wp.php"] [unique_id "aZ3tws-TpHVc8yBj5ea8VgAAAgw"]
[Wed Feb 25 02:28:18.649291 2026] [:error] [pid 18447:tid 18780] [client 20.104.200.115:16282] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aZ3tws-TpHVc8yBj5ea8WAAAAhE"]
[Wed Feb 25 02:28:19.157006 2026] [:error] [pid 26872:tid 26894] [client 20.104.200.115:16249] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aZ3tw3xLbzvRGuzwKjkHOAAAAFQ"]
[Wed Feb 25 02:28:19.842740 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:16287] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aZ3tw3xLbzvRGuzwKjkHQQAAAEY"]
[Wed Feb 25 02:28:20.296328 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16279] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aZ3txHxLbzvRGuzwKjkHRgAAAEA"]
[Wed Feb 25 02:28:20.871142 2026] [:error] [pid 18458:tid 18795] [client 20.104.200.115:16224] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/ws62.php"] [unique_id "aZ3txAuir-tBe4tUismaWQAAAoI"]
[Wed Feb 25 02:28:21.461510 2026] [:error] [pid 18850:tid 18852] [client 20.104.200.115:16215] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aZ3txeDBmHucoAJRnqkWxwAAAAA"]
[Wed Feb 25 02:28:22.060108 2026] [:error] [pid 26872:tid 26876] [client 20.104.200.115:16131] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aZ3txnxLbzvRGuzwKjkHXQAAAEI"]
[Wed Feb 25 02:28:23.099284 2026] [:error] [pid 18458:tid 18799] [client 20.104.200.115:16247] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aZ3txwuir-tBe4tUismaXgAAAoU"]
[Wed Feb 25 02:28:23.652811 2026] [:error] [pid 18458:tid 18817] [client 20.104.200.115:16264] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/feeds.php"] [unique_id "aZ3txwuir-tBe4tUismaYQAAApY"]
[Wed Feb 25 02:28:24.232781 2026] [:error] [pid 26872:tid 26885] [client 20.104.200.115:16289] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aZ3tyHxLbzvRGuzwKjkHdgAAAEs"]
[Wed Feb 25 02:28:24.819882 2026] [:error] [pid 26872:tid 26883] [client 20.104.200.115:16217] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aZ3tyHxLbzvRGuzwKjkHfQAAAEk"]
[Wed Feb 25 02:28:25.501563 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16212] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aZ3tyXxLbzvRGuzwKjkHhgAAAEU"]
[Wed Feb 25 02:28:26.055729 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16214] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aZ3tynxLbzvRGuzwKjkHjQAAAFA"]
[Wed Feb 25 02:28:26.700323 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16299] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/signup_pad_classic.php"] [unique_id "aZ3tynxLbzvRGuzwKjkHlgAAAEU"]
[Wed Feb 25 02:28:27.393786 2026] [:error] [pid 18447:tid 18766] [client 20.104.200.115:16232] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aZ3ty8-TpHVc8yBj5ea8XgAAAgM"]
[Wed Feb 25 02:28:28.192040 2026] [:error] [pid 18458:tid 18802] [client 20.104.200.115:16350] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aZ3tzAuir-tBe4tUismaZwAAAog"]
[Wed Feb 25 02:28:29.054430 2026] [:error] [pid 18441:tid 18733] [client 20.104.200.115:16132] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aZ3tzRYF1wpOnXIaHlOg4AAAANg"]
[Wed Feb 25 02:28:29.567758 2026] [:error] [pid 18447:tid 18771] [client 20.104.200.115:16196] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aZ3tzc-TpHVc8yBj5ea8YgAAAgg"]
[Wed Feb 25 02:28:30.304444 2026] [:error] [pid 26872:tid 26876] [client 20.104.200.115:16332] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aZ3tznxLbzvRGuzwKjkHtAAAAEI"]
[Wed Feb 25 02:28:30.959479 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16328] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aZ3tznxLbzvRGuzwKjkHuwAAAFg"]
[Wed Feb 25 02:28:31.556914 2026] [:error] [pid 18458:tid 18801] [client 20.104.200.115:16266] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aZ3tzwuir-tBe4tUismacQAAAoc"]
[Wed Feb 25 02:28:32.306641 2026] [:error] [pid 18850:tid 18865] [client 20.104.200.115:16258] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aZ3t0ODBmHucoAJRnqkW1wAAAA0"]
[Wed Feb 25 02:28:32.978611 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16225] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-https.php"] [unique_id "aZ3t0HxLbzvRGuzwKjkHzAAAAEg"]
[Wed Feb 25 02:28:33.526310 2026] [:error] [pid 18850:tid 18871] [client 20.104.200.115:16237] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/rawwp.php"] [unique_id "aZ3t0eDBmHucoAJRnqkW2gAAABM"]
[Wed Feb 25 02:28:34.129609 2026] [:error] [pid 26872:tid 26876] [client 20.104.200.115:16245] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ3t0nxLbzvRGuzwKjkH2AAAAEI"]
[Wed Feb 25 02:28:34.740573 2026] [:error] [pid 18850:tid 18857] [client 20.104.200.115:16244] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ3t0uDBmHucoAJRnqkW3QAAAAU"]
[Wed Feb 25 02:28:35.389866 2026] [:error] [pid 18458:tid 18816] [client 20.104.200.115:16366] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ3t0wuir-tBe4tUismafAAAApU"]
[Wed Feb 25 02:28:35.961444 2026] [:error] [pid 18458:tid 18819] [client 20.104.200.115:16219] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ3t0wuir-tBe4tUismafwAAApg"]
[Wed Feb 25 02:28:36.441669 2026] [:error] [pid 26872:tid 26875] [client 20.104.200.115:16305] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-mail.php"] [unique_id "aZ3t1HxLbzvRGuzwKjkH7AAAAEE"]
[Wed Feb 25 02:28:36.950100 2026] [:error] [pid 26872:tid 26889] [client 20.104.200.115:16144] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aZ3t1HxLbzvRGuzwKjkH8wAAAE8"]
[Wed Feb 25 02:28:37.447963 2026] [:error] [pid 18850:tid 18855] [client 20.104.200.115:16133] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aZ3t1eDBmHucoAJRnqkW4QAAAAM"]
[Wed Feb 25 02:28:37.960174 2026] [:error] [pid 18458:tid 18806] [client 20.104.200.115:16167] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aZ3t1Quir-tBe4tUismahwAAAow"]
[Wed Feb 25 02:28:38.673473 2026] [:error] [pid 26872:tid 26876] [client 20.104.200.115:16336] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aZ3t1nxLbzvRGuzwKjkIAgAAAEI"]
[Wed Feb 25 02:28:39.268498 2026] [:error] [pid 18458:tid 18807] [client 20.104.200.115:16326] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aZ3t1wuir-tBe4tUismajAAAAo0"]
[Wed Feb 25 02:28:39.874451 2026] [:error] [pid 26872:tid 26894] [client 20.104.200.115:16201] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aZ3t13xLbzvRGuzwKjkIEwAAAFQ"]
[Wed Feb 25 02:28:40.476810 2026] [:error] [pid 26872:tid 26897] [client 20.104.200.115:16280] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aZ3t2HxLbzvRGuzwKjkIGQAAAFc"]
[Wed Feb 25 02:28:41.032040 2026] [:error] [pid 18850:tid 18858] [client 20.104.200.115:16146] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aZ3t2eDBmHucoAJRnqkW5gAAAAY"]
[Wed Feb 25 02:28:41.597980 2026] [:error] [pid 18458:tid 18795] [client 20.104.200.115:16189] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aZ3t2Quir-tBe4tUismakQAAAoI"]
[Wed Feb 25 02:28:42.131335 2026] [:error] [pid 26872:tid 26887] [client 20.104.200.115:16296] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aZ3t2nxLbzvRGuzwKjkILQAAAE0"]
[Wed Feb 25 02:28:42.696935 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16242] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aZ3t2nxLbzvRGuzwKjkINAAAAFg"]
[Wed Feb 25 02:28:43.762668 2026] [:error] [pid 18458:tid 18794] [client 20.104.200.115:16330] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aZ3t2wuir-tBe4tUismalwAAAoE"]
[Wed Feb 25 02:28:44.288836 2026] [:error] [pid 18850:tid 18868] [client 20.104.200.115:16374] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/post_genprdt.php"] [unique_id "aZ3t3ODBmHucoAJRnqkW7AAAABA"]
[Wed Feb 25 02:28:44.847239 2026] [:error] [pid 18441:tid 18722] [client 20.104.200.115:16148] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/post_genprdt.php"] [unique_id "aZ3t3BYF1wpOnXIaHlOg8gAAAM4"]
[Wed Feb 25 02:28:45.664708 2026] [:error] [pid 18447:tid 18787] [client 20.104.200.115:16172] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/post_genprdt.php"] [unique_id "aZ3t3c-TpHVc8yBj5ea8bQAAAhg"]
[Wed Feb 25 02:28:46.108644 2026] [:error] [pid 18441:tid 18712] [client 20.104.200.115:16143] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/post_genprdt.php"] [unique_id "aZ3t3hYF1wpOnXIaHlOg9AAAAMQ"]
[Wed Feb 25 02:28:46.695116 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:16185] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aZ3t3nxLbzvRGuzwKjkIWQAAAEY"]
[Wed Feb 25 02:28:47.229847 2026] [:error] [pid 18458:tid 18801] [client 20.104.200.115:16309] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aZ3t3wuir-tBe4tUismaoQAAAoc"]
[Wed Feb 25 02:28:47.933318 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:16154] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aZ3t33xLbzvRGuzwKjkIagAAAEY"]
[Wed Feb 25 02:28:49.269618 2026] [:error] [pid 18458:tid 18817] [client 20.104.200.115:16319] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Feb 25 02:28:49.478672 2026] [:error] [pid 18458:tid 18806] [client 20.104.200.115:16319] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Wed Feb 25 02:28:49.691948 2026] [:error] [pid 18458:tid 18802] [client 20.104.200.115:16319] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 25 02:28:49.919644 2026] [:error] [pid 18458:tid 18814] [client 20.104.200.115:16319] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 25 02:28:50.338035 2026] [:error] [pid 18458:tid 18807] [client 20.104.200.115:16319] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Feb 25 02:28:50.547364 2026] [:error] [pid 18458:tid 18816] [client 20.104.200.115:16319] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Wed Feb 25 02:28:50.753880 2026] [:error] [pid 18458:tid 18798] [client 20.104.200.115:16319] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aZ3t4guir-tBe4tUismaswAAAoQ"]
[Wed Feb 25 02:28:51.380635 2026] [:error] [pid 26872:tid 26897] [client 20.104.200.115:16193] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aZ3t43xLbzvRGuzwKjkIkAAAAFc"]
[Wed Feb 25 02:28:51.881725 2026] [:error] [pid 26872:tid 26891] [client 20.104.200.115:16236] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aZ3t43xLbzvRGuzwKjkIlwAAAFE"]
[Wed Feb 25 02:28:52.399983 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16129] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "aZ3t5ODBmHucoAJRnqkXAAAAABI"]
[Wed Feb 25 02:28:53.176197 2026] [:error] [pid 26872:tid 26887] [client 20.104.200.115:16135] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aZ3t5XxLbzvRGuzwKjkIogAAAE0"]
[Wed Feb 25 02:28:53.729138 2026] [:error] [pid 26872:tid 26878] [client 20.104.200.115:16268] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aZ3t5XxLbzvRGuzwKjkIpgAAAEQ"]
[Wed Feb 25 02:28:54.399811 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16347] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aZ3t5nxLbzvRGuzwKjkIrQAAAEA"]
[Wed Feb 25 02:28:54.859449 2026] [:error] [pid 26872:tid 26893] [client 20.104.200.115:16234] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aZ3t5nxLbzvRGuzwKjkIswAAAFM"]
[Wed Feb 25 02:28:55.331944 2026] [:error] [pid 18850:tid 18855] [client 20.104.200.115:16176] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ3t5-DBmHucoAJRnqkXBAAAAAM"]
[Wed Feb 25 02:28:55.889924 2026] [:error] [pid 18850:tid 18872] [client 20.104.200.115:16243] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ3t5-DBmHucoAJRnqkXBgAAABQ"]
[Wed Feb 25 02:28:56.579038 2026] [:error] [pid 18850:tid 18875] [client 20.104.200.115:16128] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ3t6ODBmHucoAJRnqkXCAAAABc"]
[Wed Feb 25 02:28:57.121995 2026] [:error] [pid 18447:tid 18780] [client 20.104.200.115:16284] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ3t6c-TpHVc8yBj5ea8dwAAAhE"]
[Wed Feb 25 02:28:57.706427 2026] [:error] [pid 18850:tid 18859] [client 20.104.200.115:16184] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ3t6eDBmHucoAJRnqkXDQAAAAc"]
[Wed Feb 25 02:28:58.179614 2026] [:error] [pid 18850:tid 18854] [client 20.104.200.115:16255] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ3t6uDBmHucoAJRnqkXDgAAAAI"]
[Wed Feb 25 02:28:58.679772 2026] [:error] [pid 18458:tid 18799] [client 20.104.200.115:16138] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ3t6guir-tBe4tUismawAAAAoU"]
[Wed Feb 25 02:28:59.374983 2026] [:error] [pid 18850:tid 18869] [client 20.104.200.115:16315] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ3t6-DBmHucoAJRnqkXFQAAABE"]
[Wed Feb 25 02:29:00.114559 2026] [:error] [pid 18850:tid 18861] [client 20.104.200.115:16142] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ3t7ODBmHucoAJRnqkXFgAAAAk"]
[Wed Feb 25 02:29:00.699163 2026] [:error] [pid 18458:tid 18814] [client 20.104.200.115:16306] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ3t7Auir-tBe4tUismaxQAAApM"]
[Wed Feb 25 02:29:01.311071 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:16160] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ3t7XxLbzvRGuzwKjkI9wAAAEM"]
[Wed Feb 25 02:29:01.987651 2026] [:error] [pid 18458:tid 18809] [client 20.104.200.115:16241] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ3t7Quir-tBe4tUismazgAAAo4"]
[Wed Feb 25 02:29:02.871976 2026] [:error] [pid 26872:tid 26894] [client 20.104.200.115:16340] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aZ3t7nxLbzvRGuzwKjkJAAAAAFQ"]
[Wed Feb 25 02:29:03.465205 2026] [:error] [pid 26872:tid 26881] [client 20.104.200.115:16194] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aZ3t73xLbzvRGuzwKjkJBQAAAEc"]
[Wed Feb 25 02:29:04.160110 2026] [:error] [pid 26872:tid 26884] [client 20.104.200.115:16073] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aZ3t8HxLbzvRGuzwKjkJDQAAAEo"]
[Wed Feb 25 02:29:04.809133 2026] [:error] [pid 18850:tid 18866] [client 20.104.200.115:16226] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aZ3t8ODBmHucoAJRnqkXJwAAAA4"]
[Wed Feb 25 02:29:05.725553 2026] [:error] [pid 26872:tid 26897] [client 20.104.200.115:16324] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ3t8XxLbzvRGuzwKjkJDgAAAFc"]
[Wed Feb 25 02:29:06.319487 2026] [:error] [pid 18458:tid 18795] [client 20.104.200.115:16066] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ3t8guir-tBe4tUisma5AAAAoI"]
[Wed Feb 25 02:29:06.912125 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16137] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ3t8uDBmHucoAJRnqkXLQAAABI"]
[Wed Feb 25 02:29:07.493990 2026] [:error] [pid 18850:tid 18865] [client 20.104.200.115:16211] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ3t8-DBmHucoAJRnqkXMQAAAA0"]
[Wed Feb 25 02:29:07.978655 2026] [:error] [pid 26872:tid 26875] [client 20.104.200.115:16248] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZ3t83xLbzvRGuzwKjkJFAAAAEE"]
[Wed Feb 25 02:29:08.516624 2026] [:error] [pid 18850:tid 18871] [client 20.104.200.115:16161] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZ3t9ODBmHucoAJRnqkXNQAAABM"]
[Wed Feb 25 02:29:09.098243 2026] [:error] [pid 18441:tid 18733] [client 20.104.200.115:16091] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZ3t9RYF1wpOnXIaHlOhAAAAANg"]
[Wed Feb 25 02:29:09.906750 2026] [:error] [pid 18441:tid 18724] [client 20.104.200.115:16230] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZ3t9RYF1wpOnXIaHlOhAgAAAM8"]
[Wed Feb 25 02:29:10.582089 2026] [:error] [pid 18441:tid 18730] [client 20.104.200.115:16361] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aZ3t9hYF1wpOnXIaHlOhAwAAANU"]
[Wed Feb 25 02:29:11.235931 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16364] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aZ3t93xLbzvRGuzwKjkJGwAAAEU"]
[Wed Feb 25 02:29:11.912150 2026] [:error] [pid 26872:tid 26892] [client 20.104.200.115:16195] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aZ3t93xLbzvRGuzwKjkJIgAAAFI"]
[Wed Feb 25 02:29:12.552064 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16166] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gg.php"] [unique_id "aZ3t-ODBmHucoAJRnqkXOwAAABI"]
[Wed Feb 25 02:29:12.995558 2026] [:error] [pid 18850:tid 18853] [client 20.104.200.115:16072] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ3t-ODBmHucoAJRnqkXPgAAAAE"]
[Wed Feb 25 02:29:13.724948 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16165] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ3t-XxLbzvRGuzwKjkJJgAAAEg"]
[Wed Feb 25 02:29:14.644846 2026] [:error] [pid 18441:tid 18727] [client 20.104.200.115:16179] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ3t-hYF1wpOnXIaHlOhBAAAANI"]
[Wed Feb 25 02:29:15.491516 2026] [:error] [pid 18441:tid 18720] [client 20.104.200.115:16159] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ3t-xYF1wpOnXIaHlOhBwAAAMw"]
[Wed Feb 25 02:29:16.207490 2026] [:error] [pid 18441:tid 18719] [client 20.104.200.115:16231] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aZ3t_BYF1wpOnXIaHlOhCQAAAMs"]
[Wed Feb 25 02:29:17.092775 2026] [:error] [pid 26872:tid 26887] [client 20.104.200.115:16354] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aZ3t_XxLbzvRGuzwKjkJLgAAAE0"]
[Wed Feb 25 02:29:17.969173 2026] [:error] [pid 26872:tid 26886] [client 20.104.200.115:16150] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aZ3t_XxLbzvRGuzwKjkJMwAAAEw"]
[Wed Feb 25 02:29:18.739760 2026] [:error] [pid 18850:tid 18855] [client 20.104.200.115:16198] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aZ3t_uDBmHucoAJRnqkXSAAAAAM"]
[Wed Feb 25 02:29:19.350088 2026] [:error] [pid 18850:tid 18853] [client 20.104.200.115:16139] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ3t_-DBmHucoAJRnqkXTAAAAAE"]
[Wed Feb 25 02:29:20.398553 2026] [:error] [pid 18850:tid 18867] [client 20.104.200.115:16292] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ3uAODBmHucoAJRnqkXUAAAAA8"]
[Wed Feb 25 02:29:21.295907 2026] [:error] [pid 26872:tid 26893] [client 20.104.200.115:16186] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ3uAXxLbzvRGuzwKjkJOAAAAFM"]
[Wed Feb 25 02:29:21.800421 2026] [:error] [pid 18850:tid 18852] [client 20.104.200.115:16140] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ3uAeDBmHucoAJRnqkXVAAAAAA"]
[Wed Feb 25 02:29:22.446750 2026] [:error] [pid 18447:tid 18769] [client 20.104.200.115:16149] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aZ3uAs-TpHVc8yBj5ea8igAAAgY"]
[Wed Feb 25 02:29:23.342697 2026] [:error] [pid 18458:tid 18794] [client 20.104.200.115:16096] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aZ3uAwuir-tBe4tUismbAAAAAoE"]
[Wed Feb 25 02:29:23.974302 2026] [:error] [pid 18447:tid 18784] [client 20.104.200.115:16012] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aZ3uA8-TpHVc8yBj5ea8jQAAAhU"]
[Wed Feb 25 02:29:24.504324 2026] [:error] [pid 18458:tid 18798] [client 20.104.200.115:16334] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ha.php"] [unique_id "aZ3uBAuir-tBe4tUismbAwAAAoQ"]
[Wed Feb 25 02:29:25.121578 2026] [:error] [pid 18458:tid 18803] [client 20.104.200.115:16233] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ3uBQuir-tBe4tUismbBwAAAok"]
[Wed Feb 25 02:29:25.583343 2026] [:error] [pid 18458:tid 18796] [client 20.104.200.115:16343] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ3uBQuir-tBe4tUismbCQAAAoM"]
[Wed Feb 25 02:29:26.098828 2026] [:error] [pid 18850:tid 18875] [client 20.104.200.115:16105] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ3uBuDBmHucoAJRnqkXWQAAABc"]
[Wed Feb 25 02:29:26.543241 2026] [:error] [pid 18441:tid 18720] [client 20.104.200.115:16204] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ3uBhYF1wpOnXIaHlOhFAAAAMw"]
[Wed Feb 25 02:29:27.303318 2026] [:error] [pid 26872:tid 26886] [client 20.104.200.115:16151] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ3uB3xLbzvRGuzwKjkJRAAAAEw"]
[Wed Feb 25 02:29:28.340406 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16227] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ3uCHxLbzvRGuzwKjkJTAAAAEA"]
[Wed Feb 25 02:29:29.321308 2026] [:error] [pid 18458:tid 18799] [client 20.104.200.115:16180] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ3uCQuir-tBe4tUismbDAAAAoU"]
[Wed Feb 25 02:29:30.302577 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:16254] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ3uCnxLbzvRGuzwKjkJVwAAAEM"]
[Wed Feb 25 02:29:31.420183 2026] [:error] [pid 18850:tid 18868] [client 20.104.200.115:16103] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ3uC-DBmHucoAJRnqkXXAAAABA"]
[Wed Feb 25 02:29:31.917111 2026] [:error] [pid 18441:tid 18728] [client 20.104.200.115:16173] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ3uCxYF1wpOnXIaHlOhFwAAANM"]
[Wed Feb 25 02:29:32.491121 2026] [:error] [pid 26872:tid 26895] [client 20.104.200.115:16130] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ3uDHxLbzvRGuzwKjkJaAAAAFU"]
[Wed Feb 25 02:29:33.399163 2026] [:error] [pid 18850:tid 18852] [client 20.104.200.115:16252] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ3uDeDBmHucoAJRnqkXYQAAAAA"]
[Wed Feb 25 02:29:34.080166 2026] [:error] [pid 18441:tid 18729] [client 20.104.200.115:16085] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ3uDhYF1wpOnXIaHlOhGQAAANQ"]
[Wed Feb 25 02:29:34.598321 2026] [:error] [pid 18458:tid 18794] [client 20.104.200.115:16009] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ3uDguir-tBe4tUismbEAAAAoE"]
[Wed Feb 25 02:29:35.230905 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16119] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ3uD3xLbzvRGuzwKjkJdgAAAFg"]
[Wed Feb 25 02:29:35.808037 2026] [:error] [pid 18850:tid 18870] [client 20.104.200.115:16209] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ3uD-DBmHucoAJRnqkXaAAAABI"]
[Wed Feb 25 02:29:36.747858 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16110] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ3uEHxLbzvRGuzwKjkJewAAAEA"]
[Wed Feb 25 02:29:37.311974 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16358] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ3uEXxLbzvRGuzwKjkJfQAAAFg"]
[Wed Feb 25 02:29:38.189730 2026] [:error] [pid 18441:tid 18724] [client 20.104.200.115:16182] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ3uEhYF1wpOnXIaHlOhGwAAAM8"]
[Wed Feb 25 02:29:38.793257 2026] [:error] [pid 26872:tid 26892] [client 20.104.200.115:16145] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ3uEnxLbzvRGuzwKjkJhQAAAFI"]
[Wed Feb 25 02:29:39.511925 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16092] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aZ3uE3xLbzvRGuzwKjkJigAAAEg"]
[Wed Feb 25 02:29:40.213934 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16153] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aZ3uFHxLbzvRGuzwKjkJjwAAAEU"]
[Wed Feb 25 02:29:40.731839 2026] [:error] [pid 18447:tid 18769] [client 20.104.200.115:16134] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aZ3uFM-TpHVc8yBj5ea8sQAAAgY"]
[Wed Feb 25 02:29:41.652138 2026] [:error] [pid 18458:tid 18803] [client 20.104.200.115:16325] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/la.php"] [unique_id "aZ3uFQuir-tBe4tUismbEwAAAok"]
[Wed Feb 25 02:29:42.167129 2026] [:error] [pid 18441:tid 18733] [client 20.104.200.115:16169] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aZ3uFhYF1wpOnXIaHlOhHQAAANg"]
[Wed Feb 25 02:29:42.693925 2026] [:error] [pid 18458:tid 18811] [client 20.104.200.115:16223] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aZ3uFguir-tBe4tUismbGgAAApA"]
[Wed Feb 25 02:29:43.263802 2026] [:error] [pid 18458:tid 18807] [client 20.104.200.115:16079] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aZ3uFwuir-tBe4tUismbIQAAAo0"]
[Wed Feb 25 02:29:43.963945 2026] [:error] [pid 18441:tid 18715] [client 20.104.200.115:16162] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aZ3uFxYF1wpOnXIaHlOhHwAAAMc"]
[Wed Feb 25 02:29:44.789891 2026] [:error] [pid 18850:tid 18859] [client 20.104.200.115:16235] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ3uGODBmHucoAJRnqkXdwAAAAc"]
[Wed Feb 25 02:29:45.311614 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16283] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ3uGXxLbzvRGuzwKjkJmwAAAFA"]
[Wed Feb 25 02:29:46.129073 2026] [:error] [pid 26872:tid 26887] [client 20.104.200.115:16141] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ3uGnxLbzvRGuzwKjkJnwAAAE0"]
[Wed Feb 25 02:29:46.664103 2026] [:error] [pid 18458:tid 18815] [client 20.104.200.115:16077] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ3uGguir-tBe4tUismbJgAAApQ"]
[Wed Feb 25 02:29:47.119911 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16045] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ3uG3xLbzvRGuzwKjkJowAAAFg"]
[Wed Feb 25 02:29:47.772570 2026] [:error] [pid 26872:tid 26888] [client 20.104.200.115:16083] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ3uG3xLbzvRGuzwKjkJpgAAAE4"]
[Wed Feb 25 02:29:48.259427 2026] [:error] [pid 18441:tid 18709] [client 20.104.200.115:16222] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ3uHBYF1wpOnXIaHlOhIwAAAME"]
[Wed Feb 25 02:29:49.010944 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16070] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ3uHXxLbzvRGuzwKjkJqQAAAEg"]
[Wed Feb 25 02:29:49.870875 2026] [:error] [pid 18850:tid 18863] [client 20.104.200.115:16238] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aZ3uHeDBmHucoAJRnqkXgQAAAAs"]
[Wed Feb 25 02:29:50.649262 2026] [:error] [pid 18850:tid 18865] [client 20.104.200.115:16064] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Feb 25 02:29:50.860781 2026] [:error] [pid 18850:tid 18864] [client 20.104.200.115:16064] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Feb 25 02:29:51.070489 2026] [:error] [pid 18850:tid 18852] [client 20.104.200.115:16064] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Wed Feb 25 02:29:51.281298 2026] [:error] [pid 18850:tid 18854] [client 20.104.200.115:16064] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Feb 25 02:29:51.614182 2026] [:error] [pid 18850:tid 18862] [client 20.104.200.115:16064] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ3uH-DBmHucoAJRnqkXhwAAAAo"]
[Wed Feb 25 02:29:52.455744 2026] [:error] [pid 18458:tid 18819] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Feb 25 02:29:52.664150 2026] [:error] [pid 18458:tid 18818] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 25 02:29:52.907186 2026] [:error] [pid 18458:tid 18804] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Feb 25 02:29:53.116051 2026] [:error] [pid 18458:tid 18813] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Wed Feb 25 02:29:53.327168 2026] [:error] [pid 18458:tid 18815] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Feb 25 02:29:53.545321 2026] [:error] [pid 18458:tid 18800] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Feb 25 02:29:53.791211 2026] [:error] [pid 18458:tid 18795] [client 20.104.200.115:16126] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Wed Feb 25 02:29:54.004752 2026] [:error] [pid 18458:tid 18817] [client 20.104.200.115:16126] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ3uIguir-tBe4tUismbNgAAApY"]
[Wed Feb 25 02:29:54.668675 2026] [:error] [pid 18850:tid 18867] [client 20.104.200.115:16114] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ3uIuDBmHucoAJRnqkXjQAAAA8"]
[Wed Feb 25 02:29:55.345037 2026] [:error] [pid 26872:tid 26885] [client 20.104.200.115:16035] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ3uI3xLbzvRGuzwKjkJvgAAAEs"]
[Wed Feb 25 02:29:56.068294 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16084] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ3uJHxLbzvRGuzwKjkJwQAAAFA"]
[Wed Feb 25 02:29:56.902100 2026] [:error] [pid 18850:tid 18852] [client 20.104.200.115:16104] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ3uJODBmHucoAJRnqkXkQAAAAA"]
[Wed Feb 25 02:29:57.665217 2026] [:error] [pid 18447:tid 18776] [client 20.104.200.115:16087] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ3uJc-TpHVc8yBj5ea8zwAAAg0"]
[Wed Feb 25 02:29:58.267924 2026] [:error] [pid 18458:tid 18803] [client 20.104.200.115:16049] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ3uJguir-tBe4tUismbOAAAAok"]
[Wed Feb 25 02:29:59.060114 2026] [:error] [pid 26872:tid 26879] [client 20.104.200.115:16216] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ3uJ3xLbzvRGuzwKjkJzQAAAEU"]
[Wed Feb 25 02:29:59.675300 2026] [:error] [pid 18850:tid 18858] [client 20.104.200.115:16311] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ3uJ-DBmHucoAJRnqkXmwAAAAY"]
[Wed Feb 25 02:30:00.311381 2026] [:error] [pid 18447:tid 18768] [client 20.104.200.115:16013] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ3uKM-TpHVc8yBj5ea81QAAAgU"]
[Wed Feb 25 02:30:01.197043 2026] [:error] [pid 18850:tid 18876] [client 20.104.200.115:16024] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ3uKeDBmHucoAJRnqkXoAAAABg"]
[Wed Feb 25 02:30:01.913032 2026] [:error] [pid 18850:tid 18860] [client 20.104.200.115:16250] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ3uKeDBmHucoAJRnqkXpQAAAAg"]
[Wed Feb 25 02:30:02.412463 2026] [:error] [pid 18850:tid 18869] [client 20.104.200.115:16152] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ3uKuDBmHucoAJRnqkXpgAAABE"]
[Wed Feb 25 02:30:02.966243 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16164] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ3uKnxLbzvRGuzwKjkJ1QAAAEA"]
[Wed Feb 25 02:30:04.000867 2026] [:error] [pid 26872:tid 26894] [client 20.104.200.115:16306] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ3uLHxLbzvRGuzwKjkJ2gAAAFQ"]
[Wed Feb 25 02:30:04.829515 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16178] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ3uLHxLbzvRGuzwKjkJ3wAAAEg"]
[Wed Feb 25 02:30:05.567855 2026] [:error] [pid 26872:tid 26888] [client 20.104.200.115:16025] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aZ3uLXxLbzvRGuzwKjkJ4QAAAE4"]
[Wed Feb 25 02:30:06.207997 2026] [:error] [pid 18850:tid 18876] [client 20.104.200.115:16082] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aZ3uLuDBmHucoAJRnqkXrQAAABg"]
[Wed Feb 25 02:30:06.809766 2026] [:error] [pid 18850:tid 18860] [client 20.104.200.115:16076] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aZ3uLuDBmHucoAJRnqkXswAAAAg"]
[Wed Feb 25 02:30:07.474104 2026] [:error] [pid 18850:tid 18875] [client 20.104.200.115:16100] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rh.php"] [unique_id "aZ3uL-DBmHucoAJRnqkXuAAAABc"]
[Wed Feb 25 02:30:08.161569 2026] [:error] [pid 18850:tid 18874] [client 20.104.200.115:16156] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "aZ3uMODBmHucoAJRnqkXugAAABY"]
[Wed Feb 25 02:30:08.800370 2026] [:error] [pid 18447:tid 18784] [client 20.104.200.115:16067] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "aZ3uMM-TpHVc8yBj5ea85AAAAhU"]
[Wed Feb 25 02:30:09.446936 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16029] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "aZ3uMXxLbzvRGuzwKjkJ7gAAAEg"]
[Wed Feb 25 02:30:10.022603 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16303] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "aZ3uMnxLbzvRGuzwKjkJ9QAAAEA"]
[Wed Feb 25 02:30:10.544532 2026] [:error] [pid 18447:tid 18777] [client 20.104.200.115:16008] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ3uMs-TpHVc8yBj5ea86gAAAg4"]
[Wed Feb 25 02:30:11.079754 2026] [:error] [pid 18447:tid 18767] [client 20.104.200.115:16177] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ3uM8-TpHVc8yBj5ea87AAAAgQ"]
[Wed Feb 25 02:30:11.774583 2026] [:error] [pid 18458:tid 18810] [client 20.104.200.115:16094] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ3uMwuir-tBe4tUismbRwAAAo8"]
[Wed Feb 25 02:30:12.460473 2026] [:error] [pid 26872:tid 26884] [client 20.104.200.115:16115] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ3uNHxLbzvRGuzwKjkJ_gAAAEo"]
[Wed Feb 25 02:30:13.063475 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16106] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aZ3uNXxLbzvRGuzwKjkKAQAAAEg"]
[Wed Feb 25 02:30:13.575142 2026] [:error] [pid 18441:tid 18721] [client 20.104.200.115:16175] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aZ3uNRYF1wpOnXIaHlOhMAAAAM0"]
[Wed Feb 25 02:30:14.101476 2026] [:error] [pid 18458:tid 18793] [client 20.104.200.115:16253] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aZ3uNguir-tBe4tUismbSwAAAoA"]
[Wed Feb 25 02:30:14.790708 2026] [:error] [pid 18458:tid 18799] [client 20.104.200.115:16199] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ton.php"] [unique_id "aZ3uNguir-tBe4tUismbTQAAAoU"]
[Wed Feb 25 02:30:16.294829 2026] [:error] [pid 18850:tid 18856] [client 20.104.200.115:16124] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ3uOODBmHucoAJRnqkXyQAAAAQ"]
[Wed Feb 25 02:30:16.936999 2026] [:error] [pid 18458:tid 18807] [client 20.104.200.115:16188] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ3uOAuir-tBe4tUismbTgAAAo0"]
[Wed Feb 25 02:30:17.561752 2026] [:error] [pid 18850:tid 18860] [client 20.104.200.115:16301] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ3uOeDBmHucoAJRnqkXzAAAAAg"]
[Wed Feb 25 02:30:18.079923 2026] [:error] [pid 18850:tid 18861] [client 20.104.200.115:16075] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ3uOuDBmHucoAJRnqkXzwAAAAk"]
[Wed Feb 25 02:30:18.674988 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:16170] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aZ3uOnxLbzvRGuzwKjkKDwAAAEY"]
[Wed Feb 25 02:30:19.155756 2026] [:error] [pid 18447:tid 18767] [client 20.104.200.115:16007] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aZ3uO8-TpHVc8yBj5ea8_AAAAgQ"]
[Wed Feb 25 02:30:19.691752 2026] [:error] [pid 18441:tid 18728] [client 20.104.200.115:15943] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aZ3uOxYF1wpOnXIaHlOhNAAAANM"]
[Wed Feb 25 02:30:20.318185 2026] [:error] [pid 18850:tid 18874] [client 20.104.200.115:16228] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zfile.php"] [unique_id "aZ3uPODBmHucoAJRnqkX1gAAABY"]
[Wed Feb 25 02:30:21.110863 2026] [:error] [pid 18850:tid 18860] [client 20.104.200.115:16125] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aZ3uPeDBmHucoAJRnqkX2wAAAAg"]
[Wed Feb 25 02:30:22.313682 2026] [:error] [pid 26872:tid 26891] [client 20.104.200.115:15952] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aZ3uPnxLbzvRGuzwKjkKEwAAAFE"]
[Wed Feb 25 02:30:22.980848 2026] [:error] [pid 26872:tid 26875] [client 20.104.200.115:16027] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aZ3uPnxLbzvRGuzwKjkKFwAAAEE"]
[Wed Feb 25 02:30:23.732258 2026] [:error] [pid 18850:tid 18861] [client 20.104.200.115:16168] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aZ3uP-DBmHucoAJRnqkX3gAAAAk"]
[Wed Feb 25 02:30:24.303664 2026] [:error] [pid 18458:tid 18817] [client 20.104.200.115:16089] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aZ3uQAuir-tBe4tUismbUgAAApY"]
[Wed Feb 25 02:30:24.846781 2026] [:error] [pid 26872:tid 26889] [client 20.104.200.115:16098] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aZ3uQHxLbzvRGuzwKjkKHAAAAE8"]
[Wed Feb 25 02:30:25.358209 2026] [:error] [pid 26872:tid 26883] [client 20.104.200.115:16108] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aZ3uQXxLbzvRGuzwKjkKIAAAAEk"]
[Wed Feb 25 02:30:26.054640 2026] [:error] [pid 18458:tid 18811] [client 20.104.200.115:16078] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/321.php"] [unique_id "aZ3uQguir-tBe4tUismbUwAAApA"]
[Wed Feb 25 02:30:26.523291 2026] [:error] [pid 18447:tid 18771] [client 20.104.200.115:16015] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aZ3uQs-TpHVc8yBj5ea8_wAAAgg"]
[Wed Feb 25 02:30:27.129846 2026] [:error] [pid 26872:tid 26888] [client 20.104.200.115:15963] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aZ3uQ3xLbzvRGuzwKjkKJwAAAE4"]
[Wed Feb 25 02:30:27.985535 2026] [:error] [pid 18850:tid 18874] [client 20.104.200.115:16033] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aZ3uQ-DBmHucoAJRnqkX4wAAABY"]
[Wed Feb 25 02:30:28.948529 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:16047] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aZ3uRHxLbzvRGuzwKjkKLAAAAEY"]
[Wed Feb 25 02:30:29.478117 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:16147] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aZ3uRXxLbzvRGuzwKjkKLgAAAEM"]
[Wed Feb 25 02:30:30.197616 2026] [:error] [pid 18458:tid 18810] [client 20.104.200.115:15957] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aZ3uRguir-tBe4tUismbVQAAAo8"]
[Wed Feb 25 02:30:30.725843 2026] [:error] [pid 18850:tid 18857] [client 20.104.200.115:16117] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aZ3uRuDBmHucoAJRnqkX6AAAAAU"]
[Wed Feb 25 02:30:31.513358 2026] [:error] [pid 18458:tid 18816] [client 20.104.200.115:16090] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "aZ3uRwuir-tBe4tUismbVwAAApU"]
[Wed Feb 25 02:30:32.168075 2026] [:error] [pid 18850:tid 18859] [client 20.104.200.115:16246] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aZ3uSODBmHucoAJRnqkX6wAAAAc"]
[Wed Feb 25 02:30:32.817219 2026] [:error] [pid 18441:tid 18713] [client 20.104.200.115:16020] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aZ3uSBYF1wpOnXIaHlOhOQAAAMU"]
[Wed Feb 25 02:30:34.518888 2026] [:error] [pid 18850:tid 18858] [client 20.104.200.115:16023] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aZ3uSuDBmHucoAJRnqkX7wAAAAY"]
[Wed Feb 25 02:30:35.084408 2026] [:error] [pid 18441:tid 18721] [client 20.104.200.115:16081] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aZ3uSxYF1wpOnXIaHlOhPQAAAM0"]
[Wed Feb 25 02:30:35.655548 2026] [:error] [pid 18441:tid 18717] [client 20.104.200.115:16102] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aZ3uSxYF1wpOnXIaHlOhPgAAAMk"]
[Wed Feb 25 02:30:36.345551 2026] [:error] [pid 18458:tid 18818] [client 20.104.200.115:16112] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aZ3uTAuir-tBe4tUismbXAAAApc"]
[Wed Feb 25 02:30:37.170539 2026] [:error] [pid 18447:tid 18787] [client 20.104.200.115:16191] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aZ3uTc-TpHVc8yBj5ea9DAAAAhg"]
[Wed Feb 25 02:30:38.301114 2026] [:error] [pid 18458:tid 18795] [client 20.104.200.115:16088] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aZ3uTguir-tBe4tUismbYAAAAoI"]
[Wed Feb 25 02:30:38.918027 2026] [:error] [pid 26872:tid 26889] [client 20.104.200.115:16068] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aZ3uTnxLbzvRGuzwKjkKOwAAAE8"]
[Wed Feb 25 02:30:39.457951 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16048] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aZ3uT3xLbzvRGuzwKjkKPwAAAEA"]
[Wed Feb 25 02:30:40.250113 2026] [:error] [pid 26872:tid 26886] [client 20.104.200.115:16171] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aZ3uUHxLbzvRGuzwKjkKRQAAAEw"]
[Wed Feb 25 02:30:40.795717 2026] [:error] [pid 18447:tid 18773] [client 20.104.200.115:16187] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/al.php"] [unique_id "aZ3uUM-TpHVc8yBj5ea9EAAAAgo"]
[Wed Feb 25 02:30:41.464341 2026] [:error] [pid 26872:tid 26893] [client 20.104.200.115:16080] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aZ3uUXxLbzvRGuzwKjkKSwAAAFM"]
[Wed Feb 25 02:30:42.059463 2026] [:error] [pid 26872:tid 26890] [client 20.104.200.115:16086] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aZ3uUnxLbzvRGuzwKjkKTgAAAFA"]
[Wed Feb 25 02:30:42.671515 2026] [:error] [pid 26872:tid 26887] [client 20.104.200.115:16183] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aZ3uUnxLbzvRGuzwKjkKUgAAAE0"]
[Wed Feb 25 02:30:43.287442 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:15938] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aZ3uU3xLbzvRGuzwKjkKVQAAAEM"]
[Wed Feb 25 02:30:43.786580 2026] [:error] [pid 26872:tid 26891] [client 20.104.200.115:15961] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZ3uU3xLbzvRGuzwKjkKWQAAAFE"]
[Wed Feb 25 02:30:44.302663 2026] [:error] [pid 26872:tid 26897] [client 20.104.200.115:15948] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZ3uVHxLbzvRGuzwKjkKXAAAAFc"]
[Wed Feb 25 02:30:44.794783 2026] [:error] [pid 18850:tid 18853] [client 20.104.200.115:15998] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZ3uVODBmHucoAJRnqkX9QAAAAE"]
[Wed Feb 25 02:30:45.360190 2026] [:error] [pid 18458:tid 18810] [client 20.104.200.115:16030] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aZ3uVQuir-tBe4tUismbZAAAAo8"]
[Wed Feb 25 02:30:45.927897 2026] [:error] [pid 18850:tid 18864] [client 20.104.200.115:16111] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aZ3uVeDBmHucoAJRnqkX_gAAAAw"]
[Wed Feb 25 02:30:46.565260 2026] [:error] [pid 18441:tid 18732] [client 20.104.200.115:16057] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aZ3uVhYF1wpOnXIaHlOhRAAAANc"]
[Wed Feb 25 02:30:47.073027 2026] [:error] [pid 18447:tid 18764] [client 20.104.200.115:16158] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aZ3uV8-TpHVc8yBj5ea9EwAAAgE"]
[Wed Feb 25 02:30:47.847175 2026] [:error] [pid 18441:tid 18725] [client 20.104.200.115:16044] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aZ3uVxYF1wpOnXIaHlOhRgAAANA"]
[Wed Feb 25 02:30:48.618473 2026] [:error] [pid 18441:tid 18730] [client 20.104.200.115:16163] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aZ3uWBYF1wpOnXIaHlOhRwAAANU"]
[Wed Feb 25 02:30:49.093194 2026] [:error] [pid 18441:tid 18713] [client 20.104.200.115:16097] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aZ3uWRYF1wpOnXIaHlOhSQAAAMU"]
[Wed Feb 25 02:30:49.603233 2026] [:error] [pid 18441:tid 18720] [client 20.104.200.115:16174] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aZ3uWRYF1wpOnXIaHlOhSgAAAMw"]
[Wed Feb 25 02:30:50.184004 2026] [:error] [pid 18447:tid 18767] [client 20.104.200.115:16127] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aZ3uWs-TpHVc8yBj5ea9GAAAAgQ"]
[Wed Feb 25 02:30:50.777276 2026] [:error] [pid 18441:tid 18709] [client 20.104.200.115:16017] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aZ3uWhYF1wpOnXIaHlOhTQAAAME"]
[Wed Feb 25 02:30:51.196058 2026] [:error] [pid 26872:tid 26888] [client 20.104.200.115:16065] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aZ3uW3xLbzvRGuzwKjkKcgAAAE4"]
[Wed Feb 25 02:30:51.691927 2026] [:error] [pid 26872:tid 26874] [client 20.104.200.115:16190] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aZ3uW3xLbzvRGuzwKjkKdwAAAEA"]
[Wed Feb 25 02:30:52.279941 2026] [:error] [pid 26872:tid 26898] [client 20.104.200.115:16001] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nc4.php"] [unique_id "aZ3uXHxLbzvRGuzwKjkKegAAAFg"]
[Wed Feb 25 02:30:52.756947 2026] [:error] [pid 26872:tid 26882] [client 20.104.200.115:16005] [client 20.104.200.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aZ3uXHxLbzvRGuzwKjkKgAAAAEg"]
[Wed Feb 25 02:30:53.442291 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Wed Feb 25 02:30:53.652065 2026] [:error] [pid 26872:tid 26880] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Wed Feb 25 02:30:53.862094 2026] [:error] [pid 26872:tid 26875] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Feb 25 02:30:54.287604 2026] [:error] [pid 26872:tid 26895] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Feb 25 02:30:54.498942 2026] [:error] [pid 26872:tid 26883] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Feb 25 02:30:54.921629 2026] [:error] [pid 26872:tid 26897] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Feb 25 02:30:55.130807 2026] [:error] [pid 26872:tid 26886] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Wed Feb 25 02:30:55.342636 2026] [:error] [pid 26872:tid 26877] [client 20.104.200.115:15891] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Wed Feb 25 02:30:55.550954 2026] [:error] [pid 26872:tid 26894] [client 20.104.200.115:15891] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ3uX3xLbzvRGuzwKjkKlwAAAFQ"]
[Wed Feb 25 02:30:56.083966 2026] [:error] [pid 18458:tid 18818] [client 20.104.200.115:16046] [client 20.104.200.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ3uYAuir-tBe4tUismbagAAApc"]
[Wed Feb 25 04:24:59.895358 2026] [:error] [pid 20658:tid 20689] [client 198.160.165.255:16286] [client 198.160.165.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.160.165.255, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZ4JG-u8cohhPfsAIFmdCQAAABY"]
[Wed Feb 25 04:24:59.900695 2026] [:error] [pid 20658:tid 20689] [client 198.160.165.255:16286] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 25 04:44:25.909199 2026] [:error] [pid 60501:tid 60628] [client 43.159.128.247:33728] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ4NqUx4pzY-iMYBCAEOJwAAA44"]
[Wed Feb 25 04:52:07.532950 2026] [:error] [pid 20659:tid 20705] [client 43.155.140.157:40146] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ4Pdz_THK_HtK-Q44LmHwAAAEo"]
[Wed Feb 25 05:29:43.081336 2026] [:error] [pid 5620:tid 5667] [client 106.227.49.113:48807] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ4YR4Y2LQjtieeRkoamPQAAAwU"]
[Wed Feb 25 06:53:42.099357 2026] [:error] [pid 5620:tid 5680] [client 91.65.123.43:46107] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ4r9oY2LQjtieeRkobqcwAAAxE"]
[Wed Feb 25 06:53:43.974072 2026] [:error] [pid 5620:tid 5680] [client 91.65.123.43:52901] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ4r94Y2LQjtieeRkobqfQAAAxE"]
[Wed Feb 25 06:53:45.875859 2026] [:error] [pid 5620:tid 5672] [client 91.65.123.43:39706] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aZ4r-YY2LQjtieeRkobqiAAAAwo"]
[Wed Feb 25 07:26:17.164587 2026] [:error] [pid 60500:tid 60596] [client 54.38.38.130:40792] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "aZ4zmfY9avxuno9KAT8GuwAAA0s"]
[Wed Feb 25 07:26:17.933126 2026] [:error] [pid 5620:tid 5678] [client 54.38.38.130:50934] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aZ4zmYY2LQjtieeRkob6_QAAAxA"]
[Wed Feb 25 07:26:18.343443 2026] [:error] [pid 5620:tid 5678] [client 54.38.38.130:50946] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aZ4zmoY2LQjtieeRkob6_gAAAxA"]
[Wed Feb 25 07:26:18.715582 2026] [:error] [pid 60498:tid 60509] [client 54.38.38.130:50962] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aZ4zmiFCVhQ3ffus0uKAlgAAAsQ"]
[Wed Feb 25 07:26:19.192661 2026] [:error] [pid 5619:tid 5642] [client 54.38.38.130:40796] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aZ4zm5FUzdv-0L_F4fvnKwAAAgc"]
[Wed Feb 25 07:26:19.908629 2026] [:error] [pid 60500:tid 60590] [client 54.38.38.130:40802] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aZ4zm_Y9avxuno9KAT8GvwAAA0g"]
[Wed Feb 25 07:26:20.331364 2026] [:error] [pid 5620:tid 5675] [client 54.38.38.130:40806] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aZ4znIY2LQjtieeRkob7AAAAAw0"]
[Wed Feb 25 07:26:20.681624 2026] [:error] [pid 5620:tid 5685] [client 54.38.38.130:40812] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aZ4znIY2LQjtieeRkob7AwAAAxQ"]
[Wed Feb 25 07:26:21.216201 2026] [:error] [pid 5620:tid 5669] [client 54.38.38.130:40828] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aZ4znYY2LQjtieeRkob7BQAAAwc"]
[Wed Feb 25 07:26:21.711486 2026] [:error] [pid 37838:tid 37852] [client 54.38.38.130:40834] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZ4znVFAuxi3SD8CcrvtmgAAAUs"]
[Wed Feb 25 07:26:22.324752 2026] [:error] [pid 37838:tid 37841] [client 54.38.38.130:40850] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aZ4znlFAuxi3SD8CcrvtnQAAAUA"]
[Wed Feb 25 07:26:22.632927 2026] [:error] [pid 60500:tid 60596] [client 54.38.38.130:40854] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aZ4znvY9avxuno9KAT8GwwAAA0s"]
[Wed Feb 25 07:26:23.128568 2026] [:error] [pid 5619:tid 5654] [client 54.38.38.130:40860] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aZ4zn5FUzdv-0L_F4fvnMQAAAhM"]
[Wed Feb 25 07:26:23.643821 2026] [:error] [pid 37839:tid 37884] [client 54.38.38.130:40868] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aZ4zn45MCGvqFvBEyl94SAAAAZA"]
[Wed Feb 25 07:26:24.527564 2026] [:error] [pid 5619:tid 5659] [client 54.38.38.130:40882] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZ4zoJFUzdv-0L_F4fvnMwAAAhg"]
[Wed Feb 25 07:26:24.669976 2026] [:error] [pid 5556:tid 5587] [client 54.38.38.130:40896] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZ4zoKOrYeaTyh7lGRVAxwAAAcA"]
[Wed Feb 25 07:26:25.162595 2026] [:error] [pid 5556:tid 5592] [client 54.38.38.130:40900] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aZ4zoaOrYeaTyh7lGRVAygAAAcU"]
[Wed Feb 25 07:26:25.645764 2026] [:error] [pid 5619:tid 5635] [client 54.38.38.130:41182] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aZ4zoZFUzdv-0L_F4fvnNQAAAgA"]
[Wed Feb 25 07:26:26.623902 2026] [:error] [pid 5556:tid 5598] [client 54.38.38.130:41192] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aZ4zoqOrYeaTyh7lGRVAzwAAAcs"]
[Wed Feb 25 07:26:26.707979 2026] [:error] [pid 5619:tid 5640] [client 54.38.38.130:41202] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aZ4zopFUzdv-0L_F4fvnNwAAAgU"]
[Wed Feb 25 07:26:27.213865 2026] [:error] [pid 5556:tid 5594] [client 54.38.38.130:41218] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZ4zo6OrYeaTyh7lGRVA0gAAAcc"]
[Wed Feb 25 07:26:27.739261 2026] [:error] [pid 5619:tid 5655] [client 54.38.38.130:41232] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aZ4zo5FUzdv-0L_F4fvnOAAAAhQ"]
[Wed Feb 25 07:26:28.603153 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:41238] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aZ4zpD_THK_HtK-Q44L7YAAAAFc"]
[Wed Feb 25 07:26:28.609316 2026] [:error] [pid 5556:tid 5588] [client 54.38.38.130:41252] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aZ4zpKOrYeaTyh7lGRVA2gAAAcE"]
[Wed Feb 25 07:26:29.464035 2026] [:error] [pid 5556:tid 5607] [client 54.38.38.130:41260] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aZ4zpaOrYeaTyh7lGRVA3wAAAdQ"]
[Wed Feb 25 07:26:29.948431 2026] [:error] [pid 60498:tid 60514] [client 54.38.38.130:41272] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ4zpSFCVhQ3ffus0uKAnQAAAsk"]
[Wed Feb 25 07:26:30.626204 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:41278] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aZ4zpj_THK_HtK-Q44L7ZAAAAFc"]
[Wed Feb 25 07:26:30.686791 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:41282] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aZ4zpqOrYeaTyh7lGRVA5gAAAdg"]
[Wed Feb 25 07:26:31.465318 2026] [:error] [pid 60498:tid 60514] [client 54.38.38.130:41292] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aZ4zpyFCVhQ3ffus0uKAoQAAAsk"]
[Wed Feb 25 07:26:32.239909 2026] [:error] [pid 5556:tid 5594] [client 54.38.38.130:41296] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ4zqKOrYeaTyh7lGRVA7QAAAcc"]
[Wed Feb 25 07:26:32.672983 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:41312] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ4zqKOrYeaTyh7lGRVA8AAAAdE"]
[Wed Feb 25 07:26:32.756489 2026] [:error] [pid 5556:tid 5590] [client 54.38.38.130:41326] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ4zqKOrYeaTyh7lGRVA8QAAAcM"]
[Wed Feb 25 07:26:33.635786 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:41328] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aZ4zqaOrYeaTyh7lGRVA8wAAAdg"]
[Wed Feb 25 07:26:34.158889 2026] [:error] [pid 5556:tid 5593] [client 54.38.38.130:41336] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ4zqqOrYeaTyh7lGRVA9QAAAcY"]
[Wed Feb 25 07:26:34.734227 2026] [:error] [pid 5556:tid 5589] [client 54.38.38.130:41338] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ4zqqOrYeaTyh7lGRVA9wAAAcI"]
[Wed Feb 25 07:26:34.943692 2026] [:error] [pid 37839:tid 37873] [client 54.38.38.130:41348] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ4zqo5MCGvqFvBEyl94SgAAAYU"]
[Wed Feb 25 07:26:35.659036 2026] [:error] [pid 60387:tid 60485] [client 54.38.38.130:41566] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ4zq4HL0QH7Sr13X0KvfQAAAo0"]
[Wed Feb 25 07:26:36.192044 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:41570] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ4zrD_THK_HtK-Q44L7bQAAAEk"]
[Wed Feb 25 07:26:36.571712 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:41582] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ4zrD_THK_HtK-Q44L7cAAAAEY"]
[Wed Feb 25 07:26:36.974150 2026] [:error] [pid 60387:tid 60485] [client 54.38.38.130:41594] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ4zrIHL0QH7Sr13X0KvgAAAAo0"]
[Wed Feb 25 07:26:37.628045 2026] [:error] [pid 60498:tid 60526] [client 54.38.38.130:41610] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ4zrSFCVhQ3ffus0uKAqwAAAtU"]
[Wed Feb 25 07:26:38.344731 2026] [:error] [pid 5619:tid 5642] [client 54.38.38.130:41620] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ4zrpFUzdv-0L_F4fvnPwAAAgc"]
[Wed Feb 25 07:26:38.476965 2026] [:error] [pid 60498:tid 60509] [client 54.38.38.130:41628] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ4zriFCVhQ3ffus0uKArgAAAsQ"]
[Wed Feb 25 07:26:39.000146 2026] [:error] [pid 5619:tid 5651] [client 54.38.38.130:41640] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ4zrpFUzdv-0L_F4fvnQQAAAhA"]
[Wed Feb 25 07:26:39.547560 2026] [:error] [pid 20659:tid 20715] [client 54.38.38.130:41648] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ4zrz_THK_HtK-Q44L7eAAAAFQ"]
[Wed Feb 25 07:26:40.421094 2026] [:error] [pid 20659:tid 20696] [client 54.38.38.130:41658] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ4zsD_THK_HtK-Q44L7fwAAAEE"]
[Wed Feb 25 07:26:40.588844 2026] [:error] [pid 37838:tid 37859] [client 54.38.38.130:41670] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ4zsFFAuxi3SD8CcrvtoAAAAVI"]
[Wed Feb 25 07:26:41.036405 2026] [:error] [pid 5556:tid 5596] [client 54.38.38.130:41672] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ4zsaOrYeaTyh7lGRVBAQAAAck"]
[Wed Feb 25 07:26:41.903673 2026] [:error] [pid 5619:tid 5646] [client 54.38.38.130:41676] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ4zsZFUzdv-0L_F4fvnRQAAAgs"]
[Wed Feb 25 07:26:42.346332 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:41678] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ4zsj_THK_HtK-Q44L7jAAAAFM"]
[Wed Feb 25 07:26:42.575620 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:41686] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ4zsj_THK_HtK-Q44L7kAAAAEk"]
[Wed Feb 25 07:26:43.009751 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:41688] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ4zsz_THK_HtK-Q44L7kwAAAEk"]
[Wed Feb 25 07:26:43.970129 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:41692] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ4zsz_THK_HtK-Q44L7mgAAAEA"]
[Wed Feb 25 07:26:44.437402 2026] [:error] [pid 20659:tid 20715] [client 54.38.38.130:41704] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ4ztD_THK_HtK-Q44L7nQAAAFQ"]
[Wed Feb 25 07:26:44.519041 2026] [:error] [pid 20659:tid 20717] [client 54.38.38.130:41714] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ4ztD_THK_HtK-Q44L7ngAAAFY"]
[Wed Feb 25 07:26:45.380672 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:54892] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ4ztT_THK_HtK-Q44L7owAAAFM"]
[Wed Feb 25 07:26:45.882653 2026] [:error] [pid 20659:tid 20700] [client 54.38.38.130:54902] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ4ztT_THK_HtK-Q44L7qAAAAEU"]
[Wed Feb 25 07:26:46.487907 2026] [:error] [pid 20659:tid 20707] [client 54.38.38.130:54932] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ4ztj_THK_HtK-Q44L7rQAAAEw"]
[Wed Feb 25 07:26:46.501059 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:54918] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ4ztj_THK_HtK-Q44L7rgAAAEY"]
[Wed Feb 25 07:26:47.541804 2026] [:error] [pid 60290:tid 60296] [client 54.38.38.130:54942] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ4ztzPwSUztcPyiofqNnAAAAQQ"]
[Wed Feb 25 07:26:48.229244 2026] [:error] [pid 60498:tid 60521] [client 54.38.38.130:54950] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ4zuCFCVhQ3ffus0uKAswAAAtA"]
[Wed Feb 25 07:26:48.493839 2026] [:error] [pid 5619:tid 5645] [client 54.38.38.130:54964] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ4zuJFUzdv-0L_F4fvnTQAAAgo"]
[Wed Feb 25 07:26:48.591678 2026] [:error] [pid 20659:tid 20712] [client 54.38.38.130:54968] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ4zuD_THK_HtK-Q44L7sgAAAFE"]
[Wed Feb 25 07:26:49.647644 2026] [:error] [pid 20763:tid 20765] [client 54.38.38.130:54972] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ4zuU0w_zc13OX-xibvuQAAAMA"]
[Wed Feb 25 07:26:50.080458 2026] [:error] [pid 60500:tid 60599] [client 54.38.38.130:54984] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ4zuvY9avxuno9KAT8GzwAAA00"]
[Wed Feb 25 07:26:50.879920 2026] [:error] [pid 20658:tid 20667] [client 54.38.38.130:54992] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ4zuuu8cohhPfsAIFm6GwAAAAA"]
[Wed Feb 25 07:26:50.948119 2026] [:error] [pid 60498:tid 60510] [client 54.38.38.130:54994] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ4zuiFCVhQ3ffus0uKAtQAAAsU"]
[Wed Feb 25 07:26:51.782827 2026] [:error] [pid 5556:tid 5596] [client 54.38.38.130:55006] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ4zu6OrYeaTyh7lGRVBDgAAAck"]
[Wed Feb 25 07:26:52.063133 2026] [:error] [pid 60387:tid 60487] [client 54.38.38.130:55014] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ4zvIHL0QH7Sr13X0KviQAAAo8"]
[Wed Feb 25 07:26:52.736486 2026] [:error] [pid 60498:tid 60512] [client 54.38.38.130:55026] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ4zvCFCVhQ3ffus0uKAuAAAAsc"]
[Wed Feb 25 07:26:52.885242 2026] [:error] [pid 5556:tid 5587] [client 54.38.38.130:55028] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ4zvKOrYeaTyh7lGRVBEAAAAcA"]
[Wed Feb 25 07:26:53.723882 2026] [:error] [pid 5556:tid 5594] [client 54.38.38.130:55030] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ4zvaOrYeaTyh7lGRVBEwAAAcc"]
[Wed Feb 25 07:26:54.203923 2026] [:error] [pid 20763:tid 20780] [client 54.38.38.130:55040] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ4zvk0w_zc13OX-xibvvAAAAM8"]
[Wed Feb 25 07:26:54.897706 2026] [:error] [pid 5556:tid 5588] [client 54.38.38.130:55044] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ4zvqOrYeaTyh7lGRVBFwAAAcE"]
[Wed Feb 25 07:26:54.995102 2026] [:error] [pid 20763:tid 20789] [client 54.38.38.130:55048] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ4zvk0w_zc13OX-xibvvgAAANg"]
[Wed Feb 25 07:26:55.663705 2026] [:error] [pid 5556:tid 5589] [client 54.38.38.130:37406] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ4zv6OrYeaTyh7lGRVBHAAAAcI"]
[Wed Feb 25 07:26:56.378700 2026] [:error] [pid 5556:tid 5603] [client 54.38.38.130:37408] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ4zwKOrYeaTyh7lGRVBHwAAAdA"]
[Wed Feb 25 07:26:56.932887 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:37414] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ4zwD_THK_HtK-Q44L7uAAAAEk"]
[Wed Feb 25 07:26:56.939614 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:37428] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ4zwD_THK_HtK-Q44L7uQAAAEo"]
[Wed Feb 25 07:26:57.897228 2026] [:error] [pid 37809:tid 37828] [client 54.38.38.130:37440] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ4zwSIC419p2bqBCnBnBQAAAJE"]
[Wed Feb 25 07:26:58.872065 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:37444] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ4zwj_THK_HtK-Q44L7vQAAAEA"]
[Wed Feb 25 07:26:59.088282 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:37448] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ4zwz_THK_HtK-Q44L7vgAAAFM"]
[Wed Feb 25 07:26:59.161241 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:37458] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ4zwz_THK_HtK-Q44L7vwAAAFA"]
[Wed Feb 25 07:26:59.899817 2026] [:error] [pid 60500:tid 60596] [client 54.38.38.130:37460] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ4zw_Y9avxuno9KAT8G2gAAA0s"]
[Wed Feb 25 07:27:01.031632 2026] [:error] [pid 5619:tid 5652] [client 54.38.38.130:37476] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ4zxZFUzdv-0L_F4fvnTwAAAhE"]
[Wed Feb 25 07:27:01.160889 2026] [:error] [pid 20659:tid 20716] [client 54.38.38.130:37490] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ4zxT_THK_HtK-Q44L7wgAAAFU"]
[Wed Feb 25 07:27:01.443565 2026] [:error] [pid 20763:tid 20774] [client 54.38.38.130:37500] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ4zxU0w_zc13OX-xibvwQAAAMk"]
[Wed Feb 25 07:27:01.799997 2026] [:error] [pid 60500:tid 60609] [client 54.38.38.130:37514] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ4zxfY9avxuno9KAT8G4AAAA1Y"]
[Wed Feb 25 07:27:02.779441 2026] [:error] [pid 20659:tid 20696] [client 54.38.38.130:37528] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ4zxj_THK_HtK-Q44L7xgAAAEE"]
[Wed Feb 25 07:27:03.141986 2026] [:error] [pid 5556:tid 5592] [client 54.38.38.130:37542] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ4zx6OrYeaTyh7lGRVBJwAAAcU"]
[Wed Feb 25 07:27:03.655980 2026] [:error] [pid 5556:tid 5600] [client 54.38.38.130:37554] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ4zx6OrYeaTyh7lGRVBKgAAAc0"]
[Wed Feb 25 07:27:03.734279 2026] [:error] [pid 20763:tid 20772] [client 54.38.38.130:37564] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ4zx00w_zc13OX-xibvwwAAAMc"]
[Wed Feb 25 07:27:04.919679 2026] [:error] [pid 20763:tid 20769] [client 54.38.38.130:37576] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ4zyE0w_zc13OX-xibvxAAAAMQ"]
[Wed Feb 25 07:27:05.213525 2026] [:error] [pid 20659:tid 20707] [client 54.38.38.130:37580] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ4zyT_THK_HtK-Q44L7yQAAAEw"]
[Wed Feb 25 07:27:05.744004 2026] [:error] [pid 20658:tid 20685] [client 54.38.38.130:47138] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ4zyeu8cohhPfsAIFm6JAAAABI"]
[Wed Feb 25 07:27:05.863835 2026] [:error] [pid 60387:tid 60489] [client 54.38.38.130:47152] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ4zyYHL0QH7Sr13X0KvlgAAApE"]
[Wed Feb 25 07:27:07.035251 2026] [:error] [pid 60498:tid 60520] [client 54.38.38.130:47166] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ4zyyFCVhQ3ffus0uKAxAAAAs8"]
[Wed Feb 25 07:27:07.292182 2026] [:error] [pid 37809:tid 37825] [client 54.38.38.130:47174] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ4zyyIC419p2bqBCnBnEgAAAI4"]
[Wed Feb 25 07:27:07.956646 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:47188] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ4zy6OrYeaTyh7lGRVBMAAAAdg"]
[Wed Feb 25 07:27:08.030281 2026] [:error] [pid 5556:tid 5587] [client 54.38.38.130:47196] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ4zzKOrYeaTyh7lGRVBMQAAAcA"]
[Wed Feb 25 07:27:08.945976 2026] [:error] [pid 5619:tid 5644] [client 54.38.38.130:47208] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ4zzJFUzdv-0L_F4fvnVwAAAgk"]
[Wed Feb 25 07:27:09.504200 2026] [:error] [pid 20659:tid 20710] [client 54.38.38.130:47214] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ4zzT_THK_HtK-Q44L7ygAAAE8"]
[Wed Feb 25 07:27:09.993245 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:47218] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ4zzaOrYeaTyh7lGRVBNgAAAco"]
[Wed Feb 25 07:27:10.408181 2026] [:error] [pid 20659:tid 20706] [client 54.38.38.130:47220] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ4zzj_THK_HtK-Q44L70AAAAEs"]
[Wed Feb 25 07:27:10.962090 2026] [:error] [pid 5556:tid 5607] [client 54.38.38.130:47224] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ4zzqOrYeaTyh7lGRVBPAAAAdQ"]
[Wed Feb 25 07:27:11.547070 2026] [:error] [pid 5619:tid 5653] [client 54.38.38.130:47228] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ4zz5FUzdv-0L_F4fvnWgAAAhI"]
[Wed Feb 25 07:27:11.983647 2026] [:error] [pid 5556:tid 5609] [client 54.38.38.130:47232] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ4zz6OrYeaTyh7lGRVBRQAAAdY"]
[Wed Feb 25 07:27:12.413424 2026] [:error] [pid 5619:tid 5638] [client 54.38.38.130:47234] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ4z0JFUzdv-0L_F4fvnWwAAAgM"]
[Wed Feb 25 07:27:12.913572 2026] [:error] [pid 5619:tid 5650] [client 54.38.38.130:47248] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ4z0JFUzdv-0L_F4fvnXAAAAg8"]
[Wed Feb 25 07:27:13.611719 2026] [:error] [pid 5556:tid 5603] [client 54.38.38.130:47260] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ4z0aOrYeaTyh7lGRVBTwAAAdA"]
[Wed Feb 25 07:27:13.893116 2026] [:error] [pid 5556:tid 5588] [client 54.38.38.130:47266] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ4z0aOrYeaTyh7lGRVBUQAAAcE"]
[Wed Feb 25 07:27:14.534052 2026] [:error] [pid 5556:tid 5600] [client 54.38.38.130:47270] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ4z0qOrYeaTyh7lGRVBVwAAAc0"]
[Wed Feb 25 07:27:14.826467 2026] [:error] [pid 20659:tid 20697] [client 54.38.38.130:47280] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZ4z0j_THK_HtK-Q44L71AAAAEI"]
[Wed Feb 25 07:27:15.726557 2026] [:error] [pid 20659:tid 20699] [client 54.38.38.130:54642] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ4z0z_THK_HtK-Q44L72gAAAEQ"]
[Wed Feb 25 07:27:15.756181 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:54658] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ4z0z_THK_HtK-Q44L72wAAAEk"]
[Wed Feb 25 07:27:16.613985 2026] [:error] [pid 20659:tid 20708] [client 54.38.38.130:54668] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ4z1D_THK_HtK-Q44L73gAAAE0"]
[Wed Feb 25 07:27:21.864013 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:54716] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ4z2T_THK_HtK-Q44L8DwAAAEo"]
[Wed Feb 25 07:27:21.948071 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:54684] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ4z2T_THK_HtK-Q44L8EAAAAFc"]
[Wed Feb 25 07:27:22.969884 2026] [:error] [pid 20659:tid 20708] [client 54.38.38.130:54690] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZ4z2j_THK_HtK-Q44L8EwAAAE0"]
[Wed Feb 25 07:27:23.430073 2026] [:error] [pid 20658:tid 20690] [client 54.38.38.130:54706] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZ4z2-u8cohhPfsAIFm6LwAAABc"]
[Wed Feb 25 07:27:23.930135 2026] [:error] [pid 5556:tid 5598] [client 54.38.38.130:54726] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZ4z26OrYeaTyh7lGRVBZQAAAcs"]
[Wed Feb 25 07:27:24.090132 2026] [:error] [pid 20659:tid 20710] [client 54.38.38.130:54732] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ4z3D_THK_HtK-Q44L8FgAAAE8"]
[Wed Feb 25 07:27:25.082508 2026] [:error] [pid 20659:tid 20715] [client 54.38.38.130:54734] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ4z3T_THK_HtK-Q44L8GAAAAFQ"]
[Wed Feb 25 07:27:25.605180 2026] [:error] [pid 5556:tid 5608] [client 54.38.38.130:33252] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ4z3aOrYeaTyh7lGRVBawAAAdU"]
[Wed Feb 25 07:27:25.873669 2026] [:error] [pid 60498:tid 60519] [client 54.38.38.130:33258] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ4z3SFCVhQ3ffus0uKA3AAAAs4"]
[Wed Feb 25 07:27:26.000950 2026] [:error] [pid 5556:tid 5600] [client 54.38.38.130:33268] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ4z3aOrYeaTyh7lGRVBbgAAAc0"]
[Wed Feb 25 07:27:27.204983 2026] [:error] [pid 20763:tid 20785] [client 54.38.38.130:33272] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZ4z300w_zc13OX-xibv7gAAANQ"]
[Wed Feb 25 07:27:27.564101 2026] [:error] [pid 60500:tid 60598] [client 54.38.38.130:33284] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ4z3_Y9avxuno9KAT8G9gAAA0w"]
[Wed Feb 25 07:27:27.805447 2026] [:error] [pid 5556:tid 5596] [client 54.38.38.130:33300] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ4z36OrYeaTyh7lGRVBcwAAAck"]
[Wed Feb 25 07:27:28.026167 2026] [:error] [pid 5556:tid 5590] [client 54.38.38.130:33316] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZ4z4KOrYeaTyh7lGRVBdAAAAcM"]
[Wed Feb 25 07:27:29.066152 2026] [:error] [pid 20659:tid 20706] [client 54.38.38.130:33320] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ4z4T_THK_HtK-Q44L8IgAAAEs"]
[Wed Feb 25 07:27:29.647283 2026] [:error] [pid 20659:tid 20700] [client 54.38.38.130:33324] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ4z4T_THK_HtK-Q44L8JAAAAEU"]
[Wed Feb 25 07:27:29.769205 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:33330] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ4z4T_THK_HtK-Q44L8JQAAAEA"]
[Wed Feb 25 07:27:30.289612 2026] [:error] [pid 20659:tid 20696] [client 54.38.38.130:33336] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ4z4j_THK_HtK-Q44L8JwAAAEE"]
[Wed Feb 25 07:27:31.491551 2026] [:error] [pid 5556:tid 5600] [client 54.38.38.130:33344] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ4z46OrYeaTyh7lGRVBegAAAc0"]
[Wed Feb 25 07:27:31.782995 2026] [:error] [pid 5556:tid 5602] [client 54.38.38.130:33356] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZ4z46OrYeaTyh7lGRVBfQAAAc8"]
[Wed Feb 25 07:27:31.822535 2026] [:error] [pid 20659:tid 20719] [client 54.38.38.130:33354] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZ4z4z_THK_HtK-Q44L8KgAAAFg"]
[Wed Feb 25 07:27:32.565998 2026] [:error] [pid 20659:tid 20698] [client 54.38.38.130:33372] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ4z5D_THK_HtK-Q44L8LQAAAEM"]
[Wed Feb 25 07:27:33.773752 2026] [:error] [pid 60498:tid 60526] [client 54.38.38.130:33388] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ4z5SFCVhQ3ffus0uKA7AAAAtU"]
[Wed Feb 25 07:27:33.783152 2026] [:error] [pid 37809:tid 37822] [client 54.38.38.130:33392] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ4z5SIC419p2bqBCnBnIwAAAIs"]
[Wed Feb 25 07:27:34.196304 2026] [:error] [pid 60498:tid 60521] [client 54.38.38.130:33408] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ4z5iFCVhQ3ffus0uKA8AAAAtA"]
[Wed Feb 25 07:27:34.484096 2026] [:error] [pid 60387:tid 60490] [client 54.38.38.130:33414] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ4z5oHL0QH7Sr13X0KvnwAAApI"]
[Wed Feb 25 07:27:35.757915 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:55154] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aZ4z5z_THK_HtK-Q44L8OQAAAFA"]
[Wed Feb 25 07:27:36.223676 2026] [:error] [pid 60498:tid 60516] [client 54.38.38.130:55166] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ4z6CFCVhQ3ffus0uKA9AAAAss"]
[Wed Feb 25 07:27:36.379631 2026] [:error] [pid 60500:tid 60584] [client 54.38.38.130:55174] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ4z6PY9avxuno9KAT8G-AAAA0M"]
[Wed Feb 25 07:27:36.404666 2026] [:error] [pid 20763:tid 20783] [client 54.38.38.130:55184] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ4z6E0w_zc13OX-xibv7wAAANI"]
[Wed Feb 25 07:27:37.694201 2026] [:error] [pid 60498:tid 60512] [client 54.38.38.130:55186] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ4z6SFCVhQ3ffus0uKBAQAAAsc"]
[Wed Feb 25 07:27:38.147726 2026] [:error] [pid 5556:tid 5588] [client 54.38.38.130:55188] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ4z6qOrYeaTyh7lGRVBgwAAAcE"]
[Wed Feb 25 07:27:38.344215 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:55204] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ4z6qOrYeaTyh7lGRVBhAAAAco"]
[Wed Feb 25 07:27:38.424435 2026] [:error] [pid 5556:tid 5609] [client 54.38.38.130:55212] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ4z6qOrYeaTyh7lGRVBhgAAAdY"]
[Wed Feb 25 07:27:39.729714 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:55218] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ4z66OrYeaTyh7lGRVBjgAAAdE"]
[Wed Feb 25 07:27:40.135929 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:55232] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ4z7D_THK_HtK-Q44L8TwAAAEA"]
[Wed Feb 25 07:27:40.281629 2026] [:error] [pid 5556:tid 5603] [client 54.38.38.130:55248] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ4z7KOrYeaTyh7lGRVBkQAAAdA"]
[Wed Feb 25 07:27:40.466780 2026] [:error] [pid 5556:tid 5601] [client 54.38.38.130:55252] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ4z7KOrYeaTyh7lGRVBkgAAAc4"]
[Wed Feb 25 07:27:41.705674 2026] [:error] [pid 20659:tid 20699] [client 54.38.38.130:55264] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ4z7T_THK_HtK-Q44L8VAAAAEQ"]
[Wed Feb 25 07:27:42.240444 2026] [:error] [pid 5619:tid 5647] [client 54.38.38.130:55268] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ4z7pFUzdv-0L_F4fvnZwAAAgw"]
[Wed Feb 25 07:27:42.315173 2026] [:error] [pid 20658:tid 20683] [client 54.38.38.130:55274] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ4z7uu8cohhPfsAIFm6MAAAABA"]
[Wed Feb 25 07:27:42.530054 2026] [:error] [pid 60387:tid 60489] [client 54.38.38.130:55282] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ4z7oHL0QH7Sr13X0KvpgAAApE"]
[Wed Feb 25 07:27:43.560866 2026] [:error] [pid 20658:tid 20678] [client 54.38.38.130:55288] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ4z7-u8cohhPfsAIFm6MgAAAAs"]
[Wed Feb 25 07:27:44.274326 2026] [:error] [pid 20659:tid 20716] [client 54.38.38.130:55292] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ4z8D_THK_HtK-Q44L8YwAAAFU"]
[Wed Feb 25 07:27:44.489335 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:55302] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ4z8D_THK_HtK-Q44L8ZgAAAFc"]
[Wed Feb 25 07:27:44.616711 2026] [:error] [pid 20659:tid 20710] [client 54.38.38.130:55306] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ4z8D_THK_HtK-Q44L8aAAAAE8"]
[Wed Feb 25 07:27:45.754746 2026] [:error] [pid 5556:tid 5610] [client 54.38.38.130:59386] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ4z8aOrYeaTyh7lGRVBmAAAAdc"]
[Wed Feb 25 07:27:46.349699 2026] [:error] [pid 5556:tid 5594] [client 54.38.38.130:59400] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ4z8qOrYeaTyh7lGRVBnAAAAcc"]
[Wed Feb 25 07:27:46.401125 2026] [:error] [pid 5556:tid 5602] [client 54.38.38.130:59416] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ4z8qOrYeaTyh7lGRVBnQAAAc8"]
[Wed Feb 25 07:27:46.755147 2026] [:error] [pid 60500:tid 60609] [client 54.38.38.130:59430] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ4z8vY9avxuno9KAT8G-wAAA1Y"]
[Wed Feb 25 07:27:48.386173 2026] [:error] [pid 5619:tid 5653] [client 54.38.38.130:59446] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ4z9JFUzdv-0L_F4fvnbAAAAhI"]
[Wed Feb 25 07:27:48.412123 2026] [:error] [pid 60498:tid 60521] [client 54.38.38.130:59462] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ4z9CFCVhQ3ffus0uKBIAAAAtA"]
[Wed Feb 25 07:27:48.778556 2026] [:error] [pid 60498:tid 60505] [client 54.38.38.130:59470] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ4z9CFCVhQ3ffus0uKBJAAAAsA"]
[Wed Feb 25 07:27:48.810297 2026] [:error] [pid 60498:tid 60510] [client 54.38.38.130:59476] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ4z9CFCVhQ3ffus0uKBJQAAAsU"]
[Wed Feb 25 07:27:50.330305 2026] [:error] [pid 60500:tid 60611] [client 54.38.38.130:59480] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ4z9vY9avxuno9KAT8HAQAAA1g"]
[Wed Feb 25 07:27:50.428596 2026] [:error] [pid 60290:tid 60307] [client 54.38.38.130:59484] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ4z9jPwSUztcPyiofqNpAAAAQ8"]
[Wed Feb 25 07:27:50.765023 2026] [:error] [pid 5556:tid 5590] [client 54.38.38.130:59496] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ4z9qOrYeaTyh7lGRVBogAAAcM"]
[Wed Feb 25 07:27:50.904576 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:59510] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ4z9j_THK_HtK-Q44L8cAAAAFc"]
[Wed Feb 25 07:27:52.540563 2026] [:error] [pid 5619:tid 5638] [client 54.38.38.130:59524] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ4z-JFUzdv-0L_F4fvnbQAAAgM"]
[Wed Feb 25 07:27:52.715743 2026] [:error] [pid 60387:tid 60496] [client 54.38.38.130:59526] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ4z-IHL0QH7Sr13X0KvqwAAApg"]
[Wed Feb 25 07:27:52.750070 2026] [:error] [pid 60387:tid 60472] [client 54.38.38.130:59532] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ4z-IHL0QH7Sr13X0KvrAAAAoA"]
[Wed Feb 25 07:27:52.885163 2026] [:error] [pid 60387:tid 60494] [client 54.38.38.130:59544] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ4z-IHL0QH7Sr13X0KvrQAAApY"]
[Wed Feb 25 07:27:54.742363 2026] [:error] [pid 37809:tid 37820] [client 54.38.38.130:59558] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ4z-iIC419p2bqBCnBnMgAAAIk"]
[Wed Feb 25 07:27:54.823427 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:59566] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ4z-j_THK_HtK-Q44L8dgAAAFA"]
[Wed Feb 25 07:27:54.898177 2026] [:error] [pid 20658:tid 20689] [client 54.38.38.130:59576] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ4z-uu8cohhPfsAIFm6NwAAABY"]
[Wed Feb 25 07:27:55.063522 2026] [:error] [pid 20763:tid 20767] [client 54.38.38.130:59586] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ4z-00w_zc13OX-xibv8wAAAMI"]
[Wed Feb 25 07:27:56.727128 2026] [:error] [pid 20659:tid 20708] [client 54.38.38.130:55992] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ4z_D_THK_HtK-Q44L8fAAAAE0"]
[Wed Feb 25 07:27:56.790026 2026] [:error] [pid 5619:tid 5654] [client 54.38.38.130:56006] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ4z_JFUzdv-0L_F4fvnbwAAAhM"]
[Wed Feb 25 07:27:56.919722 2026] [:error] [pid 5619:tid 5637] [client 54.38.38.130:56014] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ4z_JFUzdv-0L_F4fvncAAAAgI"]
[Wed Feb 25 07:27:57.180617 2026] [:error] [pid 60387:tid 60488] [client 54.38.38.130:56028] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ4z_YHL0QH7Sr13X0KvsQAAApA"]
[Wed Feb 25 07:27:58.580104 2026] [:error] [pid 20658:tid 20667] [client 54.38.38.130:56044] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ4z_uu8cohhPfsAIFm6OgAAAAA"]
[Wed Feb 25 07:27:58.775130 2026] [:error] [pid 5556:tid 5606] [client 54.38.38.130:56054] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ4z_qOrYeaTyh7lGRVBvQAAAdM"]
[Wed Feb 25 07:27:58.902214 2026] [:error] [pid 5556:tid 5595] [client 54.38.38.130:56068] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ4z_qOrYeaTyh7lGRVBvgAAAcg"]
[Wed Feb 25 07:27:59.088786 2026] [:error] [pid 5556:tid 5592] [client 54.38.38.130:56076] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ4z_6OrYeaTyh7lGRVBwQAAAcU"]
[Wed Feb 25 07:28:00.658078 2026] [:error] [pid 20658:tid 20675] [client 54.38.38.130:56084] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ40AOu8cohhPfsAIFm6OwAAAAg"]
[Wed Feb 25 07:28:00.689741 2026] [:error] [pid 20658:tid 20672] [client 54.38.38.130:56094] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ40AOu8cohhPfsAIFm6PAAAAAU"]
[Wed Feb 25 07:28:00.765198 2026] [:error] [pid 20658:tid 20673] [client 54.38.38.130:56108] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ40AOu8cohhPfsAIFm6PgAAAAY"]
[Wed Feb 25 07:28:01.161658 2026] [:error] [pid 60290:tid 60306] [client 54.38.38.130:56120] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ40ATPwSUztcPyiofqNpwAAAQ4"]
[Wed Feb 25 07:28:02.647516 2026] [:error] [pid 5619:tid 5636] [client 54.38.38.130:56136] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ40ApFUzdv-0L_F4fvndAAAAgE"]
[Wed Feb 25 07:28:02.854698 2026] [:error] [pid 20658:tid 20691] [client 54.38.38.130:56146] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ40Auu8cohhPfsAIFm6QgAAABg"]
[Wed Feb 25 07:28:03.077176 2026] [:error] [pid 20658:tid 20684] [client 54.38.38.130:56152] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ40A-u8cohhPfsAIFm6QwAAABE"]
[Wed Feb 25 07:28:03.175662 2026] [:error] [pid 60500:tid 60602] [client 54.38.38.130:56160] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ40A_Y9avxuno9KAT8HBwAAA08"]
[Wed Feb 25 07:28:04.644194 2026] [:error] [pid 20659:tid 20699] [client 54.38.38.130:56170] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ40BD_THK_HtK-Q44L8gQAAAEQ"]
[Wed Feb 25 07:28:05.069096 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:56178] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ40BT_THK_HtK-Q44L8ggAAAEo"]
[Wed Feb 25 07:28:05.097783 2026] [:error] [pid 20659:tid 20706] [client 54.38.38.130:56194] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ40BT_THK_HtK-Q44L8gwAAAEs"]
[Wed Feb 25 07:28:05.097819 2026] [:error] [pid 20659:tid 20717] [client 54.38.38.130:56184] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40BT_THK_HtK-Q44L8hAAAAFY"]
[Wed Feb 25 07:28:06.810472 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:42606] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ40Bj_THK_HtK-Q44L8kwAAAEo"]
[Wed Feb 25 07:28:07.119753 2026] [:error] [pid 20659:tid 20709] [client 54.38.38.130:42614] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ40Bz_THK_HtK-Q44L8lgAAAE4"]
[Wed Feb 25 07:28:07.163529 2026] [:error] [pid 20659:tid 20719] [client 54.38.38.130:42622] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40Bz_THK_HtK-Q44L8lwAAAFg"]
[Wed Feb 25 07:28:07.302518 2026] [:error] [pid 20763:tid 20779] [client 54.38.38.130:42628] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ40B00w_zc13OX-xibv-gAAAM4"]
[Wed Feb 25 07:28:09.025047 2026] [:error] [pid 5556:tid 5589] [client 54.38.38.130:42638] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40CaOrYeaTyh7lGRVBygAAAcI"]
[Wed Feb 25 07:28:09.062821 2026] [:error] [pid 60387:tid 60492] [client 54.38.38.130:42654] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40CYHL0QH7Sr13X0KvvgAAApQ"]
[Wed Feb 25 07:28:09.519510 2026] [:error] [pid 60290:tid 60303] [client 54.38.38.130:42662] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ40CTPwSUztcPyiofqNqwAAAQs"]
[Wed Feb 25 07:28:10.993804 2026] [:error] [pid 60290:tid 60294] [client 54.38.38.130:42678] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40CjPwSUztcPyiofqNrQAAAQI"]
[Wed Feb 25 07:28:11.066309 2026] [:error] [pid 60290:tid 60313] [client 54.38.38.130:42684] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40CzPwSUztcPyiofqNrgAAARU"]
[Wed Feb 25 07:28:11.250379 2026] [:error] [pid 60498:tid 60529] [client 54.38.38.130:42696] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40CyFCVhQ3ffus0uKBcQAAAtg"]
[Wed Feb 25 07:28:11.463975 2026] [:error] [pid 60498:tid 60510] [client 54.38.38.130:42702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ40CyFCVhQ3ffus0uKBdAAAAsU"]
[Wed Feb 25 07:28:12.899519 2026] [:error] [pid 20658:tid 20680] [client 54.38.38.130:42710] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40DOu8cohhPfsAIFm6TwAAAA0"]
[Wed Feb 25 07:28:13.070810 2026] [:error] [pid 60387:tid 60489] [client 54.38.38.130:42726] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ40DYHL0QH7Sr13X0KvxwAAApE"]
[Wed Feb 25 07:28:13.419422 2026] [:error] [pid 60498:tid 60526] [client 54.38.38.130:42732] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40DSFCVhQ3ffus0uKBeQAAAtU"]
[Wed Feb 25 07:28:13.499661 2026] [:error] [pid 20658:tid 20691] [client 54.38.38.130:42744] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40Deu8cohhPfsAIFm6UAAAABg"]
[Wed Feb 25 07:28:14.871496 2026] [:error] [pid 5619:tid 5655] [client 54.38.38.130:42752] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40DpFUzdv-0L_F4fvnewAAAhQ"]
[Wed Feb 25 07:28:15.439667 2026] [:error] [pid 20763:tid 20765] [client 54.38.38.130:57446] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40D00w_zc13OX-xibv_gAAAMA"]
[Wed Feb 25 07:28:15.525560 2026] [:error] [pid 60387:tid 60495] [client 54.38.38.130:57448] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40D4HL0QH7Sr13X0KvyAAAApc"]
[Wed Feb 25 07:28:15.735835 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:57452] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ40D6OrYeaTyh7lGRVB0QAAAco"]
[Wed Feb 25 07:28:17.007426 2026] [:error] [pid 20658:tid 20670] [client 54.38.38.130:57458] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40Eeu8cohhPfsAIFm6VgAAAAM"]
[Wed Feb 25 07:28:17.549842 2026] [:error] [pid 60498:tid 60515] [client 54.38.38.130:57464] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40ESFCVhQ3ffus0uKBfQAAAso"]
[Wed Feb 25 07:28:17.669729 2026] [:error] [pid 60290:tid 60299] [client 54.38.38.130:57468] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ40ETPwSUztcPyiofqNsAAAAQc"]
[Wed Feb 25 07:28:19.039932 2026] [:error] [pid 20659:tid 20710] [client 54.38.38.130:57474] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ40Ez_THK_HtK-Q44L8nAAAAE8"]
[Wed Feb 25 07:28:19.344045 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:57482] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ40Ez_THK_HtK-Q44L8ngAAAEY"]
[Wed Feb 25 07:28:19.590076 2026] [:error] [pid 5556:tid 5609] [client 54.38.38.130:57488] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40E6OrYeaTyh7lGRVB2AAAAdY"]
[Wed Feb 25 07:28:19.783969 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:57492] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ40E6OrYeaTyh7lGRVB2QAAAdE"]
[Wed Feb 25 07:28:20.129264 2026] [:error] [pid 5556:tid 5607] [client 54.38.38.130:57504] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ40FKOrYeaTyh7lGRVB2wAAAdQ"]
[Wed Feb 25 07:28:29.299804 2026] [:error] [pid 20659:tid 20703] [client 54.38.38.130:57528] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ40HT_THK_HtK-Q44L8tgAAAEg"]
[Wed Feb 25 07:28:29.300020 2026] [:error] [pid 60290:tid 60309] [client 54.38.38.130:57538] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ40HTPwSUztcPyiofqNuwAAARE"]
[Wed Feb 25 07:28:30.300152 2026] [:error] [pid 60498:tid 60528] [client 54.38.38.130:57522] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ40HiFCVhQ3ffus0uKBlwAAAtc"]
[Wed Feb 25 07:28:31.219569 2026] [:error] [pid 5556:tid 5588] [client 54.38.38.130:35126] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ40H6OrYeaTyh7lGRVB7gAAAcE"]
[Wed Feb 25 07:28:31.460051 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:35138] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ40Hz_THK_HtK-Q44L8wQAAAFA"]
[Wed Feb 25 07:28:32.800029 2026] [:error] [pid 20659:tid 20719] [client 54.38.38.130:35142] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ40ID_THK_HtK-Q44L8wgAAAFg"]
[Wed Feb 25 07:28:33.172295 2026] [:error] [pid 20659:tid 20703] [client 54.38.38.130:35148] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ40IT_THK_HtK-Q44L8wwAAAEg"]
[Wed Feb 25 07:28:33.592735 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:35160] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ40IaOrYeaTyh7lGRVB8wAAAdE"]
[Wed Feb 25 07:28:35.038421 2026] [:error] [pid 20659:tid 20717] [client 54.38.38.130:35162] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ40Iz_THK_HtK-Q44L8zAAAAFY"]
[Wed Feb 25 07:28:35.400323 2026] [:error] [pid 20659:tid 20706] [client 54.38.38.130:48560] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ40Iz_THK_HtK-Q44L8zwAAAEs"]
[Wed Feb 25 07:28:35.493212 2026] [:error] [pid 5556:tid 5589] [client 54.38.38.130:48572] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ40I6OrYeaTyh7lGRVB9gAAAcI"]
[Wed Feb 25 07:28:37.112210 2026] [:error] [pid 20659:tid 20715] [client 54.38.38.130:48586] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ40JT_THK_HtK-Q44L81QAAAFQ"]
[Wed Feb 25 07:28:37.418792 2026] [:error] [pid 60498:tid 60508] [client 54.38.38.130:48596] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ40JSFCVhQ3ffus0uKBmQAAAsM"]
[Wed Feb 25 07:28:37.459140 2026] [:error] [pid 60290:tid 60296] [client 54.38.38.130:48602] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ40JTPwSUztcPyiofqNvgAAAQQ"]
[Wed Feb 25 07:28:39.241943 2026] [:error] [pid 5619:tid 5647] [client 54.38.38.130:48612] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ40J5FUzdv-0L_F4fvnhgAAAgw"]
[Wed Feb 25 07:28:39.573405 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:48622] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ40Jz_THK_HtK-Q44L82QAAAEY"]
[Wed Feb 25 07:28:39.650930 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:48632] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ40Jz_THK_HtK-Q44L82wAAAEA"]
[Wed Feb 25 07:28:41.292227 2026] [:error] [pid 5556:tid 5606] [client 54.38.38.130:48646] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZ40KaOrYeaTyh7lGRVCAwAAAdM"]
[Wed Feb 25 07:28:41.796817 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:48652] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZ40KaOrYeaTyh7lGRVCBwAAAco"]
[Wed Feb 25 07:28:41.915197 2026] [:error] [pid 60498:tid 60525] [client 54.38.38.130:48656] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZ40KSFCVhQ3ffus0uKBnAAAAtQ"]
[Wed Feb 25 07:28:43.327566 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:48658] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ40Kz_THK_HtK-Q44L86wAAAFA"]
[Wed Feb 25 07:28:43.876857 2026] [:error] [pid 60387:tid 60473] [client 54.38.38.130:48666] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ40K4HL0QH7Sr13X0Kv0gAAAoE"]
[Wed Feb 25 07:28:43.955487 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:48676] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ40Kz_THK_HtK-Q44L87AAAAFM"]
[Wed Feb 25 07:28:45.396073 2026] [:error] [pid 60498:tid 60514] [client 54.38.38.130:52914] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ40LSFCVhQ3ffus0uKBoAAAAsk"]
[Wed Feb 25 07:28:45.822166 2026] [:error] [pid 5556:tid 5598] [client 54.38.38.130:52928] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ40LaOrYeaTyh7lGRVCEQAAAcs"]
[Wed Feb 25 07:28:45.936642 2026] [:error] [pid 20659:tid 20696] [client 54.38.38.130:52938] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ40LT_THK_HtK-Q44L87gAAAEE"]
[Wed Feb 25 07:28:47.530936 2026] [:error] [pid 60498:tid 60518] [client 54.38.38.130:52952] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ40LyFCVhQ3ffus0uKBpAAAAs0"]
[Wed Feb 25 07:28:47.801072 2026] [:error] [pid 20658:tid 20682] [client 54.38.38.130:52958] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ40L-u8cohhPfsAIFm6ZwAAAA8"]
[Wed Feb 25 07:28:48.002801 2026] [:error] [pid 60498:tid 60510] [client 54.38.38.130:52964] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ40MCFCVhQ3ffus0uKBpQAAAsU"]
[Wed Feb 25 07:28:49.373336 2026] [:error] [pid 60387:tid 60472] [client 54.38.38.130:52980] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ40MYHL0QH7Sr13X0Kv2QAAAoA"]
[Wed Feb 25 07:28:49.690590 2026] [:error] [pid 60500:tid 60603] [client 54.38.38.130:52988] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ40MfY9avxuno9KAT8HDQAAA1A"]
[Wed Feb 25 07:28:49.918256 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:53000] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ40MaOrYeaTyh7lGRVCFwAAAdE"]
[Wed Feb 25 07:28:51.448118 2026] [:error] [pid 20659:tid 20717] [client 54.38.38.130:53014] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ40Mz_THK_HtK-Q44L8_gAAAFY"]
[Wed Feb 25 07:28:51.695137 2026] [:error] [pid 20659:tid 20715] [client 54.38.38.130:53016] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ40Mz_THK_HtK-Q44L9AAAAAFQ"]
[Wed Feb 25 07:28:52.229043 2026] [:error] [pid 60498:tid 60508] [client 54.38.38.130:53030] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ40NCFCVhQ3ffus0uKBrAAAAsM"]
[Wed Feb 25 07:28:53.584792 2026] [:error] [pid 20763:tid 20771] [client 54.38.38.130:53036] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aZ40NU0w_zc13OX-xibwEAAAAMY"]
[Wed Feb 25 07:28:53.701955 2026] [:error] [pid 20658:tid 20675] [client 54.38.38.130:53046] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aZ40Neu8cohhPfsAIFm6awAAAAg"]
[Wed Feb 25 07:28:54.080169 2026] [:error] [pid 60500:tid 60610] [client 54.38.38.130:53058] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aZ40NvY9avxuno9KAT8HEwAAA1c"]
[Wed Feb 25 07:28:55.675530 2026] [:error] [pid 60387:tid 60490] [client 54.38.38.130:41576] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ40N4HL0QH7Sr13X0Kv3AAAApI"]
[Wed Feb 25 07:28:55.867156 2026] [:error] [pid 60387:tid 60475] [client 54.38.38.130:41580] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ40N4HL0QH7Sr13X0Kv3QAAAoM"]
[Wed Feb 25 07:28:56.142015 2026] [:error] [pid 20658:tid 20680] [client 54.38.38.130:41592] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ40OOu8cohhPfsAIFm6bwAAAA0"]
[Wed Feb 25 07:28:57.722645 2026] [:error] [pid 60290:tid 60308] [client 54.38.38.130:41594] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ40OTPwSUztcPyiofqNxwAAARA"]
[Wed Feb 25 07:28:57.808459 2026] [:error] [pid 5619:tid 5650] [client 54.38.38.130:41604] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ40OZFUzdv-0L_F4fvniwAAAg8"]
[Wed Feb 25 07:28:58.301676 2026] [:error] [pid 20658:tid 20681] [client 54.38.38.130:41608] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ40Ouu8cohhPfsAIFm6cgAAAA4"]
[Wed Feb 25 07:28:59.767023 2026] [:error] [pid 60387:tid 60478] [client 54.38.38.130:41622] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ40O4HL0QH7Sr13X0Kv4gAAAoY"]
[Wed Feb 25 07:28:59.895071 2026] [:error] [pid 60387:tid 60484] [client 54.38.38.130:41638] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ40O4HL0QH7Sr13X0Kv4wAAAow"]
[Wed Feb 25 07:29:00.386874 2026] [:error] [pid 60387:tid 60495] [client 54.38.38.130:41640] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ40PIHL0QH7Sr13X0Kv5QAAApc"]
[Wed Feb 25 07:29:01.910965 2026] [:error] [pid 5619:tid 5643] [client 54.38.38.130:41648] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ40PZFUzdv-0L_F4fvnkAAAAgg"]
[Wed Feb 25 07:29:02.015185 2026] [:error] [pid 5619:tid 5641] [client 54.38.38.130:41656] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ40PpFUzdv-0L_F4fvnkQAAAgY"]
[Wed Feb 25 07:29:02.171022 2026] [:error] [pid 5619:tid 5658] [client 54.38.38.130:41660] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ40PpFUzdv-0L_F4fvnkgAAAhc"]
[Wed Feb 25 07:29:03.849167 2026] [:error] [pid 37809:tid 37823] [client 54.38.38.130:41666] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aZ40PyIC419p2bqBCnBnTwAAAIw"]
[Wed Feb 25 07:29:04.085011 2026] [:error] [pid 60290:tid 60292] [client 54.38.38.130:41672] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aZ40QDPwSUztcPyiofqNzgAAAQA"]
[Wed Feb 25 07:29:04.265253 2026] [:error] [pid 60387:tid 60474] [client 54.38.38.130:41682] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aZ40QIHL0QH7Sr13X0Kv6wAAAoI"]
[Wed Feb 25 07:29:05.787239 2026] [:error] [pid 60290:tid 60295] [client 54.38.38.130:48572] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aZ40QTPwSUztcPyiofqN0QAAAQM"]
[Wed Feb 25 07:29:06.172850 2026] [:error] [pid 60498:tid 60508] [client 54.38.38.130:48580] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aZ40QiFCVhQ3ffus0uKBvQAAAsM"]
[Wed Feb 25 07:29:06.410099 2026] [:error] [pid 60498:tid 60525] [client 54.38.38.130:48590] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "aZ40QiFCVhQ3ffus0uKBvgAAAtQ"]
[Wed Feb 25 07:29:08.073871 2026] [:error] [pid 20659:tid 20707] [client 54.38.38.130:48600] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ40RD_THK_HtK-Q44L9IQAAAEw"]
[Wed Feb 25 07:29:08.376601 2026] [:error] [pid 20659:tid 20703] [client 54.38.38.130:48610] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ40RD_THK_HtK-Q44L9JAAAAEg"]
[Wed Feb 25 07:29:08.403728 2026] [:error] [pid 20659:tid 20700] [client 54.38.38.130:48614] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ40RD_THK_HtK-Q44L9JQAAAEU"]
[Wed Feb 25 07:29:10.216444 2026] [:error] [pid 60500:tid 60584] [client 54.38.38.130:48628] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aZ40RvY9avxuno9KAT8HFAAAA0M"]
[Wed Feb 25 07:29:10.255595 2026] [:error] [pid 60387:tid 60494] [client 54.38.38.130:48632] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aZ40RoHL0QH7Sr13X0Kv-AAAApY"]
[Wed Feb 25 07:29:10.326860 2026] [:error] [pid 20763:tid 20780] [client 54.38.38.130:48644] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "aZ40Rk0w_zc13OX-xibwFQAAAM8"]
[Wed Feb 25 07:29:12.122363 2026] [:error] [pid 20659:tid 20707] [client 54.38.38.130:48654] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ40SD_THK_HtK-Q44L9KwAAAEw"]
[Wed Feb 25 07:29:12.160425 2026] [:error] [pid 20659:tid 20719] [client 54.38.38.130:48660] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ40SD_THK_HtK-Q44L9LQAAAFg"]
[Wed Feb 25 07:29:12.267244 2026] [:error] [pid 5556:tid 5609] [client 54.38.38.130:48672] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ40SKOrYeaTyh7lGRVCKgAAAdY"]
[Wed Feb 25 07:29:14.142071 2026] [:error] [pid 20659:tid 20706] [client 54.38.38.130:48678] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ40Sj_THK_HtK-Q44L9MwAAAEs"]
[Wed Feb 25 07:29:14.232995 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:48686] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ40Sj_THK_HtK-Q44L9NQAAAFc"]
[Wed Feb 25 07:29:14.985975 2026] [:error] [pid 60498:tid 60521] [client 54.38.38.130:48702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ40SiFCVhQ3ffus0uKBxQAAAtA"]
[Wed Feb 25 07:29:16.091010 2026] [:error] [pid 20763:tid 20777] [client 54.38.38.130:41568] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ40TE0w_zc13OX-xibwGwAAAMw"]
[Wed Feb 25 07:29:16.130836 2026] [:error] [pid 60290:tid 60311] [client 54.38.38.130:41576] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ40TDPwSUztcPyiofqN2AAAARM"]
[Wed Feb 25 07:29:16.875337 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:41586] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ40TD_THK_HtK-Q44L9PgAAAFA"]
[Wed Feb 25 07:29:18.052540 2026] [:error] [pid 60290:tid 60297] [client 54.38.38.130:41588] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ40TjPwSUztcPyiofqN3wAAAQU"]
[Wed Feb 25 07:29:18.153244 2026] [:error] [pid 5556:tid 5588] [client 54.38.38.130:41596] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ40TqOrYeaTyh7lGRVCMwAAAcE"]
[Wed Feb 25 07:29:18.714121 2026] [:error] [pid 5556:tid 5610] [client 54.38.38.130:41598] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ40TqOrYeaTyh7lGRVCNgAAAdc"]
[Wed Feb 25 07:29:20.095287 2026] [:error] [pid 5556:tid 5591] [client 54.38.38.130:41602] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aZ40UKOrYeaTyh7lGRVCQQAAAcQ"]
[Wed Feb 25 07:29:20.403368 2026] [:error] [pid 5556:tid 5599] [client 54.38.38.130:41616] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aZ40UKOrYeaTyh7lGRVCRgAAAcw"]
[Wed Feb 25 07:29:20.759905 2026] [:error] [pid 60290:tid 60303] [client 54.38.38.130:41628] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aZ40UDPwSUztcPyiofqN4gAAAQs"]
[Wed Feb 25 07:29:22.273603 2026] [:error] [pid 60387:tid 60494] [client 54.38.38.130:41634] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ40UoHL0QH7Sr13X0KwCAAAApY"]
[Wed Feb 25 07:29:22.367167 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:41642] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ40Uj_THK_HtK-Q44L9TAAAAFc"]
[Wed Feb 25 07:29:22.779439 2026] [:error] [pid 20659:tid 20712] [client 54.38.38.130:41658] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ40Uj_THK_HtK-Q44L9UAAAAFE"]
[Wed Feb 25 07:29:24.383539 2026] [:error] [pid 5619:tid 5646] [client 54.38.38.130:41670] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ40VJFUzdv-0L_F4fvnlgAAAgs"]
[Wed Feb 25 07:29:24.404620 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:41682] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ40VD_THK_HtK-Q44L9WgAAAEo"]
[Wed Feb 25 07:29:24.724174 2026] [:error] [pid 37809:tid 37821] [client 54.38.38.130:41698] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ40VCIC419p2bqBCnBnUwAAAIo"]
[Wed Feb 25 07:29:26.383312 2026] [:error] [pid 60500:tid 60607] [client 54.38.38.130:51748] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ40VvY9avxuno9KAT8HJAAAA1Q"]
[Wed Feb 25 07:29:26.447181 2026] [:error] [pid 5619:tid 5649] [client 54.38.38.130:51754] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ40VpFUzdv-0L_F4fvnmQAAAg4"]
[Wed Feb 25 07:29:26.642087 2026] [:error] [pid 60290:tid 60308] [client 54.38.38.130:51770] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ40VjPwSUztcPyiofqN5wAAARA"]
[Wed Feb 25 07:29:34.248057 2026] [:error] [pid 5619:tid 5644] [client 54.38.38.130:51786] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZ40XpFUzdv-0L_F4fvnqAAAAgk"]
[Wed Feb 25 07:29:35.624503 2026] [:error] [pid 60498:tid 60524] [client 54.38.38.130:51782] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ40XyFCVhQ3ffus0uKB5gAAAtM"]
[Wed Feb 25 07:29:35.637457 2026] [:error] [pid 37809:tid 37813] [client 54.38.38.130:51778] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ40XyIC419p2bqBCnBnXQAAAII"]
[Wed Feb 25 07:29:36.214544 2026] [:error] [pid 20658:tid 20667] [client 54.38.38.130:42286] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ40YOu8cohhPfsAIFm6ewAAAAA"]
[Wed Feb 25 07:29:37.596566 2026] [:error] [pid 20763:tid 20775] [client 54.38.38.130:42302] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ40YU0w_zc13OX-xibwIgAAAMo"]
[Wed Feb 25 07:29:37.823158 2026] [:error] [pid 60500:tid 60606] [client 54.38.38.130:42314] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ40YfY9avxuno9KAT8HKwAAA1M"]
[Wed Feb 25 07:29:38.235867 2026] [:error] [pid 60500:tid 60611] [client 54.38.38.130:42328] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ40YvY9avxuno9KAT8HLAAAA1g"]
[Wed Feb 25 07:29:39.744906 2026] [:error] [pid 37809:tid 37822] [client 54.38.38.130:42340] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ40YyIC419p2bqBCnBnZQAAAIs"]
[Wed Feb 25 07:29:40.221237 2026] [:error] [pid 5619:tid 5653] [client 54.38.38.130:42348] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ40ZJFUzdv-0L_F4fvnrgAAAhI"]
[Wed Feb 25 07:29:40.263692 2026] [:error] [pid 60290:tid 60312] [client 54.38.38.130:42358] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ40ZDPwSUztcPyiofqN7AAAARQ"]
[Wed Feb 25 07:29:41.783810 2026] [:error] [pid 60498:tid 60509] [client 54.38.38.130:42374] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ40ZSFCVhQ3ffus0uKB7AAAAsQ"]
[Wed Feb 25 07:29:42.270370 2026] [:error] [pid 20659:tid 20717] [client 54.38.38.130:42378] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ40Zj_THK_HtK-Q44L9dwAAAFY"]
[Wed Feb 25 07:29:42.853099 2026] [:error] [pid 20659:tid 20706] [client 54.38.38.130:42382] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ40Zj_THK_HtK-Q44L9fAAAAEs"]
[Wed Feb 25 07:29:43.800053 2026] [:error] [pid 60498:tid 60505] [client 54.38.38.130:42394] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ40ZyFCVhQ3ffus0uKB8QAAAsA"]
[Wed Feb 25 07:29:44.185921 2026] [:error] [pid 60498:tid 60521] [client 54.38.38.130:42398] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ40aCFCVhQ3ffus0uKB8wAAAtA"]
[Wed Feb 25 07:29:44.829157 2026] [:error] [pid 60498:tid 60506] [client 54.38.38.130:42412] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ40aCFCVhQ3ffus0uKB9gAAAsE"]
[Wed Feb 25 07:29:45.654054 2026] [:error] [pid 60498:tid 60524] [client 54.38.38.130:51692] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ40aSFCVhQ3ffus0uKB-QAAAtM"]
[Wed Feb 25 07:29:46.146632 2026] [:error] [pid 60500:tid 60589] [client 54.38.38.130:51708] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ40avY9avxuno9KAT8HLwAAA0c"]
[Wed Feb 25 07:29:46.767840 2026] [:error] [pid 60498:tid 60516] [client 54.38.38.130:51710] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ40aiFCVhQ3ffus0uKB_QAAAss"]
[Wed Feb 25 07:29:47.777130 2026] [:error] [pid 20659:tid 20700] [client 54.38.38.130:51720] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ40az_THK_HtK-Q44L9kQAAAEU"]
[Wed Feb 25 07:29:48.125460 2026] [:error] [pid 60498:tid 60517] [client 54.38.38.130:51726] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ40bCFCVhQ3ffus0uKCAQAAAsw"]
[Wed Feb 25 07:29:48.730074 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:51740] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ40bD_THK_HtK-Q44L9lgAAAFA"]
[Wed Feb 25 07:29:49.684890 2026] [:error] [pid 20659:tid 20702] [client 54.38.38.130:51746] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ40bT_THK_HtK-Q44L9mwAAAEc"]
[Wed Feb 25 07:29:50.046764 2026] [:error] [pid 20659:tid 20698] [client 54.38.38.130:51760] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ40bj_THK_HtK-Q44L9ngAAAEM"]
[Wed Feb 25 07:29:50.780766 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:51772] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ40bj_THK_HtK-Q44L9owAAAFc"]
[Wed Feb 25 07:29:51.520531 2026] [:error] [pid 60387:tid 60474] [client 54.38.38.130:51784] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ40b4HL0QH7Sr13X0KwKgAAAoI"]
[Wed Feb 25 07:29:52.592054 2026] [:error] [pid 20659:tid 20713] [client 54.38.38.130:51792] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ40cD_THK_HtK-Q44L9qAAAAFI"]
[Wed Feb 25 07:29:52.840472 2026] [:error] [pid 20659:tid 20710] [client 54.38.38.130:51796] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ40cD_THK_HtK-Q44L9qQAAAE8"]
[Wed Feb 25 07:29:54.472622 2026] [:error] [pid 20659:tid 20703] [client 54.38.38.130:51800] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ40cj_THK_HtK-Q44L9rQAAAEg"]
[Wed Feb 25 07:29:55.062591 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:51810] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ40cz_THK_HtK-Q44L9sAAAAEo"]
[Wed Feb 25 07:29:55.199896 2026] [:error] [pid 20659:tid 20696] [client 54.38.38.130:51812] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ40cz_THK_HtK-Q44L9sQAAAEE"]
[Wed Feb 25 07:29:56.377434 2026] [:error] [pid 60498:tid 60526] [client 54.38.38.130:52542] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ40dCFCVhQ3ffus0uKCBQAAAtU"]
[Wed Feb 25 07:29:57.000305 2026] [:error] [pid 60498:tid 60528] [client 54.38.38.130:52546] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ40dCFCVhQ3ffus0uKCCgAAAtc"]
[Wed Feb 25 07:29:57.090073 2026] [:error] [pid 60498:tid 60511] [client 54.38.38.130:52560] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ40dSFCVhQ3ffus0uKCCwAAAsY"]
[Wed Feb 25 07:29:58.395291 2026] [:error] [pid 20659:tid 20716] [client 54.38.38.130:52570] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ40dj_THK_HtK-Q44L9tgAAAFU"]
[Wed Feb 25 07:29:58.899630 2026] [:error] [pid 20659:tid 20707] [client 54.38.38.130:52574] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ40dj_THK_HtK-Q44L9uAAAAEw"]
[Wed Feb 25 07:29:59.168747 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:52578] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aZ40dz_THK_HtK-Q44L9ugAAAEY"]
[Wed Feb 25 07:30:00.533334 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:52590] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ40eD_THK_HtK-Q44L9wAAAAFM"]
[Wed Feb 25 07:30:01.017693 2026] [:error] [pid 60500:tid 60590] [client 54.38.38.130:52604] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ40efY9avxuno9KAT8HNQAAA0g"]
[Wed Feb 25 07:30:01.532607 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:52620] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aZ40eT_THK_HtK-Q44L9xQAAAEk"]
[Wed Feb 25 07:30:02.453181 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:52630] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ40ej_THK_HtK-Q44L9xwAAAEY"]
[Wed Feb 25 07:30:03.001543 2026] [:error] [pid 20659:tid 20705] [client 54.38.38.130:52642] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ40ez_THK_HtK-Q44L9zAAAAEo"]
[Wed Feb 25 07:30:04.019148 2026] [:error] [pid 20763:tid 20772] [client 54.38.38.130:52650] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ40fE0w_zc13OX-xibwKwAAAMc"]
[Wed Feb 25 07:30:04.516497 2026] [:error] [pid 20659:tid 20716] [client 54.38.38.130:52664] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ40fD_THK_HtK-Q44L90AAAAFU"]
[Wed Feb 25 07:30:05.068697 2026] [:error] [pid 20763:tid 20770] [client 54.38.38.130:52676] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ40fU0w_zc13OX-xibwLAAAAMU"]
[Wed Feb 25 07:30:06.431993 2026] [:error] [pid 60500:tid 60580] [client 54.38.38.130:59346] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aZ40fvY9avxuno9KAT8HNgAAA0A"]
[Wed Feb 25 07:30:06.580674 2026] [:error] [pid 20658:tid 20676] [client 54.38.38.130:59348] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ40fuu8cohhPfsAIFm6hgAAAAk"]
[Wed Feb 25 07:30:07.169181 2026] [:error] [pid 20659:tid 20698] [client 54.38.38.130:59352] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ40fz_THK_HtK-Q44L91QAAAEM"]
[Wed Feb 25 07:30:08.494519 2026] [:error] [pid 5556:tid 5587] [client 54.38.38.130:59358] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aZ40gKOrYeaTyh7lGRVChQAAAcA"]
[Wed Feb 25 07:30:08.509271 2026] [:error] [pid 5556:tid 5610] [client 54.38.38.130:59372] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ40gKOrYeaTyh7lGRVChgAAAdc"]
[Wed Feb 25 07:30:09.251463 2026] [:error] [pid 60387:tid 60477] [client 54.38.38.130:59388] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ40gYHL0QH7Sr13X0KwPwAAAoU"]
[Wed Feb 25 07:30:10.447125 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:59404] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ40gj_THK_HtK-Q44L93QAAAFc"]
[Wed Feb 25 07:30:10.551313 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:59414] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aZ40gj_THK_HtK-Q44L93gAAAFA"]
[Wed Feb 25 07:30:11.631951 2026] [:error] [pid 5556:tid 5607] [client 54.38.38.130:59424] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ40g6OrYeaTyh7lGRVCiQAAAdQ"]
[Wed Feb 25 07:30:12.345075 2026] [:error] [pid 5556:tid 5600] [client 54.38.38.130:59428] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ40hKOrYeaTyh7lGRVCjQAAAc0"]
[Wed Feb 25 07:30:13.003986 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:59440] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aZ40hT_THK_HtK-Q44L96AAAAFM"]
[Wed Feb 25 07:30:13.919248 2026] [:error] [pid 60498:tid 60516] [client 54.38.38.130:59456] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ40hSFCVhQ3ffus0uKCFgAAAss"]
[Wed Feb 25 07:30:14.700625 2026] [:error] [pid 5556:tid 5606] [client 54.38.38.130:59462] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ40hqOrYeaTyh7lGRVCjwAAAdM"]
[Wed Feb 25 07:30:15.031166 2026] [:error] [pid 60387:tid 60493] [client 54.38.38.130:59478] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ40h4HL0QH7Sr13X0KwSwAAApU"]
[Wed Feb 25 07:30:15.977922 2026] [:error] [pid 60500:tid 60604] [client 54.38.38.130:49648] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ40h_Y9avxuno9KAT8HOwAAA1E"]
[Wed Feb 25 07:30:17.050009 2026] [:error] [pid 20763:tid 20773] [client 54.38.38.130:49664] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ40iU0w_zc13OX-xibwMgAAAMg"]
[Wed Feb 25 07:30:17.069567 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:49668] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ40iaOrYeaTyh7lGRVCmQAAAdg"]
[Wed Feb 25 07:30:18.418710 2026] [:error] [pid 5556:tid 5593] [client 54.38.38.130:49674] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ40iqOrYeaTyh7lGRVCnAAAAcY"]
[Wed Feb 25 07:30:19.078886 2026] [:error] [pid 37809:tid 37821] [client 54.38.38.130:49690] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ40iyIC419p2bqBCnBncAAAAIo"]
[Wed Feb 25 07:30:19.167620 2026] [:error] [pid 60500:tid 60580] [client 54.38.38.130:49692] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZ40i_Y9avxuno9KAT8HQAAAA0A"]
[Wed Feb 25 07:30:20.324363 2026] [:error] [pid 20658:tid 20672] [client 54.38.38.130:49694] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZ40jOu8cohhPfsAIFm6lAAAAAU"]
[Wed Feb 25 07:30:21.160012 2026] [:error] [pid 20658:tid 20680] [client 54.38.38.130:49702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ40jeu8cohhPfsAIFm6lwAAAA0"]
[Wed Feb 25 07:30:21.381831 2026] [:error] [pid 60498:tid 60520] [client 54.38.38.130:49710] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aZ40jSFCVhQ3ffus0uKCJwAAAs8"]
[Wed Feb 25 07:30:22.163686 2026] [:error] [pid 5619:tid 5636] [client 54.38.38.130:49718] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ40jpFUzdv-0L_F4fvn2QAAAgE"]
[Wed Feb 25 07:30:23.133493 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:49726] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ40j6OrYeaTyh7lGRVCpAAAAdg"]
[Wed Feb 25 07:30:23.583301 2026] [:error] [pid 60500:tid 60599] [client 54.38.38.130:49730] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ40j_Y9avxuno9KAT8HRQAAA00"]
[Wed Feb 25 07:30:24.272689 2026] [:error] [pid 5556:tid 5591] [client 54.38.38.130:49740] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ40kKOrYeaTyh7lGRVCqAAAAcQ"]
[Wed Feb 25 07:30:25.141011 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:49752] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ40kaOrYeaTyh7lGRVCqQAAAco"]
[Wed Feb 25 07:30:25.557304 2026] [:error] [pid 20659:tid 20704] [client 54.38.38.130:46986] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ40kT_THK_HtK-Q44L9-wAAAEk"]
[Wed Feb 25 07:30:26.422768 2026] [:error] [pid 60290:tid 60316] [client 54.38.38.130:46996] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ40kjPwSUztcPyiofqN-QAAARg"]
[Wed Feb 25 07:30:27.213452 2026] [:error] [pid 60500:tid 60610] [client 54.38.38.130:47002] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ40k_Y9avxuno9KAT8HSgAAA1c"]
[Wed Feb 25 07:30:27.574030 2026] [:error] [pid 5556:tid 5606] [client 54.38.38.130:47018] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ40k6OrYeaTyh7lGRVCsgAAAdM"]
[Wed Feb 25 07:30:28.281183 2026] [:error] [pid 5556:tid 5587] [client 54.38.38.130:47030] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ40lKOrYeaTyh7lGRVCtwAAAcA"]
[Wed Feb 25 07:30:29.268387 2026] [:error] [pid 60498:tid 60519] [client 54.38.38.130:47034] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ40lSFCVhQ3ffus0uKCLgAAAs4"]
[Wed Feb 25 07:30:29.542320 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:47046] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ40laOrYeaTyh7lGRVCvgAAAdg"]
[Wed Feb 25 07:30:30.441517 2026] [:error] [pid 20659:tid 20699] [client 54.38.38.130:47062] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ40lj_THK_HtK-Q44L-AQAAAEQ"]
[Wed Feb 25 07:30:31.390032 2026] [:error] [pid 20658:tid 20687] [client 54.38.38.130:47070] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ40l-u8cohhPfsAIFm6nwAAABQ"]
[Wed Feb 25 07:30:31.503890 2026] [:error] [pid 20659:tid 20717] [client 54.38.38.130:47084] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ40lz_THK_HtK-Q44L-BgAAAFY"]
[Wed Feb 25 07:30:32.397954 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:47086] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ40mKOrYeaTyh7lGRVCxAAAAco"]
[Wed Feb 25 07:30:39.870151 2026] [:error] [pid 5556:tid 5600] [client 54.38.38.130:47122] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZ40n6OrYeaTyh7lGRVC2AAAAc0"]
[Wed Feb 25 07:30:40.620694 2026] [:error] [pid 20659:tid 20715] [client 54.38.38.130:47098] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZ40oD_THK_HtK-Q44L-FgAAAFQ"]
[Wed Feb 25 07:30:41.720380 2026] [:error] [pid 5556:tid 5595] [client 54.38.38.130:47112] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZ40oaOrYeaTyh7lGRVC2gAAAcg"]
[Wed Feb 25 07:30:42.149238 2026] [:error] [pid 60498:tid 60523] [client 54.38.38.130:38174] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZ40oiFCVhQ3ffus0uKCTAAAAtI"]
[Wed Feb 25 07:30:42.559475 2026] [:error] [pid 5556:tid 5599] [client 54.38.38.130:38186] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZ40oqOrYeaTyh7lGRVC3AAAAcw"]
[Wed Feb 25 07:30:43.993432 2026] [:error] [pid 20659:tid 20700] [client 54.38.38.130:38198] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ40oz_THK_HtK-Q44L-GgAAAEU"]
[Wed Feb 25 07:30:44.098253 2026] [:error] [pid 20658:tid 20677] [client 54.38.38.130:38210] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ40pOu8cohhPfsAIFm6qwAAAAo"]
[Wed Feb 25 07:30:44.463231 2026] [:error] [pid 60498:tid 60506] [client 54.38.38.130:38224] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ40pCFCVhQ3ffus0uKCUAAAAsE"]
[Wed Feb 25 07:30:46.055268 2026] [:error] [pid 5556:tid 5601] [client 54.38.38.130:33618] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZ40pqOrYeaTyh7lGRVC5gAAAc4"]
[Wed Feb 25 07:30:46.093536 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:33622] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZ40pqOrYeaTyh7lGRVC5wAAAdE"]
[Wed Feb 25 07:30:46.432226 2026] [:error] [pid 60498:tid 60515] [client 54.38.38.130:33634] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZ40piFCVhQ3ffus0uKCWgAAAso"]
[Wed Feb 25 07:30:48.049587 2026] [:error] [pid 60500:tid 60592] [client 54.38.38.130:33644] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40qPY9avxuno9KAT8HUgAAA0k"]
[Wed Feb 25 07:30:48.112581 2026] [:error] [pid 60498:tid 60518] [client 54.38.38.130:33650] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40qCFCVhQ3ffus0uKCXAAAAs0"]
[Wed Feb 25 07:30:48.434405 2026] [:error] [pid 20763:tid 20769] [client 54.38.38.130:33662] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ40qE0w_zc13OX-xibwOgAAAMQ"]
[Wed Feb 25 07:30:50.064862 2026] [:error] [pid 60498:tid 60528] [client 54.38.38.130:33676] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ40qiFCVhQ3ffus0uKCYQAAAtc"]
[Wed Feb 25 07:30:50.109643 2026] [:error] [pid 20659:tid 20718] [client 54.38.38.130:33688] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ40qj_THK_HtK-Q44L-IAAAAFc"]
[Wed Feb 25 07:30:50.556279 2026] [:error] [pid 60498:tid 60505] [client 54.38.38.130:33696] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ40qiFCVhQ3ffus0uKCYwAAAsA"]
[Wed Feb 25 07:30:51.962612 2026] [:error] [pid 5619:tid 5651] [client 54.38.38.130:33702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ40q5FUzdv-0L_F4fvn6QAAAhA"]
[Wed Feb 25 07:30:52.148227 2026] [:error] [pid 5619:tid 5655] [client 54.38.38.130:33718] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ40rJFUzdv-0L_F4fvn6gAAAhQ"]
[Wed Feb 25 07:30:52.822640 2026] [:error] [pid 5619:tid 5638] [client 54.38.38.130:33724] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ40rJFUzdv-0L_F4fvn7AAAAgM"]
[Wed Feb 25 07:30:53.825005 2026] [:error] [pid 5619:tid 5654] [client 54.38.38.130:33740] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZ40rZFUzdv-0L_F4fvn7gAAAhM"]
[Wed Feb 25 07:30:54.166182 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:33742] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZ40rj_THK_HtK-Q44L-KAAAAEA"]
[Wed Feb 25 07:30:54.999049 2026] [:error] [pid 20659:tid 20697] [client 54.38.38.130:33744] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZ40rj_THK_HtK-Q44L-KgAAAEI"]
[Wed Feb 25 07:30:55.928639 2026] [:error] [pid 5556:tid 5604] [client 54.38.38.130:48642] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZ40r6OrYeaTyh7lGRVC8AAAAdE"]
[Wed Feb 25 07:30:56.008990 2026] [:error] [pid 5556:tid 5611] [client 54.38.38.130:48652] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZ40sKOrYeaTyh7lGRVC8QAAAdg"]
[Wed Feb 25 07:30:57.256698 2026] [:error] [pid 5556:tid 5599] [client 54.38.38.130:48654] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZ40saOrYeaTyh7lGRVC9wAAAcw"]
[Wed Feb 25 07:30:58.089874 2026] [:error] [pid 60500:tid 60581] [client 54.38.38.130:48666] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZ40svY9avxuno9KAT8HWAAAA0E"]
[Wed Feb 25 07:30:58.126981 2026] [:error] [pid 60498:tid 60510] [client 54.38.38.130:48674] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZ40siFCVhQ3ffus0uKCZgAAAsU"]
[Wed Feb 25 07:30:59.202455 2026] [:error] [pid 37809:tid 37820] [client 54.38.38.130:48676] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZ40syIC419p2bqBCnBneAAAAIk"]
[Wed Feb 25 07:30:59.990300 2026] [:error] [pid 60290:tid 60313] [client 54.38.38.130:48688] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZ40szPwSUztcPyiofqN_wAAARU"]
[Wed Feb 25 07:31:00.162006 2026] [:error] [pid 60387:tid 60490] [client 54.38.38.130:48692] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZ40tIHL0QH7Sr13X0KwYwAAApI"]
[Wed Feb 25 07:31:01.174720 2026] [:error] [pid 60387:tid 60484] [client 54.38.38.130:48702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZ40tYHL0QH7Sr13X0KwZgAAAow"]
[Wed Feb 25 07:31:02.364917 2026] [:error] [pid 60498:tid 60514] [client 54.38.38.130:48706] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40tiFCVhQ3ffus0uKCaQAAAsk"]
[Wed Feb 25 07:31:02.413601 2026] [:error] [pid 60498:tid 60506] [client 54.38.38.130:48716] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40tiFCVhQ3ffus0uKCagAAAsE"]
[Wed Feb 25 07:31:03.183182 2026] [:error] [pid 60498:tid 60526] [client 54.38.38.130:48730] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ40tyFCVhQ3ffus0uKCawAAAtU"]
[Wed Feb 25 07:31:04.555280 2026] [:error] [pid 60498:tid 60516] [client 54.38.38.130:48742] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ40uCFCVhQ3ffus0uKCbwAAAss"]
[Wed Feb 25 07:31:04.613782 2026] [:error] [pid 60498:tid 60527] [client 54.38.38.130:48758] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ40uCFCVhQ3ffus0uKCcAAAAtY"]
[Wed Feb 25 07:31:05.225049 2026] [:error] [pid 60500:tid 60611] [client 54.38.38.130:48760] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ40ufY9avxuno9KAT8HXwAAA1g"]
[Wed Feb 25 07:31:06.540135 2026] [:error] [pid 5556:tid 5597] [client 54.38.38.130:39410] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ40uqOrYeaTyh7lGRVC_gAAAco"]
[Wed Feb 25 07:31:06.671959 2026] [:error] [pid 20659:tid 20719] [client 54.38.38.130:39424] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ40uj_THK_HtK-Q44L-NgAAAFg"]
[Wed Feb 25 07:31:07.273090 2026] [:error] [pid 60290:tid 60311] [client 54.38.38.130:39436] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ40uzPwSUztcPyiofqOBQAAARM"]
[Wed Feb 25 07:31:08.739467 2026] [:error] [pid 20659:tid 20712] [client 54.38.38.130:39450] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZ40vD_THK_HtK-Q44L-OgAAAFE"]
[Wed Feb 25 07:31:08.785025 2026] [:error] [pid 20659:tid 20699] [client 54.38.38.130:39458] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZ40vD_THK_HtK-Q44L-OwAAAEQ"]
[Wed Feb 25 07:31:09.648266 2026] [:error] [pid 20659:tid 20711] [client 54.38.38.130:39470] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZ40vT_THK_HtK-Q44L-PgAAAFA"]
[Wed Feb 25 07:31:10.690456 2026] [:error] [pid 60498:tid 60517] [client 54.38.38.130:39478] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40viFCVhQ3ffus0uKCdAAAAsw"]
[Wed Feb 25 07:31:11.108388 2026] [:error] [pid 20659:tid 20703] [client 54.38.38.130:39484] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40vz_THK_HtK-Q44L-RAAAAEg"]
[Wed Feb 25 07:31:11.767412 2026] [:error] [pid 20659:tid 20695] [client 54.38.38.130:39500] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ40vz_THK_HtK-Q44L-RQAAAEA"]
[Wed Feb 25 07:31:12.610615 2026] [:error] [pid 5556:tid 5607] [client 54.38.38.130:39502] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ40wKOrYeaTyh7lGRVDAQAAAdQ"]
[Wed Feb 25 07:31:13.203612 2026] [:error] [pid 5556:tid 5602] [client 54.38.38.130:39510] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ40waOrYeaTyh7lGRVDAwAAAc8"]
[Wed Feb 25 07:31:13.989706 2026] [:error] [pid 20659:tid 20697] [client 54.38.38.130:39526] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ40wT_THK_HtK-Q44L-TQAAAEI"]
[Wed Feb 25 07:31:14.536801 2026] [:error] [pid 60498:tid 60507] [client 54.38.38.130:39542] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ40wiFCVhQ3ffus0uKCdQAAAsI"]
[Wed Feb 25 07:31:15.442675 2026] [:error] [pid 60387:tid 60482] [client 54.38.38.130:43988] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ40w4HL0QH7Sr13X0KwbAAAAoo"]
[Wed Feb 25 07:31:15.953475 2026] [:error] [pid 5556:tid 5608] [client 54.38.38.130:43990] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ40w6OrYeaTyh7lGRVDBQAAAdU"]
[Wed Feb 25 07:31:16.410088 2026] [:error] [pid 60387:tid 60487] [client 54.38.38.130:43994] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ40xIHL0QH7Sr13X0KwbgAAAo8"]
[Wed Feb 25 07:31:17.527331 2026] [:error] [pid 20658:tid 20679] [client 54.38.38.130:43998] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ40xeu8cohhPfsAIFm6xgAAAAw"]
[Wed Feb 25 07:31:17.979606 2026] [:error] [pid 20659:tid 20701] [client 54.38.38.130:44014] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ40xT_THK_HtK-Q44L-UwAAAEY"]
[Wed Feb 25 07:31:18.575361 2026] [:error] [pid 60290:tid 60297] [client 54.38.38.130:44024] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40xjPwSUztcPyiofqOCQAAAQU"]
[Wed Feb 25 07:31:19.580274 2026] [:error] [pid 20659:tid 20714] [client 54.38.38.130:44026] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40xz_THK_HtK-Q44L-VwAAAFM"]
[Wed Feb 25 07:31:19.983419 2026] [:error] [pid 5556:tid 5603] [client 54.38.38.130:44028] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ40x6OrYeaTyh7lGRVDBgAAAdA"]
[Wed Feb 25 09:20:48.659303 2026] [:error] [pid 60498:tid 60512] [client 147.135.213.11:40552] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aZ5OcCFCVhQ3ffus0uKasQAAAsc"]
[Wed Feb 25 09:20:50.615338 2026] [:error] [pid 20659:tid 20702] [client 147.135.213.11:58272] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ5Ocj_THK_HtK-Q44Iv8wAAAEc"]
[Wed Feb 25 09:20:52.542614 2026] [:error] [pid 5556:tid 5602] [client 147.135.213.11:58284] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ5OdKOrYeaTyh7lGRVkvAAAAc8"]
[Wed Feb 25 09:20:54.393222 2026] [:error] [pid 60387:tid 60491] [client 147.135.213.11:58294] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ5OdoHL0QH7Sr13X0LCBAAAApM"]
[Wed Feb 25 09:20:56.288964 2026] [:error] [pid 5556:tid 5605] [client 147.135.213.11:53708] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ5OeKOrYeaTyh7lGRVkwQAAAdI"]
[Wed Feb 25 09:20:58.208125 2026] [:error] [pid 20658:tid 20677] [client 147.135.213.11:53722] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZ5Oeuu8cohhPfsAIFnEOQAAAAo"]
[Wed Feb 25 09:21:00.270804 2026] [:error] [pid 60498:tid 60512] [client 147.135.213.11:53732] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ5OfCFCVhQ3ffus0uKaugAAAsc"]
[Wed Feb 25 09:21:02.320020 2026] [:error] [pid 20659:tid 20699] [client 147.135.213.11:53738] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ5Ofj_THK_HtK-Q44IwAAAAAEQ"]
[Wed Feb 25 09:21:04.358906 2026] [:error] [pid 60500:tid 60587] [client 147.135.213.11:53746] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ5OgPY9avxuno9KAT8SoAAAA0U"]
[Wed Feb 25 09:21:06.412179 2026] [:error] [pid 5556:tid 5589] [client 147.135.213.11:54132] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ5OgqOrYeaTyh7lGRVk0wAAAcI"]
[Wed Feb 25 09:21:08.332087 2026] [:error] [pid 20658:tid 20684] [client 147.135.213.11:54134] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ5OhOu8cohhPfsAIFnEOgAAABE"]
[Wed Feb 25 09:21:10.376799 2026] [:error] [pid 60387:tid 60474] [client 147.135.213.11:54146] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ5OhoHL0QH7Sr13X0LCDwAAAoI"]
[Wed Feb 25 09:21:12.418783 2026] [:error] [pid 60498:tid 60525] [client 147.135.213.11:54162] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ5OiCFCVhQ3ffus0uKaxQAAAtQ"]
[Wed Feb 25 09:21:14.311629 2026] [:error] [pid 20763:tid 20768] [client 147.135.213.11:54178] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZ5Oik0w_zc13OX-xib3PAAAAMM"]
[Wed Feb 25 09:21:16.353655 2026] [:error] [pid 60498:tid 60508] [client 147.135.213.11:40942] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZ5OjCFCVhQ3ffus0uKaygAAAsM"]
[Wed Feb 25 09:21:18.244804 2026] [:error] [pid 37809:tid 37823] [client 147.135.213.11:40946] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ5OjiIC419p2bqBCnBspQAAAIw"]
[Wed Feb 25 09:21:20.278447 2026] [:error] [pid 20658:tid 20671] [client 147.135.213.11:40956] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZ5OkOu8cohhPfsAIFnEQQAAAAQ"]
[Wed Feb 25 09:21:22.172050 2026] [:error] [pid 37809:tid 37814] [client 147.135.213.11:40964] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ5OkiIC419p2bqBCnBsqQAAAIM"]
[Wed Feb 25 09:21:24.060839 2026] [:error] [pid 20763:tid 20774] [client 147.135.213.11:40968] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ5OlE0w_zc13OX-xib3RAAAAMk"]
[Wed Feb 25 09:21:25.964107 2026] [:error] [pid 60498:tid 60529] [client 147.135.213.11:60016] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZ5OlSFCVhQ3ffus0uKa1gAAAtg"]
[Wed Feb 25 09:21:27.999882 2026] [:error] [pid 60498:tid 60513] [client 147.135.213.11:60032] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ5OlyFCVhQ3ffus0uKa2QAAAsg"]
[Wed Feb 25 09:21:29.890677 2026] [:error] [pid 20659:tid 20709] [client 147.135.213.11:60046] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ5OmT_THK_HtK-Q44IwEAAAAE4"]
[Wed Feb 25 09:21:31.910213 2026] [:error] [pid 60500:tid 60607] [client 147.135.213.11:60050] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ5Om_Y9avxuno9KAT8SswAAA1Q"]
[Wed Feb 25 09:21:33.957487 2026] [:error] [pid 60500:tid 60588] [client 147.135.213.11:60056] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ5OnfY9avxuno9KAT8StQAAA0Y"]
[Wed Feb 25 09:21:35.828828 2026] [:error] [pid 20659:tid 20696] [client 147.135.213.11:43328] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ5Onz_THK_HtK-Q44IwFgAAAEE"]
[Wed Feb 25 09:21:37.851170 2026] [:error] [pid 20659:tid 20695] [client 147.135.213.11:43330] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aZ5OoT_THK_HtK-Q44IwHAAAAEA"]
[Wed Feb 25 09:21:39.912768 2026] [:error] [pid 60387:tid 60493] [client 147.135.213.11:43338] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aZ5Oo4HL0QH7Sr13X0LCMgAAApU"]
[Wed Feb 25 09:21:41.929616 2026] [:error] [pid 5619:tid 5652] [client 147.135.213.11:43352] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aZ5OpZFUzdv-0L_F4fv11QAAAhE"]
[Wed Feb 25 09:21:43.976771 2026] [:error] [pid 20659:tid 20713] [client 147.135.213.11:43358] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aZ5Opz_THK_HtK-Q44IwMwAAAFI"]
[Wed Feb 25 09:21:45.987799 2026] [:error] [pid 20658:tid 20685] [client 147.135.213.11:42888] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aZ5Oqeu8cohhPfsAIFnERAAAABI"]
[Wed Feb 25 09:22:06.542017 2026] [:error] [pid 60498:tid 60525] [client 147.135.213.11:42896] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ5OviFCVhQ3ffus0uKbCAAAAtQ"]
[Wed Feb 25 09:22:08.498261 2026] [:error] [pid 60387:tid 60495] [client 147.135.213.11:35806] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ5OwIHL0QH7Sr13X0LCQwAAApc"]
[Wed Feb 25 09:22:10.540080 2026] [:error] [pid 60500:tid 60590] [client 147.135.213.11:35814] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ5OwvY9avxuno9KAT8SuAAAA0g"]
[Wed Feb 25 09:22:12.412305 2026] [:error] [pid 60387:tid 60495] [client 147.135.213.11:35818] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZ5OxIHL0QH7Sr13X0LCUAAAApc"]
[Wed Feb 25 09:22:14.430004 2026] [:error] [pid 37809:tid 37835] [client 147.135.213.11:35822] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ5OxiIC419p2bqBCnBsvgAAAJg"]
[Wed Feb 25 09:22:16.467321 2026] [:error] [pid 20658:tid 20671] [client 147.135.213.11:52328] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ5OyOu8cohhPfsAIFnEYQAAAAQ"]
[Wed Feb 25 09:22:18.495380 2026] [:error] [pid 20658:tid 20670] [client 147.135.213.11:52340] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ5Oyuu8cohhPfsAIFnEYgAAAAM"]
[Wed Feb 25 09:22:21.595030 2026] [:error] [pid 20659:tid 20707] [client 147.135.213.11:52352] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ5OzT_THK_HtK-Q44IwWQAAAEw"]
[Wed Feb 25 09:22:25.211906 2026] [:error] [pid 20763:tid 20787] [client 147.135.213.11:51314] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ5O0U0w_zc13OX-xib3UwAAANY"]
[Wed Feb 25 11:30:20.502756 2026] [:error] [pid 20659:tid 20698] [client 43.135.186.135:54524] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ5szD_THK_HtK-Q44JvdwAAAEM"]
[Wed Feb 25 11:58:48.788867 2026] [:error] [pid 60387:tid 60480] [client 192.144.148.122:41366] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ5zeIHL0QH7Sr13X0LdMgAAAog"]
[Wed Feb 25 18:45:59.450611 2026] [:error] [pid 20659:tid 20719] [client 192.144.148.122:38852] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ7S5z_THK_HtK-Q44INcAAAAFg"]
[Wed Feb 25 21:59:24.513443 2026] [:error] [pid 60498:tid 60522] [client 13.48.57.248:65151] [client 13.48.57.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.48.57.248, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aZ8APCFCVhQ3ffus0uI_WQAAAtE"]
[Wed Feb 25 21:59:24.517428 2026] [:error] [pid 60498:tid 60522] [client 13.48.57.248:65151] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Feb 25 22:44:06.900261 2026] [:error] [pid 20659:tid 20699] [client 87.106.209.183:55479] [client 87.106.209.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/userfuns.php"] [unique_id "aZ8Ktj_THK_HtK-Q44JOVwAAAEQ"], referer: www.google.com
[Thu Feb 26 00:09:16.124917 2026] [:error] [pid 20763:tid 20781] [client 20.104.206.236:2582] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8erE0w_zc13OX-xiYyIQAAANA"]
[Thu Feb 26 00:09:17.490343 2026] [:error] [pid 60500:tid 60596] [client 20.104.206.236:2581] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8erfY9avxuno9KAT9qKwAAA0s"]
[Thu Feb 26 00:09:20.144616 2026] [:error] [pid 60498:tid 60523] [client 20.104.206.236:52745] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8esCFCVhQ3ffus0uJVeQAAAtI"]
[Thu Feb 26 00:09:21.535514 2026] [:error] [pid 60387:tid 60479] [client 20.104.206.236:2583] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ8esYHL0QH7Sr13X0LBWQAAAoc"]
[Thu Feb 26 00:14:05.624686 2026] [:error] [pid 60500:tid 60603] [client 170.106.192.3:46888] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ8fzfY9avxuno9KAT9q0QAAA1A"]
[Thu Feb 26 01:08:36.639507 2026] [:error] [pid 49554:tid 49618] [client 207.180.207.36:52808] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aZ8slNtlDT3cCGsQMTcslQAAAAk"]
[Thu Feb 26 01:08:38.889924 2026] [:error] [pid 49554:tid 49630] [client 207.180.207.36:58182] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ8slttlDT3cCGsQMTcsmAAAABU"]
[Thu Feb 26 01:08:41.027020 2026] [:error] [pid 49555:tid 49660] [client 207.180.207.36:58192] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ8smdw3_NsD2xC15YbSUgAAAEQ"]
[Thu Feb 26 01:08:43.038042 2026] [:error] [pid 49770:tid 49831] [client 207.180.207.36:58204] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ8smy7xhdZV4TFeNys7MwAAAIU"]
[Thu Feb 26 01:08:45.031136 2026] [:error] [pid 49555:tid 49682] [client 207.180.207.36:50032] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ8sndw3_NsD2xC15YbSXwAAAFM"]
[Thu Feb 26 01:08:47.229358 2026] [:error] [pid 49770:tid 49845] [client 207.180.207.36:50034] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ8sny7xhdZV4TFeNys7QAAAAJM"]
[Thu Feb 26 01:08:49.275129 2026] [:error] [pid 49770:tid 49826] [client 207.180.207.36:50048] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ8soS7xhdZV4TFeNys7RQAAAIA"]
[Thu Feb 26 01:08:51.478566 2026] [:error] [pid 49770:tid 49848] [client 207.180.207.36:50060] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ8soy7xhdZV4TFeNys7TwAAAJY"]
[Thu Feb 26 01:08:53.580464 2026] [:error] [pid 49554:tid 49624] [client 207.180.207.36:50066] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aZ8spdtlDT3cCGsQMTcsoAAAAA8"]
[Thu Feb 26 01:08:55.792045 2026] [:error] [pid 49770:tid 49830] [client 207.180.207.36:36956] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aZ8spy7xhdZV4TFeNys7YgAAAIQ"]
[Thu Feb 26 01:08:57.922683 2026] [:error] [pid 49770:tid 49837] [client 207.180.207.36:36958] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ8sqS7xhdZV4TFeNys7ZwAAAIs"]
[Thu Feb 26 01:08:59.885488 2026] [:error] [pid 49555:tid 49653] [client 207.180.207.36:36968] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ8sq9w3_NsD2xC15YbSfAAAAEE"]
[Thu Feb 26 01:09:01.872481 2026] [:error] [pid 49555:tid 49687] [client 207.180.207.36:36984] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ8srdw3_NsD2xC15YbSfwAAAFg"]
[Thu Feb 26 01:09:03.821253 2026] [:error] [pid 49770:tid 49843] [client 207.180.207.36:36988] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ8sry7xhdZV4TFeNys7cgAAAJE"]
[Thu Feb 26 01:09:05.860333 2026] [:error] [pid 49770:tid 49830] [client 207.180.207.36:39546] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ8ssS7xhdZV4TFeNys7eQAAAIQ"]
[Thu Feb 26 01:09:07.889929 2026] [:error] [pid 49770:tid 49838] [client 207.180.207.36:39554] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ8ssy7xhdZV4TFeNys7ewAAAIw"]
[Thu Feb 26 01:09:09.769230 2026] [:error] [pid 49554:tid 49611] [client 207.180.207.36:39566] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aZ8stdtlDT3cCGsQMTcsvAAAAAI"]
[Thu Feb 26 01:09:11.741367 2026] [:error] [pid 49556:tid 49646] [client 207.180.207.36:39582] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ8st5jk27yQt3CGcmh-IAAAAMo"]
[Thu Feb 26 01:09:13.612316 2026] [:error] [pid 49770:tid 49844] [client 207.180.207.36:39590] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ8suS7xhdZV4TFeNys7kAAAAJI"]
[Thu Feb 26 01:09:15.680315 2026] [:error] [pid 49556:tid 49638] [client 207.180.207.36:34730] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aZ8su5jk27yQt3CGcmh-MgAAAMI"]
[Thu Feb 26 01:09:17.680409 2026] [:error] [pid 49556:tid 49649] [client 207.180.207.36:34738] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ8svZjk27yQt3CGcmh-PAAAAMw"]
[Thu Feb 26 01:09:19.796294 2026] [:error] [pid 49554:tid 49612] [client 207.180.207.36:34744] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aZ8sv9tlDT3cCGsQMTcsxAAAAAM"]
[Thu Feb 26 01:09:21.932225 2026] [:error] [pid 49555:tid 49684] [client 207.180.207.36:34750] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aZ8swdw3_NsD2xC15YbSnQAAAFU"]
[Thu Feb 26 01:09:24.136848 2026] [:error] [pid 49555:tid 49683] [client 207.180.207.36:34754] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ8sxNw3_NsD2xC15YbSpwAAAFQ"]
[Thu Feb 26 01:09:26.427841 2026] [:error] [pid 49554:tid 49620] [client 207.180.207.36:42690] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aZ8sxttlDT3cCGsQMTcszwAAAAs"]
[Thu Feb 26 01:09:28.601241 2026] [:error] [pid 49770:tid 49846] [client 207.180.207.36:42694] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ8syC7xhdZV4TFeNys7ugAAAJQ"]
[Thu Feb 26 01:09:30.534297 2026] [:error] [pid 49770:tid 49850] [client 207.180.207.36:42706] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aZ8syi7xhdZV4TFeNys7xAAAAJg"]
[Thu Feb 26 01:09:32.726521 2026] [:error] [pid 49556:tid 49637] [client 207.180.207.36:42718] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ8szJjk27yQt3CGcmh-VQAAAME"]
[Thu Feb 26 01:09:54.564241 2026] [:error] [pid 49770:tid 49830] [client 207.180.207.36:58390] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aZ8s4i7xhdZV4TFeNys8EQAAAIQ"]
[Thu Feb 26 01:09:56.569404 2026] [:error] [pid 49770:tid 49845] [client 207.180.207.36:40120] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ8s5C7xhdZV4TFeNys8GwAAAJM"]
[Thu Feb 26 01:09:58.632441 2026] [:error] [pid 49770:tid 49839] [client 207.180.207.36:40136] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ8s5i7xhdZV4TFeNys8HwAAAI0"]
[Thu Feb 26 01:10:00.697688 2026] [:error] [pid 49770:tid 49832] [client 207.180.207.36:40152] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ8s6C7xhdZV4TFeNys8JQAAAIY"]
[Thu Feb 26 01:10:02.664482 2026] [:error] [pid 49555:tid 49685] [client 207.180.207.36:40154] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ8s6tw3_NsD2xC15YbS7gAAAFY"]
[Thu Feb 26 01:10:04.537572 2026] [:error] [pid 49770:tid 49827] [client 207.180.207.36:40168] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ8s7C7xhdZV4TFeNys8NgAAAIE"]
[Thu Feb 26 01:10:06.618015 2026] [:error] [pid 49556:tid 49638] [client 207.180.207.36:37710] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ8s7pjk27yQt3CGcmh-dwAAAMI"]
[Thu Feb 26 01:10:08.741564 2026] [:error] [pid 49556:tid 49642] [client 207.180.207.36:37724] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ8s8Jjk27yQt3CGcmh-fAAAAMY"]
[Thu Feb 26 01:10:10.706544 2026] [:error] [pid 49770:tid 49845] [client 207.180.207.36:37738] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aZ8s8i7xhdZV4TFeNys8SQAAAJM"]
[Thu Feb 26 01:10:12.706878 2026] [:error] [pid 49554:tid 49611] [client 207.180.207.36:37750] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ8s9NtlDT3cCGsQMTcs7AAAAAI"]
[Thu Feb 26 01:10:14.628027 2026] [:error] [pid 49555:tid 49681] [client 207.180.207.36:37762] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ8s9tw3_NsD2xC15YbTCQAAAFI"]
[Thu Feb 26 01:10:16.697555 2026] [:error] [pid 49554:tid 49629] [client 207.180.207.36:58128] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ8s-NtlDT3cCGsQMTcs8AAAABQ"]
[Thu Feb 26 01:10:18.282961 2026] [:error] [pid 49556:tid 49657] [client 207.180.207.36:58142] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ8s-pjk27yQt3CGcmh-hAAAANE"]
[Thu Feb 26 01:10:22.234145 2026] [:error] [pid 49555:tid 49678] [client 207.180.207.36:58154] [client 207.180.207.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ8s_tw3_NsD2xC15YbTGAAAAE8"]
[Thu Feb 26 01:47:45.070474 2026] [:error] [pid 49770:tid 49835] [client 51.75.128.89:42896] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ81wS7xhdZV4TFeNytc3AAAAIk"]
[Thu Feb 26 01:47:46.950205 2026] [:error] [pid 49556:tid 49636] [client 51.75.128.89:39948] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ81wpjk27yQt3CGcmiOgAAAAMA"]
[Thu Feb 26 01:47:48.835921 2026] [:error] [pid 49555:tid 49679] [client 51.75.128.89:39956] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aZ81xNw3_NsD2xC15YboYgAAAFA"]
[Thu Feb 26 02:58:22.738426 2026] [:error] [pid 49555:tid 49676] [client 152.53.187.237:36914] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZ9GTtw3_NsD2xC15YYKHAAAAE0"]
[Thu Feb 26 02:58:25.800506 2026] [:error] [pid 49555:tid 49684] [client 152.53.187.237:46760] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ9GUdw3_NsD2xC15YYKIwAAAFU"]
[Thu Feb 26 02:58:28.642137 2026] [:error] [pid 58142:tid 58154] [client 152.53.187.237:46762] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aZ9GVOdki0YneJGNnzTSsAAAAQk"]
[Thu Feb 26 02:58:34.314888 2026] [:error] [pid 49555:tid 49653] [client 152.53.187.237:54356] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ9GWtw3_NsD2xC15YYKKgAAAEE"]
[Thu Feb 26 02:58:36.864152 2026] [:error] [pid 49556:tid 49667] [client 152.53.187.237:54372] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aZ9GXJjk27yQt3CGcmimgwAAANY"]
[Thu Feb 26 02:58:39.532879 2026] [:error] [pid 49554:tid 49612] [client 152.53.187.237:54374] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ9GX9tlDT3cCGsQMTdOBgAAAAM"]
[Thu Feb 26 02:58:41.698845 2026] [:error] [pid 49770:tid 49836] [client 152.53.187.237:47704] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ9GYS7xhdZV4TFeNyuNjAAAAIo"]
[Thu Feb 26 02:58:44.419529 2026] [:error] [pid 49770:tid 49833] [client 152.53.187.237:47720] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ9GZC7xhdZV4TFeNyuNkAAAAIc"]
[Thu Feb 26 02:58:47.125904 2026] [:error] [pid 49554:tid 49628] [client 152.53.187.237:47728] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ9GZ9tlDT3cCGsQMTdOIwAAABM"]
[Thu Feb 26 02:58:54.626118 2026] [:error] [pid 49770:tid 49847] [client 152.53.187.237:65422] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ9Gbi7xhdZV4TFeNyuNowAAAJU"]
[Thu Feb 26 02:58:57.017087 2026] [:error] [pid 49554:tid 49618] [client 152.53.187.237:65438] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ9GcdtlDT3cCGsQMTdOTAAAAAk"]
[Thu Feb 26 02:58:59.320560 2026] [:error] [pid 58142:tid 58158] [client 152.53.187.237:65440] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ9Gc-dki0YneJGNnzTS7wAAAQ0"]
[Thu Feb 26 02:59:01.999332 2026] [:error] [pid 49554:tid 49622] [client 152.53.187.237:44278] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aZ9GddtlDT3cCGsQMTdOWAAAAA0"]
[Thu Feb 26 02:59:04.088594 2026] [:error] [pid 49554:tid 49615] [client 152.53.187.237:44280] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aZ9GeNtlDT3cCGsQMTdOYAAAAAY"]
[Thu Feb 26 02:59:06.210973 2026] [:error] [pid 49555:tid 49653] [client 152.53.187.237:44286] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ9Getw3_NsD2xC15YYKRgAAAEE"]
[Thu Feb 26 02:59:08.631088 2026] [:error] [pid 49555:tid 49679] [client 152.53.187.237:44294] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aZ9GfNw3_NsD2xC15YYKTAAAAFA"]
[Thu Feb 26 02:59:10.832029 2026] [:error] [pid 58142:tid 58163] [client 152.53.187.237:54386] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aZ9Gfudki0YneJGNnzTTCQAAARI"]
[Thu Feb 26 02:59:13.179271 2026] [:error] [pid 49770:tid 49835] [client 152.53.187.237:54392] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ9GgS7xhdZV4TFeNyuNywAAAIk"]
[Thu Feb 26 02:59:15.599674 2026] [:error] [pid 49770:tid 49839] [client 152.53.187.237:54398] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aZ9Ggy7xhdZV4TFeNyuN0AAAAI0"]
[Thu Feb 26 02:59:18.331203 2026] [:error] [pid 49554:tid 49632] [client 152.53.187.237:54412] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ9GhttlDT3cCGsQMTdOngAAABc"]
[Thu Feb 26 03:00:12.303748 2026] [:error] [pid 49770:tid 49838] [client 152.53.187.237:38838] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ9GvC7xhdZV4TFeNyuOJwAAAIw"]
[Thu Feb 26 03:00:14.664961 2026] [:error] [pid 49770:tid 49842] [client 152.53.187.237:54526] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ9Gvi7xhdZV4TFeNyuOMAAAAJA"]
[Thu Feb 26 03:00:17.261052 2026] [:error] [pid 49770:tid 49828] [client 152.53.187.237:54538] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aZ9GwS7xhdZV4TFeNyuOOwAAAII"]
[Thu Feb 26 03:00:21.911774 2026] [:error] [pid 58142:tid 58146] [client 152.53.187.237:36798] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aZ9Gxedki0YneJGNnzTTzgAAAQE"]
[Thu Feb 26 03:00:24.360835 2026] [:error] [pid 58142:tid 58165] [client 152.53.187.237:36814] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aZ9GyOdki0YneJGNnzTT1gAAARQ"]
[Thu Feb 26 03:00:26.547950 2026] [:error] [pid 49554:tid 49630] [client 152.53.187.237:36824] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aZ9GyttlDT3cCGsQMTdPkwAAABU"]
[Thu Feb 26 03:00:29.300097 2026] [:error] [pid 49770:tid 49842] [client 152.53.187.237:36828] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ9GzS7xhdZV4TFeNyuOTwAAAJA"]
[Thu Feb 26 03:00:31.571109 2026] [:error] [pid 49556:tid 49637] [client 152.53.187.237:58582] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ9Gz5jk27yQt3CGcmim6gAAAME"]
[Thu Feb 26 03:00:34.614260 2026] [:error] [pid 58142:tid 58163] [client 152.53.187.237:58586] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZ9G0udki0YneJGNnzTT8AAAARI"]
[Thu Feb 26 03:00:36.713978 2026] [:error] [pid 58142:tid 58155] [client 152.53.187.237:58592] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ9G1Odki0YneJGNnzTT9QAAAQo"]
[Thu Feb 26 03:00:39.094143 2026] [:error] [pid 58142:tid 58167] [client 152.53.187.237:58606] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ9G1-dki0YneJGNnzTUAAAAARY"]
[Thu Feb 26 03:00:41.763912 2026] [:error] [pid 49554:tid 49620] [client 152.53.187.237:60458] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ9G2dtlDT3cCGsQMTdP4QAAAAs"]
[Thu Feb 26 03:00:44.076511 2026] [:error] [pid 58142:tid 58150] [client 152.53.187.237:60470] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZ9G3Odki0YneJGNnzTUEwAAAQU"]
[Thu Feb 26 03:00:46.258443 2026] [:error] [pid 49554:tid 49630] [client 152.53.187.237:60476] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ9G3ttlDT3cCGsQMTdP8gAAABU"]
[Thu Feb 26 03:00:48.973644 2026] [:error] [pid 58142:tid 58163] [client 152.53.187.237:60482] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ9G4Odki0YneJGNnzTUIQAAARI"]
[Thu Feb 26 03:00:51.880259 2026] [:error] [pid 58142:tid 58148] [client 152.53.187.237:36428] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ9G4-dki0YneJGNnzTUJwAAAQM"]
[Thu Feb 26 03:00:54.749606 2026] [:error] [pid 58142:tid 58155] [client 152.53.187.237:36436] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ9G5udki0YneJGNnzTUMwAAAQo"]
[Thu Feb 26 03:00:58.757183 2026] [:error] [pid 49555:tid 49682] [client 152.53.187.237:36444] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aZ9G6tw3_NsD2xC15YYLEwAAAFM"]
[Thu Feb 26 06:00:10.851208 2026] [:error] [pid 9587:tid 9606] [client 182.190.181.141:55973] [client 182.190.181.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.181.141, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aZ9w6viLfyuakov_VlBMFQAAAAk"]
[Thu Feb 26 06:00:10.857790 2026] [:error] [pid 9587:tid 9606] [client 182.190.181.141:55973] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 26 06:43:54.718148 2026] [:error] [pid 6071:tid 6076] [client 20.220.211.253:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/class3.php
[Thu Feb 26 06:43:54.931693 2026] [:error] [pid 6071:tid 6095] [client 20.220.211.253:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Thu Feb 26 07:26:26.628519 2026] [:error] [pid 54991:tid 55037] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Thu Feb 26 07:26:26.838212 2026] [:error] [pid 54991:tid 55027] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/work.php
[Thu Feb 26 07:26:27.050012 2026] [:error] [pid 54991:tid 55042] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/C.php
[Thu Feb 26 07:26:27.259874 2026] [:error] [pid 54991:tid 55034] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/ze.php
[Thu Feb 26 07:26:27.469375 2026] [:error] [pid 54991:tid 55033] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Feb 26 07:26:27.679133 2026] [:error] [pid 54991:tid 55038] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Thu Feb 26 07:26:27.892160 2026] [:error] [pid 54991:tid 55026] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/pouhg.php
[Thu Feb 26 07:26:28.109699 2026] [:error] [pid 54991:tid 55044] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Thu Feb 26 07:26:28.319192 2026] [:error] [pid 54991:tid 55040] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Thu Feb 26 07:26:28.532438 2026] [:error] [pid 54991:tid 55021] [client 4.205.17.183:16356] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Thu Feb 26 07:26:28.738685 2026] [:error] [pid 54991:tid 55039] [client 4.205.17.183:16356] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123.php"] [unique_id "aZ-FJN4Zx-mJ8gbRB2hQmgAAAFM"]
[Thu Feb 26 07:26:29.154137 2026] [:error] [pid 55051:tid 55076] [client 4.205.17.183:16352] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123.php"] [unique_id "aZ-FJQmK1w2kZvh5eLGSDAAAAJY"]
[Thu Feb 26 07:26:29.573322 2026] [:error] [pid 54990:tid 54995] [client 4.205.17.183:16327] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123.php"] [unique_id "aZ-FJXtr2qmt_mBhH2yxygAAAAI"]
[Thu Feb 26 07:26:29.992085 2026] [:error] [pid 54991:tid 55029] [client 4.205.17.183:16268] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123.php"] [unique_id "aZ-FJd4Zx-mJ8gbRB2hQnQAAAEk"]
[Thu Feb 26 07:26:30.404931 2026] [:error] [pid 55051:tid 55055] [client 4.205.17.183:16331] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aZ-FJgmK1w2kZvh5eLGSDwAAAIE"]
[Thu Feb 26 07:26:30.817626 2026] [:error] [pid 55051:tid 55062] [client 4.205.17.183:16355] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aZ-FJgmK1w2kZvh5eLGSEQAAAIg"]
[Thu Feb 26 07:26:31.231680 2026] [:error] [pid 54990:tid 54996] [client 4.205.17.183:16273] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aZ-FJ3tr2qmt_mBhH2yxzwAAAAM"]
[Thu Feb 26 07:26:31.654192 2026] [:error] [pid 55051:tid 55054] [client 4.205.17.183:16373] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aZ-FJwmK1w2kZvh5eLGSFQAAAIA"]
[Thu Feb 26 07:26:32.074454 2026] [:error] [pid 55051:tid 55078] [client 4.205.17.183:16328] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moshou.php"] [unique_id "aZ-FKAmK1w2kZvh5eLGSGQAAAJg"]
[Thu Feb 26 07:26:32.501083 2026] [:error] [pid 55051:tid 55074] [client 4.205.17.183:16265] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moshou.php"] [unique_id "aZ-FKAmK1w2kZvh5eLGSHgAAAJQ"]
[Thu Feb 26 07:26:32.919899 2026] [:error] [pid 55122:tid 55137] [client 4.205.17.183:16332] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moshou.php"] [unique_id "aZ-FKILiR0OfjFxvcN9XZgAAAM0"]
[Thu Feb 26 07:26:33.341787 2026] [:error] [pid 55051:tid 55064] [client 4.205.17.183:16362] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moshou.php"] [unique_id "aZ-FKQmK1w2kZvh5eLGSIwAAAIo"]
[Thu Feb 26 07:26:33.754102 2026] [:error] [pid 54991:tid 55043] [client 4.205.17.183:16370] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aZ-FKd4Zx-mJ8gbRB2hQogAAAFc"]
[Thu Feb 26 07:26:34.171825 2026] [:error] [pid 55618:tid 55636] [client 4.205.17.183:16280] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aZ-FKh61Vrh12f_8oWTCUAAAAQ8"]
[Thu Feb 26 07:26:34.590063 2026] [:error] [pid 55618:tid 55639] [client 4.205.17.183:16361] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aZ-FKh61Vrh12f_8oWTCUgAAARI"]
[Thu Feb 26 07:26:35.002404 2026] [:error] [pid 55618:tid 55641] [client 4.205.17.183:16321] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aZ-FKx61Vrh12f_8oWTCUwAAARQ"]
[Thu Feb 26 07:26:35.415451 2026] [:error] [pid 55618:tid 55627] [client 4.205.17.183:16330] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZ-FKx61Vrh12f_8oWTCVQAAAQY"]
[Thu Feb 26 07:26:35.837218 2026] [:error] [pid 55618:tid 55631] [client 4.205.17.183:16272] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZ-FKx61Vrh12f_8oWTCVwAAAQo"]
[Thu Feb 26 07:26:36.260722 2026] [:error] [pid 55618:tid 55637] [client 4.205.17.183:16257] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZ-FLB61Vrh12f_8oWTCWAAAARA"]
[Thu Feb 26 07:26:36.689939 2026] [:error] [pid 55618:tid 55638] [client 4.205.17.183:16339] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aZ-FLB61Vrh12f_8oWTCXAAAARE"]
[Thu Feb 26 07:26:37.108863 2026] [:error] [pid 54990:tid 55015] [client 4.205.17.183:16326] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws60.php"] [unique_id "aZ-FLXtr2qmt_mBhH2yx3AAAABY"]
[Thu Feb 26 07:26:37.523030 2026] [:error] [pid 54990:tid 55002] [client 4.205.17.183:16274] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws60.php"] [unique_id "aZ-FLXtr2qmt_mBhH2yx3QAAAAk"]
[Thu Feb 26 07:26:37.934802 2026] [:error] [pid 54990:tid 54995] [client 4.205.17.183:16283] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws60.php"] [unique_id "aZ-FLXtr2qmt_mBhH2yx3wAAAAI"]
[Thu Feb 26 07:26:38.351630 2026] [:error] [pid 54991:tid 55025] [client 4.205.17.183:16351] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws60.php"] [unique_id "aZ-FLt4Zx-mJ8gbRB2hQrQAAAEU"]
[Thu Feb 26 07:26:38.771330 2026] [:error] [pid 54990:tid 55003] [client 4.205.17.183:16369] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZ-FLntr2qmt_mBhH2yx4QAAAAo"]
[Thu Feb 26 07:26:39.192019 2026] [:error] [pid 54990:tid 54996] [client 4.205.17.183:16276] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZ-FL3tr2qmt_mBhH2yx4gAAAAM"]
[Thu Feb 26 07:26:39.612993 2026] [:error] [pid 55051:tid 55075] [client 4.205.17.183:16349] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZ-FLwmK1w2kZvh5eLGSPgAAAJU"]
[Thu Feb 26 07:26:40.057357 2026] [:error] [pid 54991:tid 55042] [client 4.205.17.183:16261] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samiri.php"] [unique_id "aZ-FMN4Zx-mJ8gbRB2hQtgAAAFY"]
[Thu Feb 26 07:26:40.477958 2026] [:error] [pid 55051:tid 55067] [client 4.205.17.183:16298] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZ-FMAmK1w2kZvh5eLGSQQAAAI0"]
[Thu Feb 26 07:26:40.899674 2026] [:error] [pid 54990:tid 55017] [client 4.205.17.183:16195] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZ-FMHtr2qmt_mBhH2yx5AAAABg"]
[Thu Feb 26 07:26:41.312304 2026] [:error] [pid 55122:tid 55131] [client 4.205.17.183:16307] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZ-FMYLiR0OfjFxvcN9XegAAAMc"]
[Thu Feb 26 07:26:41.723418 2026] [:error] [pid 54991:tid 55024] [client 4.205.17.183:16374] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aZ-FMd4Zx-mJ8gbRB2hQtwAAAEQ"]
[Thu Feb 26 07:26:42.177524 2026] [:error] [pid 55051:tid 55062] [client 4.205.17.183:16380] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZ-FMgmK1w2kZvh5eLGSRwAAAIg"]
[Thu Feb 26 07:26:42.599597 2026] [:error] [pid 54991:tid 55038] [client 4.205.17.183:16282] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZ-FMt4Zx-mJ8gbRB2hQuAAAAFI"]
[Thu Feb 26 07:26:43.019131 2026] [:error] [pid 55051:tid 55063] [client 4.205.17.183:16256] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZ-FMwmK1w2kZvh5eLGSTQAAAIk"]
[Thu Feb 26 07:26:43.448296 2026] [:error] [pid 55051:tid 55058] [client 4.205.17.183:16334] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aZ-FMwmK1w2kZvh5eLGSTwAAAIQ"]
[Thu Feb 26 07:26:43.868472 2026] [:error] [pid 54990:tid 55006] [client 4.205.17.183:16381] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZ-FM3tr2qmt_mBhH2yx5gAAAA0"]
[Thu Feb 26 07:26:44.290737 2026] [:error] [pid 54990:tid 55001] [client 4.205.17.183:16293] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZ-FNHtr2qmt_mBhH2yx6AAAAAg"]
[Thu Feb 26 07:26:44.714589 2026] [:error] [pid 54990:tid 55012] [client 4.205.17.183:16292] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZ-FNHtr2qmt_mBhH2yx6QAAABM"]
[Thu Feb 26 07:26:45.158774 2026] [:error] [pid 55122:tid 55145] [client 4.205.17.183:16345] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aZ-FNYLiR0OfjFxvcN9XgQAAANU"]
[Thu Feb 26 07:26:45.583990 2026] [:error] [pid 54990:tid 55011] [client 4.205.17.183:16367] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ-FNXtr2qmt_mBhH2yx7gAAABI"]
[Thu Feb 26 07:26:46.011691 2026] [:error] [pid 55122:tid 55140] [client 4.205.17.183:16368] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ-FNoLiR0OfjFxvcN9XhAAAANA"]
[Thu Feb 26 07:26:46.431317 2026] [:error] [pid 55618:tid 55635] [client 4.205.17.183:16275] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ-FNh61Vrh12f_8oWTCaAAAAQ4"]
[Thu Feb 26 07:26:46.844451 2026] [:error] [pid 55618:tid 55628] [client 4.205.17.183:16365] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vx.php"] [unique_id "aZ-FNh61Vrh12f_8oWTCawAAAQc"]
[Thu Feb 26 07:26:47.261653 2026] [:error] [pid 55618:tid 55642] [client 4.205.17.183:16284] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZ-FNx61Vrh12f_8oWTCbwAAARU"]
[Thu Feb 26 07:26:47.699094 2026] [:error] [pid 55122:tid 55129] [client 4.205.17.183:16299] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZ-FN4LiR0OfjFxvcN9XiAAAAMU"]
[Thu Feb 26 07:26:48.123350 2026] [:error] [pid 55618:tid 55625] [client 4.205.17.183:16347] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZ-FOB61Vrh12f_8oWTCcgAAAQQ"]
[Thu Feb 26 07:26:48.539219 2026] [:error] [pid 55618:tid 55636] [client 4.205.17.183:16194] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aZ-FOB61Vrh12f_8oWTCdAAAAQ8"]
[Thu Feb 26 07:26:48.953721 2026] [:error] [pid 55618:tid 55633] [client 4.205.17.183:16228] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-FOB61Vrh12f_8oWTCdgAAAQw"]
[Thu Feb 26 07:26:49.374714 2026] [:error] [pid 55618:tid 55629] [client 4.205.17.183:16333] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-FOR61Vrh12f_8oWTCewAAAQg"]
[Thu Feb 26 07:26:49.801896 2026] [:error] [pid 55122:tid 55138] [client 4.205.17.183:16210] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-FOYLiR0OfjFxvcN9XjQAAAM4"]
[Thu Feb 26 07:26:50.216340 2026] [:error] [pid 55122:tid 55133] [client 4.205.17.183:16317] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-FOoLiR0OfjFxvcN9XjgAAAMk"]
[Thu Feb 26 07:26:50.634564 2026] [:error] [pid 54991:tid 55030] [client 4.205.17.183:16358] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZ-FOt4Zx-mJ8gbRB2hQuwAAAEo"]
[Thu Feb 26 07:26:51.049258 2026] [:error] [pid 54991:tid 55023] [client 4.205.17.183:16259] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZ-FO94Zx-mJ8gbRB2hQvAAAAEM"]
[Thu Feb 26 07:26:51.463217 2026] [:error] [pid 54991:tid 55020] [client 4.205.17.183:16377] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZ-FO94Zx-mJ8gbRB2hQvQAAAEA"]
[Thu Feb 26 07:26:51.902957 2026] [:error] [pid 54991:tid 55031] [client 4.205.17.183:16322] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shas.php"] [unique_id "aZ-FO94Zx-mJ8gbRB2hQvwAAAEs"]
[Thu Feb 26 07:26:52.333574 2026] [:error] [pid 54991:tid 55041] [client 4.205.17.183:16371] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZ-FPN4Zx-mJ8gbRB2hQwwAAAFU"]
[Thu Feb 26 07:26:52.892059 2026] [:error] [pid 55618:tid 55636] [client 4.205.17.183:16208] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZ-FPB61Vrh12f_8oWTChgAAAQ8"]
[Thu Feb 26 07:26:53.329728 2026] [:error] [pid 55618:tid 55626] [client 4.205.17.183:16359] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZ-FPR61Vrh12f_8oWTCiAAAAQU"]
[Thu Feb 26 07:26:53.789027 2026] [:error] [pid 55051:tid 55078] [client 4.205.17.183:16198] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aZ-FPQmK1w2kZvh5eLGSZAAAAJg"]
[Thu Feb 26 07:26:54.203275 2026] [:error] [pid 55618:tid 55627] [client 4.205.17.183:16192] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZ-FPh61Vrh12f_8oWTCigAAAQY"]
[Thu Feb 26 07:26:54.622681 2026] [:error] [pid 54991:tid 55036] [client 4.205.17.183:16372] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZ-FPt4Zx-mJ8gbRB2hQxAAAAFA"]
[Thu Feb 26 07:26:55.041841 2026] [:error] [pid 54991:tid 55035] [client 4.205.17.183:16343] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZ-FP94Zx-mJ8gbRB2hQxQAAAE8"]
[Thu Feb 26 07:26:55.456250 2026] [:error] [pid 55122:tid 55133] [client 4.205.17.183:16366] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aZ-FP4LiR0OfjFxvcN9XngAAAMk"]
[Thu Feb 26 07:26:55.872569 2026] [:error] [pid 55122:tid 55145] [client 4.205.17.183:16266] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZ-FP4LiR0OfjFxvcN9XoAAAANU"]
[Thu Feb 26 07:26:56.284237 2026] [:error] [pid 55122:tid 55139] [client 4.205.17.183:16291] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZ-FQILiR0OfjFxvcN9XowAAAM8"]
[Thu Feb 26 07:26:56.696609 2026] [:error] [pid 55618:tid 55639] [client 4.205.17.183:16264] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZ-FQB61Vrh12f_8oWTClQAAARI"]
[Thu Feb 26 07:26:57.112178 2026] [:error] [pid 55618:tid 55624] [client 4.205.17.183:16383] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/er.php"] [unique_id "aZ-FQR61Vrh12f_8oWTCmAAAAQM"]
[Thu Feb 26 07:26:57.532590 2026] [:error] [pid 55618:tid 55633] [client 4.205.17.183:16216] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZ-FQR61Vrh12f_8oWTCmgAAAQw"]
[Thu Feb 26 07:26:57.951942 2026] [:error] [pid 55618:tid 55627] [client 4.205.17.183:16382] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZ-FQR61Vrh12f_8oWTCnAAAAQY"]
[Thu Feb 26 07:26:58.369085 2026] [:error] [pid 54991:tid 55024] [client 4.205.17.183:16260] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZ-FQt4Zx-mJ8gbRB2hQyAAAAEQ"]
[Thu Feb 26 07:26:58.801546 2026] [:error] [pid 54991:tid 55033] [client 4.205.17.183:16269] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fault.php"] [unique_id "aZ-FQt4Zx-mJ8gbRB2hQyQAAAE0"]
[Thu Feb 26 07:26:59.222578 2026] [:error] [pid 54990:tid 55004] [client 4.205.17.183:16278] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZ-FQ3tr2qmt_mBhH2yx9AAAAAs"]
[Thu Feb 26 07:26:59.658542 2026] [:error] [pid 55122:tid 55147] [client 4.205.17.183:16131] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZ-FQ4LiR0OfjFxvcN9XrgAAANc"]
[Thu Feb 26 07:27:00.101541 2026] [:error] [pid 55122:tid 55131] [client 4.205.17.183:16341] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZ-FRILiR0OfjFxvcN9XrwAAAMc"]
[Thu Feb 26 07:27:00.564737 2026] [:error] [pid 54991:tid 55044] [client 4.205.17.183:16267] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aZ-FRN4Zx-mJ8gbRB2hQzAAAAFg"]
[Thu Feb 26 07:27:01.002235 2026] [:error] [pid 54991:tid 55039] [client 4.205.17.183:16303] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZ-FRd4Zx-mJ8gbRB2hQzQAAAFM"]
[Thu Feb 26 07:27:01.430348 2026] [:error] [pid 54991:tid 55030] [client 4.205.17.183:16318] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZ-FRd4Zx-mJ8gbRB2hQzgAAAEo"]
[Thu Feb 26 07:27:01.847073 2026] [:error] [pid 55618:tid 55623] [client 4.205.17.183:16376] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZ-FRR61Vrh12f_8oWTCrAAAAQI"]
[Thu Feb 26 07:27:02.269510 2026] [:error] [pid 55051:tid 55070] [client 4.205.17.183:16324] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aZ-FRgmK1w2kZvh5eLGSggAAAJA"]
[Thu Feb 26 07:27:02.691998 2026] [:error] [pid 55122:tid 55132] [client 4.205.17.183:16258] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZ-FRoLiR0OfjFxvcN9XugAAAMg"]
[Thu Feb 26 07:27:03.106862 2026] [:error] [pid 54991:tid 55031] [client 4.205.17.183:16201] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZ-FR94Zx-mJ8gbRB2hQ0gAAAEs"]
[Thu Feb 26 07:27:03.521034 2026] [:error] [pid 54990:tid 55000] [client 4.205.17.183:16353] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZ-FR3tr2qmt_mBhH2yx_AAAAAc"]
[Thu Feb 26 07:27:03.946737 2026] [:error] [pid 54991:tid 55022] [client 4.205.17.183:16301] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/leuk.php"] [unique_id "aZ-FR94Zx-mJ8gbRB2hQ0wAAAEI"]
[Thu Feb 26 07:27:04.367201 2026] [:error] [pid 55122:tid 55125] [client 4.205.17.183:16337] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZ-FSILiR0OfjFxvcN9XvQAAAME"]
[Thu Feb 26 07:27:04.783735 2026] [:error] [pid 55051:tid 55061] [client 4.205.17.183:16200] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZ-FSAmK1w2kZvh5eLGSiwAAAIc"]
[Thu Feb 26 07:27:05.200073 2026] [:error] [pid 55051:tid 55063] [client 4.205.17.183:16342] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZ-FSQmK1w2kZvh5eLGSjQAAAIk"]
[Thu Feb 26 07:27:05.617539 2026] [:error] [pid 54991:tid 55029] [client 4.205.17.183:16281] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aZ-FSd4Zx-mJ8gbRB2hQ1QAAAEk"]
[Thu Feb 26 07:27:06.031210 2026] [:error] [pid 55122:tid 55130] [client 4.205.17.183:16313] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aZ-FSoLiR0OfjFxvcN9XwQAAAMY"]
[Thu Feb 26 07:27:06.443723 2026] [:error] [pid 55051:tid 55057] [client 4.205.17.183:16279] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aZ-FSgmK1w2kZvh5eLGSkQAAAIM"]
[Thu Feb 26 07:27:06.858687 2026] [:error] [pid 55122:tid 55143] [client 4.205.17.183:16316] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aZ-FSoLiR0OfjFxvcN9XyAAAANM"]
[Thu Feb 26 07:27:07.274705 2026] [:error] [pid 54991:tid 55035] [client 4.205.17.183:16213] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kolda.php"] [unique_id "aZ-FS94Zx-mJ8gbRB2hQ1gAAAE8"]
[Thu Feb 26 07:27:07.690432 2026] [:error] [pid 54991:tid 55027] [client 4.205.17.183:16218] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aZ-FS94Zx-mJ8gbRB2hQ2AAAAEc"]
[Thu Feb 26 07:27:08.108704 2026] [:error] [pid 55618:tid 55639] [client 4.205.17.183:16146] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aZ-FTB61Vrh12f_8oWTCuAAAARI"]
[Thu Feb 26 07:27:08.529221 2026] [:error] [pid 55618:tid 55637] [client 4.205.17.183:16288] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aZ-FTB61Vrh12f_8oWTCvQAAARA"]
[Thu Feb 26 07:27:08.948044 2026] [:error] [pid 54990:tid 55001] [client 4.205.17.183:16205] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "aZ-FTHtr2qmt_mBhH2yyBAAAAAg"]
[Thu Feb 26 07:27:09.363838 2026] [:error] [pid 55618:tid 55621] [client 4.205.17.183:16364] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aZ-FTR61Vrh12f_8oWTCwAAAAQA"]
[Thu Feb 26 07:27:09.776990 2026] [:error] [pid 55618:tid 55641] [client 4.205.17.183:16220] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aZ-FTR61Vrh12f_8oWTCwgAAARQ"]
[Thu Feb 26 07:27:10.195736 2026] [:error] [pid 54991:tid 55042] [client 4.205.17.183:16234] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aZ-FTt4Zx-mJ8gbRB2hQ2QAAAFY"]
[Thu Feb 26 07:27:10.617311 2026] [:error] [pid 55618:tid 55640] [client 4.205.17.183:16379] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aZ-FTh61Vrh12f_8oWTCxQAAARM"]
[Thu Feb 26 07:27:11.050301 2026] [:error] [pid 55618:tid 55643] [client 4.205.17.183:16340] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aZ-FTx61Vrh12f_8oWTCxwAAARY"]
[Thu Feb 26 07:27:11.473087 2026] [:error] [pid 55618:tid 55638] [client 4.205.17.183:16225] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aZ-FTx61Vrh12f_8oWTCyQAAARE"]
[Thu Feb 26 07:27:11.890504 2026] [:error] [pid 55618:tid 55626] [client 4.205.17.183:16238] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aZ-FTx61Vrh12f_8oWTCzAAAAQU"]
[Thu Feb 26 07:27:12.304579 2026] [:error] [pid 55618:tid 55628] [client 4.205.17.183:16243] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aZ-FUB61Vrh12f_8oWTCzwAAAQc"]
[Thu Feb 26 07:27:12.716545 2026] [:error] [pid 55051:tid 55067] [client 4.205.17.183:16239] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aZ-FUAmK1w2kZvh5eLGSowAAAI0"]
[Thu Feb 26 07:27:13.133229 2026] [:error] [pid 55122:tid 55131] [client 4.205.17.183:16304] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aZ-FUYLiR0OfjFxvcN9X2wAAAMc"]
[Thu Feb 26 07:27:13.550142 2026] [:error] [pid 55122:tid 55141] [client 4.205.17.183:16290] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aZ-FUYLiR0OfjFxvcN9X3QAAANE"]
[Thu Feb 26 07:27:13.975444 2026] [:error] [pid 55051:tid 55066] [client 4.205.17.183:16311] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aZ-FUQmK1w2kZvh5eLGSqAAAAIw"]
[Thu Feb 26 07:27:14.389048 2026] [:error] [pid 54991:tid 55033] [client 4.205.17.183:16144] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aZ-FUt4Zx-mJ8gbRB2hQ3AAAAE0"]
[Thu Feb 26 07:27:14.802134 2026] [:error] [pid 55051:tid 55064] [client 4.205.17.183:16306] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aZ-FUgmK1w2kZvh5eLGSrgAAAIo"]
[Thu Feb 26 07:27:15.226788 2026] [:error] [pid 54991:tid 55038] [client 4.205.17.183:16320] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aZ-FU94Zx-mJ8gbRB2hQ3QAAAFI"]
[Thu Feb 26 07:27:15.641290 2026] [:error] [pid 55618:tid 55635] [client 4.205.17.183:16308] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/un.php"] [unique_id "aZ-FUx61Vrh12f_8oWTC0wAAAQ4"]
[Thu Feb 26 07:27:16.059634 2026] [:error] [pid 55051:tid 55067] [client 4.205.17.183:16289] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aZ-FVAmK1w2kZvh5eLGSsgAAAI0"]
[Thu Feb 26 07:27:16.487795 2026] [:error] [pid 55618:tid 55625] [client 4.205.17.183:16212] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aZ-FVB61Vrh12f_8oWTC1wAAAQQ"]
[Thu Feb 26 07:27:16.911878 2026] [:error] [pid 55051:tid 55055] [client 4.205.17.183:16248] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aZ-FVAmK1w2kZvh5eLGStAAAAIE"]
[Thu Feb 26 07:27:17.330296 2026] [:error] [pid 55618:tid 55622] [client 4.205.17.183:16295] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aZ-FVR61Vrh12f_8oWTC2QAAAQE"]
[Thu Feb 26 07:27:17.751929 2026] [:error] [pid 55122:tid 55126] [client 4.205.17.183:16314] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aZ-FVYLiR0OfjFxvcN9X5AAAAMI"]
[Thu Feb 26 07:27:18.179190 2026] [:error] [pid 55122:tid 55140] [client 4.205.17.183:16363] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aZ-FVoLiR0OfjFxvcN9X5wAAANA"]
[Thu Feb 26 07:27:18.592185 2026] [:error] [pid 55618:tid 55632] [client 4.205.17.183:16312] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aZ-FVh61Vrh12f_8oWTC3AAAAQs"]
[Thu Feb 26 07:27:19.010925 2026] [:error] [pid 55618:tid 55627] [client 4.205.17.183:16336] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aZ-FVx61Vrh12f_8oWTC4AAAAQY"]
[Thu Feb 26 07:27:19.432869 2026] [:error] [pid 54990:tid 55007] [client 4.205.17.183:16354] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login8.php"] [unique_id "aZ-FV3tr2qmt_mBhH2yyCgAAAA4"]
[Thu Feb 26 07:27:19.862848 2026] [:error] [pid 55051:tid 55061] [client 4.205.17.183:16231] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login8.php"] [unique_id "aZ-FVwmK1w2kZvh5eLGSugAAAIc"]
[Thu Feb 26 07:27:20.275226 2026] [:error] [pid 55618:tid 55643] [client 4.205.17.183:16315] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login8.php"] [unique_id "aZ-FWB61Vrh12f_8oWTC4gAAARY"]
[Thu Feb 26 07:27:20.690959 2026] [:error] [pid 55122:tid 55148] [client 4.205.17.183:16309] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/login8.php"] [unique_id "aZ-FWILiR0OfjFxvcN9X7AAAANg"]
[Thu Feb 26 07:27:21.106505 2026] [:error] [pid 55122:tid 55136] [client 4.205.17.183:16335] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nnyvn.php"] [unique_id "aZ-FWYLiR0OfjFxvcN9X8AAAAMw"]
[Thu Feb 26 07:27:21.522969 2026] [:error] [pid 55122:tid 55137] [client 4.205.17.183:16357] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nnyvn.php"] [unique_id "aZ-FWYLiR0OfjFxvcN9X8gAAAM0"]
[Thu Feb 26 07:27:21.940000 2026] [:error] [pid 55618:tid 55638] [client 4.205.17.183:16227] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nnyvn.php"] [unique_id "aZ-FWR61Vrh12f_8oWTC5QAAARE"]
[Thu Feb 26 07:27:22.358590 2026] [:error] [pid 55618:tid 55637] [client 4.205.17.183:16263] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nnyvn.php"] [unique_id "aZ-FWh61Vrh12f_8oWTC5gAAARA"]
[Thu Feb 26 07:27:22.798104 2026] [:error] [pid 54991:tid 55031] [client 4.205.17.183:16129] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aZ-FWt4Zx-mJ8gbRB2hQ5QAAAEs"]
[Thu Feb 26 07:27:23.222172 2026] [:error] [pid 55618:tid 55628] [client 4.205.17.183:16338] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aZ-FWx61Vrh12f_8oWTC6AAAAQc"]
[Thu Feb 26 07:27:23.648007 2026] [:error] [pid 55618:tid 55623] [client 4.205.17.183:16219] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aZ-FWx61Vrh12f_8oWTC6QAAAQI"]
[Thu Feb 26 07:27:24.062024 2026] [:error] [pid 55618:tid 55624] [client 4.205.17.183:16164] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aZ-FXB61Vrh12f_8oWTC6wAAAQM"]
[Thu Feb 26 07:27:24.476972 2026] [:error] [pid 55618:tid 55633] [client 4.205.17.183:16136] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZ-FXB61Vrh12f_8oWTC7gAAAQw"]
[Thu Feb 26 07:27:24.892752 2026] [:error] [pid 55618:tid 55641] [client 4.205.17.183:16230] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZ-FXB61Vrh12f_8oWTC8QAAARQ"]
[Thu Feb 26 07:27:25.307714 2026] [:error] [pid 55618:tid 55643] [client 4.205.17.183:16329] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZ-FXR61Vrh12f_8oWTC8gAAARY"]
[Thu Feb 26 07:27:25.723169 2026] [:error] [pid 55618:tid 55638] [client 4.205.17.183:16157] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lul.php"] [unique_id "aZ-FXR61Vrh12f_8oWTC9QAAARE"]
[Thu Feb 26 07:27:26.142259 2026] [:error] [pid 54990:tid 55010] [client 4.205.17.183:16191] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZ-FXntr2qmt_mBhH2yyFAAAABE"]
[Thu Feb 26 07:27:26.566383 2026] [:error] [pid 55618:tid 55629] [client 4.205.17.183:16305] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZ-FXh61Vrh12f_8oWTC_gAAAQg"]
[Thu Feb 26 07:27:27.009753 2026] [:error] [pid 55618:tid 55639] [client 4.205.17.183:16196] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZ-FXx61Vrh12f_8oWTDBAAAARI"]
[Thu Feb 26 07:27:27.428319 2026] [:error] [pid 54990:tid 54999] [client 4.205.17.183:16209] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aZ-FX3tr2qmt_mBhH2yyFQAAAAY"]
[Thu Feb 26 07:27:27.855016 2026] [:error] [pid 55618:tid 55631] [client 4.205.17.183:16151] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aZ-FXx61Vrh12f_8oWTDDgAAAQo"]
[Thu Feb 26 07:27:28.317944 2026] [:error] [pid 55122:tid 55131] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Feb 26 07:27:28.533597 2026] [:error] [pid 55122:tid 55125] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/ya.php
[Thu Feb 26 07:27:28.749400 2026] [:error] [pid 55122:tid 55141] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Thu Feb 26 07:27:28.965711 2026] [:error] [pid 55122:tid 55138] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Feb 26 07:27:29.183639 2026] [:error] [pid 55122:tid 55148] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Thu Feb 26 07:27:29.398321 2026] [:error] [pid 55122:tid 55132] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/a1vx.php
[Thu Feb 26 07:27:29.614062 2026] [:error] [pid 55122:tid 55136] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Thu Feb 26 07:27:29.837495 2026] [:error] [pid 55122:tid 55142] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu Feb 26 07:27:30.053055 2026] [:error] [pid 55122:tid 55137] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Thu Feb 26 07:27:30.267898 2026] [:error] [pid 55122:tid 55143] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Feb 26 07:27:30.483076 2026] [:error] [pid 55122:tid 55134] [client 4.205.17.183:16350] File does not exist: /usr/local/apache/htdocs/suspended-page/fot.php
[Thu Feb 26 07:27:30.695653 2026] [:error] [pid 55122:tid 55127] [client 4.205.17.183:16350] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZ-FYoLiR0OfjFxvcN9YBwAAAMM"]
[Thu Feb 26 07:27:31.116627 2026] [:error] [pid 54991:tid 55020] [client 4.205.17.183:16296] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZ-FY94Zx-mJ8gbRB2hQ9AAAAEA"]
[Thu Feb 26 07:27:31.528637 2026] [:error] [pid 55618:tid 55629] [client 4.205.17.183:16232] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZ-FYx61Vrh12f_8oWTDJAAAAQg"]
[Thu Feb 26 07:27:31.944291 2026] [:error] [pid 55618:tid 55635] [client 4.205.17.183:16319] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aZ-FYx61Vrh12f_8oWTDJwAAAQ4"]
[Thu Feb 26 07:27:32.372229 2026] [:error] [pid 55618:tid 55643] [client 4.205.17.183:16249] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZ-FZB61Vrh12f_8oWTDKgAAARY"]
[Thu Feb 26 07:27:32.793595 2026] [:error] [pid 55618:tid 55625] [client 4.205.17.183:16246] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZ-FZB61Vrh12f_8oWTDMAAAAQQ"]
[Thu Feb 26 07:27:33.211465 2026] [:error] [pid 55051:tid 55072] [client 4.205.17.183:16285] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZ-FZQmK1w2kZvh5eLGSyQAAAJI"]
[Thu Feb 26 07:27:33.636740 2026] [:error] [pid 55618:tid 55626] [client 4.205.17.183:16169] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aZ-FZR61Vrh12f_8oWTDOAAAAQU"]
[Thu Feb 26 07:27:34.055745 2026] [:error] [pid 55618:tid 55641] [client 4.205.17.183:16217] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZ-FZh61Vrh12f_8oWTDPAAAARQ"]
[Thu Feb 26 07:27:34.471624 2026] [:error] [pid 54990:tid 55014] [client 4.205.17.183:16158] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZ-FZntr2qmt_mBhH2yyHgAAABU"]
[Thu Feb 26 07:27:34.884131 2026] [:error] [pid 54990:tid 55013] [client 4.205.17.183:16185] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZ-FZntr2qmt_mBhH2yyHwAAABQ"]
[Thu Feb 26 07:27:35.302910 2026] [:error] [pid 55051:tid 55077] [client 4.205.17.183:16199] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aZ-FZwmK1w2kZvh5eLGS1QAAAJc"]
[Thu Feb 26 07:27:35.737219 2026] [:error] [pid 55051:tid 55060] [client 4.205.17.183:16193] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aZ-FZwmK1w2kZvh5eLGS2gAAAIY"]
[Thu Feb 26 07:27:36.150571 2026] [:error] [pid 55122:tid 55126] [client 4.205.17.183:16250] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aZ-FaILiR0OfjFxvcN9YCAAAAMI"]
[Thu Feb 26 07:27:36.563167 2026] [:error] [pid 55051:tid 55070] [client 4.205.17.183:16262] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aZ-FaAmK1w2kZvh5eLGS3QAAAJA"]
[Thu Feb 26 07:27:36.979494 2026] [:error] [pid 55618:tid 55641] [client 4.205.17.183:16148] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aZ-FaB61Vrh12f_8oWTDTwAAARQ"]
[Thu Feb 26 07:27:37.395464 2026] [:error] [pid 55051:tid 55069] [client 4.205.17.183:16224] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aZ-FaQmK1w2kZvh5eLGS3gAAAI8"]
[Thu Feb 26 07:27:37.818025 2026] [:error] [pid 54991:tid 55042] [client 4.205.17.183:16226] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aZ-Fad4Zx-mJ8gbRB2hQ-wAAAFY"]
[Thu Feb 26 07:27:38.253177 2026] [:error] [pid 55618:tid 55635] [client 4.205.17.183:16304] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aZ-Fah61Vrh12f_8oWTDVgAAAQ4"]
[Thu Feb 26 07:27:38.678871 2026] [:error] [pid 55618:tid 55623] [client 4.205.17.183:16253] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aZ-Fah61Vrh12f_8oWTDWQAAAQI"]
[Thu Feb 26 07:27:39.101844 2026] [:error] [pid 55618:tid 55627] [client 4.205.17.183:16344] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aZ-Fax61Vrh12f_8oWTDXQAAAQY"]
[Thu Feb 26 07:27:39.513243 2026] [:error] [pid 55122:tid 55133] [client 4.205.17.183:16297] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aZ-Fa4LiR0OfjFxvcN9YCQAAAMk"]
[Thu Feb 26 07:27:39.926669 2026] [:error] [pid 55618:tid 55636] [client 4.205.17.183:16235] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aZ-Fax61Vrh12f_8oWTDZwAAAQ8"]
[Thu Feb 26 07:27:40.340226 2026] [:error] [pid 54991:tid 55034] [client 4.205.17.183:16270] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aZ-FbN4Zx-mJ8gbRB2hQ_gAAAE4"]
[Thu Feb 26 07:58:36.492367 2026] [:error] [pid 3883:tid 3895] [client 43.135.133.194:49626] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ-MrOA33x90V6yYHaiLuAAAAUk"]
[Thu Feb 26 08:12:56.165996 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Thu Feb 26 08:12:56.379696 2026] [:error] [pid 3883:tid 3896] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Feb 26 08:12:56.834136 2026] [:error] [pid 3883:tid 3892] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Thu Feb 26 08:12:57.053155 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Thu Feb 26 08:12:57.266603 2026] [:error] [pid 3883:tid 3905] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 26 08:12:57.483283 2026] [:error] [pid 3883:tid 3906] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Thu Feb 26 08:12:57.696813 2026] [:error] [pid 3883:tid 3903] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Thu Feb 26 08:12:58.170290 2026] [:error] [pid 3883:tid 3894] [client 40.85.216.247:47538] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Thu Feb 26 08:12:58.379870 2026] [:error] [pid 3883:tid 3896] [client 40.85.216.247:47538] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aZ-QCuA33x90V6yYHaiUYQAAAUo"]
[Thu Feb 26 08:12:59.669672 2026] [:error] [pid 55051:tid 55059] [client 40.85.216.247:31012] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aZ-QCwmK1w2kZvh5eLGhwgAAAIU"]
[Thu Feb 26 08:13:01.041363 2026] [:error] [pid 55122:tid 55129] [client 40.85.216.247:31015] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aZ-QDYLiR0OfjFxvcN9oZAAAAMU"]
[Thu Feb 26 08:13:02.871007 2026] [:error] [pid 3883:tid 3898] [client 40.85.216.247:31020] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx1.php"] [unique_id "aZ-QDuA33x90V6yYHaiUeAAAAUw"]
[Thu Feb 26 08:13:05.799537 2026] [:error] [pid 55618:tid 55632] [client 40.85.216.247:31007] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aZ-QER61Vrh12f_8oWTeMAAAAQs"]
[Thu Feb 26 08:13:06.855438 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:47475] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aZ-QEuA33x90V6yYHaiUnAAAAUI"]
[Thu Feb 26 08:13:08.954829 2026] [:error] [pid 55051:tid 55057] [client 40.85.216.247:31027] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aZ-QFAmK1w2kZvh5eLGh2QAAAIM"]
[Thu Feb 26 08:13:09.921911 2026] [:error] [pid 3883:tid 3892] [client 40.85.216.247:47472] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv.php"] [unique_id "aZ-QFeA33x90V6yYHaiUpwAAAUY"]
[Thu Feb 26 08:13:11.774045 2026] [:error] [pid 54990:tid 55002] [client 40.85.216.247:52458] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aZ-QF3tr2qmt_mBhH2y5lAAAAAk"]
[Thu Feb 26 08:13:13.570795 2026] [:error] [pid 3883:tid 3903] [client 40.85.216.247:52432] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aZ-QGeA33x90V6yYHaiUrQAAAVE"]
[Thu Feb 26 08:13:14.886478 2026] [:error] [pid 55618:tid 55625] [client 40.85.216.247:47520] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aZ-QGh61Vrh12f_8oWTeMwAAAQQ"]
[Thu Feb 26 08:13:16.508568 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:31004] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x56.php"] [unique_id "aZ-QHOA33x90V6yYHaiUugAAAUA"]
[Thu Feb 26 08:13:17.966519 2026] [:error] [pid 55051:tid 55057] [client 40.85.216.247:30982] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aZ-QHQmK1w2kZvh5eLGh6gAAAIM"]
[Thu Feb 26 08:13:19.342066 2026] [:error] [pid 54990:tid 55014] [client 40.85.216.247:47427] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aZ-QH3tr2qmt_mBhH2y5mQAAABU"]
[Thu Feb 26 08:13:20.477171 2026] [:error] [pid 54990:tid 55013] [client 40.85.216.247:47449] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aZ-QIHtr2qmt_mBhH2y5nAAAABQ"]
[Thu Feb 26 08:13:21.515863 2026] [:error] [pid 54990:tid 55006] [client 40.85.216.247:47486] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/htaccess.php"] [unique_id "aZ-QIXtr2qmt_mBhH2y5nQAAAA0"]
[Thu Feb 26 08:13:22.235860 2026] [:error] [pid 55051:tid 55056] [client 40.85.216.247:52430] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ-QIgmK1w2kZvh5eLGh8gAAAII"]
[Thu Feb 26 08:13:23.181318 2026] [:error] [pid 55051:tid 55071] [client 40.85.216.247:47509] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ-QIwmK1w2kZvh5eLGh_gAAAJE"]
[Thu Feb 26 08:13:24.832801 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:52421] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ-QJOA33x90V6yYHaiU9QAAAUM"]
[Thu Feb 26 08:13:27.544744 2026] [:error] [pid 55618:tid 55626] [client 40.85.216.247:47431] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/readme.php"] [unique_id "aZ-QJx61Vrh12f_8oWTeXAAAAQU"]
[Thu Feb 26 08:13:28.439884 2026] [:error] [pid 54991:tid 55031] [client 40.85.216.247:52459] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aZ-QKN4Zx-mJ8gbRB2hboAAAAEs"]
[Thu Feb 26 08:13:29.390492 2026] [:error] [pid 55618:tid 55639] [client 40.85.216.247:31002] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aZ-QKR61Vrh12f_8oWTeYAAAARI"]
[Thu Feb 26 08:13:30.659434 2026] [:error] [pid 54991:tid 55022] [client 40.85.216.247:47457] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aZ-QKt4Zx-mJ8gbRB2hboQAAAEI"]
[Thu Feb 26 08:13:31.736917 2026] [:error] [pid 55618:tid 55640] [client 40.85.216.247:52732] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x50.php"] [unique_id "aZ-QKx61Vrh12f_8oWTeYwAAARM"]
[Thu Feb 26 08:13:32.960511 2026] [:error] [pid 55122:tid 55133] [client 40.85.216.247:30988] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aZ-QLILiR0OfjFxvcN9ohQAAAMk"]
[Thu Feb 26 08:13:34.365026 2026] [:error] [pid 55051:tid 55055] [client 40.85.216.247:47542] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aZ-QLgmK1w2kZvh5eLGiBwAAAIE"]
[Thu Feb 26 08:13:35.784759 2026] [:error] [pid 55122:tid 55142] [client 40.85.216.247:31016] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aZ-QL4LiR0OfjFxvcN9ojAAAANI"]
[Thu Feb 26 08:13:37.630187 2026] [:error] [pid 55618:tid 55625] [client 40.85.216.247:52419] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fv.php"] [unique_id "aZ-QMR61Vrh12f_8oWTebgAAAQQ"]
[Thu Feb 26 08:13:38.529978 2026] [:error] [pid 55122:tid 55146] [client 40.85.216.247:47455] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ-QMoLiR0OfjFxvcN9olwAAANY"]
[Thu Feb 26 08:13:39.694185 2026] [:error] [pid 55618:tid 55631] [client 40.85.216.247:47544] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ-QMx61Vrh12f_8oWTedQAAAQo"]
[Thu Feb 26 08:13:41.286179 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:47503] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ-QNeA33x90V6yYHaiVNgAAAU8"]
[Thu Feb 26 08:13:42.315191 2026] [:error] [pid 3883:tid 3905] [client 40.85.216.247:47500] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aZ-QNuA33x90V6yYHaiVOgAAAVM"]
[Thu Feb 26 08:13:45.882703 2026] [:error] [pid 55122:tid 55129] [client 40.85.216.247:47473] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aZ-QOYLiR0OfjFxvcN9ooQAAAMU"]
[Thu Feb 26 08:13:48.172753 2026] [:error] [pid 55122:tid 55132] [client 40.85.216.247:31013] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aZ-QPILiR0OfjFxvcN9oqAAAAMg"]
[Thu Feb 26 08:13:49.396094 2026] [:error] [pid 54991:tid 55021] [client 40.85.216.247:30984] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aZ-QPd4Zx-mJ8gbRB2hbrwAAAEE"]
[Thu Feb 26 08:13:51.027935 2026] [:error] [pid 3883:tid 3905] [client 40.85.216.247:52472] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lsd.php"] [unique_id "aZ-QP-A33x90V6yYHaiVRwAAAVM"]
[Thu Feb 26 08:13:51.854061 2026] [:error] [pid 55122:tid 55148] [client 40.85.216.247:31023] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ-QP4LiR0OfjFxvcN9orQAAANg"]
[Thu Feb 26 08:13:53.290406 2026] [:error] [pid 3883:tid 3909] [client 40.85.216.247:52451] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ-QQeA33x90V6yYHaiVSgAAAVc"]
[Thu Feb 26 08:13:54.095280 2026] [:error] [pid 55122:tid 55130] [client 40.85.216.247:47513] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ-QQoLiR0OfjFxvcN9osgAAAMY"]
[Thu Feb 26 08:13:55.190659 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:31022] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aZ-QQ-A33x90V6yYHaiVTQAAAUI"]
[Thu Feb 26 08:13:56.019520 2026] [:error] [pid 55122:tid 55139] [client 40.85.216.247:47515] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aZ-QRILiR0OfjFxvcN9ovgAAAM8"]
[Thu Feb 26 08:13:56.859919 2026] [:error] [pid 55618:tid 55634] [client 40.85.216.247:47429] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aZ-QRB61Vrh12f_8oWTepQAAAQ0"]
[Thu Feb 26 08:13:57.881694 2026] [:error] [pid 55122:tid 55129] [client 40.85.216.247:47485] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsd.php"] [unique_id "aZ-QRYLiR0OfjFxvcN9oyAAAAMU"]
[Thu Feb 26 08:13:59.256951 2026] [:error] [pid 3883:tid 3897] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Thu Feb 26 08:13:59.466974 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Thu Feb 26 08:13:59.677575 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Thu Feb 26 08:14:01.391231 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Thu Feb 26 08:14:01.601300 2026] [:error] [pid 3883:tid 3893] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Thu Feb 26 08:14:01.814404 2026] [:error] [pid 3883:tid 3906] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Thu Feb 26 08:14:02.144067 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 26 08:14:02.776688 2026] [:error] [pid 3883:tid 3910] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Feb 26 08:14:03.397352 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:47425] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Feb 26 08:14:03.617004 2026] [:error] [pid 3883:tid 3892] [client 40.85.216.247:47425] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aZ-QS-A33x90V6yYHaiVZwAAAUY"]
[Thu Feb 26 08:14:04.874664 2026] [:error] [pid 3883:tid 3905] [client 40.85.216.247:52479] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aZ-QTOA33x90V6yYHaiVbAAAAVM"]
[Thu Feb 26 08:14:05.794652 2026] [:error] [pid 3883:tid 3908] [client 40.85.216.247:31018] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aZ-QTeA33x90V6yYHaiVjwAAAVY"]
[Thu Feb 26 08:14:07.125146 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:52460] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aZ-QT-A33x90V6yYHaiVmgAAAUA"]
[Thu Feb 26 08:14:08.445280 2026] [:error] [pid 55618:tid 55623] [client 40.85.216.247:47299] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ-QUB61Vrh12f_8oWTeuQAAAQI"]
[Thu Feb 26 08:14:09.485750 2026] [:error] [pid 54991:tid 55030] [client 40.85.216.247:30997] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ-QUd4Zx-mJ8gbRB2hbtQAAAEo"]
[Thu Feb 26 08:14:10.682144 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:53331] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ-QUuA33x90V6yYHaiVrgAAAUU"]
[Thu Feb 26 08:14:12.075656 2026] [:error] [pid 55122:tid 55133] [client 40.85.216.247:47434] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aZ-QVILiR0OfjFxvcN9o2QAAAMk"]
[Thu Feb 26 08:14:13.152402 2026] [:error] [pid 55122:tid 55130] [client 40.85.216.247:31035] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-QVYLiR0OfjFxvcN9o3wAAAMY"]
[Thu Feb 26 08:14:15.117599 2026] [:error] [pid 54990:tid 55006] [client 40.85.216.247:47466] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-QV3tr2qmt_mBhH2y5wgAAAA0"]
[Thu Feb 26 08:14:16.225674 2026] [:error] [pid 55122:tid 55147] [client 40.85.216.247:47536] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-QWILiR0OfjFxvcN9o6QAAANc"]
[Thu Feb 26 08:14:16.998866 2026] [:error] [pid 55122:tid 55131] [client 40.85.216.247:52448] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-QWILiR0OfjFxvcN9o7AAAAMc"]
[Thu Feb 26 08:14:18.376191 2026] [:error] [pid 55122:tid 55135] [client 40.85.216.247:52675] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QWoLiR0OfjFxvcN9o8QAAAMs"]
[Thu Feb 26 08:14:19.445824 2026] [:error] [pid 55122:tid 55147] [client 40.85.216.247:31024] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QW4LiR0OfjFxvcN9o9gAAANc"]
[Thu Feb 26 08:14:20.522146 2026] [:error] [pid 55122:tid 55130] [client 40.85.216.247:52690] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QXILiR0OfjFxvcN9o_wAAAMY"]
[Thu Feb 26 08:14:21.307701 2026] [:error] [pid 55122:tid 55138] [client 40.85.216.247:47456] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QXYLiR0OfjFxvcN9pAwAAAM4"]
[Thu Feb 26 08:14:22.432510 2026] [:error] [pid 54990:tid 54995] [client 40.85.216.247:47537] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ-QXntr2qmt_mBhH2y5wwAAAAI"]
[Thu Feb 26 08:14:23.916139 2026] [:error] [pid 55051:tid 55064] [client 40.85.216.247:47490] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QXwmK1w2kZvh5eLGiLgAAAIo"]
[Thu Feb 26 08:14:24.964645 2026] [:error] [pid 55618:tid 55632] [client 40.85.216.247:31026] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QYB61Vrh12f_8oWTe5QAAAQs"]
[Thu Feb 26 08:14:25.946913 2026] [:error] [pid 55618:tid 55633] [client 40.85.216.247:52455] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QYR61Vrh12f_8oWTe6gAAAQw"]
[Thu Feb 26 08:14:26.929480 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:52463] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aZ-QYuA33x90V6yYHaiVwwAAAUQ"]
[Thu Feb 26 08:14:29.165916 2026] [:error] [pid 55122:tid 55146] [client 40.85.216.247:47452] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aZ-QZYLiR0OfjFxvcN9pCwAAANY"]
[Thu Feb 26 08:14:31.872691 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:53357] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aZ-QZ-A33x90V6yYHaiV-gAAAUU"]
[Thu Feb 26 08:14:33.477896 2026] [:error] [pid 55122:tid 55135] [client 40.85.216.247:30987] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aZ-QaYLiR0OfjFxvcN9pEAAAAMs"]
[Thu Feb 26 08:14:35.203615 2026] [:error] [pid 3883:tid 3904] [client 40.85.216.247:47342] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aZ-Qa-A33x90V6yYHaiWCwAAAVI"]
[Thu Feb 26 08:14:36.315812 2026] [:error] [pid 55618:tid 55643] [client 40.85.216.247:47549] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-QbB61Vrh12f_8oWTe9gAAARY"]
[Thu Feb 26 08:14:37.300023 2026] [:error] [pid 3883:tid 3893] [client 40.85.216.247:47306] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-QbeA33x90V6yYHaiWDwAAAUc"]
[Thu Feb 26 08:14:38.989472 2026] [:error] [pid 55122:tid 55134] [client 40.85.216.247:47458] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-QboLiR0OfjFxvcN9pFgAAAMo"]
[Thu Feb 26 08:14:40.082096 2026] [:error] [pid 55122:tid 55132] [client 40.85.216.247:47477] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-QcILiR0OfjFxvcN9pGQAAAMg"]
[Thu Feb 26 08:14:41.261852 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:31019] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ-QcR61Vrh12f_8oWTe_gAAAQA"]
[Thu Feb 26 08:14:42.738273 2026] [:error] [pid 55051:tid 55074] [client 40.85.216.247:47537] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ-QcgmK1w2kZvh5eLGiUwAAAJQ"]
[Thu Feb 26 08:14:43.833794 2026] [:error] [pid 55051:tid 55072] [client 40.85.216.247:47442] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ-QcwmK1w2kZvh5eLGiVAAAAJI"]
[Thu Feb 26 08:14:45.372449 2026] [:error] [pid 3883:tid 3906] [client 40.85.216.247:47478] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aZ-QdeA33x90V6yYHaiWIQAAAVQ"]
[Thu Feb 26 08:14:46.585938 2026] [:error] [pid 55618:tid 55623] [client 40.85.216.247:47531] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ-Qdh61Vrh12f_8oWTfCAAAAQI"]
[Thu Feb 26 08:14:47.932222 2026] [:error] [pid 55122:tid 55124] [client 40.85.216.247:47548] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ-Qd4LiR0OfjFxvcN9pHgAAAMA"]
[Thu Feb 26 08:14:48.794603 2026] [:error] [pid 55618:tid 55642] [client 40.85.216.247:52457] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ-QeB61Vrh12f_8oWTfEQAAARU"]
[Thu Feb 26 08:14:49.649062 2026] [:error] [pid 55051:tid 55059] [client 40.85.216.247:47474] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0x.php"] [unique_id "aZ-QeQmK1w2kZvh5eLGiWQAAAIU"]
[Thu Feb 26 08:14:50.198231 2026] [:error] [pid 55618:tid 55641] [client 40.85.216.247:47518] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-Qeh61Vrh12f_8oWTfGAAAARQ"]
[Thu Feb 26 08:14:51.183746 2026] [:error] [pid 55618:tid 55622] [client 40.85.216.247:47501] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-Qex61Vrh12f_8oWTfHAAAAQE"]
[Thu Feb 26 08:14:52.189405 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:52418] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-QfOA33x90V6yYHaiWJgAAAUA"]
[Thu Feb 26 08:14:53.389935 2026] [:error] [pid 3883:tid 3892] [client 40.85.216.247:31031] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aZ-QfeA33x90V6yYHaiWLAAAAUY"]
[Thu Feb 26 08:14:54.869003 2026] [:error] [pid 55051:tid 55073] [client 40.85.216.247:47488] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ-QfgmK1w2kZvh5eLGiYQAAAJM"]
[Thu Feb 26 08:14:55.989555 2026] [:error] [pid 55618:tid 55630] [client 40.85.216.247:53322] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ-Qfx61Vrh12f_8oWTfJQAAAQk"]
[Thu Feb 26 08:14:57.482635 2026] [:error] [pid 54991:tid 55026] [client 40.85.216.247:52427] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ-Qgd4Zx-mJ8gbRB2hcAwAAAEY"]
[Thu Feb 26 08:14:59.140812 2026] [:error] [pid 3883:tid 3893] [client 40.85.216.247:47445] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aZ-Qg-A33x90V6yYHaiWNwAAAUc"]
[Thu Feb 26 08:15:01.104406 2026] [:error] [pid 55618:tid 55631] [client 40.85.216.247:47506] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aZ-QhR61Vrh12f_8oWTfKAAAAQo"]
[Thu Feb 26 08:15:02.161902 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:47507] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aZ-QhuA33x90V6yYHaiWQQAAAUk"]
[Thu Feb 26 08:15:04.613288 2026] [:error] [pid 3883:tid 3905] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 26 08:15:05.033802 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Feb 26 08:15:05.244306 2026] [:error] [pid 3883:tid 3897] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Feb 26 08:15:05.454238 2026] [:error] [pid 3883:tid 3903] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Feb 26 08:15:05.664159 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Feb 26 08:15:05.874302 2026] [:error] [pid 3883:tid 3892] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 26 08:15:06.092004 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:31017] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 26 08:15:06.727622 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:31017] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ-QiuA33x90V6yYHaiWYAAAAU8"]
[Thu Feb 26 08:15:08.155696 2026] [:error] [pid 55051:tid 55056] [client 40.85.216.247:30990] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ-QjAmK1w2kZvh5eLGibQAAAII"]
[Thu Feb 26 08:15:10.499857 2026] [:error] [pid 54991:tid 55037] [client 40.85.216.247:47436] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ-Qjt4Zx-mJ8gbRB2hcCAAAAFE"]
[Thu Feb 26 08:15:12.304761 2026] [:error] [pid 55122:tid 55125] [client 40.85.216.247:31025] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ-QkILiR0OfjFxvcN9pLAAAAME"]
[Thu Feb 26 08:15:13.276721 2026] [:error] [pid 3883:tid 3906] [client 40.85.216.247:52447] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ-QkeA33x90V6yYHaiWZAAAAVQ"]
[Thu Feb 26 08:15:14.419300 2026] [:error] [pid 54990:tid 55004] [client 40.85.216.247:47462] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ-Qkntr2qmt_mBhH2y6GQAAAAs"]
[Thu Feb 26 08:15:15.390677 2026] [:error] [pid 55122:tid 55124] [client 40.85.216.247:31030] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ-Qk4LiR0OfjFxvcN9pLgAAAMA"]
[Thu Feb 26 08:15:16.461324 2026] [:error] [pid 55618:tid 55635] [client 40.85.216.247:47484] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ-QlB61Vrh12f_8oWTfLQAAAQ4"]
[Thu Feb 26 08:15:17.593320 2026] [:error] [pid 55618:tid 55639] [client 40.85.216.247:53323] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ-QlR61Vrh12f_8oWTfLwAAARI"]
[Thu Feb 26 08:15:18.444866 2026] [:error] [pid 55051:tid 55077] [client 40.85.216.247:47487] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ-QlgmK1w2kZvh5eLGicwAAAJc"]
[Thu Feb 26 08:15:20.284739 2026] [:error] [pid 55051:tid 55072] [client 40.85.216.247:52423] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ-QmAmK1w2kZvh5eLGidQAAAJI"]
[Thu Feb 26 08:15:20.399575 2026] [:error] [pid 55051:tid 55075] [client 43.130.3.122:57994] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ-QmAmK1w2kZvh5eLGidgAAAJU"]
[Thu Feb 26 08:15:21.372652 2026] [:error] [pid 55618:tid 55632] [client 40.85.216.247:47439] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aZ-QmR61Vrh12f_8oWTfMQAAAQs"]
[Thu Feb 26 08:15:22.443576 2026] [:error] [pid 55051:tid 55061] [client 40.85.216.247:47550] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ-QmgmK1w2kZvh5eLGiewAAAIc"]
[Thu Feb 26 08:15:23.293541 2026] [:error] [pid 55051:tid 55060] [client 40.85.216.247:53344] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ-QmwmK1w2kZvh5eLGifgAAAIY"]
[Thu Feb 26 08:15:24.543990 2026] [:error] [pid 55122:tid 55132] [client 40.85.216.247:47468] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ-QnILiR0OfjFxvcN9pOQAAAMg"]
[Thu Feb 26 08:15:25.535550 2026] [:error] [pid 55122:tid 55124] [client 40.85.216.247:30976] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aZ-QnYLiR0OfjFxvcN9pPQAAAMA"]
[Thu Feb 26 08:15:26.442279 2026] [:error] [pid 54990:tid 54994] [client 40.85.216.247:47489] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aZ-Qnntr2qmt_mBhH2y6HQAAAAE"]
[Thu Feb 26 08:15:28.404174 2026] [:error] [pid 55618:tid 55625] [client 40.85.216.247:47476] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aZ-QoB61Vrh12f_8oWTfPQAAAQQ"]
[Thu Feb 26 08:15:29.265373 2026] [:error] [pid 55122:tid 55130] [client 40.85.216.247:52438] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aZ-QoYLiR0OfjFxvcN9pQgAAAMY"]
[Thu Feb 26 08:15:30.026795 2026] [:error] [pid 55122:tid 55146] [client 40.85.216.247:53316] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aZ-QooLiR0OfjFxvcN9pQwAAANY"]
[Thu Feb 26 08:15:30.720178 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:47105] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-QouA33x90V6yYHaiWbAAAAUE"]
[Thu Feb 26 08:15:31.781915 2026] [:error] [pid 3883:tid 3907] [client 40.85.216.247:47545] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-Qo-A33x90V6yYHaiWcAAAAVU"]
[Thu Feb 26 08:15:32.947283 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:47467] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-QpOA33x90V6yYHaiWdQAAAUk"]
[Thu Feb 26 08:15:34.094255 2026] [:error] [pid 55618:tid 55629] [client 40.85.216.247:47470] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aZ-Qph61Vrh12f_8oWTfRAAAAQg"]
[Thu Feb 26 08:15:35.812340 2026] [:error] [pid 55051:tid 55077] [client 40.85.216.247:47517] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aZ-QpwmK1w2kZvh5eLGivQAAAJc"]
[Thu Feb 26 08:15:37.576449 2026] [:error] [pid 55122:tid 55144] [client 40.85.216.247:31001] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aZ-QqYLiR0OfjFxvcN9pSAAAANQ"]
[Thu Feb 26 08:15:40.024964 2026] [:error] [pid 55618:tid 55639] [client 40.85.216.247:52453] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aZ-QrB61Vrh12f_8oWTfUwAAARI"]
[Thu Feb 26 08:15:40.634864 2026] [:error] [pid 55122:tid 55147] [client 40.85.216.247:52426] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mail.php"] [unique_id "aZ-QrILiR0OfjFxvcN9pTQAAANc"]
[Thu Feb 26 08:15:41.253990 2026] [:error] [pid 55618:tid 55628] [client 40.85.216.247:31005] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-QrR61Vrh12f_8oWTfWgAAAQc"]
[Thu Feb 26 08:15:41.927427 2026] [:error] [pid 55122:tid 55148] [client 40.85.216.247:52712] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-QrYLiR0OfjFxvcN9pUQAAANg"]
[Thu Feb 26 08:15:42.547185 2026] [:error] [pid 55618:tid 55637] [client 40.85.216.247:53320] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-Qrh61Vrh12f_8oWTfXgAAARA"]
[Thu Feb 26 08:15:43.698437 2026] [:error] [pid 55618:tid 55636] [client 40.85.216.247:52467] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ-Qrx61Vrh12f_8oWTfYQAAAQ8"]
[Thu Feb 26 08:15:44.866426 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:52461] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aZ-QsOA33x90V6yYHaiWhAAAAU8"]
[Thu Feb 26 08:15:45.984683 2026] [:error] [pid 3883:tid 3898] [client 40.85.216.247:47771] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aZ-QseA33x90V6yYHaiWhgAAAUw"]
[Thu Feb 26 08:15:46.766907 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:31034] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aZ-QsuA33x90V6yYHaiWiQAAAUE"]
[Thu Feb 26 08:15:47.871233 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:53314] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aZ-Qs-A33x90V6yYHaiWjAAAAUM"]
[Thu Feb 26 08:15:48.918325 2026] [:error] [pid 55618:tid 55636] [client 40.85.216.247:31000] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ-QtB61Vrh12f_8oWTfcQAAAQ8"]
[Thu Feb 26 08:15:49.684644 2026] [:error] [pid 55122:tid 55129] [client 40.85.216.247:47430] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ-QtYLiR0OfjFxvcN9pYAAAAMU"]
[Thu Feb 26 08:15:50.458306 2026] [:error] [pid 55618:tid 55638] [client 40.85.216.247:53324] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ-Qth61Vrh12f_8oWTfdgAAARE"]
[Thu Feb 26 08:15:51.897339 2026] [:error] [pid 55618:tid 55632] [client 40.85.216.247:30983] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZ-Qtx61Vrh12f_8oWTfegAAAQs"]
[Thu Feb 26 08:15:53.757503 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:31010] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aZ-QueA33x90V6yYHaiWkQAAAU8"]
[Thu Feb 26 08:15:54.416012 2026] [:error] [pid 54991:tid 55038] [client 40.85.216.247:47530] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aZ-Qut4Zx-mJ8gbRB2hcHAAAAFI"]
[Thu Feb 26 08:15:55.491607 2026] [:error] [pid 54991:tid 55026] [client 40.85.216.247:31014] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aZ-Qu94Zx-mJ8gbRB2hcHgAAAEY"]
[Thu Feb 26 08:15:56.407001 2026] [:error] [pid 55618:tid 55638] [client 40.85.216.247:31032] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aZ-QvB61Vrh12f_8oWTfiQAAARE"]
[Thu Feb 26 08:15:57.362239 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:52730] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ-QveA33x90V6yYHaiWmAAAAUM"]
[Thu Feb 26 08:15:58.429134 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:53336] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ-QvuA33x90V6yYHaiWmgAAAUI"]
[Thu Feb 26 08:15:59.380197 2026] [:error] [pid 3883:tid 3910] [client 40.85.216.247:47471] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ-Qv-A33x90V6yYHaiWnAAAAVg"]
[Thu Feb 26 08:16:00.928033 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:47438] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aZ-QwOA33x90V6yYHaiWoQAAAUk"]
[Thu Feb 26 08:16:01.807104 2026] [:error] [pid 55618:tid 55645] [client 40.85.216.247:47512] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aZ-QwR61Vrh12f_8oWTflQAAARg"]
[Thu Feb 26 08:16:02.565138 2026] [:error] [pid 55618:tid 55634] [client 40.85.216.247:52710] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aZ-Qwh61Vrh12f_8oWTflwAAAQ0"]
[Thu Feb 26 08:16:03.285868 2026] [:error] [pid 55122:tid 55138] [client 40.85.216.247:47461] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aZ-Qw4LiR0OfjFxvcN9pbAAAAM4"]
[Thu Feb 26 08:16:03.833335 2026] [:error] [pid 3883:tid 3899] [client 40.85.216.247:52452] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aZ-Qw-A33x90V6yYHaiWrAAAAU0"]
[Thu Feb 26 08:16:04.624264 2026] [:error] [pid 55618:tid 55622] [client 40.85.216.247:47491] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aZ-QxB61Vrh12f_8oWTfmAAAAQE"]
[Thu Feb 26 08:16:05.378059 2026] [:error] [pid 54991:tid 55042] [client 40.85.216.247:52470] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aZ-Qxd4Zx-mJ8gbRB2hcJgAAAFY"]
[Thu Feb 26 08:16:06.606315 2026] [:error] [pid 3883:tid 3893] [client 40.85.216.247:52718] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Feb 26 08:16:07.483553 2026] [:error] [pid 3883:tid 3908] [client 40.85.216.247:52718] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Thu Feb 26 08:16:08.079574 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:52718] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ-QyOA33x90V6yYHaiWuAAAAUk"]
[Thu Feb 26 08:16:09.135675 2026] [:error] [pid 55051:tid 55062] [client 40.85.216.247:47305] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ-QyQmK1w2kZvh5eLGizAAAAIg"]
[Thu Feb 26 08:16:10.441192 2026] [:error] [pid 55618:tid 55634] [client 40.85.216.247:31033] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aZ-Qyh61Vrh12f_8oWTfogAAAQ0"]
[Thu Feb 26 08:16:11.350821 2026] [:error] [pid 55618:tid 55624] [client 40.85.216.247:47124] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ-Qyx61Vrh12f_8oWTfpQAAAQM"]
[Thu Feb 26 08:16:11.961646 2026] [:error] [pid 55618:tid 55633] [client 40.85.216.247:47340] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aZ-Qyx61Vrh12f_8oWTfsgAAAQw"]
[Thu Feb 26 08:16:12.700256 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:52431] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aZ-QzOA33x90V6yYHaiWvwAAAUI"]
[Thu Feb 26 08:16:13.635589 2026] [:error] [pid 55051:tid 55077] [client 40.85.216.247:47166] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ww1.php"] [unique_id "aZ-QzQmK1w2kZvh5eLGizgAAAJc"]
[Thu Feb 26 08:16:14.219753 2026] [:error] [pid 3883:tid 3903] [client 40.85.216.247:30994] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aZ-QzuA33x90V6yYHaiWwgAAAVE"]
[Thu Feb 26 08:16:14.863500 2026] [:error] [pid 3883:tid 3910] [client 40.85.216.247:30999] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aZ-QzuA33x90V6yYHaiWxQAAAVg"]
[Thu Feb 26 08:16:15.616110 2026] [:error] [pid 55618:tid 55629] [client 40.85.216.247:52468] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aZ-Qzx61Vrh12f_8oWTftwAAAQg"]
[Thu Feb 26 08:16:16.261839 2026] [:error] [pid 55051:tid 55068] [client 40.85.216.247:47524] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about/function.php"] [unique_id "aZ-Q0AmK1w2kZvh5eLGi2gAAAI4"]
[Thu Feb 26 08:16:17.142937 2026] [:error] [pid 54990:tid 55002] [client 40.85.216.247:47443] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aZ-Q0Xtr2qmt_mBhH2y6LgAAAAk"]
[Thu Feb 26 08:16:18.381112 2026] [:error] [pid 55122:tid 55125] [client 40.85.216.247:47516] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aZ-Q0oLiR0OfjFxvcN9pmgAAAME"]
[Thu Feb 26 08:16:19.142025 2026] [:error] [pid 3883:tid 3897] [client 40.85.216.247:47298] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aZ-Q0-A33x90V6yYHaiWygAAAUs"]
[Thu Feb 26 08:16:19.753066 2026] [:error] [pid 3883:tid 3902] [client 40.85.216.247:47539] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/function.php"] [unique_id "aZ-Q0-A33x90V6yYHaiWywAAAVA"]
[Thu Feb 26 08:16:20.694759 2026] [:error] [pid 55122:tid 55125] [client 40.85.216.247:47744] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ-Q1ILiR0OfjFxvcN9prgAAAME"]
[Thu Feb 26 08:16:22.014047 2026] [:error] [pid 54991:tid 55030] [client 40.85.216.247:52446] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ-Q1t4Zx-mJ8gbRB2hcMAAAAEo"]
[Thu Feb 26 08:16:24.505443 2026] [:error] [pid 3883:tid 3894] [client 40.85.216.247:47479] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ-Q2OA33x90V6yYHaiW2wAAAUg"]
[Thu Feb 26 08:16:25.459510 2026] [:error] [pid 3883:tid 3909] [client 40.85.216.247:52727] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ-Q2eA33x90V6yYHaiW3wAAAVc"]
[Thu Feb 26 08:16:26.559585 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:47504] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aZ-Q2uA33x90V6yYHaiW5gAAAUU"]
[Thu Feb 26 08:16:27.831176 2026] [:error] [pid 55618:tid 55629] [client 40.85.216.247:53365] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aZ-Q2x61Vrh12f_8oWTf3QAAAQg"]
[Thu Feb 26 08:16:28.470267 2026] [:error] [pid 55618:tid 55626] [client 40.85.216.247:47332] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aZ-Q3B61Vrh12f_8oWTf4QAAAQU"]
[Thu Feb 26 08:16:29.678010 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:47314] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/colors/blue/index.php"] [unique_id "aZ-Q3eA33x90V6yYHaiW7AAAAUE"]
[Thu Feb 26 08:16:30.378002 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:53360] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aZ-Q3uA33x90V6yYHaiW9QAAAU8"]
[Thu Feb 26 08:16:31.240816 2026] [:error] [pid 55122:tid 55144] [client 40.85.216.247:47310] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aZ-Q34LiR0OfjFxvcN9pvwAAANQ"]
[Thu Feb 26 08:16:32.193165 2026] [:error] [pid 3883:tid 3896] [client 40.85.216.247:47481] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aZ-Q4OA33x90V6yYHaiW_AAAAUo"]
[Thu Feb 26 08:16:33.157603 2026] [:error] [pid 55051:tid 55054] [client 40.85.216.247:53345] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aZ-Q4QmK1w2kZvh5eLGi8wAAAIA"]
[Thu Feb 26 08:16:33.836774 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:47492] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZ-Q4eA33x90V6yYHaiW_wAAAUE"]
[Thu Feb 26 08:16:34.566728 2026] [:error] [pid 55051:tid 55077] [client 40.85.216.247:31038] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZ-Q4gmK1w2kZvh5eLGi9AAAAJc"]
[Thu Feb 26 08:16:35.260498 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:52691] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZ-Q4-A33x90V6yYHaiXBQAAAUk"]
[Thu Feb 26 08:16:36.254302 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:47763] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZ-Q5OA33x90V6yYHaiXDAAAAUM"]
[Thu Feb 26 08:16:37.700873 2026] [:error] [pid 3883:tid 3907] [client 40.85.216.247:31039] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZ-Q5eA33x90V6yYHaiXFAAAAVU"]
[Thu Feb 26 08:16:38.563515 2026] [:error] [pid 3883:tid 3898] [client 40.85.216.247:31021] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZ-Q5uA33x90V6yYHaiXGwAAAUw"]
[Thu Feb 26 08:16:39.205204 2026] [:error] [pid 55051:tid 55067] [client 40.85.216.247:47432] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZ-Q5wmK1w2kZvh5eLGi-QAAAI0"]
[Thu Feb 26 08:16:40.280021 2026] [:error] [pid 3883:tid 3907] [client 40.85.216.247:30981] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZ-Q6OA33x90V6yYHaiXHwAAAVU"]
[Thu Feb 26 08:16:41.477059 2026] [:error] [pid 55051:tid 55074] [client 40.85.216.247:30985] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ-Q6QmK1w2kZvh5eLGjBwAAAJQ"]
[Thu Feb 26 08:16:42.678320 2026] [:error] [pid 3883:tid 3905] [client 40.85.216.247:47463] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ-Q6uA33x90V6yYHaiXJgAAAVM"]
[Thu Feb 26 08:16:43.454660 2026] [:error] [pid 54991:tid 55025] [client 40.85.216.247:52476] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ-Q694Zx-mJ8gbRB2hcPgAAAEU"]
[Thu Feb 26 08:16:44.385888 2026] [:error] [pid 55122:tid 55147] [client 40.85.216.247:30986] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ-Q7ILiR0OfjFxvcN9pxwAAANc"]
[Thu Feb 26 08:16:45.163818 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:47551] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ-Q7eA33x90V6yYHaiXLAAAAUM"]
[Thu Feb 26 08:16:46.454783 2026] [:error] [pid 3883:tid 3908] [client 40.85.216.247:52719] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aZ-Q7uA33x90V6yYHaiXMgAAAVY"]
[Thu Feb 26 08:16:47.201832 2026] [:error] [pid 54990:tid 55007] [client 40.85.216.247:53319] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aZ-Q73tr2qmt_mBhH2y6YQAAAA4"]
[Thu Feb 26 08:16:48.543596 2026] [:error] [pid 55122:tid 55128] [client 40.85.216.247:53332] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aZ-Q8ILiR0OfjFxvcN9pzQAAAMQ"]
[Thu Feb 26 08:16:49.859903 2026] [:error] [pid 55122:tid 55146] [client 40.85.216.247:47424] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "aZ-Q8YLiR0OfjFxvcN9p0gAAANY"]
[Thu Feb 26 08:16:50.700627 2026] [:error] [pid 54990:tid 55004] [client 40.85.216.247:53342] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ-Q8ntr2qmt_mBhH2y6ZQAAAAs"]
[Thu Feb 26 08:16:51.551109 2026] [:error] [pid 55122:tid 55132] [client 40.85.216.247:47465] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ-Q84LiR0OfjFxvcN9p2AAAAMg"]
[Thu Feb 26 08:16:52.306017 2026] [:error] [pid 54990:tid 55001] [client 40.85.216.247:52433] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ-Q9Htr2qmt_mBhH2y6aAAAAAg"]
[Thu Feb 26 08:16:53.181084 2026] [:error] [pid 55618:tid 55644] [client 40.85.216.247:53373] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ-Q9R61Vrh12f_8oWTf8QAAARc"]
[Thu Feb 26 08:16:53.893530 2026] [:error] [pid 55051:tid 55057] [client 40.85.216.247:53328] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aZ-Q9QmK1w2kZvh5eLGjCgAAAIM"]
[Thu Feb 26 08:16:54.619430 2026] [:error] [pid 54990:tid 55013] [client 40.85.216.247:53350] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aZ-Q9ntr2qmt_mBhH2y6bQAAABQ"]
[Thu Feb 26 08:16:55.204474 2026] [:error] [pid 55122:tid 55135] [client 40.85.216.247:52724] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aZ-Q94LiR0OfjFxvcN9p4gAAAMs"]
[Thu Feb 26 08:16:56.213973 2026] [:error] [pid 54991:tid 55021] [client 40.85.216.247:47336] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aZ-Q-N4Zx-mJ8gbRB2hcSwAAAEE"]
[Thu Feb 26 08:16:56.884146 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:52474] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aZ-Q-OA33x90V6yYHaiXQAAAAUU"]
[Thu Feb 26 08:16:57.566762 2026] [:error] [pid 55051:tid 55074] [client 40.85.216.247:30993] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aZ-Q-QmK1w2kZvh5eLGjGAAAAJQ"]
[Thu Feb 26 08:16:58.476379 2026] [:error] [pid 55618:tid 55627] [client 40.85.216.247:30991] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aZ-Q-h61Vrh12f_8oWTgAQAAAQY"]
[Thu Feb 26 08:16:59.176488 2026] [:error] [pid 55122:tid 55142] [client 40.85.216.247:30998] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aZ-Q-4LiR0OfjFxvcN9p5wAAANI"]
[Thu Feb 26 08:16:59.688142 2026] [:error] [pid 55122:tid 55126] [client 40.85.216.247:47494] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ-Q-4LiR0OfjFxvcN9p6AAAAMI"]
[Thu Feb 26 08:17:00.707773 2026] [:error] [pid 55618:tid 55635] [client 40.85.216.247:47505] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ-Q_B61Vrh12f_8oWTgDwAAAQ4"]
[Thu Feb 26 08:17:01.413647 2026] [:error] [pid 55618:tid 55630] [client 40.85.216.247:47440] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ-Q_R61Vrh12f_8oWTgGAAAAQk"]
[Thu Feb 26 08:17:02.411773 2026] [:error] [pid 55618:tid 55628] [client 40.85.216.247:52424] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ-Q_h61Vrh12f_8oWTgHwAAAQc"]
[Thu Feb 26 08:17:03.464664 2026] [:error] [pid 55618:tid 55635] [client 40.85.216.247:52688] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ-Q_x61Vrh12f_8oWTgIgAAAQ4"]
[Thu Feb 26 08:17:04.498145 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:53368] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ-RAOA33x90V6yYHaiXTwAAAUM"]
[Thu Feb 26 08:17:06.011745 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:53329] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ-RAuA33x90V6yYHaiXVQAAAUE"]
[Thu Feb 26 08:17:06.860437 2026] [:error] [pid 3883:tid 3906] [client 40.85.216.247:52705] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZ-RAuA33x90V6yYHaiXWgAAAVQ"]
[Thu Feb 26 08:17:09.428446 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:47510] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/log.php"] [unique_id "aZ-RBeA33x90V6yYHaiXbAAAAUI"]
[Thu Feb 26 08:17:10.932310 2026] [:error] [pid 55618:tid 55629] [client 40.85.216.247:47534] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/log.php"] [unique_id "aZ-RBh61Vrh12f_8oWTgKgAAAQg"]
[Thu Feb 26 08:17:12.035301 2026] [:error] [pid 55051:tid 55063] [client 40.85.216.247:47511] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Feb 26 08:17:12.826620 2026] [:error] [pid 55051:tid 55068] [client 40.85.216.247:47511] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Thu Feb 26 08:17:13.051859 2026] [:error] [pid 55051:tid 55076] [client 40.85.216.247:47511] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ-RCQmK1w2kZvh5eLGjMgAAAJY"]
[Thu Feb 26 08:17:13.959927 2026] [:error] [pid 3883:tid 3893] [client 40.85.216.247:47302] [client 40.85.216.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aZ-RCeA33x90V6yYHaiXgwAAAUc"]
[Thu Feb 26 08:17:15.217180 2026] [:error] [pid 55051:tid 55064] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 26 08:17:15.432875 2026] [:error] [pid 55051:tid 55060] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Feb 26 08:17:15.643000 2026] [:error] [pid 55051:tid 55069] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Thu Feb 26 08:17:15.855448 2026] [:error] [pid 55051:tid 55066] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Thu Feb 26 08:17:16.091655 2026] [:error] [pid 55051:tid 55058] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Thu Feb 26 08:17:16.326359 2026] [:error] [pid 55051:tid 55062] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Thu Feb 26 08:17:16.536275 2026] [:error] [pid 55051:tid 55078] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Thu Feb 26 08:17:16.760185 2026] [:error] [pid 55051:tid 55071] [client 40.85.216.247:52462] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Thu Feb 26 08:17:16.967476 2026] [:error] [pid 55051:tid 55065] [client 40.85.216.247:52462] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ-RDAmK1w2kZvh5eLGjPAAAAIs"]
[Thu Feb 26 08:17:18.598695 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:52437] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ-RDuA33x90V6yYHaiXlwAAAUQ"]
[Thu Feb 26 08:17:20.224967 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:47441] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ-REOA33x90V6yYHaiXoQAAAUE"]
[Thu Feb 26 08:17:21.359695 2026] [:error] [pid 3883:tid 3907] [client 40.85.216.247:47769] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/333.php"] [unique_id "aZ-REeA33x90V6yYHaiXpwAAAVU"]
[Thu Feb 26 08:17:22.487188 2026] [:error] [pid 55122:tid 55134] [client 40.85.216.247:47353] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aZ-REoLiR0OfjFxvcN9p_gAAAMo"]
[Thu Feb 26 08:17:23.826085 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:47756] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aZ-RE-A33x90V6yYHaiXsAAAAUQ"]
[Thu Feb 26 08:17:25.243215 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:47453] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aZ-RFR61Vrh12f_8oWTgTgAAAQA"]
[Thu Feb 26 08:17:26.815939 2026] [:error] [pid 55122:tid 55141] [client 40.85.216.247:47426] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/520.php"] [unique_id "aZ-RFoLiR0OfjFxvcN9qBgAAANE"]
[Thu Feb 26 08:17:27.856903 2026] [:error] [pid 55051:tid 55054] [client 40.85.216.247:53335] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aZ-RFwmK1w2kZvh5eLGjQwAAAIA"]
[Thu Feb 26 08:17:28.620875 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:47323] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aZ-RGOA33x90V6yYHaiXwwAAAUQ"]
[Thu Feb 26 08:17:29.597458 2026] [:error] [pid 55618:tid 55639] [client 40.85.216.247:47119] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aZ-RGR61Vrh12f_8oWTgVgAAARI"]
[Thu Feb 26 08:17:30.310468 2026] [:error] [pid 55618:tid 55626] [client 40.85.216.247:30982] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ar.php"] [unique_id "aZ-RGh61Vrh12f_8oWTgWAAAAQU"]
[Thu Feb 26 08:17:31.781249 2026] [:error] [pid 3883:tid 3909] [client 40.85.216.247:47748] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aZ-RG-A33x90V6yYHaiXygAAAVc"]
[Thu Feb 26 08:17:32.355147 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:52689] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aZ-RHOA33x90V6yYHaiXzQAAAUU"]
[Thu Feb 26 08:17:33.708952 2026] [:error] [pid 54991:tid 55042] [client 40.85.216.247:47493] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aZ-RHd4Zx-mJ8gbRB2hcXgAAAFY"]
[Thu Feb 26 08:17:34.337178 2026] [:error] [pid 55618:tid 55628] [client 40.85.216.247:30995] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aZ-RHh61Vrh12f_8oWTgZQAAAQc"]
[Thu Feb 26 08:17:34.959520 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:31008] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aZ-RHh61Vrh12f_8oWTgZwAAAQA"]
[Thu Feb 26 08:17:35.834418 2026] [:error] [pid 55051:tid 55067] [client 40.85.216.247:47320] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aZ-RHwmK1w2kZvh5eLGjUwAAAI0"]
[Thu Feb 26 08:17:36.782805 2026] [:error] [pid 55618:tid 55631] [client 40.85.216.247:47514] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aZ-RIB61Vrh12f_8oWTgcAAAAQo"]
[Thu Feb 26 08:17:37.907332 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:47449] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aZ-RIeA33x90V6yYHaiX1QAAAUU"]
[Thu Feb 26 08:17:38.499707 2026] [:error] [pid 54990:tid 54996] [client 40.85.216.247:47288] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aZ-RIntr2qmt_mBhH2y6ggAAAAM"]
[Thu Feb 26 08:17:39.444668 2026] [:error] [pid 3883:tid 3887] [client 40.85.216.247:47459] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aZ-RI-A33x90V6yYHaiX3wAAAUE"]
[Thu Feb 26 08:17:42.416949 2026] [:error] [pid 54991:tid 55030] [client 40.85.216.247:47499] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aZ-RJt4Zx-mJ8gbRB2hcbAAAAEo"]
[Thu Feb 26 08:17:44.356511 2026] [:error] [pid 55618:tid 55636] [client 40.85.216.247:31009] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass4.php"] [unique_id "aZ-RKB61Vrh12f_8oWTgdwAAAQ8"]
[Thu Feb 26 08:17:47.772261 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:52707] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aZ-RK-A33x90V6yYHaiX_QAAAUA"]
[Thu Feb 26 08:17:49.934010 2026] [:error] [pid 55051:tid 55058] [client 40.85.216.247:52696] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aZ-RLQmK1w2kZvh5eLGjYQAAAIQ"]
[Thu Feb 26 08:17:50.799294 2026] [:error] [pid 3883:tid 3904] [client 40.85.216.247:47428] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aZ-RLuA33x90V6yYHaiYBwAAAVI"]
[Thu Feb 26 08:17:51.460204 2026] [:error] [pid 54990:tid 55015] [client 40.85.216.247:52676] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2clas.php"] [unique_id "aZ-RL3tr2qmt_mBhH2y6iAAAABY"]
[Thu Feb 26 08:17:52.184355 2026] [:error] [pid 55051:tid 55057] [client 40.85.216.247:31003] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aZ-RMAmK1w2kZvh5eLGjZwAAAIM"]
[Thu Feb 26 08:17:52.970654 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:52701] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aZ-RMB61Vrh12f_8oWTghQAAAQA"]
[Thu Feb 26 08:17:54.006288 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:47489] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aZ-RMuA33x90V6yYHaiYDwAAAUI"]
[Thu Feb 26 08:17:55.077800 2026] [:error] [pid 55618:tid 55638] [client 40.85.216.247:53356] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ave.php"] [unique_id "aZ-RMx61Vrh12f_8oWTgigAAARE"]
[Thu Feb 26 08:17:56.197927 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:47483] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ-RNOA33x90V6yYHaiYFgAAAU8"]
[Thu Feb 26 08:17:57.094722 2026] [:error] [pid 3883:tid 3907] [client 40.85.216.247:31011] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ-RNeA33x90V6yYHaiYHAAAAVU"]
[Thu Feb 26 08:17:57.787171 2026] [:error] [pid 3883:tid 3909] [client 40.85.216.247:52692] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ-RNeA33x90V6yYHaiYIgAAAVc"]
[Thu Feb 26 08:17:58.450358 2026] [:error] [pid 3883:tid 3897] [client 40.85.216.247:30979] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wrt.php"] [unique_id "aZ-RNuA33x90V6yYHaiYJwAAAUs"]
[Thu Feb 26 08:17:59.204980 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:47431] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aZ-RN-A33x90V6yYHaiYMQAAAU8"]
[Thu Feb 26 08:17:59.730913 2026] [:error] [pid 3883:tid 3897] [client 40.85.216.247:47475] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aZ-RN-A33x90V6yYHaiYPgAAAUs"]
[Thu Feb 26 08:18:00.504430 2026] [:error] [pid 3883:tid 3897] [client 40.85.216.247:47509] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aZ-ROOA33x90V6yYHaiYVQAAAUs"]
[Thu Feb 26 08:18:01.432866 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:47316] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bibil.php"] [unique_id "aZ-ROR61Vrh12f_8oWTglAAAAQA"]
[Thu Feb 26 08:18:02.714426 2026] [:error] [pid 55618:tid 55623] [client 40.85.216.247:47541] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ-ROh61Vrh12f_8oWTgngAAAQI"]
[Thu Feb 26 08:18:03.639957 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:30989] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ-RO-A33x90V6yYHaiYegAAAUQ"]
[Thu Feb 26 08:18:04.425944 2026] [:error] [pid 55122:tid 55136] [client 40.85.216.247:52416] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ-RPILiR0OfjFxvcN9qKgAAAMw"]
[Thu Feb 26 08:18:05.427350 2026] [:error] [pid 3883:tid 3909] [client 40.85.216.247:47528] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aZ-RPeA33x90V6yYHaiYhAAAAVc"]
[Thu Feb 26 08:18:06.767172 2026] [:error] [pid 55618:tid 55627] [client 40.85.216.247:47523] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aZ-RPh61Vrh12f_8oWTgpgAAAQY"]
[Thu Feb 26 08:18:08.852771 2026] [:error] [pid 55122:tid 55128] [client 40.85.216.247:31029] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aZ-RQILiR0OfjFxvcN9qLwAAAMQ"]
[Thu Feb 26 08:18:10.061324 2026] [:error] [pid 3883:tid 3909] [client 40.85.216.247:53346] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aZ-RQuA33x90V6yYHaiYmgAAAVc"]
[Thu Feb 26 08:18:10.852002 2026] [:error] [pid 3883:tid 3888] [client 40.85.216.247:52702] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files.php"] [unique_id "aZ-RQuA33x90V6yYHaiYoQAAAUI"]
[Thu Feb 26 08:18:11.460626 2026] [:error] [pid 55618:tid 55629] [client 40.85.216.247:47338] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ-RQx61Vrh12f_8oWTgsAAAAQg"]
[Thu Feb 26 08:18:12.274935 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:52674] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ-RROA33x90V6yYHaiYqwAAAUk"]
[Thu Feb 26 08:18:13.261489 2026] [:error] [pid 3883:tid 3908] [client 40.85.216.247:47480] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ-RReA33x90V6yYHaiYsgAAAVY"]
[Thu Feb 26 08:18:14.282316 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:47357] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aZ-RRuA33x90V6yYHaiYtgAAAUM"]
[Thu Feb 26 08:18:15.772550 2026] [:error] [pid 3883:tid 3908] [client 40.85.216.247:52442] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aZ-RR-A33x90V6yYHaiY1wAAAVY"]
[Thu Feb 26 08:18:17.109717 2026] [:error] [pid 55618:tid 55626] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Feb 26 08:18:17.569127 2026] [:error] [pid 55618:tid 55638] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Thu Feb 26 08:18:17.778503 2026] [:error] [pid 55618:tid 55637] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Thu Feb 26 08:18:18.005896 2026] [:error] [pid 55618:tid 55645] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 26 08:18:18.357543 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Thu Feb 26 08:18:18.579554 2026] [:error] [pid 55618:tid 55639] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Thu Feb 26 08:18:19.088290 2026] [:error] [pid 55618:tid 55632] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Thu Feb 26 08:18:19.317996 2026] [:error] [pid 55618:tid 55624] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Thu Feb 26 08:18:19.527083 2026] [:error] [pid 55618:tid 55644] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Thu Feb 26 08:18:19.738541 2026] [:error] [pid 55618:tid 55641] [client 40.85.216.247:47482] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Thu Feb 26 08:18:19.945214 2026] [:error] [pid 55618:tid 55642] [client 40.85.216.247:47482] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ-RSx61Vrh12f_8oWTg9gAAARU"]
[Thu Feb 26 08:18:20.706951 2026] [:error] [pid 55122:tid 55130] [client 40.85.216.247:47521] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ-RTILiR0OfjFxvcN9qSQAAAMY"]
[Thu Feb 26 08:18:22.310224 2026] [:error] [pid 3883:tid 3902] [client 40.85.216.247:31015] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ-RTuA33x90V6yYHaiY_wAAAVA"]
[Thu Feb 26 08:18:23.206350 2026] [:error] [pid 54990:tid 55017] [client 40.85.216.247:52473] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aZ-RT3tr2qmt_mBhH2y6lgAAABg"]
[Thu Feb 26 08:18:24.818071 2026] [:error] [pid 55618:tid 55621] [client 40.85.216.247:47786] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ-RUB61Vrh12f_8oWThAwAAAQA"]
[Thu Feb 26 08:18:26.269571 2026] [:error] [pid 3883:tid 3910] [client 40.85.216.247:47448] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ-RUuA33x90V6yYHaiZFQAAAVg"]
[Thu Feb 26 08:18:28.006558 2026] [:error] [pid 54990:tid 55008] [client 40.85.216.247:52432] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ-RVHtr2qmt_mBhH2y6oQAAAA8"]
[Thu Feb 26 08:18:28.774128 2026] [:error] [pid 55618:tid 55628] [client 40.85.216.247:47785] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ac.php"] [unique_id "aZ-RVB61Vrh12f_8oWThEQAAAQc"]
[Thu Feb 26 08:18:30.400686 2026] [:error] [pid 54990:tid 55005] [client 40.85.216.247:54153] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aZ-RVntr2qmt_mBhH2y6pgAAAAw"]
[Thu Feb 26 08:18:32.054967 2026] [:error] [pid 55618:tid 55622] [client 40.85.216.247:47526] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aZ-RWB61Vrh12f_8oWThHAAAAQE"]
[Thu Feb 26 08:18:33.244707 2026] [:error] [pid 3883:tid 3895] [client 40.85.216.247:52428] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aZ-RWeA33x90V6yYHaiZNwAAAUk"]
[Thu Feb 26 08:18:34.215823 2026] [:error] [pid 55618:tid 55631] [client 40.85.216.247:47804] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aZ-RWh61Vrh12f_8oWThIAAAAQo"]
[Thu Feb 26 08:18:35.139252 2026] [:error] [pid 55122:tid 55142] [client 40.85.216.247:53326] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aZ-RW4LiR0OfjFxvcN9qVgAAANI"]
[Thu Feb 26 08:18:36.060504 2026] [:error] [pid 55051:tid 55057] [client 40.85.216.247:53330] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aZ-RXAmK1w2kZvh5eLGjhAAAAIM"]
[Thu Feb 26 08:18:36.823951 2026] [:error] [pid 54991:tid 55043] [client 40.85.216.247:52450] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aZ-RXN4Zx-mJ8gbRB2hckwAAAFc"]
[Thu Feb 26 08:18:37.815918 2026] [:error] [pid 55122:tid 55140] [client 40.85.216.247:47309] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pop.php"] [unique_id "aZ-RXYLiR0OfjFxvcN9qWwAAANA"]
[Thu Feb 26 08:18:38.968227 2026] [:error] [pid 55122:tid 55129] [client 40.85.216.247:31004] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ-RXoLiR0OfjFxvcN9qZgAAAMU"]
[Thu Feb 26 08:18:39.784518 2026] [:error] [pid 54991:tid 55020] [client 40.85.216.247:52471] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ-RX94Zx-mJ8gbRB2hcmAAAAEA"]
[Thu Feb 26 08:18:40.614263 2026] [:error] [pid 54991:tid 55044] [client 40.85.216.247:30992] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ-RYN4Zx-mJ8gbRB2hcnAAAAFg"]
[Thu Feb 26 08:18:42.109812 2026] [:error] [pid 55618:tid 55638] [client 40.85.216.247:47760] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "aZ-RYh61Vrh12f_8oWThMAAAARE"]
[Thu Feb 26 08:18:43.427661 2026] [:error] [pid 55618:tid 55641] [client 40.85.216.247:47497] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aZ-RYx61Vrh12f_8oWThNwAAARQ"]
[Thu Feb 26 08:18:44.141425 2026] [:error] [pid 3883:tid 3890] [client 40.85.216.247:47437] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aZ-RZOA33x90V6yYHaiZXQAAAUQ"]
[Thu Feb 26 08:18:44.844007 2026] [:error] [pid 55122:tid 55126] [client 40.85.216.247:47352] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aZ-RZILiR0OfjFxvcN9qbwAAAMI"]
[Thu Feb 26 08:18:45.662388 2026] [:error] [pid 3883:tid 3899] [client 40.85.216.247:47508] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xaz.php"] [unique_id "aZ-RZeA33x90V6yYHaiZYAAAAU0"]
[Thu Feb 26 08:18:46.654607 2026] [:error] [pid 3883:tid 3891] [client 40.85.216.247:31007] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up4.php"] [unique_id "aZ-RZuA33x90V6yYHaiZaQAAAUU"]
[Thu Feb 26 08:18:47.619044 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:31012] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up4.php"] [unique_id "aZ-RZ-A33x90V6yYHaiZcwAAAU8"]
[Thu Feb 26 08:18:48.667008 2026] [:error] [pid 55618:tid 55630] [client 40.85.216.247:47757] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up4.php"] [unique_id "aZ-RaB61Vrh12f_8oWThQwAAAQk"]
[Thu Feb 26 08:18:49.476508 2026] [:error] [pid 3883:tid 3892] [client 40.85.216.247:47472] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up4.php"] [unique_id "aZ-RaeA33x90V6yYHaiZdgAAAUY"]
[Thu Feb 26 08:18:52.198676 2026] [:error] [pid 54990:tid 55000] [client 40.85.216.247:53318] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aZ-RbHtr2qmt_mBhH2y6yAAAAAc"]
[Thu Feb 26 08:18:53.353735 2026] [:error] [pid 55051:tid 55063] [client 40.85.216.247:52681] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aZ-RbQmK1w2kZvh5eLGjnQAAAIk"]
[Thu Feb 26 08:18:54.440492 2026] [:error] [pid 3883:tid 3908] [client 40.85.216.247:52445] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aZ-RbuA33x90V6yYHaiZngAAAVY"]
[Thu Feb 26 08:18:55.584255 2026] [:error] [pid 55051:tid 55078] [client 40.85.216.247:47540] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1aa.php"] [unique_id "aZ-RbwmK1w2kZvh5eLGjqAAAAJg"]
[Thu Feb 26 08:18:57.131256 2026] [:error] [pid 3883:tid 3886] [client 40.85.216.247:52472] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aZ-RceA33x90V6yYHaiZsgAAAUA"]
[Thu Feb 26 08:18:58.930694 2026] [:error] [pid 55618:tid 55625] [client 40.85.216.247:52733] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aZ-Rch61Vrh12f_8oWThXAAAAQQ"]
[Thu Feb 26 08:18:59.925715 2026] [:error] [pid 55051:tid 55066] [client 40.85.216.247:52734] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aZ-RcwmK1w2kZvh5eLGjrAAAAIw"]
[Thu Feb 26 08:19:01.356714 2026] [:error] [pid 55051:tid 55063] [client 40.85.216.247:31022] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/elp.php"] [unique_id "aZ-RdQmK1w2kZvh5eLGjuQAAAIk"]
[Thu Feb 26 08:19:02.905018 2026] [:error] [pid 55122:tid 55143] [client 40.85.216.247:31026] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aZ-RdoLiR0OfjFxvcN9qfQAAANM"]
[Thu Feb 26 08:19:03.699269 2026] [:error] [pid 3883:tid 3889] [client 40.85.216.247:52459] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aZ-Rd-A33x90V6yYHaiZxQAAAUM"]
[Thu Feb 26 08:19:05.372269 2026] [:error] [pid 54991:tid 55041] [client 40.85.216.247:30988] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aZ-Red4Zx-mJ8gbRB2hcqwAAAFU"]
[Thu Feb 26 08:19:07.049755 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:47496] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtz.php"] [unique_id "aZ-Re-A33x90V6yYHaiZygAAAU8"]
[Thu Feb 26 08:19:08.372139 2026] [:error] [pid 3883:tid 3894] [client 40.85.216.247:30997] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aZ-RfOA33x90V6yYHaiZzgAAAUg"]
[Thu Feb 26 08:19:09.598637 2026] [:error] [pid 55051:tid 55068] [client 40.85.216.247:52434] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aZ-RfQmK1w2kZvh5eLGjyAAAAI4"]
[Thu Feb 26 08:19:11.448329 2026] [:error] [pid 54990:tid 54999] [client 40.85.216.247:53334] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aZ-Rf3tr2qmt_mBhH2y61wAAAAY"]
[Thu Feb 26 08:19:12.946912 2026] [:error] [pid 55122:tid 55140] [client 40.85.216.247:47466] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galex.php"] [unique_id "aZ-RgILiR0OfjFxvcN9qjAAAANA"]
[Thu Feb 26 08:19:13.865111 2026] [:error] [pid 55122:tid 55136] [client 40.85.216.247:47329] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aZ-RgYLiR0OfjFxvcN9qjwAAAMw"]
[Thu Feb 26 08:19:15.676848 2026] [:error] [pid 55618:tid 55624] [client 40.85.216.247:52723] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aZ-Rgx61Vrh12f_8oWTheQAAAQM"]
[Thu Feb 26 08:19:16.769925 2026] [:error] [pid 55122:tid 55131] [client 40.85.216.247:47131] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aZ-RhILiR0OfjFxvcN9qkgAAAMc"]
[Thu Feb 26 08:19:17.983013 2026] [:error] [pid 3883:tid 3901] [client 40.85.216.247:47537] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xb.php"] [unique_id "aZ-RheA33x90V6yYHaiZ6AAAAU8"]
[Thu Feb 26 08:19:18.917924 2026] [:error] [pid 55618:tid 55638] [client 40.85.216.247:52441] [client 40.85.216.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova.php"] [unique_id "aZ-Rhh61Vrh12f_8oWThjAAAARE"]
[Thu Feb 26 08:19:19.695439 2026] [:error] [pid 54991:tid 55020] [client 40.85.216.247:47774] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Thu Feb 26 08:19:19.914910 2026] [:error] [pid 54991:tid 55035] [client 40.85.216.247:47774] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Thu Feb 26 08:19:20.127618 2026] [:error] [pid 54991:tid 55044] [client 40.85.216.247:47774] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu Feb 26 11:21:08.928759 2026] [:error] [pid 55122:tid 55147] [client 20.219.8.79:19860] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Feb 26 11:21:09.075039 2026] [:error] [pid 55122:tid 55135] [client 20.219.8.79:19860] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/autoload_classmap.php
[Thu Feb 26 11:21:09.217915 2026] [:error] [pid 55122:tid 55129] [client 20.219.8.79:19860] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Feb 26 11:21:09.952244 2026] [:error] [pid 55122:tid 55127] [client 20.219.8.79:19860] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "aZ-8JYLiR0OfjFxvcN-e2AAAAMM"]
[Thu Feb 26 11:21:10.563753 2026] [:error] [pid 3883:tid 3899] [client 20.219.8.79:1936] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "aZ-8JuA33x90V6yYHagaIQAAAU0"]
[Thu Feb 26 11:21:11.132958 2026] [:error] [pid 3883:tid 3903] [client 20.219.8.79:19867] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "aZ-8J-A33x90V6yYHagaIwAAAVE"]
[Thu Feb 26 11:21:11.740973 2026] [:error] [pid 3883:tid 3887] [client 20.219.8.79:1951] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "aZ-8J-A33x90V6yYHagaJwAAAUE"]
[Thu Feb 26 14:21:14.077490 2026] [:error] [pid 20419:tid 20441] [client 175.6.217.4:51463] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ_mWu3DVDvMfTYYUBWt9wAAAdM"]
[Thu Feb 26 14:48:00.819633 2026] [:error] [pid 54990:tid 55015] [client 43.165.190.5:52070] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aZ_soHtr2qmt_mBhH2zlZwAAABY"]
[Thu Feb 26 14:54:51.161957 2026] [:error] [pid 25311:tid 25334] [client 43.130.74.193:52308] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aZ_uO9fdM__yZAgJFSsUYAAAAZQ"]
[Thu Feb 26 15:53:07.563054 2026] [:error] [pid 3883:tid 3899] [client 20.234.20.103:4099] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Thu Feb 26 18:10:40.096618 2026] [:error] [pid 55618:tid 55630] [client 20.220.189.106:58901] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/combined.php"] [unique_id "aaAcIB61Vrh12f_8oWTIEAAAAQk"]
[Thu Feb 26 18:10:41.762910 2026] [:error] [pid 25311:tid 25337] [client 20.220.189.106:58208] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/combined.php"] [unique_id "aaAcIdfdM__yZAgJFStp_AAAAZc"]
[Thu Feb 26 18:10:43.651476 2026] [:error] [pid 55051:tid 55054] [client 20.220.189.106:58196] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/combined.php"] [unique_id "aaAcIwmK1w2kZvh5eLE_mgAAAIA"]
[Thu Feb 26 18:10:45.662468 2026] [:error] [pid 55618:tid 55637] [client 20.220.189.106:58911] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/combined.php"] [unique_id "aaAcJR61Vrh12f_8oWTIFAAAARA"]
[Thu Feb 26 18:10:48.433866 2026] [:error] [pid 3883:tid 3897] [client 20.220.189.106:58898] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mari.php"] [unique_id "aaAcKOA33x90V6yYHagepgAAAUs"]
[Thu Feb 26 18:10:50.191524 2026] [:error] [pid 55051:tid 55073] [client 20.220.189.106:58193] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mari.php"] [unique_id "aaAcKgmK1w2kZvh5eLE_sgAAAJM"]
[Thu Feb 26 18:10:52.367206 2026] [:error] [pid 55618:tid 55623] [client 20.220.189.106:58931] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mari.php"] [unique_id "aaAcLB61Vrh12f_8oWTIGQAAAQI"]
[Thu Feb 26 18:10:53.543588 2026] [:error] [pid 54991:tid 55023] [client 20.220.189.106:58902] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mari.php"] [unique_id "aaAcLd4Zx-mJ8gbRB2i40QAAAEM"]
[Thu Feb 26 18:10:56.264362 2026] [:error] [pid 25311:tid 25334] [client 20.220.189.106:58203] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kodox.php"] [unique_id "aaAcMNfdM__yZAgJFStqEAAAAZQ"]
[Thu Feb 26 18:10:59.822642 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:58195] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kodox.php"] [unique_id "aaAcM-A33x90V6yYHagexwAAAUY"]
[Thu Feb 26 18:11:01.019281 2026] [:error] [pid 55122:tid 55131] [client 20.220.189.106:58937] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kodox.php"] [unique_id "aaAcNYLiR0OfjFxvcN_5WgAAAMc"]
[Thu Feb 26 18:11:01.980489 2026] [:error] [pid 55051:tid 55063] [client 20.220.189.106:58194] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kodox.php"] [unique_id "aaAcNQmK1w2kZvh5eLE_yQAAAIk"]
[Thu Feb 26 18:11:03.246297 2026] [:error] [pid 55051:tid 55058] [client 20.220.189.106:58884] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/HTTP/class.api.php"] [unique_id "aaAcNwmK1w2kZvh5eLE_zgAAAIQ"]
[Thu Feb 26 18:11:04.063797 2026] [:error] [pid 55051:tid 55073] [client 20.220.189.106:58892] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php/"] [unique_id "aaAcOAmK1w2kZvh5eLE_0QAAAJM"]
[Thu Feb 26 18:11:05.515884 2026] [:error] [pid 55051:tid 55062] [client 20.220.189.106:58896] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php/"] [unique_id "aaAcOQmK1w2kZvh5eLE_2QAAAIg"]
[Thu Feb 26 18:11:07.688909 2026] [:error] [pid 54990:tid 54996] [client 20.220.189.106:58212] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php/"] [unique_id "aaAcO3tr2qmt_mBhH2wCVQAAAAM"]
[Thu Feb 26 18:11:09.256911 2026] [:error] [pid 3883:tid 3888] [client 20.220.189.106:58912] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php/"] [unique_id "aaAcPeA33x90V6yYHagfEAAAAUI"]
[Thu Feb 26 18:11:09.934651 2026] [:error] [pid 3883:tid 3889] [client 20.220.189.106:58202] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/onkoabak.php"] [unique_id "aaAcPeA33x90V6yYHagfGAAAAUM"]
[Thu Feb 26 18:11:12.077665 2026] [:error] [pid 3883:tid 3888] [client 20.220.189.106:58205] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/onkoabak.php"] [unique_id "aaAcQOA33x90V6yYHagfLwAAAUI"]
[Thu Feb 26 18:11:13.493649 2026] [:error] [pid 25311:tid 25315] [client 20.220.189.106:58188] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/onkoabak.php"] [unique_id "aaAcQdfdM__yZAgJFStqGAAAAYE"]
[Thu Feb 26 18:11:16.326070 2026] [:error] [pid 55051:tid 55077] [client 20.220.189.106:55889] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/onkoabak.php"] [unique_id "aaAcRAmK1w2kZvh5eLE_6QAAAJc"]
[Thu Feb 26 18:11:17.086735 2026] [:error] [pid 25311:tid 25323] [client 20.220.189.106:58925] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php56"] [unique_id "aaAcRdfdM__yZAgJFStqIgAAAYk"]
[Thu Feb 26 18:11:20.418844 2026] [:error] [pid 55051:tid 55055] [client 20.220.189.106:58888] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php56"] [unique_id "aaAcSAmK1w2kZvh5eLE_-AAAAIE"]
[Thu Feb 26 18:11:21.989965 2026] [:error] [pid 55051:tid 55070] [client 20.220.189.106:58927] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php56"] [unique_id "aaAcSQmK1w2kZvh5eLE__gAAAJA"]
[Thu Feb 26 18:11:24.316023 2026] [:error] [pid 55618:tid 55642] [client 20.220.189.106:58182] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php56"] [unique_id "aaAcTB61Vrh12f_8oWTILAAAARU"]
[Thu Feb 26 18:11:25.310182 2026] [:error] [pid 25311:tid 25314] [client 20.220.189.106:58921] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.tmb/asp.php"] [unique_id "aaAcTdfdM__yZAgJFStqMAAAAYA"]
[Thu Feb 26 18:11:27.258401 2026] [:error] [pid 55051:tid 55078] [client 20.220.189.106:58183] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.tmb/asp.php"] [unique_id "aaAcTwmK1w2kZvh5eLFADAAAAJg"]
[Thu Feb 26 18:11:29.599576 2026] [:error] [pid 20419:tid 20422] [client 20.220.189.106:58232] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.tmb/asp.php"] [unique_id "aaAcUe3DVDvMfTYYUBUBGQAAAcA"]
[Thu Feb 26 18:11:31.920104 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:55879] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.tmb/asp.php"] [unique_id "aaAcU9fdM__yZAgJFStqNwAAAYI"]
[Thu Feb 26 18:11:34.589463 2026] [:error] [pid 25311:tid 25326] [client 20.220.189.106:58941] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ovaudglve.php"] [unique_id "aaAcVtfdM__yZAgJFStqOAAAAYw"]
[Thu Feb 26 18:11:37.196625 2026] [:error] [pid 55618:tid 55621] [client 20.220.189.106:58900] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ovaudglve.php"] [unique_id "aaAcWR61Vrh12f_8oWTIQQAAAQA"]
[Thu Feb 26 18:11:39.711158 2026] [:error] [pid 54991:tid 55026] [client 20.220.189.106:58894] File does not exist: /usr/local/apache/htdocs/suspended-page/ovaudglve.php
[Thu Feb 26 18:11:39.933708 2026] [:error] [pid 54991:tid 55023] [client 20.220.189.106:58894] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-http.php"] [unique_id "aaAcW94Zx-mJ8gbRB2i48gAAAEM"]
[Thu Feb 26 18:11:42.144989 2026] [:error] [pid 55618:tid 55622] [client 20.220.189.106:58926] File does not exist: /usr/local/apache/htdocs/suspended-page/discount_rules.php
[Thu Feb 26 18:11:42.621087 2026] [:error] [pid 55618:tid 55641] [client 20.220.189.106:58926] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-editor-context-cookie.php"] [unique_id "aaAcXh61Vrh12f_8oWTISgAAARQ"]
[Thu Feb 26 18:11:44.256819 2026] [:error] [pid 20419:tid 20433] [client 20.220.189.106:58890] File does not exist: /usr/local/apache/htdocs/suspended-page/empty.php
[Thu Feb 26 18:11:45.144402 2026] [:error] [pid 20419:tid 20441] [client 20.220.189.106:58890] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp.php"] [unique_id "aaAcYe3DVDvMfTYYUBUBMQAAAdM"]
[Thu Feb 26 18:11:46.801402 2026] [:error] [pid 25311:tid 25327] [client 20.220.189.106:58909] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core32/Poly1305/post.php"] [unique_id "aaAcYtfdM__yZAgJFStqSgAAAY0"]
[Thu Feb 26 18:11:48.627097 2026] [:error] [pid 55122:tid 55124] [client 20.220.189.106:58882] File does not exist: /usr/local/apache/htdocs/suspended-page/confag.php
[Thu Feb 26 18:11:49.279629 2026] [:error] [pid 55122:tid 55145] [client 20.220.189.106:58882] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak47shell.php"] [unique_id "aaAcZYLiR0OfjFxvcN_5fQAAANU"]
[Thu Feb 26 18:11:50.570698 2026] [:error] [pid 54990:tid 55007] [client 20.220.189.106:58928] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak47shell.php"] [unique_id "aaAcZntr2qmt_mBhH2wCaQAAAA4"]
[Thu Feb 26 18:11:52.072289 2026] [:error] [pid 20419:tid 20438] [client 20.220.189.106:58210] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak47shell.php"] [unique_id "aaAcaO3DVDvMfTYYUBUBNwAAAdA"]
[Thu Feb 26 18:11:54.524257 2026] [:error] [pid 55051:tid 55077] [client 20.220.189.106:58213] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ak47shell.php"] [unique_id "aaAcagmK1w2kZvh5eLFALAAAAJc"]
[Thu Feb 26 18:11:57.266065 2026] [:error] [pid 54990:tid 54994] [client 20.220.189.106:58185] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaAcbXtr2qmt_mBhH2wCbgAAAAE"]
[Thu Feb 26 18:11:59.681236 2026] [:error] [pid 25311:tid 25314] [client 20.220.189.106:58934] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaAcb9fdM__yZAgJFStqVAAAAYA"]
[Thu Feb 26 18:12:02.442947 2026] [:error] [pid 54990:tid 55010] [client 20.220.189.106:58177] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaAccntr2qmt_mBhH2wCcQAAABE"]
[Thu Feb 26 18:12:03.653992 2026] [:error] [pid 55618:tid 55634] [client 20.220.189.106:58887] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaAccx61Vrh12f_8oWTIVwAAAQ0"]
[Thu Feb 26 18:12:06.025261 2026] [:error] [pid 55051:tid 55077] [client 20.220.189.106:58922] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaAcdgmK1w2kZvh5eLFARgAAAJc"]
[Thu Feb 26 18:12:06.943352 2026] [:error] [pid 54991:tid 55021] [client 20.220.189.106:58938] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaAcdt4Zx-mJ8gbRB2i49gAAAEE"]
[Thu Feb 26 18:12:08.722806 2026] [:error] [pid 20419:tid 20429] [client 20.220.189.106:58228] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaAceO3DVDvMfTYYUBUBVQAAAcc"]
[Thu Feb 26 18:12:13.974893 2026] [:error] [pid 3883:tid 3893] [client 20.220.189.106:58225] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acme-challenge/xl2023.php"] [unique_id "aaAcfeA33x90V6yYHagfZwAAAUc"]
[Thu Feb 26 18:12:15.626613 2026] [:error] [pid 55122:tid 55128] [client 20.220.189.106:58187] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaAcf4LiR0OfjFxvcN_5lwAAAMQ"]
[Thu Feb 26 18:12:19.973143 2026] [:error] [pid 55051:tid 55078] [client 20.220.189.106:58904] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaAcgwmK1w2kZvh5eLFAYAAAAJg"]
[Thu Feb 26 18:12:21.006761 2026] [:error] [pid 55051:tid 55065] [client 20.220.189.106:58201] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaAchQmK1w2kZvh5eLFAYgAAAIs"]
[Thu Feb 26 18:12:23.683341 2026] [:error] [pid 25311:tid 25333] [client 20.220.189.106:58223] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Cookie/theme.php__123"] [unique_id "aaAch9fdM__yZAgJFStqdwAAAZM"]
[Thu Feb 26 18:12:26.346405 2026] [:error] [pid 54991:tid 55024] [client 20.220.189.106:58190] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log404.php"] [unique_id "aaAcit4Zx-mJ8gbRB2i5CQAAAEQ"]
[Thu Feb 26 18:12:29.435708 2026] [:error] [pid 55618:tid 55638] [client 20.220.189.106:55890] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log404.php"] [unique_id "aaAcjR61Vrh12f_8oWTIeAAAARE"]
[Thu Feb 26 18:12:33.846631 2026] [:error] [pid 25311:tid 25325] [client 20.220.189.106:58239] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log404.php"] [unique_id "aaAckdfdM__yZAgJFStqgwAAAYs"]
[Thu Feb 26 18:12:37.986785 2026] [:error] [pid 54990:tid 54996] [client 20.220.189.106:58918] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log404.php"] [unique_id "aaAclXtr2qmt_mBhH2wCgwAAAAM"]
[Thu Feb 26 18:12:45.641683 2026] [:error] [pid 25311:tid 25332] [client 20.220.189.106:55915] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/updraft"] [unique_id "aaAcndfdM__yZAgJFStqjQAAAZI"]
[Thu Feb 26 18:12:49.568072 2026] [:error] [pid 54991:tid 55026] [client 20.220.189.106:58234] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/preferences/buy.php"] [unique_id "aaAcod4Zx-mJ8gbRB2i5HwAAAEY"]
[Thu Feb 26 18:12:52.425165 2026] [:error] [pid 25311:tid 25329] [client 20.220.189.106:58181] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaAcpNfdM__yZAgJFStqpQAAAY8"]
[Thu Feb 26 18:12:54.820336 2026] [:error] [pid 55618:tid 55625] [client 20.220.189.106:55904] File does not exist: /usr/local/apache/htdocs/suspended-page/phocsqfz.php
[Thu Feb 26 18:12:55.037587 2026] [:error] [pid 55618:tid 55632] [client 20.220.189.106:55904] File does not exist: /usr/local/apache/htdocs/suspended-page/Alex-Cross.php
[Thu Feb 26 18:12:55.992550 2026] [:error] [pid 55618:tid 55626] [client 20.220.189.106:55904] File does not exist: /usr/local/apache/htdocs/suspended-page/bkncxqju.php
[Thu Feb 26 18:12:56.629514 2026] [:error] [pid 55618:tid 55636] [client 20.220.189.106:55904] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php/text.php/images.php"] [unique_id "aaAcqB61Vrh12f_8oWTIlAAAAQ8"]
[Thu Feb 26 18:13:03.270281 2026] [:error] [pid 3883:tid 3900] [client 20.220.189.106:58895] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php/text.php/images.php"] [unique_id "aaAcr-A33x90V6yYHagf0wAAAU4"]
[Thu Feb 26 18:13:07.734411 2026] [:error] [pid 25311:tid 25318] [client 20.220.189.106:58916] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php/text.php/images.php"] [unique_id "aaAcs9fdM__yZAgJFStqxQAAAYQ"]
[Thu Feb 26 18:13:09.509387 2026] [:error] [pid 55122:tid 55144] [client 20.220.189.106:58891] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php/text.php/images.php"] [unique_id "aaActYLiR0OfjFxvcN_5wwAAANQ"]
[Thu Feb 26 18:13:14.400939 2026] [:error] [pid 3883:tid 3904] [client 20.220.189.106:55919] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaAcuuA33x90V6yYHagf8wAAAVI"]
[Thu Feb 26 18:13:16.689984 2026] [:error] [pid 54991:tid 55043] [client 20.220.189.106:58930] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaAcvN4Zx-mJ8gbRB2i5KAAAAFc"]
[Thu Feb 26 18:13:20.593435 2026] [:error] [pid 55051:tid 55070] [client 20.220.189.106:58932] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaAcwAmK1w2kZvh5eLFA1gAAAJA"]
[Thu Feb 26 18:13:22.303978 2026] [:error] [pid 3883:tid 3886] [client 20.220.189.106:58182] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/shell20211028.php"] [unique_id "aaAcwuA33x90V6yYHagf_gAAAUA"]
[Thu Feb 26 18:13:24.297794 2026] [:error] [pid 3883:tid 3894] [client 20.220.189.106:58189] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal/kcwepiaw.php"] [unique_id "aaAcxOA33x90V6yYHaggBQAAAUg"]
[Thu Feb 26 18:13:25.742733 2026] [:error] [pid 54991:tid 55041] [client 20.220.189.106:55882] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal/kcwepiaw.php"] [unique_id "aaAcxd4Zx-mJ8gbRB2i5LQAAAFU"]
[Thu Feb 26 18:13:27.966456 2026] [:error] [pid 55618:tid 55625] [client 20.220.189.106:55933] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal/kcwepiaw.php"] [unique_id "aaAcxx61Vrh12f_8oWTIwQAAAQQ"]
[Thu Feb 26 18:13:30.068811 2026] [:error] [pid 55122:tid 55139] [client 20.220.189.106:58920] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/portal/kcwepiaw.php"] [unique_id "aaAcyoLiR0OfjFxvcN_57AAAAM8"]
[Thu Feb 26 18:13:31.944439 2026] [:error] [pid 3883:tid 3895] [client 20.220.189.106:58217] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/admin.php"] [unique_id "aaAcy-A33x90V6yYHaggFwAAAUk"]
[Thu Feb 26 18:13:33.203861 2026] [:error] [pid 20419:tid 20437] [client 20.220.189.106:55881] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/admin.php"] [unique_id "aaAcze3DVDvMfTYYUBUBswAAAc8"]
[Thu Feb 26 18:13:34.298196 2026] [:error] [pid 55051:tid 55063] [client 20.220.189.106:58935] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/admin.php"] [unique_id "aaAczgmK1w2kZvh5eLFA5QAAAIk"]
[Thu Feb 26 18:13:35.277837 2026] [:error] [pid 25311:tid 25324] [client 20.220.189.106:58893] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/admin.php"] [unique_id "aaAcz9fdM__yZAgJFStq1AAAAYo"]
[Thu Feb 26 18:13:38.981617 2026] [:error] [pid 55618:tid 55642] [client 20.220.189.106:55905] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/20211028.php"] [unique_id "aaAc0h61Vrh12f_8oWTIzwAAARU"]
[Thu Feb 26 18:13:42.210138 2026] [:error] [pid 3883:tid 3909] [client 20.220.189.106:55824] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/20211028.php"] [unique_id "aaAc1uA33x90V6yYHaggLAAAAVc"]
[Thu Feb 26 18:13:47.706199 2026] [:error] [pid 20419:tid 20445] [client 20.220.189.106:58905] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/20211028.php"] [unique_id "aaAc2-3DVDvMfTYYUBUBwgAAAdc"]
[Thu Feb 26 18:13:49.907717 2026] [:error] [pid 54991:tid 55026] [client 20.220.189.106:58216] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/20211028.php"] [unique_id "aaAc3d4Zx-mJ8gbRB2i5QAAAAEY"]
[Thu Feb 26 18:13:52.789227 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:58214] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaAc4NfdM__yZAgJFStrCwAAAYI"]
[Thu Feb 26 18:13:54.820822 2026] [:error] [pid 3883:tid 3904] [client 20.220.189.106:58204] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaAc4uA33x90V6yYHaggOAAAAVI"]
[Thu Feb 26 18:13:56.397285 2026] [:error] [pid 3883:tid 3910] [client 20.220.189.106:55884] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Feb 26 18:13:56.811515 2026] [:error] [pid 3883:tid 3904] [client 20.220.189.106:55884] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Thu Feb 26 18:13:57.604999 2026] [:error] [pid 3883:tid 3906] [client 20.220.189.106:55884] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/CasperSecurity.php"] [unique_id "aaAc5eA33x90V6yYHaggTgAAAVQ"]
[Thu Feb 26 18:14:00.047255 2026] [:error] [pid 55122:tid 55128] [client 20.220.189.106:55931] File does not exist: /usr/local/apache/htdocs/suspended-page/wh.php
[Thu Feb 26 18:14:00.380825 2026] [:error] [pid 55122:tid 55135] [client 20.220.189.106:55931] File does not exist: /usr/local/apache/htdocs/suspended-page/zxhfwqyt.php
[Thu Feb 26 18:14:00.615643 2026] [:error] [pid 55122:tid 55125] [client 20.220.189.106:55931] File does not exist: /usr/local/apache/htdocs/suspended-page/ketiadfw.php
[Thu Feb 26 18:14:02.608768 2026] [:error] [pid 55122:tid 55142] [client 20.220.189.106:55931] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ans.php"] [unique_id "aaAc6oLiR0OfjFxvcN_6CgAAANI"]
[Thu Feb 26 18:14:03.475646 2026] [:error] [pid 25311:tid 25317] [client 20.220.189.106:58913] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ans.php"] [unique_id "aaAc69fdM__yZAgJFStrFAAAAYM"]
[Thu Feb 26 18:14:09.094751 2026] [:error] [pid 55618:tid 55637] [client 20.220.189.106:58943] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ans.php"] [unique_id "aaAc8R61Vrh12f_8oWTI7gAAARA"]
[Thu Feb 26 18:14:15.380099 2026] [:error] [pid 20419:tid 20444] [client 20.220.189.106:55880] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ans.php"] [unique_id "aaAc9-3DVDvMfTYYUBUCGwAAAdY"]
[Thu Feb 26 18:14:20.942309 2026] [:error] [pid 20419:tid 20427] [client 20.220.189.106:55809] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaAc_O3DVDvMfTYYUBUCIAAAAcU"]
[Thu Feb 26 18:14:25.004193 2026] [:error] [pid 20419:tid 20446] [client 20.220.189.106:58220] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaAdAe3DVDvMfTYYUBUCIwAAAdg"]
[Thu Feb 26 18:14:27.813947 2026] [:error] [pid 3883:tid 3905] [client 20.220.189.106:58229] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins/3rdPartyServers/ox3rdPartyServers/luuf.php"] [unique_id "aaAdA-A33x90V6yYHagg8QAAAVM"]
[Thu Feb 26 18:14:33.325334 2026] [:error] [pid 55122:tid 55133] [client 20.220.189.106:55829] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaAdCYLiR0OfjFxvcN_6LQAAAMk"]
[Thu Feb 26 18:14:37.512339 2026] [:error] [pid 55051:tid 55062] [client 20.220.189.106:58910] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaAdDQmK1w2kZvh5eLFBaQAAAIg"]
[Thu Feb 26 18:14:39.711895 2026] [:error] [pid 20419:tid 20430] [client 20.220.189.106:55899] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaAdD-3DVDvMfTYYUBUCLQAAAcg"]
[Thu Feb 26 18:14:41.807915 2026] [:error] [pid 3883:tid 3887] [client 20.220.189.106:55876] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaAdEeA33x90V6yYHaghDgAAAUE"]
[Thu Feb 26 18:14:44.847327 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:58191] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luf.php"] [unique_id "aaAdFOA33x90V6yYHaghGQAAAUY"]
[Thu Feb 26 18:14:45.441771 2026] [:error] [pid 3883:tid 3908] [client 20.220.189.106:58207] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luf.php"] [unique_id "aaAdFeA33x90V6yYHaghGwAAAVY"]
[Thu Feb 26 18:14:47.148476 2026] [:error] [pid 55051:tid 55075] [client 20.220.189.106:55924] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luf.php"] [unique_id "aaAdFwmK1w2kZvh5eLFBlgAAAJU"]
[Thu Feb 26 18:14:48.821181 2026] [:error] [pid 3883:tid 3891] [client 20.220.189.106:55853] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/luf.php"] [unique_id "aaAdGOA33x90V6yYHaghLwAAAUU"]
[Thu Feb 26 18:14:50.396665 2026] [:error] [pid 55618:tid 55641] [client 20.220.189.106:55886] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hvoxejcn.php"] [unique_id "aaAdGh61Vrh12f_8oWTJFAAAARQ"]
[Thu Feb 26 18:14:52.268921 2026] [:error] [pid 54990:tid 55004] [client 20.220.189.106:58192] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hvoxejcn.php"] [unique_id "aaAdHHtr2qmt_mBhH2wCyAAAAAs"]
[Thu Feb 26 18:14:57.561347 2026] [:error] [pid 25311:tid 25326] [client 20.220.189.106:55885] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hvoxejcn.php"] [unique_id "aaAdIdfdM__yZAgJFStrZwAAAYw"]
[Thu Feb 26 18:14:58.452289 2026] [:error] [pid 54990:tid 55008] [client 20.220.189.106:58224] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hvoxejcn.php"] [unique_id "aaAdIntr2qmt_mBhH2wCzwAAAA8"]
[Thu Feb 26 18:15:00.092514 2026] [:error] [pid 54990:tid 55016] [client 20.220.189.106:58233] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/hello-elementor/"] [unique_id "aaAdJHtr2qmt_mBhH2wC1AAAABc"]
[Thu Feb 26 18:15:03.627596 2026] [:error] [pid 25311:tid 25330] [client 20.220.189.106:55902] File does not exist: /usr/local/apache/htdocs/suspended-page/templatesdex.php
[Thu Feb 26 18:15:03.836431 2026] [:error] [pid 25311:tid 25338] [client 20.220.189.106:55902] File does not exist: /usr/local/apache/htdocs/suspended-page/vftjzsbm.php
[Thu Feb 26 18:15:04.854840 2026] [:error] [pid 25311:tid 25316] [client 20.220.189.106:55902] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/embed/admin.php"] [unique_id "aaAdKNfdM__yZAgJFStrgAAAAYI"]
[Thu Feb 26 18:15:07.295358 2026] [:error] [pid 25311:tid 25317] [client 20.220.189.106:58197] File does not exist: /usr/local/apache/htdocs/suspended-page/template-ajax.php
[Thu Feb 26 18:15:07.525330 2026] [:error] [pid 25311:tid 25314] [client 20.220.189.106:58197] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaAdK9fdM__yZAgJFStriwAAAYA"]
[Thu Feb 26 18:15:08.990837 2026] [:error] [pid 25311:tid 25320] [client 20.220.189.106:58195] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aaAdLNfdM__yZAgJFStrnAAAAYY"]
[Thu Feb 26 18:15:14.872704 2026] [:error] [pid 54990:tid 55002] [client 20.220.189.106:58919] [client 20.220.189.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/freeform/admin.php"] [unique_id "aaAdMntr2qmt_mBhH2wC_AAAAAk"]
[Thu Feb 26 18:46:34.836209 2026] [:error] [pid 20419:tid 20429] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Feb 26 18:46:34.976181 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Feb 26 18:46:35.130876 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Feb 26 18:46:35.262507 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 26 18:46:35.462082 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Feb 26 18:46:35.673833 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Feb 26 18:46:35.814736 2026] [:error] [pid 20419:tid 20442] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 26 18:46:35.992586 2026] [:error] [pid 20419:tid 20430] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 26 18:46:36.363902 2026] [:error] [pid 20419:tid 20433] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Feb 26 18:46:36.636655 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Feb 26 18:46:36.770989 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Feb 26 18:46:36.876404 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Feb 26 18:46:37.065966 2026] [:error] [pid 20419:tid 20441] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Feb 26 18:46:37.338590 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Feb 26 18:46:37.536240 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Feb 26 18:46:37.644606 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Feb 26 18:46:39.785493 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Feb 26 18:46:39.909586 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.42:21015] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Feb 26 18:46:41.902334 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.42:21015] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaAkke3DVDvMfTYYUBURCAAAAdA"]
[Thu Feb 26 18:46:42.563584 2026] [:error] [pid 55618:tid 55629] [client 193.37.32.29:63037] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaAkkh61Vrh12f_8oWTT_wAAAQg"]
[Thu Feb 26 18:46:43.258772 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.10:22713] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Feb 26 18:46:43.561662 2026] [:error] [pid 54991:tid 55031] [client 193.37.32.10:22713] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaAkk94Zx-mJ8gbRB2jALgAAAEs"]
[Thu Feb 26 18:46:44.126408 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.41:54131] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Feb 26 18:46:44.256306 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.41:54131] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaAklNfdM__yZAgJFSt7OQAAAYk"]
[Thu Feb 26 18:46:44.717829 2026] [:error] [pid 54990:tid 55013] [client 193.37.32.53:61371] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Feb 26 18:46:45.454707 2026] [:error] [pid 54990:tid 54993] [client 193.37.32.53:61371] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaAklXtr2qmt_mBhH2wIjAAAAAA"]
[Thu Feb 26 18:46:45.809451 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.40:27969] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaAkleA33x90V6yYHahAdQAAAU8"]
[Thu Feb 26 18:46:46.061441 2026] [:error] [pid 55618:tid 55624] [client 193.37.32.17:54459] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaAklh61Vrh12f_8oWTUIAAAAQM"]
[Thu Feb 26 18:46:46.270206 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.8:39035] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaAklgmK1w2kZvh5eLFYTgAAAIQ"]
[Thu Feb 26 18:46:46.557556 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.30:20011] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaAkluA33x90V6yYHahAkAAAAUg"]
[Thu Feb 26 18:46:46.817695 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.34:23915] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaAklgmK1w2kZvh5eLFYUQAAAIc"]
[Thu Feb 26 18:46:47.940941 2026] [:error] [pid 3883:tid 3903] [client 193.37.32.27:39271] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaAkl-A33x90V6yYHahAtwAAAVE"]
[Thu Feb 26 18:46:48.237893 2026] [:error] [pid 55122:tid 55124] [client 193.37.32.34:36945] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Feb 26 18:46:48.548840 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.34:36945] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaAkmILiR0OfjFxvcN8B1gAAAMw"]
[Thu Feb 26 18:46:49.161688 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.129:48979] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaAkmdfdM__yZAgJFSt7TgAAAZA"]
[Thu Feb 26 18:46:49.678903 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.16:56293] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaAkme3DVDvMfTYYUBURTwAAAcA"]
[Thu Feb 26 18:46:49.910442 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.25:28979] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Feb 26 18:46:50.120634 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.25:28979] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaAkmu3DVDvMfTYYUBURVwAAAdA"]
[Thu Feb 26 18:46:50.558748 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.22:65523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Feb 26 18:46:50.959858 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.22:65523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Feb 26 18:46:51.369727 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.22:65523] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaAkm-3DVDvMfTYYUBURZAAAAdE"]
[Thu Feb 26 18:46:51.717957 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.41:40561] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Feb 26 18:46:51.824594 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.41:40561] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaAkm9fdM__yZAgJFSt7XAAAAYk"]
[Thu Feb 26 18:46:52.046557 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.17:59601] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Feb 26 18:46:52.378232 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.17:59601] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaAknAmK1w2kZvh5eLFYiAAAAJQ"]
[Thu Feb 26 18:46:52.665540 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.37:46347] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaAknAmK1w2kZvh5eLFYlwAAAJQ"]
[Thu Feb 26 18:46:53.209143 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.5:35103] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Feb 26 18:46:53.311032 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.5:35103] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Feb 26 18:46:53.523811 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.5:35103] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaAknQmK1w2kZvh5eLFYtAAAAJQ"]
[Thu Feb 26 18:46:55.016927 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.9:23275] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaAkn-3DVDvMfTYYUBURiwAAAcA"]
[Thu Feb 26 18:46:55.503348 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.40:39695] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaAknwmK1w2kZvh5eLFYvwAAAJc"]
[Thu Feb 26 18:46:55.754408 2026] [:error] [pid 55122:tid 55128] [client 193.37.32.46:22199] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaAkn4LiR0OfjFxvcN8CFwAAAMQ"]
[Thu Feb 26 18:46:55.951857 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.16:33143] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaAkn-3DVDvMfTYYUBURjwAAAcI"]
[Thu Feb 26 18:46:56.419872 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.13:21835] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Feb 26 18:46:56.523203 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.13:21835] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaAkoAmK1w2kZvh5eLFY4gAAAIQ"]
[Thu Feb 26 18:46:56.747230 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.52:21079] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaAkoOA33x90V6yYHahBFAAAAVc"]
[Thu Feb 26 18:46:56.942790 2026] [:error] [pid 20419:tid 20428] [client 193.37.32.49:30307] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaAkoO3DVDvMfTYYUBURmQAAAcY"]
[Thu Feb 26 18:46:57.407600 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.19:30203] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Feb 26 18:46:57.658712 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.19:30203] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Feb 26 18:46:58.228398 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.19:30203] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaAkou3DVDvMfTYYUBURpwAAAdg"]
[Thu Feb 26 18:46:58.925104 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.49:41293] [client 193.37.32.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.49, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaAkogmK1w2kZvh5eLFZLgAAAJA"]
[Thu Feb 26 18:46:59.074635 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.49:41293] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Feb 26 18:46:59.824666 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.49:41293] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Feb 26 18:46:59.960351 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.49:41293] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Feb 26 18:47:00.911502 2026] [:error] [pid 55051:tid 55078] [client 193.37.32.49:41293] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaAkpAmK1w2kZvh5eLFZVAAAAJg"]
[Thu Feb 26 18:47:01.331232 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.51:35483] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Feb 26 18:47:01.475141 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.51:35483] [client 193.37.32.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.51, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaAkpQmK1w2kZvh5eLFZXQAAAIs"]
[Thu Feb 26 18:47:01.752033 2026] [:error] [pid 55051:tid 55063] [client 193.37.32.51:35483] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaAkpQmK1w2kZvh5eLFZZAAAAIk"]
[Thu Feb 26 18:47:02.583773 2026] [:error] [pid 55122:tid 55137] [client 193.37.32.16:25301] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Feb 26 18:47:02.806642 2026] [:error] [pid 55122:tid 55147] [client 193.37.32.16:25301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Feb 26 18:47:03.104358 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.16:25301] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaAkp4LiR0OfjFxvcN8CawAAAMU"]
[Thu Feb 26 18:47:03.461213 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.48:46097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Feb 26 18:47:03.933604 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.48:46097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Feb 26 18:47:04.235558 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.48:46097] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Feb 26 18:47:04.628962 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.48:46097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Feb 26 18:47:04.795305 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.48:46097] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaAkqNfdM__yZAgJFSt7hgAAAYc"]
[Thu Feb 26 18:47:05.042032 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.20:24017] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Feb 26 18:47:05.235591 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.20:24017] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Feb 26 18:47:05.383359 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.20:24017] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaAkqeA33x90V6yYHahBgQAAAVg"]
[Thu Feb 26 18:47:05.781957 2026] [:error] [pid 20419:tid 20426] [client 193.37.32.22:53563] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Feb 26 18:47:06.030483 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.22:53563] [client 193.37.32.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.22, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaAkqu3DVDvMfTYYUBURyQAAAco"]
[Thu Feb 26 18:47:06.135717 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.22:53563] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaAkqu3DVDvMfTYYUBURygAAAc4"]
[Thu Feb 26 18:47:09.545302 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.17:60117] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Feb 26 18:47:11.331120 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.17:60117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Feb 26 18:47:11.458052 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.17:60117] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaAkr9fdM__yZAgJFSt7qAAAAZI"]
[Thu Feb 26 18:47:11.830108 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.25:62017] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Feb 26 18:47:12.297965 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.25:62017] [client 193.37.32.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.25, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaAksAmK1w2kZvh5eLFZjwAAAJE"]
[Thu Feb 26 18:47:12.465692 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.25:62017] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Feb 26 18:47:12.683725 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.25:62017] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Feb 26 18:47:12.829334 2026] [:error] [pid 55051:tid 55068] [client 193.37.32.25:62017] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Feb 26 18:47:12.950478 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.25:62017] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaAksAmK1w2kZvh5eLFZowAAAJI"]
[Thu Feb 26 18:47:13.159509 2026] [:error] [pid 54991:tid 55043] [client 193.37.32.53:37591] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Feb 26 18:47:13.303406 2026] [:error] [pid 54991:tid 55025] [client 193.37.32.53:37591] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaAksd4Zx-mJ8gbRB2jAkwAAAEU"]
[Thu Feb 26 18:47:13.886503 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.52:57769] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Feb 26 18:47:14.035226 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.52:57769] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaAkstfdM__yZAgJFSt7zAAAAYs"]
[Thu Feb 26 18:47:14.717605 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.39:64161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Feb 26 18:47:14.934526 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.39:64161] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaAkstfdM__yZAgJFSt72wAAAZM"]
[Thu Feb 26 18:47:15.210517 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.31:61057] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaAks9fdM__yZAgJFSt73wAAAYA"]
[Thu Feb 26 18:47:17.591817 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.129:24493] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Feb 26 18:47:17.702468 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.129:24493] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Feb 26 18:47:18.166158 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.129:24493] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaAktuA33x90V6yYHahB8AAAAUE"]
[Thu Feb 26 18:47:18.556800 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.19:26453] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaAktgmK1w2kZvh5eLFaDgAAAJM"]
[Thu Feb 26 18:47:19.317672 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.50:30135] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaAktwmK1w2kZvh5eLFaIQAAAJE"]
[Thu Feb 26 18:47:19.618580 2026] [:error] [pid 55618:tid 55642] [client 193.37.32.47:37353] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Feb 26 18:47:21.534188 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.47:37353] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Feb 26 18:47:21.638624 2026] [:error] [pid 55618:tid 55638] [client 193.37.32.47:37353] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaAkuR61Vrh12f_8oWTUzAAAARE"]
[Thu Feb 26 18:47:21.847789 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.49:29601] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 26 18:47:22.212733 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.49:29601] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaAkugmK1w2kZvh5eLFaOQAAAJU"]
[Thu Feb 26 18:47:22.844885 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.14:26171] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaAkuuA33x90V6yYHahCKAAAAVQ"]
[Thu Feb 26 18:47:23.159115 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.33:37505] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Feb 26 18:47:23.502528 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.33:37505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Feb 26 18:47:23.716102 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.33:37505] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Feb 26 18:47:23.828587 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.33:37505] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaAku9fdM__yZAgJFSt8IQAAAZM"]
[Thu Feb 26 18:47:24.062506 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.53:55371] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaAkvAmK1w2kZvh5eLFaRwAAAJM"]
[Thu Feb 26 18:47:24.437368 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.21:39093] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaAkvOA33x90V6yYHahCPwAAAUU"]
[Thu Feb 26 18:47:24.654250 2026] [:error] [pid 55122:tid 55134] [client 193.37.32.35:42963] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaAkvILiR0OfjFxvcN8C6wAAAMo"]
[Thu Feb 26 18:47:24.909498 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.10:40073] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Feb 26 18:47:25.008663 2026] [:error] [pid 55122:tid 55132] [client 193.37.32.10:40073] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaAkvYLiR0OfjFxvcN8C9QAAAMg"]
[Thu Feb 26 18:47:25.212577 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.40:20587] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaAkvQmK1w2kZvh5eLFaTQAAAJY"]
[Thu Feb 26 18:47:25.511066 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.5:33181] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Feb 26 18:47:25.738940 2026] [:error] [pid 55051:tid 55062] [client 193.37.32.5:33181] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaAkvQmK1w2kZvh5eLFaUAAAAIg"]
[Thu Feb 26 18:47:25.941735 2026] [:error] [pid 25311:tid 25336] [client 193.37.32.21:46001] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaAkvdfdM__yZAgJFSt8JAAAAZY"]
[Thu Feb 26 18:47:26.139204 2026] [:error] [pid 55618:tid 55625] [client 193.37.32.10:45613] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaAkvh61Vrh12f_8oWTU5AAAAQQ"]
[Thu Feb 26 18:47:26.357787 2026] [:error] [pid 54991:tid 55035] [client 193.37.32.36:47713] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaAkvt4Zx-mJ8gbRB2jAvAAAAE8"]
[Thu Feb 26 18:47:26.763884 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.49:44847] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaAkvgmK1w2kZvh5eLFabAAAAJI"]
[Thu Feb 26 18:47:27.236602 2026] [:error] [pid 55051:tid 55066] [client 193.37.32.6:64421] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaAkvwmK1w2kZvh5eLFafQAAAIw"]
[Thu Feb 26 18:47:27.494322 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.28:24065] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Feb 26 18:47:27.937628 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.28:24065] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Feb 26 18:47:28.058306 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.28:24065] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaAkwAmK1w2kZvh5eLFamgAAAII"]
[Thu Feb 26 18:47:28.466107 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.49:45575] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Feb 26 18:47:28.594547 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.49:45575] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Feb 26 18:47:29.252935 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.49:45575] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaAkwQmK1w2kZvh5eLFapgAAAIc"]
[Thu Feb 26 18:47:29.864809 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.12:27187] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaAkweA33x90V6yYHahCVAAAAUs"]
[Thu Feb 26 18:47:30.191510 2026] [:error] [pid 20419:tid 20441] [client 193.37.32.45:22463] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaAkwu3DVDvMfTYYUBUSoQAAAdM"]
[Thu Feb 26 18:47:31.286676 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.45:36645] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaAkw-3DVDvMfTYYUBUSqQAAAcA"]
[Thu Feb 26 18:47:33.767525 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.45:43029] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Feb 26 18:47:33.920807 2026] [:error] [pid 55051:tid 55066] [client 193.37.32.45:43029] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Feb 26 18:47:34.060401 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.45:43029] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Feb 26 18:47:34.161857 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.45:43029] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Feb 26 18:47:35.508164 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.45:43029] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaAkxwmK1w2kZvh5eLFbAwAAAJU"]
[Thu Feb 26 18:47:35.847358 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.9:57641] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaAkx-3DVDvMfTYYUBUSzgAAAco"]
[Thu Feb 26 18:47:36.071592 2026] [:error] [pid 20419:tid 20429] [client 193.37.32.27:65521] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaAkyO3DVDvMfTYYUBUS0gAAAcc"]
[Thu Feb 26 18:47:36.434801 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.6:24727] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaAkyNfdM__yZAgJFSt8SQAAAY0"]
[Thu Feb 26 18:47:36.641935 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.4:51567] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaAkyNfdM__yZAgJFSt8TAAAAYU"]
[Thu Feb 26 18:47:36.818192 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.37:64415] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaAkyO3DVDvMfTYYUBUS5AAAAcI"]
[Thu Feb 26 18:47:37.170120 2026] [:error] [pid 54991:tid 55023] [client 193.37.32.18:44347] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaAkyd4Zx-mJ8gbRB2jA2QAAAEM"]
[Thu Feb 26 18:47:37.445842 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.53:53367] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaAkydfdM__yZAgJFSt8YQAAAYg"]
[Thu Feb 26 18:47:37.671910 2026] [:error] [pid 25311:tid 25336] [client 193.37.32.19:33507] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaAkydfdM__yZAgJFSt8ZQAAAZY"]
[Thu Feb 26 18:47:37.947782 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.33:46401] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaAkyQmK1w2kZvh5eLFbEAAAAJM"]
[Thu Feb 26 18:47:38.469690 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.36:55721] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaAkyt4Zx-mJ8gbRB2jA3AAAAEA"]
[Thu Feb 26 18:47:38.865755 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.51:25693] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaAkyu3DVDvMfTYYUBUTBQAAAc0"]
[Thu Feb 26 18:47:39.145260 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.47:63967] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Feb 26 18:47:39.379880 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.47:63967] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaAky9fdM__yZAgJFSt8gAAAAYU"]
[Thu Feb 26 18:47:39.892855 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.13:64387] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaAkyx61Vrh12f_8oWTVGQAAARY"]
[Thu Feb 26 18:47:40.351798 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.15:56937] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Feb 26 18:47:40.522021 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.15:56937] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaAkzOA33x90V6yYHahCoAAAAUI"]
[Thu Feb 26 18:47:40.863313 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.26:20557] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Feb 26 18:47:40.999640 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.26:20557] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Feb 26 18:47:41.164420 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.26:20557] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Feb 26 18:47:41.258138 2026] [:error] [pid 3883:tid 3903] [client 193.37.32.26:20557] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaAkzeA33x90V6yYHahCuQAAAVE"]
[Thu Feb 26 18:47:41.474142 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.11:37215] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Feb 26 18:47:41.620489 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.11:37215] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaAkzeA33x90V6yYHahCxgAAAU8"]
[Thu Feb 26 18:47:44.284917 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Feb 26 18:47:44.391701 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 26 18:47:44.486619 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Feb 26 18:47:45.102190 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Feb 26 18:47:45.237011 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Feb 26 18:47:45.470519 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Feb 26 18:47:45.791684 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.4:45849] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Feb 26 18:47:45.931006 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.4:45849] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaAk0eA33x90V6yYHahDDgAAAUg"]
[Thu Feb 26 18:47:46.164202 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.46:48839] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaAk0tfdM__yZAgJFSt8tQAAAYQ"]
[Thu Feb 26 18:47:46.505601 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.37:41381] [client 193.37.32.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.37, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaAk0tfdM__yZAgJFSt8uAAAAYg"]
[Thu Feb 26 18:47:46.509183 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.37:41381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Feb 26 18:47:46.622837 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.37:41381] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Feb 26 18:47:46.727178 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.37:41381] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaAk0tfdM__yZAgJFSt8uwAAAYI"]
[Thu Feb 26 18:47:47.085798 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.40:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Feb 26 18:47:47.301697 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.40:61001] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaAk0wmK1w2kZvh5eLFbcAAAAIs"]
[Thu Feb 26 18:47:47.552495 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.17:48951] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaAk09fdM__yZAgJFSt8wgAAAYw"]
[Thu Feb 26 18:47:48.447586 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.24:21943] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaAk1AmK1w2kZvh5eLFbjQAAAJA"]
[Thu Feb 26 18:47:48.665228 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.14:40329] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aaAk1NfdM__yZAgJFSt80QAAAYI"]
[Thu Feb 26 18:47:49.575678 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.16:26985] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Feb 26 18:47:49.804926 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.16:26985] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaAk1dfdM__yZAgJFSt85AAAAYE"]
[Thu Feb 26 18:47:50.466686 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.17:27613] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Feb 26 18:47:50.680398 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.17:27613] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaAk1tfdM__yZAgJFSt89wAAAYA"]
[Thu Feb 26 18:47:50.911814 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.22:26651] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaAk1t4Zx-mJ8gbRB2jA9gAAAFU"]
[Thu Feb 26 18:47:51.222746 2026] [:error] [pid 55122:tid 55131] [client 193.37.32.20:53173] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Feb 26 18:47:51.397622 2026] [:error] [pid 55122:tid 55148] [client 193.37.32.20:53173] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaAk14LiR0OfjFxvcN8DyQAAANg"]
[Thu Feb 26 18:47:51.657233 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.12:30789] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaAk1-3DVDvMfTYYUBUTRQAAAc0"]
[Thu Feb 26 18:47:52.128336 2026] [:error] [pid 55122:tid 55133] [client 193.37.32.29:57217] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Feb 26 18:47:52.238549 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.29:57217] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Feb 26 18:47:52.500432 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.29:57217] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Feb 26 18:47:52.747753 2026] [:error] [pid 55122:tid 55124] [client 193.37.32.29:57217] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaAk2ILiR0OfjFxvcN8D1gAAAMA"]
[Thu Feb 26 18:47:53.069438 2026] [:error] [pid 55122:tid 55137] [client 193.37.32.25:58605] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaAk2YLiR0OfjFxvcN8D1wAAAM0"]
[Thu Feb 26 18:47:54.036875 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.7:43449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Feb 26 18:47:54.149160 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.7:43449] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaAk2uA33x90V6yYHahDWgAAAUk"]
[Thu Feb 26 18:47:54.380069 2026] [:error] [pid 55618:tid 55639] [client 193.37.32.30:43915] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaAk2h61Vrh12f_8oWTVnAAAARI"]
[Thu Feb 26 18:47:54.622546 2026] [:error] [pid 55618:tid 55624] [client 193.37.32.45:38677] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaAk2h61Vrh12f_8oWTVnQAAAQM"]
[Thu Feb 26 18:47:55.417615 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.43:36681] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Feb 26 18:47:55.521136 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.43:36681] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaAk2wmK1w2kZvh5eLFb5AAAAIc"]
[Thu Feb 26 18:47:55.920831 2026] [:error] [pid 20419:tid 20426] [client 193.37.32.27:20835] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaAk2-3DVDvMfTYYUBUTdQAAAcQ"]
[Thu Feb 26 18:47:56.181458 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.27:43519] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Feb 26 18:47:58.358725 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.27:43519] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Feb 26 18:47:58.571518 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.27:43519] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Feb 26 18:47:59.160869 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.27:43519] [client 193.37.32.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.27, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaAk3wmK1w2kZvh5eLFcKgAAAJA"]
[Thu Feb 26 18:47:59.443168 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.27:43519] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Feb 26 18:47:59.552598 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.27:43519] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Feb 26 18:47:59.681166 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.27:43519] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Feb 26 18:47:59.969127 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.27:43519] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaAk3wmK1w2kZvh5eLFcMwAAAJM"]
[Thu Feb 26 18:48:00.251648 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.42:61961] [client 193.37.32.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.42, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaAk4OA33x90V6yYHahDdQAAAUk"]
[Thu Feb 26 18:48:01.197751 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Feb 26 18:48:01.359405 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Feb 26 18:48:01.571020 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Feb 26 18:48:02.196707 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Feb 26 18:48:02.615961 2026] [:error] [pid 3883:tid 3903] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Feb 26 18:48:03.579335 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Feb 26 18:48:03.713004 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Feb 26 18:48:04.327505 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.42:61961] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Feb 26 18:48:04.717824 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.42:61961] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaAk5OA33x90V6yYHahDwwAAAUc"]
[Thu Feb 26 18:48:05.284210 2026] [:error] [pid 55618:tid 55640] [client 193.37.32.38:41363] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Feb 26 18:48:05.395471 2026] [:error] [pid 55618:tid 55636] [client 193.37.32.38:41363] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaAk5R61Vrh12f_8oWTVwAAAAQ8"]
[Thu Feb 26 18:48:05.810515 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.35:45541] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Feb 26 18:48:05.929551 2026] [:error] [pid 20419:tid 20443] [client 193.37.32.35:45541] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaAk5e3DVDvMfTYYUBUTxAAAAdU"]
[Thu Feb 26 18:48:06.440859 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.30:25267] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Feb 26 18:48:06.658484 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.30:25267] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Feb 26 18:48:06.950586 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.30:25267] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Feb 26 18:48:07.179258 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.30:25267] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Feb 26 18:48:07.517874 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.30:25267] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaAk5-A33x90V6yYHahD2QAAAUg"]
[Thu Feb 26 18:48:07.765472 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.51:24021] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Feb 26 18:48:07.922916 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.51:24021] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Feb 26 18:48:08.052777 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.51:24021] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaAk6OA33x90V6yYHahD5wAAAU8"]
[Thu Feb 26 18:48:08.405530 2026] [:error] [pid 55122:tid 55126] [client 193.37.32.6:53897] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaAk6ILiR0OfjFxvcN8EEAAAAMI"]
[Thu Feb 26 18:48:08.903948 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.21:30229] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Feb 26 18:48:09.294695 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.21:30229] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Feb 26 18:48:09.400675 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.21:30229] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Feb 26 18:48:09.512053 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.21:30229] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaAk6dfdM__yZAgJFSt9NgAAAYg"]
[Thu Feb 26 18:48:09.714929 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.45:61509] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaAk6eA33x90V6yYHahD-gAAAVA"]
[Thu Feb 26 18:48:12.464625 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.48:36165] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Feb 26 18:48:12.669842 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.48:36165] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaAk7NfdM__yZAgJFSt9QwAAAZQ"]
[Thu Feb 26 18:48:13.032827 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.27:35243] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaAk7QmK1w2kZvh5eLFc-QAAAIc"]
[Thu Feb 26 18:48:13.427330 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.6:43331] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 26 18:48:13.587400 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.6:43331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Feb 26 18:48:13.702414 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.6:43331] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaAk7QmK1w2kZvh5eLFdFAAAAIo"]
[Thu Feb 26 18:48:14.098141 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.42:65461] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Feb 26 18:48:14.285681 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.42:65461] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Feb 26 18:48:14.549338 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.42:65461] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Feb 26 18:48:15.028045 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.42:65461] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaAk79fdM__yZAgJFSt9XAAAAZI"]
[Thu Feb 26 18:48:15.309924 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.5:40007] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Feb 26 18:48:15.879640 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.5:40007] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaAk7wmK1w2kZvh5eLFdSwAAAII"]
[Thu Feb 26 18:48:16.250308 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.34:55497] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Feb 26 18:48:16.610140 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.34:55497] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Feb 26 18:48:16.728276 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.34:55497] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Feb 26 18:48:16.986520 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.34:55497] [client 193.37.32.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.34, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaAk8OA33x90V6yYHahEYgAAAU8"]
[Thu Feb 26 18:48:17.787406 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.34:55497] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaAk8eA33x90V6yYHahEawAAAVU"]
[Thu Feb 26 18:48:18.099618 2026] [:error] [pid 55122:tid 55127] [client 193.37.32.23:43725] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Feb 26 18:48:18.200517 2026] [:error] [pid 55122:tid 55124] [client 193.37.32.23:43725] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaAk8oLiR0OfjFxvcN8ELQAAAMA"]
[Thu Feb 26 18:48:18.552021 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.9:60601] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Feb 26 18:48:18.919374 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.9:60601] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Feb 26 18:48:19.202163 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.9:60601] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaAk8-A33x90V6yYHahEcwAAAVg"]
[Thu Feb 26 18:48:19.639464 2026] [:error] [pid 54991:tid 55034] [client 193.37.32.8:38937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Feb 26 18:48:19.735904 2026] [:error] [pid 54991:tid 55039] [client 193.37.32.8:38937] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Feb 26 18:48:20.020054 2026] [:error] [pid 54991:tid 55031] [client 193.37.32.8:38937] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaAk9N4Zx-mJ8gbRB2jBSgAAAEs"]
[Thu Feb 26 18:48:20.399881 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.9:28853] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaAk9O3DVDvMfTYYUBUUBQAAAcI"]
[Thu Feb 26 18:48:20.649712 2026] [:error] [pid 54990:tid 55016] [client 193.37.32.20:58291] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Feb 26 18:48:20.766293 2026] [:error] [pid 54990:tid 55012] [client 193.37.32.20:58291] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Feb 26 18:48:20.973626 2026] [:error] [pid 54990:tid 55003] [client 193.37.32.20:58291] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaAk9Htr2qmt_mBhH2wJEgAAAAo"]
[Thu Feb 26 18:48:21.300849 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.20:38587] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Feb 26 18:48:21.563824 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.20:38587] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Feb 26 18:48:21.666493 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.20:38587] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaAk9eA33x90V6yYHahEhgAAAVM"]
[Thu Feb 26 18:48:22.006450 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.24:50677] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aaAk9tfdM__yZAgJFSt9fQAAAZQ"]
[Thu Feb 26 18:48:22.187235 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.13:65451] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaAk9oLiR0OfjFxvcN8EQwAAAM4"]
[Thu Feb 26 18:48:22.505958 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.6:58881] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaAk9u3DVDvMfTYYUBUUCQAAAcE"]
[Thu Feb 26 18:48:22.820300 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.33:57733] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaAk9u3DVDvMfTYYUBUUCgAAAc4"]
[Thu Feb 26 18:48:23.047978 2026] [:error] [pid 55618:tid 55624] [client 193.37.32.38:59767] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaAk9x61Vrh12f_8oWTV6AAAAQM"]
[Thu Feb 26 18:48:23.332412 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.36:65477] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaAk9-A33x90V6yYHahEjAAAAVI"]
[Thu Feb 26 18:48:23.867637 2026] [:error] [pid 54991:tid 55025] [client 193.37.32.47:20765] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaAk994Zx-mJ8gbRB2jBdwAAAEU"]
[Thu Feb 26 18:48:24.113040 2026] [:error] [pid 55618:tid 55638] [client 193.37.32.130:59229] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaAk-B61Vrh12f_8oWTV7QAAARE"]
[Thu Feb 26 18:48:24.291028 2026] [:error] [pid 54990:tid 55003] [client 193.37.32.39:35035] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaAk-Htr2qmt_mBhH2wJIgAAAAo"]
[Thu Feb 26 18:48:24.626136 2026] [:error] [pid 55618:tid 55630] [client 193.37.32.31:47431] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaAk-B61Vrh12f_8oWTV8gAAAQk"]
[Thu Feb 26 18:48:25.158806 2026] [:error] [pid 54991:tid 55039] [client 193.37.32.26:25621] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaAk-d4Zx-mJ8gbRB2jBgAAAAFM"]
[Thu Feb 26 18:48:25.451028 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.32:20239] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Feb 26 18:48:26.012495 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.32:20239] [client 193.37.32.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.32, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaAk-oLiR0OfjFxvcN8EdQAAAMU"]
[Thu Feb 26 18:48:26.837632 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.32:20239] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaAk-oLiR0OfjFxvcN8EjQAAAMU"]
[Thu Feb 26 18:48:27.031496 2026] [:error] [pid 55122:tid 55126] [client 193.37.32.45:38409] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaAk-4LiR0OfjFxvcN8EkgAAAMI"]
[Thu Feb 26 18:48:27.666638 2026] [:error] [pid 55618:tid 55642] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Feb 26 18:48:27.817618 2026] [:error] [pid 55618:tid 55625] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Feb 26 18:48:28.412287 2026] [:error] [pid 55618:tid 55644] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Feb 26 18:48:28.554491 2026] [:error] [pid 55618:tid 55632] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Feb 26 18:48:29.161633 2026] [:error] [pid 55618:tid 55621] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Feb 26 18:48:29.277983 2026] [:error] [pid 55618:tid 55641] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Feb 26 18:48:29.388671 2026] [:error] [pid 55618:tid 55642] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Feb 26 18:48:29.515931 2026] [:error] [pid 55618:tid 55627] [client 193.37.32.22:46297] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Feb 26 18:48:29.624349 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.22:46297] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaAk_R61Vrh12f_8oWTWFwAAARY"]
[Thu Feb 26 18:48:29.871545 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.24:20377] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaAk_eA33x90V6yYHahE8wAAAU4"]
[Thu Feb 26 18:48:30.102670 2026] [:error] [pid 55618:tid 55635] [client 193.37.32.43:63807] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaAk_h61Vrh12f_8oWTWGgAAAQ4"]
[Thu Feb 26 18:48:30.482677 2026] [:error] [pid 55122:tid 55126] [client 193.37.32.40:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Feb 26 18:48:30.845831 2026] [:error] [pid 55122:tid 55132] [client 193.37.32.40:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Feb 26 18:48:31.184821 2026] [:error] [pid 55122:tid 55128] [client 193.37.32.40:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Feb 26 18:48:32.543972 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.40:46789] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaAlAILiR0OfjFxvcN8EwQAAANA"]
[Thu Feb 26 18:48:32.885974 2026] [:error] [pid 54991:tid 55040] [client 193.37.32.45:57769] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaAlAN4Zx-mJ8gbRB2jBrwAAAFQ"]
[Thu Feb 26 18:48:33.200522 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.37:61647] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaAlAeA33x90V6yYHahFPwAAAVc"]
[Thu Feb 26 18:48:35.967125 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.9:56205] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaAlA-A33x90V6yYHahFfgAAAU4"]
[Thu Feb 26 18:48:36.702140 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.42:61741] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaAlBOA33x90V6yYHahFhwAAAUc"]
[Thu Feb 26 18:48:37.179980 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.6:28571] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaAlBeA33x90V6yYHahFlQAAAUI"]
[Thu Feb 26 18:48:38.969661 2026] [:error] [pid 55051:tid 55066] [client 193.37.32.36:20601] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaAlBgmK1w2kZvh5eLFeUwAAAIw"]
[Thu Feb 26 18:48:39.177555 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.8:46421] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Feb 26 18:48:40.091541 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.8:46421] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aaAlCOA33x90V6yYHahFwQAAAUE"]
[Thu Feb 26 18:48:40.682201 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.42:27023] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Feb 26 18:48:41.075708 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.42:27023] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Feb 26 18:48:41.189379 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.42:27023] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaAlCdfdM__yZAgJFSt9uAAAAY0"]
[Thu Feb 26 18:48:41.870125 2026] [:error] [pid 20419:tid 20441] [client 193.37.32.13:25613] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaAlCe3DVDvMfTYYUBUUXwAAAdM"]
[Thu Feb 26 18:48:42.672005 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.32:37151] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaAlCt4Zx-mJ8gbRB2jBxwAAAFU"]
[Thu Feb 26 18:48:43.689425 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.16:45161] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaAlC-A33x90V6yYHahGGwAAAVc"]
[Thu Feb 26 18:48:44.134706 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.52:20249] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Feb 26 18:48:44.332408 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.52:20249] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaAlDOA33x90V6yYHahGJwAAAVY"]
[Thu Feb 26 18:48:44.640720 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.18:49897] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaAlDNfdM__yZAgJFSt9xAAAAZE"]
[Thu Feb 26 18:48:45.497741 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.14:54843] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaAlDeA33x90V6yYHahGMAAAAUc"]
[Thu Feb 26 18:48:45.721345 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.52:56073] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Feb 26 18:48:46.185108 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.52:56073] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Feb 26 18:48:46.326967 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.52:56073] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaAlDtfdM__yZAgJFSt96gAAAZQ"]
[Thu Feb 26 18:48:46.865510 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.24:57621] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Feb 26 18:48:47.121751 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.24:57621] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaAlDwmK1w2kZvh5eLFekAAAAJE"]
[Thu Feb 26 18:48:47.500574 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.8:43947] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaAlDwmK1w2kZvh5eLFelAAAAJU"]
[Thu Feb 26 18:48:48.058820 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.42:28403] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaAlEAmK1w2kZvh5eLFeogAAAIA"]
[Thu Feb 26 18:48:49.168532 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.37:52297] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaAlEQmK1w2kZvh5eLFeuQAAAIo"]
[Thu Feb 26 18:48:49.461768 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.31:27387] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaAlEQmK1w2kZvh5eLFevgAAAII"]
[Thu Feb 26 18:48:49.780553 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.13:24125] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Feb 26 18:48:50.483981 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.13:24125] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaAlEtfdM__yZAgJFSt-FwAAAY0"]
[Thu Feb 26 18:48:51.040327 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.129:37817] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaAlEwmK1w2kZvh5eLFe1AAAAJA"]
[Thu Feb 26 18:48:51.264766 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.35:24447] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaAlEwmK1w2kZvh5eLFe1wAAAJQ"]
[Thu Feb 26 18:48:51.659327 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.18:29715] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Feb 26 18:48:52.078623 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.18:29715] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaAlFAmK1w2kZvh5eLFe7AAAAIQ"]
[Thu Feb 26 18:48:53.386646 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.11:29253] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaAlFdfdM__yZAgJFSt-PgAAAYY"]
[Thu Feb 26 18:48:54.178348 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.5:51987] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaAlFuA33x90V6yYHahGgAAAAVI"]
[Thu Feb 26 18:48:54.583291 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.19:58321] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Feb 26 18:48:54.709952 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.19:58321] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaAlFgmK1w2kZvh5eLFfGQAAAJU"]
[Thu Feb 26 18:48:55.281271 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.27:21249] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaAlF9fdM__yZAgJFSt-XQAAAZE"]
[Thu Feb 26 18:48:55.814188 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.25:57725] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aaAlFwmK1w2kZvh5eLFfNAAAAJA"]
[Thu Feb 26 18:48:56.240241 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.45:57187] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaAlGOA33x90V6yYHahGkAAAAVA"]
[Thu Feb 26 18:48:56.546431 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.48:56509] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aaAlGOA33x90V6yYHahGkwAAAVU"]
[Thu Feb 26 18:48:56.798109 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.25:53751] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaAlGAmK1w2kZvh5eLFfSAAAAIs"]
[Thu Feb 26 18:48:57.871957 2026] [:error] [pid 55051:tid 55057] [client 193.37.32.40:41031] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaAlGQmK1w2kZvh5eLFfZgAAAIM"]
[Thu Feb 26 18:48:58.551922 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.12:28205] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaAlGtfdM__yZAgJFSt-kwAAAYw"]
[Thu Feb 26 18:48:59.106898 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.130:26815] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Feb 26 18:48:59.286611 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.130:26815] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaAlG9fdM__yZAgJFSt-qQAAAYE"]
[Thu Feb 26 18:48:59.950953 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.21:23873] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaAlG9fdM__yZAgJFSt-uwAAAYw"]
[Thu Feb 26 18:49:00.198171 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.31:26829] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Feb 26 18:49:01.617032 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.11:26159] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaAlHdfdM__yZAgJFSt-6gAAAYc"]
[Thu Feb 26 18:49:02.025122 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.34:46365] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaAlHu3DVDvMfTYYUBUUpwAAAdc"]
[Thu Feb 26 18:49:03.800913 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.9:59505] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaAlH-3DVDvMfTYYUBUUvAAAAc0"]
[Thu Feb 26 18:49:04.356689 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.28:29365] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaAlIO3DVDvMfTYYUBUUyAAAAcE"]
[Thu Feb 26 18:49:07.820967 2026] [:error] [pid 54991:tid 55024] [client 193.37.32.31:46755] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaAlI94Zx-mJ8gbRB2jB4gAAAEQ"]
[Thu Feb 26 18:49:08.150553 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.35:21941] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaAlJILiR0OfjFxvcN8FBgAAAMU"]
[Thu Feb 26 18:49:08.849490 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.42:56927] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaAlJNfdM__yZAgJFSt_YQAAAZI"]
[Thu Feb 26 18:49:09.189323 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.43:39043] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaAlJdfdM__yZAgJFSt_aQAAAYE"]
[Thu Feb 26 18:49:09.717339 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.44:36849] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaAlJQmK1w2kZvh5eLFfpQAAAIY"]
[Thu Feb 26 18:49:10.106895 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.32:46299] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaAlJtfdM__yZAgJFSt_iQAAAYk"]
[Thu Feb 26 18:49:10.356609 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.44:26025] [client 193.37.32.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.44, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaAlJtfdM__yZAgJFSt_lAAAAYU"]
[Thu Feb 26 18:49:10.360855 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.44:26025] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Feb 26 18:49:10.464240 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.44:26025] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaAlJtfdM__yZAgJFSt_mgAAAYY"]
[Thu Feb 26 18:49:11.022801 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.25:29361] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Feb 26 18:49:11.173707 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.25:29361] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaAlJ9fdM__yZAgJFSt_tQAAAY4"]
[Thu Feb 26 18:49:11.404410 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.4:42723] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aaAlJ-A33x90V6yYHahGygAAAUg"]
[Thu Feb 26 18:49:11.622546 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.49:44237] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Feb 26 18:49:12.494245 2026] [:error] [pid 20419:tid 20430] [client 193.37.32.49:44237] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaAlKO3DVDvMfTYYUBUVBAAAAcg"]
[Thu Feb 26 18:49:12.720750 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.29:44957] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaAlKOA33x90V6yYHahG2wAAAUE"]
[Thu Feb 26 18:49:15.102583 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.24:50339] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaAlK-A33x90V6yYHahG5AAAAUo"]
[Thu Feb 26 18:49:15.455275 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.52:53733] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaAlKwmK1w2kZvh5eLFfzQAAAJI"]
[Thu Feb 26 18:49:15.842643 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.7:24505] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Feb 26 18:49:15.973103 2026] [:error] [pid 55618:tid 55644] [client 193.37.32.7:24505] [client 193.37.32.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.7, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaAlKx61Vrh12f_8oWTWagAAARc"]
[Thu Feb 26 18:49:16.199732 2026] [:error] [pid 55618:tid 55630] [client 193.37.32.7:24505] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaAlLB61Vrh12f_8oWTWbAAAAQk"]
[Thu Feb 26 18:49:16.990047 2026] [:error] [pid 20419:tid 20437] [client 193.37.32.7:24593] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaAlLO3DVDvMfTYYUBUVHQAAAc8"]
[Thu Feb 26 18:49:17.266440 2026] [:error] [pid 55051:tid 55066] [client 193.37.32.12:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Feb 26 18:49:17.411488 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.12:33341] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaAlLQmK1w2kZvh5eLFf4gAAAJQ"]
[Thu Feb 26 18:49:17.657230 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.53:34899] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaAlLe3DVDvMfTYYUBUVIQAAAdE"]
[Thu Feb 26 18:49:17.897272 2026] [:error] [pid 55618:tid 55627] [client 193.37.32.17:20919] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Feb 26 18:49:18.396521 2026] [:error] [pid 55618:tid 55628] [client 193.37.32.17:20919] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaAlLh61Vrh12f_8oWTWdAAAAQc"]
[Thu Feb 26 18:49:18.961791 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.52:44391] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaAlLtfdM__yZAgJFSuAAAAAAYA"]
[Thu Feb 26 18:49:19.199377 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.37:60147] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Feb 26 18:49:19.482077 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.37:60147] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Feb 26 18:49:19.767810 2026] [:error] [pid 20419:tid 20437] [client 193.37.32.37:60147] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaAlL-3DVDvMfTYYUBUVOQAAAc8"]
[Thu Feb 26 18:49:20.179190 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.25:37959] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaAlMNfdM__yZAgJFSuANwAAAYM"]
[Thu Feb 26 18:49:20.577868 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.26:22929] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aaAlMNfdM__yZAgJFSuARwAAAY8"]
[Thu Feb 26 18:49:20.821121 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.48:53867] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Feb 26 18:49:21.558007 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.48:53867] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaAlMdfdM__yZAgJFSuAbwAAAYA"]
[Thu Feb 26 18:49:22.130570 2026] [:error] [pid 55618:tid 55629] [client 193.37.32.11:64023] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aaAlMh61Vrh12f_8oWTWgAAAAQg"]
[Thu Feb 26 18:49:22.263635 2026] [:error] [pid 55618:tid 55636] [client 193.37.32.11:64023] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaAlMh61Vrh12f_8oWTWgwAAAQ8"]
[Thu Feb 26 18:49:22.908715 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.48:28489] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaAlMuA33x90V6yYHahHIgAAAUg"]
[Thu Feb 26 18:49:23.217823 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.41:25579] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaAlMx61Vrh12f_8oWTWjAAAAQE"]
[Thu Feb 26 18:49:23.737032 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.48:24473] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Feb 26 18:49:24.303811 2026] [:error] [pid 3883:tid 3903] [client 193.37.32.48:24473] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaAlNOA33x90V6yYHahHQAAAAVE"]
[Thu Feb 26 18:49:24.874947 2026] [:error] [pid 54991:tid 55036] [client 193.37.32.31:61613] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaAlNN4Zx-mJ8gbRB2jCBgAAAFA"]
[Thu Feb 26 18:49:25.222494 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.42:65087] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaAlNeA33x90V6yYHahHVgAAAUA"]
[Thu Feb 26 18:49:25.481760 2026] [:error] [pid 55618:tid 55625] [client 193.37.32.50:63173] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Feb 26 18:49:26.160798 2026] [:error] [pid 55618:tid 55635] [client 193.37.32.50:63173] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaAlNh61Vrh12f_8oWTWogAAAQ4"]
[Thu Feb 26 18:49:26.535517 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.19:64593] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aaAlNuA33x90V6yYHahHZQAAAVU"]
[Thu Feb 26 18:49:26.805991 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.9:53637] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Feb 26 18:49:26.925756 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.9:53637] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaAlNtfdM__yZAgJFSuA5QAAAYs"]
[Thu Feb 26 18:49:27.185078 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.52:32443] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaAlN9fdM__yZAgJFSuA8gAAAY8"]
[Thu Feb 26 18:49:27.658113 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.48:42233] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaAlN-A33x90V6yYHahHbwAAAUI"]
[Thu Feb 26 18:49:28.276170 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.42:62025] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Thu Feb 26 18:49:28.397020 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.42:62025] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaAlONfdM__yZAgJFSuBLgAAAYs"]
[Thu Feb 26 18:49:28.786472 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.27:28785] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaAlONfdM__yZAgJFSuBPQAAAY0"]
[Thu Feb 26 18:49:29.763209 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.43:21509] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaAlOdfdM__yZAgJFSuBbAAAAYs"]
[Thu Feb 26 18:49:30.261898 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.31:50821] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaAlOtfdM__yZAgJFSuBfQAAAYs"]
[Thu Feb 26 18:49:30.565702 2026] [:error] [pid 55122:tid 55141] [client 193.37.32.43:28479] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Thu Feb 26 18:49:31.145759 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.43:28479] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaAlO4LiR0OfjFxvcN8FNQAAAMw"]
[Thu Feb 26 18:49:31.444489 2026] [:error] [pid 20419:tid 20444] [client 193.37.32.22:24829] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaAlO-3DVDvMfTYYUBUVXgAAAdY"]
[Thu Feb 26 18:49:31.865309 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.8:46725] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaAlO-A33x90V6yYHahHgwAAAVg"]
[Thu Feb 26 18:49:32.280513 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.22:56337] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Thu Feb 26 18:49:32.521515 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.22:56337] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaAlPO3DVDvMfTYYUBUVZQAAAdI"]
[Thu Feb 26 18:49:32.766164 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.25:30181] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Feb 26 18:49:33.038276 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.25:30181] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaAlPeA33x90V6yYHahHngAAAUE"]
[Thu Feb 26 18:49:33.229466 2026] [:error] [pid 20419:tid 20428] [client 193.37.32.7:39243] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaAlPe3DVDvMfTYYUBUVaAAAAcY"]
[Thu Feb 26 18:49:33.686020 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.14:35461] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaAlPeA33x90V6yYHahHqAAAAUE"]
[Thu Feb 26 18:49:33.886503 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.29:27791] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaAlPeA33x90V6yYHahHqwAAAVI"]
[Thu Feb 26 18:49:34.392663 2026] [:error] [pid 54991:tid 55031] [client 193.37.32.33:64203] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaAlPt4Zx-mJ8gbRB2jCGgAAAEs"]
[Thu Feb 26 18:49:34.757529 2026] [:error] [pid 3883:tid 3898] [client 193.37.32.26:53077] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaAlPuA33x90V6yYHahHvQAAAUw"]
[Thu Feb 26 18:49:35.207498 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.50:63711] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaAlP-3DVDvMfTYYUBUVbgAAAc4"]
[Thu Feb 26 18:49:35.446335 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.8:46273] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaAlP9fdM__yZAgJFSuBtgAAAYA"]
[Thu Feb 26 18:49:36.050924 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.23:43687] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaAlQNfdM__yZAgJFSuBzwAAAYw"]
[Thu Feb 26 18:49:36.680190 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.50:62315] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaAlQNfdM__yZAgJFSuB6gAAAYM"]
[Thu Feb 26 18:49:37.011670 2026] [:error] [pid 55618:tid 55640] [client 193.37.32.10:34373] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaAlQR61Vrh12f_8oWTW3gAAARM"]
[Thu Feb 26 18:49:37.440961 2026] [:error] [pid 55051:tid 55062] [client 193.37.32.29:62299] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaAlQQmK1w2kZvh5eLFgOwAAAIg"]
[Thu Feb 26 18:49:37.939101 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.29:20511] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Thu Feb 26 18:49:38.419600 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.29:20511] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaAlQgmK1w2kZvh5eLFgUAAAAJA"]
[Thu Feb 26 18:49:38.846440 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.26:42779] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaAlQu3DVDvMfTYYUBUVlQAAAc4"]
[Thu Feb 26 18:49:39.223337 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.43:36745] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Thu Feb 26 18:49:39.388926 2026] [:error] [pid 55051:tid 55068] [client 193.37.32.43:36745] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaAlQwmK1w2kZvh5eLFgVgAAAI4"]
[Thu Feb 26 18:49:40.667951 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.33:32541] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaAlRO3DVDvMfTYYUBUVwwAAAcA"]
[Thu Feb 26 18:49:41.098361 2026] [:error] [pid 55122:tid 55139] [client 193.37.32.30:55629] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Thu Feb 26 18:49:41.214867 2026] [:error] [pid 55122:tid 55126] [client 193.37.32.30:55629] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaAlRYLiR0OfjFxvcN8FTgAAAMI"]
[Thu Feb 26 18:49:41.757675 2026] [:error] [pid 55618:tid 55644] [client 193.37.32.4:31475] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaAlRR61Vrh12f_8oWTW9wAAARc"]
[Thu Feb 26 18:49:42.006726 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.36:38929] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Feb 26 18:49:42.162398 2026] [:error] [pid 20419:tid 20434] [client 193.37.32.36:38929] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaAlRu3DVDvMfTYYUBUV4AAAAcw"]
[Thu Feb 26 18:49:42.589193 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.26:44717] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaAlRu3DVDvMfTYYUBUV6wAAAcA"]
[Thu Feb 26 18:49:43.248856 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.53:53849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Feb 26 18:49:43.359575 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.53:53849] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaAlR-3DVDvMfTYYUBUWAgAAAc0"]
[Thu Feb 26 18:49:44.056303 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.48:37341] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaAlSNfdM__yZAgJFSuCRwAAAZA"]
[Thu Feb 26 18:49:44.295883 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.27:56819] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Thu Feb 26 18:49:44.533606 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.27:56819] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaAlSAmK1w2kZvh5eLFgfAAAAJI"]
[Thu Feb 26 18:49:44.831817 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.27:43191] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaAlSAmK1w2kZvh5eLFggwAAAIs"]
[Thu Feb 26 18:49:45.062858 2026] [:error] [pid 54991:tid 55033] [client 193.37.32.9:34629] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Feb 26 18:49:45.409664 2026] [:error] [pid 54991:tid 55038] [client 193.37.32.9:34629] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaAlSd4Zx-mJ8gbRB2jCPQAAAFI"]
[Thu Feb 26 18:49:45.693117 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.13:41035] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaAlSQmK1w2kZvh5eLFgkwAAAIA"]
[Thu Feb 26 18:49:47.794882 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.28:49041] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaAlSwmK1w2kZvh5eLFgtAAAAIo"]
[Thu Feb 26 18:49:48.025273 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.45:46351] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaAlTAmK1w2kZvh5eLFgvgAAAIc"]
[Thu Feb 26 18:49:48.398735 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.15:46741] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aaAlTO3DVDvMfTYYUBUWPAAAAcU"]
[Thu Feb 26 18:49:48.626401 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.11:50163] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaAlTO3DVDvMfTYYUBUWQQAAAcA"]
[Thu Feb 26 18:49:48.936689 2026] [:error] [pid 55618:tid 55637] [client 193.37.32.25:34695] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaAlTB61Vrh12f_8oWTXVAAAARA"]
[Thu Feb 26 18:49:49.142730 2026] [:error] [pid 55618:tid 55626] [client 193.37.32.26:33397] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aaAlTR61Vrh12f_8oWTXVwAAAQU"]
[Thu Feb 26 18:49:49.996851 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.5:65211] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaAlTdfdM__yZAgJFSuCYAAAAYo"]
[Thu Feb 26 18:49:50.238122 2026] [:error] [pid 55618:tid 55628] [client 193.37.32.51:26039] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaAlTh61Vrh12f_8oWTXcAAAAQc"]
[Thu Feb 26 18:49:50.705333 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.15:46767] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Feb 26 18:49:50.813041 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.15:46767] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaAlToLiR0OfjFxvcN8FmwAAAMU"]
[Thu Feb 26 18:49:51.013789 2026] [:error] [pid 55618:tid 55644] [client 193.37.32.39:27245] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaAlTx61Vrh12f_8oWTXgAAAARc"]
[Thu Feb 26 18:49:51.521637 2026] [:error] [pid 55618:tid 55631] [client 193.37.32.12:40807] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaAlTx61Vrh12f_8oWTXjgAAAQo"]
[Thu Feb 26 18:49:51.895829 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.12:25755] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaAlT9fdM__yZAgJFSuCZQAAAZg"]
[Thu Feb 26 18:49:53.073099 2026] [:error] [pid 54991:tid 55043] [client 193.37.32.37:35309] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaAlUd4Zx-mJ8gbRB2jCbAAAAFc"]
[Thu Feb 26 18:49:53.404610 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.53:49017] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaAlUQmK1w2kZvh5eLFhBQAAAJE"]
[Thu Feb 26 18:49:53.905908 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.7:22611] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aaAlUdfdM__yZAgJFSuCdgAAAYw"]
[Thu Feb 26 18:49:54.251731 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.53:31481] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaAlUgmK1w2kZvh5eLFhCwAAAII"]
[Thu Feb 26 18:49:54.595174 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.37:40765] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aaAlUtfdM__yZAgJFSuCfgAAAYY"]
[Thu Feb 26 18:49:54.793321 2026] [:error] [pid 54991:tid 55029] [client 193.37.32.27:29757] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaAlUt4Zx-mJ8gbRB2jChQAAAEk"]
[Thu Feb 26 18:49:55.004153 2026] [:error] [pid 55051:tid 55078] [client 193.37.32.8:42473] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaAlUwmK1w2kZvh5eLFhEgAAAJg"]
[Thu Feb 26 18:49:55.689227 2026] [:error] [pid 55122:tid 55133] [client 193.37.32.32:46749] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaAlU4LiR0OfjFxvcN8F4QAAAMk"]
[Thu Feb 26 18:49:55.966173 2026] [:error] [pid 55051:tid 55068] [client 193.37.32.21:52357] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Thu Feb 26 18:49:56.068664 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.21:52357] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaAlVAmK1w2kZvh5eLFhHQAAAIs"]
[Thu Feb 26 18:49:56.577009 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.16:45981] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Thu Feb 26 18:49:56.682070 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.16:45981] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaAlVO3DVDvMfTYYUBUWpwAAAck"]
[Thu Feb 26 18:49:57.036760 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.15:37363] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaAlVeA33x90V6yYHahIMQAAAVA"]
[Thu Feb 26 18:49:58.097945 2026] [:error] [pid 55618:tid 55634] [client 193.37.32.34:23493] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaAlVh61Vrh12f_8oWTXxAAAAQ0"]
[Thu Feb 26 18:49:58.962467 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.47:55895] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Feb 26 18:49:59.620225 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.47:55895] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaAlV-A33x90V6yYHahIngAAAVM"]
[Thu Feb 26 18:50:00.036348 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.27:65143] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaAlWAmK1w2kZvh5eLFhOQAAAJQ"]
[Thu Feb 26 18:50:00.887555 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.37:48223] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaAlWO3DVDvMfTYYUBUW2AAAAcU"]
[Thu Feb 26 18:50:01.214716 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.41:24899] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaAlWQmK1w2kZvh5eLFhQwAAAIA"]
[Thu Feb 26 18:50:02.647941 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.46:28549] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaAlWuA33x90V6yYHahJAAAAAUc"]
[Thu Feb 26 18:54:25.385700 2026] [:error] [pid 54991:tid 55021] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Feb 26 18:54:25.554179 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Feb 26 18:54:25.849958 2026] [:error] [pid 54991:tid 55034] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Feb 26 18:54:25.977967 2026] [:error] [pid 54991:tid 55042] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 26 18:54:26.200138 2026] [:error] [pid 54991:tid 55035] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Feb 26 18:54:26.412083 2026] [:error] [pid 54991:tid 55025] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Feb 26 18:54:26.562382 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 26 18:54:26.766331 2026] [:error] [pid 54991:tid 55022] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 26 18:54:27.103881 2026] [:error] [pid 54991:tid 55028] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Feb 26 18:54:27.471830 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Feb 26 18:54:27.616683 2026] [:error] [pid 54991:tid 55042] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Feb 26 18:54:27.769686 2026] [:error] [pid 54991:tid 55039] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Feb 26 18:54:28.001124 2026] [:error] [pid 54991:tid 55033] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Feb 26 18:54:28.125038 2026] [:error] [pid 54991:tid 55021] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Feb 26 18:54:29.628276 2026] [:error] [pid 54991:tid 55021] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Feb 26 18:54:29.767364 2026] [:error] [pid 54991:tid 55039] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Feb 26 18:54:29.916599 2026] [:error] [pid 54991:tid 55030] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Feb 26 18:54:30.076917 2026] [:error] [pid 54991:tid 55033] [client 193.37.32.129:29301] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Feb 26 18:54:38.229566 2026] [:error] [pid 54991:tid 55034] [client 193.37.32.129:29301] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaAmbt4Zx-mJ8gbRB2jJjAAAAE4"]
[Thu Feb 26 18:54:38.991669 2026] [:error] [pid 54990:tid 55010] [client 193.37.32.31:61907] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaAmbntr2qmt_mBhH2wOewAAABE"]
[Thu Feb 26 18:54:39.671097 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.16:34583] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Feb 26 18:54:40.088465 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.16:34583] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaAmcNfdM__yZAgJFSuRVwAAAZU"]
[Thu Feb 26 18:54:40.702824 2026] [:error] [pid 55122:tid 55124] [client 193.37.32.38:41931] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Feb 26 18:54:40.862633 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.38:41931] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaAmcILiR0OfjFxvcN8NAwAAANA"]
[Thu Feb 26 18:54:41.250298 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.8:62603] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Feb 26 18:54:44.094401 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.8:62603] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaAmdOA33x90V6yYHahYbwAAAUQ"]
[Thu Feb 26 18:54:44.560700 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.20:56651] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaAmdAmK1w2kZvh5eLFsIAAAAJU"]
[Thu Feb 26 18:54:44.900406 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.31:21681] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaAmdAmK1w2kZvh5eLFsKwAAAI0"]
[Thu Feb 26 18:54:45.298908 2026] [:error] [pid 20419:tid 20437] [client 193.37.32.31:61645] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaAmde3DVDvMfTYYUBUh2QAAAc8"]
[Thu Feb 26 18:54:45.561130 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.42:38959] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaAmdQmK1w2kZvh5eLFsRAAAAJM"]
[Thu Feb 26 18:54:45.965524 2026] [:error] [pid 54990:tid 54998] [client 193.37.32.38:57367] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaAmdXtr2qmt_mBhH2wOqwAAAAU"]
[Thu Feb 26 18:54:46.472399 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.39:29833] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaAmdtfdM__yZAgJFSuRswAAAZM"]
[Thu Feb 26 18:54:46.779717 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.36:53201] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Feb 26 18:54:47.078406 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.36:53201] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaAmd-3DVDvMfTYYUBUh6AAAAdc"]
[Thu Feb 26 18:54:47.737885 2026] [:error] [pid 55122:tid 55148] [client 193.37.32.32:40559] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaAmd4LiR0OfjFxvcN8NJgAAANg"]
[Thu Feb 26 18:54:48.193191 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.42:41801] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaAmeOA33x90V6yYHahYfgAAAUo"]
[Thu Feb 26 18:54:48.916111 2026] [:error] [pid 25311:tid 25336] [client 193.37.32.12:50183] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Feb 26 18:54:49.108972 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.12:50183] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaAmedfdM__yZAgJFSuR2gAAAYM"]
[Thu Feb 26 18:54:49.480455 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.23:35223] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Feb 26 18:54:50.171400 2026] [:error] [pid 25311:tid 25314] [client 193.37.32.23:35223] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Feb 26 18:54:50.547529 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.23:35223] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaAmetfdM__yZAgJFSuR9AAAAZU"]
[Thu Feb 26 18:54:50.856330 2026] [:error] [pid 54990:tid 55005] [client 193.37.32.36:25099] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Feb 26 18:54:50.977831 2026] [:error] [pid 54990:tid 55000] [client 193.37.32.36:25099] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaAmentr2qmt_mBhH2wOxgAAAAc"]
[Thu Feb 26 18:54:51.325196 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.130:29985] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Feb 26 18:54:51.640767 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.130:29985] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaAme9fdM__yZAgJFSuSGAAAAZg"]
[Thu Feb 26 18:54:52.059790 2026] [:error] [pid 55618:tid 55636] [client 193.37.32.28:37591] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaAmfB61Vrh12f_8oWTgzgAAAQ8"]
[Thu Feb 26 18:54:52.479307 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.39:29805] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Feb 26 18:54:52.630589 2026] [:error] [pid 20419:tid 20443] [client 193.37.32.39:29805] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Feb 26 18:54:52.966968 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.39:29805] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaAmfO3DVDvMfTYYUBUiKAAAAdc"]
[Thu Feb 26 18:54:53.316774 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.30:41901] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaAmfdfdM__yZAgJFSuSOwAAAZA"]
[Thu Feb 26 18:54:53.740360 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.11:46531] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaAmfe3DVDvMfTYYUBUiPAAAAcA"]
[Thu Feb 26 18:54:54.152336 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.14:43999] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaAmftfdM__yZAgJFSuSRQAAAZE"]
[Thu Feb 26 18:54:54.524026 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.49:33931] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaAmftfdM__yZAgJFSuSTwAAAY4"]
[Thu Feb 26 18:54:55.236305 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.129:39539] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Feb 26 18:54:55.351549 2026] [:error] [pid 25311:tid 25336] [client 193.37.32.129:39539] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaAmf9fdM__yZAgJFSuSYwAAAZY"]
[Thu Feb 26 18:54:55.602844 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.130:33665] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaAmfwmK1w2kZvh5eLFs0AAAAJU"]
[Thu Feb 26 18:54:55.825960 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.16:59455] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaAmf94Zx-mJ8gbRB2jJ6AAAAFU"]
[Thu Feb 26 18:54:56.334721 2026] [:error] [pid 54990:tid 55004] [client 193.37.32.48:42521] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Feb 26 18:54:56.625514 2026] [:error] [pid 54990:tid 55003] [client 193.37.32.48:42521] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Feb 26 18:54:57.216520 2026] [:error] [pid 54990:tid 55007] [client 193.37.32.48:42521] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaAmgXtr2qmt_mBhH2wO-QAAAA4"]
[Thu Feb 26 18:54:59.932961 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.18:26809] [client 193.37.32.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.18, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaAmg-3DVDvMfTYYUBUiiwAAAcM"]
[Thu Feb 26 18:55:00.082529 2026] [:error] [pid 20419:tid 20424] [client 193.37.32.18:26809] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Feb 26 18:55:01.288688 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.18:26809] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Feb 26 18:55:01.442043 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.18:26809] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Feb 26 18:55:02.583915 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.18:26809] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaAmhu3DVDvMfTYYUBUiqwAAAcU"]
[Thu Feb 26 18:55:03.331048 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.9:50893] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Feb 26 18:55:03.466858 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.9:50893] [client 193.37.32.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.9, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaAmh-A33x90V6yYHahZIgAAAVg"]
[Thu Feb 26 18:55:03.760375 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.9:50893] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaAmh-A33x90V6yYHahZKQAAAVI"]
[Thu Feb 26 18:55:04.674006 2026] [:error] [pid 55618:tid 55632] [client 193.37.32.6:27869] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Feb 26 18:55:04.959154 2026] [:error] [pid 55618:tid 55634] [client 193.37.32.6:27869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Feb 26 18:55:05.347748 2026] [:error] [pid 55618:tid 55635] [client 193.37.32.6:27869] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaAmiR61Vrh12f_8oWThcAAAAQ4"]
[Thu Feb 26 18:55:05.695976 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.19:20545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Feb 26 18:55:06.108591 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.19:20545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Feb 26 18:55:06.400749 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.19:20545] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Feb 26 18:55:06.759961 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.19:20545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Feb 26 18:55:06.888808 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.19:20545] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaAmitfdM__yZAgJFSuStQAAAY8"]
[Thu Feb 26 18:55:07.126026 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.130:32281] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Feb 26 18:55:07.293036 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.130:32281] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Feb 26 18:55:07.470253 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.130:32281] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaAmi-A33x90V6yYHahZmQAAAVg"]
[Thu Feb 26 18:55:07.908526 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.9:43291] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Feb 26 18:55:08.277365 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.9:43291] [client 193.37.32.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.9, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaAmjOA33x90V6yYHahZpgAAAVY"]
[Thu Feb 26 18:55:08.429559 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.9:43291] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaAmjOA33x90V6yYHahZqQAAAVY"]
[Thu Feb 26 18:55:10.629616 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.15:34973] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Feb 26 18:55:12.434277 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.15:34973] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Feb 26 18:55:12.571585 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.15:34973] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaAmkAmK1w2kZvh5eLFtKAAAAIc"]
[Thu Feb 26 18:55:12.811072 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.29:50027] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Feb 26 18:55:13.549638 2026] [:error] [pid 20419:tid 20441] [client 193.37.32.29:50027] [client 193.37.32.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.29, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaAmke3DVDvMfTYYUBUi4wAAAdM"]
[Thu Feb 26 18:55:13.718984 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.29:50027] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Feb 26 18:55:13.866356 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.29:50027] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Feb 26 18:55:13.977599 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.29:50027] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Feb 26 18:55:14.080835 2026] [:error] [pid 20419:tid 20443] [client 193.37.32.29:50027] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaAmku3DVDvMfTYYUBUi6AAAAdU"]
[Thu Feb 26 18:55:14.297648 2026] [:error] [pid 3883:tid 3903] [client 193.37.32.26:26121] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Feb 26 18:55:14.416700 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.26:26121] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaAmkuA33x90V6yYHahaCAAAAVY"]
[Thu Feb 26 18:55:15.936969 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.49:38169] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Feb 26 18:55:16.108605 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.49:38169] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaAmlAmK1w2kZvh5eLFtbwAAAJM"]
[Thu Feb 26 18:55:16.736459 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.48:55133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Feb 26 18:55:16.893265 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.48:55133] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaAmlOA33x90V6yYHahaQQAAAUo"]
[Thu Feb 26 18:55:17.254986 2026] [:error] [pid 54990:tid 55014] [client 193.37.32.44:49331] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaAmlXtr2qmt_mBhH2wPJAAAABU"]
[Thu Feb 26 18:55:17.620647 2026] [:error] [pid 54990:tid 55003] [client 193.37.32.53:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Feb 26 18:55:17.755691 2026] [:error] [pid 54990:tid 54994] [client 193.37.32.53:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Feb 26 18:55:18.404900 2026] [:error] [pid 54990:tid 55011] [client 193.37.32.53:35653] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaAmlntr2qmt_mBhH2wPLQAAABI"]
[Thu Feb 26 18:55:18.830999 2026] [:error] [pid 54991:tid 55034] [client 193.37.32.39:32819] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaAmlt4Zx-mJ8gbRB2jKQgAAAE4"]
[Thu Feb 26 18:55:19.889533 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.25:24075] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaAml-3DVDvMfTYYUBUjEwAAAcM"]
[Thu Feb 26 18:55:20.330271 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.15:52273] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Feb 26 18:55:20.657719 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.15:52273] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Feb 26 18:55:20.787283 2026] [:error] [pid 3883:tid 3898] [client 193.37.32.15:52273] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaAmmOA33x90V6yYHahagQAAAUw"]
[Thu Feb 26 18:55:21.134758 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.47:39837] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 26 18:55:21.465467 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.47:39837] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaAmmYLiR0OfjFxvcN8NogAAAM4"]
[Thu Feb 26 18:55:24.719710 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.24:49557] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaAmnAmK1w2kZvh5eLFtzQAAAJI"]
[Thu Feb 26 18:55:25.247450 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.25:55663] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Feb 26 18:55:25.896753 2026] [:error] [pid 25311:tid 25334] [client 193.37.32.25:55663] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Feb 26 18:55:26.287578 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.25:55663] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Feb 26 18:55:26.454821 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.25:55663] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaAmntfdM__yZAgJFSuTswAAAYY"]
[Thu Feb 26 18:55:26.954228 2026] [:error] [pid 55618:tid 55639] [client 193.37.32.32:50497] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaAmnh61Vrh12f_8oWTiUAAAARI"]
[Thu Feb 26 18:55:27.329042 2026] [:error] [pid 20419:tid 20428] [client 193.37.32.19:37905] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaAmn-3DVDvMfTYYUBUjXgAAAcY"]
[Thu Feb 26 18:55:27.840805 2026] [:error] [pid 54991:tid 55042] [client 193.37.32.24:58079] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaAmn94Zx-mJ8gbRB2jKiQAAAFY"]
[Thu Feb 26 18:55:28.182808 2026] [:error] [pid 20419:tid 20442] [client 193.37.32.13:20903] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Feb 26 18:55:28.436448 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.13:20903] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaAmoO3DVDvMfTYYUBUjZAAAAcE"]
[Thu Feb 26 18:55:28.789599 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.53:50409] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaAmoOA33x90V6yYHahaxAAAAVY"]
[Thu Feb 26 18:55:30.157224 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.50:39685] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Feb 26 18:55:30.548526 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.50:39685] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaAmouA33x90V6yYHaha5QAAAUE"]
[Thu Feb 26 18:55:31.198806 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.19:29203] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaAmo9fdM__yZAgJFSuT3wAAAZU"]
[Thu Feb 26 18:55:31.460091 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.30:42035] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaAmo9fdM__yZAgJFSuT6AAAAYw"]
[Thu Feb 26 18:55:31.723782 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.13:48405] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaAmowmK1w2kZvh5eLFuCAAAAI0"]
[Thu Feb 26 18:55:32.290318 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.29:49853] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaAmpOA33x90V6yYHahbAQAAAUs"]
[Thu Feb 26 18:55:34.003629 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.45:24463] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaAmpgmK1w2kZvh5eLFuGAAAAIA"]
[Thu Feb 26 18:55:35.510928 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.43:51717] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Feb 26 18:55:36.043258 2026] [:error] [pid 55122:tid 55134] [client 193.37.32.43:51717] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Feb 26 18:55:36.192606 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.43:51717] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaAmqILiR0OfjFxvcN8ODAAAAMY"]
[Thu Feb 26 18:55:39.119691 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.27:24627] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Feb 26 18:55:39.302994 2026] [:error] [pid 20419:tid 20441] [client 193.37.32.27:24627] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Feb 26 18:55:39.995707 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.27:24627] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaAmq-3DVDvMfTYYUBUjoQAAAcM"]
[Thu Feb 26 18:55:41.002990 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.19:50957] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaAmrQmK1w2kZvh5eLFuRgAAAJQ"]
[Thu Feb 26 18:55:41.322361 2026] [:error] [pid 20419:tid 20426] [client 193.37.32.50:56607] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaAmre3DVDvMfTYYUBUjtgAAAcQ"]
[Thu Feb 26 18:55:42.317409 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.52:38433] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaAmrtfdM__yZAgJFSuUagAAAY4"]
[Thu Feb 26 18:55:45.624037 2026] [:error] [pid 54991:tid 55029] [client 193.37.32.28:26433] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Feb 26 18:55:45.919737 2026] [:error] [pid 54991:tid 55029] [client 193.37.32.28:26433] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Feb 26 18:55:46.070676 2026] [:error] [pid 54991:tid 55037] [client 193.37.32.28:26433] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Feb 26 18:55:46.241551 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.28:26433] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Feb 26 18:55:47.032891 2026] [:error] [pid 54991:tid 55038] [client 193.37.32.28:26433] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaAms94Zx-mJ8gbRB2jLNgAAAFI"]
[Thu Feb 26 18:55:47.460024 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.15:34431] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaAms9fdM__yZAgJFSuUmQAAAZc"]
[Thu Feb 26 18:55:47.750363 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.29:47203] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaAmswmK1w2kZvh5eLFuYwAAAII"]
[Thu Feb 26 18:55:48.059641 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.15:29009] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaAmtOA33x90V6yYHahbvwAAAUA"]
[Thu Feb 26 18:55:48.812250 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.47:60537] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaAmtAmK1w2kZvh5eLFuZgAAAJQ"]
[Thu Feb 26 18:55:49.124502 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.53:49029] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaAmteA33x90V6yYHahbyAAAAVQ"]
[Thu Feb 26 18:55:49.528368 2026] [:error] [pid 55122:tid 55147] [client 193.37.32.7:42725] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaAmtYLiR0OfjFxvcN8OfAAAANc"]
[Thu Feb 26 18:55:49.823195 2026] [:error] [pid 55618:tid 55626] [client 193.37.32.30:63387] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaAmtR61Vrh12f_8oWTi3wAAAQU"]
[Thu Feb 26 18:55:50.131529 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.22:44457] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaAmtuA33x90V6yYHahb3QAAAU8"]
[Thu Feb 26 18:55:50.442202 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.19:47229] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaAmttfdM__yZAgJFSuUxQAAAZU"]
[Thu Feb 26 18:55:52.172062 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.33:38635] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaAmuNfdM__yZAgJFSuU7AAAAYQ"]
[Thu Feb 26 18:55:52.546344 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.42:42433] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaAmuAmK1w2kZvh5eLFukgAAAII"]
[Thu Feb 26 18:55:52.799826 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.14:61049] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Feb 26 18:55:53.069562 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.14:61049] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaAmueA33x90V6yYHahcPQAAAUs"]
[Thu Feb 26 18:55:53.672043 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.31:38199] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaAmudfdM__yZAgJFSuVEgAAAYI"]
[Thu Feb 26 18:55:54.254302 2026] [:error] [pid 55122:tid 55141] [client 193.37.32.4:52295] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Feb 26 18:55:54.400242 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.4:52295] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaAmuoLiR0OfjFxvcN8OigAAAM4"]
[Thu Feb 26 18:55:54.935644 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.23:56261] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Feb 26 18:55:55.080748 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.23:56261] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Feb 26 18:55:55.264893 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.23:56261] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Feb 26 18:55:55.425851 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.23:56261] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaAmu-A33x90V6yYHahchAAAAUQ"]
[Thu Feb 26 18:55:55.696154 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.129:45063] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Feb 26 18:55:55.897880 2026] [:error] [pid 20419:tid 20441] [client 193.37.32.129:45063] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaAmu-3DVDvMfTYYUBUkHQAAAdM"]
[Thu Feb 26 18:55:57.647103 2026] [:error] [pid 20419:tid 20434] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Feb 26 18:55:57.814265 2026] [:error] [pid 20419:tid 20428] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 26 18:55:57.973930 2026] [:error] [pid 20419:tid 20426] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Feb 26 18:55:58.834936 2026] [:error] [pid 20419:tid 20430] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Feb 26 18:55:58.979636 2026] [:error] [pid 20419:tid 20444] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Feb 26 18:55:59.314795 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Feb 26 18:55:59.798023 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.49:33359] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Feb 26 18:55:59.944057 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.49:33359] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaAmv-3DVDvMfTYYUBUkYgAAAc0"]
[Thu Feb 26 18:56:00.272776 2026] [:error] [pid 55051:tid 55070] [client 193.37.32.18:65265] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaAmwAmK1w2kZvh5eLFu6gAAAJA"]
[Thu Feb 26 18:56:00.644968 2026] [:error] [pid 55618:tid 55637] [client 193.37.32.10:24085] [client 193.37.32.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.10, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaAmwB61Vrh12f_8oWTjMQAAARA"]
[Thu Feb 26 18:56:00.648527 2026] [:error] [pid 55618:tid 55637] [client 193.37.32.10:24085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Feb 26 18:56:00.993803 2026] [:error] [pid 55618:tid 55640] [client 193.37.32.10:24085] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Feb 26 18:56:01.139707 2026] [:error] [pid 55618:tid 55632] [client 193.37.32.10:24085] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaAmwR61Vrh12f_8oWTjNwAAAQs"]
[Thu Feb 26 18:56:01.660880 2026] [:error] [pid 55122:tid 55142] [client 193.37.32.52:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Feb 26 18:56:01.869526 2026] [:error] [pid 55122:tid 55143] [client 193.37.32.52:61491] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaAmwYLiR0OfjFxvcN8O1gAAANM"]
[Thu Feb 26 18:56:02.317213 2026] [:error] [pid 55618:tid 55634] [client 193.37.32.52:52997] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaAmwh61Vrh12f_8oWTjQQAAAQ0"]
[Thu Feb 26 19:24:43.444174 2026] [:error] [pid 25311:tid 25336] [client 91.65.123.43:1558] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aaAte9fdM__yZAgJFSu6WgAAAZY"]
[Thu Feb 26 19:24:45.428532 2026] [:error] [pid 25311:tid 25332] [client 91.65.123.43:45480] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaAtfdfdM__yZAgJFSu6YAAAAZI"]
[Thu Feb 26 19:24:47.302490 2026] [:error] [pid 44444:tid 44453] [client 91.65.123.43:56473] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaAtf22sMNmj-yekUk3iJQAAAgM"]
[Thu Feb 26 20:28:44.406885 2026] [:error] [pid 20419:tid 20432] [client 136.144.43.172:20463] [client 136.144.43.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.172, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaA8fO3DVDvMfTYYUBVMHgAAAco"]
[Thu Feb 26 20:28:44.410739 2026] [:error] [pid 20419:tid 20432] [client 136.144.43.172:20463] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Feb 26 20:58:24.893096 2026] [:error] [pid 54990:tid 55006] [client 43.157.181.189:45416] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaBDcHtr2qmt_mBhH2wmRwAAAA0"]
[Thu Feb 26 20:59:19.552258 2026] [:error] [pid 55051:tid 55076] [client 47.250.156.29:31826] [client 47.250.156.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaBDpwmK1w2kZvh5eLGk2QAAAJY"]
[Thu Feb 26 20:59:59.102829 2026] [:error] [pid 3883:tid 3905] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Thu Feb 26 20:59:59.363236 2026] [:error] [pid 3883:tid 3887] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Thu Feb 26 20:59:59.618586 2026] [:error] [pid 3883:tid 3893] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Thu Feb 26 21:00:01.217171 2026] [:error] [pid 3883:tid 3893] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Thu Feb 26 21:00:01.479544 2026] [:error] [pid 3883:tid 3899] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu Feb 26 21:00:01.736206 2026] [:error] [pid 3883:tid 3907] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 26 21:00:01.997912 2026] [:error] [pid 3883:tid 3904] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Thu Feb 26 21:00:02.256068 2026] [:error] [pid 3883:tid 3891] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Thu Feb 26 21:00:02.534080 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Feb 26 21:00:02.801176 2026] [:error] [pid 3883:tid 3903] [client 20.104.19.195:46074] File does not exist: /usr/local/apache/htdocs/suspended-page/check.php
[Thu Feb 26 21:00:03.061137 2026] [:error] [pid 3883:tid 3892] [client 20.104.19.195:46074] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaBD0-A33x90V6yYHajdZQAAAUY"]
[Thu Feb 26 21:00:03.717628 2026] [:error] [pid 25311:tid 25332] [client 20.104.19.195:46054] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaBD09fdM__yZAgJFSvbTQAAAZI"]
[Thu Feb 26 21:00:04.260121 2026] [:error] [pid 44444:tid 44457] [client 20.104.19.195:45959] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaBD1G2sMNmj-yekUk0TzAAAAgc"]
[Thu Feb 26 21:00:04.833473 2026] [:error] [pid 3883:tid 3898] [client 20.104.19.195:46025] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaBD1OA33x90V6yYHajdaQAAAUw"]
[Thu Feb 26 21:00:05.490003 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:45958] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aaBD1eA33x90V6yYHajdbwAAAUk"]
[Thu Feb 26 21:00:06.006449 2026] [:error] [pid 3883:tid 3903] [client 20.104.19.195:46064] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aaBD1uA33x90V6yYHajddAAAAVE"]
[Thu Feb 26 21:00:06.631632 2026] [:error] [pid 20419:tid 20437] [client 20.104.19.195:45968] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aaBD1u3DVDvMfTYYUBVRtQAAAc8"]
[Thu Feb 26 21:00:07.270314 2026] [:error] [pid 20419:tid 20444] [client 20.104.19.195:46048] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inject.php"] [unique_id "aaBD1-3DVDvMfTYYUBVRtgAAAdY"]
[Thu Feb 26 21:00:08.000566 2026] [:error] [pid 25311:tid 25334] [client 20.104.19.195:46041] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aaBD19fdM__yZAgJFSvbUAAAAZQ"]
[Thu Feb 26 21:00:08.604112 2026] [:error] [pid 55051:tid 55073] [client 20.104.19.195:46050] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aaBD2AmK1w2kZvh5eLGlNwAAAJM"]
[Thu Feb 26 21:00:09.176134 2026] [:error] [pid 3883:tid 3906] [client 20.104.19.195:46051] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aaBD2eA33x90V6yYHajdhgAAAVQ"]
[Thu Feb 26 21:00:09.706710 2026] [:error] [pid 54990:tid 55001] [client 20.104.19.195:46028] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "aaBD2Xtr2qmt_mBhH2wmaAAAAAg"]
[Thu Feb 26 21:00:10.215778 2026] [:error] [pid 3883:tid 3902] [client 20.104.19.195:46020] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aaBD2uA33x90V6yYHajdiQAAAVA"]
[Thu Feb 26 21:00:10.747988 2026] [:error] [pid 20419:tid 20436] [client 20.104.19.195:46017] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aaBD2u3DVDvMfTYYUBVRtwAAAc4"]
[Thu Feb 26 21:00:11.256693 2026] [:error] [pid 25311:tid 25326] [client 20.104.19.195:46033] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aaBD29fdM__yZAgJFSvbUgAAAYw"]
[Thu Feb 26 21:00:11.779852 2026] [:error] [pid 20419:tid 20445] [client 20.104.19.195:46038] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pro.php"] [unique_id "aaBD2-3DVDvMfTYYUBVRuAAAAdc"]
[Thu Feb 26 21:00:12.295640 2026] [:error] [pid 20419:tid 20423] [client 20.104.19.195:45953] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aaBD3O3DVDvMfTYYUBVRuQAAAcE"]
[Thu Feb 26 21:00:12.848145 2026] [:error] [pid 55618:tid 55628] [client 20.104.19.195:46062] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aaBD3B61Vrh12f_8oWQIHAAAAQc"]
[Thu Feb 26 21:00:13.366474 2026] [:error] [pid 54990:tid 55004] [client 20.104.19.195:45955] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aaBD3Xtr2qmt_mBhH2wmaQAAAAs"]
[Thu Feb 26 21:00:13.883433 2026] [:error] [pid 55051:tid 55056] [client 20.104.19.195:45970] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e.php"] [unique_id "aaBD3QmK1w2kZvh5eLGlPwAAAII"]
[Thu Feb 26 21:00:14.398317 2026] [:error] [pid 3883:tid 3906] [client 20.104.19.195:46073] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aaBD3uA33x90V6yYHajdkQAAAVQ"]
[Thu Feb 26 21:00:14.892749 2026] [:error] [pid 55122:tid 55134] [client 20.104.19.195:46071] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aaBD3oLiR0OfjFxvcN8tCwAAAMo"]
[Thu Feb 26 21:00:15.462117 2026] [:error] [pid 54990:tid 54999] [client 20.104.19.195:46079] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aaBD33tr2qmt_mBhH2wmawAAAAY"]
[Thu Feb 26 21:00:15.974727 2026] [:error] [pid 3883:tid 3909] [client 20.104.19.195:45971] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d.php"] [unique_id "aaBD3-A33x90V6yYHajdkwAAAVc"]
[Thu Feb 26 21:00:16.467069 2026] [:error] [pid 55051:tid 55060] [client 20.104.19.195:46070] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aaBD4AmK1w2kZvh5eLGlRgAAAIY"]
[Thu Feb 26 21:00:16.978809 2026] [:error] [pid 25311:tid 25325] [client 20.104.19.195:46063] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aaBD4NfdM__yZAgJFSvbVgAAAYs"]
[Thu Feb 26 21:00:17.487040 2026] [:error] [pid 54990:tid 55006] [client 20.104.19.195:45964] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aaBD4Xtr2qmt_mBhH2wmbAAAAA0"]
[Thu Feb 26 21:00:18.027231 2026] [:error] [pid 3883:tid 3900] [client 20.104.19.195:46049] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpinfo.php"] [unique_id "aaBD4uA33x90V6yYHajdmQAAAU4"]
[Thu Feb 26 21:00:18.552986 2026] [:error] [pid 44444:tid 44451] [client 20.104.19.195:46055] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaBD4m2sMNmj-yekUk0T_QAAAgE"]
[Thu Feb 26 21:00:19.076342 2026] [:error] [pid 3883:tid 3905] [client 20.104.19.195:45989] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaBD4-A33x90V6yYHajdoAAAAVM"]
[Thu Feb 26 21:00:19.570134 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:46046] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaBD422sMNmj-yekUk0T_gAAAgo"]
[Thu Feb 26 21:00:20.098405 2026] [:error] [pid 44444:tid 44459] [client 20.104.19.195:45969] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaBD5G2sMNmj-yekUk0UAwAAAgk"]
[Thu Feb 26 21:00:20.592684 2026] [:error] [pid 44444:tid 44470] [client 20.104.19.195:45986] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaBD5G2sMNmj-yekUk0UBAAAAhQ"]
[Thu Feb 26 21:00:21.104159 2026] [:error] [pid 25311:tid 25320] [client 20.104.19.195:46042] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaBD5dfdM__yZAgJFSvbXAAAAYY"]
[Thu Feb 26 21:00:21.612696 2026] [:error] [pid 44444:tid 44473] [client 20.104.19.195:46052] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaBD5W2sMNmj-yekUk0UCwAAAhc"]
[Thu Feb 26 21:00:22.102647 2026] [:error] [pid 44444:tid 44453] [client 20.104.19.195:46031] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaBD5m2sMNmj-yekUk0UEQAAAgM"]
[Thu Feb 26 21:00:22.610165 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:46016] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aaBD5m2sMNmj-yekUk0UGAAAAhE"]
[Thu Feb 26 21:00:23.246799 2026] [:error] [pid 55051:tid 55054] [client 20.104.19.195:46011] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aaBD5wmK1w2kZvh5eLGlVAAAAIA"]
[Thu Feb 26 21:00:23.815486 2026] [:error] [pid 20419:tid 20422] [client 20.104.19.195:45952] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aaBD5-3DVDvMfTYYUBVRxAAAAcA"]
[Thu Feb 26 21:00:24.372766 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:46066] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/p.php"] [unique_id "aaBD6OA33x90V6yYHajdrgAAAUo"]
[Thu Feb 26 21:00:24.960342 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:45977] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaBD6G2sMNmj-yekUk0UJgAAAgU"]
[Thu Feb 26 21:00:25.510787 2026] [:error] [pid 20419:tid 20437] [client 20.104.19.195:45976] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaBD6e3DVDvMfTYYUBVRxQAAAc8"]
[Thu Feb 26 21:00:26.120326 2026] [:error] [pid 44444:tid 44458] [client 20.104.19.195:46019] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaBD6m2sMNmj-yekUk0UKwAAAgg"]
[Thu Feb 26 21:00:26.739255 2026] [:error] [pid 3883:tid 3894] [client 20.104.19.195:45965] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaBD6uA33x90V6yYHajduAAAAUg"]
[Thu Feb 26 21:00:27.333611 2026] [:error] [pid 54991:tid 55024] [client 20.104.19.195:46075] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBD694Zx-mJ8gbRB2jjlAAAAEQ"]
[Thu Feb 26 21:00:27.947669 2026] [:error] [pid 20419:tid 20423] [client 20.104.19.195:46035] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBD6-3DVDvMfTYYUBVRyQAAAcE"]
[Thu Feb 26 21:00:28.460634 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:46059] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBD7G2sMNmj-yekUk0UMgAAAgY"]
[Thu Feb 26 21:00:29.084165 2026] [:error] [pid 20419:tid 20432] [client 20.104.19.195:45988] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBD7e3DVDvMfTYYUBVRzAAAAco"]
[Thu Feb 26 21:00:29.699306 2026] [:error] [pid 3883:tid 3901] [client 20.104.19.195:46034] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBD7eA33x90V6yYHajdwgAAAU8"]
[Thu Feb 26 21:00:30.357640 2026] [:error] [pid 20419:tid 20428] [client 20.104.19.195:46067] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBD7u3DVDvMfTYYUBVRzwAAAcY"]
[Thu Feb 26 21:00:30.899668 2026] [:error] [pid 55122:tid 55144] [client 20.104.19.195:45967] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBD7oLiR0OfjFxvcN8tDQAAANQ"]
[Thu Feb 26 21:00:31.591136 2026] [:error] [pid 55051:tid 55069] [client 20.104.19.195:45954] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBD7wmK1w2kZvh5eLGlZAAAAI8"]
[Thu Feb 26 21:00:32.192746 2026] [:error] [pid 55051:tid 55077] [client 20.104.19.195:45963] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aaBD8AmK1w2kZvh5eLGlZgAAAJc"]
[Thu Feb 26 21:00:32.932000 2026] [:error] [pid 3883:tid 3894] [client 20.104.19.195:46037] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aaBD8OA33x90V6yYHajdygAAAUg"]
[Thu Feb 26 21:00:33.524243 2026] [:error] [pid 55051:tid 55063] [client 20.104.19.195:45974] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aaBD8QmK1w2kZvh5eLGlaQAAAIk"]
[Thu Feb 26 21:00:34.077267 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:45972] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/debug.php"] [unique_id "aaBD8m2sMNmj-yekUk0UPQAAAgY"]
[Thu Feb 26 21:00:34.599646 2026] [:error] [pid 44444:tid 44471] [client 20.104.19.195:45908] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBD8m2sMNmj-yekUk0UQQAAAhU"]
[Thu Feb 26 21:00:35.205580 2026] [:error] [pid 25311:tid 25326] [client 20.104.19.195:45907] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBD89fdM__yZAgJFSvbYgAAAYw"]
[Thu Feb 26 21:00:35.831917 2026] [:error] [pid 25311:tid 25327] [client 20.104.19.195:45978] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBD89fdM__yZAgJFSvbZQAAAY0"]
[Thu Feb 26 21:00:36.498076 2026] [:error] [pid 3883:tid 3910] [client 20.104.19.195:45898] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBD9OA33x90V6yYHajdywAAAVg"]
[Thu Feb 26 21:00:37.067547 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:46061] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBD9eA33x90V6yYHajdzwAAAUo"]
[Thu Feb 26 21:00:37.619743 2026] [:error] [pid 3883:tid 3892] [client 20.104.19.195:45990] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBD9eA33x90V6yYHajd0gAAAUY"]
[Thu Feb 26 21:00:38.282356 2026] [:error] [pid 3883:tid 3893] [client 20.104.19.195:45962] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBD9uA33x90V6yYHajd1AAAAUc"]
[Thu Feb 26 21:00:38.881721 2026] [:error] [pid 3883:tid 3908] [client 20.104.19.195:46036] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBD9uA33x90V6yYHajd1wAAAVY"]
[Thu Feb 26 21:00:39.457148 2026] [:error] [pid 25311:tid 25314] [client 20.104.19.195:45993] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aaBD99fdM__yZAgJFSvbagAAAYA"]
[Thu Feb 26 21:00:40.113203 2026] [:error] [pid 25311:tid 25322] [client 20.104.19.195:45960] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aaBD-NfdM__yZAgJFSvbbQAAAYg"]
[Thu Feb 26 21:00:40.647181 2026] [:error] [pid 3883:tid 3889] [client 20.104.19.195:45995] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aaBD-OA33x90V6yYHajd4AAAAUM"]
[Thu Feb 26 21:00:41.180546 2026] [:error] [pid 3883:tid 3906] [client 20.104.19.195:46039] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/999.php"] [unique_id "aaBD-eA33x90V6yYHajd5wAAAVQ"]
[Thu Feb 26 21:00:41.852056 2026] [:error] [pid 3883:tid 3891] [client 20.104.19.195:45966] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBD-eA33x90V6yYHajd6wAAAUU"]
[Thu Feb 26 21:00:42.769366 2026] [:error] [pid 55051:tid 55055] [client 20.104.19.195:45957] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBD-gmK1w2kZvh5eLGlgQAAAIE"]
[Thu Feb 26 21:00:43.391641 2026] [:error] [pid 3883:tid 3893] [client 20.104.19.195:46058] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBD--A33x90V6yYHajd-wAAAUc"]
[Thu Feb 26 21:00:43.977907 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:45992] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBD-22sMNmj-yekUk0USgAAAgU"]
[Thu Feb 26 21:00:44.651698 2026] [:error] [pid 44444:tid 44459] [client 20.104.19.195:45888] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aaBD_G2sMNmj-yekUk0USwAAAgk"]
[Thu Feb 26 21:00:45.252927 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:46022] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aaBD_W2sMNmj-yekUk0UUAAAAgo"]
[Thu Feb 26 21:00:46.046416 2026] [:error] [pid 55051:tid 55064] [client 20.104.19.195:45892] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aaBD_gmK1w2kZvh5eLGlhwAAAIo"]
[Thu Feb 26 21:00:46.840239 2026] [:error] [pid 25311:tid 25337] [client 20.104.19.195:46076] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/data.php"] [unique_id "aaBD_tfdM__yZAgJFSvbdAAAAZc"]
[Thu Feb 26 21:00:47.491326 2026] [:error] [pid 3883:tid 3901] [client 20.104.19.195:46002] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aaBD_-A33x90V6yYHajeEAAAAU8"]
[Thu Feb 26 21:00:48.213191 2026] [:error] [pid 25311:tid 25315] [client 20.104.19.195:45895] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aaBEANfdM__yZAgJFSvbdQAAAYE"]
[Thu Feb 26 21:00:48.920009 2026] [:error] [pid 55618:tid 55644] [client 20.104.19.195:46003] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aaBEAB61Vrh12f_8oWQIOAAAARc"]
[Thu Feb 26 21:00:49.683970 2026] [:error] [pid 44444:tid 44452] [client 20.104.19.195:45997] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xx.php"] [unique_id "aaBEAW2sMNmj-yekUk0UWAAAAgI"]
[Thu Feb 26 21:00:50.675226 2026] [:error] [pid 25311:tid 25328] [client 20.104.19.195:45956] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aaBEAtfdM__yZAgJFSvbdwAAAY4"]
[Thu Feb 26 21:00:51.252011 2026] [:error] [pid 44444:tid 44474] [client 20.104.19.195:46010] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aaBEA22sMNmj-yekUk0UWgAAAhg"]
[Thu Feb 26 21:00:51.863716 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:45982] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aaBEA22sMNmj-yekUk0UXAAAAgU"]
[Thu Feb 26 21:00:52.480366 2026] [:error] [pid 55051:tid 55061] [client 20.104.19.195:45979] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2.php"] [unique_id "aaBEBAmK1w2kZvh5eLGllwAAAIc"]
[Thu Feb 26 21:00:53.289004 2026] [:error] [pid 25311:tid 25338] [client 20.104.19.195:46072] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBEBdfdM__yZAgJFSvbegAAAZg"]
[Thu Feb 26 21:00:53.804423 2026] [:error] [pid 3883:tid 3894] [client 20.104.19.195:46014] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBEBeA33x90V6yYHajeHgAAAUg"]
[Thu Feb 26 21:00:54.333659 2026] [:error] [pid 25311:tid 25333] [client 20.104.19.195:45975] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBEBtfdM__yZAgJFSvbfwAAAZM"]
[Thu Feb 26 21:00:54.963748 2026] [:error] [pid 55051:tid 55071] [client 20.104.19.195:45902] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBEBgmK1w2kZvh5eLGlnQAAAJE"]
[Thu Feb 26 21:00:55.752716 2026] [:error] [pid 25311:tid 25326] [client 20.104.19.195:46008] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaBEB9fdM__yZAgJFSvbggAAAYw"]
[Thu Feb 26 21:00:56.270104 2026] [:error] [pid 44444:tid 44461] [client 20.104.19.195:45915] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaBECG2sMNmj-yekUk0UZAAAAgs"]
[Thu Feb 26 21:00:56.854459 2026] [:error] [pid 54990:tid 55000] [client 20.104.19.195:45906] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaBECHtr2qmt_mBhH2wmewAAAAc"]
[Thu Feb 26 21:00:57.519753 2026] [:error] [pid 3883:tid 3903] [client 20.104.19.195:45994] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaBECeA33x90V6yYHajeKgAAAVE"]
[Thu Feb 26 21:00:58.182484 2026] [:error] [pid 55051:tid 55074] [client 20.104.19.195:45896] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBECgmK1w2kZvh5eLGlogAAAJQ"]
[Thu Feb 26 21:00:58.925734 2026] [:error] [pid 44444:tid 44464] [client 20.104.19.195:46043] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBECm2sMNmj-yekUk0UawAAAg4"]
[Thu Feb 26 21:00:59.458763 2026] [:error] [pid 55122:tid 55139] [client 20.104.19.195:45987] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBEC4LiR0OfjFxvcN8tEAAAAM8"]
[Thu Feb 26 21:01:00.017753 2026] [:error] [pid 25311:tid 25338] [client 20.104.19.195:45916] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBEDNfdM__yZAgJFSvbjAAAAZg"]
[Thu Feb 26 21:01:00.614450 2026] [:error] [pid 44444:tid 44450] [client 20.104.19.195:46027] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aaBEDG2sMNmj-yekUk0UbwAAAgA"]
[Thu Feb 26 21:01:01.297794 2026] [:error] [pid 44444:tid 44462] [client 20.104.19.195:45999] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aaBEDW2sMNmj-yekUk0UcwAAAgw"]
[Thu Feb 26 21:01:01.884093 2026] [:error] [pid 55618:tid 55631] [client 20.104.19.195:46013] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/security.php"] [unique_id "aaBEDR61Vrh12f_8oWQITgAAAQo"]
[Thu Feb 26 21:01:02.647666 2026] [:error] [pid 3883:tid 3886] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Thu Feb 26 21:01:02.890285 2026] [:error] [pid 3883:tid 3910] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Thu Feb 26 21:01:04.250171 2026] [:error] [pid 3883:tid 3910] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Feb 26 21:01:04.503517 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Feb 26 21:01:04.752267 2026] [:error] [pid 3883:tid 3903] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Thu Feb 26 21:01:05.019788 2026] [:error] [pid 3883:tid 3899] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Feb 26 21:01:05.318238 2026] [:error] [pid 3883:tid 3890] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Feb 26 21:01:05.560999 2026] [:error] [pid 3883:tid 3909] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/u.php
[Thu Feb 26 21:01:06.055869 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 26 21:01:06.310715 2026] [:error] [pid 3883:tid 3905] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Thu Feb 26 21:01:06.563277 2026] [:error] [pid 3883:tid 3898] [client 20.104.19.195:46053] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Feb 26 21:01:06.829962 2026] [:error] [pid 3883:tid 3904] [client 20.104.19.195:46053] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law.php"] [unique_id "aaBEEuA33x90V6yYHajeSgAAAVI"]
[Thu Feb 26 21:01:07.469320 2026] [:error] [pid 55618:tid 55622] [client 20.104.19.195:45838] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law.php"] [unique_id "aaBEEx61Vrh12f_8oWQIawAAAQE"]
[Thu Feb 26 21:01:08.002328 2026] [:error] [pid 3883:tid 3907] [client 20.104.19.195:46078] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law.php"] [unique_id "aaBEFOA33x90V6yYHajeTAAAAVU"]
[Thu Feb 26 21:01:08.758304 2026] [:error] [pid 44444:tid 44462] [client 20.104.19.195:45961] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law.php"] [unique_id "aaBEFG2sMNmj-yekUk0UhgAAAgw"]
[Thu Feb 26 21:01:09.309318 2026] [:error] [pid 54991:tid 55035] [client 20.104.19.195:46024] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file6.php"] [unique_id "aaBEFd4Zx-mJ8gbRB2jjngAAAE8"]
[Thu Feb 26 21:01:09.832501 2026] [:error] [pid 54990:tid 54994] [client 20.104.19.195:46023] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file6.php"] [unique_id "aaBEFXtr2qmt_mBhH2wmfgAAAAE"]
[Thu Feb 26 21:01:10.496608 2026] [:error] [pid 55051:tid 55054] [client 20.104.19.195:46060] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file6.php"] [unique_id "aaBEFgmK1w2kZvh5eLGlsAAAAIA"]
[Thu Feb 26 21:01:11.147334 2026] [:error] [pid 54991:tid 55033] [client 20.104.19.195:46044] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file6.php"] [unique_id "aaBEF94Zx-mJ8gbRB2jjowAAAE0"]
[Thu Feb 26 21:01:11.686692 2026] [:error] [pid 54991:tid 55021] [client 20.104.19.195:46006] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss.php"] [unique_id "aaBEF94Zx-mJ8gbRB2jjpgAAAEE"]
[Thu Feb 26 21:01:12.278666 2026] [:error] [pid 55051:tid 55077] [client 20.104.19.195:46030] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss.php"] [unique_id "aaBEGAmK1w2kZvh5eLGlswAAAJc"]
[Thu Feb 26 21:01:12.845599 2026] [:error] [pid 55051:tid 55078] [client 20.104.19.195:46007] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss.php"] [unique_id "aaBEGAmK1w2kZvh5eLGltQAAAJg"]
[Thu Feb 26 21:01:13.422005 2026] [:error] [pid 20419:tid 20431] [client 20.104.19.195:45998] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ss.php"] [unique_id "aaBEGe3DVDvMfTYYUBVR4QAAAck"]
[Thu Feb 26 21:01:14.021361 2026] [:error] [pid 25311:tid 25331] [client 20.104.19.195:45945] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaBEGtfdM__yZAgJFSvboAAAAZE"]
[Thu Feb 26 21:01:14.708205 2026] [:error] [pid 44444:tid 44454] [client 20.104.19.195:45829] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaBEGm2sMNmj-yekUk0UkAAAAgQ"]
[Thu Feb 26 21:01:15.248488 2026] [:error] [pid 25311:tid 25330] [client 20.104.19.195:46029] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaBEG9fdM__yZAgJFSvbowAAAZA"]
[Thu Feb 26 21:01:15.866630 2026] [:error] [pid 54990:tid 55002] [client 20.104.19.195:45897] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaBEG3tr2qmt_mBhH2wmhwAAAAk"]
[Thu Feb 26 21:01:16.619136 2026] [:error] [pid 54990:tid 55017] [client 20.104.19.195:45836] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file4.php"] [unique_id "aaBEHHtr2qmt_mBhH2wmiAAAABg"]
[Thu Feb 26 21:01:17.230040 2026] [:error] [pid 54991:tid 55025] [client 20.104.19.195:46077] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file4.php"] [unique_id "aaBEHd4Zx-mJ8gbRB2jjrgAAAEU"]
[Thu Feb 26 21:01:17.810900 2026] [:error] [pid 55051:tid 55061] [client 20.104.19.195:45828] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file4.php"] [unique_id "aaBEHQmK1w2kZvh5eLGluwAAAIc"]
[Thu Feb 26 21:01:18.945666 2026] [:error] [pid 44444:tid 44464] [client 20.104.19.195:46026] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file4.php"] [unique_id "aaBEHm2sMNmj-yekUk0UngAAAg4"]
[Thu Feb 26 21:01:19.549133 2026] [:error] [pid 54991:tid 55023] [client 20.104.19.195:45938] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aaBEH94Zx-mJ8gbRB2jjsQAAAEM"]
[Thu Feb 26 21:01:20.081097 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:46032] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aaBEIG2sMNmj-yekUk0UpQAAAgo"]
[Thu Feb 26 21:01:20.595834 2026] [:error] [pid 25311:tid 25334] [client 20.104.19.195:45950] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aaBEINfdM__yZAgJFSvbswAAAZQ"]
[Thu Feb 26 21:01:21.340858 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:45981] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file7.php"] [unique_id "aaBEIW2sMNmj-yekUk0UzwAAAhE"]
[Thu Feb 26 21:01:21.860871 2026] [:error] [pid 20419:tid 20437] [client 20.104.19.195:45985] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aaBEIe3DVDvMfTYYUBVR5wAAAc8"]
[Thu Feb 26 21:01:22.543757 2026] [:error] [pid 44444:tid 44464] [client 20.104.19.195:46065] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aaBEIm2sMNmj-yekUk0U_gAAAg4"]
[Thu Feb 26 21:01:23.129237 2026] [:error] [pid 44444:tid 44450] [client 20.104.19.195:45984] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aaBEI22sMNmj-yekUk0VCQAAAgA"]
[Thu Feb 26 21:01:23.842443 2026] [:error] [pid 3883:tid 3909] [client 20.104.19.195:45913] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dejavu.php"] [unique_id "aaBEI-A33x90V6yYHajeUgAAAVc"]
[Thu Feb 26 21:01:24.457510 2026] [:error] [pid 55122:tid 55145] [client 20.104.19.195:46056] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aaBEJILiR0OfjFxvcN8tTwAAANU"]
[Thu Feb 26 21:01:25.020633 2026] [:error] [pid 3883:tid 3902] [client 20.104.19.195:46045] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aaBEJeA33x90V6yYHajeXAAAAVA"]
[Thu Feb 26 21:01:25.609826 2026] [:error] [pid 3883:tid 3888] [client 20.104.19.195:45886] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aaBEJeA33x90V6yYHajeYQAAAUI"]
[Thu Feb 26 21:01:26.323957 2026] [:error] [pid 3883:tid 3887] [client 20.104.19.195:45904] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/CLA.php"] [unique_id "aaBEJuA33x90V6yYHajeZgAAAUE"]
[Thu Feb 26 21:01:26.835111 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:45911] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBEJuA33x90V6yYHajeagAAAUo"]
[Thu Feb 26 21:01:27.578828 2026] [:error] [pid 44444:tid 44459] [client 20.104.19.195:46047] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBEJ22sMNmj-yekUk0VIQAAAgk"]
[Thu Feb 26 21:01:28.242084 2026] [:error] [pid 54991:tid 55042] [client 20.104.19.195:46004] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBEKN4Zx-mJ8gbRB2jjsgAAAFY"]
[Thu Feb 26 21:01:28.783952 2026] [:error] [pid 54991:tid 55033] [client 20.104.19.195:45827] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBEKN4Zx-mJ8gbRB2jjswAAAE0"]
[Thu Feb 26 21:01:29.349068 2026] [:error] [pid 25311:tid 25335] [client 20.104.19.195:45932] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aaBEKdfdM__yZAgJFSvbuAAAAZU"]
[Thu Feb 26 21:01:29.947521 2026] [:error] [pid 3883:tid 3889] [client 20.104.19.195:46009] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aaBEKeA33x90V6yYHajebwAAAUM"]
[Thu Feb 26 21:01:30.620022 2026] [:error] [pid 44444:tid 44450] [client 20.104.19.195:45885] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aaBEKm2sMNmj-yekUk0VJwAAAgA"]
[Thu Feb 26 21:01:31.176293 2026] [:error] [pid 3883:tid 3886] [client 20.104.19.195:45939] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file9.php"] [unique_id "aaBEK-A33x90V6yYHajecgAAAUA"]
[Thu Feb 26 21:01:31.910090 2026] [:error] [pid 55051:tid 55078] [client 20.104.19.195:45937] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aaBEKwmK1w2kZvh5eLGlxwAAAJg"]
[Thu Feb 26 21:01:32.581689 2026] [:error] [pid 54990:tid 55013] [client 20.104.19.195:45889] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aaBELHtr2qmt_mBhH2wmogAAABQ"]
[Thu Feb 26 21:01:33.065031 2026] [:error] [pid 20419:tid 20426] [client 20.104.19.195:45943] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aaBELe3DVDvMfTYYUBVR7wAAAcQ"]
[Thu Feb 26 21:01:33.695457 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:45983] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "aaBELeA33x90V6yYHajedQAAAUo"]
[Thu Feb 26 21:01:34.356033 2026] [:error] [pid 55618:tid 55635] [client 20.104.19.195:45833] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.trash7309/index.php"] [unique_id "aaBELh61Vrh12f_8oWQIygAAAQ4"]
[Thu Feb 26 21:01:35.076438 2026] [:error] [pid 55618:tid 55641] [client 20.104.19.195:45921] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.trash7309/index.php"] [unique_id "aaBELx61Vrh12f_8oWQIywAAARQ"]
[Thu Feb 26 21:01:35.581745 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:45914] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.trash7309/index.php"] [unique_id "aaBEL22sMNmj-yekUk0VMQAAAgo"]
[Thu Feb 26 21:01:36.089475 2026] [:error] [pid 44444:tid 44469] [client 20.104.19.195:46021] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.trash7309/index.php"] [unique_id "aaBEMG2sMNmj-yekUk0VMwAAAhM"]
[Thu Feb 26 21:01:36.791722 2026] [:error] [pid 55051:tid 55065] [client 20.104.19.195:45926] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaBEMAmK1w2kZvh5eLGl3wAAAIs"]
[Thu Feb 26 21:01:37.520216 2026] [:error] [pid 44444:tid 44454] [client 20.104.19.195:45924] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaBEMW2sMNmj-yekUk0VNgAAAgQ"]
[Thu Feb 26 21:01:38.252885 2026] [:error] [pid 55051:tid 55060] [client 20.104.19.195:45922] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaBEMgmK1w2kZvh5eLGl6gAAAIY"]
[Thu Feb 26 21:01:39.149331 2026] [:error] [pid 54990:tid 54996] [client 20.104.19.195:45991] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaBEM3tr2qmt_mBhH2wmpwAAAAM"]
[Thu Feb 26 21:01:40.417736 2026] [:error] [pid 44444:tid 44465] [client 20.104.19.195:45830] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBENG2sMNmj-yekUk0VOQAAAg8"]
[Thu Feb 26 21:01:41.063117 2026] [:error] [pid 54991:tid 55040] [client 20.104.19.195:46069] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBENd4Zx-mJ8gbRB2jjvAAAAFQ"]
[Thu Feb 26 21:01:41.761915 2026] [:error] [pid 54991:tid 55024] [client 20.104.19.195:45900] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBENd4Zx-mJ8gbRB2jjwQAAAEQ"]
[Thu Feb 26 21:01:42.611004 2026] [:error] [pid 44444:tid 44466] [client 20.104.19.195:45856] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBENm2sMNmj-yekUk0VPgAAAhA"]
[Thu Feb 26 21:01:43.595031 2026] [:error] [pid 25311:tid 25335] [client 20.104.19.195:45940] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file17.php"] [unique_id "aaBEN9fdM__yZAgJFSvbxwAAAZU"]
[Thu Feb 26 21:01:44.381674 2026] [:error] [pid 25311:tid 25337] [client 20.104.19.195:46068] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file17.php"] [unique_id "aaBEONfdM__yZAgJFSvbygAAAZc"]
[Thu Feb 26 21:01:44.900125 2026] [:error] [pid 20419:tid 20438] [client 20.104.19.195:45910] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file17.php"] [unique_id "aaBEOO3DVDvMfTYYUBVR_wAAAdA"]
[Thu Feb 26 21:01:45.414997 2026] [:error] [pid 3883:tid 3886] [client 20.104.19.195:45796] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file17.php"] [unique_id "aaBEOeA33x90V6yYHajegwAAAUA"]
[Thu Feb 26 21:01:45.955871 2026] [:error] [pid 44444:tid 44464] [client 20.104.19.195:46000] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/footer.php"] [unique_id "aaBEOW2sMNmj-yekUk0VRAAAAg4"]
[Thu Feb 26 21:01:46.422159 2026] [:error] [pid 3883:tid 3902] [client 20.104.19.195:45901] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/footer.php"] [unique_id "aaBEOuA33x90V6yYHajeiwAAAVA"]
[Thu Feb 26 21:01:47.030627 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:45935] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/footer.php"] [unique_id "aaBEO22sMNmj-yekUk0VRwAAAgo"]
[Thu Feb 26 21:01:47.519942 2026] [:error] [pid 54990:tid 55012] [client 20.104.19.195:46005] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/footer.php"] [unique_id "aaBEO3tr2qmt_mBhH2wmqAAAABM"]
[Thu Feb 26 21:01:48.029941 2026] [:error] [pid 3883:tid 3900] [client 20.104.19.195:45838] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file8.php"] [unique_id "aaBEPOA33x90V6yYHajemwAAAU4"]
[Thu Feb 26 21:01:48.722937 2026] [:error] [pid 3883:tid 3909] [client 20.104.19.195:45839] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file8.php"] [unique_id "aaBEPOA33x90V6yYHajeogAAAVc"]
[Thu Feb 26 21:01:49.296991 2026] [:error] [pid 3883:tid 3889] [client 20.104.19.195:45841] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file8.php"] [unique_id "aaBEPeA33x90V6yYHajepgAAAUM"]
[Thu Feb 26 21:01:49.838193 2026] [:error] [pid 44444:tid 44465] [client 20.104.19.195:45912] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file8.php"] [unique_id "aaBEPW2sMNmj-yekUk0VTAAAAg8"]
[Thu Feb 26 21:01:50.372575 2026] [:error] [pid 55122:tid 55126] [client 20.104.19.195:45852] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBEPoLiR0OfjFxvcN8tYwAAAMI"]
[Thu Feb 26 21:01:51.007323 2026] [:error] [pid 55122:tid 55130] [client 20.104.19.195:45763] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBEP4LiR0OfjFxvcN8tZgAAAMY"]
[Thu Feb 26 21:01:51.580158 2026] [:error] [pid 44444:tid 44466] [client 20.104.19.195:45890] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBEP22sMNmj-yekUk0VUgAAAhA"]
[Thu Feb 26 21:01:52.125619 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:45941] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBEQG2sMNmj-yekUk0VUwAAAgY"]
[Thu Feb 26 21:01:52.691018 2026] [:error] [pid 44444:tid 44458] [client 20.104.19.195:45944] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aaBEQG2sMNmj-yekUk0VVgAAAgg"]
[Thu Feb 26 21:01:53.318776 2026] [:error] [pid 20419:tid 20428] [client 20.104.19.195:46001] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aaBEQe3DVDvMfTYYUBVSBgAAAcY"]
[Thu Feb 26 21:01:53.800972 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:45996] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aaBEQW2sMNmj-yekUk0VXAAAAgo"]
[Thu Feb 26 21:01:54.312456 2026] [:error] [pid 25311:tid 25334] [client 20.104.19.195:45883] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-conflg.php"] [unique_id "aaBEQtfdM__yZAgJFSvb1AAAAZQ"]
[Thu Feb 26 21:01:54.806320 2026] [:error] [pid 25311:tid 25332] [client 20.104.19.195:45854] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aaBEQtfdM__yZAgJFSvb2AAAAZI"]
[Thu Feb 26 21:01:55.300040 2026] [:error] [pid 44444:tid 44468] [client 20.104.19.195:45933] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aaBEQ22sMNmj-yekUk0VYQAAAhI"]
[Thu Feb 26 21:01:55.873982 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:45832] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aaBEQ22sMNmj-yekUk0VZQAAAgU"]
[Thu Feb 26 21:01:56.360438 2026] [:error] [pid 25311:tid 25324] [client 20.104.19.195:45934] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aaBERNfdM__yZAgJFSvb2wAAAYo"]
[Thu Feb 26 21:01:56.901737 2026] [:error] [pid 25311:tid 25337] [client 20.104.19.195:45779] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBERNfdM__yZAgJFSvb3gAAAZc"]
[Thu Feb 26 21:01:57.460987 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:45864] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBERW2sMNmj-yekUk0VawAAAgo"]
[Thu Feb 26 21:01:57.940292 2026] [:error] [pid 55618:tid 55635] [client 20.104.19.195:45925] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBERR61Vrh12f_8oWQI3gAAAQ4"]
[Thu Feb 26 21:01:58.407759 2026] [:error] [pid 25311:tid 25318] [client 20.104.19.195:45846] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBERtfdM__yZAgJFSvb4AAAAYQ"]
[Thu Feb 26 21:01:59.008678 2026] [:error] [pid 25311:tid 25316] [client 20.104.19.195:45951] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBER9fdM__yZAgJFSvb4QAAAYI"]
[Thu Feb 26 21:01:59.628778 2026] [:error] [pid 3883:tid 3901] [client 20.104.19.195:45928] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBER-A33x90V6yYHajewQAAAU8"]
[Thu Feb 26 21:02:00.157783 2026] [:error] [pid 25311:tid 25314] [client 20.104.19.195:45980] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBESNfdM__yZAgJFSvb4gAAAYA"]
[Thu Feb 26 21:02:00.860517 2026] [:error] [pid 3883:tid 3897] [client 20.104.19.195:45917] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBESOA33x90V6yYHajezQAAAUs"]
[Thu Feb 26 21:02:01.698224 2026] [:error] [pid 55122:tid 55139] [client 20.104.19.195:45698] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaBESYLiR0OfjFxvcN8taAAAAM8"]
[Thu Feb 26 21:02:02.199277 2026] [:error] [pid 3883:tid 3906] [client 20.104.19.195:46057] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaBESuA33x90V6yYHajezwAAAVQ"]
[Thu Feb 26 21:02:02.843582 2026] [:error] [pid 55618:tid 55632] [client 20.104.19.195:45893] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaBESh61Vrh12f_8oWQI4wAAAQs"]
[Thu Feb 26 21:02:03.652829 2026] [:error] [pid 44444:tid 44463] [client 20.104.19.195:45936] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaBES22sMNmj-yekUk0VdAAAAg0"]
[Thu Feb 26 21:02:04.124222 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:45761] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaBETG2sMNmj-yekUk0VeQAAAgU"]
[Thu Feb 26 21:02:04.683837 2026] [:error] [pid 3883:tid 3893] [client 20.104.19.195:45851] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaBETOA33x90V6yYHaje2AAAAUc"]
[Thu Feb 26 21:02:05.142138 2026] [:error] [pid 55618:tid 55630] [client 20.104.19.195:45842] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaBETR61Vrh12f_8oWQI5gAAAQk"]
[Thu Feb 26 21:02:05.603035 2026] [:error] [pid 25311:tid 25331] [client 20.104.19.195:45879] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaBETdfdM__yZAgJFSvb6QAAAZE"]
[Thu Feb 26 21:02:06.177583 2026] [:error] [pid 3883:tid 3886] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Thu Feb 26 21:02:06.415622 2026] [:error] [pid 3883:tid 3890] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php
[Thu Feb 26 21:02:06.625878 2026] [:error] [pid 3883:tid 3907] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Feb 26 21:02:06.859620 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Thu Feb 26 21:02:07.080151 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Thu Feb 26 21:02:07.299120 2026] [:error] [pid 3883:tid 3901] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Feb 26 21:02:07.558174 2026] [:error] [pid 3883:tid 3903] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Feb 26 21:02:07.855934 2026] [:error] [pid 3883:tid 3902] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Thu Feb 26 21:02:08.064899 2026] [:error] [pid 3883:tid 3893] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Thu Feb 26 21:02:08.290456 2026] [:error] [pid 3883:tid 3909] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 26 21:02:08.718806 2026] [:error] [pid 3883:tid 3905] [client 20.104.19.195:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Feb 26 21:02:08.926910 2026] [:error] [pid 3883:tid 3908] [client 20.104.19.195:45773] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaBEUOA33x90V6yYHaje7gAAAVY"]
[Thu Feb 26 21:02:09.460173 2026] [:error] [pid 55618:tid 55643] [client 20.104.19.195:45867] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaBEUR61Vrh12f_8oWQI6wAAARY"]
[Thu Feb 26 21:02:09.974480 2026] [:error] [pid 20419:tid 20435] [client 20.104.19.195:45845] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaBEUe3DVDvMfTYYUBVSFgAAAc0"]
[Thu Feb 26 21:02:10.918183 2026] [:error] [pid 55122:tid 55140] [client 20.104.19.195:45843] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaBEUoLiR0OfjFxvcN8tawAAANA"]
[Thu Feb 26 21:02:11.375159 2026] [:error] [pid 54990:tid 55009] [client 20.104.19.195:45920] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aaBEU3tr2qmt_mBhH2wmswAAABA"]
[Thu Feb 26 21:02:12.039731 2026] [:error] [pid 44444:tid 44465] [client 20.104.19.195:45931] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aaBEVG2sMNmj-yekUk0ViwAAAg8"]
[Thu Feb 26 21:02:12.762897 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:45882] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aaBEVG2sMNmj-yekUk0VkgAAAgo"]
[Thu Feb 26 21:02:13.440288 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:45887] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "aaBEVW2sMNmj-yekUk0VlAAAAhE"]
[Thu Feb 26 21:02:14.165140 2026] [:error] [pid 55618:tid 55622] [client 20.104.19.195:45899] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aaBEVh61Vrh12f_8oWQI9AAAAQE"]
[Thu Feb 26 21:02:15.085847 2026] [:error] [pid 25311:tid 25320] [client 20.104.19.195:45849] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aaBEV9fdM__yZAgJFSvcBAAAAYY"]
[Thu Feb 26 21:02:15.722769 2026] [:error] [pid 3883:tid 3891] [client 20.104.19.195:45881] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aaBEV-A33x90V6yYHaje9gAAAUU"]
[Thu Feb 26 21:02:16.311631 2026] [:error] [pid 3883:tid 3890] [client 20.104.19.195:45850] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lv.php"] [unique_id "aaBEWOA33x90V6yYHaje-wAAAUQ"]
[Thu Feb 26 21:02:16.776098 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:45918] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mn.php"] [unique_id "aaBEWOA33x90V6yYHaje_gAAAUo"]
[Thu Feb 26 21:02:17.400232 2026] [:error] [pid 3883:tid 3909] [client 20.104.19.195:45946] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mn.php"] [unique_id "aaBEWeA33x90V6yYHajfBAAAAVc"]
[Thu Feb 26 21:02:17.931006 2026] [:error] [pid 3883:tid 3910] [client 20.104.19.195:45848] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mn.php"] [unique_id "aaBEWeA33x90V6yYHajfBwAAAVg"]
[Thu Feb 26 21:02:18.775093 2026] [:error] [pid 25311:tid 25319] [client 20.104.19.195:45858] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mn.php"] [unique_id "aaBEWtfdM__yZAgJFSvcCQAAAYU"]
[Thu Feb 26 21:02:19.337213 2026] [:error] [pid 55051:tid 55056] [client 20.104.19.195:45865] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaBEWwmK1w2kZvh5eLGmIAAAAII"]
[Thu Feb 26 21:02:19.817747 2026] [:error] [pid 55051:tid 55065] [client 20.104.19.195:45776] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaBEWwmK1w2kZvh5eLGmIwAAAIs"]
[Thu Feb 26 21:02:20.438481 2026] [:error] [pid 55051:tid 55064] [client 20.104.19.195:45805] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaBEXAmK1w2kZvh5eLGmJgAAAIo"]
[Thu Feb 26 21:02:21.143983 2026] [:error] [pid 3883:tid 3897] [client 20.104.19.195:45884] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaBEXeA33x90V6yYHajfCwAAAUs"]
[Thu Feb 26 21:02:21.710749 2026] [:error] [pid 55051:tid 55062] [client 20.104.19.195:45806] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfile.php"] [unique_id "aaBEXQmK1w2kZvh5eLGmJwAAAIg"]
[Thu Feb 26 21:02:22.219338 2026] [:error] [pid 54991:tid 55037] [client 20.104.19.195:45707] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfile.php"] [unique_id "aaBEXt4Zx-mJ8gbRB2jj0AAAAFE"]
[Thu Feb 26 21:02:22.850092 2026] [:error] [pid 3883:tid 3896] [client 20.104.19.195:45831] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfile.php"] [unique_id "aaBEXuA33x90V6yYHajfEAAAAUo"]
[Thu Feb 26 21:02:23.513129 2026] [:error] [pid 20419:tid 20425] [client 20.104.19.195:45855] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfile.php"] [unique_id "aaBEX-3DVDvMfTYYUBVSGgAAAcM"]
[Thu Feb 26 21:02:24.025251 2026] [:error] [pid 55051:tid 55068] [client 20.104.19.195:45847] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBEYAmK1w2kZvh5eLGmKwAAAI4"]
[Thu Feb 26 21:02:24.578293 2026] [:error] [pid 54991:tid 55036] [client 20.104.19.195:45869] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBEYN4Zx-mJ8gbRB2jj0QAAAFA"]
[Thu Feb 26 21:02:25.052302 2026] [:error] [pid 44444:tid 44451] [client 20.104.19.195:45905] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBEYW2sMNmj-yekUk0VpgAAAgE"]
[Thu Feb 26 21:02:25.798249 2026] [:error] [pid 44444:tid 44453] [client 20.104.19.195:45782] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/build.php"] [unique_id "aaBEYW2sMNmj-yekUk0VsQAAAgM"]
[Thu Feb 26 21:02:26.417026 2026] [:error] [pid 44444:tid 44466] [client 20.104.19.195:45780] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/fm.php"] [unique_id "aaBEYm2sMNmj-yekUk0VtwAAAhA"]
[Thu Feb 26 21:02:27.190138 2026] [:error] [pid 44444:tid 44471] [client 20.104.19.195:45790] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/fm.php"] [unique_id "aaBEY22sMNmj-yekUk0VwAAAAhU"]
[Thu Feb 26 21:02:28.074094 2026] [:error] [pid 25311:tid 25316] [client 20.104.19.195:45875] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/fm.php"] [unique_id "aaBEZNfdM__yZAgJFSvcGAAAAYI"]
[Thu Feb 26 21:02:28.794673 2026] [:error] [pid 44444:tid 44465] [client 20.104.19.195:45860] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/js/fm.php"] [unique_id "aaBEZG2sMNmj-yekUk0VygAAAg8"]
[Thu Feb 26 21:02:29.442319 2026] [:error] [pid 55122:tid 55133] [client 20.104.19.195:45766] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBEZYLiR0OfjFxvcN8tfAAAAMk"]
[Thu Feb 26 21:02:30.032343 2026] [:error] [pid 25311:tid 25338] [client 20.104.19.195:45874] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBEZtfdM__yZAgJFSvcHAAAAZg"]
[Thu Feb 26 21:02:30.556333 2026] [:error] [pid 55122:tid 55136] [client 20.104.19.195:45826] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBEZoLiR0OfjFxvcN8tgwAAAMw"]
[Thu Feb 26 21:02:31.039276 2026] [:error] [pid 55051:tid 55074] [client 20.104.19.195:45793] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBEZwmK1w2kZvh5eLGmNgAAAJQ"]
[Thu Feb 26 21:02:31.475457 2026] [:error] [pid 55051:tid 55060] [client 20.104.19.195:45785] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBEZwmK1w2kZvh5eLGmOwAAAIY"]
[Thu Feb 26 21:02:32.021736 2026] [:error] [pid 55618:tid 55626] [client 20.104.19.195:45809] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBEaB61Vrh12f_8oWQJCAAAAQU"]
[Thu Feb 26 21:02:32.636417 2026] [:error] [pid 20419:tid 20429] [client 20.104.19.195:45919] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBEaO3DVDvMfTYYUBVSHgAAAcc"]
[Thu Feb 26 21:02:33.157356 2026] [:error] [pid 55051:tid 55070] [client 20.104.19.195:45863] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBEaQmK1w2kZvh5eLGmQAAAAJA"]
[Thu Feb 26 21:02:33.793474 2026] [:error] [pid 3883:tid 3904] [client 20.104.19.195:45876] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aaBEaeA33x90V6yYHajfHQAAAVI"]
[Thu Feb 26 21:02:34.258336 2026] [:error] [pid 44444:tid 44463] [client 20.104.19.195:45775] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aaBEam2sMNmj-yekUk0V3gAAAg0"]
[Thu Feb 26 21:02:35.092930 2026] [:error] [pid 54990:tid 55001] [client 20.104.19.195:45791] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aaBEa3tr2qmt_mBhH2wmvwAAAAg"]
[Thu Feb 26 21:02:35.856186 2026] [:error] [pid 54991:tid 55030] [client 20.104.19.195:45802] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/m.php"] [unique_id "aaBEa94Zx-mJ8gbRB2jj1QAAAEo"]
[Thu Feb 26 21:02:36.508828 2026] [:error] [pid 55051:tid 55065] [client 20.104.19.195:45857] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBEbAmK1w2kZvh5eLGmRwAAAIs"]
[Thu Feb 26 21:02:36.960805 2026] [:error] [pid 55122:tid 55139] [client 20.104.19.195:45894] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBEbILiR0OfjFxvcN8tkQAAAM8"]
[Thu Feb 26 21:02:37.544839 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:45859] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBEbW2sMNmj-yekUk0V4gAAAgY"]
[Thu Feb 26 21:02:38.079841 2026] [:error] [pid 25311:tid 25330] [client 20.104.19.195:45718] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBEbtfdM__yZAgJFSvcSAAAAZA"]
[Thu Feb 26 21:02:38.570105 2026] [:error] [pid 54991:tid 55034] [client 20.104.19.195:45777] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaBEbt4Zx-mJ8gbRB2jj2AAAAE4"]
[Thu Feb 26 21:02:39.230437 2026] [:error] [pid 54990:tid 55015] [client 20.104.19.195:45930] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaBEb3tr2qmt_mBhH2wmwgAAABY"]
[Thu Feb 26 21:02:39.706031 2026] [:error] [pid 54991:tid 55028] [client 20.104.19.195:45812] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaBEb94Zx-mJ8gbRB2jj3AAAAEg"]
[Thu Feb 26 21:02:40.239281 2026] [:error] [pid 20419:tid 20432] [client 20.104.19.195:45764] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaBEcO3DVDvMfTYYUBVSKwAAAco"]
[Thu Feb 26 21:02:40.761910 2026] [:error] [pid 54990:tid 55009] [client 20.104.19.195:45819] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aaBEcHtr2qmt_mBhH2wmxgAAABA"]
[Thu Feb 26 21:02:41.214689 2026] [:error] [pid 55051:tid 55056] [client 20.104.19.195:45862] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aaBEcQmK1w2kZvh5eLGmXAAAAII"]
[Thu Feb 26 21:02:41.724672 2026] [:error] [pid 55051:tid 55061] [client 20.104.19.195:45786] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aaBEcQmK1w2kZvh5eLGmYQAAAIc"]
[Thu Feb 26 21:02:42.207304 2026] [:error] [pid 54990:tid 54995] [client 20.104.19.195:46018] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cloud.php"] [unique_id "aaBEcntr2qmt_mBhH2wmygAAAAI"]
[Thu Feb 26 21:02:42.748380 2026] [:error] [pid 54990:tid 55006] [client 20.104.19.195:45909] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBEcntr2qmt_mBhH2wmzAAAAA0"]
[Thu Feb 26 21:02:43.331462 2026] [:error] [pid 55122:tid 55143] [client 20.104.19.195:45700] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBEc4LiR0OfjFxvcN8tlgAAANM"]
[Thu Feb 26 21:02:43.975402 2026] [:error] [pid 55618:tid 55639] [client 20.104.19.195:45801] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBEcx61Vrh12f_8oWQJFQAAARI"]
[Thu Feb 26 21:02:44.463961 2026] [:error] [pid 44444:tid 44470] [client 20.104.19.195:45774] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBEdG2sMNmj-yekUk0V6QAAAhQ"]
[Thu Feb 26 21:02:45.081149 2026] [:error] [pid 25311:tid 25319] [client 20.104.19.195:45784] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaBEddfdM__yZAgJFSvcYwAAAYU"]
[Thu Feb 26 21:02:45.537742 2026] [:error] [pid 25311:tid 25332] [client 20.104.19.195:45800] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaBEddfdM__yZAgJFSvcZwAAAZI"]
[Thu Feb 26 21:02:46.064868 2026] [:error] [pid 55051:tid 55069] [client 20.104.19.195:45877] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaBEdgmK1w2kZvh5eLGmbQAAAI8"]
[Thu Feb 26 21:02:46.550970 2026] [:error] [pid 3883:tid 3892] [client 20.104.19.195:45737] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaBEduA33x90V6yYHajfKgAAAUY"]
[Thu Feb 26 21:02:47.036620 2026] [:error] [pid 3883:tid 3900] [client 20.104.19.195:45787] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaBEd-A33x90V6yYHajfLQAAAU4"]
[Thu Feb 26 21:02:47.753880 2026] [:error] [pid 3883:tid 3887] [client 20.104.19.195:45844] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaBEd-A33x90V6yYHajfNQAAAUE"]
[Thu Feb 26 21:02:48.286706 2026] [:error] [pid 3883:tid 3903] [client 20.104.19.195:45765] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaBEeOA33x90V6yYHajfOQAAAVE"]
[Thu Feb 26 21:02:48.890752 2026] [:error] [pid 55051:tid 55057] [client 20.104.19.195:45871] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaBEeAmK1w2kZvh5eLGmcgAAAIM"]
[Thu Feb 26 21:07:02.324048 2026] [:error] [pid 3883:tid 3897] [client 49.51.72.236:59788] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaBFduA33x90V6yYHajh1QAAAUs"]
[Thu Feb 26 21:20:42.856161 2026] [:error] [pid 3883:tid 3900] [client 114.96.103.33:45054] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaBIquA33x90V6yYHajpswAAAU4"]
[Thu Feb 26 21:32:17.907325 2026] [:error] [pid 44444:tid 44473] [client 51.83.9.208:33044] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaBLYW2sMNmj-yekUk0p4QAAAhc"]
[Thu Feb 26 21:32:20.618161 2026] [:error] [pid 55051:tid 55064] [client 51.83.9.208:37806] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaBLZAmK1w2kZvh5eLG0WAAAAIo"]
[Thu Feb 26 21:32:26.771764 2026] [:error] [pid 44444:tid 44471] [client 51.83.9.208:37818] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaBLam2sMNmj-yekUk0p8AAAAhU"]
[Thu Feb 26 21:50:41.748754 2026] [:error] [pid 25311:tid 25321] [client 195.178.110.28:57738] [client 195.178.110.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aaBPsdfdM__yZAgJFSvmeAAAAYc"]
[Thu Feb 26 22:01:42.464150 2026] [:error] [pid 20419:tid 20439] [client 157.245.196.99:49774] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSRu3DVDvMfTYYUBVhTAAAAdE"]
[Thu Feb 26 22:33:43.219135 2026] [:error] [pid 54990:tid 54999] [client 2.58.56.91:55694] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Thu Feb 26 22:33:44.267375 2026] [:error] [pid 25311:tid 25328] [client 2.58.56.91:58827] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaBZyNfdM__yZAgJFSvuPgAAAY4"]
[Thu Feb 26 22:33:44.772635 2026] [:error] [pid 54990:tid 55007] [client 2.58.56.91:60708] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaBZyHtr2qmt_mBhH2ww6QAAAA4"]
[Thu Feb 26 22:33:45.289093 2026] [:error] [pid 55618:tid 55633] [client 2.58.56.91:56756] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaBZyR61Vrh12f_8oWQXBgAAAQw"]
[Thu Feb 26 22:33:46.312405 2026] [:error] [pid 25311:tid 25333] [client 2.58.56.91:62267] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/txets.php"] [unique_id "aaBZytfdM__yZAgJFSvuPwAAAZM"]
[Thu Feb 26 22:33:46.852797 2026] [:error] [pid 54991:tid 55027] [client 2.58.56.91:64510] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php
[Thu Feb 26 22:33:47.381331 2026] [:error] [pid 54990:tid 55006] [client 2.58.56.91:61160] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Thu Feb 26 22:43:57.940999 2026] [:error] [pid 20419:tid 20434] [client 4.204.195.211:16330] File does not exist: /usr/local/apache/htdocs/suspended-page/mega.php
[Thu Feb 26 22:43:58.169408 2026] [:error] [pid 20419:tid 20441] [client 4.204.195.211:16330] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Feb 26 22:43:58.410241 2026] [:error] [pid 20419:tid 20427] [client 4.204.195.211:16330] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Thu Feb 26 22:43:58.637738 2026] [:error] [pid 20419:tid 20443] [client 4.204.195.211:16330] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Thu Feb 26 22:43:58.865936 2026] [:error] [pid 20419:tid 20438] [client 4.204.195.211:16330] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Thu Feb 26 22:44:00.031481 2026] [:error] [pid 20419:tid 20428] [client 4.204.195.211:16330] File does not exist: /usr/local/apache/htdocs/suspended-page/samfa.php
[Thu Feb 26 22:44:00.271749 2026] [:error] [pid 20419:tid 20429] [client 4.204.195.211:16330] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaBcMO3DVDvMfTYYUBVtlAAAAcc"]
[Thu Feb 26 22:44:00.720212 2026] [:error] [pid 20419:tid 20444] [client 4.204.195.211:16273] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaBcMO3DVDvMfTYYUBVtlwAAAdY"]
[Thu Feb 26 22:44:01.179281 2026] [:error] [pid 55122:tid 55136] [client 4.204.195.211:16333] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaBcMYLiR0OfjFxvcN85XQAAAMw"]
[Thu Feb 26 22:44:01.635986 2026] [:error] [pid 55122:tid 55139] [client 4.204.195.211:16382] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaBcMYLiR0OfjFxvcN85XgAAAM8"]
[Thu Feb 26 22:44:02.081429 2026] [:error] [pid 55122:tid 55134] [client 4.204.195.211:16260] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBcMoLiR0OfjFxvcN85YQAAAMo"]
[Thu Feb 26 22:44:02.554770 2026] [:error] [pid 55122:tid 55146] [client 4.204.195.211:16320] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBcMoLiR0OfjFxvcN85YgAAANY"]
[Thu Feb 26 22:44:03.009690 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:16371] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBcMwmK1w2kZvh5eLHYOAAAAJU"]
[Thu Feb 26 22:44:03.462182 2026] [:error] [pid 55051:tid 55063] [client 4.204.195.211:16271] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBcMwmK1w2kZvh5eLHYOwAAAIk"]
[Thu Feb 26 22:44:03.919966 2026] [:error] [pid 44444:tid 44470] [client 4.204.195.211:16323] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBcM22sMNmj-yekUk1bVgAAAhQ"]
[Thu Feb 26 22:44:04.374659 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16366] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBcNG2sMNmj-yekUk1bVwAAAgs"]
[Thu Feb 26 22:44:04.871283 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16363] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBcNG2sMNmj-yekUk1bWwAAAgM"]
[Thu Feb 26 22:44:05.335270 2026] [:error] [pid 54991:tid 55026] [client 4.204.195.211:16269] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaBcNd4Zx-mJ8gbRB2gGYwAAAEY"]
[Thu Feb 26 22:44:05.921084 2026] [:error] [pid 55051:tid 55074] [client 4.204.195.211:16380] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaBcNQmK1w2kZvh5eLHYQQAAAJQ"]
[Thu Feb 26 22:44:06.506959 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:16364] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaBcNgmK1w2kZvh5eLHYRQAAAJU"]
[Thu Feb 26 22:44:07.047616 2026] [:error] [pid 20419:tid 20424] [client 4.204.195.211:16375] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaBcN-3DVDvMfTYYUBVtmwAAAcI"]
[Thu Feb 26 22:44:07.589327 2026] [:error] [pid 55051:tid 55055] [client 4.204.195.211:16264] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaBcNwmK1w2kZvh5eLHYTwAAAIE"]
[Thu Feb 26 22:44:08.063100 2026] [:error] [pid 54991:tid 55044] [client 4.204.195.211:16332] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/templates/beez/index.php"] [unique_id "aaBcON4Zx-mJ8gbRB2gGZQAAAFg"]
[Thu Feb 26 22:44:08.560493 2026] [:error] [pid 55051:tid 55068] [client 4.204.195.211:16259] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/templates/beez/index.php"] [unique_id "aaBcOAmK1w2kZvh5eLHYVgAAAI4"]
[Thu Feb 26 22:44:09.012335 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16328] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/templates/beez/index.php"] [unique_id "aaBcOd4Zx-mJ8gbRB2gGZwAAAFc"]
[Thu Feb 26 22:44:09.457930 2026] [:error] [pid 44444:tid 44451] [client 4.204.195.211:16266] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/templates/beez/index.php"] [unique_id "aaBcOW2sMNmj-yekUk1bYgAAAgE"]
[Thu Feb 26 22:44:09.930899 2026] [:error] [pid 44444:tid 44470] [client 4.204.195.211:16365] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aaBcOW2sMNmj-yekUk1bZQAAAhQ"]
[Thu Feb 26 22:44:10.373751 2026] [:error] [pid 44444:tid 44450] [client 4.204.195.211:16324] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aaBcOm2sMNmj-yekUk1baAAAAgA"]
[Thu Feb 26 22:44:10.848921 2026] [:error] [pid 54991:tid 55039] [client 4.204.195.211:16362] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aaBcOt4Zx-mJ8gbRB2gGagAAAFM"]
[Thu Feb 26 22:44:11.346405 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:16351] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w.php"] [unique_id "aaBcO-3DVDvMfTYYUBVtnwAAAcQ"]
[Thu Feb 26 22:44:11.799257 2026] [:error] [pid 55618:tid 55641] [client 4.204.195.211:16376] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBcOx61Vrh12f_8oWQYRAAAARQ"]
[Thu Feb 26 22:44:12.252009 2026] [:error] [pid 3883:tid 3892] [client 4.204.195.211:16340] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBcPOA33x90V6yYHaj6-wAAAUY"]
[Thu Feb 26 22:44:12.687968 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16302] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBcPG2sMNmj-yekUk1bbgAAAgw"]
[Thu Feb 26 22:44:13.125985 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:16350] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/system.php"] [unique_id "aaBcPW2sMNmj-yekUk1bbwAAAgY"]
[Thu Feb 26 22:44:13.586721 2026] [:error] [pid 3883:tid 3900] [client 4.204.195.211:16272] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBcPeA33x90V6yYHaj6_AAAAU4"]
[Thu Feb 26 22:44:14.037000 2026] [:error] [pid 54991:tid 55031] [client 4.204.195.211:16354] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBcPt4Zx-mJ8gbRB2gGawAAAEs"]
[Thu Feb 26 22:44:14.519202 2026] [:error] [pid 44444:tid 44451] [client 4.204.195.211:16355] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBcPm2sMNmj-yekUk1bdAAAAgE"]
[Thu Feb 26 22:44:14.970062 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16270] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaBcPm2sMNmj-yekUk1bdwAAAgU"]
[Thu Feb 26 22:44:15.438816 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:16381] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBcP22sMNmj-yekUk1bgQAAAhA"]
[Thu Feb 26 22:44:15.900806 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16383] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBcP22sMNmj-yekUk1biAAAAgU"]
[Thu Feb 26 22:44:16.317210 2026] [:error] [pid 54991:tid 55032] [client 4.204.195.211:16294] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBcQN4Zx-mJ8gbRB2gGbQAAAEw"]
[Thu Feb 26 22:44:16.778066 2026] [:error] [pid 25311:tid 25333] [client 4.204.195.211:16377] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBcQNfdM__yZAgJFSvv0wAAAZM"]
[Thu Feb 26 22:44:17.221752 2026] [:error] [pid 20419:tid 20439] [client 4.204.195.211:16345] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBcQe3DVDvMfTYYUBVtowAAAdE"]
[Thu Feb 26 22:44:17.658089 2026] [:error] [pid 54991:tid 55027] [client 4.204.195.211:16261] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBcQd4Zx-mJ8gbRB2gGcAAAAEc"]
[Thu Feb 26 22:44:18.105254 2026] [:error] [pid 54990:tid 55007] [client 4.204.195.211:16372] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBcQntr2qmt_mBhH2wx_gAAAA4"]
[Thu Feb 26 22:44:18.554761 2026] [:error] [pid 20419:tid 20427] [client 4.204.195.211:16308] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBcQu3DVDvMfTYYUBVtqgAAAcU"]
[Thu Feb 26 22:44:19.005847 2026] [:error] [pid 20419:tid 20433] [client 4.204.195.211:16343] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBcQ-3DVDvMfTYYUBVtrAAAAcs"]
[Thu Feb 26 22:44:19.464835 2026] [:error] [pid 20419:tid 20422] [client 4.204.195.211:16295] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBcQ-3DVDvMfTYYUBVtrgAAAcA"]
[Thu Feb 26 22:44:19.917186 2026] [:error] [pid 54991:tid 55029] [client 4.204.195.211:16319] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBcQ94Zx-mJ8gbRB2gGcgAAAEk"]
[Thu Feb 26 22:44:20.345823 2026] [:error] [pid 55051:tid 55058] [client 4.204.195.211:16275] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBcRAmK1w2kZvh5eLHYZQAAAIQ"]
[Thu Feb 26 22:44:20.795296 2026] [:error] [pid 44444:tid 44451] [client 4.204.195.211:16257] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBcRG2sMNmj-yekUk1bkgAAAgE"]
[Thu Feb 26 22:44:21.270859 2026] [:error] [pid 54991:tid 55044] [client 4.204.195.211:16311] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBcRd4Zx-mJ8gbRB2gGdwAAAFg"]
[Thu Feb 26 22:44:21.729778 2026] [:error] [pid 54990:tid 54999] [client 4.204.195.211:16262] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBcRXtr2qmt_mBhH2wyAAAAAAY"]
[Thu Feb 26 22:44:22.182651 2026] [:error] [pid 54990:tid 55009] [client 4.204.195.211:16314] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBcRntr2qmt_mBhH2wyAQAAABA"]
[Thu Feb 26 22:44:22.597764 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:16342] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaBcRm2sMNmj-yekUk1bkwAAAhM"]
[Thu Feb 26 22:44:23.013660 2026] [:error] [pid 54990:tid 55014] [client 4.204.195.211:16128] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaBcR3tr2qmt_mBhH2wyAgAAABU"]
[Thu Feb 26 22:44:23.429609 2026] [:error] [pid 55618:tid 55624] [client 4.204.195.211:16280] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaBcRx61Vrh12f_8oWQYTQAAAQM"]
[Thu Feb 26 22:44:23.848382 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16192] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaBcR22sMNmj-yekUk1blAAAAgs"]
[Thu Feb 26 22:44:24.267566 2026] [:error] [pid 3883:tid 3890] [client 4.204.195.211:16195] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaBcSOA33x90V6yYHaj6_wAAAUQ"]
[Thu Feb 26 22:44:24.679673 2026] [:error] [pid 54991:tid 55033] [client 4.204.195.211:16235] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaBcSN4Zx-mJ8gbRB2gGeQAAAE0"]
[Thu Feb 26 22:44:25.096240 2026] [:error] [pid 54991:tid 55039] [client 4.204.195.211:16336] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaBcSd4Zx-mJ8gbRB2gGfQAAAFM"]
[Thu Feb 26 22:44:25.506660 2026] [:error] [pid 3883:tid 3904] [client 4.204.195.211:16359] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaBcSeA33x90V6yYHaj7AAAAAVI"]
[Thu Feb 26 22:44:25.925560 2026] [:error] [pid 54990:tid 54994] [client 4.204.195.211:16310] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaBcSXtr2qmt_mBhH2wyBQAAAAE"]
[Thu Feb 26 22:44:26.351163 2026] [:error] [pid 44444:tid 44460] [client 4.204.195.211:16339] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaBcSm2sMNmj-yekUk1blgAAAgo"]
[Thu Feb 26 22:44:26.769749 2026] [:error] [pid 55122:tid 55129] [client 4.204.195.211:16338] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaBcSoLiR0OfjFxvcN85ZgAAAMU"]
[Thu Feb 26 22:44:27.179233 2026] [:error] [pid 55618:tid 55642] [client 4.204.195.211:16284] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaBcSx61Vrh12f_8oWQYUwAAARU"]
[Thu Feb 26 22:44:27.596745 2026] [:error] [pid 55618:tid 55634] [client 4.204.195.211:16274] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaBcSx61Vrh12f_8oWQYVAAAAQ0"]
[Thu Feb 26 22:44:28.026276 2026] [:error] [pid 44444:tid 44471] [client 4.204.195.211:16379] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaBcTG2sMNmj-yekUk1bmAAAAhU"]
[Thu Feb 26 22:44:28.471697 2026] [:error] [pid 55122:tid 55126] [client 4.204.195.211:16265] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaBcTILiR0OfjFxvcN85aAAAAMI"]
[Thu Feb 26 22:44:28.894236 2026] [:error] [pid 44444:tid 44474] [client 4.204.195.211:16379] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaBcTG2sMNmj-yekUk1bmgAAAhg"]
[Thu Feb 26 22:44:29.369746 2026] [:error] [pid 44444:tid 44468] [client 4.204.195.211:16281] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBcTW2sMNmj-yekUk1bmwAAAhI"]
[Thu Feb 26 22:44:29.845756 2026] [:error] [pid 55618:tid 55641] [client 4.204.195.211:16349] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBcTR61Vrh12f_8oWQYVwAAARQ"]
[Thu Feb 26 22:44:30.342138 2026] [:error] [pid 55618:tid 55636] [client 4.204.195.211:16329] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBcTh61Vrh12f_8oWQYWAAAAQ8"]
[Thu Feb 26 22:44:30.849679 2026] [:error] [pid 25311:tid 25338] [client 4.204.195.211:16357] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBcTtfdM__yZAgJFSvv2wAAAZg"]
[Thu Feb 26 22:44:31.319089 2026] [:error] [pid 20419:tid 20433] [client 4.204.195.211:16290] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBcT-3DVDvMfTYYUBVttQAAAcs"]
[Thu Feb 26 22:44:31.778793 2026] [:error] [pid 20419:tid 20436] [client 4.204.195.211:16256] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBcT-3DVDvMfTYYUBVttwAAAc4"]
[Thu Feb 26 22:44:32.277312 2026] [:error] [pid 54991:tid 55036] [client 4.204.195.211:16358] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBcUN4Zx-mJ8gbRB2gGgAAAAFA"]
[Thu Feb 26 22:44:32.709744 2026] [:error] [pid 20419:tid 20423] [client 4.204.195.211:16334] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBcUO3DVDvMfTYYUBVtuwAAAcE"]
[Thu Feb 26 22:44:33.175445 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:16312] [client 4.204.195.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaBcUe3DVDvMfTYYUBVtvwAAAcQ"]
[Thu Feb 26 22:44:33.606086 2026] [:error] [pid 54991:tid 55034] [client 4.204.195.211:16360] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaBcUd4Zx-mJ8gbRB2gGhgAAAE4"]
[Thu Feb 26 22:44:34.063387 2026] [:error] [pid 25311:tid 25332] [client 4.204.195.211:16217] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaBcUtfdM__yZAgJFSvv3gAAAZI"]
[Thu Feb 26 22:44:34.510113 2026] [:error] [pid 55122:tid 55144] [client 4.204.195.211:16132] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaBcUoLiR0OfjFxvcN85agAAANQ"]
[Thu Feb 26 22:44:34.961283 2026] [:error] [pid 3883:tid 3887] [client 4.204.195.211:16299] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-monamon.php"] [unique_id "aaBcUuA33x90V6yYHaj7BgAAAUE"]
[Thu Feb 26 22:44:35.413789 2026] [:error] [pid 20419:tid 20439] [client 4.204.195.211:16367] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-monamon.php"] [unique_id "aaBcU-3DVDvMfTYYUBVtwwAAAdE"]
[Thu Feb 26 22:44:35.850799 2026] [:error] [pid 54990:tid 54996] [client 4.204.195.211:16293] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-monamon.php"] [unique_id "aaBcU3tr2qmt_mBhH2wyCAAAAAM"]
[Thu Feb 26 22:44:36.295029 2026] [:error] [pid 25311:tid 25323] [client 4.204.195.211:16344] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-monamon.php"] [unique_id "aaBcVNfdM__yZAgJFSvv3wAAAYk"]
[Thu Feb 26 22:44:36.781276 2026] [:error] [pid 55051:tid 55073] [client 4.204.195.211:16238] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaBcVAmK1w2kZvh5eLHYagAAAJM"]
[Thu Feb 26 22:44:37.214542 2026] [:error] [pid 55618:tid 55624] [client 4.204.195.211:16370] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaBcVR61Vrh12f_8oWQYXgAAAQM"]
[Thu Feb 26 22:44:37.650497 2026] [:error] [pid 55618:tid 55645] [client 4.204.195.211:16223] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaBcVR61Vrh12f_8oWQYYgAAARg"]
[Thu Feb 26 22:44:38.083539 2026] [:error] [pid 3883:tid 3888] [client 4.204.195.211:16322] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaBcVuA33x90V6yYHaj7DQAAAUI"]
[Thu Feb 26 22:44:38.542114 2026] [:error] [pid 3883:tid 3893] [client 4.204.195.211:16286] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBcVuA33x90V6yYHaj7DgAAAUc"]
[Thu Feb 26 22:44:38.963270 2026] [:error] [pid 55051:tid 55072] [client 4.204.195.211:16209] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBcVgmK1w2kZvh5eLHYbQAAAJI"]
[Thu Feb 26 22:44:39.388901 2026] [:error] [pid 55051:tid 55078] [client 4.204.195.211:16298] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBcVwmK1w2kZvh5eLHYbgAAAJg"]
[Thu Feb 26 22:44:39.812972 2026] [:error] [pid 55051:tid 55066] [client 4.204.195.211:16267] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBcVwmK1w2kZvh5eLHYbwAAAIw"]
[Thu Feb 26 22:44:40.239697 2026] [:error] [pid 55051:tid 55076] [client 4.204.195.211:16282] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBcWAmK1w2kZvh5eLHYcwAAAJY"]
[Thu Feb 26 22:44:40.668533 2026] [:error] [pid 54991:tid 55030] [client 4.204.195.211:16196] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBcWN4Zx-mJ8gbRB2gGjQAAAEo"]
[Thu Feb 26 22:44:41.104248 2026] [:error] [pid 54990:tid 55006] [client 4.204.195.211:16298] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBcWXtr2qmt_mBhH2wyDgAAAA0"]
[Thu Feb 26 22:44:41.522885 2026] [:error] [pid 55122:tid 55147] [client 4.204.195.211:16291] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBcWYLiR0OfjFxvcN85bQAAANc"]
[Thu Feb 26 22:44:41.944249 2026] [:error] [pid 3883:tid 3889] [client 4.204.195.211:16268] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaBcWeA33x90V6yYHaj7EgAAAUM"]
[Thu Feb 26 22:44:42.383788 2026] [:error] [pid 54991:tid 55028] [client 4.204.195.211:16317] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaBcWt4Zx-mJ8gbRB2gGjgAAAEg"]
[Thu Feb 26 22:44:42.799964 2026] [:error] [pid 54991:tid 55021] [client 4.204.195.211:16347] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaBcWt4Zx-mJ8gbRB2gGjwAAAEE"]
[Thu Feb 26 22:44:43.221571 2026] [:error] [pid 44444:tid 44464] [client 4.204.195.211:16216] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaBcW22sMNmj-yekUk1bpgAAAg4"]
[Thu Feb 26 22:44:43.641104 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:16162] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBcW22sMNmj-yekUk1bpwAAAhE"]
[Thu Feb 26 22:44:44.070161 2026] [:error] [pid 54991:tid 55029] [client 4.204.195.211:16279] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBcXN4Zx-mJ8gbRB2gGkAAAAEk"]
[Thu Feb 26 22:44:44.491984 2026] [:error] [pid 3883:tid 3901] [client 4.204.195.211:16201] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBcXOA33x90V6yYHaj7FQAAAU8"]
[Thu Feb 26 22:44:44.925557 2026] [:error] [pid 3883:tid 3898] [client 4.204.195.211:16304] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBcXOA33x90V6yYHaj7FwAAAUw"]
[Thu Feb 26 22:44:45.352003 2026] [:error] [pid 54991:tid 55042] [client 4.204.195.211:16321] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aaBcXd4Zx-mJ8gbRB2gGkQAAAFY"]
[Thu Feb 26 22:44:45.763651 2026] [:error] [pid 54991:tid 55023] [client 4.204.195.211:16356] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aaBcXd4Zx-mJ8gbRB2gGkwAAAEM"]
[Thu Feb 26 22:44:46.220913 2026] [:error] [pid 55122:tid 55136] [client 4.204.195.211:16361] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aaBcXoLiR0OfjFxvcN85bwAAAMw"]
[Thu Feb 26 22:44:46.664102 2026] [:error] [pid 44444:tid 44474] [client 4.204.195.211:16198] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/log.php"] [unique_id "aaBcXm2sMNmj-yekUk1bqgAAAhg"]
[Thu Feb 26 22:44:47.112274 2026] [:error] [pid 54991:tid 55040] [client 4.204.195.211:16206] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aaBcX94Zx-mJ8gbRB2gGlAAAAFQ"]
[Thu Feb 26 22:44:47.559854 2026] [:error] [pid 54991:tid 55037] [client 4.204.195.211:16276] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aaBcX94Zx-mJ8gbRB2gGlQAAAFE"]
[Thu Feb 26 22:44:48.009221 2026] [:error] [pid 54991:tid 55024] [client 4.204.195.211:16246] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aaBcYN4Zx-mJ8gbRB2gGlwAAAEQ"]
[Thu Feb 26 22:44:48.466798 2026] [:error] [pid 20419:tid 20422] [client 4.204.195.211:16292] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zsec.php"] [unique_id "aaBcYO3DVDvMfTYYUBVtyQAAAcA"]
[Thu Feb 26 22:44:48.920066 2026] [:error] [pid 55051:tid 55064] [client 4.204.195.211:16254] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBcYAmK1w2kZvh5eLHYeAAAAIo"]
[Thu Feb 26 22:44:49.353114 2026] [:error] [pid 20419:tid 20423] [client 4.204.195.211:16341] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBcYe3DVDvMfTYYUBVtygAAAcE"]
[Thu Feb 26 22:44:49.810675 2026] [:error] [pid 55051:tid 55061] [client 4.204.195.211:16296] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBcYQmK1w2kZvh5eLHYewAAAIc"]
[Thu Feb 26 22:44:50.268943 2026] [:error] [pid 55051:tid 55073] [client 4.204.195.211:16307] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBcYgmK1w2kZvh5eLHYfQAAAJM"]
[Thu Feb 26 22:44:50.695083 2026] [:error] [pid 54991:tid 55039] [client 4.204.195.211:16287] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/cong.php"] [unique_id "aaBcYt4Zx-mJ8gbRB2gGmgAAAFM"]
[Thu Feb 26 22:44:51.159355 2026] [:error] [pid 54991:tid 55031] [client 4.204.195.211:16212] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/cong.php"] [unique_id "aaBcY94Zx-mJ8gbRB2gGmwAAAEs"]
[Thu Feb 26 22:44:51.589316 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:16220] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/cong.php"] [unique_id "aaBcY22sMNmj-yekUk1bsgAAAhM"]
[Thu Feb 26 22:44:52.016149 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:16227] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/cong.php"] [unique_id "aaBcZG2sMNmj-yekUk1btAAAAgc"]
[Thu Feb 26 22:44:52.455419 2026] [:error] [pid 55618:tid 55633] [client 4.204.195.211:16200] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaBcZB61Vrh12f_8oWQYkAAAAQw"]
[Thu Feb 26 22:44:52.938281 2026] [:error] [pid 20419:tid 20442] [client 4.204.195.211:16218] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaBcZO3DVDvMfTYYUBVtzwAAAdQ"]
[Thu Feb 26 22:44:53.389912 2026] [:error] [pid 44444:tid 44474] [client 4.204.195.211:16263] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaBcZW2sMNmj-yekUk1buwAAAhg"]
[Thu Feb 26 22:44:53.803457 2026] [:error] [pid 20419:tid 20439] [client 4.204.195.211:16337] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaBcZe3DVDvMfTYYUBVt0QAAAdE"]
[Thu Feb 26 22:44:54.218142 2026] [:error] [pid 54990:tid 55000] [client 4.204.195.211:16283] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.wp/wso.php"] [unique_id "aaBcZntr2qmt_mBhH2wyFAAAAAc"]
[Thu Feb 26 22:44:54.631189 2026] [:error] [pid 55051:tid 55069] [client 4.204.195.211:16141] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.wp/wso.php"] [unique_id "aaBcZgmK1w2kZvh5eLHYfwAAAI8"]
[Thu Feb 26 22:44:55.074360 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:16315] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.wp/wso.php"] [unique_id "aaBcZ22sMNmj-yekUk1byAAAAgc"]
[Thu Feb 26 22:44:55.525888 2026] [:error] [pid 55051:tid 55057] [client 4.204.195.211:16306] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.wp/wso.php"] [unique_id "aaBcZwmK1w2kZvh5eLHYgQAAAIM"]
[Thu Feb 26 22:44:55.945675 2026] [:error] [pid 55051:tid 55068] [client 4.204.195.211:16199] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaBcZwmK1w2kZvh5eLHYgwAAAI4"]
[Thu Feb 26 22:44:56.370050 2026] [:error] [pid 20419:tid 20444] [client 4.204.195.211:16373] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaBcaO3DVDvMfTYYUBVt3AAAAdY"]
[Thu Feb 26 22:44:56.786591 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:16374] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaBcaAmK1w2kZvh5eLHYhwAAAJU"]
[Thu Feb 26 22:44:57.201571 2026] [:error] [pid 55618:tid 55622] [client 4.204.195.211:16230] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaBcaR61Vrh12f_8oWQYlQAAAQE"]
[Thu Feb 26 22:44:57.645122 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16158] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/"] [unique_id "aaBcaW2sMNmj-yekUk1bzQAAAgw"]
[Thu Feb 26 22:44:58.106396 2026] [:error] [pid 3883:tid 3909] [client 4.204.195.211:16232] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/"] [unique_id "aaBcauA33x90V6yYHaj7IAAAAVc"]
[Thu Feb 26 22:44:58.542671 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16247] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/"] [unique_id "aaBcagmK1w2kZvh5eLHYigAAAIY"]
[Thu Feb 26 22:44:58.972762 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:16326] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/"] [unique_id "aaBcam2sMNmj-yekUk1b0gAAAgg"]
[Thu Feb 26 22:44:59.412558 2026] [:error] [pid 54991:tid 55037] [client 4.204.195.211:16352] [client 4.204.195.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaBca94Zx-mJ8gbRB2gGpAAAAFE"]
[Thu Feb 26 22:44:59.838369 2026] [:error] [pid 44444:tid 44471] [client 4.204.195.211:16277] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d2.php"] [unique_id "aaBca22sMNmj-yekUk1b1QAAAhU"]
[Thu Feb 26 22:45:00.320013 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16301] File does not exist: /usr/local/apache/htdocs/suspended-page/d2.php
[Thu Feb 26 22:45:01.740686 2026] [:error] [pid 44444:tid 44459] [client 4.204.195.211:16301] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Feb 26 22:45:01.983132 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16301] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Thu Feb 26 22:45:02.971778 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:16301] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aaBcbm2sMNmj-yekUk1b6QAAAhM"]
[Thu Feb 26 22:45:03.497201 2026] [:error] [pid 44444:tid 44464] [client 4.204.195.211:16176] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aaBcb22sMNmj-yekUk1b7gAAAg4"]
[Thu Feb 26 22:45:04.165645 2026] [:error] [pid 25311:tid 25330] [client 4.204.195.211:16163] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aaBccNfdM__yZAgJFSvv8QAAAZA"]
[Thu Feb 26 22:45:04.685552 2026] [:error] [pid 54991:tid 55039] [client 4.204.195.211:16309] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/start.php"] [unique_id "aaBccN4Zx-mJ8gbRB2gGpwAAAFM"]
[Thu Feb 26 22:45:05.202848 2026] [:error] [pid 54990:tid 54998] [client 4.204.195.211:16369] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/xaw.php"] [unique_id "aaBccXtr2qmt_mBhH2wyHQAAAAU"]
[Thu Feb 26 22:45:05.757277 2026] [:error] [pid 55122:tid 55133] [client 4.204.195.211:16305] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/xaw.php"] [unique_id "aaBccYLiR0OfjFxvcN85cgAAAMk"]
[Thu Feb 26 22:45:06.254288 2026] [:error] [pid 55051:tid 55062] [client 4.204.195.211:16129] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/xaw.php"] [unique_id "aaBccgmK1w2kZvh5eLHYqgAAAIg"]
[Thu Feb 26 22:45:06.740536 2026] [:error] [pid 44444:tid 44470] [client 4.204.195.211:16348] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/xaw.php"] [unique_id "aaBccm2sMNmj-yekUk1b_QAAAhQ"]
[Thu Feb 26 22:45:07.222212 2026] [:error] [pid 44444:tid 44464] [client 4.204.195.211:16194] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBcc22sMNmj-yekUk1cAAAAAg4"]
[Thu Feb 26 22:45:07.693159 2026] [:error] [pid 20419:tid 20440] [client 4.204.195.211:16244] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBcc-3DVDvMfTYYUBVt4AAAAdI"]
[Thu Feb 26 22:45:08.120994 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16188] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBcdG2sMNmj-yekUk1cBgAAAgs"]
[Thu Feb 26 22:45:08.577355 2026] [:error] [pid 54991:tid 55042] [client 4.204.195.211:16210] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBcdN4Zx-mJ8gbRB2gGswAAAFY"]
[Thu Feb 26 22:45:09.057299 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:16297] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wc49.php"] [unique_id "aaBcdW2sMNmj-yekUk1cCQAAAg0"]
[Thu Feb 26 22:45:09.529104 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16251] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wc49.php"] [unique_id "aaBcdW2sMNmj-yekUk1cCwAAAgU"]
[Thu Feb 26 22:45:09.972182 2026] [:error] [pid 44444:tid 44470] [client 4.204.195.211:16136] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wc49.php"] [unique_id "aaBcdW2sMNmj-yekUk1cDQAAAhQ"]
[Thu Feb 26 22:45:10.398871 2026] [:error] [pid 20419:tid 20435] [client 4.204.195.211:16071] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wc49.php"] [unique_id "aaBcdu3DVDvMfTYYUBVt4QAAAc0"]
[Thu Feb 26 22:45:10.893997 2026] [:error] [pid 55051:tid 55064] [client 4.204.195.211:16175] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/TL.php"] [unique_id "aaBcdgmK1w2kZvh5eLHYrgAAAIo"]
[Thu Feb 26 22:45:11.395090 2026] [:error] [pid 54990:tid 55007] [client 4.204.195.211:16221] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/TL.php"] [unique_id "aaBcd3tr2qmt_mBhH2wyHgAAAA4"]
[Thu Feb 26 22:45:11.866361 2026] [:error] [pid 55618:tid 55636] [client 4.204.195.211:16207] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/TL.php"] [unique_id "aaBcdx61Vrh12f_8oWQYmgAAAQ8"]
[Thu Feb 26 22:45:12.373359 2026] [:error] [pid 55618:tid 55625] [client 4.204.195.211:16202] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/TL.php"] [unique_id "aaBceB61Vrh12f_8oWQYnAAAAQQ"]
[Thu Feb 26 22:45:12.853878 2026] [:error] [pid 55618:tid 55639] [client 4.204.195.211:16258] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaBceB61Vrh12f_8oWQYnQAAARI"]
[Thu Feb 26 22:45:13.305451 2026] [:error] [pid 55122:tid 55141] [client 4.204.195.211:16197] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaBceYLiR0OfjFxvcN85dgAAANE"]
[Thu Feb 26 22:45:13.728777 2026] [:error] [pid 55051:tid 55066] [client 4.204.195.211:16224] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaBceQmK1w2kZvh5eLHYsQAAAIw"]
[Thu Feb 26 22:45:14.164729 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:16164] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaBcem2sMNmj-yekUk1cEgAAAgI"]
[Thu Feb 26 22:45:14.619956 2026] [:error] [pid 20419:tid 20444] [client 4.204.195.211:16152] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fck.php"] [unique_id "aaBceu3DVDvMfTYYUBVt6QAAAdY"]
[Thu Feb 26 22:45:15.112527 2026] [:error] [pid 20419:tid 20424] [client 4.204.195.211:16208] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fck.php"] [unique_id "aaBce-3DVDvMfTYYUBVt7AAAAcI"]
[Thu Feb 26 22:45:15.552785 2026] [:error] [pid 54991:tid 55032] [client 4.204.195.211:16252] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fck.php"] [unique_id "aaBce94Zx-mJ8gbRB2gGvAAAAEw"]
[Thu Feb 26 22:45:16.049708 2026] [:error] [pid 54991:tid 55030] [client 4.204.195.211:16149] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fck.php"] [unique_id "aaBcfN4Zx-mJ8gbRB2gGvwAAAEo"]
[Thu Feb 26 22:45:16.554451 2026] [:error] [pid 54990:tid 55009] [client 4.204.195.211:16142] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaBcfHtr2qmt_mBhH2wyIAAAABA"]
[Thu Feb 26 22:45:17.061763 2026] [:error] [pid 3883:tid 3894] [client 4.204.195.211:16229] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaBcfeA33x90V6yYHaj7LQAAAUg"]
[Thu Feb 26 22:45:17.537455 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16228] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaBcfW2sMNmj-yekUk1cFgAAAgs"]
[Thu Feb 26 22:45:18.013267 2026] [:error] [pid 54990:tid 55014] [client 4.204.195.211:16159] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaBcfntr2qmt_mBhH2wyIwAAABU"]
[Thu Feb 26 22:45:18.498417 2026] [:error] [pid 25311:tid 25321] [client 4.204.195.211:16346] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-michan.php"] [unique_id "aaBcftfdM__yZAgJFSvv8wAAAYc"]
[Thu Feb 26 22:45:18.967641 2026] [:error] [pid 20419:tid 20429] [client 4.204.195.211:16242] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-michan.php"] [unique_id "aaBcfu3DVDvMfTYYUBVt8gAAAcc"]
[Thu Feb 26 22:45:19.441252 2026] [:error] [pid 20419:tid 20437] [client 4.204.195.211:16169] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-michan.php"] [unique_id "aaBcf-3DVDvMfTYYUBVt9QAAAc8"]
[Thu Feb 26 22:45:19.890137 2026] [:error] [pid 25311:tid 25315] [client 4.204.195.211:16137] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-michan.php"] [unique_id "aaBcf9fdM__yZAgJFSvv9AAAAYE"]
[Thu Feb 26 22:45:20.317980 2026] [:error] [pid 25311:tid 25317] [client 4.204.195.211:16313] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw2.php"] [unique_id "aaBcgNfdM__yZAgJFSvv9gAAAYM"]
[Thu Feb 26 22:45:20.794083 2026] [:error] [pid 25311:tid 25329] [client 4.204.195.211:16368] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw2.php"] [unique_id "aaBcgNfdM__yZAgJFSvv-wAAAY8"]
[Thu Feb 26 22:45:21.259908 2026] [:error] [pid 25311:tid 25335] [client 4.204.195.211:16289] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw2.php"] [unique_id "aaBcgdfdM__yZAgJFSvwAAAAAZU"]
[Thu Feb 26 22:45:21.731943 2026] [:error] [pid 55618:tid 55644] [client 4.204.195.211:16130] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw2.php"] [unique_id "aaBcgR61Vrh12f_8oWQYqgAAARc"]
[Thu Feb 26 22:45:22.193949 2026] [:error] [pid 55618:tid 55641] [client 4.204.195.211:16087] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaBcgh61Vrh12f_8oWQYrQAAARQ"]
[Thu Feb 26 22:45:22.672960 2026] [:error] [pid 54991:tid 55031] [client 4.204.195.211:16086] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaBcgt4Zx-mJ8gbRB2gG0gAAAEs"]
[Thu Feb 26 22:45:23.113692 2026] [:error] [pid 55618:tid 55625] [client 4.204.195.211:16245] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaBcgx61Vrh12f_8oWQYsAAAAQQ"]
[Thu Feb 26 22:45:23.561929 2026] [:error] [pid 25311:tid 25331] [client 4.204.195.211:16241] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaBcg9fdM__yZAgJFSvwBwAAAZE"]
[Thu Feb 26 22:45:24.069471 2026] [:error] [pid 55618:tid 55633] [client 4.204.195.211:16167] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaBchB61Vrh12f_8oWQYtAAAAQw"]
[Thu Feb 26 22:45:24.513286 2026] [:error] [pid 44444:tid 44468] [client 4.204.195.211:16253] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaBchG2sMNmj-yekUk1cHwAAAhI"]
[Thu Feb 26 22:45:24.960845 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16205] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaBchG2sMNmj-yekUk1cIgAAAgw"]
[Thu Feb 26 22:45:25.373085 2026] [:error] [pid 55051:tid 55073] [client 4.204.195.211:16153] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaBchQmK1w2kZvh5eLHYuAAAAJM"]
[Thu Feb 26 22:45:25.787717 2026] [:error] [pid 44444:tid 44450] [client 4.204.195.211:16185] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaBchW2sMNmj-yekUk1cKgAAAgA"]
[Thu Feb 26 22:45:26.236591 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:16231] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaBchm2sMNmj-yekUk1cLAAAAgc"]
[Thu Feb 26 22:45:26.674088 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:16146] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaBchm2sMNmj-yekUk1cLwAAAhA"]
[Thu Feb 26 22:45:27.084250 2026] [:error] [pid 55618:tid 55624] [client 4.204.195.211:16171] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaBchx61Vrh12f_8oWQYtwAAAQM"]
[Thu Feb 26 22:45:27.523425 2026] [:error] [pid 55051:tid 55064] [client 4.204.195.211:16240] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaBchwmK1w2kZvh5eLHYvQAAAIo"]
[Thu Feb 26 22:45:27.952834 2026] [:error] [pid 54991:tid 55025] [client 4.204.195.211:16288] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaBch94Zx-mJ8gbRB2gG1gAAAEU"]
[Thu Feb 26 22:45:28.360654 2026] [:error] [pid 54991:tid 55028] [client 4.204.195.211:16146] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaBciN4Zx-mJ8gbRB2gG2AAAAEg"]
[Thu Feb 26 22:45:28.818552 2026] [:error] [pid 54991:tid 55039] [client 4.204.195.211:16182] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaBciN4Zx-mJ8gbRB2gG2QAAAFM"]
[Thu Feb 26 22:45:29.264327 2026] [:error] [pid 54991:tid 55041] [client 4.204.195.211:16236] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaBcid4Zx-mJ8gbRB2gG3QAAAFU"]
[Thu Feb 26 22:45:29.688953 2026] [:error] [pid 3883:tid 3906] [client 4.204.195.211:16211] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaBcieA33x90V6yYHaj7OQAAAVQ"]
[Thu Feb 26 22:45:30.105693 2026] [:error] [pid 55618:tid 55637] [client 4.204.195.211:16335] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaBcih61Vrh12f_8oWQYvgAAARA"]
[Thu Feb 26 22:45:30.539416 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16243] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaBcit4Zx-mJ8gbRB2gG5QAAAFc"]
[Thu Feb 26 22:45:31.008144 2026] [:error] [pid 55618:tid 55625] [client 4.204.195.211:16187] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaBcix61Vrh12f_8oWQYwQAAAQQ"]
[Thu Feb 26 22:45:31.430168 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16239] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaBci22sMNmj-yekUk1cNAAAAgs"]
[Thu Feb 26 22:45:31.879253 2026] [:error] [pid 55051:tid 55069] [client 4.204.195.211:16378] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaBciwmK1w2kZvh5eLHYwQAAAI8"]
[Thu Feb 26 22:45:32.331039 2026] [:error] [pid 54991:tid 55021] [client 4.204.195.211:16186] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaBcjN4Zx-mJ8gbRB2gG7QAAAEE"]
[Thu Feb 26 22:45:32.782116 2026] [:error] [pid 20419:tid 20432] [client 4.204.195.211:16140] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaBcjO3DVDvMfTYYUBVuAQAAAco"]
[Thu Feb 26 22:45:33.250846 2026] [:error] [pid 20419:tid 20439] [client 4.204.195.211:16300] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaBcje3DVDvMfTYYUBVuAwAAAdE"]
[Thu Feb 26 22:45:33.689311 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16214] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaBcjd4Zx-mJ8gbRB2gG9gAAAFc"]
[Thu Feb 26 22:45:34.149555 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:16166] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaBcjm2sMNmj-yekUk1cNwAAAg0"]
[Thu Feb 26 22:45:34.572423 2026] [:error] [pid 55051:tid 55067] [client 4.204.195.211:16110] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaBcjgmK1w2kZvh5eLHYzAAAAI0"]
[Thu Feb 26 22:45:34.995861 2026] [:error] [pid 20419:tid 20436] [client 4.204.195.211:16172] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaBcju3DVDvMfTYYUBVuCgAAAc4"]
[Thu Feb 26 22:45:35.430224 2026] [:error] [pid 20419:tid 20444] [client 4.204.195.211:16105] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaBcj-3DVDvMfTYYUBVuDgAAAdY"]
[Thu Feb 26 22:45:35.886572 2026] [:error] [pid 54990:tid 55001] [client 4.204.195.211:16093] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaBcj3tr2qmt_mBhH2wyJAAAAAg"]
[Thu Feb 26 22:45:36.328041 2026] [:error] [pid 25311:tid 25318] [client 4.204.195.211:16203] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaBckNfdM__yZAgJFSvwFQAAAYQ"]
[Thu Feb 26 22:45:36.751857 2026] [:error] [pid 25311:tid 25336] [client 4.204.195.211:16147] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaBckNfdM__yZAgJFSvwFwAAAZY"]
[Thu Feb 26 22:45:37.210085 2026] [:error] [pid 55122:tid 55128] [client 4.204.195.211:16085] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaBckYLiR0OfjFxvcN85fAAAAMQ"]
[Thu Feb 26 22:45:37.637896 2026] [:error] [pid 3883:tid 3903] [client 4.204.195.211:16100] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaBckeA33x90V6yYHaj7PwAAAVE"]
[Thu Feb 26 22:45:38.047146 2026] [:error] [pid 55122:tid 55132] [client 4.204.195.211:16234] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BDKR28WP.php"] [unique_id "aaBckoLiR0OfjFxvcN85fgAAAMg"]
[Thu Feb 26 22:45:38.500363 2026] [:error] [pid 55618:tid 55629] [client 4.204.195.211:16134] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BDKR28WP.php"] [unique_id "aaBckh61Vrh12f_8oWQY0AAAAQg"]
[Thu Feb 26 22:45:38.921506 2026] [:error] [pid 54991:tid 55042] [client 4.204.195.211:16148] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BDKR28WP.php"] [unique_id "aaBckt4Zx-mJ8gbRB2gHBwAAAFY"]
[Thu Feb 26 22:45:39.337938 2026] [:error] [pid 44444:tid 44451] [client 4.204.195.211:16139] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/BDKR28WP.php"] [unique_id "aaBck22sMNmj-yekUk1cPQAAAgE"]
[Thu Feb 26 22:45:39.775985 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:16090] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zu.php"] [unique_id "aaBck22sMNmj-yekUk1cQAAAAhM"]
[Thu Feb 26 22:45:40.199634 2026] [:error] [pid 55122:tid 55142] [client 4.204.195.211:16213] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zu.php"] [unique_id "aaBclILiR0OfjFxvcN85fwAAANI"]
[Thu Feb 26 22:45:40.622341 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16190] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zu.php"] [unique_id "aaBclG2sMNmj-yekUk1cRwAAAgs"]
[Thu Feb 26 22:45:41.040008 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:16237] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zu.php"] [unique_id "aaBclW2sMNmj-yekUk1cTQAAAhE"]
[Thu Feb 26 22:45:41.474040 2026] [:error] [pid 55618:tid 55622] [client 4.204.195.211:16285] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaBclR61Vrh12f_8oWQY0gAAAQE"]
[Thu Feb 26 22:45:41.902110 2026] [:error] [pid 3883:tid 3891] [client 4.204.195.211:16012] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaBcleA33x90V6yYHaj7RwAAAUU"]
[Thu Feb 26 22:45:42.327796 2026] [:error] [pid 54990:tid 54994] [client 4.204.195.211:16067] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaBclntr2qmt_mBhH2wyJgAAAAE"]
[Thu Feb 26 22:45:42.750173 2026] [:error] [pid 55618:tid 55641] [client 4.204.195.211:16070] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaBclh61Vrh12f_8oWQY1QAAARQ"]
[Thu Feb 26 22:45:43.173204 2026] [:error] [pid 55618:tid 55636] [client 4.204.195.211:16077] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/opts.php"] [unique_id "aaBclx61Vrh12f_8oWQY1wAAAQ8"]
[Thu Feb 26 22:45:43.585526 2026] [:error] [pid 3883:tid 3910] [client 4.204.195.211:16069] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/opts.php"] [unique_id "aaBcl-A33x90V6yYHaj7TgAAAVg"]
[Thu Feb 26 22:45:44.022224 2026] [:error] [pid 44444:tid 44471] [client 4.204.195.211:16255] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/opts.php"] [unique_id "aaBcmG2sMNmj-yekUk1cXwAAAhU"]
[Thu Feb 26 22:45:44.444173 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:16226] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/opts.php"] [unique_id "aaBcmAmK1w2kZvh5eLHY1AAAAJU"]
[Thu Feb 26 22:45:44.858640 2026] [:error] [pid 44444:tid 44450] [client 4.204.195.211:16249] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aaBcmG2sMNmj-yekUk1cZQAAAgA"]
[Thu Feb 26 22:45:45.271684 2026] [:error] [pid 55051:tid 55062] [client 4.204.195.211:16009] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aaBcmQmK1w2kZvh5eLHY2QAAAIg"]
[Thu Feb 26 22:45:45.710666 2026] [:error] [pid 44444:tid 44472] [client 4.204.195.211:16325] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aaBcmW2sMNmj-yekUk1cbAAAAhY"]
[Thu Feb 26 22:45:46.208290 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16215] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "aaBcmm2sMNmj-yekUk1cbwAAAgw"]
[Thu Feb 26 22:45:46.688171 2026] [:error] [pid 44444:tid 44474] [client 4.204.195.211:16353] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaBcmm2sMNmj-yekUk1cdAAAAhg"]
[Thu Feb 26 22:45:47.112403 2026] [:error] [pid 44444:tid 44470] [client 4.204.195.211:16168] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaBcm22sMNmj-yekUk1ceQAAAhQ"]
[Thu Feb 26 22:45:47.570904 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:16003] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaBcm22sMNmj-yekUk1cfQAAAhM"]
[Thu Feb 26 22:45:48.014152 2026] [:error] [pid 20419:tid 20428] [client 4.204.195.211:16005] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaBcnO3DVDvMfTYYUBVuFgAAAcY"]
[Thu Feb 26 22:45:48.448151 2026] [:error] [pid 55051:tid 55067] [client 4.204.195.211:16025] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aaBcnAmK1w2kZvh5eLHY3AAAAI0"]
[Thu Feb 26 22:45:48.891665 2026] [:error] [pid 55051:tid 55054] [client 4.204.195.211:16041] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aaBcnAmK1w2kZvh5eLHY4AAAAIA"]
[Thu Feb 26 22:45:49.318002 2026] [:error] [pid 54990:tid 54996] [client 4.204.195.211:16178] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aaBcnXtr2qmt_mBhH2wyKQAAAAM"]
[Thu Feb 26 22:45:49.753846 2026] [:error] [pid 20419:tid 20440] [client 4.204.195.211:16151] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/seetox.php"] [unique_id "aaBcne3DVDvMfTYYUBVuGwAAAdI"]
[Thu Feb 26 22:45:50.204884 2026] [:error] [pid 20419:tid 20446] [client 4.204.195.211:16318] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaBcnu3DVDvMfTYYUBVuHAAAAdg"]
[Thu Feb 26 22:45:50.637628 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:16303] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaBcnm2sMNmj-yekUk1chAAAAgg"]
[Thu Feb 26 22:45:51.067414 2026] [:error] [pid 44444:tid 44474] [client 4.204.195.211:16133] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaBcn22sMNmj-yekUk1chwAAAhg"]
[Thu Feb 26 22:45:51.521440 2026] [:error] [pid 25311:tid 25325] [client 4.204.195.211:16079] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaBcn9fdM__yZAgJFSvwIQAAAYs"]
[Thu Feb 26 22:45:51.951141 2026] [:error] [pid 55122:tid 55146] [client 4.204.195.211:16156] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaBcn4LiR0OfjFxvcN85hgAAANY"]
[Thu Feb 26 22:45:52.374834 2026] [:error] [pid 54990:tid 55017] [client 4.204.195.211:16165] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaBcoHtr2qmt_mBhH2wyKwAAABg"]
[Thu Feb 26 22:45:52.790084 2026] [:error] [pid 55051:tid 55071] [client 4.204.195.211:16127] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaBcoAmK1w2kZvh5eLHY4wAAAJE"]
[Thu Feb 26 22:45:53.200594 2026] [:error] [pid 55618:tid 55644] [client 4.204.195.211:16015] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaBcoR61Vrh12f_8oWQY2wAAARc"]
[Thu Feb 26 22:45:53.609458 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16144] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aaBcod4Zx-mJ8gbRB2gHEgAAAFc"]
[Thu Feb 26 22:45:54.030524 2026] [:error] [pid 54991:tid 55032] [client 4.204.195.211:16155] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aaBcot4Zx-mJ8gbRB2gHFgAAAEw"]
[Thu Feb 26 22:45:54.466693 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:16160] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aaBcogmK1w2kZvh5eLHY6AAAAJU"]
[Thu Feb 26 22:45:54.890808 2026] [:error] [pid 20419:tid 20427] [client 4.204.195.211:16181] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xoot.php"] [unique_id "aaBcou3DVDvMfTYYUBVuIQAAAcU"]
[Thu Feb 26 22:45:55.322260 2026] [:error] [pid 55051:tid 55072] [client 4.204.195.211:16004] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aaBcowmK1w2kZvh5eLHY6wAAAJI"]
[Thu Feb 26 22:45:55.743911 2026] [:error] [pid 3883:tid 3890] [client 4.204.195.211:16150] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aaBco-A33x90V6yYHaj7UAAAAUQ"]
[Thu Feb 26 22:45:56.184278 2026] [:error] [pid 20419:tid 20425] [client 4.204.195.211:16233] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aaBcpO3DVDvMfTYYUBVuIgAAAcM"]
[Thu Feb 26 22:45:56.613897 2026] [:error] [pid 20419:tid 20445] [client 4.204.195.211:16013] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X57.php"] [unique_id "aaBcpO3DVDvMfTYYUBVuJQAAAdc"]
[Thu Feb 26 22:45:57.049075 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16098] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aaBcpW2sMNmj-yekUk1cjAAAAgM"]
[Thu Feb 26 22:45:57.468103 2026] [:error] [pid 54991:tid 55020] [client 4.204.195.211:16191] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aaBcpd4Zx-mJ8gbRB2gHGAAAAEA"]
[Thu Feb 26 22:45:57.885763 2026] [:error] [pid 3883:tid 3903] [client 4.204.195.211:16099] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aaBcpeA33x90V6yYHaj7UgAAAVE"]
[Thu Feb 26 22:45:58.318740 2026] [:error] [pid 54991:tid 55036] [client 4.204.195.211:16064] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file59.php"] [unique_id "aaBcpt4Zx-mJ8gbRB2gHHAAAAFA"]
[Thu Feb 26 22:45:58.770700 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:16145] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBcpm2sMNmj-yekUk1cjwAAAhM"]
[Thu Feb 26 22:45:59.192914 2026] [:error] [pid 44444:tid 44472] [client 4.204.195.211:16073] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBcp22sMNmj-yekUk1ckQAAAhY"]
[Thu Feb 26 22:45:59.602028 2026] [:error] [pid 44444:tid 44468] [client 4.204.195.211:16157] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBcp22sMNmj-yekUk1clAAAAhI"]
[Thu Feb 26 22:46:00.012970 2026] [:error] [pid 55618:tid 55621] [client 4.204.195.211:16068] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBcqB61Vrh12f_8oWQY4AAAAQA"]
[Thu Feb 26 22:46:00.444501 2026] [:error] [pid 54991:tid 55027] [client 4.204.195.211:16225] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaBcqN4Zx-mJ8gbRB2gHHgAAAEc"]
[Thu Feb 26 22:46:00.861250 2026] [:error] [pid 55051:tid 55073] [client 4.204.195.211:16007] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaBcqAmK1w2kZvh5eLHY8AAAAJM"]
[Thu Feb 26 22:46:01.276665 2026] [:error] [pid 3883:tid 3909] [client 4.204.195.211:16023] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaBcqeA33x90V6yYHaj7VwAAAVc"]
[Thu Feb 26 22:46:01.713385 2026] [:error] [pid 55618:tid 55622] [client 4.204.195.211:16111] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaBcqR61Vrh12f_8oWQY4QAAAQE"]
[Thu Feb 26 22:46:02.149502 2026] [:error] [pid 55122:tid 55126] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/er.php
[Thu Feb 26 22:46:02.360137 2026] [:error] [pid 55122:tid 55128] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/fault.php
[Thu Feb 26 22:46:02.567993 2026] [:error] [pid 55122:tid 55144] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Thu Feb 26 22:46:02.782334 2026] [:error] [pid 55122:tid 55125] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Thu Feb 26 22:46:03.001713 2026] [:error] [pid 55122:tid 55132] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/leuk.php
[Thu Feb 26 22:46:03.215071 2026] [:error] [pid 55122:tid 55147] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Thu Feb 26 22:46:03.424535 2026] [:error] [pid 55122:tid 55142] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/kolda.php
[Thu Feb 26 22:46:03.632984 2026] [:error] [pid 55122:tid 55136] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Thu Feb 26 22:46:03.840652 2026] [:error] [pid 55122:tid 55148] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Feb 26 22:46:04.048347 2026] [:error] [pid 55122:tid 55134] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Thu Feb 26 22:46:04.270864 2026] [:error] [pid 55122:tid 55135] [client 4.204.195.211:16074] File does not exist: /usr/local/apache/htdocs/suspended-page/un.php
[Thu Feb 26 22:46:04.524298 2026] [:error] [pid 55122:tid 55130] [client 4.204.195.211:16074] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aaBcrILiR0OfjFxvcN85mgAAAMY"]
[Thu Feb 26 22:46:05.026666 2026] [:error] [pid 20419:tid 20430] [client 4.204.195.211:16021] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aaBcre3DVDvMfTYYUBVuLAAAAcg"]
[Thu Feb 26 22:46:05.498574 2026] [:error] [pid 54990:tid 55010] [client 4.204.195.211:16131] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aaBcrXtr2qmt_mBhH2wyLQAAABE"]
[Thu Feb 26 22:46:05.931033 2026] [:error] [pid 54991:tid 55033] [client 4.204.195.211:16204] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs.php"] [unique_id "aaBcrd4Zx-mJ8gbRB2gHJQAAAE0"]
[Thu Feb 26 22:46:06.344783 2026] [:error] [pid 3883:tid 3902] [client 4.204.195.211:16118] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaBcruA33x90V6yYHaj7WAAAAVA"]
[Thu Feb 26 22:46:06.759270 2026] [:error] [pid 20419:tid 20425] [client 4.204.195.211:16096] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaBcru3DVDvMfTYYUBVuOAAAAcM"]
[Thu Feb 26 22:46:07.173075 2026] [:error] [pid 55122:tid 55141] [client 4.204.195.211:16112] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaBcr4LiR0OfjFxvcN85nAAAANE"]
[Thu Feb 26 22:46:07.604607 2026] [:error] [pid 55051:tid 55055] [client 4.204.195.211:16050] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaBcrwmK1w2kZvh5eLHY-AAAAIE"]
[Thu Feb 26 22:46:08.037673 2026] [:error] [pid 55051:tid 55061] [client 4.204.195.211:16126] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaBcsAmK1w2kZvh5eLHY-gAAAIc"]
[Thu Feb 26 22:46:08.457679 2026] [:error] [pid 55051:tid 55063] [client 4.204.195.211:16104] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaBcsAmK1w2kZvh5eLHY-wAAAIk"]
[Thu Feb 26 22:46:08.885241 2026] [:error] [pid 54990:tid 55016] [client 4.204.195.211:16154] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaBcsHtr2qmt_mBhH2wyMQAAABc"]
[Thu Feb 26 22:46:09.306062 2026] [:error] [pid 55051:tid 55074] [client 4.204.195.211:16048] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaBcsQmK1w2kZvh5eLHY_gAAAJQ"]
[Thu Feb 26 22:46:09.731728 2026] [:error] [pid 55051:tid 55076] [client 4.204.195.211:16001] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBcsQmK1w2kZvh5eLHY_wAAAJY"]
[Thu Feb 26 22:46:10.150912 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16109] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBcsgmK1w2kZvh5eLHZAgAAAIY"]
[Thu Feb 26 22:46:10.569442 2026] [:error] [pid 54991:tid 55022] [client 4.204.195.211:16316] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBcst4Zx-mJ8gbRB2gHJwAAAEI"]
[Thu Feb 26 22:46:10.984445 2026] [:error] [pid 20419:tid 20445] [client 4.204.195.211:16076] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaBcsu3DVDvMfTYYUBVuOQAAAdc"]
[Thu Feb 26 22:46:11.435579 2026] [:error] [pid 44444:tid 44460] [client 4.204.195.211:16066] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaBcs22sMNmj-yekUk1cmAAAAgo"]
[Thu Feb 26 22:46:11.868643 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:16248] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaBcs22sMNmj-yekUk1cmgAAAg0"]
[Thu Feb 26 22:46:12.303099 2026] [:error] [pid 55618:tid 55640] [client 4.204.195.211:16278] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaBctB61Vrh12f_8oWQY6AAAARM"]
[Thu Feb 26 22:46:12.720814 2026] [:error] [pid 54990:tid 55009] [client 4.204.195.211:16078] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaBctHtr2qmt_mBhH2wyNAAAABA"]
[Thu Feb 26 22:46:13.145810 2026] [:error] [pid 25311:tid 25324] [client 4.204.195.211:16177] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaBctdfdM__yZAgJFSvwPAAAAYo"]
[Thu Feb 26 22:46:13.568377 2026] [:error] [pid 25311:tid 25320] [client 4.204.195.211:16327] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaBctdfdM__yZAgJFSvwPQAAAYY"]
[Thu Feb 26 22:46:13.998067 2026] [:error] [pid 44444:tid 44473] [client 4.204.195.211:16183] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaBctW2sMNmj-yekUk1cnQAAAhc"]
[Thu Feb 26 22:46:14.437619 2026] [:error] [pid 54991:tid 55031] [client 4.204.195.211:16174] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaBctt4Zx-mJ8gbRB2gHLAAAAEs"]
[Thu Feb 26 22:46:14.887757 2026] [:error] [pid 55618:tid 55645] [client 4.204.195.211:16002] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaBcth61Vrh12f_8oWQY6QAAARg"]
[Thu Feb 26 22:46:15.309312 2026] [:error] [pid 3883:tid 3891] [client 4.204.195.211:16081] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaBct-A33x90V6yYHaj7WwAAAUU"]
[Thu Feb 26 22:46:15.767965 2026] [:error] [pid 55051:tid 55070] [client 4.204.195.211:16072] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaBctwmK1w2kZvh5eLHZBQAAAJA"]
[Thu Feb 26 22:46:16.192571 2026] [:error] [pid 54991:tid 55028] [client 4.204.195.211:16097] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaBcuN4Zx-mJ8gbRB2gHLgAAAEg"]
[Thu Feb 26 22:46:16.622003 2026] [:error] [pid 54990:tid 55000] [client 4.204.195.211:16138] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaBcuHtr2qmt_mBhH2wyOgAAAAc"]
[Thu Feb 26 22:46:17.049533 2026] [:error] [pid 55051:tid 55064] [client 4.204.195.211:16092] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaBcuQmK1w2kZvh5eLHZBgAAAIo"]
[Thu Feb 26 22:46:17.490029 2026] [:error] [pid 54991:tid 55041] [client 4.204.195.211:16032] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaBcud4Zx-mJ8gbRB2gHMQAAAFU"]
[Thu Feb 26 22:46:17.903936 2026] [:error] [pid 54990:tid 54996] [client 4.204.195.211:16106] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaBcuXtr2qmt_mBhH2wyPQAAAAM"]
[Thu Feb 26 22:46:18.339010 2026] [:error] [pid 54990:tid 54995] [client 4.204.195.211:16008] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaBcuntr2qmt_mBhH2wyQAAAAAI"]
[Thu Feb 26 22:46:18.825250 2026] [:error] [pid 54990:tid 55004] [client 4.204.195.211:16026] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaBcuntr2qmt_mBhH2wyQgAAAAs"]
[Thu Feb 26 22:46:19.244231 2026] [:error] [pid 44444:tid 44472] [client 4.204.195.211:16091] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaBcu22sMNmj-yekUk1cowAAAhY"]
[Thu Feb 26 22:46:19.661595 2026] [:error] [pid 54990:tid 55006] [client 4.204.195.211:16024] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaBcu3tr2qmt_mBhH2wyRAAAAA0"]
[Thu Feb 26 22:46:20.078261 2026] [:error] [pid 20419:tid 20437] [client 4.204.195.211:16094] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaBcvO3DVDvMfTYYUBVuRAAAAc8"]
[Thu Feb 26 22:46:20.511115 2026] [:error] [pid 44444:tid 44464] [client 4.204.195.211:16108] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaBcvG2sMNmj-yekUk1cpAAAAg4"]
[Thu Feb 26 22:46:20.928688 2026] [:error] [pid 55051:tid 55074] [client 4.204.195.211:16016] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaBcvAmK1w2kZvh5eLHZEQAAAJQ"]
[Thu Feb 26 22:46:21.343038 2026] [:error] [pid 3883:tid 3890] [client 4.204.195.211:16054] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaBcveA33x90V6yYHaj7ZQAAAUQ"]
[Thu Feb 26 22:46:21.765982 2026] [:error] [pid 3883:tid 3905] [client 4.204.195.211:16184] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaBcveA33x90V6yYHaj7ZwAAAVM"]
[Thu Feb 26 22:46:22.202336 2026] [:error] [pid 20419:tid 20436] [client 4.204.195.211:16115] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaBcvu3DVDvMfTYYUBVuRQAAAc4"]
[Thu Feb 26 22:46:22.670761 2026] [:error] [pid 55122:tid 55124] [client 4.204.195.211:16018] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaBcvoLiR0OfjFxvcN85swAAAMA"]
[Thu Feb 26 22:46:23.085865 2026] [:error] [pid 55122:tid 55137] [client 4.204.195.211:16057] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaBcv4LiR0OfjFxvcN85tgAAAM0"]
[Thu Feb 26 22:46:23.526047 2026] [:error] [pid 54990:tid 55011] [client 4.204.195.211:16119] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaBcv3tr2qmt_mBhH2wySAAAABI"]
[Thu Feb 26 22:46:23.963534 2026] [:error] [pid 54991:tid 55033] [client 4.204.195.211:16143] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaBcv94Zx-mJ8gbRB2gHOAAAAE0"]
[Thu Feb 26 22:46:24.377781 2026] [:error] [pid 20419:tid 20446] [client 4.204.195.211:16095] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaBcwO3DVDvMfTYYUBVuRgAAAdg"]
[Thu Feb 26 22:46:24.791660 2026] [:error] [pid 54991:tid 55022] [client 4.204.195.211:16010] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaBcwN4Zx-mJ8gbRB2gHOwAAAEI"]
[Thu Feb 26 22:46:25.202321 2026] [:error] [pid 3883:tid 3891] [client 4.204.195.211:16036] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaBcweA33x90V6yYHaj7bAAAAUU"]
[Thu Feb 26 22:46:25.621306 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16331] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaBcwW2sMNmj-yekUk1csQAAAgM"]
[Thu Feb 26 22:46:26.060817 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:16116] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaBcwm2sMNmj-yekUk1cswAAAgI"]
[Thu Feb 26 22:46:26.484234 2026] [:error] [pid 44444:tid 44451] [client 4.204.195.211:16189] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaBcwm2sMNmj-yekUk1ctQAAAgE"]
[Thu Feb 26 22:46:26.903775 2026] [:error] [pid 54991:tid 55036] [client 4.204.195.211:16101] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aaBcwt4Zx-mJ8gbRB2gHPwAAAFA"]
[Thu Feb 26 22:46:27.317894 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16034] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aaBcwwmK1w2kZvh5eLHZFQAAAIY"]
[Thu Feb 26 22:46:27.736178 2026] [:error] [pid 54991:tid 55042] [client 4.204.195.211:16121] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aaBcw94Zx-mJ8gbRB2gHQQAAAFY"]
[Thu Feb 26 22:46:28.160006 2026] [:error] [pid 54990:tid 54994] [client 4.204.195.211:16179] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fot.php"] [unique_id "aaBcxHtr2qmt_mBhH2wySwAAAAE"]
[Thu Feb 26 22:46:28.574727 2026] [:error] [pid 55618:tid 55644] [client 4.204.195.211:16102] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaBcxB61Vrh12f_8oWQY7wAAARc"]
[Thu Feb 26 22:46:28.992698 2026] [:error] [pid 3883:tid 3888] [client 4.204.195.211:15963] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaBcxOA33x90V6yYHaj7cQAAAUI"]
[Thu Feb 26 22:46:29.408470 2026] [:error] [pid 54991:tid 55028] [client 4.204.195.211:16035] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaBcxd4Zx-mJ8gbRB2gHQgAAAEg"]
[Thu Feb 26 22:46:29.826840 2026] [:error] [pid 25311:tid 25322] [client 4.204.195.211:15947] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaBcxdfdM__yZAgJFSvwTgAAAYg"]
[Thu Feb 26 22:46:30.237661 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16055] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aaBcxm2sMNmj-yekUk1cuwAAAgU"]
[Thu Feb 26 22:46:30.649996 2026] [:error] [pid 55618:tid 55635] [client 4.204.195.211:15993] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aaBcxh61Vrh12f_8oWQY8wAAAQ4"]
[Thu Feb 26 22:46:31.064349 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:15952] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aaBcx22sMNmj-yekUk1cvgAAAgY"]
[Thu Feb 26 22:46:31.485424 2026] [:error] [pid 44444:tid 44471] [client 4.204.195.211:16019] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/forbidals.php"] [unique_id "aaBcx22sMNmj-yekUk1cvwAAAhU"]
[Thu Feb 26 22:46:31.899371 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:15959] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaBcx22sMNmj-yekUk1cwwAAAgs"]
[Thu Feb 26 22:46:32.334362 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:16117] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaBcyO3DVDvMfTYYUBVuSQAAAcQ"]
[Thu Feb 26 22:46:32.757162 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:15967] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaBcyG2sMNmj-yekUk1cyAAAAgM"]
[Thu Feb 26 22:46:33.175445 2026] [:error] [pid 55122:tid 55128] [client 4.204.195.211:16113] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaBcyYLiR0OfjFxvcN85uwAAAMQ"]
[Thu Feb 26 22:46:33.593050 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:16060] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aaBcyW2sMNmj-yekUk1cygAAAgI"]
[Thu Feb 26 22:46:34.014786 2026] [:error] [pid 54991:tid 55034] [client 4.204.195.211:16014] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aaBcyt4Zx-mJ8gbRB2gHSAAAAE4"]
[Thu Feb 26 22:46:34.438206 2026] [:error] [pid 54991:tid 55021] [client 4.204.195.211:15984] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aaBcyt4Zx-mJ8gbRB2gHSwAAAEE"]
[Thu Feb 26 22:46:34.852834 2026] [:error] [pid 3883:tid 3905] [client 4.204.195.211:16011] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev1s.php"] [unique_id "aaBcyuA33x90V6yYHaj7eQAAAVM"]
[Thu Feb 26 22:46:35.261783 2026] [:error] [pid 54991:tid 55040] [client 4.204.195.211:16082] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aaBcy94Zx-mJ8gbRB2gHUAAAAFQ"]
[Thu Feb 26 22:46:35.668806 2026] [:error] [pid 55618:tid 55623] [client 4.204.195.211:16103] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aaBcyx61Vrh12f_8oWQY9QAAAQI"]
[Thu Feb 26 22:46:36.079371 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16302] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aaBczG2sMNmj-yekUk1c0QAAAgU"]
[Thu Feb 26 22:46:36.497047 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:16114] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffd.php"] [unique_id "aaBczG2sMNmj-yekUk1c1AAAAgg"]
[Thu Feb 26 22:46:36.911187 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16122] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aaBczG2sMNmj-yekUk1c2AAAAgs"]
[Thu Feb 26 22:46:37.319460 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:15950] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aaBczW2sMNmj-yekUk1c3AAAAgc"]
[Thu Feb 26 22:46:37.735363 2026] [:error] [pid 44444:tid 44472] [client 4.204.195.211:16030] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aaBczW2sMNmj-yekUk1c4gAAAhY"]
[Thu Feb 26 22:46:38.156121 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:15975] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admiin.php"] [unique_id "aaBczm2sMNmj-yekUk1c5AAAAhA"]
[Thu Feb 26 22:46:38.578499 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:15959] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaBczm2sMNmj-yekUk1c6AAAAgY"]
[Thu Feb 26 22:46:39.005899 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:16222] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaBcz22sMNmj-yekUk1c6wAAAhE"]
[Thu Feb 26 22:46:39.430075 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16044] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaBcz22sMNmj-yekUk1c7wAAAgw"]
[Thu Feb 26 22:46:39.858293 2026] [:error] [pid 54991:tid 55020] [client 4.204.195.211:16107] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaBcz94Zx-mJ8gbRB2gHVQAAAEA"]
[Thu Feb 26 22:46:40.274460 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:16250] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aaBc0G2sMNmj-yekUk1c8wAAAgI"]
[Thu Feb 26 22:46:40.681779 2026] [:error] [pid 25311:tid 25333] [client 4.204.195.211:16020] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aaBc0NfdM__yZAgJFSvwVAAAAZM"]
[Thu Feb 26 22:46:41.090820 2026] [:error] [pid 44444:tid 44465] [client 4.204.195.211:16052] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aaBc0W2sMNmj-yekUk1c-QAAAg8"]
[Thu Feb 26 22:46:41.503583 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16033] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Sanskrit.php"] [unique_id "aaBc0W2sMNmj-yekUk1c_QAAAgM"]
[Thu Feb 26 22:46:41.924555 2026] [:error] [pid 55618:tid 55636] [client 4.204.195.211:16180] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc0R61Vrh12f_8oWQY-gAAAQ8"]
[Thu Feb 26 22:46:42.336563 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:16040] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc0m2sMNmj-yekUk1dBAAAAhA"]
[Thu Feb 26 22:46:42.750449 2026] [:error] [pid 55122:tid 55132] [client 4.204.195.211:16038] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc0oLiR0OfjFxvcN85vwAAAMg"]
[Thu Feb 26 22:46:43.168180 2026] [:error] [pid 44444:tid 44473] [client 4.204.195.211:16027] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc022sMNmj-yekUk1dDAAAAhc"]
[Thu Feb 26 22:46:43.581718 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16135] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaBc022sMNmj-yekUk1dDQAAAgw"]
[Thu Feb 26 22:46:43.992361 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:16022] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaBc022sMNmj-yekUk1dEQAAAgU"]
[Thu Feb 26 22:46:44.399875 2026] [:error] [pid 54991:tid 55033] [client 4.204.195.211:16037] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaBc1N4Zx-mJ8gbRB2gHYwAAAE0"]
[Thu Feb 26 22:46:44.815749 2026] [:error] [pid 55618:tid 55630] [client 4.204.195.211:15941] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaBc1B61Vrh12f_8oWQY-wAAAQk"]
[Thu Feb 26 22:46:45.236307 2026] [:error] [pid 3883:tid 3904] [client 4.204.195.211:15989] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aaBc1eA33x90V6yYHaj7fwAAAVI"]
[Thu Feb 26 22:46:45.649626 2026] [:error] [pid 55051:tid 55061] [client 4.204.195.211:16161] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aaBc1QmK1w2kZvh5eLHZIQAAAIc"]
[Thu Feb 26 22:46:46.070696 2026] [:error] [pid 20419:tid 20427] [client 4.204.195.211:15968] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aaBc1u3DVDvMfTYYUBVuSwAAAcU"]
[Thu Feb 26 22:46:46.501734 2026] [:error] [pid 55051:tid 55063] [client 4.204.195.211:16017] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/num.php"] [unique_id "aaBc1gmK1w2kZvh5eLHZIwAAAIk"]
[Thu Feb 26 22:46:46.927476 2026] [:error] [pid 54990:tid 55005] [client 4.204.195.211:15962] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaBc1ntr2qmt_mBhH2wyTwAAAAw"]
[Thu Feb 26 22:46:47.342879 2026] [:error] [pid 55051:tid 55062] [client 4.204.195.211:16193] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaBc1wmK1w2kZvh5eLHZJwAAAIg"]
[Thu Feb 26 22:46:47.766060 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16043] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaBc1wmK1w2kZvh5eLHZKQAAAIY"]
[Thu Feb 26 22:46:48.174989 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:16077] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaBc2G2sMNmj-yekUk1dIQAAAgc"]
[Thu Feb 26 22:46:48.593270 2026] [:error] [pid 55051:tid 55078] [client 4.204.195.211:16000] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc2AmK1w2kZvh5eLHZLAAAAJg"]
[Thu Feb 26 22:46:49.004464 2026] [:error] [pid 54991:tid 55042] [client 4.204.195.211:15970] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc2d4Zx-mJ8gbRB2gHbQAAAFY"]
[Thu Feb 26 22:46:49.421555 2026] [:error] [pid 54990:tid 55008] [client 4.204.195.211:15974] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc2Xtr2qmt_mBhH2wyUAAAAA8"]
[Thu Feb 26 22:46:49.844238 2026] [:error] [pid 54991:tid 55041] [client 4.204.195.211:16045] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vxrl.php"] [unique_id "aaBc2d4Zx-mJ8gbRB2gHcAAAAFU"]
[Thu Feb 26 22:46:50.259953 2026] [:error] [pid 55618:tid 55638] [client 4.204.195.211:16219] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaBc2h61Vrh12f_8oWQY_wAAARE"]
[Thu Feb 26 22:46:50.679169 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:16089] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaBc2m2sMNmj-yekUk1dJwAAAhA"]
[Thu Feb 26 22:46:51.097201 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:15972] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaBc222sMNmj-yekUk1dKwAAAg0"]
[Thu Feb 26 22:46:51.515605 2026] [:error] [pid 54990:tid 54996] [client 4.204.195.211:15948] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaBc23tr2qmt_mBhH2wyUQAAAAM"]
[Thu Feb 26 22:46:51.935669 2026] [:error] [pid 54990:tid 54993] [client 4.204.195.211:15883] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaBc23tr2qmt_mBhH2wyUgAAAAA"]
[Thu Feb 26 22:46:52.371848 2026] [:error] [pid 55122:tid 55148] [client 4.204.195.211:15979] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaBc3ILiR0OfjFxvcN85xAAAANg"]
[Thu Feb 26 22:46:52.794568 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16058] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaBc3N4Zx-mJ8gbRB2gHdAAAAFc"]
[Thu Feb 26 22:46:53.226343 2026] [:error] [pid 54991:tid 55035] [client 4.204.195.211:16065] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaBc3d4Zx-mJ8gbRB2gHdwAAAE8"]
[Thu Feb 26 22:46:53.643148 2026] [:error] [pid 55122:tid 55130] [client 4.204.195.211:15938] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaBc3YLiR0OfjFxvcN85xwAAAMY"]
[Thu Feb 26 22:46:54.052058 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:15999] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaBc3m2sMNmj-yekUk1dMwAAAgI"]
[Thu Feb 26 22:46:54.463832 2026] [:error] [pid 55051:tid 55069] [client 4.204.195.211:15936] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaBc3gmK1w2kZvh5eLHZNQAAAI8"]
[Thu Feb 26 22:46:54.874306 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:15982] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaBc3m2sMNmj-yekUk1dNwAAAgs"]
[Thu Feb 26 22:46:55.319688 2026] [:error] [pid 20419:tid 20431] [client 4.204.195.211:16028] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaBc3-3DVDvMfTYYUBVuTwAAAck"]
[Thu Feb 26 22:46:55.732303 2026] [:error] [pid 20419:tid 20432] [client 4.204.195.211:16088] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaBc3-3DVDvMfTYYUBVuUQAAAco"]
[Thu Feb 26 22:46:56.167785 2026] [:error] [pid 20419:tid 20428] [client 4.204.195.211:15958] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaBc4O3DVDvMfTYYUBVuVQAAAcY"]
[Thu Feb 26 22:46:56.588112 2026] [:error] [pid 55051:tid 55062] [client 4.204.195.211:16053] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaBc4AmK1w2kZvh5eLHZOwAAAIg"]
[Thu Feb 26 22:46:56.998670 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:16006] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aaBc4G2sMNmj-yekUk1dQAAAAgg"]
[Thu Feb 26 22:46:57.421376 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16059] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aaBc4W2sMNmj-yekUk1dQwAAAgM"]
[Thu Feb 26 22:46:57.860169 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:15944] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aaBc4W2sMNmj-yekUk1dRwAAAgw"]
[Thu Feb 26 22:46:58.286458 2026] [:error] [pid 20419:tid 20446] [client 4.204.195.211:15998] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/karak.php"] [unique_id "aaBc4u3DVDvMfTYYUBVuWQAAAdg"]
[Thu Feb 26 22:46:58.702072 2026] [:error] [pid 20419:tid 20440] [client 4.204.195.211:15946] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaBc4u3DVDvMfTYYUBVuWwAAAdI"]
[Thu Feb 26 22:46:59.121826 2026] [:error] [pid 25311:tid 25338] [client 4.204.195.211:15983] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaBc49fdM__yZAgJFSvwWwAAAZg"]
[Thu Feb 26 22:46:59.546157 2026] [:error] [pid 55122:tid 55145] [client 4.204.195.211:15997] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaBc44LiR0OfjFxvcN85yQAAANU"]
[Thu Feb 26 22:46:59.991033 2026] [:error] [pid 55051:tid 55078] [client 4.204.195.211:15943] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaBc4wmK1w2kZvh5eLHZPwAAAJg"]
[Thu Feb 26 22:47:00.422539 2026] [:error] [pid 55051:tid 55064] [client 4.204.195.211:15956] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBc5AmK1w2kZvh5eLHZQgAAAIo"]
[Thu Feb 26 22:47:00.836726 2026] [:error] [pid 55051:tid 55073] [client 4.204.195.211:15971] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBc5AmK1w2kZvh5eLHZRAAAAJM"]
[Thu Feb 26 22:47:01.251369 2026] [:error] [pid 54991:tid 55031] [client 4.204.195.211:15891] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBc5d4Zx-mJ8gbRB2gHfgAAAEs"]
[Thu Feb 26 22:47:01.667469 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:15890] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a.php"] [unique_id "aaBc5W2sMNmj-yekUk1dTQAAAhE"]
[Thu Feb 26 22:47:02.078044 2026] [:error] [pid 54990:tid 55016] [client 4.204.195.211:15928] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaBc5ntr2qmt_mBhH2wyWQAAABc"]
[Thu Feb 26 22:47:02.495564 2026] [:error] [pid 25311:tid 25317] [client 4.204.195.211:15894] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaBc5tfdM__yZAgJFSvwXgAAAYM"]
[Thu Feb 26 22:47:02.913949 2026] [:error] [pid 25311:tid 25335] [client 4.204.195.211:15986] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaBc5tfdM__yZAgJFSvwYwAAAZU"]
[Thu Feb 26 22:47:03.334278 2026] [:error] [pid 55051:tid 55072] [client 4.204.195.211:15881] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaBc5wmK1w2kZvh5eLHZTAAAAJI"]
[Thu Feb 26 22:47:03.759867 2026] [:error] [pid 54991:tid 55026] [client 4.204.195.211:16120] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev.php"] [unique_id "aaBc594Zx-mJ8gbRB2gHgwAAAEY"]
[Thu Feb 26 22:47:04.184154 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Thu Feb 26 22:47:04.399192 2026] [:error] [pid 55051:tid 55067] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Feb 26 22:47:04.613879 2026] [:error] [pid 55051:tid 55076] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Thu Feb 26 22:47:04.830236 2026] [:error] [pid 55051:tid 55078] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Feb 26 22:47:05.046877 2026] [:error] [pid 55051:tid 55070] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Feb 26 22:47:05.263664 2026] [:error] [pid 55051:tid 55056] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Feb 26 22:47:05.479982 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Thu Feb 26 22:47:05.694499 2026] [:error] [pid 55051:tid 55077] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Thu Feb 26 22:47:05.908839 2026] [:error] [pid 55051:tid 55066] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/ov.php
[Thu Feb 26 22:47:06.346823 2026] [:error] [pid 55051:tid 55067] [client 4.204.195.211:15880] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Feb 26 22:47:06.558158 2026] [:error] [pid 55051:tid 55076] [client 4.204.195.211:15880] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaBc6gmK1w2kZvh5eLHZaAAAAJY"]
[Thu Feb 26 22:47:07.021094 2026] [:error] [pid 44444:tid 44473] [client 4.204.195.211:15891] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaBc622sMNmj-yekUk1dUwAAAhc"]
[Thu Feb 26 22:47:07.447691 2026] [:error] [pid 3883:tid 3894] [client 4.204.195.211:16042] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaBc6-A33x90V6yYHaj7nwAAAUg"]
[Thu Feb 26 22:47:07.863802 2026] [:error] [pid 44444:tid 44451] [client 4.204.195.211:16193] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaBc622sMNmj-yekUk1dVgAAAgE"]
[Thu Feb 26 22:47:08.285057 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:15919] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaBc7G2sMNmj-yekUk1dWwAAAgs"]
[Thu Feb 26 22:47:08.700919 2026] [:error] [pid 25311:tid 25330] [client 4.204.195.211:15994] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaBc7NfdM__yZAgJFSvwaAAAAZA"]
[Thu Feb 26 22:47:09.116666 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:15874] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaBc7W2sMNmj-yekUk1dYQAAAgY"]
[Thu Feb 26 22:47:09.541768 2026] [:error] [pid 20419:tid 20445] [client 4.204.195.211:15969] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaBc7e3DVDvMfTYYUBVuXwAAAdc"]
[Thu Feb 26 22:47:09.964601 2026] [:error] [pid 3883:tid 3908] [client 4.204.195.211:15909] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.1.php"] [unique_id "aaBc7eA33x90V6yYHaj7pQAAAVY"]
[Thu Feb 26 22:47:10.399229 2026] [:error] [pid 25311:tid 25318] [client 4.204.195.211:15945] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.1.php"] [unique_id "aaBc7tfdM__yZAgJFSvwaQAAAYQ"]
[Thu Feb 26 22:47:10.818424 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:15886] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.1.php"] [unique_id "aaBc7m2sMNmj-yekUk1dZgAAAgM"]
[Thu Feb 26 22:47:11.261440 2026] [:error] [pid 3883:tid 3902] [client 4.204.195.211:16063] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.1.php"] [unique_id "aaBc7-A33x90V6yYHaj7pwAAAVA"]
[Thu Feb 26 22:47:11.695031 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:15942] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/async.php"] [unique_id "aaBc722sMNmj-yekUk1dbwAAAgI"]
[Thu Feb 26 22:47:12.117764 2026] [:error] [pid 55051:tid 55067] [client 4.204.195.211:15965] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/async.php"] [unique_id "aaBc8AmK1w2kZvh5eLHZcgAAAI0"]
[Thu Feb 26 22:47:12.534898 2026] [:error] [pid 55051:tid 55076] [client 4.204.195.211:15923] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/async.php"] [unique_id "aaBc8AmK1w2kZvh5eLHZdAAAAJY"]
[Thu Feb 26 22:47:12.949306 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16046] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/async.php"] [unique_id "aaBc8G2sMNmj-yekUk1deQAAAgM"]
[Thu Feb 26 22:47:13.364363 2026] [:error] [pid 55051:tid 55058] [client 4.204.195.211:15981] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aaBc8QmK1w2kZvh5eLHZeAAAAIQ"]
[Thu Feb 26 22:47:13.787172 2026] [:error] [pid 20419:tid 20442] [client 4.204.195.211:15953] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aaBc8e3DVDvMfTYYUBVuYwAAAdQ"]
[Thu Feb 26 22:47:14.203008 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16125] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aaBc8gmK1w2kZvh5eLHZegAAAIY"]
[Thu Feb 26 22:47:14.621968 2026] [:error] [pid 55122:tid 55136] [client 4.204.195.211:16081] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff.php"] [unique_id "aaBc8oLiR0OfjFxvcN851wAAAMw"]
[Thu Feb 26 22:47:15.040950 2026] [:error] [pid 54991:tid 55033] [client 4.204.195.211:16056] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaBc894Zx-mJ8gbRB2gHngAAAE0"]
[Thu Feb 26 22:47:15.451316 2026] [:error] [pid 54990:tid 54997] [client 4.204.195.211:15884] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaBc83tr2qmt_mBhH2wyYAAAAAQ"]
[Thu Feb 26 22:47:15.866716 2026] [:error] [pid 3883:tid 3894] [client 4.204.195.211:16084] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaBc8-A33x90V6yYHaj7swAAAUg"]
[Thu Feb 26 22:47:16.282624 2026] [:error] [pid 54990:tid 54994] [client 4.204.195.211:16031] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaBc9Htr2qmt_mBhH2wyYQAAAAE"]
[Thu Feb 26 22:47:16.695461 2026] [:error] [pid 3883:tid 3892] [client 4.204.195.211:15921] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBc9OA33x90V6yYHaj7tQAAAUY"]
[Thu Feb 26 22:47:17.115560 2026] [:error] [pid 3883:tid 3898] [client 4.204.195.211:16373] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBc9eA33x90V6yYHaj7uAAAAUw"]
[Thu Feb 26 22:47:17.539650 2026] [:error] [pid 3883:tid 3902] [client 4.204.195.211:16123] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBc9eA33x90V6yYHaj7uQAAAVA"]
[Thu Feb 26 22:47:17.956402 2026] [:error] [pid 55051:tid 55067] [client 4.204.195.211:15937] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/manager.php"] [unique_id "aaBc9QmK1w2kZvh5eLHZggAAAI0"]
[Thu Feb 26 22:47:18.370493 2026] [:error] [pid 25311:tid 25320] [client 4.204.195.211:16051] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaBc9tfdM__yZAgJFSvwdQAAAYY"]
[Thu Feb 26 22:47:18.791124 2026] [:error] [pid 55122:tid 55135] [client 4.204.195.211:16062] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaBc9oLiR0OfjFxvcN852gAAAMs"]
[Thu Feb 26 22:47:19.207029 2026] [:error] [pid 54990:tid 55008] [client 4.204.195.211:15904] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaBc93tr2qmt_mBhH2wyZQAAAA8"]
[Thu Feb 26 22:47:19.622512 2026] [:error] [pid 25311:tid 25330] [client 4.204.195.211:16083] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaBc99fdM__yZAgJFSvwewAAAZA"]
[Thu Feb 26 22:47:20.040754 2026] [:error] [pid 3883:tid 3887] [client 4.204.195.211:15987] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBc-OA33x90V6yYHaj7wAAAAUE"]
[Thu Feb 26 22:47:20.456136 2026] [:error] [pid 44444:tid 44472] [client 4.204.195.211:16075] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBc-G2sMNmj-yekUk1dhwAAAhY"]
[Thu Feb 26 22:47:20.872035 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:15905] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBc-G2sMNmj-yekUk1digAAAgg"]
[Thu Feb 26 22:47:21.299799 2026] [:error] [pid 44444:tid 44471] [client 4.204.195.211:15831] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "aaBc-W2sMNmj-yekUk1djgAAAhU"]
[Thu Feb 26 22:47:21.715969 2026] [:error] [pid 44444:tid 44450] [client 4.204.195.211:16124] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBc-W2sMNmj-yekUk1dkgAAAgA"]
[Thu Feb 26 22:47:22.133012 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:15980] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBc-m2sMNmj-yekUk1dlwAAAhE"]
[Thu Feb 26 22:47:22.548619 2026] [:error] [pid 55051:tid 55070] [client 4.204.195.211:16039] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBc-gmK1w2kZvh5eLHZhgAAAJA"]
[Thu Feb 26 22:47:22.968631 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:16366] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lc.php"] [unique_id "aaBc-m2sMNmj-yekUk1dngAAAgg"]
[Thu Feb 26 22:47:23.395355 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:15809] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aaBc-22sMNmj-yekUk1doQAAAgc"]
[Thu Feb 26 22:47:23.804816 2026] [:error] [pid 3883:tid 3896] [client 4.204.195.211:15889] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aaBc--A33x90V6yYHaj7wwAAAUo"]
[Thu Feb 26 22:47:24.216527 2026] [:error] [pid 3883:tid 3893] [client 4.204.195.211:15927] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aaBc_OA33x90V6yYHaj7xQAAAUc"]
[Thu Feb 26 22:47:24.628631 2026] [:error] [pid 20419:tid 20430] [client 4.204.195.211:15896] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cbrfo.php"] [unique_id "aaBc_O3DVDvMfTYYUBVuZgAAAcg"]
[Thu Feb 26 22:47:25.042466 2026] [:error] [pid 44444:tid 44460] [client 4.204.195.211:16080] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaBc_W2sMNmj-yekUk1drAAAAgo"]
[Thu Feb 26 22:47:25.462292 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:15964] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaBc_W2sMNmj-yekUk1dsAAAAgY"]
[Thu Feb 26 22:47:25.878235 2026] [:error] [pid 44444:tid 44459] [client 4.204.195.211:15985] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaBc_W2sMNmj-yekUk1dtQAAAgk"]
[Thu Feb 26 22:47:26.294604 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:16214] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaBc_m2sMNmj-yekUk1duQAAAhE"]
[Thu Feb 26 22:47:26.718146 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:15915] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaBc_gmK1w2kZvh5eLHZiQAAAIU"]
[Thu Feb 26 22:47:27.132732 2026] [:error] [pid 3883:tid 3906] [client 4.204.195.211:16061] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaBc_-A33x90V6yYHaj7yQAAAVQ"]
[Thu Feb 26 22:47:27.557173 2026] [:error] [pid 44444:tid 44454] [client 4.204.195.211:15915] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaBc_22sMNmj-yekUk1dwwAAAgQ"]
[Thu Feb 26 22:47:27.981256 2026] [:error] [pid 55051:tid 55069] [client 4.204.195.211:15892] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaBc_wmK1w2kZvh5eLHZjQAAAI8"]
[Thu Feb 26 22:47:28.402978 2026] [:error] [pid 3883:tid 3904] [client 4.204.195.211:15878] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aaBdAOA33x90V6yYHaj70QAAAVI"]
[Thu Feb 26 22:47:28.824498 2026] [:error] [pid 3883:tid 3887] [client 4.204.195.211:15808] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aaBdAOA33x90V6yYHaj70gAAAUE"]
[Thu Feb 26 22:47:29.243841 2026] [:error] [pid 55618:tid 55630] [client 4.204.195.211:15873] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aaBdAR61Vrh12f_8oWQZDAAAAQk"]
[Thu Feb 26 22:47:29.667225 2026] [:error] [pid 55618:tid 55632] [client 4.204.195.211:15875] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/miansha.php"] [unique_id "aaBdAR61Vrh12f_8oWQZDwAAAQs"]
[Thu Feb 26 22:47:30.080005 2026] [:error] [pid 55122:tid 55126] [client 4.204.195.211:16049] [client 4.204.195.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaBdAoLiR0OfjFxvcN855gAAAMI"]
[Thu Feb 26 22:47:30.489635 2026] [:error] [pid 20419:tid 20422] [client 4.204.195.211:15877] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaBdAu3DVDvMfTYYUBVubgAAAcA"]
[Thu Feb 26 22:47:30.919514 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:15917] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaBdAgmK1w2kZvh5eLHZmAAAAJU"]
[Thu Feb 26 22:47:31.333678 2026] [:error] [pid 55051:tid 55062] [client 4.204.195.211:15841] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaBdAwmK1w2kZvh5eLHZmwAAAIg"]
[Thu Feb 26 22:47:31.766062 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:15888] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaBdA22sMNmj-yekUk1dzAAAAhA"]
[Thu Feb 26 22:47:32.175125 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:15895] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaBdBG2sMNmj-yekUk1dzgAAAgY"]
[Thu Feb 26 22:47:32.584741 2026] [:error] [pid 44444:tid 44465] [client 4.204.195.211:15842] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaBdBG2sMNmj-yekUk1d1AAAAg8"]
[Thu Feb 26 22:47:32.994830 2026] [:error] [pid 55122:tid 55132] [client 4.204.195.211:15907] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaBdBILiR0OfjFxvcN856QAAAMg"]
[Thu Feb 26 22:47:33.414705 2026] [:error] [pid 55051:tid 55077] [client 4.204.195.211:15988] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaBdBQmK1w2kZvh5eLHZpQAAAJc"]
[Thu Feb 26 22:47:33.832373 2026] [:error] [pid 55051:tid 55065] [client 4.204.195.211:15961] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaBdBQmK1w2kZvh5eLHZqQAAAIs"]
[Thu Feb 26 22:47:34.244754 2026] [:error] [pid 20419:tid 20444] [client 4.204.195.211:15872] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaBdBu3DVDvMfTYYUBVubwAAAdY"]
[Thu Feb 26 22:47:34.654826 2026] [:error] [pid 3883:tid 3892] [client 4.204.195.211:15827] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaBdBuA33x90V6yYHaj72QAAAUY"]
[Thu Feb 26 22:47:35.062919 2026] [:error] [pid 55618:tid 55638] [client 4.204.195.211:15976] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aaBdBx61Vrh12f_8oWQZEgAAARE"]
[Thu Feb 26 22:47:35.477501 2026] [:error] [pid 44444:tid 44454] [client 4.204.195.211:15990] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aaBdB22sMNmj-yekUk1d4AAAAgQ"]
[Thu Feb 26 22:47:35.901387 2026] [:error] [pid 55051:tid 55062] [client 4.204.195.211:15862] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aaBdBwmK1w2kZvh5eLHZswAAAIg"]
[Thu Feb 26 22:47:36.327623 2026] [:error] [pid 44444:tid 44473] [client 4.204.195.211:15992] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/reze.php"] [unique_id "aaBdCG2sMNmj-yekUk1d4wAAAhc"]
[Thu Feb 26 22:47:36.744209 2026] [:error] [pid 44444:tid 44468] [client 4.204.195.211:15924] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaBdCG2sMNmj-yekUk1d5QAAAhI"]
[Thu Feb 26 22:47:37.166491 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:15955] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaBdCW2sMNmj-yekUk1d6QAAAgs"]
[Thu Feb 26 22:47:37.584125 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:15901] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaBdCW2sMNmj-yekUk1d7AAAAgw"]
[Thu Feb 26 22:47:37.999648 2026] [:error] [pid 55618:tid 55631] [client 4.204.195.211:15902] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaBdCR61Vrh12f_8oWQZFAAAAQo"]
[Thu Feb 26 22:47:38.454894 2026] [:error] [pid 3883:tid 3890] [client 4.204.195.211:15900] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x7.php"] [unique_id "aaBdCuA33x90V6yYHaj74AAAAUQ"]
[Thu Feb 26 22:47:38.870604 2026] [:error] [pid 3883:tid 3895] [client 4.204.195.211:15939] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x7.php"] [unique_id "aaBdCuA33x90V6yYHaj74QAAAUk"]
[Thu Feb 26 22:47:39.306551 2026] [:error] [pid 20419:tid 20432] [client 4.204.195.211:15977] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x7.php"] [unique_id "aaBdC-3DVDvMfTYYUBVucwAAAco"]
[Thu Feb 26 22:47:39.722551 2026] [:error] [pid 44444:tid 44450] [client 4.204.195.211:15823] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x7.php"] [unique_id "aaBdC22sMNmj-yekUk1d-wAAAgA"]
[Thu Feb 26 22:47:40.138532 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:15957] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thebe.php"] [unique_id "aaBdDG2sMNmj-yekUk1d_gAAAhE"]
[Thu Feb 26 22:47:40.547642 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:15814] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thebe.php"] [unique_id "aaBdDG2sMNmj-yekUk1eAgAAAg0"]
[Thu Feb 26 22:47:40.956611 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:15903] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thebe.php"] [unique_id "aaBdDAmK1w2kZvh5eLHZtwAAAIU"]
[Thu Feb 26 22:47:41.372175 2026] [:error] [pid 3883:tid 3907] [client 4.204.195.211:15810] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thebe.php"] [unique_id "aaBdDeA33x90V6yYHaj75AAAAVU"]
[Thu Feb 26 22:47:41.782403 2026] [:error] [pid 55051:tid 55069] [client 4.204.195.211:16029] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aaBdDQmK1w2kZvh5eLHZuwAAAI8"]
[Thu Feb 26 22:47:42.191657 2026] [:error] [pid 3883:tid 3888] [client 4.204.195.211:15757] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aaBdDuA33x90V6yYHaj76QAAAUI"]
[Thu Feb 26 22:47:42.602031 2026] [:error] [pid 3883:tid 3900] [client 4.204.195.211:16376] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aaBdDuA33x90V6yYHaj76wAAAU4"]
[Thu Feb 26 22:47:43.013721 2026] [:error] [pid 44444:tid 44464] [client 4.204.195.211:15835] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ddd.php"] [unique_id "aaBdD22sMNmj-yekUk1eCAAAAg4"]
[Thu Feb 26 22:47:43.427256 2026] [:error] [pid 44444:tid 44460] [client 4.204.195.211:15824] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaBdD22sMNmj-yekUk1eCQAAAgo"]
[Thu Feb 26 22:47:43.849415 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:15893] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaBdD22sMNmj-yekUk1eCwAAAgs"]
[Thu Feb 26 22:47:44.259258 2026] [:error] [pid 44444:tid 44472] [client 4.204.195.211:15816] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaBdEG2sMNmj-yekUk1eEAAAAhY"]
[Thu Feb 26 22:47:44.668661 2026] [:error] [pid 54991:tid 55031] [client 4.204.195.211:15879] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaBdEN4Zx-mJ8gbRB2gHvgAAAEs"]
[Thu Feb 26 22:47:45.077895 2026] [:error] [pid 55618:tid 55642] [client 4.204.195.211:15821] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aaBdER61Vrh12f_8oWQZFgAAARU"]
[Thu Feb 26 22:47:45.488325 2026] [:error] [pid 25311:tid 25314] [client 4.204.195.211:15784] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aaBdEdfdM__yZAgJFSvwgAAAAYA"]
[Thu Feb 26 22:47:45.913642 2026] [:error] [pid 25311:tid 25326] [client 4.204.195.211:15940] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aaBdEdfdM__yZAgJFSvwhgAAAYw"]
[Thu Feb 26 22:47:46.331147 2026] [:error] [pid 25311:tid 25336] [client 4.204.195.211:15815] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi.php"] [unique_id "aaBdEtfdM__yZAgJFSvwigAAAZY"]
[Thu Feb 26 22:47:46.746158 2026] [:error] [pid 25311:tid 25319] [client 4.204.195.211:15949] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aaBdEtfdM__yZAgJFSvwjgAAAYU"]
[Thu Feb 26 22:47:47.163421 2026] [:error] [pid 44444:tid 44457] [client 4.204.195.211:15899] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aaBdE22sMNmj-yekUk1eEgAAAgc"]
[Thu Feb 26 22:47:47.580747 2026] [:error] [pid 55051:tid 55074] [client 4.204.195.211:15822] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aaBdEwmK1w2kZvh5eLHZwgAAAJQ"]
[Thu Feb 26 22:47:47.991844 2026] [:error] [pid 55618:tid 55637] [client 4.204.195.211:15934] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "aaBdEx61Vrh12f_8oWQZGAAAARA"]
[Thu Feb 26 22:47:48.411557 2026] [:error] [pid 55618:tid 55644] [client 4.204.195.211:15995] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdFB61Vrh12f_8oWQZGQAAARc"]
[Thu Feb 26 22:47:48.821764 2026] [:error] [pid 55051:tid 55075] [client 4.204.195.211:15954] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdFAmK1w2kZvh5eLHZxQAAAJU"]
[Thu Feb 26 22:47:49.232300 2026] [:error] [pid 3883:tid 3902] [client 4.204.195.211:15910] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdFeA33x90V6yYHaj79AAAAVA"]
[Thu Feb 26 22:47:49.645405 2026] [:error] [pid 54991:tid 55038] [client 4.204.195.211:15966] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdFd4Zx-mJ8gbRB2gHyAAAAFI"]
[Thu Feb 26 22:47:50.062712 2026] [:error] [pid 54991:tid 55035] [client 4.204.195.211:15765] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdFt4Zx-mJ8gbRB2gHyQAAAE8"]
[Thu Feb 26 22:47:50.481108 2026] [:error] [pid 54991:tid 55037] [client 4.204.195.211:15922] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdFt4Zx-mJ8gbRB2gHzQAAAFE"]
[Thu Feb 26 22:47:50.899364 2026] [:error] [pid 3883:tid 3898] [client 4.204.195.211:15750] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdFuA33x90V6yYHaj7-gAAAUw"]
[Thu Feb 26 22:47:51.317515 2026] [:error] [pid 54990:tid 54994] [client 4.204.195.211:15991] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdF3tr2qmt_mBhH2wydwAAAAE"]
[Thu Feb 26 22:47:51.731087 2026] [:error] [pid 3883:tid 3900] [client 4.204.195.211:15753] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaBdF-A33x90V6yYHaj7_AAAAU4"]
[Thu Feb 26 22:47:52.149976 2026] [:error] [pid 55051:tid 55054] [client 4.204.195.211:16047] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaBdGAmK1w2kZvh5eLHZygAAAIA"]
[Thu Feb 26 22:47:52.573911 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:15887] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaBdGAmK1w2kZvh5eLHZzAAAAIU"]
[Thu Feb 26 22:47:52.983204 2026] [:error] [pid 44444:tid 44456] [client 4.204.195.211:15854] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaBdGG2sMNmj-yekUk1eFgAAAgY"]
[Thu Feb 26 22:47:53.399615 2026] [:error] [pid 44444:tid 44460] [client 4.204.195.211:15691] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBdGW2sMNmj-yekUk1eGgAAAgo"]
[Thu Feb 26 22:47:53.818944 2026] [:error] [pid 55051:tid 55061] [client 4.204.195.211:15897] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBdGQmK1w2kZvh5eLHZzgAAAIc"]
[Thu Feb 26 22:47:54.238706 2026] [:error] [pid 25311:tid 25323] [client 4.204.195.211:15857] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBdGtfdM__yZAgJFSvwlgAAAYk"]
[Thu Feb 26 22:47:54.647473 2026] [:error] [pid 3883:tid 3891] [client 4.204.195.211:15960] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaBdGuA33x90V6yYHaj7_wAAAUU"]
[Thu Feb 26 22:47:55.067734 2026] [:error] [pid 54991:tid 55035] [client 4.204.195.211:15819] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdG94Zx-mJ8gbRB2gH4QAAAE8"]
[Thu Feb 26 22:47:55.485330 2026] [:error] [pid 3883:tid 3909] [client 4.204.195.211:15828] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdG-A33x90V6yYHaj8AAAAAVc"]
[Thu Feb 26 22:47:55.895472 2026] [:error] [pid 3883:tid 3889] [client 4.204.195.211:15797] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdG-A33x90V6yYHaj8AwAAAUM"]
[Thu Feb 26 22:47:56.303563 2026] [:error] [pid 55618:tid 55638] [client 4.204.195.211:15920] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdHB61Vrh12f_8oWQZKAAAARE"]
[Thu Feb 26 22:47:56.724053 2026] [:error] [pid 55618:tid 55642] [client 4.204.195.211:15812] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdHB61Vrh12f_8oWQZLAAAARU"]
[Thu Feb 26 22:47:57.141528 2026] [:error] [pid 55618:tid 55621] [client 4.204.195.211:15833] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdHR61Vrh12f_8oWQZMQAAAQA"]
[Thu Feb 26 22:47:57.558342 2026] [:error] [pid 55618:tid 55622] [client 4.204.195.211:15746] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdHR61Vrh12f_8oWQZMwAAAQE"]
[Thu Feb 26 22:47:57.974597 2026] [:error] [pid 3883:tid 3893] [client 4.204.195.211:15876] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaBdHeA33x90V6yYHaj8BwAAAUc"]
[Thu Feb 26 22:47:58.392299 2026] [:error] [pid 55618:tid 55641] [client 4.204.195.211:15817] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaBdHh61Vrh12f_8oWQZOAAAARQ"]
[Thu Feb 26 22:47:58.814030 2026] [:error] [pid 55122:tid 55144] [client 4.204.195.211:15777] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaBdHoLiR0OfjFxvcN85-wAAANQ"]
[Thu Feb 26 22:47:59.228662 2026] [:error] [pid 54990:tid 54993] [client 4.204.195.211:15978] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaBdH3tr2qmt_mBhH2wyfQAAAAA"]
[Thu Feb 26 22:47:59.643801 2026] [:error] [pid 55051:tid 55063] [client 4.204.195.211:15818] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaBdHwmK1w2kZvh5eLHZ1AAAAIk"]
[Thu Feb 26 22:48:00.065308 2026] [:error] [pid 55618:tid 55638] [client 4.204.195.211:15762] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdIB61Vrh12f_8oWQZOgAAARE"]
[Thu Feb 26 22:48:00.480719 2026] [:error] [pid 55618:tid 55645] [client 4.204.195.211:15829] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdIB61Vrh12f_8oWQZOwAAARg"]
[Thu Feb 26 22:48:00.896946 2026] [:error] [pid 20419:tid 20423] [client 4.204.195.211:15855] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdIO3DVDvMfTYYUBVuegAAAcE"]
[Thu Feb 26 22:48:01.320621 2026] [:error] [pid 20419:tid 20441] [client 4.204.195.211:15930] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaBdIe3DVDvMfTYYUBVufAAAAdM"]
[Thu Feb 26 22:48:01.733035 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:15925] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaBdIe3DVDvMfTYYUBVugAAAAcQ"]
[Thu Feb 26 22:48:02.162536 2026] [:error] [pid 20419:tid 20446] [client 4.204.195.211:15996] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaBdIu3DVDvMfTYYUBVugQAAAdg"]
[Thu Feb 26 22:48:02.591477 2026] [:error] [pid 20419:tid 20427] [client 4.204.195.211:15840] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaBdIu3DVDvMfTYYUBVuhAAAAcU"]
[Thu Feb 26 22:48:03.011507 2026] [:error] [pid 20419:tid 20425] [client 4.204.195.211:15853] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaBdI-3DVDvMfTYYUBVuhQAAAcM"]
[Thu Feb 26 22:48:03.456226 2026] [:error] [pid 55618:tid 55642] [client 4.204.195.211:15811] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBdIx61Vrh12f_8oWQZPgAAARU"]
[Thu Feb 26 22:48:03.878815 2026] [:error] [pid 25311:tid 25332] [client 4.204.195.211:15973] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBdI9fdM__yZAgJFSvwnQAAAZI"]
[Thu Feb 26 22:48:04.290695 2026] [:error] [pid 44444:tid 44468] [client 4.204.195.211:15813] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBdJG2sMNmj-yekUk1eKQAAAhI"]
[Thu Feb 26 22:48:04.699821 2026] [:error] [pid 44444:tid 44458] [client 4.204.195.211:16213] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaBdJG2sMNmj-yekUk1eLQAAAgg"]
[Thu Feb 26 22:48:05.119450 2026] [:error] [pid 54991:tid 55022] [client 4.204.195.211:15805] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaBdJd4Zx-mJ8gbRB2gH6wAAAEI"]
[Thu Feb 26 22:48:05.535502 2026] [:error] [pid 55122:tid 55131] [client 4.204.195.211:15836] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaBdJYLiR0OfjFxvcN86BwAAAMc"]
[Thu Feb 26 22:48:05.948018 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:15926] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaBdJW2sMNmj-yekUk1eMQAAAg0"]
[Thu Feb 26 22:48:06.363065 2026] [:error] [pid 20419:tid 20431] [client 4.204.195.211:15747] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Feb 26 22:48:06.778032 2026] [:error] [pid 20419:tid 20439] [client 4.204.195.211:15747] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Feb 26 22:48:07.198035 2026] [:error] [pid 20419:tid 20442] [client 4.204.195.211:15747] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Thu Feb 26 22:48:07.406250 2026] [:error] [pid 20419:tid 20430] [client 4.204.195.211:15747] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Feb 26 22:48:07.612973 2026] [:error] [pid 20419:tid 20438] [client 4.204.195.211:15747] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Thu Feb 26 22:48:07.820298 2026] [:error] [pid 20419:tid 20435] [client 4.204.195.211:15747] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Feb 26 22:48:08.436899 2026] [:error] [pid 20419:tid 20444] [client 4.204.195.211:15747] [client 4.204.195.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaBdKO3DVDvMfTYYUBVulgAAAdY"]
[Thu Feb 26 22:48:08.853264 2026] [:error] [pid 20419:tid 20445] [client 4.204.195.211:15951] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Thu Feb 26 22:48:09.058107 2026] [:error] [pid 20419:tid 20434] [client 4.204.195.211:15951] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aaBdKe3DVDvMfTYYUBVunAAAAcw"]
[Thu Feb 26 22:48:09.469669 2026] [:error] [pid 44444:tid 44459] [client 4.204.195.211:15931] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aaBdKW2sMNmj-yekUk1ePAAAAgk"]
[Thu Feb 26 22:48:09.941518 2026] [:error] [pid 25311:tid 25337] [client 4.204.195.211:15820] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aaBdKdfdM__yZAgJFSvwowAAAZc"]
[Thu Feb 26 22:48:10.357424 2026] [:error] [pid 25311:tid 25338] [client 4.204.195.211:15885] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jane.php"] [unique_id "aaBdKtfdM__yZAgJFSvwpQAAAZg"]
[Thu Feb 26 22:48:10.800480 2026] [:error] [pid 54991:tid 55035] [client 4.204.195.211:16173] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaBdKt4Zx-mJ8gbRB2gH_AAAAE8"]
[Thu Feb 26 22:48:11.235989 2026] [:error] [pid 55051:tid 55058] [client 4.204.195.211:16147] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaBdKwmK1w2kZvh5eLHZ3QAAAIQ"]
[Thu Feb 26 22:48:11.659931 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:15861] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaBdK-3DVDvMfTYYUBVupQAAAcQ"]
[Thu Feb 26 22:48:12.129516 2026] [:error] [pid 55618:tid 55639] [client 4.204.195.211:15846] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaBdLB61Vrh12f_8oWQZRwAAARI"]
[Thu Feb 26 22:48:12.558220 2026] [:error] [pid 3883:tid 3907] [client 4.204.195.211:15786] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBdLOA33x90V6yYHaj8HAAAAVU"]
[Thu Feb 26 22:48:13.114963 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:15751] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBdLW2sMNmj-yekUk1eRAAAAg0"]
[Thu Feb 26 22:48:13.535777 2026] [:error] [pid 55618:tid 55630] [client 4.204.195.211:15852] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBdLR61Vrh12f_8oWQZSgAAAQk"]
[Thu Feb 26 22:48:13.952204 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:15694] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa.php"] [unique_id "aaBdLW2sMNmj-yekUk1eSgAAAhM"]
[Thu Feb 26 22:48:14.375539 2026] [:error] [pid 25311:tid 25316] [client 4.204.195.211:15912] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBdLtfdM__yZAgJFSvwsAAAAYI"]
[Thu Feb 26 22:48:14.792055 2026] [:error] [pid 55122:tid 55133] [client 4.204.195.211:15745] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBdLoLiR0OfjFxvcN86CwAAAMk"]
[Thu Feb 26 22:48:15.314080 2026] [:error] [pid 3883:tid 3888] [client 4.204.195.211:16271] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBdL-A33x90V6yYHaj8IQAAAUI"]
[Thu Feb 26 22:48:15.730176 2026] [:error] [pid 44444:tid 44467] [client 4.204.195.211:16382] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaBdL22sMNmj-yekUk1eVgAAAhE"]
[Thu Feb 26 22:48:16.154758 2026] [:error] [pid 3883:tid 3910] [client 4.204.195.211:16330] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaBdMOA33x90V6yYHaj8JwAAAVg"]
[Thu Feb 26 22:48:16.576933 2026] [:error] [pid 54991:tid 55038] [client 4.204.195.211:16371] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaBdMN4Zx-mJ8gbRB2gH_gAAAFI"]
[Thu Feb 26 22:48:16.999102 2026] [:error] [pid 3883:tid 3891] [client 4.204.195.211:15882] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaBdMOA33x90V6yYHaj8KQAAAUU"]
[Thu Feb 26 22:48:17.447321 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:16365] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaBdMQmK1w2kZvh5eLHZ3wAAAIU"]
[Thu Feb 26 22:48:17.858840 2026] [:error] [pid 54991:tid 55025] [client 4.204.195.211:15687] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaBdMd4Zx-mJ8gbRB2gH_wAAAEU"]
[Thu Feb 26 22:48:18.268814 2026] [:error] [pid 54991:tid 55024] [client 4.204.195.211:16260] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaBdMt4Zx-mJ8gbRB2gIAAAAAEQ"]
[Thu Feb 26 22:48:18.685024 2026] [:error] [pid 54991:tid 55032] [client 4.204.195.211:15935] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaBdMt4Zx-mJ8gbRB2gIAwAAAEw"]
[Thu Feb 26 22:48:19.103284 2026] [:error] [pid 3883:tid 3889] [client 4.204.195.211:15825] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaBdM-A33x90V6yYHaj8LQAAAUM"]
[Thu Feb 26 22:48:19.525110 2026] [:error] [pid 54991:tid 55036] [client 4.204.195.211:15850] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaBdM94Zx-mJ8gbRB2gICgAAAFA"]
[Thu Feb 26 22:48:19.936297 2026] [:error] [pid 54990:tid 55016] [client 4.204.195.211:15916] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaBdM3tr2qmt_mBhH2wyhAAAABc"]
[Thu Feb 26 22:48:20.349844 2026] [:error] [pid 55051:tid 55076] [client 4.204.195.211:16332] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaBdNAmK1w2kZvh5eLHZ6QAAAJY"]
[Thu Feb 26 22:48:20.762144 2026] [:error] [pid 55051:tid 55078] [client 4.204.195.211:16323] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaBdNAmK1w2kZvh5eLHZ7QAAAJg"]
[Thu Feb 26 22:48:21.170336 2026] [:error] [pid 55051:tid 55054] [client 4.204.195.211:15870] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aaBdNQmK1w2kZvh5eLHZ7wAAAIA"]
[Thu Feb 26 22:48:21.579758 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16266] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aaBdNQmK1w2kZvh5eLHZ8QAAAIY"]
[Thu Feb 26 22:48:21.989744 2026] [:error] [pid 55618:tid 55643] [client 4.204.195.211:15908] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aaBdNR61Vrh12f_8oWQZTgAAARY"]
[Thu Feb 26 22:48:22.413756 2026] [:error] [pid 25311:tid 25331] [client 4.204.195.211:15868] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/about.php"] [unique_id "aaBdNtfdM__yZAgJFSvwtgAAAZE"]
[Thu Feb 26 22:48:22.832043 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:15695] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaBdNm2sMNmj-yekUk1ebgAAAhA"]
[Thu Feb 26 22:48:23.254711 2026] [:error] [pid 3883:tid 3904] [client 4.204.195.211:15932] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaBdN-A33x90V6yYHaj8MgAAAVI"]
[Thu Feb 26 22:48:23.675166 2026] [:error] [pid 44444:tid 44455] [client 4.204.195.211:15759] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaBdN22sMNmj-yekUk1ecAAAAgU"]
[Thu Feb 26 22:48:24.086792 2026] [:error] [pid 44444:tid 44460] [client 4.204.195.211:16350] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaBdOG2sMNmj-yekUk1edAAAAgo"]
[Thu Feb 26 22:48:24.504735 2026] [:error] [pid 44444:tid 44462] [client 4.204.195.211:16294] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaBdOG2sMNmj-yekUk1eeQAAAgw"]
[Thu Feb 26 22:48:24.938398 2026] [:error] [pid 54991:tid 55040] [client 4.204.195.211:16381] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaBdON4Zx-mJ8gbRB2gIFgAAAFQ"]
[Thu Feb 26 22:48:25.359624 2026] [:error] [pid 25311:tid 25338] [client 4.204.195.211:15759] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaBdOdfdM__yZAgJFSvwuQAAAZg"]
[Thu Feb 26 22:48:25.769468 2026] [:error] [pid 3883:tid 3888] [client 4.204.195.211:16272] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaBdOeA33x90V6yYHaj8OAAAAUI"]
[Thu Feb 26 22:48:26.185192 2026] [:error] [pid 54990:tid 55010] [client 4.204.195.211:16364] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aaBdOntr2qmt_mBhH2wyhgAAABE"]
[Thu Feb 26 22:48:26.600724 2026] [:error] [pid 54991:tid 55020] [client 4.204.195.211:15799] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aaBdOt4Zx-mJ8gbRB2gIHgAAAEA"]
[Thu Feb 26 22:48:27.018615 2026] [:error] [pid 44444:tid 44469] [client 4.204.195.211:15849] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aaBdO22sMNmj-yekUk1egQAAAhM"]
[Thu Feb 26 22:48:27.437517 2026] [:error] [pid 54990:tid 55009] [client 4.204.195.211:16377] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class-t.api.php"] [unique_id "aaBdO3tr2qmt_mBhH2wyhwAAABA"]
[Thu Feb 26 22:48:27.858162 2026] [:error] [pid 54990:tid 54999] [client 4.204.195.211:15698] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBdO3tr2qmt_mBhH2wyiAAAAAY"]
[Thu Feb 26 22:48:28.274079 2026] [:error] [pid 54990:tid 55011] [client 4.204.195.211:16269] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBdPHtr2qmt_mBhH2wyiQAAABI"]
[Thu Feb 26 22:48:28.688724 2026] [:error] [pid 54991:tid 55032] [client 4.204.195.211:16354] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBdPN4Zx-mJ8gbRB2gIKQAAAEw"]
[Thu Feb 26 22:48:29.105689 2026] [:error] [pid 3883:tid 3905] [client 4.204.195.211:15911] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBdPeA33x90V6yYHaj8QgAAAVM"]
[Thu Feb 26 22:48:29.515018 2026] [:error] [pid 54990:tid 54997] [client 4.204.195.211:16372] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBdPXtr2qmt_mBhH2wyjQAAAAQ"]
[Thu Feb 26 22:48:29.930486 2026] [:error] [pid 54990:tid 55008] [client 4.204.195.211:16331] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBdPXtr2qmt_mBhH2wykgAAAA8"]
[Thu Feb 26 22:48:30.345816 2026] [:error] [pid 3883:tid 3899] [client 4.204.195.211:16273] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBdPuA33x90V6yYHaj8QwAAAU0"]
[Thu Feb 26 22:48:30.758956 2026] [:error] [pid 44444:tid 44470] [client 4.204.195.211:16217] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBdPm2sMNmj-yekUk1eiAAAAhQ"]
[Thu Feb 26 22:48:31.173573 2026] [:error] [pid 44444:tid 44452] [client 4.204.195.211:15760] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaBdP22sMNmj-yekUk1eigAAAgI"]
[Thu Feb 26 22:48:31.583134 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:16235] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaBdP22sMNmj-yekUk1ejgAAAg0"]
[Thu Feb 26 22:48:31.991463 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16355] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaBdP94Zx-mJ8gbRB2gINgAAAFc"]
[Thu Feb 26 22:48:32.414459 2026] [:error] [pid 3883:tid 3897] [client 4.204.195.211:15832] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaBdQOA33x90V6yYHaj8RQAAAUs"]
[Thu Feb 26 22:48:32.825469 2026] [:error] [pid 54991:tid 55035] [client 4.204.195.211:15933] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBdQN4Zx-mJ8gbRB2gIOAAAAE8"]
[Thu Feb 26 22:48:33.233026 2026] [:error] [pid 54991:tid 55041] [client 4.204.195.211:16342] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBdQd4Zx-mJ8gbRB2gIOgAAAFU"]
[Thu Feb 26 22:48:33.642043 2026] [:error] [pid 20419:tid 20435] [client 4.204.195.211:16351] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBdQe3DVDvMfTYYUBVusAAAAc0"]
[Thu Feb 26 22:48:34.050893 2026] [:error] [pid 55051:tid 55068] [client 4.204.195.211:15867] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBdQgmK1w2kZvh5eLHaAAAAAI4"]
[Thu Feb 26 22:48:34.459193 2026] [:error] [pid 20419:tid 20440] [client 4.204.195.211:16310] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBdQu3DVDvMfTYYUBVusgAAAdI"]
[Thu Feb 26 22:48:34.867117 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:16280] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBdQu3DVDvMfTYYUBVutAAAAcQ"]
[Thu Feb 26 22:48:35.278088 2026] [:error] [pid 3883:tid 3898] [client 4.204.195.211:15689] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBdQ-A33x90V6yYHaj8UAAAAUw"]
[Thu Feb 26 22:48:35.705466 2026] [:error] [pid 55051:tid 55060] [client 4.204.195.211:16239] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBdQwmK1w2kZvh5eLHaBQAAAIY"]
[Thu Feb 26 22:48:36.115661 2026] [:error] [pid 55051:tid 55069] [client 4.204.195.211:16320] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aaBdRAmK1w2kZvh5eLHaCAAAAI8"]
[Thu Feb 26 22:48:36.527218 2026] [:error] [pid 20419:tid 20436] [client 4.204.195.211:16259] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aaBdRO3DVDvMfTYYUBVuugAAAc4"]
[Thu Feb 26 22:48:36.948504 2026] [:error] [pid 54991:tid 55023] [client 4.204.195.211:16274] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aaBdRN4Zx-mJ8gbRB2gIRAAAAEM"]
[Thu Feb 26 22:48:37.365832 2026] [:error] [pid 20419:tid 20427] [client 4.204.195.211:16363] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/admin.php"] [unique_id "aaBdRe3DVDvMfTYYUBVuvAAAAcU"]
[Thu Feb 26 22:48:37.783170 2026] [:error] [pid 55122:tid 55126] [client 4.204.195.211:16380] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaBdRYLiR0OfjFxvcN86DAAAAMI"]
[Thu Feb 26 22:48:38.202847 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16290] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaBdRt4Zx-mJ8gbRB2gIRwAAAFc"]
[Thu Feb 26 22:48:38.611594 2026] [:error] [pid 44444:tid 44463] [client 4.204.195.211:16327] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaBdRm2sMNmj-yekUk1enAAAAg0"]
[Thu Feb 26 22:48:39.023217 2026] [:error] [pid 54990:tid 55010] [client 4.204.195.211:15755] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaBdR3tr2qmt_mBhH2wyuAAAABE"]
[Thu Feb 26 22:48:39.434304 2026] [:error] [pid 55122:tid 55136] [client 4.204.195.211:16343] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBdR4LiR0OfjFxvcN86EAAAAMw"]
[Thu Feb 26 22:48:39.843488 2026] [:error] [pid 54991:tid 55026] [client 4.204.195.211:16333] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBdR94Zx-mJ8gbRB2gIUAAAAEY"]
[Thu Feb 26 22:48:40.257537 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:15789] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBdSG2sMNmj-yekUk1enwAAAgM"]
[Thu Feb 26 22:48:40.679088 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16261] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBdSN4Zx-mJ8gbRB2gIWQAAAFc"]
[Thu Feb 26 22:48:41.094804 2026] [:error] [pid 54991:tid 55041] [client 4.204.195.211:16265] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBdSd4Zx-mJ8gbRB2gIXwAAAFU"]
[Thu Feb 26 22:48:41.514765 2026] [:error] [pid 54991:tid 55040] [client 4.204.195.211:16379] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBdSd4Zx-mJ8gbRB2gIZQAAAFQ"]
[Thu Feb 26 22:48:41.930327 2026] [:error] [pid 54991:tid 55021] [client 4.204.195.211:16256] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBdSd4Zx-mJ8gbRB2gIaQAAAEE"]
[Thu Feb 26 22:48:42.338946 2026] [:error] [pid 55618:tid 55636] [client 4.204.195.211:16362] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaBdSh61Vrh12f_8oWQZYQAAAQ8"]
[Thu Feb 26 22:48:42.756787 2026] [:error] [pid 44444:tid 44466] [client 4.204.195.211:16344] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBdSm2sMNmj-yekUk1eoAAAAhA"]
[Thu Feb 26 22:48:43.175465 2026] [:error] [pid 20419:tid 20442] [client 4.204.195.211:16358] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBdS-3DVDvMfTYYUBVuwQAAAdQ"]
[Thu Feb 26 22:48:43.584552 2026] [:error] [pid 55618:tid 55632] [client 4.204.195.211:15837] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBdSx61Vrh12f_8oWQZZgAAAQs"]
[Thu Feb 26 22:48:44.008004 2026] [:error] [pid 20419:tid 20438] [client 4.204.195.211:15838] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaBdTO3DVDvMfTYYUBVuwwAAAdA"]
[Thu Feb 26 22:48:44.422715 2026] [:error] [pid 54991:tid 55025] [client 4.204.195.211:16293] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aaBdTN4Zx-mJ8gbRB2gIcAAAAEU"]
[Thu Feb 26 22:48:44.831806 2026] [:error] [pid 55122:tid 55137] [client 4.204.195.211:16375] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aaBdTILiR0OfjFxvcN86GQAAAM0"]
[Thu Feb 26 22:48:45.239657 2026] [:error] [pid 55122:tid 55141] [client 4.204.195.211:15700] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aaBdTYLiR0OfjFxvcN86GwAAANE"]
[Thu Feb 26 22:48:45.658435 2026] [:error] [pid 55618:tid 55631] [client 4.204.195.211:15863] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/X7x.php"] [unique_id "aaBdTR61Vrh12f_8oWQZdAAAAQo"]
[Thu Feb 26 22:48:46.079099 2026] [:error] [pid 55618:tid 55640] [client 4.204.195.211:15802] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaBdTh61Vrh12f_8oWQZdgAAARM"]
[Thu Feb 26 22:48:46.487238 2026] [:error] [pid 55618:tid 55627] [client 4.204.195.211:16170] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaBdTh61Vrh12f_8oWQZeQAAAQY"]
[Thu Feb 26 22:48:46.896664 2026] [:error] [pid 54990:tid 55015] [client 4.204.195.211:15898] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaBdTntr2qmt_mBhH2wy2AAAABY"]
[Thu Feb 26 22:48:47.314525 2026] [:error] [pid 20419:tid 20435] [client 4.204.195.211:16132] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaBdT-3DVDvMfTYYUBVuxAAAAc0"]
[Thu Feb 26 22:48:47.729846 2026] [:error] [pid 54990:tid 55009] [client 4.204.195.211:15752] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaBdT3tr2qmt_mBhH2wy2QAAABA"]
[Thu Feb 26 22:48:48.146168 2026] [:error] [pid 54990:tid 55008] [client 4.204.195.211:16319] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaBdUHtr2qmt_mBhH2wy2gAAAA8"]
[Thu Feb 26 22:48:48.560045 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16295] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaBdUN4Zx-mJ8gbRB2gIewAAAFc"]
[Thu Feb 26 22:48:48.976556 2026] [:error] [pid 54991:tid 55024] [client 4.204.195.211:15790] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaBdUN4Zx-mJ8gbRB2gIfAAAAEQ"]
[Thu Feb 26 22:48:49.401784 2026] [:error] [pid 55618:tid 55621] [client 4.204.195.211:15792] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaBdUR61Vrh12f_8oWQZggAAAQA"]
[Thu Feb 26 22:48:49.815162 2026] [:error] [pid 55051:tid 55070] [client 4.204.195.211:15815] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaBdUQmK1w2kZvh5eLHaEQAAAJA"]
[Thu Feb 26 22:48:50.231498 2026] [:error] [pid 55051:tid 55058] [client 4.204.195.211:15699] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaBdUgmK1w2kZvh5eLHaFQAAAIQ"]
[Thu Feb 26 22:48:50.652399 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:16322] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaBdUgmK1w2kZvh5eLHaGAAAAIU"]
[Thu Feb 26 22:48:51.079031 2026] [:error] [pid 54990:tid 55012] [client 4.204.195.211:15866] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admins.php"] [unique_id "aaBdU3tr2qmt_mBhH2wy3gAAABM"]
[Thu Feb 26 22:48:51.506574 2026] [:error] [pid 55618:tid 55623] [client 4.204.195.211:15794] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admins.php"] [unique_id "aaBdUx61Vrh12f_8oWQZhAAAAQI"]
[Thu Feb 26 22:48:51.919773 2026] [:error] [pid 3883:tid 3905] [client 4.204.195.211:16349] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admins.php"] [unique_id "aaBdU-A33x90V6yYHaj8agAAAVM"]
[Thu Feb 26 22:48:52.329746 2026] [:error] [pid 55051:tid 55074] [client 4.204.195.211:16361] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admins.php"] [unique_id "aaBdVAmK1w2kZvh5eLHaIgAAAJQ"]
[Thu Feb 26 22:48:52.739287 2026] [:error] [pid 55051:tid 55071] [client 4.204.195.211:15865] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBdVAmK1w2kZvh5eLHaJQAAAJE"]
[Thu Feb 26 22:48:53.149700 2026] [:error] [pid 20419:tid 20440] [client 4.204.195.211:15771] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBdVe3DVDvMfTYYUBVuxgAAAdI"]
[Thu Feb 26 22:48:53.558197 2026] [:error] [pid 55051:tid 55077] [client 4.204.195.211:16370] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBdVQmK1w2kZvh5eLHaLgAAAJc"]
[Thu Feb 26 22:48:53.971840 2026] [:error] [pid 20419:tid 20422] [client 4.204.195.211:15758] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaBdVe3DVDvMfTYYUBVuywAAAcA"]
[Thu Feb 26 22:48:54.389244 2026] [:error] [pid 55051:tid 55074] [client 4.204.195.211:15906] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.php"] [unique_id "aaBdVgmK1w2kZvh5eLHaMAAAAJQ"]
[Thu Feb 26 22:48:54.806673 2026] [:error] [pid 55618:tid 55631] [client 4.204.195.211:15800] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.php"] [unique_id "aaBdVh61Vrh12f_8oWQZhwAAAQo"]
[Thu Feb 26 22:48:55.241926 2026] [:error] [pid 3883:tid 3910] [client 4.204.195.211:16128] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.php"] [unique_id "aaBdV-A33x90V6yYHaj8cQAAAVg"]
[Thu Feb 26 22:48:55.663659 2026] [:error] [pid 55051:tid 55073] [client 4.204.195.211:15770] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.php"] [unique_id "aaBdVwmK1w2kZvh5eLHaMQAAAJM"]
[Thu Feb 26 22:48:56.082230 2026] [:error] [pid 54990:tid 55016] [client 4.204.195.211:16292] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaBdWHtr2qmt_mBhH2wy4wAAABc"]
[Thu Feb 26 22:48:56.496546 2026] [:error] [pid 3883:tid 3901] [client 4.204.195.211:16196] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaBdWOA33x90V6yYHaj8eQAAAU8"]
[Thu Feb 26 22:48:56.913333 2026] [:error] [pid 55051:tid 55068] [client 4.204.195.211:15851] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaBdWAmK1w2kZvh5eLHaNQAAAI4"]
[Thu Feb 26 22:48:57.323027 2026] [:error] [pid 3883:tid 3886] [client 4.204.195.211:16334] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaBdWeA33x90V6yYHaj8gwAAAUA"]
[Thu Feb 26 22:48:57.736224 2026] [:error] [pid 54991:tid 55043] [client 4.204.195.211:16308] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdWd4Zx-mJ8gbRB2gIiwAAAFc"]
[Thu Feb 26 22:48:58.150228 2026] [:error] [pid 55051:tid 55059] [client 4.204.195.211:16341] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdWgmK1w2kZvh5eLHaNgAAAIU"]
[Thu Feb 26 22:48:58.562539 2026] [:error] [pid 3883:tid 3910] [client 4.204.195.211:15781] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdWuA33x90V6yYHaj8iQAAAVg"]
[Thu Feb 26 22:48:58.978913 2026] [:error] [pid 54990:tid 54994] [client 4.204.195.211:16347] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaBdWntr2qmt_mBhH2wy6QAAAAE"]
[Thu Feb 26 22:48:59.394772 2026] [:error] [pid 44444:tid 44453] [client 4.204.195.211:16195] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaBdW22sMNmj-yekUk1esAAAAgM"]
[Thu Feb 26 22:48:59.804447 2026] [:error] [pid 44444:tid 44450] [client 4.204.195.211:16359] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaBdW22sMNmj-yekUk1etgAAAgA"]
[Thu Feb 26 22:49:00.220615 2026] [:error] [pid 44444:tid 44461] [client 4.204.195.211:16263] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaBdXG2sMNmj-yekUk1euQAAAgs"]
[Thu Feb 26 22:49:00.631792 2026] [:error] [pid 25311:tid 25316] [client 4.204.195.211:15768] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaBdXNfdM__yZAgJFSvwwwAAAYI"]
[Thu Feb 26 22:49:01.046463 2026] [:error] [pid 54991:tid 55033] [client 4.204.195.211:16356] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaBdXd4Zx-mJ8gbRB2gIkgAAAE0"]
[Thu Feb 26 22:49:01.463537 2026] [:error] [pid 54990:tid 54997] [client 4.204.195.211:15913] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaBdXXtr2qmt_mBhH2wy6wAAAAQ"]
[Thu Feb 26 22:49:01.885452 2026] [:error] [pid 54990:tid 55000] [client 4.204.195.211:16315] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaBdXXtr2qmt_mBhH2wy7AAAAAc"]
[Thu Feb 26 22:49:02.308496 2026] [:error] [pid 54990:tid 55001] [client 4.204.195.211:16276] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaBdXntr2qmt_mBhH2wy7gAAAAg"]
[Thu Feb 26 22:49:02.731856 2026] [:error] [pid 55051:tid 55068] [client 4.204.195.211:16311] [client 4.204.195.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaBdXgmK1w2kZvh5eLHaRQAAAI4"]
[Thu Feb 26 22:49:03.150323 2026] [:error] [pid 55051:tid 55057] [client 4.204.195.211:15787] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aaBdXwmK1w2kZvh5eLHaSQAAAIM"]
[Thu Feb 26 22:49:03.564153 2026] [:error] [pid 55051:tid 55072] [client 4.204.195.211:15871] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aaBdXwmK1w2kZvh5eLHaTQAAAJI"]
[Thu Feb 26 22:49:03.992603 2026] [:error] [pid 54991:tid 55042] [client 4.204.195.211:16192] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aaBdX94Zx-mJ8gbRB2gInQAAAFY"]
[Thu Feb 26 22:49:04.409755 2026] [:error] [pid 55618:tid 55642] [client 4.204.195.211:15756] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jsond.php"] [unique_id "aaBdYB61Vrh12f_8oWQZjgAAARU"]
[Thu Feb 26 22:49:04.818104 2026] [:error] [pid 44444:tid 44471] [client 4.204.195.211:15826] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaBdYG2sMNmj-yekUk1evwAAAhU"]
[Thu Feb 26 22:49:05.233015 2026] [:error] [pid 25311:tid 25322] [client 4.204.195.211:16198] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaBdYdfdM__yZAgJFSvwyAAAAYg"]
[Thu Feb 26 22:49:05.654507 2026] [:error] [pid 25311:tid 25325] [client 4.204.195.211:16270] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaBdYdfdM__yZAgJFSvwzAAAAYs"]
[Thu Feb 26 22:49:06.069693 2026] [:error] [pid 20419:tid 20426] [client 4.204.195.211:16383] [client 4.204.195.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaBdYu3DVDvMfTYYUBVu2wAAAcQ"]
[Thu Feb 26 23:27:49.867101 2026] [:error] [pid 55051:tid 55055] [client 65.108.125.120:25728] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aaBmdQmK1w2kZvh5eLHvlwAAAIE"]
[Thu Feb 26 23:27:51.861530 2026] [:error] [pid 55051:tid 55070] [client 65.108.125.120:25738] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aaBmdwmK1w2kZvh5eLHvmgAAAJA"]
[Thu Feb 26 23:27:53.765954 2026] [:error] [pid 55051:tid 55071] [client 65.108.125.120:25742] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaBmeQmK1w2kZvh5eLHvnQAAAJE"]
[Fri Feb 27 01:22:39.947512 2026] [:error] [pid 18831:tid 18932] [client 54.37.252.118:49108] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaCBX_5KHTHUIuWRG2bFVQAAAFM"]
[Fri Feb 27 01:22:41.821188 2026] [:error] [pid 20059:tid 20122] [client 54.37.252.118:49112] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaCBYZZBS5wIa_Nsqsj9IQAAAdQ"]
[Fri Feb 27 01:22:44.000715 2026] [:error] [pid 18843:tid 18958] [client 54.37.252.118:49126] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaCBYyuD2bhSYSowPs34ywAAARI"]
[Fri Feb 27 01:27:18.643993 2026] [:error] [pid 20059:tid 20112] [client 54.37.252.118:55704] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaCCdpZBS5wIa_NsqsgBJgAAAco"]
[Fri Feb 27 01:27:20.706361 2026] [:error] [pid 20059:tid 20112] [client 54.37.252.118:37074] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaCCeJZBS5wIa_NsqsgBNwAAAco"]
[Fri Feb 27 01:27:23.428715 2026] [:error] [pid 19020:tid 19045] [client 54.37.252.118:37090] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaCCe7N3kp7wL6QzPnUd_gAAAVc"]
[Fri Feb 27 01:52:24.571407 2026] [:error] [pid 19020:tid 19039] [client 62.84.185.67:52982] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaCIWLN3kp7wL6QzPnUrhgAAAVE"]
[Fri Feb 27 01:52:26.830276 2026] [:error] [pid 20059:tid 20103] [client 62.84.185.67:29432] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaCIWpZBS5wIa_NsqsgWKQAAAcE"]
[Fri Feb 27 01:52:28.947959 2026] [:error] [pid 19020:tid 19030] [client 62.84.185.67:29442] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaCIXLN3kp7wL6QzPnUrjgAAAUg"]
[Fri Feb 27 01:52:31.124741 2026] [:error] [pid 19020:tid 19026] [client 62.84.185.67:29452] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaCIX7N3kp7wL6QzPnUrmgAAAUQ"]
[Fri Feb 27 01:52:33.215935 2026] [:error] [pid 18818:tid 18896] [client 62.84.185.67:29460] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaCIYRhPgqk2SeS_W83GWgAAAAw"]
[Fri Feb 27 01:52:35.249522 2026] [:error] [pid 20059:tid 20107] [client 62.84.185.67:29474] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaCIY5ZBS5wIa_NsqsgWTQAAAcU"]
[Fri Feb 27 01:52:37.491022 2026] [:error] [pid 18831:tid 18935] [client 62.84.185.67:42278] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaCIZf5KHTHUIuWRG2bPSwAAAFY"]
[Fri Feb 27 01:52:39.580581 2026] [:error] [pid 20059:tid 20118] [client 62.84.185.67:42280] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaCIZ5ZBS5wIa_NsqsgWWQAAAdA"]
[Fri Feb 27 01:52:41.623269 2026] [:error] [pid 19020:tid 19035] [client 62.84.185.67:42284] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaCIabN3kp7wL6QzPnUrwAAAAU0"]
[Fri Feb 27 01:52:43.733652 2026] [:error] [pid 19020:tid 19041] [client 62.84.185.67:42298] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaCIa7N3kp7wL6QzPnUrwwAAAVM"]
[Fri Feb 27 01:52:45.792375 2026] [:error] [pid 20059:tid 20111] [client 62.84.185.67:20596] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaCIbZZBS5wIa_NsqsgWbAAAAck"]
[Fri Feb 27 01:52:47.800927 2026] [:error] [pid 18831:tid 18923] [client 62.84.185.67:20612] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaCIb_5KHTHUIuWRG2bPVAAAAEo"]
[Fri Feb 27 01:52:49.991435 2026] [:error] [pid 18818:tid 18898] [client 62.84.185.67:20628] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaCIcRhPgqk2SeS_W83GZgAAAA4"]
[Fri Feb 27 01:52:52.268268 2026] [:error] [pid 19020:tid 19038] [client 62.84.185.67:20634] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaCIdLN3kp7wL6QzPnUr2gAAAVA"]
[Fri Feb 27 01:52:54.486645 2026] [:error] [pid 20059:tid 20108] [client 62.84.185.67:20636] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaCIdpZBS5wIa_NsqsgWiAAAAcY"]
[Fri Feb 27 01:52:56.590878 2026] [:error] [pid 18818:tid 18905] [client 62.84.185.67:27356] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaCIeBhPgqk2SeS_W83GagAAABU"]
[Fri Feb 27 01:52:58.681618 2026] [:error] [pid 20059:tid 20116] [client 62.84.185.67:27368] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaCIepZBS5wIa_NsqsgWlAAAAc4"]
[Fri Feb 27 01:53:00.980556 2026] [:error] [pid 20059:tid 20125] [client 62.84.185.67:27378] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aaCIfJZBS5wIa_NsqsgWnQAAAdc"]
[Fri Feb 27 01:53:03.204999 2026] [:error] [pid 20059:tid 20118] [client 62.84.185.67:27394] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaCIf5ZBS5wIa_NsqsgWowAAAdA"]
[Fri Feb 27 01:53:05.214651 2026] [:error] [pid 20059:tid 20111] [client 62.84.185.67:27404] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaCIgZZBS5wIa_NsqsgWqgAAAck"]
[Fri Feb 27 01:53:07.117912 2026] [:error] [pid 19020:tid 19041] [client 62.84.185.67:9332] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaCIg7N3kp7wL6QzPnUsDwAAAVM"]
[Fri Feb 27 01:53:09.090367 2026] [:error] [pid 20059:tid 20118] [client 62.84.185.67:9336] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaCIhZZBS5wIa_NsqsgWsQAAAdA"]
[Fri Feb 27 01:53:11.287930 2026] [:error] [pid 18831:tid 18929] [client 62.84.185.67:9340] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaCIh_5KHTHUIuWRG2bPiwAAAFA"]
[Fri Feb 27 01:53:13.347889 2026] [:error] [pid 18831:tid 18928] [client 62.84.185.67:9348] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaCIif5KHTHUIuWRG2bPjwAAAE8"]
[Fri Feb 27 01:53:15.684232 2026] [:error] [pid 18843:tid 18946] [client 62.84.185.67:9354] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaCIiyuD2bhSYSowPs0FPgAAAQY"]
[Fri Feb 27 01:53:18.100404 2026] [:error] [pid 18831:tid 18932] [client 62.84.185.67:13624] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aaCIjv5KHTHUIuWRG2bPkgAAAFM"]
[Fri Feb 27 01:53:20.617809 2026] [:error] [pid 19020:tid 19037] [client 62.84.185.67:13630] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaCIkLN3kp7wL6QzPnUsLAAAAU8"]
[Fri Feb 27 01:53:45.818523 2026] [:error] [pid 20059:tid 20114] [client 62.84.185.67:13572] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aaCIqZZBS5wIa_NsqsgXTQAAAcw"]
[Fri Feb 27 01:53:47.886516 2026] [:error] [pid 18831:tid 18916] [client 62.84.185.67:13582] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aaCIq_5KHTHUIuWRG2bPrgAAAEM"]
[Fri Feb 27 01:53:49.987533 2026] [:error] [pid 19020:tid 19046] [client 62.84.185.67:13584] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aaCIrbN3kp7wL6QzPnUscAAAAVg"]
[Fri Feb 27 01:53:52.040023 2026] [:error] [pid 18818:tid 18896] [client 62.84.185.67:13598] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaCIsBhPgqk2SeS_W83GnAAAAAw"]
[Fri Feb 27 01:53:54.191784 2026] [:error] [pid 20059:tid 20118] [client 62.84.185.67:13610] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aaCIspZBS5wIa_NsqsgXaAAAAdA"]
[Fri Feb 27 01:53:56.393122 2026] [:error] [pid 18818:tid 18893] [client 62.84.185.67:27982] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaCItBhPgqk2SeS_W83GrQAAAAk"]
[Fri Feb 27 01:53:58.831924 2026] [:error] [pid 18831:tid 18928] [client 62.84.185.67:27992] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaCItv5KHTHUIuWRG2bPuQAAAE8"]
[Fri Feb 27 01:54:00.972416 2026] [:error] [pid 18831:tid 18916] [client 62.84.185.67:28000] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaCIuP5KHTHUIuWRG2bPuwAAAEM"]
[Fri Feb 27 01:54:02.995063 2026] [:error] [pid 18843:tid 18960] [client 62.84.185.67:28014] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaCIuiuD2bhSYSowPs0FfAAAARQ"]
[Fri Feb 27 01:54:05.145691 2026] [:error] [pid 20059:tid 20109] [client 62.84.185.67:28030] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaCIvZZBS5wIa_NsqsgXegAAAcc"]
[Fri Feb 27 01:54:07.327902 2026] [:error] [pid 18818:tid 18894] [client 62.84.185.67:28170] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaCIvxhPgqk2SeS_W83GtAAAAAo"]
[Fri Feb 27 01:54:09.333472 2026] [:error] [pid 20059:tid 20111] [client 62.84.185.67:28176] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaCIwZZBS5wIa_NsqsgXgQAAAck"]
[Fri Feb 27 01:54:11.549359 2026] [:error] [pid 20059:tid 20107] [client 62.84.185.67:28192] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaCIw5ZBS5wIa_NsqsgXhwAAAcU"]
[Fri Feb 27 01:54:13.768011 2026] [:error] [pid 18843:tid 18957] [client 62.84.185.67:28206] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaCIxSuD2bhSYSowPs0FgwAAARE"]
[Fri Feb 27 01:54:15.550232 2026] [:error] [pid 18843:tid 18949] [client 62.84.185.67:28216] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaCIxyuD2bhSYSowPs0FhAAAAQk"]
[Fri Feb 27 01:54:19.700405 2026] [:error] [pid 18843:tid 18955] [client 62.84.185.67:38162] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaCIyyuD2bhSYSowPs0FhwAAAQ8"]
[Fri Feb 27 02:09:44.991289 2026] [:error] [pid 18843:tid 18964] [client 195.178.110.109:1634] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aaCMaCuD2bhSYSowPs0MMQAAARg"]
[Fri Feb 27 02:09:48.022790 2026] [:error] [pid 20059:tid 20115] [client 195.178.110.109:39966] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aaCMbJZBS5wIa_NsqsgniAAAAc0"]
[Fri Feb 27 02:09:50.284575 2026] [:error] [pid 20059:tid 20122] [client 195.178.110.109:39982] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Feb 27 02:09:50.529137 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:39982] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/portal/.env"] [unique_id "aaCMbpZBS5wIa_NsqsgnkwAAAc8"]
[Fri Feb 27 02:09:51.521802 2026] [:error] [pid 19020:tid 19025] [client 195.178.110.109:45848] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/env/.env"] [unique_id "aaCMb7N3kp7wL6QzPnU3VQAAAUM"]
[Fri Feb 27 02:09:53.798211 2026] [:error] [pid 18818:tid 18906] [client 195.178.110.109:45858] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aaCMcRhPgqk2SeS_W83LJgAAABY"]
[Fri Feb 27 02:09:54.806119 2026] [:error] [pid 19020:tid 19042] [client 195.178.110.109:45868] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aaCMcrN3kp7wL6QzPnU3YgAAAVQ"]
[Fri Feb 27 02:09:55.862769 2026] [:error] [pid 18843:tid 18950] [client 195.178.110.109:45878] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/dev/.env"] [unique_id "aaCMcyuD2bhSYSowPs0MRAAAAQo"]
[Fri Feb 27 02:09:57.499193 2026] [:error] [pid 20059:tid 20110] [client 195.178.110.109:45884] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env"] [unique_id "aaCMdZZBS5wIa_NsqsgnqgAAAcg"]
[Fri Feb 27 02:09:58.529206 2026] [:error] [pid 20059:tid 20120] [client 195.178.110.109:45886] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env.local"] [unique_id "aaCMdpZBS5wIa_NsqsgnrQAAAdI"]
[Fri Feb 27 02:10:00.377134 2026] [:error] [pid 18818:tid 18890] [client 195.178.110.109:22834] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env.production"] [unique_id "aaCMeBhPgqk2SeS_W83LKQAAAAY"]
[Fri Feb 27 02:10:02.200145 2026] [:error] [pid 18843:tid 18942] [client 195.178.110.109:22844] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env.staging"] [unique_id "aaCMeiuD2bhSYSowPs0MTgAAAQI"]
[Fri Feb 27 02:10:03.333879 2026] [:error] [pid 18818:tid 18908] [client 195.178.110.109:22850] File does not exist: /usr/local/apache/htdocs/suspended-page/_phpinfo.php
[Fri Feb 27 02:10:05.041301 2026] [:error] [pid 18818:tid 18894] [client 195.178.110.109:22850] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/awstats/.env"] [unique_id "aaCMfRhPgqk2SeS_W83LMwAAAAo"]
[Fri Feb 27 02:10:06.211794 2026] [:error] [pid 19020:tid 19035] [client 195.178.110.109:22860] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/conf/.env"] [unique_id "aaCMfrN3kp7wL6QzPnU3hgAAAU0"]
[Fri Feb 27 02:10:07.275044 2026] [:error] [pid 18818:tid 18900] [client 195.178.110.109:22866] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/cron/.env"] [unique_id "aaCMfxhPgqk2SeS_W83LOAAAABA"]
[Fri Feb 27 02:10:09.083496 2026] [:error] [pid 18843:tid 18947] [client 195.178.110.109:22868] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/www/.env"] [unique_id "aaCMgSuD2bhSYSowPs0MWgAAAQc"]
[Fri Feb 27 02:10:10.886777 2026] [:error] [pid 18831:tid 18926] [client 195.178.110.109:1226] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/docker/.env"] [unique_id "aaCMgv5KHTHUIuWRG2bVeAAAAE0"]
[Fri Feb 27 02:10:12.708760 2026] [:error] [pid 19020:tid 19027] [client 195.178.110.109:1238] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/docker/app/.env"] [unique_id "aaCMhLN3kp7wL6QzPnU3ogAAAUU"]
[Fri Feb 27 02:10:14.560132 2026] [:error] [pid 20059:tid 20104] [client 195.178.110.109:1252] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/env.backup"] [unique_id "aaCMhpZBS5wIa_Nsqsgn0gAAAcI"]
[Fri Feb 27 02:10:15.593648 2026] [:error] [pid 20059:tid 20114] [client 195.178.110.109:1252] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMh5ZBS5wIa_Nsqsgn1wAAAcw"]
[Fri Feb 27 02:10:17.401809 2026] [:error] [pid 18818:tid 18896] [client 195.178.110.109:1256] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMiRhPgqk2SeS_W83LZAAAAAw"]
[Fri Feb 27 02:10:19.251744 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:1268] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMi5ZBS5wIa_Nsqsgn7QAAAc8"]
[Fri Feb 27 02:10:20.261164 2026] [:error] [pid 18831:tid 18929] [client 195.178.110.109:26602] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMjP5KHTHUIuWRG2bVjQAAAFA"]
[Fri Feb 27 02:10:21.507239 2026] [:error] [pid 19020:tid 19023] [client 195.178.110.109:26624] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMjbN3kp7wL6QzPnU3twAAAUE"]
[Fri Feb 27 02:10:22.918843 2026] [:error] [pid 20059:tid 20110] [client 195.178.110.109:26626] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMjpZBS5wIa_Nsqsgn-gAAAcg"]
[Fri Feb 27 02:10:25.309322 2026] [:error] [pid 20059:tid 20107] [client 195.178.110.109:26630] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMkZZBS5wIa_Nsqsgn_wAAAcU"]
[Fri Feb 27 02:10:27.384646 2026] [:error] [pid 18831:tid 18927] [client 195.178.110.109:26646] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMk_5KHTHUIuWRG2bVmgAAAE4"]
[Fri Feb 27 02:10:29.295298 2026] [:error] [pid 20059:tid 20102] [client 195.178.110.109:26662] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaCMlZZBS5wIa_NsqsgoFAAAAcA"]
[Fri Feb 27 02:10:32.820168 2026] [:error] [pid 19020:tid 19037] [client 195.178.110.109:61738] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.vscode/.env"] [unique_id "aaCMmLN3kp7wL6QzPnU36QAAAU8"]
[Fri Feb 27 02:10:34.654201 2026] [:error] [pid 20059:tid 20103] [client 195.178.110.109:61746] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/js/.env"] [unique_id "aaCMmpZBS5wIa_NsqsgoIAAAAcE"]
[Fri Feb 27 02:10:36.636224 2026] [:error] [pid 20059:tid 20104] [client 195.178.110.109:61758] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/laravel/.env"] [unique_id "aaCMnJZBS5wIa_NsqsgoKwAAAcI"]
[Fri Feb 27 02:10:37.875960 2026] [:error] [pid 20059:tid 20114] [client 195.178.110.109:61770] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/laravel/core/.env"] [unique_id "aaCMnZZBS5wIa_NsqsgoMwAAAcw"]
[Fri Feb 27 02:10:39.324305 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:61772] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/mail/.env"] [unique_id "aaCMn5ZBS5wIa_NsqsgoOQAAAdU"]
[Fri Feb 27 02:10:40.707491 2026] [:error] [pid 19020:tid 19045] [client 195.178.110.109:62084] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/mailer/.env"] [unique_id "aaCMoLN3kp7wL6QzPnU3-wAAAVc"]
[Fri Feb 27 02:10:41.928869 2026] [:error] [pid 19020:tid 19025] [client 195.178.110.109:62098] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/nginx/.env"] [unique_id "aaCMobN3kp7wL6QzPnU4AAAAAUM"]
[Fri Feb 27 02:10:43.904469 2026] [:error] [pid 18843:tid 18945] [client 195.178.110.109:62100] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/public/.env"] [unique_id "aaCMoyuD2bhSYSowPs0MhgAAAQU"]
[Fri Feb 27 02:10:45.942933 2026] [:error] [pid 18818:tid 18907] [client 195.178.110.109:62102] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/site/.env"] [unique_id "aaCMpRhPgqk2SeS_W83LhQAAABc"]
[Fri Feb 27 02:10:48.502750 2026] [:error] [pid 19020:tid 19028] [client 195.178.110.109:62112] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/xampp/.env"] [unique_id "aaCMqLN3kp7wL6QzPnU4EQAAAUY"]
[Fri Feb 27 02:10:50.361882 2026] [:error] [pid 20059:tid 20103] [client 195.178.110.109:27376] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/main/.env"] [unique_id "aaCMqpZBS5wIa_NsqsgoYwAAAcE"]
[Fri Feb 27 02:10:52.203206 2026] [:error] [pid 20059:tid 20108] [client 195.178.110.109:27378] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/node_modules/.env"] [unique_id "aaCMrJZBS5wIa_NsqsgobQAAAcY"]
[Fri Feb 27 02:10:54.038568 2026] [:error] [pid 18818:tid 18907] [client 195.178.110.109:27386] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/kyc/.env"] [unique_id "aaCMrhhPgqk2SeS_W83LlwAAABc"]
[Fri Feb 27 02:10:55.153477 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:27390] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env"] [unique_id "aaCMr5ZBS5wIa_NsqsgoeAAAAcc"]
[Fri Feb 27 02:10:56.632904 2026] [:error] [pid 19020:tid 19042] [client 195.178.110.109:27392] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/prod/.env"] [unique_id "aaCMsLN3kp7wL6QzPnU4LQAAAVQ"]
[Fri Feb 27 02:10:58.078296 2026] [:error] [pid 18843:tid 18957] [client 195.178.110.109:27394] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aaCMsiuD2bhSYSowPs0MmwAAARE"]
[Fri Feb 27 02:10:59.519857 2026] [:error] [pid 18831:tid 18924] [client 195.178.110.109:27402] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMs_5KHTHUIuWRG2bVtAAAAEs"]
[Fri Feb 27 02:11:00.944969 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:63214] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMtJZBS5wIa_NsqsgohgAAAcc"]
[Fri Feb 27 02:11:03.091796 2026] [:error] [pid 18818:tid 18908] [client 195.178.110.109:63218] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMtxhPgqk2SeS_W83LsgAAABg"]
[Fri Feb 27 02:11:05.104160 2026] [:error] [pid 18831:tid 18921] [client 195.178.110.109:63242] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMuf5KHTHUIuWRG2bVwQAAAEg"]
[Fri Feb 27 02:11:07.033245 2026] [:error] [pid 19020:tid 19041] [client 195.178.110.109:63260] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMu7N3kp7wL6QzPnU4PgAAAVM"]
[Fri Feb 27 02:11:10.471937 2026] [:error] [pid 18843:tid 18953] [client 195.178.110.109:17144] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMviuD2bhSYSowPs0MsgAAAQ0"]
[Fri Feb 27 02:11:12.262249 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:17152] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMwJZBS5wIa_NsqsgokAAAAdU"]
[Fri Feb 27 02:11:13.491953 2026] [:error] [pid 18831:tid 18936] [client 195.178.110.109:17156] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaCMwf5KHTHUIuWRG2bV0gAAAFc"]
[Fri Feb 27 02:11:15.814398 2026] [:error] [pid 18831:tid 18930] [client 195.178.110.109:17170] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/website/.env"] [unique_id "aaCMw_5KHTHUIuWRG2bV2AAAAFE"]
[Fri Feb 27 02:11:17.370881 2026] [:error] [pid 18831:tid 18933] [client 195.178.110.109:17186] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/development/.env"] [unique_id "aaCMxf5KHTHUIuWRG2bV3gAAAFQ"]
[Fri Feb 27 02:11:18.961885 2026] [:error] [pid 18831:tid 18919] [client 195.178.110.109:17200] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backend/.env"] [unique_id "aaCMxv5KHTHUIuWRG2bV5gAAAEY"]
[Fri Feb 27 02:11:20.396082 2026] [:error] [pid 18818:tid 18893] [client 195.178.110.109:7810] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/shared/config/.env"] [unique_id "aaCMyBhPgqk2SeS_W83LyQAAAAk"]
[Fri Feb 27 02:11:21.977459 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:7818] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/shared/.env"] [unique_id "aaCMyZZBS5wIa_NsqsgoywAAAcc"]
[Fri Feb 27 02:11:24.302809 2026] [:error] [pid 19020:tid 19025] [client 195.178.110.109:7830] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/node/.env_example"] [unique_id "aaCMzLN3kp7wL6QzPnU4WgAAAUM"]
[Fri Feb 27 02:11:26.243034 2026] [:error] [pid 19020:tid 19043] [client 195.178.110.109:7838] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production.local"] [unique_id "aaCMzrN3kp7wL6QzPnU4ZQAAAVU"]
[Fri Feb 27 02:11:28.068321 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:7840] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aaCM0JZBS5wIa_Nsqsgo2wAAAc8"]
[Fri Feb 27 02:11:29.869783 2026] [:error] [pid 20059:tid 20106] [client 195.178.110.109:7852] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aaCM0ZZBS5wIa_Nsqsgo5gAAAcQ"]
[Fri Feb 27 02:11:31.660937 2026] [:error] [pid 18843:tid 18962] [client 195.178.110.109:30816] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.stage"] [unique_id "aaCM0yuD2bhSYSowPs0MzQAAARY"]
[Fri Feb 27 02:11:33.693135 2026] [:error] [pid 19020:tid 19037] [client 195.178.110.109:30822] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aaCM1bN3kp7wL6QzPnU4gAAAAU8"]
[Fri Feb 27 02:11:34.702686 2026] [:error] [pid 18843:tid 18964] [client 195.178.110.109:30834] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env_sample"] [unique_id "aaCM1iuD2bhSYSowPs0M0AAAARg"]
[Fri Feb 27 02:11:35.996157 2026] [:error] [pid 18843:tid 18958] [client 195.178.110.109:30850] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod"] [unique_id "aaCM1yuD2bhSYSowPs0M1wAAARI"]
[Fri Feb 27 02:11:37.547725 2026] [:error] [pid 18843:tid 18948] [client 195.178.110.109:30864] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/crm/.env"] [unique_id "aaCM2SuD2bhSYSowPs0M2gAAAQg"]
[Fri Feb 27 02:11:39.045504 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:30870] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/local/.env"] [unique_id "aaCM25ZBS5wIa_Nsqsgo9QAAAcc"]
[Fri Feb 27 02:11:40.729772 2026] [:error] [pid 18831:tid 18929] [client 195.178.110.109:12130] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/core/.env"] [unique_id "aaCM3P5KHTHUIuWRG2bV-wAAAFA"]
[Fri Feb 27 02:11:43.218805 2026] [:error] [pid 20059:tid 20105] [client 195.178.110.109:12134] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/apps/.env"] [unique_id "aaCM35ZBS5wIa_NsqsgpCgAAAcM"]
[Fri Feb 27 02:11:44.483872 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:12146] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/application/.env"] [unique_id "aaCM4JZBS5wIa_NsqsgpEAAAAdU"]
[Fri Feb 27 02:11:46.400568 2026] [:error] [pid 19020:tid 19036] [client 195.178.110.109:12148] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/web/.env"] [unique_id "aaCM4rN3kp7wL6QzPnU4pgAAAU4"]
[Fri Feb 27 02:11:48.542692 2026] [:error] [pid 20059:tid 20121] [client 195.178.110.109:12150] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php.bak"] [unique_id "aaCM5JZBS5wIa_NsqsgpHAAAAdM"]
[Fri Feb 27 02:11:50.674715 2026] [:error] [pid 20059:tid 20115] [client 195.178.110.109:55962] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Feb 27 02:11:51.677866 2026] [:error] [pid 20059:tid 20118] [client 195.178.110.109:55962] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM55ZBS5wIa_NsqsgpOQAAAdA"]
[Fri Feb 27 02:11:53.488842 2026] [:error] [pid 19020:tid 19030] [client 195.178.110.109:55964] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM6bN3kp7wL6QzPnU4xAAAAUg"]
[Fri Feb 27 02:11:55.292864 2026] [:error] [pid 18843:tid 18947] [client 195.178.110.109:55970] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM6yuD2bhSYSowPs0M8wAAAQc"]
[Fri Feb 27 02:11:58.142107 2026] [:error] [pid 18818:tid 18896] [client 195.178.110.109:55984] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM7hhPgqk2SeS_W83L5AAAAAw"]
[Fri Feb 27 02:11:59.421779 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:56000] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM75ZBS5wIa_NsqsgpRQAAAc8"]
[Fri Feb 27 02:12:01.126799 2026] [:error] [pid 18831:tid 18915] [client 195.178.110.109:34238] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM8f5KHTHUIuWRG2bWGAAAAEI"]
[Fri Feb 27 02:12:03.814604 2026] [:error] [pid 20059:tid 20118] [client 195.178.110.109:34248] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM85ZBS5wIa_NsqsgpSgAAAdA"]
[Fri Feb 27 02:12:05.324619 2026] [:error] [pid 18818:tid 18901] [client 195.178.110.109:34260] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaCM9RhPgqk2SeS_W83L9AAAABE"]
[Fri Feb 27 02:12:09.526641 2026] [:error] [pid 20059:tid 20112] [client 195.178.110.109:34284] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCM-ZZBS5wIa_NsqsgpTgAAAco"]
[Fri Feb 27 02:12:11.369427 2026] [:error] [pid 19020:tid 19023] [client 195.178.110.109:37778] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCM-7N3kp7wL6QzPnU5AwAAAUE"]
[Fri Feb 27 02:12:14.827535 2026] [:error] [pid 20059:tid 20121] [client 195.178.110.109:37804] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCM_pZBS5wIa_NsqsgpYwAAAdM"]
[Fri Feb 27 02:12:16.616831 2026] [:error] [pid 18831:tid 18931] [client 195.178.110.109:37814] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCNAP5KHTHUIuWRG2bWOQAAAFI"]
[Fri Feb 27 02:12:18.026368 2026] [:error] [pid 20059:tid 20107] [client 195.178.110.109:37818] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCNApZBS5wIa_NsqsgpcQAAAcU"]
[Fri Feb 27 02:12:19.224784 2026] [:error] [pid 19020:tid 19034] [client 195.178.110.109:37820] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCNA7N3kp7wL6QzPnU5FAAAAUw"]
[Fri Feb 27 02:12:20.607210 2026] [:error] [pid 18843:tid 18952] [client 195.178.110.109:33672] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCNBCuD2bhSYSowPs0NGAAAAQw"]
[Fri Feb 27 02:12:22.498218 2026] [:error] [pid 18831:tid 18922] [client 195.178.110.109:33688] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaCNBv5KHTHUIuWRG2bWQwAAAEk"]
[Fri Feb 27 02:12:24.794181 2026] [:error] [pid 18843:tid 18951] [client 195.178.110.109:33708] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNCCuD2bhSYSowPs0NIgAAAQs"]
[Fri Feb 27 02:12:26.048453 2026] [:error] [pid 20059:tid 20108] [client 195.178.110.109:33716] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNCpZBS5wIa_NsqsgpewAAAcY"]
[Fri Feb 27 02:12:27.205029 2026] [:error] [pid 19020:tid 19029] [client 195.178.110.109:33728] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNC7N3kp7wL6QzPnU5JAAAAUc"]
[Fri Feb 27 02:12:28.396637 2026] [:error] [pid 20059:tid 20111] [client 195.178.110.109:33730] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNDJZBS5wIa_NsqsgpiAAAAck"]
[Fri Feb 27 02:12:30.472235 2026] [:error] [pid 20059:tid 20119] [client 195.178.110.109:11728] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNDpZBS5wIa_NsqsgpmQAAAdE"]
[Fri Feb 27 02:12:31.766703 2026] [:error] [pid 20059:tid 20113] [client 195.178.110.109:11740] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCND5ZBS5wIa_NsqsgpngAAAcs"]
[Fri Feb 27 02:12:33.712598 2026] [:error] [pid 19020:tid 19044] [client 195.178.110.109:11754] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNEbN3kp7wL6QzPnU5LwAAAVY"]
[Fri Feb 27 02:12:37.104587 2026] [:error] [pid 18843:tid 18960] [client 195.178.110.109:11780] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNFSuD2bhSYSowPs0NNwAAARQ"]
[Fri Feb 27 02:12:38.894620 2026] [:error] [pid 20059:tid 20112] [client 195.178.110.109:11782] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaCNFpZBS5wIa_NsqsgpvwAAAco"]
[Fri Feb 27 02:12:42.327342 2026] [:error] [pid 20059:tid 20126] [client 195.178.110.109:29224] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNGpZBS5wIa_Nsqsgp0AAAAdg"]
[Fri Feb 27 02:12:43.446998 2026] [:error] [pid 19020:tid 19036] [client 195.178.110.109:29232] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNG7N3kp7wL6QzPnU5QQAAAU4"]
[Fri Feb 27 02:12:44.579023 2026] [:error] [pid 20059:tid 20106] [client 195.178.110.109:29236] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNHJZBS5wIa_Nsqsgp2QAAAcQ"]
[Fri Feb 27 02:12:45.634677 2026] [:error] [pid 18818:tid 18895] [client 195.178.110.109:29250] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNHRhPgqk2SeS_W83MEgAAAAs"]
[Fri Feb 27 02:12:47.248819 2026] [:error] [pid 20059:tid 20108] [client 195.178.110.109:29252] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNH5ZBS5wIa_Nsqsgp4gAAAcY"]
[Fri Feb 27 02:12:48.482054 2026] [:error] [pid 20059:tid 20105] [client 195.178.110.109:29262] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNIJZBS5wIa_Nsqsgp5wAAAcM"]
[Fri Feb 27 02:12:49.669142 2026] [:error] [pid 18818:tid 18886] [client 195.178.110.109:5702] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaCNIRhPgqk2SeS_W83MFgAAAAI"]
[Fri Feb 27 02:12:52.093362 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:5722] File does not exist: /usr/local/apache/htdocs/suspended-page/app_dev.php
[Fri Feb 27 02:12:52.360285 2026] [:error] [pid 20059:tid 20119] [client 195.178.110.109:5722] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Feb 27 02:12:52.641871 2026] [authz_host:error] [pid 20059:tid 20118] [client 195.178.110.109:5722] AH01753: access check of '.example.com' to /server-info failed, reason: unable to get the remote host name
[Fri Feb 27 02:12:52.641908 2026] [authz_core:error] [pid 20059:tid 20118] [client 195.178.110.109:5722] AH01630: client denied by server configuration: /usr/local/apache/htdocs/suspended-page/server-info
[Fri Feb 27 02:12:54.284652 2026] [:error] [pid 20059:tid 20111] [client 195.178.110.109:5728] File does not exist: /usr/local/apache/htdocs/suspended-page/server-info.php
[Fri Feb 27 02:12:58.355672 2026] [:error] [pid 18831:tid 18914] [client 195.178.110.109:5740] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNKv5KHTHUIuWRG2bWagAAAEE"]
[Fri Feb 27 02:12:59.423222 2026] [:error] [pid 19020:tid 19041] [client 195.178.110.109:14246] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNK7N3kp7wL6QzPnU5WwAAAVM"]
[Fri Feb 27 02:13:00.539298 2026] [:error] [pid 18831:tid 18931] [client 195.178.110.109:14262] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNLP5KHTHUIuWRG2bWbwAAAFI"]
[Fri Feb 27 02:13:01.744380 2026] [:error] [pid 19020:tid 19036] [client 195.178.110.109:14272] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNLbN3kp7wL6QzPnU5ZAAAAU4"]
[Fri Feb 27 02:13:02.845561 2026] [:error] [pid 20059:tid 20121] [client 195.178.110.109:14274] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNLpZBS5wIa_NsqsgqRgAAAdM"]
[Fri Feb 27 02:13:03.993984 2026] [:error] [pid 19020:tid 19039] [client 195.178.110.109:14288] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNL7N3kp7wL6QzPnU5bgAAAVE"]
[Fri Feb 27 02:13:05.076448 2026] [:error] [pid 19020:tid 19033] [client 195.178.110.109:14296] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNMbN3kp7wL6QzPnU5cQAAAUs"]
[Fri Feb 27 02:13:06.129587 2026] [:error] [pid 20059:tid 20113] [client 195.178.110.109:14312] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNMpZBS5wIa_NsqsgqVwAAAcs"]
[Fri Feb 27 02:13:07.219382 2026] [:error] [pid 19020:tid 19031] [client 195.178.110.109:14318] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNM7N3kp7wL6QzPnU5dAAAAUk"]
[Fri Feb 27 02:13:09.348573 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:50944] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNNZZBS5wIa_NsqsgqYgAAAcc"]
[Fri Feb 27 02:13:10.569944 2026] [:error] [pid 19020:tid 19026] [client 195.178.110.109:50958] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNNrN3kp7wL6QzPnU5fQAAAUQ"]
[Fri Feb 27 02:13:11.729742 2026] [:error] [pid 18818:tid 18903] [client 195.178.110.109:50974] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNNxhPgqk2SeS_W83MKQAAABM"]
[Fri Feb 27 02:13:12.803160 2026] [:error] [pid 20059:tid 20126] [client 195.178.110.109:50976] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaCNOJZBS5wIa_NsqsgqcgAAAdg"]
[Fri Feb 27 02:13:14.774519 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:51002] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNOpZBS5wIa_NsqsgqhQAAAcc"]
[Fri Feb 27 02:13:16.028913 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:51016] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNPJZBS5wIa_NsqsgqlAAAAdU"]
[Fri Feb 27 02:13:17.331207 2026] [:error] [pid 20059:tid 20110] [client 195.178.110.109:51020] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNPZZBS5wIa_NsqsgqnQAAAcg"]
[Fri Feb 27 02:13:18.496597 2026] [:error] [pid 18818:tid 18906] [client 195.178.110.109:51036] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNPhhPgqk2SeS_W83MLgAAABY"]
[Fri Feb 27 02:13:19.873020 2026] [:error] [pid 18818:tid 18900] [client 195.178.110.109:5106] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNPxhPgqk2SeS_W83MMAAAABA"]
[Fri Feb 27 02:13:21.048008 2026] [:error] [pid 20059:tid 20103] [client 195.178.110.109:5108] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNQZZBS5wIa_NsqsgqpwAAAcE"]
[Fri Feb 27 02:13:22.243579 2026] [:error] [pid 18818:tid 18908] [client 195.178.110.109:5120] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNQhhPgqk2SeS_W83MMwAAABg"]
[Fri Feb 27 02:13:23.341231 2026] [:error] [pid 18843:tid 18958] [client 195.178.110.109:5132] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaCNQyuD2bhSYSowPs0NawAAARI"]
[Fri Feb 27 02:13:30.770405 2026] [:error] [pid 18843:tid 18961] [client 195.178.110.109:27910] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNSiuD2bhSYSowPs0NdQAAARU"]
[Fri Feb 27 02:13:37.535956 2026] [:error] [pid 18818:tid 18884] [client 195.178.110.109:27926] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNURhPgqk2SeS_W83MPgAAAAA"]
[Fri Feb 27 02:13:38.530855 2026] [:error] [pid 20059:tid 20112] [client 195.178.110.109:27938] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNUpZBS5wIa_Nsqsgq3wAAAco"]
[Fri Feb 27 02:13:39.516576 2026] [:error] [pid 18818:tid 18907] [client 195.178.110.109:48950] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNUxhPgqk2SeS_W83MPwAAABc"]
[Fri Feb 27 02:13:40.501079 2026] [:error] [pid 18818:tid 18906] [client 195.178.110.109:48952] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNVBhPgqk2SeS_W83MQAAAABY"]
[Fri Feb 27 02:13:41.593979 2026] [:error] [pid 20059:tid 20102] [client 195.178.110.109:48964] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNVZZBS5wIa_Nsqsgq7AAAAcA"]
[Fri Feb 27 02:13:43.811089 2026] [:error] [pid 20059:tid 20121] [client 195.178.110.109:48980] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNV5ZBS5wIa_Nsqsgq_AAAAdM"]
[Fri Feb 27 02:13:44.853935 2026] [:error] [pid 18831:tid 18933] [client 195.178.110.109:48996] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNWP5KHTHUIuWRG2bWnQAAAFQ"]
[Fri Feb 27 02:13:46.014781 2026] [:error] [pid 18843:tid 18959] [client 195.178.110.109:49000] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaCNWiuD2bhSYSowPs0NiwAAARM"]
[Fri Feb 27 02:13:47.988597 2026] [:error] [pid 19020:tid 19039] [client 195.178.110.109:49026] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNW7N3kp7wL6QzPnU5qgAAAVE"]
[Fri Feb 27 02:13:49.095647 2026] [:error] [pid 18831:tid 18920] [client 195.178.110.109:49034] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNXf5KHTHUIuWRG2bWoQAAAEc"]
[Fri Feb 27 02:13:50.212884 2026] [:error] [pid 18843:tid 18963] [client 195.178.110.109:32548] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNXiuD2bhSYSowPs0NmAAAARc"]
[Fri Feb 27 02:13:51.642648 2026] [:error] [pid 19020:tid 19045] [client 195.178.110.109:32554] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNX7N3kp7wL6QzPnU5rAAAAVc"]
[Fri Feb 27 02:13:53.608518 2026] [:error] [pid 19020:tid 19046] [client 195.178.110.109:32570] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNYbN3kp7wL6QzPnU5swAAAVg"]
[Fri Feb 27 02:13:54.709467 2026] [:error] [pid 20059:tid 20105] [client 195.178.110.109:32574] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNYpZBS5wIa_NsqsgrJAAAAcM"]
[Fri Feb 27 02:13:55.824430 2026] [:error] [pid 19020:tid 19024] [client 195.178.110.109:32584] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNY7N3kp7wL6QzPnU5tgAAAUI"]
[Fri Feb 27 02:13:56.901914 2026] [:error] [pid 18818:tid 18899] [client 195.178.110.109:32600] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaCNZBhPgqk2SeS_W83MSQAAAA8"]
[Fri Feb 27 02:13:59.654760 2026] [:error] [pid 20059:tid 20121] [client 195.178.110.109:32612] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/storage/logs/laravel.log"] [unique_id "aaCNZ5ZBS5wIa_NsqsgrMQAAAdM"]
[Fri Feb 27 02:14:03.490562 2026] [:error] [pid 18818:tid 18905] [client 195.178.110.109:52046] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNaxhPgqk2SeS_W83MWwAAABU"]
[Fri Feb 27 02:14:04.558313 2026] [:error] [pid 18843:tid 18949] [client 195.178.110.109:52058] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNbCuD2bhSYSowPs0N4AAAAQk"]
[Fri Feb 27 02:14:05.735821 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:52060] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNbZZBS5wIa_NsqsgrRwAAAc8"]
[Fri Feb 27 02:14:06.830533 2026] [:error] [pid 18831:tid 18932] [client 195.178.110.109:52072] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNbv5KHTHUIuWRG2bW2gAAAFM"]
[Fri Feb 27 02:14:07.890514 2026] [:error] [pid 18843:tid 18944] [client 195.178.110.109:52086] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNbyuD2bhSYSowPs0N9AAAAQQ"]
[Fri Feb 27 02:14:09.021685 2026] [:error] [pid 20059:tid 20107] [client 195.178.110.109:52096] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNcZZBS5wIa_NsqsgrUQAAAcU"]
[Fri Feb 27 02:14:10.621980 2026] [:error] [pid 18843:tid 18953] [client 195.178.110.109:59308] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNciuD2bhSYSowPs0OBQAAAQ0"]
[Fri Feb 27 02:14:11.741562 2026] [:error] [pid 18843:tid 18964] [client 195.178.110.109:59314] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNcyuD2bhSYSowPs0ODgAAARg"]
[Fri Feb 27 02:14:12.879527 2026] [:error] [pid 19020:tid 19024] [client 195.178.110.109:59330] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNdLN3kp7wL6QzPnU57QAAAUI"]
[Fri Feb 27 02:14:14.052549 2026] [:error] [pid 20059:tid 20102] [client 195.178.110.109:59352] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNdpZBS5wIa_NsqsgrWwAAAcA"]
[Fri Feb 27 02:14:15.126330 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:59360] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNd5ZBS5wIa_NsqsgrXwAAAc8"]
[Fri Feb 27 02:14:16.219408 2026] [:error] [pid 19020:tid 19038] [client 195.178.110.109:59362] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNeLN3kp7wL6QzPnU58QAAAVA"]
[Fri Feb 27 02:14:17.687455 2026] [:error] [pid 20059:tid 20113] [client 195.178.110.109:59378] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaCNeZZBS5wIa_NsqsgrZgAAAcs"]
[Fri Feb 27 02:14:19.098384 2026] [:error] [pid 19020:tid 19046] [client 195.178.110.109:59390] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNe7N3kp7wL6QzPnU59QAAAVg"]
[Fri Feb 27 02:14:20.193307 2026] [:error] [pid 19020:tid 19042] [client 195.178.110.109:9134] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNfLN3kp7wL6QzPnU5-AAAAVQ"]
[Fri Feb 27 02:14:21.232449 2026] [:error] [pid 19020:tid 19043] [client 195.178.110.109:9138] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNfbN3kp7wL6QzPnU5_AAAAVU"]
[Fri Feb 27 02:14:22.262840 2026] [:error] [pid 18818:tid 18899] [client 195.178.110.109:9140] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNfhhPgqk2SeS_W83MlwAAAA8"]
[Fri Feb 27 02:14:24.335079 2026] [:error] [pid 20059:tid 20116] [client 195.178.110.109:9166] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNgJZBS5wIa_NsqsgrcgAAAc4"]
[Fri Feb 27 02:14:25.387865 2026] [:error] [pid 19020:tid 19040] [client 195.178.110.109:9178] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNgbN3kp7wL6QzPnU6AwAAAVI"]
[Fri Feb 27 02:14:26.664997 2026] [:error] [pid 20059:tid 20113] [client 195.178.110.109:9180] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNgpZBS5wIa_NsqsgrfgAAAcs"]
[Fri Feb 27 02:14:27.783940 2026] [:error] [pid 20059:tid 20110] [client 195.178.110.109:9194] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNg5ZBS5wIa_NsqsgrigAAAcg"]
[Fri Feb 27 02:14:29.710114 2026] [:error] [pid 18843:tid 18959] [client 195.178.110.109:45144] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNhSuD2bhSYSowPs0OIwAAARM"]
[Fri Feb 27 02:14:30.760819 2026] [:error] [pid 18818:tid 18903] [client 195.178.110.109:45150] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNhhhPgqk2SeS_W83MsgAAABM"]
[Fri Feb 27 02:14:31.834662 2026] [:error] [pid 19020:tid 19041] [client 195.178.110.109:45152] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNh7N3kp7wL6QzPnU6EgAAAVM"]
[Fri Feb 27 02:14:32.873753 2026] [:error] [pid 18818:tid 18889] [client 195.178.110.109:45154] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaCNiBhPgqk2SeS_W83MuQAAAAU"]
[Fri Feb 27 02:14:34.930752 2026] [:error] [pid 19020:tid 19033] [client 195.178.110.109:45174] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNirN3kp7wL6QzPnU6FwAAAUs"]
[Fri Feb 27 02:14:35.971576 2026] [:error] [pid 19020:tid 19022] [client 195.178.110.109:45184] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNi7N3kp7wL6QzPnU6GgAAAUA"]
[Fri Feb 27 02:14:37.014973 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:45194] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNjZZBS5wIa_NsqsgrpAAAAdU"]
[Fri Feb 27 02:14:38.088810 2026] [:error] [pid 18843:tid 18956] [client 195.178.110.109:45208] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNjiuD2bhSYSowPs0OJQAAARA"]
[Fri Feb 27 02:14:39.958909 2026] [:error] [pid 20059:tid 20119] [client 195.178.110.109:47024] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNj5ZBS5wIa_NsqsgrvwAAAdE"]
[Fri Feb 27 02:14:41.005854 2026] [:error] [pid 18818:tid 18902] [client 195.178.110.109:47044] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNkRhPgqk2SeS_W83MwQAAABI"]
[Fri Feb 27 02:14:42.067104 2026] [:error] [pid 19020:tid 19024] [client 195.178.110.109:47058] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNkrN3kp7wL6QzPnU6IgAAAUI"]
[Fri Feb 27 02:14:43.193991 2026] [:error] [pid 18843:tid 18951] [client 195.178.110.109:47060] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNkyuD2bhSYSowPs0OLQAAAQs"]
[Fri Feb 27 02:14:45.118814 2026] [:error] [pid 18843:tid 18958] [client 195.178.110.109:47092] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNlSuD2bhSYSowPs0OLwAAARI"]
[Fri Feb 27 02:14:46.201862 2026] [:error] [pid 18843:tid 18960] [client 195.178.110.109:47102] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNliuD2bhSYSowPs0ONQAAARQ"]
[Fri Feb 27 02:14:47.274324 2026] [:error] [pid 20059:tid 20112] [client 195.178.110.109:47110] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNl5ZBS5wIa_Nsqsgr4gAAAco"]
[Fri Feb 27 02:14:48.393923 2026] [:error] [pid 20059:tid 20109] [client 195.178.110.109:47124] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaCNmJZBS5wIa_Nsqsgr5gAAAcc"]
[Fri Feb 27 02:14:50.525687 2026] [:error] [pid 18818:tid 18904] [client 195.178.110.109:5836] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNmhhPgqk2SeS_W83MzQAAABQ"]
[Fri Feb 27 02:14:51.582904 2026] [:error] [pid 18831:tid 18919] [client 195.178.110.109:5840] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNm_5KHTHUIuWRG2bW9wAAAEY"]
[Fri Feb 27 02:14:52.918711 2026] [:error] [pid 18831:tid 18920] [client 195.178.110.109:5842] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNnP5KHTHUIuWRG2bW-QAAAEc"]
[Fri Feb 27 02:14:53.977469 2026] [:error] [pid 20059:tid 20122] [client 195.178.110.109:5848] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNnZZBS5wIa_Nsqsgr9gAAAdQ"]
[Fri Feb 27 02:14:55.894621 2026] [:error] [pid 18843:tid 18953] [client 195.178.110.109:5874] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNnyuD2bhSYSowPs0OQQAAAQ0"]
[Fri Feb 27 02:14:57.049821 2026] [:error] [pid 18843:tid 18960] [client 195.178.110.109:5884] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNoSuD2bhSYSowPs0ORAAAARQ"]
[Fri Feb 27 02:14:58.154157 2026] [:error] [pid 18818:tid 18897] [client 195.178.110.109:5890] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNohhPgqk2SeS_W83M0gAAAA0"]
[Fri Feb 27 02:14:59.278707 2026] [:error] [pid 18843:tid 18964] [client 195.178.110.109:5902] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNoyuD2bhSYSowPs0OSQAAARg"]
[Fri Feb 27 02:15:01.231355 2026] [:error] [pid 18831:tid 18917] [client 195.178.110.109:32692] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNpf5KHTHUIuWRG2bXAQAAAEQ"]
[Fri Feb 27 02:15:02.305953 2026] [:error] [pid 18831:tid 18923] [client 195.178.110.109:32702] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaCNpv5KHTHUIuWRG2bXBAAAAEo"]
[Fri Feb 27 02:15:07.214496 2026] [:error] [pid 20059:tid 20114] [client 195.178.110.109:32718] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNq5ZBS5wIa_NsqsgsIgAAAcw"]
[Fri Feb 27 02:15:08.293701 2026] [:error] [pid 18831:tid 18933] [client 195.178.110.109:32732] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNrP5KHTHUIuWRG2bXFgAAAFQ"]
[Fri Feb 27 02:15:09.442451 2026] [:error] [pid 18843:tid 18950] [client 195.178.110.109:49454] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNrSuD2bhSYSowPs0OWQAAAQo"]
[Fri Feb 27 02:15:10.560659 2026] [:error] [pid 18843:tid 18944] [client 195.178.110.109:49462] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNriuD2bhSYSowPs0OWwAAAQQ"]
[Fri Feb 27 02:15:11.623671 2026] [:error] [pid 18818:tid 18899] [client 195.178.110.109:49468] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNrxhPgqk2SeS_W83M2wAAAA8"]
[Fri Feb 27 02:15:12.879925 2026] [:error] [pid 18843:tid 18960] [client 195.178.110.109:49480] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNsCuD2bhSYSowPs0OYwAAARQ"]
[Fri Feb 27 02:15:13.940618 2026] [:error] [pid 18843:tid 18962] [client 195.178.110.109:49494] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNsSuD2bhSYSowPs0OaQAAARY"]
[Fri Feb 27 02:15:14.980891 2026] [:error] [pid 18843:tid 18958] [client 195.178.110.109:49500] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNsiuD2bhSYSowPs0OagAAARI"]
[Fri Feb 27 02:15:16.084770 2026] [:error] [pid 19020:tid 19042] [client 195.178.110.109:49512] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNtLN3kp7wL6QzPnU6eQAAAVQ"]
[Fri Feb 27 02:15:18.038125 2026] [:error] [pid 20059:tid 20114] [client 195.178.110.109:49526] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNtpZBS5wIa_NsqsgsMAAAAcw"]
[Fri Feb 27 02:15:19.065164 2026] [:error] [pid 18843:tid 18942] [client 195.178.110.109:49536] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNtyuD2bhSYSowPs0OcgAAAQI"]
[Fri Feb 27 02:15:20.229265 2026] [:error] [pid 20059:tid 20112] [client 195.178.110.109:55292] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNuJZBS5wIa_NsqsgsMwAAAco"]
[Fri Feb 27 02:15:21.343591 2026] [:error] [pid 20059:tid 20124] [client 195.178.110.109:55298] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaCNuZZBS5wIa_NsqsgsOQAAAdY"]
[Fri Feb 27 02:15:23.362701 2026] [:error] [pid 18818:tid 18905] [client 195.178.110.109:55314] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNuxhPgqk2SeS_W83M7gAAABU"]
[Fri Feb 27 02:15:24.435679 2026] [:error] [pid 19020:tid 19024] [client 195.178.110.109:55322] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNvLN3kp7wL6QzPnU6gwAAAUI"]
[Fri Feb 27 02:15:25.506094 2026] [:error] [pid 19020:tid 19030] [client 195.178.110.109:55336] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNvbN3kp7wL6QzPnU6iAAAAUg"]
[Fri Feb 27 02:15:26.571321 2026] [:error] [pid 20059:tid 20124] [client 195.178.110.109:55344] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNvpZBS5wIa_NsqsgsSwAAAdY"]
[Fri Feb 27 02:15:28.475463 2026] [:error] [pid 18831:tid 18934] [client 195.178.110.109:55358] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNwP5KHTHUIuWRG2bXQwAAAFU"]
[Fri Feb 27 02:15:29.570334 2026] [:error] [pid 20059:tid 20119] [client 195.178.110.109:6948] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNwZZBS5wIa_NsqsgsUwAAAdE"]
[Fri Feb 27 02:15:30.672683 2026] [:error] [pid 20059:tid 20117] [client 195.178.110.109:6958] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNwpZBS5wIa_NsqsgsWQAAAc8"]
[Fri Feb 27 02:15:31.779109 2026] [:error] [pid 19020:tid 19027] [client 195.178.110.109:6962] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNw7N3kp7wL6QzPnU6nQAAAUU"]
[Fri Feb 27 02:15:33.683608 2026] [:error] [pid 18831:tid 18923] [client 195.178.110.109:6982] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNxf5KHTHUIuWRG2bXRgAAAEo"]
[Fri Feb 27 02:15:34.767164 2026] [:error] [pid 18843:tid 18958] [client 195.178.110.109:6984] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNxiuD2bhSYSowPs0OegAAARI"]
[Fri Feb 27 02:15:35.980722 2026] [:error] [pid 19020:tid 19023] [client 195.178.110.109:6986] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNx7N3kp7wL6QzPnU6qQAAAUE"]
[Fri Feb 27 02:15:37.186200 2026] [:error] [pid 18843:tid 18947] [client 195.178.110.109:6988] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaCNySuD2bhSYSowPs0OfQAAAQc"]
[Fri Feb 27 02:15:39.132556 2026] [:error] [pid 18831:tid 18929] [client 195.178.110.109:7000] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCNy_5KHTHUIuWRG2bXTwAAAFA"]
[Fri Feb 27 02:15:40.258038 2026] [:error] [pid 18831:tid 18921] [client 195.178.110.109:23508] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCNzP5KHTHUIuWRG2bXUgAAAEg"]
[Fri Feb 27 02:15:41.302048 2026] [:error] [pid 20059:tid 20108] [client 195.178.110.109:23512] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCNzZZBS5wIa_NsqsgsaQAAAcY"]
[Fri Feb 27 02:15:42.357249 2026] [:error] [pid 18831:tid 18924] [client 195.178.110.109:23524] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCNzv5KHTHUIuWRG2bXVwAAAEs"]
[Fri Feb 27 02:15:45.232003 2026] [:error] [pid 18831:tid 18937] [client 195.178.110.109:23544] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCN0f5KHTHUIuWRG2bXYgAAAFg"]
[Fri Feb 27 02:15:47.029189 2026] [:error] [pid 20059:tid 20126] [client 195.178.110.109:23560] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCN05ZBS5wIa_NsqsgsewAAAdg"]
[Fri Feb 27 02:15:50.461094 2026] [:error] [pid 20059:tid 20123] [client 195.178.110.109:42634] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCN1pZBS5wIa_NsqsgskQAAAdU"]
[Fri Feb 27 02:15:52.256121 2026] [:error] [pid 20059:tid 20113] [client 195.178.110.109:42636] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaCN2JZBS5wIa_NsqsgslwAAAcs"]
[Fri Feb 27 02:15:55.262289 2026] [:error] [pid 18831:tid 18918] [client 195.178.110.109:42660] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN2_5KHTHUIuWRG2bXZwAAAEU"]
[Fri Feb 27 02:15:56.350804 2026] [:error] [pid 20059:tid 20111] [client 195.178.110.109:42672] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN3JZBS5wIa_NsqsgspAAAAck"]
[Fri Feb 27 02:15:57.404600 2026] [:error] [pid 18831:tid 18916] [client 195.178.110.109:42688] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN3f5KHTHUIuWRG2bXawAAAEM"]
[Fri Feb 27 02:15:58.415981 2026] [:error] [pid 18843:tid 18956] [client 195.178.110.109:42700] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN3iuD2bhSYSowPs0OlAAAARA"]
[Fri Feb 27 02:16:00.313683 2026] [:error] [pid 20059:tid 20124] [client 195.178.110.109:19722] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN4JZBS5wIa_NsqsgsvQAAAdY"]
[Fri Feb 27 02:16:01.439304 2026] [:error] [pid 20059:tid 20107] [client 195.178.110.109:19724] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN4ZZBS5wIa_NsqsgswQAAAcU"]
[Fri Feb 27 02:16:02.499303 2026] [:error] [pid 19020:tid 19025] [client 195.178.110.109:19740] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN4rN3kp7wL6QzPnU6wwAAAUM"]
[Fri Feb 27 02:16:03.575652 2026] [:error] [pid 18818:tid 18897] [client 195.178.110.109:19752] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN4xhPgqk2SeS_W83NAQAAAA0"]
[Fri Feb 27 02:16:05.515828 2026] [:error] [pid 20059:tid 20102] [client 195.178.110.109:19782] [client 195.178.110.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaCN5ZZBS5wIa_NsqsgszAAAAcA"]
[Fri Feb 27 02:38:29.645547 2026] [:error] [pid 18818:tid 18889] [client 149.102.240.139:64729] [client 149.102.240.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaCTJRhPgqk2SeS_W83RtAAAAAU"]
[Fri Feb 27 02:38:34.943483 2026] [:error] [pid 18831:tid 18921] [client 149.102.240.139:12203] [client 149.102.240.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaCTKv5KHTHUIuWRG2bcjAAAAEg"]
[Fri Feb 27 02:38:39.238796 2026] [:error] [pid 19020:tid 19043] [client 149.102.240.139:46311] [client 149.102.240.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaCTL7N3kp7wL6QzPnVGlQAAAVU"]
[Fri Feb 27 02:44:38.860161 2026] [:error] [pid 19020:tid 19032] [client 20.220.165.49:7859] File does not exist: /usr/local/apache/htdocs/suspended-page/class3.php
[Fri Feb 27 02:44:39.071231 2026] [:error] [pid 19020:tid 19027] [client 20.220.165.49:7859] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 03:49:49.521929 2026] [:error] [pid 64229:tid 64253] [client 43.130.228.73:42512] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaCj3Q4WeEvq64DXt8jCgQAAANY"]
[Fri Feb 27 04:00:20.948009 2026] [:error] [pid 37984:tid 37987] [client 43.165.65.180:43566] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaCmVLvzllUfvW6W6vGEbwAAAME"]
[Fri Feb 27 04:16:27.934289 2026] [:error] [pid 3975:tid 4011] [client 65.108.78.33:60506] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaCqGxMVp0-T2hD76b2oSAAAAIE"]
[Fri Feb 27 04:16:29.903162 2026] [:error] [pid 4081:tid 4098] [client 65.108.78.33:60510] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaCqHQ55mnr35z8h7t3FRQAAAM8"]
[Fri Feb 27 04:16:31.830060 2026] [:error] [pid 5365:tid 5368] [client 65.108.78.33:55730] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaCqH5YAa8J3tYxdG3zXkQAAAQE"]
[Fri Feb 27 04:16:33.947975 2026] [:error] [pid 5365:tid 5382] [client 65.108.78.33:55738] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaCqIZYAa8J3tYxdG3zXmgAAAQ8"]
[Fri Feb 27 04:16:35.949180 2026] [:error] [pid 5365:tid 5387] [client 65.108.78.33:55754] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaCqI5YAa8J3tYxdG3zXpAAAARQ"]
[Fri Feb 27 04:16:37.856898 2026] [:error] [pid 5365:tid 5387] [client 65.108.78.33:55762] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaCqJZYAa8J3tYxdG3zXsgAAARQ"]
[Fri Feb 27 04:16:39.895877 2026] [:error] [pid 5365:tid 5389] [client 65.108.78.33:55768] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaCqJ5YAa8J3tYxdG3zXvAAAARY"]
[Fri Feb 27 04:16:41.851812 2026] [:error] [pid 5365:tid 5381] [client 65.108.78.33:17990] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaCqKZYAa8J3tYxdG3zXxgAAAQ4"]
[Fri Feb 27 04:16:43.788185 2026] [:error] [pid 4081:tid 4096] [client 65.108.78.33:17992] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaCqKw55mnr35z8h7t3FVQAAAM0"]
[Fri Feb 27 04:16:45.677137 2026] [:error] [pid 21329:tid 21404] [client 65.108.78.33:18008] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaCqLZvQWnde-MjcQ1E3DAAAAVU"]
[Fri Feb 27 04:16:47.614814 2026] [:error] [pid 4081:tid 4085] [client 65.108.78.33:18010] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaCqLw55mnr35z8h7t3FWQAAAMI"]
[Fri Feb 27 04:16:49.537236 2026] [:error] [pid 4081:tid 4095] [client 65.108.78.33:18024] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaCqMQ55mnr35z8h7t3FXgAAAMw"]
[Fri Feb 27 04:16:51.458279 2026] [:error] [pid 21329:tid 21407] [client 65.108.78.33:18038] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aaCqM5vQWnde-MjcQ1E3EAAAAVg"]
[Fri Feb 27 04:16:53.497097 2026] [:error] [pid 3975:tid 4011] [client 65.108.78.33:14772] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aaCqNRMVp0-T2hD76b2oVQAAAIE"]
[Fri Feb 27 04:16:58.868483 2026] [:error] [pid 5365:tid 5379] [client 65.108.78.33:14776] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaCqOpYAa8J3tYxdG3zX9wAAAQw"]
[Fri Feb 27 04:17:02.902085 2026] [:error] [pid 3975:tid 4023] [client 65.108.78.33:63964] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaCqPhMVp0-T2hD76b2oWgAAAI0"]
[Fri Feb 27 04:30:18.827801 2026] [:error] [pid 21329:tid 21393] [client 185.198.240.141:30567] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 27 04:30:19.062806 2026] [:error] [pid 21329:tid 21402] [client 185.198.240.141:30567] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 04:30:19.369216 2026] [:error] [pid 21329:tid 21393] [client 185.198.240.141:30567] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Feb 27 04:30:19.740491 2026] [:error] [pid 21329:tid 21383] [client 185.198.240.141:30567] [client 185.198.240.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock360.php"] [unique_id "aaCtW5vQWnde-MjcQ1FMnQAAAUA"]
[Fri Feb 27 04:30:20.268762 2026] [:error] [pid 3973:tid 3999] [client 173.239.214.13:31249] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Feb 27 04:30:20.601110 2026] [:error] [pid 3973:tid 4001] [client 173.239.214.13:31249] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 04:30:20.869901 2026] [:error] [pid 3973:tid 3990] [client 173.239.214.13:31249] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 04:30:21.116547 2026] [:error] [pid 3973:tid 3986] [client 173.239.214.13:31249] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 04:30:21.359989 2026] [:error] [pid 3973:tid 3984] [client 173.239.214.13:31249] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 27 04:30:21.908972 2026] [:error] [pid 3973:tid 3984] [client 173.239.214.13:31249] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 04:30:22.173988 2026] [:error] [pid 3973:tid 3990] [client 173.239.214.13:31249] [client 173.239.214.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.wp/wso.php"] [unique_id "aaCtXoJZsftwqmUaaLPzqAAAAAc"]
[Fri Feb 27 04:30:22.989321 2026] [:error] [pid 21329:tid 21387] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Feb 27 04:30:23.227017 2026] [:error] [pid 21329:tid 21383] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Feb 27 04:30:23.468145 2026] [:error] [pid 21329:tid 21400] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Feb 27 04:30:23.732575 2026] [:error] [pid 21329:tid 21406] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 04:30:24.000883 2026] [:error] [pid 21329:tid 21404] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Feb 27 04:30:24.283586 2026] [:error] [pid 21329:tid 21397] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Feb 27 04:30:24.548582 2026] [:error] [pid 21329:tid 21388] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Feb 27 04:30:24.813224 2026] [:error] [pid 21329:tid 21396] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Feb 27 04:30:25.053327 2026] [:error] [pid 21329:tid 21395] [client 45.131.195.210:23001] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Feb 27 04:30:28.777116 2026] [:error] [pid 21329:tid 21407] [client 45.131.195.210:23001] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaCtZJvQWnde-MjcQ1FNMwAAAVg"]
[Fri Feb 27 04:30:30.336104 2026] [:error] [pid 21329:tid 21383] [client 185.198.240.143:55049] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaCtZpvQWnde-MjcQ1FNTAAAAUA"]
[Fri Feb 27 04:30:31.898582 2026] [:error] [pid 3973:tid 3989] [client 185.198.240.150:44413] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 04:30:32.807989 2026] [:error] [pid 3973:tid 3995] [client 185.198.240.150:44413] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaCtaIJZsftwqmUaaLP0TAAAAAw"]
[Fri Feb 27 04:30:33.894547 2026] [:error] [pid 21329:tid 21394] [client 185.198.240.149:39685] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 04:30:34.164139 2026] [:error] [pid 21329:tid 21404] [client 185.198.240.149:39685] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaCtapvQWnde-MjcQ1FNmQAAAVU"]
[Fri Feb 27 04:30:56.814801 2026] [:error] [pid 5365:tid 5389] [client 173.239.214.14:32629] [client 173.239.214.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaCtgJYAa8J3tYxdG3z-3AAAARY"]
[Fri Feb 27 07:11:19.108378 2026] [:error] [pid 42658:tid 42664] [client 20.220.165.49:41728] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 07:51:49.565740 2026] [:error] [pid 42435:tid 42462] [client 20.48.233.148:22082] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaDclR5hHLnaukp_y9-tcAAAAZY"]
[Fri Feb 27 07:51:51.155080 2026] [:error] [pid 42435:tid 42441] [client 20.48.233.148:22143] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaDclx5hHLnaukp_y9-tdwAAAYE"]
[Fri Feb 27 07:51:52.813514 2026] [:error] [pid 42435:tid 42453] [client 20.48.233.148:22116] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaDcmB5hHLnaukp_y9-tegAAAY0"]
[Fri Feb 27 07:51:55.133951 2026] [:error] [pid 42563:tid 42590] [client 20.48.233.148:22134] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaDcm3KL5BclZy73IRH2vQAAAdQ"]
[Fri Feb 27 07:51:56.423854 2026] [:error] [pid 42658:tid 42667] [client 20.48.233.148:22124] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaDcnIzcoYl3nRbu1jaupQAAAgc"]
[Fri Feb 27 08:34:32.619467 2026] [:error] [pid 54103:tid 54172] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/aigcpsba.php
[Fri Feb 27 08:34:32.828734 2026] [:error] [pid 54103:tid 54175] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/aqmpjaid.php
[Fri Feb 27 08:34:33.056184 2026] [:error] [pid 54103:tid 54191] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/ivnnopon.php
[Fri Feb 27 08:34:33.264346 2026] [:error] [pid 54103:tid 54178] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Fri Feb 27 08:34:33.474686 2026] [:error] [pid 54103:tid 54184] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Fri Feb 27 08:34:33.905817 2026] [:error] [pid 54103:tid 54182] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Feb 27 08:34:34.323264 2026] [:error] [pid 54103:tid 54173] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/nf.php
[Fri Feb 27 08:34:34.533887 2026] [:error] [pid 54103:tid 54187] [client 4.205.37.160:35827] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Feb 27 08:44:39.926923 2026] [:error] [pid 56075:tid 56096] [client 4.205.37.160:45026] File does not exist: /usr/local/apache/htdocs/suspended-page/class3.php
[Fri Feb 27 08:44:40.137232 2026] [:error] [pid 56075:tid 56094] [client 4.205.37.160:45026] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 10:46:08.228749 2026] [:error] [pid 62998:tid 63006] [client 36.41.75.167:38839] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaEFcFQeueXZDUmoLokhLwAAAQQ"]
[Fri Feb 27 11:12:21.014206 2026] [:error] [pid 54101:tid 54120] [client 43.131.243.61:34724] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaELlVY5qgRktcYTGFvnaQAAAcw"]
[Fri Feb 27 11:14:21.984164 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.19:28601] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Feb 27 11:14:23.274027 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.19:28601] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 11:14:23.851726 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.19:28601] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:14:24.356402 2026] [:error] [pid 56075:tid 56092] [client 64.64.108.19:28601] [client 64.64.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaEMEMKBhrfI6KNv9RiJzQAAAA4"]
[Fri Feb 27 11:14:25.385034 2026] [:error] [pid 54103:tid 54187] [client 64.64.108.53:33841] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 27 11:14:25.845231 2026] [:error] [pid 54103:tid 54181] [client 64.64.108.53:33841] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 11:14:26.356318 2026] [:error] [pid 54103:tid 54173] [client 64.64.108.53:33841] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Feb 27 11:14:26.869883 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.53:33841] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEMEuvG4MPCmE0B2sAxiwAAANc"]
[Fri Feb 27 11:14:28.096909 2026] [:error] [pid 56075:tid 56099] [client 64.64.108.39:53243] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEMFMKBhrfI6KNv9RiJ2gAAABU"]
[Fri Feb 27 11:14:29.172728 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.26:45103] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEMFeTvb5AeyJCdY7B2GwAAAFY"]
[Fri Feb 27 11:14:30.630348 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.21:57279] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEMFsKBhrfI6KNv9RiKAQAAABY"]
[Fri Feb 27 11:14:31.691686 2026] [:error] [pid 52073:tid 52081] [client 64.64.108.20:46921] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEMF4a650YPyxXVeRZovwAAAYU"]
[Fri Feb 27 11:14:33.751766 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.33:58961] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Feb 27 11:14:36.158156 2026] [:error] [pid 54103:tid 54188] [client 64.64.108.33:58961] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 11:14:36.629521 2026] [:error] [pid 54103:tid 54177] [client 64.64.108.33:58961] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEMHOvG4MPCmE0B2sAx-AAAAMY"]
[Fri Feb 27 11:14:37.790475 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.25:60675] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEMHcKBhrfI6KNv9RiKWQAAAAY"]
[Fri Feb 27 11:14:39.447478 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.53:65031] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Feb 27 11:14:39.954264 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.53:65031] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Fri Feb 27 11:14:40.555962 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.53:65031] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Feb 27 11:14:41.065033 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.53:65031] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Feb 27 11:14:41.554643 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.53:65031] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Feb 27 11:14:42.061210 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.53:65031] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Fri Feb 27 11:14:42.633523 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.53:65031] [client 64.64.108.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaEMIsKBhrfI6KNv9RiKfgAAABg"]
[Fri Feb 27 11:14:43.514148 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.17:23443] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Fri Feb 27 11:14:43.964318 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.17:23443] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Feb 27 11:14:44.372330 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.17:23443] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Fri Feb 27 11:14:44.947918 2026] [:error] [pid 54103:tid 54193] [client 64.64.108.17:23443] [client 64.64.108.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaEMJOvG4MPCmE0B2sAyQgAAANY"]
[Fri Feb 27 11:14:46.079854 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Feb 27 11:14:46.554291 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Fri Feb 27 11:14:46.958917 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Feb 27 11:14:47.590722 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Feb 27 11:14:48.059408 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Fri Feb 27 11:14:49.152083 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Fri Feb 27 11:14:49.641219 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Feb 27 11:14:50.315328 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Fri Feb 27 11:14:51.037041 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Feb 27 11:14:51.660284 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Fri Feb 27 11:14:52.338264 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 27 11:14:52.871095 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Fri Feb 27 11:14:53.355240 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Feb 27 11:14:53.903089 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Feb 27 11:14:54.484814 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Feb 27 11:14:54.953403 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Feb 27 11:14:55.571634 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Feb 27 11:14:56.120774 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Feb 27 11:14:56.756136 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Fri Feb 27 11:14:57.251289 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Fri Feb 27 11:14:57.736432 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Feb 27 11:14:58.161493 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Fri Feb 27 11:14:58.871690 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Fri Feb 27 11:14:59.484251 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 27 11:14:59.964214 2026] [:error] [pid 49306:tid 49314] [client 64.64.108.54:36415] [client 64.64.108.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.54, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaEMM_nSUDZue59Px9tyKgAAAUY"]
[Fri Feb 27 11:14:59.967236 2026] [:error] [pid 49306:tid 49314] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 11:15:01.232142 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Fri Feb 27 11:15:01.782601 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.54:36415] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Feb 27 11:15:02.432415 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.54:36415] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aaEMNvnSUDZue59Px9tyTAAAAVg"]
[Fri Feb 27 11:15:03.594672 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Fri Feb 27 11:15:04.065643 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Feb 27 11:15:04.956799 2026] [:error] [pid 54101:tid 54118] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Fri Feb 27 11:15:05.549297 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Fri Feb 27 11:15:06.155539 2026] [:error] [pid 54101:tid 54131] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Fri Feb 27 11:15:07.260168 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Fri Feb 27 11:15:07.848087 2026] [:error] [pid 54101:tid 54115] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Fri Feb 27 11:15:08.259259 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Fri Feb 27 11:15:08.733964 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Fri Feb 27 11:15:09.248758 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Fri Feb 27 11:15:09.789611 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Fri Feb 27 11:15:12.034989 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Feb 27 11:15:12.561702 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Fri Feb 27 11:15:13.146883 2026] [:error] [pid 54101:tid 54121] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Fri Feb 27 11:15:14.640912 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Fri Feb 27 11:15:15.264242 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Fri Feb 27 11:15:15.955774 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Fri Feb 27 11:15:16.546099 2026] [:error] [pid 54101:tid 54116] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Fri Feb 27 11:15:17.154660 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Fri Feb 27 11:15:17.834449 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Fri Feb 27 11:15:18.350890 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Fri Feb 27 11:15:20.263690 2026] [:error] [pid 54101:tid 54112] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Fri Feb 27 11:15:20.849264 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Fri Feb 27 11:15:21.967232 2026] [:error] [pid 54101:tid 54131] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Fri Feb 27 11:15:22.554566 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Fri Feb 27 11:15:23.278781 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Fri Feb 27 11:15:23.856867 2026] [:error] [pid 54101:tid 54120] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Fri Feb 27 11:15:24.352344 2026] [:error] [pid 54101:tid 54115] [client 64.64.108.18:52355] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Fri Feb 27 11:15:24.839413 2026] [:error] [pid 54101:tid 54116] [client 64.64.108.18:52355] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/lx.php"] [unique_id "aaEMTFY5qgRktcYTGFvvEwAAAcg"]
[Fri Feb 27 11:15:27.843907 2026] [:error] [pid 54231:tid 54250] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Fri Feb 27 11:15:28.539003 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Fri Feb 27 11:15:29.158767 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Fri Feb 27 11:15:29.743519 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Fri Feb 27 11:15:30.255948 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Fri Feb 27 11:15:30.770100 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Feb 27 11:15:31.244939 2026] [:error] [pid 54231:tid 54250] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Fri Feb 27 11:15:32.579229 2026] [:error] [pid 54231:tid 54246] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Fri Feb 27 11:15:33.237144 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Fri Feb 27 11:15:33.766410 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Fri Feb 27 11:15:34.368534 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 27 11:15:34.937113 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Fri Feb 27 11:15:35.355167 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Fri Feb 27 11:15:35.865294 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Fri Feb 27 11:15:36.457498 2026] [:error] [pid 54231:tid 54255] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Fri Feb 27 11:15:36.960412 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Fri Feb 27 11:15:37.533626 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Fri Feb 27 11:15:37.969927 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Fri Feb 27 11:15:38.386587 2026] [:error] [pid 54231:tid 54237] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Fri Feb 27 11:15:38.876712 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Fri Feb 27 11:15:39.355187 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Fri Feb 27 11:15:39.848715 2026] [:error] [pid 54231:tid 54237] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 11:15:40.397643 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Fri Feb 27 11:15:40.849150 2026] [:error] [pid 54231:tid 54250] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Fri Feb 27 11:15:41.356851 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Fri Feb 27 11:15:41.858256 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Feb 27 11:15:42.351767 2026] [:error] [pid 54231:tid 54249] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Fri Feb 27 11:15:42.944310 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Feb 27 11:15:43.544170 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Fri Feb 27 11:15:44.535835 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Fri Feb 27 11:15:45.058937 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Fri Feb 27 11:15:45.649337 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Fri Feb 27 11:15:46.663125 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Fri Feb 27 11:15:49.737323 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Feb 27 11:15:50.350756 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Feb 27 11:15:50.845657 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Fri Feb 27 11:15:51.348349 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.30:63441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Fri Feb 27 11:15:51.845507 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.30:63441] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaEMZ-Tvb5AeyJCdY7B6ZQAAAEQ"]
[Fri Feb 27 11:15:53.078835 2026] [:error] [pid 52073:tid 52097] [client 64.64.108.57:52763] [client 64.64.108.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.64.108.57, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaEMaYa650YPyxXVeRZszAAAAZU"]
[Fri Feb 27 11:15:53.086008 2026] [:error] [pid 52073:tid 52097] [client 64.64.108.57:52763] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 11:15:53.657979 2026] [:error] [pid 52073:tid 52087] [client 64.64.108.57:52763] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Feb 27 11:15:54.649072 2026] [:error] [pid 52073:tid 52086] [client 64.64.108.57:52763] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaEMaoa650YPyxXVeRZs3wAAAYo"]
[Fri Feb 27 11:15:56.985030 2026] [:error] [pid 52073:tid 52086] [client 64.64.108.20:59219] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Fri Feb 27 11:15:59.482933 2026] [:error] [pid 52073:tid 52097] [client 64.64.108.20:59219] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 11:16:00.481599 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.20:59219] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Feb 27 11:16:01.151301 2026] [:error] [pid 52073:tid 52083] [client 64.64.108.20:59219] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEMcYa650YPyxXVeRZtJQAAAYc"]
[Fri Feb 27 11:16:02.385787 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Fri Feb 27 11:16:02.999287 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Fri Feb 27 11:16:03.563720 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Feb 27 11:16:05.957319 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Fri Feb 27 11:16:06.578972 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 11:16:07.064188 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 11:16:07.555264 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Fri Feb 27 11:16:09.598562 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.23:60795] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 27 11:16:10.631620 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.23:60795] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaEMelQeueXZDUmoLolt4wAAARM"]
[Fri Feb 27 11:16:11.681951 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.64:47437] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaEMe1QeueXZDUmoLolt9QAAARM"]
[Fri Feb 27 11:16:12.585663 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.59:54051] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaEMfPnSUDZue59Px9t2IQAAAVM"]
[Fri Feb 27 11:16:13.684868 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.17:39185] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaEMfevG4MPCmE0B2sA1jQAAANI"]
[Fri Feb 27 11:16:14.581738 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.58:60285] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Fri Feb 27 11:16:15.152613 2026] [:error] [pid 54231:tid 54258] [client 64.64.108.58:60285] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Fri Feb 27 11:16:16.234894 2026] [:error] [pid 54231:tid 54249] [client 64.64.108.58:60285] [client 64.64.108.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.58, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aaEMgOTvb5AeyJCdY7B7HAAAAE8"]
[Fri Feb 27 11:16:19.541850 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.58:60285] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Feb 27 11:16:20.530267 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.58:60285] [client 64.64.108.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aaEMhOTvb5AeyJCdY7B7QgAAAEQ"]
[Fri Feb 27 11:16:21.477828 2026] [:error] [pid 54103:tid 54177] [client 64.64.108.21:23479] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Feb 27 11:16:25.241677 2026] [:error] [pid 54103:tid 54180] [client 64.64.108.21:23479] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaEMievG4MPCmE0B2sA1-AAAAMk"]
[Fri Feb 27 11:16:26.269060 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.42:63115] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Feb 27 11:16:27.836896 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.42:63115] [client 64.64.108.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.42, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaEMi-Tvb5AeyJCdY7B7kgAAAFQ"]
[Fri Feb 27 11:16:28.350217 2026] [:error] [pid 54231:tid 54258] [client 64.64.108.42:63115] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Fri Feb 27 11:16:29.440176 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.42:63115] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Feb 27 11:16:29.963356 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.42:63115] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Fri Feb 27 11:16:31.135966 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.42:63115] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 11:16:31.566151 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.42:63115] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Feb 27 11:16:32.052030 2026] [:error] [pid 54231:tid 54258] [client 64.64.108.42:63115] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEMkOTvb5AeyJCdY7B70AAAAFg"]
[Fri Feb 27 11:16:33.375426 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.37:23269] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aaEMkcKBhrfI6KNv9RiOrAAAAAw"]
[Fri Feb 27 11:16:34.483986 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.41:54935] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Fri Feb 27 11:16:34.954117 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.41:54935] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Fri Feb 27 11:16:35.464905 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.41:54935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Feb 27 11:16:36.555889 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.41:54935] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Fri Feb 27 11:16:41.735852 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.41:54935] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaEMmVQeueXZDUmoLolwjQAAAQ0"]
[Fri Feb 27 11:16:42.776407 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.19:55697] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 11:16:43.337833 2026] [:error] [pid 52073:tid 52089] [client 64.64.108.19:55697] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Fri Feb 27 11:16:45.054978 2026] [:error] [pid 52073:tid 52095] [client 64.64.108.19:55697] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaEMnYa650YPyxXVeRZu0QAAAZM"]
[Fri Feb 27 11:16:48.392770 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.37:53721] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "aaEMoPnSUDZue59Px9t32QAAAUs"]
[Fri Feb 27 11:16:49.705561 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.26:50449] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Feb 27 11:16:50.161948 2026] [:error] [pid 54103:tid 54186] [client 64.64.108.26:50449] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaEMouvG4MPCmE0B2sA23wAAAM8"]
[Fri Feb 27 11:16:52.351535 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.38:31877] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Fri Feb 27 11:16:53.278604 2026] [:error] [pid 54103:tid 54190] [client 64.64.108.38:31877] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Feb 27 11:16:53.743199 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.38:31877] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaEMpevG4MPCmE0B2sA3DgAAAM4"]
[Fri Feb 27 11:16:54.798047 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.31:21269] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaEMpsKBhrfI6KNv9RiPNwAAABY"]
[Fri Feb 27 11:16:55.871812 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.19:47269] [client 64.64.108.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.19, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aaEMp1QeueXZDUmoLolxMgAAAQY"]
[Fri Feb 27 11:16:56.444966 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.19:47269] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Feb 27 11:16:58.350073 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.19:47269] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/themes.php"] [unique_id "aaEMqlQeueXZDUmoLolxWAAAARg"]
[Fri Feb 27 11:16:59.379947 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.54:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:17:00.446446 2026] [:error] [pid 54103:tid 54186] [client 64.64.108.54:25801] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Fri Feb 27 11:17:03.871320 2026] [:error] [pid 54103:tid 54187] [client 64.64.108.54:25801] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aaEMr-vG4MPCmE0B2sA3cgAAANA"]
[Fri Feb 27 11:17:04.887238 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.54:55781] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 27 11:17:06.031428 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.54:55781] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "aaEMsvnSUDZue59Px9t4yQAAAUw"]
[Fri Feb 27 11:17:07.094673 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.35:41723] [client 64.64.108.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/xmrlpc.php"] [unique_id "aaEMs1QeueXZDUmoLolx3gAAAQU"]
[Fri Feb 27 11:17:08.559889 2026] [:error] [pid 54102:tid 54166] [client 64.64.108.17:48123] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Fri Feb 27 11:17:09.066229 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.17:48123] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aaEMtXi74D4fiYUm_GcUZgAAAJc"]
[Fri Feb 27 11:17:11.347798 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.30:44013] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Fri Feb 27 11:17:11.849670 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.30:44013] [client 64.64.108.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.30, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aaEMt-vG4MPCmE0B2sA36QAAANc"]
[Fri Feb 27 11:17:13.342494 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.30:44013] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaEMuevG4MPCmE0B2sA3_wAAAMg"]
[Fri Feb 27 11:17:14.579957 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.15:57003] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaEMulY5qgRktcYTGFvy4QAAAc8"]
[Fri Feb 27 11:17:17.245347 2026] [:error] [pid 54102:tid 54166] [client 64.64.108.53:35783] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri Feb 27 11:17:18.757271 2026] [:error] [pid 54102:tid 54163] [client 64.64.108.53:35783] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri Feb 27 11:17:19.838570 2026] [:error] [pid 54102:tid 54164] [client 64.64.108.53:35783] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Feb 27 11:17:20.351123 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.53:35783] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Fri Feb 27 11:17:21.352232 2026] [:error] [pid 54102:tid 54151] [client 64.64.108.53:35783] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaEMwXi74D4fiYUm_GcVBAAAAIc"]
[Fri Feb 27 11:17:23.933535 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.49:41315] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaEMw1Y5qgRktcYTGFvzHgAAAdA"]
[Fri Feb 27 11:17:24.968483 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.21:61247] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaEMxPnSUDZue59Px9t6FgAAAUI"]
[Fri Feb 27 11:17:25.971855 2026] [:error] [pid 52073:tid 52092] [client 64.64.108.64:46435] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aaEMxYa650YPyxXVeRZw6AAAAZA"]
[Fri Feb 27 11:17:26.903812 2026] [:error] [pid 52073:tid 52089] [client 64.64.108.64:53581] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaEMxoa650YPyxXVeRZw-wAAAY0"]
[Fri Feb 27 11:17:30.059381 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.31:20953] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Feb 27 11:17:30.638872 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.31:20953] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aaEMyvnSUDZue59Px9t6ZwAAAUQ"]
[Fri Feb 27 11:17:32.146272 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.63:53831] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Feb 27 11:17:32.671912 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.63:53831] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Fri Feb 27 11:17:33.145022 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.63:53831] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaEMzfnSUDZue59Px9t6lgAAAVc"]
[Fri Feb 27 11:17:34.393077 2026] [:error] [pid 54102:tid 54152] [client 64.64.108.48:56337] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Feb 27 11:17:34.962750 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.48:56337] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Fri Feb 27 11:17:35.552324 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.48:56337] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaEMz3i74D4fiYUm_GcVWwAAAIE"]
[Fri Feb 27 11:17:36.689135 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:56307] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Fri Feb 27 11:17:37.146680 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.40:56307] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aaEM0VQeueXZDUmoLoly2gAAAQ8"]
[Fri Feb 27 11:17:39.752316 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.20:24535] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaEM0-Tvb5AeyJCdY7B-LwAAAEs"]
[Fri Feb 27 11:17:41.095456 2026] [:error] [pid 52073:tid 52094] [client 64.64.108.36:43991] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aaEM1Ya650YPyxXVeRZxnwAAAZI"]
[Fri Feb 27 11:17:42.547528 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.18:62273] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaEM1vnSUDZue59Px9t7OQAAAVY"]
[Fri Feb 27 11:17:43.774310 2026] [:error] [pid 56075:tid 56079] [client 64.64.108.15:46103] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 11:17:44.989355 2026] [:error] [pid 56075:tid 56092] [client 64.64.108.15:46103] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Feb 27 11:17:45.452024 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.15:46103] [client 64.64.108.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.15, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aaEM2cKBhrfI6KNv9RiRbwAAAAw"]
[Fri Feb 27 11:17:46.401879 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.15:46103] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aaEM2sKBhrfI6KNv9RiRdwAAAAw"]
[Fri Feb 27 11:17:47.522829 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.54:23485] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaEM28KBhrfI6KNv9RiRfgAAAA8"]
[Fri Feb 27 11:17:48.521236 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.17:52783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Feb 27 11:17:48.969558 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.17:52783] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Feb 27 11:17:51.671489 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.17:52783] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Fri Feb 27 11:17:58.860797 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.17:52783] [client 64.64.108.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.17, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aaEM5sKBhrfI6KNv9RiRxQAAAAQ"]
[Fri Feb 27 11:17:59.396836 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.17:52783] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaEM58KBhrfI6KNv9RiRygAAAAg"]
[Fri Feb 27 11:18:00.594078 2026] [:error] [pid 52073:tid 52095] [client 64.64.108.48:31869] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aaEM6Ia650YPyxXVeRZymwAAAZM"]
[Fri Feb 27 11:18:01.893849 2026] [:error] [pid 52073:tid 52081] [client 64.64.108.65:64737] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaEM6Ya650YPyxXVeRZytAAAAYU"]
[Fri Feb 27 11:18:04.654184 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.32:60547] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Fri Feb 27 11:18:05.157919 2026] [:error] [pid 52073:tid 52086] [client 64.64.108.32:60547] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aaEM7Ya650YPyxXVeRZy8wAAAYo"]
[Fri Feb 27 11:18:06.684169 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.34:23863] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Fri Feb 27 11:18:08.152678 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.34:23863] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaEM8PnSUDZue59Px9t83QAAAVc"]
[Fri Feb 27 11:18:09.487311 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.37:54811] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 27 11:18:11.055443 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.37:54811] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Feb 27 11:18:11.544077 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.37:54811] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaEM8_nSUDZue59Px9t9IwAAAVI"]
[Fri Feb 27 11:18:12.970716 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.66:22783] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Fri Feb 27 11:18:13.881910 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.66:22783] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaEM9VQeueXZDUmoLol0eQAAAQk"]
[Fri Feb 27 11:18:15.748035 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.32:56477] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 11:18:17.531082 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.32:56477] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaEM-VQeueXZDUmoLol0pAAAAQk"]
[Fri Feb 27 11:18:19.157130 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.20:49753] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaEM-1Y5qgRktcYTGFv0XgAAAcI"]
[Fri Feb 27 11:18:20.181443 2026] [:error] [pid 54103:tid 54187] [client 64.64.108.34:45329] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEM_OvG4MPCmE0B2sA6VAAAANA"]
[Fri Feb 27 11:18:21.084937 2026] [:error] [pid 54102:tid 54151] [client 64.64.108.19:51605] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaEM_Xi74D4fiYUm_GcWpAAAAIc"]
[Fri Feb 27 11:18:22.743960 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.24:63051] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaEM_vnSUDZue59Px9t9wwAAAUw"]
[Fri Feb 27 11:18:24.344295 2026] [:error] [pid 54231:tid 54255] [client 64.64.108.28:58861] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaENAOTvb5AeyJCdY7B_0QAAAFU"]
[Fri Feb 27 11:18:26.441270 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.43:26253] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaENAuTvb5AeyJCdY7B_9QAAAEk"]
[Fri Feb 27 11:18:27.948696 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.20:23187] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Feb 27 11:18:29.051779 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.20:23187] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaENBVQeueXZDUmoLol1XAAAAQc"]
[Fri Feb 27 11:18:30.644178 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.18:42735] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Fri Feb 27 11:18:31.365315 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.18:42735] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Fri Feb 27 11:18:31.830577 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.18:42735] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaENB_nSUDZue59Px9t-IwAAAUU"]
[Fri Feb 27 11:18:33.656673 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.46:21719] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaENCeTvb5AeyJCdY7CAMgAAAFQ"]
[Fri Feb 27 11:18:34.793140 2026] [:error] [pid 52073:tid 52098] [client 64.64.108.16:31237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Feb 27 11:18:36.555898 2026] [:error] [pid 52073:tid 52099] [client 64.64.108.16:31237] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Feb 27 11:18:37.039778 2026] [:error] [pid 52073:tid 52092] [client 64.64.108.16:31237] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aaENDYa650YPyxXVeRZ0pQAAAZA"]
[Fri Feb 27 11:18:38.553172 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.50:46229] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 11:18:39.561805 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.50:46229] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Feb 27 11:18:40.149091 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.50:46229] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Feb 27 11:18:41.663856 2026] [:error] [pid 54231:tid 54258] [client 64.64.108.50:46229] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Feb 27 11:18:42.141189 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.50:46229] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaENEuTvb5AeyJCdY7CAcAAAAFE"]
[Fri Feb 27 11:18:44.739625 2026] [:error] [pid 52073:tid 52095] [client 64.64.108.22:45287] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Fri Feb 27 11:18:45.344564 2026] [:error] [pid 52073:tid 52077] [client 64.64.108.22:45287] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aaENFYa650YPyxXVeRZ1DAAAAYE"]
[Fri Feb 27 11:18:47.577456 2026] [:error] [pid 52073:tid 52083] [client 64.64.108.41:22771] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaENF4a650YPyxXVeRZ1GgAAAYc"]
[Fri Feb 27 11:18:48.493825 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.33:20073] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 11:18:48.950142 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.33:20073] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Feb 27 11:18:49.757120 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.33:20073] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Feb 27 11:18:50.332869 2026] [:error] [pid 56075:tid 56098] [client 64.64.108.33:20073] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aaENGsKBhrfI6KNv9RiUPQAAABQ"]
[Fri Feb 27 11:18:51.394474 2026] [:error] [pid 52073:tid 52092] [client 64.64.108.26:58983] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaENG4a650YPyxXVeRZ1OAAAAZA"]
[Fri Feb 27 11:18:52.307884 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.26:50745] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 11:18:52.761271 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.26:50745] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Fri Feb 27 11:18:53.245138 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.26:50745] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Fri Feb 27 11:18:53.747668 2026] [:error] [pid 54102:tid 54151] [client 64.64.108.26:50745] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaENHXi74D4fiYUm_GcX5AAAAIc"]
[Fri Feb 27 11:18:55.375032 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.51:23447] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Fri Feb 27 11:18:55.852191 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.51:23447] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 11:18:56.453256 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.51:23447] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaENIFQeueXZDUmoLol3PQAAAQE"]
[Fri Feb 27 11:18:59.243260 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.39:46367] [client 64.64.108.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaENI1QeueXZDUmoLol3awAAAQ4"]
[Fri Feb 27 11:19:00.288159 2026] [:error] [pid 52073:tid 52094] [client 64.64.108.35:39919] [client 64.64.108.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.35, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaENJIa650YPyxXVeRZ1kAAAAZI"]
[Fri Feb 27 11:19:00.843669 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.35:39919] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Feb 27 11:19:01.338690 2026] [:error] [pid 52073:tid 52092] [client 64.64.108.35:39919] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaENJYa650YPyxXVeRZ1mQAAAZA"]
[Fri Feb 27 11:19:02.397758 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.45:56037] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaENJuTvb5AeyJCdY7CBJAAAAFE"]
[Fri Feb 27 11:19:04.055784 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.21:63269] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:19:10.470326 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.21:63269] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Fri Feb 27 11:19:11.039527 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.21:63269] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aaENL-Tvb5AeyJCdY7CBmAAAAEo"]
[Fri Feb 27 11:19:12.009344 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.16:45417] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Feb 27 11:19:12.536143 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.16:45417] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaENMHi74D4fiYUm_GcYcAAAAIw"]
[Fri Feb 27 11:19:14.155628 2026] [:error] [pid 54102:tid 54146] [client 64.64.108.38:44331] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Feb 27 11:19:14.654733 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.38:44331] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Feb 27 11:19:17.255668 2026] [:error] [pid 54102:tid 54166] [client 64.64.108.38:44331] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Fri Feb 27 11:19:18.256155 2026] [:error] [pid 54102:tid 54152] [client 64.64.108.38:44331] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaENNni74D4fiYUm_GcYpgAAAIg"]
[Fri Feb 27 11:19:19.504769 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.31:29995] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Fri Feb 27 11:19:20.950444 2026] [:error] [pid 54231:tid 54237] [client 64.64.108.31:29995] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Fri Feb 27 11:19:21.651156 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.31:29995] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Feb 27 11:19:23.252611 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.31:29995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Fri Feb 27 11:19:23.763498 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.31:29995] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 11:19:24.673788 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.31:29995] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mah.php"] [unique_id "aaENPOTvb5AeyJCdY7CCJwAAAEA"]
[Fri Feb 27 11:19:25.694546 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.43:33889] [client 64.64.108.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.43, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aaENPXi74D4fiYUm_GcY2wAAAIQ"]
[Fri Feb 27 11:19:26.441150 2026] [:error] [pid 54102:tid 54169] [client 64.64.108.43:33889] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aaENPni74D4fiYUm_GcY4AAAAJg"]
[Fri Feb 27 11:19:28.933520 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.21:58031] [client 64.64.108.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/bak.php"] [unique_id "aaENQPnSUDZue59Px9uA4AAAAUc"]
[Fri Feb 27 11:19:29.886913 2026] [:error] [pid 54102:tid 54152] [client 64.64.108.50:40703] [client 64.64.108.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/bak.php"] [unique_id "aaENQXi74D4fiYUm_GcZEwAAAIg"]
[Fri Feb 27 11:19:32.574599 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.44:36755] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 27 11:19:33.643731 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.44:36755] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaENRVQeueXZDUmoLol4wQAAAQI"]
[Fri Feb 27 11:19:35.363032 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.42:30661] [client 64.64.108.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.42, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aaENR3i74D4fiYUm_GcZYwAAAJA"]
[Fri Feb 27 11:19:37.106737 2026] [:error] [pid 54102:tid 54146] [client 64.64.108.42:30661] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Fri Feb 27 11:19:37.656863 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.42:30661] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Fri Feb 27 11:19:38.267059 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.42:30661] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Fri Feb 27 11:19:39.347789 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.42:30661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Fri Feb 27 11:19:39.845249 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.42:30661] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaENS3i74D4fiYUm_GcZqAAAAIY"]
[Fri Feb 27 11:19:41.375918 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.33:43527] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/packed.php"] [unique_id "aaENTeTvb5AeyJCdY7CCvwAAAEY"]
[Fri Feb 27 11:19:42.396719 2026] [:error] [pid 52073:tid 52089] [client 64.64.108.19:54367] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 11:19:42.845486 2026] [:error] [pid 52073:tid 52097] [client 64.64.108.19:54367] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Feb 27 11:19:44.657515 2026] [:error] [pid 52073:tid 52093] [client 64.64.108.19:54367] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Fri Feb 27 11:19:45.545544 2026] [:error] [pid 52073:tid 52079] [client 64.64.108.19:54367] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Fri Feb 27 11:19:47.148962 2026] [:error] [pid 52073:tid 52093] [client 64.64.108.19:54367] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aaENU4a650YPyxXVeRZ3iwAAAZE"]
[Fri Feb 27 11:19:48.560728 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.56:64303] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaENVPnSUDZue59Px9uCUQAAAUo"]
[Fri Feb 27 11:19:50.599224 2026] [:error] [pid 52073:tid 52087] [client 64.64.108.37:39759] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aaENVoa650YPyxXVeRZ3pAAAAYs"]
[Fri Feb 27 11:19:51.582560 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.66:42375] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Feb 27 11:19:53.352324 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.66:42375] [client 64.64.108.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.66, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaENWXi74D4fiYUm_GcaQwAAAIE"]
[Fri Feb 27 11:19:53.934893 2026] [:error] [pid 54102:tid 54169] [client 64.64.108.66:42375] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaENWXi74D4fiYUm_GcaSQAAAJg"]
[Fri Feb 27 11:19:59.841074 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.59:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Fri Feb 27 11:20:00.358764 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.59:64053] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Fri Feb 27 11:20:01.352010 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.59:64053] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaENYVQeueXZDUmoLol5qAAAAQI"]
[Fri Feb 27 11:20:02.409945 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.17:46345] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aaENYlQeueXZDUmoLol5rAAAARU"]
[Fri Feb 27 11:20:03.307691 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.36:54679] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Fri Feb 27 11:20:06.444346 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.36:54679] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaENZlY5qgRktcYTGFv4fwAAAcI"]
[Fri Feb 27 11:20:07.487934 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.48:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 11:20:08.028049 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.48:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Fri Feb 27 11:20:09.057903 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.48:54275] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aaENafnSUDZue59Px9uD7wAAAUc"]
[Fri Feb 27 11:20:12.342303 2026] [:error] [pid 54102:tid 54153] [client 64.64.108.45:51541] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Fri Feb 27 11:20:19.333240 2026] [:error] [pid 54102:tid 54146] [client 64.64.108.45:51541] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aaENc3i74D4fiYUm_GcbZAAAAII"]
[Fri Feb 27 11:20:23.947790 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.54:20895] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aaENd1QeueXZDUmoLol6PAAAAQE"]
[Fri Feb 27 11:20:26.341263 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.37:52847] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Fri Feb 27 11:20:27.967498 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.37:52847] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Feb 27 11:20:28.371067 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.37:52847] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Feb 27 11:20:28.853281 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.37:52847] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aaENfOTvb5AeyJCdY7CEPwAAAFQ"]
[Fri Feb 27 11:20:29.791175 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.60:44829] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Fri Feb 27 11:20:31.372624 2026] [:error] [pid 54101:tid 54120] [client 64.64.108.60:44829] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Fri Feb 27 11:20:31.848089 2026] [:error] [pid 54101:tid 54116] [client 64.64.108.60:44829] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaENf1Y5qgRktcYTGFv5agAAAcg"]
[Fri Feb 27 11:20:32.705119 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.33:42333] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Feb 27 11:20:33.624622 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.33:42333] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Feb 27 11:20:34.149469 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.33:42333] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Feb 27 11:20:35.150019 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.33:42333] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Fri Feb 27 11:20:36.936207 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.33:42333] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/item.php"] [unique_id "aaENhFQeueXZDUmoLol6qAAAARU"]
[Fri Feb 27 11:20:41.553481 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.50:20019] [client 64.64.108.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.50, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aaENifnSUDZue59Px9uE8AAAAUQ"]
[Fri Feb 27 11:20:42.210889 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.50:20019] [client 64.64.108.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.50, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaENivnSUDZue59Px9uE8wAAAUQ"]
[Fri Feb 27 11:20:42.837955 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.50:20019] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mani.php"] [unique_id "aaENivnSUDZue59Px9uE_AAAAUo"]
[Fri Feb 27 11:20:43.946121 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.36:39879] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Feb 27 11:20:48.581214 2026] [:error] [pid 54103:tid 54170] [client 64.64.108.36:39879] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aaENkOvG4MPCmE0B2sA_xQAAAMA"]
[Fri Feb 27 11:20:50.708182 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.36:27411] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Fri Feb 27 11:20:51.250858 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.36:27411] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Fri Feb 27 11:20:51.892854 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.36:27411] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaENk8KBhrfI6KNv9RiYXQAAAA8"]
[Fri Feb 27 11:20:57.672584 2026] [:error] [pid 52073:tid 52081] [client 64.64.108.60:65471] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aaENmYa650YPyxXVeRZ7bAAAAYU"]
[Fri Feb 27 11:20:59.254994 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.66:55565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Feb 27 11:21:00.764752 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.66:55565] [client 64.64.108.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.66, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-login.php"] [unique_id "aaENnOTvb5AeyJCdY7CFjwAAAEE"]
[Fri Feb 27 11:21:02.943194 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.66:55565] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aaENnuTvb5AeyJCdY7CFrwAAAEg"]
[Fri Feb 27 11:21:03.984619 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.24:36113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Feb 27 11:21:04.635177 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.24:36113] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aaENoPnSUDZue59Px9uGCQAAAVU"]
[Fri Feb 27 11:21:05.776411 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.52:22295] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaENoevG4MPCmE0B2sBAIQAAAMU"]
[Fri Feb 27 11:21:07.242831 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.43:45153] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaENo_nSUDZue59Px9uGMAAAAUA"]
[Fri Feb 27 11:21:14.964996 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.36:53327] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aaENquTvb5AeyJCdY7CGXwAAAE0"]
[Fri Feb 27 11:21:16.560643 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.24:36729] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Feb 27 11:21:18.648840 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.24:36729] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Fri Feb 27 11:21:19.233038 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.24:36729] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Fri Feb 27 11:21:19.747635 2026] [:error] [pid 56075:tid 56099] [client 64.64.108.24:36729] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Fri Feb 27 11:21:20.235932 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.24:36729] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Feb 27 11:21:21.362257 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.24:36729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 11:21:22.942217 2026] [:error] [pid 56075:tid 56098] [client 64.64.108.24:36729] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/radio.php"] [unique_id "aaENssKBhrfI6KNv9RiZkgAAABQ"]
[Fri Feb 27 11:21:24.464040 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.30:45653] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Fri Feb 27 11:21:24.862035 2026] [:error] [pid 56075:tid 56098] [client 64.64.108.30:45653] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Feb 27 11:21:25.449640 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.30:45653] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 27 11:21:25.866200 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.30:45653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Fri Feb 27 11:21:26.959698 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.30:45653] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Fri Feb 27 11:21:27.444311 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.30:45653] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Fri Feb 27 11:21:28.453951 2026] [:error] [pid 56075:tid 56098] [client 64.64.108.30:45653] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aaENuMKBhrfI6KNv9RiZ1wAAABQ"]
[Fri Feb 27 11:21:32.058217 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.58:36213] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaENvMKBhrfI6KNv9RiaBwAAABI"]
[Fri Feb 27 11:21:37.272429 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.31:36207] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Feb 27 11:21:37.839431 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.31:36207] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Fri Feb 27 11:21:38.371723 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.31:36207] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Fri Feb 27 11:21:39.464408 2026] [:error] [pid 54101:tid 54126] [client 64.64.108.31:36207] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Fri Feb 27 11:21:39.859096 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.31:36207] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Fri Feb 27 11:21:40.461437 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.31:36207] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Fri Feb 27 11:21:41.046544 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.31:36207] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaENxVY5qgRktcYTGFv75QAAAcI"]
[Fri Feb 27 11:21:43.032676 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.17:49801] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aaENx_nSUDZue59Px9uHfQAAAVA"]
[Fri Feb 27 11:21:44.670018 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Fri Feb 27 11:21:45.155319 2026] [:error] [pid 54231:tid 54249] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Feb 27 11:21:45.762319 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Fri Feb 27 11:21:46.293620 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Fri Feb 27 11:21:46.858791 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 27 11:21:47.271283 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Fri Feb 27 11:21:47.763671 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Fri Feb 27 11:21:48.259575 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Feb 27 11:21:48.770178 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Fri Feb 27 11:21:49.368818 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Feb 27 11:21:49.848881 2026] [:error] [pid 54231:tid 54246] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Fri Feb 27 11:21:50.348983 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Fri Feb 27 11:21:50.959764 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Fri Feb 27 11:21:51.545517 2026] [:error] [pid 54231:tid 54252] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Fri Feb 27 11:21:52.058668 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Fri Feb 27 11:21:52.501055 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Fri Feb 27 11:21:53.066697 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Feb 27 11:21:53.557508 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Feb 27 11:21:54.086143 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Fri Feb 27 11:21:54.560856 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Feb 27 11:21:55.146965 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Fri Feb 27 11:21:55.753322 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Feb 27 11:21:56.272629 2026] [:error] [pid 54231:tid 54255] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Fri Feb 27 11:21:56.760968 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Fri Feb 27 11:21:57.274254 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Fri Feb 27 11:21:57.767103 2026] [:error] [pid 62998:tid 63022] [client 43.133.91.48:40514] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaEN1VQeueXZDUmoLol-YgAAARQ"]
[Fri Feb 27 11:21:57.784116 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Feb 27 11:21:58.297235 2026] [:error] [pid 54231:tid 54246] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Feb 27 11:21:58.755324 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.28:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Fri Feb 27 11:21:59.249130 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.28:61009] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaEN1-Tvb5AeyJCdY7CH4QAAAFM"]
[Fri Feb 27 11:22:00.188971 2026] [:error] [pid 52073:tid 52094] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Fri Feb 27 11:22:00.674162 2026] [:error] [pid 52073:tid 52099] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Fri Feb 27 11:22:01.143502 2026] [:error] [pid 52073:tid 52094] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Fri Feb 27 11:22:01.761065 2026] [:error] [pid 52073:tid 52077] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Fri Feb 27 11:22:02.255039 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Fri Feb 27 11:22:02.749621 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Fri Feb 27 11:22:03.276601 2026] [:error] [pid 52073:tid 52080] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Fri Feb 27 11:22:03.747213 2026] [:error] [pid 52073:tid 52080] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Fri Feb 27 11:22:04.744322 2026] [:error] [pid 52073:tid 52097] [client 64.64.108.64:56075] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Fri Feb 27 11:22:05.238239 2026] [:error] [pid 52073:tid 52083] [client 64.64.108.64:56075] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aaEN3Ya650YPyxXVeRZ-ngAAAYc"]
[Fri Feb 27 11:22:08.888599 2026] [:error] [pid 52073:tid 52080] [client 64.64.108.20:56827] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Fri Feb 27 11:22:14.037937 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.20:56827] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aaEN5oa650YPyxXVeRZ_CgAAAYw"]
[Fri Feb 27 11:22:14.984929 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.29:65303] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aaEN5lQeueXZDUmoLol_SwAAARU"]
[Fri Feb 27 11:22:17.151128 2026] [:error] [pid 52073:tid 52100] [client 64.64.108.21:45407] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aaEN6Ya650YPyxXVeRZ_HwAAAZg"]
[Fri Feb 27 11:22:18.942964 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.19:48117] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/repeater.php"] [unique_id "aaEN6sKBhrfI6KNv9RibmwAAABE"]
[Fri Feb 27 11:22:21.653298 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.39:32261] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php
[Fri Feb 27 11:22:22.155726 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.39:32261] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php
[Fri Feb 27 11:22:23.845453 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.39:32261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php
[Fri Feb 27 11:22:28.044539 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.39:32261] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aaEN9PnSUDZue59Px9uJPQAAAVY"]
[Fri Feb 27 11:22:29.189725 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.19:24065] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aaEN9VQeueXZDUmoLomAIgAAAQ4"]
[Fri Feb 27 11:22:30.640822 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.46:44369] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/options.php"] [unique_id "aaEN9lQeueXZDUmoLomASQAAARQ"]
[Fri Feb 27 11:22:31.695859 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.48:50005] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Fri Feb 27 11:22:33.344458 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.48:50005] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aaEN-VQeueXZDUmoLomAfAAAARY"]
[Fri Feb 27 11:22:34.183542 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.63:50671] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aaEN-ni74D4fiYUm_GcgLwAAAIo"]
[Fri Feb 27 11:22:36.051675 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.45:56115] [client 64.64.108.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.45, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/images/wp-login.php"] [unique_id "aaEN_PnSUDZue59Px9uJjgAAAUI"]
[Fri Feb 27 11:22:36.550144 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.45:56115] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Feb 27 11:22:38.042719 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.45:56115] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aaEN_vnSUDZue59Px9uJsAAAAUI"]
[Fri Feb 27 11:22:39.192739 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.31:49705] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php
[Fri Feb 27 11:22:41.333736 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.31:49705] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aaEOAVQeueXZDUmoLomA-gAAARc"]
[Fri Feb 27 11:22:42.502230 2026] [:error] [pid 52073:tid 52093] [client 64.64.108.36:38045] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aaEOAoa650YPyxXVeRaAOQAAAZE"]
[Fri Feb 27 11:22:43.471993 2026] [:error] [pid 56075:tid 56079] [client 64.64.108.58:59943] [client 64.64.108.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.58, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaEOA8KBhrfI6KNv9RicVwAAAAI"]
[Fri Feb 27 11:22:44.043162 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.58:59943] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aaEOBMKBhrfI6KNv9RicXgAAABY"]
[Fri Feb 27 11:22:45.185460 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.49:53077] File does not exist: /usr/local/apache/htdocs/suspended-page/indeex.php
[Fri Feb 27 11:22:45.766293 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.49:53077] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 11:22:47.953265 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.49:53077] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aaEOB8KBhrfI6KNv9RiclAAAAAU"]
[Fri Feb 27 11:22:49.103022 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Fri Feb 27 11:22:50.245251 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/credits.php
[Fri Feb 27 11:22:51.651188 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-comments.php
[Fri Feb 27 11:22:52.140060 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Fri Feb 27 11:22:52.567876 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Fri Feb 27 11:22:53.058030 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Fri Feb 27 11:22:53.464161 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/load-scripts.php
[Fri Feb 27 11:22:53.955904 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/load-styles.php
[Fri Feb 27 11:22:54.474176 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/options-discussion.php
[Fri Feb 27 11:22:55.072388 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php
[Fri Feb 27 11:22:55.554101 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/options-permalink.php
[Fri Feb 27 11:22:55.965353 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/options-privacy.php
[Fri Feb 27 11:22:56.470196 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Fri Feb 27 11:22:56.967676 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Fri Feb 27 11:22:57.474307 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/post-new.php
[Fri Feb 27 11:22:57.957598 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Fri Feb 27 11:22:58.462870 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Fri Feb 27 11:22:58.963114 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/site-health.php
[Fri Feb 27 11:22:59.445361 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Fri Feb 27 11:22:59.967283 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Feb 27 11:23:00.465012 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php
[Fri Feb 27 11:23:01.171998 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/user-new.php
[Fri Feb 27 11:23:01.658080 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/bar.php
[Fri Feb 27 11:23:02.162262 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri Feb 27 11:23:02.650324 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Feb 27 11:23:03.256778 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Feb 27 11:23:03.865711 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Feb 27 11:23:04.357258 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/km.php
[Fri Feb 27 11:23:04.866346 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/LA.php
[Fri Feb 27 11:23:05.377997 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Feb 27 11:23:05.962725 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ldd.php
[Fri Feb 27 11:23:06.558564 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php
[Fri Feb 27 11:23:07.146854 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php
[Fri Feb 27 11:23:08.665516 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:23:09.584986 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 11:23:11.075361 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Feb 27 11:23:11.639508 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.28:21959] [client 64.64.108.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.28, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEOH1QeueXZDUmoLomDDwAAAQA"]
[Fri Feb 27 11:23:12.173839 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Fri Feb 27 11:23:13.467805 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.28:21959] [client 64.64.108.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.28, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.tmb/wp-login.php"] [unique_id "aaEOIVQeueXZDUmoLomDJQAAAQI"]
[Fri Feb 27 11:23:14.461734 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.28:21959] File does not exist: /usr/local/apache/htdocs/suspended-page/FroggBaba.php
[Fri Feb 27 11:23:14.967216 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.28:21959] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaEOIlQeueXZDUmoLomDOAAAAQI"]
[Fri Feb 27 11:23:15.979100 2026] [:error] [pid 54231:tid 54252] [client 64.64.108.42:35321] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aaEOI-Tvb5AeyJCdY7CKbQAAAFI"]
[Fri Feb 27 11:23:16.887753 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.53:56107] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aaEOJOvG4MPCmE0B2sBDZgAAAMM"]
[Fri Feb 27 11:23:17.994188 2026] [:error] [pid 54103:tid 54186] [client 64.64.108.32:49025] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Fri Feb 27 11:23:23.737290 2026] [:error] [pid 54103:tid 54191] [client 64.64.108.32:49025] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Fri Feb 27 11:23:24.242615 2026] [:error] [pid 54103:tid 54190] [client 64.64.108.32:49025] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Fri Feb 27 11:23:26.447993 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.32:49025] [client 64.64.108.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.32, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaEOLuvG4MPCmE0B2sBDwQAAANU"]
[Fri Feb 27 11:23:26.937882 2026] [:error] [pid 54103:tid 54195] [client 64.64.108.32:49025] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEOLuvG4MPCmE0B2sBDyAAAANg"]
[Fri Feb 27 11:23:28.373683 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/crop.php
[Fri Feb 27 11:23:28.954187 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.46:37499] [client 64.64.108.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.46, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaEOMFY5qgRktcYTGFv-cQAAAdU"]
[Fri Feb 27 11:23:30.052224 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/gali.php
[Fri Feb 27 11:23:31.652549 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Feb 27 11:23:32.160528 2026] [:error] [pid 54101:tid 54115] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/dirs.php
[Fri Feb 27 11:23:32.763869 2026] [:error] [pid 54101:tid 54108] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Fri Feb 27 11:23:33.366535 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/malls.php
[Fri Feb 27 11:23:33.847743 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/liefs.php
[Fri Feb 27 11:23:34.282209 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/uc.php
[Fri Feb 27 11:23:34.761430 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Fri Feb 27 11:23:35.349906 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.46:37499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-dsdd.php
[Fri Feb 27 11:23:37.555210 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.46:37499] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aaEOOVY5qgRktcYTGFv-3AAAAcI"]
[Fri Feb 27 11:23:38.604350 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Feb 27 11:23:39.363777 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Fri Feb 27 11:23:39.860705 2026] [:error] [pid 54103:tid 54175] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Feb 27 11:23:40.362535 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Fri Feb 27 11:23:40.768572 2026] [:error] [pid 54103:tid 54181] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php
[Fri Feb 27 11:23:41.261130 2026] [:error] [pid 54103:tid 54190] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Feb 27 11:23:42.167082 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Fri Feb 27 11:23:42.651952 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 27 11:23:43.254259 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Fri Feb 27 11:23:43.771973 2026] [:error] [pid 54103:tid 54175] [client 64.64.108.66:48871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Feb 27 11:23:44.264669 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.66:48871] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaEOQOvG4MPCmE0B2sBEUQAAANI"]
[Fri Feb 27 11:23:45.389411 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Feb 27 11:23:47.247829 2026] [:error] [pid 54101:tid 54126] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php
[Fri Feb 27 11:23:48.036938 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Fri Feb 27 11:23:50.533726 2026] [:error] [pid 54101:tid 54119] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 11:23:51.045870 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Feb 27 11:23:51.634926 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php
[Fri Feb 27 11:23:53.062551 2026] [:error] [pid 54101:tid 54120] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php
[Fri Feb 27 11:23:54.355926 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.43:49665] [client 64.64.108.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.43, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaEOSlY5qgRktcYTGFv_oAAAAdA"]
[Fri Feb 27 11:23:54.757195 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Fri Feb 27 11:23:56.347712 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Fri Feb 27 11:23:56.859542 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Fri Feb 27 11:23:58.056067 2026] [:error] [pid 54101:tid 54122] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Feb 27 11:23:59.746714 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Feb 27 11:24:00.974649 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.43:49665] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Feb 27 11:24:48.639584 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.39:59189] [client 64.64.108.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/aryabot/"] [unique_id "aaEOgPnSUDZue59Px9uNcwAAAUM"]
[Fri Feb 27 11:37:05.838003 2026] [:error] [pid 52073:tid 52091] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Feb 27 11:37:05.928177 2026] [:error] [pid 52073:tid 52097] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 27 11:37:06.022357 2026] [:error] [pid 52073:tid 52080] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 27 11:37:06.119218 2026] [:error] [pid 52073:tid 52096] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Feb 27 11:37:06.219905 2026] [:error] [pid 52073:tid 52095] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 11:37:06.311987 2026] [:error] [pid 52073:tid 52084] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Fri Feb 27 11:37:06.402221 2026] [:error] [pid 52073:tid 52099] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 11:37:06.495109 2026] [:error] [pid 52073:tid 52081] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Feb 27 11:37:06.585466 2026] [:error] [pid 52073:tid 52080] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Feb 27 11:37:06.676275 2026] [:error] [pid 52073:tid 52084] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 11:37:06.792874 2026] [:error] [pid 52073:tid 52099] [client 20.205.227.70:17373] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Feb 27 11:37:06.880192 2026] [:error] [pid 52073:tid 52076] [client 20.205.227.70:17373] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-editor.php"] [unique_id "aaERYoa650YPyxXVeRaZQgAAAYA"]
[Fri Feb 27 11:37:07.251003 2026] [:error] [pid 49306:tid 49326] [client 20.205.227.70:14828] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-editor.php"] [unique_id "aaERY_nSUDZue59Px9uhvQAAAVI"]
[Fri Feb 27 11:37:07.610833 2026] [:error] [pid 49306:tid 49311] [client 20.205.227.70:8583] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-editor.php"] [unique_id "aaERY_nSUDZue59Px9uhwAAAAUM"]
[Fri Feb 27 11:37:07.984339 2026] [:error] [pid 52073:tid 52078] [client 20.205.227.70:21777] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-editor.php"] [unique_id "aaERY4a650YPyxXVeRaZTwAAAYI"]
[Fri Feb 27 12:42:55.326049 2026] [:error] [pid 62998:tid 63006] [client 147.135.212.201:57062] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aaEgz1QeueXZDUmoLom30QAAAQQ"]
[Fri Feb 27 12:42:57.211875 2026] [:error] [pid 49306:tid 49319] [client 147.135.212.201:33196] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaEg0fnSUDZue59Px9vnngAAAUs"]
[Fri Feb 27 12:42:59.199084 2026] [:error] [pid 56075:tid 56088] [client 147.135.212.201:33204] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaEg08KBhrfI6KNv9RjWgQAAAAs"]
[Fri Feb 27 14:35:35.906481 2026] [:error] [pid 52073:tid 52079] [client 145.239.69.106:54324] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaE7N4a650YPyxXVeRYXSQAAAYM"]
[Fri Feb 27 14:35:38.417898 2026] [:error] [pid 52073:tid 52094] [client 145.239.69.106:54930] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaE7Ooa650YPyxXVeRYXXAAAAZI"]
[Fri Feb 27 14:35:42.179748 2026] [:error] [pid 62998:tid 63025] [client 145.239.69.106:34660] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaE7PlQeueXZDUmoLonU3QAAARc"]
[Fri Feb 27 15:32:14.174182 2026] [:error] [pid 49306:tid 49331] [client 4.204.192.31:12323] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 15:37:53.759503 2026] [:error] [pid 54231:tid 54253] [client 91.224.92.99:51133] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaFJ0eTvb5AeyJCdY7DHoAAAAFM"]
[Fri Feb 27 15:37:53.762874 2026] [:error] [pid 54231:tid 54253] [client 91.224.92.99:51133] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 15:37:56.889946 2026] [:error] [pid 54231:tid 54244] [client 91.224.92.99:51133] [client 91.224.92.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaFJ1OTvb5AeyJCdY7DHrQAAAEo"]
[Fri Feb 27 15:37:57.580912 2026] [:error] [pid 49306:tid 49319] [client 91.224.92.99:60275] [client 91.224.92.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaFJ1fnSUDZue59Px9tlNAAAAUs"]
[Fri Feb 27 15:37:58.236249 2026] [:error] [pid 52073:tid 52077] [client 91.224.92.99:52915] [client 91.224.92.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaFJ1oa650YPyxXVeRZPaAAAAYE"]
[Fri Feb 27 15:37:58.923026 2026] [:error] [pid 56075:tid 56078] [client 91.224.92.99:55888] [client 91.224.92.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaFJ1sKBhrfI6KNv9RgbwAAAAAE"]
[Fri Feb 27 16:42:45.668908 2026] [:error] [pid 54103:tid 54181] [client 4.204.192.31:26512] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaFZBevG4MPCmE0B2sB3WAAAAMo"]
[Fri Feb 27 16:42:47.085044 2026] [:error] [pid 54103:tid 54191] [client 4.204.192.31:26597] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaFZB-vG4MPCmE0B2sB3XQAAANQ"]
[Fri Feb 27 16:42:48.052453 2026] [:error] [pid 54103:tid 54177] [client 4.204.192.31:26516] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaFZCOvG4MPCmE0B2sB3YwAAAMY"]
[Fri Feb 27 16:42:50.320323 2026] [:error] [pid 49306:tid 49314] [client 4.204.192.31:26515] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaFZCvnSUDZue59Px9uDNAAAAUY"]
[Fri Feb 27 17:21:36.748452 2026] [:error] [pid 49306:tid 49325] [client 51.83.9.109:44772] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "aaFiIPnSUDZue59Px9uW0AAAAVE"]
[Fri Feb 27 17:21:38.819352 2026] [:error] [pid 49306:tid 49323] [client 51.83.9.109:44774] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aaFiIvnSUDZue59Px9uW1AAAAU8"]
[Fri Feb 27 17:21:40.999974 2026] [:error] [pid 49306:tid 49311] [client 51.83.9.109:44778] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aaFiJPnSUDZue59Px9uW2wAAAUM"]
[Fri Feb 27 17:21:43.146929 2026] [:error] [pid 56075:tid 56101] [client 51.83.9.109:33944] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aaFiJ8KBhrfI6KNv9Rg-GwAAABc"]
[Fri Feb 27 17:21:45.205177 2026] [:error] [pid 49306:tid 49324] [client 51.83.9.109:33958] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aaFiKfnSUDZue59Px9uW5QAAAVA"]
[Fri Feb 27 17:21:47.237296 2026] [:error] [pid 52073:tid 52079] [client 51.83.9.109:33972] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aaFiK4a650YPyxXVeRaU1AAAAYM"]
[Fri Feb 27 17:21:49.235468 2026] [:error] [pid 62998:tid 63010] [client 51.83.9.109:33984] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaFiLVQeueXZDUmoLon8YgAAAQg"]
[Fri Feb 27 18:01:11.526098 2026] [:error] [pid 54102:tid 54144] [client 43.140.247.223:51770] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaFrZ3i74D4fiYUm_GdSMwAAAIA"]
[Fri Feb 27 18:26:54.856330 2026] [:error] [pid 56075:tid 56081] [client 4.204.192.31:30604] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 18:39:28.687987 2026] [:error] [pid 49306:tid 49314] [client 4.204.192.31:55107] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaF0YPnSUDZue59Px9u_9AAAAUY"]
[Fri Feb 27 18:50:18.889019 2026] [:error] [pid 49306:tid 49329] [client 129.226.93.214:43128] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaF26vnSUDZue59Px9vFQAAAAVU"]
[Fri Feb 27 18:56:47.780252 2026] [:error] [pid 56075:tid 56083] [client 195.201.199.99:51280] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaF4b8KBhrfI6KNv9RhdmwAAAAY"]
[Fri Feb 27 18:56:50.112134 2026] [:error] [pid 49306:tid 49326] [client 195.201.199.99:52176] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaF4cvnSUDZue59Px9vJLgAAAVI"]
[Fri Feb 27 18:56:52.787969 2026] [:error] [pid 52073:tid 52082] [client 195.201.199.99:52520] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaF4dIa650YPyxXVeRbdnwAAAYY"]
[Fri Feb 27 19:00:15.629783 2026] [:error] [pid 54101:tid 54120] [client 43.159.128.155:49796] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaF5P1Y5qgRktcYTGFswXgAAAcw"]
[Fri Feb 27 19:05:36.439333 2026] [:error] [pid 52073:tid 52097] [client 4.204.192.31:12225] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 19:58:46.055489 2026] [:error] [pid 56075:tid 56081] [client 4.204.192.31:22465] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 20:02:26.469826 2026] [:error] [pid 52073:tid 52089] [client 217.182.194.16:60432] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaGH0oa650YPyxXVeRYVPgAAAY0"]
[Fri Feb 27 20:02:28.638025 2026] [:error] [pid 56075:tid 56086] [client 217.182.194.16:48652] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaGH1MKBhrfI6KNv9Rh85gAAAAk"]
[Fri Feb 27 20:02:30.692746 2026] [:error] [pid 49306:tid 49326] [client 217.182.194.16:48658] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaGH1vnSUDZue59Px9vwYQAAAVI"]
[Fri Feb 27 20:02:32.573407 2026] [:error] [pid 56075:tid 56100] [client 217.182.194.16:48660] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaGH2MKBhrfI6KNv9Rh9CAAAABY"]
[Fri Feb 27 20:02:34.473885 2026] [:error] [pid 62998:tid 63019] [client 217.182.194.16:48664] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaGH2lQeueXZDUmoLokpxQAAARE"]
[Fri Feb 27 20:02:36.507329 2026] [:error] [pid 56075:tid 56095] [client 217.182.194.16:48668] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaGH3MKBhrfI6KNv9Rh9JQAAABE"]
[Fri Feb 27 20:02:38.538102 2026] [:error] [pid 54101:tid 54130] [client 217.182.194.16:57068] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaGH3lY5qgRktcYTGFs3YgAAAdY"]
[Fri Feb 27 20:02:40.871242 2026] [:error] [pid 62998:tid 63008] [client 217.182.194.16:57080] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaGH4FQeueXZDUmoLokp6AAAAQY"]
[Fri Feb 27 20:02:43.177061 2026] [:error] [pid 49306:tid 49331] [client 217.182.194.16:57088] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaGH4_nSUDZue59Px9vwkAAAAVc"]
[Fri Feb 27 20:02:45.348313 2026] [:error] [pid 56075:tid 56096] [client 217.182.194.16:57098] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaGH5cKBhrfI6KNv9Rh9SgAAABI"]
[Fri Feb 27 20:02:47.491072 2026] [:error] [pid 52073:tid 52090] [client 217.182.194.16:57100] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaGH54a650YPyxXVeRYVdAAAAY4"]
[Fri Feb 27 20:02:49.439514 2026] [:error] [pid 62998:tid 63018] [client 217.182.194.16:51746] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaGH6VQeueXZDUmoLokqCwAAARA"]
[Fri Feb 27 20:02:51.556932 2026] [:error] [pid 52073:tid 52100] [client 217.182.194.16:51756] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaGH64a650YPyxXVeRYVhgAAAZg"]
[Fri Feb 27 20:02:53.856318 2026] [:error] [pid 56075:tid 56090] [client 217.182.194.16:51770] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaGH7cKBhrfI6KNv9Rh9cQAAAAw"]
[Fri Feb 27 20:02:55.921762 2026] [:error] [pid 52073:tid 52095] [client 217.182.194.16:51786] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaGH74a650YPyxXVeRYVogAAAZM"]
[Fri Feb 27 20:02:58.009637 2026] [:error] [pid 56075:tid 56093] [client 217.182.194.16:51798] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaGH8sKBhrfI6KNv9Rh9gwAAAA8"]
[Fri Feb 27 20:03:00.072819 2026] [:error] [pid 49306:tid 49328] [client 217.182.194.16:48294] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaGH9PnSUDZue59Px9vwuAAAAVQ"]
[Fri Feb 27 20:03:02.436357 2026] [:error] [pid 56075:tid 56078] [client 217.182.194.16:48306] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aaGH9sKBhrfI6KNv9Rh9oAAAAAE"]
[Fri Feb 27 20:03:04.307405 2026] [:error] [pid 52073:tid 52081] [client 217.182.194.16:48310] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaGH-Ia650YPyxXVeRYVywAAAYU"]
[Fri Feb 27 20:03:06.422917 2026] [:error] [pid 52073:tid 52088] [client 217.182.194.16:48322] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaGH-oa650YPyxXVeRYV7AAAAYw"]
[Fri Feb 27 20:03:08.340098 2026] [:error] [pid 56075:tid 56097] [client 217.182.194.16:44356] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaGH_MKBhrfI6KNv9Rh99AAAABM"]
[Fri Feb 27 20:03:10.531555 2026] [:error] [pid 49306:tid 49310] [client 217.182.194.16:44364] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaGH_vnSUDZue59Px9vw1QAAAUI"]
[Fri Feb 27 20:03:13.071905 2026] [:error] [pid 52073:tid 52080] [client 217.182.194.16:44370] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaGIAYa650YPyxXVeRYWOwAAAYQ"]
[Fri Feb 27 20:03:14.904522 2026] [:error] [pid 56075:tid 56100] [client 217.182.194.16:44386] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaGIAsKBhrfI6KNv9Rh-QwAAABY"]
[Fri Feb 27 20:03:17.007438 2026] [:error] [pid 52073:tid 52096] [client 217.182.194.16:44394] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaGIBYa650YPyxXVeRYWWwAAAZQ"]
[Fri Feb 27 20:03:18.962568 2026] [:error] [pid 52073:tid 52097] [client 217.182.194.16:57952] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aaGIBoa650YPyxXVeRYWagAAAZU"]
[Fri Feb 27 20:03:21.014339 2026] [:error] [pid 49306:tid 49324] [client 217.182.194.16:57960] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaGICfnSUDZue59Px9vw6AAAAVA"]
[Fri Feb 27 20:03:43.628404 2026] [:error] [pid 56075:tid 56093] [client 217.182.194.16:57964] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aaGIH8KBhrfI6KNv9Rh_pwAAAA8"]
[Fri Feb 27 20:03:45.771628 2026] [:error] [pid 56075:tid 56102] [client 217.182.194.16:38910] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aaGIIcKBhrfI6KNv9Rh_tQAAABg"]
[Fri Feb 27 20:03:47.736300 2026] [:error] [pid 56075:tid 56095] [client 217.182.194.16:38914] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aaGII8KBhrfI6KNv9Rh_1AAAABE"]
[Fri Feb 27 20:03:49.891207 2026] [:error] [pid 56075:tid 56082] [client 217.182.194.16:53890] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaGIJcKBhrfI6KNv9Rh_5gAAAAU"]
[Fri Feb 27 20:03:52.032182 2026] [:error] [pid 56075:tid 56097] [client 217.182.194.16:53902] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aaGIKMKBhrfI6KNv9Rh_9gAAABM"]
[Fri Feb 27 20:03:54.013719 2026] [:error] [pid 56075:tid 56093] [client 217.182.194.16:53912] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaGIKsKBhrfI6KNv9RiABQAAAA8"]
[Fri Feb 27 20:03:56.141212 2026] [:error] [pid 56075:tid 56082] [client 217.182.194.16:53918] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaGILMKBhrfI6KNv9RiAHAAAAAU"]
[Fri Feb 27 20:03:58.293941 2026] [:error] [pid 62998:tid 63013] [client 217.182.194.16:55210] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaGILlQeueXZDUmoLokqtwAAAQs"]
[Fri Feb 27 20:04:00.253753 2026] [:error] [pid 62998:tid 63021] [client 217.182.194.16:55222] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaGIMFQeueXZDUmoLokqwAAAARM"]
[Fri Feb 27 20:04:02.492366 2026] [:error] [pid 54103:tid 54175] [client 217.182.194.16:55232] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaGIMuvG4MPCmE0B2sCVrAAAAMQ"]
[Fri Feb 27 20:04:04.400784 2026] [:error] [pid 56075:tid 56085] [client 217.182.194.16:55240] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaGINMKBhrfI6KNv9RiAcwAAAAg"]
[Fri Feb 27 20:04:06.529957 2026] [:error] [pid 56075:tid 56087] [client 217.182.194.16:55254] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaGINsKBhrfI6KNv9RiAkgAAAAo"]
[Fri Feb 27 20:04:08.694914 2026] [:error] [pid 52073:tid 52090] [client 217.182.194.16:54314] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaGIOIa650YPyxXVeRYW5gAAAY4"]
[Fri Feb 27 20:04:10.660964 2026] [:error] [pid 54231:tid 54254] [client 217.182.194.16:54318] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaGIOuTvb5AeyJCdY7D6ugAAAFQ"]
[Fri Feb 27 20:04:13.523318 2026] [:error] [pid 49306:tid 49319] [client 217.182.194.16:54326] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaGIPfnSUDZue59Px9vxVgAAAUs"]
[Fri Feb 27 20:04:17.404893 2026] [:error] [pid 56075:tid 56100] [client 217.182.194.16:54334] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaGIQcKBhrfI6KNv9RiA4gAAABY"]
[Fri Feb 27 20:37:48.221876 2026] [:error] [pid 56075:tid 56101] [client 54.37.84.47:45770] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaGQHMKBhrfI6KNv9Rih3QAAABc"]
[Fri Feb 27 20:37:50.249292 2026] [:error] [pid 62998:tid 63020] [client 54.37.84.47:34180] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaGQHlQeueXZDUmoLok4NQAAARI"]
[Fri Feb 27 21:06:58.139567 2026] [:error] [pid 52073:tid 52100] [client 192.236.146.245:47446] [client 192.236.146.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "aaGW8oa650YPyxXVeRZAzAAAAZg"]
[Fri Feb 27 21:27:49.681142 2026] [:error] [pid 52073:tid 52081] [client 65.108.2.171:49822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaGb1Ya650YPyxXVeRZRZAAAAYU"]
[Fri Feb 27 21:27:51.588332 2026] [:error] [pid 52073:tid 52086] [client 65.108.2.171:49832] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaGb14a650YPyxXVeRZRjgAAAYo"]
[Fri Feb 27 21:27:53.531361 2026] [:error] [pid 62998:tid 63006] [client 65.108.2.171:49838] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaGb2VQeueXZDUmoLolIFAAAAQQ"]
[Fri Feb 27 21:27:55.635906 2026] [:error] [pid 52073:tid 52091] [client 65.108.2.171:23698] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaGb24a650YPyxXVeRZRrgAAAY8"]
[Fri Feb 27 21:27:57.693494 2026] [:error] [pid 56075:tid 56085] [client 65.108.2.171:23714] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaGb3cKBhrfI6KNv9RjOTgAAAAg"]
[Fri Feb 27 21:27:59.678078 2026] [:error] [pid 52073:tid 52080] [client 65.108.2.171:23728] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaGb34a650YPyxXVeRZR0AAAAYQ"]
[Fri Feb 27 21:28:01.739543 2026] [:error] [pid 62998:tid 63002] [client 65.108.2.171:23744] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaGb4VQeueXZDUmoLolIgAAAAQE"]
[Fri Feb 27 21:28:24.267815 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 27 21:28:24.516648 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 21:28:24.758058 2026] [:error] [pid 56075:tid 56085] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Feb 27 21:28:24.998543 2026] [:error] [pid 56075:tid 56101] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Feb 27 21:28:25.246020 2026] [:error] [pid 56075:tid 56102] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 21:28:25.494220 2026] [:error] [pid 56075:tid 56081] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 21:28:25.747429 2026] [:error] [pid 56075:tid 56081] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 21:28:26.016490 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 27 21:28:26.508578 2026] [:error] [pid 56075:tid 56093] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 21:28:27.039403 2026] [:error] [pid 56075:tid 56082] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Feb 27 21:28:27.278649 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Feb 27 21:28:27.520108 2026] [:error] [pid 56075:tid 56081] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Feb 27 21:28:27.781319 2026] [:error] [pid 56075:tid 56100] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 21:28:28.045727 2026] [:error] [pid 56075:tid 56093] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Feb 27 21:28:28.269416 2026] [:error] [pid 56075:tid 56098] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Feb 27 21:28:28.513578 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Feb 27 21:28:28.761530 2026] [:error] [pid 56075:tid 56092] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Feb 27 21:28:29.002726 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.99:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Feb 27 21:28:32.617362 2026] [:error] [pid 56075:tid 56101] [client 45.131.195.99:39197] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaGcAMKBhrfI6KNv9RjPhAAAABc"]
[Fri Feb 27 21:28:33.950300 2026] [:error] [pid 49306:tid 49328] [client 45.131.195.104:43475] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaGcAfnSUDZue59Px9sXjgAAAVQ"]
[Fri Feb 27 21:28:36.676566 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.99:63559] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 21:28:37.428918 2026] [:error] [pid 52073:tid 52087] [client 45.131.195.99:63559] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaGcBYa650YPyxXVeRZVRAAAAYs"]
[Fri Feb 27 21:28:39.772446 2026] [:error] [pid 54101:tid 54108] [client 45.131.195.75:62415] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 21:28:40.053407 2026] [:error] [pid 54101:tid 54131] [client 45.131.195.75:62415] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaGcCFY5qgRktcYTGFtAXwAAAdc"]
[Fri Feb 27 21:28:42.229689 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.70:53763] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 21:28:43.545493 2026] [:error] [pid 52073:tid 52076] [client 45.131.195.70:53763] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaGcC4a650YPyxXVeRZVegAAAYA"]
[Fri Feb 27 21:28:44.257381 2026] [:error] [pid 54103:tid 54178] [client 45.131.195.78:39497] [client 45.131.195.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaGcDOvG4MPCmE0B2sCl3QAAAMc"]
[Fri Feb 27 21:28:44.782943 2026] [:error] [pid 49306:tid 49315] [client 45.131.195.58:55495] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaGcDPnSUDZue59Px9sYBQAAAUc"]
[Fri Feb 27 21:28:45.323011 2026] [:error] [pid 54103:tid 54175] [client 45.131.195.58:46355] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaGcDevG4MPCmE0B2sCl3gAAAMQ"]
[Fri Feb 27 21:28:45.775815 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.85:24639] [client 45.131.195.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaGcDcKBhrfI6KNv9RjQHQAAAAA"]
[Fri Feb 27 21:28:46.297062 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.75:44905] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaGcDsKBhrfI6KNv9RjQIgAAAAY"]
[Fri Feb 27 21:28:47.058715 2026] [:error] [pid 49306:tid 49318] [client 45.131.195.73:57203] [client 45.131.195.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaGcD_nSUDZue59Px9sYNwAAAUo"]
[Fri Feb 27 21:28:47.549784 2026] [:error] [pid 52073:tid 52098] [client 45.131.195.59:43603] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Feb 27 21:28:48.128560 2026] [:error] [pid 52073:tid 52096] [client 45.131.195.59:43603] [client 45.131.195.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaGcEIa650YPyxXVeRZVsgAAAZQ"]
[Fri Feb 27 21:28:49.107896 2026] [:error] [pid 54103:tid 54185] [client 45.131.195.72:24175] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaGcEevG4MPCmE0B2sCl7gAAAM4"]
[Fri Feb 27 21:28:49.830655 2026] [:error] [pid 62998:tid 63016] [client 45.131.195.61:59253] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaGcEVQeueXZDUmoLolKSgAAAQ4"]
[Fri Feb 27 21:28:50.262436 2026] [:error] [pid 62998:tid 63024] [client 45.131.195.114:45027] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 21:28:50.545090 2026] [:error] [pid 62998:tid 63010] [client 45.131.195.114:45027] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaGcElQeueXZDUmoLolKXwAAAQg"]
[Fri Feb 27 21:28:51.111204 2026] [:error] [pid 54103:tid 54177] [client 45.131.195.60:49431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 21:28:51.911279 2026] [:error] [pid 54103:tid 54170] [client 45.131.195.60:49431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 21:28:52.721305 2026] [:error] [pid 54103:tid 54188] [client 45.131.195.60:49431] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaGcFOvG4MPCmE0B2sCmAgAAANE"]
[Fri Feb 27 21:28:53.225638 2026] [:error] [pid 56075:tid 56090] [client 45.131.195.52:33713] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Feb 27 21:28:53.464477 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.52:33713] [client 45.131.195.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaGcFcKBhrfI6KNv9RjQSQAAABM"]
[Fri Feb 27 21:28:53.953049 2026] [:error] [pid 52073:tid 52078] [client 45.131.195.63:63257] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 27 21:28:54.500375 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.63:63257] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaGcFoa650YPyxXVeRZV2QAAAYE"]
[Fri Feb 27 21:28:55.274469 2026] [:error] [pid 52073:tid 52076] [client 45.131.195.95:28677] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaGcF4a650YPyxXVeRZV4QAAAYA"]
[Fri Feb 27 21:28:56.007739 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.61:20315] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Feb 27 21:28:56.304371 2026] [:error] [pid 56075:tid 56091] [client 45.131.195.61:20315] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 27 21:28:56.777425 2026] [:error] [pid 56075:tid 56095] [client 45.131.195.61:20315] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaGcGMKBhrfI6KNv9RjQfgAAABE"]
[Fri Feb 27 21:28:57.509876 2026] [:error] [pid 62998:tid 63014] [client 45.131.195.57:21327] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaGcGVQeueXZDUmoLolK9AAAAQw"]
[Fri Feb 27 21:28:58.287473 2026] [:error] [pid 54103:tid 54174] [client 45.131.195.104:28031] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaGcGuvG4MPCmE0B2sCmEQAAAMM"]
[Fri Feb 27 21:28:58.815698 2026] [:error] [pid 49306:tid 49323] [client 45.131.195.114:49487] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaGcGvnSUDZue59Px9sZGwAAAU8"]
[Fri Feb 27 21:28:59.280100 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.96:24059] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGcG4a650YPyxXVeRZWFwAAAY8"]
[Fri Feb 27 21:29:00.477977 2026] [:error] [pid 54231:tid 54251] [client 45.131.195.101:59883] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Feb 27 21:29:00.847292 2026] [:error] [pid 54231:tid 54257] [client 45.131.195.101:59883] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaGcHOTvb5AeyJCdY7ARSQAAAFc"]
[Fri Feb 27 21:29:01.352405 2026] [:error] [pid 62998:tid 63011] [client 45.131.195.89:64809] [client 45.131.195.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaGcHVQeueXZDUmoLolLCQAAAQk"]
[Fri Feb 27 21:29:01.986158 2026] [:error] [pid 49306:tid 49310] [client 45.131.195.110:41455] [client 45.131.195.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGcHfnSUDZue59Px9sZNwAAAUI"]
[Fri Feb 27 21:29:03.052714 2026] [:error] [pid 54102:tid 54166] [client 45.131.195.62:34251] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 21:29:03.535314 2026] [:error] [pid 54102:tid 54168] [client 45.131.195.62:34251] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Feb 27 21:29:04.540711 2026] [:error] [pid 54102:tid 54147] [client 45.131.195.62:34251] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaGcIHi74D4fiYUm_Gdu6wAAAIM"]
[Fri Feb 27 21:29:05.813402 2026] [:error] [pid 54231:tid 54239] [client 45.131.195.60:33253] [client 45.131.195.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.60, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaGcIeTvb5AeyJCdY7ARfAAAAEU"]
[Fri Feb 27 21:29:09.164594 2026] [:error] [pid 54231:tid 54239] [client 45.131.195.60:33253] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 27 21:29:10.475812 2026] [:error] [pid 54231:tid 54246] [client 45.131.195.60:33253] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Feb 27 21:29:10.729992 2026] [:error] [pid 54231:tid 54247] [client 45.131.195.60:33253] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Feb 27 21:29:12.101111 2026] [:error] [pid 54231:tid 54249] [client 45.131.195.60:33253] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaGcKOTvb5AeyJCdY7ARrgAAAE8"]
[Fri Feb 27 21:29:12.847042 2026] [:error] [pid 62998:tid 63015] [client 45.131.195.91:55933] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Feb 27 21:29:13.091952 2026] [:error] [pid 62998:tid 63001] [client 45.131.195.91:55933] [client 45.131.195.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.91, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaGcKVQeueXZDUmoLolLpgAAAQA"]
[Fri Feb 27 21:29:13.587300 2026] [:error] [pid 62998:tid 63006] [client 45.131.195.91:55933] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaGcKVQeueXZDUmoLolLrgAAAQQ"]
[Fri Feb 27 21:29:15.167446 2026] [:error] [pid 54101:tid 54110] [client 45.131.195.79:62841] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 27 21:29:15.899915 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.79:62841] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Feb 27 21:29:16.411158 2026] [:error] [pid 54101:tid 54116] [client 45.131.195.79:62841] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaGcLFY5qgRktcYTGFtA4gAAAcg"]
[Fri Feb 27 21:29:16.885238 2026] [:error] [pid 52073:tid 52086] [client 45.131.195.66:58795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Feb 27 21:29:17.632458 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.66:58795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Feb 27 21:29:18.146295 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.66:58795] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Feb 27 21:29:18.691151 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.66:58795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Feb 27 21:29:18.943864 2026] [:error] [pid 52073:tid 52076] [client 45.131.195.66:58795] [client 45.131.195.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaGcLoa650YPyxXVeRZXCAAAAYA"]
[Fri Feb 27 21:29:19.414872 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.75:32883] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Feb 27 21:29:19.668437 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.75:32883] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Feb 27 21:29:19.915399 2026] [:error] [pid 56075:tid 56085] [client 45.131.195.75:32883] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaGcL8KBhrfI6KNv9RjRTgAAAAg"]
[Fri Feb 27 21:29:20.690083 2026] [:error] [pid 49306:tid 49325] [client 45.131.195.96:60339] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Feb 27 21:29:21.180778 2026] [:error] [pid 49306:tid 49308] [client 45.131.195.96:60339] [client 45.131.195.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.96, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaGcMfnSUDZue59Px9sZyQAAAUA"]
[Fri Feb 27 21:29:21.434630 2026] [:error] [pid 49306:tid 49327] [client 45.131.195.96:60339] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaGcMfnSUDZue59Px9sZygAAAVM"]
[Fri Feb 27 21:29:24.485511 2026] [:error] [pid 54101:tid 54120] [client 45.131.195.58:23547] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Feb 27 21:29:25.967935 2026] [:error] [pid 54101:tid 54130] [client 45.131.195.58:23547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Feb 27 21:29:26.203020 2026] [:error] [pid 54101:tid 54114] [client 45.131.195.58:23547] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaGcNlY5qgRktcYTGFtBMQAAAcY"]
[Fri Feb 27 21:29:26.782877 2026] [:error] [pid 54103:tid 54193] [client 45.131.195.61:26813] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Feb 27 21:29:27.522070 2026] [:error] [pid 54103:tid 54181] [client 45.131.195.61:26813] [client 45.131.195.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.61, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaGcN-vG4MPCmE0B2sCm4AAAAMo"]
[Fri Feb 27 21:29:27.809600 2026] [:error] [pid 54103:tid 54180] [client 45.131.195.61:26813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Feb 27 21:29:28.089996 2026] [:error] [pid 54103:tid 54175] [client 45.131.195.61:26813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Feb 27 21:29:28.338332 2026] [:error] [pid 54103:tid 54177] [client 45.131.195.61:26813] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Feb 27 21:29:28.588373 2026] [:error] [pid 54103:tid 54189] [client 45.131.195.61:26813] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaGcOOvG4MPCmE0B2sCm7QAAANI"]
[Fri Feb 27 21:29:29.113177 2026] [:error] [pid 54103:tid 54170] [client 45.131.195.111:56157] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Feb 27 21:29:29.362823 2026] [:error] [pid 54103:tid 54191] [client 45.131.195.111:56157] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaGcOevG4MPCmE0B2sCm9wAAANQ"]
[Fri Feb 27 21:29:32.894442 2026] [:error] [pid 56075:tid 56078] [client 45.131.195.70:37065] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 27 21:29:33.151455 2026] [:error] [pid 56075:tid 56082] [client 45.131.195.70:37065] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaGcPcKBhrfI6KNv9RjRzgAAAAU"]
[Fri Feb 27 21:29:34.231643 2026] [:error] [pid 54102:tid 54152] [client 45.131.195.71:42397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Feb 27 21:29:34.474155 2026] [:error] [pid 54102:tid 54150] [client 45.131.195.71:42397] [client 45.131.195.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaGcPni74D4fiYUm_GdvqgAAAIY"]
[Fri Feb 27 21:29:34.956344 2026] [:error] [pid 49306:tid 49325] [client 45.131.195.89:25105] [client 45.131.195.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaGcPvnSUDZue59Px9saoQAAAVE"]
[Fri Feb 27 21:29:35.515792 2026] [:error] [pid 54231:tid 54252] [client 45.131.195.99:62645] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Feb 27 21:29:35.760085 2026] [:error] [pid 54231:tid 54250] [client 45.131.195.99:62645] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Feb 27 21:29:37.064131 2026] [:error] [pid 54231:tid 54255] [client 45.131.195.99:62645] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaGcQeTvb5AeyJCdY7ASIQAAAFU"]
[Fri Feb 27 21:29:37.858206 2026] [:error] [pid 49306:tid 49314] [client 45.131.195.248:48809] [client 45.131.195.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaGcQfnSUDZue59Px9sa_QAAAUY"]
[Fri Feb 27 21:29:39.188960 2026] [:error] [pid 56075:tid 56084] [client 45.131.195.57:35575] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaGcQ8KBhrfI6KNv9RjSGQAAAAc"]
[Fri Feb 27 21:29:39.680513 2026] [:error] [pid 54231:tid 54250] [client 45.131.195.53:64819] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Feb 27 21:29:40.180934 2026] [:error] [pid 54231:tid 54248] [client 45.131.195.53:64819] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Feb 27 21:29:40.432187 2026] [:error] [pid 54231:tid 54254] [client 45.131.195.53:64819] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaGcROTvb5AeyJCdY7ASSwAAAFQ"]
[Fri Feb 27 21:29:40.956117 2026] [:error] [pid 62998:tid 63022] [client 45.131.195.86:33511] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 27 21:29:41.486433 2026] [:error] [pid 62998:tid 63005] [client 45.131.195.86:33511] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaGcRVQeueXZDUmoLolMWgAAAQM"]
[Fri Feb 27 21:29:42.758226 2026] [:error] [pid 54102:tid 54144] [client 45.131.195.56:21827] [client 45.131.195.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaGcRni74D4fiYUm_GdvygAAAIA"]
[Fri Feb 27 21:29:43.518341 2026] [:error] [pid 54101:tid 54110] [client 45.131.195.96:29507] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 21:29:44.367655 2026] [:error] [pid 54101:tid 54108] [client 45.131.195.96:29507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Feb 27 21:29:44.869136 2026] [:error] [pid 54101:tid 54132] [client 45.131.195.96:29507] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Feb 27 21:29:45.120364 2026] [:error] [pid 54101:tid 54111] [client 45.131.195.96:29507] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaGcSVY5qgRktcYTGFtB0AAAAcM"]
[Fri Feb 27 21:29:45.614224 2026] [:error] [pid 54103:tid 54173] [client 45.131.195.78:52865] [client 45.131.195.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaGcSevG4MPCmE0B2sCndQAAAMI"]
[Fri Feb 27 21:29:46.166999 2026] [:error] [pid 49306:tid 49312] [client 209.87.169.174:61341] [client 209.87.169.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaGcSvnSUDZue59Px9sbrQAAAUQ"]
[Fri Feb 27 21:29:46.695099 2026] [:error] [pid 54103:tid 54177] [client 45.131.195.53:31609] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaGcSuvG4MPCmE0B2sCnhQAAAMY"]
[Fri Feb 27 21:29:47.237755 2026] [:error] [pid 54103:tid 54191] [client 45.131.195.101:21919] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Feb 27 21:29:47.500564 2026] [:error] [pid 54103:tid 54188] [client 45.131.195.101:21919] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaGcS-vG4MPCmE0B2sCnjgAAANE"]
[Fri Feb 27 21:29:47.990103 2026] [:error] [pid 52073:tid 52090] [client 45.131.195.60:39805] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGcS4a650YPyxXVeRZZEwAAAY4"]
[Fri Feb 27 21:29:48.592021 2026] [:error] [pid 52073:tid 52078] [client 45.131.195.60:27125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Feb 27 21:29:49.144271 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.60:27125] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaGcTYa650YPyxXVeRZZKwAAAZI"]
[Fri Feb 27 21:29:49.599214 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.67:42275] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaGcTVY5qgRktcYTGFtB4gAAAco"]
[Fri Feb 27 21:29:50.121038 2026] [:error] [pid 54103:tid 54184] [client 45.131.195.94:34659] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaGcTuvG4MPCmE0B2sCnoQAAAM0"]
[Fri Feb 27 21:29:50.609505 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.86:52343] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaGcTsKBhrfI6KNv9RjSpAAAAAY"]
[Fri Feb 27 21:29:51.399013 2026] [:error] [pid 49306:tid 49314] [client 45.131.195.67:65441] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaGcT_nSUDZue59Px9sb5wAAAUY"]
[Fri Feb 27 21:29:52.477314 2026] [:error] [pid 54231:tid 54246] [client 45.131.195.64:58953] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaGcUOTvb5AeyJCdY7AS1gAAAEw"]
[Fri Feb 27 21:29:52.984461 2026] [:error] [pid 54231:tid 54248] [client 45.131.195.91:41189] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 27 21:29:53.805948 2026] [:error] [pid 54231:tid 54250] [client 45.131.195.91:41189] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Feb 27 21:29:54.078621 2026] [:error] [pid 54231:tid 54249] [client 45.131.195.91:41189] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaGcUuTvb5AeyJCdY7AS_gAAAE8"]
[Fri Feb 27 21:29:54.802879 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.75:60679] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Feb 27 21:29:55.057500 2026] [:error] [pid 52073:tid 52093] [client 45.131.195.75:60679] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Feb 27 21:29:56.348895 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.75:60679] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaGcVIa650YPyxXVeRZZoQAAAZc"]
[Fri Feb 27 21:29:57.643903 2026] [:error] [pid 52073:tid 52081] [client 45.131.195.70:36597] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaGcVYa650YPyxXVeRZZwwAAAYU"]
[Fri Feb 27 21:29:58.136690 2026] [:error] [pid 54101:tid 54117] [client 45.131.195.58:23115] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaGcVlY5qgRktcYTGFtCNgAAAck"]
[Fri Feb 27 21:29:59.735524 2026] [:error] [pid 52073:tid 52076] [client 45.131.195.63:33517] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaGcV4a650YPyxXVeRZaBgAAAYA"]
[Fri Feb 27 21:30:05.596810 2026] [:error] [pid 52073:tid 52093] [client 45.131.195.69:60887] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Feb 27 21:30:05.938640 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.69:60887] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Feb 27 21:30:06.329160 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.69:60887] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Feb 27 21:30:06.586070 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.69:60887] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Feb 27 21:30:08.000372 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.69:60887] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaGcX4a650YPyxXVeRZaeAAAAYY"]
[Fri Feb 27 21:30:08.512054 2026] [:error] [pid 49306:tid 49317] [client 45.131.195.75:26919] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaGcYPnSUDZue59Px9sckgAAAUk"]
[Fri Feb 27 21:30:08.996047 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.84:29983] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaGcYMKBhrfI6KNv9RjTjwAAABM"]
[Fri Feb 27 21:30:09.534916 2026] [:error] [pid 52073:tid 52093] [client 45.131.195.95:57397] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaGcYYa650YPyxXVeRZahQAAAZE"]
[Fri Feb 27 21:30:10.014479 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.73:64009] [client 45.131.195.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaGcYoa650YPyxXVeRZalAAAAY8"]
[Fri Feb 27 21:30:10.557492 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.114:23885] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaGcYoa650YPyxXVeRZanQAAAYc"]
[Fri Feb 27 21:30:11.260774 2026] [:error] [pid 52073:tid 52084] [client 45.131.195.94:39077] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaGcY4a650YPyxXVeRZapgAAAYg"]
[Fri Feb 27 21:30:11.816330 2026] [:error] [pid 54102:tid 54158] [client 45.131.195.79:61445] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaGcY3i74D4fiYUm_GdwZQAAAI4"]
[Fri Feb 27 21:30:12.357024 2026] [:error] [pid 49306:tid 49318] [client 209.87.169.174:37019] [client 209.87.169.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaGcZPnSUDZue59Px9sc1AAAAUo"]
[Fri Feb 27 21:30:12.901305 2026] [:error] [pid 54102:tid 54149] [client 45.131.195.89:52305] [client 45.131.195.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaGcZHi74D4fiYUm_GdwbAAAAIU"]
[Fri Feb 27 21:30:13.935514 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.85:57651] [client 45.131.195.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaGcZcKBhrfI6KNv9RjT2gAAABI"]
[Fri Feb 27 21:30:14.738360 2026] [:error] [pid 54231:tid 54257] [client 45.131.195.76:22289] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaGcZuTvb5AeyJCdY7ATrAAAAFc"]
[Fri Feb 27 21:30:15.287796 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.249:50301] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Feb 27 21:30:16.164610 2026] [:error] [pid 52073:tid 52085] [client 45.131.195.249:50301] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaGcaIa650YPyxXVeRZbNwAAAYk"]
[Fri Feb 27 21:30:17.322858 2026] [:error] [pid 56075:tid 56098] [client 45.131.195.104:27017] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaGcacKBhrfI6KNv9RjT9gAAABQ"]
[Fri Feb 27 21:30:18.285562 2026] [:error] [pid 54103:tid 54175] [client 45.131.195.71:63805] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Feb 27 21:30:18.533318 2026] [:error] [pid 54103:tid 54170] [client 45.131.195.71:63805] [client 45.131.195.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaGcauvG4MPCmE0B2sCoPgAAAMA"]
[Fri Feb 27 21:30:19.216185 2026] [:error] [pid 52073:tid 52076] [client 45.131.195.64:37741] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Feb 27 21:30:19.454291 2026] [:error] [pid 52073:tid 52078] [client 45.131.195.64:37741] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Feb 27 21:30:20.009646 2026] [:error] [pid 52073:tid 52090] [client 45.131.195.64:37741] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Feb 27 21:30:20.321607 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.64:37741] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaGcbIa650YPyxXVeRZb3QAAAYc"]
[Fri Feb 27 21:30:20.885643 2026] [:error] [pid 62998:tid 63007] [client 45.131.195.75:22523] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Feb 27 21:30:21.164071 2026] [:error] [pid 62998:tid 63005] [client 45.131.195.75:22523] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaGcbVQeueXZDUmoLolOCAAAAQM"]
[Fri Feb 27 21:30:22.293147 2026] [:error] [pid 54102:tid 54148] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Feb 27 21:30:22.612428 2026] [:error] [pid 54102:tid 54162] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Feb 27 21:30:22.919085 2026] [:error] [pid 54102:tid 54146] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Fri Feb 27 21:30:24.548438 2026] [:error] [pid 54102:tid 54147] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Feb 27 21:30:24.886942 2026] [:error] [pid 54102:tid 54164] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Feb 27 21:30:25.506216 2026] [:error] [pid 54102:tid 54162] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Feb 27 21:30:26.327296 2026] [:error] [pid 54102:tid 54161] [client 45.131.195.95:46845] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Feb 27 21:30:26.606559 2026] [:error] [pid 54102:tid 54149] [client 45.131.195.95:46845] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaGccni74D4fiYUm_GdwwQAAAIU"]
[Fri Feb 27 21:30:27.130798 2026] [:error] [pid 49306:tid 49317] [client 45.131.195.77:23981] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaGcc_nSUDZue59Px9sdLgAAAUk"]
[Fri Feb 27 21:30:27.612365 2026] [:error] [pid 54231:tid 54244] [client 45.131.195.65:37807] [client 45.131.195.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.65, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaGcc-Tvb5AeyJCdY7AUJwAAAEo"]
[Fri Feb 27 21:30:27.619249 2026] [:error] [pid 54231:tid 54244] [client 45.131.195.65:37807] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 21:30:27.912879 2026] [:error] [pid 54231:tid 54239] [client 45.131.195.65:37807] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Feb 27 21:30:28.211402 2026] [:error] [pid 54231:tid 54257] [client 45.131.195.65:37807] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaGcdOTvb5AeyJCdY7AUMAAAAFc"]
[Fri Feb 27 21:30:29.135401 2026] [:error] [pid 62998:tid 63010] [client 45.131.195.106:25325] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Feb 27 21:30:29.377072 2026] [:error] [pid 62998:tid 63022] [client 45.131.195.106:25325] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGcdVQeueXZDUmoLolOqQAAARQ"]
[Fri Feb 27 21:30:29.881827 2026] [:error] [pid 56075:tid 56086] [client 45.131.195.114:24291] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaGcdcKBhrfI6KNv9RjUwgAAAAk"]
[Fri Feb 27 21:30:31.737012 2026] [:error] [pid 54103:tid 54174] [client 45.131.195.52:42669] [client 45.131.195.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaGcd-vG4MPCmE0B2sCodgAAAMM"]
[Fri Feb 27 21:30:32.342505 2026] [:error] [pid 49306:tid 49322] [client 45.131.195.54:31161] [client 45.131.195.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "aaGcePnSUDZue59Px9sdVgAAAU4"]
[Fri Feb 27 21:30:33.541666 2026] [:error] [pid 54231:tid 54242] [client 45.131.195.69:38135] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Feb 27 21:30:34.130052 2026] [:error] [pid 54231:tid 54246] [client 45.131.195.69:38135] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaGceuTvb5AeyJCdY7AUcAAAAEw"]
[Fri Feb 27 21:30:35.096090 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.101:61499] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Fri Feb 27 21:30:35.571905 2026] [:error] [pid 56075:tid 56100] [client 45.131.195.101:61499] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaGce8KBhrfI6KNv9RjVLwAAABY"]
[Fri Feb 27 21:30:36.131620 2026] [:error] [pid 54101:tid 54109] [client 45.131.195.82:35437] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaGcfFY5qgRktcYTGFtDpwAAAcE"]
[Fri Feb 27 21:30:37.992923 2026] [:error] [pid 54103:tid 54187] [client 45.131.195.69:51697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Feb 27 21:30:38.211351 2026] [:error] [pid 54103:tid 54191] [client 45.131.195.69:51697] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaGcfuvG4MPCmE0B2sCosAAAANQ"]
[Fri Feb 27 21:30:38.709669 2026] [:error] [pid 49306:tid 49329] [client 45.131.195.99:50463] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaGcfvnSUDZue59Px9sdlwAAAVU"]
[Fri Feb 27 21:30:39.741570 2026] [:error] [pid 52073:tid 52097] [client 45.131.195.59:32013] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Feb 27 21:30:40.013278 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.59:32013] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Fri Feb 27 21:30:40.653351 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.59:32013] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Feb 27 21:30:41.107600 2026] [:error] [pid 52073:tid 52080] [client 45.131.195.59:32013] [client 45.131.195.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaGcgYa650YPyxXVeRZdUQAAAYQ"]
[Fri Feb 27 21:30:41.585462 2026] [:error] [pid 54231:tid 54235] [client 45.131.195.64:30969] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaGcgeTvb5AeyJCdY7AU0wAAAEE"]
[Fri Feb 27 21:30:42.891688 2026] [:error] [pid 56075:tid 56082] [client 45.131.195.104:41617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Feb 27 21:30:43.141273 2026] [:error] [pid 56075:tid 56081] [client 45.131.195.104:41617] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaGcg8KBhrfI6KNv9RjVZgAAAAQ"]
[Fri Feb 27 21:30:43.583406 2026] [:error] [pid 56075:tid 56093] [client 45.131.195.67:54081] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaGcg8KBhrfI6KNv9RjVawAAAA8"]
[Fri Feb 27 21:30:44.026119 2026] [:error] [pid 54103:tid 54172] [client 45.131.195.79:21507] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaGchOvG4MPCmE0B2sCpCAAAAME"]
[Fri Feb 27 21:30:45.475513 2026] [:error] [pid 62998:tid 63016] [client 45.131.195.84:44551] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Fri Feb 27 21:30:45.690438 2026] [:error] [pid 62998:tid 63026] [client 45.131.195.84:44551] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaGchVQeueXZDUmoLolPgwAAARg"]
[Fri Feb 27 21:30:46.452258 2026] [:error] [pid 52073:tid 52096] [client 45.131.195.75:48005] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaGchoa650YPyxXVeRZdrQAAAZQ"]
[Fri Feb 27 21:30:46.913282 2026] [:error] [pid 49306:tid 49324] [client 45.131.195.77:55685] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Feb 27 21:30:47.179595 2026] [:error] [pid 49306:tid 49329] [client 45.131.195.77:55685] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Feb 27 21:30:47.702004 2026] [:error] [pid 49306:tid 49328] [client 45.131.195.77:55685] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Fri Feb 27 21:30:48.709730 2026] [:error] [pid 49306:tid 49316] [client 45.131.195.77:55685] [client 45.131.195.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.77, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaGciPnSUDZue59Px9sd3QAAAUg"]
[Fri Feb 27 21:30:49.243229 2026] [:error] [pid 49306:tid 49312] [client 45.131.195.77:55685] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Fri Feb 27 21:30:49.567743 2026] [:error] [pid 49306:tid 49311] [client 45.131.195.77:55685] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Feb 27 21:30:49.825404 2026] [:error] [pid 49306:tid 49315] [client 45.131.195.77:55685] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Feb 27 21:30:50.305978 2026] [:error] [pid 49306:tid 49325] [client 45.131.195.77:55685] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaGcivnSUDZue59Px9sd8gAAAVE"]
[Fri Feb 27 21:30:50.855130 2026] [:error] [pid 52073:tid 52081] [client 45.131.195.54:45959] [client 45.131.195.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaGcioa650YPyxXVeRZd6AAAAYU"]
[Fri Feb 27 21:30:51.688599 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Feb 27 21:30:51.952985 2026] [:error] [pid 52073:tid 52080] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Feb 27 21:30:52.542086 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Feb 27 21:30:53.026957 2026] [:error] [pid 52073:tid 52087] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Feb 27 21:30:53.745388 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Fri Feb 27 21:30:55.657159 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Feb 27 21:30:55.908651 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Fri Feb 27 21:30:57.289119 2026] [:error] [pid 52073:tid 52087] [client 45.131.195.54:45959] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Feb 27 21:30:57.807346 2026] [:error] [pid 52073:tid 52089] [client 45.131.195.54:45959] [client 45.131.195.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaGckYa650YPyxXVeRZeywAAAY0"]
[Fri Feb 27 21:31:00.539377 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.104:59487] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Feb 27 21:31:00.976800 2026] [:error] [pid 56075:tid 56099] [client 45.131.195.104:59487] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaGclMKBhrfI6KNv9RjW_AAAABU"]
[Fri Feb 27 21:31:01.746767 2026] [:error] [pid 49306:tid 49313] [client 45.131.195.79:29209] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Feb 27 21:31:06.783252 2026] [:error] [pid 49306:tid 49313] [client 45.131.195.79:29209] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaGcmvnSUDZue59Px9sfRQAAAUU"]
[Fri Feb 27 21:31:07.899646 2026] [:error] [pid 56075:tid 56087] [client 45.131.195.84:36849] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Fri Feb 27 21:31:08.387722 2026] [:error] [pid 56075:tid 56086] [client 45.131.195.84:36849] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Feb 27 21:31:08.962592 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.84:36849] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Fri Feb 27 21:31:16.821807 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.84:36849] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Feb 27 21:31:17.354534 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.84:36849] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaGcpcKBhrfI6KNv9RjX5QAAAAM"]
[Fri Feb 27 21:31:17.967974 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.76:59447] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Fri Feb 27 21:31:18.192149 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.76:59447] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Feb 27 21:31:18.451405 2026] [:error] [pid 52073:tid 52097] [client 45.131.195.76:59447] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaGcpoa650YPyxXVeRZhwwAAAZU"]
[Fri Feb 27 21:31:20.245177 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.62:41957] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaGcqMKBhrfI6KNv9RjYGwAAABM"]
[Fri Feb 27 21:31:21.013632 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.65:56503] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Feb 27 21:31:21.834153 2026] [:error] [pid 56075:tid 56088] [client 45.131.195.65:56503] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Fri Feb 27 21:31:22.074116 2026] [:error] [pid 56075:tid 56094] [client 45.131.195.65:56503] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Fri Feb 27 21:31:22.312853 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.65:56503] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaGcqsKBhrfI6KNv9RjYWwAAABI"]
[Fri Feb 27 21:31:22.801059 2026] [:error] [pid 52073:tid 52087] [client 45.131.195.106:60115] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaGcqoa650YPyxXVeRZi0gAAAYs"]
[Fri Feb 27 21:31:24.606808 2026] [:error] [pid 54102:tid 54144] [client 45.131.195.110:35137] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Feb 27 21:31:25.087499 2026] [:error] [pid 54102:tid 54168] [client 45.131.195.110:35137] [client 45.131.195.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaGcrXi74D4fiYUm_GdyxgAAAJc"]
[Fri Feb 27 21:31:25.894521 2026] [:error] [pid 62998:tid 63020] [client 45.131.195.65:33603] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaGcrVQeueXZDUmoLolRZAAAARI"]
[Fri Feb 27 21:31:26.645636 2026] [:error] [pid 54101:tid 54110] [client 45.131.195.74:20385] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Feb 27 21:31:26.879313 2026] [:error] [pid 54101:tid 54125] [client 45.131.195.74:20385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Feb 27 21:31:27.089792 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.74:20385] [client 45.131.195.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaGcr1Y5qgRktcYTGFtFMQAAAco"]
[Fri Feb 27 21:31:27.946371 2026] [:error] [pid 54231:tid 54252] [client 45.131.195.72:33941] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Fri Feb 27 21:31:28.260150 2026] [:error] [pid 54231:tid 54234] [client 45.131.195.72:33941] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Fri Feb 27 21:31:28.719721 2026] [:error] [pid 54231:tid 54246] [client 45.131.195.72:33941] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Feb 27 21:31:29.719932 2026] [:error] [pid 54231:tid 54254] [client 45.131.195.72:33941] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaGcseTvb5AeyJCdY7AW7wAAAFQ"]
[Fri Feb 27 21:31:30.168696 2026] [:error] [pid 54231:tid 54236] [client 45.131.195.249:26395] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Fri Feb 27 21:31:30.999850 2026] [:error] [pid 54231:tid 54247] [client 45.131.195.249:26395] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaGcsuTvb5AeyJCdY7AW9wAAAE0"]
[Fri Feb 27 21:31:31.734074 2026] [:error] [pid 62998:tid 63020] [client 45.131.195.54:44989] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Fri Feb 27 21:31:32.446520 2026] [:error] [pid 62998:tid 63015] [client 45.131.195.54:44989] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Fri Feb 27 21:31:32.674419 2026] [:error] [pid 62998:tid 63011] [client 45.131.195.54:44989] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Feb 27 21:31:33.196319 2026] [:error] [pid 62998:tid 63012] [client 45.131.195.54:44989] [client 45.131.195.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.54, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaGctVQeueXZDUmoLolR4AAAAQo"]
[Fri Feb 27 21:31:34.477488 2026] [:error] [pid 62998:tid 63015] [client 45.131.195.54:44989] [client 45.131.195.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaGctlQeueXZDUmoLolR8wAAAQ0"]
[Fri Feb 27 21:31:34.980077 2026] [:error] [pid 54231:tid 54241] [client 45.131.195.110:47083] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Fri Feb 27 21:31:35.228196 2026] [:error] [pid 54231:tid 54236] [client 45.131.195.110:47083] [client 45.131.195.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaGct-Tvb5AeyJCdY7AXJgAAAEI"]
[Fri Feb 27 21:31:35.683821 2026] [:error] [pid 62998:tid 63019] [client 45.131.195.81:42839] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Feb 27 21:31:36.220219 2026] [:error] [pid 62998:tid 63014] [client 45.131.195.81:42839] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Feb 27 21:31:36.815950 2026] [:error] [pid 62998:tid 63001] [client 45.131.195.81:42839] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaGcuFQeueXZDUmoLolSDgAAAQA"]
[Fri Feb 27 21:31:37.545205 2026] [:error] [pid 52073:tid 52093] [client 45.131.195.59:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Feb 27 21:31:37.804756 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.59:28989] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Fri Feb 27 21:31:38.395825 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.59:28989] [client 45.131.195.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaGcuoa650YPyxXVeRZlCQAAAYc"]
[Fri Feb 27 21:31:39.209668 2026] [:error] [pid 52073:tid 52078] [client 45.131.195.73:51347] [client 45.131.195.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaGcu4a650YPyxXVeRZlFQAAAYI"]
[Fri Feb 27 21:31:39.732750 2026] [:error] [pid 56075:tid 56085] [client 45.131.195.114:32521] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Fri Feb 27 21:31:54.096563 2026] [:error] [pid 56075:tid 56085] [client 45.131.195.114:32521] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Fri Feb 27 21:31:55.856883 2026] [:error] [pid 54102:tid 54149] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 27 21:31:56.144168 2026] [:error] [pid 54102:tid 54151] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 21:31:56.413917 2026] [:error] [pid 54102:tid 54166] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Feb 27 21:31:56.658524 2026] [:error] [pid 54102:tid 54148] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Feb 27 21:31:56.875445 2026] [:error] [pid 54102:tid 54164] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 21:31:57.120724 2026] [:error] [pid 54102:tid 54165] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 21:31:57.371426 2026] [:error] [pid 54102:tid 54154] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 21:31:57.603070 2026] [:error] [pid 54102:tid 54146] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 27 21:31:58.124603 2026] [:error] [pid 54102:tid 54165] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 21:31:58.657653 2026] [:error] [pid 54102:tid 54166] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Feb 27 21:31:58.885949 2026] [:error] [pid 54102:tid 54148] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Feb 27 21:31:59.119037 2026] [:error] [pid 54102:tid 54145] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Feb 27 21:31:59.344582 2026] [:error] [pid 54102:tid 54159] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 21:31:59.584213 2026] [:error] [pid 54102:tid 54163] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Feb 27 21:31:59.835566 2026] [:error] [pid 54102:tid 54145] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Feb 27 21:32:00.112454 2026] [:error] [pid 54102:tid 54156] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Feb 27 21:32:00.434284 2026] [:error] [pid 54102:tid 54163] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Feb 27 21:32:00.779712 2026] [:error] [pid 54102:tid 54155] [client 45.131.195.65:44095] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Feb 27 21:32:04.826246 2026] [:error] [pid 54102:tid 54156] [client 45.131.195.65:44095] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaGc1Hi74D4fiYUm_Gd1GgAAAIw"]
[Fri Feb 27 21:32:06.100012 2026] [:error] [pid 54103:tid 54189] [client 45.131.195.69:42703] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaGc1uvG4MPCmE0B2sCrdwAAANI"]
[Fri Feb 27 21:32:07.322117 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.99:20171] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 21:32:08.045512 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.99:20171] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaGc2Ia650YPyxXVeRZnowAAAYE"]
[Fri Feb 27 21:32:09.089330 2026] [:error] [pid 54103:tid 54193] [client 45.131.195.248:58587] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 21:32:09.334354 2026] [:error] [pid 54103:tid 54173] [client 45.131.195.248:58587] [client 45.131.195.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaGc2evG4MPCmE0B2sCrowAAAMI"]
[Fri Feb 27 21:32:10.086086 2026] [:error] [pid 54102:tid 54153] [client 45.131.195.106:23411] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 21:32:11.310024 2026] [:error] [pid 54102:tid 54154] [client 45.131.195.106:23411] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaGc23i74D4fiYUm_Gd1nwAAAIo"]
[Fri Feb 27 21:32:12.388298 2026] [:error] [pid 49306:tid 49332] [client 45.131.195.77:37477] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaGc3PnSUDZue59Px9sjBAAAAVg"]
[Fri Feb 27 21:32:12.833958 2026] [:error] [pid 62998:tid 63001] [client 45.131.195.71:24631] [client 45.131.195.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaGc3FQeueXZDUmoLolTLQAAAQA"]
[Fri Feb 27 21:32:13.300038 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.109:63127] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaGc3cKBhrfI6KNv9RjbwgAAABM"]
[Fri Feb 27 21:32:13.744552 2026] [:error] [pid 54101:tid 54117] [client 45.131.195.106:48271] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaGc3VY5qgRktcYTGFtGbgAAAck"]
[Fri Feb 27 21:32:14.288287 2026] [:error] [pid 56075:tid 56079] [client 45.131.195.70:50461] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaGc3sKBhrfI6KNv9Rjb2gAAAAI"]
[Fri Feb 27 21:32:15.017239 2026] [:error] [pid 54231:tid 54254] [client 45.131.195.86:20799] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaGc3-Tvb5AeyJCdY7AY-gAAAFQ"]
[Fri Feb 27 21:32:15.487748 2026] [:error] [pid 54231:tid 54237] [client 45.131.195.69:30807] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Feb 27 21:32:15.992174 2026] [:error] [pid 54231:tid 54246] [client 45.131.195.69:30807] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaGc3-Tvb5AeyJCdY7AZCwAAAEw"]
[Fri Feb 27 21:32:18.599335 2026] [:error] [pid 56075:tid 56092] [client 45.131.195.94:44275] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaGc4sKBhrfI6KNv9RjcPQAAAA4"]
[Fri Feb 27 21:32:19.337740 2026] [:error] [pid 56075:tid 56079] [client 45.131.195.60:28771] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaGc48KBhrfI6KNv9RjcVgAAAAI"]
[Fri Feb 27 21:32:19.831026 2026] [:error] [pid 54103:tid 54173] [client 45.131.195.77:38523] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 21:32:20.067628 2026] [:error] [pid 54103:tid 54172] [client 45.131.195.77:38523] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaGc5OvG4MPCmE0B2sCsCQAAAME"]
[Fri Feb 27 21:32:20.594871 2026] [:error] [pid 52073:tid 52100] [client 45.131.195.105:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 21:32:21.316460 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.105:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 21:32:22.067124 2026] [:error] [pid 52073:tid 52080] [client 45.131.195.105:59003] [client 45.131.195.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaGc5oa650YPyxXVeRZo3QAAAYQ"]
[Fri Feb 27 21:32:22.590778 2026] [:error] [pid 56075:tid 56087] [client 45.131.195.90:33579] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Feb 27 21:32:22.825259 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.90:33579] [client 45.131.195.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaGc5sKBhrfI6KNv9RjclQAAAAA"]
[Fri Feb 27 21:32:23.300513 2026] [:error] [pid 52073:tid 52083] [client 45.131.195.96:57275] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 27 21:32:23.763650 2026] [:error] [pid 52073:tid 52090] [client 45.131.195.96:57275] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaGc54a650YPyxXVeRZpKAAAAY4"]
[Fri Feb 27 21:32:24.430420 2026] [:error] [pid 49306:tid 49317] [client 45.131.195.74:49261] [client 45.131.195.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaGc6PnSUDZue59Px9sj6gAAAUk"]
[Fri Feb 27 21:32:25.132035 2026] [:error] [pid 56075:tid 56085] [client 45.131.195.94:37441] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Feb 27 21:32:25.539806 2026] [:error] [pid 56075:tid 56085] [client 45.131.195.94:37441] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 27 21:32:26.263912 2026] [:error] [pid 56075:tid 56094] [client 45.131.195.94:37441] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaGc6sKBhrfI6KNv9Rjc-QAAABA"]
[Fri Feb 27 21:32:26.977112 2026] [:error] [pid 54101:tid 54111] [client 45.131.195.80:31419] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaGc6lY5qgRktcYTGFtHBAAAAcM"]
[Fri Feb 27 21:32:27.753167 2026] [:error] [pid 54103:tid 54177] [client 45.131.195.76:58869] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaGc6-vG4MPCmE0B2sCsewAAAMY"]
[Fri Feb 27 21:32:28.219837 2026] [:error] [pid 54102:tid 54153] [client 45.131.195.111:31931] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaGc7Hi74D4fiYUm_Gd2ZAAAAIk"]
[Fri Feb 27 21:32:28.671734 2026] [:error] [pid 54231:tid 54250] [client 45.131.195.75:42687] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGc7OTvb5AeyJCdY7AZ5gAAAFA"]
[Fri Feb 27 21:56:23.149461 2026] [:error] [pid 49306:tid 49326] [client 51.83.11.108:33862] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaGih_nSUDZue59Px9tFaAAAAVI"]
[Fri Feb 27 21:56:25.362962 2026] [:error] [pid 56075:tid 56101] [client 51.83.11.108:60066] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaGiicKBhrfI6KNv9RgWmAAAABc"]
[Fri Feb 27 21:56:27.529758 2026] [:error] [pid 62998:tid 63023] [client 51.83.11.108:46826] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaGii1QeueXZDUmoLolsdAAAARU"]
[Fri Feb 27 21:56:29.593995 2026] [:error] [pid 54103:tid 54183] [client 51.83.11.108:46830] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaGijevG4MPCmE0B2sC7DAAAAMw"]
[Fri Feb 27 21:56:32.141333 2026] [:error] [pid 49306:tid 49324] [client 51.83.11.108:46832] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaGikPnSUDZue59Px9tFpQAAAVA"]
[Fri Feb 27 21:56:34.084246 2026] [:error] [pid 54101:tid 54117] [client 51.83.11.108:46842] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaGiklY5qgRktcYTGFtSGgAAAck"]
[Fri Feb 27 21:56:36.135725 2026] [:error] [pid 52073:tid 52099] [client 51.83.11.108:46848] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaGilIa650YPyxXVeRaYeAAAAZc"]
[Fri Feb 27 21:56:38.154579 2026] [:error] [pid 56075:tid 56088] [client 51.83.11.108:41554] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaGilsKBhrfI6KNv9RgXAQAAAAs"]
[Fri Feb 27 21:56:40.052842 2026] [:error] [pid 56075:tid 56088] [client 51.83.11.108:41562] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaGimMKBhrfI6KNv9RgXEAAAAAs"]
[Fri Feb 27 21:56:42.169099 2026] [:error] [pid 56075:tid 56100] [client 51.83.11.108:41570] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaGimsKBhrfI6KNv9RgXGgAAABY"]
[Fri Feb 27 21:56:44.070119 2026] [:error] [pid 56075:tid 56087] [client 51.83.11.108:41578] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaGinMKBhrfI6KNv9RgXJgAAAAo"]
[Fri Feb 27 22:01:28.384311 2026] [:error] [pid 56075:tid 56096] [client 51.83.11.108:44414] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaGjuMKBhrfI6KNv9RgcDQAAABI"]
[Fri Feb 27 22:01:30.427808 2026] [:error] [pid 62998:tid 63023] [client 51.83.11.108:42634] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aaGjulQeueXZDUmoLolulwAAARU"]
[Fri Feb 27 22:01:32.637518 2026] [:error] [pid 49306:tid 49318] [client 51.83.11.108:42648] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aaGjvPnSUDZue59Px9tIUgAAAUo"]
[Fri Feb 27 22:01:34.869481 2026] [:error] [pid 56075:tid 56088] [client 51.83.11.108:42662] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aaGjvsKBhrfI6KNv9RgcLgAAAAs"]
[Fri Feb 27 22:01:36.730500 2026] [:error] [pid 62998:tid 63006] [client 51.83.11.108:58298] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aaGjwFQeueXZDUmoLoluowAAAQQ"]
[Fri Feb 27 22:01:38.730360 2026] [:error] [pid 52073:tid 52084] [client 51.83.11.108:58304] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaGjwoa650YPyxXVeRacSAAAAYg"]
[Fri Feb 27 23:26:27.559242 2026] [:error] [pid 56075:tid 56095] [client 20.151.128.128:9161] [client 20.151.128.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaG3o8KBhrfI6KNv9RhpcAAAABE"]
[Fri Feb 27 23:26:33.731170 2026] [:error] [pid 56075:tid 56099] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Fri Feb 27 23:26:34.184608 2026] [:error] [pid 56075:tid 56077] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Feb 27 23:26:34.398528 2026] [:error] [pid 56075:tid 56095] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Fri Feb 27 23:26:34.651715 2026] [:error] [pid 56075:tid 56082] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Fri Feb 27 23:26:34.867033 2026] [:error] [pid 56075:tid 56094] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Fri Feb 27 23:26:35.081434 2026] [:error] [pid 56075:tid 56087] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Fri Feb 27 23:26:35.299399 2026] [:error] [pid 56075:tid 56080] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Fri Feb 27 23:26:35.514111 2026] [:error] [pid 56075:tid 56090] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Fri Feb 27 23:26:35.728671 2026] [:error] [pid 56075:tid 56079] [client 20.151.128.128:9100] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Feb 27 23:26:35.939863 2026] [:error] [pid 56075:tid 56083] [client 20.151.128.128:9100] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaG3q8KBhrfI6KNv9RhpqQAAAAY"]
[Fri Feb 27 23:26:40.339263 2026] [:error] [pid 56075:tid 56084] [client 20.151.128.128:9092] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaG3sMKBhrfI6KNv9RhpxwAAAAc"]
[Fri Feb 27 23:26:42.134958 2026] [:error] [pid 52073:tid 52093] [client 20.151.128.128:9188] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaG3soa650YPyxXVeRbYIAAAAZE"]
[Fri Feb 27 23:26:43.670133 2026] [:error] [pid 54102:tid 54158] [client 20.151.128.128:9155] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaG3s3i74D4fiYUm_GeWXwAAAI4"]
[Fri Feb 27 23:26:49.168828 2026] [:error] [pid 49306:tid 49312] [client 20.151.128.128:9202] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaG3ufnSUDZue59Px9t0gwAAAUQ"]
[Fri Feb 27 23:26:51.751498 2026] [:error] [pid 54101:tid 54114] [client 20.151.128.128:9163] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaG3u1Y5qgRktcYTGFthGAAAAcY"]
[Fri Feb 27 23:26:54.273282 2026] [:error] [pid 56075:tid 56088] [client 20.151.128.128:9199] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaG3vsKBhrfI6KNv9RhqFQAAAAs"]
[Fri Feb 27 23:26:55.869200 2026] [:error] [pid 56075:tid 56097] [client 20.151.128.128:9184] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaG3v8KBhrfI6KNv9RhqLgAAABM"]
[Fri Feb 27 23:27:00.548965 2026] [:error] [pid 56075:tid 56100] [client 20.151.128.128:9209] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaG3xMKBhrfI6KNv9RhqdQAAABY"]
[Fri Feb 27 23:27:03.462346 2026] [:error] [pid 52073:tid 52097] [client 20.151.128.128:9181] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaG3x4a650YPyxXVeRbYkwAAAZU"]
[Fri Feb 27 23:27:06.988048 2026] [:error] [pid 52073:tid 52098] [client 20.151.128.128:9157] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaG3yoa650YPyxXVeRbYqwAAAZY"]
[Fri Feb 27 23:27:13.815044 2026] [:error] [pid 62998:tid 63002] [client 20.151.128.128:9205] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG30VQeueXZDUmoLomNcQAAAQE"]
[Fri Feb 27 23:27:15.361355 2026] [:error] [pid 62998:tid 63009] [client 20.151.128.128:9200] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG301QeueXZDUmoLomNegAAAQc"]
[Fri Feb 27 23:27:16.806148 2026] [:error] [pid 54101:tid 54112] [client 20.151.128.128:9106] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG31FY5qgRktcYTGFthKQAAAcQ"]
[Fri Feb 27 23:27:17.889364 2026] [:error] [pid 54103:tid 54194] [client 20.151.128.128:9105] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG31evG4MPCmE0B2sDSZgAAANc"]
[Fri Feb 27 23:27:19.530954 2026] [:error] [pid 56075:tid 56090] [client 20.151.128.128:9192] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaG318KBhrfI6KNv9RhrXgAAAAw"]
[Fri Feb 27 23:27:25.379318 2026] [:error] [pid 52073:tid 52080] [client 20.151.128.128:9122] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaG33Ya650YPyxXVeRbZFwAAAYQ"]
[Fri Feb 27 23:27:28.550631 2026] [:error] [pid 52073:tid 52089] [client 20.151.128.128:9215] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaG34Ia650YPyxXVeRbZIAAAAY0"]
[Fri Feb 27 23:27:36.057575 2026] [:error] [pid 52073:tid 52083] [client 20.151.128.128:9167] File does not exist: /usr/local/apache/htdocs/suspended-page/asf.php
[Fri Feb 27 23:27:36.266527 2026] [:error] [pid 52073:tid 52076] [client 20.151.128.128:9167] File does not exist: /usr/local/apache/htdocs/suspended-page/sa.php
[Fri Feb 27 23:55:25.045228 2026] [:error] [pid 54231:tid 54253] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Fri Feb 27 23:55:25.362016 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Fri Feb 27 23:55:25.581838 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Fri Feb 27 23:55:25.789409 2026] [:error] [pid 54231:tid 54238] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Fri Feb 27 23:55:26.287257 2026] [:error] [pid 54231:tid 54248] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Feb 27 23:55:26.588057 2026] [:error] [pid 54231:tid 54242] [client 20.220.8.221:57602] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.8.221, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaG-buTvb5AeyJCdY7BSIwAAAEg"]
[Fri Feb 27 23:55:26.939097 2026] [:error] [pid 54231:tid 54258] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Feb 27 23:55:27.163821 2026] [:error] [pid 54231:tid 54234] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 23:55:27.371434 2026] [:error] [pid 54231:tid 54256] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 27 23:55:27.641625 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:57602] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.8.221, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaG-b-Tvb5AeyJCdY7BSKQAAAFI"]
[Fri Feb 27 23:55:27.647112 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:57602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 23:55:27.851970 2026] [:error] [pid 54231:tid 54254] [client 20.220.8.221:57602] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aaG-b-Tvb5AeyJCdY7BSKgAAAFQ"]
[Fri Feb 27 23:55:28.476967 2026] [:error] [pid 54101:tid 54117] [client 20.220.8.221:24844] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aaG-cFY5qgRktcYTGFtligAAAck"]
[Fri Feb 27 23:55:29.522161 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:57647] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aaG-cYa650YPyxXVeRbwEgAAAZI"]
[Fri Feb 27 23:55:31.083903 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:57643] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-trackback.php"] [unique_id "aaG-c8KBhrfI6KNv9RiDkwAAAAM"]
[Fri Feb 27 23:55:32.504552 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:24893] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaG-dMKBhrfI6KNv9RiDlwAAABY"]
[Fri Feb 27 23:55:33.539217 2026] [:error] [pid 54101:tid 54123] [client 20.220.8.221:57645] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaG-dVY5qgRktcYTGFtliwAAAc8"]
[Fri Feb 27 23:55:34.620220 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:61546] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaG-doa650YPyxXVeRbwJAAAAZc"]
[Fri Feb 27 23:55:35.309531 2026] [:error] [pid 54231:tid 54249] [client 20.220.8.221:24869] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaG-d-Tvb5AeyJCdY7BSLAAAAE8"]
[Fri Feb 27 23:55:35.964121 2026] [:error] [pid 54231:tid 54244] [client 20.220.8.221:57615] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2025/"] [unique_id "aaG-d-Tvb5AeyJCdY7BSLQAAAEo"]
[Fri Feb 27 23:55:36.597801 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:24963] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2025/"] [unique_id "aaG-eIa650YPyxXVeRbwKwAAAYo"]
[Fri Feb 27 23:55:37.288298 2026] [:error] [pid 54101:tid 54110] [client 20.220.8.221:24843] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2025/"] [unique_id "aaG-eVY5qgRktcYTGFtljQAAAcI"]
[Fri Feb 27 23:55:38.509900 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:24882] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2025/"] [unique_id "aaG-eoa650YPyxXVeRbwNQAAAY8"]
[Fri Feb 27 23:55:39.480534 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:24881] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aaG-e4a650YPyxXVeRbwNwAAAY0"]
[Fri Feb 27 23:55:40.453896 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:24862] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aaG-fIa650YPyxXVeRbwOgAAAYs"]
[Fri Feb 27 23:55:41.299024 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:61533] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aaG-fYa650YPyxXVeRbwPAAAAZQ"]
[Fri Feb 27 23:55:42.258766 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:24865] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "aaG-foa650YPyxXVeRbwQwAAAZc"]
[Fri Feb 27 23:55:42.920428 2026] [:error] [pid 54103:tid 54192] [client 20.220.8.221:61518] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaG-fuvG4MPCmE0B2sDYOgAAANU"]
[Fri Feb 27 23:55:43.797221 2026] [:error] [pid 54101:tid 54113] [client 20.220.8.221:24999] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaG-f1Y5qgRktcYTGFtlkQAAAcU"]
[Fri Feb 27 23:55:44.533338 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:24840] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaG-gIa650YPyxXVeRbwVwAAAYE"]
[Fri Feb 27 23:55:45.010515 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:61506] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaG-gcKBhrfI6KNv9RiDmgAAAAc"]
[Fri Feb 27 23:55:45.640479 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:57636] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload/login.php"] [unique_id "aaG-gYa650YPyxXVeRbwXgAAAY0"]
[Fri Feb 27 23:55:46.558399 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:61524] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload/login.php"] [unique_id "aaG-goa650YPyxXVeRbwZAAAAZM"]
[Fri Feb 27 23:55:47.063599 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:25017] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload/login.php"] [unique_id "aaG-g4a650YPyxXVeRbwaAAAAZc"]
[Fri Feb 27 23:55:47.497957 2026] [:error] [pid 54101:tid 54118] [client 20.220.8.221:24832] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upload/login.php"] [unique_id "aaG-g1Y5qgRktcYTGFtlkwAAAco"]
[Fri Feb 27 23:55:48.191110 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:24878] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaG-hIa650YPyxXVeRbwbAAAAY4"]
[Fri Feb 27 23:55:49.396248 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:24848] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaG-hYa650YPyxXVeRbwbwAAAYs"]
[Fri Feb 27 23:55:49.914548 2026] [:error] [pid 49306:tid 49330] [client 20.220.8.221:61539] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaG-hfnSUDZue59Px9uESQAAAVY"]
[Fri Feb 27 23:55:50.541666 2026] [:error] [pid 62998:tid 63011] [client 20.220.8.221:25374] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaG-hlQeueXZDUmoLomXwQAAAQk"]
[Fri Feb 27 23:55:51.017843 2026] [:error] [pid 49306:tid 49324] [client 20.220.8.221:24978] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaG-h_nSUDZue59Px9uETAAAAVA"]
[Fri Feb 27 23:55:51.477303 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:61543] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaG-h_nSUDZue59Px9uETQAAAUU"]
[Fri Feb 27 23:55:51.929206 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:61523] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaG-h4a650YPyxXVeRbwdQAAAYY"]
[Fri Feb 27 23:55:52.529319 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:25352] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaG-iIa650YPyxXVeRbweQAAAYw"]
[Fri Feb 27 23:55:53.087020 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:24983] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaG-iYa650YPyxXVeRbwfAAAAZU"]
[Fri Feb 27 23:55:53.736488 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:24846] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaG-ifnSUDZue59Px9uEUwAAAU8"]
[Fri Feb 27 23:55:54.450480 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:61537] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaG-ioa650YPyxXVeRbwgwAAAYc"]
[Fri Feb 27 23:55:54.979444 2026] [:error] [pid 54102:tid 54165] [client 20.220.8.221:24992] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaG-ini74D4fiYUm_Gea4QAAAJU"]
[Fri Feb 27 23:55:55.444489 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:24977] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaG-i4a650YPyxXVeRbwiAAAAZI"]
[Fri Feb 27 23:55:56.108618 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:65116] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aaG-jIa650YPyxXVeRbwjQAAAYo"]
[Fri Feb 27 23:55:56.697605 2026] [:error] [pid 54101:tid 54124] [client 20.220.8.221:25010] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aaG-jFY5qgRktcYTGFtlmQAAAdA"]
[Fri Feb 27 23:55:57.934336 2026] [:error] [pid 54102:tid 54148] [client 20.220.8.221:24973] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aaG-jXi74D4fiYUm_Gea4gAAAIQ"]
[Fri Feb 27 23:55:58.651425 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:24839] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/"] [unique_id "aaG-joa650YPyxXVeRbwnAAAAZQ"]
[Fri Feb 27 23:55:59.127404 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:57606] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaG-j_nSUDZue59Px9uEYAAAAUo"]
[Fri Feb 27 23:55:59.555488 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:24888] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaG-j4a650YPyxXVeRbwoQAAAY0"]
[Fri Feb 27 23:55:59.987801 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:57603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaG-j4a650YPyxXVeRbwpAAAAYs"]
[Fri Feb 27 23:56:00.585961 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:65136] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaG-kMKBhrfI6KNv9RiDsQAAABA"]
[Fri Feb 27 23:56:01.440906 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:61515] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaG-kYa650YPyxXVeRbwqwAAAYI"]
[Fri Feb 27 23:56:01.988832 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:57618] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaG-kYa650YPyxXVeRbwsQAAAZM"]
[Fri Feb 27 23:56:02.526953 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:25020] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaG-ksKBhrfI6KNv9RiDtQAAAAo"]
[Fri Feb 27 23:56:03.149806 2026] [:error] [pid 54102:tid 54158] [client 20.220.8.221:57654] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaG-k3i74D4fiYUm_Gea5wAAAI4"]
[Fri Feb 27 23:56:03.758123 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:25362] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaG-k8KBhrfI6KNv9RiDugAAABQ"]
[Fri Feb 27 23:56:04.351692 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:24841] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaG-lIa650YPyxXVeRbwuAAAAYk"]
[Fri Feb 27 23:56:04.895760 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:61522] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaG-lMKBhrfI6KNv9RiDvAAAAAY"]
[Fri Feb 27 23:56:05.955260 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:61555] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaG-lYa650YPyxXVeRbwwAAAAYc"]
[Fri Feb 27 23:56:07.440869 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:61504] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aaG-l4a650YPyxXVeRbw2AAAAZY"]
[Fri Feb 27 23:56:09.239316 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:24887] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aaG-mfnSUDZue59Px9uEagAAAUE"]
[Fri Feb 27 23:56:09.946485 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:61516] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aaG-mcKBhrfI6KNv9RiD0AAAAAU"]
[Fri Feb 27 23:56:10.623257 2026] [:error] [pid 62998:tid 63020] [client 20.220.8.221:24971] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xml.php"] [unique_id "aaG-mlQeueXZDUmoLomXzwAAARI"]
[Fri Feb 27 23:56:11.458492 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:60225] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaG-m1QeueXZDUmoLomX2AAAAQM"]
[Fri Feb 27 23:56:12.396665 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:61566] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaG-nMKBhrfI6KNv9RiD3AAAAAo"]
[Fri Feb 27 23:56:13.408264 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:57641] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaG-ncKBhrfI6KNv9RiD4wAAAAE"]
[Fri Feb 27 23:56:14.567673 2026] [:error] [pid 54101:tid 54121] [client 20.220.8.221:24986] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaG-nlY5qgRktcYTGFtlrwAAAc0"]
[Fri Feb 27 23:56:16.421967 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:24960] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaG-oOTvb5AeyJCdY7BSYgAAAFc"]
[Fri Feb 27 23:56:17.390798 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:61552] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaG-oYa650YPyxXVeRbw9AAAAYQ"]
[Fri Feb 27 23:56:18.852124 2026] [:error] [pid 62998:tid 63008] [client 20.220.8.221:24883] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaG-olQeueXZDUmoLomX6QAAAQY"]
[Fri Feb 27 23:56:20.137385 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:24987] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaG-pIa650YPyxXVeRbw_gAAAYk"]
[Fri Feb 27 23:56:22.279353 2026] [:error] [pid 54103:tid 54185] [client 20.220.8.221:25145] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaG-puvG4MPCmE0B2sDYcgAAAM4"]
[Fri Feb 27 23:56:23.732873 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:24992] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "aaG-p8KBhrfI6KNv9RiEOAAAAAU"]
[Fri Feb 27 23:56:24.814801 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:61561] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admiin.php"] [unique_id "aaG-qMKBhrfI6KNv9RiEPgAAABM"]
[Fri Feb 27 23:56:26.037561 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:60257] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aaG-quTvb5AeyJCdY7BSdQAAAEw"]
[Fri Feb 27 23:56:26.804319 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:24860] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aaG-qvnSUDZue59Px9uEhQAAAVc"]
[Fri Feb 27 23:56:27.679362 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:24982] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 23:56:28.310409 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:24982] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Feb 27 23:56:28.729346 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:24982] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 23:56:30.314436 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:24982] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaG-rsKBhrfI6KNv9RiEaAAAAAE"]
[Fri Feb 27 23:56:30.991487 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:25018] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaG-rvnSUDZue59Px9uEkQAAAUg"]
[Fri Feb 27 23:56:31.982305 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:24981] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaG-r8KBhrfI6KNv9RiEcAAAAAk"]
[Fri Feb 27 23:56:32.483108 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:61534] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaG-sMKBhrfI6KNv9RiEdgAAABM"]
[Fri Feb 27 23:56:33.564219 2026] [:error] [pid 62998:tid 63010] [client 20.220.8.221:24985] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaG-sVQeueXZDUmoLomYCAAAAQg"]
[Fri Feb 27 23:56:34.661113 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:61554] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaG-ssKBhrfI6KNv9RiEggAAAAU"]
[Fri Feb 27 23:56:35.578790 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:57620] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaG-s8KBhrfI6KNv9RiEhQAAAAk"]
[Fri Feb 27 23:56:36.806110 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:25015] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaG-tOTvb5AeyJCdY7BSiQAAAEw"]
[Fri Feb 27 23:56:37.390891 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:25023] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaG-tYa650YPyxXVeRbxSQAAAZg"]
[Fri Feb 27 23:56:38.199193 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:65103] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaG-toa650YPyxXVeRbxUQAAAZA"]
[Fri Feb 27 23:56:39.393500 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:24989] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaG-t4a650YPyxXVeRbxYQAAAYw"]
[Fri Feb 27 23:56:40.006354 2026] [:error] [pid 54231:tid 54243] [client 20.220.8.221:24969] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaG-uOTvb5AeyJCdY7BSjgAAAEk"]
[Fri Feb 27 23:56:40.631729 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:24967] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaG-uPnSUDZue59Px9uEpwAAAVQ"]
[Fri Feb 27 23:56:41.158983 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:61526] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aaG-uVQeueXZDUmoLomYJQAAARg"]
[Fri Feb 27 23:56:41.709959 2026] [:error] [pid 54231:tid 54240] [client 20.220.8.221:65093] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aaG-ueTvb5AeyJCdY7BSkwAAAEY"]
[Fri Feb 27 23:56:42.212222 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:57644] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aaG-uvnSUDZue59Px9uEswAAAVE"]
[Fri Feb 27 23:56:42.827205 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:24855] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "aaG-uvnSUDZue59Px9uEvAAAAUY"]
[Fri Feb 27 23:56:43.728961 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:25407] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/index.php"] [unique_id "aaG-u_nSUDZue59Px9uEvQAAAU8"]
[Fri Feb 27 23:56:44.169747 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:57663] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/index.php"] [unique_id "aaG-vMKBhrfI6KNv9RiEmgAAABY"]
[Fri Feb 27 23:56:44.788544 2026] [:error] [pid 62998:tid 63020] [client 20.220.8.221:25101] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/index.php"] [unique_id "aaG-vFQeueXZDUmoLomYKQAAARI"]
[Fri Feb 27 23:56:45.499148 2026] [:error] [pid 54103:tid 54195] [client 20.220.8.221:24858] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/index.php"] [unique_id "aaG-vevG4MPCmE0B2sDYgQAAANg"]
[Fri Feb 27 23:56:46.128457 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:24892] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aaG-vvnSUDZue59Px9uEwgAAAUo"]
[Fri Feb 27 23:56:46.882862 2026] [:error] [pid 62998:tid 63007] [client 20.220.8.221:24847] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aaG-vlQeueXZDUmoLomYMgAAAQU"]
[Fri Feb 27 23:56:47.670919 2026] [:error] [pid 54231:tid 54255] [client 20.220.8.221:60234] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aaG-v-Tvb5AeyJCdY7BSqwAAAFU"]
[Fri Feb 27 23:56:48.495052 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:57613] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/menu.php"] [unique_id "aaG-wIa650YPyxXVeRbxhgAAAY0"]
[Fri Feb 27 23:56:49.331330 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:57660] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaG-wcKBhrfI6KNv9RiEswAAAAc"]
[Fri Feb 27 23:56:50.102705 2026] [:error] [pid 56075:tid 56079] [client 20.220.8.221:61548] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaG-wsKBhrfI6KNv9RiEwQAAAAI"]
[Fri Feb 27 23:56:50.995192 2026] [:error] [pid 54101:tid 54132] [client 20.220.8.221:24980] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaG-wlY5qgRktcYTGFtlxQAAAdg"]
[Fri Feb 27 23:56:51.969964 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:24874] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaG-w1QeueXZDUmoLomYRQAAAQI"]
[Fri Feb 27 23:56:53.114170 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:25016] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaG-xYa650YPyxXVeRbxlAAAAZg"]
[Fri Feb 27 23:56:54.219216 2026] [:error] [pid 56075:tid 56079] [client 20.220.8.221:24994] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaG-xsKBhrfI6KNv9RiEzwAAAAI"]
[Fri Feb 27 23:56:54.812358 2026] [:error] [pid 52073:tid 52084] [client 20.220.8.221:65122] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaG-xoa650YPyxXVeRbxmwAAAYg"]
[Fri Feb 27 23:56:55.386448 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:25356] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/content.php"] [unique_id "aaG-x8KBhrfI6KNv9RiE3AAAABM"]
[Fri Feb 27 23:56:55.967966 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:24857] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaG-x8KBhrfI6KNv9RiE3wAAABU"]
[Fri Feb 27 23:56:56.474185 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:65125] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaG-yIa650YPyxXVeRbxqQAAAYk"]
[Fri Feb 27 23:56:57.381308 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:25361] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaG-yYa650YPyxXVeRbxsgAAAYw"]
[Fri Feb 27 23:57:13.477934 2026] [:error] [pid 62998:tid 63006] [client 20.220.8.221:24997] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaG-2VQeueXZDUmoLomYZwAAAQQ"]
[Fri Feb 27 23:58:58.450085 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:24991] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaG_Qoa650YPyxXVeRbz8wAAAYY"]
[Fri Feb 27 23:59:28.974754 2026] [:error] [pid 54231:tid 54249] [client 20.220.8.221:61549] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Fri Feb 27 23:59:29.196511 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:61549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Feb 27 23:59:29.684923 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:61549] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 27 23:59:30.514911 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:61549] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Feb 27 23:59:31.187661 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:61549] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aaG_Y-Tvb5AeyJCdY7BT1QAAAEE"]
[Fri Feb 27 23:59:31.645283 2026] [:error] [pid 54102:tid 54158] [client 20.220.8.221:25122] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aaG_Y3i74D4fiYUm_GebqgAAAI4"]
[Fri Feb 27 23:59:32.153802 2026] [:error] [pid 54102:tid 54144] [client 20.220.8.221:25398] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aaG_ZHi74D4fiYUm_GebrgAAAIA"]
[Fri Feb 27 23:59:32.655278 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:25141] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "aaG_ZPnSUDZue59Px9uFuwAAAUI"]
[Fri Feb 27 23:59:33.184007 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:24879] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaG_ZYa650YPyxXVeRb0NQAAAZg"]
[Fri Feb 27 23:59:33.652146 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:24891] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaG_ZfnSUDZue59Px9uFvwAAAUc"]
[Fri Feb 27 23:59:34.152483 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:24845] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaG_ZsKBhrfI6KNv9RiGngAAABQ"]
[Fri Feb 27 23:59:34.643906 2026] [:error] [pid 54101:tid 54129] [client 20.220.8.221:24834] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaG_ZlY5qgRktcYTGFtmMQAAAdU"]
[Fri Feb 27 23:59:35.119985 2026] [:error] [pid 54103:tid 54177] [client 20.220.8.221:61551] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aaG_Z-vG4MPCmE0B2sDZLQAAAMY"]
[Fri Feb 27 23:59:35.675737 2026] [:error] [pid 54103:tid 54174] [client 20.220.8.221:24851] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aaG_Z-vG4MPCmE0B2sDZLgAAAMM"]
[Fri Feb 27 23:59:36.156459 2026] [:error] [pid 54103:tid 54192] [client 20.220.8.221:61544] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aaG_aOvG4MPCmE0B2sDZLwAAANU"]
[Fri Feb 27 23:59:36.653334 2026] [:error] [pid 62998:tid 63023] [client 20.220.8.221:57609] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "aaG_aFQeueXZDUmoLomZTwAAARU"]
[Fri Feb 27 23:59:37.153880 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:61510] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaG_afnSUDZue59Px9uFwQAAAVE"]
[Fri Feb 27 23:59:37.658170 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:24890] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaG_acKBhrfI6KNv9RiGpAAAAAY"]
[Fri Feb 27 23:59:38.186629 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:24870] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaG_asKBhrfI6KNv9RiGpgAAAAo"]
[Fri Feb 27 23:59:38.634024 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:57619] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaG_aoa650YPyxXVeRb0UwAAAYI"]
[Fri Feb 27 23:59:39.064888 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:25022] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaG_a8KBhrfI6KNv9RiGqQAAABA"]
[Fri Feb 27 23:59:39.504724 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:24875] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaG_a8KBhrfI6KNv9RiGqgAAAAg"]
[Fri Feb 27 23:59:39.932128 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:25103] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaG_a4a650YPyxXVeRb0WgAAAYc"]
[Fri Feb 27 23:59:40.477824 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:61557] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaG_bIa650YPyxXVeRb0XgAAAYM"]
[Fri Feb 27 23:59:41.077900 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:24854] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaG_bfnSUDZue59Px9uF0AAAAVU"]
[Fri Feb 27 23:59:41.529284 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:61519] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaG_bYa650YPyxXVeRb0awAAAYk"]
[Fri Feb 27 23:59:42.073409 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:57635] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaG_bvnSUDZue59Px9uF1QAAAUE"]
[Fri Feb 27 23:59:42.490545 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:61512] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaG_bvnSUDZue59Px9uF1gAAAUM"]
[Fri Feb 27 23:59:43.072508 2026] [:error] [pid 54231:tid 54255] [client 20.220.8.221:24995] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aaG_b-Tvb5AeyJCdY7BUAQAAAFU"]
[Fri Feb 27 23:59:43.644579 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:61513] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aaG_b4a650YPyxXVeRb0fwAAAYI"]
[Fri Feb 27 23:59:44.214095 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:25003] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aaG_cIa650YPyxXVeRb0ggAAAYY"]
[Fri Feb 27 23:59:44.979960 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:65121] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ab.php"] [unique_id "aaG_cIa650YPyxXVeRb0hgAAAZY"]
[Fri Feb 27 23:59:45.717633 2026] [:error] [pid 52073:tid 52093] [client 20.220.8.221:65090] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaG_cYa650YPyxXVeRb0kAAAAZE"]
[Fri Feb 27 23:59:46.552930 2026] [:error] [pid 52073:tid 52093] [client 20.220.8.221:57608] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaG_coa650YPyxXVeRb0nAAAAZE"]
[Fri Feb 27 23:59:47.060643 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:65129] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaG_c_nSUDZue59Px9uF2QAAAUA"]
[Fri Feb 27 23:59:47.715033 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:61525] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "aaG_c4a650YPyxXVeRb0nwAAAYk"]
[Fri Feb 27 23:59:48.433630 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:57638] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaG_dIa650YPyxXVeRb0rQAAAYY"]
[Fri Feb 27 23:59:48.896817 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:57632] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko-new.php"] [unique_id "aaG_dIa650YPyxXVeRb0sAAAAYU"]
[Fri Feb 27 23:59:49.557491 2026] [:error] [pid 62998:tid 63010] [client 20.220.8.221:65100] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko-new.php"] [unique_id "aaG_dVQeueXZDUmoLomZbgAAAQg"]
[Fri Feb 27 23:59:50.018252 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:57621] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko-new.php"] [unique_id "aaG_dvnSUDZue59Px9uF3wAAAUs"]
[Fri Feb 27 23:59:51.332607 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:25006] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gecko-new.php"] [unique_id "aaG_d4a650YPyxXVeRb0vAAAAZg"]
[Fri Feb 27 23:59:52.099330 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:24990] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aaG_eIa650YPyxXVeRb0xgAAAYw"]
[Fri Feb 27 23:59:52.553823 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:25209] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aaG_eIa650YPyxXVeRb0ywAAAZA"]
[Fri Feb 27 23:59:53.016645 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:25096] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aaG_efnSUDZue59Px9uF7AAAAUY"]
[Fri Feb 27 23:59:53.710474 2026] [:error] [pid 54102:tid 54168] [client 20.220.8.221:24852] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/simple.php"] [unique_id "aaG_eXi74D4fiYUm_GebzAAAAJc"]
[Fri Feb 27 23:59:54.521550 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:61508] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aaG_evnSUDZue59Px9uF8AAAAUc"]
[Fri Feb 27 23:59:55.011778 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:24852] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aaG_e_nSUDZue59Px9uF9AAAAUo"]
[Fri Feb 27 23:59:55.563042 2026] [:error] [pid 52073:tid 52093] [client 20.220.8.221:24966] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aaG_e4a650YPyxXVeRb02gAAAZE"]
[Fri Feb 27 23:59:56.008619 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:24835] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akcc.php"] [unique_id "aaG_fIa650YPyxXVeRb03wAAAZU"]
[Fri Feb 27 23:59:56.578909 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:61524] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aaG_fIa650YPyxXVeRb06QAAAYU"]
[Fri Feb 27 23:59:57.072833 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:24865] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aaG_fYa650YPyxXVeRb07QAAAZg"]
[Fri Feb 27 23:59:57.662842 2026] [:error] [pid 62998:tid 63021] [client 20.220.8.221:24866] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aaG_fVQeueXZDUmoLomZfQAAARM"]
[Fri Feb 27 23:59:58.449144 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:25009] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signin.php"] [unique_id "aaG_foa650YPyxXVeRb0-gAAAZg"]
[Fri Feb 27 23:59:58.919951 2026] [:error] [pid 62998:tid 63020] [client 20.220.8.221:24961] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG_flQeueXZDUmoLomZfwAAARI"]
[Fri Feb 27 23:59:59.426849 2026] [:error] [pid 54102:tid 54166] [client 20.220.8.221:61506] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG_f3i74D4fiYUm_GebzwAAAJY"]
[Fri Feb 27 23:59:59.886928 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:57645] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG_f4a650YPyxXVeRb0_gAAAZY"]
[Sat Feb 28 00:00:00.330290 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:62041] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaG_gPnSUDZue59Px9uF_QAAAVQ"]
[Sat Feb 28 00:00:00.823439 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:25088] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aaG_gMKBhrfI6KNv9RiGygAAABU"]
[Sat Feb 28 00:00:01.311995 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:61565] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aaG_gcKBhrfI6KNv9RiGzwAAAA8"]
[Sat Feb 28 00:00:01.734991 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:61511] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aaG_gcKBhrfI6KNv9RiG0QAAABQ"]
[Sat Feb 28 00:00:02.217297 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:24976] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config.php"] [unique_id "aaG_gsKBhrfI6KNv9RiG0wAAAAE"]
[Sat Feb 28 00:00:02.690846 2026] [:error] [pid 54101:tid 54125] [client 20.220.8.221:65108] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aaG_glY5qgRktcYTGFtmRwAAAdE"]
[Sat Feb 28 00:00:03.253179 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:25347] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aaG_g4a650YPyxXVeRb1FAAAAZc"]
[Sat Feb 28 00:00:03.810264 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:65098] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aaG_g4a650YPyxXVeRb1GgAAAYI"]
[Sat Feb 28 00:00:04.801809 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:57638] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sx.php"] [unique_id "aaG_hOTvb5AeyJCdY7BUEAAAAEE"]
[Sat Feb 28 00:00:05.823172 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:65099] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin-header.php"] [unique_id "aaG_hcKBhrfI6KNv9RiG4AAAAAM"]
[Sat Feb 28 00:00:06.308630 2026] [:error] [pid 54101:tid 54117] [client 20.220.8.221:61540] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin-header.php"] [unique_id "aaG_hlY5qgRktcYTGFtmSQAAAck"]
[Sat Feb 28 00:00:06.838106 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:24840] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin-header.php"] [unique_id "aaG_hsKBhrfI6KNv9RiG5AAAABQ"]
[Sat Feb 28 00:00:07.296020 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:61543] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin-header.php"] [unique_id "aaG_h4a650YPyxXVeRb1JQAAAYM"]
[Sat Feb 28 00:00:07.726351 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:57623] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaG_h4a650YPyxXVeRb1KQAAAZM"]
[Sat Feb 28 00:00:08.310583 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:24880] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaG_iIa650YPyxXVeRb1MwAAAYs"]
[Sat Feb 28 00:00:08.772408 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:24885] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaG_iOTvb5AeyJCdY7BUFQAAAEw"]
[Sat Feb 28 00:00:09.234797 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:57628] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/class.php"] [unique_id "aaG_ifnSUDZue59Px9uGCAAAAVE"]
[Sat Feb 28 00:00:09.710228 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:24963] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaG_iYa650YPyxXVeRb1NgAAAYM"]
[Sat Feb 28 00:00:10.199014 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:61518] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaG_ioa650YPyxXVeRb1OQAAAYU"]
[Sat Feb 28 00:00:10.743061 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:57656] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaG_isKBhrfI6KNv9RiG7wAAAAM"]
[Sat Feb 28 00:00:11.824664 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:24988] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaG_i4a650YPyxXVeRb1PwAAAZc"]
[Sat Feb 28 00:00:12.266787 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:24888] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaG_jMKBhrfI6KNv9RiG-wAAABE"]
[Sat Feb 28 00:00:12.715940 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:24862] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaG_jMKBhrfI6KNv9RiHAAAAAAM"]
[Sat Feb 28 00:00:13.159861 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:65097] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaG_jcKBhrfI6KNv9RiHBgAAAAg"]
[Sat Feb 28 00:00:13.640311 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:57618] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/item.php"] [unique_id "aaG_jfnSUDZue59Px9uGDgAAAUw"]
[Sat Feb 28 00:00:14.099274 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:24864] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aaG_joa650YPyxXVeRb1RQAAAYI"]
[Sat Feb 28 00:00:14.827510 2026] [:error] [pid 62998:tid 63009] [client 20.220.8.221:61547] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aaG_jlQeueXZDUmoLomZkgAAAQc"]
[Sat Feb 28 00:00:15.279029 2026] [:error] [pid 54101:tid 54123] [client 20.220.8.221:57631] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aaG_j1Y5qgRktcYTGFtmWwAAAc8"]
[Sat Feb 28 00:00:15.726452 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:61541] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aaG_j8KBhrfI6KNv9RiHEAAAABg"]
[Sat Feb 28 00:00:16.224749 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:25375] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaG_kFQeueXZDUmoLomZmQAAAQI"]
[Sat Feb 28 00:00:16.717721 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:57646] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaG_kMKBhrfI6KNv9RiHFwAAAAk"]
[Sat Feb 28 00:00:17.350495 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:61504] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaG_kcKBhrfI6KNv9RiHHgAAABg"]
[Sat Feb 28 00:00:17.913622 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:61527] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaG_kcKBhrfI6KNv9RiHKAAAAAE"]
[Sat Feb 28 00:00:18.398057 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:25138] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aaG_ksKBhrfI6KNv9RiHMAAAABg"]
[Sat Feb 28 00:00:18.996036 2026] [:error] [pid 62998:tid 63025] [client 20.220.8.221:25147] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aaG_klQeueXZDUmoLomZnAAAARc"]
[Sat Feb 28 00:00:19.935739 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:24869] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aaG_k4a650YPyxXVeRb1UQAAAZQ"]
[Sat Feb 28 00:00:21.371979 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:24843] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/"] [unique_id "aaG_lfnSUDZue59Px9uGHgAAAU8"]
[Sat Feb 28 00:00:22.870114 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:24979] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaG_lvnSUDZue59Px9uGJgAAAUM"]
[Sat Feb 28 00:00:23.898215 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:25019] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaG_l4a650YPyxXVeRb1VQAAAYI"]
[Sat Feb 28 00:00:24.426051 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:57655] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaG_mIa650YPyxXVeRb1VwAAAYU"]
[Sat Feb 28 00:00:25.323143 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:57616] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error.php"] [unique_id "aaG_mYa650YPyxXVeRb1ZQAAAYs"]
[Sat Feb 28 00:00:26.015586 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:25088] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaG_moa650YPyxXVeRb1bAAAAYA"]
[Sat Feb 28 00:00:26.862767 2026] [:error] [pid 62998:tid 63009] [client 20.220.8.221:25111] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaG_mlQeueXZDUmoLomZoQAAAQc"]
[Sat Feb 28 00:00:27.504358 2026] [:error] [pid 54102:tid 54160] [client 20.220.8.221:61529] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaG_m3i74D4fiYUm_Geb7QAAAJA"]
[Sat Feb 28 00:00:28.010850 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:65119] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaG_nIa650YPyxXVeRb1egAAAYY"]
[Sat Feb 28 00:00:28.789610 2026] [:error] [pid 62998:tid 63020] [client 20.220.8.221:62016] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaG_nFQeueXZDUmoLomZqAAAARI"]
[Sat Feb 28 00:00:29.618309 2026] [:error] [pid 54102:tid 54168] [client 20.220.8.221:25154] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Feb 28 00:00:30.731582 2026] [:error] [pid 54102:tid 54149] [client 20.220.8.221:25154] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sat Feb 28 00:00:31.685031 2026] [:error] [pid 54102:tid 54155] [client 20.220.8.221:25154] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaG_n3i74D4fiYUm_Geb_wAAAIs"]
[Sat Feb 28 00:00:32.954242 2026] [:error] [pid 54103:tid 54178] [client 20.220.8.221:61514] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Feb 28 00:00:33.718840 2026] [:error] [pid 54103:tid 54181] [client 20.220.8.221:61514] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaG_oevG4MPCmE0B2sDZVwAAAMo"]
[Sat Feb 28 00:00:36.099064 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:57661] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaG_pMKBhrfI6KNv9RiHYAAAABQ"]
[Sat Feb 28 00:00:38.354356 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:61550] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaG_psKBhrfI6KNv9RiHaQAAAAo"]
[Sat Feb 28 00:00:40.148326 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:57636] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaG_qMKBhrfI6KNv9RiHdQAAAAk"]
[Sat Feb 28 00:00:41.472002 2026] [:error] [pid 62998:tid 63007] [client 20.220.8.221:61521] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaG_qVQeueXZDUmoLomZvwAAAQU"]
[Sat Feb 28 00:00:43.757672 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:61523] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aaG_q4a650YPyxXVeRb1rAAAAZU"]
[Sat Feb 28 00:00:44.808859 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:57614] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aaG_rMKBhrfI6KNv9RiHjgAAAAM"]
[Sat Feb 28 00:00:45.583843 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:24894] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aaG_rcKBhrfI6KNv9RiHkwAAAAo"]
[Sat Feb 28 00:00:46.112239 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:24838] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/file.php"] [unique_id "aaG_roa650YPyxXVeRb1vAAAAZg"]
[Sat Feb 28 00:00:46.738852 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:24859] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aaG_rsKBhrfI6KNv9RiHmgAAAAY"]
[Sat Feb 28 00:00:47.268001 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:57642] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aaG_r_nSUDZue59Px9uGTgAAAUw"]
[Sat Feb 28 00:00:48.100105 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:57647] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aaG_sPnSUDZue59Px9uGVQAAAUY"]
[Sat Feb 28 00:00:48.747240 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:24871] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aaG_sIa650YPyxXVeRb1xAAAAZU"]
[Sat Feb 28 00:00:49.640153 2026] [:error] [pid 62998:tid 63024] [client 20.220.8.221:24974] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaG_sVQeueXZDUmoLomZ0AAAARY"]
[Sat Feb 28 00:00:50.201885 2026] [:error] [pid 56075:tid 56090] [client 20.220.8.221:25020] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aaG_ssKBhrfI6KNv9RiHtAAAAAw"]
[Sat Feb 28 00:00:50.716674 2026] [:error] [pid 54101:tid 54115] [client 20.220.8.221:24883] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aaG_slY5qgRktcYTGFtmegAAAcc"]
[Sat Feb 28 00:00:51.163947 2026] [:error] [pid 49306:tid 49330] [client 20.220.8.221:24886] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/"] [unique_id "aaG_s_nSUDZue59Px9uGWAAAAVY"]
[Sat Feb 28 00:00:51.590094 2026] [:error] [pid 49306:tid 49327] [client 20.220.8.221:24996] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akc.php"] [unique_id "aaG_s_nSUDZue59Px9uGWgAAAVM"]
[Sat Feb 28 00:00:52.083345 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:61554] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akc.php"] [unique_id "aaG_tMKBhrfI6KNv9RiHvgAAAA4"]
[Sat Feb 28 00:00:52.611739 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:25395] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akc.php"] [unique_id "aaG_tIa650YPyxXVeRb11QAAAYY"]
[Sat Feb 28 00:00:53.671442 2026] [:error] [pid 54231:tid 54248] [client 20.220.8.221:61533] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/akc.php"] [unique_id "aaG_teTvb5AeyJCdY7BUKgAAAE4"]
[Sat Feb 28 00:00:54.373073 2026] [:error] [pid 54102:tid 54163] [client 20.220.8.221:57622] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaG_tni74D4fiYUm_GecIAAAAJM"]
[Sat Feb 28 00:00:54.855135 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:65096] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaG_toa650YPyxXVeRb13wAAAYc"]
[Sat Feb 28 00:00:55.291822 2026] [:error] [pid 54231:tid 54242] [client 20.220.8.221:24893] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaG_t-Tvb5AeyJCdY7BUNgAAAEg"]
[Sat Feb 28 00:00:55.872494 2026] [:error] [pid 54231:tid 54245] [client 20.220.8.221:25390] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaG_t-Tvb5AeyJCdY7BUPAAAAEs"]
[Sat Feb 28 00:00:56.326460 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:57607] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaG_uIa650YPyxXVeRb16AAAAZI"]
[Sat Feb 28 00:00:57.014438 2026] [:error] [pid 54231:tid 54250] [client 20.220.8.221:24868] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaG_ueTvb5AeyJCdY7BURwAAAFA"]
[Sat Feb 28 00:00:57.498049 2026] [:error] [pid 62998:tid 63017] [client 20.220.8.221:24993] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaG_uVQeueXZDUmoLomZ3QAAAQ8"]
[Sat Feb 28 00:00:58.130864 2026] [:error] [pid 54231:tid 54242] [client 20.220.8.221:24965] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaG_uuTvb5AeyJCdY7BUTAAAAEg"]
[Sat Feb 28 00:00:58.877253 2026] [:error] [pid 54231:tid 54248] [client 20.220.8.221:24892] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaG_uuTvb5AeyJCdY7BUVgAAAE4"]
[Sat Feb 28 00:00:59.373221 2026] [:error] [pid 49306:tid 49332] [client 20.220.8.221:24876] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aaG_u_nSUDZue59Px9uGeAAAAVg"]
[Sat Feb 28 00:00:59.895149 2026] [:error] [pid 62998:tid 63009] [client 20.220.8.221:57611] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aaG_u1QeueXZDUmoLomZ5AAAAQc"]
[Sat Feb 28 00:01:00.332550 2026] [:error] [pid 49306:tid 49317] [client 20.220.8.221:57652] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aaG_vPnSUDZue59Px9uGfAAAAUk"]
[Sat Feb 28 00:01:00.842415 2026] [:error] [pid 54103:tid 54173] [client 20.220.8.221:57650] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aaG_vOvG4MPCmE0B2sDZewAAAMI"]
[Sat Feb 28 00:01:01.316533 2026] [:error] [pid 54102:tid 54145] [client 20.220.8.221:25377] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaG_vXi74D4fiYUm_GecLAAAAIE"]
[Sat Feb 28 00:01:01.795873 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:24842] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaG_vcKBhrfI6KNv9RiHyQAAAAg"]
[Sat Feb 28 00:01:02.510010 2026] [:error] [pid 54101:tid 54111] [client 20.220.8.221:61539] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaG_vlY5qgRktcYTGFtmfwAAAcM"]
[Sat Feb 28 00:01:03.005661 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:24861] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/makeasmtp.php"] [unique_id "aaG_v-vG4MPCmE0B2sDZfQAAAM8"]
[Sat Feb 28 00:01:03.534178 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:24867] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaG_v1QeueXZDUmoLomZ6wAAAQI"]
[Sat Feb 28 00:01:04.155602 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:61538] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaG_wIa650YPyxXVeRb2CgAAAYo"]
[Sat Feb 28 00:01:04.799994 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:24863] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaG_wPnSUDZue59Px9uGiAAAAUI"]
[Sat Feb 28 00:01:05.676873 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:24867] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaG_wcKBhrfI6KNv9RiH1wAAAAU"]
[Sat Feb 28 00:01:06.205890 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:24856] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaG_wvnSUDZue59Px9uGiwAAAUc"]
[Sat Feb 28 00:01:06.686110 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:57627] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaG_wvnSUDZue59Px9uGjwAAAUU"]
[Sat Feb 28 00:01:07.115964 2026] [:error] [pid 62998:tid 63019] [client 20.220.8.221:57654] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaG_w1QeueXZDUmoLomZ7wAAARE"]
[Sat Feb 28 00:01:07.581559 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:57653] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new.php"] [unique_id "aaG_w_nSUDZue59Px9uGkwAAAUs"]
[Sat Feb 28 00:01:08.138603 2026] [:error] [pid 54103:tid 54183] [client 20.220.8.221:25097] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aaG_xOvG4MPCmE0B2sDZhwAAAMw"]
[Sat Feb 28 00:01:08.821214 2026] [:error] [pid 54101:tid 54118] [client 20.220.8.221:25017] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aaG_xFY5qgRktcYTGFtmiAAAAco"]
[Sat Feb 28 00:01:09.474084 2026] [:error] [pid 54102:tid 54159] [client 20.220.8.221:62072] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aaG_xXi74D4fiYUm_GecOgAAAI8"]
[Sat Feb 28 00:01:10.111529 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:61505] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "aaG_xvnSUDZue59Px9uGlAAAAUM"]
[Sat Feb 28 00:01:10.722307 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:25013] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaG_xoa650YPyxXVeRb2GAAAAYY"]
[Sat Feb 28 00:01:11.337156 2026] [:error] [pid 54231:tid 54250] [client 20.220.8.221:25127] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaG_x-Tvb5AeyJCdY7BUagAAAFA"]
[Sat Feb 28 00:01:11.932086 2026] [:error] [pid 54103:tid 54170] [client 20.220.8.221:25382] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaG_x-vG4MPCmE0B2sDZjQAAAMA"]
[Sat Feb 28 00:01:12.578480 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:25143] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaG_yIa650YPyxXVeRb2LgAAAZQ"]
[Sat Feb 28 00:01:13.097308 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:24985] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaG_yYa650YPyxXVeRb2NQAAAZA"]
[Sat Feb 28 00:01:13.746737 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:61536] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fox.php"] [unique_id "aaG_ycKBhrfI6KNv9RiH4gAAAAo"]
[Sat Feb 28 00:01:14.234736 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:61552] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fox.php"] [unique_id "aaG_yuTvb5AeyJCdY7BUbwAAAEc"]
[Sat Feb 28 00:01:14.765730 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:25010] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fox.php"] [unique_id "aaG_ysKBhrfI6KNv9RiH6wAAABE"]
[Sat Feb 28 00:01:15.297944 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:57605] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fox.php"] [unique_id "aaG_y-Tvb5AeyJCdY7BUcQAAAEE"]
[Sat Feb 28 00:01:15.961187 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:60269] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaG_y4a650YPyxXVeRb2PgAAAY8"]
[Sat Feb 28 00:01:16.862857 2026] [:error] [pid 54103:tid 54177] [client 20.220.8.221:61531] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaG_zOvG4MPCmE0B2sDZlwAAAMY"]
[Sat Feb 28 00:01:17.519533 2026] [:error] [pid 54101:tid 54115] [client 20.220.8.221:25179] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaG_zVY5qgRktcYTGFtmoAAAAcc"]
[Sat Feb 28 00:01:18.029934 2026] [:error] [pid 54231:tid 54254] [client 20.220.8.221:25363] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaG_zuTvb5AeyJCdY7BUdwAAAFQ"]
[Sat Feb 28 00:01:18.952311 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:57658] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah.php"] [unique_id "aaG_zsKBhrfI6KNv9RiH_QAAABA"]
[Sat Feb 28 00:01:19.405271 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:65136] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaG_z8KBhrfI6KNv9RiIAQAAAAU"]
[Sat Feb 28 00:01:19.997771 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:24983] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaG_z4a650YPyxXVeRb2WwAAAY0"]
[Sat Feb 28 00:01:20.522663 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:57626] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaG_0Ia650YPyxXVeRb2YAAAAYA"]
[Sat Feb 28 00:01:21.052718 2026] [:error] [pid 54101:tid 54114] [client 20.220.8.221:24887] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaG_0VY5qgRktcYTGFtmogAAAcY"]
[Sat Feb 28 00:01:21.506787 2026] [:error] [pid 54231:tid 54247] [client 20.220.8.221:61537] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aaG_0eTvb5AeyJCdY7BUfQAAAE0"]
[Sat Feb 28 00:01:22.006365 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:65115] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aaG_0vnSUDZue59Px9uGqwAAAUg"]
[Sat Feb 28 00:01:22.695443 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:65124] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aaG_0lQeueXZDUmoLomaDAAAARg"]
[Sat Feb 28 00:01:23.551448 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:24872] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/help.php"] [unique_id "aaG_0_nSUDZue59Px9uGsQAAAVc"]
[Sat Feb 28 00:01:24.229124 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:61545] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aaG_1OTvb5AeyJCdY7BUgwAAAEM"]
[Sat Feb 28 00:01:24.671199 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:65118] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aaG_1FQeueXZDUmoLomaFAAAAQM"]
[Sat Feb 28 00:01:25.439784 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:61522] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aaG_1fnSUDZue59Px9uGugAAAUs"]
[Sat Feb 28 00:01:26.056381 2026] [:error] [pid 54102:tid 54164] [client 20.220.8.221:65109] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/123.php"] [unique_id "aaG_1ni74D4fiYUm_GecSgAAAJQ"]
[Sat Feb 28 00:01:26.754050 2026] [:error] [pid 54102:tid 54144] [client 20.220.8.221:65144] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aaG_1ni74D4fiYUm_GecTQAAAIA"]
[Sat Feb 28 00:01:27.340771 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:25132] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aaG_1_nSUDZue59Px9uGxAAAAU8"]
[Sat Feb 28 00:01:35.425526 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:24850] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Sat Feb 28 00:01:36.812417 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:24850] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Feb 28 00:01:37.671050 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:24850] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Feb 28 00:01:37.886998 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:24850] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaG_4cKBhrfI6KNv9RiIMwAAABg"]
[Sat Feb 28 00:01:38.358955 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:25369] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaG_4uvG4MPCmE0B2sDZ1QAAAM8"]
[Sat Feb 28 00:01:38.860669 2026] [:error] [pid 62998:tid 63010] [client 20.220.8.221:25012] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaG_4lQeueXZDUmoLomaNwAAAQg"]
[Sat Feb 28 00:01:39.336207 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:24860] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaG_44a650YPyxXVeRb23wAAAY0"]
[Sat Feb 28 00:01:39.803882 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:61536] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aaG_44a650YPyxXVeRb25QAAAYI"]
[Sat Feb 28 00:01:40.333346 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:25120] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aaG_5Ia650YPyxXVeRb26gAAAYw"]
[Sat Feb 28 00:01:40.844103 2026] [:error] [pid 62998:tid 63014] [client 20.220.8.221:24980] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aaG_5FQeueXZDUmoLomaOwAAAQw"]
[Sat Feb 28 00:01:41.503304 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:25379] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "aaG_5Ya650YPyxXVeRb29gAAAYE"]
[Sat Feb 28 00:01:42.823926 2026] [:error] [pid 54103:tid 54187] [client 20.220.8.221:25004] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaG_5uvG4MPCmE0B2sDZ3wAAANA"]
[Sat Feb 28 00:01:43.250601 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:24972] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aaG_58KBhrfI6KNv9RiIQAAAAAk"]
[Sat Feb 28 00:01:43.726052 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:25000] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aaG_54a650YPyxXVeRb3AQAAAYc"]
[Sat Feb 28 00:01:44.263580 2026] [:error] [pid 54231:tid 54236] [client 20.220.8.221:24836] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "aaG_6OTvb5AeyJCdY7BUoAAAAEI"]
[Sat Feb 28 00:01:44.769294 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:65110] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaG_6MKBhrfI6KNv9RiISAAAABY"]
[Sat Feb 28 00:01:45.619110 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:25149] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaG_6cKBhrfI6KNv9RiIUwAAAAM"]
[Sat Feb 28 00:01:46.375994 2026] [:error] [pid 54103:tid 54182] [client 20.220.8.221:24999] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaG_6uvG4MPCmE0B2sDZ6wAAAMs"]
[Sat Feb 28 00:01:46.893254 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:25152] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaG_6sKBhrfI6KNv9RiIWQAAAAo"]
[Sat Feb 28 00:01:47.708994 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:25380] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaG_6_nSUDZue59Px9uHGgAAAVU"]
[Sat Feb 28 00:01:48.138493 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:57615] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aaG_7PnSUDZue59Px9uHHgAAAVQ"]
[Sat Feb 28 00:01:48.653097 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:57651] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aaG_7Ia650YPyxXVeRb3CQAAAZA"]
[Sat Feb 28 00:01:49.167553 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:65089] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aaG_7Ya650YPyxXVeRb3EgAAAYk"]
[Sat Feb 28 00:01:49.583739 2026] [:error] [pid 54101:tid 54118] [client 20.220.8.221:61542] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configs.php"] [unique_id "aaG_7VY5qgRktcYTGFtmvgAAAco"]
[Sat Feb 28 00:01:50.139115 2026] [:error] [pid 54231:tid 54247] [client 20.220.8.221:25102] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aaG_7uTvb5AeyJCdY7BUogAAAE0"]
[Sat Feb 28 00:01:50.741929 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:65094] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aaG_7oa650YPyxXVeRb3JAAAAYc"]
[Sat Feb 28 00:01:51.228333 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:25101] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aaG_74a650YPyxXVeRb3KQAAAYI"]
[Sat Feb 28 00:01:51.856657 2026] [:error] [pid 54101:tid 54109] [client 20.220.8.221:60257] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/files/index.php"] [unique_id "aaG_71Y5qgRktcYTGFtmxAAAAcE"]
[Sat Feb 28 00:01:52.376063 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:60263] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaG_8FQeueXZDUmoLomaSAAAAQA"]
[Sat Feb 28 00:01:52.990674 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:25091] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaG_8Ia650YPyxXVeRb3LwAAAY8"]
[Sat Feb 28 00:01:53.684387 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:24855] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaG_8fnSUDZue59Px9uHLAAAAVU"]
[Sat Feb 28 00:01:54.395068 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:57649] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaG_8oa650YPyxXVeRb3OwAAAYY"]
[Sat Feb 28 00:01:55.086683 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:25376] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaG_84a650YPyxXVeRb3RwAAAZc"]
[Sat Feb 28 00:01:55.607878 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:57612] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aaG_88KBhrfI6KNv9RiIeAAAAAY"]
[Sat Feb 28 00:01:56.184845 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:57637] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aaG_9MKBhrfI6KNv9RiIgAAAABg"]
[Sat Feb 28 00:01:56.717008 2026] [:error] [pid 54102:tid 54160] [client 20.220.8.221:65111] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aaG_9Hi74D4fiYUm_GecYgAAAJA"]
[Sat Feb 28 00:01:57.162583 2026] [:error] [pid 54103:tid 54184] [client 20.220.8.221:24978] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "aaG_9evG4MPCmE0B2sDZ8gAAAM0"]
[Sat Feb 28 00:01:57.638714 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:65131] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaG_9Xi74D4fiYUm_GecZAAAAII"]
[Sat Feb 28 00:01:58.085612 2026] [:error] [pid 54102:tid 54163] [client 20.220.8.221:24889] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaG_9ni74D4fiYUm_GecZwAAAJM"]
[Sat Feb 28 00:01:58.595051 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:25014] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaG_9vnSUDZue59Px9uHOgAAAUg"]
[Sat Feb 28 00:01:59.034328 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:24998] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaG_94a650YPyxXVeRb3UQAAAYw"]
[Sat Feb 28 00:01:59.557405 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:24832] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaG_91QeueXZDUmoLomaUwAAAQI"]
[Sat Feb 28 00:02:00.061582 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:61558] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaG_-MKBhrfI6KNv9RiIiwAAAAM"]
[Sat Feb 28 00:02:00.495216 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:61515] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaG_-MKBhrfI6KNv9RiIkAAAABI"]
[Sat Feb 28 00:02:00.911193 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:25344] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaG_-MKBhrfI6KNv9RiIlQAAAAg"]
[Sat Feb 28 00:02:01.354235 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:25005] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aaG_-cKBhrfI6KNv9RiImQAAABA"]
[Sat Feb 28 00:02:01.804899 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:24848] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aaG_-Ya650YPyxXVeRb3VgAAAZU"]
[Sat Feb 28 00:02:02.219364 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:65133] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aaG_-oa650YPyxXVeRb3WgAAAZA"]
[Sat Feb 28 00:02:02.720705 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:24873] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php"] [unique_id "aaG_-oa650YPyxXVeRb3YQAAAZY"]
[Sat Feb 28 00:02:03.170313 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:24881] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaG_-4a650YPyxXVeRb3ZwAAAYI"]
[Sat Feb 28 00:02:03.599050 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:25404] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaG_-_nSUDZue59Px9uHQQAAAUI"]
[Sat Feb 28 00:02:04.050506 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:24986] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaG__PnSUDZue59Px9uHQwAAAUU"]
[Sat Feb 28 00:02:04.482844 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:24962] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaG__PnSUDZue59Px9uHRQAAAUE"]
[Sat Feb 28 00:02:04.899202 2026] [:error] [pid 49306:tid 49327] [client 20.220.8.221:25016] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaG__PnSUDZue59Px9uHSQAAAVM"]
[Sat Feb 28 00:02:05.364010 2026] [:error] [pid 54101:tid 54128] [client 20.220.8.221:24970] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaG__VY5qgRktcYTGFtm0gAAAdQ"]
[Sat Feb 28 00:02:05.932329 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:25359] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaG__fnSUDZue59Px9uHTAAAAUc"]
[Sat Feb 28 00:02:06.450157 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:25401] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaG__oa650YPyxXVeRb3bwAAAYo"]
[Sat Feb 28 00:02:06.935842 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:25400] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aaG__vnSUDZue59Px9uHUQAAAU0"]
[Sat Feb 28 00:02:07.411225 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:57603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aaG__4a650YPyxXVeRb3cgAAAZc"]
[Sat Feb 28 00:02:07.822836 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:24989] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aaG___nSUDZue59Px9uHVwAAAUE"]
[Sat Feb 28 00:02:08.262975 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:24967] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "aaHAAIa650YPyxXVeRb3eAAAAYE"]
[Sat Feb 28 00:02:08.727747 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:24975] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aaHAAIa650YPyxXVeRb3fAAAAYs"]
[Sat Feb 28 00:02:09.159995 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:60248] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aaHAAeTvb5AeyJCdY7BUrQAAAEw"]
[Sat Feb 28 00:02:09.623581 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:24839] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aaHAAYa650YPyxXVeRb3hAAAAZc"]
[Sat Feb 28 00:02:10.121787 2026] [:error] [pid 54231:tid 54234] [client 20.220.8.221:61517] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "aaHAAuTvb5AeyJCdY7BUrwAAAEA"]
[Sat Feb 28 00:02:10.551567 2026] [:error] [pid 54231:tid 54244] [client 20.220.8.221:24971] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaHAAuTvb5AeyJCdY7BUsQAAAEo"]
[Sat Feb 28 00:02:11.053964 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:24849] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaHAA8KBhrfI6KNv9RiIpQAAAAQ"]
[Sat Feb 28 00:02:11.522053 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:24984] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaHAA8KBhrfI6KNv9RiIqAAAABY"]
[Sat Feb 28 00:02:11.961447 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:57641] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaHAA8KBhrfI6KNv9RiIqwAAAAY"]
[Sat Feb 28 00:02:12.479776 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:65140] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaHABMKBhrfI6KNv9RiIsQAAABA"]
[Sat Feb 28 00:02:13.076925 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:62035] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaHABcKBhrfI6KNv9RiItgAAAAE"]
[Sat Feb 28 00:02:13.523769 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:57600] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaHABYa650YPyxXVeRb3iwAAAZY"]
[Sat Feb 28 00:02:13.979055 2026] [:error] [pid 54101:tid 54117] [client 20.220.8.221:60267] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news.php"] [unique_id "aaHABVY5qgRktcYTGFtm3wAAAck"]
[Sat Feb 28 00:02:14.423786 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:25362] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaHABoa650YPyxXVeRb3kwAAAZQ"]
[Sat Feb 28 00:02:14.917049 2026] [:error] [pid 54102:tid 54150] [client 20.220.8.221:61530] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aaHABni74D4fiYUm_GecdgAAAIY"]
[Sat Feb 28 00:02:15.329662 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:62061] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aaHAB_nSUDZue59Px9uHZwAAAVQ"]
[Sat Feb 28 00:02:15.917609 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:25133] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aaHAB8KBhrfI6KNv9RiIvgAAABA"]
[Sat Feb 28 00:02:16.393047 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:24982] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1index.php"] [unique_id "aaHACMKBhrfI6KNv9RiIvwAAABQ"]
[Sat Feb 28 00:02:16.818322 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:24848] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aaHACIa650YPyxXVeRb3ngAAAYE"]
[Sat Feb 28 00:02:17.255442 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:65123] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aaHACYa650YPyxXVeRb3oQAAAYY"]
[Sat Feb 28 00:02:17.726100 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:60276] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aaHACfnSUDZue59Px9uHbQAAAU4"]
[Sat Feb 28 00:02:18.152291 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:25349] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2023/"] [unique_id "aaHACsKBhrfI6KNv9RiIxAAAAAQ"]
[Sat Feb 28 00:02:18.632191 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:65113] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaHACsKBhrfI6KNv9RiIxgAAAAM"]
[Sat Feb 28 00:02:19.117166 2026] [:error] [pid 62998:tid 63015] [client 20.220.8.221:25142] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaHAC1QeueXZDUmoLomadQAAAQ0"]
[Sat Feb 28 00:02:19.595677 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:57657] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaHAC4a650YPyxXVeRb3rwAAAZg"]
[Sat Feb 28 00:02:20.132176 2026] [:error] [pid 54103:tid 54189] [client 20.220.8.221:57630] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaHADOvG4MPCmE0B2sDaCQAAANI"]
[Sat Feb 28 00:02:20.581320 2026] [:error] [pid 62998:tid 63007] [client 20.220.8.221:65147] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaHADFQeueXZDUmoLomadwAAAQU"]
[Sat Feb 28 00:02:21.095970 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:25185] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaHADcKBhrfI6KNv9RiIygAAABE"]
[Sat Feb 28 00:02:21.648111 2026] [:error] [pid 54103:tid 54188] [client 20.220.8.221:25110] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaHADevG4MPCmE0B2sDaEQAAANE"]
[Sat Feb 28 00:02:22.357900 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:57633] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaHADoa650YPyxXVeRb3twAAAYM"]
[Sat Feb 28 00:02:23.192845 2026] [:error] [pid 62998:tid 63023] [client 20.220.8.221:25361] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aaHAD1QeueXZDUmoLomaewAAARU"]
[Sat Feb 28 00:02:23.612742 2026] [:error] [pid 62998:tid 63012] [client 20.220.8.221:57659] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aaHAD1QeueXZDUmoLomafQAAAQo"]
[Sat Feb 28 00:02:24.078991 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:25128] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aaHAEPnSUDZue59Px9uHeAAAAVU"]
[Sat Feb 28 00:02:24.519045 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:61548] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/radio.php"] [unique_id "aaHAEPnSUDZue59Px9uHewAAAUE"]
[Sat Feb 28 00:02:25.071268 2026] [:error] [pid 54103:tid 54180] [client 20.220.8.221:60254] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaHAEevG4MPCmE0B2sDaEwAAAMk"]
[Sat Feb 28 00:02:25.598730 2026] [:error] [pid 54231:tid 54258] [client 20.220.8.221:57640] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaHAEeTvb5AeyJCdY7BUvQAAAFg"]
[Sat Feb 28 00:02:26.376843 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:25373] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaHAEvnSUDZue59Px9uHhgAAAUc"]
[Sat Feb 28 00:02:26.927883 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:65135] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaHAEoa650YPyxXVeRb3wwAAAYU"]
[Sat Feb 28 00:02:27.645482 2026] [:error] [pid 56075:tid 56090] [client 20.220.8.221:25397] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aaHAE8KBhrfI6KNv9RiI7QAAAAw"]
[Sat Feb 28 00:02:28.321965 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:25139] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aaHAFMKBhrfI6KNv9RiI8QAAABg"]
[Sat Feb 28 00:02:30.159288 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:65130] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aaHAFoa650YPyxXVeRb3zgAAAY8"]
[Sat Feb 28 00:02:31.346618 2026] [:error] [pid 62998:tid 63010] [client 20.220.8.221:57627] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filemanager/dialog.php"] [unique_id "aaHAF1QeueXZDUmoLomahgAAAQg"]
[Sat Feb 28 00:02:32.019531 2026] [:error] [pid 54103:tid 54178] [client 20.220.8.221:60224] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaHAGOvG4MPCmE0B2sDaFQAAAMc"]
[Sat Feb 28 00:02:32.463527 2026] [:error] [pid 54103:tid 54173] [client 20.220.8.221:25152] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaHAGOvG4MPCmE0B2sDaFwAAAMI"]
[Sat Feb 28 00:02:32.904985 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:65137] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaHAGMKBhrfI6KNv9RiJAQAAAAY"]
[Sat Feb 28 00:02:33.500917 2026] [:error] [pid 54231:tid 54249] [client 20.220.8.221:65095] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaHAGeTvb5AeyJCdY7BUxAAAAE8"]
[Sat Feb 28 00:02:33.997358 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:25116] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaHAGYa650YPyxXVeRb31AAAAYU"]
[Sat Feb 28 00:02:34.538992 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:24992] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aaHAGoa650YPyxXVeRb32wAAAYc"]
[Sat Feb 28 00:02:34.999191 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:62018] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aaHAGoa650YPyxXVeRb34wAAAY0"]
[Sat Feb 28 00:02:35.574142 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:57617] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aaHAG4a650YPyxXVeRb37QAAAYc"]
[Sat Feb 28 00:02:36.155216 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:62066] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "aaHAHIa650YPyxXVeRb38gAAAYY"]
[Sat Feb 28 00:02:36.888316 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:61556] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-signup.php"] [unique_id "aaHAHIa650YPyxXVeRb39gAAAZA"]
[Sat Feb 28 00:02:37.644284 2026] [:error] [pid 62998:tid 63014] [client 20.220.8.221:57613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Feb 28 00:02:38.027100 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:57613] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Sat Feb 28 00:02:38.235945 2026] [:error] [pid 62998:tid 63010] [client 20.220.8.221:57613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Feb 28 00:02:38.493738 2026] [:error] [pid 62998:tid 63016] [client 20.220.8.221:57613] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaHAHlQeueXZDUmoLomamgAAAQ4"]
[Sat Feb 28 00:02:39.410947 2026] [:error] [pid 54231:tid 54245] [client 20.220.8.221:24858] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aaHAH-Tvb5AeyJCdY7BU0gAAAEs"]
[Sat Feb 28 00:02:40.361332 2026] [:error] [pid 54231:tid 54249] [client 20.220.8.221:24981] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Feb 28 00:02:40.790724 2026] [:error] [pid 54231:tid 54240] [client 20.220.8.221:24981] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Sat Feb 28 00:02:41.001503 2026] [:error] [pid 54231:tid 54250] [client 20.220.8.221:24981] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sat Feb 28 00:02:41.490630 2026] [:error] [pid 54231:tid 54251] [client 20.220.8.221:24981] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaHAIeTvb5AeyJCdY7BU4gAAAFE"]
[Sat Feb 28 00:02:42.932703 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:60225] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaHAIoa650YPyxXVeRb4BAAAAZA"]
[Sat Feb 28 00:02:45.068687 2026] [:error] [pid 54103:tid 54184] [client 20.220.8.221:25113] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaHAJevG4MPCmE0B2sDaJwAAAM0"]
[Sat Feb 28 00:02:47.310092 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:25366] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aaHAJ1QeueXZDUmoLomaswAAAQI"]
[Sat Feb 28 00:02:48.461291 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:57643] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aaHAKFQeueXZDUmoLomaugAAAQM"]
[Sat Feb 28 00:02:50.184281 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:24969] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aaHAKoa650YPyxXVeRb4JgAAAYU"]
[Sat Feb 28 00:02:50.791501 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:25100] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/index.php"] [unique_id "aaHAKvnSUDZue59Px9uHqwAAAVc"]
[Sat Feb 28 00:02:51.550435 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:25396] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaHAK_nSUDZue59Px9uHswAAAUY"]
[Sat Feb 28 00:02:52.056051 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:24847] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaHALMKBhrfI6KNv9RiJHgAAABY"]
[Sat Feb 28 00:02:52.583492 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:62057] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaHALMKBhrfI6KNv9RiJJAAAAAE"]
[Sat Feb 28 00:02:53.225049 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:62048] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaHALcKBhrfI6KNv9RiJKAAAABc"]
[Sat Feb 28 00:02:54.053507 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:25204] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aaHALuTvb5AeyJCdY7BU9wAAAEw"]
[Sat Feb 28 00:02:54.520809 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:25352] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aaHALsKBhrfI6KNv9RiJLwAAAAU"]
[Sat Feb 28 00:02:55.005494 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:24973] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aaHAL4a650YPyxXVeRb4MQAAAYs"]
[Sat Feb 28 00:02:55.611001 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:25392] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/admin.php"] [unique_id "aaHAL4a650YPyxXVeRb4MwAAAZI"]
[Sat Feb 28 00:02:56.050092 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:65092] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aaHAMIa650YPyxXVeRb4NQAAAYM"]
[Sat Feb 28 00:02:56.554039 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:25190] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aaHAMIa650YPyxXVeRb4OwAAAYQ"]
[Sat Feb 28 00:02:56.973340 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:62024] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aaHAMIa650YPyxXVeRb4PgAAAY8"]
[Sat Feb 28 00:02:57.420338 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:62036] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aaHAMcKBhrfI6KNv9RiJUAAAABU"]
[Sat Feb 28 00:02:57.879387 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:65112] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aaHAMcKBhrfI6KNv9RiJXgAAAAA"]
[Sat Feb 28 00:02:58.442207 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:24841] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aaHAMsKBhrfI6KNv9RiJZAAAABI"]
[Sat Feb 28 00:02:58.952643 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:25115] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aaHAMvnSUDZue59Px9uHwAAAAUQ"]
[Sat Feb 28 00:02:59.441544 2026] [:error] [pid 49306:tid 49317] [client 20.220.8.221:61548] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/pki-validation/"] [unique_id "aaHAM_nSUDZue59Px9uHwQAAAUk"]
[Sat Feb 28 00:02:59.975751 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:61564] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaHAM4a650YPyxXVeRb4SAAAAZc"]
[Sat Feb 28 00:03:00.397323 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:62043] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaHANMKBhrfI6KNv9RiJcAAAAAA"]
[Sat Feb 28 00:03:00.822284 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:57625] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaHANIa650YPyxXVeRb4UAAAAZM"]
[Sat Feb 28 00:03:01.264741 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:61567] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaHANYa650YPyxXVeRb4VgAAAYk"]
[Sat Feb 28 00:03:01.778997 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:24882] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaHANcKBhrfI6KNv9RiJdgAAABg"]
[Sat Feb 28 00:03:02.328303 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:65116] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHANoa650YPyxXVeRb4XgAAAYo"]
[Sat Feb 28 00:03:02.832010 2026] [:error] [pid 54102:tid 54169] [client 20.220.8.221:65122] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHANni74D4fiYUm_GecgwAAAJg"]
[Sat Feb 28 00:03:03.302696 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:25008] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHAN8KBhrfI6KNv9RiJfQAAAAA"]
[Sat Feb 28 00:03:03.807163 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:57009] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHAN4a650YPyxXVeRb4YQAAAY8"]
[Sat Feb 28 00:03:04.264066 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:25378] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaHAOPnSUDZue59Px9uHxQAAAUo"]
[Sat Feb 28 00:03:04.775699 2026] [:error] [pid 49306:tid 49330] [client 20.220.8.221:25386] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaHAOPnSUDZue59Px9uHxgAAAVY"]
[Sat Feb 28 00:03:05.254295 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:25011] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaHAOevG4MPCmE0B2sDaQAAAANc"]
[Sat Feb 28 00:03:06.615739 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:25370] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css.php"] [unique_id "aaHAOsKBhrfI6KNv9RiJiwAAAA8"]
[Sat Feb 28 00:03:08.707369 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:25112] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaHAPOTvb5AeyJCdY7BVEAAAAFc"]
[Sat Feb 28 00:03:09.637996 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:25000] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaHAPfnSUDZue59Px9uH3gAAAUs"]
[Sat Feb 28 00:03:10.390561 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:25148] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaHAPlQeueXZDUmoLoma0gAAARg"]
[Sat Feb 28 00:03:11.172622 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:60227] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaHAP_nSUDZue59Px9uH6gAAAUI"]
[Sat Feb 28 00:03:11.651225 2026] [:error] [pid 62998:tid 63012] [client 20.220.8.221:25406] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aaHAP1QeueXZDUmoLoma0wAAAQo"]
[Sat Feb 28 00:03:12.242495 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:61561] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aaHAQPnSUDZue59Px9uH9wAAAU0"]
[Sat Feb 28 00:03:12.715832 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:25383] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aaHAQPnSUDZue59Px9uH_QAAAU4"]
[Sat Feb 28 00:03:13.205493 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:25345] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mah/function.php"] [unique_id "aaHAQfnSUDZue59Px9uICAAAAUg"]
[Sat Feb 28 00:03:13.722770 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:24877] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/profile.php"] [unique_id "aaHAQYa650YPyxXVeRb4cwAAAYw"]
[Sat Feb 28 00:03:14.293694 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:65141] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/profile.php"] [unique_id "aaHAQlQeueXZDUmoLoma1QAAAQM"]
[Sat Feb 28 00:03:14.792444 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:60232] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/profile.php"] [unique_id "aaHAQuTvb5AeyJCdY7BVEwAAAEM"]
[Sat Feb 28 00:03:15.314615 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:61555] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/profile.php"] [unique_id "aaHAQ_nSUDZue59Px9uIFQAAAVc"]
[Sat Feb 28 00:03:15.996278 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:57634] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/php-compat/index.php"] [unique_id "aaHAQ-Tvb5AeyJCdY7BVFgAAAFI"]
[Sat Feb 28 00:03:16.520763 2026] [:error] [pid 54102:tid 54160] [client 20.220.8.221:60238] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aaHARHi74D4fiYUm_GeclwAAAJA"]
[Sat Feb 28 00:03:17.017518 2026] [:error] [pid 49306:tid 49324] [client 20.220.8.221:60236] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aaHARfnSUDZue59Px9uIHgAAAVA"]
[Sat Feb 28 00:03:17.565058 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:24964] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aaHARYa650YPyxXVeRb4ewAAAZc"]
[Sat Feb 28 00:03:18.489858 2026] [:error] [pid 56075:tid 56091] [client 20.220.8.221:25023] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/shell20211028.php"] [unique_id "aaHARsKBhrfI6KNv9RiJpAAAAA0"]
[Sat Feb 28 00:03:19.151609 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:61553] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaHAR8KBhrfI6KNv9RiJqQAAAAs"]
[Sat Feb 28 00:03:19.782482 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:24833] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaHAR8KBhrfI6KNv9RiJrAAAAAQ"]
[Sat Feb 28 00:03:20.434304 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:25129] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaHASIa650YPyxXVeRb4hwAAAZA"]
[Sat Feb 28 00:03:21.202337 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:57644] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaHASeTvb5AeyJCdY7BVIAAAAFc"]
[Sat Feb 28 00:03:21.941963 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:25093] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaHASYa650YPyxXVeRb4lgAAAYY"]
[Sat Feb 28 00:03:22.492795 2026] [:error] [pid 54103:tid 54176] [client 20.220.8.221:57602] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaHASuvG4MPCmE0B2sDaWAAAAMU"]
[Sat Feb 28 00:03:23.027918 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:65117] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaHAS4a650YPyxXVeRb4mwAAAZI"]
[Sat Feb 28 00:03:24.020387 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:24837] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaHATIa650YPyxXVeRb4ogAAAYo"]
[Sat Feb 28 00:03:25.056082 2026] [:error] [pid 54231:tid 54234] [client 20.220.8.221:25368] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aaHATeTvb5AeyJCdY7BVLwAAAEA"]
[Sat Feb 28 00:03:25.605745 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:25089] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aaHATcKBhrfI6KNv9RiJwQAAAA8"]
[Sat Feb 28 00:03:26.146951 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:25402] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aaHATlQeueXZDUmoLoma5QAAARA"]
[Sat Feb 28 00:03:26.918452 2026] [:error] [pid 54103:tid 54190] [client 20.220.8.221:25021] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ava.php"] [unique_id "aaHATuvG4MPCmE0B2sDaXgAAANM"]
[Sat Feb 28 00:03:27.843892 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:65148] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aaHAT8KBhrfI6KNv9RiJzwAAABg"]
[Sat Feb 28 00:03:28.743211 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:65088] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaHAUOTvb5AeyJCdY7BVNwAAAEE"]
[Sat Feb 28 00:03:29.591192 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:25007] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaHAUYa650YPyxXVeRb4tAAAAYY"]
[Sat Feb 28 00:03:30.205831 2026] [:error] [pid 54103:tid 54184] [client 20.220.8.221:24853] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaHAUuvG4MPCmE0B2sDaYgAAAM0"]
[Sat Feb 28 00:03:30.975726 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:60256] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaHAUsKBhrfI6KNv9RiJ2wAAABY"]
[Sat Feb 28 00:03:31.488911 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:24769] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaHAU4a650YPyxXVeRb4wAAAAZY"]
[Sat Feb 28 00:03:32.215082 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:60243] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaHAVMKBhrfI6KNv9RiJ7AAAABI"]
[Sat Feb 28 00:03:32.813297 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:65106] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaHAVIa650YPyxXVeRb4wwAAAZg"]
[Sat Feb 28 00:03:33.602950 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:65149] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaHAVcKBhrfI6KNv9RiJ-QAAABU"]
[Sat Feb 28 00:03:34.274706 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:25186] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file2.php"] [unique_id "aaHAVoa650YPyxXVeRb4zAAAAYw"]
[Sat Feb 28 00:03:34.885807 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:57639] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/radio.php"] [unique_id "aaHAVoa650YPyxXVeRb40gAAAY8"]
[Sat Feb 28 00:03:35.869599 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:25118] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/radio.php"] [unique_id "aaHAV_nSUDZue59Px9uIbgAAAUo"]
[Sat Feb 28 00:03:46.542623 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:25098] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaHAYsKBhrfI6KNv9RiKBwAAABI"]
[Sat Feb 28 00:03:48.134327 2026] [:error] [pid 62998:tid 63015] [client 20.220.8.221:61549] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Sat Feb 28 00:03:48.959147 2026] [:error] [pid 62998:tid 63006] [client 20.220.8.221:61549] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Feb 28 00:03:49.598449 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:61549] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css.php"] [unique_id "aaHAZVQeueXZDUmoLombEAAAAQA"]
[Sat Feb 28 00:03:50.273046 2026] [:error] [pid 54102:tid 54150] [client 20.220.8.221:25357] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Feb 28 00:03:51.198511 2026] [:error] [pid 54102:tid 54159] [client 20.220.8.221:25357] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaHAZ3i74D4fiYUm_GecyQAAAI8"]
[Sat Feb 28 00:03:51.748601 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:57663] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaHAZ1QeueXZDUmoLombEwAAAQI"]
[Sat Feb 28 00:03:52.319064 2026] [:error] [pid 54102:tid 54164] [client 20.220.8.221:61509] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaHAaHi74D4fiYUm_GecywAAAJQ"]
[Sat Feb 28 00:03:52.900588 2026] [:error] [pid 54102:tid 54151] [client 20.220.8.221:24991] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaHAaHi74D4fiYUm_GeczQAAAIc"]
[Sat Feb 28 00:03:53.453762 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:25381] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaHAacKBhrfI6KNv9RiKFAAAAA4"]
[Sat Feb 28 00:03:54.281583 2026] [:error] [pid 54102:tid 54148] [client 20.220.8.221:25350] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aaHAani74D4fiYUm_Gec0AAAAIQ"]
[Sat Feb 28 00:03:54.863861 2026] [:error] [pid 54102:tid 54160] [client 20.220.8.221:62033] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aaHAani74D4fiYUm_Gec1QAAAJA"]
[Sat Feb 28 00:03:55.548731 2026] [:error] [pid 62998:tid 63015] [client 20.220.8.221:25192] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aaHAa1QeueXZDUmoLombHAAAAQ0"]
[Sat Feb 28 00:03:56.019656 2026] [:error] [pid 54101:tid 54130] [client 20.220.8.221:65132] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/chosen.php"] [unique_id "aaHAbFY5qgRktcYTGFtnGQAAAdY"]
[Sat Feb 28 00:03:56.686480 2026] [:error] [pid 54101:tid 54118] [client 20.220.8.221:25372] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaHAbFY5qgRktcYTGFtnHAAAAco"]
[Sat Feb 28 00:03:57.459514 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:60233] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aaHAbYa650YPyxXVeRb5BAAAAZc"]
[Sat Feb 28 00:03:57.993213 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:25107] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aaHAbevG4MPCmE0B2sDadgAAANc"]
[Sat Feb 28 00:03:58.520282 2026] [:error] [pid 62998:tid 63020] [client 20.220.8.221:25002] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aaHAblQeueXZDUmoLombHwAAARI"]
[Sat Feb 28 00:03:59.060892 2026] [:error] [pid 62998:tid 63012] [client 20.220.8.221:60272] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "aaHAb1QeueXZDUmoLombJQAAAQo"]
[Sat Feb 28 00:03:59.748553 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:65128] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaHAb4a650YPyxXVeRb5DgAAAYE"]
[Sat Feb 28 00:04:00.295603 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:25174] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaHAcMKBhrfI6KNv9RiKOgAAAA8"]
[Sat Feb 28 00:04:00.904524 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:57601] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaHAcMKBhrfI6KNv9RiKPQAAABI"]
[Sat Feb 28 00:04:01.563483 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:25398] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backup.php"] [unique_id "aaHAccKBhrfI6KNv9RiKRAAAAAo"]
[Sat Feb 28 00:04:02.925589 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:65100] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aaHAcsKBhrfI6KNv9RiKWgAAABU"]
[Sat Feb 28 00:04:03.753345 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:25215] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aaHAc8KBhrfI6KNv9RiKYQAAAAM"]
[Sat Feb 28 00:04:04.577683 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:25403] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aaHAdMKBhrfI6KNv9RiKbAAAAAU"]
[Sat Feb 28 00:04:05.206472 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:61535] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ds.php"] [unique_id "aaHAdcKBhrfI6KNv9RiKcwAAABE"]
[Sat Feb 28 00:04:06.260034 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:65090] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aaHAdsKBhrfI6KNv9RiKfQAAAAU"]
[Sat Feb 28 00:04:07.845579 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:60251] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aaHAd4a650YPyxXVeRb5HQAAAY4"]
[Sat Feb 28 00:04:08.793772 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:24770] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aaHAeIa650YPyxXVeRb5IgAAAYE"]
[Sat Feb 28 00:04:10.010927 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:25384] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cong.php"] [unique_id "aaHAesKBhrfI6KNv9RiKlgAAABE"]
[Sat Feb 28 00:04:10.782606 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:62079] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aaHAesKBhrfI6KNv9RiKnQAAABM"]
[Sat Feb 28 00:04:11.845496 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:62055] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aaHAe8KBhrfI6KNv9RiKowAAABE"]
[Sat Feb 28 00:04:12.774888 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:61512] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aaHAfMKBhrfI6KNv9RiKqQAAAAk"]
[Sat Feb 28 00:04:13.525189 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:25092] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "aaHAfYa650YPyxXVeRb5NQAAAYM"]
[Sat Feb 28 00:04:14.136890 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:24771] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aaHAfsKBhrfI6KNv9RiKrwAAABI"]
[Sat Feb 28 00:04:14.910206 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:61513] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aaHAfni74D4fiYUm_Gec5wAAAII"]
[Sat Feb 28 00:04:15.473378 2026] [:error] [pid 54102:tid 54168] [client 20.220.8.221:61524] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aaHAf3i74D4fiYUm_Gec6gAAAJc"]
[Sat Feb 28 00:04:16.093286 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:24994] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "aaHAgOvG4MPCmE0B2sDaiwAAANc"]
[Sat Feb 28 00:04:16.889884 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:61510] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aaHAgIa650YPyxXVeRb5RQAAAZQ"]
[Sat Feb 28 00:04:17.601463 2026] [:error] [pid 56075:tid 56091] [client 20.220.8.221:24851] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aaHAgcKBhrfI6KNv9RiKvQAAAA0"]
[Sat Feb 28 00:04:18.148274 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:65091] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aaHAglQeueXZDUmoLombMwAAAQI"]
[Sat Feb 28 00:04:19.260551 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:24862] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aaHAg4a650YPyxXVeRb5TgAAAYs"]
[Sat Feb 28 00:04:20.097517 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:25181] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaHAhIa650YPyxXVeRb5UwAAAYE"]
[Sat Feb 28 00:04:20.902899 2026] [:error] [pid 62998:tid 63021] [client 20.220.8.221:25130] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaHAhFQeueXZDUmoLombNgAAARM"]
[Sat Feb 28 00:04:21.777483 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:61960] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaHAhfnSUDZue59Px9uItgAAAU0"]
[Sat Feb 28 00:04:22.328024 2026] [:error] [pid 54101:tid 54114] [client 20.220.8.221:60252] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaHAhlY5qgRktcYTGFtnJwAAAcY"]
[Sat Feb 28 00:04:22.786531 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:25094] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaHAhsKBhrfI6KNv9RiKyQAAABI"]
[Sat Feb 28 00:04:23.251481 2026] [:error] [pid 62998:tid 63011] [client 20.220.8.221:24888] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaHAh1QeueXZDUmoLombPQAAAQk"]
[Sat Feb 28 00:04:23.722278 2026] [:error] [pid 54102:tid 54166] [client 20.220.8.221:24963] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaHAh3i74D4fiYUm_Gec7QAAAJY"]
[Sat Feb 28 00:04:24.186396 2026] [:error] [pid 62998:tid 63013] [client 20.220.8.221:25155] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaHAiFQeueXZDUmoLombQgAAAQs"]
[Sat Feb 28 00:04:24.677370 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:25126] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaHAiMKBhrfI6KNv9RiKzAAAAAE"]
[Sat Feb 28 00:04:25.453471 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:61525] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaHAiYa650YPyxXVeRb5ZgAAAYM"]
[Sat Feb 28 00:04:26.145747 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:25095] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaHAivnSUDZue59Px9uIxAAAAU8"]
[Sat Feb 28 00:04:26.822849 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:62062] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaHAivnSUDZue59Px9uIzQAAAVc"]
[Sat Feb 28 00:04:27.474343 2026] [:error] [pid 54101:tid 54127] [client 20.220.8.221:57604] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaHAi1Y5qgRktcYTGFtnLwAAAdM"]
[Sat Feb 28 00:04:28.568216 2026] [:error] [pid 54102:tid 54158] [client 20.220.8.221:25136] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaHAjHi74D4fiYUm_Gec8gAAAI4"]
[Sat Feb 28 00:04:29.363764 2026] [:error] [pid 54101:tid 54113] [client 20.220.8.221:25095] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaHAjVY5qgRktcYTGFtnMwAAAcU"]
[Sat Feb 28 00:04:29.962939 2026] [:error] [pid 62998:tid 63002] [client 20.220.8.221:25354] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaHAjVQeueXZDUmoLombSwAAAQE"]
[Sat Feb 28 00:04:30.409632 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:61534] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aaHAjoa650YPyxXVeRb5hAAAAYQ"]
[Sat Feb 28 00:04:30.934713 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:61557] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aaHAjoa650YPyxXVeRb5kQAAAZA"]
[Sat Feb 28 00:04:31.552047 2026] [:error] [pid 54101:tid 54130] [client 20.220.8.221:61506] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aaHAj1Y5qgRktcYTGFtnOgAAAdY"]
[Sat Feb 28 00:04:32.091804 2026] [:error] [pid 54101:tid 54122] [client 20.220.8.221:57645] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aaHAkFY5qgRktcYTGFtnPgAAAc4"]
[Sat Feb 28 00:04:32.722040 2026] [:error] [pid 54102:tid 54152] [client 20.220.8.221:65108] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaHAkHi74D4fiYUm_Gec9wAAAIg"]
[Sat Feb 28 00:04:33.149699 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:62077] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaHAkXi74D4fiYUm_Gec-QAAAII"]
[Sat Feb 28 00:04:33.612743 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:65098] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaHAkcKBhrfI6KNv9RiK0gAAAAU"]
[Sat Feb 28 00:04:34.140196 2026] [:error] [pid 54102:tid 54168] [client 20.220.8.221:25099] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "aaHAkni74D4fiYUm_Gec_AAAAJc"]
[Sat Feb 28 00:04:34.770875 2026] [:error] [pid 62998:tid 63013] [client 20.220.8.221:65127] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aaHAklQeueXZDUmoLombVgAAAQs"]
[Sat Feb 28 00:04:35.589625 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:60247] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aaHAk1QeueXZDUmoLombWAAAARg"]
[Sat Feb 28 00:04:36.477196 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:25138] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aaHAlPnSUDZue59Px9uI3gAAAU4"]
[Sat Feb 28 00:04:37.314954 2026] [:error] [pid 54101:tid 54126] [client 20.220.8.221:24779] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/FII.php"] [unique_id "aaHAlVY5qgRktcYTGFtnTAAAAdI"]
[Sat Feb 28 00:04:38.766789 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:24875] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aaHAlvnSUDZue59Px9uI4wAAAUQ"]
[Sat Feb 28 00:04:39.532550 2026] [:error] [pid 62998:tid 63008] [client 20.220.8.221:57619] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aaHAl1QeueXZDUmoLombXgAAAQY"]
[Sat Feb 28 00:04:40.573301 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:25171] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aaHAmIa650YPyxXVeRb5zAAAAZA"]
[Sat Feb 28 00:04:41.256009 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:61560] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kyami.php"] [unique_id "aaHAmYa650YPyxXVeRb51AAAAZU"]
[Sat Feb 28 00:04:41.831444 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:24843] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaHAmfnSUDZue59Px9uI6QAAAUE"]
[Sat Feb 28 00:04:42.281722 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:61519] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaHAmoa650YPyxXVeRb53AAAAYw"]
[Sat Feb 28 00:04:42.908691 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:24889] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaHAmsKBhrfI6KNv9RiK6AAAABg"]
[Sat Feb 28 00:04:43.515045 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:61565] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaHAm-vG4MPCmE0B2sDamAAAANc"]
[Sat Feb 28 00:04:44.452302 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:25158] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaHAnPnSUDZue59Px9uI7QAAAVc"]
[Sat Feb 28 00:04:45.048616 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:24784] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaHAncKBhrfI6KNv9RiLAgAAAAA"]
[Sat Feb 28 00:04:45.852464 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:24987] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaHAncKBhrfI6KNv9RiLCgAAABA"]
[Sat Feb 28 00:04:46.335277 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:24961] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaHAnoa650YPyxXVeRb5_gAAAYk"]
[Sat Feb 28 00:04:46.752381 2026] [:error] [pid 49306:tid 49326] [client 20.220.8.221:25367] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aaHAnvnSUDZue59Px9uI8AAAAVI"]
[Sat Feb 28 00:04:47.183592 2026] [:error] [pid 54231:tid 54244] [client 20.220.8.221:60277] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aaHAn-Tvb5AeyJCdY7BVbAAAAEo"]
[Sat Feb 28 00:04:47.645344 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:25348] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aaHAn_nSUDZue59Px9uI8gAAAUw"]
[Sat Feb 28 00:04:48.069762 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:65129] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aaHAoMKBhrfI6KNv9RiLGQAAABY"]
[Sat Feb 28 00:04:48.526167 2026] [:error] [pid 54231:tid 54248] [client 20.220.8.221:65101] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/file.php"] [unique_id "aaHAoOTvb5AeyJCdY7BVcgAAAE4"]
[Sat Feb 28 00:04:48.957705 2026] [:error] [pid 54231:tid 54247] [client 20.220.8.221:61508] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/file.php"] [unique_id "aaHAoOTvb5AeyJCdY7BVcwAAAE0"]
[Sat Feb 28 00:04:49.443225 2026] [:error] [pid 54231:tid 54234] [client 20.220.8.221:57635] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/file.php"] [unique_id "aaHAoeTvb5AeyJCdY7BVdAAAAEA"]
[Sat Feb 28 00:04:50.270132 2026] [:error] [pid 54103:tid 54176] [client 20.220.8.221:25173] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Feb 28 00:04:50.479152 2026] [:error] [pid 54103:tid 54183] [client 20.220.8.221:25173] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Feb 28 00:04:51.905155 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:25173] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sat Feb 28 00:04:52.177451 2026] [:error] [pid 54103:tid 54187] [client 20.220.8.221:25173] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Sat Feb 28 00:20:58.088639 2026] [:error] [pid 15240:tid 15254] [client 141.98.11.189:61675] [client 141.98.11.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.189, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaHEai1iKL_41Rk9A9NEuAAAAAw"], referer: https://www.google.com/search?q=wordpress
[Sat Feb 28 00:20:58.093892 2026] [:error] [pid 15240:tid 15254] [client 141.98.11.189:61675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/search?q=wordpress
[Sat Feb 28 00:20:58.647979 2026] [:error] [pid 15240:tid 15251] [client 141.98.11.189:62881] [client 141.98.11.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.189, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaHEai1iKL_41Rk9A9NEuQAAAAk"], referer: https://www.google.com/search?q=wordpress
[Sat Feb 28 00:20:58.652186 2026] [:error] [pid 15240:tid 15251] [client 141.98.11.189:62881] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/search?q=wordpress
[Sat Feb 28 00:21:49.562072 2026] [:error] [pid 15240:tid 15249] [client 146.190.160.27:63787] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaHEnS1iKL_41Rk9A9NFlwAAAAc"]
[Sat Feb 28 00:21:49.567357 2026] [:error] [pid 15240:tid 15249] [client 146.190.160.27:63787] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 00:21:53.113526 2026] [:error] [pid 15240:tid 15254] [client 146.190.160.27:63787] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaHEoS1iKL_41Rk9A9NFpwAAAAw"]
[Sat Feb 28 00:21:54.115433 2026] [:error] [pid 15098:tid 15130] [client 146.190.160.27:59116] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaHEoskFqny8dQQbmTkP7gAAAJg"]
[Sat Feb 28 00:21:54.590012 2026] [:error] [pid 15100:tid 15160] [client 146.190.160.27:60353] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHEokOEbzcINan_ctKiUAAAAEA"]
[Sat Feb 28 00:21:55.040909 2026] [:error] [pid 15099:tid 15140] [client 146.190.160.27:61391] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHEo-nvP2vtPjYDq_gdhQAAAMc"]
[Sat Feb 28 00:21:55.542235 2026] [:error] [pid 15100:tid 15169] [client 146.190.160.27:62483] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaHEo0OEbzcINan_ctKiVgAAAEk"]
[Sat Feb 28 00:21:56.027702 2026] [:error] [pid 15098:tid 15111] [client 146.190.160.27:63554] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHEpMkFqny8dQQbmTkP9QAAAIU"]
[Sat Feb 28 00:21:56.549253 2026] [:error] [pid 15098:tid 15116] [client 146.190.160.27:64878] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHEpMkFqny8dQQbmTkP-QAAAIo"]
[Sat Feb 28 00:21:57.061011 2026] [:error] [pid 15100:tid 15175] [client 146.190.160.27:49397] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHEpUOEbzcINan_ctKiYgAAAE8"]
[Sat Feb 28 00:22:00.334479 2026] [:error] [pid 15100:tid 15178] [client 146.190.160.27:51607] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHEqEOEbzcINan_ctKieAAAAFI"]
[Sat Feb 28 00:31:06.472787 2026] [:error] [pid 15100:tid 15183] [client 20.220.8.221:51199] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaHGykOEbzcINan_ctKpcgAAAFc"]
[Sat Feb 28 00:31:07.317317 2026] [:error] [pid 15100:tid 15177] [client 20.220.8.221:51178] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaHGy0OEbzcINan_ctKpfgAAAFE"]
[Sat Feb 28 00:31:08.147210 2026] [:error] [pid 15100:tid 15184] [client 20.220.8.221:51155] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaHGzEOEbzcINan_ctKpgwAAAFg"]
[Sat Feb 28 00:31:08.970647 2026] [:error] [pid 15240:tid 15259] [client 20.220.8.221:51148] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaHGzC1iKL_41Rk9A9NQxAAAABE"]
[Sat Feb 28 00:36:26.861680 2026] [:error] [pid 15240:tid 15247] [client 212.104.214.238:2992] [client 212.104.214.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.104.214.238, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaHICi1iKL_41Rk9A9NWmgAAAAU"]
[Sat Feb 28 00:36:26.867371 2026] [:error] [pid 15240:tid 15247] [client 212.104.214.238:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 01:12:04.860589 2026] [:error] [pid 38620:tid 38627] [client 43.135.172.89:42970] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaHQZAP6I7SRqrhh7Rr0qwAAAUU"]
[Sat Feb 28 01:30:30.526795 2026] [:error] [pid 38586:tid 38601] [client 43.159.152.184:54670] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaHUtr_i6nvKNhjFW7VKdgAAAQw"]
[Sat Feb 28 01:47:40.748554 2026] [:error] [pid 38586:tid 38608] [client 119.96.24.54:60480] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaHYvL_i6nvKNhjFW7VYoQAAARM"]
[Sat Feb 28 01:56:13.739491 2026] [:error] [pid 38586:tid 38599] [client 131.186.6.31:34530] [client 131.186.6.31] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=image/jpeg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaHavb_i6nvKNhjFW7VgEgAAAQo"]
[Sat Feb 28 03:00:34.727744 2026] [:error] [pid 15240:tid 15244] [client 146.190.160.27:54629] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaHp0i1iKL_41Rk9A9OqCQAAAAI"]
[Sat Feb 28 03:00:34.731476 2026] [:error] [pid 15240:tid 15244] [client 146.190.160.27:54629] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 03:00:37.902769 2026] [:error] [pid 15240:tid 15265] [client 146.190.160.27:54629] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHp1S1iKL_41Rk9A9OqIgAAABc"]
[Sat Feb 28 03:00:38.331831 2026] [:error] [pid 38586:tid 38599] [client 146.190.160.27:63994] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHp1r_i6nvKNhjFW7WLjQAAAQo"]
[Sat Feb 28 03:00:38.804992 2026] [:error] [pid 19669:tid 19675] [client 146.190.160.27:65165] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaHp1ky98E5mX0pQrMo8gwAAAYM"]
[Sat Feb 28 03:00:39.308772 2026] [:error] [pid 19669:tid 19680] [client 146.190.160.27:49839] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHp10y98E5mX0pQrMo8iAAAAYg"]
[Sat Feb 28 03:00:39.768394 2026] [:error] [pid 19669:tid 19681] [client 146.190.160.27:50990] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHp10y98E5mX0pQrMo8jAAAAYk"]
[Sat Feb 28 03:00:40.204334 2026] [:error] [pid 15100:tid 15170] [client 146.190.160.27:51884] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHp2EOEbzcINan_ctLqGQAAAEo"]
[Sat Feb 28 03:00:40.685561 2026] [:error] [pid 15100:tid 15180] [client 146.190.160.27:52804] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHp2EOEbzcINan_ctLqGgAAAFQ"]
[Sat Feb 28 03:11:00.872933 2026] [:error] [pid 19669:tid 19695] [client 91.79.192.143:8203] [client 91.79.192.143] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaHsREy98E5mX0pQrMpF1QAAAZc"]
[Sat Feb 28 03:11:01.247494 2026] [:error] [pid 19669:tid 19678] [client 91.79.192.143:8203] [client 91.79.192.143] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaHsRUy98E5mX0pQrMpF2AAAAYY"]
[Sat Feb 28 03:11:01.617099 2026] [:error] [pid 19669:tid 19693] [client 91.79.192.143:8203] [client 91.79.192.143] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaHsRUy98E5mX0pQrMpF2wAAAZU"]
[Sat Feb 28 04:11:09.307598 2026] [:error] [pid 39292:tid 39307] [client 40.115.138.121:9323] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Feb 28 04:11:09.422009 2026] [:error] [pid 39292:tid 39302] [client 40.115.138.121:9323] [client 40.115.138.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Cookie/cloud.php"] [unique_id "aaH6XaIAO5fN7BxyqcHghQAAAMg"]
[Sat Feb 28 04:11:10.267703 2026] [:error] [pid 39292:tid 39296] [client 40.115.138.121:17531] [client 40.115.138.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/functions.php"] [unique_id "aaH6XqIAO5fN7BxyqcHgjgAAAMI"]
[Sat Feb 28 04:11:10.889871 2026] [:error] [pid 39185:tid 39263] [client 40.115.138.121:12419] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Feb 28 04:11:11.143362 2026] [:error] [pid 39185:tid 39264] [client 40.115.138.121:12419] [client 40.115.138.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/flower.php"] [unique_id "aaH6XxVE-FfM89u7BQYHeQAAAJI"]
[Sat Feb 28 04:11:11.781883 2026] [:error] [pid 39292:tid 39314] [client 40.115.138.121:21706] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php
[Sat Feb 28 04:11:11.894938 2026] [:error] [pid 39292:tid 39318] [client 40.115.138.121:21706] [client 40.115.138.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/block-bindings.php"] [unique_id "aaH6X6IAO5fN7BxyqcHgngAAANg"]
[Sat Feb 28 04:11:12.387584 2026] [:error] [pid 39292:tid 39312] [client 40.115.138.121:9329] [client 40.115.138.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/root.php"] [unique_id "aaH6YKIAO5fN7BxyqcHgowAAANI"]
[Sat Feb 28 04:11:12.904238 2026] [:error] [pid 39185:tid 39246] [client 40.115.138.121:22037] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/xmrlpc.php
[Sat Feb 28 04:11:13.018234 2026] [:error] [pid 39185:tid 39269] [client 40.115.138.121:22037] [client 40.115.138.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aaH6YRVE-FfM89u7BQYHhgAAAJc"]
[Sat Feb 28 04:11:13.542926 2026] [:error] [pid 39292:tid 39305] [client 40.115.138.121:14169] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaH6YaIAO5fN7BxyqcHgqwAAAMs"]
[Sat Feb 28 04:11:14.004144 2026] [:error] [pid 39183:tid 39213] [client 40.115.138.121:6627] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaH6YhCf4HvhVePw3LY-wQAAABU"]
[Sat Feb 28 04:11:14.685813 2026] [:error] [pid 39292:tid 39311] [client 40.115.138.121:12460] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaH6YqIAO5fN7BxyqcHgsgAAANE"]
[Sat Feb 28 05:10:12.305107 2026] [:error] [pid 39184:tid 39243] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Feb 28 05:10:12.515311 2026] [:error] [pid 39184:tid 39225] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Feb 28 05:10:13.360290 2026] [:error] [pid 39184:tid 39236] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Feb 28 05:10:13.574214 2026] [:error] [pid 39184:tid 39235] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/lock6.php
[Sat Feb 28 05:10:13.783684 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Sat Feb 28 05:10:13.993538 2026] [:error] [pid 39184:tid 39237] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Sat Feb 28 05:10:14.202759 2026] [:error] [pid 39184:tid 39238] [client 20.63.83.113:42776] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Feb 28 05:10:14.410969 2026] [:error] [pid 39184:tid 39229] [client 20.63.83.113:42776] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aaIINltZF9Zd_U7easAggAAAAEo"]
[Sat Feb 28 05:10:14.824358 2026] [:error] [pid 22194:tid 22208] [client 20.63.83.113:36061] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aaIINn6mbajs3bzQGyvF2wAAAUw"]
[Sat Feb 28 05:10:15.264196 2026] [:error] [pid 22194:tid 22212] [client 20.63.83.113:24382] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aaIIN36mbajs3bzQGyvF3AAAAVA"]
[Sat Feb 28 05:10:15.684698 2026] [:error] [pid 39183:tid 39202] [client 20.63.83.113:36040] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "aaIINxCf4HvhVePw3LZXTgAAAAo"]
[Sat Feb 28 05:10:16.109237 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:24022] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaIIOKIAO5fN7BxyqcETygAAAM4"]
[Sat Feb 28 05:10:16.534126 2026] [:error] [pid 39292:tid 39303] [client 20.63.83.113:29595] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaIIOKIAO5fN7BxyqcETzgAAAMk"]
[Sat Feb 28 05:10:16.955656 2026] [:error] [pid 22194:tid 22199] [client 20.63.83.113:24052] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaIIOH6mbajs3bzQGyvF4QAAAUM"]
[Sat Feb 28 05:10:17.400987 2026] [:error] [pid 11791:tid 11817] [client 20.63.83.113:33801] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaIIOWuX5e1Q32gqxH1-xwAAARg"]
[Sat Feb 28 05:10:17.852192 2026] [:error] [pid 22194:tid 22219] [client 20.63.83.113:60960] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaIIOX6mbajs3bzQGyvF4gAAAVc"]
[Sat Feb 28 05:10:18.278570 2026] [:error] [pid 39185:tid 39258] [client 20.63.83.113:60936] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaIIOhVE-FfM89u7BQYtAwAAAIw"]
[Sat Feb 28 05:10:18.701018 2026] [:error] [pid 39292:tid 39297] [client 20.63.83.113:59047] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaIIOqIAO5fN7BxyqcET1AAAAMM"]
[Sat Feb 28 05:10:19.120841 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:59024] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaIIO6IAO5fN7BxyqcET1wAAAM4"]
[Sat Feb 28 05:10:19.550115 2026] [:error] [pid 11791:tid 11801] [client 20.63.83.113:29574] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaIIO2uX5e1Q32gqxH1-yQAAAQg"]
[Sat Feb 28 05:10:19.965339 2026] [:error] [pid 11791:tid 11805] [client 20.63.83.113:33798] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaIIO2uX5e1Q32gqxH1-ygAAAQw"]
[Sat Feb 28 05:10:20.390083 2026] [:error] [pid 39292:tid 39313] [client 20.63.83.113:24005] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaIIPKIAO5fN7BxyqcET3wAAANM"]
[Sat Feb 28 05:10:20.802111 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:42811] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-2019.php"] [unique_id "aaIIPKIAO5fN7BxyqcET4gAAANA"]
[Sat Feb 28 05:10:21.211230 2026] [:error] [pid 39292:tid 39297] [client 20.63.83.113:24348] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/plugins.php"] [unique_id "aaIIPaIAO5fN7BxyqcET5wAAAMM"]
[Sat Feb 28 05:10:21.630807 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:24356] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/plugins.php"] [unique_id "aaIIPaIAO5fN7BxyqcET6wAAAMA"]
[Sat Feb 28 05:10:22.071636 2026] [:error] [pid 11791:tid 11815] [client 20.63.83.113:42778] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/plugins.php"] [unique_id "aaIIPmuX5e1Q32gqxH1-zwAAARY"]
[Sat Feb 28 05:10:22.490981 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:42757] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/plugins.php"] [unique_id "aaIIPqIAO5fN7BxyqcET8gAAAMs"]
[Sat Feb 28 05:10:22.916190 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:24045] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaIIPqIAO5fN7BxyqcET9gAAAMI"]
[Sat Feb 28 05:10:23.327284 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:33811] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaIIP6IAO5fN7BxyqcET-wAAAME"]
[Sat Feb 28 05:10:23.739191 2026] [:error] [pid 39292:tid 39297] [client 20.63.83.113:59031] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaIIP6IAO5fN7BxyqcEUAgAAAMM"]
[Sat Feb 28 05:10:24.184340 2026] [:error] [pid 39292:tid 39314] [client 20.63.83.113:42782] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bs1.php"] [unique_id "aaIIQKIAO5fN7BxyqcEUBgAAANQ"]
[Sat Feb 28 05:10:24.608023 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:24006] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIIQKIAO5fN7BxyqcEUCgAAAMo"]
[Sat Feb 28 05:10:25.029211 2026] [:error] [pid 22194:tid 22208] [client 20.63.83.113:59016] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIIQX6mbajs3bzQGyvF6AAAAUw"]
[Sat Feb 28 05:10:25.450378 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:60938] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIIQaIAO5fN7BxyqcEUFQAAAMo"]
[Sat Feb 28 05:10:25.866658 2026] [:error] [pid 39292:tid 39313] [client 20.63.83.113:38951] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIIQaIAO5fN7BxyqcEUFwAAANM"]
[Sat Feb 28 05:10:26.279913 2026] [:error] [pid 22194:tid 22207] [client 20.63.83.113:38944] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaIIQn6mbajs3bzQGyvF7QAAAUs"]
[Sat Feb 28 05:10:26.705434 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.113:61226] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaIIQqIAO5fN7BxyqcEUGwAAAM0"]
[Sat Feb 28 05:10:27.114521 2026] [:error] [pid 39292:tid 39303] [client 20.63.83.113:24371] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaIIQ6IAO5fN7BxyqcEUHQAAAMk"]
[Sat Feb 28 05:10:27.533568 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:59063] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "aaIIQ6IAO5fN7BxyqcEUIAAAANA"]
[Sat Feb 28 05:10:27.953455 2026] [:error] [pid 39292:tid 39311] [client 20.63.83.113:24382] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/astab.php"] [unique_id "aaIIQ6IAO5fN7BxyqcEUIgAAANE"]
[Sat Feb 28 05:10:28.378581 2026] [:error] [pid 11791:tid 11802] [client 20.63.83.113:24051] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/astab.php"] [unique_id "aaIIRGuX5e1Q32gqxH1-3AAAAQk"]
[Sat Feb 28 05:10:28.806981 2026] [:error] [pid 11791:tid 11813] [client 20.63.83.113:60946] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/astab.php"] [unique_id "aaIIRGuX5e1Q32gqxH1-3QAAARQ"]
[Sat Feb 28 05:10:29.237898 2026] [:error] [pid 22194:tid 22217] [client 20.63.83.113:38957] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/astab.php"] [unique_id "aaIIRX6mbajs3bzQGyvF9wAAAVU"]
[Sat Feb 28 05:10:29.660105 2026] [:error] [pid 22194:tid 22203] [client 20.63.83.113:59042] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless1.php"] [unique_id "aaIIRX6mbajs3bzQGyvF-QAAAUc"]
[Sat Feb 28 05:10:30.084629 2026] [:error] [pid 39183:tid 39206] [client 20.63.83.113:46073] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless1.php"] [unique_id "aaIIRhCf4HvhVePw3LZXWwAAAA4"]
[Sat Feb 28 05:10:30.500289 2026] [:error] [pid 22194:tid 22220] [client 20.63.83.113:38913] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless1.php"] [unique_id "aaIIRn6mbajs3bzQGyvGBAAAAVg"]
[Sat Feb 28 05:10:30.916179 2026] [:error] [pid 39184:tid 39235] [client 20.63.83.113:61217] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless1.php"] [unique_id "aaIIRltZF9Zd_U7easAgkAAAAFA"]
[Sat Feb 28 05:10:31.326437 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:39404] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file11.php"] [unique_id "aaIIR1tZF9Zd_U7easAgkQAAAFU"]
[Sat Feb 28 05:10:31.741749 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:29618] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file11.php"] [unique_id "aaIIR6IAO5fN7BxyqcEUKAAAAMI"]
[Sat Feb 28 05:10:32.169850 2026] [:error] [pid 11791:tid 11793] [client 20.63.83.113:24004] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file11.php"] [unique_id "aaIISGuX5e1Q32gqxH1-6gAAAQA"]
[Sat Feb 28 05:10:32.586179 2026] [:error] [pid 22194:tid 22212] [client 20.63.83.113:60947] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file11.php"] [unique_id "aaIISH6mbajs3bzQGyvGFwAAAVA"]
[Sat Feb 28 05:10:33.003796 2026] [:error] [pid 11791:tid 11805] [client 20.63.83.113:42786] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file12.php"] [unique_id "aaIISWuX5e1Q32gqxH1-7QAAAQw"]
[Sat Feb 28 05:10:33.425400 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:60929] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file12.php"] [unique_id "aaIISX6mbajs3bzQGyvGJgAAAU0"]
[Sat Feb 28 05:10:33.857848 2026] [:error] [pid 22194:tid 22212] [client 20.63.83.113:38924] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file12.php"] [unique_id "aaIISX6mbajs3bzQGyvGKwAAAVA"]
[Sat Feb 28 05:10:34.268198 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:33403] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file12.php"] [unique_id "aaIISn6mbajs3bzQGyvGNAAAAU0"]
[Sat Feb 28 05:10:34.705787 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:59071] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file13.php"] [unique_id "aaIISqIAO5fN7BxyqcEUMAAAAMs"]
[Sat Feb 28 05:10:35.126949 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.113:39416] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file13.php"] [unique_id "aaIIS6IAO5fN7BxyqcEUMwAAAM0"]
[Sat Feb 28 05:10:35.576467 2026] [:error] [pid 11791:tid 11813] [client 20.63.83.113:11912] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file13.php"] [unique_id "aaIIS2uX5e1Q32gqxH1-7wAAARQ"]
[Sat Feb 28 05:10:36.006944 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:29582] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file13.php"] [unique_id "aaIITKIAO5fN7BxyqcEUOAAAAMA"]
[Sat Feb 28 05:10:36.457078 2026] [:error] [pid 39292:tid 39311] [client 20.63.83.113:33363] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file14.php"] [unique_id "aaIITKIAO5fN7BxyqcEUOwAAANE"]
[Sat Feb 28 05:10:36.880814 2026] [:error] [pid 22194:tid 22196] [client 20.63.83.113:46062] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file14.php"] [unique_id "aaIITH6mbajs3bzQGyvGPgAAAUA"]
[Sat Feb 28 05:10:37.317687 2026] [:error] [pid 39292:tid 39298] [client 20.63.83.113:33384] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file14.php"] [unique_id "aaIITaIAO5fN7BxyqcEUQQAAAMQ"]
[Sat Feb 28 05:10:37.753711 2026] [:error] [pid 22194:tid 22204] [client 20.63.83.113:39415] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file14.php"] [unique_id "aaIITX6mbajs3bzQGyvGQAAAAUg"]
[Sat Feb 28 05:10:38.171988 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:39391] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file15.php"] [unique_id "aaIITn6mbajs3bzQGyvGQwAAAU0"]
[Sat Feb 28 05:10:38.586542 2026] [:error] [pid 39184:tid 39228] [client 20.63.83.113:33821] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file15.php"] [unique_id "aaIITltZF9Zd_U7easAglAAAAEk"]
[Sat Feb 28 05:10:38.994686 2026] [:error] [pid 39183:tid 39193] [client 20.63.83.113:24366] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file15.php"] [unique_id "aaIIThCf4HvhVePw3LZXXwAAAAE"]
[Sat Feb 28 05:10:39.404183 2026] [:error] [pid 39183:tid 39210] [client 20.63.83.113:60974] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file15.php"] [unique_id "aaIITxCf4HvhVePw3LZXYQAAABI"]
[Sat Feb 28 05:10:39.818495 2026] [:error] [pid 39185:tid 39269] [client 20.63.83.113:60939] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file16.php"] [unique_id "aaIITxVE-FfM89u7BQYtEQAAAJc"]
[Sat Feb 28 05:10:40.237085 2026] [:error] [pid 11791:tid 11807] [client 20.63.83.113:39385] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file16.php"] [unique_id "aaIIUGuX5e1Q32gqxH1-9AAAAQ4"]
[Sat Feb 28 05:10:40.649689 2026] [:error] [pid 11791:tid 11796] [client 20.63.83.113:11923] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file16.php"] [unique_id "aaIIUGuX5e1Q32gqxH1-9wAAAQM"]
[Sat Feb 28 05:10:41.070464 2026] [:error] [pid 11791:tid 11809] [client 20.63.83.113:61203] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file16.php"] [unique_id "aaIIUWuX5e1Q32gqxH1--AAAARA"]
[Sat Feb 28 05:10:41.488197 2026] [:error] [pid 39185:tid 39263] [client 20.63.83.113:42753] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aaIIURVE-FfM89u7BQYtFAAAAJE"]
[Sat Feb 28 05:10:41.945091 2026] [:error] [pid 39292:tid 39314] [client 20.63.83.113:24362] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aaIIUaIAO5fN7BxyqcEUSQAAANQ"]
[Sat Feb 28 05:10:42.363310 2026] [:error] [pid 39184:tid 39224] [client 20.63.83.113:46056] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aaIIUltZF9Zd_U7easAgmwAAAEU"]
[Sat Feb 28 05:10:42.781683 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:29627] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file18.php"] [unique_id "aaIIUqIAO5fN7BxyqcEUTAAAAMs"]
[Sat Feb 28 05:10:43.194057 2026] [:error] [pid 39292:tid 39318] [client 20.63.83.113:24343] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file19.php"] [unique_id "aaIIU6IAO5fN7BxyqcEUTgAAANg"]
[Sat Feb 28 05:10:43.622082 2026] [:error] [pid 39292:tid 39302] [client 20.63.83.113:59017] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file19.php"] [unique_id "aaIIU6IAO5fN7BxyqcEUTwAAAMg"]
[Sat Feb 28 05:10:44.044745 2026] [:error] [pid 22194:tid 22199] [client 20.63.83.113:11717] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file19.php"] [unique_id "aaIIVH6mbajs3bzQGyvGUQAAAUM"]
[Sat Feb 28 05:10:44.454883 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:29605] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file19.php"] [unique_id "aaIIVKIAO5fN7BxyqcEUUwAAAMA"]
[Sat Feb 28 05:10:44.867877 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:33360] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aaIIVKIAO5fN7BxyqcEUVAAAAME"]
[Sat Feb 28 05:10:45.284984 2026] [:error] [pid 39183:tid 39195] [client 20.63.83.113:46030] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aaIIVRCf4HvhVePw3LZXYgAAAAM"]
[Sat Feb 28 05:10:45.706596 2026] [:error] [pid 39185:tid 39249] [client 20.63.83.113:29590] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aaIIVRVE-FfM89u7BQYtGwAAAIM"]
[Sat Feb 28 05:10:46.118191 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.113:29594] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file21.php"] [unique_id "aaIIVqIAO5fN7BxyqcEUWQAAAM0"]
[Sat Feb 28 05:10:46.527219 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:61212] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aaIIVqIAO5fN7BxyqcEUWwAAAM4"]
[Sat Feb 28 05:10:46.939672 2026] [:error] [pid 39292:tid 39316] [client 20.63.83.113:24037] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aaIIVqIAO5fN7BxyqcEUXwAAANY"]
[Sat Feb 28 05:10:47.360486 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:38928] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aaIIV6IAO5fN7BxyqcEUZAAAAMA"]
[Sat Feb 28 05:10:47.780956 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:24375] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file22.php"] [unique_id "aaIIV6IAO5fN7BxyqcEUZwAAANc"]
[Sat Feb 28 05:10:48.208254 2026] [:error] [pid 39292:tid 39303] [client 20.63.83.113:11733] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file23.php"] [unique_id "aaIIWKIAO5fN7BxyqcEUaAAAAMk"]
[Sat Feb 28 05:10:48.621122 2026] [:error] [pid 39292:tid 39312] [client 20.63.83.113:29631] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file23.php"] [unique_id "aaIIWKIAO5fN7BxyqcEUagAAANI"]
[Sat Feb 28 05:10:49.035000 2026] [:error] [pid 39292:tid 39314] [client 20.63.83.113:33391] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file23.php"] [unique_id "aaIIWaIAO5fN7BxyqcEUcQAAANQ"]
[Sat Feb 28 05:10:49.456895 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:33346] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file23.php"] [unique_id "aaIIWaIAO5fN7BxyqcEUdAAAAME"]
[Sat Feb 28 05:10:49.916374 2026] [:error] [pid 39292:tid 39301] [client 20.63.83.113:11755] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file24.php"] [unique_id "aaIIWaIAO5fN7BxyqcEUdwAAAMc"]
[Sat Feb 28 05:10:50.338938 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:12553] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file24.php"] [unique_id "aaIIWqIAO5fN7BxyqcEUegAAAM4"]
[Sat Feb 28 05:10:50.751339 2026] [:error] [pid 11791:tid 11801] [client 20.63.83.113:33347] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file24.php"] [unique_id "aaIIWmuX5e1Q32gqxH1-_QAAAQg"]
[Sat Feb 28 05:10:51.184494 2026] [:error] [pid 39184:tid 39230] [client 20.63.83.113:11768] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file24.php"] [unique_id "aaIIW1tZF9Zd_U7easAgrAAAAEs"]
[Sat Feb 28 05:10:51.598633 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:38926] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file25.php"] [unique_id "aaIIW1tZF9Zd_U7easAgrQAAAFU"]
[Sat Feb 28 05:10:52.025106 2026] [:error] [pid 39183:tid 39207] [client 20.63.83.113:61187] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file25.php"] [unique_id "aaIIXBCf4HvhVePw3LZXagAAAA8"]
[Sat Feb 28 05:10:52.454287 2026] [:error] [pid 11791:tid 11805] [client 20.63.83.113:39396] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file25.php"] [unique_id "aaIIXGuX5e1Q32gqxH1-_gAAAQw"]
[Sat Feb 28 05:10:52.870057 2026] [:error] [pid 39183:tid 39215] [client 20.63.83.113:24020] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file25.php"] [unique_id "aaIIXBCf4HvhVePw3LZXbgAAABc"]
[Sat Feb 28 05:10:53.280401 2026] [:error] [pid 11791:tid 11798] [client 20.63.83.113:11713] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file26.php"] [unique_id "aaIIXWuX5e1Q32gqxH1_AAAAAQU"]
[Sat Feb 28 05:10:53.695859 2026] [:error] [pid 39184:tid 39228] [client 20.63.83.113:24055] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file26.php"] [unique_id "aaIIXVtZF9Zd_U7easAgsQAAAEk"]
[Sat Feb 28 05:10:54.113183 2026] [:error] [pid 39292:tid 39301] [client 20.63.83.113:15828] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file26.php"] [unique_id "aaIIXqIAO5fN7BxyqcEUgwAAAMc"]
[Sat Feb 28 05:10:54.534143 2026] [:error] [pid 22194:tid 22216] [client 20.63.83.113:33821] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file26.php"] [unique_id "aaIIXn6mbajs3bzQGyvGXQAAAVQ"]
[Sat Feb 28 05:10:54.951971 2026] [:error] [pid 39292:tid 39306] [client 20.63.83.113:38931] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file27.php"] [unique_id "aaIIXqIAO5fN7BxyqcEUjQAAAMw"]
[Sat Feb 28 05:10:55.371998 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:11440] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file27.php"] [unique_id "aaIIX36mbajs3bzQGyvGYQAAAU0"]
[Sat Feb 28 05:10:55.828517 2026] [:error] [pid 11791:tid 11804] [client 20.63.83.113:11939] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file27.php"] [unique_id "aaIIX2uX5e1Q32gqxH1_BwAAAQs"]
[Sat Feb 28 05:10:56.248317 2026] [:error] [pid 11791:tid 11800] [client 20.63.83.113:38967] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file27.php"] [unique_id "aaIIYGuX5e1Q32gqxH1_CwAAAQc"]
[Sat Feb 28 05:10:56.669654 2026] [:error] [pid 22194:tid 22214] [client 20.63.83.113:60416] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file28.php"] [unique_id "aaIIYH6mbajs3bzQGyvGZQAAAVI"]
[Sat Feb 28 05:10:57.099826 2026] [:error] [pid 11791:tid 11808] [client 20.63.83.113:38935] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file28.php"] [unique_id "aaIIYWuX5e1Q32gqxH1_DgAAAQ8"]
[Sat Feb 28 05:10:57.519637 2026] [:error] [pid 11791:tid 11799] [client 20.63.83.113:15860] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file28.php"] [unique_id "aaIIYWuX5e1Q32gqxH1_EgAAAQY"]
[Sat Feb 28 05:10:57.965679 2026] [:error] [pid 11791:tid 11813] [client 20.63.83.113:15843] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file28.php"] [unique_id "aaIIYWuX5e1Q32gqxH1_FQAAARQ"]
[Sat Feb 28 05:10:58.384833 2026] [:error] [pid 22194:tid 22197] [client 20.63.83.113:33350] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file29.php"] [unique_id "aaIIYn6mbajs3bzQGyvGdwAAAUE"]
[Sat Feb 28 05:10:58.810152 2026] [:error] [pid 11791:tid 11794] [client 20.63.83.113:64220] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file29.php"] [unique_id "aaIIYmuX5e1Q32gqxH1_FgAAAQE"]
[Sat Feb 28 05:10:59.236984 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:13972] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file29.php"] [unique_id "aaIIY6IAO5fN7BxyqcEUlgAAAM4"]
[Sat Feb 28 05:10:59.665509 2026] [:error] [pid 39184:tid 39230] [client 20.63.83.113:24014] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file29.php"] [unique_id "aaIIY1tZF9Zd_U7easAgvAAAAEs"]
[Sat Feb 28 05:11:00.088072 2026] [:error] [pid 39185:tid 39263] [client 20.63.83.113:15807] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aaIIZBVE-FfM89u7BQYtMgAAAJE"]
[Sat Feb 28 05:11:00.507495 2026] [:error] [pid 22194:tid 22212] [client 20.63.83.113:15809] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aaIIZH6mbajs3bzQGyvGfQAAAVA"]
[Sat Feb 28 05:11:00.938763 2026] [:error] [pid 39183:tid 39200] [client 20.63.83.113:24034] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aaIIZBCf4HvhVePw3LZXdgAAAAg"]
[Sat Feb 28 05:11:01.373010 2026] [:error] [pid 22194:tid 22196] [client 20.63.83.113:15819] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file30.php"] [unique_id "aaIIZX6mbajs3bzQGyvGgAAAAUA"]
[Sat Feb 28 05:11:01.803012 2026] [:error] [pid 11791:tid 11801] [client 20.63.83.113:60470] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaIIZWuX5e1Q32gqxH1_HgAAAQg"]
[Sat Feb 28 05:11:02.219587 2026] [:error] [pid 11791:tid 11817] [client 20.63.83.113:14014] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaIIZmuX5e1Q32gqxH1_IQAAARg"]
[Sat Feb 28 05:11:02.641776 2026] [:error] [pid 39183:tid 39216] [client 20.63.83.113:25089] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaIIZhCf4HvhVePw3LZXeQAAABg"]
[Sat Feb 28 05:11:03.061822 2026] [:error] [pid 39183:tid 39197] [client 20.63.83.113:63613] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "aaIIZxCf4HvhVePw3LZXegAAAAU"]
[Sat Feb 28 05:11:03.507555 2026] [:error] [pid 11791:tid 11809] [client 20.63.83.113:11916] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsa.php"] [unique_id "aaIIZ2uX5e1Q32gqxH1_IgAAARA"]
[Sat Feb 28 05:11:03.931127 2026] [:error] [pid 11791:tid 11807] [client 20.63.83.113:15816] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsa.php"] [unique_id "aaIIZ2uX5e1Q32gqxH1_JgAAAQ4"]
[Sat Feb 28 05:11:04.348951 2026] [:error] [pid 11791:tid 11796] [client 20.63.83.113:15785] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsa.php"] [unique_id "aaIIaGuX5e1Q32gqxH1_KQAAAQM"]
[Sat Feb 28 05:11:04.767743 2026] [:error] [pid 11791:tid 11793] [client 20.63.83.113:33377] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsa.php"] [unique_id "aaIIaGuX5e1Q32gqxH1_LQAAAQA"]
[Sat Feb 28 05:11:05.183626 2026] [:error] [pid 11791:tid 11798] [client 20.63.83.113:15767] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpcx.php"] [unique_id "aaIIaWuX5e1Q32gqxH1_LwAAAQU"]
[Sat Feb 28 05:11:05.595263 2026] [:error] [pid 22194:tid 22212] [client 20.63.83.113:25139] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpcx.php"] [unique_id "aaIIaX6mbajs3bzQGyvGjwAAAVA"]
[Sat Feb 28 05:11:06.022197 2026] [:error] [pid 22194:tid 22216] [client 20.63.83.113:11915] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpcx.php"] [unique_id "aaIIan6mbajs3bzQGyvGkwAAAVQ"]
[Sat Feb 28 05:11:06.466253 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:29720] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpcx.php"] [unique_id "aaIIaqIAO5fN7BxyqcEUpQAAANA"]
[Sat Feb 28 05:11:06.880426 2026] [:error] [pid 22194:tid 22220] [client 20.63.83.113:15835] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ot.php"] [unique_id "aaIIan6mbajs3bzQGyvGmgAAAVg"]
[Sat Feb 28 05:11:07.295593 2026] [:error] [pid 22194:tid 22215] [client 20.63.83.113:54961] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ot.php"] [unique_id "aaIIa36mbajs3bzQGyvGnQAAAVM"]
[Sat Feb 28 05:11:07.706090 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:11720] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ot.php"] [unique_id "aaIIa6IAO5fN7BxyqcEUqwAAAMo"]
[Sat Feb 28 05:11:08.121891 2026] [:error] [pid 39184:tid 39229] [client 20.63.83.113:64214] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ot.php"] [unique_id "aaIIbFtZF9Zd_U7easAgxAAAAEo"]
[Sat Feb 28 05:11:08.536360 2026] [:error] [pid 39292:tid 39300] [client 20.63.83.113:15761] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaIIbKIAO5fN7BxyqcEUsQAAAMY"]
[Sat Feb 28 05:11:08.960060 2026] [:error] [pid 39185:tid 39252] [client 20.63.83.113:11729] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaIIbBVE-FfM89u7BQYtOAAAAIY"]
[Sat Feb 28 05:11:09.381513 2026] [:error] [pid 39185:tid 39256] [client 20.63.83.113:13992] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaIIbRVE-FfM89u7BQYtOgAAAIo"]
[Sat Feb 28 05:11:09.796591 2026] [:error] [pid 39185:tid 39251] [client 20.63.83.113:14008] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaIIbRVE-FfM89u7BQYtPQAAAIU"]
[Sat Feb 28 05:11:10.214123 2026] [:error] [pid 39184:tid 39242] [client 20.63.83.113:64244] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "aaIIbltZF9Zd_U7easAgxwAAAFc"]
[Sat Feb 28 05:11:10.629118 2026] [:error] [pid 39185:tid 39262] [client 20.63.83.113:54974] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "aaIIbhVE-FfM89u7BQYtQwAAAJA"]
[Sat Feb 28 05:11:11.046178 2026] [:error] [pid 39183:tid 39210] [client 20.63.83.113:33391] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "aaIIbxCf4HvhVePw3LZXhAAAABI"]
[Sat Feb 28 05:11:11.462981 2026] [:error] [pid 11791:tid 11814] [client 20.63.83.113:60478] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "aaIIb2uX5e1Q32gqxH1_NgAAARU"]
[Sat Feb 28 05:11:11.892317 2026] [:error] [pid 22194:tid 22219] [client 20.63.83.113:15772] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aaIIb36mbajs3bzQGyvGowAAAVc"]
[Sat Feb 28 05:11:12.316711 2026] [:error] [pid 22194:tid 22214] [client 20.63.83.113:15790] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aaIIcH6mbajs3bzQGyvGpwAAAVI"]
[Sat Feb 28 05:11:12.735562 2026] [:error] [pid 22194:tid 22215] [client 20.63.83.113:15838] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aaIIcH6mbajs3bzQGyvGqwAAAVM"]
[Sat Feb 28 05:11:13.157114 2026] [:error] [pid 39185:tid 39252] [client 20.63.83.113:63584] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/403.php"] [unique_id "aaIIcRVE-FfM89u7BQYtSgAAAIY"]
[Sat Feb 28 05:11:13.571579 2026] [:error] [pid 22194:tid 22208] [client 20.63.83.113:29715] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaIIcX6mbajs3bzQGyvGtQAAAUw"]
[Sat Feb 28 05:11:13.998171 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:23527] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaIIcaIAO5fN7BxyqcEUvAAAAMo"]
[Sat Feb 28 05:11:14.434155 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat Feb 28 05:11:14.852588 2026] [:error] [pid 39292:tid 39313] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/mek.php
[Sat Feb 28 05:11:15.061689 2026] [:error] [pid 39292:tid 39297] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Sat Feb 28 05:11:15.273896 2026] [:error] [pid 39292:tid 39300] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/pass.php
[Sat Feb 28 05:11:15.484216 2026] [:error] [pid 39292:tid 39318] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Sat Feb 28 05:11:15.692000 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetx.php
[Sat Feb 28 05:11:15.910663 2026] [:error] [pid 39292:tid 39315] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Feb 28 05:11:16.118003 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/great.php
[Sat Feb 28 05:11:16.325208 2026] [:error] [pid 39292:tid 39303] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Feb 28 05:11:16.539518 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:41990] File does not exist: /usr/local/apache/htdocs/suspended-page/xax.php
[Sat Feb 28 05:11:16.744286 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:41990] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaIIdKIAO5fN7BxyqcEU0AAAAMo"]
[Sat Feb 28 05:11:17.170155 2026] [:error] [pid 39292:tid 39313] [client 20.63.83.113:63590] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaIIdaIAO5fN7BxyqcEU0gAAANM"]
[Sat Feb 28 05:11:17.591101 2026] [:error] [pid 11791:tid 11809] [client 20.63.83.113:64232] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaIIdWuX5e1Q32gqxH1_SQAAARA"]
[Sat Feb 28 05:11:18.002689 2026] [:error] [pid 22194:tid 22215] [client 20.63.83.113:15805] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaIIdn6mbajs3bzQGyvG0AAAAVM"]
[Sat Feb 28 05:11:18.419451 2026] [:error] [pid 39184:tid 39230] [client 20.63.83.113:29745] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlex.php"] [unique_id "aaIIdltZF9Zd_U7easAgzQAAAEs"]
[Sat Feb 28 05:11:18.841708 2026] [:error] [pid 39184:tid 39236] [client 20.63.83.113:11915] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlex.php"] [unique_id "aaIIdltZF9Zd_U7easAgzgAAAFE"]
[Sat Feb 28 05:11:19.253343 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:63270] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlex.php"] [unique_id "aaIId6IAO5fN7BxyqcEU0wAAANc"]
[Sat Feb 28 05:11:19.669525 2026] [:error] [pid 22194:tid 22214] [client 20.63.83.113:29717] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dlex.php"] [unique_id "aaIId36mbajs3bzQGyvG4gAAAVI"]
[Sat Feb 28 05:11:20.084477 2026] [:error] [pid 39292:tid 39318] [client 20.63.83.113:23532] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless2.php"] [unique_id "aaIIeKIAO5fN7BxyqcEU1AAAANg"]
[Sat Feb 28 05:11:20.495504 2026] [:error] [pid 22194:tid 22196] [client 20.63.83.113:11856] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless2.php"] [unique_id "aaIIeH6mbajs3bzQGyvG7QAAAUA"]
[Sat Feb 28 05:11:20.910933 2026] [:error] [pid 22194:tid 22207] [client 20.63.83.113:14007] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless2.php"] [unique_id "aaIIeH6mbajs3bzQGyvG8wAAAUs"]
[Sat Feb 28 05:11:21.318142 2026] [:error] [pid 22194:tid 22214] [client 20.63.83.113:13966] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless2.php"] [unique_id "aaIIeX6mbajs3bzQGyvG9gAAAVI"]
[Sat Feb 28 05:11:21.729841 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:42011] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless3.php"] [unique_id "aaIIeVtZF9Zd_U7easAg0QAAAFU"]
[Sat Feb 28 05:11:22.137187 2026] [:error] [pid 22194:tid 22211] [client 20.63.83.113:51506] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless3.php"] [unique_id "aaIIen6mbajs3bzQGyvG_QAAAU8"]
[Sat Feb 28 05:11:22.552992 2026] [:error] [pid 22194:tid 22212] [client 20.63.83.113:51498] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless3.php"] [unique_id "aaIIen6mbajs3bzQGyvHBAAAAVA"]
[Sat Feb 28 05:11:22.963047 2026] [:error] [pid 39185:tid 39262] [client 20.63.83.113:59724] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless3.php"] [unique_id "aaIIehVE-FfM89u7BQYtUgAAAJA"]
[Sat Feb 28 05:11:23.377185 2026] [:error] [pid 39292:tid 39301] [client 20.63.83.113:63564] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless4.php"] [unique_id "aaIIe6IAO5fN7BxyqcEU2gAAAMc"]
[Sat Feb 28 05:11:23.797349 2026] [:error] [pid 39185:tid 39265] [client 20.63.83.113:54945] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless4.php"] [unique_id "aaIIexVE-FfM89u7BQYtWAAAAJM"]
[Sat Feb 28 05:11:24.216109 2026] [:error] [pid 39292:tid 39299] [client 20.63.83.113:59760] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless4.php"] [unique_id "aaIIfKIAO5fN7BxyqcEU3AAAAMU"]
[Sat Feb 28 05:11:24.629466 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:23515] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless4.php"] [unique_id "aaIIfKIAO5fN7BxyqcEU4gAAAME"]
[Sat Feb 28 05:11:25.054577 2026] [:error] [pid 39292:tid 39297] [client 20.63.83.113:23107] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aaIIfaIAO5fN7BxyqcEU5AAAAMM"]
[Sat Feb 28 05:11:25.469996 2026] [:error] [pid 11791:tid 11796] [client 20.63.83.113:29696] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aaIIfWuX5e1Q32gqxH1_TwAAAQM"]
[Sat Feb 28 05:11:25.881889 2026] [:error] [pid 11791:tid 11793] [client 20.63.83.113:59723] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aaIIfWuX5e1Q32gqxH1_UAAAAQA"]
[Sat Feb 28 05:11:26.297450 2026] [:error] [pid 11791:tid 11799] [client 20.63.83.113:52346] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless5.php"] [unique_id "aaIIfmuX5e1Q32gqxH1_VAAAAQY"]
[Sat Feb 28 05:11:26.720779 2026] [:error] [pid 11791:tid 11817] [client 20.63.83.113:51462] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless6.php"] [unique_id "aaIIfmuX5e1Q32gqxH1_WAAAARg"]
[Sat Feb 28 05:11:27.140832 2026] [:error] [pid 22194:tid 22204] [client 20.63.83.113:64252] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless6.php"] [unique_id "aaIIf36mbajs3bzQGyvHIAAAAUg"]
[Sat Feb 28 05:11:27.567608 2026] [:error] [pid 22194:tid 22197] [client 20.63.83.113:11865] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless6.php"] [unique_id "aaIIf36mbajs3bzQGyvHJQAAAUE"]
[Sat Feb 28 05:11:27.981672 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:29730] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless6.php"] [unique_id "aaIIf6IAO5fN7BxyqcEU7QAAAMs"]
[Sat Feb 28 05:11:28.390510 2026] [:error] [pid 22194:tid 22207] [client 20.63.83.113:23158] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless7.php"] [unique_id "aaIIgH6mbajs3bzQGyvHLwAAAUs"]
[Sat Feb 28 05:11:28.800329 2026] [:error] [pid 22194:tid 22211] [client 20.63.83.113:11842] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless7.php"] [unique_id "aaIIgH6mbajs3bzQGyvHNwAAAU8"]
[Sat Feb 28 05:11:29.215817 2026] [:error] [pid 39292:tid 39312] [client 20.63.83.113:13967] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless7.php"] [unique_id "aaIIgaIAO5fN7BxyqcEU8gAAANI"]
[Sat Feb 28 05:11:29.640929 2026] [:error] [pid 11791:tid 11812] [client 20.63.83.113:51512] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless7.php"] [unique_id "aaIIgWuX5e1Q32gqxH1_ZAAAARM"]
[Sat Feb 28 05:11:30.055819 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:29712] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless8.php"] [unique_id "aaIIgqIAO5fN7BxyqcEU9wAAAM4"]
[Sat Feb 28 05:11:30.466262 2026] [:error] [pid 39184:tid 39230] [client 20.63.83.113:13988] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless8.php"] [unique_id "aaIIgltZF9Zd_U7easAg5AAAAEs"]
[Sat Feb 28 05:11:30.894015 2026] [:error] [pid 11791:tid 11806] [client 20.63.83.113:52299] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless8.php"] [unique_id "aaIIgmuX5e1Q32gqxH1_ZwAAAQ0"]
[Sat Feb 28 05:11:31.302237 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:47775] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless8.php"] [unique_id "aaIIg6IAO5fN7BxyqcEVAQAAAMI"]
[Sat Feb 28 05:11:31.716147 2026] [:error] [pid 39292:tid 39306] [client 20.63.83.113:13977] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless9.php"] [unique_id "aaIIg6IAO5fN7BxyqcEVCQAAAMw"]
[Sat Feb 28 05:11:32.153189 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:11853] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless9.php"] [unique_id "aaIIhKIAO5fN7BxyqcEVDAAAANc"]
[Sat Feb 28 05:11:32.562620 2026] [:error] [pid 39184:tid 39224] [client 20.63.83.113:23522] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless9.php"] [unique_id "aaIIhFtZF9Zd_U7easAg5gAAAEU"]
[Sat Feb 28 05:11:32.980404 2026] [:error] [pid 39185:tid 39269] [client 20.63.83.113:11857] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless9.php"] [unique_id "aaIIhBVE-FfM89u7BQYtYQAAAJc"]
[Sat Feb 28 05:11:33.401777 2026] [:error] [pid 22194:tid 22208] [client 20.63.83.113:23112] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law2.php"] [unique_id "aaIIhX6mbajs3bzQGyvHWAAAAUw"]
[Sat Feb 28 05:11:33.822688 2026] [:error] [pid 39183:tid 39194] [client 20.63.83.113:42029] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law2.php"] [unique_id "aaIIhRCf4HvhVePw3LZXkwAAAAI"]
[Sat Feb 28 05:11:34.237651 2026] [:error] [pid 39183:tid 39213] [client 20.63.83.113:51456] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law2.php"] [unique_id "aaIIhhCf4HvhVePw3LZXlQAAABU"]
[Sat Feb 28 05:11:34.654065 2026] [:error] [pid 22194:tid 22211] [client 20.63.83.113:51508] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law2.php"] [unique_id "aaIIhn6mbajs3bzQGyvHYAAAAU8"]
[Sat Feb 28 05:11:35.062510 2026] [:error] [pid 39184:tid 39220] [client 20.63.83.113:64197] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law3.php"] [unique_id "aaIIh1tZF9Zd_U7easAg7wAAAEE"]
[Sat Feb 28 05:11:35.477704 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:42012] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law3.php"] [unique_id "aaIIh36mbajs3bzQGyvHYgAAAU0"]
[Sat Feb 28 05:11:35.911885 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:23146] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law3.php"] [unique_id "aaIIh6IAO5fN7BxyqcEVGAAAAME"]
[Sat Feb 28 05:11:36.328632 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:63180] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law3.php"] [unique_id "aaIIiKIAO5fN7BxyqcEVGwAAAMI"]
[Sat Feb 28 05:11:36.742458 2026] [:error] [pid 11791:tid 11804] [client 20.63.83.113:47799] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law4.php"] [unique_id "aaIIiGuX5e1Q32gqxH1_bgAAAQs"]
[Sat Feb 28 05:11:37.159659 2026] [:error] [pid 39292:tid 39311] [client 20.63.83.113:13956] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law4.php"] [unique_id "aaIIiaIAO5fN7BxyqcEVIAAAANE"]
[Sat Feb 28 05:11:37.608172 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:13059] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law4.php"] [unique_id "aaIIiaIAO5fN7BxyqcEVJAAAANA"]
[Sat Feb 28 05:11:38.026941 2026] [:error] [pid 39292:tid 39318] [client 20.63.83.113:23167] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law4.php"] [unique_id "aaIIiqIAO5fN7BxyqcEVKwAAANg"]
[Sat Feb 28 05:11:38.441280 2026] [:error] [pid 39185:tid 39246] [client 20.63.83.113:47766] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law5.php"] [unique_id "aaIIihVE-FfM89u7BQYtbAAAAIA"]
[Sat Feb 28 05:11:38.860978 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:11671] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law5.php"] [unique_id "aaIIiqIAO5fN7BxyqcEVMwAAAMo"]
[Sat Feb 28 05:11:39.278072 2026] [:error] [pid 11791:tid 11799] [client 20.63.83.113:30387] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law5.php"] [unique_id "aaIIi2uX5e1Q32gqxH1_cgAAAQY"]
[Sat Feb 28 05:11:39.711669 2026] [:error] [pid 39292:tid 39312] [client 20.63.83.113:11666] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law5.php"] [unique_id "aaIIi6IAO5fN7BxyqcEVNwAAANI"]
[Sat Feb 28 05:11:40.122463 2026] [:error] [pid 22194:tid 22206] [client 20.63.83.113:23142] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law6.php"] [unique_id "aaIIjH6mbajs3bzQGyvHcAAAAUo"]
[Sat Feb 28 05:11:40.531262 2026] [:error] [pid 39292:tid 39295] [client 20.63.83.113:11655] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law6.php"] [unique_id "aaIIjKIAO5fN7BxyqcEVPQAAAME"]
[Sat Feb 28 05:11:40.943940 2026] [:error] [pid 39292:tid 39298] [client 20.63.83.113:63201] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law6.php"] [unique_id "aaIIjKIAO5fN7BxyqcEVPwAAAMQ"]
[Sat Feb 28 05:11:41.353559 2026] [:error] [pid 39292:tid 39297] [client 20.63.83.113:47761] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law6.php"] [unique_id "aaIIjaIAO5fN7BxyqcEVRQAAAMM"]
[Sat Feb 28 05:11:41.769729 2026] [:error] [pid 22194:tid 22207] [client 20.63.83.113:47800] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law7.php"] [unique_id "aaIIjX6mbajs3bzQGyvHdAAAAUs"]
[Sat Feb 28 05:11:42.188193 2026] [:error] [pid 11791:tid 11795] [client 20.63.83.113:4254] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law7.php"] [unique_id "aaIIjmuX5e1Q32gqxH1_eQAAAQI"]
[Sat Feb 28 05:11:42.606716 2026] [:error] [pid 39185:tid 39262] [client 20.63.83.113:13106] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law7.php"] [unique_id "aaIIjhVE-FfM89u7BQYtdgAAAJA"]
[Sat Feb 28 05:11:43.020763 2026] [:error] [pid 11791:tid 11809] [client 20.63.83.113:11894] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law7.php"] [unique_id "aaIIj2uX5e1Q32gqxH1_ewAAARA"]
[Sat Feb 28 05:11:43.438031 2026] [:error] [pid 22194:tid 22219] [client 20.63.83.113:11844] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law8.php"] [unique_id "aaIIj36mbajs3bzQGyvHeQAAAVc"]
[Sat Feb 28 05:11:43.863463 2026] [:error] [pid 39185:tid 39265] [client 20.63.83.113:34358] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law8.php"] [unique_id "aaIIjxVE-FfM89u7BQYtewAAAJM"]
[Sat Feb 28 05:11:44.290082 2026] [:error] [pid 22194:tid 22203] [client 20.63.83.113:34320] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law8.php"] [unique_id "aaIIkH6mbajs3bzQGyvHfQAAAUc"]
[Sat Feb 28 05:11:44.711545 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.113:11869] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law8.php"] [unique_id "aaIIkKIAO5fN7BxyqcEVVgAAAM0"]
[Sat Feb 28 05:11:45.128619 2026] [:error] [pid 39184:tid 39233] [client 20.63.83.113:34327] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law9.php"] [unique_id "aaIIkVtZF9Zd_U7easAg-QAAAE4"]
[Sat Feb 28 05:11:45.540771 2026] [:error] [pid 11791:tid 11803] [client 20.63.83.113:59714] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law9.php"] [unique_id "aaIIkWuX5e1Q32gqxH1_gAAAAQo"]
[Sat Feb 28 05:11:45.948750 2026] [:error] [pid 22194:tid 22198] [client 20.63.83.113:11665] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law9.php"] [unique_id "aaIIkX6mbajs3bzQGyvHgwAAAUI"]
[Sat Feb 28 05:11:46.357721 2026] [:error] [pid 39184:tid 39237] [client 20.63.83.113:30348] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law9.php"] [unique_id "aaIIkltZF9Zd_U7easAg-gAAAFI"]
[Sat Feb 28 05:11:46.776970 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:63224] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law10.php"] [unique_id "aaIIkqIAO5fN7BxyqcEVXwAAAMI"]
[Sat Feb 28 05:11:47.203287 2026] [:error] [pid 39185:tid 39253] [client 20.63.83.113:61494] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law10.php"] [unique_id "aaIIkxVE-FfM89u7BQYtgQAAAIc"]
[Sat Feb 28 05:11:47.625748 2026] [:error] [pid 22194:tid 22197] [client 20.63.83.113:34335] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law10.php"] [unique_id "aaIIk36mbajs3bzQGyvHiwAAAUE"]
[Sat Feb 28 05:11:48.086856 2026] [:error] [pid 39292:tid 39312] [client 20.63.83.113:30384] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/law10.php"] [unique_id "aaIIlKIAO5fN7BxyqcEVawAAANI"]
[Sat Feb 28 05:11:48.516250 2026] [:error] [pid 39184:tid 39228] [client 20.63.83.113:4228] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaIIlFtZF9Zd_U7easAg_gAAAEk"]
[Sat Feb 28 05:11:48.932385 2026] [:error] [pid 39292:tid 39313] [client 20.63.83.113:63168] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaIIlKIAO5fN7BxyqcEVcAAAANM"]
[Sat Feb 28 05:11:49.344243 2026] [:error] [pid 11791:tid 11806] [client 20.63.83.113:47756] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaIIlWuX5e1Q32gqxH1_hgAAAQ0"]
[Sat Feb 28 05:11:49.775243 2026] [:error] [pid 39183:tid 39198] [client 20.63.83.113:34366] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaIIlRCf4HvhVePw3LZXyQAAAAY"]
[Sat Feb 28 05:11:50.199475 2026] [:error] [pid 39184:tid 39221] [client 20.63.83.113:63212] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aaIIlltZF9Zd_U7easAhAQAAAEI"]
[Sat Feb 28 05:11:50.621684 2026] [:error] [pid 39183:tid 39197] [client 20.63.83.113:30377] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aaIIlhCf4HvhVePw3LZXzAAAAAU"]
[Sat Feb 28 05:11:51.041309 2026] [:error] [pid 39183:tid 39203] [client 20.63.83.113:38225] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aaIIlxCf4HvhVePw3LZXzQAAAAs"]
[Sat Feb 28 05:11:51.465907 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:13099] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp.php"] [unique_id "aaIIl6IAO5fN7BxyqcEVegAAAMA"]
[Sat Feb 28 05:11:51.880684 2026] [:error] [pid 39184:tid 39239] [client 20.63.83.113:61493] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaIIl1tZF9Zd_U7easAhCQAAAFQ"]
[Sat Feb 28 05:11:52.291412 2026] [:error] [pid 39184:tid 39238] [client 20.63.83.113:43152] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaIImFtZF9Zd_U7easAhCgAAAFM"]
[Sat Feb 28 05:11:52.709005 2026] [:error] [pid 39185:tid 39248] [client 20.63.83.113:14763] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaIImBVE-FfM89u7BQYtiQAAAII"]
[Sat Feb 28 05:11:53.121303 2026] [:error] [pid 22194:tid 22202] [client 20.63.83.113:11551] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaIImX6mbajs3bzQGyvHmQAAAUY"]
[Sat Feb 28 05:11:53.543487 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:38270] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaIImaIAO5fN7BxyqcEVgAAAAMo"]
[Sat Feb 28 05:11:53.971325 2026] [:error] [pid 39185:tid 39260] [client 20.63.83.113:30341] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaIImRVE-FfM89u7BQYtigAAAI4"]
[Sat Feb 28 05:11:54.393404 2026] [:error] [pid 39184:tid 39243] [client 20.63.83.113:13104] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaIImltZF9Zd_U7easAhDwAAAFg"]
[Sat Feb 28 05:11:54.806752 2026] [:error] [pid 39292:tid 39301] [client 20.63.83.113:13063] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaIImqIAO5fN7BxyqcEVgwAAAMc"]
[Sat Feb 28 05:11:55.238536 2026] [:error] [pid 39292:tid 39318] [client 20.63.83.113:57954] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaIIm6IAO5fN7BxyqcEVhwAAANg"]
[Sat Feb 28 05:11:55.682236 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.113:11993] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaIIm6IAO5fN7BxyqcEVjAAAAM0"]
[Sat Feb 28 05:11:56.139961 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:11538] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaIInKIAO5fN7BxyqcEVkwAAANA"]
[Sat Feb 28 05:11:56.564139 2026] [:error] [pid 39292:tid 39306] [client 20.63.83.113:43191] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaIInKIAO5fN7BxyqcEVlgAAAMw"]
[Sat Feb 28 05:11:57.010334 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:61468] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/avaa.php"] [unique_id "aaIInaIAO5fN7BxyqcEVmAAAAMA"]
[Sat Feb 28 05:11:57.447357 2026] [:error] [pid 39292:tid 39296] [client 20.63.83.113:4251] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/avaa.php"] [unique_id "aaIInaIAO5fN7BxyqcEVoAAAAMI"]
[Sat Feb 28 05:11:57.874094 2026] [:error] [pid 39292:tid 39298] [client 20.63.83.113:11459] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/avaa.php"] [unique_id "aaIInaIAO5fN7BxyqcEVoQAAAMQ"]
[Sat Feb 28 05:11:58.297270 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:11554] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/avaa.php"] [unique_id "aaIInqIAO5fN7BxyqcEVpAAAANc"]
[Sat Feb 28 05:11:58.717939 2026] [:error] [pid 39292:tid 39299] [client 20.63.83.113:11498] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaIInqIAO5fN7BxyqcEVqAAAAMU"]
[Sat Feb 28 05:11:59.140068 2026] [:error] [pid 39292:tid 39304] [client 20.63.83.113:14779] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaIIn6IAO5fN7BxyqcEVrAAAAMo"]
[Sat Feb 28 05:11:59.577733 2026] [:error] [pid 39292:tid 39313] [client 20.63.83.113:43167] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaIIn6IAO5fN7BxyqcEVtAAAANM"]
[Sat Feb 28 05:12:00.008718 2026] [:error] [pid 11791:tid 11796] [client 20.63.83.113:11467] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "aaIIoGuX5e1Q32gqxH1_kwAAAQM"]
[Sat Feb 28 05:12:00.443561 2026] [:error] [pid 22194:tid 22210] [client 20.63.83.113:57971] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aaIIoH6mbajs3bzQGyvHogAAAU4"]
[Sat Feb 28 05:12:00.856379 2026] [:error] [pid 22194:tid 22218] [client 20.63.83.113:55923] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aaIIoH6mbajs3bzQGyvHpAAAAVY"]
[Sat Feb 28 05:12:01.278134 2026] [:error] [pid 39184:tid 39231] [client 20.63.83.113:34367] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aaIIoVtZF9Zd_U7easAhFQAAAEw"]
[Sat Feb 28 05:12:01.714490 2026] [:error] [pid 39292:tid 39308] [client 20.63.83.113:57969] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/arig.php"] [unique_id "aaIIoaIAO5fN7BxyqcEVuQAAAM4"]
[Sat Feb 28 05:12:02.143971 2026] [:error] [pid 39292:tid 39306] [client 20.63.83.113:30363] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaIIoqIAO5fN7BxyqcEVuwAAAMw"]
[Sat Feb 28 05:12:02.560999 2026] [:error] [pid 39292:tid 39314] [client 20.63.83.113:58362] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaIIoqIAO5fN7BxyqcEVvwAAANQ"]
[Sat Feb 28 05:12:02.988685 2026] [:error] [pid 22194:tid 22214] [client 20.63.83.113:14773] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaIIon6mbajs3bzQGyvHrQAAAVI"]
[Sat Feb 28 05:12:03.414500 2026] [:error] [pid 39185:tid 39247] [client 20.63.83.113:61483] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inc.php"] [unique_id "aaIIoxVE-FfM89u7BQYtkQAAAIE"]
[Sat Feb 28 05:12:03.836488 2026] [:error] [pid 22194:tid 22196] [client 20.63.83.113:14739] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aaIIo36mbajs3bzQGyvHsAAAAUA"]
[Sat Feb 28 05:12:04.252959 2026] [:error] [pid 22194:tid 22209] [client 20.63.83.113:61489] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aaIIpH6mbajs3bzQGyvHsgAAAU0"]
[Sat Feb 28 05:12:04.672698 2026] [:error] [pid 11791:tid 11806] [client 20.63.83.113:58314] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aaIIpGuX5e1Q32gqxH1_ngAAAQ0"]
[Sat Feb 28 05:12:05.099020 2026] [:error] [pid 39185:tid 39255] [client 20.63.83.113:57973] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/13.php"] [unique_id "aaIIpRVE-FfM89u7BQYtkwAAAIk"]
[Sat Feb 28 05:12:05.535198 2026] [:error] [pid 39185:tid 39270] [client 20.63.83.113:14746] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aaIIpRVE-FfM89u7BQYtlQAAAJg"]
[Sat Feb 28 05:12:05.964605 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:12019] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aaIIpVtZF9Zd_U7easAhHQAAAFU"]
[Sat Feb 28 05:12:06.384845 2026] [:error] [pid 22194:tid 22218] [client 20.63.83.113:38252] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aaIIpn6mbajs3bzQGyvHtQAAAVY"]
[Sat Feb 28 05:12:06.807018 2026] [:error] [pid 22194:tid 22201] [client 20.63.83.113:63691] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/link.php"] [unique_id "aaIIpn6mbajs3bzQGyvHtgAAAUU"]
[Sat Feb 28 05:12:07.229631 2026] [:error] [pid 11791:tid 11799] [client 20.63.83.113:14757] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ynz.PhP7"] [unique_id "aaIIp2uX5e1Q32gqxH1_pwAAAQY"]
[Sat Feb 28 05:12:07.652172 2026] [:error] [pid 39185:tid 39248] [client 20.63.83.113:61450] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ynz.PhP7"] [unique_id "aaIIpxVE-FfM89u7BQYtmQAAAII"]
[Sat Feb 28 05:12:08.078708 2026] [:error] [pid 22194:tid 22197] [client 20.63.83.113:30383] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ynz.PhP7"] [unique_id "aaIIqH6mbajs3bzQGyvHvAAAAUE"]
[Sat Feb 28 05:12:08.497648 2026] [:error] [pid 22194:tid 22220] [client 20.63.83.113:14759] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ynz.PhP7"] [unique_id "aaIIqH6mbajs3bzQGyvHvQAAAVg"]
[Sat Feb 28 05:12:08.913648 2026] [:error] [pid 22194:tid 22206] [client 20.63.83.113:38239] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style2.php"] [unique_id "aaIIqH6mbajs3bzQGyvHxAAAAUo"]
[Sat Feb 28 05:12:09.330658 2026] [:error] [pid 22194:tid 22205] [client 20.63.83.113:43137] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style2.php"] [unique_id "aaIIqX6mbajs3bzQGyvHxQAAAUk"]
[Sat Feb 28 05:12:09.755173 2026] [:error] [pid 39184:tid 39233] [client 20.63.83.113:55916] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style2.php"] [unique_id "aaIIqVtZF9Zd_U7easAhIwAAAE4"]
[Sat Feb 28 05:12:10.189769 2026] [:error] [pid 39185:tid 39247] [client 20.63.83.113:34330] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style2.php"] [unique_id "aaIIqhVE-FfM89u7BQYtoQAAAIE"]
[Sat Feb 28 05:12:10.619281 2026] [:error] [pid 39185:tid 39250] [client 20.63.83.113:43190] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bugz.php"] [unique_id "aaIIqhVE-FfM89u7BQYtpAAAAIQ"]
[Sat Feb 28 05:12:11.057871 2026] [:error] [pid 39185:tid 39246] [client 20.63.83.113:55884] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bugz.php"] [unique_id "aaIIqxVE-FfM89u7BQYtpwAAAIA"]
[Sat Feb 28 05:12:11.493643 2026] [:error] [pid 11791:tid 11794] [client 20.63.83.113:58356] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bugz.php"] [unique_id "aaIIq2uX5e1Q32gqxH1_qQAAAQE"]
[Sat Feb 28 05:12:11.920820 2026] [:error] [pid 22194:tid 22210] [client 20.63.83.113:58315] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bugz.php"] [unique_id "aaIIq36mbajs3bzQGyvHywAAAU4"]
[Sat Feb 28 05:12:12.343778 2026] [:error] [pid 11791:tid 11806] [client 20.63.83.113:57925] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aaIIrGuX5e1Q32gqxH1_qwAAAQ0"]
[Sat Feb 28 05:12:12.767528 2026] [:error] [pid 11791:tid 11805] [client 20.63.83.113:14751] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aaIIrGuX5e1Q32gqxH1_rQAAAQw"]
[Sat Feb 28 05:12:13.189435 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.113:43174] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aaIIraIAO5fN7BxyqcEVzgAAANA"]
[Sat Feb 28 05:12:13.616302 2026] [:error] [pid 39183:tid 39203] [client 20.63.83.113:63696] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/first.php"] [unique_id "aaIIrRCf4HvhVePw3LZX2wAAAAs"]
[Sat Feb 28 05:12:14.032881 2026] [:error] [pid 11791:tid 11801] [client 20.63.83.113:30392] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/page.php"] [unique_id "aaIIrmuX5e1Q32gqxH1_rwAAAQg"]
[Sat Feb 28 05:12:14.457043 2026] [:error] [pid 39292:tid 39314] [client 20.63.83.113:12019] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/page.php"] [unique_id "aaIIrqIAO5fN7BxyqcEV0AAAANQ"]
[Sat Feb 28 05:12:14.879293 2026] [:error] [pid 39292:tid 39300] [client 20.63.83.113:34312] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/page.php"] [unique_id "aaIIrqIAO5fN7BxyqcEV1AAAAMY"]
[Sat Feb 28 05:12:15.307503 2026] [:error] [pid 39185:tid 39246] [client 20.63.83.113:30361] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/page.php"] [unique_id "aaIIrxVE-FfM89u7BQYtsgAAAIA"]
[Sat Feb 28 05:12:15.719033 2026] [:error] [pid 39183:tid 39196] [client 20.63.83.113:55452] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h.php"] [unique_id "aaIIrxCf4HvhVePw3LZX3gAAAAQ"]
[Sat Feb 28 05:12:16.140548 2026] [:error] [pid 39292:tid 39311] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sat Feb 28 05:12:16.356334 2026] [:error] [pid 39292:tid 39306] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/hi.php
[Sat Feb 28 05:12:16.572495 2026] [:error] [pid 39292:tid 39300] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Feb 28 05:12:17.001372 2026] [:error] [pid 39292:tid 39316] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Sat Feb 28 05:12:17.217060 2026] [:error] [pid 39292:tid 39303] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Feb 28 05:12:17.431176 2026] [:error] [pid 39292:tid 39306] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/BIBIL.php
[Sat Feb 28 05:12:17.647254 2026] [:error] [pid 39292:tid 39305] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sat Feb 28 05:12:17.864233 2026] [:error] [pid 39292:tid 39300] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/jvirglze.php
[Sat Feb 28 05:12:18.079866 2026] [:error] [pid 39292:tid 39294] [client 20.63.83.113:11990] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Sat Feb 28 05:33:16.460031 2026] [:error] [pid 22194:tid 22215] [client 156.253.14.247:62642] [client 156.253.14.247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pumpbooking.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaINnH6mbajs3bzQGyvXnQAAAVM"]
[Sat Feb 28 05:35:09.309361 2026] [:error] [pid 39292:tid 39294] [client 195.178.110.108:38668] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aaIODaIAO5fN7BxyqcEugAAAAMA"]
[Sat Feb 28 05:35:12.469459 2026] [:error] [pid 22194:tid 22201] [client 195.178.110.108:54574] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aaIOEH6mbajs3bzQGyvZaAAAAUU"]
[Sat Feb 28 05:35:13.943700 2026] [:error] [pid 39184:tid 39236] [client 195.178.110.108:52236] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat Feb 28 05:35:14.219964 2026] [:error] [pid 39184:tid 39231] [client 195.178.110.108:52236] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/portal/.env"] [unique_id "aaIOEltZF9Zd_U7easAoqAAAAEw"]
[Sat Feb 28 05:35:15.464260 2026] [:error] [pid 39185:tid 39266] [client 195.178.110.108:52240] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/env/.env"] [unique_id "aaIOExVE-FfM89u7BQY5ygAAAJQ"]
[Sat Feb 28 05:35:16.645581 2026] [:error] [pid 39185:tid 39252] [client 195.178.110.108:52250] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/.env"] [unique_id "aaIOFBVE-FfM89u7BQY5zAAAAIY"]
[Sat Feb 28 05:35:17.818591 2026] [:error] [pid 11791:tid 11817] [client 195.178.110.108:52252] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/.env"] [unique_id "aaIOFWuX5e1Q32gqxH2MaQAAARg"]
[Sat Feb 28 05:35:18.914592 2026] [:error] [pid 11791:tid 11804] [client 195.178.110.108:52266] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/dev/.env"] [unique_id "aaIOFmuX5e1Q32gqxH2MbgAAAQs"]
[Sat Feb 28 05:35:19.961654 2026] [:error] [pid 22194:tid 22217] [client 195.178.110.108:52282] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env"] [unique_id "aaIOF36mbajs3bzQGyvZfgAAAVU"]
[Sat Feb 28 05:35:21.005912 2026] [:error] [pid 11791:tid 11815] [client 195.178.110.108:52284] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env.local"] [unique_id "aaIOGWuX5e1Q32gqxH2MdQAAARY"]
[Sat Feb 28 05:35:22.046632 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:38416] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env.production"] [unique_id "aaIOGqIAO5fN7BxyqcEumQAAANE"]
[Sat Feb 28 05:35:23.047458 2026] [:error] [pid 39292:tid 39304] [client 195.178.110.108:38422] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/new/.env.staging"] [unique_id "aaIOG6IAO5fN7BxyqcEunAAAAMo"]
[Sat Feb 28 05:35:24.045504 2026] [:error] [pid 11791:tid 11812] [client 195.178.110.108:38434] File does not exist: /usr/local/apache/htdocs/suspended-page/_phpinfo.php
[Sat Feb 28 05:35:26.268176 2026] [:error] [pid 11791:tid 11806] [client 195.178.110.108:38434] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/awstats/.env"] [unique_id "aaIOHmuX5e1Q32gqxH2MhwAAAQ0"]
[Sat Feb 28 05:35:27.283431 2026] [:error] [pid 22194:tid 22198] [client 195.178.110.108:38446] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/conf/.env"] [unique_id "aaIOH36mbajs3bzQGyvZlwAAAUI"]
[Sat Feb 28 05:35:28.331079 2026] [:error] [pid 39292:tid 39300] [client 195.178.110.108:38460] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/cron/.env"] [unique_id "aaIOIKIAO5fN7BxyqcEuogAAAMY"]
[Sat Feb 28 05:35:29.351387 2026] [:error] [pid 11791:tid 11817] [client 195.178.110.108:38474] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/www/.env"] [unique_id "aaIOIWuX5e1Q32gqxH2MiQAAARg"]
[Sat Feb 28 05:35:31.900333 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:33214] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/docker/.env"] [unique_id "aaIOI2uX5e1Q32gqxH2MjgAAAQE"]
[Sat Feb 28 05:35:33.003102 2026] [:error] [pid 39292:tid 39303] [client 195.178.110.108:33228] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/docker/app/.env"] [unique_id "aaIOJaIAO5fN7BxyqcEurQAAAMk"]
[Sat Feb 28 05:35:34.045852 2026] [:error] [pid 39292:tid 39306] [client 195.178.110.108:33240] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/env.backup"] [unique_id "aaIOJqIAO5fN7BxyqcEusAAAAMw"]
[Sat Feb 28 05:35:35.090689 2026] [:error] [pid 39292:tid 39302] [client 195.178.110.108:33240] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOJ6IAO5fN7BxyqcEuuwAAAMg"]
[Sat Feb 28 05:35:36.187688 2026] [:error] [pid 39184:tid 39228] [client 195.178.110.108:33254] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOKFtZF9Zd_U7easAoyQAAAEk"]
[Sat Feb 28 05:35:37.230195 2026] [:error] [pid 39292:tid 39312] [client 195.178.110.108:33264] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOKaIAO5fN7BxyqcEuwQAAANI"]
[Sat Feb 28 05:35:38.281836 2026] [:error] [pid 39292:tid 39296] [client 195.178.110.108:33278] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOKqIAO5fN7BxyqcEuygAAAMI"]
[Sat Feb 28 05:35:39.348786 2026] [:error] [pid 11791:tid 11813] [client 195.178.110.108:33284] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOK2uX5e1Q32gqxH2MowAAARQ"]
[Sat Feb 28 05:35:40.421061 2026] [:error] [pid 11791:tid 11807] [client 195.178.110.108:33294] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOLGuX5e1Q32gqxH2MpQAAAQ4"]
[Sat Feb 28 05:35:41.475612 2026] [:error] [pid 39292:tid 39315] [client 195.178.110.108:42022] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOLaIAO5fN7BxyqcEu1QAAANU"]
[Sat Feb 28 05:35:42.525962 2026] [:error] [pid 11791:tid 11815] [client 195.178.110.108:42024] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOLmuX5e1Q32gqxH2MrgAAARY"]
[Sat Feb 28 05:35:43.635145 2026] [:error] [pid 22194:tid 22217] [client 195.178.110.108:42040] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOL36mbajs3bzQGyvZwgAAAVU"]
[Sat Feb 28 05:35:45.730739 2026] [:error] [pid 22194:tid 22219] [client 195.178.110.108:42058] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOMX6mbajs3bzQGyvZygAAAVc"]
[Sat Feb 28 05:35:46.852171 2026] [:error] [pid 22194:tid 22215] [client 195.178.110.108:42074] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOMn6mbajs3bzQGyvZ1gAAAVM"]
[Sat Feb 28 05:35:47.993557 2026] [:error] [pid 11791:tid 11813] [client 195.178.110.108:42084] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIOM2uX5e1Q32gqxH2MtAAAARQ"]
[Sat Feb 28 05:35:49.107247 2026] [:error] [pid 39292:tid 39298] [client 195.178.110.108:42086] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/laravel/info.php"] [unique_id "aaIONaIAO5fN7BxyqcEu3QAAAMQ"]
[Sat Feb 28 05:35:51.304842 2026] [:error] [pid 39184:tid 39219] [client 195.178.110.108:42116] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.vscode/.env"] [unique_id "aaION1tZF9Zd_U7easAo3wAAAEA"]
[Sat Feb 28 05:35:52.427062 2026] [:error] [pid 39183:tid 39207] [client 195.178.110.108:45742] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/js/.env"] [unique_id "aaIOOBCf4HvhVePw3LZeoAAAAA8"]
[Sat Feb 28 05:35:53.485502 2026] [:error] [pid 39185:tid 39268] [client 195.178.110.108:45758] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/laravel/.env"] [unique_id "aaIOORVE-FfM89u7BQY6BAAAAJY"]
[Sat Feb 28 05:35:54.558354 2026] [:error] [pid 39184:tid 39238] [client 195.178.110.108:45760] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/laravel/core/.env"] [unique_id "aaIOOltZF9Zd_U7easAo6gAAAFM"]
[Sat Feb 28 05:35:55.669049 2026] [:error] [pid 22194:tid 22212] [client 195.178.110.108:45770] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/mail/.env"] [unique_id "aaIOO36mbajs3bzQGyvZ6AAAAVA"]
[Sat Feb 28 05:35:56.764326 2026] [:error] [pid 22194:tid 22210] [client 195.178.110.108:45778] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/mailer/.env"] [unique_id "aaIOPH6mbajs3bzQGyvZ7gAAAU4"]
[Sat Feb 28 05:35:57.866620 2026] [:error] [pid 11791:tid 11793] [client 195.178.110.108:45786] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/nginx/.env"] [unique_id "aaIOPWuX5e1Q32gqxH2M1wAAAQA"]
[Sat Feb 28 05:35:59.069720 2026] [:error] [pid 39292:tid 39297] [client 195.178.110.108:45788] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/public/.env"] [unique_id "aaIOP6IAO5fN7BxyqcEvAgAAAMM"]
[Sat Feb 28 05:36:00.192625 2026] [:error] [pid 11791:tid 11812] [client 195.178.110.108:45800] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/site/.env"] [unique_id "aaIOQGuX5e1Q32gqxH2M5AAAARM"]
[Sat Feb 28 05:36:01.365294 2026] [:error] [pid 39184:tid 39239] [client 195.178.110.108:45814] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/xampp/.env"] [unique_id "aaIOQVtZF9Zd_U7easAo-AAAAFQ"]
[Sat Feb 28 05:36:02.513692 2026] [:error] [pid 39184:tid 39230] [client 195.178.110.108:41496] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/main/.env"] [unique_id "aaIOQltZF9Zd_U7easApAAAAAEs"]
[Sat Feb 28 05:36:03.616070 2026] [:error] [pid 39292:tid 39317] [client 195.178.110.108:41504] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/node_modules/.env"] [unique_id "aaIOQ6IAO5fN7BxyqcEvEwAAANc"]
[Sat Feb 28 05:36:04.749268 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:41510] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/kyc/.env"] [unique_id "aaIORKIAO5fN7BxyqcEvGwAAANE"]
[Sat Feb 28 05:36:05.879238 2026] [:error] [pid 22194:tid 22215] [client 195.178.110.108:41524] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/admin/.env"] [unique_id "aaIORX6mbajs3bzQGyvZ-AAAAVM"]
[Sat Feb 28 05:36:07.061944 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:41530] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/prod/.env"] [unique_id "aaIOR6IAO5fN7BxyqcEvKwAAANA"]
[Sat Feb 28 05:36:08.193927 2026] [:error] [pid 39183:tid 39209] [client 195.178.110.108:41534] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.bak"] [unique_id "aaIOSBCf4HvhVePw3LZerQAAABE"]
[Sat Feb 28 05:36:09.324409 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:41546] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOSWuX5e1Q32gqxH2NBAAAAQE"]
[Sat Feb 28 05:36:10.436181 2026] [:error] [pid 11791:tid 11799] [client 195.178.110.108:41560] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOSmuX5e1Q32gqxH2NDQAAAQY"]
[Sat Feb 28 05:36:12.265809 2026] [:error] [pid 39292:tid 39305] [client 195.178.110.108:49398] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOTKIAO5fN7BxyqcEvOAAAAMs"]
[Sat Feb 28 05:36:13.420372 2026] [:error] [pid 11791:tid 11810] [client 195.178.110.108:49404] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOTWuX5e1Q32gqxH2NFgAAARE"]
[Sat Feb 28 05:36:14.459166 2026] [:error] [pid 11791:tid 11807] [client 195.178.110.108:49408] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOTmuX5e1Q32gqxH2NGAAAAQ4"]
[Sat Feb 28 05:36:15.546160 2026] [:error] [pid 39185:tid 39256] [client 195.178.110.108:49410] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOTxVE-FfM89u7BQY6EwAAAIo"]
[Sat Feb 28 05:36:16.619893 2026] [:error] [pid 39292:tid 39308] [client 195.178.110.108:49416] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOUKIAO5fN7BxyqcEvSQAAAM4"]
[Sat Feb 28 05:36:17.689028 2026] [:error] [pid 22194:tid 22205] [client 195.178.110.108:49420] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOUX6mbajs3bzQGyvaCAAAAUk"]
[Sat Feb 28 05:36:19.656512 2026] [:error] [pid 11791:tid 11811] [client 195.178.110.108:49438] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOU2uX5e1Q32gqxH2NLwAAARI"]
[Sat Feb 28 05:36:20.739548 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:49454] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOVGuX5e1Q32gqxH2NOQAAAQE"]
[Sat Feb 28 05:36:21.780617 2026] [:error] [pid 39292:tid 39296] [client 195.178.110.108:38228] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOVaIAO5fN7BxyqcEvUgAAAMI"]
[Sat Feb 28 05:36:22.832565 2026] [:error] [pid 39292:tid 39317] [client 195.178.110.108:38240] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config/config.env"] [unique_id "aaIOVqIAO5fN7BxyqcEvXQAAANc"]
[Sat Feb 28 05:36:24.770033 2026] [:error] [pid 39183:tid 39211] [client 195.178.110.108:38256] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOWBCf4HvhVePw3LZe6wAAABM"]
[Sat Feb 28 05:36:25.910446 2026] [:error] [pid 22194:tid 22198] [client 195.178.110.108:38260] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOWX6mbajs3bzQGyvaGgAAAUI"]
[Sat Feb 28 05:36:27.018333 2026] [:error] [pid 11791:tid 11799] [client 195.178.110.108:38272] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOW2uX5e1Q32gqxH2NRgAAAQY"]
[Sat Feb 28 05:36:28.082986 2026] [:error] [pid 39292:tid 39305] [client 195.178.110.108:38274] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOXKIAO5fN7BxyqcEvgQAAAMs"]
[Sat Feb 28 05:36:30.028302 2026] [:error] [pid 39292:tid 39296] [client 195.178.110.108:38302] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOXqIAO5fN7BxyqcEvigAAAMI"]
[Sat Feb 28 05:36:31.110182 2026] [:error] [pid 39292:tid 39314] [client 195.178.110.108:38314] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOX6IAO5fN7BxyqcEvjAAAANQ"]
[Sat Feb 28 05:36:32.191455 2026] [:error] [pid 39292:tid 39315] [client 195.178.110.108:53398] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOYKIAO5fN7BxyqcEvkwAAANU"]
[Sat Feb 28 05:36:33.355706 2026] [:error] [pid 11791:tid 11810] [client 195.178.110.108:53412] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/shared/config.env"] [unique_id "aaIOYWuX5e1Q32gqxH2NSgAAARE"]
[Sat Feb 28 05:36:35.904581 2026] [:error] [pid 11791:tid 11807] [client 195.178.110.108:53436] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/website/.env"] [unique_id "aaIOY2uX5e1Q32gqxH2NUQAAAQ4"]
[Sat Feb 28 05:36:37.026881 2026] [:error] [pid 39292:tid 39301] [client 195.178.110.108:53446] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/development/.env"] [unique_id "aaIOZaIAO5fN7BxyqcEvqQAAAMc"]
[Sat Feb 28 05:36:38.166665 2026] [:error] [pid 22194:tid 22201] [client 195.178.110.108:53452] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/backend/.env"] [unique_id "aaIOZn6mbajs3bzQGyvaNQAAAUU"]
[Sat Feb 28 05:36:39.297306 2026] [:error] [pid 39292:tid 39296] [client 195.178.110.108:53464] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/shared/config/.env"] [unique_id "aaIOZ6IAO5fN7BxyqcEvtAAAAMI"]
[Sat Feb 28 05:36:40.375863 2026] [:error] [pid 39185:tid 39252] [client 195.178.110.108:53478] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/shared/.env"] [unique_id "aaIOaBVE-FfM89u7BQY6QQAAAIY"]
[Sat Feb 28 05:36:42.166666 2026] [:error] [pid 39184:tid 39220] [client 195.178.110.108:55472] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/node/.env_example"] [unique_id "aaIOaltZF9Zd_U7easApKgAAAEE"]
[Sat Feb 28 05:36:43.297742 2026] [:error] [pid 39183:tid 39199] [client 195.178.110.108:55484] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.production.local"] [unique_id "aaIOaxCf4HvhVePw3LZfUAAAAAc"]
[Sat Feb 28 05:36:44.442407 2026] [:error] [pid 39292:tid 39297] [client 195.178.110.108:55500] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "aaIObKIAO5fN7BxyqcEv0wAAAMM"]
[Sat Feb 28 05:36:45.581462 2026] [:error] [pid 39292:tid 39316] [client 195.178.110.108:55514] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.example"] [unique_id "aaIObaIAO5fN7BxyqcEv3gAAANY"]
[Sat Feb 28 05:36:46.703821 2026] [:error] [pid 22194:tid 22208] [client 195.178.110.108:55530] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.stage"] [unique_id "aaIObn6mbajs3bzQGyvaTQAAAUw"]
[Sat Feb 28 05:36:48.114240 2026] [:error] [pid 22194:tid 22201] [client 195.178.110.108:55536] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.old"] [unique_id "aaIOcH6mbajs3bzQGyvaVgAAAUU"]
[Sat Feb 28 05:36:49.187891 2026] [:error] [pid 39185:tid 39249] [client 195.178.110.108:55538] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env_sample"] [unique_id "aaIOcRVE-FfM89u7BQY6TAAAAIM"]
[Sat Feb 28 05:36:50.573684 2026] [:error] [pid 39183:tid 39209] [client 195.178.110.108:55548] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.prod"] [unique_id "aaIOchCf4HvhVePw3LZfeQAAABE"]
[Sat Feb 28 05:36:51.752937 2026] [:error] [pid 22194:tid 22219] [client 195.178.110.108:38590] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/crm/.env"] [unique_id "aaIOc36mbajs3bzQGyvaYwAAAVc"]
[Sat Feb 28 05:36:52.923355 2026] [:error] [pid 39184:tid 39219] [client 195.178.110.108:38604] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/local/.env"] [unique_id "aaIOdFtZF9Zd_U7easApLwAAAEA"]
[Sat Feb 28 05:36:54.103513 2026] [:error] [pid 11791:tid 11799] [client 195.178.110.108:38606] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/core/.env"] [unique_id "aaIOdmuX5e1Q32gqxH2NaAAAAQY"]
[Sat Feb 28 05:36:55.247522 2026] [:error] [pid 39185:tid 39257] [client 195.178.110.108:38628] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/apps/.env"] [unique_id "aaIOdxVE-FfM89u7BQY6VwAAAIs"]
[Sat Feb 28 05:36:56.328489 2026] [:error] [pid 39183:tid 39214] [client 195.178.110.108:38642] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/application/.env"] [unique_id "aaIOeBCf4HvhVePw3LZfkAAAABY"]
[Sat Feb 28 05:36:57.470102 2026] [:error] [pid 39292:tid 39299] [client 195.178.110.108:38652] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/web/.env"] [unique_id "aaIOeaIAO5fN7BxyqcEv-QAAAMU"]
[Sat Feb 28 05:36:58.897910 2026] [:error] [pid 39292:tid 39295] [client 195.178.110.108:38672] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php.bak"] [unique_id "aaIOeqIAO5fN7BxyqcEwCAAAAME"]
[Sat Feb 28 05:37:00.154877 2026] [:error] [pid 22194:tid 22219] [client 195.178.110.108:38682] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Feb 28 05:37:01.362209 2026] [:error] [pid 22194:tid 22202] [client 195.178.110.108:38682] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOfX6mbajs3bzQGyvafwAAAUY"]
[Sat Feb 28 05:37:02.633053 2026] [:error] [pid 39292:tid 39312] [client 195.178.110.108:51502] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOfqIAO5fN7BxyqcEwMgAAANI"]
[Sat Feb 28 05:37:03.866337 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:51506] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOf6IAO5fN7BxyqcEwRwAAANE"]
[Sat Feb 28 05:37:05.637683 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:51518] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOgaIAO5fN7BxyqcEwXQAAANE"]
[Sat Feb 28 05:37:07.939751 2026] [:error] [pid 39185:tid 39257] [client 195.178.110.108:51536] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOgxVE-FfM89u7BQY6awAAAIs"]
[Sat Feb 28 05:37:09.205737 2026] [:error] [pid 39185:tid 39266] [client 195.178.110.108:51550] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOhRVE-FfM89u7BQY6cAAAAJQ"]
[Sat Feb 28 05:37:10.390697 2026] [:error] [pid 39292:tid 39297] [client 195.178.110.108:51556] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOhqIAO5fN7BxyqcEwgwAAAMM"]
[Sat Feb 28 05:37:11.510856 2026] [:error] [pid 39185:tid 39253] [client 195.178.110.108:35512] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOhxVE-FfM89u7BQY6cgAAAIc"]
[Sat Feb 28 05:37:13.857796 2026] [:error] [pid 39184:tid 39238] [client 195.178.110.108:35518] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOiVtZF9Zd_U7easApOgAAAFM"]
[Sat Feb 28 05:37:15.026475 2026] [:error] [pid 11791:tid 11814] [client 195.178.110.108:35532] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOi2uX5e1Q32gqxH2NiAAAARU"]
[Sat Feb 28 05:37:16.174630 2026] [:error] [pid 39292:tid 39294] [client 195.178.110.108:35536] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/static/js/main.e85f7a37.js"] [unique_id "aaIOjKIAO5fN7BxyqcEwoQAAAMA"]
[Sat Feb 28 05:37:18.305241 2026] [:error] [pid 39184:tid 39226] [client 195.178.110.108:35556] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOjltZF9Zd_U7easApQgAAAEc"]
[Sat Feb 28 05:37:19.444121 2026] [:error] [pid 22194:tid 22204] [client 195.178.110.108:35558] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOj36mbajs3bzQGyvarwAAAUg"]
[Sat Feb 28 05:37:20.592359 2026] [:error] [pid 39292:tid 39298] [client 195.178.110.108:35574] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOkKIAO5fN7BxyqcEwsgAAAMQ"]
[Sat Feb 28 05:37:21.988835 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:39394] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOkaIAO5fN7BxyqcEwvAAAANA"]
[Sat Feb 28 05:37:23.515942 2026] [:error] [pid 39185:tid 39251] [client 195.178.110.108:39410] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOkxVE-FfM89u7BQY6iQAAAIU"]
[Sat Feb 28 05:37:24.752356 2026] [:error] [pid 22194:tid 22203] [client 195.178.110.108:39422] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOlH6mbajs3bzQGyvawQAAAUc"]
[Sat Feb 28 05:37:26.196496 2026] [:error] [pid 11791:tid 11804] [client 195.178.110.108:39430] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOlmuX5e1Q32gqxH2NrAAAAQs"]
[Sat Feb 28 05:37:28.802432 2026] [:error] [pid 39185:tid 39254] [client 195.178.110.108:39448] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOmBVE-FfM89u7BQY6kAAAAIg"]
[Sat Feb 28 05:37:30.013853 2026] [:error] [pid 22194:tid 22218] [client 195.178.110.108:39454] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOmn6mbajs3bzQGyvaygAAAVY"]
[Sat Feb 28 05:37:31.351707 2026] [:error] [pid 39185:tid 39248] [client 195.178.110.108:39456] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/server_info.php"] [unique_id "aaIOmxVE-FfM89u7BQY6lQAAAII"]
[Sat Feb 28 05:37:33.609880 2026] [:error] [pid 11791:tid 11795] [client 195.178.110.108:40812] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOnWuX5e1Q32gqxH2NyAAAAQI"]
[Sat Feb 28 05:37:34.901935 2026] [:error] [pid 11791:tid 11812] [client 195.178.110.108:40820] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOnmuX5e1Q32gqxH2NzAAAARM"]
[Sat Feb 28 05:37:36.187466 2026] [:error] [pid 39184:tid 39229] [client 195.178.110.108:40824] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOoFtZF9Zd_U7easApXgAAAEo"]
[Sat Feb 28 05:37:37.575424 2026] [:error] [pid 39183:tid 39211] [client 195.178.110.108:40830] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOoRCf4HvhVePw3LZfygAAABM"]
[Sat Feb 28 05:37:38.913627 2026] [:error] [pid 39185:tid 39261] [client 195.178.110.108:40836] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOohVE-FfM89u7BQY6pQAAAI8"]
[Sat Feb 28 05:37:40.385833 2026] [:error] [pid 39185:tid 39251] [client 195.178.110.108:40840] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOpBVE-FfM89u7BQY6qAAAAIU"]
[Sat Feb 28 05:37:41.650738 2026] [:error] [pid 39292:tid 39318] [client 195.178.110.108:35970] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOpaIAO5fN7BxyqcEw4gAAANg"]
[Sat Feb 28 05:37:44.020440 2026] [:error] [pid 22194:tid 22197] [client 195.178.110.108:35976] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOqH6mbajs3bzQGyva5AAAAUE"]
[Sat Feb 28 05:37:45.278517 2026] [:error] [pid 39292:tid 39294] [client 195.178.110.108:35990] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOqaIAO5fN7BxyqcEw6AAAAMA"]
[Sat Feb 28 05:37:46.642470 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:36004] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOqqIAO5fN7BxyqcEw8gAAANE"]
[Sat Feb 28 05:37:47.958896 2026] [:error] [pid 39183:tid 39192] [client 195.178.110.108:36018] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/server_info.php"] [unique_id "aaIOqxCf4HvhVePw3LZf2gAAAAA"]
[Sat Feb 28 05:37:49.254981 2026] [:error] [pid 39292:tid 39305] [client 195.178.110.108:36022] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOraIAO5fN7BxyqcEw9QAAAMs"]
[Sat Feb 28 05:37:50.476934 2026] [:error] [pid 39292:tid 39300] [client 195.178.110.108:36032] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOrqIAO5fN7BxyqcEw-gAAAMY"]
[Sat Feb 28 05:37:51.829430 2026] [:error] [pid 39292:tid 39299] [client 195.178.110.108:51502] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOr6IAO5fN7BxyqcEw_QAAAMU"]
[Sat Feb 28 05:37:52.977006 2026] [:error] [pid 39184:tid 39222] [client 195.178.110.108:51512] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOsFtZF9Zd_U7easApcgAAAEM"]
[Sat Feb 28 05:37:54.337245 2026] [:error] [pid 39185:tid 39246] [client 195.178.110.108:51528] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOshVE-FfM89u7BQY6sgAAAIA"]
[Sat Feb 28 05:37:55.748499 2026] [:error] [pid 22194:tid 22202] [client 195.178.110.108:51540] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOs36mbajs3bzQGyva-QAAAUY"]
[Sat Feb 28 05:37:57.149453 2026] [:error] [pid 22194:tid 22213] [client 195.178.110.108:51544] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOtX6mbajs3bzQGyva_gAAAVE"]
[Sat Feb 28 05:38:00.062012 2026] [:error] [pid 39292:tid 39315] [client 195.178.110.108:51550] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "aaIOuKIAO5fN7BxyqcExJwAAANU"]
[Sat Feb 28 05:38:01.528365 2026] [:error] [pid 22194:tid 22200] [client 195.178.110.108:51566] File does not exist: /usr/local/apache/htdocs/suspended-page/app_dev.php
[Sat Feb 28 05:38:01.910559 2026] [:error] [pid 22194:tid 22216] [client 195.178.110.108:51566] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat Feb 28 05:38:02.287758 2026] [authz_host:error] [pid 22194:tid 22202] [client 195.178.110.108:51566] AH01753: access check of '.example.com' to /server-info failed, reason: unable to get the remote host name
[Sat Feb 28 05:38:02.287837 2026] [authz_core:error] [pid 22194:tid 22202] [client 195.178.110.108:51566] AH01630: client denied by server configuration: /usr/local/apache/htdocs/suspended-page/server-info
[Sat Feb 28 05:38:02.672540 2026] [:error] [pid 22194:tid 22198] [client 195.178.110.108:51566] File does not exist: /usr/local/apache/htdocs/suspended-page/server-info.php
[Sat Feb 28 05:38:07.380616 2026] [:error] [pid 39292:tid 39307] [client 195.178.110.108:58974] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOv6IAO5fN7BxyqcExTAAAAM0"]
[Sat Feb 28 05:38:08.789283 2026] [:error] [pid 39185:tid 39266] [client 195.178.110.108:58986] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOwBVE-FfM89u7BQY6wgAAAJQ"]
[Sat Feb 28 05:38:10.118000 2026] [:error] [pid 39185:tid 39264] [client 195.178.110.108:59000] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOwhVE-FfM89u7BQY6wwAAAJI"]
[Sat Feb 28 05:38:11.533280 2026] [:error] [pid 39292:tid 39299] [client 195.178.110.108:59002] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOw6IAO5fN7BxyqcExWAAAAMU"]
[Sat Feb 28 05:38:13.323028 2026] [:error] [pid 39185:tid 39256] [client 195.178.110.108:48306] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOxRVE-FfM89u7BQY6yAAAAIo"]
[Sat Feb 28 05:38:15.399852 2026] [:error] [pid 22194:tid 22196] [client 195.178.110.108:48310] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOx36mbajs3bzQGyvbPwAAAUA"]
[Sat Feb 28 05:38:16.726512 2026] [:error] [pid 39184:tid 39238] [client 195.178.110.108:48324] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOyFtZF9Zd_U7easAphgAAAFM"]
[Sat Feb 28 05:38:18.379718 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:48340] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOyqIAO5fN7BxyqcExYwAAANA"]
[Sat Feb 28 05:38:19.754848 2026] [:error] [pid 39185:tid 39267] [client 195.178.110.108:48354] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOyxVE-FfM89u7BQY6zwAAAJU"]
[Sat Feb 28 05:38:21.182769 2026] [:error] [pid 39183:tid 39206] [client 195.178.110.108:48358] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/main.js"] [unique_id "aaIOzRCf4HvhVePw3LZf6QAAAA4"]
[Sat Feb 28 05:38:23.664366 2026] [:error] [pid 22194:tid 22201] [client 195.178.110.108:45778] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIOz36mbajs3bzQGyvbSAAAAUU"]
[Sat Feb 28 05:38:25.228054 2026] [:error] [pid 11791:tid 11798] [client 195.178.110.108:45792] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO0WuX5e1Q32gqxH2N8gAAAQU"]
[Sat Feb 28 05:38:26.509462 2026] [:error] [pid 39292:tid 39308] [client 195.178.110.108:45796] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO0qIAO5fN7BxyqcExfAAAAM4"]
[Sat Feb 28 05:38:29.635002 2026] [:error] [pid 11791:tid 11810] [client 195.178.110.108:45824] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO1WuX5e1Q32gqxH2N-AAAARE"]
[Sat Feb 28 05:38:31.203110 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:45838] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO12uX5e1Q32gqxH2N_QAAAQE"]
[Sat Feb 28 05:38:32.649606 2026] [:error] [pid 39292:tid 39302] [client 195.178.110.108:43792] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO2KIAO5fN7BxyqcExhwAAAMg"]
[Sat Feb 28 05:38:34.530568 2026] [:error] [pid 39292:tid 39306] [client 195.178.110.108:43814] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO2qIAO5fN7BxyqcExjAAAAMw"]
[Sat Feb 28 05:38:35.873820 2026] [:error] [pid 22194:tid 22198] [client 195.178.110.108:43830] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO236mbajs3bzQGyvbYAAAAUI"]
[Sat Feb 28 05:38:37.254594 2026] [:error] [pid 22194:tid 22197] [client 195.178.110.108:43846] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/constants.js"] [unique_id "aaIO3X6mbajs3bzQGyvbaQAAAUE"]
[Sat Feb 28 05:38:39.499347 2026] [:error] [pid 11791:tid 11798] [client 195.178.110.108:43856] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO32uX5e1Q32gqxH2OAwAAAQU"]
[Sat Feb 28 05:38:40.739110 2026] [:error] [pid 11791:tid 11802] [client 195.178.110.108:43862] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO4GuX5e1Q32gqxH2OBgAAAQk"]
[Sat Feb 28 05:38:41.948943 2026] [:error] [pid 11791:tid 11811] [client 195.178.110.108:35594] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO4WuX5e1Q32gqxH2OCAAAARI"]
[Sat Feb 28 05:38:43.362070 2026] [:error] [pid 11791:tid 11800] [client 195.178.110.108:35598] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO42uX5e1Q32gqxH2ODAAAAQc"]
[Sat Feb 28 05:38:44.709916 2026] [:error] [pid 22194:tid 22207] [client 195.178.110.108:35614] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO5H6mbajs3bzQGyvbkAAAAUs"]
[Sat Feb 28 05:38:45.933032 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:35624] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO5aIAO5fN7BxyqcExlQAAANA"]
[Sat Feb 28 05:38:47.229496 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:35634] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO52uX5e1Q32gqxH2OEgAAAQE"]
[Sat Feb 28 05:38:48.554493 2026] [:error] [pid 11791:tid 11813] [client 195.178.110.108:35646] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO6GuX5e1Q32gqxH2OGgAAARQ"]
[Sat Feb 28 05:38:49.701810 2026] [:error] [pid 39184:tid 39220] [client 195.178.110.108:35656] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO6VtZF9Zd_U7easApogAAAEE"]
[Sat Feb 28 05:38:50.809404 2026] [:error] [pid 11791:tid 11809] [client 195.178.110.108:35666] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO6muX5e1Q32gqxH2OIQAAARA"]
[Sat Feb 28 05:38:52.196984 2026] [:error] [pid 39292:tid 39318] [client 195.178.110.108:36520] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO7KIAO5fN7BxyqcExoAAAANg"]
[Sat Feb 28 05:38:53.428291 2026] [:error] [pid 39183:tid 39205] [client 195.178.110.108:36528] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/application.properties"] [unique_id "aaIO7RCf4HvhVePw3LZgDAAAAA0"]
[Sat Feb 28 05:38:54.736090 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:36558] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO7qIAO5fN7BxyqcExpQAAANA"]
[Sat Feb 28 05:38:55.889033 2026] [:error] [pid 39292:tid 39314] [client 195.178.110.108:36572] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO76IAO5fN7BxyqcExqgAAANQ"]
[Sat Feb 28 05:38:57.068922 2026] [:error] [pid 39183:tid 39208] [client 195.178.110.108:36588] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO8RCf4HvhVePw3LZgEgAAABA"]
[Sat Feb 28 05:38:58.312135 2026] [:error] [pid 39292:tid 39304] [client 195.178.110.108:36592] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO8qIAO5fN7BxyqcExugAAAMo"]
[Sat Feb 28 05:38:59.856895 2026] [:error] [pid 39292:tid 39305] [client 195.178.110.108:36606] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO86IAO5fN7BxyqcExwQAAAMs"]
[Sat Feb 28 05:39:00.980909 2026] [:error] [pid 39292:tid 39294] [client 195.178.110.108:36622] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO9KIAO5fN7BxyqcExxQAAAMA"]
[Sat Feb 28 05:39:02.170531 2026] [:error] [pid 39292:tid 39298] [client 195.178.110.108:53586] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO9qIAO5fN7BxyqcExywAAAMQ"]
[Sat Feb 28 05:39:03.316852 2026] [:error] [pid 39184:tid 39221] [client 195.178.110.108:53588] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO91tZF9Zd_U7easAptQAAAEI"]
[Sat Feb 28 05:39:05.308808 2026] [:error] [pid 11791:tid 11809] [client 195.178.110.108:53602] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/js/main.js"] [unique_id "aaIO-WuX5e1Q32gqxH2OPgAAARA"]
[Sat Feb 28 05:39:08.509097 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:53616] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/storage/logs/laravel.log"] [unique_id "aaIO_KIAO5fN7BxyqcEx7AAAANE"]
[Sat Feb 28 05:39:13.528179 2026] [:error] [pid 39292:tid 39313] [client 195.178.110.108:60332] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPAaIAO5fN7BxyqcEyFwAAANM"]
[Sat Feb 28 05:39:14.652964 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:60338] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPAmuX5e1Q32gqxH2OWgAAAQE"]
[Sat Feb 28 05:39:16.146038 2026] [:error] [pid 39184:tid 39236] [client 195.178.110.108:60348] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPBFtZF9Zd_U7easApygAAAFE"]
[Sat Feb 28 05:39:17.245110 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:60356] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPBaIAO5fN7BxyqcEyGwAAANE"]
[Sat Feb 28 05:39:18.366350 2026] [:error] [pid 39292:tid 39308] [client 195.178.110.108:60360] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPBqIAO5fN7BxyqcEyIAAAAM4"]
[Sat Feb 28 05:39:19.495111 2026] [:error] [pid 39292:tid 39313] [client 195.178.110.108:60362] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPB6IAO5fN7BxyqcEyKAAAANM"]
[Sat Feb 28 05:39:20.593113 2026] [:error] [pid 39184:tid 39238] [client 195.178.110.108:60368] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPCFtZF9Zd_U7easAp2AAAAFM"]
[Sat Feb 28 05:39:21.743167 2026] [:error] [pid 39185:tid 39255] [client 195.178.110.108:46116] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPCRVE-FfM89u7BQY7CgAAAIk"]
[Sat Feb 28 05:39:22.919741 2026] [:error] [pid 22194:tid 22219] [client 195.178.110.108:46130] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPCn6mbajs3bzQGyvbuQAAAVc"]
[Sat Feb 28 05:39:24.879680 2026] [:error] [pid 22194:tid 22208] [client 195.178.110.108:46148] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPDH6mbajs3bzQGyvbwAAAAUw"]
[Sat Feb 28 05:39:26.098407 2026] [:error] [pid 11791:tid 11802] [client 195.178.110.108:46154] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPDmuX5e1Q32gqxH2ObwAAAQk"]
[Sat Feb 28 05:39:27.187827 2026] [:error] [pid 39292:tid 39295] [client 195.178.110.108:46170] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPD6IAO5fN7BxyqcEyiAAAAME"]
[Sat Feb 28 05:39:28.266260 2026] [:error] [pid 39292:tid 39299] [client 195.178.110.108:46186] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/api/objects/codes.php.save"] [unique_id "aaIPEKIAO5fN7BxyqcEykwAAAMU"]
[Sat Feb 28 05:39:30.325259 2026] [:error] [pid 39292:tid 39306] [client 195.178.110.108:46208] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPEqIAO5fN7BxyqcEyrAAAAMw"]
[Sat Feb 28 05:39:31.460723 2026] [:error] [pid 39184:tid 39241] [client 195.178.110.108:46216] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPE1tZF9Zd_U7easAp5AAAAFY"]
[Sat Feb 28 05:39:32.578722 2026] [:error] [pid 39183:tid 39214] [client 195.178.110.108:52526] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPFBCf4HvhVePw3LZgPQAAABY"]
[Sat Feb 28 05:39:33.738061 2026] [:error] [pid 39292:tid 39318] [client 195.178.110.108:52534] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPFaIAO5fN7BxyqcEyywAAANg"]
[Sat Feb 28 05:39:35.866334 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:52550] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPF6IAO5fN7BxyqcEy3gAAANE"]
[Sat Feb 28 05:39:36.994831 2026] [:error] [pid 11791:tid 11811] [client 195.178.110.108:52566] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPGGuX5e1Q32gqxH2OfQAAARI"]
[Sat Feb 28 05:39:38.179912 2026] [:error] [pid 22194:tid 22197] [client 195.178.110.108:52570] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPGn6mbajs3bzQGyvb3QAAAUE"]
[Sat Feb 28 05:39:39.304870 2026] [:error] [pid 22194:tid 22204] [client 195.178.110.108:52582] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPG36mbajs3bzQGyvb4wAAAUg"]
[Sat Feb 28 05:39:41.402038 2026] [:error] [pid 22194:tid 22196] [client 195.178.110.108:52598] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPHX6mbajs3bzQGyvb9gAAAUA"]
[Sat Feb 28 05:39:42.491944 2026] [:error] [pid 39185:tid 39263] [client 195.178.110.108:53508] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPHhVE-FfM89u7BQY7KQAAAJE"]
[Sat Feb 28 05:39:43.587867 2026] [:error] [pid 39185:tid 39266] [client 195.178.110.108:53516] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPHxVE-FfM89u7BQY7LQAAAJQ"]
[Sat Feb 28 05:39:44.685767 2026] [:error] [pid 39185:tid 39269] [client 195.178.110.108:53524] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/config/config.js"] [unique_id "aaIPIBVE-FfM89u7BQY7LwAAAJc"]
[Sat Feb 28 05:39:46.596013 2026] [:error] [pid 22194:tid 22216] [client 195.178.110.108:53536] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPIn6mbajs3bzQGyvcDAAAAVQ"]
[Sat Feb 28 05:39:47.681683 2026] [:error] [pid 22194:tid 22209] [client 195.178.110.108:53548] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPI36mbajs3bzQGyvcGQAAAU0"]
[Sat Feb 28 05:39:48.815559 2026] [:error] [pid 39185:tid 39252] [client 195.178.110.108:53552] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPJBVE-FfM89u7BQY7NgAAAIY"]
[Sat Feb 28 05:39:49.873234 2026] [:error] [pid 39292:tid 39304] [client 195.178.110.108:53554] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPJaIAO5fN7BxyqcEzLQAAAMo"]
[Sat Feb 28 05:39:51.893660 2026] [:error] [pid 39292:tid 39316] [client 195.178.110.108:54708] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPJ6IAO5fN7BxyqcEzNQAAANY"]
[Sat Feb 28 05:39:52.973266 2026] [:error] [pid 39292:tid 39315] [client 195.178.110.108:54724] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPKKIAO5fN7BxyqcEzPQAAANU"]
[Sat Feb 28 05:39:54.038092 2026] [:error] [pid 39185:tid 39263] [client 195.178.110.108:54726] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPKhVE-FfM89u7BQY7PQAAAJE"]
[Sat Feb 28 05:39:55.211001 2026] [:error] [pid 22194:tid 22205] [client 195.178.110.108:54740] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPK36mbajs3bzQGyvcRwAAAUk"]
[Sat Feb 28 05:39:57.331899 2026] [:error] [pid 11791:tid 11794] [client 195.178.110.108:54768] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPLWuX5e1Q32gqxH2OnwAAAQE"]
[Sat Feb 28 05:39:58.443524 2026] [:error] [pid 39185:tid 39261] [client 195.178.110.108:54778] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPLhVE-FfM89u7BQY7RgAAAI8"]
[Sat Feb 28 05:39:59.491549 2026] [:error] [pid 39185:tid 39246] [client 195.178.110.108:54786] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPLxVE-FfM89u7BQY7SAAAAIA"]
[Sat Feb 28 05:40:00.508134 2026] [:error] [pid 11791:tid 11798] [client 195.178.110.108:54794] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apis/controllers/users.js"] [unique_id "aaIPMGuX5e1Q32gqxH2OpAAAAQU"]
[Sat Feb 28 05:40:02.442859 2026] [:error] [pid 22194:tid 22198] [client 195.178.110.108:40350] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPMn6mbajs3bzQGyvccQAAAUI"]
[Sat Feb 28 05:40:03.546514 2026] [:error] [pid 22194:tid 22219] [client 195.178.110.108:40356] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPM36mbajs3bzQGyvcewAAAVc"]
[Sat Feb 28 05:40:04.612246 2026] [:error] [pid 39185:tid 39251] [client 195.178.110.108:40362] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPNBVE-FfM89u7BQY7SgAAAIU"]
[Sat Feb 28 05:40:05.691100 2026] [:error] [pid 39184:tid 39236] [client 195.178.110.108:40364] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPNVtZF9Zd_U7easAqAQAAAFE"]
[Sat Feb 28 05:40:07.658144 2026] [:error] [pid 39184:tid 39242] [client 195.178.110.108:40376] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPN1tZF9Zd_U7easAqBAAAAFc"]
[Sat Feb 28 05:40:08.774547 2026] [:error] [pid 39184:tid 39229] [client 195.178.110.108:40384] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPOFtZF9Zd_U7easAqCQAAAEo"]
[Sat Feb 28 05:40:09.870734 2026] [:error] [pid 11791:tid 11803] [client 195.178.110.108:40390] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPOWuX5e1Q32gqxH2OwwAAAQo"]
[Sat Feb 28 05:40:10.948849 2026] [:error] [pid 39184:tid 39226] [client 195.178.110.108:40404] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.js"] [unique_id "aaIPOltZF9Zd_U7easAqFAAAAEc"]
[Sat Feb 28 05:40:17.086941 2026] [:error] [pid 39184:tid 39226] [client 195.178.110.108:42714] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPQVtZF9Zd_U7easAqKQAAAEc"]
[Sat Feb 28 05:40:19.359319 2026] [:error] [pid 22194:tid 22212] [client 195.178.110.108:42724] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPQ36mbajs3bzQGyvcwQAAAVA"]
[Sat Feb 28 05:40:20.513728 2026] [:error] [pid 11791:tid 11811] [client 195.178.110.108:42738] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPRGuX5e1Q32gqxH2O5QAAARI"]
[Sat Feb 28 05:40:21.643138 2026] [:error] [pid 22194:tid 22209] [client 195.178.110.108:57976] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPRX6mbajs3bzQGyvcywAAAU0"]
[Sat Feb 28 05:40:23.057607 2026] [:error] [pid 22194:tid 22208] [client 195.178.110.108:57986] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPR36mbajs3bzQGyvczgAAAUw"]
[Sat Feb 28 05:40:24.155908 2026] [:error] [pid 39292:tid 39317] [client 195.178.110.108:57988] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPSKIAO5fN7BxyqcEzagAAANc"]
[Sat Feb 28 05:40:25.329519 2026] [:error] [pid 22194:tid 22213] [client 195.178.110.108:58000] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPSX6mbajs3bzQGyvc0gAAAVE"]
[Sat Feb 28 05:40:26.490472 2026] [:error] [pid 39292:tid 39295] [client 195.178.110.108:58006] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPSqIAO5fN7BxyqcEzcgAAAME"]
[Sat Feb 28 05:40:28.614332 2026] [:error] [pid 39292:tid 39318] [client 195.178.110.108:58024] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPTKIAO5fN7BxyqcEzdgAAANg"]
[Sat Feb 28 05:40:29.797493 2026] [:error] [pid 39292:tid 39317] [client 195.178.110.108:58040] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPTaIAO5fN7BxyqcEzfwAAANc"]
[Sat Feb 28 05:40:30.946789 2026] [:error] [pid 22194:tid 22206] [client 195.178.110.108:58042] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPTn6mbajs3bzQGyvc6AAAAUo"]
[Sat Feb 28 05:40:32.175199 2026] [:error] [pid 39184:tid 39219] [client 195.178.110.108:47066] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/getcpuutil.php-bakworking"] [unique_id "aaIPUFtZF9Zd_U7easAqOAAAAEA"]
[Sat Feb 28 05:40:34.272518 2026] [:error] [pid 22194:tid 22218] [client 195.178.110.108:47082] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPUn6mbajs3bzQGyvc7wAAAVY"]
[Sat Feb 28 05:40:35.376043 2026] [:error] [pid 11791:tid 11796] [client 195.178.110.108:47092] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPU2uX5e1Q32gqxH2PCwAAAQM"]
[Sat Feb 28 05:40:36.472102 2026] [:error] [pid 22194:tid 22196] [client 195.178.110.108:47108] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPVH6mbajs3bzQGyvc8gAAAUA"]
[Sat Feb 28 05:40:37.706539 2026] [:error] [pid 39292:tid 39312] [client 195.178.110.108:47118] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPVaIAO5fN7BxyqcEzrAAAANI"]
[Sat Feb 28 05:40:39.687564 2026] [:error] [pid 39183:tid 39206] [client 195.178.110.108:47132] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPVxCf4HvhVePw3LZgmwAAAA4"]
[Sat Feb 28 05:40:40.788433 2026] [:error] [pid 39185:tid 39256] [client 195.178.110.108:47134] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPWBVE-FfM89u7BQY7nwAAAIo"]
[Sat Feb 28 05:40:41.968488 2026] [:error] [pid 22194:tid 22203] [client 195.178.110.108:46638] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPWX6mbajs3bzQGyvdAwAAAUc"]
[Sat Feb 28 05:40:43.075118 2026] [:error] [pid 39185:tid 39259] [client 195.178.110.108:46644] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPWxVE-FfM89u7BQY7ogAAAI0"]
[Sat Feb 28 05:40:45.110614 2026] [:error] [pid 11791:tid 11802] [client 195.178.110.108:46658] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPXWuX5e1Q32gqxH2PIQAAAQk"]
[Sat Feb 28 05:40:46.219915 2026] [:error] [pid 39292:tid 39298] [client 195.178.110.108:46668] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPXqIAO5fN7BxyqcEzxwAAAMQ"]
[Sat Feb 28 05:40:47.298745 2026] [:error] [pid 22194:tid 22198] [client 195.178.110.108:46682] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPX36mbajs3bzQGyvdKQAAAUI"]
[Sat Feb 28 05:40:48.412945 2026] [:error] [pid 39292:tid 39314] [client 195.178.110.108:46694] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper.js"] [unique_id "aaIPYKIAO5fN7BxyqcEz1wAAANQ"]
[Sat Feb 28 05:40:50.429554 2026] [:error] [pid 22194:tid 22211] [client 195.178.110.108:46720] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPYn6mbajs3bzQGyvdOQAAAU8"]
[Sat Feb 28 05:40:51.545896 2026] [:error] [pid 22194:tid 22215] [client 195.178.110.108:54346] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPY36mbajs3bzQGyvdRAAAAVM"]
[Sat Feb 28 05:40:52.646832 2026] [:error] [pid 11791:tid 11798] [client 195.178.110.108:54360] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPZGuX5e1Q32gqxH2PMwAAAQU"]
[Sat Feb 28 05:40:53.771945 2026] [:error] [pid 22194:tid 22201] [client 195.178.110.108:54362] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPZX6mbajs3bzQGyvdUQAAAUU"]
[Sat Feb 28 05:40:55.811569 2026] [:error] [pid 39292:tid 39295] [client 195.178.110.108:54386] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPZ6IAO5fN7BxyqcEz6wAAAME"]
[Sat Feb 28 05:40:56.882083 2026] [:error] [pid 39292:tid 39296] [client 195.178.110.108:54398] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPaKIAO5fN7BxyqcEz9QAAAMI"]
[Sat Feb 28 05:40:57.974189 2026] [:error] [pid 39292:tid 39295] [client 195.178.110.108:54404] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPaaIAO5fN7BxyqcEz_AAAAME"]
[Sat Feb 28 05:40:59.025221 2026] [:error] [pid 22194:tid 22205] [client 195.178.110.108:54412] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPa36mbajs3bzQGyvdVQAAAUk"]
[Sat Feb 28 05:41:01.086260 2026] [:error] [pid 39184:tid 39230] [client 195.178.110.108:54436] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPbVtZF9Zd_U7easAqRgAAAEs"]
[Sat Feb 28 05:41:02.256781 2026] [:error] [pid 22194:tid 22208] [client 195.178.110.108:37512] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPbn6mbajs3bzQGyvdXAAAAUw"]
[Sat Feb 28 05:41:03.333938 2026] [:error] [pid 22194:tid 22209] [client 195.178.110.108:37520] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPb36mbajs3bzQGyvdXgAAAU0"]
[Sat Feb 28 05:41:04.404359 2026] [:error] [pid 11791:tid 11793] [client 195.178.110.108:37532] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/helper/EmailHelper.js"] [unique_id "aaIPcGuX5e1Q32gqxH2PSgAAAQA"]
[Sat Feb 28 05:41:06.355236 2026] [:error] [pid 39183:tid 39209] [client 195.178.110.108:37548] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPchCf4HvhVePw3LZguQAAABE"]
[Sat Feb 28 05:41:07.380247 2026] [:error] [pid 11791:tid 11810] [client 195.178.110.108:37552] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPc2uX5e1Q32gqxH2PUQAAARE"]
[Sat Feb 28 05:41:08.485403 2026] [:error] [pid 22194:tid 22219] [client 195.178.110.108:37554] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPdH6mbajs3bzQGyvdbwAAAVc"]
[Sat Feb 28 05:41:09.571365 2026] [:error] [pid 39185:tid 39256] [client 195.178.110.108:37562] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPdRVE-FfM89u7BQY70gAAAIo"]
[Sat Feb 28 05:41:11.581764 2026] [:error] [pid 22194:tid 22202] [client 195.178.110.108:33602] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPd36mbajs3bzQGyvdgAAAAUY"]
[Sat Feb 28 05:41:12.654651 2026] [:error] [pid 39184:tid 39219] [client 195.178.110.108:33610] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPeFtZF9Zd_U7easAqWwAAAEA"]
[Sat Feb 28 05:41:13.749491 2026] [:error] [pid 11791:tid 11810] [client 195.178.110.108:33620] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPeWuX5e1Q32gqxH2PYwAAARE"]
[Sat Feb 28 05:41:14.879094 2026] [:error] [pid 39184:tid 39225] [client 195.178.110.108:33634] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/index.js"] [unique_id "aaIPeltZF9Zd_U7easAqXwAAAEY"]
[Sat Feb 28 05:41:22.518005 2026] [:error] [pid 39292:tid 39301] [client 195.178.110.108:33676] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/app/config/parameters.yml"] [unique_id "aaIPgqIAO5fN7BxyqcE0UwAAAMc"]
[Sat Feb 28 05:41:23.758906 2026] [:error] [pid 39185:tid 39266] [client 195.178.110.108:58158] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/config/parameters.yml"] [unique_id "aaIPgxVE-FfM89u7BQY73QAAAJQ"]
[Sat Feb 28 05:41:25.244574 2026] [:error] [pid 11791:tid 11797] [client 195.178.110.108:58170] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPhWuX5e1Q32gqxH2PcAAAAQQ"]
[Sat Feb 28 05:41:26.333336 2026] [:error] [pid 11791:tid 11814] [client 195.178.110.108:58178] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPhmuX5e1Q32gqxH2PeAAAARU"]
[Sat Feb 28 05:41:27.489991 2026] [:error] [pid 22194:tid 22203] [client 195.178.110.108:58194] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPh36mbajs3bzQGyvdyAAAAUc"]
[Sat Feb 28 05:41:28.554041 2026] [:error] [pid 39184:tid 39232] [client 195.178.110.108:58208] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPiFtZF9Zd_U7easAqcAAAAE0"]
[Sat Feb 28 05:41:29.678311 2026] [:error] [pid 39183:tid 39213] [client 195.178.110.108:58222] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPiRCf4HvhVePw3LZg4wAAABU"]
[Sat Feb 28 05:41:30.780122 2026] [:error] [pid 39183:tid 39199] [client 195.178.110.108:58238] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPihCf4HvhVePw3LZg5wAAAAc"]
[Sat Feb 28 05:41:31.841792 2026] [:error] [pid 39183:tid 39194] [client 195.178.110.108:56538] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPixCf4HvhVePw3LZg6gAAAAI"]
[Sat Feb 28 05:41:32.955683 2026] [:error] [pid 39183:tid 39201] [client 195.178.110.108:56548] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPjBCf4HvhVePw3LZg8wAAAAk"]
[Sat Feb 28 05:41:34.086959 2026] [:error] [pid 11791:tid 11807] [client 195.178.110.108:56554] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPjmuX5e1Q32gqxH2PlQAAAQ4"]
[Sat Feb 28 05:41:36.010821 2026] [:error] [pid 22194:tid 22218] [client 195.178.110.108:56578] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPkH6mbajs3bzQGyvd5QAAAVY"]
[Sat Feb 28 05:41:37.089972 2026] [:error] [pid 11791:tid 11806] [client 195.178.110.108:56584] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPkWuX5e1Q32gqxH2PnAAAAQ0"]
[Sat Feb 28 05:41:38.186028 2026] [:error] [pid 22194:tid 22217] [client 195.178.110.108:56594] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPkn6mbajs3bzQGyvd9gAAAVU"]
[Sat Feb 28 05:41:39.221668 2026] [:error] [pid 39185:tid 39262] [client 195.178.110.108:56602] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/user/controllers/index.js"] [unique_id "aaIPkxVE-FfM89u7BQY77gAAAJA"]
[Sat Feb 28 05:41:41.229462 2026] [:error] [pid 39292:tid 39300] [client 195.178.110.108:56622] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPlaIAO5fN7BxyqcE0jQAAAMY"]
[Sat Feb 28 05:41:42.292952 2026] [:error] [pid 11791:tid 11803] [client 195.178.110.108:36450] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPlmuX5e1Q32gqxH2PpgAAAQo"]
[Sat Feb 28 05:41:43.357868 2026] [:error] [pid 39183:tid 39204] [client 195.178.110.108:36464] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPlxCf4HvhVePw3LZhBgAAAAw"]
[Sat Feb 28 05:41:44.605943 2026] [:error] [pid 39292:tid 39298] [client 195.178.110.108:36466] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPmKIAO5fN7BxyqcE0rAAAAMQ"]
[Sat Feb 28 05:41:46.482826 2026] [:error] [pid 22194:tid 22212] [client 195.178.110.108:36482] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPmn6mbajs3bzQGyveEwAAAVA"]
[Sat Feb 28 05:41:47.561972 2026] [:error] [pid 39183:tid 39212] [client 195.178.110.108:36494] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPmxCf4HvhVePw3LZhFAAAABQ"]
[Sat Feb 28 05:41:48.604433 2026] [:error] [pid 11791:tid 11808] [client 195.178.110.108:36510] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPnGuX5e1Q32gqxH2PvAAAAQ8"]
[Sat Feb 28 05:41:49.645605 2026] [:error] [pid 39185:tid 39246] [client 195.178.110.108:36524] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPnRVE-FfM89u7BQY7-gAAAIA"]
[Sat Feb 28 05:41:50.706782 2026] [:error] [pid 39184:tid 39233] [client 195.178.110.108:36526] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPnltZF9Zd_U7easAqnQAAAE4"]
[Sat Feb 28 05:41:51.596976 2026] [:error] [pid 39185:tid 39263] [client 195.178.110.108:35744] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPnxVE-FfM89u7BQY8BAAAAJE"]
[Sat Feb 28 05:41:52.654023 2026] [:error] [pid 11791:tid 11795] [client 195.178.110.108:35746] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPoGuX5e1Q32gqxH2P0QAAAQI"]
[Sat Feb 28 05:41:53.697398 2026] [:error] [pid 11791:tid 11815] [client 195.178.110.108:35756] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPoWuX5e1Q32gqxH2P2gAAARY"]
[Sat Feb 28 05:41:54.776952 2026] [:error] [pid 39185:tid 39248] [client 195.178.110.108:35764] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.AWS_/credentials"] [unique_id "aaIPohVE-FfM89u7BQY8DAAAAII"]
[Sat Feb 28 05:41:56.722787 2026] [:error] [pid 11791:tid 11815] [client 195.178.110.108:35778] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPpGuX5e1Q32gqxH2P7QAAARY"]
[Sat Feb 28 05:41:57.786634 2026] [:error] [pid 11791:tid 11812] [client 195.178.110.108:35792] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPpWuX5e1Q32gqxH2P8wAAARM"]
[Sat Feb 28 05:41:58.813213 2026] [:error] [pid 39185:tid 39269] [client 195.178.110.108:35806] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPphVE-FfM89u7BQY8FAAAAJc"]
[Sat Feb 28 05:41:59.855242 2026] [:error] [pid 39184:tid 39243] [client 195.178.110.108:35822] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPp1tZF9Zd_U7easAqpAAAAFg"]
[Sat Feb 28 05:42:00.889170 2026] [:error] [pid 39184:tid 39230] [client 195.178.110.108:35824] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPqFtZF9Zd_U7easAqqAAAAEs"]
[Sat Feb 28 05:42:01.836285 2026] [:error] [pid 39184:tid 39221] [client 195.178.110.108:59112] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPqVtZF9Zd_U7easAqrAAAAEI"]
[Sat Feb 28 05:42:02.881007 2026] [:error] [pid 39185:tid 39264] [client 195.178.110.108:59124] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPqhVE-FfM89u7BQY8LAAAAJI"]
[Sat Feb 28 05:42:03.919791 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:59136] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPq6IAO5fN7BxyqcE0xgAAANA"]
[Sat Feb 28 05:42:04.971324 2026] [:error] [pid 11791:tid 11812] [client 195.178.110.108:59138] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPrGuX5e1Q32gqxH2QEQAAARM"]
[Sat Feb 28 05:42:05.992074 2026] [:error] [pid 22194:tid 22203] [client 195.178.110.108:59142] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPrX6mbajs3bzQGyveQQAAAUc"]
[Sat Feb 28 05:42:06.907443 2026] [:error] [pid 39292:tid 39317] [client 195.178.110.108:59144] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPrqIAO5fN7BxyqcE0zgAAANc"]
[Sat Feb 28 05:42:07.952025 2026] [:error] [pid 39292:tid 39311] [client 195.178.110.108:59158] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPr6IAO5fN7BxyqcE00gAAANE"]
[Sat Feb 28 05:42:09.024833 2026] [:error] [pid 39292:tid 39310] [client 195.178.110.108:59172] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPsaIAO5fN7BxyqcE02QAAANA"]
[Sat Feb 28 05:42:10.071851 2026] [:error] [pid 39185:tid 39267] [client 195.178.110.108:59176] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPshVE-FfM89u7BQY8VwAAAJU"]
[Sat Feb 28 05:42:11.116615 2026] [:error] [pid 39185:tid 39268] [client 195.178.110.108:59178] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/config/local.yml"] [unique_id "aaIPsxVE-FfM89u7BQY8WwAAAJY"]
[Sat Feb 28 05:42:11.950349 2026] [:error] [pid 11791:tid 11809] [client 195.178.110.108:54796] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPs2uX5e1Q32gqxH2QJwAAARA"]
[Sat Feb 28 05:42:12.972963 2026] [:error] [pid 39185:tid 39262] [client 195.178.110.108:54808] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPtBVE-FfM89u7BQY8XQAAAJA"]
[Sat Feb 28 05:42:14.004684 2026] [:error] [pid 39292:tid 39302] [client 195.178.110.108:54818] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPtqIAO5fN7BxyqcE08gAAAMg"]
[Sat Feb 28 05:42:15.029860 2026] [:error] [pid 39292:tid 39318] [client 195.178.110.108:54822] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPt6IAO5fN7BxyqcE0_QAAANg"]
[Sat Feb 28 05:42:16.101987 2026] [:error] [pid 22194:tid 22215] [client 195.178.110.108:54832] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPuH6mbajs3bzQGyveaAAAAVM"]
[Sat Feb 28 05:42:16.981348 2026] [:error] [pid 39292:tid 39309] [client 195.178.110.108:54840] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPuKIAO5fN7BxyqcE1DgAAAM8"]
[Sat Feb 28 05:42:18.013167 2026] [:error] [pid 39292:tid 39294] [client 195.178.110.108:54854] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPuqIAO5fN7BxyqcE1FQAAAMA"]
[Sat Feb 28 05:42:19.044970 2026] [:error] [pid 39185:tid 39250] [client 195.178.110.108:54862] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPuxVE-FfM89u7BQY8YwAAAIQ"]
[Sat Feb 28 05:42:20.076381 2026] [:error] [pid 39184:tid 39231] [client 195.178.110.108:54870] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPvFtZF9Zd_U7easAquwAAAEw"]
[Sat Feb 28 05:42:22.290642 2026] [:error] [pid 22194:tid 22196] [client 195.178.110.108:50014] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPvn6mbajs3bzQGyvebgAAAUA"]
[Sat Feb 28 05:42:23.300033 2026] [:error] [pid 39292:tid 39307] [client 195.178.110.108:50028] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/backend/config/settings.yml"] [unique_id "aaIPv6IAO5fN7BxyqcE1KAAAAM0"]
[Sat Feb 28 05:42:24.587989 2026] [:error] [pid 39185:tid 39266] [client 195.178.110.108:50040] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/config/config.yml"] [unique_id "aaIPwBVE-FfM89u7BQY8cQAAAJQ"]
[Sat Feb 28 05:42:28.300578 2026] [:error] [pid 39292:tid 39313] [client 195.178.110.108:50044] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/credentials"] [unique_id "aaIPxKIAO5fN7BxyqcE1TwAAANM"]
[Sat Feb 28 05:42:29.334122 2026] [:error] [pid 39292:tid 39301] [client 195.178.110.108:50052] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/credentials"] [unique_id "aaIPxaIAO5fN7BxyqcE1UgAAAMc"]
[Sat Feb 28 05:42:30.394313 2026] [:error] [pid 39185:tid 39270] [client 195.178.110.108:50064] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/credentials"] [unique_id "aaIPxhVE-FfM89u7BQY8kwAAAJg"]
[Sat Feb 28 05:42:31.425111 2026] [:error] [pid 22194:tid 22212] [client 195.178.110.108:59546] [client 195.178.110.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aws/credentials"] [unique_id "aaIPx36mbajs3bzQGyvefgAAAVA"]
[Sat Feb 28 05:50:38.942112 2026] [:error] [pid 39183:tid 39195] [client 51.83.11.108:41562] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aaIRrhCf4HvhVePw3LZjEAAAAAM"]
[Sat Feb 28 05:50:40.908207 2026] [:error] [pid 39292:tid 39300] [client 51.83.11.108:54776] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaIRsKIAO5fN7BxyqcE-fQAAAMY"]
[Sat Feb 28 05:50:42.828190 2026] [:error] [pid 39292:tid 39318] [client 51.83.11.108:54782] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaIRsqIAO5fN7BxyqcE-mgAAANg"]
[Sat Feb 28 05:51:15.639525 2026] [:error] [pid 39184:tid 39222] [client 103.121.48.147:59510] [client 103.121.48.147] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=multipart/alternative"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaIR01tZF9Zd_U7easAtuwAAAEM"]
[Sat Feb 28 06:03:38.715845 2026] [:error] [pid 39292:tid 39298] [client 91.224.92.164:48843] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aaIUuqIAO5fN7BxyqcFMdwAAAMQ"]
[Sat Feb 28 06:04:22.145620 2026] [:error] [pid 39292:tid 39306] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/yo.php
[Sat Feb 28 06:04:22.354278 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Sat Feb 28 06:04:22.561937 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/ba.php
[Sat Feb 28 06:04:22.770214 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/ym.php
[Sat Feb 28 06:04:22.978058 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Feb 28 06:04:23.190682 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Sat Feb 28 06:04:23.398367 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Feb 28 06:04:23.606661 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Feb 28 06:04:23.818062 2026] [:error] [pid 39292:tid 39306] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 06:04:24.026714 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:12269] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Sat Feb 28 06:04:24.231809 2026] [:error] [pid 39292:tid 39298] [client 20.151.113.230:12269] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaIU6KIAO5fN7BxyqcFNhAAAAMQ"]
[Sat Feb 28 06:04:24.641379 2026] [:error] [pid 11791:tid 11795] [client 20.151.113.230:12260] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaIU6GuX5e1Q32gqxH2cVQAAAQI"]
[Sat Feb 28 06:04:25.067813 2026] [:error] [pid 39292:tid 39299] [client 20.151.113.230:12268] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaIU6aIAO5fN7BxyqcFNhgAAAMU"]
[Sat Feb 28 06:04:25.486906 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:12226] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaIU6X6mbajs3bzQGyvvfQAAAUY"]
[Sat Feb 28 06:04:25.903405 2026] [:error] [pid 22194:tid 22197] [client 20.151.113.230:12262] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aaIU6X6mbajs3bzQGyvvhQAAAUE"]
[Sat Feb 28 06:04:26.319934 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:12286] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aaIU6n6mbajs3bzQGyvviwAAAUc"]
[Sat Feb 28 06:04:26.729832 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:12277] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aaIU6ltZF9Zd_U7easAydwAAAFE"]
[Sat Feb 28 06:04:27.158416 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:12270] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "aaIU636mbajs3bzQGyvvkQAAAUI"]
[Sat Feb 28 06:04:27.570264 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:12227] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aaIU66IAO5fN7BxyqcFNlQAAANI"]
[Sat Feb 28 06:04:27.985512 2026] [:error] [pid 22194:tid 22220] [client 20.151.113.230:12249] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aaIU636mbajs3bzQGyvvmAAAAVg"]
[Sat Feb 28 06:04:28.399218 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:12232] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aaIU7BVE-FfM89u7BQZFuAAAAJE"]
[Sat Feb 28 06:04:28.811727 2026] [:error] [pid 39185:tid 39247] [client 20.151.113.230:12172] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/000.php"] [unique_id "aaIU7BVE-FfM89u7BQZFugAAAIE"]
[Sat Feb 28 06:04:29.227700 2026] [:error] [pid 39292:tid 39311] [client 20.151.113.230:12162] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mails.php"] [unique_id "aaIU7aIAO5fN7BxyqcFNmgAAANE"]
[Sat Feb 28 06:04:29.645990 2026] [:error] [pid 39184:tid 39228] [client 20.151.113.230:12271] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mails.php"] [unique_id "aaIU7VtZF9Zd_U7easAyewAAAEk"]
[Sat Feb 28 06:04:30.063791 2026] [:error] [pid 22194:tid 22211] [client 20.151.113.230:12229] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mails.php"] [unique_id "aaIU7n6mbajs3bzQGyvvoAAAAU8"]
[Sat Feb 28 06:04:30.476862 2026] [:error] [pid 39184:tid 39234] [client 20.151.113.230:12234] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-mails.php"] [unique_id "aaIU7ltZF9Zd_U7easAygAAAAE8"]
[Sat Feb 28 06:04:30.892223 2026] [:error] [pid 11791:tid 11811] [client 20.151.113.230:12186] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xex.php"] [unique_id "aaIU7muX5e1Q32gqxH2cYQAAARI"]
[Sat Feb 28 06:04:31.311397 2026] [:error] [pid 11791:tid 11798] [client 20.151.113.230:12200] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xex.php"] [unique_id "aaIU72uX5e1Q32gqxH2cZQAAAQU"]
[Sat Feb 28 06:04:31.722463 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:12239] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xex.php"] [unique_id "aaIU72uX5e1Q32gqxH2cagAAARA"]
[Sat Feb 28 06:04:32.134904 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:12177] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xex.php"] [unique_id "aaIU8GuX5e1Q32gqxH2cbAAAAQE"]
[Sat Feb 28 06:04:32.546719 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:12173] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aaIU8KIAO5fN7BxyqcFNoQAAAMI"]
[Sat Feb 28 06:04:32.958474 2026] [:error] [pid 39185:tid 39250] [client 20.151.113.230:12221] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aaIU8BVE-FfM89u7BQZFvgAAAIQ"]
[Sat Feb 28 06:04:33.394944 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:12194] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aaIU8RVE-FfM89u7BQZFwQAAAI4"]
[Sat Feb 28 06:04:33.809291 2026] [:error] [pid 39292:tid 39299] [client 20.151.113.230:12279] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n3.php"] [unique_id "aaIU8aIAO5fN7BxyqcFNqQAAAMU"]
[Sat Feb 28 06:04:34.225188 2026] [:error] [pid 39183:tid 39215] [client 20.151.113.230:12283] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/key.php"] [unique_id "aaIU8hCf4HvhVePw3LZnZAAAABc"]
[Sat Feb 28 06:04:34.636009 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:12241] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/key.php"] [unique_id "aaIU8qIAO5fN7BxyqcFNrQAAANQ"]
[Sat Feb 28 06:04:35.046457 2026] [:error] [pid 22194:tid 22215] [client 20.151.113.230:12183] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/key.php"] [unique_id "aaIU836mbajs3bzQGyvvpQAAAVM"]
[Sat Feb 28 06:04:35.462888 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:12267] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/key.php"] [unique_id "aaIU86IAO5fN7BxyqcFNsAAAAMg"]
[Sat Feb 28 06:04:35.875968 2026] [:error] [pid 39185:tid 39251] [client 20.151.113.230:12225] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/667.php"] [unique_id "aaIU8xVE-FfM89u7BQZFxwAAAIU"]
[Sat Feb 28 06:04:36.290491 2026] [:error] [pid 11791:tid 11815] [client 20.151.113.230:12238] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/667.php"] [unique_id "aaIU9GuX5e1Q32gqxH2cdQAAARY"]
[Sat Feb 28 06:04:36.705631 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:12217] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/667.php"] [unique_id "aaIU9GuX5e1Q32gqxH2cdgAAAQg"]
[Sat Feb 28 06:04:37.127669 2026] [:error] [pid 11791:tid 11802] [client 20.151.113.230:12233] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/667.php"] [unique_id "aaIU9WuX5e1Q32gqxH2cdwAAAQk"]
[Sat Feb 28 06:04:37.539546 2026] [:error] [pid 22194:tid 22211] [client 20.151.113.230:12284] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ctfbe.php"] [unique_id "aaIU9X6mbajs3bzQGyvvrgAAAU8"]
[Sat Feb 28 06:04:37.957075 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:12254] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ctfbe.php"] [unique_id "aaIU9X6mbajs3bzQGyvvsAAAAVY"]
[Sat Feb 28 06:04:38.367088 2026] [:error] [pid 39184:tid 39222] [client 20.151.113.230:12246] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ctfbe.php"] [unique_id "aaIU9ltZF9Zd_U7easAyhgAAAEM"]
[Sat Feb 28 06:04:38.786701 2026] [:error] [pid 39183:tid 39198] [client 20.151.113.230:12228] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ctfbe.php"] [unique_id "aaIU9hCf4HvhVePw3LZnbgAAAAY"]
[Sat Feb 28 06:04:39.198039 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:12163] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hkweu.php"] [unique_id "aaIU9xVE-FfM89u7BQZFzgAAAJU"]
[Sat Feb 28 06:04:39.615048 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:12216] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hkweu.php"] [unique_id "aaIU91tZF9Zd_U7easAyiAAAAFE"]
[Sat Feb 28 06:04:40.030706 2026] [:error] [pid 39183:tid 39201] [client 20.151.113.230:12175] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hkweu.php"] [unique_id "aaIU-BCf4HvhVePw3LZnbwAAAAk"]
[Sat Feb 28 06:04:40.443167 2026] [:error] [pid 11791:tid 11807] [client 20.151.113.230:12196] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hkweu.php"] [unique_id "aaIU-GuX5e1Q32gqxH2cfwAAAQ4"]
[Sat Feb 28 06:04:40.856744 2026] [:error] [pid 39184:tid 39228] [client 20.151.113.230:12258] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qdlte.php"] [unique_id "aaIU-FtZF9Zd_U7easAyjQAAAEk"]
[Sat Feb 28 06:04:41.268135 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:12256] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qdlte.php"] [unique_id "aaIU-VtZF9Zd_U7easAyjgAAAE0"]
[Sat Feb 28 06:04:41.677860 2026] [:error] [pid 39292:tid 39313] [client 20.151.113.230:12275] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qdlte.php"] [unique_id "aaIU-aIAO5fN7BxyqcFNsgAAANM"]
[Sat Feb 28 06:04:42.097055 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:12261] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/qdlte.php"] [unique_id "aaIU-qIAO5fN7BxyqcFNtQAAAMA"]
[Sat Feb 28 06:04:42.531197 2026] [:error] [pid 22194:tid 22200] [client 20.151.113.230:12231] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f7.php"] [unique_id "aaIU-n6mbajs3bzQGyvvtwAAAUQ"]
[Sat Feb 28 06:04:42.944595 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:12248] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f7.php"] [unique_id "aaIU-n6mbajs3bzQGyvvuwAAAVQ"]
[Sat Feb 28 06:04:43.356047 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:12263] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f7.php"] [unique_id "aaIU-6IAO5fN7BxyqcFNugAAAMc"]
[Sat Feb 28 06:04:43.767138 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:12197] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f7.php"] [unique_id "aaIU-6IAO5fN7BxyqcFNvAAAANU"]
[Sat Feb 28 06:04:44.192055 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:12168] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaIU_H6mbajs3bzQGyvvwQAAAUI"]
[Sat Feb 28 06:04:44.608459 2026] [:error] [pid 11791:tid 11815] [client 20.151.113.230:12255] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaIU_GuX5e1Q32gqxH2chwAAARY"]
[Sat Feb 28 06:04:45.019599 2026] [:error] [pid 22194:tid 22209] [client 20.151.113.230:12287] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaIU_X6mbajs3bzQGyvvwwAAAU0"]
[Sat Feb 28 06:04:45.431775 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:12242] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaIU_X6mbajs3bzQGyvvyQAAAVI"]
[Sat Feb 28 06:04:45.847593 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:12179] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp7.php"] [unique_id "aaIU_WuX5e1Q32gqxH2ciQAAARA"]
[Sat Feb 28 06:04:46.264075 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:12282] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp7.php"] [unique_id "aaIU_hVE-FfM89u7BQZF5AAAAI4"]
[Sat Feb 28 06:04:46.679463 2026] [:error] [pid 39185:tid 39264] [client 20.151.113.230:12165] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp7.php"] [unique_id "aaIU_hVE-FfM89u7BQZF5wAAAJI"]
[Sat Feb 28 06:04:47.090019 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:12122] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp7.php"] [unique_id "aaIU_2uX5e1Q32gqxH2cjQAAAQs"]
[Sat Feb 28 06:04:47.506327 2026] [:error] [pid 39185:tid 39247] [client 20.151.113.230:12110] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/C1.php"] [unique_id "aaIU_xVE-FfM89u7BQZF6wAAAIE"]
[Sat Feb 28 06:04:47.917069 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:12280] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/C1.php"] [unique_id "aaIU_6IAO5fN7BxyqcFN0wAAAMM"]
[Sat Feb 28 06:04:48.326449 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:12176] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/C1.php"] [unique_id "aaIVAH6mbajs3bzQGyvv2wAAAVI"]
[Sat Feb 28 06:04:48.742778 2026] [:error] [pid 22194:tid 22201] [client 20.151.113.230:12243] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/C1.php"] [unique_id "aaIVAH6mbajs3bzQGyvv3gAAAUU"]
[Sat Feb 28 06:04:49.154212 2026] [:error] [pid 22194:tid 22208] [client 20.151.113.230:12170] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clcdu.php"] [unique_id "aaIVAX6mbajs3bzQGyvv4AAAAUw"]
[Sat Feb 28 06:04:49.571702 2026] [:error] [pid 22194:tid 22210] [client 20.151.113.230:12184] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clcdu.php"] [unique_id "aaIVAX6mbajs3bzQGyvv4gAAAU4"]
[Sat Feb 28 06:04:49.994662 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:12182] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clcdu.php"] [unique_id "aaIVAaIAO5fN7BxyqcFN6QAAANQ"]
[Sat Feb 28 06:04:50.405075 2026] [:error] [pid 39292:tid 39308] [client 20.151.113.230:12207] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clcdu.php"] [unique_id "aaIVAqIAO5fN7BxyqcFN7gAAAM4"]
[Sat Feb 28 06:04:50.819314 2026] [:error] [pid 22194:tid 22220] [client 20.151.113.230:12265] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffbsq.php"] [unique_id "aaIVAn6mbajs3bzQGyvv7AAAAVg"]
[Sat Feb 28 06:04:51.232278 2026] [:error] [pid 39184:tid 39237] [client 20.151.113.230:12272] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffbsq.php"] [unique_id "aaIVA1tZF9Zd_U7easAylAAAAFI"]
[Sat Feb 28 06:04:51.642823 2026] [:error] [pid 39183:tid 39213] [client 20.151.113.230:12164] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffbsq.php"] [unique_id "aaIVAxCf4HvhVePw3LZnewAAABU"]
[Sat Feb 28 06:04:52.054679 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:12131] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ffbsq.php"] [unique_id "aaIVBBVE-FfM89u7BQZF8gAAAIk"]
[Sat Feb 28 06:04:52.466714 2026] [:error] [pid 39184:tid 39230] [client 20.151.113.230:12174] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aaIVBFtZF9Zd_U7easAylwAAAEs"]
[Sat Feb 28 06:04:52.882804 2026] [:error] [pid 39183:tid 39193] [client 20.151.113.230:12237] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aaIVBBCf4HvhVePw3LZnfAAAAAE"]
[Sat Feb 28 06:04:53.303911 2026] [:error] [pid 39183:tid 39207] [client 20.151.113.230:12212] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aaIVBRCf4HvhVePw3LZngAAAAA8"]
[Sat Feb 28 06:04:53.730524 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:12189] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "aaIVBX6mbajs3bzQGyvv7wAAAUc"]
[Sat Feb 28 06:04:54.140642 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:12106] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaIVBqIAO5fN7BxyqcFOCwAAAMo"]
[Sat Feb 28 06:04:54.555978 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:12264] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaIVBqIAO5fN7BxyqcFOEAAAAMM"]
[Sat Feb 28 06:04:54.973231 2026] [:error] [pid 22194:tid 22220] [client 20.151.113.230:12240] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaIVBn6mbajs3bzQGyvv_QAAAVg"]
[Sat Feb 28 06:04:55.383183 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:12274] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaIVB36mbajs3bzQGyvwAgAAAVA"]
[Sat Feb 28 06:04:55.797609 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:12171] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaIVB36mbajs3bzQGyvwCwAAAVY"]
[Sat Feb 28 06:04:56.220714 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:12119] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaIVCKIAO5fN7BxyqcFOIgAAANU"]
[Sat Feb 28 06:04:56.630696 2026] [:error] [pid 39183:tid 39202] [client 20.151.113.230:12224] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaIVCBCf4HvhVePw3LZnhwAAAAo"]
[Sat Feb 28 06:04:57.039136 2026] [:error] [pid 39184:tid 39228] [client 20.151.113.230:12205] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaIVCVtZF9Zd_U7easAyogAAAEk"]
[Sat Feb 28 06:04:57.448567 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:12211] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kma.php"] [unique_id "aaIVCX6mbajs3bzQGyvwIgAAAUk"]
[Sat Feb 28 06:04:57.890896 2026] [:error] [pid 39183:tid 39213] [client 20.151.113.230:12213] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kma.php"] [unique_id "aaIVCRCf4HvhVePw3LZnjwAAABU"]
[Sat Feb 28 06:04:58.302492 2026] [:error] [pid 39185:tid 39258] [client 20.151.113.230:12193] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kma.php"] [unique_id "aaIVChVE-FfM89u7BQZGEAAAAIw"]
[Sat Feb 28 06:04:58.735235 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:12276] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kma.php"] [unique_id "aaIVCqIAO5fN7BxyqcFOSAAAAMY"]
[Sat Feb 28 06:04:59.145471 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:12219] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aaIVC6IAO5fN7BxyqcFOSwAAAMo"]
[Sat Feb 28 06:04:59.555524 2026] [:error] [pid 11791:tid 11799] [client 20.151.113.230:12178] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aaIVC2uX5e1Q32gqxH2clwAAAQY"]
[Sat Feb 28 06:04:59.975003 2026] [:error] [pid 11791:tid 11808] [client 20.151.113.230:12199] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aaIVC2uX5e1Q32gqxH2cmwAAAQ8"]
[Sat Feb 28 06:05:00.391659 2026] [:error] [pid 22194:tid 22196] [client 20.151.113.230:12180] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpls.php"] [unique_id "aaIVDH6mbajs3bzQGyvwQgAAAUA"]
[Sat Feb 28 06:05:00.834063 2026] [:error] [pid 11791:tid 11807] [client 20.151.113.230:12236] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova-wso.php"] [unique_id "aaIVDGuX5e1Q32gqxH2cnwAAAQ4"]
[Sat Feb 28 06:05:01.244892 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:12257] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova-wso.php"] [unique_id "aaIVDX6mbajs3bzQGyvwRwAAAVY"]
[Sat Feb 28 06:05:01.662987 2026] [:error] [pid 11791:tid 11810] [client 20.151.113.230:12188] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova-wso.php"] [unique_id "aaIVDWuX5e1Q32gqxH2cpAAAARE"]
[Sat Feb 28 06:05:02.076106 2026] [:error] [pid 11791:tid 11811] [client 20.151.113.230:12181] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ova-wso.php"] [unique_id "aaIVDmuX5e1Q32gqxH2cpQAAARI"]
[Sat Feb 28 06:05:02.491282 2026] [:error] [pid 11791:tid 11800] [client 20.151.113.230:12250] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjq.php"] [unique_id "aaIVDmuX5e1Q32gqxH2cpgAAAQc"]
[Sat Feb 28 06:05:02.907715 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:12215] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjq.php"] [unique_id "aaIVDn6mbajs3bzQGyvwSQAAAUI"]
[Sat Feb 28 06:05:03.330293 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:12222] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjq.php"] [unique_id "aaIVD36mbajs3bzQGyvwSgAAAVA"]
[Sat Feb 28 06:05:03.746064 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:12148] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjq.php"] [unique_id "aaIVD36mbajs3bzQGyvwTQAAAVE"]
[Sat Feb 28 06:05:04.156281 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:12259] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php7"] [unique_id "aaIVEFtZF9Zd_U7easAyrgAAAFM"]
[Sat Feb 28 06:05:04.576040 2026] [:error] [pid 39183:tid 39197] [client 20.151.113.230:12097] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php7"] [unique_id "aaIVEBCf4HvhVePw3LZnnQAAAAU"]
[Sat Feb 28 06:05:04.989807 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:12161] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php7"] [unique_id "aaIVEKIAO5fN7BxyqcFOcwAAAMY"]
[Sat Feb 28 06:05:05.402795 2026] [:error] [pid 39184:tid 39241] [client 20.151.113.230:12143] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php7"] [unique_id "aaIVEVtZF9Zd_U7easAyrwAAAFY"]
[Sat Feb 28 06:05:05.828457 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:12195] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaIVEaIAO5fN7BxyqcFOewAAANg"]
[Sat Feb 28 06:05:06.249359 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:12115] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaIVEqIAO5fN7BxyqcFOfwAAANA"]
[Sat Feb 28 06:05:06.668561 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:12108] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaIVEqIAO5fN7BxyqcFOgwAAAMg"]
[Sat Feb 28 06:05:07.082672 2026] [:error] [pid 39184:tid 39235] [client 20.151.113.230:12252] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaIVE1tZF9Zd_U7easAytQAAAFA"]
[Sat Feb 28 06:05:07.495049 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:12039] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sql.php7"] [unique_id "aaIVE6IAO5fN7BxyqcFOigAAAMA"]
[Sat Feb 28 06:05:07.907054 2026] [:error] [pid 39183:tid 39194] [client 20.151.113.230:12109] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sql.php7"] [unique_id "aaIVExCf4HvhVePw3LZnoAAAAAI"]
[Sat Feb 28 06:05:08.326189 2026] [:error] [pid 39184:tid 39231] [client 20.151.113.230:12182] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sql.php7"] [unique_id "aaIVFFtZF9Zd_U7easAytgAAAEw"]
[Sat Feb 28 06:05:08.746999 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:12235] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sql.php7"] [unique_id "aaIVFKIAO5fN7BxyqcFOlgAAAMc"]
[Sat Feb 28 06:05:09.171171 2026] [:error] [pid 11791:tid 11807] [client 20.151.113.230:12202] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aaIVFWuX5e1Q32gqxH2crQAAAQ4"]
[Sat Feb 28 06:05:09.586712 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:12245] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aaIVFX6mbajs3bzQGyvwVgAAAVQ"]
[Sat Feb 28 06:05:09.998449 2026] [:error] [pid 39183:tid 39199] [client 20.151.113.230:12139] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aaIVFRCf4HvhVePw3LZnpgAAAAc"]
[Sat Feb 28 06:05:10.412153 2026] [:error] [pid 11791:tid 11803] [client 20.151.113.230:12169] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55.php"] [unique_id "aaIVFmuX5e1Q32gqxH2csAAAAQo"]
[Sat Feb 28 06:05:10.833565 2026] [:error] [pid 39183:tid 39209] [client 20.151.113.230:12117] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc.php"] [unique_id "aaIVFhCf4HvhVePw3LZnqQAAABE"]
[Sat Feb 28 06:05:11.258929 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:12278] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc.php"] [unique_id "aaIVF6IAO5fN7BxyqcFOmwAAANg"]
[Sat Feb 28 06:05:11.693081 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:12103] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc.php"] [unique_id "aaIVF6IAO5fN7BxyqcFOnQAAANU"]
[Sat Feb 28 06:05:12.107608 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:12281] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zc.php"] [unique_id "aaIVGH6mbajs3bzQGyvwWwAAAVE"]
[Sat Feb 28 06:05:12.519199 2026] [:error] [pid 39292:tid 39311] [client 20.151.113.230:12285] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaIVGKIAO5fN7BxyqcFOogAAANE"]
[Sat Feb 28 06:05:12.932304 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:12123] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaIVGKIAO5fN7BxyqcFOpAAAAMs"]
[Sat Feb 28 06:05:13.345068 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:12128] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaIVGX6mbajs3bzQGyvwYAAAAVY"]
[Sat Feb 28 06:05:13.757952 2026] [:error] [pid 22194:tid 22208] [client 20.151.113.230:12096] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaIVGX6mbajs3bzQGyvwZAAAAUw"]
[Sat Feb 28 06:59:26.469075 2026] [:error] [pid 22194:tid 22200] [client 4.204.192.31:19828] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Sat Feb 28 06:59:54.707669 2026] [:error] [pid 22194:tid 22201] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Feb 28 06:59:54.919505 2026] [:error] [pid 22194:tid 22218] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/tews.php
[Sat Feb 28 06:59:55.129108 2026] [:error] [pid 22194:tid 22209] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/wpp.php
[Sat Feb 28 06:59:55.339502 2026] [:error] [pid 22194:tid 22198] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/wc49.php
[Sat Feb 28 06:59:55.556524 2026] [:error] [pid 22194:tid 22211] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/TL.php
[Sat Feb 28 06:59:55.766835 2026] [:error] [pid 22194:tid 22197] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Feb 28 06:59:55.976651 2026] [:error] [pid 22194:tid 22220] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/fck.php
[Sat Feb 28 06:59:56.186149 2026] [:error] [pid 22194:tid 22206] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 06:59:56.397353 2026] [:error] [pid 22194:tid 22219] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Sat Feb 28 06:59:56.606661 2026] [:error] [pid 22194:tid 22210] [client 20.220.144.87:19443] File does not exist: /usr/local/apache/htdocs/suspended-page/nw2.php
[Sat Feb 28 06:59:56.812997 2026] [:error] [pid 22194:tid 22212] [client 20.220.144.87:19443] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaIh7H6mbajs3bzQGysSmAAAAVA"]
[Sat Feb 28 06:59:57.226591 2026] [:error] [pid 22194:tid 22203] [client 20.220.144.87:19431] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaIh7X6mbajs3bzQGysSmwAAAUc"]
[Sat Feb 28 06:59:57.640323 2026] [:error] [pid 22194:tid 22200] [client 20.220.144.87:19452] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaIh7X6mbajs3bzQGysSnwAAAUQ"]
[Sat Feb 28 06:59:58.056598 2026] [:error] [pid 39292:tid 39295] [client 20.220.144.87:19346] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blackmini.php"] [unique_id "aaIh7qIAO5fN7BxyqcGEDQAAAME"]
[Sat Feb 28 06:59:58.468893 2026] [:error] [pid 39292:tid 39316] [client 20.220.144.87:19416] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaIh7qIAO5fN7BxyqcGEEwAAANY"]
[Sat Feb 28 06:59:58.880132 2026] [:error] [pid 39292:tid 39294] [client 20.220.144.87:19342] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaIh7qIAO5fN7BxyqcGEGAAAAMA"]
[Sat Feb 28 06:59:59.291492 2026] [:error] [pid 39185:tid 39257] [client 20.220.144.87:19397] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaIh7xVE-FfM89u7BQZXmgAAAIs"]
[Sat Feb 28 06:59:59.718600 2026] [:error] [pid 39292:tid 39313] [client 20.220.144.87:19441] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gssdd.php"] [unique_id "aaIh76IAO5fN7BxyqcGEHQAAANM"]
[Sat Feb 28 07:00:00.133585 2026] [:error] [pid 39292:tid 39304] [client 20.220.144.87:19343] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaIh8KIAO5fN7BxyqcGEIAAAAMo"]
[Sat Feb 28 07:00:00.550012 2026] [:error] [pid 39292:tid 39302] [client 20.220.144.87:19446] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaIh8KIAO5fN7BxyqcGEIgAAAMg"]
[Sat Feb 28 07:00:00.963751 2026] [:error] [pid 39292:tid 39307] [client 20.220.144.87:19448] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaIh8KIAO5fN7BxyqcGEKAAAAM0"]
[Sat Feb 28 07:00:01.378729 2026] [:error] [pid 39292:tid 39306] [client 20.220.144.87:19328] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F19.php"] [unique_id "aaIh8aIAO5fN7BxyqcGELQAAAMw"]
[Sat Feb 28 07:00:01.787859 2026] [:error] [pid 22194:tid 22206] [client 20.220.144.87:19405] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaIh8X6mbajs3bzQGysSpgAAAUo"]
[Sat Feb 28 07:00:02.204592 2026] [:error] [pid 11791:tid 11807] [client 20.220.144.87:19393] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaIh8muX5e1Q32gqxH24LQAAAQ4"]
[Sat Feb 28 07:00:02.622204 2026] [:error] [pid 39185:tid 39250] [client 20.220.144.87:19451] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaIh8hVE-FfM89u7BQZXnAAAAIQ"]
[Sat Feb 28 07:00:03.034997 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:19410] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/F1.php"] [unique_id "aaIh81tZF9Zd_U7easBC4AAAAFU"]
[Sat Feb 28 07:00:03.447913 2026] [:error] [pid 22194:tid 22212] [client 20.220.144.87:19408] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaIh836mbajs3bzQGysSqQAAAVA"]
[Sat Feb 28 07:00:03.862305 2026] [:error] [pid 39292:tid 39313] [client 20.220.144.87:19450] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaIh86IAO5fN7BxyqcGENgAAANM"]
[Sat Feb 28 07:00:04.270674 2026] [:error] [pid 39292:tid 39299] [client 20.220.144.87:19437] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaIh9KIAO5fN7BxyqcGEOAAAAMU"]
[Sat Feb 28 07:00:04.679173 2026] [:error] [pid 39185:tid 39264] [client 20.220.144.87:19351] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaIh9BVE-FfM89u7BQZXnwAAAJI"]
[Sat Feb 28 07:00:05.091786 2026] [:error] [pid 39184:tid 39222] [client 20.220.144.87:19413] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaIh9VtZF9Zd_U7easBC4gAAAEM"]
[Sat Feb 28 07:00:05.505714 2026] [:error] [pid 39292:tid 39316] [client 20.220.144.87:19427] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaIh9aIAO5fN7BxyqcGEPAAAANY"]
[Sat Feb 28 07:00:05.917579 2026] [:error] [pid 22194:tid 22202] [client 20.220.144.87:19436] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaIh9X6mbajs3bzQGysSqwAAAUY"]
[Sat Feb 28 07:00:06.342250 2026] [:error] [pid 22194:tid 22201] [client 20.220.144.87:19331] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/R57.php"] [unique_id "aaIh9n6mbajs3bzQGysSrAAAAUU"]
[Sat Feb 28 07:00:06.759111 2026] [:error] [pid 22194:tid 22200] [client 20.220.144.87:19445] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaIh9n6mbajs3bzQGysSrgAAAUQ"]
[Sat Feb 28 07:00:07.170962 2026] [:error] [pid 39292:tid 39294] [client 20.220.144.87:19359] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaIh96IAO5fN7BxyqcGEQgAAAMA"]
[Sat Feb 28 07:00:07.581116 2026] [:error] [pid 22194:tid 22213] [client 20.220.144.87:19347] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaIh936mbajs3bzQGysSsgAAAVE"]
[Sat Feb 28 07:00:07.991508 2026] [:error] [pid 22194:tid 22216] [client 20.220.144.87:19396] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaIh936mbajs3bzQGysStAAAAVQ"]
[Sat Feb 28 07:00:08.402046 2026] [:error] [pid 22194:tid 22220] [client 20.220.144.87:19432] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaIh-H6mbajs3bzQGysStgAAAVg"]
[Sat Feb 28 07:00:08.823165 2026] [:error] [pid 39292:tid 39318] [client 20.220.144.87:19345] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaIh-KIAO5fN7BxyqcGERgAAANg"]
[Sat Feb 28 07:00:09.237106 2026] [:error] [pid 22194:tid 22199] [client 20.220.144.87:19268] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaIh-X6mbajs3bzQGysSvAAAAUM"]
[Sat Feb 28 07:00:09.652039 2026] [:error] [pid 39292:tid 39307] [client 20.220.144.87:19330] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yussef.php"] [unique_id "aaIh-aIAO5fN7BxyqcGESgAAAM0"]
[Sat Feb 28 07:00:21.217109 2026] [:error] [pid 11791:tid 11796] [client 20.220.144.87:19414] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaIiBWuX5e1Q32gqxH24PwAAAQM"]
[Sat Feb 28 07:00:21.631340 2026] [:error] [pid 39292:tid 39306] [client 20.220.144.87:19444] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaIiBaIAO5fN7BxyqcGEhwAAAMw"]
[Sat Feb 28 07:00:22.047993 2026] [:error] [pid 11791:tid 11817] [client 20.220.144.87:19337] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaIiBmuX5e1Q32gqxH24QwAAARg"]
[Sat Feb 28 07:00:22.462246 2026] [:error] [pid 11791:tid 11793] [client 20.220.144.87:19399] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaIiBmuX5e1Q32gqxH24RAAAAQA"]
[Sat Feb 28 07:00:22.877921 2026] [:error] [pid 39185:tid 39247] [client 20.220.144.87:19447] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bengi.php"] [unique_id "aaIiBhVE-FfM89u7BQZXrwAAAIE"]
[Sat Feb 28 07:00:23.316124 2026] [:error] [pid 39185:tid 39270] [client 20.220.144.87:19373] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bengi.php"] [unique_id "aaIiBxVE-FfM89u7BQZXsAAAAJg"]
[Sat Feb 28 07:00:23.752274 2026] [:error] [pid 11791:tid 11800] [client 20.220.144.87:19438] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bengi.php"] [unique_id "aaIiB2uX5e1Q32gqxH24RwAAAQc"]
[Sat Feb 28 07:00:24.170615 2026] [:error] [pid 22194:tid 22215] [client 20.220.144.87:19305] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bengi.php"] [unique_id "aaIiCH6mbajs3bzQGysS1wAAAVM"]
[Sat Feb 28 07:00:24.585634 2026] [:error] [pid 39292:tid 39294] [client 20.220.144.87:19329] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaIiCKIAO5fN7BxyqcGEjQAAAMA"]
[Sat Feb 28 07:00:25.001230 2026] [:error] [pid 39292:tid 39295] [client 20.220.144.87:19264] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaIiCaIAO5fN7BxyqcGEkAAAAME"]
[Sat Feb 28 07:00:25.419036 2026] [:error] [pid 39292:tid 39298] [client 20.220.144.87:19403] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaIiCaIAO5fN7BxyqcGElQAAAMQ"]
[Sat Feb 28 07:00:32.958960 2026] [:error] [pid 39184:tid 39232] [client 20.220.144.87:19390] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samfa.php"] [unique_id "aaIiEFtZF9Zd_U7easBDBwAAAE0"]
[Sat Feb 28 07:00:33.369946 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:19363] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samfa.php"] [unique_id "aaIiERCf4HvhVePw3LZ1XQAAAAA"]
[Sat Feb 28 07:00:33.785671 2026] [:error] [pid 11791:tid 11801] [client 20.220.144.87:19266] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/samfa.php"] [unique_id "aaIiEWuX5e1Q32gqxH24WwAAAQg"]
[Sat Feb 28 07:00:34.201569 2026] [:error] [pid 39183:tid 39200] [client 20.220.144.87:19392] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaIiEhCf4HvhVePw3LZ1XwAAAAg"]
[Sat Feb 28 07:00:34.610426 2026] [:error] [pid 11791:tid 11808] [client 20.220.144.87:19340] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaIiEmuX5e1Q32gqxH24XgAAAQ8"]
[Sat Feb 28 07:00:35.022700 2026] [:error] [pid 11791:tid 11799] [client 20.220.144.87:19271] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaIiE2uX5e1Q32gqxH24YgAAAQY"]
[Sat Feb 28 07:00:35.436195 2026] [:error] [pid 39185:tid 39264] [client 20.220.144.87:19400] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/boots.php"] [unique_id "aaIiExVE-FfM89u7BQZXxQAAAJI"]
[Sat Feb 28 07:00:35.850675 2026] [:error] [pid 39292:tid 39297] [client 20.220.144.87:19424] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaIiE6IAO5fN7BxyqcGEqwAAAMM"]
[Sat Feb 28 07:00:36.263991 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:19341] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaIiFBCf4HvhVePw3LZ1YAAAAAQ"]
[Sat Feb 28 07:00:36.677575 2026] [:error] [pid 39185:tid 39260] [client 20.220.144.87:19367] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaIiFBVE-FfM89u7BQZXyAAAAI4"]
[Sat Feb 28 07:00:37.092460 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:19272] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/logi.php"] [unique_id "aaIiFRCf4HvhVePw3LZ1YwAAAA0"]
[Sat Feb 28 08:02:34.305235 2026] [:error] [pid 39185:tid 39268] [client 65.108.78.33:60398] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaIwmhVE-FfM89u7BQZwrAAAAJY"]
[Sat Feb 28 08:02:37.005977 2026] [:error] [pid 11791:tid 11817] [client 65.108.78.33:60414] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaIwnWuX5e1Q32gqxH3ayAAAARg"]
[Sat Feb 28 08:02:40.943337 2026] [:error] [pid 39183:tid 39211] [client 65.108.78.33:60416] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaIwoBCf4HvhVePw3LaE2QAAABM"]
[Sat Feb 28 08:14:47.655878 2026] [:error] [pid 39183:tid 39216] [client 1.15.52.154:51176] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaIzdxCf4HvhVePw3LaG6gAAABg"]
[Sat Feb 28 08:17:04.672112 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sat Feb 28 08:17:04.895630 2026] [:error] [pid 39292:tid 39297] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Feb 28 08:17:05.112759 2026] [:error] [pid 39292:tid 39294] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Feb 28 08:17:05.387546 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/X57.php
[Sat Feb 28 08:17:05.607656 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/wpver.php
[Sat Feb 28 08:17:06.115280 2026] [:error] [pid 39292:tid 39312] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Feb 28 08:17:06.330910 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat Feb 28 08:17:06.564364 2026] [:error] [pid 39292:tid 39302] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/wqqs.php
[Sat Feb 28 08:17:06.779946 2026] [:error] [pid 39292:tid 39307] [client 172.190.142.176:45598] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-318.php
[Sat Feb 28 08:17:07.046724 2026] [:error] [pid 39292:tid 39299] [client 172.190.142.176:45598] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aaI0A6IAO5fN7BxyqcHY5AAAAMU"]
[Sat Feb 28 08:17:07.727332 2026] [:error] [pid 11791:tid 11796] [client 172.190.142.176:11925] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aaI0A2uX5e1Q32gqxH3iEQAAAQM"]
[Sat Feb 28 08:17:08.397090 2026] [:error] [pid 11791:tid 11812] [client 172.190.142.176:29690] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aaI0BGuX5e1Q32gqxH3iEgAAARM"]
[Sat Feb 28 08:17:09.249841 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:39317] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dom.php"] [unique_id "aaI0BaIAO5fN7BxyqcHY9QAAANM"]
[Sat Feb 28 08:17:09.989499 2026] [:error] [pid 39183:tid 39202] [client 172.190.142.176:24162] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaI0BRCf4HvhVePw3LaHSAAAAAo"]
[Sat Feb 28 08:17:10.689787 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:29651] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaI0BqIAO5fN7BxyqcHY_wAAAME"]
[Sat Feb 28 08:17:11.577810 2026] [:error] [pid 39185:tid 39264] [client 172.190.142.176:47479] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaI0BxVE-FfM89u7BQZ1tgAAAJI"]
[Sat Feb 28 08:17:12.342868 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:33494] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaI0CH6mbajs3bzQGytOBgAAAVY"]
[Sat Feb 28 08:17:13.352713 2026] [:error] [pid 22194:tid 22202] [client 172.190.142.176:42397] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aaI0CX6mbajs3bzQGytODwAAAUY"]
[Sat Feb 28 08:17:13.959245 2026] [:error] [pid 22194:tid 22213] [client 172.190.142.176:11963] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aaI0CX6mbajs3bzQGytOEgAAAVE"]
[Sat Feb 28 08:17:14.568993 2026] [:error] [pid 22194:tid 22199] [client 172.190.142.176:42408] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aaI0Cn6mbajs3bzQGytOGAAAAUM"]
[Sat Feb 28 08:17:15.752512 2026] [:error] [pid 39183:tid 39210] [client 172.190.142.176:45619] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon3.php"] [unique_id "aaI0CxCf4HvhVePw3LaHUAAAABI"]
[Sat Feb 28 08:17:16.487287 2026] [:error] [pid 39183:tid 39209] [client 172.190.142.176:6773] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thui.php"] [unique_id "aaI0DBCf4HvhVePw3LaHUwAAABE"]
[Sat Feb 28 08:17:17.485065 2026] [:error] [pid 39183:tid 39216] [client 172.190.142.176:42385] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thui.php"] [unique_id "aaI0DRCf4HvhVePw3LaHWgAAABg"]
[Sat Feb 28 08:17:18.412354 2026] [:error] [pid 39183:tid 39197] [client 172.190.142.176:11941] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thui.php"] [unique_id "aaI0DhCf4HvhVePw3LaHYwAAAAU"]
[Sat Feb 28 08:17:19.278140 2026] [:error] [pid 39292:tid 39308] [client 172.190.142.176:47453] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thui.php"] [unique_id "aaI0D6IAO5fN7BxyqcHZGAAAAM4"]
[Sat Feb 28 08:17:19.892520 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:48427] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ebahvhhh.php"] [unique_id "aaI0D6IAO5fN7BxyqcHZGQAAAME"]
[Sat Feb 28 08:17:21.232904 2026] [:error] [pid 39184:tid 39240] [client 172.190.142.176:45603] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ebahvhhh.php"] [unique_id "aaI0EVtZF9Zd_U7easBbyQAAAFU"]
[Sat Feb 28 08:17:22.347050 2026] [:error] [pid 22194:tid 22207] [client 172.190.142.176:45613] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ebahvhhh.php"] [unique_id "aaI0En6mbajs3bzQGytOIQAAAUs"]
[Sat Feb 28 08:17:23.483826 2026] [:error] [pid 11791:tid 11810] [client 172.190.142.176:60747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ebahvhhh.php"] [unique_id "aaI0E2uX5e1Q32gqxH3iLgAAARE"]
[Sat Feb 28 08:17:24.456167 2026] [:error] [pid 22194:tid 22202] [client 172.190.142.176:6775] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/snq.php"] [unique_id "aaI0FH6mbajs3bzQGytOKQAAAUY"]
[Sat Feb 28 08:17:25.176212 2026] [:error] [pid 39183:tid 39208] [client 172.190.142.176:13962] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/snq.php"] [unique_id "aaI0FRCf4HvhVePw3LaHbwAAABA"]
[Sat Feb 28 08:17:26.290795 2026] [:error] [pid 11791:tid 11799] [client 172.190.142.176:47470] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/snq.php"] [unique_id "aaI0FmuX5e1Q32gqxH3iNQAAAQY"]
[Sat Feb 28 08:17:27.294704 2026] [:error] [pid 39184:tid 39228] [client 172.190.142.176:11358] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/snq.php"] [unique_id "aaI0F1tZF9Zd_U7easBb0wAAAEk"]
[Sat Feb 28 08:17:28.923023 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:10755] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mcs.php"] [unique_id "aaI0GKIAO5fN7BxyqcHZSgAAAMo"]
[Sat Feb 28 08:17:29.414205 2026] [:error] [pid 39184:tid 39240] [client 172.190.142.176:14716] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mcs.php"] [unique_id "aaI0GVtZF9Zd_U7easBb1gAAAFU"]
[Sat Feb 28 08:17:30.146450 2026] [:error] [pid 39184:tid 39242] [client 172.190.142.176:47451] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mcs.php"] [unique_id "aaI0GltZF9Zd_U7easBb2gAAAFc"]
[Sat Feb 28 08:17:30.648650 2026] [:error] [pid 39292:tid 39314] [client 172.190.142.176:14698] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mcs.php"] [unique_id "aaI0GqIAO5fN7BxyqcHZUwAAANQ"]
[Sat Feb 28 08:17:31.163343 2026] [:error] [pid 22194:tid 22201] [client 172.190.142.176:47463] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaI0G36mbajs3bzQGytOMgAAAUU"]
[Sat Feb 28 08:17:31.727841 2026] [:error] [pid 22194:tid 22202] [client 172.190.142.176:6611] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaI0G36mbajs3bzQGytOOgAAAUY"]
[Sat Feb 28 08:17:32.278351 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:42375] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaI0HH6mbajs3bzQGytOPwAAAUo"]
[Sat Feb 28 08:17:33.017354 2026] [:error] [pid 39185:tid 39246] [client 172.190.142.176:14696] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaI0HRVE-FfM89u7BQZ18AAAAIA"]
[Sat Feb 28 08:17:33.929072 2026] [:error] [pid 11791:tid 11793] [client 172.190.142.176:47456] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaI0HWuX5e1Q32gqxH3iSQAAAQA"]
[Sat Feb 28 08:17:34.848134 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:19910] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaI0HqIAO5fN7BxyqcHZZAAAAMs"]
[Sat Feb 28 08:17:35.604818 2026] [:error] [pid 39292:tid 39307] [client 172.190.142.176:19934] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaI0H6IAO5fN7BxyqcHZbgAAAM0"]
[Sat Feb 28 08:17:36.337427 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:37213] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xleet.php"] [unique_id "aaI0IKIAO5fN7BxyqcHZdAAAANc"]
[Sat Feb 28 08:17:37.149824 2026] [:error] [pid 39184:tid 39243] [client 172.190.142.176:41290] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaI0IVtZF9Zd_U7easBb9wAAAFg"]
[Sat Feb 28 08:17:38.052813 2026] [:error] [pid 11791:tid 11796] [client 172.190.142.176:6473] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaI0ImuX5e1Q32gqxH3iVQAAAQM"]
[Sat Feb 28 08:17:38.917348 2026] [:error] [pid 11791:tid 11801] [client 172.190.142.176:19911] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaI0ImuX5e1Q32gqxH3iXgAAAQg"]
[Sat Feb 28 08:17:39.531019 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:11356] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaI0I36mbajs3bzQGytOSgAAAUo"]
[Sat Feb 28 08:17:40.197386 2026] [:error] [pid 22194:tid 22198] [client 172.190.142.176:6701] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "aaI0JH6mbajs3bzQGytOSwAAAUI"]
[Sat Feb 28 08:17:40.739181 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:13854] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "aaI0JH6mbajs3bzQGytOUwAAAVY"]
[Sat Feb 28 08:17:41.641628 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:41330] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "aaI0JaIAO5fN7BxyqcHZkQAAAMI"]
[Sat Feb 28 08:17:42.300052 2026] [:error] [pid 11791:tid 11816] [client 172.190.142.176:13874] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "aaI0JmuX5e1Q32gqxH3ibQAAARc"]
[Sat Feb 28 08:17:43.096880 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:6688] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaI0J6IAO5fN7BxyqcHZnQAAAM8"]
[Sat Feb 28 08:17:43.600509 2026] [:error] [pid 22194:tid 22216] [client 172.190.142.176:10771] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaI0J36mbajs3bzQGytOYwAAAVQ"]
[Sat Feb 28 08:17:44.187458 2026] [:error] [pid 22194:tid 22213] [client 172.190.142.176:13847] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaI0KH6mbajs3bzQGytOaAAAAVE"]
[Sat Feb 28 08:17:44.760496 2026] [:error] [pid 22194:tid 22212] [client 172.190.142.176:62508] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xa.php"] [unique_id "aaI0KH6mbajs3bzQGytOawAAAVA"]
[Sat Feb 28 08:17:45.509151 2026] [:error] [pid 39184:tid 39234] [client 172.190.142.176:62479] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aaI0KVtZF9Zd_U7easBb_AAAAE8"]
[Sat Feb 28 08:17:46.240477 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:15059] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aaI0Kn6mbajs3bzQGytOcAAAAVY"]
[Sat Feb 28 08:17:46.930081 2026] [:error] [pid 39185:tid 39251] [client 172.190.142.176:15040] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aaI0KhVE-FfM89u7BQZ2BQAAAIU"]
[Sat Feb 28 08:17:47.686263 2026] [:error] [pid 11791:tid 11795] [client 172.190.142.176:14691] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/motu.php"] [unique_id "aaI0K2uX5e1Q32gqxH3idwAAAQI"]
[Sat Feb 28 08:17:48.697475 2026] [:error] [pid 39292:tid 39314] [client 172.190.142.176:14668] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmpls.php"] [unique_id "aaI0LKIAO5fN7BxyqcHZswAAANQ"]
[Sat Feb 28 08:17:49.305060 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:6718] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmpls.php"] [unique_id "aaI0LaIAO5fN7BxyqcHZtwAAAMo"]
[Sat Feb 28 08:17:49.802009 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:6683] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmpls.php"] [unique_id "aaI0LaIAO5fN7BxyqcHZugAAAMc"]
[Sat Feb 28 08:17:50.665785 2026] [:error] [pid 11791:tid 11808] [client 172.190.142.176:42584] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tmpls.php"] [unique_id "aaI0LmuX5e1Q32gqxH3ifQAAAQ8"]
[Sat Feb 28 08:17:51.255180 2026] [:error] [pid 39185:tid 39260] [client 172.190.142.176:12494] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bsg-management/php.php"] [unique_id "aaI0LxVE-FfM89u7BQZ2CwAAAI4"]
[Sat Feb 28 08:17:51.771433 2026] [:error] [pid 22194:tid 22212] [client 172.190.142.176:15085] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bsg-management/php.php"] [unique_id "aaI0L36mbajs3bzQGytOjwAAAVA"]
[Sat Feb 28 08:17:52.373719 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:17387] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bsg-management/php.php"] [unique_id "aaI0MKIAO5fN7BxyqcHZ7gAAAM8"]
[Sat Feb 28 08:17:53.029673 2026] [:error] [pid 22194:tid 22210] [client 172.190.142.176:21757] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bsg-management/php.php"] [unique_id "aaI0MX6mbajs3bzQGytOlgAAAU4"]
[Sat Feb 28 08:17:53.730872 2026] [:error] [pid 39292:tid 39297] [client 172.190.142.176:10349] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pouhg.php"] [unique_id "aaI0MaIAO5fN7BxyqcHZ9AAAAMM"]
[Sat Feb 28 08:17:54.385607 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:14597] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pouhg.php"] [unique_id "aaI0MqIAO5fN7BxyqcHZ-AAAAMo"]
[Sat Feb 28 08:17:55.274753 2026] [:error] [pid 22194:tid 22202] [client 172.190.142.176:25287] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pouhg.php"] [unique_id "aaI0M36mbajs3bzQGytOnQAAAUY"]
[Sat Feb 28 08:17:55.934592 2026] [:error] [pid 22194:tid 22204] [client 172.190.142.176:21326] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pouhg.php"] [unique_id "aaI0M36mbajs3bzQGytOogAAAUg"]
[Sat Feb 28 08:17:56.752915 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:32820] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws61.php"] [unique_id "aaI0NKIAO5fN7BxyqcHaAwAAAMc"]
[Sat Feb 28 08:17:57.613734 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:11407] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws61.php"] [unique_id "aaI0NaIAO5fN7BxyqcHaDAAAANY"]
[Sat Feb 28 08:17:58.223317 2026] [:error] [pid 22194:tid 22200] [client 172.190.142.176:42801] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws61.php"] [unique_id "aaI0Nn6mbajs3bzQGytOpgAAAUQ"]
[Sat Feb 28 08:17:58.742974 2026] [:error] [pid 11791:tid 11803] [client 172.190.142.176:5903] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws61.php"] [unique_id "aaI0NmuX5e1Q32gqxH3ilQAAAQo"]
[Sat Feb 28 08:17:59.333143 2026] [:error] [pid 11791:tid 11801] [client 172.190.142.176:39817] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaI0N2uX5e1Q32gqxH3imAAAAQg"]
[Sat Feb 28 08:17:59.853765 2026] [:error] [pid 22194:tid 22214] [client 172.190.142.176:39811] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaI0N36mbajs3bzQGytOqwAAAVI"]
[Sat Feb 28 08:18:00.307076 2026] [:error] [pid 11791:tid 11812] [client 172.190.142.176:62057] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaI0OGuX5e1Q32gqxH3imgAAARM"]
[Sat Feb 28 08:18:00.908496 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:18544] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaI0OKIAO5fN7BxyqcHaKAAAAME"]
[Sat Feb 28 08:18:01.444106 2026] [:error] [pid 22194:tid 22204] [client 172.190.142.176:5912] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaI0OX6mbajs3bzQGytOrgAAAUg"]
[Sat Feb 28 08:18:02.046630 2026] [:error] [pid 22194:tid 22209] [client 172.190.142.176:17817] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaI0On6mbajs3bzQGytOtAAAAU0"]
[Sat Feb 28 08:18:02.476027 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:47873] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaI0OqIAO5fN7BxyqcHaLwAAAMo"]
[Sat Feb 28 08:18:02.964583 2026] [:error] [pid 39292:tid 39302] [client 172.190.142.176:29959] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/app.php"] [unique_id "aaI0OqIAO5fN7BxyqcHaNQAAAMg"]
[Sat Feb 28 08:18:03.469371 2026] [:error] [pid 22194:tid 22205] [client 172.190.142.176:17847] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws59.php"] [unique_id "aaI0O36mbajs3bzQGytOuQAAAUk"]
[Sat Feb 28 08:18:04.192304 2026] [:error] [pid 22194:tid 22217] [client 172.190.142.176:31416] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws59.php"] [unique_id "aaI0PH6mbajs3bzQGytOwgAAAVU"]
[Sat Feb 28 08:18:05.198095 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:12782] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws59.php"] [unique_id "aaI0PaIAO5fN7BxyqcHaQAAAAMI"]
[Sat Feb 28 08:18:05.680715 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:9559] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws59.php"] [unique_id "aaI0PaIAO5fN7BxyqcHaRQAAAMc"]
[Sat Feb 28 08:18:06.219733 2026] [:error] [pid 39184:tid 39235] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Feb 28 08:18:06.427424 2026] [:error] [pid 39184:tid 39237] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Sat Feb 28 08:18:06.639744 2026] [:error] [pid 39184:tid 39222] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Feb 28 08:18:06.847464 2026] [:error] [pid 39184:tid 39241] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Sat Feb 28 08:18:07.054254 2026] [:error] [pid 39184:tid 39239] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Sat Feb 28 08:18:07.268940 2026] [:error] [pid 39184:tid 39243] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Sat Feb 28 08:18:07.477195 2026] [:error] [pid 39184:tid 39231] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Sat Feb 28 08:18:07.750689 2026] [:error] [pid 39184:tid 39233] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php
[Sat Feb 28 08:18:07.974609 2026] [:error] [pid 39184:tid 39242] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/dsd.php
[Sat Feb 28 08:18:08.181465 2026] [:error] [pid 39184:tid 39229] [client 172.190.142.176:42830] File does not exist: /usr/local/apache/htdocs/suspended-page/guk.php
[Sat Feb 28 08:18:08.595117 2026] [:error] [pid 39184:tid 39226] [client 172.190.142.176:42830] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaI0QFtZF9Zd_U7easBcJgAAAEc"]
[Sat Feb 28 08:18:09.060972 2026] [:error] [pid 22194:tid 22208] [client 172.190.142.176:12141] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaI0QX6mbajs3bzQGytOzQAAAUw"]
[Sat Feb 28 08:18:09.558619 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:55964] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaI0QaIAO5fN7BxyqcHaTQAAAME"]
[Sat Feb 28 08:18:10.010238 2026] [:error] [pid 39184:tid 39219] [client 172.190.142.176:12567] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ze.php"] [unique_id "aaI0QltZF9Zd_U7easBcLAAAAEA"]
[Sat Feb 28 08:18:10.576947 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:31364] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file52.php"] [unique_id "aaI0Qn6mbajs3bzQGytO0gAAAVY"]
[Sat Feb 28 08:18:11.167072 2026] [:error] [pid 22194:tid 22220] [client 172.190.142.176:18546] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file52.php"] [unique_id "aaI0Q36mbajs3bzQGytO2AAAAVg"]
[Sat Feb 28 08:18:12.024978 2026] [:error] [pid 39292:tid 39314] [client 172.190.142.176:47615] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file52.php"] [unique_id "aaI0RKIAO5fN7BxyqcHaVgAAANQ"]
[Sat Feb 28 08:18:12.719259 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:12747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file52.php"] [unique_id "aaI0RKIAO5fN7BxyqcHaWAAAAMQ"]
[Sat Feb 28 08:18:13.189474 2026] [:error] [pid 11791:tid 11809] [client 172.190.142.176:60949] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tax.php"] [unique_id "aaI0RWuX5e1Q32gqxH3ioQAAARA"]
[Sat Feb 28 08:18:13.628611 2026] [:error] [pid 39185:tid 39263] [client 172.190.142.176:18524] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tax.php"] [unique_id "aaI0RRVE-FfM89u7BQZ2MAAAAJE"]
[Sat Feb 28 08:18:14.273291 2026] [:error] [pid 11791:tid 11812] [client 172.190.142.176:12772] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tax.php"] [unique_id "aaI0RmuX5e1Q32gqxH3iqwAAARM"]
[Sat Feb 28 08:18:14.736150 2026] [:error] [pid 11791:tid 11811] [client 172.190.142.176:44970] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tax.php"] [unique_id "aaI0RmuX5e1Q32gqxH3irgAAARI"]
[Sat Feb 28 08:18:15.327715 2026] [:error] [pid 11791:tid 11808] [client 172.190.142.176:47588] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaI0R2uX5e1Q32gqxH3isAAAAQ8"]
[Sat Feb 28 08:18:15.963887 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:47522] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaI0R6IAO5fN7BxyqcHaYAAAAM8"]
[Sat Feb 28 08:18:16.474009 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:60967] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaI0SKIAO5fN7BxyqcHaZgAAAMQ"]
[Sat Feb 28 08:18:17.228463 2026] [:error] [pid 39185:tid 39250] [client 172.190.142.176:60943] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "aaI0SRVE-FfM89u7BQZ2OwAAAIQ"]
[Sat Feb 28 08:18:17.983511 2026] [:error] [pid 39185:tid 39263] [client 172.190.142.176:12565] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaI0SRVE-FfM89u7BQZ2QAAAAJE"]
[Sat Feb 28 08:18:18.589720 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:12102] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaI0SqIAO5fN7BxyqcHaawAAAMw"]
[Sat Feb 28 08:18:19.141328 2026] [:error] [pid 39185:tid 39268] [client 172.190.142.176:47556] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaI0SxVE-FfM89u7BQZ2QgAAAJY"]
[Sat Feb 28 08:18:19.953686 2026] [:error] [pid 39292:tid 39294] [client 172.190.142.176:44931] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ty.php"] [unique_id "aaI0S6IAO5fN7BxyqcHadAAAAMA"]
[Sat Feb 28 08:18:20.680124 2026] [:error] [pid 39184:tid 39232] [client 172.190.142.176:22496] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brc.php"] [unique_id "aaI0TFtZF9Zd_U7easBcOgAAAE0"]
[Sat Feb 28 08:18:21.498263 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:12157] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brc.php"] [unique_id "aaI0TaIAO5fN7BxyqcHadwAAAM8"]
[Sat Feb 28 08:18:22.116688 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:9582] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brc.php"] [unique_id "aaI0TqIAO5fN7BxyqcHafAAAANM"]
[Sat Feb 28 08:18:22.608498 2026] [:error] [pid 39185:tid 39266] [client 172.190.142.176:22522] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/brc.php"] [unique_id "aaI0ThVE-FfM89u7BQZ2SgAAAJQ"]
[Sat Feb 28 08:18:23.354046 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:47559] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0T6IAO5fN7BxyqcHagAAAAMk"]
[Sat Feb 28 08:18:23.890721 2026] [:error] [pid 39185:tid 39247] [client 172.190.142.176:60986] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0TxVE-FfM89u7BQZ2TwAAAIE"]
[Sat Feb 28 08:18:24.655709 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:49596] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0UKIAO5fN7BxyqcHahwAAAMs"]
[Sat Feb 28 08:18:25.300962 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:31401] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0UaIAO5fN7BxyqcHaigAAANY"]
[Sat Feb 28 08:18:26.246161 2026] [:error] [pid 39185:tid 39259] [client 172.190.142.176:18539] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaI0UhVE-FfM89u7BQZ2VAAAAI0"]
[Sat Feb 28 08:18:26.944675 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:38416] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaI0UqIAO5fN7BxyqcHalgAAAMc"]
[Sat Feb 28 08:18:27.485459 2026] [:error] [pid 39184:tid 39235] [client 172.190.142.176:12760] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaI0U1tZF9Zd_U7easBcPwAAAFA"]
[Sat Feb 28 08:18:27.938955 2026] [:error] [pid 39183:tid 39205] [client 172.190.142.176:38422] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaI0UxCf4HvhVePw3LaHpwAAAA0"]
[Sat Feb 28 08:18:28.378332 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:38406] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fr/ms.php"] [unique_id "aaI0VH6mbajs3bzQGytPFQAAAUo"]
[Sat Feb 28 08:18:28.860644 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:49576] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fr/ms.php"] [unique_id "aaI0VKIAO5fN7BxyqcHarAAAANc"]
[Sat Feb 28 08:18:29.295660 2026] [:error] [pid 22194:tid 22205] [client 172.190.142.176:60942] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fr/ms.php"] [unique_id "aaI0VX6mbajs3bzQGytPGwAAAUk"]
[Sat Feb 28 08:18:29.747192 2026] [:error] [pid 39183:tid 39216] [client 172.190.142.176:9596] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fr/ms.php"] [unique_id "aaI0VRCf4HvhVePw3LaHqgAAABg"]
[Sat Feb 28 08:18:30.275852 2026] [:error] [pid 39184:tid 39220] [client 172.190.142.176:22492] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Ov-Simple1.php"] [unique_id "aaI0VltZF9Zd_U7easBcRAAAAEE"]
[Sat Feb 28 08:18:30.761278 2026] [:error] [pid 39185:tid 39260] [client 172.190.142.176:55951] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Ov-Simple1.php"] [unique_id "aaI0VhVE-FfM89u7BQZ2XgAAAI4"]
[Sat Feb 28 08:18:31.225931 2026] [:error] [pid 39184:tid 39224] [client 172.190.142.176:47934] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Ov-Simple1.php"] [unique_id "aaI0V1tZF9Zd_U7easBcTgAAAEU"]
[Sat Feb 28 08:18:31.753755 2026] [:error] [pid 39183:tid 39202] [client 172.190.142.176:55998] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Ov-Simple1.php"] [unique_id "aaI0VxCf4HvhVePw3LaHrgAAAAo"]
[Sat Feb 28 08:18:32.225838 2026] [:error] [pid 39185:tid 39270] [client 172.190.142.176:55948] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gool.php"] [unique_id "aaI0WBVE-FfM89u7BQZ2YAAAAJg"]
[Sat Feb 28 08:18:32.734113 2026] [:error] [pid 39185:tid 39269] [client 172.190.142.176:6137] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gool.php"] [unique_id "aaI0WBVE-FfM89u7BQZ2YgAAAJc"]
[Sat Feb 28 08:18:33.316670 2026] [:error] [pid 39292:tid 39294] [client 172.190.142.176:60964] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gool.php"] [unique_id "aaI0WaIAO5fN7BxyqcHazQAAAMA"]
[Sat Feb 28 08:18:33.787064 2026] [:error] [pid 22194:tid 22208] [client 172.190.142.176:44973] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gool.php"] [unique_id "aaI0WX6mbajs3bzQGytPHwAAAUw"]
[Sat Feb 28 08:18:34.370273 2026] [:error] [pid 22194:tid 22200] [client 172.190.142.176:60980] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaI0Wn6mbajs3bzQGytPIQAAAUQ"]
[Sat Feb 28 08:18:34.876592 2026] [:error] [pid 39183:tid 39195] [client 172.190.142.176:6121] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaI0WhCf4HvhVePw3LaHtQAAAAM"]
[Sat Feb 28 08:18:35.318754 2026] [:error] [pid 11791:tid 11806] [client 172.190.142.176:6080] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaI0W2uX5e1Q32gqxH3ixAAAAQ0"]
[Sat Feb 28 08:18:35.898532 2026] [:error] [pid 11791:tid 11803] [client 172.190.142.176:38443] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1vx.php"] [unique_id "aaI0W2uX5e1Q32gqxH3ixgAAAQo"]
[Sat Feb 28 08:18:36.518465 2026] [:error] [pid 39184:tid 39225] [client 172.190.142.176:12574] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mans.php"] [unique_id "aaI0XFtZF9Zd_U7easBcVwAAAEY"]
[Sat Feb 28 08:18:37.179659 2026] [:error] [pid 39185:tid 39257] [client 172.190.142.176:6133] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mans.php"] [unique_id "aaI0XRVE-FfM89u7BQZ2bAAAAIs"]
[Sat Feb 28 08:18:37.707461 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:6085] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mans.php"] [unique_id "aaI0XaIAO5fN7BxyqcHa8gAAANc"]
[Sat Feb 28 08:18:38.296057 2026] [:error] [pid 39184:tid 39235] [client 172.190.142.176:6104] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mans.php"] [unique_id "aaI0XltZF9Zd_U7easBcXAAAAFA"]
[Sat Feb 28 08:18:38.758974 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:13393] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rum.php"] [unique_id "aaI0Xn6mbajs3bzQGytPLQAAAVY"]
[Sat Feb 28 08:18:39.204556 2026] [:error] [pid 39185:tid 39268] [client 172.190.142.176:12780] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rum.php"] [unique_id "aaI0XxVE-FfM89u7BQZ2dAAAAJY"]
[Sat Feb 28 08:18:39.670281 2026] [:error] [pid 22194:tid 22210] [client 172.190.142.176:49593] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rum.php"] [unique_id "aaI0X36mbajs3bzQGytPNQAAAU4"]
[Sat Feb 28 08:18:40.647339 2026] [:error] [pid 39183:tid 39196] [client 172.190.142.176:12099] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rum.php"] [unique_id "aaI0YBCf4HvhVePw3LaHuwAAAAQ"]
[Sat Feb 28 08:18:41.428331 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:13403] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaI0YaIAO5fN7BxyqcHbPgAAAMI"]
[Sat Feb 28 08:18:41.895014 2026] [:error] [pid 11791:tid 11804] [client 172.190.142.176:6010] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaI0YWuX5e1Q32gqxH3izQAAAQs"]
[Sat Feb 28 08:18:42.482734 2026] [:error] [pid 11791:tid 11814] [client 172.190.142.176:44979] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaI0YmuX5e1Q32gqxH3izgAAARU"]
[Sat Feb 28 08:18:43.001808 2026] [:error] [pid 11791:tid 11806] [client 172.190.142.176:34730] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaI0Y2uX5e1Q32gqxH3i0AAAAQ0"]
[Sat Feb 28 08:18:43.428054 2026] [:error] [pid 39184:tid 39242] [client 172.190.142.176:6141] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wio.php"] [unique_id "aaI0Y1tZF9Zd_U7easBccgAAAFc"]
[Sat Feb 28 08:18:43.885905 2026] [:error] [pid 39292:tid 39297] [client 172.190.142.176:6108] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wio.php"] [unique_id "aaI0Y6IAO5fN7BxyqcHbXwAAAMM"]
[Sat Feb 28 08:18:44.375455 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:22501] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wio.php"] [unique_id "aaI0ZKIAO5fN7BxyqcHbZQAAAMk"]
[Sat Feb 28 08:18:44.800144 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:34734] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wio.php"] [unique_id "aaI0ZKIAO5fN7BxyqcHbawAAAMc"]
[Sat Feb 28 08:18:45.290238 2026] [:error] [pid 39292:tid 39312] [client 172.190.142.176:38451] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aaI0ZaIAO5fN7BxyqcHbcwAAANI"]
[Sat Feb 28 08:18:45.726477 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:34748] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aaI0ZaIAO5fN7BxyqcHbeQAAANM"]
[Sat Feb 28 08:18:46.287135 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:6819] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aaI0ZqIAO5fN7BxyqcHbfgAAAMo"]
[Sat Feb 28 08:18:46.797990 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:48012] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clasa99.php"] [unique_id "aaI0ZqIAO5fN7BxyqcHbhgAAAMY"]
[Sat Feb 28 08:18:47.303173 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:23676] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaI0Z6IAO5fN7BxyqcHbjgAAAMI"]
[Sat Feb 28 08:18:47.788757 2026] [:error] [pid 22194:tid 22201] [client 172.190.142.176:47531] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaI0Z36mbajs3bzQGytPTwAAAUU"]
[Sat Feb 28 08:18:48.255026 2026] [:error] [pid 11791:tid 11797] [client 172.190.142.176:12133] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaI0aGuX5e1Q32gqxH3i2AAAAQQ"]
[Sat Feb 28 08:18:48.761960 2026] [:error] [pid 22194:tid 22214] [client 172.190.142.176:49597] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaI0aH6mbajs3bzQGytPVAAAAVI"]
[Sat Feb 28 08:18:49.242704 2026] [:error] [pid 11791:tid 11812] [client 172.190.142.176:23634] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws62.php"] [unique_id "aaI0aWuX5e1Q32gqxH3i2gAAARM"]
[Sat Feb 28 08:18:49.744913 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:12145] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws62.php"] [unique_id "aaI0aaIAO5fN7BxyqcHbmQAAAMc"]
[Sat Feb 28 08:18:50.165139 2026] [:error] [pid 22194:tid 22196] [client 172.190.142.176:23665] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws62.php"] [unique_id "aaI0an6mbajs3bzQGytPXQAAAUA"]
[Sat Feb 28 08:18:50.731302 2026] [:error] [pid 39185:tid 39270] [client 172.190.142.176:6101] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws62.php"] [unique_id "aaI0ahVE-FfM89u7BQZ2igAAAJg"]
[Sat Feb 28 08:18:51.312493 2026] [:error] [pid 39185:tid 39248] [client 172.190.142.176:38444] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aaI0axVE-FfM89u7BQZ2jAAAAII"]
[Sat Feb 28 08:18:51.753942 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:12115] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aaI0a6IAO5fN7BxyqcHbogAAAMc"]
[Sat Feb 28 08:18:52.203866 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:6088] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aaI0bKIAO5fN7BxyqcHbpgAAAMw"]
[Sat Feb 28 08:18:52.689104 2026] [:error] [pid 39185:tid 39255] [client 172.190.142.176:44945] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/new4.php"] [unique_id "aaI0bBVE-FfM89u7BQZ2jgAAAIk"]
[Sat Feb 28 08:18:53.205925 2026] [:error] [pid 39185:tid 39251] [client 172.190.142.176:55258] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaI0bRVE-FfM89u7BQZ2kAAAAIU"]
[Sat Feb 28 08:18:53.698642 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:13424] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaI0bX6mbajs3bzQGytPdQAAAVY"]
[Sat Feb 28 08:18:54.282669 2026] [:error] [pid 39184:tid 39243] [client 172.190.142.176:49595] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaI0bltZF9Zd_U7easBcegAAAFg"]
[Sat Feb 28 08:18:54.726670 2026] [:error] [pid 11791:tid 11806] [client 172.190.142.176:44102] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaI0bmuX5e1Q32gqxH3i4QAAAQ0"]
[Sat Feb 28 08:18:55.245220 2026] [:error] [pid 11791:tid 11803] [client 172.190.142.176:6787] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aaI0b2uX5e1Q32gqxH3i5AAAAQo"]
[Sat Feb 28 08:18:55.763554 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:44976] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aaI0b6IAO5fN7BxyqcHbswAAAMk"]
[Sat Feb 28 08:18:56.299515 2026] [:error] [pid 11791:tid 11793] [client 172.190.142.176:60592] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aaI0cGuX5e1Q32gqxH3i5wAAAQA"]
[Sat Feb 28 08:18:56.765168 2026] [:error] [pid 39183:tid 39215] [client 172.190.142.176:44150] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/co.php"] [unique_id "aaI0cBCf4HvhVePw3LaHygAAABc"]
[Sat Feb 28 08:18:57.211746 2026] [:error] [pid 39184:tid 39224] [client 172.190.142.176:44127] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxc.php"] [unique_id "aaI0cVtZF9Zd_U7easBcgAAAAEU"]
[Sat Feb 28 08:18:57.716245 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:44980] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxc.php"] [unique_id "aaI0caIAO5fN7BxyqcHbwQAAANM"]
[Sat Feb 28 08:18:58.441605 2026] [:error] [pid 22194:tid 22215] [client 172.190.142.176:48051] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxc.php"] [unique_id "aaI0cn6mbajs3bzQGytPlwAAAVM"]
[Sat Feb 28 08:18:59.144713 2026] [:error] [pid 11791:tid 11798] [client 172.190.142.176:5988] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxc.php"] [unique_id "aaI0c2uX5e1Q32gqxH3i7AAAAQU"]
[Sat Feb 28 08:18:59.838542 2026] [:error] [pid 39185:tid 39256] [client 172.190.142.176:60547] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gjm.php"] [unique_id "aaI0cxVE-FfM89u7BQZ2nAAAAIo"]
[Sat Feb 28 08:19:00.492346 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:60579] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gjm.php"] [unique_id "aaI0dKIAO5fN7BxyqcHbygAAAMY"]
[Sat Feb 28 08:19:00.992462 2026] [:error] [pid 11791:tid 11815] [client 172.190.142.176:44987] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gjm.php"] [unique_id "aaI0dGuX5e1Q32gqxH3i7gAAARY"]
[Sat Feb 28 08:19:01.427124 2026] [:error] [pid 39185:tid 39258] [client 172.190.142.176:44125] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gjm.php"] [unique_id "aaI0dRVE-FfM89u7BQZ2oAAAAIw"]
[Sat Feb 28 08:19:01.876786 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:48720] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ex.php"] [unique_id "aaI0dX6mbajs3bzQGytPsAAAAVY"]
[Sat Feb 28 08:19:02.321540 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:48707] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ex.php"] [unique_id "aaI0dqIAO5fN7BxyqcHb0gAAANY"]
[Sat Feb 28 08:19:02.869443 2026] [:error] [pid 39292:tid 39308] [client 172.190.142.176:6095] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ex.php"] [unique_id "aaI0dqIAO5fN7BxyqcHb1QAAAM4"]
[Sat Feb 28 08:19:03.523201 2026] [:error] [pid 39183:tid 39203] [client 172.190.142.176:34703] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ex.php"] [unique_id "aaI0dxCf4HvhVePw3LaH1gAAAAs"]
[Sat Feb 28 08:19:04.003881 2026] [:error] [pid 11791:tid 11799] [client 172.190.142.176:38403] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/post.php"] [unique_id "aaI0eGuX5e1Q32gqxH3i7wAAAQY"]
[Sat Feb 28 08:19:04.611880 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:34703] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/post.php"] [unique_id "aaI0eH6mbajs3bzQGytPyQAAAUo"]
[Sat Feb 28 08:19:05.134650 2026] [:error] [pid 39292:tid 39308] [client 172.190.142.176:5956] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/post.php"] [unique_id "aaI0eaIAO5fN7BxyqcHb4gAAAM4"]
[Sat Feb 28 08:19:05.602680 2026] [:error] [pid 39185:tid 39249] [client 172.190.142.176:6094] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/post.php"] [unique_id "aaI0eRVE-FfM89u7BQZ2ogAAAIM"]
[Sat Feb 28 08:19:06.292473 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:5962] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaI0eqIAO5fN7BxyqcHb6AAAAMs"]
[Sat Feb 28 08:19:06.753410 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:44115] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaI0eqIAO5fN7BxyqcHb6wAAANY"]
[Sat Feb 28 08:19:07.364919 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:23669] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaI0e36mbajs3bzQGytP4AAAAUo"]
[Sat Feb 28 08:19:07.843167 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:42852] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaI0e6IAO5fN7BxyqcHb9gAAAMQ"]
[Sat Feb 28 08:19:08.487926 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/jq.php
[Sat Feb 28 08:19:08.703408 2026] [:error] [pid 39292:tid 39310] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/x7.php
[Sat Feb 28 08:19:08.935405 2026] [:error] [pid 39292:tid 39312] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/bes.php
[Sat Feb 28 08:19:09.151127 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/sadd.php
[Sat Feb 28 08:19:09.367593 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Sat Feb 28 08:19:09.582649 2026] [:error] [pid 39292:tid 39297] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Sat Feb 28 08:19:09.798645 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Feb 28 08:19:10.023496 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Sat Feb 28 08:19:10.239793 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/eauu.php
[Sat Feb 28 08:19:11.717950 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/fasx.php
[Sat Feb 28 08:19:11.933577 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:6090] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Sat Feb 28 08:19:12.149044 2026] [:error] [pid 39292:tid 39294] [client 172.190.142.176:6090] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nzv.php"] [unique_id "aaI0gKIAO5fN7BxyqcHcGAAAAMA"]
[Sat Feb 28 08:19:12.904043 2026] [:error] [pid 22194:tid 22212] [client 172.190.142.176:60574] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nzv.php"] [unique_id "aaI0gH6mbajs3bzQGytP8gAAAVA"]
[Sat Feb 28 08:19:13.544739 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:5971] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nzv.php"] [unique_id "aaI0gaIAO5fN7BxyqcHcHQAAAME"]
[Sat Feb 28 08:19:14.086082 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:60582] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nzv.php"] [unique_id "aaI0gqIAO5fN7BxyqcHcIgAAAMY"]
[Sat Feb 28 08:19:15.034833 2026] [:error] [pid 11791:tid 11815] [client 172.190.142.176:38429] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaI0g2uX5e1Q32gqxH3jAQAAARY"]
[Sat Feb 28 08:19:16.107488 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:60549] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaI0hKIAO5fN7BxyqcHcKQAAANc"]
[Sat Feb 28 08:19:16.796954 2026] [:error] [pid 39183:tid 39209] [client 172.190.142.176:5977] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaI0hBCf4HvhVePw3LaH3QAAABE"]
[Sat Feb 28 08:19:17.691825 2026] [:error] [pid 39184:tid 39239] [client 172.190.142.176:60606] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "aaI0hVtZF9Zd_U7easBciwAAAFQ"]
[Sat Feb 28 08:19:18.171032 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:44134] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "aaI0hqIAO5fN7BxyqcHcPgAAAM8"]
[Sat Feb 28 08:19:19.351318 2026] [:error] [pid 39292:tid 39318] [client 172.190.142.176:55295] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "aaI0h6IAO5fN7BxyqcHcTAAAANg"]
[Sat Feb 28 08:19:20.009861 2026] [:error] [pid 22194:tid 22200] [client 172.190.142.176:13379] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "aaI0iH6mbajs3bzQGytP9wAAAUQ"]
[Sat Feb 28 08:19:21.499606 2026] [:error] [pid 11791:tid 11794] [client 172.190.142.176:56139] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "aaI0iWuX5e1Q32gqxH3jCgAAAQE"]
[Sat Feb 28 08:19:22.042169 2026] [:error] [pid 39185:tid 39263] [client 172.190.142.176:56135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nhr.php"] [unique_id "aaI0ihVE-FfM89u7BQZ2zAAAAJE"]
[Sat Feb 28 08:19:22.755664 2026] [:error] [pid 39292:tid 39294] [client 172.190.142.176:44135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nhr.php"] [unique_id "aaI0iqIAO5fN7BxyqcHcaAAAAMA"]
[Sat Feb 28 08:19:23.244733 2026] [:error] [pid 39292:tid 39307] [client 172.190.142.176:61303] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nhr.php"] [unique_id "aaI0i6IAO5fN7BxyqcHccAAAAM0"]
[Sat Feb 28 08:19:23.819107 2026] [:error] [pid 11791:tid 11808] [client 172.190.142.176:44154] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nhr.php"] [unique_id "aaI0i2uX5e1Q32gqxH3jDAAAAQ8"]
[Sat Feb 28 08:19:24.453170 2026] [:error] [pid 39292:tid 39302] [client 172.190.142.176:10256] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaI0jKIAO5fN7BxyqcHcdwAAAMg"]
[Sat Feb 28 08:19:25.119179 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:56129] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaI0jaIAO5fN7BxyqcHcfQAAAMk"]
[Sat Feb 28 08:19:25.704453 2026] [:error] [pid 22194:tid 22198] [client 172.190.142.176:29709] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaI0jX6mbajs3bzQGytQBgAAAUI"]
[Sat Feb 28 08:19:26.550430 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:48755] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "aaI0jqIAO5fN7BxyqcHchwAAAMI"]
[Sat Feb 28 08:19:27.381007 2026] [:error] [pid 39185:tid 39260] [client 172.190.142.176:55254] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "aaI0jxVE-FfM89u7BQZ20gAAAI4"]
[Sat Feb 28 08:19:28.343810 2026] [:error] [pid 22194:tid 22207] [client 172.190.142.176:60587] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "aaI0kH6mbajs3bzQGytQDAAAAUs"]
[Sat Feb 28 08:19:29.938063 2026] [:error] [pid 22194:tid 22219] [client 172.190.142.176:49169] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "aaI0kX6mbajs3bzQGytQFAAAAVc"]
[Sat Feb 28 08:19:30.514194 2026] [:error] [pid 11791:tid 11803] [client 172.190.142.176:61308] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "aaI0kmuX5e1Q32gqxH3jFAAAAQo"]
[Sat Feb 28 08:19:31.490742 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:55284] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1061.php"] [unique_id "aaI0k6IAO5fN7BxyqcHcsgAAAMQ"]
[Sat Feb 28 08:19:32.660741 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:20788] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1061.php"] [unique_id "aaI0lKIAO5fN7BxyqcHcuAAAAMw"]
[Sat Feb 28 08:19:33.462426 2026] [:error] [pid 39292:tid 39309] [client 172.190.142.176:6562] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1061.php"] [unique_id "aaI0laIAO5fN7BxyqcHcvgAAAM8"]
[Sat Feb 28 08:19:34.575334 2026] [:error] [pid 39292:tid 39302] [client 172.190.142.176:17697] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1061.php"] [unique_id "aaI0lqIAO5fN7BxyqcHcxQAAAMg"]
[Sat Feb 28 08:19:36.039248 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:13507] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aaI0mKIAO5fN7BxyqcHczAAAAMc"]
[Sat Feb 28 08:19:36.930470 2026] [:error] [pid 11791:tid 11803] [client 172.190.142.176:10254] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aaI0mGuX5e1Q32gqxH3jJQAAAQo"]
[Sat Feb 28 08:19:37.509171 2026] [:error] [pid 39185:tid 39268] [client 172.190.142.176:20618] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aaI0mRVE-FfM89u7BQZ22wAAAJY"]
[Sat Feb 28 08:19:38.688786 2026] [:error] [pid 22194:tid 22209] [client 172.190.142.176:56156] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwq13.php"] [unique_id "aaI0mn6mbajs3bzQGytQMwAAAU0"]
[Sat Feb 28 08:19:39.410165 2026] [:error] [pid 39185:tid 39266] [client 172.190.142.176:49156] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aaI0mxVE-FfM89u7BQZ23AAAAJQ"]
[Sat Feb 28 08:19:40.136653 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:10378] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aaI0nKIAO5fN7BxyqcHc6wAAANY"]
[Sat Feb 28 08:19:40.910468 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:13379] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aaI0nKIAO5fN7BxyqcHc7wAAANM"]
[Sat Feb 28 08:19:41.478921 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:38170] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hello.php"] [unique_id "aaI0naIAO5fN7BxyqcHc9wAAAMw"]
[Sat Feb 28 08:19:42.034790 2026] [:error] [pid 39184:tid 39241] [client 172.190.142.176:20614] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/05.php"] [unique_id "aaI0nltZF9Zd_U7easBcqwAAAFY"]
[Sat Feb 28 08:19:42.634168 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:6366] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/05.php"] [unique_id "aaI0nqIAO5fN7BxyqcHdAAAAAMw"]
[Sat Feb 28 08:19:43.300650 2026] [:error] [pid 39292:tid 39312] [client 172.190.142.176:48136] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/05.php"] [unique_id "aaI0n6IAO5fN7BxyqcHdBwAAANI"]
[Sat Feb 28 08:19:43.941619 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:22393] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/05.php"] [unique_id "aaI0n6IAO5fN7BxyqcHdDAAAANY"]
[Sat Feb 28 08:19:44.458595 2026] [:error] [pid 39292:tid 39312] [client 172.190.142.176:24720] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aaI0oKIAO5fN7BxyqcHdFAAAANI"]
[Sat Feb 28 08:19:45.014902 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:24727] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aaI0oaIAO5fN7BxyqcHdGAAAAMQ"]
[Sat Feb 28 08:19:46.130243 2026] [:error] [pid 39183:tid 39211] [client 172.190.142.176:24712] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aaI0ohCf4HvhVePw3LaH9QAAABM"]
[Sat Feb 28 08:19:46.720358 2026] [:error] [pid 39184:tid 39220] [client 172.190.142.176:17562] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zxin.php"] [unique_id "aaI0oltZF9Zd_U7easBcrQAAAEE"]
[Sat Feb 28 08:19:47.502214 2026] [:error] [pid 22194:tid 22220] [client 172.190.142.176:31298] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaI0o36mbajs3bzQGytQSwAAAVg"]
[Sat Feb 28 08:19:48.373451 2026] [:error] [pid 39292:tid 39302] [client 172.190.142.176:16180] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaI0pKIAO5fN7BxyqcHdJAAAAMg"]
[Sat Feb 28 08:19:48.872142 2026] [:error] [pid 39184:tid 39223] [client 172.190.142.176:52478] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaI0pFtZF9Zd_U7easBctAAAAEQ"]
[Sat Feb 28 08:19:49.763931 2026] [:error] [pid 11791:tid 11811] [client 172.190.142.176:60689] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaI0pWuX5e1Q32gqxH3jPAAAARI"]
[Sat Feb 28 08:19:50.299976 2026] [:error] [pid 39183:tid 39210] [client 172.190.142.176:24737] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aaI0phCf4HvhVePw3LaH-AAAABI"]
[Sat Feb 28 08:19:50.962356 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:11711] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aaI0pn6mbajs3bzQGytQVgAAAUo"]
[Sat Feb 28 08:19:51.473596 2026] [:error] [pid 22194:tid 22200] [client 172.190.142.176:60700] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aaI0p36mbajs3bzQGytQWQAAAUQ"]
[Sat Feb 28 08:19:51.956979 2026] [:error] [pid 22194:tid 22210] [client 172.190.142.176:22379] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "aaI0p36mbajs3bzQGytQXwAAAU4"]
[Sat Feb 28 08:19:52.600199 2026] [:error] [pid 22194:tid 22202] [client 172.190.142.176:60719] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaI0qH6mbajs3bzQGytQYgAAAUY"]
[Sat Feb 28 08:19:53.150455 2026] [:error] [pid 39292:tid 39317] [client 172.190.142.176:52419] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaI0qaIAO5fN7BxyqcHdLwAAANc"]
[Sat Feb 28 08:19:53.638703 2026] [:error] [pid 39292:tid 39311] [client 172.190.142.176:17544] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaI0qaIAO5fN7BxyqcHdMgAAANE"]
[Sat Feb 28 08:19:54.238837 2026] [:error] [pid 11791:tid 11809] [client 172.190.142.176:24758] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-good.php"] [unique_id "aaI0qmuX5e1Q32gqxH3jRAAAARA"]
[Sat Feb 28 08:19:54.918460 2026] [:error] [pid 22194:tid 22199] [client 172.190.142.176:47799] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iko.php"] [unique_id "aaI0qn6mbajs3bzQGytQagAAAUM"]
[Sat Feb 28 08:19:55.582968 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:16165] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iko.php"] [unique_id "aaI0q6IAO5fN7BxyqcHdOAAAANM"]
[Sat Feb 28 08:19:56.227783 2026] [:error] [pid 39183:tid 39200] [client 172.190.142.176:44854] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iko.php"] [unique_id "aaI0rBCf4HvhVePw3LaH-wAAAAg"]
[Sat Feb 28 08:19:57.138545 2026] [:error] [pid 39185:tid 39248] [client 172.190.142.176:61408] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/iko.php"] [unique_id "aaI0rRVE-FfM89u7BQZ28QAAAII"]
[Sat Feb 28 08:19:57.636140 2026] [:error] [pid 39185:tid 39269] [client 172.190.142.176:24714] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmy.php"] [unique_id "aaI0rRVE-FfM89u7BQZ29QAAAJc"]
[Sat Feb 28 08:19:58.173685 2026] [:error] [pid 11791:tid 11800] [client 172.190.142.176:16133] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmy.php"] [unique_id "aaI0rmuX5e1Q32gqxH3jTgAAAQc"]
[Sat Feb 28 08:19:58.685264 2026] [:error] [pid 22194:tid 22214] [client 172.190.142.176:59940] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmy.php"] [unique_id "aaI0rn6mbajs3bzQGytQdgAAAVI"]
[Sat Feb 28 08:19:59.273026 2026] [:error] [pid 11791:tid 11816] [client 172.190.142.176:63685] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmy.php"] [unique_id "aaI0r2uX5e1Q32gqxH3jVwAAARc"]
[Sat Feb 28 08:19:59.698491 2026] [:error] [pid 39184:tid 39232] [client 172.190.142.176:11707] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fun.php"] [unique_id "aaI0r1tZF9Zd_U7easBcvwAAAE0"]
[Sat Feb 28 08:20:00.192750 2026] [:error] [pid 22194:tid 22210] [client 172.190.142.176:21423] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fun.php"] [unique_id "aaI0sH6mbajs3bzQGytQfAAAAU4"]
[Sat Feb 28 08:20:00.710061 2026] [:error] [pid 39292:tid 39318] [client 172.190.142.176:21432] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fun.php"] [unique_id "aaI0sKIAO5fN7BxyqcHdSQAAANg"]
[Sat Feb 28 08:20:01.343850 2026] [:error] [pid 39185:tid 39257] [client 172.190.142.176:61438] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fun.php"] [unique_id "aaI0sRVE-FfM89u7BQZ2_gAAAIs"]
[Sat Feb 28 08:20:02.069680 2026] [:error] [pid 11791:tid 11813] [client 172.190.142.176:35276] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/end.php"] [unique_id "aaI0smuX5e1Q32gqxH3jXQAAARQ"]
[Sat Feb 28 08:20:02.710685 2026] [:error] [pid 39185:tid 39255] [client 172.190.142.176:60734] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/end.php"] [unique_id "aaI0shVE-FfM89u7BQZ3AwAAAIk"]
[Sat Feb 28 08:20:03.281198 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:18087] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/end.php"] [unique_id "aaI0s6IAO5fN7BxyqcHdTQAAAMY"]
[Sat Feb 28 08:20:03.741892 2026] [:error] [pid 39292:tid 39310] [client 172.190.142.176:47129] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/end.php"] [unique_id "aaI0s6IAO5fN7BxyqcHdUQAAANA"]
[Sat Feb 28 08:20:04.502925 2026] [:error] [pid 39183:tid 39194] [client 172.190.142.176:11660] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "aaI0tBCf4HvhVePw3LaIAgAAAAI"]
[Sat Feb 28 08:20:04.983329 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:52416] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "aaI0tKIAO5fN7BxyqcHdVgAAANM"]
[Sat Feb 28 08:20:05.460977 2026] [:error] [pid 39184:tid 39224] [client 172.190.142.176:6063] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "aaI0tVtZF9Zd_U7easBcyQAAAEU"]
[Sat Feb 28 08:20:05.924013 2026] [:error] [pid 22194:tid 22208] [client 172.190.142.176:6079] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "aaI0tX6mbajs3bzQGytQiAAAAUw"]
[Sat Feb 28 08:20:06.393755 2026] [:error] [pid 22194:tid 22207] [client 172.190.142.176:18081] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scx.php7"] [unique_id "aaI0tn6mbajs3bzQGytQigAAAUs"]
[Sat Feb 28 08:20:06.819923 2026] [:error] [pid 22194:tid 22201] [client 172.190.142.176:35327] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scx.php7"] [unique_id "aaI0tn6mbajs3bzQGytQiwAAAUU"]
[Sat Feb 28 08:20:07.290531 2026] [:error] [pid 39184:tid 39220] [client 172.190.142.176:49008] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scx.php7"] [unique_id "aaI0t1tZF9Zd_U7easBc0AAAAEE"]
[Sat Feb 28 08:20:07.764209 2026] [:error] [pid 39184:tid 39222] [client 172.190.142.176:6317] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/scx.php7"] [unique_id "aaI0t1tZF9Zd_U7easBc0wAAAEM"]
[Sat Feb 28 08:20:08.433946 2026] [:error] [pid 39292:tid 39308] [client 172.190.142.176:6068] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error1.php"] [unique_id "aaI0uKIAO5fN7BxyqcHdZwAAAM4"]
[Sat Feb 28 08:20:08.987440 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:35300] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error1.php"] [unique_id "aaI0uKIAO5fN7BxyqcHdbAAAAMs"]
[Sat Feb 28 08:20:09.551625 2026] [:error] [pid 39292:tid 39307] [client 172.190.142.176:6428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error1.php"] [unique_id "aaI0uaIAO5fN7BxyqcHdcQAAAM0"]
[Sat Feb 28 08:20:10.060592 2026] [:error] [pid 11791:tid 11799] [client 172.190.142.176:49018] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/error1.php"] [unique_id "aaI0umuX5e1Q32gqxH3jcgAAAQY"]
[Sat Feb 28 08:20:10.724805 2026] [:error] [pid 39292:tid 39314] [client 172.190.142.176:31258] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/thui.php"] [unique_id "aaI0uqIAO5fN7BxyqcHddwAAANQ"]
[Sat Feb 28 08:20:11.179673 2026] [:error] [pid 11791:tid 11801] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/thui.php
[Sat Feb 28 08:20:11.387718 2026] [:error] [pid 11791:tid 11816] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sat Feb 28 08:20:11.838184 2026] [:error] [pid 11791:tid 11797] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sat Feb 28 08:20:12.046500 2026] [:error] [pid 11791:tid 11794] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Feb 28 08:20:12.451835 2026] [:error] [pid 11791:tid 11814] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/rpk.php
[Sat Feb 28 08:20:12.661682 2026] [:error] [pid 11791:tid 11798] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sat Feb 28 08:20:12.869857 2026] [:error] [pid 11791:tid 11808] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sat Feb 28 08:20:13.078686 2026] [:error] [pid 11791:tid 11805] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Sat Feb 28 08:20:13.287667 2026] [:error] [pid 11791:tid 11800] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/forbidals.php
[Sat Feb 28 08:20:13.503204 2026] [:error] [pid 11791:tid 11813] [client 172.190.142.176:35289] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Sat Feb 28 08:20:13.710522 2026] [:error] [pid 11791:tid 11796] [client 172.190.142.176:35289] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aaI0vWuX5e1Q32gqxH3jiQAAAQM"]
[Sat Feb 28 08:20:14.426757 2026] [:error] [pid 39292:tid 39304] [client 172.190.142.176:48293] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aaI0vqIAO5fN7BxyqcHdiQAAAMo"]
[Sat Feb 28 08:20:14.903877 2026] [:error] [pid 22194:tid 22197] [client 172.190.142.176:47165] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aaI0vn6mbajs3bzQGytQpgAAAUE"]
[Sat Feb 28 08:20:15.423977 2026] [:error] [pid 22194:tid 22204] [client 172.190.142.176:19642] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccou.php"] [unique_id "aaI0v36mbajs3bzQGytQqQAAAUg"]
[Sat Feb 28 08:20:15.941902 2026] [:error] [pid 22194:tid 22202] [client 172.190.142.176:47117] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/get.php"] [unique_id "aaI0v36mbajs3bzQGytQqgAAAUY"]
[Sat Feb 28 08:20:16.483641 2026] [:error] [pid 22194:tid 22210] [client 172.190.142.176:30179] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/get.php"] [unique_id "aaI0wH6mbajs3bzQGytQrwAAAU4"]
[Sat Feb 28 08:20:16.989980 2026] [:error] [pid 22194:tid 22209] [client 172.190.142.176:35283] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/get.php"] [unique_id "aaI0wH6mbajs3bzQGytQswAAAU0"]
[Sat Feb 28 08:20:17.544457 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:11541] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/get.php"] [unique_id "aaI0waIAO5fN7BxyqcHdkAAAAMQ"]
[Sat Feb 28 08:20:17.987581 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:30828] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0waIAO5fN7BxyqcHdkQAAAME"]
[Sat Feb 28 08:20:18.483377 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:6325] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0wqIAO5fN7BxyqcHdlQAAAMc"]
[Sat Feb 28 08:20:18.966840 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:22867] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0wqIAO5fN7BxyqcHdmQAAAMs"]
[Sat Feb 28 08:20:19.712852 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:19590] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/koiy.php"] [unique_id "aaI0w6IAO5fN7BxyqcHdnwAAAMQ"]
[Sat Feb 28 08:20:20.198183 2026] [:error] [pid 39292:tid 39315] [client 172.190.142.176:22892] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaI0xKIAO5fN7BxyqcHdpAAAANU"]
[Sat Feb 28 08:20:20.659669 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:6417] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaI0xKIAO5fN7BxyqcHdqQAAAMc"]
[Sat Feb 28 08:20:21.257245 2026] [:error] [pid 22194:tid 22220] [client 172.190.142.176:31293] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaI0xX6mbajs3bzQGytQwQAAAVg"]
[Sat Feb 28 08:20:21.767031 2026] [:error] [pid 11791:tid 11796] [client 172.190.142.176:19636] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaI0xWuX5e1Q32gqxH3jlAAAAQM"]
[Sat Feb 28 08:20:22.290049 2026] [:error] [pid 22194:tid 22217] [client 172.190.142.176:19647] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaI0xn6mbajs3bzQGytQyAAAAVU"]
[Sat Feb 28 08:20:22.769584 2026] [:error] [pid 39185:tid 39251] [client 172.190.142.176:19605] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaI0xhVE-FfM89u7BQZ3EwAAAIU"]
[Sat Feb 28 08:20:23.231022 2026] [:error] [pid 39292:tid 39315] [client 172.190.142.176:6420] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaI0x6IAO5fN7BxyqcHdsgAAANU"]
[Sat Feb 28 08:20:23.726005 2026] [:error] [pid 11791:tid 11817] [client 172.190.142.176:6274] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaI0x2uX5e1Q32gqxH3jnQAAARg"]
[Sat Feb 28 08:20:24.252553 2026] [:error] [pid 39183:tid 39192] [client 172.190.142.176:6444] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aaI0yBCf4HvhVePw3LaIBwAAAAA"]
[Sat Feb 28 08:20:24.921243 2026] [:error] [pid 22194:tid 22213] [client 172.190.142.176:35280] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aaI0yH6mbajs3bzQGytQ1gAAAVE"]
[Sat Feb 28 08:20:25.479716 2026] [:error] [pid 22194:tid 22197] [client 172.190.142.176:47147] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aaI0yX6mbajs3bzQGytQ2wAAAUE"]
[Sat Feb 28 08:20:26.078326 2026] [:error] [pid 22194:tid 22199] [client 172.190.142.176:47107] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/raw.php"] [unique_id "aaI0yn6mbajs3bzQGytQ4AAAAUM"]
[Sat Feb 28 08:20:26.531970 2026] [:error] [pid 11791:tid 11809] [client 172.190.142.176:39264] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaI0ymuX5e1Q32gqxH3jqgAAARA"]
[Sat Feb 28 08:20:26.997017 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:19490] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaI0yqIAO5fN7BxyqcHdxgAAANY"]
[Sat Feb 28 08:20:27.558696 2026] [:error] [pid 39292:tid 39295] [client 172.190.142.176:19632] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaI0y6IAO5fN7BxyqcHdyAAAAME"]
[Sat Feb 28 08:20:28.111559 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:48285] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaI0zKIAO5fN7BxyqcHdzAAAAMk"]
[Sat Feb 28 08:20:28.745343 2026] [:error] [pid 39292:tid 39315] [client 172.190.142.176:39233] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aaI0zKIAO5fN7BxyqcHd1AAAANU"]
[Sat Feb 28 08:20:29.308744 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:6284] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aaI0zX6mbajs3bzQGytQ6wAAAVY"]
[Sat Feb 28 08:20:29.989637 2026] [:error] [pid 11791:tid 11807] [client 172.190.142.176:39289] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aaI0zWuX5e1Q32gqxH3jswAAAQ4"]
[Sat Feb 28 08:20:30.471860 2026] [:error] [pid 22194:tid 22207] [client 172.190.142.176:53942] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rtx.php"] [unique_id "aaI0zn6mbajs3bzQGytQ8AAAAUs"]
[Sat Feb 28 08:20:31.048102 2026] [:error] [pid 11791:tid 11800] [client 172.190.142.176:39259] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aaI0z2uX5e1Q32gqxH3jtQAAAQc"]
[Sat Feb 28 08:20:31.680236 2026] [:error] [pid 11791:tid 11806] [client 172.190.142.176:6235] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aaI0z2uX5e1Q32gqxH3juwAAAQ0"]
[Sat Feb 28 08:20:32.436461 2026] [:error] [pid 22194:tid 22215] [client 172.190.142.176:11550] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aaI00H6mbajs3bzQGytRAQAAAVM"]
[Sat Feb 28 08:20:33.242513 2026] [:error] [pid 22194:tid 22205] [client 172.190.142.176:50747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xda.php"] [unique_id "aaI00X6mbajs3bzQGytRDAAAAUk"]
[Sat Feb 28 08:20:34.029849 2026] [:error] [pid 39292:tid 39313] [client 172.190.142.176:6216] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaI00qIAO5fN7BxyqcHd6AAAANM"]
[Sat Feb 28 08:20:34.811356 2026] [:error] [pid 39185:tid 39255] [client 172.190.142.176:48970] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaI00hVE-FfM89u7BQZ3IQAAAIk"]
[Sat Feb 28 08:20:35.754499 2026] [:error] [pid 39185:tid 39269] [client 172.190.142.176:19627] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaI00xVE-FfM89u7BQZ3JgAAAJc"]
[Sat Feb 28 08:20:36.582110 2026] [:error] [pid 22194:tid 22215] [client 172.190.142.176:6421] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/erty.php"] [unique_id "aaI01H6mbajs3bzQGytREQAAAVM"]
[Sat Feb 28 08:20:37.508942 2026] [:error] [pid 39185:tid 39265] [client 172.190.142.176:22856] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaI01RVE-FfM89u7BQZ3KwAAAJM"]
[Sat Feb 28 08:20:38.081870 2026] [:error] [pid 11791:tid 11816] [client 172.190.142.176:50726] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaI01muX5e1Q32gqxH3j5QAAARc"]
[Sat Feb 28 08:20:38.636587 2026] [:error] [pid 22194:tid 22213] [client 172.190.142.176:30843] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaI01n6mbajs3bzQGytRHwAAAVE"]
[Sat Feb 28 08:20:39.355994 2026] [:error] [pid 39183:tid 39215] [client 172.190.142.176:48468] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaI01xCf4HvhVePw3LaIEQAAABc"]
[Sat Feb 28 08:20:39.924329 2026] [:error] [pid 22194:tid 22203] [client 172.190.142.176:19591] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaI0136mbajs3bzQGytRJgAAAUc"]
[Sat Feb 28 08:20:40.439737 2026] [:error] [pid 39292:tid 39301] [client 172.190.142.176:39242] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaI02KIAO5fN7BxyqcHd-gAAAMc"]
[Sat Feb 28 08:20:41.000536 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:19456] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaI02KIAO5fN7BxyqcHd_AAAAMw"]
[Sat Feb 28 08:20:41.446763 2026] [:error] [pid 22194:tid 22198] [client 172.190.142.176:53915] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/moon.php"] [unique_id "aaI02X6mbajs3bzQGytRNAAAAUI"]
[Sat Feb 28 08:20:42.066200 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:48454] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaI02qIAO5fN7BxyqcHd_gAAAMs"]
[Sat Feb 28 08:20:42.578424 2026] [:error] [pid 22194:tid 22218] [client 172.190.142.176:19495] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaI02n6mbajs3bzQGytRPQAAAVY"]
[Sat Feb 28 08:20:43.198586 2026] [:error] [pid 39292:tid 39310] [client 172.190.142.176:48457] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaI026IAO5fN7BxyqcHeBgAAANA"]
[Sat Feb 28 08:20:43.871573 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:50722] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaI0236mbajs3bzQGytRRQAAAUo"]
[Sat Feb 28 08:20:44.604691 2026] [:error] [pid 39185:tid 39257] [client 172.190.142.176:5876] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aaI03BVE-FfM89u7BQZ3MgAAAIs"]
[Sat Feb 28 08:20:45.758198 2026] [:error] [pid 39292:tid 39305] [client 172.190.142.176:50848] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aaI03aIAO5fN7BxyqcHeEgAAAMs"]
[Sat Feb 28 08:20:46.333679 2026] [:error] [pid 22194:tid 22199] [client 172.190.142.176:60574] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aaI03n6mbajs3bzQGytRVAAAAUM"]
[Sat Feb 28 08:20:47.302752 2026] [:error] [pid 11791:tid 11813] [client 172.190.142.176:11528] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "aaI032uX5e1Q32gqxH3j9QAAARQ"]
[Sat Feb 28 08:20:48.243737 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:31266] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sxdfrt.php"] [unique_id "aaI04KIAO5fN7BxyqcHeIgAAAMY"]
[Sat Feb 28 08:20:48.948737 2026] [:error] [pid 22194:tid 22215] [client 172.190.142.176:11544] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sxdfrt.php"] [unique_id "aaI04H6mbajs3bzQGytRXQAAAVM"]
[Sat Feb 28 08:20:49.800995 2026] [:error] [pid 39183:tid 39214] [client 172.190.142.176:19638] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sxdfrt.php"] [unique_id "aaI04RCf4HvhVePw3LaIFQAAABY"]
[Sat Feb 28 08:20:50.542128 2026] [:error] [pid 39184:tid 39234] [client 172.190.142.176:30796] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sxdfrt.php"] [unique_id "aaI04ltZF9Zd_U7easBdCAAAAE8"]
[Sat Feb 28 08:20:51.316869 2026] [:error] [pid 22194:tid 22211] [client 172.190.142.176:5887] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaI0436mbajs3bzQGytRawAAAU8"]
[Sat Feb 28 08:20:51.940090 2026] [:error] [pid 39184:tid 39240] [client 172.190.142.176:50694] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaI041tZF9Zd_U7easBdEgAAAFU"]
[Sat Feb 28 08:20:52.741345 2026] [:error] [pid 22194:tid 22216] [client 172.190.142.176:48458] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaI05H6mbajs3bzQGytRcgAAAVQ"]
[Sat Feb 28 08:20:53.299600 2026] [:error] [pid 39184:tid 39243] [client 172.190.142.176:50831] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaI05VtZF9Zd_U7easBdFwAAAFg"]
[Sat Feb 28 08:20:53.927257 2026] [:error] [pid 39184:tid 39229] [client 172.190.142.176:19459] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaI05VtZF9Zd_U7easBdGgAAAEo"]
[Sat Feb 28 08:20:55.033913 2026] [:error] [pid 22194:tid 22207] [client 172.190.142.176:21424] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaI0536mbajs3bzQGytRegAAAUs"]
[Sat Feb 28 08:20:56.025594 2026] [:error] [pid 22194:tid 22214] [client 172.190.142.176:19488] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaI06H6mbajs3bzQGytRfgAAAVI"]
[Sat Feb 28 08:20:56.503730 2026] [:error] [pid 39185:tid 39252] [client 172.190.142.176:6247] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaI06BVE-FfM89u7BQZ3PQAAAIY"]
[Sat Feb 28 08:20:56.966218 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:48504] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaI06KIAO5fN7BxyqcHeSwAAAMk"]
[Sat Feb 28 08:20:57.484770 2026] [:error] [pid 22194:tid 22198] [client 172.190.142.176:65224] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaI06X6mbajs3bzQGytRiAAAAUI"]
[Sat Feb 28 08:20:57.994879 2026] [:error] [pid 22194:tid 22204] [client 172.190.142.176:39238] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaI06X6mbajs3bzQGytRjgAAAUg"]
[Sat Feb 28 08:20:58.500645 2026] [:error] [pid 11791:tid 11809] [client 172.190.142.176:50840] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaI06muX5e1Q32gqxH3kAgAAARA"]
[Sat Feb 28 08:20:58.966256 2026] [:error] [pid 39292:tid 39300] [client 172.190.142.176:19485] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ocxla.php"] [unique_id "aaI06qIAO5fN7BxyqcHeUQAAAMY"]
[Sat Feb 28 08:20:59.447537 2026] [:error] [pid 39185:tid 39246] [client 172.190.142.176:31253] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ocxla.php"] [unique_id "aaI06xVE-FfM89u7BQZ3RQAAAIA"]
[Sat Feb 28 08:20:59.961256 2026] [:error] [pid 11791:tid 11799] [client 172.190.142.176:31275] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ocxla.php"] [unique_id "aaI062uX5e1Q32gqxH3kEQAAAQY"]
[Sat Feb 28 08:21:00.613648 2026] [:error] [pid 22194:tid 22217] [client 172.190.142.176:5850] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ocxla.php"] [unique_id "aaI07H6mbajs3bzQGytRmAAAAVU"]
[Sat Feb 28 08:21:01.091605 2026] [:error] [pid 22194:tid 22201] [client 172.190.142.176:30808] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aaI07X6mbajs3bzQGytRnAAAAUU"]
[Sat Feb 28 08:21:01.520750 2026] [:error] [pid 22194:tid 22216] [client 172.190.142.176:11523] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aaI07X6mbajs3bzQGytRoQAAAVQ"]
[Sat Feb 28 08:21:01.943231 2026] [:error] [pid 39292:tid 39303] [client 172.190.142.176:22869] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aaI07aIAO5fN7BxyqcHeXgAAAMk"]
[Sat Feb 28 08:21:02.410034 2026] [:error] [pid 39292:tid 39308] [client 172.190.142.176:6223] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/god.php"] [unique_id "aaI07qIAO5fN7BxyqcHeYgAAAM4"]
[Sat Feb 28 08:21:02.858400 2026] [:error] [pid 39185:tid 39247] [client 172.190.142.176:39291] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaI07hVE-FfM89u7BQZ3TQAAAIE"]
[Sat Feb 28 08:21:03.356572 2026] [:error] [pid 39292:tid 39311] [client 172.190.142.176:65228] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaI076IAO5fN7BxyqcHeagAAANE"]
[Sat Feb 28 08:21:03.913607 2026] [:error] [pid 22194:tid 22196] [client 172.190.142.176:30840] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaI0736mbajs3bzQGytRqwAAAUA"]
[Sat Feb 28 08:21:04.468655 2026] [:error] [pid 39292:tid 39316] [client 172.190.142.176:65262] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "aaI08KIAO5fN7BxyqcHedAAAANY"]
[Sat Feb 28 08:21:04.985519 2026] [:error] [pid 39292:tid 39306] [client 172.190.142.176:19463] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz.php"] [unique_id "aaI08KIAO5fN7BxyqcHefAAAAMw"]
[Sat Feb 28 08:21:05.456261 2026] [:error] [pid 39292:tid 39298] [client 172.190.142.176:5872] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz.php"] [unique_id "aaI08aIAO5fN7BxyqcHegwAAAMQ"]
[Sat Feb 28 08:21:06.080128 2026] [:error] [pid 22194:tid 22211] [client 172.190.142.176:19501] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz.php"] [unique_id "aaI08n6mbajs3bzQGytRtgAAAU8"]
[Sat Feb 28 08:21:06.653618 2026] [:error] [pid 39292:tid 39318] [client 172.190.142.176:65230] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz.php"] [unique_id "aaI08qIAO5fN7BxyqcHeiAAAANg"]
[Sat Feb 28 08:21:07.173424 2026] [:error] [pid 39183:tid 39213] [client 172.190.142.176:48450] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aaI08xCf4HvhVePw3LaIMgAAABU"]
[Sat Feb 28 08:21:07.680970 2026] [:error] [pid 39185:tid 39248] [client 172.190.142.176:30562] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aaI08xVE-FfM89u7BQZ3XgAAAII"]
[Sat Feb 28 08:21:08.117637 2026] [:error] [pid 11791:tid 11798] [client 172.190.142.176:11524] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aaI09GuX5e1Q32gqxH3kKwAAAQU"]
[Sat Feb 28 08:21:08.689330 2026] [:error] [pid 22194:tid 22220] [client 172.190.142.176:6224] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xqq.php"] [unique_id "aaI09H6mbajs3bzQGytRvQAAAVg"]
[Sat Feb 28 08:21:09.249605 2026] [:error] [pid 22194:tid 22206] [client 172.190.142.176:19509] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sdsa.php"] [unique_id "aaI09X6mbajs3bzQGytRvwAAAUo"]
[Sat Feb 28 08:21:09.722013 2026] [:error] [pid 11791:tid 11815] [client 172.190.142.176:39253] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sdsa.php"] [unique_id "aaI09WuX5e1Q32gqxH3kMgAAARY"]
[Sat Feb 28 08:21:10.474445 2026] [:error] [pid 39184:tid 39238] [client 172.190.142.176:50712] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sdsa.php"] [unique_id "aaI09ltZF9Zd_U7easBdNgAAAFM"]
[Sat Feb 28 08:21:11.273306 2026] [:error] [pid 22194:tid 22214] [client 172.190.142.176:5831] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sdsa.php"] [unique_id "aaI0936mbajs3bzQGytRxAAAAVI"]
[Sat Feb 28 08:21:11.784823 2026] [:error] [pid 22194:tid 22211] [client 172.190.142.176:19470] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaI0936mbajs3bzQGytRxQAAAU8"]
[Sat Feb 28 08:21:12.329654 2026] [:error] [pid 39292:tid 39296] [client 172.190.142.176:65273] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaI0-KIAO5fN7BxyqcHetAAAAMI"]
[Sat Feb 28 08:21:13.043172 2026] [:error] [pid 39185:tid 39268] [client 172.190.142.176:5857] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Feb 28 08:21:13.250584 2026] [:error] [pid 39185:tid 39246] [client 172.190.142.176:5857] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Feb 28 08:21:13.458498 2026] [:error] [pid 39185:tid 39266] [client 172.190.142.176:5857] File does not exist: /usr/local/apache/htdocs/suspended-page/un.php
[Sat Feb 28 08:21:13.669258 2026] [:error] [pid 39185:tid 39250] [client 172.190.142.176:5857] File does not exist: /usr/local/apache/htdocs/suspended-page/100.kb.php
[Sat Feb 28 08:21:13.897327 2026] [:error] [pid 39185:tid 39252] [client 172.190.142.176:5857] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat Feb 28 08:24:23.162919 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Feb 28 08:24:23.604695 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 28 08:24:24.300325 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Feb 28 08:24:24.747509 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Feb 28 08:24:25.208130 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Feb 28 08:24:25.647525 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Feb 28 08:24:26.086854 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 28 08:24:26.530989 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 28 08:24:27.442310 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Feb 28 08:24:28.321200 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 28 08:24:28.760334 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Feb 28 08:24:29.212444 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Feb 28 08:24:29.654337 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Feb 28 08:24:30.103293 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 28 08:24:30.559384 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Feb 28 08:24:31.066822 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Feb 28 08:24:31.551738 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Feb 28 08:24:31.991466 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.22:37773] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Feb 28 08:24:38.251629 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.22:37773] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI1xmuX5e1Q32gqxH3mugAAAQU"]
[Sat Feb 28 08:24:40.450802 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.25:39333] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI1yBVE-FfM89u7BQZ5yAAAAI4"]
[Sat Feb 28 08:24:42.644955 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.29:63869] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Feb 28 08:24:43.995025 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.29:63869] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaI1y1tZF9Zd_U7easBenwAAAEs"]
[Sat Feb 28 08:24:45.812180 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.28:39999] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 28 08:24:46.275356 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:39999] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaI1zn6mbajs3bzQGytVnwAAAU4"]
[Sat Feb 28 08:24:48.475769 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:32235] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Feb 28 08:24:50.913243 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.29:32235] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI10n6mbajs3bzQGytV3gAAAUg"]
[Sat Feb 28 08:24:52.249178 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.25:64377] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI11KIAO5fN7BxyqcHjlgAAANQ"]
[Sat Feb 28 08:24:53.138964 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:54137] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI11X6mbajs3bzQGytV8wAAAUw"]
[Sat Feb 28 08:24:54.027237 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.30:31103] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI11n6mbajs3bzQGytWGwAAAUE"]
[Sat Feb 28 08:24:55.932906 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.22:54255] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI1136mbajs3bzQGytWfAAAAUo"]
[Sat Feb 28 08:24:57.819661 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.23:27801] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI12VtZF9Zd_U7easBe4wAAAEI"]
[Sat Feb 28 08:24:59.160002 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.23:59865] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI1236mbajs3bzQGytWrgAAAUs"]
[Sat Feb 28 08:25:00.045523 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.30:27119] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Feb 28 08:25:00.935375 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.30:27119] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaI13BVE-FfM89u7BQZ55gAAAJE"]
[Sat Feb 28 08:25:02.701949 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.28:34001] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI13ltZF9Zd_U7easBe_AAAAFA"]
[Sat Feb 28 08:25:04.044608 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.31:54797] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI14KIAO5fN7BxyqcHkKgAAANg"]
[Sat Feb 28 08:25:04.946552 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.30:28383] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Feb 28 08:25:05.382771 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.30:28383] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI14aIAO5fN7BxyqcHkQwAAANc"]
[Sat Feb 28 08:25:06.330400 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.31:50511] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Feb 28 08:25:07.724287 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.31:50511] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Feb 28 08:25:09.064576 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.31:50511] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI15X6mbajs3bzQGytXAQAAAVI"]
[Sat Feb 28 08:25:09.956224 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.31:50547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Feb 28 08:25:10.408436 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.31:50547] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI15hVE-FfM89u7BQZ6EAAAAJU"]
[Sat Feb 28 08:25:11.303692 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.26:59385] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Feb 28 08:25:12.210636 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.26:59385] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaI16FtZF9Zd_U7easBfHAAAAEo"]
[Sat Feb 28 08:25:13.583200 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.31:25883] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI16aIAO5fN7BxyqcHkvAAAAMY"]
[Sat Feb 28 08:25:14.910055 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.20:23887] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Feb 28 08:25:15.398684 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.20:23887] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Feb 28 08:25:16.345875 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:23887] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI17GuX5e1Q32gqxH3nawAAARc"]
[Sat Feb 28 08:25:18.194997 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.29:57179] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI17qIAO5fN7BxyqcHk9QAAAMk"]
[Sat Feb 28 08:25:19.532133 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.21:23329] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI176IAO5fN7BxyqcHlEQAAAMI"]
[Sat Feb 28 08:25:20.413716 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.25:55633] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI18KIAO5fN7BxyqcHlGwAAAM4"]
[Sat Feb 28 08:25:22.379269 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.25:56457] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI18hVE-FfM89u7BQZ6JgAAAIQ"]
[Sat Feb 28 08:25:24.184514 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.26:21599] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Feb 28 08:25:24.630113 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.26:21599] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI19GuX5e1Q32gqxH3nnQAAAQc"]
[Sat Feb 28 08:25:25.537628 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.25:27823] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaI19X6mbajs3bzQGytXbgAAAUA"]
[Sat Feb 28 08:25:26.443720 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.28:50951] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI19muX5e1Q32gqxH3nsgAAAQM"]
[Sat Feb 28 08:25:28.257925 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.28:44291] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Feb 28 08:25:29.141983 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.28:44291] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Feb 28 08:25:31.231084 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.28:44291] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaI1-xCf4HvhVePw3LaJcwAAAAQ"]
[Sat Feb 28 08:25:33.532187 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.31:32411] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI1_X6mbajs3bzQGytXvgAAAVQ"]
[Sat Feb 28 08:25:34.014950 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.31:32411] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Feb 28 08:25:36.268926 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.31:32411] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Feb 28 08:25:36.718739 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.31:32411] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Feb 28 08:25:39.020637 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.31:32411] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI2A36mbajs3bzQGytYBgAAAUo"]
[Sat Feb 28 08:25:41.522765 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:24075] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Feb 28 08:25:41.995603 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:24075] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI2BWuX5e1Q32gqxH3n3wAAAQ4"]
[Sat Feb 28 08:25:42.898969 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.29:24075] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaI2BmuX5e1Q32gqxH3n5QAAARg"]
[Sat Feb 28 08:25:45.566470 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.26:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Feb 28 08:25:46.453121 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.26:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Feb 28 08:25:47.389012 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.26:52965] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI2C36mbajs3bzQGytYhQAAAUk"]
[Sat Feb 28 08:25:48.263782 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.23:40069] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Feb 28 08:25:49.615837 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.23:40069] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Feb 28 08:25:50.511486 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.23:40069] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Feb 28 08:25:51.391563 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.23:40069] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Feb 28 08:25:51.832986 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.23:40069] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI2DxCf4HvhVePw3LaJrAAAAAo"]
[Sat Feb 28 08:25:52.738893 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.30:63879] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Feb 28 08:25:53.203753 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.30:63879] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Feb 28 08:25:53.660716 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.30:63879] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI2EVtZF9Zd_U7easBfjwAAAEA"]
[Sat Feb 28 08:25:55.081617 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.29:65253] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Feb 28 08:25:56.004477 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.29:65253] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI2FBVE-FfM89u7BQZ6sQAAAIs"]
[Sat Feb 28 08:25:56.464517 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.29:65253] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI2FBVE-FfM89u7BQZ6twAAAJU"]
[Sat Feb 28 08:26:02.066847 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.20:56747] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Feb 28 08:26:05.054684 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.20:56747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Feb 28 08:26:05.535323 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.20:56747] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI2HRCf4HvhVePw3LaJ7AAAAAc"]
[Sat Feb 28 08:26:06.515230 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.20:56635] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Feb 28 08:26:07.976627 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.20:56635] [client 173.244.55.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.20, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI2H6IAO5fN7BxyqcHnUwAAAMQ"]
[Sat Feb 28 08:26:08.455870 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.20:56635] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Feb 28 08:26:08.960659 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.20:56635] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Feb 28 08:26:09.433013 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.20:56635] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Feb 28 08:26:09.908420 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.20:56635] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI2IaIAO5fN7BxyqcHnaAAAANI"]
[Sat Feb 28 08:26:10.886577 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.29:28873] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Feb 28 08:26:11.381256 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.29:28873] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaI2I36mbajs3bzQGytZYQAAAVg"]
[Sat Feb 28 08:26:12.874288 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:37709] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Feb 28 08:26:13.361726 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.28:37709] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI2JX6mbajs3bzQGytZcQAAAVU"]
[Sat Feb 28 08:26:15.342229 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.21:41139] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Feb 28 08:26:15.805639 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.21:41139] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI2JxVE-FfM89u7BQZ7MgAAAJM"]
[Sat Feb 28 08:26:16.734965 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.28:53451] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI2KBCf4HvhVePw3LaKGgAAABE"]
[Sat Feb 28 08:26:17.652866 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.21:47457] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Feb 28 08:26:18.123975 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.21:47457] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sat Feb 28 08:26:20.020173 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.21:47457] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI2LGuX5e1Q32gqxH3o1wAAAQM"]
[Sat Feb 28 08:26:21.436785 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.29:61443] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI2LRCf4HvhVePw3LaKKgAAAAI"]
[Sat Feb 28 08:26:23.800555 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.29:32369] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaI2L36mbajs3bzQGytZ0gAAAUc"]
[Sat Feb 28 08:26:24.751891 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.31:59991] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Feb 28 08:26:25.733320 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.31:59991] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Feb 28 08:26:26.222546 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.31:59991] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI2Mn6mbajs3bzQGytZ8gAAAVY"]
[Sat Feb 28 08:26:27.179806 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.31:30207] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Feb 28 08:26:28.124919 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.31:30207] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaI2NGuX5e1Q32gqxH3pJwAAAQw"]
[Sat Feb 28 08:26:30.459286 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.26:23743] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI2NqIAO5fN7BxyqcHomgAAAMs"]
[Sat Feb 28 08:26:31.831738 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.29:25493] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Feb 28 08:26:33.207094 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.29:25493] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Feb 28 08:26:34.157943 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.29:25493] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Feb 28 08:26:34.637661 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.29:25493] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI2OqIAO5fN7BxyqcHpCAAAAMY"]
[Sat Feb 28 08:26:35.516709 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.20:58813] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI2O2uX5e1Q32gqxH3pUgAAARg"]
[Sat Feb 28 08:26:36.404984 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.21:44533] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI2PBVE-FfM89u7BQZ7agAAAJI"]
[Sat Feb 28 08:26:37.336703 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.21:63389] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI2PWuX5e1Q32gqxH3pYAAAAQY"]
[Sat Feb 28 08:26:38.279734 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.29:34159] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sat Feb 28 08:26:38.766738 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.29:34159] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI2PhCf4HvhVePw3LaKXgAAABA"]
[Sat Feb 28 08:26:39.641484 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.26:53401] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI2P2uX5e1Q32gqxH3pdAAAAQ4"]
[Sat Feb 28 08:26:40.526783 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.20:24505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Feb 28 08:26:41.410864 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.20:24505] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaI2QaIAO5fN7BxyqcHpUAAAAMI"]
[Sat Feb 28 08:26:42.295136 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.21:57457] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI2QmuX5e1Q32gqxH3phwAAAQo"]
[Sat Feb 28 08:26:43.207461 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.29:33197] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI2Q1tZF9Zd_U7easBgmAAAAEY"]
[Sat Feb 28 08:26:44.158407 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.20:46229] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI2RGuX5e1Q32gqxH3pmAAAAQ4"]
[Sat Feb 28 08:26:45.513142 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.21:41847] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI2RX6mbajs3bzQGytakQAAAVE"]
[Sat Feb 28 08:26:47.446864 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.23:50469] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI2RxCf4HvhVePw3LaKcgAAABE"]
[Sat Feb 28 08:26:48.434130 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.30:59043] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Feb 28 08:26:49.890699 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.30:59043] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Feb 28 08:26:50.366223 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.30:59043] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI2SltZF9Zd_U7easBg2wAAAFg"]
[Sat Feb 28 08:26:51.826045 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.26:48667] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Feb 28 08:26:52.294146 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.26:48667] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Feb 28 08:26:54.677328 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.26:48667] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI2ThVE-FfM89u7BQZ7-wAAAIY"]
[Sat Feb 28 08:26:57.112769 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.29:25147] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI2UWuX5e1Q32gqxH3p7gAAARc"]
[Sat Feb 28 08:26:57.992371 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.28:57081] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI2UX6mbajs3bzQGytbAgAAAUs"]
[Sat Feb 28 08:27:00.710916 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.26:43909] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI2VH6mbajs3bzQGytbIwAAAUs"]
[Sat Feb 28 08:27:02.626812 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.20:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Feb 28 08:27:03.084300 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.20:43249] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sat Feb 28 08:27:03.543995 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.20:43249] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sat Feb 28 08:27:03.996621 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.20:43249] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Feb 28 08:27:06.241069 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.20:43249] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI2WqIAO5fN7BxyqcHq5wAAAM4"]
[Sat Feb 28 08:27:07.156726 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.22:42149] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI2W6IAO5fN7BxyqcHq-QAAAMo"]
[Sat Feb 28 08:27:08.109346 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.21:62129] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI2XH6mbajs3bzQGytbVgAAAU8"]
[Sat Feb 28 08:27:09.070599 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.26:52713] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI2XaIAO5fN7BxyqcHrEgAAAME"]
[Sat Feb 28 08:27:10.026791 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.25:58721] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI2Xn6mbajs3bzQGytbYgAAAUc"]
[Sat Feb 28 08:27:10.920145 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.26:42457] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI2XqIAO5fN7BxyqcHrMQAAAMM"]
[Sat Feb 28 08:27:12.250795 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.26:46729] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI2YFtZF9Zd_U7easBhDwAAAEw"]
[Sat Feb 28 08:27:13.130249 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.21:63629] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI2YVtZF9Zd_U7easBhEgAAAFI"]
[Sat Feb 28 08:27:14.024964 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.30:27427] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI2Yn6mbajs3bzQGytbhwAAAUU"]
[Sat Feb 28 08:27:14.909978 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.30:50659] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI2YqIAO5fN7BxyqcHrdAAAAMs"]
[Sat Feb 28 08:27:16.722099 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.30:52989] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI2ZKIAO5fN7BxyqcHrmwAAAM8"]
[Sat Feb 28 08:27:18.081408 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.23:41149] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI2ZltZF9Zd_U7easBhGQAAAE8"]
[Sat Feb 28 08:27:18.983552 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:59515] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Feb 28 08:27:19.875504 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:59515] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI2Z6IAO5fN7BxyqcHr7AAAAM8"]
[Sat Feb 28 08:27:21.700406 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.22:37009] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaI2aVtZF9Zd_U7easBhKQAAAEc"]
[Sat Feb 28 08:27:23.765142 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:20515] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Feb 28 08:27:24.210719 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.26:20515] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI2bH6mbajs3bzQGytcDwAAAUE"]
[Sat Feb 28 08:27:25.548224 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.30:34863] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Feb 28 08:27:25.988651 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.30:34863] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sat Feb 28 08:27:26.426986 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.30:34863] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Feb 28 08:27:26.890715 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.30:34863] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI2bmuX5e1Q32gqxH3qqQAAARU"]
[Sat Feb 28 08:27:27.810434 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.21:45845] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Feb 28 08:27:28.249767 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:45845] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI2cKIAO5fN7BxyqcHsZgAAAMc"]
[Sat Feb 28 08:27:30.041294 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Feb 28 08:27:30.486596 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Feb 28 08:27:30.967564 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sat Feb 28 08:27:33.235560 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Feb 28 08:27:33.688265 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sat Feb 28 08:27:34.595158 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sat Feb 28 08:27:35.964593 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.21:58769] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Feb 28 08:27:36.420116 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.21:58769] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI2eFtZF9Zd_U7easBheQAAAFM"]
[Sat Feb 28 08:27:37.331915 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.21:35343] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI2eWuX5e1Q32gqxH3rFwAAAQs"]
[Sat Feb 28 08:27:38.258491 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:28603] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaI2emuX5e1Q32gqxH3rLgAAARY"]
[Sat Feb 28 08:27:38.264682 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:28603] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 28 08:27:38.743940 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.31:28603] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Feb 28 08:27:39.241186 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.31:28603] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI2e2uX5e1Q32gqxH3rRwAAAQs"]
[Sat Feb 28 08:27:40.689329 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.30:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Feb 28 08:27:41.129228 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.30:43571] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI2fRVE-FfM89u7BQZ9sAAAAJQ"]
[Sat Feb 28 08:27:42.049327 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.30:62867] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI2fn6mbajs3bzQGytcwwAAAUQ"]
[Sat Feb 28 08:27:44.833358 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.25:45347] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI2gGuX5e1Q32gqxH3rhQAAARI"]
[Sat Feb 28 08:27:45.750713 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.21:43247] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaI2gVtZF9Zd_U7easBhtQAAAEI"]
[Sat Feb 28 08:27:48.109120 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.31:53653] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Feb 28 08:27:49.025546 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.31:53653] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI2hX6mbajs3bzQGytdFAAAAU8"]
[Sat Feb 28 08:27:50.913303 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.25:31549] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Feb 28 08:27:52.950309 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.25:31549] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaI2iFtZF9Zd_U7easBh3AAAAEA"]
[Sat Feb 28 08:27:53.907006 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.20:20323] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaI2iWuX5e1Q32gqxH3r4AAAAQM"]
[Sat Feb 28 08:27:55.362623 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.23:32555] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Feb 28 08:27:55.843240 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.23:32555] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI2i6IAO5fN7BxyqcHuQAAAAMs"]
[Sat Feb 28 08:27:56.758062 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.28:58599] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI2jH6mbajs3bzQGytddwAAAVc"]
[Sat Feb 28 08:27:58.589456 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.21:31433] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Feb 28 08:27:59.040112 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.21:31433] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sat Feb 28 08:27:59.994596 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.21:31433] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Feb 28 08:28:00.892501 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:31433] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI2kH6mbajs3bzQGytdvwAAAVY"]
[Sat Feb 28 08:28:01.781087 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.31:39817] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI2kVtZF9Zd_U7easBiAgAAAEI"]
[Sat Feb 28 08:28:04.077997 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.29:43587] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Feb 28 08:28:04.522310 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.29:43587] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaI2lH6mbajs3bzQGytd5wAAAUY"]
[Sat Feb 28 08:28:05.414307 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.21:47123] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI2lWuX5e1Q32gqxH3sUgAAAQ0"]
[Sat Feb 28 08:28:06.295678 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.26:29245] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI2lmuX5e1Q32gqxH3sYgAAARY"]
[Sat Feb 28 08:28:09.021553 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:40763] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sat Feb 28 08:28:10.852458 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:40763] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI2mqIAO5fN7BxyqcHvNgAAAMc"]
[Sat Feb 28 08:28:12.250914 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.21:65285] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI2nGuX5e1Q32gqxH3slQAAARA"]
[Sat Feb 28 08:28:13.151874 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.22:56867] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaI2naIAO5fN7BxyqcHvbgAAANc"]
[Sat Feb 28 08:28:14.040407 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:45969] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaI2nmuX5e1Q32gqxH3sqgAAAQo"]
[Sat Feb 28 08:28:14.946635 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.31:65473] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Feb 28 08:28:15.424101 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.31:65473] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Feb 28 08:28:16.375112 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.31:65473] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Feb 28 08:28:18.307525 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.31:65473] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaI2on6mbajs3bzQGytekgAAAUQ"]
[Sat Feb 28 08:28:19.215673 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.31:65473] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sat Feb 28 08:28:19.660608 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.31:65473] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sat Feb 28 08:28:20.108642 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.31:65473] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Feb 28 08:28:21.004555 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.31:65473] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI2pX6mbajs3bzQGytergAAAUg"]
[Sat Feb 28 08:28:21.877857 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.29:60717] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI2paIAO5fN7BxyqcHv9wAAAMc"]
[Sat Feb 28 08:28:22.748231 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.28:46555] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI2pqIAO5fN7BxyqcHwDgAAANU"]
[Sat Feb 28 08:28:24.088603 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.28:46555] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Feb 28 08:28:24.550776 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.28:46555] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Feb 28 08:28:25.457719 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.28:46555] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Feb 28 08:28:25.893657 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.28:46555] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aaI2qaIAO5fN7BxyqcHwZAAAANY"]
[Sat Feb 28 08:28:27.220123 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.22:39967] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Feb 28 08:28:28.112234 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.22:39967] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/defaults.php"] [unique_id "aaI2rGuX5e1Q32gqxH3tRAAAAQY"]
[Sat Feb 28 08:28:29.531159 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.25:27821] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Feb 28 08:28:32.676064 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.25:27821] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Feb 28 08:28:33.120742 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.25:27821] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sat Feb 28 08:28:35.343673 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.25:27821] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Feb 28 08:28:35.779755 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.25:27821] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/content.php"] [unique_id "aaI2sxVE-FfM89u7BQZ_hAAAAI0"]
[Sat Feb 28 08:28:37.116606 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.30:37745] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI2taIAO5fN7BxyqcHxJwAAAMc"]
[Sat Feb 28 08:28:38.921862 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.22:35699] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Feb 28 08:28:39.368489 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.22:35699] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI2t1tZF9Zd_U7easBjBwAAAFQ"]
[Sat Feb 28 08:28:40.257172 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.21:44377] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/slider.php"] [unique_id "aaI2uBVE-FfM89u7BQZ_rQAAAIM"]
[Sat Feb 28 08:28:41.126114 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.21:36981] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/slider.php"] [unique_id "aaI2uWuX5e1Q32gqxH3t3gAAARc"]
[Sat Feb 28 08:28:42.470360 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.22:48779] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Feb 28 08:28:42.906719 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.22:48779] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaI2un6mbajs3bzQGytf0AAAAUg"]
[Sat Feb 28 08:28:44.684491 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.28:35261] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Feb 28 08:28:45.589084 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.28:35261] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/filefuns.php"] [unique_id "aaI2vVtZF9Zd_U7easBjTwAAAFM"]
[Sat Feb 28 08:28:46.481528 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.22:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Feb 28 08:28:47.369023 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.22:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Feb 28 08:28:47.812601 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.22:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Feb 28 08:28:49.045623 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.22:54275] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/wso.php"] [unique_id "aaI2waIAO5fN7BxyqcHxwQAAAMg"]
[Sat Feb 28 08:28:50.389444 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.25:32067] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaI2whVE-FfM89u7BQaAEwAAAIk"]
[Sat Feb 28 08:28:51.279618 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.28:46557] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sat Feb 28 08:28:51.732847 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.28:46557] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Feb 28 08:28:52.172314 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.28:46557] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaI2xBCf4HvhVePw3LaMFwAAAAs"]
[Sat Feb 28 08:28:53.534617 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.20:45057] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaI2xX6mbajs3bzQGytgjwAAAVU"]
[Sat Feb 28 08:28:54.863179 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.23:51425] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Feb 28 08:28:56.186447 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.23:51425] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaI2yGuX5e1Q32gqxH3ubgAAAQw"]
[Sat Feb 28 08:28:57.058709 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.22:24603] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Feb 28 08:28:57.497942 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.22:24603] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sat Feb 28 08:28:57.945522 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.22:24603] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaI2yRCf4HvhVePw3LaMOwAAAA4"]
[Sat Feb 28 08:28:58.825499 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.25:27455] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaI2yltZF9Zd_U7easBjjAAAAE0"]
[Sat Feb 28 08:29:01.972751 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.31:20691] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sat Feb 28 08:29:03.022878 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.31:20691] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaI2z1tZF9Zd_U7easBjpAAAAEE"]
[Sat Feb 28 08:29:04.371165 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.22:64701] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaI20FtZF9Zd_U7easBjswAAAFU"]
[Sat Feb 28 08:29:05.692290 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.22:64135] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/themes.php"] [unique_id "aaI20WuX5e1Q32gqxH3u0wAAAQA"]
[Sat Feb 28 08:29:06.589644 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.31:23963] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Feb 28 08:29:07.069163 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.31:23963] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Feb 28 08:29:07.518557 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.31:23963] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaI20xVE-FfM89u7BQaAdgAAAJg"]
[Sat Feb 28 08:29:08.847141 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.23:53869] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Feb 28 08:29:09.294298 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.23:53869] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sat Feb 28 08:29:09.733947 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.23:53869] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/cong.php"] [unique_id "aaI21X6mbajs3bzQGythSQAAAUU"]
[Sat Feb 28 08:29:11.141582 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.20:27419] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Feb 28 08:29:12.024721 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.20:27419] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaI22H6mbajs3bzQGythdQAAAUY"]
[Sat Feb 28 08:29:13.335721 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.25:64581] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaI22aIAO5fN7BxyqcHzogAAAMc"]
[Sat Feb 28 08:29:14.222823 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.29:42349] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Feb 28 08:29:15.563465 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.29:42349] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaI226IAO5fN7BxyqcHz9wAAANY"]
[Sat Feb 28 08:29:16.929558 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.30:63789] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sat Feb 28 08:29:17.368821 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.30:63789] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/twentytwentytwo/waf_defender.php"] [unique_id "aaI23aIAO5fN7BxyqcH0FwAAANQ"]
[Sat Feb 28 08:29:19.132921 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.23:47139] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Feb 28 08:29:19.572101 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.23:47139] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Feb 28 08:29:20.475442 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:47139] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI24KIAO5fN7BxyqcH0dwAAANM"]
[Sat Feb 28 08:29:20.922532 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.23:47139] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaI24KIAO5fN7BxyqcH0hgAAAMk"]
[Sat Feb 28 08:29:21.822949 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:33567] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaI24X6mbajs3bzQGythuAAAAUw"]
[Sat Feb 28 08:29:22.710067 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.23:54459] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aaI24n6mbajs3bzQGythxgAAAU0"]
[Sat Feb 28 08:29:24.043997 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:35241] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/classwithtostring.php"] [unique_id "aaI25GuX5e1Q32gqxH3vjwAAAQ4"]
[Sat Feb 28 08:29:25.367063 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.22:36549] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/av.php"] [unique_id "aaI25RVE-FfM89u7BQaAwgAAAIs"]
[Sat Feb 28 08:29:28.553756 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.26:20279] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaI26H6mbajs3bzQGytiKQAAAUI"]
[Sat Feb 28 08:29:29.433482 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.22:59693] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sat Feb 28 08:29:29.872803 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.22:59693] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaI26aIAO5fN7BxyqcH1NwAAAM4"]
[Sat Feb 28 08:29:30.761854 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.26:40093] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Feb 28 08:29:31.644770 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.26:40093] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Feb 28 08:29:32.531459 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:40093] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaI27KIAO5fN7BxyqcH1YAAAAM8"]
[Sat Feb 28 08:29:33.880896 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.31:21885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Feb 28 08:29:34.325081 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.31:21885] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sat Feb 28 08:29:35.232620 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.31:21885] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaI272uX5e1Q32gqxH3wOwAAARI"]
[Sat Feb 28 08:29:36.577983 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.26:64803] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaI28KIAO5fN7BxyqcH1nwAAANg"]
[Sat Feb 28 08:29:37.447745 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.23:35123] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aks.php"] [unique_id "aaI28aIAO5fN7BxyqcH1qgAAAMM"]
[Sat Feb 28 08:29:38.327548 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.20:65045] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sat Feb 28 08:29:38.763432 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.20:65045] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/litespeed.php"] [unique_id "aaI28qIAO5fN7BxyqcH11AAAAMU"]
[Sat Feb 28 08:29:39.654853 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.20:64555] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/litespeed.php"] [unique_id "aaI286IAO5fN7BxyqcH14QAAAM8"]
[Sat Feb 28 08:29:40.549192 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.23:63811] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sat Feb 28 08:29:41.444570 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.23:63811] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaI29RCf4HvhVePw3LaNRQAAABA"]
[Sat Feb 28 08:29:42.348271 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.23:55833] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Feb 28 08:29:42.791766 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.23:55833] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aaI29n6mbajs3bzQGytizQAAAUs"]
[Sat Feb 28 08:29:44.117066 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.31:29401] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sat Feb 28 08:29:44.555453 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.31:29401] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaI2-KIAO5fN7BxyqcH2QgAAAMY"]
[Sat Feb 28 08:29:45.885189 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:33041] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aaI2-VtZF9Zd_U7easBksgAAAEg"]
[Sat Feb 28 08:29:46.769272 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.28:43775] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaI2-muX5e1Q32gqxH3w2wAAAQQ"]
[Sat Feb 28 08:29:47.667403 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.29:31573] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaI2-xCf4HvhVePw3LaNbAAAABM"]
[Sat Feb 28 08:29:48.545095 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.29:55583] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaI2_FtZF9Zd_U7easBkwwAAAEk"]
[Sat Feb 28 08:29:49.423349 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.31:58773] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaI2_aIAO5fN7BxyqcH2bwAAAMQ"]
[Sat Feb 28 08:29:50.301991 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.21:44077] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaI2_muX5e1Q32gqxH3xCwAAAQE"]
[Sat Feb 28 08:29:52.114650 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.22:20227] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaI3AH6mbajs3bzQGytjWQAAAVA"]
[Sat Feb 28 08:29:52.993656 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.28:53549] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaI3AKIAO5fN7BxyqcH2pwAAANU"]
[Sat Feb 28 08:29:53.864272 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.26:44617] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaI3AVtZF9Zd_U7easBk4wAAAEQ"]
[Sat Feb 28 08:29:54.750302 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.30:27575] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fog/management/index.php"] [unique_id "aaI3AmuX5e1Q32gqxH3xOwAAAQI"]
[Sat Feb 28 08:29:56.089741 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.23:57003] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaI3BBVE-FfM89u7BQaBtQAAAIM"]
[Sat Feb 28 08:29:56.961249 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.23:49093] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/components/com_newsfeeds/models/indexx.php"] [unique_id "aaI3BBVE-FfM89u7BQaBwAAAAJg"]
[Sat Feb 28 08:29:58.272961 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.29:32405] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/wp-aespa.php"] [unique_id "aaI3BhVE-FfM89u7BQaB1AAAAJc"]
[Sat Feb 28 08:29:59.611727 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.30:32115] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaI3B2uX5e1Q32gqxH3xggAAAQo"]
[Sat Feb 28 08:30:02.702531 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:43045] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sat Feb 28 08:30:04.517410 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.29:43045] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI3DH6mbajs3bzQGytkLgAAAU8"]
[Sat Feb 28 08:30:04.991495 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.29:43045] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/class_api.php"] [unique_id "aaI3DH6mbajs3bzQGytkOQAAAUY"]
[Sat Feb 28 08:30:06.775752 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.30:41441] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI3DqIAO5fN7BxyqcH3ZgAAAMA"]
[Sat Feb 28 08:30:08.110335 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.29:48369] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-css.php"] [unique_id "aaI3EBVE-FfM89u7BQaCHgAAAIg"]
[Sat Feb 28 08:30:26.146258 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.28:42751] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/"] [unique_id "aaI3ImuX5e1Q32gqxH3ysQAAAQE"]
[Sat Feb 28 08:30:27.483427 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.20:62247] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI3I2uX5e1Q32gqxH3yyQAAAQ0"]
[Sat Feb 28 08:30:28.381090 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.20:23659] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI3JGuX5e1Q32gqxH3yzgAAARI"]
[Sat Feb 28 08:30:29.262190 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:23841] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI3JWuX5e1Q32gqxH3y1QAAARc"]
[Sat Feb 28 08:30:30.622838 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.30:63339] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aaI3Jn6mbajs3bzQGytl3AAAAU4"]
[Sat Feb 28 08:30:31.512149 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.30:64529] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aaI3J2uX5e1Q32gqxH3y6gAAAQ8"]
[Sat Feb 28 08:30:38.239791 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:28847] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aaI3LmuX5e1Q32gqxH3zYgAAARY"]
[Sat Feb 28 08:30:39.129502 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.31:39495] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aaI3L2uX5e1Q32gqxH3zbQAAARE"]
[Sat Feb 28 08:30:40.925192 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.29:56209] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI3MH6mbajs3bzQGytmdwAAAU0"]
[Sat Feb 28 08:30:42.239925 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.28:44647] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "aaI3MhCf4HvhVePw3LaOlgAAAAs"]
[Sat Feb 28 08:30:45.350720 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.31:22095] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/"] [unique_id "aaI3NaIAO5fN7BxyqcH6GwAAAMI"]
[Sat Feb 28 08:30:46.228742 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.28:38957] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/"] [unique_id "aaI3NltZF9Zd_U7easBmQAAAAEY"]
[Sat Feb 28 08:30:47.556919 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.29:50967] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/"] [unique_id "aaI3NxVE-FfM89u7BQaDPQAAAJg"]
[Sat Feb 28 08:31:15.953844 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.30:24427] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/ALFA_DATA/alfacgiapi/"] [unique_id "aaI3U36mbajs3bzQGyto6wAAAUI"]
[Sat Feb 28 08:31:17.284557 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.25:25013] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI3VX6mbajs3bzQGytpAAAAAVM"]
[Sat Feb 28 08:31:20.439758 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.31:59151] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aaI3WH6mbajs3bzQGytpGwAAAUA"]
[Sat Feb 28 08:31:21.761738 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.25:29499] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/db/"] [unique_id "aaI3WaIAO5fN7BxyqcH8WwAAAMM"]
[Sat Feb 28 08:31:30.740976 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.22:25261] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/rishi/"] [unique_id "aaI3YqIAO5fN7BxyqcH9CwAAANY"]
[Sat Feb 28 08:31:31.621207 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.23:22917] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/rishi/"] [unique_id "aaI3Y36mbajs3bzQGytppAAAAVg"]
[Sat Feb 28 08:31:32.510524 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.22:64741] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/rishi/"] [unique_id "aaI3ZH6mbajs3bzQGytpsAAAAU0"]
[Sat Feb 28 08:31:36.570060 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.28:40129] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aaI3aBVE-FfM89u7BQaFPgAAAIs"]
[Sat Feb 28 08:31:38.339220 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.29:38411] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aaI3amuX5e1Q32gqxH31uQAAARI"]
[Sat Feb 28 08:31:39.227896 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.29:65203] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aaI3a2uX5e1Q32gqxH31wAAAAQY"]
[Sat Feb 28 08:31:42.355519 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.30:20559] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aaI3bqIAO5fN7BxyqcH9pQAAAMo"]
[Sat Feb 28 08:31:43.249993 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.23:29603] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aaI3b1tZF9Zd_U7easBoMQAAAFU"]
[Sat Feb 28 08:31:44.129554 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.20:49213] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/"] [unique_id "aaI3cBVE-FfM89u7BQaFdAAAAJg"]
[Sat Feb 28 08:31:45.927517 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.26:60261] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/"] [unique_id "aaI3cRVE-FfM89u7BQaFiAAAAIw"]
[Sat Feb 28 08:31:51.756506 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.23:55243] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/"] [unique_id "aaI3d6IAO5fN7BxyqcH-jgAAANY"]
[Sat Feb 28 08:32:00.722782 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.25:47345] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/digital-download/"] [unique_id "aaI3gH6mbajs3bzQGytrSgAAAVQ"]
[Sat Feb 28 08:32:02.965267 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.23:32315] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/seoo/"] [unique_id "aaI3gmuX5e1Q32gqxH32pAAAAQg"]
[Sat Feb 28 08:32:04.284879 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.20:23293] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/"] [unique_id "aaI3hKIAO5fN7BxyqcH_hAAAANM"]
[Sat Feb 28 08:32:05.617993 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.30:50433] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/google-seo-rank/"] [unique_id "aaI3hX6mbajs3bzQGytrkAAAAU8"]
[Sat Feb 28 08:32:07.851683 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.22:20789] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/x/"] [unique_id "aaI3h1tZF9Zd_U7easBoxwAAAEs"]
[Sat Feb 28 08:32:09.202666 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:42507] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/seooyanz/"] [unique_id "aaI3iaIAO5fN7BxyqcH_ywAAANM"]
[Sat Feb 28 08:45:04.431034 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:8129] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaI6kKIAO5fN7BxyqcEs8gAAANU"]
[Sat Feb 28 08:45:05.194629 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:8174] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaI6kaIAO5fN7BxyqcEs-QAAAMU"]
[Sat Feb 28 08:45:05.700267 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:8177] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaI6kaIAO5fN7BxyqcEtBAAAAMI"]
[Sat Feb 28 08:45:06.375892 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:8180] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaI6kqIAO5fN7BxyqcEtDAAAANM"]
[Sat Feb 28 08:57:56.195359 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:39263] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Feb 28 08:57:56.644229 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.28:39263] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bless.php"] [unique_id "aaI9lH6mbajs3bzQGyvF-wAAAVQ"]
[Sat Feb 28 08:57:57.537128 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.25:64805] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 28 08:57:57.986436 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.25:64805] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Feb 28 08:57:58.430406 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.25:64805] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Feb 28 08:57:58.877415 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.25:64805] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zwso.php"] [unique_id "aaI9lmuX5e1Q32gqxH1WcwAAAQo"]
[Sat Feb 28 08:57:59.762156 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.22:59437] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Feb 28 08:58:00.212612 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.22:59437] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Feb 28 08:58:00.657764 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.22:59437] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaI9mBCf4HvhVePw3Lat6QAAAAc"]
[Sat Feb 28 08:58:01.537270 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.28:23059] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaI9mRCf4HvhVePw3Lat9QAAABg"]
[Sat Feb 28 08:58:02.431104 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.28:27993] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaI9mhCf4HvhVePw3LauBAAAAAU"]
[Sat Feb 28 08:58:03.309283 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.20:36159] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 28 08:58:03.753091 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.20:36159] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 28 08:58:04.654941 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.20:36159] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Feb 28 08:58:05.545367 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.20:36159] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 28 08:58:05.983569 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.20:36159] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Feb 28 08:58:06.431530 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.20:36159] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Feb 28 08:58:06.866244 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.20:36159] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mini.php"] [unique_id "aaI9nltZF9Zd_U7easCR7AAAAEs"]
[Sat Feb 28 08:58:07.748142 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.22:32085] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Feb 28 08:58:08.187366 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.22:32085] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 28 08:58:08.635087 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.22:32085] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Feb 28 08:58:09.081574 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.22:32085] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Feb 28 08:58:09.520977 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.22:32085] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Feb 28 08:58:09.961486 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.22:32085] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Feb 28 08:58:10.852912 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.22:32085] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/hello.php"] [unique_id "aaI9ohVE-FfM89u7BQa5eQAAAJU"]
[Sat Feb 28 08:58:17.092543 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.28:45923] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI9qWuX5e1Q32gqxH1XiQAAAQ8"]
[Sat Feb 28 08:58:19.312844 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.20:46405] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI9q2uX5e1Q32gqxH1XvAAAAQs"]
[Sat Feb 28 08:58:21.559302 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.21:24575] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Feb 28 08:58:22.892183 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.21:24575] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaI9rqIAO5fN7BxyqcFQ_AAAAMI"]
[Sat Feb 28 08:58:25.699651 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.29:61029] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 28 08:58:26.163046 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.29:61029] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaI9sqIAO5fN7BxyqcFREAAAANM"]
[Sat Feb 28 08:58:27.516505 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.20:35439] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Feb 28 08:58:32.049560 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.20:35439] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI9uGuX5e1Q32gqxH1Y6QAAAQ4"]
[Sat Feb 28 08:58:33.387665 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.25:43735] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI9uRCf4HvhVePw3LavNgAAAAE"]
[Sat Feb 28 08:58:35.287673 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:24653] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI9u2uX5e1Q32gqxH1ZNwAAAQ0"]
[Sat Feb 28 08:58:36.181932 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.26:24733] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI9vKIAO5fN7BxyqcFRggAAANA"]
[Sat Feb 28 08:58:37.077040 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.29:25659] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI9vaIAO5fN7BxyqcFRlQAAAMM"]
[Sat Feb 28 08:58:37.957925 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:45187] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI9vX6mbajs3bzQGyvIKAAAAVA"]
[Sat Feb 28 08:58:39.303414 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.25:59021] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI9v6IAO5fN7BxyqcFRqgAAAMc"]
[Sat Feb 28 08:58:40.186590 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.26:31543] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Feb 28 08:58:41.066513 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.26:31543] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaI9wRVE-FfM89u7BQa6bAAAAI0"]
[Sat Feb 28 08:58:42.830878 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.30:56279] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI9wn6mbajs3bzQGyvIjAAAAU0"]
[Sat Feb 28 08:58:44.157427 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.23:23737] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI9xH6mbajs3bzQGyvIqAAAAU8"]
[Sat Feb 28 08:58:45.034304 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.25:48095] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function.php"] [unique_id "aaI9xVtZF9Zd_U7easCTIwAAAFU"]
[Sat Feb 28 08:58:45.914370 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.22:49393] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Feb 28 08:58:46.363618 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.22:49393] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI9xqIAO5fN7BxyqcFR5QAAAM4"]
[Sat Feb 28 08:58:47.243304 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.26:58169] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Feb 28 08:58:48.143621 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:58169] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin/upload/css.php"] [unique_id "aaI9yGuX5e1Q32gqxH1aXwAAARU"]
[Sat Feb 28 08:58:49.476563 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.23:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Feb 28 08:58:50.377068 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.23:39945] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI9yhCf4HvhVePw3Lav6QAAAAg"]
[Sat Feb 28 08:58:51.728500 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.31:51283] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI9yxVE-FfM89u7BQa6tAAAAIQ"]
[Sat Feb 28 08:58:52.603168 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.21:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Feb 28 08:58:53.049356 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.21:63649] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI9zaIAO5fN7BxyqcFSJwAAANU"]
[Sat Feb 28 08:58:53.956909 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.23:49701] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Feb 28 08:58:54.844770 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.23:49701] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaI9zltZF9Zd_U7easCTlwAAAEI"]
[Sat Feb 28 08:58:55.731353 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.21:26813] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/images/DJP9.php"] [unique_id "aaI9z6IAO5fN7BxyqcFSQAAAAM0"]
[Sat Feb 28 08:58:57.071358 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.29:62137] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI90X6mbajs3bzQGyvJkQAAAUw"]
[Sat Feb 28 08:58:58.413719 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.21:21977] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Feb 28 08:58:58.853362 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.21:21977] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Feb 28 08:58:59.736236 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.21:21977] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI902uX5e1Q32gqxH1a8gAAAQ0"]
[Sat Feb 28 08:59:01.065488 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.26:57791] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI91RVE-FfM89u7BQa7OgAAAI4"]
[Sat Feb 28 08:59:02.390550 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.26:40515] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI91n6mbajs3bzQGyvJwAAAAUA"]
[Sat Feb 28 08:59:05.301653 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.20:60337] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI92WuX5e1Q32gqxH1bPgAAAQ8"]
[Sat Feb 28 08:59:06.173776 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.26:23515] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI92ltZF9Zd_U7easCUBQAAAFg"]
[Sat Feb 28 08:59:07.066527 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.31:35859] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/languages/404.php"] [unique_id "aaI9236mbajs3bzQGyvJ7wAAAUg"]
[Sat Feb 28 08:59:08.832966 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.20:50279] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaI93GuX5e1Q32gqxH1bfQAAAQs"]
[Sat Feb 28 08:59:09.738491 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.30:41051] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaI93WuX5e1Q32gqxH1biAAAARA"]
[Sat Feb 28 08:59:10.621590 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.26:29167] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaI93hVE-FfM89u7BQa7pwAAAJA"]
[Sat Feb 28 08:59:11.517215 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.23:52493] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/default.php"] [unique_id "aaI93xVE-FfM89u7BQa7vgAAAIk"]
[Sat Feb 28 08:59:12.426005 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.25:47117] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Feb 28 08:59:12.869446 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.25:47117] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI94BCf4HvhVePw3LawnwAAAAo"]
[Sat Feb 28 08:59:13.749070 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.23:41205] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaI94VtZF9Zd_U7easCUNAAAAEg"]
[Sat Feb 28 08:59:14.629215 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.21:59817] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI94hVE-FfM89u7BQa77QAAAIo"]
[Sat Feb 28 08:59:16.502278 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.25:30069] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI95KIAO5fN7BxyqcFTcgAAAM4"]
[Sat Feb 28 08:59:17.386326 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.25:47315] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI95aIAO5fN7BxyqcFTewAAANU"]
[Sat Feb 28 08:59:18.258531 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.29:46829] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI95qIAO5fN7BxyqcFThQAAAM4"]
[Sat Feb 28 08:59:19.138232 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.30:58943] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI951tZF9Zd_U7easCUgQAAAEw"]
[Sat Feb 28 08:59:20.030107 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.21:54015] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaI96H6mbajs3bzQGyvKiQAAAVc"]
[Sat Feb 28 08:59:21.820085 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.22:32433] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaI96WuX5e1Q32gqxH1cEAAAARQ"]
[Sat Feb 28 08:59:22.713012 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.31:26661] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaI96hCf4HvhVePw3Law9gAAABA"]
[Sat Feb 28 08:59:23.613833 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.22:33823] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaI962uX5e1Q32gqxH1cKgAAAQg"]
[Sat Feb 28 08:59:24.485344 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.20:35273] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/"] [unique_id "aaI97KIAO5fN7BxyqcFTtwAAAMc"]
[Sat Feb 28 08:59:27.637198 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.21:25361] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aaI976IAO5fN7BxyqcFT4QAAAM8"]
[Sat Feb 28 08:59:28.963147 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.26:45215] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/"] [unique_id "aaI98GuX5e1Q32gqxH1cfgAAARA"]
[Sat Feb 28 08:59:31.192769 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.28:30175] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaI986IAO5fN7BxyqcFUNwAAANE"]
[Sat Feb 28 08:59:32.071464 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:26305] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaI99H6mbajs3bzQGyvLOQAAAUw"]
[Sat Feb 28 08:59:37.530448 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.29:62203] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/"] [unique_id "aaI9-aIAO5fN7BxyqcFUkwAAAMg"]
[Sat Feb 28 08:59:38.849851 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.31:42281] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI9-muX5e1Q32gqxH1dBwAAARg"]
[Sat Feb 28 08:59:40.624888 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.22:43759] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI9_KIAO5fN7BxyqcFUrwAAAMA"]
[Sat Feb 28 08:59:41.502663 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.26:36135] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI9_RCf4HvhVePw3LaxcwAAAAg"]
[Sat Feb 28 08:59:42.820588 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.25:60963] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI9_n6mbajs3bzQGyvLxwAAAVI"]
[Sat Feb 28 08:59:43.699459 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:23677] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI9_2uX5e1Q32gqxH1dZQAAAQM"]
[Sat Feb 28 08:59:45.023740 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.29:53607] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/"] [unique_id "aaI-AaIAO5fN7BxyqcFU0QAAAME"]
[Sat Feb 28 08:59:45.908970 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:61413] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/"] [unique_id "aaI-AX6mbajs3bzQGyvL9QAAAU4"]
[Sat Feb 28 08:59:46.801303 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.29:49691] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/"] [unique_id "aaI-AmuX5e1Q32gqxH1dqAAAAQw"]
[Sat Feb 28 08:59:53.454300 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.26:23091] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "aaI-CRVE-FfM89u7BQa-OQAAAIw"]
[Sat Feb 28 08:59:57.036425 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.21:26307] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/"] [unique_id "aaI-DRVE-FfM89u7BQa-bgAAAIk"]
[Sat Feb 28 08:59:57.923684 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.21:22461] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/"] [unique_id "aaI-DRCf4HvhVePw3Lax8QAAAAE"]
[Sat Feb 28 08:59:58.806469 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.25:42999] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/"] [unique_id "aaI-Dn6mbajs3bzQGyvMagAAAVg"]
[Sat Feb 28 08:59:59.693033 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:27359] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/"] [unique_id "aaI-D2uX5e1Q32gqxH1ekgAAAQ4"]
[Sat Feb 28 09:00:01.021132 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.23:26767] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/"] [unique_id "aaI-EaIAO5fN7BxyqcFVtQAAAMU"]
[Sat Feb 28 09:00:01.908029 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.23:39021] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/"] [unique_id "aaI-EVtZF9Zd_U7easCV7AAAAFI"]
[Sat Feb 28 09:00:02.794246 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.23:39491] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/"] [unique_id "aaI-EhCf4HvhVePw3LayGgAAAAA"]
[Sat Feb 28 09:00:06.809041 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.30:58199] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/"] [unique_id "aaI-FhCf4HvhVePw3LayRgAAAA8"]
[Sat Feb 28 09:00:12.139286 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.31:42185] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aaI-HBVE-FfM89u7BQa--AAAAIw"]
[Sat Feb 28 09:00:13.017816 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.31:56531] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aaI-HWuX5e1Q32gqxH1flQAAARg"]
[Sat Feb 28 09:00:14.823630 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.28:30337] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aaI-HhCf4HvhVePw3LayxQAAAAs"]
[Sat Feb 28 09:00:15.694513 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.25:43847] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aaI-HxCf4HvhVePw3Lay_QAAAAY"]
[Sat Feb 28 09:00:16.581185 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.20:42111] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aaI-IH6mbajs3bzQGyvNGAAAAUU"]
[Sat Feb 28 09:00:17.462614 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.20:61357] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aaI-IVtZF9Zd_U7easCWuQAAAEc"]
[Sat Feb 28 09:00:18.350036 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.26:45653] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/"] [unique_id "aaI-ImuX5e1Q32gqxH1f5wAAARQ"]
[Sat Feb 28 11:27:16.185901 2026] [:error] [pid 52460:tid 52469] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Feb 28 11:27:16.204051 2026] [:error] [pid 52460:tid 52474] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 28 11:27:16.222575 2026] [:error] [pid 52460:tid 52481] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 28 11:27:16.241693 2026] [:error] [pid 52460:tid 52484] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Feb 28 11:27:16.256597 2026] [:error] [pid 52460:tid 52478] [client 20.211.1.210:27024] [client 20.211.1.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.211.1.210, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaJglLLWOogAgHGh62TRewAAAY8"]
[Sat Feb 28 11:27:16.259992 2026] [:error] [pid 52460:tid 52478] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 11:27:16.278321 2026] [:error] [pid 52460:tid 52482] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 28 11:27:16.297382 2026] [:error] [pid 52460:tid 52475] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Feb 28 11:27:16.339565 2026] [:error] [pid 52460:tid 52468] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sat Feb 28 11:27:16.359131 2026] [:error] [pid 52460:tid 52477] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 28 11:27:16.378036 2026] [:error] [pid 52460:tid 52486] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sat Feb 28 11:27:16.397112 2026] [:error] [pid 52460:tid 52470] [client 20.211.1.210:27024] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Feb 28 11:27:16.412264 2026] [:error] [pid 52460:tid 52464] [client 20.211.1.210:27024] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaJglLLWOogAgHGh62TRhAAAAYE"]
[Sat Feb 28 11:27:16.481581 2026] [:error] [pid 52460:tid 52465] [client 20.211.1.210:17224] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaJglLLWOogAgHGh62TRhgAAAYI"]
[Sat Feb 28 11:27:16.545733 2026] [:error] [pid 39183:tid 39213] [client 20.211.1.210:16542] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaJglBCf4HvhVePw3LbYKwAAABU"]
[Sat Feb 28 11:27:16.623517 2026] [:error] [pid 52460:tid 52485] [client 20.211.1.210:16432] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaJglLLWOogAgHGh62TRhwAAAZY"]
[Sat Feb 28 12:26:14.781051 2026] [:error] [pid 22194:tid 22203] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sat Feb 28 12:26:14.992138 2026] [:error] [pid 22194:tid 22201] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Sat Feb 28 12:26:15.415189 2026] [:error] [pid 22194:tid 22199] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sat Feb 28 12:26:15.624170 2026] [:error] [pid 22194:tid 22207] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Feb 28 12:26:15.833304 2026] [:error] [pid 22194:tid 22201] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Sat Feb 28 12:26:16.044826 2026] [:error] [pid 22194:tid 22208] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Feb 28 12:26:16.254198 2026] [:error] [pid 22194:tid 22212] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Feb 28 12:26:16.464063 2026] [:error] [pid 22194:tid 22204] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Feb 28 12:26:16.678579 2026] [:error] [pid 22194:tid 22197] [client 4.205.9.11:39110] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Feb 28 12:26:16.884487 2026] [:error] [pid 22194:tid 22209] [client 4.205.9.11:39110] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaJuaH6mbajs3bzQGys1LgAAAU0"]
[Sat Feb 28 12:26:17.305425 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:39163] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaJuabLWOogAgHGh62QMvgAAAYs"]
[Sat Feb 28 12:26:17.725427 2026] [:error] [pid 39183:tid 39195] [client 4.205.9.11:39134] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaJuaRCf4HvhVePw3Lbi3wAAAAM"]
[Sat Feb 28 12:26:18.164356 2026] [:error] [pid 39292:tid 39307] [client 4.205.9.11:31557] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaJuaqIAO5fN7BxyqcHD2wAAAM0"]
[Sat Feb 28 12:26:18.598561 2026] [:error] [pid 39183:tid 39216] [client 4.205.9.11:39108] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaJuahCf4HvhVePw3Lbi4wAAABg"]
[Sat Feb 28 12:26:19.020904 2026] [:error] [pid 39185:tid 39263] [client 4.205.9.11:31559] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaJuaxVE-FfM89u7BQackwAAAJE"]
[Sat Feb 28 12:26:19.456453 2026] [:error] [pid 22194:tid 22206] [client 4.205.9.11:31581] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaJua36mbajs3bzQGys1NQAAAUo"]
[Sat Feb 28 12:26:19.878917 2026] [:error] [pid 39184:tid 39222] [client 4.205.9.11:39121] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaJua1tZF9Zd_U7easDRfwAAAEM"]
[Sat Feb 28 12:26:20.307516 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:31580] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaJubLLWOogAgHGh62QMxQAAAZM"]
[Sat Feb 28 12:26:20.729932 2026] [:error] [pid 52460:tid 52484] [client 4.205.9.11:39140] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaJubLLWOogAgHGh62QMxwAAAZU"]
[Sat Feb 28 12:26:21.158228 2026] [:error] [pid 39292:tid 39318] [client 4.205.9.11:31552] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaJubaIAO5fN7BxyqcHD3wAAANg"]
[Sat Feb 28 12:26:21.573706 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:31591] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaJubbLWOogAgHGh62QMzQAAAYs"]
[Sat Feb 28 12:26:22.007048 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:7140] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaJubrLWOogAgHGh62QM0gAAAZQ"]
[Sat Feb 28 12:26:22.422989 2026] [:error] [pid 11791:tid 11801] [client 4.205.9.11:31560] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaJubmuX5e1Q32gqxH0EbgAAAQg"]
[Sat Feb 28 12:26:22.836481 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:39130] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaJubrLWOogAgHGh62QM1QAAAZM"]
[Sat Feb 28 12:26:23.280527 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:39127] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaJub7LWOogAgHGh62QM2gAAAYs"]
[Sat Feb 28 12:26:23.708823 2026] [:error] [pid 52460:tid 52472] [client 4.205.9.11:39117] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaJub7LWOogAgHGh62QM3AAAAYk"]
[Sat Feb 28 12:26:24.124061 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:31561] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaJucLLWOogAgHGh62QM4wAAAZc"]
[Sat Feb 28 12:26:24.564627 2026] [:error] [pid 52460:tid 52467] [client 4.205.9.11:31607] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaJucLLWOogAgHGh62QM5wAAAYQ"]
[Sat Feb 28 12:26:24.992490 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:31570] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaJucLLWOogAgHGh62QM6AAAAZE"]
[Sat Feb 28 12:26:25.413621 2026] [:error] [pid 39292:tid 39301] [client 4.205.9.11:31575] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaJucaIAO5fN7BxyqcHD4wAAAMc"]
[Sat Feb 28 12:26:25.844986 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:39119] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaJucbLWOogAgHGh62QM7gAAAYI"]
[Sat Feb 28 12:26:26.258679 2026] [:error] [pid 39185:tid 39267] [client 4.205.9.11:39145] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaJuchVE-FfM89u7BQacmwAAAJU"]
[Sat Feb 28 12:26:26.685214 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:39131] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaJucrLWOogAgHGh62QM9AAAAZM"]
[Sat Feb 28 12:26:27.128782 2026] [:error] [pid 39184:tid 39241] [client 4.205.9.11:39107] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaJuc1tZF9Zd_U7easDRgQAAAFY"]
[Sat Feb 28 12:26:27.579131 2026] [:error] [pid 52460:tid 52464] [client 4.205.9.11:39151] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaJuc7LWOogAgHGh62QM-gAAAYE"]
[Sat Feb 28 12:26:27.993170 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:39162] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaJuc7LWOogAgHGh62QM_AAAAZE"]
[Sat Feb 28 12:26:28.418085 2026] [:error] [pid 52460:tid 52469] [client 4.205.9.11:31563] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaJudLLWOogAgHGh62QM_wAAAYY"]
[Sat Feb 28 12:26:28.835490 2026] [:error] [pid 11791:tid 11793] [client 4.205.9.11:31601] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaJudGuX5e1Q32gqxH0EdwAAAQA"]
[Sat Feb 28 12:26:29.264235 2026] [:error] [pid 11791:tid 11803] [client 4.205.9.11:39137] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaJudWuX5e1Q32gqxH0EfQAAAQo"]
[Sat Feb 28 12:26:29.748338 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:39161] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaJudbLWOogAgHGh62QNBQAAAY4"]
[Sat Feb 28 12:26:30.172285 2026] [:error] [pid 22194:tid 22210] [client 4.205.9.11:39115] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaJudn6mbajs3bzQGys1SgAAAU4"]
[Sat Feb 28 12:26:30.594774 2026] [:error] [pid 39183:tid 39205] [client 4.205.9.11:39156] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaJudhCf4HvhVePw3Lbi9AAAAA0"]
[Sat Feb 28 12:26:31.003218 2026] [:error] [pid 39185:tid 39268] [client 4.205.9.11:39157] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaJudxVE-FfM89u7BQacowAAAJY"]
[Sat Feb 28 12:26:31.430306 2026] [:error] [pid 39185:tid 39249] [client 4.205.9.11:39165] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaJudxVE-FfM89u7BQacpAAAAIM"]
[Sat Feb 28 12:26:31.841381 2026] [:error] [pid 39185:tid 39255] [client 4.205.9.11:7109] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaJudxVE-FfM89u7BQacpgAAAIk"]
[Sat Feb 28 12:26:32.257286 2026] [:error] [pid 39185:tid 39247] [client 4.205.9.11:31589] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaJueBVE-FfM89u7BQacrQAAAIE"]
[Sat Feb 28 12:26:32.710180 2026] [:error] [pid 22194:tid 22209] [client 4.205.9.11:31584] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaJueH6mbajs3bzQGys1UwAAAU0"]
[Sat Feb 28 12:26:33.131708 2026] [:error] [pid 39185:tid 39256] [client 4.205.9.11:7111] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaJueRVE-FfM89u7BQacsgAAAIo"]
[Sat Feb 28 12:26:33.548966 2026] [:error] [pid 22194:tid 22215] [client 4.205.9.11:39112] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaJueX6mbajs3bzQGys1VQAAAVM"]
[Sat Feb 28 12:26:33.983182 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:39124] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJueWuX5e1Q32gqxH0EhwAAARA"]
[Sat Feb 28 12:26:34.399491 2026] [:error] [pid 39185:tid 39255] [client 4.205.9.11:7128] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJuehVE-FfM89u7BQactQAAAIk"]
[Sat Feb 28 12:26:34.821492 2026] [:error] [pid 39184:tid 39242] [client 4.205.9.11:39126] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJueltZF9Zd_U7easDRgwAAAFc"]
[Sat Feb 28 12:26:35.237758 2026] [:error] [pid 39292:tid 39313] [client 4.205.9.11:39154] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJue6IAO5fN7BxyqcHD7AAAANM"]
[Sat Feb 28 12:26:35.658422 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:39144] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaJuexVE-FfM89u7BQacvAAAAIw"]
[Sat Feb 28 12:26:36.072492 2026] [:error] [pid 39185:tid 39268] [client 4.205.9.11:31586] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaJufBVE-FfM89u7BQacwQAAAJY"]
[Sat Feb 28 12:26:36.510071 2026] [:error] [pid 11791:tid 11813] [client 4.205.9.11:31576] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaJufGuX5e1Q32gqxH0EjgAAARQ"]
[Sat Feb 28 12:26:36.933819 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:31613] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaJufBVE-FfM89u7BQacygAAAIc"]
[Sat Feb 28 12:26:37.370232 2026] [:error] [pid 39185:tid 39257] [client 4.205.9.11:39128] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaJufRVE-FfM89u7BQaczAAAAIs"]
[Sat Feb 28 12:26:37.786183 2026] [:error] [pid 39184:tid 39243] [client 4.205.9.11:31572] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaJufVtZF9Zd_U7easDRhAAAAFg"]
[Sat Feb 28 12:26:38.202807 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:39105] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaJufhVE-FfM89u7BQac0wAAAJQ"]
[Sat Feb 28 12:26:38.614248 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:39141] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaJufhVE-FfM89u7BQac1gAAAIw"]
[Sat Feb 28 12:26:39.028148 2026] [:error] [pid 52460:tid 52464] [client 4.205.9.11:31569] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaJuf7LWOogAgHGh62QNDgAAAYE"]
[Sat Feb 28 12:26:39.445803 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:39118] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaJufxVE-FfM89u7BQac3gAAAJQ"]
[Sat Feb 28 12:26:39.898729 2026] [:error] [pid 52460:tid 52463] [client 4.205.9.11:31602] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaJuf7LWOogAgHGh62QNEwAAAYA"]
[Sat Feb 28 12:26:40.310642 2026] [:error] [pid 39184:tid 39232] [client 4.205.9.11:31583] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaJugFtZF9Zd_U7easDRhwAAAE0"]
[Sat Feb 28 12:26:40.720937 2026] [:error] [pid 39183:tid 39192] [client 4.205.9.11:39147] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJugBCf4HvhVePw3Lbi-AAAAAA"]
[Sat Feb 28 12:26:41.137494 2026] [:error] [pid 11791:tid 11814] [client 4.205.9.11:39167] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJugWuX5e1Q32gqxH0EkwAAARU"]
[Sat Feb 28 12:26:41.554696 2026] [:error] [pid 11791:tid 11795] [client 4.205.9.11:7151] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJugWuX5e1Q32gqxH0ElAAAAQI"]
[Sat Feb 28 12:26:41.976532 2026] [:error] [pid 39292:tid 39313] [client 4.205.9.11:31579] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJugaIAO5fN7BxyqcHD9wAAANM"]
[Sat Feb 28 12:26:42.447610 2026] [:error] [pid 39292:tid 39318] [client 4.205.9.11:31606] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaJugqIAO5fN7BxyqcHD-AAAANg"]
[Sat Feb 28 12:26:42.877946 2026] [:error] [pid 39185:tid 39254] [client 4.205.9.11:39148] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaJughVE-FfM89u7BQac5gAAAIg"]
[Sat Feb 28 12:26:43.313506 2026] [:error] [pid 39185:tid 39255] [client 4.205.9.11:31553] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaJugxVE-FfM89u7BQac6AAAAIk"]
[Sat Feb 28 12:26:43.747537 2026] [:error] [pid 39183:tid 39205] [client 4.205.9.11:7105] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaJugxCf4HvhVePw3LbjBgAAAA0"]
[Sat Feb 28 12:26:44.167336 2026] [:error] [pid 11791:tid 11801] [client 4.205.9.11:39143] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaJuhGuX5e1Q32gqxH0EmgAAAQg"]
[Sat Feb 28 12:26:44.612738 2026] [:error] [pid 11791:tid 11811] [client 4.205.9.11:39158] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaJuhGuX5e1Q32gqxH0EmwAAARI"]
[Sat Feb 28 12:26:45.030160 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:39129] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaJuhbLWOogAgHGh62QNGAAAAYI"]
[Sat Feb 28 12:26:45.450497 2026] [:error] [pid 39185:tid 39260] [client 4.205.9.11:39122] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaJuhRVE-FfM89u7BQac6wAAAI4"]
[Sat Feb 28 12:26:45.863710 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:39158] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaJuhbLWOogAgHGh62QNHQAAAY4"]
[Sat Feb 28 12:26:46.273216 2026] [:error] [pid 52460:tid 52467] [client 4.205.9.11:31564] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaJuhrLWOogAgHGh62QNHgAAAYQ"]
[Sat Feb 28 12:26:46.695754 2026] [:error] [pid 39292:tid 39299] [client 4.205.9.11:39135] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaJuhqIAO5fN7BxyqcHD_QAAAMU"]
[Sat Feb 28 12:26:47.104954 2026] [:error] [pid 11791:tid 11816] [client 4.205.9.11:31574] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaJuh2uX5e1Q32gqxH0EngAAARc"]
[Sat Feb 28 12:26:47.539533 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:31573] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaJuh2uX5e1Q32gqxH0EnwAAARA"]
[Sat Feb 28 12:26:47.950025 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:39150] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaJuhxVE-FfM89u7BQac8QAAAIA"]
[Sat Feb 28 12:26:48.366298 2026] [:error] [pid 52460:tid 52470] [client 4.205.9.11:31571] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaJuiLLWOogAgHGh62QNJAAAAYc"]
[Sat Feb 28 12:26:48.778714 2026] [:error] [pid 52460:tid 52472] [client 4.205.9.11:39114] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaJuiLLWOogAgHGh62QNKAAAAYk"]
[Sat Feb 28 12:26:49.191057 2026] [:error] [pid 52460:tid 52475] [client 4.205.9.11:39132] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaJuibLWOogAgHGh62QNKwAAAYw"]
[Sat Feb 28 12:26:49.608309 2026] [:error] [pid 52460:tid 52470] [client 4.205.9.11:31590] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaJuibLWOogAgHGh62QNLwAAAYc"]
[Sat Feb 28 12:26:50.030822 2026] [:error] [pid 52460:tid 52464] [client 4.205.9.11:31611] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaJuirLWOogAgHGh62QNNAAAAYE"]
[Sat Feb 28 12:26:50.444807 2026] [:error] [pid 39292:tid 39317] [client 4.205.9.11:31603] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaJuiqIAO5fN7BxyqcHEAQAAANc"]
[Sat Feb 28 12:26:50.879663 2026] [:error] [pid 39185:tid 39256] [client 4.205.9.11:7133] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaJuihVE-FfM89u7BQac-wAAAIo"]
[Sat Feb 28 12:26:51.288222 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:7127] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaJuixVE-FfM89u7BQac_gAAAIA"]
[Sat Feb 28 12:26:51.701696 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:39164] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaJui2uX5e1Q32gqxH0EoQAAAQE"]
[Sat Feb 28 12:26:52.116650 2026] [:error] [pid 39185:tid 39262] [client 4.205.9.11:31558] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaJujBVE-FfM89u7BQadAgAAAJA"]
[Sat Feb 28 12:26:52.528887 2026] [:error] [pid 11791:tid 11797] [client 4.205.9.11:7123] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaJujGuX5e1Q32gqxH0EogAAAQQ"]
[Sat Feb 28 12:26:52.945705 2026] [:error] [pid 39183:tid 39213] [client 4.205.9.11:7083] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaJujBCf4HvhVePw3LbjCwAAABU"]
[Sat Feb 28 12:26:53.365205 2026] [:error] [pid 39292:tid 39296] [client 4.205.9.11:31593] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaJujaIAO5fN7BxyqcHEBQAAAMI"]
[Sat Feb 28 12:26:53.782082 2026] [:error] [pid 39292:tid 39300] [client 4.205.9.11:7149] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaJujaIAO5fN7BxyqcHEBwAAAMY"]
[Sat Feb 28 12:26:54.207852 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:7120] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaJujrLWOogAgHGh62QNOAAAAYs"]
[Sat Feb 28 12:26:54.661665 2026] [:error] [pid 52460:tid 52473] [client 4.205.9.11:31582] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaJujrLWOogAgHGh62QNOwAAAYo"]
[Sat Feb 28 12:26:55.071862 2026] [:error] [pid 11791:tid 11814] [client 4.205.9.11:39136] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaJuj2uX5e1Q32gqxH0EpAAAARU"]
[Sat Feb 28 12:26:55.482656 2026] [:error] [pid 52460:tid 52472] [client 4.205.9.11:31600] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaJuj7LWOogAgHGh62QNPAAAAYk"]
[Sat Feb 28 12:26:55.916209 2026] [:error] [pid 52460:tid 52466] [client 4.205.9.11:7113] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaJuj7LWOogAgHGh62QNQAAAAYM"]
[Sat Feb 28 12:26:56.336946 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:7042] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaJukLLWOogAgHGh62QNRAAAAZE"]
[Sat Feb 28 12:26:56.748813 2026] [:error] [pid 52460:tid 52479] [client 4.205.9.11:7134] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaJukLLWOogAgHGh62QNRwAAAZA"]
[Sat Feb 28 12:26:57.162685 2026] [:error] [pid 11791:tid 11810] [client 4.205.9.11:39104] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaJukWuX5e1Q32gqxH0EqAAAARE"]
[Sat Feb 28 12:26:57.584375 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:31587] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaJukbLWOogAgHGh62QNSwAAAYI"]
[Sat Feb 28 12:26:57.994886 2026] [:error] [pid 22194:tid 22200] [client 4.205.9.11:31599] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaJukX6mbajs3bzQGys1bAAAAUQ"]
[Sat Feb 28 12:26:58.415681 2026] [:error] [pid 11791:tid 11802] [client 4.205.9.11:39138] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaJukmuX5e1Q32gqxH0ErAAAAQk"]
[Sat Feb 28 12:26:58.832738 2026] [:error] [pid 39184:tid 39228] [client 4.205.9.11:31612] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaJukltZF9Zd_U7easDRkgAAAEk"]
[Sat Feb 28 12:26:59.244449 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:7116] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaJuk2uX5e1Q32gqxH0ErgAAARA"]
[Sat Feb 28 12:26:59.658619 2026] [:error] [pid 52460:tid 52475] [client 4.205.9.11:7155] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaJuk7LWOogAgHGh62QNUwAAAYw"]
[Sat Feb 28 12:27:00.070069 2026] [:error] [pid 39292:tid 39315] [client 4.205.9.11:31568] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaJulKIAO5fN7BxyqcHEGgAAANU"]
[Sat Feb 28 12:27:00.480001 2026] [:error] [pid 39183:tid 39194] [client 4.205.9.11:39146] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaJulBCf4HvhVePw3LbjEAAAAAI"]
[Sat Feb 28 12:27:00.899476 2026] [:error] [pid 52460:tid 52479] [client 4.205.9.11:31610] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaJulLLWOogAgHGh62QNVgAAAZA"]
[Sat Feb 28 12:27:01.316231 2026] [:error] [pid 39183:tid 39196] [client 4.205.9.11:7108] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaJulRCf4HvhVePw3LbjEQAAAAQ"]
[Sat Feb 28 12:27:01.755240 2026] [:error] [pid 52460:tid 52485] [client 4.205.9.11:39155] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaJulbLWOogAgHGh62QNXQAAAZY"]
[Sat Feb 28 12:27:02.175055 2026] [:error] [pid 22194:tid 22201] [client 4.205.9.11:7129] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaJuln6mbajs3bzQGys1bgAAAUU"]
[Sat Feb 28 12:27:02.610751 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:31567] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaJulmuX5e1Q32gqxH0EvAAAARA"]
[Sat Feb 28 12:27:03.027876 2026] [:error] [pid 52460:tid 52467] [client 4.205.9.11:31565] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaJul7LWOogAgHGh62QNYQAAAYQ"]
[Sat Feb 28 12:27:03.450601 2026] [:error] [pid 39184:tid 39226] [client 4.205.9.11:7153] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaJul1tZF9Zd_U7easDRlgAAAEc"]
[Sat Feb 28 12:27:03.869674 2026] [:error] [pid 11791:tid 11805] [client 4.205.9.11:7056] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaJul2uX5e1Q32gqxH0EvgAAAQw"]
[Sat Feb 28 12:32:46.481657 2026] [:error] [pid 52460:tid 52487] [client 51.77.216.212:53552] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aaJv7rLWOogAgHGh62QUdwAAAZg"]
[Sat Feb 28 12:32:48.376357 2026] [:error] [pid 22194:tid 22200] [client 51.77.216.212:49748] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aaJv8H6mbajs3bzQGys3TAAAAUQ"]
[Sat Feb 28 12:32:50.301523 2026] [:error] [pid 39183:tid 39214] [client 51.77.216.212:49750] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaJv8hCf4HvhVePw3LbkcQAAABY"]
[Sat Feb 28 12:56:07.453283 2026] [:error] [pid 39185:tid 39246] [client 43.157.95.131:49850] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaJ1ZxVE-FfM89u7BQa2QgAAAIA"]
[Sat Feb 28 13:09:30.286211 2026] [:error] [pid 39185:tid 39262] [client 43.156.156.96:42600] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaJ4ihVE-FfM89u7BQbGbwAAAJA"]
[Sat Feb 28 13:14:39.815983 2026] [:error] [pid 39185:tid 39256] [client 135.181.180.59:33074] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aaJ5vxVE-FfM89u7BQbMrgAAAIo"]
[Sat Feb 28 13:14:48.187493 2026] [:error] [pid 39185:tid 39246] [client 135.181.180.59:41470] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aaJ5yBVE-FfM89u7BQbNDAAAAIA"]
[Sat Feb 28 13:14:50.202930 2026] [:error] [pid 22194:tid 22219] [client 135.181.180.59:41482] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aaJ5yn6mbajs3bzQGytCRwAAAVc"]
[Sat Feb 28 13:14:52.329305 2026] [:error] [pid 22194:tid 22209] [client 135.181.180.59:41490] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaJ5zH6mbajs3bzQGytCTgAAAU0"]
[Sat Feb 28 13:14:54.408030 2026] [:error] [pid 39185:tid 39254] [client 135.181.180.59:41506] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaJ5zhVE-FfM89u7BQbNIAAAAIg"]
[Sat Feb 28 13:14:56.409524 2026] [:error] [pid 52460:tid 52483] [client 135.181.180.59:52942] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaJ50LLWOogAgHGh62Q3dAAAAZQ"]
[Sat Feb 28 13:14:58.598358 2026] [:error] [pid 11791:tid 11804] [client 135.181.180.59:52946] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aaJ50muX5e1Q32gqxH0ejwAAAQs"]
[Sat Feb 28 13:15:00.662704 2026] [:error] [pid 52460:tid 52486] [client 135.181.180.59:52962] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aaJ51LLWOogAgHGh62Q3jAAAAZc"]
[Sat Feb 28 13:15:02.744517 2026] [:error] [pid 39185:tid 39246] [client 135.181.180.59:52980] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaJ51hVE-FfM89u7BQbNNgAAAIA"]
[Sat Feb 28 13:15:04.768405 2026] [:error] [pid 52460:tid 52464] [client 135.181.180.59:54270] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaJ52LLWOogAgHGh62Q3mAAAAYE"]
[Sat Feb 28 13:15:06.942952 2026] [:error] [pid 39183:tid 39206] [client 135.181.180.59:54284] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaJ52hCf4HvhVePw3LbqhQAAAA4"]
[Sat Feb 28 13:15:09.081622 2026] [:error] [pid 52460:tid 52466] [client 135.181.180.59:54290] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaJ53bLWOogAgHGh62Q3owAAAYM"]
[Sat Feb 28 13:15:10.984594 2026] [:error] [pid 39185:tid 39259] [client 135.181.180.59:54296] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaJ53hVE-FfM89u7BQbNYgAAAI0"]
[Sat Feb 28 13:15:13.004050 2026] [:error] [pid 39185:tid 39250] [client 135.181.180.59:54298] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaJ54RVE-FfM89u7BQbNiQAAAIQ"]
[Sat Feb 28 13:15:14.901067 2026] [:error] [pid 39185:tid 39264] [client 135.181.180.59:36362] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaJ54hVE-FfM89u7BQbNmgAAAJI"]
[Sat Feb 28 13:15:17.069150 2026] [:error] [pid 52460:tid 52477] [client 135.181.180.59:36378] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaJ55bLWOogAgHGh62Q3sgAAAY4"]
[Sat Feb 28 13:15:19.067823 2026] [:error] [pid 52460:tid 52471] [client 135.181.180.59:36392] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaJ557LWOogAgHGh62Q3ugAAAYg"]
[Sat Feb 28 13:15:21.158093 2026] [:error] [pid 11791:tid 11806] [client 135.181.180.59:36396] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaJ56WuX5e1Q32gqxH0etQAAAQ0"]
[Sat Feb 28 13:15:23.060461 2026] [:error] [pid 11791:tid 11793] [client 135.181.180.59:36400] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaJ562uX5e1Q32gqxH0euAAAAQA"]
[Sat Feb 28 13:15:25.000907 2026] [:error] [pid 39185:tid 39267] [client 135.181.180.59:46124] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaJ57BVE-FfM89u7BQbN2gAAAJU"]
[Sat Feb 28 13:15:27.212241 2026] [:error] [pid 11791:tid 11813] [client 135.181.180.59:46132] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaJ572uX5e1Q32gqxH0euwAAARQ"]
[Sat Feb 28 13:15:29.246864 2026] [:error] [pid 52460:tid 52482] [client 135.181.180.59:46142] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaJ58bLWOogAgHGh62Q38gAAAZM"]
[Sat Feb 28 13:15:31.280253 2026] [:error] [pid 52460:tid 52469] [client 135.181.180.59:46152] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaJ587LWOogAgHGh62Q3_wAAAYY"]
[Sat Feb 28 13:15:33.287142 2026] [:error] [pid 39292:tid 39308] [client 135.181.180.59:46168] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaJ59aIAO5fN7BxyqcHVbQAAAM4"]
[Sat Feb 28 13:15:35.589346 2026] [:error] [pid 52460:tid 52485] [client 135.181.180.59:17976] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaJ597LWOogAgHGh62Q4EAAAAZY"]
[Sat Feb 28 13:16:00.081836 2026] [:error] [pid 22194:tid 22212] [client 135.181.180.59:13418] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaJ6EH6mbajs3bzQGytCkQAAAVA"]
[Sat Feb 28 13:16:02.071601 2026] [:error] [pid 11791:tid 11814] [client 135.181.180.59:13430] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aaJ6EmuX5e1Q32gqxH0e8wAAARU"]
[Sat Feb 28 13:16:04.129350 2026] [:error] [pid 52460:tid 52480] [client 135.181.180.59:13436] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aaJ6FLLWOogAgHGh62Q4VwAAAZE"]
[Sat Feb 28 13:16:06.145648 2026] [:error] [pid 39183:tid 39194] [client 135.181.180.59:2884] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aaJ6FhCf4HvhVePw3LbqlwAAAAI"]
[Sat Feb 28 13:16:08.293748 2026] [:error] [pid 52460:tid 52485] [client 135.181.180.59:2892] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaJ6GLLWOogAgHGh62Q4YwAAAZY"]
[Sat Feb 28 13:16:10.290486 2026] [:error] [pid 52460:tid 52481] [client 135.181.180.59:2896] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aaJ6GrLWOogAgHGh62Q4aQAAAZI"]
[Sat Feb 28 13:16:12.322988 2026] [:error] [pid 39185:tid 39256] [client 135.181.180.59:2898] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aaJ6HBVE-FfM89u7BQbOQAAAAIo"]
[Sat Feb 28 13:16:14.458199 2026] [:error] [pid 52460:tid 52483] [client 135.181.180.59:2904] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aaJ6HrLWOogAgHGh62Q4cAAAAZQ"]
[Sat Feb 28 13:16:16.669031 2026] [:error] [pid 39185:tid 39256] [client 135.181.180.59:22244] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aaJ6IBVE-FfM89u7BQbOTQAAAIo"]
[Sat Feb 28 13:16:18.756965 2026] [:error] [pid 39185:tid 39267] [client 135.181.180.59:22248] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aaJ6IhVE-FfM89u7BQbOVgAAAJU"]
[Sat Feb 28 13:16:20.906791 2026] [:error] [pid 39185:tid 39262] [client 135.181.180.59:22256] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aaJ6JBVE-FfM89u7BQbOWgAAAJA"]
[Sat Feb 28 13:16:23.065233 2026] [:error] [pid 39185:tid 39254] [client 135.181.180.59:22280] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aaJ6JxVE-FfM89u7BQbOYQAAAIg"]
[Sat Feb 28 13:16:25.183017 2026] [:error] [pid 39185:tid 39264] [client 135.181.180.59:14416] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aaJ6KRVE-FfM89u7BQbOawAAAJI"]
[Sat Feb 28 13:16:27.297727 2026] [:error] [pid 39184:tid 39224] [client 135.181.180.59:14438] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaJ6K1tZF9Zd_U7easDcKwAAAEU"]
[Sat Feb 28 13:16:29.138008 2026] [:error] [pid 52460:tid 52483] [client 135.181.180.59:14442] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aaJ6LbLWOogAgHGh62Q4jwAAAZQ"]
[Sat Feb 28 13:16:31.378295 2026] [:error] [pid 39185:tid 39267] [client 135.181.180.59:14456] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaJ6LxVE-FfM89u7BQbOfQAAAJU"]
[Sat Feb 28 13:16:33.730112 2026] [:error] [pid 39292:tid 39315] [client 135.181.180.59:14478] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaJ6MaIAO5fN7BxyqcHVsQAAANU"]
[Sat Feb 28 13:16:35.989226 2026] [:error] [pid 52460:tid 52471] [client 135.181.180.59:3896] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaJ6M7LWOogAgHGh62Q4qQAAAYg"]
[Sat Feb 28 13:16:38.150074 2026] [:error] [pid 11791:tid 11800] [client 135.181.180.59:3902] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaJ6NmuX5e1Q32gqxH0fNgAAAQc"]
[Sat Feb 28 13:16:45.085370 2026] [:error] [pid 39185:tid 39263] [client 135.181.180.59:59336] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaJ6PRVE-FfM89u7BQbOuwAAAJE"]
[Sat Feb 28 13:16:47.421553 2026] [:error] [pid 39292:tid 39316] [client 135.181.180.59:59340] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaJ6P6IAO5fN7BxyqcHWFAAAANY"]
[Sat Feb 28 13:16:49.403669 2026] [:error] [pid 39185:tid 39268] [client 135.181.180.59:59356] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaJ6QRVE-FfM89u7BQbO3gAAAJY"]
[Sat Feb 28 13:16:51.464733 2026] [:error] [pid 39185:tid 39256] [client 135.181.180.59:59372] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaJ6QxVE-FfM89u7BQbO7gAAAIo"]
[Sat Feb 28 13:16:53.401114 2026] [:error] [pid 11791:tid 11796] [client 135.181.180.59:59386] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaJ6RWuX5e1Q32gqxH0fWwAAAQM"]
[Sat Feb 28 13:16:55.511044 2026] [:error] [pid 52460:tid 52467] [client 135.181.180.59:44556] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaJ6R7LWOogAgHGh62Q48QAAAYQ"]
[Sat Feb 28 13:17:21.842555 2026] [:error] [pid 39185:tid 39246] [client 135.181.180.59:13658] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaJ6YRVE-FfM89u7BQbPTgAAAIA"]
[Sat Feb 28 13:17:23.789673 2026] [:error] [pid 39183:tid 39207] [client 135.181.180.59:13672] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaJ6YxCf4HvhVePw3Lbq2AAAAA8"]
[Sat Feb 28 13:17:25.717563 2026] [:error] [pid 52460:tid 52467] [client 135.181.180.59:26688] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaJ6ZbLWOogAgHGh62Q5SQAAAYQ"]
[Sat Feb 28 13:17:27.725556 2026] [:error] [pid 39185:tid 39268] [client 135.181.180.59:26692] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aaJ6ZxVE-FfM89u7BQbPwQAAAJY"]
[Sat Feb 28 13:17:29.740465 2026] [:error] [pid 39185:tid 39253] [client 135.181.180.59:26696] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aaJ6aRVE-FfM89u7BQbPzQAAAIc"]
[Sat Feb 28 13:17:31.661080 2026] [:error] [pid 52460:tid 52477] [client 135.181.180.59:26698] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaJ6a7LWOogAgHGh62Q5VAAAAY4"]
[Sat Feb 28 13:17:33.622830 2026] [:error] [pid 22194:tid 22200] [client 135.181.180.59:26706] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aaJ6bX6mbajs3bzQGytC8QAAAUQ"]
[Sat Feb 28 13:17:35.664699 2026] [:error] [pid 39183:tid 39215] [client 135.181.180.59:61422] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaJ6bxCf4HvhVePw3Lbq4wAAABc"]
[Sat Feb 28 13:17:37.730807 2026] [:error] [pid 22194:tid 22204] [client 135.181.180.59:61438] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaJ6cX6mbajs3bzQGytC9gAAAUg"]
[Sat Feb 28 13:17:39.790836 2026] [:error] [pid 52460:tid 52468] [client 135.181.180.59:61440] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaJ6c7LWOogAgHGh62Q5bQAAAYU"]
[Sat Feb 28 13:17:41.788321 2026] [:error] [pid 39185:tid 39261] [client 135.181.180.59:61456] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaJ6dRVE-FfM89u7BQbP8AAAAI8"]
[Sat Feb 28 13:17:43.886222 2026] [:error] [pid 52460:tid 52473] [client 135.181.180.59:61464] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaJ6d7LWOogAgHGh62Q5fgAAAYo"]
[Sat Feb 28 13:17:46.087160 2026] [:error] [pid 11791:tid 11800] [client 135.181.180.59:29754] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaJ6emuX5e1Q32gqxH0frwAAAQc"]
[Sat Feb 28 13:17:48.029296 2026] [:error] [pid 39184:tid 39241] [client 135.181.180.59:29758] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaJ6fFtZF9Zd_U7easDcpwAAAFY"]
[Sat Feb 28 13:17:50.118996 2026] [:error] [pid 39185:tid 39262] [client 135.181.180.59:29770] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaJ6fhVE-FfM89u7BQbQIgAAAJA"]
[Sat Feb 28 13:17:52.083791 2026] [:error] [pid 39185:tid 39249] [client 135.181.180.59:29784] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaJ6gBVE-FfM89u7BQbQQAAAAIM"]
[Sat Feb 28 13:17:54.067589 2026] [:error] [pid 39185:tid 39259] [client 135.181.180.59:29788] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaJ6ghVE-FfM89u7BQbQSwAAAI0"]
[Sat Feb 28 13:17:56.008200 2026] [:error] [pid 39185:tid 39265] [client 135.181.180.59:27398] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaJ6hBVE-FfM89u7BQbQUwAAAJM"]
[Sat Feb 28 13:17:57.998872 2026] [:error] [pid 52460:tid 52479] [client 135.181.180.59:27402] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaJ6hbLWOogAgHGh62Q5qQAAAZA"]
[Sat Feb 28 13:17:59.981835 2026] [:error] [pid 11791:tid 11802] [client 135.181.180.59:27418] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aaJ6h2uX5e1Q32gqxH0fzgAAAQk"]
[Sat Feb 28 13:18:01.943474 2026] [:error] [pid 39185:tid 39248] [client 135.181.180.59:27426] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "aaJ6iRVE-FfM89u7BQbQfAAAAII"]
[Sat Feb 28 13:18:03.990024 2026] [:error] [pid 22194:tid 22213] [client 135.181.180.59:27430] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaJ6i36mbajs3bzQGytDDQAAAVE"]
[Sat Feb 28 13:18:05.908622 2026] [:error] [pid 39183:tid 39202] [client 135.181.180.59:18898] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aaJ6jRCf4HvhVePw3Lbq_QAAAAo"]
[Sat Feb 28 13:18:08.115719 2026] [:error] [pid 39183:tid 39209] [client 135.181.180.59:18912] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aaJ6kBCf4HvhVePw3LbrCAAAABE"]
[Sat Feb 28 13:18:10.163768 2026] [:error] [pid 39184:tid 39231] [client 135.181.180.59:18916] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaJ6kltZF9Zd_U7easDcuQAAAEw"]
[Sat Feb 28 13:18:12.314033 2026] [:error] [pid 39185:tid 39256] [client 135.181.180.59:18918] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aaJ6lBVE-FfM89u7BQbQkgAAAIo"]
[Sat Feb 28 13:18:14.477917 2026] [:error] [pid 52460:tid 52484] [client 135.181.180.59:18926] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aaJ6lrLWOogAgHGh62Q5vQAAAZU"]
[Sat Feb 28 13:18:16.598650 2026] [:error] [pid 52460:tid 52482] [client 135.181.180.59:10028] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aaJ6mLLWOogAgHGh62Q50QAAAZM"]
[Sat Feb 28 13:18:18.725025 2026] [:error] [pid 52460:tid 52482] [client 135.181.180.59:10042] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aaJ6mrLWOogAgHGh62Q53QAAAZM"]
[Sat Feb 28 13:18:43.010823 2026] [:error] [pid 39292:tid 39306] [client 135.181.180.59:58756] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aaJ6s6IAO5fN7BxyqcHW2AAAAMw"]
[Sat Feb 28 13:18:45.158014 2026] [:error] [pid 52460:tid 52485] [client 135.181.180.59:17264] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaJ6tbLWOogAgHGh62Q6JwAAAZY"]
[Sat Feb 28 13:18:47.218835 2026] [:error] [pid 39185:tid 39252] [client 135.181.180.59:17274] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aaJ6txVE-FfM89u7BQbQ4gAAAIY"]
[Sat Feb 28 13:18:49.261840 2026] [:error] [pid 52460:tid 52485] [client 135.181.180.59:17278] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaJ6ubLWOogAgHGh62Q6NwAAAZY"]
[Sat Feb 28 13:18:51.422490 2026] [:error] [pid 39185:tid 39268] [client 135.181.180.59:17292] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaJ6uxVE-FfM89u7BQbQ9AAAAJY"]
[Sat Feb 28 13:18:53.409031 2026] [:error] [pid 39292:tid 39296] [client 135.181.180.59:17302] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaJ6vaIAO5fN7BxyqcHW8QAAAMI"]
[Sat Feb 28 13:18:55.381793 2026] [:error] [pid 22194:tid 22201] [client 135.181.180.59:11502] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaJ6v36mbajs3bzQGytDRQAAAUU"]
[Sat Feb 28 13:18:57.396008 2026] [:error] [pid 39184:tid 39226] [client 135.181.180.59:11508] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaJ6wVtZF9Zd_U7easDc1AAAAEc"]
[Sat Feb 28 13:18:59.401739 2026] [:error] [pid 11791:tid 11813] [client 135.181.180.59:11516] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaJ6w2uX5e1Q32gqxH0gTgAAARQ"]
[Sat Feb 28 13:19:01.442915 2026] [:error] [pid 11791:tid 11799] [client 135.181.180.59:11526] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaJ6xWuX5e1Q32gqxH0gVQAAAQY"]
[Sat Feb 28 13:19:03.441310 2026] [:error] [pid 11791:tid 11796] [client 135.181.180.59:11530] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aaJ6x2uX5e1Q32gqxH0gXQAAAQM"]
[Sat Feb 28 13:19:05.577514 2026] [:error] [pid 39292:tid 39314] [client 135.181.180.59:53212] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aaJ6yaIAO5fN7BxyqcHW_gAAANQ"]
[Sat Feb 28 13:19:07.596799 2026] [:error] [pid 52460:tid 52472] [client 135.181.180.59:53224] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aaJ6y7LWOogAgHGh62Q6VgAAAYk"]
[Sat Feb 28 13:19:09.716746 2026] [:error] [pid 39185:tid 39257] [client 135.181.180.59:53240] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaJ6zRVE-FfM89u7BQbRIgAAAIs"]
[Sat Feb 28 13:19:11.745431 2026] [:error] [pid 39185:tid 39246] [client 135.181.180.59:53242] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaJ6zxVE-FfM89u7BQbRNAAAAIA"]
[Sat Feb 28 13:19:13.790256 2026] [:error] [pid 39185:tid 39254] [client 135.181.180.59:53250] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aaJ60RVE-FfM89u7BQbRQAAAAIg"]
[Sat Feb 28 13:19:15.877112 2026] [:error] [pid 39185:tid 39246] [client 135.181.180.59:11240] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaJ60xVE-FfM89u7BQbRRwAAAIA"]
[Sat Feb 28 13:19:18.073091 2026] [:error] [pid 39185:tid 39262] [client 135.181.180.59:11248] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaJ61hVE-FfM89u7BQbRVAAAAJA"]
[Sat Feb 28 13:19:20.045003 2026] [:error] [pid 39185:tid 39269] [client 135.181.180.59:11252] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaJ62BVE-FfM89u7BQbRYgAAAJc"]
[Sat Feb 28 13:19:22.246308 2026] [:error] [pid 39292:tid 39305] [client 135.181.180.59:11266] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaJ62qIAO5fN7BxyqcHXFQAAAMs"]
[Sat Feb 28 14:43:15.849556 2026] [:error] [pid 22194:tid 22205] [client 51.77.216.36:37970] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaKOg36mbajs3bzQGytapAAAAUk"]
[Sat Feb 28 14:43:27.682479 2026] [:error] [pid 11791:tid 11805] [client 51.77.216.36:33838] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaKOj2uX5e1Q32gqxH1LawAAAQw"]
[Sat Feb 28 14:43:41.381696 2026] [:error] [pid 39185:tid 39248] [client 46.223.162.60:27218] [client 46.223.162.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.223.162.60, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaKOnRVE-FfM89u7BQYnCgAAAII"]
[Sat Feb 28 14:43:41.385853 2026] [:error] [pid 39185:tid 39248] [client 46.223.162.60:27218] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 15:29:56.452165 2026] [:error] [pid 52460:tid 52471] [client 104.194.155.80:59562] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aaKZdLLWOogAgHGh62Sa4QAAAYg"]
[Sat Feb 28 16:57:52.695406 2026] [:error] [pid 39183:tid 39209] [client 52.169.119.118:18554] [client 52.169.119.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaKuEBCf4HvhVePw3LYpsAAAABE"]
[Sat Feb 28 16:57:53.218152 2026] [:error] [pid 52460:tid 52481] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Sat Feb 28 16:57:53.744725 2026] [:error] [pid 52460:tid 52477] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat Feb 28 16:57:54.011561 2026] [:error] [pid 52460:tid 52473] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Sat Feb 28 16:57:54.273363 2026] [:error] [pid 52460:tid 52472] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Sat Feb 28 16:57:54.533892 2026] [:error] [pid 52460:tid 52487] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Sat Feb 28 16:57:54.793077 2026] [:error] [pid 52460:tid 52470] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 16:57:55.054660 2026] [:error] [pid 52460:tid 52480] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sat Feb 28 16:57:55.315949 2026] [:error] [pid 52460:tid 52468] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Sat Feb 28 16:57:55.577132 2026] [:error] [pid 52460:tid 52478] [client 52.169.119.118:14834] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Feb 28 16:57:55.835797 2026] [:error] [pid 52460:tid 52474] [client 52.169.119.118:14834] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaKuE7LWOogAgHGh62Su0wAAAYs"]
[Sat Feb 28 16:57:56.357669 2026] [:error] [pid 39184:tid 39229] [client 52.169.119.118:12332] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaKuFFtZF9Zd_U7easAxZQAAAEo"]
[Sat Feb 28 16:57:56.873502 2026] [:error] [pid 49763:tid 49775] [client 52.169.119.118:8384] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaKuFLTHSOG_yf2PpqH-wgAAAck"]
[Sat Feb 28 16:57:57.394407 2026] [:error] [pid 39292:tid 39317] [client 52.169.119.118:13762] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaKuFaIAO5fN7BxyqcEe2AAAANc"]
[Sat Feb 28 16:57:57.915203 2026] [:error] [pid 39292:tid 39310] [client 52.169.119.118:3448] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaKuFaIAO5fN7BxyqcEe2gAAANA"]
[Sat Feb 28 16:57:58.434766 2026] [:error] [pid 49763:tid 49789] [client 52.169.119.118:2547] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaKuFrTHSOG_yf2PpqH-xQAAAdc"]
[Sat Feb 28 16:57:58.949756 2026] [:error] [pid 49763:tid 49783] [client 52.169.119.118:3181] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaKuFrTHSOG_yf2PpqH-yAAAAdE"]
[Sat Feb 28 16:57:59.480989 2026] [:error] [pid 39184:tid 39239] [client 52.169.119.118:5897] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaKuF1tZF9Zd_U7easAxegAAAFQ"]
[Sat Feb 28 16:58:00.016810 2026] [:error] [pid 39184:tid 39234] [client 52.169.119.118:14847] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaKuGFtZF9Zd_U7easAxgAAAAE8"]
[Sat Feb 28 16:58:00.551545 2026] [:error] [pid 39183:tid 39198] [client 52.169.119.118:3430] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaKuGBCf4HvhVePw3LYpwgAAAAY"]
[Sat Feb 28 16:58:01.081844 2026] [:error] [pid 39185:tid 39253] [client 52.169.119.118:3396] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaKuGRVE-FfM89u7BQZpuQAAAIc"]
[Sat Feb 28 16:58:01.620790 2026] [:error] [pid 52460:tid 52470] [client 52.169.119.118:2534] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaKuGbLWOogAgHGh62Su2wAAAYc"]
[Sat Feb 28 16:58:02.149754 2026] [:error] [pid 39183:tid 39214] [client 52.169.119.118:4297] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaKuGhCf4HvhVePw3LYpxAAAABY"]
[Sat Feb 28 16:58:02.686355 2026] [:error] [pid 52460:tid 52478] [client 52.169.119.118:7303] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaKuGrLWOogAgHGh62Su3wAAAY8"]
[Sat Feb 28 16:58:03.185868 2026] [:error] [pid 49763:tid 49769] [client 52.169.119.118:20047] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaKuG7THSOG_yf2PpqH-0QAAAcM"]
[Sat Feb 28 16:58:03.684128 2026] [:error] [pid 39292:tid 39301] [client 52.169.119.118:10637] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaKuG6IAO5fN7BxyqcEe5AAAAMc"]
[Sat Feb 28 16:58:04.182212 2026] [:error] [pid 22194:tid 22208] [client 52.169.119.118:12325] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaKuHH6mbajs3bzQGyt2ZQAAAUw"]
[Sat Feb 28 16:58:04.679433 2026] [:error] [pid 11791:tid 11816] [client 52.169.119.118:20087] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaKuHGuX5e1Q32gqxH16jgAAARc"]
[Sat Feb 28 16:58:05.176170 2026] [:error] [pid 49763:tid 49774] [client 52.169.119.118:2138] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaKuHbTHSOG_yf2PpqH-2AAAAcg"]
[Sat Feb 28 16:58:05.684627 2026] [:error] [pid 49763:tid 49772] [client 52.169.119.118:11963] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaKuHbTHSOG_yf2PpqH-3gAAAcY"]
[Sat Feb 28 16:58:06.193925 2026] [:error] [pid 49763:tid 49778] [client 52.169.119.118:15253] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaKuHrTHSOG_yf2PpqH-4gAAAcw"]
[Sat Feb 28 16:58:06.694302 2026] [:error] [pid 11791:tid 11810] [client 52.169.119.118:8181] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaKuHmuX5e1Q32gqxH16kQAAARE"]
[Sat Feb 28 16:58:07.199859 2026] [:error] [pid 22194:tid 22211] [client 52.169.119.118:1393] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaKuH36mbajs3bzQGyt2bgAAAU8"]
[Sat Feb 28 16:58:07.699890 2026] [:error] [pid 52460:tid 52471] [client 52.169.119.118:14540] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaKuH7LWOogAgHGh62Su6AAAAYg"]
[Sat Feb 28 16:58:08.198825 2026] [:error] [pid 39292:tid 39296] [client 52.169.119.118:11027] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaKuIKIAO5fN7BxyqcEe7gAAAMI"]
[Sat Feb 28 16:58:08.702656 2026] [:error] [pid 39183:tid 39205] [client 52.169.119.118:7337] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaKuIBCf4HvhVePw3LYpyAAAAA0"]
[Sat Feb 28 16:58:09.200167 2026] [:error] [pid 49763:tid 49787] [client 52.169.119.118:3781] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaKuIbTHSOG_yf2PpqH-6wAAAdU"]
[Sat Feb 28 16:58:09.704157 2026] [:error] [pid 49763:tid 49774] [client 52.169.119.118:5932] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaKuIbTHSOG_yf2PpqH-7wAAAcg"]
[Sat Feb 28 17:42:48.059935 2026] [:error] [pid 11791:tid 11814] [client 104.28.246.113:33790] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaK4mGuX5e1Q32gqxH2HygAAARU"]
[Sat Feb 28 17:42:55.498806 2026] [:error] [pid 39184:tid 39221] [client 104.28.214.112:33081] [client 104.28.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/style.php"] [unique_id "aaK4n1tZF9Zd_U7easBNQgAAAEI"]
[Sat Feb 28 17:42:57.122987 2026] [:error] [pid 39183:tid 39197] [client 104.28.246.113:30307] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/style.php"] [unique_id "aaK4oRCf4HvhVePw3LZZZAAAAAU"]
[Sat Feb 28 17:42:58.549947 2026] [:error] [pid 11791:tid 11794] [client 104.28.214.112:12793] [client 104.28.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/style.php"] [unique_id "aaK4omuX5e1Q32gqxH2H1QAAAQE"]
[Sat Feb 28 17:46:41.534909 2026] [:error] [pid 52460:tid 52481] [client 104.28.246.113:46306] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaK5gbLWOogAgHGh62TAigAAAZI"]
[Sat Feb 28 17:46:41.950111 2026] [:error] [pid 52460:tid 52478] [client 104.28.246.113:46311] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/style.php"] [unique_id "aaK5gbLWOogAgHGh62TAjwAAAY8"]
[Sat Feb 28 17:46:43.384321 2026] [:error] [pid 39184:tid 39229] [client 104.28.246.113:29185] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/style.php"] [unique_id "aaK5g1tZF9Zd_U7easBPTQAAAEo"]
[Sat Feb 28 17:46:47.673483 2026] [:error] [pid 52460:tid 52466] [client 104.28.246.113:18434] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/style.php"] [unique_id "aaK5h7LWOogAgHGh62TAyAAAAYM"]
[Sat Feb 28 17:46:49.089111 2026] [:error] [pid 11791:tid 11804] [client 104.28.246.113:12795] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style.php"] [unique_id "aaK5iWuX5e1Q32gqxH2JdQAAAQs"]
[Sat Feb 28 18:21:34.392688 2026] [:error] [pid 52460:tid 52473] [client 62.84.185.69:16836] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaLBrrLWOogAgHGh62T2UwAAAYo"]
[Sat Feb 28 18:21:36.484334 2026] [:error] [pid 39183:tid 39211] [client 62.84.185.69:16842] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaLBsBCf4HvhVePw3LZ3dAAAABM"]
[Sat Feb 28 18:21:38.685218 2026] [:error] [pid 52460:tid 52476] [client 62.84.185.69:16850] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaLBsrLWOogAgHGh62T2ZQAAAY0"]
[Sat Feb 28 18:21:40.762026 2026] [:error] [pid 39184:tid 39231] [client 62.84.185.69:16856] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaLBtFtZF9Zd_U7easBfTAAAAEw"]
[Sat Feb 28 18:21:42.813734 2026] [:error] [pid 52460:tid 52485] [client 62.84.185.69:16862] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaLBtrLWOogAgHGh62T2fgAAAZY"]
[Sat Feb 28 18:21:45.615334 2026] [:error] [pid 39183:tid 39200] [client 62.84.185.69:57866] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaLBuRCf4HvhVePw3LZ3lwAAAAg"]
[Sat Feb 28 18:21:47.699711 2026] [:error] [pid 39184:tid 39234] [client 62.84.185.69:57880] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaLBu1tZF9Zd_U7easBfVgAAAE8"]
[Sat Feb 28 18:21:49.868230 2026] [:error] [pid 39292:tid 39316] [client 62.84.185.69:57884] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaLBvaIAO5fN7BxyqcE_nQAAANY"]
[Sat Feb 28 18:21:51.905981 2026] [:error] [pid 39185:tid 39260] [client 62.84.185.69:57894] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaLBvxVE-FfM89u7BQZ8KgAAAI4"]
[Sat Feb 28 18:21:54.026459 2026] [:error] [pid 52460:tid 52487] [client 62.84.185.69:8550] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaLBwrLWOogAgHGh62T2xgAAAZg"]
[Sat Feb 28 18:21:56.051525 2026] [:error] [pid 39183:tid 39196] [client 62.84.185.69:8556] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaLBxBCf4HvhVePw3LZ3tAAAAAQ"]
[Sat Feb 28 18:21:58.137709 2026] [:error] [pid 52460:tid 52484] [client 62.84.185.69:8564] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaLBxrLWOogAgHGh62T25wAAAZU"]
[Sat Feb 28 18:22:00.303512 2026] [:error] [pid 52460:tid 52468] [client 62.84.185.69:8576] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaLByLLWOogAgHGh62T2-QAAAYU"]
[Sat Feb 28 18:22:02.365835 2026] [:error] [pid 52460:tid 52470] [client 62.84.185.69:8592] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaLByrLWOogAgHGh62T3EwAAAYc"]
[Sat Feb 28 18:22:04.502445 2026] [:error] [pid 49763:tid 49768] [client 62.84.185.69:37278] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aaLBzLTHSOG_yf2PpqFPhQAAAcI"]
[Sat Feb 28 18:28:44.225686 2026] [:error] [pid 49763:tid 49789] [client 212.227.21.19:52754] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaLDXLTHSOG_yf2PpqFYYwAAAdc"]
[Sat Feb 28 18:28:46.088459 2026] [:error] [pid 52460:tid 52468] [client 212.227.21.19:52770] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaLDXrLWOogAgHGh62T9FwAAAYU"]
[Sat Feb 28 18:28:48.117897 2026] [:error] [pid 39184:tid 39242] [client 212.227.21.19:44432] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaLDYFtZF9Zd_U7easBi3wAAAFc"]
[Sat Feb 28 19:17:43.467588 2026] [:error] [pid 52460:tid 52476] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Feb 28 19:17:43.987465 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 28 19:17:44.314030 2026] [:error] [pid 52460:tid 52474] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Feb 28 19:17:44.601025 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Feb 28 19:17:44.897877 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Feb 28 19:17:45.202984 2026] [:error] [pid 52460:tid 52479] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Feb 28 19:17:45.538199 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 28 19:17:45.864139 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 28 19:17:46.551035 2026] [:error] [pid 52460:tid 52469] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Feb 28 19:17:47.576478 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 28 19:17:47.898902 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Feb 28 19:17:48.231991 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Feb 28 19:17:48.767199 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Feb 28 19:17:49.103801 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 28 19:17:49.449434 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Feb 28 19:17:50.139482 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Feb 28 19:17:50.472670 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Feb 28 19:17:50.930680 2026] [:error] [pid 52460:tid 52468] [client 45.86.200.215:42853] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Feb 28 19:17:56.328444 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.215:42853] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaLO5LLWOogAgHGh62QmwQAAAYo"]
[Sat Feb 28 19:17:58.011976 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.238:57637] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaLO5rTHSOG_yf2PpqGsaAAAAcQ"]
[Sat Feb 28 19:17:59.984682 2026] [:error] [pid 22194:tid 22207] [client 45.86.200.220:56301] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Feb 28 19:18:01.041319 2026] [:error] [pid 22194:tid 22200] [client 45.86.200.220:56301] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaLO6X6mbajs3bzQGyuNeQAAAUQ"]
[Sat Feb 28 19:18:02.707313 2026] [:error] [pid 52460:tid 52467] [client 185.82.72.106:33587] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 28 19:18:03.048523 2026] [:error] [pid 52460:tid 52473] [client 185.82.72.106:33587] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaLO67LWOogAgHGh62Qm6QAAAYo"]
[Sat Feb 28 19:18:04.001004 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.226:60027] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Feb 28 19:18:05.548265 2026] [:error] [pid 39292:tid 39314] [client 45.86.200.226:60027] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaLO7aIAO5fN7BxyqcFUGgAAANQ"]
[Sat Feb 28 19:18:07.582203 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.223:33751] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaLO77THSOG_yf2PpqGsxwAAAc8"]
[Sat Feb 28 19:18:08.276457 2026] [:error] [pid 39292:tid 39306] [client 185.82.72.102:27997] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaLO8KIAO5fN7BxyqcFUIQAAAMw"]
[Sat Feb 28 19:18:08.875010 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.215:48697] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaLO8BCf4HvhVePw3La8qwAAAAY"]
[Sat Feb 28 19:18:09.498183 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.242:63191] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaLO8RCf4HvhVePw3La8uQAAAAo"]
[Sat Feb 28 19:18:10.138137 2026] [:error] [pid 39183:tid 39192] [client 185.82.72.206:54373] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaLO8hCf4HvhVePw3La8xQAAAAA"]
[Sat Feb 28 19:18:11.128160 2026] [:error] [pid 52460:tid 52480] [client 185.82.72.182:49825] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaLO87LWOogAgHGh62QnAwAAAZE"]
[Sat Feb 28 19:18:12.179227 2026] [:error] [pid 39183:tid 39201] [client 185.82.72.179:62793] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Feb 28 19:18:12.845582 2026] [:error] [pid 39183:tid 39194] [client 185.82.72.179:62793] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaLO9BCf4HvhVePw3La8-wAAAAI"]
[Sat Feb 28 19:18:14.469780 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.220:45595] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaLO9rTHSOG_yf2PpqGtCQAAAcw"]
[Sat Feb 28 19:18:15.619652 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.237:26525] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaLO97LWOogAgHGh62QnGQAAAYM"]
[Sat Feb 28 19:18:16.236744 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.237:53931] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Feb 28 19:18:16.537058 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.237:53931] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaLO-LTHSOG_yf2PpqGtJQAAAco"]
[Sat Feb 28 19:18:17.127830 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.232:52201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Feb 28 19:18:18.130517 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.232:52201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Feb 28 19:18:19.338524 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.232:52201] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaLO-7THSOG_yf2PpqGtTQAAAcQ"]
[Sat Feb 28 19:18:20.098840 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.245:43399] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Feb 28 19:18:20.460770 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.245:43399] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaLO_LTHSOG_yf2PpqGtYgAAAcU"]
[Sat Feb 28 19:18:21.130972 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.222:32971] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Feb 28 19:18:21.992022 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.222:32971] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaLO_bLWOogAgHGh62QnKQAAAYc"]
[Sat Feb 28 19:18:23.017555 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.225:65049] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaLO_xCf4HvhVePw3La9MwAAABQ"]
[Sat Feb 28 19:18:25.408134 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.250:31669] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Feb 28 19:18:25.772774 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.250:31669] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Feb 28 19:18:26.401892 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.250:31669] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaLPAhCf4HvhVePw3La9ZAAAABg"]
[Sat Feb 28 19:18:27.382511 2026] [:error] [pid 49763:tid 49776] [client 185.82.72.109:40481] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaLPA7THSOG_yf2PpqGtuAAAAco"]
[Sat Feb 28 19:18:28.890689 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.213:31517] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaLPBLLWOogAgHGh62QnWgAAAY4"]
[Sat Feb 28 19:18:31.839714 2026] [:error] [pid 39184:tid 39223] [client 185.82.72.107:35067] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaLPB1tZF9Zd_U7easCBRgAAAEQ"]
[Sat Feb 28 19:18:32.389552 2026] [:error] [pid 39184:tid 39237] [client 45.86.200.243:25183] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLPCFtZF9Zd_U7easCBSQAAAFI"]
[Sat Feb 28 19:18:34.056977 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.231:45539] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Feb 28 19:18:34.367501 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.231:45539] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaLPCrLWOogAgHGh62QnigAAAYo"]
[Sat Feb 28 19:18:35.041914 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.236:37867] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaLPCxCf4HvhVePw3La9vAAAABQ"]
[Sat Feb 28 19:18:35.632780 2026] [:error] [pid 39184:tid 39228] [client 185.82.72.103:43415] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaLPC1tZF9Zd_U7easCBTQAAAEk"]
[Sat Feb 28 19:18:37.018726 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.239:34995] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Feb 28 19:18:37.708460 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.239:34995] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Feb 28 19:18:39.389978 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.239:34995] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaLPD7THSOG_yf2PpqGuFwAAAcM"]
[Sat Feb 28 19:18:42.457613 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.111:46563] [client 185.82.72.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.111, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaLPErTHSOG_yf2PpqGuIwAAAcQ"]
[Sat Feb 28 19:18:42.815486 2026] [:error] [pid 49763:tid 49784] [client 185.82.72.111:46563] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Feb 28 19:18:44.563362 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.111:46563] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Feb 28 19:18:44.954730 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.111:46563] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Feb 28 19:18:46.831086 2026] [:error] [pid 49763:tid 49766] [client 185.82.72.111:46563] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaLPFrTHSOG_yf2PpqGuSgAAAcA"]
[Sat Feb 28 19:18:48.077521 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.244:49623] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Feb 28 19:18:48.462863 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.244:49623] [client 45.86.200.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.244, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaLPGBCf4HvhVePw3La-TAAAAAI"]
[Sat Feb 28 19:18:49.163567 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.244:49623] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaLPGRCf4HvhVePw3La-UgAAABY"]
[Sat Feb 28 19:18:50.980203 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.244:49645] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Feb 28 19:18:51.612622 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.244:49645] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Feb 28 19:18:52.241086 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.244:49645] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaLPHBCf4HvhVePw3La-fgAAABU"]
[Sat Feb 28 19:18:52.896000 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.233:35853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Feb 28 19:18:53.865443 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.233:35853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Feb 28 19:18:54.592270 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.233:35853] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Feb 28 19:18:56.035875 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.233:35853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Feb 28 19:18:56.361839 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.233:35853] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaLPILTHSOG_yf2PpqGuyQAAAcg"]
[Sat Feb 28 19:18:56.951522 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.250:37849] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Feb 28 19:18:57.275278 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.250:37849] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Feb 28 19:18:57.703465 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.250:37849] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaLPIRCf4HvhVePw3La-qgAAAAM"]
[Sat Feb 28 19:18:59.238350 2026] [:error] [pid 49763:tid 49772] [client 185.82.72.179:44253] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Feb 28 19:19:01.277520 2026] [:error] [pid 49763:tid 49780] [client 185.82.72.179:44253] [client 185.82.72.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.179, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaLPJbTHSOG_yf2PpqGvKgAAAc4"]
[Sat Feb 28 19:19:01.551604 2026] [:error] [pid 49763:tid 49778] [client 185.82.72.179:44253] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaLPJbTHSOG_yf2PpqGvMAAAAcw"]
[Sat Feb 28 19:19:05.704263 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.239:39311] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Feb 28 19:19:08.181002 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.239:39311] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Feb 28 19:19:08.479333 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.239:39311] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaLPLBCf4HvhVePw3La-7gAAABA"]
[Sat Feb 28 19:19:09.149664 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.221:40357] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Feb 28 19:19:10.137294 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.221:40357] [client 45.86.200.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.221, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaLPLrLWOogAgHGh62QoEQAAAZY"]
[Sat Feb 28 19:19:10.457366 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.221:40357] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Feb 28 19:19:10.777805 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.221:40357] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Feb 28 19:19:11.342616 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.221:40357] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Feb 28 19:19:11.674609 2026] [:error] [pid 52460:tid 52469] [client 45.86.200.221:40357] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaLPL7LWOogAgHGh62QoIQAAAYY"]
[Sat Feb 28 19:19:12.319283 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.226:50607] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Feb 28 19:19:12.649006 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.226:50607] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaLPMLTHSOG_yf2PpqGv4AAAAdY"]
[Sat Feb 28 19:19:13.643910 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.222:42299] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Feb 28 19:19:14.130713 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.222:42299] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLPMrTHSOG_yf2PpqGv9AAAAc0"]
[Sat Feb 28 19:19:15.873647 2026] [:error] [pid 39184:tid 39234] [client 185.82.72.109:52259] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Feb 28 19:19:16.188853 2026] [:error] [pid 39184:tid 39219] [client 185.82.72.109:52259] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaLPNFtZF9Zd_U7easCBjgAAAEA"]
[Sat Feb 28 19:19:16.842798 2026] [:error] [pid 52460:tid 52475] [client 185.82.72.109:57197] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaLPNLLWOogAgHGh62QoUgAAAYw"]
[Sat Feb 28 19:19:17.435376 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.246:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Feb 28 19:19:18.287713 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.246:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sat Feb 28 19:19:19.541995 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.246:58915] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaLPN7LWOogAgHGh62QodgAAAYg"]
[Sat Feb 28 19:19:20.465369 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.243:25389] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaLPOBCf4HvhVePw3La_LwAAAAs"]
[Sat Feb 28 19:19:22.132499 2026] [:error] [pid 22194:tid 22212] [client 45.86.200.233:58719] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaLPOn6mbajs3bzQGyuNrwAAAVA"]
[Sat Feb 28 19:19:22.886575 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.221:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Feb 28 19:19:24.661283 2026] [:error] [pid 49763:tid 49783] [client 45.86.200.221:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Feb 28 19:19:25.044089 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.221:26527] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaLPPbTHSOG_yf2PpqGwGQAAAcA"]
[Sat Feb 28 19:19:25.708229 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.228:34735] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Feb 28 19:19:26.335996 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.228:34735] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaLPPrTHSOG_yf2PpqGwLQAAAcQ"]
[Sat Feb 28 19:19:28.004554 2026] [:error] [pid 22194:tid 22218] [client 45.86.200.248:60863] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaLPQH6mbajs3bzQGyuNtAAAAVY"]
[Sat Feb 28 19:19:29.036560 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.111:62559] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Feb 28 19:19:30.023697 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.111:62559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Feb 28 19:19:30.908671 2026] [:error] [pid 49763:tid 49766] [client 185.82.72.111:62559] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Feb 28 19:19:31.257465 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.111:62559] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaLPQ7THSOG_yf2PpqGwVQAAAcc"]
[Sat Feb 28 19:19:31.889040 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.107:45171] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaLPQxCf4HvhVePw3La_aAAAABI"]
[Sat Feb 28 19:19:32.780752 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.246:24995] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaLPRLTHSOG_yf2PpqGwXQAAAcg"]
[Sat Feb 28 19:19:33.526229 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.215:23939] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaLPRRCf4HvhVePw3La_fwAAABU"]
[Sat Feb 28 19:19:34.168494 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.106:42511] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sat Feb 28 19:19:34.594059 2026] [:error] [pid 49763:tid 49790] [client 185.82.72.106:42511] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaLPRrTHSOG_yf2PpqGwbwAAAdg"]
[Sat Feb 28 19:19:35.740575 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.218:44273] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLPRxCf4HvhVePw3La_lwAAAAg"]
[Sat Feb 28 19:19:36.414676 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.216:42641] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Feb 28 19:19:37.114496 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.216:42641] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaLPSRCf4HvhVePw3La_swAAABY"]
[Sat Feb 28 19:19:37.842517 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.245:28241] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaLPSbTHSOG_yf2PpqGwgwAAAc4"]
[Sat Feb 28 19:19:38.438111 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.179:56861] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaLPSrTHSOG_yf2PpqGwkAAAAdA"]
[Sat Feb 28 19:19:39.484446 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.228:25887] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaLPS7LWOogAgHGh62QotwAAAYc"]
[Sat Feb 28 19:19:41.067515 2026] [:error] [pid 39184:tid 39237] [client 185.82.72.109:57159] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaLPTVtZF9Zd_U7easCBrwAAAFI"]
[Sat Feb 28 19:19:42.351627 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.241:43427] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaLPTrTHSOG_yf2PpqGwtQAAAcw"]
[Sat Feb 28 19:19:42.969986 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.245:31747] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Feb 28 19:19:44.061142 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.245:31747] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Feb 28 19:19:44.390266 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.245:31747] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaLPULTHSOG_yf2PpqGwygAAAcA"]
[Sat Feb 28 19:19:45.373502 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.223:30777] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Feb 28 19:19:45.811981 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.223:30777] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Feb 28 19:19:47.833483 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.223:30777] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaLPU7THSOG_yf2PpqGw-gAAAco"]
[Sat Feb 28 19:19:50.013836 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.229:63225] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaLPVrTHSOG_yf2PpqGxFwAAAc0"]
[Sat Feb 28 19:19:50.624649 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.245:22289] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaLPVltZF9Zd_U7easCBxwAAAEg"]
[Sat Feb 28 19:19:52.858635 2026] [:error] [pid 39184:tid 39230] [client 185.82.72.109:61275] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaLPWFtZF9Zd_U7easCB0AAAAEs"]
[Sat Feb 28 19:19:54.260725 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.231:49919] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Feb 28 19:19:54.576003 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.231:49919] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sat Feb 28 19:19:54.897932 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.231:49919] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sat Feb 28 19:19:55.230795 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.231:49919] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Feb 28 19:19:57.421525 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.231:49919] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaLPXRCf4HvhVePw3LbAoAAAAAA"]
[Sat Feb 28 19:19:58.020182 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.109:61793] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaLPXhCf4HvhVePw3LbApwAAABI"]
[Sat Feb 28 19:19:58.713883 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.215:56153] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaLPXrLWOogAgHGh62QpBQAAAYk"]
[Sat Feb 28 19:20:01.170434 2026] [:error] [pid 11791:tid 11808] [client 45.86.200.225:34835] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaLPYWuX5e1Q32gqxH2lnAAAAQ8"]
[Sat Feb 28 19:20:02.053866 2026] [:error] [pid 39184:tid 39233] [client 45.86.200.217:62361] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaLPYltZF9Zd_U7easCB2gAAAE4"]
[Sat Feb 28 19:20:04.298406 2026] [:error] [pid 52460:tid 52480] [client 185.82.72.9:23729] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaLPZLLWOogAgHGh62QpMAAAAZE"]
[Sat Feb 28 19:20:05.320614 2026] [:error] [pid 52460:tid 52473] [client 185.82.72.10:65441] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaLPZbLWOogAgHGh62QpPQAAAYo"]
[Sat Feb 28 19:20:06.057369 2026] [:error] [pid 52460:tid 52482] [client 45.86.200.239:54425] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaLPZrLWOogAgHGh62QpSAAAAZM"]
[Sat Feb 28 19:20:06.690586 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.227:30345] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaLPZhCf4HvhVePw3LbA4AAAAA4"]
[Sat Feb 28 19:20:07.545068 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.222:51741] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaLPZ7THSOG_yf2PpqGyIAAAAcE"]
[Sat Feb 28 19:20:08.874850 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.230:48653] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaLPaBCf4HvhVePw3LbA8wAAABU"]
[Sat Feb 28 19:20:09.758176 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.239:22825] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaLPabLWOogAgHGh62QpXAAAAZI"]
[Sat Feb 28 19:20:10.386705 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.226:20617] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Feb 28 19:20:11.080297 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.226:20617] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaLPaxCf4HvhVePw3LbBBwAAAAg"]
[Sat Feb 28 19:20:12.645250 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.216:22771] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaLPbBCf4HvhVePw3LbBGwAAAAw"]
[Sat Feb 28 19:20:13.875553 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.237:36761] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Feb 28 19:20:14.198286 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.237:36761] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaLPbrTHSOG_yf2PpqGyYAAAAdI"]
[Sat Feb 28 19:20:15.188585 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.217:44047] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Feb 28 19:20:15.484586 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.217:44047] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sat Feb 28 19:20:15.845475 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.217:44047] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Feb 28 19:20:16.187977 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.217:44047] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaLPcLTHSOG_yf2PpqGyeAAAAdc"]
[Sat Feb 28 19:20:16.788207 2026] [:error] [pid 39183:tid 39209] [client 185.82.72.107:38093] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Feb 28 19:20:17.083640 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.107:38093] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaLPcRCf4HvhVePw3LbBRgAAAA4"]
[Sat Feb 28 19:20:18.338249 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Feb 28 19:20:18.925723 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Feb 28 19:20:19.275222 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sat Feb 28 19:20:21.014305 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Feb 28 19:20:21.400172 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sat Feb 28 19:20:22.347696 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sat Feb 28 19:20:23.853641 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.239:20339] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Feb 28 19:20:24.171474 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.239:20339] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaLPeLTHSOG_yf2PpqGzFAAAAc0"]
[Sat Feb 28 19:20:24.814707 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.245:64221] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaLPeLTHSOG_yf2PpqGzKgAAAcE"]
[Sat Feb 28 19:20:25.971668 2026] [:error] [pid 11791:tid 11815] [client 45.86.200.249:48567] [client 45.86.200.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.249, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaLPeWuX5e1Q32gqxH2luAAAARY"]
[Sat Feb 28 19:20:25.975492 2026] [:error] [pid 11791:tid 11815] [client 45.86.200.249:48567] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 28 19:20:26.683698 2026] [:error] [pid 11791:tid 11796] [client 45.86.200.249:48567] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Feb 28 19:20:27.006271 2026] [:error] [pid 11791:tid 11816] [client 45.86.200.249:48567] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaLPe2uX5e1Q32gqxH2lvwAAARc"]
[Sat Feb 28 19:20:28.035277 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.107:46205] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Feb 28 19:20:28.419058 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.107:46205] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLPfLTHSOG_yf2PpqGzaQAAAcQ"]
[Sat Feb 28 19:20:29.126878 2026] [:error] [pid 39184:tid 39226] [client 45.86.200.218:27529] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaLPfVtZF9Zd_U7easCCJAAAAEc"]
[Sat Feb 28 19:20:31.228371 2026] [:error] [pid 52460:tid 52465] [client 45.86.200.243:50029] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLPf7LWOogAgHGh62Qp-AAAAYI"]
[Sat Feb 28 19:20:31.973036 2026] [:error] [pid 39292:tid 39308] [client 185.82.72.206:53637] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaLPf6IAO5fN7BxyqcFU8AAAAM4"]
[Sat Feb 28 19:20:33.656434 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.238:31809] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Feb 28 19:20:34.514243 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.238:31809] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaLPgrTHSOG_yf2PpqGzqAAAAck"]
[Sat Feb 28 19:20:35.854779 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.241:23299] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Feb 28 19:20:36.605861 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.241:23299] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaLPhBCf4HvhVePw3LbB8QAAAA8"]
[Sat Feb 28 19:20:37.413068 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.251:59599] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaLPhbTHSOG_yf2PpqGzvQAAAcg"]
[Sat Feb 28 19:20:38.530873 2026] [:error] [pid 39292:tid 39307] [client 45.86.200.218:48153] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Feb 28 19:20:38.954134 2026] [:error] [pid 39292:tid 39316] [client 45.86.200.218:48153] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaLPhqIAO5fN7BxyqcFU_AAAANY"]
[Sat Feb 28 19:20:39.507698 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.226:61941] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaLPhxCf4HvhVePw3LbCAwAAAA0"]
[Sat Feb 28 19:20:40.853246 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.224:49641] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Feb 28 19:20:41.139591 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.224:49641] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sat Feb 28 19:20:41.873041 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.224:49641] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Feb 28 19:20:42.522839 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.224:49641] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaLPihCf4HvhVePw3LbCHwAAAAo"]
[Sat Feb 28 19:20:43.163531 2026] [:error] [pid 11791:tid 11803] [client 185.82.72.111:28139] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaLPi2uX5e1Q32gqxH2lzAAAAQo"]
[Sat Feb 28 19:20:45.013796 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.244:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Feb 28 19:20:45.360541 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.244:59597] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaLPjbTHSOG_yf2PpqG0iAAAAcg"]
[Sat Feb 28 19:20:46.037497 2026] [:error] [pid 22194:tid 22217] [client 45.86.200.231:29309] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaLPjn6mbajs3bzQGyuN1gAAAVU"]
[Sat Feb 28 19:20:46.825208 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.237:53509] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaLPjrTHSOG_yf2PpqG0ogAAAco"]
[Sat Feb 28 19:20:49.223962 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.217:55017] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sat Feb 28 19:20:49.646522 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.217:55017] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaLPkRCf4HvhVePw3LbCQgAAABc"]
[Sat Feb 28 19:20:50.770079 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.215:38611] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaLPkrTHSOG_yf2PpqG0vAAAAdA"]
[Sat Feb 28 19:20:51.803753 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.242:24181] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Feb 28 19:20:52.234991 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.242:24181] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Feb 28 19:20:52.878077 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.242:24181] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Feb 28 19:20:54.250894 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.242:24181] [client 45.86.200.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.242, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaLPlhCf4HvhVePw3LbCZAAAAA4"]
[Sat Feb 28 19:20:55.080065 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.242:24181] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sat Feb 28 19:20:55.455182 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.242:24181] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sat Feb 28 19:20:55.777365 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.242:24181] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Feb 28 19:20:56.409202 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.242:24181] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaLPmBCf4HvhVePw3LbCcAAAAAw"]
[Sat Feb 28 19:20:57.038061 2026] [:error] [pid 39183:tid 39197] [client 185.82.72.182:20507] [client 185.82.72.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.182, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaLPmRCf4HvhVePw3LbCfQAAAAU"]
[Sat Feb 28 19:20:58.379590 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Feb 28 19:20:58.779086 2026] [:error] [pid 39183:tid 39215] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Feb 28 19:20:59.622284 2026] [:error] [pid 39183:tid 39209] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Feb 28 19:21:00.686699 2026] [:error] [pid 39183:tid 39204] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Feb 28 19:21:01.983609 2026] [:error] [pid 39183:tid 39216] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Feb 28 19:21:04.421462 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Feb 28 19:21:04.846224 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sat Feb 28 19:21:06.705777 2026] [:error] [pid 39183:tid 39205] [client 185.82.72.182:20507] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Feb 28 19:21:07.366566 2026] [:error] [pid 39183:tid 39198] [client 185.82.72.182:20507] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaLPoxCf4HvhVePw3LbC4QAAAAY"]
[Sat Feb 28 19:21:08.888051 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.240:65047] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Feb 28 19:21:09.193435 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.240:65047] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaLPpbTHSOG_yf2PpqG1UQAAAdA"]
[Sat Feb 28 19:21:10.094261 2026] [:error] [pid 39185:tid 39261] [client 45.86.200.226:43669] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Feb 28 19:21:10.415256 2026] [:error] [pid 39185:tid 39269] [client 45.86.200.226:43669] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaLPphVE-FfM89u7BQaH2AAAAJc"]
[Sat Feb 28 19:21:11.677340 2026] [:error] [pid 49763:tid 49772] [client 185.82.72.182:62429] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Feb 28 19:21:12.286085 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.182:62429] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Feb 28 19:21:12.914721 2026] [:error] [pid 49763:tid 49774] [client 185.82.72.182:62429] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Feb 28 19:21:13.211328 2026] [:error] [pid 49763:tid 49779] [client 185.82.72.182:62429] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Feb 28 19:21:13.818335 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.182:62429] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaLPqbTHSOG_yf2PpqG1iAAAAcQ"]
[Sat Feb 28 19:21:14.464265 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.250:46403] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sat Feb 28 19:21:14.816520 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.250:46403] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Feb 28 19:21:15.164920 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.250:46403] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaLPqxCf4HvhVePw3LbDZwAAABU"]
[Sat Feb 28 19:21:16.163143 2026] [:error] [pid 49763:tid 49784] [client 185.82.72.9:63903] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaLPrLTHSOG_yf2PpqG1pwAAAdI"]
[Sat Feb 28 19:21:17.072936 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.217:54189] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Feb 28 19:21:18.357952 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.217:54189] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Feb 28 19:21:18.680559 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.217:54189] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sat Feb 28 19:21:18.986164 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.217:54189] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaLPrhCf4HvhVePw3LbDgwAAAAU"]
[Sat Feb 28 19:21:19.622513 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.230:42811] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaLPr7THSOG_yf2PpqG1yQAAAck"]
[Sat Feb 28 19:21:21.894999 2026] [:error] [pid 11791:tid 11793] [client 185.82.72.103:39655] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sat Feb 28 19:21:22.828412 2026] [:error] [pid 11791:tid 11796] [client 185.82.72.103:39655] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaLPsmuX5e1Q32gqxH2mAwAAAQM"]
[Sat Feb 28 19:21:23.852930 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.215:32861] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaLPs7THSOG_yf2PpqG1-AAAAcw"]
[Sat Feb 28 19:21:24.919600 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.218:36883] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Feb 28 19:21:25.327343 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.218:36883] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Feb 28 19:21:25.685191 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.218:36883] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaLPtRCf4HvhVePw3LbDpAAAAAI"]
[Sat Feb 28 19:21:26.772610 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.239:33219] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Feb 28 19:21:27.193302 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.239:33219] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sat Feb 28 19:21:27.865311 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.239:33219] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Feb 28 19:21:28.844756 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.239:33219] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaLPuBCf4HvhVePw3LbDxQAAAAI"]
[Sat Feb 28 19:21:29.498620 2026] [:error] [pid 49763:tid 49785] [client 185.82.72.111:54185] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Feb 28 19:21:30.588654 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.111:54185] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaLPurTHSOG_yf2PpqG2VAAAAdQ"]
[Sat Feb 28 19:21:31.640017 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.247:28421] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sat Feb 28 19:21:32.616428 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.247:28421] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Feb 28 19:21:32.935555 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.247:28421] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Feb 28 19:21:33.666029 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.247:28421] [client 45.86.200.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.247, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaLPvbTHSOG_yf2PpqG2cwAAAdg"]
[Sat Feb 28 19:21:35.595965 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.247:28421] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaLPv7THSOG_yf2PpqG2hwAAAdQ"]
[Sat Feb 28 19:21:36.293007 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.244:51025] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sat Feb 28 19:21:36.678547 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.244:51025] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaLPwBCf4HvhVePw3LbD4wAAABc"]
[Sat Feb 28 19:21:37.328833 2026] [:error] [pid 11791:tid 11804] [client 185.82.72.108:48733] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Feb 28 19:21:38.107087 2026] [:error] [pid 11791:tid 11812] [client 185.82.72.108:48733] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Feb 28 19:21:38.711944 2026] [:error] [pid 11791:tid 11817] [client 185.82.72.108:48733] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaLPwmuX5e1Q32gqxH2mDwAAARg"]
[Sat Feb 28 19:21:40.913151 2026] [:error] [pid 39292:tid 39316] [client 45.86.200.221:35775] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Feb 28 19:21:41.281442 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.221:35775] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sat Feb 28 19:21:42.173888 2026] [:error] [pid 39292:tid 39313] [client 45.86.200.221:35775] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaLPxqIAO5fN7BxyqcFVigAAANM"]
[Sat Feb 28 19:21:43.296069 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.240:32727] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaLPx7THSOG_yf2PpqG2wgAAAck"]
[Sat Feb 28 19:21:44.099337 2026] [:error] [pid 39184:tid 39230] [client 45.86.200.234:35733] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sat Feb 28 19:21:44.611545 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.234:35733] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sat Feb 28 19:21:45.813857 2026] [:error] [pid 39184:tid 39239] [client 45.86.200.234:35733] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaLPyVtZF9Zd_U7easCDKAAAAFQ"]
[Sat Feb 28 19:21:47.221509 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.213:34697] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Feb 28 19:21:47.849005 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.213:34697] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sat Feb 28 19:21:48.185718 2026] [:error] [pid 52460:tid 52479] [client 45.86.200.213:34697] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaLPzLLWOogAgHGh62QrGAAAAZA"]
[Sat Feb 28 19:21:49.122002 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.223:32103] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aaLPzRCf4HvhVePw3LbEKwAAAAQ"]
[Sat Feb 28 19:21:49.716333 2026] [:error] [pid 22194:tid 22209] [client 45.86.200.223:37913] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaLPzX6mbajs3bzQGyuOJAAAAU0"]
[Sat Feb 28 19:21:50.634370 2026] [:error] [pid 39292:tid 39295] [client 45.86.200.213:59961] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaLPzqIAO5fN7BxyqcFVlAAAAME"]
[Sat Feb 28 19:21:51.409541 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.231:35269] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaLPz2uX5e1Q32gqxH2mGwAAARI"]
[Sat Feb 28 19:21:52.212621 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.235:36857] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaLP0FtZF9Zd_U7easCDMQAAAEY"]
[Sat Feb 28 19:21:53.028226 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.228:53419] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaLP0RCf4HvhVePw3LbEPQAAABc"]
[Sat Feb 28 19:21:54.818982 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.235:64579] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaLP0hCf4HvhVePw3LbESwAAAA8"]
[Sat Feb 28 19:21:55.601339 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.223:48003] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaLP07THSOG_yf2PpqG3CwAAAcE"]
[Sat Feb 28 19:21:56.306279 2026] [:error] [pid 39185:tid 39264] [client 45.86.200.239:45583] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaLP1BVE-FfM89u7BQaIEAAAAJI"]
[Sat Feb 28 19:21:57.467728 2026] [:error] [pid 39185:tid 39260] [client 45.86.200.250:38943] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaLP1RVE-FfM89u7BQaIFAAAAI4"]
[Sat Feb 28 19:21:58.866233 2026] [:error] [pid 49763:tid 49783] [client 45.86.200.248:46709] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaLP1rTHSOG_yf2PpqG3FwAAAdE"]
[Sat Feb 28 19:21:59.544133 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.228:62449] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sat Feb 28 19:22:00.867851 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.228:62449] [client 45.86.200.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.228, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaLP2BCf4HvhVePw3LbEdQAAAAQ"]
[Sat Feb 28 19:22:03.119648 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.228:62449] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaLP2xCf4HvhVePw3LbEjAAAABM"]
[Sat Feb 28 19:22:03.767232 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.228:60515] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaLP27THSOG_yf2PpqG3LQAAAcA"]
[Sat Feb 28 19:22:05.466171 2026] [:error] [pid 39184:tid 39224] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Feb 28 19:22:05.798128 2026] [:error] [pid 39184:tid 39231] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sat Feb 28 19:22:08.526485 2026] [:error] [pid 39184:tid 39235] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sat Feb 28 19:22:08.856455 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sat Feb 28 19:22:10.475194 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sat Feb 28 19:22:10.826746 2026] [:error] [pid 39184:tid 39237] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Feb 28 19:22:11.148098 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sat Feb 28 19:22:11.491451 2026] [:error] [pid 39184:tid 39243] [client 45.86.200.237:56727] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sat Feb 28 19:22:12.019944 2026] [:error] [pid 39184:tid 39229] [client 45.86.200.237:56727] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaLP5FtZF9Zd_U7easCDYAAAAEo"]
[Sat Feb 28 19:22:12.633473 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.231:35717] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaLP5LTHSOG_yf2PpqG3hAAAAco"]
[Sat Feb 28 19:22:13.320491 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.237:54773] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaLP5bLWOogAgHGh62QrWAAAAZE"]
[Sat Feb 28 19:22:14.362853 2026] [:error] [pid 39183:tid 39197] [client 185.82.72.106:37185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sat Feb 28 19:22:14.675036 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.106:37185] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Feb 28 19:22:15.324710 2026] [:error] [pid 39183:tid 39213] [client 185.82.72.106:37185] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Feb 28 19:22:16.116820 2026] [:error] [pid 39183:tid 39201] [client 185.82.72.106:37185] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaLP6BCf4HvhVePw3LbEzQAAAAk"]
[Sat Feb 28 19:22:16.790366 2026] [:error] [pid 49763:tid 49768] [client 185.82.72.182:50085] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaLP6LTHSOG_yf2PpqG3mQAAAcI"]
[Sat Feb 28 19:22:17.490942 2026] [:error] [pid 39184:tid 39241] [client 185.82.72.179:59497] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaLP6VtZF9Zd_U7easCDagAAAFY"]
[Sat Feb 28 19:22:19.461084 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.228:39701] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaLP67LWOogAgHGh62QregAAAYM"]
[Sat Feb 28 19:22:21.085314 2026] [:error] [pid 39183:tid 39207] [client 185.82.72.102:36693] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaLP7RCf4HvhVePw3LbE7QAAAA8"]
[Sat Feb 28 19:22:22.760748 2026] [:error] [pid 22194:tid 22200] [client 45.86.200.213:59149] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaLP7n6mbajs3bzQGyuOUgAAAUQ"]
[Sat Feb 28 19:22:27.358612 2026] [:error] [pid 49763:tid 49785] [client 185.82.72.9:20733] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaLP87THSOG_yf2PpqG33wAAAdM"]
[Sat Feb 28 19:22:28.085734 2026] [:error] [pid 52460:tid 52464] [client 185.82.72.106:63323] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sat Feb 28 19:22:28.810700 2026] [:error] [pid 52460:tid 52470] [client 185.82.72.106:63323] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aaLP9LLWOogAgHGh62QrlAAAAYc"]
[Sat Feb 28 19:22:30.202114 2026] [:error] [pid 39292:tid 39306] [client 45.86.200.227:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Feb 28 19:22:31.190756 2026] [:error] [pid 39292:tid 39309] [client 45.86.200.227:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Feb 28 19:22:31.510770 2026] [:error] [pid 39292:tid 39303] [client 45.86.200.227:32525] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaLP96IAO5fN7BxyqcFV3QAAAMk"]
[Sat Feb 28 19:22:33.009605 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.241:62007] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaLP-bTHSOG_yf2PpqG4FQAAAcE"]
[Sat Feb 28 19:22:34.968179 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.251:45135] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaLP-rTHSOG_yf2PpqG4IAAAAc4"]
[Sat Feb 28 19:22:38.753062 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.248:27323] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaLP_rTHSOG_yf2PpqG4WAAAAcM"]
[Sat Feb 28 19:22:39.922846 2026] [:error] [pid 39184:tid 39243] [client 45.86.200.248:63617] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Feb 28 19:22:40.231272 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.248:63617] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaLQAFtZF9Zd_U7easCDlQAAAEg"]
[Sat Feb 28 19:22:40.802666 2026] [:error] [pid 49763:tid 49778] [client 185.82.72.206:41001] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaLQALTHSOG_yf2PpqG4bQAAAcw"]
[Sat Feb 28 19:22:44.472600 2026] [:error] [pid 39292:tid 39318] [client 45.86.200.222:35751] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaLQBKIAO5fN7BxyqcFV9AAAANg"]
[Sat Feb 28 19:22:46.193135 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.228:60529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Feb 28 19:22:47.787528 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.228:60529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Feb 28 19:22:48.133354 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.228:60529] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaLQCBCf4HvhVePw3LbFbgAAAAU"]
[Sat Feb 28 19:22:49.477525 2026] [:error] [pid 11791:tid 11804] [client 45.86.200.222:62539] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sat Feb 28 19:22:50.127769 2026] [:error] [pid 11791:tid 11805] [client 45.86.200.222:62539] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLQCmuX5e1Q32gqxH2mggAAAQw"]
[Sat Feb 28 19:22:51.021985 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.107:23123] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaLQC7THSOG_yf2PpqG4kAAAAcM"]
[Sat Feb 28 19:22:53.637427 2026] [:error] [pid 22194:tid 22201] [client 45.86.200.218:51535] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaLQDX6mbajs3bzQGyuObgAAAUU"]
[Sat Feb 28 19:22:55.291910 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.225:44051] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaLQDxCf4HvhVePw3LbFoQAAAA0"]
[Sat Feb 28 19:22:55.925446 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.223:44587] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaLQD7THSOG_yf2PpqG4qgAAAc0"]
[Sat Feb 28 19:22:56.848804 2026] [:error] [pid 39184:tid 39224] [client 185.82.72.109:60997] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sat Feb 28 19:22:58.421450 2026] [:error] [pid 39184:tid 39242] [client 185.82.72.109:60997] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaLQEltZF9Zd_U7easCDsQAAAFc"]
[Sat Feb 28 19:22:59.719197 2026] [:error] [pid 11791:tid 11804] [client 45.86.200.246:36617] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaLQE2uX5e1Q32gqxH2mjgAAAQs"]
[Sat Feb 28 19:23:00.356368 2026] [:error] [pid 39185:tid 39269] [client 185.82.72.10:27725] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaLQFBVE-FfM89u7BQaIUQAAAJc"]
[Sat Feb 28 19:23:01.368311 2026] [:error] [pid 49763:tid 49784] [client 185.82.72.206:30611] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat Feb 28 19:23:01.683113 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.206:30611] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaLQFbTHSOG_yf2PpqG40gAAAcM"]
[Sat Feb 28 19:23:03.187710 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.215:35609] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaLQF7LWOogAgHGh62QrywAAAYg"]
[Sat Feb 28 19:23:06.059003 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.215:53249] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaLQGmuX5e1Q32gqxH2mmAAAARM"]
[Sat Feb 28 19:23:07.214505 2026] [:error] [pid 39184:tid 39232] [client 45.86.200.248:58167] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Feb 28 19:23:07.662538 2026] [:error] [pid 39184:tid 39223] [client 45.86.200.248:58167] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaLQG1tZF9Zd_U7easCDugAAAEQ"]
[Sat Feb 28 19:23:09.125145 2026] [:error] [pid 11791:tid 11816] [client 45.86.200.248:61539] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaLQHWuX5e1Q32gqxH2mnwAAARc"]
[Sat Feb 28 19:23:11.449191 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.231:49731] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aaLQH7THSOG_yf2PpqG48wAAAcU"]
[Sat Feb 28 19:23:13.807013 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.226:35795] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaLQIbLWOogAgHGh62Qr5QAAAZc"]
[Sat Feb 28 19:23:14.595184 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.247:61999] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aaLQIhCf4HvhVePw3LbGNwAAAA0"]
[Sat Feb 28 19:23:15.559498 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.232:45313] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaLQI1tZF9Zd_U7easCDzgAAAEY"]
[Sat Feb 28 19:23:18.677554 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.213:32399] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaLQJrTHSOG_yf2PpqG5GQAAAdI"]
[Sat Feb 28 19:23:20.230310 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.239:57659] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaLQKLTHSOG_yf2PpqG5MQAAAcA"]
[Sat Feb 28 19:23:21.740344 2026] [:error] [pid 39292:tid 39304] [client 45.86.200.213:43755] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Feb 28 19:23:22.085821 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.213:43755] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaLQKqIAO5fN7BxyqcFWIAAAANU"]
[Sat Feb 28 19:23:24.261112 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.182:22449] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaLQLBCf4HvhVePw3LbGjAAAAAE"]
[Sat Feb 28 19:23:24.970124 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.219:59975] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sat Feb 28 19:23:27.533235 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.219:59975] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaLQLxCf4HvhVePw3LbGnAAAAA4"]
[Sat Feb 28 19:23:28.605804 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.111:42607] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaLQMLTHSOG_yf2PpqG5dAAAAc8"]
[Sat Feb 28 19:23:29.790218 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.251:48571] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaLQMRCf4HvhVePw3LbGswAAABY"]
[Sat Feb 28 19:23:31.797289 2026] [:error] [pid 22194:tid 22202] [client 45.86.200.236:52715] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaLQM36mbajs3bzQGyuOjwAAAUY"]
[Sat Feb 28 19:23:35.424344 2026] [:error] [pid 39292:tid 39296] [client 45.86.200.240:51575] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaLQN6IAO5fN7BxyqcFWOAAAAMI"]
[Sat Feb 28 19:23:36.050882 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.218:26613] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaLQOLTHSOG_yf2PpqG50QAAAcE"]
[Sat Feb 28 19:23:37.761632 2026] [:error] [pid 49763:tid 49787] [client 185.82.72.102:32801] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaLQObTHSOG_yf2PpqG6DAAAAdU"]
[Sat Feb 28 19:23:38.443631 2026] [:error] [pid 39184:tid 39233] [client 185.82.72.104:41397] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLQOltZF9Zd_U7easCD7gAAAE4"]
[Sat Feb 28 19:23:39.791270 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.228:30505] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaLQO7THSOG_yf2PpqG6SQAAAc8"]
[Sat Feb 28 19:23:40.611024 2026] [:error] [pid 39184:tid 39234] [client 45.86.200.229:48853] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaLQPFtZF9Zd_U7easCD8AAAAE8"]
[Sat Feb 28 19:23:42.962971 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.219:60487] [client 45.86.200.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.219, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaLQPrLWOogAgHGh62QsMwAAAYk"]
[Sat Feb 28 19:23:42.970922 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.219:60487] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Feb 28 19:23:43.332485 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.219:60487] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaLQP7LWOogAgHGh62QsNwAAAYw"]
[Sat Feb 28 19:23:45.663230 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.237:25589] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Feb 28 19:23:45.991638 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.237:25589] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaLQQRCf4HvhVePw3LbHHgAAAAw"]
[Sat Feb 28 19:23:46.664688 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.246:38257] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aaLQQhCf4HvhVePw3LbHIgAAAA4"]
[Sat Feb 28 19:23:47.313661 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.218:21847] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sat Feb 28 19:23:49.963240 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.218:21847] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaLQRbTHSOG_yf2PpqG6wAAAAc8"]
[Sat Feb 28 19:23:50.720179 2026] [:error] [pid 39292:tid 39314] [client 45.86.200.221:54615] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaLQRqIAO5fN7BxyqcFWVwAAANQ"]
[Sat Feb 28 19:23:52.585760 2026] [:error] [pid 39184:tid 39239] [client 45.86.200.247:44669] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaLQSFtZF9Zd_U7easCECgAAAFQ"]
[Sat Feb 28 19:23:53.278864 2026] [:error] [pid 11791:tid 11810] [client 45.86.200.236:30847] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaLQSWuX5e1Q32gqxH2nBAAAARE"]
[Sat Feb 28 19:23:54.005484 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.243:24917] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sat Feb 28 19:23:54.654095 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.243:24917] [client 45.86.200.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.243, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaLQShCf4HvhVePw3LbHPAAAAAs"]
[Sat Feb 28 19:23:55.464631 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.243:24917] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaLQSxCf4HvhVePw3LbHPwAAAAE"]
[Sat Feb 28 19:23:57.684005 2026] [:error] [pid 39292:tid 39311] [client 45.86.200.223:65051] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaLQTaIAO5fN7BxyqcFWZwAAANE"]
[Sat Feb 28 19:23:58.462170 2026] [:error] [pid 52460:tid 52487] [client 185.82.72.108:24713] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Feb 28 19:23:58.800797 2026] [:error] [pid 52460:tid 52482] [client 185.82.72.108:24713] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaLQTrLWOogAgHGh62QsawAAAZM"]
[Sat Feb 28 19:23:59.589618 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.104:45341] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaLQT7THSOG_yf2PpqG7DAAAAcE"]
[Sat Feb 28 19:24:00.436036 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.244:50781] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Feb 28 19:24:01.600336 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.244:50781] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaLQUbLWOogAgHGh62QshQAAAZI"]
[Sat Feb 28 19:24:03.518434 2026] [:error] [pid 11791:tid 11810] [client 45.86.200.214:56093] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaLQU2uX5e1Q32gqxH2nFgAAARE"]
[Sat Feb 28 19:24:04.370916 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.250:36629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sat Feb 28 19:24:05.138839 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.250:36629] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Feb 28 19:24:05.890445 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.250:36629] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaLQVbLWOogAgHGh62QsoAAAAZU"]
[Sat Feb 28 19:24:06.599564 2026] [:error] [pid 39185:tid 39263] [client 45.86.200.220:37859] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaLQVhVE-FfM89u7BQaIrgAAAJE"]
[Sat Feb 28 19:24:07.694807 2026] [:error] [pid 39292:tid 39297] [client 185.82.72.107:25407] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aaLQV6IAO5fN7BxyqcFWdAAAAMM"]
[Sat Feb 28 19:24:08.392708 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.251:26865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Sat Feb 28 19:24:10.554781 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.251:26865] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaLQWrTHSOG_yf2PpqG7UwAAAdg"]
[Sat Feb 28 19:24:12.110150 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.218:32417] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aaLQXBCf4HvhVePw3LbHpAAAAAc"]
[Sat Feb 28 19:24:12.408972 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.218:32417] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaLQXBCf4HvhVePw3LbHqgAAABE"]
[Sat Feb 28 19:24:13.938110 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.213:27765] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaLQXbTHSOG_yf2PpqG7eQAAAcs"]
[Sat Feb 28 19:24:14.666594 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.214:52749] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaLQXrTHSOG_yf2PpqG7hAAAAdM"]
[Sat Feb 28 19:24:16.142108 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.108:34449] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sat Feb 28 19:24:17.478737 2026] [:error] [pid 39183:tid 39202] [client 185.82.72.108:34449] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaLQYRCf4HvhVePw3LbHwwAAAAo"]
[Sat Feb 28 19:24:20.292878 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.231:38945] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaLQZLLWOogAgHGh62Qs5AAAAYA"]
[Sat Feb 28 19:24:21.322358 2026] [:error] [pid 49763:tid 49790] [client 185.82.72.107:42515] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaLQZbTHSOG_yf2PpqG7xQAAAdg"]
[Sat Feb 28 19:24:21.986533 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.223:32181] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sat Feb 28 19:24:23.884047 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.223:32181] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaLQZ7THSOG_yf2PpqG79gAAAc0"]
[Sat Feb 28 19:24:24.961678 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.249:43987] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aaLQaLTHSOG_yf2PpqG8BQAAAdc"]
[Sat Feb 28 19:24:25.600924 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.232:32189] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Feb 28 19:24:26.002841 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.232:32189] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaLQarTHSOG_yf2PpqG8EgAAAcM"]
[Sat Feb 28 19:24:26.643573 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.222:45579] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaLQahCf4HvhVePw3LbH3QAAABM"]
[Sat Feb 28 19:24:28.037638 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.214:44791] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaLQbLLWOogAgHGh62Qs9QAAAYg"]
[Sat Feb 28 19:24:29.782270 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.214:43659] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Sat Feb 28 19:24:30.076772 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.214:43659] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaLQbrTHSOG_yf2PpqG8PAAAAdU"]
[Sat Feb 28 19:24:30.728458 2026] [:error] [pid 39183:tid 39213] [client 185.82.72.102:44031] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaLQbhCf4HvhVePw3LbH7QAAABU"]
[Sat Feb 28 19:24:33.373772 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.217:58469] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaLQcRCf4HvhVePw3LbH_QAAABc"]
[Sat Feb 28 19:24:34.757002 2026] [:error] [pid 52460:tid 52466] [client 185.82.72.9:64923] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaLQcrLWOogAgHGh62Qs-gAAAYM"]
[Sat Feb 28 19:24:35.500354 2026] [:error] [pid 49763:tid 49780] [client 185.82.72.206:64763] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Sat Feb 28 19:24:36.662734 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.206:64763] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaLQdLTHSOG_yf2PpqG8ewAAAc8"]
[Sat Feb 28 19:24:37.298046 2026] [:error] [pid 39292:tid 39298] [client 45.86.200.241:22871] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaLQdaIAO5fN7BxyqcFWigAAAMQ"]
[Sat Feb 28 19:24:38.222930 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.231:53605] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaLQdhCf4HvhVePw3LbIDgAAABg"]
[Sat Feb 28 19:24:39.035273 2026] [:error] [pid 39184:tid 39238] [client 45.86.200.229:39627] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Feb 28 19:24:39.685667 2026] [:error] [pid 39184:tid 39242] [client 45.86.200.229:39627] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaLQd1tZF9Zd_U7easCERwAAAFc"]
[Sat Feb 28 19:24:40.324277 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.247:34259] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sat Feb 28 19:24:41.176247 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.247:34259] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaLQeRCf4HvhVePw3LbIFAAAAA4"]
[Sat Feb 28 19:24:41.821027 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.231:30815] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaLQebLWOogAgHGh62QtAgAAAZQ"]
[Sat Feb 28 19:24:44.029458 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.247:48137] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaLQfLTHSOG_yf2PpqG8rQAAAco"]
[Sat Feb 28 19:24:44.746430 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.239:65075] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaLQfBCf4HvhVePw3LbIMgAAABA"]
[Sat Feb 28 19:24:46.452279 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.248:21653] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaLQfhCf4HvhVePw3LbIPQAAAAk"]
[Sat Feb 28 19:24:47.478851 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.250:62003] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaLQf7THSOG_yf2PpqG8ygAAAco"]
[Sat Feb 28 19:24:48.118301 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.215:36323] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaLQgLTHSOG_yf2PpqG80AAAAdI"]
[Sat Feb 28 19:24:48.854113 2026] [:error] [pid 11791:tid 11814] [client 45.86.200.217:33547] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaLQgGuX5e1Q32gqxH2nQgAAARU"]
[Sat Feb 28 19:24:50.487740 2026] [:error] [pid 39292:tid 39302] [client 45.86.200.235:37927] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaLQgqIAO5fN7BxyqcFWmQAAAMg"]
[Sat Feb 28 19:24:53.195435 2026] [:error] [pid 11791:tid 11799] [client 45.86.200.243:36977] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaLQhWuX5e1Q32gqxH2nSgAAAQY"]
[Sat Feb 28 19:24:54.493238 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.236:34839] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaLQhrLWOogAgHGh62QtMQAAAZQ"]
[Sat Feb 28 19:24:55.473802 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.227:26779] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaLQhxCf4HvhVePw3LbITgAAABI"]
[Sat Feb 28 19:24:56.903791 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.237:63389] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sat Feb 28 19:24:58.136592 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.237:63389] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaLQihCf4HvhVePw3LbIWQAAABM"]
[Sat Feb 28 19:24:58.766907 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.214:43389] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaLQirLWOogAgHGh62QtSQAAAYg"]
[Sat Feb 28 19:24:59.862580 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.229:36357] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sat Feb 28 19:25:00.239405 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.229:36357] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaLQjLLWOogAgHGh62QtUQAAAYw"]
[Sat Feb 28 19:25:03.155668 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.224:47363] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaLQjxCf4HvhVePw3LbIaAAAAAQ"]
[Sat Feb 28 19:25:04.167055 2026] [:error] [pid 39184:tid 39236] [client 185.82.72.179:62657] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Sat Feb 28 19:25:04.479924 2026] [:error] [pid 39184:tid 39231] [client 185.82.72.179:62657] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaLQkFtZF9Zd_U7easCEcAAAAEw"]
[Sat Feb 28 19:25:05.915758 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.245:22761] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaLQkbLWOogAgHGh62QtZQAAAZU"]
[Sat Feb 28 19:25:06.558967 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.215:28287] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Feb 28 19:25:06.909828 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.215:28287] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaLQkhCf4HvhVePw3LbIbAAAAAA"]
[Sat Feb 28 19:25:07.941948 2026] [:error] [pid 11791:tid 11805] [client 45.86.200.232:37313] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaLQk2uX5e1Q32gqxH2nUwAAAQw"]
[Sat Feb 28 19:25:09.646805 2026] [:error] [pid 11791:tid 11800] [client 185.82.72.206:62247] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sat Feb 28 19:25:10.244264 2026] [:error] [pid 11791:tid 11812] [client 185.82.72.206:62247] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaLQlmuX5e1Q32gqxH2nXAAAARM"]
[Sat Feb 28 19:25:11.871503 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.219:63847] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaLQl7THSOG_yf2PpqG9GwAAAdg"]
[Sat Feb 28 19:25:12.518759 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.248:35793] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sat Feb 28 19:25:12.837450 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.248:35793] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaLQmBCf4HvhVePw3LbIfgAAAAM"]
[Sat Feb 28 19:25:13.498120 2026] [:error] [pid 49763:tid 49789] [client 185.82.72.102:32835] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaLQmbTHSOG_yf2PpqG9JQAAAdc"]
[Sat Feb 28 19:25:14.140734 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.247:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sat Feb 28 19:25:15.058911 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.247:31181] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaLQm7THSOG_yf2PpqG9MgAAAdQ"]
[Sat Feb 28 19:25:15.947064 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.238:29819] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaLQm6IAO5fN7BxyqcFWsAAAAMc"]
[Sat Feb 28 19:25:18.774751 2026] [:error] [pid 52460:tid 52474] [client 45.86.200.216:56923] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaLQnrLWOogAgHGh62QtiwAAAYs"]
[Sat Feb 28 19:25:19.411498 2026] [:error] [pid 39185:tid 39263] [client 185.82.72.179:23585] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaLQnxVE-FfM89u7BQaI4QAAAJE"]
[Sat Feb 28 19:25:20.376901 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.220:59073] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aaLQoGuX5e1Q32gqxH2nZwAAARI"]
[Sat Feb 28 19:25:21.077746 2026] [:error] [pid 11791:tid 11817] [client 45.86.200.235:47403] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaLQoWuX5e1Q32gqxH2nagAAARg"]
[Sat Feb 28 19:25:21.780413 2026] [:error] [pid 22194:tid 22219] [client 45.86.200.245:41549] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaLQoX6mbajs3bzQGyuO3QAAAVc"]
[Sat Feb 28 19:25:22.425031 2026] [:error] [pid 22194:tid 22202] [client 45.86.200.248:44775] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aaLQon6mbajs3bzQGyuO4AAAAUY"]
[Sat Feb 28 19:25:25.770179 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.223:36587] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaLQpRCf4HvhVePw3LbItQAAAAE"]
[Sat Feb 28 19:25:26.422785 2026] [:error] [pid 11791:tid 11797] [client 45.86.200.246:47507] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaLQpmuX5e1Q32gqxH2ndgAAAQQ"]
[Sat Feb 28 19:25:27.398823 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.248:33623] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Sat Feb 28 19:25:27.945643 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.248:33623] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaLQp7LWOogAgHGh62QtogAAAYw"]
[Sat Feb 28 19:25:28.712652 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.214:24879] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaLQqLTHSOG_yf2PpqG9fAAAAc8"]
[Sat Feb 28 19:25:30.064205 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.239:50733] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaLQqhCf4HvhVePw3LbIwwAAABA"]
[Sat Feb 28 19:25:30.681438 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.227:41055] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaLQqhCf4HvhVePw3LbIyQAAAAs"]
[Sat Feb 28 19:25:35.159982 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.230:55355] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaLQr7THSOG_yf2PpqG9jgAAAc8"]
[Sat Feb 28 19:25:36.002833 2026] [:error] [pid 11791:tid 11798] [client 45.86.200.239:51463] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaLQsGuX5e1Q32gqxH2negAAAQU"]
[Sat Feb 28 19:25:37.685356 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.230:47001] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aaLQsbLWOogAgHGh62QtvgAAAZc"]
[Sat Feb 28 19:25:38.603866 2026] [:error] [pid 39184:tid 39242] [client 45.86.200.238:53253] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaLQsltZF9Zd_U7easCEogAAAFc"]
[Sat Feb 28 19:25:39.847972 2026] [:error] [pid 52460:tid 52476] [client 45.86.200.251:27105] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aaLQs7LWOogAgHGh62QtwgAAAY0"]
[Sat Feb 28 19:25:40.477101 2026] [:error] [pid 39292:tid 39303] [client 45.86.200.240:61463] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaLQtKIAO5fN7BxyqcFW1wAAAMk"]
[Sat Feb 28 19:25:41.187490 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.226:45567] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaLQtbLWOogAgHGh62QtxgAAAZU"]
[Sat Feb 28 19:25:42.687107 2026] [:error] [pid 39183:tid 39214] [client 185.82.72.104:52213] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaLQthCf4HvhVePw3LbJAAAAABY"]
[Sat Feb 28 19:25:43.366146 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.223:51703] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sat Feb 28 19:25:43.662978 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.223:51703] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaLQt7THSOG_yf2PpqG9swAAAc4"]
[Sat Feb 28 19:25:45.014532 2026] [:error] [pid 39183:tid 39194] [client 185.82.72.104:20833] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Sat Feb 28 19:25:45.327531 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.104:20833] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaLQuRCf4HvhVePw3LbJDQAAAA4"]
[Sat Feb 28 19:25:47.432893 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.240:62849] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaLQu7THSOG_yf2PpqG9yAAAAdM"]
[Sat Feb 28 19:25:48.905630 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.235:46977] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaLQvLTHSOG_yf2PpqG92AAAAdM"]
[Sat Feb 28 19:25:51.125595 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.240:32319] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sat Feb 28 19:25:52.505191 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.240:32319] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaLQwLTHSOG_yf2PpqG9_QAAAdY"]
[Sat Feb 28 19:25:53.812114 2026] [:error] [pid 11791:tid 11810] [client 185.82.72.206:63299] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaLQwWuX5e1Q32gqxH2ngQAAARE"]
[Sat Feb 28 19:25:55.120733 2026] [:error] [pid 39185:tid 39259] [client 185.82.72.182:45753] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaLQwxVE-FfM89u7BQaJIwAAAI0"]
[Sat Feb 28 19:25:55.698766 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.229:34281] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaLQw7THSOG_yf2PpqG-CQAAAdI"]
[Sat Feb 28 19:25:56.663039 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.243:46321] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaLQxBCf4HvhVePw3LbJLAAAABA"]
[Sat Feb 28 20:06:04.286466 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:15488] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLaLLLWOogAgHGh62RNJwAAAY0"]
[Sat Feb 28 20:06:04.696078 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:15503] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLaLLLWOogAgHGh62RNLQAAAY8"]
[Sat Feb 28 20:06:05.105780 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:15694] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLaLbLWOogAgHGh62RNNAAAAYg"]
[Sat Feb 28 20:06:05.517604 2026] [:error] [pid 49763:tid 49787] [client 20.220.144.87:15687] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLaLbTHSOG_yf2PpqH_9wAAAdU"]
[Sat Feb 28 20:07:47.632832 2026] [:error] [pid 22194:tid 22205] [client 43.133.220.37:48106] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaLak36mbajs3bzQGyuWGgAAAUk"]
[Sat Feb 28 20:14:59.419459 2026] [:error] [pid 39183:tid 39193] [client 49.51.183.220:54768] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaLcQxCf4HvhVePw3LYFmQAAAAE"]
[Sat Feb 28 21:22:16.198055 2026] [:error] [pid 39184:tid 39223] [client 101.42.46.71:51004] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaLsCFtZF9Zd_U7easDEDAAAAEQ"]
[Sat Feb 28 21:36:43.085137 2026] [:error] [pid 52460:tid 52470] [client 20.151.205.221:18706] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Sat Feb 28 21:36:43.305820 2026] [:error] [pid 52460:tid 52484] [client 20.151.205.221:18706] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 28 21:36:45.009440 2026] [:error] [pid 52460:tid 52483] [client 20.151.205.221:18706] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLvbbLWOogAgHGh62SW2QAAAZQ"]
[Sat Feb 28 21:36:46.276801 2026] [:error] [pid 39184:tid 39225] [client 20.151.205.221:19100] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Feb 28 21:36:46.697166 2026] [:error] [pid 39184:tid 39234] [client 20.151.205.221:19100] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Feb 28 21:36:47.323665 2026] [:error] [pid 39184:tid 39229] [client 20.151.205.221:19100] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaLvb1tZF9Zd_U7easDLswAAAEo"]
[Sat Feb 28 21:36:48.147107 2026] [:error] [pid 52460:tid 52483] [client 20.151.205.221:19073] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaLvcLLWOogAgHGh62SW7AAAAZQ"]
[Sat Feb 28 21:36:48.983284 2026] [:error] [pid 52460:tid 52479] [client 20.151.205.221:19117] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaLvcLLWOogAgHGh62SW9gAAAZA"]
[Sat Feb 28 21:36:49.814489 2026] [:error] [pid 39183:tid 39204] [client 20.151.205.221:19089] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaLvcRCf4HvhVePw3LZZnQAAAAw"]
[Sat Feb 28 21:44:37.149470 2026] [:error] [pid 52460:tid 52480] [client 84.32.49.228:41030] [client 84.32.49.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaLxRbLWOogAgHGh62SbmwAAAZE"]
[Sat Feb 28 23:30:20.022458 2026] [:error] [pid 39183:tid 39214] [client 51.83.9.208:57698] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aaMKDBCf4HvhVePw3LbopgAAABY"]
[Sat Feb 28 23:30:21.959567 2026] [:error] [pid 39184:tid 39241] [client 51.83.9.208:53034] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaMKDVtZF9Zd_U7easAD1gAAAFY"]
[Sat Feb 28 23:30:23.904265 2026] [:error] [pid 39183:tid 39197] [client 51.83.9.208:53046] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaMKDxCf4HvhVePw3LboxAAAAAU"]
[Sun Mar 01 00:37:21.705783 2026] [:error] [pid 30798:tid 30921] [client 20.151.205.221:18884] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sun Mar 01 00:37:21.916161 2026] [:error] [pid 30798:tid 30922] [client 20.151.205.221:18884] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sun Mar 01 00:37:22.778563 2026] [:error] [pid 30798:tid 30918] [client 20.151.205.221:18884] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sun Mar 01 00:37:23.197473 2026] [:error] [pid 30798:tid 30900] [client 20.151.205.221:18884] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMZw8BkD73gO8wTonY_NwAAAIE"]
[Sun Mar 01 00:37:24.680954 2026] [:error] [pid 31190:tid 31223] [client 20.151.205.221:18641] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 01 00:37:24.887639 2026] [:error] [pid 31190:tid 31209] [client 20.151.205.221:18641] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaMZxBfvwGOholYpM1FK2QAAAMM"]
[Sun Mar 01 00:37:25.720463 2026] [:error] [pid 53600:tid 53603] [client 20.151.205.221:18631] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaMZxQ2UMRAYWtDB23SyVAAAAQA"]
[Sun Mar 01 00:37:26.554099 2026] [:error] [pid 53600:tid 53621] [client 20.151.205.221:18679] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaMZxg2UMRAYWtDB23SyYAAAARI"]
[Sun Mar 01 00:37:27.378489 2026] [:error] [pid 31190:tid 31210] [client 20.151.205.221:18668] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaMZxxfvwGOholYpM1FK6QAAAMQ"]
[Sun Mar 01 00:51:52.009194 2026] [:error] [pid 30798:tid 30907] [client 20.63.83.162:10870] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaMdKMBkD73gO8wTonZFzwAAAIg"]
[Sun Mar 01 00:51:52.839616 2026] [:error] [pid 11920:tid 11929] [client 20.63.83.162:11031] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaMdKCzLNJUKxvBorrBrbQAAAYU"]
[Sun Mar 01 00:51:53.661435 2026] [:error] [pid 11920:tid 11924] [client 20.63.83.162:52940] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaMdKSzLNJUKxvBorrBregAAAYA"]
[Sun Mar 01 00:51:54.486248 2026] [:error] [pid 7644:tid 7661] [client 20.63.83.162:52941] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaMdKvqeDUGmVAHX7VCOcAAAAU8"]
[Sun Mar 01 01:46:03.148476 2026] [:error] [pid 30797:tid 30878] [client 138.199.35.10:35658] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaMp2_QmcmSQL-3rvLAKpAAAAEc"]
[Sun Mar 01 01:46:03.150868 2026] [:error] [pid 30797:tid 30878] [client 138.199.35.10:35658] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 01:46:04.902833 2026] [:error] [pid 30797:tid 30877] [client 138.199.35.10:35658] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3PQmcmSQL-3rvLAKsAAAAEY"]
[Sun Mar 01 01:46:05.212214 2026] [:error] [pid 31190:tid 31224] [client 138.199.35.10:55805] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3RfvwGOholYpM1GHIAAAANI"]
[Sun Mar 01 01:46:05.521121 2026] [:error] [pid 30798:tid 30924] [client 138.199.35.10:32892] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3cBkD73gO8wTonaAaAAAAJg"]
[Sun Mar 01 01:46:05.829614 2026] [:error] [pid 11920:tid 11934] [client 138.199.35.10:32902] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3SzLNJUKxvBorrDE8QAAAYo"]
[Sun Mar 01 01:46:06.150449 2026] [:error] [pid 30798:tid 30899] [client 138.199.35.10:32918] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3sBkD73gO8wTonaAaQAAAIA"]
[Sun Mar 01 01:46:06.458251 2026] [:error] [pid 30798:tid 30902] [client 138.199.35.10:32934] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3sBkD73gO8wTonaAbAAAAIM"]
[Sun Mar 01 01:46:06.768312 2026] [:error] [pid 30798:tid 30922] [client 138.199.35.10:19130] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaMp3sBkD73gO8wTonaAcQAAAJY"]
[Sun Mar 01 02:03:46.556742 2026] [:error] [pid 31190:tid 31206] [client 20.220.213.17:35917] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Mar 01 02:03:46.770113 2026] [:error] [pid 31190:tid 31222] [client 20.220.213.17:35917] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Sun Mar 01 02:03:47.199372 2026] [:error] [pid 31190:tid 31224] [client 20.220.213.17:35917] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sun Mar 01 02:03:47.412462 2026] [:error] [pid 31190:tid 31209] [client 20.220.213.17:35917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sun Mar 01 02:03:47.625295 2026] [:error] [pid 31190:tid 31228] [client 20.220.213.17:35917] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Sun Mar 01 02:03:47.837026 2026] [:error] [pid 31190:tid 31211] [client 20.220.213.17:35917] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaMuAxfvwGOholYpM1GUKwAAAMU"]
[Sun Mar 01 02:03:48.266324 2026] [:error] [pid 31190:tid 31229] [client 20.220.213.17:38662] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaMuBBfvwGOholYpM1GULAAAANc"]
[Sun Mar 01 02:03:48.677184 2026] [:error] [pid 31190:tid 31221] [client 20.220.213.17:27510] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaMuBBfvwGOholYpM1GULwAAAM8"]
[Sun Mar 01 02:03:49.105038 2026] [:error] [pid 11920:tid 11936] [client 20.220.213.17:43103] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaMuBSzLNJUKxvBorrDfQwAAAYw"]
[Sun Mar 01 02:03:49.521812 2026] [:error] [pid 30798:tid 30909] [client 20.220.213.17:27518] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaMuBcBkD73gO8wTonaS9wAAAIo"]
[Sun Mar 01 02:03:49.937404 2026] [:error] [pid 11920:tid 11941] [client 20.220.213.17:38872] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaMuBSzLNJUKxvBorrDfSQAAAZE"]
[Sun Mar 01 02:03:50.360765 2026] [:error] [pid 11920:tid 11935] [client 20.220.213.17:38458] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaMuBizLNJUKxvBorrDfTAAAAYs"]
[Sun Mar 01 02:03:50.780277 2026] [:error] [pid 30798:tid 30914] [client 20.220.213.17:26891] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-the.php"] [unique_id "aaMuBsBkD73gO8wTonaTAAAAAI8"]
[Sun Mar 01 02:03:51.194367 2026] [:error] [pid 30798:tid 30906] [client 20.220.213.17:39245] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaMuB8BkD73gO8wTonaTBwAAAIc"]
[Sun Mar 01 02:03:51.603364 2026] [:error] [pid 31190:tid 31210] [client 20.220.213.17:39244] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaMuBxfvwGOholYpM1GUMwAAAMQ"]
[Sun Mar 01 02:03:52.031327 2026] [:error] [pid 11920:tid 11947] [client 20.220.213.17:34509] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaMuCCzLNJUKxvBorrDfVQAAAZc"]
[Sun Mar 01 02:03:52.451371 2026] [:error] [pid 11920:tid 11941] [client 20.220.213.17:39378] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaMuCCzLNJUKxvBorrDfWgAAAZE"]
[Sun Mar 01 02:03:52.867487 2026] [:error] [pid 31190:tid 31216] [client 20.220.213.17:43090] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaMuCBfvwGOholYpM1GUNAAAAMo"]
[Sun Mar 01 02:03:53.281557 2026] [:error] [pid 7644:tid 7655] [client 20.220.213.17:38716] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaMuCfqeDUGmVAHX7VCnLAAAAUk"]
[Sun Mar 01 02:03:53.699258 2026] [:error] [pid 31190:tid 31209] [client 20.220.213.17:35206] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaMuCRfvwGOholYpM1GUNgAAAMM"]
[Sun Mar 01 02:03:54.128856 2026] [:error] [pid 30798:tid 30910] [client 20.220.213.17:42903] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hplfuns.php"] [unique_id "aaMuCsBkD73gO8wTonaTGwAAAIs"]
[Sun Mar 01 02:03:54.545239 2026] [:error] [pid 11920:tid 11941] [client 20.220.213.17:35482] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaMuCizLNJUKxvBorrDfaQAAAZE"]
[Sun Mar 01 02:03:54.963199 2026] [:error] [pid 11920:tid 11943] [client 20.220.213.17:35510] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaMuCizLNJUKxvBorrDfbAAAAZM"]
[Sun Mar 01 02:03:55.377036 2026] [:error] [pid 11920:tid 11941] [client 20.220.213.17:37324] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaMuCyzLNJUKxvBorrDfcQAAAZE"]
[Sun Mar 01 02:03:55.787125 2026] [:error] [pid 30798:tid 30923] [client 20.220.213.17:39872] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "aaMuC8BkD73gO8wTonaTJwAAAJc"]
[Sun Mar 01 02:03:56.201446 2026] [:error] [pid 30798:tid 30912] [client 20.220.213.17:38409] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaMuDMBkD73gO8wTonaTKwAAAI0"]
[Sun Mar 01 02:03:56.617706 2026] [:error] [pid 30798:tid 30906] [client 20.220.213.17:26903] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaMuDMBkD73gO8wTonaTLgAAAIc"]
[Sun Mar 01 02:03:57.036646 2026] [:error] [pid 7644:tid 7668] [client 20.220.213.17:39397] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaMuDfqeDUGmVAHX7VCnOwAAAVY"]
[Sun Mar 01 02:03:57.451312 2026] [:error] [pid 30795:tid 30827] [client 20.220.213.17:39266] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shop.php"] [unique_id "aaMuDWuI44IL94Zgti_IUAAAABM"]
[Sun Mar 01 02:03:57.862456 2026] [:error] [pid 7644:tid 7651] [client 20.220.213.17:38886] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaMuDfqeDUGmVAHX7VCnQgAAAUU"]
[Sun Mar 01 02:03:58.278278 2026] [:error] [pid 31190:tid 31206] [client 20.220.213.17:27501] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaMuDhfvwGOholYpM1GUQgAAAMA"]
[Sun Mar 01 02:03:58.688716 2026] [:error] [pid 31190:tid 31208] [client 20.220.213.17:37349] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaMuDhfvwGOholYpM1GURgAAAMI"]
[Sun Mar 01 02:03:59.100489 2026] [:error] [pid 11920:tid 11928] [client 20.220.213.17:39388] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cxxuv.php"] [unique_id "aaMuDyzLNJUKxvBorrDflQAAAYQ"]
[Sun Mar 01 02:03:59.517975 2026] [:error] [pid 31190:tid 31228] [client 20.220.213.17:38714] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaMuDxfvwGOholYpM1GUTQAAANY"]
[Sun Mar 01 02:03:59.940294 2026] [:error] [pid 53600:tid 53604] [client 20.220.213.17:38878] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaMuDw2UMRAYWtDB23TtfwAAAQE"]
[Sun Mar 01 02:04:00.365030 2026] [:error] [pid 11920:tid 11937] [client 20.220.213.17:38407] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaMuECzLNJUKxvBorrDfpQAAAY0"]
[Sun Mar 01 02:04:00.782452 2026] [:error] [pid 31190:tid 31227] [client 20.220.213.17:35234] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/b.php"] [unique_id "aaMuEBfvwGOholYpM1GUVAAAANU"]
[Sun Mar 01 02:04:01.214852 2026] [:error] [pid 53600:tid 53603] [client 20.220.213.17:27504] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaMuEQ2UMRAYWtDB23TtgwAAAQA"]
[Sun Mar 01 02:04:01.626003 2026] [:error] [pid 53600:tid 53625] [client 20.220.213.17:35918] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaMuEQ2UMRAYWtDB23TthQAAARY"]
[Sun Mar 01 02:04:02.037614 2026] [:error] [pid 30798:tid 30900] [client 20.220.213.17:42766] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaMuEsBkD73gO8wTonaTUQAAAIE"]
[Sun Mar 01 02:04:02.447544 2026] [:error] [pid 7644:tid 7663] [client 20.220.213.17:37365] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gi.php"] [unique_id "aaMuEvqeDUGmVAHX7VCnSAAAAVE"]
[Sun Mar 01 02:04:02.861936 2026] [:error] [pid 30798:tid 30914] [client 20.220.213.17:39387] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaMuEsBkD73gO8wTonaTVgAAAI8"]
[Sun Mar 01 02:04:03.286340 2026] [:error] [pid 30795:tid 30813] [client 20.220.213.17:39565] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaMuE2uI44IL94Zgti_IVQAAAAU"]
[Sun Mar 01 02:04:03.704020 2026] [:error] [pid 11920:tid 11936] [client 20.220.213.17:41949] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaMuEyzLNJUKxvBorrDfzQAAAYw"]
[Sun Mar 01 02:04:04.119505 2026] [:error] [pid 11920:tid 11925] [client 20.220.213.17:37035] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e0v9e95c.php"] [unique_id "aaMuFCzLNJUKxvBorrDf1QAAAYE"]
[Sun Mar 01 02:04:04.533574 2026] [:error] [pid 11920:tid 11936] [client 20.220.213.17:26890] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaMuFCzLNJUKxvBorrDf3gAAAYw"]
[Sun Mar 01 02:04:04.946036 2026] [:error] [pid 11920:tid 11933] [client 20.220.213.17:39238] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaMuFCzLNJUKxvBorrDf6QAAAYk"]
[Sun Mar 01 02:04:05.359139 2026] [:error] [pid 11920:tid 11936] [client 20.220.213.17:44163] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaMuFSzLNJUKxvBorrDf8gAAAYw"]
[Sun Mar 01 02:04:05.776271 2026] [:error] [pid 11920:tid 11929] [client 20.220.213.17:38859] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2gz1dxix.php"] [unique_id "aaMuFSzLNJUKxvBorrDf-wAAAYU"]
[Sun Mar 01 02:04:06.200139 2026] [:error] [pid 7644:tid 7670] [client 20.220.213.17:41952] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaMuFvqeDUGmVAHX7VCnTAAAAVg"]
[Sun Mar 01 02:04:06.618962 2026] [:error] [pid 31190:tid 31211] [client 20.220.213.17:41980] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaMuFhfvwGOholYpM1GUbgAAAMU"]
[Sun Mar 01 02:04:07.038552 2026] [:error] [pid 30798:tid 30924] [client 20.220.213.17:35926] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaMuF8BkD73gO8wTonaTZAAAAJg"]
[Sun Mar 01 02:04:07.453517 2026] [:error] [pid 53600:tid 53614] [client 20.220.213.17:34554] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "aaMuFw2UMRAYWtDB23TtkgAAAQs"]
[Sun Mar 01 02:04:07.863915 2026] [:error] [pid 31190:tid 31218] [client 20.220.213.17:43423] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaMuFxfvwGOholYpM1GUdgAAAMw"]
[Sun Mar 01 02:04:08.274967 2026] [:error] [pid 30798:tid 30912] [client 20.220.213.17:34532] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaMuGMBkD73gO8wTonaTaQAAAI0"]
[Sun Mar 01 02:04:08.689326 2026] [:error] [pid 30795:tid 30824] [client 20.220.213.17:37009] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaMuGGuI44IL94Zgti_IVgAAABA"]
[Sun Mar 01 02:04:09.104177 2026] [:error] [pid 30798:tid 30908] [client 20.220.213.17:38689] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws49.php"] [unique_id "aaMuGcBkD73gO8wTonaTdAAAAIk"]
[Sun Mar 01 02:04:09.517679 2026] [:error] [pid 31190:tid 31211] [client 20.220.213.17:37336] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaMuGRfvwGOholYpM1GUgQAAAMU"]
[Sun Mar 01 02:04:09.935561 2026] [:error] [pid 30797:tid 30888] [client 20.220.213.17:27456] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaMuGfQmcmSQL-3rvLAObAAAAFE"]
[Sun Mar 01 02:04:10.346503 2026] [:error] [pid 11920:tid 11946] [client 20.220.213.17:39385] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaMuGizLNJUKxvBorrDgGgAAAZY"]
[Sun Mar 01 02:04:10.761538 2026] [:error] [pid 30798:tid 30912] [client 20.220.213.17:26922] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaMuGsBkD73gO8wTonaTeAAAAI0"]
[Sun Mar 01 02:04:11.184637 2026] [:error] [pid 30798:tid 30906] [client 20.220.213.17:37348] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMuG8BkD73gO8wTonaTewAAAIc"]
[Sun Mar 01 02:04:11.599657 2026] [:error] [pid 30798:tid 30923] [client 20.220.213.17:35509] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMuG8BkD73gO8wTonaTfAAAAJc"]
[Sun Mar 01 02:04:12.013985 2026] [:error] [pid 30795:tid 30829] [client 20.220.213.17:42764] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMuHGuI44IL94Zgti_IXwAAABU"]
[Sun Mar 01 02:04:12.428383 2026] [:error] [pid 11920:tid 11944] [client 20.220.213.17:38883] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMuHCzLNJUKxvBorrDgJAAAAZQ"]
[Sun Mar 01 02:04:12.853904 2026] [:error] [pid 53600:tid 53617] [client 20.220.213.17:37373] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaMuHA2UMRAYWtDB23TtmQAAAQ4"]
[Sun Mar 01 02:04:13.266432 2026] [:error] [pid 31190:tid 31223] [client 20.220.213.17:42905] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaMuHRfvwGOholYpM1GUnAAAANE"]
[Sun Mar 01 02:04:13.677992 2026] [:error] [pid 31190:tid 31213] [client 20.220.213.17:38879] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaMuHRfvwGOholYpM1GUoQAAAMc"]
[Sun Mar 01 02:04:14.101289 2026] [:error] [pid 30798:tid 30917] [client 20.220.213.17:42762] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-f.php"] [unique_id "aaMuHsBkD73gO8wTonaThQAAAJI"]
[Sun Mar 01 02:04:14.521920 2026] [:error] [pid 30798:tid 30901] [client 20.220.213.17:42915] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaMuHsBkD73gO8wTonaTjAAAAII"]
[Sun Mar 01 02:04:14.938941 2026] [:error] [pid 31190:tid 31224] [client 20.220.213.17:35260] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaMuHhfvwGOholYpM1GUqwAAANI"]
[Sun Mar 01 02:04:15.357064 2026] [:error] [pid 31190:tid 31225] [client 20.220.213.17:35257] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaMuHxfvwGOholYpM1GUsQAAANM"]
[Sun Mar 01 02:04:15.771482 2026] [:error] [pid 31190:tid 31207] [client 20.220.213.17:39285] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "aaMuHxfvwGOholYpM1GUtQAAAME"]
[Sun Mar 01 02:04:16.185230 2026] [:error] [pid 31190:tid 31209] [client 20.220.213.17:41938] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaMuIBfvwGOholYpM1GUugAAAMM"]
[Sun Mar 01 02:04:16.594055 2026] [:error] [pid 31190:tid 31229] [client 20.220.213.17:41942] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaMuIBfvwGOholYpM1GUvgAAANc"]
[Sun Mar 01 02:04:17.002755 2026] [:error] [pid 30798:tid 30912] [client 20.220.213.17:40809] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaMuIcBkD73gO8wTonaTlgAAAI0"]
[Sun Mar 01 02:04:17.417154 2026] [:error] [pid 31190:tid 31208] [client 20.220.213.17:35222] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "aaMuIRfvwGOholYpM1GUyAAAAMI"]
[Sun Mar 01 02:04:17.835911 2026] [:error] [pid 11920:tid 11931] [client 20.220.213.17:34501] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMuISzLNJUKxvBorrDgMQAAAYc"]
[Sun Mar 01 02:04:18.252320 2026] [:error] [pid 53600:tid 53612] [client 20.220.213.17:39273] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMuIg2UMRAYWtDB23TtnAAAAQk"]
[Sun Mar 01 02:04:18.661454 2026] [:error] [pid 30797:tid 30894] [client 20.220.213.17:37055] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMuIvQmcmSQL-3rvLAObwAAAFc"]
[Sun Mar 01 02:04:19.071500 2026] [:error] [pid 53600:tid 53611] [client 20.220.213.17:45266] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMuIw2UMRAYWtDB23TtnwAAAQg"]
[Sun Mar 01 02:04:19.498601 2026] [:error] [pid 30798:tid 30920] [client 20.220.213.17:37015] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaMuI8BkD73gO8wTonaToAAAAJQ"]
[Sun Mar 01 02:04:19.915258 2026] [:error] [pid 30798:tid 30908] [client 20.220.213.17:42765] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaMuI8BkD73gO8wTonaTpAAAAIk"]
[Sun Mar 01 02:04:20.334883 2026] [:error] [pid 30798:tid 30904] [client 20.220.213.17:42342] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaMuJMBkD73gO8wTonaTqAAAAIU"]
[Sun Mar 01 02:04:20.749827 2026] [:error] [pid 53600:tid 53614] [client 20.220.213.17:36041] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0bb45ctt.php"] [unique_id "aaMuJA2UMRAYWtDB23TtoQAAAQs"]
[Sun Mar 01 02:04:21.166712 2026] [:error] [pid 53600:tid 53604] [client 20.220.213.17:43433] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaMuJQ2UMRAYWtDB23TtogAAAQE"]
[Sun Mar 01 02:04:21.581590 2026] [:error] [pid 53600:tid 53607] [client 20.220.213.17:27461] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaMuJQ2UMRAYWtDB23TtpwAAAQQ"]
[Sun Mar 01 02:04:21.996784 2026] [:error] [pid 30797:tid 30890] [client 20.220.213.17:26773] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaMuJfQmcmSQL-3rvLAOcQAAAFM"]
[Sun Mar 01 02:04:22.410578 2026] [:error] [pid 30798:tid 30902] [client 20.220.213.17:42319] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "aaMuJsBkD73gO8wTonaTyAAAAIM"]
[Sun Mar 01 02:04:22.959657 2026] [:error] [pid 31190:tid 31229] [client 20.220.213.17:39421] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaMuJhfvwGOholYpM1GU4QAAANc"]
[Sun Mar 01 02:04:23.378450 2026] [:error] [pid 53600:tid 53612] [client 20.220.213.17:45292] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaMuJw2UMRAYWtDB23TtrAAAAQk"]
[Sun Mar 01 02:04:23.796714 2026] [:error] [pid 31190:tid 31228] [client 20.220.213.17:45274] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaMuJxfvwGOholYpM1GU5gAAANY"]
[Sun Mar 01 02:04:24.218036 2026] [:error] [pid 30798:tid 30905] [client 20.220.213.17:43424] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "aaMuKMBkD73gO8wTonaT1wAAAIY"]
[Sun Mar 01 02:04:24.627749 2026] [:error] [pid 30797:tid 30884] [client 20.220.213.17:39498] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaMuKPQmcmSQL-3rvLAOcgAAAE0"]
[Sun Mar 01 02:04:25.039526 2026] [:error] [pid 30798:tid 30911] [client 20.220.213.17:45260] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaMuKcBkD73gO8wTonaT3gAAAIw"]
[Sun Mar 01 02:04:25.453405 2026] [:error] [pid 11920:tid 11942] [client 20.220.213.17:45300] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaMuKSzLNJUKxvBorrDgUAAAAZI"]
[Sun Mar 01 02:04:25.867459 2026] [:error] [pid 11920:tid 11945] [client 20.220.213.17:39360] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "aaMuKSzLNJUKxvBorrDgVQAAAZU"]
[Sun Mar 01 02:04:26.281775 2026] [:error] [pid 11920:tid 11924] [client 20.220.213.17:42340] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaMuKizLNJUKxvBorrDgVwAAAYA"]
[Sun Mar 01 02:04:26.694076 2026] [:error] [pid 30798:tid 30914] [client 20.220.213.17:36057] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaMuKsBkD73gO8wTonaT5wAAAI8"]
[Sun Mar 01 02:04:27.105177 2026] [:error] [pid 11920:tid 11934] [client 20.220.213.17:43435] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaMuKyzLNJUKxvBorrDgWAAAAYo"]
[Sun Mar 01 02:04:27.516028 2026] [:error] [pid 30798:tid 30902] [client 20.220.213.17:36143] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaMuK8BkD73gO8wTonaT7QAAAIM"]
[Sun Mar 01 02:04:27.925818 2026] [:error] [pid 11920:tid 11933] [client 20.220.213.17:27510] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaMuKyzLNJUKxvBorrDgXAAAAYk"]
[Sun Mar 01 02:04:28.344439 2026] [:error] [pid 11920:tid 11930] [client 20.220.213.17:36841] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaMuLCzLNJUKxvBorrDgYQAAAYY"]
[Sun Mar 01 02:04:28.759777 2026] [:error] [pid 7644:tid 7657] [client 20.220.213.17:42319] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaMuLPqeDUGmVAHX7VCnawAAAUs"]
[Sun Mar 01 02:04:29.183689 2026] [:error] [pid 11920:tid 11947] [client 20.220.213.17:36058] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaMuLSzLNJUKxvBorrDgZgAAAZc"]
[Sun Mar 01 02:04:29.597229 2026] [:error] [pid 11920:tid 11934] [client 20.220.213.17:27392] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaMuLSzLNJUKxvBorrDgawAAAYo"]
[Sun Mar 01 02:04:30.010735 2026] [:error] [pid 53600:tid 53607] [client 20.220.213.17:43436] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaMuLg2UMRAYWtDB23TttAAAAQQ"]
[Sun Mar 01 02:04:30.422876 2026] [:error] [pid 30795:tid 30823] [client 20.220.213.17:26782] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaMuLmuI44IL94Zgti_IcAAAAA8"]
[Sun Mar 01 02:04:30.835614 2026] [:error] [pid 11920:tid 11928] [client 20.220.213.17:45888] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/62ix02bk.php"] [unique_id "aaMuLizLNJUKxvBorrDgdwAAAYQ"]
[Sun Mar 01 02:04:31.252825 2026] [:error] [pid 30798:tid 30901] [client 20.220.213.17:45915] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaMuL8BkD73gO8wTonaT_wAAAII"]
[Sun Mar 01 02:04:31.670906 2026] [:error] [pid 11920:tid 11943] [client 20.220.213.17:36346] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaMuLyzLNJUKxvBorrDgfgAAAZM"]
[Sun Mar 01 02:04:32.085437 2026] [:error] [pid 11920:tid 11927] [client 20.220.213.17:26791] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaMuMCzLNJUKxvBorrDghAAAAYM"]
[Sun Mar 01 02:04:32.501686 2026] [:error] [pid 11920:tid 11926] [client 20.220.213.17:27516] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaMuMCzLNJUKxvBorrDgjQAAAYI"]
[Sun Mar 01 02:04:32.916034 2026] [:error] [pid 11920:tid 11943] [client 20.220.213.17:36052] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaMuMCzLNJUKxvBorrDgkgAAAZM"]
[Sun Mar 01 02:04:33.340860 2026] [:error] [pid 30798:tid 30916] [client 20.220.213.17:44008] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaMuMcBkD73gO8wTonaUCAAAAJE"]
[Sun Mar 01 02:04:33.758012 2026] [:error] [pid 31190:tid 31229] [client 20.220.213.17:32810] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaMuMRfvwGOholYpM1GVCQAAANc"]
[Sun Mar 01 02:04:34.177226 2026] [:error] [pid 30798:tid 30922] [client 20.220.213.17:36118] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6ijmjpa.php"] [unique_id "aaMuMsBkD73gO8wTonaUCwAAAJY"]
[Sun Mar 01 02:04:34.592222 2026] [:error] [pid 30798:tid 30911] [client 20.220.213.17:27450] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaMuMsBkD73gO8wTonaUDgAAAIw"]
[Sun Mar 01 02:04:35.006990 2026] [:error] [pid 11920:tid 11930] [client 20.220.213.17:27431] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaMuMyzLNJUKxvBorrDgqAAAAYY"]
[Sun Mar 01 02:04:35.424401 2026] [:error] [pid 7644:tid 7660] [client 20.220.213.17:36291] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaMuM_qeDUGmVAHX7VCncwAAAU4"]
[Sun Mar 01 02:04:35.839926 2026] [:error] [pid 30798:tid 30899] [client 20.220.213.17:26794] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaMuM8BkD73gO8wTonaUFwAAAIA"]
[Sun Mar 01 02:04:36.264244 2026] [:error] [pid 30798:tid 30908] [client 20.220.213.17:39619] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaMuNMBkD73gO8wTonaUHAAAAIk"]
[Sun Mar 01 02:04:36.681525 2026] [:error] [pid 30797:tid 30878] [client 20.220.213.17:39571] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaMuNPQmcmSQL-3rvLAOdAAAAEc"]
[Sun Mar 01 02:04:37.096915 2026] [:error] [pid 30795:tid 30812] [client 20.220.213.17:44012] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaMuNWuI44IL94Zgti_IegAAAAQ"]
[Sun Mar 01 02:04:37.514679 2026] [:error] [pid 30797:tid 30892] [client 20.220.213.17:37745] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4wj632p1.php"] [unique_id "aaMuNfQmcmSQL-3rvLAOdwAAAFU"]
[Sun Mar 01 02:04:37.929436 2026] [:error] [pid 11920:tid 11935] [client 20.220.213.17:36299] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaMuNSzLNJUKxvBorrDguAAAAYs"]
[Sun Mar 01 02:04:38.345839 2026] [:error] [pid 11920:tid 11943] [client 20.220.213.17:32773] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaMuNizLNJUKxvBorrDgwAAAAZM"]
[Sun Mar 01 02:04:38.754245 2026] [:error] [pid 30798:tid 30915] [client 20.220.213.17:41123] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaMuNsBkD73gO8wTonaUKwAAAJA"]
[Sun Mar 01 02:04:39.167043 2026] [:error] [pid 11920:tid 11944] [client 20.220.213.17:37697] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "aaMuNyzLNJUKxvBorrDgyQAAAZQ"]
[Sun Mar 01 02:04:39.578662 2026] [:error] [pid 30798:tid 30912] [client 20.220.213.17:36302] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaMuN8BkD73gO8wTonaULgAAAI0"]
[Sun Mar 01 02:04:39.991532 2026] [:error] [pid 7644:tid 7647] [client 20.220.213.17:43201] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaMuN_qeDUGmVAHX7VCnfAAAAUE"]
[Sun Mar 01 02:04:40.407402 2026] [:error] [pid 11920:tid 11939] [client 20.220.213.17:45891] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaMuOCzLNJUKxvBorrDg2AAAAY8"]
[Sun Mar 01 02:04:40.821926 2026] [:error] [pid 30798:tid 30906] [client 20.220.213.17:39644] [client 20.220.213.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/e31hmf9b.php"] [unique_id "aaMuOMBkD73gO8wTonaUOgAAAIc"]
[Sun Mar 01 03:01:16.516112 2026] [:error] [pid 30797:tid 30893] [client 43.157.175.122:43786] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaM7fPQmcmSQL-3rvLAW1AAAAFY"]
[Sun Mar 01 03:13:23.201421 2026] [:error] [pid 30798:tid 30922] [client 43.152.72.247:39002] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaM-U8BkD73gO8wTonbZaQAAAJY"]
[Sun Mar 01 03:17:37.864447 2026] [:error] [pid 30798:tid 30916] [client 204.76.203.25:50178] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aaM_UcBkD73gO8wTonbgSgAAAJE"]
[Sun Mar 01 03:40:19.005926 2026] [:error] [pid 10508:tid 10524] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sun Mar 01 03:40:19.215038 2026] [:error] [pid 10508:tid 10534] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Sun Mar 01 03:40:19.427833 2026] [:error] [pid 10508:tid 10532] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sun Mar 01 03:40:19.637209 2026] [:error] [pid 10508:tid 10512] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sun Mar 01 03:40:19.846644 2026] [:error] [pid 10508:tid 10530] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 01 03:40:20.060059 2026] [:error] [pid 10508:tid 10529] [client 20.151.205.221:52965] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaNEpPnZ4Ocsz9vZs1NcPwAAANE"]
[Sun Mar 01 03:40:20.274980 2026] [:error] [pid 10508:tid 10527] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 01 03:40:20.484137 2026] [:error] [pid 10508:tid 10526] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 01 03:40:20.693706 2026] [:error] [pid 10508:tid 10523] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 01 03:40:20.924822 2026] [:error] [pid 10508:tid 10514] [client 20.151.205.221:52965] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaNEpPnZ4Ocsz9vZs1NcSAAAAMI"]
[Sun Mar 01 03:40:20.930003 2026] [:error] [pid 10508:tid 10514] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 01 03:40:21.139653 2026] [:error] [pid 10508:tid 10524] [client 20.151.205.221:52965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 01 03:40:21.345978 2026] [:error] [pid 10508:tid 10534] [client 20.151.205.221:52965] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaNEpfnZ4Ocsz9vZs1NcSwAAANY"]
[Sun Mar 01 03:40:22.170236 2026] [:error] [pid 10508:tid 10525] [client 20.151.205.221:52989] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaNEpvnZ4Ocsz9vZs1NcUAAAAM0"]
[Sun Mar 01 03:40:22.993151 2026] [:error] [pid 10297:tid 10432] [client 20.151.205.221:18440] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaNEpn5a9rbvPss2V0MmGQAAAIs"]
[Sun Mar 01 03:40:23.829212 2026] [:error] [pid 10297:tid 10437] [client 20.151.205.221:52944] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaNEp35a9rbvPss2V0MmIAAAAJA"]
[Sun Mar 01 04:41:40.067352 2026] [:error] [pid 21158:tid 21206] [client 103.65.236.153:51652] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aaNTBDriSIe3-pWnbPbQtgAAAE0"]
[Sun Mar 01 04:41:40.303134 2026] [:error] [pid 21156:tid 21183] [client 103.65.236.153:51673] [client 103.65.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aaNTBKsaG_9IkG8N2p3czQAAABE"]
[Sun Mar 01 04:44:03.927927 2026] [:error] [pid 21159:tid 21221] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 01 04:44:04.217164 2026] [:error] [pid 21159:tid 21226] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 01 04:44:04.482803 2026] [:error] [pid 21159:tid 21228] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 01 04:44:04.856773 2026] [:error] [pid 21159:tid 21227] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Mar 01 04:44:05.163673 2026] [:error] [pid 21159:tid 21244] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 01 04:44:05.448012 2026] [:error] [pid 21159:tid 21231] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 01 04:44:05.768400 2026] [:error] [pid 21159:tid 21240] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 01 04:44:06.028654 2026] [:error] [pid 21159:tid 21238] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 04:44:06.975914 2026] [:error] [pid 21159:tid 21234] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 01 04:44:07.597834 2026] [:error] [pid 21159:tid 21223] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 01 04:44:07.926425 2026] [:error] [pid 21159:tid 21225] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Mar 01 04:44:08.217989 2026] [:error] [pid 21159:tid 21242] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 04:44:08.522647 2026] [:error] [pid 21159:tid 21241] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 01 04:44:08.837175 2026] [:error] [pid 21159:tid 21222] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 04:44:09.107568 2026] [:error] [pid 21159:tid 21235] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Mar 01 04:44:09.698242 2026] [:error] [pid 21159:tid 21226] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 01 04:44:10.007022 2026] [:error] [pid 21159:tid 21228] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Mar 01 04:44:10.298781 2026] [:error] [pid 21159:tid 21245] [client 81.199.26.65:22761] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 01 04:44:15.233881 2026] [:error] [pid 21159:tid 21226] [client 81.199.26.65:22761] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaNTn-Li3ouy1NZIkgoN0QAAAIU"]
[Sun Mar 01 04:44:17.103920 2026] [:error] [pid 21156:tid 21183] [client 81.199.26.66:45853] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaNToasaG_9IkG8N2p3dXAAAABE"]
[Sun Mar 01 04:44:19.038433 2026] [:error] [pid 21159:tid 21241] [client 85.203.15.231:27955] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 01 04:44:19.914773 2026] [:error] [pid 21159:tid 21221] [client 85.203.15.231:27955] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaNTo-Li3ouy1NZIkgoN5AAAAIA"]
[Sun Mar 01 04:44:21.372473 2026] [:error] [pid 24576:tid 24589] [client 81.199.26.64:42755] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 04:44:21.696693 2026] [:error] [pid 24576:tid 24595] [client 81.199.26.64:42755] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaNTpYvfb5CnctJh073MkwAAAQ8"]
[Sun Mar 01 04:44:22.654117 2026] [:error] [pid 21158:tid 21200] [client 81.199.26.65:36885] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 01 04:44:24.272087 2026] [:error] [pid 21158:tid 21200] [client 81.199.26.65:36885] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaNTqDriSIe3-pWnbPbRjgAAAEc"]
[Sun Mar 01 04:44:25.792186 2026] [:error] [pid 21159:tid 21226] [client 81.199.26.56:58057] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaNTqeLi3ouy1NZIkgoOCgAAAIU"]
[Sun Mar 01 04:44:26.376551 2026] [:error] [pid 24576:tid 24598] [client 85.203.15.99:53331] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaNTqovfb5CnctJh073MoQAAARI"]
[Sun Mar 01 04:44:26.978462 2026] [:error] [pid 24576:tid 24600] [client 85.203.15.150:54623] [client 85.203.15.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaNTqovfb5CnctJh073MqAAAARQ"]
[Sun Mar 01 04:44:27.565496 2026] [:error] [pid 24576:tid 24602] [client 85.203.15.224:61721] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaNTq4vfb5CnctJh073MqgAAARY"]
[Sun Mar 01 04:44:28.274230 2026] [:error] [pid 21159:tid 21236] [client 85.203.15.224:31099] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaNTrOLi3ouy1NZIkgoODAAAAI8"]
[Sun Mar 01 04:44:29.199041 2026] [:error] [pid 24576:tid 24589] [client 81.199.26.64:49523] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaNTrYvfb5CnctJh073MsQAAAQo"]
[Sun Mar 01 04:44:29.784589 2026] [:error] [pid 24576:tid 24580] [client 85.203.15.159:48147] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Mar 01 04:44:30.528317 2026] [:error] [pid 24576:tid 24581] [client 85.203.15.159:48147] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaNTrovfb5CnctJh073MvgAAAQI"]
[Sun Mar 01 04:44:32.080936 2026] [:error] [pid 21158:tid 21195] [client 85.203.15.151:31889] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaNTsDriSIe3-pWnbPbRnAAAAEI"]
[Sun Mar 01 04:44:32.971176 2026] [:error] [pid 21263:tid 21279] [client 81.199.26.55:64767] [client 81.199.26.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaNTsNAxjzLvN1upBhnC6QAAAMw"]
[Sun Mar 01 04:44:33.628025 2026] [:error] [pid 24576:tid 24604] [client 85.203.15.221:32157] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 01 04:44:33.887054 2026] [:error] [pid 24576:tid 24597] [client 85.203.15.221:32157] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaNTsYvfb5CnctJh073MzgAAARE"]
[Sun Mar 01 04:44:34.376959 2026] [:error] [pid 24576:tid 24594] [client 85.203.15.228:63843] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 01 04:44:35.341260 2026] [:error] [pid 24576:tid 24581] [client 85.203.15.228:63843] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 01 04:44:36.476459 2026] [:error] [pid 24576:tid 24586] [client 85.203.15.228:63843] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaNTtIvfb5CnctJh073M5QAAAQc"]
[Sun Mar 01 04:44:38.636323 2026] [:error] [pid 21158:tid 21199] [client 85.203.15.173:35675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Mar 01 04:44:38.930930 2026] [:error] [pid 21158:tid 21194] [client 85.203.15.173:35675] [client 85.203.15.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaNTtjriSIe3-pWnbPbRoQAAAEE"]
[Sun Mar 01 04:44:39.520483 2026] [:error] [pid 21263:tid 21290] [client 85.203.15.232:26197] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 01 04:44:40.117991 2026] [:error] [pid 21263:tid 21278] [client 85.203.15.232:26197] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaNTuNAxjzLvN1upBhnDEAAAAMs"]
[Sun Mar 01 04:44:41.066688 2026] [:error] [pid 21263:tid 21282] [client 81.199.26.69:63261] [client 81.199.26.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaNTudAxjzLvN1upBhnDGgAAAM8"]
[Sun Mar 01 04:44:41.937560 2026] [:error] [pid 24576:tid 24597] [client 85.203.15.160:49711] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Mar 01 04:44:42.225135 2026] [:error] [pid 24576:tid 24582] [client 85.203.15.160:49711] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 01 04:44:42.900148 2026] [:error] [pid 24576:tid 24591] [client 85.203.15.160:49711] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaNTuovfb5CnctJh073NBwAAAQs"]
[Sun Mar 01 04:44:43.952556 2026] [:error] [pid 21159:tid 21232] [client 81.199.26.59:40463] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaNTu-Li3ouy1NZIkgoOUAAAAIs"]
[Sun Mar 01 04:44:44.910130 2026] [:error] [pid 21156:tid 21185] [client 85.203.15.167:37911] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaNTvKsaG_9IkG8N2p3dmQAAABM"]
[Sun Mar 01 04:44:45.515749 2026] [:error] [pid 24576:tid 24591] [client 81.199.26.63:51067] [client 81.199.26.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaNTvYvfb5CnctJh073NFQAAAQs"]
[Sun Mar 01 04:44:46.099877 2026] [:error] [pid 24576:tid 24587] [client 85.203.15.222:49349] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaNTvovfb5CnctJh073NGAAAAQg"]
[Sun Mar 01 04:44:47.385824 2026] [:error] [pid 24576:tid 24603] [client 85.203.15.162:44701] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 01 04:44:47.637866 2026] [:error] [pid 24576:tid 24589] [client 85.203.15.162:44701] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaNTv4vfb5CnctJh073NIgAAAQo"]
[Sun Mar 01 04:44:48.735369 2026] [:error] [pid 21156:tid 21190] [client 85.203.15.164:26495] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaNTwKsaG_9IkG8N2p3dnQAAABg"]
[Sun Mar 01 04:44:49.350560 2026] [:error] [pid 21156:tid 21176] [client 85.203.15.174:42399] [client 85.203.15.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaNTwasaG_9IkG8N2p3dngAAAAo"]
[Sun Mar 01 04:44:50.645858 2026] [:error] [pid 21263:tid 21279] [client 81.199.26.57:56003] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 01 04:44:51.450661 2026] [:error] [pid 21263:tid 21285] [client 81.199.26.57:56003] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Mar 01 04:44:52.863135 2026] [:error] [pid 21263:tid 21282] [client 81.199.26.57:56003] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaNTxNAxjzLvN1upBhnDOQAAAM8"]
[Sun Mar 01 04:44:54.400152 2026] [:error] [pid 24576:tid 24579] [client 81.199.26.58:23859] [client 81.199.26.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.58, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaNTxovfb5CnctJh073NRQAAAQA"]
[Sun Mar 01 04:44:54.725657 2026] [:error] [pid 24576:tid 24588] [client 81.199.26.58:23859] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Mar 01 04:44:56.424673 2026] [:error] [pid 24576:tid 24580] [client 81.199.26.58:23859] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Mar 01 04:44:56.737064 2026] [:error] [pid 24576:tid 24594] [client 81.199.26.58:23859] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 01 04:44:58.623455 2026] [:error] [pid 24576:tid 24594] [client 81.199.26.58:23859] [client 81.199.26.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaNTyovfb5CnctJh073NegAAAQ4"]
[Sun Mar 01 05:26:45.784225 2026] [:error] [pid 8688:tid 8693] [client 75.119.155.172:22408] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaNdlTHJ4Nn-RvulD0qIlwAAAUM"]
[Sun Mar 01 05:26:47.871300 2026] [:error] [pid 21263:tid 21270] [client 75.119.155.172:22420] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaNdl9AxjzLvN1upBhnk1QAAAMM"]
[Sun Mar 01 05:26:50.039905 2026] [:error] [pid 21159:tid 21223] [client 75.119.155.172:22422] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaNdmuLi3ouy1NZIkgokoAAAAII"]
[Sun Mar 01 05:26:51.905136 2026] [:error] [pid 8688:tid 8711] [client 75.119.155.172:22432] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaNdmzHJ4Nn-RvulD0qIxAAAAVU"]
[Sun Mar 01 05:26:53.962155 2026] [:error] [pid 8688:tid 8706] [client 75.119.155.172:22438] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaNdnTHJ4Nn-RvulD0qI0AAAAVA"]
[Sun Mar 01 05:26:56.052462 2026] [:error] [pid 8688:tid 8690] [client 75.119.155.172:49220] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaNdoDHJ4Nn-RvulD0qI3QAAAUA"]
[Sun Mar 01 05:26:58.008909 2026] [:error] [pid 8688:tid 8698] [client 75.119.155.172:49228] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaNdojHJ4Nn-RvulD0qI5QAAAUg"]
[Sun Mar 01 05:59:39.228261 2026] [:error] [pid 8688:tid 8710] [client 92.209.209.211:47559] [client 92.209.209.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.209.209.211, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaNlSzHJ4Nn-RvulD0q1hgAAAVQ"]
[Sun Mar 01 05:59:39.233092 2026] [:error] [pid 8688:tid 8710] [client 92.209.209.211:47559] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 09:45:24.675710 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 09:45:24.828041 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 09:45:26.444953 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 01 09:45:26.569357 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 09:45:26.819060 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 01 09:45:26.943513 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 01 09:45:27.067847 2026] [:error] [pid 34785:tid 34800] [client 104.208.116.225:6078] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 01 09:45:27.313536 2026] [:error] [pid 34785:tid 34788] [client 104.208.116.225:6078] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaOaN4C4dBNEGEcJx-NoMQAAAwE"]
[Sun Mar 01 09:45:27.786436 2026] [:error] [pid 35654:tid 35677] [client 104.208.116.225:6790] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaOaN0IPeuEwCTirofJ41gAAA9M"]
[Sun Mar 01 09:45:28.272239 2026] [:error] [pid 35060:tid 35079] [client 104.208.116.225:6066] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaOaOJL8JPoS_tq-tiX43wAAA1E"]
[Sun Mar 01 09:45:28.799779 2026] [:error] [pid 34785:tid 34788] [client 104.208.116.225:4356] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaOaOIC4dBNEGEcJx-NoPwAAAwE"]
[Sun Mar 01 09:56:19.565796 2026] [:error] [pid 21156:tid 21168] [client 67.144.16.170:14200] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaOcw6saG_9IkG8N2p3_vgAAAAI"]
[Sun Mar 01 09:56:20.028889 2026] [:error] [pid 21156:tid 21187] [client 67.144.16.170:14205] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaOcxKsaG_9IkG8N2p3_xAAAABU"]
[Sun Mar 01 09:56:24.331032 2026] [:error] [pid 33229:tid 33249] [client 67.144.16.170:14244] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaOcyHzT4c9ddlGE6FxDswAAAZI"]
[Sun Mar 01 09:56:24.793716 2026] [:error] [pid 33229:tid 33240] [client 67.144.16.170:14257] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaOcyHzT4c9ddlGE6FxDugAAAYk"]
[Sun Mar 01 10:28:04.033681 2026] [:error] [pid 33767:tid 33785] [client 52.231.70.237:31628] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Sun Mar 01 10:28:04.171287 2026] [:error] [pid 33767:tid 33778] [client 52.231.70.237:31628] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 01 10:28:04.308732 2026] [:error] [pid 33767:tid 33785] [client 52.231.70.237:31628] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Mar 01 10:28:05.578466 2026] [:error] [pid 33767:tid 33785] [client 52.231.70.237:34683] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sun Mar 01 10:28:06.598088 2026] [:error] [pid 35350:tid 35355] [client 52.231.70.237:31632] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Mar 01 10:28:06.739605 2026] [:error] [pid 35350:tid 35371] [client 52.231.70.237:31632] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Mar 01 10:28:06.880732 2026] [:error] [pid 35350:tid 35367] [client 52.231.70.237:31632] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Mar 01 10:28:07.022829 2026] [:error] [pid 35350:tid 35355] [client 52.231.70.237:31632] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Sun Mar 01 10:28:07.171951 2026] [:error] [pid 35350:tid 35370] [client 52.231.70.237:31632] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 01 10:28:07.336774 2026] [:error] [pid 35350:tid 35365] [client 52.231.70.237:31632] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sun Mar 01 10:28:07.474663 2026] [:error] [pid 35350:tid 35352] [client 52.231.70.237:31632] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaOkN4qZbPJ_JGYY1RTqGgAAA4A"]
[Sun Mar 01 10:28:08.025729 2026] [:error] [pid 33976:tid 33999] [client 52.231.70.237:34661] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaOkOAUyU3c4Xm_xpMS5kAAAAlU"]
[Sun Mar 01 10:28:08.615046 2026] [:error] [pid 34552:tid 34566] [client 52.231.70.237:5309] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaOkOHBlU_DRqGi4yvsL6QAAAss"]
[Sun Mar 01 10:28:09.155475 2026] [:error] [pid 33976:tid 33999] [client 52.231.70.237:34957] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaOkOQUyU3c4Xm_xpMS5kgAAAlU"]
[Sun Mar 01 10:43:28.648558 2026] [:error] [pid 21158:tid 21195] [client 54.37.252.59:35160] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaOn0DriSIe3-pWnbPYA9gAAAEI"]
[Sun Mar 01 10:43:30.653516 2026] [:error] [pid 21159:tid 21230] [client 54.37.252.59:35170] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaOn0uLi3ouy1NZIkgpJhgAAAIk"]
[Sun Mar 01 10:43:32.496501 2026] [:error] [pid 35060:tid 35066] [client 54.37.252.59:35180] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaOn1JL8JPoS_tq-tiUDMgAAA0Q"]
[Sun Mar 01 10:43:34.378236 2026] [:error] [pid 35654:tid 35670] [client 54.37.252.59:36300] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaOn1kIPeuEwCTirofKHIQAAA8w"]
[Sun Mar 01 10:43:36.550645 2026] [:error] [pid 21158:tid 21202] [client 54.37.252.59:36302] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaOn2DriSIe3-pWnbPYBBAAAAEk"]
[Sun Mar 01 10:43:38.708295 2026] [:error] [pid 35060:tid 35073] [client 54.37.252.59:36316] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaOn2pL8JPoS_tq-tiUDPwAAA0s"]
[Sun Mar 01 10:43:40.791679 2026] [:error] [pid 35060:tid 35066] [client 54.37.252.59:36328] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aaOn3JL8JPoS_tq-tiUDRgAAA0Q"]
[Sun Mar 01 10:43:42.748527 2026] [:error] [pid 35060:tid 35073] [client 54.37.252.59:36342] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaOn3pL8JPoS_tq-tiUDUAAAA0s"]
[Sun Mar 01 10:43:44.603720 2026] [:error] [pid 35654:tid 35680] [client 54.37.252.59:60820] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaOn4EIPeuEwCTirofKHrwAAA9Y"]
[Sun Mar 01 10:43:47.016231 2026] [:error] [pid 21159:tid 21230] [client 54.37.252.59:60830] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaOn4-Li3ouy1NZIkgpJnwAAAIk"]
[Sun Mar 01 10:43:49.107670 2026] [:error] [pid 35654:tid 35670] [client 54.37.252.59:60844] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaOn5UIPeuEwCTirofKHzgAAA8w"]
[Sun Mar 01 10:43:51.156035 2026] [:error] [pid 34785:tid 34800] [client 54.37.252.59:60850] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaOn54C4dBNEGEcJx-NztgAAAw0"]
[Sun Mar 01 10:43:53.255338 2026] [:error] [pid 35654:tid 35676] [client 54.37.252.59:60854] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaOn6UIPeuEwCTirofKH5AAAA9I"]
[Sun Mar 01 11:35:16.795110 2026] [:error] [pid 21156:tid 21188] [client 43.159.136.201:34164] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaOz9KsaG_9IkG8N2p0SfgAAABY"]
[Sun Mar 01 11:43:12.858532 2026] [:error] [pid 34785:tid 34787] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 01 11:43:13.034702 2026] [:error] [pid 34785:tid 34787] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 01 11:43:13.213805 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 11:43:13.407454 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 01 11:43:13.569604 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] [client 20.219.132.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.219.132.149, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaO10YC4dBNEGEcJx-OI1QAAAxA"]
[Sun Mar 01 11:43:13.573124 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 11:43:13.738799 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 11:43:13.904284 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 11:43:14.071696 2026] [:error] [pid 34785:tid 34787] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Mar 01 11:43:14.237088 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 11:43:14.402058 2026] [:error] [pid 34785:tid 34787] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sun Mar 01 11:43:14.585672 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4225] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 01 11:43:15.389969 2026] [:error] [pid 34785:tid 34803] [client 20.219.132.149:4274] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaO104C4dBNEGEcJx-OI3QAAAxA"]
[Sun Mar 01 11:43:16.031064 2026] [:error] [pid 33229:tid 33232] [client 20.219.132.149:20688] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaO11HzT4c9ddlGE6Fxd_AAAAYE"]
[Sun Mar 01 11:43:16.657496 2026] [:error] [pid 33976:tid 33985] [client 20.219.132.149:12911] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autoload_classmap.php"] [unique_id "aaO11AUyU3c4Xm_xpMTKfAAAAkc"]
[Sun Mar 01 11:45:09.728095 2026] [:error] [pid 33539:tid 33546] [client 43.166.250.187:35484] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaO2RdCsLwBYg4s018vByAAAAcE"]
[Sun Mar 01 12:33:51.949218 2026] [:error] [pid 35654:tid 35665] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 01 12:33:52.228946 2026] [:error] [pid 35654:tid 35658] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 01 12:33:52.575642 2026] [:error] [pid 35654:tid 35678] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 01 12:33:52.859917 2026] [:error] [pid 35654:tid 35679] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Mar 01 12:33:53.173859 2026] [:error] [pid 35654:tid 35664] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 01 12:33:53.468567 2026] [:error] [pid 35654:tid 35670] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 01 12:33:53.805584 2026] [:error] [pid 35654:tid 35668] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 01 12:33:54.101618 2026] [:error] [pid 35654:tid 35659] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 12:33:54.808443 2026] [:error] [pid 35654:tid 35681] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 01 12:33:55.389284 2026] [:error] [pid 35654:tid 35682] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 01 12:33:55.689541 2026] [:error] [pid 35654:tid 35677] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Mar 01 12:33:55.986892 2026] [:error] [pid 35654:tid 35661] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 12:33:57.443497 2026] [:error] [pid 35654:tid 35661] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 01 12:33:57.746174 2026] [:error] [pid 35654:tid 35674] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 12:33:58.054964 2026] [:error] [pid 35654:tid 35660] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Mar 01 12:33:58.343943 2026] [:error] [pid 35654:tid 35672] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 01 12:33:58.663130 2026] [:error] [pid 35654:tid 35665] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Mar 01 12:33:58.952654 2026] [:error] [pid 35654:tid 35658] [client 45.86.202.167:39869] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 01 12:34:04.238066 2026] [:error] [pid 35654:tid 35664] [client 45.86.202.167:39869] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaPBvEIPeuEwCTirofKjVQAAA8Y"]
[Sun Mar 01 12:34:06.492061 2026] [:error] [pid 21158:tid 21196] [client 45.86.202.172:31335] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaPBvjriSIe3-pWnbPYb5gAAAEM"]
[Sun Mar 01 12:34:08.402996 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.224:37249] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 01 12:34:09.313986 2026] [:error] [pid 21159:tid 21239] [client 45.86.202.224:37249] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaPBweLi3ouy1NZIkgpmbAAAAJI"]
[Sun Mar 01 12:34:10.448816 2026] [:error] [pid 35350:tid 35355] [client 45.86.202.192:64727] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 12:34:11.052217 2026] [:error] [pid 35350:tid 35374] [client 45.86.202.192:64727] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaPBw4qZbPJ_JGYY1RQTfwAAA5Y"]
[Sun Mar 01 12:34:12.270487 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.164:25243] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 01 12:34:13.845344 2026] [:error] [pid 33229:tid 33242] [client 45.86.202.164:25243] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaPBxXzT4c9ddlGE6FxtLQAAAYs"]
[Sun Mar 01 12:34:14.796308 2026] [:error] [pid 8688:tid 8692] [client 45.86.202.181:39543] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaPBxjHJ4Nn-RvulD0r0agAAAUI"]
[Sun Mar 01 12:34:15.397033 2026] [:error] [pid 21158:tid 21196] [client 45.86.202.194:48713] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaPBxzriSIe3-pWnbPYb8gAAAEM"]
[Sun Mar 01 12:34:16.013832 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.198:40167] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaPByAUyU3c4Xm_xpMTXQwAAAkQ"]
[Sun Mar 01 12:34:16.686459 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.172:23389] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaPByKsaG_9IkG8N2p0j4wAAAAs"]
[Sun Mar 01 12:34:17.400010 2026] [:error] [pid 21158:tid 21212] [client 45.86.202.192:59931] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaPByTriSIe3-pWnbPYb9wAAAFM"]
[Sun Mar 01 12:34:18.343707 2026] [:error] [pid 8688:tid 8692] [client 45.86.202.188:46621] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaPByjHJ4Nn-RvulD0r0cwAAAUI"]
[Sun Mar 01 12:34:19.081006 2026] [:error] [pid 21158:tid 21196] [client 45.86.202.195:26183] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Mar 01 12:34:19.746206 2026] [:error] [pid 21158:tid 21196] [client 45.86.202.195:26183] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaPByzriSIe3-pWnbPYb_QAAAEM"]
[Sun Mar 01 12:34:20.940510 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.170:59147] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaPBzAUyU3c4Xm_xpMTXSgAAAkQ"]
[Sun Mar 01 12:34:22.343780 2026] [:error] [pid 8688:tid 8699] [client 45.86.202.196:39889] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaPBzjHJ4Nn-RvulD0r0fAAAAUk"]
[Sun Mar 01 12:34:22.935676 2026] [:error] [pid 33229:tid 33249] [client 45.86.202.204:37107] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 01 12:34:23.338039 2026] [:error] [pid 33229:tid 33242] [client 45.86.202.204:37107] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaPBz3zT4c9ddlGE6FxtMgAAAYs"]
[Sun Mar 01 12:34:23.913090 2026] [:error] [pid 33976:tid 34001] [client 45.86.202.168:24371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 01 12:34:24.897440 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.168:24371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 01 12:34:26.053552 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.168:24371] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaPB0gUyU3c4Xm_xpMTXWwAAAkQ"]
[Sun Mar 01 12:34:26.667905 2026] [:error] [pid 34785:tid 34804] [client 45.86.202.224:35779] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Mar 01 12:34:27.587322 2026] [:error] [pid 33767:tid 33783] [client 45.86.202.193:34473] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaPB00GyeKe3MWsxvBgjZgAAAg0"]
[Sun Mar 01 12:34:28.233473 2026] [:error] [pid 8688:tid 8692] [client 45.86.202.163:64569] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 01 12:34:28.846882 2026] [:error] [pid 8688:tid 8699] [client 45.86.202.163:64569] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaPB1DHJ4Nn-RvulD0r0iAAAAUk"]
[Sun Mar 01 12:34:29.861145 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.158:32563] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaPB1XzT4c9ddlGE6FxtOAAAAY8"]
[Sun Mar 01 12:34:31.637436 2026] [:error] [pid 33976:tid 34001] [client 45.86.202.164:54663] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Mar 01 12:34:31.919825 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.164:54663] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 01 12:34:32.509279 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.164:54663] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaPB2AUyU3c4Xm_xpMTXZQAAAkQ"]
[Sun Mar 01 12:34:33.366998 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.162:59787] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaPB2QUyU3c4Xm_xpMTXZwAAAkQ"]
[Sun Mar 01 12:34:34.257794 2026] [:error] [pid 21263:tid 21268] [client 45.86.202.184:64857] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaPB2tAxjzLvN1upBhktQAAAAME"]
[Sun Mar 01 12:34:34.849298 2026] [:error] [pid 33229:tid 33239] [client 45.86.202.205:28177] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaPB2nzT4c9ddlGE6FxtRgAAAYg"]
[Sun Mar 01 12:34:35.618925 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.167:50857] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPB23zT4c9ddlGE6FxtSgAAAY8"]
[Sun Mar 01 12:34:36.793138 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.200:28307] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 01 12:34:37.083217 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.200:28307] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaPB3QUyU3c4Xm_xpMTXcAAAAkQ"]
[Sun Mar 01 12:34:37.667185 2026] [:error] [pid 33229:tid 33235] [client 45.86.202.186:29535] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaPB3XzT4c9ddlGE6FxtVAAAAYQ"]
[Sun Mar 01 12:34:38.306853 2026] [:error] [pid 21158:tid 21196] [client 45.86.202.163:33089] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPB3jriSIe3-pWnbPYcDwAAAEM"]
[Sun Mar 01 12:34:39.548093 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.195:55063] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 01 12:34:40.872066 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.203:46909] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Mar 01 12:34:42.103226 2026] [:error] [pid 33229:tid 33239] [client 45.86.202.203:46909] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaPB4nzT4c9ddlGE6FxtaQAAAYg"]
[Sun Mar 01 12:34:43.782549 2026] [:error] [pid 35654:tid 35670] [client 45.86.202.201:50809] [client 45.86.202.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.201, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaPB40IPeuEwCTirofKjYAAAA8w"]
[Sun Mar 01 12:34:44.074088 2026] [:error] [pid 35654:tid 35668] [client 45.86.202.201:50809] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Mar 01 12:34:45.551237 2026] [:error] [pid 35654:tid 35681] [client 45.86.202.201:50809] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Mar 01 12:34:45.899476 2026] [:error] [pid 35654:tid 35661] [client 45.86.202.201:50809] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 01 12:34:47.489134 2026] [:error] [pid 35654:tid 35660] [client 45.86.202.201:50809] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaPB50IPeuEwCTirofKjbAAAA8I"]
[Sun Mar 01 12:34:48.343242 2026] [:error] [pid 21159:tid 21234] [client 45.86.202.194:58545] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Mar 01 12:34:48.912015 2026] [:error] [pid 21159:tid 21230] [client 45.86.202.194:58545] [client 45.86.202.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.194, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaPB6OLi3ouy1NZIkgpmlAAAAIk"]
[Sun Mar 01 12:34:49.532372 2026] [:error] [pid 21159:tid 21224] [client 45.86.202.194:58545] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaPB6eLi3ouy1NZIkgpmlgAAAIM"]
[Sun Mar 01 12:34:54.007908 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.169:60379] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 01 12:34:54.619474 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.169:60379] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Mar 01 12:34:55.971112 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.181:52925] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaPB7-Li3ouy1NZIkgpmpQAAAI8"]
[Sun Mar 01 12:34:56.544231 2026] [:error] [pid 21159:tid 21234] [client 45.86.202.186:59811] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 01 12:34:57.457003 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.186:59811] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 01 12:34:58.067199 2026] [:error] [pid 21159:tid 21224] [client 45.86.202.186:59811] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 01 12:34:58.678021 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.186:59811] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 01 12:34:58.955974 2026] [:error] [pid 21159:tid 21230] [client 45.86.202.186:59811] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaPB8uLi3ouy1NZIkgpmsgAAAIk"]
[Sun Mar 01 12:34:59.550653 2026] [:error] [pid 8688:tid 8692] [client 45.86.202.197:38829] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Mar 01 12:34:59.834305 2026] [:error] [pid 8688:tid 8692] [client 45.86.202.197:38829] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 01 12:35:00.140134 2026] [:error] [pid 8688:tid 8692] [client 45.86.202.197:38829] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaPB9DHJ4Nn-RvulD0r0swAAAUI"]
[Sun Mar 01 12:35:01.142282 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.161:58077] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Mar 01 12:35:02.579590 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.197:55831] [client 45.86.202.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.197, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaPB9uLi3ouy1NZIkgpmuAAAAI8"]
[Sun Mar 01 12:35:03.352864 2026] [:error] [pid 21159:tid 21230] [client 45.86.202.197:55831] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaPB9-Li3ouy1NZIkgpmuQAAAIk"]
[Sun Mar 01 12:35:07.356282 2026] [:error] [pid 35350:tid 35359] [client 45.86.202.225:40735] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 01 12:35:09.382823 2026] [:error] [pid 35350:tid 35360] [client 45.86.202.225:40735] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 01 12:35:09.675556 2026] [:error] [pid 35350:tid 35361] [client 45.86.202.225:40735] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaPB_YqZbPJ_JGYY1RQTwwAAA4k"]
[Sun Mar 01 12:35:10.302268 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.192:59781] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 01 12:35:12.121086 2026] [:error] [pid 33229:tid 33248] [client 45.86.202.187:21653] [client 45.86.202.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.187, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaPCAHzT4c9ddlGE6FxtqwAAAZE"]
[Sun Mar 01 12:35:13.297809 2026] [:error] [pid 33229:tid 33235] [client 45.86.202.196:59461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Mar 01 12:35:14.171725 2026] [:error] [pid 34785:tid 34804] [client 45.86.202.174:42031] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Mar 01 12:35:14.481812 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.174:42031] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 01 12:35:14.828603 2026] [:error] [pid 34785:tid 34804] [client 45.86.202.174:42031] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaPCAoC4dBNEGEcJx-OVgQAAAxE"]
[Sun Mar 01 12:35:15.819904 2026] [:error] [pid 33539:tid 33563] [client 45.86.202.224:45719] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Mar 01 12:35:16.157362 2026] [:error] [pid 33539:tid 33560] [client 45.86.202.224:45719] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaPCBNCsLwBYg4s018vLowAAAc8"]
[Sun Mar 01 12:35:17.534703 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.156:29407] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 01 12:35:17.842379 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.156:29407] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaPCBasaG_9IkG8N2p0kNgAAAAM"]
[Sun Mar 01 12:35:19.034239 2026] [:error] [pid 21156:tid 21171] [client 45.86.202.180:46327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Mar 01 12:35:19.319058 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.180:46327] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaPCB6saG_9IkG8N2p0kPAAAAAs"]
[Sun Mar 01 12:35:19.930667 2026] [:error] [pid 34785:tid 34804] [client 45.86.202.176:46529] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaPCB4C4dBNEGEcJx-OVhgAAAxE"]
[Sun Mar 01 12:35:20.544287 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.196:59639] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Mar 01 12:35:20.844878 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.196:59639] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Mar 01 12:35:22.105883 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.196:59639] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaPCCoC4dBNEGEcJx-OVjwAAAxI"]
[Sun Mar 01 12:35:24.321349 2026] [:error] [pid 33539:tid 33545] [client 45.86.202.195:20989] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaPCDNCsLwBYg4s018vLqgAAAcA"]
[Sun Mar 01 12:35:25.915861 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.160:64827] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaPCDasaG_9IkG8N2p0kTgAAAAM"]
[Sun Mar 01 12:35:26.541312 2026] [:error] [pid 33229:tid 33239] [client 45.86.202.157:30907] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Mar 01 12:35:27.187871 2026] [:error] [pid 33229:tid 33239] [client 45.86.202.157:30907] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Mar 01 12:35:27.502168 2026] [:error] [pid 33229:tid 33239] [client 45.86.202.157:30907] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaPCD3zT4c9ddlGE6FxtzQAAAYg"]
[Sun Mar 01 12:35:28.142201 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.156:60255] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 01 12:35:28.929457 2026] [:error] [pid 21156:tid 21189] [client 45.86.202.156:60255] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaPCEKsaG_9IkG8N2p0kVAAAABc"]
[Sun Mar 01 12:35:32.561270 2026] [:error] [pid 8688:tid 8699] [client 45.86.202.185:55013] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaPCFDHJ4Nn-RvulD0r0ywAAAUk"]
[Sun Mar 01 12:35:33.459855 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.189:44437] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 01 12:35:34.379766 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.189:44437] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Mar 01 12:35:35.002895 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.189:44437] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 01 12:35:35.300485 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.189:44437] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaPCFwUyU3c4Xm_xpMTXzwAAAkQ"]
[Sun Mar 01 12:35:35.920626 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.175:25143] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaPCFwUyU3c4Xm_xpMTX0gAAAkQ"]
[Sun Mar 01 12:35:36.636578 2026] [:error] [pid 35350:tid 35355] [client 45.86.202.182:45879] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaPCGIqZbPJ_JGYY1RQT2wAAA4M"]
[Sun Mar 01 12:35:37.176213 2026] [:error] [pid 21159:tid 21224] [client 45.86.202.205:39781] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaPCGeLi3ouy1NZIkgpm7AAAAIM"]
[Sun Mar 01 12:35:37.811088 2026] [:error] [pid 34286:tid 34305] [client 45.86.202.170:48811] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 01 12:35:38.135717 2026] [:error] [pid 34286:tid 34305] [client 45.86.202.170:48811] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaPCGnPFxpCIhHW6Xmm5zAAAApE"]
[Sun Mar 01 12:35:38.708140 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.168:25859] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPCGnzT4c9ddlGE6Fxt2wAAAY8"]
[Sun Mar 01 12:35:39.322059 2026] [:error] [pid 33229:tid 33242] [client 45.86.202.160:58759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 01 12:35:39.993445 2026] [:error] [pid 33229:tid 33235] [client 45.86.202.160:58759] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaPCG3zT4c9ddlGE6Fxt4wAAAYQ"]
[Sun Mar 01 12:35:40.654634 2026] [:error] [pid 35654:tid 35669] [client 45.86.202.156:44225] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaPCHEIPeuEwCTirofKjkQAAA8s"]
[Sun Mar 01 12:35:42.318319 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.159:51027] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaPCHqsaG_9IkG8N2p0kZQAAAAM"]
[Sun Mar 01 12:35:42.915173 2026] [:error] [pid 33539:tid 33563] [client 45.86.202.204:34229] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaPCHtCsLwBYg4s018vLrQAAAdE"]
[Sun Mar 01 12:35:43.881202 2026] [:error] [pid 33229:tid 33242] [client 45.86.202.204:31279] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaPCH3zT4c9ddlGE6Fxt7QAAAYs"]
[Sun Mar 01 12:35:45.144331 2026] [:error] [pid 34286:tid 34302] [client 45.86.202.180:58019] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaPCIXPFxpCIhHW6Xmm5-QAAAo4"]
[Sun Mar 01 12:35:45.777992 2026] [:error] [pid 21159:tid 21228] [client 45.86.202.157:60651] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 01 12:35:46.927460 2026] [:error] [pid 21159:tid 21230] [client 45.86.202.157:60651] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Mar 01 12:35:47.219150 2026] [:error] [pid 21159:tid 21225] [client 45.86.202.157:60651] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaPCI-Li3ouy1NZIkgpm_gAAAIQ"]
[Sun Mar 01 12:35:48.102016 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.224:52369] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Mar 01 12:35:48.423777 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.224:52369] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Mar 01 12:35:49.868221 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.224:52369] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaPCJYC4dBNEGEcJx-OVnAAAAxI"]
[Sun Mar 01 12:35:53.914337 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.189:59045] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaPCKeLi3ouy1NZIkgpnAwAAAI8"]
[Sun Mar 01 12:35:54.492631 2026] [:error] [pid 24576:tid 24604] [client 45.86.202.201:37625] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaPCKovfb5CnctJh071UcQAAARg"]
[Sun Mar 01 12:35:57.854486 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.167:31687] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPCLasaG_9IkG8N2p0kgwAAAAM"]
[Sun Mar 01 12:35:59.126270 2026] [:error] [pid 35350:tid 35355] [client 45.86.202.198:54231] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 01 12:35:59.489562 2026] [:error] [pid 35350:tid 35376] [client 45.86.202.198:54231] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Mar 01 12:35:59.825730 2026] [:error] [pid 35350:tid 35356] [client 45.86.202.198:54231] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Mar 01 12:36:00.231162 2026] [:error] [pid 35350:tid 35357] [client 45.86.202.198:54231] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Mar 01 12:36:02.191821 2026] [:error] [pid 35350:tid 35357] [client 45.86.202.198:54231] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaPCMoqZbPJ_JGYY1RQT8QAAA4U"]
[Sun Mar 01 12:36:04.327500 2026] [:error] [pid 24576:tid 24589] [client 45.86.202.172:52251] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaPCNIvfb5CnctJh071UcwAAAQo"]
[Sun Mar 01 12:36:04.995778 2026] [:error] [pid 35350:tid 35359] [client 45.86.202.186:32327] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaPCNIqZbPJ_JGYY1RQT9AAAA4c"]
[Sun Mar 01 12:36:05.703913 2026] [:error] [pid 33767:tid 33774] [client 45.86.202.188:49345] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaPCNUGyeKe3MWsxvBgjiwAAAgQ"]
[Sun Mar 01 12:36:06.371838 2026] [:error] [pid 33229:tid 33248] [client 45.86.202.191:62621] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaPCNnzT4c9ddlGE6FxuBAAAAZE"]
[Sun Mar 01 12:36:07.056402 2026] [:error] [pid 21263:tid 21289] [client 45.86.202.178:41225] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaPCN9AxjzLvN1upBhktTgAAANY"]
[Sun Mar 01 12:36:08.028125 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.158:56567] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaPCOOLi3ouy1NZIkgpnGQAAAI8"]
[Sun Mar 01 12:36:09.725702 2026] [:error] [pid 21159:tid 21236] [client 45.86.202.182:25615] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaPCOeLi3ouy1NZIkgpnGwAAAI8"]
[Sun Mar 01 12:36:10.288783 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.160:48485] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaPCOnzT4c9ddlGE6FxuCgAAAY8"]
[Sun Mar 01 12:36:12.015417 2026] [:error] [pid 34785:tid 34805] [client 45.86.202.178:36391] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaPCPIC4dBNEGEcJx-OVugAAAxI"]
[Sun Mar 01 12:36:13.367752 2026] [:error] [pid 34552:tid 34564] [client 45.86.202.202:62649] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaPCPXBlU_DRqGi4yvsipAAAAsk"]
[Sun Mar 01 12:36:15.117837 2026] [:error] [pid 33767:tid 33785] [client 45.86.202.166:44529] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaPCP0GyeKe3MWsxvBgjjQAAAg8"]
[Sun Mar 01 12:36:15.777986 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.196:43377] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 01 12:36:16.523142 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.196:43377] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaPCQKsaG_9IkG8N2p0klgAAAAs"]
[Sun Mar 01 12:36:17.729147 2026] [:error] [pid 35350:tid 35375] [client 45.86.202.202:45401] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaPCQYqZbPJ_JGYY1RQT_wAAA5c"]
[Sun Mar 01 12:36:19.766965 2026] [:error] [pid 33767:tid 33779] [client 45.86.202.164:36841] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 01 12:36:20.077289 2026] [:error] [pid 33767:tid 33778] [client 45.86.202.164:36841] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaPCREGyeKe3MWsxvBgjkQAAAgg"]
[Sun Mar 01 12:36:21.006502 2026] [:error] [pid 21156:tid 21171] [client 45.86.202.158:42491] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 01 12:36:21.317796 2026] [:error] [pid 21156:tid 21171] [client 45.86.202.158:42491] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 01 12:36:21.711247 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.158:42491] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Mar 01 12:36:21.992006 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.158:42491] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaPCRasaG_9IkG8N2p0ksAAAABE"]
[Sun Mar 01 12:36:22.598165 2026] [:error] [pid 34785:tid 34804] [client 45.86.202.194:48419] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Mar 01 12:36:23.966899 2026] [:error] [pid 33229:tid 33237] [client 45.86.202.202:54977] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaPCR3zT4c9ddlGE6FxuHQAAAYY"]
[Sun Mar 01 12:36:25.162591 2026] [:error] [pid 34552:tid 34566] [client 45.86.202.185:59807] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 12:36:25.479108 2026] [:error] [pid 34552:tid 34566] [client 45.86.202.185:59807] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 01 12:36:25.816762 2026] [:error] [pid 34552:tid 34566] [client 45.86.202.185:59807] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Mar 01 12:36:28.450069 2026] [:error] [pid 34552:tid 34566] [client 45.86.202.185:59807] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Mar 01 12:36:28.748720 2026] [:error] [pid 34552:tid 34566] [client 45.86.202.185:59807] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 01 12:36:30.337489 2026] [:error] [pid 21159:tid 21239] [client 45.86.202.162:27573] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Mar 01 12:36:31.259730 2026] [:error] [pid 21159:tid 21228] [client 45.86.202.162:27573] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 01 12:36:32.489889 2026] [:error] [pid 21159:tid 21228] [client 45.86.202.162:27573] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaPCUOLi3ouy1NZIkgpnQwAAAIc"]
[Sun Mar 01 12:36:33.056889 2026] [:error] [pid 33229:tid 33242] [client 45.86.202.200:52491] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaPCUXzT4c9ddlGE6FxuLwAAAYs"]
[Sun Mar 01 12:36:33.596995 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.163:65267] [client 45.86.202.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.163, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaPCUXzT4c9ddlGE6FxuMQAAAY8"]
[Sun Mar 01 12:36:33.600583 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.163:65267] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 01 12:36:33.907028 2026] [:error] [pid 33229:tid 33235] [client 45.86.202.163:65267] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 01 12:36:34.190660 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.163:65267] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaPCUnzT4c9ddlGE6FxuMwAAAY8"]
[Sun Mar 01 12:36:35.117487 2026] [:error] [pid 33767:tid 33771] [client 45.86.202.161:25571] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Mar 01 12:36:35.414519 2026] [:error] [pid 33767:tid 33774] [client 45.86.202.161:25571] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaPCU0GyeKe3MWsxvBgjlgAAAgQ"]
[Sun Mar 01 12:36:35.991107 2026] [:error] [pid 33229:tid 33242] [client 45.86.202.198:42131] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaPCU3zT4c9ddlGE6FxuNQAAAYs"]
[Sun Mar 01 12:36:38.533938 2026] [:error] [pid 33976:tid 33985] [client 45.86.202.201:45997] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaPCVgUyU3c4Xm_xpMTYCQAAAkc"]
[Sun Mar 01 12:36:39.113828 2026] [:error] [pid 21263:tid 21267] [client 45.86.202.160:36323] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaPCV9AxjzLvN1upBhktUgAAAMA"]
[Sun Mar 01 12:36:41.258245 2026] [:error] [pid 34552:tid 34566] [client 45.86.202.182:65007] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 01 12:36:41.846163 2026] [:error] [pid 34552:tid 34564] [client 45.86.202.182:65007] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaPCWXBlU_DRqGi4yvsizAAAAsk"]
[Sun Mar 01 12:36:43.060348 2026] [:error] [pid 34552:tid 34564] [client 45.86.202.188:43635] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Mar 01 12:36:44.736197 2026] [:error] [pid 34552:tid 34564] [client 45.86.202.188:43635] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaPCXHBlU_DRqGi4yvsi1gAAAsk"]
[Sun Mar 01 12:36:45.349811 2026] [:error] [pid 34552:tid 34572] [client 45.86.202.157:56499] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaPCXXBlU_DRqGi4yvsi1wAAAtE"]
[Sun Mar 01 12:36:46.340307 2026] [:error] [pid 35350:tid 35359] [client 45.86.202.185:49683] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 01 12:36:46.662976 2026] [:error] [pid 35350:tid 35361] [client 45.86.202.185:49683] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaPCXoqZbPJ_JGYY1RQUDAAAA4k"]
[Sun Mar 01 12:36:47.252977 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.173:48011] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaPCX6saG_9IkG8N2p0k1AAAABE"]
[Sun Mar 01 12:36:48.455134 2026] [:error] [pid 21156:tid 21171] [client 45.86.202.171:54671] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Mar 01 12:36:48.786877 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.171:54671] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 01 12:36:49.408150 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.171:54671] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 01 12:36:50.019582 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.171:54671] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaPCYqsaG_9IkG8N2p0k5AAAABE"]
[Sun Mar 01 12:36:50.671241 2026] [:error] [pid 34286:tid 34305] [client 45.86.202.197:55195] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaPCYnPFxpCIhHW6Xmm6SQAAApE"]
[Sun Mar 01 12:36:52.153272 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.196:45717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 01 12:36:52.579268 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.196:45717] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaPCZKsaG_9IkG8N2p0k-wAAABE"]
[Sun Mar 01 12:36:53.763103 2026] [:error] [pid 33976:tid 33982] [client 45.86.202.203:31975] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaPCZQUyU3c4Xm_xpMTYGQAAAkQ"]
[Sun Mar 01 12:36:54.430817 2026] [:error] [pid 33767:tid 33792] [client 45.86.202.180:48975] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaPCZkGyeKe3MWsxvBgjmgAAAhY"]
[Sun Mar 01 12:36:56.464601 2026] [:error] [pid 34286:tid 34298] [client 45.86.202.186:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Mar 01 12:36:56.778293 2026] [:error] [pid 34286:tid 34298] [client 45.86.202.186:57283] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaPCaHPFxpCIhHW6Xmm6UwAAAoo"]
[Sun Mar 01 12:36:57.803430 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.192:42167] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaPCaasaG_9IkG8N2p0lCAAAAAM"]
[Sun Mar 01 12:36:58.357691 2026] [:error] [pid 33229:tid 33237] [client 45.86.202.189:46413] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 01 12:36:58.791225 2026] [:error] [pid 33229:tid 33237] [client 45.86.202.189:46413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 01 12:36:59.374078 2026] [:error] [pid 33229:tid 33238] [client 45.86.202.189:46413] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Mar 01 12:37:03.282566 2026] [:error] [pid 33229:tid 33235] [client 45.86.202.189:46413] [client 45.86.202.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.189, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaPCb3zT4c9ddlGE6FxuYgAAAYQ"]
[Sun Mar 01 12:37:03.914286 2026] [:error] [pid 33229:tid 33238] [client 45.86.202.189:46413] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 01 12:37:04.225665 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.189:46413] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Mar 01 12:37:04.522206 2026] [:error] [pid 33229:tid 33237] [client 45.86.202.189:46413] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 01 12:37:05.261623 2026] [:error] [pid 33229:tid 33235] [client 45.86.202.189:46413] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaPCcXzT4c9ddlGE6FxuaAAAAYQ"]
[Sun Mar 01 12:37:07.456979 2026] [:error] [pid 34552:tid 34572] [client 45.86.202.170:63099] [client 45.86.202.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.170, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaPCc3BlU_DRqGi4yvsi8wAAAtE"]
[Sun Mar 01 12:37:10.071143 2026] [:error] [pid 21156:tid 21169] [client 45.86.202.191:62451] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 01 12:37:10.427650 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.191:62451] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Mar 01 12:37:11.314734 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.191:62451] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Mar 01 12:37:13.109548 2026] [:error] [pid 21156:tid 21183] [client 45.86.202.191:62451] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Mar 01 12:37:14.073141 2026] [:error] [pid 21156:tid 21177] [client 45.86.202.191:62451] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Mar 01 12:37:16.829063 2026] [:error] [pid 34552:tid 34573] [client 45.86.202.160:26487] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 01 12:37:17.149150 2026] [:error] [pid 34552:tid 34573] [client 45.86.202.160:26487] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sun Mar 01 12:37:18.803457 2026] [:error] [pid 34552:tid 34573] [client 45.86.202.160:26487] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Mar 01 12:37:19.448645 2026] [:error] [pid 34552:tid 34573] [client 45.86.202.160:26487] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaPCf3BlU_DRqGi4yvsjTgAAAtI"]
[Sun Mar 01 12:37:20.714988 2026] [:error] [pid 34552:tid 34573] [client 45.86.202.171:25303] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 01 12:37:21.050505 2026] [:error] [pid 34552:tid 34564] [client 45.86.202.171:25303] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaPCgXBlU_DRqGi4yvsjVwAAAsk"]
[Sun Mar 01 12:37:22.004488 2026] [:error] [pid 21263:tid 21287] [client 45.86.202.201:26779] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 01 12:37:22.300270 2026] [:error] [pid 21263:tid 21276] [client 45.86.202.201:26779] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaPCgtAxjzLvN1upBhktWwAAAMk"]
[Sun Mar 01 12:37:23.958712 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.191:65397] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Mar 01 12:37:24.555108 2026] [:error] [pid 33229:tid 33246] [client 45.86.202.191:65397] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 01 12:37:25.777083 2026] [:error] [pid 35350:tid 35375] [client 45.86.202.165:45139] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 01 12:37:26.075407 2026] [:error] [pid 35350:tid 35374] [client 45.86.202.165:45139] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Mar 01 12:37:26.800578 2026] [:error] [pid 35350:tid 35356] [client 45.86.202.165:45139] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaPChoqZbPJ_JGYY1RQUdQAAA4Q"]
[Sun Mar 01 12:37:27.463711 2026] [:error] [pid 34552:tid 34572] [client 45.86.202.197:45177] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sun Mar 01 12:37:27.775771 2026] [:error] [pid 34552:tid 34572] [client 45.86.202.197:45177] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 01 12:37:28.050913 2026] [:error] [pid 34552:tid 34573] [client 45.86.202.197:45177] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaPCiHBlU_DRqGi4yvsjbAAAAtI"]
[Sun Mar 01 12:37:28.997653 2026] [:error] [pid 34552:tid 34572] [client 45.86.202.197:20941] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaPCiHBlU_DRqGi4yvsjcAAAAtE"]
[Sun Mar 01 14:29:33.318706 2026] [:error] [pid 38034:tid 38043] [client 62.60.131.218:55261] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaPczQxtfZjwlJok9K9__QAAAQU"]
[Sun Mar 01 16:52:09.934512 2026] [:error] [pid 7165:tid 7180] [client 125.94.144.102:41318] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaP-ORRjCrA8qWBjgG9bdQAAAk0"]
[Sun Mar 01 18:10:24.719947 2026] [:error] [pid 7165:tid 7168] [client 74.243.251.125:13060] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaQQkBRjCrA8qWBjgG-gDwAAAkE"]
[Sun Mar 01 18:10:25.047653 2026] [:error] [pid 38241:tid 38257] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Sun Mar 01 18:10:25.377356 2026] [:error] [pid 38241:tid 38266] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Mar 01 18:10:25.542830 2026] [:error] [pid 38241:tid 38265] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Sun Mar 01 18:10:25.707585 2026] [:error] [pid 38241:tid 38253] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Sun Mar 01 18:10:25.872178 2026] [:error] [pid 38241:tid 38262] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Sun Mar 01 18:10:26.036858 2026] [:error] [pid 38241:tid 38260] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sun Mar 01 18:10:26.201656 2026] [:error] [pid 38241:tid 38250] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sun Mar 01 18:10:26.366554 2026] [:error] [pid 38241:tid 38268] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Sun Mar 01 18:10:26.532085 2026] [:error] [pid 38241:tid 38245] [client 74.243.251.125:13070] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 01 18:10:26.693893 2026] [:error] [pid 38241:tid 38258] [client 74.243.251.125:13070] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaQQkvKRPk6YnJBxw_yvKAAAAM4"]
[Sun Mar 01 18:10:27.048401 2026] [:error] [pid 44644:tid 44664] [client 74.243.251.125:12683] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaQQk53RJaXMcw3y9V_JcgAAABE"]
[Sun Mar 01 18:10:27.464260 2026] [:error] [pid 44644:tid 44657] [client 74.243.251.125:13063] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaQQk53RJaXMcw3y9V_JdQAAAAo"]
[Sun Mar 01 18:10:27.786814 2026] [:error] [pid 7165:tid 7174] [client 74.243.251.125:12728] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaQQkxRjCrA8qWBjgG-gKgAAAkc"]
[Sun Mar 01 18:10:28.190195 2026] [:error] [pid 40750:tid 40767] [client 74.243.251.125:13103] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaQQlAfBuk03yQKDyqtb1gAAAc4"]
[Sun Mar 01 18:10:28.593993 2026] [:error] [pid 7165:tid 7169] [client 74.243.251.125:12704] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaQQlBRjCrA8qWBjgG-gMAAAAkI"]
[Sun Mar 01 18:10:29.021212 2026] [:error] [pid 40750:tid 40758] [client 74.243.251.125:13072] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaQQlQfBuk03yQKDyqtb2wAAAcU"]
[Sun Mar 01 18:10:29.344648 2026] [:error] [pid 41780:tid 41806] [client 74.243.251.125:12733] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaQQlcONkVoocLIqzy0eFwAAA9c"]
[Sun Mar 01 18:10:29.669109 2026] [:error] [pid 40750:tid 40770] [client 74.243.251.125:12693] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaQQlQfBuk03yQKDyqtb4gAAAdE"]
[Sun Mar 01 18:10:30.024754 2026] [:error] [pid 38241:tid 38251] [client 74.243.251.125:12681] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaQQlvKRPk6YnJBxw_yvKgAAAMc"]
[Sun Mar 01 18:10:30.350529 2026] [:error] [pid 40750:tid 40765] [client 74.243.251.125:12706] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaQQlgfBuk03yQKDyqtb6QAAAcw"]
[Sun Mar 01 18:10:30.754040 2026] [:error] [pid 40750:tid 40771] [client 74.243.251.125:12698] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaQQlgfBuk03yQKDyqtb7QAAAdI"]
[Sun Mar 01 18:10:31.077123 2026] [:error] [pid 40750:tid 40762] [client 74.243.251.125:13066] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaQQlwfBuk03yQKDyqtb8QAAAck"]
[Sun Mar 01 18:10:31.402450 2026] [:error] [pid 40750:tid 40775] [client 74.243.251.125:12718] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaQQlwfBuk03yQKDyqtb9AAAAdY"]
[Sun Mar 01 18:10:31.726134 2026] [:error] [pid 7133:tid 7136] [client 74.243.251.125:12707] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaQQl_Ctubh8pR64qB_8ogAAAEE"]
[Sun Mar 01 18:10:32.051334 2026] [:error] [pid 7133:tid 7135] [client 74.243.251.125:13067] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaQQmPCtubh8pR64qB_8owAAAEA"]
[Sun Mar 01 18:10:32.381537 2026] [:error] [pid 33822:tid 33832] [client 74.243.251.125:13065] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaQQmG6W3ygu1YVssubu1wAAAog"]
[Sun Mar 01 18:10:32.715067 2026] [:error] [pid 38241:tid 38261] [client 74.243.251.125:13068] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaQQmPKRPk6YnJBxw_yvLwAAANE"]
[Sun Mar 01 18:10:33.039436 2026] [:error] [pid 38034:tid 38043] [client 74.243.251.125:13092] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaQQmQxtfZjwlJok9K_wmwAAAQU"]
[Sun Mar 01 18:10:33.449214 2026] [:error] [pid 38034:tid 38040] [client 74.243.251.125:12716] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaQQmQxtfZjwlJok9K_wnAAAAQQ"]
[Sun Mar 01 18:10:33.773940 2026] [:error] [pid 40750:tid 40776] [client 74.243.251.125:12715] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaQQmQfBuk03yQKDyqtcDQAAAdc"]
[Sun Mar 01 18:10:34.176577 2026] [:error] [pid 38034:tid 38049] [client 74.243.251.125:12724] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaQQmgxtfZjwlJok9K_wngAAAQs"]
[Sun Mar 01 18:10:34.578702 2026] [:error] [pid 40750:tid 40757] [client 74.243.251.125:12717] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaQQmgfBuk03yQKDyqtcHQAAAcQ"]
[Sun Mar 01 18:10:34.980535 2026] [:error] [pid 7165:tid 7168] [client 74.243.251.125:12696] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaQQmhRjCrA8qWBjgG-gagAAAkE"]
[Sun Mar 01 18:10:35.304583 2026] [:error] [pid 38241:tid 38266] [client 74.243.251.125:13268] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaQQm_KRPk6YnJBxw_yvMwAAANY"]
[Sun Mar 01 18:10:35.706590 2026] [:error] [pid 40750:tid 40771] [client 74.243.251.125:12672] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaQQmwfBuk03yQKDyqtcLwAAAdI"]
[Sun Mar 01 18:10:36.110254 2026] [:error] [pid 40750:tid 40761] [client 74.243.251.125:12703] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaQQnAfBuk03yQKDyqtcNQAAAcg"]
[Sun Mar 01 18:10:36.537681 2026] [:error] [pid 40750:tid 40758] [client 74.243.251.125:13059] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaQQnAfBuk03yQKDyqtcPgAAAcU"]
[Sun Mar 01 18:24:35.576890 2026] [:error] [pid 38241:tid 38264] [client 43.157.38.228:59042] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaQT4_KRPk6YnJBxw_y3igAAANQ"]
[Sun Mar 01 18:32:55.713639 2026] [:error] [pid 40750:tid 40776] [client 43.156.228.27:56274] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaQV1wfBuk03yQKDyqt2zgAAAdc"]
[Sun Mar 01 18:36:28.237260 2026] [:error] [pid 7133:tid 7136] [client 145.239.10.137:44614] File does not exist: /usr/local/apache/htdocs/suspended-page/detail.php, referer: http://pumpbooking.com/detail.php
[Sun Mar 01 18:41:42.890821 2026] [:error] [pid 7165:tid 7187] [client 209.9.200.163:47588] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aaQX5hRjCrA8qWBjgG-9VQAAAlQ"]
[Sun Mar 01 18:41:45.210519 2026] [:error] [pid 38241:tid 38247] [client 209.9.200.163:27384] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaQX6fKRPk6YnJBxw_zBBwAAAMM"]
[Sun Mar 01 18:41:47.458013 2026] [:error] [pid 40750:tid 40761] [client 209.9.200.163:7767] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaQX6wfBuk03yQKDyquCjAAAAcg"]
[Sun Mar 01 19:20:19.903525 2026] [:error] [pid 38034:tid 38036] [client 20.151.11.124:7458] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Sun Mar 01 19:20:20.117404 2026] [:error] [pid 38034:tid 38044] [client 20.151.11.124:7458] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 19:20:20.544521 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.124:7458] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQg9AxtfZjwlJok9K8AJgAAARg"]
[Sun Mar 01 19:20:21.855884 2026] [:error] [pid 7133:tid 7141] [client 20.151.11.124:44775] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 01 19:20:22.283064 2026] [:error] [pid 7133:tid 7155] [client 20.151.11.124:44775] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 01 19:20:22.931558 2026] [:error] [pid 7133:tid 7136] [client 20.151.11.124:44775] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaQg9vCtubh8pR64qB8ZWgAAAEE"]
[Sun Mar 01 19:20:23.783606 2026] [:error] [pid 38241:tid 38251] [client 20.151.11.124:59954] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaQg9_KRPk6YnJBxw_zWLQAAAMc"]
[Sun Mar 01 19:20:24.634897 2026] [:error] [pid 37032:tid 37043] [client 20.151.11.124:7288] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaQg-Ou0U4o7eSImsVRwrQAAAYk"]
[Sun Mar 01 19:20:25.567762 2026] [:error] [pid 40750:tid 40753] [client 20.151.11.124:64798] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaQg-QfBuk03yQKDyqu4HAAAAcA"]
[Sun Mar 01 21:34:10.136243 2026] [:error] [pid 7165:tid 7176] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 21:34:10.347621 2026] [:error] [pid 7165:tid 7187] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 21:34:10.765106 2026] [:error] [pid 7165:tid 7190] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 01 21:34:10.973849 2026] [:error] [pid 7165:tid 7186] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 21:34:11.401550 2026] [:error] [pid 7165:tid 7178] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 01 21:34:11.610507 2026] [:error] [pid 7165:tid 7170] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 01 21:34:11.819940 2026] [:error] [pid 7165:tid 7169] [client 20.220.162.180:49686] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 01 21:34:12.235312 2026] [:error] [pid 7165:tid 7189] [client 20.220.162.180:49686] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRAVBRjCrA8qWBjgG9LvwAAAlY"]
[Sun Mar 01 21:34:13.054694 2026] [:error] [pid 7165:tid 7180] [client 20.220.162.180:52737] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRAVRRjCrA8qWBjgG9LwQAAAk0"]
[Sun Mar 01 21:34:13.900634 2026] [:error] [pid 7133:tid 7148] [client 20.220.162.180:49712] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRAVfCtubh8pR64qB9MVgAAAE0"]
[Sun Mar 01 21:34:14.741351 2026] [:error] [pid 7133:tid 7147] [client 20.220.162.180:50220] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRAVvCtubh8pR64qB9MWQAAAEw"]
[Sun Mar 01 21:55:36.389104 2026] [:error] [pid 7165:tid 7173] [client 20.63.80.2:30087] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aaRFWBRjCrA8qWBjgG9cnQAAAkY"]
[Sun Mar 01 21:55:37.217479 2026] [:error] [pid 40750:tid 40754] [client 20.63.80.2:30099] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aaRFWQfBuk03yQKDyqtcHAAAAcE"]
[Sun Mar 01 21:55:38.051234 2026] [:error] [pid 40750:tid 40772] [client 20.63.80.2:29715] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aaRFWgfBuk03yQKDyqtcJgAAAdM"]
[Sun Mar 01 21:55:38.879544 2026] [:error] [pid 40750:tid 40765] [client 20.63.80.2:29710] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f.php"] [unique_id "aaRFWgfBuk03yQKDyqtcMwAAAcw"]
[Sun Mar 01 22:07:47.282565 2026] [:error] [pid 7165:tid 7180] [client 20.151.11.124:55629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sun Mar 01 22:07:47.491793 2026] [:error] [pid 7165:tid 7174] [client 20.151.11.124:55629] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sun Mar 01 22:07:48.335319 2026] [:error] [pid 7165:tid 7176] [client 20.151.11.124:55629] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sun Mar 01 22:07:48.748055 2026] [:error] [pid 7165:tid 7190] [client 20.151.11.124:55629] [client 20.151.11.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaRINBRjCrA8qWBjgG9ofwAAAlc"]
[Sun Mar 01 22:07:50.245804 2026] [:error] [pid 7133:tid 7154] [client 20.151.11.124:50164] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 01 22:07:50.450963 2026] [:error] [pid 7133:tid 7153] [client 20.151.11.124:50164] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaRINvCtubh8pR64qB9WwwAAAFI"]
[Sun Mar 01 22:07:51.323212 2026] [:error] [pid 38241:tid 38256] [client 20.151.11.124:37298] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaRIN_KRPk6YnJBxw_wqwgAAAMw"]
[Sun Mar 01 22:07:52.146215 2026] [:error] [pid 33822:tid 33837] [client 20.151.11.124:46628] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaRIOG6W3ygu1YVssuYsZAAAAo0"]
[Sun Mar 01 22:07:53.001236 2026] [:error] [pid 7133:tid 7138] [client 20.151.11.124:35900] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "aaRIOfCtubh8pR64qB9W0AAAAEM"]
[Sun Mar 01 23:08:18.290371 2026] [:error] [pid 38241:tid 38246] [client 51.75.129.164:49330] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaRWYvKRPk6YnJBxw_xHaAAAAMI"]
[Sun Mar 01 23:08:20.660121 2026] [:error] [pid 41342:tid 41359] [client 51.75.129.164:49342] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaRWZI4iJ6RAS5CatDlmgAAAAg4"]
[Sun Mar 01 23:08:22.681948 2026] [:error] [pid 38241:tid 38266] [client 51.75.129.164:49354] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaRWZvKRPk6YnJBxw_xHcwAAANY"]
[Sun Mar 01 23:08:24.977808 2026] [:error] [pid 40750:tid 40772] [client 51.75.129.164:49366] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaRWaAfBuk03yQKDyquQxgAAAdM"]
[Sun Mar 01 23:08:27.227062 2026] [:error] [pid 44644:tid 44649] [client 51.75.129.164:51784] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaRWa53RJaXMcw3y9V_ojgAAAAI"]
[Sun Mar 01 23:08:29.423859 2026] [:error] [pid 40750:tid 40775] [client 51.75.129.164:51786] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaRWbQfBuk03yQKDyquQ3wAAAdY"]
[Sun Mar 01 23:08:31.350339 2026] [:error] [pid 7165:tid 7187] [client 51.75.129.164:51790] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaRWbxRjCrA8qWBjgG-llQAAAlQ"]
[Sun Mar 01 23:17:21.543283 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 01 23:17:21.995117 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 01 23:17:22.436128 2026] [:error] [pid 7165:tid 7173] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 01 23:17:22.872418 2026] [:error] [pid 7165:tid 7169] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Mar 01 23:17:23.342739 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 01 23:17:23.791568 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 01 23:17:24.236628 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 01 23:17:24.668371 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 23:17:25.552184 2026] [:error] [pid 7165:tid 7184] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 01 23:17:26.416706 2026] [:error] [pid 7165:tid 7171] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 01 23:17:26.864866 2026] [:error] [pid 7165:tid 7189] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Mar 01 23:17:27.411218 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 23:17:27.847837 2026] [:error] [pid 7165:tid 7176] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 01 23:17:28.280064 2026] [:error] [pid 7165:tid 7188] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 23:17:28.711909 2026] [:error] [pid 7165:tid 7175] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Mar 01 23:17:29.481966 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 01 23:17:29.914266 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Mar 01 23:17:30.358986 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.202:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 01 23:17:36.589652 2026] [:error] [pid 7165:tid 7176] [client 45.67.97.202:23195] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaRYkBRjCrA8qWBjgG-s7gAAAkk"]
[Sun Mar 01 23:17:39.323129 2026] [:error] [pid 33822:tid 33831] [client 45.67.97.58:23133] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaRYk26W3ygu1YVssuY_EAAAAoc"]
[Sun Mar 01 23:17:46.700151 2026] [:error] [pid 38034:tid 38043] [client 45.67.97.202:37505] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 01 23:17:50.023799 2026] [:error] [pid 38034:tid 38058] [client 45.67.97.202:37505] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaRYngxtfZjwlJok9K8ulwAAARQ"]
[Sun Mar 01 23:17:52.949826 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.55:55091] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 23:17:53.485093 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.55:55091] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaRYoRRjCrA8qWBjgG-tSQAAAks"]
[Sun Mar 01 23:17:55.777718 2026] [:error] [pid 7165:tid 7180] [client 45.67.97.57:20455] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 01 23:17:59.082260 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.57:20455] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaRYpxRjCrA8qWBjgG-tiQAAAkw"]
[Sun Mar 01 23:18:05.228104 2026] [:error] [pid 7165:tid 7174] [client 45.67.97.202:45211] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaRYrRRjCrA8qWBjgG-tqQAAAkc"]
[Sun Mar 01 23:18:06.928138 2026] [:error] [pid 33822:tid 33838] [client 45.67.97.58:25733] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaRYrm6W3ygu1YVssuY_JQAAAo4"]
[Sun Mar 01 23:18:07.991397 2026] [:error] [pid 37032:tid 37046] [client 45.67.97.55:45249] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaRYr-u0U4o7eSImsVSSfAAAAYw"]
[Sun Mar 01 23:18:09.180347 2026] [:error] [pid 7165:tid 7181] [client 45.67.97.55:43005] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaRYsRRjCrA8qWBjgG-tzwAAAk4"]
[Sun Mar 01 23:18:10.221290 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.202:61457] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaRYshRjCrA8qWBjgG-t3AAAAlg"]
[Sun Mar 01 23:18:12.017039 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.202:25233] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaRYtBRjCrA8qWBjgG-t7QAAAks"]
[Sun Mar 01 23:18:13.533813 2026] [:error] [pid 38241:tid 38252] [client 45.67.97.58:28009] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Mar 01 23:18:14.407325 2026] [:error] [pid 38241:tid 38262] [client 45.67.97.58:28009] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaRYtvKRPk6YnJBxw_xLsAAAANI"]
[Sun Mar 01 23:18:16.395528 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.55:50471] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaRYuPKRPk6YnJBxw_xLtAAAANA"]
[Sun Mar 01 23:18:18.629918 2026] [:error] [pid 40750:tid 40759] [client 45.67.97.57:39067] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaRYugfBuk03yQKDyquXLQAAAcY"]
[Sun Mar 01 23:18:19.587800 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.55:48721] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 01 23:18:20.196521 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.55:48721] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaRYvBRjCrA8qWBjgG-uMwAAAkw"]
[Sun Mar 01 23:18:21.501137 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.57:44705] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 01 23:18:22.831098 2026] [:error] [pid 40750:tid 40760] [client 45.67.97.57:44705] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 01 23:18:24.195624 2026] [:error] [pid 40750:tid 40768] [client 45.67.97.57:44705] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaRYwAfBuk03yQKDyquXPQAAAc8"]
[Sun Mar 01 23:18:25.079155 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.57:32009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Mar 01 23:18:25.546345 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.57:32009] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaRYwRRjCrA8qWBjgG-ueAAAAlc"]
[Sun Mar 01 23:18:27.337310 2026] [:error] [pid 33822:tid 33847] [client 45.67.97.202:46109] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 01 23:18:30.431960 2026] [:error] [pid 33822:tid 33829] [client 45.67.97.202:46109] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaRYxm6W3ygu1YVssuY_NAAAAoU"]
[Sun Mar 01 23:18:33.231164 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.55:59741] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaRYyQfBuk03yQKDyquXSAAAAdI"]
[Sun Mar 01 23:18:34.821761 2026] [:error] [pid 38241:tid 38244] [client 45.67.97.57:27807] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Mar 01 23:18:35.349684 2026] [:error] [pid 38241:tid 38256] [client 45.67.97.57:27807] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 01 23:18:37.439055 2026] [:error] [pid 38241:tid 38267] [client 45.67.97.57:27807] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaRYzfKRPk6YnJBxw_xL-QAAANc"]
[Sun Mar 01 23:18:39.236822 2026] [:error] [pid 7133:tid 7142] [client 45.67.97.58:52679] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaRYz_Ctubh8pR64qB9yoAAAAEc"]
[Sun Mar 01 23:18:41.383154 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.55:47213] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaRY0RRjCrA8qWBjgG-u9gAAAlA"]
[Sun Mar 01 23:18:42.693072 2026] [:error] [pid 38034:tid 38036] [client 45.67.97.57:31665] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaRY0gxtfZjwlJok9K8urwAAAQA"]
[Sun Mar 01 23:18:43.979268 2026] [:error] [pid 33822:tid 33835] [client 45.67.97.202:21093] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaRY026W3ygu1YVssuY_PwAAAos"]
[Sun Mar 01 23:18:46.088799 2026] [:error] [pid 7165:tid 7181] [client 45.67.97.57:46997] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 01 23:18:46.542958 2026] [:error] [pid 7165:tid 7174] [client 45.67.97.57:46997] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaRY1hRjCrA8qWBjgG-vLQAAAkc"]
[Sun Mar 01 23:18:47.419563 2026] [:error] [pid 38241:tid 38250] [client 45.67.97.55:61457] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaRY1_KRPk6YnJBxw_xMGAAAAMY"]
[Sun Mar 01 23:18:48.526684 2026] [:error] [pid 38241:tid 38268] [client 45.67.97.57:28771] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaRY2PKRPk6YnJBxw_xMHAAAANg"]
[Sun Mar 01 23:18:51.197666 2026] [:error] [pid 7133:tid 7143] [client 45.67.97.57:56343] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 01 23:18:52.513569 2026] [:error] [pid 7133:tid 7135] [client 45.67.97.57:56343] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Mar 01 23:18:55.580840 2026] [:error] [pid 7133:tid 7159] [client 45.67.97.57:56343] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaRY3_Ctubh8pR64qB9ywAAAAFg"]
[Sun Mar 01 23:18:59.440707 2026] [:error] [pid 38034:tid 38037] [client 45.67.97.57:52653] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaRY4wxtfZjwlJok9K8u0QAAAQE"]
[Sun Mar 01 23:19:00.110115 2026] [:error] [pid 38034:tid 38055] [client 45.67.97.57:52653] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Mar 01 23:19:03.000749 2026] [:error] [pid 38034:tid 38054] [client 45.67.97.57:52653] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Mar 01 23:19:03.467868 2026] [:error] [pid 38034:tid 38062] [client 45.67.97.57:52653] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 01 23:19:05.780492 2026] [:error] [pid 38034:tid 38059] [client 45.67.97.57:52653] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaRY6QxtfZjwlJok9K8u3QAAARU"]
[Sun Mar 01 23:19:08.448231 2026] [:error] [pid 38241:tid 38266] [client 45.67.97.58:32419] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Mar 01 23:19:08.964179 2026] [:error] [pid 38241:tid 38262] [client 45.67.97.58:32419] [client 45.67.97.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.58, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaRY7PKRPk6YnJBxw_xMMgAAANI"]
[Sun Mar 01 23:19:09.966702 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.58:32419] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaRY7fKRPk6YnJBxw_xMNQAAANA"]
[Sun Mar 01 23:19:13.417733 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.57:60405] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 01 23:19:14.372754 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.57:60405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Mar 01 23:19:15.250333 2026] [:error] [pid 7165:tid 7184] [client 45.67.97.57:60405] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaRY8xRjCrA8qWBjgG-viwAAAlE"]
[Sun Mar 01 23:19:16.507356 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.202:65449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 01 23:19:18.289867 2026] [:error] [pid 40750:tid 40770] [client 45.67.97.202:65449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 01 23:19:20.275223 2026] [:error] [pid 40750:tid 40757] [client 45.67.97.202:65449] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 01 23:19:21.722201 2026] [:error] [pid 40750:tid 40760] [client 45.67.97.202:65449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 01 23:19:22.267347 2026] [:error] [pid 40750:tid 40775] [client 45.67.97.202:65449] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaRY-gfBuk03yQKDyquXlwAAAdY"]
[Sun Mar 01 23:19:23.468801 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.58:37361] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Mar 01 23:19:23.962338 2026] [:error] [pid 7165:tid 7170] [client 45.67.97.58:37361] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 01 23:19:24.450426 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.58:37361] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaRY_BRjCrA8qWBjgG-vrQAAAkw"]
[Sun Mar 01 23:19:27.670003 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.57:33531] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Mar 01 23:19:30.824710 2026] [:error] [pid 7165:tid 7180] [client 45.67.97.57:33531] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaRZAhRjCrA8qWBjgG-vzwAAAk0"]
[Sun Mar 01 23:19:32.523907 2026] [:error] [pid 7165:tid 7187] [client 45.67.97.57:33531] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaRZBBRjCrA8qWBjgG-v1wAAAlQ"]
[Sun Mar 01 23:19:40.567500 2026] [:error] [pid 38034:tid 38052] [client 45.67.97.58:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 01 23:19:44.310344 2026] [:error] [pid 38034:tid 38046] [client 45.67.97.58:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 01 23:19:44.840628 2026] [:error] [pid 38034:tid 38055] [client 45.67.97.58:27617] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaRZEAxtfZjwlJok9K8vIwAAARE"]
[Sun Mar 01 23:19:46.776114 2026] [:error] [pid 40750:tid 40776] [client 45.67.97.55:45617] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 01 23:19:50.037591 2026] [:error] [pid 40750:tid 40766] [client 45.67.97.55:45617] [client 45.67.97.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.55, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaRZFgfBuk03yQKDyquX3wAAAc0"]
[Sun Mar 01 23:19:51.206378 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.55:45617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Mar 01 23:19:52.692092 2026] [:error] [pid 40750:tid 40759] [client 45.67.97.55:45617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Mar 01 23:19:53.965864 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.55:45617] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 01 23:19:55.290700 2026] [:error] [pid 40750:tid 40762] [client 45.67.97.55:45617] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaRZGwfBuk03yQKDyquX5wAAAck"]
[Sun Mar 01 23:19:57.173475 2026] [:error] [pid 7133:tid 7137] [client 45.67.97.57:20865] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Mar 01 23:19:57.689966 2026] [:error] [pid 7133:tid 7138] [client 45.67.97.57:20865] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaRZHfCtubh8pR64qB9zDQAAAEM"]
[Sun Mar 01 23:19:59.366778 2026] [:error] [pid 38241:tid 38249] [client 45.67.97.57:25721] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 01 23:20:00.311143 2026] [:error] [pid 38241:tid 38261] [client 45.67.97.57:25721] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaRZIPKRPk6YnJBxw_xMlgAAANE"]
[Sun Mar 01 23:20:02.954595 2026] [:error] [pid 7165:tid 7188] [client 45.67.97.55:62313] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Mar 01 23:20:03.600624 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.55:62313] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaRZIxRjCrA8qWBjgG-wRQAAAkA"]
[Sun Mar 01 23:20:06.209470 2026] [:error] [pid 38241:tid 38248] [client 45.67.97.55:65315] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaRZJvKRPk6YnJBxw_xMswAAAMQ"]
[Sun Mar 01 23:20:09.104137 2026] [:error] [pid 33822:tid 33837] [client 45.67.97.58:36001] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Mar 01 23:20:09.545632 2026] [:error] [pid 33822:tid 33831] [client 45.67.97.58:36001] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Mar 01 23:20:11.296127 2026] [:error] [pid 33822:tid 33842] [client 45.67.97.58:36001] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaRZK26W3ygu1YVssuY_fwAAApI"]
[Sun Mar 01 23:20:13.559488 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.58:65349] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaRZLfKRPk6YnJBxw_xNBAAAANA"]
[Sun Mar 01 23:20:16.327781 2026] [:error] [pid 40750:tid 40757] [client 45.67.97.58:30989] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaRZMAfBuk03yQKDyquYCgAAAcQ"]
[Sun Mar 01 23:20:17.504119 2026] [:error] [pid 7165:tid 7184] [client 45.67.97.58:46101] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Mar 01 23:20:19.030947 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.58:46101] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Mar 01 23:20:19.984917 2026] [:error] [pid 7165:tid 7189] [client 45.67.97.58:46101] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaRZMxRjCrA8qWBjgG-wcwAAAlY"]
[Sun Mar 01 23:20:21.147106 2026] [:error] [pid 33822:tid 33845] [client 45.67.97.57:33749] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 01 23:20:22.118940 2026] [:error] [pid 33822:tid 33828] [client 45.67.97.57:33749] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaRZNm6W3ygu1YVssuY_igAAAoQ"]
[Sun Mar 01 23:20:24.722957 2026] [:error] [pid 7133:tid 7151] [client 45.67.97.57:25987] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaRZOPCtubh8pR64qB9zUwAAAFA"]
[Sun Mar 01 23:20:26.652422 2026] [:error] [pid 7165:tid 7175] [client 45.67.97.202:51035] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 01 23:20:28.548574 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.202:51035] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Mar 01 23:20:29.736707 2026] [:error] [pid 7165:tid 7177] [client 45.67.97.202:51035] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 01 23:20:30.448323 2026] [:error] [pid 7165:tid 7175] [client 45.67.97.202:51035] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaRZPhRjCrA8qWBjgG-wjAAAAkg"]
[Sun Mar 01 23:20:31.712202 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.57:60605] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaRZPxRjCrA8qWBjgG-wjgAAAlg"]
[Sun Mar 01 23:20:34.049167 2026] [:error] [pid 38034:tid 38040] [client 45.67.97.55:41825] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaRZQgxtfZjwlJok9K8vSQAAAQQ"]
[Sun Mar 01 23:20:35.453731 2026] [:error] [pid 40750:tid 40769] [client 45.67.97.202:42871] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaRZQwfBuk03yQKDyquYJAAAAdA"]
[Sun Mar 01 23:20:36.435414 2026] [:error] [pid 7165:tid 7173] [client 45.67.97.55:58097] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 01 23:20:36.975640 2026] [:error] [pid 7165:tid 7182] [client 45.67.97.55:58097] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaRZRBRjCrA8qWBjgG-wmAAAAk8"]
[Sun Mar 01 23:20:38.059990 2026] [:error] [pid 7165:tid 7171] [client 45.67.97.58:39395] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaRZRhRjCrA8qWBjgG-wnAAAAkQ"]
[Sun Mar 01 23:20:39.210230 2026] [:error] [pid 7165:tid 7187] [client 45.67.97.58:54369] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 01 23:20:40.725855 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.58:54369] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaRZSBRjCrA8qWBjgG-wowAAAks"]
[Sun Mar 01 23:20:41.655439 2026] [:error] [pid 38241:tid 38258] [client 45.67.97.55:26291] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaRZSfKRPk6YnJBxw_xNPgAAAM4"]
[Sun Mar 01 23:20:42.528682 2026] [:error] [pid 38241:tid 38254] [client 45.67.97.55:25089] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaRZSvKRPk6YnJBxw_xNQgAAAMo"]
[Sun Mar 01 23:20:43.497027 2026] [:error] [pid 41780:tid 41795] [client 45.67.97.58:21535] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaRZS8ONkVoocLIqzy02VAAAA8w"]
[Sun Mar 01 23:20:45.635363 2026] [:error] [pid 40750:tid 40767] [client 45.67.97.58:24687] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaRZTQfBuk03yQKDyquYLAAAAc4"]
[Sun Mar 01 23:20:47.735985 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.58:23263] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaRZTxRjCrA8qWBjgG-wvQAAAkU"]
[Sun Mar 01 23:20:49.416620 2026] [:error] [pid 7165:tid 7170] [client 45.67.97.55:22827] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 01 23:20:51.777784 2026] [:error] [pid 7165:tid 7168] [client 45.67.97.55:22827] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Mar 01 23:20:52.312057 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.55:22827] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaRZVBRjCrA8qWBjgG-w2gAAAkA"]
[Sun Mar 01 23:20:57.546256 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.202:57767] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Mar 01 23:20:59.143130 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.202:57767] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Mar 01 23:21:03.193024 2026] [:error] [pid 7165:tid 7174] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 23:21:03.321186 2026] [:error] [pid 7165:tid 7190] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 23:21:03.600794 2026] [:error] [pid 7165:tid 7179] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 01 23:21:03.725739 2026] [:error] [pid 7165:tid 7173] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 23:21:03.982155 2026] [:error] [pid 7165:tid 7188] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 01 23:21:04.108469 2026] [:error] [pid 7165:tid 7182] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 01 23:21:04.233031 2026] [:error] [pid 7165:tid 7191] [client 104.208.116.225:4886] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 01 23:21:04.481732 2026] [:error] [pid 7165:tid 7185] [client 104.208.116.225:4886] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRZYBRjCrA8qWBjgG-xBAAAAlI"]
[Sun Mar 01 23:21:05.000023 2026] [:error] [pid 38034:tid 38043] [client 104.208.116.225:4843] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRZYAxtfZjwlJok9K8vUQAAAQU"]
[Sun Mar 01 23:21:05.474950 2026] [:error] [pid 33822:tid 33834] [client 104.208.116.225:4611] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRZYW6W3ygu1YVssuY_ygAAAoo"]
[Sun Mar 01 23:21:05.958552 2026] [:error] [pid 37032:tid 37053] [client 104.208.116.225:4860] [client 104.208.116.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaRZYeu0U4o7eSImsVSTCQAAAZM"]
[Sun Mar 01 23:21:06.317910 2026] [:error] [pid 40750:tid 40759] [client 45.67.97.202:57767] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaRZYgfBuk03yQKDyquYVwAAAcY"]
[Sun Mar 01 23:21:10.634230 2026] [:error] [pid 33822:tid 33839] [client 45.67.97.202:37403] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaRZZm6W3ygu1YVssuY_0QAAAo8"]
[Sun Mar 01 23:21:11.571172 2026] [:error] [pid 7165:tid 7170] [client 45.67.97.55:37521] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaRZZxRjCrA8qWBjgG-xGgAAAkM"]
[Sun Mar 01 23:21:15.054872 2026] [:error] [pid 7165:tid 7168] [client 45.67.97.202:27357] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaRZaxRjCrA8qWBjgG-xJgAAAkE"]
[Sun Mar 01 23:21:18.451949 2026] [:error] [pid 38241:tid 38250] [client 45.67.97.57:42339] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 01 23:21:19.335133 2026] [:error] [pid 38241:tid 38261] [client 45.67.97.57:42339] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Mar 01 23:21:20.068073 2026] [:error] [pid 38241:tid 38255] [client 45.67.97.57:42339] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Mar 01 23:21:21.135564 2026] [:error] [pid 38241:tid 38253] [client 45.67.97.57:42339] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Mar 01 23:21:25.749745 2026] [:error] [pid 38241:tid 38262] [client 45.67.97.57:42339] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaRZdfKRPk6YnJBxw_xNggAAANI"]
[Sun Mar 01 23:21:27.814053 2026] [:error] [pid 40750:tid 40761] [client 45.67.97.202:41951] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaRZdwfBuk03yQKDyquYhQAAAcg"]
[Sun Mar 01 23:21:29.004472 2026] [:error] [pid 7133:tid 7148] [client 45.67.97.57:55249] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaRZefCtubh8pR64qB9zggAAAE0"]
[Sun Mar 01 23:21:30.098429 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.58:28133] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaRZehRjCrA8qWBjgG-xUwAAAlc"]
[Sun Mar 01 23:21:31.778453 2026] [:error] [pid 44644:tid 44669] [client 45.67.97.58:46403] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaRZe53RJaXMcw3y9V_rIAAAABY"]
[Sun Mar 01 23:21:33.211500 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.55:63427] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaRZfRRjCrA8qWBjgG-xZQAAAlc"]
[Sun Mar 01 23:21:34.710021 2026] [:error] [pid 38241:tid 38268] [client 45.67.97.57:60187] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaRZfvKRPk6YnJBxw_xNiQAAANg"]
[Sun Mar 01 23:21:35.900333 2026] [:error] [pid 7165:tid 7169] [client 45.67.97.55:50183] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaRZfxRjCrA8qWBjgG-xfwAAAkI"]
[Sun Mar 01 23:21:37.039543 2026] [:error] [pid 7133:tid 7138] [client 45.67.97.55:56059] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaRZgfCtubh8pR64qB9zhAAAAEM"]
[Sun Mar 01 23:21:39.321335 2026] [:error] [pid 7165:tid 7169] [client 45.67.97.57:63493] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaRZgxRjCrA8qWBjgG-xjQAAAkI"]
[Sun Mar 01 23:21:41.590791 2026] [:error] [pid 38241:tid 38264] [client 45.67.97.58:31523] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaRZhfKRPk6YnJBxw_xNqQAAANQ"]
[Sun Mar 01 23:21:43.338590 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.55:21393] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaRZhxRjCrA8qWBjgG-xngAAAlA"]
[Sun Mar 01 23:21:45.087975 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.202:22239] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 01 23:21:46.271510 2026] [:error] [pid 7165:tid 7189] [client 45.67.97.202:22239] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaRZihRjCrA8qWBjgG-xqQAAAlY"]
[Sun Mar 01 23:21:51.753776 2026] [:error] [pid 37032:tid 37054] [client 45.67.97.55:63085] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaRZj-u0U4o7eSImsVSTHQAAAZQ"]
[Sun Mar 01 23:21:54.657186 2026] [:error] [pid 38241:tid 38259] [client 45.67.97.58:27585] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 01 23:21:55.422563 2026] [:error] [pid 38241:tid 38245] [client 45.67.97.58:27585] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaRZk_KRPk6YnJBxw_xN9gAAAME"]
[Sun Mar 01 23:21:57.319017 2026] [:error] [pid 37032:tid 37042] [client 45.67.97.55:47053] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 01 23:21:57.907981 2026] [:error] [pid 37032:tid 37039] [client 45.67.97.55:47053] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 01 23:21:58.437093 2026] [:error] [pid 37032:tid 37036] [client 45.67.97.55:47053] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Mar 01 23:21:58.925774 2026] [:error] [pid 37032:tid 37058] [client 45.67.97.55:47053] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaRZluu0U4o7eSImsVSTJQAAAZg"]
[Sun Mar 01 23:22:00.063545 2026] [:error] [pid 40750:tid 40758] [client 45.67.97.58:29203] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Mar 01 23:22:00.687943 2026] [:error] [pid 40750:tid 40758] [client 45.67.97.58:29203] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaRZmAfBuk03yQKDyquYzwAAAcU"]
[Sun Mar 01 23:22:02.798332 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 23:22:03.255938 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 01 23:22:03.939273 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Mar 01 23:22:07.364272 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Mar 01 23:22:08.032409 2026] [:error] [pid 40750:tid 40775] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 01 23:22:09.040867 2026] [:error] [pid 40750:tid 40766] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Mar 01 23:22:10.393328 2026] [:error] [pid 40750:tid 40762] [client 45.67.97.57:33879] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 01 23:22:10.867656 2026] [:error] [pid 40750:tid 40764] [client 45.67.97.57:33879] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaRZogfBuk03yQKDyquZIQAAAcs"]
[Sun Mar 01 23:22:11.905815 2026] [:error] [pid 38241:tid 38248] [client 45.67.97.58:29327] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaRZo_KRPk6YnJBxw_xOCQAAAMQ"]
[Sun Mar 01 23:22:13.725537 2026] [:error] [pid 7133:tid 7157] [client 45.67.97.58:38405] [client 45.67.97.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.58, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaRZpfCtubh8pR64qB9zuQAAAFY"]
[Sun Mar 01 23:22:13.731364 2026] [:error] [pid 7133:tid 7157] [client 45.67.97.58:38405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 01 23:22:14.707567 2026] [:error] [pid 7133:tid 7137] [client 45.67.97.58:38405] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 01 23:22:15.657477 2026] [:error] [pid 7133:tid 7155] [client 45.67.97.58:38405] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaRZp_Ctubh8pR64qB9zwQAAAFQ"]
[Sun Mar 01 23:22:17.495723 2026] [:error] [pid 37032:tid 37046] [client 45.67.97.58:30313] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Mar 01 23:22:18.228004 2026] [:error] [pid 37032:tid 37056] [client 45.67.97.58:30313] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaRZquu0U4o7eSImsVSTLQAAAZY"]
[Sun Mar 01 23:22:20.186560 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.58:43555] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaRZrAfBuk03yQKDyquZOAAAAdg"]
[Sun Mar 01 23:22:26.169543 2026] [:error] [pid 38241:tid 38266] [client 45.67.97.202:38211] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaRZsvKRPk6YnJBxw_xOFgAAANY"]
[Sun Mar 01 23:22:27.703927 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.55:58549] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaRZswfBuk03yQKDyquZQgAAAcw"]
[Sun Mar 01 23:22:30.578020 2026] [:error] [pid 40750:tid 40754] [client 45.67.97.58:27729] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 01 23:22:31.594336 2026] [:error] [pid 40750:tid 40764] [client 45.67.97.58:27729] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaRZtwfBuk03yQKDyquZSwAAAcs"]
[Sun Mar 01 23:22:34.037094 2026] [:error] [pid 40750:tid 40766] [client 45.67.97.58:56357] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Mar 01 23:22:35.429745 2026] [:error] [pid 40750:tid 40769] [client 45.67.97.58:56357] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaRZuwfBuk03yQKDyquZWQAAAdA"]
[Sun Mar 01 23:22:36.516963 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.202:47095] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaRZvBRjCrA8qWBjgG-yKQAAAlA"]
[Sun Mar 01 23:22:38.423666 2026] [:error] [pid 40750:tid 40756] [client 45.67.97.202:40565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 01 23:22:38.991234 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.202:40565] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaRZvgfBuk03yQKDyquZYQAAAcw"]
[Sun Mar 01 23:22:40.207726 2026] [:error] [pid 7165:tid 7177] [client 45.67.97.58:39971] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaRZwBRjCrA8qWBjgG-yMwAAAko"]
[Sun Mar 01 23:22:42.435664 2026] [:error] [pid 7165:tid 7171] [client 45.67.97.58:28167] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Mar 01 23:22:42.978751 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.58:28167] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 01 23:22:44.659586 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.58:28167] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 01 23:22:45.589334 2026] [:error] [pid 7165:tid 7184] [client 45.67.97.58:28167] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaRZxRRjCrA8qWBjgG-yTwAAAlE"]
[Sun Mar 01 23:22:46.744656 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.58:43135] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaRZxhRjCrA8qWBjgG-yUwAAAkU"]
[Sun Mar 01 23:22:54.044937 2026] [:error] [pid 38241:tid 38258] [client 45.67.97.57:62617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 01 23:22:55.014692 2026] [:error] [pid 38241:tid 38244] [client 45.67.97.57:62617] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaRZz_KRPk6YnJBxw_xOMgAAAMA"]
[Sun Mar 01 23:22:57.203350 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.57:60389] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaRZ0RRjCrA8qWBjgG-yewAAAlA"]
[Sun Mar 01 23:22:58.558702 2026] [:error] [pid 40750:tid 40774] [client 45.67.97.57:22589] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaRZ0gfBuk03yQKDyquZ0AAAAdU"]
[Sun Mar 01 23:23:02.624237 2026] [:error] [pid 7133:tid 7139] [client 45.67.97.58:21843] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Mar 01 23:23:03.363401 2026] [:error] [pid 7133:tid 7157] [client 45.67.97.58:21843] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaRZ1_Ctubh8pR64qB90BgAAAFY"]
[Sun Mar 01 23:23:05.509532 2026] [:error] [pid 7165:tid 7168] [client 45.67.97.57:31419] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaRZ2RRjCrA8qWBjgG-ynwAAAkE"]
[Sun Mar 01 23:23:06.913056 2026] [:error] [pid 40750:tid 40754] [client 45.67.97.57:49985] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 01 23:23:07.843187 2026] [:error] [pid 40750:tid 40769] [client 45.67.97.57:49985] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 01 23:23:09.575240 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.57:49985] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Mar 01 23:23:11.793652 2026] [:error] [pid 40750:tid 40764] [client 45.67.97.57:49985] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaRZ3wfBuk03yQKDyquaBAAAAcs"]
[Sun Mar 01 23:23:12.742260 2026] [:error] [pid 40750:tid 40769] [client 45.67.97.57:49985] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 01 23:23:13.216938 2026] [:error] [pid 40750:tid 40758] [client 45.67.97.57:49985] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Mar 01 23:23:13.703074 2026] [:error] [pid 40750:tid 40764] [client 45.67.97.57:49985] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 01 23:23:14.670189 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.57:49985] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaRZ4gfBuk03yQKDyquaGQAAAco"]
[Sun Mar 01 23:23:16.127870 2026] [:error] [pid 7133:tid 7139] [client 45.67.97.55:60967] [client 45.67.97.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.55, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaRZ5PCtubh8pR64qB90DQAAAEQ"]
[Sun Mar 01 23:23:18.208589 2026] [:error] [pid 7133:tid 7157] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 01 23:23:18.857492 2026] [:error] [pid 7133:tid 7138] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Mar 01 23:23:20.082250 2026] [:error] [pid 7133:tid 7155] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Mar 01 23:23:21.316619 2026] [:error] [pid 7133:tid 7150] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Mar 01 23:23:23.384681 2026] [:error] [pid 7133:tid 7136] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Mar 01 23:23:29.500018 2026] [:error] [pid 7133:tid 7154] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 01 23:23:30.266674 2026] [:error] [pid 7133:tid 7143] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sun Mar 01 23:23:33.209087 2026] [:error] [pid 7133:tid 7157] [client 45.67.97.55:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Mar 01 23:23:34.083651 2026] [:error] [pid 7133:tid 7142] [client 45.67.97.55:60967] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaRZ9vCtubh8pR64qB90OgAAAEc"]
[Sun Mar 01 23:23:36.080354 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.55:24205] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 01 23:23:36.549601 2026] [:error] [pid 7165:tid 7181] [client 45.67.97.55:24205] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaRZ-BRjCrA8qWBjgG-zJQAAAk4"]
[Sun Mar 01 23:23:38.600130 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.202:62179] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 01 23:23:39.993878 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.202:62179] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaRZ-wfBuk03yQKDyquaNwAAAcw"]
[Sun Mar 01 23:23:42.087939 2026] [:error] [pid 40750:tid 40761] [client 45.67.97.202:37937] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Mar 01 23:23:42.980600 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.202:37937] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 01 23:23:43.908382 2026] [:error] [pid 40750:tid 40755] [client 45.67.97.202:37937] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 01 23:23:44.372483 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.202:37937] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Mar 01 23:23:45.283710 2026] [:error] [pid 40750:tid 40758] [client 45.67.97.202:37937] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaRaAQfBuk03yQKDyquaUgAAAcU"]
[Sun Mar 01 23:23:46.900596 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.57:54687] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sun Mar 01 23:23:47.696922 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.57:54687] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 01 23:23:48.240111 2026] [:error] [pid 7165:tid 7170] [client 45.67.97.57:54687] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaRaBBRjCrA8qWBjgG-zSgAAAkM"]
[Sun Mar 01 23:23:49.677236 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.202:60375] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaRaBRRjCrA8qWBjgG-zVAAAAks"]
[Sun Mar 01 23:23:51.183874 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.58:60589] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 01 23:23:52.771553 2026] [:error] [pid 7165:tid 7174] [client 45.67.97.58:60589] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Mar 01 23:23:53.377485 2026] [:error] [pid 7165:tid 7180] [client 45.67.97.58:60589] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Mar 01 23:23:53.911461 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.58:60589] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaRaCRRjCrA8qWBjgG-zbAAAAlI"]
[Sun Mar 01 23:23:55.023329 2026] [:error] [pid 44644:tid 44652] [client 45.67.97.55:24287] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaRaC53RJaXMcw3y9V_rPAAAAAU"]
[Sun Mar 01 23:23:59.554256 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.55:38379] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sun Mar 01 23:24:01.009092 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.55:38379] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaRaEQfBuk03yQKDyquamQAAAdg"]
[Sun Mar 01 23:24:03.149445 2026] [:error] [pid 7133:tid 7144] [client 45.67.97.55:38183] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaRaE_Ctubh8pR64qB90dwAAAEk"]
[Sun Mar 01 23:24:05.877546 2026] [:error] [pid 38241:tid 38256] [client 45.67.97.58:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 01 23:24:07.128784 2026] [:error] [pid 38241:tid 38248] [client 45.67.97.58:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Mar 01 23:24:08.211982 2026] [:error] [pid 38241:tid 38268] [client 45.67.97.58:55803] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaRaGPKRPk6YnJBxw_xOlAAAANg"]
[Sun Mar 01 23:24:10.984361 2026] [:error] [pid 44644:tid 44669] [client 45.67.97.55:23085] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 01 23:24:11.633458 2026] [:error] [pid 44644:tid 44652] [client 45.67.97.55:23085] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sun Mar 01 23:24:12.994454 2026] [:error] [pid 44644:tid 44665] [client 45.67.97.55:23085] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 01 23:24:14.726877 2026] [:error] [pid 44644:tid 44657] [client 45.67.97.55:23085] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaRaHp3RJaXMcw3y9V_rVgAAAAo"]
[Sun Mar 01 23:24:15.830100 2026] [:error] [pid 37032:tid 37041] [client 45.67.97.58:44605] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Mar 01 23:24:17.760202 2026] [:error] [pid 37032:tid 37036] [client 45.67.97.58:44605] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaRaIeu0U4o7eSImsVSTYgAAAYI"]
[Sun Mar 01 23:24:20.499052 2026] [:error] [pid 38034:tid 38054] [client 45.67.97.58:52705] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sun Mar 01 23:24:23.803941 2026] [:error] [pid 38034:tid 38052] [client 45.67.97.58:52705] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sun Mar 01 23:24:24.999040 2026] [:error] [pid 38034:tid 38051] [client 45.67.97.58:52705] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 01 23:24:27.996121 2026] [:error] [pid 38034:tid 38049] [client 45.67.97.58:52705] [client 45.67.97.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.58, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaRaKwxtfZjwlJok9K8v-gAAAQs"]
[Sun Mar 01 23:24:38.326593 2026] [:error] [pid 38034:tid 38045] [client 45.67.97.58:52705] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaRaNgxtfZjwlJok9K8wBwAAAQc"]
[Sun Mar 01 23:24:40.750740 2026] [:error] [pid 7133:tid 7154] [client 45.67.97.58:36945] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sun Mar 01 23:24:41.190628 2026] [:error] [pid 7133:tid 7148] [client 45.67.97.58:36945] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaRaOfCtubh8pR64qB90-wAAAE0"]
[Sun Mar 01 23:24:42.146102 2026] [:error] [pid 41342:tid 41355] [client 45.67.97.55:57933] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 01 23:24:43.336084 2026] [:error] [pid 41342:tid 41368] [client 45.67.97.55:57933] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Mar 01 23:24:44.565713 2026] [:error] [pid 41342:tid 41369] [client 45.67.97.55:57933] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaRaPI4iJ6RAS5CatDlnvQAAAhg"]
[Sun Mar 01 23:24:45.907197 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.202:61419] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Mar 01 23:24:46.358454 2026] [:error] [pid 7165:tid 7187] [client 45.67.97.202:61419] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Mar 01 23:24:47.228897 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.202:61419] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaRaPxRjCrA8qWBjgG-z2gAAAkw"]
[Sun Mar 01 23:24:50.091527 2026] [:error] [pid 33822:tid 33839] [client 45.67.97.55:20821] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaRaQm6W3ygu1YVssuZBDQAAAo8"]
[Sun Mar 01 23:24:52.390973 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.202:26385] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sun Mar 01 23:24:52.886019 2026] [:error] [pid 7165:tid 7171] [client 45.67.97.202:26385] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 01 23:24:53.906449 2026] [:error] [pid 7165:tid 7184] [client 45.67.97.202:26385] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaRaRRRjCrA8qWBjgG-0BwAAAlE"]
[Sun Mar 01 23:24:54.921305 2026] [:error] [pid 33822:tid 33844] [client 45.67.97.58:57417] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sun Mar 01 23:24:55.931273 2026] [:error] [pid 33822:tid 33848] [client 45.67.97.58:57417] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sun Mar 01 23:24:56.620884 2026] [:error] [pid 33822:tid 33839] [client 45.67.97.58:57417] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaRaSG6W3ygu1YVssuZBNwAAAo8"]
[Sun Mar 01 23:24:58.281521 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.55:42313] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aaRaShRjCrA8qWBjgG-0KgAAAlg"]
[Sun Mar 01 23:24:59.738936 2026] [:error] [pid 33822:tid 33841] [client 45.67.97.202:46027] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaRaS26W3ygu1YVssuZBSQAAApE"]
[Sun Mar 01 23:25:01.173323 2026] [:error] [pid 7165:tid 7171] [client 45.67.97.202:20057] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaRaTRRjCrA8qWBjgG-0QwAAAkQ"]
[Sun Mar 01 23:25:02.760187 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.202:21337] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaRaThRjCrA8qWBjgG-0UAAAAlc"]
[Sun Mar 01 23:25:04.377692 2026] [:error] [pid 7165:tid 7182] [client 45.67.97.55:35729] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaRaUBRjCrA8qWBjgG-0YgAAAk8"]
[Sun Mar 01 23:25:06.413886 2026] [:error] [pid 7165:tid 7177] [client 45.67.97.202:41311] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaRaUhRjCrA8qWBjgG-0eQAAAko"]
[Sun Mar 01 23:25:11.673808 2026] [:error] [pid 40750:tid 40766] [client 45.67.97.202:34621] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaRaVwfBuk03yQKDyqua-gAAAc0"]
[Sun Mar 01 23:25:12.764009 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.58:56657] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaRaWBRjCrA8qWBjgG-0zAAAAkU"]
[Sun Mar 01 23:25:15.081894 2026] [:error] [pid 7165:tid 7188] [client 45.67.97.202:26527] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaRaWxRjCrA8qWBjgG-06gAAAlU"]
[Sun Mar 01 23:25:18.855284 2026] [:error] [pid 7133:tid 7138] [client 45.67.97.57:46255] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaRaXvCtubh8pR64qB91CgAAAEM"]
[Sun Mar 01 23:25:21.853618 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.55:27745] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaRaYQfBuk03yQKDyqubCgAAAcw"]
[Sun Mar 01 23:25:23.179344 2026] [:error] [pid 7165:tid 7175] [client 45.67.97.57:52329] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Mar 01 23:25:25.566738 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.57:52329] [client 45.67.97.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.57, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaRaZRRjCrA8qWBjgG-1RAAAAkA"]
[Sun Mar 01 23:25:29.642148 2026] [:error] [pid 7165:tid 7181] [client 45.67.97.57:52329] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaRaaRRjCrA8qWBjgG-1XgAAAk4"]
[Sun Mar 01 23:25:30.753769 2026] [:error] [pid 7133:tid 7135] [client 45.67.97.58:33761] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaRaavCtubh8pR64qB91GgAAAEA"]
[Sun Mar 01 23:25:36.116374 2026] [:error] [pid 7165:tid 7182] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 01 23:25:37.515549 2026] [:error] [pid 7165:tid 7181] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sun Mar 01 23:25:40.958170 2026] [:error] [pid 7165:tid 7177] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Mar 01 23:25:41.617750 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Mar 01 23:25:45.499591 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Mar 01 23:25:46.167907 2026] [:error] [pid 7165:tid 7188] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 01 23:25:46.902960 2026] [:error] [pid 7165:tid 7188] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Mar 01 23:25:48.059651 2026] [:error] [pid 7165:tid 7169] [client 45.67.97.58:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sun Mar 01 23:25:49.048554 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.58:32517] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaRafRRjCrA8qWBjgG-2AwAAAkU"]
[Sun Mar 01 23:25:50.356465 2026] [:error] [pid 38034:tid 38058] [client 45.67.97.58:32159] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaRafgxtfZjwlJok9K8wdgAAARQ"]
[Sun Mar 01 23:25:51.640184 2026] [:error] [pid 38034:tid 38056] [client 45.67.97.55:25041] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaRafwxtfZjwlJok9K8wdwAAARI"]
[Sun Mar 01 23:25:53.850855 2026] [:error] [pid 37032:tid 37051] [client 45.67.97.58:24599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Mar 01 23:25:54.581577 2026] [:error] [pid 37032:tid 37051] [client 45.67.97.58:24599] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sun Mar 01 23:25:56.184613 2026] [:error] [pid 37032:tid 37046] [client 45.67.97.58:24599] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 01 23:25:58.542745 2026] [:error] [pid 37032:tid 37044] [client 45.67.97.58:24599] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaRahuu0U4o7eSImsVSTwQAAAYo"]
[Sun Mar 01 23:26:00.050876 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.58:40681] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaRaiBRjCrA8qWBjgG-2gQAAAlM"]
[Sun Mar 01 23:26:01.822218 2026] [:error] [pid 7133:tid 7146] [client 45.67.97.57:54485] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaRaifCtubh8pR64qB91PwAAAEs"]
[Sun Mar 01 23:26:07.193525 2026] [:error] [pid 40750:tid 40757] [client 45.67.97.202:30031] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaRajwfBuk03yQKDyqubjQAAAcQ"]
[Sun Mar 01 23:26:10.532835 2026] [:error] [pid 38241:tid 38247] [client 45.67.97.55:33551] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaRakvKRPk6YnJBxw_xPJAAAAMM"]
[Sun Mar 01 23:26:12.800790 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.55:53345] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaRalAfBuk03yQKDyqubowAAAco"]
[Sun Mar 01 23:26:28.696608 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.58:64079] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaRapAfBuk03yQKDyqub-AAAAcA"]
[Sun Mar 01 23:26:31.174243 2026] [:error] [pid 38241:tid 38246] [client 45.67.97.55:57471] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sun Mar 01 23:26:32.604823 2026] [:error] [pid 38241:tid 38264] [client 45.67.97.55:57471] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aaRaqPKRPk6YnJBxw_xPkgAAANQ"]
[Sun Mar 01 23:26:37.571764 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.55:40605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 01 23:26:41.641158 2026] [:error] [pid 38241:tid 38246] [client 45.67.97.55:40605] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Mar 01 23:26:43.277236 2026] [:error] [pid 38241:tid 38264] [client 45.67.97.55:40605] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaRas_KRPk6YnJBxw_xP3wAAANQ"]
[Sun Mar 01 23:26:46.056590 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.202:44817] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaRathRjCrA8qWBjgG-4BgAAAks"]
[Sun Mar 01 23:26:49.317771 2026] [:error] [pid 7165:tid 7177] [client 45.67.97.55:48079] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaRauRRjCrA8qWBjgG-4YgAAAko"]
[Sun Mar 01 23:26:52.993483 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.57:22789] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaRavBRjCrA8qWBjgG-4dQAAAkw"]
[Sun Mar 01 23:26:54.612366 2026] [:error] [pid 7133:tid 7157] [client 45.67.97.55:21911] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 01 23:26:55.049029 2026] [:error] [pid 7133:tid 7158] [client 45.67.97.55:21911] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaRav_Ctubh8pR64qB910gAAAFc"]
[Sun Mar 01 23:26:57.210036 2026] [:error] [pid 40750:tid 40776] [client 45.67.97.202:46605] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaRawQfBuk03yQKDyqucLAAAAdc"]
[Sun Mar 01 23:27:09.978544 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.55:53161] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaRazRRjCrA8qWBjgG-4-gAAAkw"]
[Sun Mar 01 23:27:14.985371 2026] [:error] [pid 44644:tid 44649] [client 45.67.97.55:51061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Mar 01 23:27:21.112781 2026] [:error] [pid 44644:tid 44669] [client 45.67.97.55:51061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 01 23:27:23.110716 2026] [:error] [pid 44644:tid 44648] [client 45.67.97.55:51061] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaRa253RJaXMcw3y9V_rrwAAAAE"]
[Sun Mar 01 23:27:26.719531 2026] [:error] [pid 7165:tid 7172] [client 45.67.97.202:31097] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Mar 01 23:27:27.765170 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.202:31097] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaRa3xRjCrA8qWBjgG-5eQAAAlA"]
[Sun Mar 01 23:27:28.771669 2026] [:error] [pid 40750:tid 40762] [client 45.67.97.57:36447] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaRa4AfBuk03yQKDyquclwAAAck"]
[Sun Mar 01 23:27:31.097250 2026] [:error] [pid 7133:tid 7144] [client 45.67.97.58:45323] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaRa4_Ctubh8pR64qB92BgAAAEk"]
[Sun Mar 01 23:27:34.378617 2026] [:error] [pid 38241:tid 38265] [client 45.67.97.58:34089] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaRa5vKRPk6YnJBxw_xQXgAAANU"]
[Sun Mar 01 23:27:36.206277 2026] [:error] [pid 38241:tid 38246] [client 45.67.97.58:53939] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaRa6PKRPk6YnJBxw_xQXwAAAMI"]
[Sun Mar 01 23:27:37.931343 2026] [:error] [pid 40750:tid 40773] [client 45.67.97.202:49849] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sun Mar 01 23:27:40.662281 2026] [:error] [pid 40750:tid 40758] [client 45.67.97.202:49849] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaRa7AfBuk03yQKDyquc3wAAAcU"]
[Sun Mar 01 23:27:43.099358 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.58:45929] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaRa7xRjCrA8qWBjgG-5zQAAAlM"]
[Sun Mar 01 23:27:44.289506 2026] [:error] [pid 40750:tid 40769] [client 45.67.97.57:46129] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaRa8AfBuk03yQKDyquc8QAAAdA"]
[Sun Mar 01 23:27:45.804671 2026] [:error] [pid 7165:tid 7182] [client 45.67.97.57:25529] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 01 23:27:46.283363 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.57:25529] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaRa8hRjCrA8qWBjgG-53QAAAkA"]
[Sun Mar 01 23:27:49.303982 2026] [:error] [pid 40750:tid 40768] [client 45.67.97.202:31287] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaRa9QfBuk03yQKDyqudDQAAAc8"]
[Sun Mar 01 23:28:01.143322 2026] [:error] [pid 40750:tid 40754] [client 45.67.97.55:52999] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaRbAQfBuk03yQKDyqudNwAAAcE"]
[Sun Mar 01 23:28:03.933891 2026] [:error] [pid 7165:tid 7184] [client 45.67.97.58:29559] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sun Mar 01 23:28:04.625475 2026] [:error] [pid 7165:tid 7185] [client 45.67.97.58:29559] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaRbBBRjCrA8qWBjgG-6LQAAAlI"]
[Sun Mar 01 23:28:08.307576 2026] [:error] [pid 7133:tid 7159] [client 45.67.97.57:29423] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaRbCPCtubh8pR64qB92QgAAAFg"]
[Sun Mar 01 23:28:09.974618 2026] [:error] [pid 40750:tid 40762] [client 45.67.97.57:38895] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aaRbCQfBuk03yQKDyqudTwAAAck"]
[Sun Mar 01 23:28:11.357788 2026] [:error] [pid 38241:tid 38258] [client 45.67.97.202:60913] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaRbC_KRPk6YnJBxw_xQoQAAAM4"]
[Sun Mar 01 23:28:12.264166 2026] [:error] [pid 44644:tid 44669] [client 45.67.97.55:61179] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aaRbDJ3RJaXMcw3y9V_r1AAAABY"]
[Sun Mar 01 23:28:14.673336 2026] [:error] [pid 7165:tid 7171] [client 45.67.97.57:45117] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaRbDhRjCrA8qWBjgG-6RAAAAkQ"]
[Sun Mar 01 23:28:19.454200 2026] [:error] [pid 40750:tid 40768] [client 45.67.97.202:47669] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaRbEwfBuk03yQKDyqudYgAAAc8"]
[Sun Mar 01 23:28:22.473323 2026] [:error] [pid 44644:tid 44664] [client 45.67.97.57:60579] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaRbFp3RJaXMcw3y9V_r4gAAABE"]
[Sun Mar 01 23:28:24.772348 2026] [:error] [pid 38241:tid 38265] [client 45.67.97.57:31207] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Mar 01 23:28:25.613941 2026] [:error] [pid 38241:tid 38262] [client 45.67.97.57:31207] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaRbGfKRPk6YnJBxw_xQvgAAANI"]
[Sun Mar 01 23:28:30.485559 2026] [:error] [pid 37032:tid 37043] [client 45.67.97.58:60175] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaRbHuu0U4o7eSImsVSULwAAAYk"]
[Sun Mar 01 23:28:32.437901 2026] [:error] [pid 40750:tid 40767] [client 45.67.97.55:39767] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sun Mar 01 23:28:35.872762 2026] [:error] [pid 40750:tid 40757] [client 45.67.97.55:39767] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaRbIwfBuk03yQKDyqudqwAAAcQ"]
[Sun Mar 01 23:28:38.273144 2026] [:error] [pid 44644:tid 44651] [client 45.67.97.58:46007] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaRbJp3RJaXMcw3y9V_r_gAAAAQ"]
[Sun Mar 01 23:28:40.158247 2026] [:error] [pid 40750:tid 40754] [client 45.67.97.202:51747] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaRbKAfBuk03yQKDyqudwAAAAcE"]
[Sun Mar 01 23:28:44.869563 2026] [:error] [pid 33822:tid 33839] [client 45.67.97.202:40381] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaRbLG6W3ygu1YVssuZCKQAAAo8"]
[Sun Mar 01 23:28:51.385535 2026] [:error] [pid 38241:tid 38244] [client 45.67.97.57:28737] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaRbM_KRPk6YnJBxw_xRCgAAAMA"]
[Sun Mar 01 23:28:52.280502 2026] [:error] [pid 44644:tid 44666] [client 45.67.97.58:32451] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaRbNJ3RJaXMcw3y9V_sAQAAABM"]
[Sun Mar 01 23:28:55.830628 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.202:28995] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaRbNwfBuk03yQKDyqueGwAAAdg"]
[Sun Mar 01 23:28:57.701118 2026] [:error] [pid 38034:tid 38039] [client 45.67.97.55:43069] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaRbOQxtfZjwlJok9K8xJwAAAQM"]
[Sun Mar 01 23:29:00.594129 2026] [:error] [pid 38034:tid 38038] [client 45.67.97.57:27373] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaRbPAxtfZjwlJok9K8xMwAAAQI"]
[Sun Mar 01 23:29:02.000560 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.58:40359] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaRbPRRjCrA8qWBjgG-7AwAAAlA"]
[Sun Mar 01 23:29:03.216952 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.58:59397] [client 45.67.97.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.58, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaRbPwfBuk03yQKDyqueJwAAAcA"]
[Sun Mar 01 23:29:03.220622 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.58:59397] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Mar 01 23:29:04.005829 2026] [:error] [pid 40750:tid 40777] [client 45.67.97.58:59397] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaRbQAfBuk03yQKDyqueKgAAAdg"]
[Sun Mar 01 23:29:06.715583 2026] [:error] [pid 37032:tid 37041] [client 45.67.97.57:42731] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 01 23:29:07.180508 2026] [:error] [pid 37032:tid 37040] [client 45.67.97.57:42731] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaRbQ-u0U4o7eSImsVSUSgAAAYY"]
[Sun Mar 01 23:29:08.832942 2026] [:error] [pid 44644:tid 44658] [client 45.67.97.58:35057] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aaRbRJ3RJaXMcw3y9V_sEgAAAAs"]
[Sun Mar 01 23:29:11.593146 2026] [:error] [pid 33822:tid 33842] [client 45.67.97.57:62581] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sun Mar 01 23:29:16.920308 2026] [:error] [pid 33822:tid 33833] [client 45.67.97.57:62581] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaRbTG6W3ygu1YVssuZCawAAAok"]
[Sun Mar 01 23:29:18.299880 2026] [:error] [pid 7165:tid 7169] [client 45.67.97.202:34599] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaRbThRjCrA8qWBjgG-7NQAAAkI"]
[Sun Mar 01 23:29:21.283843 2026] [:error] [pid 40750:tid 40767] [client 45.67.97.57:60253] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaRbUQfBuk03yQKDyqueRgAAAc4"]
[Sun Mar 01 23:29:22.807314 2026] [:error] [pid 33822:tid 33844] [client 45.67.97.202:47875] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaRbUm6W3ygu1YVssuZCbQAAApQ"]
[Sun Mar 01 23:29:26.819201 2026] [:error] [pid 38241:tid 38245] [client 45.67.97.55:40343] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Mar 01 23:29:28.729114 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.55:40343] [client 45.67.97.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.55, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaRbWPKRPk6YnJBxw_xROgAAANA"]
[Sun Mar 01 23:29:32.541446 2026] [:error] [pid 38241:tid 38251] [client 45.67.97.55:40343] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaRbXPKRPk6YnJBxw_xRPwAAAMc"]
[Sun Mar 01 23:29:36.894744 2026] [:error] [pid 40750:tid 40773] [client 45.67.97.57:25887] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaRbYAfBuk03yQKDyquefgAAAdQ"]
[Sun Mar 01 23:29:38.259066 2026] [:error] [pid 44644:tid 44661] [client 45.67.97.58:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 01 23:29:38.866424 2026] [:error] [pid 44644:tid 44667] [client 45.67.97.58:24617] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaRbYp3RJaXMcw3y9V_sHwAAABQ"]
[Sun Mar 01 23:29:42.227168 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.55:39605] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaRbZvKRPk6YnJBxw_xRTQAAANA"]
[Sun Mar 01 23:29:45.337231 2026] [:error] [pid 38034:tid 38048] [client 45.67.97.55:50999] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Mar 01 23:29:47.764938 2026] [:error] [pid 38034:tid 38045] [client 45.67.97.55:50999] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaRbawxtfZjwlJok9K8xWwAAAQc"]
[Sun Mar 01 23:29:50.056898 2026] [:error] [pid 38241:tid 38264] [client 45.67.97.55:20369] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaRbbvKRPk6YnJBxw_xRVwAAANQ"]
[Sun Mar 01 23:29:53.490988 2026] [:error] [pid 40750:tid 40755] [client 45.67.97.58:57621] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 01 23:29:58.402482 2026] [:error] [pid 40750:tid 40753] [client 45.67.97.58:57621] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 01 23:30:01.034531 2026] [:error] [pid 40750:tid 40775] [client 45.67.97.58:57621] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaRbeQfBuk03yQKDyqueswAAAdY"]
[Sun Mar 01 23:30:02.539686 2026] [:error] [pid 40750:tid 40756] [client 45.67.97.58:27313] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaRbegfBuk03yQKDyqueuAAAAcM"]
[Sun Mar 01 23:30:04.724288 2026] [:error] [pid 7165:tid 7178] [client 45.67.97.57:47839] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aaRbfBRjCrA8qWBjgG-7pQAAAks"]
[Sun Mar 01 23:30:06.101164 2026] [:error] [pid 33822:tid 33841] [client 45.67.97.55:58367] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Sun Mar 01 23:30:09.557711 2026] [:error] [pid 33822:tid 33845] [client 45.67.97.55:58367] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaRbgW6W3ygu1YVssuZCkgAAApU"]
[Sun Mar 01 23:30:12.087933 2026] [:error] [pid 38034:tid 38044] [client 45.67.97.58:20971] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aaRbhAxtfZjwlJok9K8xYwAAAQY"]
[Sun Mar 01 23:30:12.723679 2026] [:error] [pid 38034:tid 38055] [client 45.67.97.58:20971] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaRbhAxtfZjwlJok9K8xZAAAARE"]
[Sun Mar 01 23:30:16.634438 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.58:30335] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaRbiBRjCrA8qWBjgG-7zAAAAlM"]
[Sun Mar 01 23:30:18.467914 2026] [:error] [pid 40750:tid 40772] [client 45.67.97.202:27973] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaRbigfBuk03yQKDyque2AAAAdM"]
[Sun Mar 01 23:30:21.689862 2026] [:error] [pid 33822:tid 33840] [client 45.67.97.55:63831] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Mar 01 23:30:23.557171 2026] [:error] [pid 33822:tid 33824] [client 45.67.97.55:63831] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaRbj26W3ygu1YVssuZCqAAAAoA"]
[Sun Mar 01 23:30:26.585198 2026] [:error] [pid 40750:tid 40766] [client 45.67.97.57:27549] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaRbkgfBuk03yQKDyque-QAAAc0"]
[Sun Mar 01 23:30:28.131022 2026] [:error] [pid 7165:tid 7186] [client 45.67.97.57:52973] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaRblBRjCrA8qWBjgG-79wAAAlM"]
[Sun Mar 01 23:30:29.012680 2026] [:error] [pid 38241:tid 38246] [client 45.67.97.58:56827] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sun Mar 01 23:30:32.125186 2026] [:error] [pid 38241:tid 38264] [client 45.67.97.58:56827] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaRbmPKRPk6YnJBxw_xRjQAAANQ"]
[Sun Mar 01 23:30:33.666088 2026] [:error] [pid 41342:tid 41352] [client 45.67.97.57:55501] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aaRbmY4iJ6RAS5CatDlofgAAAgc"]
[Sun Mar 01 23:30:35.033824 2026] [:error] [pid 38034:tid 38051] [client 45.67.97.55:41605] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 01 23:30:35.709594 2026] [:error] [pid 38034:tid 38045] [client 45.67.97.55:41605] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaRbmwxtfZjwlJok9K8xgAAAAQc"]
[Sun Mar 01 23:30:37.133959 2026] [:error] [pid 44644:tid 44662] [client 45.67.97.55:44165] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaRbnZ3RJaXMcw3y9V_sNwAAAA8"]
[Sun Mar 01 23:30:39.761239 2026] [:error] [pid 37032:tid 37049] [client 45.67.97.55:62151] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaRbn-u0U4o7eSImsVSUZgAAAY8"]
[Sun Mar 01 23:30:41.392685 2026] [:error] [pid 40750:tid 40755] [client 43.140.247.223:58850] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaRboQfBuk03yQKDyqufGQAAAcI"]
[Sun Mar 01 23:30:43.428188 2026] [:error] [pid 7165:tid 7173] [client 45.67.97.55:53711] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Sun Mar 01 23:30:43.931278 2026] [:error] [pid 7165:tid 7189] [client 45.67.97.55:53711] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaRboxRjCrA8qWBjgG-8JQAAAlY"]
[Sun Mar 01 23:30:45.041133 2026] [:error] [pid 38241:tid 38267] [client 45.67.97.58:37863] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaRbpfKRPk6YnJBxw_xRogAAANc"]
[Sun Mar 01 23:30:51.118083 2026] [:error] [pid 38241:tid 38246] [client 45.67.97.58:55759] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaRbq_KRPk6YnJBxw_xRuwAAAMI"]
[Sun Mar 01 23:30:53.632586 2026] [:error] [pid 37032:tid 37049] [client 45.67.97.202:47185] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaRbreu0U4o7eSImsVSUdgAAAY8"]
[Sun Mar 01 23:30:55.002002 2026] [:error] [pid 7133:tid 7147] [client 45.67.97.58:20871] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Sun Mar 01 23:30:56.848469 2026] [:error] [pid 7133:tid 7152] [client 45.67.97.58:20871] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaRbsPCtubh8pR64qB93FwAAAFE"]
[Sun Mar 01 23:30:58.090050 2026] [:error] [pid 38034:tid 38052] [client 45.67.97.57:23995] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaRbsgxtfZjwlJok9K8xoAAAAQ4"]
[Sun Mar 01 23:31:00.152044 2026] [:error] [pid 40750:tid 40772] [client 45.67.97.202:47923] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaRbtAfBuk03yQKDyqufQgAAAdM"]
[Sun Mar 01 23:31:01.633497 2026] [:error] [pid 7165:tid 7167] [client 45.67.97.202:26379] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sun Mar 01 23:31:02.656787 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.202:26379] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaRbthRjCrA8qWBjgG-8TAAAAlc"]
[Sun Mar 01 23:31:03.719047 2026] [:error] [pid 40750:tid 40764] [client 45.67.97.58:20653] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sun Mar 01 23:31:04.862946 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.58:20653] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaRbuAfBuk03yQKDyqufVQAAAdI"]
[Sun Mar 01 23:31:06.013190 2026] [:error] [pid 7133:tid 7156] [client 45.67.97.57:24649] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaRbuvCtubh8pR64qB93IAAAAFU"]
[Sun Mar 01 23:31:07.615723 2026] [:error] [pid 38241:tid 38258] [client 45.67.97.202:29049] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaRbu_KRPk6YnJBxw_xR0gAAAM4"]
[Sun Mar 01 23:31:08.759460 2026] [:error] [pid 40750:tid 40769] [client 45.67.97.57:50979] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaRbvAfBuk03yQKDyqufWAAAAdA"]
[Sun Mar 01 23:31:10.807760 2026] [:error] [pid 7165:tid 7188] [client 45.67.97.55:26211] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaRbvhRjCrA8qWBjgG-8WAAAAlU"]
[Sun Mar 01 23:31:12.448353 2026] [:error] [pid 7133:tid 7152] [client 45.67.97.55:39635] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaRbwPCtubh8pR64qB93NwAAAFE"]
[Sun Mar 01 23:31:14.435897 2026] [:error] [pid 33822:tid 33827] [client 45.67.97.58:31149] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaRbwm6W3ygu1YVssuZCzAAAAoM"]
[Sun Mar 01 23:31:16.602145 2026] [:error] [pid 44644:tid 44647] [client 45.67.97.202:56883] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaRbxJ3RJaXMcw3y9V_sTAAAAAA"]
[Sun Mar 01 23:31:19.991149 2026] [:error] [pid 40750:tid 40758] [client 45.67.97.55:52747] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaRbxwfBuk03yQKDyqufZQAAAcU"]
[Sun Mar 01 23:31:22.719187 2026] [:error] [pid 7133:tid 7153] [client 45.67.97.58:37053] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaRbyvCtubh8pR64qB93XAAAAFI"]
[Sun Mar 01 23:31:26.795115 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.202:32717] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaRbzgfBuk03yQKDyqufdgAAAcw"]
[Sun Mar 01 23:31:30.436064 2026] [:error] [pid 38241:tid 38259] [client 45.67.97.57:55613] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaRb0vKRPk6YnJBxw_xSCQAAAM8"]
[Sun Mar 01 23:31:36.738632 2026] [:error] [pid 33822:tid 33826] [client 45.67.97.55:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sun Mar 01 23:31:43.564987 2026] [:error] [pid 33822:tid 33848] [client 45.67.97.55:27305] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaRb326W3ygu1YVssuZDFQAAApg"]
[Sun Mar 01 23:31:45.634745 2026] [:error] [pid 40750:tid 40762] [client 45.67.97.58:31137] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaRb4QfBuk03yQKDyqufvQAAAck"]
[Sun Mar 01 23:31:47.367171 2026] [:error] [pid 40750:tid 40772] [client 45.67.97.57:57989] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sun Mar 01 23:31:47.979981 2026] [:error] [pid 40750:tid 40776] [client 45.67.97.57:57989] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaRb4wfBuk03yQKDyqufywAAAdc"]
[Sun Mar 01 23:31:52.835951 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.58:55235] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaRb6AfBuk03yQKDyquf2wAAAco"]
[Sun Mar 01 23:31:55.770151 2026] [:error] [pid 37032:tid 37056] [client 45.67.97.57:26159] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Sun Mar 01 23:31:56.425266 2026] [:error] [pid 37032:tid 37035] [client 45.67.97.57:26159] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaRb7Ou0U4o7eSImsVSUmwAAAYE"]
[Sun Mar 01 23:32:04.435574 2026] [:error] [pid 44644:tid 44649] [client 45.67.97.57:20499] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaRb9J3RJaXMcw3y9V_sWQAAAAI"]
[Sun Mar 01 23:32:07.916759 2026] [:error] [pid 38034:tid 38036] [client 45.67.97.202:34719] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Mar 01 23:32:08.871535 2026] [:error] [pid 38034:tid 38050] [client 45.67.97.202:34719] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaRb-AxtfZjwlJok9K8x1QAAAQw"]
[Sun Mar 01 23:32:11.672065 2026] [:error] [pid 41342:tid 41345] [client 45.67.97.55:44553] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaRb-44iJ6RAS5CatDloqQAAAgA"]
[Sun Mar 01 23:32:14.821405 2026] [:error] [pid 40750:tid 40772] [client 45.67.97.55:49591] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Mar 01 23:32:15.552536 2026] [:error] [pid 40750:tid 40776] [client 45.67.97.55:49591] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaRb_wfBuk03yQKDyqugCQAAAdc"]
[Sun Mar 01 23:32:18.573540 2026] [:error] [pid 7133:tid 7155] [client 45.67.97.57:47135] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaRcAvCtubh8pR64qB938gAAAFQ"]
[Sun Mar 01 23:32:19.965737 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.202:39377] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Mar 01 23:32:21.095145 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.202:39377] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaRcBQfBuk03yQKDyqugDwAAAdI"]
[Sun Mar 01 23:32:22.953868 2026] [:error] [pid 38034:tid 38054] [client 45.67.97.202:35763] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaRcBgxtfZjwlJok9K8x3AAAARA"]
[Sun Mar 01 23:32:24.028784 2026] [:error] [pid 33822:tid 33835] [client 45.67.97.55:50195] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sun Mar 01 23:32:25.156522 2026] [:error] [pid 33822:tid 33843] [client 45.67.97.55:50195] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaRcCW6W3ygu1YVssuZDOAAAApM"]
[Sun Mar 01 23:32:26.174551 2026] [:error] [pid 7133:tid 7152] [client 45.67.97.58:59515] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaRcCvCtubh8pR64qB94BQAAAFE"]
[Sun Mar 01 23:32:31.167645 2026] [:error] [pid 44644:tid 44668] [client 45.67.97.58:61381] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaRcD53RJaXMcw3y9V_sZAAAABU"]
[Sun Mar 01 23:32:32.643692 2026] [:error] [pid 40750:tid 40766] [client 45.67.97.57:50897] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaRcEAfBuk03yQKDyqugIwAAAc0"]
[Sun Mar 01 23:32:34.808223 2026] [:error] [pid 38241:tid 38257] [client 45.67.97.58:20831] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aaRcEvKRPk6YnJBxw_xSggAAAM0"]
[Sun Mar 01 23:32:36.154757 2026] [:error] [pid 37032:tid 37036] [client 45.67.97.57:38575] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaRcFOu0U4o7eSImsVSUqwAAAYI"]
[Sun Mar 01 23:32:37.559207 2026] [:error] [pid 7165:tid 7191] [client 45.67.97.57:46037] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaRcFRRjCrA8qWBjgG-9tgAAAlg"]
[Sun Mar 01 23:32:38.759866 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.58:36909] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aaRcFgfBuk03yQKDyqugKwAAAdI"]
[Sun Mar 01 23:32:42.650630 2026] [:error] [pid 38241:tid 38258] [client 45.67.97.58:41957] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaRcGvKRPk6YnJBxw_xSkwAAAM4"]
[Sun Mar 01 23:32:43.885726 2026] [:error] [pid 44644:tid 44654] [client 45.67.97.57:64795] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaRcG53RJaXMcw3y9V_saQAAAAc"]
[Sun Mar 01 23:32:45.379202 2026] [:error] [pid 38241:tid 38247] [client 45.67.97.202:20941] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Sun Mar 01 23:32:45.821096 2026] [:error] [pid 38241:tid 38253] [client 45.67.97.202:20941] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaRcHfKRPk6YnJBxw_xSmwAAAMk"]
[Sun Mar 01 23:32:46.885621 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.57:65505] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaRcHgfBuk03yQKDyqugSwAAAcw"]
[Sun Mar 01 23:32:51.655745 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.202:29447] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaRcIwfBuk03yQKDyqugZAAAAcw"]
[Sun Mar 01 23:32:52.888263 2026] [:error] [pid 7165:tid 7173] [client 45.67.97.58:56173] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaRcJBRjCrA8qWBjgG-95wAAAkY"]
[Sun Mar 01 23:32:59.120884 2026] [:error] [pid 7133:tid 7148] [client 45.67.97.55:32821] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaRcK_Ctubh8pR64qB94KAAAAE0"]
[Sun Mar 01 23:33:00.226970 2026] [:error] [pid 33822:tid 33848] [client 45.67.97.57:34469] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaRcLG6W3ygu1YVssuZDUwAAApg"]
[Sun Mar 01 23:33:02.356426 2026] [:error] [pid 7133:tid 7137] [client 45.67.97.202:45149] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aaRcLvCtubh8pR64qB94LAAAAEI"]
[Sun Mar 01 23:33:04.214917 2026] [:error] [pid 40750:tid 40756] [client 45.67.97.58:63103] [client 45.67.97.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaRcMAfBuk03yQKDyquglQAAAcM"]
[Sun Mar 01 23:33:06.619341 2026] [:error] [pid 7165:tid 7181] [client 45.67.97.57:29723] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aaRcMhRjCrA8qWBjgG--MgAAAk4"]
[Sun Mar 01 23:33:07.765481 2026] [:error] [pid 40750:tid 40765] [client 45.67.97.202:52351] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaRcMwfBuk03yQKDyqugoAAAAcw"]
[Sun Mar 01 23:33:09.042217 2026] [:error] [pid 7165:tid 7190] [client 45.67.97.55:25549] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaRcNRRjCrA8qWBjgG--NwAAAlc"]
[Sun Mar 01 23:33:12.046265 2026] [:error] [pid 38241:tid 38254] [client 45.67.97.55:45901] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaRcOPKRPk6YnJBxw_xSrwAAAMo"]
[Sun Mar 01 23:33:13.446221 2026] [:error] [pid 38241:tid 38252] [client 45.67.97.57:53445] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sun Mar 01 23:33:14.611862 2026] [:error] [pid 38241:tid 38260] [client 45.67.97.57:53445] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaRcOvKRPk6YnJBxw_xSuAAAANA"]
[Sun Mar 01 23:33:18.072930 2026] [:error] [pid 7165:tid 7174] [client 45.67.97.55:51533] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Sun Mar 01 23:33:18.740685 2026] [:error] [pid 7165:tid 7179] [client 45.67.97.55:51533] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaRcPhRjCrA8qWBjgG--TQAAAkw"]
[Sun Mar 01 23:33:19.821505 2026] [:error] [pid 40750:tid 40763] [client 45.67.97.202:35285] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaRcPwfBuk03yQKDyqug5AAAAco"]
[Sun Mar 01 23:33:21.251201 2026] [:error] [pid 38034:tid 38048] [client 45.67.97.55:41539] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaRcQQxtfZjwlJok9K8yAQAAAQo"]
[Sun Mar 01 23:33:25.800252 2026] [:error] [pid 40750:tid 40771] [client 45.67.97.202:20513] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun Mar 01 23:33:29.943124 2026] [:error] [pid 40750:tid 40772] [client 45.67.97.202:20513] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaRcSQfBuk03yQKDyquhIwAAAdM"]
[Sun Mar 01 23:33:32.739386 2026] [:error] [pid 7165:tid 7183] [client 45.67.97.202:30517] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaRcTBRjCrA8qWBjgG--mQAAAlA"]
[Sun Mar 01 23:33:37.012795 2026] [:error] [pid 7165:tid 7187] [client 45.67.97.202:32265] [client 45.67.97.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaRcURRjCrA8qWBjgG--tQAAAlQ"]
[Sun Mar 01 23:33:38.505169 2026] [:error] [pid 41342:tid 41345] [client 45.67.97.57:51621] [client 45.67.97.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaRcUo4iJ6RAS5CatDlo4QAAAgA"]
[Sun Mar 01 23:33:39.818627 2026] [:error] [pid 38241:tid 38266] [client 45.67.97.55:20157] [client 45.67.97.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaRcU_KRPk6YnJBxw_xS7AAAANY"]
[Sun Mar 01 23:54:35.279330 2026] [:error] [pid 7133:tid 7139] [client 141.98.11.171:20242] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aaRhO_Ctubh8pR64qB-ATAAAAEQ"]
[Sun Mar 01 23:54:36.398574 2026] [:error] [pid 7133:tid 7135] [client 141.98.11.171:20819] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aaRhPPCtubh8pR64qB-AUgAAAEA"]
[Mon Mar 02 00:26:10.540283 2026] [:error] [pid 53585:tid 53603] [client 43.155.129.131:60688] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaRoonbCvYsvu6kKhM1LRwAAAA8"]
[Mon Mar 02 00:27:06.236407 2026] [:error] [pid 53585:tid 53601] [client 194.247.173.99:50588] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aaRo2nbCvYsvu6kKhM1MagAAAA0"]
[Mon Mar 02 00:27:11.095753 2026] [:error] [pid 53182:tid 53558] [client 194.247.173.99:50604] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaRo3_v073cA6eM1YCSXhAAAAM4"]
[Mon Mar 02 00:27:16.797326 2026] [:error] [pid 53182:tid 53557] [client 194.247.173.99:48654] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aaRo5Pv073cA6eM1YCSXogAAAM0"]
[Mon Mar 02 00:27:21.494146 2026] [:error] [pid 53181:tid 53518] [client 194.247.173.99:48656] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaRo6Yr_0T1SazTrJOASogAAAQQ"]
[Mon Mar 02 00:27:26.427489 2026] [:error] [pid 53585:tid 53612] [client 194.247.173.99:50938] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaRo7nbCvYsvu6kKhM1M9wAAABg"]
[Mon Mar 02 00:27:30.279596 2026] [:error] [pid 53585:tid 53603] [client 194.247.173.99:50954] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaRo8nbCvYsvu6kKhM1NGgAAAA8"]
[Mon Mar 02 00:27:34.397910 2026] [:error] [pid 53585:tid 53607] [client 194.247.173.99:41008] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaRo9nbCvYsvu6kKhM1NLQAAABM"]
[Mon Mar 02 00:27:39.122452 2026] [:error] [pid 53585:tid 53609] [client 194.247.173.99:41018] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaRo-3bCvYsvu6kKhM1NRwAAABU"]
[Mon Mar 02 00:27:42.021080 2026] [:error] [pid 53182:tid 53567] [client 194.247.173.99:41034] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaRo_vv073cA6eM1YCSX5wAAANc"]
[Mon Mar 02 00:27:46.231934 2026] [:error] [pid 53181:tid 53523] [client 194.247.173.99:36364] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaRpAor_0T1SazTrJOAS0QAAAQg"]
[Mon Mar 02 00:27:50.082344 2026] [:error] [pid 53181:tid 53532] [client 194.247.173.99:36368] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaRpBor_0T1SazTrJOAS4QAAARE"]
[Mon Mar 02 00:27:52.812155 2026] [:error] [pid 53180:tid 53463] [client 194.247.173.99:44332] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaRpCDPPJpDOBvYnaa02rQAAAZM"]
[Mon Mar 02 00:27:56.277170 2026] [:error] [pid 53585:tid 53595] [client 194.247.173.99:44346] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaRpDHbCvYsvu6kKhM1NowAAAAc"]
[Mon Mar 02 00:30:41.504041 2026] [:error] [pid 53180:tid 53466] [client 74.243.251.125:13507] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaRpsTPPJpDOBvYnaa034QAAAZY"]
[Mon Mar 02 00:30:41.831805 2026] [:error] [pid 53181:tid 53516] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 00:30:42.164334 2026] [:error] [pid 53181:tid 53519] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 00:30:42.329683 2026] [:error] [pid 53181:tid 53524] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 00:30:42.495478 2026] [:error] [pid 53181:tid 53526] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 00:30:42.664834 2026] [:error] [pid 53181:tid 53531] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 00:30:42.830177 2026] [:error] [pid 53181:tid 53534] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 00:30:42.996981 2026] [:error] [pid 53181:tid 53538] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 00:30:43.164337 2026] [:error] [pid 53181:tid 53535] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 00:30:43.330832 2026] [:error] [pid 53181:tid 53523] [client 74.243.251.125:13870] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 00:30:43.493205 2026] [:error] [pid 53181:tid 53529] [client 74.243.251.125:13870] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaRps4r_0T1SazTrJOAUjwAAAQ4"]
[Mon Mar 02 00:30:43.830895 2026] [:error] [pid 53181:tid 53530] [client 74.243.251.125:13506] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaRps4r_0T1SazTrJOAUkAAAAQ8"]
[Mon Mar 02 00:30:44.154897 2026] [:error] [pid 53182:tid 53546] [client 74.243.251.125:13853] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaRptPv073cA6eM1YCSaeAAAAMM"]
[Mon Mar 02 00:30:44.481274 2026] [:error] [pid 53182:tid 53558] [client 74.243.251.125:13825] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaRptPv073cA6eM1YCSaeQAAAM4"]
[Mon Mar 02 00:30:44.804653 2026] [:error] [pid 53585:tid 53598] [client 74.243.251.125:13511] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaRptHbCvYsvu6kKhM1RfgAAAAo"]
[Mon Mar 02 00:30:45.128205 2026] [:error] [pid 53585:tid 53588] [client 74.243.251.125:13517] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaRptXbCvYsvu6kKhM1RgQAAAAA"]
[Mon Mar 02 00:30:45.451706 2026] [:error] [pid 53181:tid 53537] [client 74.243.251.125:13886] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaRptYr_0T1SazTrJOAUlgAAARY"]
[Mon Mar 02 00:30:45.778601 2026] [:error] [pid 53585:tid 53591] [client 74.243.251.125:13504] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaRptXbCvYsvu6kKhM1RhAAAAAM"]
[Mon Mar 02 00:30:46.103217 2026] [:error] [pid 53182:tid 53559] [client 74.243.251.125:13860] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaRptvv073cA6eM1YCSafwAAAM8"]
[Mon Mar 02 00:30:46.427628 2026] [:error] [pid 53585:tid 53589] [client 74.243.251.125:13518] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaRptnbCvYsvu6kKhM1RhwAAAAE"]
[Mon Mar 02 00:30:46.751115 2026] [:error] [pid 53585:tid 53592] [client 74.243.251.125:13545] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaRptnbCvYsvu6kKhM1RigAAAAQ"]
[Mon Mar 02 00:30:47.074607 2026] [:error] [pid 53182:tid 53557] [client 74.243.251.125:13871] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaRpt_v073cA6eM1YCSagAAAAM0"]
[Mon Mar 02 00:30:47.398181 2026] [:error] [pid 53585:tid 53597] [client 74.243.251.125:13524] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaRpt3bCvYsvu6kKhM1RjwAAAAk"]
[Mon Mar 02 00:30:47.721731 2026] [:error] [pid 53181:tid 53535] [client 74.243.251.125:13828] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaRpt4r_0T1SazTrJOAUmwAAARQ"]
[Mon Mar 02 00:30:48.046020 2026] [:error] [pid 53182:tid 53568] [client 74.243.251.125:13836] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaRpuPv073cA6eM1YCSaggAAANg"]
[Mon Mar 02 00:30:48.369709 2026] [:error] [pid 53585:tid 53611] [client 74.243.251.125:13514] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaRpuHbCvYsvu6kKhM1RmAAAABc"]
[Mon Mar 02 00:30:48.693474 2026] [:error] [pid 53182:tid 53556] [client 74.243.251.125:13831] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaRpuPv073cA6eM1YCSahgAAAMw"]
[Mon Mar 02 00:30:49.016265 2026] [:error] [pid 53585:tid 53602] [client 74.243.251.125:14290] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaRpuXbCvYsvu6kKhM1RmQAAAA4"]
[Mon Mar 02 00:30:49.339224 2026] [:error] [pid 53585:tid 53607] [client 74.243.251.125:13824] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaRpuXbCvYsvu6kKhM1RnAAAABM"]
[Mon Mar 02 00:30:49.662631 2026] [:error] [pid 53585:tid 53597] [client 74.243.251.125:13519] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaRpuXbCvYsvu6kKhM1RogAAAAk"]
[Mon Mar 02 00:30:49.985183 2026] [:error] [pid 53181:tid 53536] [client 74.243.251.125:14282] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaRpuYr_0T1SazTrJOAUngAAARU"]
[Mon Mar 02 00:30:50.310465 2026] [:error] [pid 53182:tid 53546] [client 74.243.251.125:13839] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaRpuvv073cA6eM1YCSaiAAAAMM"]
[Mon Mar 02 00:30:50.633404 2026] [:error] [pid 53585:tid 53600] [client 74.243.251.125:13515] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaRpunbCvYsvu6kKhM1RrwAAAAw"]
[Mon Mar 02 00:30:50.956293 2026] [:error] [pid 53180:tid 53451] [client 74.243.251.125:13520] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaRpujPPJpDOBvYnaa038wAAAYc"]
[Mon Mar 02 00:30:51.279196 2026] [:error] [pid 53180:tid 53447] [client 74.243.251.125:14291] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaRpuzPPJpDOBvYnaa039QAAAYM"]
[Mon Mar 02 00:30:51.602801 2026] [:error] [pid 53181:tid 53515] [client 74.243.251.125:13875] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaRpu4r_0T1SazTrJOAUogAAAQE"]
[Mon Mar 02 00:30:51.926346 2026] [:error] [pid 53180:tid 53449] [client 74.243.251.125:13856] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaRpuzPPJpDOBvYnaa03-QAAAYU"]
[Mon Mar 02 00:30:52.250636 2026] [:error] [pid 53180:tid 53445] [client 74.243.251.125:13554] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaRpvDPPJpDOBvYnaa03-gAAAYE"]
[Mon Mar 02 00:33:11.321649 2026] [:error] [pid 53585:tid 53604] [client 20.63.83.113:10944] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Mon Mar 02 00:33:11.530358 2026] [:error] [pid 53585:tid 53610] [client 20.63.83.113:10944] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz1.php
[Mon Mar 02 00:33:11.738796 2026] [:error] [pid 53585:tid 53602] [client 20.63.83.113:10944] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Mon Mar 02 00:33:11.945881 2026] [:error] [pid 53585:tid 53597] [client 20.63.83.113:10944] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Mon Mar 02 00:33:12.151185 2026] [:error] [pid 53585:tid 53601] [client 20.63.83.113:10944] [client 20.63.83.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaRqSHbCvYsvu6kKhM1U_gAAAA0"]
[Mon Mar 02 00:33:12.565272 2026] [:error] [pid 53585:tid 53592] [client 20.63.83.113:30386] File does not exist: /usr/local/apache/htdocs/suspended-page/home.php
[Mon Mar 02 00:33:12.773305 2026] [:error] [pid 53585:tid 53608] [client 20.63.83.113:30386] File does not exist: /usr/local/apache/htdocs/suspended-page/dialog.php
[Mon Mar 02 00:33:12.984740 2026] [:error] [pid 53585:tid 53600] [client 20.63.83.113:30386] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Mon Mar 02 00:33:13.193329 2026] [:error] [pid 53585:tid 53590] [client 20.63.83.113:30386] File does not exist: /usr/local/apache/htdocs/suspended-page/smaxx.php
[Mon Mar 02 00:33:13.401516 2026] [:error] [pid 53585:tid 53603] [client 20.63.83.113:30386] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Mon Mar 02 00:33:13.610428 2026] [:error] [pid 53585:tid 53601] [client 20.63.83.113:30386] File does not exist: /usr/local/apache/htdocs/suspended-page/block-support.php
[Mon Mar 02 00:33:13.815027 2026] [:error] [pid 53585:tid 53605] [client 20.63.83.113:30386] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Mhbgf.php"] [unique_id "aaRqSXbCvYsvu6kKhM1VEAAAABE"]
[Mon Mar 02 00:33:14.228575 2026] [:error] [pid 53182:tid 53550] [client 20.63.83.113:31613] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Mhbgf.php"] [unique_id "aaRqSvv073cA6eM1YCSb9AAAAMc"]
[Mon Mar 02 00:33:14.649550 2026] [:error] [pid 53180:tid 53466] [client 20.63.83.113:39765] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Mhbgf.php"] [unique_id "aaRqSjPPJpDOBvYnaa044gAAAZY"]
[Mon Mar 02 00:33:15.067596 2026] [:error] [pid 53181:tid 53530] [client 20.63.83.113:31141] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Mhbgf.php"] [unique_id "aaRqS4r_0T1SazTrJOAVwAAAAQ8"]
[Mon Mar 02 00:33:15.494636 2026] [:error] [pid 53181:tid 53526] [client 20.63.83.113:31109] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Xleet.php"] [unique_id "aaRqS4r_0T1SazTrJOAVwgAAAQs"]
[Mon Mar 02 00:33:15.911478 2026] [:error] [pid 53585:tid 53590] [client 20.63.83.113:10973] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Xleet.php"] [unique_id "aaRqS3bCvYsvu6kKhM1VHAAAAAI"]
[Mon Mar 02 00:33:16.330477 2026] [:error] [pid 53181:tid 53528] [client 20.63.83.113:10994] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Xleet.php"] [unique_id "aaRqTIr_0T1SazTrJOAVxwAAAQ0"]
[Mon Mar 02 00:33:16.742651 2026] [:error] [pid 53180:tid 53467] [client 20.63.83.113:53999] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Xleet.php"] [unique_id "aaRqTDPPJpDOBvYnaa045QAAAZc"]
[Mon Mar 02 00:33:17.174056 2026] [:error] [pid 53585:tid 53596] [client 20.63.83.113:15462] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fosil.php"] [unique_id "aaRqTXbCvYsvu6kKhM1VIAAAAAg"]
[Mon Mar 02 00:33:17.601652 2026] [:error] [pid 53180:tid 53458] [client 20.63.83.113:31586] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fosil.php"] [unique_id "aaRqTTPPJpDOBvYnaa046QAAAY4"]
[Mon Mar 02 00:33:18.021890 2026] [:error] [pid 53180:tid 53460] [client 20.63.83.113:39761] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fosil.php"] [unique_id "aaRqTjPPJpDOBvYnaa047AAAAZA"]
[Mon Mar 02 00:33:18.451874 2026] [:error] [pid 53181:tid 53525] [client 20.63.83.113:11043] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fosil.php"] [unique_id "aaRqTor_0T1SazTrJOAVzwAAAQo"]
[Mon Mar 02 00:33:18.876160 2026] [:error] [pid 53585:tid 53607] [client 20.63.83.113:10945] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/issue.php"] [unique_id "aaRqTnbCvYsvu6kKhM1VMgAAABM"]
[Mon Mar 02 00:33:19.299947 2026] [:error] [pid 53182:tid 53548] [client 20.63.83.113:19854] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/issue.php"] [unique_id "aaRqT_v073cA6eM1YCSb_wAAAMU"]
[Mon Mar 02 00:33:19.716318 2026] [:error] [pid 53181:tid 53535] [client 20.63.83.113:10967] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/issue.php"] [unique_id "aaRqT4r_0T1SazTrJOAV0AAAARQ"]
[Mon Mar 02 00:33:20.135081 2026] [:error] [pid 53181:tid 53536] [client 20.63.83.113:10971] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/issue.php"] [unique_id "aaRqUIr_0T1SazTrJOAV0QAAARU"]
[Mon Mar 02 00:33:20.590579 2026] [:error] [pid 53180:tid 53463] [client 20.63.83.113:39749] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/verify.php"] [unique_id "aaRqUDPPJpDOBvYnaa048AAAAZM"]
[Mon Mar 02 00:33:21.021863 2026] [:error] [pid 53585:tid 53612] [client 20.63.83.113:11095] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/verify.php"] [unique_id "aaRqUXbCvYsvu6kKhM1VQgAAABg"]
[Mon Mar 02 00:33:21.450407 2026] [:error] [pid 53585:tid 53599] [client 20.63.83.113:53953] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/verify.php"] [unique_id "aaRqUXbCvYsvu6kKhM1VRwAAAAs"]
[Mon Mar 02 00:33:21.863781 2026] [:error] [pid 53181:tid 53516] [client 20.63.83.113:6851] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/verify.php"] [unique_id "aaRqUYr_0T1SazTrJOAV1AAAAQI"]
[Mon Mar 02 00:33:22.282147 2026] [:error] [pid 53585:tid 53608] [client 20.63.83.113:39797] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRqUnbCvYsvu6kKhM1VTAAAABQ"]
[Mon Mar 02 00:33:22.707833 2026] [:error] [pid 53182:tid 53558] [client 20.63.83.113:30338] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRqUvv073cA6eM1YCScCAAAAM4"]
[Mon Mar 02 00:33:23.133353 2026] [:error] [pid 53585:tid 53611] [client 20.63.83.113:11028] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRqU3bCvYsvu6kKhM1VUgAAABc"]
[Mon Mar 02 00:33:23.546753 2026] [:error] [pid 53585:tid 53602] [client 20.63.83.113:6889] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRqU3bCvYsvu6kKhM1VVwAAAA4"]
[Mon Mar 02 00:33:23.958974 2026] [:error] [pid 53585:tid 53604] [client 20.63.83.113:39783] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indeex.php"] [unique_id "aaRqU3bCvYsvu6kKhM1VWwAAABA"]
[Mon Mar 02 00:33:24.385946 2026] [:error] [pid 53182:tid 53561] [client 20.63.83.113:10307] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indeex.php"] [unique_id "aaRqVPv073cA6eM1YCScDQAAANE"]
[Mon Mar 02 00:33:24.819096 2026] [:error] [pid 53182:tid 53565] [client 20.63.83.113:11086] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indeex.php"] [unique_id "aaRqVPv073cA6eM1YCScDgAAANU"]
[Mon Mar 02 00:33:25.241225 2026] [:error] [pid 53181:tid 53530] [client 20.63.83.113:19858] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/indeex.php"] [unique_id "aaRqVYr_0T1SazTrJOAV2wAAAQ8"]
[Mon Mar 02 00:33:25.651818 2026] [:error] [pid 53180:tid 53458] [client 20.63.83.113:39786] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aaRqVTPPJpDOBvYnaa049gAAAY4"]
[Mon Mar 02 00:33:26.062783 2026] [:error] [pid 53181:tid 53525] [client 20.63.83.113:15436] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aaRqVor_0T1SazTrJOAV3gAAAQo"]
[Mon Mar 02 00:33:26.485960 2026] [:error] [pid 53180:tid 53460] [client 20.63.83.113:6989] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aaRqVjPPJpDOBvYnaa049wAAAZA"]
[Mon Mar 02 00:33:26.902609 2026] [:error] [pid 53180:tid 53466] [client 20.63.83.113:54006] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.php"] [unique_id "aaRqVjPPJpDOBvYnaa04_QAAAZY"]
[Mon Mar 02 00:33:27.328991 2026] [:error] [pid 53180:tid 53447] [client 20.63.83.113:6985] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaRqVzPPJpDOBvYnaa04_gAAAYM"]
[Mon Mar 02 00:33:27.744261 2026] [:error] [pid 53180:tid 53453] [client 20.63.83.113:6861] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaRqVzPPJpDOBvYnaa05AAAAAYk"]
[Mon Mar 02 00:33:28.166630 2026] [:error] [pid 53181:tid 53522] [client 20.63.83.113:6877] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaRqWIr_0T1SazTrJOAV4QAAAQc"]
[Mon Mar 02 00:33:28.601148 2026] [:error] [pid 53181:tid 53521] [client 20.63.83.113:22601] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaRqWIr_0T1SazTrJOAV4wAAAQY"]
[Mon Mar 02 00:33:29.034192 2026] [:error] [pid 53182:tid 53545] [client 20.63.83.113:30340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php.php"] [unique_id "aaRqWfv073cA6eM1YCScFgAAAMI"]
[Mon Mar 02 00:33:29.501001 2026] [:error] [pid 53182:tid 53557] [client 20.63.83.113:49081] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php.php"] [unique_id "aaRqWfv073cA6eM1YCScGAAAAM0"]
[Mon Mar 02 00:33:29.931563 2026] [:error] [pid 53182:tid 53559] [client 20.63.83.113:52286] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php.php"] [unique_id "aaRqWfv073cA6eM1YCScGgAAAM8"]
[Mon Mar 02 00:33:30.406673 2026] [:error] [pid 53182:tid 53548] [client 20.63.83.113:19859] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php.php"] [unique_id "aaRqWvv073cA6eM1YCScHQAAAMU"]
[Mon Mar 02 00:33:30.829865 2026] [:error] [pid 53181:tid 53534] [client 20.63.83.113:13932] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aks.php"] [unique_id "aaRqWor_0T1SazTrJOAV6wAAARM"]
[Mon Mar 02 00:33:31.272893 2026] [:error] [pid 53182:tid 53562] [client 20.63.83.113:13891] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aks.php"] [unique_id "aaRqW_v073cA6eM1YCScIwAAANI"]
[Mon Mar 02 00:33:31.734100 2026] [:error] [pid 53181:tid 53539] [client 20.63.83.113:30342] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aks.php"] [unique_id "aaRqW4r_0T1SazTrJOAV7gAAARg"]
[Mon Mar 02 00:33:32.183108 2026] [:error] [pid 53182:tid 53545] [client 20.63.83.113:22651] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aks.php"] [unique_id "aaRqXPv073cA6eM1YCScJgAAAMI"]
[Mon Mar 02 00:33:32.686011 2026] [:error] [pid 53182:tid 53558] [client 20.63.83.113:49082] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex1.php"] [unique_id "aaRqXPv073cA6eM1YCScKQAAAM4"]
[Mon Mar 02 00:33:33.247525 2026] [:error] [pid 53182:tid 53551] [client 20.63.83.113:10928] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex1.php"] [unique_id "aaRqXfv073cA6eM1YCScLQAAAMg"]
[Mon Mar 02 00:33:33.715750 2026] [:error] [pid 53181:tid 53531] [client 20.63.83.113:6976] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex1.php"] [unique_id "aaRqXYr_0T1SazTrJOAV9gAAARA"]
[Mon Mar 02 00:33:34.226933 2026] [:error] [pid 53181:tid 53514] [client 20.63.83.113:22619] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex1.php"] [unique_id "aaRqXor_0T1SazTrJOAV-AAAAQA"]
[Mon Mar 02 00:33:34.762818 2026] [:error] [pid 53181:tid 53515] [client 20.63.83.113:64588] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/worksec.php"] [unique_id "aaRqXor_0T1SazTrJOAV_AAAAQE"]
[Mon Mar 02 00:33:35.278032 2026] [:error] [pid 53585:tid 53588] [client 20.63.83.113:39495] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/worksec.php"] [unique_id "aaRqX3bCvYsvu6kKhM1VewAAAAA"]
[Mon Mar 02 00:33:35.771739 2026] [:error] [pid 53585:tid 53598] [client 20.63.83.113:13894] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/worksec.php"] [unique_id "aaRqX3bCvYsvu6kKhM1VfwAAAAo"]
[Mon Mar 02 00:33:36.236685 2026] [:error] [pid 53585:tid 53609] [client 20.63.83.113:10695] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/worksec.php"] [unique_id "aaRqYHbCvYsvu6kKhM1VhQAAABU"]
[Mon Mar 02 00:33:36.728788 2026] [:error] [pid 53180:tid 53446] [client 20.63.83.113:10906] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/configs.php"] [unique_id "aaRqYDPPJpDOBvYnaa05EwAAAYI"]
[Mon Mar 02 00:33:37.199176 2026] [:error] [pid 53180:tid 53458] [client 20.63.83.113:52835] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/configs.php"] [unique_id "aaRqYTPPJpDOBvYnaa05FAAAAY4"]
[Mon Mar 02 00:33:37.617306 2026] [:error] [pid 53180:tid 53456] [client 20.63.83.113:64576] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/configs.php"] [unique_id "aaRqYTPPJpDOBvYnaa05FwAAAYw"]
[Mon Mar 02 00:33:38.040527 2026] [:error] [pid 53585:tid 53600] [client 20.63.83.113:13949] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/configs.php"] [unique_id "aaRqYnbCvYsvu6kKhM1VkAAAAAw"]
[Mon Mar 02 00:33:38.462488 2026] [:error] [pid 53182:tid 53563] [client 20.63.83.113:40127] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa1.php"] [unique_id "aaRqYvv073cA6eM1YCScOgAAANM"]
[Mon Mar 02 00:33:38.886146 2026] [:error] [pid 53585:tid 53602] [client 20.63.83.113:13911] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa1.php"] [unique_id "aaRqYnbCvYsvu6kKhM1VlQAAAA4"]
[Mon Mar 02 00:33:39.306727 2026] [:error] [pid 53585:tid 53611] [client 20.63.83.113:30341] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa1.php"] [unique_id "aaRqY3bCvYsvu6kKhM1VmAAAABc"]
[Mon Mar 02 00:33:39.721361 2026] [:error] [pid 53585:tid 53601] [client 20.63.83.113:39527] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa1.php"] [unique_id "aaRqY3bCvYsvu6kKhM1VnAAAAA0"]
[Mon Mar 02 00:33:40.176324 2026] [:error] [pid 53585:tid 53611] [client 20.63.83.113:39532] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouts.php"] [unique_id "aaRqZHbCvYsvu6kKhM1VogAAABc"]
[Mon Mar 02 00:33:40.590435 2026] [:error] [pid 53585:tid 53595] [client 20.63.83.113:10888] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouts.php"] [unique_id "aaRqZHbCvYsvu6kKhM1VqQAAAAc"]
[Mon Mar 02 00:33:41.001792 2026] [:error] [pid 53180:tid 53446] [client 20.63.83.113:39550] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouts.php"] [unique_id "aaRqZTPPJpDOBvYnaa05JgAAAYI"]
[Mon Mar 02 00:33:41.430130 2026] [:error] [pid 53585:tid 53590] [client 20.63.83.113:19901] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abouts.php"] [unique_id "aaRqZXbCvYsvu6kKhM1VrQAAAAI"]
[Mon Mar 02 00:33:41.859031 2026] [:error] [pid 53182:tid 53549] [client 20.63.83.113:19894] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cache.php"] [unique_id "aaRqZfv073cA6eM1YCScPwAAAMY"]
[Mon Mar 02 00:33:42.329549 2026] [:error] [pid 53585:tid 53593] [client 20.63.83.113:40074] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cache.php"] [unique_id "aaRqZnbCvYsvu6kKhM1VtQAAAAU"]
[Mon Mar 02 00:33:42.746674 2026] [:error] [pid 53585:tid 53588] [client 20.63.83.113:47582] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cache.php"] [unique_id "aaRqZnbCvYsvu6kKhM1VvQAAAAA"]
[Mon Mar 02 00:33:43.210621 2026] [:error] [pid 53182:tid 53545] [client 20.63.83.113:22597] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cache.php"] [unique_id "aaRqZ_v073cA6eM1YCScQQAAAMI"]
[Mon Mar 02 00:33:43.668831 2026] [:error] [pid 53180:tid 53468] [client 20.63.83.113:40104] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqZzPPJpDOBvYnaa05LQAAAZg"]
[Mon Mar 02 00:33:44.166481 2026] [:error] [pid 53182:tid 53558] [client 20.63.83.113:16512] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqaPv073cA6eM1YCScRAAAAM4"]
[Mon Mar 02 00:33:44.641373 2026] [:error] [pid 53182:tid 53547] [client 20.63.83.113:16534] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqaPv073cA6eM1YCScSAAAAMQ"]
[Mon Mar 02 00:33:45.095116 2026] [:error] [pid 53182:tid 53551] [client 20.63.83.113:10932] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqafv073cA6eM1YCScSgAAAMg"]
[Mon Mar 02 00:33:45.545102 2026] [:error] [pid 53182:tid 53567] [client 20.63.83.113:10917] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqafv073cA6eM1YCScTAAAANc"]
[Mon Mar 02 00:33:46.143096 2026] [:error] [pid 53181:tid 53518] [client 20.63.83.113:19853] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqaor_0T1SazTrJOAWFAAAAQQ"]
[Mon Mar 02 00:33:46.591283 2026] [:error] [pid 53181:tid 53535] [client 20.63.83.113:47559] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqaor_0T1SazTrJOAWGAAAARQ"]
[Mon Mar 02 00:33:47.099769 2026] [:error] [pid 53180:tid 53453] [client 20.63.83.113:25203] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaRqazPPJpDOBvYnaa05MQAAAYk"]
[Mon Mar 02 00:36:52.813308 2026] [:error] [pid 53181:tid 53538] [client 43.166.136.202:42538] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaRrJIr_0T1SazTrJOAX_gAAARc"]
[Mon Mar 02 00:55:56.693729 2026] [:error] [pid 26940:tid 26949] [client 65.108.2.171:58964] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaRvnBrUg-j5GLDtRFlwQgAAAEU"]
[Mon Mar 02 00:56:00.647153 2026] [:error] [pid 26940:tid 26965] [client 65.108.2.171:58970] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaRvoBrUg-j5GLDtRFlwVAAAAFU"]
[Mon Mar 02 00:56:04.557940 2026] [:error] [pid 53182:tid 53555] [client 65.108.2.171:44726] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaRvpPv073cA6eM1YCSwWwAAAMs"]
[Mon Mar 02 00:59:56.252647 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Mon Mar 02 00:59:56.722121 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Mon Mar 02 00:59:56.934006 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Mon Mar 02 00:59:57.179120 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Mon Mar 02 00:59:57.387108 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Mon Mar 02 00:59:57.591036 2026] [:error] [pid 53585:tid 53591] [client 20.151.11.124:7962] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.11.124, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRwjXbCvYsvu6kKhM14CAAAAAM"]
[Mon Mar 02 00:59:57.802274 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Mar 02 00:59:58.010926 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Mar 02 00:59:58.218788 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 02 00:59:58.422550 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.124:7962] [client 20.151.11.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.11.124, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaRwjnbCvYsvu6kKhM14FgAAAA0"]
[Mon Mar 02 00:59:58.426253 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 02 00:59:58.633252 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.124:7962] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Mar 02 00:59:58.837368 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.124:7962] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaRwjnbCvYsvu6kKhM14HgAAAAA"]
[Mon Mar 02 00:59:59.668124 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.124:55101] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaRwj3bCvYsvu6kKhM14KAAAAAU"]
[Mon Mar 02 01:00:00.495292 2026] [:error] [pid 53181:tid 53515] [client 20.151.11.124:59744] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaRwkIr_0T1SazTrJOAlrQAAAQE"]
[Mon Mar 02 01:00:01.366105 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.124:55078] [client 20.151.11.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaRwkXbCvYsvu6kKhM14QgAAAAU"]
[Mon Mar 02 01:14:58.868858 2026] [:error] [pid 53585:tid 53591] [client 51.83.9.208:59842] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aaR0EnbCvYsvu6kKhM2HFQAAAAM"]
[Mon Mar 02 01:15:00.868231 2026] [:error] [pid 53182:tid 53556] [client 51.83.9.208:57794] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aaR0FPv073cA6eM1YCS9dgAAAMw"]
[Mon Mar 02 01:15:02.874970 2026] [:error] [pid 26940:tid 26946] [client 51.83.9.208:57800] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaR0FhrUg-j5GLDtRFmJhwAAAEI"]
[Mon Mar 02 01:15:11.828955 2026] [:error] [pid 53181:tid 53527] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Mar 02 01:15:12.044720 2026] [:error] [pid 53181:tid 53528] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Mar 02 01:15:12.252627 2026] [:error] [pid 53181:tid 53522] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Mar 02 01:15:12.460635 2026] [:error] [pid 53181:tid 53529] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 02 01:15:12.668717 2026] [:error] [pid 53181:tid 53517] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 02 01:15:12.878599 2026] [:error] [pid 53181:tid 53521] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Mar 02 01:15:13.295533 2026] [:error] [pid 53181:tid 53515] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Mar 02 01:15:13.505497 2026] [:error] [pid 53181:tid 53526] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Mon Mar 02 01:15:13.713767 2026] [:error] [pid 53181:tid 53531] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Mar 02 01:15:13.921560 2026] [:error] [pid 53181:tid 53519] [client 20.220.162.180:52196] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Mar 02 01:15:14.126267 2026] [:error] [pid 53181:tid 53530] [client 20.220.162.180:52196] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaR0Ior_0T1SazTrJOAtPQAAAQ8"]
[Mon Mar 02 01:15:14.951556 2026] [:error] [pid 53585:tid 53612] [client 20.220.162.180:52218] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaR0InbCvYsvu6kKhM2HOgAAABg"]
[Mon Mar 02 01:15:15.814858 2026] [:error] [pid 26940:tid 26952] [client 20.220.162.180:52168] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaR0IxrUg-j5GLDtRFmJ9AAAAEg"]
[Mon Mar 02 01:15:16.640486 2026] [:error] [pid 53585:tid 53609] [client 20.220.162.180:18342] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "aaR0JHbCvYsvu6kKhM2HQQAAABU"]
[Mon Mar 02 01:16:45.612522 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Mon Mar 02 01:16:45.845901 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Mon Mar 02 01:16:46.058616 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/qr.php
[Mon Mar 02 01:16:46.285125 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Mon Mar 02 01:16:46.507093 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Mon Mar 02 01:16:46.719338 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 02 01:16:46.931627 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Mar 02 01:16:47.149348 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Mar 02 01:16:47.361734 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 02 01:16:47.573346 2026] [:error] [pid 53585:tid 53591] [client 20.151.11.236:63517] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Mon Mar 02 01:16:47.787087 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:63517] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "aaR0f3bCvYsvu6kKhM2IkAAAAAU"]
[Mon Mar 02 01:16:48.222126 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:63525] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "aaR0gPv073cA6eM1YCS-mQAAAMA"]
[Mon Mar 02 01:16:48.638769 2026] [:error] [pid 53180:tid 53454] [client 20.151.11.236:58756] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "aaR0gDPPJpDOBvYnaa1NsQAAAYo"]
[Mon Mar 02 01:16:49.091443 2026] [:error] [pid 53180:tid 53467] [client 20.151.11.236:63501] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "aaR0gTPPJpDOBvYnaa1NtAAAAZc"]
[Mon Mar 02 01:16:49.503699 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:63607] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "aaR0gXbCvYsvu6kKhM2IkQAAAAA"]
[Mon Mar 02 01:16:49.919542 2026] [:error] [pid 53182:tid 53544] [client 20.151.11.236:63600] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "aaR0gfv073cA6eM1YCS-oAAAAME"]
[Mon Mar 02 01:16:50.338040 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:63507] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "aaR0gvv073cA6eM1YCS-oQAAANg"]
[Mon Mar 02 01:16:50.755532 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58871] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "aaR0ghrUg-j5GLDtRFmL6AAAAEY"]
[Mon Mar 02 01:16:51.192538 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:63558] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0g4r_0T1SazTrJOAtuwAAAQ0"]
[Mon Mar 02 01:16:51.664923 2026] [:error] [pid 53181:tid 53523] [client 20.151.11.236:63605] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0g4r_0T1SazTrJOAtvAAAAQg"]
[Mon Mar 02 01:16:52.087254 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:58840] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0hDPPJpDOBvYnaa1NugAAAYc"]
[Mon Mar 02 01:16:52.520606 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:63550] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0hHbCvYsvu6kKhM2IlgAAABE"]
[Mon Mar 02 01:16:52.976561 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:58857] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR0hHbCvYsvu6kKhM2IlwAAAAI"]
[Mon Mar 02 01:16:53.393186 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:63547] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR0hRrUg-j5GLDtRFmL8QAAAFQ"]
[Mon Mar 02 01:16:53.809949 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58852] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR0hRrUg-j5GLDtRFmL9QAAAFE"]
[Mon Mar 02 01:16:54.258366 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63506] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR0hnbCvYsvu6kKhM2ImwAAAA4"]
[Mon Mar 02 01:16:54.672446 2026] [:error] [pid 53585:tid 53600] [client 20.151.11.236:63564] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-tem.php"] [unique_id "aaR0hnbCvYsvu6kKhM2IngAAAAw"]
[Mon Mar 02 01:16:55.094886 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:58847] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-tem.php"] [unique_id "aaR0hxrUg-j5GLDtRFmL-AAAAEA"]
[Mon Mar 02 01:16:55.514962 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:58757] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-tem.php"] [unique_id "aaR0h3bCvYsvu6kKhM2IpwAAABI"]
[Mon Mar 02 01:16:55.928020 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63572] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-tem.php"] [unique_id "aaR0h3bCvYsvu6kKhM2IrAAAAA4"]
[Mon Mar 02 01:16:56.360550 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:63524] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "aaR0iIr_0T1SazTrJOAtxAAAAQo"]
[Mon Mar 02 01:16:56.792262 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:63603] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "aaR0iPv073cA6eM1YCS-rwAAANQ"]
[Mon Mar 02 01:16:57.215283 2026] [:error] [pid 53181:tid 53531] [client 20.151.11.236:58831] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "aaR0iYr_0T1SazTrJOAtygAAARA"]
[Mon Mar 02 01:16:57.631652 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:58833] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "aaR0iXbCvYsvu6kKhM2ItAAAAA8"]
[Mon Mar 02 01:16:58.045355 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63598] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR0inbCvYsvu6kKhM2ItwAAAA4"]
[Mon Mar 02 01:16:58.457573 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:58878] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR0inbCvYsvu6kKhM2IvAAAABc"]
[Mon Mar 02 01:16:58.869310 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:58879] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR0inbCvYsvu6kKhM2IwAAAAA0"]
[Mon Mar 02 01:16:59.285677 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:57574] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR0ixrUg-j5GLDtRFmMBQAAAE0"]
[Mon Mar 02 01:16:59.706441 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:63500] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "aaR0i3bCvYsvu6kKhM2IyQAAAAs"]
[Mon Mar 02 01:17:00.157278 2026] [:error] [pid 53180:tid 53445] [client 20.151.11.236:58860] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "aaR0jDPPJpDOBvYnaa1NyAAAAYE"]
[Mon Mar 02 01:17:00.576870 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:58864] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "aaR0jHbCvYsvu6kKhM2I1gAAABE"]
[Mon Mar 02 01:17:00.992962 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:63606] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "aaR0jHbCvYsvu6kKhM2I2gAAAAc"]
[Mon Mar 02 01:17:01.431694 2026] [:error] [pid 53182:tid 53549] [client 20.151.11.236:63615] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "aaR0jfv073cA6eM1YCS-uwAAAMY"]
[Mon Mar 02 01:17:01.845085 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:63554] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "aaR0jRrUg-j5GLDtRFmMDQAAAEo"]
[Mon Mar 02 01:17:02.317989 2026] [:error] [pid 53181:tid 53537] [client 20.151.11.236:63566] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "aaR0jor_0T1SazTrJOAt0gAAARY"]
[Mon Mar 02 01:17:02.733987 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:57539] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "aaR0jhrUg-j5GLDtRFmMFwAAAFA"]
[Mon Mar 02 01:17:03.150641 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:63591] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "aaR0jxrUg-j5GLDtRFmMGAAAAEU"]
[Mon Mar 02 01:17:03.572305 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58859] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "aaR0jxrUg-j5GLDtRFmMGwAAAFQ"]
[Mon Mar 02 01:17:03.990066 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:58867] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "aaR0j3bCvYsvu6kKhM2I5QAAAAo"]
[Mon Mar 02 01:17:04.402504 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63505] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "aaR0kHbCvYsvu6kKhM2I5wAAABc"]
[Mon Mar 02 01:17:04.814890 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:63526] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "aaR0kBrUg-j5GLDtRFmMJQAAAEE"]
[Mon Mar 02 01:17:05.223784 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:63587] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "aaR0kRrUg-j5GLDtRFmMKgAAAEM"]
[Mon Mar 02 01:17:05.639751 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:63579] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "aaR0kRrUg-j5GLDtRFmMLAAAAFE"]
[Mon Mar 02 01:17:06.049937 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63580] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "aaR0khrUg-j5GLDtRFmMLwAAAEw"]
[Mon Mar 02 01:17:06.465107 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:63604] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aaR0khrUg-j5GLDtRFmMNAAAAFY"]
[Mon Mar 02 01:17:06.876284 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:63489] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aaR0knbCvYsvu6kKhM2I7AAAAAY"]
[Mon Mar 02 01:17:07.290696 2026] [:error] [pid 53180:tid 53450] [client 20.151.11.236:63609] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aaR0kzPPJpDOBvYnaa1NzAAAAYY"]
[Mon Mar 02 01:17:07.702680 2026] [:error] [pid 53182:tid 53544] [client 20.151.11.236:57509] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "aaR0k_v073cA6eM1YCS-wQAAAME"]
[Mon Mar 02 01:17:08.157787 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:58838] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aaR0lPv073cA6eM1YCS-wgAAANg"]
[Mon Mar 02 01:17:08.640288 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:63519] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aaR0lPv073cA6eM1YCS-wwAAANI"]
[Mon Mar 02 01:17:09.070982 2026] [:error] [pid 53180:tid 53454] [client 20.151.11.236:58839] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aaR0lTPPJpDOBvYnaa1N0gAAAYo"]
[Mon Mar 02 01:17:09.512686 2026] [:error] [pid 53180:tid 53463] [client 20.151.11.236:58869] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "aaR0lTPPJpDOBvYnaa1N1AAAAZM"]
[Mon Mar 02 01:17:10.027692 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:58780] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/G-In.php"] [unique_id "aaR0ljPPJpDOBvYnaa1N1gAAAYM"]
[Mon Mar 02 01:17:10.473084 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:63510] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/G-In.php"] [unique_id "aaR0lor_0T1SazTrJOAt2wAAAQc"]
[Mon Mar 02 01:17:10.895516 2026] [:error] [pid 53181:tid 53514] [client 20.151.11.236:57558] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/G-In.php"] [unique_id "aaR0lor_0T1SazTrJOAt3AAAAQA"]
[Mon Mar 02 01:17:11.314149 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/G-In.php"] [unique_id "aaR0lxrUg-j5GLDtRFmMRAAAAFM"]
[Mon Mar 02 01:17:11.777199 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:63588] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaR0lxrUg-j5GLDtRFmMSAAAAEs"]
[Mon Mar 02 01:17:12.227752 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:58817] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaR0mIr_0T1SazTrJOAt4AAAAQo"]
[Mon Mar 02 01:17:12.666305 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:63549] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaR0mBrUg-j5GLDtRFmMTQAAAFc"]
[Mon Mar 02 01:17:13.103351 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:63504] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaR0mXbCvYsvu6kKhM2I-QAAAAY"]
[Mon Mar 02 01:17:13.539816 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:63514] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaR0mRrUg-j5GLDtRFmMVwAAAFQ"]
[Mon Mar 02 01:17:13.963661 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:63508] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaR0mXbCvYsvu6kKhM2I_gAAAA0"]
[Mon Mar 02 01:17:14.389193 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:58823] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaR0mnbCvYsvu6kKhM2JBQAAABM"]
[Mon Mar 02 01:17:14.809201 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:58760] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaR0mhrUg-j5GLDtRFmMXAAAAEw"]
[Mon Mar 02 01:17:15.234899 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:63504] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR0m3bCvYsvu6kKhM2JEAAAAA8"]
[Mon Mar 02 01:17:15.655380 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58877] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR0mxrUg-j5GLDtRFmMZAAAAFQ"]
[Mon Mar 02 01:17:16.080446 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63567] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR0nBrUg-j5GLDtRFmMaQAAAEc"]
[Mon Mar 02 01:17:16.494415 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63522] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR0nBrUg-j5GLDtRFmMbgAAAFM"]
[Mon Mar 02 01:17:16.903002 2026] [:error] [pid 53182:tid 53560] [client 20.151.11.236:58818] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaR0nPv073cA6eM1YCS-2QAAANA"]
[Mon Mar 02 01:17:17.332289 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58765] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaR0nRrUg-j5GLDtRFmMeAAAAEs"]
[Mon Mar 02 01:17:17.764311 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:63595] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaR0nXbCvYsvu6kKhM2JEwAAABM"]
[Mon Mar 02 01:17:18.180357 2026] [:error] [pid 53585:tid 53591] [client 20.151.11.236:57491] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaR0nnbCvYsvu6kKhM2JGAAAAAM"]
[Mon Mar 02 01:17:18.587404 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63499] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaR0nhrUg-j5GLDtRFmMfAAAAEw"]
[Mon Mar 02 01:17:19.000687 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:58858] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaR0nhrUg-j5GLDtRFmMfgAAAFY"]
[Mon Mar 02 01:17:19.414663 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:57575] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaR0n3bCvYsvu6kKhM2JHwAAABc"]
[Mon Mar 02 01:17:19.825877 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaR0nxrUg-j5GLDtRFmMhgAAAEs"]
[Mon Mar 02 01:17:20.235925 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:58845] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaR0oBrUg-j5GLDtRFmMiQAAAEk"]
[Mon Mar 02 01:17:20.646062 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:63559] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaR0oBrUg-j5GLDtRFmMjAAAAFg"]
[Mon Mar 02 01:17:21.054922 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:58875] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaR0oRrUg-j5GLDtRFmMkgAAAEU"]
[Mon Mar 02 01:17:21.465983 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:63533] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaR0oXbCvYsvu6kKhM2JIwAAAAo"]
[Mon Mar 02 01:17:21.901545 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:63494] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaR0oYr_0T1SazTrJOAt6QAAAQc"]
[Mon Mar 02 01:17:22.312047 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63613] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaR0onbCvYsvu6kKhM2JJQAAAA4"]
[Mon Mar 02 01:17:22.734695 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58866] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaR0ohrUg-j5GLDtRFmMnQAAAFE"]
[Mon Mar 02 01:17:23.161106 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:58828] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaR0o3bCvYsvu6kKhM2JJwAAAAY"]
[Mon Mar 02 01:17:23.574516 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:58854] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaR0o3bCvYsvu6kKhM2JKQAAAAA"]
[Mon Mar 02 01:17:24.031933 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:63583] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaR0pHbCvYsvu6kKhM2JLQAAAA0"]
[Mon Mar 02 01:17:24.488713 2026] [:error] [pid 53181:tid 53517] [client 20.151.11.236:63586] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaR0pIr_0T1SazTrJOAt6gAAAQM"]
[Mon Mar 02 01:17:25.023174 2026] [:error] [pid 53181:tid 53533] [client 20.151.11.236:63552] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaR0pYr_0T1SazTrJOAt7AAAARI"]
[Mon Mar 02 01:17:25.468924 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:58788] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaR0pXbCvYsvu6kKhM2JMgAAAAQ"]
[Mon Mar 02 01:17:25.900010 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:58859] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaR0pXbCvYsvu6kKhM2JNQAAAAc"]
[Mon Mar 02 01:17:26.336938 2026] [:error] [pid 53585:tid 53591] [client 20.151.11.236:58758] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaR0pnbCvYsvu6kKhM2JOAAAAAM"]
[Mon Mar 02 01:17:26.811457 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:63544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaR0phrUg-j5GLDtRFmMsAAAAEI"]
[Mon Mar 02 01:17:27.307689 2026] [:error] [pid 53182:tid 53552] [client 20.151.11.236:57557] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaR0p_v073cA6eM1YCS-4AAAAMk"]
[Mon Mar 02 01:17:27.743756 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:58768] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0p3bCvYsvu6kKhM2JPgAAABc"]
[Mon Mar 02 01:17:28.210599 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:63521] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0qBrUg-j5GLDtRFmMtAAAAEQ"]
[Mon Mar 02 01:17:28.654979 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63497] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0qBrUg-j5GLDtRFmMtQAAAEc"]
[Mon Mar 02 01:17:29.119324 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58853] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0qRrUg-j5GLDtRFmMugAAAFQ"]
[Mon Mar 02 01:17:29.606916 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:58832] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaR0qRrUg-j5GLDtRFmMwQAAAEA"]
[Mon Mar 02 01:17:30.109530 2026] [:error] [pid 53182:tid 53548] [client 20.151.11.236:63492] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaR0qvv073cA6eM1YCS-5wAAAMU"]
[Mon Mar 02 01:17:30.525465 2026] [:error] [pid 53180:tid 53454] [client 20.151.11.236:58865] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaR0qjPPJpDOBvYnaa1N4QAAAYo"]
[Mon Mar 02 01:17:31.065165 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58844] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaR0qxrUg-j5GLDtRFmM1QAAAEQ"]
[Mon Mar 02 01:17:31.487742 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:57561] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaR0q3bCvYsvu6kKhM2JQQAAABE"]
[Mon Mar 02 01:17:31.906477 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:58793] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaR0q3bCvYsvu6kKhM2JQgAAAAE"]
[Mon Mar 02 01:17:32.354081 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:63532] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaR0rHbCvYsvu6kKhM2JRQAAAAQ"]
[Mon Mar 02 01:17:32.784982 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:63585] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ol.php"] [unique_id "aaR0rPv073cA6eM1YCS-_gAAANI"]
[Mon Mar 02 01:17:33.205653 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:63574] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaR0rRrUg-j5GLDtRFmM7gAAAE0"]
[Mon Mar 02 01:17:33.644189 2026] [:error] [pid 53180:tid 53444] [client 20.151.11.236:63491] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaR0rTPPJpDOBvYnaa1N5QAAAYA"]
[Mon Mar 02 01:17:34.114715 2026] [:error] [pid 53181:tid 53517] [client 20.151.11.236:63563] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaR0ror_0T1SazTrJOAt-gAAAQM"]
[Mon Mar 02 01:17:34.531547 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:63581] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f6.php"] [unique_id "aaR0rnbCvYsvu6kKhM2JTQAAAAY"]
[Mon Mar 02 01:17:34.947817 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63502] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaR0rhrUg-j5GLDtRFmNAAAAAEw"]
[Mon Mar 02 01:17:35.390922 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:58767] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaR0rxrUg-j5GLDtRFmNBgAAAFc"]
[Mon Mar 02 01:17:35.837053 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:57538] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaR0rxrUg-j5GLDtRFmNDgAAAEw"]
[Mon Mar 02 01:17:36.298080 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:58811] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "aaR0sHbCvYsvu6kKhM2JUwAAABE"]
[Mon Mar 02 01:17:36.729124 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:58791] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaR0sBrUg-j5GLDtRFmNFgAAAFA"]
[Mon Mar 02 01:17:37.164720 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:63535] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaR0sRrUg-j5GLDtRFmNGwAAAEg"]
[Mon Mar 02 01:17:37.590398 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:63534] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaR0sRrUg-j5GLDtRFmNIgAAAEs"]
[Mon Mar 02 01:17:38.028367 2026] [:error] [pid 53180:tid 53449] [client 20.151.11.236:58819] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aaR0sjPPJpDOBvYnaa1N5gAAAYU"]
[Mon Mar 02 01:17:38.462266 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:57487] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaR0snbCvYsvu6kKhM2JWwAAAAU"]
[Mon Mar 02 01:17:38.925243 2026] [:error] [pid 53181:tid 53530] [client 20.151.11.236:63562] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaR0sor_0T1SazTrJOAt_QAAAQ8"]
[Mon Mar 02 01:17:39.412761 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:63546] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaR0sxrUg-j5GLDtRFmNLwAAAE4"]
[Mon Mar 02 01:17:39.843782 2026] [:error] [pid 53182:tid 53552] [client 20.151.11.236:63601] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "aaR0s_v073cA6eM1YCS_CAAAAMk"]
[Mon Mar 02 01:17:40.312616 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63597] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaR0tHbCvYsvu6kKhM2JXAAAAA4"]
[Mon Mar 02 01:17:40.805820 2026] [:error] [pid 53182:tid 53548] [client 20.151.11.236:63520] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaR0tPv073cA6eM1YCS_DQAAAMU"]
[Mon Mar 02 01:17:41.294108 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:63610] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaR0tfv073cA6eM1YCS_EQAAAMg"]
[Mon Mar 02 01:17:41.730011 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63571] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "aaR0tRrUg-j5GLDtRFmNNwAAAEw"]
[Mon Mar 02 01:17:42.178450 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57575] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaR0tnbCvYsvu6kKhM2JZwAAAAE"]
[Mon Mar 02 01:17:42.610463 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:57545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaR0thrUg-j5GLDtRFmNOwAAAFg"]
[Mon Mar 02 01:17:43.093587 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:63609] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaR0txrUg-j5GLDtRFmNPQAAAEQ"]
[Mon Mar 02 01:17:43.514914 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58776] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "aaR0txrUg-j5GLDtRFmNQgAAAFQ"]
[Mon Mar 02 01:17:43.944402 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:58764] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0txrUg-j5GLDtRFmNRwAAAEo"]
[Mon Mar 02 01:17:44.386026 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:63614] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0uBrUg-j5GLDtRFmNSQAAAFY"]
[Mon Mar 02 01:17:44.812706 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58779] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0uBrUg-j5GLDtRFmNTQAAAEQ"]
[Mon Mar 02 01:17:45.236038 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:58769] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaR0uXbCvYsvu6kKhM2JcgAAAA4"]
[Mon Mar 02 01:17:45.733356 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:63527] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR0uRrUg-j5GLDtRFmNUwAAAFM"]
[Mon Mar 02 01:17:46.189443 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:63569] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR0unbCvYsvu6kKhM2JdgAAABc"]
[Mon Mar 02 01:17:46.604608 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:55885] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR0uvv073cA6eM1YCS_IQAAANI"]
[Mon Mar 02 01:17:47.037547 2026] [:error] [pid 53182:tid 53546] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Mon Mar 02 01:17:47.251887 2026] [:error] [pid 53182:tid 53557] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Mar 02 01:17:47.465922 2026] [:error] [pid 53182:tid 53556] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Mon Mar 02 01:17:47.679424 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Mon Mar 02 01:17:47.901080 2026] [:error] [pid 53182:tid 53553] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Mar 02 01:17:48.115918 2026] [:error] [pid 53182:tid 53545] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Mon Mar 02 01:17:48.336232 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Mon Mar 02 01:17:48.568757 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Mar 02 01:17:48.801896 2026] [:error] [pid 53182:tid 53544] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Mon Mar 02 01:17:49.242190 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:58772] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon Mar 02 01:17:49.453291 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:58772] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaR0vfv073cA6eM1YCS_LwAAAMg"]
[Mon Mar 02 01:17:49.876472 2026] [:error] [pid 53585:tid 53600] [client 20.151.11.236:58806] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaR0vXbCvYsvu6kKhM2JfgAAAAw"]
[Mon Mar 02 01:17:50.303476 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:57585] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaR0vnbCvYsvu6kKhM2JgAAAAAo"]
[Mon Mar 02 01:17:50.758027 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:58870] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/06.php"] [unique_id "aaR0vnbCvYsvu6kKhM2JhgAAABM"]
[Mon Mar 02 01:17:51.176561 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:58787] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaR0v3bCvYsvu6kKhM2JiQAAAA8"]
[Mon Mar 02 01:17:51.623356 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:63593] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaR0vzPPJpDOBvYnaa1N-wAAAYc"]
[Mon Mar 02 01:17:52.066058 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:58837] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaR0wBrUg-j5GLDtRFmNcwAAAEc"]
[Mon Mar 02 01:17:52.490603 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:63498] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plss3.php"] [unique_id "aaR0wHbCvYsvu6kKhM2JjgAAABU"]
[Mon Mar 02 01:17:52.929706 2026] [:error] [pid 53585:tid 53597] [client 20.151.11.236:57550] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaR0wHbCvYsvu6kKhM2JkQAAAAk"]
[Mon Mar 02 01:17:53.397330 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:57479] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaR0wXbCvYsvu6kKhM2JlgAAAAY"]
[Mon Mar 02 01:17:53.926578 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:63560] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaR0wYr_0T1SazTrJOAuGgAAAQc"]
[Mon Mar 02 01:17:54.413270 2026] [:error] [pid 26940:tid 26962] [client 20.151.11.236:58775] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aaa.php"] [unique_id "aaR0whrUg-j5GLDtRFmNeAAAAFI"]
[Mon Mar 02 01:17:54.842475 2026] [:error] [pid 53180:tid 53464] [client 20.151.11.236:63490] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaR0wjPPJpDOBvYnaa1OBQAAAZQ"]
[Mon Mar 02 01:17:55.311201 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:57541] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaR0wxrUg-j5GLDtRFmNfgAAAEQ"]
[Mon Mar 02 01:17:55.765068 2026] [:error] [pid 53181:tid 53539] [client 20.151.11.236:58781] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaR0w4r_0T1SazTrJOAuHQAAARg"]
[Mon Mar 02 01:17:56.205076 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:63541] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/classwithtostring.php"] [unique_id "aaR0xBrUg-j5GLDtRFmNggAAAFY"]
[Mon Mar 02 01:17:56.657330 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:57595] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaR0xHbCvYsvu6kKhM2JnAAAABU"]
[Mon Mar 02 01:17:57.286883 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:58755] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaR0xRrUg-j5GLDtRFmNjQAAAEg"]
[Mon Mar 02 01:17:57.730791 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:55883] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaR0xRrUg-j5GLDtRFmNjwAAAE0"]
[Mon Mar 02 01:17:58.384745 2026] [:error] [pid 53181:tid 53521] [client 20.151.11.236:63543] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaR0xor_0T1SazTrJOAuKAAAAQY"]
[Mon Mar 02 01:17:58.811930 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:57584] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaR0xhrUg-j5GLDtRFmNmQAAAEo"]
[Mon Mar 02 01:17:59.245703 2026] [:error] [pid 53585:tid 53597] [client 20.151.11.236:63576] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaR0x3bCvYsvu6kKhM2JoQAAAAk"]
[Mon Mar 02 01:17:59.730713 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:63536] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaR0x3bCvYsvu6kKhM2JpAAAAAY"]
[Mon Mar 02 01:18:00.243878 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:57571] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaR0yBrUg-j5GLDtRFmNpQAAAEo"]
[Mon Mar 02 01:18:00.724015 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:63511] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaR0yBrUg-j5GLDtRFmNqgAAAE8"]
[Mon Mar 02 01:18:01.339627 2026] [:error] [pid 53181:tid 53530] [client 20.151.11.236:58851] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaR0yYr_0T1SazTrJOAuLgAAAQ8"]
[Mon Mar 02 01:18:01.757370 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:57544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaR0yRrUg-j5GLDtRFmNtwAAAEc"]
[Mon Mar 02 01:18:02.374064 2026] [:error] [pid 53181:tid 53533] [client 20.151.11.236:58752] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x.php"] [unique_id "aaR0yor_0T1SazTrJOAuNQAAARI"]
[Mon Mar 02 01:18:02.791896 2026] [:error] [pid 53181:tid 53536] [client 20.151.11.236:63565] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaR0yor_0T1SazTrJOAuNgAAARU"]
[Mon Mar 02 01:18:03.223346 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:58856] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaR0y4r_0T1SazTrJOAuOwAAAQ0"]
[Mon Mar 02 01:18:03.644205 2026] [:error] [pid 53181:tid 53517] [client 20.151.11.236:58874] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaR0y4r_0T1SazTrJOAuPwAAAQM"]
[Mon Mar 02 01:18:04.063341 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:58843] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "aaR0zHbCvYsvu6kKhM2JqQAAAA8"]
[Mon Mar 02 01:18:04.473316 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:63611] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaR0zHbCvYsvu6kKhM2JrQAAAAs"]
[Mon Mar 02 01:18:04.886540 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:58800] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaR0zHbCvYsvu6kKhM2JsQAAAAo"]
[Mon Mar 02 01:18:05.303989 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:58872] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaR0zXbCvYsvu6kKhM2JtAAAAA4"]
[Mon Mar 02 01:18:05.720535 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:58826] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaR0zRrUg-j5GLDtRFmNxAAAAEc"]
[Mon Mar 02 01:18:06.148328 2026] [:error] [pid 53585:tid 53611] [client 20.151.11.236:58766] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0znbCvYsvu6kKhM2JtgAAABc"]
[Mon Mar 02 01:18:06.559328 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:58773] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0znbCvYsvu6kKhM2JuAAAAAg"]
[Mon Mar 02 01:18:06.977100 2026] [:error] [pid 53182:tid 53548] [client 20.151.11.236:63568] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0zvv073cA6eM1YCS_PgAAAMU"]
[Mon Mar 02 01:18:07.388818 2026] [:error] [pid 53180:tid 53461] [client 20.151.11.236:58790] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "aaR0zzPPJpDOBvYnaa1OFwAAAZE"]
[Mon Mar 02 01:18:07.807308 2026] [:error] [pid 53181:tid 53535] [client 20.151.11.236:63513] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaR0z4r_0T1SazTrJOAuSAAAARQ"]
[Mon Mar 02 01:18:08.217230 2026] [:error] [pid 53181:tid 53532] [client 20.151.11.236:58790] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaR00Ir_0T1SazTrJOAuSgAAARE"]
[Mon Mar 02 01:18:08.654887 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:63538] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaR00Pv073cA6eM1YCS_RwAAAMs"]
[Mon Mar 02 01:18:09.069551 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:41674] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-update.php"] [unique_id "aaR00RrUg-j5GLDtRFmNygAAAEw"]
[Mon Mar 02 01:18:09.492971 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:57599] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaR00Yr_0T1SazTrJOAuUAAAAQc"]
[Mon Mar 02 01:18:09.967283 2026] [:error] [pid 53181:tid 53537] [client 20.151.11.236:58821] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaR00Yr_0T1SazTrJOAuUgAAARY"]
[Mon Mar 02 01:18:10.409886 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:57530] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaR00hrUg-j5GLDtRFmN1AAAAE8"]
[Mon Mar 02 01:18:10.858538 2026] [:error] [pid 53180:tid 53455] [client 20.151.11.236:58786] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbhu.php"] [unique_id "aaR00jPPJpDOBvYnaa1OHwAAAYs"]
[Mon Mar 02 01:18:11.309040 2026] [:error] [pid 53180:tid 53464] [client 20.151.11.236:58825] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaR00zPPJpDOBvYnaa1OJAAAAZQ"]
[Mon Mar 02 01:18:11.738309 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63523] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaR003bCvYsvu6kKhM2JxAAAAA4"]
[Mon Mar 02 01:18:12.274893 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:58849] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaR01BrUg-j5GLDtRFmN3QAAAFM"]
[Mon Mar 02 01:18:12.719971 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:63584] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x/"] [unique_id "aaR01Pv073cA6eM1YCS_TQAAANI"]
[Mon Mar 02 01:18:13.234335 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:55910] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaR01XbCvYsvu6kKhM2JyQAAAA8"]
[Mon Mar 02 01:18:13.697178 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:58771] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaR01XbCvYsvu6kKhM2JywAAABE"]
[Mon Mar 02 01:18:14.159189 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:57567] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaR01nbCvYsvu6kKhM2J0AAAAAc"]
[Mon Mar 02 01:18:14.585187 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:63602] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog.php"] [unique_id "aaR01nbCvYsvu6kKhM2J1wAAABI"]
[Mon Mar 02 01:18:15.035826 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:57507] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aaR013bCvYsvu6kKhM2J2wAAABM"]
[Mon Mar 02 01:18:15.465370 2026] [:error] [pid 53180:tid 53453] [client 20.151.11.236:55866] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aaR01zPPJpDOBvYnaa1OKAAAAYk"]
[Mon Mar 02 01:18:15.883810 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:57594] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aaR01xrUg-j5GLDtRFmN5gAAAEw"]
[Mon Mar 02 01:18:16.337727 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:55837] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "aaR02BrUg-j5GLDtRFmN6QAAAEs"]
[Mon Mar 02 01:18:16.749714 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:63528] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaR02BrUg-j5GLDtRFmN7QAAAEo"]
[Mon Mar 02 01:18:17.172658 2026] [:error] [pid 53182:tid 53566] [client 20.151.11.236:63578] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaR02fv073cA6eM1YCS_VgAAANY"]
[Mon Mar 02 01:18:17.588466 2026] [:error] [pid 53181:tid 53527] [client 20.151.11.236:63516] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaR02Yr_0T1SazTrJOAuYwAAAQw"]
[Mon Mar 02 01:18:18.010817 2026] [:error] [pid 53181:tid 53530] [client 20.151.11.236:58824] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaR02or_0T1SazTrJOAuZAAAAQ8"]
[Mon Mar 02 01:18:18.449435 2026] [:error] [pid 53180:tid 53467] [client 20.151.11.236:58792] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaR02jPPJpDOBvYnaa1OLwAAAZc"]
[Mon Mar 02 01:18:18.859792 2026] [:error] [pid 53181:tid 53534] [client 20.151.11.236:63516] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaR02or_0T1SazTrJOAuZgAAARM"]
[Mon Mar 02 01:18:19.279254 2026] [:error] [pid 53182:tid 53547] [client 20.151.11.236:63575] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaR02_v073cA6eM1YCS_XQAAAMQ"]
[Mon Mar 02 01:18:19.707809 2026] [:error] [pid 53182:tid 53545] [client 20.151.11.236:57590] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "aaR02_v073cA6eM1YCS_XwAAAMI"]
[Mon Mar 02 01:18:20.131178 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:58861] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR03HbCvYsvu6kKhM2J_wAAAAY"]
[Mon Mar 02 01:18:20.574371 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:58855] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR03HbCvYsvu6kKhM2KAgAAABg"]
[Mon Mar 02 01:18:21.004900 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:57586] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR03XbCvYsvu6kKhM2KBwAAAAQ"]
[Mon Mar 02 01:18:21.413927 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:58863] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "aaR03fv073cA6eM1YCS_ZQAAANM"]
[Mon Mar 02 01:18:21.829085 2026] [:error] [pid 53182:tid 53559] [client 20.151.11.236:57522] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR03fv073cA6eM1YCS_ZgAAAM8"]
[Mon Mar 02 01:18:22.255267 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:55926] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR03nbCvYsvu6kKhM2KCwAAABM"]
[Mon Mar 02 01:18:22.663506 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:58814] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR03nbCvYsvu6kKhM2KDgAAAAI"]
[Mon Mar 02 01:18:23.082736 2026] [:error] [pid 53180:tid 53454] [client 20.151.11.236:63612] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaR03zPPJpDOBvYnaa1OOAAAAYo"]
[Mon Mar 02 01:18:23.543292 2026] [:error] [pid 53181:tid 53534] [client 20.151.11.236:57499] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR034r_0T1SazTrJOAufAAAARM"]
[Mon Mar 02 01:18:23.972322 2026] [:error] [pid 53181:tid 53533] [client 20.151.11.236:58761] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR034r_0T1SazTrJOAufwAAARI"]
[Mon Mar 02 01:18:24.416938 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:63548] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR04HbCvYsvu6kKhM2KEQAAAA4"]
[Mon Mar 02 01:18:24.827536 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:57569] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR04DPPJpDOBvYnaa1OPQAAAYw"]
[Mon Mar 02 01:18:25.254763 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:63589] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaR04RrUg-j5GLDtRFmN-gAAAFA"]
[Mon Mar 02 01:18:25.718502 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:57589] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaR04XbCvYsvu6kKhM2KFwAAABI"]
[Mon Mar 02 01:18:26.127584 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:57563] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaR04nbCvYsvu6kKhM2KGgAAAAo"]
[Mon Mar 02 01:18:26.543532 2026] [:error] [pid 53585:tid 53600] [client 20.151.11.236:58808] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "aaR04nbCvYsvu6kKhM2KHAAAAAw"]
[Mon Mar 02 01:18:27.054613 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:57515] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaR043bCvYsvu6kKhM2KHwAAAA8"]
[Mon Mar 02 01:18:27.465629 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:58789] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaR043bCvYsvu6kKhM2KIgAAABg"]
[Mon Mar 02 01:18:27.892504 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:57514] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaR04_v073cA6eM1YCS_cAAAAMA"]
[Mon Mar 02 01:18:28.385276 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:58816] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goods.php"] [unique_id "aaR05HbCvYsvu6kKhM2KKAAAAAg"]
[Mon Mar 02 01:18:28.803446 2026] [:error] [pid 53181:tid 53518] [client 20.151.11.236:55881] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR05Ir_0T1SazTrJOAukgAAAQQ"]
[Mon Mar 02 01:18:29.218280 2026] [:error] [pid 53182:tid 53549] [client 20.151.11.236:58842] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR05fv073cA6eM1YCS_dQAAAMY"]
[Mon Mar 02 01:18:29.651982 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58754] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR05RrUg-j5GLDtRFmOAAAAAFQ"]
[Mon Mar 02 01:18:30.073993 2026] [:error] [pid 53182:tid 53556] [client 20.151.11.236:57581] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms-edit.php"] [unique_id "aaR05vv073cA6eM1YCS_dwAAAMw"]
[Mon Mar 02 01:18:30.521421 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58807] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaR05hrUg-j5GLDtRFmOAgAAAEY"]
[Mon Mar 02 01:18:31.220769 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:63553] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaR05_v073cA6eM1YCS_gwAAANQ"]
[Mon Mar 02 01:18:31.712703 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:55840] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaR054r_0T1SazTrJOAumwAAAQc"]
[Mon Mar 02 01:18:32.271435 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:57472] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "aaR06BrUg-j5GLDtRFmOCQAAAEs"]
[Mon Mar 02 01:18:32.717718 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:57549] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaR06BrUg-j5GLDtRFmOEAAAAE4"]
[Mon Mar 02 01:18:33.132231 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:58820] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaR06fv073cA6eM1YCS_jAAAANM"]
[Mon Mar 02 01:18:33.600068 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:41678] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaR06XbCvYsvu6kKhM2KNwAAAAA"]
[Mon Mar 02 01:18:34.009178 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:57511] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plugins.php"] [unique_id "aaR06nbCvYsvu6kKhM2KOgAAAAY"]
[Mon Mar 02 01:18:34.433520 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:58835] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaR06nbCvYsvu6kKhM2KPQAAAA8"]
[Mon Mar 02 01:18:34.877304 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:57562] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaR06nbCvYsvu6kKhM2KQQAAABY"]
[Mon Mar 02 01:18:35.291823 2026] [:error] [pid 53181:tid 53523] [client 20.151.11.236:57502] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaR064r_0T1SazTrJOAuqAAAAQg"]
[Mon Mar 02 01:18:35.706590 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:55821] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/index.php"] [unique_id "aaR064r_0T1SazTrJOAuqwAAAQ0"]
[Mon Mar 02 01:18:36.122320 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:58862] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaR07BrUg-j5GLDtRFmOIAAAAFM"]
[Mon Mar 02 01:18:36.544225 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:63495] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaR07HbCvYsvu6kKhM2KRwAAAAE"]
[Mon Mar 02 01:18:36.986027 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63503] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaR07BrUg-j5GLDtRFmOJAAAAEc"]
[Mon Mar 02 01:18:37.397544 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:57578] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaR07TPPJpDOBvYnaa1OUAAAAYw"]
[Mon Mar 02 01:18:37.811413 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:57556] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaR07fv073cA6eM1YCS_qQAAAMs"]
[Mon Mar 02 01:18:38.227780 2026] [:error] [pid 53180:tid 53451] [client 20.151.11.236:55915] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaR07jPPJpDOBvYnaa1OVwAAAYc"]
[Mon Mar 02 01:18:38.646615 2026] [:error] [pid 53180:tid 53458] [client 20.151.11.236:58783] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaR07jPPJpDOBvYnaa1OWQAAAY4"]
[Mon Mar 02 01:18:39.073191 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:57546] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ff1.php"] [unique_id "aaR07xrUg-j5GLDtRFmOMQAAAEQ"]
[Mon Mar 02 01:18:39.489705 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:58841] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaR07xrUg-j5GLDtRFmONAAAAFg"]
[Mon Mar 02 01:18:39.900733 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:57473] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaR07xrUg-j5GLDtRFmOOQAAAEc"]
[Mon Mar 02 01:18:40.311224 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:57552] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaR08BrUg-j5GLDtRFmOPAAAAFQ"]
[Mon Mar 02 01:18:40.757683 2026] [:error] [pid 53180:tid 53452] [client 20.151.11.236:58850] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fff.php"] [unique_id "aaR08DPPJpDOBvYnaa1OWwAAAYg"]
[Mon Mar 02 01:18:41.175406 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:55891] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaR08XbCvYsvu6kKhM2KUAAAABY"]
[Mon Mar 02 01:18:41.587844 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:57473] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaR08RrUg-j5GLDtRFmOSwAAAEk"]
[Mon Mar 02 01:18:42.012272 2026] [:error] [pid 53585:tid 53597] [client 20.151.11.236:55923] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaR08nbCvYsvu6kKhM2KVAAAAAk"]
[Mon Mar 02 01:18:42.427845 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:58830] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/"] [unique_id "aaR08hrUg-j5GLDtRFmOUQAAAEg"]
[Mon Mar 02 01:18:42.853110 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:63599] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aaR08hrUg-j5GLDtRFmOVgAAAFc"]
[Mon Mar 02 01:18:43.268248 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:57598] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aaR08xrUg-j5GLDtRFmOWgAAAEk"]
[Mon Mar 02 01:18:43.707456 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:57497] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aaR083bCvYsvu6kKhM2KWAAAABQ"]
[Mon Mar 02 01:18:44.153144 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:58774] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/goat.php"] [unique_id "aaR09HbCvYsvu6kKhM2KXwAAAA8"]
[Mon Mar 02 01:18:44.570888 2026] [:error] [pid 53585:tid 53597] [client 20.151.11.236:63529] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aaR09HbCvYsvu6kKhM2KZgAAAAk"]
[Mon Mar 02 01:18:44.984597 2026] [:error] [pid 53181:tid 53516] [client 20.151.11.236:57477] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aaR09Ir_0T1SazTrJOAuyAAAAQI"]
[Mon Mar 02 01:18:45.393550 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58770] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aaR09RrUg-j5GLDtRFmOZAAAAFE"]
[Mon Mar 02 01:18:45.822937 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:55919] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "aaR09RrUg-j5GLDtRFmOaAAAAEc"]
[Mon Mar 02 01:18:46.241696 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58810] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaR09hrUg-j5GLDtRFmObgAAAEY"]
[Mon Mar 02 01:18:46.658584 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:55925] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaR09nbCvYsvu6kKhM2KagAAAAE"]
[Mon Mar 02 01:18:47.067878 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:57593] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaR093bCvYsvu6kKhM2KbgAAABg"]
[Mon Mar 02 01:18:47.480288 2026] [:error] [pid 53182:tid 53553] [client 20.151.11.236:63522] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we.php"] [unique_id "aaR09_v073cA6eM1YCS_0gAAAMo"]
[Mon Mar 02 01:18:47.899491 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:55933] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaR093bCvYsvu6kKhM2KcwAAABY"]
[Mon Mar 02 01:18:48.310767 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58803] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaR0-BrUg-j5GLDtRFmOfAAAAEM"]
[Mon Mar 02 01:18:48.735866 2026] [:error] [pid 26940:tid 26953] [client 20.151.11.236:63551] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alpha.php"] [unique_id "aaR0-BrUg-j5GLDtRFmOfwAAAEk"]
[Mon Mar 02 01:18:49.159521 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Mon Mar 02 01:18:49.374200 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Mar 02 01:18:49.583630 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Mon Mar 02 01:18:50.004915 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Mar 02 01:18:50.428600 2026] [:error] [pid 53585:tid 53590] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Mon Mar 02 01:18:51.056164 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Mar 02 01:18:51.478705 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:58796] File does not exist: /usr/local/apache/htdocs/suspended-page/w4.php
[Mon Mar 02 01:18:51.688787 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:58796] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaR0-3bCvYsvu6kKhM2KkAAAAAA"]
[Mon Mar 02 01:18:52.127695 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:57478] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaR0_BrUg-j5GLDtRFmOiAAAAEM"]
[Mon Mar 02 01:18:52.549353 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:63539] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaR0_BrUg-j5GLDtRFmOiQAAAEg"]
[Mon Mar 02 01:18:52.983552 2026] [:error] [pid 53180:tid 53465] [client 20.151.11.236:57518] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaR0_DPPJpDOBvYnaa1OaAAAAZU"]
[Mon Mar 02 01:18:53.528783 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:41617] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaR0_RrUg-j5GLDtRFmOkQAAAFc"]
[Mon Mar 02 01:18:53.970195 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:58827] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaR0_Yr_0T1SazTrJOAu_QAAAQ0"]
[Mon Mar 02 01:18:54.428736 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:57517] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaR0_hrUg-j5GLDtRFmOmQAAAEs"]
[Mon Mar 02 01:18:54.976994 2026] [:error] [pid 53181:tid 53517] [client 20.151.11.236:57570] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ok.php"] [unique_id "aaR0_or_0T1SazTrJOAvAgAAAQM"]
[Mon Mar 02 01:18:55.413617 2026] [:error] [pid 53182:tid 53550] [client 20.151.11.236:58829] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaR0__v073cA6eM1YCS_2QAAAMc"]
[Mon Mar 02 01:18:55.842909 2026] [:error] [pid 53182:tid 53551] [client 20.151.11.236:58795] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaR0__v073cA6eM1YCS_3AAAAMg"]
[Mon Mar 02 01:18:56.391579 2026] [:error] [pid 53182:tid 53557] [client 20.151.11.236:58753] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaR1APv073cA6eM1YCS_3wAAAM0"]
[Mon Mar 02 01:18:56.902680 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:63493] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "aaR1AHbCvYsvu6kKhM2KmQAAAAU"]
[Mon Mar 02 01:18:57.364402 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:55921] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tymn.php"] [unique_id "aaR1ARrUg-j5GLDtRFmOpQAAAE4"]
[Mon Mar 02 01:18:58.047321 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58762] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tymn.php"] [unique_id "aaR1AhrUg-j5GLDtRFmOqAAAAEs"]
[Mon Mar 02 01:18:58.502207 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:55931] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tymn.php"] [unique_id "aaR1AhrUg-j5GLDtRFmOqgAAAFM"]
[Mon Mar 02 01:18:59.274074 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:57482] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tymn.php"] [unique_id "aaR1A3bCvYsvu6kKhM2KnQAAAAA"]
[Mon Mar 02 01:19:00.257150 2026] [:error] [pid 53181:tid 53538] [client 20.151.11.236:57492] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaR1BIr_0T1SazTrJOAvHAAAARc"]
[Mon Mar 02 01:19:01.227202 2026] [:error] [pid 53182:tid 53557] [client 20.151.11.236:57565] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaR1Bfv073cA6eM1YCS_8gAAAM0"]
[Mon Mar 02 01:19:01.808160 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:57520] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaR1BRrUg-j5GLDtRFmOuQAAAFE"]
[Mon Mar 02 01:19:02.228649 2026] [:error] [pid 53585:tid 53603] [client 20.151.11.236:41673] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bak.php"] [unique_id "aaR1BnbCvYsvu6kKhM2KogAAAA8"]
[Mon Mar 02 01:19:02.704169 2026] [:error] [pid 53585:tid 53589] [client 20.151.11.236:57580] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaR1BnbCvYsvu6kKhM2KpgAAAAE"]
[Mon Mar 02 01:19:03.163412 2026] [:error] [pid 53182:tid 53543] [client 20.151.11.236:57476] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaR1B_v073cA6eM1YCS_9gAAAMA"]
[Mon Mar 02 01:19:03.638700 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:58834] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaR1BxrUg-j5GLDtRFmOvgAAAEU"]
[Mon Mar 02 01:19:04.059353 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:55809] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaR1CBrUg-j5GLDtRFmOwgAAAFU"]
[Mon Mar 02 01:19:04.492712 2026] [:error] [pid 53180:tid 53455] [client 20.151.11.236:63530] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aaR1CDPPJpDOBvYnaa1OcwAAAYs"]
[Mon Mar 02 01:19:04.999031 2026] [:error] [pid 53180:tid 53458] [client 20.151.11.236:57513] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aaR1CDPPJpDOBvYnaa1OdwAAAY4"]
[Mon Mar 02 01:19:05.414178 2026] [:error] [pid 53180:tid 53452] [client 20.151.11.236:57498] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aaR1CTPPJpDOBvYnaa1OegAAAYg"]
[Mon Mar 02 01:19:05.897311 2026] [:error] [pid 53585:tid 53588] [client 20.151.11.236:63540] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fe5.php"] [unique_id "aaR1CXbCvYsvu6kKhM2KrwAAAAA"]
[Mon Mar 02 01:19:06.307040 2026] [:error] [pid 53585:tid 53607] [client 20.151.11.236:58812] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaR1CnbCvYsvu6kKhM2KsQAAABM"]
[Mon Mar 02 01:19:06.738173 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:57474] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaR1CjPPJpDOBvYnaa1OfQAAAYM"]
[Mon Mar 02 01:19:07.172361 2026] [:error] [pid 53182:tid 53558] [client 20.151.11.236:55846] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaR1C_v073cA6eM1YCS__wAAAM4"]
[Mon Mar 02 01:19:07.582053 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:55817] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "aaR1C3bCvYsvu6kKhM2KtAAAABE"]
[Mon Mar 02 01:19:07.994513 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:58799] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaR1CxrUg-j5GLDtRFmO1QAAAEw"]
[Mon Mar 02 01:19:08.423235 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:63537] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaR1DPv073cA6eM1YCTABAAAANM"]
[Mon Mar 02 01:19:08.937529 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:57495] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaR1DBrUg-j5GLDtRFmO3QAAAEY"]
[Mon Mar 02 01:19:09.404125 2026] [:error] [pid 53181:tid 53526] [client 20.151.11.236:57547] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaR1DYr_0T1SazTrJOAvMwAAAQs"]
[Mon Mar 02 01:19:09.869155 2026] [:error] [pid 53181:tid 53535] [client 20.151.11.236:57537] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR1DYr_0T1SazTrJOAvNwAAARQ"]
[Mon Mar 02 01:19:10.364726 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:63570] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR1Dor_0T1SazTrJOAvOwAAAQo"]
[Mon Mar 02 01:19:10.814220 2026] [:error] [pid 53182:tid 53565] [client 20.151.11.236:63531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR1Dvv073cA6eM1YCTABgAAANU"]
[Mon Mar 02 01:19:11.389032 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:55816] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av.php"] [unique_id "aaR1DxrUg-j5GLDtRFmO5wAAAFc"]
[Mon Mar 02 01:19:11.885570 2026] [:error] [pid 53585:tid 53602] [client 20.151.11.236:57528] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaR1D3bCvYsvu6kKhM2KtgAAAA4"]
[Mon Mar 02 01:19:12.685764 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57568] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaR1EBrUg-j5GLDtRFmO8wAAAEE"]
[Mon Mar 02 01:19:13.226852 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58777] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaR1ERrUg-j5GLDtRFmO-gAAAE0"]
[Mon Mar 02 01:19:14.121357 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:55894] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abcd.php"] [unique_id "aaR1EhrUg-j5GLDtRFmPBgAAAE4"]
[Mon Mar 02 01:19:14.910936 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58876] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaR1EhrUg-j5GLDtRFmPEAAAAEM"]
[Mon Mar 02 01:19:16.753250 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:58794] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaR1FBrUg-j5GLDtRFmPHwAAAEs"]
[Mon Mar 02 01:19:17.375898 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:63545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaR1FRrUg-j5GLDtRFmPJwAAAFA"]
[Mon Mar 02 01:19:18.214830 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:41707] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/init.php"] [unique_id "aaR1FhrUg-j5GLDtRFmPMAAAAEA"]
[Mon Mar 02 01:19:18.733864 2026] [:error] [pid 53585:tid 53600] [client 20.151.11.236:55902] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaR1FnbCvYsvu6kKhM2KwwAAAAw"]
[Mon Mar 02 01:19:19.186459 2026] [:error] [pid 53180:tid 53453] [client 20.151.11.236:58785] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaR1FzPPJpDOBvYnaa1OjQAAAYk"]
[Mon Mar 02 01:19:19.639724 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:41687] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaR1F4r_0T1SazTrJOAvRQAAAQc"]
[Mon Mar 02 01:19:20.109405 2026] [:error] [pid 53181:tid 53536] [client 20.151.11.236:55850] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fi.php"] [unique_id "aaR1GIr_0T1SazTrJOAvRwAAARU"]
[Mon Mar 02 01:19:20.560672 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:55847] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaR1GHbCvYsvu6kKhM2KxQAAAAc"]
[Mon Mar 02 01:19:20.995916 2026] [:error] [pid 53182:tid 53548] [client 20.151.11.236:55878] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaR1GPv073cA6eM1YCTAEgAAAMU"]
[Mon Mar 02 01:19:21.478999 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:57533] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaR1GXbCvYsvu6kKhM2KzQAAABU"]
[Mon Mar 02 01:19:21.923205 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:55907] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a1.php"] [unique_id "aaR1GRrUg-j5GLDtRFmPTgAAAEc"]
[Mon Mar 02 01:19:22.446747 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:55914] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaR1GhrUg-j5GLDtRFmPUwAAAFc"]
[Mon Mar 02 01:19:22.884878 2026] [:error] [pid 53182:tid 53567] [client 20.151.11.236:58763] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaR1Gvv073cA6eM1YCTAFQAAANc"]
[Mon Mar 02 01:19:23.325002 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:63488] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaR1GxrUg-j5GLDtRFmPWgAAAFU"]
[Mon Mar 02 01:19:23.861333 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:41664] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/update/f35.php"] [unique_id "aaR1GzPPJpDOBvYnaa1OkgAAAYw"]
[Mon Mar 02 01:19:24.275478 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:63512] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaR1HBrUg-j5GLDtRFmPYgAAAEE"]
[Mon Mar 02 01:19:24.707871 2026] [:error] [pid 53181:tid 53524] [client 20.151.11.236:57521] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaR1HIr_0T1SazTrJOAvSgAAAQk"]
[Mon Mar 02 01:19:25.134263 2026] [:error] [pid 53585:tid 53610] [client 20.151.11.236:55808] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaR1HXbCvYsvu6kKhM2K1AAAABY"]
[Mon Mar 02 01:19:25.612783 2026] [:error] [pid 26940:tid 26947] [client 20.151.11.236:58798] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/f35.php"] [unique_id "aaR1HRrUg-j5GLDtRFmPaAAAAEM"]
[Mon Mar 02 01:19:26.046087 2026] [:error] [pid 26940:tid 26965] [client 20.151.11.236:57488] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hi.php"] [unique_id "aaR1HhrUg-j5GLDtRFmPbAAAAFU"]
[Mon Mar 02 01:19:26.485167 2026] [:error] [pid 53182:tid 53559] [client 20.151.11.236:57525] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hi.php"] [unique_id "aaR1Hvv073cA6eM1YCTAHAAAAM8"]
[Mon Mar 02 01:19:26.898891 2026] [:error] [pid 26940:tid 26948] [client 20.151.11.236:58848] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hi.php"] [unique_id "aaR1HhrUg-j5GLDtRFmPcwAAAEQ"]
[Mon Mar 02 01:19:27.322803 2026] [:error] [pid 53182:tid 53545] [client 20.151.11.236:57576] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hi.php"] [unique_id "aaR1H_v073cA6eM1YCTAHwAAAMI"]
[Mon Mar 02 01:19:27.748374 2026] [:error] [pid 53182:tid 53558] [client 20.151.11.236:41615] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaR1H_v073cA6eM1YCTAIQAAAM4"]
[Mon Mar 02 01:19:28.165883 2026] [:error] [pid 53180:tid 53468] [client 20.151.11.236:63590] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaR1IDPPJpDOBvYnaa1OmQAAAZg"]
[Mon Mar 02 01:19:28.577605 2026] [:error] [pid 53180:tid 53452] [client 20.151.11.236:58868] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaR1IDPPJpDOBvYnaa1OnAAAAYg"]
[Mon Mar 02 01:19:29.016916 2026] [:error] [pid 53180:tid 53450] [client 20.151.11.236:55851] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lala.php"] [unique_id "aaR1ITPPJpDOBvYnaa1OnQAAAYY"]
[Mon Mar 02 01:19:29.427622 2026] [:error] [pid 53182:tid 53549] [client 20.151.11.236:57573] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaR1Ifv073cA6eM1YCTAJwAAAMY"]
[Mon Mar 02 01:19:29.840289 2026] [:error] [pid 53181:tid 53528] [client 20.151.11.236:57519] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaR1IYr_0T1SazTrJOAvVwAAAQ0"]
[Mon Mar 02 01:19:30.253674 2026] [:error] [pid 53585:tid 53591] [client 20.151.11.236:57583] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaR1InbCvYsvu6kKhM2K2wAAAAM"]
[Mon Mar 02 01:19:30.687504 2026] [:error] [pid 53182:tid 53555] [client 20.151.11.236:55815] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lb.php"] [unique_id "aaR1Ivv073cA6eM1YCTALQAAAMs"]
[Mon Mar 02 01:19:31.108737 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:58778] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaR1I3bCvYsvu6kKhM2K3AAAABA"]
[Mon Mar 02 01:19:31.537099 2026] [:error] [pid 53182:tid 53558] [client 20.151.11.236:58805] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaR1I_v073cA6eM1YCTAMwAAAM4"]
[Mon Mar 02 01:19:31.971834 2026] [:error] [pid 53585:tid 53606] [client 20.151.11.236:58759] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaR1I3bCvYsvu6kKhM2K3wAAABI"]
[Mon Mar 02 01:19:32.383303 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:57489] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaR1JBrUg-j5GLDtRFmPlAAAAEY"]
[Mon Mar 02 01:19:32.799385 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:57572] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaR1JDPPJpDOBvYnaa1OpgAAAYw"]
[Mon Mar 02 01:19:33.238342 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:57597] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaR1JRrUg-j5GLDtRFmPmQAAAFc"]
[Mon Mar 02 01:19:33.658896 2026] [:error] [pid 53182:tid 53565] [client 20.151.11.236:55892] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaR1Jfv073cA6eM1YCTAOgAAANU"]
[Mon Mar 02 01:19:34.144593 2026] [:error] [pid 53585:tid 53608] [client 20.151.11.236:40141] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/0.php"] [unique_id "aaR1JnbCvYsvu6kKhM2K5gAAABQ"]
[Mon Mar 02 01:19:34.566697 2026] [:error] [pid 53585:tid 53609] [client 20.151.11.236:55932] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaR1JnbCvYsvu6kKhM2K6wAAABU"]
[Mon Mar 02 01:19:35.020458 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:57579] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaR1J3bCvYsvu6kKhM2K7wAAAAY"]
[Mon Mar 02 01:19:35.436815 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:55854] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaR1J3bCvYsvu6kKhM2K9AAAABE"]
[Mon Mar 02 01:19:35.857788 2026] [:error] [pid 53180:tid 53455] [client 20.151.11.236:57481] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaR1JzPPJpDOBvYnaa1OqgAAAYs"]
[Mon Mar 02 01:19:36.285133 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:57592] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR1KBrUg-j5GLDtRFmPpQAAAFM"]
[Mon Mar 02 01:19:36.714119 2026] [:error] [pid 53182:tid 53552] [client 20.151.11.236:55860] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR1KPv073cA6eM1YCTAQAAAAMk"]
[Mon Mar 02 01:19:37.130056 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:57490] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR1KRrUg-j5GLDtRFmPrAAAAFY"]
[Mon Mar 02 01:19:37.551870 2026] [:error] [pid 26940:tid 26959] [client 20.151.11.236:41637] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/autogooey.php"] [unique_id "aaR1KRrUg-j5GLDtRFmPrwAAAE8"]
[Mon Mar 02 01:19:37.969048 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:55929] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaR1KRrUg-j5GLDtRFmPswAAAEw"]
[Mon Mar 02 01:19:38.415858 2026] [:error] [pid 53180:tid 53465] [client 20.151.11.236:58873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaR1KjPPJpDOBvYnaa1OrAAAAZU"]
[Mon Mar 02 01:19:38.922226 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:55890] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaR1KhrUg-j5GLDtRFmPvgAAAFg"]
[Mon Mar 02 01:19:39.334331 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:63573] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaR1KxrUg-j5GLDtRFmPwwAAAEc"]
[Mon Mar 02 01:19:39.748077 2026] [:error] [pid 26940:tid 26955] [client 20.151.11.236:55905] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaR1KxrUg-j5GLDtRFmPxwAAAEs"]
[Mon Mar 02 01:19:40.194632 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:57524] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaR1LBrUg-j5GLDtRFmPzQAAAFY"]
[Mon Mar 02 01:19:40.625319 2026] [:error] [pid 53182:tid 53562] [client 20.151.11.236:57542] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaR1LPv073cA6eM1YCTASgAAANI"]
[Mon Mar 02 01:19:41.052485 2026] [:error] [pid 53181:tid 53537] [client 20.151.11.236:57501] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/prv8.php"] [unique_id "aaR1LYr_0T1SazTrJOAvXQAAARY"]
[Mon Mar 02 01:19:41.496152 2026] [:error] [pid 53182:tid 53563] [client 20.151.11.236:57535] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaR1Lfv073cA6eM1YCTATgAAANM"]
[Mon Mar 02 01:19:41.918360 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.236:58836] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaR1Lfv073cA6eM1YCTAUwAAANE"]
[Mon Mar 02 01:19:42.407289 2026] [:error] [pid 53181:tid 53523] [client 20.151.11.236:57531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaR1Lor_0T1SazTrJOAvYAAAAQg"]
[Mon Mar 02 01:19:42.841357 2026] [:error] [pid 53181:tid 53514] [client 20.151.11.236:57523] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/k.php"] [unique_id "aaR1Lor_0T1SazTrJOAvYQAAAQA"]
[Mon Mar 02 01:19:43.311896 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:41712] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev.php"] [unique_id "aaR1L3bCvYsvu6kKhM2K_gAAABA"]
[Mon Mar 02 01:19:43.856881 2026] [:error] [pid 53182:tid 53564] [client 20.151.11.236:41721] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev.php"] [unique_id "aaR1L_v073cA6eM1YCTAWAAAANQ"]
[Mon Mar 02 01:19:44.482533 2026] [:error] [pid 53585:tid 53594] [client 20.151.11.236:41694] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev.php"] [unique_id "aaR1MHbCvYsvu6kKhM2LAAAAAAY"]
[Mon Mar 02 01:19:44.952453 2026] [:error] [pid 26940:tid 26966] [client 20.151.11.236:55858] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dev.php"] [unique_id "aaR1MBrUg-j5GLDtRFmP4AAAAFY"]
[Mon Mar 02 01:19:45.405767 2026] [:error] [pid 53182:tid 53567] [client 20.151.11.236:63556] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaR1Mfv073cA6eM1YCTAXAAAANc"]
[Mon Mar 02 01:19:45.853157 2026] [:error] [pid 53585:tid 53605] [client 20.151.11.236:41721] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaR1MXbCvYsvu6kKhM2LBQAAABE"]
[Mon Mar 02 01:19:46.293130 2026] [:error] [pid 53181:tid 53522] [client 20.151.11.236:57510] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaR1Mor_0T1SazTrJOAvagAAAQc"]
[Mon Mar 02 01:19:46.794116 2026] [:error] [pid 53182:tid 53559] [client 20.151.11.236:57569] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaR1Mvv073cA6eM1YCTAYQAAAM8"]
[Mon Mar 02 01:19:47.382902 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:41627] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaR1MxrUg-j5GLDtRFmP6AAAAEA"]
[Mon Mar 02 01:19:47.819252 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:57554] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaR1MxrUg-j5GLDtRFmP7gAAAEE"]
[Mon Mar 02 01:19:48.282023 2026] [:error] [pid 53182:tid 53561] [client 20.151.11.236:55886] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaR1NPv073cA6eM1YCTAYwAAANE"]
[Mon Mar 02 01:19:48.691274 2026] [:error] [pid 53182:tid 53546] [client 20.151.11.236:41602] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bal.php"] [unique_id "aaR1NPv073cA6eM1YCTAZAAAAMM"]
[Mon Mar 02 01:19:49.099973 2026] [:error] [pid 26940:tid 26949] [client 20.151.11.236:41682] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaR1NRrUg-j5GLDtRFmP-AAAAEU"]
[Mon Mar 02 01:19:49.746322 2026] [:error] [pid 26940:tid 26956] [client 20.151.11.236:63531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaR1NRrUg-j5GLDtRFmP_QAAAEw"]
[Mon Mar 02 01:19:50.217928 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:55928] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaR1NhrUg-j5GLDtRFmP_wAAAEE"]
[Mon Mar 02 01:19:50.762155 2026] [:error] [pid 26940:tid 26946] [client 20.151.11.236:58784] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/in.php"] [unique_id "aaR1NhrUg-j5GLDtRFmQAgAAAEI"]
[Mon Mar 02 01:19:51.254841 2026] [:error] [pid 26940:tid 26967] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Mon Mar 02 01:19:51.633827 2026] [:error] [pid 26940:tid 26952] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Mon Mar 02 01:19:51.842485 2026] [:error] [pid 26940:tid 26968] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Mon Mar 02 01:19:52.059073 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Mon Mar 02 01:19:52.265987 2026] [:error] [pid 26940:tid 26961] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Mon Mar 02 01:19:52.491811 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/miansha.php
[Mon Mar 02 01:19:52.721407 2026] [:error] [pid 26940:tid 26964] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Mon Mar 02 01:19:53.165590 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/X57.php
[Mon Mar 02 01:19:53.373569 2026] [:error] [pid 26940:tid 26950] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Mon Mar 02 01:19:53.588370 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:58873] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Mon Mar 02 01:19:53.792536 2026] [:error] [pid 26940:tid 26957] [client 20.151.11.236:58873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaR1ORrUg-j5GLDtRFmQGAAAAE0"]
[Mon Mar 02 01:19:54.470743 2026] [:error] [pid 53181:tid 53526] [client 20.151.11.236:55861] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaR1Oor_0T1SazTrJOAvjQAAAQs"]
[Mon Mar 02 01:19:54.993030 2026] [:error] [pid 26940:tid 26951] [client 20.151.11.236:41699] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaR1OhrUg-j5GLDtRFmQHAAAAEc"]
[Mon Mar 02 01:19:55.521572 2026] [:error] [pid 26940:tid 26954] [client 20.151.11.236:55875] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/myfile.php"] [unique_id "aaR1OxrUg-j5GLDtRFmQIAAAAEo"]
[Mon Mar 02 01:19:55.937923 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:41705] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaR1OxrUg-j5GLDtRFmQIQAAAFM"]
[Mon Mar 02 01:19:56.512702 2026] [:error] [pid 53181:tid 53519] [client 20.151.11.236:57543] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaR1PIr_0T1SazTrJOAvlAAAAQU"]
[Mon Mar 02 01:19:56.987880 2026] [:error] [pid 53181:tid 53533] [client 20.151.11.236:41604] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaR1PIr_0T1SazTrJOAvlwAAARI"]
[Mon Mar 02 01:19:57.570096 2026] [:error] [pid 53182:tid 53544] [client 20.151.11.236:55839] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/re.php"] [unique_id "aaR1Pfv073cA6eM1YCTAbAAAAME"]
[Mon Mar 02 01:19:58.069852 2026] [:error] [pid 53180:tid 53455] [client 20.151.11.236:41649] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaR1PjPPJpDOBvYnaa1OuQAAAYs"]
[Mon Mar 02 01:19:58.544584 2026] [:error] [pid 26940:tid 26944] [client 20.151.11.236:55853] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaR1PhrUg-j5GLDtRFmQLwAAAEA"]
[Mon Mar 02 01:19:59.072328 2026] [:error] [pid 53182:tid 53565] [client 20.151.11.236:57527] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaR1P_v073cA6eM1YCTAcQAAANU"]
[Mon Mar 02 01:19:59.679114 2026] [:error] [pid 53182:tid 53547] [client 20.151.11.236:55811] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/styll.php"] [unique_id "aaR1P_v073cA6eM1YCTAdAAAAMQ"]
[Mon Mar 02 01:20:00.300350 2026] [:error] [pid 53585:tid 53604] [client 20.151.11.236:41643] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aaR1QHbCvYsvu6kKhM2LEQAAABA"]
[Mon Mar 02 01:20:00.897680 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:55911] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aaR1QHbCvYsvu6kKhM2LEwAAAA0"]
[Mon Mar 02 01:20:01.614859 2026] [:error] [pid 26940:tid 26960] [client 20.151.11.236:41691] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aaR1QRrUg-j5GLDtRFmQNwAAAFA"]
[Mon Mar 02 01:20:02.240056 2026] [:error] [pid 53180:tid 53447] [client 20.151.11.236:57534] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower.php"] [unique_id "aaR1QjPPJpDOBvYnaa1OwgAAAYM"]
[Mon Mar 02 01:20:02.873554 2026] [:error] [pid 26940:tid 26945] [client 20.151.11.236:55822] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aaR1QhrUg-j5GLDtRFmQPAAAAEE"]
[Mon Mar 02 01:20:03.659078 2026] [:error] [pid 53585:tid 53599] [client 20.151.11.236:55920] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aaR1Q3bCvYsvu6kKhM2LGwAAAAs"]
[Mon Mar 02 01:20:04.176895 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:55876] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aaR1RHbCvYsvu6kKhM2LHQAAAAU"]
[Mon Mar 02 01:20:04.749849 2026] [:error] [pid 53181:tid 53527] [client 20.151.11.236:57596] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/flower2.php"] [unique_id "aaR1RIr_0T1SazTrJOAvqwAAAQw"]
[Mon Mar 02 01:20:05.219460 2026] [:error] [pid 53180:tid 53445] [client 20.151.11.236:55918] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaR1RTPPJpDOBvYnaa1OxgAAAYE"]
[Mon Mar 02 01:20:05.836643 2026] [:error] [pid 26940:tid 26963] [client 20.151.11.236:57516] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaR1RRrUg-j5GLDtRFmQRAAAAFM"]
[Mon Mar 02 01:20:06.492844 2026] [:error] [pid 26940:tid 26958] [client 20.151.11.236:55867] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaR1RhrUg-j5GLDtRFmQRwAAAE4"]
[Mon Mar 02 01:20:06.918283 2026] [:error] [pid 53181:tid 53525] [client 20.151.11.236:55896] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/4h.php"] [unique_id "aaR1Ror_0T1SazTrJOAvsQAAAQo"]
[Mon Mar 02 01:20:07.362939 2026] [:error] [pid 53181:tid 53521] [client 20.151.11.236:41722] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aaR1R4r_0T1SazTrJOAvsgAAAQY"]
[Mon Mar 02 01:20:07.817441 2026] [:error] [pid 53585:tid 53601] [client 20.151.11.236:57588] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aaR1R3bCvYsvu6kKhM2LJgAAAA0"]
[Mon Mar 02 01:20:08.295096 2026] [:error] [pid 53585:tid 53595] [client 20.151.11.236:57496] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aaR1SHbCvYsvu6kKhM2LKQAAAAc"]
[Mon Mar 02 01:20:08.709431 2026] [:error] [pid 53180:tid 53456] [client 20.151.11.236:41681] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "aaR1SDPPJpDOBvYnaa1OyAAAAYw"]
[Mon Mar 02 01:20:09.159520 2026] [:error] [pid 53585:tid 53592] [client 20.151.11.236:55869] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaR1SXbCvYsvu6kKhM2LLQAAAAQ"]
[Mon Mar 02 01:20:09.601611 2026] [:error] [pid 53585:tid 53612] [client 20.151.11.236:58797] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaR1SXbCvYsvu6kKhM2LMQAAABg"]
[Mon Mar 02 01:20:10.014291 2026] [:error] [pid 53585:tid 53593] [client 20.151.11.236:57555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaR1SnbCvYsvu6kKhM2LMgAAAAU"]
[Mon Mar 02 01:20:10.462590 2026] [:error] [pid 53585:tid 53591] [client 20.151.11.236:55873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaR1SnbCvYsvu6kKhM2LNQAAAAM"]
[Mon Mar 02 01:20:10.902731 2026] [:error] [pid 53585:tid 53598] [client 20.151.11.236:55924] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/database.php"] [unique_id "aaR1SnbCvYsvu6kKhM2LOAAAAAo"]
[Mon Mar 02 01:20:11.332816 2026] [:error] [pid 53182:tid 53568] [client 20.151.11.236:58809] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/database.php"] [unique_id "aaR1S_v073cA6eM1YCTAeAAAANg"]
[Mon Mar 02 01:20:11.776976 2026] [:error] [pid 53182:tid 53552] [client 20.151.11.236:41716] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/database.php"] [unique_id "aaR1S_v073cA6eM1YCTAfAAAAMk"]
[Mon Mar 02 01:20:12.219321 2026] [:error] [pid 53585:tid 53596] [client 20.151.11.236:58846] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/database.php"] [unique_id "aaR1THbCvYsvu6kKhM2LQQAAAAg"]
[Mon Mar 02 01:43:52.144011 2026] [:error] [pid 53181:tid 53532] [client 147.135.252.177:50930] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaR62Ir_0T1SazTrJOA7MQAAARE"]
[Mon Mar 02 01:43:54.294634 2026] [:error] [pid 53180:tid 53459] [client 147.135.252.177:56088] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaR62jPPJpDOBvYnaa1XPwAAAY8"]
[Mon Mar 02 01:43:56.521443 2026] [:error] [pid 26940:tid 26965] [client 147.135.252.177:56104] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaR63BrUg-j5GLDtRFmrTQAAAFU"]
[Mon Mar 02 01:43:58.611263 2026] [:error] [pid 53181:tid 53522] [client 147.135.252.177:56120] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaR63or_0T1SazTrJOA7RgAAAQc"]
[Mon Mar 02 01:44:00.692504 2026] [:error] [pid 53182:tid 53559] [client 147.135.252.177:56124] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaR64Pv073cA6eM1YCTOogAAAM8"]
[Mon Mar 02 01:44:02.797632 2026] [:error] [pid 26940:tid 26955] [client 147.135.252.177:56126] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaR64hrUg-j5GLDtRFmrkgAAAEs"]
[Mon Mar 02 01:44:04.806540 2026] [:error] [pid 53585:tid 53603] [client 147.135.252.177:60820] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaR65HbCvYsvu6kKhM2ejAAAAA8"]
[Mon Mar 02 01:44:06.856447 2026] [:error] [pid 53585:tid 53592] [client 147.135.252.177:60832] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaR65nbCvYsvu6kKhM2engAAAAQ"]
[Mon Mar 02 01:44:08.990067 2026] [:error] [pid 26940:tid 26953] [client 147.135.252.177:60838] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaR66BrUg-j5GLDtRFmrzQAAAEk"]
[Mon Mar 02 01:44:11.070426 2026] [:error] [pid 53182:tid 53546] [client 147.135.252.177:60850] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaR66_v073cA6eM1YCTOvQAAAMM"]
[Mon Mar 02 01:44:13.051776 2026] [:error] [pid 53585:tid 53607] [client 147.135.252.177:60856] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaR67XbCvYsvu6kKhM2evwAAABM"]
[Mon Mar 02 01:44:14.975095 2026] [:error] [pid 53585:tid 53589] [client 147.135.252.177:35740] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaR67nbCvYsvu6kKhM2ezwAAAAE"]
[Mon Mar 02 01:44:16.915512 2026] [:error] [pid 53585:tid 53598] [client 147.135.252.177:35742] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaR68HbCvYsvu6kKhM2e2gAAAAo"]
[Mon Mar 02 01:44:18.853075 2026] [:error] [pid 53585:tid 53610] [client 147.135.252.177:35752] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaR68nbCvYsvu6kKhM2e4wAAABY"]
[Mon Mar 02 01:44:20.798285 2026] [:error] [pid 53585:tid 53588] [client 147.135.252.177:35758] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaR69HbCvYsvu6kKhM2e7gAAAAA"]
[Mon Mar 02 01:44:22.704763 2026] [:error] [pid 53585:tid 53609] [client 147.135.252.177:35760] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaR69nbCvYsvu6kKhM2e_wAAABU"]
[Mon Mar 02 01:44:24.625819 2026] [:error] [pid 53585:tid 53599] [client 147.135.252.177:33540] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaR6-HbCvYsvu6kKhM2fHgAAAAs"]
[Mon Mar 02 01:44:26.549108 2026] [:error] [pid 53182:tid 53560] [client 147.135.252.177:33552] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aaR6-vv073cA6eM1YCTPBQAAANA"]
[Mon Mar 02 01:44:28.426014 2026] [:error] [pid 26940:tid 26963] [client 147.135.252.177:33562] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaR6_BrUg-j5GLDtRFmsWQAAAFM"]
[Mon Mar 02 01:44:30.414258 2026] [:error] [pid 53180:tid 53463] [client 147.135.252.177:33576] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaR6_jPPJpDOBvYnaa1XdQAAAZM"]
[Mon Mar 02 01:44:32.405870 2026] [:error] [pid 53181:tid 53521] [client 147.135.252.177:33578] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaR7AIr_0T1SazTrJOA7sgAAAQY"]
[Mon Mar 02 01:44:34.241008 2026] [:error] [pid 53585:tid 53595] [client 147.135.252.177:41802] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaR7AnbCvYsvu6kKhM2fQgAAAAc"]
[Mon Mar 02 01:44:36.234098 2026] [:error] [pid 53180:tid 53446] [client 147.135.252.177:41810] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaR7BDPPJpDOBvYnaa1XlQAAAYI"]
[Mon Mar 02 01:44:38.351148 2026] [:error] [pid 53182:tid 53559] [client 147.135.252.177:41816] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaR7Bvv073cA6eM1YCTPNQAAAM8"]
[Mon Mar 02 01:44:40.441197 2026] [:error] [pid 53585:tid 53606] [client 147.135.252.177:41830] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaR7CHbCvYsvu6kKhM2fVwAAABI"]
[Mon Mar 02 01:44:42.393320 2026] [:error] [pid 26940:tid 26947] [client 147.135.252.177:41846] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aaR7ChrUg-j5GLDtRFmsmAAAAEM"]
[Mon Mar 02 01:44:44.349731 2026] [:error] [pid 53181:tid 53514] [client 147.135.252.177:55912] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaR7DIr_0T1SazTrJOA71AAAAQA"]
[Mon Mar 02 01:44:46.419663 2026] [:error] [pid 53180:tid 53451] [client 147.135.252.177:55922] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aaR7DjPPJpDOBvYnaa1XwgAAAYc"]
[Mon Mar 02 01:44:48.523489 2026] [:error] [pid 53585:tid 53610] [client 147.135.252.177:55938] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaR7EHbCvYsvu6kKhM2ffwAAABY"]
[Mon Mar 02 01:45:09.014033 2026] [:error] [pid 53585:tid 53588] [client 147.135.252.177:55940] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaR7JXbCvYsvu6kKhM2giAAAAAA"]
[Mon Mar 02 01:45:10.931052 2026] [:error] [pid 53182:tid 53544] [client 147.135.252.177:51336] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaR7Jvv073cA6eM1YCTPkQAAAME"]
[Mon Mar 02 01:45:12.726336 2026] [:error] [pid 26940:tid 26953] [client 147.135.252.177:51348] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaR7KBrUg-j5GLDtRFmt7wAAAEk"]
[Mon Mar 02 01:45:14.702031 2026] [:error] [pid 53182:tid 53567] [client 147.135.252.177:40868] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaR7Kvv073cA6eM1YCTPoAAAANc"]
[Mon Mar 02 01:45:18.086798 2026] [:error] [pid 53585:tid 53595] [client 147.135.252.177:40888] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaR7LnbCvYsvu6kKhM2gwQAAAAc"]
[Mon Mar 02 01:45:21.988719 2026] [:error] [pid 53585:tid 53606] [client 147.135.252.177:40914] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaR7MXbCvYsvu6kKhM2g1gAAABI"]
[Mon Mar 02 03:01:07.284550 2026] [:error] [pid 26940:tid 26945] [client 52.169.119.118:4920] [client 52.169.119.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaSM8xrUg-j5GLDtRFkapAAAAEE"]
[Mon Mar 02 03:01:07.791259 2026] [:error] [pid 53182:tid 53559] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 03:01:08.298589 2026] [:error] [pid 53182:tid 53561] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 03:01:08.551821 2026] [:error] [pid 53182:tid 53543] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 03:01:08.806321 2026] [:error] [pid 53182:tid 53566] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 03:01:09.061578 2026] [:error] [pid 53182:tid 53549] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 03:01:09.315600 2026] [:error] [pid 53182:tid 53560] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 03:01:09.570547 2026] [:error] [pid 53182:tid 53567] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 03:01:09.824074 2026] [:error] [pid 53182:tid 53547] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 03:01:10.077226 2026] [:error] [pid 53182:tid 53563] [client 52.169.119.118:1322] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 03:01:10.327377 2026] [:error] [pid 53182:tid 53565] [client 52.169.119.118:1322] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSM9vv073cA6eM1YCQFzgAAANU"]
[Mon Mar 02 03:01:10.860230 2026] [:error] [pid 53182:tid 53545] [client 52.169.119.118:1339] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSM9vv073cA6eM1YCQF0AAAAMI"]
[Mon Mar 02 03:01:11.359713 2026] [:error] [pid 53585:tid 53591] [client 52.169.119.118:6088] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSM93bCvYsvu6kKhM3qsgAAAAM"]
[Mon Mar 02 03:01:11.863684 2026] [:error] [pid 53181:tid 53536] [client 52.169.119.118:4885] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSM94r_0T1SazTrJOBmUgAAARU"]
[Mon Mar 02 03:01:12.382994 2026] [:error] [pid 53181:tid 53530] [client 52.169.119.118:15430] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSM-Ir_0T1SazTrJOBmVgAAAQ8"]
[Mon Mar 02 03:01:12.880577 2026] [:error] [pid 53182:tid 53555] [client 52.169.119.118:17168] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSM-Pv073cA6eM1YCQF1gAAAMs"]
[Mon Mar 02 03:01:13.379046 2026] [:error] [pid 53180:tid 53450] [client 52.169.119.118:16133] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSM-TPPJpDOBvYnaa14BQAAAYY"]
[Mon Mar 02 03:01:13.878241 2026] [:error] [pid 53182:tid 53567] [client 52.169.119.118:1295] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSM-fv073cA6eM1YCQF2wAAANc"]
[Mon Mar 02 03:01:14.376365 2026] [:error] [pid 26940:tid 26960] [client 52.169.119.118:5466] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaSM-hrUg-j5GLDtRFkarAAAAFA"]
[Mon Mar 02 03:01:14.876265 2026] [:error] [pid 26940:tid 26962] [client 52.169.119.118:3539] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaSM-hrUg-j5GLDtRFkargAAAFI"]
[Mon Mar 02 03:01:15.375698 2026] [:error] [pid 53585:tid 53610] [client 52.169.119.118:4904] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaSM-3bCvYsvu6kKhM3qvAAAABY"]
[Mon Mar 02 03:01:15.875266 2026] [:error] [pid 53585:tid 53602] [client 52.169.119.118:8122] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaSM-3bCvYsvu6kKhM3qvQAAAA4"]
[Mon Mar 02 03:01:16.385278 2026] [:error] [pid 53585:tid 53612] [client 52.169.119.118:1896] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaSM_HbCvYsvu6kKhM3qwAAAABg"]
[Mon Mar 02 03:01:16.886184 2026] [:error] [pid 26940:tid 26954] [client 52.169.119.118:1303] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaSM_BrUg-j5GLDtRFkatwAAAEo"]
[Mon Mar 02 03:01:17.389770 2026] [:error] [pid 26940:tid 26959] [client 52.169.119.118:6112] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaSM_RrUg-j5GLDtRFkaugAAAE8"]
[Mon Mar 02 03:01:17.888923 2026] [:error] [pid 26940:tid 26958] [client 52.169.119.118:12909] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaSM_RrUg-j5GLDtRFkawQAAAE4"]
[Mon Mar 02 03:01:18.389223 2026] [:error] [pid 53182:tid 53544] [client 52.169.119.118:16176] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaSM_vv073cA6eM1YCQF4wAAAME"]
[Mon Mar 02 03:01:18.891153 2026] [:error] [pid 26940:tid 26954] [client 52.169.119.118:4128] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaSM_hrUg-j5GLDtRFkaxwAAAEo"]
[Mon Mar 02 03:01:19.392144 2026] [:error] [pid 53182:tid 53546] [client 52.169.119.118:8120] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaSM__v073cA6eM1YCQF6QAAAMM"]
[Mon Mar 02 03:01:19.890299 2026] [:error] [pid 26940:tid 26952] [client 52.169.119.118:9004] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaSM_xrUg-j5GLDtRFkazAAAAEg"]
[Mon Mar 02 03:01:20.393034 2026] [:error] [pid 26940:tid 26964] [client 52.169.119.118:12926] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaSNABrUg-j5GLDtRFka0gAAAFQ"]
[Mon Mar 02 03:01:20.908855 2026] [:error] [pid 53181:tid 53530] [client 52.169.119.118:16741] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaSNAIr_0T1SazTrJOBmXgAAAQ8"]
[Mon Mar 02 03:01:21.406537 2026] [:error] [pid 26940:tid 26966] [client 52.169.119.118:3553] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaSNARrUg-j5GLDtRFka2AAAAFY"]
[Mon Mar 02 03:01:21.905346 2026] [:error] [pid 26940:tid 26956] [client 52.169.119.118:10377] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaSNARrUg-j5GLDtRFka2wAAAEw"]
[Mon Mar 02 03:01:22.413881 2026] [:error] [pid 53181:tid 53535] [client 52.169.119.118:17159] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSNAor_0T1SazTrJOBmYQAAARQ"]
[Mon Mar 02 03:01:22.914212 2026] [:error] [pid 26940:tid 26954] [client 52.169.119.118:15464] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSNAhrUg-j5GLDtRFka4AAAAEo"]
[Mon Mar 02 03:01:23.424683 2026] [:error] [pid 26940:tid 26966] [client 52.169.119.118:17190] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSNAxrUg-j5GLDtRFka4wAAAFY"]
[Mon Mar 02 03:01:23.939429 2026] [:error] [pid 53180:tid 53458] [client 52.169.119.118:12290] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSNAzPPJpDOBvYnaa14EQAAAY4"]
[Mon Mar 02 03:02:41.308148 2026] [:error] [pid 53181:tid 53516] [client 145.239.69.40:40374] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaSNUYr_0T1SazTrJOBm2gAAAQI"]
[Mon Mar 02 03:02:45.066003 2026] [:error] [pid 53585:tid 53598] [client 145.239.69.40:40380] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaSNVXbCvYsvu6kKhM3rjQAAAAo"]
[Mon Mar 02 04:18:31.712634 2026] [:error] [pid 31257:tid 31284] [client 146.190.117.220:50863] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaSfF_-JFLfishX45N_PCAAAARU"]
[Mon Mar 02 04:18:31.717031 2026] [:error] [pid 31257:tid 31284] [client 146.190.117.220:50863] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 02 04:24:10.519040 2026] [:error] [pid 31257:tid 31282] [client 20.104.97.185:13466] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaSgav-JFLfishX45N_VtgAAARM"]
[Mon Mar 02 04:24:11.409706 2026] [:error] [pid 28795:tid 28885] [client 20.104.97.185:13487] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaSga7ROd53wZBkdI_foTQAAAJY"]
[Mon Mar 02 04:24:12.273756 2026] [:error] [pid 31257:tid 31278] [client 20.104.97.185:13574] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaSgbP-JFLfishX45N_VuwAAAQ8"]
[Mon Mar 02 04:24:13.166226 2026] [:error] [pid 28793:tid 28822] [client 20.104.97.185:13577] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aaSgbQ2_fxBANaHo1f7ubQAAAA8"]
[Mon Mar 02 04:54:44.467499 2026] [:error] [pid 31257:tid 31278] [client 141.98.11.181:58638] [client 141.98.11.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 141.98.11.181, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaSnlP-JFLfishX45N_9cQAAAQ8"]
[Mon Mar 02 04:54:44.470938 2026] [:error] [pid 31257:tid 31278] [client 141.98.11.181:58638] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 04:54:47.019292 2026] [:error] [pid 31257:tid 31265] [client 141.98.11.181:58638] [client 141.98.11.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaSnl_-JFLfishX45N_9iQAAAQI"]
[Mon Mar 02 04:54:47.604953 2026] [:error] [pid 31257:tid 31281] [client 141.98.11.181:51084] [client 141.98.11.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaSnl_-JFLfishX45N_9jAAAARI"]
[Mon Mar 02 04:54:48.191128 2026] [:error] [pid 28908:tid 28913] [client 141.98.11.181:58894] [client 141.98.11.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaSnmIqJmC8ih_lQQnDRDAAAAMM"]
[Mon Mar 02 04:54:48.745359 2026] [:error] [pid 28908:tid 28920] [client 141.98.11.181:53789] [client 141.98.11.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaSnmIqJmC8ih_lQQnDRDgAAAMo"]
[Mon Mar 02 04:57:49.408628 2026] [:error] [pid 28795:tid 28878] [client 5.135.131.226:43894] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaSoTbROd53wZBkdI_f82QAAAI8"]
[Mon Mar 02 04:57:51.704911 2026] [:error] [pid 28908:tid 28916] [client 5.135.131.226:58138] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaSoT4qJmC8ih_lQQnDTRgAAAMY"]
[Mon Mar 02 04:57:54.847014 2026] [:error] [pid 28794:tid 28844] [client 5.135.131.226:58140] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaSoUqVy2qpaelbUob33FgAAAEg"]
[Mon Mar 02 04:57:57.326676 2026] [:error] [pid 28795:tid 28886] [client 5.135.131.226:49218] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaSoVbROd53wZBkdI_f8-AAAAJc"]
[Mon Mar 02 04:57:59.476620 2026] [:error] [pid 28908:tid 28933] [client 5.135.131.226:49226] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaSoV4qJmC8ih_lQQnDTUgAAANc"]
[Mon Mar 02 04:58:01.538260 2026] [:error] [pid 28795:tid 28867] [client 5.135.131.226:49236] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaSoWbROd53wZBkdI_f8_gAAAIQ"]
[Mon Mar 02 04:58:03.593828 2026] [:error] [pid 28908:tid 28910] [client 5.135.131.226:49238] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaSoW4qJmC8ih_lQQnDTYgAAAMA"]
[Mon Mar 02 04:58:05.691695 2026] [:error] [pid 28908:tid 28916] [client 5.135.131.226:49240] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaSoXYqJmC8ih_lQQnDTZwAAAMY"]
[Mon Mar 02 04:58:07.959635 2026] [:error] [pid 31257:tid 31270] [client 5.135.131.226:44260] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aaSoX_-JFLfishX45N8AmwAAAQc"]
[Mon Mar 02 04:58:09.875766 2026] [:error] [pid 28794:tid 28860] [client 5.135.131.226:44264] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaSoYaVy2qpaelbUob33JgAAAFg"]
[Mon Mar 02 04:58:11.890627 2026] [:error] [pid 28908:tid 28929] [client 5.135.131.226:44276] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaSoY4qJmC8ih_lQQnDTegAAANM"]
[Mon Mar 02 04:58:13.976163 2026] [:error] [pid 28908:tid 28919] [client 5.135.131.226:44282] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaSoZYqJmC8ih_lQQnDThQAAAMk"]
[Mon Mar 02 04:58:16.060569 2026] [:error] [pid 28908:tid 28919] [client 5.135.131.226:44296] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaSoaIqJmC8ih_lQQnDTjgAAAMk"]
[Mon Mar 02 04:58:18.211639 2026] [:error] [pid 28795:tid 28878] [client 5.135.131.226:36940] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaSoarROd53wZBkdI_f9FgAAAI8"]
[Mon Mar 02 04:58:20.342889 2026] [:error] [pid 31257:tid 31271] [client 5.135.131.226:36952] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaSobP-JFLfishX45N8A8AAAAQg"]
[Mon Mar 02 05:29:28.178634 2026] [:error] [pid 28794:tid 28853] [client 134.149.59.124:13966] [client 134.149.59.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaSvuKVy2qpaelbUob0EgwAAAFE"]
[Mon Mar 02 05:29:28.726365 2026] [:error] [pid 28795:tid 28880] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 05:29:29.254462 2026] [:error] [pid 28795:tid 28868] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 05:29:29.520264 2026] [:error] [pid 28795:tid 28871] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 05:29:29.784902 2026] [:error] [pid 28795:tid 28869] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 05:29:30.049731 2026] [:error] [pid 28795:tid 28872] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 05:29:30.318200 2026] [:error] [pid 28795:tid 28884] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 05:29:30.582776 2026] [:error] [pid 28795:tid 28878] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 05:29:30.848528 2026] [:error] [pid 28795:tid 28875] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 05:29:31.112709 2026] [:error] [pid 28795:tid 28867] [client 134.149.59.124:5916] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 05:29:31.374668 2026] [:error] [pid 28795:tid 28866] [client 134.149.59.124:5916] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSvu7ROd53wZBkdI_cRhgAAAIM"]
[Mon Mar 02 05:29:31.877947 2026] [:error] [pid 28795:tid 28869] [client 134.149.59.124:7005] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSvu7ROd53wZBkdI_cRiwAAAIY"]
[Mon Mar 02 05:29:32.433103 2026] [:error] [pid 31257:tid 31282] [client 134.149.59.124:6812] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSvvP-JFLfishX45N8imQAAARM"]
[Mon Mar 02 05:29:32.966693 2026] [:error] [pid 31257:tid 31272] [client 134.149.59.124:12169] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaSvvP-JFLfishX45N8inQAAAQk"]
[Mon Mar 02 05:29:33.549319 2026] [:error] [pid 28908:tid 28912] [client 134.149.59.124:15891] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSvvYqJmC8ih_lQQnDrJwAAAMI"]
[Mon Mar 02 05:29:34.129869 2026] [:error] [pid 31257:tid 31271] [client 134.149.59.124:12184] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSvvv-JFLfishX45N8ipQAAAQg"]
[Mon Mar 02 05:29:34.640007 2026] [:error] [pid 28794:tid 28857] [client 134.149.59.124:2927] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSvvqVy2qpaelbUob0EjwAAAFU"]
[Mon Mar 02 05:29:35.154944 2026] [:error] [pid 31257:tid 31272] [client 134.149.59.124:6993] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaSvv_-JFLfishX45N8irQAAAQk"]
[Mon Mar 02 05:29:35.687687 2026] [:error] [pid 31257:tid 31286] [client 134.149.59.124:5890] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaSvv_-JFLfishX45N8isgAAARc"]
[Mon Mar 02 05:29:36.195700 2026] [:error] [pid 28908:tid 28934] [client 134.149.59.124:2923] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaSvwIqJmC8ih_lQQnDrLgAAANg"]
[Mon Mar 02 05:29:36.699071 2026] [:error] [pid 31257:tid 31281] [client 134.149.59.124:11584] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSvwP-JFLfishX45N8iuQAAARI"]
[Mon Mar 02 05:29:37.225400 2026] [:error] [pid 31257:tid 31274] [client 134.149.59.124:6816] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSvwf-JFLfishX45N8iwQAAAQs"]
[Mon Mar 02 05:29:37.752484 2026] [:error] [pid 28908:tid 28931] [client 134.149.59.124:12217] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSvwYqJmC8ih_lQQnDrMAAAANU"]
[Mon Mar 02 05:29:38.252006 2026] [:error] [pid 28908:tid 28929] [client 134.149.59.124:1313] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaSvwoqJmC8ih_lQQnDrNgAAANM"]
[Mon Mar 02 07:11:31.740947 2026] [:error] [pid 28795:tid 28863] [client 43.159.145.149:60294] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaTHo7ROd53wZBkdI_dTtQAAAIA"]
[Mon Mar 02 07:19:45.680616 2026] [:error] [pid 28793:tid 28822] [client 43.130.78.203:37926] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaTJkQ2_fxBANaHo1f4opgAAAA8"]
[Mon Mar 02 07:27:26.821544 2026] [:error] [pid 28795:tid 28878] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Mon Mar 02 07:27:26.968591 2026] [:error] [pid 28795:tid 28883] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Mar 02 07:27:27.113059 2026] [:error] [pid 28795:tid 28886] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Mar 02 07:27:27.402942 2026] [:error] [pid 28795:tid 28869] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 02 07:27:27.851310 2026] [:error] [pid 28795:tid 28870] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Mon Mar 02 07:27:27.997326 2026] [:error] [pid 28795:tid 28877] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Mon Mar 02 07:27:28.149637 2026] [:error] [pid 28795:tid 28885] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Mar 02 07:27:28.295853 2026] [:error] [pid 28795:tid 28864] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Mon Mar 02 07:27:28.439810 2026] [:error] [pid 28795:tid 28863] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Mar 02 07:27:28.583982 2026] [:error] [pid 28795:tid 28875] [client 52.231.70.237:22995] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Mon Mar 02 07:27:28.724552 2026] [:error] [pid 28795:tid 28884] [client 52.231.70.237:22995] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaTLYLROd53wZBkdI_ddRwAAAJU"]
[Mon Mar 02 07:27:29.300515 2026] [:error] [pid 28908:tid 28931] [client 52.231.70.237:5156] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaTLYYqJmC8ih_lQQnCCRwAAANU"]
[Mon Mar 02 07:27:29.858453 2026] [:error] [pid 28795:tid 28871] [client 52.231.70.237:20460] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaTLYbROd53wZBkdI_ddSwAAAIg"]
[Mon Mar 02 07:27:30.415269 2026] [:error] [pid 28908:tid 28920] [client 52.231.70.237:5179] [client 52.231.70.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/666.php"] [unique_id "aaTLYoqJmC8ih_lQQnCCTAAAAMo"]
[Mon Mar 02 08:52:04.098681 2026] [:error] [pid 23872:tid 23893] [client 20.63.41.168:27646] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaTfNEzkQFuA2qBk8UMyzgAAAZI"]
[Mon Mar 02 08:52:05.560975 2026] [:error] [pid 23872:tid 23880] [client 20.63.41.168:27538] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaTfNUzkQFuA2qBk8UMy3wAAAYU"]
[Mon Mar 02 08:52:08.837403 2026] [:error] [pid 21575:tid 21595] [client 20.63.41.168:27612] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaTfOCrocdArcJqFfIl02QAAAVA"]
[Mon Mar 02 08:52:10.787111 2026] [:error] [pid 23872:tid 23898] [client 20.63.41.168:27586] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaTfOkzkQFuA2qBk8UMzBwAAAZc"]
[Mon Mar 02 09:21:11.559931 2026] [:error] [pid 23872:tid 23892] [client 74.243.251.125:12108] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 09:21:11.724572 2026] [:error] [pid 23872:tid 23878] [client 74.243.251.125:12108] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTmB0zkQFuA2qBk8UNfwgAAAYM"]
[Mon Mar 02 09:21:12.051778 2026] [:error] [pid 23872:tid 23878] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 09:21:12.388684 2026] [:error] [pid 23872:tid 23882] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 09:21:12.559671 2026] [:error] [pid 23872:tid 23891] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 09:21:12.726316 2026] [:error] [pid 23872:tid 23888] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 09:21:12.893634 2026] [:error] [pid 23872:tid 23883] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 09:21:13.061086 2026] [:error] [pid 23872:tid 23891] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 09:21:13.228808 2026] [:error] [pid 23872:tid 23899] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 09:21:13.394667 2026] [:error] [pid 23872:tid 23891] [client 74.243.251.125:12112] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 09:21:13.556771 2026] [:error] [pid 23872:tid 23885] [client 74.243.251.125:12112] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTmCUzkQFuA2qBk8UNf6gAAAYo"]
[Mon Mar 02 09:21:13.879773 2026] [:error] [pid 23872:tid 23882] [client 74.243.251.125:12068] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTmCUzkQFuA2qBk8UNf_AAAAYc"]
[Mon Mar 02 09:21:14.202535 2026] [:error] [pid 28795:tid 28887] [client 74.243.251.125:12069] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTmCrROd53wZBkdI_eULQAAAJg"]
[Mon Mar 02 09:21:14.526568 2026] [:error] [pid 23872:tid 23891] [client 74.243.251.125:12085] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTmCkzkQFuA2qBk8UNgCQAAAZA"]
[Mon Mar 02 09:21:14.849538 2026] [:error] [pid 23872:tid 23899] [client 74.243.251.125:12044] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaTmCkzkQFuA2qBk8UNgDwAAAZg"]
[Mon Mar 02 09:21:15.182532 2026] [:error] [pid 23872:tid 23891] [client 74.243.251.125:12097] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTmC0zkQFuA2qBk8UNgFwAAAZA"]
[Mon Mar 02 09:21:15.515450 2026] [:error] [pid 23872:tid 23897] [client 74.243.251.125:12093] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTmC0zkQFuA2qBk8UNgHAAAAZY"]
[Mon Mar 02 09:21:15.838653 2026] [:error] [pid 31257:tid 31272] [client 74.243.251.125:12090] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTmC_-JFLfishX45N_y7QAAAQk"]
[Mon Mar 02 09:21:16.173937 2026] [:error] [pid 28908:tid 28923] [client 74.243.251.125:12117] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTmDIqJmC8ih_lQQnDm0gAAAM0"]
[Mon Mar 02 09:21:16.508064 2026] [:error] [pid 23872:tid 23890] [client 74.243.251.125:12120] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTmDEzkQFuA2qBk8UNgKgAAAY8"]
[Mon Mar 02 09:21:16.831668 2026] [:error] [pid 28908:tid 28922] [client 74.243.251.125:12114] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTmDIqJmC8ih_lQQnDm1gAAAMw"]
[Mon Mar 02 09:21:17.185759 2026] [:error] [pid 28908:tid 28921] [client 74.243.251.125:12151] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTmDYqJmC8ih_lQQnDm1wAAAMs"]
[Mon Mar 02 09:21:17.520112 2026] [:error] [pid 21575:tid 21594] [client 74.243.251.125:12073] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTmDSrocdArcJqFfImHlQAAAU8"]
[Mon Mar 02 09:21:17.843793 2026] [:error] [pid 23872:tid 23893] [client 74.243.251.125:12075] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTmDUzkQFuA2qBk8UNgNQAAAZI"]
[Mon Mar 02 09:21:18.184309 2026] [:error] [pid 23872:tid 23887] [client 74.243.251.125:12059] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTmDkzkQFuA2qBk8UNgPAAAAYw"]
[Mon Mar 02 09:21:18.517826 2026] [:error] [pid 28908:tid 28914] [client 74.243.251.125:12032] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTmDoqJmC8ih_lQQnDm3AAAAMQ"]
[Mon Mar 02 10:11:18.060337 2026] [:error] [pid 21575:tid 21580] [client 20.63.41.168:22471] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 10:11:18.275981 2026] [:error] [pid 21575:tid 21582] [client 20.63.41.168:22471] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTxxirocdArcJqFfImkUgAAAUM"]
[Mon Mar 02 10:11:18.739716 2026] [:error] [pid 31257:tid 31279] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 10:11:19.160679 2026] [:error] [pid 31257:tid 31284] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 10:11:19.376749 2026] [:error] [pid 31257:tid 31278] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 10:11:19.593943 2026] [:error] [pid 31257:tid 31274] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 10:11:19.804180 2026] [:error] [pid 31257:tid 31277] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 10:11:20.015187 2026] [:error] [pid 31257:tid 31287] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 10:11:20.229244 2026] [:error] [pid 31257:tid 31282] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 10:11:20.446296 2026] [:error] [pid 31257:tid 31279] [client 20.63.41.168:22431] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 10:11:20.663681 2026] [:error] [pid 31257:tid 31285] [client 20.63.41.168:22431] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTxyP-JFLfishX45N8b_AAAARY"]
[Mon Mar 02 10:11:21.158840 2026] [:error] [pid 21575:tid 21602] [client 20.63.41.168:22475] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTxySrocdArcJqFfImkXQAAAVc"]
[Mon Mar 02 10:11:22.011210 2026] [:error] [pid 31257:tid 31280] [client 20.63.41.168:22526] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTxyv-JFLfishX45N8b_QAAARE"]
[Mon Mar 02 10:11:22.705566 2026] [:error] [pid 28793:tid 28829] [client 20.63.41.168:22501] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaTxyg2_fxBANaHo1f5QXQAAABY"]
[Mon Mar 02 10:11:23.363704 2026] [:error] [pid 23872:tid 23898] [client 20.63.41.168:22494] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaTxy0zkQFuA2qBk8UOZFAAAAZc"]
[Mon Mar 02 10:11:24.455651 2026] [:error] [pid 31257:tid 31275] [client 20.63.41.168:22488] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaTxzP-JFLfishX45N8cAwAAAQw"]
[Mon Mar 02 10:11:25.445608 2026] [:error] [pid 23872:tid 23899] [client 20.63.41.168:22502] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaTxzUzkQFuA2qBk8UOZGQAAAZg"]
[Mon Mar 02 10:11:26.299092 2026] [:error] [pid 31257:tid 31267] [client 20.63.41.168:22407] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaTxzv-JFLfishX45N8cCgAAAQQ"]
[Mon Mar 02 10:11:27.233353 2026] [:error] [pid 31257:tid 31281] [client 20.63.41.168:22419] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTxz_-JFLfishX45N8cDwAAARI"]
[Mon Mar 02 10:11:28.193607 2026] [:error] [pid 31257:tid 31285] [client 20.63.41.168:22527] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTx0P-JFLfishX45N8cEgAAARY"]
[Mon Mar 02 10:11:28.914307 2026] [:error] [pid 31257:tid 31273] [client 20.63.41.168:22498] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTx0P-JFLfishX45N8cFQAAAQo"]
[Mon Mar 02 10:11:29.774492 2026] [:error] [pid 23872:tid 23898] [client 20.63.41.168:22404] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wolf-shell.php"] [unique_id "aaTx0UzkQFuA2qBk8UOZKQAAAZc"]
[Mon Mar 02 10:11:30.541837 2026] [:error] [pid 21575:tid 21601] [client 20.63.41.168:22408] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaTx0irocdArcJqFfImkbQAAAVY"]
[Mon Mar 02 10:11:31.343467 2026] [:error] [pid 21575:tid 21586] [client 20.63.41.168:22409] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaTx0yrocdArcJqFfImkcQAAAUc"]
[Mon Mar 02 10:11:32.225157 2026] [:error] [pid 23872:tid 23888] [client 20.63.41.168:22510] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaTx1EzkQFuA2qBk8UOZMQAAAY0"]
[Mon Mar 02 10:11:33.551679 2026] [:error] [pid 31257:tid 31278] [client 20.63.41.168:22520] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/core.php"] [unique_id "aaTx1f-JFLfishX45N8cIgAAAQ8"]
[Mon Mar 02 10:11:34.969439 2026] [:error] [pid 28793:tid 28827] [client 20.63.41.168:22484] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaTx1g2_fxBANaHo1f5QZwAAABQ"]
[Mon Mar 02 10:11:35.649408 2026] [:error] [pid 21575:tid 21587] [client 20.63.41.168:22474] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaTx1yrocdArcJqFfImkegAAAUg"]
[Mon Mar 02 10:11:36.345644 2026] [:error] [pid 21575:tid 21596] [client 20.63.41.168:22465] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaTx2CrocdArcJqFfImkfQAAAVE"]
[Mon Mar 02 10:11:36.928862 2026] [:error] [pid 31257:tid 31270] [client 20.63.41.168:22470] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zeal.php"] [unique_id "aaTx2P-JFLfishX45N8cKAAAAQc"]
[Mon Mar 02 10:11:38.153744 2026] [:error] [pid 21575:tid 21601] [client 20.63.41.168:22497] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTx2irocdArcJqFfImkiQAAAVY"]
[Mon Mar 02 10:11:39.217972 2026] [:error] [pid 23872:tid 23887] [client 20.63.41.168:22344] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTx20zkQFuA2qBk8UOZRQAAAYw"]
[Mon Mar 02 10:11:40.450615 2026] [:error] [pid 31257:tid 31276] [client 20.63.41.168:22486] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTx3P-JFLfishX45N8cLgAAAQ0"]
[Mon Mar 02 10:11:41.656995 2026] [:error] [pid 31257:tid 31275] [client 20.63.41.168:22515] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaTx3f-JFLfishX45N8cMgAAAQw"]
[Mon Mar 02 10:11:42.266608 2026] [:error] [pid 28795:tid 28870] [client 20.63.41.168:22518] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTx3rROd53wZBkdI_ei9gAAAIc"]
[Mon Mar 02 10:11:43.817559 2026] [:error] [pid 21575:tid 21592] [client 20.63.41.168:22436] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTx3yrocdArcJqFfImkpQAAAU0"]
[Mon Mar 02 10:11:45.145690 2026] [:error] [pid 31257:tid 31283] [client 20.63.41.168:22476] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTx4f-JFLfishX45N8cOwAAARQ"]
[Mon Mar 02 10:11:45.753556 2026] [:error] [pid 23872:tid 23880] [client 20.63.41.168:22412] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaTx4UzkQFuA2qBk8UOZZAAAAYU"]
[Mon Mar 02 10:51:08.050671 2026] [:error] [pid 23872:tid 23877] [client 145.239.10.137:50050] File does not exist: /usr/local/apache/htdocs/suspended-page/45up.php, referer: http://pumpbooking.com/45up.php
[Mon Mar 02 11:08:41.393122 2026] [:error] [pid 31257:tid 31286] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/signon.php
[Mon Mar 02 11:08:41.605889 2026] [:error] [pid 31257:tid 31271] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Mon Mar 02 11:08:41.817229 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Mar 02 11:08:42.025655 2026] [:error] [pid 31257:tid 31279] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Mon Mar 02 11:08:42.242940 2026] [:error] [pid 31257:tid 31264] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Mar 02 11:08:42.458267 2026] [:error] [pid 31257:tid 31276] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xmlmp.php
[Mon Mar 02 11:08:42.667502 2026] [:error] [pid 31257:tid 31269] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Mon Mar 02 11:08:42.879928 2026] [:error] [pid 31257:tid 31263] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configssss.php
[Mon Mar 02 11:08:43.089290 2026] [:error] [pid 31257:tid 31272] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configss1.php
[Mon Mar 02 11:08:43.299944 2026] [:error] [pid 31257:tid 31278] [client 20.104.206.150:45507] File does not exist: /usr/local/apache/htdocs/suspended-page/ngif.php
[Mon Mar 02 11:08:43.508823 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:45507] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configss.php"] [unique_id "aaT_O_-JFLfishX45N9KtgAAAQQ"]
[Mon Mar 02 11:08:43.934948 2026] [:error] [pid 28795:tid 28878] [client 20.104.206.150:58459] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configss.php"] [unique_id "aaT_O7ROd53wZBkdI_ezCAAAAI8"]
[Mon Mar 02 11:08:44.344432 2026] [:error] [pid 21575:tid 21592] [client 20.104.206.150:10524] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configss.php"] [unique_id "aaT_PCrocdArcJqFfInHgQAAAU0"]
[Mon Mar 02 11:08:44.786939 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:51726] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-configss.php"] [unique_id "aaT_PEzkQFuA2qBk8UPdCgAAAYA"]
[Mon Mar 02 11:08:45.215127 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:10526] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yanz.php"] [unique_id "aaT_PUzkQFuA2qBk8UPdEAAAAZQ"]
[Mon Mar 02 11:08:45.651773 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:45533] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yanz.php"] [unique_id "aaT_PUzkQFuA2qBk8UPdFAAAAYk"]
[Mon Mar 02 11:08:46.076628 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:45540] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yanz.php"] [unique_id "aaT_PkzkQFuA2qBk8UPdGQAAAZA"]
[Mon Mar 02 11:08:46.492453 2026] [:error] [pid 28795:tid 28880] [client 20.104.206.150:43668] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yanz.php"] [unique_id "aaT_PrROd53wZBkdI_ezCgAAAJE"]
[Mon Mar 02 11:08:46.926790 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:51299] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.phpa"] [unique_id "aaT_PirocdArcJqFfInHhQAAAUY"]
[Mon Mar 02 11:08:47.344203 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:57237] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.phpa"] [unique_id "aaT_P_-JFLfishX45N9KvQAAAQ4"]
[Mon Mar 02 11:08:47.764838 2026] [:error] [pid 31257:tid 31263] [client 20.104.206.150:10500] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.phpa"] [unique_id "aaT_P_-JFLfishX45N9KwAAAAQA"]
[Mon Mar 02 11:08:48.181127 2026] [:error] [pid 31257:tid 31272] [client 20.104.206.150:10521] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/file.phpa"] [unique_id "aaT_QP-JFLfishX45N9KwgAAAQk"]
[Mon Mar 02 11:08:48.636405 2026] [:error] [pid 21575:tid 21592] [client 20.104.206.150:51283] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aaT_QCrocdArcJqFfInHhwAAAU0"]
[Mon Mar 02 11:08:49.100642 2026] [:error] [pid 21575:tid 21602] [client 20.104.206.150:51771] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aaT_QSrocdArcJqFfInHjQAAAVc"]
[Mon Mar 02 11:08:49.547481 2026] [:error] [pid 21575:tid 21580] [client 20.104.206.150:58494] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aaT_QSrocdArcJqFfInHkgAAAUE"]
[Mon Mar 02 11:08:49.971196 2026] [:error] [pid 21575:tid 21600] [client 20.104.206.150:10988] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/defaults.php"] [unique_id "aaT_QSrocdArcJqFfInHlQAAAVU"]
[Mon Mar 02 11:08:50.397895 2026] [:error] [pid 28795:tid 28873] [client 20.104.206.150:43685] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/im.php"] [unique_id "aaT_QrROd53wZBkdI_ezDgAAAIo"]
[Mon Mar 02 11:08:50.844620 2026] [:error] [pid 28794:tid 28844] [client 20.104.206.150:57336] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/im.php"] [unique_id "aaT_QqVy2qpaelbUob160wAAAEg"]
[Mon Mar 02 11:08:51.274951 2026] [:error] [pid 28794:tid 28843] [client 20.104.206.150:10520] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/im.php"] [unique_id "aaT_Q6Vy2qpaelbUob161QAAAEc"]
[Mon Mar 02 11:08:51.690548 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:10553] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/im.php"] [unique_id "aaT_Q_-JFLfishX45N9KxwAAARg"]
[Mon Mar 02 11:08:52.132470 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:45509] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-comments-post.php"] [unique_id "aaT_REzkQFuA2qBk8UPdJgAAAZQ"]
[Mon Mar 02 11:08:52.547744 2026] [:error] [pid 28908:tid 28914] [client 20.104.206.150:57232] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-comments-post.php"] [unique_id "aaT_RIqJmC8ih_lQQnARIgAAAMQ"]
[Mon Mar 02 11:08:52.981238 2026] [:error] [pid 28908:tid 28912] [client 20.104.206.150:51714] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-comments-post.php"] [unique_id "aaT_RIqJmC8ih_lQQnARIwAAAMI"]
[Mon Mar 02 11:08:53.432666 2026] [:error] [pid 28793:tid 28812] [client 20.104.206.150:45543] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-comments-post.php"] [unique_id "aaT_RQ2_fxBANaHo1f5aYAAAAAU"]
[Mon Mar 02 11:08:53.858897 2026] [:error] [pid 28794:tid 28854] [client 20.104.206.150:43694] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache-compat.php"] [unique_id "aaT_RaVy2qpaelbUob164AAAAFI"]
[Mon Mar 02 11:08:54.310695 2026] [:error] [pid 31257:tid 31283] [client 20.104.206.150:10548] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache-compat.php"] [unique_id "aaT_Rv-JFLfishX45N9KywAAARQ"]
[Mon Mar 02 11:08:54.760089 2026] [:error] [pid 28908:tid 28933] [client 20.104.206.150:51731] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache-compat.php"] [unique_id "aaT_RoqJmC8ih_lQQnARKgAAANc"]
[Mon Mar 02 11:08:55.238172 2026] [:error] [pid 31257:tid 31281] [client 20.104.206.150:10528] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache-compat.php"] [unique_id "aaT_R_-JFLfishX45N9K0AAAARI"]
[Mon Mar 02 11:08:55.682547 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:10536] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php"] [unique_id "aaT_R0zkQFuA2qBk8UPdLAAAAZY"]
[Mon Mar 02 11:08:56.118094 2026] [:error] [pid 28793:tid 28825] [client 20.104.206.150:58478] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php"] [unique_id "aaT_SA2_fxBANaHo1f5aZAAAABI"]
[Mon Mar 02 11:08:56.591610 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:45549] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php"] [unique_id "aaT_SEzkQFuA2qBk8UPdMgAAAZc"]
[Mon Mar 02 11:08:57.044815 2026] [:error] [pid 21575:tid 21595] [client 20.104.206.150:45514] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fw.php"] [unique_id "aaT_SSrocdArcJqFfInHnwAAAVA"]
[Mon Mar 02 11:08:57.486256 2026] [:error] [pid 31257:tid 31283] [client 20.104.206.150:45546] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aaT_Sf-JFLfishX45N9K2QAAARQ"]
[Mon Mar 02 11:08:57.952185 2026] [:error] [pid 23872:tid 23881] [client 20.104.206.150:45557] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aaT_SUzkQFuA2qBk8UPdOAAAAYY"]
[Mon Mar 02 11:08:58.392564 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:43649] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aaT_SkzkQFuA2qBk8UPdOwAAAZA"]
[Mon Mar 02 11:08:58.837753 2026] [:error] [pid 28793:tid 28817] [client 20.104.206.150:57239] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/berlin.php"] [unique_id "aaT_Sg2_fxBANaHo1f5aagAAAAo"]
[Mon Mar 02 11:08:59.255110 2026] [:error] [pid 21575:tid 21589] [client 20.104.206.150:10504] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaT_SyrocdArcJqFfInHowAAAUo"]
[Mon Mar 02 11:08:59.691930 2026] [:error] [pid 31257:tid 31275] [client 20.104.206.150:45525] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaT_S_-JFLfishX45N9K3AAAAQw"]
[Mon Mar 02 11:09:00.116276 2026] [:error] [pid 31257:tid 31281] [client 20.104.206.150:57316] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaT_TP-JFLfishX45N9K3QAAARI"]
[Mon Mar 02 11:09:00.560537 2026] [:error] [pid 21575:tid 21582] [client 20.104.206.150:57340] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abe.php"] [unique_id "aaT_TCrocdArcJqFfInHpwAAAUM"]
[Mon Mar 02 11:09:01.082714 2026] [:error] [pid 21575:tid 21587] [client 20.104.206.150:51716] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/otuz1.php"] [unique_id "aaT_TSrocdArcJqFfInHrAAAAUg"]
[Mon Mar 02 11:09:01.511144 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:10525] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/otuz1.php"] [unique_id "aaT_TYqJmC8ih_lQQnARNQAAAMM"]
[Mon Mar 02 11:09:01.950337 2026] [:error] [pid 21575:tid 21603] [client 20.104.206.150:45505] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/otuz1.php"] [unique_id "aaT_TSrocdArcJqFfInHsAAAAVg"]
[Mon Mar 02 11:09:02.376452 2026] [:error] [pid 31257:tid 31285] [client 20.104.206.150:51755] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/otuz1.php"] [unique_id "aaT_Tv-JFLfishX45N9K4AAAARY"]
[Mon Mar 02 11:09:02.818821 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:10496] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-files.php"] [unique_id "aaT_ToqJmC8ih_lQQnAROwAAANY"]
[Mon Mar 02 11:09:03.259805 2026] [:error] [pid 31257:tid 31278] [client 20.104.206.150:45558] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-files.php"] [unique_id "aaT_T_-JFLfishX45N9K5gAAAQ8"]
[Mon Mar 02 11:09:03.693254 2026] [:error] [pid 31257:tid 31270] [client 20.104.206.150:10540] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-files.php"] [unique_id "aaT_T_-JFLfishX45N9K6wAAAQc"]
[Mon Mar 02 11:09:04.125537 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:51264] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-files.php"] [unique_id "aaT_UP-JFLfishX45N9K8wAAAQ4"]
[Mon Mar 02 11:09:04.560048 2026] [:error] [pid 31257:tid 31271] [client 20.104.206.150:51715] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aj.php"] [unique_id "aaT_UP-JFLfishX45N9K9gAAAQg"]
[Mon Mar 02 11:09:04.979285 2026] [:error] [pid 28908:tid 28924] [client 20.104.206.150:57277] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aj.php"] [unique_id "aaT_UIqJmC8ih_lQQnARPQAAAM4"]
[Mon Mar 02 11:09:05.399870 2026] [:error] [pid 28793:tid 28824] [client 20.104.206.150:45536] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aj.php"] [unique_id "aaT_UQ2_fxBANaHo1f5abwAAABE"]
[Mon Mar 02 11:09:05.871178 2026] [:error] [pid 23872:tid 23876] [client 20.104.206.150:11205] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aj.php"] [unique_id "aaT_UUzkQFuA2qBk8UPdVgAAAYE"]
[Mon Mar 02 11:09:06.336073 2026] [:error] [pid 21575:tid 21594] [client 20.104.206.150:57270] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/he.php"] [unique_id "aaT_UirocdArcJqFfInHuQAAAU8"]
[Mon Mar 02 11:09:06.811113 2026] [:error] [pid 28795:tid 28869] [client 20.104.206.150:57320] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/he.php"] [unique_id "aaT_UrROd53wZBkdI_ezGAAAAIY"]
[Mon Mar 02 11:09:07.330746 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:58464] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/he.php"] [unique_id "aaT_U4qJmC8ih_lQQnARPwAAAM0"]
[Mon Mar 02 11:09:07.758958 2026] [:error] [pid 23872:tid 23886] [client 20.104.206.150:57342] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/he.php"] [unique_id "aaT_U0zkQFuA2qBk8UPdWQAAAYs"]
[Mon Mar 02 11:09:08.226432 2026] [:error] [pid 28908:tid 28933] [client 20.104.206.150:57324] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aaT_VIqJmC8ih_lQQnARQgAAANc"]
[Mon Mar 02 11:09:08.780072 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:51774] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aaT_VEzkQFuA2qBk8UPdYAAAAYA"]
[Mon Mar 02 11:09:09.313979 2026] [:error] [pid 28794:tid 28845] [client 20.104.206.150:51759] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aaT_VaVy2qpaelbUob165wAAAEk"]
[Mon Mar 02 11:09:09.833702 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:51327] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cache.php"] [unique_id "aaT_VUzkQFuA2qBk8UPdZAAAAZQ"]
[Mon Mar 02 11:09:10.417985 2026] [:error] [pid 28794:tid 28843] [client 20.104.206.150:51757] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaT_VqVy2qpaelbUob166gAAAEc"]
[Mon Mar 02 11:09:11.046680 2026] [:error] [pid 21575:tid 21580] [client 20.104.206.150:51300] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aaT_VyrocdArcJqFfInHwQAAAUE"]
[Mon Mar 02 11:09:11.484755 2026] [:error] [pid 31257:tid 31270] [client 20.104.206.150:10944] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aaT_V_-JFLfishX45N9LBAAAAQc"]
[Mon Mar 02 11:09:11.938678 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:58445] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "aaT_V0zkQFuA2qBk8UPdZgAAAZU"]
[Mon Mar 02 11:09:12.427013 2026] [:error] [pid 23872:tid 23886] [client 20.104.206.150:57339] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog.php"] [unique_id "aaT_WEzkQFuA2qBk8UPdaQAAAYs"]
[Mon Mar 02 11:09:12.992704 2026] [:error] [pid 31257:tid 31275] [client 20.104.206.150:51326] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog.php"] [unique_id "aaT_WP-JFLfishX45N9LDQAAAQw"]
[Mon Mar 02 11:09:13.491494 2026] [:error] [pid 21575:tid 21586] [client 20.104.206.150:57319] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog.php"] [unique_id "aaT_WSrocdArcJqFfInHwwAAAUc"]
[Mon Mar 02 11:09:13.968802 2026] [:error] [pid 21575:tid 21582] [client 20.104.206.150:51712] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog.php"] [unique_id "aaT_WSrocdArcJqFfInHxgAAAUM"]
[Mon Mar 02 11:09:14.466711 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:58439] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php7"] [unique_id "aaT_WkzkQFuA2qBk8UPdcQAAAYk"]
[Mon Mar 02 11:09:15.019974 2026] [:error] [pid 21575:tid 21593] [client 20.104.206.150:57278] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php7"] [unique_id "aaT_WyrocdArcJqFfInHxwAAAU4"]
[Mon Mar 02 11:09:15.495744 2026] [:error] [pid 23872:tid 23886] [client 20.104.206.150:45513] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php7"] [unique_id "aaT_W0zkQFuA2qBk8UPddQAAAYs"]
[Mon Mar 02 11:09:15.939708 2026] [:error] [pid 28795:tid 28869] [client 20.104.206.150:57296] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfanew.php7"] [unique_id "aaT_W7ROd53wZBkdI_ezIQAAAIY"]
[Mon Mar 02 11:09:16.384499 2026] [:error] [pid 21575:tid 21590] [client 20.104.206.150:51292] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaT_XCrocdArcJqFfInHygAAAUs"]
[Mon Mar 02 11:09:16.816700 2026] [:error] [pid 23872:tid 23883] [client 20.104.206.150:45518] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaT_XEzkQFuA2qBk8UPdewAAAYg"]
[Mon Mar 02 11:09:17.258645 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:10946] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaT_XYqJmC8ih_lQQnARSwAAAMA"]
[Mon Mar 02 11:09:17.706201 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:10499] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lufix.php"] [unique_id "aaT_XYqJmC8ih_lQQnARTAAAAMM"]
[Mon Mar 02 11:09:18.127621 2026] [:error] [pid 28908:tid 28917] [client 20.104.206.150:51746] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax-actions.php"] [unique_id "aaT_XoqJmC8ih_lQQnARTwAAAMc"]
[Mon Mar 02 11:09:18.571222 2026] [:error] [pid 28908:tid 28930] [client 20.104.206.150:51318] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax-actions.php"] [unique_id "aaT_XoqJmC8ih_lQQnARUQAAANQ"]
[Mon Mar 02 11:09:19.020647 2026] [:error] [pid 28908:tid 28919] [client 20.104.206.150:10998] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax-actions.php"] [unique_id "aaT_X4qJmC8ih_lQQnARUwAAAMk"]
[Mon Mar 02 11:09:19.453279 2026] [:error] [pid 23872:tid 23877] [client 20.104.206.150:11244] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax-actions.php"] [unique_id "aaT_X0zkQFuA2qBk8UPdlAAAAYI"]
[Mon Mar 02 11:09:19.893325 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:57240] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaT_X0zkQFuA2qBk8UPdmwAAAYM"]
[Mon Mar 02 11:09:20.318734 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:51307] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaT_YEzkQFuA2qBk8UPdnwAAAZE"]
[Mon Mar 02 11:09:20.744995 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:51294] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaT_YEzkQFuA2qBk8UPdpgAAAYc"]
[Mon Mar 02 11:09:21.198625 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:43659] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/alfa-rex.php7"] [unique_id "aaT_YUzkQFuA2qBk8UPdrwAAAZA"]
[Mon Mar 02 11:09:21.613776 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:58484] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaT_YUzkQFuA2qBk8UPdswAAAZQ"]
[Mon Mar 02 11:09:22.057236 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:10505] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaT_YkzkQFuA2qBk8UPdtwAAAZA"]
[Mon Mar 02 11:09:22.484194 2026] [:error] [pid 28908:tid 28921] [client 20.104.206.150:57327] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaT_YoqJmC8ih_lQQnARVQAAAMs"]
[Mon Mar 02 11:09:22.897877 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:51772] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc.php"] [unique_id "aaT_Yv-JFLfishX45N9LJgAAARg"]
[Mon Mar 02 11:09:23.344778 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:57283] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaT_Y0zkQFuA2qBk8UPduwAAAY4"]
[Mon Mar 02 11:09:23.760594 2026] [:error] [pid 23872:tid 23888] [client 20.104.206.150:10498] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaT_Y0zkQFuA2qBk8UPdvQAAAY0"]
[Mon Mar 02 11:09:24.187976 2026] [:error] [pid 28908:tid 28918] [client 20.104.206.150:51272] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaT_ZIqJmC8ih_lQQnARVwAAAMg"]
[Mon Mar 02 11:09:24.674710 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:11223] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bypass.php"] [unique_id "aaT_ZEzkQFuA2qBk8UPdwgAAAZg"]
[Mon Mar 02 11:09:25.145522 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:51761] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/browse.php"] [unique_id "aaT_ZYqJmC8ih_lQQnARWAAAAM0"]
[Mon Mar 02 11:09:25.633651 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:45523] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/browse.php"] [unique_id "aaT_ZUzkQFuA2qBk8UPdxQAAAYk"]
[Mon Mar 02 11:09:26.104730 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:10527] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/browse.php"] [unique_id "aaT_ZoqJmC8ih_lQQnARWwAAAMM"]
[Mon Mar 02 11:09:26.529960 2026] [:error] [pid 28908:tid 28917] [client 20.104.206.150:51773] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/browse.php"] [unique_id "aaT_ZoqJmC8ih_lQQnARXAAAAMc"]
[Mon Mar 02 11:09:26.985859 2026] [:error] [pid 28908:tid 28912] [client 20.104.206.150:58469] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/license.php"] [unique_id "aaT_ZoqJmC8ih_lQQnARXgAAAMI"]
[Mon Mar 02 11:09:27.409449 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:10947] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/license.php"] [unique_id "aaT_Z4qJmC8ih_lQQnARXwAAANY"]
[Mon Mar 02 11:09:27.966992 2026] [:error] [pid 28793:tid 28810] [client 20.104.206.150:10546] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/license.php"] [unique_id "aaT_Zw2_fxBANaHo1f5aegAAAAM"]
[Mon Mar 02 11:09:28.419001 2026] [:error] [pid 31257:tid 31282] [client 20.104.206.150:57321] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/license.php"] [unique_id "aaT_aP-JFLfishX45N9LRAAAARM"]
[Mon Mar 02 11:09:28.882796 2026] [:error] [pid 31257:tid 31276] [client 20.104.206.150:43663] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaT_aP-JFLfishX45N9LRgAAAQ0"]
[Mon Mar 02 11:09:29.430846 2026] [:error] [pid 21575:tid 21594] [client 20.104.206.150:51308] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaT_aSrocdArcJqFfInH3gAAAU8"]
[Mon Mar 02 11:09:30.292858 2026] [:error] [pid 31257:tid 31276] [client 20.104.206.150:57275] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaT_av-JFLfishX45N9LUQAAAQ0"]
[Mon Mar 02 11:09:31.100402 2026] [:error] [pid 23872:tid 23886] [client 20.104.206.150:57275] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/contact.php"] [unique_id "aaT_a0zkQFuA2qBk8UPdywAAAYs"]
[Mon Mar 02 11:09:32.001183 2026] [:error] [pid 28795:tid 28881] [client 20.104.206.150:51743] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaT_bLROd53wZBkdI_ezMAAAAJI"]
[Mon Mar 02 11:09:32.697177 2026] [:error] [pid 28795:tid 28871] [client 20.104.206.150:58480] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaT_bLROd53wZBkdI_ezMQAAAIg"]
[Mon Mar 02 11:09:33.549020 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:51267] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaT_bUzkQFuA2qBk8UPd1wAAAZY"]
[Mon Mar 02 11:09:34.517948 2026] [:error] [pid 21575:tid 21589] [client 20.104.206.150:51267] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/minik.php"] [unique_id "aaT_birocdArcJqFfInH5wAAAUo"]
[Mon Mar 02 11:09:35.474627 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:57304] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aaT_b0zkQFuA2qBk8UPd4wAAAYM"]
[Mon Mar 02 11:09:36.259734 2026] [:error] [pid 31257:tid 31286] [client 20.104.206.150:51288] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aaT_cP-JFLfishX45N9LWwAAARc"]
[Mon Mar 02 11:09:37.356377 2026] [:error] [pid 31257:tid 31285] [client 20.104.206.150:51718] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aaT_cf-JFLfishX45N9LYQAAARY"]
[Mon Mar 02 11:09:39.032026 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:57234] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/st.php"] [unique_id "aaT_c0zkQFuA2qBk8UPd8wAAAY4"]
[Mon Mar 02 11:09:40.220521 2026] [:error] [pid 23872:tid 23879] [client 20.104.206.150:11263] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upgrade.php"] [unique_id "aaT_dEzkQFuA2qBk8UPd_AAAAYQ"]
[Mon Mar 02 11:09:41.668816 2026] [:error] [pid 23872:tid 23881] [client 20.104.206.150:10501] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/upgrade.php"] [unique_id "aaT_dUzkQFuA2qBk8UPeBQAAAYY"]
[Mon Mar 02 11:09:43.864227 2026] [:error] [pid 23872:tid 23890] [client 20.104.206.150:51273] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Mon Mar 02 11:12:08.732061 2026] [:error] [pid 28908:tid 28930] [client 216.73.216.82:34647] [client 216.73.216.82] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||pumpbooking.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaUACIqJmC8ih_lQQnASRAAAANQ"]
[Mon Mar 02 11:33:26.344873 2026] [:error] [pid 21575:tid 21588] [client 185.192.71.159:62047] [client 185.192.71.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aaUFBirocdArcJqFfInkAQAAAUk"]
[Mon Mar 02 11:33:26.837344 2026] [:error] [pid 21575:tid 21579] [client 185.92.25.47:65397] [client 185.92.25.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/txets.php"] [unique_id "aaUFBirocdArcJqFfInkBwAAAUA"]
[Mon Mar 02 11:33:27.328050 2026] [:error] [pid 21575:tid 21579] [client 91.230.225.112:21487] [client 91.230.225.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/txets.php"] [unique_id "aaUFByrocdArcJqFfInkDAAAAUA"]
[Mon Mar 02 11:33:27.823445 2026] [:error] [pid 21575:tid 21599] [client 185.192.71.147:60385] [client 185.192.71.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/txets.php"] [unique_id "aaUFByrocdArcJqFfInkEgAAAVQ"]
[Mon Mar 02 11:33:28.318777 2026] [:error] [pid 21575:tid 21579] [client 185.92.25.43:32661] [client 185.92.25.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aaUFCCrocdArcJqFfInkHAAAAUA"]
[Mon Mar 02 12:05:14.625977 2026] [:error] [pid 23872:tid 23882] [client 20.63.41.168:63966] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/trx24.php"] [unique_id "aaUMekzkQFuA2qBk8UMIbAAAAYc"]
[Mon Mar 02 12:05:16.386642 2026] [:error] [pid 21575:tid 21579] [client 20.63.41.168:64840] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/trx24.php"] [unique_id "aaUMfCrocdArcJqFfIkPwAAAAUA"]
[Mon Mar 02 12:05:19.421090 2026] [:error] [pid 28908:tid 28929] [client 20.63.41.168:64812] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/trx24.php"] [unique_id "aaUMf4qJmC8ih_lQQnBTUwAAANM"]
[Mon Mar 02 12:05:24.777712 2026] [:error] [pid 28793:tid 28812] [client 20.63.41.168:64800] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/trx24.php"] [unique_id "aaUMhA2_fxBANaHo1f5gPwAAAAU"]
[Mon Mar 02 12:05:35.666470 2026] [:error] [pid 28908:tid 28924] [client 20.63.41.168:65308] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaUMj4qJmC8ih_lQQnBTvgAAAM4"]
[Mon Mar 02 12:05:37.885408 2026] [:error] [pid 28908:tid 28922] [client 20.63.41.168:64795] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cah.php"] [unique_id "aaUMkYqJmC8ih_lQQnBT0QAAAMw"]
[Mon Mar 02 12:05:41.392945 2026] [:error] [pid 21575:tid 21580] [client 20.63.41.168:64890] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cah.php"] [unique_id "aaUMlSrocdArcJqFfIkQcQAAAUE"]
[Mon Mar 02 12:05:44.852116 2026] [:error] [pid 14466:tid 14469] [client 20.63.41.168:64774] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cah.php"] [unique_id "aaUMmP8w-ahEIiUSqM5RPgAAAcE"]
[Mon Mar 02 12:05:50.152285 2026] [:error] [pid 28908:tid 28931] [client 20.63.41.168:63976] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaUMnoqJmC8ih_lQQnBUBAAAANU"]
[Mon Mar 02 12:05:51.966544 2026] [:error] [pid 28908:tid 28929] [client 20.63.41.168:5669] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaUMn4qJmC8ih_lQQnBUGAAAANM"]
[Mon Mar 02 12:05:52.677136 2026] [:error] [pid 28908:tid 28932] [client 20.63.41.168:63877] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaUMoIqJmC8ih_lQQnBUIAAAANY"]
[Mon Mar 02 12:05:55.776150 2026] [:error] [pid 23872:tid 23879] [client 20.63.41.168:64885] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaUMo0zkQFuA2qBk8UMIuQAAAYQ"]
[Mon Mar 02 12:05:56.434645 2026] [:error] [pid 28908:tid 28918] [client 20.63.41.168:65298] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaUMpIqJmC8ih_lQQnBUNwAAAMg"]
[Mon Mar 02 12:05:58.217087 2026] [:error] [pid 21575:tid 21586] [client 20.63.41.168:64823] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaUMpirocdArcJqFfIkQ5gAAAUc"]
[Mon Mar 02 12:05:59.033299 2026] [:error] [pid 28908:tid 28926] [client 20.63.41.168:63964] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaUMp4qJmC8ih_lQQnBUSQAAANA"]
[Mon Mar 02 12:06:00.325271 2026] [:error] [pid 23872:tid 23887] [client 20.63.41.168:65306] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/acp.php"] [unique_id "aaUMqEzkQFuA2qBk8UMIwQAAAYw"]
[Mon Mar 02 12:06:01.355477 2026] [:error] [pid 28908:tid 28931] [client 20.63.41.168:65310] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaUMqYqJmC8ih_lQQnBUWwAAANU"]
[Mon Mar 02 12:06:02.416243 2026] [:error] [pid 28908:tid 28915] [client 20.63.41.168:63973] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaUMqoqJmC8ih_lQQnBUZQAAAMU"]
[Mon Mar 02 12:06:03.561235 2026] [:error] [pid 14466:tid 14486] [client 20.63.41.168:64874] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaUMq_8w-ahEIiUSqM5RYgAAAdI"]
[Mon Mar 02 12:06:04.250043 2026] [:error] [pid 14466:tid 14468] [client 20.63.41.168:65395] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/muzu.php"] [unique_id "aaUMrP8w-ahEIiUSqM5RZQAAAcA"]
[Mon Mar 02 12:06:04.953518 2026] [:error] [pid 28908:tid 28910] [client 20.63.41.168:65352] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaUMrIqJmC8ih_lQQnBUcAAAAMA"]
[Mon Mar 02 12:06:05.821411 2026] [:error] [pid 28908:tid 28930] [client 20.63.41.168:65340] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaUMrYqJmC8ih_lQQnBUdwAAANQ"]
[Mon Mar 02 12:06:06.486477 2026] [:error] [pid 23872:tid 23890] [client 20.63.41.168:64830] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaUMrkzkQFuA2qBk8UMIyAAAAY8"]
[Mon Mar 02 12:06:07.165646 2026] [:error] [pid 28908:tid 28913] [client 20.63.41.168:5686] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wpo.php"] [unique_id "aaUMr4qJmC8ih_lQQnBUhAAAAMM"]
[Mon Mar 02 12:06:07.635124 2026] [:error] [pid 28908:tid 28921] [client 20.63.41.168:63986] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaUMr4qJmC8ih_lQQnBUjAAAAMs"]
[Mon Mar 02 12:06:08.173252 2026] [:error] [pid 28908:tid 28916] [client 20.63.41.168:64796] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaUMsIqJmC8ih_lQQnBUlAAAAMY"]
[Mon Mar 02 12:06:08.943500 2026] [:error] [pid 23872:tid 23894] [client 20.63.41.168:65358] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaUMsEzkQFuA2qBk8UMIzQAAAZM"]
[Mon Mar 02 12:06:09.400786 2026] [:error] [pid 31257:tid 31286] [client 20.63.41.168:63939] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x123x.php"] [unique_id "aaUMsf-JFLfishX45N9mxgAAARc"]
[Mon Mar 02 12:06:10.046087 2026] [:error] [pid 31257:tid 31271] [client 20.63.41.168:64796] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aq.php"] [unique_id "aaUMsv-JFLfishX45N9myAAAAQg"]
[Mon Mar 02 12:06:10.488869 2026] [:error] [pid 23872:tid 23890] [client 20.63.41.168:63940] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aq.php"] [unique_id "aaUMskzkQFuA2qBk8UMI2QAAAY8"]
[Mon Mar 02 12:06:11.113086 2026] [:error] [pid 28908:tid 28917] [client 20.63.41.168:63988] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aq.php"] [unique_id "aaUMs4qJmC8ih_lQQnBUoQAAAMc"]
[Mon Mar 02 12:06:11.694647 2026] [:error] [pid 28908:tid 28920] [client 20.63.41.168:63876] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aq.php"] [unique_id "aaUMs4qJmC8ih_lQQnBUpwAAAMo"]
[Mon Mar 02 12:06:12.338664 2026] [:error] [pid 28908:tid 28919] [client 20.63.41.168:5643] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/011i.php"] [unique_id "aaUMtIqJmC8ih_lQQnBUrQAAAMk"]
[Mon Mar 02 12:06:13.009877 2026] [:error] [pid 28795:tid 28876] [client 20.63.41.168:64797] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/011i.php"] [unique_id "aaUMtbROd53wZBkdI_e-HgAAAI0"]
[Mon Mar 02 12:06:13.606480 2026] [:error] [pid 28908:tid 28914] [client 20.63.41.168:5656] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/011i.php"] [unique_id "aaUMtYqJmC8ih_lQQnBUuQAAAMQ"]
[Mon Mar 02 12:06:14.064119 2026] [:error] [pid 21575:tid 21597] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 12:06:14.310807 2026] [:error] [pid 21575:tid 21586] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 12:06:14.530356 2026] [:error] [pid 21575:tid 21579] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/as1337.php
[Mon Mar 02 12:06:14.743501 2026] [:error] [pid 21575:tid 21582] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Mon Mar 02 12:06:14.956719 2026] [:error] [pid 21575:tid 21601] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/wolf-shell.php
[Mon Mar 02 12:06:15.169216 2026] [:error] [pid 21575:tid 21588] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Mon Mar 02 12:06:15.384221 2026] [:error] [pid 21575:tid 21587] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/zeal.php
[Mon Mar 02 12:06:15.604826 2026] [:error] [pid 21575:tid 21593] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/asf.php
[Mon Mar 02 12:06:15.818981 2026] [:error] [pid 21575:tid 21580] [client 20.63.41.168:5639] File does not exist: /usr/local/apache/htdocs/suspended-page/sa.php
[Mon Mar 02 12:15:38.896608 2026] [:error] [pid 28908:tid 28921] [client 146.190.117.220:60323] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaUO6oqJmC8ih_lQQnBm4QAAAMs"]
[Mon Mar 02 12:15:38.900857 2026] [:error] [pid 28908:tid 28921] [client 146.190.117.220:60323] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 02 12:39:16.947371 2026] [:error] [pid 31257:tid 31268] [client 203.2.64.59:45615] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaUUdP-JFLfishX45N91RAAAAQU"]
[Mon Mar 02 13:46:55.637579 2026] [:error] [pid 59602:tid 59669] [client 162.62.132.25:52692] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaUkTzMtSo_Fr0lHnSa0mwAAAIQ"]
[Mon Mar 02 13:49:45.938109 2026] [:error] [pid 59602:tid 59676] [client 178.233.41.245:57833] [client 178.233.41.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.233.41.245, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaUk-TMtSo_Fr0lHnSa24QAAAIs"]
[Mon Mar 02 13:49:45.946366 2026] [:error] [pid 59602:tid 59676] [client 178.233.41.245:57833] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 14:03:03.945308 2026] [:error] [pid 59600:tid 59623] [client 62.84.185.60:60976] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaUoF4Q5lE4yocV9IBdrkgAAAA4"]
[Mon Mar 02 14:03:05.889252 2026] [:error] [pid 59734:tid 59757] [client 62.84.185.60:60992] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aaUoGZeWQx7ZQG9NybGxPgAAAVU"]
[Mon Mar 02 14:03:07.769714 2026] [:error] [pid 59601:tid 59647] [client 62.84.185.60:61006] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaUoG8Q1lXfvWN0-ZQlGBAAAAEk"]
[Mon Mar 02 15:56:05.363459 2026] [:error] [pid 59600:tid 59629] [client 177.21.37.90:55449] [client 177.21.37.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.21.37.90, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaVClYQ5lE4yocV9IBevTAAAABQ"]
[Mon Mar 02 15:56:05.368247 2026] [:error] [pid 59600:tid 59629] [client 177.21.37.90:55449] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 16:51:59.301166 2026] [:error] [pid 28847:tid 28868] [client 152.53.187.237:35716] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaVPr59xbBq8VfeqVDZ7sAAAANM"]
[Mon Mar 02 16:52:02.436742 2026] [:error] [pid 59602:tid 59673] [client 152.53.187.237:35798] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaVPsjMtSo_Fr0lHnSYDzQAAAIg"]
[Mon Mar 02 16:52:05.854293 2026] [:error] [pid 59600:tid 59628] [client 152.53.187.237:35814] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaVPtYQ5lE4yocV9IBfMagAAABM"]
[Mon Mar 02 16:52:09.821957 2026] [:error] [pid 59602:tid 59686] [client 152.53.187.237:35820] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaVPuTMtSo_Fr0lHnSYD0gAAAJU"]
[Mon Mar 02 16:52:12.716950 2026] [:error] [pid 59600:tid 59609] [client 152.53.187.237:34328] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaVPvIQ5lE4yocV9IBfMewAAAAA"]
[Mon Mar 02 16:52:15.140739 2026] [:error] [pid 59734:tid 59753] [client 152.53.187.237:34330] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaVPv5eWQx7ZQG9NybHd2gAAAVE"]
[Mon Mar 02 16:52:17.547735 2026] [:error] [pid 59602:tid 59686] [client 152.53.187.237:34340] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaVPwTMtSo_Fr0lHnSYD3QAAAJU"]
[Mon Mar 02 17:33:03.280570 2026] [:error] [pid 59602:tid 59670] [client 54.37.252.231:37482] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaVZTzMtSo_Fr0lHnSYThwAAAIU"]
[Mon Mar 02 17:33:05.256637 2026] [:error] [pid 59600:tid 59614] [client 54.37.252.231:58230] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaVZUYQ5lE4yocV9IBfh8AAAAAU"]
[Mon Mar 02 17:33:07.132902 2026] [:error] [pid 59601:tid 59645] [client 54.37.252.231:58244] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaVZU8Q1lXfvWN0-ZQloEQAAAEc"]
[Mon Mar 02 17:33:09.022632 2026] [:error] [pid 28847:tid 28850] [client 54.37.252.231:58248] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaVZVZ9xbBq8VfeqVDaZgAAAAME"]
[Mon Mar 02 17:33:11.074246 2026] [:error] [pid 59600:tid 59627] [client 54.37.252.231:58262] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaVZV4Q5lE4yocV9IBfh_wAAABI"]
[Mon Mar 02 17:33:12.938567 2026] [:error] [pid 59602:tid 59689] [client 54.37.252.231:45332] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaVZWDMtSo_Fr0lHnSYTkQAAAJg"]
[Mon Mar 02 17:33:14.959679 2026] [:error] [pid 59600:tid 59617] [client 54.37.252.231:45348] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaVZWoQ5lE4yocV9IBfiEwAAAAg"]
[Mon Mar 02 17:33:16.836173 2026] [:error] [pid 59734:tid 59753] [client 54.37.252.231:45350] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaVZXJeWQx7ZQG9NybHpiAAAAVE"]
[Mon Mar 02 17:33:18.869638 2026] [:error] [pid 59734:tid 59750] [client 54.37.252.231:45356] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaVZXpeWQx7ZQG9NybHpkwAAAU4"]
[Mon Mar 02 17:33:20.761894 2026] [:error] [pid 59602:tid 59684] [client 54.37.252.231:45362] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaVZYDMtSo_Fr0lHnSYTnAAAAJM"]
[Mon Mar 02 17:33:22.665221 2026] [:error] [pid 59734:tid 59746] [client 54.37.252.231:40146] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaVZYpeWQx7ZQG9NybHpnQAAAUo"]
[Mon Mar 02 17:33:24.539097 2026] [:error] [pid 59734:tid 59752] [client 54.37.252.231:40150] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaVZZJeWQx7ZQG9NybHprgAAAVA"]
[Mon Mar 02 17:33:26.444213 2026] [:error] [pid 59701:tid 59728] [client 54.37.252.231:40160] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaVZZuUmTDVso96U9_KjyAAAARg"]
[Mon Mar 02 17:33:28.489115 2026] [:error] [pid 59602:tid 59689] [client 54.37.252.231:40164] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaVZaDMtSo_Fr0lHnSYTqQAAAJg"]
[Mon Mar 02 17:33:30.378970 2026] [:error] [pid 28847:tid 28873] [client 54.37.252.231:40174] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aaVZap9xbBq8VfeqVDaZxAAAANg"]
[Mon Mar 02 18:16:17.918861 2026] [:error] [pid 28847:tid 28855] [client 54.37.86.225:49270] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aaVjcZ9xbBq8VfeqVDa6xQAAAMY"]
[Mon Mar 02 18:16:19.970529 2026] [:error] [pid 59600:tid 59618] [client 54.37.86.225:34332] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aaVjc4Q5lE4yocV9IBf68gAAAAk"]
[Mon Mar 02 18:16:22.133523 2026] [:error] [pid 28847:tid 28871] [client 54.37.86.225:34338] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaVjdp9xbBq8VfeqVDa62AAAANY"]
[Mon Mar 02 18:48:49.937923 2026] [:error] [pid 59602:tid 59685] [client 147.135.214.166:48158] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaVrETMtSo_Fr0lHnSYw4gAAAJQ"]
[Mon Mar 02 18:48:52.094177 2026] [:error] [pid 59602:tid 59678] [client 147.135.214.166:35816] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaVrFDMtSo_Fr0lHnSYw6gAAAI0"]
[Mon Mar 02 18:48:55.953264 2026] [:error] [pid 59734:tid 59757] [client 147.135.214.166:55752] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaVrF5eWQx7ZQG9NybH-7gAAAVU"]
[Mon Mar 02 19:33:44.984966 2026] [:error] [pid 59600:tid 59616] [client 51.75.128.89:59168] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aaV1mIQ5lE4yocV9IBcoGgAAAAc"]
[Mon Mar 02 19:33:46.946944 2026] [:error] [pid 59600:tid 59620] [client 51.75.128.89:57042] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaV1moQ5lE4yocV9IBcoJwAAAAs"]
[Mon Mar 02 19:33:48.990034 2026] [:error] [pid 59701:tid 59704] [client 51.75.128.89:57052] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaV1nOUmTDVso96U9_LAngAAAQA"]
[Mon Mar 02 19:33:51.011050 2026] [:error] [pid 28847:tid 28855] [client 51.75.128.89:57064] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaV1n59xbBq8VfeqVDb8TwAAAMY"]
[Mon Mar 02 19:33:52.889621 2026] [:error] [pid 59734:tid 59740] [client 51.75.128.89:57070] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaV1oJeWQx7ZQG9NybEMyAAAAUQ"]
[Mon Mar 02 19:33:54.924004 2026] [:error] [pid 28847:tid 28867] [client 51.75.128.89:57076] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaV1op9xbBq8VfeqVDb8ggAAANI"]
[Mon Mar 02 19:33:56.779184 2026] [:error] [pid 28847:tid 28868] [client 51.75.128.89:33508] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaV1pJ9xbBq8VfeqVDb8kwAAANM"]
[Mon Mar 02 19:33:58.802619 2026] [:error] [pid 59600:tid 59631] [client 51.75.128.89:33512] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaV1poQ5lE4yocV9IBcoVAAAABY"]
[Mon Mar 02 19:34:00.807862 2026] [:error] [pid 59600:tid 59615] [client 51.75.128.89:33524] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaV1qIQ5lE4yocV9IBcoXAAAAAY"]
[Mon Mar 02 19:34:02.673798 2026] [:error] [pid 59734:tid 59759] [client 51.75.128.89:33532] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaV1qpeWQx7ZQG9NybEM3QAAAVc"]
[Mon Mar 02 19:34:03.419022 2026] [:error] [pid 59734:tid 59738] [client 170.106.187.106:38202] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaV1q5eWQx7ZQG9NybEM4AAAAUI"]
[Mon Mar 02 19:34:04.673099 2026] [:error] [pid 59734:tid 59758] [client 51.75.128.89:33534] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaV1rJeWQx7ZQG9NybEM4wAAAVY"]
[Mon Mar 02 19:34:06.709857 2026] [:error] [pid 28847:tid 28852] [client 51.75.128.89:35582] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaV1rp9xbBq8VfeqVDb8uQAAAMM"]
[Mon Mar 02 19:34:08.709180 2026] [:error] [pid 59601:tid 59645] [client 51.75.128.89:35592] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaV1sMQ1lXfvWN0-ZQmAMgAAAEc"]
[Mon Mar 02 19:34:10.760994 2026] [:error] [pid 59701:tid 59718] [client 51.75.128.89:35604] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaV1suUmTDVso96U9_LAtQAAAQ4"]
[Mon Mar 02 19:34:12.615217 2026] [:error] [pid 28847:tid 28873] [client 51.75.128.89:35618] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaV1tJ9xbBq8VfeqVDb81QAAANg"]
[Mon Mar 02 19:34:13.076810 2026] [:error] [pid 59600:tid 59620] [client 106.54.62.156:33038] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaV1tYQ5lE4yocV9IBcozwAAAAs"]
[Mon Mar 02 19:34:14.626869 2026] [:error] [pid 28847:tid 28863] [client 51.75.128.89:35632] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaV1tp9xbBq8VfeqVDb84gAAAM4"]
[Mon Mar 02 19:34:16.485636 2026] [:error] [pid 28847:tid 28863] [client 51.75.128.89:51786] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaV1uJ9xbBq8VfeqVDb87wAAAM4"]
[Mon Mar 02 19:34:18.370021 2026] [:error] [pid 28847:tid 28872] [client 51.75.128.89:51796] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaV1up9xbBq8VfeqVDb9AAAAANc"]
[Mon Mar 02 19:34:20.422054 2026] [:error] [pid 59600:tid 59629] [client 51.75.128.89:51802] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aaV1vIQ5lE4yocV9IBco_gAAABQ"]
[Mon Mar 02 19:34:22.425888 2026] [:error] [pid 28847:tid 28854] [client 51.75.128.89:51814] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaV1vp9xbBq8VfeqVDb9JAAAAMU"]
[Mon Mar 02 19:34:24.441240 2026] [:error] [pid 28847:tid 28857] [client 51.75.128.89:51826] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaV1wJ9xbBq8VfeqVDb9MwAAAMg"]
[Mon Mar 02 19:34:26.301329 2026] [:error] [pid 28847:tid 28849] [client 51.75.128.89:44080] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaV1wp9xbBq8VfeqVDb9RgAAAMA"]
[Mon Mar 02 19:34:28.325513 2026] [:error] [pid 28847:tid 28869] [client 51.75.128.89:44086] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaV1xJ9xbBq8VfeqVDb9VwAAANQ"]
[Mon Mar 02 19:34:30.342744 2026] [:error] [pid 59602:tid 59683] [client 51.75.128.89:44098] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaV1xjMtSo_Fr0lHnSZDWgAAAJI"]
[Mon Mar 02 19:34:32.346592 2026] [:error] [pid 59600:tid 59629] [client 51.75.128.89:44114] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaV1yIQ5lE4yocV9IBcpJwAAABQ"]
[Mon Mar 02 19:34:34.343929 2026] [:error] [pid 59600:tid 59618] [client 51.75.128.89:44118] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaV1yoQ5lE4yocV9IBcpMAAAAAk"]
[Mon Mar 02 19:34:36.375613 2026] [:error] [pid 59600:tid 59626] [client 51.75.128.89:38656] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aaV1zIQ5lE4yocV9IBcpMwAAABE"]
[Mon Mar 02 19:34:38.227962 2026] [:error] [pid 59600:tid 59618] [client 51.75.128.89:38668] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaV1zoQ5lE4yocV9IBcpQQAAAAk"]
[Mon Mar 02 19:34:40.229605 2026] [:error] [pid 59600:tid 59626] [client 51.75.128.89:38676] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aaV10IQ5lE4yocV9IBcpUgAAABE"]
[Mon Mar 02 19:34:42.240227 2026] [:error] [pid 28847:tid 28873] [client 51.75.128.89:38692] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaV10p9xbBq8VfeqVDb9ggAAANg"]
[Mon Mar 02 19:35:03.009520 2026] [:error] [pid 59602:tid 59688] [client 51.75.128.89:38702] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaV15zMtSo_Fr0lHnSZDtwAAAJc"]
[Mon Mar 02 19:35:04.964089 2026] [:error] [pid 59600:tid 59610] [client 51.75.128.89:53192] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaV16IQ5lE4yocV9IBcpvgAAAAE"]
[Mon Mar 02 19:35:06.963364 2026] [:error] [pid 59600:tid 59627] [client 51.75.128.89:40214] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaV16oQ5lE4yocV9IBcpwwAAABI"]
[Mon Mar 02 19:35:08.954595 2026] [:error] [pid 28847:tid 28851] [client 51.75.128.89:40222] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaV17J9xbBq8VfeqVDb-HgAAAMI"]
[Mon Mar 02 19:35:11.136303 2026] [:error] [pid 28847:tid 28871] [client 51.75.128.89:40226] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaV1759xbBq8VfeqVDb-LAAAANY"]
[Mon Mar 02 19:35:14.956319 2026] [:error] [pid 28847:tid 28872] [client 51.75.128.89:40242] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaV18p9xbBq8VfeqVDb-QgAAANc"]
[Mon Mar 02 20:16:59.020197 2026] [:error] [pid 59602:tid 59671] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 02 20:16:59.228547 2026] [:error] [pid 59602:tid 59682] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 02 20:16:59.653100 2026] [:error] [pid 59602:tid 59675] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Mar 02 20:16:59.863557 2026] [:error] [pid 59602:tid 59681] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 02 20:17:00.288454 2026] [:error] [pid 59602:tid 59674] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Mar 02 20:17:00.499285 2026] [:error] [pid 59602:tid 59667] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Mar 02 20:17:00.731604 2026] [:error] [pid 59602:tid 59680] [client 20.104.87.220:9400] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Mar 02 20:17:01.151052 2026] [:error] [pid 59602:tid 59678] [client 20.104.87.220:9400] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaV_vTMtSo_Fr0lHnSZU1AAAAI0"]
[Mon Mar 02 20:17:02.016231 2026] [:error] [pid 59602:tid 59689] [client 20.104.87.220:10195] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaV_vjMtSo_Fr0lHnSZU1QAAAJg"]
[Mon Mar 02 20:17:02.862661 2026] [:error] [pid 59734:tid 59756] [client 20.104.87.220:9386] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaV_vpeWQx7ZQG9NybEZbAAAAVQ"]
[Mon Mar 02 20:17:03.714749 2026] [:error] [pid 59600:tid 59618] [client 20.104.87.220:9353] [client 20.104.87.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaV_v4Q5lE4yocV9IBc-2AAAAAk"]
[Mon Mar 02 21:20:35.628798 2026] [:error] [pid 59601:tid 59656] [client 134.122.33.73:54276] [client 134.122.33.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.33.73, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaWOo8Q1lXfvWN0-ZQmS3gAAAFI"]
[Mon Mar 02 21:20:35.632278 2026] [:error] [pid 59601:tid 59656] [client 134.122.33.73:54276] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 02 21:26:03.703944 2026] [:error] [pid 28847:tid 28849] [client 40.85.218.182:15019] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 02 21:26:03.920857 2026] [:error] [pid 28847:tid 28865] [client 40.85.218.182:15019] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 02 21:26:04.133624 2026] [:error] [pid 28847:tid 28852] [client 40.85.218.182:15019] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaWP7J9xbBq8VfeqVDZVYAAAAMM"]
[Mon Mar 02 21:26:04.967020 2026] [:error] [pid 59602:tid 59675] [client 40.85.218.182:15035] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaWP7DMtSo_Fr0lHnSZv2AAAAIo"]
[Mon Mar 02 21:26:05.803082 2026] [:error] [pid 59602:tid 59688] [client 40.85.218.182:14348] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaWP7TMtSo_Fr0lHnSZv2wAAAJc"]
[Mon Mar 02 21:26:06.634683 2026] [:error] [pid 59734:tid 59740] [client 40.85.218.182:15021] [client 40.85.218.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/function/function.php"] [unique_id "aaWP7peWQx7ZQG9NybEr5AAAAUQ"]
[Mon Mar 02 21:29:39.392494 2026] [:error] [pid 59602:tid 59687] [client 172.71.172.214:9633] [client 172.71.172.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aaWQwzMtSo_Fr0lHnSZx6AAAAJY"]
[Mon Mar 02 22:01:29.970229 2026] [:error] [pid 59602:tid 59683] [client 20.151.217.152:25463] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaWYOTMtSo_Fr0lHnSZ-7wAAAJI"]
[Mon Mar 02 22:01:30.384857 2026] [:error] [pid 59601:tid 59642] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 22:01:30.815283 2026] [:error] [pid 59601:tid 59650] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 22:01:31.023258 2026] [:error] [pid 59601:tid 59656] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 22:01:31.230502 2026] [:error] [pid 59601:tid 59647] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 22:01:31.439721 2026] [:error] [pid 59601:tid 59662] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 22:01:31.647688 2026] [:error] [pid 59601:tid 59644] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 22:01:31.855105 2026] [:error] [pid 59601:tid 59651] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 22:01:32.062422 2026] [:error] [pid 59601:tid 59660] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 22:01:32.269613 2026] [:error] [pid 59601:tid 59657] [client 20.151.217.152:25433] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 22:01:32.473741 2026] [:error] [pid 59601:tid 59640] [client 20.151.217.152:25433] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaWYPMQ1lXfvWN0-ZQmbHwAAAEI"]
[Mon Mar 02 22:01:57.152717 2026] [:error] [pid 59701:tid 59708] [client 20.151.217.152:35531] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWYVeUmTDVso96U9_LilQAAAQQ"]
[Mon Mar 02 22:01:57.570015 2026] [:error] [pid 59601:tid 59642] [client 20.151.217.152:35573] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWYVcQ1lXfvWN0-ZQmbQAAAAEQ"]
[Mon Mar 02 22:01:57.980485 2026] [:error] [pid 59602:tid 59689] [client 20.151.217.152:35538] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWYVTMtSo_Fr0lHnSZ_FAAAAJg"]
[Mon Mar 02 22:35:11.926101 2026] [:error] [pid 28847:tid 28851] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Mar 02 22:35:12.097728 2026] [:error] [pid 28847:tid 28869] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Mar 02 22:35:12.346908 2026] [:error] [pid 28847:tid 28870] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Mon Mar 02 22:35:12.563645 2026] [:error] [pid 28847:tid 28849] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Mar 02 22:35:12.740150 2026] [:error] [pid 28847:tid 28860] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Mar 02 22:35:12.968009 2026] [:error] [pid 28847:tid 28856] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Mar 02 22:35:13.143742 2026] [:error] [pid 28847:tid 28864] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Mar 02 22:35:14.495228 2026] [:error] [pid 28847:tid 28864] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 02 22:35:14.891874 2026] [:error] [pid 28847:tid 28853] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Mar 02 22:35:15.292182 2026] [:error] [pid 28847:tid 28871] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Mon Mar 02 22:35:15.464362 2026] [:error] [pid 28847:tid 28861] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Mar 02 22:35:15.627500 2026] [:error] [pid 28847:tid 28866] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 02 22:35:15.887148 2026] [:error] [pid 28847:tid 28865] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Mar 02 22:35:16.096438 2026] [:error] [pid 28847:tid 28872] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Mar 02 22:35:16.285043 2026] [:error] [pid 28847:tid 28873] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Mon Mar 02 22:35:16.519055 2026] [:error] [pid 28847:tid 28851] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Mon Mar 02 22:35:16.775886 2026] [:error] [pid 28847:tid 28869] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Mar 02 22:35:16.960596 2026] [:error] [pid 28847:tid 28870] [client 173.239.218.15:60809] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Mar 02 22:35:19.907032 2026] [:error] [pid 28847:tid 28855] [client 173.239.218.15:60809] [client 173.239.218.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaWgJ59xbBq8VfeqVDaKiwAAAMY"]
[Mon Mar 02 22:35:21.026775 2026] [:error] [pid 59734:tid 59745] [client 173.239.218.7:54081] [client 173.239.218.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaWgKZeWQx7ZQG9NybFBOwAAAUk"]
[Mon Mar 02 22:35:22.085113 2026] [:error] [pid 59600:tid 59614] [client 216.24.210.92:30595] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Mar 02 22:35:22.687892 2026] [:error] [pid 59600:tid 59628] [client 216.24.210.92:30595] [client 216.24.210.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaWgKoQ5lE4yocV9IBeNmgAAABM"]
[Mon Mar 02 22:35:23.436919 2026] [:error] [pid 59734:tid 59740] [client 216.24.210.92:51273] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Mar 02 22:35:23.695433 2026] [:error] [pid 59734:tid 59743] [client 216.24.210.92:51273] [client 216.24.210.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaWgK5eWQx7ZQG9NybFBQwAAAUc"]
[Mon Mar 02 22:35:24.216539 2026] [:error] [pid 59601:tid 59660] [client 173.239.218.12:40449] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Mar 02 22:35:25.158054 2026] [:error] [pid 59601:tid 59652] [client 173.239.218.12:40449] [client 173.239.218.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaWgLcQ1lXfvWN0-ZQmiPAAAAE4"]
[Mon Mar 02 22:35:25.740542 2026] [:error] [pid 59734:tid 59748] [client 216.24.210.93:30309] [client 216.24.210.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaWgLZeWQx7ZQG9NybFBSAAAAUw"]
[Mon Mar 02 22:35:26.223373 2026] [:error] [pid 59734:tid 59759] [client 216.24.210.75:31689] [client 216.24.210.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaWgLpeWQx7ZQG9NybFBSgAAAVc"]
[Mon Mar 02 22:35:26.599851 2026] [:error] [pid 59601:tid 59645] [client 216.24.210.73:43843] [client 216.24.210.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaWgLsQ1lXfvWN0-ZQmiQAAAAEc"]
[Mon Mar 02 22:35:27.018932 2026] [:error] [pid 59734:tid 59760] [client 216.24.210.77:28033] [client 216.24.210.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaWgL5eWQx7ZQG9NybFBUAAAAVg"]
[Mon Mar 02 22:35:28.779136 2026] [:error] [pid 59734:tid 59754] [client 98.159.37.19:27609] [client 98.159.37.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaWgMJeWQx7ZQG9NybFBWgAAAVI"]
[Mon Mar 02 22:35:29.424509 2026] [:error] [pid 28847:tid 28862] [client 98.159.37.21:57351] [client 98.159.37.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaWgMZ9xbBq8VfeqVDaKpwAAAM0"]
[Mon Mar 02 22:35:29.823970 2026] [:error] [pid 59600:tid 59611] [client 173.239.218.7:51485] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Mon Mar 02 22:35:30.262473 2026] [:error] [pid 59600:tid 59629] [client 173.239.218.7:51485] [client 173.239.218.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaWgMoQ5lE4yocV9IBeNpgAAABQ"]
[Mon Mar 02 22:35:31.078023 2026] [:error] [pid 28847:tid 28864] [client 216.24.210.71:46303] [client 216.24.210.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaWgM59xbBq8VfeqVDaKsQAAAM8"]
[Mon Mar 02 22:35:32.700232 2026] [:error] [pid 59701:tid 59717] [client 216.24.210.69:33503] [client 216.24.210.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaWgNOUmTDVso96U9_LrswAAAQ0"]
[Mon Mar 02 22:35:33.044673 2026] [:error] [pid 59734:tid 59745] [client 216.24.210.46:37839] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Mar 02 22:35:33.239608 2026] [:error] [pid 59734:tid 59752] [client 216.24.210.46:37839] [client 216.24.210.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaWgNZeWQx7ZQG9NybFBbwAAAVA"]
[Mon Mar 02 22:35:33.659885 2026] [:error] [pid 59602:tid 59669] [client 173.239.218.12:31159] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Mar 02 22:35:34.308142 2026] [:error] [pid 59602:tid 59668] [client 173.239.218.12:31159] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Mar 02 22:35:34.908832 2026] [:error] [pid 59602:tid 59677] [client 173.239.218.12:31159] [client 173.239.218.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaWgNjMtSo_Fr0lHnSaMVQAAAIw"]
[Mon Mar 02 22:35:35.265656 2026] [:error] [pid 59601:tid 59653] [client 98.159.37.22:20825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Mon Mar 02 22:35:35.454829 2026] [:error] [pid 59601:tid 59641] [client 98.159.37.22:20825] [client 98.159.37.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaWgN8Q1lXfvWN0-ZQmiVgAAAEM"]
[Mon Mar 02 22:35:36.954498 2026] [:error] [pid 59600:tid 59611] [client 216.24.210.68:25549] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Mar 02 22:35:37.346328 2026] [:error] [pid 59600:tid 59613] [client 216.24.210.68:25549] [client 216.24.210.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaWgOYQ5lE4yocV9IBeNtQAAAAQ"]
[Mon Mar 02 22:35:38.061924 2026] [:error] [pid 59734:tid 59739] [client 216.24.210.79:27559] [client 216.24.210.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaWgOpeWQx7ZQG9NybFBggAAAUM"]
[Mon Mar 02 22:35:38.634871 2026] [:error] [pid 28847:tid 28857] [client 98.159.37.16:48631] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Mon Mar 02 22:35:38.815000 2026] [:error] [pid 28847:tid 28851] [client 98.159.37.16:48631] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Mar 02 22:35:39.247525 2026] [:error] [pid 28847:tid 28865] [client 98.159.37.16:48631] [client 98.159.37.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaWgO59xbBq8VfeqVDaKywAAANA"]
[Mon Mar 02 22:35:40.050382 2026] [:error] [pid 59600:tid 59623] [client 216.24.210.46:41375] [client 216.24.210.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaWgPIQ5lE4yocV9IBeNvAAAAA4"]
[Mon Mar 02 22:37:44.901732 2026] [:error] [pid 59600:tid 59629] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Mar 02 22:37:45.142399 2026] [:error] [pid 59600:tid 59611] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Mar 02 22:37:45.399522 2026] [:error] [pid 59600:tid 59616] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Mon Mar 02 22:37:45.655341 2026] [:error] [pid 59600:tid 59624] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Mar 02 22:37:45.934214 2026] [:error] [pid 59600:tid 59621] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Mar 02 22:37:46.190831 2026] [:error] [pid 59600:tid 59631] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Mar 02 22:37:46.445307 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Mar 02 22:37:46.691154 2026] [:error] [pid 59600:tid 59612] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 02 22:37:47.235684 2026] [:error] [pid 59600:tid 59611] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Mar 02 22:37:47.745956 2026] [:error] [pid 59600:tid 59624] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Mon Mar 02 22:37:47.995543 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Mar 02 22:37:48.265344 2026] [:error] [pid 59600:tid 59614] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 02 22:37:48.511523 2026] [:error] [pid 59600:tid 59622] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Mar 02 22:37:48.772299 2026] [:error] [pid 59600:tid 59627] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Mar 02 22:37:49.017804 2026] [:error] [pid 59600:tid 59617] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Mon Mar 02 22:37:49.285835 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Mon Mar 02 22:37:49.526124 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Mar 02 22:37:49.823684 2026] [:error] [pid 59600:tid 59628] [client 89.251.0.139:63885] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Mar 02 22:37:55.531888 2026] [:error] [pid 59600:tid 59613] [client 89.251.0.139:63885] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaWgw4Q5lE4yocV9IBePkwAAAAQ"]
[Mon Mar 02 22:37:56.877303 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.126:45365] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaWgxIQ5lE4yocV9IBePoAAAAAk"]
[Mon Mar 02 22:37:58.491855 2026] [:error] [pid 28847:tid 28849] [client 89.251.0.145:29547] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Mar 02 22:37:59.306714 2026] [:error] [pid 28847:tid 28860] [client 89.251.0.145:29547] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "aaWgx59xbBq8VfeqVDaMhAAAAMs"]
[Mon Mar 02 22:38:00.310005 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.116:49149] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Mar 02 22:38:00.592025 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.116:49149] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaWgyJ9xbBq8VfeqVDaMkQAAAMk"]
[Mon Mar 02 22:38:01.678386 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.144:36483] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Mar 02 22:38:03.309536 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.144:36483] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaWgy4Q5lE4yocV9IBePvgAAAAs"]
[Mon Mar 02 22:38:04.187677 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.147:60359] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaWgzIQ5lE4yocV9IBePyAAAABg"]
[Mon Mar 02 22:38:04.672132 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.136:51699] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaWgzJ9xbBq8VfeqVDaMnwAAANc"]
[Mon Mar 02 22:38:05.618276 2026] [:error] [pid 59734:tid 59743] [client 89.251.0.123:28955] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaWgzZeWQx7ZQG9NybFCbgAAAUc"]
[Mon Mar 02 22:38:06.200542 2026] [:error] [pid 28847:tid 28851] [client 89.251.0.133:29925] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaWgzp9xbBq8VfeqVDaMqgAAAMI"]
[Mon Mar 02 22:38:06.817836 2026] [:error] [pid 59601:tid 59660] [client 89.251.0.142:44945] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaWgzsQ1lXfvWN0-ZQmjRgAAAFY"]
[Mon Mar 02 22:38:08.170938 2026] [:error] [pid 59734:tid 59739] [client 89.251.0.132:20517] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaWg0JeWQx7ZQG9NybFCdwAAAUM"]
[Mon Mar 02 22:38:08.710972 2026] [:error] [pid 28847:tid 28852] [client 89.251.0.128:51303] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Mon Mar 02 22:38:09.312520 2026] [:error] [pid 28847:tid 28869] [client 89.251.0.128:51303] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "aaWg0Z9xbBq8VfeqVDaMsQAAANQ"]
[Mon Mar 02 22:38:10.885509 2026] [:error] [pid 59701:tid 59704] [client 89.251.0.129:52577] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaWg0uUmTDVso96U9_LsWgAAAQA"]
[Mon Mar 02 22:38:12.927989 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.134:23561] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaWg1J9xbBq8VfeqVDaMugAAAMk"]
[Mon Mar 02 22:38:13.534790 2026] [:error] [pid 59600:tid 59617] [client 89.251.0.114:43401] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Mar 02 22:38:13.877555 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.114:43401] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaWg1YQ5lE4yocV9IBeP3gAAAAo"]
[Mon Mar 02 22:38:14.417441 2026] [:error] [pid 59734:tid 59743] [client 89.251.0.143:34645] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Mar 02 22:38:15.422832 2026] [:error] [pid 59734:tid 59744] [client 89.251.0.143:34645] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Mar 02 22:38:16.288027 2026] [:error] [pid 59734:tid 59742] [client 89.251.0.143:34645] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaWg2JeWQx7ZQG9NybFCjgAAAUY"]
[Mon Mar 02 22:38:16.876700 2026] [:error] [pid 59600:tid 59631] [client 89.251.0.144:36059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Mon Mar 02 22:38:17.226987 2026] [:error] [pid 59600:tid 59609] [client 89.251.0.144:36059] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaWg2YQ5lE4yocV9IBeP4gAAAAA"]
[Mon Mar 02 22:38:17.768261 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.150:24877] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Mar 02 22:38:19.499076 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.150:24877] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaWg259xbBq8VfeqVDaM6wAAANM"]
[Mon Mar 02 22:38:20.320485 2026] [:error] [pid 59602:tid 59679] [client 89.251.0.124:55213] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaWg3DMtSo_Fr0lHnSaNVQAAAI4"]
[Mon Mar 02 22:38:21.478219 2026] [:error] [pid 59602:tid 59688] [client 89.251.0.146:52647] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Mon Mar 02 22:38:21.839060 2026] [:error] [pid 59602:tid 59679] [client 89.251.0.146:52647] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Mar 02 22:38:22.391221 2026] [:error] [pid 59602:tid 59665] [client 89.251.0.146:52647] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaWg3jMtSo_Fr0lHnSaNaAAAAIA"]
[Mon Mar 02 22:38:23.358808 2026] [:error] [pid 28847:tid 28856] [client 89.251.0.147:26139] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaWg359xbBq8VfeqVDaM-wAAAMc"]
[Mon Mar 02 22:38:24.358225 2026] [:error] [pid 59602:tid 59686] [client 89.251.0.146:58615] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaWg4DMtSo_Fr0lHnSaNbAAAAJU"]
[Mon Mar 02 22:38:24.875942 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.127:50939] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaWg4J9xbBq8VfeqVDaNAQAAANU"]
[Mon Mar 02 22:38:25.512100 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.126:23031] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaWg4YQ5lE4yocV9IBeQAgAAABE"]
[Mon Mar 02 22:38:26.608969 2026] [:error] [pid 59602:tid 59673] [client 89.251.0.119:34337] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Mar 02 22:38:26.864321 2026] [:error] [pid 59602:tid 59684] [client 89.251.0.119:34337] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaWg4jMtSo_Fr0lHnSaNewAAAJM"]
[Mon Mar 02 22:38:27.482726 2026] [:error] [pid 59602:tid 59674] [client 89.251.0.128:22611] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaWg4zMtSo_Fr0lHnSaNgAAAAIk"]
[Mon Mar 02 22:38:28.066901 2026] [:error] [pid 59734:tid 59757] [client 89.251.0.140:49957] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaWg5JeWQx7ZQG9NybFCsQAAAVU"]
[Mon Mar 02 22:38:29.306639 2026] [:error] [pid 28847:tid 28855] [client 89.251.0.126:53389] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Mon Mar 02 22:38:30.936770 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.126:53389] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Mar 02 22:38:32.194713 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.126:53389] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "aaWg6J9xbBq8VfeqVDaNIwAAAM0"]
[Mon Mar 02 22:38:33.991689 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.140:22637] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaWg6YQ5lE4yocV9IBeQDgAAAAo"]
[Mon Mar 02 22:38:35.429352 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.140:22637] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Mar 02 22:38:36.826627 2026] [:error] [pid 59600:tid 59611] [client 89.251.0.140:22637] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Mon Mar 02 22:38:37.134832 2026] [:error] [pid 59600:tid 59615] [client 89.251.0.140:22637] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Mar 02 22:38:38.896150 2026] [:error] [pid 59600:tid 59612] [client 89.251.0.140:22637] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaWg7oQ5lE4yocV9IBeQIgAAAAM"]
[Mon Mar 02 22:38:39.807024 2026] [:error] [pid 59701:tid 59720] [client 89.251.0.134:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Mon Mar 02 22:38:40.080495 2026] [:error] [pid 59701:tid 59724] [client 89.251.0.134:61679] [client 89.251.0.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.134, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaWg8OUmTDVso96U9_LshAAAARQ"]
[Mon Mar 02 22:38:40.720909 2026] [:error] [pid 59701:tid 59710] [client 89.251.0.134:61679] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "aaWg8OUmTDVso96U9_LsigAAAQY"]
[Mon Mar 02 22:38:42.588040 2026] [:error] [pid 59601:tid 59641] [client 89.251.0.121:38575] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Mar 02 22:38:43.197634 2026] [:error] [pid 59601:tid 59647] [client 89.251.0.121:38575] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Mon Mar 02 22:38:43.763874 2026] [:error] [pid 59601:tid 59649] [client 89.251.0.121:38575] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaWg88Q1lXfvWN0-ZQmjcQAAAEs"]
[Mon Mar 02 22:38:44.304727 2026] [:error] [pid 59600:tid 59609] [client 89.251.0.136:51993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Mar 02 22:38:45.220811 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.136:51993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Mon Mar 02 22:38:45.790552 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.136:51993] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Mar 02 22:38:46.401316 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.136:51993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Mar 02 22:38:46.771833 2026] [:error] [pid 59600:tid 59615] [client 89.251.0.136:51993] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaWg9oQ5lE4yocV9IBeQQwAAAAY"]
[Mon Mar 02 22:38:47.446438 2026] [:error] [pid 59602:tid 59670] [client 89.251.0.142:61727] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Mar 02 22:38:47.699135 2026] [:error] [pid 59602:tid 59683] [client 89.251.0.142:61727] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Mar 02 22:38:48.030149 2026] [:error] [pid 59602:tid 59671] [client 89.251.0.142:61727] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaWg-DMtSo_Fr0lHnSaNlwAAAIY"]
[Mon Mar 02 22:38:49.248825 2026] [:error] [pid 28847:tid 28854] [client 89.251.0.140:20979] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Mon Mar 02 22:38:49.820784 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.140:20979] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaWg-Z9xbBq8VfeqVDaNZgAAANc"]
[Mon Mar 02 22:38:50.095189 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.140:20979] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaWg-p9xbBq8VfeqVDaNaAAAANA"]
[Mon Mar 02 22:38:54.639665 2026] [:error] [pid 59734:tid 59740] [client 89.251.0.143:30653] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Mon Mar 02 22:38:58.018494 2026] [:error] [pid 59734:tid 59756] [client 89.251.0.143:30653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Mar 02 22:38:58.379012 2026] [:error] [pid 59734:tid 59747] [client 89.251.0.143:30653] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaWhApeWQx7ZQG9NybFDKAAAAUs"]
[Mon Mar 02 22:38:59.046316 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.146:53757] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Mar 02 22:38:59.904209 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.146:53757] [client 89.251.0.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.146, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaWhA59xbBq8VfeqVDaNhwAAAMw"]
[Mon Mar 02 22:39:00.215894 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.146:53757] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Mon Mar 02 22:39:00.556253 2026] [:error] [pid 28847:tid 28855] [client 89.251.0.146:53757] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Mon Mar 02 22:39:00.832256 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.146:53757] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Mon Mar 02 22:39:01.134254 2026] [:error] [pid 28847:tid 28869] [client 89.251.0.146:53757] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaWhBZ9xbBq8VfeqVDaNjAAAANQ"]
[Mon Mar 02 22:39:01.676502 2026] [:error] [pid 59602:tid 59685] [client 89.251.0.144:59313] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Mar 02 22:39:01.956031 2026] [:error] [pid 59602:tid 59687] [client 89.251.0.144:59313] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "aaWhBTMtSo_Fr0lHnSaNtQAAAJY"]
[Mon Mar 02 22:39:02.894477 2026] [:error] [pid 59601:tid 59647] [client 89.251.0.126:61423] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Mar 02 22:39:03.261276 2026] [:error] [pid 59601:tid 59661] [client 89.251.0.126:61423] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaWhB8Q1lXfvWN0-ZQmjfAAAAFc"]
[Mon Mar 02 22:39:04.549241 2026] [:error] [pid 28847:tid 28857] [client 89.251.0.142:28571] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Mon Mar 02 22:39:04.822943 2026] [:error] [pid 28847:tid 28863] [client 89.251.0.142:28571] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaWhCJ9xbBq8VfeqVDaNpgAAAM4"]
[Mon Mar 02 22:39:05.384182 2026] [:error] [pid 59602:tid 59672] [client 89.251.0.123:59735] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaWhCTMtSo_Fr0lHnSaNvAAAAIc"]
[Mon Mar 02 22:39:06.003331 2026] [:error] [pid 59602:tid 59678] [client 89.251.0.133:28843] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Mon Mar 02 22:39:07.385118 2026] [:error] [pid 59602:tid 59678] [client 89.251.0.133:28843] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Mon Mar 02 22:39:08.827476 2026] [:error] [pid 59602:tid 59682] [client 89.251.0.133:28843] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaWhDDMtSo_Fr0lHnSaNygAAAJE"]
[Mon Mar 02 22:39:09.844284 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.144:62383] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaWhDZ9xbBq8VfeqVDaNzwAAAM8"]
[Mon Mar 02 22:39:11.527197 2026] [:error] [pid 59602:tid 59676] [client 89.251.0.150:33537] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "aaWhDzMtSo_Fr0lHnSaN0gAAAIs"]
[Mon Mar 02 22:39:12.140184 2026] [:error] [pid 59701:tid 59722] [client 89.251.0.148:50265] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Mon Mar 02 22:39:12.764139 2026] [:error] [pid 59701:tid 59714] [client 89.251.0.148:50265] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Mar 02 22:39:13.032404 2026] [:error] [pid 59701:tid 59710] [client 89.251.0.148:50265] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaWhEeUmTDVso96U9_LstAAAAQY"]
[Mon Mar 02 22:39:13.681431 2026] [:error] [pid 59701:tid 59723] [client 89.251.0.127:44581] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 02 22:39:14.313756 2026] [:error] [pid 59701:tid 59708] [client 89.251.0.127:44581] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "aaWhEuUmTDVso96U9_LsugAAAQQ"]
[Mon Mar 02 22:39:15.888166 2026] [:error] [pid 59734:tid 59737] [client 89.251.0.137:20659] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaWhE5eWQx7ZQG9NybFDRAAAAUE"]
[Mon Mar 02 22:39:16.811062 2026] [:error] [pid 28847:tid 28863] [client 89.251.0.150:39713] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Mar 02 22:39:18.268322 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.150:39713] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Mon Mar 02 22:39:18.942915 2026] [:error] [pid 28847:tid 28856] [client 89.251.0.150:39713] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Mar 02 22:39:19.251111 2026] [:error] [pid 28847:tid 28860] [client 89.251.0.150:39713] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaWhF59xbBq8VfeqVDaN7gAAAMs"]
[Mon Mar 02 22:39:19.890197 2026] [:error] [pid 59734:tid 59738] [client 89.251.0.132:26833] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaWhF5eWQx7ZQG9NybFDSQAAAUI"]
[Mon Mar 02 22:39:20.502522 2026] [:error] [pid 59600:tid 59622] [client 89.251.0.113:32409] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaWhGIQ5lE4yocV9IBeQlQAAAA0"]
[Mon Mar 02 22:39:21.139576 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.147:48603] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaWhGZ9xbBq8VfeqVDaN7wAAAMk"]
[Mon Mar 02 22:39:21.822441 2026] [:error] [pid 59601:tid 59657] [client 89.251.0.132:20695] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Mon Mar 02 22:39:22.123316 2026] [:error] [pid 59601:tid 59655] [client 89.251.0.132:20695] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaWhGsQ1lXfvWN0-ZQmjlgAAAFE"]
[Mon Mar 02 22:39:22.737607 2026] [:error] [pid 59601:tid 59652] [client 89.251.0.143:58079] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaWhGsQ1lXfvWN0-ZQmjmAAAAE4"]
[Mon Mar 02 22:39:23.407544 2026] [:error] [pid 59602:tid 59684] [client 89.251.0.117:57365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Mar 02 22:39:23.992334 2026] [:error] [pid 59602:tid 59689] [client 89.251.0.117:57365] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaWhGzMtSo_Fr0lHnSaN6QAAAJg"]
[Mon Mar 02 22:39:25.657236 2026] [:error] [pid 59602:tid 59676] [client 89.251.0.137:62839] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaWhHTMtSo_Fr0lHnSaN8wAAAIs"]
[Mon Mar 02 22:39:26.233601 2026] [:error] [pid 59600:tid 59622] [client 89.251.0.140:28753] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaWhHoQ5lE4yocV9IBeQnwAAAA0"]
[Mon Mar 02 22:39:26.839457 2026] [:error] [pid 59701:tid 59723] [client 89.251.0.116:63325] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaWhHuUmTDVso96U9_LswAAAARM"]
[Mon Mar 02 22:39:28.305537 2026] [:error] [pid 59701:tid 59708] [client 89.251.0.129:34329] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaWhIOUmTDVso96U9_LsxQAAAQQ"]
[Mon Mar 02 22:39:30.121185 2026] [:error] [pid 59701:tid 59715] [client 89.251.0.142:45197] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaWhIuUmTDVso96U9_LszwAAAQs"]
[Mon Mar 02 22:39:30.733677 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.134:22207] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Mar 02 22:39:31.737860 2026] [:error] [pid 28847:tid 28853] [client 89.251.0.134:22207] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Mon Mar 02 22:39:32.343761 2026] [:error] [pid 59734:tid 59745] [client 51.161.86.195:35100] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWhJJeWQx7ZQG9NybFDZAAAAUk"]
[Mon Mar 02 22:39:32.427988 2026] [:error] [pid 28847:tid 28867] [client 89.251.0.134:22207] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaWhJJ9xbBq8VfeqVDaOCQAAANI"]
[Mon Mar 02 22:39:32.463864 2026] [:error] [pid 59701:tid 59716] [client 51.161.86.195:35114] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWhJOUmTDVso96U9_Ls1AAAAQw"]
[Mon Mar 02 22:39:32.823009 2026] [:error] [pid 59734:tid 59743] [client 51.161.86.195:35108] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWhJJeWQx7ZQG9NybFDZQAAAUc"]
[Mon Mar 02 22:39:32.998762 2026] [:error] [pid 59701:tid 59725] [client 51.161.86.195:35132] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaWhJOUmTDVso96U9_Ls1gAAARU"]
[Mon Mar 02 22:39:33.096785 2026] [:error] [pid 28847:tid 28866] [client 51.161.86.195:35118] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaWhJZ9xbBq8VfeqVDaOEAAAANE"]
[Mon Mar 02 22:39:33.209473 2026] [:error] [pid 28847:tid 28865] [client 51.161.86.195:35164] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhJZ9xbBq8VfeqVDaOEQAAANA"]
[Mon Mar 02 22:39:33.521305 2026] [:error] [pid 28847:tid 28850] [client 89.251.0.139:58115] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Mon Mar 02 22:39:33.904430 2026] [:error] [pid 28847:tid 28873] [client 89.251.0.139:58115] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Mar 02 22:39:34.456733 2026] [:error] [pid 59600:tid 59629] [client 51.161.86.195:35172] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWhJoQ5lE4yocV9IBeQrgAAABQ"]
[Mon Mar 02 22:39:34.512609 2026] [:error] [pid 59600:tid 59616] [client 51.161.86.195:35188] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWhJoQ5lE4yocV9IBeQsAAAAAc"]
[Mon Mar 02 22:39:34.833751 2026] [:error] [pid 59600:tid 59625] [client 51.161.86.195:35200] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aaWhJoQ5lE4yocV9IBeQswAAABA"]
[Mon Mar 02 22:39:34.981762 2026] [:error] [pid 59600:tid 59632] [client 51.161.86.195:35204] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aaWhJoQ5lE4yocV9IBeQtAAAABc"]
[Mon Mar 02 22:39:35.657722 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.139:58115] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaWhJ59xbBq8VfeqVDaOJQAAAMw"]
[Mon Mar 02 22:39:36.125866 2026] [:error] [pid 59600:tid 59619] [client 51.161.86.195:35148] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhKIQ5lE4yocV9IBeQugAAAAo"]
[Mon Mar 02 22:39:36.226089 2026] [:error] [pid 59734:tid 59753] [client 51.161.86.195:55796] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWhKJeWQx7ZQG9NybFDaAAAAVE"]
[Mon Mar 02 22:39:36.367715 2026] [:error] [pid 59600:tid 59623] [client 51.161.86.195:55798] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhKIQ5lE4yocV9IBeQvAAAAA4"]
[Mon Mar 02 22:39:36.559886 2026] [:error] [pid 59600:tid 59633] [client 51.161.86.195:55814] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhKIQ5lE4yocV9IBeQvgAAABg"]
[Mon Mar 02 22:39:36.704937 2026] [:error] [pid 59602:tid 59666] [client 51.161.86.195:55830] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWhKDMtSo_Fr0lHnSaN_QAAAIE"]
[Mon Mar 02 22:39:36.729362 2026] [:error] [pid 59600:tid 59611] [client 51.161.86.195:55834] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWhKIQ5lE4yocV9IBeQvwAAAAI"]
[Mon Mar 02 22:39:37.100927 2026] [:error] [pid 28847:tid 28858] [client 51.161.86.195:55838] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhKZ9xbBq8VfeqVDaOLgAAAMk"]
[Mon Mar 02 22:39:37.415444 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.139:63661] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaWhKZ9xbBq8VfeqVDaONAAAAMo"]
[Mon Mar 02 22:39:38.103722 2026] [:error] [pid 59701:tid 59723] [client 89.251.0.150:24567] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaWhKuUmTDVso96U9_Ls2AAAARM"]
[Mon Mar 02 22:39:38.219151 2026] [:error] [pid 59600:tid 59616] [client 51.161.86.195:55846] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWhKoQ5lE4yocV9IBeQwAAAAAc"]
[Mon Mar 02 22:39:38.594119 2026] [:error] [pid 59734:tid 59756] [client 51.161.86.195:55848] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWhKpeWQx7ZQG9NybFDbQAAAVQ"]
[Mon Mar 02 22:39:38.738934 2026] [:error] [pid 28847:tid 28859] [client 51.161.86.195:55850] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWhKp9xbBq8VfeqVDaOOQAAAMo"]
[Mon Mar 02 22:39:39.315266 2026] [:error] [pid 28847:tid 28863] [client 51.161.86.195:55854] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWhK59xbBq8VfeqVDaOPwAAAM4"]
[Mon Mar 02 22:39:39.577477 2026] [:error] [pid 28847:tid 28861] [client 51.161.86.195:35166] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhK59xbBq8VfeqVDaOQgAAAMw"]
[Mon Mar 02 22:39:39.917284 2026] [:error] [pid 28847:tid 28860] [client 51.161.86.195:55870] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhK59xbBq8VfeqVDaORwAAAMs"]
[Mon Mar 02 22:39:40.246236 2026] [:error] [pid 28847:tid 28870] [client 51.161.86.195:55880] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWhLJ9xbBq8VfeqVDaOTAAAANU"]
[Mon Mar 02 22:39:40.288490 2026] [:error] [pid 59701:tid 59715] [client 51.161.86.195:55886] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhLOUmTDVso96U9_Ls2QAAAQs"]
[Mon Mar 02 22:39:40.592916 2026] [:error] [pid 59734:tid 59758] [client 51.161.86.195:55896] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhLJeWQx7ZQG9NybFDbwAAAVY"]
[Mon Mar 02 22:39:40.791311 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.140:63329] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaWhLJ9xbBq8VfeqVDaOUgAAAM0"]
[Mon Mar 02 22:39:41.882170 2026] [:error] [pid 59602:tid 59674] [client 89.251.0.132:32317] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Mon Mar 02 22:39:42.076253 2026] [:error] [pid 59600:tid 59623] [client 51.161.86.195:55908] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWhLoQ5lE4yocV9IBeQwwAAAA4"]
[Mon Mar 02 22:39:42.078204 2026] [:error] [pid 59600:tid 59630] [client 51.161.86.195:55922] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWhLoQ5lE4yocV9IBeQxAAAABU"]
[Mon Mar 02 22:39:42.175790 2026] [:error] [pid 59602:tid 59680] [client 89.251.0.132:32317] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Mon Mar 02 22:39:42.458353 2026] [:error] [pid 59602:tid 59665] [client 89.251.0.132:32317] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Mon Mar 02 22:39:42.810343 2026] [:error] [pid 59602:tid 59685] [client 51.161.86.195:55932] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWhLjMtSo_Fr0lHnSaODAAAAJQ"]
[Mon Mar 02 22:39:43.048406 2026] [:error] [pid 59602:tid 59683] [client 89.251.0.132:32317] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Mon Mar 02 22:39:43.748512 2026] [:error] [pid 28847:tid 28869] [client 51.161.86.195:55934] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhL59xbBq8VfeqVDaOZgAAANQ"]
[Mon Mar 02 22:39:43.983192 2026] [:error] [pid 28847:tid 28856] [client 51.161.86.195:55950] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWhL59xbBq8VfeqVDaOaAAAAMc"]
[Mon Mar 02 22:39:44.148274 2026] [:error] [pid 28847:tid 28858] [client 51.161.86.195:55952] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhMJ9xbBq8VfeqVDaOawAAAMk"]
[Mon Mar 02 22:39:44.745116 2026] [:error] [pid 59602:tid 59674] [client 51.161.86.195:55966] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWhMDMtSo_Fr0lHnSaOHAAAAIk"]
[Mon Mar 02 22:39:44.982662 2026] [:error] [pid 59602:tid 59685] [client 89.251.0.132:32317] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaWhMDMtSo_Fr0lHnSaOHQAAAJQ"]
[Mon Mar 02 22:39:45.095959 2026] [:error] [pid 28847:tid 28851] [client 51.161.86.195:55978] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWhMZ9xbBq8VfeqVDaOdAAAAMI"]
[Mon Mar 02 22:39:45.309292 2026] [:error] [pid 28847:tid 28852] [client 51.161.86.195:45276] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhMZ9xbBq8VfeqVDaOdwAAAMM"]
[Mon Mar 02 22:39:45.674618 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.131:48659] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaWhMZ9xbBq8VfeqVDaOfAAAANc"]
[Mon Mar 02 22:39:45.839206 2026] [:error] [pid 28847:tid 28860] [client 51.161.86.195:45280] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhMZ9xbBq8VfeqVDaOfwAAAMs"]
[Mon Mar 02 22:39:45.909514 2026] [:error] [pid 28847:tid 28850] [client 51.161.86.195:45292] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWhMZ9xbBq8VfeqVDaOgQAAAME"]
[Mon Mar 02 22:39:46.380570 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.141:47461] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaWhMp9xbBq8VfeqVDaOiAAAAMw"]
[Mon Mar 02 22:39:46.848731 2026] [:error] [pid 59734:tid 59760] [client 51.161.86.195:45296] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWhMpeWQx7ZQG9NybFDcgAAAVg"]
[Mon Mar 02 22:39:46.990943 2026] [:error] [pid 59600:tid 59627] [client 89.251.0.147:30115] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaWhMoQ5lE4yocV9IBeQzwAAABI"]
[Mon Mar 02 22:39:47.428248 2026] [:error] [pid 28847:tid 28851] [client 51.161.86.195:45310] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhM59xbBq8VfeqVDaOkQAAAMI"]
[Mon Mar 02 22:39:47.577766 2026] [:error] [pid 59602:tid 59677] [client 89.251.0.121:36883] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaWhMzMtSo_Fr0lHnSaOIgAAAIw"]
[Mon Mar 02 22:39:47.903080 2026] [:error] [pid 59600:tid 59633] [client 51.161.86.195:45316] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhM4Q5lE4yocV9IBeQ0wAAABg"]
[Mon Mar 02 22:39:47.938683 2026] [:error] [pid 59734:tid 59752] [client 51.161.86.195:45318] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWhM5eWQx7ZQG9NybFDdAAAAVA"]
[Mon Mar 02 22:39:48.224049 2026] [:error] [pid 59602:tid 59665] [client 51.161.86.195:45322] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhNDMtSo_Fr0lHnSaOJAAAAIA"]
[Mon Mar 02 22:39:48.315927 2026] [:error] [pid 59602:tid 59683] [client 89.251.0.117:43713] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaWhNDMtSo_Fr0lHnSaOJQAAAJI"]
[Mon Mar 02 22:39:48.893801 2026] [:error] [pid 59734:tid 59736] [client 51.161.86.195:45338] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhNJeWQx7ZQG9NybFDdgAAAUA"]
[Mon Mar 02 22:39:48.961257 2026] [:error] [pid 59701:tid 59706] [client 51.161.86.195:45354] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhNOUmTDVso96U9_Ls3QAAAQI"]
[Mon Mar 02 22:39:49.497210 2026] [:error] [pid 59602:tid 59684] [client 89.251.0.125:30599] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaWhNTMtSo_Fr0lHnSaOLgAAAJM"]
[Mon Mar 02 22:39:50.015683 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.116:45261] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaWhNoQ5lE4yocV9IBeQ2wAAABc"]
[Mon Mar 02 22:39:50.472051 2026] [:error] [pid 59600:tid 59627] [client 51.161.86.195:45364] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhNoQ5lE4yocV9IBeQ3QAAABI"]
[Mon Mar 02 22:39:50.675969 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.116:49813] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaWhNoQ5lE4yocV9IBeQ4AAAABg"]
[Mon Mar 02 22:39:51.287999 2026] [:error] [pid 59600:tid 59612] [client 89.251.0.119:24459] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaWhN4Q5lE4yocV9IBeQ4gAAAAM"]
[Mon Mar 02 22:39:51.619909 2026] [:error] [pid 59600:tid 59626] [client 51.161.86.195:45372] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhN4Q5lE4yocV9IBeQ5AAAABE"]
[Mon Mar 02 22:39:51.754726 2026] [:error] [pid 59701:tid 59725] [client 51.161.86.195:45382] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhN-UmTDVso96U9_Ls3gAAARU"]
[Mon Mar 02 22:39:52.678118 2026] [:error] [pid 59602:tid 59669] [client 89.251.0.133:61525] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaWhODMtSo_Fr0lHnSaOOAAAAIQ"]
[Mon Mar 02 22:39:53.441133 2026] [:error] [pid 59734:tid 59739] [client 51.161.86.195:45396] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWhOZeWQx7ZQG9NybFDfAAAAUM"]
[Mon Mar 02 22:39:54.110229 2026] [:error] [pid 59600:tid 59629] [client 89.251.0.128:46847] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaWhOoQ5lE4yocV9IBeQ7QAAABQ"]
[Mon Mar 02 22:39:54.640731 2026] [:error] [pid 59734:tid 59760] [client 89.251.0.121:42261] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Mar 02 22:39:55.072437 2026] [:error] [pid 59602:tid 59686] [client 51.161.86.195:45400] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhOzMtSo_Fr0lHnSaOPQAAAJU"]
[Mon Mar 02 22:39:55.335769 2026] [:error] [pid 59602:tid 59680] [client 51.161.86.195:49952] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWhOzMtSo_Fr0lHnSaOPgAAAI8"]
[Mon Mar 02 22:39:55.505406 2026] [:error] [pid 59734:tid 59741] [client 89.251.0.121:42261] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaWhO5eWQx7ZQG9NybFDgQAAAUU"]
[Mon Mar 02 22:39:55.571870 2026] [:error] [pid 59734:tid 59750] [client 51.161.86.195:49944] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhO5eWQx7ZQG9NybFDggAAAU4"]
[Mon Mar 02 22:39:56.611134 2026] [:error] [pid 59602:tid 59671] [client 89.251.0.137:42093] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaWhPDMtSo_Fr0lHnSaORgAAAIY"]
[Mon Mar 02 22:39:57.147961 2026] [:error] [pid 59602:tid 59683] [client 51.161.86.195:49962] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWhPTMtSo_Fr0lHnSaORwAAAJI"]
[Mon Mar 02 22:39:57.952619 2026] [:error] [pid 28847:tid 28854] [client 89.251.0.132:59023] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Mon Mar 02 22:39:58.150910 2026] [:error] [pid 59602:tid 59668] [client 51.161.86.195:49978] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhPjMtSo_Fr0lHnSaOSAAAAIM"]
[Mon Mar 02 22:39:58.244880 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.132:59023] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaWhPp9xbBq8VfeqVDaOsQAAANM"]
[Mon Mar 02 22:39:59.166490 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.136:24721] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Mon Mar 02 22:39:59.414224 2026] [:error] [pid 28847:tid 28852] [client 89.251.0.136:24721] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Mon Mar 02 22:39:59.690127 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.136:24721] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Mar 02 22:39:59.945664 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.136:24721] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaWhP59xbBq8VfeqVDaOtwAAAMo"]
[Mon Mar 02 22:40:00.487405 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.123:56233] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Mon Mar 02 22:40:00.828703 2026] [:error] [pid 28847:tid 28867] [client 89.251.0.123:56233] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaWhQJ9xbBq8VfeqVDaOuwAAANI"]
[Mon Mar 02 22:40:01.962258 2026] [:error] [pid 28847:tid 28857] [client 51.161.86.195:49994] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhQZ9xbBq8VfeqVDaOwQAAAMg"]
[Mon Mar 02 22:40:03.100107 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 02 22:40:03.415797 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Mar 02 22:40:03.753315 2026] [:error] [pid 28847:tid 28856] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Mon Mar 02 22:40:05.673359 2026] [:error] [pid 28847:tid 28869] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Mar 02 22:40:06.015569 2026] [:error] [pid 28847:tid 28871] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Mon Mar 02 22:40:06.610371 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Mon Mar 02 22:40:07.570870 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.137:24477] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Mar 02 22:40:07.955559 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.137:24477] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaWhR59xbBq8VfeqVDaO5QAAAMw"]
[Mon Mar 02 22:40:08.561354 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.145:61777] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaWhSJ9xbBq8VfeqVDaO6wAAANc"]
[Mon Mar 02 22:40:09.133491 2026] [:error] [pid 59602:tid 59665] [client 89.251.0.114:46089] [client 89.251.0.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.114, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaWhSTMtSo_Fr0lHnSaOVQAAAIA"]
[Mon Mar 02 22:40:09.137448 2026] [:error] [pid 59602:tid 59665] [client 89.251.0.114:46089] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 02 22:40:09.452359 2026] [:error] [pid 59602:tid 59680] [client 89.251.0.114:46089] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Mon Mar 02 22:40:09.754355 2026] [:error] [pid 59602:tid 59681] [client 89.251.0.114:46089] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaWhSTMtSo_Fr0lHnSaOWAAAAJA"]
[Mon Mar 02 22:40:10.727697 2026] [:error] [pid 28847:tid 28873] [client 89.251.0.141:58985] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 02 22:40:10.885526 2026] [:error] [pid 59600:tid 59624] [client 51.161.86.195:45880] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhSoQ5lE4yocV9IBeRCwAAAA8"]
[Mon Mar 02 22:40:11.076507 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.141:58985] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaWhS59xbBq8VfeqVDaO9wAAANU"]
[Mon Mar 02 22:40:11.641051 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.131:35969] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaWhS4Q5lE4yocV9IBeRDgAAABE"]
[Mon Mar 02 22:40:13.570071 2026] [:error] [pid 59734:tid 59755] [client 89.251.0.120:48513] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaWhTZeWQx7ZQG9NybFDmgAAAVM"]
[Mon Mar 02 22:40:14.387566 2026] [:error] [pid 28847:tid 28867] [client 89.251.0.141:24695] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "aaWhTp9xbBq8VfeqVDaPBgAAANI"]
[Mon Mar 02 22:40:14.852261 2026] [:error] [pid 28847:tid 28859] [client 51.161.86.195:45890] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhTp9xbBq8VfeqVDaPCgAAAMo"]
[Mon Mar 02 22:40:17.095362 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.141:62391] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Mon Mar 02 22:40:17.699019 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.141:62391] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaWhUZ9xbBq8VfeqVDaPGgAAANM"]
[Mon Mar 02 22:40:18.990854 2026] [:error] [pid 28847:tid 28854] [client 89.251.0.144:27729] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Mon Mar 02 22:40:19.593006 2026] [:error] [pid 28847:tid 28871] [client 89.251.0.144:27729] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "aaWhU59xbBq8VfeqVDaPKQAAANY"]
[Mon Mar 02 22:40:20.303965 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.143:62921] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaWhVJ9xbBq8VfeqVDaPKgAAAMw"]
[Mon Mar 02 22:40:20.941435 2026] [:error] [pid 28847:tid 28850] [client 51.161.86.195:39656] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhVJ9xbBq8VfeqVDaPMAAAAME"]
[Mon Mar 02 22:40:21.173074 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.143:59299] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Mon Mar 02 22:40:21.464624 2026] [:error] [pid 28847:tid 28854] [client 89.251.0.143:59299] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaWhVZ9xbBq8VfeqVDaPNQAAAMU"]
[Mon Mar 02 22:40:22.090233 2026] [:error] [pid 28847:tid 28860] [client 89.251.0.145:56455] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaWhVp9xbBq8VfeqVDaPNwAAAMs"]
[Mon Mar 02 22:40:23.381160 2026] [:error] [pid 59600:tid 59630] [client 89.251.0.148:54849] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Mon Mar 02 22:40:23.688307 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.148:54849] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Mon Mar 02 22:40:24.276383 2026] [:error] [pid 59600:tid 59622] [client 89.251.0.148:54849] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Mon Mar 02 22:40:24.744217 2026] [:error] [pid 59600:tid 59615] [client 51.161.86.195:39662] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhWIQ5lE4yocV9IBeRLgAAAAY"]
[Mon Mar 02 22:40:25.010519 2026] [:error] [pid 59600:tid 59624] [client 89.251.0.148:54849] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaWhWYQ5lE4yocV9IBeRLwAAAA8"]
[Mon Mar 02 22:40:25.683212 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.129:29859] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaWhWZ9xbBq8VfeqVDaPQwAAANU"]
[Mon Mar 02 22:40:27.161995 2026] [:error] [pid 28847:tid 28863] [client 89.251.0.126:24619] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Mar 02 22:40:27.488487 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.126:24619] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "aaWhW59xbBq8VfeqVDaPTwAAANU"]
[Mon Mar 02 22:40:28.172251 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.113:26065] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaWhXIQ5lE4yocV9IBeROAAAABc"]
[Mon Mar 02 22:40:28.843960 2026] [:error] [pid 59701:tid 59704] [client 89.251.0.133:52529] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaWhXOUmTDVso96U9_LtCgAAAQA"]
[Mon Mar 02 22:40:31.017954 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.119:55453] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Mon Mar 02 22:40:31.317130 2026] [:error] [pid 28847:tid 28851] [client 89.251.0.119:55453] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaWhX59xbBq8VfeqVDaPZAAAAMI"]
[Mon Mar 02 22:40:32.266103 2026] [:error] [pid 59601:tid 59659] [client 89.251.0.135:33721] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaWhYMQ1lXfvWN0-ZQmj1wAAAFU"]
[Mon Mar 02 22:40:32.889084 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.121:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Mar 02 22:40:34.370746 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.121:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Mon Mar 02 22:40:34.976713 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.121:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Mon Mar 02 22:40:36.590310 2026] [:error] [pid 59600:tid 59617] [client 89.251.0.121:44295] [client 89.251.0.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.121, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "aaWhZIQ5lE4yocV9IBeRUQAAAAg"]
[Mon Mar 02 22:40:37.557914 2026] [:error] [pid 59600:tid 59630] [client 89.251.0.121:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Mon Mar 02 22:40:37.897573 2026] [:error] [pid 59600:tid 59614] [client 89.251.0.121:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Mon Mar 02 22:40:38.215827 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.121:44295] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Mon Mar 02 22:40:38.825557 2026] [:error] [pid 59600:tid 59616] [client 89.251.0.121:44295] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaWhZoQ5lE4yocV9IBeRXAAAAAc"]
[Mon Mar 02 22:40:39.439537 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.150:64237] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaWhZ59xbBq8VfeqVDaPggAAANM"]
[Mon Mar 02 22:40:40.420021 2026] [:error] [pid 28847:tid 28852] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Mon Mar 02 22:40:40.740566 2026] [:error] [pid 28847:tid 28860] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Mon Mar 02 22:40:41.406069 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Mon Mar 02 22:40:42.141571 2026] [:error] [pid 28847:tid 28869] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Mar 02 22:40:43.356635 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Mon Mar 02 22:40:46.861177 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Mar 02 22:40:47.172160 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Mon Mar 02 22:40:49.009828 2026] [:error] [pid 28847:tid 28871] [client 89.251.0.150:64237] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Mon Mar 02 22:40:49.746013 2026] [:error] [pid 28847:tid 28857] [client 89.251.0.150:64237] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaWhcZ9xbBq8VfeqVDaPvAAAAMg"]
[Mon Mar 02 22:40:50.959651 2026] [:error] [pid 59602:tid 59671] [client 89.251.0.142:47067] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Mon Mar 02 22:40:51.275125 2026] [:error] [pid 59602:tid 59688] [client 89.251.0.142:47067] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaWhczMtSo_Fr0lHnSaOjAAAAJc"]
[Mon Mar 02 22:40:52.259501 2026] [:error] [pid 28847:tid 28869] [client 89.251.0.127:57967] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Mon Mar 02 22:40:52.545045 2026] [:error] [pid 28847:tid 28871] [client 89.251.0.127:57967] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaWhdJ9xbBq8VfeqVDaPxQAAANY"]
[Mon Mar 02 22:40:53.693805 2026] [:error] [pid 59734:tid 59740] [client 89.251.0.146:39629] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Mon Mar 02 22:40:54.072635 2026] [:error] [pid 59600:tid 59629] [client 51.161.86.195:46294] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aaWhdoQ5lE4yocV9IBeRcwAAABQ"]
[Mon Mar 02 22:40:54.309711 2026] [:error] [pid 59734:tid 59757] [client 89.251.0.146:39629] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Mon Mar 02 22:40:55.018463 2026] [:error] [pid 59734:tid 59747] [client 89.251.0.146:39629] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Mon Mar 02 22:40:55.382225 2026] [:error] [pid 59734:tid 59739] [client 89.251.0.146:39629] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Mon Mar 02 22:40:56.150158 2026] [:error] [pid 59734:tid 59750] [client 89.251.0.146:39629] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaWheJeWQx7ZQG9NybFDwgAAAU4"]
[Mon Mar 02 22:40:56.305999 2026] [:error] [pid 28847:tid 28849] [client 51.161.86.195:36774] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWheJ9xbBq8VfeqVDaP0gAAAMA"]
[Mon Mar 02 22:40:56.443424 2026] [:error] [pid 28847:tid 28852] [client 51.161.86.195:56272] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaWheJ9xbBq8VfeqVDaP0wAAAMM"]
[Mon Mar 02 22:40:56.687024 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.133:21239] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Mon Mar 02 22:40:56.989430 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.133:21239] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Mon Mar 02 22:40:57.412179 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.133:21239] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaWheYQ5lE4yocV9IBeReQAAAAs"]
[Mon Mar 02 22:40:58.298324 2026] [:error] [pid 59601:tid 59658] [client 51.161.86.195:36778] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWhesQ1lXfvWN0-ZQmj3gAAAFQ"]
[Mon Mar 02 22:40:58.386669 2026] [:error] [pid 59600:tid 59612] [client 89.251.0.145:55201] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaWheoQ5lE4yocV9IBeRgAAAAAM"]
[Mon Mar 02 22:40:59.278905 2026] [:error] [pid 59701:tid 59709] [client 89.251.0.143:29895] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Mar 02 22:41:00.280228 2026] [:error] [pid 59602:tid 59676] [client 51.161.86.195:36786] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhfDMtSo_Fr0lHnSaOnwAAAIs"]
[Mon Mar 02 22:41:00.285077 2026] [:error] [pid 59701:tid 59706] [client 89.251.0.143:29895] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Mon Mar 02 22:41:00.291041 2026] [:error] [pid 59600:tid 59619] [client 51.161.86.195:36800] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aaWhfIQ5lE4yocV9IBeRhQAAAAo"]
[Mon Mar 02 22:41:00.568671 2026] [:error] [pid 59701:tid 59719] [client 89.251.0.143:29895] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Mon Mar 02 22:41:00.854082 2026] [:error] [pid 59701:tid 59726] [client 89.251.0.143:29895] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaWhfOUmTDVso96U9_LtYAAAARY"]
[Mon Mar 02 22:41:01.432005 2026] [:error] [pid 59602:tid 59687] [client 89.251.0.127:37387] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaWhfTMtSo_Fr0lHnSaOtAAAAJY"]
[Mon Mar 02 22:41:02.677169 2026] [:error] [pid 59601:tid 59641] [client 51.161.86.195:36806] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaWhfsQ1lXfvWN0-ZQmj6gAAAEM"]
[Mon Mar 02 22:41:02.839049 2026] [:error] [pid 59734:tid 59758] [client 51.161.86.195:36810] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWhfpeWQx7ZQG9NybFDzQAAAVY"]
[Mon Mar 02 22:41:03.993064 2026] [:error] [pid 59602:tid 59669] [client 89.251.0.148:49885] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Mon Mar 02 22:41:04.735639 2026] [:error] [pid 59602:tid 59681] [client 89.251.0.148:49885] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaWhgDMtSo_Fr0lHnSaOzAAAAJA"]
[Mon Mar 02 22:41:04.940084 2026] [:error] [pid 59600:tid 59631] [client 51.161.86.195:36826] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWhgIQ5lE4yocV9IBeRlwAAABY"]
[Mon Mar 02 22:41:05.635741 2026] [:error] [pid 59600:tid 59628] [client 51.161.86.195:41476] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaWhgYQ5lE4yocV9IBeRnwAAABM"]
[Mon Mar 02 22:41:05.738910 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.128:43959] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "aaWhgYQ5lE4yocV9IBeRoAAAABE"]
[Mon Mar 02 22:41:06.899485 2026] [:error] [pid 59601:tid 59651] [client 51.161.86.195:41478] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWhgsQ1lXfvWN0-ZQmj7gAAAE0"]
[Mon Mar 02 22:41:07.742042 2026] [:error] [pid 28847:tid 28850] [client 89.251.0.116:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Mar 02 22:41:07.907944 2026] [:error] [pid 59601:tid 59652] [client 51.161.86.195:41492] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWhg8Q1lXfvWN0-ZQmj8gAAAE4"]
[Mon Mar 02 22:41:07.994866 2026] [:error] [pid 59602:tid 59684] [client 51.161.86.195:41500] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhgzMtSo_Fr0lHnSaO0AAAAJM"]
[Mon Mar 02 22:41:08.028969 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.116:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Mon Mar 02 22:41:08.416584 2026] [:error] [pid 28847:tid 28856] [client 89.251.0.116:49717] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaWhhJ9xbBq8VfeqVDaP3AAAAMc"]
[Mon Mar 02 22:41:09.288771 2026] [:error] [pid 59734:tid 59756] [client 89.251.0.124:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Mon Mar 02 22:41:09.720588 2026] [:error] [pid 59734:tid 59758] [client 89.251.0.124:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Mon Mar 02 22:41:09.837488 2026] [:error] [pid 59701:tid 59720] [client 51.161.86.195:41502] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaWhheUmTDVso96U9_LteAAAARA"]
[Mon Mar 02 22:41:10.446948 2026] [:error] [pid 59734:tid 59757] [client 89.251.0.124:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Mon Mar 02 22:41:11.406808 2026] [:error] [pid 59734:tid 59746] [client 89.251.0.124:64935] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaWhh5eWQx7ZQG9NybFD3QAAAUo"]
[Mon Mar 02 22:41:12.121042 2026] [:error] [pid 28847:tid 28858] [client 51.161.86.195:41516] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWhiJ9xbBq8VfeqVDaP4QAAAMk"]
[Mon Mar 02 22:41:12.165555 2026] [:error] [pid 28847:tid 28859] [client 51.161.86.195:41504] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaWhiJ9xbBq8VfeqVDaP4gAAAMo"]
[Mon Mar 02 22:41:12.662566 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.143:32615] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Mon Mar 02 22:41:13.705734 2026] [:error] [pid 59600:tid 59613] [client 89.251.0.143:32615] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaWhiYQ5lE4yocV9IBeRwgAAAAQ"]
[Mon Mar 02 22:41:14.617813 2026] [:error] [pid 59734:tid 59744] [client 89.251.0.151:37239] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Mon Mar 02 22:41:15.597141 2026] [:error] [pid 59734:tid 59736] [client 89.251.0.151:37239] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Mon Mar 02 22:41:16.228502 2026] [:error] [pid 59734:tid 59748] [client 89.251.0.151:37239] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Mar 02 22:41:16.967450 2026] [:error] [pid 59734:tid 59739] [client 89.251.0.151:37239] [client 89.251.0.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.151, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaWhjJeWQx7ZQG9NybFD7AAAAUM"]
[Mon Mar 02 22:41:17.370319 2026] [:error] [pid 59602:tid 59672] [client 51.161.86.195:34828] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaWhjTMtSo_Fr0lHnSaO3gAAAIc"]
[Mon Mar 02 22:41:18.953128 2026] [:error] [pid 59734:tid 59759] [client 89.251.0.151:37239] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaWhjpeWQx7ZQG9NybFD9AAAAVc"]
[Mon Mar 02 22:41:19.649014 2026] [:error] [pid 59734:tid 59755] [client 89.251.0.137:64707] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Mon Mar 02 22:41:19.996770 2026] [:error] [pid 59734:tid 59742] [client 89.251.0.137:64707] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaWhj5eWQx7ZQG9NybFD9wAAAUY"]
[Mon Mar 02 22:41:20.753264 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.113:51407] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Mon Mar 02 22:41:21.359474 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.113:51407] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Mon Mar 02 22:41:21.967531 2026] [:error] [pid 28847:tid 28857] [client 89.251.0.113:51407] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaWhkZ9xbBq8VfeqVDaQDwAAAMg"]
[Mon Mar 02 22:41:22.863238 2026] [:error] [pid 59600:tid 59615] [client 89.251.0.119:62531] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Mon Mar 02 22:41:23.245668 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.119:62531] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Mon Mar 02 22:41:23.873511 2026] [:error] [pid 59600:tid 59621] [client 89.251.0.119:62531] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaWhk4Q5lE4yocV9IBeR3gAAAAw"]
[Mon Mar 02 22:41:24.874987 2026] [:error] [pid 59600:tid 59610] [client 89.251.0.146:27357] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaWhlIQ5lE4yocV9IBeR4gAAAAE"]
[Mon Mar 02 22:41:25.554112 2026] [:error] [pid 59601:tid 59648] [client 89.251.0.119:23291] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Mon Mar 02 22:41:25.888868 2026] [:error] [pid 59601:tid 59660] [client 89.251.0.119:23291] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Mon Mar 02 22:41:26.665227 2026] [:error] [pid 59601:tid 59642] [client 89.251.0.119:23291] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaWhlsQ1lXfvWN0-ZQmkAgAAAEQ"]
[Mon Mar 02 22:41:27.204404 2026] [:error] [pid 59600:tid 59624] [client 89.251.0.132:45333] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Mon Mar 02 22:41:27.881893 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.132:45333] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Mon Mar 02 22:41:28.207749 2026] [:error] [pid 59600:tid 59616] [client 89.251.0.132:45333] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaWhmIQ5lE4yocV9IBeR9QAAAAc"]
[Mon Mar 02 22:41:29.218025 2026] [:error] [pid 28847:tid 28856] [client 89.251.0.117:27853] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "aaWhmZ9xbBq8VfeqVDaQGwAAAMc"]
[Mon Mar 02 22:41:30.711669 2026] [:error] [pid 59602:tid 59676] [client 89.251.0.117:42887] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaWhmjMtSo_Fr0lHnSaO6wAAAIs"]
[Mon Mar 02 22:41:31.426671 2026] [:error] [pid 59734:tid 59745] [client 89.251.0.150:42239] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaWhm5eWQx7ZQG9NybFD_gAAAUk"]
[Mon Mar 02 22:41:32.011181 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.150:64667] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaWhnJ9xbBq8VfeqVDaQMwAAANE"]
[Mon Mar 02 22:41:32.666735 2026] [:error] [pid 28847:tid 28853] [client 89.251.0.131:53935] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaWhnJ9xbBq8VfeqVDaQPAAAAMQ"]
[Mon Mar 02 22:41:33.243272 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.124:39327] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaWhnZ9xbBq8VfeqVDaQQgAAANc"]
[Mon Mar 02 22:41:34.670273 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.132:38507] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaWhnoQ5lE4yocV9IBeSDAAAAAk"]
[Mon Mar 02 22:41:35.315299 2026] [:error] [pid 59701:tid 59712] [client 89.251.0.119:41161] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaWhn-UmTDVso96U9_LttQAAAQg"]
[Mon Mar 02 22:41:37.015942 2026] [:error] [pid 59602:tid 59684] [client 89.251.0.117:29389] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaWhoTMtSo_Fr0lHnSaO9QAAAJM"]
[Mon Mar 02 22:41:38.054666 2026] [:error] [pid 59602:tid 59665] [client 89.251.0.128:60497] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaWhojMtSo_Fr0lHnSaO_QAAAIA"]
[Mon Mar 02 22:41:39.414944 2026] [:error] [pid 59734:tid 59738] [client 89.251.0.117:46533] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaWho5eWQx7ZQG9NybFEFQAAAUI"]
[Mon Mar 02 22:41:40.048792 2026] [:error] [pid 59602:tid 59683] [client 89.251.0.113:47485] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Mon Mar 02 22:41:41.317852 2026] [:error] [pid 59602:tid 59669] [client 89.251.0.113:47485] [client 89.251.0.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.113, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaWhpTMtSo_Fr0lHnSaPEAAAAIQ"]
[Mon Mar 02 22:41:43.103020 2026] [:error] [pid 59602:tid 59671] [client 89.251.0.113:47485] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaWhpzMtSo_Fr0lHnSaPGAAAAIY"]
[Mon Mar 02 22:41:43.883684 2026] [:error] [pid 59602:tid 59674] [client 89.251.0.133:63947] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaWhpzMtSo_Fr0lHnSaPHAAAAIk"]
[Mon Mar 02 22:41:45.395583 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Mon Mar 02 22:41:45.741657 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Mon Mar 02 22:41:47.468163 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Mon Mar 02 22:41:47.769633 2026] [:error] [pid 59600:tid 59628] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Mon Mar 02 22:41:49.381887 2026] [:error] [pid 59600:tid 59622] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Mon Mar 02 22:41:49.681236 2026] [:error] [pid 59600:tid 59631] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Mon Mar 02 22:41:50.087726 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Mon Mar 02 22:41:50.403834 2026] [:error] [pid 59600:tid 59623] [client 89.251.0.135:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Mon Mar 02 22:41:50.764214 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.135:36807] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaWhroQ5lE4yocV9IBeSQwAAABc"]
[Mon Mar 02 22:41:51.421295 2026] [:error] [pid 28847:tid 28849] [client 89.251.0.144:31297] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaWhr59xbBq8VfeqVDaQfQAAAMA"]
[Mon Mar 02 22:41:52.014257 2026] [:error] [pid 28847:tid 28854] [client 89.251.0.131:51501] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaWhsJ9xbBq8VfeqVDaQgQAAAMU"]
[Mon Mar 02 22:41:53.093037 2026] [:error] [pid 28847:tid 28853] [client 89.251.0.123:24969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Mon Mar 02 22:41:53.403411 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.123:24969] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Mon Mar 02 22:41:54.212181 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.123:24969] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Mon Mar 02 22:41:54.891313 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.123:24969] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaWhsp9xbBq8VfeqVDaQkwAAANc"]
[Mon Mar 02 22:41:55.640057 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.141:24963] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaWhs59xbBq8VfeqVDaQlQAAAMo"]
[Mon Mar 02 22:41:56.320247 2026] [:error] [pid 59601:tid 59640] [client 89.251.0.127:35385] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaWhtMQ1lXfvWN0-ZQmkFgAAAEI"]
[Mon Mar 02 22:42:00.550156 2026] [:error] [pid 59734:tid 59742] [client 89.251.0.136:26685] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaWhuJeWQx7ZQG9NybFEZwAAAUY"]
[Mon Mar 02 22:42:01.597184 2026] [:error] [pid 59701:tid 59721] [client 89.251.0.117:56703] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaWhueUmTDVso96U9_LtxwAAARE"]
[Mon Mar 02 22:42:02.863910 2026] [:error] [pid 59602:tid 59679] [client 89.251.0.151:28635] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaWhujMtSo_Fr0lHnSaPPgAAAI4"]
[Mon Mar 02 22:42:07.373103 2026] [:error] [pid 59601:tid 59641] [client 89.251.0.126:57323] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaWhv8Q1lXfvWN0-ZQmkKAAAAEM"]
[Mon Mar 02 22:42:07.944344 2026] [:error] [pid 59734:tid 59755] [client 89.251.0.115:59791] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Mon Mar 02 22:42:08.882202 2026] [:error] [pid 59734:tid 59748] [client 89.251.0.115:59791] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "aaWhwJeWQx7ZQG9NybFEhAAAAUw"]
[Mon Mar 02 22:42:10.096598 2026] [:error] [pid 59600:tid 59621] [client 89.251.0.148:20085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Mon Mar 02 22:42:11.158982 2026] [:error] [pid 59600:tid 59623] [client 89.251.0.148:20085] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Mar 02 22:42:11.407059 2026] [:error] [pid 59600:tid 59610] [client 89.251.0.148:20085] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaWhw4Q5lE4yocV9IBeSfAAAAAE"]
[Mon Mar 02 22:42:12.840854 2026] [:error] [pid 59601:tid 59653] [client 89.251.0.148:29733] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaWhxMQ1lXfvWN0-ZQmkMQAAAE8"]
[Mon Mar 02 22:42:15.192760 2026] [:error] [pid 59734:tid 59751] [client 89.251.0.131:58059] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaWhx5eWQx7ZQG9NybFEmQAAAU8"]
[Mon Mar 02 22:42:17.768497 2026] [:error] [pid 59601:tid 59653] [client 89.251.0.117:41071] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaWhycQ1lXfvWN0-ZQmkRAAAAE8"]
[Mon Mar 02 22:42:18.649077 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.151:48245] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Mar 02 22:42:18.947638 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.151:48245] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaWhyp9xbBq8VfeqVDaQwAAAANA"]
[Mon Mar 02 22:42:19.528966 2026] [:error] [pid 59602:tid 59686] [client 89.251.0.115:41675] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaWhyzMtSo_Fr0lHnSaPWwAAAJU"]
[Mon Mar 02 22:42:21.713896 2026] [:error] [pid 59600:tid 59611] [client 89.251.0.131:29447] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaWhzYQ5lE4yocV9IBeSkAAAAAI"]
[Mon Mar 02 22:42:22.267313 2026] [:error] [pid 28847:tid 28852] [client 89.251.0.141:49745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Mon Mar 02 22:42:23.680053 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.141:49745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Mon Mar 02 22:42:24.061764 2026] [:error] [pid 28847:tid 28871] [client 89.251.0.141:49745] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaWh0J9xbBq8VfeqVDaQ0QAAANY"]
[Mon Mar 02 22:42:25.417340 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.115:37493] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Mon Mar 02 22:42:26.526740 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.115:37493] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaWh0oQ5lE4yocV9IBeSnAAAABg"]
[Mon Mar 02 22:42:27.132940 2026] [:error] [pid 59701:tid 59718] [client 89.251.0.127:42733] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaWh0-UmTDVso96U9_Lt7AAAAQ4"]
[Mon Mar 02 22:42:28.640838 2026] [:error] [pid 59601:tid 59644] [client 89.251.0.116:58781] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaWh1MQ1lXfvWN0-ZQmkUQAAAEY"]
[Mon Mar 02 22:42:30.469920 2026] [:error] [pid 59734:tid 59750] [client 89.251.0.133:65167] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaWh1peWQx7ZQG9NybFE0AAAAU4"]
[Mon Mar 02 22:42:30.696580 2026] [:error] [pid 28847:tid 28872] [client 51.161.86.195:37044] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaWh1p9xbBq8VfeqVDaQ2gAAANc"]
[Mon Mar 02 22:42:31.214765 2026] [:error] [pid 59701:tid 59706] [client 89.251.0.121:22009] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaWh1-UmTDVso96U9_Lt8QAAAQI"]
[Mon Mar 02 22:42:31.943725 2026] [:error] [pid 59734:tid 59759] [client 51.161.86.195:37054] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWh15eWQx7ZQG9NybFE0gAAAVc"]
[Mon Mar 02 22:42:32.091904 2026] [:error] [pid 59601:tid 59654] [client 89.251.0.135:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Mon Mar 02 22:42:32.893775 2026] [:error] [pid 59600:tid 59609] [client 51.161.86.195:35292] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWh2IQ5lE4yocV9IBeSoQAAAAA"]
[Mon Mar 02 22:42:33.751080 2026] [:error] [pid 28847:tid 28864] [client 51.161.86.195:35308] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWh2Z9xbBq8VfeqVDaQ6gAAAM8"]
[Mon Mar 02 22:42:33.835775 2026] [:error] [pid 59601:tid 59648] [client 89.251.0.135:52803] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaWh2cQ1lXfvWN0-ZQmkXwAAAEo"]
[Mon Mar 02 22:42:35.152716 2026] [:error] [pid 59600:tid 59615] [client 89.251.0.142:62537] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaWh24Q5lE4yocV9IBeSqwAAAAY"]
[Mon Mar 02 22:42:35.789891 2026] [:error] [pid 59602:tid 59678] [client 89.251.0.128:40147] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaWh2zMtSo_Fr0lHnSaPdQAAAI0"]
[Mon Mar 02 22:42:36.523358 2026] [:error] [pid 59602:tid 59673] [client 51.161.86.195:37382] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWh3DMtSo_Fr0lHnSaPeAAAAIg"]
[Mon Mar 02 22:42:36.657039 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.116:39075] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Mon Mar 02 22:42:36.954377 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.116:39075] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaWh3J9xbBq8VfeqVDaQ8AAAAM0"]
[Mon Mar 02 22:42:37.867025 2026] [:error] [pid 59601:tid 59654] [client 89.251.0.144:34777] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaWh3cQ1lXfvWN0-ZQmkZQAAAFA"]
[Mon Mar 02 22:42:38.546357 2026] [:error] [pid 59600:tid 59614] [client 51.161.86.195:37396] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWh3oQ5lE4yocV9IBeStgAAAAU"]
[Mon Mar 02 22:42:39.405243 2026] [:error] [pid 59734:tid 59751] [client 51.161.86.195:37398] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWh35eWQx7ZQG9NybFE3wAAAU8"]
[Mon Mar 02 22:42:40.022672 2026] [:error] [pid 59602:tid 59669] [client 89.251.0.146:59125] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaWh4DMtSo_Fr0lHnSaPggAAAIQ"]
[Mon Mar 02 22:42:41.051606 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.140:23689] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Mon Mar 02 22:42:41.074860 2026] [:error] [pid 59601:tid 59646] [client 51.161.86.195:37412] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWh4cQ1lXfvWN0-ZQmkcAAAAEg"]
[Mon Mar 02 22:42:41.322990 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.140:23689] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaWh4Z9xbBq8VfeqVDaQ_QAAAMk"]
[Mon Mar 02 22:42:43.690898 2026] [:error] [pid 59701:tid 59714] [client 89.251.0.142:44957] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaWh4-UmTDVso96U9_LuGQAAAQo"]
[Mon Mar 02 22:42:44.775052 2026] [:error] [pid 59602:tid 59686] [client 51.161.86.195:37416] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWh5DMtSo_Fr0lHnSaPiwAAAJU"]
[Mon Mar 02 22:42:44.879790 2026] [:error] [pid 59602:tid 59674] [client 89.251.0.131:20699] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "aaWh5DMtSo_Fr0lHnSaPjAAAAIk"]
[Mon Mar 02 22:42:45.765510 2026] [:error] [pid 59734:tid 59754] [client 89.251.0.140:20271] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaWh5ZeWQx7ZQG9NybFE6AAAAVI"]
[Mon Mar 02 22:42:46.393127 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.144:30223] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "aaWh5p9xbBq8VfeqVDaRCAAAAMo"]
[Mon Mar 02 22:42:47.011558 2026] [:error] [pid 59600:tid 59620] [client 51.161.86.195:48238] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWh54Q5lE4yocV9IBeSygAAAAs"]
[Mon Mar 02 22:42:47.066059 2026] [:error] [pid 59600:tid 59623] [client 89.251.0.121:64211] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaWh54Q5lE4yocV9IBeSywAAAA4"]
[Mon Mar 02 22:42:49.831672 2026] [:error] [pid 59602:tid 59677] [client 89.251.0.139:24475] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaWh6TMtSo_Fr0lHnSaPmgAAAIw"]
[Mon Mar 02 22:42:51.414513 2026] [:error] [pid 59734:tid 59752] [client 51.161.86.195:48248] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWh65eWQx7ZQG9NybFE8AAAAVA"]
[Mon Mar 02 22:42:51.606365 2026] [:error] [pid 59734:tid 59754] [client 89.251.0.128:57043] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaWh65eWQx7ZQG9NybFE8QAAAVI"]
[Mon Mar 02 22:42:52.806617 2026] [:error] [pid 59602:tid 59667] [client 89.251.0.131:39313] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Mar 02 22:42:53.081824 2026] [:error] [pid 59602:tid 59685] [client 89.251.0.131:39313] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaWh7TMtSo_Fr0lHnSaPqgAAAJQ"]
[Mon Mar 02 22:42:54.508835 2026] [:error] [pid 59600:tid 59628] [client 89.251.0.116:39273] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaWh7oQ5lE4yocV9IBeS5wAAABM"]
[Mon Mar 02 22:42:55.132997 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.135:42611] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Mon Mar 02 22:42:57.017889 2026] [:error] [pid 28847:tid 28873] [client 89.251.0.135:42611] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaWh8Z9xbBq8VfeqVDaRJgAAANg"]
[Mon Mar 02 22:42:58.042001 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.137:25529] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaWh8p9xbBq8VfeqVDaRLQAAAM0"]
[Mon Mar 02 22:42:59.013586 2026] [:error] [pid 28847:tid 28860] [client 89.251.0.148:48495] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaWh859xbBq8VfeqVDaRMwAAAMs"]
[Mon Mar 02 22:43:00.254380 2026] [:error] [pid 59600:tid 59615] [client 89.251.0.127:53627] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaWh9IQ5lE4yocV9IBeS-AAAAAY"]
[Mon Mar 02 22:43:03.609077 2026] [:error] [pid 59602:tid 59677] [client 89.251.0.117:32485] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaWh9zMtSo_Fr0lHnSaPwgAAAIw"]
[Mon Mar 02 22:43:04.237013 2026] [:error] [pid 59602:tid 59674] [client 89.251.0.139:57501] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaWh-DMtSo_Fr0lHnSaPxAAAAIk"]
[Mon Mar 02 22:43:05.942472 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.116:33967] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaWh-Z9xbBq8VfeqVDaRPgAAANM"]
[Mon Mar 02 22:43:06.441629 2026] [:error] [pid 28847:tid 28870] [client 89.251.0.135:21767] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaWh-p9xbBq8VfeqVDaRQgAAANU"]
[Mon Mar 02 22:43:07.508173 2026] [:error] [pid 59600:tid 59610] [client 89.251.0.150:47839] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaWh-4Q5lE4yocV9IBeTCQAAAAE"]
[Mon Mar 02 22:43:08.143015 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.134:57959] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaWh_J9xbBq8VfeqVDaRRgAAAMw"]
[Mon Mar 02 22:43:08.714521 2026] [:error] [pid 59701:tid 59722] [client 89.251.0.128:26833] [client 89.251.0.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.128, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaWh_OUmTDVso96U9_LuLwAAARI"]
[Mon Mar 02 22:43:08.717823 2026] [:error] [pid 59701:tid 59722] [client 89.251.0.128:26833] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Mon Mar 02 22:43:09.060573 2026] [:error] [pid 59701:tid 59707] [client 89.251.0.128:26833] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaWh_eUmTDVso96U9_LuMQAAAQM"]
[Mon Mar 02 22:43:10.227289 2026] [:error] [pid 59734:tid 59742] [client 89.251.0.139:28015] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Mon Mar 02 22:43:10.507598 2026] [:error] [pid 59734:tid 59759] [client 89.251.0.139:28015] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaWh_peWQx7ZQG9NybFFDwAAAVc"]
[Mon Mar 02 22:43:11.076630 2026] [:error] [pid 59602:tid 59689] [client 89.251.0.132:37881] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "aaWh_zMtSo_Fr0lHnSaP0gAAAJg"]
[Mon Mar 02 22:43:11.643515 2026] [:error] [pid 59600:tid 59631] [client 89.251.0.141:62249] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Mon Mar 02 22:43:13.804797 2026] [:error] [pid 59600:tid 59630] [client 89.251.0.141:62249] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaWiAYQ5lE4yocV9IBeTGgAAABU"]
[Mon Mar 02 22:43:14.338469 2026] [:error] [pid 59701:tid 59704] [client 89.251.0.127:63247] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaWiAuUmTDVso96U9_LuNwAAAQA"]
[Mon Mar 02 22:43:15.549327 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.151:26203] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaWiA59xbBq8VfeqVDaRUQAAAM0"]
[Mon Mar 02 22:43:16.064253 2026] [:error] [pid 59601:tid 59658] [client 89.251.0.128:22669] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaWiBMQ1lXfvWN0-ZQmkiAAAAFQ"]
[Mon Mar 02 22:43:16.692598 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.141:42757] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Mon Mar 02 22:43:17.018470 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.141:42757] [client 89.251.0.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.141, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaWiBZ9xbBq8VfeqVDaRVAAAANM"]
[Mon Mar 02 22:43:17.712482 2026] [:error] [pid 28847:tid 28856] [client 89.251.0.141:42757] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaWiBZ9xbBq8VfeqVDaRVwAAAMc"]
[Mon Mar 02 22:43:19.565156 2026] [:error] [pid 28847:tid 28851] [client 89.251.0.141:44059] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaWiB59xbBq8VfeqVDaRYAAAAMI"]
[Mon Mar 02 22:43:20.244244 2026] [:error] [pid 59600:tid 59611] [client 89.251.0.129:34099] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Mon Mar 02 22:43:20.633501 2026] [:error] [pid 59600:tid 59609] [client 89.251.0.129:34099] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaWiCIQ5lE4yocV9IBeTJAAAAAA"]
[Mon Mar 02 22:43:21.190314 2026] [:error] [pid 59601:tid 59639] [client 89.251.0.142:59643] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaWiCcQ1lXfvWN0-ZQmkkAAAAEE"]
[Mon Mar 02 22:43:21.747624 2026] [:error] [pid 59601:tid 59657] [client 89.251.0.133:36017] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Mon Mar 02 22:43:22.620300 2026] [:error] [pid 59601:tid 59660] [client 89.251.0.133:36017] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaWiCsQ1lXfvWN0-ZQmklgAAAFY"]
[Mon Mar 02 22:43:23.849966 2026] [:error] [pid 59701:tid 59711] [client 89.251.0.119:40199] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaWiC-UmTDVso96U9_LuQgAAAQc"]
[Mon Mar 02 22:43:24.380691 2026] [:error] [pid 28847:tid 28866] [client 89.251.0.120:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Mon Mar 02 22:43:24.970181 2026] [:error] [pid 28847:tid 28855] [client 89.251.0.120:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Mar 02 22:43:25.544814 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.120:27563] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaWiDZ9xbBq8VfeqVDaRZwAAANA"]
[Mon Mar 02 22:43:26.160664 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.145:56759] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaWiDp9xbBq8VfeqVDaRbAAAAMk"]
[Mon Mar 02 22:43:27.063740 2026] [:error] [pid 59701:tid 59715] [client 89.251.0.124:51985] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "aaWiD-UmTDVso96U9_LuRwAAAQs"]
[Mon Mar 02 22:43:27.616976 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.147:29679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Mon Mar 02 22:43:31.130874 2026] [:error] [pid 59600:tid 59618] [client 89.251.0.147:29679] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaWiE4Q5lE4yocV9IBeTSQAAAAk"]
[Mon Mar 02 22:43:32.311656 2026] [:error] [pid 59600:tid 59610] [client 89.251.0.151:58941] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "aaWiFIQ5lE4yocV9IBeTTgAAAAE"]
[Mon Mar 02 22:43:32.615929 2026] [:error] [pid 59600:tid 59617] [client 89.251.0.151:58941] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaWiFIQ5lE4yocV9IBeTUAAAAAg"]
[Mon Mar 02 22:43:33.858674 2026] [:error] [pid 59601:tid 59661] [client 89.251.0.136:28757] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaWiFcQ1lXfvWN0-ZQmkowAAAFc"]
[Mon Mar 02 22:43:34.425594 2026] [:error] [pid 28847:tid 28869] [client 89.251.0.146:46155] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaWiFp9xbBq8VfeqVDaRgAAAANQ"]
[Mon Mar 02 22:43:35.908791 2026] [:error] [pid 59701:tid 59727] [client 89.251.0.144:40801] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Mon Mar 02 22:43:37.081943 2026] [:error] [pid 59701:tid 59723] [client 89.251.0.144:40801] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaWiGeUmTDVso96U9_LuVgAAARM"]
[Mon Mar 02 22:43:38.406611 2026] [:error] [pid 28847:tid 28853] [client 89.251.0.138:60649] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaWiGp9xbBq8VfeqVDaRmwAAAMQ"]
[Mon Mar 02 22:43:40.412418 2026] [:error] [pid 59734:tid 59759] [client 89.251.0.144:40265] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaWiHJeWQx7ZQG9NybFFJwAAAVc"]
[Mon Mar 02 22:43:41.020764 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.140:37969] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Mon Mar 02 22:43:42.463706 2026] [:error] [pid 28847:tid 28868] [client 89.251.0.140:37969] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaWiHp9xbBq8VfeqVDaRvgAAANM"]
[Mon Mar 02 22:43:43.338611 2026] [:error] [pid 59602:tid 59679] [client 89.251.0.150:35923] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "aaWiHzMtSo_Fr0lHnSaQGQAAAI4"]
[Mon Mar 02 22:43:43.959016 2026] [:error] [pid 59701:tid 59726] [client 89.251.0.133:46843] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Mar 02 22:43:44.247519 2026] [:error] [pid 59701:tid 59711] [client 89.251.0.133:46843] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaWiIOUmTDVso96U9_LuWQAAAQc"]
[Mon Mar 02 22:43:44.799173 2026] [:error] [pid 59602:tid 59669] [client 89.251.0.145:40813] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaWiIDMtSo_Fr0lHnSaQIwAAAIQ"]
[Mon Mar 02 22:43:46.064309 2026] [:error] [pid 59601:tid 59645] [client 89.251.0.113:51329] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaWiIsQ1lXfvWN0-ZQmksAAAAEc"]
[Mon Mar 02 22:43:47.620440 2026] [:error] [pid 59600:tid 59613] [client 89.251.0.125:34733] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Mon Mar 02 22:43:47.935138 2026] [:error] [pid 59600:tid 59617] [client 89.251.0.125:34733] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaWiI4Q5lE4yocV9IBeTYwAAAAg"]
[Mon Mar 02 22:43:48.472511 2026] [:error] [pid 59600:tid 59630] [client 89.251.0.143:37509] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaWiJIQ5lE4yocV9IBeTZAAAABU"]
[Mon Mar 02 22:43:51.073754 2026] [:error] [pid 59600:tid 59627] [client 89.251.0.128:57987] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaWiJ4Q5lE4yocV9IBeTdQAAABI"]
[Mon Mar 02 22:43:52.246523 2026] [:error] [pid 59701:tid 59718] [client 89.251.0.129:54765] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaWiKOUmTDVso96U9_LuYwAAAQ4"]
[Mon Mar 02 22:43:53.930742 2026] [:error] [pid 28847:tid 28855] [client 89.251.0.134:59929] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Mon Mar 02 22:43:54.774235 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.134:59929] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaWiKp9xbBq8VfeqVDaR3wAAANA"]
[Mon Mar 02 22:43:55.736951 2026] [:error] [pid 59734:tid 59740] [client 89.251.0.137:57181] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaWiK5eWQx7ZQG9NybFFSAAAAUQ"]
[Mon Mar 02 22:43:56.604400 2026] [:error] [pid 59701:tid 59725] [client 89.251.0.136:37181] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaWiLOUmTDVso96U9_LuaAAAARU"]
[Mon Mar 02 22:43:57.123744 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.143:32387] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Mon Mar 02 22:43:57.740564 2026] [:error] [pid 28847:tid 28851] [client 89.251.0.143:32387] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaWiLZ9xbBq8VfeqVDaR8QAAAMI"]
[Mon Mar 02 22:43:58.441926 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.120:61627] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Mon Mar 02 22:43:59.077475 2026] [:error] [pid 28847:tid 28861] [client 89.251.0.120:61627] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaWiL59xbBq8VfeqVDaR_QAAAMw"]
[Mon Mar 02 22:43:59.640532 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.142:33649] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaWiL4Q5lE4yocV9IBeTigAAAAo"]
[Mon Mar 02 22:44:00.740556 2026] [:error] [pid 59600:tid 59627] [client 89.251.0.120:39773] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaWiMIQ5lE4yocV9IBeTkgAAABI"]
[Mon Mar 02 22:44:01.502413 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.125:51065] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaWiMYQ5lE4yocV9IBeTlQAAABE"]
[Mon Mar 02 22:44:02.750009 2026] [:error] [pid 59734:tid 59742] [client 89.251.0.115:23491] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaWiMpeWQx7ZQG9NybFFTwAAAUY"]
[Mon Mar 02 22:44:03.611604 2026] [:error] [pid 28847:tid 28851] [client 89.251.0.137:36565] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaWiM59xbBq8VfeqVDaSCQAAAMI"]
[Mon Mar 02 22:44:04.208375 2026] [:error] [pid 28847:tid 28854] [client 89.251.0.120:33617] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaWiNJ9xbBq8VfeqVDaSDgAAAMU"]
[Mon Mar 02 22:44:04.816847 2026] [:error] [pid 28847:tid 28857] [client 89.251.0.132:44581] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaWiNJ9xbBq8VfeqVDaSEwAAAMg"]
[Mon Mar 02 22:44:07.277847 2026] [:error] [pid 28847:tid 28859] [client 89.251.0.115:31593] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaWiN59xbBq8VfeqVDaSJQAAAMo"]
[Mon Mar 02 22:44:08.423835 2026] [:error] [pid 59602:tid 59665] [client 89.251.0.123:56327] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaWiODMtSo_Fr0lHnSaQSwAAAIA"]
[Mon Mar 02 22:44:09.511124 2026] [:error] [pid 28847:tid 28849] [client 89.251.0.151:24385] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaWiOZ9xbBq8VfeqVDaSLwAAAMA"]
[Mon Mar 02 22:44:10.509290 2026] [:error] [pid 59600:tid 59629] [client 51.161.86.195:37750] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWiOoQ5lE4yocV9IBeTmAAAABQ"]
[Mon Mar 02 22:44:10.620843 2026] [:error] [pid 59734:tid 59750] [client 89.251.0.147:50783] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaWiOpeWQx7ZQG9NybFFUwAAAU4"]
[Mon Mar 02 22:44:11.808266 2026] [:error] [pid 59734:tid 59755] [client 89.251.0.114:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Mon Mar 02 22:44:12.492282 2026] [:error] [pid 28847:tid 28872] [client 51.161.86.195:54898] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaWiPJ9xbBq8VfeqVDaSPQAAANc"]
[Mon Mar 02 22:44:13.165441 2026] [:error] [pid 59734:tid 59736] [client 89.251.0.114:47197] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaWiPZeWQx7ZQG9NybFFYQAAAUA"]
[Mon Mar 02 22:44:13.956559 2026] [:error] [pid 59600:tid 59620] [client 89.251.0.144:56721] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaWiPYQ5lE4yocV9IBeTnwAAAAs"]
[Mon Mar 02 22:44:14.878128 2026] [:error] [pid 59600:tid 59628] [client 89.251.0.145:59981] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Mon Mar 02 22:44:15.245212 2026] [:error] [pid 59600:tid 59622] [client 89.251.0.145:59981] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaWiP4Q5lE4yocV9IBeTowAAAA0"]
[Mon Mar 02 22:44:16.544617 2026] [:error] [pid 28847:tid 28864] [client 51.161.86.195:57380] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWiQJ9xbBq8VfeqVDaSVAAAAM8"]
[Mon Mar 02 22:44:16.774984 2026] [:error] [pid 28847:tid 28862] [client 89.251.0.146:51101] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaWiQJ9xbBq8VfeqVDaSVgAAAM0"]
[Mon Mar 02 22:44:17.054641 2026] [:error] [pid 28847:tid 28855] [client 51.161.86.195:57382] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWiQZ9xbBq8VfeqVDaSWAAAAMY"]
[Mon Mar 02 22:44:17.731972 2026] [:error] [pid 59600:tid 59631] [client 89.251.0.135:56165] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Mon Mar 02 22:44:18.077603 2026] [:error] [pid 59600:tid 59628] [client 89.251.0.135:56165] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaWiQoQ5lE4yocV9IBeTrwAAABM"]
[Mon Mar 02 22:44:19.274617 2026] [:error] [pid 28847:tid 28853] [client 89.251.0.147:30023] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaWiQ59xbBq8VfeqVDaSYwAAAMQ"]
[Mon Mar 02 22:44:19.774081 2026] [:error] [pid 59734:tid 59752] [client 51.161.86.195:57390] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWiQ5eWQx7ZQG9NybFFagAAAVA"]
[Mon Mar 02 22:44:19.929353 2026] [:error] [pid 59602:tid 59666] [client 89.251.0.128:20323] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Mar 02 22:44:20.557165 2026] [:error] [pid 59602:tid 59665] [client 51.161.86.195:57396] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWiRDMtSo_Fr0lHnSaQYwAAAIA"]
[Mon Mar 02 22:44:20.733655 2026] [:error] [pid 59602:tid 59670] [client 89.251.0.128:20323] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaWiRDMtSo_Fr0lHnSaQZQAAAIU"]
[Mon Mar 02 22:44:22.761721 2026] [:error] [pid 59600:tid 59628] [client 89.251.0.126:32357] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaWiRoQ5lE4yocV9IBeTxQAAABM"]
[Mon Mar 02 22:44:24.625114 2026] [:error] [pid 59602:tid 59677] [client 51.161.86.195:57408] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaWiSDMtSo_Fr0lHnSaQbwAAAIw"]
[Mon Mar 02 22:44:25.443638 2026] [:error] [pid 28847:tid 28851] [client 51.161.86.195:53720] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWiSZ9xbBq8VfeqVDaScgAAAMI"]
[Mon Mar 02 22:44:25.805862 2026] [:error] [pid 28847:tid 28850] [client 51.161.86.195:53724] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWiSZ9xbBq8VfeqVDaSdQAAAME"]
[Mon Mar 02 22:44:25.844473 2026] [:error] [pid 59602:tid 59666] [client 89.251.0.133:65249] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Mon Mar 02 22:44:26.213032 2026] [:error] [pid 59602:tid 59678] [client 89.251.0.133:65249] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaWiSjMtSo_Fr0lHnSaQcwAAAI0"]
[Mon Mar 02 22:44:28.133970 2026] [:error] [pid 59602:tid 59671] [client 89.251.0.125:46061] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaWiTDMtSo_Fr0lHnSaQewAAAIY"]
[Mon Mar 02 22:44:29.263501 2026] [:error] [pid 28847:tid 28864] [client 89.251.0.120:49825] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Mon Mar 02 22:44:29.578456 2026] [:error] [pid 28847:tid 28863] [client 89.251.0.120:49825] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaWiTZ9xbBq8VfeqVDaSfgAAAM4"]
[Mon Mar 02 22:44:30.393069 2026] [:error] [pid 59734:tid 59755] [client 89.251.0.137:45875] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaWiTpeWQx7ZQG9NybFFcQAAAVM"]
[Mon Mar 02 22:44:31.068786 2026] [:error] [pid 59734:tid 59738] [client 89.251.0.113:57461] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Mon Mar 02 22:44:31.678207 2026] [:error] [pid 59600:tid 59616] [client 51.161.86.195:53730] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaWiT4Q5lE4yocV9IBeT3wAAAAc"]
[Mon Mar 02 22:44:31.747364 2026] [:error] [pid 59734:tid 59759] [client 89.251.0.113:57461] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaWiT5eWQx7ZQG9NybFFdQAAAVc"]
[Mon Mar 02 22:44:32.382829 2026] [:error] [pid 28847:tid 28863] [client 89.251.0.119:65385] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaWiUJ9xbBq8VfeqVDaShgAAAM4"]
[Mon Mar 02 22:44:35.262768 2026] [:error] [pid 28847:tid 28872] [client 89.251.0.143:31685] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaWiU59xbBq8VfeqVDaSmAAAANc"]
[Mon Mar 02 22:44:35.899528 2026] [:error] [pid 59600:tid 59617] [client 89.251.0.135:39947] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaWiU4Q5lE4yocV9IBeT6QAAAAg"]
[Mon Mar 02 22:44:37.000934 2026] [:error] [pid 59602:tid 59673] [client 89.251.0.141:25091] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "aaWiVDMtSo_Fr0lHnSaQkAAAAIg"]
[Mon Mar 02 22:44:37.638593 2026] [:error] [pid 59600:tid 59610] [client 89.251.0.150:51013] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaWiVYQ5lE4yocV9IBeT7gAAAAE"]
[Mon Mar 02 22:44:38.305978 2026] [:error] [pid 28847:tid 28867] [client 89.251.0.143:64615] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaWiVp9xbBq8VfeqVDaSpQAAANI"]
[Mon Mar 02 22:44:39.001729 2026] [:error] [pid 59600:tid 59625] [client 89.251.0.136:32119] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "aaWiV4Q5lE4yocV9IBeT9AAAABA"]
[Mon Mar 02 22:44:40.999026 2026] [:error] [pid 59600:tid 59625] [client 89.251.0.147:59601] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaWiWIQ5lE4yocV9IBeUAgAAABA"]
[Mon Mar 02 22:44:41.704905 2026] [:error] [pid 59600:tid 59626] [client 89.251.0.138:28699] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaWiWYQ5lE4yocV9IBeUBQAAABE"]
[Mon Mar 02 22:44:42.772665 2026] [:error] [pid 59701:tid 59726] [client 89.251.0.119:49221] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Mon Mar 02 22:44:43.121196 2026] [:error] [pid 59701:tid 59727] [client 89.251.0.119:49221] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaWiW-UmTDVso96U9_LulgAAARc"]
[Mon Mar 02 22:44:43.727980 2026] [:error] [pid 59734:tid 59744] [client 89.251.0.147:64003] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaWiW5eWQx7ZQG9NybFFgAAAAUg"]
[Mon Mar 02 22:44:45.020459 2026] [:error] [pid 28847:tid 28863] [client 89.251.0.136:24603] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaWiXZ9xbBq8VfeqVDaSwQAAAM4"]
[Mon Mar 02 22:44:45.634502 2026] [:error] [pid 59601:tid 59647] [client 89.251.0.144:49247] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaWiXcQ1lXfvWN0-ZQmk2wAAAEk"]
[Mon Mar 02 22:44:49.806114 2026] [:error] [pid 59602:tid 59673] [client 89.251.0.145:20199] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaWiYTMtSo_Fr0lHnSaQqAAAAIg"]
[Mon Mar 02 22:44:50.475499 2026] [:error] [pid 59601:tid 59646] [client 89.251.0.126:31289] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaWiYsQ1lXfvWN0-ZQmk6AAAAEg"]
[Mon Mar 02 22:44:51.773441 2026] [:error] [pid 59734:tid 59746] [client 89.251.0.123:22589] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "aaWiY5eWQx7ZQG9NybFFiwAAAUo"]
[Mon Mar 02 22:44:52.811779 2026] [:error] [pid 59734:tid 59745] [client 89.251.0.138:30855] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaWiZJeWQx7ZQG9NybFFkwAAAUk"]
[Mon Mar 02 22:44:54.956104 2026] [:error] [pid 59602:tid 59687] [client 89.251.0.147:44303] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "aaWiZjMtSo_Fr0lHnSaQsQAAAJY"]
[Mon Mar 02 22:44:55.499239 2026] [:error] [pid 59602:tid 59676] [client 89.251.0.140:58729] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaWiZzMtSo_Fr0lHnSaQswAAAIs"]
[Mon Mar 02 22:44:56.112161 2026] [:error] [pid 59602:tid 59684] [client 89.251.0.121:47307] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaWiaDMtSo_Fr0lHnSaQtQAAAJM"]
[Mon Mar 02 22:44:59.130006 2026] [:error] [pid 59602:tid 59683] [client 89.251.0.127:53451] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaWiazMtSo_Fr0lHnSaQugAAAJI"]
[Mon Mar 02 22:44:59.978617 2026] [:error] [pid 59600:tid 59625] [client 89.251.0.146:46647] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Mon Mar 02 22:45:00.674099 2026] [:error] [pid 59600:tid 59625] [client 89.251.0.146:46647] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaWibIQ5lE4yocV9IBeUQwAAABA"]
[Mon Mar 02 22:45:01.980765 2026] [:error] [pid 59600:tid 59619] [client 89.251.0.134:63981] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Mon Mar 02 22:45:02.271709 2026] [:error] [pid 59600:tid 59632] [client 89.251.0.134:63981] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaWiboQ5lE4yocV9IBeUTQAAABc"]
[Mon Mar 02 22:45:04.069642 2026] [:error] [pid 59602:tid 59671] [client 89.251.0.117:39823] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaWicDMtSo_Fr0lHnSaQwQAAAIY"]
[Mon Mar 02 22:45:05.055035 2026] [:error] [pid 59701:tid 59716] [client 89.251.0.145:48245] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaWiceUmTDVso96U9_LuqgAAAQw"]
[Mon Mar 02 22:45:07.287482 2026] [:error] [pid 28847:tid 28849] [client 89.251.0.138:52227] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Mon Mar 02 22:45:08.639153 2026] [:error] [pid 28847:tid 28865] [client 89.251.0.138:52227] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaWidJ9xbBq8VfeqVDaTDwAAANA"]
[Mon Mar 02 22:45:09.713586 2026] [:error] [pid 28847:tid 28849] [client 89.251.0.120:59633] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaWidZ9xbBq8VfeqVDaTFAAAAMA"]
[Mon Mar 02 22:45:10.824858 2026] [:error] [pid 59600:tid 59633] [client 89.251.0.121:36801] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaWidoQ5lE4yocV9IBeUbQAAABg"]
[Mon Mar 02 22:45:11.437957 2026] [:error] [pid 59734:tid 59759] [client 89.251.0.132:51435] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaWid5eWQx7ZQG9NybFFogAAAVc"]
[Mon Mar 02 22:45:12.005768 2026] [:error] [pid 28847:tid 28858] [client 89.251.0.141:45005] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaWieJ9xbBq8VfeqVDaTGgAAAMk"]
[Mon Mar 02 22:46:53.540466 2026] [:error] [pid 28847:tid 28856] [client 20.151.217.152:26480] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWi3Z9xbBq8VfeqVDaUVAAAAMc"]
[Mon Mar 02 22:46:53.958832 2026] [:error] [pid 59734:tid 59755] [client 20.151.217.152:26494] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWi3ZeWQx7ZQG9NybFGKAAAAVM"]
[Mon Mar 02 22:46:54.377899 2026] [:error] [pid 59601:tid 59648] [client 20.151.217.152:26487] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWi3sQ1lXfvWN0-ZQmlaQAAAEo"]
[Mon Mar 02 22:46:54.790124 2026] [:error] [pid 59602:tid 59673] [client 20.151.217.152:26453] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWi3jMtSo_Fr0lHnSaR1wAAAIg"]
[Mon Mar 02 23:54:14.524463 2026] [:error] [pid 59600:tid 59611] [client 34.69.107.233:53166] [client 34.69.107.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.107.233, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaWypoQ5lE4yocV9IBe5tAAAAAI"]
[Mon Mar 02 23:54:14.527972 2026] [:error] [pid 59600:tid 59611] [client 34.69.107.233:53166] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 23:54:16.974811 2026] [:error] [pid 59600:tid 59623] [client 34.69.107.233:53166] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaWyqIQ5lE4yocV9IBe5wQAAAA4"]
[Mon Mar 02 23:54:17.501259 2026] [:error] [pid 28847:tid 28861] [client 34.69.107.233:64783] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaWyqZ9xbBq8VfeqVDbD5gAAAMw"]
[Mon Mar 02 23:54:17.958506 2026] [:error] [pid 28847:tid 28865] [client 34.69.107.233:50571] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaWyqZ9xbBq8VfeqVDbD5wAAANA"]
[Mon Mar 02 23:54:18.500175 2026] [:error] [pid 28847:tid 28858] [client 34.69.107.233:59916] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaWyqp9xbBq8VfeqVDbD6wAAAMk"]
[Mon Mar 02 23:54:18.979797 2026] [:error] [pid 28847:tid 28851] [client 34.69.107.233:50637] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaWyqp9xbBq8VfeqVDbD7gAAAMI"]
[Mon Mar 02 23:54:19.415310 2026] [:error] [pid 28847:tid 28852] [client 34.69.107.233:61309] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaWyq59xbBq8VfeqVDbD8QAAAMM"]
[Mon Mar 02 23:54:19.842263 2026] [:error] [pid 28847:tid 28858] [client 34.69.107.233:49367] [client 34.69.107.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaWyq59xbBq8VfeqVDbD9AAAAMk"]
[Tue Mar 03 00:49:02.604317 2026] [:error] [pid 18960:tid 18967] [client 20.151.217.152:18785] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaW_ftCu09icM9oIHwDM3AAAAMQ"]
[Tue Mar 03 01:25:50.060092 2026] [:error] [pid 18558:tid 18864] [client 43.157.46.118:51038] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaXIHrO1kQHjTOLioCnBggAAAIo"]
[Tue Mar 03 01:29:21.013685 2026] [:error] [pid 60214:tid 60230] [client 20.151.114.166:37558] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaXI8YmuQ_v4S3RkLisC1wAAAQ4"]
[Tue Mar 03 01:29:21.836416 2026] [:error] [pid 60214:tid 60233] [client 20.151.114.166:37573] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaXI8YmuQ_v4S3RkLisC3gAAARE"]
[Tue Mar 03 01:29:22.663059 2026] [:error] [pid 60214:tid 60220] [client 20.151.114.166:37548] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaXI8omuQ_v4S3RkLisC5QAAAQQ"]
[Tue Mar 03 01:29:23.505051 2026] [:error] [pid 18557:tid 18839] [client 20.151.114.166:37614] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "aaXI89ngZqR9Tp8JM0FcvQAAAFA"]
[Tue Mar 03 02:20:06.154222 2026] [:error] [pid 18558:tid 18860] [client 182.42.104.32:41560] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaXU1rO1kQHjTOLioCnaAgAAAIY"]
[Tue Mar 03 02:27:40.427986 2026] [:error] [pid 18558:tid 18859] [client 20.151.217.152:26461] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaXWnLO1kQHjTOLioCndaQAAAIU"]
[Tue Mar 03 02:27:40.844403 2026] [:error] [pid 18557:tid 18847] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Tue Mar 03 02:27:41.263502 2026] [:error] [pid 18557:tid 18828] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Mar 03 02:27:41.473411 2026] [:error] [pid 18557:tid 18831] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Tue Mar 03 02:27:43.022558 2026] [:error] [pid 18557:tid 18831] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Tue Mar 03 02:27:43.231468 2026] [:error] [pid 18557:tid 18819] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Tue Mar 03 02:27:43.442131 2026] [:error] [pid 18557:tid 18824] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Tue Mar 03 02:27:43.651092 2026] [:error] [pid 18557:tid 18846] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Tue Mar 03 02:27:43.860712 2026] [:error] [pid 18557:tid 18843] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Tue Mar 03 02:27:44.069074 2026] [:error] [pid 18557:tid 18830] [client 20.151.217.152:26441] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Mar 03 02:27:44.274509 2026] [:error] [pid 18557:tid 18841] [client 20.151.217.152:26441] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXWoNngZqR9Tp8JM0FwLwAAAFI"]
[Tue Mar 03 02:27:44.691090 2026] [:error] [pid 18556:tid 18775] [client 20.151.217.152:26443] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXWoH9AYyTTd2eEk9FOOgAAABM"]
[Tue Mar 03 02:27:45.116706 2026] [:error] [pid 18558:tid 18859] [client 20.151.217.152:26495] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXWobO1kQHjTOLioCnddAAAAIU"]
[Tue Mar 03 02:27:45.547558 2026] [:error] [pid 60214:tid 60223] [client 20.151.217.152:26439] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXWoYmuQ_v4S3RkLis1zwAAAQc"]
[Tue Mar 03 02:27:45.967641 2026] [:error] [pid 18960:tid 18985] [client 20.151.217.152:26377] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaXWodCu09icM9oIHwAGfAAAANY"]
[Tue Mar 03 02:27:46.378123 2026] [:error] [pid 60214:tid 60238] [client 20.151.217.152:26401] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaXWoomuQ_v4S3RkLis11AAAARY"]
[Tue Mar 03 02:27:46.786496 2026] [:error] [pid 60214:tid 60229] [client 20.151.217.152:26489] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaXWoomuQ_v4S3RkLis12QAAAQ0"]
[Tue Mar 03 02:27:47.217180 2026] [:error] [pid 18960:tid 18970] [client 20.151.217.152:26472] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Okxob.php"] [unique_id "aaXWo9Cu09icM9oIHwAGfwAAAMc"]
[Tue Mar 03 02:27:47.677067 2026] [:error] [pid 60214:tid 60216] [client 20.151.217.152:26467] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaXWo4muQ_v4S3RkLis13wAAAQA"]
[Tue Mar 03 02:27:48.086478 2026] [:error] [pid 60214:tid 60225] [client 20.151.217.152:26385] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaXWpImuQ_v4S3RkLis14QAAAQk"]
[Tue Mar 03 02:27:48.502915 2026] [:error] [pid 18556:tid 18766] [client 20.151.217.152:26390] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaXWpH9AYyTTd2eEk9FOPwAAAAs"]
[Tue Mar 03 02:27:48.925601 2026] [:error] [pid 18558:tid 18866] [client 20.151.217.152:26490] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asf.php"] [unique_id "aaXWpLO1kQHjTOLioCndewAAAIw"]
[Tue Mar 03 02:27:49.343823 2026] [:error] [pid 18556:tid 18760] [client 20.151.217.152:26440] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaXWpX9AYyTTd2eEk9FOQQAAAAU"]
[Tue Mar 03 02:27:49.761473 2026] [:error] [pid 18960:tid 18963] [client 20.151.217.152:26374] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaXWpdCu09icM9oIHwAGgwAAAMA"]
[Tue Mar 03 02:27:50.172663 2026] [:error] [pid 18960:tid 18974] [client 20.151.217.152:26452] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaXWptCu09icM9oIHwAGhQAAAMs"]
[Tue Mar 03 02:27:50.584288 2026] [:error] [pid 18960:tid 18967] [client 20.151.217.152:26462] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa.php"] [unique_id "aaXWptCu09icM9oIHwAGiAAAAMQ"]
[Tue Mar 03 02:56:42.352280 2026] [:error] [pid 18960:tid 18983] [client 20.151.217.152:25352] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaXdatCu09icM9oIHwAX4gAAANQ"]
[Tue Mar 03 02:56:42.774933 2026] [:error] [pid 60214:tid 60224] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Tue Mar 03 02:56:43.195488 2026] [:error] [pid 60214:tid 60226] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Mar 03 02:56:43.404224 2026] [:error] [pid 60214:tid 60230] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Tue Mar 03 02:56:43.613301 2026] [:error] [pid 60214:tid 60223] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Tue Mar 03 02:56:44.876173 2026] [:error] [pid 60214:tid 60223] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Tue Mar 03 02:56:45.086028 2026] [:error] [pid 60214:tid 60229] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Tue Mar 03 02:56:45.294603 2026] [:error] [pid 60214:tid 60240] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Tue Mar 03 02:56:45.502640 2026] [:error] [pid 60214:tid 60218] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Tue Mar 03 02:56:45.710475 2026] [:error] [pid 60214:tid 60219] [client 20.151.217.152:25466] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Mar 03 02:56:45.927826 2026] [:error] [pid 60214:tid 60227] [client 20.151.217.152:25466] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXdbYmuQ_v4S3RkLitOCgAAAQs"]
[Tue Mar 03 02:56:46.340953 2026] [:error] [pid 18557:tid 18833] [client 20.151.217.152:25425] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXdbtngZqR9Tp8JM0F4RwAAAEo"]
[Tue Mar 03 02:56:46.759784 2026] [:error] [pid 18960:tid 18980] [client 20.151.217.152:25426] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXdbtCu09icM9oIHwAX_wAAANE"]
[Tue Mar 03 02:56:47.170641 2026] [:error] [pid 18557:tid 18846] [client 20.151.217.152:25414] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as1337.php"] [unique_id "aaXdb9ngZqR9Tp8JM0F4SwAAAFc"]
[Tue Mar 03 03:21:36.188074 2026] [:error] [pid 5477:tid 5547] [client 177.171.96.30:52988] [client 177.171.96.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.171.96.30, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaXjQDHvKL2XUFS-F-oJCwAAAIQ"]
[Tue Mar 03 03:21:36.192913 2026] [:error] [pid 5477:tid 5547] [client 177.171.96.30:52988] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 03:23:07.183553 2026] [:error] [pid 5477:tid 5567] [client 140.184.2.241:60546] [client 140.184.2.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.184.2.241, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaXjmzHvKL2XUFS-F-oJ1QAAAJg"]
[Tue Mar 03 03:23:07.188442 2026] [:error] [pid 5477:tid 5567] [client 140.184.2.241:60546] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 07:48:33.909646 2026] [:error] [pid 26186:tid 26201] [client 43.153.204.189:35856] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaYh0fbZCNtk8wDak9fePgAAAU0"]
[Tue Mar 03 09:16:25.247045 2026] [:error] [pid 14042:tid 14065] [client 157.173.127.72:51512] [client 157.173.127.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaY2aWeHGCmSEiIBcK53QgAAAZU"]
[Tue Mar 03 09:16:27.302942 2026] [:error] [pid 14042:tid 14049] [client 157.173.127.72:51518] [client 157.173.127.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aaY2a2eHGCmSEiIBcK53SwAAAYU"]
[Tue Mar 03 09:16:38.976787 2026] [:error] [pid 36897:tid 36923] [client 157.173.127.72:3632] [client 157.173.127.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aaY2diZC69_8eM0UousV7QAAANU"]
[Tue Mar 03 11:22:37.239931 2026] [:error] [pid 20872:tid 20888] [client 54.37.254.218:42378] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaZT_YlYbNk3E_3CgBjwZQAAAQ4"]
[Tue Mar 03 11:22:39.146397 2026] [:error] [pid 20872:tid 20886] [client 54.37.254.218:57552] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaZT_4lYbNk3E_3CgBjwagAAAQw"]
[Tue Mar 03 11:22:41.438713 2026] [:error] [pid 26186:tid 26210] [client 54.37.254.218:57568] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaZUAfbZCNtk8wDak9da3QAAAVY"]
[Tue Mar 03 11:22:43.432262 2026] [:error] [pid 26186:tid 26194] [client 54.37.254.218:57584] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaZUA_bZCNtk8wDak9da4QAAAUY"]
[Tue Mar 03 11:22:45.513790 2026] [:error] [pid 26186:tid 26190] [client 54.37.254.218:57600] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaZUBfbZCNtk8wDak9da6wAAAUI"]
[Tue Mar 03 11:22:47.376809 2026] [:error] [pid 20872:tid 20879] [client 54.37.254.218:57606] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaZUB4lYbNk3E_3CgBjwcQAAAQU"]
[Tue Mar 03 11:22:50.253475 2026] [:error] [pid 36897:tid 36918] [client 54.37.254.218:50610] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaZUCiZC69_8eM0Uous7-wAAANA"]
[Tue Mar 03 11:22:52.516207 2026] [:error] [pid 36897:tid 36926] [client 54.37.254.218:50622] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaZUDCZC69_8eM0Uous7_AAAANg"]
[Tue Mar 03 11:22:54.662889 2026] [:error] [pid 14042:tid 14055] [client 54.37.254.218:50626] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaZUDmeHGCmSEiIBcK7ZQgAAAYs"]
[Tue Mar 03 11:22:57.095159 2026] [:error] [pid 20872:tid 20887] [client 54.37.254.218:50638] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaZUEYlYbNk3E_3CgBjweQAAAQ0"]
[Tue Mar 03 11:22:59.439014 2026] [:error] [pid 14042:tid 14068] [client 54.37.254.218:57088] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaZUE2eHGCmSEiIBcK7ZVwAAAZg"]
[Tue Mar 03 11:23:01.543176 2026] [:error] [pid 14042:tid 14048] [client 54.37.254.218:57104] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaZUFWeHGCmSEiIBcK7ZZAAAAYQ"]
[Tue Mar 03 11:23:03.814205 2026] [:error] [pid 14042:tid 14061] [client 54.37.254.218:57118] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaZUF2eHGCmSEiIBcK7ZbAAAAZE"]
[Tue Mar 03 11:23:05.944552 2026] [:error] [pid 20872:tid 20893] [client 54.37.254.218:57134] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaZUGYlYbNk3E_3CgBjwhwAAARM"]
[Tue Mar 03 11:23:08.314824 2026] [:error] [pid 36897:tid 36916] [client 54.37.254.218:39658] [client 54.37.254.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aaZUHCZC69_8eM0Uous8CQAAAM4"]
[Tue Mar 03 11:58:46.056070 2026] [:error] [pid 14042:tid 14044] [client 51.83.11.76:38096] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aaZcdmeHGCmSEiIBcK75HgAAAYA"]
[Tue Mar 03 11:58:48.015194 2026] [:error] [pid 26186:tid 26208] [client 51.83.11.76:42590] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aaZcePbZCNtk8wDak9dw0QAAAVQ"]
[Tue Mar 03 11:58:49.999462 2026] [:error] [pid 14042:tid 14047] [client 51.83.11.76:41364] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaZceWeHGCmSEiIBcK75JQAAAYM"]
[Tue Mar 03 12:41:57.318257 2026] [:error] [pid 36784:tid 36832] [client 51.68.234.139:32890] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaZmlXNeKOSGbW9kDgQdmAAAAEk"]
[Tue Mar 03 12:41:59.237081 2026] [:error] [pid 36897:tid 36905] [client 51.68.234.139:47544] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaZmlyZC69_8eM0UoutcCAAAAMM"]
[Tue Mar 03 12:42:03.073123 2026] [:error] [pid 36784:tid 36829] [client 51.68.234.139:47558] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaZmm3NeKOSGbW9kDgQduAAAAEY"]
[Tue Mar 03 13:55:52.700474 2026] [:error] [pid 36785:tid 36862] [client 147.135.213.175:37836] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aaZ36HhJejauENG9qTj0hgAAAIw"]
[Tue Mar 03 13:55:54.559854 2026] [:error] [pid 62485:tid 62508] [client 147.135.213.175:46472] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaZ36v9R7DZ1ENjPMXRDTQAAAdM"]
[Tue Mar 03 13:55:56.308866 2026] [:error] [pid 36784:tid 36844] [client 147.135.213.175:46474] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaZ37HNeKOSGbW9kDgRJcwAAAFU"]
[Tue Mar 03 13:55:58.354330 2026] [:error] [pid 36783:tid 36795] [client 147.135.213.175:60942] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaZ37j4tNYh5NtLaTXdX9wAAAAE"]
[Tue Mar 03 13:56:00.265297 2026] [:error] [pid 36783:tid 36802] [client 147.135.213.175:60946] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaZ38D4tNYh5NtLaTXdX_AAAAAg"]
[Tue Mar 03 13:56:02.134588 2026] [:error] [pid 36785:tid 36874] [client 147.135.213.175:60962] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaZ38nhJejauENG9qTj0nwAAAJg"]
[Tue Mar 03 13:56:04.180328 2026] [:error] [pid 36785:tid 36866] [client 147.135.213.175:60972] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaZ39HhJejauENG9qTj0pwAAAJA"]
[Tue Mar 03 13:56:06.239316 2026] [:error] [pid 62485:tid 62503] [client 147.135.213.175:60986] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaZ39v9R7DZ1ENjPMXRDUgAAAc4"]
[Tue Mar 03 13:56:08.278600 2026] [:error] [pid 62485:tid 62493] [client 147.135.213.175:36450] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaZ3-P9R7DZ1ENjPMXRDWgAAAcQ"]
[Tue Mar 03 13:56:10.184141 2026] [:error] [pid 62485:tid 62501] [client 147.135.213.175:36460] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaZ3-v9R7DZ1ENjPMXRDXwAAAcw"]
[Tue Mar 03 13:56:12.241221 2026] [:error] [pid 36785:tid 36856] [client 147.135.213.175:36466] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaZ3_HhJejauENG9qTj0sgAAAIY"]
[Tue Mar 03 13:56:14.144468 2026] [:error] [pid 14042:tid 14051] [client 147.135.213.175:36470] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaZ3_meHGCmSEiIBcK4lwgAAAYc"]
[Tue Mar 03 13:56:16.197874 2026] [:error] [pid 36784:tid 36843] [client 147.135.213.175:36482] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaZ4AHNeKOSGbW9kDgRJfgAAAFQ"]
[Tue Mar 03 13:56:18.072682 2026] [:error] [pid 36785:tid 36866] [client 147.135.213.175:36488] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaZ4AnhJejauENG9qTj0vAAAAJA"]
[Tue Mar 03 13:56:19.954345 2026] [:error] [pid 36784:tid 36844] [client 147.135.213.175:54194] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaZ4A3NeKOSGbW9kDgRJhgAAAFU"]
[Tue Mar 03 13:56:21.862900 2026] [:error] [pid 36785:tid 36868] [client 147.135.213.175:54200] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaZ4BXhJejauENG9qTj0vwAAAJI"]
[Tue Mar 03 13:56:23.898039 2026] [:error] [pid 36783:tid 36803] [client 147.135.213.175:54216] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaZ4Bz4tNYh5NtLaTXdYBQAAAAk"]
[Tue Mar 03 13:56:25.788102 2026] [:error] [pid 36897:tid 36924] [client 147.135.213.175:54226] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaZ4CSZC69_8eM0UouuRxQAAANY"]
[Tue Mar 03 13:56:27.809008 2026] [:error] [pid 36897:tid 36908] [client 147.135.213.175:54232] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aaZ4CyZC69_8eM0UouuRzQAAAMY"]
[Tue Mar 03 13:56:29.697627 2026] [:error] [pid 36897:tid 36904] [client 147.135.213.175:53682] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaZ4DSZC69_8eM0UouuR1gAAAMI"]
[Tue Mar 03 13:56:31.579421 2026] [:error] [pid 36784:tid 36827] [client 147.135.213.175:53690] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaZ4D3NeKOSGbW9kDgRJiQAAAEQ"]
[Tue Mar 03 13:56:33.618188 2026] [:error] [pid 36784:tid 36824] [client 147.135.213.175:53704] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaZ4EXNeKOSGbW9kDgRJjAAAAEE"]
[Tue Mar 03 13:56:35.491123 2026] [:error] [pid 36897:tid 36909] [client 147.135.213.175:53710] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaZ4EyZC69_8eM0UouuR6gAAAMc"]
[Tue Mar 03 13:56:37.499667 2026] [:error] [pid 36785:tid 36872] [client 147.135.213.175:53722] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaZ4FXhJejauENG9qTj04QAAAJY"]
[Tue Mar 03 13:56:39.526942 2026] [:error] [pid 20872:tid 20875] [client 147.135.213.175:59430] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaZ4F4lYbNk3E_3CgBgPmQAAAQE"]
[Tue Mar 03 13:56:41.408733 2026] [:error] [pid 36785:tid 36857] [client 147.135.213.175:59434] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaZ4GXhJejauENG9qTj0-AAAAIc"]
[Tue Mar 03 13:56:43.416559 2026] [:error] [pid 36783:tid 36797] [client 147.135.213.175:59436] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aaZ4Gz4tNYh5NtLaTXdYFwAAAAM"]
[Tue Mar 03 13:56:45.432896 2026] [:error] [pid 62485:tid 62511] [client 147.135.213.175:59444] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaZ4Hf9R7DZ1ENjPMXRDeAAAAdY"]
[Tue Mar 03 13:56:47.305540 2026] [:error] [pid 36897:tid 36910] [client 147.135.213.175:59446] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aaZ4HyZC69_8eM0UouuR_AAAAMg"]
[Tue Mar 03 13:56:49.328211 2026] [:error] [pid 36783:tid 36803] [client 147.135.213.175:55998] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaZ4IT4tNYh5NtLaTXdYGgAAAAk"]
[Tue Mar 03 13:57:10.028287 2026] [:error] [pid 20872:tid 20876] [client 147.135.213.175:56010] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaZ4NolYbNk3E_3CgBgPuAAAAQI"]
[Tue Mar 03 13:57:11.994544 2026] [:error] [pid 36785:tid 36860] [client 147.135.213.175:55084] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aaZ4N3hJejauENG9qTj1JgAAAIo"]
[Tue Mar 03 13:57:14.021670 2026] [:error] [pid 36785:tid 36867] [client 147.135.213.175:55090] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaZ4OnhJejauENG9qTj1MgAAAJE"]
[Tue Mar 03 13:57:16.012860 2026] [:error] [pid 36897:tid 36911] [client 147.135.213.175:55100] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaZ4PCZC69_8eM0UouuSJgAAAMk"]
[Tue Mar 03 13:57:18.020261 2026] [:error] [pid 36785:tid 36850] [client 147.135.213.175:55110] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaZ4PnhJejauENG9qTj1OgAAAIA"]
[Tue Mar 03 13:57:19.892222 2026] [:error] [pid 36785:tid 36859] [client 147.135.213.175:46096] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaZ4P3hJejauENG9qTj1SQAAAIk"]
[Tue Mar 03 13:57:21.906742 2026] [:error] [pid 26186:tid 26194] [client 147.135.213.175:46106] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaZ4QfbZCNtk8wDak9eQwwAAAUY"]
[Tue Mar 03 13:57:23.938956 2026] [:error] [pid 36783:tid 36802] [client 147.135.213.175:46122] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aaZ4Qz4tNYh5NtLaTXdYLAAAAAg"]
[Tue Mar 03 13:57:25.819479 2026] [:error] [pid 14042:tid 14068] [client 147.135.213.175:46126] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaZ4RWeHGCmSEiIBcK4l9wAAAZg"]
[Tue Mar 03 13:57:27.845877 2026] [:error] [pid 36785:tid 36862] [client 147.135.213.175:46128] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaZ4R3hJejauENG9qTj1XAAAAIw"]
[Tue Mar 03 13:57:29.861139 2026] [:error] [pid 36897:tid 36919] [client 147.135.213.175:60544] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaZ4SSZC69_8eM0UouuSMgAAANE"]
[Tue Mar 03 13:57:31.866063 2026] [:error] [pid 62485:tid 62510] [client 147.135.213.175:60552] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaZ4S_9R7DZ1ENjPMXRDggAAAdU"]
[Tue Mar 03 13:57:35.737464 2026] [:error] [pid 36897:tid 36921] [client 147.135.213.175:60562] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaZ4TyZC69_8eM0UouuSPgAAANM"]
[Tue Mar 03 14:09:39.855359 2026] [:error] [pid 36785:tid 36854] [client 150.109.46.88:55656] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaZ7I3hJejauENG9qTj9PgAAAIQ"]
[Tue Mar 03 16:24:33.658053 2026] [:error] [pid 36785:tid 36874] [client 51.83.8.179:41962] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaaawXhJejauENG9qThVOQAAAJg"]
[Tue Mar 03 16:24:36.085677 2026] [:error] [pid 26186:tid 26197] [client 51.83.8.179:41974] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaaaxPbZCNtk8wDak9eklgAAAUk"]
[Tue Mar 03 16:24:38.408369 2026] [:error] [pid 36783:tid 36798] [client 51.83.8.179:41988] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaaaxj4tNYh5NtLaTXd8LgAAAAQ"]
[Tue Mar 03 16:24:40.479851 2026] [:error] [pid 36897:tid 36908] [client 51.83.8.179:53180] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaaayCZC69_8eM0UouvYjgAAAMY"]
[Tue Mar 03 16:24:42.617209 2026] [:error] [pid 36783:tid 36817] [client 51.83.8.179:53182] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaaayj4tNYh5NtLaTXd8MgAAABc"]
[Tue Mar 03 16:24:44.787383 2026] [:error] [pid 14042:tid 14057] [client 51.83.8.179:53190] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaaazGeHGCmSEiIBcK5A8AAAAY0"]
[Tue Mar 03 16:24:47.131106 2026] [:error] [pid 26186:tid 26193] [client 51.83.8.179:53198] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaaaz_bZCNtk8wDak9eknAAAAUU"]
[Tue Mar 03 16:24:49.508460 2026] [:error] [pid 36897:tid 36920] [client 51.83.8.179:42104] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaaa0SZC69_8eM0UouvYmgAAANI"]
[Tue Mar 03 16:24:51.958076 2026] [:error] [pid 36785:tid 36862] [client 51.83.8.179:42108] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aaaa03hJejauENG9qThVcwAAAIw"]
[Tue Mar 03 16:24:54.009308 2026] [:error] [pid 36785:tid 36864] [client 51.83.8.179:42110] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaaa1nhJejauENG9qThVpgAAAI4"]
[Tue Mar 03 16:24:56.076952 2026] [:error] [pid 36784:tid 36825] [client 51.83.8.179:42124] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaaa2HNeKOSGbW9kDgR5UwAAAEI"]
[Tue Mar 03 16:24:58.028200 2026] [:error] [pid 36897:tid 36917] [client 51.83.8.179:42140] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaaa2iZC69_8eM0UouvYqAAAAM8"]
[Tue Mar 03 16:25:00.237197 2026] [:error] [pid 36785:tid 36868] [client 51.83.8.179:34622] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaaa3HhJejauENG9qThVuwAAAJI"]
[Tue Mar 03 16:25:02.244834 2026] [:error] [pid 26186:tid 26195] [client 51.83.8.179:34630] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaaa3vbZCNtk8wDak9eksAAAAUc"]
[Tue Mar 03 16:25:04.233561 2026] [:error] [pid 14042:tid 14058] [client 51.83.8.179:34646] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaaa4GeHGCmSEiIBcK5BAgAAAY4"]
[Tue Mar 03 17:50:58.791207 2026] [:error] [pid 36897:tid 36923] [client 65.108.2.171:63122] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaavAiZC69_8eM0Uouv_tgAAANU"]
[Tue Mar 03 17:51:00.791105 2026] [:error] [pid 36784:tid 36840] [client 65.108.2.171:63134] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaavBHNeKOSGbW9kDgSVFQAAAFE"]
[Tue Mar 03 17:51:02.751160 2026] [:error] [pid 36897:tid 36904] [client 65.108.2.171:63146] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaavBiZC69_8eM0Uouv_vQAAAMI"]
[Tue Mar 03 17:51:04.953639 2026] [:error] [pid 14042:tid 14054] [client 65.108.2.171:8316] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaavCGeHGCmSEiIBcK5QXwAAAYo"]
[Tue Mar 03 17:51:06.964160 2026] [:error] [pid 36783:tid 36802] [client 65.108.2.171:8330] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaavCj4tNYh5NtLaTXePzwAAAAg"]
[Tue Mar 03 17:51:08.950149 2026] [:error] [pid 14042:tid 14048] [client 65.108.2.171:8340] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaavDGeHGCmSEiIBcK5QYwAAAYQ"]
[Tue Mar 03 17:51:11.069205 2026] [:error] [pid 36783:tid 36806] [client 65.108.2.171:8348] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaavDz4tNYh5NtLaTXeP3AAAAAw"]
[Tue Mar 03 18:18:30.229924 2026] [:error] [pid 26186:tid 26192] [client 185.225.42.40:49285] [client 185.225.42.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.225.42.40, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaa1dvbZCNtk8wDak9e0LgAAAUQ"]
[Tue Mar 03 18:18:30.239089 2026] [:error] [pid 26186:tid 26192] [client 185.225.42.40:49285] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 20:44:06.704103 2026] [:error] [pid 36897:tid 36903] [client 82.167.20.131:31442] [client 82.167.20.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.167.20.131, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aabXliZC69_8eM0UoutqwgAAAME"]
[Tue Mar 03 20:44:06.709469 2026] [:error] [pid 36897:tid 36903] [client 82.167.20.131:31442] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 21:43:20.325771 2026] [:error] [pid 36897:tid 36920] [client 114.80.36.40:39900] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aableCZC69_8eM0UouuNewAAANI"]
[Tue Mar 03 22:11:33.203596 2026] [:error] [pid 36783:tid 36802] [client 178.16.53.90:59119] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aabsFT4tNYh5NtLaTXfQ4gAAAAg"]
[Wed Mar 04 00:00:40.346267 2026] [:error] [pid 14042:tid 14044] [client 20.127.131.187:13482] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aacFqGeHGCmSEiIBcK6UQQAAAYA"]
[Wed Mar 04 00:00:41.184090 2026] [:error] [pid 36897:tid 36922] [client 20.127.131.187:13454] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aacFqSZC69_8eM0UouveQAAAANQ"]
[Wed Mar 04 00:00:42.077797 2026] [:error] [pid 62485:tid 62501] [client 20.127.131.187:14287] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aacFqv9R7DZ1ENjPMXSLzwAAAcw"]
[Wed Mar 04 00:00:42.958845 2026] [:error] [pid 62485:tid 62495] [client 20.127.131.187:13455] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aacFqv9R7DZ1ENjPMXSL0gAAAcY"]
[Wed Mar 04 01:09:55.498309 2026] [:error] [pid 27359:tid 27385] [client 147.135.215.173:38990] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aacV41607jzBiSmoFjLnAgAAANg"]
[Wed Mar 04 01:09:57.321941 2026] [:error] [pid 48407:tid 48715] [client 147.135.215.173:34394] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aacV5T7Td6SiHn8fwfnKPgAAAJg"]
[Wed Mar 04 01:09:59.373837 2026] [:error] [pid 27359:tid 27365] [client 147.135.215.173:34400] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aacV51607jzBiSmoFjLnGQAAAMQ"]
[Wed Mar 04 01:59:07.109860 2026] [:error] [pid 27359:tid 27366] [client 49.51.253.83:60004] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aacha1607jzBiSmoFjINMgAAAMU"]
[Wed Mar 04 02:07:03.786854 2026] [:error] [pid 27359:tid 27367] [client 49.51.204.74:40098] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aacjR1607jzBiSmoFjIURQAAAMY"]
[Wed Mar 04 02:34:54.286087 2026] [:error] [pid 27359:tid 27367] [client 135.181.213.219:20468] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aacpzl607jzBiSmoFjIq7wAAAMY"]
[Wed Mar 04 02:34:56.309806 2026] [:error] [pid 48807:tid 48823] [client 135.181.213.219:20472] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aacp0A9v35BN-51vqYahxQAAAQ4"]
[Wed Mar 04 02:34:58.315302 2026] [:error] [pid 27359:tid 27372] [client 135.181.213.219:20478] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aacp0l607jzBiSmoFjIq8wAAAMs"]
[Wed Mar 04 04:31:19.832965 2026] [:error] [pid 54487:tid 54499] [client 81.167.26.57:14189] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aadFF_N8030QMpFXddvqVAAAAQo"]
[Wed Mar 04 04:31:22.053881 2026] [:error] [pid 54487:tid 54513] [client 81.167.26.57:29807] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aadFGvN8030QMpFXddvqWAAAARg"]
[Wed Mar 04 04:31:23.949651 2026] [:error] [pid 54487:tid 54510] [client 81.167.26.57:54163] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aadFG_N8030QMpFXddvqXgAAARU"]
[Wed Mar 04 04:31:25.864161 2026] [:error] [pid 54487:tid 54501] [client 81.167.26.57:12510] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aadFHfN8030QMpFXddvqYQAAAQw"]
[Wed Mar 04 04:31:27.906034 2026] [:error] [pid 18553:tid 18572] [client 81.167.26.57:64918] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aadFH2bax1neh8d0AHZ99AAAAAg"]
[Wed Mar 04 04:31:29.822618 2026] [:error] [pid 54487:tid 54508] [client 81.167.26.57:49658] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aadFIfN8030QMpFXddvqcwAAARM"]
[Wed Mar 04 04:31:32.075206 2026] [:error] [pid 54487:tid 54493] [client 81.167.26.57:5726] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aadFJPN8030QMpFXddvqegAAAQQ"]
[Wed Mar 04 04:31:33.984992 2026] [:error] [pid 54487:tid 54494] [client 81.167.26.57:9151] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aadFJfN8030QMpFXddvqfgAAAQU"]
[Wed Mar 04 04:31:35.894191 2026] [:error] [pid 54487:tid 54508] [client 81.167.26.57:2666] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aadFJ_N8030QMpFXddvqhAAAARM"]
[Wed Mar 04 04:31:37.930863 2026] [:error] [pid 54487:tid 54495] [client 81.167.26.57:54488] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aadFKfN8030QMpFXddvqjwAAAQY"]
[Wed Mar 04 04:31:39.850357 2026] [:error] [pid 18554:tid 18606] [client 81.167.26.57:49544] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aadFK50fKmKeTIK7QS1zqgAAAE4"]
[Wed Mar 04 04:31:41.766302 2026] [:error] [pid 18554:tid 18615] [client 81.167.26.57:7127] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aadFLZ0fKmKeTIK7QS1zrAAAAFc"]
[Wed Mar 04 04:31:43.997504 2026] [:error] [pid 18553:tid 18568] [client 81.167.26.57:39078] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aadFL2bax1neh8d0AHZ-BQAAAAQ"]
[Wed Mar 04 04:31:46.189823 2026] [:error] [pid 54487:tid 54512] [client 81.167.26.57:59458] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aadFMvN8030QMpFXddvqrAAAARc"]
[Wed Mar 04 04:31:48.125350 2026] [:error] [pid 54487:tid 54494] [client 81.167.26.57:40181] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aadFNPN8030QMpFXddvqswAAAQU"]
[Wed Mar 04 05:44:49.924677 2026] [:error] [pid 54487:tid 54511] [client 135.181.180.59:15548] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aadWUfN8030QMpFXddsjyAAAARY"]
[Wed Mar 04 05:44:52.042441 2026] [:error] [pid 18553:tid 18581] [client 135.181.180.59:15562] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aadWVGbax1neh8d0AHaMrwAAABE"]
[Wed Mar 04 05:44:53.976208 2026] [:error] [pid 18555:tid 18620] [client 135.181.180.59:15564] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aadWVTQeUDANiOsQ3Gdv-AAAAIE"]
[Wed Mar 04 06:25:35.101828 2026] [:error] [pid 18554:tid 18604] [client 88.89.67.172:43992] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aadf350fKmKeTIK7QS2p6gAAAEw"]
[Wed Mar 04 06:25:42.390276 2026] [:error] [pid 18555:tid 18629] [client 88.89.67.172:46030] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aadf5jQeUDANiOsQ3Gd2zwAAAIo"]
[Wed Mar 04 06:25:46.179501 2026] [:error] [pid 18554:tid 18592] [client 88.89.67.172:46042] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aadf6p0fKmKeTIK7QS2qHwAAAEA"]
[Wed Mar 04 07:00:29.914998 2026] [:error] [pid 18554:tid 18612] [client 98.192.152.136:64427] [client 98.192.152.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.192.152.136, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aadoDZ0fKmKeTIK7QS3HKAAAAFQ"]
[Wed Mar 04 07:00:29.919806 2026] [:error] [pid 18554:tid 18612] [client 98.192.152.136:64427] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 04 07:10:46.571721 2026] [:error] [pid 18553:tid 18581] [client 147.135.252.148:56112] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aadqdmbax1neh8d0AHaY9wAAABE"]
[Wed Mar 04 07:10:48.490055 2026] [:error] [pid 18554:tid 18613] [client 147.135.252.148:40642] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aadqeJ0fKmKeTIK7QS3OnwAAAFU"]
[Wed Mar 04 07:10:50.561277 2026] [:error] [pid 54487:tid 54491] [client 147.135.252.148:40658] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aadqevN8030QMpFXddtRlgAAAQI"]
[Wed Mar 04 07:10:52.541524 2026] [:error] [pid 54487:tid 54490] [client 147.135.252.148:40668] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aadqfPN8030QMpFXddtRogAAAQE"]
[Wed Mar 04 07:10:54.456755 2026] [:error] [pid 18681:tid 18688] [client 147.135.252.148:40676] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aadqfqE_TuZYUBveWkWzQAAAAMU"]
[Wed Mar 04 07:10:56.502359 2026] [:error] [pid 18554:tid 18612] [client 147.135.252.148:34618] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aadqgJ0fKmKeTIK7QS3OswAAAFQ"]
[Wed Mar 04 07:10:58.380058 2026] [:error] [pid 18554:tid 18609] [client 147.135.252.148:34622] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aadqgp0fKmKeTIK7QS3OuAAAAFE"]
[Wed Mar 04 07:11:00.280165 2026] [:error] [pid 54487:tid 54511] [client 147.135.252.148:34628] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aadqhPN8030QMpFXddtRxQAAARY"]
[Wed Mar 04 07:11:02.165782 2026] [:error] [pid 18554:tid 18593] [client 147.135.252.148:34638] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aadqhp0fKmKeTIK7QS3OwAAAAEE"]
[Wed Mar 04 07:11:04.254079 2026] [:error] [pid 18554:tid 18609] [client 147.135.252.148:34642] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aadqiJ0fKmKeTIK7QS3OyAAAAFE"]
[Wed Mar 04 07:11:06.209157 2026] [:error] [pid 54487:tid 54504] [client 147.135.252.148:49612] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aadqivN8030QMpFXddtR2wAAAQ8"]
[Wed Mar 04 07:11:08.172294 2026] [:error] [pid 18554:tid 18598] [client 147.135.252.148:49622] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aadqjJ0fKmKeTIK7QS3O3wAAAEY"]
[Wed Mar 04 07:11:10.204718 2026] [:error] [pid 18553:tid 18580] [client 147.135.252.148:49632] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aadqjmbax1neh8d0AHaZCAAAABA"]
[Wed Mar 04 07:11:12.064800 2026] [:error] [pid 18681:tid 18690] [client 147.135.252.148:49634] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aadqkKE_TuZYUBveWkWzUwAAAMc"]
[Wed Mar 04 07:11:14.133367 2026] [:error] [pid 18681:tid 18707] [client 147.135.252.148:49638] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aadqkqE_TuZYUBveWkWzWAAAANg"]
[Wed Mar 04 07:11:16.276797 2026] [:error] [pid 18554:tid 18615] [client 147.135.252.148:58458] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aadqlJ0fKmKeTIK7QS3O-wAAAFc"]
[Wed Mar 04 07:11:18.291304 2026] [:error] [pid 18681:tid 18700] [client 147.135.252.148:58468] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aadqlqE_TuZYUBveWkWzYgAAANE"]
[Wed Mar 04 07:11:20.414427 2026] [:error] [pid 54487:tid 54510] [client 147.135.252.148:58472] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aadqmPN8030QMpFXddtR9QAAARU"]
[Wed Mar 04 07:11:22.519490 2026] [:error] [pid 54487:tid 54492] [client 147.135.252.148:58482] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aadqmvN8030QMpFXddtR-wAAAQM"]
[Wed Mar 04 07:11:24.542294 2026] [:error] [pid 54487:tid 54501] [client 147.135.252.148:58496] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aadqnPN8030QMpFXddtR_gAAAQw"]
[Wed Mar 04 07:11:26.692996 2026] [:error] [pid 54487:tid 54509] [client 147.135.252.148:41406] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aadqnvN8030QMpFXddtSCQAAARQ"]
[Wed Mar 04 07:11:28.680396 2026] [:error] [pid 18555:tid 18643] [client 147.135.252.148:41414] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aadqoDQeUDANiOsQ3GeBWgAAAJg"]
[Wed Mar 04 07:11:30.740989 2026] [:error] [pid 18553:tid 18582] [client 147.135.252.148:41426] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aadqombax1neh8d0AHaZEgAAABI"]
[Wed Mar 04 07:11:32.544413 2026] [:error] [pid 54487:tid 54504] [client 147.135.252.148:41438] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aadqpPN8030QMpFXddtSGAAAAQ8"]
[Wed Mar 04 07:11:34.491476 2026] [:error] [pid 54487:tid 54493] [client 147.135.252.148:41444] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aadqpvN8030QMpFXddtSHwAAAQQ"]
[Wed Mar 04 07:11:36.517112 2026] [:error] [pid 18554:tid 18610] [client 147.135.252.148:42032] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aadqqJ0fKmKeTIK7QS3POwAAAFI"]
[Wed Mar 04 07:11:38.521677 2026] [:error] [pid 18681:tid 18695] [client 147.135.252.148:42038] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aadqqqE_TuZYUBveWkWzcwAAAMw"]
[Wed Mar 04 07:11:40.606769 2026] [:error] [pid 18555:tid 18632] [client 147.135.252.148:42046] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aadqrDQeUDANiOsQ3GeBbwAAAI0"]
[Wed Mar 04 07:11:42.793545 2026] [:error] [pid 18554:tid 18600] [client 147.135.252.148:42056] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aadqrp0fKmKeTIK7QS3PXgAAAEg"]
[Wed Mar 04 07:12:03.676746 2026] [:error] [pid 54487:tid 54510] [client 147.135.252.148:42062] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aadqw_N8030QMpFXddtSdQAAARU"]
[Wed Mar 04 07:12:05.598826 2026] [:error] [pid 18681:tid 18700] [client 147.135.252.148:41712] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aadqxaE_TuZYUBveWkWzmgAAANE"]
[Wed Mar 04 07:12:07.505231 2026] [:error] [pid 18554:tid 18595] [client 147.135.252.148:52598] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aadqx50fKmKeTIK7QS3PxwAAAEM"]
[Wed Mar 04 07:12:09.313622 2026] [:error] [pid 18555:tid 18620] [client 147.135.252.148:52608] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aadqyTQeUDANiOsQ3GeBlgAAAIE"]
[Wed Mar 04 07:12:11.354085 2026] [:error] [pid 18554:tid 18594] [client 147.135.252.148:52618] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aadqy50fKmKeTIK7QS3P1wAAAEI"]
[Wed Mar 04 07:12:13.422634 2026] [:error] [pid 18554:tid 18602] [client 147.135.252.148:52634] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aadqzZ0fKmKeTIK7QS3P3QAAAEo"]
[Wed Mar 04 07:12:15.408667 2026] [:error] [pid 54487:tid 54495] [client 147.135.252.148:52636] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aadqz_N8030QMpFXddtSlgAAAQY"]
[Wed Mar 04 07:12:17.445251 2026] [:error] [pid 54487:tid 54492] [client 147.135.252.148:38120] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aadq0fN8030QMpFXddtSngAAAQM"]
[Wed Mar 04 07:12:19.399943 2026] [:error] [pid 18553:tid 18573] [client 147.135.252.148:38122] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aadq02bax1neh8d0AHaZOAAAAAk"]
[Wed Mar 04 07:12:21.340139 2026] [:error] [pid 18555:tid 18629] [client 147.135.252.148:38126] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aadq1TQeUDANiOsQ3GeBnwAAAIo"]
[Wed Mar 04 07:12:23.272101 2026] [:error] [pid 18555:tid 18627] [client 147.135.252.148:38130] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aadq1zQeUDANiOsQ3GeBoQAAAIg"]
[Wed Mar 04 07:12:25.231181 2026] [:error] [pid 18555:tid 18633] [client 147.135.252.148:38142] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aadq2TQeUDANiOsQ3GeBpAAAAI4"]
[Wed Mar 04 07:12:27.092634 2026] [:error] [pid 18555:tid 18626] [client 147.135.252.148:43122] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aadq2zQeUDANiOsQ3GeBpwAAAIc"]
[Wed Mar 04 07:12:30.881541 2026] [:error] [pid 18553:tid 18579] [client 147.135.252.148:43124] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aadq3mbax1neh8d0AHaZPwAAAA8"]
[Wed Mar 04 07:54:03.253224 2026] [:error] [pid 18555:tid 18627] [client 138.124.113.65:7162] [client 138.124.113.65] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aad0mzQeUDANiOsQ3GeMZAAAAIg"]
[Wed Mar 04 07:54:03.957259 2026] [:error] [pid 18555:tid 18642] [client 138.124.113.65:7162] [client 138.124.113.65] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=image/tiff"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aad0mzQeUDANiOsQ3GeMZgAAAJc"]
[Wed Mar 04 08:31:46.497601 2026] [:error] [pid 18553:tid 18568] [client 170.106.72.93:40754] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aad9cmbax1neh8d0AHal_QAAAAQ"]
[Wed Mar 04 09:34:52.543855 2026] [:error] [pid 18554:tid 18614] [client 4.205.67.132:15353] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeMPJ0fKmKeTIK7QS0uLAAAAFY"]
[Wed Mar 04 09:34:53.008165 2026] [:error] [pid 54487:tid 54501] [client 4.205.67.132:15297] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeMPfN8030QMpFXddu_7QAAAQw"]
[Wed Mar 04 09:34:53.424183 2026] [:error] [pid 54487:tid 54492] [client 4.205.67.132:15354] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeMPfN8030QMpFXddu_7gAAAQM"]
[Wed Mar 04 09:34:53.886107 2026] [:error] [pid 18554:tid 18610] [client 4.205.67.132:15338] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeMPZ0fKmKeTIK7QS0uOQAAAFI"]
[Wed Mar 04 10:20:12.009875 2026] [:error] [pid 18553:tid 18572] [client 43.138.68.113:39988] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aaeW3Gbax1neh8d0AHa5DQAAAAg"]
[Wed Mar 04 10:27:42.428804 2026] [:error] [pid 18554:tid 18614] [client 54.36.179.84:46014] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaeYnp0fKmKeTIK7QS1QxgAAAFY"]
[Wed Mar 04 10:27:44.414000 2026] [:error] [pid 54487:tid 54513] [client 54.36.179.84:46022] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaeYoPN8030QMpFXddv3LAAAARg"]
[Wed Mar 04 10:27:46.461781 2026] [:error] [pid 18554:tid 18608] [client 54.36.179.84:58356] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaeYop0fKmKeTIK7QS1Q1AAAAFA"]
[Wed Mar 04 10:27:48.370458 2026] [:error] [pid 18554:tid 18603] [client 54.36.179.84:58364] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaeYpJ0fKmKeTIK7QS1Q2gAAAEs"]
[Wed Mar 04 10:27:50.412129 2026] [:error] [pid 18554:tid 18600] [client 54.36.179.84:58380] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaeYpp0fKmKeTIK7QS1Q4AAAAEg"]
[Wed Mar 04 10:27:52.322293 2026] [:error] [pid 54487:tid 54504] [client 54.36.179.84:58390] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaeYqPN8030QMpFXddv3UgAAAQ8"]
[Wed Mar 04 10:27:54.395024 2026] [:error] [pid 18681:tid 18701] [client 54.36.179.84:58392] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaeYqqE_TuZYUBveWkX5EgAAANI"]
[Wed Mar 04 10:27:56.288129 2026] [:error] [pid 18554:tid 18605] [client 54.36.179.84:41990] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaeYrJ0fKmKeTIK7QS1Q7AAAAE0"]
[Wed Mar 04 10:27:58.207053 2026] [:error] [pid 18555:tid 18622] [client 54.36.179.84:41998] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aaeYrjQeUDANiOsQ3GeycwAAAIM"]
[Wed Mar 04 10:28:00.099024 2026] [:error] [pid 18554:tid 18609] [client 54.36.179.84:42000] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaeYsJ0fKmKeTIK7QS1Q8QAAAFE"]
[Wed Mar 04 10:28:02.153758 2026] [:error] [pid 18554:tid 18607] [client 54.36.179.84:42008] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaeYsp0fKmKeTIK7QS1Q_gAAAE8"]
[Wed Mar 04 10:28:04.041013 2026] [:error] [pid 18681:tid 18686] [client 54.36.179.84:42016] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaeYtKE_TuZYUBveWkX5KQAAAMM"]
[Wed Mar 04 10:28:05.929982 2026] [:error] [pid 54487:tid 54494] [client 54.36.179.84:42018] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaeYtfN8030QMpFXddv3mgAAAQU"]
[Wed Mar 04 10:28:07.816961 2026] [:error] [pid 18555:tid 18638] [client 54.36.179.84:44034] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaeYtzQeUDANiOsQ3GeyiQAAAJM"]
[Wed Mar 04 10:28:09.833592 2026] [:error] [pid 18553:tid 18568] [client 54.36.179.84:44036] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaeYuWbax1neh8d0AHa6QwAAAAQ"]
[Wed Mar 04 12:21:30.237744 2026] [:error] [pid 18554:tid 18601] [client 51.161.84.110:51162] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aaezSp0fKmKeTIK7QS2h4QAAAEk"]
[Wed Mar 04 12:21:31.817106 2026] [:error] [pid 45947:tid 46047] [client 51.161.84.110:55042] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aaezS0QXEtszYKy6sav6BQAAAU8"]
[Wed Mar 04 12:21:32.092833 2026] [:error] [pid 45947:tid 46055] [client 51.161.84.110:51164] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaezTEQXEtszYKy6sav6CAAAAVc"]
[Wed Mar 04 12:21:33.776183 2026] [:error] [pid 45947:tid 46038] [client 51.161.84.110:51168] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaezTUQXEtszYKy6sav6EAAAAUk"]
[Wed Mar 04 12:21:34.908549 2026] [:error] [pid 45947:tid 46051] [client 51.161.84.110:51174] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaezTkQXEtszYKy6sav6FQAAAVM"]
[Wed Mar 04 12:21:35.580588 2026] [:error] [pid 18681:tid 18689] [client 51.161.84.110:51184] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezT6E_TuZYUBveWkUcpwAAAMY"]
[Wed Mar 04 12:21:35.849310 2026] [:error] [pid 45947:tid 46045] [client 51.161.84.110:51194] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezT0QXEtszYKy6sav6GwAAAU0"]
[Wed Mar 04 12:21:39.469335 2026] [:error] [pid 18554:tid 18613] [client 51.161.84.110:41068] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezU50fKmKeTIK7QS2iDQAAAFU"]
[Wed Mar 04 12:21:40.089227 2026] [:error] [pid 18554:tid 18598] [client 51.161.84.110:41070] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezVJ0fKmKeTIK7QS2iEwAAAEY"]
[Wed Mar 04 12:21:42.991892 2026] [:error] [pid 18554:tid 18605] [client 51.161.84.110:41084] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaezVp0fKmKeTIK7QS2iJgAAAE0"]
[Wed Mar 04 12:21:47.087617 2026] [:error] [pid 18554:tid 18598] [client 51.161.84.110:41092] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezW50fKmKeTIK7QS2iRQAAAEY"]
[Wed Mar 04 12:21:50.483234 2026] [:error] [pid 18554:tid 18597] [client 51.161.84.110:40770] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aaezXp0fKmKeTIK7QS2iWAAAAEU"]
[Wed Mar 04 12:21:50.926285 2026] [:error] [pid 45947:tid 46054] [client 51.161.84.110:40774] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezXkQXEtszYKy6sav6PgAAAVY"]
[Wed Mar 04 12:21:54.001232 2026] [:error] [pid 54487:tid 54504] [client 51.161.84.110:40796] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezYfN8030QMpFXddtL2gAAAQ8"]
[Wed Mar 04 12:21:54.226682 2026] [:error] [pid 45947:tid 46052] [client 51.161.84.110:40788] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aaezYkQXEtszYKy6sav6SwAAAVQ"]
[Wed Mar 04 12:21:57.309170 2026] [:error] [pid 54487:tid 54493] [client 51.161.84.110:40808] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezZfN8030QMpFXddtL5gAAAQQ"]
[Wed Mar 04 12:21:57.565043 2026] [:error] [pid 45947:tid 46038] [client 51.161.84.110:40820] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezZUQXEtszYKy6sav6VwAAAUk"]
[Wed Mar 04 12:21:57.866871 2026] [:error] [pid 18553:tid 18577] [client 51.161.84.110:40822] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezZWbax1neh8d0AHbI2AAAAA0"]
[Wed Mar 04 12:21:58.681048 2026] [:error] [pid 54487:tid 54494] [client 51.161.84.110:40828] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaezZvN8030QMpFXddtL6gAAAQU"]
[Wed Mar 04 12:22:00.635589 2026] [:error] [pid 54487:tid 54501] [client 51.161.84.110:43792] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezaPN8030QMpFXddtL-gAAAQw"]
[Wed Mar 04 12:22:00.906059 2026] [:error] [pid 54487:tid 54507] [client 51.161.84.110:43798] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezaPN8030QMpFXddtL_AAAARI"]
[Wed Mar 04 12:22:01.828443 2026] [:error] [pid 18554:tid 18610] [client 51.161.84.110:43810] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezaZ0fKmKeTIK7QS2ibwAAAFI"]
[Wed Mar 04 12:22:04.906978 2026] [:error] [pid 18554:tid 18616] [client 51.161.84.110:43816] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezbJ0fKmKeTIK7QS2ihQAAAFg"]
[Wed Mar 04 12:22:05.981957 2026] [:error] [pid 45947:tid 46049] [client 51.161.84.110:43830] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezbUQXEtszYKy6sav6cAAAAVE"]
[Wed Mar 04 12:22:08.774807 2026] [:error] [pid 18554:tid 18611] [client 51.161.84.110:43846] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezcJ0fKmKeTIK7QS2ikwAAAFM"]
[Wed Mar 04 12:22:09.450173 2026] [:error] [pid 18554:tid 18607] [client 51.161.84.110:51202] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezcZ0fKmKeTIK7QS2imQAAAE8"]
[Wed Mar 04 12:22:15.648215 2026] [:error] [pid 18555:tid 18632] [client 51.161.84.110:51216] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezdzQeUDANiOsQ3GfIKQAAAI0"]
[Wed Mar 04 12:22:16.836563 2026] [:error] [pid 18555:tid 18620] [client 51.161.84.110:51226] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezeDQeUDANiOsQ3GfILAAAAIE"]
[Wed Mar 04 12:22:20.639461 2026] [:error] [pid 54487:tid 54504] [client 51.161.84.110:59868] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezfPN8030QMpFXddtMMAAAAQ8"]
[Wed Mar 04 12:22:29.966023 2026] [:error] [pid 18554:tid 18592] [client 51.161.84.110:34448] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezhZ0fKmKeTIK7QS2jOgAAAEA"]
[Wed Mar 04 12:22:43.211983 2026] [:error] [pid 18554:tid 18600] [client 51.161.84.110:34482] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aaezk50fKmKeTIK7QS2jeQAAAEg"]
[Wed Mar 04 12:22:43.541499 2026] [:error] [pid 45947:tid 46031] [client 51.161.84.110:34460] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaezk0QXEtszYKy6sav65AAAAUM"]
[Wed Mar 04 12:22:44.385500 2026] [:error] [pid 18554:tid 18600] [client 51.161.84.110:34472] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaezlJ0fKmKeTIK7QS2jhgAAAEg"]
[Wed Mar 04 12:22:45.694949 2026] [:error] [pid 18554:tid 18613] [client 51.161.84.110:50108] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaezlZ0fKmKeTIK7QS2jkgAAAFU"]
[Wed Mar 04 12:22:46.338620 2026] [:error] [pid 45947:tid 46046] [client 51.161.84.110:50110] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaezlkQXEtszYKy6sav65wAAAU4"]
[Wed Mar 04 12:22:47.525051 2026] [:error] [pid 18554:tid 18614] [client 51.161.84.110:50126] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaezl50fKmKeTIK7QS2jlgAAAFY"]
[Wed Mar 04 12:22:47.728905 2026] [:error] [pid 18554:tid 18603] [client 51.161.84.110:50136] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaezl50fKmKeTIK7QS2jlwAAAEs"]
[Wed Mar 04 12:22:48.572175 2026] [:error] [pid 18554:tid 18599] [client 51.161.84.110:50150] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aaezmJ0fKmKeTIK7QS2jnwAAAEc"]
[Wed Mar 04 12:22:50.017765 2026] [:error] [pid 54487:tid 54500] [client 51.161.84.110:59064] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaezmvN8030QMpFXddtMbAAAAQs"]
[Wed Mar 04 12:22:50.397651 2026] [:error] [pid 18681:tid 18689] [client 51.161.84.110:59080] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aaezmqE_TuZYUBveWkUc-QAAAMY"]
[Wed Mar 04 12:22:51.666183 2026] [:error] [pid 45947:tid 46038] [client 51.161.84.110:59088] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaezm0QXEtszYKy6sav69AAAAUk"]
[Wed Mar 04 12:22:52.132766 2026] [:error] [pid 18681:tid 18691] [client 51.161.84.110:59104] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aaeznKE_TuZYUBveWkUc_AAAAMg"]
[Wed Mar 04 12:22:53.844639 2026] [:error] [pid 45947:tid 46028] [client 51.161.84.110:59112] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaeznUQXEtszYKy6sav6_QAAAUA"]
[Wed Mar 04 12:22:53.880982 2026] [:error] [pid 45947:tid 46030] [client 51.161.84.110:59114] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaeznUQXEtszYKy6sav6_gAAAUI"]
[Wed Mar 04 12:22:54.009011 2026] [:error] [pid 18553:tid 18577] [client 51.161.84.110:59118] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aaeznmbax1neh8d0AHbI7gAAAA0"]
[Wed Mar 04 12:22:54.808341 2026] [:error] [pid 45947:tid 46046] [client 51.161.84.110:59130] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaeznkQXEtszYKy6sav7BgAAAU4"]
[Wed Mar 04 12:22:55.378782 2026] [:error] [pid 18554:tid 18613] [client 51.161.84.110:59146] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aaezn50fKmKeTIK7QS2jxwAAAFU"]
[Wed Mar 04 12:22:56.064078 2026] [:error] [pid 45947:tid 46050] [client 51.161.84.110:59148] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aaezoEQXEtszYKy6sav7EAAAAVI"]
[Wed Mar 04 12:22:57.753070 2026] [:error] [pid 45947:tid 46050] [client 51.161.84.110:59164] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaezoUQXEtszYKy6sav7GgAAAVI"]
[Wed Mar 04 12:22:58.077091 2026] [:error] [pid 18555:tid 18634] [client 51.161.84.110:59172] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezojQeUDANiOsQ3GfISQAAAI8"]
[Wed Mar 04 12:22:59.218977 2026] [:error] [pid 18555:tid 18630] [client 51.161.84.110:59180] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezozQeUDANiOsQ3GfISgAAAIs"]
[Wed Mar 04 12:22:59.690386 2026] [:error] [pid 45947:tid 46052] [client 51.161.84.110:38774] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaezo0QXEtszYKy6sav7IgAAAVQ"]
[Wed Mar 04 12:23:00.212199 2026] [:error] [pid 18555:tid 18624] [client 51.161.84.110:38786] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezpDQeUDANiOsQ3GfISwAAAIU"]
[Wed Mar 04 12:23:00.739020 2026] [:error] [pid 54487:tid 54505] [client 51.161.84.110:38792] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezpPN8030QMpFXddtMggAAARA"]
[Wed Mar 04 12:23:04.107866 2026] [:error] [pid 54487:tid 54494] [client 51.161.84.110:38808] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezqPN8030QMpFXddtMlQAAAQU"]
[Wed Mar 04 12:23:05.540243 2026] [:error] [pid 45947:tid 46051] [client 51.161.84.110:38820] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezqUQXEtszYKy6sav7KQAAAVM"]
[Wed Mar 04 12:23:06.925805 2026] [:error] [pid 18681:tid 18705] [client 51.161.84.110:38836] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezqqE_TuZYUBveWkUdPQAAANY"]
[Wed Mar 04 12:23:11.331685 2026] [:error] [pid 18554:tid 18595] [client 51.161.84.110:59288] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezr50fKmKeTIK7QS2kOQAAAEM"]
[Wed Mar 04 12:23:16.383022 2026] [:error] [pid 45947:tid 46047] [client 51.161.84.110:59298] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaeztEQXEtszYKy6sav7OAAAAU8"]
[Wed Mar 04 12:23:19.149651 2026] [:error] [pid 18554:tid 18611] [client 51.161.84.110:59314] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezt50fKmKeTIK7QS2kngAAAFM"]
[Wed Mar 04 12:23:21.180345 2026] [:error] [pid 18554:tid 18605] [client 51.161.84.110:45718] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezuZ0fKmKeTIK7QS2krQAAAE0"]
[Wed Mar 04 12:23:23.138398 2026] [:error] [pid 18555:tid 18640] [client 51.161.84.110:45734] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezuzQeUDANiOsQ3GfIVgAAAJU"]
[Wed Mar 04 12:23:29.925626 2026] [:error] [pid 45947:tid 46035] [client 51.161.84.110:44786] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezwUQXEtszYKy6sav7UQAAAUc"]
[Wed Mar 04 12:23:32.389298 2026] [:error] [pid 18681:tid 18706] [client 51.161.84.110:44800] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezxKE_TuZYUBveWkUdUgAAANc"]
[Wed Mar 04 12:23:33.760591 2026] [:error] [pid 45947:tid 46037] [client 51.161.84.110:44814] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezxUQXEtszYKy6sav7ZgAAAUg"]
[Wed Mar 04 12:23:37.438522 2026] [:error] [pid 18681:tid 18701] [client 51.161.84.110:44826] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaezyaE_TuZYUBveWkUdVgAAANI"]
[Wed Mar 04 12:24:55.575966 2026] [:error] [pid 18554:tid 18610] [client 51.161.84.110:50658] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aae0F50fKmKeTIK7QS2mYwAAAFI"]
[Wed Mar 04 12:24:57.360900 2026] [:error] [pid 18554:tid 18600] [client 51.161.84.110:50664] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aae0GZ0fKmKeTIK7QS2magAAAEg"]
[Wed Mar 04 12:24:59.332718 2026] [:error] [pid 18681:tid 18688] [client 51.161.84.110:36634] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aae0G6E_TuZYUBveWkUdlgAAAMU"]
[Wed Mar 04 12:25:00.698185 2026] [:error] [pid 18555:tid 18627] [client 51.161.84.110:36636] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aae0HDQeUDANiOsQ3GfImgAAAIg"]
[Wed Mar 04 12:25:01.940783 2026] [:error] [pid 45947:tid 46044] [client 51.161.84.110:36638] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aae0HUQXEtszYKy6sav8zwAAAUw"]
[Wed Mar 04 12:25:04.417108 2026] [:error] [pid 45947:tid 46032] [client 51.161.84.110:36654] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aae0IEQXEtszYKy6sav80gAAAUQ"]
[Wed Mar 04 12:25:04.485897 2026] [:error] [pid 45947:tid 46053] [client 51.161.84.110:36662] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aae0IEQXEtszYKy6sav80wAAAVU"]
[Wed Mar 04 12:25:06.639256 2026] [:error] [pid 45947:tid 46043] [client 51.161.84.110:36674] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aae0IkQXEtszYKy6sav82wAAAUs"]
[Wed Mar 04 12:25:08.489777 2026] [:error] [pid 45947:tid 46040] [client 51.161.84.110:36680] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aae0JEQXEtszYKy6sav84gAAAUo"]
[Wed Mar 04 12:25:10.324997 2026] [:error] [pid 45947:tid 46043] [client 51.161.84.110:55872] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aae0JkQXEtszYKy6sav87QAAAUs"]
[Wed Mar 04 12:25:12.470366 2026] [:error] [pid 45947:tid 46030] [client 51.161.84.110:55884] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aae0KEQXEtszYKy6sav88QAAAUI"]
[Wed Mar 04 12:25:14.632799 2026] [:error] [pid 18555:tid 18630] [client 51.161.84.110:55892] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aae0KjQeUDANiOsQ3GfIoQAAAIs"]
[Wed Mar 04 12:25:18.381951 2026] [:error] [pid 45947:tid 46050] [client 51.161.84.110:55894] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aae0LkQXEtszYKy6sav9BAAAAVI"]
[Wed Mar 04 13:01:34.850812 2026] [:error] [pid 45947:tid 46031] [client 43.228.157.73:51736] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aae8rkQXEtszYKy6sasUUAAAAUM"]
[Wed Mar 04 13:01:35.413295 2026] [:error] [pid 18554:tid 18599] [client 43.228.157.73:51950] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aae8r50fKmKeTIK7QS3LMwAAAEc"]
[Wed Mar 04 13:01:35.999072 2026] [:error] [pid 54487:tid 54501] [client 43.228.157.73:52157] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aae8r_N8030QMpFXddtd7AAAAQw"]
[Wed Mar 04 13:01:36.572878 2026] [:error] [pid 45947:tid 46055] [client 43.228.157.73:52357] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aae8sEQXEtszYKy6sasUpAAAAVc"]
[Wed Mar 04 13:01:37.153426 2026] [:error] [pid 18553:tid 18569] [client 43.228.157.73:52592] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aae8sWbax1neh8d0AHbO6AAAAAU"]
[Wed Mar 04 13:28:30.439604 2026] [:error] [pid 54487:tid 54498] [client 37.41.18.209:42165] [client 37.41.18.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.18.209, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aafC_vN8030QMpFXddtmGgAAAQk"]
[Wed Mar 04 13:28:30.445550 2026] [:error] [pid 54487:tid 54498] [client 37.41.18.209:42165] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 04 15:00:05.733254 2026] [:error] [pid 51510:tid 51516] [client 43.166.244.66:48782] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aafYdX-78MmWmoTGI7tHqgAAAQM"]
[Wed Mar 04 15:06:55.506822 2026] [:error] [pid 51357:tid 51415] [client 43.135.134.127:49384] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aafaD2imsh8xS8jkf2hEvwAAAA4"]
[Wed Mar 04 16:48:21.968797 2026] [:error] [pid 51358:tid 51448] [client 36.111.67.189:58169] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aafx1VDC2WZyp0MMf732LAAAAEw"]
[Wed Mar 04 17:43:03.858762 2026] [:error] [pid 63260:tid 63335] [client 138.68.75.62:51380] [client 138.68.75.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.75.62, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aaf-p1GzBomxCi_QBtEjeQAAAMw"]
[Wed Mar 04 17:43:03.862234 2026] [:error] [pid 63260:tid 63335] [client 138.68.75.62:51380] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 04 18:24:38.180832 2026] [:error] [pid 63260:tid 63326] [client 51.75.119.161:38574] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aagIZlGzBomxCi_QBtEwDgAAAMM"]
[Wed Mar 04 18:24:40.213854 2026] [:error] [pid 61225:tid 61242] [client 51.75.119.161:41278] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aagIaIFRsPGnBbt4lyRcEgAAAAE"]
[Wed Mar 04 18:24:42.185433 2026] [:error] [pid 61225:tid 61251] [client 51.75.119.161:41282] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aagIaoFRsPGnBbt4lyRcGgAAAAo"]
[Wed Mar 04 19:50:52.728663 2026] [:error] [pid 60730:tid 60751] [client 185.232.33.171:64262] [client 185.232.33.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "aagcnEeC7wxPGxvN8ZgBPAAAAVM"]
[Wed Mar 04 19:50:54.597863 2026] [:error] [pid 60620:tid 60639] [client 185.232.33.171:61205] [client 185.232.33.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aagcnoodrRWj-Joks05WIQAAAQ4"]
[Wed Mar 04 19:50:56.658729 2026] [:error] [pid 64829:tid 64848] [client 185.232.33.171:62512] [client 185.232.33.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aagcoJ9ZED3FG9h7uijAUwAAABE"]
[Wed Mar 04 19:50:58.732518 2026] [:error] [pid 60730:tid 60749] [client 185.232.33.171:62410] [client 185.232.33.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aagcokeC7wxPGxvN8ZgBRwAAAVE"]
[Wed Mar 04 19:51:00.789427 2026] [:error] [pid 60730:tid 60739] [client 185.232.33.171:64387] [client 185.232.33.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aagcpEeC7wxPGxvN8ZgBSgAAAUc"]
[Wed Mar 04 19:51:02.697552 2026] [:error] [pid 60730:tid 60756] [client 185.232.33.171:60275] [client 185.232.33.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aagcpkeC7wxPGxvN8ZgBTQAAAVg"]
[Wed Mar 04 20:22:19.930731 2026] [:error] [pid 64829:tid 64851] [client 159.69.64.245:63657] [client 159.69.64.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.69.64.245, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aagj-59ZED3FG9h7uijS-QAAABQ"]
[Wed Mar 04 20:22:19.934592 2026] [:error] [pid 64829:tid 64851] [client 159.69.64.245:63657] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 04 20:22:20.443030 2026] [:error] [pid 60621:tid 60663] [client 159.69.64.245:58565] [client 159.69.64.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.69.64.245, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aagj_FfRSaORpCbdjO2TmwAAAMI"]
[Wed Mar 04 20:22:20.447210 2026] [:error] [pid 60621:tid 60663] [client 159.69.64.245:58565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 04 21:47:28.026521 2026] [:error] [pid 61723:tid 61751] [client 135.181.213.219:49274] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aag38D-cYcKSTgnaHK5PqQAAAI4"]
[Wed Mar 04 21:47:30.059917 2026] [:error] [pid 61723:tid 61746] [client 135.181.213.219:54278] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aag38j-cYcKSTgnaHK5PsQAAAIk"]
[Wed Mar 04 21:47:32.132434 2026] [:error] [pid 60730:tid 60741] [client 135.181.213.219:54284] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aag39EeC7wxPGxvN8ZguegAAAUk"]
[Wed Mar 04 21:47:34.239145 2026] [:error] [pid 61723:tid 61754] [client 135.181.213.219:54290] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aag39j-cYcKSTgnaHK5PwgAAAJE"]
[Wed Mar 04 21:47:36.582626 2026] [:error] [pid 60730:tid 60750] [client 135.181.213.219:54294] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aag3-EeC7wxPGxvN8ZgugAAAAVI"]
[Wed Mar 04 21:47:38.621585 2026] [:error] [pid 61723:tid 61757] [client 135.181.213.219:54302] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aag3-j-cYcKSTgnaHK5PzAAAAJQ"]
[Wed Mar 04 21:47:40.508448 2026] [:error] [pid 61723:tid 61742] [client 135.181.213.219:58268] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aag3_D-cYcKSTgnaHK5PzgAAAIU"]
[Wed Mar 04 21:47:42.634862 2026] [:error] [pid 60622:tid 60706] [client 135.181.213.219:58280] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aag3_hjlaiZh5Vup4nCHjAAAAE0"]
[Wed Mar 04 21:47:44.598488 2026] [:error] [pid 64829:tid 64844] [client 135.181.213.219:58288] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aag4AJ9ZED3FG9h7uigLSgAAAA0"]
[Wed Mar 04 21:47:46.698667 2026] [:error] [pid 60730:tid 60736] [client 135.181.213.219:58292] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aag4AkeC7wxPGxvN8ZgumAAAAUQ"]
[Wed Mar 04 21:47:48.705734 2026] [:error] [pid 64829:tid 64849] [client 135.181.213.219:58308] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aag4BJ9ZED3FG9h7uigLZAAAABI"]
[Wed Mar 04 21:47:50.603665 2026] [:error] [pid 64829:tid 64840] [client 135.181.213.219:47746] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aag4Bp9ZED3FG9h7uigLbwAAAAk"]
[Wed Mar 04 21:47:52.527049 2026] [:error] [pid 64829:tid 64842] [client 135.181.213.219:47760] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aag4CJ9ZED3FG9h7uigLeAAAAAs"]
[Wed Mar 04 21:47:54.533403 2026] [:error] [pid 60730:tid 60737] [client 135.181.213.219:47762] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aag4CkeC7wxPGxvN8ZgupQAAAUU"]
[Wed Mar 04 21:47:56.476439 2026] [:error] [pid 64829:tid 64849] [client 135.181.213.219:47764] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aag4DJ9ZED3FG9h7uigLgAAAABI"]
[Wed Mar 04 23:49:54.762439 2026] [:error] [pid 60730:tid 60745] [client 119.96.24.54:45304] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aahUokeC7wxPGxvN8ZhMdwAAAU0"]
[Thu Mar 05 00:12:22.918270 2026] [:error] [pid 60621:tid 60679] [client 147.135.212.200:39500] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aahZ5lfRSaORpCbdjO2u0wAAANA"]
[Thu Mar 05 00:12:24.949776 2026] [:error] [pid 61723:tid 61746] [client 147.135.212.200:54912] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aahZ6D-cYcKSTgnaHK6wfgAAAIk"]
[Thu Mar 05 00:12:27.174267 2026] [:error] [pid 60730:tid 60751] [client 147.135.212.200:44360] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aahZ60eC7wxPGxvN8ZhSSQAAAVM"]
[Thu Mar 05 00:12:29.339506 2026] [:error] [pid 61723:tid 61760] [client 147.135.212.200:44372] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aahZ7T-cYcKSTgnaHK6wjQAAAJc"]
[Thu Mar 05 00:12:31.158950 2026] [:error] [pid 60622:tid 60699] [client 147.135.212.200:44374] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aahZ7xjlaiZh5Vup4nCeygAAAEg"]
[Thu Mar 05 00:12:33.239071 2026] [:error] [pid 60730:tid 60734] [client 147.135.212.200:44378] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aahZ8UeC7wxPGxvN8ZhSTwAAAUI"]
[Thu Mar 05 00:12:36.210319 2026] [:error] [pid 64829:tid 64855] [client 147.135.212.200:59372] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aahZ9J9ZED3FG9h7uihIuwAAABg"]
[Thu Mar 05 00:12:40.108008 2026] [:error] [pid 64829:tid 64855] [client 147.135.212.200:59376] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aahZ-J9ZED3FG9h7uihIxAAAABg"]
[Thu Mar 05 00:46:31.675056 2026] [:error] [pid 27472:tid 27557] [client 51.75.119.229:35978] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aahh57t7N-W1OaN6b8rFtAAAAZg"]
[Thu Mar 05 00:46:33.652143 2026] [:error] [pid 26969:tid 27049] [client 51.75.119.229:38338] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aahh6ZlCO2K-E0MVfPPTHQAAAAk"]
[Thu Mar 05 00:46:35.525424 2026] [:error] [pid 27814:tid 27890] [client 51.75.119.229:47314] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aahh67Pcbh1BHIHQb9JN6gAAANA"]
[Thu Mar 05 00:46:37.468404 2026] [:error] [pid 26969:tid 27045] [client 51.75.119.229:47324] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aahh7ZlCO2K-E0MVfPPTJAAAAAU"]
[Thu Mar 05 00:46:39.442692 2026] [:error] [pid 26966:tid 27026] [client 51.75.119.229:47334] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aahh7xaIQuoePO_dwgcx3gAAAE0"]
[Thu Mar 05 00:46:41.455988 2026] [:error] [pid 27472:tid 27554] [client 51.75.119.229:47340] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aahh8bt7N-W1OaN6b8rFzgAAAZU"]
[Thu Mar 05 00:46:43.523356 2026] [:error] [pid 27814:tid 27890] [client 51.75.119.229:47352] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aahh87Pcbh1BHIHQb9JOAQAAANA"]
[Thu Mar 05 00:46:45.585011 2026] [:error] [pid 27814:tid 27893] [client 51.75.119.229:53420] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aahh9bPcbh1BHIHQb9JODgAAANM"]
[Thu Mar 05 00:46:47.349515 2026] [:error] [pid 27814:tid 27875] [client 51.75.119.229:53424] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aahh97Pcbh1BHIHQb9JOEgAAAMI"]
[Thu Mar 05 00:46:49.251266 2026] [:error] [pid 27472:tid 27556] [client 51.75.119.229:53438] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aahh-bt7N-W1OaN6b8rF2gAAAZc"]
[Thu Mar 05 00:46:51.384478 2026] [:error] [pid 27472:tid 27548] [client 51.75.119.229:53440] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aahh-7t7N-W1OaN6b8rF5AAAAZA"]
[Thu Mar 05 00:46:53.270185 2026] [:error] [pid 27472:tid 27544] [client 51.75.119.229:53456] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aahh_bt7N-W1OaN6b8rF6AAAAY0"]
[Thu Mar 05 00:46:55.308148 2026] [:error] [pid 26966:tid 27017] [client 51.75.119.229:59182] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aahh_xaIQuoePO_dwgcx6QAAAEQ"]
[Thu Mar 05 00:46:57.252089 2026] [:error] [pid 27814:tid 27895] [client 51.75.119.229:59198] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aahiAbPcbh1BHIHQb9JONAAAANU"]
[Thu Mar 05 00:46:59.225657 2026] [:error] [pid 27814:tid 27884] [client 51.75.119.229:59212] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aahiA7Pcbh1BHIHQb9JOPAAAAMo"]
[Thu Mar 05 00:47:01.237976 2026] [:error] [pid 27472:tid 27542] [client 51.75.119.229:59228] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aahiBbt7N-W1OaN6b8rF9AAAAYs"]
[Thu Mar 05 00:47:03.015958 2026] [:error] [pid 26969:tid 27062] [client 51.75.119.229:59236] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aahiB5lCO2K-E0MVfPPTRQAAABY"]
[Thu Mar 05 00:47:04.956222 2026] [:error] [pid 26969:tid 27064] [client 51.75.119.229:37716] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aahiCJlCO2K-E0MVfPPTSQAAABg"]
[Thu Mar 05 00:47:06.898992 2026] [:error] [pid 26966:tid 27031] [client 51.75.119.229:37720] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aahiChaIQuoePO_dwgcx8wAAAFI"]
[Thu Mar 05 00:47:08.770826 2026] [:error] [pid 26969:tid 27059] [client 51.75.119.229:37736] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aahiDJlCO2K-E0MVfPPTTAAAABM"]
[Thu Mar 05 00:47:10.834516 2026] [:error] [pid 26966:tid 27036] [client 51.75.119.229:37746] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aahiDhaIQuoePO_dwgcx_gAAAFc"]
[Thu Mar 05 00:47:12.725014 2026] [:error] [pid 27472:tid 27551] [client 51.75.119.229:37750] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aahiELt7N-W1OaN6b8rGFgAAAZI"]
[Thu Mar 05 00:47:14.826964 2026] [:error] [pid 27814:tid 27877] [client 51.75.119.229:56326] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aahiErPcbh1BHIHQb9JOUwAAAMQ"]
[Thu Mar 05 00:47:16.801428 2026] [:error] [pid 27814:tid 27881] [client 51.75.119.229:56330] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aahiFLPcbh1BHIHQb9JOXgAAAMc"]
[Thu Mar 05 00:47:19.051815 2026] [:error] [pid 27814:tid 27873] [client 51.75.119.229:56342] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aahiF7Pcbh1BHIHQb9JOaQAAAMA"]
[Thu Mar 05 00:47:21.076198 2026] [:error] [pid 27814:tid 27889] [client 51.75.119.229:56348] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aahiGbPcbh1BHIHQb9JOcAAAAM8"]
[Thu Mar 05 00:47:22.941743 2026] [:error] [pid 27472:tid 27539] [client 51.75.119.229:56354] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aahiGrt7N-W1OaN6b8rGKwAAAYg"]
[Thu Mar 05 00:47:25.008843 2026] [:error] [pid 27814:tid 27875] [client 51.75.119.229:52636] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aahiHbPcbh1BHIHQb9JOhQAAAMI"]
[Thu Mar 05 00:47:27.017883 2026] [:error] [pid 27814:tid 27890] [client 51.75.119.229:52638] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aahiH7Pcbh1BHIHQb9JOjwAAANA"]
[Thu Mar 05 00:47:29.020727 2026] [:error] [pid 26969:tid 27041] [client 51.75.119.229:52644] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aahiIZlCO2K-E0MVfPPTXgAAAAE"]
[Thu Mar 05 00:47:50.077333 2026] [:error] [pid 27814:tid 27898] [client 51.75.119.229:52648] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aahiNrPcbh1BHIHQb9JPAAAAANg"]
[Thu Mar 05 00:47:52.221758 2026] [:error] [pid 27814:tid 27896] [client 51.75.119.229:34034] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aahiOLPcbh1BHIHQb9JPDgAAANY"]
[Thu Mar 05 00:47:54.352455 2026] [:error] [pid 27472:tid 27534] [client 51.75.119.229:44342] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aahiOrt7N-W1OaN6b8rGZAAAAYM"]
[Thu Mar 05 00:47:56.176781 2026] [:error] [pid 27472:tid 27538] [client 51.75.119.229:44358] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aahiPLt7N-W1OaN6b8rGagAAAYc"]
[Thu Mar 05 00:47:58.174777 2026] [:error] [pid 26966:tid 27033] [client 51.75.119.229:44360] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aahiPhaIQuoePO_dwgcyJQAAAFQ"]
[Thu Mar 05 00:48:00.141606 2026] [:error] [pid 27472:tid 27546] [client 51.75.119.229:44364] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aahiQLt7N-W1OaN6b8rGeQAAAY4"]
[Thu Mar 05 00:48:02.049866 2026] [:error] [pid 27814:tid 27874] [client 51.75.119.229:44378] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aahiQrPcbh1BHIHQb9JPKAAAAME"]
[Thu Mar 05 00:48:03.889988 2026] [:error] [pid 27814:tid 27882] [client 51.75.119.229:44388] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aahiQ7Pcbh1BHIHQb9JPLgAAAMg"]
[Thu Mar 05 00:48:05.855297 2026] [:error] [pid 26969:tid 27059] [client 51.75.119.229:40568] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aahiRZlCO2K-E0MVfPPTiwAAABM"]
[Thu Mar 05 00:48:07.911837 2026] [:error] [pid 27814:tid 27898] [client 51.75.119.229:40574] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aahiR7Pcbh1BHIHQb9JPRgAAANg"]
[Thu Mar 05 00:48:09.959460 2026] [:error] [pid 26969:tid 27058] [client 51.75.119.229:40578] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aahiSZlCO2K-E0MVfPPTkAAAABI"]
[Thu Mar 05 00:48:11.941701 2026] [:error] [pid 27814:tid 27888] [client 51.75.119.229:40584] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aahiS7Pcbh1BHIHQb9JPVwAAAM4"]
[Thu Mar 05 00:48:15.967827 2026] [:error] [pid 26966:tid 27021] [client 51.75.119.229:49586] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aahiTxaIQuoePO_dwgcyNQAAAEg"]
[Thu Mar 05 02:11:26.103313 2026] [:error] [pid 27814:tid 27882] [client 45.131.195.160:36361] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aah1zrPcbh1BHIHQb9KBdQAAAMg"]
[Thu Mar 05 04:12:49.143516 2026] [:error] [pid 62435:tid 62463] [client 178.151.245.162:49998] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaiSQSMZJMDfZh_-8sV2xQAAAM0"]
[Thu Mar 05 04:12:51.131161 2026] [:error] [pid 62435:tid 62470] [client 178.151.245.162:50000] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaiSQyMZJMDfZh_-8sV2zQAAANQ"]
[Thu Mar 05 04:12:53.160368 2026] [:error] [pid 62173:tid 62266] [client 178.151.245.162:50004] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaiSRWj_GWbFb-1ncGkodwAAAA0"]
[Thu Mar 05 04:12:55.158585 2026] [:error] [pid 62176:tid 62305] [client 178.151.245.162:35248] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaiSRyNfTPJryi30JPmHhwAAAFU"]
[Thu Mar 05 04:12:57.157367 2026] [:error] [pid 62435:tid 62460] [client 178.151.245.162:35256] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaiSSSMZJMDfZh_-8sV22wAAAMo"]
[Thu Mar 05 04:12:59.017586 2026] [:error] [pid 62435:tid 62455] [client 178.151.245.162:35270] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaiSSyMZJMDfZh_-8sV24AAAAMU"]
[Thu Mar 05 04:13:01.022695 2026] [:error] [pid 62435:tid 62468] [client 178.151.245.162:35274] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaiSTSMZJMDfZh_-8sV26wAAANI"]
[Thu Mar 05 04:13:03.065255 2026] [:error] [pid 62176:tid 62300] [client 178.151.245.162:35284] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaiSTyNfTPJryi30JPmHnwAAAFA"]
[Thu Mar 05 04:13:05.080147 2026] [:error] [pid 62176:tid 62299] [client 178.151.245.162:40726] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aaiSUSNfTPJryi30JPmHqAAAAE8"]
[Thu Mar 05 04:13:06.935440 2026] [:error] [pid 62435:tid 62463] [client 178.151.245.162:40742] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaiSUiMZJMDfZh_-8sV3AAAAAM0"]
[Thu Mar 05 04:13:08.950552 2026] [:error] [pid 62435:tid 62456] [client 178.151.245.162:40746] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaiSVCMZJMDfZh_-8sV3BwAAAMY"]
[Thu Mar 05 04:13:10.835626 2026] [:error] [pid 62176:tid 62291] [client 178.151.245.162:40760] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aaiSViNfTPJryi30JPmHtQAAAEc"]
[Thu Mar 05 04:13:12.845142 2026] [:error] [pid 62435:tid 62458] [client 178.151.245.162:40766] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaiSWCMZJMDfZh_-8sV3FgAAAMg"]
[Thu Mar 05 04:13:14.862118 2026] [:error] [pid 62177:tid 62316] [client 178.151.245.162:52846] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaiSWhWSQc2OzPrsnwX_rgAAAIU"]
[Thu Mar 05 04:13:16.760305 2026] [:error] [pid 62177:tid 62325] [client 178.151.245.162:52862] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaiSXBWSQc2OzPrsnwX_swAAAI0"]
[Thu Mar 05 04:26:52.733637 2026] [:error] [pid 62435:tid 62472] [client 94.203.115.145:3520] [client 94.203.115.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.203.115.145, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaiVjCMZJMDfZh_-8sWAVQAAANY"]
[Thu Mar 05 04:26:52.752169 2026] [:error] [pid 62435:tid 62472] [client 94.203.115.145:3520] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 05 05:27:48.742997 2026] [:error] [pid 53350:tid 53395] [client 51.68.233.43:39614] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aaij1KO0Baxc5WFYeP1ZGQAAARI"]
[Thu Mar 05 05:27:50.861347 2026] [:error] [pid 62176:tid 62298] [client 51.68.233.43:33204] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aaij1iNfTPJryi30JPmYyQAAAE4"]
[Thu Mar 05 05:27:52.740487 2026] [:error] [pid 53350:tid 53388] [client 51.68.233.43:33214] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aaij2KO0Baxc5WFYeP1ZJwAAAQs"]
[Thu Mar 05 05:27:54.733127 2026] [:error] [pid 62435:tid 62458] [client 51.68.233.43:33226] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaij2iMZJMDfZh_-8sWkFAAAAMg"]
[Thu Mar 05 05:27:56.593897 2026] [:error] [pid 62173:tid 62271] [client 51.68.233.43:33242] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaij3Gj_GWbFb-1ncGk0_AAAABE"]
[Thu Mar 05 05:27:58.464815 2026] [:error] [pid 62173:tid 62262] [client 51.68.233.43:33244] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaij3mj_GWbFb-1ncGk1AAAAAAo"]
[Thu Mar 05 05:28:00.472574 2026] [:error] [pid 62173:tid 62261] [client 51.68.233.43:52262] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaij4Gj_GWbFb-1ncGk1AQAAAAk"]
[Thu Mar 05 06:47:57.999484 2026] [:error] [pid 53350:tid 53393] [client 176.65.148.135:49610] File does not exist: /usr/local/apache/htdocs/suspended-page/accesson.php
[Thu Mar 05 11:14:27.316957 2026] [:error] [pid 41459:tid 41486] [client 104.175.255.250:57332] [client 104.175.255.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.175.255.250, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaj1E-dFBZEnZ3pzxrX7uAAAAUw"]
[Thu Mar 05 11:14:27.322163 2026] [:error] [pid 41459:tid 41486] [client 104.175.255.250:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 05 11:26:43.223786 2026] [:error] [pid 41459:tid 41489] [client 54.38.38.130:46518] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaj38-dFBZEnZ3pzxrUHbwAAAU8"]
[Thu Mar 05 11:26:45.044225 2026] [:error] [pid 41459:tid 41492] [client 54.38.38.130:51400] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aaj39edFBZEnZ3pzxrUHdQAAAVI"]
[Thu Mar 05 11:26:46.965622 2026] [:error] [pid 41459:tid 41478] [client 54.38.38.130:47722] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaj39udFBZEnZ3pzxrUHewAAAUQ"]
[Thu Mar 05 11:29:13.597885 2026] [:error] [pid 41459:tid 41484] [client 54.38.38.130:53312] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaj4iedFBZEnZ3pzxrUIvgAAAUo"]
[Thu Mar 05 11:29:15.430785 2026] [:error] [pid 41459:tid 41479] [client 54.38.38.130:53432] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aaj4i-dFBZEnZ3pzxrUIxgAAAUU"]
[Thu Mar 05 11:29:17.356649 2026] [:error] [pid 62435:tid 62471] [client 54.38.38.130:53446] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaj4jSMZJMDfZh_-8sUNSwAAANU"]
[Thu Mar 05 11:39:27.227212 2026] [:error] [pid 53350:tid 53392] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Thu Mar 05 11:39:27.675922 2026] [:error] [pid 53350:tid 53380] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Thu Mar 05 11:39:27.932464 2026] [:error] [pid 53350:tid 53389] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Thu Mar 05 11:39:28.191423 2026] [:error] [pid 53350:tid 53388] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/rere.php
[Thu Mar 05 11:39:28.463089 2026] [:error] [pid 53350:tid 53400] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/lanka.php
[Thu Mar 05 11:39:28.833726 2026] [:error] [pid 53350:tid 53375] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/69R8Rs.php
[Thu Mar 05 11:39:29.100569 2026] [:error] [pid 53350:tid 53391] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/zzxy.php
[Thu Mar 05 11:39:29.359358 2026] [:error] [pid 53350:tid 53396] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Thu Mar 05 11:39:29.618868 2026] [:error] [pid 53350:tid 53393] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/xnty.php
[Thu Mar 05 11:39:30.009051 2026] [:error] [pid 53350:tid 53399] [client 20.215.208.157:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Thu Mar 05 11:39:30.279147 2026] [:error] [pid 53350:tid 53381] [client 20.215.208.157:32378] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/foxr.php"] [unique_id "aaj68qO0Baxc5WFYeP0TIQAAAQY"]
[Thu Mar 05 11:39:31.714535 2026] [:error] [pid 62176:tid 62284] [client 20.215.208.157:32351] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/foxr.php"] [unique_id "aaj68yNfTPJryi30JPnBjQAAAEA"]
[Thu Mar 05 11:39:32.972754 2026] [:error] [pid 62176:tid 62302] [client 20.215.208.157:31574] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/foxr.php"] [unique_id "aaj69CNfTPJryi30JPnBjgAAAFI"]
[Thu Mar 05 11:39:33.768614 2026] [:error] [pid 41459:tid 41498] [client 20.215.208.157:27097] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/foxr.php"] [unique_id "aaj69edFBZEnZ3pzxrUPoAAAAVg"]
[Thu Mar 05 11:39:34.869058 2026] [:error] [pid 53350:tid 53381] [client 20.215.208.157:40074] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv23.php"] [unique_id "aaj69qO0Baxc5WFYeP0TJAAAAQY"]
[Thu Mar 05 11:39:36.260277 2026] [:error] [pid 62176:tid 62304] [client 20.215.208.157:31414] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv23.php"] [unique_id "aaj6-CNfTPJryi30JPnBkAAAAFQ"]
[Thu Mar 05 11:39:37.094834 2026] [:error] [pid 41459:tid 41485] [client 20.215.208.157:31416] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv23.php"] [unique_id "aaj6-edFBZEnZ3pzxrUPowAAAUs"]
[Thu Mar 05 11:39:38.176547 2026] [:error] [pid 41459:tid 41481] [client 20.215.208.157:36896] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xv23.php"] [unique_id "aaj6-udFBZEnZ3pzxrUPqQAAAUc"]
[Thu Mar 05 11:39:39.665233 2026] [:error] [pid 62176:tid 62293] [client 20.215.208.157:45741] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/swallowable.php"] [unique_id "aaj6-yNfTPJryi30JPnBkgAAAEk"]
[Thu Mar 05 11:39:40.561610 2026] [:error] [pid 62435:tid 62465] [client 20.215.208.157:45729] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/swallowable.php"] [unique_id "aaj6_CMZJMDfZh_-8sUQQwAAAM8"]
[Thu Mar 05 11:39:41.739788 2026] [:error] [pid 62177:tid 62332] [client 20.215.208.157:32110] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/swallowable.php"] [unique_id "aaj6_RWSQc2OzPrsnwVZQgAAAJQ"]
[Thu Mar 05 11:39:42.689370 2026] [:error] [pid 62435:tid 62468] [client 20.215.208.157:40262] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/swallowable.php"] [unique_id "aaj6_iMZJMDfZh_-8sUQSAAAANI"]
[Thu Mar 05 11:39:43.914108 2026] [:error] [pid 41459:tid 41489] [client 20.215.208.157:45189] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claw.php"] [unique_id "aaj6_-dFBZEnZ3pzxrUPtQAAAU8"]
[Thu Mar 05 11:39:44.657108 2026] [:error] [pid 62435:tid 62452] [client 20.215.208.157:31380] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claw.php"] [unique_id "aaj7ACMZJMDfZh_-8sUQSwAAAMI"]
[Thu Mar 05 11:39:45.507934 2026] [:error] [pid 62177:tid 62333] [client 20.215.208.157:41175] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claw.php"] [unique_id "aaj7ARWSQc2OzPrsnwVZQwAAAJU"]
[Thu Mar 05 11:39:46.461663 2026] [:error] [pid 62435:tid 62465] [client 20.215.208.157:34378] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/claw.php"] [unique_id "aaj7AiMZJMDfZh_-8sUQTwAAAM8"]
[Thu Mar 05 11:39:47.211009 2026] [:error] [pid 41459:tid 41483] [client 20.215.208.157:33602] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fvvff.php"] [unique_id "aaj7A-dFBZEnZ3pzxrUPugAAAUk"]
[Thu Mar 05 11:39:48.348405 2026] [:error] [pid 53350:tid 53395] [client 20.215.208.157:40259] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fvvff.php"] [unique_id "aaj7BKO0Baxc5WFYeP0TMAAAARI"]
[Thu Mar 05 11:39:49.281056 2026] [:error] [pid 53350:tid 53390] [client 20.215.208.157:40269] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fvvff.php"] [unique_id "aaj7BaO0Baxc5WFYeP0TMgAAAQ0"]
[Thu Mar 05 11:39:50.170629 2026] [:error] [pid 41459:tid 41495] [client 20.215.208.157:31552] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fvvff.php"] [unique_id "aaj7BudFBZEnZ3pzxrUPwgAAAVU"]
[Thu Mar 05 11:39:54.639876 2026] [:error] [pid 41459:tid 41490] [client 20.215.208.157:45031] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaj7CudFBZEnZ3pzxrUP1AAAAVA"]
[Thu Mar 05 11:39:56.456448 2026] [:error] [pid 53350:tid 53399] [client 20.215.208.157:40261] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaj7DKO0Baxc5WFYeP0TMwAAARY"]
[Thu Mar 05 11:39:57.438494 2026] [:error] [pid 41459:tid 41484] [client 20.215.208.157:34408] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaj7DedFBZEnZ3pzxrUP2QAAAUo"]
[Thu Mar 05 11:39:58.677464 2026] [:error] [pid 41459:tid 41485] [client 20.215.208.157:45045] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a2.php"] [unique_id "aaj7DudFBZEnZ3pzxrUP3QAAAUs"]
[Thu Mar 05 11:39:59.387872 2026] [:error] [pid 41459:tid 41492] [client 20.215.208.157:31375] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sty.php"] [unique_id "aaj7D-dFBZEnZ3pzxrUP4AAAAVI"]
[Thu Mar 05 11:40:00.217349 2026] [:error] [pid 41459:tid 41489] [client 20.215.208.157:44887] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sty.php"] [unique_id "aaj7EOdFBZEnZ3pzxrUP4gAAAU8"]
[Thu Mar 05 11:40:01.302524 2026] [:error] [pid 62435:tid 62458] [client 20.215.208.157:36888] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sty.php"] [unique_id "aaj7ESMZJMDfZh_-8sUQXQAAAMg"]
[Thu Mar 05 11:40:02.351797 2026] [:error] [pid 53350:tid 53395] [client 20.215.208.157:29224] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sty.php"] [unique_id "aaj7EqO0Baxc5WFYeP0TNwAAARI"]
[Thu Mar 05 11:40:03.903585 2026] [:error] [pid 41459:tid 41495] [client 20.215.208.157:45610] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaj7E-dFBZEnZ3pzxrUP8wAAAVU"]
[Thu Mar 05 11:40:04.905719 2026] [:error] [pid 53350:tid 53382] [client 20.215.208.157:38853] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaj7FKO0Baxc5WFYeP0TPQAAAQc"]
[Thu Mar 05 11:40:05.567109 2026] [:error] [pid 41459:tid 41482] [client 20.215.208.157:37766] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaj7FedFBZEnZ3pzxrUP9gAAAUg"]
[Thu Mar 05 11:40:06.514251 2026] [:error] [pid 41459:tid 41490] [client 20.215.208.157:34399] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxxx.php"] [unique_id "aaj7FudFBZEnZ3pzxrUP-QAAAVA"]
[Thu Mar 05 11:40:07.273842 2026] [:error] [pid 41459:tid 41483] [client 20.215.208.157:37791] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h.php"] [unique_id "aaj7F-dFBZEnZ3pzxrUP-wAAAUk"]
[Thu Mar 05 11:40:08.026472 2026] [:error] [pid 62435:tid 62458] [client 20.215.208.157:38856] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h.php"] [unique_id "aaj7GCMZJMDfZh_-8sUQYQAAAMg"]
[Thu Mar 05 11:40:08.945066 2026] [:error] [pid 41459:tid 41481] [client 20.215.208.157:36441] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h.php"] [unique_id "aaj7GOdFBZEnZ3pzxrUQAAAAAUc"]
[Thu Mar 05 11:40:09.868688 2026] [:error] [pid 53350:tid 53390] [client 20.215.208.157:45159] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h.php"] [unique_id "aaj7GaO0Baxc5WFYeP0TRAAAAQ0"]
[Thu Mar 05 11:40:10.919736 2026] [:error] [pid 41459:tid 41482] [client 20.215.208.157:29204] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aaj7GudFBZEnZ3pzxrUQBwAAAUg"]
[Thu Mar 05 11:40:11.582795 2026] [:error] [pid 41459:tid 41489] [client 20.215.208.157:45593] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aaj7G-dFBZEnZ3pzxrUQCwAAAU8"]
[Thu Mar 05 11:40:12.547856 2026] [:error] [pid 41459:tid 41487] [client 20.215.208.157:32398] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aaj7HOdFBZEnZ3pzxrUQDQAAAU0"]
[Thu Mar 05 11:40:13.232878 2026] [:error] [pid 53350:tid 53397] [client 20.215.208.157:36435] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g.php"] [unique_id "aaj7HaO0Baxc5WFYeP0TRgAAARQ"]
[Thu Mar 05 11:40:14.648014 2026] [:error] [pid 62177:tid 62316] [client 20.215.208.157:39128] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aaj7HhWSQc2OzPrsnwVZTwAAAIU"]
[Thu Mar 05 11:40:15.566851 2026] [:error] [pid 53350:tid 53389] [client 20.215.208.157:36457] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aaj7H6O0Baxc5WFYeP0TSwAAAQw"]
[Thu Mar 05 11:40:16.445131 2026] [:error] [pid 41459:tid 41474] [client 20.215.208.157:36426] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aaj7IOdFBZEnZ3pzxrUQFQAAAUA"]
[Thu Mar 05 11:40:17.481156 2026] [:error] [pid 41459:tid 41492] [client 20.215.208.157:40998] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp.php"] [unique_id "aaj7IedFBZEnZ3pzxrUQFwAAAVI"]
[Thu Mar 05 11:40:18.149724 2026] [:error] [pid 41459:tid 41487] [client 20.215.208.157:34905] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaj7IudFBZEnZ3pzxrUQGAAAAU0"]
[Thu Mar 05 11:40:18.747911 2026] [:error] [pid 62435:tid 62461] [client 20.215.208.157:36437] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaj7IiMZJMDfZh_-8sUQZgAAAMs"]
[Thu Mar 05 11:40:19.420054 2026] [:error] [pid 53350:tid 53379] [client 20.215.208.157:38908] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaj7I6O0Baxc5WFYeP0TUwAAAQQ"]
[Thu Mar 05 11:40:20.734685 2026] [:error] [pid 53350:tid 53395] [client 20.215.208.157:41495] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sys.php"] [unique_id "aaj7JKO0Baxc5WFYeP0TVAAAARI"]
[Thu Mar 05 11:40:21.515143 2026] [:error] [pid 62177:tid 62327] [client 20.215.208.157:41540] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aaj7JRWSQc2OzPrsnwVZVgAAAI8"]
[Thu Mar 05 11:40:22.212732 2026] [:error] [pid 53350:tid 53400] [client 20.215.208.157:34419] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aaj7JqO0Baxc5WFYeP0TWQAAARc"]
[Thu Mar 05 11:40:23.063752 2026] [:error] [pid 62177:tid 62335] [client 20.215.208.157:34935] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aaj7JxWSQc2OzPrsnwVZWQAAAJc"]
[Thu Mar 05 11:40:23.664621 2026] [:error] [pid 62176:tid 62294] [client 20.215.208.157:41537] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aaj7JyNfTPJryi30JPnBoAAAAEo"]
[Thu Mar 05 11:40:24.480474 2026] [:error] [pid 53350:tid 53394] [client 20.215.208.157:27433] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaj7KKO0Baxc5WFYeP0TWgAAARE"]
[Thu Mar 05 11:40:25.082269 2026] [:error] [pid 62435:tid 62457] [client 20.215.208.157:41498] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaj7KSMZJMDfZh_-8sUQdAAAAMc"]
[Thu Mar 05 11:40:25.640222 2026] [:error] [pid 53350:tid 53399] [client 20.215.208.157:45165] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaj7KaO0Baxc5WFYeP0TXQAAARY"]
[Thu Mar 05 11:40:26.741158 2026] [:error] [pid 53350:tid 53375] [client 20.215.208.157:27415] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tt.php"] [unique_id "aaj7KqO0Baxc5WFYeP0TYQAAAQA"]
[Thu Mar 05 11:40:27.497879 2026] [:error] [pid 53350:tid 53386] [client 20.215.208.157:34843] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "aaj7K6O0Baxc5WFYeP0TYwAAAQo"]
[Thu Mar 05 11:40:30.102315 2026] [:error] [pid 53350:tid 53385] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Thu Mar 05 11:40:30.362008 2026] [:error] [pid 53350:tid 53390] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/path.php
[Thu Mar 05 11:40:30.622456 2026] [:error] [pid 53350:tid 53392] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/wdf.php
[Thu Mar 05 11:40:30.899059 2026] [:error] [pid 53350:tid 53400] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu Mar 05 11:40:31.169282 2026] [:error] [pid 53350:tid 53375] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Thu Mar 05 11:40:31.429277 2026] [:error] [pid 53350:tid 53379] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Thu Mar 05 11:40:31.711487 2026] [:error] [pid 53350:tid 53394] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/agg.php
[Thu Mar 05 11:40:31.972293 2026] [:error] [pid 53350:tid 53396] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Thu Mar 05 11:40:32.232664 2026] [:error] [pid 53350:tid 53397] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/wsvvs.php
[Thu Mar 05 11:40:32.494462 2026] [:error] [pid 53350:tid 53390] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Thu Mar 05 11:40:32.754328 2026] [:error] [pid 53350:tid 53400] [client 20.215.208.157:29191] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Mar 05 11:40:33.010961 2026] [:error] [pid 53350:tid 53375] [client 20.215.208.157:29191] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaj7MaO0Baxc5WFYeP0TfQAAAQA"]
[Thu Mar 05 11:40:36.962793 2026] [:error] [pid 41459:tid 41480] [client 20.215.208.157:41593] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaj7NOdFBZEnZ3pzxrUQMAAAAUY"]
[Thu Mar 05 11:40:38.784606 2026] [:error] [pid 41459:tid 41494] [client 20.215.208.157:35254] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaj7NudFBZEnZ3pzxrUQMwAAAVQ"]
[Thu Mar 05 11:40:41.599453 2026] [:error] [pid 41459:tid 41484] [client 20.215.208.157:29214] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "aaj7OedFBZEnZ3pzxrUQOgAAAUo"]
[Thu Mar 05 11:40:42.491803 2026] [:error] [pid 62176:tid 62296] [client 20.215.208.157:39125] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaj7OiNfTPJryi30JPnBpQAAAEw"]
[Thu Mar 05 11:40:43.138084 2026] [:error] [pid 53350:tid 53385] [client 20.215.208.157:29234] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaj7O6O0Baxc5WFYeP0TiQAAAQk"]
[Thu Mar 05 11:40:44.168681 2026] [:error] [pid 53350:tid 53389] [client 20.215.208.157:45363] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaj7PKO0Baxc5WFYeP0TigAAAQw"]
[Thu Mar 05 11:40:45.030365 2026] [:error] [pid 62435:tid 62450] [client 20.215.208.157:27411] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "aaj7PSMZJMDfZh_-8sUQgQAAAMA"]
[Thu Mar 05 11:40:46.022907 2026] [:error] [pid 41459:tid 41484] [client 20.215.208.157:45191] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaj7PudFBZEnZ3pzxrUQQAAAAUo"]
[Thu Mar 05 11:40:47.185810 2026] [:error] [pid 53350:tid 53398] [client 20.215.208.157:32436] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaj7P6O0Baxc5WFYeP0TkwAAARU"]
[Thu Mar 05 11:40:47.969866 2026] [:error] [pid 41459:tid 41482] [client 20.215.208.157:39152] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaj7P-dFBZEnZ3pzxrUQSAAAAUg"]
[Thu Mar 05 11:40:48.681005 2026] [:error] [pid 62177:tid 62312] [client 20.215.208.157:36418] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "aaj7QBWSQc2OzPrsnwVZYQAAAIE"]
[Thu Mar 05 11:40:49.519169 2026] [:error] [pid 53350:tid 53375] [client 20.215.208.157:44899] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaj7QaO0Baxc5WFYeP0TmQAAAQA"]
[Thu Mar 05 11:40:50.758388 2026] [:error] [pid 41459:tid 41492] [client 20.215.208.157:45162] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaj7QudFBZEnZ3pzxrUQTQAAAVI"]
[Thu Mar 05 11:40:51.897099 2026] [:error] [pid 62177:tid 62321] [client 20.215.208.157:29232] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaj7QxWSQc2OzPrsnwVZYgAAAIo"]
[Thu Mar 05 11:40:52.676701 2026] [:error] [pid 41459:tid 41496] [client 20.215.208.157:27549] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaj7ROdFBZEnZ3pzxrUQVQAAAVY"]
[Thu Mar 05 11:40:53.439991 2026] [:error] [pid 53350:tid 53396] [client 20.215.208.157:40967] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaj7RaO0Baxc5WFYeP0ToAAAARM"]
[Thu Mar 05 11:40:54.131240 2026] [:error] [pid 62177:tid 62336] [client 20.215.208.157:29201] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaj7RhWSQc2OzPrsnwVZZwAAAJg"]
[Thu Mar 05 11:40:54.743718 2026] [:error] [pid 62435:tid 62453] [client 20.215.208.157:45372] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaj7RiMZJMDfZh_-8sUQigAAAMM"]
[Thu Mar 05 11:40:55.634734 2026] [:error] [pid 53350:tid 53400] [client 20.215.208.157:39129] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "aaj7R6O0Baxc5WFYeP0ToQAAARc"]
[Thu Mar 05 11:40:56.340213 2026] [:error] [pid 62173:tid 62268] [client 20.215.208.157:35251] [client 20.215.208.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaj7SGj_GWbFb-1ncGlP_QAAAA8"]
[Thu Mar 05 11:40:56.950612 2026] [:error] [pid 62177:tid 62329] [client 20.215.208.157:40995] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaj7SBWSQc2OzPrsnwVZaQAAAJE"]
[Thu Mar 05 11:40:57.804671 2026] [:error] [pid 53350:tid 53401] [client 20.215.208.157:39116] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaj7SaO0Baxc5WFYeP0TpAAAARg"]
[Thu Mar 05 11:40:58.503227 2026] [:error] [pid 53350:tid 53395] [client 20.215.208.157:38882] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaj7SqO0Baxc5WFYeP0TpgAAARI"]
[Thu Mar 05 11:40:59.117913 2026] [:error] [pid 53350:tid 53396] [client 20.215.208.157:38901] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaj7S6O0Baxc5WFYeP0TpwAAARM"]
[Thu Mar 05 11:40:59.980330 2026] [:error] [pid 62435:tid 62451] [client 20.215.208.157:35216] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaj7SyMZJMDfZh_-8sUQjwAAAME"]
[Thu Mar 05 11:41:00.739974 2026] [:error] [pid 62177:tid 62320] [client 20.215.208.157:29246] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaj7TBWSQc2OzPrsnwVZbwAAAIk"]
[Thu Mar 05 11:41:01.368914 2026] [:error] [pid 62176:tid 62308] [client 20.215.208.157:45182] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaj7TSNfTPJryi30JPnBrgAAAFg"]
[Thu Mar 05 11:41:01.923773 2026] [:error] [pid 62176:tid 62286] [client 20.215.208.157:44865] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaj7TSNfTPJryi30JPnBsQAAAEI"]
[Thu Mar 05 11:41:02.692815 2026] [:error] [pid 62177:tid 62336] [client 20.215.208.157:29240] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaj7ThWSQc2OzPrsnwVZdAAAAJg"]
[Thu Mar 05 11:41:03.350062 2026] [:error] [pid 62435:tid 62450] [client 20.215.208.157:36431] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaj7TyMZJMDfZh_-8sUQlgAAAMA"]
[Thu Mar 05 11:41:03.999758 2026] [:error] [pid 62177:tid 62327] [client 20.215.208.157:32429] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "aaj7TxWSQc2OzPrsnwVZdwAAAI8"]
[Thu Mar 05 11:41:04.704583 2026] [:error] [pid 62435:tid 62467] [client 20.215.208.157:35217] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaj7UCMZJMDfZh_-8sUQmAAAANE"]
[Thu Mar 05 11:41:05.365354 2026] [:error] [pid 53350:tid 53385] [client 20.215.208.157:39105] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaj7UaO0Baxc5WFYeP0TrgAAAQk"]
[Thu Mar 05 11:41:05.927731 2026] [:error] [pid 53350:tid 53378] [client 20.215.208.157:32387] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaj7UaO0Baxc5WFYeP0TsAAAAQM"]
[Thu Mar 05 11:41:06.629848 2026] [:error] [pid 62176:tid 62294] [client 20.215.208.157:27405] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sc.php"] [unique_id "aaj7UiNfTPJryi30JPnBuAAAAEo"]
[Thu Mar 05 11:41:07.389527 2026] [:error] [pid 62176:tid 62295] [client 20.215.208.157:35222] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaj7UyNfTPJryi30JPnBugAAAEs"]
[Thu Mar 05 11:41:08.077119 2026] [:error] [pid 41459:tid 41480] [client 20.215.208.157:29198] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaj7VOdFBZEnZ3pzxrUQXgAAAUY"]
[Thu Mar 05 11:41:09.211489 2026] [:error] [pid 41459:tid 41481] [client 20.215.208.157:27420] [client 20.215.208.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaj7VedFBZEnZ3pzxrUQYQAAAUc"]
[Thu Mar 05 15:48:53.072599 2026] [:error] [pid 41459:tid 41489] [client 43.153.122.30:34158] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aak1ZedFBZEnZ3pzxrWXtwAAAU8"]
[Thu Mar 05 15:56:24.101334 2026] [:error] [pid 62435:tid 62469] [client 43.166.128.187:44684] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aak3KCMZJMDfZh_-8sVTtgAAANM"]
[Thu Mar 05 19:05:58.508195 2026] [:error] [pid 62435:tid 62465] [client 95.91.110.210:59472] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaljliMZJMDfZh_-8sVzXgAAAM8"]
[Thu Mar 05 19:06:44.170828 2026] [:error] [pid 41459:tid 41483] [client 95.91.110.210:54966] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaljxOdFBZEnZ3pzxrUSxAAAAUk"]
[Thu Mar 05 19:06:53.179252 2026] [:error] [pid 62177:tid 62313] [client 95.91.110.210:54982] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aaljzRWSQc2OzPrsnwXEgQAAAII"]
[Thu Mar 05 19:10:10.952360 2026] [:error] [pid 62435:tid 62463] [client 103.77.106.118:56422] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aalkkiMZJMDfZh_-8sV0QwAAAM0"]
[Thu Mar 05 19:10:11.192291 2026] [:error] [pid 53350:tid 53389] [client 103.77.106.118:56445] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aalkk6O0Baxc5WFYeP0DygAAAQw"]
[Thu Mar 05 19:15:22.953113 2026] [:error] [pid 41459:tid 41480] [client 114.96.103.33:53554] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aallyudFBZEnZ3pzxrUXQQAAAUY"]
[Thu Mar 05 19:39:54.613600 2026] [:error] [pid 53350:tid 53377] [client 65.108.2.171:12668] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aalriqO0Baxc5WFYeP0acAAAAQI"]
[Thu Mar 05 19:39:56.555466 2026] [:error] [pid 53350:tid 53393] [client 65.108.2.171:12672] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aalrjKO0Baxc5WFYeP0aeAAAARA"]
[Thu Mar 05 19:39:58.703880 2026] [:error] [pid 53350:tid 53382] [client 65.108.2.171:12684] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aalrjqO0Baxc5WFYeP0aegAAAQc"]
[Thu Mar 05 19:40:00.777316 2026] [:error] [pid 53350:tid 53378] [client 65.108.2.171:12700] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aalrkKO0Baxc5WFYeP0aggAAAQM"]
[Thu Mar 05 19:40:02.668546 2026] [:error] [pid 53350:tid 53381] [client 65.108.2.171:12710] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aalrkqO0Baxc5WFYeP0ahwAAAQY"]
[Thu Mar 05 19:40:04.716723 2026] [:error] [pid 62435:tid 62471] [client 65.108.2.171:40954] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aalrlCMZJMDfZh_-8sV5JwAAANU"]
[Thu Mar 05 19:40:06.624347 2026] [:error] [pid 62177:tid 62311] [client 65.108.2.171:40966] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aalrlhWSQc2OzPrsnwXOIAAAAIA"]
[Thu Mar 05 19:40:08.662487 2026] [:error] [pid 62177:tid 62334] [client 65.108.2.171:40972] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aalrmBWSQc2OzPrsnwXOJgAAAJY"]
[Thu Mar 05 19:40:10.573168 2026] [:error] [pid 53350:tid 53375] [client 65.108.2.171:40974] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aalrmqO0Baxc5WFYeP0anQAAAQA"]
[Thu Mar 05 19:40:12.599801 2026] [:error] [pid 41459:tid 41491] [client 65.108.2.171:40988] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aalrnOdFBZEnZ3pzxrUksgAAAVE"]
[Thu Mar 05 19:40:14.492921 2026] [:error] [pid 41459:tid 41493] [client 65.108.2.171:17540] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aalrnudFBZEnZ3pzxrUktwAAAVM"]
[Thu Mar 05 19:40:16.397137 2026] [:error] [pid 53350:tid 53385] [client 65.108.2.171:17560] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aalroKO0Baxc5WFYeP0aqwAAAQk"]
[Thu Mar 05 19:40:22.771930 2026] [:error] [pid 62177:tid 62327] [client 65.108.2.171:17570] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aalrphWSQc2OzPrsnwXOMgAAAI8"]
[Thu Mar 05 19:40:24.879223 2026] [:error] [pid 62173:tid 62257] [client 65.108.2.171:38390] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aalrqGj_GWbFb-1ncGl0rAAAAAU"]
[Thu Mar 05 19:40:26.917919 2026] [:error] [pid 62176:tid 62289] [client 65.108.2.171:38404] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aalrqiNfTPJryi30JPn3BwAAAEU"]
[Thu Mar 05 19:40:28.882521 2026] [:error] [pid 41459:tid 41476] [client 65.108.2.171:38406] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aalrrOdFBZEnZ3pzxrUkzwAAAUI"]
[Thu Mar 05 19:40:30.828056 2026] [:error] [pid 53350:tid 53394] [client 65.108.2.171:38422] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aalrrqO0Baxc5WFYeP0bDQAAARE"]
[Thu Mar 05 19:40:32.745732 2026] [:error] [pid 41459:tid 41476] [client 65.108.2.171:38424] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aalrsOdFBZEnZ3pzxrUk2gAAAUI"]
[Thu Mar 05 19:40:34.726461 2026] [:error] [pid 41459:tid 41478] [client 65.108.2.171:56832] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aalrsudFBZEnZ3pzxrUk5QAAAUQ"]
[Thu Mar 05 19:40:36.694932 2026] [:error] [pid 62177:tid 62326] [client 65.108.2.171:56838] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aalrtBWSQc2OzPrsnwXOTQAAAI4"]
[Thu Mar 05 19:40:38.678439 2026] [:error] [pid 62173:tid 62273] [client 65.108.2.171:56852] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aalrtmj_GWbFb-1ncGl0tAAAABM"]
[Thu Mar 05 19:40:40.851166 2026] [:error] [pid 62177:tid 62311] [client 65.108.2.171:56860] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aalruBWSQc2OzPrsnwXOVQAAAIA"]
[Thu Mar 05 19:40:42.827849 2026] [:error] [pid 62177:tid 62325] [client 65.108.2.171:56876] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aalruhWSQc2OzPrsnwXOWwAAAI0"]
[Thu Mar 05 19:40:44.746038 2026] [:error] [pid 62176:tid 62286] [client 65.108.2.171:9680] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aalrvCNfTPJryi30JPn3FQAAAEI"]
[Thu Mar 05 19:40:46.702173 2026] [:error] [pid 53350:tid 53378] [client 65.108.2.171:9696] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aalrvqO0Baxc5WFYeP0bOQAAAQM"]
[Thu Mar 05 19:40:48.672185 2026] [:error] [pid 53350:tid 53399] [client 65.108.2.171:9702] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aalrwKO0Baxc5WFYeP0bQwAAARY"]
[Thu Mar 05 19:40:50.688669 2026] [:error] [pid 53350:tid 53383] [client 65.108.2.171:9716] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aalrwqO0Baxc5WFYeP0bTgAAAQg"]
[Thu Mar 05 19:41:25.291216 2026] [:error] [pid 62177:tid 62315] [client 65.108.2.171:22702] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aalr5RWSQc2OzPrsnwXOqgAAAIQ"]
[Thu Mar 05 19:41:27.319171 2026] [:error] [pid 53350:tid 53391] [client 65.108.2.171:22712] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aalr56O0Baxc5WFYeP0bqwAAAQ4"]
[Thu Mar 05 19:41:29.231794 2026] [:error] [pid 53350:tid 53379] [client 65.108.2.171:22716] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aalr6aO0Baxc5WFYeP0bsgAAAQQ"]
[Thu Mar 05 19:41:31.266107 2026] [:error] [pid 53350:tid 53380] [client 65.108.2.171:22722] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aalr66O0Baxc5WFYeP0buQAAAQU"]
[Thu Mar 05 19:41:33.157905 2026] [:error] [pid 53350:tid 53395] [client 65.108.2.171:22728] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aalr7aO0Baxc5WFYeP0bvgAAARI"]
[Thu Mar 05 19:41:35.202847 2026] [:error] [pid 62435:tid 62470] [client 65.108.2.171:17098] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aalr7yMZJMDfZh_-8sV5cgAAANQ"]
[Thu Mar 05 19:41:37.077809 2026] [:error] [pid 53350:tid 53379] [client 65.108.2.171:17108] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aalr8aO0Baxc5WFYeP0b0QAAAQQ"]
[Thu Mar 05 19:41:39.128193 2026] [:error] [pid 62435:tid 62451] [client 65.108.2.171:17110] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aalr8yMZJMDfZh_-8sV5cwAAAME"]
[Thu Mar 05 19:41:41.174585 2026] [:error] [pid 53350:tid 53398] [client 65.108.2.171:17116] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aalr9aO0Baxc5WFYeP0b5gAAARU"]
[Thu Mar 05 19:41:42.562271 2026] [:error] [pid 53350:tid 53398] [client 65.108.2.171:17132] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aalr9qO0Baxc5WFYeP0b9wAAARU"]
[Thu Mar 05 19:41:46.419205 2026] [:error] [pid 62173:tid 62271] [client 65.108.2.171:1846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aalr-mj_GWbFb-1ncGl0ygAAABE"]
[Thu Mar 05 20:31:35.143106 2026] [:error] [pid 62177:tid 62329] [client 193.70.34.35:56634] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aal3pxWSQc2OzPrsnwXdFAAAAJE"]
[Thu Mar 05 20:31:36.967837 2026] [:error] [pid 62177:tid 62328] [client 193.70.34.35:45848] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aal3qBWSQc2OzPrsnwXdFQAAAJA"]
[Thu Mar 05 20:31:39.000793 2026] [:error] [pid 62177:tid 62333] [client 193.70.34.35:60988] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aal3qhWSQc2OzPrsnwXdFgAAAJU"]
[Thu Mar 05 20:31:41.091901 2026] [:error] [pid 53350:tid 53395] [client 193.70.34.35:60994] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aal3raO0Baxc5WFYeP1AJgAAARI"]
[Thu Mar 05 20:31:43.027038 2026] [:error] [pid 53350:tid 53391] [client 193.70.34.35:32770] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aal3r6O0Baxc5WFYeP1AKAAAAQ4"]
[Thu Mar 05 20:31:44.934768 2026] [:error] [pid 41459:tid 41476] [client 193.70.34.35:32772] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aal3sOdFBZEnZ3pzxrU_ewAAAUI"]
[Thu Mar 05 20:31:47.015345 2026] [:error] [pid 62435:tid 62461] [client 193.70.34.35:32782] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aal3syMZJMDfZh_-8sWB1AAAAMs"]
[Thu Mar 05 20:31:48.967116 2026] [:error] [pid 41459:tid 41490] [client 193.70.34.35:57478] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aal3tOdFBZEnZ3pzxrU_gwAAAVA"]
[Thu Mar 05 20:31:51.047866 2026] [:error] [pid 62176:tid 62290] [client 193.70.34.35:57492] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aal3tyNfTPJryi30JPn9PQAAAEY"]
[Thu Mar 05 20:31:52.975403 2026] [:error] [pid 62177:tid 62327] [client 193.70.34.35:57496] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aal3uBWSQc2OzPrsnwXdKQAAAI8"]
[Thu Mar 05 20:31:54.891857 2026] [:error] [pid 53350:tid 53388] [client 193.70.34.35:57508] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aal3uqO0Baxc5WFYeP1AMAAAAQs"]
[Thu Mar 05 20:31:56.809680 2026] [:error] [pid 41459:tid 41475] [client 193.70.34.35:57510] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aal3vOdFBZEnZ3pzxrU_kQAAAUE"]
[Thu Mar 05 20:31:58.917984 2026] [:error] [pid 62435:tid 62471] [client 193.70.34.35:48976] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aal3viMZJMDfZh_-8sWB4AAAANU"]
[Thu Mar 05 20:32:01.011593 2026] [:error] [pid 62435:tid 62456] [client 193.70.34.35:48990] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aal3wSMZJMDfZh_-8sWB4wAAAMY"]
[Thu Mar 05 20:32:02.930170 2026] [:error] [pid 53350:tid 53401] [client 193.70.34.35:49000] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aal3wqO0Baxc5WFYeP1AQwAAARg"]
[Thu Mar 05 21:56:24.003048 2026] [:error] [pid 8151:tid 8236] [client 51.195.103.76:24402] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aamLiJO3dLEidct1HvCMCwAAAZA"]
[Thu Mar 05 21:56:25.976242 2026] [:error] [pid 62173:tid 62261] [client 51.195.103.76:24416] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aamLiWj_GWbFb-1ncGl-yQAAAAk"]
[Thu Mar 05 21:56:27.997350 2026] [:error] [pid 62435:tid 62462] [client 51.195.103.76:24426] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aamLiyMZJMDfZh_-8sWOzQAAAMw"]
[Thu Mar 05 21:56:30.007196 2026] [:error] [pid 41459:tid 41492] [client 51.195.103.76:24434] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aamLjudFBZEnZ3pzxrVpVQAAAVI"]
[Thu Mar 05 21:56:32.033349 2026] [:error] [pid 62173:tid 62257] [client 51.195.103.76:63186] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aamLkGj_GWbFb-1ncGl-zAAAAAU"]
[Thu Mar 05 21:56:34.049550 2026] [:error] [pid 53350:tid 53398] [client 51.195.103.76:63194] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aamLkqO0Baxc5WFYeP15ywAAARU"]
[Thu Mar 05 21:56:36.089871 2026] [:error] [pid 8151:tid 8232] [client 51.195.103.76:63206] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aamLlJO3dLEidct1HvCMXgAAAYw"]
[Thu Mar 05 21:56:38.066179 2026] [:error] [pid 8151:tid 8217] [client 51.195.103.76:63220] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aamLlpO3dLEidct1HvCMYQAAAYA"]
[Thu Mar 05 21:56:40.108562 2026] [:error] [pid 62435:tid 62465] [client 51.195.103.76:63224] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "aamLmCMZJMDfZh_-8sWO3wAAAM8"]
[Thu Mar 05 21:56:42.157712 2026] [:error] [pid 62435:tid 62458] [client 51.195.103.76:42116] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aamLmiMZJMDfZh_-8sWO5QAAAMg"]
[Thu Mar 05 21:56:44.062312 2026] [:error] [pid 8151:tid 8232] [client 51.195.103.76:42126] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aamLnJO3dLEidct1HvCMbAAAAYw"]
[Thu Mar 05 21:56:46.051469 2026] [:error] [pid 53350:tid 53386] [client 51.195.103.76:42128] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aamLnqO0Baxc5WFYeP159wAAAQo"]
[Thu Mar 05 21:56:47.930849 2026] [:error] [pid 41459:tid 41483] [client 51.195.103.76:42140] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aamLn-dFBZEnZ3pzxrVprwAAAUk"]
[Thu Mar 05 21:56:49.966482 2026] [:error] [pid 41459:tid 41483] [client 51.195.103.76:42150] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aamLoedFBZEnZ3pzxrVptQAAAUk"]
[Thu Mar 05 21:56:52.034407 2026] [:error] [pid 41459:tid 41482] [client 51.195.103.76:4374] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aamLpOdFBZEnZ3pzxrVpvQAAAUg"]
[Thu Mar 05 22:40:27.283468 2026] [:error] [pid 41459:tid 41497] [client 157.15.40.88:50651] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aamV2-dFBZEnZ3pzxrWEFwAAAVc"]
[Thu Mar 05 22:40:27.547545 2026] [:error] [pid 8151:tid 8242] [client 157.15.40.88:50732] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/txets.php"] [unique_id "aamV25O3dLEidct1HvCo3gAAAZY"]
[Thu Mar 05 22:40:27.802274 2026] [:error] [pid 62176:tid 62293] [client 157.15.40.88:50816] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/txets.php"] [unique_id "aamV2yNfTPJryi30JPkJngAAAEk"]
[Thu Mar 05 22:40:28.069124 2026] [:error] [pid 8151:tid 8225] [client 157.15.40.88:50894] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/txets.php"] [unique_id "aamV3JO3dLEidct1HvCpJgAAAYY"]
[Thu Mar 05 22:40:28.333793 2026] [:error] [pid 62173:tid 62264] [client 157.15.40.88:50976] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/schallfuns.php"] [unique_id "aamV3Gj_GWbFb-1ncGmBFAAAAAw"]
[Thu Mar 05 22:40:28.602300 2026] [:error] [pid 8151:tid 8217] [client 157.15.40.88:51060] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/postnews.php"] [unique_id "aamV3JO3dLEidct1HvCpUgAAAYA"]
[Thu Mar 05 22:40:28.872569 2026] [:error] [pid 8151:tid 8237] [client 157.15.40.88:51145] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/postnews.php"] [unique_id "aamV3JO3dLEidct1HvCpYgAAAZE"]
[Thu Mar 05 22:40:29.188922 2026] [:error] [pid 62177:tid 62318] [client 157.15.40.88:51240] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/postnews.php"] [unique_id "aamV3RWSQc2OzPrsnwX6fAAAAIc"]
[Thu Mar 05 22:40:29.452032 2026] [:error] [pid 41459:tid 41474] [client 157.15.40.88:51335] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3edFBZEnZ3pzxrWEnwAAAUA"]
[Thu Mar 05 23:04:34.922357 2026] [:error] [pid 8151:tid 8224] [client 81.167.26.57:63275] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aambgpO3dLEidct1HvC7kwAAAYU"]
[Thu Mar 05 23:04:37.100852 2026] [:error] [pid 8151:tid 8238] [client 81.167.26.57:60029] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/auto%20slot.aspx"] [unique_id "aambhZO3dLEidct1HvC7owAAAZI"]
[Thu Mar 05 23:04:39.269632 2026] [:error] [pid 41459:tid 41478] [client 81.167.26.57:45109] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aambh-dFBZEnZ3pzxrWQrAAAAUQ"]
[Thu Mar 05 23:04:41.220199 2026] [:error] [pid 8151:tid 8230] [client 81.167.26.57:23479] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aambiZO3dLEidct1HvC7sQAAAYs"]
[Thu Mar 05 23:04:43.372699 2026] [:error] [pid 8151:tid 8229] [client 81.167.26.57:7613] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aambi5O3dLEidct1HvC7vwAAAYo"]
[Thu Mar 05 23:04:45.543346 2026] [:error] [pid 8151:tid 8220] [client 81.167.26.57:27385] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aambjZO3dLEidct1HvC70AAAAYE"]
[Thu Mar 05 23:04:47.691552 2026] [:error] [pid 62177:tid 62324] [client 81.167.26.57:7014] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aambjxWSQc2OzPrsnwX_agAAAIw"]
[Thu Mar 05 23:16:07.856437 2026] [:error] [pid 62435:tid 62456] [client 142.248.80.118:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 05 23:16:10.065078 2026] [:error] [pid 8151:tid 8237] [client 142.248.80.118:52634] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 06 00:44:56.043883 2026] [:error] [pid 47657:tid 47900] [client 103.77.107.222:65448] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "aamzCC76-uV01o_084mE2wAAAAA"]
[Fri Mar 06 00:44:56.282556 2026] [:error] [pid 47657:tid 47923] [client 103.77.107.222:49175] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "aamzCC76-uV01o_084mE3AAAABY"]
[Fri Mar 06 01:02:13.324565 2026] [:error] [pid 47665:tid 48025] [client 178.128.61.239:53232] [client 178.128.61.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.61.239, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aam3FXvwcWrOi3qzRcd2fgAAAMk"]
[Fri Mar 06 01:02:13.328152 2026] [:error] [pid 47665:tid 48025] [client 178.128.61.239:53232] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 06 01:40:25.491578 2026] [:error] [pid 47661:tid 47994] [client 212.105.142.187:23612] [client 212.105.142.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.105.142.187, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aanACYh_LGQjIl8XP2etKQAAAE8"]
[Fri Mar 06 01:40:25.496942 2026] [:error] [pid 47661:tid 47994] [client 212.105.142.187:23612] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 01:41:57.227067 2026] [:error] [pid 47657:tid 47903] [client 103.198.154.143:40571] [client 103.198.154.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.143, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aanAZS76-uV01o_084mVdgAAAAM"]
[Fri Mar 06 01:41:57.231789 2026] [:error] [pid 47657:tid 47903] [client 103.198.154.143:40571] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 03:44:59.639491 2026] [:error] [pid 22551:tid 22720] [client 61.244.204.54:43942] [client 61.244.204.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.244.204.54, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aandOzPEoT0yuWW-85OCYAAAAFY"]
[Fri Mar 06 03:44:59.642847 2026] [:error] [pid 22551:tid 22720] [client 61.244.204.54:43942] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 03:47:55.813844 2026] [:error] [pid 22849:tid 22864] [client 170.106.165.186:39410] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aand675StH0KKxo05RfFrwAAAMA"]
[Fri Mar 06 06:12:50.879306 2026] [:error] [pid 8656:tid 8822] [client 20.89.57.111:11138] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aan_4pPxTG9Ff1TtP6PLrwAAAIw"]
[Fri Mar 06 06:12:51.345193 2026] [:error] [pid 8652:tid 8806] [client 20.89.57.111:11173] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aan_49Yc_V4I9STsZ9AH7wAAAFc"]
[Fri Mar 06 06:12:51.813681 2026] [:error] [pid 8945:tid 8981] [client 20.89.57.111:11154] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aan_4wttiLGNg13nMzLmhAAAAM4"]
[Fri Mar 06 06:12:52.307716 2026] [:error] [pid 8648:tid 8765] [client 20.89.57.111:11164] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "aan_5EhAk6X-gF6akMRFZAAAABI"]
[Fri Mar 06 07:22:13.366286 2026] [:error] [pid 8656:tid 8826] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 06 07:22:13.385222 2026] [:error] [pid 8656:tid 8819] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 06 07:22:13.424046 2026] [:error] [pid 8656:tid 8816] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 06 07:22:13.443216 2026] [:error] [pid 8656:tid 8818] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 06 07:22:13.483194 2026] [:error] [pid 8656:tid 8825] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 06 07:22:13.505687 2026] [:error] [pid 8656:tid 8832] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 06 07:22:13.546312 2026] [:error] [pid 8656:tid 8827] [client 20.53.241.9:23308] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Mar 06 07:22:13.582231 2026] [:error] [pid 8656:tid 8821] [client 20.53.241.9:23308] [client 20.53.241.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaoQJZPxTG9Ff1TtP6P5GwAAAIs"]
[Fri Mar 06 07:22:13.645468 2026] [:error] [pid 8656:tid 8824] [client 20.53.241.9:31768] [client 20.53.241.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaoQJZPxTG9Ff1TtP6P5HAAAAI4"]
[Fri Mar 06 07:22:13.707791 2026] [:error] [pid 8656:tid 8814] [client 20.53.241.9:30981] [client 20.53.241.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaoQJZPxTG9Ff1TtP6P5HQAAAIQ"]
[Fri Mar 06 07:22:13.769439 2026] [:error] [pid 8945:tid 8967] [client 20.53.241.9:31003] [client 20.53.241.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "aaoQJQttiLGNg13nMzIIYgAAAMA"]
[Fri Mar 06 12:27:25.426169 2026] [:error] [pid 44628:tid 44661] [client 51.75.128.81:35710] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aapXrYZtiq7T54_AYvLDywAAAVA"]
[Fri Mar 06 12:27:28.250276 2026] [:error] [pid 8656:tid 8826] [client 51.75.128.81:59424] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aapXsJPxTG9Ff1TtP6MkQQAAAJA"]
[Fri Mar 06 12:27:30.995888 2026] [:error] [pid 8656:tid 8816] [client 51.75.128.81:59430] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aapXspPxTG9Ff1TtP6MkUQAAAIY"]
[Fri Mar 06 12:27:33.238381 2026] [:error] [pid 8648:tid 8755] [client 51.75.128.81:59438] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aapXtUhAk6X-gF6akMRu3QAAAAg"]
[Fri Mar 06 12:27:35.746467 2026] [:error] [pid 8945:tid 8977] [client 51.75.128.81:59448] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aapXtwttiLGNg13nMzK8xwAAAMo"]
[Fri Mar 06 12:27:37.962889 2026] [:error] [pid 16140:tid 16158] [client 51.75.128.81:37934] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aapXuZZVpEeGhAeSpv0LegAAARA"]
[Fri Mar 06 12:27:41.707753 2026] [:error] [pid 44628:tid 44661] [client 51.75.128.81:37950] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aapXvYZtiq7T54_AYvLD1gAAAVA"]
[Fri Mar 06 12:27:45.617782 2026] [:error] [pid 8656:tid 8823] [client 51.75.128.81:37954] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aapXwZPxTG9Ff1TtP6MkcgAAAI0"]
[Fri Mar 06 13:39:51.678793 2026] [:error] [pid 16140:tid 16155] [client 67.144.16.170:6772] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aapop5ZVpEeGhAeSpv0icwAAAQ0"]
[Fri Mar 06 13:39:52.154788 2026] [:error] [pid 8652:tid 8803] [client 67.144.16.170:7122] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aapoqNYc_V4I9STsZ9BFlQAAAFQ"]
[Fri Mar 06 13:39:52.629177 2026] [:error] [pid 8656:tid 8820] [client 67.144.16.170:7126] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aapoqJPxTG9Ff1TtP6NmaAAAAIo"]
[Fri Mar 06 13:39:54.681836 2026] [:error] [pid 16140:tid 16142] [client 67.144.16.170:7173] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aapoqpZVpEeGhAeSpv0idQAAAQA"]
[Fri Mar 06 13:39:55.156523 2026] [:error] [pid 8945:tid 8984] [client 67.144.16.170:7180] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aapoqwttiLGNg13nMzLi0gAAANE"]
[Fri Mar 06 13:39:57.255083 2026] [:error] [pid 8945:tid 8972] [client 67.144.16.170:7226] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaporQttiLGNg13nMzLi3AAAAMU"]
[Fri Mar 06 13:39:57.730935 2026] [:error] [pid 8945:tid 8980] [client 67.144.16.170:7234] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaporQttiLGNg13nMzLi4AAAAM0"]
[Fri Mar 06 13:39:59.580953 2026] [:error] [pid 8656:tid 8834] [client 67.144.16.170:7279] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aapor5PxTG9Ff1TtP6NmeQAAAJg"]
[Fri Mar 06 13:40:00.055755 2026] [:error] [pid 8652:tid 8802] [client 67.144.16.170:7289] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaposNYc_V4I9STsZ9BFnQAAAFM"]
[Fri Mar 06 13:40:02.182094 2026] [:error] [pid 8656:tid 8813] [client 67.144.16.170:7333] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aapospPxTG9Ff1TtP6NmgQAAAIM"]
[Fri Mar 06 13:40:02.660919 2026] [:error] [pid 8656:tid 8822] [client 67.144.16.170:7347] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aapospPxTG9Ff1TtP6NmhAAAAIw"]
[Fri Mar 06 13:40:04.752299 2026] [:error] [pid 16140:tid 16161] [client 67.144.16.170:7380] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aapotJZVpEeGhAeSpv0ikAAAARM"]
[Fri Mar 06 13:40:05.228060 2026] [:error] [pid 8656:tid 8832] [client 67.144.16.170:7392] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aapotZPxTG9Ff1TtP6NmiwAAAJY"]
[Fri Mar 06 13:40:07.321991 2026] [:error] [pid 8656:tid 8829] [client 67.144.16.170:7417] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aapot5PxTG9Ff1TtP6NmlAAAAJM"]
[Fri Mar 06 13:40:07.800286 2026] [:error] [pid 8656:tid 8815] [client 67.144.16.170:7419] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aapot5PxTG9Ff1TtP6NmmAAAAIU"]
[Fri Mar 06 13:40:10.476773 2026] [:error] [pid 8945:tid 8988] [client 67.144.16.170:7472] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aapougttiLGNg13nMzLjcAAAANU"]
[Fri Mar 06 13:40:10.950960 2026] [:error] [pid 8656:tid 8821] [client 67.144.16.170:7490] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aapoupPxTG9Ff1TtP6NmpQAAAIs"]
[Fri Mar 06 13:40:13.099570 2026] [:error] [pid 8652:tid 8805] [client 67.144.16.170:7535] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aapovdYc_V4I9STsZ9BFpAAAAFY"]
[Fri Mar 06 13:40:13.573805 2026] [:error] [pid 8648:tid 8767] [client 67.144.16.170:7546] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aapovUhAk6X-gF6akMR1mwAAABQ"]
[Fri Mar 06 13:40:15.747061 2026] [:error] [pid 16140:tid 16159] [client 67.144.16.170:7580] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aapov5ZVpEeGhAeSpv0iowAAARE"]
[Fri Mar 06 13:40:16.221519 2026] [:error] [pid 8945:tid 8973] [client 67.144.16.170:7588] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aapowAttiLGNg13nMzLjfgAAAMY"]
[Fri Mar 06 13:40:18.281440 2026] [:error] [pid 8648:tid 8765] [client 67.144.16.170:7620] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aapowkhAk6X-gF6akMR1nwAAABI"]
[Fri Mar 06 13:40:18.757076 2026] [:error] [pid 8656:tid 8830] [client 67.144.16.170:7624] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aapowpPxTG9Ff1TtP6NmtwAAAJQ"]
[Fri Mar 06 13:40:20.832016 2026] [:error] [pid 44628:tid 44667] [client 67.144.16.170:7663] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aapoxIZtiq7T54_AYvLS0wAAAVY"]
[Fri Mar 06 13:40:21.331730 2026] [:error] [pid 44628:tid 44661] [client 67.144.16.170:7665] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aapoxYZtiq7T54_AYvLS1QAAAVA"]
[Fri Mar 06 13:40:23.429209 2026] [:error] [pid 8656:tid 8827] [client 67.144.16.170:7725] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aapox5PxTG9Ff1TtP6NmyQAAAJE"]
[Fri Mar 06 13:40:23.903334 2026] [:error] [pid 8656:tid 8818] [client 67.144.16.170:7736] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aapox5PxTG9Ff1TtP6NmzQAAAIg"]
[Fri Mar 06 13:40:26.099095 2026] [:error] [pid 8945:tid 8985] [client 67.144.16.170:7783] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aapoygttiLGNg13nMzLjkQAAANI"]
[Fri Mar 06 13:40:26.574536 2026] [:error] [pid 8945:tid 8974] [client 67.144.16.170:7792] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aapoygttiLGNg13nMzLjlgAAAMc"]
[Fri Mar 06 13:40:28.661767 2026] [:error] [pid 44628:tid 44647] [client 67.144.16.170:7838] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aapozIZtiq7T54_AYvLS3QAAAUI"]
[Fri Mar 06 13:40:29.147942 2026] [:error] [pid 16140:tid 16145] [client 67.144.16.170:7841] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aapozZZVpEeGhAeSpv0ivgAAAQM"]
[Fri Mar 06 14:18:24.849708 2026] [:error] [pid 8652:tid 8807] [client 51.75.119.173:36070] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aapxsNYc_V4I9STsZ9BLGgAAAFg"]
[Fri Mar 06 14:18:26.946590 2026] [:error] [pid 44628:tid 44662] [client 51.75.119.173:42344] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aapxsoZtiq7T54_AYvLccAAAAVE"]
[Fri Mar 06 14:18:29.412719 2026] [:error] [pid 8648:tid 8762] [client 51.75.119.173:43970] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aapxtUhAk6X-gF6akMR6jQAAAA8"]
[Fri Mar 06 14:18:31.664161 2026] [:error] [pid 8945:tid 8978] [client 51.75.119.173:43974] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aapxtwttiLGNg13nMzL5BwAAAMs"]
[Fri Mar 06 14:18:33.879094 2026] [:error] [pid 16140:tid 16148] [client 51.75.119.173:43990] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aapxuZZVpEeGhAeSpv0wFQAAAQY"]
[Fri Mar 06 14:18:36.027940 2026] [:error] [pid 8945:tid 8979] [client 51.75.119.173:43992] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aapxvAttiLGNg13nMzL5EQAAAMw"]
[Fri Mar 06 14:18:38.218958 2026] [:error] [pid 8945:tid 8979] [client 51.75.119.173:40526] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aapxvgttiLGNg13nMzL5HQAAAMw"]
[Fri Mar 06 14:18:40.180119 2026] [:error] [pid 8656:tid 8813] [client 51.75.119.173:40530] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aapxwJPxTG9Ff1TtP6OESwAAAIM"]
[Fri Mar 06 14:18:42.177189 2026] [:error] [pid 8945:tid 8989] [client 51.75.119.173:40536] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aapxwgttiLGNg13nMzL5JwAAANY"]
[Fri Mar 06 14:18:44.218089 2026] [:error] [pid 8652:tid 8788] [client 51.75.119.173:40538] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aapxxNYc_V4I9STsZ9BLIQAAAEU"]
[Fri Mar 06 14:18:46.456791 2026] [:error] [pid 8656:tid 8817] [client 51.75.119.173:40552] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aapxxpPxTG9Ff1TtP6OEdwAAAIc"]
[Fri Mar 06 14:18:48.503132 2026] [:error] [pid 8945:tid 8982] [client 51.75.119.173:42904] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aapxyAttiLGNg13nMzL5MgAAAM8"]
[Fri Mar 06 14:18:50.515245 2026] [:error] [pid 8656:tid 8832] [client 51.75.119.173:42918] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aapxypPxTG9Ff1TtP6OEiwAAAJY"]
[Fri Mar 06 14:18:52.578428 2026] [:error] [pid 8656:tid 8832] [client 51.75.119.173:42926] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aapxzJPxTG9Ff1TtP6OEmAAAAJY"]
[Fri Mar 06 14:18:54.561774 2026] [:error] [pid 8652:tid 8804] [client 51.75.119.173:42932] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aapxztYc_V4I9STsZ9BLIwAAAFU"]
[Fri Mar 06 16:50:11.860157 2026] [:error] [pid 16140:tid 16165] [client 106.51.36.67:28479] [client 106.51.36.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.36.67, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaqVQ5ZVpEeGhAeSpv2G4AAAARc"]
[Fri Mar 06 16:50:11.865355 2026] [:error] [pid 16140:tid 16165] [client 106.51.36.67:28479] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 16:51:53.644777 2026] [:error] [pid 59239:tid 59287] [client 86.90.247.152:56383] [client 86.90.247.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.90.247.152, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaqVqbG1EpnE909fvGdnCwAAA9I"]
[Fri Mar 06 16:51:53.653459 2026] [:error] [pid 59239:tid 59287] [client 86.90.247.152:56383] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 16:59:22.825162 2026] [:error] [pid 59237:tid 59256] [client 102.89.34.206:10510] [client 102.89.34.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.89.34.206, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaqXauqfMSBs0nxOTxGz5gAAA44"]
[Fri Mar 06 16:59:22.842777 2026] [:error] [pid 59237:tid 59256] [client 102.89.34.206:10510] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 17:33:33.184955 2026] [:error] [pid 59239:tid 59291] [client 34.67.100.212:59269] [client 34.67.100.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.100.212, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aaqfbbG1EpnE909fvGdy2wAAA9Y"]
[Fri Mar 06 17:33:33.190305 2026] [:error] [pid 59239:tid 59291] [client 34.67.100.212:59269] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 17:33:35.531252 2026] [:error] [pid 59239:tid 59287] [client 34.67.100.212:59269] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaqfb7G1EpnE909fvGdy5gAAA9I"]
[Fri Mar 06 17:33:35.968673 2026] [:error] [pid 59239:tid 59282] [client 34.67.100.212:63269] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaqfb7G1EpnE909fvGdy5wAAA80"]
[Fri Mar 06 17:33:36.386699 2026] [:error] [pid 59237:tid 59263] [client 34.67.100.212:52179] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaqfcOqfMSBs0nxOTxHKAQAAA5U"]
[Fri Mar 06 17:33:36.787262 2026] [:error] [pid 59198:tid 59220] [client 34.67.100.212:61224] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaqfcNFYTNmfCEavFrI1iAAAA1M"]
[Fri Mar 06 17:33:37.191300 2026] [:error] [pid 16140:tid 16155] [client 34.67.100.212:52873] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaqfcZZVpEeGhAeSpv2adAAAAQ0"]
[Fri Mar 06 17:33:37.601407 2026] [:error] [pid 59239:tid 59291] [client 34.67.100.212:61128] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaqfcbG1EpnE909fvGdy6wAAA9Y"]
[Fri Mar 06 17:33:38.011054 2026] [:error] [pid 16140:tid 16143] [client 34.67.100.212:50215] [client 34.67.100.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaqfcpZVpEeGhAeSpv2adQAAAQE"]
[Fri Mar 06 20:56:16.804293 2026] [:error] [pid 59237:tid 59262] [client 94.198.41.14:45337] File does not exist: /usr/local/apache/htdocs/suspended-page/archivarix.cms.php, referer: http://pumpbooking.com/archivarix.cms.php
[Fri Mar 06 21:32:28.328647 2026] [:error] [pid 59239:tid 59288] [client 182.44.10.67:50424] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aarXbLG1EpnE909fvGezeAAAA9M"]
[Fri Mar 06 22:52:00.613701 2026] [:error] [pid 16140:tid 16142] [client 67.144.16.170:56995] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqEJZVpEeGhAeSpv0V-wAAAQA"]
[Fri Mar 06 22:52:01.088690 2026] [:error] [pid 16140:tid 16150] [client 67.144.16.170:57013] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqEZZVpEeGhAeSpv0V_wAAAQg"]
[Fri Mar 06 22:52:04.946792 2026] [:error] [pid 59237:tid 59265] [client 67.144.16.170:57079] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqFOqfMSBs0nxOTxGKrwAAA5c"]
[Fri Mar 06 22:52:05.422176 2026] [:error] [pid 59237:tid 59248] [client 67.144.16.170:57088] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqFeqfMSBs0nxOTxGKsgAAA4Y"]
[Fri Mar 06 22:52:07.325837 2026] [:error] [pid 8656:tid 8827] [client 67.144.16.170:57121] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqF5PxTG9Ff1TtP6PI6gAAAJE"]
[Fri Mar 06 22:52:07.800933 2026] [:error] [pid 8656:tid 8814] [client 67.144.16.170:57127] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqF5PxTG9Ff1TtP6PI7AAAAIQ"]
[Fri Mar 06 22:52:11.580488 2026] [:error] [pid 59237:tid 59243] [client 67.144.16.170:57200] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqG-qfMSBs0nxOTxGKwQAAA4E"]
[Fri Mar 06 22:52:12.055248 2026] [:error] [pid 16140:tid 16145] [client 67.144.16.170:57205] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aarqHJZVpEeGhAeSpv0WEQAAAQM"]
[Fri Mar 06 22:56:21.180790 2026] [:error] [pid 59239:tid 59276] [client 43.131.26.226:54916] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aarrFbG1EpnE909fvGfFOwAAA8c"]
[Fri Mar 06 23:10:55.451786 2026] [:error] [pid 8656:tid 8830] [client 62.60.131.218:62593] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaruf5PxTG9Ff1TtP6PK4QAAAJQ"]
[Fri Mar 06 23:38:14.033475 2026] [:error] [pid 8656:tid 8815] [client 104.28.214.122:12117] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aar05pPxTG9Ff1TtP6POIwAAAIU"]
[Fri Mar 06 23:38:17.591052 2026] [:error] [pid 59239:tid 59272] [client 104.28.214.122:40409] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/style.php"] [unique_id "aar06bG1EpnE909fvGfQDQAAA8M"]
[Fri Mar 06 23:38:19.110554 2026] [:error] [pid 16140:tid 16155] [client 104.28.214.122:25482] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/style.php"] [unique_id "aar065ZVpEeGhAeSpv0pmQAAAQ0"]
[Fri Mar 06 23:38:21.361695 2026] [:error] [pid 59237:tid 59258] [client 104.28.214.122:20599] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-admin/style.php"] [unique_id "aar07eqfMSBs0nxOTxGs1QAAA5A"]
[Sat Mar 07 06:16:10.026100 2026] [:error] [pid 52484:tid 52505] [client 147.135.213.11:56398] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aatSKvE9AnX6zUICFeT0dgAAAQI"]
[Sat Mar 07 06:16:12.104619 2026] [:error] [pid 4311:tid 4436] [client 147.135.213.11:42978] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aatSLHbyS653WMGf2vX0QQAAAFE"]
[Sat Mar 07 06:16:14.056272 2026] [:error] [pid 4609:tid 4652] [client 147.135.213.11:42986] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aatSLuP7JMxUbw4Fd1Y4HAAAANg"]
[Sat Mar 07 06:16:15.963525 2026] [:error] [pid 4311:tid 4421] [client 147.135.213.11:36916] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aatSL3byS653WMGf2vX0RgAAAEI"]
[Sat Mar 07 06:16:17.975715 2026] [:error] [pid 4311:tid 4441] [client 147.135.213.11:36920] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "aatSMXbyS653WMGf2vX0SQAAAFY"]
[Sat Mar 07 06:16:19.799860 2026] [:error] [pid 4311:tid 4434] [client 147.135.213.11:36930] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aatSM3byS653WMGf2vX0SwAAAE8"]
[Sat Mar 07 06:16:23.027582 2026] [:error] [pid 52484:tid 52509] [client 147.135.213.11:36936] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aatSN_E9AnX6zUICFeT0jAAAAQY"]
[Sat Mar 07 06:16:26.860176 2026] [:error] [pid 52484:tid 52519] [client 147.135.213.11:52870] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aatSOvE9AnX6zUICFeT0lgAAAQ8"]
[Sat Mar 07 06:52:44.439309 2026] [:error] [pid 52484:tid 52517] [client 147.135.213.32:58314] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aatavPE9AnX6zUICFeQLxAAAAQ4"]
[Sat Mar 07 06:52:46.341099 2026] [:error] [pid 4307:tid 4406] [client 147.135.213.32:47298] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aatavjeKp4wgnLc38f9UWgAAABg"]
[Sat Mar 07 06:52:48.435836 2026] [:error] [pid 52484:tid 52509] [client 147.135.213.32:60996] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aatawPE9AnX6zUICFeQL1AAAAQY"]
[Sat Mar 07 06:52:50.384849 2026] [:error] [pid 52484:tid 52519] [client 147.135.213.32:32770] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aatawvE9AnX6zUICFeQL3wAAAQ8"]
[Sat Mar 07 06:52:52.263421 2026] [:error] [pid 52484:tid 52505] [client 147.135.213.32:32786] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aataxPE9AnX6zUICFeQL5gAAAQI"]
[Sat Mar 07 06:52:54.198279 2026] [:error] [pid 4609:tid 4645] [client 147.135.213.32:32794] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aataxuP7JMxUbw4Fd1ZGvAAAANE"]
[Sat Mar 07 06:52:56.147422 2026] [:error] [pid 4609:tid 4632] [client 147.135.213.32:32800] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aatayOP7JMxUbw4Fd1ZGwAAAAMQ"]
[Sat Mar 07 06:52:58.097825 2026] [:error] [pid 4315:tid 4455] [client 147.135.213.32:52472] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aataytDEK9AXzxu9OSg_HQAAAIg"]
[Sat Mar 07 06:53:00.039065 2026] [:error] [pid 52484:tid 52516] [client 147.135.213.32:52484] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aatazPE9AnX6zUICFeQL9AAAAQ0"]
[Sat Mar 07 06:53:01.873550 2026] [:error] [pid 52484:tid 52510] [client 147.135.213.32:52498] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aatazfE9AnX6zUICFeQL_AAAAQc"]
[Sat Mar 07 06:53:03.759840 2026] [:error] [pid 4609:tid 4648] [client 147.135.213.32:52510] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aataz-P7JMxUbw4Fd1ZGzwAAANQ"]
[Sat Mar 07 06:53:05.876637 2026] [:error] [pid 4315:tid 4451] [client 147.135.213.32:52522] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aata0dDEK9AXzxu9OSg_JwAAAIQ"]
[Sat Mar 07 06:53:07.973452 2026] [:error] [pid 4315:tid 4470] [client 147.135.213.32:44242] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aata09DEK9AXzxu9OSg_KgAAAJU"]
[Sat Mar 07 06:53:09.911013 2026] [:error] [pid 4311:tid 4440] [client 147.135.213.32:44256] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aata1XbyS653WMGf2vX6gAAAAFU"]
[Sat Mar 07 06:53:11.877203 2026] [:error] [pid 4609:tid 4644] [client 147.135.213.32:44272] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aata1-P7JMxUbw4Fd1ZG3wAAANA"]
[Sat Mar 07 07:34:02.902879 2026] [:error] [pid 52484:tid 52508] [client 54.37.252.131:51246] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aatkavE9AnX6zUICFeQrJQAAAQU"]
[Sat Mar 07 07:34:05.111318 2026] [:error] [pid 4311:tid 4443] [client 54.37.252.131:55424] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aatkbXbyS653WMGf2vUChwAAAFg"]
[Sat Mar 07 07:34:09.825933 2026] [:error] [pid 4609:tid 4652] [client 54.37.252.131:55440] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aatkceP7JMxUbw4Fd1ZY7QAAANg"]
[Sat Mar 07 07:34:12.455492 2026] [:error] [pid 4609:tid 4644] [client 54.37.252.131:55450] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aatkdOP7JMxUbw4Fd1ZY8AAAANA"]
[Sat Mar 07 07:34:17.501094 2026] [:error] [pid 52484:tid 52525] [client 54.37.252.131:33634] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aatkefE9AnX6zUICFeQrPwAAARU"]
[Sat Mar 07 07:34:21.123331 2026] [:error] [pid 4609:tid 4647] [client 54.37.252.131:33640] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aatkfeP7JMxUbw4Fd1ZZAgAAANM"]
[Sat Mar 07 07:34:26.050146 2026] [:error] [pid 52484:tid 52508] [client 54.37.252.131:55130] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aatkgvE9AnX6zUICFeQrTgAAAQU"]
[Sat Mar 07 07:34:29.018360 2026] [:error] [pid 52484:tid 52514] [client 54.37.252.131:55140] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aatkhfE9AnX6zUICFeQrVQAAAQs"]
[Sat Mar 07 07:34:32.125215 2026] [:error] [pid 52484:tid 52507] [client 54.37.252.131:55154] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aatkiPE9AnX6zUICFeQrYgAAAQQ"]
[Sat Mar 07 07:34:35.789801 2026] [:error] [pid 4315:tid 4461] [client 54.37.252.131:55834] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aatki9DEK9AXzxu9OShLrAAAAI4"]
[Sat Mar 07 07:34:38.587445 2026] [:error] [pid 4311:tid 4420] [client 54.37.252.131:55838] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aatkjnbyS653WMGf2vUClAAAAEE"]
[Sat Mar 07 07:34:41.986276 2026] [:error] [pid 4609:tid 4647] [client 54.37.252.131:55848] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aatkkeP7JMxUbw4Fd1ZZGQAAANM"]
[Sat Mar 07 07:34:46.152744 2026] [:error] [pid 4311:tid 4430] [client 54.37.252.131:53932] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aatklnbyS653WMGf2vUClgAAAEs"]
[Sat Mar 07 07:34:49.590810 2026] [:error] [pid 52484:tid 52523] [client 54.37.252.131:53936] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aatkmfE9AnX6zUICFeQrkwAAARM"]
[Sat Mar 07 07:34:52.509781 2026] [:error] [pid 4311:tid 4433] [client 54.37.252.131:53940] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aatknHbyS653WMGf2vUCnwAAAE4"]
[Sat Mar 07 08:28:17.225007 2026] [:error] [pid 52484:tid 52521] [client 62.60.131.218:59115] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aatxIfE9AnX6zUICFeRUygAAARE"]
[Sat Mar 07 08:50:05.491460 2026] [:error] [pid 52484:tid 52523] [client 149.224.116.234:64955] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aat2PfE9AnX6zUICFeRpewAAARM"]
[Sat Mar 07 08:50:07.391210 2026] [:error] [pid 52484:tid 52514] [client 149.224.116.234:63048] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aat2P_E9AnX6zUICFeRpiAAAAQs"]
[Sat Mar 07 08:50:09.350080 2026] [:error] [pid 52484:tid 52503] [client 149.224.116.234:60356] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aat2QfE9AnX6zUICFeRpkAAAAQA"]
[Sat Mar 07 08:50:11.347066 2026] [:error] [pid 4609:tid 4646] [client 149.224.116.234:61582] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aat2Q-P7JMxUbw4Fd1Z_KwAAANI"]
[Sat Mar 07 08:50:13.284828 2026] [:error] [pid 4315:tid 4466] [client 149.224.116.234:64622] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aat2RdDEK9AXzxu9OShkPgAAAJI"]
[Sat Mar 07 08:50:15.274315 2026] [:error] [pid 4609:tid 4650] [client 149.224.116.234:59751] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aat2R-P7JMxUbw4Fd1Z_MgAAANY"]
[Sat Mar 07 08:50:17.266163 2026] [:error] [pid 4609:tid 4630] [client 149.224.116.234:60916] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aat2SeP7JMxUbw4Fd1Z_NwAAAMI"]
[Sat Mar 07 08:50:19.325803 2026] [:error] [pid 52484:tid 52523] [client 149.224.116.234:61432] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aat2S_E9AnX6zUICFeRpsAAAARM"]
[Sat Mar 07 08:50:21.313800 2026] [:error] [pid 4609:tid 4648] [client 149.224.116.234:63560] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aat2TeP7JMxUbw4Fd1Z_QwAAANQ"]
[Sat Mar 07 08:50:23.170079 2026] [:error] [pid 4311:tid 4439] [client 149.224.116.234:59512] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aat2T3byS653WMGf2vURHAAAAFQ"]
[Sat Mar 07 08:50:25.157242 2026] [:error] [pid 4609:tid 4632] [client 149.224.116.234:59704] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aat2UeP7JMxUbw4Fd1Z_RAAAAMQ"]
[Sat Mar 07 08:50:27.102934 2026] [:error] [pid 52484:tid 52510] [client 149.224.116.234:63342] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aat2U_E9AnX6zUICFeRp1gAAAQc"]
[Sat Mar 07 08:50:29.129997 2026] [:error] [pid 4307:tid 4395] [client 149.224.116.234:59960] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aat2VTeKp4wgnLc38f9h8gAAAA0"]
[Sat Mar 07 08:50:31.114243 2026] [:error] [pid 52484:tid 52506] [client 149.224.116.234:63284] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aat2V_E9AnX6zUICFeRp6AAAAQM"]
[Sat Mar 07 08:50:33.119459 2026] [:error] [pid 52484:tid 52510] [client 149.224.116.234:61477] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aat2WfE9AnX6zUICFeRp7wAAAQc"]
[Sat Mar 07 08:50:35.075835 2026] [:error] [pid 52484:tid 52521] [client 149.224.116.234:64734] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aat2W_E9AnX6zUICFeRp-AAAARE"]
[Sat Mar 07 08:50:37.024964 2026] [:error] [pid 4311:tid 4433] [client 149.224.116.234:62575] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aat2XXbyS653WMGf2vURJwAAAE4"]
[Sat Mar 07 08:50:38.934122 2026] [:error] [pid 4609:tid 4629] [client 149.224.116.234:59849] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aat2XuP7JMxUbw4Fd1Z_bgAAAME"]
[Sat Mar 07 08:50:41.034139 2026] [:error] [pid 4609:tid 4651] [client 149.224.116.234:63741] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "aat2YeP7JMxUbw4Fd1Z_cwAAANc"]
[Sat Mar 07 08:50:43.004824 2026] [:error] [pid 4609:tid 4630] [client 149.224.116.234:64661] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aat2Y-P7JMxUbw4Fd1Z_dgAAAMI"]
[Sat Mar 07 08:50:44.851299 2026] [:error] [pid 4311:tid 4442] [client 149.224.116.234:63317] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aat2ZHbyS653WMGf2vURMAAAAFc"]
[Sat Mar 07 08:50:46.874251 2026] [:error] [pid 4311:tid 4430] [client 149.224.116.234:60594] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aat2ZnbyS653WMGf2vURMwAAAEs"]
[Sat Mar 07 08:50:48.834644 2026] [:error] [pid 52484:tid 52520] [client 149.224.116.234:61145] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aat2aPE9AnX6zUICFeRqBQAAARA"]
[Sat Mar 07 08:50:50.833596 2026] [:error] [pid 4609:tid 4630] [client 149.224.116.234:62883] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aat2auP7JMxUbw4Fd1Z_igAAAMI"]
[Sat Mar 07 08:50:52.774187 2026] [:error] [pid 52484:tid 52509] [client 149.224.116.234:64885] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aat2bPE9AnX6zUICFeRqEgAAAQY"]
[Sat Mar 07 08:50:54.678561 2026] [:error] [pid 52484:tid 52504] [client 149.224.116.234:62753] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aat2bvE9AnX6zUICFeRqGQAAAQE"]
[Sat Mar 07 08:50:56.707550 2026] [:error] [pid 52484:tid 52525] [client 149.224.116.234:64054] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aat2cPE9AnX6zUICFeRqIAAAARU"]
[Sat Mar 07 08:50:58.733568 2026] [:error] [pid 4609:tid 4650] [client 149.224.116.234:63372] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aat2cuP7JMxUbw4Fd1Z_xgAAANY"]
[Sat Mar 07 08:51:00.658973 2026] [:error] [pid 4609:tid 4649] [client 149.224.116.234:60944] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aat2dOP7JMxUbw4Fd1Z_0AAAANU"]
[Sat Mar 07 08:51:02.634312 2026] [:error] [pid 4609:tid 4631] [client 149.224.116.234:63275] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aat2duP7JMxUbw4Fd1Z_1gAAAMM"]
[Sat Mar 07 08:51:23.319121 2026] [:error] [pid 4315:tid 4460] [client 149.224.116.234:61191] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aat2i9DEK9AXzxu9OShkoQAAAI0"]
[Sat Mar 07 08:51:25.292413 2026] [:error] [pid 52484:tid 52511] [client 149.224.116.234:62636] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aat2jfE9AnX6zUICFeRqmQAAAQg"]
[Sat Mar 07 08:51:27.487201 2026] [:error] [pid 52484:tid 52512] [client 149.224.116.234:59909] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aat2j_E9AnX6zUICFeRqpwAAAQk"]
[Sat Mar 07 08:51:29.613148 2026] [:error] [pid 52484:tid 52523] [client 149.224.116.234:62870] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aat2kfE9AnX6zUICFeRqrAAAARM"]
[Sat Mar 07 08:51:31.581915 2026] [:error] [pid 52484:tid 52522] [client 149.224.116.234:65032] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aat2k_E9AnX6zUICFeRqtQAAARI"]
[Sat Mar 07 08:51:33.529008 2026] [:error] [pid 52484:tid 52515] [client 149.224.116.234:61099] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aat2lfE9AnX6zUICFeRqxQAAAQw"]
[Sat Mar 07 08:51:35.641166 2026] [:error] [pid 4315:tid 4472] [client 149.224.116.234:62660] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aat2l9DEK9AXzxu9OShktAAAAJc"]
[Sat Mar 07 08:51:39.500468 2026] [:error] [pid 4315:tid 4466] [client 149.224.116.234:62676] [client 149.224.116.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aat2m9DEK9AXzxu9OShkvAAAAJI"]
[Sat Mar 07 10:09:06.767507 2026] [:error] [pid 4315:tid 4453] [client 93.158.213.25:48760] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aauIwtDEK9AXzxu9OSh5pwAAAIY"]
[Sat Mar 07 10:09:09.000116 2026] [:error] [pid 4609:tid 4631] [client 93.158.213.25:32926] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aauIxOP7JMxUbw4Fd1akrwAAAMM"]
[Sat Mar 07 10:09:12.762171 2026] [:error] [pid 4311:tid 4441] [client 93.158.213.25:32936] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aauIyHbyS653WMGf2vUfGgAAAFY"]
[Sat Mar 07 10:09:15.076019 2026] [:error] [pid 4315:tid 4447] [client 93.158.213.25:32938] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aauIy9DEK9AXzxu9OSh5uQAAAIA"]
[Sat Mar 07 10:09:17.140169 2026] [:error] [pid 4311:tid 4442] [client 93.158.213.25:33860] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aauIzXbyS653WMGf2vUfGwAAAFc"]
[Sat Mar 07 10:09:19.343425 2026] [:error] [pid 4609:tid 4630] [client 93.158.213.25:33874] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aauIz-P7JMxUbw4Fd1akuwAAAMI"]
[Sat Mar 07 10:09:21.766332 2026] [:error] [pid 4609:tid 4638] [client 93.158.213.25:33888] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aauI0eP7JMxUbw4Fd1akvwAAAMo"]
[Sat Mar 07 10:09:23.796124 2026] [:error] [pid 4609:tid 4646] [client 93.158.213.25:33904] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aauI0-P7JMxUbw4Fd1akxwAAANI"]
[Sat Mar 07 10:09:27.130539 2026] [:error] [pid 4609:tid 4643] [client 93.158.213.25:47914] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aauI1-P7JMxUbw4Fd1akzQAAAM8"]
[Sat Mar 07 10:09:31.122572 2026] [:error] [pid 52484:tid 52516] [client 93.158.213.25:47924] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aauI2_E9AnX6zUICFeSougAAAQ0"]
[Sat Mar 07 14:37:32.598062 2026] [:error] [pid 37998:tid 38044] [client 34.24.47.138:62415] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/system/js/core.js"] [unique_id "aavHrMl3xHpv0STGaSbBFwAAAUE"]
[Sat Mar 07 16:53:57.673167 2026] [:error] [pid 37998:tid 38057] [client 89.163.146.197:59091] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/txets.php"] [unique_id "aavnpcl3xHpv0STGaSYJCAAAAU0"], referer: www.google.com
[Sat Mar 07 17:01:20.737206 2026] [:error] [pid 4311:tid 4425] [client 193.32.126.227:62185] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aavpYHbyS653WMGf2vVbWgAAAEY"]
[Sat Mar 07 17:01:20.741180 2026] [:error] [pid 4311:tid 4425] [client 193.32.126.227:62185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 08 00:16:03.578847 2026] [:error] [pid 36899:tid 36925] [client 106.54.62.156:39292] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aaxPQzIlMfwxLHrLy_-aNgAAAYM"]
[Sun Mar 08 00:46:42.543983 2026] [:error] [pid 19387:tid 19512] [client 147.135.214.95:41430] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaxWctf0nSGsjNvXT0MSZwAAAgw"]
[Sun Mar 08 00:46:44.578441 2026] [:error] [pid 19534:tid 19550] [client 147.135.214.95:51662] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aaxWdIiRddMMzZb47n5ULQAAAE4"]
[Sun Mar 08 00:46:46.612194 2026] [:error] [pid 19387:tid 19522] [client 147.135.214.95:34466] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaxWdtf0nSGsjNvXT0MScQAAAhY"]
[Sun Mar 08 00:46:48.619287 2026] [:error] [pid 19534:tid 19544] [client 147.135.214.95:34468] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaxWeIiRddMMzZb47n5UPgAAAEg"]
[Sun Mar 08 00:46:50.586105 2026] [:error] [pid 19386:tid 19490] [client 147.135.214.95:34478] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaxWeqOoo-DmQSb2USBOvwAAAdE"]
[Sun Mar 08 00:46:52.476325 2026] [:error] [pid 19386:tid 19475] [client 147.135.214.95:34494] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaxWfKOoo-DmQSb2USBOwwAAAcI"]
[Sun Mar 08 00:46:54.441256 2026] [:error] [pid 19386:tid 19476] [client 147.135.214.95:34510] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaxWfqOoo-DmQSb2USBOxQAAAcM"]
[Sun Mar 08 00:46:56.566346 2026] [:error] [pid 19386:tid 19484] [client 147.135.214.95:36064] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaxWgKOoo-DmQSb2USBOxwAAAcs"]
[Sun Mar 08 00:46:58.445570 2026] [:error] [pid 19534:tid 19536] [client 147.135.214.95:36076] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaxWgoiRddMMzZb47n5UXgAAAEA"]
[Sun Mar 08 00:47:00.469852 2026] [:error] [pid 19386:tid 19486] [client 147.135.214.95:36092] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaxWhKOoo-DmQSb2USBOywAAAc0"]
[Sun Mar 08 00:47:02.286086 2026] [:error] [pid 19387:tid 19510] [client 147.135.214.95:36098] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aaxWhtf0nSGsjNvXT0MSkwAAAgo"]
[Sun Mar 08 00:47:04.194192 2026] [:error] [pid 19387:tid 19516] [client 147.135.214.95:36110] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aaxWiNf0nSGsjNvXT0MSnQAAAhA"]
[Sun Mar 08 00:47:06.228660 2026] [:error] [pid 19386:tid 19475] [client 147.135.214.95:58726] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aaxWiqOoo-DmQSb2USBOzwAAAcI"]
[Sun Mar 08 00:47:08.240577 2026] [:error] [pid 19386:tid 19492] [client 147.135.214.95:58732] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aaxWjKOoo-DmQSb2USBO0QAAAdM"]
[Sun Mar 08 00:47:10.189078 2026] [:error] [pid 19387:tid 19507] [client 147.135.214.95:58744] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aaxWjtf0nSGsjNvXT0MStAAAAgc"]
[Sun Mar 08 00:47:12.113071 2026] [:error] [pid 19387:tid 19506] [client 147.135.214.95:58750] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aaxWkNf0nSGsjNvXT0MSugAAAgY"]
[Sun Mar 08 00:47:14.279623 2026] [:error] [pid 19534:tid 19551] [client 147.135.214.95:58752] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aaxWkoiRddMMzZb47n5UjQAAAE8"]
[Sun Mar 08 00:47:16.230078 2026] [:error] [pid 19386:tid 19492] [client 147.135.214.95:56956] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aaxWlKOoo-DmQSb2USBO2gAAAdM"]
[Sun Mar 08 00:47:18.268467 2026] [:error] [pid 19385:tid 19432] [client 147.135.214.95:56958] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaxWlvf5_iv9UQMo0rkGxgAAAAM"]
[Sun Mar 08 00:47:20.403019 2026] [:error] [pid 19534:tid 19543] [client 147.135.214.95:56962] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aaxWmIiRddMMzZb47n5UmQAAAEc"]
[Sun Mar 08 00:47:21.978637 2026] [:error] [pid 19385:tid 19453] [client 147.135.214.95:56970] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaxWmff5_iv9UQMo0rkGyAAAABg"]
[Sun Mar 08 00:47:25.868442 2026] [:error] [pid 19387:tid 19513] [client 147.135.214.95:57000] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aaxWndf0nSGsjNvXT0MS2wAAAg0"]
[Sun Mar 08 02:10:02.446147 2026] [:error] [pid 19386:tid 19490] [client 217.182.139.33:54132] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaxp-qOoo-DmQSb2USBdXwAAAdE"]
[Sun Mar 08 02:10:04.349058 2026] [:error] [pid 19386:tid 19496] [client 217.182.139.33:60540] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aaxp_KOoo-DmQSb2USBdYAAAAdc"]
[Sun Mar 08 02:10:06.513353 2026] [:error] [pid 42362:tid 42382] [client 217.182.139.33:60544] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaxp_q-bLI2XD-bK6dC3DAAAAIw"]
[Sun Mar 08 02:10:08.477200 2026] [:error] [pid 19385:tid 19442] [client 217.182.139.33:60546] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aaxqAPf5_iv9UQMo0rkR5gAAAA0"]
[Sun Mar 08 02:10:10.456137 2026] [:error] [pid 42362:tid 42392] [client 217.182.139.33:60560] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aaxqAq-bLI2XD-bK6dC3EwAAAJY"]
[Sun Mar 08 02:10:12.548454 2026] [:error] [pid 42362:tid 42379] [client 217.182.139.33:60572] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaxqBK-bLI2XD-bK6dC3HAAAAIk"]
[Sun Mar 08 02:10:14.456711 2026] [:error] [pid 19387:tid 19503] [client 217.182.139.33:43058] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaxqBtf0nSGsjNvXT0MqoQAAAgM"]
[Sun Mar 08 02:10:16.534453 2026] [:error] [pid 19534:tid 19538] [client 217.182.139.33:43072] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaxqCIiRddMMzZb47n593AAAAEI"]
[Sun Mar 08 02:10:18.608780 2026] [:error] [pid 19387:tid 19504] [client 217.182.139.33:43080] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaxqCtf0nSGsjNvXT0MqrAAAAgQ"]
[Sun Mar 08 02:10:20.514889 2026] [:error] [pid 42362:tid 42380] [client 217.182.139.33:43094] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaxqDK-bLI2XD-bK6dC3LQAAAIo"]
[Sun Mar 08 02:10:22.463930 2026] [:error] [pid 19386:tid 19489] [client 217.182.139.33:43108] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aaxqDqOoo-DmQSb2USBdaQAAAdA"]
[Sun Mar 08 02:10:24.218199 2026] [:error] [pid 19534:tid 19545] [client 217.182.139.33:50478] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aaxqEIiRddMMzZb47n594wAAAEk"]
[Sun Mar 08 02:10:26.144010 2026] [:error] [pid 19534:tid 19548] [client 217.182.139.33:50490] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aaxqEoiRddMMzZb47n595QAAAEw"]
[Sun Mar 08 02:10:27.940654 2026] [:error] [pid 19386:tid 19483] [client 217.182.139.33:50494] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aaxqE6Ooo-DmQSb2USBdbgAAAco"]
[Sun Mar 08 02:10:29.841888 2026] [:error] [pid 19386:tid 19486] [client 217.182.139.33:50500] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aaxqFaOoo-DmQSb2USBdcgAAAc0"]
[Sun Mar 08 02:10:31.739471 2026] [:error] [pid 42362:tid 42379] [client 217.182.139.33:50508] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaxqF6-bLI2XD-bK6dC3NQAAAIk"]
[Sun Mar 08 02:10:33.641682 2026] [:error] [pid 19534:tid 19541] [client 217.182.139.33:39244] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aaxqGYiRddMMzZb47n597AAAAEU"]
[Sun Mar 08 02:10:35.579431 2026] [:error] [pid 42362:tid 42378] [client 217.182.139.33:39252] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaxqG6-bLI2XD-bK6dC3PAAAAIg"]
[Sun Mar 08 02:10:37.469119 2026] [:error] [pid 42362:tid 42375] [client 217.182.139.33:39266] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aaxqHa-bLI2XD-bK6dC3QwAAAIU"]
[Sun Mar 08 02:10:39.379188 2026] [:error] [pid 42362:tid 42373] [client 217.182.139.33:39272] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaxqH6-bLI2XD-bK6dC3SwAAAIM"]
[Sun Mar 08 02:10:41.281538 2026] [:error] [pid 19534:tid 19558] [client 217.182.139.33:39276] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aaxqIYiRddMMzZb47n59-QAAAFY"]
[Sun Mar 08 02:10:43.194809 2026] [:error] [pid 19534:tid 19537] [client 217.182.139.33:46854] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aaxqI4iRddMMzZb47n59_wAAAEE"]
[Sun Mar 08 02:10:45.084819 2026] [:error] [pid 42362:tid 42386] [client 217.182.139.33:46856] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaxqJa-bLI2XD-bK6dC3WgAAAJA"]
[Sun Mar 08 02:10:46.956347 2026] [:error] [pid 19385:tid 19432] [client 217.182.139.33:46866] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aaxqJvf5_iv9UQMo0rkR9gAAAAM"]
[Sun Mar 08 02:10:48.857991 2026] [:error] [pid 42362:tid 42372] [client 217.182.139.33:46882] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aaxqKK-bLI2XD-bK6dC3YQAAAII"]
[Sun Mar 08 02:10:50.879197 2026] [:error] [pid 19534:tid 19548] [client 217.182.139.33:46884] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aaxqKoiRddMMzZb47n5-CAAAAEw"]
[Sun Mar 08 02:10:52.775432 2026] [:error] [pid 19385:tid 19434] [client 217.182.139.33:46890] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaxqLPf5_iv9UQMo0rkR-QAAAAU"]
[Sun Mar 08 02:10:54.801870 2026] [:error] [pid 19534:tid 19542] [client 217.182.139.33:56466] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aaxqLoiRddMMzZb47n5-DAAAAEY"]
[Sun Mar 08 02:10:56.868011 2026] [:error] [pid 19387:tid 19505] [client 217.182.139.33:56474] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaxqMNf0nSGsjNvXT0MqyAAAAgU"]
[Sun Mar 08 02:10:58.902726 2026] [:error] [pid 19386:tid 19477] [client 217.182.139.33:56476] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaxqMqOoo-DmQSb2USBdgwAAAcQ"]
[Sun Mar 08 02:11:19.890606 2026] [:error] [pid 19534:tid 19536] [client 217.182.139.33:59870] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aaxqR4iRddMMzZb47n5-ZgAAAEA"]
[Sun Mar 08 02:11:21.724137 2026] [:error] [pid 19534:tid 19540] [client 217.182.139.33:59874] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aaxqSYiRddMMzZb47n5-awAAAEQ"]
[Sun Mar 08 02:11:23.749761 2026] [:error] [pid 42362:tid 42374] [client 217.182.139.33:38160] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaxqS6-bLI2XD-bK6dC4CAAAAIQ"]
[Sun Mar 08 02:11:25.634407 2026] [:error] [pid 19385:tid 19448] [client 217.182.139.33:38166] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aaxqTff5_iv9UQMo0rkSHQAAABM"]
[Sun Mar 08 02:11:27.655762 2026] [:error] [pid 19534:tid 19540] [client 217.182.139.33:38180] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aaxqT4iRddMMzZb47n5-fAAAAEQ"]
[Sun Mar 08 02:11:29.554163 2026] [:error] [pid 19386:tid 19478] [client 217.182.139.33:38188] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aaxqUaOoo-DmQSb2USBdjwAAAcU"]
[Sun Mar 08 02:11:31.428625 2026] [:error] [pid 19534:tid 19556] [client 217.182.139.33:38198] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aaxqU4iRddMMzZb47n5-fwAAAFQ"]
[Sun Mar 08 02:11:33.467929 2026] [:error] [pid 19387:tid 19515] [client 217.182.139.33:47590] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aaxqVdf0nSGsjNvXT0MrCAAAAg8"]
[Sun Mar 08 02:11:35.486765 2026] [:error] [pid 42362:tid 42375] [client 217.182.139.33:47592] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaxqV6-bLI2XD-bK6dC4KQAAAIU"]
[Sun Mar 08 02:11:37.353762 2026] [:error] [pid 19387:tid 19520] [client 217.182.139.33:47608] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aaxqWdf0nSGsjNvXT0MrCwAAAhQ"]
[Sun Mar 08 02:11:39.234963 2026] [:error] [pid 42362:tid 42389] [client 217.182.139.33:47622] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "aaxqW6-bLI2XD-bK6dC4KwAAAJM"]
[Sun Mar 08 02:11:41.280465 2026] [:error] [pid 19386:tid 19494] [client 217.182.139.33:47632] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaxqXaOoo-DmQSb2USBdkwAAAdU"]
[Sun Mar 08 02:11:43.152818 2026] [:error] [pid 19534:tid 19544] [client 217.182.139.33:47636] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaxqX4iRddMMzZb47n5-kgAAAEg"]
[Sun Mar 08 02:11:45.175592 2026] [:error] [pid 19534:tid 19548] [client 217.182.139.33:57500] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaxqYYiRddMMzZb47n5-mAAAAEw"]
[Sun Mar 08 02:11:47.065412 2026] [:error] [pid 19385:tid 19447] [client 217.182.139.33:57512] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaxqY_f5_iv9UQMo0rkSJQAAABI"]
[Sun Mar 08 02:11:49.114854 2026] [:error] [pid 19386:tid 19481] [client 217.182.139.33:57522] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaxqZaOoo-DmQSb2USBdlQAAAcg"]
[Sun Mar 08 02:11:50.973924 2026] [:error] [pid 19386:tid 19479] [client 217.182.139.33:57538] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaxqZqOoo-DmQSb2USBdlwAAAcY"]
[Sun Mar 08 02:11:53.002160 2026] [:error] [pid 19386:tid 19482] [client 217.182.139.33:57552] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaxqaaOoo-DmQSb2USBdnQAAAck"]
[Sun Mar 08 02:11:54.869466 2026] [:error] [pid 19534:tid 19538] [client 217.182.139.33:57568] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "aaxqaoiRddMMzZb47n5-nwAAAEI"]
[Sun Mar 08 02:11:56.899199 2026] [:error] [pid 19386:tid 19486] [client 217.182.139.33:57570] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaxqbKOoo-DmQSb2USBdnwAAAc0"]
[Sun Mar 08 02:11:58.772821 2026] [:error] [pid 19387:tid 19512] [client 217.182.139.33:57574] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aaxqbtf0nSGsjNvXT0MrGwAAAgw"]
[Sun Mar 08 02:12:00.788878 2026] [:error] [pid 19534:tid 19557] [client 217.182.139.33:57584] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "aaxqcIiRddMMzZb47n5-qwAAAFU"]
[Sun Mar 08 02:12:02.672821 2026] [:error] [pid 42362:tid 42371] [client 217.182.139.33:57600] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaxqcq-bLI2XD-bK6dC4RQAAAIE"]
[Sun Mar 08 02:12:04.687537 2026] [:error] [pid 19387:tid 19518] [client 217.182.139.33:42650] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaxqdNf0nSGsjNvXT0MrHwAAAhI"]
[Sun Mar 08 02:12:06.704954 2026] [:error] [pid 42362:tid 42393] [client 217.182.139.33:42652] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaxqdq-bLI2XD-bK6dC4TgAAAJc"]
[Sun Mar 08 02:12:08.580617 2026] [:error] [pid 42362:tid 42385] [client 217.182.139.33:42660] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aaxqeK-bLI2XD-bK6dC4VAAAAI8"]
[Sun Mar 08 02:12:10.599997 2026] [:error] [pid 19534:tid 19548] [client 217.182.139.33:42666] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaxqeoiRddMMzZb47n5-twAAAEw"]
[Sun Mar 08 02:12:12.502900 2026] [:error] [pid 19387:tid 19508] [client 217.182.139.33:42680] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aaxqfNf0nSGsjNvXT0MrIgAAAgg"]
[Sun Mar 08 02:12:14.513956 2026] [:error] [pid 19534:tid 19538] [client 217.182.139.33:35624] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aaxqfoiRddMMzZb47n5-vwAAAEI"]
[Sun Mar 08 02:12:16.543160 2026] [:error] [pid 19387:tid 19517] [client 217.182.139.33:35640] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aaxqgNf0nSGsjNvXT0MrIwAAAhE"]
[Sun Mar 08 06:47:00.711296 2026] [:error] [pid 22788:tid 22876] [client 122.51.236.174:48092] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aayq5Ehwluk21OG9mSfsnQAAA5U"]
[Sun Mar 08 07:20:56.213669 2026] [:error] [pid 22787:tid 22851] [client 43.153.76.247:42356] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aayy2EF9MGMhk9pT4z78vwAAA1c"]
[Sun Mar 08 07:22:50.926316 2026] [:error] [pid 43671:tid 43727] [client 51.68.235.38:36974] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aayzSq6AdwroU1gT3XF_sAAAAEQ"]
[Sun Mar 08 07:22:52.962167 2026] [:error] [pid 22788:tid 22867] [client 51.68.235.38:52430] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aayzTEhwluk21OG9mSf0BAAAA4w"]
[Sun Mar 08 07:22:54.857738 2026] [:error] [pid 22788:tid 22861] [client 51.68.235.38:49602] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aayzTkhwluk21OG9mSf0DAAAA4Y"]
[Sun Mar 08 07:22:56.785822 2026] [:error] [pid 22787:tid 22847] [client 51.68.235.38:49610] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aayzUEF9MGMhk9pT4z79SgAAA1M"]
[Sun Mar 08 07:22:58.655865 2026] [:error] [pid 22787:tid 22850] [client 51.68.235.38:49616] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aayzUkF9MGMhk9pT4z79TQAAA1Y"]
[Sun Mar 08 07:23:00.587196 2026] [:error] [pid 22788:tid 22870] [client 51.68.235.38:49632] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aayzVEhwluk21OG9mSf0FQAAA48"]
[Sun Mar 08 07:23:02.690603 2026] [:error] [pid 22790:tid 22906] [client 51.68.235.38:49638] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aayzVhXbGDWrzD_dTOc8-wAAA9g"]
[Sun Mar 08 07:23:05.708342 2026] [:error] [pid 22787:tid 22844] [client 51.68.235.38:58220] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aayzWUF9MGMhk9pT4z79VwAAA1A"]
[Sun Mar 08 07:23:09.481531 2026] [:error] [pid 22790:tid 22884] [client 51.68.235.38:58222] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aayzXRXbGDWrzD_dTOc9CAAAA8I"]
[Sun Mar 08 11:20:04.345679 2026] [:error] [pid 22790:tid 22905] [client 37.187.226.31:48988] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aazq5BXbGDWrzD_dTOcF-gAAA9c"]
[Sun Mar 08 13:09:58.869530 2026] [:error] [pid 22790:tid 22893] [client 122.51.236.174:43360] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa0EphXbGDWrzD_dTOdF9gAAA8s"]
[Sun Mar 08 13:24:16.462223 2026] [:error] [pid 22788:tid 22860] [client 223.223.128.155:52437] [client 223.223.128.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.223.128.155, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aa0IAEhwluk21OG9mSdkHwAAA4U"]
[Sun Mar 08 13:24:16.467747 2026] [:error] [pid 22788:tid 22860] [client 223.223.128.155:52437] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 08 14:54:34.193079 2026] [:error] [pid 22788:tid 22869] [client 43.134.186.61:52278] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa0dKkhwluk21OG9mSd-uwAAA44"]
[Sun Mar 08 18:41:47.811231 2026] [:error] [pid 22788:tid 22861] [client 178.151.245.162:49204] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa1Sa0hwluk21OG9mScKgQAAA4Y"]
[Sun Mar 08 18:41:49.678939 2026] [:error] [pid 22561:tid 22577] [client 178.151.245.162:51696] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aa1SbcIVn0KLevwXc5FLwQAAAUw"]
[Sun Mar 08 18:41:51.568575 2026] [:error] [pid 22790:tid 22889] [client 178.151.245.162:51700] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aa1SbxXbGDWrzD_dTOfoJQAAA8c"]
[Sun Mar 08 18:41:53.500601 2026] [:error] [pid 22786:tid 22811] [client 178.151.245.162:51714] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aa1ScXPuJewMN2jPbdX8CgAAAwo"]
[Sun Mar 08 18:41:55.576404 2026] [:error] [pid 22786:tid 22813] [client 178.151.245.162:51718] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aa1Sc3PuJewMN2jPbdX8EQAAAww"]
[Sun Mar 08 18:41:57.483006 2026] [:error] [pid 22790:tid 22897] [client 178.151.245.162:51734] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa1SdRXbGDWrzD_dTOfoKgAAA88"]
[Sun Mar 08 18:41:59.382301 2026] [:error] [pid 22786:tid 22802] [client 178.151.245.162:51744] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aa1Sd3PuJewMN2jPbdX8KgAAAwE"]
[Sun Mar 08 18:42:01.297163 2026] [:error] [pid 22668:tid 22739] [client 178.151.245.162:43124] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aa1SeemzLHpblwnQgPgR9QAAAoc"]
[Sun Mar 08 18:42:03.208248 2026] [:error] [pid 22788:tid 22855] [client 178.151.245.162:43140] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aa1Se0hwluk21OG9mScKjwAAA4A"]
[Sun Mar 08 18:42:05.303827 2026] [:error] [pid 22790:tid 22902] [client 178.151.245.162:43144] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aa1SfRXbGDWrzD_dTOfoNAAAA9Q"]
[Sun Mar 08 18:42:07.417232 2026] [:error] [pid 22790:tid 22891] [client 178.151.245.162:43160] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa1SfxXbGDWrzD_dTOfoNwAAA8k"]
[Sun Mar 08 18:42:09.502900 2026] [:error] [pid 22787:tid 22831] [client 178.151.245.162:49256] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa1SgUF9MGMhk9pT4z4MLwAAA0M"]
[Sun Mar 08 18:42:11.598944 2026] [:error] [pid 22787:tid 22851] [client 178.151.245.162:49264] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aa1Sg0F9MGMhk9pT4z4MNQAAA1c"]
[Sun Mar 08 18:42:13.520812 2026] [:error] [pid 22788:tid 22870] [client 178.151.245.162:49268] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aa1ShUhwluk21OG9mScKoQAAA48"]
[Sun Mar 08 18:42:15.603643 2026] [:error] [pid 22786:tid 22802] [client 178.151.245.162:49270] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aa1Sh3PuJewMN2jPbdX8TAAAAwE"]
[Sun Mar 08 18:42:17.688053 2026] [:error] [pid 22788:tid 22878] [client 178.151.245.162:49284] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "aa1SiUhwluk21OG9mScKrgAAA5c"]
[Sun Mar 08 18:42:19.613647 2026] [:error] [pid 22790:tid 22886] [client 178.151.245.162:50226] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "aa1SixXbGDWrzD_dTOfoSAAAA8Q"]
[Sun Mar 08 18:42:21.525832 2026] [:error] [pid 22667:tid 22705] [client 178.151.245.162:50242] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "aa1SjeG7qk1roo-TRWOigAAAAkA"]
[Sun Mar 08 18:42:23.444670 2026] [:error] [pid 22790:tid 22906] [client 178.151.245.162:50256] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "aa1SjxXbGDWrzD_dTOfoWgAAA9g"]
[Sun Mar 08 18:42:25.524448 2026] [:error] [pid 22788:tid 22856] [client 178.151.245.162:50264] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa1SkUhwluk21OG9mScKtQAAA4E"]
[Sun Mar 08 18:42:27.437166 2026] [:error] [pid 22667:tid 22715] [client 178.151.245.162:50266] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "aa1Sk-G7qk1roo-TRWOiiAAAAko"]
[Sun Mar 08 18:42:29.516043 2026] [:error] [pid 22786:tid 22825] [client 178.151.245.162:44240] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa1SlXPuJewMN2jPbdX8iAAAAxg"]
[Sun Mar 08 18:42:31.419844 2026] [:error] [pid 22786:tid 22825] [client 178.151.245.162:44244] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "aa1Sl3PuJewMN2jPbdX8kQAAAxg"]
[Sun Mar 08 18:42:33.304255 2026] [:error] [pid 22786:tid 22819] [client 178.151.245.162:44260] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "aa1SmXPuJewMN2jPbdX8lwAAAxI"]
[Sun Mar 08 18:42:35.339340 2026] [:error] [pid 22790:tid 22905] [client 178.151.245.162:44266] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa1SmxXbGDWrzD_dTOfoYgAAA9c"]
[Sun Mar 08 18:42:37.227521 2026] [:error] [pid 22786:tid 22822] [client 178.151.245.162:44272] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aa1SnXPuJewMN2jPbdX8pwAAAxU"]
[Sun Mar 08 18:42:39.215726 2026] [:error] [pid 22668:tid 22744] [client 178.151.245.162:44288] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "aa1Sn-mzLHpblwnQgPgSBwAAAow"]
[Sun Mar 08 18:42:41.101311 2026] [:error] [pid 22668:tid 22741] [client 178.151.245.162:51434] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa1SoemzLHpblwnQgPgSCQAAAok"]
[Sun Mar 08 18:42:43.117273 2026] [:error] [pid 22786:tid 22822] [client 178.151.245.162:51448] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aa1So3PuJewMN2jPbdX8yAAAAxU"]
[Sun Mar 08 18:42:45.006448 2026] [:error] [pid 22786:tid 22825] [client 178.151.245.162:51460] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa1SpXPuJewMN2jPbdX80AAAAxg"]
[Sun Mar 08 18:43:08.159817 2026] [:error] [pid 22788:tid 22859] [client 178.151.245.162:44008] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "aa1SvEhwluk21OG9mScK2QAAA4Q"]
[Sun Mar 08 18:43:10.151176 2026] [:error] [pid 22788:tid 22865] [client 178.151.245.162:38344] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aa1Svkhwluk21OG9mScK2wAAA4o"]
[Sun Mar 08 18:43:12.035316 2026] [:error] [pid 22788:tid 22861] [client 178.151.245.162:38356] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "aa1SwEhwluk21OG9mScK3QAAA4Y"]
[Sun Mar 08 18:43:14.041547 2026] [:error] [pid 22786:tid 22801] [client 178.151.245.162:38358] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "aa1SwnPuJewMN2jPbdX9OgAAAwA"]
[Sun Mar 08 18:43:16.031591 2026] [:error] [pid 22786:tid 22810] [client 178.151.245.162:38364] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "aa1SxHPuJewMN2jPbdX9QAAAAwk"]
[Sun Mar 08 18:43:18.017642 2026] [:error] [pid 22786:tid 22817] [client 178.151.245.162:38370] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aa1SxnPuJewMN2jPbdX9QwAAAxA"]
[Sun Mar 08 18:43:20.025110 2026] [:error] [pid 22790:tid 22888] [client 178.151.245.162:53550] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa1SyBXbGDWrzD_dTOfopAAAA8Y"]
[Sun Mar 08 18:43:22.019859 2026] [:error] [pid 22790:tid 22906] [client 178.151.245.162:53560] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa1SyhXbGDWrzD_dTOfopgAAA9g"]
[Sun Mar 08 18:43:24.029811 2026] [:error] [pid 22787:tid 22847] [client 178.151.245.162:53564] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "aa1SzEF9MGMhk9pT4z4MagAAA1M"]
[Sun Mar 08 18:43:26.016581 2026] [:error] [pid 22790:tid 22893] [client 178.151.245.162:53574] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aa1SzhXbGDWrzD_dTOfosgAAA8s"]
[Sun Mar 08 18:43:28.001949 2026] [:error] [pid 22786:tid 22814] [client 178.151.245.162:53580] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aa1S0HPuJewMN2jPbdX9XAAAAw0"]
[Sun Mar 08 18:43:29.848008 2026] [:error] [pid 22788:tid 22864] [client 178.151.245.162:52462] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa1S0Uhwluk21OG9mScK9QAAA4k"]
[Sun Mar 08 18:43:31.858887 2026] [:error] [pid 22790:tid 22891] [client 178.151.245.162:52464] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aa1S0xXbGDWrzD_dTOfovgAAA8k"]
[Sun Mar 08 18:43:33.840446 2026] [:error] [pid 22790:tid 22889] [client 178.151.245.162:52480] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "aa1S1RXbGDWrzD_dTOfowAAAA8c"]
[Sun Mar 08 18:43:35.849003 2026] [:error] [pid 22790:tid 22885] [client 178.151.245.162:52496] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "aa1S1xXbGDWrzD_dTOfoxQAAA8M"]
[Sun Mar 08 18:43:37.830370 2026] [:error] [pid 22790:tid 22891] [client 178.151.245.162:52504] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aa1S2RXbGDWrzD_dTOfoyQAAA8k"]
[Sun Mar 08 18:43:39.826661 2026] [:error] [pid 22790:tid 22901] [client 178.151.245.162:45090] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aa1S2xXbGDWrzD_dTOfo0QAAA9M"]
[Sun Mar 08 18:43:41.825220 2026] [:error] [pid 22790:tid 22894] [client 178.151.245.162:45098] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aa1S3RXbGDWrzD_dTOfo1gAAA8w"]
[Sun Mar 08 18:43:43.827080 2026] [:error] [pid 22788:tid 22855] [client 178.151.245.162:45108] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aa1S30hwluk21OG9mScLAgAAA4A"]
[Sun Mar 08 18:43:45.831727 2026] [:error] [pid 22669:tid 22781] [client 178.151.245.162:45122] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa1S4WvqAhy8LIaua-p-UQAAAtY"]
[Sun Mar 08 18:43:47.827980 2026] [:error] [pid 22788:tid 22863] [client 178.151.245.162:45136] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "aa1S40hwluk21OG9mScLBQAAA4g"]
[Sun Mar 08 18:43:49.814564 2026] [:error] [pid 22788:tid 22865] [client 178.151.245.162:58500] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "aa1S5Uhwluk21OG9mScLCAAAA4o"]
[Sun Mar 08 18:43:51.652818 2026] [:error] [pid 22786:tid 22804] [client 178.151.245.162:58512] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "aa1S53PuJewMN2jPbdX9egAAAwM"]
[Sun Mar 08 19:20:57.473845 2026] [:error] [pid 22790:tid 22889] [client 62.84.185.63:9256] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aa1bmRXbGDWrzD_dTOf4WwAAA8c"]
[Sun Mar 08 19:20:59.482655 2026] [:error] [pid 22786:tid 22817] [client 62.84.185.63:9260] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aa1bm3PuJewMN2jPbdUUYwAAAxA"]
[Sun Mar 08 19:21:01.584666 2026] [:error] [pid 22561:tid 22582] [client 62.84.185.63:30028] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aa1bncIVn0KLevwXc5FNowAAAVE"]
[Sun Mar 08 19:21:03.837784 2026] [:error] [pid 22788:tid 22870] [client 62.84.185.63:30044] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aa1bn0hwluk21OG9mScWAwAAA48"]
[Sun Mar 08 19:21:05.857528 2026] [:error] [pid 22561:tid 22568] [client 62.84.185.63:30058] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aa1bocIVn0KLevwXc5FNpAAAAUM"]
[Sun Mar 08 19:21:08.116955 2026] [:error] [pid 22787:tid 22847] [client 62.84.185.63:30064] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa1bpEF9MGMhk9pT4z4UEgAAA1M"]
[Sun Mar 08 19:21:10.960758 2026] [:error] [pid 22561:tid 22577] [client 62.84.185.63:14124] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa1bpsIVn0KLevwXc5FNpgAAAUw"]
[Sun Mar 08 19:21:13.067859 2026] [:error] [pid 22790:tid 22903] [client 62.84.185.63:14128] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aa1bqRXbGDWrzD_dTOf4dwAAA9U"]
[Sun Mar 08 19:21:15.466428 2026] [:error] [pid 22667:tid 22710] [client 62.84.185.63:14136] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aa1bq-G7qk1roo-TRWOobgAAAkU"]
[Sun Mar 08 19:21:17.635357 2026] [:error] [pid 22790:tid 22899] [client 62.84.185.63:14152] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aa1brRXbGDWrzD_dTOf4jwAAA9E"]
[Sun Mar 08 19:21:19.750778 2026] [:error] [pid 22786:tid 22809] [client 62.84.185.63:16704] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aa1br3PuJewMN2jPbdUUcQAAAwg"]
[Sun Mar 08 19:21:21.777687 2026] [:error] [pid 22786:tid 22823] [client 62.84.185.63:16716] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa1bsXPuJewMN2jPbdUUeQAAAxY"]
[Sun Mar 08 19:21:25.754779 2026] [:error] [pid 22667:tid 22709] [client 62.84.185.63:16732] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa1bteG7qk1roo-TRWOocgAAAkQ"]
[Sun Mar 08 20:26:02.428326 2026] [:error] [pid 22790:tid 22898] [client 203.2.64.59:57418] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa1q2hXbGDWrzD_dTOcVxwAAA9A"]
[Sun Mar 08 21:08:33.835850 2026] [:error] [pid 22669:tid 22769] [client 43.166.244.66:36798] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa100WvqAhy8LIaua-qTtgAAAso"]
[Sun Mar 08 21:14:35.216863 2026] [:error] [pid 22667:tid 22723] [client 170.106.140.110:35582] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa12O-G7qk1roo-TRWO31gAAAlI"]
[Sun Mar 08 22:22:31.572657 2026] [:error] [pid 22667:tid 22712] [client 35.196.139.141:61975] [client 35.196.139.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.139.141, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aa2GJ-G7qk1roo-TRWPIMQAAAkc"]
[Sun Mar 08 22:22:31.576473 2026] [:error] [pid 22667:tid 22712] [client 35.196.139.141:61975] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 08 22:22:35.476856 2026] [:error] [pid 22667:tid 22716] [client 35.196.139.141:61975] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aa2GK-G7qk1roo-TRWPIQAAAAks"]
[Sun Mar 08 22:22:35.936090 2026] [:error] [pid 22669:tid 22778] [client 35.196.139.141:64554] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aa2GK2vqAhy8LIaua-q8IwAAAtM"]
[Sun Mar 08 22:22:36.504635 2026] [:error] [pid 22787:tid 22837] [client 35.196.139.141:64451] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aa2GLEF9MGMhk9pT4z4zQwAAA0k"]
[Sun Mar 08 22:22:36.992184 2026] [:error] [pid 10522:tid 10543] [client 35.196.139.141:49643] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aa2GLFEZGQssSI3mZTMq5AAAAYc"]
[Sun Mar 08 22:22:37.508261 2026] [:error] [pid 22669:tid 22776] [client 35.196.139.141:63652] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aa2GLWvqAhy8LIaua-q8JQAAAtE"]
[Sun Mar 08 22:22:37.999790 2026] [:error] [pid 22669:tid 22766] [client 35.196.139.141:60448] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aa2GLWvqAhy8LIaua-q8JwAAAsc"]
[Sun Mar 08 22:22:38.462756 2026] [:error] [pid 43671:tid 43735] [client 35.196.139.141:54323] [client 35.196.139.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aa2GLq6AdwroU1gT3XH50wAAAEw"]
[Mon Mar 09 03:15:55.109520 2026] [:error] [pid 34288:tid 34293] [client 43.138.68.113:33568] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa3K6zhfL2VYzHAuVyX1nQAAAME"]
[Mon Mar 09 03:27:53.238800 2026] [:error] [pid 38777:tid 38800] [client 79.117.167.208:8712] [client 79.117.167.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.117.167.208, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aa3NufYEAfI859jIEjRH8wAAAMM"]
[Mon Mar 09 03:27:53.244197 2026] [:error] [pid 38777:tid 38800] [client 79.117.167.208:8712] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 04:20:25.785277 2026] [:error] [pid 6074:tid 6102] [client 145.239.65.175:54534] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa3aCRgvXHMVGYw_ElyofgAAAMs"]
[Mon Mar 09 04:20:27.769047 2026] [:error] [pid 17485:tid 17497] [client 145.239.65.175:40686] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aa3aC9QOL_kxQEc1PTA2RQAAAQk"]
[Mon Mar 09 04:20:29.785736 2026] [:error] [pid 6074:tid 6107] [client 145.239.65.175:40698] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa3aDRgvXHMVGYw_ElyoiQAAANA"]
[Mon Mar 09 09:33:31.266675 2026] [:error] [pid 2145:tid 2180] [client 121.229.185.160:46034] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa4ja3czzpD9XHtKwuA28AAAAUw"]
[Mon Mar 09 10:36:44.104529 2026] [:error] [pid 6074:tid 6109] [client 43.155.188.157:44014] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa4yPBgvXHMVGYw_ElxkuwAAANI"]
[Mon Mar 09 11:59:16.203115 2026] [:error] [pid 6074:tid 6100] [client 74.244.110.130:19295] [client 74.244.110.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.110.130, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aa5FlBgvXHMVGYw_ElyEWgAAAMk"]
[Mon Mar 09 11:59:16.207960 2026] [:error] [pid 6074:tid 6100] [client 74.244.110.130:19295] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 13:04:07.801629 2026] [:error] [pid 2145:tid 2172] [client 217.182.194.3:35890] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aa5Ux3czzpD9XHtKwuDUcgAAAUY"]
[Mon Mar 09 13:04:09.881228 2026] [:error] [pid 2145:tid 2189] [client 217.182.194.3:55924] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aa5UyXczzpD9XHtKwuDUdgAAAVE"]
[Mon Mar 09 13:04:11.840500 2026] [:error] [pid 17485:tid 17511] [client 217.182.194.3:55928] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aa5Uy9QOL_kxQEc1PTAGZwAAARc"]
[Mon Mar 09 13:04:13.853836 2026] [:error] [pid 6074:tid 6099] [client 217.182.194.3:55934] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aa5UzRgvXHMVGYw_Elya1wAAAMg"]
[Mon Mar 09 13:04:15.962401 2026] [:error] [pid 17485:tid 17493] [client 217.182.194.3:55936] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aa5Uz9QOL_kxQEc1PTAGdwAAAQU"]
[Mon Mar 09 13:04:17.921963 2026] [:error] [pid 5779:tid 5874] [client 217.182.194.3:55952] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa5U0QaHbHwtklaurgWjqAAAABM"]
[Mon Mar 09 13:04:19.772698 2026] [:error] [pid 2145:tid 2167] [client 217.182.194.3:58012] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa5U03czzpD9XHtKwuDUjQAAAUE"]
[Mon Mar 09 13:04:21.761314 2026] [:error] [pid 5779:tid 5858] [client 217.182.194.3:58026] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aa5U1QaHbHwtklaurgWjqwAAAAM"]
[Mon Mar 09 13:04:23.692258 2026] [:error] [pid 2145:tid 2192] [client 217.182.194.3:58030] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aa5U13czzpD9XHtKwuDUnwAAAVQ"]
[Mon Mar 09 13:04:25.828832 2026] [:error] [pid 17485:tid 17512] [client 217.182.194.3:58036] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aa5U2dQOL_kxQEc1PTAGjwAAARg"]
[Mon Mar 09 13:04:27.846567 2026] [:error] [pid 17485:tid 17493] [client 217.182.194.3:58044] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aa5U29QOL_kxQEc1PTAGogAAAQU"]
[Mon Mar 09 13:04:30.189287 2026] [:error] [pid 2145:tid 2189] [client 217.182.194.3:42222] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa5U3nczzpD9XHtKwuDU8gAAAVE"]
[Mon Mar 09 13:04:33.872502 2026] [:error] [pid 17485:tid 17500] [client 217.182.194.3:42236] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa5U4dQOL_kxQEc1PTAG1AAAAQw"]
[Mon Mar 09 15:00:57.289212 2026] [:error] [pid 5787:tid 5936] [client 176.57.188.217:32832] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa5wKbGpMgQ18gGUaFMSpwAAAI4"]
[Mon Mar 09 15:01:01.376158 2026] [:error] [pid 17485:tid 17512] [client 176.57.188.217:32836] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa5wLdQOL_kxQEc1PTBrPwAAARg"]
[Mon Mar 09 16:49:16.197720 2026] [:error] [pid 44504:tid 44551] [client 61.3.116.200:54989] [client 61.3.116.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.116.200, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aa6JjHri56-8oxPimmgAEQAAAhE"]
[Mon Mar 09 16:49:16.204102 2026] [:error] [pid 44504:tid 44551] [client 61.3.116.200:54989] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 17:22:09.336884 2026] [:error] [pid 44503:tid 44531] [client 104.37.174.183:41776] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.174.183, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aa6RQcpGKFA8jlKDDh16KAAAAdg"]
[Mon Mar 09 17:22:09.342899 2026] [:error] [pid 44503:tid 44531] [client 104.37.174.183:41776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 09 18:18:41.886743 2026] [:error] [pid 44503:tid 44526] [client 216.234.215.100:50281] [client 216.234.215.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.215.100, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "aa6egcpGKFA8jlKDDh2q5gAAAdM"]
[Mon Mar 09 18:18:41.896252 2026] [:error] [pid 44503:tid 44526] [client 216.234.215.100:50281] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 22:19:47.552788 2026] [:error] [pid 5787:tid 5927] [client 5.135.131.226:57290] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa7XA7GpMgQ18gGUaFP-jQAAAIU"]
[Mon Mar 09 22:19:49.574895 2026] [:error] [pid 44503:tid 44513] [client 5.135.131.226:55556] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aa7XBcpGKFA8jlKDDh1NqAAAAcY"]
[Mon Mar 09 22:19:51.503816 2026] [:error] [pid 5787:tid 5940] [client 5.135.131.226:55560] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa7XB7GpMgQ18gGUaFP-mQAAAJI"]
[Mon Mar 09 22:55:54.027051 2026] [:error] [pid 44504:tid 44553] [client 223.244.35.77:33375] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa7fenri56-8oxPimmhinQAAAhM"]
[Tue Mar 10 00:50:18.380212 2026] [:error] [pid 64615:tid 64694] [client 45.33.121.161:42908] [client 45.33.121.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.33.121.161, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "aa76SiTfqTdxLs_cfGQT4wAAAM8"]
[Tue Mar 10 00:50:18.384266 2026] [:error] [pid 64615:tid 64694] [client 45.33.121.161:42908] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 10 04:55:31.930743 2026] [:error] [pid 7912:tid 8067] [client 43.130.102.223:58884] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa8zwyV7wJYuQ3GZEAVoPwAAAIM"]
[Tue Mar 10 05:02:19.034692 2026] [:error] [pid 8193:tid 8227] [client 162.62.213.187:33808] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa81Wx27LTs3sNpMSvwJEQAAAMc"]
[Tue Mar 10 05:12:49.732076 2026] [:error] [pid 32149:tid 32161] [client 34.182.17.48:33148] [client 34.182.17.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "aa830Wdqak0GlFD4uMIayAAAAQE"]
[Tue Mar 10 05:21:26.540116 2026] [:error] [pid 32149:tid 32181] [client 111.172.249.49:40383] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa851mdqak0GlFD4uMIe5wAAARQ"]
[Tue Mar 10 05:23:22.310727 2026] [:error] [pid 7908:tid 8058] [client 62.60.131.218:58580] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa86SsY8gEjgYKb1A_jJCAAAAFc"]
[Tue Mar 10 05:40:49.309863 2026] [:error] [pid 7912:tid 8079] [client 62.60.131.218:57230] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa8-YSV7wJYuQ3GZEAVyowAAAI8"]
[Tue Mar 10 06:01:18.539873 2026] [:error] [pid 7912:tid 8085] [client 104.28.159.135:26794] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "aa9DLiV7wJYuQ3GZEAV4FwAAAJU"]
[Tue Mar 10 06:47:30.664193 2026] [:error] [pid 31981:tid 32137] [client 51.75.119.75:43586] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aa9OArAfo6Bks64fCDZosAAAAIQ"]
[Tue Mar 10 06:47:32.814350 2026] [:error] [pid 37324:tid 37350] [client 51.75.119.75:58990] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aa9OBGVvKYS3ogzUMPdBXAAAAQk"]
[Tue Mar 10 06:47:34.963692 2026] [:error] [pid 31981:tid 32147] [client 51.75.119.75:60022] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aa9OBrAfo6Bks64fCDZoswAAAI4"]
[Tue Mar 10 06:47:36.937688 2026] [:error] [pid 37324:tid 37349] [client 51.75.119.75:60024] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aa9OCGVvKYS3ogzUMPdBYwAAAQg"]
[Tue Mar 10 06:47:39.077874 2026] [:error] [pid 32295:tid 32318] [client 51.75.119.75:60040] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aa9OC4_FltxBAKWrlwjS3gAAAMA"]
[Tue Mar 10 06:47:41.119461 2026] [:error] [pid 37324:tid 37345] [client 51.75.119.75:60052] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa9ODWVvKYS3ogzUMPdBbQAAAQQ"]
[Tue Mar 10 06:47:43.228900 2026] [:error] [pid 37324:tid 37341] [client 51.75.119.75:60062] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa9OD2VvKYS3ogzUMPdBcgAAAQA"]
[Tue Mar 10 06:47:45.273410 2026] [:error] [pid 31977:tid 32112] [client 51.75.119.75:59414] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aa9OES_lkX6-Mo89SmHkcwAAAEc"]
[Tue Mar 10 06:47:47.441274 2026] [:error] [pid 32295:tid 32331] [client 51.75.119.75:59420] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aa9OE4_FltxBAKWrlwjS5QAAAM0"]
[Tue Mar 10 06:47:49.480591 2026] [:error] [pid 37324:tid 37345] [client 51.75.119.75:59422] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aa9OFWVvKYS3ogzUMPdBfQAAAQQ"]
[Tue Mar 10 06:47:51.529034 2026] [:error] [pid 32295:tid 32318] [client 51.75.119.75:59430] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aa9OF4_FltxBAKWrlwjS-AAAAMA"]
[Tue Mar 10 06:47:53.906604 2026] [:error] [pid 31981:tid 32140] [client 51.75.119.75:49586] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9OGbAfo6Bks64fCDZouwAAAIc"]
[Tue Mar 10 06:47:57.788429 2026] [:error] [pid 31973:tid 32072] [client 51.75.119.75:49588] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9OHdQrmAcL67IqSToFuAAAAAc"]
[Tue Mar 10 07:22:29.144988 2026] [:error] [pid 31977:tid 32123] [client 51.161.86.195:52042] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aa9WNS_lkX6-Mo89SmHpGAAAAFI"]
[Tue Mar 10 07:22:29.229907 2026] [:error] [pid 37324:tid 37342] [client 51.161.86.195:52018] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aa9WNWVvKYS3ogzUMPdSxgAAAQE"]
[Tue Mar 10 07:22:29.460983 2026] [:error] [pid 32295:tid 32331] [client 51.161.86.195:52034] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aa9WNY_FltxBAKWrlwjc7QAAAM0"]
[Tue Mar 10 07:22:29.490136 2026] [:error] [pid 37324:tid 37359] [client 51.161.86.195:52050] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "aa9WNWVvKYS3ogzUMPdSxwAAARI"]
[Tue Mar 10 07:22:30.799107 2026] [:error] [pid 31977:tid 32110] [client 51.161.86.195:52004] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aa9WNi_lkX6-Mo89SmHpGQAAAEU"]
[Tue Mar 10 07:22:30.845295 2026] [:error] [pid 37324:tid 37354] [client 51.161.86.195:52060] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WNmVvKYS3ogzUMPdSzwAAAQ0"]
[Tue Mar 10 07:22:30.991905 2026] [:error] [pid 31981:tid 32153] [client 51.161.86.195:52074] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aa9WNrAfo6Bks64fCDZvZQAAAJI"]
[Tue Mar 10 07:22:31.371810 2026] [:error] [pid 31981:tid 32155] [client 51.161.86.195:52090] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aa9WN7Afo6Bks64fCDZvZgAAAJM"]
[Tue Mar 10 07:22:31.406082 2026] [:error] [pid 31981:tid 32146] [client 51.161.86.195:52098] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aa9WN7Afo6Bks64fCDZvZwAAAI0"]
[Tue Mar 10 07:22:31.413368 2026] [:error] [pid 32295:tid 32324] [client 51.161.86.195:52102] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "aa9WN4_FltxBAKWrlwjc8AAAAMY"]
[Tue Mar 10 07:22:32.619959 2026] [:error] [pid 31973:tid 32086] [client 51.161.86.195:52108] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aa9WONQrmAcL67IqSToHwgAAABU"]
[Tue Mar 10 07:22:32.813674 2026] [:error] [pid 32295:tid 32330] [client 51.161.86.195:52116] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aa9WOI_FltxBAKWrlwjc8gAAAMw"]
[Tue Mar 10 07:22:33.230675 2026] [:error] [pid 32295:tid 32334] [client 51.161.86.195:52122] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aa9WOY_FltxBAKWrlwjc9AAAANA"]
[Tue Mar 10 07:22:33.274657 2026] [:error] [pid 32295:tid 32320] [client 51.161.86.195:52136] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aa9WOY_FltxBAKWrlwjc9QAAAMI"]
[Tue Mar 10 07:22:33.687815 2026] [:error] [pid 31981:tid 32133] [client 51.161.86.195:52148] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "aa9WObAfo6Bks64fCDZvaQAAAIA"]
[Tue Mar 10 07:22:33.779168 2026] [:error] [pid 32295:tid 32332] [client 51.161.86.195:52150] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WOY_FltxBAKWrlwjc9wAAAM4"]
[Tue Mar 10 07:22:34.638515 2026] [:error] [pid 32295:tid 32337] [client 51.161.86.195:52158] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WOo_FltxBAKWrlwjc-AAAANM"]
[Tue Mar 10 07:22:34.720717 2026] [:error] [pid 32295:tid 32328] [client 51.161.86.195:52162] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aa9WOo_FltxBAKWrlwjc-gAAAMo"]
[Tue Mar 10 07:22:34.740869 2026] [:error] [pid 32295:tid 32329] [client 51.161.86.195:52168] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aa9WOo_FltxBAKWrlwjc-wAAAMs"]
[Tue Mar 10 07:22:35.217264 2026] [:error] [pid 37324:tid 37353] [client 51.161.86.195:52182] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aa9WO2VvKYS3ogzUMPdS1QAAAQw"]
[Tue Mar 10 07:22:35.613428 2026] [:error] [pid 37324:tid 37365] [client 51.161.86.195:37112] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aa9WO2VvKYS3ogzUMPdS2wAAARg"]
[Tue Mar 10 07:22:35.644065 2026] [:error] [pid 37324:tid 37356] [client 51.161.86.195:37116] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "aa9WO2VvKYS3ogzUMPdS3AAAAQ8"]
[Tue Mar 10 07:22:36.183866 2026] [:error] [pid 37324:tid 37351] [client 51.161.86.195:37130] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WPGVvKYS3ogzUMPdS3QAAAQo"]
[Tue Mar 10 07:22:36.554593 2026] [:error] [pid 37324:tid 37354] [client 51.161.86.195:37142] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa9WPGVvKYS3ogzUMPdS4AAAAQ0"]
[Tue Mar 10 07:22:36.770214 2026] [:error] [pid 37324:tid 37362] [client 51.161.86.195:37154] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa9WPGVvKYS3ogzUMPdS4QAAARU"]
[Tue Mar 10 07:22:37.307179 2026] [:error] [pid 37324:tid 37357] [client 51.161.86.195:37160] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa9WPWVvKYS3ogzUMPdS5AAAARA"]
[Tue Mar 10 07:22:37.575675 2026] [:error] [pid 37324:tid 37349] [client 51.161.86.195:37174] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa9WPWVvKYS3ogzUMPdS5gAAAQg"]
[Tue Mar 10 07:22:37.583726 2026] [:error] [pid 37324:tid 37360] [client 51.161.86.195:37182] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WPWVvKYS3ogzUMPdS5wAAARM"]
[Tue Mar 10 07:22:37.776465 2026] [:error] [pid 37324:tid 37342] [client 51.161.86.195:37186] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa9WPWVvKYS3ogzUMPdS6AAAAQE"]
[Tue Mar 10 07:22:38.560782 2026] [:error] [pid 32295:tid 32325] [client 51.161.86.195:37202] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aa9WPo_FltxBAKWrlwjc_wAAAMc"]
[Tue Mar 10 07:22:38.742016 2026] [:error] [pid 32295:tid 32335] [client 51.161.86.195:37208] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aa9WPo_FltxBAKWrlwjdAQAAANE"]
[Tue Mar 10 07:22:39.534153 2026] [:error] [pid 31973:tid 32072] [client 51.161.86.195:37214] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aa9WP9QrmAcL67IqSToHwwAAAAc"]
[Tue Mar 10 07:22:39.567099 2026] [:error] [pid 31973:tid 32084] [client 51.161.86.195:37224] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aa9WP9QrmAcL67IqSToHxAAAABM"]
[Tue Mar 10 07:22:39.824573 2026] [:error] [pid 31977:tid 32109] [client 51.161.86.195:37236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "aa9WPy_lkX6-Mo89SmHpHgAAAEQ"]
[Tue Mar 10 07:22:39.922514 2026] [:error] [pid 31973:tid 32070] [client 51.161.86.195:37240] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WP9QrmAcL67IqSToHxQAAAAU"]
[Tue Mar 10 07:22:40.472433 2026] [:error] [pid 31973:tid 32069] [client 51.161.86.195:37254] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa9WQNQrmAcL67IqSToHxgAAAAQ"]
[Tue Mar 10 07:22:40.681117 2026] [:error] [pid 31981:tid 32157] [client 51.161.86.195:37270] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa9WQLAfo6Bks64fCDZvawAAAJU"]
[Tue Mar 10 07:22:41.334320 2026] [:error] [pid 32295:tid 32336] [client 51.161.86.195:37282] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa9WQY_FltxBAKWrlwjdBwAAANI"]
[Tue Mar 10 07:22:41.519578 2026] [:error] [pid 32295:tid 32340] [client 51.161.86.195:37298] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa9WQY_FltxBAKWrlwjdCQAAANY"]
[Tue Mar 10 07:22:41.749597 2026] [:error] [pid 31981:tid 32148] [client 51.161.86.195:37300] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa9WQbAfo6Bks64fCDZvbQAAAI8"]
[Tue Mar 10 07:22:42.805148 2026] [:error] [pid 32295:tid 32341] [client 51.161.86.195:37314] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa9WQo_FltxBAKWrlwjdCwAAANc"]
[Tue Mar 10 07:22:43.280736 2026] [:error] [pid 31977:tid 32127] [client 51.161.86.195:37328] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa9WQy_lkX6-Mo89SmHpJAAAAFY"]
[Tue Mar 10 07:22:43.319106 2026] [:error] [pid 31973:tid 32080] [client 51.161.86.195:37332] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa9WQ9QrmAcL67IqSToHygAAAA8"]
[Tue Mar 10 07:22:43.512527 2026] [:error] [pid 32295:tid 32339] [client 51.161.86.195:37342] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa9WQ4_FltxBAKWrlwjdDAAAANU"]
[Tue Mar 10 07:22:43.826948 2026] [:error] [pid 32295:tid 32342] [client 51.161.86.195:37356] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa9WQ4_FltxBAKWrlwjdDQAAANg"]
[Tue Mar 10 07:22:44.751516 2026] [:error] [pid 31981:tid 32153] [client 51.161.86.195:37366] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa9WRLAfo6Bks64fCDZvcQAAAJI"]
[Tue Mar 10 07:22:45.291360 2026] [:error] [pid 32295:tid 32334] [client 51.161.86.195:57184] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa9WRY_FltxBAKWrlwjdEAAAANA"]
[Tue Mar 10 07:22:45.328278 2026] [:error] [pid 32295:tid 32320] [client 51.161.86.195:57188] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa9WRY_FltxBAKWrlwjdEQAAAMI"]
[Tue Mar 10 07:22:45.562735 2026] [:error] [pid 37324:tid 37353] [client 51.161.86.195:57194] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa9WRWVvKYS3ogzUMPdTBAAAAQw"]
[Tue Mar 10 07:22:45.597374 2026] [:error] [pid 37324:tid 37355] [client 51.161.86.195:57198] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa9WRWVvKYS3ogzUMPdTBQAAAQ4"]
[Tue Mar 10 07:22:46.870991 2026] [:error] [pid 37324:tid 37358] [client 51.161.86.195:57206] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa9WRmVvKYS3ogzUMPdTCQAAARE"]
[Tue Mar 10 07:22:47.112521 2026] [:error] [pid 31981:tid 32147] [client 51.161.86.195:57210] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa9WR7Afo6Bks64fCDZvcwAAAI4"]
[Tue Mar 10 07:22:47.321717 2026] [:error] [pid 32295:tid 32326] [client 51.161.86.195:57212] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa9WR4_FltxBAKWrlwjdFQAAAMg"]
[Tue Mar 10 07:22:47.486036 2026] [:error] [pid 37324:tid 37341] [client 51.161.86.195:57216] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa9WR2VvKYS3ogzUMPdTDwAAAQA"]
[Tue Mar 10 07:22:47.587233 2026] [:error] [pid 32295:tid 32319] [client 51.161.86.195:57224] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa9WR4_FltxBAKWrlwjdFgAAAME"]
[Tue Mar 10 07:22:48.786895 2026] [:error] [pid 37324:tid 37357] [client 51.161.86.195:57236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aa9WSGVvKYS3ogzUMPdTFwAAARA"]
[Tue Mar 10 07:22:49.069161 2026] [:error] [pid 32295:tid 32328] [client 51.161.86.195:57238] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aa9WSY_FltxBAKWrlwjdGAAAAMo"]
[Tue Mar 10 07:22:49.247115 2026] [:error] [pid 31981:tid 32138] [client 51.161.86.195:57250] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aa9WSbAfo6Bks64fCDZvdQAAAIU"]
[Tue Mar 10 07:22:49.287906 2026] [:error] [pid 32295:tid 32341] [client 51.161.86.195:57266] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WSY_FltxBAKWrlwjdGQAAANc"]
[Tue Mar 10 07:22:49.434522 2026] [:error] [pid 31981:tid 32141] [client 51.161.86.195:57272] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aa9WSbAfo6Bks64fCDZvdgAAAIg"]
[Tue Mar 10 07:22:49.502538 2026] [:error] [pid 37324:tid 37350] [client 51.161.86.195:57288] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "aa9WSWVvKYS3ogzUMPdTGAAAAQk"]
[Tue Mar 10 07:22:50.798646 2026] [:error] [pid 37324:tid 37342] [client 51.161.86.195:57304] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa9WSmVvKYS3ogzUMPdTGwAAAQE"]
[Tue Mar 10 07:22:51.095719 2026] [:error] [pid 31977:tid 32125] [client 51.161.86.195:57316] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa9WSy_lkX6-Mo89SmHpJQAAAFQ"]
[Tue Mar 10 07:22:51.241316 2026] [:error] [pid 31973:tid 32076] [client 51.161.86.195:57330] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa9WS9QrmAcL67IqSToHywAAAAs"]
[Tue Mar 10 07:22:51.301378 2026] [:error] [pid 37324:tid 37361] [client 51.161.86.195:57336] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa9WS2VvKYS3ogzUMPdTHAAAARQ"]
[Tue Mar 10 07:22:51.310160 2026] [:error] [pid 37324:tid 37351] [client 51.161.86.195:57342] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa9WS2VvKYS3ogzUMPdTHQAAAQo"]
[Tue Mar 10 07:22:52.718224 2026] [:error] [pid 31973:tid 32071] [client 51.161.86.195:57348] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aa9WTNQrmAcL67IqSToHzAAAAAY"]
[Tue Mar 10 07:22:53.004466 2026] [:error] [pid 37324:tid 37362] [client 51.161.86.195:57360] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aa9WTWVvKYS3ogzUMPdTIwAAARU"]
[Tue Mar 10 07:22:53.023711 2026] [:error] [pid 32295:tid 32333] [client 51.161.86.195:57368] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WTY_FltxBAKWrlwjdHgAAAM8"]
[Tue Mar 10 07:22:53.124280 2026] [:error] [pid 37324:tid 37364] [client 51.161.86.195:57374] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aa9WTWVvKYS3ogzUMPdTJAAAARc"]
[Tue Mar 10 07:22:53.176880 2026] [:error] [pid 37324:tid 37341] [client 51.161.86.195:57386] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aa9WTWVvKYS3ogzUMPdTJgAAAQA"]
[Tue Mar 10 07:22:53.243935 2026] [:error] [pid 32295:tid 32330] [client 51.161.86.195:57390] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "aa9WTY_FltxBAKWrlwjdHwAAAMw"]
[Tue Mar 10 07:22:54.334140 2026] [:error] [pid 37324:tid 37352] [client 51.161.86.195:57402] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WTmVvKYS3ogzUMPdTJwAAAQs"]
[Tue Mar 10 07:22:54.611565 2026] [:error] [pid 32295:tid 32320] [client 51.161.86.195:57410] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aa9WTo_FltxBAKWrlwjdIAAAAMI"]
[Tue Mar 10 07:22:54.953576 2026] [:error] [pid 31981:tid 32158] [client 51.161.86.195:57420] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aa9WTrAfo6Bks64fCDZvdwAAAJY"]
[Tue Mar 10 07:22:55.041577 2026] [:error] [pid 37324:tid 37351] [client 51.161.86.195:57426] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aa9WT2VvKYS3ogzUMPdTKQAAAQo"]
[Tue Mar 10 07:22:55.081132 2026] [:error] [pid 37324:tid 37353] [client 51.161.86.195:57442] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aa9WT2VvKYS3ogzUMPdTKgAAAQw"]
[Tue Mar 10 07:22:55.149219 2026] [:error] [pid 37324:tid 37355] [client 51.161.86.195:57446] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "aa9WT2VvKYS3ogzUMPdTKwAAAQ4"]
[Tue Mar 10 07:22:56.360255 2026] [:error] [pid 31981:tid 32144] [client 51.161.86.195:46508] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa9WULAfo6Bks64fCDZveAAAAIs"]
[Tue Mar 10 07:22:56.630367 2026] [:error] [pid 37324:tid 37350] [client 51.161.86.195:46510] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WUGVvKYS3ogzUMPdTLgAAAQk"]
[Tue Mar 10 07:22:56.815564 2026] [:error] [pid 31981:tid 32152] [client 51.161.86.195:46528] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WULAfo6Bks64fCDZveQAAAJE"]
[Tue Mar 10 07:22:56.819473 2026] [:error] [pid 31973:tid 32088] [client 51.161.86.195:46516] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa9WUNQrmAcL67IqSToHzgAAABc"]
[Tue Mar 10 07:22:56.847872 2026] [:error] [pid 31981:tid 32159] [client 51.161.86.195:46534] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa9WULAfo6Bks64fCDZvegAAAJc"]
[Tue Mar 10 07:22:57.007545 2026] [:error] [pid 31981:tid 32156] [client 51.161.86.195:46540] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa9WUbAfo6Bks64fCDZvewAAAJQ"]
[Tue Mar 10 07:22:57.051159 2026] [:error] [pid 37324:tid 37363] [client 51.161.86.195:46542] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa9WUWVvKYS3ogzUMPdTMAAAARY"]
[Tue Mar 10 07:22:58.078059 2026] [:error] [pid 32295:tid 32318] [client 51.161.86.195:46544] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa9WUo_FltxBAKWrlwjdJQAAAMA"]
[Tue Mar 10 07:22:58.305270 2026] [:error] [pid 37324:tid 37362] [client 51.161.86.195:46546] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WUmVvKYS3ogzUMPdTNAAAARU"]
[Tue Mar 10 07:22:58.657680 2026] [:error] [pid 32295:tid 32337] [client 51.161.86.195:46556] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa9WUo_FltxBAKWrlwjdJgAAANM"]
[Tue Mar 10 07:22:58.705238 2026] [:error] [pid 31981:tid 32148] [client 51.161.86.195:46564] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa9WUrAfo6Bks64fCDZvfgAAAI8"]
[Tue Mar 10 07:22:58.837847 2026] [:error] [pid 32295:tid 32326] [client 51.161.86.195:46578] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa9WUo_FltxBAKWrlwjdJwAAAMg"]
[Tue Mar 10 07:22:58.929084 2026] [:error] [pid 31981:tid 32140] [client 51.161.86.195:46586] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa9WUrAfo6Bks64fCDZvfwAAAIc"]
[Tue Mar 10 07:22:59.959329 2026] [:error] [pid 32295:tid 32328] [client 51.161.86.195:46602] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa9WU4_FltxBAKWrlwjdKQAAAMo"]
[Tue Mar 10 07:23:00.496315 2026] [:error] [pid 31981:tid 32153] [client 51.161.86.195:46614] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa9WVLAfo6Bks64fCDZvggAAAJI"]
[Tue Mar 10 07:23:00.602406 2026] [:error] [pid 31973:tid 32074] [client 51.161.86.195:46618] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa9WVNQrmAcL67IqSToH0QAAAAk"]
[Tue Mar 10 07:23:00.674110 2026] [:error] [pid 37324:tid 37364] [client 51.161.86.195:46632] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa9WVGVvKYS3ogzUMPdTNgAAARc"]
[Tue Mar 10 07:23:00.721042 2026] [:error] [pid 32295:tid 32339] [client 51.161.86.195:46648] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WVI_FltxBAKWrlwjdKwAAANU"]
[Tue Mar 10 07:23:00.878803 2026] [:error] [pid 32295:tid 32342] [client 51.161.86.195:46664] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa9WVI_FltxBAKWrlwjdLAAAANg"]
[Tue Mar 10 07:23:00.976696 2026] [:error] [pid 37324:tid 37343] [client 51.161.86.195:46672] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WVGVvKYS3ogzUMPdTNwAAAQI"]
[Tue Mar 10 07:23:01.697285 2026] [:error] [pid 32295:tid 32335] [client 51.161.86.195:46680] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WVY_FltxBAKWrlwjdLgAAANE"]
[Tue Mar 10 07:23:01.722831 2026] [:error] [pid 32295:tid 32331] [client 51.161.86.195:46688] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa9WVY_FltxBAKWrlwjdLwAAAM0"]
[Tue Mar 10 07:23:02.411522 2026] [:error] [pid 32295:tid 32322] [client 51.161.86.195:46700] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa9WVo_FltxBAKWrlwjdMAAAAMQ"]
[Tue Mar 10 07:23:02.436041 2026] [:error] [pid 37324:tid 37342] [client 51.161.86.195:46704] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa9WVmVvKYS3ogzUMPdTOgAAAQE"]
[Tue Mar 10 07:23:02.448653 2026] [:error] [pid 37324:tid 37352] [client 51.161.86.195:46720] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa9WVmVvKYS3ogzUMPdTOwAAAQs"]
[Tue Mar 10 07:23:02.802357 2026] [:error] [pid 37324:tid 37351] [client 51.161.86.195:46732] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa9WVmVvKYS3ogzUMPdTPQAAAQo"]
[Tue Mar 10 07:23:03.452602 2026] [:error] [pid 32295:tid 32330] [client 51.161.86.195:46736] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa9WV4_FltxBAKWrlwjdMwAAAMw"]
[Tue Mar 10 07:23:04.215395 2026] [:error] [pid 32295:tid 32334] [client 51.161.86.195:46748] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa9WWI_FltxBAKWrlwjdNAAAANA"]
[Tue Mar 10 07:23:04.260976 2026] [:error] [pid 37324:tid 37346] [client 51.161.86.195:46758] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa9WWGVvKYS3ogzUMPdTQAAAAQU"]
[Tue Mar 10 07:23:04.309702 2026] [:error] [pid 32295:tid 32323] [client 51.161.86.195:46772] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa9WWI_FltxBAKWrlwjdNQAAAMU"]
[Tue Mar 10 07:23:04.714807 2026] [:error] [pid 31977:tid 32121] [client 51.161.86.195:46774] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa9WWC_lkX6-Mo89SmHpKAAAAFA"]
[Tue Mar 10 07:23:05.454864 2026] [:error] [pid 31973:tid 32068] [client 51.161.86.195:40996] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WWdQrmAcL67IqSToH0wAAAAM"]
[Tue Mar 10 07:23:05.492672 2026] [:error] [pid 32295:tid 32318] [client 51.161.86.195:41002] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aa9WWY_FltxBAKWrlwjdOAAAAMA"]
[Tue Mar 10 07:23:05.968951 2026] [:error] [pid 31977:tid 32129] [client 51.161.86.195:41012] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aa9WWS_lkX6-Mo89SmHpLQAAAFg"]
[Tue Mar 10 07:23:06.168986 2026] [:error] [pid 32295:tid 32328] [client 51.161.86.195:41028] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aa9WWo_FltxBAKWrlwjdPAAAAMo"]
[Tue Mar 10 07:23:06.206786 2026] [:error] [pid 32295:tid 32336] [client 51.161.86.195:41042] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aa9WWo_FltxBAKWrlwjdPQAAANI"]
[Tue Mar 10 07:23:06.860766 2026] [:error] [pid 37324:tid 37344] [client 51.161.86.195:41048] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aa9WWmVvKYS3ogzUMPdTRAAAAQM"]
[Tue Mar 10 07:23:07.328947 2026] [:error] [pid 37324:tid 37364] [client 51.161.86.195:41054] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa9WW2VvKYS3ogzUMPdTRgAAARc"]
[Tue Mar 10 07:23:07.879096 2026] [:error] [pid 37324:tid 37342] [client 51.161.86.195:41058] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa9WW2VvKYS3ogzUMPdTSAAAAQE"]
[Tue Mar 10 07:23:08.011801 2026] [:error] [pid 37324:tid 37352] [client 51.161.86.195:41068] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa9WXGVvKYS3ogzUMPdTSQAAAQs"]
[Tue Mar 10 07:23:08.062220 2026] [:error] [pid 37324:tid 37361] [client 51.161.86.195:41078] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa9WXGVvKYS3ogzUMPdTSwAAARQ"]
[Tue Mar 10 07:23:08.783301 2026] [:error] [pid 37324:tid 37353] [client 51.161.86.195:41086] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa9WXGVvKYS3ogzUMPdTTAAAAQw"]
[Tue Mar 10 07:23:09.181038 2026] [:error] [pid 31973:tid 32078] [client 51.161.86.195:41102] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa9WXdQrmAcL67IqSToH1gAAAA0"]
[Tue Mar 10 07:23:09.756821 2026] [:error] [pid 37324:tid 37347] [client 51.161.86.195:41110] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa9WXWVvKYS3ogzUMPdTTwAAAQY"]
[Tue Mar 10 07:23:09.761461 2026] [:error] [pid 31973:tid 32087] [client 51.161.86.195:41124] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa9WXdQrmAcL67IqSToH1wAAABY"]
[Tue Mar 10 07:23:09.943654 2026] [:error] [pid 32295:tid 32327] [client 51.161.86.195:41130] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WXY_FltxBAKWrlwjdQQAAAMk"]
[Tue Mar 10 07:23:09.989058 2026] [:error] [pid 32295:tid 32334] [client 51.161.86.195:41132] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa9WXY_FltxBAKWrlwjdQgAAANA"]
[Tue Mar 10 07:23:10.573053 2026] [:error] [pid 37324:tid 37350] [client 51.161.86.195:41134] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa9WXmVvKYS3ogzUMPdTUQAAAQk"]
[Tue Mar 10 07:23:11.179491 2026] [:error] [pid 32295:tid 32318] [client 51.161.86.195:41148] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa9WX4_FltxBAKWrlwjdRQAAAMA"]
[Tue Mar 10 07:23:11.669268 2026] [:error] [pid 37324:tid 37363] [client 51.161.86.195:41154] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa9WX2VvKYS3ogzUMPdTUwAAARY"]
[Tue Mar 10 07:23:11.779230 2026] [:error] [pid 37324:tid 37357] [client 51.161.86.195:41168] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa9WX2VvKYS3ogzUMPdTVAAAARA"]
[Tue Mar 10 07:23:11.795463 2026] [:error] [pid 32295:tid 32337] [client 51.161.86.195:41182] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa9WX4_FltxBAKWrlwjdSAAAANM"]
[Tue Mar 10 07:23:12.490459 2026] [:error] [pid 31973:tid 32084] [client 51.161.86.195:41184] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa9WYNQrmAcL67IqSToH2QAAABM"]
[Tue Mar 10 07:23:13.137198 2026] [:error] [pid 32295:tid 32324] [client 51.161.86.195:41198] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aa9WYY_FltxBAKWrlwjdSgAAAMY"]
[Tue Mar 10 07:23:13.517443 2026] [:error] [pid 31977:tid 32127] [client 51.161.86.195:41210] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aa9WYS_lkX6-Mo89SmHpLgAAAFY"]
[Tue Mar 10 07:23:13.631202 2026] [:error] [pid 32295:tid 32338] [client 51.161.86.195:41216] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aa9WYY_FltxBAKWrlwjdTAAAANQ"]
[Tue Mar 10 07:23:13.674439 2026] [:error] [pid 32295:tid 32339] [client 51.161.86.195:41228] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WYY_FltxBAKWrlwjdTQAAANU"]
[Tue Mar 10 07:23:13.747753 2026] [:error] [pid 32295:tid 32342] [client 51.161.86.195:41236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aa9WYY_FltxBAKWrlwjdTgAAANg"]
[Tue Mar 10 07:23:14.316223 2026] [:error] [pid 37324:tid 37341] [client 51.161.86.195:41240] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aa9WYmVvKYS3ogzUMPdTWQAAAQA"]
[Tue Mar 10 07:23:14.972770 2026] [:error] [pid 32295:tid 32327] [client 51.161.86.195:41248] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9WYo_FltxBAKWrlwjdUgAAAMk"]
[Tue Mar 10 07:23:15.435906 2026] [:error] [pid 37324:tid 37351] [client 51.161.86.195:57732] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9WY2VvKYS3ogzUMPdTXAAAAQo"]
[Tue Mar 10 07:23:15.508222 2026] [:error] [pid 31977:tid 32113] [client 51.161.86.195:57740] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9WYy_lkX6-Mo89SmHpLwAAAEg"]
[Tue Mar 10 07:23:15.627370 2026] [:error] [pid 37324:tid 37353] [client 51.161.86.195:57756] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9WY2VvKYS3ogzUMPdTXgAAAQw"]
[Tue Mar 10 07:23:16.125346 2026] [:error] [pid 32295:tid 32323] [client 51.161.86.195:57762] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9WZI_FltxBAKWrlwjdVgAAAMU"]
[Tue Mar 10 07:24:15.986189 2026] [:error] [pid 32295:tid 32326] [client 51.161.86.195:47854] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9Wn4_FltxBAKWrlwjd4QAAAMg"]
[Tue Mar 10 07:24:18.096926 2026] [:error] [pid 37324:tid 37355] [client 51.161.86.195:47862] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WomVvKYS3ogzUMPdUGQAAAQ4"]
[Tue Mar 10 07:24:20.051888 2026] [:error] [pid 32295:tid 32340] [client 51.161.86.195:47874] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WpI_FltxBAKWrlwjd7wAAANY"]
[Tue Mar 10 07:24:22.110112 2026] [:error] [pid 37324:tid 37356] [client 51.161.86.195:47876] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9WpmVvKYS3ogzUMPdUHwAAAQ8"]
[Tue Mar 10 07:25:50.501805 2026] [:error] [pid 37324:tid 37358] [client 51.161.86.195:57632] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa9W_mVvKYS3ogzUMPdUzAAAARE"]
[Tue Mar 10 07:25:52.653969 2026] [:error] [pid 32295:tid 32318] [client 51.161.86.195:33600] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa9XAI_FltxBAKWrlwjeTwAAAMA"]
[Tue Mar 10 07:25:54.527328 2026] [:error] [pid 32295:tid 32323] [client 51.161.86.195:33614] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9XAo_FltxBAKWrlwjeUAAAAMU"]
[Tue Mar 10 07:25:55.199771 2026] [:error] [pid 32295:tid 32321] [client 51.161.86.195:33626] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa9XA4_FltxBAKWrlwjeUgAAAMM"]
[Tue Mar 10 07:25:57.098609 2026] [:error] [pid 37324:tid 37363] [client 51.161.86.195:58024] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aa9XBWVvKYS3ogzUMPdVHQAAARY"]
[Tue Mar 10 07:25:58.413321 2026] [:error] [pid 37324:tid 37360] [client 51.161.86.195:58036] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa9XBmVvKYS3ogzUMPdVIwAAARM"]
[Tue Mar 10 07:25:59.111073 2026] [:error] [pid 37324:tid 37354] [client 51.161.86.195:58044] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aa9XB2VvKYS3ogzUMPdVJQAAAQ0"]
[Tue Mar 10 10:26:30.284131 2026] [:error] [pid 42730:tid 42753] [client 31.204.30.25:31559] [client 31.204.30.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aa-BVshla5zfkJ-81FAQVQAAAdU"], referer: https://pumpbooking.com/about
[Tue Mar 10 10:26:31.430616 2026] [:error] [pid 39998:tid 40093] [client 84.32.55.252:40183] [client 84.32.55.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aa-BV40j9Ehux9Dpvl8yTQAAAJc"], referer: https://pumpbooking.com/about
[Tue Mar 10 10:26:32.419886 2026] [:error] [pid 42730:tid 42752] [client 188.191.100.37:31827] [client 188.191.100.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about-us"] [unique_id "aa-BWMhla5zfkJ-81FAQXAAAAdQ"], referer: https://pumpbooking.com/about-us
[Tue Mar 10 10:26:32.589349 2026] [:error] [pid 39996:tid 40017] [client 204.217.128.9:45039] [client 204.217.128.9] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aa-BWP5uf5_ai0O9Bsz_LQAAAAQ"], referer: https://pumpbooking.com/about
[Tue Mar 10 10:26:33.312645 2026] [:error] [pid 42730:tid 42745] [client 178.92.82.238:42953] [client 178.92.82.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about-us"] [unique_id "aa-BWchla5zfkJ-81FAQXgAAAc0"], referer: https://pumpbooking.com/about-us
[Tue Mar 10 10:26:33.479009 2026] [:error] [pid 42730:tid 42755] [client 178.92.82.195:59075] [client 178.92.82.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aa-BWchla5zfkJ-81FAQYAAAAdc"], referer: https://pumpbooking.com/about
[Tue Mar 10 10:26:35.034289 2026] [:error] [pid 42730:tid 42737] [client 158.46.161.167:29165] [client 158.46.161.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aa-BW8hla5zfkJ-81FAQZwAAAcU"], referer: https://pumpbooking.com/about
[Tue Mar 10 10:26:36.279296 2026] [:error] [pid 42730:tid 42739] [client 185.200.236.224:64741] [client 185.200.236.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about"] [unique_id "aa-BXMhla5zfkJ-81FAQcAAAAcc"], referer: https://pumpbooking.com/about
[Tue Mar 10 10:26:39.212506 2026] [:error] [pid 42666:tid 42671] [client 207.170.175.244:41921] [client 207.170.175.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/about-us"] [unique_id "aa-BX40d5emjo-Hs7048xgAAAQM"], referer: https://pumpbooking.com/about-us
[Tue Mar 10 10:27:58.196293 2026] [:error] [pid 39996:tid 40018] [client 191.102.132.170:34137] [client 191.102.132.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/who-we-are"] [unique_id "aa-Brv5uf5_ai0O9Bsz_gQAAAAU"], referer: https://pumpbooking.com/who-we-are
[Tue Mar 10 10:27:58.297934 2026] [:error] [pid 39998:tid 40082] [client 193.135.13.24:53715] [client 193.135.13.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/our-story"] [unique_id "aa-Bro0j9Ehux9Dpvl8ydwAAAIw"], referer: https://pumpbooking.com/our-story
[Tue Mar 10 10:27:58.301143 2026] [:error] [pid 40103:tid 40111] [client 175.29.135.74:50937] [client 175.29.135.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/profile"] [unique_id "aa-BrgVlXMaGjwKm8iVlmQAAAMQ"], referer: https://pumpbooking.com/profile
[Tue Mar 10 10:27:58.362985 2026] [:error] [pid 40103:tid 40118] [client 103.69.120.130:37959] [client 103.69.120.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-BrgVlXMaGjwKm8iVlmgAAAMs"], referer: https://pumpbooking.com/contact
[Tue Mar 10 10:27:58.502630 2026] [:error] [pid 42666:tid 42669] [client 5.45.37.39:29535] [client 5.45.37.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/aboutus"] [unique_id "aa-Bro0d5emjo-Hs7049GAAAAQE"], referer: https://pumpbooking.com/aboutus
[Tue Mar 10 10:27:58.856698 2026] [:error] [pid 42666:tid 42675] [client 178.93.107.140:48877] [client 178.93.107.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact-us"] [unique_id "aa-Bro0d5emjo-Hs7049GQAAAQc"], referer: https://pumpbooking.com/contact-us
[Tue Mar 10 10:27:59.462459 2026] [:error] [pid 42666:tid 42680] [client 5.45.37.61:64481] [client 5.45.37.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-Br40d5emjo-Hs7049GwAAAQw"], referer: https://pumpbooking.com/contact
[Tue Mar 10 10:28:00.165288 2026] [:error] [pid 39996:tid 40034] [client 158.46.198.212:34967] [client 158.46.198.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact-us"] [unique_id "aa-BsP5uf5_ai0O9Bsz_iAAAABU"], referer: https://pumpbooking.com/contact-us
[Tue Mar 10 10:28:00.844813 2026] [:error] [pid 42666:tid 42680] [client 178.171.49.78:58583] [client 178.171.49.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/company"] [unique_id "aa-BsI0d5emjo-Hs7049JwAAAQw"], referer: https://pumpbooking.com/company
[Tue Mar 10 10:28:01.126383 2026] [:error] [pid 39996:tid 40018] [client 161.77.215.134:49421] [client 161.77.215.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact-us"] [unique_id "aa-Bsf5uf5_ai0O9Bsz_iQAAAAU"], referer: https://pumpbooking.com/contact-us
[Tue Mar 10 10:28:02.053910 2026] [:error] [pid 39998:tid 40086] [client 92.240.217.113:40425] [client 92.240.217.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact-us"] [unique_id "aa-Bso0j9Ehux9Dpvl8yewAAAJA"], referer: https://pumpbooking.com/contact-us
[Tue Mar 10 10:28:02.931866 2026] [:error] [pid 42666:tid 42669] [client 88.216.255.113:57553] [client 88.216.255.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-Bso0d5emjo-Hs7049LgAAAQE"], referer: https://pumpbooking.com/contact
[Tue Mar 10 10:28:03.950062 2026] [:error] [pid 42666:tid 42692] [client 200.234.162.109:48795] [client 200.234.162.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-Bs40d5emjo-Hs7049MwAAARg"], referer: https://pumpbooking.com/contact
[Tue Mar 10 10:28:04.986753 2026] [:error] [pid 42666:tid 42683] [client 5.249.177.243:44037] [client 5.249.177.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-BtI0d5emjo-Hs7049NgAAAQ8"], referer: https://pumpbooking.com/contact
[Tue Mar 10 10:28:05.945084 2026] [:error] [pid 42759:tid 42779] [client 206.232.1.7:42967] [client 206.232.1.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-BtfoOpjBGGv-2UuxIrwAAAhE"], referer: https://pumpbooking.com/contact
[Tue Mar 10 10:28:06.954719 2026] [:error] [pid 42759:tid 42778] [client 178.171.49.223:26383] [client 178.171.49.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/contact"] [unique_id "aa-BtvoOpjBGGv-2UuxIsgAAAhA"], referer: https://pumpbooking.com/contact
[Tue Mar 10 12:44:38.965088 2026] [:error] [pid 42730:tid 42751] [client 135.181.213.219:9290] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aa-htshla5zfkJ-81FBiYwAAAdM"]
[Tue Mar 10 12:44:40.963993 2026] [:error] [pid 39996:tid 40016] [client 135.181.213.219:39894] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aa-huP5uf5_ai0O9BswauAAAAAM"]
[Tue Mar 10 12:44:42.950067 2026] [:error] [pid 42730:tid 42742] [client 135.181.213.219:39906] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa-hushla5zfkJ-81FBibwAAAco"]
[Tue Mar 10 12:44:44.960919 2026] [:error] [pid 42730:tid 42749] [client 135.181.213.219:39916] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aa-hvMhla5zfkJ-81FBieAAAAdE"]
[Tue Mar 10 12:44:46.781523 2026] [:error] [pid 42730:tid 42754] [client 135.181.213.219:39926] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "aa-hvshla5zfkJ-81FBifAAAAdY"]
[Tue Mar 10 12:44:48.769136 2026] [:error] [pid 42666:tid 42669] [client 135.181.213.219:39940] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "aa-hwI0d5emjo-Hs705w6gAAAQE"]
[Tue Mar 10 12:44:50.840662 2026] [:error] [pid 40200:tid 40221] [client 135.181.213.219:39806] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "aa-hwsY-CxWzYOcxdukdIgAAAVM"]
[Tue Mar 10 12:44:52.985256 2026] [:error] [pid 42730:tid 42737] [client 135.181.213.219:39812] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa-hxMhla5zfkJ-81FBilAAAAcU"]
[Tue Mar 10 12:44:56.816763 2026] [:error] [pid 42666:tid 42668] [client 135.181.213.219:39816] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aa-hyI0d5emjo-Hs705w9AAAAQA"]
[Tue Mar 10 12:57:17.894284 2026] [:error] [pid 42730:tid 42736] [client 62.60.131.218:52171] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "aa-krchla5zfkJ-81FBrQgAAAcQ"]
[Tue Mar 10 16:39:52.875444 2026] [:error] [pid 21400:tid 21407] [client 65.108.2.171:62082] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "aa_Y2DCFYMzi4orNuEHWFwAAAMU"]
[Tue Mar 10 16:39:54.874601 2026] [:error] [pid 21316:tid 21332] [client 65.108.2.171:57580] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "aa_Y2pmAQfAZtna2rDyUWAAAAAw"]
[Tue Mar 10 16:39:56.937207 2026] [:error] [pid 21318:tid 21376] [client 65.108.2.171:57592] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aa_Y3BTTkPqKydpYiIJ0AAAAAII"]
[Tue Mar 10 16:39:58.966561 2026] [:error] [pid 21318:tid 21374] [client 65.108.2.171:57604] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "aa_Y3hTTkPqKydpYiIJ0CgAAAIA"]
[Tue Mar 10 16:40:01.035540 2026] [:error] [pid 21318:tid 21384] [client 65.108.2.171:57614] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aa_Y4RTTkPqKydpYiIJ0FgAAAIo"]
[Tue Mar 10 16:40:03.000705 2026] [:error] [pid 21316:tid 21321] [client 65.108.2.171:57626] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa_Y4pmAQfAZtna2rDyUcgAAAAE"]
[Tue Mar 10 16:40:05.083441 2026] [:error] [pid 21400:tid 21416] [client 65.108.2.171:18722] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "aa_Y5TCFYMzi4orNuEHWLgAAAM4"]
[Tue Mar 10 16:40:07.119368 2026] [:error] [pid 21316:tid 21321] [client 65.108.2.171:18734] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aa_Y55mAQfAZtna2rDyUewAAAAE"]
[Tue Mar 10 16:40:09.110077 2026] [:error] [pid 21318:tid 21375] [client 65.108.2.171:18740] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "aa_Y6RTTkPqKydpYiIJ0LAAAAIE"]
[Tue Mar 10 16:40:11.239573 2026] [:error] [pid 21316:tid 21343] [client 65.108.2.171:18742] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aa_Y65mAQfAZtna2rDyUfgAAABc"]
[Tue Mar 10 16:40:13.278843 2026] [:error] [pid 21400:tid 21419] [client 65.108.2.171:18758] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "aa_Y7TCFYMzi4orNuEHWRwAAANE"]
[Tue Mar 10 16:40:15.261831 2026] [:error] [pid 21318:tid 21380] [client 65.108.2.171:54888] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aa_Y7xTTkPqKydpYiIJ0OwAAAIY"]
[Tue Mar 10 17:09:38.244496 2026] [:error] [pid 21317:tid 21368] [client 43.157.153.236:54584] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aa_f0lUUqcn7vK991D2a9wAAAFU"]
[Tue Mar 10 17:09:43.968699 2026] [:error] [pid 21318:tid 21376] [client 153.92.11.95:56692] [client 153.92.11.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "aa_f1xTTkPqKydpYiIKMMwAAAII"]
2026/03/10 18:24:38 [error] 14458#14458: *15917 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.222.95.123, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/10 18:28:36 [error] 14450#14450: *18813 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /wp-admin/css/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 18:28:47 [error] 14458#14458: *18937 "/usr/local/apache/htdocs/suspended-page/.well-known/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /.well-known/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 18:28:57 [error] 14444#14444: *19092 "/usr/local/apache/htdocs/suspended-page/sites/default/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /sites/default/files/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 18:29:09 [error] 14456#14456: *19212 "/usr/local/apache/htdocs/suspended-page/admin/controller/extension/extension/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /admin/controller/extension/extension/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 18:29:20 [error] 14454#14454: *19338 "/usr/local/apache/htdocs/suspended-page/uploads/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /uploads/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 18:29:33 [error] 14456#14456: *19520 "/usr/local/apache/htdocs/suspended-page/images/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /images/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 18:29:43 [error] 14455#14455: *19639 "/usr/local/apache/htdocs/suspended-page/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: pumpbooking.com, request: "GET /files/ HTTP/1.1", host: "www.pumpbooking.com", referrer: "binance.com"
2026/03/10 19:21:19 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:21:20 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/pgslot login.aspx" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /pgslot%20login.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:21:22 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/pp slot.aspx" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /pp%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:21:24 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/riches888 pg.aspx" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /riches888%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:21:26 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/royal slot.aspx" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /royal%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:21:28 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/sa casino.aspx" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /sa%20casino.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:21:29 [error] 14454#14454: *59555 openat() "/usr/local/apache/htdocs/suspended-page/www ufabet com.aspx" failed (2: No such file or directory), client: 51.75.118.147, server: pumpbooking.com, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 19:25:20 [error] 14457#14457: *63114 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 157.245.223.184, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", host: "pumpbooking.com"
2026/03/10 20:26:30 [error] 3846#3846: *108036 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 112.86.225.46, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:28 [error] 3843#3843: *147322 openat() "/usr/local/apache/htdocs/suspended-page/phpinfo.php" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /phpinfo.php HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:29 [error] 3838#3838: *147334 openat() "/usr/local/apache/htdocs/suspended-page/test.php" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /test.php HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:30 [error] 3823#3823: *147345 openat() "/usr/local/apache/htdocs/suspended-page/_profiler/phpinfo" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /_profiler/phpinfo HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:30 [error] 3823#3823: *147354 openat() "/usr/local/apache/htdocs/suspended-page/.env" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /.env HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:31 [error] 3846#3846: *147364 openat() "/usr/local/apache/htdocs/suspended-page/db.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /db.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:32 [error] 3820#3820: *147374 openat() "/usr/local/apache/htdocs/suspended-page/dump.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /dump.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:33 [error] 3833#3833: *147385 openat() "/usr/local/apache/htdocs/suspended-page/database.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /database.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:33 [error] 3834#3834: *147393 openat() "/usr/local/apache/htdocs/suspended-page/backup.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /backup.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:34 [error] 3835#3835: *147403 openat() "/usr/local/apache/htdocs/suspended-page/config/db.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /config/db.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:35 [error] 3843#3843: *147409 openat() "/usr/local/apache/htdocs/suspended-page/sql/db.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /sql/db.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:35 [error] 3847#3847: *147420 openat() "/usr/local/apache/htdocs/suspended-page/data/dump.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /data/dump.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:36 [error] 3831#3831: *147426 openat() "/usr/local/apache/htdocs/suspended-page/backups/database.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /backups/database.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:37 [error] 3843#3843: *147440 openat() "/usr/local/apache/htdocs/suspended-page/mysql.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /mysql.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:19:38 [error] 3820#3820: *147450 openat() "/usr/local/apache/htdocs/suspended-page/db_backup.sql" failed (2: No such file or directory), client: 15.253.19.74, server: pumpbooking.com, request: "GET /db_backup.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 21:33:12 [error] 3835#3835: *157211 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 192.178.6.1, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/10 21:51:32 [error] 3846#3846: *169352 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 112.86.225.38, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:10:33 [error] 3817#3817: *184805 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 103.54.29.20, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:11:54 [error] 3838#3838: *185861 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 223.230.21.191, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:12:43 [error] 3834#3834: *186481 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 213.154.17.89, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:31 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/ID3/license.txt" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /wp-includes/ID3/license.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:32 [error] 3826#3826: *188517 "/usr/local/apache/htdocs/suspended-page/feed/index.html" is not found (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /feed/ HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:33 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:34 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/blog/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:35 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/web/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:36 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/wordpress/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:37 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/wp/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:38 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/2020/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:38 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/2019/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:39 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/2021/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:40 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/shop/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:41 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/wp1/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:41 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/test/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:42 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/site/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:15:43 [error] 3826#3826: *188517 openat() "/usr/local/apache/htdocs/suspended-page/cms/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 138.68.68.226, server: pumpbooking.com, request: "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/10 22:32:14 [error] 3847#3847: *200032 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 49.151.164.134, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:18 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:20 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/pg soft.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pg%20soft.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:22 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/pg thailand.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pg%20thailand.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:24 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/pg wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pg%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:26 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/pgzeed gold.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pgzeed%20gold.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:27 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/pp slot.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pp%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:30 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/riches777 pg.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /riches777%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:32 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/riches888 pg.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /riches888%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:34 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/royal slot.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /royal%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:36 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/sa casino.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /sa%20casino.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:38 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/sbobet ca.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /sbobet%20ca.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:40 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/slot game 666.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20game%20666.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:42 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/slot joker.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20joker.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:44 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/slot pg soft.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:46 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/slot pg vip.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:48 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/slot1234 pg.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot1234%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:50 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/slotxo wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slotxo%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:52 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet net.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:54 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/ufa vip.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:55 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 1668.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufabet%201668.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:57 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/ufabet net.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufabet%20net.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:55:59 [error] 3847#3847: *259807 openat() "/usr/local/apache/htdocs/suspended-page/yakuza slot.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /yakuza%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/10 23:56:03 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:05 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/pg slot wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:06 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/pg wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pg%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:08 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/pgzeed gold.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /pgzeed%20gold.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:10 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/riches666 pg.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /riches666%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:11 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/riches777 pg.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /riches777%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:13 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/sbobet auto.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /sbobet%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:15 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot 888.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20888.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:17 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot 99.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%2099.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:18 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot auto.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:20 [error] 3823#3823: *260701 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 167.71.209.252, server: pumpbooking.com, request: "GET /wp-login.php HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:20 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot demo.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20demo.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:22 [error] 3847#3847: *260723 "/usr/local/apache/htdocs/suspended-page/administrator/index.html" is not found (2: No such file or directory), client: 167.71.209.252, server: pumpbooking.com, request: "GET /administrator/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:22 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot free.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20free.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:24 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot game 666.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20game%20666.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:25 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot joker.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20joker.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:27 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot online.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20online.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:29 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot pg soft.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:30 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot pg vip.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:32 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot pg wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:34 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot super wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:35 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot true wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:37 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet 777 auto.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:39 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet iwallet link login.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:40 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:42 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/slotxo wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /slotxo%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:43 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/spg slot.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /spg%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:45 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/spx slot.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /spx%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:47 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/superslot max wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:48 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/superslot vip.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /superslot%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:50 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet net.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:52 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /superslot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:54 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/superslot168 wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /superslot168%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:56 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa 168.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20168.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:57 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa c4.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20c4.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:56:59 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa sa.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20sa.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:57:01 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa slot.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:57:02 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa vip.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:57:04 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa wallet 777.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20wallet%20777.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:57:06 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufa wallet.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufa%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:57:07 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 100.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufabet%20100.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/10 23:57:09 [error] 3835#3835: *260426 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 1668.aspx" failed (2: No such file or directory), client: 147.135.212.201, server: pumpbooking.com, request: "GET /ufabet%201668.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 00:23:32 [error] 6419#6419: *279924 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 50.16.216.166, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:48 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:50 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/1234 slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /1234%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:51 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/2xl slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /2xl%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:53 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/888 slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /888%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:55 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/amb superslot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /amb%20superslot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:56 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflik co.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflik%20co.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:41:58 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflik dc.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflik%20dc.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:00 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflik original.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflik%20original.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:01 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflik slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflik%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:03 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflik thailand.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflik%20thailand.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:05 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflix auto.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflix%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:06 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflix casino.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflix%20casino.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:08 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflix co.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflix%20co.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:10 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/betflix thailand.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /betflix%20thailand.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:11 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/casino betflik.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /casino%20betflik.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:13 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/casino betflix.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /casino%20betflix.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:15 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/casino wallet.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /casino%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:16 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/demon slot game.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /demon%20slot%20game.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:18 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/g2g slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /g2g%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:20 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/galaxy bet slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /galaxy%20bet%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:30 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/kingkong joker.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /kingkong%20joker.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:31 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/lava slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /lava%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:33 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/mega slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /mega%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:35 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/metal slot.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /metal%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:36 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/pg joker.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /pg%20joker.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:38 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/pg plus.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /pg%20plus.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 00:42:40 [error] 6417#6417: *293288 openat() "/usr/local/apache/htdocs/suspended-page/pg slot auto.aspx" failed (2: No such file or directory), client: 185.231.100.76, server: pumpbooking.com, request: "GET /pg%20slot%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:37:54 [error] 6428#6428: *332969 openat() "/usr/local/apache/htdocs/suspended-page/app/Slot pg true wallet.html" failed (2: No such file or directory), client: 192.178.6.9, server: pumpbooking.com, request: "GET /app/Slot%20pg%20true%20wallet.html HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:42:42 [error] 6410#6410: *336329 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 35.199.168.228, server: pumpbooking.com, request: "HEAD /backup/ HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:42:42 [error] 6410#6410: *336329 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 35.199.168.228, server: pumpbooking.com, request: "HEAD /old/ HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:42:43 [error] 6410#6410: *336329 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 35.199.168.228, server: pumpbooking.com, request: "HEAD /wp/ HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:42:43 [error] 6410#6410: *336329 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 35.199.168.228, server: pumpbooking.com, request: "HEAD /blog/ HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:42:43 [error] 6410#6410: *336329 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 35.199.168.228, server: pumpbooking.com, request: "HEAD /new/ HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:42:43 [error] 6410#6410: *336329 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 35.199.168.228, server: pumpbooking.com, request: "HEAD /wordpress/ HTTP/1.1", host: "pumpbooking.com"
2026/03/11 01:50:14 [error] 6419#6419: *341562 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 198.244.240.127, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:12 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:14 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/1234 superslot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /1234%20superslot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:16 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/168 slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /168%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:18 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/all slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /all%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:19 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/apollo slot pg.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:21 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/auto slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /auto%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:23 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/betflik casino.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /betflik%20casino.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:24 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/betflix wallet.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /betflix%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:26 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/galaxy auto slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /galaxy%20auto%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:27 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/galaxy slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /galaxy%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:29 [error] 6426#6426: *372348 openat() "/usr/local/apache/htdocs/suspended-page/joker slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /joker%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:31:33 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:34 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/apollo slot pg.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:36 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/jili slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /jili%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:38 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg joker auto.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20joker%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:40 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg osaka.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20osaka.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:41 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg plus.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20plus.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:43 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 789.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20slot%20789.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:45 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 888th.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20slot%20888th.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:46 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg slot auto wallet.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20slot%20auto%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:48 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg slot auto.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20slot%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:50 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg slot vegas.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:51 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg slot vip.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:53 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/pg world.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /pg%20world.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:55 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 7777.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /ufabet%207777.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:57 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/ufabet auto wallet.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:31:58 [error] 6412#6412: *372597 openat() "/usr/local/apache/htdocs/suspended-page/w69 slot.aspx" failed (2: No such file or directory), client: 145.239.65.236, server: pumpbooking.com, request: "GET /w69%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 02:53:37 [error] 6415#6415: *387658 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 192.178.6.9, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 02:53:38 [error] 6423#6423: *387667 openat() "/usr/local/apache/htdocs/suspended-page/bonus/Daftar หวยออนไลน์ 100.html" failed (2: No such file or directory), client: 192.178.6.7, server: pumpbooking.com, request: "GET /bonus/Daftar%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20100.html HTTP/1.1", host: "pumpbooking.com"
2026/03/11 04:17:50 [error] 3463#3463: *444752 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 34.88.35.245, server: pumpbooking.com, request: "HEAD /backup/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 04:17:50 [error] 3463#3463: *444752 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 34.88.35.245, server: pumpbooking.com, request: "HEAD /wp/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 04:17:51 [error] 3463#3463: *444752 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 34.88.35.245, server: pumpbooking.com, request: "HEAD /new/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 04:17:51 [error] 3463#3463: *444752 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 34.88.35.245, server: pumpbooking.com, request: "HEAD /wordpress/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 04:17:52 [error] 3463#3463: *444752 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 34.88.35.245, server: pumpbooking.com, request: "HEAD /old/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 04:17:52 [error] 3463#3463: *444752 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 34.88.35.245, server: pumpbooking.com, request: "HEAD /blog/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 04:42:48 [error] 3467#3467: *461682 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 179.105.119.199, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/11 05:09:51 [error] 3468#3468: *480772 openat() "/usr/local/apache/htdocs/suspended-page/sitemap/Slot ยู ฟ่า 777.html" failed (2: No such file or directory), client: 192.178.6.8, server: pumpbooking.com, request: "GET /sitemap/Slot%20%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20777.html HTTP/1.1", host: "pumpbooking.com"
2026/03/11 06:42:27 [error] 3466#3466: *538859 openat() "/usr/local/apache/htdocs/suspended-page/casino/Compare Dass100 กับ Solidworks.html" failed (2: No such file or directory), client: 192.178.6.7, server: pumpbooking.com, request: "GET /casino/Compare%20Dass100%20%E0%B8%81%E0%B8%B1%E0%B8%9A%20Solidworks.html HTTP/1.1", host: "pumpbooking.com"
2026/03/11 07:20:58 [error] 3465#3465: *566707 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 142.44.233.29, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 07:48:37 [error] 3469#3469: *581644 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 209.87.169.85, server: pumpbooking.com, request: "GET /wp-login.php HTTP/1.1", host: "pumpbooking.com"
2026/03/11 08:01:56 [error] 3470#3470: *589093 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.228.58, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 08:35:44 [error] 3469#3469: *610089 openat() "/usr/local/apache/htdocs/suspended-page/bet/Daftar สล็อตเว็บใหญ่ รวมทุกค่าย.html" failed (2: No such file or directory), client: 192.178.6.8, server: pumpbooking.com, request: "GET /bet/Daftar%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.html HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:20:45 [error] 53946#53946: *663258 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.39.210.172, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:40:30 [error] 53943#53943: *674521 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:40:32 [error] 53947#53947: *674536 openat() "/usr/local/apache/htdocs/suspended-page/pg slot99.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20slot99.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:41:03 [error] 53948#53948: *674765 openat() "/usr/local/apache/htdocs/suspended-page/pg th.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20th.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:41:05 [error] 53939#53939: *674779 openat() "/usr/local/apache/htdocs/suspended-page/pg world.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20world.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:41:07 [error] 53947#53947: *674801 openat() "/usr/local/apache/htdocs/suspended-page/riches666 pg.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /riches666%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:41:09 [error] 53948#53948: *674817 openat() "/usr/local/apache/htdocs/suspended-page/slot online.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /slot%20online.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 10:41:12 [error] 53948#53948: *674843 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:14 [error] 53940#53940: *674859 openat() "/usr/local/apache/htdocs/suspended-page/24th slot.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /24th%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:16 [error] 53947#53947: *674875 openat() "/usr/local/apache/htdocs/suspended-page/joker slot.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /joker%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:18 [error] 53941#53941: *674891 openat() "/usr/local/apache/htdocs/suspended-page/joker vip.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /joker%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:20 [error] 53944#53944: *674904 openat() "/usr/local/apache/htdocs/suspended-page/kingkong joker.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /kingkong%20joker.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:22 [error] 53945#53945: *674921 openat() "/usr/local/apache/htdocs/suspended-page/lava slot.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /lava%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:23 [error] 53938#53938: *674933 openat() "/usr/local/apache/htdocs/suspended-page/mega slot.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /mega%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:26 [error] 53946#53946: *674948 openat() "/usr/local/apache/htdocs/suspended-page/metal slot.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /metal%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:28 [error] 53942#53942: *674971 openat() "/usr/local/apache/htdocs/suspended-page/pg 168.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20168.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:29 [error] 53940#53940: *674990 openat() "/usr/local/apache/htdocs/suspended-page/pg betflik.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20betflik.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:31 [error] 53947#53947: *675013 openat() "/usr/local/apache/htdocs/suspended-page/pg game slot.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20game%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:33 [error] 53941#53941: *675034 openat() "/usr/local/apache/htdocs/suspended-page/pg game.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20game.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:35 [error] 53940#53940: *675058 openat() "/usr/local/apache/htdocs/suspended-page/pg joker.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20joker.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:37 [error] 53945#53945: *675078 openat() "/usr/local/apache/htdocs/suspended-page/pg slot99.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20slot99.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:39 [error] 53945#53945: *675097 openat() "/usr/local/apache/htdocs/suspended-page/pg soft.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20soft.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:41 [error] 53948#53948: *675112 openat() "/usr/local/apache/htdocs/suspended-page/pg th.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20th.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 10:41:43 [error] 53941#53941: *675132 openat() "/usr/local/apache/htdocs/suspended-page/pg thailand.aspx" failed (2: No such file or directory), client: 65.108.78.33, server: pumpbooking.com, request: "GET /pg%20thailand.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:39 [error] 53941#53941: *708533 openat() "/usr/local/apache/htdocs/suspended-page/phpinfo.php" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /phpinfo.php HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:40 [error] 53948#53948: *708543 openat() "/usr/local/apache/htdocs/suspended-page/test.php" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /test.php HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:41 [error] 53945#53945: *708551 openat() "/usr/local/apache/htdocs/suspended-page/_profiler/phpinfo" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /_profiler/phpinfo HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:41 [error] 53947#53947: *708558 openat() "/usr/local/apache/htdocs/suspended-page/.env" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /.env HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:42 [error] 53946#53946: *708564 openat() "/usr/local/apache/htdocs/suspended-page/db.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /db.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:43 [error] 53947#53947: *708571 openat() "/usr/local/apache/htdocs/suspended-page/dump.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /dump.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:44 [error] 53945#53945: *708584 openat() "/usr/local/apache/htdocs/suspended-page/database.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /database.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:44 [error] 53948#53948: *708592 openat() "/usr/local/apache/htdocs/suspended-page/backup.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /backup.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:45 [error] 53943#53943: *708600 openat() "/usr/local/apache/htdocs/suspended-page/config/db.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /config/db.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:46 [error] 53943#53943: *708606 openat() "/usr/local/apache/htdocs/suspended-page/sql/db.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /sql/db.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:47 [error] 53946#53946: *708609 openat() "/usr/local/apache/htdocs/suspended-page/data/dump.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /data/dump.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:47 [error] 53946#53946: *708615 openat() "/usr/local/apache/htdocs/suspended-page/backups/database.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /backups/database.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:48 [error] 53946#53946: *708619 openat() "/usr/local/apache/htdocs/suspended-page/mysql.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /mysql.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 11:40:49 [error] 53939#53939: *708624 openat() "/usr/local/apache/htdocs/suspended-page/db_backup.sql" failed (2: No such file or directory), client: 70.224.198.136, server: pumpbooking.com, request: "GET /db_backup.sql HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:06:10 [error] 53944#53944: *726447 openat() "/usr/local/apache/htdocs/suspended-page/bet/ดู ผลบอล 888 สด ฟุตบอล.html" failed (2: No such file or directory), client: 192.178.6.7, server: pumpbooking.com, request: "GET /bet/%E0%B8%94%E0%B8%B9%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%20888%20%E0%B8%AA%E0%B8%94%20%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html HTTP/1.1", host: "pumpbooking.com"
2026/03/11 12:09:09 [error] 53946#53946: *728627 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 142.44.220.112, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 12:28:25 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:28:27 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/pgslot login.aspx" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /pgslot%20login.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:28:29 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/pp slot.aspx" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /pp%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:28:30 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/riches888 pg.aspx" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /riches888%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:28:32 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/royal slot.aspx" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /royal%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:28:34 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/sa casino.aspx" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /sa%20casino.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:28:36 [error] 53942#53942: *741637 openat() "/usr/local/apache/htdocs/suspended-page/www ufabet com.aspx" failed (2: No such file or directory), client: 51.83.7.81, server: pumpbooking.com, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 12:50:19 [error] 53938#53938: *757210 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.68.111.241, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:07:21 [error] 53944#53944: *768430 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 106.219.88.165, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53943#53943: *790146 openat() "/usr/local/apache/htdocs/suspended-page/.env" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /.env HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53943#53943: *790146 openat() "/usr/local/apache/htdocs/suspended-page/wp" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /wp HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53944#53944: *790147 openat() "/usr/local/apache/htdocs/suspended-page/.git/config" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /.git/config HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53943#53943: *790146 openat() "/usr/local/apache/htdocs/suspended-page/wordpress" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /wordpress HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53944#53944: *790148 openat() "/usr/local/apache/htdocs/suspended-page/debug/default/index" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /debug/default/index HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53946#53946: *790150 openat() "/usr/local/apache/htdocs/suspended-page/blog" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /blog HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53944#53944: *790151 openat() "/usr/local/apache/htdocs/suspended-page/demo" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /demo HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53948#53948: *790153 openat() "/usr/local/apache/htdocs/suspended-page/new" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /new HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53943#53943: *790146 openat() "/usr/local/apache/htdocs/suspended-page/vendor/laravel-filemanager/js/script.js" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53944#53944: *790148 openat() "/usr/local/apache/htdocs/suspended-page/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53948#53948: *790153 openat() "/usr/local/apache/htdocs/suspended-page/_ignition/execute-solution" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /_ignition/execute-solution HTTP/1.1", host: "pumpbooking.com"
2026/03/11 13:46:27 [error] 53943#53943: *790146 openat() "/usr/local/apache/htdocs/suspended-page/public/vendor/laravel-filemanager/js/script.js" failed (2: No such file or directory), client: 209.38.27.11, server: pumpbooking.com, request: "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:19 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:21 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/24th slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /24th%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:22 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/789 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /789%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:24 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/betflix slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /betflix%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:26 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/dg casino.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /dg%20casino.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:28 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/h25 com.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /h25%20com.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:30 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/jili slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /jili%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:32 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/joker vip.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /joker%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:33 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg 168.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20168.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:35 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg auto.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:37 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg betflik.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20betflik.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:39 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg game slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20game%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:41 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg game.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20game.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:42 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg joker auto.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20joker%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:44 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg osaka.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20osaka.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:46 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 168.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20168.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:47 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 789.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20789.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:49 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 888th.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20888th.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:51 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot auto wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20auto%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:53 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot game.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20game.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:54 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot vegas.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:56 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot vip.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:58 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:02:59 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:01 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/pg slot168.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot168.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:03 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/slot 888.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%20888.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:04 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/slot 99.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%2099.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:06 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/slot auto.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:08 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/slot demo.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%20demo.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:09 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/slot free.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%20free.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:11 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/slot true wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:12 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/superslot vip.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /superslot%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:14 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/superslot168 wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /superslot168%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:16 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufa c4.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufa%20c4.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:17 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufa sa.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufa%20sa.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:19 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufa wallet 777.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufa%20wallet%20777.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:20 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufa wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufa%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:22 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 100.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufabet%20100.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:24 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufabet auto wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:25 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufabet auto.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufabet%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:27 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufabet wallet 777.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:29 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/ufabet wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufabet%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:30 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/w69 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /w69%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:32 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/wallet slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /wallet%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:33 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/we88 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /we88%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:35 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/www ufabet com.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:37 [error] 53943#53943: *834890 openat() "/usr/local/apache/htdocs/suspended-page/xo slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /xo%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 15:03:39 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:41 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/1234 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /1234%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:42 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/1234 superslot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /1234%20superslot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:44 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/168 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /168%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:46 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/2xl slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /2xl%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:47 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/789 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /789%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:49 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/888 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /888%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:50 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/all slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /all%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:52 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/allslot wallet.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /allslot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:54 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/betflik casino.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /betflik%20casino.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:55 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/betflik co.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /betflik%20co.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:57 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/betflik dc.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /betflik%20dc.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:03:59 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/betflix casino.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /betflix%20casino.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:00 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/betflix slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /betflix%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:02 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/casino betflik.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /casino%20betflik.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:04 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/galaxy auto slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /galaxy%20auto%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:05 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/galaxy bet slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /galaxy%20bet%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:07 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/galaxy slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /galaxy%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:09 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/h25 com.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /h25%20com.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:10 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/pg auto.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:12 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 168.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /pg%20slot%20168.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:14 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/sbobet ca.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /sbobet%20ca.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:15 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/slot 777.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /slot%20777.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:17 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/super pg 1688.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /super%20pg%201688.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:19 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/ufabet wallet 777.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:20 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/wallet slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /wallet%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:22 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/we88 slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /we88%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:04:24 [error] 53939#53939: *835782 openat() "/usr/local/apache/htdocs/suspended-page/xo slot.aspx" failed (2: No such file or directory), client: 79.137.65.139, server: pumpbooking.com, request: "GET /xo%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:32 [error] 53946#53946: *855448 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 5.255.231.101, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:33 [error] 53948#53948: *855459 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 95.108.213.88, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:34 [error] 53945#53945: *855470 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 87.250.224.84, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:35 [error] 53942#53942: *855479 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 87.250.224.23, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:36 [error] 53948#53948: *855491 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 87.250.224.9, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:37 [error] 53936#53936: *855505 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 213.180.203.212, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:38 [error] 53948#53948: *855566 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 213.180.203.154, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:39 [error] 53948#53948: *855638 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 213.180.203.234, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:40 [error] 53947#53947: *855667 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 213.180.203.164, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 15:31:41 [error] 53942#53942: *855678 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 87.250.224.89, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 16:28:57 [error] 53946#53946: *895142 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 44.248.199.203, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 16:57:37 [error] 53946#53946: *917378 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.241.128, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:35:23 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:24 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/pg soft.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pg%20soft.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:26 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/pg thailand.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pg%20thailand.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:28 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/pg wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pg%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:29 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/pgzeed gold.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pgzeed%20gold.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:31 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/pp slot.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pp%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:33 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/riches777 pg.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /riches777%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:35 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/riches888 pg.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /riches888%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:36 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/royal slot.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /royal%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:38 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/sa casino.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /sa%20casino.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:40 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/sbobet ca.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /sbobet%20ca.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:41 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/slot game 666.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20game%20666.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:43 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/slot joker.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20joker.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:45 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/slot pg soft.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:46 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/slot pg vip.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:48 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/slot1234 pg.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot1234%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:50 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/slotxo wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slotxo%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:52 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet net.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:53 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/ufa vip.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20vip.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:55 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 1668.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufabet%201668.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:57 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/ufabet net.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufabet%20net.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:35:58 [error] 53948#53948: *945069 openat() "/usr/local/apache/htdocs/suspended-page/yakuza slot.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /yakuza%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/11 17:36:02 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:03 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/pg slot wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:05 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/pg wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pg%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:07 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/pgzeed gold.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /pgzeed%20gold.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:09 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/riches666 pg.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /riches666%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:10 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/riches777 pg.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /riches777%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:12 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/sbobet auto.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /sbobet%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:14 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot 888.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20888.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:15 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot 99.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%2099.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:17 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot auto.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:19 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot demo.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20demo.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:21 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot free.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20free.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:22 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot game 666.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20game%20666.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:24 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot joker.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20joker.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:25 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot online.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20online.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:27 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot pg soft.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:29 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot pg vip.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:30 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot pg wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:32 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot super wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:34 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot true wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:35 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet 777 auto.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:37 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet iwallet link login.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:38 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:40 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/slotxo wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /slotxo%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:42 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/spg slot.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /spg%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:43 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/spx slot.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /spx%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:45 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/superslot max wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:47 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/superslot vip.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /superslot%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:48 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet net.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:50 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /superslot%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:51 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/superslot168 wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /superslot168%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:53 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa 168.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20168.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:55 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa c4.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20c4.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:57 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa sa.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20sa.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:36:58 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa slot.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:37:00 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa vip.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:37:01 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa wallet 777.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20wallet%20777.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:37:03 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufa wallet.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufa%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:37:05 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 100.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufabet%20100.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 17:37:06 [error] 53948#53948: *945605 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 1668.aspx" failed (2: No such file or directory), client: 145.239.69.40, server: pumpbooking.com, request: "GET /ufabet%201668.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/11 23:28:26 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:27 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:28 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/blog/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:29 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/web/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:29 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/wordpress/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:30 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/website/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:31 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/wp/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:31 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/news/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:32 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/2018/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:32 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/2019/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:32 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/shop/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:33 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/wp1/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:34 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/test/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:34 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/media/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:35 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/wp2/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:35 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/site/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:36 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/cms/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/11 23:28:36 [error] 53947#53947: *1202873 openat() "/usr/local/apache/htdocs/suspended-page/sito/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 8.229.39.10, server: pumpbooking.com, request: "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:00:16 [error] 53946#53946: *1225897 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 35.230.13.134, server: pumpbooking.com, request: "HEAD /wordpress/ HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:00:16 [error] 53946#53946: *1225897 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 35.230.13.134, server: pumpbooking.com, request: "HEAD /old/ HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:00:16 [error] 53946#53946: *1225897 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 35.230.13.134, server: pumpbooking.com, request: "HEAD /wp/ HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:00:16 [error] 53946#53946: *1225897 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 35.230.13.134, server: pumpbooking.com, request: "HEAD /new/ HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:00:17 [error] 53946#53946: *1225897 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 35.230.13.134, server: pumpbooking.com, request: "HEAD /blog/ HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:00:17 [error] 53946#53946: *1225897 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 35.230.13.134, server: pumpbooking.com, request: "HEAD /backup/ HTTP/1.1", host: "pumpbooking.com"
2026/03/12 00:03:23 [error] 53948#53948: *1228212 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 148.113.128.86, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 01:19:07 [error] 53473#53473: *1283145 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 173.252.83.5, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/12 01:19:08 [error] 53473#53473: *1283157 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 173.252.83.34, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:26:56 [error] 53494#53494: *1329079 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 189.127.190.66, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:26:56 [error] 53500#53500: *1329085 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 5.31.136.47, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:27:44 [error] 53520#53520: *1329670 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 185.252.220.147, server: pumpbooking.com, request: "POST /xmlrpc.php HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:29:37 [error] 53500#53500: *1331127 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 5.39.1.255, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:38:20 [error] 53520#53520: *1336771 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 168.144.26.211, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", host: "pumpbooking.com", referrer: "http://pumpbooking.com/"
2026/03/12 02:38:26 [error] 53520#53520: *1336838 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 168.144.26.211, server: pumpbooking.com, request: "GET /favicon.ico HTTP/1.1", host: "pumpbooking.com", referrer: "https://pumpbooking.com/"
2026/03/12 02:56:46 [error] 53520#53520: *1348037 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:56:48 [error] 53494#53494: *1348052 openat() "/usr/local/apache/htdocs/suspended-page/1234 superslot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /1234%20superslot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:56:51 [error] 53451#53451: *1348071 openat() "/usr/local/apache/htdocs/suspended-page/168 slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /168%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:56:53 [error] 53494#53494: *1348087 openat() "/usr/local/apache/htdocs/suspended-page/all slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /all%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:56:55 [error] 53494#53494: *1348106 openat() "/usr/local/apache/htdocs/suspended-page/apollo slot pg.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:56:57 [error] 53500#53500: *1348126 openat() "/usr/local/apache/htdocs/suspended-page/auto slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /auto%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:56:59 [error] 53401#53401: *1348144 openat() "/usr/local/apache/htdocs/suspended-page/betflik casino.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /betflik%20casino.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:57:01 [error] 53500#53500: *1348163 openat() "/usr/local/apache/htdocs/suspended-page/betflix wallet.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /betflix%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:57:03 [error] 53473#53473: *1348189 openat() "/usr/local/apache/htdocs/suspended-page/galaxy auto slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /galaxy%20auto%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:57:05 [error] 53500#53500: *1348211 openat() "/usr/local/apache/htdocs/suspended-page/galaxy slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /galaxy%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:57:07 [error] 53483#53483: *1348233 openat() "/usr/local/apache/htdocs/suspended-page/joker slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /joker%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 02:57:09 [error] 53520#53520: *1348252 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:11 [error] 53461#53461: *1348277 openat() "/usr/local/apache/htdocs/suspended-page/apollo slot pg.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:13 [error] 53461#53461: *1348291 openat() "/usr/local/apache/htdocs/suspended-page/jili slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /jili%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:15 [error] 53520#53520: *1348310 openat() "/usr/local/apache/htdocs/suspended-page/pg joker auto.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20joker%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:17 [error] 53396#53396: *1348333 openat() "/usr/local/apache/htdocs/suspended-page/pg osaka.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20osaka.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:19 [error] 53520#53520: *1348353 openat() "/usr/local/apache/htdocs/suspended-page/pg plus.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20plus.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:21 [error] 53401#53401: *1348379 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 789.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20slot%20789.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:23 [error] 53520#53520: *1348401 openat() "/usr/local/apache/htdocs/suspended-page/pg slot 888th.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20slot%20888th.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:25 [error] 53520#53520: *1348418 openat() "/usr/local/apache/htdocs/suspended-page/pg slot auto wallet.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20slot%20auto%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:27 [error] 53483#53483: *1348435 openat() "/usr/local/apache/htdocs/suspended-page/pg slot auto.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20slot%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:29 [error] 53430#53430: *1348463 openat() "/usr/local/apache/htdocs/suspended-page/pg slot vegas.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:31 [error] 53520#53520: *1348483 openat() "/usr/local/apache/htdocs/suspended-page/pg slot vip.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:33 [error] 53520#53520: *1348499 openat() "/usr/local/apache/htdocs/suspended-page/pg world.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /pg%20world.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:35 [error] 53461#53461: *1348522 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 7777.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /ufabet%207777.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:37 [error] 53461#53461: *1348538 openat() "/usr/local/apache/htdocs/suspended-page/ufabet auto wallet.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 02:57:39 [error] 53483#53483: *1348553 openat() "/usr/local/apache/htdocs/suspended-page/w69 slot.aspx" failed (2: No such file or directory), client: 157.173.127.72, server: pumpbooking.com, request: "GET /w69%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:29:42 [error] 58923#58923: *1367262 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 34.175.72.1, server: pumpbooking.com, request: "HEAD /new/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:29:43 [error] 58923#58923: *1367262 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 34.175.72.1, server: pumpbooking.com, request: "HEAD /old/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:29:43 [error] 58923#58923: *1367262 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 34.175.72.1, server: pumpbooking.com, request: "HEAD /wordpress/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:29:43 [error] 58923#58923: *1367262 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 34.175.72.1, server: pumpbooking.com, request: "HEAD /backup/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:29:44 [error] 58923#58923: *1367262 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 34.175.72.1, server: pumpbooking.com, request: "HEAD /blog/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:29:44 [error] 58923#58923: *1367262 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 34.175.72.1, server: pumpbooking.com, request: "HEAD /wp/ HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 03:57:17 [error] 58916#58916: *1382517 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/12 03:57:22 [error] 58916#58916: *1382517 openat() "/usr/local/apache/htdocs/suspended-page/allslot wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /allslot%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 03:57:27 [error] 58916#58916: *1382517 openat() "/usr/local/apache/htdocs/suspended-page/pgslot login.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /pgslot%20login.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 03:57:32 [error] 58916#58916: *1382517 openat() "/usr/local/apache/htdocs/suspended-page/slot 777.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot%20777.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:02:14 [error] 58922#58922: *1385863 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 172.98.33.13, server: pumpbooking.com, request: "GET /wp-login.php HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:10:56 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/slot pg wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:10:58 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/slot super wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:00 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet 777 auto.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:02 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet iwallet link login.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:04 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/slot wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:06 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/spg slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /spg%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:08 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/spx slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /spx%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:10 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/super pg 1688.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /super%20pg%201688.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:12 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/super slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /super%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:14 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/superslot max wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:16 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/superslot wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /superslot%20wallet.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:18 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/ufa 168.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /ufa%20168.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:20 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/ufa slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /ufa%20slot.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:22 [error] 58922#58922: *1391161 openat() "/usr/local/apache/htdocs/suspended-page/ufabet 7777.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /ufabet%207777.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:11:25 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:27 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/amb superslot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /amb%20superslot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:29 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/auto slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /auto%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:32 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflik original.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflik%20original.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:33 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflik slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflik%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:36 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflik thailand.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflik%20thailand.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:39 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflix auto.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflix%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:42 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflix co.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflix%20co.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:45 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflix thailand.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflix%20thailand.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:49 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/betflix wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /betflix%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:11:52 [error] 58923#58923: *1391443 openat() "/usr/local/apache/htdocs/suspended-page/casino betflix.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /casino%20betflix.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:31 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/casino wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /casino%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:33 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/demon slot game.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /demon%20slot%20game.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:34 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/dg casino.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /dg%20casino.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:36 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/g2g slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /g2g%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:38 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/pg slot game.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /pg%20slot%20game.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:40 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/pg slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /pg%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:42 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/pg slot168.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /pg%20slot168.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:44 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/slot1234 pg.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /slot1234%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:46 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/super slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /super%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:47 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/ufabet auto.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /ufabet%20auto.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:49 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/ufabet net.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /ufabet%20net.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:51 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/ufabet wallet.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /ufabet%20wallet.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:14:53 [error] 58923#58923: *1393326 openat() "/usr/local/apache/htdocs/suspended-page/yakuza slot.aspx" failed (2: No such file or directory), client: 194.247.173.99, server: pumpbooking.com, request: "GET /yakuza%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:22 [error] 58922#58922: *1403514 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:37:24 [error] 58922#58922: *1403514 openat() "/usr/local/apache/htdocs/suspended-page/pg slot99.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20slot99.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:37:26 [error] 58922#58922: *1403514 openat() "/usr/local/apache/htdocs/suspended-page/pg th.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20th.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:37:27 [error] 58922#58922: *1403514 openat() "/usr/local/apache/htdocs/suspended-page/pg world.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20world.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:37:29 [error] 58922#58922: *1403514 openat() "/usr/local/apache/htdocs/suspended-page/riches666 pg.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /riches666%20pg.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:37:30 [error] 58922#58922: *1403514 openat() "/usr/local/apache/htdocs/suspended-page/slot online.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /slot%20online.aspx HTTP/1.1", host: "pumpbooking.com"
2026/03/12 04:37:32 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:33 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/24th slot.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /24th%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:35 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/joker slot.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /joker%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:37 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/joker vip.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /joker%20vip.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:38 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/kingkong joker.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /kingkong%20joker.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:40 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/lava slot.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /lava%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:42 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/mega slot.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /mega%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:43 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/metal slot.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /metal%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:45 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg 168.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20168.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:47 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg betflik.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20betflik.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:48 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg game slot.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20game%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:50 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg game.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20game.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:52 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg joker.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20joker.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:54 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg slot99.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20slot99.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:55 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg soft.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20soft.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:57 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg th.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20th.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:37:59 [error] 58917#58917: *1403581 openat() "/usr/local/apache/htdocs/suspended-page/pg thailand.aspx" failed (2: No such file or directory), client: 81.167.26.57, server: pumpbooking.com, request: "GET /pg%20thailand.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 04:59:13 [error] 58923#58923: *1411449 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 172.98.33.11, server: pumpbooking.com, request: "GET /wp-login.php HTTP/1.1", host: "pumpbooking.com"
2026/03/12 05:54:13 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /robots.txt HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 05:54:15 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/pgslot login.aspx" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /pgslot%20login.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 05:54:17 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/pp slot.aspx" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /pp%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 05:54:18 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/riches888 pg.aspx" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /riches888%20pg.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 05:54:20 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/royal slot.aspx" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /royal%20slot.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 05:54:22 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/sa casino.aspx" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /sa%20casino.aspx HTTP/1.1", host: "www.pumpbooking.com"
2026/03/12 05:54:24 [error] 58923#58923: *1433629 openat() "/usr/local/apache/htdocs/suspended-page/www ufabet com.aspx" failed (2: No such file or directory), client: 147.135.214.103, server: pumpbooking.com, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", host: "www.pumpbooking.com"
[Thu Mar 12 09:05:19.228691 2026] [:error] [pid 11986:tid 12041] [client 147.135.252.179:56558] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abIRTzKqY2w-DVCrxTCVkQAAAdc"]
[Thu Mar 12 09:05:21.310427 2026] [:error] [pid 51540:tid 51557] [client 147.135.252.179:32874] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abIRUWOFFjotMIN2UD1mZgAAAM8"]
[Thu Mar 12 09:05:23.698881 2026] [:error] [pid 51455:tid 51475] [client 147.135.252.179:32878] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abIRU5E0YyNxdg6PL_AMHwAAAA8"]
[Thu Mar 12 09:05:25.946771 2026] [:error] [pid 22063:tid 22077] [client 147.135.252.179:32882] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abIRVa0RUhS-MJyHWLRtPQAAAgw"]
[Thu Mar 12 09:05:28.296879 2026] [:error] [pid 22063:tid 22080] [client 147.135.252.179:44834] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abIRWK0RUhS-MJyHWLRtQAAAAg8"]
[Thu Mar 12 09:05:30.396896 2026] [:error] [pid 11985:tid 12003] [client 147.135.252.179:44836] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abIRWncAcNujsOssVDfRbgAAAYw"]
[Thu Mar 12 09:05:32.567367 2026] [:error] [pid 51457:tid 51537] [client 147.135.252.179:44842] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abIRXCjknw2FvT4H3DaFdgAAAJc"]
[Thu Mar 12 09:05:34.562108 2026] [:error] [pid 51455:tid 51465] [client 147.135.252.179:44844] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abIRXpE0YyNxdg6PL_AMKQAAAAU"]
[Thu Mar 12 09:05:36.413943 2026] [:error] [pid 8249:tid 8265] [client 147.135.252.179:44854] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abIRYCK5dL3-8Jdf0M3WogAAAQ4"]
[Thu Mar 12 09:05:38.400167 2026] [:error] [pid 8249:tid 8266] [client 147.135.252.179:52956] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abIRYiK5dL3-8Jdf0M3WpwAAAQ8"]
[Thu Mar 12 09:05:40.522409 2026] [:error] [pid 11985:tid 12007] [client 147.135.252.179:52960] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abIRZHcAcNujsOssVDfRfAAAAZA"]
[Thu Mar 12 09:05:42.401115 2026] [:error] [pid 51457:tid 51531] [client 147.135.252.179:52976] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abIRZijknw2FvT4H3DaFhgAAAJE"]
[Thu Mar 12 09:05:44.416082 2026] [:error] [pid 11985:tid 11999] [client 147.135.252.179:52978] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abIRaHcAcNujsOssVDfRgAAAAYg"]
[Thu Mar 12 09:05:46.297194 2026] [:error] [pid 8249:tid 8255] [client 147.135.252.179:52994] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abIRaiK5dL3-8Jdf0M3WsgAAAQQ"]
[Thu Mar 12 09:05:48.295066 2026] [:error] [pid 51455:tid 51474] [client 147.135.252.179:39596] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abIRbJE0YyNxdg6PL_AMUgAAAA4"]
[Thu Mar 12 09:05:50.229427 2026] [:error] [pid 8249:tid 8272] [client 147.135.252.179:39608] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abIRbiK5dL3-8Jdf0M3WtgAAARU"]
[Thu Mar 12 09:05:52.241059 2026] [:error] [pid 51456:tid 51487] [client 147.135.252.179:39616] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abIRcBXu8LzVixNGr0s6hAAAAEA"]
[Thu Mar 12 09:05:54.215728 2026] [:error] [pid 51540:tid 51559] [client 147.135.252.179:39618] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abIRcmOFFjotMIN2UD1m4AAAANE"]
[Thu Mar 12 09:05:56.175805 2026] [:error] [pid 51457:tid 51527] [client 147.135.252.179:39634] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abIRdCjknw2FvT4H3DaFjwAAAI0"]
[Thu Mar 12 09:05:58.029637 2026] [:error] [pid 51457:tid 51524] [client 147.135.252.179:39640] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abIRdijknw2FvT4H3DaFkgAAAIo"]
[Thu Mar 12 09:05:59.934938 2026] [:error] [pid 22063:tid 22068] [client 147.135.252.179:40426] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abIRd60RUhS-MJyHWLRtpAAAAgM"]
[Thu Mar 12 09:06:01.803220 2026] [:error] [pid 51455:tid 51468] [client 147.135.252.179:40436] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abIReZE0YyNxdg6PL_AMZQAAAAg"]
[Thu Mar 12 09:06:03.786538 2026] [:error] [pid 51455:tid 51477] [client 147.135.252.179:40446] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abIRe5E0YyNxdg6PL_AMbAAAABE"]
[Thu Mar 12 09:06:05.717520 2026] [:error] [pid 8249:tid 8273] [client 147.135.252.179:40450] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abIRfSK5dL3-8Jdf0M3WzwAAARY"]
[Thu Mar 12 09:06:07.550692 2026] [:error] [pid 51455:tid 51462] [client 147.135.252.179:40462] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abIRf5E0YyNxdg6PL_AMcAAAAAI"]
[Thu Mar 12 09:06:09.633030 2026] [:error] [pid 51457:tid 51529] [client 147.135.252.179:50844] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abIRgSjknw2FvT4H3DaFmAAAAI8"]
[Thu Mar 12 09:06:11.571251 2026] [:error] [pid 11985:tid 12001] [client 147.135.252.179:50846] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abIRg3cAcNujsOssVDfRkQAAAYo"]
[Thu Mar 12 09:06:13.499325 2026] [:error] [pid 22063:tid 22082] [client 147.135.252.179:50856] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abIRha0RUhS-MJyHWLRtsAAAAhE"]
[Thu Mar 12 09:06:15.401406 2026] [:error] [pid 51455:tid 51473] [client 147.135.252.179:50862] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abIRh5E0YyNxdg6PL_AMhAAAAA0"]
[Thu Mar 12 09:06:35.745513 2026] [:error] [pid 11986:tid 12020] [client 147.135.252.179:58580] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "abIRmzKqY2w-DVCrxTCVvgAAAcI"]
[Thu Mar 12 09:06:37.573000 2026] [:error] [pid 51455:tid 51462] [client 147.135.252.179:58586] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "abIRnZE0YyNxdg6PL_AMoAAAAAI"]
[Thu Mar 12 09:06:39.502794 2026] [:error] [pid 51455:tid 51476] [client 147.135.252.179:49650] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "abIRn5E0YyNxdg6PL_AMpAAAABA"]
[Thu Mar 12 09:06:41.464192 2026] [:error] [pid 51455:tid 51462] [client 147.135.252.179:49658] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "abIRoZE0YyNxdg6PL_AMqwAAAAI"]
[Thu Mar 12 09:06:43.542734 2026] [:error] [pid 11985:tid 12006] [client 147.135.252.179:49668] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "abIRo3cAcNujsOssVDfRmgAAAY8"]
[Thu Mar 12 09:06:45.471382 2026] [:error] [pid 11986:tid 12029] [client 147.135.252.179:49678] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "abIRpTKqY2w-DVCrxTCVxAAAAcs"]
[Thu Mar 12 09:06:47.533124 2026] [:error] [pid 22063:tid 22086] [client 147.135.252.179:49692] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "abIRp60RUhS-MJyHWLRuAAAAAhU"]
[Thu Mar 12 09:06:49.631663 2026] [:error] [pid 8249:tid 8267] [client 147.135.252.179:38380] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "abIRqSK5dL3-8Jdf0M3XCQAAARA"]
[Thu Mar 12 09:06:51.583872 2026] [:error] [pid 22063:tid 22074] [client 147.135.252.179:38394] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abIRq60RUhS-MJyHWLRuCwAAAgk"]
[Thu Mar 12 09:06:53.664633 2026] [:error] [pid 51457:tid 51534] [client 147.135.252.179:38404] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "abIRrSjknw2FvT4H3DaFowAAAJQ"]
[Thu Mar 12 09:06:55.646756 2026] [:error] [pid 51455:tid 51470] [client 147.135.252.179:38416] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abIRr5E0YyNxdg6PL_AMvQAAAAo"]
[Thu Mar 12 09:06:57.721160 2026] [:error] [pid 51540:tid 51558] [client 147.135.252.179:38418] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abIRsWOFFjotMIN2UD1nBgAAANA"]
[Thu Mar 12 09:06:59.636959 2026] [:error] [pid 8249:tid 8273] [client 147.135.252.179:45658] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abIRsyK5dL3-8Jdf0M3XEgAAARY"]
[Thu Mar 12 09:07:01.601353 2026] [:error] [pid 51540:tid 51555] [client 147.135.252.179:45668] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abIRtWOFFjotMIN2UD1nCAAAAM0"]
[Thu Mar 12 09:07:03.512899 2026] [:error] [pid 22063:tid 22081] [client 147.135.252.179:45672] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abIRt60RUhS-MJyHWLRuFAAAAhA"]
[Thu Mar 12 09:07:05.339478 2026] [:error] [pid 51455:tid 51471] [client 147.135.252.179:45684] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abIRuZE0YyNxdg6PL_AM2wAAAAs"]
[Thu Mar 12 09:07:07.443506 2026] [:error] [pid 51540:tid 51550] [client 147.135.252.179:45696] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abIRu2OFFjotMIN2UD1nDAAAAMg"]
[Thu Mar 12 09:07:09.428183 2026] [:error] [pid 51540:tid 51556] [client 147.135.252.179:40010] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abIRvWOFFjotMIN2UD1nEAAAAM4"]
[Thu Mar 12 09:07:11.501711 2026] [:error] [pid 8249:tid 8261] [client 147.135.252.179:40022] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abIRvyK5dL3-8Jdf0M3XIAAAAQo"]
[Thu Mar 12 09:07:13.559799 2026] [:error] [pid 22063:tid 22080] [client 147.135.252.179:40036] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abIRwa0RUhS-MJyHWLRuIAAAAg8"]
[Thu Mar 12 09:07:15.440249 2026] [:error] [pid 51456:tid 51504] [client 147.135.252.179:40040] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abIRwxXu8LzVixNGr0s6ngAAAFE"]
[Thu Mar 12 09:07:17.353488 2026] [:error] [pid 11953:tid 11958] [client 147.135.252.179:40052] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abIRxZudzqsnq3bvtDbuAQAAAUM"]
[Thu Mar 12 09:07:19.387588 2026] [:error] [pid 51455:tid 51481] [client 147.135.252.179:50580] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abIRx5E0YyNxdg6PL_AM6QAAABU"]
[Thu Mar 12 09:07:21.277853 2026] [:error] [pid 51457:tid 51536] [client 147.135.252.179:50592] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abIRySjknw2FvT4H3DaFswAAAJY"]
[Thu Mar 12 10:08:36.750442 2026] [:error] [pid 51455:tid 51464] [client 177.95.29.211:54255] [client 177.95.29.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.95.29.211, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abIgJJE0YyNxdg6PL_AqKAAAAAQ"]
[Thu Mar 12 10:08:36.756586 2026] [:error] [pid 51455:tid 51464] [client 177.95.29.211:54255] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 12 10:27:18.500035 2026] [:error] [pid 51455:tid 51464] [client 51.68.233.44:33842] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abIkhpE0YyNxdg6PL_A05wAAAAQ"]
[Thu Mar 12 10:27:20.342330 2026] [:error] [pid 11986:tid 12026] [client 51.68.233.44:59650] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "abIkiDKqY2w-DVCrxTChmQAAAcg"]
[Thu Mar 12 10:27:22.318309 2026] [:error] [pid 51456:tid 51494] [client 51.68.233.44:59666] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abIkihXu8LzVixNGr0s_XQAAAEc"]
[Thu Mar 12 10:27:24.247355 2026] [:error] [pid 11986:tid 12019] [client 51.68.233.44:59680] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abIkjDKqY2w-DVCrxTChmwAAAcE"]
[Thu Mar 12 10:27:26.167481 2026] [:error] [pid 51540:tid 51560] [client 51.68.233.44:59692] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "abIkjmOFFjotMIN2UD12iwAAANI"]
[Thu Mar 12 10:27:28.064825 2026] [:error] [pid 11985:tid 11993] [client 51.68.233.44:59696] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "abIkkHcAcNujsOssVDfcYQAAAYI"]
[Thu Mar 12 10:27:29.986723 2026] [:error] [pid 22063:tid 22084] [client 51.68.233.44:34472] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abIkka0RUhS-MJyHWLSCCQAAAhM"]
[Thu Mar 12 10:27:31.910181 2026] [:error] [pid 11985:tid 12014] [client 51.68.233.44:34474] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abIkk3cAcNujsOssVDfcZgAAAZc"]
[Thu Mar 12 10:27:33.949826 2026] [:error] [pid 8249:tid 8258] [client 51.68.233.44:34486] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abIklSK5dL3-8Jdf0M3xMwAAAQc"]
[Thu Mar 12 10:27:35.911059 2026] [:error] [pid 22063:tid 22073] [client 51.68.233.44:34490] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abIkl60RUhS-MJyHWLSCEQAAAgg"]
[Thu Mar 12 10:27:37.806442 2026] [:error] [pid 22063:tid 22076] [client 51.68.233.44:34500] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abIkma0RUhS-MJyHWLSCFAAAAgs"]
[Thu Mar 12 10:27:39.864612 2026] [:error] [pid 8249:tid 8254] [client 51.68.233.44:57294] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abIkmyK5dL3-8Jdf0M3xPAAAAQM"]
[Thu Mar 12 10:27:41.926393 2026] [:error] [pid 22063:tid 22079] [client 51.68.233.44:57300] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abIkna0RUhS-MJyHWLSCFwAAAg4"]
[Thu Mar 12 10:27:43.984879 2026] [:error] [pid 11986:tid 12020] [client 51.68.233.44:57310] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abIknzKqY2w-DVCrxTChoAAAAcI"]
[Thu Mar 12 10:27:45.897269 2026] [:error] [pid 22063:tid 22066] [client 51.68.233.44:57318] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abIkoa0RUhS-MJyHWLSCHAAAAgE"]
[Thu Mar 12 10:27:47.803871 2026] [:error] [pid 8249:tid 8258] [client 51.68.233.44:57332] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abIkoyK5dL3-8Jdf0M3xSgAAAQc"]
[Thu Mar 12 11:02:11.307815 2026] [:error] [pid 8249:tid 8257] [client 51.75.119.168:54242] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abIssyK5dL3-8Jdf0M38zAAAAQY"]
[Thu Mar 12 11:02:13.388444 2026] [:error] [pid 11985:tid 11991] [client 51.75.119.168:44398] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abIstXcAcNujsOssVDfguQAAAYA"]
[Thu Mar 12 11:02:15.434111 2026] [:error] [pid 51455:tid 51462] [client 51.75.119.168:44402] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abIst5E0YyNxdg6PL_BE1QAAAAI"]
[Thu Mar 12 11:02:17.298397 2026] [:error] [pid 11953:tid 11964] [client 51.75.119.168:44412] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abIsuZudzqsnq3bvtDb39wAAAUk"]
[Thu Mar 12 11:02:19.319030 2026] [:error] [pid 51455:tid 51473] [client 51.75.119.168:48998] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abIsu5E0YyNxdg6PL_BE4QAAAA0"]
[Thu Mar 12 11:02:21.369891 2026] [:error] [pid 11986:tid 12018] [client 51.75.119.168:49002] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abIsvTKqY2w-DVCrxTCmSAAAAcA"]
[Thu Mar 12 11:02:23.222989 2026] [:error] [pid 8249:tid 8263] [client 51.75.119.168:49010] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abIsvyK5dL3-8Jdf0M382AAAAQw"]
[Thu Mar 12 11:02:25.341651 2026] [:error] [pid 51540:tid 51555] [client 51.75.119.168:49018] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abIswWOFFjotMIN2UD19gAAAAM0"]
[Thu Mar 12 11:02:27.255055 2026] [:error] [pid 51540:tid 51556] [client 51.75.119.168:49022] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abIsw2OFFjotMIN2UD19gwAAAM4"]
[Thu Mar 12 11:02:29.267528 2026] [:error] [pid 11985:tid 12014] [client 51.75.119.168:43504] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abIsxXcAcNujsOssVDfgwgAAAZc"]
[Thu Mar 12 11:02:31.303850 2026] [:error] [pid 11985:tid 11991] [client 51.75.119.168:43516] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abIsx3cAcNujsOssVDfgwwAAAYA"]
[Thu Mar 12 11:02:35.168789 2026] [:error] [pid 22063:tid 22086] [client 51.75.119.168:43532] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abIsy60RUhS-MJyHWLSKcwAAAhU"]
[Thu Mar 12 11:02:38.964971 2026] [:error] [pid 51455:tid 51475] [client 51.75.119.168:51350] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abIszpE0YyNxdg6PL_BFEQAAAA8"]
[Thu Mar 12 12:32:13.050483 2026] [:error] [pid 22063:tid 22085] [client 43.135.133.194:58736] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abJBza0RUhS-MJyHWLSsXAAAAhQ"]
[Thu Mar 12 16:56:50.372029 2026] [:error] [pid 8249:tid 8264] [client 175.6.217.4:57911] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abJ_0iK5dL3-8Jdf0M3hwgAAAQ0"]
[Thu Mar 12 17:14:30.582898 2026] [:error] [pid 11985:tid 12004] [client 134.0.190.232:59673] [client 134.0.190.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.0.190.232, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abKD9ncAcNujsOssVDcLegAAAY0"]
[Thu Mar 12 17:14:30.589014 2026] [:error] [pid 11985:tid 12004] [client 134.0.190.232:59673] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 12 18:18:49.124489 2026] [:error] [pid 8249:tid 8254] [client 43.159.152.187:49554] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abKTCSK5dL3-8Jdf0M0HOwAAAQM"]
[Thu Mar 12 18:25:30.356674 2026] [:error] [pid 51457:tid 51517] [client 103.65.236.149:53418] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "abKUmijknw2FvT4H3DavagAAAIM"]
[Thu Mar 12 18:25:30.580299 2026] [:error] [pid 8249:tid 8262] [client 103.65.236.149:53438] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "abKUmiK5dL3-8Jdf0M0KGQAAAQs"]
[Thu Mar 12 18:27:19.152359 2026] [:error] [pid 22063:tid 22085] [client 43.135.134.127:59690] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abKVB60RUhS-MJyHWLQc3wAAAhQ"]
[Thu Mar 12 20:19:30.054688 2026] [:error] [pid 20528:tid 20537] [client 145.239.65.236:51706] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abKvUqnDNsf46-tKxqkQAgAAAwM"]
[Thu Mar 12 20:19:33.807382 2026] [:error] [pid 51457:tid 51532] [client 145.239.65.236:51722] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abKvVSjknw2FvT4H3Da-NQAAAJI"]
[Thu Mar 12 21:36:47.776177 2026] [:error] [pid 20530:tid 20611] [client 136.144.35.138:43783] [client 136.144.35.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.138, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abLBbwkNGxMzPO-s9qcQVwAAA5Y"]
[Thu Mar 12 21:36:47.781719 2026] [:error] [pid 20530:tid 20611] [client 136.144.35.138:43783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 12 22:10:22.332968 2026] [:error] [pid 11986:tid 12024] [client 51.75.116.205:33856] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abLJTjKqY2w-DVCrxTAyBQAAAcY"]
[Thu Mar 12 22:10:24.613304 2026] [:error] [pid 11986:tid 12024] [client 51.75.116.205:38582] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abLJUDKqY2w-DVCrxTAyGAAAAcY"]
[Thu Mar 12 22:10:26.769566 2026] [:error] [pid 20467:tid 20470] [client 51.75.116.205:38598] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abLJUnJ3UvosyIqy8ayv1AAAAoA"]
[Thu Mar 12 22:10:28.706726 2026] [:error] [pid 51456:tid 51507] [client 51.75.116.205:51994] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abLJVBXu8LzVixNGr0uBHgAAAFQ"]
[Thu Mar 12 22:10:30.512734 2026] [:error] [pid 11953:tid 11979] [client 51.75.116.205:52008] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abLJVpudzqsnq3bvtDZgRAAAAVg"]
[Thu Mar 12 22:10:32.766486 2026] [:error] [pid 8249:tid 8257] [client 51.75.116.205:52010] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abLJWCK5dL3-8Jdf0M1_LQAAAQY"]
[Thu Mar 12 22:10:34.584297 2026] [:error] [pid 8249:tid 8274] [client 51.75.116.205:52014] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abLJWiK5dL3-8Jdf0M1_NgAAARc"]
[Thu Mar 12 22:10:36.409075 2026] [:error] [pid 20528:tid 20534] [client 51.75.116.205:52018] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abLJXKnDNsf46-tKxqkZMgAAAwA"]
[Thu Mar 12 22:10:38.406110 2026] [:error] [pid 8249:tid 8265] [client 51.75.116.205:54058] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abLJXiK5dL3-8Jdf0M1_SwAAAQ4"]
[Thu Mar 12 22:10:40.411876 2026] [:error] [pid 11986:tid 12020] [client 51.75.116.205:54064] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abLJYDKqY2w-DVCrxTAyIAAAAcI"]
[Thu Mar 12 22:10:42.348704 2026] [:error] [pid 8249:tid 8255] [client 51.75.116.205:54074] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abLJYiK5dL3-8Jdf0M1_VAAAAQQ"]
[Thu Mar 12 22:10:44.210054 2026] [:error] [pid 8249:tid 8270] [client 51.75.116.205:54082] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abLJZCK5dL3-8Jdf0M1_WwAAARM"]
[Thu Mar 12 22:54:15.239053 2026] [:error] [pid 11986:tid 12032] [client 51.68.233.44:36316] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abLTlzKqY2w-DVCrxTA-egAAAc4"]
[Thu Mar 12 22:54:17.132857 2026] [:error] [pid 20467:tid 20470] [client 51.68.233.44:59206] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abLTmXJ3UvosyIqy8ay1YAAAAoA"]
[Thu Mar 12 22:54:19.263597 2026] [:error] [pid 51457:tid 51536] [client 51.68.233.44:60846] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abLTmyjknw2FvT4H3DbYVQAAAJY"]
[Thu Mar 12 22:54:21.333109 2026] [:error] [pid 20530:tid 20612] [client 51.68.233.44:60862] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abLTnQkNGxMzPO-s9qcXqgAAA5c"]
[Thu Mar 12 22:54:23.265949 2026] [:error] [pid 11953:tid 11976] [client 51.68.233.44:60866] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abLTn5udzqsnq3bvtDZ1UwAAAVU"]
[Thu Mar 12 22:54:25.183163 2026] [:error] [pid 20530:tid 20604] [client 51.68.233.44:60876] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abLToQkNGxMzPO-s9qcXqwAAA48"]
[Thu Mar 12 22:54:27.072917 2026] [:error] [pid 51456:tid 51509] [client 51.68.233.44:60886] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abLToxXu8LzVixNGr0uKQgAAAFY"]
[Thu Mar 12 22:54:29.893633 2026] [:error] [pid 20531:tid 20637] [client 51.68.233.44:54396] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abLTpfvw-RvNQd9b3a-4EwAAA9U"]
[Thu Mar 12 22:54:33.676475 2026] [:error] [pid 11953:tid 11977] [client 51.68.233.44:54402] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abLTqZudzqsnq3bvtDZ1bAAAAVY"]
[Thu Mar 12 23:46:30.587925 2026] [:error] [pid 51457:tid 51530] [client 20.213.29.93:12916] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Thu Mar 12 23:46:30.607796 2026] [:error] [pid 51457:tid 51538] [client 20.213.29.93:12916] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Mar 12 23:46:30.626229 2026] [:error] [pid 51457:tid 51521] [client 20.213.29.93:12916] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 12 23:46:30.644948 2026] [:error] [pid 51457:tid 51519] [client 20.213.29.93:12916] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Mar 12 23:46:30.664443 2026] [:error] [pid 51457:tid 51516] [client 20.213.29.93:12916] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 12 23:46:30.685212 2026] [:error] [pid 51457:tid 51535] [client 20.213.29.93:12916] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Mar 12 23:46:30.701396 2026] [:error] [pid 51457:tid 51534] [client 20.213.29.93:12916] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abLf1ijknw2FvT4H3DbgYgAAAJQ"]
[Thu Mar 12 23:46:30.791748 2026] [:error] [pid 51456:tid 51508] [client 20.213.29.93:10373] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abLf1hXu8LzVixNGr0uTmwAAAFU"]
[Thu Mar 12 23:46:30.863101 2026] [:error] [pid 11986:tid 12026] [client 20.213.29.93:9103] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abLf1jKqY2w-DVCrxTBJfwAAAcg"]
[Thu Mar 12 23:46:30.932695 2026] [:error] [pid 51456:tid 51501] [client 20.213.29.93:4898] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abLf1hXu8LzVixNGr0uTnAAAAE4"]
[Thu Mar 12 23:58:37.005356 2026] [:error] [pid 20531:tid 20635] [client 43.157.172.39:44990] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abLirfvw-RvNQd9b3a-8AgAAA9M"]
[Fri Mar 13 00:07:19.084864 2026] [:error] [pid 11953:tid 11956] [client 43.130.116.87:53394] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abLkt5udzqsnq3bvtDaVNAAAAUE"]
[Fri Mar 13 00:08:31.278662 2026] [:error] [pid 51457:tid 51532] [client 4.205.20.132:2326] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 12"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "abLk_yjknw2FvT4H3Dbi-AAAAJI"]
[Fri Mar 13 00:08:32.106098 2026] [:error] [pid 11953:tid 11969] [client 4.205.20.132:2308] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 12"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/2024/"] [unique_id "abLlAJudzqsnq3bvtDaVtgAAAU4"]
[Fri Mar 13 00:08:32.949370 2026] [:error] [pid 11986:tid 12028] [client 4.205.20.132:2710] [client 4.205.20.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.20.132, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLlADKqY2w-DVCrxTBNmwAAAco"]
[Fri Mar 13 00:08:32.949459 2026] [:error] [pid 11986:tid 12028] [client 4.205.20.132:2710] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLlADKqY2w-DVCrxTBNmwAAAco"]
[Fri Mar 13 00:08:33.778982 2026] [:error] [pid 51457:tid 51537] [client 4.205.20.132:2738] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-corn-sample.php"] [unique_id "abLlASjknw2FvT4H3Dbi-gAAAJc"]
[Fri Mar 13 00:08:34.603111 2026] [:error] [pid 20467:tid 20491] [client 4.205.20.132:2715] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/"] [unique_id "abLlAnJ3UvosyIqy8ay-MwAAApU"]
[Fri Mar 13 00:08:35.432647 2026] [:error] [pid 8249:tid 8256] [client 4.205.20.132:2322] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/index.php"] [unique_id "abLlAyK5dL3-8Jdf0M2qdQAAAQU"]
[Fri Mar 13 00:08:36.261136 2026] [:error] [pid 8249:tid 8270] [client 4.205.20.132:2700] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/index.php"] [unique_id "abLlBCK5dL3-8Jdf0M2qdgAAARM"]
[Fri Mar 13 00:08:37.099835 2026] [:error] [pid 51456:tid 51507] [client 4.205.20.132:2327] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/server.php"] [unique_id "abLlBRXu8LzVixNGr0uW6gAAAFQ"]
[Fri Mar 13 00:08:37.929896 2026] [:error] [pid 8249:tid 8271] [client 4.205.20.132:2330] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/"] [unique_id "abLlBSK5dL3-8Jdf0M2qfQAAARQ"]
[Fri Mar 13 00:08:38.756432 2026] [:error] [pid 8249:tid 8256] [client 4.205.20.132:2689] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/"] [unique_id "abLlBiK5dL3-8Jdf0M2qgwAAAQU"]
[Fri Mar 13 00:08:39.611345 2026] [:error] [pid 20467:tid 20476] [client 4.205.20.132:2690] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wso.php"] [unique_id "abLlB3J3UvosyIqy8ay-NgAAAoY"]
[Fri Mar 13 00:08:40.437943 2026] [:error] [pid 20467:tid 20484] [client 4.205.20.132:2744] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abLlCHJ3UvosyIqy8ay-OQAAAo4"]
[Fri Mar 13 00:08:41.266800 2026] [:error] [pid 51457:tid 51526] [client 4.205.20.132:2711] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-file.php"] [unique_id "abLlCSjknw2FvT4H3DbjCgAAAIw"]
[Fri Mar 13 00:08:42.093245 2026] [:error] [pid 51457:tid 51538] [client 4.205.20.132:2750] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/adminfuns.php"] [unique_id "abLlCijknw2FvT4H3DbjDwAAAJg"]
[Fri Mar 13 00:08:42.919618 2026] [:error] [pid 11986:tid 12026] [client 4.205.20.132:2325] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wk/index.php"] [unique_id "abLlCjKqY2w-DVCrxTBNoQAAAcg"]
[Fri Mar 13 00:08:43.744752 2026] [:error] [pid 8249:tid 8270] [client 4.205.20.132:2310] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "abLlCyK5dL3-8Jdf0M2qigAAARM"]
[Fri Mar 13 00:08:44.571411 2026] [:error] [pid 11953:tid 11970] [client 4.205.20.132:2724] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/admin.php"] [unique_id "abLlDJudzqsnq3bvtDaVvAAAAU8"]
[Fri Mar 13 00:08:45.398647 2026] [:error] [pid 20530:tid 20573] [client 4.205.20.132:2745] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/"] [unique_id "abLlDQkNGxMzPO-s9qcd2QAAA4E"]
[Fri Mar 13 00:08:46.229384 2026] [:error] [pid 11986:tid 12037] [client 4.205.20.132:2748] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/xmrlpc.php"] [unique_id "abLlDjKqY2w-DVCrxTBNqAAAAdM"]
[Fri Mar 13 00:08:47.085407 2026] [:error] [pid 11986:tid 12023] [client 4.205.20.132:2717] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abLlDzKqY2w-DVCrxTBNqwAAAcU"]
[Fri Mar 13 00:08:47.930670 2026] [:error] [pid 20530:tid 20607] [client 4.205.20.132:2329] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin/file.php"] [unique_id "abLlDwkNGxMzPO-s9qcd2gAAA5I"]
[Fri Mar 13 00:08:48.757917 2026] [:error] [pid 20467:tid 20491] [client 4.205.20.132:2331] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abLlEHJ3UvosyIqy8ay-PwAAApU"]
[Fri Mar 13 00:08:49.594069 2026] [:error] [pid 51457:tid 51517] [client 4.205.20.132:2747] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/atomlib.php"] [unique_id "abLlESjknw2FvT4H3DbjHgAAAIM"]
[Fri Mar 13 00:08:50.423591 2026] [:error] [pid 51456:tid 51507] [client 4.205.20.132:2333] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/css/index.php"] [unique_id "abLlEhXu8LzVixNGr0uW8wAAAFQ"]
[Fri Mar 13 00:08:51.259989 2026] [:error] [pid 20528:tid 20534] [client 4.205.20.132:2312] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/et-cache/"] [unique_id "abLlE6nDNsf46-tKxqkiJgAAAwA"]
[Fri Mar 13 00:08:52.117300 2026] [:error] [pid 8249:tid 8266] [client 4.205.20.132:2694] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "abLlFCK5dL3-8Jdf0M2qlAAAAQ8"]
[Fri Mar 13 00:08:52.957339 2026] [:error] [pid 51456:tid 51499] [client 4.205.20.132:2751] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "abLlFBXu8LzVixNGr0uW9wAAAEw"]
[Fri Mar 13 00:08:53.820840 2026] [:error] [pid 11953:tid 11970] [client 4.205.20.132:2722] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/index.php"] [unique_id "abLlFZudzqsnq3bvtDaVxQAAAU8"]
[Fri Mar 13 00:08:54.649421 2026] [:error] [pid 8249:tid 8265] [client 4.205.20.132:2739] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "abLlFiK5dL3-8Jdf0M2qlwAAAQ4"]
[Fri Mar 13 00:08:55.477868 2026] [:error] [pid 11986:tid 12037] [client 4.205.20.132:2688] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/"] [unique_id "abLlFzKqY2w-DVCrxTBNrQAAAdM"]
[Fri Mar 13 00:08:56.318164 2026] [:error] [pid 51456:tid 51495] [client 4.205.20.132:2716] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "abLlGBXu8LzVixNGr0uW-wAAAEg"]
[Fri Mar 13 00:08:57.144547 2026] [:error] [pid 20529:tid 20589] [client 4.205.20.132:2335] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/block/"] [unique_id "abLlGW4BhuYHZriajQ-NNQAAA1I"]
[Fri Mar 13 00:08:57.975680 2026] [:error] [pid 11986:tid 12035] [client 4.205.20.132:2699] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "abLlGTKqY2w-DVCrxTBNrwAAAdE"]
[Fri Mar 13 00:08:58.820581 2026] [:error] [pid 11986:tid 12023] [client 4.205.20.132:2740] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abLlGjKqY2w-DVCrxTBNsQAAAcU"]
[Fri Mar 13 00:08:59.650591 2026] [:error] [pid 20529:tid 20599] [client 4.205.20.132:2321] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/buy.php"] [unique_id "abLlG24BhuYHZriajQ-NNgAAA1c"]
[Fri Mar 13 00:09:00.497300 2026] [:error] [pid 20529:tid 20568] [client 4.205.20.132:2435] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp.php"] [unique_id "abLlHG4BhuYHZriajQ-NNwAAA0U"]
[Fri Mar 13 00:09:01.328511 2026] [:error] [pid 51457:tid 51525] [client 4.205.20.132:2709] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/index.php"] [unique_id "abLlHSjknw2FvT4H3DbjMAAAAIs"]
[Fri Mar 13 00:09:02.160945 2026] [:error] [pid 11986:tid 12018] [client 4.205.20.132:2352] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/about.PHP"] [unique_id "abLlHjKqY2w-DVCrxTBNtAAAAcA"]
[Fri Mar 13 00:09:03.007393 2026] [:error] [pid 11953:tid 11961] [client 4.205.20.132:2339] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "abLlH5udzqsnq3bvtDaV0gAAAUY"]
[Fri Mar 13 00:09:03.858657 2026] [:error] [pid 11986:tid 12024] [client 4.205.20.132:2719] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/index.php"] [unique_id "abLlHzKqY2w-DVCrxTBNugAAAcY"]
[Fri Mar 13 00:09:04.693188 2026] [:error] [pid 11953:tid 11979] [client 4.205.20.132:2723] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/edit.php"] [unique_id "abLlIJudzqsnq3bvtDaV1wAAAVg"]
[Fri Mar 13 00:09:05.520544 2026] [:error] [pid 51456:tid 51498] [client 4.205.20.132:2695] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/sf.php"] [unique_id "abLlIRXu8LzVixNGr0uXDgAAAEs"]
[Fri Mar 13 00:09:06.367951 2026] [:error] [pid 11953:tid 11959] [client 4.205.20.132:2360] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "abLlIpudzqsnq3bvtDaV2QAAAUQ"]
[Fri Mar 13 00:09:07.208079 2026] [:error] [pid 11953:tid 11965] [client 4.205.20.132:2743] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/file.php"] [unique_id "abLlI5udzqsnq3bvtDaV3wAAAUo"]
[Fri Mar 13 00:09:08.032000 2026] [:error] [pid 51456:tid 51495] [client 4.205.20.132:2340] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "abLlJBXu8LzVixNGr0uXFQAAAEg"]
[Fri Mar 13 00:09:08.857865 2026] [:error] [pid 51456:tid 51504] [client 4.205.20.132:2702] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abLlJBXu8LzVixNGr0uXGgAAAFE"]
[Fri Mar 13 00:09:09.683696 2026] [:error] [pid 51456:tid 51491] [client 4.205.20.132:2305] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/test1.php"] [unique_id "abLlJRXu8LzVixNGr0uXHAAAAEQ"]
[Fri Mar 13 00:09:10.511779 2026] [:error] [pid 20530:tid 20594] [client 4.205.20.132:2317] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-cron.php"] [unique_id "abLlJgkNGxMzPO-s9qcd3gAAA4o"]
[Fri Mar 13 00:09:11.359619 2026] [:error] [pid 20467:tid 20473] [client 4.205.20.132:2727] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/"] [unique_id "abLlJ3J3UvosyIqy8ay-RgAAAoM"]
[Fri Mar 13 00:09:12.184979 2026] [:error] [pid 11986:tid 12031] [client 4.205.20.132:2728] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/404.php"] [unique_id "abLlKDKqY2w-DVCrxTBNwwAAAc0"]
[Fri Mar 13 00:09:13.018864 2026] [:error] [pid 51457:tid 51517] [client 4.205.20.132:2315] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/wp-content/1.php"] [unique_id "abLlKSjknw2FvT4H3DbjMQAAAIM"]
[Fri Mar 13 00:09:13.849463 2026] [:error] [pid 11953:tid 11968] [client 4.205.20.132:2311] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.205.20.132 on wp-login.php, counter = 13"] [hostname "pumpbooking.com"] [uri "/images/index.php"] [unique_id "abLlKZudzqsnq3bvtDaV6gAAAU0"]
[Fri Mar 13 02:44:25.094654 2026] [:error] [pid 56003:tid 56026] [client 145.239.66.9:42934] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "abMJiRQtM0oeMdFWe6WKcgAAANU"]
[Fri Mar 13 02:44:25.112908 2026] [:error] [pid 47893:tid 47975] [client 145.239.66.9:42946] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abMJiQYSdu6aqxO_YucykgAAAIA"]
[Fri Mar 13 02:44:27.156491 2026] [:error] [pid 47893:tid 47993] [client 145.239.66.9:34378] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abMJiwYSdu6aqxO_YucymAAAAJI"]
[Fri Mar 13 02:44:27.673663 2026] [:error] [pid 47892:tid 47964] [client 145.239.66.9:34384] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "abMJizNdN5Yd7YcKfyUR_QAAAFA"]
[Fri Mar 13 02:44:29.165584 2026] [:error] [pid 56003:tid 56011] [client 145.239.66.9:34398] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abMJjRQtM0oeMdFWe6WKhwAAAMY"]
[Fri Mar 13 02:44:30.071613 2026] [:error] [pid 48029:tid 48055] [client 145.239.66.9:34414] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abMJjm7cFKMmtdGhPH_eggAAABg"]
[Fri Mar 13 02:44:31.840807 2026] [:error] [pid 48029:tid 48032] [client 145.239.66.9:34426] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abMJj27cFKMmtdGhPH_ehwAAAAE"]
[Fri Mar 13 02:44:32.074773 2026] [:error] [pid 47892:tid 47949] [client 145.239.66.9:34428] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abMJkDNdN5Yd7YcKfyUSAQAAAEE"]
[Fri Mar 13 02:44:34.013395 2026] [:error] [pid 56003:tid 56019] [client 145.239.66.9:34444] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abMJkhQtM0oeMdFWe6WKogAAAM4"]
[Fri Mar 13 02:44:34.346844 2026] [:error] [pid 47893:tid 47982] [client 145.239.66.9:34454] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abMJkgYSdu6aqxO_YucyoAAAAIc"]
[Fri Mar 13 02:44:36.131892 2026] [:error] [pid 48029:tid 48040] [client 145.239.66.9:34456] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abMJlG7cFKMmtdGhPH_ejQAAAAk"]
[Fri Mar 13 02:44:36.850191 2026] [:error] [pid 47893:tid 47975] [client 145.239.66.9:34466] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abMJlAYSdu6aqxO_YucyogAAAIA"]
[Fri Mar 13 02:44:38.005373 2026] [:error] [pid 47893:tid 47976] [client 145.239.66.9:44688] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abMJlgYSdu6aqxO_YucypQAAAIE"]
[Fri Mar 13 02:44:39.032111 2026] [:error] [pid 48029:tid 48053] [client 145.239.66.9:44692] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abMJl27cFKMmtdGhPH_ekAAAABY"]
[Fri Mar 13 02:44:40.260552 2026] [:error] [pid 48029:tid 48033] [client 145.239.66.9:44700] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abMJmG7cFKMmtdGhPH_ekgAAAAI"]
[Fri Mar 13 02:44:41.252601 2026] [:error] [pid 47892:tid 47957] [client 145.239.66.9:44714] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abMJmTNdN5Yd7YcKfyUSBQAAAEk"]
[Fri Mar 13 02:44:42.838261 2026] [:error] [pid 48029:tid 48031] [client 145.239.66.9:44720] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abMJmm7cFKMmtdGhPH_elgAAAAA"]
[Fri Mar 13 02:44:43.787871 2026] [:error] [pid 47893:tid 47978] [client 145.239.66.9:44726] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abMJmwYSdu6aqxO_YucyqAAAAIM"]
[Fri Mar 13 02:44:44.843249 2026] [:error] [pid 56003:tid 56012] [client 145.239.66.9:44734] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abMJnBQtM0oeMdFWe6WKtgAAAMc"]
[Fri Mar 13 02:44:46.142840 2026] [:error] [pid 56003:tid 56017] [client 145.239.66.9:44750] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abMJnhQtM0oeMdFWe6WKugAAAMw"]
[Fri Mar 13 02:44:47.293054 2026] [:error] [pid 47894:tid 48012] [client 145.239.66.9:39264] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMJn5iuFpRtVNR6uOKTWAAAAQo"]
[Fri Mar 13 02:44:48.102430 2026] [:error] [pid 47892:tid 47964] [client 145.239.66.9:39270] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abMJoDNdN5Yd7YcKfyUSCwAAAFA"]
[Fri Mar 13 02:44:49.446991 2026] [:error] [pid 47893:tid 47982] [client 145.239.66.9:39282] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abMJoQYSdu6aqxO_YucyrQAAAIc"]
[Fri Mar 13 02:44:50.432714 2026] [:error] [pid 47893:tid 47975] [client 145.239.66.9:39286] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMJogYSdu6aqxO_YucyrgAAAIA"]
[Fri Mar 13 02:44:51.541815 2026] [:error] [pid 47894:tid 48012] [client 145.239.66.9:39294] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abMJo5iuFpRtVNR6uOKTawAAAQo"]
[Fri Mar 13 02:44:52.468458 2026] [:error] [pid 47893:tid 47976] [client 145.239.66.9:39306] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abMJpAYSdu6aqxO_YucyswAAAIE"]
[Fri Mar 13 02:44:53.879729 2026] [:error] [pid 47894:tid 48022] [client 145.239.66.9:39310] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abMJpZiuFpRtVNR6uOKTcQAAARQ"]
[Fri Mar 13 02:44:54.718223 2026] [:error] [pid 47892:tid 47948] [client 145.239.66.9:39322] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abMJpjNdN5Yd7YcKfyUSEgAAAEA"]
[Fri Mar 13 02:44:56.243053 2026] [:error] [pid 47894:tid 48014] [client 145.239.66.9:39332] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abMJqJiuFpRtVNR6uOKTdQAAAQw"]
[Fri Mar 13 02:44:56.725793 2026] [:error] [pid 56003:tid 56013] [client 145.239.66.9:39340] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abMJqBQtM0oeMdFWe6WKxwAAAMg"]
[Fri Mar 13 02:44:58.029189 2026] [:error] [pid 56003:tid 56016] [client 145.239.66.9:42020] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abMJqhQtM0oeMdFWe6WKyQAAAMs"]
[Fri Mar 13 02:44:59.071310 2026] [:error] [pid 48029:tid 48055] [client 145.239.66.9:42022] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abMJq27cFKMmtdGhPH_erwAAABg"]
[Fri Mar 13 02:45:00.292396 2026] [:error] [pid 48029:tid 48043] [client 145.239.66.9:42032] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abMJrG7cFKMmtdGhPH_eswAAAAw"]
[Fri Mar 13 02:45:01.363666 2026] [:error] [pid 47893:tid 47985] [client 145.239.66.9:42038] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abMJrQYSdu6aqxO_YucytwAAAIo"]
[Fri Mar 13 02:45:02.443917 2026] [:error] [pid 56003:tid 56017] [client 145.239.66.9:42040] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abMJrhQtM0oeMdFWe6WKzAAAAMw"]
[Fri Mar 13 02:45:03.731792 2026] [:error] [pid 47892:tid 47961] [client 145.239.66.9:42044] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abMJrzNdN5Yd7YcKfyUSFgAAAE0"]
[Fri Mar 13 02:45:04.787979 2026] [:error] [pid 47892:tid 47968] [client 145.239.66.9:42054] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abMJsDNdN5Yd7YcKfyUSGAAAAFQ"]
[Fri Mar 13 02:45:06.067840 2026] [:error] [pid 56003:tid 56019] [client 145.239.66.9:42058] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abMJshQtM0oeMdFWe6WK0QAAAM4"]
[Fri Mar 13 02:45:07.420627 2026] [:error] [pid 56003:tid 56028] [client 145.239.66.9:46524] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abMJsxQtM0oeMdFWe6WK5gAAANc"]
[Fri Mar 13 02:45:08.222190 2026] [:error] [pid 56003:tid 56005] [client 145.239.66.9:46526] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abMJtBQtM0oeMdFWe6WK6QAAAMA"]
[Fri Mar 13 02:45:09.791828 2026] [:error] [pid 47894:tid 48002] [client 145.239.66.9:46536] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abMJtZiuFpRtVNR6uOKTegAAAQA"]
[Fri Mar 13 02:45:10.244769 2026] [:error] [pid 56003:tid 56020] [client 145.239.66.9:46544] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abMJthQtM0oeMdFWe6WK8AAAAM8"]
[Fri Mar 13 02:45:11.879610 2026] [:error] [pid 48029:tid 48052] [client 145.239.66.9:46550] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abMJt27cFKMmtdGhPH_exQAAABU"]
[Fri Mar 13 02:45:12.248703 2026] [:error] [pid 56003:tid 56005] [client 145.239.66.9:46558] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abMJuBQtM0oeMdFWe6WK-AAAAMA"]
[Fri Mar 13 02:45:13.839482 2026] [:error] [pid 48029:tid 48054] [client 145.239.66.9:46562] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abMJuW7cFKMmtdGhPH_eygAAABc"]
[Fri Mar 13 02:45:14.263491 2026] [:error] [pid 48029:tid 48036] [client 145.239.66.9:46578] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abMJum7cFKMmtdGhPH_ezAAAAAU"]
[Fri Mar 13 02:45:15.973692 2026] [:error] [pid 47894:tid 48008] [client 145.239.66.9:46584] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abMJu5iuFpRtVNR6uOKTfAAAAQY"]
[Fri Mar 13 02:45:16.386966 2026] [:error] [pid 48029:tid 48042] [client 145.239.66.9:46600] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abMJvG7cFKMmtdGhPH_ezwAAAAs"]
[Fri Mar 13 02:45:18.138966 2026] [:error] [pid 47892:tid 47948] [client 145.239.66.9:58566] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abMJvjNdN5Yd7YcKfyUSIAAAAEA"]
[Fri Mar 13 02:45:18.514071 2026] [:error] [pid 48029:tid 48034] [client 145.239.66.9:58576] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abMJvm7cFKMmtdGhPH_e0QAAAAM"]
[Fri Mar 13 02:45:20.247085 2026] [:error] [pid 47894:tid 48003] [client 145.239.66.9:58590] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abMJwJiuFpRtVNR6uOKTgQAAAQE"]
[Fri Mar 13 02:45:20.488900 2026] [:error] [pid 47892:tid 47959] [client 145.239.66.9:58592] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abMJwDNdN5Yd7YcKfyUSJQAAAEs"]
[Fri Mar 13 02:45:22.569630 2026] [:error] [pid 47894:tid 48021] [client 145.239.66.9:58608] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abMJwpiuFpRtVNR6uOKTgwAAARM"]
[Fri Mar 13 02:45:22.865355 2026] [:error] [pid 48029:tid 48039] [client 145.239.66.9:58624] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abMJwm7cFKMmtdGhPH_e1QAAAAg"]
[Fri Mar 13 02:45:34.870890 2026] [:error] [pid 56003:tid 56024] [client 145.239.66.9:58632] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abMJzhQtM0oeMdFWe6WLFQAAANM"]
[Fri Mar 13 02:45:35.860030 2026] [:error] [pid 56003:tid 56026] [client 145.239.66.9:58628] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abMJzxQtM0oeMdFWe6WLFgAAANU"]
[Fri Mar 13 02:45:37.029635 2026] [:error] [pid 48029:tid 48035] [client 145.239.66.9:44382] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abMJ0W7cFKMmtdGhPH_e5QAAAAQ"]
[Fri Mar 13 02:45:37.850440 2026] [:error] [pid 48029:tid 48038] [client 145.239.66.9:58090] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abMJ0W7cFKMmtdGhPH_e5wAAAAc"]
[Fri Mar 13 02:45:39.290919 2026] [:error] [pid 48029:tid 48040] [client 145.239.66.9:58100] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abMJ027cFKMmtdGhPH_e6AAAAAk"]
[Fri Mar 13 02:45:39.839623 2026] [:error] [pid 56003:tid 56016] [client 145.239.66.9:58106] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abMJ0xQtM0oeMdFWe6WLFwAAAMs"]
[Fri Mar 13 02:45:41.210724 2026] [:error] [pid 47894:tid 48009] [client 145.239.66.9:58112] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abMJ1ZiuFpRtVNR6uOKTlgAAAQc"]
[Fri Mar 13 02:45:41.979962 2026] [:error] [pid 56003:tid 56019] [client 145.239.66.9:58114] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abMJ1RQtM0oeMdFWe6WLGwAAAM4"]
[Fri Mar 13 02:45:43.188480 2026] [:error] [pid 56003:tid 56029] [client 145.239.66.9:58130] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abMJ1xQtM0oeMdFWe6WLHgAAANg"]
[Fri Mar 13 02:45:44.476827 2026] [:error] [pid 47893:tid 47995] [client 145.239.66.9:58132] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abMJ2AYSdu6aqxO_Yucy0QAAAJQ"]
[Fri Mar 13 02:45:45.368593 2026] [:error] [pid 48029:tid 48036] [client 145.239.66.9:58148] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abMJ2W7cFKMmtdGhPH_e6wAAAAU"]
[Fri Mar 13 02:45:46.516760 2026] [:error] [pid 56003:tid 56011] [client 145.239.66.9:58156] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abMJ2hQtM0oeMdFWe6WLIwAAAMY"]
[Fri Mar 13 02:45:47.272319 2026] [:error] [pid 56003:tid 56005] [client 145.239.66.9:49634] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abMJ2xQtM0oeMdFWe6WLJgAAAMA"]
[Fri Mar 13 02:45:48.518462 2026] [:error] [pid 47893:tid 47987] [client 145.239.66.9:49650] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abMJ3AYSdu6aqxO_Yucy0gAAAIw"]
[Fri Mar 13 02:45:49.316763 2026] [:error] [pid 48029:tid 48043] [client 145.239.66.9:49656] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abMJ3W7cFKMmtdGhPH_e7wAAAAw"]
[Fri Mar 13 02:45:50.604547 2026] [:error] [pid 47894:tid 48018] [client 145.239.66.9:49668] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abMJ3piuFpRtVNR6uOKTogAAARA"]
[Fri Mar 13 02:45:51.717489 2026] [:error] [pid 56003:tid 56021] [client 145.239.66.9:49684] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abMJ3xQtM0oeMdFWe6WLKwAAANA"]
[Fri Mar 13 02:45:52.854131 2026] [:error] [pid 47894:tid 48007] [client 145.239.66.9:49696] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abMJ4JiuFpRtVNR6uOKTpAAAAQU"]
[Fri Mar 13 02:45:54.664943 2026] [:error] [pid 48029:tid 48032] [client 145.239.66.9:49708] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abMJ4m7cFKMmtdGhPH_e8QAAAAE"]
[Fri Mar 13 02:45:55.185865 2026] [:error] [pid 48029:tid 48052] [client 145.239.66.9:49718] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abMJ427cFKMmtdGhPH_e8wAAABU"]
[Fri Mar 13 02:45:58.522284 2026] [:error] [pid 47894:tid 48010] [client 145.239.66.9:52986] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abMJ5piuFpRtVNR6uOKTqAAAAQg"]
[Fri Mar 13 02:45:59.130946 2026] [:error] [pid 56003:tid 56026] [client 145.239.66.9:52998] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abMJ5xQtM0oeMdFWe6WLNgAAANU"]
[Fri Mar 13 03:18:13.786423 2026] [:error] [pid 56003:tid 56006] [client 193.36.225.190:20409] [client 193.36.225.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.190, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abMRdRQtM0oeMdFWe6WY5gAAAME"]
[Fri Mar 13 03:18:13.791330 2026] [:error] [pid 56003:tid 56006] [client 193.36.225.190:20409] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 04:01:13.517254 2026] [:error] [pid 61928:tid 61977] [client 217.182.195.176:43862] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abMbiQod66AHekJJZioHzAAAAEA"]
[Fri Mar 13 04:01:15.489041 2026] [:error] [pid 62036:tid 62057] [client 217.182.195.176:51510] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "abMbi7ce6g9kILuh_R6xxAAAAM4"]
[Fri Mar 13 04:01:17.948668 2026] [:error] [pid 62036:tid 62044] [client 217.182.195.176:44508] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abMbjbce6g9kILuh_R6x0wAAAME"]
[Fri Mar 13 04:01:20.238935 2026] [:error] [pid 61929:tid 62017] [client 217.182.195.176:44524] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abMbkDGGsow2jgUjLtwo4wAAAI0"]
[Fri Mar 13 04:01:22.428713 2026] [:error] [pid 61927:tid 61952] [client 217.182.195.176:44538] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "abMbkrLkK584eBa2J7WpwAAAAAY"]
[Fri Mar 13 04:01:24.549778 2026] [:error] [pid 62036:tid 62046] [client 217.182.195.176:44552] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "abMblLce6g9kILuh_R6x7wAAAMM"]
[Fri Mar 13 04:01:26.555187 2026] [:error] [pid 62036:tid 62060] [client 217.182.195.176:49000] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abMblrce6g9kILuh_R6x9gAAANE"]
[Fri Mar 13 04:01:28.627472 2026] [:error] [pid 62036:tid 62055] [client 217.182.195.176:49002] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abMbmLce6g9kILuh_R6yAAAAAMw"]
[Fri Mar 13 04:01:30.661282 2026] [:error] [pid 62036:tid 62050] [client 217.182.195.176:49016] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abMbmrce6g9kILuh_R6yCgAAAMc"]
[Fri Mar 13 04:01:32.806687 2026] [:error] [pid 62036:tid 62050] [client 217.182.195.176:49030] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abMbnLce6g9kILuh_R6yEwAAAMc"]
[Fri Mar 13 04:01:34.901601 2026] [:error] [pid 61928:tid 61993] [client 217.182.195.176:49032] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abMbngod66AHekJJZioH7AAAAFA"]
[Fri Mar 13 04:01:36.769580 2026] [:error] [pid 61928:tid 61982] [client 217.182.195.176:58194] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abMboAod66AHekJJZioH9AAAAEU"]
[Fri Mar 13 04:01:38.954576 2026] [:error] [pid 62036:tid 62050] [client 217.182.195.176:58204] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abMborce6g9kILuh_R6yKQAAAMc"]
[Fri Mar 13 04:01:40.859716 2026] [:error] [pid 62036:tid 62060] [client 217.182.195.176:58214] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abMbpLce6g9kILuh_R6yNgAAANE"]
[Fri Mar 13 04:01:42.696025 2026] [:error] [pid 62036:tid 62067] [client 217.182.195.176:58226] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abMbprce6g9kILuh_R6yRAAAANg"]
[Fri Mar 13 04:01:44.731630 2026] [:error] [pid 61929:tid 62022] [client 217.182.195.176:58230] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abMbqDGGsow2jgUjLtwpJgAAAJI"]
[Fri Mar 13 05:06:08.975345 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.70:53065] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Mar 13 05:06:09.279270 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.70:53065] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Mar 13 05:06:09.561421 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.70:53065] [client 136.144.19.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "abMqwfONf1H0XrBFE4NLbwAAAQU"]
[Fri Mar 13 05:06:10.148654 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 05:06:10.412706 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Mar 13 05:06:10.712981 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 05:06:11.058393 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Mar 13 05:06:11.340068 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 13 05:06:11.638670 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 13 05:06:11.920069 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Mar 13 05:06:12.234250 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Mar 13 05:06:12.570251 2026] [:error] [pid 62036:tid 62058] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Mar 13 05:06:12.839019 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Mar 13 05:06:13.197970 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Mar 13 05:06:13.457991 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Mar 13 05:06:13.723766 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Mar 13 05:06:14.281175 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 05:06:14.560164 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Fri Mar 13 05:06:14.849086 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Mar 13 05:06:15.116530 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Mar 13 05:06:15.390427 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Mar 13 05:06:15.669804 2026] [:error] [pid 62036:tid 62064] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Fri Mar 13 05:06:15.987659 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Mar 13 05:06:16.262571 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Fri Mar 13 05:06:16.536890 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Mar 13 05:06:16.810687 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Fri Mar 13 05:06:17.142625 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Fri Mar 13 05:06:17.428037 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Mar 13 05:06:17.738976 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Mar 13 05:06:18.007157 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Mar 13 05:06:18.319041 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Mar 13 05:06:18.617802 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Mar 13 05:06:18.883618 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Mar 13 05:06:19.191541 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Mar 13 05:06:19.478989 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Mar 13 05:06:19.741015 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.52:57977] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Mar 13 05:06:20.005853 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.52:57977] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "abMqzLce6g9kILuh_R7XiAAAAMs"]
[Fri Mar 13 05:06:20.672988 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Mar 13 05:06:20.965565 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Mar 13 05:06:21.286849 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Mar 13 05:06:21.581997 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Mar 13 05:06:21.841538 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Mar 13 05:06:22.110507 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Mar 13 05:06:22.386724 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Mar 13 05:06:22.660005 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Mar 13 05:06:22.926981 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Mar 13 05:06:23.191858 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Mar 13 05:06:23.463870 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 05:06:23.727201 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Mar 13 05:06:23.983382 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Mar 13 05:06:24.277476 2026] [:error] [pid 62036:tid 62060] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Fri Mar 13 05:06:24.603945 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Mar 13 05:06:24.860445 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Fri Mar 13 05:06:25.145249 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Mar 13 05:06:25.462678 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Mar 13 05:06:25.759598 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Fri Mar 13 05:06:26.080428 2026] [:error] [pid 62036:tid 62060] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Mar 13 05:06:26.643322 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Mar 13 05:06:27.243864 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Mar 13 05:06:27.569362 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Mar 13 05:06:27.827836 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 13 05:06:28.113077 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Mar 13 05:06:28.430269 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Mar 13 05:06:28.701028 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Fri Mar 13 05:06:28.960511 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Mar 13 05:06:29.512466 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Mar 13 05:06:30.104701 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Fri Mar 13 05:06:30.382440 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Fri Mar 13 05:06:30.690953 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Fri Mar 13 05:06:30.956844 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Mar 13 05:06:31.258371 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Mar 13 05:06:31.513033 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Fri Mar 13 05:06:31.770098 2026] [:error] [pid 62036:tid 62060] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Mar 13 05:06:32.082650 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Mar 13 05:06:32.364513 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.41:25699] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Mar 13 05:06:32.687682 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.41:25699] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "abMq2Lce6g9kILuh_R7YHwAAAMs"]
[Fri Mar 13 05:06:33.342036 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Mar 13 05:06:33.662550 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Mar 13 05:06:34.077041 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Mar 13 05:06:34.362793 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Mar 13 05:06:34.651547 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Mar 13 05:06:34.960605 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Fri Mar 13 05:06:35.238482 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Mar 13 05:06:35.530312 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Mar 13 05:06:36.119689 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Mar 13 05:06:36.656324 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Mar 13 05:06:36.916303 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Mar 13 05:06:37.216529 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Fri Mar 13 05:06:37.484910 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Mar 13 05:06:37.792372 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Mar 13 05:06:38.076720 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Mar 13 05:06:38.350980 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Mar 13 05:06:38.651657 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.61:23877] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Mar 13 05:06:39.216321 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.61:23877] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abMq3_ONf1H0XrBFE4NMyQAAARA"]
[Fri Mar 13 05:06:39.757507 2026] [:error] [pid 61929:tid 62010] [client 136.144.19.225:54521] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abMq3zGGsow2jgUjLtxBRQAAAIY"]
[Fri Mar 13 05:06:42.012207 2026] [:error] [pid 61929:tid 62017] [client 216.24.219.212:36989] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abMq4jGGsow2jgUjLtxBZwAAAI0"]
[Fri Mar 13 05:06:42.869353 2026] [:error] [pid 44755:tid 44763] [client 193.36.224.140:41113] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abMq4vONf1H0XrBFE4NM5gAAAQY"]
[Fri Mar 13 05:06:44.031251 2026] [:error] [pid 61927:tid 61950] [client 136.144.19.72:48295] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abMq5LLkK584eBa2J7W4vQAAAAQ"]
[Fri Mar 13 05:06:46.345489 2026] [:error] [pid 61928:tid 62001] [client 216.24.219.199:53757] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abMq5god66AHekJJZioZXAAAAFg"]
[Fri Mar 13 05:06:47.466835 2026] [:error] [pid 61928:tid 61999] [client 136.144.19.229:64855] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Fri Mar 13 05:06:47.748781 2026] [:error] [pid 61928:tid 61990] [client 136.144.19.229:64855] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "abMq5wod66AHekJJZioZZAAAAE0"]
[Fri Mar 13 05:06:48.540766 2026] [:error] [pid 62036:tid 62054] [client 216.24.219.168:35533] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abMq6Lce6g9kILuh_R7YoAAAAMs"]
[Fri Mar 13 05:06:49.718419 2026] [:error] [pid 61928:tid 61990] [client 216.24.219.213:59249] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abMq6Qod66AHekJJZioZbwAAAE0"]
[Fri Mar 13 05:06:50.896981 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.80:48561] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abMq6rce6g9kILuh_R7YrAAAAMg"]
[Fri Mar 13 05:06:51.423491 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.225:22039] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abMq67ce6g9kILuh_R7YsQAAANM"]
[Fri Mar 13 05:06:52.485587 2026] [:error] [pid 44755:tid 44778] [client 216.24.219.211:47391] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abMq7PONf1H0XrBFE4NNbwAAARU"]
[Fri Mar 13 05:06:53.539413 2026] [:error] [pid 61927:tid 61969] [client 136.144.19.58:29345] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abMq7bLkK584eBa2J7W44AAAABc"]
[Fri Mar 13 05:06:54.144738 2026] [:error] [pid 61928:tid 61977] [client 216.24.219.212:32311] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abMq7god66AHekJJZioZnAAAAEA"]
[Fri Mar 13 05:06:54.670820 2026] [:error] [pid 61928:tid 62000] [client 136.144.19.80:43419] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abMq7god66AHekJJZioZpQAAAFc"]
[Fri Mar 13 05:06:55.926407 2026] [:error] [pid 62036:tid 62058] [client 216.24.219.199:31073] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abMq77ce6g9kILuh_R7YzAAAAM8"]
[Fri Mar 13 05:06:56.436513 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.61:57929] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abMq8Lce6g9kILuh_R7YzgAAANA"]
[Fri Mar 13 05:06:56.946198 2026] [:error] [pid 61927:tid 61955] [client 136.144.19.53:29055] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abMq8LLkK584eBa2J7W49QAAAAk"]
[Fri Mar 13 05:06:57.539895 2026] [:error] [pid 44755:tid 44774] [client 216.24.219.167:24891] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abMq8fONf1H0XrBFE4NNmwAAARE"]
[Fri Mar 13 05:06:58.152876 2026] [:error] [pid 61929:tid 62009] [client 216.24.219.201:44399] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abMq8jGGsow2jgUjLtxCEgAAAIU"]
[Fri Mar 13 05:06:59.037001 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.222:26901] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "abMq8_ONf1H0XrBFE4NNrQAAAQg"]
[Fri Mar 13 05:06:59.585826 2026] [:error] [pid 61927:tid 61950] [client 136.144.19.232:45279] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abMq87LkK584eBa2J7W5AwAAAAQ"]
[Fri Mar 13 05:07:00.160737 2026] [:error] [pid 61929:tid 62008] [client 136.144.19.221:34609] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "abMq9DGGsow2jgUjLtxCHQAAAIQ"]
[Fri Mar 13 05:07:01.064372 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.229:43685] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abMq9bce6g9kILuh_R7Y7gAAAMA"]
[Fri Mar 13 05:07:02.126282 2026] [:error] [pid 61929:tid 62027] [client 136.144.19.76:63065] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "abMq9jGGsow2jgUjLtxCKgAAAJc"]
[Fri Mar 13 05:07:02.718116 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.54:36949] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "abMq9vONf1H0XrBFE4NN1gAAAQQ"]
[Fri Mar 13 05:07:04.952108 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.234:44755] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "abMq-Lce6g9kILuh_R7ZCQAAAMQ"]
[Fri Mar 13 05:07:07.242472 2026] [:error] [pid 61929:tid 62011] [client 136.144.19.60:58693] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "abMq-zGGsow2jgUjLtxCaQAAAIc"]
[Fri Mar 13 05:07:07.901878 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.226:29405] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abMq-7ce6g9kILuh_R7ZGQAAAM0"]
[Fri Mar 13 05:07:08.451249 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.236:58665] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abMq_PONf1H0XrBFE4NN7wAAAQc"]
[Fri Mar 13 05:07:09.094778 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.64:59709] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Mar 13 05:07:10.494584 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.64:59709] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abMq_jGGsow2jgUjLtxChAAAAJY"]
[Fri Mar 13 05:07:11.805913 2026] [:error] [pid 61929:tid 62014] [client 136.144.19.78:54021] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "abMq_zGGsow2jgUjLtxCigAAAIo"]
[Fri Mar 13 05:07:12.860809 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.75:29209] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abMrALce6g9kILuh_R7ZSAAAAME"]
[Fri Mar 13 05:07:13.696997 2026] [:error] [pid 61929:tid 62005] [client 216.24.219.196:31497] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "abMrATGGsow2jgUjLtxClgAAAIE"]
[Fri Mar 13 05:07:14.221917 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.228:47015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Mar 13 05:07:15.549675 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.228:47015] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abMrA7ce6g9kILuh_R7ZbQAAANQ"]
[Fri Mar 13 05:07:17.194029 2026] [:error] [pid 61928:tid 61985] [client 216.24.219.200:54069] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "abMrBQod66AHekJJZioaLQAAAEg"]
[Fri Mar 13 05:07:18.426512 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.41:41117] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abMrBrce6g9kILuh_R7ZhAAAAMI"]
[Fri Mar 13 05:07:19.027553 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.74:59515] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abMrB_ONf1H0XrBFE4NOQwAAAQ4"]
[Fri Mar 13 05:07:20.489247 2026] [:error] [pid 61929:tid 62012] [client 216.24.219.213:49073] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Mar 13 05:07:21.673224 2026] [:error] [pid 61929:tid 62011] [client 216.24.219.213:49073] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abMrCTGGsow2jgUjLtxC9AAAAIc"]
[Fri Mar 13 05:07:22.229073 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.48:58689] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "abMrCvONf1H0XrBFE4NObQAAAQ0"]
[Fri Mar 13 05:07:23.371178 2026] [:error] [pid 61928:tid 61995] [client 136.144.19.41:23469] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abMrCwod66AHekJJZioaWAAAAFI"]
[Fri Mar 13 05:07:23.907928 2026] [:error] [pid 62036:tid 62064] [client 136.144.19.46:41373] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "abMrC7ce6g9kILuh_R7ZsAAAANU"]
[Fri Mar 13 05:07:25.646381 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.54:42379] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "abMrDbce6g9kILuh_R7ZxgAAAMg"]
[Fri Mar 13 05:07:26.409115 2026] [:error] [pid 44755:tid 44762] [client 216.24.219.143:50373] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abMrDvONf1H0XrBFE4NOhAAAAQU"]
[Fri Mar 13 05:07:27.586680 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.228:34039] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "abMrD_ONf1H0XrBFE4NOnwAAAQE"]
[Fri Mar 13 05:07:28.139297 2026] [:error] [pid 61929:tid 62009] [client 136.144.19.225:51189] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abMrEDGGsow2jgUjLtxDGgAAAIU"]
[Fri Mar 13 05:07:28.770524 2026] [:error] [pid 62036:tid 62045] [client 216.24.219.201:63893] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abMrELce6g9kILuh_R7Z2wAAAMI"]
[Fri Mar 13 05:07:29.310499 2026] [:error] [pid 61929:tid 62019] [client 136.144.19.60:43927] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abMrETGGsow2jgUjLtxDJQAAAI8"]
[Fri Mar 13 05:07:30.674947 2026] [:error] [pid 61927:tid 61968] [client 136.144.19.219:36931] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abMrErLkK584eBa2J7W5ogAAABY"]
[Fri Mar 13 05:07:31.793375 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.221:34887] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Mar 13 05:07:33.228963 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.221:34887] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abMrFfONf1H0XrBFE4NO7wAAAQE"]
[Fri Mar 13 05:07:35.242711 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.225:22323] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "abMrF7ce6g9kILuh_R7aKAAAAMs"]
[Fri Mar 13 05:07:35.775351 2026] [:error] [pid 61929:tid 62021] [client 136.144.19.227:21655] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "abMrFzGGsow2jgUjLtxDWwAAAJE"]
[Fri Mar 13 05:07:36.571600 2026] [:error] [pid 62036:tid 62051] [client 216.24.219.201:47297] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abMrGLce6g9kILuh_R7aRAAAAMg"]
[Fri Mar 13 05:07:38.066345 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.69:44543] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Fri Mar 13 05:07:38.672533 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.69:44543] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "abMrGrce6g9kILuh_R7aWAAAAMs"]
[Fri Mar 13 05:07:39.663470 2026] [:error] [pid 62036:tid 62065] [client 216.24.219.167:28119] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "abMrG7ce6g9kILuh_R7aXQAAANY"]
[Fri Mar 13 05:07:40.573608 2026] [:error] [pid 61929:tid 62016] [client 216.24.219.211:61625] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "abMrHDGGsow2jgUjLtxDiAAAAIw"]
[Fri Mar 13 05:07:41.382341 2026] [:error] [pid 61928:tid 61990] [client 136.144.19.61:54137] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abMrHQod66AHekJJZioaxgAAAE0"]
[Fri Mar 13 05:07:42.627355 2026] [:error] [pid 61928:tid 61987] [client 136.144.19.78:29829] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abMrHgod66AHekJJZioazQAAAEo"]
[Fri Mar 13 05:07:43.253964 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.60:23361] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abMrH_ONf1H0XrBFE4NPYAAAARA"]
[Fri Mar 13 05:07:46.438494 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.64:45471] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "abMrIvONf1H0XrBFE4NPfwAAARM"]
[Fri Mar 13 05:07:48.112108 2026] [:error] [pid 61928:tid 61984] [client 136.144.19.55:40693] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "abMrJAod66AHekJJZioa-wAAAEc"]
[Fri Mar 13 05:07:48.667800 2026] [:error] [pid 44755:tid 44781] [client 216.24.219.195:55373] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Mar 13 05:07:50.098056 2026] [:error] [pid 44755:tid 44774] [client 216.24.219.195:55373] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Mar 13 05:07:51.005270 2026] [:error] [pid 44755:tid 44757] [client 216.24.219.195:55373] [client 216.24.219.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "abMrJ_ONf1H0XrBFE4NP0AAAAQA"]
[Fri Mar 13 05:07:51.517179 2026] [:error] [pid 61928:tid 61980] [client 136.144.19.52:29935] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abMrJwod66AHekJJZiobCAAAAEM"]
[Fri Mar 13 05:07:52.739595 2026] [:error] [pid 61929:tid 62012] [client 136.144.19.58:63695] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abMrKDGGsow2jgUjLtxD5AAAAIg"]
[Fri Mar 13 05:07:53.247979 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.67:63661] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "abMrKbce6g9kILuh_R7a1QAAANY"]
[Fri Mar 13 05:07:54.138419 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.41:28017] [client 136.144.19.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.41, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "abMrKrce6g9kILuh_R7a3wAAAMY"]
[Fri Mar 13 05:07:54.402742 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.41:28017] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Fri Mar 13 05:07:56.102629 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.41:28017] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "abMrLLce6g9kILuh_R7a8gAAAMg"]
[Fri Mar 13 05:07:56.953020 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.58:51883] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Mar 13 05:07:57.206865 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.58:51883] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "abMrLfONf1H0XrBFE4NQGwAAAQg"]
[Fri Mar 13 05:07:59.814812 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.63:23199] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky.php"] [unique_id "abMrL7ce6g9kILuh_R7bMQAAANc"]
[Fri Mar 13 05:08:00.341495 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.76:59667] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abMrMPONf1H0XrBFE4NQRQAAAQE"]
[Fri Mar 13 05:08:01.264696 2026] [:error] [pid 44755:tid 44764] [client 193.36.224.114:36089] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abMrMfONf1H0XrBFE4NQWQAAAQc"]
[Fri Mar 13 05:08:01.840079 2026] [:error] [pid 44755:tid 44761] [client 216.24.219.201:31317] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Fri Mar 13 05:08:03.027374 2026] [:error] [pid 44755:tid 44767] [client 216.24.219.201:31317] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abMrM_ONf1H0XrBFE4NQdwAAAQo"]
[Fri Mar 13 05:08:03.630669 2026] [:error] [pid 61928:tid 61989] [client 216.24.219.204:39193] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "abMrMwod66AHekJJZiobLgAAAEw"]
[Fri Mar 13 05:08:04.444676 2026] [:error] [pid 61929:tid 62006] [client 136.144.19.64:25445] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Mar 13 05:08:04.816634 2026] [:error] [pid 61929:tid 62013] [client 136.144.19.64:25445] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "abMrNDGGsow2jgUjLtxESgAAAIk"]
[Fri Mar 13 05:08:05.950850 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.227:21223] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abMrNbce6g9kILuh_R7bbAAAAMY"]
[Fri Mar 13 05:08:06.812096 2026] [:error] [pid 61928:tid 61996] [client 216.24.219.204:20847] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abMrNgod66AHekJJZiobPAAAAFM"]
[Fri Mar 13 05:08:07.354255 2026] [:error] [pid 44755:tid 44770] [client 216.24.219.204:30321] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Mar 13 05:08:07.630456 2026] [:error] [pid 44755:tid 44772] [client 216.24.219.204:30321] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abMrN_ONf1H0XrBFE4NQnwAAAQ8"]
[Fri Mar 13 05:08:08.589318 2026] [:error] [pid 61927:tid 61946] [client 136.144.19.52:62589] [client 136.144.19.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.52, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abMrOLLkK584eBa2J7W6NgAAAAA"]
[Fri Mar 13 05:08:08.594844 2026] [:error] [pid 61927:tid 61946] [client 136.144.19.52:62589] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 05:08:08.923191 2026] [:error] [pid 61927:tid 61958] [client 136.144.19.52:62589] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "abMrOLLkK584eBa2J7W6OAAAAAw"]
[Fri Mar 13 05:08:10.133490 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.236:50357] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abMrOvONf1H0XrBFE4NQxgAAAQM"]
[Fri Mar 13 05:08:11.471094 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.60:58611] [client 136.144.19.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.60, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abMrO_ONf1H0XrBFE4NQ2QAAARM"]
[Fri Mar 13 05:08:12.330102 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.60:58611] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abMrPPONf1H0XrBFE4NQ6AAAAQ8"]
[Fri Mar 13 05:08:12.910860 2026] [:error] [pid 61929:tid 62016] [client 216.24.219.211:38215] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "abMrPDGGsow2jgUjLtxEjQAAAIw"]
[Fri Mar 13 05:08:13.545117 2026] [:error] [pid 61928:tid 61990] [client 136.144.19.70:42787] [client 136.144.19.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abMrPQod66AHekJJZiobWwAAAE0"]
[Fri Mar 13 05:08:14.174396 2026] [:error] [pid 61928:tid 61991] [client 136.144.19.67:20623] [client 136.144.19.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.67, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abMrPgod66AHekJJZiobYwAAAE4"]
[Fri Mar 13 05:08:15.357109 2026] [:error] [pid 61928:tid 61977] [client 136.144.19.67:20623] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Mar 13 05:08:15.949940 2026] [:error] [pid 61928:tid 62000] [client 136.144.19.67:20623] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Mar 13 05:08:16.236318 2026] [:error] [pid 61928:tid 61978] [client 136.144.19.67:20623] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abMrQAod66AHekJJZiobfgAAAEE"]
[Fri Mar 13 05:08:16.847124 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.60:51323] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Mar 13 05:08:17.400293 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.60:51323] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Mar 13 05:08:17.933173 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.60:51323] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "abMrQfONf1H0XrBFE4NRQQAAARY"]
[Fri Mar 13 05:08:18.557904 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.78:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Fri Mar 13 05:08:19.164345 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.78:64061] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abMrQ7ce6g9kILuh_R7b5wAAANI"]
[Fri Mar 13 05:08:19.947115 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.232:24929] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Fri Mar 13 05:08:20.276848 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.232:24929] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Fri Mar 13 05:08:20.554364 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.232:24929] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "abMrRLce6g9kILuh_R7cAAAAAMI"]
[Fri Mar 13 05:08:21.079744 2026] [:error] [pid 44755:tid 44781] [client 136.144.19.77:40089] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "abMrRfONf1H0XrBFE4NRXAAAARg"]
[Fri Mar 13 05:08:21.585329 2026] [:error] [pid 61929:tid 62006] [client 136.144.19.219:54115] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abMrRTGGsow2jgUjLtxExAAAAII"]
[Fri Mar 13 05:08:22.512532 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.222:30443] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "abMrRrce6g9kILuh_R7cDQAAAM0"]
[Fri Mar 13 05:08:23.133597 2026] [:error] [pid 62036:tid 62044] [client 216.24.219.201:64301] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "abMrR7ce6g9kILuh_R7cEQAAAME"]
[Fri Mar 13 05:08:25.213770 2026] [:error] [pid 61928:tid 61983] [client 136.144.19.64:63753] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Mar 13 05:08:25.471745 2026] [:error] [pid 61928:tid 61978] [client 136.144.19.64:63753] [client 136.144.19.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.64, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "abMrSQod66AHekJJZiobsAAAAEE"]
[Fri Mar 13 05:08:25.733464 2026] [:error] [pid 61928:tid 61992] [client 136.144.19.64:63753] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Mar 13 05:08:26.066665 2026] [:error] [pid 61928:tid 61995] [client 136.144.19.64:63753] [client 136.144.19.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.64, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abMrSgod66AHekJJZiobtgAAAFI"]
[Fri Mar 13 05:08:26.342591 2026] [:error] [pid 61928:tid 61997] [client 136.144.19.64:63753] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "abMrSgod66AHekJJZiobuwAAAFQ"]
[Fri Mar 13 05:08:26.889487 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.222:51997] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Fri Mar 13 05:08:27.148794 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.222:51997] [client 136.144.19.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.222, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abMrS_ONf1H0XrBFE4NRtQAAAQc"]
[Fri Mar 13 05:08:27.153582 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.222:51997] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Fri Mar 13 05:08:28.118055 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.222:51997] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Fri Mar 13 05:08:28.424609 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.222:51997] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abMrTPONf1H0XrBFE4NR0AAAARQ"]
[Fri Mar 13 05:08:29.039511 2026] [:error] [pid 61928:tid 61999] [client 136.144.19.226:36155] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abMrTQod66AHekJJZiobxgAAAFY"]
[Fri Mar 13 05:08:29.887905 2026] [:error] [pid 61929:tid 62019] [client 136.144.19.46:57671] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abMrTTGGsow2jgUjLtxE-AAAAI8"]
[Fri Mar 13 05:08:31.056443 2026] [:error] [pid 61928:tid 61998] [client 136.144.19.60:41981] [client 136.144.19.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.60, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abMrTwod66AHekJJZiobzwAAAFU"]
[Fri Mar 13 05:08:32.000059 2026] [:error] [pid 61928:tid 61991] [client 136.144.19.60:41981] [client 136.144.19.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.60, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abMrTwod66AHekJJZiob1AAAAE4"]
[Fri Mar 13 05:08:32.289346 2026] [:error] [pid 61928:tid 61989] [client 136.144.19.60:41981] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iRSzrsOUEP.php
[Fri Mar 13 05:08:32.855661 2026] [:error] [pid 61928:tid 61988] [client 136.144.19.60:41981] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abMrUAod66AHekJJZiob3QAAAEs"]
[Fri Mar 13 05:08:33.458369 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.53:47825] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "abMrUbce6g9kILuh_R7cigAAAMY"]
[Fri Mar 13 05:08:36.853492 2026] [:error] [pid 61929:tid 62019] [client 136.144.19.69:45025] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Mar 13 05:08:37.430187 2026] [:error] [pid 61929:tid 62017] [client 136.144.19.69:45025] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "abMrVTGGsow2jgUjLtxFNgAAAI0"]
[Fri Mar 13 05:08:37.959241 2026] [:error] [pid 62036:tid 62059] [client 216.24.219.199:31161] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abMrVbce6g9kILuh_R7czAAAANA"]
[Fri Mar 13 05:08:38.846008 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.222:38041] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/xl.php"] [unique_id "abMrVrce6g9kILuh_R7c3QAAANc"]
[Fri Mar 13 05:08:40.374687 2026] [:error] [pid 61929:tid 62014] [client 136.144.19.78:23597] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abMrWDGGsow2jgUjLtxFVQAAAIo"]
[Fri Mar 13 05:08:42.315525 2026] [:error] [pid 61929:tid 62027] [client 136.144.19.77:45153] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Mar 13 05:08:42.880955 2026] [:error] [pid 61929:tid 62024] [client 136.144.19.77:45153] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abMrWjGGsow2jgUjLtxFaAAAAJQ"]
[Fri Mar 13 05:08:43.532333 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.223:62177] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/filemanager.php"] [unique_id "abMrW7ce6g9kILuh_R7c_QAAAME"]
[Fri Mar 13 05:08:44.791007 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.226:52837] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "abMrXLce6g9kILuh_R7dBQAAAMM"]
[Fri Mar 13 05:08:45.352366 2026] [:error] [pid 61929:tid 62022] [client 136.144.19.76:44085] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abMrXTGGsow2jgUjLtxFdwAAAJI"]
[Fri Mar 13 05:08:48.153096 2026] [:error] [pid 61927:tid 61967] [client 136.144.19.61:21761] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abMrYLLkK584eBa2J7W6pgAAABU"]
[Fri Mar 13 05:08:49.036320 2026] [:error] [pid 61929:tid 62025] [client 136.144.19.227:31529] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abMrYTGGsow2jgUjLtxFlQAAAJU"]
[Fri Mar 13 05:08:50.223854 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.72:21707] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abMrYvONf1H0XrBFE4NTKAAAAQQ"]
[Fri Mar 13 05:08:51.330207 2026] [:error] [pid 61929:tid 62021] [client 136.144.19.225:61057] [client 136.144.19.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.225, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abMrYzGGsow2jgUjLtxFnwAAAJE"]
[Fri Mar 13 05:08:52.216159 2026] [:error] [pid 61929:tid 62016] [client 136.144.19.225:61057] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Mar 13 05:08:53.017006 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.225:61057] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abMrZTGGsow2jgUjLtxFrAAAAJg"]
[Fri Mar 13 05:08:53.917603 2026] [:error] [pid 44755:tid 44758] [client 193.36.224.140:44405] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Mar 13 05:08:54.175409 2026] [:error] [pid 44755:tid 44764] [client 193.36.224.140:44405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Mar 13 05:08:54.433186 2026] [:error] [pid 44755:tid 44767] [client 193.36.224.140:44405] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Mar 13 05:08:54.696410 2026] [:error] [pid 44755:tid 44780] [client 193.36.224.140:44405] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abMrZvONf1H0XrBFE4NTegAAARc"]
[Fri Mar 13 05:08:55.537747 2026] [:error] [pid 61929:tid 62010] [client 216.24.219.195:60945] [client 216.24.219.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "abMrZzGGsow2jgUjLtxFxwAAAIY"]
[Fri Mar 13 05:08:56.050849 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.61:20821] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Mar 13 05:08:56.392761 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.61:20821] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Mar 13 05:08:56.666171 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.61:20821] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Mar 13 05:08:57.691451 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.61:20821] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abMrabce6g9kILuh_R7dXQAAAME"]
[Fri Mar 13 05:08:58.238167 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.73:28795] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Mar 13 05:08:58.795292 2026] [:error] [pid 61929:tid 62012] [client 136.144.19.73:28795] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Mar 13 05:08:59.073174 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.73:28795] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Mar 13 05:08:59.801059 2026] [:error] [pid 61929:tid 62010] [client 136.144.19.73:28795] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abMrazGGsow2jgUjLtxF9gAAAIY"]
[Fri Mar 13 05:09:00.356971 2026] [:error] [pid 44755:tid 44777] [client 216.24.219.211:33903] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "abMrbPONf1H0XrBFE4NTsQAAARQ"]
[Fri Mar 13 05:09:01.124918 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.53:61423] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Mar 13 05:09:01.772851 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.53:61423] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abMrbfONf1H0XrBFE4NTywAAARc"]
[Fri Mar 13 05:09:02.903010 2026] [:error] [pid 61928:tid 61980] [client 136.144.19.52:30067] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Fri Mar 13 05:09:03.799529 2026] [:error] [pid 61928:tid 61981] [client 136.144.19.52:30067] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "abMrbwod66AHekJJZiocqAAAAEQ"]
[Fri Mar 13 05:09:04.315290 2026] [:error] [pid 62036:tid 62065] [client 216.24.219.168:39575] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abMrcLce6g9kILuh_R7djAAAANY"]
[Fri Mar 13 05:09:08.969043 2026] [:error] [pid 61929:tid 62017] [client 216.24.219.167:21235] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abMrdDGGsow2jgUjLtxGSgAAAI0"]
[Fri Mar 13 05:09:09.537210 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.74:62405] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abMrdfONf1H0XrBFE4NUPAAAAQo"]
[Fri Mar 13 05:09:10.112289 2026] [:error] [pid 62036:tid 62045] [client 136.144.19.225:27453] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "abMrdrce6g9kILuh_R7dwQAAAMI"]
[Fri Mar 13 05:09:11.301131 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.67:46401] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abMrd_ONf1H0XrBFE4NUXwAAAQo"]
[Fri Mar 13 05:09:11.818621 2026] [:error] [pid 44755:tid 44767] [client 216.24.219.212:65349] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Mar 13 05:09:12.103895 2026] [:error] [pid 44755:tid 44776] [client 216.24.219.212:65349] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abMrePONf1H0XrBFE4NUbwAAARM"]
[Fri Mar 13 05:09:12.989754 2026] [:error] [pid 61929:tid 62004] [client 136.144.19.227:24923] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/about.php"] [unique_id "abMreDGGsow2jgUjLtxGYgAAAIA"]
[Fri Mar 13 05:09:14.037926 2026] [:error] [pid 61927:tid 61954] [client 136.144.19.226:20153] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abMrerLkK584eBa2J7W66wAAAAg"]
[Fri Mar 13 05:09:14.604680 2026] [:error] [pid 61929:tid 62017] [client 216.24.219.143:30923] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abMrejGGsow2jgUjLtxGagAAAI0"]
[Fri Mar 13 05:09:18.343651 2026] [:error] [pid 62036:tid 62064] [client 136.144.19.222:43131] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Mar 13 05:09:19.190350 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.222:43131] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "abMrf7ce6g9kILuh_R7ePAAAANA"]
[Fri Mar 13 05:09:19.843685 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.69:24213] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Mar 13 05:09:21.044778 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.69:24213] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abMrgfONf1H0XrBFE4NU9AAAAQk"]
[Fri Mar 13 05:09:21.677748 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.60:58975] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abMrgbce6g9kILuh_R7eQQAAANc"]
[Fri Mar 13 05:09:22.397805 2026] [:error] [pid 61927:tid 61966] [client 216.24.219.143:44619] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "abMrgrLkK584eBa2J7W7JwAAABQ"]
[Fri Mar 13 05:09:23.069930 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.234:53405] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abMrg_ONf1H0XrBFE4NVFwAAAQI"]
[Fri Mar 13 05:09:23.640972 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.235:46099] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "abMrg7ce6g9kILuh_R7eXQAAANY"]
[Fri Mar 13 05:09:24.169699 2026] [:error] [pid 61929:tid 62006] [client 193.36.224.114:49649] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abMrhDGGsow2jgUjLtxGkwAAAII"]
[Fri Mar 13 05:09:25.054496 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.222:40645] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abMrhfONf1H0XrBFE4NVLwAAARY"]
[Fri Mar 13 05:09:25.647312 2026] [:error] [pid 61928:tid 61981] [client 136.144.19.221:37387] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abMrhQod66AHekJJZiodCwAAAEQ"]
[Fri Mar 13 05:09:27.332012 2026] [:error] [pid 61928:tid 61995] [client 216.24.219.143:52389] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abMrhwod66AHekJJZiodIwAAAFI"]
[Fri Mar 13 05:09:28.181768 2026] [:error] [pid 62036:tid 62060] [client 136.144.19.46:26549] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abMriLce6g9kILuh_R7ehwAAANE"]
[Fri Mar 13 05:09:30.171729 2026] [:error] [pid 61929:tid 62011] [client 136.144.19.55:64827] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abMrijGGsow2jgUjLtxGxAAAAIc"]
[Fri Mar 13 05:09:31.880713 2026] [:error] [pid 61928:tid 61991] [client 136.144.19.219:64153] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abMriwod66AHekJJZiodQAAAAE4"]
[Fri Mar 13 05:09:32.444324 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.62:31719] [client 136.144.19.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abMrjPONf1H0XrBFE4NVqgAAARA"]
[Fri Mar 13 05:09:33.024905 2026] [:error] [pid 61929:tid 62018] [client 216.24.219.212:58257] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abMrjTGGsow2jgUjLtxGzwAAAI4"]
[Fri Mar 13 05:09:35.582745 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.219:28893] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abMrj_ONf1H0XrBFE4NV4QAAAQk"]
[Fri Mar 13 05:09:36.363426 2026] [:error] [pid 61929:tid 62025] [client 136.144.19.222:60481] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abMrkDGGsow2jgUjLtxG5wAAAJU"]
[Fri Mar 13 05:09:36.889322 2026] [:error] [pid 61928:tid 61988] [client 136.144.19.79:31213] File does not exist: /usr/local/apache/htdocs/suspended-page/firewall.php
[Fri Mar 13 05:09:38.265294 2026] [:error] [pid 61928:tid 61995] [client 136.144.19.79:31213] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Mar 13 05:09:40.787839 2026] [:error] [pid 61928:tid 61979] [client 136.144.19.79:31213] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abMrlAod66AHekJJZiodXwAAAEI"]
[Fri Mar 13 05:09:41.323847 2026] [:error] [pid 61929:tid 62012] [client 216.24.219.168:26489] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Mar 13 05:09:41.629921 2026] [:error] [pid 61929:tid 62022] [client 216.24.219.168:26489] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abMrlTGGsow2jgUjLtxHIQAAAJI"]
[Fri Mar 13 05:09:43.378174 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.72:39407] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "abMrl_ONf1H0XrBFE4NWPQAAAQ4"]
[Fri Mar 13 05:09:44.345250 2026] [:error] [pid 61928:tid 61983] [client 136.144.19.69:35337] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abMrmAod66AHekJJZiodeAAAAEY"]
[Fri Mar 13 05:09:45.496283 2026] [:error] [pid 61929:tid 62023] [client 136.144.19.222:28903] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Mar 13 05:09:46.052783 2026] [:error] [pid 61929:tid 62020] [client 136.144.19.222:28903] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "abMrmjGGsow2jgUjLtxHWAAAAJA"]
[Fri Mar 13 05:09:47.194191 2026] [:error] [pid 44755:tid 44766] [client 216.24.219.143:63177] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "abMrm_ONf1H0XrBFE4NWewAAAQk"]
[Fri Mar 13 05:09:49.128464 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.223:58425] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Fri Mar 13 05:09:49.432817 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.223:58425] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abMrnfONf1H0XrBFE4NWtgAAAQc"]
[Fri Mar 13 05:09:49.979745 2026] [:error] [pid 62036:tid 62053] [client 216.24.219.196:36891] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abMrnbce6g9kILuh_R7fRAAAAMo"]
[Fri Mar 13 05:09:50.767936 2026] [:error] [pid 61929:tid 62007] [client 136.144.19.52:25011] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abMrnjGGsow2jgUjLtxHgAAAAIM"]
[Fri Mar 13 05:09:51.401442 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.63:25637] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abMrn_ONf1H0XrBFE4NWzwAAARA"]
[Fri Mar 13 05:09:52.016495 2026] [:error] [pid 44755:tid 44774] [client 216.24.219.167:63907] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "abMroPONf1H0XrBFE4NW6gAAARE"]
[Fri Mar 13 05:09:53.220468 2026] [:error] [pid 61927:tid 61958] [client 136.144.19.63:39743] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abMrobLkK584eBa2J7W7mgAAAAw"]
[Fri Mar 13 05:09:54.405482 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.55:32561] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abMrorce6g9kILuh_R7fhwAAAMQ"]
[Fri Mar 13 05:09:55.337216 2026] [:error] [pid 61929:tid 62006] [client 216.24.219.168:64771] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abMrozGGsow2jgUjLtxHmgAAAII"]
[Fri Mar 13 05:09:55.971639 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.61:30953] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Fri Mar 13 05:09:56.232774 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.61:30953] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abMrpLce6g9kILuh_R7flgAAANQ"]
[Fri Mar 13 05:09:57.410818 2026] [:error] [pid 44755:tid 44757] [client 216.24.219.168:65047] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abMrpfONf1H0XrBFE4NXZAAAAQA"]
[Fri Mar 13 05:09:57.994278 2026] [:error] [pid 61929:tid 62016] [client 136.144.19.225:39613] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abMrpTGGsow2jgUjLtxHrwAAAIw"]
[Fri Mar 13 05:09:59.150165 2026] [:error] [pid 61928:tid 61986] [client 136.144.19.58:53463] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abMrpwod66AHekJJZiodvAAAAEk"]
[Fri Mar 13 05:10:01.274853 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.63:22491] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "abMrqbce6g9kILuh_R7f0QAAANc"]
[Fri Mar 13 05:10:02.066106 2026] [:error] [pid 44755:tid 44761] [client 216.24.219.167:51395] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "abMrqvONf1H0XrBFE4NXogAAAQQ"]
[Fri Mar 13 05:10:03.018594 2026] [:error] [pid 62036:tid 62064] [client 136.144.19.79:55933] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "abMrq7ce6g9kILuh_R7f2QAAANU"]
[Fri Mar 13 05:10:03.534055 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.46:49753] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/shell.php"] [unique_id "abMrq7ce6g9kILuh_R7f3wAAAM4"]
[Fri Mar 13 05:10:04.055075 2026] [:error] [pid 61927:tid 61965] [client 136.144.19.72:58865] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "abMrrLLkK584eBa2J7W7vwAAABM"]
[Fri Mar 13 05:10:04.899894 2026] [:error] [pid 61929:tid 62011] [client 136.144.19.61:46903] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/db.php"] [unique_id "abMrrDGGsow2jgUjLtxH3wAAAIc"]
[Fri Mar 13 05:10:05.448471 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.76:60873] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "abMrrbce6g9kILuh_R7f6QAAAMM"]
[Fri Mar 13 05:10:05.977838 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.74:61791] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abMrrbce6g9kILuh_R7f7QAAAMQ"]
[Fri Mar 13 05:10:06.544766 2026] [:error] [pid 61928:tid 61996] [client 136.144.19.78:65121] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Fri Mar 13 05:10:06.901150 2026] [:error] [pid 61928:tid 61995] [client 136.144.19.78:65121] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abMrrgod66AHekJJZiod4AAAAFI"]
[Fri Mar 13 05:10:07.626730 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.72:35027] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "abMrr_ONf1H0XrBFE4NX0wAAAQw"]
[Fri Mar 13 05:10:08.140585 2026] [:error] [pid 61929:tid 62023] [client 216.24.219.196:32351] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "abMrsDGGsow2jgUjLtxH-gAAAJM"]
[Fri Mar 13 05:10:09.565540 2026] [:error] [pid 61927:tid 61964] [client 136.144.19.73:55469] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/template-wploader.php"] [unique_id "abMrsbLkK584eBa2J7W74AAAABI"]
[Fri Mar 13 05:10:10.351844 2026] [:error] [pid 44755:tid 44777] [client 216.24.219.143:46813] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "abMrsvONf1H0XrBFE4NX-QAAARQ"]
[Fri Mar 13 05:10:11.790853 2026] [:error] [pid 44755:tid 44775] [client 216.24.219.143:36845] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "abMrs_ONf1H0XrBFE4NYGwAAARI"]
[Fri Mar 13 05:10:13.264621 2026] [:error] [pid 61929:tid 62007] [client 136.144.19.61:45123] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abMrtTGGsow2jgUjLtxIFAAAAIM"]
[Fri Mar 13 05:10:13.801787 2026] [:error] [pid 61927:tid 61959] [client 216.24.219.143:20879] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abMrtbLkK584eBa2J7W79QAAAA0"]
[Fri Mar 13 05:10:14.648810 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.225:57669] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "abMrtvONf1H0XrBFE4NYRgAAAQ0"]
[Fri Mar 13 05:10:15.738297 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.76:44929] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abMrt_ONf1H0XrBFE4NYWQAAAQQ"]
[Fri Mar 13 05:10:16.312169 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.226:27599] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "abMruPONf1H0XrBFE4NYXgAAAQM"]
[Fri Mar 13 05:10:17.746654 2026] [:error] [pid 61928:tid 61987] [client 136.144.19.41:21363] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abMruQod66AHekJJZioeGgAAAEo"]
[Fri Mar 13 05:10:18.286654 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.78:56145] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abMruvONf1H0XrBFE4NYeQAAAQA"]
[Fri Mar 13 05:10:18.900622 2026] [:error] [pid 44755:tid 44771] [client 216.24.219.200:46569] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Mar 13 05:10:23.224781 2026] [:error] [pid 44755:tid 44771] [client 216.24.219.200:46569] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abMrv_ONf1H0XrBFE4NYqAAAAQ4"]
[Fri Mar 13 05:10:24.059380 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.73:35627] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "abMrwLce6g9kILuh_R7gfgAAAMM"]
[Fri Mar 13 05:10:25.285315 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.60:57893] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abMrwfONf1H0XrBFE4NYzAAAARc"]
[Fri Mar 13 05:10:26.196503 2026] [:error] [pid 61929:tid 62015] [client 136.144.19.48:59605] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abMrwjGGsow2jgUjLtxIWwAAAIs"]
[Fri Mar 13 05:10:26.721677 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.63:36667] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abMrwvONf1H0XrBFE4NY5QAAARI"]
[Fri Mar 13 05:10:28.174956 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.74:60497] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abMrxLce6g9kILuh_R7gpwAAAM0"]
[Fri Mar 13 05:10:28.798792 2026] [:error] [pid 61929:tid 62015] [client 216.24.219.213:34321] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abMrxDGGsow2jgUjLtxIZgAAAIs"]
[Fri Mar 13 05:10:29.329346 2026] [:error] [pid 61929:tid 62017] [client 193.36.224.140:29307] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "abMrxTGGsow2jgUjLtxIbAAAAI0"]
[Fri Mar 13 05:10:29.939856 2026] [:error] [pid 61927:tid 61968] [client 136.144.19.80:48791] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abMrxbLkK584eBa2J7W8KAAAABY"]
[Fri Mar 13 05:10:30.454495 2026] [:error] [pid 61929:tid 62014] [client 136.144.19.53:63675] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Fri Mar 13 05:10:30.992146 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.53:63675] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Fri Mar 13 05:10:34.407932 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.53:63675] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abMryjGGsow2jgUjLtxIoQAAAI4"]
[Fri Mar 13 05:10:35.275899 2026] [:error] [pid 61929:tid 62024] [client 136.144.19.223:37037] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abMryzGGsow2jgUjLtxIqQAAAJQ"]
[Fri Mar 13 05:10:36.406833 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.64:52169] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "abMrzPONf1H0XrBFE4NZawAAAQg"]
[Fri Mar 13 05:10:37.037191 2026] [:error] [pid 62036:tid 62058] [client 136.144.19.54:27383] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/simi.php"] [unique_id "abMrzbce6g9kILuh_R7hBAAAAM8"]
[Fri Mar 13 05:10:38.199655 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.58:64065] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Fri Mar 13 05:10:38.465033 2026] [:error] [pid 44755:tid 44763] [client 136.144.19.58:64065] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abMrzvONf1H0XrBFE4NZlQAAAQY"]
[Fri Mar 13 05:10:39.562004 2026] [:error] [pid 61929:tid 62019] [client 136.144.19.74:21365] [client 136.144.19.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.74, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abMrzzGGsow2jgUjLtxIwwAAAI8"]
[Fri Mar 13 05:10:40.093646 2026] [:error] [pid 61929:tid 62024] [client 136.144.19.74:21365] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abMr0DGGsow2jgUjLtxIyAAAAJQ"]
[Fri Mar 13 05:10:40.612934 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.219:23741] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "abMr0PONf1H0XrBFE4NZtgAAAQU"]
[Fri Mar 13 05:10:42.239500 2026] [:error] [pid 61927:tid 61963] [client 136.144.19.48:33723] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "abMr0rLkK584eBa2J7W8QgAAABE"]
[Fri Mar 13 05:10:42.871748 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.225:63483] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 13 05:10:43.142712 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.225:63483] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Fri Mar 13 05:10:43.794781 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.225:63483] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Fri Mar 13 05:10:44.081505 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.225:63483] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Fri Mar 13 05:10:44.419197 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.225:63483] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abMr1PONf1H0XrBFE4NZ7wAAAQI"]
[Fri Mar 13 05:10:44.933389 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.64:64267] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Fri Mar 13 05:10:45.203152 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.64:64267] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abMr1fONf1H0XrBFE4NaAAAAARA"]
[Fri Mar 13 05:10:47.766651 2026] [:error] [pid 44755:tid 44765] [client 216.24.219.143:47629] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abMr1_ONf1H0XrBFE4NaMwAAAQg"]
[Fri Mar 13 05:10:48.361321 2026] [:error] [pid 61929:tid 62025] [client 136.144.19.226:48107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Mar 13 05:10:48.631316 2026] [:error] [pid 61929:tid 62013] [client 136.144.19.226:48107] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "abMr2DGGsow2jgUjLtxI9wAAAIk"]
[Fri Mar 13 05:10:49.779124 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.61:33293] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abMr2fONf1H0XrBFE4NaWAAAAQ8"]
[Fri Mar 13 05:10:50.836335 2026] [:error] [pid 61927:tid 61956] [client 136.144.19.52:53699] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/11.php"] [unique_id "abMr2rLkK584eBa2J7W8WQAAAAo"]
[Fri Mar 13 05:10:52.037638 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.75:50233] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abMr3Lce6g9kILuh_R7hygAAAMk"]
[Fri Mar 13 05:10:54.058066 2026] [:error] [pid 61929:tid 62021] [client 136.144.19.67:24197] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/custom.functions.1736323659.php
[Fri Mar 13 05:10:54.632311 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.67:24197] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abMr3jGGsow2jgUjLtxJRQAAAI4"]
[Fri Mar 13 05:10:55.170171 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.229:22523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Fri Mar 13 05:10:55.761948 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.229:22523] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abMr37ce6g9kILuh_R7h-wAAAMU"]
[Fri Mar 13 05:10:56.829768 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.236:43729] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abMr4Lce6g9kILuh_R7iDwAAAMA"]
[Fri Mar 13 05:10:57.726454 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.76:39899] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/edit.php"] [unique_id "abMr4fONf1H0XrBFE4NafwAAARY"]
[Fri Mar 13 05:10:59.717803 2026] [:error] [pid 61929:tid 62020] [client 136.144.19.64:39075] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abMr4zGGsow2jgUjLtxJeAAAAJA"]
[Fri Mar 13 05:11:00.334713 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.234:34989] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/w.php
[Fri Mar 13 05:11:01.220731 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.234:34989] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Mar 13 05:11:01.848835 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.234:34989] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/mrs.php"] [unique_id "abMr5fONf1H0XrBFE4NaygAAAQM"]
[Fri Mar 13 05:11:02.362723 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.77:35197] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abMr5vONf1H0XrBFE4Na2wAAARU"]
[Fri Mar 13 05:11:03.152385 2026] [:error] [pid 44755:tid 44759] [client 216.24.219.196:23913] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-date-query-cookie.php"] [unique_id "abMr5_ONf1H0XrBFE4Na7AAAAQI"]
[Fri Mar 13 05:11:04.311616 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.80:37853] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Mar 13 05:11:04.572934 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.80:37853] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/pp.php"] [unique_id "abMr6Lce6g9kILuh_R7iWwAAAM0"]
[Fri Mar 13 05:11:05.973730 2026] [:error] [pid 61929:tid 62023] [client 136.144.19.222:53447] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-mail.php"] [unique_id "abMr6TGGsow2jgUjLtxJoQAAAJM"]
[Fri Mar 13 05:11:06.562646 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.61:49077] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Mar 13 05:11:07.247335 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.61:49077] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "abMr67ce6g9kILuh_R7imwAAAMs"]
[Fri Mar 13 05:11:08.098344 2026] [:error] [pid 61927:tid 61970] [client 136.144.19.63:49149] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "abMr7LLkK584eBa2J7W8ngAAABg"]
[Fri Mar 13 05:11:08.983750 2026] [:error] [pid 61928:tid 61998] [client 136.144.19.78:35309] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "abMr7Aod66AHekJJZiofDAAAAFU"]
[Fri Mar 13 05:11:09.798784 2026] [:error] [pid 61928:tid 61981] [client 136.144.19.67:26535] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "abMr7Qod66AHekJJZiofFgAAAEQ"]
[Fri Mar 13 05:11:10.844249 2026] [:error] [pid 61929:tid 62010] [client 216.24.219.204:50899] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "abMr7jGGsow2jgUjLtxJ2wAAAIY"]
[Fri Mar 13 05:11:11.962186 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.70:63763] [client 136.144.19.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "abMr7_ONf1H0XrBFE4NbYwAAAQo"]
[Fri Mar 13 05:11:12.764277 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.73:55457] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Fri Mar 13 05:11:13.040424 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.73:55457] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "abMr8bce6g9kILuh_R7ivwAAANY"]
[Fri Mar 13 05:11:13.661386 2026] [:error] [pid 61928:tid 62000] [client 216.24.219.196:54649] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Fri Mar 13 05:11:13.947783 2026] [:error] [pid 61928:tid 61986] [client 216.24.219.196:54649] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "abMr8Qod66AHekJJZiofOAAAAEk"]
[Fri Mar 13 05:11:15.660710 2026] [:error] [pid 61927:tid 61951] [client 136.144.19.52:37643] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "abMr87LkK584eBa2J7W82wAAAAU"]
[Fri Mar 13 05:11:16.750016 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.78:24727] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "abMr9PONf1H0XrBFE4NbmAAAAQc"]
[Fri Mar 13 05:11:18.120029 2026] [:error] [pid 61929:tid 62024] [client 136.144.19.72:28067] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "abMr9jGGsow2jgUjLtxKDgAAAJQ"]
[Fri Mar 13 05:11:19.732408 2026] [:error] [pid 61928:tid 61989] [client 216.24.219.168:28745] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Fri Mar 13 05:11:20.284633 2026] [:error] [pid 61928:tid 61997] [client 216.24.219.168:28745] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "abMr-Aod66AHekJJZiofWgAAAFQ"]
[Fri Mar 13 05:11:21.522431 2026] [:error] [pid 44755:tid 44781] [client 136.144.19.219:55387] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "abMr-fONf1H0XrBFE4NbxgAAARg"]
[Fri Mar 13 05:11:22.667682 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.60:55933] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "abMr-vONf1H0XrBFE4Nb5wAAARQ"]
[Fri Mar 13 05:11:24.459529 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.72:64331] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "abMr_PONf1H0XrBFE4Nb_QAAARc"]
[Fri Mar 13 05:11:25.007475 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.77:56029] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "abMr_fONf1H0XrBFE4NcBwAAAQM"]
[Fri Mar 13 05:11:25.597929 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.67:46505] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "abMr_bce6g9kILuh_R7jDwAAAM4"]
[Fri Mar 13 05:11:26.154222 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.232:46073] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "abMr_rce6g9kILuh_R7jFQAAANM"]
[Fri Mar 13 05:11:27.503051 2026] [:error] [pid 62036:tid 62058] [client 136.144.19.58:41817] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "abMr_7ce6g9kILuh_R7jLQAAAM8"]
[Fri Mar 13 05:11:28.969452 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.53:39585] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "abMsALce6g9kILuh_R7jPgAAAMk"]
[Fri Mar 13 05:11:30.246064 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.63:21747] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "abMsAvONf1H0XrBFE4NcWQAAAQM"]
[Fri Mar 13 05:11:30.817972 2026] [:error] [pid 61929:tid 62017] [client 136.144.19.228:59935] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "abMsAjGGsow2jgUjLtxKZAAAAI0"]
[Fri Mar 13 05:11:31.366663 2026] [:error] [pid 61928:tid 61999] [client 136.144.19.229:20111] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "abMsAwod66AHekJJZiofoAAAAFY"]
[Fri Mar 13 05:11:33.453160 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.60:28685] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "abMsBbce6g9kILuh_R7jXwAAAMA"]
[Fri Mar 13 05:11:34.059245 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.78:50979] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "abMsBrce6g9kILuh_R7jaQAAANI"]
[Fri Mar 13 05:11:34.586203 2026] [:error] [pid 61927:tid 61958] [client 136.144.19.70:37393] [client 136.144.19.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "abMsBrLkK584eBa2J7W9YAAAAAw"]
[Fri Mar 13 05:11:36.235645 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.63:36663] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "abMsCPONf1H0XrBFE4NctAAAAQU"]
[Fri Mar 13 05:11:36.752918 2026] [:error] [pid 62036:tid 62047] [client 193.36.224.140:40363] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "abMsCLce6g9kILuh_R7jigAAAMQ"]
[Fri Mar 13 05:11:37.296600 2026] [:error] [pid 61928:tid 61986] [client 136.144.19.67:32711] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "abMsCQod66AHekJJZiofrwAAAEk"]
[Fri Mar 13 05:11:37.946918 2026] [:error] [pid 61928:tid 61993] [client 136.144.19.235:48759] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/firewall.php"] [unique_id "abMsCQod66AHekJJZioftAAAAFA"]
[Fri Mar 13 05:11:38.760251 2026] [:error] [pid 61929:tid 62022] [client 193.36.224.140:62465] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/rk2.php"] [unique_id "abMsCjGGsow2jgUjLtxKoQAAAJI"]
[Fri Mar 13 05:11:39.286097 2026] [:error] [pid 61929:tid 62005] [client 136.144.19.48:36855] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "abMsCzGGsow2jgUjLtxKpwAAAIE"]
[Fri Mar 13 05:11:39.932371 2026] [:error] [pid 61928:tid 61999] [client 193.36.224.114:48019] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "abMsCwod66AHekJJZiofvwAAAFY"]
[Fri Mar 13 05:11:42.791886 2026] [:error] [pid 62036:tid 62048] [client 216.24.219.168:56015] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "abMsDrce6g9kILuh_R7jwQAAAMU"]
[Fri Mar 13 05:11:43.636790 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.223:27759] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "abMsD_ONf1H0XrBFE4NdNQAAAQU"]
[Fri Mar 13 05:11:45.827071 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.64:26411] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "abMsETGGsow2jgUjLtxK1wAAAI4"]
[Fri Mar 13 05:11:47.846439 2026] [:error] [pid 61927:tid 61954] [client 216.24.219.204:36243] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "abMsE7LkK584eBa2J7W9pAAAAAg"]
[Fri Mar 13 05:11:48.685378 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.46:42081] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ln/class-wp-widddget-pages.php"] [unique_id "abMsFPONf1H0XrBFE4NdZAAAAQw"]
[Fri Mar 13 05:11:50.102437 2026] [:error] [pid 44755:tid 44765] [client 216.24.219.200:60841] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "abMsFvONf1H0XrBFE4NddAAAAQg"]
[Fri Mar 13 05:11:52.400333 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.54:53957] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "abMsGPONf1H0XrBFE4NdnQAAAQ0"]
[Fri Mar 13 05:11:54.049466 2026] [:error] [pid 44755:tid 44773] [client 216.24.219.143:49075] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/id/wp-work.php"] [unique_id "abMsGvONf1H0XrBFE4NdvgAAARA"]
[Fri Mar 13 05:11:54.653685 2026] [:error] [pid 61928:tid 61991] [client 136.144.19.74:51187] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "abMsGgod66AHekJJZiof7gAAAE4"]
[Fri Mar 13 05:11:56.938835 2026] [:error] [pid 61928:tid 61995] [client 216.24.219.195:57391] [client 216.24.219.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "abMsHAod66AHekJJZiogDQAAAFI"]
[Fri Mar 13 05:11:58.526988 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.221:38495] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "abMsHvONf1H0XrBFE4Nd5AAAARU"]
[Fri Mar 13 05:11:59.363407 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.222:32589] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Fri Mar 13 05:11:59.652913 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.222:32589] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abMsH_ONf1H0XrBFE4Nd9wAAAQg"]
[Fri Mar 13 05:12:00.624935 2026] [:error] [pid 62036:tid 62043] [client 216.24.219.195:55845] [client 216.24.219.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "abMsILce6g9kILuh_R7kYQAAAMA"]
[Fri Mar 13 05:12:01.304099 2026] [:error] [pid 61928:tid 61995] [client 136.144.19.73:42781] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "abMsIQod66AHekJJZiogJwAAAFI"]
[Fri Mar 13 05:12:03.497571 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.60:55523] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "abMsI7ce6g9kILuh_R7kiAAAANI"]
[Fri Mar 13 05:12:04.900250 2026] [:error] [pid 62036:tid 62051] [client 216.24.219.168:60689] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ln/class-wp-translations-library.php"] [unique_id "abMsJLce6g9kILuh_R7kmgAAAMg"]
[Fri Mar 13 05:12:05.738107 2026] [:error] [pid 61928:tid 61987] [client 136.144.19.219:22861] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Fri Mar 13 05:12:06.043917 2026] [:error] [pid 61928:tid 61985] [client 136.144.19.219:22861] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ln/class-wp-translations-interface.php"] [unique_id "abMsJgod66AHekJJZiogQQAAAEg"]
[Fri Mar 13 05:12:07.553616 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.69:58197] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "abMsJ_ONf1H0XrBFE4NePQAAAQs"]
[Fri Mar 13 05:12:08.707918 2026] [:error] [pid 62036:tid 62058] [client 136.144.19.60:49861] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "abMsKLce6g9kILuh_R7kzgAAAM8"]
[Fri Mar 13 05:12:09.525377 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.46:64523] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "abMsKfONf1H0XrBFE4NeTgAAAQc"]
[Fri Mar 13 05:12:10.139319 2026] [:error] [pid 44755:tid 44780] [client 216.24.219.168:34731] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "abMsKvONf1H0XrBFE4NeUwAAARc"]
[Fri Mar 13 05:12:11.178620 2026] [:error] [pid 62036:tid 62066] [client 216.24.219.213:29089] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "abMsK7ce6g9kILuh_R7k_AAAANc"]
[Fri Mar 13 05:12:11.765670 2026] [:error] [pid 61929:tid 62020] [client 216.24.219.167:29991] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "abMsKzGGsow2jgUjLtxLpgAAAJA"]
[Fri Mar 13 05:12:12.287490 2026] [:error] [pid 62036:tid 62064] [client 216.24.219.196:35507] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "abMsLLce6g9kILuh_R7lBQAAANU"]
[Fri Mar 13 05:12:13.921839 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.80:62377] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "abMsLbce6g9kILuh_R7lIwAAAMw"]
[Fri Mar 13 05:12:15.292690 2026] [:error] [pid 61928:tid 61983] [client 136.144.19.76:47361] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "abMsLwod66AHekJJZiogXAAAAEY"]
[Fri Mar 13 05:12:19.037454 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.54:38543] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/module.audio-video.riff-set.php"] [unique_id "abMsM_ONf1H0XrBFE4Ne2gAAAQ4"]
[Fri Mar 13 05:12:19.887785 2026] [:error] [pid 61928:tid 61978] [client 136.144.19.76:20825] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "abMsMwod66AHekJJZiogggAAAEE"]
[Fri Mar 13 05:12:20.447561 2026] [:error] [pid 61927:tid 61958] [client 136.144.19.74:39823] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "abMsNLLkK584eBa2J7W-QAAAAAw"]
[Fri Mar 13 05:12:22.139959 2026] [:error] [pid 61929:tid 62012] [client 136.144.19.229:61379] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "abMsNjGGsow2jgUjLtxL2gAAAIg"]
[Fri Mar 13 05:12:23.892389 2026] [:error] [pid 61929:tid 62009] [client 136.144.19.72:50507] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID/module.audio-license.php"] [unique_id "abMsNzGGsow2jgUjLtxL5gAAAIU"]
[Fri Mar 13 05:12:25.096221 2026] [:error] [pid 61928:tid 61984] [client 136.144.19.219:27389] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "abMsOQod66AHekJJZiogqgAAAEc"]
[Fri Mar 13 05:12:25.637667 2026] [:error] [pid 61929:tid 62014] [client 136.144.19.60:41105] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "abMsOTGGsow2jgUjLtxL8QAAAIo"]
[Fri Mar 13 05:12:26.416837 2026] [:error] [pid 61928:tid 61992] [client 136.144.19.75:29171] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "abMsOgod66AHekJJZioguAAAAE8"]
[Fri Mar 13 05:12:26.927726 2026] [:error] [pid 61929:tid 62021] [client 136.144.19.41:65153] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "abMsOjGGsow2jgUjLtxL_wAAAJE"]
[Fri Mar 13 05:12:27.478521 2026] [:error] [pid 61929:tid 62020] [client 136.144.19.41:55139] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/admin.php"] [unique_id "abMsOzGGsow2jgUjLtxMCAAAAJA"]
[Fri Mar 13 05:12:28.275703 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.67:30121] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "abMsPPONf1H0XrBFE4NfGwAAAQ8"]
[Fri Mar 13 05:12:28.857009 2026] [:error] [pid 61929:tid 62005] [client 136.144.19.60:28791] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "abMsPDGGsow2jgUjLtxMHwAAAIE"]
[Fri Mar 13 05:12:30.693075 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.69:35739] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/input.php"] [unique_id "abMsPjGGsow2jgUjLtxMNwAAAI4"]
[Fri Mar 13 05:12:31.522475 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.64:56555] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "abMsP7ce6g9kILuh_R7loAAAAMo"]
[Fri Mar 13 05:12:32.081969 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.77:33105] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "abMsQLce6g9kILuh_R7lqAAAAMw"]
[Fri Mar 13 05:12:32.668246 2026] [:error] [pid 61927:tid 61947] [client 136.144.19.69:65041] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/dist/about.php"] [unique_id "abMsQLLkK584eBa2J7W-mgAAAAE"]
[Fri Mar 13 05:12:33.176920 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.61:61895] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "abMsQfONf1H0XrBFE4NfVwAAAQc"]
[Fri Mar 13 05:12:34.709772 2026] [:error] [pid 61928:tid 61993] [client 136.144.19.48:21849] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-load.php"] [unique_id "abMsQgod66AHekJJZiog5wAAAFA"]
[Fri Mar 13 05:12:35.289595 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.236:34157] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "abMsQ_ONf1H0XrBFE4NfbwAAAQQ"]
[Fri Mar 13 05:12:36.680367 2026] [:error] [pid 61929:tid 62027] [client 136.144.19.46:21543] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/wp-load.php"] [unique_id "abMsRDGGsow2jgUjLtxMXAAAAJc"]
[Fri Mar 13 05:12:37.183522 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.60:37761] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages-react.php"] [unique_id "abMsRfONf1H0XrBFE4NfigAAAQE"]
[Fri Mar 13 05:12:38.340429 2026] [:error] [pid 61929:tid 62013] [client 136.144.19.221:52459] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/font-editor.php"] [unique_id "abMsRjGGsow2jgUjLtxMaQAAAIk"]
[Fri Mar 13 05:12:38.919370 2026] [:error] [pid 61929:tid 62017] [client 136.144.19.58:27333] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "abMsRjGGsow2jgUjLtxMbQAAAI0"]
[Fri Mar 13 05:12:39.463755 2026] [:error] [pid 61929:tid 62009] [client 136.144.19.58:27333] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "abMsRzGGsow2jgUjLtxMcwAAAIU"]
[Fri Mar 13 05:12:45.438816 2026] [autoindex:error] [pid 44755:tid 44775] [client 136.144.19.80:36681] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 05:51:48.020673 2026] [:error] [pid 62036:tid 62063] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 05:51:48.144461 2026] [:error] [pid 62036:tid 62056] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 05:51:48.402731 2026] [:error] [pid 62036:tid 62052] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 13 05:51:48.528888 2026] [:error] [pid 62036:tid 62066] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 05:51:48.777618 2026] [:error] [pid 62036:tid 62055] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 13 05:51:48.901506 2026] [:error] [pid 62036:tid 62061] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 05:51:49.026485 2026] [:error] [pid 62036:tid 62060] [client 104.208.70.120:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Mar 13 05:51:49.269706 2026] [:error] [pid 62036:tid 62043] [client 104.208.70.120:13763] [client 104.208.70.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abM1dbce6g9kILuh_R79IAAAAMA"]
[Fri Mar 13 05:51:49.753224 2026] [:error] [pid 62036:tid 62062] [client 104.208.70.120:2324] [client 104.208.70.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abM1dbce6g9kILuh_R79IQAAANM"]
[Fri Mar 13 05:51:50.242655 2026] [:error] [pid 62036:tid 62050] [client 104.208.70.120:2909] [client 104.208.70.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abM1drce6g9kILuh_R79IgAAAMc"]
[Fri Mar 13 05:51:50.746185 2026] [:error] [pid 44755:tid 44757] [client 104.208.70.120:2892] [client 104.208.70.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abM1dvONf1H0XrBFE4N85QAAAQA"]
[Fri Mar 13 06:00:28.508051 2026] [:error] [pid 62036:tid 62054] [client 62.163.82.39:59452] [client 62.163.82.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.163.82.39, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abM3fLce6g9kILuh_R4APAAAAMs"]
[Fri Mar 13 06:00:28.513086 2026] [:error] [pid 62036:tid 62054] [client 62.163.82.39:59452] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 06:57:18.380585 2026] [:error] [pid 55077:tid 55090] [client 49.51.183.84:55430] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abNEzt9Ul5ym4M-PlQIC1QAAAUs"]
[Fri Mar 13 07:37:16.145226 2026] [:error] [pid 61927:tid 61955] [client 102.152.77.231:1277] [client 102.152.77.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.152.77.231, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abNOLLLkK584eBa2J7XUWgAAAAk"]
[Fri Mar 13 07:37:16.151661 2026] [:error] [pid 61927:tid 61955] [client 102.152.77.231:1277] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 07:38:29.700089 2026] [:error] [pid 61929:tid 62023] [client 191.119.44.4:49679] [client 191.119.44.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.119.44.4, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abNOdTGGsow2jgUjLtxwaAAAAJM"]
[Fri Mar 13 07:38:29.704858 2026] [:error] [pid 61929:tid 62023] [client 191.119.44.4:49679] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 07:41:13.234581 2026] [:error] [pid 55077:tid 55082] [client 152.237.105.251:3290] [client 152.237.105.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.105.251, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abNPGd9Ul5ym4M-PlQIU5wAAAUM"]
[Fri Mar 13 07:41:13.239492 2026] [:error] [pid 55077:tid 55082] [client 152.237.105.251:3290] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 07:43:26.548789 2026] [:error] [pid 55077:tid 55095] [client 45.125.4.187:23610] [client 45.125.4.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.125.4.187, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abNPnt9Ul5ym4M-PlQIVfQAAAVA"]
[Fri Mar 13 07:43:26.554409 2026] [:error] [pid 55077:tid 55095] [client 45.125.4.187:23610] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 09:50:29.164474 2026] [:error] [pid 61928:tid 61990] [client 209.87.169.128:63309] [client 209.87.169.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.128, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abNtZQod66AHekJJZipPtwAAAE0"]
[Fri Mar 13 09:50:29.169723 2026] [:error] [pid 61928:tid 61990] [client 209.87.169.128:63309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 12:51:02.873543 2026] [:error] [pid 9241:tid 9276] [client 37.140.223.21:34909] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abOXtg48xagB6AsXkJ7mcAAAAdY"]
[Fri Mar 13 12:51:02.877565 2026] [:error] [pid 9241:tid 9276] [client 37.140.223.21:34909] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 13:02:08.209581 2026] [:error] [pid 55077:tid 55092] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 13:02:08.229974 2026] [:error] [pid 55077:tid 55095] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Mar 13 13:02:08.251221 2026] [:error] [pid 55077:tid 55080] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Mar 13 13:02:08.272927 2026] [:error] [pid 55077:tid 55086] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 13 13:02:08.303906 2026] [:error] [pid 55077:tid 55098] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri Mar 13 13:02:08.325033 2026] [:error] [pid 55077:tid 55087] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 13:02:08.366891 2026] [:error] [pid 55077:tid 55100] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 13 13:02:08.387561 2026] [:error] [pid 55077:tid 55090] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Fri Mar 13 13:02:08.408641 2026] [:error] [pid 55077:tid 55091] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Mar 13 13:02:08.428726 2026] [:error] [pid 55077:tid 55096] [client 20.213.29.93:19597] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Mar 13 13:02:08.445470 2026] [:error] [pid 55077:tid 55081] [client 20.213.29.93:19597] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/classwithtostring.php"] [unique_id "abOaUN9Ul5ym4M-PlQJ5_AAAAUI"]
[Fri Mar 13 13:02:08.579670 2026] [:error] [pid 9311:tid 9357] [client 20.213.29.93:6014] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/classwithtostring.php"] [unique_id "abOaUFTiCkU4QLmYwPnbzAAAAkY"]
[Fri Mar 13 13:02:08.650039 2026] [:error] [pid 9311:tid 9355] [client 20.213.29.93:19603] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/classwithtostring.php"] [unique_id "abOaUFTiCkU4QLmYwPnbzQAAAkQ"]
[Fri Mar 13 13:02:08.718900 2026] [:error] [pid 55077:tid 55093] [client 20.213.29.93:1431] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/css/classwithtostring.php"] [unique_id "abOaUN9Ul5ym4M-PlQJ5_QAAAU4"]
[Fri Mar 13 13:12:29.341483 2026] [:error] [pid 9111:tid 9142] [client 43.130.139.177:52594] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abOcvU-M156SLpD2BrsigQAAAZA"]
[Fri Mar 13 14:52:09.024174 2026] [:error] [pid 9309:tid 9327] [client 135.181.180.59:18702] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abO0Gao1KEMMghNWAN_UOAAAAgQ"]
[Fri Mar 13 14:52:12.807591 2026] [:error] [pid 61928:tid 61996] [client 135.181.180.59:18708] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abO0HAod66AHekJJZip7BgAAAFM"]
[Fri Mar 13 15:15:04.258399 2026] [:error] [pid 61928:tid 62000] [client 185.137.164.18:42289] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "abO5eAod66AHekJJZip_qgAAAFc"]
[Fri Mar 13 16:18:51.471782 2026] [:error] [pid 55077:tid 55081] [client 51.77.216.36:56478] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abPIa99Ul5ym4M-PlQKtIwAAAUI"]
[Fri Mar 13 16:18:53.732399 2026] [:error] [pid 62036:tid 62067] [client 51.77.216.36:38096] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abPIbbce6g9kILuh_R5tYQAAANg"]
[Fri Mar 13 16:18:55.928638 2026] [:error] [pid 55077:tid 55082] [client 51.77.216.36:38108] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abPIb99Ul5ym4M-PlQKtKgAAAUM"]
[Fri Mar 13 16:18:57.944769 2026] [:error] [pid 61928:tid 61995] [client 51.77.216.36:38114] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abPIcQod66AHekJJZiqKSAAAAFI"]
[Fri Mar 13 16:18:59.889344 2026] [:error] [pid 61928:tid 61993] [client 51.77.216.36:38126] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abPIcwod66AHekJJZiqKSwAAAFA"]
[Fri Mar 13 16:19:02.047537 2026] [:error] [pid 62036:tid 62063] [client 51.77.216.36:52600] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abPIdrce6g9kILuh_R5tYgAAANQ"]
[Fri Mar 13 16:19:04.096664 2026] [:error] [pid 9311:tid 9370] [client 51.77.216.36:52602] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abPIeFTiCkU4QLmYwPkNggAAAlM"]
[Fri Mar 13 16:19:06.052181 2026] [:error] [pid 9111:tid 9134] [client 51.77.216.36:52610] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abPIek-M156SLpD2Brs2JgAAAYg"]
[Fri Mar 13 16:19:08.215437 2026] [:error] [pid 55077:tid 55095] [client 51.77.216.36:52622] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abPIfN9Ul5ym4M-PlQKtNAAAAVA"]
[Fri Mar 13 16:19:11.987116 2026] [:error] [pid 55077:tid 55092] [client 51.77.216.36:49286] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abPIf99Ul5ym4M-PlQKtOAAAAU0"]
[Fri Mar 13 16:19:13.965359 2026] [:error] [pid 9311:tid 9355] [client 51.77.216.36:49298] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abPIgVTiCkU4QLmYwPkNjgAAAkQ"]
[Fri Mar 13 16:19:16.082501 2026] [:error] [pid 61929:tid 62005] [client 51.77.216.36:49302] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abPIhDGGsow2jgUjLtyiAgAAAIE"]
[Fri Mar 13 17:58:55.453465 2026] [:error] [pid 9311:tid 9361] [client 116.240.149.7:60093] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abPf31TiCkU4QLmYwPkcQQAAAko"]
[Fri Mar 13 17:59:02.369999 2026] [:error] [pid 62036:tid 62043] [client 116.240.149.7:60282] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abPf5rce6g9kILuh_R5zcgAAAMA"]
[Fri Mar 13 17:59:09.264377 2026] [:error] [pid 44755:tid 44776] [client 116.240.149.7:59701] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abPf7fONf1H0XrBFE4NKNQAAARM"]
[Fri Mar 13 17:59:17.406292 2026] [:error] [pid 61928:tid 61990] [client 116.240.149.7:64481] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abPf9Qod66AHekJJZiqUygAAAE0"]
[Fri Mar 13 17:59:24.230886 2026] [:error] [pid 55077:tid 55082] [client 116.240.149.7:62749] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abPf_N9Ul5ym4M-PlQLLvAAAAUM"]
[Fri Mar 13 17:59:30.289175 2026] [:error] [pid 61928:tid 61989] [client 116.240.149.7:62650] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abPgAgod66AHekJJZiqUzAAAAEw"]
[Fri Mar 13 17:59:33.422458 2026] [:error] [pid 61929:tid 62008] [client 116.240.149.7:59367] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abPgBTGGsow2jgUjLtymqQAAAIQ"]
[Fri Mar 13 17:59:39.759250 2026] [:error] [pid 9309:tid 9326] [client 116.240.149.7:63371] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abPgC6o1KEMMghNWAN8bTQAAAgM"]
[Fri Mar 13 18:00:48.774502 2026] [:error] [pid 44755:tid 44779] [client 116.240.149.7:60419] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "abPgUPONf1H0XrBFE4NKigAAARY"]
[Fri Mar 13 18:00:56.743308 2026] [:error] [pid 55077:tid 55084] [client 116.240.149.7:59598] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abPgWN9Ul5ym4M-PlQLL4AAAAUU"]
[Fri Mar 13 18:01:02.861419 2026] [:error] [pid 55077:tid 55087] [client 116.240.149.7:60660] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "abPgXt9Ul5ym4M-PlQLL6wAAAUg"]
[Fri Mar 13 18:01:09.149147 2026] [:error] [pid 9311:tid 9367] [client 116.240.149.7:60054] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abPgZVTiCkU4QLmYwPkcbgAAAlA"]
[Fri Mar 13 18:01:16.905662 2026] [:error] [pid 61927:tid 61958] [client 116.240.149.7:61563] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abPgbLLkK584eBa2J7X-pgAAAAw"]
[Fri Mar 13 18:01:25.088693 2026] [:error] [pid 44755:tid 44776] [client 116.240.149.7:63470] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abPgdfONf1H0XrBFE4NKlwAAARM"]
[Fri Mar 13 18:01:32.569558 2026] [:error] [pid 9311:tid 9364] [client 116.240.149.7:62778] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abPgfFTiCkU4QLmYwPkcjQAAAk0"]
[Fri Mar 13 18:01:38.087880 2026] [:error] [pid 44755:tid 44774] [client 116.240.149.7:63316] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abPggvONf1H0XrBFE4NKngAAARE"]
[Fri Mar 13 19:02:42.123788 2026] [:error] [pid 61928:tid 62000] [client 43.130.71.237:55394] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abPu0god66AHekJJZiqZUAAAAFc"]
[Fri Mar 13 19:16:34.675730 2026] [:error] [pid 44755:tid 44762] [client 182.42.105.85:43978] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abPyEvONf1H0XrBFE4NWlAAAAQU"]
[Fri Mar 13 20:12:24.199393 2026] [:error] [pid 55077:tid 55096] [client 51.75.119.173:50982] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abP_KN9Ul5ym4M-PlQLrHQAAAVE"]
[Fri Mar 13 20:12:26.065512 2026] [:error] [pid 61929:tid 62006] [client 51.75.119.173:47908] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abP_KjGGsow2jgUjLtytSwAAAII"]
[Fri Mar 13 20:12:28.166926 2026] [:error] [pid 62036:tid 62064] [client 51.75.119.173:56864] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abP_LLce6g9kILuh_R56ZQAAANU"]
[Fri Mar 13 20:12:30.072468 2026] [:error] [pid 9111:tid 9144] [client 51.75.119.173:56874] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abP_Lk-M156SLpD2BrtFwAAAAZI"]
[Fri Mar 13 20:12:31.995877 2026] [:error] [pid 55077:tid 55083] [client 51.75.119.173:56882] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abP_L99Ul5ym4M-PlQLrIgAAAUQ"]
[Fri Mar 13 20:12:34.054940 2026] [:error] [pid 9111:tid 9144] [client 51.75.119.173:56890] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abP_Mk-M156SLpD2BrtFzQAAAZI"]
[Fri Mar 13 20:12:35.979502 2026] [:error] [pid 61929:tid 62015] [client 51.75.119.173:56898] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abP_MzGGsow2jgUjLtytVgAAAIs"]
[Fri Mar 13 20:12:37.898817 2026] [:error] [pid 61929:tid 62004] [client 51.75.119.173:57502] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abP_NTGGsow2jgUjLtytWgAAAIA"]
[Fri Mar 13 20:12:39.815597 2026] [:error] [pid 9309:tid 9338] [client 51.75.119.173:57512] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abP_N6o1KEMMghNWAN9EGgAAAg8"]
[Fri Mar 13 20:12:41.725015 2026] [:error] [pid 9309:tid 9325] [client 51.75.119.173:57524] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abP_Oao1KEMMghNWAN9EIQAAAgI"]
[Fri Mar 13 20:12:43.813257 2026] [:error] [pid 61928:tid 61996] [client 51.75.119.173:57534] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abP_Owod66AHekJJZiqhiAAAAFM"]
[Fri Mar 13 20:12:45.740079 2026] [:error] [pid 9111:tid 9133] [client 51.75.119.173:57548] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abP_PU-M156SLpD2BrtF2gAAAYc"]
[Fri Mar 13 20:12:47.815860 2026] [:error] [pid 61929:tid 62004] [client 51.75.119.173:55836] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abP_PzGGsow2jgUjLtytaAAAAIA"]
[Fri Mar 13 20:12:49.742839 2026] [:error] [pid 9111:tid 9130] [client 51.75.119.173:55838] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abP_QU-M156SLpD2BrtF5wAAAYQ"]
[Fri Mar 13 20:12:51.640489 2026] [:error] [pid 9309:tid 9323] [client 51.75.119.173:55840] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abP_Q6o1KEMMghNWAN9ENAAAAgA"]
[Fri Mar 13 20:12:53.560046 2026] [:error] [pid 61929:tid 62017] [client 51.75.119.173:55850] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abP_RTGGsow2jgUjLtytjQAAAI0"]
[Fri Mar 13 20:12:55.639594 2026] [:error] [pid 55077:tid 55095] [client 51.75.119.173:55864] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abP_R99Ul5ym4M-PlQLrMQAAAVA"]
[Fri Mar 13 20:12:57.525133 2026] [:error] [pid 9111:tid 9126] [client 51.75.119.173:45678] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abP_SU-M156SLpD2BrtGMAAAAYA"]
[Fri Mar 13 20:12:59.439099 2026] [:error] [pid 55077:tid 55088] [client 51.75.119.173:45690] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abP_S99Ul5ym4M-PlQLrNgAAAUk"]
[Fri Mar 13 20:13:01.362627 2026] [:error] [pid 9111:tid 9137] [client 51.75.119.173:45694] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abP_TU-M156SLpD2BrtGMwAAAYs"]
[Fri Mar 13 20:13:03.281994 2026] [:error] [pid 44755:tid 44773] [client 51.75.119.173:45700] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abP_T_ONf1H0XrBFE4NhkgAAARA"]
[Fri Mar 13 20:13:05.360526 2026] [:error] [pid 55077:tid 55081] [client 51.75.119.173:45710] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abP_Ud9Ul5ym4M-PlQLrQgAAAUI"]
[Fri Mar 13 20:13:07.261186 2026] [:error] [pid 61928:tid 61992] [client 51.75.119.173:60488] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abP_Uwod66AHekJJZiqhjgAAAE8"]
[Fri Mar 13 20:13:09.632720 2026] [:error] [pid 9309:tid 9330] [client 51.75.119.173:60492] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abP_Vao1KEMMghNWAN9EUQAAAgc"]
[Fri Mar 13 20:13:13.301957 2026] [:error] [pid 61929:tid 62011] [client 51.75.119.173:60498] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abP_WTGGsow2jgUjLtytswAAAIc"]
[Fri Mar 13 21:02:41.982333 2026] [:error] [pid 9241:tid 9277] [client 49.151.237.1:51169] [client 49.151.237.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.151.237.1, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abQK8Q48xagB6AsXkJ4WMAAAAdc"]
[Fri Mar 13 21:02:41.987451 2026] [:error] [pid 9241:tid 9277] [client 49.151.237.1:51169] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 21:04:51.144307 2026] [:error] [pid 9111:tid 9143] [client 49.151.237.1:53212] [client 49.151.237.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.151.237.1, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abQLc0-M156SLpD2BrtUMgAAAZE"]
[Fri Mar 13 21:04:51.149295 2026] [:error] [pid 9111:tid 9143] [client 49.151.237.1:53212] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 21:34:10.954535 2026] [:error] [pid 60496:tid 60523] [client 51.75.119.69:41286] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abQSUgb67oGiJ3jaL8z7ZwAAA1M"]
[Fri Mar 13 21:34:12.847666 2026] [:error] [pid 60496:tid 60515] [client 51.75.119.69:41290] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abQSVAb67oGiJ3jaL8z7cgAAA0s"]
[Fri Mar 13 21:34:14.960364 2026] [:error] [pid 60497:tid 60551] [client 51.75.119.69:52068] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abQSVhjNYgapWlkb4liy4wAAA5M"]
[Fri Mar 13 21:34:17.021266 2026] [:error] [pid 61928:tid 61984] [client 51.75.119.69:52078] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abQSWQod66AHekJJZiqnmgAAAEc"]
[Fri Mar 13 21:34:18.901509 2026] [:error] [pid 60496:tid 60518] [client 51.75.119.69:52090] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abQSWgb67oGiJ3jaL8z7owAAA04"]
[Fri Mar 13 21:34:20.891679 2026] [:error] [pid 9309:tid 9343] [client 51.75.119.69:52098] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abQSXKo1KEMMghNWAN9PSQAAAhQ"]
[Fri Mar 13 21:34:22.809664 2026] [:error] [pid 61929:tid 62004] [client 51.75.119.69:52118] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abQSXjGGsow2jgUjLty6RQAAAIA"]
[Fri Mar 13 21:34:24.984724 2026] [:error] [pid 60497:tid 60549] [client 51.75.119.69:38300] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abQSYBjNYgapWlkb4liy-wAAA5I"]
[Fri Mar 13 21:34:27.020978 2026] [:error] [pid 60497:tid 60537] [client 51.75.119.69:38324] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abQSYxjNYgapWlkb4lizAgAAA4Y"]
[Fri Mar 13 21:34:29.211942 2026] [:error] [pid 60497:tid 60532] [client 51.75.119.69:38336] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abQSZRjNYgapWlkb4lizCwAAA4E"]
[Fri Mar 13 21:34:31.051825 2026] [:error] [pid 60398:tid 60405] [client 51.75.119.69:38346] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abQSZ0CJdGSTt6QlH2BM_QAAAoI"]
[Fri Mar 13 21:34:33.149730 2026] [:error] [pid 60497:tid 60549] [client 51.75.119.69:38358] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abQSaRjNYgapWlkb4lizEAAAA5I"]
[Fri Mar 13 21:34:35.304254 2026] [:error] [pid 60497:tid 60554] [client 51.75.119.69:59250] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abQSaxjNYgapWlkb4lizGgAAA5Y"]
[Fri Mar 13 21:34:37.269127 2026] [:error] [pid 60497:tid 60545] [client 51.75.119.69:59254] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abQSbRjNYgapWlkb4lizHAAAA44"]
[Fri Mar 13 21:34:39.200690 2026] [:error] [pid 61928:tid 61985] [client 51.75.119.69:59256] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abQSbwod66AHekJJZiqnpAAAAEg"]
[Fri Mar 13 21:34:41.446960 2026] [:error] [pid 9111:tid 9147] [client 51.75.119.69:59264] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abQScU-M156SLpD2BrtZ5AAAAZU"]
[Fri Mar 13 21:34:43.674572 2026] [:error] [pid 60497:tid 60535] [client 51.75.119.69:59280] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abQScxjNYgapWlkb4lizJwAAA4Q"]
[Fri Mar 13 21:34:45.778407 2026] [:error] [pid 61929:tid 62011] [client 51.75.119.69:37854] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abQSdTGGsow2jgUjLty6SwAAAIc"]
[Fri Mar 13 21:34:48.223489 2026] [:error] [pid 61928:tid 61993] [client 51.75.119.69:37860] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abQSeAod66AHekJJZiqnqQAAAFA"]
[Fri Mar 13 21:34:50.544185 2026] [:error] [pid 60436:tid 60483] [client 51.75.119.69:37868] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abQSeoI3PEddCArY1AabKAAAAw4"]
[Fri Mar 13 21:34:52.646229 2026] [:error] [pid 55077:tid 55103] [client 51.75.119.69:37872] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abQSfN9Ul5ym4M-PlQL8-QAAAVg"]
[Fri Mar 13 21:34:54.883889 2026] [:error] [pid 60497:tid 60536] [client 51.75.119.69:40700] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abQSfhjNYgapWlkb4lizNwAAA4U"]
[Fri Mar 13 21:34:57.005509 2026] [:error] [pid 55077:tid 55082] [client 51.75.119.69:40710] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abQSgd9Ul5ym4M-PlQL8_wAAAUM"]
[Fri Mar 13 21:35:00.654069 2026] [:error] [pid 60398:tid 60406] [client 51.75.119.69:40726] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abQShECJdGSTt6QlH2BNEgAAAoM"]
[Fri Mar 13 22:21:20.248802 2026] [:error] [pid 60398:tid 60418] [client 45.131.195.22:57345] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "abQdYECJdGSTt6QlH2BTawAAAo8"]
[Fri Mar 13 23:36:39.895827 2026] [:error] [pid 60398:tid 60421] [client 20.151.4.179:30025] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Mar 13 23:36:40.105074 2026] [:error] [pid 60398:tid 60404] [client 20.151.4.179:30025] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 13 23:36:40.311550 2026] [:error] [pid 60398:tid 60423] [client 20.151.4.179:30025] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "abQvCECJdGSTt6QlH2Bf0QAAApQ"]
[Fri Mar 13 23:36:41.138524 2026] [:error] [pid 61929:tid 62010] [client 20.151.4.179:29976] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "abQvCTGGsow2jgUjLtzCegAAAIY"]
[Fri Mar 13 23:36:41.966653 2026] [:error] [pid 60496:tid 60512] [client 20.151.4.179:30017] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "abQvCQb67oGiJ3jaL8wmMAAAA0g"]
[Fri Mar 13 23:36:42.793294 2026] [:error] [pid 60496:tid 60528] [client 20.151.4.179:29957] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "abQvCgb67oGiJ3jaL8wmNAAAA1g"]
[Fri Mar 13 23:55:04.221910 2026] [:error] [pid 60398:tid 60418] [client 20.151.4.179:48144] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "abQzWECJdGSTt6QlH2BivwAAAo8"]
[Fri Mar 13 23:55:05.051505 2026] [:error] [pid 60436:tid 60480] [client 20.151.4.179:48145] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "abQzWYI3PEddCArY1Aa3MwAAAws"]
[Fri Mar 13 23:55:05.879725 2026] [:error] [pid 60497:tid 60532] [client 20.151.4.179:48135] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "abQzWRjNYgapWlkb4ljZbQAAA4E"]
[Fri Mar 13 23:55:06.738132 2026] [:error] [pid 60497:tid 60543] [client 20.151.4.179:48147] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "abQzWhjNYgapWlkb4ljZbwAAA4w"]
[Sat Mar 14 00:03:43.748130 2026] [:error] [pid 60497:tid 60532] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Mar 14 00:03:43.965034 2026] [:error] [pid 60497:tid 60549] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Mar 14 00:03:44.179849 2026] [:error] [pid 60497:tid 60554] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Mar 14 00:03:44.391187 2026] [:error] [pid 60497:tid 60555] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Mar 14 00:03:44.606174 2026] [:error] [pid 60497:tid 60540] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Mar 14 00:03:44.816202 2026] [:error] [pid 60497:tid 60539] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Mar 14 00:03:45.025676 2026] [:error] [pid 60497:tid 60531] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Mar 14 00:03:45.238115 2026] [:error] [pid 60497:tid 60545] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Mar 14 00:03:45.449300 2026] [:error] [pid 60497:tid 60536] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Mar 14 00:03:47.027370 2026] [:error] [pid 60497:tid 60536] [client 4.204.197.4:65298] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Mar 14 00:03:47.233578 2026] [:error] [pid 60497:tid 60549] [client 4.204.197.4:65298] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php"] [unique_id "abQ1YxjNYgapWlkb4ljbYwAAA5I"]
[Sat Mar 14 00:03:47.661134 2026] [:error] [pid 60497:tid 60540] [client 4.204.197.4:65316] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php"] [unique_id "abQ1YxjNYgapWlkb4ljbZgAAA4k"]
[Sat Mar 14 00:03:48.085020 2026] [:error] [pid 60398:tid 60424] [client 4.204.197.4:65405] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php"] [unique_id "abQ1ZECJdGSTt6QlH2BkBgAAApU"]
[Sat Mar 14 00:03:48.593659 2026] [:error] [pid 60497:tid 60543] [client 4.204.197.4:64329] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws.php"] [unique_id "abQ1ZBjNYgapWlkb4ljblAAAA4w"]
[Sat Mar 14 00:03:49.019127 2026] [:error] [pid 60436:tid 60479] [client 4.204.197.4:64339] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "abQ1ZYI3PEddCArY1Aa5gQAAAwo"]
[Sat Mar 14 00:03:49.497109 2026] [:error] [pid 60497:tid 60540] [client 4.204.197.4:64346] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "abQ1ZRjNYgapWlkb4ljbnwAAA4k"]
[Sat Mar 14 00:03:49.951000 2026] [:error] [pid 9309:tid 9336] [client 4.204.197.4:65364] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "abQ1Zao1KEMMghNWAN9euQAAAg0"]
[Sat Mar 14 00:03:50.430682 2026] [:error] [pid 60398:tid 60414] [client 4.204.197.4:64382] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shell.php"] [unique_id "abQ1ZkCJdGSTt6QlH2BkBwAAAos"]
[Sat Mar 14 00:03:50.875905 2026] [:error] [pid 9111:tid 9148] [client 4.204.197.4:65332] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "abQ1Zk-M156SLpD2BrtgiQAAAZY"]
[Sat Mar 14 00:03:51.353523 2026] [:error] [pid 60436:tid 60480] [client 4.204.197.4:64352] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "abQ1Z4I3PEddCArY1Aa5ggAAAws"]
[Sat Mar 14 00:03:51.789274 2026] [:error] [pid 60436:tid 60491] [client 4.204.197.4:65346] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "abQ1Z4I3PEddCArY1Aa5hQAAAxY"]
[Sat Mar 14 00:03:52.202107 2026] [:error] [pid 9311:tid 9354] [client 4.204.197.4:65403] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lock.php"] [unique_id "abQ1aFTiCkU4QLmYwPlH1QAAAkM"]
[Sat Mar 14 00:03:52.621452 2026] [:error] [pid 9311:tid 9369] [client 4.204.197.4:65342] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "abQ1aFTiCkU4QLmYwPlH1wAAAlI"]
[Sat Mar 14 00:03:53.038524 2026] [:error] [pid 9311:tid 9366] [client 4.204.197.4:65310] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "abQ1aVTiCkU4QLmYwPlH2AAAAk8"]
[Sat Mar 14 00:03:53.463156 2026] [:error] [pid 9311:tid 9371] [client 4.204.197.4:65393] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "abQ1aVTiCkU4QLmYwPlH2QAAAlQ"]
[Sat Mar 14 00:03:53.909054 2026] [:error] [pid 9309:tid 9345] [client 4.204.197.4:65291] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "abQ1aao1KEMMghNWAN9evAAAAhY"]
[Sat Mar 14 00:03:54.327360 2026] [:error] [pid 9311:tid 9365] [client 4.204.197.4:64359] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "abQ1alTiCkU4QLmYwPlH3AAAAk4"]
[Sat Mar 14 00:03:54.794405 2026] [:error] [pid 55077:tid 55086] [client 4.204.197.4:64269] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "abQ1at9Ul5ym4M-PlQIFigAAAUc"]
[Sat Mar 14 00:03:55.218947 2026] [:error] [pid 9311:tid 9358] [client 4.204.197.4:64370] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "abQ1a1TiCkU4QLmYwPlH4QAAAkc"]
[Sat Mar 14 00:03:55.633759 2026] [:error] [pid 60496:tid 60509] [client 4.204.197.4:65284] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin.php"] [unique_id "abQ1awb67oGiJ3jaL8wu-QAAA0U"]
[Sat Mar 14 00:03:56.055817 2026] [:error] [pid 60496:tid 60528] [client 4.204.197.4:64334] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "abQ1bAb67oGiJ3jaL8wu-gAAA1g"]
[Sat Mar 14 00:03:56.470625 2026] [:error] [pid 60496:tid 60514] [client 4.204.197.4:65285] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "abQ1bAb67oGiJ3jaL8wu_AAAA0o"]
[Sat Mar 14 00:03:56.995537 2026] [:error] [pid 60497:tid 60539] [client 4.204.197.4:65286] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "abQ1bBjNYgapWlkb4ljbpgAAA4g"]
[Sat Mar 14 00:03:57.409738 2026] [:error] [pid 60497:tid 60533] [client 4.204.197.4:64358] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "abQ1bRjNYgapWlkb4ljbpwAAA4I"]
[Sat Mar 14 00:03:57.901921 2026] [:error] [pid 60436:tid 60472] [client 4.204.197.4:65395] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "abQ1bYI3PEddCArY1Aa5iQAAAwM"]
[Sat Mar 14 00:03:58.330863 2026] [:error] [pid 60496:tid 60512] [client 4.204.197.4:65376] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "abQ1bgb67oGiJ3jaL8wvAAAAA0g"]
[Sat Mar 14 00:03:58.819144 2026] [:error] [pid 60436:tid 60470] [client 4.204.197.4:65294] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "abQ1boI3PEddCArY1Aa5igAAAwE"]
[Sat Mar 14 00:03:59.265116 2026] [:error] [pid 60497:tid 60538] [client 4.204.197.4:65292] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test.php"] [unique_id "abQ1bxjNYgapWlkb4ljbqAAAA4c"]
[Sat Mar 14 00:03:59.741951 2026] [:error] [pid 61928:tid 61995] [client 4.204.197.4:65351] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ1bwod66AHekJJZiq0bwAAAFI"]
[Sat Mar 14 00:04:00.174602 2026] [:error] [pid 60436:tid 60475] [client 4.204.197.4:64340] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ1cII3PEddCArY1Aa5jQAAAwY"]
[Sat Mar 14 00:04:00.600661 2026] [:error] [pid 60436:tid 60479] [client 4.204.197.4:65400] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ1cII3PEddCArY1Aa5jwAAAwo"]
[Sat Mar 14 00:04:01.054996 2026] [:error] [pid 60497:tid 60556] [client 4.204.197.4:63647] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQ1cRjNYgapWlkb4ljbrQAAA5g"]
[Sat Mar 14 00:04:01.483368 2026] [:error] [pid 60436:tid 60493] [client 4.204.197.4:64333] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "abQ1cYI3PEddCArY1Aa5kwAAAxg"]
[Sat Mar 14 00:04:01.972002 2026] [:error] [pid 60398:tid 60427] [client 4.204.197.4:65361] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "abQ1cUCJdGSTt6QlH2BkCAAAApg"]
[Sat Mar 14 00:04:02.489716 2026] [:error] [pid 9311:tid 9356] [client 4.204.197.4:65336] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "abQ1clTiCkU4QLmYwPlH6QAAAkU"]
[Sat Mar 14 00:04:02.928826 2026] [:error] [pid 60436:tid 60469] [client 4.204.197.4:65281] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/admin.php"] [unique_id "abQ1coI3PEddCArY1Aa5lAAAAwA"]
[Sat Mar 14 00:04:03.382965 2026] [:error] [pid 60436:tid 60476] [client 4.204.197.4:64377] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "abQ1c4I3PEddCArY1Aa5lQAAAwc"]
[Sat Mar 14 00:04:03.831013 2026] [:error] [pid 60436:tid 60473] [client 4.204.197.4:65368] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "abQ1c4I3PEddCArY1Aa5lgAAAwQ"]
[Sat Mar 14 00:04:04.378326 2026] [:error] [pid 9311:tid 9362] [client 4.204.197.4:64378] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "abQ1dFTiCkU4QLmYwPlH6wAAAks"]
[Sat Mar 14 00:04:04.808488 2026] [:error] [pid 55077:tid 55087] [client 4.204.197.4:65380] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/up.php"] [unique_id "abQ1dN9Ul5ym4M-PlQIFjQAAAUg"]
[Sat Mar 14 00:04:05.240417 2026] [:error] [pid 60436:tid 60484] [client 4.204.197.4:65325] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "abQ1dYI3PEddCArY1Aa5mQAAAw8"]
[Sat Mar 14 00:04:05.698183 2026] [:error] [pid 9311:tid 9361] [client 4.204.197.4:65326] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "abQ1dVTiCkU4QLmYwPlH7QAAAko"]
[Sat Mar 14 00:04:06.178418 2026] [:error] [pid 9311:tid 9353] [client 4.204.197.4:64265] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "abQ1dlTiCkU4QLmYwPlH7wAAAkI"]
[Sat Mar 14 00:04:06.593487 2026] [:error] [pid 9311:tid 9351] [client 4.204.197.4:65381] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "abQ1dlTiCkU4QLmYwPlH8AAAAkA"]
[Sat Mar 14 00:55:34.689375 2026] [:error] [pid 47891:tid 47981] [client 43.167.245.18:59442] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abRBhvchNnuMqi7I_WHsXgAAAI8"]
[Sat Mar 14 01:18:55.822935 2026] [:error] [pid 47878:tid 47950] [client 4.204.233.55:29273] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/hp2.php"] [unique_id "abRG_38jymmmpr1jcBeqRAAAAEs"]
[Sat Mar 14 01:18:56.646062 2026] [:error] [pid 47891:tid 47972] [client 4.204.233.55:29257] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/hp2.php"] [unique_id "abRHAPchNnuMqi7I_WH1BAAAAIY"]
[Sat Mar 14 01:18:57.472451 2026] [:error] [pid 47905:tid 48001] [client 4.204.233.55:29306] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/hp2.php"] [unique_id "abRHARaYZayP4o4wpJcfpAAAAUg"]
[Sat Mar 14 01:18:58.301003 2026] [:error] [pid 47891:tid 47968] [client 4.204.233.55:29301] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.well-known/hp2.php"] [unique_id "abRHAvchNnuMqi7I_WH1DgAAAII"]
[Sat Mar 14 02:05:24.192471 2026] [:error] [pid 48070:tid 48074] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Mar 14 02:05:24.393669 2026] [:error] [pid 48070:tid 48088] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Mar 14 02:05:24.904194 2026] [:error] [pid 48070:tid 48079] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Mar 14 02:05:25.106775 2026] [:error] [pid 48070:tid 48087] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 02:05:25.750873 2026] [:error] [pid 48070:tid 48077] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Mar 14 02:05:25.949928 2026] [:error] [pid 48070:tid 48091] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Mar 14 02:05:26.162697 2026] [:error] [pid 48070:tid 48072] [client 3.21.56.96:54275] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Mar 14 02:05:26.562339 2026] [:error] [pid 48070:tid 48085] [client 3.21.56.96:54275] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abRR5kIvrhMS5BVHxNkujgAAAA0"]
[Sat Mar 14 02:05:28.115316 2026] [:error] [pid 47891:tid 47967] [client 3.21.56.96:56624] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abRR6PchNnuMqi7I_WEHxwAAAIE"]
[Sat Mar 14 02:05:31.120687 2026] [:error] [pid 47891:tid 47983] [client 3.21.56.96:58393] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abRR6_chNnuMqi7I_WEH1wAAAJE"]
[Sat Mar 14 02:05:32.830998 2026] [:error] [pid 47891:tid 47977] [client 3.21.56.96:59460] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abRR7PchNnuMqi7I_WEH3wAAAIs"]
[Sat Mar 14 08:42:32.904478 2026] [:error] [pid 3913:tid 3970] [client 49.235.136.28:54434] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abSu-B9qvQd4GQHUp683xwAAAE0"]
[Sat Mar 14 08:49:11.327474 2026] [:error] [pid 3912:tid 3932] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Mar 14 08:49:11.529812 2026] [:error] [pid 3912:tid 3933] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Mar 14 08:49:11.728695 2026] [:error] [pid 3912:tid 3950] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Mar 14 08:49:11.939503 2026] [:error] [pid 3912:tid 3945] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 08:49:12.139946 2026] [:error] [pid 3912:tid 3927] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Mar 14 08:49:12.339161 2026] [:error] [pid 3912:tid 3938] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 14 08:49:12.783606 2026] [:error] [pid 3912:tid 3942] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 08:49:13.112982 2026] [:error] [pid 3912:tid 3949] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Mar 14 08:49:13.317429 2026] [:error] [pid 3912:tid 3931] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Mar 14 08:49:13.543817 2026] [:error] [pid 3912:tid 3941] [client 3.21.56.96:62460] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Mar 14 08:49:13.746080 2026] [:error] [pid 3912:tid 3934] [client 3.21.56.96:62460] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "abSwicXFZBK-jpdCvTHfgAAAAAc"]
[Sat Mar 14 08:49:15.131078 2026] [:error] [pid 35801:tid 35822] [client 3.21.56.96:50209] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "abSwi28tVFelXGsqbU_XwQAAARI"]
[Sat Mar 14 08:49:23.190002 2026] [:error] [pid 4018:tid 4042] [client 3.21.56.96:51382] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "abSwkwEk1fxdMMkDDaL3-gAAANE"]
[Sat Mar 14 08:49:24.695589 2026] [:error] [pid 3913:tid 3965] [client 3.21.56.96:58785] [client 3.21.56.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/info.php"] [unique_id "abSwlB9qvQd4GQHUp685hgAAAEg"]
[Sat Mar 14 09:13:24.801929 2026] [:error] [pid 3913:tid 3976] [client 217.182.194.45:37372] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abS2NB9qvQd4GQHUp69AFwAAAFM"]
[Sat Mar 14 09:13:28.568545 2026] [:error] [pid 3912:tid 3938] [client 217.182.194.45:37380] [client 217.182.194.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abS2OMXFZBK-jpdCvTHi-AAAAAs"]
[Sat Mar 14 09:58:00.434030 2026] [:error] [pid 3912:tid 3933] [client 51.83.9.109:33116] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abTAqMXFZBK-jpdCvTHojAAAAAY"]
[Sat Mar 14 09:58:02.547123 2026] [:error] [pid 54133:tid 54182] [client 51.83.9.109:33920] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abTAqryyvmaT6YxSjMuMQwAAA5I"]
[Sat Mar 14 09:58:04.637821 2026] [:error] [pid 54134:tid 54209] [client 51.83.9.109:33928] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abTArMaBYw3j-g43wMEhxAAAA9I"]
[Sat Mar 14 09:58:06.578052 2026] [:error] [pid 54134:tid 54213] [client 51.83.9.109:33944] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abTArsaBYw3j-g43wMEhxgAAA9Y"]
[Sat Mar 14 09:58:08.575271 2026] [:error] [pid 35801:tid 35815] [client 51.83.9.109:33950] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abTAsG8tVFelXGsqbU_m_AAAAQs"]
[Sat Mar 14 09:58:10.417260 2026] [:error] [pid 3913:tid 3970] [client 51.83.9.109:33958] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abTAsh9qvQd4GQHUp69NhgAAAE0"]
[Sat Mar 14 09:58:12.405761 2026] [:error] [pid 53961:tid 53977] [client 51.83.9.109:38166] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abTAtNczYH1OqY7y2cN37AAAAc0"]
[Sat Mar 14 09:58:14.216519 2026] [:error] [pid 54134:tid 54201] [client 51.83.9.109:38176] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abTAtsaBYw3j-g43wMEhzQAAA8o"]
[Sat Mar 14 09:58:16.326153 2026] [:error] [pid 53961:tid 53979] [client 51.83.9.109:38184] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abTAuNczYH1OqY7y2cN38wAAAc8"]
[Sat Mar 14 09:58:18.296817 2026] [:error] [pid 3913:tid 3981] [client 51.83.9.109:38196] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abTAuh9qvQd4GQHUp69NlAAAAFg"]
[Sat Mar 14 09:58:20.378943 2026] [:error] [pid 3912:tid 3940] [client 51.83.9.109:38206] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abTAvMXFZBK-jpdCvTHoqQAAAA0"]
[Sat Mar 14 09:58:22.149016 2026] [:error] [pid 3913:tid 3967] [client 51.83.9.109:38210] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abTAvh9qvQd4GQHUp69NnAAAAEo"]
[Sat Mar 14 11:42:24.403606 2026] [:error] [pid 54017:tid 54033] [client 203.83.45.58:7527] [client 203.83.45.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.58, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abTZIJh88Lk5QZp0lWVzYwAAAkk"]
[Sat Mar 14 11:42:24.409055 2026] [:error] [pid 54017:tid 54033] [client 203.83.45.58:7527] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 11:46:05.714725 2026] [:error] [pid 13262:tid 13302] [client 43.135.36.201:58706] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abTZ_TAdvM7ft5BXQ2d1fQAAAYk"]
[Sat Mar 14 11:46:48.877574 2026] [:error] [pid 54017:tid 54046] [client 103.99.201.38:40644] [client 103.99.201.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.99.201.38, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abTaKJh88Lk5QZp0lWV0TAAAAlY"]
[Sat Mar 14 11:46:48.882673 2026] [:error] [pid 54017:tid 54046] [client 103.99.201.38:40644] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 13:16:01.959880 2026] [:error] [pid 13360:tid 13370] [client 194.61.40.8:28921] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Mar 14 13:16:02.221380 2026] [:error] [pid 13360:tid 13374] [client 194.61.40.8:28921] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Mar 14 13:16:02.518587 2026] [:error] [pid 13360:tid 13381] [client 194.61.40.8:28921] [client 194.61.40.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "abTvEvoSWtMry3M5X6v7eQAAApE"]
[Sat Mar 14 13:16:19.996104 2026] [autoindex:error] [pid 13261:tid 13268] [client 194.61.40.32:34047] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 13:59:36.343576 2026] [:error] [pid 13360:tid 13366] [client 54.37.252.59:59608] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abT5SPoSWtMry3M5X6scDQAAAoI"]
[Sat Mar 14 13:59:38.274732 2026] [:error] [pid 13261:tid 13274] [client 54.37.252.59:57278] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abT5SvDFVxjWSW61p5knYQAAAMg"]
[Sat Mar 14 13:59:40.291594 2026] [:error] [pid 13262:tid 13313] [client 54.37.252.59:57284] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abT5TDAdvM7ft5BXQ2ejFQAAAZQ"]
[Sat Mar 14 13:59:42.269647 2026] [:error] [pid 3912:tid 3931] [client 54.37.252.59:57296] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abT5TsXFZBK-jpdCvTER_AAAAAQ"]
[Sat Mar 14 13:59:44.259305 2026] [:error] [pid 54017:tid 54043] [client 54.37.252.59:51472] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abT5UJh88Lk5QZp0lWWOFAAAAlM"]
[Sat Mar 14 13:59:46.107145 2026] [:error] [pid 54132:tid 54152] [client 54.37.252.59:51480] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abT5UsMoWcZxtn8Rxy9dWAAAA08"]
[Sat Mar 14 13:59:48.103999 2026] [:error] [pid 13262:tid 13296] [client 54.37.252.59:51486] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abT5VDAdvM7ft5BXQ2ejIgAAAYM"]
[Sat Mar 14 13:59:50.099541 2026] [:error] [pid 13360:tid 13373] [client 54.37.252.59:51498] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abT5VvoSWtMry3M5X6scGQAAAok"]
[Sat Mar 14 13:59:52.088812 2026] [:error] [pid 13261:tid 13280] [client 54.37.252.59:51510] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abT5WPDFVxjWSW61p5knbAAAAM4"]
[Sat Mar 14 13:59:54.096404 2026] [:error] [pid 13262:tid 13316] [client 54.37.252.59:51524] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abT5WjAdvM7ft5BXQ2ejKAAAAZc"]
[Sat Mar 14 13:59:55.927820 2026] [:error] [pid 13262:tid 13299] [client 54.37.252.59:44112] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abT5WzAdvM7ft5BXQ2ejLwAAAYY"]
[Sat Mar 14 13:59:57.904665 2026] [:error] [pid 13261:tid 13284] [client 54.37.252.59:44116] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abT5XfDFVxjWSW61p5kndAAAANI"]
[Sat Mar 14 13:59:59.888585 2026] [:error] [pid 13261:tid 13272] [client 54.37.252.59:44126] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abT5X_DFVxjWSW61p5kneAAAAMY"]
[Sat Mar 14 14:00:01.737461 2026] [:error] [pid 13360:tid 13370] [client 54.37.252.59:44142] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abT5YfoSWtMry3M5X6scJwAAAoY"]
[Sat Mar 14 14:00:03.752720 2026] [:error] [pid 13261:tid 13279] [client 54.37.252.59:44156] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abT5Y_DFVxjWSW61p5kneQAAAM0"]
[Sat Mar 14 14:00:05.759612 2026] [:error] [pid 13360:tid 13367] [client 54.37.252.59:54834] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abT5ZfoSWtMry3M5X6scLwAAAoM"]
[Sat Mar 14 14:00:07.740469 2026] [:error] [pid 3912:tid 3929] [client 54.37.252.59:54838] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abT5Z8XFZBK-jpdCvTESAgAAAAI"]
[Sat Mar 14 14:00:09.730802 2026] [:error] [pid 13360:tid 13376] [client 54.37.252.59:54852] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abT5afoSWtMry3M5X6scNgAAAow"]
[Sat Mar 14 14:00:11.751324 2026] [:error] [pid 13360:tid 13379] [client 54.37.252.59:54860] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abT5a_oSWtMry3M5X6scPQAAAo8"]
[Sat Mar 14 14:00:13.767393 2026] [:error] [pid 54017:tid 54030] [client 54.37.252.59:54868] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abT5bZh88Lk5QZp0lWWOHAAAAkY"]
[Sat Mar 14 14:00:15.787795 2026] [:error] [pid 53961:tid 53986] [client 54.37.252.59:44958] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abT5b9czYH1OqY7y2cOb1QAAAdY"]
[Sat Mar 14 14:00:17.821907 2026] [:error] [pid 53961:tid 53979] [client 54.37.252.59:44972] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abT5cdczYH1OqY7y2cOb1wAAAc8"]
[Sat Mar 14 14:00:19.843315 2026] [:error] [pid 13262:tid 13304] [client 54.37.252.59:44984] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abT5czAdvM7ft5BXQ2ejUwAAAYs"]
[Sat Mar 14 14:00:21.560164 2026] [:error] [pid 13360:tid 13379] [client 54.37.252.59:44992] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abT5dfoSWtMry3M5X6scSAAAAo8"]
[Sat Mar 14 14:00:25.403144 2026] [:error] [pid 54132:tid 54160] [client 54.37.252.59:36704] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abT5ecMoWcZxtn8Rxy9dawAAA1c"]
[Sat Mar 14 15:27:30.100223 2026] [:error] [pid 61477:tid 61499] [client 49.7.227.204:34114] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abUN4qcx6muYfIYRM7CIvgAAAFI"]
[Sat Mar 14 15:39:22.802766 2026] [:error] [pid 13151:tid 13166] [client 51.83.9.109:40208] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abUQqtbXrXQxFzrsw434AgAAAI0"]
[Sat Mar 14 15:39:24.836437 2026] [:error] [pid 61383:tid 61416] [client 51.83.9.109:55272] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abUQrC4SAn4TCd4o0dXDKQAAAQA"]
[Sat Mar 14 15:39:26.832737 2026] [:error] [pid 61384:tid 61460] [client 51.83.9.109:55286] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abUQrvzibL2IYJprDHKKvgAAAdE"]
[Sat Mar 14 15:39:28.822783 2026] [:error] [pid 61383:tid 61429] [client 51.83.9.109:55302] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abUQsC4SAn4TCd4o0dXDLgAAAQ0"]
[Sat Mar 14 15:39:30.776189 2026] [:error] [pid 13151:tid 13154] [client 51.83.9.109:55316] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abUQstbXrXQxFzrsw434DQAAAIE"]
[Sat Mar 14 15:39:32.864752 2026] [:error] [pid 61382:tid 61399] [client 51.83.9.109:58816] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abUQtP5UUtpNLvwsJ7jdFQAAAA0"]
[Sat Mar 14 15:39:34.819303 2026] [:error] [pid 61477:tid 61488] [client 51.83.9.109:58828] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abUQtqcx6muYfIYRM7CN9gAAAEc"]
[Sat Mar 14 15:39:36.890909 2026] [:error] [pid 13151:tid 13160] [client 51.83.9.109:58842] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abUQuNbXrXQxFzrsw434HQAAAIc"]
[Sat Mar 14 15:39:39.000823 2026] [:error] [pid 61477:tid 61502] [client 51.83.9.109:58858] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abUQuqcx6muYfIYRM7COBQAAAFU"]
[Sat Mar 14 15:39:41.080962 2026] [:error] [pid 13151:tid 13153] [client 51.83.9.109:58860] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abUQvdbXrXQxFzrsw434PAAAAIA"]
[Sat Mar 14 15:39:43.009582 2026] [:error] [pid 61383:tid 61430] [client 51.83.9.109:42924] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abUQvy4SAn4TCd4o0dXDPAAAAQ4"]
[Sat Mar 14 15:39:45.082317 2026] [:error] [pid 61383:tid 61436] [client 51.83.9.109:42930] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abUQwS4SAn4TCd4o0dXDQgAAARQ"]
[Sat Mar 14 15:39:47.008481 2026] [:error] [pid 61383:tid 61438] [client 51.83.9.109:42936] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abUQwy4SAn4TCd4o0dXDRQAAARY"]
[Sat Mar 14 15:39:48.966908 2026] [:error] [pid 61477:tid 61501] [client 51.83.9.109:42942] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abUQxKcx6muYfIYRM7CODwAAAFQ"]
[Sat Mar 14 15:39:50.884566 2026] [:error] [pid 13151:tid 13175] [client 51.83.9.109:42958] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abUQxtbXrXQxFzrsw434WAAAAJY"]
[Sat Mar 14 15:39:52.780555 2026] [:error] [pid 61477:tid 61496] [client 51.83.9.109:54296] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abUQyKcx6muYfIYRM7COEgAAAE8"]
[Sat Mar 14 15:39:54.826907 2026] [:error] [pid 61477:tid 61494] [client 51.83.9.109:54304] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abUQyqcx6muYfIYRM7COGgAAAE0"]
[Sat Mar 14 15:39:56.586599 2026] [:error] [pid 61384:tid 61449] [client 51.83.9.109:54310] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abUQzPzibL2IYJprDHKK3AAAAcY"]
[Sat Mar 14 15:40:00.080472 2026] [:error] [pid 61477:tid 61493] [client 51.83.9.109:54320] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abUQ0Kcx6muYfIYRM7COJgAAAEw"]
[Sat Mar 14 15:40:03.873514 2026] [:error] [pid 61383:tid 61432] [client 51.83.9.109:43958] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abUQ0y4SAn4TCd4o0dXDVQAAARA"]
[Sat Mar 14 16:49:20.491200 2026] [:error] [pid 61384:tid 61450] [client 173.239.224.109:49721] [client 173.239.224.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.109, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abUhEPzibL2IYJprDHKduwAAAcc"]
[Sat Mar 14 16:49:20.494924 2026] [:error] [pid 61384:tid 61450] [client 173.239.224.109:49721] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 14 18:24:37.953707 2026] [:error] [pid 61384:tid 61451] [client 43.164.196.57:43200] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abU3ZfzibL2IYJprDHKteQAAAcg"]
[Sat Mar 14 21:44:22.200118 2026] [:error] [pid 30154:tid 30162] [client 94.247.172.129:62627] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abVmNl6OP9woRgp3v0GSgwAAAMI"]
[Sat Mar 14 22:44:31.540106 2026] [:error] [pid 30154:tid 30163] [client 43.140.247.223:35268] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abV0T16OP9woRgp3v0GqRQAAAMM"]
[Sat Mar 14 22:50:15.784643 2026] [:error] [pid 61383:tid 61434] [client 79.137.67.30:42680] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abV1py4SAn4TCd4o0dUhTQAAARI"]
[Sat Mar 14 22:50:17.794094 2026] [:error] [pid 49029:tid 49040] [client 79.137.67.30:45752] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abV1qe5zMoh1QxMAk5qajQAAAgg"]
[Sat Mar 14 22:50:19.709079 2026] [:error] [pid 58680:tid 58698] [client 79.137.67.30:45764] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abV1q5esvz6ml-XzsmVbIAAAAVA"]
[Sat Mar 14 22:50:21.605027 2026] [:error] [pid 61382:tid 61403] [client 79.137.67.30:45766] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abV1rf5UUtpNLvwsJ7gKfgAAABE"]
[Sat Mar 14 22:50:23.468965 2026] [:error] [pid 58680:tid 58706] [client 79.137.67.30:45770] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abV1r5esvz6ml-XzsmVbQgAAAVg"]
[Sat Mar 14 22:50:25.432664 2026] [:error] [pid 58680:tid 58688] [client 79.137.67.30:40754] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abV1sZesvz6ml-XzsmVbVQAAAUY"]
[Sat Mar 14 22:50:27.234856 2026] [:error] [pid 61383:tid 61427] [client 79.137.67.30:40764] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abV1sy4SAn4TCd4o0dUhYwAAAQs"]
[Sat Mar 14 22:50:30.800478 2026] [:error] [pid 61382:tid 61395] [client 79.137.67.30:40780] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abV1tv5UUtpNLvwsJ7gKygAAAAk"]
[Sat Mar 14 22:50:34.560775 2026] [:error] [pid 49029:tid 49039] [client 79.137.67.30:60626] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abV1uu5zMoh1QxMAk5qa4AAAAgc"]
[Sat Mar 14 23:56:48.704981 2026] [:error] [pid 30154:tid 30171] [client 43.135.186.135:47384] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abWFQF6OP9woRgp3v0G3hgAAAMs"]
[Sun Mar 15 01:11:57.662338 2026] [:error] [pid 20020:tid 20028] [client 62.84.185.60:5962] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abWW3UPjaRwagw2fU7gEUQAAAEY"]
[Sun Mar 15 01:11:59.652225 2026] [:error] [pid 20020:tid 20022] [client 62.84.185.60:5976] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abWW30PjaRwagw2fU7gEVwAAAEA"]
[Sun Mar 15 01:12:01.651870 2026] [:error] [pid 19671:tid 19974] [client 62.84.185.60:10232] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abWW4Vu8gYYbnWVq3mUWxgAAAQk"]
[Sun Mar 15 01:12:03.690803 2026] [:error] [pid 20020:tid 20042] [client 62.84.185.60:10234] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abWW40PjaRwagw2fU7gEWwAAAFQ"]
[Sun Mar 15 01:12:05.672686 2026] [:error] [pid 19680:tid 20011] [client 62.84.185.60:10238] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abWW5UnhGahR8LEhCX-esgAAAdM"]
[Sun Mar 15 01:12:07.855268 2026] [:error] [pid 20020:tid 20032] [client 62.84.185.60:10248] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abWW50PjaRwagw2fU7gEaQAAAEo"]
[Sun Mar 15 01:12:09.853080 2026] [:error] [pid 19680:tid 20002] [client 62.84.185.60:10262] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abWW6UnhGahR8LEhCX-etwAAAco"]
[Sun Mar 15 01:12:12.156969 2026] [:error] [pid 20020:tid 20026] [client 62.84.185.60:6936] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abWW7EPjaRwagw2fU7gEdQAAAEQ"]
[Sun Mar 15 01:12:14.174768 2026] [:error] [pid 19680:tid 20010] [client 62.84.185.60:6944] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abWW7knhGahR8LEhCX-euwAAAdI"]
[Sun Mar 15 01:12:16.561221 2026] [:error] [pid 20020:tid 20024] [client 62.84.185.60:6956] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abWW8EPjaRwagw2fU7gEgQAAAEI"]
[Sun Mar 15 01:12:18.507139 2026] [:error] [pid 20020:tid 20039] [client 62.84.185.60:6972] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abWW8kPjaRwagw2fU7gEiAAAAFE"]
[Sun Mar 15 01:12:20.536731 2026] [:error] [pid 19671:tid 19969] [client 62.84.185.60:6988] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abWW9Fu8gYYbnWVq3mUW3AAAAQQ"]
[Sun Mar 15 01:12:22.550134 2026] [:error] [pid 19658:tid 19942] [client 62.84.185.60:33190] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abWW9lIS7ZSIcsV9BQqF9wAAAAU"]
[Sun Mar 15 01:12:24.652279 2026] [:error] [pid 19680:tid 19998] [client 62.84.185.60:33192] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abWW-EnhGahR8LEhCX-exQAAAcY"]
[Sun Mar 15 01:12:26.671497 2026] [:error] [pid 20020:tid 20037] [client 62.84.185.60:33208] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abWW-kPjaRwagw2fU7gEoQAAAE8"]
[Sun Mar 15 01:12:28.596829 2026] [:error] [pid 19671:tid 19970] [client 62.84.185.60:33216] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abWW_Fu8gYYbnWVq3mUW4gAAAQU"]
[Sun Mar 15 01:12:30.662058 2026] [:error] [pid 20020:tid 20039] [client 62.84.185.60:33228] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abWW_kPjaRwagw2fU7gEogAAAFE"]
[Sun Mar 15 01:12:32.693761 2026] [:error] [pid 19680:tid 19992] [client 62.84.185.60:48672] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abWXAEnhGahR8LEhCX-e0wAAAcA"]
[Sun Mar 15 01:12:34.957042 2026] [:error] [pid 20020:tid 20040] [client 62.84.185.60:48678] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abWXAkPjaRwagw2fU7gEqAAAAFI"]
[Sun Mar 15 01:12:36.965463 2026] [:error] [pid 20020:tid 20039] [client 62.84.185.60:48690] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abWXBEPjaRwagw2fU7gEsAAAAFE"]
[Sun Mar 15 01:12:39.161113 2026] [:error] [pid 19671:tid 19967] [client 62.84.185.60:48700] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abWXB1u8gYYbnWVq3mUW_QAAAQI"]
[Sun Mar 15 01:12:41.261264 2026] [:error] [pid 19680:tid 20009] [client 62.84.185.60:47466] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abWXCUnhGahR8LEhCX-e3AAAAdE"]
[Sun Mar 15 01:12:43.858959 2026] [:error] [pid 19671:tid 19989] [client 62.84.185.60:47476] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abWXC1u8gYYbnWVq3mUXCQAAARg"]
[Sun Mar 15 01:12:47.757255 2026] [:error] [pid 19680:tid 20006] [client 62.84.185.60:47482] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abWXD0nhGahR8LEhCX-e3wAAAc4"]
[Sun Mar 15 02:38:10.645054 2026] [:error] [pid 59255:tid 59275] [client 54.36.60.82:56800] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abWrEq3w_Oi6c1avgTsNGgAAAI4"]
[Sun Mar 15 02:38:14.515329 2026] [:error] [pid 59255:tid 59269] [client 54.36.60.82:39458] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abWrFq3w_Oi6c1avgTsNLQAAAIg"]
[Sun Mar 15 02:55:53.594799 2026] [:error] [pid 19680:tid 20008] [client 103.50.150.79:36714] [client 103.50.150.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.50.150.79, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abWvOUnhGahR8LEhCX-_nwAAAdA"]
[Sun Mar 15 02:55:53.599451 2026] [:error] [pid 19680:tid 20008] [client 103.50.150.79:36714] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 03:01:42.553666 2026] [:error] [pid 19658:tid 19938] [client 20.205.99.175:5876] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Sun Mar 15 03:01:42.676422 2026] [:error] [pid 19658:tid 19947] [client 20.205.99.175:5876] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 03:01:42.817823 2026] [:error] [pid 19658:tid 19959] [client 20.205.99.175:5876] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 03:01:42.974196 2026] [:error] [pid 19658:tid 19951] [client 20.205.99.175:5876] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 03:01:43.098101 2026] [:error] [pid 19658:tid 19949] [client 20.205.99.175:5876] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Mar 15 03:01:44.970912 2026] [:error] [pid 19658:tid 19937] [client 20.205.99.175:5876] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 03:01:45.090894 2026] [:error] [pid 19658:tid 19941] [client 20.205.99.175:5876] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abWwmVIS7ZSIcsV9BQqc1AAAAAQ"]
[Sun Mar 15 03:01:45.618692 2026] [:error] [pid 59255:tid 59268] [client 20.205.99.175:23510] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abWwma3w_Oi6c1avgTsbowAAAIc"]
[Sun Mar 15 03:01:46.111546 2026] [:error] [pid 19658:tid 19955] [client 20.205.99.175:15942] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abWwmlIS7ZSIcsV9BQqc1gAAABI"]
[Sun Mar 15 03:01:46.632588 2026] [:error] [pid 19658:tid 19948] [client 20.205.99.175:16753] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cgi-bin/"] [unique_id "abWwmlIS7ZSIcsV9BQqc1wAAAAs"]
[Sun Mar 15 03:56:47.546438 2026] [:error] [pid 30509:tid 30587] [client 212.30.36.138:58719] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 03:56:47.845864 2026] [:error] [pid 30509:tid 30598] [client 212.30.36.138:58719] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 15 03:56:48.127146 2026] [:error] [pid 30509:tid 30589] [client 212.30.36.138:58719] [client 212.30.36.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "abW9gKDOtSZYYHQXlLwvvwAAAIk"]
[Sun Mar 15 03:56:48.739495 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 03:56:49.039084 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 15 03:56:49.326331 2026] [:error] [pid 30606:tid 30624] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 03:56:49.632728 2026] [:error] [pid 30606:tid 30620] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 15 03:56:49.952607 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 03:56:51.879673 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 03:56:52.233263 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 15 03:56:52.529307 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 15 03:56:52.867119 2026] [:error] [pid 30606:tid 30610] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 15 03:56:53.133859 2026] [:error] [pid 30606:tid 30633] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 15 03:56:53.437200 2026] [:error] [pid 30606:tid 30632] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 15 03:56:53.736127 2026] [:error] [pid 30606:tid 30627] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 03:56:54.056155 2026] [:error] [pid 30606:tid 30633] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 15 03:56:54.370028 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 03:56:54.693492 2026] [:error] [pid 30606:tid 30621] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 15 03:56:54.966421 2026] [:error] [pid 30606:tid 30619] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 03:56:55.295055 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 15 03:56:55.616475 2026] [:error] [pid 30606:tid 30629] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 15 03:56:55.927483 2026] [:error] [pid 30606:tid 30631] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sun Mar 15 03:56:56.322949 2026] [:error] [pid 30606:tid 30617] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 15 03:56:56.669377 2026] [:error] [pid 30606:tid 30630] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 15 03:56:56.956134 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 15 03:56:57.251042 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 15 03:56:57.569077 2026] [:error] [pid 30606:tid 30621] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 15 03:56:57.861681 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 15 03:56:59.797932 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 15 03:57:00.150466 2026] [:error] [pid 30606:tid 30633] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 15 03:57:00.455737 2026] [:error] [pid 30606:tid 30613] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 15 03:57:00.811392 2026] [:error] [pid 30606:tid 30619] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 15 03:57:01.081771 2026] [:error] [pid 30606:tid 30631] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 15 03:57:01.351770 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 15 03:57:01.679624 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 15 03:57:01.999803 2026] [:error] [pid 30606:tid 30631] [client 212.30.36.135:25799] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 15 03:57:02.267495 2026] [:error] [pid 30606:tid 30617] [client 212.30.36.135:25799] [client 212.30.36.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "abW9jpL8iO1J-XSfSz3UMgAAAMg"]
[Sun Mar 15 03:57:02.837023 2026] [:error] [pid 30496:tid 30545] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 15 03:57:03.140963 2026] [:error] [pid 30496:tid 30538] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 15 03:57:03.451177 2026] [:error] [pid 30496:tid 30533] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 15 03:57:03.776986 2026] [:error] [pid 30496:tid 30532] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 15 03:57:04.111775 2026] [:error] [pid 30496:tid 30546] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 15 03:57:04.415125 2026] [:error] [pid 30496:tid 30543] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 15 03:57:04.731693 2026] [:error] [pid 30496:tid 30539] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 15 03:57:05.254333 2026] [:error] [pid 30496:tid 30539] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 15 03:57:05.542648 2026] [:error] [pid 30496:tid 30537] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 15 03:57:05.890736 2026] [:error] [pid 30496:tid 30550] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 15 03:57:06.237647 2026] [:error] [pid 30496:tid 30547] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 03:57:06.519532 2026] [:error] [pid 30496:tid 30542] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 15 03:57:06.889029 2026] [:error] [pid 30496:tid 30527] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 15 03:57:07.163036 2026] [:error] [pid 30496:tid 30540] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 15 03:57:07.473188 2026] [:error] [pid 30496:tid 30538] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 15 03:57:07.782202 2026] [:error] [pid 30496:tid 30532] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sun Mar 15 03:57:08.083480 2026] [:error] [pid 30496:tid 30529] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 15 03:57:08.353290 2026] [:error] [pid 30496:tid 30546] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 15 03:57:08.679530 2026] [:error] [pid 30496:tid 30543] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 15 03:57:08.975382 2026] [:error] [pid 30496:tid 30534] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 15 03:57:09.296834 2026] [:error] [pid 30496:tid 30526] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 15 03:57:09.912660 2026] [:error] [pid 30496:tid 30550] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 15 03:57:10.223100 2026] [:error] [pid 30496:tid 30547] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 15 03:57:10.521944 2026] [:error] [pid 30496:tid 30542] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 15 03:57:10.836269 2026] [:error] [pid 30496:tid 30538] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 15 03:57:11.124936 2026] [:error] [pid 30496:tid 30532] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 15 03:57:11.461795 2026] [:error] [pid 30496:tid 30548] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 15 03:57:11.763697 2026] [:error] [pid 30496:tid 30533] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 15 03:57:12.341941 2026] [:error] [pid 30496:tid 30526] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 15 03:57:12.966372 2026] [:error] [pid 30496:tid 30547] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 15 03:57:13.299447 2026] [:error] [pid 30496:tid 30527] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 15 03:57:13.613873 2026] [:error] [pid 30496:tid 30549] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 15 03:57:13.934089 2026] [:error] [pid 30496:tid 30548] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 15 03:57:14.237548 2026] [:error] [pid 30496:tid 30546] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 15 03:57:14.541979 2026] [:error] [pid 30496:tid 30526] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 15 03:57:14.870830 2026] [:error] [pid 30496:tid 30537] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 15 03:57:15.239733 2026] [:error] [pid 30496:tid 30547] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 15 03:57:15.549661 2026] [:error] [pid 30496:tid 30541] [client 212.30.36.111:31081] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 15 03:57:15.839123 2026] [:error] [pid 30496:tid 30542] [client 212.30.36.111:31081] [client 212.30.36.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "abW9m64QOwe6Md2U2lCXyQAAABA"]
[Sun Mar 15 03:57:32.367960 2026] [autoindex:error] [pid 30508:tid 30564] [client 212.30.36.114:30597] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 04:33:52.554794 2026] [:error] [pid 38645:tid 38669] [client 98.159.43.107:27945] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 04:33:52.696815 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.107:27945] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 15 04:33:52.802620 2026] [:error] [pid 38645:tid 38666] [client 98.159.43.107:27945] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "abXGMBFPHtsDUuVrWDZDwwAAANM"]
[Sun Mar 15 04:33:53.040532 2026] [:error] [pid 38541:tid 38621] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 04:33:53.152157 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 15 04:33:53.258301 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 04:33:53.377139 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 15 04:33:53.521857 2026] [:error] [pid 38541:tid 38631] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 04:33:53.638126 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 04:33:53.777817 2026] [:error] [pid 38541:tid 38620] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 15 04:33:53.917734 2026] [:error] [pid 38541:tid 38636] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 15 04:33:54.022490 2026] [:error] [pid 38541:tid 38624] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 15 04:33:54.152288 2026] [:error] [pid 38541:tid 38616] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 15 04:33:54.247572 2026] [:error] [pid 38541:tid 38615] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 15 04:33:54.346352 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 04:33:54.496294 2026] [:error] [pid 38541:tid 38622] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 15 04:33:54.661177 2026] [:error] [pid 38541:tid 38614] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 04:33:54.790411 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 15 04:33:54.889505 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 04:33:55.035726 2026] [:error] [pid 38541:tid 38635] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 15 04:33:55.252080 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 15 04:33:55.359800 2026] [:error] [pid 38541:tid 38637] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sun Mar 15 04:33:55.514886 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 15 04:33:55.616937 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 15 04:33:55.733376 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 15 04:33:55.828622 2026] [:error] [pid 38541:tid 38620] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 15 04:33:55.929486 2026] [:error] [pid 38541:tid 38630] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 15 04:33:56.052985 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 15 04:33:56.153651 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 15 04:33:56.255412 2026] [:error] [pid 38541:tid 38619] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 15 04:33:56.365650 2026] [:error] [pid 38541:tid 38614] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 15 04:33:56.465476 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 15 04:33:56.584661 2026] [:error] [pid 38541:tid 38633] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 15 04:33:56.713067 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 15 04:33:56.810822 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 15 04:33:56.933895 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.163:55045] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 15 04:33:57.045125 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.163:55045] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "abXGNXuOpex8jIO0jt67OQAAAIA"]
[Sun Mar 15 04:33:57.229620 2026] [:error] [pid 38540:tid 38609] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 15 04:33:57.361611 2026] [:error] [pid 38540:tid 38589] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 15 04:33:57.505751 2026] [:error] [pid 38540:tid 38603] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 15 04:33:57.603707 2026] [:error] [pid 38540:tid 38607] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 15 04:33:57.724745 2026] [:error] [pid 38540:tid 38602] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 15 04:33:57.828804 2026] [:error] [pid 38540:tid 38591] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 15 04:33:57.934092 2026] [:error] [pid 38540:tid 38604] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 15 04:33:58.057529 2026] [:error] [pid 38540:tid 38594] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 15 04:33:58.188728 2026] [:error] [pid 38540:tid 38593] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 15 04:33:58.282882 2026] [:error] [pid 38540:tid 38600] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 15 04:33:58.378782 2026] [:error] [pid 38540:tid 38595] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 04:33:58.503740 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 15 04:33:58.621891 2026] [:error] [pid 38540:tid 38607] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 15 04:33:58.727754 2026] [:error] [pid 38540:tid 38601] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 15 04:33:58.886425 2026] [:error] [pid 38540:tid 38608] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 15 04:33:58.995335 2026] [:error] [pid 38540:tid 38587] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sun Mar 15 04:33:59.106383 2026] [:error] [pid 38540:tid 38588] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 15 04:33:59.246182 2026] [:error] [pid 38540:tid 38589] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 15 04:33:59.340535 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 15 04:33:59.458746 2026] [:error] [pid 38540:tid 38602] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 15 04:33:59.625092 2026] [:error] [pid 38540:tid 38586] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 15 04:33:59.837724 2026] [:error] [pid 38540:tid 38587] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 15 04:33:59.954140 2026] [:error] [pid 38540:tid 38596] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 15 04:34:00.087331 2026] [:error] [pid 38540:tid 38589] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 15 04:34:00.207128 2026] [:error] [pid 38540:tid 38609] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 15 04:34:00.361525 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 15 04:34:00.458758 2026] [:error] [pid 38540:tid 38601] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 15 04:34:00.575893 2026] [:error] [pid 38540:tid 38604] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 15 04:34:02.773858 2026] [:error] [pid 38540:tid 38587] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 15 04:34:02.961251 2026] [:error] [pid 38540:tid 38592] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 15 04:34:03.117733 2026] [:error] [pid 38540:tid 38603] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 15 04:34:03.279689 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 15 04:34:03.371912 2026] [:error] [pid 38540:tid 38591] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 15 04:34:03.506663 2026] [:error] [pid 38540:tid 38607] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 15 04:34:03.655421 2026] [:error] [pid 38540:tid 38606] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 15 04:34:03.759824 2026] [:error] [pid 38540:tid 38596] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 15 04:34:03.853516 2026] [:error] [pid 38540:tid 38588] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 15 04:34:03.978027 2026] [:error] [pid 38540:tid 38587] [client 98.159.43.123:60729] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 15 04:34:04.077041 2026] [:error] [pid 38540:tid 38609] [client 98.159.43.123:60729] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "abXGPF8bnHsJ1dE90bLVlAAAAFc"]
[Sun Mar 15 04:34:04.342091 2026] [:error] [pid 38536:tid 38571] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 15 04:34:04.464560 2026] [:error] [pid 38536:tid 38570] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 15 04:34:04.564447 2026] [:error] [pid 38536:tid 38562] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 15 04:34:04.710706 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 15 04:34:04.806185 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 15 04:34:04.934335 2026] [:error] [pid 38536:tid 38558] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Mar 15 04:34:05.046969 2026] [:error] [pid 38536:tid 38560] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Mar 15 04:34:05.138153 2026] [:error] [pid 38536:tid 38561] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 15 04:34:05.324973 2026] [:error] [pid 38536:tid 38567] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 15 04:34:05.512023 2026] [:error] [pid 38536:tid 38572] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 15 04:34:05.637388 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Mar 15 04:34:05.765996 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Mar 15 04:34:05.860397 2026] [:error] [pid 38536:tid 38566] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 15 04:34:05.968435 2026] [:error] [pid 38536:tid 38565] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 15 04:34:06.068684 2026] [:error] [pid 38536:tid 38557] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 15 04:34:06.198276 2026] [:error] [pid 38536:tid 38564] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 15 04:34:06.291391 2026] [:error] [pid 38536:tid 38570] [client 98.159.43.129:45789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Mar 15 04:34:06.622189 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.129:45789] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abXGPvpTEqkVJ0rBEWtnawAAAAA"]
[Sun Mar 15 04:34:06.801155 2026] [:error] [pid 38541:tid 38618] [client 98.159.43.158:30027] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abXGPnuOpex8jIO0jt67WQAAAIU"]
[Sun Mar 15 04:34:07.656538 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.150:31181] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abXGP3uOpex8jIO0jt67agAAAJU"]
[Sun Mar 15 04:34:09.024101 2026] [:error] [pid 38540:tid 38586] [client 98.159.43.145:28043] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abXGQV8bnHsJ1dE90bLVsgAAAEA"]
[Sun Mar 15 04:34:09.437794 2026] [:error] [pid 38541:tid 38622] [client 98.159.43.123:42983] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abXGQXuOpex8jIO0jt67iwAAAIk"]
[Sun Mar 15 04:34:10.557501 2026] [:error] [pid 38536:tid 38556] [client 98.159.43.138:34639] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abXGQvpTEqkVJ0rBEWtnfQAAAAM"]
[Sun Mar 15 04:34:11.031597 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.155:54675] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Mar 15 04:34:11.209398 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.155:54675] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "abXGQ_pTEqkVJ0rBEWtnhQAAAAo"]
[Sun Mar 15 04:34:11.484825 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.145:38053] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abXGQxFPHtsDUuVrWDZEqwAAAMA"]
[Sun Mar 15 04:34:11.930984 2026] [:error] [pid 38536:tid 38569] [client 98.159.43.152:36681] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abXGQ_pTEqkVJ0rBEWtniwAAABA"]
[Sun Mar 15 04:34:12.388738 2026] [:error] [pid 38536:tid 38559] [client 98.159.43.156:42445] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abXGRPpTEqkVJ0rBEWtnjwAAAAY"]
[Sun Mar 15 04:34:12.620190 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.114:48823] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abXGRPpTEqkVJ0rBEWtnkAAAAAo"]
[Sun Mar 15 04:34:12.972626 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.155:57841] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abXGRBFPHtsDUuVrWDZExAAAANc"]
[Sun Mar 15 04:34:13.390893 2026] [:error] [pid 38541:tid 38619] [client 98.159.43.161:61933] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abXGRXuOpex8jIO0jt67tAAAAIY"]
[Sun Mar 15 04:34:13.625383 2026] [:error] [pid 38540:tid 38589] [client 98.159.43.157:55751] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abXGRV8bnHsJ1dE90bLVzwAAAEM"]
[Sun Mar 15 04:34:13.964692 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.116:37317] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abXGRXuOpex8jIO0jt67twAAAI8"]
[Sun Mar 15 04:34:14.407438 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.155:34015] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abXGRvpTEqkVJ0rBEWtnnAAAABQ"]
[Sun Mar 15 04:34:14.608832 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.152:60797] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abXGRhFPHtsDUuVrWDZE2AAAANU"]
[Sun Mar 15 04:34:14.845341 2026] [:error] [pid 38645:tid 38654] [client 98.159.43.136:35555] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abXGRhFPHtsDUuVrWDZE3AAAAMc"]
[Sun Mar 15 04:34:15.055092 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.117:60027] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abXGRxFPHtsDUuVrWDZE4AAAANg"]
[Sun Mar 15 04:34:15.265920 2026] [:error] [pid 38540:tid 38596] [client 98.159.43.146:51109] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abXGR18bnHsJ1dE90bLV3QAAAEo"]
[Sun Mar 15 04:34:15.621836 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.132:34599] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "abXGRxFPHtsDUuVrWDZE5QAAAMA"]
[Sun Mar 15 04:34:15.816064 2026] [:error] [pid 38645:tid 38654] [client 98.159.43.145:60171] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abXGRxFPHtsDUuVrWDZE6AAAAMc"]
[Sun Mar 15 04:34:16.102752 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.161:38079] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "abXGSBFPHtsDUuVrWDZE7wAAAMI"]
[Sun Mar 15 04:34:16.505929 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.153:29993] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abXGSBFPHtsDUuVrWDZE-QAAAMk"]
[Sun Mar 15 04:34:17.004460 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.146:21747] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "abXGSRFPHtsDUuVrWDZFAQAAAM0"]
[Sun Mar 15 04:34:20.362339 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.135:22629] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "abXGTBFPHtsDUuVrWDZFFgAAAM8"]
[Sun Mar 15 04:34:21.300396 2026] [:error] [pid 38536:tid 38574] [client 98.159.43.118:34419] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "abXGTfpTEqkVJ0rBEWtnuQAAABU"]
[Sun Mar 15 04:34:22.306102 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.152:41305] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "abXGThFPHtsDUuVrWDZFLQAAAM0"]
[Sun Mar 15 04:34:22.524696 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.144:29709] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abXGTga8xkcaSmgTbwi0EgAAAQ8"]
[Sun Mar 15 04:34:22.791365 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.129:37569] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abXGThFPHtsDUuVrWDZFLwAAAMI"]
[Sun Mar 15 04:34:23.027277 2026] [:error] [pid 38536:tid 38571] [client 98.159.43.148:55889] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 15 04:34:23.626343 2026] [:error] [pid 38536:tid 38565] [client 98.159.43.148:55889] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abXGT_pTEqkVJ0rBEWtnzgAAAAw"]
[Sun Mar 15 04:34:24.126275 2026] [:error] [pid 38645:tid 38666] [client 98.159.43.107:42945] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "abXGUBFPHtsDUuVrWDZFPgAAANM"]
[Sun Mar 15 04:34:24.574638 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.162:25301] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abXGUHuOpex8jIO0jt68dQAAAI0"]
[Sun Mar 15 04:34:26.055537 2026] [:error] [pid 38541:tid 38614] [client 98.159.43.153:20697] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "abXGUnuOpex8jIO0jt68kAAAAIE"]
[Sun Mar 15 04:34:26.238537 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.157:48909] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 15 04:34:26.787307 2026] [:error] [pid 38541:tid 38614] [client 98.159.43.157:48909] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abXGUnuOpex8jIO0jt68ogAAAIE"]
[Sun Mar 15 04:34:26.987845 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.154:22611] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "abXGUhFPHtsDUuVrWDZFcwAAANI"]
[Sun Mar 15 04:34:29.628523 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.161:24379] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abXGVfpTEqkVJ0rBEWtoBAAAAAI"]
[Sun Mar 15 04:34:29.916833 2026] [:error] [pid 38540:tid 38602] [client 98.159.43.108:53315] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abXGVV8bnHsJ1dE90bLWKgAAAFA"]
[Sun Mar 15 04:34:30.601388 2026] [:error] [pid 38645:tid 38654] [client 98.159.43.116:45017] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 15 04:34:31.171635 2026] [:error] [pid 38645:tid 38655] [client 98.159.43.116:45017] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abXGVxFPHtsDUuVrWDZFtgAAAMg"]
[Sun Mar 15 04:34:31.373869 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.114:50357] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "abXGV3uOpex8jIO0jt684wAAAIw"]
[Sun Mar 15 04:34:31.889137 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.122:60115] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abXGVxFPHtsDUuVrWDZFvQAAAMY"]
[Sun Mar 15 04:34:32.221895 2026] [:error] [pid 38541:tid 38633] [client 98.159.43.117:25701] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "abXGWHuOpex8jIO0jt687QAAAJQ"]
[Sun Mar 15 04:34:34.029132 2026] [:error] [pid 38541:tid 38621] [client 98.159.43.139:41459] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "abXGWnuOpex8jIO0jt69DQAAAIg"]
[Sun Mar 15 04:34:34.367673 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.111:42521] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abXGWnuOpex8jIO0jt69EwAAAJA"]
[Sun Mar 15 04:34:34.773972 2026] [:error] [pid 38645:tid 38651] [client 98.159.43.106:24371] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "abXGWhFPHtsDUuVrWDZF6wAAAMQ"]
[Sun Mar 15 04:34:34.989158 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.142:65439] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abXGWhFPHtsDUuVrWDZF8AAAANI"]
[Sun Mar 15 04:34:35.196749 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.158:47943] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abXGWxFPHtsDUuVrWDZF-gAAAM8"]
[Sun Mar 15 04:34:35.381477 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.138:22847] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abXGWxFPHtsDUuVrWDZGBQAAAMU"]
[Sun Mar 15 04:34:35.977219 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.112:49829] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abXGWxFPHtsDUuVrWDZGIwAAAMU"]
[Sun Mar 15 04:34:36.428818 2026] [:error] [pid 38541:tid 38616] [client 98.159.43.144:20693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Mar 15 04:34:37.017080 2026] [:error] [pid 38541:tid 38630] [client 98.159.43.144:20693] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abXGXXuOpex8jIO0jt69NAAAAJE"]
[Sun Mar 15 04:34:38.597568 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.114:41213] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "abXGXga8xkcaSmgTbwi0mgAAARY"]
[Sun Mar 15 04:34:38.793348 2026] [:error] [pid 38536:tid 38561] [client 98.159.43.150:38651] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "abXGXvpTEqkVJ0rBEWtoVAAAAAg"]
[Sun Mar 15 04:34:39.183357 2026] [:error] [pid 38540:tid 38592] [client 98.159.43.134:37525] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abXGX18bnHsJ1dE90bLWhQAAAEY"]
[Sun Mar 15 04:34:39.809138 2026] [:error] [pid 38541:tid 38636] [client 98.159.43.131:44931] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Mar 15 04:34:40.065570 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.131:44931] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "abXGYHuOpex8jIO0jt69WQAAAIw"]
[Sun Mar 15 04:34:41.517027 2026] [:error] [pid 38541:tid 38631] [client 98.159.43.113:21873] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "abXGYXuOpex8jIO0jt69aAAAAJI"]
[Sun Mar 15 04:34:41.893757 2026] [:error] [pid 9995:tid 10000] [client 98.159.43.147:23473] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "abXGYQa8xkcaSmgTbwi0rAAAAQI"]
[Sun Mar 15 04:34:42.298471 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.149:59399] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abXGYvpTEqkVJ0rBEWtomQAAAAo"]
[Sun Mar 15 04:34:42.782180 2026] [:error] [pid 38645:tid 38659] [client 98.159.43.154:40687] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abXGYhFPHtsDUuVrWDZGhwAAAMw"]
[Sun Mar 15 04:34:44.167136 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.122:45143] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abXGZHuOpex8jIO0jt69gwAAAIQ"]
[Sun Mar 15 04:34:45.038942 2026] [:error] [pid 38645:tid 38657] [client 98.159.43.111:37097] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "abXGZRFPHtsDUuVrWDZG0gAAAMo"]
[Sun Mar 15 04:34:46.865297 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.154:64001] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "abXGZvpTEqkVJ0rBEWtoqQAAAAA"]
[Sun Mar 15 04:34:48.141837 2026] [:error] [pid 9995:tid 10007] [client 98.159.43.147:29239] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 15 04:34:48.682967 2026] [:error] [pid 9995:tid 10017] [client 98.159.43.147:29239] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Mar 15 04:34:49.111353 2026] [:error] [pid 9995:tid 10021] [client 98.159.43.147:29239] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "abXGaQa8xkcaSmgTbwi1HwAAARc"]
[Sun Mar 15 04:34:49.370933 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.117:42977] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abXGaRFPHtsDUuVrWDZHKgAAANg"]
[Sun Mar 15 04:34:49.801566 2026] [:error] [pid 38645:tid 38667] [client 98.159.43.161:55453] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abXGaRFPHtsDUuVrWDZHLwAAANQ"]
[Sun Mar 15 04:34:50.023386 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.121:21361] [client 98.159.43.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "abXGanuOpex8jIO0jt69xQAAAIw"]
[Sun Mar 15 04:34:50.454908 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.118:61223] [client 98.159.43.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.118, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "abXGahFPHtsDUuVrWDZHQgAAAMY"]
[Sun Mar 15 04:34:50.577746 2026] [:error] [pid 38645:tid 38651] [client 98.159.43.118:61223] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Mar 15 04:34:51.252672 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.118:61223] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "abXGaxFPHtsDUuVrWDZHagAAAMs"]
[Sun Mar 15 04:34:51.686789 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.119:61387] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Mar 15 04:34:51.832045 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.119:61387] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "abXGaxFPHtsDUuVrWDZHewAAAMI"]
[Sun Mar 15 04:34:52.272482 2026] [:error] [pid 38645:tid 38661] [client 98.159.43.119:50937] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/husky.php"] [unique_id "abXGbBFPHtsDUuVrWDZHjgAAAM4"]
[Sun Mar 15 04:34:53.553037 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.137:64475] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abXGbQa8xkcaSmgTbwi1MAAAAQM"]
[Sun Mar 15 04:34:53.801897 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.112:64943] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abXGbQa8xkcaSmgTbwi1NQAAAQs"]
[Sun Mar 15 04:34:53.987275 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.153:51059] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Mar 15 04:34:54.490796 2026] [:error] [pid 9995:tid 10017] [client 98.159.43.153:51059] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abXGbga8xkcaSmgTbwi1SgAAARM"]
[Sun Mar 15 04:34:54.711987 2026] [:error] [pid 9995:tid 10016] [client 98.159.43.108:36735] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "abXGbga8xkcaSmgTbwi1TQAAARI"]
[Sun Mar 15 04:34:55.100652 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.132:56847] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Mar 15 04:34:55.212788 2026] [:error] [pid 9995:tid 10016] [client 98.159.43.132:56847] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "abXGbwa8xkcaSmgTbwi1WwAAARI"]
[Sun Mar 15 04:34:55.745422 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.120:44211] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abXGbwa8xkcaSmgTbwi1ZwAAAQ8"]
[Sun Mar 15 04:34:56.104699 2026] [:error] [pid 38540:tid 38599] [client 98.159.43.108:48429] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abXGcF8bnHsJ1dE90bLW5AAAAE0"]
[Sun Mar 15 04:34:56.304665 2026] [:error] [pid 38541:tid 38615] [client 98.159.43.149:23527] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Mar 15 04:34:56.410159 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.149:23527] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abXGcHuOpex8jIO0jt69-AAAAIA"]
[Sun Mar 15 04:34:56.768968 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.109:54059] [client 98.159.43.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.109, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abXGcPpTEqkVJ0rBEWto3QAAABQ"]
[Sun Mar 15 04:34:56.772151 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.109:54059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 04:34:56.866775 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.109:54059] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "abXGcPpTEqkVJ0rBEWto4AAAAAI"]
[Sun Mar 15 04:34:57.444528 2026] [:error] [pid 38645:tid 38659] [client 98.159.43.156:40033] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abXGcRFPHtsDUuVrWDZH7wAAAMw"]
[Sun Mar 15 04:34:59.133037 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.139:54277] [client 98.159.43.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.139, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abXGc3uOpex8jIO0jt6-HQAAAIo"]
[Sun Mar 15 04:35:01.338161 2026] [:error] [pid 38541:tid 38632] [client 98.159.43.139:54277] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abXGdXuOpex8jIO0jt6-LwAAAJM"]
[Sun Mar 15 04:35:01.533744 2026] [:error] [pid 38541:tid 38618] [client 98.159.43.162:53169] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "abXGdXuOpex8jIO0jt6-NAAAAIU"]
[Sun Mar 15 04:35:01.774407 2026] [:error] [pid 38541:tid 38622] [client 98.159.43.153:44657] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abXGdXuOpex8jIO0jt6-OgAAAIk"]
[Sun Mar 15 04:35:02.187973 2026] [:error] [pid 38645:tid 38654] [client 98.159.43.132:60155] [client 98.159.43.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.132, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abXGdhFPHtsDUuVrWDZIOAAAAMc"]
[Sun Mar 15 04:35:02.610534 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.132:60155] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Mar 15 04:35:02.863457 2026] [:error] [pid 38645:tid 38661] [client 98.159.43.132:60155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Mar 15 04:35:02.965863 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.132:60155] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abXGdhFPHtsDUuVrWDZIQgAAAMA"]
[Sun Mar 15 04:35:03.237276 2026] [:error] [pid 38536:tid 38560] [client 98.159.43.155:42145] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Mar 15 04:35:03.467439 2026] [:error] [pid 38536:tid 38556] [client 98.159.43.155:42145] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Mar 15 04:35:03.740617 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.155:42145] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "abXGd_pTEqkVJ0rBEWto-gAAABQ"]
[Sun Mar 15 04:35:03.954033 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.120:40249] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Mar 15 04:35:04.153522 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.120:40249] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abXGeHuOpex8jIO0jt6-VgAAAI0"]
[Sun Mar 15 04:35:04.547712 2026] [:error] [pid 38540:tid 38598] [client 98.159.43.136:46975] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Mar 15 04:35:04.764106 2026] [:error] [pid 38540:tid 38590] [client 98.159.43.136:46975] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Mar 15 04:35:04.886783 2026] [:error] [pid 38540:tid 38604] [client 98.159.43.136:46975] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "abXGeF8bnHsJ1dE90bLXWgAAAFI"]
[Sun Mar 15 04:35:05.080870 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.153:29287] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "abXGeXuOpex8jIO0jt6-YwAAAI0"]
[Sun Mar 15 04:35:06.371329 2026] [:error] [pid 38541:tid 38632] [client 98.159.43.116:32817] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abXGenuOpex8jIO0jt6-cwAAAJM"]
[Sun Mar 15 04:35:19.114974 2026] [autoindex:error] [pid 9995:tid 10018] [client 98.159.43.156:34927] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 07:53:59.288615 2026] [:error] [pid 38541:tid 38613] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 07:53:59.406598 2026] [:error] [pid 38541:tid 38615] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 07:53:59.684548 2026] [:error] [pid 38541:tid 38630] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 15 07:53:59.803654 2026] [:error] [pid 38541:tid 38619] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 07:54:00.041224 2026] [:error] [pid 38541:tid 38626] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 15 07:54:00.159636 2026] [:error] [pid 38541:tid 38625] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 07:54:00.276193 2026] [:error] [pid 38541:tid 38624] [client 52.243.60.223:20581] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 15 07:54:00.509306 2026] [:error] [pid 38541:tid 38628] [client 52.243.60.223:20581] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abX1GHuOpex8jIO0jt7-6QAAAI8"]
[Sun Mar 15 07:54:00.968154 2026] [:error] [pid 50986:tid 51005] [client 52.243.60.223:16522] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abX1GCknK4c779bcQqGYYgAAAVA"]
[Sun Mar 15 07:54:01.427231 2026] [:error] [pid 50986:tid 51008] [client 52.243.60.223:16538] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abX1GSknK4c779bcQqGYZAAAAVM"]
[Sun Mar 15 07:54:01.908976 2026] [:error] [pid 38645:tid 38654] [client 52.243.60.223:16525] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/randkeyword.PhP7"] [unique_id "abX1GRFPHtsDUuVrWDaCVAAAAMc"]
[Sun Mar 15 08:56:56.677555 2026] [:error] [pid 38540:tid 38599] [client 188.165.217.198:58764] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abYD2F8bnHsJ1dE90bIJmwAAAE0"]
[Sun Mar 15 08:57:02.038159 2026] [:error] [pid 38541:tid 38634] [client 188.165.217.198:32896] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abYD3nuOpex8jIO0jt4ScQAAAJU"]
[Sun Mar 15 08:57:21.475979 2026] [:error] [pid 38540:tid 38608] [client 188.165.217.198:41588] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abYD8V8bnHsJ1dE90bIJqwAAAFY"]
[Sun Mar 15 08:57:32.447981 2026] [:error] [pid 50986:tid 51004] [client 188.165.217.198:48438] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abYD_CknK4c779bcQqG0OwAAAU8"]
[Sun Mar 15 09:01:13.974925 2026] [:error] [pid 38541:tid 38636] [client 188.165.217.198:36994] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abYE2XuOpex8jIO0jt4ThgAAAJc"]
[Sun Mar 15 09:03:58.006698 2026] [:error] [pid 50986:tid 50990] [client 188.165.217.198:42964] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "abYFfiknK4c779bcQqG3IwAAAUI"]
[Sun Mar 15 09:04:06.029403 2026] [:error] [pid 38541:tid 38633] [client 135.181.180.59:54216] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abYFhnuOpex8jIO0jt4VFQAAAJQ"]
[Sun Mar 15 09:04:08.002270 2026] [:error] [pid 9995:tid 10009] [client 135.181.180.59:54220] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abYFiAa8xkcaSmgTbwglPAAAAQs"]
[Sun Mar 15 09:04:13.012463 2026] [:error] [pid 38541:tid 38615] [client 188.165.217.198:48772] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "abYFjXuOpex8jIO0jt4VGwAAAII"]
[Sun Mar 15 09:04:25.621706 2026] [:error] [pid 50986:tid 51004] [client 135.181.180.59:55072] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abYFmSknK4c779bcQqG3zQAAAU8"]
[Sun Mar 15 09:04:27.610756 2026] [:error] [pid 38645:tid 38647] [client 135.181.180.59:55074] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abYFmxFPHtsDUuVrWDaSZQAAAMA"]
[Sun Mar 15 09:04:29.529860 2026] [:error] [pid 38645:tid 38663] [client 188.165.217.198:54176] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "abYFnRFPHtsDUuVrWDaSaAAAANA"]
[Sun Mar 15 09:04:29.659957 2026] [:error] [pid 50986:tid 50997] [client 135.181.180.59:55080] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abYFnSknK4c779bcQqG32AAAAUg"]
[Sun Mar 15 09:04:31.542634 2026] [:error] [pid 50986:tid 51013] [client 135.181.180.59:55092] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abYFnyknK4c779bcQqG33QAAAVg"]
[Sun Mar 15 09:04:33.438875 2026] [:error] [pid 50986:tid 50993] [client 135.181.180.59:55102] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abYFoSknK4c779bcQqG34wAAAUU"]
[Sun Mar 15 09:04:35.487796 2026] [:error] [pid 50986:tid 51008] [client 135.181.180.59:45664] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abYFoyknK4c779bcQqG39gAAAVM"]
[Sun Mar 15 09:04:37.373721 2026] [:error] [pid 50986:tid 50992] [client 135.181.180.59:45672] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abYFpSknK4c779bcQqG3_gAAAUQ"]
[Sun Mar 15 09:04:38.002618 2026] [:error] [pid 50986:tid 50997] [client 188.165.217.198:57642] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "abYFpiknK4c779bcQqG4AAAAAUg"]
[Sun Mar 15 09:04:39.296178 2026] [:error] [pid 50986:tid 51004] [client 135.181.180.59:45688] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abYFpyknK4c779bcQqG4AgAAAU8"]
[Sun Mar 15 09:04:41.194931 2026] [:error] [pid 38541:tid 38622] [client 135.181.180.59:45690] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abYFqXuOpex8jIO0jt4VQQAAAIk"]
[Sun Mar 15 09:04:43.227134 2026] [:error] [pid 50986:tid 51008] [client 135.181.180.59:45698] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abYFqyknK4c779bcQqG4CAAAAVM"]
[Sun Mar 15 09:04:45.111498 2026] [:error] [pid 38541:tid 38623] [client 135.181.180.59:49024] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abYFrXuOpex8jIO0jt4VRQAAAIo"]
[Sun Mar 15 09:04:47.053009 2026] [:error] [pid 50986:tid 50998] [client 135.181.180.59:49040] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abYFryknK4c779bcQqG4FQAAAUk"]
[Sun Mar 15 09:04:49.166245 2026] [:error] [pid 38541:tid 38632] [client 135.181.180.59:49044] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abYFsXuOpex8jIO0jt4VSwAAAJM"]
[Sun Mar 15 09:04:51.086576 2026] [:error] [pid 38540:tid 38591] [client 135.181.180.59:49058] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abYFs18bnHsJ1dE90bIKvAAAAEU"]
[Sun Mar 15 09:04:53.003353 2026] [:error] [pid 50986:tid 50990] [client 135.181.180.59:49060] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abYFtSknK4c779bcQqG4IwAAAUI"]
[Sun Mar 15 09:04:54.923596 2026] [:error] [pid 50986:tid 51004] [client 135.181.180.59:34402] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abYFtiknK4c779bcQqG4JgAAAU8"]
[Sun Mar 15 09:04:58.998470 2026] [:error] [pid 38540:tid 38594] [client 135.181.180.59:34416] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abYFul8bnHsJ1dE90bIKwwAAAEg"]
[Sun Mar 15 09:05:02.826498 2026] [:error] [pid 50986:tid 50997] [client 135.181.180.59:34432] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abYFviknK4c779bcQqG4MgAAAUg"]
[Sun Mar 15 09:07:42.681653 2026] [:error] [pid 38540:tid 38592] [client 188.165.217.198:40278] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abYGXl8bnHsJ1dE90bILOwAAAEY"]
[Sun Mar 15 09:07:54.167746 2026] [:error] [pid 38645:tid 38670] [client 188.165.217.198:43326] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abYGahFPHtsDUuVrWDaTJwAAANc"]
[Sun Mar 15 09:08:08.822766 2026] [:error] [pid 38645:tid 38667] [client 188.165.217.198:48846] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abYGeBFPHtsDUuVrWDaTLwAAANQ"]
[Sun Mar 15 09:08:21.814677 2026] [:error] [pid 50986:tid 50998] [client 188.165.217.198:53290] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abYGhSknK4c779bcQqG5vQAAAUk"]
[Sun Mar 15 10:41:50.822587 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.91:47433] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 10:41:53.103118 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.91:47433] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 15 10:41:53.501209 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.91:47433] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "abYccRFPHtsDUuVrWDapBQAAANQ"]
[Sun Mar 15 10:41:54.315892 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 10:41:54.734484 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 15 10:41:55.142432 2026] [:error] [pid 38536:tid 38554] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 10:41:55.558133 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 15 10:41:55.968326 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 10:41:56.389937 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 10:41:56.838362 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 15 10:41:57.249587 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 15 10:41:57.693450 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 15 10:41:58.116595 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 15 10:41:58.533188 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 15 10:41:58.951145 2026] [:error] [pid 38536:tid 38554] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 10:41:59.361310 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 15 10:41:59.771817 2026] [:error] [pid 38536:tid 38573] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 10:42:00.183648 2026] [:error] [pid 38536:tid 38554] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 15 10:42:00.592866 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 10:42:01.023216 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 15 10:42:01.432455 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 15 10:42:01.851420 2026] [:error] [pid 38536:tid 38573] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sun Mar 15 10:42:02.261157 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 15 10:42:02.669713 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 15 10:42:03.083248 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 15 10:42:03.492322 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 15 10:42:03.902458 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 15 10:42:04.320935 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 15 10:42:04.729592 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 15 10:42:05.146390 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 15 10:42:06.366074 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 15 10:42:06.772976 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 15 10:42:07.183411 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 15 10:42:07.597989 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 15 10:42:08.011078 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 15 10:42:08.425363 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.62:51773] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 15 10:42:08.830285 2026] [:error] [pid 38536:tid 38573] [client 212.30.33.62:51773] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "abYcgPpTEqkVJ0rBEWvDPQAAABQ"]
[Sun Mar 15 10:42:09.632024 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 15 10:42:10.063352 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 15 10:42:10.468755 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 15 10:42:10.872369 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 15 10:42:11.272849 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 15 10:42:11.676073 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 15 10:42:12.079604 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 15 10:42:12.483479 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 15 10:42:12.885511 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 15 10:42:13.291869 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 15 10:42:13.704390 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 10:42:14.103467 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 15 10:42:14.518434 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 15 10:42:14.921987 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 15 10:42:15.325615 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 15 10:42:15.733475 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sun Mar 15 10:42:16.136902 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 15 10:42:16.548318 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 15 10:42:16.948679 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 15 10:42:17.357710 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 15 10:42:17.758601 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 15 10:42:18.563398 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 15 10:42:18.978775 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 15 10:42:19.381079 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 15 10:42:19.784580 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 15 10:42:20.187499 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 15 10:42:20.590160 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 15 10:42:21.000861 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 15 10:42:21.824343 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 15 10:42:22.633509 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 15 10:42:23.033935 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 15 10:42:23.440531 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 15 10:42:23.845655 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 15 10:42:24.249315 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 15 10:42:24.672801 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 15 10:42:25.073758 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 15 10:42:25.483986 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 15 10:42:25.932383 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.80:63911] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 15 10:42:26.330249 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.80:63911] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "abYckhFPHtsDUuVrWDaqAQAAAMc"]
[Sun Mar 15 10:42:27.143088 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 15 10:42:27.557711 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 15 10:42:27.961516 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 15 10:42:28.367844 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 15 10:42:28.782673 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 15 10:42:29.184663 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Mar 15 10:42:29.591215 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Mar 15 10:42:29.992003 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 15 10:42:30.890609 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 15 10:42:31.706065 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 15 10:42:32.108023 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Mar 15 10:42:32.509222 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Mar 15 10:42:32.912990 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 15 10:42:33.316800 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 15 10:42:33.725070 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 15 10:42:34.129558 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 15 10:42:34.532744 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.53:47331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Mar 15 10:42:35.340354 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.53:47331] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abYcmxFPHtsDUuVrWDaqYwAAAMI"]
[Sun Mar 15 10:42:36.149435 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.225:44145] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abYcnBFPHtsDUuVrWDaqbQAAAMk"]
[Sun Mar 15 10:42:39.502448 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.60:46279] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abYcn18bnHsJ1dE90bIcGAAAAFI"]
[Sun Mar 15 10:42:40.701104 2026] [:error] [pid 9995:tid 10014] [client 212.30.33.229:43279] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abYcoAa8xkcaSmgTbwgvPgAAARA"]
[Sun Mar 15 10:42:42.339190 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.69:53113] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abYconuOpex8jIO0jt4ylAAAAIg"]
[Sun Mar 15 10:42:45.572883 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.179:35767] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abYcpV8bnHsJ1dE90bIcRAAAAFA"]
[Sun Mar 15 10:42:50.831151 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.92:27905] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Mar 15 10:42:51.234587 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.92:27905] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "abYcq_pTEqkVJ0rBEWvEkAAAAAM"]
[Sun Mar 15 10:42:52.469587 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.75:29073] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abYcrCknK4c779bcQqHijgAAAU0"]
[Sun Mar 15 10:42:54.118317 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.100:54251] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abYcrnuOpex8jIO0jt4y_gAAAIo"]
[Sun Mar 15 10:42:55.781580 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.89:60827] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abYcrxFPHtsDUuVrWDarNQAAAMQ"]
[Sun Mar 15 10:42:56.579169 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.60:22959] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abYcsCknK4c779bcQqHixwAAAVM"]
[Sun Mar 15 10:42:57.805125 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.96:22125] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abYcsRFPHtsDUuVrWDarUQAAANQ"]
[Sun Mar 15 10:42:59.439997 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.65:44133] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abYcs18bnHsJ1dE90bIc5AAAAEA"]
[Sun Mar 15 10:43:00.245830 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.82:52031] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abYctCknK4c779bcQqHjIwAAAUg"]
[Sun Mar 15 10:43:01.114003 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.78:41497] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abYctRFPHtsDUuVrWDarbwAAAMo"]
[Sun Mar 15 10:43:02.731408 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.76:27741] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abYctvpTEqkVJ0rBEWvE2wAAABI"]
[Sun Mar 15 10:43:03.597697 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.73:62189] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abYct3uOpex8jIO0jt4zYgAAAIs"]
[Sun Mar 15 10:43:04.399594 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.69:49335] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abYcuPpTEqkVJ0rBEWvE7gAAAAg"]
[Sun Mar 15 10:43:05.204512 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.100:22757] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abYcuV8bnHsJ1dE90bIdKgAAAEk"]
[Sun Mar 15 10:43:06.011320 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.78:28931] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abYcul8bnHsJ1dE90bIdOAAAAEo"]
[Sun Mar 15 10:43:07.246319 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.59:50477] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "abYcu18bnHsJ1dE90bIdSQAAAE0"]
[Sun Mar 15 10:43:08.069625 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.99:62475] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abYcvPpTEqkVJ0rBEWvFIgAAAA8"]
[Sun Mar 15 10:43:08.887997 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.77:21779] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "abYcvHuOpex8jIO0jt4zmAAAAIw"]
[Sun Mar 15 10:43:10.104350 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.83:32345] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abYcvl8bnHsJ1dE90bIdagAAAFA"]
[Sun Mar 15 10:43:11.752040 2026] [:error] [pid 50986:tid 51009] [client 212.30.33.71:57987] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "abYcvyknK4c779bcQqHkIwAAAVQ"]
[Sun Mar 15 10:43:12.556716 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.229:55615] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "abYcwAa8xkcaSmgTbwgwUgAAAQA"]
[Sun Mar 15 10:43:15.859595 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.74:54799] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "abYcwyknK4c779bcQqHkfQAAAU8"]
[Sun Mar 15 10:43:19.219527 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.89:26435] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "abYcxwa8xkcaSmgTbwgwtAAAAQo"]
[Sun Mar 15 10:43:20.022790 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.52:53567] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abYcyF8bnHsJ1dE90bIdxQAAAEM"]
[Sun Mar 15 10:43:20.818127 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.63:53269] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abYcyBFPHtsDUuVrWDasJQAAAMk"]
[Sun Mar 15 10:43:21.629024 2026] [:error] [pid 38541:tid 38626] [client 212.30.33.94:47441] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 15 10:43:23.642665 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.94:47441] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abYcy3uOpex8jIO0jt40TQAAAJA"]
[Sun Mar 15 10:43:25.280149 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.228:43651] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "abYczSknK4c779bcQqHk4QAAAVc"]
[Sun Mar 15 10:43:26.942387 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.57:24477] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abYczhFPHtsDUuVrWDasVQAAAMU"]
[Sun Mar 15 10:43:28.185526 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.90:36739] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "abYc0MIUXZJLmk_gYCOYYQAAAZg"]
[Sun Mar 15 10:43:28.988467 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.78:41949] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 15 10:43:30.594453 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.78:41949] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abYc0iknK4c779bcQqHlZAAAAUU"]
[Sun Mar 15 10:43:31.442697 2026] [:error] [pid 38540:tid 38598] [client 212.30.33.52:36285] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "abYc018bnHsJ1dE90bIedQAAAEw"]
[Sun Mar 15 10:43:33.070357 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.166:36217] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abYc1Qa8xkcaSmgTbwgw8QAAAQU"]
[Sun Mar 15 10:43:33.883798 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.54:57121] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abYc1cIUXZJLmk_gYCOYvwAAAYk"]
[Sun Mar 15 10:43:35.957665 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.68:35871] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 15 10:43:37.621134 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.68:35871] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abYc2SknK4c779bcQqHlrQAAAUU"]
[Sun Mar 15 10:43:38.434646 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.56:36567] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "abYc2vpTEqkVJ0rBEWvF6gAAAAY"]
[Sun Mar 15 10:43:40.058938 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.97:56651] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abYc3HuOpex8jIO0jt408AAAAIw"]
[Sun Mar 15 10:43:40.866473 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.87:24963] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "abYc3HuOpex8jIO0jt41AAAAAIw"]
[Sun Mar 15 10:43:43.349481 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.55:20481] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "abYc38IUXZJLmk_gYCOZNgAAAYc"]
[Sun Mar 15 10:43:44.611594 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.77:23683] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abYc4BFPHtsDUuVrWDas8QAAAM4"]
[Sun Mar 15 10:43:46.285085 2026] [:error] [pid 9995:tid 10005] [client 212.30.33.76:33963] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "abYc4ga8xkcaSmgTbwgxUwAAAQc"]
[Sun Mar 15 10:43:47.095734 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.91:27851] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abYc418bnHsJ1dE90bIfKAAAAEE"]
[Sun Mar 15 10:43:47.920756 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.84:48327] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abYc4yknK4c779bcQqHmHQAAAU0"]
[Sun Mar 15 10:43:48.741677 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.71:55699] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abYc5HuOpex8jIO0jt41WQAAAJU"]
[Sun Mar 15 10:43:50.373778 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.98:25757] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abYc5hFPHtsDUuVrWDatZgAAANI"]
[Sun Mar 15 10:43:52.028652 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.66:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Mar 15 10:43:54.045816 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.66:36107] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abYc6hFPHtsDUuVrWDatxwAAAMk"]
[Sun Mar 15 10:43:56.973196 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.86:35735] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "abYc7HuOpex8jIO0jt41nwAAAIk"]
[Sun Mar 15 10:43:57.785341 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.64:34515] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "abYc7SknK4c779bcQqHm3wAAAVU"]
[Sun Mar 15 10:43:58.993319 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.80:63409] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abYc7sIUXZJLmk_gYCOZogAAAYU"]
[Sun Mar 15 10:44:01.120656 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.58:60933] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Mar 15 10:44:01.941723 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.58:60933] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "abYc8fpTEqkVJ0rBEWvGjwAAAAc"]
[Sun Mar 15 10:44:03.156358 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.75:25933] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "abYc8yknK4c779bcQqHnGwAAAVY"]
[Sun Mar 15 10:44:04.359800 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.99:52697] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "abYc9CknK4c779bcQqHnKgAAAUE"]
[Sun Mar 15 10:44:05.565265 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.90:47797] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abYc9cIUXZJLmk_gYCOaBAAAAYc"]
[Sun Mar 15 10:44:07.213046 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.166:57453] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abYc9_pTEqkVJ0rBEWvGywAAAAo"]
[Sun Mar 15 10:44:08.020174 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.225:64291] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abYc-MIUXZJLmk_gYCOaIgAAAYc"]
[Sun Mar 15 10:44:10.479780 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.68:64339] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "abYc-iknK4c779bcQqHnZwAAAU8"]
[Sun Mar 15 10:44:13.011645 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.225:30685] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "abYc_SknK4c779bcQqHnggAAAVY"]
[Sun Mar 15 10:44:13.843638 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.190:39317] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 15 10:44:18.252701 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.190:39317] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Mar 15 10:44:19.500854 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.190:39317] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "abYdA3uOpex8jIO0jt42nwAAAIw"]
[Sun Mar 15 10:44:20.309111 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.225:54787] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abYdBCknK4c779bcQqHn4gAAAVU"]
[Sun Mar 15 10:44:21.525641 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.65:21631] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abYdBSknK4c779bcQqHoAwAAAUA"]
[Sun Mar 15 10:44:22.358580 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.225:49849] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "abYdBl8bnHsJ1dE90bIgSAAAAE0"]
[Sun Mar 15 10:44:23.611683 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.83:40741] [client 212.30.33.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.83, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "abYdB_pTEqkVJ0rBEWvHUwAAAAY"]
[Sun Mar 15 10:44:24.030831 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.83:40741] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Mar 15 10:44:26.535074 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.83:40741] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "abYdCvpTEqkVJ0rBEWvHaAAAAAA"]
[Sun Mar 15 10:44:27.759335 2026] [:error] [pid 9995:tid 10009] [client 212.30.33.55:49275] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Mar 15 10:44:28.165407 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.55:49275] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "abYdDAa8xkcaSmgTbwgybwAAAQU"]
[Sun Mar 15 10:44:29.823193 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.76:55915] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky.php"] [unique_id "abYdDSknK4c779bcQqHonwAAAUQ"]
[Sun Mar 15 10:44:30.660338 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.80:40941] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abYdDsIUXZJLmk_gYCObOQAAAY8"]
[Sun Mar 15 10:44:31.492424 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.51:31199] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abYdDxFPHtsDUuVrWDaveQAAAMA"]
[Sun Mar 15 10:44:32.296866 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.69:41175] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Mar 15 10:44:33.904549 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.69:41175] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abYdESknK4c779bcQqHpFQAAAU0"]
[Sun Mar 15 10:44:34.714580 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.164:60005] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "abYdEhFPHtsDUuVrWDavoQAAAMU"]
[Sun Mar 15 10:44:35.958686 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.228:52001] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Mar 15 10:44:36.367195 2026] [:error] [pid 38536:tid 38573] [client 212.30.33.228:52001] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "abYdFPpTEqkVJ0rBEWvHogAAABQ"]
[Sun Mar 15 10:44:38.025784 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.225:32375] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abYdFhFPHtsDUuVrWDavywAAANE"]
[Sun Mar 15 10:44:39.269270 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.61:53953] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abYdF18bnHsJ1dE90bIg5wAAAEs"]
[Sun Mar 15 10:44:40.109288 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.52:26417] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Mar 15 10:44:40.526173 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.52:26417] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abYdGBFPHtsDUuVrWDav5QAAANU"]
[Sun Mar 15 10:44:41.760411 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.190:21823] [client 212.30.33.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.190, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abYdGV8bnHsJ1dE90bIg_gAAAEE"]
[Sun Mar 15 10:44:41.764520 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.190:21823] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 10:44:42.170433 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.190:21823] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "abYdGl8bnHsJ1dE90bIhBwAAAEQ"]
[Sun Mar 15 10:44:43.819368 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.81:58295] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abYdGxFPHtsDUuVrWDawDgAAAMA"]
[Sun Mar 15 10:44:45.497981 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.81:63999] [client 212.30.33.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.81, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abYdHfpTEqkVJ0rBEWvIIwAAAAg"]
[Sun Mar 15 10:44:46.744999 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.81:63999] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abYdHvpTEqkVJ0rBEWvIMAAAABI"]
[Sun Mar 15 10:44:47.567949 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.87:34685] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "abYdHxFPHtsDUuVrWDawIgAAAMw"]
[Sun Mar 15 10:44:48.364927 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.81:33283] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abYdIBFPHtsDUuVrWDawLQAAAMw"]
[Sun Mar 15 10:44:49.162310 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.67:38379] [client 212.30.33.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.67, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abYdIXuOpex8jIO0jt434gAAAIs"]
[Sun Mar 15 10:44:50.786583 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.67:38379] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Mar 15 10:44:51.591702 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.67:38379] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Mar 15 10:44:51.989476 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.67:38379] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abYdI3uOpex8jIO0jt44CgAAAIY"]
[Sun Mar 15 10:44:52.831024 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.72:63429] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Mar 15 10:44:53.696043 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.72:63429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Mar 15 10:44:54.514249 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.72:63429] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "abYdJvpTEqkVJ0rBEWvIlAAAABE"]
[Sun Mar 15 10:44:55.354007 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.229:30763] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Mar 15 10:44:56.192441 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.229:30763] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abYdKBFPHtsDUuVrWDawfgAAANc"]
[Sun Mar 15 10:44:57.421560 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.57:22931] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Mar 15 10:44:57.846061 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.57:22931] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Mar 15 10:44:58.252399 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.57:22931] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "abYdKiknK4c779bcQqHqQQAAAVY"]
[Sun Mar 15 10:44:59.085435 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.95:54467] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "abYdK8IUXZJLmk_gYCOcCgAAAYE"]
[Sun Mar 15 10:44:59.923985 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.58:46537] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abYdKwa8xkcaSmgTbwgznQAAAQw"]
[Sun Mar 15 10:45:01.167866 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.60:45277] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "abYdLfpTEqkVJ0rBEWvI4AAAAAo"]
[Sun Mar 15 10:45:01.996905 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.70:57951] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "abYdLfpTEqkVJ0rBEWvI6AAAAAo"]
[Sun Mar 15 10:45:04.863723 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.213:50339] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Mar 15 10:45:05.274344 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.213:50339] [client 212.30.33.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.213, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "abYdMXuOpex8jIO0jt447QAAAIs"]
[Sun Mar 15 10:45:05.682710 2026] [:error] [pid 38541:tid 38627] [client 212.30.33.213:50339] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Mar 15 10:45:06.084785 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.213:50339] [client 212.30.33.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.213, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abYdMnuOpex8jIO0jt45CgAAAIY"]
[Sun Mar 15 10:45:06.491766 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.213:50339] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "abYdMnuOpex8jIO0jt45FQAAAIY"]
[Sun Mar 15 10:45:07.309620 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.61:33439] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Mar 15 10:45:07.711567 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.61:33439] [client 212.30.33.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.61, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abYdMxFPHtsDUuVrWDaw_AAAAMw"]
[Sun Mar 15 10:45:07.720411 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.61:33439] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Mar 15 10:45:08.975429 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.61:33439] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Mar 15 10:45:09.377396 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.61:33439] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abYdNRFPHtsDUuVrWDaxEQAAAM8"]
[Sun Mar 15 10:45:10.173384 2026] [:error] [pid 38540:tid 38610] [client 212.30.33.99:28047] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abYdNl8bnHsJ1dE90bIiLQAAAFg"]
[Sun Mar 15 10:45:15.826039 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.57:26601] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abYdO8IUXZJLmk_gYCOcowAAAZE"]
[Sun Mar 15 10:45:17.048809 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.72:46323] [client 212.30.33.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.72, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abYdPcIUXZJLmk_gYCOcsQAAAYw"]
[Sun Mar 15 10:45:18.279800 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.72:46323] [client 212.30.33.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.72, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abYdPsIUXZJLmk_gYCOcwgAAAY4"]
[Sun Mar 15 10:45:18.704083 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.72:46323] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iRSzrsOUEP.php
[Sun Mar 15 10:45:19.515355 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.72:46323] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abYdP8IUXZJLmk_gYCOc0AAAAY4"]
[Sun Mar 15 10:45:20.316577 2026] [:error] [pid 38540:tid 38592] [client 212.30.33.103:47247] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "abYdQF8bnHsJ1dE90bIijQAAAEY"]
[Sun Mar 15 10:45:22.844280 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.59:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Mar 15 10:45:26.654266 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.59:51865] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "abYdRiknK4c779bcQqHr5QAAAUE"]
[Sun Mar 15 10:45:27.475596 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.94:51301] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abYdRxFPHtsDUuVrWDax4wAAAM0"]
[Sun Mar 15 10:45:28.728904 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.62:31025] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl.php"] [unique_id "abYdSAa8xkcaSmgTbwg0YwAAAQ4"]
[Sun Mar 15 10:45:30.840539 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.57:57817] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abYdSnuOpex8jIO0jt46DAAAAJA"]
[Sun Mar 15 10:45:32.142479 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.94:47029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Mar 15 10:45:32.563281 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.94:47029] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abYdTCknK4c779bcQqHsWwAAAVc"]
[Sun Mar 15 10:45:33.373698 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.73:32635] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "abYdTSknK4c779bcQqHscQAAAU0"]
[Sun Mar 15 10:45:34.975011 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.93:36315] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "abYdTga8xkcaSmgTbwg0rQAAAQE"]
[Sun Mar 15 10:45:35.817169 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.52:29751] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abYdTxFPHtsDUuVrWDayLQAAAM0"]
[Sun Mar 15 10:45:37.038358 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.67:46871] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abYdUV8bnHsJ1dE90bIjVQAAAE0"]
[Sun Mar 15 10:45:38.245420 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.73:56617] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abYdUiknK4c779bcQqHsvAAAAUg"]
[Sun Mar 15 10:45:39.896462 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.225:25507] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abYdUwa8xkcaSmgTbwg04wAAAQw"]
[Sun Mar 15 10:45:41.535004 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.65:56087] [client 212.30.33.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.65, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abYdVfpTEqkVJ0rBEWvKbwAAAA4"]
[Sun Mar 15 10:45:42.783932 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.65:56087] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Mar 15 10:45:44.045434 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.65:56087] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abYdWPpTEqkVJ0rBEWvKgAAAAA4"]
[Sun Mar 15 10:45:45.321956 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.164:54045] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Mar 15 10:45:45.744909 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.164:54045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Mar 15 10:45:46.164524 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.164:54045] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Mar 15 10:45:46.586185 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.164:54045] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abYdWvpTEqkVJ0rBEWvKpwAAABY"]
[Sun Mar 15 10:45:47.822335 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.103:40579] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "abYdW18bnHsJ1dE90bIjrwAAAEQ"]
[Sun Mar 15 10:45:48.631075 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.59:59767] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 15 10:45:49.034785 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.59:59767] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Mar 15 10:45:49.436250 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.59:59767] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Mar 15 10:45:50.636211 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.59:59767] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abYdXnuOpex8jIO0jt47OAAAAIc"]
[Sun Mar 15 10:45:51.465683 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.190:58193] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Mar 15 10:45:52.286011 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.190:58193] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Mar 15 10:45:52.715913 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.190:58193] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Mar 15 10:45:53.529410 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.190:58193] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abYdYRFPHtsDUuVrWDay3wAAANA"]
[Sun Mar 15 10:45:54.335968 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.89:43523] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "abYdYnuOpex8jIO0jt47hAAAAJI"]
[Sun Mar 15 10:45:55.168361 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.92:30443] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 15 10:45:55.990965 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.92:30443] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abYdY8IUXZJLmk_gYCOe1QAAAY8"]
[Sun Mar 15 10:45:57.622878 2026] [:error] [pid 50986:tid 50990] [client 212.30.33.52:59207] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Mar 15 10:45:58.849267 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.52:59207] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "abYdZiknK4c779bcQqHtuQAAAUw"]
[Sun Mar 15 10:45:59.650436 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.83:44245] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abYdZwa8xkcaSmgTbwg1uQAAAQ4"]
[Sun Mar 15 10:46:03.427462 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.103:35233] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abYdaxFPHtsDUuVrWDazOQAAANE"]
[Sun Mar 15 10:46:04.239980 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.70:29127] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abYdbHuOpex8jIO0jt47_gAAAJI"]
[Sun Mar 15 10:46:05.059076 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.82:44485] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "abYdbRFPHtsDUuVrWDazVAAAAMQ"]
[Sun Mar 15 10:46:06.691608 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.97:38275] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abYdbsIUXZJLmk_gYCOfiAAAAZE"]
[Sun Mar 15 10:46:07.501149 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.166:29025] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Mar 15 10:46:07.916724 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.166:29025] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abYdbyknK4c779bcQqHuXQAAAUo"]
[Sun Mar 15 10:46:08.740896 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.75:51287] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/about.php"] [unique_id "abYdcMIUXZJLmk_gYCOfrgAAAZc"]
[Sun Mar 15 10:46:10.404595 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.60:64597] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abYdcsIUXZJLmk_gYCOf2wAAAZA"]
[Sun Mar 15 10:46:11.203358 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.164:55149] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abYdcwa8xkcaSmgTbwg2LgAAARM"]
[Sun Mar 15 10:46:16.166272 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.90:25973] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Mar 15 10:46:17.422145 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.90:25973] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "abYdeV8bnHsJ1dE90bIkzQAAAE8"]
[Sun Mar 15 10:46:18.255927 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.60:53077] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Mar 15 10:46:19.971320 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.60:53077] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abYde3uOpex8jIO0jt48dgAAAIg"]
[Sun Mar 15 10:46:20.773176 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.190:65279] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abYdfPpTEqkVJ0rBEWvL-gAAAA0"]
[Sun Mar 15 10:46:21.574428 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.84:45005] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "abYdfSknK4c779bcQqHwEAAAAUQ"]
[Sun Mar 15 10:46:22.379526 2026] [:error] [pid 38541:tid 38630] [client 212.30.33.94:42319] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abYdfnuOpex8jIO0jt48igAAAJE"]
[Sun Mar 15 10:46:23.209535 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.61:60121] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "abYdfyknK4c779bcQqHwTQAAAU0"]
[Sun Mar 15 10:46:24.009391 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.59:45201] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abYdgCknK4c779bcQqHwZgAAAVU"]
[Sun Mar 15 10:46:24.828067 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.229:31141] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abYdgPpTEqkVJ0rBEWvMHAAAABU"]
[Sun Mar 15 10:46:25.647962 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.229:43667] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abYdgRFPHtsDUuVrWDaz8QAAAMc"]
[Sun Mar 15 10:46:28.071138 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.71:28345] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abYdhBFPHtsDUuVrWDa0FAAAAMI"]
[Sun Mar 15 10:46:29.278385 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.72:38247] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abYdhSknK4c779bcQqHwxQAAAUw"]
[Sun Mar 15 10:46:31.738936 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.54:55881] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abYdhyknK4c779bcQqHw-AAAAUQ"]
[Sun Mar 15 10:46:33.800374 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.86:56155] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abYdicIUXZJLmk_gYCOhhQAAAYE"]
[Sun Mar 15 10:46:34.606915 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.228:55441] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abYdil8bnHsJ1dE90bIlkQAAAEM"]
[Sun Mar 15 10:46:35.433575 2026] [:error] [pid 50986:tid 51006] [client 212.30.33.70:36023] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abYdiyknK4c779bcQqHxOQAAAVE"]
[Sun Mar 15 10:46:36.237510 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.52:57877] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abYdjPpTEqkVJ0rBEWvMpAAAABM"]
[Sun Mar 15 10:46:37.488203 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.86:52491] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abYdjRFPHtsDUuVrWDa0YwAAANc"]
[Sun Mar 15 10:46:38.289107 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.225:44745] File does not exist: /usr/local/apache/htdocs/suspended-page/firewall.php
[Sun Mar 15 10:46:40.336309 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.225:44745] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Mar 15 10:46:41.560250 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.225:44745] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abYdkRFPHtsDUuVrWDa0mAAAAMo"]
[Sun Mar 15 10:46:42.372984 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.79:64785] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Mar 15 10:46:42.786724 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.79:64785] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abYdkhFPHtsDUuVrWDa0qAAAANg"]
[Sun Mar 15 10:46:44.832659 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.60:60129] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "abYdlHuOpex8jIO0jt49NgAAAIQ"]
[Sun Mar 15 10:46:46.075331 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.76:51157] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abYdliknK4c779bcQqHxyQAAAU0"]
[Sun Mar 15 10:46:47.720053 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.66:43345] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Mar 15 10:46:48.546779 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.66:43345] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "abYdmBFPHtsDUuVrWDa0_AAAANg"]
[Sun Mar 15 10:46:50.199729 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.79:22165] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "abYdmhFPHtsDUuVrWDa1DgAAAMY"]
[Sun Mar 15 10:46:51.116265 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.85:32063] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 10:46:51.523596 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.85:32063] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 15 10:46:51.924802 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.85:32063] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "abYdm8IUXZJLmk_gYCOirQAAAYo"]
[Sun Mar 15 10:46:52.681721 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.52:22279] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Sun Mar 15 10:46:52.729128 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 10:46:53.081518 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.52:22279] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abYdnRFPHtsDUuVrWDa1MwAAANI"]
[Sun Mar 15 10:46:53.137340 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 15 10:46:53.551182 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 10:46:53.877332 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.86:21705] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abYdnfpTEqkVJ0rBEWvNVwAAAAY"]
[Sun Mar 15 10:46:53.964896 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 15 10:46:54.372251 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 10:46:54.778904 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 10:46:55.087113 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.88:58341] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abYdn_pTEqkVJ0rBEWvNagAAABE"]
[Sun Mar 15 10:46:55.186659 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 15 10:46:55.598608 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 15 10:46:55.886674 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.54:53529] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abYdn8IUXZJLmk_gYCOi6gAAAYk"]
[Sun Mar 15 10:46:56.004543 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 15 10:46:56.412030 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 15 10:46:56.691388 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.67:62701] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "abYdoAa8xkcaSmgTbwg33AAAAQ0"]
[Sun Mar 15 10:46:56.822667 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 15 10:46:57.229438 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 10:46:57.647513 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 15 10:46:58.060340 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 10:46:58.347302 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.103:43229] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abYdohFPHtsDUuVrWDa1hwAAAM0"]
[Sun Mar 15 10:46:58.474024 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 15 10:46:58.904012 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 10:46:59.332828 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 15 10:46:59.743781 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 15 10:47:00.023021 2026] [:error] [pid 50986:tid 50998] [client 212.30.33.79:39403] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abYdpCknK4c779bcQqHySgAAAUk"]
[Sun Mar 15 10:47:00.174744 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sun Mar 15 10:47:00.581551 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 15 10:47:01.013769 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 15 10:47:01.258540 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.60:50571] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abYdpQa8xkcaSmgTbwg4EAAAAQA"]
[Sun Mar 15 10:47:01.432735 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 15 10:47:01.843888 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 15 10:47:02.075264 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.101:26253] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sun Mar 15 10:47:02.250931 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 15 10:47:02.483102 2026] [:error] [pid 50986:tid 50990] [client 212.30.33.101:26253] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYdpiknK4c779bcQqHyXQAAAUI"]
[Sun Mar 15 10:47:02.658946 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 15 10:47:03.066914 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 15 10:47:03.492581 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 15 10:47:03.897008 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 15 10:47:04.128938 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.95:26589] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abYdqCknK4c779bcQqHyhQAAAU8"]
[Sun Mar 15 10:47:04.306799 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 15 10:47:04.828148 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 15 10:47:04.927666 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.56:43761] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abYdqBFPHtsDUuVrWDa11wAAAM8"]
[Sun Mar 15 10:47:05.236196 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 15 10:47:05.659276 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 15 10:47:06.074440 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.55:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 15 10:47:06.480709 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.55:52229] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "abYdqhFPHtsDUuVrWDa14QAAANg"]
[Sun Mar 15 10:47:06.580026 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.63:37841] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abYdqiknK4c779bcQqHyxwAAAUY"]
[Sun Mar 15 10:47:07.301976 2026] [:error] [pid 9995:tid 10021] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 15 10:47:07.716586 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 15 10:47:08.120703 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 15 10:47:08.524932 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 15 10:47:08.928591 2026] [:error] [pid 9995:tid 10018] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 15 10:47:09.343336 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 15 10:47:09.753069 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 15 10:47:10.185841 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 15 10:47:10.607892 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 15 10:47:11.013490 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 15 10:47:11.418179 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 10:47:11.825780 2026] [:error] [pid 9995:tid 10022] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 15 10:47:12.230813 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 15 10:47:12.261330 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.75:58125] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "abYdsF8bnHsJ1dE90bInwQAAAEQ"]
[Sun Mar 15 10:47:12.638928 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 15 10:47:13.046691 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 15 10:47:13.452739 2026] [:error] [pid 9995:tid 10021] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sun Mar 15 10:47:13.502864 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.80:48051] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "abYdscIUXZJLmk_gYCOj0AAAAYQ"]
[Sun Mar 15 10:47:13.856985 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 15 10:47:14.272638 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 15 10:47:14.684963 2026] [:error] [pid 9995:tid 10004] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 15 10:47:14.733320 2026] [:error] [pid 9995:tid 10021] [client 212.30.33.77:33437] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "abYdsga8xkcaSmgTbwg4wgAAARc"]
[Sun Mar 15 10:47:15.097504 2026] [:error] [pid 9995:tid 10022] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 15 10:47:15.502649 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 15 10:47:15.545633 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.86:48533] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/shell.php"] [unique_id "abYdsxFPHtsDUuVrWDa2VgAAANM"]
[Sun Mar 15 10:47:16.319436 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 15 10:47:16.362606 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.91:30499] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "abYdtPpTEqkVJ0rBEWvOMAAAAAQ"]
[Sun Mar 15 10:47:16.728535 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 15 10:47:17.141421 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 15 10:47:17.550179 2026] [:error] [pid 9995:tid 10009] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 15 10:47:17.613168 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.86:39579] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/db.php"] [unique_id "abYdtcIUXZJLmk_gYCOkBgAAAY4"]
[Sun Mar 15 10:47:17.960565 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 15 10:47:18.366045 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 15 10:47:18.410648 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.81:52733] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "abYdtvpTEqkVJ0rBEWvOTAAAAAM"]
[Sun Mar 15 10:47:18.772811 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 15 10:47:19.233598 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.213:49585] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abYdtyknK4c779bcQqHzaAAAAUY"]
[Sun Mar 15 10:47:19.608097 2026] [:error] [pid 9995:tid 10018] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 15 10:47:20.043089 2026] [:error] [pid 38541:tid 38632] [client 212.30.33.92:61689] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sun Mar 15 10:47:20.424326 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 15 10:47:20.449313 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.92:61689] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abYduHuOpex8jIO0jt4_BwAAAIg"]
[Sun Mar 15 10:47:20.833697 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 15 10:47:21.245536 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 15 10:47:21.262039 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.95:52895] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/file.php"] [unique_id "abYduSknK4c779bcQqHzkgAAAU0"]
[Sun Mar 15 10:47:21.651408 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 15 10:47:22.059383 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.77:45267] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "abYduvpTEqkVJ0rBEWvObgAAAA8"]
[Sun Mar 15 10:47:22.059810 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 15 10:47:22.474881 2026] [:error] [pid 9995:tid 10015] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 15 10:47:22.883588 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 15 10:47:23.287007 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 15 10:47:23.690228 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.83:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 15 10:47:24.102658 2026] [:error] [pid 9995:tid 10021] [client 212.30.33.83:38049] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "abYdvAa8xkcaSmgTbwg5WwAAARc"]
[Sun Mar 15 10:47:24.129454 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.54:45783] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-wploader.php"] [unique_id "abYdvAa8xkcaSmgTbwg5XAAAAQk"]
[Sun Mar 15 10:47:24.923587 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 15 10:47:25.364488 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 15 10:47:25.398248 2026] [:error] [pid 38536:tid 38565] [client 212.30.33.59:21193] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "abYdvfpTEqkVJ0rBEWvOogAAAAw"]
[Sun Mar 15 10:47:25.772257 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 15 10:47:26.193361 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 15 10:47:26.607326 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 15 10:47:27.014788 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Mar 15 10:47:27.433893 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Mar 15 10:47:27.445482 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.89:61217] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/template-less.php"] [unique_id "abYdvyknK4c779bcQqHz0wAAAUg"]
[Sun Mar 15 10:47:27.846627 2026] [:error] [pid 38540:tid 38603] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 15 10:47:28.682569 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 15 10:47:29.124438 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.92:34751] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abYdwQa8xkcaSmgTbwg5nQAAARM"]
[Sun Mar 15 10:47:29.511727 2026] [:error] [pid 38540:tid 38588] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 15 10:47:29.919262 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Mar 15 10:47:29.941195 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.63:58403] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abYdwcIUXZJLmk_gYCOkygAAAZg"]
[Sun Mar 15 10:47:30.328788 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Mar 15 10:47:30.890284 2026] [:error] [pid 38540:tid 38610] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 15 10:47:31.185907 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.94:26355] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "abYdw18bnHsJ1dE90bIoqAAAAE4"]
[Sun Mar 15 10:47:31.297876 2026] [:error] [pid 38540:tid 38608] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 15 10:47:31.706797 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 15 10:47:32.113067 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 15 10:47:32.403546 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.53:23673] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abYdxCknK4c779bcQqH0NAAAAVI"]
[Sun Mar 15 10:47:32.526030 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.164:35207] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Mar 15 10:47:33.209870 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.81:25131] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bypass.php"] [unique_id "abYdxQa8xkcaSmgTbwg5ywAAAQI"]
[Sun Mar 15 10:47:35.296570 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.76:48313] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abYdx3uOpex8jIO0jt4_owAAAIg"]
[Sun Mar 15 10:47:35.499498 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.164:35207] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abYdx18bnHsJ1dE90bIo0QAAAE4"]
[Sun Mar 15 10:47:36.113310 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.166:41689] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abYdyF8bnHsJ1dE90bIo3wAAAEo"]
[Sun Mar 15 10:47:36.308658 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.51:34385] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abYdyCknK4c779bcQqH0iwAAAU0"]
[Sun Mar 15 10:47:36.918013 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.69:57075] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sun Mar 15 10:47:37.731328 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.69:57075] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abYdyfpTEqkVJ0rBEWvPCQAAAAM"]
[Sun Mar 15 10:47:39.004311 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.97:47867] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/system.php"] [unique_id "abYdy_pTEqkVJ0rBEWvPHwAAABY"]
[Sun Mar 15 10:47:39.591467 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.57:47235] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abYdyxFPHtsDUuVrWDa3QgAAAMo"]
[Sun Mar 15 10:47:40.654388 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.64:53825] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abYdzCknK4c779bcQqH0wwAAAUc"]
[Sun Mar 15 10:47:40.813539 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.72:43007] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abYdzHuOpex8jIO0jt4_5gAAAIQ"]
[Sun Mar 15 10:47:41.878514 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.90:21405] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abYdzRFPHtsDUuVrWDa3WgAAAMw"]
[Sun Mar 15 10:47:42.445606 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.100:38805] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abYdznuOpex8jIO0jt5AFwAAAJg"]
[Sun Mar 15 10:47:42.682397 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.98:47847] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abYdzsIUXZJLmk_gYCOlhwAAAYU"]
[Sun Mar 15 10:47:44.743127 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.81:52943] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abYd0PpTEqkVJ0rBEWvPYAAAAAs"]
[Sun Mar 15 10:47:45.541837 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.68:53429] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abYd0RFPHtsDUuVrWDa3hgAAANY"]
[Sun Mar 15 10:47:45.729084 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.95:64979] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abYd0fpTEqkVJ0rBEWvPbQAAAAU"]
[Sun Mar 15 10:47:46.353368 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.164:28499] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/category-double.php"] [unique_id "abYd0vpTEqkVJ0rBEWvPcgAAABE"]
[Sun Mar 15 10:47:47.187646 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.81:54463] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abYd018bnHsJ1dE90bIpagAAAEA"]
[Sun Mar 15 10:47:47.383222 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.64:58125] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Mar 15 10:47:47.794717 2026] [:error] [pid 38540:tid 38598] [client 212.30.33.64:58125] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "abYd018bnHsJ1dE90bIpcgAAAEw"]
[Sun Mar 15 10:47:47.991637 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.56:55253] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun Mar 15 10:47:48.815471 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.56:55253] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Mar 15 10:47:49.025936 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.58:30869] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abYd1cIUXZJLmk_gYCOl8AAAAY4"]
[Sun Mar 15 10:47:50.720312 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.66:37763] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abYd1ga8xkcaSmgTbwg6iQAAAQ8"]
[Sun Mar 15 10:47:52.353947 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.86:46947] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abYd2CknK4c779bcQqH1RAAAAU4"]
[Sun Mar 15 10:47:53.191392 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.73:34385] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abYd2SknK4c779bcQqH1SgAAAVI"]
[Sun Mar 15 10:47:53.759122 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.56:55253] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abYd2XuOpex8jIO0jt5AqwAAAJA"]
[Sun Mar 15 10:47:54.403278 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.51:53683] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abYd2hFPHtsDUuVrWDa39wAAANc"]
[Sun Mar 15 10:47:55.000251 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.69:64607] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abYd2hFPHtsDUuVrWDa4AQAAAMw"]
[Sun Mar 15 10:47:56.069368 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.65:49685] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abYd3MIUXZJLmk_gYCOmXQAAAZM"]
[Sun Mar 15 10:47:56.653378 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.229:21309] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/log.php"] [unique_id "abYd3CknK4c779bcQqH1fgAAAU4"]
[Sun Mar 15 10:47:56.913653 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.228:57637] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abYd3Aa8xkcaSmgTbwg6zwAAAQ0"]
[Sun Mar 15 10:47:57.512402 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.55:25281] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/simi.php"] [unique_id "abYd3RFPHtsDUuVrWDa4GwAAANU"]
[Sun Mar 15 10:47:57.744423 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.51:37297] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abYd3RFPHtsDUuVrWDa4IwAAAMs"]
[Sun Mar 15 10:47:59.194738 2026] [:error] [pid 42570:tid 42573] [client 212.30.33.88:58153] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Mar 15 10:47:59.422057 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.79:30387] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abYd3xFPHtsDUuVrWDa4UAAAANU"]
[Sun Mar 15 10:47:59.598499 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.88:58153] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abYd38IUXZJLmk_gYCOmlQAAAZA"]
[Sun Mar 15 10:48:00.239875 2026] [:error] [pid 38541:tid 38613] [client 212.30.33.84:58497] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abYd4HuOpex8jIO0jt5A4QAAAIA"]
[Sun Mar 15 10:48:01.103955 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.228:54965] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abYd4cIUXZJLmk_gYCOmpAAAAZU"]
[Sun Mar 15 10:48:01.267200 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.97:37695] [client 212.30.33.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.97, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abYd4SknK4c779bcQqH1uAAAAU4"]
[Sun Mar 15 10:48:01.917010 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.98:25173] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abYd4cIUXZJLmk_gYCOmtQAAAYo"]
[Sun Mar 15 10:48:02.076670 2026] [:error] [pid 50986:tid 50998] [client 212.30.33.97:37695] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abYd4iknK4c779bcQqH1ywAAAUk"]
[Sun Mar 15 10:48:02.739791 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.67:39965] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abYd4nuOpex8jIO0jt5A8wAAAJQ"]
[Sun Mar 15 10:48:02.904790 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.98:26341] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "abYd4iknK4c779bcQqH11gAAAU8"]
[Sun Mar 15 10:48:03.742164 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.61:52577] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "abYd4xFPHtsDUuVrWDa4eQAAAM8"]
[Sun Mar 15 10:48:03.936706 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.90:37679] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "abYd4xFPHtsDUuVrWDa4ewAAAM4"]
[Sun Mar 15 10:48:04.563877 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.76:34593] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Mar 15 10:48:04.753979 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.101:45317] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abYd5PpTEqkVJ0rBEWvQTAAAAAI"]
[Sun Mar 15 10:48:04.984472 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.76:34593] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sun Mar 15 10:48:05.588284 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.98:61375] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "abYd5SknK4c779bcQqH17QAAAU8"]
[Sun Mar 15 10:48:05.796585 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.76:34593] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Sun Mar 15 10:48:06.245769 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.76:34593] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Sun Mar 15 10:48:06.649492 2026] [:error] [pid 42570:tid 42591] [client 212.30.33.76:34593] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abYd5sIUXZJLmk_gYCOnVwAAAZI"]
[Sun Mar 15 10:48:06.805887 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.73:21293] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abYd5nuOpex8jIO0jt5BIAAAAJU"]
[Sun Mar 15 10:48:07.462669 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.100:44513] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Sun Mar 15 10:48:07.880335 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.100:44513] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abYd5xFPHtsDUuVrWDa4rwAAAMc"]
[Sun Mar 15 10:48:08.466436 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.229:20899] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "abYd6MIUXZJLmk_gYCOncAAAAYU"]
[Sun Mar 15 10:48:09.265069 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.82:41567] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "abYd6V8bnHsJ1dE90bIqmAAAAFQ"]
[Sun Mar 15 10:48:11.661160 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.68:21085] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abYd6_pTEqkVJ0rBEWvQrgAAABU"]
[Sun Mar 15 10:48:12.501336 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.67:42789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sun Mar 15 10:48:12.514438 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.85:53357] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/info.php"] [unique_id "abYd7MIUXZJLmk_gYCOn4AAAAYE"]
[Sun Mar 15 10:48:12.941506 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.67:42789] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/db.php"] [unique_id "abYd7MIUXZJLmk_gYCOn8gAAAYI"]
[Sun Mar 15 10:48:14.559477 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.83:47927] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abYd7sIUXZJLmk_gYCOoOwAAAYI"]
[Sun Mar 15 10:48:15.868354 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.62:23191] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/colour.php"] [unique_id "abYd78IUXZJLmk_gYCOoWQAAAZg"]
[Sun Mar 15 10:48:16.208165 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.83:35579] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/11.php"] [unique_id "abYd8F8bnHsJ1dE90bIq4QAAAEA"]
[Sun Mar 15 10:48:16.693883 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.95:25161] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abYd8MIUXZJLmk_gYCOoYgAAAZg"]
[Sun Mar 15 10:48:17.494211 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.72:53413] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abYd8cIUXZJLmk_gYCOoagAAAYg"]
[Sun Mar 15 10:48:17.819480 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.75:41139] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abYd8XuOpex8jIO0jt5BoQAAAIo"]
[Sun Mar 15 10:48:18.299525 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.103:34047] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 15 10:48:20.265044 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.229:33193] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/custom.functions.1736323659.php
[Sun Mar 15 10:48:20.331292 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.103:34047] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abYd9BFPHtsDUuVrWDa5RwAAANY"]
[Sun Mar 15 10:48:21.079840 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.229:33193] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abYd9RFPHtsDUuVrWDa5UQAAAMI"]
[Sun Mar 15 10:48:21.924133 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.70:27985] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Sun Mar 15 10:48:21.981666 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.78:55113] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "abYd9fpTEqkVJ0rBEWvRPgAAAAg"]
[Sun Mar 15 10:48:22.763108 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.70:27985] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abYd9hFPHtsDUuVrWDa5aAAAAMc"]
[Sun Mar 15 10:48:23.614312 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.66:46753] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abYd9wa8xkcaSmgTbwg73QAAARY"]
[Sun Mar 15 10:48:24.373663 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.62:34109] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abYd-CknK4c779bcQqH2lwAAAUY"]
[Sun Mar 15 10:48:24.860676 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.58:58371] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "abYd-PpTEqkVJ0rBEWvRagAAAAo"]
[Sun Mar 15 10:48:25.643251 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.95:63265] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/edit.php"] [unique_id "abYd-SknK4c779bcQqH2oQAAAVI"]
[Sun Mar 15 10:48:25.686577 2026] [:error] [pid 9995:tid 10017] [client 212.30.33.77:46839] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 15 10:48:27.383927 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.77:46839] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abYd-wa8xkcaSmgTbwg8JAAAAQM"]
[Sun Mar 15 10:48:28.193545 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.84:47313] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abYd_F8bnHsJ1dE90bIrfwAAAEs"]
[Sun Mar 15 10:48:28.209270 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.59:60287] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "abYd_HuOpex8jIO0jt5CMgAAAJU"]
[Sun Mar 15 10:48:29.031497 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.53:52245] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/w.php
[Sun Mar 15 10:48:29.849274 2026] [:error] [pid 38541:tid 38627] [client 212.30.33.101:37121] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abYd_XuOpex8jIO0jt5CWwAAAI4"]
[Sun Mar 15 10:48:30.259605 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.53:52245] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Mar 15 10:48:30.658342 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.71:57961] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abYd_l8bnHsJ1dE90bIrmQAAAEQ"]
[Sun Mar 15 10:48:31.080119 2026] [:error] [pid 38541:tid 38627] [client 212.30.33.53:52245] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/mrs.php"] [unique_id "abYd_3uOpex8jIO0jt5CZwAAAI4"]
[Sun Mar 15 10:48:31.908753 2026] [:error] [pid 38536:tid 38573] [client 212.30.33.53:64339] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abYd__pTEqkVJ0rBEWvRuAAAABQ"]
[Sun Mar 15 10:48:32.698611 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.67:61117] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 15 10:48:33.131433 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.56:31697] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-date-query-cookie.php"] [unique_id "abYeAXuOpex8jIO0jt5CigAAAJA"]
[Sun Mar 15 10:48:34.377428 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.67:61117] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abYeAhFPHtsDUuVrWDa6DQAAANc"]
[Sun Mar 15 10:48:34.794084 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.55:25651] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sun Mar 15 10:48:35.204320 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.55:25651] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/pp.php"] [unique_id "abYeA8IUXZJLmk_gYCOppgAAAYQ"]
[Sun Mar 15 10:48:35.206030 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.84:61785] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "abYeAwa8xkcaSmgTbwg8dwAAAQQ"]
[Sun Mar 15 10:48:36.877419 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.54:34085] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abYeBCknK4c779bcQqH3RwAAAUw"]
[Sun Mar 15 10:48:37.258158 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.76:24607] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-mail.php"] [unique_id "abYeBcIUXZJLmk_gYCOpyAAAAYI"]
[Sun Mar 15 10:48:37.692182 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.84:57211] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/file.php"] [unique_id "abYeBQa8xkcaSmgTbwg8jAAAAQQ"]
[Sun Mar 15 10:48:38.088203 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.164:24247] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Mar 15 10:48:38.902537 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.164:24247] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "abYeBhFPHtsDUuVrWDa6TwAAAM0"]
[Sun Mar 15 10:48:40.159520 2026] [:error] [pid 9995:tid 10016] [client 212.30.33.64:28737] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "abYeCAa8xkcaSmgTbwg8nwAAARI"]
[Sun Mar 15 10:48:41.372362 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.62:22581] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "abYeCRFPHtsDUuVrWDa6kgAAANI"]
[Sun Mar 15 10:48:42.632540 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.77:47001] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "abYeCiknK4c779bcQqH3jgAAAUE"]
[Sun Mar 15 10:48:43.818649 2026] [:error] [pid 38540:tid 38609] [client 212.30.33.84:25899] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "abYeC18bnHsJ1dE90bIsVAAAAFc"]
[Sun Mar 15 10:48:43.857553 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.96:34111] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "abYeC8IUXZJLmk_gYCOqBAAAAYU"]
[Sun Mar 15 10:48:45.063421 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.52:36811] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abYeDXuOpex8jIO0jt5DLwAAAIc"]
[Sun Mar 15 10:48:45.510608 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.225:64365] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "abYeDXuOpex8jIO0jt5DPQAAAIc"]
[Sun Mar 15 10:48:46.343018 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.93:44735] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sun Mar 15 10:48:46.731079 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.103:27529] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugins.php"] [unique_id "abYeDnuOpex8jIO0jt5DVQAAAIs"]
[Sun Mar 15 10:48:46.747809 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.93:44735] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "abYeDsIUXZJLmk_gYCOqQgAAAYg"]
[Sun Mar 15 10:48:47.571650 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.79:21931] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abYeD8IUXZJLmk_gYCOqUgAAAYY"]
[Sun Mar 15 10:48:47.585807 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.82:61427] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Mar 15 10:48:47.992726 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.82:61427] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "abYeD8IUXZJLmk_gYCOqYQAAAYE"]
[Sun Mar 15 10:48:48.376558 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.88:33625] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abYeEMIUXZJLmk_gYCOqaAAAAY8"]
[Sun Mar 15 10:48:49.179347 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.103:48053] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abYeEXuOpex8jIO0jt5DjwAAAJY"]
[Sun Mar 15 10:48:50.050724 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.69:34993] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "abYeEnuOpex8jIO0jt5DrQAAAIs"]
[Sun Mar 15 10:48:50.813589 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.229:46815] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abYeEiknK4c779bcQqH4CgAAAVY"]
[Sun Mar 15 10:48:51.703787 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.75:22775] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "abYeE8IUXZJLmk_gYCOqoAAAAZQ"]
[Sun Mar 15 10:48:52.461157 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.82:48475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Mar 15 10:48:52.944415 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.89:30753] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "abYeFF8bnHsJ1dE90bIspwAAAEA"]
[Sun Mar 15 10:48:54.486778 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.82:48475] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abYeFnuOpex8jIO0jt5D8gAAAJY"]
[Sun Mar 15 10:48:54.987560 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.73:64973] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Mar 15 10:48:55.809422 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.73:64973] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "abYeFwa8xkcaSmgTbwg9LgAAAQA"]
[Sun Mar 15 10:48:57.423858 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.164:45417] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "abYeGV8bnHsJ1dE90bIs4AAAAEU"]
[Sun Mar 15 10:48:57.505453 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.229:24693] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "abYeGSknK4c779bcQqH4eQAAAUQ"]
[Sun Mar 15 10:48:58.252390 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.51:43807] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/as.php"] [unique_id "abYeGl8bnHsJ1dE90bIs5wAAAEg"]
[Sun Mar 15 10:48:59.485439 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.97:60865] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abYeGwa8xkcaSmgTbwg9PQAAARU"]
[Sun Mar 15 10:49:01.572977 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.93:52265] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Mar 15 10:49:02.413298 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.93:52265] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/bk/index.php"] [unique_id "abYeHvpTEqkVJ0rBEWvS8wAAAAM"]
[Sun Mar 15 10:49:02.882962 2026] [:error] [pid 9995:tid 10016] [client 212.30.33.80:30739] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "abYeHga8xkcaSmgTbwg9UQAAARI"]
[Sun Mar 15 10:49:03.685016 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.89:46577] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "abYeH_pTEqkVJ0rBEWvTCAAAAA4"]
[Sun Mar 15 10:49:04.933719 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.100:38099] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "abYeIMIUXZJLmk_gYCOrcgAAAYw"]
[Sun Mar 15 10:49:05.348905 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.62:61517] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "abYeISknK4c779bcQqH5BwAAAUE"]
[Sun Mar 15 10:49:06.152146 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.87:20379] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abYeInuOpex8jIO0jt5ErgAAAIk"]
[Sun Mar 15 10:49:06.200708 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.59:32327] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "abYeIsIUXZJLmk_gYCOrfgAAAYw"]
[Sun Mar 15 10:49:07.017780 2026] [:error] [pid 50986:tid 51006] [client 212.30.33.98:48825] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/plugin.php"] [unique_id "abYeIyknK4c779bcQqH5MQAAAVE"]
[Sun Mar 15 10:49:07.793660 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.91:39899] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abYeIyknK4c779bcQqH5SgAAAUc"]
[Sun Mar 15 10:49:07.842759 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.166:26899] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "abYeI_pTEqkVJ0rBEWvTKwAAAAo"]
[Sun Mar 15 10:49:08.617295 2026] [:error] [pid 38540:tid 38593] [client 212.30.33.56:62963] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abYeJF8bnHsJ1dE90bItgQAAAEc"]
[Sun Mar 15 10:49:09.946302 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.213:22417] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "abYeJV8bnHsJ1dE90bItlAAAAEM"]
[Sun Mar 15 10:49:11.089469 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.85:38587] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "abYeJyknK4c779bcQqH5iwAAAUE"]
[Sun Mar 15 10:49:11.996260 2026] [:error] [pid 38540:tid 38598] [client 212.30.33.83:49595] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "abYeJ18bnHsJ1dE90bItuAAAAEw"]
[Sun Mar 15 10:49:13.594568 2026] [:error] [pid 42570:tid 42586] [client 212.30.33.85:28131] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/item.php"] [unique_id "abYeKcIUXZJLmk_gYCOr6gAAAY0"]
[Sun Mar 15 10:49:13.645349 2026] [:error] [pid 38541:tid 38614] [client 212.30.33.82:50173] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "abYeKXuOpex8jIO0jt5FBQAAAIE"]
[Sun Mar 15 10:49:14.425945 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.81:25621] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 15 10:49:14.447997 2026] [:error] [pid 9995:tid 9998] [client 212.30.33.166:54513] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/install.php"] [unique_id "abYeKga8xkcaSmgTbwg9pgAAAQA"]
[Sun Mar 15 10:49:15.260936 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.100:21535] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "abYeKxFPHtsDUuVrWDa8YwAAANM"]
[Sun Mar 15 10:49:16.520249 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.81:25621] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Mar 15 10:49:17.761789 2026] [:error] [pid 38536:tid 38577] [client 212.30.33.81:25621] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "abYeLfpTEqkVJ0rBEWvT3wAAABg"]
[Sun Mar 15 10:49:18.131251 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.63:42499] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "abYeLga8xkcaSmgTbwg94QAAAQM"]
[Sun Mar 15 10:49:18.562057 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.100:42349] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abYeLiknK4c779bcQqH52wAAAUo"]
[Sun Mar 15 10:49:18.929617 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.90:51573] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "abYeLvpTEqkVJ0rBEWvT7gAAAAQ"]
[Sun Mar 15 10:49:19.735397 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.72:51497] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "abYeLwa8xkcaSmgTbwg99wAAARY"]
[Sun Mar 15 10:49:19.828302 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.75:59401] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abYeLxFPHtsDUuVrWDa8mgAAANY"]
[Sun Mar 15 10:49:20.644211 2026] [:error] [pid 38540:tid 38605] [client 212.30.33.94:53753] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-class.php"] [unique_id "abYeMF8bnHsJ1dE90bIuNgAAAFM"]
[Sun Mar 15 10:49:21.853465 2026] [:error] [pid 50986:tid 51013] [client 212.30.33.95:32861] [client 212.30.33.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.95, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/js/wp-login.php"] [unique_id "abYeMSknK4c779bcQqH6FAAAAVg"]
[Sun Mar 15 10:49:22.196196 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.74:29229] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "abYeMvpTEqkVJ0rBEWvUEAAAABY"]
[Sun Mar 15 10:49:22.265999 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.95:32861] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Mar 15 10:49:23.038497 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.213:55337] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "abYeMwa8xkcaSmgTbwg-IAAAAQ8"]
[Sun Mar 15 10:49:23.868619 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.54:55581] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "abYeMyknK4c779bcQqH6NwAAAU0"]
[Sun Mar 15 10:49:24.690550 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.82:60365] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/firewall.php"] [unique_id "abYeNBFPHtsDUuVrWDa80AAAAM4"]
[Sun Mar 15 10:49:24.730279 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.95:32861] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "abYeNCknK4c779bcQqH6RwAAAUE"]
[Sun Mar 15 10:49:25.918348 2026] [:error] [pid 38540:tid 38588] [client 212.30.33.100:58395] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/rk2.php"] [unique_id "abYeNV8bnHsJ1dE90bIukgAAAEI"]
[Sun Mar 15 10:49:25.958471 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.64:45029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Mar 15 10:49:26.374377 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.64:45029] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/include.php"] [unique_id "abYeNnuOpex8jIO0jt5FxQAAAIk"]
[Sun Mar 15 10:49:26.762204 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.164:37185] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "abYeNhFPHtsDUuVrWDa9CAAAANM"]
[Sun Mar 15 10:49:27.642693 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.100:57709] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "abYeN18bnHsJ1dE90bIuoAAAAEg"]
[Sun Mar 15 10:49:28.082382 2026] [:error] [pid 42570:tid 42573] [client 212.30.33.55:21433] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/husky.php"] [unique_id "abYeOMIUXZJLmk_gYCOslgAAAYA"]
[Sun Mar 15 10:49:28.898601 2026] [:error] [pid 42570:tid 42573] [client 212.30.33.77:41327] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abYeOMIUXZJLmk_gYCOspAAAAYA"]
[Sun Mar 15 10:49:29.727758 2026] [:error] [pid 9995:tid 10022] [client 212.30.33.87:44495] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abYeOQa8xkcaSmgTbwg-OgAAARg"]
[Sun Mar 15 10:49:30.548974 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.87:63643] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Mar 15 10:49:31.857697 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.80:33361] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "abYeOxFPHtsDUuVrWDa9aAAAAMc"]
[Sun Mar 15 10:49:32.232069 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.87:63643] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abYePHuOpex8jIO0jt5GQwAAAIQ"]
[Sun Mar 15 10:49:33.057839 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.81:21095] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/click.php"] [unique_id "abYePcIUXZJLmk_gYCOtEgAAAZU"]
[Sun Mar 15 10:49:33.080920 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.95:30627] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "abYePcIUXZJLmk_gYCOtFAAAAZY"]
[Sun Mar 15 10:49:34.279883 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.55:36429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Mar 15 10:49:34.681128 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.55:36429] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/install.php"] [unique_id "abYePhFPHtsDUuVrWDa9qQAAAMM"]
[Sun Mar 15 10:49:34.745363 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.67:42945] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "abYePnuOpex8jIO0jt5GZwAAAI8"]
[Sun Mar 15 10:49:36.304463 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.164:31979] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abYeQAa8xkcaSmgTbwg-igAAAQk"]
[Sun Mar 15 10:49:37.540419 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.213:45779] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abYeQfpTEqkVJ0rBEWvUvAAAAAI"]
[Sun Mar 15 10:49:37.623683 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.57:27335] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "abYeQQa8xkcaSmgTbwg-nwAAARY"]
[Sun Mar 15 10:49:38.348529 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.53:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Mar 15 10:49:38.773476 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.53:50029] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abYeQvpTEqkVJ0rBEWvU3AAAABU"]
[Sun Mar 15 10:49:38.853422 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.83:36393] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ln/class-wp-widddget-pages.php"] [unique_id "abYeQvpTEqkVJ0rBEWvU4AAAABY"]
[Sun Mar 15 10:49:39.996022 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.213:37397] [client 212.30.33.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.213, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abYeQ18bnHsJ1dE90bIvVQAAAEs"]
[Sun Mar 15 10:49:39.999929 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.213:37397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 10:49:40.409303 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.213:37397] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/index.php"] [unique_id "abYeRF8bnHsJ1dE90bIvWgAAAE8"]
[Sun Mar 15 10:49:40.897250 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.69:41325] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "abYeRAa8xkcaSmgTbwg-xgAAAQo"]
[Sun Mar 15 10:49:42.057440 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.82:57077] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abYeRiknK4c779bcQqH7IgAAAUs"]
[Sun Mar 15 10:49:43.710376 2026] [:error] [pid 38540:tid 38608] [client 212.30.33.91:64765] [client 212.30.33.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.91, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abYeR18bnHsJ1dE90bIvhQAAAFY"]
[Sun Mar 15 10:49:44.227403 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.90:51613] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "abYeSF8bnHsJ1dE90bIvjwAAAEo"]
[Sun Mar 15 10:49:44.989361 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.91:64765] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abYeSF8bnHsJ1dE90bIvmwAAAFA"]
[Sun Mar 15 10:49:45.791962 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.94:41831] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/admin.php"] [unique_id "abYeSV8bnHsJ1dE90bIvpQAAAEk"]
[Sun Mar 15 10:49:46.593604 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.90:52567] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abYeSvpTEqkVJ0rBEWvVEAAAAAo"]
[Sun Mar 15 10:49:46.725005 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.79:24655] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/id/wp-work.php"] [unique_id "abYeSl8bnHsJ1dE90bIvswAAAEQ"]
[Sun Mar 15 10:49:47.401382 2026] [:error] [pid 38541:tid 38632] [client 212.30.33.87:26091] [client 212.30.33.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.87, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abYeS3uOpex8jIO0jt5HDQAAAJM"]
[Sun Mar 15 10:49:47.560107 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.93:22471] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "abYeS_pTEqkVJ0rBEWvVGAAAAAs"]
[Sun Mar 15 10:49:49.036098 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.87:26091] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Mar 15 10:49:49.854100 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.87:26091] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Mar 15 10:49:50.253040 2026] [:error] [pid 38541:tid 38627] [client 212.30.33.87:26091] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abYeTnuOpex8jIO0jt5HPAAAAI4"]
[Sun Mar 15 10:49:50.491756 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.99:23251] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "abYeTsIUXZJLmk_gYCOuQAAAAYY"]
[Sun Mar 15 10:49:51.071293 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.84:57919] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Mar 15 10:49:51.303836 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.68:30139] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ms-file.php"] [unique_id "abYeT8IUXZJLmk_gYCOuYgAAAZE"]
[Sun Mar 15 10:49:51.901131 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.84:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Mar 15 10:49:52.525009 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.94:55063] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sun Mar 15 10:49:52.718440 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.84:57919] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "abYeUMIUXZJLmk_gYCOulAAAAZA"]
[Sun Mar 15 10:49:52.937870 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.94:55063] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYeUBFPHtsDUuVrWDa-mAAAAM0"]
[Sun Mar 15 10:49:53.556363 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.73:27847] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Mar 15 10:49:54.187408 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.98:46401] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "abYeUl8bnHsJ1dE90bIv_wAAAEQ"]
[Sun Mar 15 10:49:54.358397 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.73:27847] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abYeUsIUXZJLmk_gYCOuwgAAAYM"]
[Sun Mar 15 10:49:54.997294 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.88:57117] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "abYeUsIUXZJLmk_gYCOuzgAAAZM"]
[Sun Mar 15 10:49:55.605099 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.72:24879] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Mar 15 10:49:56.021805 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.72:24879] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Mar 15 10:49:56.437702 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.72:24879] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class.api.php"] [unique_id "abYeVBFPHtsDUuVrWDa-ugAAANE"]
[Sun Mar 15 10:49:57.233179 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.225:49533] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "abYeVcIUXZJLmk_gYCOu-gAAAYw"]
[Sun Mar 15 10:49:58.059875 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.164:20207] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abYeVl8bnHsJ1dE90bIwOwAAAE0"]
[Sun Mar 15 10:49:58.357249 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.79:60803] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/count.php"] [unique_id "abYeVnuOpex8jIO0jt5HpAAAAIo"]
[Sun Mar 15 10:49:59.354569 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.60:44179] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "abYeVyknK4c779bcQqH8HgAAAUQ"]
[Sun Mar 15 10:50:00.163317 2026] [:error] [pid 9995:tid 10004] [client 212.30.33.98:62139] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit.php"] [unique_id "abYeWAa8xkcaSmgTbwg_gAAAAQY"]
[Sun Mar 15 10:50:00.386468 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.190:22257] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ln/class-wp-translations-library.php"] [unique_id "abYeWAa8xkcaSmgTbwg_ggAAARU"]
[Sun Mar 15 10:50:01.693522 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.90:24643] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Mar 15 10:50:02.104764 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.90:24643] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ln/class-wp-translations-interface.php"] [unique_id "abYeWsIUXZJLmk_gYCOvOQAAAZQ"]
[Sun Mar 15 10:50:03.069557 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.55:42383] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Mar 15 10:50:03.486009 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.55:42383] [client 212.30.33.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.55, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "abYeW_pTEqkVJ0rBEWvVqAAAAAc"]
[Sun Mar 15 10:50:03.895562 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.55:42383] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Mar 15 10:50:04.150826 2026] [:error] [pid 38541:tid 38627] [client 212.30.33.82:36003] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "abYeXHuOpex8jIO0jt5IAAAAAI4"]
[Sun Mar 15 10:50:04.297332 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.55:42383] [client 212.30.33.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.55, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abYeXPpTEqkVJ0rBEWvVtQAAAAg"]
[Sun Mar 15 10:50:04.719878 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.55:42383] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "abYeXPpTEqkVJ0rBEWvVugAAAAQ"]
[Sun Mar 15 10:50:05.539786 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.190:39947] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Mar 15 10:50:05.791809 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.89:27471] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "abYeXXuOpex8jIO0jt5IHwAAAIk"]
[Sun Mar 15 10:50:05.948776 2026] [:error] [pid 38541:tid 38636] [client 212.30.33.190:39947] [client 212.30.33.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.190, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abYeXXuOpex8jIO0jt5IIwAAAJc"]
[Sun Mar 15 10:50:05.953057 2026] [:error] [pid 38541:tid 38636] [client 212.30.33.190:39947] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Mar 15 10:50:07.042724 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.88:34977] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "abYeXwa8xkcaSmgTbwg_7AAAAQI"]
[Sun Mar 15 10:50:07.167169 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.190:39947] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Mar 15 10:50:07.566699 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.190:39947] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abYeX3uOpex8jIO0jt5IQAAAAJY"]
[Sun Mar 15 10:50:07.851072 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.100:51991] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/aw.php"] [unique_id "abYeXwa8xkcaSmgTbwg_9QAAAQ8"]
[Sun Mar 15 10:50:08.403422 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.99:58697] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abYeYF8bnHsJ1dE90bIwsQAAAFQ"]
[Sun Mar 15 10:50:09.090392 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.99:38323] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/install.php"] [unique_id "abYeYSknK4c779bcQqH80QAAAUE"]
[Sun Mar 15 10:50:09.619412 2026] [:error] [pid 9995:tid 10005] [client 212.30.33.87:38903] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abYeYQa8xkcaSmgTbwhADAAAAQc"]
[Sun Mar 15 10:50:09.912874 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.84:31385] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "abYeYV8bnHsJ1dE90bIwxgAAAEA"]
[Sun Mar 15 10:50:10.780296 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.59:35149] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "abYeYsIUXZJLmk_gYCOvuAAAAYM"]
[Sun Mar 15 10:50:10.849768 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.190:20943] [client 212.30.33.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.190, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abYeYga8xkcaSmgTbwhAKgAAAQE"]
[Sun Mar 15 10:50:12.109251 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.190:20943] [client 212.30.33.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.190, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abYeZAa8xkcaSmgTbwhAQgAAAQE"]
[Sun Mar 15 10:50:12.525069 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.190:20943] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iRSzrsOUEP.php
[Sun Mar 15 10:50:13.306640 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.65:54979] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "abYeZRFPHtsDUuVrWDa_nAAAAMU"]
[Sun Mar 15 10:50:13.348848 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.190:20943] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abYeZQa8xkcaSmgTbwhAVAAAAQE"]
[Sun Mar 15 10:50:14.160096 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.78:38679] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/about.php"] [unique_id "abYeZsIUXZJLmk_gYCOv6wAAAZg"]
[Sun Mar 15 10:50:15.371668 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.54:31689] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "abYeZ8IUXZJLmk_gYCOwBwAAAZM"]
[Sun Mar 15 10:50:16.680730 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.94:62117] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Mar 15 10:50:17.528377 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.94:62117] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/defaults.php"] [unique_id "abYeacIUXZJLmk_gYCOwOgAAAZc"]
[Sun Mar 15 10:50:18.365101 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.100:57497] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abYeahFPHtsDUuVrWDa_zwAAAMA"]
[Sun Mar 15 10:50:19.632317 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.88:20453] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/xl.php"] [unique_id "abYea18bnHsJ1dE90bIxVAAAAEQ"]
[Sun Mar 15 10:50:21.643629 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.63:24961] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abYebSknK4c779bcQqH9eAAAAUY"]
[Sun Mar 15 10:50:21.664782 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.54:44783] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/module.audio-video.riff-set.php"] [unique_id "abYebSknK4c779bcQqH9eQAAAVU"]
[Sun Mar 15 10:50:22.866704 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.71:58005] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Mar 15 10:50:22.914861 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.100:64251] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "abYebl8bnHsJ1dE90bIxkQAAAFI"]
[Sun Mar 15 10:50:23.265307 2026] [:error] [pid 38541:tid 38615] [client 212.30.33.71:58005] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abYeb3uOpex8jIO0jt5JEAAAAII"]
[Sun Mar 15 10:50:23.721138 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.75:21297] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "abYebxFPHtsDUuVrWDbAAQAAAM4"]
[Sun Mar 15 10:50:24.063747 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.103:60007] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "abYecMIUXZJLmk_gYCOw1QAAAYs"]
[Sun Mar 15 10:50:25.686523 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.70:30695] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "abYecRFPHtsDUuVrWDbAIQAAANE"]
[Sun Mar 15 10:50:26.145407 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.66:60873] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "abYecsIUXZJLmk_gYCOxCQAAAZg"]
[Sun Mar 15 10:50:26.516306 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.66:64945] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abYecga8xkcaSmgTbwhA0AAAAQU"]
[Sun Mar 15 10:50:27.782217 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.179:40285] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abYecwa8xkcaSmgTbwhA3wAAAQo"]
[Sun Mar 15 10:50:28.658539 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.88:30565] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/module.audio-license.php"] [unique_id "abYedMIUXZJLmk_gYCOxVwAAAYc"]
[Sun Mar 15 10:50:29.002679 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.68:58909] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abYedV8bnHsJ1dE90bIx6QAAAEo"]
[Sun Mar 15 10:50:30.268129 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.79:36941] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "abYedsIUXZJLmk_gYCOxdAAAAYk"]
[Sun Mar 15 10:50:30.669281 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.89:59825] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abYedvpTEqkVJ0rBEWvW1QAAAA0"]
[Sun Mar 15 10:50:31.142877 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.87:39545] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "abYed_pTEqkVJ0rBEWvW2QAAAAI"]
[Sun Mar 15 10:50:32.347045 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.190:21205] [client 212.30.33.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.190, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abYeeMIUXZJLmk_gYCOxpgAAAZg"]
[Sun Mar 15 10:50:32.369683 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.71:63667] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/load.php"] [unique_id "abYeeAa8xkcaSmgTbwhBIgAAAQk"]
[Sun Mar 15 10:50:33.174062 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.101:58241] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "abYeecIUXZJLmk_gYCOxzQAAAYo"]
[Sun Mar 15 10:50:33.593963 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.190:21205] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Mar 15 10:50:33.988976 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.78:35337] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/admin.php"] [unique_id "abYeecIUXZJLmk_gYCOx4gAAAY8"]
[Sun Mar 15 10:50:34.841311 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.190:21205] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abYeesIUXZJLmk_gYCOx9QAAAZY"]
[Sun Mar 15 10:50:35.228881 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.81:48135] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "abYee3uOpex8jIO0jt5JsQAAAI8"]
[Sun Mar 15 10:50:36.032459 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.89:49703] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "abYefCknK4c779bcQqH9_gAAAUo"]
[Sun Mar 15 10:50:36.071604 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.91:49387] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Mar 15 10:50:36.485799 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.91:49387] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Mar 15 10:50:38.471504 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.95:36689] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/input.php"] [unique_id "abYefl8bnHsJ1dE90bIyjAAAAEQ"]
[Sun Mar 15 10:50:39.734376 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.76:26387] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "abYefxFPHtsDUuVrWDbAtgAAAMw"]
[Sun Mar 15 10:50:40.014956 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.91:49387] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Mar 15 10:50:40.428936 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.91:49387] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abYegF8bnHsJ1dE90bIypAAAAEU"]
[Sun Mar 15 10:50:40.542459 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.79:36879] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "abYegHuOpex8jIO0jt5KEgAAAIk"]
[Sun Mar 15 10:50:41.350646 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.100:61503] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/dist/about.php"] [unique_id "abYegSknK4c779bcQqH-TQAAAUU"]
[Sun Mar 15 10:50:41.690390 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.69:64613] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/infi.php"] [unique_id "abYegXuOpex8jIO0jt5KHgAAAI8"]
[Sun Mar 15 10:50:42.152317 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.70:44187] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "abYegnuOpex8jIO0jt5KJgAAAJI"]
[Sun Mar 15 10:50:42.514967 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.60:20179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 15 10:50:42.927931 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.60:20179] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Mar 15 10:50:43.338060 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.60:20179] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Mar 15 10:50:43.776413 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.85:30531] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/wp-load.php"] [unique_id "abYeg18bnHsJ1dE90bIyzQAAAEU"]
[Sun Mar 15 10:50:44.559390 2026] [:error] [pid 38536:tid 38554] [client 212.30.33.60:20179] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abYehPpTEqkVJ0rBEWvXeAAAAAE"]
[Sun Mar 15 10:50:44.585441 2026] [:error] [pid 38541:tid 38615] [client 212.30.33.55:49213] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "abYehHuOpex8jIO0jt5KRwAAAII"]
[Sun Mar 15 10:50:45.373851 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.103:41241] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Mar 15 10:50:46.195274 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.103:41241] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Mar 15 10:50:46.229185 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.67:26441] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/blocks/wp-load.php"] [unique_id "abYehga8xkcaSmgTbwhB2wAAARU"]
[Sun Mar 15 10:50:46.616001 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.103:41241] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Mar 15 10:50:47.027383 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.66:23213] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-modules-packages-react.php"] [unique_id "abYeh_pTEqkVJ0rBEWvXlgAAABA"]
[Sun Mar 15 10:50:47.427244 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.103:41241] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abYeh8IUXZJLmk_gYCOzAQAAAYc"]
[Sun Mar 15 10:50:48.237431 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.76:43549] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/about.php"] [unique_id "abYeiHuOpex8jIO0jt5KgAAAAJA"]
[Sun Mar 15 10:50:48.665385 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.52:53607] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/font-editor.php"] [unique_id "abYeiMIUXZJLmk_gYCOzLQAAAZc"]
[Sun Mar 15 10:50:49.057716 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.164:51329] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 15 10:50:49.470054 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.79:58321] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||pumpbooking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "pumpbooking.com"] [uri "/images/stories/themes.php"] [unique_id "abYeicIUXZJLmk_gYCOzSAAAAZg"]
[Sun Mar 15 10:50:49.866367 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.164:51329] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abYeicIUXZJLmk_gYCOzVgAAAZg"]
[Sun Mar 15 10:50:50.277994 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.79:58321] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "abYeisIUXZJLmk_gYCOzagAAAZY"]
[Sun Mar 15 10:50:51.490054 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.84:42583] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Mar 15 10:50:52.712201 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.84:42583] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/options.php"] [unique_id "abYejBFPHtsDUuVrWDbBcwAAANg"]
[Sun Mar 15 10:50:53.514859 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.83:49803] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abYejSknK4c779bcQqH-yAAAAVM"]
[Sun Mar 15 10:50:57.272652 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.63:27185] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abYekRFPHtsDUuVrWDbBpQAAAMc"]
[Sun Mar 15 10:50:58.085617 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.166:30041] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abYekvpTEqkVJ0rBEWvYFwAAAAs"]
[Sun Mar 15 10:50:58.898011 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.88:34121] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "abYeksIUXZJLmk_gYCO0JQAAAYo"]
[Sun Mar 15 10:51:00.523535 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.57:63725] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abYelBFPHtsDUuVrWDbBzgAAAME"]
[Sun Mar 15 10:51:01.394444 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.96:39599] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Mar 15 10:51:01.796367 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.96:39599] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abYelV8bnHsJ1dE90bIzzAAAAE4"]
[Sun Mar 15 10:51:02.140225 2026] [autoindex:error] [pid 9995:tid 10006] [client 212.30.33.79:60825] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 10:51:02.619345 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.75:53309] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/about.php"] [unique_id "abYeliknK4c779bcQqH_LwAAAUE"]
[Sun Mar 15 10:51:04.251057 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.179:20387] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abYemBFPHtsDUuVrWDbB_AAAANY"]
[Sun Mar 15 10:51:05.053662 2026] [:error] [pid 9995:tid 10005] [client 212.30.33.225:42433] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abYemQa8xkcaSmgTbwhC5AAAAQc"]
[Sun Mar 15 10:51:10.119417 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.66:28039] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Mar 15 10:51:11.392011 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.66:28039] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "abYen18bnHsJ1dE90bI0awAAAFU"]
[Sun Mar 15 10:51:12.242661 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.75:25599] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Mar 15 10:51:13.952423 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.75:25599] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abYeoSknK4c779bcQqH_pAAAAUs"]
[Sun Mar 15 10:51:14.768082 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.103:57791] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abYeonuOpex8jIO0jt5MBAAAAJg"]
[Sun Mar 15 10:51:15.580506 2026] [:error] [pid 9995:tid 10004] [client 212.30.33.89:48837] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/atomlib.php"] [unique_id "abYeowa8xkcaSmgTbwhDcQAAAQY"]
[Sun Mar 15 10:51:16.387597 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.96:21615] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abYepPpTEqkVJ0rBEWvY_AAAAAc"]
[Sun Mar 15 10:51:17.212281 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.88:63677] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/min.php"] [unique_id "abYepfpTEqkVJ0rBEWvZBAAAAAk"]
[Sun Mar 15 10:51:18.031349 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.95:27027] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abYepvpTEqkVJ0rBEWvZCQAAAA0"]
[Sun Mar 15 10:51:18.844362 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.84:47129] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abYepvpTEqkVJ0rBEWvZEgAAABI"]
[Sun Mar 15 10:51:19.644433 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.93:33425] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abYep3uOpex8jIO0jt5MXgAAAJU"]
[Sun Mar 15 10:51:22.174506 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.93:49429] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abYeqsIUXZJLmk_gYCO1xAAAAZc"]
[Sun Mar 15 10:51:23.404302 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.87:28965] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abYeq3uOpex8jIO0jt5MnwAAAJQ"]
[Sun Mar 15 10:51:25.894144 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.85:38239] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abYerRFPHtsDUuVrWDbDCQAAAMo"]
[Sun Mar 15 10:51:27.989891 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.86:31755] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abYer_pTEqkVJ0rBEWvZhwAAABM"]
[Sun Mar 15 10:51:28.797402 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.98:28707] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abYesPpTEqkVJ0rBEWvZjgAAAA0"]
[Sun Mar 15 10:51:29.610786 2026] [:error] [pid 9995:tid 10014] [client 212.30.33.83:24775] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abYesQa8xkcaSmgTbwhEMgAAARA"]
[Sun Mar 15 10:51:30.416730 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.73:34997] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abYeshFPHtsDUuVrWDbDKAAAAMo"]
[Sun Mar 15 10:51:31.729377 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.95:55799] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abYesyknK4c779bcQqEAfgAAAUA"]
[Sun Mar 15 10:51:32.545905 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.97:42763] File does not exist: /usr/local/apache/htdocs/suspended-page/firewall.php
[Sun Mar 15 10:51:34.614252 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.97:42763] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Mar 15 10:51:35.840328 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.97:42763] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abYet18bnHsJ1dE90bI1ggAAAE4"]
[Sun Mar 15 10:51:36.646191 2026] [:error] [pid 38541:tid 38636] [client 212.30.33.52:44105] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Mar 15 10:51:37.061821 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.52:44105] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abYeuXuOpex8jIO0jt5NbwAAAJQ"]
[Sun Mar 15 10:51:39.087095 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.72:22575] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/install.php"] [unique_id "abYeuwa8xkcaSmgTbwhEtwAAAQM"]
[Sun Mar 15 10:51:40.320441 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.75:30431] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abYevHuOpex8jIO0jt5NjwAAAJg"]
[Sun Mar 15 10:51:45.242760 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.164:41829] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Mar 15 10:51:46.051942 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.164:41829] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/function.php"] [unique_id "abYewiknK4c779bcQqEBVgAAAVY"]
[Sun Mar 15 10:51:47.689267 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.69:25085] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/db.php"] [unique_id "abYewyknK4c779bcQqEBfgAAAUA"]
[Sun Mar 15 10:51:55.380486 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.89:51383] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Sun Mar 15 10:51:55.788314 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.89:51383] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abYeyyknK4c779bcQqECDgAAAUg"]
[Sun Mar 15 10:51:56.598296 2026] [:error] [pid 45801:tid 45808] [client 212.30.33.53:51763] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abYezIaKHL9CTKoVzTDDWQAAAcU"]
[Sun Mar 15 10:51:57.819537 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.94:56457] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abYezfpTEqkVJ0rBEWva5gAAABU"]
[Sun Mar 15 10:51:58.634298 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.61:44235] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abYezl8bnHsJ1dE90bI2yQAAAFU"]
[Sun Mar 15 10:51:59.440348 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.91:56419] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/db.php"] [unique_id "abYezxFPHtsDUuVrWDbEnwAAAMM"]
[Sun Mar 15 10:52:01.086032 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.79:36209] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abYe0Qa8xkcaSmgTbwhFggAAAQo"]
[Sun Mar 15 10:52:02.778739 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.71:49805] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abYe0vpTEqkVJ0rBEWvbFQAAABE"]
[Sun Mar 15 10:52:03.999323 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.58:44087] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abYe0yknK4c779bcQqECaQAAAU8"]
[Sun Mar 15 10:52:04.836858 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.76:51325] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sun Mar 15 10:52:05.266511 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.76:51325] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYe1XuOpex8jIO0jt5OgQAAAIU"]
[Sun Mar 15 10:52:06.931763 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.228:53389] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abYe1hFPHtsDUuVrWDbE_gAAAMU"]
[Sun Mar 15 10:52:07.734641 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.95:44685] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abYe13uOpex8jIO0jt5OpAAAAJg"]
[Sun Mar 15 10:52:09.352384 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.100:26893] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abYe2SknK4c779bcQqEClQAAAUM"]
[Sun Mar 15 10:52:11.801321 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.64:32997] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "abYe218bnHsJ1dE90bI3ggAAAE8"]
[Sun Mar 15 10:52:13.063393 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.96:27349] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "abYe3SknK4c779bcQqECnwAAAUs"]
[Sun Mar 15 10:52:14.266424 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.84:57959] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "abYe3ga8xkcaSmgTbwhGEQAAAQ8"]
[Sun Mar 15 10:52:15.078608 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.86:28839] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/shell.php"] [unique_id "abYe3xFPHtsDUuVrWDbFZgAAANI"]
[Sun Mar 15 10:52:15.885505 2026] [:error] [pid 38540:tid 38592] [client 212.30.33.213:37077] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "abYe318bnHsJ1dE90bI3pgAAAEY"]
[Sun Mar 15 10:52:17.117722 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.53:62743] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID/db.php"] [unique_id "abYe4V8bnHsJ1dE90bI3tAAAAE0"]
[Sun Mar 15 10:52:17.930016 2026] [:error] [pid 45801:tid 45822] [client 212.30.33.53:25879] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/simi.php"] [unique_id "abYe4YaKHL9CTKoVzTDEYwAAAdM"]
[Sun Mar 15 10:52:18.733255 2026] [:error] [pid 38541:tid 38614] [client 212.30.33.95:34743] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abYe4nuOpex8jIO0jt5PJQAAAIE"]
[Sun Mar 15 10:52:19.537972 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.53:20381] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sun Mar 15 10:52:19.943731 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.53:20381] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abYe4yknK4c779bcQqECxAAAAVY"]
[Sun Mar 15 10:52:38.970375 2026] [autoindex:error] [pid 38540:tid 38590] [client 212.30.33.65:45381] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 11:58:12.609816 2026] [:error] [pid 38645:tid 38656] [client 182.44.8.254:45934] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abYuVBFPHtsDUuVrWDb_MgAAAMk"]
[Sun Mar 15 12:07:48.993202 2026] [:error] [pid 50986:tid 51010] [client 157.35.63.186:49838] [client 157.35.63.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.35.63.186, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abYwlCknK4c779bcQqEwowAAAVU"]
[Sun Mar 15 12:07:48.998731 2026] [:error] [pid 50986:tid 51010] [client 157.35.63.186:49838] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 12:20:18.983558 2026] [:error] [pid 9995:tid 10014] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 15 12:20:19.126080 2026] [:error] [pid 9995:tid 10001] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/ammika.php
[Sun Mar 15 12:20:19.269665 2026] [:error] [pid 9995:tid 10008] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 12:20:19.412883 2026] [:error] [pid 9995:tid 10020] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 12:20:20.885850 2026] [:error] [pid 9995:tid 10007] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 12:20:21.028991 2026] [:error] [pid 9995:tid 10009] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 15 12:20:21.185520 2026] [:error] [pid 9995:tid 10000] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sun Mar 15 12:20:21.329991 2026] [:error] [pid 9995:tid 10016] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Mar 15 12:20:21.488967 2026] [:error] [pid 9995:tid 10018] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sun Mar 15 12:20:21.658317 2026] [:error] [pid 9995:tid 10005] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 12:20:21.802010 2026] [:error] [pid 9995:tid 10013] [client 20.219.138.187:27975] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 12:20:21.941933 2026] [:error] [pid 9995:tid 10011] [client 20.219.138.187:27975] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "abYzhQa8xkcaSmgTbwhTeAAAAQ0"]
[Sun Mar 15 12:20:22.528479 2026] [:error] [pid 38645:tid 38668] [client 20.219.138.187:20021] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "abYzhhFPHtsDUuVrWDYHPgAAANU"]
[Sun Mar 15 12:20:23.120563 2026] [:error] [pid 38645:tid 38658] [client 20.219.138.187:20046] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "abYzhxFPHtsDUuVrWDYHPwAAAMs"]
[Sun Mar 15 12:20:23.736221 2026] [:error] [pid 50986:tid 51009] [client 20.219.138.187:20208] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "abYzhyknK4c779bcQqEzvQAAAVQ"]
[Sun Mar 15 14:50:07.967031 2026] [:error] [pid 45974:tid 45990] [client 43.157.53.115:56528] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abZWnxWn4R6u72SegeiOJwAAAg4"]
[Sun Mar 15 14:57:42.702759 2026] [:error] [pid 45974:tid 45999] [client 49.51.50.147:40464] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abZYZhWn4R6u72SegeiQOwAAAhc"]
[Sun Mar 15 16:13:05.262427 2026] [:error] [pid 45974:tid 45993] [client 51.83.11.108:44362] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abZqERWn4R6u72SegeiiBwAAAhE"]
[Sun Mar 15 16:13:07.342323 2026] [:error] [pid 38541:tid 38630] [client 51.83.11.108:38078] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abZqE3uOpex8jIO0jt57wQAAAJE"]
[Sun Mar 15 16:13:09.429400 2026] [:error] [pid 50986:tid 51005] [client 51.83.11.108:38088] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abZqFSknK4c779bcQqF2eAAAAVA"]
[Sun Mar 15 16:13:19.414495 2026] [:error] [pid 45974:tid 45999] [client 104.234.53.79:31849] [client 104.234.53.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.79, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abZqHxWn4R6u72SegeiiDwAAAhc"]
[Sun Mar 15 16:13:19.419142 2026] [:error] [pid 45974:tid 45999] [client 104.234.53.79:31849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 16:21:36.330374 2026] [:error] [pid 50986:tid 50998] [client 51.83.11.108:54340] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abZsECknK4c779bcQqF5lgAAAUk"]
[Sun Mar 15 16:21:38.633812 2026] [:error] [pid 38536:tid 38562] [client 51.83.11.108:43810] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abZsEvpTEqkVJ0rBEWv7HAAAAAk"]
[Sun Mar 15 16:21:41.409321 2026] [:error] [pid 38541:tid 38613] [client 51.83.11.108:43812] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abZsFXuOpex8jIO0jt580gAAAIA"]
[Sun Mar 15 18:41:56.999882 2026] [:error] [pid 50986:tid 51011] [client 217.182.139.33:49214] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abaM9CknK4c779bcQqG1KwAAAVY"]
[Sun Mar 15 18:41:58.842924 2026] [:error] [pid 38645:tid 38651] [client 217.182.139.33:46070] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abaM9hFPHtsDUuVrWDaJ3AAAAMQ"]
[Sun Mar 15 18:42:00.966332 2026] [:error] [pid 50986:tid 51002] [client 217.182.139.33:46074] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abaM-CknK4c779bcQqG1NAAAAU0"]
[Sun Mar 15 18:42:03.088455 2026] [:error] [pid 45974:tid 45985] [client 217.182.139.33:46090] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abaM-xWn4R6u72Segei9KQAAAgk"]
[Sun Mar 15 18:42:05.144517 2026] [:error] [pid 45974:tid 45997] [client 217.182.139.33:55386] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abaM_RWn4R6u72Segei9LAAAAhU"]
[Sun Mar 15 18:42:07.132116 2026] [:error] [pid 45974:tid 45978] [client 217.182.139.33:55392] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abaM_xWn4R6u72Segei9MQAAAgI"]
[Sun Mar 15 18:42:09.059168 2026] [:error] [pid 45801:tid 45813] [client 217.182.139.33:55406] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abaNAYaKHL9CTKoVzTA4oAAAAco"]
[Sun Mar 15 18:42:10.972192 2026] [:error] [pid 50986:tid 50989] [client 217.182.139.33:55420] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abaNAiknK4c779bcQqG1PwAAAUE"]
[Sun Mar 15 18:42:13.067809 2026] [:error] [pid 42570:tid 42588] [client 217.182.139.33:55422] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abaNBcIUXZJLmk_gYCMCpwAAAY8"]
[Sun Mar 15 18:42:14.881671 2026] [:error] [pid 38540:tid 38608] [client 217.182.139.33:41972] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abaNBl8bnHsJ1dE90bJqgAAAAFY"]
[Sun Mar 15 18:42:16.826543 2026] [:error] [pid 45801:tid 45820] [client 217.182.139.33:41980] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abaNCIaKHL9CTKoVzTA4ogAAAdE"]
[Sun Mar 15 18:42:18.764592 2026] [:error] [pid 9995:tid 10007] [client 217.182.139.33:41988] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abaNCga8xkcaSmgTbwhr8QAAAQk"]
[Sun Mar 15 18:42:20.824635 2026] [:error] [pid 9995:tid 10020] [client 217.182.139.33:41990] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abaNDAa8xkcaSmgTbwhr8wAAARY"]
[Sun Mar 15 18:42:22.905090 2026] [:error] [pid 38645:tid 38652] [client 217.182.139.33:41994] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abaNDhFPHtsDUuVrWDaJ7QAAAMU"]
[Sun Mar 15 18:42:24.714400 2026] [:error] [pid 45801:tid 45820] [client 217.182.139.33:33090] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abaNEIaKHL9CTKoVzTA4sgAAAdE"]
[Sun Mar 15 18:42:26.640183 2026] [:error] [pid 45801:tid 45814] [client 217.182.139.33:33102] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abaNEoaKHL9CTKoVzTA4twAAAcs"]
[Sun Mar 15 18:42:28.569510 2026] [:error] [pid 50986:tid 50992] [client 217.182.139.33:33112] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abaNFCknK4c779bcQqG1UAAAAUQ"]
[Sun Mar 15 18:42:30.648780 2026] [:error] [pid 50986:tid 51012] [client 217.182.139.33:33124] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abaNFiknK4c779bcQqG1WAAAAVc"]
[Sun Mar 15 18:42:32.603801 2026] [:error] [pid 45801:tid 45817] [client 217.182.139.33:33140] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abaNGIaKHL9CTKoVzTA4ugAAAc4"]
[Sun Mar 15 18:42:34.675367 2026] [:error] [pid 50986:tid 51005] [client 217.182.139.33:52842] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abaNGiknK4c779bcQqG1ZAAAAVA"]
[Sun Mar 15 18:42:36.604763 2026] [:error] [pid 42570:tid 42574] [client 217.182.139.33:52848] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abaNHMIUXZJLmk_gYCMCswAAAYE"]
[Sun Mar 15 18:42:38.508154 2026] [:error] [pid 38541:tid 38633] [client 217.182.139.33:52852] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abaNHnuOpex8jIO0jt6N-AAAAJQ"]
[Sun Mar 15 18:42:41.528748 2026] [:error] [pid 38540:tid 38596] [client 217.182.139.33:52854] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abaNIV8bnHsJ1dE90bJqjwAAAEo"]
[Sun Mar 15 18:42:45.362538 2026] [:error] [pid 50986:tid 51011] [client 217.182.139.33:42992] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abaNJSknK4c779bcQqG1ewAAAVY"]
[Sun Mar 15 19:52:14.055950 2026] [:error] [pid 42570:tid 42582] [client 193.70.34.35:33872] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abadbsIUXZJLmk_gYCML4QAAAYk"]
[Sun Mar 15 19:52:17.924939 2026] [:error] [pid 38645:tid 38670] [client 193.70.34.35:47220] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abadcRFPHtsDUuVrWDamCQAAANc"]
[Sun Mar 15 20:46:26.799282 2026] [:error] [pid 50986:tid 50992] [client 43.153.119.119:56994] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abaqIiknK4c779bcQqHd_QAAAUQ"]
[Sun Mar 15 22:30:53.052386 2026] [:error] [pid 50986:tid 51002] [client 51.222.105.197:52576] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "abbCnSknK4c779bcQqH9LAAAAU0"]
[Sun Mar 15 22:30:54.086428 2026] [:error] [pid 38536:tid 38564] [client 51.222.105.197:57380] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abbCnvpTEqkVJ0rBEWsVwwAAAAs"]
[Sun Mar 15 22:30:54.259846 2026] [:error] [pid 45801:tid 45814] [client 51.222.105.197:57386] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abbCnoaKHL9CTKoVzTBh8gAAAcs"]
[Sun Mar 15 22:30:57.749122 2026] [:error] [pid 45974:tid 45986] [client 51.222.105.197:57402] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abbCoRWn4R6u72SegejfewAAAgo"]
[Sun Mar 15 22:30:58.139413 2026] [:error] [pid 45974:tid 45982] [client 51.222.105.197:57408] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abbCohWn4R6u72SegejffQAAAgY"]
[Sun Mar 15 22:31:03.245065 2026] [:error] [pid 50986:tid 51009] [client 51.222.105.197:60780] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "abbCpyknK4c779bcQqH9NwAAAVQ"]
[Sun Mar 15 22:31:14.212501 2026] [:error] [pid 38540:tid 38594] [client 51.222.105.197:37844] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "abbCsl8bnHsJ1dE90bJ-IAAAAEg"]
[Sun Mar 15 22:32:32.613570 2026] [:error] [pid 38645:tid 38667] [client 51.222.105.197:54470] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abbDABFPHtsDUuVrWDbnxgAAANQ"]
[Sun Mar 15 22:32:34.436924 2026] [:error] [pid 38645:tid 38662] [client 51.222.105.197:35056] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abbDAhFPHtsDUuVrWDbnyQAAAM8"]
[Sun Mar 15 22:32:36.133915 2026] [:error] [pid 45801:tid 45814] [client 51.222.105.197:35066] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abbDBIaKHL9CTKoVzTBiUAAAAcs"]
[Sun Mar 15 22:32:37.854127 2026] [:error] [pid 45801:tid 45825] [client 51.222.105.197:35070] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abbDBYaKHL9CTKoVzTBiUQAAAdY"]
[Sun Mar 15 22:32:39.584808 2026] [:error] [pid 38645:tid 38664] [client 51.222.105.197:35074] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abbDBxFPHtsDUuVrWDbn6AAAANE"]
[Sun Mar 15 22:32:40.168879 2026] [:error] [pid 38645:tid 38667] [client 51.222.105.197:37124] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abbDCBFPHtsDUuVrWDbn7gAAANQ"]
[Sun Mar 15 22:32:41.415039 2026] [:error] [pid 38645:tid 38660] [client 51.222.105.197:37132] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abbDCRFPHtsDUuVrWDbn8AAAAM0"]
[Sun Mar 15 22:32:43.256319 2026] [:error] [pid 9995:tid 10021] [client 51.222.105.197:37148] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abbDCwa8xkcaSmgTbwiePQAAARc"]
[Sun Mar 15 22:32:44.959809 2026] [:error] [pid 38645:tid 38668] [client 51.222.105.197:37172] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abbDDBFPHtsDUuVrWDboAAAAANU"]
[Sun Mar 15 22:32:46.436934 2026] [:error] [pid 38541:tid 38629] [client 51.222.105.197:37156] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abbDDnuOpex8jIO0jt6kvwAAAJA"]
[Sun Mar 15 22:32:49.835299 2026] [:error] [pid 38645:tid 38661] [client 51.222.105.197:55648] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abbDERFPHtsDUuVrWDboEAAAAM4"]
[Sun Mar 15 22:32:51.646497 2026] [:error] [pid 45974:tid 45983] [client 51.222.105.197:55652] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abbDExWn4R6u72Segejf0AAAAgc"]
[Sun Mar 15 22:32:53.506872 2026] [:error] [pid 50986:tid 50993] [client 51.222.105.197:55666] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abbDFSknK4c779bcQqH9zgAAAUU"]
[Sun Mar 15 22:32:55.411430 2026] [:error] [pid 38645:tid 38669] [client 51.222.105.197:55674] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abbDFxFPHtsDUuVrWDboIQAAANY"]
[Sun Mar 15 22:32:56.406610 2026] [:error] [pid 38645:tid 38655] [client 51.222.105.197:55682] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abbDGBFPHtsDUuVrWDboJQAAAMg"]
[Sun Mar 15 22:32:57.303534 2026] [:error] [pid 9995:tid 9998] [client 51.222.105.197:55692] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abbDGQa8xkcaSmgTbwieSAAAAQA"]
[Sun Mar 15 22:32:59.885725 2026] [:error] [pid 38645:tid 38663] [client 51.222.105.197:43852] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abbDGxFPHtsDUuVrWDboKwAAANA"]
[Sun Mar 15 22:33:01.693480 2026] [:error] [pid 50986:tid 51010] [client 51.222.105.197:43856] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abbDHSknK4c779bcQqH93wAAAVU"]
[Sun Mar 15 22:33:02.739432 2026] [:error] [pid 38645:tid 38670] [client 51.222.105.197:43862] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abbDHhFPHtsDUuVrWDboNAAAANc"]
[Sun Mar 15 22:33:03.548914 2026] [:error] [pid 38645:tid 38660] [client 51.222.105.197:43872] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abbDHxFPHtsDUuVrWDboRAAAAM0"]
[Sun Mar 15 22:33:05.403510 2026] [:error] [pid 45801:tid 45813] [client 51.222.105.197:43884] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abbDIYaKHL9CTKoVzTBibwAAAco"]
[Sun Mar 15 22:33:07.258752 2026] [:error] [pid 42570:tid 42591] [client 51.222.105.197:43896] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abbDI8IUXZJLmk_gYCMfTgAAAZI"]
[Sun Mar 15 22:33:09.119712 2026] [:error] [pid 45974:tid 45996] [client 51.222.105.197:43912] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abbDJRWn4R6u72Segejf4AAAAhQ"]
[Sun Mar 15 22:33:10.951676 2026] [:error] [pid 42570:tid 42585] [client 51.222.105.197:51798] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abbDJsIUXZJLmk_gYCMfVQAAAYw"]
[Sun Mar 15 22:33:11.916335 2026] [:error] [pid 50986:tid 51013] [client 51.222.105.197:51810] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abbDJyknK4c779bcQqH97wAAAVg"]
[Sun Mar 15 22:33:12.805072 2026] [:error] [pid 42570:tid 42586] [client 51.222.105.197:51816] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abbDKMIUXZJLmk_gYCMfWAAAAY0"]
[Sun Mar 15 22:33:13.760792 2026] [:error] [pid 50986:tid 51001] [client 51.222.105.197:51820] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abbDKSknK4c779bcQqH99QAAAUw"]
[Sun Mar 15 22:33:14.694580 2026] [:error] [pid 38541:tid 38634] [client 51.222.105.197:51828] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abbDKnuOpex8jIO0jt6k0QAAAJU"]
[Sun Mar 15 22:33:15.556023 2026] [:error] [pid 45801:tid 45808] [client 51.222.105.197:51840] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abbDK4aKHL9CTKoVzTBidwAAAcU"]
[Sun Mar 15 22:33:16.411824 2026] [:error] [pid 45801:tid 45823] [client 51.222.105.197:51850] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abbDLIaKHL9CTKoVzTBieAAAAdQ"]
[Sun Mar 15 22:33:17.411653 2026] [:error] [pid 50986:tid 51006] [client 51.222.105.197:51858] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abbDLSknK4c779bcQqH9-AAAAVE"]
[Sun Mar 15 22:33:19.845406 2026] [:error] [pid 45974:tid 45979] [client 51.222.105.197:52760] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abbDLxWn4R6u72Segejf5AAAAgM"]
[Sun Mar 15 23:59:42.770072 2026] [:error] [pid 45801:tid 45818] [client 104.28.163.77:45917] [client 104.28.163.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "abbXboaKHL9CTKoVzTBx4gAAAc8"]
[Mon Mar 16 01:58:29.190435 2026] [:error] [pid 23458:tid 23473] [client 110.166.71.39:38059] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abbzRQ4cKIHVuOkxhhoZlQAAAQ0"]
[Mon Mar 16 02:22:21.220574 2026] [:error] [pid 60947:tid 61005] [client 43.159.136.201:48842] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abb43f8DVbvyAQDJWh1zugAAAMM"]
[Mon Mar 16 03:05:14.683133 2026] [:error] [pid 23458:tid 23460] [client 95.217.109.26:44794] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abcC6g4cKIHVuOkxhho9_wAAAQA"]
[Mon Mar 16 03:05:16.813953 2026] [:error] [pid 60694:tid 60830] [client 95.217.109.26:12590] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abcC7GEURh3k32p5sFKeBAAAAJg"]
[Mon Mar 16 03:05:18.745500 2026] [:error] [pid 60694:tid 60827] [client 95.217.109.26:12598] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abcC7mEURh3k32p5sFKeBwAAAJU"]
[Mon Mar 16 03:05:20.666862 2026] [:error] [pid 23458:tid 23474] [client 95.217.109.26:12608] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abcC8A4cKIHVuOkxhho-DAAAAQ4"]
[Mon Mar 16 03:05:22.664012 2026] [:error] [pid 60666:tid 60759] [client 95.217.109.26:12610] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abcC8hLlrGpRCJDg8VL6_gAAAAc"]
[Mon Mar 16 03:05:24.825420 2026] [:error] [pid 23458:tid 23470] [client 95.217.109.26:12616] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abcC9A4cKIHVuOkxhho-FwAAAQo"]
[Mon Mar 16 03:05:27.036478 2026] [:error] [pid 60666:tid 60754] [client 95.217.109.26:59780] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abcC9xLlrGpRCJDg8VL7AwAAAAI"]
[Mon Mar 16 03:05:29.029859 2026] [:error] [pid 60694:tid 60828] [client 95.217.109.26:59782] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abcC-WEURh3k32p5sFKeEAAAAJY"]
[Mon Mar 16 03:05:31.035868 2026] [:error] [pid 60947:tid 61021] [client 95.217.109.26:59804] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abcC-_8DVbvyAQDJWh2E0gAAANI"]
[Mon Mar 16 03:05:32.991612 2026] [:error] [pid 23458:tid 23460] [client 95.217.109.26:59820] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abcC_A4cKIHVuOkxhho-JwAAAQA"]
[Mon Mar 16 03:05:34.964136 2026] [:error] [pid 23458:tid 23481] [client 95.217.109.26:59838] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abcC_g4cKIHVuOkxhho-LAAAARU"]
[Mon Mar 16 03:05:37.080732 2026] [:error] [pid 23458:tid 23461] [client 95.217.109.26:49478] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abcDAQ4cKIHVuOkxhho-MQAAAQE"]
[Mon Mar 16 03:05:39.159084 2026] [:error] [pid 60694:tid 60829] [client 95.217.109.26:49492] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abcDA2EURh3k32p5sFKeHAAAAJc"]
[Mon Mar 16 03:05:41.200858 2026] [:error] [pid 23458:tid 23462] [client 95.217.109.26:49500] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abcDBQ4cKIHVuOkxhho-OAAAAQI"]
[Mon Mar 16 03:05:43.284517 2026] [:error] [pid 23458:tid 23484] [client 95.217.109.26:49506] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abcDBw4cKIHVuOkxhho-RgAAARg"]
[Mon Mar 16 03:05:45.410597 2026] [:error] [pid 60947:tid 61009] [client 95.217.109.26:49510] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abcDCf8DVbvyAQDJWh2E3wAAAMc"]
[Mon Mar 16 03:05:47.420183 2026] [:error] [pid 60666:tid 60775] [client 95.217.109.26:1198] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abcDCxLlrGpRCJDg8VL7DwAAABc"]
[Mon Mar 16 03:05:49.468983 2026] [:error] [pid 60666:tid 60765] [client 95.217.109.26:1200] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abcDDRLlrGpRCJDg8VL7EQAAAA0"]
[Mon Mar 16 03:05:51.060099 2026] [:error] [pid 60679:tid 60792] [client 95.217.109.26:1216] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abcDD5nX8fEKZeqoouE1gAAAAE0"]
[Mon Mar 16 03:05:55.162542 2026] [:error] [pid 60666:tid 60776] [client 95.217.109.26:1232] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abcDExLlrGpRCJDg8VL7EwAAABg"]
[Mon Mar 16 07:02:28.550464 2026] [:error] [pid 62427:tid 62441] [client 203.188.168.23:38127] [client 203.188.168.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.23, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abc6hMUPP8fzo6XzJCUiSgAAAAA"]
[Mon Mar 16 07:02:28.554623 2026] [:error] [pid 62427:tid 62441] [client 203.188.168.23:38127] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 16 08:25:49.603012 2026] [:error] [pid 1411:tid 1421] [client 103.65.237.124:52071] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "abdODdrCV4sh-le3M-2gAwAAAUg"]
[Mon Mar 16 08:25:49.972704 2026] [:error] [pid 62428:tid 62473] [client 103.65.237.124:52105] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "abdODarHSRXFZx1-aIHwMgAAAEQ"]
[Mon Mar 16 08:57:18.966066 2026] [:error] [pid 1411:tid 1436] [client 43.153.10.83:37734] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abdVbtrCV4sh-le3M-2xzAAAAVY"]
[Mon Mar 16 09:10:39.258265 2026] [:error] [pid 62529:tid 62548] [client 170.106.187.106:56858] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abdYjz84-luOVYZKK0Ox_QAAAMs"]
[Mon Mar 16 10:00:56.841348 2026] [:error] [pid 62427:tid 62462] [client 51.83.237.175:58208] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abdkWMUPP8fzo6XzJCUwugAAABU"]
[Mon Mar 16 10:00:57.921265 2026] [:error] [pid 12823:tid 12878] [client 51.83.237.175:58222] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "abdkWRlVKeelxvdJEr5ZIgAAAhA"]
[Mon Mar 16 10:00:58.209765 2026] [:error] [pid 62427:tid 62460] [client 51.83.237.175:58216] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abdkWsUPP8fzo6XzJCUwuwAAABM"]
[Mon Mar 16 10:00:58.709832 2026] [:error] [pid 62529:tid 62554] [client 51.83.237.175:51856] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdkWj84-luOVYZKK0PCJgAAANE"]
[Mon Mar 16 10:00:58.851011 2026] [:error] [pid 1411:tid 1429] [client 51.83.237.175:51864] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdkWtrCV4sh-le3M-3VLQAAAU8"]
[Mon Mar 16 10:00:59.998570 2026] [:error] [pid 62428:tid 62492] [client 51.83.237.175:51872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abdkW6rHSRXFZx1-aIH5JAAAAFc"]
[Mon Mar 16 10:01:00.493268 2026] [:error] [pid 62529:tid 62555] [client 51.83.237.175:51880] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdkXD84-luOVYZKK0PCLAAAANI"]
[Mon Mar 16 10:01:01.029324 2026] [:error] [pid 62529:tid 62541] [client 51.83.237.175:51890] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abdkXT84-luOVYZKK0PCLQAAAMQ"]
[Mon Mar 16 10:01:02.139615 2026] [:error] [pid 62429:tid 62513] [client 51.83.237.175:51900] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdkXlewIPukhLCowEEiGAAAAJE"]
[Mon Mar 16 10:01:02.689357 2026] [:error] [pid 62429:tid 62502] [client 51.83.237.175:51912] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdkXlewIPukhLCowEEiHQAAAIY"]
[Mon Mar 16 10:01:03.182703 2026] [:error] [pid 1411:tid 1435] [client 51.83.237.175:51916] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abdkX9rCV4sh-le3M-3VOQAAAVU"]
[Mon Mar 16 10:01:03.223002 2026] [:error] [pid 1411:tid 1432] [client 51.83.237.175:51930] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abdkX9rCV4sh-le3M-3VOgAAAVI"]
[Mon Mar 16 10:01:04.250218 2026] [:error] [pid 62429:tid 62510] [client 51.83.237.175:51932] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abdkYFewIPukhLCowEEiIQAAAI4"]
[Mon Mar 16 10:01:05.275061 2026] [:error] [pid 62429:tid 62509] [client 51.83.237.175:51948] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abdkYVewIPukhLCowEEiJAAAAI0"]
[Mon Mar 16 10:01:05.296959 2026] [:error] [pid 62429:tid 62516] [client 51.83.237.175:51956] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abdkYVewIPukhLCowEEiJQAAAJQ"]
[Mon Mar 16 10:01:06.353782 2026] [:error] [pid 62529:tid 62544] [client 51.83.237.175:51968] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abdkYj84-luOVYZKK0PCOgAAAMc"]
[Mon Mar 16 10:01:07.430095 2026] [:error] [pid 62429:tid 62520] [client 51.83.237.175:47904] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abdkY1ewIPukhLCowEEiLAAAAJg"]
[Mon Mar 16 10:01:07.510245 2026] [:error] [pid 62429:tid 62519] [client 51.83.237.175:47912] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abdkY1ewIPukhLCowEEiLwAAAJc"]
[Mon Mar 16 10:01:08.320833 2026] [:error] [pid 62429:tid 62502] [client 51.83.237.175:47928] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abdkZFewIPukhLCowEEiMQAAAIY"]
[Mon Mar 16 10:01:09.545671 2026] [:error] [pid 12768:tid 12775] [client 51.83.237.175:47930] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abdkZYvjhfol0SJym0_ZLgAAAYI"]
[Mon Mar 16 10:01:10.106743 2026] [:error] [pid 52152:tid 52177] [client 51.83.237.175:47942] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abdkZsA6rS_GLRd0NKWbAwAAARY"]
[Mon Mar 16 10:01:10.219870 2026] [:error] [pid 62429:tid 62518] [client 51.83.237.175:47950] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abdkZlewIPukhLCowEEiOAAAAJY"]
[Mon Mar 16 10:01:11.686792 2026] [:error] [pid 52152:tid 52159] [client 51.83.237.175:47958] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdkZ8A6rS_GLRd0NKWbBQAAAQQ"]
[Mon Mar 16 10:01:12.224975 2026] [:error] [pid 62529:tid 62545] [client 51.83.237.175:47974] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abdkaD84-luOVYZKK0PCRAAAAMg"]
[Mon Mar 16 10:01:12.257230 2026] [:error] [pid 62529:tid 62560] [client 51.83.237.175:47982] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abdkaD84-luOVYZKK0PCRQAAANc"]
[Mon Mar 16 10:01:13.628145 2026] [:error] [pid 1411:tid 1423] [client 51.83.237.175:47990] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdkadrCV4sh-le3M-3VTAAAAUo"]
[Mon Mar 16 10:01:14.245172 2026] [:error] [pid 1411:tid 1428] [client 51.83.237.175:48000] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdkatrCV4sh-le3M-3VUAAAAU4"]
[Mon Mar 16 10:01:14.268075 2026] [:error] [pid 1411:tid 1430] [client 51.83.237.175:48014] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdkatrCV4sh-le3M-3VUgAAAVA"]
[Mon Mar 16 10:01:15.683389 2026] [:error] [pid 52152:tid 52164] [client 51.83.237.175:48024] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdka8A6rS_GLRd0NKWbDQAAAQk"]
[Mon Mar 16 10:01:16.161312 2026] [:error] [pid 62428:tid 62482] [client 51.83.237.175:48026] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdkbKrHSRXFZx1-aIH5KwAAAE0"]
[Mon Mar 16 10:01:16.320156 2026] [:error] [pid 1411:tid 1434] [client 51.83.237.175:48032] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdkbNrCV4sh-le3M-3VWgAAAVQ"]
[Mon Mar 16 10:01:18.155827 2026] [:error] [pid 12768:tid 12779] [client 51.83.237.175:55742] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdkbovjhfol0SJym0_ZMAAAAYY"]
[Mon Mar 16 10:01:18.237052 2026] [:error] [pid 12823:tid 12884] [client 51.83.237.175:55756] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdkbhlVKeelxvdJEr5ZLQAAAhY"]
[Mon Mar 16 10:01:28.693450 2026] [:error] [pid 12768:tid 12774] [client 51.83.237.175:53822] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdkeIvjhfol0SJym0_ZPgAAAYE"]
[Mon Mar 16 10:01:32.643594 2026] [:error] [pid 62529:tid 62545] [client 51.83.237.175:53832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdkfD84-luOVYZKK0PCWgAAAMg"]
[Mon Mar 16 10:02:58.837741 2026] [:error] [pid 62429:tid 62507] [client 51.83.237.175:48158] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abdk0lewIPukhLCowEEi6AAAAIs"]
[Mon Mar 16 10:02:59.581644 2026] [:error] [pid 1411:tid 1417] [client 51.83.237.175:48162] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abdk09rCV4sh-le3M-3WiwAAAUQ"]
[Mon Mar 16 10:03:00.513250 2026] [:error] [pid 1411:tid 1415] [client 51.83.237.175:48150] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdk1NrCV4sh-le3M-3WjgAAAUI"]
[Mon Mar 16 10:03:01.015101 2026] [:error] [pid 62529:tid 62556] [client 51.83.237.175:43568] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdk1T84-luOVYZKK0PC1QAAANM"]
[Mon Mar 16 10:03:01.663050 2026] [:error] [pid 62429:tid 62520] [client 51.83.237.175:43576] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "abdk1VewIPukhLCowEEi7wAAAJg"]
[Mon Mar 16 10:03:02.631625 2026] [:error] [pid 52152:tid 52155] [client 51.83.237.175:43578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abdk1sA6rS_GLRd0NKWbUQAAAQA"]
[Mon Mar 16 10:03:02.933990 2026] [:error] [pid 52152:tid 52171] [client 51.83.237.175:43580] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abdk1sA6rS_GLRd0NKWbVAAAARA"]
[Mon Mar 16 10:03:03.663202 2026] [:error] [pid 1411:tid 1429] [client 51.83.237.175:43586] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abdk19rCV4sh-le3M-3WmAAAAU8"]
[Mon Mar 16 10:03:04.762634 2026] [:error] [pid 62427:tid 62452] [client 51.83.237.175:43596] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abdk2MUPP8fzo6XzJCUw7QAAAAs"]
[Mon Mar 16 10:03:05.251630 2026] [:error] [pid 1411:tid 1426] [client 51.83.237.175:43598] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abdk2drCV4sh-le3M-3WmQAAAU0"]
[Mon Mar 16 10:03:05.804567 2026] [:error] [pid 62429:tid 62501] [client 51.83.237.175:43604] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abdk2VewIPukhLCowEEjAAAAAIU"]
[Mon Mar 16 10:03:06.853294 2026] [:error] [pid 62429:tid 62513] [client 51.83.237.175:34862] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abdk2lewIPukhLCowEEjCAAAAJE"]
[Mon Mar 16 10:03:07.267482 2026] [:error] [pid 1411:tid 1416] [client 51.83.237.175:34874] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abdk29rCV4sh-le3M-3WmwAAAUM"]
[Mon Mar 16 10:03:07.892334 2026] [:error] [pid 62429:tid 62514] [client 51.83.237.175:34878] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abdk21ewIPukhLCowEEjDwAAAJI"]
[Mon Mar 16 10:03:08.837421 2026] [:error] [pid 12822:tid 12838] [client 51.83.237.175:34880] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abdk3IG9Ft4WPo7r7sR7ZgAAAcM"]
[Mon Mar 16 10:03:09.274472 2026] [:error] [pid 1411:tid 1417] [client 51.83.237.175:34886] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abdk3drCV4sh-le3M-3WoAAAAUQ"]
[Mon Mar 16 10:03:10.124663 2026] [:error] [pid 12768:tid 12779] [client 51.83.237.175:34896] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abdk3ovjhfol0SJym0_ZvAAAAYY"]
[Mon Mar 16 10:03:10.751407 2026] [:error] [pid 62429:tid 62510] [client 51.83.237.175:34900] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abdk3lewIPukhLCowEEjGgAAAI4"]
[Mon Mar 16 10:03:11.301062 2026] [:error] [pid 62429:tid 62507] [client 51.83.237.175:34910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abdk31ewIPukhLCowEEjGwAAAIs"]
[Mon Mar 16 10:03:12.671847 2026] [:error] [pid 62429:tid 62519] [client 51.83.237.175:34920] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abdk4FewIPukhLCowEEjHwAAAJc"]
[Mon Mar 16 10:03:12.715450 2026] [:error] [pid 1411:tid 1413] [client 51.83.237.175:34930] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdk4NrCV4sh-le3M-3WsAAAAUA"]
[Mon Mar 16 10:03:13.199598 2026] [:error] [pid 1411:tid 1426] [client 51.83.237.175:34936] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdk4drCV4sh-le3M-3WsQAAAU0"]
[Mon Mar 16 10:03:14.813852 2026] [:error] [pid 1411:tid 1426] [client 51.83.237.175:34944] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdk4trCV4sh-le3M-3WvQAAAU0"]
[Mon Mar 16 10:03:15.180576 2026] [:error] [pid 1411:tid 1414] [client 51.83.237.175:34950] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abdk49rCV4sh-le3M-3WwgAAAUE"]
[Mon Mar 16 10:03:15.352186 2026] [:error] [pid 1411:tid 1429] [client 51.83.237.175:34956] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdk49rCV4sh-le3M-3WwwAAAU8"]
[Mon Mar 16 10:03:16.820824 2026] [:error] [pid 1411:tid 1422] [client 51.83.237.175:40492] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdk5NrCV4sh-le3M-3WzgAAAUk"]
[Mon Mar 16 10:03:17.379735 2026] [:error] [pid 1411:tid 1433] [client 51.83.237.175:40506] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abdk5drCV4sh-le3M-3W0QAAAVM"]
[Mon Mar 16 10:03:17.489275 2026] [:error] [pid 1411:tid 1438] [client 51.83.237.175:40520] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdk5drCV4sh-le3M-3W1AAAAVg"]
[Mon Mar 16 10:03:19.381648 2026] [:error] [pid 62429:tid 62512] [client 51.83.237.175:40532] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdk51ewIPukhLCowEEjKAAAAJA"]
[Mon Mar 16 10:03:21.393788 2026] [:error] [pid 1411:tid 1413] [client 51.83.237.175:40548] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdk6drCV4sh-le3M-3W5AAAAUA"]
[Mon Mar 16 10:03:23.493456 2026] [:error] [pid 1411:tid 1437] [client 51.83.237.175:40558] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdk69rCV4sh-le3M-3W8wAAAVc"]
[Mon Mar 16 10:03:33.811885 2026] [:error] [pid 62529:tid 62561] [client 51.83.237.175:51066] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdk9T84-luOVYZKK0PC9wAAANg"]
[Mon Mar 16 10:03:37.552412 2026] [:error] [pid 12822:tid 12849] [client 51.83.237.175:43054] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdk-YG9Ft4WPo7r7sR7dwAAAc4"]
[Mon Mar 16 10:06:44.299088 2026] [:error] [pid 62428:tid 62489] [client 51.83.237.175:48946] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdltKrHSRXFZx1-aIH5ugAAAFQ"]
[Mon Mar 16 10:06:44.400876 2026] [:error] [pid 1411:tid 1436] [client 51.83.237.175:59084] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abdltNrCV4sh-le3M-3ZiQAAAVY"]
[Mon Mar 16 10:06:47.119619 2026] [:error] [pid 62428:tid 62470] [client 51.83.237.175:33184] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abdlt6rHSRXFZx1-aIH5vQAAAEE"]
[Mon Mar 16 10:06:48.963918 2026] [:error] [pid 62529:tid 62559] [client 51.83.237.175:33196] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdluD84-luOVYZKK0PEDQAAANY"]
[Mon Mar 16 10:06:49.160070 2026] [:error] [pid 12822:tid 12836] [client 51.83.237.175:33202] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abdluYG9Ft4WPo7r7sR8AAAAAcE"]
[Mon Mar 16 10:07:23.656325 2026] [:error] [pid 12823:tid 12862] [client 51.83.237.175:50594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdl2xlVKeelxvdJEr5apQAAAgA"]
[Mon Mar 16 10:07:27.497774 2026] [:error] [pid 12823:tid 12883] [client 51.83.237.175:52066] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abdl3xlVKeelxvdJEr5argAAAhU"]
[Mon Mar 16 11:05:12.365861 2026] [:error] [pid 62510:tid 62534] [client 173.239.236.118:43557] [client 173.239.236.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abdzaCE33_T9aKpoDdjpoQAAARU"]
[Mon Mar 16 11:05:13.402347 2026] [:error] [pid 9249:tid 9268] [client 173.239.236.142:53083] [client 173.239.236.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abdzaQsX15dONR9F2wy3gQAAAU4"]
[Mon Mar 16 11:05:14.896281 2026] [:error] [pid 9305:tid 9325] [client 173.239.236.3:56659] [client 173.239.236.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzavRqyKiwGvzyRKyaDgAAAY8"]
[Mon Mar 16 11:05:15.119093 2026] [:error] [pid 9354:tid 9373] [client 173.239.236.224:34881] [client 173.239.236.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abdza3BF0M4d8CifbJ43HQAAAco"]
[Mon Mar 16 11:24:36.462476 2026] [:error] [pid 62025:tid 62065] [client 179.108.2.22:39427] [client 179.108.2.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.2.22, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abd39OimBfLmKh7zLXMO1gAAAEY"]
[Mon Mar 16 11:24:36.468481 2026] [:error] [pid 62025:tid 62065] [client 179.108.2.22:39427] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 12:53:25.833706 2026] [:error] [pid 9249:tid 9264] [client 212.227.21.19:39526] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abeMxQsX15dONR9F2wzBUQAAAUo"]
[Mon Mar 16 12:53:27.943002 2026] [:error] [pid 9305:tid 9325] [client 212.227.21.19:26002] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abeMx_RqyKiwGvzyRKymOQAAAY8"]
[Mon Mar 16 12:53:29.960094 2026] [:error] [pid 62024:tid 62053] [client 212.227.21.19:26014] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abeMyYk-5rtjYvjqC_pmywAAABg"]
[Mon Mar 16 12:53:31.904864 2026] [:error] [pid 62510:tid 62517] [client 212.227.21.19:26026] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abeMyyE33_T9aKpoDdgUUgAAAQQ"]
[Mon Mar 16 12:53:33.955841 2026] [:error] [pid 9400:tid 9435] [client 212.227.21.19:26034] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abeMzQSHzD8ZM8ddLEnbcwAAAhM"]
[Mon Mar 16 12:53:35.978885 2026] [:error] [pid 62510:tid 62514] [client 212.227.21.19:26036] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abeMzyE33_T9aKpoDdgUZAAAAQE"]
[Mon Mar 16 12:53:38.027724 2026] [:error] [pid 62025:tid 62081] [client 212.227.21.19:52548] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abeM0uimBfLmKh7zLXNA5QAAAFY"]
[Mon Mar 16 12:53:39.912094 2026] [:error] [pid 62510:tid 62514] [client 212.227.21.19:52558] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abeM0yE33_T9aKpoDdgUeQAAAQE"]
[Mon Mar 16 12:53:41.951649 2026] [:error] [pid 62024:tid 62031] [client 212.227.21.19:52570] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abeM1Yk-5rtjYvjqC_pm4wAAAAI"]
[Mon Mar 16 12:53:43.848402 2026] [:error] [pid 62510:tid 62532] [client 212.227.21.19:52586] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abeM1yE33_T9aKpoDdgUhQAAARM"]
[Mon Mar 16 12:53:45.726871 2026] [:error] [pid 62510:tid 62525] [client 212.227.21.19:52590] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abeM2SE33_T9aKpoDdgUjAAAAQw"]
[Mon Mar 16 12:53:47.643861 2026] [:error] [pid 62026:tid 62095] [client 212.227.21.19:57348] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abeM2-8oW52PUIYI2O4pBQAAAIk"]
[Mon Mar 16 12:53:49.697709 2026] [:error] [pid 62025:tid 62072] [client 212.227.21.19:57352] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abeM3eimBfLmKh7zLXNA9wAAAE0"]
[Mon Mar 16 12:53:51.725877 2026] [:error] [pid 9305:tid 9327] [client 212.227.21.19:57366] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abeM3_RqyKiwGvzyRKymQgAAAZE"]
[Mon Mar 16 12:53:53.630513 2026] [:error] [pid 62025:tid 62083] [client 212.227.21.19:57376] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abeM4eimBfLmKh7zLXNBAwAAAFg"]
[Mon Mar 16 12:53:55.657037 2026] [:error] [pid 62025:tid 62065] [client 212.227.21.19:57382] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abeM4-imBfLmKh7zLXNBCwAAAEY"]
[Mon Mar 16 12:53:57.552000 2026] [:error] [pid 62026:tid 62101] [client 212.227.21.19:44486] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abeM5e8oW52PUIYI2O4pGwAAAI8"]
[Mon Mar 16 12:53:59.585556 2026] [:error] [pid 62024:tid 62042] [client 212.227.21.19:44498] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abeM54k-5rtjYvjqC_pnJwAAAA0"]
[Mon Mar 16 12:54:01.474391 2026] [:error] [pid 62024:tid 62040] [client 212.227.21.19:44510] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abeM6Yk-5rtjYvjqC_pnNwAAAAs"]
[Mon Mar 16 12:54:03.490286 2026] [:error] [pid 62025:tid 62066] [client 212.227.21.19:44524] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abeM6-imBfLmKh7zLXNBHQAAAEc"]
[Mon Mar 16 12:54:05.535627 2026] [:error] [pid 9400:tid 9433] [client 212.227.21.19:44536] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abeM7QSHzD8ZM8ddLEnbfwAAAhE"]
[Mon Mar 16 12:54:07.409944 2026] [:error] [pid 62024:tid 62029] [client 212.227.21.19:44544] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abeM74k-5rtjYvjqC_pnUAAAAAA"]
[Mon Mar 16 12:54:09.294966 2026] [:error] [pid 9249:tid 9260] [client 212.227.21.19:28942] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abeM8QsX15dONR9F2wzBYgAAAUY"]
[Mon Mar 16 12:54:13.097395 2026] [:error] [pid 62025:tid 62071] [client 212.227.21.19:28948] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abeM9eimBfLmKh7zLXNBPAAAAEw"]
[Mon Mar 16 14:26:55.024654 2026] [:error] [pid 9400:tid 9421] [client 161.97.66.6:46956] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abeirwSHzD8ZM8ddLEn0qAAAAgU"]
[Mon Mar 16 14:26:57.123021 2026] [:error] [pid 62025:tid 62075] [client 161.97.66.6:41812] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abeiseimBfLmKh7zLXNiJwAAAFA"]
[Mon Mar 16 14:26:59.142363 2026] [:error] [pid 9400:tid 9424] [client 161.97.66.6:42320] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abeiswSHzD8ZM8ddLEn0wQAAAgg"]
[Mon Mar 16 14:27:01.360526 2026] [:error] [pid 9400:tid 9434] [client 161.97.66.6:42326] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abeitQSHzD8ZM8ddLEn0ywAAAhI"]
[Mon Mar 16 14:27:03.987403 2026] [:error] [pid 9400:tid 9440] [client 161.97.66.6:42340] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abeitwSHzD8ZM8ddLEn00gAAAhg"]
[Mon Mar 16 14:27:06.489663 2026] [:error] [pid 62510:tid 62513] [client 161.97.66.6:42352] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abeiuiE33_T9aKpoDdgzigAAAQA"]
[Mon Mar 16 14:27:08.634799 2026] [:error] [pid 62510:tid 62517] [client 161.97.66.6:57738] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abeivCE33_T9aKpoDdgzjgAAAQQ"]
[Mon Mar 16 14:27:10.873147 2026] [:error] [pid 62025:tid 62069] [client 161.97.66.6:57744] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abeivuimBfLmKh7zLXNiOgAAAEo"]
[Mon Mar 16 14:27:12.923134 2026] [:error] [pid 9249:tid 9266] [client 161.97.66.6:57754] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abeiwAsX15dONR9F2wzKtwAAAUw"]
[Mon Mar 16 14:27:15.049461 2026] [:error] [pid 9400:tid 9418] [client 161.97.66.6:57764] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abeiwwSHzD8ZM8ddLEn05wAAAgI"]
[Mon Mar 16 14:27:17.539532 2026] [:error] [pid 9305:tid 9323] [client 161.97.66.6:57774] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abeixfRqyKiwGvzyRKyxfwAAAY0"]
[Mon Mar 16 14:27:20.018345 2026] [:error] [pid 9354:tid 9369] [client 161.97.66.6:58304] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abeiyHBF0M4d8CifbJ5RdQAAAcY"]
[Mon Mar 16 14:27:22.087738 2026] [:error] [pid 62510:tid 62525] [client 161.97.66.6:58312] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abeiyiE33_T9aKpoDdgzlwAAAQw"]
[Mon Mar 16 14:27:24.328706 2026] [:error] [pid 62119:tid 62135] [client 161.97.66.6:58324] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abeizD-Co-Fir-PyAwfg0QAAAM0"]
[Mon Mar 16 14:27:26.532879 2026] [:error] [pid 62119:tid 62141] [client 161.97.66.6:58326] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abeizj-Co-Fir-PyAwfg0wAAANM"]
[Mon Mar 16 14:27:28.584100 2026] [:error] [pid 62025:tid 62074] [client 161.97.66.6:33300] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abei0OimBfLmKh7zLXNiRAAAAE8"]
[Mon Mar 16 14:27:30.973212 2026] [:error] [pid 62119:tid 62146] [client 161.97.66.6:33302] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abei0j-Co-Fir-PyAwfg1gAAANg"]
[Mon Mar 16 14:27:33.271521 2026] [:error] [pid 9400:tid 9421] [client 161.97.66.6:33308] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abei1QSHzD8ZM8ddLEn1EQAAAgU"]
[Mon Mar 16 14:54:42.288380 2026] [:error] [pid 62024:tid 62035] [client 43.157.172.39:53772] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abepMok-5rtjYvjqC_qe6AAAAAY"]
[Mon Mar 16 14:57:45.088024 2026] [:error] [pid 9354:tid 9372] [client 62.84.185.55:6502] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abep6XBF0M4d8CifbJ5VpQAAAck"]
[Mon Mar 16 14:57:47.288831 2026] [:error] [pid 62024:tid 62033] [client 62.84.185.55:27224] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abep64k-5rtjYvjqC_qgMwAAAAQ"]
[Mon Mar 16 14:57:49.460359 2026] [:error] [pid 62024:tid 62031] [client 62.84.185.55:27240] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abep7Yk-5rtjYvjqC_qgPgAAAAI"]
[Mon Mar 16 14:57:51.390339 2026] [:error] [pid 62510:tid 62532] [client 62.84.185.55:27256] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abep7yE33_T9aKpoDdg-uwAAARM"]
[Mon Mar 16 14:57:53.468656 2026] [:error] [pid 9400:tid 9422] [client 62.84.185.55:27258] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abep8QSHzD8ZM8ddLEkFNgAAAgY"]
[Mon Mar 16 14:57:55.708200 2026] [:error] [pid 62025:tid 62067] [client 62.84.185.55:27270] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abep8-imBfLmKh7zLXNqQQAAAEg"]
[Mon Mar 16 14:57:57.667971 2026] [:error] [pid 62025:tid 62079] [client 62.84.185.55:12922] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abep9eimBfLmKh7zLXNqRQAAAFQ"]
[Mon Mar 16 14:57:59.714321 2026] [:error] [pid 9400:tid 9420] [client 62.84.185.55:12936] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abep9wSHzD8ZM8ddLEkFPgAAAgQ"]
[Mon Mar 16 14:58:01.606226 2026] [:error] [pid 9400:tid 9419] [client 62.84.185.55:12946] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abep-QSHzD8ZM8ddLEkFRwAAAgM"]
[Mon Mar 16 14:58:03.551294 2026] [:error] [pid 9305:tid 9326] [client 62.84.185.55:12956] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abep-_RqyKiwGvzyRKy0-gAAAZA"]
[Mon Mar 16 14:58:05.665075 2026] [:error] [pid 9249:tid 9256] [client 62.84.185.55:12964] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abep_QsX15dONR9F2wzNSAAAAUI"]
[Mon Mar 16 14:58:07.867347 2026] [:error] [pid 9400:tid 9440] [client 62.84.185.55:59820] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abep_wSHzD8ZM8ddLEkFYgAAAhg"]
[Mon Mar 16 14:58:09.963416 2026] [:error] [pid 62510:tid 62536] [client 62.84.185.55:59824] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abeqASE33_T9aKpoDdg-4AAAARc"]
[Mon Mar 16 14:58:11.983096 2026] [:error] [pid 9400:tid 9433] [client 62.84.185.55:59832] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abeqAwSHzD8ZM8ddLEkFcwAAAhE"]
[Mon Mar 16 14:58:13.976393 2026] [:error] [pid 9400:tid 9426] [client 62.84.185.55:59844] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abeqBQSHzD8ZM8ddLEkFjAAAAgo"]
[Mon Mar 16 14:58:16.171768 2026] [:error] [pid 62025:tid 62067] [client 62.84.185.55:59850] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abeqCOimBfLmKh7zLXNqawAAAEg"]
[Mon Mar 16 14:58:18.391962 2026] [:error] [pid 62024:tid 62035] [client 62.84.185.55:5292] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abeqCok-5rtjYvjqC_qgXQAAAAY"]
[Mon Mar 16 14:58:20.548296 2026] [:error] [pid 62510:tid 62528] [client 62.84.185.55:5294] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abeqDCE33_T9aKpoDdg-8AAAAQ8"]
[Mon Mar 16 14:58:22.573304 2026] [:error] [pid 9249:tid 9258] [client 62.84.185.55:5296] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abeqDgsX15dONR9F2wzNSwAAAUQ"]
[Mon Mar 16 14:58:24.569155 2026] [:error] [pid 9400:tid 9433] [client 62.84.185.55:5300] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abeqEASHzD8ZM8ddLEkFtAAAAhE"]
[Mon Mar 16 14:58:26.655172 2026] [:error] [pid 62024:tid 62041] [client 62.84.185.55:5316] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abeqEok-5rtjYvjqC_qgZgAAAAw"]
[Mon Mar 16 14:58:28.663572 2026] [:error] [pid 62024:tid 62031] [client 62.84.185.55:56524] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abeqFIk-5rtjYvjqC_qgbgAAAAI"]
[Mon Mar 16 14:58:30.653723 2026] [:error] [pid 9400:tid 9432] [client 62.84.185.55:56536] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abeqFgSHzD8ZM8ddLEkFxAAAAhA"]
[Mon Mar 16 14:58:32.389911 2026] [:error] [pid 9400:tid 9421] [client 62.84.185.55:56542] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abeqGASHzD8ZM8ddLEkFyQAAAgU"]
[Mon Mar 16 14:58:36.263178 2026] [:error] [pid 62510:tid 62517] [client 62.84.185.55:56544] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abeqHCE33_T9aKpoDdg_DAAAAQQ"]
[Mon Mar 16 15:02:08.710070 2026] [:error] [pid 9400:tid 9426] [client 49.51.52.250:50534] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abeq8ASHzD8ZM8ddLEkHCgAAAgo"]
[Mon Mar 16 19:54:34.172210 2026] [:error] [pid 39154:tid 39157] [client 64.89.163.113:63214] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abfvehgq1_qjm7J1LqsiVAAAAUA"]
[Mon Mar 16 19:54:34.677636 2026] [:error] [pid 1871:tid 1897] [client 64.89.163.113:50966] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6jwAAAZg"]
[Mon Mar 16 19:54:35.307011 2026] [:error] [pid 35929:tid 35947] [client 64.89.163.113:62908] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abfve9W47dGpmA63hwSKxgAAANA"]
[Mon Mar 16 19:54:35.862502 2026] [:error] [pid 35839:tid 35884] [client 64.89.163.113:49645] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abfve6xyv6h8-aZrncsJKQAAAE4"]
[Mon Mar 16 19:54:36.527756 2026] [:error] [pid 1871:tid 1879] [client 64.89.163.113:65513] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abfvfDinTnZ8uiUPekE68AAAAYY"]
[Mon Mar 16 20:19:15.523923 2026] [:error] [pid 35838:tid 35858] [client 145.239.69.44:48646] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abf1QxroTe-x3JLtmo6kpwAAABA"]
[Mon Mar 16 20:19:17.541309 2026] [:error] [pid 1871:tid 1895] [client 145.239.69.44:53792] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abf1RTinTnZ8uiUPekFFVgAAAZY"]
[Mon Mar 16 20:19:19.452847 2026] [:error] [pid 1871:tid 1893] [client 145.239.69.44:53806] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abf1RzinTnZ8uiUPekFFWwAAAZQ"]
[Mon Mar 16 20:19:21.407045 2026] [:error] [pid 1871:tid 1885] [client 145.239.69.44:59546] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abf1STinTnZ8uiUPekFFYQAAAYw"]
[Mon Mar 16 20:19:23.237095 2026] [:error] [pid 35838:tid 35859] [client 145.239.69.44:59554] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abf1SxroTe-x3JLtmo6ksgAAABE"]
[Mon Mar 16 20:19:25.241551 2026] [:error] [pid 35929:tid 35954] [client 145.239.69.44:59568] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abf1TdW47dGpmA63hwSOyAAAANc"]
[Mon Mar 16 20:19:27.329164 2026] [:error] [pid 1871:tid 1894] [client 145.239.69.44:59582] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abf1TzinTnZ8uiUPekFFcQAAAZU"]
[Mon Mar 16 20:19:29.444807 2026] [:error] [pid 35838:tid 35843] [client 145.239.69.44:59592] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abf1URroTe-x3JLtmo6ktQAAAAE"]
[Mon Mar 16 20:19:31.540757 2026] [:error] [pid 35840:tid 35918] [client 145.239.69.44:37920] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abf1U0JFzfEsmtPx-M0MSwAAAJU"]
[Mon Mar 16 20:19:33.597865 2026] [:error] [pid 35838:tid 35856] [client 145.239.69.44:37924] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abf1VRroTe-x3JLtmo6kwQAAAA4"]
[Mon Mar 16 20:19:35.754058 2026] [:error] [pid 35838:tid 35850] [client 145.239.69.44:37940] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abf1VxroTe-x3JLtmo6kxAAAAAg"]
[Mon Mar 16 20:19:37.665939 2026] [:error] [pid 39154:tid 39167] [client 145.239.69.44:37954] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abf1WRgq1_qjm7J1LqsoMgAAAUo"]
[Mon Mar 16 20:19:39.625828 2026] [:error] [pid 39154:tid 39177] [client 145.239.69.44:37964] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abf1Wxgq1_qjm7J1LqsoNQAAAVQ"]
[Mon Mar 16 20:19:41.592283 2026] [:error] [pid 1871:tid 1884] [client 145.239.69.44:49980] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abf1XTinTnZ8uiUPekFFdwAAAYs"]
[Mon Mar 16 20:19:43.440060 2026] [:error] [pid 39154:tid 39168] [client 145.239.69.44:49990] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abf1Xxgq1_qjm7J1LqsoOwAAAUs"]
[Mon Mar 16 20:19:45.277398 2026] [:error] [pid 35839:tid 35879] [client 145.239.69.44:49994] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abf1Yaxyv6h8-aZrncsMRwAAAEk"]
[Mon Mar 16 20:19:47.373771 2026] [:error] [pid 35929:tid 35935] [client 145.239.69.44:50000] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abf1Y9W47dGpmA63hwSO2AAAAMQ"]
[Mon Mar 16 20:19:49.273551 2026] [:error] [pid 35929:tid 35951] [client 145.239.69.44:50002] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abf1ZdW47dGpmA63hwSO2QAAANQ"]
[Mon Mar 16 20:19:53.093539 2026] [:error] [pid 35838:tid 35860] [client 145.239.69.44:43924] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abf1aRroTe-x3JLtmo6k4gAAABI"]
[Mon Mar 16 20:19:56.936514 2026] [:error] [pid 1871:tid 1874] [client 145.239.69.44:43940] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abf1bDinTnZ8uiUPekFFigAAAYE"]
[Mon Mar 16 20:29:12.773074 2026] [:error] [pid 36198:tid 36216] [client 43.135.144.81:43848] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abf3mOlL1GNckmsdWlM8yQAAAQ8"]
[Mon Mar 16 21:42:23.196092 2026] [:error] [pid 35929:tid 35939] [client 173.239.224.92:22655] [client 173.239.224.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.92, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abgIv9W47dGpmA63hwSirwAAAMg"]
[Mon Mar 16 21:42:23.200974 2026] [:error] [pid 35929:tid 35939] [client 173.239.224.92:22655] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 02:04:46.543986 2026] [:error] [pid 3200:tid 3222] [client 49.51.39.209:32950] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abhGPlFOeKiNLMuAjec7qwAAARQ"]
[Tue Mar 17 03:59:11.001044 2026] [:error] [pid 45917:tid 45995] [client 147.135.213.172:45112] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abhhDhMMhmeqL5fT_hdc5gAAAIY"]
[Tue Mar 17 03:59:12.815826 2026] [:error] [pid 46020:tid 46029] [client 147.135.213.172:46062] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abhhEH-nCcd9BdzGdLer6AAAAMc"]
[Tue Mar 17 03:59:14.828329 2026] [:error] [pid 45917:tid 46012] [client 147.135.213.172:46072] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abhhEhMMhmeqL5fT_hdc7QAAAJc"]
[Tue Mar 17 04:17:39.144459 2026] [:error] [pid 45916:tid 45979] [client 203.2.64.59:50913] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abhlY7iS53PnClk_C9DV5wAAAFE"]
[Tue Mar 17 06:37:39.325451 2026] [:error] [pid 46020:tid 46033] [client 51.77.216.62:41166] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abiGM3-nCcd9BdzGdLcJMAAAAMs"]
[Tue Mar 17 06:37:41.548100 2026] [:error] [pid 22541:tid 22565] [client 51.77.216.62:54694] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abiGNaS6JNY1-CTsTA_5jAAAARM"]
[Tue Mar 17 06:37:43.728146 2026] [:error] [pid 45916:tid 45978] [client 51.77.216.62:34860] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiGN7iS53PnClk_C9D7VwAAAFA"]
[Tue Mar 17 06:37:46.130552 2026] [:error] [pid 22541:tid 22568] [client 51.77.216.62:34868] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abiGOqS6JNY1-CTsTA_5kwAAARY"]
[Tue Mar 17 06:37:48.241329 2026] [:error] [pid 45917:tid 45993] [client 51.77.216.62:34872] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abiGPBMMhmeqL5fT_heUmgAAAIQ"]
[Tue Mar 17 06:37:50.729332 2026] [:error] [pid 45915:tid 45940] [client 51.77.216.62:34876] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abiGPph7U84ydzcrcncKLQAAAAs"]
[Tue Mar 17 06:37:52.915103 2026] [:error] [pid 45915:tid 45939] [client 51.77.216.62:58766] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiGQJh7U84ydzcrcncKMwAAAAo"]
[Tue Mar 17 06:37:55.100177 2026] [:error] [pid 22541:tid 22552] [client 51.77.216.62:58782] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abiGQ6S6JNY1-CTsTA_5rQAAAQY"]
[Tue Mar 17 06:37:57.107645 2026] [:error] [pid 46020:tid 46030] [client 51.77.216.62:58784] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abiGRX-nCcd9BdzGdLcJWAAAAMg"]
[Tue Mar 17 06:37:59.166076 2026] [:error] [pid 46020:tid 46025] [client 51.77.216.62:58794] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abiGR3-nCcd9BdzGdLcJXQAAAMM"]
[Tue Mar 17 06:38:01.424500 2026] [:error] [pid 45917:tid 45992] [client 51.77.216.62:58810] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abiGSRMMhmeqL5fT_heUrgAAAIM"]
[Tue Mar 17 06:38:03.357297 2026] [:error] [pid 45917:tid 45994] [client 51.77.216.62:40996] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abiGSxMMhmeqL5fT_heUtgAAAIU"]
[Tue Mar 17 06:38:05.186502 2026] [:error] [pid 45917:tid 46003] [client 51.77.216.62:41006] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abiGTRMMhmeqL5fT_heUvAAAAI4"]
[Tue Mar 17 06:38:07.253188 2026] [:error] [pid 45917:tid 46000] [client 51.77.216.62:41016] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiGTxMMhmeqL5fT_heUvwAAAIs"]
[Tue Mar 17 06:38:09.258443 2026] [:error] [pid 46020:tid 46040] [client 51.77.216.62:41032] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abiGUX-nCcd9BdzGdLcJawAAANI"]
[Tue Mar 17 06:38:11.459472 2026] [:error] [pid 46020:tid 46045] [client 51.77.216.62:41036] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abiGU3-nCcd9BdzGdLcJcAAAANc"]
[Tue Mar 17 06:38:13.642956 2026] [:error] [pid 45916:tid 45986] [client 51.77.216.62:45442] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abiGVbiS53PnClk_C9D7dQAAAFg"]
[Tue Mar 17 06:38:15.649132 2026] [:error] [pid 46020:tid 46046] [client 51.77.216.62:45444] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiGV3-nCcd9BdzGdLcJdQAAANg"]
[Tue Mar 17 06:38:18.418339 2026] [:error] [pid 22541:tid 22559] [client 51.77.216.62:45456] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abiGWqS6JNY1-CTsTA_5ywAAAQ0"]
[Tue Mar 17 06:38:20.505345 2026] [:error] [pid 45915:tid 45929] [client 51.77.216.62:45462] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abiGXJh7U84ydzcrcncKUQAAAAA"]
[Tue Mar 17 06:38:22.625021 2026] [:error] [pid 22541:tid 22569] [client 51.77.216.62:46196] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abiGXqS6JNY1-CTsTA_52gAAARc"]
[Tue Mar 17 06:38:24.525676 2026] [:error] [pid 45915:tid 45939] [client 51.77.216.62:46200] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abiGYJh7U84ydzcrcncKVQAAAAo"]
[Tue Mar 17 06:38:26.738029 2026] [:error] [pid 45915:tid 45941] [client 51.77.216.62:46206] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiGYph7U84ydzcrcncKWAAAAAw"]
[Tue Mar 17 06:38:31.590990 2026] [:error] [pid 45917:tid 45999] [client 51.77.216.62:46220] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiGZxMMhmeqL5fT_heU3wAAAIo"]
[Tue Mar 17 06:40:05.310480 2026] [:error] [pid 45917:tid 46013] [client 51.77.216.62:49112] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "abiGxRMMhmeqL5fT_heVNwAAAJg"]
[Tue Mar 17 06:40:05.856004 2026] [:error] [pid 46020:tid 46043] [client 51.77.216.62:55280] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abiGxX-nCcd9BdzGdLcKRAAAANU"]
[Tue Mar 17 06:40:07.331457 2026] [:error] [pid 22541:tid 22546] [client 51.77.216.62:49126] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "abiGx6S6JNY1-CTsTA_6lAAAAQA"]
[Tue Mar 17 06:40:07.785926 2026] [:error] [pid 45917:tid 46002] [client 51.77.216.62:49132] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abiGxxMMhmeqL5fT_heVOgAAAI0"]
[Tue Mar 17 06:40:09.894355 2026] [:error] [pid 22541:tid 22556] [client 51.77.216.62:49146] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "abiGyaS6JNY1-CTsTA_6nwAAAQo"]
[Tue Mar 17 06:40:10.093815 2026] [:error] [pid 45915:tid 45937] [client 51.77.216.62:49154] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abiGyph7U84ydzcrcncKzwAAAAg"]
[Tue Mar 17 06:40:11.977590 2026] [:error] [pid 45917:tid 46008] [client 51.77.216.62:49166] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "abiGyxMMhmeqL5fT_heVQwAAAJM"]
[Tue Mar 17 06:40:12.271862 2026] [:error] [pid 45917:tid 45994] [client 51.77.216.62:33772] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiGzBMMhmeqL5fT_heVRQAAAIU"]
[Tue Mar 17 06:40:14.073269 2026] [:error] [pid 46020:tid 46039] [client 51.77.216.62:33782] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "abiGzn-nCcd9BdzGdLcKUQAAANE"]
[Tue Mar 17 06:40:14.681381 2026] [:error] [pid 45915:tid 45933] [client 51.77.216.62:33796] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abiGzph7U84ydzcrcncK0gAAAAQ"]
[Tue Mar 17 06:40:16.272847 2026] [:error] [pid 22541:tid 22563] [client 51.77.216.62:33818] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "abiG0KS6JNY1-CTsTA_6ogAAARE"]
[Tue Mar 17 06:40:16.598090 2026] [:error] [pid 45916:tid 45986] [client 51.77.216.62:33822] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abiG0LiS53PnClk_C9D7xwAAAFg"]
[Tue Mar 17 06:40:18.428051 2026] [:error] [pid 45916:tid 45977] [client 51.77.216.62:33838] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "abiG0riS53PnClk_C9D7ygAAAE8"]
[Tue Mar 17 06:40:19.044127 2026] [:error] [pid 45916:tid 45983] [client 51.77.216.62:33844] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abiG07iS53PnClk_C9D7zAAAAFU"]
[Tue Mar 17 06:40:20.741189 2026] [:error] [pid 45916:tid 45970] [client 51.77.216.62:33870] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abiG1LiS53PnClk_C9D7zwAAAEg"]
[Tue Mar 17 06:40:21.672072 2026] [:error] [pid 45916:tid 45965] [client 51.77.216.62:33884] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiG1biS53PnClk_C9D71AAAAEM"]
[Tue Mar 17 06:40:22.734289 2026] [:error] [pid 45915:tid 45944] [client 51.77.216.62:40706] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abiG1ph7U84ydzcrcncK2QAAAA8"]
[Tue Mar 17 06:40:23.900229 2026] [:error] [pid 45916:tid 45977] [client 51.77.216.62:40710] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abiG17iS53PnClk_C9D71wAAAE8"]
[Tue Mar 17 06:40:24.695559 2026] [:error] [pid 22541:tid 22569] [client 51.77.216.62:40714] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abiG2KS6JNY1-CTsTA_6sQAAARc"]
[Tue Mar 17 06:40:26.055745 2026] [:error] [pid 46020:tid 46024] [client 51.77.216.62:40722] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abiG2n-nCcd9BdzGdLcKVAAAAMI"]
[Tue Mar 17 06:40:26.967571 2026] [:error] [pid 46020:tid 46025] [client 51.77.216.62:40726] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abiG2n-nCcd9BdzGdLcKVQAAAMM"]
[Tue Mar 17 06:40:28.166075 2026] [:error] [pid 46020:tid 46032] [client 51.77.216.62:40742] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abiG3H-nCcd9BdzGdLcKWQAAAMo"]
[Tue Mar 17 06:40:28.881034 2026] [:error] [pid 46020:tid 46045] [client 51.77.216.62:40758] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abiG3H-nCcd9BdzGdLcKXQAAANc"]
[Tue Mar 17 06:40:30.331317 2026] [:error] [pid 45917:tid 46002] [client 51.77.216.62:40762] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abiG3hMMhmeqL5fT_heVXwAAAI0"]
[Tue Mar 17 06:40:30.782887 2026] [:error] [pid 45916:tid 45977] [client 51.77.216.62:40764] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abiG3riS53PnClk_C9D74gAAAE8"]
[Tue Mar 17 06:40:32.610245 2026] [:error] [pid 45916:tid 45969] [client 51.77.216.62:38730] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abiG4LiS53PnClk_C9D75AAAAEc"]
[Tue Mar 17 06:40:32.927823 2026] [:error] [pid 45917:tid 45993] [client 51.77.216.62:38746] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abiG4BMMhmeqL5fT_heVYQAAAIQ"]
[Tue Mar 17 06:40:34.694403 2026] [:error] [pid 45916:tid 45965] [client 51.77.216.62:38752] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abiG4riS53PnClk_C9D76AAAAEM"]
[Tue Mar 17 06:40:35.211137 2026] [:error] [pid 22541:tid 22546] [client 51.77.216.62:38762] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abiG46S6JNY1-CTsTA_6wgAAAQA"]
[Tue Mar 17 06:40:36.908833 2026] [:error] [pid 22541:tid 22547] [client 51.77.216.62:38776] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiG5KS6JNY1-CTsTA_6xgAAAQE"]
[Tue Mar 17 06:40:37.685465 2026] [:error] [pid 46020:tid 46040] [client 51.77.216.62:38780] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abiG5X-nCcd9BdzGdLcKcwAAANI"]
[Tue Mar 17 06:40:38.986148 2026] [:error] [pid 46020:tid 46030] [client 51.77.216.62:38782] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abiG5n-nCcd9BdzGdLcKeAAAAMg"]
[Tue Mar 17 06:40:39.845988 2026] [:error] [pid 45917:tid 45995] [client 51.77.216.62:38792] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiG5xMMhmeqL5fT_heVZgAAAIY"]
[Tue Mar 17 06:40:41.064974 2026] [:error] [pid 45917:tid 45994] [client 51.77.216.62:38804] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abiG6RMMhmeqL5fT_heVawAAAIU"]
[Tue Mar 17 06:40:42.127936 2026] [:error] [pid 22541:tid 22569] [client 51.77.216.62:38808] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abiG6qS6JNY1-CTsTA_60wAAARc"]
[Tue Mar 17 06:40:43.599754 2026] [:error] [pid 22541:tid 22565] [client 51.77.216.62:48118] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abiG66S6JNY1-CTsTA_62gAAARM"]
[Tue Mar 17 06:40:44.199827 2026] [:error] [pid 45916:tid 45965] [client 51.77.216.62:48122] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abiG7LiS53PnClk_C9D78QAAAEM"]
[Tue Mar 17 06:40:45.951516 2026] [:error] [pid 45916:tid 45977] [client 51.77.216.62:48126] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiG7biS53PnClk_C9D79gAAAE8"]
[Tue Mar 17 06:40:46.379045 2026] [:error] [pid 45917:tid 45994] [client 51.77.216.62:48136] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abiG7hMMhmeqL5fT_heVdgAAAIU"]
[Tue Mar 17 06:40:47.947179 2026] [:error] [pid 22541:tid 22562] [client 51.77.216.62:48148] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abiG76S6JNY1-CTsTA_64gAAARA"]
[Tue Mar 17 06:40:48.412900 2026] [:error] [pid 22541:tid 22557] [client 51.77.216.62:48164] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abiG8KS6JNY1-CTsTA_65QAAAQs"]
[Tue Mar 17 06:40:50.189782 2026] [:error] [pid 45916:tid 45983] [client 51.77.216.62:48166] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abiG8riS53PnClk_C9D7-wAAAFU"]
[Tue Mar 17 06:40:50.551299 2026] [:error] [pid 45916:tid 45978] [client 51.77.216.62:48170] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abiG8riS53PnClk_C9D7_AAAAFA"]
[Tue Mar 17 06:40:52.408280 2026] [:error] [pid 22541:tid 22554] [client 51.77.216.62:48078] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abiG9KS6JNY1-CTsTA_66wAAAQg"]
[Tue Mar 17 06:40:52.802149 2026] [:error] [pid 22541:tid 22556] [client 51.77.216.62:48080] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abiG9KS6JNY1-CTsTA_68AAAAQo"]
[Tue Mar 17 06:40:54.929812 2026] [:error] [pid 46020:tid 46046] [client 51.77.216.62:48094] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abiG9n-nCcd9BdzGdLcKggAAANg"]
[Tue Mar 17 06:40:55.125551 2026] [:error] [pid 45917:tid 46012] [client 51.77.216.62:48110] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiG9xMMhmeqL5fT_heViQAAAJc"]
[Tue Mar 17 06:40:56.974189 2026] [:error] [pid 46020:tid 46030] [client 51.77.216.62:48118] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiG-H-nCcd9BdzGdLcKhAAAAMg"]
[Tue Mar 17 06:40:57.325890 2026] [:error] [pid 46020:tid 46031] [client 51.77.216.62:48132] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abiG-X-nCcd9BdzGdLcKhgAAAMk"]
[Tue Mar 17 06:40:59.788163 2026] [:error] [pid 46020:tid 46036] [client 51.77.216.62:48134] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abiG-3-nCcd9BdzGdLcKigAAAM4"]
[Tue Mar 17 06:41:00.701933 2026] [:error] [pid 46020:tid 46022] [client 51.77.216.62:48144] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiG_H-nCcd9BdzGdLcKjQAAAMA"]
[Tue Mar 17 06:41:01.629824 2026] [:error] [pid 46020:tid 46030] [client 51.77.216.62:48154] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abiG_X-nCcd9BdzGdLcKkAAAAMg"]
[Tue Mar 17 06:41:24.659293 2026] [:error] [pid 45917:tid 45992] [client 51.77.216.62:57420] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abiHFBMMhmeqL5fT_heVxQAAAIM"]
[Tue Mar 17 06:41:26.850383 2026] [:error] [pid 22541:tid 22562] [client 51.77.216.62:41992] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abiHFqS6JNY1-CTsTA_7KgAAARA"]
[Tue Mar 17 06:41:29.013927 2026] [:error] [pid 45917:tid 46011] [client 51.77.216.62:42002] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "abiHGRMMhmeqL5fT_heVywAAAJY"]
[Tue Mar 17 06:41:31.284382 2026] [:error] [pid 22541:tid 22556] [client 51.77.216.62:42010] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abiHG6S6JNY1-CTsTA_7NQAAAQo"]
[Tue Mar 17 06:41:33.674639 2026] [:error] [pid 45916:tid 45980] [client 51.77.216.62:34682] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abiHHbiS53PnClk_C9D8GgAAAFI"]
[Tue Mar 17 06:41:36.065375 2026] [:error] [pid 46020:tid 46034] [client 51.77.216.62:34692] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abiHIH-nCcd9BdzGdLcKvgAAAMw"]
[Tue Mar 17 06:41:38.169144 2026] [:error] [pid 46020:tid 46043] [client 51.77.216.62:34696] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abiHIn-nCcd9BdzGdLcKxgAAANU"]
[Tue Mar 17 06:41:40.294099 2026] [:error] [pid 45915:tid 45953] [client 51.77.216.62:34712] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiHJJh7U84ydzcrcncK_wAAABg"]
[Tue Mar 17 06:41:42.406603 2026] [:error] [pid 22541:tid 22559] [client 51.77.216.62:39038] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiHJqS6JNY1-CTsTA_7PwAAAQ0"]
[Tue Mar 17 06:41:44.513350 2026] [:error] [pid 45915:tid 45943] [client 51.77.216.62:39052] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abiHKJh7U84ydzcrcncLAwAAAA4"]
[Tue Mar 17 06:41:46.875258 2026] [:error] [pid 45917:tid 46005] [client 51.77.216.62:39056] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "abiHKhMMhmeqL5fT_heV5wAAAJA"]
[Tue Mar 17 06:41:49.106331 2026] [:error] [pid 22541:tid 22569] [client 51.77.216.62:39072] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "abiHLaS6JNY1-CTsTA_7SQAAARc"]
[Tue Mar 17 06:41:50.897689 2026] [:error] [pid 46020:tid 46041] [client 51.77.216.62:39080] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abiHLn-nCcd9BdzGdLcK6gAAANM"]
[Tue Mar 17 06:41:53.069929 2026] [:error] [pid 46020:tid 46043] [client 51.77.216.62:40154] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abiHMX-nCcd9BdzGdLcK7AAAANU"]
[Tue Mar 17 06:41:55.213705 2026] [:error] [pid 46020:tid 46029] [client 51.77.216.62:40166] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abiHM3-nCcd9BdzGdLcK7wAAAMc"]
[Tue Mar 17 06:41:57.262795 2026] [:error] [pid 46020:tid 46025] [client 51.77.216.62:40182] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abiHNX-nCcd9BdzGdLcK8wAAAMM"]
[Tue Mar 17 06:41:59.234395 2026] [:error] [pid 46020:tid 46046] [client 51.77.216.62:40194] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abiHN3-nCcd9BdzGdLcK9wAAANg"]
[Tue Mar 17 06:42:01.404775 2026] [:error] [pid 22541:tid 22554] [client 51.77.216.62:40204] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abiHOaS6JNY1-CTsTA_7WAAAAQg"]
[Tue Mar 17 06:42:03.435015 2026] [:error] [pid 22541:tid 22558] [client 51.77.216.62:57126] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abiHO6S6JNY1-CTsTA_7YAAAAQw"]
[Tue Mar 17 06:42:06.229908 2026] [:error] [pid 45917:tid 46005] [client 51.77.216.62:57138] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abiHPhMMhmeqL5fT_heV9AAAAJA"]
[Tue Mar 17 06:42:08.049314 2026] [:error] [pid 45917:tid 46007] [client 51.77.216.62:57148] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abiHQBMMhmeqL5fT_heV-AAAAJI"]
[Tue Mar 17 06:42:10.134929 2026] [:error] [pid 22541:tid 22557] [client 51.77.216.62:57156] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abiHQqS6JNY1-CTsTA_7cgAAAQs"]
[Tue Mar 17 06:42:12.184785 2026] [:error] [pid 46020:tid 46023] [client 51.77.216.62:37644] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abiHRH-nCcd9BdzGdLcLEgAAAME"]
[Tue Mar 17 07:41:32.746412 2026] [:error] [pid 45915:tid 45949] [client 65.108.2.171:62064] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abiVLJh7U84ydzcrcncWXAAAABQ"]
[Tue Mar 17 07:41:34.769720 2026] [:error] [pid 45915:tid 45945] [client 65.108.2.171:35942] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abiVLph7U84ydzcrcncWXwAAABA"]
[Tue Mar 17 07:41:36.744415 2026] [:error] [pid 46020:tid 46038] [client 65.108.2.171:35956] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abiVMH-nCcd9BdzGdLcyZwAAANA"]
[Tue Mar 17 07:41:38.774936 2026] [:error] [pid 45916:tid 45980] [client 65.108.2.171:35960] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abiVMriS53PnClk_C9ANGwAAAFI"]
[Tue Mar 17 07:41:40.729731 2026] [:error] [pid 46020:tid 46035] [client 65.108.2.171:35966] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abiVNH-nCcd9BdzGdLcyegAAAM0"]
[Tue Mar 17 07:41:42.778493 2026] [:error] [pid 46020:tid 46037] [client 65.108.2.171:35984] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abiVNn-nCcd9BdzGdLcygwAAAM8"]
[Tue Mar 17 07:41:44.766013 2026] [:error] [pid 46020:tid 46034] [client 65.108.2.171:53846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abiVOH-nCcd9BdzGdLcyiAAAAMw"]
[Tue Mar 17 07:41:46.786139 2026] [:error] [pid 45917:tid 45995] [client 65.108.2.171:53862] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "abiVOhMMhmeqL5fT_heqRQAAAIY"]
[Tue Mar 17 07:41:48.745830 2026] [:error] [pid 46020:tid 46036] [client 65.108.2.171:53872] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "abiVPH-nCcd9BdzGdLcylQAAAM4"]
[Tue Mar 17 07:41:50.858315 2026] [:error] [pid 46020:tid 46042] [client 65.108.2.171:53878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "abiVPn-nCcd9BdzGdLcynQAAANQ"]
[Tue Mar 17 07:41:52.803040 2026] [:error] [pid 46020:tid 46037] [client 65.108.2.171:53888] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abiVQH-nCcd9BdzGdLcypwAAAM8"]
[Tue Mar 17 07:41:54.971608 2026] [:error] [pid 46020:tid 46040] [client 65.108.2.171:54078] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abiVQn-nCcd9BdzGdLcy3wAAANI"]
[Tue Mar 17 07:41:57.089601 2026] [:error] [pid 45916:tid 45975] [client 65.108.2.171:54086] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abiVRbiS53PnClk_C9ANegAAAE0"]
[Tue Mar 17 07:41:58.928706 2026] [:error] [pid 22541:tid 22570] [client 65.108.2.171:54092] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abiVRqS6JNY1-CTsTA8V6wAAARg"]
[Tue Mar 17 07:42:00.878075 2026] [:error] [pid 22541:tid 22549] [client 65.108.2.171:54108] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abiVSKS6JNY1-CTsTA8V7gAAAQM"]
[Tue Mar 17 07:42:02.858298 2026] [:error] [pid 45915:tid 45949] [client 65.108.2.171:54112] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abiVSph7U84ydzcrcncWhgAAABQ"]
[Tue Mar 17 07:42:04.887298 2026] [:error] [pid 45916:tid 45986] [client 65.108.2.171:14804] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abiVTLiS53PnClk_C9ANfQAAAFg"]
[Tue Mar 17 07:42:06.513818 2026] [:error] [pid 46020:tid 46033] [client 65.108.2.171:14816] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiVTn-nCcd9BdzGdLczIQAAAMs"]
[Tue Mar 17 07:42:10.396233 2026] [:error] [pid 45917:tid 46004] [client 65.108.2.171:14822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiVUhMMhmeqL5fT_heqvwAAAI8"]
[Tue Mar 17 07:56:14.257140 2026] [:error] [pid 45916:tid 45982] [client 185.223.152.137:64245] [client 185.223.152.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.137, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "abiYnriS53PnClk_C9ATVwAAAFQ"]
[Tue Mar 17 07:56:14.260822 2026] [:error] [pid 45916:tid 45982] [client 185.223.152.137:64245] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 09:12:35.988037 2026] [:error] [pid 22541:tid 22560] [client 104.28.161.186:58607] [client 104.28.161.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/style.php"] [unique_id "abiqg6S6JNY1-CTsTA9CcwAAAQ4"]
[Tue Mar 17 09:45:52.847377 2026] [:error] [pid 45916:tid 45976] [client 147.135.213.11:52982] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiyULiS53PnClk_C9BSMwAAAE4"]
[Tue Mar 17 09:45:55.836510 2026] [:error] [pid 45915:tid 45938] [client 147.135.213.11:36150] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abiyU5h7U84ydzcrcndHPwAAAAk"]
[Tue Mar 17 09:45:58.958061 2026] [:error] [pid 22541:tid 22551] [client 147.135.213.11:36166] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abiyVqS6JNY1-CTsTA9NXgAAAQU"]
[Tue Mar 17 09:46:02.253227 2026] [:error] [pid 45915:tid 45947] [client 147.135.213.11:36170] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abiyWph7U84ydzcrcndHXQAAABI"]
[Tue Mar 17 09:46:04.546287 2026] [:error] [pid 45915:tid 45944] [client 147.135.213.11:36172] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abiyXJh7U84ydzcrcndHZAAAAA8"]
[Tue Mar 17 09:46:07.502711 2026] [:error] [pid 15013:tid 15080] [client 147.135.213.11:44048] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abiyX1Zc-p7DonmJmm2vWwAAAgM"]
[Tue Mar 17 09:46:10.000673 2026] [:error] [pid 14817:tid 14830] [client 147.135.213.11:44056] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abiyYeBWVgTpR3dKOga5owAAAUQ"]
[Tue Mar 17 09:46:12.446119 2026] [:error] [pid 45915:tid 45944] [client 147.135.213.11:44070] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abiyZJh7U84ydzcrcndHcQAAAA8"]
[Tue Mar 17 09:46:14.431833 2026] [:error] [pid 45915:tid 45949] [client 147.135.213.11:44072] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abiyZph7U84ydzcrcndHcwAAABQ"]
[Tue Mar 17 09:46:16.842625 2026] [:error] [pid 15013:tid 15084] [client 147.135.213.11:58026] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abiyaFZc-p7DonmJmm2vZwAAAgc"]
[Tue Mar 17 09:46:18.916971 2026] [:error] [pid 45915:tid 45933] [client 147.135.213.11:58034] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abiyaph7U84ydzcrcndHegAAAAQ"]
[Tue Mar 17 09:46:20.927161 2026] [:error] [pid 45915:tid 45953] [client 147.135.213.11:58046] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abiybJh7U84ydzcrcndHhwAAABg"]
[Tue Mar 17 09:46:22.960998 2026] [:error] [pid 45915:tid 45934] [client 147.135.213.11:58062] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abiybph7U84ydzcrcndHlQAAAAU"]
[Tue Mar 17 09:46:24.990679 2026] [:error] [pid 45915:tid 45950] [client 147.135.213.11:58072] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abiycJh7U84ydzcrcndHnAAAABU"]
[Tue Mar 17 09:46:26.948751 2026] [:error] [pid 15013:tid 15089] [client 147.135.213.11:44510] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiyclZc-p7DonmJmm2vggAAAgw"]
[Tue Mar 17 09:46:29.095400 2026] [:error] [pid 45916:tid 45971] [client 147.135.213.11:44520] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abiydbiS53PnClk_C9BSawAAAEk"]
[Tue Mar 17 09:46:31.158017 2026] [:error] [pid 15011:tid 15059] [client 147.135.213.11:44534] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiyd8NtgHlAHiPlDyoY6wAAAco"]
[Tue Mar 17 09:46:33.203064 2026] [:error] [pid 45916:tid 45973] [client 147.135.213.11:44536] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abiyebiS53PnClk_C9BSdwAAAEs"]
[Tue Mar 17 09:46:35.240006 2026] [:error] [pid 15011:tid 15055] [client 147.135.213.11:48450] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abiye8NtgHlAHiPlDyoY7AAAAcY"]
[Tue Mar 17 09:46:37.401900 2026] [:error] [pid 14817:tid 14850] [client 147.135.213.11:48462] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abiyfeBWVgTpR3dKOga5tAAAAVg"]
[Tue Mar 17 09:46:39.367206 2026] [:error] [pid 15162:tid 15169] [client 147.135.213.11:48478] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abiyf7kCW4399PnBfYSiCQAAAkI"]
[Tue Mar 17 09:46:41.564307 2026] [:error] [pid 15162:tid 15170] [client 147.135.213.11:48484] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiygbkCW4399PnBfYSiDgAAAkM"]
[Tue Mar 17 09:46:43.569711 2026] [:error] [pid 14817:tid 14842] [client 147.135.213.11:48492] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abiyg-BWVgTpR3dKOga5ugAAAVA"]
[Tue Mar 17 09:46:47.055886 2026] [:error] [pid 15013:tid 15094] [client 147.135.213.11:46156] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abiyh1Zc-p7DonmJmm2vnAAAAhE"]
[Tue Mar 17 09:47:10.320897 2026] [:error] [pid 15013:tid 15087] [client 147.135.213.11:46162] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "abiynlZc-p7DonmJmm2vxwAAAgo"]
[Tue Mar 17 09:47:12.297473 2026] [:error] [pid 14817:tid 14836] [client 147.135.213.11:40202] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abiyoOBWVgTpR3dKOga52AAAAUo"]
[Tue Mar 17 09:47:14.310647 2026] [:error] [pid 45915:tid 45943] [client 147.135.213.11:40206] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "abiyoph7U84ydzcrcndIBwAAAA4"]
[Tue Mar 17 09:47:16.225517 2026] [:error] [pid 45915:tid 45943] [client 147.135.213.11:45914] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abiypJh7U84ydzcrcndIDQAAAA4"]
[Tue Mar 17 09:47:18.215836 2026] [:error] [pid 15011:tid 15058] [client 147.135.213.11:45930] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abiypsNtgHlAHiPlDyoY9gAAAck"]
[Tue Mar 17 09:47:20.237485 2026] [:error] [pid 15013:tid 15097] [client 147.135.213.11:45934] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abiyqFZc-p7DonmJmm2vzAAAAhQ"]
[Tue Mar 17 09:47:22.179461 2026] [:error] [pid 45915:tid 45943] [client 147.135.213.11:45942] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abiyqph7U84ydzcrcndIDgAAAA4"]
[Tue Mar 17 09:47:24.033923 2026] [:error] [pid 15013:tid 15101] [client 147.135.213.11:45948] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abiyrFZc-p7DonmJmm2v1gAAAhg"]
[Tue Mar 17 09:47:26.045665 2026] [:error] [pid 45916:tid 45966] [client 147.135.213.11:47374] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abiyrriS53PnClk_C9BSyQAAAEQ"]
[Tue Mar 17 09:47:28.058988 2026] [:error] [pid 22541:tid 22559] [client 147.135.213.11:47382] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiysKS6JNY1-CTsTA9N8AAAAQ0"]
[Tue Mar 17 09:47:30.066672 2026] [:error] [pid 45915:tid 45932] [client 147.135.213.11:47394] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abiysph7U84ydzcrcndIMAAAAAM"]
[Tue Mar 17 09:47:31.867525 2026] [:error] [pid 15162:tid 15176] [client 147.135.213.11:47404] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abiys7kCW4399PnBfYSiRAAAAkk"]
[Tue Mar 17 09:47:33.660765 2026] [:error] [pid 15011:tid 15062] [client 147.135.213.11:47414] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abiytcNtgHlAHiPlDyoZBAAAAc0"]
[Tue Mar 17 09:47:35.603085 2026] [:error] [pid 45916:tid 45967] [client 147.135.213.11:60800] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiyt7iS53PnClk_C9BS3AAAAEU"]
[Tue Mar 17 09:47:37.456445 2026] [:error] [pid 45915:tid 45929] [client 147.135.213.11:60812] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abiyuZh7U84ydzcrcndIQAAAAAA"]
[Tue Mar 17 09:47:39.533257 2026] [:error] [pid 45916:tid 45975] [client 147.135.213.11:60826] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abiyu7iS53PnClk_C9BS5AAAAE0"]
[Tue Mar 17 09:47:41.352122 2026] [:error] [pid 14817:tid 14850] [client 147.135.213.11:60832] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abiyveBWVgTpR3dKOga57AAAAVg"]
[Tue Mar 17 10:32:16.687086 2026] [:error] [pid 15011:tid 15049] [client 49.233.45.47:46190] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abi9MMNtgHlAHiPlDyoctwAAAcA"]
[Tue Mar 17 13:46:52.377556 2026] [:error] [pid 15013:tid 15077] [client 51.75.119.112:47142] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abjqzFZc-p7DonmJmm3qjgAAAgA"]
[Tue Mar 17 13:46:54.640331 2026] [:error] [pid 45915:tid 45946] [client 51.75.119.112:60266] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abjqzph7U84ydzcrcne-cAAAABE"]
[Tue Mar 17 13:46:56.521066 2026] [:error] [pid 45915:tid 45938] [client 51.75.119.112:60270] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abjq0Jh7U84ydzcrcne-ggAAAAk"]
[Tue Mar 17 13:46:58.643562 2026] [:error] [pid 45916:tid 45971] [client 51.75.119.112:60272] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abjq0riS53PnClk_C9DkOQAAAEk"]
[Tue Mar 17 13:47:00.518817 2026] [:error] [pid 15013:tid 15097] [client 51.75.119.112:60286] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abjq1FZc-p7DonmJmm3qmQAAAhQ"]
[Tue Mar 17 13:47:02.647831 2026] [:error] [pid 22541:tid 22565] [client 51.75.119.112:55126] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abjq1qS6JNY1-CTsTA-fnAAAARM"]
[Tue Mar 17 13:47:04.683326 2026] [:error] [pid 22541:tid 22569] [client 51.75.119.112:55134] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abjq2KS6JNY1-CTsTA-fpQAAARc"]
[Tue Mar 17 13:47:06.686359 2026] [:error] [pid 45916:tid 45982] [client 51.75.119.112:55146] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abjq2riS53PnClk_C9DkRwAAAFQ"]
[Tue Mar 17 13:47:08.683846 2026] [:error] [pid 22541:tid 22569] [client 51.75.119.112:55162] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abjq3KS6JNY1-CTsTA-ftQAAARc"]
[Tue Mar 17 13:47:10.587959 2026] [:error] [pid 45916:tid 45985] [client 51.75.119.112:55172] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abjq3riS53PnClk_C9DkVgAAAFc"]
[Tue Mar 17 13:47:12.736361 2026] [:error] [pid 15013:tid 15095] [client 51.75.119.112:40414] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abjq4FZc-p7DonmJmm3qrQAAAhI"]
[Tue Mar 17 13:47:14.646898 2026] [:error] [pid 45916:tid 45967] [client 51.75.119.112:40428] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abjq4riS53PnClk_C9DkXQAAAEU"]
[Tue Mar 17 13:47:16.699604 2026] [:error] [pid 22541:tid 22555] [client 51.75.119.112:40432] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abjq5KS6JNY1-CTsTA-fvgAAAQk"]
[Tue Mar 17 13:47:18.745012 2026] [:error] [pid 45915:tid 45946] [client 51.75.119.112:40446] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abjq5ph7U84ydzcrcne-sgAAABE"]
[Tue Mar 17 13:47:20.796171 2026] [:error] [pid 22541:tid 22566] [client 51.75.119.112:40452] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abjq6KS6JNY1-CTsTA-fxAAAARQ"]
[Tue Mar 17 13:47:22.771416 2026] [:error] [pid 15013:tid 15100] [client 51.75.119.112:57896] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abjq6lZc-p7DonmJmm3quQAAAhc"]
[Tue Mar 17 13:47:24.798828 2026] [:error] [pid 22541:tid 22552] [client 51.75.119.112:57910] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abjq7KS6JNY1-CTsTA-fyQAAAQY"]
[Tue Mar 17 13:47:26.752102 2026] [:error] [pid 14817:tid 14847] [client 51.75.119.112:57916] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abjq7uBWVgTpR3dKOgbpQAAAAVU"]
[Tue Mar 17 13:47:28.671967 2026] [:error] [pid 15013:tid 15087] [client 51.75.119.112:57926] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abjq8FZc-p7DonmJmm3qwAAAAgo"]
[Tue Mar 17 13:47:32.606864 2026] [:error] [pid 45916:tid 45965] [client 51.75.119.112:58696] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abjq9LiS53PnClk_C9DkdAAAAEM"]
[Tue Mar 17 14:00:19.496374 2026] [:error] [pid 45916:tid 45978] [client 43.130.74.193:36578] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abjt87iS53PnClk_C9Dr2QAAAFA"]
[Tue Mar 17 14:05:28.666291 2026] [:error] [pid 46020:tid 46032] [client 43.157.142.101:32996] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abjvKH-nCcd9BdzGdLdr3gAAAMo"]
[Tue Mar 17 14:34:01.335211 2026] [:error] [pid 22541:tid 22568] [client 178.209.5.9:52318] [client 178.209.5.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.209.5.9, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abj12aS6JNY1-CTsTA-v0gAAARY"]
[Tue Mar 17 14:34:01.341856 2026] [:error] [pid 22541:tid 22568] [client 178.209.5.9:52318] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 17:40:49.161779 2026] [:error] [pid 46020:tid 46038] [client 34.148.251.217:52561] [client 34.148.251.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.251.217, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abkhoX-nCcd9BdzGdLeExQAAANA"]
[Tue Mar 17 17:40:49.165173 2026] [:error] [pid 46020:tid 46038] [client 34.148.251.217:52561] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 17:40:51.894353 2026] [:error] [pid 46020:tid 46035] [client 34.148.251.217:52561] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abkho3-nCcd9BdzGdLeE0QAAAM0"]
[Tue Mar 17 17:40:52.356311 2026] [:error] [pid 15013:tid 15101] [client 34.148.251.217:54001] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abkhpFZc-p7DonmJmm0jgQAAAhg"]
[Tue Mar 17 17:40:52.906608 2026] [:error] [pid 45915:tid 45947] [client 34.148.251.217:50882] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abkhpJh7U84ydzcrcnc37AAAABI"]
[Tue Mar 17 17:40:53.393975 2026] [:error] [pid 45915:tid 45953] [client 34.148.251.217:60695] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abkhpZh7U84ydzcrcnc37wAAABg"]
[Tue Mar 17 17:40:53.890249 2026] [:error] [pid 15162:tid 15170] [client 34.148.251.217:59205] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abkhpbkCW4399PnBfYTnWAAAAkM"]
[Tue Mar 17 17:40:54.408993 2026] [:error] [pid 15162:tid 15188] [client 34.148.251.217:54459] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abkhprkCW4399PnBfYTnWQAAAlU"]
[Tue Mar 17 17:40:54.988881 2026] [:error] [pid 45915:tid 45950] [client 34.148.251.217:52149] [client 34.148.251.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abkhpph7U84ydzcrcnc39QAAABU"]
[Tue Mar 17 19:39:16.434737 2026] [:error] [pid 45915:tid 45941] [client 43.166.134.47:46814] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abk9ZJh7U84ydzcrcnd4JwAAAAw"]
[Tue Mar 17 22:15:52.391988 2026] [:error] [pid 22541:tid 22549] [client 45.130.203.152:64575] [client 45.130.203.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/HEAD"] [unique_id "abliGKS6JNY1-CTsTA9BfgAAAQM"]
[Tue Mar 17 23:59:37.973453 2026] [:error] [pid 14817:tid 14829] [client 103.171.247.45:48898] [client 103.171.247.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.247.45, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abl6aeBWVgTpR3dKOgab_gAAAUM"]
[Tue Mar 17 23:59:37.980705 2026] [:error] [pid 14817:tid 14829] [client 103.171.247.45:48898] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 00:11:43.243062 2026] [:error] [pid 46020:tid 46023] [client 182.44.9.147:45863] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abl9P3-nCcd9BdzGdLevsQAAAME"]
[Wed Mar 18 01:18:04.338843 2026] [:error] [pid 63449:tid 63473] [client 217.182.195.179:33138] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abmMzAplutP4IZ5mr13XAwAAAVY"]
[Wed Mar 18 01:18:06.172541 2026] [:error] [pid 63612:tid 63625] [client 217.182.195.179:37306] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abmMzu7vPBSR8vo387MnBAAAAYs"]
[Wed Mar 18 01:18:08.076323 2026] [:error] [pid 41165:tid 41173] [client 217.182.195.179:37318] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abmM0HEHb7dujURQaRbYFAAAAQY"]
[Wed Mar 18 01:18:10.041077 2026] [:error] [pid 63612:tid 63638] [client 217.182.195.179:37322] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abmM0u7vPBSR8vo387MnFAAAAZg"]
[Wed Mar 18 01:18:11.955219 2026] [:error] [pid 63412:tid 63417] [client 217.182.195.179:37326] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abmM0zKUzzFOGoXRLQ-3kgAAAME"]
[Wed Mar 18 01:18:13.868299 2026] [:error] [pid 63612:tid 63632] [client 217.182.195.179:37334] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abmM1e7vPBSR8vo387MnHgAAAZI"]
[Wed Mar 18 01:18:15.679862 2026] [:error] [pid 63449:tid 63471] [client 217.182.195.179:56752] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abmM1wplutP4IZ5mr13XDQAAAVQ"]
[Wed Mar 18 01:18:17.600458 2026] [:error] [pid 63612:tid 63623] [client 217.182.195.179:56754] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "abmM2e7vPBSR8vo387MnMAAAAYk"]
[Wed Mar 18 01:18:19.540868 2026] [:error] [pid 63612:tid 63617] [client 217.182.195.179:56770] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "abmM2-7vPBSR8vo387MnPAAAAYM"]
[Wed Mar 18 01:18:21.669505 2026] [:error] [pid 40717:tid 41063] [client 217.182.195.179:56772] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "abmM3cR22EbC70ICesgN9QAAAIs"]
[Wed Mar 18 01:18:23.746016 2026] [:error] [pid 63412:tid 63424] [client 217.182.195.179:56778] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abmM3zKUzzFOGoXRLQ-3uQAAAMg"]
[Wed Mar 18 01:18:25.690619 2026] [:error] [pid 63612:tid 63619] [client 217.182.195.179:45156] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abmM4e7vPBSR8vo387MnYwAAAYU"]
[Wed Mar 18 01:18:27.783477 2026] [:error] [pid 40717:tid 41075] [client 217.182.195.179:45166] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abmM48R22EbC70ICesgN-QAAAJc"]
[Wed Mar 18 01:18:29.847611 2026] [:error] [pid 40717:tid 41070] [client 217.182.195.179:45174] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abmM5cR22EbC70ICesgN_QAAAJI"]
[Wed Mar 18 01:18:31.934518 2026] [:error] [pid 63412:tid 63423] [client 217.182.195.179:45188] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abmM5zKUzzFOGoXRLQ-3yAAAAMc"]
[Wed Mar 18 01:18:33.869609 2026] [:error] [pid 63449:tid 63465] [client 217.182.195.179:45192] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abmM6QplutP4IZ5mr13XHgAAAU4"]
[Wed Mar 18 01:18:35.795654 2026] [:error] [pid 40716:tid 41022] [client 217.182.195.179:59406] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abmM6xR6i4ByUuhUBAR1EwAAAEE"]
[Wed Mar 18 01:18:40.005094 2026] [:error] [pid 40717:tid 41061] [client 217.182.195.179:59422] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abmM8MR22EbC70ICesgOBAAAAIk"]
[Wed Mar 18 01:18:43.869214 2026] [:error] [pid 63449:tid 63461] [client 217.182.195.179:59436] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abmM8wplutP4IZ5mr13XNwAAAUo"]
[Wed Mar 18 03:26:44.678419 2026] [:error] [pid 63412:tid 63421] [client 135.181.213.219:8390] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abmq9DKUzzFOGoXRLQ_c4AAAAMU"]
[Wed Mar 18 03:26:46.553533 2026] [:error] [pid 63612:tid 63617] [client 135.181.213.219:8400] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abmq9u7vPBSR8vo387NpUgAAAYM"]
[Wed Mar 18 03:26:48.557115 2026] [:error] [pid 40715:tid 40960] [client 135.181.213.219:8412] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abmq-Gcms0rUPgdkLiEaagAAABY"]
[Wed Mar 18 03:26:50.610621 2026] [:error] [pid 40715:tid 40956] [client 135.181.213.219:40878] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abmq-mcms0rUPgdkLiEabAAAABI"]
[Wed Mar 18 03:26:52.671508 2026] [:error] [pid 40717:tid 41051] [client 135.181.213.219:40886] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abmq_MR22EbC70ICesgkPwAAAIA"]
[Wed Mar 18 03:26:54.526805 2026] [:error] [pid 63612:tid 63616] [client 135.181.213.219:40888] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abmq_u7vPBSR8vo387NpYwAAAYI"]
[Wed Mar 18 03:26:56.577200 2026] [:error] [pid 63612:tid 63634] [client 135.181.213.219:40894] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abmrAO7vPBSR8vo387NpaAAAAZQ"]
[Wed Mar 18 03:26:58.593947 2026] [:error] [pid 63612:tid 63634] [client 135.181.213.219:40898] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abmrAu7vPBSR8vo387NpdQAAAZQ"]
[Wed Mar 18 03:27:00.513989 2026] [:error] [pid 40716:tid 41027] [client 135.181.213.219:34526] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abmrBBR6i4ByUuhUBASlmAAAAEY"]
[Wed Mar 18 03:27:02.416302 2026] [:error] [pid 40715:tid 40943] [client 135.181.213.219:34528] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abmrBmcms0rUPgdkLiEafAAAAAU"]
[Wed Mar 18 03:27:04.464313 2026] [:error] [pid 40716:tid 41036] [client 135.181.213.219:34534] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abmrCBR6i4ByUuhUBASloAAAAE8"]
[Wed Mar 18 03:27:06.355708 2026] [:error] [pid 40716:tid 41023] [client 135.181.213.219:34546] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abmrChR6i4ByUuhUBASlqQAAAEI"]
[Wed Mar 18 03:27:08.315958 2026] [:error] [pid 63612:tid 63632] [client 135.181.213.219:34556] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abmrDO7vPBSR8vo387NpfgAAAZI"]
[Wed Mar 18 03:27:10.202970 2026] [:error] [pid 63612:tid 63618] [client 135.181.213.219:41588] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abmrDu7vPBSR8vo387NpiQAAAYQ"]
[Wed Mar 18 03:27:12.374085 2026] [:error] [pid 40716:tid 41042] [client 135.181.213.219:41596] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abmrEBR6i4ByUuhUBASltwAAAFU"]
[Wed Mar 18 03:27:14.286372 2026] [:error] [pid 63612:tid 63623] [client 135.181.213.219:41598] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abmrEu7vPBSR8vo387NpmAAAAYk"]
[Wed Mar 18 03:27:16.296957 2026] [:error] [pid 63449:tid 63464] [client 135.181.213.219:41614] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abmrFAplutP4IZ5mr13zZwAAAU0"]
[Wed Mar 18 03:27:18.255149 2026] [:error] [pid 63412:tid 63433] [client 135.181.213.219:41628] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abmrFjKUzzFOGoXRLQ_c9wAAANE"]
[Wed Mar 18 03:56:18.235382 2026] [:error] [pid 44965:tid 45022] [client 147.135.212.151:57170] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abmx4qNZys-oG-hM22hgLQAAAEw"]
[Wed Mar 18 03:56:20.039518 2026] [:error] [pid 44965:tid 45028] [client 147.135.212.151:40020] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abmx5KNZys-oG-hM22hgLgAAAFI"]
[Wed Mar 18 03:56:22.419293 2026] [:error] [pid 44966:tid 45044] [client 147.135.212.151:40024] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abmx5rHml2_01Zq4-12WFwAAAIc"]
[Wed Mar 18 03:56:24.449924 2026] [:error] [pid 44965:tid 45021] [client 147.135.212.151:40038] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abmx6KNZys-oG-hM22hgQQAAAEs"]
[Wed Mar 18 03:56:26.888153 2026] [:error] [pid 44966:tid 45060] [client 147.135.212.151:40048] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abmx6rHml2_01Zq4-12WJgAAAJc"]
[Wed Mar 18 03:56:29.221391 2026] [:error] [pid 44964:tid 44984] [client 147.135.212.151:56732] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abmx7cvMufm4ayzOOhA5BAAAAAY"]
[Wed Mar 18 03:56:31.519103 2026] [:error] [pid 44964:tid 44989] [client 147.135.212.151:56734] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abmx78vMufm4ayzOOhA5BwAAAAs"]
[Wed Mar 18 03:56:33.689816 2026] [:error] [pid 45069:tid 45078] [client 147.135.212.151:56738] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abmx8TNzUMBULZVa94ypIQAAAMc"]
[Wed Mar 18 03:56:35.827861 2026] [:error] [pid 45069:tid 45080] [client 147.135.212.151:56752] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abmx8zNzUMBULZVa94ypMwAAAMk"]
[Wed Mar 18 03:56:38.992561 2026] [:error] [pid 45069:tid 45074] [client 147.135.212.151:43994] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abmx9jNzUMBULZVa94ypRgAAAMM"]
[Wed Mar 18 03:56:41.242280 2026] [:error] [pid 45069:tid 45074] [client 147.135.212.151:44004] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abmx-TNzUMBULZVa94ypUgAAAMM"]
[Wed Mar 18 03:56:43.518455 2026] [:error] [pid 44965:tid 45011] [client 147.135.212.151:44008] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abmx-6NZys-oG-hM22hgVAAAAEE"]
[Wed Mar 18 03:56:45.634094 2026] [:error] [pid 44966:tid 45053] [client 147.135.212.151:44012] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abmx_bHml2_01Zq4-12WRgAAAJA"]
[Wed Mar 18 03:56:48.247842 2026] [:error] [pid 44965:tid 45018] [client 147.135.212.151:33962] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abmyAKNZys-oG-hM22hgXQAAAEg"]
[Wed Mar 18 03:56:50.995246 2026] [:error] [pid 45069:tid 45079] [client 147.135.212.151:33968] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abmyAjNzUMBULZVa94ypeAAAAMg"]
[Wed Mar 18 03:56:53.260485 2026] [:error] [pid 44964:tid 44983] [client 147.135.212.151:33982] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abmyBcvMufm4ayzOOhA5GwAAAAU"]
[Wed Mar 18 03:56:55.469640 2026] [:error] [pid 44965:tid 45033] [client 147.135.212.151:33994] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abmyB6NZys-oG-hM22hgZwAAAFc"]
[Wed Mar 18 03:56:57.581982 2026] [:error] [pid 44964:tid 44986] [client 147.135.212.151:44334] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abmyCcvMufm4ayzOOhA5IgAAAAg"]
[Wed Mar 18 03:56:59.550004 2026] [:error] [pid 45069:tid 45077] [client 147.135.212.151:44350] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abmyCzNzUMBULZVa94ypnQAAAMY"]
[Wed Mar 18 03:57:01.899671 2026] [:error] [pid 45069:tid 45080] [client 147.135.212.151:44356] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abmyDTNzUMBULZVa94ypqQAAAMk"]
[Wed Mar 18 03:57:04.008047 2026] [:error] [pid 45069:tid 45071] [client 147.135.212.151:44358] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abmyEDNzUMBULZVa94ypsQAAAMA"]
[Wed Mar 18 03:57:06.004832 2026] [:error] [pid 45069:tid 45073] [client 147.135.212.151:44372] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abmyEjNzUMBULZVa94ypuAAAAMI"]
[Wed Mar 18 03:57:08.547104 2026] [:error] [pid 44966:tid 45038] [client 147.135.212.151:33720] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abmyFLHml2_01Zq4-12WfQAAAIE"]
[Wed Mar 18 03:57:10.771104 2026] [:error] [pid 45069:tid 45077] [client 147.135.212.151:33728] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abmyFjNzUMBULZVa94ypvwAAAMY"]
[Wed Mar 18 03:57:39.846336 2026] [:error] [pid 45069:tid 45080] [client 147.135.212.151:33738] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "abmyMzNzUMBULZVa94yqKwAAAMk"]
[Wed Mar 18 03:57:42.777067 2026] [:error] [pid 45069:tid 45077] [client 147.135.212.151:39212] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abmyNjNzUMBULZVa94yqQAAAAMY"]
[Wed Mar 18 03:57:45.475564 2026] [:error] [pid 44966:tid 45060] [client 147.135.212.151:39214] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "abmyObHml2_01Zq4-12W9wAAAJc"]
[Wed Mar 18 03:57:47.662758 2026] [:error] [pid 45069:tid 45081] [client 147.135.212.151:49928] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abmyOzNzUMBULZVa94yqWAAAAMo"]
[Wed Mar 18 03:57:50.257559 2026] [:error] [pid 45069:tid 45084] [client 147.135.212.151:49972] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abmyPjNzUMBULZVa94yqZAAAAM0"]
[Wed Mar 18 03:57:52.640511 2026] [:error] [pid 44964:tid 44982] [client 147.135.212.151:49988] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abmyQMvMufm4ayzOOhA5bAAAAAQ"]
[Wed Mar 18 03:57:54.466962 2026] [:error] [pid 45069:tid 45091] [client 147.135.212.151:50002] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abmyQjNzUMBULZVa94yqbwAAANQ"]
[Wed Mar 18 03:57:56.679409 2026] [:error] [pid 44966:tid 45052] [client 147.135.212.151:50022] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abmyRLHml2_01Zq4-12XBQAAAI8"]
[Wed Mar 18 03:57:58.633844 2026] [:error] [pid 45069:tid 45071] [client 147.135.212.151:51664] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abmyRjNzUMBULZVa94yqegAAAMA"]
[Wed Mar 18 03:58:01.988845 2026] [:error] [pid 44964:tid 44998] [client 147.135.212.151:51678] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abmyScvMufm4ayzOOhA5egAAABQ"]
[Wed Mar 18 03:58:04.842612 2026] [:error] [pid 44964:tid 44990] [client 147.135.212.151:51690] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abmyTMvMufm4ayzOOhA5fgAAAAw"]
[Wed Mar 18 03:58:07.102058 2026] [:error] [pid 44965:tid 45028] [client 147.135.212.151:51696] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abmyT6NZys-oG-hM22hg6AAAAFI"]
[Wed Mar 18 03:58:09.327786 2026] [:error] [pid 45069:tid 45090] [client 147.135.212.151:41530] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abmyUTNzUMBULZVa94yqnwAAANM"]
[Wed Mar 18 03:58:11.888473 2026] [:error] [pid 44965:tid 45031] [client 147.135.212.151:41544] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abmyU6NZys-oG-hM22hg7QAAAFU"]
[Wed Mar 18 03:58:15.222086 2026] [:error] [pid 45069:tid 45072] [client 147.135.212.151:41560] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abmyVzNzUMBULZVa94yquQAAAME"]
[Wed Mar 18 03:58:18.053917 2026] [:error] [pid 44966:tid 45042] [client 147.135.212.151:38832] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abmyWrHml2_01Zq4-12XOgAAAIU"]
[Wed Mar 18 03:58:20.442073 2026] [:error] [pid 45069:tid 45088] [client 147.135.212.151:38834] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abmyXDNzUMBULZVa94yq0QAAANE"]
[Wed Mar 18 05:17:05.949533 2026] [:error] [pid 44965:tid 45033] [client 41.249.103.38:61485] [client 41.249.103.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "abnE0aNZys-oG-hM22h1QQAAAFc"]
[Wed Mar 18 06:00:46.264290 2026] [:error] [pid 13676:tid 13701] [client 75.119.155.172:43774] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abnPDmxDEHR5lvAEVIjoPAAAARc"]
[Wed Mar 18 06:00:48.326374 2026] [:error] [pid 44966:tid 45051] [client 75.119.155.172:43782] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abnPELHml2_01Zq4-128DAAAAI4"]
[Wed Mar 18 06:00:50.357314 2026] [:error] [pid 13676:tid 13686] [client 75.119.155.172:43798] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abnPEmxDEHR5lvAEVIjoRQAAAQg"]
[Wed Mar 18 06:35:21.874979 2026] [:error] [pid 45069:tid 45082] [client 20.116.1.191:31224] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Mar 18 06:35:22.357543 2026] [:error] [pid 45069:tid 45083] [client 20.116.1.191:31224] [client 20.116.1.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.1.191, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abnXKjNzUMBULZVa94zyhAAAAMw"]
[Wed Mar 18 06:35:22.597196 2026] [:error] [pid 45069:tid 45087] [client 20.116.1.191:31224] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Wed Mar 18 06:35:23.448622 2026] [:error] [pid 45069:tid 45078] [client 20.116.1.191:31224] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Wed Mar 18 06:35:24.494134 2026] [:error] [pid 45069:tid 45071] [client 20.116.1.191:31224] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Mar 18 06:35:24.777749 2026] [:error] [pid 45069:tid 45089] [client 20.116.1.191:31224] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abnXLDNzUMBULZVa94zyjwAAANI"]
[Wed Mar 18 06:35:26.798423 2026] [:error] [pid 13716:tid 13735] [client 20.116.1.191:31213] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abnXLmWKzQVHkZkUHaQQ5QAAAVE"]
[Wed Mar 18 06:35:28.525907 2026] [:error] [pid 13716:tid 13739] [client 20.116.1.191:31427] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abnXMGWKzQVHkZkUHaQQ6QAAAVU"]
[Wed Mar 18 06:35:30.732406 2026] [:error] [pid 13716:tid 13720] [client 20.116.1.191:31215] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abnXMmWKzQVHkZkUHaQQ7QAAAUI"]
[Wed Mar 18 07:04:49.778280 2026] [:error] [pid 13676:tid 13678] [client 167.250.65.26:49932] [client 167.250.65.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.250.65.26, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abneEWxDEHR5lvAEVIj9NgAAAQA"]
[Wed Mar 18 07:04:49.782921 2026] [:error] [pid 13676:tid 13678] [client 167.250.65.26:49932] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 07:43:41.242961 2026] [:error] [pid 13716:tid 13725] [client 65.108.78.33:28200] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abnnLWWKzQVHkZkUHaRDGAAAAUc"]
[Wed Mar 18 07:43:43.110077 2026] [:error] [pid 45069:tid 45091] [client 65.108.78.33:20504] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abnnLzNzUMBULZVa94wT5wAAANQ"]
[Wed Mar 18 07:43:45.131124 2026] [:error] [pid 13676:tid 13688] [client 65.108.78.33:20512] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abnnMWxDEHR5lvAEVIgL1wAAAQo"]
[Wed Mar 18 07:43:47.355362 2026] [:error] [pid 13716:tid 13736] [client 65.108.78.33:20522] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abnnM2WKzQVHkZkUHaRDJgAAAVI"]
[Wed Mar 18 07:43:49.384922 2026] [:error] [pid 13716:tid 13732] [client 65.108.78.33:20530] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abnnNWWKzQVHkZkUHaRDMQAAAU4"]
[Wed Mar 18 07:43:51.260850 2026] [:error] [pid 13716:tid 13724] [client 65.108.78.33:20534] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abnnN2WKzQVHkZkUHaRDOQAAAUY"]
[Wed Mar 18 07:43:53.284476 2026] [:error] [pid 13676:tid 13680] [client 65.108.78.33:2954] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abnnOWxDEHR5lvAEVIgL4AAAAQI"]
[Wed Mar 18 07:43:55.165589 2026] [:error] [pid 13716:tid 13722] [client 65.108.78.33:2962] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abnnO2WKzQVHkZkUHaRDSQAAAUQ"]
[Wed Mar 18 07:43:57.171919 2026] [:error] [pid 13716:tid 13720] [client 65.108.78.33:2968] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abnnPWWKzQVHkZkUHaRDUAAAAUI"]
[Wed Mar 18 07:43:59.185639 2026] [:error] [pid 45069:tid 45077] [client 65.108.78.33:2970] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abnnPzNzUMBULZVa94wT8AAAAMY"]
[Wed Mar 18 07:44:01.088634 2026] [:error] [pid 44966:tid 45060] [client 65.108.78.33:2972] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abnnQbHml2_01Zq4-13WTQAAAJc"]
[Wed Mar 18 07:44:13.373147 2026] [:error] [pid 13716:tid 13731] [client 65.108.78.33:64998] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abnnTWWKzQVHkZkUHaRDdgAAAU0"]
[Wed Mar 18 07:44:15.411099 2026] [:error] [pid 44966:tid 45057] [client 65.108.78.33:65008] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abnnT7Hml2_01Zq4-13WVwAAAJQ"]
[Wed Mar 18 07:44:17.435210 2026] [:error] [pid 44966:tid 45044] [client 65.108.78.33:65024] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abnnUbHml2_01Zq4-13WWAAAAIc"]
[Wed Mar 18 07:44:19.303741 2026] [:error] [pid 44966:tid 45043] [client 65.108.78.33:65028] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abnnU7Hml2_01Zq4-13WWgAAAIY"]
[Wed Mar 18 07:44:21.302763 2026] [:error] [pid 13716:tid 13730] [client 65.108.78.33:65032] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abnnVWWKzQVHkZkUHaRDowAAAUw"]
[Wed Mar 18 07:44:23.209406 2026] [:error] [pid 13716:tid 13728] [client 65.108.78.33:56884] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abnnV2WKzQVHkZkUHaRDuwAAAUo"]
[Wed Mar 18 07:44:25.179425 2026] [:error] [pid 44965:tid 45012] [client 65.108.78.33:56898] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abnnWaNZys-oG-hM22iUDgAAAEI"]
[Wed Mar 18 07:44:26.753508 2026] [:error] [pid 13716:tid 13726] [client 65.108.78.33:56904] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abnnWmWKzQVHkZkUHaRDxgAAAUg"]
[Wed Mar 18 07:44:30.622169 2026] [:error] [pid 44965:tid 45013] [client 65.108.78.33:56906] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abnnXqNZys-oG-hM22iUEQAAAEM"]
[Wed Mar 18 08:13:18.800514 2026] [:error] [pid 44965:tid 45026] [client 20.2.90.103:39796] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "abnuHqNZys-oG-hM22ia5gAAAFA"]
[Wed Mar 18 08:22:55.825782 2026] [:error] [pid 44966:tid 45048] [client 89.187.187.82:35626] [client 89.187.187.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.82, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abnwX7Hml2_01Zq4-130AAAAAIs"]
[Wed Mar 18 08:22:55.830254 2026] [:error] [pid 44966:tid 45048] [client 89.187.187.82:35626] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 08:22:57.997453 2026] [:error] [pid 44966:tid 45049] [client 89.187.187.82:35626] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abnwYbHml2_01Zq4-130DQAAAIw"]
[Wed Mar 18 08:22:58.330317 2026] [:error] [pid 44966:tid 45039] [client 89.187.187.82:30697] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abnwYrHml2_01Zq4-130DgAAAII"]
[Wed Mar 18 08:22:58.660135 2026] [:error] [pid 13716:tid 13727] [client 89.187.187.82:35646] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abnwYmWKzQVHkZkUHaRcjgAAAUk"]
[Wed Mar 18 08:22:58.982591 2026] [:error] [pid 14861:tid 14873] [client 89.187.187.82:35652] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abnwYiW0PeWaIC54JJbgSwAAAYc"]
[Wed Mar 18 08:23:00.380846 2026] [:error] [pid 13716:tid 13733] [client 89.187.187.82:40194] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abnwZGWKzQVHkZkUHaRckwAAAU8"]
[Wed Mar 18 08:23:00.743882 2026] [:error] [pid 13716:tid 13721] [client 89.187.187.82:35963] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abnwZGWKzQVHkZkUHaRclQAAAUM"]
[Wed Mar 18 08:23:01.069810 2026] [:error] [pid 13716:tid 13722] [client 89.187.187.82:18973] [client 89.187.187.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abnwZWWKzQVHkZkUHaRclwAAAUQ"]
[Wed Mar 18 13:46:56.862100 2026] [:error] [pid 53755:tid 53758] [client 43.165.65.75:48872] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abo8UKqw5ZSRshmIhWmLigAAAUE"]
[Wed Mar 18 14:15:08.083442 2026] [:error] [pid 43009:tid 43031] [client 103.39.130.89:63433] [client 103.39.130.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.39.130.89, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abpC7H8aUp4Sm6m3nmMEfQAAARQ"]
[Wed Mar 18 14:15:08.089783 2026] [:error] [pid 43009:tid 43031] [client 103.39.130.89:63433] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 18:54:52.511299 2026] [:error] [pid 31232:tid 31257] [client 217.182.139.33:60258] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abqEfGX6HV7dqh3BQD3FxwAAAFY"]
[Wed Mar 18 18:54:54.636441 2026] [:error] [pid 43009:tid 43020] [client 217.182.139.33:50912] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abqEfn8aUp4Sm6m3nmMoRAAAAQk"]
[Wed Mar 18 18:54:56.636888 2026] [:error] [pid 43009:tid 43034] [client 217.182.139.33:50924] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abqEgH8aUp4Sm6m3nmMoSgAAARc"]
[Wed Mar 18 18:54:58.590273 2026] [:error] [pid 42970:tid 42992] [client 217.182.139.33:50936] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abqEgo5YFUj4vBJI0KQr-gAAANQ"]
[Wed Mar 18 18:55:00.708381 2026] [:error] [pid 42870:tid 42897] [client 217.182.139.33:50944] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abqEhJ6axlAooiuYyUwYcAAAAAw"]
[Wed Mar 18 18:55:02.627346 2026] [:error] [pid 42870:tid 42896] [client 217.182.139.33:50948] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abqEhp6axlAooiuYyUwYcgAAAAs"]
[Wed Mar 18 18:55:04.726715 2026] [:error] [pid 31232:tid 31257] [client 217.182.139.33:38810] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abqEiGX6HV7dqh3BQD3F3AAAAFY"]
[Wed Mar 18 18:55:06.622624 2026] [:error] [pid 42871:tid 42931] [client 217.182.139.33:38824] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "abqEimPUS0lM1M9nUaJFuwAAAJE"]
[Wed Mar 18 18:55:08.552548 2026] [:error] [pid 53755:tid 53757] [client 217.182.139.33:38838] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "abqEjKqw5ZSRshmIhWn7aQAAAUA"]
[Wed Mar 18 18:55:10.464296 2026] [:error] [pid 42870:tid 42897] [client 217.182.139.33:38854] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "abqEjp6axlAooiuYyUwYfQAAAAw"]
[Wed Mar 18 18:55:12.377499 2026] [:error] [pid 31232:tid 31242] [client 217.182.139.33:38860] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abqEkGX6HV7dqh3BQD3GBAAAAEc"]
[Wed Mar 18 18:55:14.278844 2026] [:error] [pid 31232:tid 31249] [client 217.182.139.33:49342] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abqEkmX6HV7dqh3BQD3GDwAAAE4"]
[Wed Mar 18 18:55:16.348939 2026] [:error] [pid 42870:tid 42902] [client 217.182.139.33:49358] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abqElJ6axlAooiuYyUwYggAAABE"]
[Wed Mar 18 18:55:18.396661 2026] [:error] [pid 53755:tid 53764] [client 217.182.139.33:49366] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abqElqqw5ZSRshmIhWn7kgAAAUc"]
[Wed Mar 18 18:55:20.281826 2026] [:error] [pid 53755:tid 53766] [client 217.182.139.33:49372] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abqEmKqw5ZSRshmIhWn7nQAAAUk"]
[Wed Mar 18 18:55:22.203842 2026] [:error] [pid 53755:tid 53759] [client 217.182.139.33:49386] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abqEmqqw5ZSRshmIhWn7qwAAAUI"]
[Wed Mar 18 18:55:24.124519 2026] [:error] [pid 31232:tid 31237] [client 217.182.139.33:41406] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abqEnGX6HV7dqh3BQD3GHwAAAEI"]
[Wed Mar 18 18:55:26.711541 2026] [:error] [pid 31232:tid 31251] [client 217.182.139.33:41418] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abqEnmX6HV7dqh3BQD3GLQAAAFA"]
[Wed Mar 18 18:55:30.477601 2026] [:error] [pid 31232:tid 31255] [client 217.182.139.33:41434] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abqEomX6HV7dqh3BQD3GNAAAAFQ"]
[Wed Mar 18 19:22:30.890177 2026] [:error] [pid 31232:tid 31243] [client 43.135.133.194:41310] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abqK9mX6HV7dqh3BQD3URAAAAEg"]
[Wed Mar 18 21:27:35.099535 2026] [:error] [pid 42970:tid 42972] [client 51.83.9.208:55994] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abqoR45YFUj4vBJI0KQ9mQAAAMA"]
[Wed Mar 18 21:27:35.722274 2026] [:error] [pid 53755:tid 53772] [client 51.83.9.208:55990] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "abqoR6qw5ZSRshmIhWlUlwAAAU8"]
[Wed Mar 18 21:27:37.033713 2026] [:error] [pid 42870:tid 42909] [client 51.83.9.208:50380] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "abqoSZ6axlAooiuYyUw8owAAABg"]
[Wed Mar 18 21:27:37.709553 2026] [:error] [pid 42870:tid 42892] [client 51.83.9.208:50394] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abqoSZ6axlAooiuYyUw8pgAAAAc"]
[Wed Mar 18 21:27:38.920191 2026] [:error] [pid 42870:tid 42897] [client 51.83.9.208:51626] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abqoSp6axlAooiuYyUw8rQAAAAw"]
[Wed Mar 18 21:27:39.641292 2026] [:error] [pid 42871:tid 42936] [client 51.83.9.208:51642] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abqoS2PUS0lM1M9nUaJ2EgAAAJY"]
[Wed Mar 18 21:27:40.788964 2026] [:error] [pid 31232:tid 31257] [client 51.83.9.208:51654] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abqoTGX6HV7dqh3BQD0LyAAAAFY"]
[Wed Mar 18 21:27:41.741765 2026] [:error] [pid 31232:tid 31245] [client 51.83.9.208:51670] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abqoTWX6HV7dqh3BQD0LywAAAEo"]
[Wed Mar 18 21:27:42.584654 2026] [:error] [pid 42871:tid 42930] [client 51.83.9.208:51680] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abqoTmPUS0lM1M9nUaJ2FQAAAJA"]
[Wed Mar 18 21:27:43.953661 2026] [:error] [pid 53755:tid 53763] [client 51.83.9.208:51682] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abqoT6qw5ZSRshmIhWlUoAAAAUY"]
[Wed Mar 18 21:27:44.596865 2026] [:error] [pid 53755:tid 53770] [client 51.83.9.208:51692] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abqoUKqw5ZSRshmIhWlUpAAAAU0"]
[Wed Mar 18 21:27:45.861009 2026] [:error] [pid 53755:tid 53775] [client 51.83.9.208:51704] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abqoUaqw5ZSRshmIhWlUqgAAAVI"]
[Wed Mar 18 21:27:46.498575 2026] [:error] [pid 53755:tid 53758] [client 51.83.9.208:51706] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abqoUqqw5ZSRshmIhWlUqwAAAUE"]
[Wed Mar 18 21:27:47.783251 2026] [:error] [pid 31232:tid 31242] [client 51.83.9.208:51714] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abqoU2X6HV7dqh3BQD0L0QAAAEc"]
[Wed Mar 18 21:27:48.429304 2026] [:error] [pid 43009:tid 43017] [client 51.83.9.208:57678] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "abqoVH8aUp4Sm6m3nmM9XgAAAQY"]
[Wed Mar 18 21:27:49.735060 2026] [:error] [pid 42871:tid 42931] [client 51.83.9.208:57686] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abqoVWPUS0lM1M9nUaJ2GQAAAJE"]
[Wed Mar 18 21:27:50.385924 2026] [:error] [pid 31232:tid 31257] [client 51.83.9.208:57690] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "abqoVmX6HV7dqh3BQD0L1QAAAFY"]
[Wed Mar 18 21:27:51.783580 2026] [:error] [pid 53755:tid 53769] [client 51.83.9.208:57694] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "abqoV6qw5ZSRshmIhWlUuQAAAUw"]
[Wed Mar 18 21:27:52.598639 2026] [:error] [pid 53755:tid 53760] [client 51.83.9.208:57710] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "abqoWKqw5ZSRshmIhWlUwAAAAUM"]
[Wed Mar 18 21:27:53.867673 2026] [:error] [pid 31232:tid 31254] [client 51.83.9.208:57712] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "abqoWWX6HV7dqh3BQD0L2wAAAFM"]
[Wed Mar 18 21:27:54.476271 2026] [:error] [pid 42870:tid 42893] [client 51.83.9.208:57728] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "abqoWp6axlAooiuYyUw8ugAAAAg"]
[Wed Mar 18 21:27:55.896543 2026] [:error] [pid 20667:tid 20680] [client 51.83.9.208:57736] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abqoW5gyfQyvBhzza_2MOQAAAYs"]
[Wed Mar 18 21:27:56.362796 2026] [:error] [pid 53755:tid 53769] [client 51.83.9.208:57746] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "abqoXKqw5ZSRshmIhWlUzwAAAUw"]
[Wed Mar 18 21:27:57.674089 2026] [:error] [pid 42871:tid 42917] [client 51.83.9.208:57762] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abqoXWPUS0lM1M9nUaJ2IwAAAIM"]
[Wed Mar 18 21:27:58.280419 2026] [:error] [pid 31232:tid 31252] [client 51.83.9.208:51594] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "abqoXmX6HV7dqh3BQD0L4QAAAFE"]
[Wed Mar 18 21:27:59.569957 2026] [:error] [pid 20667:tid 20692] [client 51.83.9.208:51602] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abqoX5gyfQyvBhzza_2MPAAAAZc"]
[Wed Mar 18 21:28:00.302815 2026] [:error] [pid 42872:tid 42941] [client 51.83.9.208:51618] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "abqoYDchM8PQMaMEWJnHeQAAAcA"]
[Wed Mar 18 21:28:01.853824 2026] [:error] [pid 31232:tid 31243] [client 51.83.9.208:51620] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abqoYWX6HV7dqh3BQD0L5QAAAEg"]
[Wed Mar 18 21:28:02.437788 2026] [:error] [pid 42872:tid 42949] [client 51.83.9.208:51630] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "abqoYjchM8PQMaMEWJnHfAAAAcg"]
[Wed Mar 18 21:28:03.762732 2026] [:error] [pid 42870:tid 42895] [client 51.83.9.208:51636] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abqoY56axlAooiuYyUw8wwAAAAo"]
[Wed Mar 18 21:28:04.394858 2026] [:error] [pid 42870:tid 42894] [client 51.83.9.208:51650] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "abqoZJ6axlAooiuYyUw8xwAAAAk"]
[Wed Mar 18 21:28:05.874494 2026] [:error] [pid 31232:tid 31253] [client 51.83.9.208:51664] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "abqoZWX6HV7dqh3BQD0L6AAAAFI"]
[Wed Mar 18 21:28:06.462664 2026] [:error] [pid 42871:tid 42915] [client 51.83.9.208:51672] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "abqoZmPUS0lM1M9nUaJ2LQAAAIE"]
[Wed Mar 18 21:28:07.836903 2026] [:error] [pid 42872:tid 42947] [client 51.83.9.208:51688] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abqoZzchM8PQMaMEWJnHfwAAAcY"]
[Wed Mar 18 21:28:08.346956 2026] [:error] [pid 42870:tid 42905] [client 51.83.9.208:51152] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abqoaJ6axlAooiuYyUw80QAAABQ"]
[Wed Mar 18 21:28:09.899349 2026] [:error] [pid 42870:tid 42909] [client 51.83.9.208:51166] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abqoaZ6axlAooiuYyUw81QAAABg"]
[Wed Mar 18 21:28:10.474765 2026] [:error] [pid 42871:tid 42914] [client 51.83.9.208:51180] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abqoamPUS0lM1M9nUaJ2MwAAAIA"]
[Wed Mar 18 21:28:11.910142 2026] [:error] [pid 53755:tid 53780] [client 51.83.9.208:51190] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abqoa6qw5ZSRshmIhWlU3QAAAVc"]
[Wed Mar 18 21:28:12.509542 2026] [:error] [pid 53755:tid 53765] [client 51.83.9.208:51198] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abqobKqw5ZSRshmIhWlU4AAAAUg"]
[Wed Mar 18 21:28:13.821542 2026] [:error] [pid 31232:tid 31250] [client 51.83.9.208:51202] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abqobWX6HV7dqh3BQD0L7gAAAE8"]
[Wed Mar 18 21:28:14.738517 2026] [:error] [pid 42970:tid 42994] [client 51.83.9.208:51212] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abqobo5YFUj4vBJI0KQ9tQAAANY"]
[Wed Mar 18 21:28:16.086204 2026] [:error] [pid 53755:tid 53773] [client 51.83.9.208:51220] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abqocKqw5ZSRshmIhWlU7gAAAVA"]
[Wed Mar 18 21:28:16.559140 2026] [:error] [pid 53755:tid 53781] [client 51.83.9.208:51228] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abqocKqw5ZSRshmIhWlU8AAAAVg"]
[Wed Mar 18 21:28:18.162662 2026] [:error] [pid 20667:tid 20675] [client 51.83.9.208:41772] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abqocpgyfQyvBhzza_2MTwAAAYY"]
[Wed Mar 18 21:28:18.527470 2026] [:error] [pid 42970:tid 42979] [client 51.83.9.208:41782] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abqoco5YFUj4vBJI0KQ9uwAAAMc"]
[Wed Mar 18 21:28:19.988853 2026] [:error] [pid 42870:tid 42901] [client 51.83.9.208:41786] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abqoc56axlAooiuYyUw84AAAABA"]
[Wed Mar 18 21:28:20.476668 2026] [:error] [pid 20667:tid 20687] [client 51.83.9.208:41792] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "abqodJgyfQyvBhzza_2MVAAAAZI"]
[Wed Mar 18 21:28:21.941112 2026] [:error] [pid 42870:tid 42906] [client 51.83.9.208:41806] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abqodZ6axlAooiuYyUw86QAAABU"]
[Wed Mar 18 21:28:22.429658 2026] [:error] [pid 42871:tid 42938] [client 51.83.9.208:41810] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abqodmPUS0lM1M9nUaJ2QAAAAJg"]
[Wed Mar 18 21:28:23.770786 2026] [:error] [pid 53755:tid 53762] [client 51.83.9.208:41816] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abqod6qw5ZSRshmIhWlU_gAAAUU"]
[Wed Mar 18 21:28:24.494576 2026] [:error] [pid 42870:tid 42909] [client 51.83.9.208:41832] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abqoeJ6axlAooiuYyUw88wAAABg"]
[Wed Mar 18 21:28:25.853277 2026] [:error] [pid 20667:tid 20693] [client 51.83.9.208:41846] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abqoeZgyfQyvBhzza_2MXAAAAZg"]
[Wed Mar 18 21:28:26.450056 2026] [:error] [pid 42871:tid 42929] [client 51.83.9.208:41860] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abqoemPUS0lM1M9nUaJ2RgAAAI8"]
[Wed Mar 18 21:28:27.741057 2026] [:error] [pid 31232:tid 31235] [client 51.83.9.208:41862] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abqoe2X6HV7dqh3BQD0L8AAAAEA"]
[Wed Mar 18 21:28:28.239716 2026] [:error] [pid 31232:tid 31253] [client 51.83.9.208:58804] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abqofGX6HV7dqh3BQD0L8gAAAFI"]
[Wed Mar 18 21:28:29.649113 2026] [:error] [pid 31232:tid 31239] [client 51.83.9.208:58818] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abqofWX6HV7dqh3BQD0L-wAAAEQ"]
[Wed Mar 18 21:28:30.051369 2026] [:error] [pid 42970:tid 42991] [client 51.83.9.208:58826] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abqofo5YFUj4vBJI0KQ9xQAAANM"]
[Wed Mar 18 21:28:31.715193 2026] [:error] [pid 31232:tid 31248] [client 51.83.9.208:58842] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abqof2X6HV7dqh3BQD0L_gAAAE0"]
[Wed Mar 18 21:28:32.093357 2026] [:error] [pid 42871:tid 42920] [client 51.83.9.208:58858] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abqogGPUS0lM1M9nUaJ2TwAAAIY"]
[Wed Mar 18 21:28:33.610444 2026] [:error] [pid 53755:tid 53777] [client 51.83.9.208:58864] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abqogaqw5ZSRshmIhWlVCQAAAVQ"]
[Wed Mar 18 21:28:44.878774 2026] [:error] [pid 42871:tid 42937] [client 51.83.9.208:57912] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "abqojGPUS0lM1M9nUaJ2bgAAAJc"]
[Wed Mar 18 21:28:45.166241 2026] [:error] [pid 53755:tid 53779] [client 51.83.9.208:57922] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "abqojaqw5ZSRshmIhWlVIQAAAVY"]
[Wed Mar 18 21:28:46.862096 2026] [:error] [pid 42871:tid 42919] [client 51.83.9.208:57934] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168%20slot.aspx"] [unique_id "abqojmPUS0lM1M9nUaJ2dAAAAIU"]
[Wed Mar 18 21:28:47.126869 2026] [:error] [pid 42870:tid 42888] [client 51.83.9.208:57946] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168%20slot.aspx"] [unique_id "abqoj56axlAooiuYyUw8_AAAAAM"]
[Wed Mar 18 21:28:49.039169 2026] [:error] [pid 31232:tid 31257] [client 51.83.9.208:44644] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/24th%20slot.aspx"] [unique_id "abqokWX6HV7dqh3BQD0MEQAAAFY"]
[Wed Mar 18 21:28:49.042826 2026] [:error] [pid 31232:tid 31244] [client 51.83.9.208:44656] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/24th%20slot.aspx"] [unique_id "abqokWX6HV7dqh3BQD0MEgAAAEk"]
[Wed Mar 18 21:28:50.938270 2026] [:error] [pid 20667:tid 20682] [client 51.83.9.208:44664] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "abqokpgyfQyvBhzza_2MegAAAY0"]
[Wed Mar 18 21:28:51.002185 2026] [:error] [pid 20667:tid 20681] [client 51.83.9.208:44678] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "abqok5gyfQyvBhzza_2MewAAAYw"]
[Wed Mar 18 21:28:52.727566 2026] [:error] [pid 31232:tid 31255] [client 51.83.9.208:44694] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "abqolGX6HV7dqh3BQD0MHAAAAFQ"]
[Wed Mar 18 21:28:53.050976 2026] [:error] [pid 31232:tid 31248] [client 51.83.9.208:44696] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "abqolWX6HV7dqh3BQD0MHQAAAE0"]
[Wed Mar 18 21:28:54.782875 2026] [:error] [pid 53755:tid 53781] [client 51.83.9.208:44698] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "abqolqqw5ZSRshmIhWlVNAAAAVg"]
[Wed Mar 18 21:28:54.941479 2026] [:error] [pid 31232:tid 31252] [client 51.83.9.208:44714] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "abqolmX6HV7dqh3BQD0MIgAAAFE"]
[Wed Mar 18 21:28:56.657924 2026] [:error] [pid 42871:tid 42916] [client 51.83.9.208:44722] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "abqomGPUS0lM1M9nUaJ2gQAAAII"]
[Wed Mar 18 21:28:56.874841 2026] [:error] [pid 53755:tid 53762] [client 51.83.9.208:44738] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "abqomKqw5ZSRshmIhWlVPQAAAUU"]
[Wed Mar 18 21:28:58.564851 2026] [:error] [pid 42871:tid 42925] [client 51.83.9.208:45272] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "abqommPUS0lM1M9nUaJ2ggAAAIs"]
[Wed Mar 18 21:28:58.865524 2026] [:error] [pid 53755:tid 53767] [client 51.83.9.208:45276] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "abqomqqw5ZSRshmIhWlVTQAAAUo"]
[Wed Mar 18 21:29:00.508250 2026] [:error] [pid 31232:tid 31259] [client 51.83.9.208:45286] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "abqonGX6HV7dqh3BQD0MNAAAAFg"]
[Wed Mar 18 21:29:00.782551 2026] [:error] [pid 31232:tid 31246] [client 51.83.9.208:45288] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "abqonGX6HV7dqh3BQD0MNwAAAEs"]
[Wed Mar 18 21:29:02.562182 2026] [:error] [pid 53755:tid 53781] [client 51.83.9.208:45290] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "abqonqqw5ZSRshmIhWlVVQAAAVg"]
[Wed Mar 18 21:29:02.700852 2026] [:error] [pid 53755:tid 53771] [client 51.83.9.208:45292] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "abqonqqw5ZSRshmIhWlVVgAAAU4"]
[Wed Mar 18 21:29:04.503793 2026] [:error] [pid 53755:tid 53776] [client 51.83.9.208:45300] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "abqooKqw5ZSRshmIhWlVXwAAAVM"]
[Wed Mar 18 21:29:04.672616 2026] [:error] [pid 43009:tid 43016] [client 51.83.9.208:45308] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "abqooH8aUp4Sm6m3nmM9fgAAAQU"]
[Wed Mar 18 21:29:06.424384 2026] [:error] [pid 31232:tid 31239] [client 51.83.9.208:45318] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abqoomX6HV7dqh3BQD0MRAAAAEQ"]
[Wed Mar 18 21:29:06.585564 2026] [:error] [pid 31232:tid 31236] [client 51.83.9.208:45320] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "abqoomX6HV7dqh3BQD0MRQAAAEE"]
[Wed Mar 18 21:29:08.510911 2026] [:error] [pid 42871:tid 42933] [client 51.83.9.208:60768] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "abqopGPUS0lM1M9nUaJ2jwAAAJM"]
[Wed Mar 18 21:29:08.541192 2026] [:error] [pid 20667:tid 20692] [client 51.83.9.208:60782] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "abqopJgyfQyvBhzza_2MhAAAAZc"]
[Wed Mar 18 21:29:10.495202 2026] [:error] [pid 53755:tid 53768] [client 51.83.9.208:60794] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abqopqqw5ZSRshmIhWlVbQAAAUs"]
[Wed Mar 18 21:29:10.543387 2026] [:error] [pid 42872:tid 42942] [client 51.83.9.208:60808] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "abqopjchM8PQMaMEWJnHmgAAAcE"]
[Wed Mar 18 21:29:12.461109 2026] [:error] [pid 42870:tid 42899] [client 51.83.9.208:60818] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abqoqJ6axlAooiuYyUw9HAAAAA4"]
[Wed Mar 18 21:29:12.653002 2026] [:error] [pid 31232:tid 31246] [client 51.83.9.208:60824] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abqoqGX6HV7dqh3BQD0MVgAAAEs"]
[Wed Mar 18 21:29:14.349562 2026] [:error] [pid 42872:tid 42947] [client 51.83.9.208:60838] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abqoqjchM8PQMaMEWJnHnQAAAcY"]
[Wed Mar 18 21:29:14.669778 2026] [:error] [pid 42970:tid 42978] [client 51.83.9.208:60852] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abqoqo5YFUj4vBJI0KQ93wAAAMY"]
[Wed Mar 18 21:29:16.305498 2026] [:error] [pid 42871:tid 42931] [client 51.83.9.208:60868] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abqorGPUS0lM1M9nUaJ2ogAAAJE"]
[Wed Mar 18 21:29:16.724394 2026] [:error] [pid 42871:tid 42914] [client 51.83.9.208:60884] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abqorGPUS0lM1M9nUaJ2pQAAAIA"]
[Wed Mar 18 21:29:18.314875 2026] [:error] [pid 42871:tid 42923] [client 51.83.9.208:54720] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abqormPUS0lM1M9nUaJ2pgAAAIk"]
[Wed Mar 18 21:29:18.551569 2026] [:error] [pid 42871:tid 42919] [client 51.83.9.208:54722] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "abqormPUS0lM1M9nUaJ2qAAAAIU"]
[Wed Mar 18 21:29:20.257835 2026] [:error] [pid 20667:tid 20671] [client 51.83.9.208:54726] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abqosJgyfQyvBhzza_2MigAAAYI"]
[Wed Mar 18 21:29:20.737875 2026] [:error] [pid 31232:tid 31241] [client 51.83.9.208:54736] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abqosGX6HV7dqh3BQD0MXgAAAEY"]
[Wed Mar 18 21:29:22.326063 2026] [:error] [pid 43009:tid 43031] [client 51.83.9.208:54742] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abqosn8aUp4Sm6m3nmM9hwAAARQ"]
[Wed Mar 18 21:29:22.835582 2026] [:error] [pid 53755:tid 53758] [client 51.83.9.208:54748] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "abqosqqw5ZSRshmIhWlVjAAAAUE"]
[Wed Mar 18 21:29:24.276053 2026] [:error] [pid 53755:tid 53763] [client 51.83.9.208:54752] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abqotKqw5ZSRshmIhWlVlAAAAUY"]
[Wed Mar 18 21:29:24.756035 2026] [:error] [pid 31232:tid 31254] [client 51.83.9.208:54756] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abqotGX6HV7dqh3BQD0MYwAAAFM"]
[Wed Mar 18 21:29:26.182481 2026] [:error] [pid 53755:tid 53759] [client 51.83.9.208:54772] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abqotqqw5ZSRshmIhWlVmgAAAUI"]
[Wed Mar 18 21:29:26.765503 2026] [:error] [pid 31232:tid 31244] [client 51.83.9.208:54782] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "abqotmX6HV7dqh3BQD0MawAAAEk"]
[Wed Mar 18 21:29:28.144956 2026] [:error] [pid 42871:tid 42931] [client 51.83.9.208:46086] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abqouGPUS0lM1M9nUaJ2ugAAAJE"]
[Wed Mar 18 21:29:28.741784 2026] [:error] [pid 31232:tid 31240] [client 51.83.9.208:46094] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "abqouGX6HV7dqh3BQD0MdAAAAEU"]
[Wed Mar 18 21:29:29.987551 2026] [:error] [pid 20667:tid 20693] [client 51.83.9.208:46100] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abqouZgyfQyvBhzza_2MkgAAAZg"]
[Wed Mar 18 21:29:30.704850 2026] [:error] [pid 42871:tid 42934] [client 51.83.9.208:46110] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abqoumPUS0lM1M9nUaJ2wAAAAJQ"]
[Wed Mar 18 21:29:31.891694 2026] [:error] [pid 31232:tid 31240] [client 51.83.9.208:46126] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abqou2X6HV7dqh3BQD0MgQAAAEU"]
[Wed Mar 18 21:29:32.552957 2026] [:error] [pid 42871:tid 42921] [client 51.83.9.208:46138] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "abqovGPUS0lM1M9nUaJ2xgAAAIc"]
[Wed Mar 18 21:29:33.859626 2026] [:error] [pid 31232:tid 31257] [client 51.83.9.208:46140] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abqovWX6HV7dqh3BQD0MjAAAAFY"]
[Wed Mar 18 21:29:34.653430 2026] [:error] [pid 53755:tid 53772] [client 51.83.9.208:46154] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "abqovqqw5ZSRshmIhWlVngAAAU8"]
[Wed Mar 18 21:29:35.806095 2026] [:error] [pid 53755:tid 53765] [client 51.83.9.208:46156] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abqov6qw5ZSRshmIhWlVpAAAAUg"]
[Wed Mar 18 21:29:36.632444 2026] [:error] [pid 31232:tid 31251] [client 51.83.9.208:46158] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abqowGX6HV7dqh3BQD0MkgAAAFA"]
[Wed Mar 18 21:29:37.745086 2026] [:error] [pid 42871:tid 42924] [client 51.83.9.208:46174] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abqowWPUS0lM1M9nUaJ2zgAAAIo"]
[Wed Mar 18 21:29:38.516914 2026] [:error] [pid 53755:tid 53762] [client 51.83.9.208:46586] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abqowqqw5ZSRshmIhWlVqwAAAUU"]
[Wed Mar 18 21:29:39.662768 2026] [:error] [pid 42870:tid 42897] [client 51.83.9.208:46592] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abqow56axlAooiuYyUw9KgAAAAw"]
[Wed Mar 18 21:29:40.363053 2026] [:error] [pid 42872:tid 42942] [client 51.83.9.208:46598] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "abqoxDchM8PQMaMEWJnHpQAAAcE"]
[Wed Mar 18 21:29:41.762680 2026] [:error] [pid 31232:tid 31239] [client 51.83.9.208:46606] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abqoxWX6HV7dqh3BQD0MmgAAAEQ"]
[Wed Mar 18 21:29:42.403456 2026] [:error] [pid 31232:tid 31258] [client 51.83.9.208:46608] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abqoxmX6HV7dqh3BQD0MnQAAAFc"]
[Wed Mar 18 21:29:53.006356 2026] [:error] [pid 53755:tid 53777] [client 51.83.9.208:46622] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abqo0aqw5ZSRshmIhWlWBAAAAVQ"]
[Wed Mar 18 21:29:53.783861 2026] [:error] [pid 42871:tid 42915] [client 51.83.9.208:46616] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abqo0WPUS0lM1M9nUaJ27AAAAIE"]
[Wed Mar 18 21:29:55.005013 2026] [:error] [pid 31232:tid 31249] [client 51.83.9.208:49424] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abqo02X6HV7dqh3BQD0M2QAAAE4"]
[Wed Mar 18 21:29:55.780705 2026] [:error] [pid 43009:tid 43016] [client 51.83.9.208:49436] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abqo038aUp4Sm6m3nmM9lgAAAQU"]
[Wed Mar 18 21:29:56.915531 2026] [:error] [pid 31232:tid 31256] [client 51.83.9.208:49448] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abqo1GX6HV7dqh3BQD0M4gAAAFU"]
[Wed Mar 18 21:29:57.704389 2026] [:error] [pid 31232:tid 31249] [client 51.83.9.208:49462] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abqo1WX6HV7dqh3BQD0M5wAAAE4"]
[Wed Mar 18 21:29:58.967516 2026] [:error] [pid 53755:tid 53757] [client 51.83.9.208:37794] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abqo1qqw5ZSRshmIhWlWEgAAAUA"]
[Wed Mar 18 21:29:59.767921 2026] [:error] [pid 53755:tid 53773] [client 51.83.9.208:37796] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abqo16qw5ZSRshmIhWlWGAAAAVA"]
[Wed Mar 18 21:30:01.033719 2026] [:error] [pid 53755:tid 53773] [client 51.83.9.208:37808] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abqo2aqw5ZSRshmIhWlWHwAAAVA"]
[Wed Mar 18 21:30:01.828313 2026] [:error] [pid 20667:tid 20682] [client 51.83.9.208:37818] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abqo2ZgyfQyvBhzza_2MogAAAY0"]
[Wed Mar 18 21:30:03.066307 2026] [:error] [pid 53755:tid 53763] [client 51.83.9.208:37824] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abqo26qw5ZSRshmIhWlWMAAAAUY"]
[Wed Mar 18 21:30:03.820122 2026] [:error] [pid 42870:tid 42901] [client 51.83.9.208:37838] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abqo256axlAooiuYyUw9PgAAABA"]
[Wed Mar 18 21:30:04.968447 2026] [:error] [pid 42870:tid 42888] [client 51.83.9.208:37848] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abqo3J6axlAooiuYyUw9RQAAAAM"]
[Wed Mar 18 21:30:05.879884 2026] [:error] [pid 31232:tid 31259] [client 51.83.9.208:37860] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abqo3WX6HV7dqh3BQD0M9wAAAFg"]
[Wed Mar 18 21:30:06.885856 2026] [:error] [pid 53755:tid 53764] [client 51.83.9.208:37868] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abqo3qqw5ZSRshmIhWlWRAAAAUc"]
[Wed Mar 18 21:30:07.844489 2026] [:error] [pid 53755:tid 53766] [client 51.83.9.208:37882] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abqo36qw5ZSRshmIhWlWSQAAAUk"]
[Wed Mar 18 21:30:08.848633 2026] [:error] [pid 53755:tid 53781] [client 51.83.9.208:51882] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abqo4Kqw5ZSRshmIhWlWUAAAAVg"]
[Wed Mar 18 21:30:09.741109 2026] [:error] [pid 53755:tid 53773] [client 51.83.9.208:51884] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abqo4aqw5ZSRshmIhWlWVgAAAVA"]
[Wed Mar 18 21:30:10.868759 2026] [:error] [pid 53755:tid 53765] [client 51.83.9.208:51890] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "abqo4qqw5ZSRshmIhWlWWwAAAUg"]
[Wed Mar 18 21:30:11.658052 2026] [:error] [pid 42870:tid 42900] [client 51.83.9.208:51904] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abqo456axlAooiuYyUw9SwAAAA8"]
[Wed Mar 18 21:30:12.808200 2026] [:error] [pid 20667:tid 20689] [client 51.83.9.208:51906] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abqo5JgyfQyvBhzza_2MpgAAAZQ"]
[Wed Mar 18 21:30:13.801892 2026] [:error] [pid 53755:tid 53779] [client 51.83.9.208:51914] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abqo5aqw5ZSRshmIhWlWaQAAAVY"]
[Wed Mar 18 21:30:14.827435 2026] [:error] [pid 31232:tid 31249] [client 51.83.9.208:51922] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abqo5mX6HV7dqh3BQD0NAgAAAE4"]
[Wed Mar 18 21:30:15.890949 2026] [:error] [pid 20667:tid 20675] [client 51.83.9.208:51932] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abqo55gyfQyvBhzza_2MqAAAAYY"]
[Wed Mar 18 21:30:16.842699 2026] [:error] [pid 53755:tid 53770] [client 51.83.9.208:51946] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abqo6Kqw5ZSRshmIhWlWcwAAAU0"]
[Wed Mar 18 23:26:50.878563 2026] [:error] [pid 53755:tid 53780] [client 54.37.254.160:47894] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abrEOqqw5ZSRshmIhWmWsgAAAVc"]
[Wed Mar 18 23:26:52.944962 2026] [:error] [pid 20667:tid 20674] [client 54.37.254.160:41800] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abrEPJgyfQyvBhzza_2h9wAAAYU"]
[Wed Mar 18 23:26:54.925094 2026] [:error] [pid 42970:tid 42983] [client 54.37.254.160:41810] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abrEPo5YFUj4vBJI0KRKogAAAMs"]
[Wed Mar 18 23:56:12.669528 2026] [:error] [pid 53755:tid 53767] [client 145.239.10.137:58146] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php, referer: http://pumpbooking.com/worksec.php
[Thu Mar 19 01:04:52.583664 2026] [:error] [pid 41180:tid 41186] [client 170.106.192.3:34678] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abrbNLuSQ3z2YqXgnyf7TwAAAMQ"]
[Thu Mar 19 01:12:20.441802 2026] [:error] [pid 41180:tid 41199] [client 43.152.72.244:56270] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abrc9LuSQ3z2YqXgnycAoAAAANE"]
[Thu Mar 19 01:57:50.782393 2026] [:error] [pid 19208:tid 19354] [client 51.83.6.238:52718] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abrnnt4kPqt9Qws3poFgAgAAAIs"]
[Thu Mar 19 01:57:52.928494 2026] [:error] [pid 19224:tid 19374] [client 51.83.6.238:44860] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abrnoDxUIaHQ6Y3ff51lWgAAAcQ"]
[Thu Mar 19 01:57:54.969956 2026] [:error] [pid 19196:tid 19335] [client 51.83.6.238:44874] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "abrnorQmdacT_YxarWRaPgAAABM"]
[Thu Mar 19 01:57:57.033121 2026] [:error] [pid 41180:tid 41203] [client 51.83.6.238:44882] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "abrnpbuSQ3z2YqXgnycgzAAAANU"]
[Thu Mar 19 01:57:58.860935 2026] [:error] [pid 19431:tid 19510] [client 51.83.6.238:44896] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abrnpjioVgnJ_ZdBjcuFzAAAAFc"]
[Thu Mar 19 01:58:00.815220 2026] [:error] [pid 19224:tid 19387] [client 51.83.6.238:34570] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abrnqDxUIaHQ6Y3ff51lYQAAAdE"]
[Thu Mar 19 01:58:02.836525 2026] [:error] [pid 41180:tid 41196] [client 51.83.6.238:34584] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "abrnqruSQ3z2YqXgnycg3wAAAM4"]
[Thu Mar 19 01:58:04.704165 2026] [:error] [pid 19224:tid 19388] [client 51.83.6.238:34594] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abrnrDxUIaHQ6Y3ff51laQAAAdI"]
[Thu Mar 19 01:58:06.751194 2026] [:error] [pid 19224:tid 19393] [client 51.83.6.238:34604] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abrnrjxUIaHQ6Y3ff51lbgAAAdc"]
[Thu Mar 19 01:58:08.605607 2026] [:error] [pid 19431:tid 19507] [client 51.83.6.238:34608] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abrnsDioVgnJ_ZdBjcuF3gAAAFU"]
[Thu Mar 19 01:58:10.604592 2026] [:error] [pid 19224:tid 19377] [client 51.83.6.238:51984] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abrnsjxUIaHQ6Y3ff51ldAAAAcc"]
[Thu Mar 19 01:58:12.647040 2026] [:error] [pid 41180:tid 41197] [client 51.83.6.238:51998] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abrntLuSQ3z2YqXgnycg-gAAAM8"]
[Thu Mar 19 01:58:14.808741 2026] [:error] [pid 19196:tid 19319] [client 51.83.6.238:52010] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abrntrQmdacT_YxarWRaUQAAAAM"]
[Thu Mar 19 01:58:16.852191 2026] [:error] [pid 19224:tid 19375] [client 51.83.6.238:52016] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abrnuDxUIaHQ6Y3ff51leQAAAcU"]
[Thu Mar 19 01:58:18.706534 2026] [:error] [pid 19196:tid 19330] [client 51.83.6.238:52030] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "abrnurQmdacT_YxarWRaXQAAAA4"]
[Thu Mar 19 01:58:20.636979 2026] [:error] [pid 19224:tid 19391] [client 51.83.6.238:45746] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "abrnvDxUIaHQ6Y3ff51lggAAAdU"]
[Thu Mar 19 01:58:22.476626 2026] [:error] [pid 41180:tid 41199] [client 51.83.6.238:45748] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abrnvruSQ3z2YqXgnychDwAAANE"]
[Thu Mar 19 01:58:24.473941 2026] [:error] [pid 19431:tid 19491] [client 51.83.6.238:45762] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abrnwDioVgnJ_ZdBjcuGDAAAAEY"]
[Thu Mar 19 01:58:26.901722 2026] [:error] [pid 19224:tid 19387] [client 51.83.6.238:45764] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abrnwjxUIaHQ6Y3ff51liwAAAdE"]
[Thu Mar 19 01:58:30.683539 2026] [:error] [pid 19224:tid 19376] [client 51.83.6.238:45160] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abrnxjxUIaHQ6Y3ff51lkQAAAcY"]
[Thu Mar 19 02:40:35.794743 2026] [:error] [pid 19196:tid 19334] [client 20.48.234.9:46280] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 19 02:40:36.287459 2026] [:error] [pid 19196:tid 19322] [client 20.48.234.9:46280] [client 20.48.234.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.48.234.9, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abrxpLQmdacT_YxarWRkQAAAAAY"]
[Thu Mar 19 02:40:36.615058 2026] [:error] [pid 19196:tid 19327] [client 20.48.234.9:46280] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Thu Mar 19 02:40:37.684506 2026] [:error] [pid 19196:tid 19336] [client 20.48.234.9:46280] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Thu Mar 19 02:40:38.395413 2026] [:error] [pid 19196:tid 19337] [client 20.48.234.9:46280] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Mar 19 02:40:38.647546 2026] [:error] [pid 19196:tid 19340] [client 20.48.234.9:46280] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abrxprQmdacT_YxarWRkSgAAABg"]
[Thu Mar 19 02:40:43.595046 2026] [:error] [pid 19431:tid 19502] [client 20.48.234.9:46311] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abrxqzioVgnJ_ZdBjcuZXAAAAFE"]
[Thu Mar 19 02:40:48.478535 2026] [:error] [pid 19431:tid 19511] [client 20.48.234.9:46658] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abrxsDioVgnJ_ZdBjcuZZAAAAFg"]
[Thu Mar 19 05:09:26.184356 2026] [:error] [pid 3278:tid 3301] [client 8.228.19.2:43554] [client 8.228.19.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "absUhgC2T_lM6ZgvfcT8BwAAARQ"]
[Thu Mar 19 05:15:43.665946 2026] [:error] [pid 23883:tid 23952] [client 39.34.77.36:52091] [client 39.34.77.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.34.77.36, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "absV_9Ni-EnEAH4abz1rlgAAAFc"]
[Thu Mar 19 05:15:43.671370 2026] [:error] [pid 23883:tid 23952] [client 39.34.77.36:52091] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 06:31:07.867794 2026] [:error] [pid 31313:tid 31382] [client 31.171.130.41:48431] [client 31.171.130.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.41, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "absnqw9HuAbqf2tZOyf3ZQAAAdU"]
[Thu Mar 19 06:31:07.874446 2026] [:error] [pid 31313:tid 31382] [client 31.171.130.41:48431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 07:57:12.075115 2026] [:error] [pid 31205:tid 31236] [client 43.156.228.27:36296] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abs72Fu5gZKGrGz5P1EewwAAAVM"]
[Thu Mar 19 08:11:19.987491 2026] [:error] [pid 32226:tid 32235] [client 58.69.160.30:53810] [client 58.69.160.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.69.160.30, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abs_J7Bb58lgPwqxC6qSpQAAAwc"]
[Thu Mar 19 08:11:19.992870 2026] [:error] [pid 32226:tid 32235] [client 58.69.160.30:53810] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 10:00:19.635880 2026] [:error] [pid 31313:tid 31363] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Mar 19 10:00:22.619970 2026] [:error] [pid 31313:tid 31363] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Mar 19 10:00:22.859984 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Mar 19 10:00:23.121536 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Mar 19 10:00:23.371387 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Mar 19 10:00:23.639523 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Mar 19 10:00:23.918805 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Mar 19 10:00:24.146590 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.75:48793] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 10:00:24.991271 2026] [:error] [pid 25269:tid 25290] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Mar 19 10:00:25.449488 2026] [:error] [pid 25269:tid 25289] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Mar 19 10:00:25.748175 2026] [:error] [pid 25269:tid 25291] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Mar 19 10:00:26.028389 2026] [:error] [pid 25269:tid 25290] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 10:00:26.292656 2026] [:error] [pid 25269:tid 25291] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Mar 19 10:00:26.576159 2026] [:error] [pid 25269:tid 25283] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Mar 19 10:00:26.838450 2026] [:error] [pid 25269:tid 25283] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Mar 19 10:00:27.087898 2026] [:error] [pid 25269:tid 25295] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Mar 19 10:00:27.348827 2026] [:error] [pid 25269:tid 25289] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Mar 19 10:00:27.623168 2026] [:error] [pid 25269:tid 25296] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Mar 19 10:00:27.858515 2026] [:error] [pid 25269:tid 25283] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Mar 19 10:00:28.231060 2026] [:error] [pid 25269:tid 25291] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Mar 19 10:00:28.477207 2026] [:error] [pid 25269:tid 25283] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Mar 19 10:00:28.730897 2026] [:error] [pid 25269:tid 25291] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Mar 19 10:00:28.980666 2026] [:error] [pid 25269:tid 25296] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Mar 19 10:00:29.537049 2026] [:error] [pid 25269:tid 25290] [client 209.87.169.210:22435] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Mar 19 10:00:29.787965 2026] [:error] [pid 25269:tid 25290] [client 209.87.169.210:22435] [client 209.87.169.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/tiny.php"] [unique_id "abtYvcU9ntriqNcU-b6KPAAAA9I"]
[Thu Mar 19 10:00:30.394683 2026] [:error] [pid 31735:tid 31744] [client 209.87.169.50:41643] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Mar 19 10:00:33.245043 2026] [:error] [pid 31735:tid 31744] [client 209.87.169.50:41643] [client 209.87.169.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/filemanager.php"] [unique_id "abtYwX-gyQbRQWJYccxEOgAAAoU"]
[Thu Mar 19 10:00:33.812346 2026] [:error] [pid 23883:tid 23931] [client 209.87.169.248:46423] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Mar 19 10:00:34.072957 2026] [:error] [pid 23883:tid 23930] [client 209.87.169.248:46423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Mar 19 10:00:34.306188 2026] [:error] [pid 23883:tid 23933] [client 209.87.169.248:46423] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Mar 19 10:00:34.537364 2026] [:error] [pid 23883:tid 23939] [client 209.87.169.248:46423] [client 209.87.169.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "pumpbooking.com"] [uri "/fm.php"] [unique_id "abtYwtNi-EnEAH4abz2TKgAAAEo"]
[Thu Mar 19 10:00:35.026397 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Mar 19 10:00:35.373139 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Mar 19 10:00:35.928434 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Mar 19 10:00:36.178014 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Mar 19 10:00:36.430975 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Mar 19 10:00:37.750930 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Mar 19 10:00:38.002647 2026] [:error] [pid 24925:tid 24938] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Mar 19 10:00:38.253097 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Mar 19 10:00:38.540554 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Mar 19 10:00:38.820527 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Mar 19 10:00:39.069296 2026] [:error] [pid 24925:tid 24944] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Mar 19 10:00:39.334548 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Mar 19 10:00:39.614630 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Mar 19 10:00:39.876745 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Mar 19 10:00:40.146725 2026] [:error] [pid 24925:tid 24945] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Mar 19 10:00:40.389301 2026] [:error] [pid 24925:tid 24931] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Mar 19 10:00:40.626745 2026] [:error] [pid 24925:tid 24937] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Mar 19 10:00:42.146492 2026] [:error] [pid 24925:tid 24937] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Mar 19 10:00:42.395635 2026] [:error] [pid 24925:tid 24944] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Mar 19 10:00:42.819201 2026] [:error] [pid 24925:tid 24944] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Mar 19 10:00:43.088183 2026] [:error] [pid 24925:tid 24931] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Mar 19 10:00:43.308422 2026] [:error] [pid 24925:tid 24944] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Mar 19 10:00:43.610752 2026] [:error] [pid 24925:tid 24931] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Mar 19 10:00:43.859503 2026] [:error] [pid 24925:tid 24931] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Mar 19 10:00:44.095088 2026] [:error] [pid 24925:tid 24931] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Mar 19 10:00:44.365988 2026] [:error] [pid 24925:tid 24937] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Mar 19 10:00:50.394738 2026] [:error] [pid 24925:tid 24937] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Mar 19 10:00:50.656173 2026] [:error] [pid 24925:tid 24937] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Mar 19 10:00:50.986629 2026] [:error] [pid 24925:tid 24937] [client 209.87.169.234:32461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Mar 19 10:00:52.587767 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Mar 19 10:00:52.866108 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Mar 19 10:00:53.134919 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Mar 19 10:00:53.381832 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Mar 19 10:00:53.615378 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Mar 19 10:00:53.915281 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Mar 19 10:00:54.173923 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Mar 19 10:00:54.417679 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Mar 19 10:00:54.678953 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Mar 19 10:00:55.040943 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Mar 19 10:00:55.285496 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Mar 19 10:00:55.517766 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Mar 19 10:00:55.745923 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Mar 19 10:00:55.995639 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Mar 19 10:00:56.225231 2026] [:error] [pid 3278:tid 3286] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Mar 19 10:00:56.465318 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Mar 19 10:00:56.735063 2026] [:error] [pid 3278:tid 3299] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 19 10:00:56.997851 2026] [:error] [pid 3278:tid 3299] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Mar 19 10:00:57.270350 2026] [:error] [pid 3278:tid 3299] [client 209.87.169.36:54343] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 19 10:00:59.402815 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.62:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Mar 19 10:01:01.134818 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.70:32391] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Mar 19 10:01:01.796482 2026] [:error] [pid 24971:tid 24995] [client 209.87.169.33:62085] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Mar 19 10:01:03.895553 2026] [:error] [pid 24971:tid 24995] [client 209.87.169.33:62085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Mar 19 10:01:04.435789 2026] [:error] [pid 31735:tid 31761] [client 45.131.195.236:32647] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Mar 19 10:01:04.726250 2026] [:error] [pid 31735:tid 31741] [client 45.131.195.236:32647] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Mar 19 10:01:10.245908 2026] [:error] [pid 31735:tid 31741] [client 45.131.195.236:32647] [client 45.131.195.236] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "34.162.144.22_5c93e4e7c94c6f3cb7805deb7e9694066b648518"): Internal error (specific information not available) [hostname "pumpbooking.com"] [uri "/index.html"] [unique_id "abtY4H-gyQbRQWJYccxGjwAAAoI"]
[Thu Mar 19 10:01:10.258892 2026] [:error] [pid 31735:tid 31741] [client 45.131.195.236:32647] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Mar 19 10:01:11.805994 2026] [:error] [pid 31735:tid 31741] [client 45.131.195.236:32647] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Mar 19 10:01:14.330731 2026] [:error] [pid 23884:tid 23966] [client 209.87.169.220:41599] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Mar 19 10:01:14.560529 2026] [:error] [pid 23884:tid 23966] [client 209.87.169.220:41599] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Mar 19 10:01:14.799767 2026] [:error] [pid 23884:tid 23966] [client 209.87.169.220:41599] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Mar 19 10:01:15.358685 2026] [:error] [pid 23884:tid 23966] [client 209.87.169.220:41599] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 19 10:01:17.913508 2026] [:error] [pid 23988:tid 24004] [client 209.87.169.220:47801] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Mar 19 10:01:19.633468 2026] [:error] [pid 31313:tid 31376] [client 209.87.169.208:31141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Mar 19 10:01:22.629058 2026] [:error] [pid 23884:tid 23978] [client 209.87.169.52:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Mar 19 10:01:22.844765 2026] [:error] [pid 23884:tid 23978] [client 209.87.169.52:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Mar 19 10:01:23.109675 2026] [:error] [pid 23884:tid 23978] [client 209.87.169.52:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Mar 19 10:01:29.302563 2026] [:error] [pid 24925:tid 24942] [client 209.87.169.212:46011] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Mar 19 10:01:32.851690 2026] [:error] [pid 31313:tid 31383] [client 185.198.240.24:22711] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Mar 19 10:01:42.149464 2026] [:error] [pid 24971:tid 24978] [client 209.87.169.226:53293] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Mar 19 10:01:53.754741 2026] [:error] [pid 3278:tid 3288] [client 209.87.169.37:24709] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Mar 19 10:04:02.738904 2026] [autoindex:error] [pid 24925:tid 24939] [client 209.87.169.42:64919] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 12:54:13.958940 2026] [:error] [pid 31205:tid 31231] [client 154.16.49.101:6774] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abuBdVu5gZKGrGz5P1GnyQAAAU4"]
[Thu Mar 19 12:54:14.454212 2026] [:error] [pid 24925:tid 24949] [client 154.16.49.101:6965] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdvUZEHbnUgjEbWNmxQAAAZQ"]
[Thu Mar 19 12:54:14.948668 2026] [:error] [pid 25135:tid 25155] [client 154.16.49.101:7163] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feed/"] [unique_id "abuBdqKtE0dzgMctjFXtnwAAA1I"]
[Thu Mar 19 13:26:23.865780 2026] [:error] [pid 31205:tid 31233] [client 152.53.187.237:38506] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "abuI_1u5gZKGrGz5P1GyHwAAAVA"]
[Thu Mar 19 13:26:27.555599 2026] [:error] [pid 23883:tid 23932] [client 152.53.187.237:41058] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abuJA9Ni-EnEAH4abz200gAAAEM"]
[Thu Mar 19 13:26:30.477791 2026] [:error] [pid 25135:tid 25137] [client 152.53.187.237:62662] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abuJBqKtE0dzgMctjFX76QAAA0A"]
[Thu Mar 19 13:26:34.638354 2026] [:error] [pid 25135:tid 25138] [client 152.53.187.237:62668] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abuJCqKtE0dzgMctjFX7-AAAA0E"]
[Thu Mar 19 13:26:39.024219 2026] [:error] [pid 25269:tid 25292] [client 152.53.187.237:62680] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abuJD8U9ntriqNcU-b7MAAAAA9Q"]
[Thu Mar 19 13:26:41.746832 2026] [:error] [pid 31205:tid 31237] [client 152.53.187.237:32844] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abuJEVu5gZKGrGz5P1GyNwAAAVQ"]
[Thu Mar 19 13:26:44.073013 2026] [:error] [pid 24925:tid 24951] [client 152.53.187.237:32858] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abuJFPUZEHbnUgjEbWNtBgAAAZY"]
[Thu Mar 19 13:26:46.386691 2026] [:error] [pid 25135:tid 25144] [client 152.53.187.237:32862] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "abuJFqKtE0dzgMctjFX8CAAAA0c"]
[Thu Mar 19 13:26:53.820852 2026] [:error] [pid 23882:tid 23920] [client 152.53.187.237:34182] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "abuJHbWnClbtbN12M7-onAAAABI"]
[Thu Mar 19 13:26:56.247298 2026] [:error] [pid 25269:tid 25286] [client 152.53.187.237:34188] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "abuJIMU9ntriqNcU-b7MFQAAA84"]
[Thu Mar 19 13:26:59.769872 2026] [:error] [pid 3278:tid 3287] [client 152.53.187.237:34196] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abuJIwC2T_lM6ZgvfcRxGwAAAQY"]
[Thu Mar 19 13:27:01.963155 2026] [:error] [pid 31735:tid 31747] [client 152.53.187.237:65280] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "abuJJX-gyQbRQWJYccxaJwAAAog"]
[Thu Mar 19 13:27:03.986162 2026] [:error] [pid 25269:tid 25291] [client 152.53.187.237:65296] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abuJJ8U9ntriqNcU-b7MHQAAA9M"]
[Thu Mar 19 13:27:06.168494 2026] [:error] [pid 23882:tid 23922] [client 152.53.187.237:65308] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "abuJKrWnClbtbN12M7-orwAAABQ"]
[Thu Mar 19 13:27:08.743645 2026] [:error] [pid 23882:tid 23919] [client 152.53.187.237:65320] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "abuJLLWnClbtbN12M7-ovwAAABE"]
[Thu Mar 19 13:27:10.831372 2026] [:error] [pid 3278:tid 3293] [client 152.53.187.237:54566] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "abuJLgC2T_lM6ZgvfcRxHgAAAQw"]
[Thu Mar 19 13:27:13.463189 2026] [:error] [pid 25135:tid 25150] [client 152.53.187.237:54568] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "abuJMaKtE0dzgMctjFX8PAAAA00"]
[Thu Mar 19 13:27:15.485771 2026] [:error] [pid 25135:tid 25157] [client 152.53.187.237:54572] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abuJM6KtE0dzgMctjFX8RQAAA1Q"]
[Thu Mar 19 13:27:19.350708 2026] [:error] [pid 25269:tid 25273] [client 152.53.187.237:54574] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abuJN8U9ntriqNcU-b7MJgAAA8E"]
[Thu Mar 19 14:07:38.716491 2026] [:error] [pid 11110:tid 11119] [client 170.106.140.110:47440] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abuSqgSNPqGfikw7k8I1igAAAAQ"]
[Thu Mar 19 14:43:49.671956 2026] [:error] [pid 11014:tid 11039] [client 67.144.16.170:56111] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abubJTBVizvrAl0DfCDNOwAAAFQ"]
[Thu Mar 19 14:43:50.109651 2026] [:error] [pid 11016:tid 11086] [client 67.144.16.170:56482] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abubJhPK94J9G19C6uX0GAAAAQ0"]
[Thu Mar 19 14:43:50.547633 2026] [:error] [pid 11015:tid 11064] [client 67.144.16.170:56488] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abubJvPcMwFQZAVfzLQVOgAAAJI"]
[Thu Mar 19 14:43:52.653666 2026] [:error] [pid 11016:tid 11077] [client 67.144.16.170:56520] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abubKBPK94J9G19C6uX0IQAAAQQ"]
[Thu Mar 19 14:43:53.094814 2026] [:error] [pid 11015:tid 11057] [client 67.144.16.170:56527] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abubKfPcMwFQZAVfzLQVQgAAAIs"]
[Thu Mar 19 14:43:55.338617 2026] [:error] [pid 11014:tid 11036] [client 67.144.16.170:56576] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abubKzBVizvrAl0DfCDNRwAAAFE"]
[Thu Mar 19 14:43:55.775957 2026] [:error] [pid 11016:tid 11079] [client 67.144.16.170:56587] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abubKxPK94J9G19C6uX0IgAAAQY"]
[Thu Mar 19 14:43:57.867428 2026] [:error] [pid 11016:tid 11084] [client 67.144.16.170:56627] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abubLRPK94J9G19C6uX0KwAAAQs"]
[Thu Mar 19 14:43:58.306086 2026] [:error] [pid 11110:tid 11129] [client 67.144.16.170:56637] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abubLgSNPqGfikw7k8JLSgAAAA4"]
[Thu Mar 19 14:44:00.456568 2026] [:error] [pid 11110:tid 11115] [client 67.144.16.170:56684] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abubMASNPqGfikw7k8JLVAAAAAA"]
[Thu Mar 19 14:44:00.894808 2026] [:error] [pid 11110:tid 11131] [client 67.144.16.170:56693] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abubMASNPqGfikw7k8JLVwAAABA"]
[Thu Mar 19 14:44:02.919940 2026] [:error] [pid 11016:tid 11091] [client 67.144.16.170:56725] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abubMhPK94J9G19C6uX0NwAAARI"]
[Thu Mar 19 14:44:03.358841 2026] [:error] [pid 11016:tid 11085] [client 67.144.16.170:56732] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abubMxPK94J9G19C6uX0OgAAAQw"]
[Thu Mar 19 14:44:05.538127 2026] [:error] [pid 11016:tid 11075] [client 67.144.16.170:56761] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abubNRPK94J9G19C6uX0RwAAAQI"]
[Thu Mar 19 14:44:05.977560 2026] [:error] [pid 11016:tid 11097] [client 67.144.16.170:56769] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abubNRPK94J9G19C6uX0SQAAARg"]
[Thu Mar 19 14:44:08.496161 2026] [:error] [pid 11016:tid 11080] [client 67.144.16.170:56830] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abubOBPK94J9G19C6uX0VwAAAQc"]
[Thu Mar 19 14:44:08.933403 2026] [:error] [pid 11110:tid 11123] [client 67.144.16.170:56833] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abubOASNPqGfikw7k8JLaQAAAAg"]
[Thu Mar 19 14:44:11.081092 2026] [:error] [pid 11110:tid 11118] [client 67.144.16.170:56887] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abubOwSNPqGfikw7k8JLlQAAAAM"]
[Thu Mar 19 14:44:11.518826 2026] [:error] [pid 11016:tid 11086] [client 67.144.16.170:56900] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abubOxPK94J9G19C6uX0jQAAAQ0"]
[Thu Mar 19 14:44:13.510307 2026] [:error] [pid 11110:tid 11124] [client 67.144.16.170:56931] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abubPQSNPqGfikw7k8JLnQAAAAk"]
[Thu Mar 19 14:44:13.949368 2026] [:error] [pid 11016:tid 11080] [client 67.144.16.170:56951] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abubPRPK94J9G19C6uX0nAAAAQc"]
[Thu Mar 19 14:44:16.197400 2026] [:error] [pid 11016:tid 11079] [client 67.144.16.170:56974] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abubQBPK94J9G19C6uX0rQAAAQY"]
[Thu Mar 19 14:44:16.635752 2026] [:error] [pid 11015:tid 11064] [client 67.144.16.170:56983] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abubQPPcMwFQZAVfzLQVXAAAAJI"]
[Thu Mar 19 14:44:17.901802 2026] [:error] [pid 11015:tid 11065] [client 67.144.16.170:56992] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abubQfPcMwFQZAVfzLQVXwAAAJM"]
[Thu Mar 19 14:44:18.339825 2026] [:error] [pid 11014:tid 11035] [client 67.144.16.170:57000] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abubQjBVizvrAl0DfCDNWwAAAFA"]
[Thu Mar 19 14:44:22.120434 2026] [:error] [pid 11015:tid 11058] [client 67.144.16.170:57045] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abubRvPcMwFQZAVfzLQVcgAAAIw"]
[Thu Mar 19 14:44:22.558768 2026] [:error] [pid 11016:tid 11080] [client 67.144.16.170:57053] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abubRhPK94J9G19C6uX0vgAAAQc"]
[Thu Mar 19 15:47:48.875472 2026] [:error] [pid 11014:tid 11022] [client 36.41.75.167:38186] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abuqJDBVizvrAl0DfCDg-QAAAEM"]
[Thu Mar 19 16:15:58.508212 2026] [:error] [pid 11015:tid 11051] [client 135.181.213.219:55128] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "abuwvvPcMwFQZAVfzLQs4gAAAIU"]
[Thu Mar 19 20:01:29.143364 2026] [:error] [pid 1247:tid 1269] [client 43.153.35.128:41182] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abvlmQ5tmeOr-yI4XNG_EgAAAdQ"]
[Thu Mar 19 20:33:49.768947 2026] [:error] [pid 11015:tid 11046] [client 62.84.185.60:1234] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abvtLfPcMwFQZAVfzLR0pAAAAIA"]
[Thu Mar 19 20:33:51.762508 2026] [:error] [pid 1285:tid 1298] [client 62.84.185.60:7014] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abvtL1E95r3zR75X1HouCwAAAgs"]
[Thu Mar 19 20:33:53.785903 2026] [:error] [pid 1247:tid 1265] [client 62.84.185.60:7022] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abvtMQ5tmeOr-yI4XNHP2wAAAdA"]
[Thu Mar 19 20:33:55.763914 2026] [:error] [pid 11110:tid 11139] [client 62.84.185.60:7024] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abvtMwSNPqGfikw7k8K17wAAABg"]
[Thu Mar 19 20:33:57.864724 2026] [:error] [pid 1397:tid 1403] [client 62.84.185.60:7034] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abvtNXptc6vBjy-kgOMXcAAAAsQ"]
[Thu Mar 19 20:33:59.898620 2026] [:error] [pid 1397:tid 1406] [client 62.84.185.60:7036] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abvtN3ptc6vBjy-kgOMXdAAAAsc"]
[Thu Mar 19 20:34:01.896950 2026] [:error] [pid 1441:tid 1468] [client 62.84.185.60:53730] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abvtOYf6BGzjfVNuehUdUAAAAxg"]
[Thu Mar 19 20:34:04.056982 2026] [:error] [pid 11110:tid 11128] [client 62.84.185.60:53734] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abvtPASNPqGfikw7k8K2CAAAAA0"]
[Thu Mar 19 20:34:06.058119 2026] [:error] [pid 11015:tid 11054] [client 62.84.185.60:53740] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abvtPvPcMwFQZAVfzLR0xQAAAIg"]
[Thu Mar 19 23:04:02.266715 2026] [:error] [pid 1285:tid 1305] [client 114.96.103.33:54498] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "abwQYlE95r3zR75X1HppPwAAAhI"]
[Thu Mar 19 23:26:05.236151 2026] [:error] [pid 51091:tid 51119] [client 103.178.79.138:50256] [client 103.178.79.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.138, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abwVjb7LZKhdJPD9CBvuOAAAAUg"]
[Thu Mar 19 23:26:05.240957 2026] [:error] [pid 51091:tid 51119] [client 103.178.79.138:50256] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 00:55:24.006057 2026] [:error] [pid 46264:tid 46290] [client 62.84.185.60:54040] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "abwqfIp3TruHFmWOt5HI2wAAAAc"]
[Fri Mar 20 00:55:26.052138 2026] [:error] [pid 46264:tid 46307] [client 62.84.185.60:54048] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "abwqfop3TruHFmWOt5HI5gAAABg"]
[Fri Mar 20 00:55:28.161140 2026] [:error] [pid 46126:tid 46222] [client 62.84.185.60:54064] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abwqgKQ44YePbsZz3j7FXAAAAQY"]
[Fri Mar 20 00:55:30.240148 2026] [:error] [pid 46126:tid 46238] [client 62.84.185.60:54068] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "abwqgqQ44YePbsZz3j7FXwAAAQ4"]
[Fri Mar 20 00:55:32.269889 2026] [:error] [pid 46124:tid 46199] [client 62.84.185.60:47300] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abwqhEzMrlLOY6zyCjJtiQAAAFM"]
[Fri Mar 20 00:55:34.489599 2026] [:error] [pid 46124:tid 46184] [client 62.84.185.60:47312] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "abwqhkzMrlLOY6zyCjJtpQAAAEQ"]
[Fri Mar 20 00:55:36.654490 2026] [:error] [pid 46264:tid 46304] [client 62.84.185.60:47316] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abwqiIp3TruHFmWOt5HJEQAAABU"]
[Fri Mar 20 00:55:38.605939 2026] [:error] [pid 46126:tid 46211] [client 62.84.185.60:47328] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abwqiqQ44YePbsZz3j7FZgAAAQA"]
[Fri Mar 20 00:55:40.795656 2026] [:error] [pid 46264:tid 46293] [client 62.84.185.60:47344] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "abwqjIp3TruHFmWOt5HJKwAAAAo"]
[Fri Mar 20 00:55:42.953825 2026] [:error] [pid 46126:tid 46211] [client 62.84.185.60:27100] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abwqjqQ44YePbsZz3j7FeQAAAQA"]
[Fri Mar 20 00:55:44.987926 2026] [:error] [pid 46125:tid 46229] [client 62.84.185.60:27114] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abwqkGgN4lI6NHeckY5XAgAAAIo"]
[Fri Mar 20 00:55:47.003448 2026] [:error] [pid 46125:tid 46213] [client 62.84.185.60:27116] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abwqk2gN4lI6NHeckY5XBgAAAII"]
[Fri Mar 20 00:55:49.049943 2026] [:error] [pid 46264:tid 46306] [client 62.84.185.60:27126] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "abwqlYp3TruHFmWOt5HJSAAAABc"]
[Fri Mar 20 00:55:51.009458 2026] [:error] [pid 46264:tid 46303] [client 62.84.185.60:27134] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abwql4p3TruHFmWOt5HJVwAAABQ"]
[Fri Mar 20 00:55:52.881170 2026] [:error] [pid 46124:tid 46180] [client 62.84.185.60:45404] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abwqmEzMrlLOY6zyCjJtzgAAAEA"]
[Fri Mar 20 00:55:54.972943 2026] [:error] [pid 46264:tid 46284] [client 62.84.185.60:45410] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abwqmop3TruHFmWOt5HJcwAAAAE"]
[Fri Mar 20 00:55:56.954930 2026] [:error] [pid 46124:tid 46186] [client 62.84.185.60:45416] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "abwqnEzMrlLOY6zyCjJt2wAAAEY"]
[Fri Mar 20 00:55:59.150735 2026] [:error] [pid 46124:tid 46187] [client 62.84.185.60:45428] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abwqn0zMrlLOY6zyCjJt3wAAAEc"]
[Fri Mar 20 00:56:01.092782 2026] [:error] [pid 46124:tid 46202] [client 62.84.185.60:45432] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "abwqoUzMrlLOY6zyCjJt4wAAAFY"]
[Fri Mar 20 00:56:03.154315 2026] [:error] [pid 46124:tid 46204] [client 62.84.185.60:63320] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abwqo0zMrlLOY6zyCjJt5QAAAFg"]
[Fri Mar 20 00:56:05.202937 2026] [:error] [pid 46126:tid 46214] [client 62.84.185.60:63322] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abwqpaQ44YePbsZz3j7FqQAAAQI"]
[Fri Mar 20 00:56:07.356949 2026] [:error] [pid 46264:tid 46289] [client 62.84.185.60:63328] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abwqp4p3TruHFmWOt5HJmQAAAAY"]
[Fri Mar 20 00:56:08.950547 2026] [:error] [pid 46124:tid 46194] [client 62.84.185.60:63334] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abwqqEzMrlLOY6zyCjJt7wAAAE4"]
[Fri Mar 20 00:56:12.841322 2026] [:error] [pid 46264:tid 46306] [client 62.84.185.60:45676] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abwqrIp3TruHFmWOt5HJswAAABc"]
[Fri Mar 20 01:14:28.734914 2026] [:error] [pid 11258:tid 11263] [client 209.97.171.56:62100] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abwu9JPHb95f6xzHJOcPWQAAAMM"]
[Fri Mar 20 01:14:29.046787 2026] [:error] [pid 46125:tid 46243] [client 209.97.171.56:65262] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abwu9WgN4lI6NHeckY5cCgAAAJE"]
[Fri Mar 20 01:14:29.370049 2026] [:error] [pid 46126:tid 46235] [client 209.97.171.56:52663] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abwu9aQ44YePbsZz3j7MIwAAAQw"]
[Fri Mar 20 01:14:29.577416 2026] [:error] [pid 46264:tid 46286] [client 209.97.171.56:63479] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abwu9Yp3TruHFmWOt5HWOwAAAAM"]
[Fri Mar 20 01:14:29.712484 2026] [:error] [pid 46124:tid 46200] [client 209.97.171.56:53068] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abwu9UzMrlLOY6zyCjJ2RQAAAFQ"]
[Fri Mar 20 01:14:29.876015 2026] [:error] [pid 46264:tid 46285] [client 209.97.171.56:51739] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abwu9Yp3TruHFmWOt5HWYwAAAAI"]
[Fri Mar 20 01:14:30.035306 2026] [:error] [pid 46264:tid 46291] [client 209.97.171.56:52318] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "abwu9op3TruHFmWOt5HWfgAAAAg"]
[Fri Mar 20 01:14:30.191281 2026] [:error] [pid 46264:tid 46298] [client 209.97.171.56:63483] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "abwu9op3TruHFmWOt5HWlQAAAA8"]
[Fri Mar 20 01:14:30.367418 2026] [:error] [pid 46264:tid 46299] [client 209.97.171.56:61070] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "abwu9op3TruHFmWOt5HWpQAAABA"]
[Fri Mar 20 01:14:30.763261 2026] [:error] [pid 46264:tid 46283] [client 209.97.171.56:56461] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "abwu9op3TruHFmWOt5HWsAAAAAA"]
[Fri Mar 20 01:14:31.405354 2026] [:error] [pid 11258:tid 11268] [client 209.97.171.56:49992] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "abwu95PHb95f6xzHJOcPjwAAAMg"]
[Fri Mar 20 01:14:31.733958 2026] [:error] [pid 46126:tid 46232] [client 209.97.171.56:59243] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "abwu96Q44YePbsZz3j7MXQAAAQs"]
[Fri Mar 20 01:14:32.139154 2026] [:error] [pid 46125:tid 46208] [client 209.97.171.56:51048] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abwu-GgN4lI6NHeckY5cQAAAAIA"]
[Fri Mar 20 01:45:34.693796 2026] [:error] [pid 46124:tid 46197] [client 49.51.180.2:38228] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abw2PkzMrlLOY6zyCjKCdAAAAFE"]
[Fri Mar 20 01:49:39.522398 2026] [:error] [pid 46126:tid 46214] [client 182.77.80.57:62966] [client 182.77.80.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.80.57, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abw3M6Q44YePbsZz3j7VkAAAAQI"]
[Fri Mar 20 01:49:39.527755 2026] [:error] [pid 46126:tid 46214] [client 182.77.80.57:62966] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 01:49:54.957608 2026] [:error] [pid 46126:tid 46211] [client 45.123.14.252:37005] [client 45.123.14.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.123.14.252, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abw3QqQ44YePbsZz3j7V2gAAAQA"]
[Fri Mar 20 01:49:54.964417 2026] [:error] [pid 46126:tid 46211] [client 45.123.14.252:37005] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 08:06:43.487511 2026] [:error] [pid 58126:tid 58193] [client 79.137.67.30:50174] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abyPk6KAmdXQSS0Y5KBxJgAAAFU"]
[Fri Mar 20 08:06:45.753754 2026] [:error] [pid 55301:tid 55397] [client 79.137.67.30:47046] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "abyPlcKP1x4sgmjd3xSJXwAAApQ"]
[Fri Mar 20 08:06:47.801532 2026] [:error] [pid 55206:tid 55223] [client 79.137.67.30:47056] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abyPl3Uc_Wl5viVmsDwzpgAAAU8"]
[Fri Mar 20 08:06:49.806291 2026] [:error] [pid 55299:tid 55312] [client 79.137.67.30:47070] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "abyPmfoGhbNgkNIkZwmY1AAAAgc"]
[Fri Mar 20 08:06:51.724601 2026] [:error] [pid 55239:tid 55290] [client 79.137.67.30:47084] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "abyPm6ycM6mGWSmcyoIENgAAAdE"]
[Fri Mar 20 08:06:53.877613 2026] [:error] [pid 55299:tid 55310] [client 79.137.67.30:47086] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abyPnfoGhbNgkNIkZwmY2AAAAgU"]
[Fri Mar 20 08:06:55.843602 2026] [:error] [pid 58126:tid 58192] [client 79.137.67.30:49140] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abyPn6KAmdXQSS0Y5KBxKgAAAFQ"]
[Fri Mar 20 08:06:57.927479 2026] [:error] [pid 55206:tid 55219] [client 79.137.67.30:49156] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "abyPoXUc_Wl5viVmsDwzrgAAAUs"]
[Fri Mar 20 08:06:59.801341 2026] [:error] [pid 55452:tid 55488] [client 79.137.67.30:49158] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "abyPo4lFvOIliSP0R2BS2QAAA4U"]
[Fri Mar 20 08:07:01.798056 2026] [:error] [pid 55299:tid 55322] [client 79.137.67.30:49162] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abyPpfoGhbNgkNIkZwmY8AAAAhE"]
[Fri Mar 20 08:07:03.793672 2026] [:error] [pid 55301:tid 55366] [client 79.137.67.30:49164] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "abyPp8KP1x4sgmjd3xSJfQAAAoQ"]
[Fri Mar 20 08:07:06.092955 2026] [:error] [pid 55452:tid 55504] [client 79.137.67.30:58620] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abyPqolFvOIliSP0R2BS3QAAA5U"]
[Fri Mar 20 08:07:10.006535 2026] [:error] [pid 55301:tid 55381] [client 79.137.67.30:58636] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "abyPrsKP1x4sgmjd3xSJiAAAAo0"]
[Fri Mar 20 09:26:35.431662 2026] [:error] [pid 55239:tid 55281] [client 54.38.38.130:45434] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "abyiS6ycM6mGWSmcyoIdVQAAAcg"]
[Fri Mar 20 11:31:08.337153 2026] [:error] [pid 49170:tid 49196] [client 116.240.149.7:64839] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aby_fM-c8ctLVDCqUJXhiAAAABY"]
[Fri Mar 20 11:31:10.795942 2026] [:error] [pid 49170:tid 49191] [client 116.240.149.7:59891] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aby_fs-c8ctLVDCqUJXhjAAAABE"]
[Fri Mar 20 11:31:14.188792 2026] [:error] [pid 51714:tid 51724] [client 116.240.149.7:63197] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "aby_gjWI82pxvQ0gkstlgwAAAIg"]
[Fri Mar 20 11:31:20.198820 2026] [:error] [pid 49170:tid 49183] [client 116.240.149.7:64378] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "aby_iM-c8ctLVDCqUJXhqQAAAAk"]
[Fri Mar 20 11:31:23.869041 2026] [:error] [pid 51714:tid 51717] [client 116.240.149.7:64948] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aby_izWI82pxvQ0gkstloQAAAIE"]
[Fri Mar 20 11:31:27.326758 2026] [:error] [pid 49082:tid 49149] [client 116.240.149.7:65137] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aby_j6pllYJI1LUIdL9a0AAAAUc"]
[Fri Mar 20 11:31:30.311456 2026] [:error] [pid 49082:tid 49162] [client 116.240.149.7:61806] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "aby_kqpllYJI1LUIdL9a2gAAAVQ"]
[Fri Mar 20 11:31:33.165971 2026] [:error] [pid 49170:tid 49189] [client 116.240.149.7:61804] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aby_lc-c8ctLVDCqUJXhzQAAAA8"]
[Fri Mar 20 11:31:36.131502 2026] [:error] [pid 49170:tid 49179] [client 116.240.149.7:64720] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aby_mM-c8ctLVDCqUJXh1gAAAAU"]
[Fri Mar 20 11:31:40.895952 2026] [:error] [pid 51714:tid 51723] [client 116.240.149.7:61363] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aby_nDWI82pxvQ0gkstlwAAAAIc"]
[Fri Mar 20 11:31:43.147366 2026] [:error] [pid 51714:tid 51735] [client 116.240.149.7:62498] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aby_nzWI82pxvQ0gkstlxwAAAJM"]
[Fri Mar 20 11:31:47.214754 2026] [:error] [pid 49081:tid 49138] [client 116.240.149.7:62538] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aby_oxo1LBAUhfhYPR1N_AAAARc"]
[Fri Mar 20 11:31:51.894008 2026] [:error] [pid 49170:tid 49192] [client 116.240.149.7:60134] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aby_p8-c8ctLVDCqUJXh-gAAABI"]
[Fri Mar 20 11:31:54.672417 2026] [:error] [pid 49080:tid 49099] [client 116.240.149.7:63993] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aby_qok5CHi4V0A3ttgNagAAAE0"]
[Fri Mar 20 11:31:57.247988 2026] [:error] [pid 49080:tid 49105] [client 116.240.149.7:61925] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "aby_rYk5CHi4V0A3ttgNdQAAAFM"]
[Fri Mar 20 11:32:01.953999 2026] [:error] [pid 51714:tid 51735] [client 116.240.149.7:62297] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "aby_sTWI82pxvQ0gkstl9AAAAJM"]
[Fri Mar 20 11:32:47.577436 2026] [:error] [pid 49080:tid 49099] [client 116.240.149.7:61077] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aby_34k5CHi4V0A3ttgN8QAAAE0"]
[Fri Mar 20 11:32:51.460912 2026] [:error] [pid 49082:tid 49153] [client 116.240.149.7:64932] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "aby_46pllYJI1LUIdL9bewAAAUs"]
[Fri Mar 20 11:32:55.654141 2026] [:error] [pid 49080:tid 49105] [client 116.240.149.7:59591] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aby_54k5CHi4V0A3ttgN-QAAAFM"]
[Fri Mar 20 11:33:00.711603 2026] [:error] [pid 51714:tid 51726] [client 116.240.149.7:63079] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aby_7DWI82pxvQ0gkstnAAAAAIo"]
[Fri Mar 20 11:33:02.675718 2026] [:error] [pid 49081:tid 49125] [client 116.240.149.7:64128] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "aby_7ho1LBAUhfhYPR1OiwAAAQo"]
[Fri Mar 20 11:33:05.413167 2026] [:error] [pid 51714:tid 51737] [client 116.240.149.7:64221] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aby_8TWI82pxvQ0gkstnCwAAAJU"]
[Fri Mar 20 11:33:09.548797 2026] [:error] [pid 51714:tid 51724] [client 116.240.149.7:62653] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aby_9TWI82pxvQ0gkstnIgAAAIg"]
[Fri Mar 20 11:33:12.231371 2026] [:error] [pid 49080:tid 49104] [client 116.240.149.7:60156] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "aby_-Ik5CHi4V0A3ttgOEQAAAFI"]
[Fri Mar 20 11:33:14.664225 2026] [:error] [pid 49170:tid 49189] [client 116.240.149.7:64290] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "aby_-s-c8ctLVDCqUJXi2gAAAA8"]
[Fri Mar 20 11:33:18.505069 2026] [:error] [pid 51714:tid 51737] [client 116.240.149.7:60321] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aby__jWI82pxvQ0gkstnPwAAAJU"]
[Fri Mar 20 11:33:20.705416 2026] [:error] [pid 51714:tid 51723] [client 116.240.149.7:60928] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "abzAADWI82pxvQ0gkstnSAAAAIc"]
[Fri Mar 20 11:33:23.252601 2026] [:error] [pid 49170:tid 49192] [client 116.240.149.7:60589] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "abzAA8-c8ctLVDCqUJXi6AAAABI"]
[Fri Mar 20 11:33:29.609800 2026] [:error] [pid 49082:tid 49156] [client 116.240.149.7:61234] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abzACapllYJI1LUIdL9b4QAAAU4"]
[Fri Mar 20 11:33:34.002465 2026] [:error] [pid 51714:tid 51718] [client 116.240.149.7:61351] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "abzADjWI82pxvQ0gkstnhgAAAII"]
[Fri Mar 20 11:33:36.898419 2026] [:error] [pid 51714:tid 51733] [client 116.240.149.7:62910] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abzAEDWI82pxvQ0gkstnoQAAAJE"]
[Fri Mar 20 13:49:32.646375 2026] [:error] [pid 49170:tid 49186] [client 51.83.9.87:54646] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "abzf7M-c8ctLVDCqUJUSrwAAAAw"]
[Fri Mar 20 13:49:34.548095 2026] [:error] [pid 49081:tid 49127] [client 51.83.9.87:34082] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "abzf7ho1LBAUhfhYPR2nkgAAAQw"]
[Fri Mar 20 13:49:36.733322 2026] [:error] [pid 49081:tid 49131] [client 51.83.9.87:34090] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "abzf8Bo1LBAUhfhYPR2nmgAAARA"]
[Fri Mar 20 13:49:38.566248 2026] [:error] [pid 49080:tid 49101] [client 51.83.9.87:45542] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "abzf8ok5CHi4V0A3tthTrQAAAE8"]
[Fri Mar 20 13:49:40.436331 2026] [:error] [pid 49081:tid 49124] [client 51.83.9.87:45548] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "abzf9Bo1LBAUhfhYPR2npQAAAQk"]
[Fri Mar 20 13:49:42.272201 2026] [:error] [pid 51714:tid 51717] [client 51.83.9.87:45558] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "abzf9jWI82pxvQ0gksuWJAAAAIE"]
[Fri Mar 20 13:49:44.340507 2026] [:error] [pid 49082:tid 49146] [client 51.83.9.87:45560] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "abzf-KpllYJI1LUIdL93UgAAAUQ"]
[Fri Mar 20 13:49:46.394574 2026] [:error] [pid 49080:tid 49093] [client 51.83.9.87:45576] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "abzf-ok5CHi4V0A3tthTxgAAAEc"]
[Fri Mar 20 13:49:48.482201 2026] [:error] [pid 49081:tid 49126] [client 51.83.9.87:50540] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "abzf_Bo1LBAUhfhYPR2nqgAAAQs"]
[Fri Mar 20 14:02:06.202920 2026] [:error] [pid 51714:tid 51739] [client 43.135.134.127:40580] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "abzi3jWI82pxvQ0gksuYlAAAAJc"]
[Fri Mar 20 14:27:26.489922 2026] [:error] [pid 49080:tid 49095] [client 141.98.11.17:56103] [client 141.98.11.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/images/"] [unique_id "abzozok5CHi4V0A3tthn5wAAAEk"], referer: binance.com
[Fri Mar 20 14:27:31.505060 2026] [:error] [pid 49081:tid 49117] [client 141.98.11.17:58586] [client 141.98.11.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/files/"] [unique_id "abzo0xo1LBAUhfhYPR3BCAAAAQI"], referer: binance.com
[Fri Mar 20 14:31:46.439905 2026] [:error] [pid 49170:tid 49188] [client 103.247.52.196:36936] [client 103.247.52.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.247.52.196, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "abzp0s-c8ctLVDCqUJUfVQAAAA4"]
[Fri Mar 20 14:31:46.447402 2026] [:error] [pid 49170:tid 49188] [client 103.247.52.196:36936] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 19:10:00.409126 2026] [:error] [pid 27302:tid 27304] [client 177.44.219.120:10128] [client 177.44.219.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.44.219.120, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "ab0rCLDKiUve17xv6yFo8gAAAMA"]
[Fri Mar 20 19:10:00.415146 2026] [:error] [pid 27302:tid 27304] [client 177.44.219.120:10128] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 20:13:31.733377 2026] [:error] [pid 49081:tid 49130] [client 216.24.212.40:44777] [client 216.24.212.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.40, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "ab056xo1LBAUhfhYPR2M2QAAAQ8"]
[Fri Mar 20 20:13:31.737323 2026] [:error] [pid 49081:tid 49130] [client 216.24.212.40:44777] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 20:20:19.832252 2026] [:error] [pid 27302:tid 27311] [client 49.51.233.46:54896] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "ab07g7DKiUve17xv6yF7FAAAAMc"]
[Fri Mar 20 21:28:52.587525 2026] [:error] [pid 49081:tid 49119] [client 147.135.212.200:57332] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "ab1LlBo1LBAUhfhYPR2TewAAAQQ"]
[Fri Mar 20 21:28:55.040390 2026] [:error] [pid 38378:tid 38387] [client 147.135.212.200:53642] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab1Ll1Kb3npPsu9Iib191QAAAgU"]
[Fri Mar 20 21:28:57.040002 2026] [:error] [pid 49082:tid 49145] [client 147.135.212.200:54568] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "ab1LmapllYJI1LUIdL_UsAAAAUM"]
[Fri Mar 20 21:28:59.561652 2026] [:error] [pid 49170:tid 49176] [client 147.135.212.200:54570] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab1Lm8-c8ctLVDCqUJWVfAAAAAI"]
[Fri Mar 20 21:29:01.593483 2026] [:error] [pid 38378:tid 38386] [client 147.135.212.200:54578] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab1LnVKb3npPsu9Iib193AAAAgQ"]
[Fri Mar 20 21:29:03.910664 2026] [:error] [pid 27302:tid 27326] [client 147.135.212.200:54580] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab1Ln7DKiUve17xv6yGB7gAAANY"]
[Fri Mar 20 21:29:06.325948 2026] [:error] [pid 49081:tid 49116] [client 147.135.212.200:38964] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab1Loho1LBAUhfhYPR2TfQAAAQE"]
[Fri Mar 20 21:29:08.754147 2026] [:error] [pid 49170:tid 49182] [client 147.135.212.200:38972] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "ab1LpM-c8ctLVDCqUJWVigAAAAg"]
[Fri Mar 20 21:29:10.942361 2026] [:error] [pid 49082:tid 49148] [client 147.135.212.200:38986] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "ab1LpqpllYJI1LUIdL_U5gAAAUY"]
[Fri Mar 20 21:29:13.046465 2026] [:error] [pid 49082:tid 49157] [client 147.135.212.200:39002] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "ab1LqapllYJI1LUIdL_U7wAAAU8"]
[Fri Mar 20 21:29:15.278081 2026] [:error] [pid 38219:tid 38241] [client 147.135.212.200:39006] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "ab1Lq3LdNs2F_zXG7H8EcQAAAYs"]
[Fri Mar 20 21:29:17.327468 2026] [:error] [pid 49082:tid 49150] [client 147.135.212.200:60420] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "ab1LrapllYJI1LUIdL_U-wAAAUg"]
[Fri Mar 20 21:29:19.543064 2026] [:error] [pid 49080:tid 49100] [client 147.135.212.200:60422] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab1Lr4k5CHi4V0A3ttgWrgAAAE4"]
[Fri Mar 20 21:29:21.611599 2026] [:error] [pid 38305:tid 38319] [client 147.135.212.200:60430] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "ab1LsXguiB3cZkKG6iI_5gAAAcc"]
[Fri Mar 20 21:29:23.866836 2026] [:error] [pid 49082:tid 49159] [client 147.135.212.200:60440] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "ab1Ls6pllYJI1LUIdL_VEgAAAVE"]
[Fri Mar 20 21:29:25.779564 2026] [:error] [pid 49170:tid 49178] [client 147.135.212.200:60452] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "ab1Ltc-c8ctLVDCqUJWVqQAAAAQ"]
[Fri Mar 20 21:29:27.865784 2026] [:error] [pid 49080:tid 49091] [client 147.135.212.200:40188] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "ab1Lt4k5CHi4V0A3ttgWuAAAAEU"]
[Fri Mar 20 21:29:31.088412 2026] [:error] [pid 27302:tid 27307] [client 147.135.212.200:40200] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab1Lu7DKiUve17xv6yGB9AAAAMM"]
[Fri Mar 20 21:29:34.994192 2026] [:error] [pid 49082:tid 49148] [client 147.135.212.200:40216] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab1LvqpllYJI1LUIdL_VOAAAAUY"]
[Fri Mar 20 21:43:32.597643 2026] [:error] [pid 38305:tid 38322] [client 209.87.169.254:29697] [client 209.87.169.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.254, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "ab1PBHguiB3cZkKG6iJCFwAAAco"]
[Fri Mar 20 21:43:32.601680 2026] [:error] [pid 38305:tid 38322] [client 209.87.169.254:29697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 23:54:08.509214 2026] [:error] [pid 49170:tid 49188] [client 82.64.128.248:41742] [client 82.64.128.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/../.env"] [unique_id "ab1toM-c8ctLVDCqUJXEaAAAAA4"]
[Sat Mar 21 01:18:47.637840 2026] [:error] [pid 62479:tid 62531] [client 77.90.108.197:64206] [client 77.90.108.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.90.108.197, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "ab2Bd_KZ7MVNG8qirU9aigAAARQ"]
[Sat Mar 21 01:18:47.642895 2026] [:error] [pid 62479:tid 62531] [client 77.90.108.197:64206] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 01:21:16.911860 2026] [:error] [pid 62480:tid 62547] [client 147.135.212.201:42578] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab2CDLq1lu6xCJtkVarrQwAAAUk"]
[Sat Mar 21 01:21:18.970277 2026] [:error] [pid 62754:tid 62832] [client 147.135.212.201:48176] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "ab2CDhwXN_jHGJ5L7yFd3QAAABE"]
[Sat Mar 21 01:21:21.171624 2026] [:error] [pid 62754:tid 62833] [client 147.135.212.201:39592] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab2CERwXN_jHGJ5L7yFd5AAAABI"]
[Sat Mar 21 01:21:23.377183 2026] [:error] [pid 62754:tid 62827] [client 147.135.212.201:39602] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "ab2CExwXN_jHGJ5L7yFd6QAAAAw"]
[Sat Mar 21 01:21:25.462443 2026] [:error] [pid 62754:tid 62837] [client 147.135.212.201:39616] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "ab2CFRwXN_jHGJ5L7yFd8wAAABY"]
[Sat Mar 21 01:21:27.627695 2026] [:error] [pid 62476:tid 62499] [client 147.135.212.201:39620] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab2CF2BL9BQ4RM1FKIB2XgAAAFA"]
[Sat Mar 21 01:21:29.579691 2026] [:error] [pid 62479:tid 62531] [client 147.135.212.201:39624] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab2CGfKZ7MVNG8qirU9bSgAAARQ"]
[Sat Mar 21 01:21:31.501949 2026] [:error] [pid 62479:tid 62529] [client 147.135.212.201:51412] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "ab2CG_KZ7MVNG8qirU9bTgAAARI"]
[Sat Mar 21 01:21:33.357626 2026] [:error] [pid 62479:tid 62520] [client 147.135.212.201:51418] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "ab2CHfKZ7MVNG8qirU9bUwAAAQk"]
[Sat Mar 21 01:21:35.239700 2026] [:error] [pid 62480:tid 62538] [client 147.135.212.201:51422] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab2CH7q1lu6xCJtkVarrXgAAAUA"]
[Sat Mar 21 01:21:37.170152 2026] [:error] [pid 62754:tid 62838] [client 147.135.212.201:51436] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "ab2CIRwXN_jHGJ5L7yFeDQAAABc"]
[Sat Mar 21 01:21:40.733465 2026] [:error] [pid 62754:tid 62829] [client 147.135.212.201:46476] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab2CJBwXN_jHGJ5L7yFeGwAAAA4"]
[Sat Mar 21 01:21:44.683890 2026] [:error] [pid 62754:tid 62832] [client 147.135.212.201:46488] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab2CKBwXN_jHGJ5L7yFeKAAAABE"]
[Sat Mar 21 02:43:08.978316 2026] [:error] [pid 62480:tid 62561] [client 217.182.195.176:44314] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "ab2VPLq1lu6xCJtkVaoKlgAAAVc"]
[Sat Mar 21 03:14:24.637867 2026] [:error] [pid 63238:tid 63291] [client 182.44.10.67:37273] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab2ckEzsSZX-aOIUDNXvBgAAAEg"]
[Sat Mar 21 04:03:12.565559 2026] [:error] [pid 1601:tid 1616] [client 43.153.74.75:49952] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab2oAKdDBYVcyITq-IEIYwAAAMs"]
[Sat Mar 21 07:26:12.803660 2026] [:error] [pid 1601:tid 1617] [client 65.108.2.171:16614] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab3XlKdDBYVcyITq-IFZBQAAAMw"]
[Sat Mar 21 07:26:14.875147 2026] [:error] [pid 1490:tid 1545] [client 65.108.2.171:18390] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab3XlmSWhIPTatyxDeCSPAAAAEo"]
[Sat Mar 21 07:26:16.908936 2026] [:error] [pid 1601:tid 1623] [client 65.108.2.171:18398] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "ab3XmKdDBYVcyITq-IFZCQAAANI"]
[Sat Mar 21 07:26:18.965199 2026] [:error] [pid 1489:tid 1518] [client 65.108.2.171:18406] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "ab3XmlRvnvBO_DG9kxsNpgAAAA4"]
[Sat Mar 21 07:26:20.923908 2026] [:error] [pid 49170:tid 49175] [client 65.108.2.171:18410] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "ab3XnL1KUC-QISS0eWo6NgAAAQM"]
[Sat Mar 21 07:26:22.972024 2026] [:error] [pid 1491:tid 1573] [client 65.108.2.171:18416] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "ab3Xnq3VfHftzE9w9t7qjwAAAIo"]
[Sat Mar 21 07:26:25.137747 2026] [:error] [pid 1491:tid 1563] [client 65.108.2.171:28500] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "ab3Xoa3VfHftzE9w9t7qkwAAAIA"]
[Sat Mar 21 07:26:27.225824 2026] [:error] [pid 1490:tid 1537] [client 65.108.2.171:28504] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "ab3Xo2SWhIPTatyxDeCSWQAAAEQ"]
[Sat Mar 21 07:26:29.263711 2026] [:error] [pid 49170:tid 49194] [client 65.108.2.171:28508] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "ab3Xpb1KUC-QISS0eWo6TwAAARY"]
[Sat Mar 21 10:35:21.644201 2026] [:error] [pid 1489:tid 1514] [client 180.190.14.88:38726] [client 180.190.14.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.14.88, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "ab4D6VRvnvBO_DG9kxtCBAAAAAo"]
[Sat Mar 21 10:35:21.649168 2026] [:error] [pid 1489:tid 1514] [client 180.190.14.88:38726] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 12:28:47.373016 2026] [:error] [pid 42886:tid 42909] [client 176.57.188.217:46186] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "ab4ef1452dC6nbNWav0YqAAAAxU"]
[Sat Mar 21 12:28:51.389483 2026] [:error] [pid 33456:tid 33461] [client 176.57.188.217:42314] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "ab4egw-0Ziq_OzjHFfUKYwAAAYM"]
[Sat Mar 21 12:28:53.620848 2026] [:error] [pid 1489:tid 1522] [client 176.57.188.217:42320] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ab4ehVRvnvBO_DG9kxtoawAAABI"]
[Sat Mar 21 12:28:56.054708 2026] [:error] [pid 1490:tid 1536] [client 176.57.188.217:42336] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "ab4eiGSWhIPTatyxDeDcfQAAAEM"]
[Sat Mar 21 12:28:58.247792 2026] [:error] [pid 42886:tid 42892] [client 176.57.188.217:57130] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab4eil452dC6nbNWav0YugAAAwQ"]
[Sat Mar 21 12:29:00.473116 2026] [:error] [pid 1489:tid 1522] [client 176.57.188.217:57146] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "ab4ejFRvnvBO_DG9kxtodgAAABI"]
[Sat Mar 21 12:29:03.196673 2026] [:error] [pid 43052:tid 43072] [client 176.57.188.217:57150] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ab4ej15fjm-AiInC1hJDzgAAA5I"]
[Sat Mar 21 12:29:06.495274 2026] [:error] [pid 43052:tid 43060] [client 176.57.188.217:47634] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "ab4ekl5fjm-AiInC1hJD0gAAA4Y"]
[Sat Mar 21 12:29:10.332422 2026] [:error] [pid 1489:tid 1516] [client 176.57.188.217:47650] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "ab4ellRvnvBO_DG9kxtonwAAAAw"]
[Sat Mar 21 12:29:12.908859 2026] [:error] [pid 43052:tid 43071] [client 176.57.188.217:47662] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "ab4emF5fjm-AiInC1hJD6QAAA5E"]
[Sat Mar 21 12:29:15.441178 2026] [:error] [pid 49170:tid 49182] [client 176.57.188.217:47678] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "ab4em71KUC-QISS0eWpxWAAAAQo"]
[Sat Mar 21 12:29:17.926315 2026] [:error] [pid 1489:tid 1504] [client 176.57.188.217:57254] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ab4enVRvnvBO_DG9kxtowAAAAAE"]
[Sat Mar 21 12:29:20.518439 2026] [:error] [pid 42886:tid 42911] [client 176.57.188.217:57270] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "ab4eoF452dC6nbNWav0Y0AAAAxc"]
[Sat Mar 21 12:29:22.855972 2026] [:error] [pid 1490:tid 1538] [client 176.57.188.217:57284] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ab4eomSWhIPTatyxDeDcjAAAAEU"]
[Sat Mar 21 12:29:25.529252 2026] [:error] [pid 1491:tid 1572] [client 176.57.188.217:57298] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ab4epa3VfHftzE9w9t4lvwAAAIk"]
[Sat Mar 21 12:29:28.054713 2026] [:error] [pid 1489:tid 1523] [client 176.57.188.217:33752] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ab4eqFRvnvBO_DG9kxto2QAAABM"]
[Sat Mar 21 12:29:31.346307 2026] [:error] [pid 1490:tid 1537] [client 176.57.188.217:33758] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "ab4eq2SWhIPTatyxDeDcmgAAAEQ"]
[Sat Mar 21 12:29:33.576976 2026] [:error] [pid 33678:tid 33684] [client 176.57.188.217:33772] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ab4erTuClB_om73sXhc8GQAAAgQ"]
[Sat Mar 21 12:29:36.225601 2026] [:error] [pid 49170:tid 49182] [client 176.57.188.217:33788] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "ab4esL1KUC-QISS0eWpxcQAAAQo"]
[Sat Mar 21 12:29:38.603130 2026] [:error] [pid 49170:tid 49194] [client 176.57.188.217:33406] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "ab4esr1KUC-QISS0eWpxdQAAARY"]
[Sat Mar 21 12:29:41.236049 2026] [:error] [pid 49170:tid 49189] [client 176.57.188.217:33422] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "ab4etb1KUC-QISS0eWpxewAAARE"]
[Sat Mar 21 12:29:44.324063 2026] [:error] [pid 33348:tid 33365] [client 176.57.188.217:33430] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ab4euDEj9d9zzbs_KjjsrQAAAU4"]
[Sat Mar 21 12:30:14.652689 2026] [:error] [pid 42886:tid 42896] [client 176.57.188.217:39164] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab4e1l452dC6nbNWav0ZDAAAAwg"]
[Sat Mar 21 12:30:17.437792 2026] [:error] [pid 1490:tid 1551] [client 176.57.188.217:34050] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab4e2WSWhIPTatyxDeDc0AAAAFA"]
[Sat Mar 21 12:30:19.721340 2026] [:error] [pid 49170:tid 49193] [client 176.57.188.217:34066] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab4e271KUC-QISS0eWpxpgAAARU"]
[Sat Mar 21 12:30:21.996052 2026] [:error] [pid 42886:tid 42890] [client 176.57.188.217:34072] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab4e3V452dC6nbNWav0ZEgAAAwI"]
[Sat Mar 21 12:30:24.545965 2026] [:error] [pid 33678:tid 33689] [client 176.57.188.217:34088] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab4e4DuClB_om73sXhc8MwAAAgk"]
[Sat Mar 21 12:30:26.654391 2026] [:error] [pid 1489:tid 1505] [client 176.57.188.217:54674] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "ab4e4lRvnvBO_DG9kxtpHgAAAAI"]
[Sat Mar 21 12:30:29.336015 2026] [:error] [pid 1489:tid 1515] [client 176.57.188.217:54684] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "ab4e5VRvnvBO_DG9kxtpJAAAAAs"]
[Sat Mar 21 12:30:32.233057 2026] [:error] [pid 43052:tid 43067] [client 176.57.188.217:54690] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab4e6F5fjm-AiInC1hJENwAAA40"]
[Sat Mar 21 13:51:33.748088 2026] [:error] [pid 1491:tid 1563] [client 101.33.66.34:57094] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab4x5a3VfHftzE9w9t4ttQAAAIA"]
[Sat Mar 21 13:53:54.193396 2026] [:error] [pid 49170:tid 49172] [client 101.33.66.34:34746] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab4ycr1KUC-QISS0eWp-2wAAAQA"]
[Sat Mar 21 13:56:21.045730 2026] [:error] [pid 1490:tid 1541] [client 43.157.38.131:38768] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "ab4zBWSWhIPTatyxDeD1ZAAAAEY"]
[Sat Mar 21 15:12:01.759369 2026] [:error] [pid 42886:tid 42894] [client 147.135.213.234:52514] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "ab5EwV452dC6nbNWav063AAAAwY"]
[Sat Mar 21 15:12:03.701776 2026] [:error] [pid 33678:tid 33702] [client 147.135.213.234:41824] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab5EwzuClB_om73sXhdJrgAAAhY"]
[Sat Mar 21 15:12:05.692737 2026] [:error] [pid 1489:tid 1517] [client 147.135.213.234:41836] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "ab5ExVRvnvBO_DG9kxujQQAAAA0"]
[Sat Mar 21 15:12:07.639144 2026] [:error] [pid 43052:tid 43070] [client 147.135.213.234:38670] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab5Ex15fjm-AiInC1hKVVwAAA5A"]
[Sat Mar 21 15:12:09.677436 2026] [:error] [pid 43052:tid 43054] [client 147.135.213.234:38682] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab5EyV5fjm-AiInC1hKVXAAAA4A"]
[Sat Mar 21 15:12:11.605874 2026] [:error] [pid 42886:tid 42907] [client 147.135.213.234:38684] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab5Ey1452dC6nbNWav064QAAAxM"]
[Sat Mar 21 15:12:13.683669 2026] [:error] [pid 42886:tid 42889] [client 147.135.213.234:38700] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab5EzV452dC6nbNWav065AAAAwE"]
[Sat Mar 21 15:12:15.785884 2026] [:error] [pid 33584:tid 33610] [client 147.135.213.234:38702] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "ab5Ez-ATEQBBo5z2HklupQAAAdg"]
[Sat Mar 21 15:12:17.730751 2026] [:error] [pid 1489:tid 1509] [client 147.135.213.234:54772] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "ab5E0VRvnvBO_DG9kxujWwAAAAY"]
[Sat Mar 21 15:12:19.658224 2026] [:error] [pid 43052:tid 43068] [client 147.135.213.234:54782] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "ab5E015fjm-AiInC1hKVgAAAA44"]
[Sat Mar 21 15:12:21.690456 2026] [:error] [pid 43052:tid 43061] [client 147.135.213.234:54796] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "ab5E1V5fjm-AiInC1hKVgwAAA4c"]
[Sat Mar 21 15:12:23.674567 2026] [:error] [pid 33348:tid 33357] [client 147.135.213.234:54800] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "ab5E1zEj9d9zzbs_Kjj1wgAAAUY"]
[Sat Mar 21 15:12:25.576099 2026] [:error] [pid 43052:tid 43077] [client 147.135.213.234:54802] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab5E2V5fjm-AiInC1hKVhwAAA5c"]
[Sat Mar 21 15:12:27.600564 2026] [:error] [pid 43052:tid 43057] [client 147.135.213.234:47948] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "ab5E215fjm-AiInC1hKVjgAAA4M"]
[Sat Mar 21 15:12:29.603810 2026] [:error] [pid 1490:tid 1545] [client 147.135.213.234:47956] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "ab5E3WSWhIPTatyxDeAKNAAAAEo"]
[Sat Mar 21 15:12:31.660109 2026] [:error] [pid 43052:tid 43056] [client 147.135.213.234:47958] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "ab5E315fjm-AiInC1hKVpQAAA4I"]
[Sat Mar 21 15:12:33.707216 2026] [:error] [pid 49170:tid 49181] [client 147.135.213.234:47972] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "ab5E4b1KUC-QISS0eWqK-QAAAQk"]
[Sat Mar 21 15:12:35.539805 2026] [:error] [pid 1489:tid 1507] [client 147.135.213.234:47984] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab5E41RvnvBO_DG9kxujgQAAAAQ"]
[Sat Mar 21 15:12:39.350411 2026] [:error] [pid 43052:tid 43077] [client 147.135.213.234:60482] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab5E515fjm-AiInC1hKVuQAAA5c"]
[Sat Mar 21 15:46:35.728796 2026] [:error] [pid 43052:tid 43062] [client 79.137.65.139:60556] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "ab5M215fjm-AiInC1hKmawAAA4g"]
[Sat Mar 21 17:17:19.572073 2026] [:error] [pid 33584:tid 33595] [client 185.165.46.202:57377] File does not exist: /usr/local/apache/htdocs/suspended-page/accesson.php
[Sat Mar 21 17:36:16.416432 2026] [:error] [pid 1490:tid 1545] [client 202.141.98.110:43311] [client 202.141.98.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.98.110, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "ab5mkGSWhIPTatyxDeAynAAAAEo"]
[Sat Mar 21 17:36:16.421403 2026] [:error] [pid 1490:tid 1545] [client 202.141.98.110:43311] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 17:36:48.504145 2026] [:error] [pid 42886:tid 42907] [client 112.204.168.183:48297] [client 112.204.168.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.204.168.183, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "ab5msF452dC6nbNWav1aLgAAAxM"]
[Sat Mar 21 17:36:48.509283 2026] [:error] [pid 42886:tid 42907] [client 112.204.168.183:48297] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 19:03:06.217680 2026] [:error] [pid 49170:tid 49173] [client 51.75.116.205:43118] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab566r1KUC-QISS0eWrGoQAAAQE"]
[Sat Mar 21 19:03:08.114728 2026] [:error] [pid 49170:tid 49194] [client 51.75.116.205:58284] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "ab567L1KUC-QISS0eWrGpQAAARY"]
[Sat Mar 21 19:03:10.134010 2026] [:error] [pid 43052:tid 43078] [client 51.75.116.205:46926] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab567l5fjm-AiInC1hIAjgAAA5g"]
[Sat Mar 21 19:03:12.078622 2026] [:error] [pid 1491:tid 1570] [client 51.75.116.205:46928] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "ab568K3VfHftzE9w9t5QXgAAAIc"]
[Sat Mar 21 19:03:13.859273 2026] [:error] [pid 49170:tid 49190] [client 51.75.116.205:46936] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "ab568b1KUC-QISS0eWrGpgAAARI"]
[Sat Mar 21 19:03:15.876270 2026] [:error] [pid 1490:tid 1559] [client 51.75.116.205:46938] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab5682SWhIPTatyxDeBFoAAAAFc"]
[Sat Mar 21 19:03:17.762985 2026] [:error] [pid 43052:tid 43054] [client 51.75.116.205:46950] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab569V5fjm-AiInC1hIAowAAA4A"]
[Sat Mar 21 19:03:19.686513 2026] [:error] [pid 43052:tid 43065] [client 51.75.116.205:41930] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "ab56915fjm-AiInC1hIArwAAA4s"]
[Sat Mar 21 19:03:21.579821 2026] [:error] [pid 49170:tid 49181] [client 51.75.116.205:41940] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "ab56-b1KUC-QISS0eWrGrwAAAQk"]
[Sat Mar 21 19:03:23.527980 2026] [:error] [pid 49170:tid 49190] [client 51.75.116.205:41954] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab56-71KUC-QISS0eWrGswAAARI"]
[Sat Mar 21 19:03:25.405002 2026] [:error] [pid 1490:tid 1535] [client 51.75.116.205:41966] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "ab56_WSWhIPTatyxDeBFogAAAEI"]
[Sat Mar 21 19:03:28.755766 2026] [:error] [pid 42886:tid 42908] [client 51.75.116.205:60694] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab57AF452dC6nbNWav1p-wAAAxQ"]
[Sat Mar 21 19:03:32.558329 2026] [:error] [pid 33678:tid 33687] [client 51.75.116.205:60696] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab57BDuClB_om73sXhdfVAAAAgc"]
[Sat Mar 21 20:01:14.850047 2026] [:error] [pid 43052:tid 43065] [client 43.157.46.118:51996] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab6Iil5fjm-AiInC1hIUmQAAA4s"]
[Sat Mar 21 20:08:43.697991 2026] [:error] [pid 49170:tid 49191] [client 49.51.195.195:37270] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "ab6KS71KUC-QISS0eWrlJAAAARM"]
[Sun Mar 22 00:56:23.515374 2026] [:error] [pid 41061:tid 41066] [client 51.68.234.121:53002] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab7Nt6ksT6woy-Od6iGtXgAAAMI"]
[Sun Mar 22 00:56:25.572298 2026] [:error] [pid 40781:tid 41018] [client 51.68.234.121:49684] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab7NuTJQuCgg1YvEGBLZ6AAAAEw"]
[Sun Mar 22 00:56:27.649301 2026] [:error] [pid 40780:tid 40956] [client 51.68.234.121:49692] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "ab7NuyZDsmYIjKpJe4NB2AAAAAk"]
[Sun Mar 22 00:56:29.646970 2026] [:error] [pid 40781:tid 41016] [client 51.68.234.121:49698] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "ab7NvTJQuCgg1YvEGBLZ6wAAAEo"]
[Sun Mar 22 00:56:31.510330 2026] [:error] [pid 40780:tid 40972] [client 51.68.234.121:49708] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "ab7NvyZDsmYIjKpJe4NB3AAAABg"]
[Sun Mar 22 00:56:33.473607 2026] [:error] [pid 40781:tid 41015] [client 51.68.234.121:47654] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "ab7NwTJQuCgg1YvEGBLZ7gAAAEk"]
[Sun Mar 22 00:56:35.466337 2026] [:error] [pid 40781:tid 41009] [client 51.68.234.121:47658] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "ab7NwzJQuCgg1YvEGBLZ7wAAAEM"]
[Sun Mar 22 00:56:37.506207 2026] [:error] [pid 40780:tid 40957] [client 51.68.234.121:47666] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "ab7NxSZDsmYIjKpJe4NB6AAAAAo"]
[Sun Mar 22 00:56:39.463455 2026] [:error] [pid 41061:tid 41080] [client 51.68.234.121:47674] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "ab7Nx6ksT6woy-Od6iGtkwAAANA"]
[Sun Mar 22 02:13:52.768282 2026] [:error] [pid 41061:tid 41068] [client 43.166.253.94:49386] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab7f4KksT6woy-Od6iHmNAAAAMQ"]
[Sun Mar 22 06:02:24.138438 2026] [:error] [pid 51362:tid 51411] [client 100.18.32.160:53688] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "ab8VcMOwPm3DXzTDjUey6gAAAEo"]
[Sun Mar 22 06:02:26.069422 2026] [:error] [pid 51362:tid 51417] [client 100.18.32.160:39884] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "ab8VcsOwPm3DXzTDjUey8gAAAFA"]
[Sun Mar 22 06:02:27.961989 2026] [:error] [pid 51363:tid 51433] [client 100.18.32.160:39888] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ab8Vc1wa9x6OCTRkhl1TMQAAAIU"]
[Sun Mar 22 06:02:29.931133 2026] [:error] [pid 51363:tid 51434] [client 100.18.32.160:39904] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "ab8VdVwa9x6OCTRkhl1TNgAAAIY"]
[Sun Mar 22 06:02:31.801767 2026] [:error] [pid 51361:tid 51378] [client 100.18.32.160:39920] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab8VdxXYUsdvKC9YWpUxxQAAAAc"]
[Sun Mar 22 06:02:33.531065 2026] [:error] [pid 51363:tid 51442] [client 100.18.32.160:39924] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "ab8VeVwa9x6OCTRkhl1TQwAAAI0"]
[Sun Mar 22 06:02:35.400132 2026] [:error] [pid 51362:tid 51421] [client 100.18.32.160:58208] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ab8Ve8OwPm3DXzTDjUezBwAAAFQ"]
[Sun Mar 22 06:02:37.275524 2026] [:error] [pid 51361:tid 51378] [client 100.18.32.160:58212] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "ab8VfRXYUsdvKC9YWpUxzQAAAAc"]
[Sun Mar 22 06:02:39.037141 2026] [:error] [pid 51362:tid 51419] [client 100.18.32.160:58222] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "ab8Vf8OwPm3DXzTDjUezDQAAAFI"]
[Sun Mar 22 06:02:40.884190 2026] [:error] [pid 40039:tid 40061] [client 100.18.32.160:58238] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "ab8VgB3aDgUJfBYishn8uQAAARQ"]
[Sun Mar 22 06:02:42.803500 2026] [:error] [pid 51363:tid 51442] [client 100.18.32.160:58254] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "ab8Vglwa9x6OCTRkhl1TUgAAAI0"]
[Sun Mar 22 06:02:44.683005 2026] [:error] [pid 40039:tid 40055] [client 100.18.32.160:58266] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ab8VhB3aDgUJfBYishn8wQAAAQ4"]
[Sun Mar 22 06:02:46.556535 2026] [:error] [pid 51362:tid 51404] [client 100.18.32.160:32916] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "ab8VhsOwPm3DXzTDjUezEwAAAEM"]
[Sun Mar 22 06:02:48.323890 2026] [:error] [pid 40039:tid 40041] [client 100.18.32.160:32922] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ab8ViB3aDgUJfBYishn8yQAAAQA"]
[Sun Mar 22 06:02:50.248390 2026] [:error] [pid 40039:tid 40058] [client 100.18.32.160:32938] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ab8Vih3aDgUJfBYishn80QAAARE"]
[Sun Mar 22 06:02:51.967331 2026] [:error] [pid 51363:tid 51432] [client 100.18.32.160:32946] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ab8Vi1wa9x6OCTRkhl1TXQAAAIQ"]
[Sun Mar 22 06:02:53.920629 2026] [:error] [pid 40039:tid 40063] [client 100.18.32.160:32956] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "ab8VjR3aDgUJfBYishn85AAAARY"]
[Sun Mar 22 06:02:55.792154 2026] [:error] [pid 51362:tid 51401] [client 100.18.32.160:50804] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ab8Vj8OwPm3DXzTDjUezIwAAAEE"]
[Sun Mar 22 06:02:57.530202 2026] [:error] [pid 51468:tid 51496] [client 100.18.32.160:50820] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "ab8VkU2TppSvA8W5CBSXowAAANQ"]
[Sun Mar 22 06:02:59.263275 2026] [:error] [pid 51468:tid 51484] [client 100.18.32.160:50824] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "ab8Vk02TppSvA8W5CBSXsAAAAMg"]
[Sun Mar 22 06:03:01.133532 2026] [:error] [pid 51361:tid 51373] [client 100.18.32.160:50830] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "ab8VlRXYUsdvKC9YWpUx8QAAAAI"]
[Sun Mar 22 06:03:03.052170 2026] [:error] [pid 51363:tid 51452] [client 100.18.32.160:50842] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ab8Vl1wa9x6OCTRkhl1TcwAAAJY"]
[Sun Mar 22 06:03:04.347457 2026] [:error] [pid 51468:tid 51492] [client 100.18.32.160:50850] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab8VmE2TppSvA8W5CBSXuwAAANA"]
[Sun Mar 22 06:03:07.955511 2026] [:error] [pid 51362:tid 51400] [client 100.18.32.160:42218] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab8Vm8OwPm3DXzTDjUezNAAAAEA"]
[Sun Mar 22 08:44:18.838602 2026] [:error] [pid 51468:tid 51493] [client 146.19.215.244:60836] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "ab87Yk2TppSvA8W5CBTjRgAAANE"]
[Sun Mar 22 08:44:20.764750 2026] [:error] [pid 40039:tid 40053] [client 146.19.215.244:39694] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab87ZB3aDgUJfBYishlq9gAAAQw"]
[Sun Mar 22 08:44:22.788765 2026] [:error] [pid 51468:tid 51485] [client 146.19.215.244:44452] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "ab87Zk2TppSvA8W5CBTjTAAAAMk"]
[Sun Mar 22 08:44:24.763486 2026] [:error] [pid 51361:tid 51375] [client 146.19.215.244:44466] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ab87aBXYUsdvKC9YWpVQRAAAAAQ"]
[Sun Mar 22 08:44:26.741424 2026] [:error] [pid 51468:tid 51491] [client 146.19.215.244:44472] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ab87ak2TppSvA8W5CBTjXwAAAM8"]
[Sun Mar 22 08:44:28.585647 2026] [:error] [pid 40039:tid 40050] [client 146.19.215.244:44480] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab87bB3aDgUJfBYishlrEgAAAQk"]
[Sun Mar 22 08:44:30.558870 2026] [:error] [pid 51363:tid 51449] [client 146.19.215.244:44496] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab87blwa9x6OCTRkhl2GJwAAAJM"]
[Sun Mar 22 08:44:32.386515 2026] [:error] [pid 51363:tid 51452] [client 146.19.215.244:44504] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "ab87cFwa9x6OCTRkhl2GLwAAAJY"]
[Sun Mar 22 08:44:34.371430 2026] [:error] [pid 51362:tid 51401] [client 146.19.215.244:56846] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "ab87csOwPm3DXzTDjUfbmQAAAEE"]
[Sun Mar 22 08:44:36.355564 2026] [:error] [pid 51362:tid 51423] [client 146.19.215.244:56856] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "ab87dMOwPm3DXzTDjUfbnQAAAFY"]
[Sun Mar 22 08:44:38.333627 2026] [:error] [pid 51362:tid 51415] [client 146.19.215.244:56866] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "ab87dsOwPm3DXzTDjUfbpQAAAE4"]
[Sun Mar 22 08:44:40.312099 2026] [:error] [pid 51361:tid 51373] [client 146.19.215.244:56878] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "ab87eBXYUsdvKC9YWpVQUAAAAAI"]
[Sun Mar 22 08:44:42.302426 2026] [:error] [pid 40039:tid 40055] [client 146.19.215.244:56882] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab87eh3aDgUJfBYishlrKAAAAQ4"]
[Sun Mar 22 08:44:44.306136 2026] [:error] [pid 51468:tid 51487] [client 146.19.215.244:38866] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "ab87fE2TppSvA8W5CBTjkgAAAMs"]
[Sun Mar 22 08:44:46.282754 2026] [:error] [pid 51363:tid 51436] [client 146.19.215.244:38874] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "ab87flwa9x6OCTRkhl2GYAAAAIc"]
[Sun Mar 22 08:44:48.261276 2026] [:error] [pid 51468:tid 51478] [client 146.19.215.244:38880] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "ab87gE2TppSvA8W5CBTjlwAAAMI"]
[Sun Mar 22 08:44:50.233269 2026] [:error] [pid 51363:tid 51440] [client 146.19.215.244:38886] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "ab87glwa9x6OCTRkhl2GagAAAIs"]
[Sun Mar 22 08:44:53.773831 2026] [:error] [pid 51468:tid 51498] [client 146.19.215.244:44304] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab87hU2TppSvA8W5CBTjpwAAANY"]
[Sun Mar 22 08:44:57.556928 2026] [:error] [pid 51362:tid 51419] [client 146.19.215.244:44308] [client 146.19.215.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab87icOwPm3DXzTDjUfb0AAAAFI"]
[Sun Mar 22 11:06:39.517939 2026] [:error] [pid 51363:tid 51453] [client 43.135.133.241:43758] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "ab9cv1wa9x6OCTRkhl2x_AAAAJc"]
[Sun Mar 22 12:20:27.589140 2026] [:error] [pid 51363:tid 51443] [client 52.138.39.105:56108] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "ab9uC1wa9x6OCTRkhl3MFgAAAI4"]
[Sun Mar 22 12:20:28.431133 2026] [:error] [pid 40039:tid 40054] [client 52.138.39.105:23222] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "ab9uDB3aDgUJfBYishn9xwAAAQ0"]
[Sun Mar 22 12:20:29.278164 2026] [:error] [pid 40039:tid 40044] [client 52.138.39.105:22529] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "ab9uDR3aDgUJfBYishn9zAAAAQM"]
[Sun Mar 22 12:20:30.106843 2026] [:error] [pid 51363:tid 51451] [client 52.138.39.105:56110] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "ab9uDlwa9x6OCTRkhl3MGwAAAJU"]
[Sun Mar 22 13:12:33.958413 2026] [:error] [pid 40039:tid 40042] [client 51.83.5.74:49312] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab96QR3aDgUJfBYishkiugAAAQE"]
[Sun Mar 22 13:12:35.927537 2026] [:error] [pid 51468:tid 51495] [client 51.83.5.74:53622] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "ab96Q02TppSvA8W5CBRisgAAANM"]
[Sun Mar 22 13:12:38.056578 2026] [:error] [pid 51363:tid 51433] [client 51.83.5.74:53638] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab96Rlwa9x6OCTRkhl3edgAAAIU"]
[Sun Mar 22 13:12:40.105401 2026] [:error] [pid 40039:tid 40063] [client 51.83.5.74:53640] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "ab96SB3aDgUJfBYishki0wAAARY"]
[Sun Mar 22 13:12:42.151454 2026] [:error] [pid 40039:tid 40052] [client 51.83.5.74:53644] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "ab96Sh3aDgUJfBYishki3gAAAQs"]
[Sun Mar 22 13:12:44.240792 2026] [:error] [pid 40039:tid 40053] [client 51.83.5.74:47964] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab96TB3aDgUJfBYishki7wAAAQw"]
[Sun Mar 22 13:12:46.278409 2026] [:error] [pid 51468:tid 51494] [client 51.83.5.74:47972] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab96Tk2TppSvA8W5CBRiywAAANI"]
[Sun Mar 22 13:12:48.311555 2026] [:error] [pid 40039:tid 40051] [client 51.83.5.74:47976] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "ab96UB3aDgUJfBYishki_AAAAQo"]
[Sun Mar 22 13:12:50.249148 2026] [:error] [pid 40039:tid 40047] [client 51.83.5.74:47980] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "ab96Uh3aDgUJfBYishkjBQAAAQY"]
[Sun Mar 22 13:12:52.291887 2026] [:error] [pid 51468:tid 51476] [client 51.83.5.74:47994] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab96VE2TppSvA8W5CBRi1gAAAMA"]
[Sun Mar 22 13:12:54.166198 2026] [:error] [pid 51363:tid 51446] [client 51.83.5.74:47996] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "ab96Vlwa9x6OCTRkhl3eigAAAJA"]
[Sun Mar 22 13:12:56.866619 2026] [:error] [pid 40039:tid 40064] [client 51.83.5.74:46084] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab96WB3aDgUJfBYishkjDwAAARc"]
[Sun Mar 22 13:13:00.667895 2026] [:error] [pid 51362:tid 51417] [client 51.83.5.74:46098] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "ab96XMOwPm3DXzTDjUcdhAAAAFA"]
[Sun Mar 22 13:26:03.064004 2026] [:error] [pid 40039:tid 40058] [client 83.191.97.251:64444] [client 83.191.97.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.191.97.251, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "ab99ax3aDgUJfBYishksPQAAARE"]
[Sun Mar 22 13:26:03.073355 2026] [:error] [pid 40039:tid 40058] [client 83.191.97.251:64444] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 14:31:01.349034 2026] [:error] [pid 51361:tid 51396] [client 111.172.249.49:40287] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "ab-MpRXYUsdvKC9YWpWWrQAAABc"]
[Sun Mar 22 15:04:17.848795 2026] [:error] [pid 40039:tid 40050] [client 91.137.27.140:53815] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "ab-UcR3aDgUJfBYishlQpQAAAQk"]
[Sun Mar 22 15:04:19.834879 2026] [:error] [pid 40039:tid 40042] [client 91.137.27.140:21468] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "ab-Ucx3aDgUJfBYishlQqAAAAQE"]
[Sun Mar 22 15:04:21.749390 2026] [:error] [pid 40039:tid 40057] [client 91.137.27.140:7263] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "ab-UdR3aDgUJfBYishlQqwAAARA"]
[Sun Mar 22 17:50:51.820850 2026] [:error] [pid 51362:tid 51418] [client 43.130.26.3:39740] [client 43.130.26.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab-7e8OwPm3DXzTDjUdwMQAAAFE"]
[Sun Mar 22 17:57:33.809011 2026] [:error] [pid 51362:tid 51412] [client 43.135.145.77:41106] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "ab-9DcOwPm3DXzTDjUd18wAAAEs"]
[Sun Mar 22 18:41:46.567220 2026] [:error] [pid 51363:tid 51434] [client 95.217.109.26:14194] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab_Halwa9x6OCTRkhl15QAAAAIY"]
[Sun Mar 22 18:41:48.451693 2026] [:error] [pid 30166:tid 30174] [client 95.217.109.26:14202] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab_HbLm4_26jKMD0zy3GeQAAAUM"]
[Sun Mar 22 18:41:50.363519 2026] [:error] [pid 51361:tid 51380] [client 95.217.109.26:14206] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "ab_HbhXYUsdvKC9YWpXPigAAAAk"]
[Sun Mar 22 18:41:52.392768 2026] [:error] [pid 30166:tid 30186] [client 95.217.109.26:14218] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "ab_HcLm4_26jKMD0zy3GhQAAAUs"]
[Sun Mar 22 18:41:54.484133 2026] [:error] [pid 40039:tid 40060] [client 95.217.109.26:14224] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "ab_Hch3aDgUJfBYishmeYwAAARM"]
[Sun Mar 22 18:41:56.512435 2026] [:error] [pid 51362:tid 51404] [client 95.217.109.26:22824] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "ab_HdMOwPm3DXzTDjUeT_QAAAEM"]
[Sun Mar 22 18:41:58.384039 2026] [:error] [pid 51362:tid 51406] [client 95.217.109.26:22828] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "ab_HdsOwPm3DXzTDjUeUAwAAAEU"]
[Sun Mar 22 18:42:00.791869 2026] [:error] [pid 51362:tid 51421] [client 95.217.109.26:22844] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "ab_HeMOwPm3DXzTDjUeUBgAAAFQ"]
[Sun Mar 22 18:42:02.723881 2026] [:error] [pid 30166:tid 30190] [client 95.217.109.26:22848] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "ab_Herm4_26jKMD0zy3GkwAAAU8"]
[Sun Mar 22 21:55:08.558227 2026] [:error] [pid 51468:tid 51499] [client 111.172.249.49:36964] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "ab_0vE2TppSvA8W5CBSDwQAAANc"]
[Sun Mar 22 22:06:11.133578 2026] [:error] [pid 30166:tid 30171] [client 175.178.198.9:37172] [client 175.178.198.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/public/plugins/Ueditor/dialogs/attachment/images/alignicon.gif"] [unique_id "ab_3U7m4_26jKMD0zy0n8wAAAUE"], referer: http://www.pumpbooking.com/public/plugins/Ueditor/dialogs/attachment/images/alignicon.gif
[Sun Mar 22 23:32:32.118842 2026] [:error] [pid 30166:tid 30199] [client 43.159.152.4:56900] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acALkLm4_26jKMD0zy0-9wAAAVY"]
[Sun Mar 22 23:34:25.036150 2026] [:error] [pid 51468:tid 51499] [client 147.135.214.239:41908] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acAMAU2TppSvA8W5CBS1uwAAANc"]
[Sun Mar 22 23:34:27.401318 2026] [:error] [pid 51468:tid 51478] [client 147.135.214.239:35844] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acAMA02TppSvA8W5CBS1wAAAAMI"]
[Sun Mar 22 23:34:29.398584 2026] [:error] [pid 51362:tid 51421] [client 147.135.214.239:35856] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acAMBcOwPm3DXzTDjUf4dgAAAFQ"]
[Sun Mar 22 23:34:31.458631 2026] [:error] [pid 51468:tid 51478] [client 147.135.214.239:35860] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acAMB02TppSvA8W5CBS1zAAAAMI"]
[Sun Mar 22 23:34:33.498914 2026] [:error] [pid 30166:tid 30177] [client 147.135.214.239:35876] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acAMCbm4_26jKMD0zy0_eQAAAUY"]
[Sun Mar 22 23:34:35.486223 2026] [:error] [pid 40039:tid 40048] [client 147.135.214.239:60340] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acAMCx3aDgUJfBYishnh5AAAAQc"]
[Sun Mar 22 23:34:37.744136 2026] [:error] [pid 30166:tid 30197] [client 147.135.214.239:60350] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acAMDbm4_26jKMD0zy0_gwAAAVQ"]
[Sun Mar 22 23:34:39.764400 2026] [:error] [pid 30166:tid 30188] [client 147.135.214.239:60364] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acAMD7m4_26jKMD0zy0_iwAAAU0"]
[Sun Mar 22 23:34:41.779724 2026] [:error] [pid 40039:tid 40053] [client 147.135.214.239:60368] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acAMER3aDgUJfBYishnh9AAAAQw"]
[Sun Mar 22 23:34:43.654977 2026] [:error] [pid 51361:tid 51390] [client 147.135.214.239:60378] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acAMExXYUsdvKC9YWpU-RgAAABI"]
[Sun Mar 22 23:34:45.627940 2026] [:error] [pid 51363:tid 51428] [client 147.135.214.239:45248] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acAMFVwa9x6OCTRkhl3Z-wAAAIA"]
[Sun Mar 22 23:34:47.543943 2026] [:error] [pid 30166:tid 30197] [client 147.135.214.239:45250] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acAMF7m4_26jKMD0zy0_nwAAAVQ"]
[Sun Mar 22 23:34:49.545733 2026] [:error] [pid 51363:tid 51451] [client 147.135.214.239:45264] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acAMGVwa9x6OCTRkhl3aAAAAAJU"]
[Sun Mar 22 23:34:51.491821 2026] [:error] [pid 40039:tid 40058] [client 147.135.214.239:45278] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acAMGx3aDgUJfBYishnh-gAAARE"]
[Sun Mar 22 23:34:53.424860 2026] [:error] [pid 51468:tid 51490] [client 147.135.214.239:45288] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acAMHU2TppSvA8W5CBS15gAAAM4"]
[Sun Mar 22 23:34:55.526202 2026] [:error] [pid 51362:tid 51404] [client 147.135.214.239:52980] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acAMH8OwPm3DXzTDjUf4igAAAEM"]
[Sun Mar 22 23:34:57.424303 2026] [:error] [pid 40039:tid 40042] [client 147.135.214.239:52996] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acAMIR3aDgUJfBYishniAAAAAQE"]
[Sun Mar 22 23:34:59.343433 2026] [:error] [pid 51361:tid 51381] [client 147.135.214.239:53002] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acAMIxXYUsdvKC9YWpU-VwAAAAo"]
[Sun Mar 22 23:35:01.290398 2026] [:error] [pid 51468:tid 51493] [client 147.135.214.239:53014] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acAMJU2TppSvA8W5CBS17wAAANE"]
[Sun Mar 22 23:35:03.104931 2026] [:error] [pid 51468:tid 51484] [client 147.135.214.239:53020] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acAMJ02TppSvA8W5CBS19gAAAMg"]
[Sun Mar 22 23:35:05.025643 2026] [:error] [pid 51468:tid 51495] [client 147.135.214.239:53022] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acAMKU2TppSvA8W5CBS1-gAAANM"]
[Sun Mar 22 23:35:06.944332 2026] [:error] [pid 40039:tid 40049] [client 147.135.214.239:35120] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acAMKh3aDgUJfBYishniDgAAAQg"]
[Sun Mar 22 23:35:09.095853 2026] [:error] [pid 51468:tid 51492] [client 147.135.214.239:35132] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acAMLU2TppSvA8W5CBS1_wAAANA"]
[Sun Mar 22 23:35:12.754509 2026] [:error] [pid 51361:tid 51376] [client 147.135.214.239:35136] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acAMMBXYUsdvKC9YWpU-bgAAAAU"]
[Sun Mar 22 23:41:22.801942 2026] [:error] [pid 51468:tid 51478] [client 101.32.15.141:42506] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acANok2TppSvA8W5CBS7zgAAAMI"]
[Mon Mar 23 02:03:30.233129 2026] [:error] [pid 20856:tid 20937] [client 217.182.195.179:57756] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acAu8sxFtXFVNE-X2-KcXgAAANI"]
[Mon Mar 23 02:03:32.287162 2026] [:error] [pid 20856:tid 20921] [client 217.182.195.179:46546] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acAu9MxFtXFVNE-X2-KcYQAAAMI"]
[Mon Mar 23 02:03:34.210425 2026] [:error] [pid 20856:tid 20940] [client 217.182.195.179:46548] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acAu9sxFtXFVNE-X2-KcZAAAANU"]
[Mon Mar 23 02:03:36.202422 2026] [:error] [pid 27776:tid 27867] [client 217.182.195.179:52738] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acAu-I3Eaq7IZ5L-4XVXxQAAARQ"]
[Mon Mar 23 02:03:38.339372 2026] [:error] [pid 27776:tid 27846] [client 217.182.195.179:52754] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acAu-o3Eaq7IZ5L-4XVXygAAAQA"]
[Mon Mar 23 02:03:40.321713 2026] [:error] [pid 20574:tid 20599] [client 217.182.195.179:52758] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acAu_NdMXEnEZrwyzJkMQgAAAAo"]
[Mon Mar 23 02:03:42.348625 2026] [:error] [pid 20587:tid 20665] [client 217.182.195.179:52766] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acAu_oByf8r3QAk4VXPxWAAAAJY"]
[Mon Mar 23 02:03:44.374790 2026] [:error] [pid 27776:tid 27861] [client 217.182.195.179:52774] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acAvAI3Eaq7IZ5L-4XVX2wAAAQ4"]
[Mon Mar 23 02:03:46.384355 2026] [:error] [pid 20584:tid 20634] [client 217.182.195.179:42770] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acAvAiWzr-bD_t6AP_TNdAAAAFI"]
[Mon Mar 23 02:03:48.369597 2026] [:error] [pid 20574:tid 20590] [client 217.182.195.179:42786] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acAvBNdMXEnEZrwyzJkMRQAAAAE"]
[Mon Mar 23 02:03:50.276682 2026] [:error] [pid 20587:tid 20652] [client 217.182.195.179:42790] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acAvBoByf8r3QAk4VXPxXgAAAIk"]
[Mon Mar 23 02:03:52.328735 2026] [:error] [pid 20584:tid 20640] [client 217.182.195.179:42806] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acAvCCWzr-bD_t6AP_TNdQAAAFg"]
[Mon Mar 23 02:03:54.229722 2026] [:error] [pid 20856:tid 20927] [client 217.182.195.179:42814] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acAvCsxFtXFVNE-X2-KchAAAAMg"]
[Mon Mar 23 02:03:56.110493 2026] [:error] [pid 20587:tid 20655] [client 217.182.195.179:36814] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acAvDIByf8r3QAk4VXPxagAAAIw"]
[Mon Mar 23 02:03:58.004041 2026] [:error] [pid 20584:tid 20639] [client 217.182.195.179:36818] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acAvDiWzr-bD_t6AP_TNfgAAAFc"]
[Mon Mar 23 02:03:59.934388 2026] [:error] [pid 20856:tid 20919] [client 217.182.195.179:36822] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acAvD8xFtXFVNE-X2-KcjAAAAMA"]
[Mon Mar 23 02:04:01.991759 2026] [:error] [pid 27776:tid 27867] [client 217.182.195.179:36828] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acAvEY3Eaq7IZ5L-4XVX6wAAARQ"]
[Mon Mar 23 02:04:04.611524 2026] [:error] [pid 20574:tid 20611] [client 217.182.195.179:36836] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acAvFNdMXEnEZrwyzJkMTwAAABY"]
[Mon Mar 23 02:04:08.370901 2026] [:error] [pid 20856:tid 20929] [client 217.182.195.179:45712] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acAvGMxFtXFVNE-X2-KcoAAAAMo"]
[Mon Mar 23 02:54:50.530418 2026] [:error] [pid 20856:tid 20937] [client 24.78.106.29:62978] [client 24.78.106.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.78.106.29, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acA6-sxFtXFVNE-X2-KxlwAAANI"]
[Mon Mar 23 02:54:50.540270 2026] [:error] [pid 20856:tid 20937] [client 24.78.106.29:62978] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 02:55:55.794964 2026] [:error] [pid 20574:tid 20594] [client 179.54.220.76:63681] [client 179.54.220.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.54.220.76, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acA7O9dMXEnEZrwyzJkcIwAAAAU"]
[Mon Mar 23 02:55:55.801141 2026] [:error] [pid 20574:tid 20594] [client 179.54.220.76:63681] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 05:59:52.314273 2026] [:error] [pid 23539:tid 23564] [client 43.135.142.7:42308] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acBmWH7Dh3qWGSpIAZVPdQAAANA"]
[Mon Mar 23 06:30:14.521428 2026] [:error] [pid 23441:tid 23527] [client 217.182.195.176:44738] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acBtdhq7S-oOqSXZEr5hSwAAAJg"]
[Mon Mar 23 06:30:16.604660 2026] [:error] [pid 23439:tid 23467] [client 217.182.195.176:58550] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acBteKZv8XIzUKdgaMdDiwAAABI"]
[Mon Mar 23 06:30:18.537120 2026] [:error] [pid 14573:tid 14575] [client 217.182.195.176:58554] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acBteu-oSmHn3q4_J1HDQAAAAUA"]
[Mon Mar 23 06:30:20.430032 2026] [:error] [pid 57265:tid 57271] [client 217.182.195.176:58566] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acBtfGNLjPJJkhuqCsi_ugAAAQQ"]
[Mon Mar 23 06:30:22.456875 2026] [:error] [pid 57265:tid 57268] [client 217.182.195.176:58568] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acBtfmNLjPJJkhuqCsi_uwAAAQE"]
[Mon Mar 23 06:30:24.500807 2026] [:error] [pid 57265:tid 57288] [client 217.182.195.176:58574] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acBtgGNLjPJJkhuqCsi_vwAAARU"]
[Mon Mar 23 06:30:26.426511 2026] [:error] [pid 57265:tid 57284] [client 217.182.195.176:34024] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acBtgmNLjPJJkhuqCsi_wAAAARE"]
[Mon Mar 23 06:30:28.604847 2026] [:error] [pid 14573:tid 14593] [client 217.182.195.176:34040] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acBthO-oSmHn3q4_J1HDVQAAAVI"]
[Mon Mar 23 06:30:30.556652 2026] [:error] [pid 14573:tid 14588] [client 217.182.195.176:34044] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acBthu-oSmHn3q4_J1HDWAAAAU0"]
[Mon Mar 23 06:30:32.623018 2026] [:error] [pid 14573:tid 14575] [client 217.182.195.176:34060] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acBtiO-oSmHn3q4_J1HDWwAAAUA"]
[Mon Mar 23 06:30:34.570987 2026] [:error] [pid 14573:tid 14599] [client 217.182.195.176:34076] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acBtiu-oSmHn3q4_J1HDXgAAAVg"]
[Mon Mar 23 06:30:36.522924 2026] [:error] [pid 23539:tid 23567] [client 217.182.195.176:34510] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acBtjH7Dh3qWGSpIAZVaQAAAANM"]
[Mon Mar 23 06:30:38.609831 2026] [:error] [pid 23539:tid 23554] [client 217.182.195.176:34526] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acBtjn7Dh3qWGSpIAZVaRgAAAMY"]
[Mon Mar 23 06:30:40.535426 2026] [:error] [pid 23539:tid 23561] [client 217.182.195.176:34538] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acBtkH7Dh3qWGSpIAZVaSgAAAM0"]
[Mon Mar 23 06:30:42.472288 2026] [:error] [pid 57265:tid 57291] [client 217.182.195.176:34550] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acBtkmNLjPJJkhuqCsi_xwAAARg"]
[Mon Mar 23 06:30:44.461802 2026] [:error] [pid 23539:tid 23572] [client 217.182.195.176:34566] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acBtlH7Dh3qWGSpIAZVaUQAAANg"]
[Mon Mar 23 06:30:46.423912 2026] [:error] [pid 23441:tid 23512] [client 217.182.195.176:37766] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acBtlhq7S-oOqSXZEr5hfQAAAIk"]
[Mon Mar 23 06:30:48.549542 2026] [:error] [pid 23539:tid 23555] [client 217.182.195.176:37778] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acBtmH7Dh3qWGSpIAZVaVgAAAMc"]
[Mon Mar 23 06:30:52.841571 2026] [:error] [pid 14573:tid 14583] [client 217.182.195.176:37784] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acBtnO-oSmHn3q4_J1HDnwAAAUg"]
[Mon Mar 23 06:30:56.636775 2026] [:error] [pid 57265:tid 57287] [client 217.182.195.176:44008] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acBtoGNLjPJJkhuqCsi_0QAAARQ"]
[Mon Mar 23 07:51:10.841934 2026] [:error] [pid 23539:tid 23551] [client 147.135.214.166:45622] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acCAbn7Dh3qWGSpIAZWFqAAAAMM"]
[Mon Mar 23 07:51:12.754074 2026] [:error] [pid 14573:tid 14582] [client 147.135.214.166:32840] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acCAcO-oSmHn3q4_J1HqCQAAAUc"]
[Mon Mar 23 07:51:14.739077 2026] [:error] [pid 23539:tid 23555] [client 147.135.214.166:32848] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acCAcn7Dh3qWGSpIAZWFqgAAAMc"]
[Mon Mar 23 07:51:16.965363 2026] [:error] [pid 35165:tid 35182] [client 147.135.214.166:59712] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acCAdM6udpN6Esk7JKvPAwAAAY4"]
[Mon Mar 23 07:51:18.919700 2026] [:error] [pid 23441:tid 23525] [client 147.135.214.166:59722] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acCAdhq7S-oOqSXZEr5uJgAAAJY"]
[Mon Mar 23 07:51:20.884425 2026] [:error] [pid 35165:tid 35190] [client 147.135.214.166:59736] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acCAeM6udpN6Esk7JKvPCwAAAZY"]
[Mon Mar 23 07:51:22.771836 2026] [:error] [pid 23441:tid 23521] [client 147.135.214.166:59752] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acCAehq7S-oOqSXZEr5uKgAAAJI"]
[Mon Mar 23 07:51:25.052048 2026] [:error] [pid 14573:tid 14597] [client 147.135.214.166:59764] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acCAfe-oSmHn3q4_J1HqLQAAAVY"]
[Mon Mar 23 07:51:27.109338 2026] [:error] [pid 23439:tid 23460] [client 147.135.214.166:57792] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acCAf6Zv8XIzUKdgaMdLewAAAAs"]
[Mon Mar 23 07:51:28.986180 2026] [:error] [pid 23441:tid 23527] [client 147.135.214.166:57800] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acCAgBq7S-oOqSXZEr5uNgAAAJg"]
[Mon Mar 23 07:51:30.900152 2026] [:error] [pid 23539:tid 23567] [client 147.135.214.166:57812] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acCAgn7Dh3qWGSpIAZWFugAAANM"]
[Mon Mar 23 07:51:33.279119 2026] [:error] [pid 23539:tid 23555] [client 147.135.214.166:57818] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acCAhX7Dh3qWGSpIAZWFvwAAAMc"]
[Mon Mar 23 07:51:37.181687 2026] [:error] [pid 23440:tid 23487] [client 147.135.214.166:59016] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acCAiT49_8n8h_ttcUreTwAAAEs"]
[Mon Mar 23 12:18:05.047189 2026] [:error] [pid 23441:tid 23514] [client 43.159.140.236:37886] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acC-_Rq7S-oOqSXZEr6c1gAAAIs"]
[Mon Mar 23 12:52:53.545300 2026] [:error] [pid 57265:tid 57282] [client 81.167.26.57:39752] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acDHJWNLjPJJkhuqCsh6MwAAAQ8"]
[Mon Mar 23 12:52:55.555717 2026] [:error] [pid 23440:tid 23480] [client 81.167.26.57:38870] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acDHJz49_8n8h_ttcUoGhQAAAEQ"]
[Mon Mar 23 12:52:57.743544 2026] [:error] [pid 14573:tid 14577] [client 81.167.26.57:2609] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acDHKe-oSmHn3q4_J1FIYgAAAUI"]
[Mon Mar 23 12:52:59.823733 2026] [:error] [pid 14573:tid 14586] [client 81.167.26.57:7721] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acDHK--oSmHn3q4_J1FIaQAAAUs"]
[Mon Mar 23 12:53:01.769994 2026] [:error] [pid 35165:tid 35173] [client 81.167.26.57:32379] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acDHLc6udpN6Esk7JKtGDQAAAYU"]
[Mon Mar 23 12:53:03.789434 2026] [:error] [pid 23441:tid 23527] [client 81.167.26.57:60360] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acDHLxq7S-oOqSXZEr6h-QAAAJg"]
[Mon Mar 23 12:53:05.760309 2026] [:error] [pid 57265:tid 57271] [client 81.167.26.57:12835] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acDHMWNLjPJJkhuqCsh6RAAAAQQ"]
[Mon Mar 23 12:53:07.801145 2026] [:error] [pid 23441:tid 23511] [client 81.167.26.57:52062] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acDHMxq7S-oOqSXZEr6iAAAAAIg"]
[Mon Mar 23 12:53:09.915780 2026] [:error] [pid 35165:tid 35172] [client 81.167.26.57:13476] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acDHNc6udpN6Esk7JKtGGgAAAYQ"]
[Mon Mar 23 16:54:19.613480 2026] [:error] [pid 23441:tid 23507] [client 79.137.64.41:40790] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acD_uxq7S-oOqSXZEr7LJwAAAIQ"]
[Mon Mar 23 16:54:21.424815 2026] [:error] [pid 57265:tid 57289] [client 79.137.64.41:48906] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acD_vWNLjPJJkhuqCsgBxAAAARY"]
[Mon Mar 23 16:54:23.331538 2026] [:error] [pid 23439:tid 23449] [client 79.137.64.41:36756] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acD_v6Zv8XIzUKdgaMeGUwAAAAA"]
[Mon Mar 23 16:54:25.234813 2026] [:error] [pid 14573:tid 14578] [client 79.137.64.41:36758] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acD_we-oSmHn3q4_J1GZCAAAAUM"]
[Mon Mar 23 16:54:27.129341 2026] [:error] [pid 35165:tid 35183] [client 79.137.64.41:36768] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acD_w86udpN6Esk7JKuZ-wAAAY8"]
[Mon Mar 23 16:54:29.051039 2026] [:error] [pid 14573:tid 14581] [client 79.137.64.41:36780] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acD_xe-oSmHn3q4_J1GZGAAAAUY"]
[Mon Mar 23 16:54:30.958785 2026] [:error] [pid 14573:tid 14580] [client 79.137.64.41:36796] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acD_xu-oSmHn3q4_J1GZHQAAAUU"]
[Mon Mar 23 16:54:32.850504 2026] [:error] [pid 23441:tid 23503] [client 79.137.64.41:36808] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acD_yBq7S-oOqSXZEr7LMgAAAIA"]
[Mon Mar 23 16:54:34.894148 2026] [:error] [pid 57265:tid 57272] [client 79.137.64.41:33090] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acD_ymNLjPJJkhuqCsgB7wAAAQU"]
[Mon Mar 23 16:54:36.939827 2026] [:error] [pid 23441:tid 23506] [client 79.137.64.41:33106] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acD_zBq7S-oOqSXZEr7LMwAAAIM"]
[Mon Mar 23 16:54:38.973568 2026] [:error] [pid 57265:tid 57278] [client 79.137.64.41:33112] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acD_zmNLjPJJkhuqCsgCAgAAAQs"]
[Mon Mar 23 16:54:40.856623 2026] [:error] [pid 14573:tid 14578] [client 79.137.64.41:33116] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acD_0O-oSmHn3q4_J1GZZwAAAUM"]
[Mon Mar 23 16:54:42.891407 2026] [:error] [pid 14573:tid 14583] [client 79.137.64.41:33130] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acD_0u-oSmHn3q4_J1GZcwAAAUg"]
[Mon Mar 23 16:54:44.765942 2026] [:error] [pid 57265:tid 57285] [client 79.137.64.41:40154] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acD_1GNLjPJJkhuqCsgCDgAAARI"]
[Mon Mar 23 16:54:46.812969 2026] [:error] [pid 57265:tid 57277] [client 79.137.64.41:40156] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acD_1mNLjPJJkhuqCsgCFgAAAQo"]
[Mon Mar 23 16:54:48.845732 2026] [:error] [pid 23441:tid 23519] [client 79.137.64.41:40162] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acD_2Bq7S-oOqSXZEr7LPAAAAJA"]
[Mon Mar 23 16:54:50.912158 2026] [:error] [pid 23539:tid 23549] [client 79.137.64.41:40172] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acD_2n7Dh3qWGSpIAZUHTgAAAME"]
[Mon Mar 23 16:54:52.780875 2026] [:error] [pid 14573:tid 14581] [client 79.137.64.41:40188] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acD_3O-oSmHn3q4_J1GZiQAAAUY"]
[Mon Mar 23 16:54:54.815701 2026] [:error] [pid 57265:tid 57291] [client 79.137.64.41:44160] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acD_3mNLjPJJkhuqCsgCNQAAARg"]
[Mon Mar 23 16:54:56.679825 2026] [:error] [pid 57265:tid 57268] [client 79.137.64.41:44176] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acD_4GNLjPJJkhuqCsgCQgAAAQE"]
[Mon Mar 23 16:54:58.710758 2026] [:error] [pid 14573:tid 14576] [client 79.137.64.41:44182] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acD_4u-oSmHn3q4_J1GZlgAAAUE"]
[Mon Mar 23 16:55:00.569467 2026] [:error] [pid 23441:tid 23527] [client 79.137.64.41:44194] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acD_5Bq7S-oOqSXZEr7LRwAAAJg"]
[Mon Mar 23 16:55:02.379707 2026] [:error] [pid 23441:tid 23519] [client 79.137.64.41:44202] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acD_5hq7S-oOqSXZEr7LSAAAAJA"]
[Mon Mar 23 16:55:06.020576 2026] [:error] [pid 14573:tid 14586] [client 79.137.64.41:41446] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acD_6u-oSmHn3q4_J1GZtwAAAUs"]
[Mon Mar 23 18:10:54.856554 2026] [:error] [pid 14573:tid 14581] [client 43.153.96.79:39120] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acERru-oSmHn3q4_J1G-EgAAAUY"]
[Mon Mar 23 18:17:12.813945 2026] [:error] [pid 23439:tid 23458] [client 43.135.133.194:60904] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acETKKZv8XIzUKdgaMeP1wAAAAk"]
[Mon Mar 23 19:06:05.140299 2026] [:error] [pid 35165:tid 35181] [client 120.71.59.24:38201] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acEenc6udpN6Esk7JKvF9wAAAY0"]
[Mon Mar 23 19:52:15.859206 2026] [:error] [pid 35165:tid 35189] [client 181.189.41.160:54786] [client 181.189.41.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.189.41.160, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acEpb86udpN6Esk7JKvTxwAAAZU"]
[Mon Mar 23 19:52:15.868467 2026] [:error] [pid 35165:tid 35189] [client 181.189.41.160:54786] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 20:06:20.801198 2026] [:error] [pid 14573:tid 14580] [client 178.151.245.162:52910] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acEsvO-oSmHn3q4_J1HxIQAAAUU"]
[Mon Mar 23 20:06:22.662366 2026] [:error] [pid 57265:tid 57274] [client 178.151.245.162:38818] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acEsvmNLjPJJkhuqCsh40wAAAQc"]
[Mon Mar 23 20:06:24.685434 2026] [:error] [pid 57265:tid 57270] [client 178.151.245.162:38830] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acEswGNLjPJJkhuqCsh43QAAAQM"]
[Mon Mar 23 20:06:26.686969 2026] [:error] [pid 57265:tid 57289] [client 178.151.245.162:38832] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acEswmNLjPJJkhuqCsh45QAAARY"]
[Mon Mar 23 20:06:28.683482 2026] [:error] [pid 35165:tid 35189] [client 178.151.245.162:38842] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acEsxM6udpN6Esk7JKvXcgAAAZU"]
[Mon Mar 23 20:06:30.688503 2026] [:error] [pid 14573:tid 14575] [client 178.151.245.162:42378] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acEsxu-oSmHn3q4_J1HxLwAAAUA"]
[Mon Mar 23 20:06:32.700953 2026] [:error] [pid 23441:tid 23509] [client 178.151.245.162:42390] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acEsyBq7S-oOqSXZEr7vBAAAAIY"]
[Mon Mar 23 20:06:34.690854 2026] [:error] [pid 14573:tid 14585] [client 178.151.245.162:42406] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acEsyu-oSmHn3q4_J1HxNgAAAUo"]
[Mon Mar 23 20:06:36.696536 2026] [:error] [pid 57265:tid 57280] [client 178.151.245.162:42422] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acEszGNLjPJJkhuqCsh5DQAAAQ0"]
[Mon Mar 23 20:06:38.690412 2026] [:error] [pid 35165:tid 35169] [client 178.151.245.162:42436] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acEszs6udpN6Esk7JKvXhwAAAYE"]
[Mon Mar 23 20:06:40.574674 2026] [:error] [pid 57265:tid 57270] [client 178.151.245.162:45302] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acEs0GNLjPJJkhuqCsh5GQAAAQM"]
[Mon Mar 23 20:06:42.576572 2026] [:error] [pid 23441:tid 23508] [client 178.151.245.162:45310] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acEs0hq7S-oOqSXZEr7vDgAAAIU"]
[Mon Mar 23 20:06:44.616037 2026] [:error] [pid 23439:tid 23469] [client 178.151.245.162:45320] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acEs1KZv8XIzUKdgaMecuQAAABQ"]
[Mon Mar 23 20:06:46.592615 2026] [:error] [pid 35165:tid 35168] [client 178.151.245.162:45336] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acEs1s6udpN6Esk7JKvXmwAAAYA"]
[Mon Mar 23 20:06:48.584157 2026] [:error] [pid 14573:tid 14583] [client 178.151.245.162:45350] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acEs2O-oSmHn3q4_J1HxUQAAAUg"]
[Mon Mar 23 20:06:50.569889 2026] [:error] [pid 57265:tid 57290] [client 178.151.245.162:35232] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acEs2mNLjPJJkhuqCsh5MAAAARc"]
[Mon Mar 23 20:06:52.604678 2026] [:error] [pid 57265:tid 57270] [client 178.151.245.162:35240] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acEs3GNLjPJJkhuqCsh5NwAAAQM"]
[Mon Mar 23 20:06:57.166423 2026] [:error] [pid 14573:tid 14580] [client 178.151.245.162:35250] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acEs4e-oSmHn3q4_J1HxaAAAAUU"]
[Mon Mar 23 20:07:00.978177 2026] [:error] [pid 35165:tid 35183] [client 178.151.245.162:49958] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acEs5M6udpN6Esk7JKvXuAAAAY8"]
[Mon Mar 23 20:21:03.776513 2026] [:error] [pid 14573:tid 14587] [client 185.82.73.92:47180] [client 185.82.73.92] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.pumpbooking.com|F|2"] [data "TX:0=audio/mpeg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acEwL--oSmHn3q4_J1H3FgAAAUw"]
[Mon Mar 23 21:48:30.545603 2026] [:error] [pid 38178:tid 38255] [client 160.250.44.50:49232] [client 160.250.44.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.250.44.50, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acFErg0axWfXsVvR9udGmQAAAI0"]
[Mon Mar 23 21:48:30.550827 2026] [:error] [pid 38178:tid 38255] [client 160.250.44.50:49232] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 22:57:46.489453 2026] [:error] [pid 38176:tid 38211] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Mon Mar 23 22:57:46.701892 2026] [:error] [pid 38176:tid 38190] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Mon Mar 23 22:57:48.158005 2026] [:error] [pid 38176:tid 38190] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Mon Mar 23 22:57:48.367273 2026] [:error] [pid 38176:tid 38194] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Mon Mar 23 22:57:48.576281 2026] [:error] [pid 38176:tid 38210] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Mon Mar 23 22:57:48.791795 2026] [:error] [pid 38176:tid 38205] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 23 22:57:49.000958 2026] [:error] [pid 38176:tid 38204] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Mar 23 22:57:49.209529 2026] [:error] [pid 38176:tid 38201] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Mar 23 22:57:49.419595 2026] [:error] [pid 38176:tid 38198] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 23 22:57:49.633050 2026] [:error] [pid 38176:tid 38193] [client 40.85.246.124:55818] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Mon Mar 23 22:57:49.840157 2026] [:error] [pid 38176:tid 38206] [client 40.85.246.124:55818] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acFU7UtG4qlh1gvNjuJZPQAAABM"]
[Mon Mar 23 22:57:50.328120 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:55886] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acFU7jkL8qwu-hHc6BjFHAAAAQg"]
[Mon Mar 23 22:57:50.794517 2026] [:error] [pid 38306:tid 38310] [client 40.85.246.124:55930] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acFU7jkL8qwu-hHc6BjFHQAAAQI"]
[Mon Mar 23 22:57:51.228002 2026] [:error] [pid 38276:tid 38280] [client 40.85.246.124:55873] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "acFU75oKGiI-a7oME3IPcQAAAME"]
[Mon Mar 23 22:57:51.659334 2026] [:error] [pid 38306:tid 38323] [client 40.85.246.124:55901] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "acFU7zkL8qwu-hHc6BjFIAAAAQ8"]
[Mon Mar 23 22:57:52.071750 2026] [:error] [pid 38306:tid 38311] [client 40.85.246.124:55872] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "acFU8DkL8qwu-hHc6BjFIQAAAQM"]
[Mon Mar 23 22:57:52.481716 2026] [:error] [pid 38306:tid 38308] [client 40.85.246.124:55897] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/path.php"] [unique_id "acFU8DkL8qwu-hHc6BjFIgAAAQA"]
[Mon Mar 23 22:57:52.919179 2026] [:error] [pid 38177:tid 38222] [client 40.85.246.124:55885] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "acFU8HsYW-_HCI66MukCzAAAAEc"]
[Mon Mar 23 22:57:53.336130 2026] [:error] [pid 38306:tid 38320] [client 40.85.246.124:55934] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "acFU8TkL8qwu-hHc6BjFJgAAAQw"]
[Mon Mar 23 22:57:53.752096 2026] [:error] [pid 38306:tid 38322] [client 40.85.246.124:55895] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "acFU8TkL8qwu-hHc6BjFKAAAAQ4"]
[Mon Mar 23 22:57:54.168062 2026] [:error] [pid 38306:tid 38330] [client 40.85.246.124:55931] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdf.php"] [unique_id "acFU8jkL8qwu-hHc6BjFKgAAARY"]
[Mon Mar 23 22:57:54.584637 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:55907] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "acFU8jkL8qwu-hHc6BjFLQAAAQg"]
[Mon Mar 23 22:57:54.995050 2026] [:error] [pid 38178:tid 38261] [client 40.85.246.124:55891] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "acFU8g0axWfXsVvR9udUJwAAAJM"]
[Mon Mar 23 22:57:55.406142 2026] [:error] [pid 38178:tid 38260] [client 40.85.246.124:55912] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fleen.php"] [unique_id "acFU8w0axWfXsVvR9udUKwAAAJI"]
[Mon Mar 23 22:57:55.818671 2026] [:error] [pid 52341:tid 52346] [client 40.85.246.124:55935] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "acFU86PKTBDR2u47Gb0NLQAAAUM"]
[Mon Mar 23 22:57:56.239533 2026] [:error] [pid 38276:tid 38300] [client 40.85.246.124:55817] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "acFU9JoKGiI-a7oME3IPdwAAANU"]
[Mon Mar 23 22:57:56.652614 2026] [:error] [pid 38178:tid 38254] [client 40.85.246.124:55813] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "acFU9A0axWfXsVvR9udUMAAAAIw"]
[Mon Mar 23 22:57:57.066194 2026] [:error] [pid 52341:tid 52350] [client 40.85.246.124:55811] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/av6m.php"] [unique_id "acFU9aPKTBDR2u47Gb0NMAAAAUc"]
[Mon Mar 23 22:57:57.488135 2026] [:error] [pid 38306:tid 38322] [client 40.85.246.124:55921] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "acFU9TkL8qwu-hHc6BjFMwAAAQ4"]
[Mon Mar 23 22:57:57.924536 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:55746] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "acFU9aPKTBDR2u47Gb0NMwAAAU4"]
[Mon Mar 23 22:57:58.346022 2026] [:error] [pid 38306:tid 38328] [client 40.85.246.124:55819] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "acFU9jkL8qwu-hHc6BjFOQAAARQ"]
[Mon Mar 23 22:57:58.773726 2026] [:error] [pid 52341:tid 52351] [client 40.85.246.124:55838] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/btx25.php"] [unique_id "acFU9qPKTBDR2u47Gb0NNAAAAUg"]
[Mon Mar 23 22:57:59.278531 2026] [:error] [pid 38276:tid 38288] [client 40.85.246.124:55908] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "acFU95oKGiI-a7oME3IPfAAAAMk"]
[Mon Mar 23 22:57:59.688598 2026] [:error] [pid 38306:tid 38311] [client 40.85.246.124:55822] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "acFU9zkL8qwu-hHc6BjFPAAAAQM"]
[Mon Mar 23 22:58:00.102084 2026] [:error] [pid 52341:tid 52353] [client 40.85.246.124:55933] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "acFU-KPKTBDR2u47Gb0NNwAAAUo"]
[Mon Mar 23 22:58:00.513528 2026] [:error] [pid 38276:tid 38294] [client 40.85.246.124:55812] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mga.php"] [unique_id "acFU-JoKGiI-a7oME3IPfwAAAM8"]
[Mon Mar 23 22:58:00.941424 2026] [:error] [pid 52341:tid 52358] [client 40.85.246.124:55923] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "acFU-KPKTBDR2u47Gb0NPAAAAU8"]
[Mon Mar 23 22:58:01.395361 2026] [:error] [pid 52341:tid 52360] [client 40.85.246.124:55887] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "acFU-aPKTBDR2u47Gb0NQQAAAVE"]
[Mon Mar 23 22:58:01.822350 2026] [:error] [pid 52341:tid 52356] [client 40.85.246.124:55900] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "acFU-aPKTBDR2u47Gb0NQwAAAU0"]
[Mon Mar 23 22:58:02.281824 2026] [:error] [pid 52341:tid 52349] [client 40.85.246.124:55881] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maxro.php"] [unique_id "acFU-qPKTBDR2u47Gb0NSAAAAUY"]
[Mon Mar 23 22:58:02.744119 2026] [:error] [pid 52341:tid 52367] [client 40.85.246.124:55815] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "acFU-qPKTBDR2u47Gb0NTAAAAVg"]
[Mon Mar 23 22:58:03.184345 2026] [:error] [pid 38306:tid 38328] [client 40.85.246.124:55744] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "acFU-zkL8qwu-hHc6BjFQAAAARQ"]
[Mon Mar 23 22:58:03.682522 2026] [:error] [pid 38177:tid 38222] [client 40.85.246.124:55829] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "acFU-3sYW-_HCI66MukC1gAAAEc"]
[Mon Mar 23 22:58:04.153084 2026] [:error] [pid 38306:tid 38327] [client 40.85.246.124:55871] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/agg.php"] [unique_id "acFU_DkL8qwu-hHc6BjFRQAAARM"]
[Mon Mar 23 22:58:04.576709 2026] [:error] [pid 52341:tid 52344] [client 40.85.246.124:55851] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "acFU_KPKTBDR2u47Gb0NUwAAAUE"]
[Mon Mar 23 22:58:05.007607 2026] [:error] [pid 38306:tid 38326] [client 40.85.246.124:55869] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "acFU_TkL8qwu-hHc6BjFTAAAARI"]
[Mon Mar 23 22:58:05.494168 2026] [:error] [pid 38306:tid 38332] [client 40.85.246.124:55929] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pass4.php"] [unique_id "acFU_TkL8qwu-hHc6BjFTwAAARg"]
[Mon Mar 23 22:58:05.930109 2026] [:error] [pid 38276:tid 38302] [client 40.85.246.124:55924] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "acFU_ZoKGiI-a7oME3IPgAAAANc"]
[Mon Mar 23 22:58:06.622849 2026] [:error] [pid 38176:tid 38197] [client 40.85.246.124:55880] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "acFU_ktG4qlh1gvNjuJZQwAAAAo"]
[Mon Mar 23 22:58:07.033677 2026] [:error] [pid 38276:tid 38292] [client 40.85.246.124:55894] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "acFU_5oKGiI-a7oME3IPggAAAM0"]
[Mon Mar 23 22:58:07.580203 2026] [:error] [pid 38306:tid 38324] [client 40.85.246.124:55824] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wsvvs.php"] [unique_id "acFU_zkL8qwu-hHc6BjFVgAAARA"]
[Mon Mar 23 22:58:08.048971 2026] [:error] [pid 38177:tid 38223] [client 40.85.246.124:55920] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/G-In.php"] [unique_id "acFVAHsYW-_HCI66MukC2QAAAEg"]
[Mon Mar 23 22:58:08.483410 2026] [:error] [pid 38177:tid 38224] [client 40.85.246.124:55892] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/G-In.php"] [unique_id "acFVAHsYW-_HCI66MukC3AAAAEk"]
[Mon Mar 23 22:58:08.932231 2026] [:error] [pid 38306:tid 38326] [client 40.85.246.124:55798] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "acFVADkL8qwu-hHc6BjFWQAAARI"]
[Mon Mar 23 22:58:09.379376 2026] [:error] [pid 38306:tid 38315] [client 40.85.246.124:55928] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acFVATkL8qwu-hHc6BjFWgAAAQc"]
[Mon Mar 23 22:58:09.790332 2026] [:error] [pid 38306:tid 38312] [client 40.85.246.124:55828] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acFVATkL8qwu-hHc6BjFXwAAAQQ"]
[Mon Mar 23 22:58:10.236916 2026] [:error] [pid 38178:tid 38247] [client 40.85.246.124:55754] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acFVAg0axWfXsVvR9udUPAAAAIU"]
[Mon Mar 23 22:58:10.656775 2026] [:error] [pid 38276:tid 38296] [client 40.85.246.124:55927] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acFVApoKGiI-a7oME3IPhgAAANE"]
[Mon Mar 23 22:58:11.078954 2026] [:error] [pid 38306:tid 38308] [client 40.85.246.124:55858] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "acFVAzkL8qwu-hHc6BjFYwAAAQA"]
[Mon Mar 23 22:58:11.490353 2026] [:error] [pid 38306:tid 38313] [client 40.85.246.124:55883] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "acFVAzkL8qwu-hHc6BjFZAAAAQU"]
[Mon Mar 23 22:58:11.981554 2026] [:error] [pid 38176:tid 38201] [client 40.85.246.124:55879] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/admin.php"] [unique_id "acFVA0tG4qlh1gvNjuJZRgAAAA4"]
[Mon Mar 23 22:58:12.457344 2026] [:error] [pid 52341:tid 52358] [client 40.85.246.124:55756] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acFVBKPKTBDR2u47Gb0NWQAAAU8"]
[Mon Mar 23 22:58:12.876116 2026] [:error] [pid 38306:tid 38328] [client 40.85.246.124:55848] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acFVBDkL8qwu-hHc6BjFZwAAARQ"]
[Mon Mar 23 22:58:13.321753 2026] [:error] [pid 38176:tid 38211] [client 40.85.246.124:55757] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acFVBUtG4qlh1gvNjuJZSgAAABg"]
[Mon Mar 23 22:58:13.735549 2026] [:error] [pid 38176:tid 38196] [client 40.85.246.124:55809] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acFVBUtG4qlh1gvNjuJZTQAAAAk"]
[Mon Mar 23 22:58:14.156647 2026] [:error] [pid 38176:tid 38202] [client 40.85.246.124:55898] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFVBktG4qlh1gvNjuJZTwAAAA8"]
[Mon Mar 23 22:58:14.676312 2026] [:error] [pid 38176:tid 38187] [client 40.85.246.124:55874] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFVBktG4qlh1gvNjuJZUwAAAAA"]
[Mon Mar 23 22:58:15.098333 2026] [:error] [pid 38176:tid 38205] [client 40.85.246.124:55857] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFVB0tG4qlh1gvNjuJZWAAAABI"]
[Mon Mar 23 22:58:15.543520 2026] [:error] [pid 38276:tid 38288] [client 40.85.246.124:55914] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acFVB5oKGiI-a7oME3IPiwAAAMk"]
[Mon Mar 23 22:58:15.998363 2026] [:error] [pid 38178:tid 38246] [client 40.85.246.124:55932] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acFVBw0axWfXsVvR9udUQAAAAIQ"]
[Mon Mar 23 22:58:16.428719 2026] [:error] [pid 52341:tid 52354] [client 40.85.246.124:55816] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acFVCKPKTBDR2u47Gb0NYAAAAUs"]
[Mon Mar 23 22:58:16.848831 2026] [:error] [pid 38306:tid 38309] [client 40.85.246.124:55814] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acFVCDkL8qwu-hHc6BjFbwAAAQE"]
[Mon Mar 23 22:58:17.268098 2026] [:error] [pid 38306:tid 38325] [client 40.85.246.124:55845] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "pumpbooking.com"] [uri "/wp-includes/assets/index.php"] [unique_id "acFVCTkL8qwu-hHc6BjFcgAAARE"]
[Mon Mar 23 22:58:17.682269 2026] [:error] [pid 38276:tid 38295] [client 40.85.246.124:55902] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFVCZoKGiI-a7oME3IPkAAAANA"]
[Mon Mar 23 22:58:18.094821 2026] [:error] [pid 52341:tid 52349] [client 40.85.246.124:55748] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFVCqPKTBDR2u47Gb0NYwAAAUY"]
[Mon Mar 23 22:58:18.566502 2026] [:error] [pid 52341:tid 52364] [client 40.85.246.124:55899] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFVCqPKTBDR2u47Gb0NZwAAAVU"]
[Mon Mar 23 22:58:18.984340 2026] [:error] [pid 52341:tid 52358] [client 40.85.246.124:55916] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acFVCqPKTBDR2u47Gb0NaAAAAU8"]
[Mon Mar 23 22:58:19.406987 2026] [:error] [pid 38178:tid 38262] [client 40.85.246.124:55882] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acFVCw0axWfXsVvR9udURQAAAJQ"]
[Mon Mar 23 22:58:19.871441 2026] [:error] [pid 52341:tid 52345] [client 40.85.246.124:55831] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acFVC6PKTBDR2u47Gb0NbwAAAUI"]
[Mon Mar 23 22:58:20.317413 2026] [:error] [pid 52341:tid 52349] [client 40.85.246.124:55917] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acFVDKPKTBDR2u47Gb0NcQAAAUY"]
[Mon Mar 23 22:58:20.744524 2026] [:error] [pid 52341:tid 52366] [client 40.85.246.124:55797] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "acFVDKPKTBDR2u47Gb0NdQAAAVc"]
[Mon Mar 23 22:58:21.165847 2026] [:error] [pid 52341:tid 52365] [client 40.85.246.124:55896] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "acFVDaPKTBDR2u47Gb0NeQAAAVY"]
[Mon Mar 23 22:58:21.604748 2026] [:error] [pid 52341:tid 52354] [client 40.85.246.124:55801] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "acFVDaPKTBDR2u47Gb0NfwAAAUs"]
[Mon Mar 23 22:58:22.016967 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:55820] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/assets/css/index.php"] [unique_id "acFVDqPKTBDR2u47Gb0NhQAAAUw"]
[Mon Mar 23 23:53:07.630079 2026] [:error] [pid 38178:tid 38258] [client 81.167.26.57:23221] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acFh4w0axWfXsVvR9udgmgAAAJA"]
[Mon Mar 23 23:53:09.605849 2026] [:error] [pid 38276:tid 38297] [client 81.167.26.57:11838] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acFh5ZoKGiI-a7oME3IfegAAANI"]
[Mon Mar 23 23:53:11.475897 2026] [:error] [pid 38176:tid 38190] [client 81.167.26.57:2836] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acFh50tG4qlh1gvNjuJsUwAAAAM"]
[Mon Mar 23 23:53:13.488034 2026] [:error] [pid 38176:tid 38189] [client 81.167.26.57:55747] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acFh6UtG4qlh1gvNjuJsXQAAAAI"]
[Mon Mar 23 23:53:15.503108 2026] [:error] [pid 52341:tid 52349] [client 81.167.26.57:5604] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acFh66PKTBDR2u47Gb0wAgAAAUY"]
[Mon Mar 23 23:53:17.522514 2026] [:error] [pid 38306:tid 38317] [client 81.167.26.57:65258] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acFh7TkL8qwu-hHc6BjeNgAAAQk"]
[Mon Mar 23 23:53:19.533731 2026] [:error] [pid 38276:tid 38295] [client 81.167.26.57:49809] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acFh75oKGiI-a7oME3IfigAAANA"]
[Mon Mar 23 23:53:21.564664 2026] [:error] [pid 38177:tid 38226] [client 81.167.26.57:26017] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acFh8XsYW-_HCI66MukNtQAAAEs"]
[Mon Mar 23 23:53:23.424656 2026] [:error] [pid 52341:tid 52367] [client 81.167.26.57:21797] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acFh86PKTBDR2u47Gb0wIwAAAVg"]
[Mon Mar 23 23:53:25.418400 2026] [:error] [pid 38176:tid 38207] [client 81.167.26.57:26795] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acFh9UtG4qlh1gvNjuJsggAAABQ"]
[Mon Mar 23 23:53:27.457668 2026] [:error] [pid 52341:tid 52360] [client 81.167.26.57:9525] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acFh96PKTBDR2u47Gb0wRgAAAVE"]
[Mon Mar 23 23:53:29.330363 2026] [:error] [pid 52341:tid 52360] [client 81.167.26.57:23145] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acFh-aPKTBDR2u47Gb0wVQAAAVE"]
[Mon Mar 23 23:53:31.337884 2026] [:error] [pid 38176:tid 38206] [client 81.167.26.57:38853] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acFh-0tG4qlh1gvNjuJshgAAABM"]
[Mon Mar 23 23:53:33.275138 2026] [:error] [pid 52341:tid 52350] [client 81.167.26.57:7993] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acFh_aPKTBDR2u47Gb0wawAAAUc"]
[Mon Mar 23 23:53:35.290044 2026] [:error] [pid 38276:tid 38290] [client 81.167.26.57:47179] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acFh_5oKGiI-a7oME3IfvwAAAMs"]
[Mon Mar 23 23:53:37.189958 2026] [:error] [pid 38276:tid 38303] [client 81.167.26.57:10316] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acFiAZoKGiI-a7oME3IfzAAAANg"]
[Mon Mar 23 23:53:39.206663 2026] [:error] [pid 38306:tid 38320] [client 81.167.26.57:50600] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acFiAzkL8qwu-hHc6BjeTwAAAQw"]
[Mon Mar 23 23:53:41.213297 2026] [:error] [pid 38177:tid 38230] [client 81.167.26.57:18811] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acFiBXsYW-_HCI66MukN0AAAAE8"]
[Mon Mar 23 23:53:42.455101 2026] [:error] [pid 52341:tid 52345] [client 81.167.26.57:26501] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acFiBqPKTBDR2u47Gb0wlgAAAUI"]
[Mon Mar 23 23:53:46.229531 2026] [:error] [pid 38306:tid 38311] [client 81.167.26.57:38363] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acFiCjkL8qwu-hHc6BjecwAAAQM"]
[Mon Mar 23 23:53:58.878994 2026] [:error] [pid 38306:tid 38330] [client 170.106.187.106:43384] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acFiFjkL8qwu-hHc6BjelgAAARY"]
[Tue Mar 24 00:00:30.570082 2026] [:error] [pid 38306:tid 38322] [client 43.157.172.39:43442] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acFjnjkL8qwu-hHc6BjiTQAAAQ4"]
[Tue Mar 24 04:41:33.995998 2026] [:error] [pid 3137:tid 3162] [client 76.147.219.168:61119] [client 76.147.219.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.147.219.168, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acGlfZdZesutm6dfYM--yQAAANc"]
[Tue Mar 24 04:41:34.001347 2026] [:error] [pid 3137:tid 3162] [client 76.147.219.168:61119] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 06:12:36.692488 2026] [:error] [pid 38767:tid 38781] [client 101.32.49.171:45800] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acG61PwkUqN4GJAI5oWGMwAAAQs"]
[Tue Mar 24 08:11:10.916009 2026] [:error] [pid 3031:tid 3086] [client 216.24.210.83:21277] [client 216.24.210.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "acHWnqJBKytnG47nuib6_wAAAEo"]
[Tue Mar 24 09:02:45.685686 2026] [:error] [pid 3032:tid 3114] [client 185.223.152.131:57931] [client 185.223.152.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.131, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "acHitSa_-JXXD03-JNz4BgAAAIs"]
[Tue Mar 24 09:02:45.690999 2026] [:error] [pid 3032:tid 3114] [client 185.223.152.131:57931] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 24 09:45:53.937908 2026] [:error] [pid 64198:tid 64224] [client 182.42.110.255:51703] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acHs0XVzJqf6OS_oSZ1MdAAAAVg"]
[Tue Mar 24 10:54:50.006294 2026] [:error] [pid 38767:tid 38793] [client 54.37.252.229:46932] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acH8-vwkUqN4GJAI5oX7lQAAARc"]
[Tue Mar 24 10:54:52.043532 2026] [:error] [pid 64198:tid 64215] [client 54.37.252.229:58320] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acH8_HVzJqf6OS_oSZ2BowAAAU8"]
[Tue Mar 24 10:54:53.986248 2026] [:error] [pid 64198:tid 64202] [client 54.37.252.229:58326] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acH8_XVzJqf6OS_oSZ2BuwAAAUI"]
[Tue Mar 24 10:54:55.959083 2026] [:error] [pid 3137:tid 3161] [client 54.37.252.229:57226] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acH8_5dZesutm6dfYM-AcAAAANY"]
[Tue Mar 24 10:54:57.894968 2026] [:error] [pid 64198:tid 64220] [client 54.37.252.229:57236] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acH9AXVzJqf6OS_oSZ2B2gAAAVQ"]
[Tue Mar 24 10:54:59.854057 2026] [:error] [pid 3137:tid 3154] [client 54.37.252.229:57244] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acH9A5dZesutm6dfYM-AdQAAAM8"]
[Tue Mar 24 10:55:01.857657 2026] [:error] [pid 48214:tid 48271] [client 54.37.252.229:57252] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acH9BbeshLWZ3uUDHKkONQAAAdM"]
[Tue Mar 24 10:55:03.798922 2026] [:error] [pid 64198:tid 64216] [client 54.37.252.229:57260] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acH9B3VzJqf6OS_oSZ2CEwAAAVA"]
[Tue Mar 24 10:55:05.812871 2026] [:error] [pid 48214:tid 48273] [client 54.37.252.229:43864] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acH9CbeshLWZ3uUDHKkOOgAAAdU"]
[Tue Mar 24 10:55:07.837819 2026] [:error] [pid 64198:tid 64210] [client 54.37.252.229:43876] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acH9C3VzJqf6OS_oSZ2CLgAAAUo"]
[Tue Mar 24 10:55:09.720748 2026] [:error] [pid 64198:tid 64203] [client 54.37.252.229:43884] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acH9DXVzJqf6OS_oSZ2CRwAAAUM"]
[Tue Mar 24 10:55:11.708440 2026] [:error] [pid 38767:tid 38778] [client 54.37.252.229:43896] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acH9D_wkUqN4GJAI5oX72AAAAQg"]
[Tue Mar 24 10:55:13.517163 2026] [:error] [pid 38767:tid 38775] [client 54.37.252.229:43898] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acH9EfwkUqN4GJAI5oX73gAAAQU"]
[Tue Mar 24 10:55:15.456010 2026] [:error] [pid 64198:tid 64222] [client 54.37.252.229:57462] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acH9E3VzJqf6OS_oSZ2CigAAAVY"]
[Tue Mar 24 10:55:17.458574 2026] [:error] [pid 48214:tid 48259] [client 54.37.252.229:57474] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acH9FbeshLWZ3uUDHKkOTAAAAcc"]
[Tue Mar 24 10:55:19.369535 2026] [:error] [pid 3137:tid 3143] [client 54.37.252.229:57484] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acH9F5dZesutm6dfYM-ApwAAAMQ"]
[Tue Mar 24 10:55:21.459913 2026] [:error] [pid 3137:tid 3145] [client 54.37.252.229:57490] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acH9GZdZesutm6dfYM-AswAAAMY"]
[Tue Mar 24 10:55:23.377933 2026] [:error] [pid 48219:tid 48285] [client 54.37.252.229:57504] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acH9Gyhf3b4R_lAIyv_5RQAAAgQ"]
[Tue Mar 24 10:55:25.297613 2026] [:error] [pid 38767:tid 38788] [client 54.37.252.229:60952] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acH9HfwkUqN4GJAI5oX7-AAAARI"]
[Tue Mar 24 10:55:27.382325 2026] [:error] [pid 48128:tid 48169] [client 54.37.252.229:60958] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acH9H8vR4LIMFLbM5VkIBwAAAZA"]
[Tue Mar 24 10:55:29.312294 2026] [:error] [pid 3137:tid 3155] [client 54.37.252.229:60972] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acH9IZdZesutm6dfYM-AvQAAANA"]
[Tue Mar 24 10:55:31.392527 2026] [:error] [pid 64198:tid 64211] [client 54.37.252.229:60974] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acH9I3VzJqf6OS_oSZ2DBAAAAUs"]
[Tue Mar 24 10:55:35.102415 2026] [:error] [pid 64198:tid 64202] [client 54.37.252.229:58660] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acH9J3VzJqf6OS_oSZ2DLwAAAUI"]
[Tue Mar 24 10:55:38.876316 2026] [:error] [pid 64198:tid 64222] [client 54.37.252.229:58674] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acH9KnVzJqf6OS_oSZ2DXQAAAVY"]
[Tue Mar 24 11:55:52.103478 2026] [:error] [pid 38767:tid 38793] [client 134.0.190.176:59980] [client 134.0.190.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.0.190.176, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acILSPwkUqN4GJAI5oUozwAAARc"]
[Tue Mar 24 11:55:52.109399 2026] [:error] [pid 38767:tid 38793] [client 134.0.190.176:59980] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 11:56:53.428716 2026] [:error] [pid 3030:tid 3053] [client 124.217.25.146:36804] [client 124.217.25.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.25.146, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acILhQyOuILyynfcqfkpgAAAAAQ"]
[Tue Mar 24 11:56:53.434241 2026] [:error] [pid 3030:tid 3053] [client 124.217.25.146:36804] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 12:04:26.027107 2026] [:error] [pid 3137:tid 3156] [client 103.109.222.210:53869] [client 103.109.222.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.222.210, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acINSpdZesutm6dfYM-cnQAAANE"]
[Tue Mar 24 12:04:26.035491 2026] [:error] [pid 3137:tid 3156] [client 103.109.222.210:53869] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 12:24:09.417947 2026] [:error] [pid 64198:tid 64222] [client 43.157.46.118:49368] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acIR6XVzJqf6OS_oSZ3OPgAAAVY"]
[Tue Mar 24 12:33:18.839028 2026] [:error] [pid 48214:tid 48268] [client 43.153.58.28:60456] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acIUDreshLWZ3uUDHKkieAAAAdA"]
[Tue Mar 24 16:28:13.031640 2026] [:error] [pid 38767:tid 38774] [client 216.81.245.214:56994] [client 216.81.245.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "acJLHfwkUqN4GJAI5oWirQAAAQQ"]
[Tue Mar 24 16:29:34.230647 2026] [:error] [pid 48219:tid 48302] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Mar 24 16:29:34.526731 2026] [:error] [pid 48219:tid 48289] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Mar 24 16:29:36.052552 2026] [:error] [pid 48219:tid 48289] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Mar 24 16:29:36.358468 2026] [:error] [pid 48219:tid 48297] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Mar 24 16:29:36.659072 2026] [:error] [pid 48219:tid 48304] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Mar 24 16:29:36.975652 2026] [:error] [pid 48219:tid 48283] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Mar 24 16:29:37.308358 2026] [:error] [pid 48219:tid 48284] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Mar 24 16:29:37.614230 2026] [:error] [pid 48219:tid 48296] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Mar 24 16:29:37.913675 2026] [:error] [pid 48219:tid 48287] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Mar 24 16:29:38.221493 2026] [:error] [pid 48219:tid 48299] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Mar 24 16:29:38.530113 2026] [:error] [pid 48219:tid 48301] [client 2.57.170.191:57273] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Mar 24 16:29:38.839043 2026] [:error] [pid 48219:tid 48293] [client 2.57.170.191:57273] [client 2.57.170.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tiny.php"] [unique_id "acJLcihf3b4R_lAIyv9FhwAAAgw"]
[Tue Mar 24 16:29:39.429349 2026] [:error] [pid 3137:tid 3150] [client 2.57.170.196:38391] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Mar 24 16:29:39.725398 2026] [:error] [pid 3137:tid 3144] [client 2.57.170.196:38391] [client 2.57.170.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/fm.php"] [unique_id "acJLc5dZesutm6dfYM_ilgAAAMU"]
[Tue Mar 24 16:29:40.608915 2026] [:error] [pid 3137:tid 3145] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Mar 24 16:29:40.924690 2026] [:error] [pid 3137:tid 3146] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Mar 24 16:29:41.223633 2026] [:error] [pid 3137:tid 3139] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Mar 24 16:29:41.547941 2026] [:error] [pid 3137:tid 3147] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Mar 24 16:29:41.858250 2026] [:error] [pid 3137:tid 3160] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Mar 24 16:29:42.165642 2026] [:error] [pid 3137:tid 3141] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Mar 24 16:29:42.459965 2026] [:error] [pid 3137:tid 3142] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Mar 24 16:29:42.767602 2026] [:error] [pid 3137:tid 3140] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Mar 24 16:29:43.063202 2026] [:error] [pid 3137:tid 3158] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Mar 24 16:29:43.361002 2026] [:error] [pid 3137:tid 3146] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Mar 24 16:29:43.656532 2026] [:error] [pid 3137:tid 3157] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Mar 24 16:29:43.959554 2026] [:error] [pid 3137:tid 3161] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Tue Mar 24 16:29:44.282186 2026] [:error] [pid 3137:tid 3149] [client 2.57.170.195:64125] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Mar 24 16:29:44.572720 2026] [:error] [pid 3137:tid 3144] [client 2.57.170.195:64125] [client 2.57.170.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/tinyfilemanager.php"] [unique_id "acJLeJdZesutm6dfYM_irgAAAMU"]
[Tue Mar 24 16:29:45.164405 2026] [:error] [pid 3030:tid 3066] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Mar 24 16:29:45.458683 2026] [:error] [pid 3030:tid 3072] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Mar 24 16:29:45.772674 2026] [:error] [pid 3030:tid 3049] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Mar 24 16:29:46.079146 2026] [:error] [pid 3030:tid 3055] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Tue Mar 24 16:29:46.597809 2026] [:error] [pid 3030:tid 3068] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Tue Mar 24 16:29:46.895816 2026] [:error] [pid 3030:tid 3073] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Mar 24 16:29:47.193524 2026] [:error] [pid 3030:tid 3051] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Mar 24 16:29:47.488876 2026] [:error] [pid 3030:tid 3063] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Tue Mar 24 16:29:48.827420 2026] [:error] [pid 3030:tid 3063] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Tue Mar 24 16:29:49.127149 2026] [:error] [pid 3030:tid 3071] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Mar 24 16:29:49.431612 2026] [:error] [pid 3030:tid 3062] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Mar 24 16:29:49.730649 2026] [:error] [pid 3030:tid 3058] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Tue Mar 24 16:29:50.026033 2026] [:error] [pid 3030:tid 3053] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Mar 24 16:29:50.329723 2026] [:error] [pid 3030:tid 3056] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Tue Mar 24 16:29:50.627048 2026] [:error] [pid 3030:tid 3069] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Tue Mar 24 16:29:50.931067 2026] [:error] [pid 3030:tid 3057] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Tue Mar 24 16:29:51.227038 2026] [:error] [pid 3030:tid 3054] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Mar 24 16:29:51.526304 2026] [:error] [pid 3030:tid 3061] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Tue Mar 24 16:29:51.830300 2026] [:error] [pid 3030:tid 3072] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Tue Mar 24 16:29:52.131177 2026] [:error] [pid 3030:tid 3049] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Mar 24 16:29:52.432981 2026] [:error] [pid 3030:tid 3055] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Tue Mar 24 16:29:52.729122 2026] [:error] [pid 3030:tid 3068] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Tue Mar 24 16:29:53.045839 2026] [:error] [pid 3030:tid 3052] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Tue Mar 24 16:29:53.394279 2026] [:error] [pid 3030:tid 3070] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Tue Mar 24 16:29:53.710524 2026] [:error] [pid 3030:tid 3059] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Tue Mar 24 16:29:54.007702 2026] [:error] [pid 3030:tid 3073] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Tue Mar 24 16:29:54.312818 2026] [:error] [pid 3030:tid 3051] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Tue Mar 24 16:29:54.612444 2026] [:error] [pid 3030:tid 3065] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Mar 24 16:29:54.929782 2026] [:error] [pid 3030:tid 3064] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Tue Mar 24 16:29:55.538664 2026] [:error] [pid 3030:tid 3071] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Tue Mar 24 16:29:55.840680 2026] [:error] [pid 3030:tid 3062] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Tue Mar 24 16:29:56.143215 2026] [:error] [pid 3030:tid 3050] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Tue Mar 24 16:29:56.443593 2026] [:error] [pid 3030:tid 3056] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Tue Mar 24 16:29:56.740833 2026] [:error] [pid 3030:tid 3069] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Mar 24 16:29:57.065513 2026] [:error] [pid 3030:tid 3057] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Tue Mar 24 16:29:57.362169 2026] [:error] [pid 3030:tid 3054] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Mar 24 16:29:57.677535 2026] [:error] [pid 3030:tid 3060] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Tue Mar 24 16:29:57.973799 2026] [:error] [pid 3030:tid 3066] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Tue Mar 24 16:29:58.270711 2026] [:error] [pid 3030:tid 3072] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Mar 24 16:29:58.565353 2026] [:error] [pid 3030:tid 3052] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Mar 24 16:29:58.873787 2026] [:error] [pid 3030:tid 3051] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Mar 24 16:29:59.185104 2026] [:error] [pid 3030:tid 3064] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Tue Mar 24 16:29:59.516678 2026] [:error] [pid 3030:tid 3071] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Mar 24 16:29:59.811899 2026] [:error] [pid 3030:tid 3062] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Tue Mar 24 16:30:00.120727 2026] [:error] [pid 3030:tid 3058] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Mar 24 16:30:00.424696 2026] [:error] [pid 3030:tid 3053] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Mar 24 16:30:00.788972 2026] [:error] [pid 3030:tid 3050] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Tue Mar 24 16:30:01.128378 2026] [:error] [pid 3030:tid 3056] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Mar 24 16:30:01.442207 2026] [:error] [pid 3030:tid 3069] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Mar 24 16:30:02.884535 2026] [:error] [pid 3030:tid 3069] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Tue Mar 24 16:30:03.182350 2026] [:error] [pid 3030:tid 3057] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Tue Mar 24 16:30:03.494293 2026] [:error] [pid 3030:tid 3054] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Mar 24 16:30:04.010541 2026] [:error] [pid 3030:tid 3060] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue Mar 24 16:30:04.315510 2026] [:error] [pid 3030:tid 3066] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Mar 24 16:30:04.647516 2026] [:error] [pid 3030:tid 3072] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Mar 24 16:30:04.982990 2026] [:error] [pid 3030:tid 3061] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Mar 24 16:30:05.294020 2026] [:error] [pid 3030:tid 3052] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Mar 24 16:30:05.595546 2026] [:error] [pid 3030:tid 3070] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Tue Mar 24 16:30:05.901529 2026] [:error] [pid 3030:tid 3055] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Tue Mar 24 16:30:06.232037 2026] [:error] [pid 3030:tid 3049] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Tue Mar 24 16:30:06.536887 2026] [:error] [pid 3030:tid 3073] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Tue Mar 24 16:30:06.841490 2026] [:error] [pid 3030:tid 3051] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Tue Mar 24 16:30:07.136680 2026] [:error] [pid 3030:tid 3065] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Mar 24 16:30:07.437591 2026] [:error] [pid 3030:tid 3064] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Mar 24 16:30:07.774374 2026] [:error] [pid 3030:tid 3059] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Mar 24 16:30:08.078370 2026] [:error] [pid 3030:tid 3067] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Mar 24 16:30:08.375760 2026] [:error] [pid 3030:tid 3071] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Tue Mar 24 16:30:08.672748 2026] [:error] [pid 3030:tid 3068] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Tue Mar 24 16:30:08.987094 2026] [:error] [pid 3030:tid 3062] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Mar 24 16:30:09.287169 2026] [:error] [pid 3030:tid 3063] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Mar 24 16:30:09.623161 2026] [:error] [pid 3030:tid 3058] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Mar 24 16:30:09.921192 2026] [:error] [pid 3030:tid 3053] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Mar 24 16:30:10.225855 2026] [:error] [pid 3030:tid 3050] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Tue Mar 24 16:30:10.528640 2026] [:error] [pid 3030:tid 3056] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Tue Mar 24 16:30:10.825958 2026] [:error] [pid 3030:tid 3069] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Tue Mar 24 16:30:11.150729 2026] [:error] [pid 3030:tid 3057] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Mar 24 16:30:11.445515 2026] [:error] [pid 3030:tid 3054] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Tue Mar 24 16:30:11.772678 2026] [:error] [pid 3030:tid 3060] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Mar 24 16:30:12.381111 2026] [:error] [pid 3030:tid 3072] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Tue Mar 24 16:30:12.676085 2026] [:error] [pid 3030:tid 3061] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Tue Mar 24 16:30:12.978140 2026] [:error] [pid 3030:tid 3052] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Tue Mar 24 16:30:13.274187 2026] [:error] [pid 3030:tid 3070] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Tue Mar 24 16:30:13.584835 2026] [:error] [pid 3030:tid 3055] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Tue Mar 24 16:30:13.911099 2026] [:error] [pid 3030:tid 3049] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Mar 24 16:30:14.208704 2026] [:error] [pid 3030:tid 3073] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Mar 24 16:30:14.504676 2026] [:error] [pid 3030:tid 3051] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Tue Mar 24 16:30:14.806110 2026] [:error] [pid 3030:tid 3065] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Tue Mar 24 16:30:15.112347 2026] [:error] [pid 3030:tid 3064] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Tue Mar 24 16:30:17.098327 2026] [:error] [pid 3030:tid 3059] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Mar 24 16:30:17.404320 2026] [:error] [pid 3030:tid 3067] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Tue Mar 24 16:30:18.029030 2026] [:error] [pid 3030:tid 3068] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Tue Mar 24 16:30:18.323264 2026] [:error] [pid 3030:tid 3062] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Tue Mar 24 16:30:18.625695 2026] [:error] [pid 3030:tid 3063] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Tue Mar 24 16:30:18.928150 2026] [:error] [pid 3030:tid 3058] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Mar 24 16:30:19.226813 2026] [:error] [pid 3030:tid 3053] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Mar 24 16:30:19.538751 2026] [:error] [pid 3030:tid 3050] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Mar 24 16:30:19.838103 2026] [:error] [pid 3030:tid 3056] [client 2.57.170.177:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue Mar 24 16:30:20.433726 2026] [:error] [pid 38767:tid 38786] [client 2.57.170.194:27327] [client 2.57.170.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "acJLnPwkUqN4GJAI5oWjsAAAARA"]
[Tue Mar 24 16:30:21.026283 2026] [:error] [pid 3137:tid 3150] [client 2.57.170.177:33609] [client 2.57.170.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "acJLnZdZesutm6dfYM_ivQAAAMs"]
[Tue Mar 24 16:30:21.910802 2026] [:error] [pid 48214:tid 48276] [client 2.57.170.191:53529] [client 2.57.170.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "acJLnbeshLWZ3uUDHKlEegAAAdg"]
[Tue Mar 24 16:30:22.512012 2026] [:error] [pid 38767:tid 38783] [client 2.57.170.211:60093] [client 2.57.170.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "acJLnvwkUqN4GJAI5oWjuwAAAQ0"]
[Tue Mar 24 16:30:23.397354 2026] [:error] [pid 38767:tid 38771] [client 2.57.170.198:56587] [client 2.57.170.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "acJLn_wkUqN4GJAI5oWjwwAAAQE"]
[Tue Mar 24 16:30:25.199865 2026] [:error] [pid 48219:tid 48292] [client 2.57.170.205:38895] [client 2.57.170.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "acJLoShf3b4R_lAIyv9FpwAAAgs"]
[Tue Mar 24 16:30:25.801685 2026] [:error] [pid 64198:tid 64204] [client 2.57.170.217:48107] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "acJLoXVzJqf6OS_oSZ1HEAAAAUQ"]
[Tue Mar 24 16:30:27.296098 2026] [:error] [pid 64198:tid 64209] [client 2.57.170.208:64485] [client 2.57.170.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "acJLo3VzJqf6OS_oSZ1HFgAAAUk"]
[Tue Mar 24 16:30:29.742737 2026] [:error] [pid 38767:tid 38772] [client 2.57.170.175:52779] [client 2.57.170.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/index.php"] [unique_id "acJLpfwkUqN4GJAI5oWj3gAAAQI"]
[Tue Mar 24 16:30:30.333376 2026] [:error] [pid 48214:tid 48267] [client 2.57.170.206:49201] [client 2.57.170.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "acJLpreshLWZ3uUDHKlEhAAAAc8"]
[Tue Mar 24 16:30:30.936769 2026] [:error] [pid 48214:tid 48260] [client 2.57.170.213:62151] [client 2.57.170.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/about.php"] [unique_id "acJLpreshLWZ3uUDHKlEiAAAAcg"]
[Tue Mar 24 16:30:31.549478 2026] [:error] [pid 3032:tid 3124] [client 2.57.170.219:63633] [client 2.57.170.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/about.php"] [unique_id "acJLpya_-JXXD03-JNwzRQAAAJU"]
[Tue Mar 24 16:30:35.809758 2026] [:error] [pid 64198:tid 64208] [client 2.57.170.196:30907] [client 2.57.170.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "acJLq3VzJqf6OS_oSZ1HJwAAAUg"]
[Tue Mar 24 16:30:36.694161 2026] [:error] [pid 48219:tid 48304] [client 2.57.170.199:20841] [client 2.57.170.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.199, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "acJLrChf3b4R_lAIyv9FrwAAAhc"]
[Tue Mar 24 16:30:37.581864 2026] [:error] [pid 48219:tid 48298] [client 2.57.170.199:20841] [client 2.57.170.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/class-config.php"] [unique_id "acJLrShf3b4R_lAIyv9FsgAAAhE"]
[Tue Mar 24 16:30:41.556643 2026] [:error] [pid 64198:tid 64220] [client 2.57.170.217:43663] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "acJLsXVzJqf6OS_oSZ1HRQAAAVQ"]
[Tue Mar 24 16:30:44.624292 2026] [:error] [pid 48128:tid 48172] [client 2.57.170.198:30817] [client 2.57.170.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/bak.php"] [unique_id "acJLtMvR4LIMFLbM5VkiNwAAAZM"]
[Tue Mar 24 16:30:45.216837 2026] [:error] [pid 38767:tid 38789] [client 2.57.170.210:25249] [client 2.57.170.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acJLtfwkUqN4GJAI5oWj_wAAARM"]
[Tue Mar 24 16:30:46.463591 2026] [:error] [pid 3032:tid 3116] [client 2.57.170.180:42985] [client 2.57.170.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/index.php"] [unique_id "acJLtia_-JXXD03-JNwzSgAAAI0"]
[Tue Mar 24 16:30:48.355713 2026] [:error] [pid 3137:tid 3159] [client 2.57.170.209:26855] [client 2.57.170.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/about.php"] [unique_id "acJLuJdZesutm6dfYM_izwAAANQ"]
[Tue Mar 24 16:30:48.937106 2026] [:error] [pid 3030:tid 3071] [client 2.57.170.215:22137] [client 2.57.170.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "acJLuAyOuILyynfcqflESwAAABY"]
[Tue Mar 24 16:30:50.158743 2026] [:error] [pid 64198:tid 64208] [client 2.57.170.192:41529] [client 2.57.170.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "acJLunVzJqf6OS_oSZ1HSgAAAUg"]
[Tue Mar 24 16:30:50.764691 2026] [:error] [pid 3030:tid 3058] [client 2.57.170.171:37763] [client 2.57.170.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "acJLugyOuILyynfcqflETQAAAAk"]
[Tue Mar 24 16:30:52.243440 2026] [:error] [pid 48214:tid 48256] [client 2.57.170.189:52583] [client 2.57.170.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "acJLvLeshLWZ3uUDHKlEmwAAAcQ"]
[Tue Mar 24 16:30:52.835595 2026] [:error] [pid 3137:tid 3144] [client 2.57.170.2:23675] [client 2.57.170.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "acJLvJdZesutm6dfYM_i1wAAAMU"]
[Tue Mar 24 16:30:53.420577 2026] [:error] [pid 48219:tid 48303] [client 2.57.170.186:20745] [client 2.57.170.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "acJLvShf3b4R_lAIyv9FuQAAAhY"]
[Tue Mar 24 16:30:54.316796 2026] [:error] [pid 64198:tid 64216] [client 2.57.170.199:64895] [client 2.57.170.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "acJLvnVzJqf6OS_oSZ1HUQAAAVA"]
[Tue Mar 24 16:30:54.934415 2026] [:error] [pid 3137:tid 3140] [client 2.57.170.217:25385] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "acJLvpdZesutm6dfYM_i2gAAAME"]
[Tue Mar 24 16:30:55.548757 2026] [:error] [pid 3032:tid 3122] [client 2.57.170.212:55717] [client 2.57.170.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "acJLvya_-JXXD03-JNwzUQAAAJM"]
[Tue Mar 24 16:30:56.155474 2026] [:error] [pid 3032:tid 3104] [client 2.57.170.213:52051] [client 2.57.170.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "acJLwCa_-JXXD03-JNwzVAAAAIE"]
[Tue Mar 24 16:30:56.760760 2026] [:error] [pid 3137:tid 3142] [client 2.57.170.207:38087] [client 2.57.170.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acJLwJdZesutm6dfYM_i3wAAAMM"]
[Tue Mar 24 16:30:57.650583 2026] [:error] [pid 48219:tid 48287] [client 2.57.170.214:38811] [client 2.57.170.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "acJLwShf3b4R_lAIyv9FwQAAAgY"]
[Tue Mar 24 16:31:00.068027 2026] [:error] [pid 3137:tid 3158] [client 2.57.170.210:46321] [client 2.57.170.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "acJLxJdZesutm6dfYM_i7gAAANM"]
[Tue Mar 24 16:31:00.907331 2026] [:error] [pid 64198:tid 64213] [client 2.57.170.171:53555] [client 2.57.170.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/network.php"] [unique_id "acJLxHVzJqf6OS_oSZ1HUgAAAU0"]
[Tue Mar 24 16:31:02.768957 2026] [:error] [pid 64198:tid 64220] [client 2.57.170.201:58793] [client 2.57.170.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "acJLxnVzJqf6OS_oSZ1HVgAAAVQ"]
[Tue Mar 24 16:31:03.989697 2026] [:error] [pid 48219:tid 48290] [client 2.57.170.214:56863] [client 2.57.170.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "acJLxyhf3b4R_lAIyv9FyQAAAgk"]
[Tue Mar 24 16:31:04.592201 2026] [:error] [pid 3137:tid 3145] [client 2.57.170.184:40987] [client 2.57.170.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "acJLyJdZesutm6dfYM_i-gAAAMY"]
[Tue Mar 24 16:31:05.820051 2026] [:error] [pid 3137:tid 3147] [client 2.57.170.204:56139] [client 2.57.170.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "acJLyZdZesutm6dfYM_jAAAAAMg"]
[Tue Mar 24 16:31:06.782455 2026] [:error] [pid 48219:tid 48302] [client 2.57.170.205:35395] [client 2.57.170.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "acJLyihf3b4R_lAIyv9F0AAAAhU"]
[Tue Mar 24 16:31:07.409561 2026] [:error] [pid 38767:tid 38787] [client 2.57.170.194:21145] [client 2.57.170.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/index.php"] [unique_id "acJLy_wkUqN4GJAI5oWkDgAAARE"]
[Tue Mar 24 16:31:08.050257 2026] [:error] [pid 64198:tid 64218] [client 2.57.170.203:25143] [client 2.57.170.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "acJLzHVzJqf6OS_oSZ1HYwAAAVI"]
[Tue Mar 24 16:31:10.203743 2026] [:error] [pid 64198:tid 64203] [client 2.57.170.193:41837] [client 2.57.170.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acJLznVzJqf6OS_oSZ1HcAAAAUM"]
[Tue Mar 24 16:31:11.151577 2026] [:error] [pid 64198:tid 64217] [client 2.57.170.174:52101] [client 2.57.170.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acJLz3VzJqf6OS_oSZ1HegAAAVE"]
[Tue Mar 24 16:31:11.734639 2026] [:error] [pid 3137:tid 3155] [client 2.57.170.185:63323] [client 2.57.170.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "acJLz5dZesutm6dfYM_jBAAAANA"]
[Tue Mar 24 16:31:12.350182 2026] [:error] [pid 3137:tid 3146] [client 2.57.170.59:54147] [client 2.57.170.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acJL0JdZesutm6dfYM_jCQAAAMc"]
[Tue Mar 24 16:31:12.964869 2026] [:error] [pid 38767:tid 38775] [client 2.57.170.209:51709] [client 2.57.170.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "acJL0PwkUqN4GJAI5oWkFAAAAQU"]
[Tue Mar 24 16:31:13.872679 2026] [:error] [pid 64198:tid 64207] [client 2.57.170.197:38625] [client 2.57.170.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "acJL0XVzJqf6OS_oSZ1HhQAAAUc"]
[Tue Mar 24 16:31:14.751721 2026] [:error] [pid 64198:tid 64204] [client 2.57.170.216:56067] [client 2.57.170.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/about.php"] [unique_id "acJL0nVzJqf6OS_oSZ1HigAAAUQ"]
[Tue Mar 24 16:31:16.231327 2026] [:error] [pid 64198:tid 64221] [client 2.57.170.201:59629] [client 2.57.170.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "acJL1HVzJqf6OS_oSZ1HkwAAAVU"]
[Tue Mar 24 16:31:16.859798 2026] [:error] [pid 38767:tid 38782] [client 2.57.170.194:20437] [client 2.57.170.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acJL1PwkUqN4GJAI5oWkIgAAAQw"]
[Tue Mar 24 16:31:17.491000 2026] [:error] [pid 3030:tid 3056] [client 2.57.170.215:54153] [client 2.57.170.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "acJL1QyOuILyynfcqflEWQAAAAc"]
[Tue Mar 24 16:31:18.079435 2026] [:error] [pid 38767:tid 38780] [client 2.57.170.203:45361] [client 2.57.170.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acJL1vwkUqN4GJAI5oWkKgAAAQo"]
[Tue Mar 24 16:31:18.667009 2026] [:error] [pid 3032:tid 3115] [client 2.57.170.203:49301] [client 2.57.170.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acJL1ia_-JXXD03-JNwzWAAAAIw"]
[Tue Mar 24 16:31:19.568772 2026] [:error] [pid 38767:tid 38790] [client 2.57.170.200:56299] [client 2.57.170.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.200, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-admin/wp-login.php"] [unique_id "acJL1_wkUqN4GJAI5oWkNAAAARQ"]
[Tue Mar 24 16:31:19.882345 2026] [:error] [pid 38767:tid 38778] [client 2.57.170.200:56299] [client 2.57.170.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "acJL1_wkUqN4GJAI5oWkNgAAAQg"]
[Tue Mar 24 16:31:20.477598 2026] [:error] [pid 64198:tid 64205] [client 2.57.170.172:20943] [client 2.57.170.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Text/index.php"] [unique_id "acJL2HVzJqf6OS_oSZ1HmAAAAUU"]
[Tue Mar 24 16:31:21.394002 2026] [:error] [pid 38767:tid 38789] [client 2.57.170.171:61581] [client 2.57.170.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "acJL2fwkUqN4GJAI5oWkXgAAARM"]
[Tue Mar 24 16:31:22.022861 2026] [:error] [pid 3137:tid 3158] [client 2.57.170.175:48965] [client 2.57.170.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/rk2.php"] [unique_id "acJL2pdZesutm6dfYM_jDAAAANM"]
[Tue Mar 24 16:31:23.113090 2026] [:error] [pid 64198:tid 64218] [client 2.57.170.172:29553] [client 2.57.170.172] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "www.pumpbooking.com"] [uri "/index.html"] [unique_id "acJL2nVzJqf6OS_oSZ1HzwAAAVI"]
[Tue Mar 24 16:31:23.428662 2026] [:error] [pid 64198:tid 64200] [client 2.57.170.172:29553] [client 2.57.170.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "acJL23VzJqf6OS_oSZ1H2gAAAUA"]
[Tue Mar 24 16:31:24.018433 2026] [:error] [pid 64198:tid 64207] [client 2.57.170.193:38785] [client 2.57.170.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/customize/about.php"] [unique_id "acJL3HVzJqf6OS_oSZ1H6wAAAUc"]
[Tue Mar 24 16:31:24.618059 2026] [:error] [pid 48219:tid 48297] [client 2.57.170.189:64413] [client 2.57.170.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "acJL3Chf3b4R_lAIyv9F2gAAAhA"]
[Tue Mar 24 16:31:25.850803 2026] [:error] [pid 48219:tid 48283] [client 2.57.170.175:42489] [client 2.57.170.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acJL3Shf3b4R_lAIyv9F3QAAAgI"]
[Tue Mar 24 16:31:26.432834 2026] [:error] [pid 48214:tid 48261] [client 2.57.170.182:54895] [client 2.57.170.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.182, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acJL3reshLWZ3uUDHKlErgAAAck"]
[Tue Mar 24 16:31:27.325259 2026] [:error] [pid 48214:tid 48259] [client 2.57.170.182:54895] [client 2.57.170.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "acJL37eshLWZ3uUDHKlEsQAAAcc"]
[Tue Mar 24 16:31:28.239015 2026] [:error] [pid 38767:tid 38771] [client 2.57.170.171:29339] [client 2.57.170.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "acJL4PwkUqN4GJAI5oWkyQAAAQE"]
[Tue Mar 24 16:31:29.485406 2026] [:error] [pid 3031:tid 3088] [client 2.57.170.192:63825] [client 2.57.170.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "acJL4aJBKytnG47nuiYjHgAAAEw"]
[Tue Mar 24 16:31:30.081476 2026] [:error] [pid 3137:tid 3151] [client 2.57.170.171:41989] [client 2.57.170.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "acJL4pdZesutm6dfYM_jHAAAAMw"]
[Tue Mar 24 16:31:32.277298 2026] [:error] [pid 3030:tid 3068] [client 2.57.170.207:56867] [client 2.57.170.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.170.207, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "acJL5AyOuILyynfcqflEYgAAABM"]
[Tue Mar 24 16:31:32.880523 2026] [:error] [pid 3030:tid 3058] [client 2.57.170.207:56867] [client 2.57.170.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/network.php"] [unique_id "acJL5AyOuILyynfcqflEZQAAAAk"]
[Tue Mar 24 16:31:34.406270 2026] [:error] [pid 3031:tid 3097] [client 2.57.170.175:45799] [client 2.57.170.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "acJL5qJBKytnG47nuiYjJgAAAFU"]
[Tue Mar 24 16:31:35.013117 2026] [:error] [pid 48219:tid 48303] [client 2.57.170.217:28579] [client 2.57.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "acJL5yhf3b4R_lAIyv9F7AAAAhY"]
[Tue Mar 24 16:31:36.388486 2026] [:error] [pid 48128:tid 48171] [client 2.57.170.187:53935] [client 2.57.170.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "acJL6MvR4LIMFLbM5VkiQQAAAZI"]
[Tue Mar 24 16:31:37.004900 2026] [:error] [pid 38767:tid 38783] [client 2.57.170.206:45685] [client 2.57.170.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "acJL6fwkUqN4GJAI5oWkzQAAAQ0"]
[Tue Mar 24 16:31:37.616625 2026] [:error] [pid 48214:tid 48261] [client 2.57.170.193:33405] [client 2.57.170.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "acJL6beshLWZ3uUDHKlEuQAAAck"]
[Tue Mar 24 16:31:39.165405 2026] [:error] [pid 64198:tid 64217] [client 2.57.170.180:54361] [client 2.57.170.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "acJL63VzJqf6OS_oSZ1IDAAAAVE"]
[Tue Mar 24 16:31:41.286879 2026] [:error] [pid 38767:tid 38789] [client 2.57.170.172:64871] [client 2.57.170.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/s/tinymce/skins/lightgray/fonts/index.php"] [unique_id "acJL7fwkUqN4GJAI5oWk4wAAARM"]
[Tue Mar 24 16:31:41.884438 2026] [:error] [pid 3030:tid 3049] [client 2.57.170.176:36763] [client 2.57.170.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "acJL7QyOuILyynfcqflEawAAAAA"]
[Tue Mar 24 16:31:42.489600 2026] [:error] [pid 64198:tid 64216] [client 2.57.170.199:48917] [client 2.57.170.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "acJL7nVzJqf6OS_oSZ1IDQAAAVA"]
[Tue Mar 24 16:31:43.380421 2026] [:error] [pid 3137:tid 3160] [client 2.57.170.208:50621] [client 2.57.170.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "acJL75dZesutm6dfYM_jTQAAANU"]
[Tue Mar 24 16:31:44.346304 2026] [:error] [pid 64198:tid 64208] [client 2.57.170.179:47253] [client 2.57.170.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "acJL8HVzJqf6OS_oSZ1IEQAAAUg"]
[Tue Mar 24 16:31:44.973311 2026] [:error] [pid 64198:tid 64219] [client 2.57.170.209:60781] [client 2.57.170.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "acJL8HVzJqf6OS_oSZ1IEgAAAVM"]
[Tue Mar 24 16:31:46.766326 2026] [:error] [pid 3031:tid 3084] [client 2.57.170.59:26735] [client 2.57.170.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "acJL8qJBKytnG47nuiYjNQAAAEg"]
[Tue Mar 24 16:31:47.367789 2026] [:error] [pid 48219:tid 48285] [client 2.57.170.203:29201] [client 2.57.170.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "acJL8yhf3b4R_lAIyv9F_wAAAgQ"]
[Tue Mar 24 16:31:47.954940 2026] [:error] [pid 48219:tid 48302] [client 2.57.170.195:41717] [client 2.57.170.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "acJL8yhf3b4R_lAIyv9GAQAAAhU"]
[Tue Mar 24 16:31:49.727497 2026] [:error] [pid 3137:tid 3157] [client 2.57.170.174:42293] [client 2.57.170.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "acJL9ZdZesutm6dfYM_jVQAAANI"]
[Tue Mar 24 16:31:50.328104 2026] [:error] [pid 64198:tid 64202] [client 2.57.170.219:62425] [client 2.57.170.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/pomo/pomo.php"] [unique_id "acJL9nVzJqf6OS_oSZ1IGQAAAUI"]
[Tue Mar 24 16:31:50.928294 2026] [:error] [pid 3032:tid 3123] [client 2.57.170.197:20503] [client 2.57.170.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.pumpbooking.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "acJL9ia_-JXXD03-JNwzawAAAJQ"]
[Tue Mar 24 18:06:33.300365 2026] [:error] [pid 64198:tid 64219] [client 170.106.161.78:57852] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acJiKXVzJqf6OS_oSZ12cgAAAVM"]
[Tue Mar 24 19:47:34.732087 2026] [:error] [pid 38767:tid 38777] [client 217.182.195.140:39580] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acJ51vwkUqN4GJAI5oUllQAAAQc"]
[Tue Mar 24 19:47:36.644034 2026] [:error] [pid 38767:tid 38785] [client 217.182.195.140:42016] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acJ52PwkUqN4GJAI5oUloAAAAQ8"]
[Tue Mar 24 19:47:38.735038 2026] [:error] [pid 48214:tid 48261] [client 217.182.195.140:42028] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acJ52reshLWZ3uUDHKlpFwAAAck"]
[Tue Mar 24 19:47:40.608972 2026] [:error] [pid 48219:tid 48281] [client 217.182.195.140:42036] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acJ53Chf3b4R_lAIyv95oQAAAgA"]
[Tue Mar 24 19:47:42.550146 2026] [:error] [pid 3137:tid 3151] [client 217.182.195.140:42038] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acJ53pdZesutm6dfYM8nMQAAAMw"]
[Tue Mar 24 19:47:44.473863 2026] [:error] [pid 48219:tid 48286] [client 217.182.195.140:42040] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acJ54Chf3b4R_lAIyv95qwAAAgU"]
[Tue Mar 24 19:47:46.490931 2026] [:error] [pid 3032:tid 3110] [client 217.182.195.140:55568] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acJ54ia_-JXXD03-JNxR5QAAAIc"]
[Tue Mar 24 19:47:48.520739 2026] [:error] [pid 3032:tid 3115] [client 217.182.195.140:55578] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acJ55Ca_-JXXD03-JNxR6QAAAIw"]
[Tue Mar 24 19:47:50.390538 2026] [:error] [pid 48128:tid 48158] [client 217.182.195.140:55584] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acJ55svR4LIMFLbM5Vk2KQAAAYc"]
[Tue Mar 24 19:47:52.350944 2026] [:error] [pid 64198:tid 64212] [client 217.182.195.140:55590] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acJ56HVzJqf6OS_oSZ2qjgAAAUw"]
[Tue Mar 24 19:47:54.116687 2026] [:error] [pid 48219:tid 48299] [client 217.182.195.140:55600] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acJ56ihf3b4R_lAIyv95ugAAAhI"]
[Tue Mar 24 19:47:56.044991 2026] [:error] [pid 3137:tid 3149] [client 217.182.195.140:43076] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acJ57JdZesutm6dfYM8nOwAAAMo"]
[Tue Mar 24 19:47:57.832788 2026] [:error] [pid 3137:tid 3143] [client 217.182.195.140:43080] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acJ57ZdZesutm6dfYM8nPgAAAMQ"]
[Tue Mar 24 19:47:59.805316 2026] [:error] [pid 64198:tid 64209] [client 217.182.195.140:43086] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acJ573VzJqf6OS_oSZ2qowAAAUk"]
[Tue Mar 24 19:48:01.823933 2026] [:error] [pid 48219:tid 48291] [client 217.182.195.140:43092] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acJ58Shf3b4R_lAIyv950AAAAgo"]
[Tue Mar 24 19:48:03.675083 2026] [:error] [pid 48219:tid 48285] [client 217.182.195.140:43106] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acJ58yhf3b4R_lAIyv959gAAAgQ"]
[Tue Mar 24 19:48:05.621938 2026] [:error] [pid 64198:tid 64200] [client 217.182.195.140:39468] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acJ59XVzJqf6OS_oSZ2qrgAAAUA"]
[Tue Mar 24 19:48:07.542996 2026] [:error] [pid 64198:tid 64214] [client 217.182.195.140:39472] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acJ593VzJqf6OS_oSZ2qswAAAU4"]
[Tue Mar 24 19:48:09.636638 2026] [:error] [pid 48219:tid 48282] [client 217.182.195.140:39474] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acJ5-Shf3b4R_lAIyv96GgAAAgE"]
[Tue Mar 24 19:48:11.513600 2026] [:error] [pid 3137:tid 3159] [client 217.182.195.140:39490] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acJ5-5dZesutm6dfYM8nZAAAANQ"]
[Tue Mar 24 19:48:13.548998 2026] [:error] [pid 48219:tid 48301] [client 217.182.195.140:39506] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acJ5_Shf3b4R_lAIyv96IgAAAhQ"]
[Tue Mar 24 19:48:15.408615 2026] [:error] [pid 48219:tid 48300] [client 217.182.195.140:33538] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acJ5_yhf3b4R_lAIyv96JQAAAhM"]
[Tue Mar 24 19:48:19.065503 2026] [:error] [pid 48219:tid 48305] [client 217.182.195.140:33546] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acJ6Ayhf3b4R_lAIyv96KgAAAhg"]
[Tue Mar 24 19:48:22.979105 2026] [:error] [pid 3030:tid 3060] [client 217.182.195.140:33560] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acJ6BgyOuILyynfcqflbjQAAAAs"]
[Tue Mar 24 20:08:51.299320 2026] [:error] [pid 48214:tid 48275] [client 192.144.148.122:47688] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acJ-07eshLWZ3uUDHKlrsAAAAdc"]
[Tue Mar 24 23:24:25.838107 2026] [:error] [pid 38767:tid 38784] [client 217.164.36.253:63554] [client 217.164.36.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.164.36.253, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acKsqfwkUqN4GJAI5oV6xwAAAQ4"]
[Tue Mar 24 23:24:25.842715 2026] [:error] [pid 38767:tid 38784] [client 217.164.36.253:63554] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 23:30:44.383433 2026] [:error] [pid 3032:tid 3116] [client 43.153.74.75:59446] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acKuJCa_-JXXD03-JNxtVgAAAI0"]
[Wed Mar 25 00:17:05.371430 2026] [:error] [pid 38767:tid 38776] [client 217.182.195.233:33708] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acK5AfwkUqN4GJAI5oWTRQAAAQY"]
[Wed Mar 25 00:17:07.406020 2026] [:error] [pid 3137:tid 3141] [client 217.182.195.233:45262] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acK5A5dZesutm6dfYM-HGwAAAMI"]
[Wed Mar 25 00:17:10.120475 2026] [:error] [pid 3137:tid 3158] [client 217.182.195.233:45272] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acK5BpdZesutm6dfYM-HKwAAANM"]
[Wed Mar 25 00:17:12.215355 2026] [:error] [pid 3137:tid 3142] [client 217.182.195.233:36824] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acK5CJdZesutm6dfYM-HMwAAAMM"]
[Wed Mar 25 00:17:14.104866 2026] [:error] [pid 3137:tid 3162] [client 217.182.195.233:36830] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acK5CpdZesutm6dfYM-HNQAAANc"]
[Wed Mar 25 00:17:16.401331 2026] [:error] [pid 64198:tid 64217] [client 217.182.195.233:36834] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acK5DHVzJqf6OS_oSZ0AQwAAAVE"]
[Wed Mar 25 00:17:18.392022 2026] [:error] [pid 48219:tid 48283] [client 217.182.195.233:36850] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acK5Dihf3b4R_lAIyv-xjQAAAgI"]
[Wed Mar 25 00:17:20.549198 2026] [:error] [pid 3137:tid 3151] [client 217.182.195.233:36074] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acK5EJdZesutm6dfYM-HRgAAAMw"]
[Wed Mar 25 00:17:22.727139 2026] [:error] [pid 48219:tid 48294] [client 217.182.195.233:36090] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acK5Eihf3b4R_lAIyv-xjwAAAg0"]
[Wed Mar 25 00:27:03.843332 2026] [:error] [pid 57711:tid 58071] [client 20.48.232.178:39922] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acK7V6LdPFdeRRktTdNIKAAAAJE"]
[Wed Mar 25 00:27:04.395194 2026] [:error] [pid 57703:tid 58022] [client 20.48.232.178:39817] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acK7WPIVQxDtjkklWGZKwwAAAEM"]
[Wed Mar 25 00:27:04.813892 2026] [:error] [pid 57703:tid 58042] [client 20.48.232.178:39905] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acK7WPIVQxDtjkklWGZKxAAAAFc"]
[Wed Mar 25 00:27:05.370456 2026] [:error] [pid 57702:tid 57909] [client 20.48.232.178:39928] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acK7WaS8TU_xcQFvlnbvTQAAAAY"]
[Wed Mar 25 01:09:41.880915 2026] [:error] [pid 57702:tid 57925] [client 101.132.184.223:55504] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/plus/img/df_dedetitle.gif"] [unique_id "acLFVaS8TU_xcQFvlnYBbQAAABY"], referer: https://www.pumpbooking.com/plus/img/df_dedetitle.gif
[Wed Mar 25 01:09:50.170499 2026] [:error] [pid 20371:tid 20386] [client 101.132.184.223:38602] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/include/ckeditor/plugins/smiley/images/angel_smile.gif"] [unique_id "acLFXub25OL4yTv2fF93PwAAAQ0"], referer: https://www.pumpbooking.com/include/ckeditor/plugins/smiley/images/angel_smile.gif
[Wed Mar 25 01:09:50.903384 2026] [:error] [pid 57702:tid 57906] [client 101.132.184.223:38684] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plus/img/df_dedetitle.gif"] [unique_id "acLFXqS8TU_xcQFvlnYBtgAAAAM"], referer: https://pumpbooking.com/plus/img/df_dedetitle.gif
[Wed Mar 25 01:09:51.127528 2026] [:error] [pid 20371:tid 20383] [client 101.132.184.223:60186] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/plus/img/df_dedetitle.gif"] [unique_id "acLFX-b25OL4yTv2fF93RAAAAQo"], referer: http://www.pumpbooking.com/plus/img/df_dedetitle.gif
[Wed Mar 25 01:09:52.039704 2026] [:error] [pid 57703:tid 58037] [client 101.132.184.223:57166] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/include/ckeditor/plugins/smiley/images/angel_smile.gif"] [unique_id "acLFYPIVQxDtjkklWGZWbQAAAFI"], referer: https://pumpbooking.com/include/ckeditor/plugins/smiley/images/angel_smile.gif
[Wed Mar 25 01:09:53.506563 2026] [:error] [pid 57702:tid 57913] [client 101.132.184.223:60258] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/plus/img/df_dedetitle.gif"] [unique_id "acLFYaS8TU_xcQFvlnYBxwAAAAo"], referer: http://pumpbooking.com/plus/img/df_dedetitle.gif
[Wed Mar 25 01:09:53.637883 2026] [:error] [pid 57711:tid 58054] [client 101.132.184.223:60240] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/include/ckeditor/plugins/smiley/images/angel_smile.gif"] [unique_id "acLFYaLdPFdeRRktTdNXswAAAIM"], referer: http://www.pumpbooking.com/include/ckeditor/plugins/smiley/images/angel_smile.gif
[Wed Mar 25 01:09:57.608309 2026] [:error] [pid 57702:tid 57921] [client 101.132.184.223:60280] [client 101.132.184.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/include/ckeditor/plugins/smiley/images/angel_smile.gif"] [unique_id "acLFZaS8TU_xcQFvlnYB1gAAABI"], referer: http://pumpbooking.com/include/ckeditor/plugins/smiley/images/angel_smile.gif
[Wed Mar 25 01:23:24.001759 2026] [:error] [pid 57703:tid 58043] [client 81.162.80.35:56186] [client 81.162.80.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.162.80.35, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acLIjPIVQxDtjkklWGZaBwAAAFg"]
[Wed Mar 25 01:23:24.008755 2026] [:error] [pid 57703:tid 58043] [client 81.162.80.35:56186] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 01:23:27.677411 2026] [:error] [pid 57703:tid 58029] [client 81.162.80.35:56306] [client 81.162.80.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.162.80.35, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acLIj_IVQxDtjkklWGZaFgAAAEo"]
[Wed Mar 25 01:23:27.682345 2026] [:error] [pid 57703:tid 58029] [client 81.162.80.35:56306] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 03:25:49.901658 2026] [:error] [pid 62428:tid 62479] [client 195.178.110.39:56626] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.swp"] [unique_id "acLlPfhIU_wsjNikOwwykwAAABQ"]
[Wed Mar 25 03:28:00.047884 2026] [:error] [pid 62553:tid 62569] [client 195.178.110.39:53730] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.sample"] [unique_id "acLlwH4kQqQ2ArQuHmVPSgAAAM4"]
[Wed Mar 25 03:29:44.252741 2026] [:error] [pid 62440:tid 62533] [client 195.178.110.39:41436] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/config.json.old"] [unique_id "acLmKJNuR8WSMMjoI-7IkQAAAJQ"]
[Wed Mar 25 03:30:02.548506 2026] [:error] [pid 62553:tid 62570] [client 195.178.110.39:37076] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/api/v4/projects/1/repository/files/.env/raw"] [unique_id "acLmOn4kQqQ2ArQuHmVP-AAAAM8"]
[Wed Mar 25 03:34:33.030342 2026] [:error] [pid 62428:tid 62461] [client 195.178.110.39:43402] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".yml.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/config.yml.old"] [unique_id "acLnSfhIU_wsjNikOwwztwAAAAI"]
[Wed Mar 25 03:42:49.122895 2026] [:error] [pid 35650:tid 35666] [client 195.178.110.39:60352] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed Mar 25 03:44:30.532494 2026] [:error] [pid 892:tid 909] [client 195.178.110.39:38622] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.txt"] [unique_id "acLpniT_G8WMU3T3yxrongAAAMs"]
[Wed Mar 25 03:51:30.970141 2026] [:error] [pid 754:tid 786] [client 195.178.110.39:46928] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Wed Mar 25 04:00:24.334386 2026] [authz_host:error] [pid 755:tid 836] [client 195.178.110.39:39500] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Wed Mar 25 04:00:24.334446 2026] [authz_core:error] [pid 755:tid 836] [client 195.178.110.39:39500] AH01630: client denied by server configuration: /usr/local/apache/htdocs/suspended-page/server-status
[Wed Mar 25 04:04:19.118263 2026] [:error] [pid 756:tid 873] [client 51.161.84.110:49878] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "acLuQzOaW6oylMIDBCRSQQAAAJU"]
[Wed Mar 25 04:04:19.289281 2026] [:error] [pid 756:tid 867] [client 51.161.84.110:35256] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuQzOaW6oylMIDBCRSQgAAAI8"]
[Wed Mar 25 04:04:19.868585 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:49838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLuQyT_G8WMU3T3yxr2fgAAANI"]
[Wed Mar 25 04:04:19.942695 2026] [:error] [pid 754:tid 786] [client 51.161.84.110:49826] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLuQzisL3asPbA3Ctif2AAAABU"]
[Wed Mar 25 04:04:19.998638 2026] [:error] [pid 892:tid 919] [client 51.161.84.110:49848] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLuQyT_G8WMU3T3yxr2fwAAANQ"]
[Wed Mar 25 04:04:20.489480 2026] [:error] [pid 756:tid 876] [client 51.161.84.110:49874] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLuRDOaW6oylMIDBCRSRgAAAJg"]
[Wed Mar 25 04:04:21.031459 2026] [:error] [pid 892:tid 905] [client 51.161.84.110:35268] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLuRST_G8WMU3T3yxr2hgAAAMc"]
[Wed Mar 25 04:04:21.747889 2026] [:error] [pid 892:tid 894] [client 51.161.84.110:35284] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLuRST_G8WMU3T3yxr2jAAAAMA"]
[Wed Mar 25 04:04:21.791812 2026] [:error] [pid 892:tid 923] [client 51.161.84.110:35286] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLuRST_G8WMU3T3yxr2jQAAANg"]
[Wed Mar 25 04:04:21.811498 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:35296] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLuRST_G8WMU3T3yxr2jgAAAMo"]
[Wed Mar 25 04:04:22.310915 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:35308] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLuRiT_G8WMU3T3yxr2kgAAAMU"]
[Wed Mar 25 04:04:22.948868 2026] [:error] [pid 892:tid 911] [client 51.161.84.110:35316] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLuRiT_G8WMU3T3yxr2lAAAAM0"]
[Wed Mar 25 04:04:23.397029 2026] [:error] [pid 754:tid 782] [client 51.161.84.110:35318] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuRzisL3asPbA3Ctif3gAAABE"]
[Wed Mar 25 04:04:23.534579 2026] [:error] [pid 754:tid 776] [client 51.161.84.110:35322] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLuRzisL3asPbA3Ctif3wAAAAs"]
[Wed Mar 25 04:04:23.689385 2026] [:error] [pid 756:tid 853] [client 51.161.84.110:35338] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLuRzOaW6oylMIDBCRSSwAAAIM"]
[Wed Mar 25 04:04:23.753850 2026] [:error] [pid 755:tid 826] [client 51.161.84.110:35342] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLuR6S6bdaeEwgCGwoXoQAAAEs"]
[Wed Mar 25 04:04:24.313383 2026] [:error] [pid 755:tid 818] [client 51.161.84.110:35346] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLuSKS6bdaeEwgCGwoXpAAAAEU"]
[Wed Mar 25 04:04:24.684976 2026] [:error] [pid 755:tid 842] [client 51.161.84.110:35348] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLuSKS6bdaeEwgCGwoXpgAAAFM"]
[Wed Mar 25 04:04:25.470436 2026] [:error] [pid 892:tid 907] [client 51.161.84.110:35352] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLuSST_G8WMU3T3yxr2ngAAAMk"]
[Wed Mar 25 04:04:25.557421 2026] [:error] [pid 892:tid 914] [client 51.161.84.110:35360] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLuSST_G8WMU3T3yxr2nwAAANA"]
[Wed Mar 25 04:04:25.590405 2026] [:error] [pid 892:tid 920] [client 51.161.84.110:35362] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLuSST_G8WMU3T3yxr2oAAAANU"]
[Wed Mar 25 04:04:25.641096 2026] [:error] [pid 892:tid 918] [client 51.161.84.110:35378] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLuSST_G8WMU3T3yxr2ogAAANM"]
[Wed Mar 25 04:04:26.125568 2026] [:error] [pid 754:tid 780] [client 51.161.84.110:35388] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLuSjisL3asPbA3Ctif5AAAAA8"]
[Wed Mar 25 04:04:26.849922 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:35396] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLuSiT_G8WMU3T3yxr2pgAAAMU"]
[Wed Mar 25 04:04:27.311150 2026] [:error] [pid 755:tid 840] [client 51.161.84.110:35412] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLuS6S6bdaeEwgCGwoXqAAAAFE"]
[Wed Mar 25 04:04:27.453449 2026] [:error] [pid 754:tid 777] [client 51.161.84.110:35422] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLuSzisL3asPbA3Ctif5QAAAAw"]
[Wed Mar 25 04:04:27.498524 2026] [:error] [pid 754:tid 767] [client 51.161.84.110:35436] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLuSzisL3asPbA3Ctif5gAAAAI"]
[Wed Mar 25 04:04:27.556053 2026] [:error] [pid 754:tid 769] [client 51.161.84.110:35450] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLuSzisL3asPbA3Ctif5wAAAAQ"]
[Wed Mar 25 04:04:27.968169 2026] [:error] [pid 754:tid 771] [client 51.161.84.110:35460] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLuSzisL3asPbA3Ctif6gAAAAY"]
[Wed Mar 25 04:04:29.170988 2026] [:error] [pid 892:tid 904] [client 51.161.84.110:35476] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLuTST_G8WMU3T3yxr2sQAAAMY"]
[Wed Mar 25 04:04:29.405314 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:34266] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLuTST_G8WMU3T3yxr2tAAAAMU"]
[Wed Mar 25 04:04:29.547855 2026] [:error] [pid 892:tid 901] [client 51.161.84.110:34282] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLuTST_G8WMU3T3yxr2tgAAAMQ"]
[Wed Mar 25 04:04:29.637490 2026] [:error] [pid 754:tid 773] [client 51.161.84.110:34294] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLuTTisL3asPbA3Ctif7QAAAAg"]
[Wed Mar 25 04:04:29.946065 2026] [:error] [pid 756:tid 865] [client 51.161.84.110:34304] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLuTTOaW6oylMIDBCRSUQAAAI0"]
[Wed Mar 25 04:04:31.206985 2026] [:error] [pid 755:tid 826] [client 51.161.84.110:34306] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acLuT6S6bdaeEwgCGwoXqwAAAEs"]
[Wed Mar 25 04:04:31.411375 2026] [:error] [pid 892:tid 894] [client 51.161.84.110:34308] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acLuTyT_G8WMU3T3yxr2ugAAAMA"]
[Wed Mar 25 04:04:31.432060 2026] [:error] [pid 756:tid 866] [client 51.161.84.110:34318] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acLuTzOaW6oylMIDBCRSVAAAAI4"]
[Wed Mar 25 04:04:31.491485 2026] [:error] [pid 756:tid 875] [client 51.161.84.110:34330] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLuTzOaW6oylMIDBCRSVgAAAJc"]
[Wed Mar 25 04:04:32.041308 2026] [:error] [pid 754:tid 786] [client 51.161.84.110:34336] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLuUDisL3asPbA3Ctif8wAAABU"]
[Wed Mar 25 04:04:32.982097 2026] [:error] [pid 756:tid 864] [client 51.161.84.110:34340] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acLuUDOaW6oylMIDBCRSWgAAAIw"]
[Wed Mar 25 04:04:33.277555 2026] [:error] [pid 892:tid 911] [client 51.161.84.110:34356] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acLuUST_G8WMU3T3yxr2vgAAAM0"]
[Wed Mar 25 04:04:33.463149 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:34372] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acLuUST_G8WMU3T3yxr2wAAAAMo"]
[Wed Mar 25 04:04:34.137374 2026] [:error] [pid 756:tid 867] [client 51.161.84.110:34380] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLuUjOaW6oylMIDBCRSXgAAAI8"]
[Wed Mar 25 04:04:35.182497 2026] [:error] [pid 756:tid 875] [client 51.161.84.110:34384] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acLuUzOaW6oylMIDBCRSYgAAAJc"]
[Wed Mar 25 04:04:35.274280 2026] [:error] [pid 756:tid 868] [client 51.161.84.110:34388] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLuUzOaW6oylMIDBCRSZAAAAJA"]
[Wed Mar 25 04:04:36.591299 2026] [:error] [pid 754:tid 768] [client 51.161.84.110:34396] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLuVDisL3asPbA3Ctif_AAAAAM"]
[Wed Mar 25 04:04:36.745503 2026] [:error] [pid 754:tid 778] [client 51.161.84.110:34400] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acLuVDisL3asPbA3Ctif_gAAAA0"]
[Wed Mar 25 04:04:37.043970 2026] [:error] [pid 756:tid 867] [client 51.161.84.110:34406] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLuVTOaW6oylMIDBCRSZwAAAI8"]
[Wed Mar 25 04:04:37.362315 2026] [:error] [pid 754:tid 780] [client 51.161.84.110:34414] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLuVTisL3asPbA3CtigAAAAAA8"]
[Wed Mar 25 04:04:37.857600 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:34416] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLuVST_G8WMU3T3yxr2ygAAAMU"]
[Wed Mar 25 04:04:38.621979 2026] [:error] [pid 892:tid 920] [client 51.161.84.110:34426] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLuViT_G8WMU3T3yxr2zQAAANU"]
[Wed Mar 25 04:04:38.846158 2026] [:error] [pid 892:tid 899] [client 51.161.84.110:34442] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLuViT_G8WMU3T3yxr2zwAAAMM"]
[Wed Mar 25 04:04:38.973329 2026] [:error] [pid 756:tid 853] [client 51.161.84.110:34448] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLuVjOaW6oylMIDBCRScAAAAIM"]
[Wed Mar 25 04:04:39.474135 2026] [:error] [pid 756:tid 867] [client 51.161.84.110:46302] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLuVzOaW6oylMIDBCRScQAAAI8"]
[Wed Mar 25 04:04:40.463509 2026] [:error] [pid 892:tid 896] [client 51.161.84.110:46316] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acLuWCT_G8WMU3T3yxr21QAAAMI"]
[Wed Mar 25 04:04:40.577458 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:46328] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLuWCT_G8WMU3T3yxr21gAAAMU"]
[Wed Mar 25 04:04:40.896852 2026] [:error] [pid 892:tid 907] [client 51.161.84.110:46332] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLuWCT_G8WMU3T3yxr22AAAAMk"]
[Wed Mar 25 04:04:41.160034 2026] [:error] [pid 755:tid 823] [client 51.161.84.110:46340] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLuWaS6bdaeEwgCGwoXrQAAAEg"]
[Wed Mar 25 04:04:41.903134 2026] [:error] [pid 892:tid 921] [client 51.161.84.110:46344] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLuWST_G8WMU3T3yxr23AAAANY"]
[Wed Mar 25 04:04:42.398174 2026] [:error] [pid 892:tid 896] [client 51.161.84.110:46352] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acLuWiT_G8WMU3T3yxr24QAAAMI"]
[Wed Mar 25 04:04:42.487226 2026] [:error] [pid 892:tid 913] [client 51.161.84.110:46356] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLuWiT_G8WMU3T3yxr25AAAAM8"]
[Wed Mar 25 04:04:42.997360 2026] [:error] [pid 892:tid 919] [client 51.161.84.110:46366] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLuWiT_G8WMU3T3yxr25gAAANQ"]
[Wed Mar 25 04:04:44.545945 2026] [:error] [pid 755:tid 807] [client 51.161.84.110:46372] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLuXKS6bdaeEwgCGwoXsQAAAEI"]
[Wed Mar 25 04:04:44.597494 2026] [:error] [pid 755:tid 821] [client 51.161.84.110:46378] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLuXKS6bdaeEwgCGwoXsgAAAEY"]
[Wed Mar 25 04:04:44.943697 2026] [:error] [pid 754:tid 783] [client 51.161.84.110:46380] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLuXDisL3asPbA3CtigCAAAABI"]
[Wed Mar 25 04:04:45.132995 2026] [:error] [pid 754:tid 786] [client 51.161.84.110:46382] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLuXTisL3asPbA3CtigCQAAABU"]
[Wed Mar 25 04:04:46.378305 2026] [:error] [pid 754:tid 773] [client 51.161.84.110:46388] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLuXjisL3asPbA3CtigDgAAAAg"]
[Wed Mar 25 04:04:46.708008 2026] [:error] [pid 754:tid 785] [client 51.161.84.110:46394] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLuXjisL3asPbA3CtigDwAAABQ"]
[Wed Mar 25 04:04:47.236055 2026] [:error] [pid 892:tid 913] [client 51.161.84.110:46410] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLuXyT_G8WMU3T3yxr27wAAAM8"]
[Wed Mar 25 04:04:47.321540 2026] [:error] [pid 892:tid 912] [client 51.161.84.110:46402] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLuXyT_G8WMU3T3yxr28AAAAM4"]
[Wed Mar 25 04:04:48.409663 2026] [:error] [pid 892:tid 918] [client 51.161.84.110:46420] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLuYCT_G8WMU3T3yxr29AAAANM"]
[Wed Mar 25 04:04:48.665431 2026] [:error] [pid 892:tid 911] [client 51.161.84.110:46426] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLuYCT_G8WMU3T3yxr29wAAAM0"]
[Wed Mar 25 04:04:49.734951 2026] [:error] [pid 754:tid 766] [client 51.161.84.110:47314] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLuYTisL3asPbA3CtigFwAAAAE"]
[Wed Mar 25 04:04:49.899560 2026] [:error] [pid 755:tid 825] [client 51.161.84.110:47322] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLuYaS6bdaeEwgCGwoXtAAAAEo"]
[Wed Mar 25 04:04:50.323615 2026] [:error] [pid 755:tid 822] [client 51.161.84.110:47336] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLuYqS6bdaeEwgCGwoXtgAAAEc"]
[Wed Mar 25 04:04:51.243092 2026] [:error] [pid 755:tid 824] [client 51.161.84.110:47344] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLuY6S6bdaeEwgCGwoXuAAAAEk"]
[Wed Mar 25 04:04:52.072364 2026] [:error] [pid 756:tid 859] [client 51.161.84.110:47358] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLuZDOaW6oylMIDBCRSlgAAAIc"]
[Wed Mar 25 04:04:52.197500 2026] [:error] [pid 756:tid 871] [client 51.161.84.110:47360] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLuZDOaW6oylMIDBCRSlwAAAJM"]
[Wed Mar 25 04:04:52.689310 2026] [:error] [pid 754:tid 766] [client 51.161.84.110:47362] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLuZDisL3asPbA3CtigJgAAAAE"]
[Wed Mar 25 04:04:52.820534 2026] [:error] [pid 755:tid 818] [client 51.161.84.110:47366] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLuZKS6bdaeEwgCGwoXuwAAAEU"]
[Wed Mar 25 04:04:53.097169 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:47378] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLuZST_G8WMU3T3yxr2_gAAAMo"]
[Wed Mar 25 04:04:54.762596 2026] [:error] [pid 892:tid 905] [client 51.161.84.110:47382] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLuZiT_G8WMU3T3yxr3AgAAAMc"]
[Wed Mar 25 04:04:54.763658 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:47394] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLuZiT_G8WMU3T3yxr3AwAAANI"]
[Wed Mar 25 04:04:54.880289 2026] [:error] [pid 892:tid 895] [client 51.161.84.110:47406] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLuZiT_G8WMU3T3yxr3BAAAAME"]
[Wed Mar 25 04:04:55.108568 2026] [:error] [pid 892:tid 909] [client 51.161.84.110:47414] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLuZyT_G8WMU3T3yxr3BQAAAMs"]
[Wed Mar 25 04:04:55.168038 2026] [:error] [pid 892:tid 901] [client 51.161.84.110:47428] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLuZyT_G8WMU3T3yxr3CAAAAMQ"]
[Wed Mar 25 04:04:56.183535 2026] [:error] [pid 754:tid 772] [client 51.161.84.110:47442] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuaDisL3asPbA3CtigNAAAAAc"]
[Wed Mar 25 04:04:56.788994 2026] [:error] [pid 892:tid 896] [client 51.161.84.110:47444] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLuaCT_G8WMU3T3yxr3FAAAAMI"]
[Wed Mar 25 04:04:56.893006 2026] [:error] [pid 754:tid 783] [client 51.161.84.110:47446] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLuaDisL3asPbA3CtigOQAAABI"]
[Wed Mar 25 04:04:56.988703 2026] [:error] [pid 756:tid 864] [client 51.161.84.110:47454] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLuaDOaW6oylMIDBCRSnQAAAIw"]
[Wed Mar 25 04:04:57.191111 2026] [:error] [pid 756:tid 865] [client 51.161.84.110:47466] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLuaTOaW6oylMIDBCRSngAAAI0"]
[Wed Mar 25 04:04:57.537109 2026] [:error] [pid 756:tid 862] [client 51.161.84.110:47470] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLuaTOaW6oylMIDBCRSogAAAIo"]
[Wed Mar 25 04:04:58.744553 2026] [:error] [pid 756:tid 866] [client 51.161.84.110:47480] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLuajOaW6oylMIDBCRSpQAAAI4"]
[Wed Mar 25 04:04:58.811021 2026] [:error] [pid 756:tid 871] [client 51.161.84.110:47484] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLuajOaW6oylMIDBCRSpgAAAJM"]
[Wed Mar 25 04:04:59.039060 2026] [:error] [pid 756:tid 857] [client 51.161.84.110:47490] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLuazOaW6oylMIDBCRSpwAAAIU"]
[Wed Mar 25 04:04:59.059118 2026] [:error] [pid 756:tid 863] [client 51.161.84.110:47506] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLuazOaW6oylMIDBCRSqAAAAIs"]
[Wed Mar 25 04:04:59.254051 2026] [:error] [pid 755:tid 835] [client 51.161.84.110:47510] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLua6S6bdaeEwgCGwoXxAAAAEw"]
[Wed Mar 25 04:05:00.025758 2026] [:error] [pid 756:tid 873] [client 51.161.84.110:47014] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLubDOaW6oylMIDBCRSrgAAAJU"]
[Wed Mar 25 04:05:00.472932 2026] [:error] [pid 756:tid 869] [client 51.161.84.110:47024] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLubDOaW6oylMIDBCRSswAAAJE"]
[Wed Mar 25 04:05:01.175581 2026] [:error] [pid 892:tid 909] [client 51.161.84.110:47028] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLubST_G8WMU3T3yxr3HgAAAMs"]
[Wed Mar 25 04:05:01.212017 2026] [:error] [pid 892:tid 895] [client 51.161.84.110:47036] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLubST_G8WMU3T3yxr3HwAAAME"]
[Wed Mar 25 04:05:01.626220 2026] [:error] [pid 756:tid 856] [client 51.161.84.110:47044] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLubTOaW6oylMIDBCRStgAAAIQ"]
[Wed Mar 25 04:05:01.758785 2026] [:error] [pid 892:tid 901] [client 51.161.84.110:47058] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLubST_G8WMU3T3yxr3IQAAAMQ"]
[Wed Mar 25 04:05:02.260886 2026] [:error] [pid 755:tid 847] [client 51.161.84.110:47068] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLubqS6bdaeEwgCGwoXxQAAAFg"]
[Wed Mar 25 04:05:03.138579 2026] [:error] [pid 754:tid 788] [client 51.161.84.110:47084] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLubzisL3asPbA3CtigUwAAABc"]
[Wed Mar 25 04:05:03.337983 2026] [:error] [pid 754:tid 765] [client 51.161.84.110:47094] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLubzisL3asPbA3CtigVAAAAAA"]
[Wed Mar 25 04:05:03.613112 2026] [:error] [pid 755:tid 846] [client 51.161.84.110:47098] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLub6S6bdaeEwgCGwoXyAAAAFc"]
[Wed Mar 25 04:05:03.696682 2026] [:error] [pid 754:tid 767] [client 51.161.84.110:47100] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLubzisL3asPbA3CtigWAAAAAI"]
[Wed Mar 25 04:05:04.127597 2026] [:error] [pid 892:tid 922] [client 51.161.84.110:47116] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLucCT_G8WMU3T3yxr3KQAAANc"]
[Wed Mar 25 04:05:05.248903 2026] [:error] [pid 755:tid 822] [client 51.161.84.110:47124] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLucaS6bdaeEwgCGwoX0AAAAEc"]
[Wed Mar 25 04:05:05.507663 2026] [:error] [pid 755:tid 838] [client 51.161.84.110:47126] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLucaS6bdaeEwgCGwoX0QAAAE8"]
[Wed Mar 25 04:05:05.694862 2026] [:error] [pid 756:tid 866] [client 51.161.84.110:47138] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLucTOaW6oylMIDBCRSvAAAAI4"]
[Wed Mar 25 04:05:05.877753 2026] [:error] [pid 756:tid 863] [client 51.161.84.110:47140] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLucTOaW6oylMIDBCRSvgAAAIs"]
[Wed Mar 25 04:05:06.001316 2026] [:error] [pid 755:tid 826] [client 51.161.84.110:47148] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLucqS6bdaeEwgCGwoX0wAAAEs"]
[Wed Mar 25 04:05:07.144576 2026] [:error] [pid 756:tid 860] [client 51.161.84.110:47152] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLuczOaW6oylMIDBCRSwwAAAIg"]
[Wed Mar 25 04:05:07.310696 2026] [:error] [pid 756:tid 865] [client 51.161.84.110:47162] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLuczOaW6oylMIDBCRSxAAAAI0"]
[Wed Mar 25 04:05:07.534901 2026] [:error] [pid 754:tid 789] [client 51.161.84.110:47178] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLuczisL3asPbA3CtigYwAAABg"]
[Wed Mar 25 04:05:07.755119 2026] [:error] [pid 755:tid 845] [client 51.161.84.110:47182] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLuc6S6bdaeEwgCGwoX1QAAAFY"]
[Wed Mar 25 04:05:07.813790 2026] [:error] [pid 756:tid 853] [client 51.161.84.110:47194] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLuczOaW6oylMIDBCRSxgAAAIM"]
[Wed Mar 25 04:05:09.371295 2026] [:error] [pid 755:tid 808] [client 51.161.84.110:46152] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLudaS6bdaeEwgCGwoX3QAAAEM"]
[Wed Mar 25 04:05:09.443280 2026] [:error] [pid 892:tid 905] [client 51.161.84.110:46166] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLudST_G8WMU3T3yxr3NwAAAMc"]
[Wed Mar 25 04:05:09.605311 2026] [:error] [pid 892:tid 918] [client 51.161.84.110:46170] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acLudST_G8WMU3T3yxr3OAAAANM"]
[Wed Mar 25 04:05:09.642326 2026] [:error] [pid 756:tid 868] [client 51.161.84.110:46174] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLudTOaW6oylMIDBCRS0AAAAJA"]
[Wed Mar 25 04:05:09.720948 2026] [:error] [pid 756:tid 873] [client 51.161.84.110:46180] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acLudTOaW6oylMIDBCRS0gAAAJU"]
[Wed Mar 25 04:05:11.401792 2026] [:error] [pid 756:tid 861] [client 51.161.84.110:46190] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLudzOaW6oylMIDBCRS3wAAAIk"]
[Wed Mar 25 04:05:11.509676 2026] [:error] [pid 756:tid 874] [client 51.161.84.110:46206] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acLudzOaW6oylMIDBCRS4AAAAJY"]
[Wed Mar 25 04:05:11.620671 2026] [:error] [pid 756:tid 857] [client 51.161.84.110:46222] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLudzOaW6oylMIDBCRS4wAAAIU"]
[Wed Mar 25 04:05:11.642154 2026] [:error] [pid 756:tid 876] [client 51.161.84.110:46234] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLudzOaW6oylMIDBCRS5AAAAJg"]
[Wed Mar 25 04:05:11.883696 2026] [:error] [pid 892:tid 920] [client 51.161.84.110:46250] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acLudyT_G8WMU3T3yxr3OwAAANU"]
[Wed Mar 25 04:05:13.384161 2026] [:error] [pid 755:tid 823] [client 51.161.84.110:46260] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLueaS6bdaeEwgCGwoX4QAAAEg"]
[Wed Mar 25 04:05:13.559308 2026] [:error] [pid 756:tid 871] [client 51.161.84.110:46272] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acLueTOaW6oylMIDBCRS6wAAAJM"]
[Wed Mar 25 04:05:13.777695 2026] [:error] [pid 755:tid 806] [client 51.161.84.110:46288] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acLueaS6bdaeEwgCGwoX4gAAAEE"]
[Wed Mar 25 04:05:13.856214 2026] [:error] [pid 755:tid 843] [client 51.161.84.110:46292] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acLueaS6bdaeEwgCGwoX5QAAAFQ"]
[Wed Mar 25 04:05:14.417119 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:46294] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLueiT_G8WMU3T3yxr3QQAAAMo"]
[Wed Mar 25 04:05:15.341698 2026] [:error] [pid 892:tid 910] [client 51.161.84.110:46306] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acLueyT_G8WMU3T3yxr3RAAAAMw"]
[Wed Mar 25 04:05:15.399468 2026] [:error] [pid 892:tid 894] [client 51.161.84.110:46318] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLueyT_G8WMU3T3yxr3RgAAAMA"]
[Wed Mar 25 04:05:15.824385 2026] [:error] [pid 892:tid 913] [client 51.161.84.110:46334] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acLueyT_G8WMU3T3yxr3SgAAAM8"]
[Wed Mar 25 04:05:16.344901 2026] [:error] [pid 892:tid 901] [client 51.161.84.110:46342] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLufCT_G8WMU3T3yxr3TgAAAMQ"]
[Wed Mar 25 04:05:16.467290 2026] [:error] [pid 892:tid 895] [client 51.161.84.110:46348] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acLufCT_G8WMU3T3yxr3UQAAAME"]
[Wed Mar 25 04:05:17.314216 2026] [:error] [pid 892:tid 914] [client 51.161.84.110:46352] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLufST_G8WMU3T3yxr3VQAAANA"]
[Wed Mar 25 04:05:17.371782 2026] [:error] [pid 892:tid 919] [client 51.161.84.110:46364] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLufST_G8WMU3T3yxr3VgAAANQ"]
[Wed Mar 25 04:05:17.772327 2026] [:error] [pid 892:tid 901] [client 51.161.84.110:46372] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLufST_G8WMU3T3yxr3WwAAAMQ"]
[Wed Mar 25 04:05:22.771800 2026] [:error] [pid 892:tid 915] [client 51.161.84.110:48936] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLugiT_G8WMU3T3yxr3bQAAANE"]
[Wed Mar 25 04:05:22.774748 2026] [:error] [pid 756:tid 860] [client 51.161.84.110:46386] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLugjOaW6oylMIDBCRTAQAAAIg"]
[Wed Mar 25 04:05:22.832511 2026] [:error] [pid 892:tid 913] [client 51.161.84.110:46404] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acLugiT_G8WMU3T3yxr3bgAAAM8"]
[Wed Mar 25 04:05:23.094965 2026] [:error] [pid 756:tid 870] [client 51.161.84.110:48894] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acLugzOaW6oylMIDBCRTAwAAAJI"]
[Wed Mar 25 04:05:24.259907 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:48922] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acLuhCT_G8WMU3T3yxr3eQAAANI"]
[Wed Mar 25 04:05:24.644446 2026] [:error] [pid 892:tid 913] [client 51.161.84.110:48946] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acLuhCT_G8WMU3T3yxr3egAAAM8"]
[Wed Mar 25 04:05:24.720390 2026] [:error] [pid 892:tid 914] [client 51.161.84.110:48956] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acLuhCT_G8WMU3T3yxr3ewAAANA"]
[Wed Mar 25 04:05:25.854388 2026] [:error] [pid 754:tid 769] [client 51.161.84.110:48962] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acLuhTisL3asPbA3CtigbAAAAAQ"]
[Wed Mar 25 04:05:26.093207 2026] [:error] [pid 892:tid 915] [client 51.161.84.110:48978] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acLuhiT_G8WMU3T3yxr3iAAAANE"]
[Wed Mar 25 04:05:26.431977 2026] [:error] [pid 754:tid 779] [client 51.161.84.110:48984] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuhjisL3asPbA3CtigbQAAAA4"]
[Wed Mar 25 04:05:26.541796 2026] [:error] [pid 892:tid 895] [client 51.161.84.110:48988] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLuhiT_G8WMU3T3yxr3jQAAAME"]
[Wed Mar 25 04:05:27.092978 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:48992] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acLuhyT_G8WMU3T3yxr3kwAAANI"]
[Wed Mar 25 04:05:27.648477 2026] [:error] [pid 754:tid 788] [client 51.161.84.110:48994] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acLuhzisL3asPbA3CtigbgAAABc"]
[Wed Mar 25 04:05:27.924695 2026] [:error] [pid 755:tid 821] [client 51.161.84.110:49000] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acLuh6S6bdaeEwgCGwoX8gAAAEY"]
[Wed Mar 25 04:05:28.222983 2026] [:error] [pid 755:tid 847] [client 51.161.84.110:49004] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuiKS6bdaeEwgCGwoX8wAAAFg"]
[Wed Mar 25 04:05:29.015028 2026] [:error] [pid 892:tid 910] [client 51.161.84.110:49016] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acLuiST_G8WMU3T3yxr3mQAAAMw"]
[Wed Mar 25 04:05:29.656771 2026] [:error] [pid 755:tid 839] [client 51.161.84.110:44880] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acLuiaS6bdaeEwgCGwoX9wAAAFA"]
[Wed Mar 25 04:05:29.940384 2026] [:error] [pid 754:tid 768] [client 51.161.84.110:44888] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLuiTisL3asPbA3CtigcwAAAAM"]
[Wed Mar 25 04:05:31.342739 2026] [:error] [pid 892:tid 921] [client 51.161.84.110:44898] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acLuiyT_G8WMU3T3yxr3nwAAANY"]
[Wed Mar 25 04:05:31.642497 2026] [:error] [pid 756:tid 874] [client 51.161.84.110:44904] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acLuizOaW6oylMIDBCRTEQAAAJY"]
[Wed Mar 25 04:05:31.896909 2026] [:error] [pid 754:tid 778] [client 51.161.84.110:44916] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuizisL3asPbA3CtigdQAAAA0"]
[Wed Mar 25 04:05:32.331326 2026] [:error] [pid 755:tid 826] [client 51.161.84.110:44930] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLujKS6bdaeEwgCGwoX-gAAAEs"]
[Wed Mar 25 04:05:32.504000 2026] [:error] [pid 756:tid 873] [client 51.161.84.110:44946] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acLujDOaW6oylMIDBCRTEwAAAJU"]
[Wed Mar 25 04:05:33.496595 2026] [:error] [pid 756:tid 876] [client 51.161.84.110:44948] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLujTOaW6oylMIDBCRTFQAAAJg"]
[Wed Mar 25 04:05:35.429345 2026] [:error] [pid 755:tid 807] [client 51.161.84.110:44958] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLuj6S6bdaeEwgCGwoX_wAAAEI"]
[Wed Mar 25 04:05:36.050686 2026] [:error] [pid 754:tid 788] [client 51.161.84.110:44972] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLukDisL3asPbA3CtigfAAAABc"]
[Wed Mar 25 04:05:36.354735 2026] [:error] [pid 754:tid 773] [client 51.161.84.110:44984] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acLukDisL3asPbA3CtigfQAAAAg"]
[Wed Mar 25 04:05:37.347504 2026] [:error] [pid 754:tid 765] [client 51.161.84.110:45000] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acLukTisL3asPbA3CtigfwAAAAA"]
[Wed Mar 25 04:05:37.404789 2026] [:error] [pid 755:tid 837] [client 51.161.84.110:45014] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLukaS6bdaeEwgCGwoYBQAAAE4"]
[Wed Mar 25 04:05:39.231923 2026] [:error] [pid 756:tid 865] [client 51.161.84.110:45030] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLukzOaW6oylMIDBCRTIwAAAI0"]
[Wed Mar 25 04:05:41.118155 2026] [:error] [pid 892:tid 912] [client 51.161.84.110:41586] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLulST_G8WMU3T3yxr3uwAAAM4"]
[Wed Mar 25 04:05:42.306328 2026] [:error] [pid 892:tid 906] [client 51.161.84.110:41594] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLuliT_G8WMU3T3yxr3xAAAAMg"]
[Wed Mar 25 04:05:42.907795 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:41606] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acLuliT_G8WMU3T3yxr3xgAAAMU"]
[Wed Mar 25 04:05:44.679820 2026] [:error] [pid 756:tid 873] [client 51.161.84.110:41608] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acLumDOaW6oylMIDBCRTKwAAAJU"]
[Wed Mar 25 04:05:46.564621 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:41620] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acLumiT_G8WMU3T3yxr31QAAAMU"]
[Wed Mar 25 04:05:48.550619 2026] [:error] [pid 892:tid 909] [client 51.161.84.110:41634] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acLunCT_G8WMU3T3yxr33wAAAMs"]
[Wed Mar 25 04:05:50.692309 2026] [:error] [pid 756:tid 872] [client 51.161.84.110:45084] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acLunjOaW6oylMIDBCRTMQAAAJQ"]
[Wed Mar 25 04:05:52.511633 2026] [:error] [pid 754:tid 771] [client 51.161.84.110:45096] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acLuoDisL3asPbA3CtighQAAAAY"]
[Wed Mar 25 04:05:54.296367 2026] [:error] [pid 892:tid 909] [client 51.161.84.110:45106] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acLuoiT_G8WMU3T3yxr39QAAAMs"]
[Wed Mar 25 04:05:56.357166 2026] [:error] [pid 892:tid 896] [client 51.161.84.110:45116] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acLupCT_G8WMU3T3yxr3_gAAAMI"]
[Wed Mar 25 04:06:01.481589 2026] [:error] [pid 756:tid 871] [client 195.178.110.39:33754] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.backup"] [unique_id "acLuqTOaW6oylMIDBCRTWwAAAJM"]
[Wed Mar 25 04:07:31.147822 2026] [:error] [pid 754:tid 773] [client 51.161.84.110:32872] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLvAzisL3asPbA3CtihEQAAAAg"]
[Wed Mar 25 04:07:33.824553 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:37440] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLvBST_G8WMU3T3yxr6HgAAANI"]
[Wed Mar 25 04:07:36.998721 2026] [:error] [pid 754:tid 781] [client 51.161.84.110:37450] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLvCDisL3asPbA3CtihGwAAABA"]
[Wed Mar 25 04:07:39.612018 2026] [:error] [pid 756:tid 872] [client 51.161.84.110:48756] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLvCzOaW6oylMIDBCRUZwAAAJQ"]
[Wed Mar 25 04:07:41.662787 2026] [:error] [pid 754:tid 786] [client 51.161.84.110:48766] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLvDTisL3asPbA3CtihJQAAABU"]
[Wed Mar 25 04:07:44.125102 2026] [:error] [pid 755:tid 824] [client 51.161.84.110:48776] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLvEKS6bdaeEwgCGwoYrgAAAEk"]
[Wed Mar 25 04:07:46.111691 2026] [:error] [pid 754:tid 785] [client 51.161.84.110:48780] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLvEjisL3asPbA3CtihLgAAABQ"]
[Wed Mar 25 04:07:48.871305 2026] [:error] [pid 892:tid 919] [client 51.161.84.110:48786] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acLvFCT_G8WMU3T3yxr6SQAAANQ"]
[Wed Mar 25 04:07:52.442319 2026] [:error] [pid 756:tid 858] [client 51.161.84.110:50716] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acLvGDOaW6oylMIDBCRUlAAAAIY"]
[Wed Mar 25 04:07:54.610194 2026] [:error] [pid 756:tid 863] [client 51.161.84.110:50726] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acLvGjOaW6oylMIDBCRUmgAAAIs"]
[Wed Mar 25 04:07:56.609641 2026] [:error] [pid 755:tid 806] [client 51.161.84.110:50730] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acLvHKS6bdaeEwgCGwoYxQAAAEE"]
[Wed Mar 25 04:07:57.216361 2026] [:error] [pid 754:tid 777] [client 51.161.84.110:50734] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvHTisL3asPbA3CtihPwAAAAw"]
[Wed Mar 25 04:07:59.570228 2026] [:error] [pid 754:tid 776] [client 51.161.84.110:52696] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLvHzisL3asPbA3CtihQgAAAAs"]
[Wed Mar 25 04:08:01.080388 2026] [:error] [pid 755:tid 840] [client 51.161.84.110:52700] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvIaS6bdaeEwgCGwoY0QAAAFE"]
[Wed Mar 25 04:08:02.038644 2026] [:error] [pid 756:tid 858] [client 51.161.84.110:52704] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acLvIjOaW6oylMIDBCRUrgAAAIY"]
[Wed Mar 25 04:08:04.302840 2026] [:error] [pid 756:tid 850] [client 51.161.84.110:52714] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acLvJDOaW6oylMIDBCRUsgAAAIA"]
[Wed Mar 25 04:08:06.292974 2026] [:error] [pid 755:tid 824] [client 51.161.84.110:52722] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvJqS6bdaeEwgCGwoY2wAAAEk"]
[Wed Mar 25 04:08:07.120656 2026] [:error] [pid 892:tid 894] [client 51.161.84.110:52736] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvJyT_G8WMU3T3yxr6cgAAAMA"]
[Wed Mar 25 04:08:10.804329 2026] [:error] [pid 756:tid 870] [client 51.161.84.110:59700] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvKjOaW6oylMIDBCRUwQAAAJI"]
[Wed Mar 25 04:08:10.994653 2026] [:error] [pid 754:tid 774] [client 51.161.84.110:59702] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvKjisL3asPbA3CtihWQAAAAk"]
[Wed Mar 25 04:08:14.659158 2026] [:error] [pid 755:tid 839] [client 51.161.84.110:59710] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvLqS6bdaeEwgCGwoY6AAAAFA"]
[Wed Mar 25 04:08:18.763789 2026] [:error] [pid 756:tid 873] [client 51.161.84.110:59722] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvMjOaW6oylMIDBCRU1gAAAJU"]
[Wed Mar 25 04:08:23.248765 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:33188] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvNyT_G8WMU3T3yxr6mwAAAMo"]
[Wed Mar 25 04:08:26.963831 2026] [:error] [pid 756:tid 857] [client 51.161.84.110:33192] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLvOjOaW6oylMIDBCRU6wAAAIU"]
[Wed Mar 25 04:08:44.917524 2026] [:error] [pid 756:tid 865] [client 51.161.84.110:44956] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acLvTDOaW6oylMIDBCRVIwAAAI0"]
[Wed Mar 25 04:08:45.231687 2026] [:error] [pid 754:tid 776] [client 51.161.84.110:34774] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acLvTTisL3asPbA3CtihfAAAAAs"]
[Wed Mar 25 04:08:46.839964 2026] [:error] [pid 892:tid 911] [client 51.161.84.110:34790] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLvTiT_G8WMU3T3yxr62AAAAM0"]
[Wed Mar 25 04:08:47.407423 2026] [:error] [pid 892:tid 922] [client 51.161.84.110:34802] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acLvTyT_G8WMU3T3yxr63AAAANc"]
[Wed Mar 25 04:08:48.757884 2026] [:error] [pid 755:tid 839] [client 51.161.84.110:34804] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLvUKS6bdaeEwgCGwoZJwAAAFA"]
[Wed Mar 25 04:08:49.496458 2026] [:error] [pid 756:tid 874] [client 51.161.84.110:44370] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acLvUTOaW6oylMIDBCRVKwAAAJY"]
[Wed Mar 25 04:08:50.794448 2026] [:error] [pid 756:tid 859] [client 51.161.84.110:44386] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acLvUjOaW6oylMIDBCRVLgAAAIc"]
[Wed Mar 25 04:08:51.456589 2026] [:error] [pid 756:tid 861] [client 51.161.84.110:44392] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLvUzOaW6oylMIDBCRVMwAAAIk"]
[Wed Mar 25 04:08:52.755654 2026] [:error] [pid 754:tid 774] [client 51.161.84.110:44394] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acLvVDisL3asPbA3CtihiQAAAAk"]
[Wed Mar 25 04:08:53.331401 2026] [:error] [pid 755:tid 809] [client 51.161.84.110:44410] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLvVaS6bdaeEwgCGwoZOAAAAEQ"]
[Wed Mar 25 04:08:54.632638 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:44424] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acLvViT_G8WMU3T3yxr64QAAANI"]
[Wed Mar 25 04:08:55.327730 2026] [:error] [pid 756:tid 871] [client 51.161.84.110:44438] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acLvVzOaW6oylMIDBCRVQAAAAJM"]
[Wed Mar 25 04:08:56.573210 2026] [:error] [pid 892:tid 922] [client 51.161.84.110:44440] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acLvWCT_G8WMU3T3yxr66QAAANc"]
[Wed Mar 25 04:08:57.131016 2026] [:error] [pid 892:tid 905] [client 51.161.84.110:44456] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLvWST_G8WMU3T3yxr67gAAAMc"]
[Wed Mar 25 04:08:58.418398 2026] [:error] [pid 754:tid 781] [client 51.161.84.110:44466] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acLvWjisL3asPbA3CtihlAAAABA"]
[Wed Mar 25 04:08:59.357013 2026] [:error] [pid 754:tid 786] [client 51.161.84.110:48786] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLvWzisL3asPbA3CtihmAAAABU"]
[Wed Mar 25 04:09:00.355125 2026] [:error] [pid 754:tid 777] [client 51.161.84.110:48798] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acLvXDisL3asPbA3CtihowAAAAw"]
[Wed Mar 25 04:09:01.327440 2026] [:error] [pid 892:tid 922] [client 51.161.84.110:48804] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acLvXST_G8WMU3T3yxr69wAAANc"]
[Wed Mar 25 04:09:02.211992 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:48814] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acLvXiT_G8WMU3T3yxr6_QAAAMo"]
[Wed Mar 25 04:09:03.211693 2026] [:error] [pid 892:tid 921] [client 51.161.84.110:48826] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acLvXyT_G8WMU3T3yxr7AQAAANY"]
[Wed Mar 25 04:09:04.074822 2026] [:error] [pid 754:tid 780] [client 51.161.84.110:48838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acLvYDisL3asPbA3CtihqQAAAA8"]
[Wed Mar 25 04:09:05.047601 2026] [:error] [pid 755:tid 840] [client 51.161.84.110:48840] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acLvYaS6bdaeEwgCGwoZPgAAAFE"]
[Wed Mar 25 04:09:06.978906 2026] [:error] [pid 756:tid 862] [client 51.161.84.110:48846] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acLvYjOaW6oylMIDBCRVcAAAAIo"]
[Wed Mar 25 04:09:09.672817 2026] [:error] [pid 756:tid 875] [client 51.161.84.110:45648] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acLvZTOaW6oylMIDBCRVhgAAAJc"]
[Wed Mar 25 04:09:11.931312 2026] [:error] [pid 755:tid 809] [client 51.161.84.110:45654] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acLvZ6S6bdaeEwgCGwoZVQAAAEQ"]
[Wed Mar 25 04:09:14.297781 2026] [:error] [pid 754:tid 766] [client 51.161.84.110:45658] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acLvajisL3asPbA3CtihuAAAAAE"]
[Wed Mar 25 04:09:16.400143 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:45660] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acLvbCT_G8WMU3T3yxr7JQAAAMo"]
[Wed Mar 25 04:11:51.501560 2026] [:error] [pid 755:tid 842] [client 51.161.84.110:50820] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "acLwB6S6bdaeEwgCGwoabgAAAFM"]
[Wed Mar 25 04:11:52.533621 2026] [:error] [pid 892:tid 914] [client 51.161.84.110:52622] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLwCCT_G8WMU3T3yxr9KgAAANA"]
[Wed Mar 25 04:11:53.738909 2026] [:error] [pid 755:tid 838] [client 51.161.84.110:50824] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acLwCaS6bdaeEwgCGwoabwAAAE8"]
[Wed Mar 25 04:11:54.376943 2026] [:error] [pid 755:tid 818] [client 51.161.84.110:50832] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLwCqS6bdaeEwgCGwoacAAAAEU"]
[Wed Mar 25 04:11:56.102973 2026] [:error] [pid 756:tid 870] [client 51.161.84.110:50834] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acLwDDOaW6oylMIDBCRW7AAAAJI"]
[Wed Mar 25 04:11:56.203923 2026] [:error] [pid 892:tid 920] [client 51.161.84.110:50838] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLwDCT_G8WMU3T3yxr9MgAAANU"]
[Wed Mar 25 04:11:58.153438 2026] [:error] [pid 754:tid 767] [client 51.161.84.110:50846] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLwDjisL3asPbA3CtiidwAAAAI"]
[Wed Mar 25 04:12:00.184284 2026] [:error] [pid 755:tid 839] [client 51.161.84.110:45692] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLwEKS6bdaeEwgCGwoadgAAAFA"]
[Wed Mar 25 04:12:00.299731 2026] [:error] [pid 756:tid 856] [client 51.161.84.110:45700] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amb%20superslot.aspx"] [unique_id "acLwEDOaW6oylMIDBCRW9wAAAIQ"]
[Wed Mar 25 04:12:02.359330 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:45706] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acLwEiT_G8WMU3T3yxr9PQAAAMU"]
[Wed Mar 25 04:12:03.227294 2026] [:error] [pid 892:tid 894] [client 51.161.84.110:45718] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLwEyT_G8WMU3T3yxr9PwAAAMA"]
[Wed Mar 25 04:12:04.355911 2026] [:error] [pid 892:tid 908] [client 51.161.84.110:45732] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20co.aspx"] [unique_id "acLwFCT_G8WMU3T3yxr9QwAAAMo"]
[Wed Mar 25 04:12:05.088147 2026] [:error] [pid 754:tid 765] [client 51.161.84.110:45734] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLwFTisL3asPbA3CtiijQAAAAA"]
[Wed Mar 25 04:12:09.749974 2026] [:error] [pid 892:tid 915] [client 51.161.84.110:56092] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLwGST_G8WMU3T3yxr9TQAAANE"]
[Wed Mar 25 04:12:11.700437 2026] [:error] [pid 756:tid 874] [client 51.161.84.110:56094] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLwGzOaW6oylMIDBCRXDgAAAJY"]
[Wed Mar 25 04:12:12.271109 2026] [:error] [pid 756:tid 857] [client 51.161.84.110:56102] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acLwHDOaW6oylMIDBCRXEQAAAIU"]
[Wed Mar 25 04:12:13.560075 2026] [:error] [pid 755:tid 843] [client 51.161.84.110:56106] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLwHaS6bdaeEwgCGwoafwAAAFQ"]
[Wed Mar 25 04:12:14.347345 2026] [:error] [pid 756:tid 857] [client 51.161.84.110:56108] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acLwHjOaW6oylMIDBCRXGwAAAIU"]
[Wed Mar 25 04:12:15.404905 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:56112] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLwHyT_G8WMU3T3yxr9XgAAANI"]
[Wed Mar 25 04:12:16.285722 2026] [:error] [pid 892:tid 896] [client 51.161.84.110:56126] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acLwICT_G8WMU3T3yxr9XwAAAMI"]
[Wed Mar 25 04:12:17.196905 2026] [:error] [pid 756:tid 860] [client 51.161.84.110:56136] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLwITOaW6oylMIDBCRXLgAAAIg"]
[Wed Mar 25 04:12:18.223721 2026] [:error] [pid 756:tid 861] [client 51.161.84.110:56148] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acLwIjOaW6oylMIDBCRXNAAAAIk"]
[Wed Mar 25 04:12:19.054786 2026] [:error] [pid 756:tid 860] [client 51.161.84.110:56160] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLwIzOaW6oylMIDBCRXOgAAAIg"]
[Wed Mar 25 04:12:20.949645 2026] [:error] [pid 755:tid 842] [client 51.161.84.110:47504] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLwJKS6bdaeEwgCGwoahAAAAFM"]
[Wed Mar 25 04:12:21.274789 2026] [:error] [pid 892:tid 902] [client 51.161.84.110:47514] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acLwJST_G8WMU3T3yxr9awAAAMU"]
[Wed Mar 25 04:12:22.730497 2026] [:error] [pid 756:tid 856] [client 51.161.84.110:47524] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLwJjOaW6oylMIDBCRXTwAAAIQ"]
[Wed Mar 25 04:12:23.931365 2026] [:error] [pid 755:tid 822] [client 51.161.84.110:47528] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acLwJ6S6bdaeEwgCGwoaiAAAAEc"]
[Wed Mar 25 04:12:24.596954 2026] [:error] [pid 755:tid 823] [client 51.161.84.110:47536] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLwKKS6bdaeEwgCGwoajAAAAEg"]
[Wed Mar 25 04:12:25.871966 2026] [:error] [pid 755:tid 808] [client 51.161.84.110:47546] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acLwKaS6bdaeEwgCGwoajwAAAEM"]
[Wed Mar 25 04:12:26.586275 2026] [:error] [pid 756:tid 868] [client 51.161.84.110:47550] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acLwKjOaW6oylMIDBCRXZgAAAJA"]
[Wed Mar 25 04:12:27.738841 2026] [:error] [pid 756:tid 866] [client 51.161.84.110:47556] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acLwKzOaW6oylMIDBCRXbwAAAI4"]
[Wed Mar 25 04:12:28.478120 2026] [:error] [pid 892:tid 918] [client 51.161.84.110:47564] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acLwLCT_G8WMU3T3yxr9fQAAANM"]
[Wed Mar 25 04:12:29.931457 2026] [:error] [pid 892:tid 911] [client 51.161.84.110:55694] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acLwLST_G8WMU3T3yxr9hAAAAM0"]
[Wed Mar 25 04:12:30.383647 2026] [:error] [pid 892:tid 905] [client 51.161.84.110:55704] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acLwLiT_G8WMU3T3yxr9igAAAMc"]
[Wed Mar 25 04:12:31.922073 2026] [:error] [pid 892:tid 905] [client 51.161.84.110:55714] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acLwLyT_G8WMU3T3yxr9lgAAAMc"]
[Wed Mar 25 04:12:32.062161 2026] [:error] [pid 756:tid 875] [client 51.161.84.110:55726] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acLwMDOaW6oylMIDBCRXewAAAJc"]
[Wed Mar 25 04:12:33.802473 2026] [:error] [pid 892:tid 915] [client 51.161.84.110:55734] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acLwMST_G8WMU3T3yxr9ogAAANE"]
[Wed Mar 25 04:12:33.966205 2026] [:error] [pid 754:tid 778] [client 51.161.84.110:55746] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acLwMTisL3asPbA3CtiimwAAAA0"]
[Wed Mar 25 04:12:35.637641 2026] [:error] [pid 755:tid 842] [client 51.161.84.110:55756] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acLwM6S6bdaeEwgCGwoamwAAAFM"]
[Wed Mar 25 04:12:35.772215 2026] [:error] [pid 756:tid 867] [client 51.161.84.110:55764] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acLwMzOaW6oylMIDBCRXjQAAAI8"]
[Wed Mar 25 04:12:37.478953 2026] [:error] [pid 754:tid 784] [client 51.161.84.110:55770] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acLwNTisL3asPbA3CtiiogAAABM"]
[Wed Mar 25 04:12:37.700622 2026] [:error] [pid 892:tid 917] [client 51.161.84.110:55784] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acLwNST_G8WMU3T3yxr9tQAAANI"]
[Wed Mar 25 04:12:38.672376 2026] [:error] [pid 892:tid 910] [client 51.161.84.110:55794] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwNiT_G8WMU3T3yxr9ugAAAMw"]
[Wed Mar 25 04:12:39.419369 2026] [:error] [pid 754:tid 769] [client 51.161.84.110:36994] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acLwNzisL3asPbA3CtiipAAAAAQ"]
[Wed Mar 25 04:12:41.282508 2026] [:error] [pid 892:tid 910] [client 51.161.84.110:37006] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acLwOST_G8WMU3T3yxr9ygAAAMw"]
[Wed Mar 25 04:12:42.334143 2026] [:error] [pid 754:tid 771] [client 51.161.84.110:37020] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwOjisL3asPbA3CtiirAAAAAY"]
[Wed Mar 25 04:12:43.236026 2026] [:error] [pid 756:tid 867] [client 51.161.84.110:37022] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLwOzOaW6oylMIDBCRXzAAAAI8"]
[Wed Mar 25 04:12:45.130880 2026] [:error] [pid 892:tid 906] [client 51.161.84.110:37028] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLwPST_G8WMU3T3yxr92gAAAMg"]
[Wed Mar 25 04:12:47.003576 2026] [:error] [pid 756:tid 874] [client 51.161.84.110:37034] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLwPzOaW6oylMIDBCRX6AAAAJY"]
[Wed Mar 25 04:12:49.052423 2026] [:error] [pid 892:tid 914] [client 51.161.84.110:37040] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLwQST_G8WMU3T3yxr9_QAAANA"]
[Wed Mar 25 04:13:08.805475 2026] [:error] [pid 892:tid 911] [client 51.161.84.110:48302] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acLwVCT_G8WMU3T3yxr-NQAAAM0"]
[Wed Mar 25 04:13:10.936473 2026] [:error] [pid 754:tid 781] [client 51.161.84.110:34980] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acLwVjisL3asPbA3CtiiyQAAABA"]
[Wed Mar 25 04:13:12.893666 2026] [:error] [pid 892:tid 922] [client 51.161.84.110:34986] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acLwWCT_G8WMU3T3yxr-NwAAANc"]
[Wed Mar 25 04:13:14.942480 2026] [:error] [pid 754:tid 769] [client 51.161.84.110:34992] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acLwWjisL3asPbA3Ctii1AAAAAQ"]
[Wed Mar 25 04:13:16.925899 2026] [:error] [pid 756:tid 862] [client 51.161.84.110:34996] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acLwXDOaW6oylMIDBCRYLAAAAIo"]
[Wed Mar 25 04:13:18.809280 2026] [:error] [pid 754:tid 788] [client 51.161.84.110:35012] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acLwXjisL3asPbA3Ctii2QAAABc"]
[Wed Mar 25 04:13:20.522522 2026] [:error] [pid 756:tid 856] [client 51.161.84.110:56960] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acLwYDOaW6oylMIDBCRYNQAAAIQ"]
[Wed Mar 25 04:13:22.430526 2026] [:error] [pid 755:tid 842] [client 51.161.84.110:56970] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acLwYqS6bdaeEwgCGwoawwAAAFM"]
[Wed Mar 25 04:13:24.326411 2026] [:error] [pid 892:tid 894] [client 51.161.84.110:56972] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acLwZCT_G8WMU3T3yxr-SwAAAMA"]
[Wed Mar 25 04:13:26.323162 2026] [:error] [pid 754:tid 776] [client 51.161.84.110:56988] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acLwZjisL3asPbA3Ctii2wAAAAs"]
[Wed Mar 25 04:13:28.117081 2026] [:error] [pid 892:tid 910] [client 51.161.84.110:56990] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acLwaCT_G8WMU3T3yxr-UgAAAMw"]
[Wed Mar 25 04:13:30.013455 2026] [:error] [pid 892:tid 919] [client 51.161.84.110:50292] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwaiT_G8WMU3T3yxr-WwAAANQ"]
[Wed Mar 25 04:13:30.022390 2026] [:error] [pid 892:tid 923] [client 51.161.84.110:50294] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acLwaiT_G8WMU3T3yxr-XAAAANg"]
[Wed Mar 25 04:13:31.799970 2026] [:error] [pid 756:tid 869] [client 51.161.84.110:50302] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acLwazOaW6oylMIDBCRYSAAAAJE"]
[Wed Mar 25 04:13:33.603156 2026] [:error] [pid 754:tid 774] [client 51.161.84.110:50310] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acLwbTisL3asPbA3Ctii5QAAAAk"]
[Wed Mar 25 04:13:33.771312 2026] [:error] [pid 755:tid 838] [client 51.161.84.110:50312] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwbaS6bdaeEwgCGwoa3QAAAE8"]
[Wed Mar 25 04:13:35.475091 2026] [:error] [pid 756:tid 874] [client 51.161.84.110:50320] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acLwbzOaW6oylMIDBCRYTAAAAJY"]
[Wed Mar 25 04:13:49.762965 2026] [:error] [pid 754:tid 785] [client 51.161.84.110:57840] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwfTisL3asPbA3Ctii9QAAABQ"]
[Wed Mar 25 04:13:50.737422 2026] [:error] [pid 892:tid 909] [client 51.161.84.110:57852] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwfiT_G8WMU3T3yxr-hQAAAMs"]
[Wed Mar 25 04:13:53.517756 2026] [:error] [pid 892:tid 910] [client 51.161.84.110:57862] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwgST_G8WMU3T3yxr-iwAAAMw"]
[Wed Mar 25 04:13:54.438212 2026] [:error] [pid 756:tid 863] [client 51.161.84.110:57878] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acLwgjOaW6oylMIDBCRYdgAAAIs"]
[Wed Mar 25 04:14:45.591444 2026] [:error] [pid 756:tid 850] [client 51.161.84.110:53332] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acLwtTOaW6oylMIDBCRYzwAAAIA"]
[Wed Mar 25 04:14:47.562218 2026] [:error] [pid 756:tid 869] [client 51.161.84.110:53340] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acLwtzOaW6oylMIDBCRY1AAAAJE"]
[Wed Mar 25 04:14:49.378179 2026] [:error] [pid 892:tid 918] [client 51.161.84.110:58740] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acLwuST_G8WMU3T3yxr--AAAANM"]
[Wed Mar 25 04:14:51.141210 2026] [:error] [pid 756:tid 851] [client 51.161.84.110:58750] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acLwuzOaW6oylMIDBCRY2wAAAIE"]
[Wed Mar 25 04:14:53.009441 2026] [:error] [pid 754:tid 789] [client 51.161.84.110:58752] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acLwvTisL3asPbA3CtijTAAAABg"]
[Wed Mar 25 04:14:54.813661 2026] [:error] [pid 892:tid 909] [client 51.161.84.110:58768] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acLwviT_G8WMU3T3yxr_CwAAAMs"]
[Wed Mar 25 04:14:56.816866 2026] [:error] [pid 756:tid 875] [client 51.161.84.110:58780] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acLwwDOaW6oylMIDBCRY3gAAAJc"]
[Wed Mar 25 04:14:58.742603 2026] [:error] [pid 892:tid 922] [client 51.161.84.110:58784] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acLwwiT_G8WMU3T3yxr_EwAAANc"]
[Wed Mar 25 04:19:11.865816 2026] [:error] [pid 756:tid 867] [client 195.178.110.39:32952] [client 195.178.110.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.178.110.39, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acLxvzOaW6oylMIDBCRbLwAAAI8"]
[Wed Mar 25 04:19:11.871983 2026] [:error] [pid 756:tid 867] [client 195.178.110.39:32952] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 04:19:33.869715 2026] [:error] [pid 892:tid 902] [client 195.178.110.39:34514] [client 195.178.110.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.178.110.39, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acLx1ST_G8WMU3T3yxoCWgAAAMU"]
[Wed Mar 25 04:19:33.875294 2026] [:error] [pid 892:tid 902] [client 195.178.110.39:34514] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 05:22:32.633181 2026] [:error] [pid 47946:tid 47969] [client 195.178.110.39:58026] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.git/config"] [unique_id "acMAmDipQTqBMSeKYhfjTAAAARU"]
[Wed Mar 25 05:25:12.202900 2026] [:error] [pid 892:tid 894] [client 68.183.151.56:44262] [client 68.183.151.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.git/config"] [unique_id "acMBOCT_G8WMU3T3yxopyAAAAMA"]
[Wed Mar 25 05:34:36.060219 2026] [:error] [pid 754:tid 765] [client 195.178.110.39:38496] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/..%09/.git/config"] [unique_id "acMDbDisL3asPbA3Cti3ugAAAAA"]
[Wed Mar 25 05:42:18.310329 2026] [:error] [pid 47989:tid 48012] [client 49.51.253.83:55366] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acMFOiWKdJMhIccROjlmcgAAAVU"]
[Wed Mar 25 05:48:56.982472 2026] [:error] [pid 754:tid 766] [client 195.178.110.39:60202] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php.old"] [unique_id "acMGyDisL3asPbA3Cti6hwAAAAE"]
[Wed Mar 25 05:49:32.779561 2026] [:error] [pid 47989:tid 48015] [client 195.178.110.39:39368] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php.save"] [unique_id "acMG7CWKdJMhIccROjlqUgAAAVg"]
[Wed Mar 25 05:50:05.033193 2026] [:error] [pid 756:tid 868] [client 195.178.110.39:48364] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.php.swp"] [unique_id "acMHDTOaW6oylMIDBCR-XwAAAJA"]
[Wed Mar 25 05:54:47.362834 2026] [:error] [pid 47989:tid 47991] [client 195.178.110.39:34810] [client 195.178.110.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.178.110.39, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acMIJyWKdJMhIccROjltHgAAAUA"]
[Wed Mar 25 05:54:47.367944 2026] [:error] [pid 47989:tid 47991] [client 195.178.110.39:34810] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 05:54:48.163836 2026] [:error] [pid 47989:tid 47998] [client 195.178.110.39:34810] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pumpbooking.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/wp-content/debug.log"] [unique_id "acMIKCWKdJMhIccROjltIQAAAUc"]
[Wed Mar 25 05:56:40.339353 2026] [:error] [pid 47989:tid 48005] [client 195.178.110.39:34958] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env.local"] [unique_id "acMImCWKdJMhIccROjlt8QAAAU4"]
[Wed Mar 25 06:00:33.342521 2026] [:error] [pid 892:tid 918] [client 195.178.110.39:50764] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.wp-config.php.swp"] [unique_id "acMJgST_G8WMU3T3yxo3PwAAANM"]
[Wed Mar 25 06:01:13.324024 2026] [:error] [pid 756:tid 872] [client 195.178.110.39:42962] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/wp-config.bak"] [unique_id "acMJqTOaW6oylMIDBCSBtgAAAJQ"]
[Wed Mar 25 07:15:51.099421 2026] [:error] [pid 756:tid 875] [client 37.187.226.31:55928] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acMbJzOaW6oylMIDBCSzGQAAAJc"]
[Wed Mar 25 07:15:53.103376 2026] [:error] [pid 756:tid 867] [client 37.187.226.31:35928] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acMbKTOaW6oylMIDBCSzIAAAAI8"]
[Wed Mar 25 07:15:55.035684 2026] [:error] [pid 754:tid 771] [client 37.187.226.31:35942] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acMbKzisL3asPbA3CtjJMgAAAAY"]
[Wed Mar 25 07:15:56.924983 2026] [:error] [pid 755:tid 835] [client 37.187.226.31:35958] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acMbLKS6bdaeEwgCGwpGZQAAAEw"]
[Wed Mar 25 07:15:58.926393 2026] [:error] [pid 47989:tid 48006] [client 37.187.226.31:35962] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acMbLiWKdJMhIccROjmTJwAAAU8"]
[Wed Mar 25 07:16:00.841022 2026] [:error] [pid 47946:tid 47953] [client 37.187.226.31:35974] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acMbMDipQTqBMSeKYhcPMgAAAQU"]
[Wed Mar 25 07:16:02.795899 2026] [:error] [pid 756:tid 858] [client 37.187.226.31:54160] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acMbMjOaW6oylMIDBCSzSAAAAIY"]
[Wed Mar 25 07:16:04.738480 2026] [:error] [pid 756:tid 869] [client 37.187.226.31:54170] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acMbNDOaW6oylMIDBCSzUAAAAJE"]
[Wed Mar 25 07:16:06.836571 2026] [:error] [pid 47989:tid 48004] [client 37.187.226.31:54176] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acMbNiWKdJMhIccROjmTMwAAAU0"]
[Wed Mar 25 07:16:08.802923 2026] [:error] [pid 756:tid 868] [client 37.187.226.31:54184] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acMbODOaW6oylMIDBCSzXAAAAJA"]
[Wed Mar 25 07:16:10.799994 2026] [:error] [pid 47989:tid 48006] [client 37.187.226.31:54190] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acMbOiWKdJMhIccROjmTRAAAAU8"]
[Wed Mar 25 07:16:13.985923 2026] [:error] [pid 756:tid 872] [client 37.187.226.31:53732] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acMbPTOaW6oylMIDBCSzbgAAAJQ"]
[Wed Mar 25 07:16:15.938991 2026] [:error] [pid 755:tid 822] [client 37.187.226.31:53748] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acMbP6S6bdaeEwgCGwpGeQAAAEc"]
[Wed Mar 25 07:16:17.854527 2026] [:error] [pid 755:tid 836] [client 37.187.226.31:53752] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acMbQaS6bdaeEwgCGwpGfwAAAE0"]
[Wed Mar 25 07:16:19.767851 2026] [:error] [pid 892:tid 906] [client 37.187.226.31:53754] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acMbQyT_G8WMU3T3yxpIkAAAAMg"]
[Wed Mar 25 07:16:21.696170 2026] [:error] [pid 756:tid 860] [client 37.187.226.31:53758] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acMbRTOaW6oylMIDBCSzjwAAAIg"]
[Wed Mar 25 07:16:23.521121 2026] [:error] [pid 756:tid 875] [client 37.187.226.31:55558] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acMbRzOaW6oylMIDBCSzmQAAAJc"]
[Wed Mar 25 07:16:27.939005 2026] [:error] [pid 756:tid 850] [client 37.187.226.31:55568] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acMbSzOaW6oylMIDBCSzpQAAAIA"]
[Wed Mar 25 07:16:31.763138 2026] [:error] [pid 756:tid 868] [client 37.187.226.31:55572] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acMbTzOaW6oylMIDBCSztwAAAJA"]
[Wed Mar 25 07:38:38.048353 2026] [:error] [pid 756:tid 871] [client 45.94.31.15:57567] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfjOaW6oylMIDBCTEyAAAAJM"], referer: www.google.com
[Wed Mar 25 07:38:38.049272 2026] [:error] [pid 756:tid 871] [client 45.94.31.15:57770] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfjOaW6oylMIDBCTEyQAAAJM"], referer: www.google.com
[Wed Mar 25 07:38:38.057441 2026] [:error] [pid 756:tid 850] [client 45.94.31.15:57996] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acMgfjOaW6oylMIDBCTEywAAAIA"]
[Wed Mar 25 07:38:38.068876 2026] [:error] [pid 26269:tid 26295] [client 45.94.31.15:57599] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "acMgfkn7e-ZQbaIs7qx-uwAAAZM"], referer: www.google.com
[Wed Mar 25 07:38:38.320469 2026] [:error] [pid 756:tid 871] [client 45.94.31.15:57796] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "acMgfjOaW6oylMIDBCTE0AAAAJM"], referer: www.google.com
[Wed Mar 25 07:38:38.534967 2026] [:error] [pid 26269:tid 26280] [client 45.94.31.15:60811] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfkn7e-ZQbaIs7qx-0wAAAYQ"], referer: www.google.com
[Wed Mar 25 07:38:38.537457 2026] [:error] [pid 756:tid 857] [client 45.94.31.15:61161] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfjOaW6oylMIDBCTE2QAAAIU"], referer: www.google.com
[Wed Mar 25 07:38:38.555984 2026] [:error] [pid 26269:tid 26287] [client 45.94.31.15:62684] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acMgfkn7e-ZQbaIs7qx-1AAAAYs"]
[Wed Mar 25 07:38:38.820231 2026] [:error] [pid 47989:tid 48007] [client 45.94.31.15:55054] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "acMgfiWKdJMhIccROjmeEgAAAVA"], referer: www.google.com
[Wed Mar 25 07:38:39.029515 2026] [:error] [pid 47946:tid 47964] [client 45.94.31.15:63797] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfzipQTqBMSeKYhcXCAAAARA"], referer: www.google.com
[Wed Mar 25 07:38:39.034389 2026] [:error] [pid 755:tid 822] [client 45.94.31.15:62387] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgf6S6bdaeEwgCGwpLfQAAAEc"], referer: www.google.com
[Wed Mar 25 07:38:39.047495 2026] [:error] [pid 47989:tid 47995] [client 45.94.31.15:65179] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acMgfyWKdJMhIccROjmeGAAAAUQ"]
[Wed Mar 25 07:38:39.309511 2026] [:error] [pid 47946:tid 47949] [client 45.94.31.15:55483] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "acMgfzipQTqBMSeKYhcXDQAAAQE"], referer: www.google.com
[Wed Mar 25 07:38:39.521271 2026] [:error] [pid 892:tid 894] [client 45.94.31.15:65255] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfyT_G8WMU3T3yxpOPAAAAMA"], referer: www.google.com
[Wed Mar 25 07:38:39.528881 2026] [:error] [pid 26321:tid 26341] [client 45.94.31.15:65383] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgf_KO65qqGZCSPZqwQwAAAgI"], referer: www.google.com
[Wed Mar 25 07:38:39.566483 2026] [:error] [pid 26321:tid 26342] [client 45.94.31.15:50864] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acMgf_KO65qqGZCSPZqwRgAAAgM"]
[Wed Mar 25 07:38:39.800466 2026] [:error] [pid 754:tid 770] [client 45.94.31.15:55899] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-plain.php"] [unique_id "acMgfzisL3asPbA3CtjOMgAAAAU"], referer: www.google.com
[Wed Mar 25 07:38:40.018582 2026] [:error] [pid 26320:tid 26376] [client 45.94.31.15:64725] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggDkUgS2mHAojGnl4NwAAAdQ"], referer: www.google.com
[Wed Mar 25 07:38:40.023025 2026] [:error] [pid 756:tid 857] [client 45.94.31.15:65261] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggDOaW6oylMIDBCTFGQAAAIU"], referer: www.google.com
[Wed Mar 25 07:38:40.056572 2026] [:error] [pid 26321:tid 26362] [client 45.94.31.15:50891] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acMggPKO65qqGZCSPZqwUAAAAhU"]
[Wed Mar 25 07:38:40.994828 2026] [:error] [pid 26269:tid 26296] [client 45.94.31.15:62085] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggEn7e-ZQbaIs7qx_HAAAAZQ"], referer: www.google.com
[Wed Mar 25 07:38:41.014601 2026] [:error] [pid 26269:tid 26277] [client 45.94.31.15:62709] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggUn7e-ZQbaIs7qx_HwAAAYE"], referer: www.google.com
[Wed Mar 25 07:38:41.997020 2026] [:error] [pid 26320:tid 26380] [client 45.94.31.15:52409] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggTkUgS2mHAojGnl4bAAAAdg"], referer: www.google.com
[Wed Mar 25 07:38:42.011539 2026] [:error] [pid 26320:tid 26336] [client 45.94.31.15:52666] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggjkUgS2mHAojGnl4bQAAAcc"], referer: www.google.com
[Wed Mar 25 07:38:42.987620 2026] [:error] [pid 47989:tid 48012] [client 45.94.31.15:59285] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggiWKdJMhIccROjmeYgAAAVU"], referer: www.google.com
[Wed Mar 25 07:38:43.011076 2026] [:error] [pid 755:tid 839] [client 45.94.31.15:59490] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgg6S6bdaeEwgCGwpL-AAAAFA"], referer: www.google.com
[Wed Mar 25 07:38:43.986261 2026] [:error] [pid 47989:tid 47997] [client 45.94.31.15:53512] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggyWKdJMhIccROjmeeAAAAUY"], referer: www.google.com
[Wed Mar 25 07:38:44.032453 2026] [:error] [pid 47946:tid 47950] [client 45.94.31.15:53863] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghDipQTqBMSeKYhcXxgAAAQI"], referer: www.google.com
[Wed Mar 25 07:38:44.970893 2026] [:error] [pid 755:tid 808] [client 45.94.31.15:64449] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghKS6bdaeEwgCGwpMPAAAAEM"], referer: www.google.com
[Wed Mar 25 07:38:45.033160 2026] [:error] [pid 26269:tid 26280] [client 45.94.31.15:49826] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghUn7e-ZQbaIs7qx_rQAAAYQ"], referer: www.google.com
[Wed Mar 25 07:44:00.471671 2026] [:error] [pid 26449:tid 26453] [client 173.239.240.240:61999] [client 173.239.240.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.240, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "acMhwNpZ2T15NDqzAjGf0QAAAkA"]
[Wed Mar 25 07:44:00.476037 2026] [:error] [pid 26449:tid 26453] [client 173.239.240.240:61999] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 10:28:14.306667 2026] [:error] [pid 892:tid 902] [client 36.41.75.167:36229] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acNIPiT_G8WMU3T3yxpuhQAAAMU"]
[Wed Mar 25 10:42:40.011774 2026] [:error] [pid 26449:tid 26455] [client 51.68.234.121:54946] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acNLoNpZ2T15NDqzAjEHUgAAAkI"]
[Wed Mar 25 10:42:42.314316 2026] [:error] [pid 756:tid 860] [client 51.68.234.121:35408] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acNLojOaW6oylMIDBCTw7gAAAIg"]
[Wed Mar 25 10:42:44.625490 2026] [:error] [pid 26449:tid 26470] [client 51.68.234.121:43648] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acNLpNpZ2T15NDqzAjEHbQAAAlE"]
[Wed Mar 25 10:42:46.834338 2026] [:error] [pid 756:tid 862] [client 51.68.234.121:43658] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acNLpjOaW6oylMIDBCTw9AAAAIo"]
[Wed Mar 25 10:42:48.995454 2026] [:error] [pid 26269:tid 26300] [client 51.68.234.121:43664] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acNLqEn7e-ZQbaIs7qyMvgAAAZg"]
[Wed Mar 25 10:42:50.973481 2026] [:error] [pid 26449:tid 26474] [client 51.68.234.121:43680] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acNLqtpZ2T15NDqzAjEHeAAAAlU"]
[Wed Mar 25 10:42:53.009565 2026] [:error] [pid 26449:tid 26458] [client 51.68.234.121:43694] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acNLrdpZ2T15NDqzAjEHhAAAAkU"]
[Wed Mar 25 10:42:54.980369 2026] [:error] [pid 26321:tid 26353] [client 51.68.234.121:39850] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acNLrvKO65qqGZCSPZrMxwAAAgw"]
[Wed Mar 25 10:42:56.988923 2026] [:error] [pid 892:tid 917] [client 51.68.234.121:39852] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acNLsCT_G8WMU3T3yxpwygAAANI"]
[Wed Mar 25 10:42:58.994787 2026] [:error] [pid 26269:tid 26287] [client 51.68.234.121:39864] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acNLskn7e-ZQbaIs7qyMwgAAAYs"]
[Wed Mar 25 10:43:01.055512 2026] [:error] [pid 26449:tid 26470] [client 51.68.234.121:39866] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acNLtdpZ2T15NDqzAjEHowAAAlE"]
[Wed Mar 25 10:43:03.107125 2026] [:error] [pid 26449:tid 26462] [client 51.68.234.121:39874] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acNLt9pZ2T15NDqzAjEHrQAAAkk"]
[Wed Mar 25 10:43:05.015360 2026] [:error] [pid 26320:tid 26371] [client 51.68.234.121:52976] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acNLuTkUgS2mHAojGnmIywAAAc8"]
[Wed Mar 25 10:43:06.968974 2026] [:error] [pid 26320:tid 26369] [client 51.68.234.121:52980] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acNLujkUgS2mHAojGnmIzgAAAc0"]
[Wed Mar 25 10:43:08.858558 2026] [:error] [pid 47989:tid 48012] [client 51.68.234.121:52986] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acNLvCWKdJMhIccROjntCQAAAVU"]
[Wed Mar 25 10:43:10.784688 2026] [:error] [pid 26449:tid 26472] [client 51.68.234.121:52992] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acNLvtpZ2T15NDqzAjEHvQAAAlM"]
[Wed Mar 25 10:43:12.728812 2026] [:error] [pid 47989:tid 47994] [client 51.68.234.121:53004] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acNLwCWKdJMhIccROjntFAAAAUM"]
[Wed Mar 25 10:43:14.640864 2026] [:error] [pid 47989:tid 47996] [client 51.68.234.121:51968] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acNLwiWKdJMhIccROjntGwAAAUU"]
[Wed Mar 25 10:43:17.541327 2026] [:error] [pid 26320:tid 26367] [client 51.68.234.121:51978] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acNLxTkUgS2mHAojGnmI0AAAAcs"]
[Wed Mar 25 10:43:21.256142 2026] [:error] [pid 26449:tid 26472] [client 51.68.234.121:51992] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acNLydpZ2T15NDqzAjEHzwAAAlM"]
[Wed Mar 25 11:30:17.187247 2026] [:error] [pid 47946:tid 47971] [client 170.106.163.84:33714] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acNWyTipQTqBMSeKYhde8AAAARc"]
[Wed Mar 25 11:38:50.678795 2026] [:error] [pid 25968:tid 26023] [client 43.157.22.109:50072] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acNYyvza_DO-rs4M6G6o4QAAA5g"]
[Wed Mar 25 13:33:40.472534 2026] [:error] [pid 25967:tid 25972] [client 85.93.1.13:23664] [client 85.93.1.13] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/zip"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acNztPg8Qtq7ZM4mSFm5KgAAA0A"]
[Wed Mar 25 13:48:37.437730 2026] [:error] [pid 26449:tid 26473] [client 37.187.226.30:48226] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acN3NdpZ2T15NDqzAjFD2gAAAlQ"]
[Wed Mar 25 13:48:39.471760 2026] [:error] [pid 26321:tid 26359] [client 37.187.226.30:37026] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acN3N_KO65qqGZCSPZr5yQAAAhI"]
[Wed Mar 25 13:48:41.410173 2026] [:error] [pid 756:tid 864] [client 37.187.226.30:37030] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acN3OTOaW6oylMIDBCQIVwAAAIw"]
[Wed Mar 25 13:48:43.481943 2026] [:error] [pid 25967:tid 25975] [client 37.187.226.30:37038] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acN3O_g8Qtq7ZM4mSFnAwwAAA0M"]
[Wed Mar 25 13:48:45.661859 2026] [:error] [pid 47989:tid 47994] [client 37.187.226.30:37044] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acN3PSWKdJMhIccROjkr4AAAAUM"]
[Wed Mar 25 13:48:47.518904 2026] [:error] [pid 25969:tid 26032] [client 37.187.226.30:54228] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acN3Pxd3aEUmOfdKja_k1QAAA8Y"]
[Wed Mar 25 13:48:49.568479 2026] [:error] [pid 47989:tid 47998] [client 37.187.226.30:54244] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acN3QSWKdJMhIccROjkr4gAAAUc"]
[Wed Mar 25 13:48:51.543995 2026] [:error] [pid 47989:tid 48004] [client 37.187.226.30:54254] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acN3QyWKdJMhIccROjkr5gAAAU0"]
[Wed Mar 25 13:48:53.585065 2026] [:error] [pid 25967:tid 25988] [client 37.187.226.30:54266] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acN3Rfg8Qtq7ZM4mSFnA1AAAA1A"]
[Wed Mar 25 13:48:55.519250 2026] [:error] [pid 47989:tid 48011] [client 37.187.226.30:54278] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acN3RyWKdJMhIccROjkr7AAAAVQ"]
[Wed Mar 25 13:48:57.527634 2026] [:error] [pid 47989:tid 48002] [client 37.187.226.30:38416] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acN3SSWKdJMhIccROjkr9AAAAUs"]
[Wed Mar 25 13:48:59.667618 2026] [:error] [pid 47989:tid 48013] [client 37.187.226.30:38422] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acN3SyWKdJMhIccROjkr_AAAAVY"]
[Wed Mar 25 13:49:01.801757 2026] [:error] [pid 26449:tid 26463] [client 37.187.226.30:38432] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acN3TdpZ2T15NDqzAjFEIQAAAko"]
[Wed Mar 25 13:49:03.918593 2026] [:error] [pid 25969:tid 26026] [client 37.187.226.30:38444] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acN3Txd3aEUmOfdKja_k2wAAA8A"]
[Wed Mar 25 13:49:05.979460 2026] [:error] [pid 47989:tid 47997] [client 37.187.226.30:38446] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acN3USWKdJMhIccROjksAQAAAUY"]
[Wed Mar 25 13:49:07.905397 2026] [:error] [pid 47989:tid 48012] [client 37.187.226.30:41934] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acN3UyWKdJMhIccROjksBQAAAVU"]
[Wed Mar 25 13:49:09.800362 2026] [:error] [pid 26449:tid 26475] [client 37.187.226.30:41946] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acN3VdpZ2T15NDqzAjFEJgAAAlY"]
[Wed Mar 25 13:49:11.754305 2026] [:error] [pid 26269:tid 26284] [client 37.187.226.30:41962] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acN3V0n7e-ZQbaIs7qyboAAAAYg"]
[Wed Mar 25 13:49:13.829753 2026] [:error] [pid 25967:tid 25976] [client 37.187.226.30:41966] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acN3Wfg8Qtq7ZM4mSFnA4wAAA0Q"]
[Wed Mar 25 13:49:15.758578 2026] [:error] [pid 756:tid 867] [client 37.187.226.30:41968] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acN3WzOaW6oylMIDBCQIXAAAAI8"]
[Wed Mar 25 13:49:17.665903 2026] [:error] [pid 26321:tid 26346] [client 37.187.226.30:43516] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acN3XfKO65qqGZCSPZr6HgAAAgY"]
[Wed Mar 25 13:49:19.558391 2026] [:error] [pid 25967:tid 25979] [client 37.187.226.30:43526] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acN3X_g8Qtq7ZM4mSFnA5QAAA0c"]
[Wed Mar 25 13:49:24.044953 2026] [:error] [pid 47989:tid 48011] [client 37.187.226.30:43538] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acN3ZCWKdJMhIccROjksHAAAAVQ"]
[Wed Mar 25 13:49:27.783185 2026] [:error] [pid 25967:tid 25996] [client 37.187.226.30:32866] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acN3Z_g8Qtq7ZM4mSFnBBwAAA1g"]
[Wed Mar 25 14:28:40.378704 2026] [:error] [pid 25969:tid 26045] [client 41.174.182.254:6393] [client 41.174.182.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.174.182.254, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acOAmBd3aEUmOfdKja_oggAAA9M"]
[Wed Mar 25 14:28:40.384546 2026] [:error] [pid 25969:tid 26045] [client 41.174.182.254:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 17:40:42.540076 2026] [:error] [pid 47946:tid 47955] [client 43.159.132.207:51734] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acOtmjipQTqBMSeKYhd8eQAAAQc"]
[Wed Mar 25 17:48:15.366202 2026] [:error] [pid 47989:tid 48010] [client 43.130.174.37:55180] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acOvXyWKdJMhIccROjmZHgAAAVM"]
[Wed Mar 25 18:27:22.653316 2026] [:error] [pid 892:tid 915] [client 212.227.21.19:31092] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acO4iiT_G8WMU3T3yxrI-gAAANE"]
[Wed Mar 25 18:27:24.738355 2026] [:error] [pid 25967:tid 25977] [client 212.227.21.19:31098] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acO4jPg8Qtq7ZM4mSFk5fAAAA0U"]
[Wed Mar 25 18:28:06.516495 2026] [:error] [pid 25875:tid 25904] [client 212.227.21.19:31878] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acO4thJ38QkS3NyfshzguAAAApc"]
[Wed Mar 25 18:28:08.555344 2026] [:error] [pid 47989:tid 48014] [client 212.227.21.19:8990] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acO4uCWKdJMhIccROjmwYAAAAVc"]
[Wed Mar 25 18:28:10.450439 2026] [:error] [pid 47989:tid 47997] [client 212.227.21.19:8994] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acO4uiWKdJMhIccROjmwZgAAAUY"]
[Wed Mar 25 18:28:12.488881 2026] [:error] [pid 26449:tid 26476] [client 212.227.21.19:9004] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acO4vNpZ2T15NDqzAjFvAgAAAlc"]
[Wed Mar 25 18:28:14.360188 2026] [:error] [pid 47989:tid 48014] [client 212.227.21.19:9006] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acO4viWKdJMhIccROjmwcgAAAVc"]
[Wed Mar 25 18:28:16.363770 2026] [:error] [pid 892:tid 921] [client 212.227.21.19:9008] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acO4wCT_G8WMU3T3yxrJDAAAANY"]
[Wed Mar 25 18:28:18.481402 2026] [:error] [pid 25967:tid 25975] [client 212.227.21.19:14220] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acO4wvg8Qtq7ZM4mSFk6TwAAA0M"]
[Wed Mar 25 18:35:45.440101 2026] [:error] [pid 756:tid 876] [client 20.151.18.25:23606] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Mar 25 18:35:45.860689 2026] [:error] [pid 756:tid 869] [client 20.151.18.25:23606] [client 20.151.18.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.18.25, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acO6gTOaW6oylMIDBCQbIQAAAJE"]
[Wed Mar 25 18:35:46.073636 2026] [:error] [pid 756:tid 857] [client 20.151.18.25:23606] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Wed Mar 25 18:35:46.908842 2026] [:error] [pid 756:tid 850] [client 20.151.18.25:23606] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Wed Mar 25 18:35:47.539910 2026] [:error] [pid 756:tid 867] [client 20.151.18.25:23606] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Mar 25 18:35:49.728703 2026] [:error] [pid 756:tid 867] [client 20.151.18.25:23606] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acO6hTOaW6oylMIDBCQbLQAAAI8"]
[Wed Mar 25 18:35:50.575230 2026] [:error] [pid 26449:tid 26473] [client 20.151.18.25:24397] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acO6htpZ2T15NDqzAjFwVgAAAlQ"]
[Wed Mar 25 18:35:51.408246 2026] [:error] [pid 25875:tid 25882] [client 20.151.18.25:24387] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acO6hxJ38QkS3NyfshziuAAAAoE"]
[Wed Mar 25 18:35:52.238560 2026] [:error] [pid 47989:tid 48003] [client 20.151.18.25:23568] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acO6iCWKdJMhIccROjm0AwAAAUw"]
[Wed Mar 25 18:41:32.087503 2026] [:error] [pid 26321:tid 26356] [client 195.178.110.39:36368] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env.tmp"] [unique_id "acO73PKO65qqGZCSPZo5jQAAAg8"]
[Wed Mar 25 18:45:12.852583 2026] [:error] [pid 26449:tid 26474] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 18:45:13.092210 2026] [:error] [pid 26449:tid 26453] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 18:45:13.830897 2026] [:error] [pid 26449:tid 26459] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 18:45:14.071297 2026] [:error] [pid 26449:tid 26455] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 18:45:14.313927 2026] [:error] [pid 26449:tid 26472] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 18:45:14.559283 2026] [:error] [pid 26449:tid 26464] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 18:45:14.798805 2026] [:error] [pid 26449:tid 26454] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 18:45:15.038332 2026] [:error] [pid 26449:tid 26476] [client 51.103.250.122:56515] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 18:45:15.277721 2026] [:error] [pid 26449:tid 26461] [client 51.103.250.122:56515] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acO8u9pZ2T15NDqzAjFyogAAAkg"]
[Wed Mar 25 18:45:15.767605 2026] [:error] [pid 25967:tid 25974] [client 51.103.250.122:43433] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acO8u_g8Qtq7ZM4mSFlBaQAAA0I"]
[Wed Mar 25 18:45:16.240532 2026] [:error] [pid 25967:tid 25987] [client 51.103.250.122:62682] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acO8vPg8Qtq7ZM4mSFlBagAAA08"]
[Wed Mar 25 18:45:16.784303 2026] [:error] [pid 25969:tid 26043] [client 51.103.250.122:52711] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acO8vBd3aEUmOfdKja8EHgAAA9E"]
[Wed Mar 25 18:45:17.256356 2026] [:error] [pid 25967:tid 25972] [client 51.103.250.122:43452] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acO8vfg8Qtq7ZM4mSFlBbAAAA0A"]
[Wed Mar 25 18:45:17.731842 2026] [:error] [pid 26449:tid 26459] [client 51.103.250.122:54505] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acO8vdpZ2T15NDqzAjFypQAAAkY"]
[Wed Mar 25 18:45:18.233306 2026] [:error] [pid 25967:tid 25981] [client 51.103.250.122:51170] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acO8vvg8Qtq7ZM4mSFlBbwAAA0k"]
[Wed Mar 25 18:45:18.709203 2026] [:error] [pid 892:tid 905] [client 51.103.250.122:52719] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acO8viT_G8WMU3T3yxrLGgAAAMc"]
[Wed Mar 25 18:45:19.206207 2026] [:error] [pid 26269:tid 26300] [client 51.103.250.122:44274] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acO8v0n7e-ZQbaIs7qy1hwAAAZg"]
[Wed Mar 25 18:45:19.705913 2026] [:error] [pid 26449:tid 26472] [client 51.103.250.122:52705] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acO8v9pZ2T15NDqzAjFypgAAAlM"]
[Wed Mar 25 18:45:20.183462 2026] [:error] [pid 26449:tid 26458] [client 51.103.250.122:44267] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acO8wNpZ2T15NDqzAjFyqAAAAkU"]
[Wed Mar 25 18:45:20.655011 2026] [:error] [pid 26449:tid 26462] [client 51.103.250.122:54464] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acO8wNpZ2T15NDqzAjFyqgAAAkk"]
[Wed Mar 25 18:45:21.218373 2026] [:error] [pid 47989:tid 47997] [client 51.103.250.122:62661] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acO8wSWKdJMhIccROjm6SgAAAUY"]
[Wed Mar 25 18:45:21.823928 2026] [:error] [pid 47989:tid 47994] [client 51.103.250.122:44241] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acO8wSWKdJMhIccROjm6TwAAAUM"]
[Wed Mar 25 18:45:22.342847 2026] [:error] [pid 47989:tid 47998] [client 51.103.250.122:56141] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acO8wiWKdJMhIccROjm6UAAAAUc"]
[Wed Mar 25 19:34:14.861316 2026] [:error] [pid 26321:tid 26363] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 19:34:15.110417 2026] [:error] [pid 26321:tid 26358] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 19:34:16.968197 2026] [:error] [pid 26321:tid 26352] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 19:34:17.213199 2026] [:error] [pid 26321:tid 26355] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 19:34:17.456810 2026] [:error] [pid 26321:tid 26346] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 19:34:17.705323 2026] [:error] [pid 26321:tid 26364] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 19:34:17.947287 2026] [:error] [pid 26321:tid 26341] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 19:34:18.189428 2026] [:error] [pid 26321:tid 26339] [client 68.221.133.183:10768] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 19:34:18.428201 2026] [:error] [pid 26321:tid 26360] [client 68.221.133.183:10768] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPIOvKO65qqGZCSPZpHnwAAAhM"]
[Wed Mar 25 19:34:18.908060 2026] [:error] [pid 26449:tid 26458] [client 68.221.133.183:14099] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPIOtpZ2T15NDqzAjF6yAAAAkU"]
[Wed Mar 25 19:34:19.415864 2026] [:error] [pid 47946:tid 47958] [client 68.221.133.183:10940] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPIOzipQTqBMSeKYheEHAAAAQo"]
[Wed Mar 25 19:34:19.893579 2026] [:error] [pid 25969:tid 26033] [client 68.221.133.183:14399] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPIOxd3aEUmOfdKja8JPgAAA8c"]
[Wed Mar 25 19:34:20.384118 2026] [:error] [pid 25969:tid 26050] [client 68.221.133.183:11171] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acPIPBd3aEUmOfdKja8JRQAAA9g"]
[Wed Mar 25 19:34:20.864019 2026] [:error] [pid 47989:tid 48010] [client 68.221.133.183:12792] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ta.php"] [unique_id "acPIPCWKdJMhIccROjnbAgAAAVM"]
[Wed Mar 25 19:34:21.342446 2026] [:error] [pid 892:tid 910] [client 68.221.133.183:17050] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ta.php"] [unique_id "acPIPST_G8WMU3T3yxrSYAAAAMw"]
[Wed Mar 25 19:37:23.037359 2026] [:error] [pid 26449:tid 26453] [client 185.223.152.117:63485] [client 185.223.152.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.117, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "acPI89pZ2T15NDqzAjF7HwAAAkA"]
[Wed Mar 25 19:37:23.041000 2026] [:error] [pid 26449:tid 26453] [client 185.223.152.117:63485] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 21:10:56.415832 2026] [:error] [pid 25875:tid 25889] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 21:10:56.652452 2026] [:error] [pid 25875:tid 25891] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 21:10:57.363189 2026] [:error] [pid 25875:tid 25884] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 21:10:57.600701 2026] [:error] [pid 25875:tid 25890] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 21:10:57.837891 2026] [:error] [pid 25875:tid 25905] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 21:10:58.073998 2026] [:error] [pid 25875:tid 25886] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 21:10:58.311427 2026] [:error] [pid 25875:tid 25897] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 21:10:58.547105 2026] [:error] [pid 25875:tid 25881] [client 72.146.6.194:8288] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 21:10:58.786798 2026] [:error] [pid 25875:tid 25895] [client 72.146.6.194:8288] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPe4hJ38QkS3NyfshwhxwAAAo4"]
[Wed Mar 25 21:10:59.252875 2026] [:error] [pid 892:tid 913] [client 72.146.6.194:30915] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPe4yT_G8WMU3T3yxrdAgAAAM8"]
[Wed Mar 25 21:10:59.723377 2026] [:error] [pid 25875:tid 25889] [client 72.146.6.194:30919] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPe4xJ38QkS3NyfshwhyQAAAog"]
[Wed Mar 25 21:11:00.188755 2026] [:error] [pid 892:tid 914] [client 72.146.6.194:7292] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPe5CT_G8WMU3T3yxrdAwAAANA"]
[Wed Mar 25 21:11:00.654436 2026] [:error] [pid 26269:tid 26285] [client 72.146.6.194:7516] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPe5En7e-ZQbaIs7qzBTwAAAYk"]
[Wed Mar 25 21:11:01.119498 2026] [:error] [pid 25967:tid 25984] [client 72.146.6.194:10959] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPe5fg8Qtq7ZM4mSFlvOgAAA0w"]
[Wed Mar 25 21:11:01.586161 2026] [:error] [pid 25967:tid 25978] [client 72.146.6.194:7261] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acPe5fg8Qtq7ZM4mSFlvPgAAA0Y"]
[Wed Mar 25 21:11:02.104653 2026] [:error] [pid 25967:tid 25988] [client 72.146.6.194:11382] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dk.php"] [unique_id "acPe5vg8Qtq7ZM4mSFlvQwAAA1A"]
[Wed Mar 25 21:11:02.572765 2026] [:error] [pid 892:tid 899] [client 72.146.6.194:12877] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dk.php"] [unique_id "acPe5iT_G8WMU3T3yxrdBgAAAMM"]
[Wed Mar 25 21:11:03.046334 2026] [:error] [pid 25967:tid 25976] [client 72.146.6.194:21964] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dk.php"] [unique_id "acPe5_g8Qtq7ZM4mSFlvRwAAA0Q"]
[Wed Mar 25 21:11:03.515902 2026] [:error] [pid 25967:tid 25978] [client 72.146.6.194:24888] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dk.php"] [unique_id "acPe5_g8Qtq7ZM4mSFlvSQAAA0Y"]
[Wed Mar 25 21:11:03.982278 2026] [:error] [pid 892:tid 922] [client 72.146.6.194:7410] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPe5yT_G8WMU3T3yxrdCAAAANc"]
[Wed Mar 25 21:11:04.447845 2026] [:error] [pid 26269:tid 26296] [client 72.146.6.194:10978] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPe6En7e-ZQbaIs7qzBVQAAAZQ"]
[Wed Mar 25 21:11:04.917575 2026] [:error] [pid 26449:tid 26458] [client 72.146.6.194:48973] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPe6NpZ2T15NDqzAjGIEwAAAkU"]
[Wed Mar 25 21:11:05.396097 2026] [:error] [pid 26449:tid 26454] [client 72.146.6.194:40105] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPe6dpZ2T15NDqzAjGIFgAAAkE"]
[Wed Mar 25 21:19:43.927671 2026] [:error] [pid 756:tid 862] [client 195.178.110.39:35332] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/backend/.env"] [unique_id "acPg7zOaW6oylMIDBCQlMwAAAIo"]
[Wed Mar 25 21:26:32.455972 2026] [:error] [pid 26321:tid 26350] [client 94.154.239.69:48380] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acPiiPKO65qqGZCSPZpb6QAAAgk"]
[Wed Mar 25 21:26:34.416726 2026] [:error] [pid 26321:tid 26342] [client 94.154.239.69:52662] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acPiivKO65qqGZCSPZpb6gAAAgM"]
[Wed Mar 25 21:26:36.426051 2026] [:error] [pid 756:tid 851] [client 94.154.239.69:43548] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acPijDOaW6oylMIDBCQlegAAAIE"]
[Wed Mar 25 21:26:38.454192 2026] [:error] [pid 25967:tid 25987] [client 94.154.239.69:43566] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acPijvg8Qtq7ZM4mSFlyMgAAA08"]
[Wed Mar 25 21:26:40.452618 2026] [:error] [pid 26321:tid 26348] [client 94.154.239.69:43568] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acPikPKO65qqGZCSPZpb6wAAAgc"]
[Wed Mar 25 21:26:42.453772 2026] [:error] [pid 26449:tid 26475] [client 94.154.239.69:43582] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acPiktpZ2T15NDqzAjGKEwAAAlY"]
[Wed Mar 25 21:26:44.475991 2026] [:error] [pid 26321:tid 26358] [client 94.154.239.69:48232] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acPilPKO65qqGZCSPZpb8gAAAhE"]
[Wed Mar 25 21:26:46.484841 2026] [:error] [pid 26321:tid 26356] [client 94.154.239.69:48240] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acPilvKO65qqGZCSPZpb-QAAAg8"]
[Wed Mar 25 21:26:48.499303 2026] [:error] [pid 892:tid 921] [client 94.154.239.69:48246] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acPimCT_G8WMU3T3yxreUQAAANY"]
[Wed Mar 25 21:26:50.489142 2026] [:error] [pid 25969:tid 26027] [client 94.154.239.69:48248] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acPimhd3aEUmOfdKja8TKAAAA8E"]
[Wed Mar 25 21:26:52.496802 2026] [:error] [pid 47946:tid 47967] [client 94.154.239.69:48254] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acPinDipQTqBMSeKYheKWwAAARM"]
[Wed Mar 25 21:26:54.362551 2026] [:error] [pid 25875:tid 25904] [client 94.154.239.69:48258] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acPinhJ38QkS3NyfshwnoAAAApc"]
[Wed Mar 25 21:26:56.359252 2026] [:error] [pid 25969:tid 26050] [client 94.154.239.69:35178] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acPioBd3aEUmOfdKja8TLQAAA9g"]
[Wed Mar 25 21:26:58.371676 2026] [:error] [pid 892:tid 908] [client 94.154.239.69:35188] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acPioiT_G8WMU3T3yxreWQAAAMo"]
[Wed Mar 25 21:27:00.373890 2026] [:error] [pid 25969:tid 26047] [client 94.154.239.69:35204] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acPipBd3aEUmOfdKja8TMgAAA9U"]
[Wed Mar 25 21:27:02.395315 2026] [:error] [pid 25969:tid 26041] [client 94.154.239.69:35212] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acPiphd3aEUmOfdKja8TOAAAA88"]
[Wed Mar 25 21:27:04.405651 2026] [:error] [pid 25969:tid 26033] [client 94.154.239.69:35218] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acPiqBd3aEUmOfdKja8TPAAAA8c"]
[Wed Mar 25 21:27:06.408975 2026] [:error] [pid 25969:tid 26027] [client 94.154.239.69:35988] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acPiqhd3aEUmOfdKja8TQgAAA8E"]
[Wed Mar 25 21:27:08.265802 2026] [:error] [pid 756:tid 850] [client 94.154.239.69:36004] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acPirDOaW6oylMIDBCQliAAAAIA"]
[Wed Mar 25 21:27:10.264282 2026] [:error] [pid 756:tid 866] [client 94.154.239.69:36006] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acPirjOaW6oylMIDBCQliQAAAI4"]
[Wed Mar 25 21:27:12.297353 2026] [:error] [pid 47989:tid 47991] [client 94.154.239.69:36018] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acPisCWKdJMhIccROjn_qAAAAUA"]
[Wed Mar 25 21:27:14.308821 2026] [:error] [pid 26269:tid 26278] [client 94.154.239.69:36034] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acPiskn7e-ZQbaIs7qzCjwAAAYI"]
[Wed Mar 25 21:27:16.328850 2026] [:error] [pid 25967:tid 25992] [client 94.154.239.69:54092] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acPitPg8Qtq7ZM4mSFlyQwAAA1Q"]
[Wed Mar 25 21:27:20.192142 2026] [:error] [pid 26449:tid 26460] [client 94.154.239.69:54094] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acPiuNpZ2T15NDqzAjGKMQAAAkc"]
[Wed Mar 25 21:33:41.895594 2026] [:error] [pid 47946:tid 47952] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 21:33:42.134268 2026] [:error] [pid 47946:tid 47948] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 21:33:42.850891 2026] [:error] [pid 47946:tid 47963] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 21:33:43.090198 2026] [:error] [pid 47946:tid 47972] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 21:33:43.329603 2026] [:error] [pid 47946:tid 47968] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 21:33:43.569430 2026] [:error] [pid 47946:tid 47960] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 21:33:43.809173 2026] [:error] [pid 47946:tid 47956] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 21:33:44.048114 2026] [:error] [pid 47946:tid 47959] [client 51.103.250.122:12190] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 21:33:44.285800 2026] [:error] [pid 47946:tid 47950] [client 51.103.250.122:12190] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPkODipQTqBMSeKYheK0QAAAQI"]
[Wed Mar 25 21:33:44.760570 2026] [:error] [pid 25875:tid 25897] [client 51.103.250.122:37865] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPkOBJ38QkS3NyfshwrOAAAApA"]
[Wed Mar 25 21:33:45.236488 2026] [:error] [pid 25875:tid 25888] [client 51.103.250.122:19610] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPkORJ38QkS3NyfshwrOwAAAoc"]
[Wed Mar 25 21:33:45.716014 2026] [:error] [pid 25875:tid 25881] [client 51.103.250.122:9150] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPkORJ38QkS3NyfshwrPAAAAoA"]
[Wed Mar 25 21:33:46.186693 2026] [:error] [pid 25875:tid 25893] [client 51.103.250.122:29124] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPkOhJ38QkS3NyfshwrPwAAAow"]
[Wed Mar 25 21:33:46.658151 2026] [:error] [pid 25967:tid 25990] [client 51.103.250.122:10176] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPkOvg8Qtq7ZM4mSFl0IQAAA1I"]
[Wed Mar 25 21:33:47.135581 2026] [:error] [pid 892:tid 913] [client 51.103.250.122:3466] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPkOyT_G8WMU3T3yxrfDgAAAM8"]
[Wed Mar 25 21:33:47.606196 2026] [:error] [pid 892:tid 906] [client 51.103.250.122:21073] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fde.php"] [unique_id "acPkOyT_G8WMU3T3yxrfDwAAAMg"]
[Wed Mar 25 21:33:48.078813 2026] [:error] [pid 25875:tid 25890] [client 51.103.250.122:57695] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acPkPBJ38QkS3NyfshwrQwAAAok"]
[Wed Mar 25 21:33:48.551291 2026] [:error] [pid 25875:tid 25897] [client 51.103.250.122:9715] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acPkPBJ38QkS3NyfshwrRAAAApA"]
[Wed Mar 25 21:33:49.042488 2026] [:error] [pid 26449:tid 26461] [client 51.103.250.122:19631] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acPkPdpZ2T15NDqzAjGLAgAAAkg"]
[Wed Mar 25 21:33:49.526681 2026] [:error] [pid 26321:tid 26344] [client 51.103.250.122:10235] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/mjde.php"] [unique_id "acPkPfKO65qqGZCSPZpc-AAAAgU"]
[Wed Mar 25 21:33:50.003376 2026] [:error] [pid 26321:tid 26351] [client 51.103.250.122:18338] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPkPvKO65qqGZCSPZpc-gAAAgo"]
[Wed Mar 25 21:33:50.495286 2026] [:error] [pid 25967:tid 25976] [client 51.103.250.122:29164] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPkPvg8Qtq7ZM4mSFl0JwAAA0Q"]
[Wed Mar 25 21:33:50.966063 2026] [:error] [pid 25967:tid 25984] [client 51.103.250.122:36977] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPkPvg8Qtq7ZM4mSFl0KwAAA0w"]
[Wed Mar 25 21:33:51.439455 2026] [:error] [pid 25875:tid 25896] [client 51.103.250.122:18055] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPkPxJ38QkS3NyfshwrSAAAAo8"]
[Wed Mar 25 21:33:51.941594 2026] [:error] [pid 892:tid 922] [client 51.103.250.122:10211] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yawa.php"] [unique_id "acPkPyT_G8WMU3T3yxrfEQAAANc"]
[Wed Mar 25 21:33:52.440926 2026] [:error] [pid 26321:tid 26342] [client 51.103.250.122:29139] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dk.php"] [unique_id "acPkQPKO65qqGZCSPZpc-wAAAgM"]
[Wed Mar 25 21:33:52.913559 2026] [:error] [pid 47946:tid 47954] [client 51.103.250.122:36986] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPkQDipQTqBMSeKYheK0gAAAQY"]
[Wed Mar 25 21:33:53.385702 2026] [:error] [pid 25967:tid 25990] [client 51.103.250.122:12207] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPkQfg8Qtq7ZM4mSFl0MQAAA1I"]
[Wed Mar 25 21:34:06.202191 2026] [:error] [pid 26321:tid 26340] [client 4.223.157.191:13842] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPkTvKO65qqGZCSPZpc_wAAAgE"]
[Wed Mar 25 21:34:06.749514 2026] [:error] [pid 756:tid 853] [client 4.223.157.191:13837] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPkTjOaW6oylMIDBCQlyQAAAIM"]
[Wed Mar 25 21:34:07.277282 2026] [:error] [pid 47989:tid 48000] [client 4.223.157.191:13951] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPkTyWKdJMhIccROjkBvwAAAUk"]
[Wed Mar 25 21:34:07.835486 2026] [:error] [pid 47989:tid 48009] [client 4.223.157.191:13894] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPkTyWKdJMhIccROjkBwQAAAVI"]
[Wed Mar 25 22:08:21.982825 2026] [:error] [pid 25967:tid 25987] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 22:08:22.225628 2026] [:error] [pid 25967:tid 25978] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 22:08:22.954311 2026] [:error] [pid 25967:tid 25980] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 22:08:23.197049 2026] [:error] [pid 25967:tid 25995] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 22:08:23.439890 2026] [:error] [pid 25967:tid 25991] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 22:08:23.685359 2026] [:error] [pid 25967:tid 25974] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 22:08:23.929931 2026] [:error] [pid 25967:tid 25976] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 22:08:24.173806 2026] [:error] [pid 25967:tid 25986] [client 68.221.133.183:1380] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 22:08:24.414022 2026] [:error] [pid 25967:tid 25985] [client 68.221.133.183:1380] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPsWPg8Qtq7ZM4mSFl9nQAAA00"]
[Wed Mar 25 22:08:24.915023 2026] [:error] [pid 25875:tid 25881] [client 68.221.133.183:11564] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPsWBJ38QkS3Nyfshw5NAAAAoA"]
[Wed Mar 25 22:08:25.396623 2026] [:error] [pid 25875:tid 25894] [client 68.221.133.183:1401] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPsWRJ38QkS3Nyfshw5NgAAAo0"]
[Wed Mar 25 22:08:25.879425 2026] [:error] [pid 25875:tid 25896] [client 68.221.133.183:11534] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gin.php"] [unique_id "acPsWRJ38QkS3Nyfshw5PAAAAo8"]
[Wed Mar 25 22:08:26.369066 2026] [:error] [pid 25969:tid 26032] [client 68.221.133.183:15931] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPsWhd3aEUmOfdKja8WLAAAA8Y"]
[Wed Mar 25 22:08:26.847218 2026] [:error] [pid 756:tid 869] [client 68.221.133.183:8221] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPsWjOaW6oylMIDBCQnAgAAAJE"]
[Wed Mar 25 22:08:27.325229 2026] [:error] [pid 26449:tid 26462] [client 68.221.133.183:23549] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPsW9pZ2T15NDqzAjGOtAAAAkk"]
[Wed Mar 25 22:08:27.805532 2026] [:error] [pid 47946:tid 47963] [client 68.221.133.183:22132] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/az.php"] [unique_id "acPsWzipQTqBMSeKYheMOAAAAQ8"]
[Wed Mar 25 22:25:21.363796 2026] [:error] [pid 47989:tid 47992] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 22:25:21.633214 2026] [:error] [pid 47989:tid 48006] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 22:25:22.439054 2026] [:error] [pid 47989:tid 48008] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 22:25:22.709213 2026] [:error] [pid 47989:tid 47999] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 22:25:22.976726 2026] [:error] [pid 47989:tid 48010] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 22:25:23.245514 2026] [:error] [pid 47989:tid 47991] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 22:25:23.511786 2026] [:error] [pid 47989:tid 47996] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 22:25:23.778970 2026] [:error] [pid 47989:tid 48004] [client 4.223.157.191:43953] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 22:25:24.042160 2026] [:error] [pid 47989:tid 47993] [client 4.223.157.191:43953] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPwVCWKdJMhIccROjkMtQAAAUI"]
[Wed Mar 25 22:25:24.568856 2026] [:error] [pid 26449:tid 26474] [client 4.223.157.191:36302] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPwVNpZ2T15NDqzAjGRFAAAAlU"]
[Wed Mar 25 22:25:25.098716 2026] [:error] [pid 25967:tid 25972] [client 4.223.157.191:36311] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPwVfg8Qtq7ZM4mSFmDcQAAA0A"]
[Wed Mar 25 22:25:25.625758 2026] [:error] [pid 26449:tid 26475] [client 4.223.157.191:46732] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/AAAA.php"] [unique_id "acPwVdpZ2T15NDqzAjGRFgAAAlY"]
[Wed Mar 25 23:13:41.298835 2026] [:error] [pid 25967:tid 25981] [client 4.223.157.191:33332] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acP7pfg8Qtq7ZM4mSFmSPQAAA0k"]
[Wed Mar 25 23:13:41.823925 2026] [:error] [pid 25967:tid 25980] [client 4.223.157.191:17565] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acP7pfg8Qtq7ZM4mSFmSQAAAA0g"]
[Wed Mar 25 23:13:42.351094 2026] [:error] [pid 26269:tid 26300] [client 4.223.157.191:2449] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acP7pkn7e-ZQbaIs7qzJHgAAAZg"]
[Wed Mar 25 23:13:42.896036 2026] [:error] [pid 756:tid 862] [client 4.223.157.191:32805] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acP7pjOaW6oylMIDBCQqcwAAAIo"]
[Wed Mar 25 23:23:42.989511 2026] [:error] [pid 892:tid 915] [client 177.185.92.136:28348] [client 177.185.92.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.185.92.136, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acP9_iT_G8WMU3T3yxrpqAAAANE"]
[Wed Mar 25 23:23:42.994721 2026] [:error] [pid 892:tid 915] [client 177.185.92.136:28348] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 23:24:54.066097 2026] [:error] [pid 25969:tid 26028] [client 178.42.116.41:58450] [client 178.42.116.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.42.116.41, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acP-Rhd3aEUmOfdKja8bzgAAA8I"]
[Wed Mar 25 23:24:54.072989 2026] [:error] [pid 25969:tid 26028] [client 178.42.116.41:58450] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 23:29:07.543396 2026] [:error] [pid 25967:tid 25972] [client 43.153.19.83:43530] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acP_Q_g8Qtq7ZM4mSFmWWwAAA0A"]
[Wed Mar 25 23:38:14.239340 2026] [:error] [pid 26321:tid 26362] [client 43.166.128.86:54942] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acQBZvKO65qqGZCSPZpxigAAAhU"]
[Thu Mar 26 00:36:42.633131 2026] [:error] [pid 55734:tid 55849] [client 147.135.212.201:46132] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acQPGs_x4fL7PCmNzkB4yAAAANc"]
[Thu Mar 26 00:36:44.559042 2026] [:error] [pid 55734:tid 55841] [client 147.135.212.201:35296] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acQPHM_x4fL7PCmNzkB4zAAAAM8"]
[Thu Mar 26 00:36:46.623655 2026] [:error] [pid 55735:tid 55861] [client 147.135.212.201:35300] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acQPHkhXsYCMQZKUd5OhWQAAAQY"]
[Thu Mar 26 00:36:48.602472 2026] [:error] [pid 56131:tid 56151] [client 147.135.212.201:35310] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acQPIEg5t1V4ZYPCUhwTjQAAAAw"]
[Thu Mar 26 00:36:50.536575 2026] [:error] [pid 56131:tid 56161] [client 147.135.212.201:35318] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acQPIkg5t1V4ZYPCUhwTkwAAABY"]
[Thu Mar 26 00:36:52.496919 2026] [:error] [pid 55735:tid 55859] [client 147.135.212.201:57060] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acQPJEhXsYCMQZKUd5OhYwAAAQQ"]
[Thu Mar 26 00:36:54.288358 2026] [:error] [pid 56131:tid 56163] [client 147.135.212.201:57076] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acQPJkg5t1V4ZYPCUhwTnwAAABg"]
[Thu Mar 26 00:36:56.248940 2026] [:error] [pid 56131:tid 56150] [client 147.135.212.201:57082] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acQPKEg5t1V4ZYPCUhwTrAAAAAs"]
[Thu Mar 26 00:36:58.179486 2026] [:error] [pid 56131:tid 56152] [client 147.135.212.201:57088] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acQPKkg5t1V4ZYPCUhwTsAAAAA0"]
[Thu Mar 26 00:37:00.124730 2026] [:error] [pid 55734:tid 55848] [client 147.135.212.201:57096] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acQPLM_x4fL7PCmNzkB43wAAANY"]
[Thu Mar 26 00:37:02.066825 2026] [:error] [pid 55733:tid 55760] [client 147.135.212.201:42126] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acQPLqMzUauzYCgMHcnMgwAAAI0"]
[Thu Mar 26 00:37:03.845792 2026] [:error] [pid 55734:tid 55826] [client 147.135.212.201:42132] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acQPL8_x4fL7PCmNzkB46gAAAMA"]
[Thu Mar 26 00:37:05.639213 2026] [:error] [pid 55735:tid 55861] [client 147.135.212.201:42136] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acQPMUhXsYCMQZKUd5OhcgAAAQY"]
[Thu Mar 26 00:37:07.607204 2026] [:error] [pid 55733:tid 55756] [client 147.135.212.201:42150] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acQPM6MzUauzYCgMHcnMhwAAAIk"]
[Thu Mar 26 00:37:09.501414 2026] [:error] [pid 56131:tid 56139] [client 147.135.212.201:42158] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acQPNUg5t1V4ZYPCUhwTyAAAAAA"]
[Thu Mar 26 00:37:11.471845 2026] [:error] [pid 55733:tid 55755] [client 147.135.212.201:59512] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acQPN6MzUauzYCgMHcnMkQAAAIg"]
[Thu Mar 26 00:37:13.545949 2026] [:error] [pid 55735:tid 55875] [client 147.135.212.201:59528] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acQPOUhXsYCMQZKUd5OhhQAAARM"]
[Thu Mar 26 00:37:15.879207 2026] [:error] [pid 55733:tid 55752] [client 147.135.212.201:59538] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acQPO6MzUauzYCgMHcnMmwAAAIU"]
[Thu Mar 26 00:37:19.696723 2026] [:error] [pid 56131:tid 56143] [client 147.135.212.201:59554] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acQPP0g5t1V4ZYPCUhwT3wAAAAQ"]
[Thu Mar 26 00:46:25.263188 2026] [:error] [pid 55735:tid 55875] [client 195.178.110.39:47340] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "acQRYUhXsYCMQZKUd5OjnQAAARM"]
[Thu Mar 26 00:51:03.189223 2026] [:error] [pid 32829:tid 32847] [client 195.178.110.39:54426] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "acQSd3FEeazI9mYaKszJawAAAFA"]
[Thu Mar 26 00:52:50.454812 2026] [:error] [pid 56131:tid 56154] [client 195.178.110.39:49402] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "acQS4kg5t1V4ZYPCUhwZ3gAAAA8"]
[Thu Mar 26 00:59:44.221434 2026] [:error] [pid 56131:tid 56163] [client 195.178.110.39:50944] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/%2e/.env"] [unique_id "acQUgEg5t1V4ZYPCUhwdAQAAABg"]
[Thu Mar 26 01:18:24.041326 2026] [:error] [pid 56131:tid 56143] [client 195.178.110.39:34274] [client 195.178.110.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/..%5c/.env"] [unique_id "acQY4Eg5t1V4ZYPCUhwjmgAAAAQ"]
[Thu Mar 26 01:36:39.940400 2026] [:error] [pid 56131:tid 56153] [client 125.75.66.97:56894] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acQdJ0g5t1V4ZYPCUhwq9gAAAA4"]
[Thu Mar 26 03:54:44.427461 2026] [:error] [pid 16609:tid 16619] [client 2.57.168.16:59219] [client 2.57.168.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.168.16, incrementing brute counter"] [hostname "pumpbooking.com"] [uri "/wp-login.php"] [unique_id "acQ9hJwuhmhbS_OPKkrUDAAAAME"]
[Thu Mar 26 03:54:44.431501 2026] [:error] [pid 16609:tid 16619] [client 2.57.168.16:59219] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 26 03:54:55.531843 2026] [:error] [pid 16502:tid 16519] [client 51.91.242.106:36588] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "acQ9j5VYZY2TzxdvDKtB8AAAAAY"]
[Thu Mar 26 03:54:57.670858 2026] [:error] [pid 16505:tid 16561] [client 51.91.242.106:34928] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "acQ9kea38IckCrCncFn-2QAAAFU"]
[Thu Mar 26 03:54:59.631973 2026] [:error] [pid 16506:tid 16570] [client 51.91.242.106:34942] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acQ9k2yB6wBvYPbz_mq_lgAAAIM"]
[Thu Mar 26 03:55:01.589817 2026] [:error] [pid 16505:tid 16540] [client 51.91.242.106:34950] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acQ9lea38IckCrCncFn-3AAAAEA"]
[Thu Mar 26 03:55:03.571028 2026] [:error] [pid 16609:tid 16622] [client 51.91.242.106:34962] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acQ9l5wuhmhbS_OPKkrUMQAAAMQ"]
[Thu Mar 26 03:55:05.482461 2026] [:error] [pid 16505:tid 16558] [client 51.91.242.106:34974] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acQ9mea38IckCrCncFn-4AAAAFI"]
[Thu Mar 26 03:55:07.438748 2026] [:error] [pid 16502:tid 16537] [client 51.91.242.106:37770] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acQ9m5VYZY2TzxdvDKtB-QAAABg"]
[Thu Mar 26 03:55:09.406419 2026] [:error] [pid 16506:tid 16574] [client 51.91.242.106:37776] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acQ9nWyB6wBvYPbz_mq_pgAAAIc"]
[Thu Mar 26 03:55:11.321765 2026] [:error] [pid 16609:tid 16632] [client 51.91.242.106:37778] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acQ9n5wuhmhbS_OPKkrUQQAAAM4"]
[Thu Mar 26 03:55:13.362564 2026] [:error] [pid 16609:tid 16639] [client 51.91.242.106:37784] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acQ9oZwuhmhbS_OPKkrUSAAAANU"]
[Thu Mar 26 03:55:15.225204 2026] [:error] [pid 16502:tid 16534] [client 51.91.242.106:37798] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acQ9o5VYZY2TzxdvDKtB_wAAABU"]
[Thu Mar 26 03:55:17.188856 2026] [:error] [pid 16505:tid 16552] [client 51.91.242.106:55690] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acQ9pea38IckCrCncFn-7QAAAEw"]
[Thu Mar 26 03:55:19.269169 2026] [:error] [pid 16609:tid 16640] [client 51.91.242.106:55698] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acQ9p5wuhmhbS_OPKkrUUgAAANY"]
[Thu Mar 26 03:55:21.272995 2026] [:error] [pid 16506:tid 16580] [client 51.91.242.106:55706] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acQ9qWyB6wBvYPbz_mq_vgAAAI0"]
[Thu Mar 26 03:55:23.575612 2026] [:error] [pid 16506:tid 16586] [client 51.91.242.106:55720] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acQ9q2yB6wBvYPbz_mq_wgAAAJM"]
[Thu Mar 26 03:55:25.511029 2026] [:error] [pid 16506:tid 16583] [client 51.91.242.106:55724] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acQ9rWyB6wBvYPbz_mq_xgAAAJA"]
[Thu Mar 26 03:55:27.449320 2026] [:error] [pid 16505:tid 16562] [client 51.91.242.106:40446] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acQ9r-a38IckCrCncFn--gAAAFY"]
[Thu Mar 26 03:55:29.421091 2026] [:error] [pid 16505:tid 16545] [client 51.91.242.106:40462] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acQ9sea38IckCrCncFn_AQAAAEU"]
[Thu Mar 26 03:55:31.331184 2026] [:error] [pid 16609:tid 16636] [client 51.91.242.106:40474] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acQ9s5wuhmhbS_OPKkrUcQAAANI"]
[Thu Mar 26 03:55:33.294877 2026] [:error] [pid 16609:tid 16637] [client 51.91.242.106:40478] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acQ9tZwuhmhbS_OPKkrUfAAAANM"]
[Thu Mar 26 03:55:35.534017 2026] [:error] [pid 16609:tid 16638] [client 51.91.242.106:40488] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acQ9t5wuhmhbS_OPKkrUiAAAANQ"]
[Thu Mar 26 03:55:39.279614 2026] [:error] [pid 16609:tid 16633] [client 51.91.242.106:48916] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acQ9u5wuhmhbS_OPKkrUkgAAAM8"]
[Thu Mar 26 06:38:44.916797 2026] [:error] [pid 60829:tid 60849] [client 104.28.162.51:37623] [client 104.28.162.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.162.51, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acRj9PTdjHKeZokybaQDKQAAARI"]
[Thu Mar 26 06:38:45.202141 2026] [:error] [pid 60829:tid 60849] [client 104.28.162.51:37623] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 07:02:29.468782 2026] [:error] [pid 19710:tid 19737] [client 187.19.227.44:22145] [client 187.19.227.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.227.44, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acRphQVEWP8Ar68Njk6kOwAAAA8"]
[Thu Mar 26 07:02:29.474253 2026] [:error] [pid 19710:tid 19737] [client 187.19.227.44:22145] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 07:12:52.537891 2026] [:error] [pid 19818:tid 19820] [client 192.3.207.218:56849] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/artisan"] [unique_id "acRr9MzaSnm3d1BeM5WNfQAAAMA"]
[Thu Mar 26 07:12:52.959594 2026] [:error] [pid 19710:tid 19732] [client 192.3.207.218:57421] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/artisan"] [unique_id "acRr9AVEWP8Ar68Njk6oqAAAAAo"]
[Thu Mar 26 07:12:54.068987 2026] [:error] [pid 19712:tid 19778] [client 192.3.207.218:57876] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/artisan"] [unique_id "acRr9tWhKhRNqm23vFPeOAAAAII"]
[Thu Mar 26 07:12:54.491316 2026] [:error] [pid 60829:tid 60840] [client 192.3.207.218:58543] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/artisan"] [unique_id "acRr9vTdjHKeZokybaQpvAAAAQk"]
[Thu Mar 26 07:12:55.344007 2026] [:error] [pid 19710:tid 19733] [client 192.3.207.218:58877] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "acRr9wVEWP8Ar68Njk6pUAAAAAs"]
[Thu Mar 26 07:12:55.782970 2026] [:error] [pid 19711:tid 19759] [client 192.3.207.218:59790] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/.env"] [unique_id "acRr92j3l1y81GYfluRJvgAAAEo"]
[Thu Mar 26 07:12:56.639045 2026] [:error] [pid 31778:tid 31805] [client 192.3.207.218:60203] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumpbooking.com"] [uri "/.env"] [unique_id "acRr-A3kybI2o-xasmA3LwAAAcw"]
[Thu Mar 26 12:18:51.591072 2026] [:error] [pid 19818:tid 19838] [client 54.36.60.91:59078] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acSzq8zaSnm3d1BeM5UgxQAAANI"]
[Thu Mar 26 12:18:53.649505 2026] [:error] [pid 31780:tid 31841] [client 54.36.60.91:52492] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acSzrZJDwZsy5O4ZXEgaJAAAAhQ"]
[Thu Mar 26 12:18:55.551797 2026] [:error] [pid 19712:tid 19779] [client 54.36.60.91:52502] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acSzr9WhKhRNqm23vFP49wAAAIM"]
[Thu Mar 26 12:18:57.416412 2026] [:error] [pid 31670:tid 31675] [client 54.36.60.91:52518] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acSzsTXVthXxCnWjOTTKkgAAAUM"]
[Thu Mar 26 12:18:59.256924 2026] [:error] [pid 19710:tid 19744] [client 54.36.60.91:52524] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acSzswVEWP8Ar68Njk7NQAAAABY"]
[Thu Mar 26 12:19:01.225077 2026] [:error] [pid 60829:tid 60853] [client 54.36.60.91:52530] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acSztfTdjHKeZokybaRv2wAAARY"]
[Thu Mar 26 12:19:03.254929 2026] [:error] [pid 31780:tid 31838] [client 54.36.60.91:58664] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acSzt5JDwZsy5O4ZXEgaLwAAAhE"]
[Thu Mar 26 12:19:05.220077 2026] [:error] [pid 31670:tid 31691] [client 54.36.60.91:58676] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acSzuTXVthXxCnWjOTTKoAAAAVM"]
[Thu Mar 26 12:19:07.054299 2026] [:error] [pid 19818:tid 19824] [client 54.36.60.91:58684] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acSzu8zaSnm3d1BeM5UhGAAAAMQ"]
[Thu Mar 26 14:25:58.482717 2026] [:error] [pid 31670:tid 31675] [client 38.137.53.205:48951] [client 38.137.53.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.137.53.205, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acTRdjXVthXxCnWjOTQHRQAAAUM"]
[Thu Mar 26 14:25:58.488097 2026] [:error] [pid 31670:tid 31675] [client 38.137.53.205:48951] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 17:53:48.642887 2026] [:error] [pid 31780:tid 31842] [client 43.130.131.18:59184] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acUCLJJDwZsy5O4ZXEiI8wAAAhU"]
[Thu Mar 26 18:00:00.272550 2026] [:error] [pid 19818:tid 19843] [client 43.135.145.77:53874] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acUDoMzaSnm3d1BeM5XmlQAAANc"]
[Thu Mar 26 18:42:44.838343 2026] [:error] [pid 31780:tid 31844] [client 37.187.226.30:60150] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acUNpJJDwZsy5O4ZXEiXcwAAAhc"]
[Thu Mar 26 18:42:46.777107 2026] [:error] [pid 31670:tid 31683] [client 37.187.226.30:58846] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acUNpjXVthXxCnWjOTSCTwAAAUs"]
[Thu Mar 26 18:42:49.107178 2026] [:error] [pid 60829:tid 60844] [client 37.187.226.30:58862] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acUNqfTdjHKeZokybaS5zwAAAQ0"]
[Thu Mar 26 18:42:51.398620 2026] [:error] [pid 60829:tid 60852] [client 37.187.226.30:58866] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acUNq_TdjHKeZokybaS51wAAARU"]
[Thu Mar 26 18:42:53.430887 2026] [:error] [pid 60829:tid 60832] [client 37.187.226.30:58870] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acUNrfTdjHKeZokybaS52gAAAQE"]
[Thu Mar 26 18:42:55.652644 2026] [:error] [pid 31780:tid 31823] [client 37.187.226.30:58872] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acUNr5JDwZsy5O4ZXEiXhwAAAgM"]
[Thu Mar 26 18:42:57.667599 2026] [:error] [pid 31717:tid 31723] [client 37.187.226.30:55838] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acUNsb-SCF7YDISDX4_gLwAAAYE"]
[Thu Mar 26 18:42:59.752873 2026] [:error] [pid 19711:tid 19764] [client 37.187.226.30:55850] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acUNs2j3l1y81GYfluSQZgAAAE8"]
[Thu Mar 26 18:43:01.732699 2026] [:error] [pid 31780:tid 31835] [client 37.187.226.30:55852] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acUNtZJDwZsy5O4ZXEiXqQAAAg4"]
[Thu Mar 26 18:43:03.848039 2026] [:error] [pid 31780:tid 31837] [client 37.187.226.30:55862] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acUNt5JDwZsy5O4ZXEiXuAAAAhA"]
[Thu Mar 26 18:43:05.863124 2026] [:error] [pid 31778:tid 31797] [client 37.187.226.30:55874] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acUNuQ3kybI2o-xasmD5hwAAAcQ"]
[Thu Mar 26 18:43:07.851574 2026] [:error] [pid 31778:tid 31807] [client 37.187.226.30:48934] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acUNuw3kybI2o-xasmD5jgAAAc4"]
[Thu Mar 26 18:43:09.657138 2026] [:error] [pid 19818:tid 19826] [client 37.187.226.30:48936] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acUNvczaSnm3d1BeM5X32AAAAMY"]
[Thu Mar 26 18:43:11.580430 2026] [:error] [pid 31778:tid 31816] [client 37.187.226.30:48938] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acUNvw3kybI2o-xasmD5mQAAAdc"]
[Thu Mar 26 18:43:13.466795 2026] [:error] [pid 60829:tid 60851] [client 37.187.226.30:48946] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acUNwfTdjHKeZokybaS57gAAARQ"]
[Thu Mar 26 18:43:15.390755 2026] [:error] [pid 19818:tid 19826] [client 37.187.226.30:48954] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acUNw8zaSnm3d1BeM5X35wAAAMY"]
[Thu Mar 26 18:43:17.302604 2026] [:error] [pid 19818:tid 19823] [client 37.187.226.30:36284] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acUNxczaSnm3d1BeM5X39wAAAMM"]
[Thu Mar 26 18:43:20.876775 2026] [:error] [pid 19818:tid 19832] [client 37.187.226.30:36296] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acUNyMzaSnm3d1BeM5X4AQAAAMw"]
[Thu Mar 26 18:43:24.545720 2026] [:error] [pid 31670:tid 31691] [client 37.187.226.30:36302] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acUNzDXVthXxCnWjOTSCgAAAAVM"]
[Thu Mar 26 21:18:35.810931 2026] [:error] [pid 31670:tid 31680] [client 145.239.65.226:38762] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acUyKzXVthXxCnWjOTTMogAAAUg"]
[Thu Mar 26 21:18:37.737360 2026] [:error] [pid 19710:tid 19727] [client 145.239.65.226:49094] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acUyLQVEWP8Ar68Njk4YlwAAAAU"]
[Thu Mar 26 21:18:39.713404 2026] [:error] [pid 19712:tid 19800] [client 145.239.65.226:49110] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acUyL9WhKhRNqm23vFMzcgAAAJg"]
[Thu Mar 26 21:18:41.541785 2026] [:error] [pid 19710:tid 19732] [client 145.239.65.226:55686] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acUyMQVEWP8Ar68Njk4YuQAAAAo"]
[Thu Mar 26 21:18:43.543356 2026] [:error] [pid 19710:tid 19733] [client 145.239.65.226:55696] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acUyMwVEWP8Ar68Njk4YwQAAAAs"]
[Thu Mar 26 21:18:45.366473 2026] [:error] [pid 31670:tid 31692] [client 145.239.65.226:55708] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acUyNTXVthXxCnWjOTTMrQAAAVQ"]
[Thu Mar 26 21:18:47.192349 2026] [:error] [pid 31670:tid 31689] [client 145.239.65.226:55712] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acUyNzXVthXxCnWjOTTMrgAAAVE"]
[Thu Mar 26 21:18:49.061975 2026] [:error] [pid 19711:tid 19754] [client 145.239.65.226:55722] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acUyOWj3l1y81GYfluSm8AAAAEU"]
[Thu Mar 26 21:18:51.042765 2026] [:error] [pid 31780:tid 31827] [client 145.239.65.226:55728] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acUyO5JDwZsy5O4ZXEjDcgAAAgc"]
[Thu Mar 26 21:18:52.976537 2026] [:error] [pid 19710:tid 19734] [client 145.239.65.226:53522] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acUyPAVEWP8Ar68Njk4Y5gAAAAw"]
[Thu Mar 26 21:18:54.981882 2026] [:error] [pid 31670:tid 31674] [client 145.239.65.226:53536] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acUyPjXVthXxCnWjOTTMvAAAAUI"]
[Thu Mar 26 21:18:56.959907 2026] [:error] [pid 19818:tid 19834] [client 145.239.65.226:53538] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acUyQMzaSnm3d1BeM5UyawAAAM4"]
[Thu Mar 26 21:18:59.106067 2026] [:error] [pid 31670:tid 31681] [client 145.239.65.226:53544] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acUyQzXVthXxCnWjOTTMvQAAAUk"]
[Thu Mar 26 21:19:01.207799 2026] [:error] [pid 19710:tid 19730] [client 145.239.65.226:55576] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acUyRQVEWP8Ar68Njk4Y7wAAAAg"]
[Thu Mar 26 21:19:03.266989 2026] [:error] [pid 19712:tid 19799] [client 145.239.65.226:55582] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acUyR9WhKhRNqm23vFMzngAAAJc"]
[Thu Mar 26 21:19:05.237685 2026] [:error] [pid 19710:tid 19742] [client 145.239.65.226:55596] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acUySQVEWP8Ar68Njk4Y9gAAABQ"]
[Thu Mar 26 21:19:07.066741 2026] [:error] [pid 31778:tid 31815] [client 145.239.65.226:55610] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acUySw3kybI2o-xasmAddwAAAdY"]
[Thu Mar 26 21:19:08.916731 2026] [:error] [pid 31780:tid 31844] [client 145.239.65.226:55622] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acUyTJJDwZsy5O4ZXEjDewAAAhc"]
[Thu Mar 26 21:19:11.689747 2026] [:error] [pid 19710:tid 19722] [client 145.239.65.226:45896] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acUyTwVEWP8Ar68Njk4ZBAAAAAA"]
[Thu Mar 26 21:19:15.429300 2026] [:error] [pid 19712:tid 19785] [client 145.239.65.226:45902] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acUyU9WhKhRNqm23vFMzuAAAAIk"]
[Thu Mar 26 21:43:16.917047 2026] [:error] [pid 19712:tid 19794] [client 67.185.156.45:54863] [client 67.185.156.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.185.156.45, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acU39NWhKhRNqm23vFNADAAAAJI"]
[Thu Mar 26 21:43:16.928509 2026] [:error] [pid 19712:tid 19794] [client 67.185.156.45:54863] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 23:12:33.087102 2026] [:error] [pid 19818:tid 19839] [client 194.247.173.99:56974] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "acVM4czaSnm3d1BeM5VIRQAAANM"]
[Thu Mar 26 23:12:37.327691 2026] [:error] [pid 31778:tid 31803] [client 194.247.173.99:54226] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "acVM5Q3kybI2o-xasmAsmgAAAco"]
[Thu Mar 26 23:12:42.000141 2026] [:error] [pid 19710:tid 19744] [client 194.247.173.99:54248] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acVM6QVEWP8Ar68Njk5FWgAAABY"]
[Thu Mar 26 23:12:45.827251 2026] [:error] [pid 31780:tid 31825] [client 194.247.173.99:40648] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acVM7ZJDwZsy5O4ZXEjUHAAAAgU"]
[Thu Mar 26 23:12:50.876565 2026] [:error] [pid 19711:tid 19754] [client 194.247.173.99:40676] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acVM8mj3l1y81GYfluTXUQAAAEU"]
[Thu Mar 26 23:12:54.496196 2026] [:error] [pid 19710:tid 19728] [client 194.247.173.99:40698] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acVM9gVEWP8Ar68Njk5FeQAAAAY"]
[Thu Mar 26 23:12:58.114700 2026] [:error] [pid 19712:tid 19776] [client 194.247.173.99:57060] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acVM-tWhKhRNqm23vFNbtAAAAIA"]
[Thu Mar 26 23:13:00.762844 2026] [:error] [pid 19711:tid 19768] [client 194.247.173.99:57078] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acVM_Gj3l1y81GYfluTXXgAAAFM"]
[Thu Mar 26 23:13:04.989676 2026] [:error] [pid 19710:tid 19731] [client 194.247.173.99:57124] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acVNAAVEWP8Ar68Njk5FiAAAAAk"]
[Thu Mar 26 23:13:08.295410 2026] [:error] [pid 19710:tid 19722] [client 194.247.173.99:52378] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acVNBAVEWP8Ar68Njk5FjAAAAAA"]
[Thu Mar 26 23:13:11.637538 2026] [:error] [pid 19711:tid 19768] [client 194.247.173.99:52404] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acVNB2j3l1y81GYfluTXcgAAAFM"]
[Thu Mar 26 23:13:14.656290 2026] [:error] [pid 31780:tid 31834] [client 194.247.173.99:52428] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acVNCpJDwZsy5O4ZXEjULQAAAg0"]
[Thu Mar 26 23:13:17.299432 2026] [:error] [pid 19712:tid 19785] [client 194.247.173.99:40670] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acVNDdWhKhRNqm23vFNbyQAAAIk"]
[Thu Mar 26 23:13:20.659597 2026] [:error] [pid 19711:tid 19762] [client 194.247.173.99:40678] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acVNEGj3l1y81GYfluTXeQAAAE0"]
[Thu Mar 26 23:13:23.688859 2026] [:error] [pid 31670:tid 31678] [client 194.247.173.99:40698] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acVNEzXVthXxCnWjOTTstwAAAUY"]
[Thu Mar 26 23:13:26.218817 2026] [:error] [pid 19711:tid 19749] [client 194.247.173.99:52456] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acVNFmj3l1y81GYfluTXigAAAEA"]
[Thu Mar 26 23:13:46.117448 2026] [:error] [pid 19711:tid 19756] [client 194.247.173.99:52470] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acVNKmj3l1y81GYfluTX2QAAAEc"]
[Thu Mar 26 23:13:49.344491 2026] [:error] [pid 19711:tid 19765] [client 194.247.173.99:42054] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acVNLWj3l1y81GYfluTX6AAAAFA"]
[Thu Mar 26 23:13:54.681483 2026] [:error] [pid 19711:tid 19765] [client 194.247.173.99:42080] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acVNMmj3l1y81GYfluTX-QAAAFA"]
[Thu Mar 26 23:14:10.987141 2026] [:error] [pid 19712:tid 19778] [client 96.44.136.159:49826] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acVNQtWhKhRNqm23vFNb9wAAAII"], referer: https://www.google.com
[Thu Mar 26 23:14:47.039613 2026] [:error] [pid 60829:tid 60848] [client 43.159.148.221:52796] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acVNZ_TdjHKeZokybaTiXwAAARE"]
[Thu Mar 26 23:21:03.055046 2026] [:error] [pid 31670:tid 31680] [client 43.130.26.3:50772] [client 43.130.26.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acVO3zXVthXxCnWjOTTuogAAAUg"]
[Thu Mar 26 23:44:58.704548 2026] [:error] [pid 31670:tid 31687] [client 182.42.105.144:60831] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acVUejXVthXxCnWjOTT0jAAAAU8"]
[Fri Mar 27 01:38:31.641044 2026] [:error] [pid 62147:tid 62462] [client 185.169.4.152:63483] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pumpbooking.com"] [uri "/sftp-config.json"] [unique_id "acVvFxPjxn06mcLazN6APQAAAAI"]
[Fri Mar 27 01:38:32.393738 2026] [:error] [pid 44058:tid 44061] [client 185.169.4.152:50220] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/.vscode/sftp.json"] [unique_id "acVvGOqp9u5CVRGdZPH_1gAAAIE"]
[Fri Mar 27 02:31:25.031966 2026] [:error] [pid 44058:tid 44081] [client 41.216.86.43:22962] [client 41.216.86.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.216.86.43, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acV7feqp9u5CVRGdZPEigAAAAJU"]
[Fri Mar 27 02:31:25.037985 2026] [:error] [pid 44058:tid 44081] [client 41.216.86.43:22962] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 05:42:27.986395 2026] [:error] [pid 27749:tid 27793] [client 51.75.119.69:56478] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acWoQ8EqyoMni2Q6_X5bZwAAAEI"]
[Fri Mar 27 05:42:29.949264 2026] [:error] [pid 27750:tid 27830] [client 51.75.119.69:56280] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acWoRYaSil5rd17ieLwz0AAAAIw"]
[Fri Mar 27 05:42:31.993407 2026] [:error] [pid 27750:tid 27839] [client 51.75.119.69:56294] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acWoR4aSil5rd17ieLwz1wAAAJU"]
[Fri Mar 27 05:42:34.075661 2026] [:error] [pid 27743:tid 27767] [client 51.75.119.69:56310] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acWoSiA46UYYLqzw99D6mgAAAAM"]
[Fri Mar 27 05:42:36.020464 2026] [:error] [pid 4341:tid 4346] [client 51.75.119.69:39490] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acWoTOKJWrNB5dMlERECcAAAAYM"]
[Fri Mar 27 05:42:38.151368 2026] [:error] [pid 27749:tid 27795] [client 51.75.119.69:39492] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acWoTsEqyoMni2Q6_X5bcgAAAEQ"]
[Fri Mar 27 05:42:40.102042 2026] [:error] [pid 27749:tid 27812] [client 51.75.119.69:39500] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acWoUMEqyoMni2Q6_X5bcwAAAFU"]
[Fri Mar 27 05:42:41.995346 2026] [:error] [pid 27851:tid 27862] [client 51.75.119.69:39502] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acWoUXR2ccxe3RMCLboL8QAAAMQ"]
[Fri Mar 27 05:42:44.221971 2026] [:error] [pid 27851:tid 27865] [client 51.75.119.69:39518] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acWoVHR2ccxe3RMCLboL-gAAAMc"]
[Fri Mar 27 08:56:12.702851 2026] [:error] [pid 27749:tid 27793] [client 51.77.216.212:54334] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acXVrMEqyoMni2Q6_X5_KQAAAEI"]
[Fri Mar 27 08:56:14.769104 2026] [:error] [pid 4293:tid 4297] [client 51.77.216.212:51036] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acXVrpLjeJUC3OKtEx_VEgAAAUI"]
[Fri Mar 27 08:56:16.843788 2026] [:error] [pid 63897:tid 63917] [client 51.77.216.212:51038] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acXVsGVSkmYmLu7ycYhL8QAAARI"]
[Fri Mar 27 08:56:18.943125 2026] [:error] [pid 27749:tid 27799] [client 51.77.216.212:51050] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acXVssEqyoMni2Q6_X5_KwAAAEg"]
[Fri Mar 27 08:56:20.776019 2026] [:error] [pid 4293:tid 4315] [client 51.77.216.212:51054] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acXVtJLjeJUC3OKtEx_VKAAAAVQ"]
[Fri Mar 27 08:56:22.792382 2026] [:error] [pid 4293:tid 4297] [client 51.77.216.212:52680] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acXVtpLjeJUC3OKtEx_VMQAAAUI"]
[Fri Mar 27 08:56:24.926877 2026] [:error] [pid 27750:tid 27821] [client 51.77.216.212:52682] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acXVuIaSil5rd17ieLxf4gAAAIM"]
[Fri Mar 27 08:56:26.875762 2026] [:error] [pid 4293:tid 4295] [client 51.77.216.212:52688] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acXVupLjeJUC3OKtEx_VRQAAAUA"]
[Fri Mar 27 08:56:28.680741 2026] [:error] [pid 4293:tid 4304] [client 51.77.216.212:52698] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acXVvJLjeJUC3OKtEx_VSwAAAUk"]
[Fri Mar 27 08:56:30.566002 2026] [:error] [pid 27749:tid 27811] [client 51.77.216.212:52706] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acXVvsEqyoMni2Q6_X5_MgAAAFQ"]
[Fri Mar 27 08:56:32.394778 2026] [:error] [pid 4341:tid 4360] [client 51.77.216.212:39166] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acXVwOKJWrNB5dMlERFRvQAAAZE"]
[Fri Mar 27 08:56:34.371940 2026] [:error] [pid 4341:tid 4362] [client 51.77.216.212:39178] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acXVwuKJWrNB5dMlERFRvwAAAZM"]
[Fri Mar 27 08:56:36.279672 2026] [:error] [pid 4341:tid 4353] [client 51.77.216.212:39186] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acXVxOKJWrNB5dMlERFRwgAAAYo"]
[Fri Mar 27 08:56:38.150004 2026] [:error] [pid 27851:tid 27863] [client 51.77.216.212:39196] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acXVxnR2ccxe3RMCLbpCEAAAAMU"]
[Fri Mar 27 08:56:39.989021 2026] [:error] [pid 4341:tid 4347] [client 51.77.216.212:39208] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acXVx-KJWrNB5dMlERFRxQAAAYQ"]
[Fri Mar 27 08:56:41.997774 2026] [:error] [pid 4293:tid 4295] [client 51.77.216.212:32970] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acXVyZLjeJUC3OKtEx_VYwAAAUA"]
[Fri Mar 27 08:56:44.068093 2026] [:error] [pid 27750:tid 27832] [client 51.77.216.212:32976] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acXVzIaSil5rd17ieLxf8wAAAI4"]
[Fri Mar 27 08:56:46.203537 2026] [:error] [pid 63897:tid 63923] [client 51.77.216.212:32990] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acXVzmVSkmYmLu7ycYhMLgAAARg"]
[Fri Mar 27 08:56:48.263034 2026] [:error] [pid 4341:tid 4355] [client 51.77.216.212:33006] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acXV0OKJWrNB5dMlERFR3gAAAYw"]
[Fri Mar 27 08:56:50.048474 2026] [:error] [pid 27743:tid 27768] [client 51.77.216.212:33012] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acXV0iA46UYYLqzw99AZNAAAAAQ"]
[Fri Mar 27 08:56:52.103813 2026] [:error] [pid 4293:tid 4303] [client 51.77.216.212:39990] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acXV1JLjeJUC3OKtEx_VeAAAAUg"]
[Fri Mar 27 08:56:54.109761 2026] [:error] [pid 63897:tid 63922] [client 51.77.216.212:40004] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acXV1mVSkmYmLu7ycYhMOwAAARc"]
[Fri Mar 27 08:56:55.949981 2026] [:error] [pid 27750:tid 27826] [client 51.77.216.212:40016] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acXV14aSil5rd17ieLxgBgAAAIg"]
[Fri Mar 27 08:56:59.650784 2026] [:error] [pid 4341:tid 4347] [client 51.77.216.212:40020] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acXV2-KJWrNB5dMlERFR8AAAAYQ"]
[Fri Mar 27 10:09:20.732184 2026] [:error] [pid 4341:tid 4367] [client 45.89.60.157:61806] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Fri Mar 27 11:56:00.705498 2026] [:error] [pid 27749:tid 27813] [client 43.130.47.33:43282] [client 43.130.47.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acX_0MEqyoMni2Q6_X6gEwAAAFY"]
[Fri Mar 27 12:55:18.267739 2026] [:error] [pid 4293:tid 4298] [client 62.84.185.69:43692] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acYNtpLjeJUC3OKtEx902AAAAUM"]
[Fri Mar 27 12:55:20.252305 2026] [:error] [pid 63897:tid 63920] [client 62.84.185.69:43704] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acYNuGVSkmYmLu7ycYjBKgAAARU"]
[Fri Mar 27 12:55:22.338657 2026] [:error] [pid 27749:tid 27811] [client 62.84.185.69:43712] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acYNusEqyoMni2Q6_X6qugAAAFQ"]
[Fri Mar 27 12:55:24.365420 2026] [:error] [pid 4341:tid 4361] [client 62.84.185.69:43722] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acYNvOKJWrNB5dMlERHI5QAAAZI"]
[Fri Mar 27 12:55:26.243189 2026] [:error] [pid 27851:tid 27870] [client 62.84.185.69:17294] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acYNvnR2ccxe3RMCLbqEpgAAAMw"]
[Fri Mar 27 12:55:28.283962 2026] [:error] [pid 27851:tid 27876] [client 62.84.185.69:17302] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acYNwHR2ccxe3RMCLbqEqQAAANI"]
[Fri Mar 27 12:55:30.526013 2026] [:error] [pid 27749:tid 27793] [client 62.84.185.69:17310] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acYNwsEqyoMni2Q6_X6qwwAAAEI"]
[Fri Mar 27 12:55:32.602092 2026] [:error] [pid 4341:tid 4354] [client 62.84.185.69:17312] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acYNxOKJWrNB5dMlERHI9gAAAYs"]
[Fri Mar 27 12:55:34.920424 2026] [:error] [pid 4341:tid 4344] [client 62.84.185.69:33350] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acYNxuKJWrNB5dMlERHJBgAAAYE"]
[Fri Mar 27 12:55:36.929008 2026] [:error] [pid 4293:tid 4299] [client 62.84.185.69:33364] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acYNyJLjeJUC3OKtEx91BgAAAUQ"]
[Fri Mar 27 12:55:38.868028 2026] [:error] [pid 27743:tid 27781] [client 62.84.185.69:33372] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acYNyiA46UYYLqzw99A-nQAAABE"]
[Fri Mar 27 12:55:40.935788 2026] [:error] [pid 27749:tid 27794] [client 62.84.185.69:33384] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acYNzMEqyoMni2Q6_X6qzAAAAEM"]
[Fri Mar 27 12:55:42.870928 2026] [:error] [pid 27743:tid 27769] [client 62.84.185.69:33394] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acYNziA46UYYLqzw99A-pAAAAAU"]
[Fri Mar 27 12:55:44.902492 2026] [:error] [pid 4341:tid 4352] [client 62.84.185.69:9944] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acYN0OKJWrNB5dMlERHJFwAAAYk"]
[Fri Mar 27 12:55:46.855178 2026] [:error] [pid 27851:tid 27864] [client 62.84.185.69:9946] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acYN0nR2ccxe3RMCLbqEwAAAAMY"]
[Fri Mar 27 12:55:48.763445 2026] [:error] [pid 4293:tid 4301] [client 62.84.185.69:9948] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acYN1JLjeJUC3OKtEx91HgAAAUY"]
[Fri Mar 27 12:55:50.789477 2026] [:error] [pid 63897:tid 63919] [client 62.84.185.69:9950] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acYN1mVSkmYmLu7ycYjBUwAAARQ"]
[Fri Mar 27 12:55:52.858907 2026] [:error] [pid 4293:tid 4316] [client 62.84.185.69:9952] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acYN2JLjeJUC3OKtEx91MwAAAVU"]
[Fri Mar 27 12:55:56.783657 2026] [:error] [pid 27743:tid 27771] [client 62.84.185.69:3686] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acYN3CA46UYYLqzw99A-tAAAAAc"]
[Fri Mar 27 13:52:32.605672 2026] [:error] [pid 27750:tid 27830] [client 150.228.187.198:8036] [client 150.228.187.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.187.198, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acYbIIaSil5rd17ieLyhHgAAAIw"]
[Fri Mar 27 13:52:32.610735 2026] [:error] [pid 27750:tid 27830] [client 150.228.187.198:8036] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 13:53:06.014877 2026] [:error] [pid 4341:tid 4345] [client 106.206.26.241:6332] [client 106.206.26.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.206.26.241, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acYbQuKJWrNB5dMlERHr-gAAAYI"]
[Fri Mar 27 13:53:06.022891 2026] [:error] [pid 4341:tid 4345] [client 106.206.26.241:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 15:50:13.093816 2026] [:error] [pid 4341:tid 4361] [client 54.36.60.45:37138] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acY2teKJWrNB5dMlERE9nwAAAZI"]
[Fri Mar 27 15:50:17.114425 2026] [:error] [pid 4293:tid 4299] [client 54.36.60.45:53872] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acY2uZLjeJUC3OKtEx_VlwAAAUQ"]
[Fri Mar 27 15:50:19.845503 2026] [:error] [pid 4293:tid 4297] [client 54.36.60.45:53874] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acY2u5LjeJUC3OKtEx_VngAAAUI"]
[Fri Mar 27 15:50:23.465178 2026] [:error] [pid 4293:tid 4298] [client 54.36.60.45:53878] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acY2v5LjeJUC3OKtEx_VoQAAAUM"]
[Fri Mar 27 15:50:27.622407 2026] [:error] [pid 4293:tid 4317] [client 54.36.60.45:50344] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acY2w5LjeJUC3OKtEx_VpAAAAVY"]
[Fri Mar 27 15:50:30.466369 2026] [:error] [pid 27749:tid 27806] [client 54.36.60.45:50350] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acY2xsEqyoMni2Q6_X7KDgAAAE8"]
[Fri Mar 27 15:50:33.409132 2026] [:error] [pid 27743:tid 27786] [client 54.36.60.45:50364] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acY2ySA46UYYLqzw99BfsQAAABY"]
[Fri Mar 27 15:50:37.770884 2026] [:error] [pid 4293:tid 4295] [client 54.36.60.45:47624] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acY2zZLjeJUC3OKtEx_VvQAAAUA"]
[Fri Mar 27 15:50:42.306374 2026] [:error] [pid 27743:tid 27772] [client 54.36.60.45:47630] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acY20iA46UYYLqzw99BfwwAAAAg"]
[Fri Mar 27 15:50:45.040996 2026] [:error] [pid 63897:tid 63917] [client 54.36.60.45:58508] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acY21WVSkmYmLu7ycYgDUwAAARI"]
[Fri Mar 27 15:50:48.176554 2026] [:error] [pid 27749:tid 27809] [client 54.36.60.45:58516] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acY22MEqyoMni2Q6_X7KHwAAAFI"]
[Fri Mar 27 15:50:52.065657 2026] [:error] [pid 27743:tid 27769] [client 54.36.60.45:58532] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acY23CA46UYYLqzw99Bf4gAAAAU"]
[Fri Mar 27 15:50:54.538741 2026] [:error] [pid 27743:tid 27775] [client 54.36.60.45:38918] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acY23iA46UYYLqzw99Bf8AAAAAs"]
[Fri Mar 27 15:50:59.151186 2026] [:error] [pid 4341:tid 4367] [client 54.36.60.45:38924] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acY24-KJWrNB5dMlERE97gAAAZg"]
[Fri Mar 27 15:51:34.168035 2026] [:error] [pid 4341:tid 4360] [client 54.36.60.45:59594] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acY3BuKJWrNB5dMlERE-KQAAAZE"]
[Fri Mar 27 15:51:37.177713 2026] [:error] [pid 27743:tid 27769] [client 54.36.60.45:42292] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acY3CSA46UYYLqzw99BgZQAAAAU"]
[Fri Mar 27 15:51:40.109013 2026] [:error] [pid 27750:tid 27821] [client 54.36.60.45:42300] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acY3DIaSil5rd17ieLy9owAAAIM"]
[Fri Mar 27 15:51:42.821650 2026] [:error] [pid 27750:tid 27834] [client 54.36.60.45:42310] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acY3DoaSil5rd17ieLy9pQAAAJA"]
[Fri Mar 27 15:51:45.825865 2026] [:error] [pid 63897:tid 63920] [client 54.36.60.45:53834] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acY3EWVSkmYmLu7ycYgDogAAARU"]
[Fri Mar 27 15:51:48.507790 2026] [:error] [pid 27851:tid 27878] [client 54.36.60.45:53836] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acY3FHR2ccxe3RMCLbqz5AAAANQ"]
[Fri Mar 27 15:51:50.869416 2026] [:error] [pid 27851:tid 27860] [client 54.36.60.45:53846] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acY3FnR2ccxe3RMCLbqz7gAAAMI"]
[Fri Mar 27 15:51:53.617422 2026] [:error] [pid 27750:tid 27834] [client 54.36.60.45:53860] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acY3GYaSil5rd17ieLy9rwAAAJA"]
[Fri Mar 27 15:51:55.953919 2026] [:error] [pid 4341:tid 4354] [client 54.36.60.45:52244] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acY3G-KJWrNB5dMlERE-QwAAAYs"]
[Fri Mar 27 15:51:58.658708 2026] [:error] [pid 27743:tid 27788] [client 54.36.60.45:52246] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acY3HiA46UYYLqzw99BgjAAAABg"]
[Fri Mar 27 15:52:00.990830 2026] [:error] [pid 4341:tid 4364] [client 54.36.60.45:52250] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acY3IOKJWrNB5dMlERE-UgAAAZU"]
[Fri Mar 27 15:52:03.213561 2026] [:error] [pid 63897:tid 63910] [client 54.36.60.45:52264] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acY3I2VSkmYmLu7ycYgDyQAAAQs"]
[Fri Mar 27 15:52:05.752764 2026] [:error] [pid 4341:tid 4358] [client 54.36.60.45:44176] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acY3JeKJWrNB5dMlERE-WgAAAY8"]
[Fri Mar 27 15:52:07.956588 2026] [:error] [pid 4341:tid 4365] [client 54.36.60.45:44192] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acY3J-KJWrNB5dMlERE-XQAAAZY"]
[Fri Mar 27 15:52:10.415416 2026] [:error] [pid 27743:tid 27777] [client 54.36.60.45:44194] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acY3KiA46UYYLqzw99BgvwAAAA0"]
[Fri Mar 27 15:52:12.844182 2026] [:error] [pid 27750:tid 27840] [client 54.36.60.45:44202] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acY3LIaSil5rd17ieLy9vwAAAJY"]
[Fri Mar 27 15:52:15.366211 2026] [:error] [pid 27750:tid 27822] [client 54.36.60.45:43070] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acY3L4aSil5rd17ieLy9yAAAAIQ"]
[Fri Mar 27 15:52:17.515056 2026] [:error] [pid 27851:tid 27858] [client 54.36.60.45:43082] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acY3MXR2ccxe3RMCLbq0HQAAAMA"]
[Fri Mar 27 15:52:19.816858 2026] [:error] [pid 4341:tid 4353] [client 54.36.60.45:43096] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acY3M-KJWrNB5dMlERE-cwAAAYo"]
[Fri Mar 27 15:52:22.097493 2026] [:error] [pid 4341:tid 4343] [client 54.36.60.45:43100] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acY3NuKJWrNB5dMlERE-dAAAAYA"]
[Fri Mar 27 15:52:24.243279 2026] [:error] [pid 27750:tid 27840] [client 54.36.60.45:56380] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "acY3OIaSil5rd17ieLy90gAAAJY"]
[Fri Mar 27 15:52:26.841995 2026] [:error] [pid 27743:tid 27786] [client 54.36.60.45:56394] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "acY3OiA46UYYLqzw99Bg2QAAABY"]
[Fri Mar 27 15:52:29.032820 2026] [:error] [pid 27750:tid 27836] [client 54.36.60.45:56408] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acY3PYaSil5rd17ieLy92QAAAJI"]
[Fri Mar 27 15:52:30.976202 2026] [:error] [pid 4293:tid 4312] [client 54.36.60.45:56420] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acY3PpLjeJUC3OKtEx_WfwAAAVE"]
[Fri Mar 27 16:26:39.280031 2026] [:error] [pid 27750:tid 27819] [client 147.135.213.107:40770] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acY_P4aSil5rd17ieLzErAAAAIE"]
[Fri Mar 27 16:26:41.228059 2026] [:error] [pid 4293:tid 4319] [client 147.135.213.107:50132] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acY_QZLjeJUC3OKtEx_r2QAAAVg"]
[Fri Mar 27 16:26:43.104602 2026] [:error] [pid 4341:tid 4367] [client 147.135.213.107:50134] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acY_Q-KJWrNB5dMlERFMxgAAAZg"]
[Fri Mar 27 16:26:44.996291 2026] [:error] [pid 4293:tid 4318] [client 147.135.213.107:50140] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acY_RJLjeJUC3OKtEx_r6gAAAVc"]
[Fri Mar 27 16:26:47.027505 2026] [:error] [pid 27851:tid 27863] [client 147.135.213.107:50144] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acY_R3R2ccxe3RMCLbq8XQAAAMU"]
[Fri Mar 27 16:26:48.912661 2026] [:error] [pid 4293:tid 4303] [client 147.135.213.107:50158] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acY_SJLjeJUC3OKtEx_r9QAAAUg"]
[Fri Mar 27 16:26:50.924343 2026] [:error] [pid 4341:tid 4361] [client 147.135.213.107:44806] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acY_SuKJWrNB5dMlERFM1QAAAZI"]
[Fri Mar 27 16:26:52.948423 2026] [:error] [pid 4293:tid 4298] [client 147.135.213.107:44820] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acY_TJLjeJUC3OKtEx_r-gAAAUM"]
[Fri Mar 27 16:26:54.830836 2026] [:error] [pid 27750:tid 27830] [client 147.135.213.107:44824] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acY_ToaSil5rd17ieLzEugAAAIw"]
[Fri Mar 27 16:26:56.852869 2026] [:error] [pid 27851:tid 27872] [client 147.135.213.107:44830] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acY_UHR2ccxe3RMCLbq8dgAAAM4"]
[Fri Mar 27 16:26:58.720495 2026] [:error] [pid 63897:tid 63909] [client 147.135.213.107:44836] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acY_UmVSkmYmLu7ycYgO7gAAAQo"]
[Fri Mar 27 16:27:00.758978 2026] [:error] [pid 27750:tid 27837] [client 147.135.213.107:33078] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acY_VIaSil5rd17ieLzExwAAAJM"]
[Fri Mar 27 16:27:02.774499 2026] [:error] [pid 4341:tid 4358] [client 147.135.213.107:33082] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acY_VuKJWrNB5dMlERFM2gAAAY8"]
[Fri Mar 27 16:27:04.779628 2026] [:error] [pid 4293:tid 4310] [client 147.135.213.107:33098] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acY_WJLjeJUC3OKtEx_sFgAAAU8"]
[Fri Mar 27 16:27:06.821219 2026] [:error] [pid 4293:tid 4299] [client 147.135.213.107:33114] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acY_WpLjeJUC3OKtEx_sIwAAAUQ"]
[Fri Mar 27 16:27:08.838578 2026] [:error] [pid 63897:tid 63904] [client 147.135.213.107:33124] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acY_XGVSkmYmLu7ycYgO9QAAAQU"]
[Fri Mar 27 16:27:10.862195 2026] [:error] [pid 27750:tid 27819] [client 147.135.213.107:47940] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acY_XoaSil5rd17ieLzEzwAAAIE"]
[Fri Mar 27 16:27:12.866046 2026] [:error] [pid 4293:tid 4314] [client 147.135.213.107:47954] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acY_YJLjeJUC3OKtEx_sNAAAAVM"]
[Fri Mar 27 16:27:14.875114 2026] [:error] [pid 4341:tid 4361] [client 147.135.213.107:47956] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acY_YuKJWrNB5dMlERFM7gAAAZI"]
[Fri Mar 27 16:27:16.744428 2026] [:error] [pid 63897:tid 63915] [client 147.135.213.107:47962] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acY_ZGVSkmYmLu7ycYgPBAAAARA"]
[Fri Mar 27 16:27:18.761480 2026] [:error] [pid 27749:tid 27810] [client 147.135.213.107:47970] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acY_ZsEqyoMni2Q6_X7PsAAAAFM"]
[Fri Mar 27 16:27:20.784905 2026] [:error] [pid 27743:tid 27780] [client 147.135.213.107:41808] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acY_aCA46UYYLqzw99B0jQAAABA"]
[Fri Mar 27 16:27:24.619544 2026] [:error] [pid 27743:tid 27773] [client 147.135.213.107:41816] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acY_bCA46UYYLqzw99B0lQAAAAk"]
[Fri Mar 27 16:27:28.395536 2026] [:error] [pid 27749:tid 27794] [client 147.135.213.107:41818] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acY_cMEqyoMni2Q6_X7PuQAAAEM"]
[Fri Mar 27 16:55:13.246527 2026] [:error] [pid 27750:tid 27825] [client 177.12.17.169:20430] [client 177.12.17.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.12.17.169, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acZF8YaSil5rd17ieLzJ8AAAAIc"]
[Fri Mar 27 16:55:13.251988 2026] [:error] [pid 27750:tid 27825] [client 177.12.17.169:20430] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 18:50:45.376643 2026] [:error] [pid 27749:tid 27801] [client 43.133.253.253:46136] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acZhBcEqyoMni2Q6_X7mEQAAAEo"]
[Fri Mar 27 20:07:01.638993 2026] [:error] [pid 4293:tid 4301] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Fri Mar 27 20:07:01.893105 2026] [:error] [pid 4293:tid 4304] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Fri Mar 27 20:07:02.203946 2026] [:error] [pid 4293:tid 4314] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Mar 27 20:07:02.459183 2026] [:error] [pid 4293:tid 4309] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Mar 27 20:07:02.713196 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Mar 27 20:07:03.008394 2026] [:error] [pid 4293:tid 4296] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Fri Mar 27 20:07:03.275062 2026] [:error] [pid 4293:tid 4310] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Fri Mar 27 20:07:04.530846 2026] [:error] [pid 4293:tid 4313] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Fri Mar 27 20:07:04.786913 2026] [:error] [pid 4293:tid 4309] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Fri Mar 27 20:07:05.157813 2026] [:error] [pid 4293:tid 4315] [client 20.223.176.171:8210] File does not exist: /usr/local/apache/htdocs/suspended-page/zcsu.php
[Fri Mar 27 20:07:05.525320 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:8210] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acZy6ZLjeJUC3OKtEx-AgQAAAUM"]
[Fri Mar 27 20:07:06.629821 2026] [:error] [pid 63897:tid 63916] [client 20.223.176.171:53806] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acZy6mVSkmYmLu7ycYhNiAAAARE"]
[Fri Mar 27 20:07:07.360876 2026] [:error] [pid 27743:tid 27777] [client 20.223.176.171:53776] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acZy6yA46UYYLqzw99DgTwAAAA0"]
[Fri Mar 27 20:07:08.630674 2026] [:error] [pid 63897:tid 63900] [client 20.223.176.171:14165] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acZy7GVSkmYmLu7ycYhNigAAAQE"]
[Fri Mar 27 20:07:09.725612 2026] [:error] [pid 63897:tid 63920] [client 20.223.176.171:18673] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acZy7WVSkmYmLu7ycYhNjgAAARU"]
[Fri Mar 27 20:07:10.994026 2026] [:error] [pid 4293:tid 4302] [client 20.223.176.171:15185] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acZy7pLjeJUC3OKtEx-AiAAAAUc"]
[Fri Mar 27 20:07:12.631181 2026] [:error] [pid 27743:tid 27780] [client 20.223.176.171:23851] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acZy8CA46UYYLqzw99DgZwAAABA"]
[Fri Mar 27 20:07:13.658780 2026] [:error] [pid 27851:tid 27878] [client 20.223.176.171:15175] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acZy8XR2ccxe3RMCLbrusgAAANQ"]
[Fri Mar 27 20:07:15.453798 2026] [:error] [pid 27749:tid 27807] [client 20.223.176.171:8238] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acZy88EqyoMni2Q6_X7xFgAAAFA"]
[Fri Mar 27 20:07:16.196078 2026] [:error] [pid 4341:tid 4353] [client 20.223.176.171:21882] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acZy9OKJWrNB5dMlERGiAwAAAYo"]
[Fri Mar 27 20:07:18.105372 2026] [:error] [pid 27750:tid 27830] [client 20.223.176.171:3482] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acZy9oaSil5rd17ieLzwyAAAAIw"]
[Fri Mar 27 20:07:19.836613 2026] [:error] [pid 27851:tid 27881] [client 20.223.176.171:3487] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acZy93R2ccxe3RMCLbrutQAAANc"]
[Fri Mar 27 20:07:21.038965 2026] [:error] [pid 4341:tid 4343] [client 20.223.176.171:15609] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acZy-eKJWrNB5dMlERGiFQAAAYA"]
[Fri Mar 27 20:07:22.612023 2026] [:error] [pid 4293:tid 4300] [client 20.223.176.171:23859] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acZy-pLjeJUC3OKtEx-AoQAAAUU"]
[Fri Mar 27 20:07:23.383396 2026] [:error] [pid 4293:tid 4307] [client 20.223.176.171:3942] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acZy-5LjeJUC3OKtEx-AqAAAAUw"]
[Fri Mar 27 20:07:24.219645 2026] [:error] [pid 27743:tid 27786] [client 20.223.176.171:3905] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acZy_CA46UYYLqzw99DghgAAABY"]
[Fri Mar 27 20:07:25.383702 2026] [:error] [pid 27851:tid 27879] [client 20.223.176.171:9041] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acZy_XR2ccxe3RMCLbruvAAAANU"]
[Fri Mar 27 20:07:26.445400 2026] [:error] [pid 63897:tid 63901] [client 20.223.176.171:20000] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acZy_mVSkmYmLu7ycYhNqwAAAQI"]
[Fri Mar 27 20:07:27.268185 2026] [:error] [pid 27749:tid 27801] [client 20.223.176.171:3156] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acZy_8EqyoMni2Q6_X7xHAAAAEo"]
[Fri Mar 27 20:07:28.192150 2026] [:error] [pid 27743:tid 27783] [client 20.223.176.171:8206] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acZzACA46UYYLqzw99DglwAAABM"]
[Fri Mar 27 20:07:29.996382 2026] [:error] [pid 63897:tid 63916] [client 20.223.176.171:8196] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acZzAWVSkmYmLu7ycYhNtgAAARE"]
[Fri Mar 27 20:07:30.783123 2026] [:error] [pid 4293:tid 4307] [client 20.223.176.171:3946] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acZzApLjeJUC3OKtEx-AsAAAAUw"]
[Fri Mar 27 20:07:31.523073 2026] [:error] [pid 27750:tid 27842] [client 20.223.176.171:15974] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acZzA4aSil5rd17ieLzwzgAAAJg"]
[Fri Mar 27 20:07:32.776382 2026] [:error] [pid 27750:tid 27831] [client 20.223.176.171:37862] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acZzBIaSil5rd17ieLzw0AAAAI0"]
[Fri Mar 27 20:07:34.704907 2026] [:error] [pid 27851:tid 27864] [client 20.223.176.171:23847] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acZzBnR2ccxe3RMCLbruwwAAAMY"]
[Fri Mar 27 20:07:35.842815 2026] [:error] [pid 27743:tid 27765] [client 20.223.176.171:15197] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acZzByA46UYYLqzw99DgpwAAAAE"]
[Fri Mar 27 20:07:36.766313 2026] [:error] [pid 27743:tid 27779] [client 20.223.176.171:39643] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acZzCCA46UYYLqzw99DgsgAAAA8"]
[Fri Mar 27 20:07:38.311251 2026] [:error] [pid 4293:tid 4308] [client 20.223.176.171:3918] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acZzCpLjeJUC3OKtEx-AwgAAAU0"]
[Fri Mar 27 20:07:39.864944 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:37885] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acZzC5LjeJUC3OKtEx-AzQAAAUM"]
[Fri Mar 27 20:07:40.813843 2026] [:error] [pid 27743:tid 27766] [client 20.223.176.171:8288] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acZzDCA46UYYLqzw99DguAAAAAI"]
[Fri Mar 27 20:07:41.946947 2026] [:error] [pid 27743:tid 27779] [client 20.223.176.171:9043] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acZzDSA46UYYLqzw99DguwAAAA8"]
[Fri Mar 27 20:07:42.637141 2026] [:error] [pid 27851:tid 27859] [client 20.223.176.171:15994] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acZzDnR2ccxe3RMCLbruzwAAAME"]
[Fri Mar 27 20:07:43.374227 2026] [:error] [pid 27749:tid 27812] [client 20.223.176.171:15613] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acZzD8EqyoMni2Q6_X7xKAAAAFU"]
[Fri Mar 27 20:07:44.046369 2026] [:error] [pid 4341:tid 4364] [client 20.223.176.171:16183] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acZzEOKJWrNB5dMlERGiLQAAAZU"]
[Fri Mar 27 20:07:45.073024 2026] [:error] [pid 63897:tid 63901] [client 20.223.176.171:8262] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acZzEWVSkmYmLu7ycYhN0wAAAQI"]
[Fri Mar 27 20:07:46.335744 2026] [:error] [pid 4293:tid 4309] [client 20.223.176.171:43846] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acZzEpLjeJUC3OKtEx-A4gAAAU4"]
[Fri Mar 27 20:07:47.087207 2026] [:error] [pid 4293:tid 4310] [client 20.223.176.171:7847] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acZzE5LjeJUC3OKtEx-A6AAAAU8"]
[Fri Mar 27 20:07:47.737871 2026] [:error] [pid 63897:tid 63913] [client 20.223.176.171:8319] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acZzE2VSkmYmLu7ycYhN2gAAAQ4"]
[Fri Mar 27 20:07:48.426978 2026] [:error] [pid 4293:tid 4300] [client 20.223.176.171:16179] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acZzFJLjeJUC3OKtEx-A6gAAAUU"]
[Fri Mar 27 20:07:49.269155 2026] [:error] [pid 27743:tid 27788] [client 20.223.176.171:21838] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acZzFSA46UYYLqzw99Dg0AAAABg"]
[Fri Mar 27 20:07:50.491181 2026] [:error] [pid 4293:tid 4295] [client 20.223.176.171:8218] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acZzFpLjeJUC3OKtEx-A7wAAAUA"]
[Fri Mar 27 20:07:51.258150 2026] [:error] [pid 27851:tid 27874] [client 20.223.176.171:3261] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acZzF3R2ccxe3RMCLbru6wAAANA"]
[Fri Mar 27 20:07:51.980348 2026] [:error] [pid 27743:tid 27784] [client 20.223.176.171:39648] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acZzFyA46UYYLqzw99Dg1QAAABQ"]
[Fri Mar 27 20:07:52.795591 2026] [:error] [pid 4341:tid 4348] [client 20.223.176.171:3227] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acZzGOKJWrNB5dMlERGiPgAAAYU"]
[Fri Mar 27 20:07:53.725773 2026] [:error] [pid 4341:tid 4354] [client 20.223.176.171:37857] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acZzGeKJWrNB5dMlERGiQgAAAYs"]
[Fri Mar 27 20:07:54.651757 2026] [:error] [pid 4341:tid 4359] [client 20.223.176.171:20014] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acZzGuKJWrNB5dMlERGiRQAAAZA"]
[Fri Mar 27 20:07:55.486941 2026] [:error] [pid 27750:tid 27832] [client 20.223.176.171:27357] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acZzG4aSil5rd17ieLzw4QAAAI4"]
[Fri Mar 27 20:07:56.692137 2026] [:error] [pid 4341:tid 4353] [client 20.223.176.171:21119] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acZzHOKJWrNB5dMlERGiSgAAAYo"]
[Fri Mar 27 20:07:57.733337 2026] [:error] [pid 4293:tid 4312] [client 20.223.176.171:18353] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acZzHZLjeJUC3OKtEx-BAQAAAVE"]
[Fri Mar 27 20:07:58.690329 2026] [:error] [pid 4293:tid 4315] [client 20.223.176.171:18330] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acZzHpLjeJUC3OKtEx-BBwAAAVQ"]
[Fri Mar 27 20:07:59.897498 2026] [:error] [pid 63897:tid 63911] [client 20.223.176.171:8209] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acZzH2VSkmYmLu7ycYhN7AAAAQw"]
[Fri Mar 27 20:08:00.585380 2026] [:error] [pid 63897:tid 63903] [client 20.223.176.171:18334] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acZzIGVSkmYmLu7ycYhN7wAAAQQ"]
[Fri Mar 27 20:08:01.824072 2026] [:error] [pid 27743:tid 27771] [client 20.223.176.171:12355] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acZzISA46UYYLqzw99Dg6QAAAAc"]
[Fri Mar 27 20:08:02.844858 2026] [:error] [pid 4293:tid 4303] [client 20.223.176.171:27345] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acZzIpLjeJUC3OKtEx-BGQAAAUg"]
[Fri Mar 27 20:08:04.250328 2026] [:error] [pid 27851:tid 27868] [client 20.223.176.171:43873] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acZzJHR2ccxe3RMCLbrvAAAAAMo"]
[Fri Mar 27 20:08:05.282260 2026] [:error] [pid 4293:tid 4314] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/phina.php
[Fri Mar 27 20:08:05.630018 2026] [:error] [pid 4293:tid 4313] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Mar 27 20:08:05.883485 2026] [:error] [pid 4293:tid 4305] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Fri Mar 27 20:08:06.308070 2026] [:error] [pid 4293:tid 4311] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/fs7.php
[Fri Mar 27 20:08:06.755168 2026] [:error] [pid 4293:tid 4297] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/kbfr.php
[Fri Mar 27 20:08:07.008145 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/595.php
[Fri Mar 27 20:08:07.263889 2026] [:error] [pid 4293:tid 4296] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Fri Mar 27 20:08:07.561868 2026] [:error] [pid 4293:tid 4314] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Fri Mar 27 20:08:07.814844 2026] [:error] [pid 4293:tid 4316] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Fri Mar 27 20:08:08.171352 2026] [:error] [pid 4293:tid 4307] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Fri Mar 27 20:08:08.572887 2026] [:error] [pid 4293:tid 4318] [client 20.223.176.171:25092] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Fri Mar 27 20:08:08.872312 2026] [:error] [pid 4293:tid 4308] [client 20.223.176.171:25092] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acZzKJLjeJUC3OKtEx-BOAAAAU0"]
[Fri Mar 27 20:08:10.050791 2026] [:error] [pid 4293:tid 4296] [client 20.223.176.171:12357] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acZzKpLjeJUC3OKtEx-BOgAAAUE"]
[Fri Mar 27 20:08:13.081304 2026] [:error] [pid 27750:tid 27829] [client 20.223.176.171:36203] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acZzLYaSil5rd17ieLzw8QAAAIs"]
[Fri Mar 27 20:08:15.004045 2026] [:error] [pid 27743:tid 27774] [client 20.223.176.171:12376] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acZzLyA46UYYLqzw99DhBAAAAAo"]
[Fri Mar 27 20:08:15.832858 2026] [:error] [pid 27743:tid 27778] [client 20.223.176.171:12398] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acZzLyA46UYYLqzw99DhCAAAAA4"]
[Fri Mar 27 20:08:17.632269 2026] [:error] [pid 27750:tid 27841] [client 20.223.176.171:53290] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acZzMYaSil5rd17ieLzw9AAAAJc"]
[Fri Mar 27 20:08:18.716543 2026] [:error] [pid 27743:tid 27774] [client 20.223.176.171:3246] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acZzMiA46UYYLqzw99DhEQAAAAo"]
[Fri Mar 27 20:08:19.769948 2026] [:error] [pid 63897:tid 63913] [client 20.223.176.171:3923] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acZzM2VSkmYmLu7ycYhOAAAAAQ4"]
[Fri Mar 27 20:08:20.686706 2026] [:error] [pid 4341:tid 4346] [client 20.223.176.171:11307] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acZzNOKJWrNB5dMlERGiZAAAAYM"]
[Fri Mar 27 20:08:21.631724 2026] [:error] [pid 4341:tid 4362] [client 20.223.176.171:39635] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acZzNeKJWrNB5dMlERGiaQAAAZM"]
[Fri Mar 27 20:08:22.529779 2026] [:error] [pid 4341:tid 4349] [client 20.223.176.171:21085] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acZzNuKJWrNB5dMlERGiagAAAYY"]
[Fri Mar 27 20:08:24.021507 2026] [:error] [pid 27743:tid 27786] [client 20.223.176.171:12397] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acZzOCA46UYYLqzw99DhGAAAABY"]
[Fri Mar 27 20:08:25.129452 2026] [:error] [pid 63897:tid 63919] [client 20.223.176.171:3935] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acZzOWVSkmYmLu7ycYhOBAAAARQ"]
[Fri Mar 27 20:08:26.228740 2026] [:error] [pid 27743:tid 27767] [client 20.223.176.171:36177] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acZzOiA46UYYLqzw99DhHgAAAAM"]
[Fri Mar 27 20:08:27.118589 2026] [:error] [pid 27851:tid 27874] [client 20.223.176.171:3209] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acZzO3R2ccxe3RMCLbrvEgAAANA"]
[Fri Mar 27 20:08:27.889336 2026] [:error] [pid 4293:tid 4315] [client 20.223.176.171:12363] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acZzO5LjeJUC3OKtEx-BYgAAAVQ"]
[Fri Mar 27 20:08:28.931132 2026] [:error] [pid 4293:tid 4302] [client 20.223.176.171:29129] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acZzPJLjeJUC3OKtEx-BagAAAUc"]
[Fri Mar 27 20:08:30.956098 2026] [:error] [pid 27750:tid 27842] [client 20.223.176.171:48640] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acZzPoaSil5rd17ieLzxBgAAAJg"]
[Fri Mar 27 20:08:31.819167 2026] [:error] [pid 27743:tid 27770] [client 20.223.176.171:18337] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acZzPyA46UYYLqzw99DhJAAAAAY"]
[Fri Mar 27 20:08:32.617136 2026] [:error] [pid 4293:tid 4310] [client 20.223.176.171:36220] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acZzQJLjeJUC3OKtEx-BcwAAAU8"]
[Fri Mar 27 20:08:33.578441 2026] [:error] [pid 4293:tid 4313] [client 20.223.176.171:12412] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acZzQZLjeJUC3OKtEx-BfAAAAVI"]
[Fri Mar 27 20:08:34.252298 2026] [:error] [pid 27851:tid 27878] [client 20.223.176.171:3927] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acZzQnR2ccxe3RMCLbrvFgAAANQ"]
[Fri Mar 27 20:08:35.452660 2026] [:error] [pid 27743:tid 27777] [client 20.223.176.171:10884] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acZzQyA46UYYLqzw99DhKQAAAA0"]
[Fri Mar 27 20:08:36.361459 2026] [:error] [pid 27743:tid 27764] [client 20.223.176.171:21096] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acZzRCA46UYYLqzw99DhLgAAAAA"]
[Fri Mar 27 20:08:37.102703 2026] [:error] [pid 27743:tid 27784] [client 20.223.176.171:21077] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acZzRSA46UYYLqzw99DhNQAAABQ"]
[Fri Mar 27 20:08:37.764083 2026] [:error] [pid 4293:tid 4317] [client 20.223.176.171:19226] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acZzRZLjeJUC3OKtEx-BhgAAAVY"]
[Fri Mar 27 20:08:39.012290 2026] [:error] [pid 27750:tid 27833] [client 20.223.176.171:10920] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acZzR4aSil5rd17ieLzxCwAAAI8"]
[Fri Mar 27 20:08:40.296189 2026] [:error] [pid 4293:tid 4315] [client 20.223.176.171:19222] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acZzSJLjeJUC3OKtEx-BlgAAAVQ"]
[Fri Mar 27 20:08:41.157858 2026] [:error] [pid 27743:tid 27781] [client 20.223.176.171:34992] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acZzSSA46UYYLqzw99DhQgAAABE"]
[Fri Mar 27 20:08:42.131323 2026] [:error] [pid 4341:tid 4351] [client 20.223.176.171:12352] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acZzSuKJWrNB5dMlERGiigAAAYg"]
[Fri Mar 27 20:08:43.301179 2026] [:error] [pid 27749:tid 27812] [client 20.223.176.171:3404] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acZzS8EqyoMni2Q6_X7xRgAAAFU"]
[Fri Mar 27 20:08:44.864502 2026] [:error] [pid 4341:tid 4344] [client 20.223.176.171:34989] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acZzTOKJWrNB5dMlERGilgAAAYE"]
[Fri Mar 27 20:08:45.658253 2026] [:error] [pid 4293:tid 4299] [client 20.223.176.171:24617] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acZzTZLjeJUC3OKtEx-BmgAAAUQ"]
[Fri Mar 27 20:08:47.646773 2026] [:error] [pid 4293:tid 4301] [client 20.223.176.171:26316] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acZzT5LjeJUC3OKtEx-BnAAAAUY"]
[Fri Mar 27 20:08:48.608578 2026] [:error] [pid 4293:tid 4318] [client 20.223.176.171:33234] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acZzUJLjeJUC3OKtEx-BowAAAVc"]
[Fri Mar 27 20:08:50.703339 2026] [:error] [pid 4293:tid 4296] [client 20.223.176.171:53841] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acZzUpLjeJUC3OKtEx-BtgAAAUE"]
[Fri Mar 27 20:08:52.845960 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:14121] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acZzVJLjeJUC3OKtEx-BywAAAUM"]
[Fri Mar 27 20:08:53.886436 2026] [:error] [pid 27743:tid 27773] [client 20.223.176.171:20634] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acZzVSA46UYYLqzw99DhWwAAAAk"]
[Fri Mar 27 20:08:55.814771 2026] [:error] [pid 63897:tid 63921] [client 20.223.176.171:19598] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acZzV2VSkmYmLu7ycYhOFAAAARY"]
[Fri Mar 27 20:08:57.724402 2026] [:error] [pid 4341:tid 4355] [client 20.223.176.171:45613] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acZzWeKJWrNB5dMlERGiqQAAAYw"]
[Fri Mar 27 20:08:58.598659 2026] [:error] [pid 27743:tid 27780] [client 20.223.176.171:42621] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acZzWiA46UYYLqzw99DhcwAAABA"]
[Fri Mar 27 20:08:59.942010 2026] [:error] [pid 63897:tid 63912] [client 20.223.176.171:32010] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acZzW2VSkmYmLu7ycYhOGwAAAQ0"]
[Fri Mar 27 20:09:01.444031 2026] [:error] [pid 4293:tid 4306] [client 20.223.176.171:32009] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acZzXZLjeJUC3OKtEx-B7AAAAUs"]
[Fri Mar 27 20:09:02.745201 2026] [:error] [pid 4293:tid 4308] [client 20.223.176.171:44359] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acZzXpLjeJUC3OKtEx-B9gAAAU0"]
[Fri Mar 27 20:09:03.870291 2026] [:error] [pid 4341:tid 4347] [client 20.223.176.171:10747] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cvz.php"] [unique_id "acZzX-KJWrNB5dMlERGivAAAAYQ"]
[Fri Mar 27 20:09:06.264532 2026] [:error] [pid 27743:tid 27782] [client 20.223.176.171:33823] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cvz.php"] [unique_id "acZzYiA46UYYLqzw99DhjAAAABI"]
[Fri Mar 27 20:09:07.428364 2026] [:error] [pid 63897:tid 63920] [client 20.223.176.171:3753] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cvz.php"] [unique_id "acZzY2VSkmYmLu7ycYhOHwAAARU"]
[Fri Mar 27 20:09:09.063796 2026] [:error] [pid 27743:tid 27767] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/cvz.php
[Fri Mar 27 20:09:09.341869 2026] [:error] [pid 27743:tid 27785] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Fri Mar 27 20:09:09.597175 2026] [:error] [pid 27743:tid 27788] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Fri Mar 27 20:09:09.925539 2026] [:error] [pid 27743:tid 27777] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Fri Mar 27 20:09:10.181914 2026] [:error] [pid 27743:tid 27784] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Fri Mar 27 20:09:10.438779 2026] [:error] [pid 27743:tid 27785] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Mar 27 20:09:10.694960 2026] [:error] [pid 27743:tid 27768] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Fri Mar 27 20:09:11.009848 2026] [:error] [pid 27743:tid 27788] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Mar 27 20:09:11.265882 2026] [:error] [pid 27743:tid 27787] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Fri Mar 27 20:09:11.521675 2026] [:error] [pid 27743:tid 27770] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/roter.php
[Fri Mar 27 20:09:12.006264 2026] [:error] [pid 27743:tid 27778] [client 20.223.176.171:7608] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Fri Mar 27 20:09:12.258265 2026] [:error] [pid 27743:tid 27772] [client 20.223.176.171:7608] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acZzaCA46UYYLqzw99DhsgAAAAg"]
[Fri Mar 27 20:09:13.601802 2026] [:error] [pid 27749:tid 27794] [client 20.223.176.171:13320] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acZzacEqyoMni2Q6_X7xUgAAAEM"]
[Fri Mar 27 20:09:14.671250 2026] [:error] [pid 27743:tid 27788] [client 20.223.176.171:17541] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acZzaiA46UYYLqzw99DhtwAAABg"]
[Fri Mar 27 20:09:15.966765 2026] [:error] [pid 27743:tid 27769] [client 20.223.176.171:18025] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acZzayA46UYYLqzw99DhwwAAAAU"]
[Fri Mar 27 20:09:19.523625 2026] [:error] [pid 4293:tid 4308] [client 20.223.176.171:48094] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acZzb5LjeJUC3OKtEx-CLAAAAU0"]
[Fri Mar 27 20:09:21.038585 2026] [:error] [pid 27750:tid 27827] [client 20.223.176.171:57309] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acZzcYaSil5rd17ieLzxMAAAAIk"]
[Fri Mar 27 20:09:22.228921 2026] [:error] [pid 63897:tid 63911] [client 20.223.176.171:24278] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acZzcmVSkmYmLu7ycYhOJwAAAQw"]
[Fri Mar 27 20:09:23.615159 2026] [:error] [pid 4293:tid 4301] [client 20.223.176.171:29113] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acZzc5LjeJUC3OKtEx-CPgAAAUY"]
[Fri Mar 27 20:09:24.622997 2026] [:error] [pid 4293:tid 4317] [client 20.223.176.171:24296] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acZzdJLjeJUC3OKtEx-CSQAAAVY"]
[Fri Mar 27 20:09:25.641514 2026] [:error] [pid 4293:tid 4304] [client 20.223.176.171:24902] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acZzdZLjeJUC3OKtEx-CVQAAAUk"]
[Fri Mar 27 20:09:26.612392 2026] [:error] [pid 27743:tid 27776] [client 20.223.176.171:57246] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acZzdiA46UYYLqzw99Dh0QAAAAw"]
[Fri Mar 27 20:09:28.420467 2026] [:error] [pid 4341:tid 4364] [client 20.223.176.171:24281] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acZzeOKJWrNB5dMlERGi6AAAAZU"]
[Fri Mar 27 20:09:30.530670 2026] [:error] [pid 63897:tid 63899] [client 20.223.176.171:9609] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acZzemVSkmYmLu7ycYhOLwAAAQA"]
[Fri Mar 27 20:09:31.264995 2026] [:error] [pid 4293:tid 4318] [client 20.223.176.171:7255] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acZze5LjeJUC3OKtEx-CagAAAVc"]
[Fri Mar 27 20:09:32.314991 2026] [:error] [pid 27743:tid 27772] [client 20.223.176.171:19659] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acZzfCA46UYYLqzw99Dh1wAAAAg"]
[Fri Mar 27 20:09:34.165161 2026] [:error] [pid 27750:tid 27829] [client 20.223.176.171:8962] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acZzfoaSil5rd17ieLzxOwAAAIs"]
[Fri Mar 27 20:09:36.026297 2026] [:error] [pid 4341:tid 4346] [client 20.223.176.171:56802] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acZzgOKJWrNB5dMlERGi_QAAAYM"]
[Fri Mar 27 20:09:38.259575 2026] [:error] [pid 27743:tid 27773] [client 20.223.176.171:11956] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acZzgiA46UYYLqzw99Dh5gAAAAk"]
[Fri Mar 27 20:09:39.961708 2026] [:error] [pid 4341:tid 4351] [client 20.223.176.171:29083] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acZzg-KJWrNB5dMlERGjFgAAAYg"]
[Fri Mar 27 20:09:41.298133 2026] [:error] [pid 27743:tid 27778] [client 20.223.176.171:11924] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acZzhSA46UYYLqzw99Dh7wAAAA4"]
[Fri Mar 27 20:09:42.241411 2026] [:error] [pid 27851:tid 27859] [client 20.223.176.171:24312] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acZzhnR2ccxe3RMCLbrvbQAAAME"]
[Fri Mar 27 20:09:43.232387 2026] [:error] [pid 4293:tid 4316] [client 20.223.176.171:57328] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acZzh5LjeJUC3OKtEx-ChwAAAVU"]
[Fri Mar 27 20:09:44.457406 2026] [:error] [pid 63897:tid 63910] [client 20.223.176.171:38976] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acZziGVSkmYmLu7ycYhORgAAAQs"]
[Fri Mar 27 20:09:46.396052 2026] [:error] [pid 4293:tid 4307] [client 20.223.176.171:19689] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acZzipLjeJUC3OKtEx-ClQAAAUw"]
[Fri Mar 27 20:09:47.101887 2026] [:error] [pid 27743:tid 27770] [client 20.223.176.171:11924] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acZziyA46UYYLqzw99Dh9wAAAAY"]
[Fri Mar 27 20:09:48.694931 2026] [:error] [pid 27749:tid 27810] [client 20.223.176.171:57275] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acZzjMEqyoMni2Q6_X7xbAAAAFM"]
[Fri Mar 27 20:09:50.210298 2026] [:error] [pid 27743:tid 27769] [client 20.223.176.171:48093] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acZzjiA46UYYLqzw99DiAQAAAAU"]
[Fri Mar 27 20:09:51.371156 2026] [:error] [pid 27851:tid 27881] [client 20.223.176.171:48117] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acZzj3R2ccxe3RMCLbrveAAAANc"]
[Fri Mar 27 20:09:52.455419 2026] [:error] [pid 63897:tid 63906] [client 20.223.176.171:9013] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acZzkGVSkmYmLu7ycYhOTgAAAQc"]
[Fri Mar 27 20:09:53.798939 2026] [:error] [pid 27851:tid 27870] [client 20.223.176.171:8984] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acZzkXR2ccxe3RMCLbrvfwAAAMw"]
[Fri Mar 27 20:09:55.628627 2026] [:error] [pid 4293:tid 4312] [client 20.223.176.171:24955] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acZzk5LjeJUC3OKtEx-CowAAAVE"]
[Fri Mar 27 20:09:56.769304 2026] [:error] [pid 4341:tid 4359] [client 20.223.176.171:20247] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acZzlOKJWrNB5dMlERGjhgAAAZA"]
[Fri Mar 27 20:09:58.065075 2026] [:error] [pid 63897:tid 63901] [client 20.223.176.171:57314] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acZzlmVSkmYmLu7ycYhOWgAAAQI"]
[Fri Mar 27 20:09:59.001024 2026] [:error] [pid 4293:tid 4312] [client 20.223.176.171:29076] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acZzlpLjeJUC3OKtEx-CsQAAAVE"]
[Fri Mar 27 20:10:01.904807 2026] [:error] [pid 4293:tid 4310] [client 20.223.176.171:17991] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acZzmZLjeJUC3OKtEx-CxAAAAU8"]
[Fri Mar 27 20:10:03.775140 2026] [:error] [pid 4293:tid 4309] [client 20.223.176.171:7268] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acZzm5LjeJUC3OKtEx-C2QAAAU4"]
[Fri Mar 27 20:10:04.482483 2026] [:error] [pid 4341:tid 4353] [client 20.223.176.171:29070] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acZznOKJWrNB5dMlERGjnQAAAYo"]
[Fri Mar 27 20:10:05.708926 2026] [:error] [pid 27743:tid 27779] [client 20.223.176.171:18039] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acZznSA46UYYLqzw99DiJAAAAA8"]
[Fri Mar 27 20:10:07.241468 2026] [:error] [pid 4341:tid 4345] [client 20.223.176.171:18032] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acZzn-KJWrNB5dMlERGjpgAAAYI"]
[Fri Mar 27 20:10:08.192936 2026] [:error] [pid 4341:tid 4362] [client 20.223.176.171:10459] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acZzoOKJWrNB5dMlERGjrQAAAZM"]
[Fri Mar 27 20:10:09.294493 2026] [:error] [pid 27743:tid 27781] [client 20.223.176.171:40244] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acZzoSA46UYYLqzw99DiJwAAABE"]
[Fri Mar 27 20:10:10.088388 2026] [:error] [pid 63897:tid 63902] [client 20.223.176.171:13339] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acZzomVSkmYmLu7ycYhOagAAAQM"]
[Fri Mar 27 20:10:11.077250 2026] [:error] [pid 4341:tid 4367] [client 20.223.176.171:30287] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acZzo-KJWrNB5dMlERGjtQAAAZg"]
[Fri Mar 27 20:10:12.006573 2026] [:error] [pid 4293:tid 4299] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/rmpoa.php
[Fri Mar 27 20:10:12.474052 2026] [:error] [pid 4293:tid 4311] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Fri Mar 27 20:10:12.747331 2026] [:error] [pid 4293:tid 4309] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Fri Mar 27 20:10:13.036737 2026] [:error] [pid 4293:tid 4302] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Fri Mar 27 20:10:13.290477 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Fri Mar 27 20:10:13.544471 2026] [:error] [pid 4293:tid 4308] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Fri Mar 27 20:10:13.846423 2026] [:error] [pid 4293:tid 4296] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Fri Mar 27 20:10:14.100399 2026] [:error] [pid 4293:tid 4314] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Mar 27 20:10:14.400434 2026] [:error] [pid 4293:tid 4301] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Fri Mar 27 20:10:14.655092 2026] [:error] [pid 4293:tid 4317] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Mar 27 20:10:15.195945 2026] [:error] [pid 4293:tid 4306] [client 20.223.176.171:36680] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Fri Mar 27 20:10:15.472664 2026] [:error] [pid 4293:tid 4305] [client 20.223.176.171:36680] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acZzp5LjeJUC3OKtEx-DBwAAAUo"]
[Fri Mar 27 20:10:16.547836 2026] [:error] [pid 4341:tid 4365] [client 20.223.176.171:10044] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acZzqOKJWrNB5dMlERGjtwAAAZY"]
[Fri Mar 27 20:10:18.451526 2026] [:error] [pid 27743:tid 27775] [client 20.223.176.171:7610] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acZzqiA46UYYLqzw99DiPwAAAAs"]
[Fri Mar 27 20:10:19.174467 2026] [:error] [pid 27743:tid 27767] [client 20.223.176.171:16608] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acZzqyA46UYYLqzw99DiQwAAAAM"]
[Fri Mar 27 20:10:20.429033 2026] [:error] [pid 63897:tid 63903] [client 20.223.176.171:11759] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acZzrGVSkmYmLu7ycYhOdQAAAQQ"]
[Fri Mar 27 20:10:21.701574 2026] [:error] [pid 4341:tid 4356] [client 20.223.176.171:27357] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acZzreKJWrNB5dMlERGjywAAAY0"]
[Fri Mar 27 20:10:22.835942 2026] [:error] [pid 4341:tid 4353] [client 20.223.176.171:49213] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acZzruKJWrNB5dMlERGj0QAAAYo"]
[Fri Mar 27 20:10:24.629777 2026] [:error] [pid 4293:tid 4304] [client 20.223.176.171:10725] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acZzsJLjeJUC3OKtEx-DGAAAAUk"]
[Fri Mar 27 20:10:25.911483 2026] [:error] [pid 4293:tid 4297] [client 20.223.176.171:16542] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acZzsZLjeJUC3OKtEx-DHwAAAUI"]
[Fri Mar 27 20:10:27.018012 2026] [:error] [pid 27750:tid 27823] [client 20.223.176.171:7929] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acZzs4aSil5rd17ieLzxaAAAAIU"]
[Fri Mar 27 20:10:28.401563 2026] [:error] [pid 27750:tid 27831] [client 20.223.176.171:20303] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acZztIaSil5rd17ieLzxbQAAAI0"]
[Fri Mar 27 20:10:30.492638 2026] [:error] [pid 27750:tid 27833] [client 20.223.176.171:3889] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acZztoaSil5rd17ieLzxcQAAAI8"]
[Fri Mar 27 20:10:32.785513 2026] [:error] [pid 27750:tid 27832] [client 20.223.176.171:20329] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acZzuIaSil5rd17ieLzxeAAAAI4"]
[Fri Mar 27 20:10:34.699155 2026] [:error] [pid 4293:tid 4298] [client 20.223.176.171:23277] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acZzupLjeJUC3OKtEx-DOAAAAUM"]
[Fri Mar 27 20:10:36.717839 2026] [:error] [pid 27743:tid 27788] [client 20.223.176.171:13820] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acZzvCA46UYYLqzw99DiWgAAABg"]
[Fri Mar 27 20:10:37.997320 2026] [:error] [pid 27851:tid 27858] [client 20.223.176.171:33912] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acZzvXR2ccxe3RMCLbrvqgAAAMA"]
[Fri Mar 27 20:10:38.851659 2026] [:error] [pid 27851:tid 27878] [client 20.223.176.171:28560] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acZzvnR2ccxe3RMCLbrvrQAAANQ"]
[Fri Mar 27 20:10:40.090454 2026] [:error] [pid 4293:tid 4307] [client 20.223.176.171:35640] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acZzwJLjeJUC3OKtEx-DWAAAAUw"]
[Fri Mar 27 20:10:41.169074 2026] [:error] [pid 27750:tid 27818] [client 20.223.176.171:23456] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acZzwYaSil5rd17ieLzxgwAAAIA"]
[Fri Mar 27 20:10:42.197607 2026] [:error] [pid 27743:tid 27787] [client 20.223.176.171:19618] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acZzwiA46UYYLqzw99DiYAAAABc"]
[Fri Mar 27 20:10:42.989749 2026] [:error] [pid 27750:tid 27834] [client 20.223.176.171:48050] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acZzwoaSil5rd17ieLzxiQAAAJA"]
[Fri Mar 27 20:10:44.023751 2026] [:error] [pid 63897:tid 63910] [client 20.223.176.171:42602] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acZzxGVSkmYmLu7ycYhOjwAAAQs"]
[Fri Mar 27 20:10:44.960381 2026] [:error] [pid 27851:tid 27865] [client 20.223.176.171:32050] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acZzxHR2ccxe3RMCLbrvtAAAAMc"]
[Fri Mar 27 20:10:45.772828 2026] [:error] [pid 4341:tid 4365] [client 20.223.176.171:32671] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acZzxeKJWrNB5dMlERGj3wAAAZY"]
[Fri Mar 27 20:10:47.172351 2026] [:error] [pid 4293:tid 4308] [client 20.223.176.171:48005] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acZzx5LjeJUC3OKtEx-DcAAAAU0"]
[Fri Mar 27 20:10:47.938441 2026] [:error] [pid 27851:tid 27874] [client 20.223.176.171:37132] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acZzx3R2ccxe3RMCLbrvuwAAANA"]
[Fri Mar 27 20:10:48.654507 2026] [:error] [pid 4341:tid 4354] [client 20.223.176.171:32028] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acZzyOKJWrNB5dMlERGj5wAAAYs"]
[Fri Mar 27 20:10:49.386873 2026] [:error] [pid 27743:tid 27781] [client 20.223.176.171:22890] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acZzySA46UYYLqzw99DiZgAAABE"]
[Fri Mar 27 20:10:50.336180 2026] [:error] [pid 63897:tid 63922] [client 20.223.176.171:44378] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acZzymVSkmYmLu7ycYhOmQAAARc"]
[Fri Mar 27 20:10:51.239189 2026] [:error] [pid 4341:tid 4345] [client 20.223.176.171:38499] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acZzy-KJWrNB5dMlERGj-gAAAYI"]
[Fri Mar 27 20:10:52.313830 2026] [:error] [pid 4293:tid 4316] [client 20.223.176.171:22907] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acZzzJLjeJUC3OKtEx-DewAAAVU"]
[Fri Mar 27 20:10:54.762626 2026] [:error] [pid 27743:tid 27782] [client 20.223.176.171:32686] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acZzziA46UYYLqzw99DidwAAABI"]
[Fri Mar 27 20:10:55.859034 2026] [:error] [pid 27749:tid 27804] [client 20.223.176.171:14139] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acZzz8EqyoMni2Q6_X7xhwAAAE0"]
[Fri Mar 27 20:10:56.636027 2026] [:error] [pid 4293:tid 4312] [client 20.223.176.171:32691] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acZz0JLjeJUC3OKtEx-DjQAAAVE"]
[Fri Mar 27 20:10:58.146788 2026] [:error] [pid 27743:tid 27770] [client 20.223.176.171:22866] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acZz0iA46UYYLqzw99DigAAAAAY"]
[Fri Mar 27 20:10:59.103927 2026] [:error] [pid 27750:tid 27828] [client 20.223.176.171:44365] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acZz04aSil5rd17ieLzxkwAAAIo"]
[Fri Mar 27 20:11:00.392681 2026] [:error] [pid 4293:tid 4310] [client 20.223.176.171:32039] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acZz1JLjeJUC3OKtEx-DmQAAAU8"]
[Fri Mar 27 20:11:01.492553 2026] [:error] [pid 4293:tid 4297] [client 20.223.176.171:16233] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acZz1ZLjeJUC3OKtEx-DogAAAUI"]
[Fri Mar 27 20:11:02.984532 2026] [:error] [pid 63897:tid 63908] [client 20.223.176.171:22876] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acZz1mVSkmYmLu7ycYhOpwAAAQk"]
[Fri Mar 27 20:11:04.793879 2026] [:error] [pid 27743:tid 27775] [client 20.223.176.171:19602] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acZz2CA46UYYLqzw99DikgAAAAs"]
[Fri Mar 27 20:11:06.575893 2026] [:error] [pid 63897:tid 63913] [client 20.223.176.171:19616] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acZz2mVSkmYmLu7ycYhOsAAAAQ4"]
[Fri Mar 27 20:11:12.605725 2026] [:error] [pid 63897:tid 63919] [client 20.223.176.171:22873] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acZz4GVSkmYmLu7ycYhOswAAARQ"]
[Fri Mar 27 20:11:13.594692 2026] [:error] [pid 4293:tid 4295] [client 20.223.176.171:9463] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acZz4ZLjeJUC3OKtEx-D0gAAAUA"]
[Fri Mar 27 20:11:14.802597 2026] [:error] [pid 4293:tid 4304] [client 20.223.176.171:43384] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acZz4pLjeJUC3OKtEx-D2AAAAUk"]
[Fri Mar 27 20:11:16.120178 2026] [:error] [pid 27851:tid 27867] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/resp.php
[Fri Mar 27 20:11:16.435436 2026] [:error] [pid 27851:tid 27870] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/lanou.php
[Fri Mar 27 20:11:16.739417 2026] [:error] [pid 27851:tid 27864] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/eursi.php
[Fri Mar 27 20:11:16.993490 2026] [:error] [pid 27851:tid 27874] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/pas2.php
[Fri Mar 27 20:11:17.401162 2026] [:error] [pid 27851:tid 27860] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/schal.php
[Fri Mar 27 20:11:17.757332 2026] [:error] [pid 27851:tid 27859] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Fri Mar 27 20:11:18.663997 2026] [:error] [pid 27851:tid 27862] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/dtyh.php
[Fri Mar 27 20:11:18.987714 2026] [:error] [pid 27851:tid 27878] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/wta.php
[Fri Mar 27 20:11:19.318926 2026] [:error] [pid 27851:tid 27881] [client 20.223.176.171:32096] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Fri Mar 27 20:11:19.570385 2026] [:error] [pid 27851:tid 27871] [client 20.223.176.171:32096] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acZz53R2ccxe3RMCLbrv1QAAAM0"]
[Fri Mar 27 20:11:20.746807 2026] [:error] [pid 4293:tid 4318] [client 20.223.176.171:39579] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acZz6JLjeJUC3OKtEx-D4wAAAVc"]
[Fri Mar 27 20:11:21.781874 2026] [:error] [pid 27743:tid 27768] [client 20.223.176.171:20225] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acZz6SA46UYYLqzw99DitwAAAAQ"]
[Fri Mar 27 20:11:22.708245 2026] [:error] [pid 27743:tid 27764] [client 20.223.176.171:10051] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acZz6iA46UYYLqzw99DivwAAAAA"]
[Fri Mar 27 20:11:23.449738 2026] [:error] [pid 27743:tid 27771] [client 20.223.176.171:48035] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/saorix1.php"] [unique_id "acZz6yA46UYYLqzw99DiwwAAAAc"]
[Fri Mar 27 20:11:24.107828 2026] [:error] [pid 4293:tid 4316] [client 20.223.176.171:22892] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/saorix1.php"] [unique_id "acZz7JLjeJUC3OKtEx-D6QAAAVU"]
[Fri Mar 27 20:11:24.902367 2026] [:error] [pid 27743:tid 27778] [client 20.223.176.171:42597] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/saorix1.php"] [unique_id "acZz7CA46UYYLqzw99DizQAAAA4"]
[Fri Mar 27 20:11:25.741889 2026] [:error] [pid 27743:tid 27781] [client 20.223.176.171:32069] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/saorix1.php"] [unique_id "acZz7SA46UYYLqzw99Di0QAAABE"]
[Fri Mar 27 20:11:26.571986 2026] [:error] [pid 4341:tid 4364] [client 20.223.176.171:32091] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-class.php"] [unique_id "acZz7uKJWrNB5dMlERGkLAAAAZU"]
[Fri Mar 27 20:11:27.267154 2026] [:error] [pid 27851:tid 27864] [client 20.223.176.171:32045] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-class.php"] [unique_id "acZz73R2ccxe3RMCLbrv1gAAAMY"]
[Fri Mar 27 20:11:29.217725 2026] [:error] [pid 63897:tid 63914] [client 20.223.176.171:9359] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-class.php"] [unique_id "acZz8WVSkmYmLu7ycYhOwQAAAQ8"]
[Fri Mar 27 20:11:30.490997 2026] [:error] [pid 4341:tid 4356] [client 20.223.176.171:48712] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-class.php"] [unique_id "acZz8uKJWrNB5dMlERGkNwAAAY0"]
[Fri Mar 27 20:11:31.679123 2026] [:error] [pid 27750:tid 27829] [client 20.223.176.171:37143] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acZz84aSil5rd17ieLzxowAAAIs"]
[Fri Mar 27 20:11:32.566798 2026] [:error] [pid 4341:tid 4345] [client 20.223.176.171:42607] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acZz9OKJWrNB5dMlERGkPgAAAYI"]
[Fri Mar 27 20:11:33.734775 2026] [:error] [pid 27743:tid 27765] [client 20.223.176.171:9366] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acZz9SA46UYYLqzw99Di4AAAAAE"]
[Fri Mar 27 20:11:34.318629 2026] [:error] [pid 4293:tid 4309] [client 20.223.176.171:45603] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acZz9pLjeJUC3OKtEx-D9AAAAU4"]
[Fri Mar 27 20:11:34.938328 2026] [:error] [pid 4341:tid 4355] [client 20.223.176.171:14140] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acZz9uKJWrNB5dMlERGkRwAAAYw"]
[Fri Mar 27 20:11:35.601967 2026] [:error] [pid 4293:tid 4301] [client 20.223.176.171:3434] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acZz95LjeJUC3OKtEx-D-QAAAUY"]
[Fri Mar 27 20:11:36.272620 2026] [:error] [pid 4293:tid 4315] [client 20.223.176.171:3393] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acZz-JLjeJUC3OKtEx-D-gAAAVQ"]
[Fri Mar 27 20:11:36.932043 2026] [:error] [pid 4341:tid 4365] [client 20.223.176.171:14108] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acZz-OKJWrNB5dMlERGkVAAAAZY"]
[Fri Mar 27 20:11:37.565694 2026] [:error] [pid 63897:tid 63914] [client 20.223.176.171:56110] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acZz-WVSkmYmLu7ycYhOywAAAQ8"]
[Fri Mar 27 20:11:38.159184 2026] [:error] [pid 4293:tid 4313] [client 20.223.176.171:42078] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acZz-pLjeJUC3OKtEx-D_AAAAVI"]
[Fri Mar 27 20:11:38.933175 2026] [:error] [pid 27749:tid 27791] [client 20.223.176.171:11347] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acZz-sEqyoMni2Q6_X7x2wAAAEA"]
[Fri Mar 27 20:11:39.570314 2026] [:error] [pid 27743:tid 27766] [client 20.223.176.171:9397] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acZz-yA46UYYLqzw99Di5wAAAAI"]
[Fri Mar 27 20:11:40.604866 2026] [:error] [pid 4341:tid 4343] [client 20.223.176.171:48766] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acZz_OKJWrNB5dMlERGkaAAAAYA"]
[Fri Mar 27 20:11:41.302008 2026] [:error] [pid 27851:tid 27878] [client 20.223.176.171:26339] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acZz_XR2ccxe3RMCLbrv6wAAANQ"]
[Fri Mar 27 20:11:42.122443 2026] [:error] [pid 4293:tid 4311] [client 20.223.176.171:12722] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acZz_pLjeJUC3OKtEx-ECQAAAVA"]
[Fri Mar 27 20:11:43.007261 2026] [:error] [pid 4293:tid 4305] [client 20.223.176.171:48727] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acZz_5LjeJUC3OKtEx-EFAAAAUo"]
[Fri Mar 27 20:11:43.975838 2026] [:error] [pid 27749:tid 27796] [client 20.223.176.171:14087] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acZz_8EqyoMni2Q6_X7x3wAAAEU"]
[Fri Mar 27 20:11:44.620624 2026] [:error] [pid 63897:tid 63910] [client 20.223.176.171:26348] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acZ0AGVSkmYmLu7ycYhO0QAAAQs"]
[Fri Mar 27 20:11:46.448030 2026] [:error] [pid 27743:tid 27771] [client 20.223.176.171:25163] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acZ0AiA46UYYLqzw99DjCQAAAAc"]
[Fri Mar 27 20:11:49.885318 2026] [:error] [pid 27743:tid 27776] [client 20.223.176.171:11270] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acZ0BSA46UYYLqzw99DjGAAAAAw"]
[Fri Mar 27 20:11:51.328202 2026] [:error] [pid 4293:tid 4313] [client 20.223.176.171:48684] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acZ0B5LjeJUC3OKtEx-EIgAAAVI"]
[Fri Mar 27 20:11:55.432464 2026] [:error] [pid 4293:tid 4297] [client 20.223.176.171:19248] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acZ0C5LjeJUC3OKtEx-ENAAAAUI"]
[Fri Mar 27 20:11:56.655939 2026] [:error] [pid 27851:tid 27859] [client 20.223.176.171:12405] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acZ0DHR2ccxe3RMCLbrv-AAAAME"]
[Fri Mar 27 20:11:58.256440 2026] [:error] [pid 27750:tid 27818] [client 20.223.176.171:37846] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acZ0DoaSil5rd17ieLzxtAAAAIA"]
[Fri Mar 27 20:11:59.443538 2026] [:error] [pid 27749:tid 27792] [client 20.223.176.171:21094] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acZ0D8EqyoMni2Q6_X7x6gAAAEE"]
[Fri Mar 27 20:12:00.542965 2026] [:error] [pid 27750:tid 27822] [client 20.223.176.171:13116] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acZ0EIaSil5rd17ieLzxugAAAIQ"]
[Fri Mar 27 20:12:01.624097 2026] [:error] [pid 63897:tid 63923] [client 20.223.176.171:16133] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acZ0EWVSkmYmLu7ycYhO7wAAARg"]
[Fri Mar 27 20:12:04.140492 2026] [:error] [pid 4293:tid 4314] [client 20.223.176.171:29146] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acZ0FJLjeJUC3OKtEx-ESAAAAVM"]
[Fri Mar 27 20:12:06.501631 2026] [:error] [pid 4341:tid 4365] [client 20.223.176.171:3235] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acZ0FuKJWrNB5dMlERGkmAAAAZY"]
[Fri Mar 27 20:12:07.334486 2026] [:error] [pid 4341:tid 4359] [client 20.223.176.171:53273] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acZ0F-KJWrNB5dMlERGknwAAAZA"]
[Fri Mar 27 20:12:08.406621 2026] [:error] [pid 27743:tid 27774] [client 20.223.176.171:48682] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acZ0GCA46UYYLqzw99DjIwAAAAo"]
[Fri Mar 27 20:12:09.327096 2026] [:error] [pid 27743:tid 27782] [client 20.223.176.171:54297] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acZ0GSA46UYYLqzw99DjKAAAABI"]
[Fri Mar 27 20:12:10.481886 2026] [:error] [pid 27750:tid 27837] [client 20.223.176.171:39679] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acZ0GoaSil5rd17ieLzxvwAAAJM"]
[Fri Mar 27 20:12:11.798890 2026] [:error] [pid 4341:tid 4345] [client 20.223.176.171:15615] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acZ0G-KJWrNB5dMlERGkqAAAAYI"]
[Fri Mar 27 20:12:12.897612 2026] [:error] [pid 27749:tid 27810] [client 20.223.176.171:19988] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acZ0HMEqyoMni2Q6_X7x_wAAAFM"]
[Fri Mar 27 20:12:13.622644 2026] [:error] [pid 27743:tid 27776] [client 20.223.176.171:7869] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acZ0HSA46UYYLqzw99DjNQAAAAw"]
[Fri Mar 27 20:12:14.588943 2026] [:error] [pid 4341:tid 4347] [client 20.223.176.171:39645] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acZ0HuKJWrNB5dMlERGkrgAAAYQ"]
[Fri Mar 27 20:12:15.463331 2026] [:error] [pid 63897:tid 63908] [client 20.223.176.171:9036] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acZ0H2VSkmYmLu7ycYhPBQAAAQk"]
[Fri Mar 27 20:12:16.717784 2026] [:error] [pid 4293:tid 4303] [client 20.223.176.171:8295] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acZ0IJLjeJUC3OKtEx-EYQAAAUg"]
[Fri Mar 27 20:12:17.655917 2026] [:error] [pid 4293:tid 4306] [client 20.223.176.171:3168] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acZ0IZLjeJUC3OKtEx-EaAAAAUs"]
[Fri Mar 27 20:12:18.850723 2026] [:error] [pid 4293:tid 4301] [client 20.223.176.171:23825] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/utky.php"] [unique_id "acZ0IpLjeJUC3OKtEx-EdAAAAUY"]
[Fri Mar 27 20:12:19.598771 2026] [:error] [pid 27743:tid 27766] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/utky.php
[Fri Mar 27 20:12:19.917574 2026] [:error] [pid 27743:tid 27788] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/uang.php
[Fri Mar 27 20:12:20.171206 2026] [:error] [pid 27743:tid 27772] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/wp3.php
[Fri Mar 27 20:12:20.877898 2026] [:error] [pid 27743:tid 27776] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Mar 27 20:12:21.476880 2026] [:error] [pid 27743:tid 27770] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/ticket.php
[Fri Mar 27 20:12:21.731745 2026] [:error] [pid 27743:tid 27768] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Fri Mar 27 20:12:22.084955 2026] [:error] [pid 27743:tid 27775] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Fri Mar 27 20:12:22.337919 2026] [:error] [pid 27743:tid 27771] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Mar 27 20:12:22.760346 2026] [:error] [pid 27743:tid 27782] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Fri Mar 27 20:12:23.114316 2026] [:error] [pid 27743:tid 27780] [client 20.223.176.171:54949] File does not exist: /usr/local/apache/htdocs/suspended-page/xpass.php
[Fri Mar 27 20:12:23.595488 2026] [:error] [pid 27743:tid 27778] [client 20.223.176.171:54949] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acZ0JyA46UYYLqzw99DjUwAAAA4"]
[Fri Mar 27 20:12:25.296955 2026] [:error] [pid 4293:tid 4305] [client 20.223.176.171:29775] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acZ0KZLjeJUC3OKtEx-EkgAAAUo"]
[Fri Mar 27 20:12:26.051555 2026] [:error] [pid 4341:tid 4357] [client 20.223.176.171:3374] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acZ0KuKJWrNB5dMlERGkuwAAAY4"]
[Fri Mar 27 20:12:27.337639 2026] [:error] [pid 27743:tid 27766] [client 20.223.176.171:22135] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acZ0KyA46UYYLqzw99DjaQAAAAI"]
[Fri Mar 27 20:12:28.607361 2026] [:error] [pid 4341:tid 4359] [client 20.223.176.171:22107] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acZ0LOKJWrNB5dMlERGkxQAAAZA"]
[Fri Mar 27 20:12:29.750029 2026] [:error] [pid 27743:tid 27768] [client 20.223.176.171:18666] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acZ0LSA46UYYLqzw99DjdgAAAAQ"]
[Fri Mar 27 20:12:31.173969 2026] [:error] [pid 4293:tid 4295] [client 20.223.176.171:42512] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acZ0L5LjeJUC3OKtEx-EogAAAUA"]
[Fri Mar 27 20:12:32.297930 2026] [:error] [pid 27743:tid 27776] [client 20.223.176.171:35053] [client 20.223.176.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acZ0MCA46UYYLqzw99DjggAAAAw"]
[Fri Mar 27 21:27:40.268631 2026] [:error] [pid 4293:tid 4302] [client 185.195.236.201:39462] [client 185.195.236.201] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=application/xhtml+xml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acaFzJLjeJUC3OKtEx-0JgAAAUc"]
[Sat Mar 28 00:26:24.761527 2026] [:error] [pid 22607:tid 22623] [client 43.153.135.208:52698] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acavsJiC8WpFMM-VCJcuJAAAAkw"]
[Sat Mar 28 02:47:30.838528 2026] [:error] [pid 11768:tid 11783] [client 51.75.118.147:37128] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acbQwsLK0swIwlw7rFbb7wAAAQs"]
[Sat Mar 28 02:47:32.678950 2026] [:error] [pid 11768:tid 11795] [client 51.75.118.147:41746] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "acbQxMLK0swIwlw7rFbb-AAAARc"]
[Sat Mar 28 02:47:34.712303 2026] [:error] [pid 31054:tid 31073] [client 51.75.118.147:41756] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acbQxpwv8eb6fRZGI77gXwAAAFA"]
[Sat Mar 28 02:47:36.577945 2026] [:error] [pid 31054:tid 31057] [client 51.75.118.147:41758] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "acbQyJwv8eb6fRZGI77gbQAAAEA"]
[Sat Mar 28 02:47:38.572633 2026] [:error] [pid 31054:tid 31076] [client 51.75.118.147:41766] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acbQypwv8eb6fRZGI77geQAAAFM"]
[Sat Mar 28 02:47:40.583690 2026] [:error] [pid 11323:tid 11700] [client 51.75.118.147:55042] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acbQzBruG7-TT-rIgF8GRQAAABQ"]
[Sat Mar 28 02:47:42.604740 2026] [:error] [pid 11768:tid 11772] [client 51.75.118.147:55044] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acbQzsLK0swIwlw7rFbcCwAAAQA"]
[Sat Mar 28 02:47:44.528662 2026] [:error] [pid 11323:tid 11696] [client 51.75.118.147:55054] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acbQ0BruG7-TT-rIgF8GTgAAABA"]
[Sat Mar 28 02:47:46.586575 2026] [:error] [pid 11323:tid 11688] [client 51.75.118.147:55062] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acbQ0hruG7-TT-rIgF8GVwAAAAg"]
[Sat Mar 28 02:47:48.306093 2026] [:error] [pid 31054:tid 31062] [client 51.75.118.147:55064] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acbQ1Jwv8eb6fRZGI77gjAAAAEU"]
[Sat Mar 28 02:47:50.300471 2026] [:error] [pid 11323:tid 11695] [client 51.75.118.147:54112] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acbQ1hruG7-TT-rIgF8GYQAAAA8"]
[Sat Mar 28 02:47:52.338172 2026] [:error] [pid 11323:tid 11699] [client 51.75.118.147:54118] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acbQ2BruG7-TT-rIgF8GaQAAABM"]
[Sat Mar 28 02:47:54.339877 2026] [:error] [pid 11323:tid 11692] [client 51.75.118.147:54134] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "acbQ2hruG7-TT-rIgF8GcwAAAAw"]
[Sat Mar 28 02:47:56.227468 2026] [:error] [pid 11325:tid 11759] [client 51.75.118.147:54140] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acbQ3I9aMci1IHcmG6IIRAAAANI"]
[Sat Mar 28 02:47:58.227829 2026] [:error] [pid 11323:tid 11690] [client 51.75.118.147:54150] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acbQ3hruG7-TT-rIgF8GgAAAAAo"]
[Sat Mar 28 02:48:00.217933 2026] [:error] [pid 31054:tid 31074] [client 51.75.118.147:52296] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acbQ4Jwv8eb6fRZGI77gowAAAFE"]
[Sat Mar 28 02:48:02.300578 2026] [:error] [pid 11768:tid 11781] [client 51.75.118.147:52310] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acbQ4sLK0swIwlw7rFbcTwAAAQk"]
[Sat Mar 28 02:48:04.172746 2026] [:error] [pid 11324:tid 11735] [client 51.75.118.147:52312] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acbQ5DIhTRer7nZpUKjz2AAAAJU"]
[Sat Mar 28 02:48:06.337832 2026] [:error] [pid 11323:tid 11691] [client 51.75.118.147:52324] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acbQ5hruG7-TT-rIgF8GkAAAAAs"]
[Sat Mar 28 02:48:08.236638 2026] [:error] [pid 11768:tid 11774] [client 51.75.118.147:52326] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acbQ6MLK0swIwlw7rFbcWwAAAQI"]
[Sat Mar 28 02:48:10.258888 2026] [:error] [pid 11323:tid 11695] [client 51.75.118.147:37382] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acbQ6hruG7-TT-rIgF8GmwAAAA8"]
[Sat Mar 28 02:48:12.301417 2026] [:error] [pid 11768:tid 11782] [client 51.75.118.147:37398] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acbQ7MLK0swIwlw7rFbcaQAAAQo"]
[Sat Mar 28 02:48:14.488698 2026] [:error] [pid 11768:tid 11788] [client 51.75.118.147:37406] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acbQ7sLK0swIwlw7rFbcdgAAARA"]
[Sat Mar 28 02:48:18.337967 2026] [:error] [pid 11325:tid 11743] [client 51.75.118.147:37418] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acbQ8o9aMci1IHcmG6IIVQAAAMI"]
[Sat Mar 28 06:34:24.877016 2026] [:error] [pid 34597:tid 34602] [client 54.38.38.130:55594] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "accF8IluI7-e5s1cafcTNgAAAUE"]
[Sat Mar 28 06:34:26.916614 2026] [:error] [pid 64859:tid 64898] [client 54.38.38.130:37578] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "accF8m3qEBHXq3rHdBmmxgAAABE"]
[Sat Mar 28 06:34:28.993299 2026] [:error] [pid 34631:tid 34661] [client 54.38.38.130:37592] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "accF9DtzjMMS6kojpeQclwAAAcE"]
[Sat Mar 28 06:34:30.984170 2026] [:error] [pid 43579:tid 43609] [client 54.38.38.130:37604] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "accF9iRqN4JVI8gB7AmFcAAAAoE"]
[Sat Mar 28 06:34:32.908340 2026] [:error] [pid 43578:tid 43602] [client 54.38.38.130:37614] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "accF-HNG2YdGm41aN8LXAQAAAlU"]
[Sat Mar 28 06:34:34.990852 2026] [:error] [pid 43579:tid 43608] [client 54.38.38.130:37626] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "accF-iRqN4JVI8gB7AmFdwAAAoA"]
[Sat Mar 28 06:34:37.190646 2026] [:error] [pid 43547:tid 43568] [client 54.38.38.130:42334] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "accF_T4ZEfdetXP-9aCsvgAAAhM"]
[Sat Mar 28 06:34:39.234447 2026] [:error] [pid 34631:tid 34663] [client 54.38.38.130:42346] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "accF_ztzjMMS6kojpeQcpQAAAcM"]
[Sat Mar 28 06:34:41.285626 2026] [:error] [pid 34597:tid 34601] [client 54.38.38.130:42358] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "accGAYluI7-e5s1cafcTQwAAAUA"]
[Sat Mar 28 06:34:43.396073 2026] [:error] [pid 34631:tid 34683] [client 54.38.38.130:42372] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "accGAztzjMMS6kojpeQcrQAAAdc"]
[Sat Mar 28 06:34:45.431944 2026] [:error] [pid 64861:tid 64954] [client 54.38.38.130:33148] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "accGBexK22_lUN2kvnVNZwAAAJM"]
[Sat Mar 28 06:34:47.580734 2026] [:error] [pid 43578:tid 43605] [client 54.38.38.130:33150] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "accGB3NG2YdGm41aN8LXFAAAAlg"]
[Sat Mar 28 06:34:49.529452 2026] [:error] [pid 64861:tid 64953] [client 54.38.38.130:33152] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "accGCexK22_lUN2kvnVNdAAAAJI"]
[Sat Mar 28 06:34:51.617869 2026] [:error] [pid 64966:tid 64997] [client 54.38.38.130:33168] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "accGC9fSvF5AFfSuKxXx4QAAANg"]
[Sat Mar 28 06:34:53.381348 2026] [:error] [pid 34631:tid 34675] [client 54.38.38.130:33176] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "accGDTtzjMMS6kojpeQcuQAAAc8"]
[Sat Mar 28 06:34:55.366032 2026] [:error] [pid 34597:tid 34623] [client 54.38.38.130:37856] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "accGD4luI7-e5s1cafcTWQAAAVY"]
[Sat Mar 28 06:34:57.251620 2026] [:error] [pid 64861:tid 64937] [client 54.38.38.130:37864] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "accGEexK22_lUN2kvnVNfQAAAII"]
[Sat Mar 28 06:34:58.710788 2026] [:error] [pid 43578:tid 43591] [client 54.38.38.130:37868] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGEnNG2YdGm41aN8LXJAAAAko"]
[Sat Mar 28 06:35:02.578177 2026] [:error] [pid 2877:tid 2895] [client 54.38.38.130:37872] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGFrgM4xL1Xj409YTY0wAAARA"]
[Sat Mar 28 06:36:28.892729 2026] [:error] [pid 64861:tid 64946] [client 54.38.38.130:36792] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "accGbOxK22_lUN2kvnVOGAAAAIs"]
[Sat Mar 28 06:36:30.766284 2026] [:error] [pid 34597:tid 34623] [client 54.38.38.130:40746] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "accGboluI7-e5s1cafcTvgAAAVY"]
[Sat Mar 28 06:36:32.849343 2026] [:error] [pid 64861:tid 64946] [client 54.38.38.130:40758] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "accGcOxK22_lUN2kvnVOJQAAAIs"]
[Sat Mar 28 06:36:34.885917 2026] [:error] [pid 64861:tid 64953] [client 54.38.38.130:40768] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "accGcuxK22_lUN2kvnVOKgAAAJI"]
[Sat Mar 28 06:36:36.943926 2026] [:error] [pid 64859:tid 64884] [client 54.38.38.130:50482] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "accGdG3qEBHXq3rHdBmm9QAAAAM"]
[Sat Mar 28 06:36:38.902332 2026] [:error] [pid 43578:tid 43600] [client 54.38.38.130:50498] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "accGdnNG2YdGm41aN8LXbAAAAlM"]
[Sat Mar 28 06:36:40.845362 2026] [:error] [pid 34597:tid 34613] [client 54.38.38.130:50500] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "accGeIluI7-e5s1cafcTywAAAUw"]
[Sat Mar 28 06:36:42.893880 2026] [:error] [pid 64859:tid 64892] [client 54.38.38.130:50512] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "accGem3qEBHXq3rHdBmm-wAAAAs"]
[Sat Mar 28 06:36:44.885142 2026] [:error] [pid 64859:tid 64888] [client 54.38.38.130:50524] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "accGfG3qEBHXq3rHdBmnAgAAAAc"]
[Sat Mar 28 06:36:46.952678 2026] [:error] [pid 64861:tid 64943] [client 54.38.38.130:45938] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "accGfuxK22_lUN2kvnVOQwAAAIg"]
[Sat Mar 28 06:36:49.051654 2026] [:error] [pid 64861:tid 64952] [client 54.38.38.130:45940] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "accGgexK22_lUN2kvnVOUwAAAJE"]
[Sat Mar 28 06:36:49.295907 2026] [:error] [pid 64861:tid 64940] [client 54.38.38.130:45948] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGgexK22_lUN2kvnVOVwAAAIU"]
[Sat Mar 28 06:36:50.864305 2026] [:error] [pid 64861:tid 64949] [client 54.38.38.130:45954] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "accGguxK22_lUN2kvnVOXgAAAI4"]
[Sat Mar 28 06:36:52.886052 2026] [:error] [pid 64860:tid 64931] [client 54.38.38.130:45956] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "accGhBkU3N0pg_4aEL-6awAAAFc"]
[Sat Mar 28 06:36:53.051993 2026] [:error] [pid 64859:tid 64883] [client 54.38.38.130:45958] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGhW3qEBHXq3rHdBmnCAAAAAI"]
[Sat Mar 28 06:36:54.831925 2026] [:error] [pid 43578:tid 43600] [client 54.38.38.130:45970] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "accGhnNG2YdGm41aN8LXdwAAAlM"]
[Sat Mar 28 06:36:56.588225 2026] [:error] [pid 43578:tid 43593] [client 54.38.38.130:60500] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "accGiHNG2YdGm41aN8LXfAAAAkw"]
[Sat Mar 28 06:36:58.612264 2026] [:error] [pid 2877:tid 2883] [client 54.38.38.130:60512] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "accGirgM4xL1Xj409YTZAAAAAQQ"]
[Sat Mar 28 06:37:00.465125 2026] [:error] [pid 43578:tid 43581] [client 54.38.38.130:60514] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "accGjHNG2YdGm41aN8LXhgAAAkA"]
[Sat Mar 28 06:37:01.626811 2026] [:error] [pid 64860:tid 64920] [client 54.38.38.130:60518] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGjRkU3N0pg_4aEL-6eAAAAEw"]
[Sat Mar 28 06:37:05.523280 2026] [:error] [pid 64861:tid 64937] [client 54.38.38.130:40278] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGkexK22_lUN2kvnVOdgAAAII"]
[Sat Mar 28 06:37:07.478362 2026] [:error] [pid 64860:tid 64924] [client 54.38.38.130:40286] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGkxkU3N0pg_4aEL-6jgAAAFA"]
[Sat Mar 28 06:37:11.292623 2026] [:error] [pid 64861:tid 64953] [client 54.38.38.130:40298] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "accGl-xK22_lUN2kvnVOfQAAAJI"]
[Sat Mar 28 09:25:46.165665 2026] [:error] [pid 34597:tid 34612] [client 2.58.56.116:53028] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "accuGoluI7-e5s1cafc6kAAAAUs"]
[Sat Mar 28 09:25:46.663264 2026] [:error] [pid 64859:tid 64895] [client 2.58.56.116:53287] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "accuGm3qEBHXq3rHdBm40AAAAA4"]
[Sat Mar 28 09:25:47.208826 2026] [:error] [pid 34631:tid 34673] [client 2.58.56.116:53542] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "accuGztzjMMS6kojpeRTsQAAAc0"]
[Sat Mar 28 09:25:47.711871 2026] [:error] [pid 43578:tid 43596] [client 2.58.56.116:54145] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "accuG3NG2YdGm41aN8LxHAAAAk8"]
[Sat Mar 28 09:25:48.212114 2026] [:error] [pid 64860:tid 64924] [client 2.58.56.116:54872] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "accuHBkU3N0pg_4aEL8UfAAAAFA"]
[Sat Mar 28 11:02:30.833911 2026] [:error] [pid 43578:tid 43582] [client 51.77.43.170:34020] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "acdExnNG2YdGm41aN8IjOQAAAkE"]
[Sat Mar 28 11:02:31.672353 2026] [:error] [pid 43578:tid 43605] [client 51.77.43.170:47948] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "acdEx3NG2YdGm41aN8IjPQAAAlg"]
[Sat Mar 28 11:02:33.328545 2026] [:error] [pid 34631:tid 34665] [client 51.77.43.170:47952] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "acdEyTtzjMMS6kojpeR5YAAAAcU"]
[Sat Mar 28 11:02:34.074355 2026] [:error] [pid 43547:tid 43557] [client 51.77.43.170:47968] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20original.aspx"] [unique_id "acdEyj4ZEfdetXP-9aDHEQAAAgg"]
[Sat Mar 28 11:02:35.912064 2026] [:error] [pid 43578:tid 43586] [client 51.77.43.170:47980] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acdEy3NG2YdGm41aN8IjRAAAAkU"]
[Sat Mar 28 11:02:37.005153 2026] [:error] [pid 43579:tid 43626] [client 51.77.43.170:57616] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20slot.aspx"] [unique_id "acdEzSRqN4JVI8gB7Amz8QAAApI"]
[Sat Mar 28 11:02:38.119228 2026] [:error] [pid 64861:tid 64943] [client 51.77.43.170:57622] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "acdEzuxK22_lUN2kvnWn4AAAAIg"]
[Sat Mar 28 11:02:39.667614 2026] [:error] [pid 43578:tid 43601] [client 51.77.43.170:57632] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acdEz3NG2YdGm41aN8IjUQAAAlQ"]
[Sat Mar 28 11:02:40.442934 2026] [:error] [pid 34597:tid 34601] [client 51.77.43.170:57638] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "acdE0IluI7-e5s1cafdLtgAAAUA"]
[Sat Mar 28 11:02:41.804035 2026] [:error] [pid 2877:tid 2896] [client 51.77.43.170:57640] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20auto.aspx"] [unique_id "acdE0bgM4xL1Xj409YTs0wAAARE"]
[Sat Mar 28 11:02:42.477419 2026] [:error] [pid 34597:tid 34611] [client 51.77.43.170:57642] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "acdE0oluI7-e5s1cafdLugAAAUo"]
[Sat Mar 28 11:02:43.917046 2026] [:error] [pid 34597:tid 34608] [client 51.77.43.170:57650] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "acdE04luI7-e5s1cafdLuwAAAUc"]
[Sat Mar 28 11:02:44.632751 2026] [:error] [pid 43578:tid 43600] [client 51.77.43.170:57664] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acdE1HNG2YdGm41aN8IjYgAAAlM"]
[Sat Mar 28 11:02:45.988891 2026] [:error] [pid 43579:tid 43626] [client 51.77.43.170:57672] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "acdE1SRqN4JVI8gB7Amz-QAAApI"]
[Sat Mar 28 11:02:46.907246 2026] [:error] [pid 43578:tid 43585] [client 51.77.43.170:59924] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "acdE1nNG2YdGm41aN8IjaQAAAkQ"]
[Sat Mar 28 11:02:47.965119 2026] [:error] [pid 64860:tid 64916] [client 51.77.43.170:59928] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acdE1xkU3N0pg_4aEL8xQwAAAEg"]
[Sat Mar 28 11:02:49.773293 2026] [:error] [pid 64860:tid 64922] [client 51.77.43.170:59938] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acdE2RkU3N0pg_4aEL8xRwAAAE4"]
[Sat Mar 28 11:02:50.465585 2026] [:error] [pid 64860:tid 64910] [client 51.77.43.170:59946] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "acdE2hkU3N0pg_4aEL8xSgAAAEI"]
[Sat Mar 28 11:02:52.704798 2026] [:error] [pid 64966:tid 64982] [client 51.77.43.170:59962] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "acdE3NfSvF5AFfSuKxUI0QAAAMk"]
[Sat Mar 28 11:02:53.062648 2026] [:error] [pid 64860:tid 64930] [client 51.77.43.170:59968] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "acdE3RkU3N0pg_4aEL8xWQAAAFY"]
[Sat Mar 28 11:02:54.841862 2026] [:error] [pid 43578:tid 43598] [client 51.77.43.170:59984] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "acdE3nNG2YdGm41aN8IjcAAAAlE"]
[Sat Mar 28 11:02:55.383456 2026] [:error] [pid 64860:tid 64928] [client 51.77.43.170:59994] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "acdE3xkU3N0pg_4aEL8xXQAAAFQ"]
[Sat Mar 28 11:02:56.888186 2026] [:error] [pid 43578:tid 43593] [client 51.77.43.170:40788] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "acdE4HNG2YdGm41aN8IjeQAAAkw"]
[Sat Mar 28 11:02:57.489457 2026] [:error] [pid 64966:tid 64993] [client 51.77.43.170:40794] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acdE4dfSvF5AFfSuKxUI0wAAANQ"]
[Sat Mar 28 11:02:58.789546 2026] [:error] [pid 34631:tid 34674] [client 51.77.43.170:40802] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acdE4jtzjMMS6kojpeR5dgAAAc4"]
[Sat Mar 28 11:02:59.352228 2026] [:error] [pid 43578:tid 43589] [client 51.77.43.170:40804] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "acdE43NG2YdGm41aN8IjfgAAAkg"]
[Sat Mar 28 11:03:01.185921 2026] [:error] [pid 64859:tid 64899] [client 51.77.43.170:40816] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "acdE5W3qEBHXq3rHdBnENwAAABI"]
[Sat Mar 28 11:03:01.494775 2026] [:error] [pid 43578:tid 43586] [client 51.77.43.170:40824] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acdE5XNG2YdGm41aN8IjhwAAAkU"]
[Sat Mar 28 11:03:03.202700 2026] [:error] [pid 34631:tid 34680] [client 51.77.43.170:40840] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "acdE5ztzjMMS6kojpeR5fQAAAdQ"]
[Sat Mar 28 11:03:03.557147 2026] [:error] [pid 43578:tid 43593] [client 51.77.43.170:40856] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "acdE53NG2YdGm41aN8IjjQAAAkw"]
[Sat Mar 28 11:03:05.520587 2026] [:error] [pid 43578:tid 43596] [client 51.77.43.170:40872] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acdE6XNG2YdGm41aN8IjjwAAAk8"]
[Sat Mar 28 11:03:05.761516 2026] [:error] [pid 34631:tid 34662] [client 51.77.43.170:40882] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "acdE6TtzjMMS6kojpeR5iQAAAcI"]
[Sat Mar 28 11:03:07.652895 2026] [:error] [pid 64966:tid 64987] [client 51.77.43.170:52084] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "acdE69fSvF5AFfSuKxUI1AAAAM4"]
[Sat Mar 28 11:03:07.978733 2026] [:error] [pid 64860:tid 64916] [client 51.77.43.170:52098] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acdE6xkU3N0pg_4aEL8xYAAAAEg"]
[Sat Mar 28 11:03:09.722645 2026] [:error] [pid 34597:tid 34605] [client 51.77.43.170:52104] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acdE7YluI7-e5s1cafdLxAAAAUQ"]
[Sat Mar 28 11:03:10.159332 2026] [:error] [pid 64860:tid 64908] [client 51.77.43.170:52120] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "acdE7hkU3N0pg_4aEL8xaAAAAEA"]
[Sat Mar 28 11:03:11.740276 2026] [:error] [pid 43578:tid 43602] [client 51.77.43.170:52128] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "acdE73NG2YdGm41aN8IjmAAAAlU"]
[Sat Mar 28 11:03:12.561520 2026] [:error] [pid 2877:tid 2901] [client 51.77.43.170:52130] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acdE8LgM4xL1Xj409YTs2AAAARY"]
[Sat Mar 28 11:03:13.243634 2026] [:error] [pid 34631:tid 34674] [client 51.77.43.170:52140] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdE8TtzjMMS6kojpeR5kgAAAc4"]
[Sat Mar 28 11:03:13.920544 2026] [:error] [pid 43578:tid 43597] [client 51.77.43.170:52144] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "acdE8XNG2YdGm41aN8IjmwAAAlA"]
[Sat Mar 28 11:03:15.869352 2026] [:error] [pid 34597:tid 34615] [client 51.77.43.170:52154] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acdE84luI7-e5s1cafdLzQAAAU4"]
[Sat Mar 28 11:03:15.904680 2026] [:error] [pid 43578:tid 43596] [client 51.77.43.170:52168] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acdE83NG2YdGm41aN8IjoQAAAk8"]
[Sat Mar 28 11:03:17.150222 2026] [:error] [pid 43578:tid 43605] [client 51.77.43.170:53214] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdE9XNG2YdGm41aN8IjpAAAAlg"]
[Sat Mar 28 11:03:17.880492 2026] [:error] [pid 64859:tid 64905] [client 51.77.43.170:53222] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acdE9W3qEBHXq3rHdBnEOwAAABg"]
[Sat Mar 28 11:03:18.835517 2026] [:error] [pid 43547:tid 43565] [client 51.77.43.170:53236] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acdE9j4ZEfdetXP-9aDHHAAAAhA"]
[Sat Mar 28 11:03:19.961446 2026] [:error] [pid 43578:tid 43601] [client 51.77.43.170:53252] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "acdE93NG2YdGm41aN8IjqQAAAlQ"]
[Sat Mar 28 11:03:22.239471 2026] [:error] [pid 64861:tid 64941] [client 51.77.43.170:53264] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acdE-uxK22_lUN2kvnWn-QAAAIY"]
[Sat Mar 28 11:03:22.359993 2026] [:error] [pid 64966:tid 64983] [client 51.77.43.170:53276] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acdE-tfSvF5AFfSuKxUI2AAAAMo"]
[Sat Mar 28 11:03:24.514721 2026] [:error] [pid 34597:tid 34618] [client 51.77.43.170:53290] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acdE_IluI7-e5s1cafdL1QAAAVE"]
[Sat Mar 28 11:03:26.870986 2026] [:error] [pid 64861:tid 64937] [client 51.77.43.170:50656] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acdE_uxK22_lUN2kvnWn_wAAAII"]
[Sat Mar 28 11:03:39.529598 2026] [:error] [pid 34631:tid 34680] [client 51.77.43.170:50666] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acdFCztzjMMS6kojpeR5wAAAAdQ"]
[Sat Mar 28 11:03:40.609518 2026] [:error] [pid 43578:tid 43581] [client 51.77.43.170:50662] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acdFDHNG2YdGm41aN8Ij8AAAAkA"]
[Sat Mar 28 11:03:41.548990 2026] [:error] [pid 43579:tid 43630] [client 51.77.43.170:33930] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acdFDSRqN4JVI8gB7Am0GAAAApY"]
[Sat Mar 28 11:03:43.040467 2026] [:error] [pid 34631:tid 34671] [client 51.77.43.170:33938] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acdFDztzjMMS6kojpeR5wgAAAcs"]
[Sat Mar 28 11:03:43.691543 2026] [:error] [pid 43578:tid 43601] [client 51.77.43.170:33940] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acdFD3NG2YdGm41aN8Ij9gAAAlQ"]
[Sat Mar 28 11:03:45.201713 2026] [:error] [pid 43578:tid 43592] [client 51.77.43.170:33946] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acdFEXNG2YdGm41aN8Ij-QAAAks"]
[Sat Mar 28 11:03:45.707062 2026] [:error] [pid 43578:tid 43599] [client 51.77.43.170:33952] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acdFEXNG2YdGm41aN8Ij_QAAAlI"]
[Sat Mar 28 11:03:47.486667 2026] [:error] [pid 43578:tid 43596] [client 51.77.43.170:52318] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acdFE3NG2YdGm41aN8IkAAAAAk8"]
[Sat Mar 28 11:03:47.841212 2026] [:error] [pid 43578:tid 43595] [client 51.77.43.170:52322] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acdFE3NG2YdGm41aN8IkAQAAAk4"]
[Sat Mar 28 11:03:50.109119 2026] [:error] [pid 34631:tid 34661] [client 51.77.43.170:52330] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acdFFjtzjMMS6kojpeR52gAAAcE"]
[Sat Mar 28 11:03:50.445704 2026] [:error] [pid 34631:tid 34665] [client 51.77.43.170:52336] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFFjtzjMMS6kojpeR53QAAAcU"]
[Sat Mar 28 11:03:50.873043 2026] [:error] [pid 43578:tid 43591] [client 51.77.43.170:52342] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acdFFnNG2YdGm41aN8IkHQAAAko"]
[Sat Mar 28 11:03:52.080899 2026] [:error] [pid 34631:tid 34670] [client 51.77.43.170:52354] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acdFGDtzjMMS6kojpeR54gAAAco"]
[Sat Mar 28 11:03:53.621926 2026] [:error] [pid 34631:tid 34667] [client 51.77.43.170:52364] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acdFGTtzjMMS6kojpeR56QAAAcc"]
[Sat Mar 28 11:03:53.980793 2026] [:error] [pid 43578:tid 43605] [client 51.77.43.170:52366] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acdFGXNG2YdGm41aN8IkMgAAAlg"]
[Sat Mar 28 11:03:54.411121 2026] [:error] [pid 43579:tid 43626] [client 51.77.43.170:52370] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFGiRqN4JVI8gB7Am0GwAAApI"]
[Sat Mar 28 11:03:56.225712 2026] [:error] [pid 34597:tid 34622] [client 51.77.43.170:52376] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acdFHIluI7-e5s1cafdL5gAAAVU"]
[Sat Mar 28 11:03:56.288898 2026] [:error] [pid 34597:tid 34613] [client 51.77.43.170:52384] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acdFHIluI7-e5s1cafdL5wAAAUw"]
[Sat Mar 28 11:03:58.320783 2026] [:error] [pid 64861:tid 64948] [client 51.77.43.170:39062] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acdFHuxK22_lUN2kvnWoFwAAAI0"]
[Sat Mar 28 11:03:58.741398 2026] [:error] [pid 43578:tid 43598] [client 51.77.43.170:39074] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acdFHnNG2YdGm41aN8IkYAAAAlE"]
[Sat Mar 28 11:04:00.431807 2026] [:error] [pid 43578:tid 43601] [client 51.77.43.170:39084] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acdFIHNG2YdGm41aN8IkbQAAAlQ"]
[Sat Mar 28 11:04:01.020567 2026] [:error] [pid 34631:tid 34661] [client 51.77.43.170:39094] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acdFITtzjMMS6kojpeR59wAAAcE"]
[Sat Mar 28 11:04:02.710132 2026] [:error] [pid 34631:tid 34664] [client 51.77.43.170:39104] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acdFIjtzjMMS6kojpeR5_QAAAcQ"]
[Sat Mar 28 11:04:04.379984 2026] [:error] [pid 34597:tid 34621] [client 51.77.43.170:39118] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acdFJIluI7-e5s1cafdL6wAAAVQ"]
[Sat Mar 28 11:04:04.860419 2026] [:error] [pid 43578:tid 43589] [client 51.77.43.170:39124] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acdFJHNG2YdGm41aN8IkdwAAAkg"]
[Sat Mar 28 11:04:07.060016 2026] [:error] [pid 64860:tid 64921] [client 51.77.43.170:34754] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acdFJxkU3N0pg_4aEL8x4AAAAE0"]
[Sat Mar 28 11:04:07.885293 2026] [:error] [pid 64861:tid 64943] [client 51.77.43.170:34756] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%2099.aspx"] [unique_id "acdFJ-xK22_lUN2kvnWoIgAAAIg"]
[Sat Mar 28 11:04:09.077546 2026] [:error] [pid 64859:tid 64889] [client 51.77.43.170:34762] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acdFKW3qEBHXq3rHdBnEVAAAAAg"]
[Sat Mar 28 11:04:10.519668 2026] [:error] [pid 43578:tid 43597] [client 51.77.43.170:34772] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20auto.aspx"] [unique_id "acdFKnNG2YdGm41aN8IkfQAAAlA"]
[Sat Mar 28 11:04:11.283819 2026] [:error] [pid 43578:tid 43593] [client 51.77.43.170:34778] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acdFK3NG2YdGm41aN8IkfgAAAkw"]
[Sat Mar 28 11:04:12.991629 2026] [:error] [pid 64861:tid 64941] [client 51.77.43.170:34790] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20demo.aspx"] [unique_id "acdFLOxK22_lUN2kvnWoTwAAAIY"]
[Sat Mar 28 11:04:13.570223 2026] [:error] [pid 43578:tid 43603] [client 51.77.43.170:34802] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acdFLXNG2YdGm41aN8IkhAAAAlY"]
[Sat Mar 28 11:04:15.622189 2026] [:error] [pid 43578:tid 43597] [client 51.77.43.170:34812] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20free.aspx"] [unique_id "acdFL3NG2YdGm41aN8IkiwAAAlA"]
[Sat Mar 28 11:04:15.811998 2026] [:error] [pid 64860:tid 64911] [client 51.77.43.170:34828] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acdFLxkU3N0pg_4aEL8x-AAAAEM"]
[Sat Mar 28 11:04:18.287486 2026] [:error] [pid 43578:tid 43596] [client 51.77.43.170:47082] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acdFMnNG2YdGm41aN8IkjwAAAk8"]
[Sat Mar 28 11:04:18.745285 2026] [:error] [pid 43547:tid 43551] [client 51.77.43.170:47086] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20online.aspx"] [unique_id "acdFMj4ZEfdetXP-9aDHQQAAAgI"]
[Sat Mar 28 11:04:20.406222 2026] [:error] [pid 34597:tid 34609] [client 51.77.43.170:47096] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acdFNIluI7-e5s1cafdMAgAAAUg"]
[Sat Mar 28 11:04:20.783826 2026] [:error] [pid 43578:tid 43596] [client 51.77.43.170:47098] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acdFNHNG2YdGm41aN8IknAAAAk8"]
[Sat Mar 28 11:04:22.644952 2026] [:error] [pid 34631:tid 34665] [client 51.77.43.170:47112] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acdFNjtzjMMS6kojpeR6FQAAAcU"]
[Sat Mar 28 11:04:22.738912 2026] [:error] [pid 34631:tid 34683] [client 51.77.43.170:47124] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acdFNjtzjMMS6kojpeR6FwAAAdc"]
[Sat Mar 28 11:04:24.620674 2026] [:error] [pid 64861:tid 64938] [client 51.77.43.170:47136] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acdFOOxK22_lUN2kvnWoagAAAIM"]
[Sat Mar 28 11:04:25.485578 2026] [:error] [pid 34631:tid 34662] [client 51.77.43.170:47142] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acdFOTtzjMMS6kojpeR6JAAAAcI"]
[Sat Mar 28 11:04:26.877215 2026] [:error] [pid 64859:tid 64892] [client 51.77.43.170:39094] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acdFOm3qEBHXq3rHdBnEWgAAAAs"]
[Sat Mar 28 11:04:28.400251 2026] [:error] [pid 43578:tid 43603] [client 51.77.43.170:39098] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acdFPHNG2YdGm41aN8IkqwAAAlY"]
[Sat Mar 28 11:04:29.105903 2026] [:error] [pid 64860:tid 64928] [client 51.77.43.170:39108] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acdFPRkU3N0pg_4aEL8yCQAAAFQ"]
[Sat Mar 28 11:04:31.122664 2026] [:error] [pid 43578:tid 43592] [client 51.77.43.170:39122] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acdFP3NG2YdGm41aN8IktgAAAks"]
[Sat Mar 28 11:04:31.314337 2026] [:error] [pid 43578:tid 43605] [client 51.77.43.170:39138] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acdFP3NG2YdGm41aN8IkuAAAAlg"]
[Sat Mar 28 11:04:33.133955 2026] [:error] [pid 64859:tid 64900] [client 51.77.43.170:39148] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acdFQW3qEBHXq3rHdBnEXAAAABM"]
[Sat Mar 28 11:04:33.874210 2026] [:error] [pid 64861:tid 64950] [client 51.77.43.170:39152] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acdFQexK22_lUN2kvnWobgAAAI8"]
[Sat Mar 28 11:04:34.295973 2026] [:error] [pid 34597:tid 34614] [client 51.77.43.170:39162] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFQoluI7-e5s1cafdMCAAAAU0"]
[Sat Mar 28 11:04:36.398586 2026] [:error] [pid 34631:tid 34663] [client 51.77.43.170:39174] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acdFRDtzjMMS6kojpeR6NAAAAcM"]
[Sat Mar 28 11:04:50.278534 2026] [:error] [pid 34631:tid 34678] [client 51.77.43.170:32854] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20slot.aspx"] [unique_id "acdFUjtzjMMS6kojpeR6TAAAAdI"]
[Sat Mar 28 11:04:50.997848 2026] [:error] [pid 34631:tid 34674] [client 51.77.43.170:48014] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "acdFUjtzjMMS6kojpeR6TQAAAc4"]
[Sat Mar 28 11:04:52.643414 2026] [:error] [pid 43547:tid 43564] [client 51.77.43.170:32870] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/1234%20superslot.aspx"] [unique_id "acdFVD4ZEfdetXP-9aDHVQAAAg8"]
[Sat Mar 28 11:04:53.018117 2026] [:error] [pid 43547:tid 43570] [client 51.77.43.170:32872] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acdFVT4ZEfdetXP-9aDHVwAAAhU"]
[Sat Mar 28 11:04:55.293722 2026] [:error] [pid 64860:tid 64917] [client 51.77.43.170:32888] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "acdFVxkU3N0pg_4aEL8yKgAAAEk"]
[Sat Mar 28 11:04:57.246775 2026] [:error] [pid 64860:tid 64920] [client 51.77.43.170:41062] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/168%20slot.aspx"] [unique_id "acdFWRkU3N0pg_4aEL8yLQAAAEw"]
[Sat Mar 28 11:04:58.323151 2026] [:error] [pid 64861:tid 64957] [client 51.77.43.170:41068] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "acdFWuxK22_lUN2kvnWohAAAAJY"]
[Sat Mar 28 11:05:00.220171 2026] [:error] [pid 43578:tid 43587] [client 51.77.43.170:41080] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "acdFXHNG2YdGm41aN8Ik1wAAAkY"]
[Sat Mar 28 11:05:00.804757 2026] [:error] [pid 64861:tid 64938] [client 51.77.43.170:41094] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/24th%20slot.aspx"] [unique_id "acdFXOxK22_lUN2kvnWoiQAAAIM"]
[Sat Mar 28 11:05:02.319069 2026] [:error] [pid 43547:tid 43558] [client 51.77.43.170:41096] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acdFXj4ZEfdetXP-9aDHXAAAAgk"]
[Sat Mar 28 11:05:04.482880 2026] [:error] [pid 64861:tid 64943] [client 51.77.43.170:41102] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "acdFYOxK22_lUN2kvnWokQAAAIg"]
[Sat Mar 28 11:05:04.567624 2026] [:error] [pid 64861:tid 64954] [client 51.77.43.170:41108] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/2xl%20slot.aspx"] [unique_id "acdFYOxK22_lUN2kvnWokgAAAJM"]
[Sat Mar 28 11:05:06.813000 2026] [:error] [pid 64861:tid 64951] [client 51.77.43.170:36762] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "acdFYuxK22_lUN2kvnWolgAAAJA"]
[Sat Mar 28 11:05:08.116158 2026] [:error] [pid 64966:tid 64992] [client 51.77.43.170:36764] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/789%20slot.aspx"] [unique_id "acdFZNfSvF5AFfSuKxUI9wAAANM"]
[Sat Mar 28 11:05:08.906609 2026] [:error] [pid 43547:tid 43555] [client 51.77.43.170:36772] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "acdFZD4ZEfdetXP-9aDHYQAAAgY"]
[Sat Mar 28 11:05:10.848986 2026] [:error] [pid 64860:tid 64922] [client 51.77.43.170:36778] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/888%20slot.aspx"] [unique_id "acdFZhkU3N0pg_4aEL8yNwAAAE4"]
[Sat Mar 28 11:05:11.274032 2026] [:error] [pid 34631:tid 34677] [client 51.77.43.170:36788] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "acdFZztzjMMS6kojpeR6YwAAAdE"]
[Sat Mar 28 11:05:13.260699 2026] [:error] [pid 64966:tid 64976] [client 51.77.43.170:36800] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "acdFadfSvF5AFfSuKxUI-QAAAMM"]
[Sat Mar 28 11:05:13.486739 2026] [:error] [pid 43547:tid 43566] [client 51.77.43.170:36814] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/all%20slot.aspx"] [unique_id "acdFaT4ZEfdetXP-9aDHZwAAAhE"]
[Sat Mar 28 11:05:15.286838 2026] [:error] [pid 64860:tid 64910] [client 51.77.43.170:36818] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acdFaxkU3N0pg_4aEL8yPAAAAEI"]
[Sat Mar 28 11:05:16.795741 2026] [:error] [pid 64860:tid 64922] [client 51.77.43.170:51488] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/allslot%20wallet.aspx"] [unique_id "acdFbBkU3N0pg_4aEL8yQQAAAE4"]
[Sat Mar 28 11:05:17.762886 2026] [:error] [pid 64966:tid 64978] [client 51.77.43.170:51490] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "acdFbdfSvF5AFfSuKxUI_AAAAMU"]
[Sat Mar 28 11:05:19.853154 2026] [:error] [pid 64966:tid 64993] [client 51.77.43.170:51498] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acdFb9fSvF5AFfSuKxUI_wAAANQ"]
[Sat Mar 28 11:05:20.864448 2026] [:error] [pid 34631:tid 34675] [client 51.77.43.170:51512] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20casino.aspx"] [unique_id "acdFcDtzjMMS6kojpeR6aQAAAc8"]
[Sat Mar 28 11:05:22.075073 2026] [:error] [pid 34631:tid 34669] [client 51.77.43.170:51528] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acdFcjtzjMMS6kojpeR6bQAAAck"]
[Sat Mar 28 11:05:24.139163 2026] [:error] [pid 64860:tid 64920] [client 51.77.43.170:51538] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acdFdBkU3N0pg_4aEL8yTgAAAEw"]
[Sat Mar 28 11:05:25.851439 2026] [:error] [pid 34631:tid 34682] [client 51.77.43.170:51540] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20co.aspx"] [unique_id "acdFdTtzjMMS6kojpeR6cQAAAdY"]
[Sat Mar 28 11:05:26.121290 2026] [:error] [pid 64860:tid 64917] [client 51.77.43.170:51546] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acdFdhkU3N0pg_4aEL8yVAAAAEk"]
[Sat Mar 28 11:05:28.198361 2026] [:error] [pid 43578:tid 43593] [client 51.77.43.170:60502] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "acdFeHNG2YdGm41aN8IlCgAAAkw"]
[Sat Mar 28 11:05:28.816801 2026] [:error] [pid 43578:tid 43583] [client 51.77.43.170:60516] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflik%20dc.aspx"] [unique_id "acdFeHNG2YdGm41aN8IlDwAAAkI"]
[Sat Mar 28 11:05:30.100673 2026] [:error] [pid 34631:tid 34671] [client 51.77.43.170:60526] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acdFejtzjMMS6kojpeR6fQAAAcs"]
[Sat Mar 28 11:05:31.139837 2026] [:error] [pid 43578:tid 43603] [client 51.77.43.170:60536] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20casino.aspx"] [unique_id "acdFe3NG2YdGm41aN8IlGwAAAlY"]
[Sat Mar 28 11:05:32.097833 2026] [:error] [pid 43578:tid 43584] [client 51.77.43.170:60542] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "acdFfHNG2YdGm41aN8IlIgAAAkM"]
[Sat Mar 28 11:05:33.929683 2026] [:error] [pid 64861:tid 64940] [client 51.77.43.170:60558] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/betflix%20slot.aspx"] [unique_id "acdFfexK22_lUN2kvnWopwAAAIU"]
[Sat Mar 28 11:05:34.095265 2026] [:error] [pid 64861:tid 64949] [client 51.77.43.170:60566] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acdFfuxK22_lUN2kvnWoqAAAAI4"]
[Sat Mar 28 11:05:36.204644 2026] [:error] [pid 64966:tid 64982] [client 51.77.43.170:60578] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acdFgNfSvF5AFfSuKxUJBwAAAMk"]
[Sat Mar 28 11:05:36.800414 2026] [:error] [pid 34631:tid 34669] [client 51.77.43.170:52864] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "acdFgDtzjMMS6kojpeR6ggAAAck"]
[Sat Mar 28 11:05:38.222120 2026] [:error] [pid 43547:tid 43567] [client 51.77.43.170:52880] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acdFgj4ZEfdetXP-9aDHeAAAAhI"]
[Sat Mar 28 11:05:38.759191 2026] [:error] [pid 64861:tid 64953] [client 51.77.43.170:52882] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "acdFguxK22_lUN2kvnWorgAAAJI"]
[Sat Mar 28 11:05:40.148642 2026] [:error] [pid 43579:tid 43618] [client 51.77.43.170:52888] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acdFhCRqN4JVI8gB7Am0PgAAAoo"]
[Sat Mar 28 11:05:41.257769 2026] [:error] [pid 64859:tid 64897] [client 51.77.43.170:52890] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acdFhW3qEBHXq3rHdBnEfgAAABA"]
[Sat Mar 28 11:05:42.103121 2026] [:error] [pid 43579:tid 43628] [client 51.77.43.170:52896] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "acdFhiRqN4JVI8gB7Am0QAAAApQ"]
[Sat Mar 28 11:05:44.104893 2026] [:error] [pid 64859:tid 64894] [client 51.77.43.170:52902] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "acdFiG3qEBHXq3rHdBnEgQAAAA0"]
[Sat Mar 28 11:05:44.543108 2026] [:error] [pid 64859:tid 64884] [client 51.77.43.170:52912] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "acdFiG3qEBHXq3rHdBnEggAAAAM"]
[Sat Mar 28 11:05:46.169658 2026] [:error] [pid 34631:tid 34681] [client 51.77.43.170:52914] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acdFijtzjMMS6kojpeR6lwAAAdU"]
[Sat Mar 28 11:05:47.153012 2026] [:error] [pid 34597:tid 34617] [client 51.77.43.170:57768] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/g2g%20slot.aspx"] [unique_id "acdFi4luI7-e5s1cafdMJwAAAVA"]
[Sat Mar 28 11:05:58.878753 2026] [:error] [pid 64860:tid 64916] [client 51.77.43.170:57780] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acdFlhkU3N0pg_4aEL8yhQAAAEg"]
[Sat Mar 28 11:05:59.630576 2026] [:error] [pid 64859:tid 64889] [client 51.77.43.170:57792] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "acdFl23qEBHXq3rHdBnEiQAAAAg"]
[Sat Mar 28 11:06:01.062862 2026] [:error] [pid 2877:tid 2885] [client 51.77.43.170:57458] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acdFmbgM4xL1Xj409YTs9wAAAQY"]
[Sat Mar 28 11:06:02.070650 2026] [:error] [pid 34631:tid 34677] [client 51.77.43.170:57470] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acdFmjtzjMMS6kojpeR6qgAAAdE"]
[Sat Mar 28 11:06:02.980275 2026] [:error] [pid 34631:tid 34663] [client 51.77.43.170:57486] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acdFmjtzjMMS6kojpeR6rgAAAcM"]
[Sat Mar 28 11:06:04.081318 2026] [:error] [pid 64860:tid 64923] [client 51.77.43.170:57488] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/lava%20slot.aspx"] [unique_id "acdFnBkU3N0pg_4aEL8yhwAAAE8"]
[Sat Mar 28 11:06:05.417349 2026] [:error] [pid 34631:tid 34675] [client 51.77.43.170:57502] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acdFnTtzjMMS6kojpeR6tgAAAc8"]
[Sat Mar 28 11:06:06.272542 2026] [:error] [pid 34631:tid 34676] [client 51.77.43.170:57514] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFnjtzjMMS6kojpeR6uwAAAdA"]
[Sat Mar 28 11:06:06.339093 2026] [:error] [pid 34631:tid 34668] [client 51.77.43.170:57524] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/mega%20slot.aspx"] [unique_id "acdFnjtzjMMS6kojpeR6vAAAAcg"]
[Sat Mar 28 11:06:07.683221 2026] [:error] [pid 43578:tid 43602] [client 51.77.43.170:38786] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acdFn3NG2YdGm41aN8IlSwAAAlU"]
[Sat Mar 28 11:06:08.772106 2026] [:error] [pid 64861:tid 64947] [client 51.77.43.170:38790] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acdFoOxK22_lUN2kvnWozgAAAIw"]
[Sat Mar 28 11:06:09.645460 2026] [:error] [pid 64860:tid 64919] [client 51.77.43.170:38796] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acdFoRkU3N0pg_4aEL8yiQAAAEs"]
[Sat Mar 28 11:06:10.350954 2026] [:error] [pid 43579:tid 43612] [client 51.77.43.170:38800] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFoiRqN4JVI8gB7Am0VQAAAoQ"]
[Sat Mar 28 11:06:10.816056 2026] [:error] [pid 34631:tid 34680] [client 51.77.43.170:38814] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "acdFojtzjMMS6kojpeR6wQAAAdQ"]
[Sat Mar 28 11:06:11.665084 2026] [:error] [pid 64860:tid 64931] [client 51.77.43.170:38826] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acdFoxkU3N0pg_4aEL8yjAAAAFc"]
[Sat Mar 28 11:06:13.134808 2026] [:error] [pid 43579:tid 43627] [client 51.77.43.170:38834] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "acdFpSRqN4JVI8gB7Am0VgAAApM"]
[Sat Mar 28 11:06:13.628427 2026] [:error] [pid 43578:tid 43594] [client 51.77.43.170:38840] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acdFpXNG2YdGm41aN8IlWwAAAk0"]
[Sat Mar 28 11:06:15.381304 2026] [:error] [pid 43578:tid 43596] [client 51.77.43.170:38846] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acdFp3NG2YdGm41aN8IlYgAAAk8"]
[Sat Mar 28 11:06:15.693177 2026] [:error] [pid 64860:tid 64932] [client 51.77.43.170:38850] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acdFpxkU3N0pg_4aEL8yjwAAAFg"]
[Sat Mar 28 11:06:17.854408 2026] [:error] [pid 43578:tid 43591] [client 51.77.43.170:56674] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acdFqXNG2YdGm41aN8IlawAAAko"]
[Sat Mar 28 11:06:18.022347 2026] [:error] [pid 43578:tid 43598] [client 51.77.43.170:56680] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acdFqnNG2YdGm41aN8IlbAAAAlE"]
[Sat Mar 28 11:06:19.948488 2026] [:error] [pid 2877:tid 2903] [client 51.77.43.170:56688] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acdFq7gM4xL1Xj409YTs-wAAARg"]
[Sat Mar 28 11:06:19.999640 2026] [:error] [pid 34631:tid 34669] [client 51.77.43.170:56692] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "acdFqztzjMMS6kojpeR6ygAAAck"]
[Sat Mar 28 11:06:22.117755 2026] [:error] [pid 43579:tid 43624] [client 51.77.43.170:56700] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "acdFriRqN4JVI8gB7Am0WQAAApA"]
[Sat Mar 28 11:06:22.164161 2026] [:error] [pid 43579:tid 43610] [client 51.77.43.170:56706] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20vip.aspx"] [unique_id "acdFriRqN4JVI8gB7Am0WgAAAoI"]
[Sat Mar 28 11:06:24.104008 2026] [:error] [pid 43578:tid 43603] [client 51.77.43.170:56708] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acdFsHNG2YdGm41aN8IlfQAAAlY"]
[Sat Mar 28 11:06:24.665506 2026] [:error] [pid 34597:tid 34616] [client 51.77.43.170:56712] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acdFsIluI7-e5s1cafdMOQAAAU8"]
[Sat Mar 28 11:06:26.123119 2026] [:error] [pid 43578:tid 43582] [client 51.77.43.170:56720] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot%20wallet.aspx"] [unique_id "acdFsnNG2YdGm41aN8IliAAAAkE"]
[Sat Mar 28 11:06:26.813453 2026] [:error] [pid 43578:tid 43585] [client 51.77.43.170:48024] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acdFsnNG2YdGm41aN8IljQAAAkQ"]
[Sat Mar 28 11:06:28.055935 2026] [:error] [pid 64861:tid 64945] [client 51.77.43.170:48034] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acdFtOxK22_lUN2kvnWo2wAAAIo"]
[Sat Mar 28 11:06:28.848871 2026] [:error] [pid 64859:tid 64882] [client 51.77.43.170:48046] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acdFtG3qEBHXq3rHdBnEmAAAAAE"]
[Sat Mar 28 11:06:30.051867 2026] [:error] [pid 43578:tid 43586] [client 51.77.43.170:48052] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20168.aspx"] [unique_id "acdFtnNG2YdGm41aN8IllgAAAkU"]
[Sat Mar 28 11:06:31.037162 2026] [:error] [pid 43578:tid 43604] [client 51.77.43.170:48062] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acdFt3NG2YdGm41aN8IlmgAAAlc"]
[Sat Mar 28 11:06:32.181917 2026] [:error] [pid 43578:tid 43600] [client 51.77.43.170:48076] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acdFuHNG2YdGm41aN8IlngAAAlM"]
[Sat Mar 28 11:06:33.148622 2026] [:error] [pid 64859:tid 64889] [client 51.77.43.170:48088] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "acdFuW3qEBHXq3rHdBnEmgAAAAg"]
[Sat Mar 28 11:06:34.115894 2026] [:error] [pid 34597:tid 34625] [client 51.77.43.170:48098] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acdFuoluI7-e5s1cafdMPAAAAVg"]
[Sat Mar 28 11:06:35.393523 2026] [:error] [pid 43547:tid 43569] [client 51.77.43.170:48102] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acdFuz4ZEfdetXP-9aDHhQAAAhQ"]
[Sat Mar 28 11:06:36.120016 2026] [:error] [pid 43578:tid 43589] [client 51.77.43.170:48114] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acdFvHNG2YdGm41aN8IlrgAAAkg"]
[Sat Mar 28 11:06:38.144998 2026] [:error] [pid 64861:tid 64959] [client 51.77.43.170:36912] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acdFvuxK22_lUN2kvnWo5wAAAJg"]
[Sat Mar 28 11:06:38.347905 2026] [:error] [pid 64861:tid 64944] [client 51.77.43.170:36914] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches666%20pg.aspx"] [unique_id "acdFvuxK22_lUN2kvnWo6AAAAIk"]
[Sat Mar 28 11:06:40.142528 2026] [:error] [pid 34631:tid 34676] [client 51.77.43.170:36916] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acdFwDtzjMMS6kojpeR62gAAAdA"]
[Sat Mar 28 11:06:40.526115 2026] [:error] [pid 43578:tid 43595] [client 51.77.43.170:36932] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "acdFwHNG2YdGm41aN8Il0QAAAk4"]
[Sat Mar 28 11:06:42.419251 2026] [:error] [pid 43578:tid 43604] [client 51.77.43.170:36948] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "acdFwnNG2YdGm41aN8Il5AAAAlc"]
[Sat Mar 28 11:06:42.818213 2026] [:error] [pid 34631:tid 34668] [client 51.77.43.170:36958] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acdFwjtzjMMS6kojpeR63AAAAcg"]
[Sat Mar 28 11:06:43.854633 2026] [:error] [pid 43578:tid 43599] [client 51.77.43.170:36962] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFw3NG2YdGm41aN8Il7QAAAlI"]
[Sat Mar 28 11:06:44.579377 2026] [:error] [pid 34597:tid 34619] [client 51.77.43.170:36974] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "acdFxIluI7-e5s1cafdMUgAAAVI"]
[Sat Mar 28 11:06:45.326200 2026] [:error] [pid 34631:tid 34683] [client 51.77.43.170:36978] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20888.aspx"] [unique_id "acdFxTtzjMMS6kojpeR65AAAAdc"]
[Sat Mar 28 11:06:46.529723 2026] [:error] [pid 64859:tid 64896] [client 51.77.43.170:36984] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acdFxm3qEBHXq3rHdBnEogAAAA8"]
[Sat Mar 28 11:06:47.741137 2026] [:error] [pid 64860:tid 64925] [client 51.77.43.170:52860] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acdFxxkU3N0pg_4aEL8yowAAAFE"]
[Sat Mar 28 11:06:47.864181 2026] [:error] [pid 34631:tid 34674] [client 51.77.43.170:52870] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acdFxztzjMMS6kojpeR66AAAAc4"]
[Sat Mar 28 11:06:48.524387 2026] [:error] [pid 64861:tid 64957] [client 51.77.43.170:52880] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acdFyOxK22_lUN2kvnWo6wAAAJY"]
[Sat Mar 28 11:06:49.957922 2026] [:error] [pid 64861:tid 64954] [client 51.77.43.170:52888] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "acdFyexK22_lUN2kvnWo7gAAAJM"]
[Sat Mar 28 11:06:50.465700 2026] [:error] [pid 64860:tid 64927] [client 51.77.43.170:52898] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acdFyhkU3N0pg_4aEL8ypgAAAFM"]
[Sat Mar 28 11:06:52.362294 2026] [:error] [pid 64861:tid 64951] [client 51.77.43.170:52902] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acdFzOxK22_lUN2kvnWo8QAAAJA"]
[Sat Mar 28 11:06:52.446386 2026] [:error] [pid 34597:tid 34616] [client 51.77.43.170:52916] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acdFzIluI7-e5s1cafdMWgAAAU8"]
[Sat Mar 28 11:06:54.282512 2026] [:error] [pid 43547:tid 43570] [client 51.77.43.170:52928] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acdFzj4ZEfdetXP-9aDHhwAAAhU"]
[Sat Mar 28 11:06:54.393496 2026] [:error] [pid 64861:tid 64959] [client 51.77.43.170:52932] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acdFzuxK22_lUN2kvnWo9QAAAJg"]
[Sat Mar 28 11:06:56.585110 2026] [:error] [pid 43578:tid 43599] [client 51.77.43.170:52946] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "acdF0HNG2YdGm41aN8ImAAAAAlI"]
[Sat Mar 28 11:07:21.122232 2026] [:error] [pid 64966:tid 64984] [client 51.77.43.170:49492] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20slot.aspx"] [unique_id "acdF6dfSvF5AFfSuKxUJMAAAAMs"]
[Sat Mar 28 11:07:23.803425 2026] [:error] [pid 64861:tid 64946] [client 51.77.43.170:41458] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "acdF6-xK22_lUN2kvnWpLwAAAIs"]
[Sat Mar 28 11:07:27.534854 2026] [:error] [pid 34631:tid 34671] [client 51.77.43.170:50024] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acdF7ztzjMMS6kojpeR7OgAAAcs"]
[Sat Mar 28 11:07:31.696564 2026] [:error] [pid 34631:tid 34684] [client 51.77.43.170:50028] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufa%20wallet.aspx"] [unique_id "acdF8ztzjMMS6kojpeR7QwAAAdg"]
[Sat Mar 28 11:07:33.896576 2026] [:error] [pid 34631:tid 34661] [client 51.77.43.170:50032] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20100.aspx"] [unique_id "acdF9TtzjMMS6kojpeR7RgAAAcE"]
[Sat Mar 28 11:07:35.985368 2026] [:error] [pid 43578:tid 43591] [client 51.77.43.170:50040] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "acdF93NG2YdGm41aN8Im0wAAAko"]
[Sat Mar 28 11:07:40.044126 2026] [:error] [pid 64861:tid 64937] [client 51.77.43.170:53404] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acdF_OxK22_lUN2kvnWpPAAAAII"]
[Sat Mar 28 11:07:42.858177 2026] [:error] [pid 34597:tid 34602] [client 51.77.43.170:53414] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "acdF_oluI7-e5s1cafdMgAAAAUE"]
[Sat Mar 28 11:07:45.334170 2026] [:error] [pid 34631:tid 34664] [client 51.77.43.170:53426] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acdGATtzjMMS6kojpeR7WAAAAcQ"]
[Sat Mar 28 11:07:47.390358 2026] [:error] [pid 43578:tid 43584] [client 51.77.43.170:42082] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acdGA3NG2YdGm41aN8Im_gAAAkM"]
[Sat Mar 28 11:07:50.766801 2026] [:error] [pid 64861:tid 64947] [client 51.77.43.170:42086] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/wallet%20slot.aspx"] [unique_id "acdGBuxK22_lUN2kvnWpTgAAAIw"]
[Sat Mar 28 11:07:53.183161 2026] [:error] [pid 64860:tid 64915] [client 51.77.43.170:42096] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acdGCRkU3N0pg_4aEL8zFQAAAEc"]
[Sat Mar 28 11:07:55.870907 2026] [:error] [pid 43547:tid 43558] [client 51.77.43.170:42108] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acdGCz4ZEfdetXP-9aDHpAAAAgk"]
[Sat Mar 28 11:07:58.505466 2026] [:error] [pid 34597:tid 34605] [client 51.77.43.170:36618] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acdGDoluI7-e5s1cafdMnAAAAUQ"]
[Sat Mar 28 11:08:01.075277 2026] [:error] [pid 64860:tid 64912] [client 51.77.43.170:36630] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acdGERkU3N0pg_4aEL8zIwAAAEQ"]
[Sat Mar 28 11:21:16.852497 2026] [:error] [pid 64859:tid 64893] [client 43.159.144.16:47168] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acdJLG3qEBHXq3rHdBnGdAAAAAw"]
[Sat Mar 28 11:30:56.987042 2026] [:error] [pid 43579:tid 43631] [client 43.153.122.30:49564] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acdLcCRqN4JVI8gB7Am3VQAAApc"]
[Sat Mar 28 12:17:52.914473 2026] [:error] [pid 64861:tid 64949] [client 217.216.37.53:58392] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acdWcOxK22_lUN2kvnW4OgAAAI4"]
[Sat Mar 28 12:17:53.125984 2026] [:error] [pid 43547:tid 43551] [client 217.216.37.53:59911] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "acdWcT4ZEfdetXP-9aDOogAAAgI"]
[Sat Mar 28 12:17:53.342483 2026] [:error] [pid 43578:tid 43581] [client 217.216.37.53:57355] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "pumpbooking.com"] [uri "/media/system/js/core.js"] [unique_id "acdWcXNG2YdGm41aN8JLwQAAAkA"]
[Sat Mar 28 12:50:54.371719 2026] [:error] [pid 64859:tid 64884] [client 49.234.192.248:53578] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acdeLm3qEBHXq3rHdBnQzgAAAAM"]
[Sat Mar 28 13:35:46.270698 2026] [:error] [pid 34597:tid 34602] [client 103.134.133.185:61234] [client 103.134.133.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.134.133.185, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acdosoluI7-e5s1cafdl6AAAAUE"]
[Sat Mar 28 13:35:46.275991 2026] [:error] [pid 34597:tid 34602] [client 103.134.133.185:61234] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 17:13:35.351944 2026] [:error] [pid 43578:tid 43601] [client 95.91.110.210:27412] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "acebv3NG2YdGm41aN8K7iQAAAlQ"]
[Sat Mar 28 17:13:37.440922 2026] [:error] [pid 64859:tid 64894] [client 95.91.110.210:27428] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acebwW3qEBHXq3rHdBknpwAAAA0"]
[Sat Mar 28 17:13:39.393458 2026] [:error] [pid 43578:tid 43603] [client 95.91.110.210:23922] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "acebw3NG2YdGm41aN8K7kwAAAlY"]
[Sat Mar 28 17:13:41.397540 2026] [:error] [pid 43578:tid 43598] [client 95.91.110.210:23932] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "acebxXNG2YdGm41aN8K7nwAAAlE"]
[Sat Mar 28 17:13:43.649222 2026] [:error] [pid 43578:tid 43593] [client 95.91.110.210:23946] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "acebx3NG2YdGm41aN8K7qQAAAkw"]
[Sat Mar 28 17:13:45.642978 2026] [:error] [pid 64860:tid 64931] [client 95.91.110.210:23960] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "acebyRkU3N0pg_4aEL99ygAAAFc"]
[Sat Mar 28 17:13:47.592588 2026] [:error] [pid 64860:tid 64920] [client 95.91.110.210:23968] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "acebyxkU3N0pg_4aEL99zwAAAEw"]
[Sat Mar 28 17:13:49.624205 2026] [:error] [pid 34631:tid 34660] [client 95.91.110.210:48930] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acebzTtzjMMS6kojpeQBvAAAAcA"]
[Sat Mar 28 17:13:51.686266 2026] [:error] [pid 34631:tid 34678] [client 95.91.110.210:48938] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acebzztzjMMS6kojpeQBwwAAAdI"]
[Sat Mar 28 18:03:40.269711 2026] [:error] [pid 64860:tid 64922] [client 43.153.86.78:60088] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acenfBkU3N0pg_4aEL-FOAAAAE4"]
[Sat Mar 28 20:09:38.286959 2026] [:error] [pid 43547:tid 43550] [client 182.42.111.213:45648] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acfFAj4ZEfdetXP-9aD6mAAAAgE"]
[Sat Mar 28 21:03:30.846590 2026] [:error] [pid 43579:tid 43608] [client 45.169.255.178:60136] [client 45.169.255.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.169.255.178, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acfRoiRqN4JVI8gB7An4GQAAAoA"]
[Sat Mar 28 21:03:30.850823 2026] [:error] [pid 43579:tid 43608] [client 45.169.255.178:60136] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 23:36:41.325662 2026] [:error] [pid 34631:tid 34669] [client 45.94.31.49:57603] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acf1iTtzjMMS6kojpeSETgAAAck"]
[Sat Mar 28 23:36:41.957847 2026] [:error] [pid 64859:tid 64882] [client 45.94.31.49:53420] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acf1iW3qEBHXq3rHdBl4uwAAAAE"]
[Sat Mar 28 23:36:42.776023 2026] [:error] [pid 34597:tid 34613] [client 45.94.31.49:53430] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acf1ioluI7-e5s1cafe1AQAAAUw"]
[Sat Mar 28 23:36:43.393245 2026] [:error] [pid 43579:tid 43611] [client 45.94.31.49:61387] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acf1iyRqN4JVI8gB7AkMHQAAAoM"]
[Sat Mar 28 23:36:44.155292 2026] [:error] [pid 34631:tid 34663] [client 45.94.31.49:61404] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acf1jDtzjMMS6kojpeSEkAAAAcM"]
[Sat Mar 28 23:45:01.380270 2026] [:error] [pid 64861:tid 64947] [client 43.134.141.244:43870] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acf3fexK22_lUN2kvnW5BQAAAIw"]
[Sat Mar 28 23:53:10.332063 2026] [:error] [pid 64861:tid 64958] [client 43.128.149.102:42822] [client 43.128.149.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acf5ZuxK22_lUN2kvnW-BQAAAJc"]
[Sun Mar 29 00:04:44.818917 2026] [:error] [pid 64860:tid 64921] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sun Mar 29 00:04:45.027726 2026] [:error] [pid 64860:tid 64925] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Sun Mar 29 00:04:45.238315 2026] [:error] [pid 64860:tid 64927] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Mar 29 00:04:45.446912 2026] [:error] [pid 64860:tid 64908] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Mar 29 00:04:45.655924 2026] [:error] [pid 64860:tid 64920] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Mar 29 00:04:45.866014 2026] [:error] [pid 64860:tid 64932] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sun Mar 29 00:04:46.075837 2026] [:error] [pid 64860:tid 64917] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Sun Mar 29 00:04:46.286758 2026] [:error] [pid 64860:tid 64910] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Sun Mar 29 00:04:46.496733 2026] [:error] [pid 64860:tid 64911] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Sun Mar 29 00:04:46.706191 2026] [:error] [pid 64860:tid 64915] [client 20.151.113.137:22284] File does not exist: /usr/local/apache/htdocs/suspended-page/zcsu.php
[Sun Mar 29 00:04:46.912067 2026] [:error] [pid 64860:tid 64916] [client 20.151.113.137:22284] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acf8HhkU3N0pg_4aEL_C7AAAAEg"]
[Sun Mar 29 00:04:47.325011 2026] [:error] [pid 34631:tid 34667] [client 20.151.113.137:22290] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acf8HztzjMMS6kojpeSQPAAAAcc"]
[Sun Mar 29 00:04:47.736101 2026] [:error] [pid 43579:tid 43611] [client 20.151.113.137:22341] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acf8HyRqN4JVI8gB7AkQ5AAAAoM"]
[Sun Mar 29 00:04:48.150020 2026] [:error] [pid 43547:tid 43569] [client 20.151.113.137:22349] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/aa.php"] [unique_id "acf8ID4ZEfdetXP-9aAUmwAAAhQ"]
[Sun Mar 29 00:04:48.570634 2026] [:error] [pid 34631:tid 34682] [client 20.151.113.137:22393] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acf8IDtzjMMS6kojpeSQQAAAAdY"]
[Sun Mar 29 00:04:48.982862 2026] [:error] [pid 34631:tid 34666] [client 20.151.113.137:22375] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acf8IDtzjMMS6kojpeSQQgAAAcY"]
[Sun Mar 29 00:04:49.400529 2026] [:error] [pid 64860:tid 64925] [client 20.151.113.137:22359] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acf8IRkU3N0pg_4aEL_C7QAAAFE"]
[Sun Mar 29 00:04:49.831425 2026] [:error] [pid 43578:tid 43592] [client 20.151.113.137:22280] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-cxs.php"] [unique_id "acf8IXNG2YdGm41aN8JPpAAAAks"]
[Sun Mar 29 00:04:50.249607 2026] [:error] [pid 64861:tid 64950] [client 20.151.113.137:22389] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acf8IuxK22_lUN2kvnXEugAAAI8"]
[Sun Mar 29 00:04:50.677541 2026] [:error] [pid 34597:tid 34625] [client 20.151.113.137:22366] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acf8IoluI7-e5s1cafe57gAAAVg"]
[Sun Mar 29 00:04:51.098732 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22356] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acf8I3NG2YdGm41aN8JPpwAAAkQ"]
[Sun Mar 29 00:04:51.517133 2026] [:error] [pid 43578:tid 43600] [client 20.151.113.137:22292] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-scanner.php"] [unique_id "acf8I3NG2YdGm41aN8JPqQAAAlM"]
[Sun Mar 29 00:04:51.945869 2026] [:error] [pid 43578:tid 43598] [client 20.151.113.137:22215] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acf8I3NG2YdGm41aN8JPrQAAAlE"]
[Sun Mar 29 00:04:52.365834 2026] [:error] [pid 64859:tid 64898] [client 20.151.113.137:22379] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acf8JG3qEBHXq3rHdBmDLQAAABE"]
[Sun Mar 29 00:04:52.804471 2026] [:error] [pid 64860:tid 64930] [client 20.151.113.137:22300] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acf8JBkU3N0pg_4aEL_C7wAAAFY"]
[Sun Mar 29 00:04:53.221805 2026] [:error] [pid 34631:tid 34663] [client 20.151.113.137:22355] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/awh.php"] [unique_id "acf8JTtzjMMS6kojpeSQSgAAAcM"]
[Sun Mar 29 00:04:53.643415 2026] [:error] [pid 43547:tid 43571] [client 20.151.113.137:22398] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acf8JT4ZEfdetXP-9aAUoAAAAhY"]
[Sun Mar 29 00:04:54.059750 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:22338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acf8JnNG2YdGm41aN8JPrgAAAkY"]
[Sun Mar 29 00:04:54.473362 2026] [:error] [pid 64860:tid 64918] [client 20.151.113.137:22378] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acf8JhkU3N0pg_4aEL_C-QAAAEo"]
[Sun Mar 29 00:04:54.911279 2026] [:error] [pid 64861:tid 64945] [client 20.151.113.137:22342] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/24.php"] [unique_id "acf8JuxK22_lUN2kvnXEwgAAAIo"]
[Sun Mar 29 00:04:55.333090 2026] [:error] [pid 64966:tid 64984] [client 20.151.113.137:22372] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acf8J9fSvF5AFfSuKxVKpAAAAMs"]
[Sun Mar 29 00:04:55.743398 2026] [:error] [pid 64860:tid 64917] [client 20.151.113.137:22362] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acf8JxkU3N0pg_4aEL_C_wAAAEk"]
[Sun Mar 29 00:04:56.162365 2026] [:error] [pid 43578:tid 43604] [client 20.151.113.137:22382] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acf8KHNG2YdGm41aN8JPsgAAAlc"]
[Sun Mar 29 00:04:56.576665 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22337] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/zz8.php"] [unique_id "acf8KHNG2YdGm41aN8JPtAAAAkQ"]
[Sun Mar 29 00:04:57.007728 2026] [:error] [pid 34631:tid 34683] [client 20.151.113.137:22334] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acf8KTtzjMMS6kojpeSQTAAAAdc"]
[Sun Mar 29 00:04:57.436116 2026] [:error] [pid 43578:tid 43599] [client 20.151.113.137:22249] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acf8KXNG2YdGm41aN8JPtgAAAlI"]
[Sun Mar 29 00:04:57.858101 2026] [:error] [pid 43578:tid 43581] [client 20.151.113.137:22373] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acf8KXNG2YdGm41aN8JPuQAAAkA"]
[Sun Mar 29 00:04:58.269692 2026] [:error] [pid 43578:tid 43584] [client 20.151.113.137:22361] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/feokc.php"] [unique_id "acf8KnNG2YdGm41aN8JPugAAAkM"]
[Sun Mar 29 00:04:58.681615 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22283] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acf8KnNG2YdGm41aN8JPvAAAAk4"]
[Sun Mar 29 00:04:59.112969 2026] [:error] [pid 43578:tid 43604] [client 20.151.113.137:22381] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acf8K3NG2YdGm41aN8JPvwAAAlc"]
[Sun Mar 29 00:04:59.535478 2026] [:error] [pid 43578:tid 43592] [client 20.151.113.137:22358] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acf8K3NG2YdGm41aN8JPwgAAAks"]
[Sun Mar 29 00:04:59.977544 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:22291] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fetch.php"] [unique_id "acf8K-xK22_lUN2kvnXE6QAAAJQ"]
[Sun Mar 29 00:05:00.409560 2026] [:error] [pid 34597:tid 34612] [client 20.151.113.137:22343] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acf8LIluI7-e5s1cafe58QAAAUs"]
[Sun Mar 29 00:05:00.839742 2026] [:error] [pid 64861:tid 64940] [client 20.151.113.137:22326] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acf8LOxK22_lUN2kvnXE8QAAAIU"]
[Sun Mar 29 00:05:01.259133 2026] [:error] [pid 64861:tid 64952] [client 20.151.113.137:22285] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acf8LexK22_lUN2kvnXE9AAAAJE"]
[Sun Mar 29 00:05:01.675838 2026] [:error] [pid 43547:tid 43565] [client 20.151.113.137:22314] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phpmini.php"] [unique_id "acf8LT4ZEfdetXP-9aAUqgAAAhA"]
[Sun Mar 29 00:05:02.100529 2026] [:error] [pid 34597:tid 34619] [client 20.151.113.137:22210] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acf8LoluI7-e5s1cafe59AAAAVI"]
[Sun Mar 29 00:05:02.518119 2026] [:error] [pid 43578:tid 43602] [client 20.151.113.137:22339] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acf8LnNG2YdGm41aN8JPyQAAAlU"]
[Sun Mar 29 00:05:02.935497 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22316] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acf8LnNG2YdGm41aN8JPzAAAAkQ"]
[Sun Mar 29 00:05:03.352094 2026] [:error] [pid 43578:tid 43584] [client 20.151.113.137:22388] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/an7.php"] [unique_id "acf8L3NG2YdGm41aN8JP0gAAAkM"]
[Sun Mar 29 00:05:03.766027 2026] [:error] [pid 43578:tid 43597] [client 20.151.113.137:22368] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acf8L3NG2YdGm41aN8JP1wAAAlA"]
[Sun Mar 29 00:05:04.178218 2026] [:error] [pid 43578:tid 43592] [client 20.151.113.137:22286] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acf8MHNG2YdGm41aN8JP2AAAAks"]
[Sun Mar 29 00:05:04.592733 2026] [:error] [pid 64859:tid 64892] [client 20.151.113.137:22235] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acf8MG3qEBHXq3rHdBmDNAAAAAs"]
[Sun Mar 29 00:05:05.009633 2026] [:error] [pid 43578:tid 43602] [client 20.151.113.137:22395] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tbute.php"] [unique_id "acf8MXNG2YdGm41aN8JP3QAAAlU"]
[Sun Mar 29 00:05:05.423348 2026] [:error] [pid 64861:tid 64958] [client 20.151.113.137:22282] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acf8MexK22_lUN2kvnXFBgAAAJc"]
[Sun Mar 29 00:05:05.835368 2026] [:error] [pid 34631:tid 34663] [client 20.151.113.137:22272] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acf8MTtzjMMS6kojpeSQUQAAAcM"]
[Sun Mar 29 00:05:06.250057 2026] [:error] [pid 43579:tid 43608] [client 20.151.113.137:22274] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acf8MiRqN4JVI8gB7AkQ6wAAAoA"]
[Sun Mar 29 00:05:06.661870 2026] [:error] [pid 64859:tid 64888] [client 20.151.113.137:22384] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rovoj.php"] [unique_id "acf8Mm3qEBHXq3rHdBmDNgAAAAc"]
[Sun Mar 29 00:05:07.073024 2026] [:error] [pid 64859:tid 64897] [client 20.151.113.137:22360] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acf8M23qEBHXq3rHdBmDNwAAABA"]
[Sun Mar 29 00:05:07.486890 2026] [:error] [pid 43579:tid 43614] [client 20.151.113.137:22275] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acf8MyRqN4JVI8gB7AkQ7gAAAoY"]
[Sun Mar 29 00:05:07.906096 2026] [:error] [pid 64861:tid 64959] [client 20.151.113.137:22322] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acf8M-xK22_lUN2kvnXFDQAAAJg"]
[Sun Mar 29 00:05:08.324524 2026] [:error] [pid 64861:tid 64942] [client 20.151.113.137:22232] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/r3grt7.php"] [unique_id "acf8NOxK22_lUN2kvnXFDwAAAIc"]
[Sun Mar 29 00:05:08.741987 2026] [:error] [pid 43579:tid 43610] [client 20.151.113.137:22320] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acf8NCRqN4JVI8gB7AkQ8QAAAoI"]
[Sun Mar 29 00:05:09.173483 2026] [:error] [pid 2877:tid 2895] [client 20.151.113.137:22396] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acf8NbgM4xL1Xj409YQf-wAAARA"]
[Sun Mar 29 00:05:09.591276 2026] [:error] [pid 34597:tid 34610] [client 20.151.113.137:22329] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acf8NYluI7-e5s1cafe59gAAAUk"]
[Sun Mar 29 00:05:10.007836 2026] [:error] [pid 34597:tid 34609] [client 20.151.113.137:22346] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/phina.php"] [unique_id "acf8NoluI7-e5s1cafe59wAAAUg"]
[Sun Mar 29 00:05:10.422807 2026] [:error] [pid 64859:tid 64902] [client 20.151.113.137:22218] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acf8Nm3qEBHXq3rHdBmDOAAAABU"]
[Sun Mar 29 00:05:10.837859 2026] [:error] [pid 64861:tid 64945] [client 20.151.113.137:22376] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acf8NuxK22_lUN2kvnXFFgAAAIo"]
[Sun Mar 29 00:05:11.257955 2026] [:error] [pid 43578:tid 43581] [client 20.151.113.137:22298] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acf8N3NG2YdGm41aN8JP5gAAAkA"]
[Sun Mar 29 00:05:11.672541 2026] [:error] [pid 34597:tid 34606] [client 20.151.113.137:22383] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acf8N4luI7-e5s1cafe5-AAAAUU"]
[Sun Mar 29 00:05:12.096804 2026] [:error] [pid 43578:tid 43586] [client 20.151.113.137:22394] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "acf8OHNG2YdGm41aN8JP6wAAAkU"]
[Sun Mar 29 00:05:12.512869 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22242] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "acf8OHNG2YdGm41aN8JP7AAAAkQ"]
[Sun Mar 29 00:05:12.931540 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:22222] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "acf8OHNG2YdGm41aN8JP7gAAAkg"]
[Sun Mar 29 00:05:13.348209 2026] [:error] [pid 34597:tid 34615] [client 20.151.113.137:22363] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs6.php"] [unique_id "acf8OYluI7-e5s1cafe5_AAAAU4"]
[Sun Mar 29 00:05:13.768441 2026] [:error] [pid 64861:tid 64944] [client 20.151.113.137:22229] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs7.php"] [unique_id "acf8OexK22_lUN2kvnXFHAAAAIk"]
[Sun Mar 29 00:05:14.182315 2026] [:error] [pid 43578:tid 43583] [client 20.151.113.137:22371] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs7.php"] [unique_id "acf8OnNG2YdGm41aN8JP8gAAAkI"]
[Sun Mar 29 00:05:14.603202 2026] [:error] [pid 64860:tid 64920] [client 20.151.113.137:22209] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs7.php"] [unique_id "acf8OhkU3N0pg_4aEL_DGwAAAEw"]
[Sun Mar 29 00:05:15.025925 2026] [:error] [pid 43578:tid 43593] [client 20.151.113.137:22364] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/fs7.php"] [unique_id "acf8O3NG2YdGm41aN8JP9QAAAkw"]
[Sun Mar 29 00:05:15.453334 2026] [:error] [pid 43578:tid 43598] [client 20.151.113.137:22397] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kbfr.php"] [unique_id "acf8O3NG2YdGm41aN8JP-gAAAlE"]
[Sun Mar 29 00:05:15.869767 2026] [:error] [pid 43578:tid 43581] [client 20.151.113.137:22385] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kbfr.php"] [unique_id "acf8O3NG2YdGm41aN8JP_gAAAkA"]
[Sun Mar 29 00:05:16.286535 2026] [:error] [pid 43578:tid 43593] [client 20.151.113.137:22310] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kbfr.php"] [unique_id "acf8PHNG2YdGm41aN8JQAQAAAkw"]
[Sun Mar 29 00:05:16.699445 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22350] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kbfr.php"] [unique_id "acf8PHNG2YdGm41aN8JQBAAAAk4"]
[Sun Mar 29 00:05:17.114868 2026] [:error] [pid 43578:tid 43582] [client 20.151.113.137:22224] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/595.php"] [unique_id "acf8PXNG2YdGm41aN8JQBwAAAkE"]
[Sun Mar 29 00:05:17.531293 2026] [:error] [pid 43578:tid 43583] [client 20.151.113.137:22308] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/595.php"] [unique_id "acf8PXNG2YdGm41aN8JQCQAAAkI"]
[Sun Mar 29 00:05:17.950308 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:22277] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/595.php"] [unique_id "acf8PXNG2YdGm41aN8JQDAAAAkk"]
[Sun Mar 29 00:05:18.362068 2026] [:error] [pid 64861:tid 64940] [client 20.151.113.137:22330] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/595.php"] [unique_id "acf8PuxK22_lUN2kvnXFIwAAAIU"]
[Sun Mar 29 00:05:18.783840 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22267] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x1.php"] [unique_id "acf8PnNG2YdGm41aN8JQEAAAAkQ"]
[Sun Mar 29 00:05:19.196759 2026] [:error] [pid 43578:tid 43582] [client 20.151.113.137:22211] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x1.php"] [unique_id "acf8P3NG2YdGm41aN8JQEwAAAkE"]
[Sun Mar 29 00:05:19.610560 2026] [:error] [pid 43578:tid 43593] [client 20.151.113.137:22315] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x1.php"] [unique_id "acf8P3NG2YdGm41aN8JQFgAAAkw"]
[Sun Mar 29 00:05:20.022866 2026] [:error] [pid 43579:tid 43610] [client 20.151.113.137:22220] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/x1.php"] [unique_id "acf8QCRqN4JVI8gB7AkQ9wAAAoI"]
[Sun Mar 29 00:05:20.437568 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22352] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gk.php"] [unique_id "acf8QHNG2YdGm41aN8JQGwAAAk4"]
[Sun Mar 29 00:05:20.856927 2026] [:error] [pid 43578:tid 43592] [client 20.151.113.137:22390] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gk.php"] [unique_id "acf8QHNG2YdGm41aN8JQHwAAAks"]
[Sun Mar 29 00:05:21.297476 2026] [:error] [pid 34631:tid 34663] [client 20.151.113.137:22387] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gk.php"] [unique_id "acf8QTtzjMMS6kojpeSQWgAAAcM"]
[Sun Mar 29 00:05:21.712759 2026] [:error] [pid 64861:tid 64936] [client 20.151.113.137:22152] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gk.php"] [unique_id "acf8QexK22_lUN2kvnXFJwAAAIE"]
[Sun Mar 29 00:05:22.128635 2026] [:error] [pid 43578:tid 43597] [client 20.151.113.137:22239] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acf8QnNG2YdGm41aN8JQJgAAAlA"]
[Sun Mar 29 00:05:22.548806 2026] [:error] [pid 43578:tid 43584] [client 20.151.113.137:22351] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acf8QnNG2YdGm41aN8JQKQAAAkM"]
[Sun Mar 29 00:05:22.963250 2026] [:error] [pid 64859:tid 64885] [client 20.151.113.137:22276] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acf8Qm3qEBHXq3rHdBmDQAAAAAQ"]
[Sun Mar 29 00:05:23.391720 2026] [:error] [pid 64859:tid 64893] [client 20.151.113.137:22234] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acf8Q23qEBHXq3rHdBmDRAAAAAw"]
[Sun Mar 29 00:05:23.803324 2026] [:error] [pid 43578:tid 43605] [client 20.151.113.137:22264] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws82.php"] [unique_id "acf8Q3NG2YdGm41aN8JQLgAAAlg"]
[Sun Mar 29 00:05:24.218310 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22216] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws82.php"] [unique_id "acf8RHNG2YdGm41aN8JQLwAAAk4"]
[Sun Mar 29 00:05:24.629542 2026] [:error] [pid 43578:tid 43581] [client 20.151.113.137:22302] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws82.php"] [unique_id "acf8RHNG2YdGm41aN8JQNAAAAkA"]
[Sun Mar 29 00:05:25.041619 2026] [:error] [pid 43578:tid 43597] [client 20.151.113.137:22299] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws82.php"] [unique_id "acf8RXNG2YdGm41aN8JQNgAAAlA"]
[Sun Mar 29 00:05:25.454277 2026] [:error] [pid 43578:tid 43596] [client 20.151.113.137:22370] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acf8RXNG2YdGm41aN8JQOAAAAk8"]
[Sun Mar 29 00:05:25.864130 2026] [:error] [pid 64860:tid 64932] [client 20.151.113.137:22296] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acf8RRkU3N0pg_4aEL_DHwAAAFg"]
[Sun Mar 29 00:05:26.274906 2026] [:error] [pid 64861:tid 64943] [client 20.151.113.137:22256] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acf8RuxK22_lUN2kvnXFMAAAAIg"]
[Sun Mar 29 00:05:26.693355 2026] [:error] [pid 43578:tid 43591] [client 20.151.113.137:22313] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acf8RnNG2YdGm41aN8JQPAAAAko"]
[Sun Mar 29 00:05:27.106100 2026] [:error] [pid 64861:tid 64942] [client 20.151.113.137:22386] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acf8R-xK22_lUN2kvnXFNwAAAIc"]
[Sun Mar 29 00:05:27.521925 2026] [:error] [pid 64861:tid 64953] [client 20.151.113.137:22318] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acf8R-xK22_lUN2kvnXFOgAAAJI"]
[Sun Mar 29 00:05:27.934025 2026] [:error] [pid 64861:tid 64939] [client 20.151.113.137:22208] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acf8R-xK22_lUN2kvnXFPAAAAIQ"]
[Sun Mar 29 00:05:28.346069 2026] [:error] [pid 64861:tid 64950] [client 20.151.113.137:22307] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws79.php"] [unique_id "acf8SOxK22_lUN2kvnXFQAAAAI8"]
[Sun Mar 29 00:05:28.781061 2026] [:error] [pid 64861:tid 64951] [client 20.151.113.137:22317] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acf8SOxK22_lUN2kvnXFQwAAAJA"]
[Sun Mar 29 00:05:29.195540 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22303] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acf8SXNG2YdGm41aN8JQPwAAAk4"]
[Sun Mar 29 00:05:29.609278 2026] [:error] [pid 43578:tid 43594] [client 20.151.113.137:22288] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acf8SXNG2YdGm41aN8JQQAAAAk0"]
[Sun Mar 29 00:05:30.022343 2026] [:error] [pid 64861:tid 64949] [client 20.151.113.137:22306] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws78.php"] [unique_id "acf8SuxK22_lUN2kvnXFSgAAAI4"]
[Sun Mar 29 00:05:30.435102 2026] [:error] [pid 64861:tid 64951] [client 20.151.113.137:22327] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acf8SuxK22_lUN2kvnXFTAAAAJA"]
[Sun Mar 29 00:05:30.860107 2026] [:error] [pid 64861:tid 64957] [client 20.151.113.137:22149] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acf8SuxK22_lUN2kvnXFUAAAAJY"]
[Sun Mar 29 00:05:31.277625 2026] [:error] [pid 64859:tid 64888] [client 20.151.113.137:22345] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acf8S23qEBHXq3rHdBmDTAAAAAc"]
[Sun Mar 29 00:05:31.697002 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:22186] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws50.php"] [unique_id "acf8S-xK22_lUN2kvnXFVQAAAJQ"]
[Sun Mar 29 00:05:32.117672 2026] [:error] [pid 34631:tid 34665] [client 20.151.113.137:22153] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acf8TDtzjMMS6kojpeSQXgAAAcU"]
[Sun Mar 29 00:05:32.542509 2026] [:error] [pid 43578:tid 43603] [client 20.151.113.137:22268] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acf8THNG2YdGm41aN8JQQwAAAlY"]
[Sun Mar 29 00:05:32.960979 2026] [:error] [pid 43579:tid 43620] [client 20.151.113.137:22324] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acf8TCRqN4JVI8gB7AkQ-QAAAow"]
[Sun Mar 29 00:05:33.385093 2026] [:error] [pid 43578:tid 43593] [client 20.151.113.137:22305] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws44.php"] [unique_id "acf8TXNG2YdGm41aN8JQRQAAAkw"]
[Sun Mar 29 00:05:33.825273 2026] [:error] [pid 43578:tid 43596] [client 20.151.113.137:22294] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acf8TXNG2YdGm41aN8JQRgAAAk8"]
[Sun Mar 29 00:05:34.237436 2026] [:error] [pid 64861:tid 64935] [client 20.151.113.137:22384] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acf8TuxK22_lUN2kvnXFWQAAAIA"]
[Sun Mar 29 00:05:34.657812 2026] [:error] [pid 64860:tid 64927] [client 20.151.113.137:22212] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acf8ThkU3N0pg_4aEL_DJQAAAFM"]
[Sun Mar 29 00:05:35.072653 2026] [:error] [pid 64860:tid 64920] [client 20.151.113.137:22265] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws43.php"] [unique_id "acf8TxkU3N0pg_4aEL_DJwAAAEw"]
[Sun Mar 29 00:05:35.486549 2026] [:error] [pid 43547:tid 43562] [client 20.151.113.137:22344] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acf8Tz4ZEfdetXP-9aAUsQAAAg0"]
[Sun Mar 29 00:05:35.905176 2026] [:error] [pid 34631:tid 34681] [client 20.151.113.137:22247] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acf8TztzjMMS6kojpeSQXwAAAdU"]
[Sun Mar 29 00:05:36.324137 2026] [:error] [pid 64966:tid 64990] [client 20.151.113.137:22319] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acf8UNfSvF5AFfSuKxVKrwAAANE"]
[Sun Mar 29 00:05:36.744195 2026] [:error] [pid 64859:tid 64905] [client 20.151.113.137:22369] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws42.php"] [unique_id "acf8UG3qEBHXq3rHdBmDVgAAABg"]
[Sun Mar 29 00:05:37.157636 2026] [:error] [pid 64860:tid 64912] [client 20.151.113.137:22273] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acf8URkU3N0pg_4aEL_DLQAAAEQ"]
[Sun Mar 29 00:05:37.570453 2026] [:error] [pid 64860:tid 64910] [client 20.151.113.137:22171] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acf8URkU3N0pg_4aEL_DLgAAAEI"]
[Sun Mar 29 00:05:37.984593 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22221] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acf8UXNG2YdGm41aN8JQSQAAAkQ"]
[Sun Mar 29 00:05:38.400908 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:22399] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws40.php"] [unique_id "acf8UnNG2YdGm41aN8JQSwAAAkg"]
[Sun Mar 29 00:05:38.829189 2026] [:error] [pid 43578:tid 43581] [client 20.151.113.137:22332] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acf8UnNG2YdGm41aN8JQTAAAAkA"]
[Sun Mar 29 00:05:39.245503 2026] [:error] [pid 64861:tid 64945] [client 20.151.113.137:22243] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acf8U-xK22_lUN2kvnXFXwAAAIo"]
[Sun Mar 29 00:05:39.658198 2026] [:error] [pid 43579:tid 43632] [client 20.151.113.137:22323] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acf8UyRqN4JVI8gB7AkQ-wAAApg"]
[Sun Mar 29 00:05:40.071217 2026] [:error] [pid 43579:tid 43615] [client 20.151.113.137:22297] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws36.php"] [unique_id "acf8VCRqN4JVI8gB7AkQ_AAAAoc"]
[Sun Mar 29 00:05:40.490863 2026] [:error] [pid 43578:tid 43599] [client 20.151.113.137:22241] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acf8VHNG2YdGm41aN8JQVAAAAlI"]
[Sun Mar 29 00:05:40.911549 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:22391] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acf8VHNG2YdGm41aN8JQVgAAAkg"]
[Sun Mar 29 00:05:41.326315 2026] [:error] [pid 43578:tid 43586] [client 20.151.113.137:22287] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acf8VXNG2YdGm41aN8JQWQAAAkU"]
[Sun Mar 29 00:05:41.739930 2026] [:error] [pid 43578:tid 43582] [client 20.151.113.137:22295] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vwxbi.php"] [unique_id "acf8VXNG2YdGm41aN8JQWwAAAkE"]
[Sun Mar 29 00:05:42.164614 2026] [:error] [pid 64859:tid 64884] [client 20.151.113.137:22217] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acf8Vm3qEBHXq3rHdBmDXAAAAAM"]
[Sun Mar 29 00:05:42.580847 2026] [:error] [pid 43578:tid 43600] [client 20.151.113.137:22237] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acf8VnNG2YdGm41aN8JQYgAAAlM"]
[Sun Mar 29 00:05:42.996299 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:22328] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acf8VnNG2YdGm41aN8JQZgAAAkg"]
[Sun Mar 29 00:05:43.408095 2026] [:error] [pid 64861:tid 64944] [client 20.151.113.137:22163] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/shellerr.php"] [unique_id "acf8V-xK22_lUN2kvnXFYwAAAIk"]
[Sun Mar 29 00:05:43.837768 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:22248] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acf8V-xK22_lUN2kvnXFZgAAAJQ"]
[Sun Mar 29 00:05:44.253082 2026] [:error] [pid 64859:tid 64885] [client 20.151.113.137:22183] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acf8WG3qEBHXq3rHdBmDXQAAAAQ"]
[Sun Mar 29 00:05:44.668005 2026] [:error] [pid 2877:tid 2893] [client 20.151.113.137:22333] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acf8WLgM4xL1Xj409YQf_wAAAQ4"]
[Sun Mar 29 00:05:45.093688 2026] [:error] [pid 64861:tid 64951] [client 20.151.113.137:22253] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vaza.php"] [unique_id "acf8WexK22_lUN2kvnXFagAAAJA"]
[Sun Mar 29 00:05:45.507844 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:22278] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cvz.php"] [unique_id "acf8WXNG2YdGm41aN8JQbgAAAkk"]
[Sun Mar 29 00:05:45.921613 2026] [:error] [pid 43547:tid 43554] [client 20.151.113.137:22331] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cvz.php"] [unique_id "acf8WT4ZEfdetXP-9aAUtwAAAgU"]
[Sun Mar 29 00:05:46.339886 2026] [:error] [pid 64859:tid 64881] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/cvz.php
[Sun Mar 29 00:05:46.553559 2026] [:error] [pid 64859:tid 64895] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sun Mar 29 00:05:46.796590 2026] [:error] [pid 64859:tid 64895] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Sun Mar 29 00:05:47.008378 2026] [:error] [pid 64859:tid 64903] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Sun Mar 29 00:05:47.223186 2026] [:error] [pid 64859:tid 64887] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Sun Mar 29 00:05:47.433018 2026] [:error] [pid 64859:tid 64884] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sun Mar 29 00:05:47.643629 2026] [:error] [pid 64859:tid 64901] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Sun Mar 29 00:05:47.854643 2026] [:error] [pid 64859:tid 64899] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sun Mar 29 00:05:48.064715 2026] [:error] [pid 64859:tid 64885] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Sun Mar 29 00:05:48.275151 2026] [:error] [pid 64859:tid 64894] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/roter.php
[Sun Mar 29 00:05:48.484883 2026] [:error] [pid 64859:tid 64904] [client 20.151.113.137:22262] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Sun Mar 29 00:05:48.692023 2026] [:error] [pid 64859:tid 64890] [client 20.151.113.137:22262] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acf8XG3qEBHXq3rHdBmDcAAAAAk"]
[Sun Mar 29 00:05:49.104088 2026] [:error] [pid 64859:tid 64905] [client 20.151.113.137:22227] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acf8XW3qEBHXq3rHdBmDcQAAABg"]
[Sun Mar 29 00:05:49.514375 2026] [:error] [pid 43578:tid 43583] [client 20.151.113.137:22281] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acf8XXNG2YdGm41aN8JQgAAAAkI"]
[Sun Mar 29 00:05:49.925820 2026] [:error] [pid 34631:tid 34669] [client 20.151.113.137:22301] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/save.php"] [unique_id "acf8XTtzjMMS6kojpeSQZAAAAck"]
[Sun Mar 29 00:05:50.350455 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:22321] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acf8XnNG2YdGm41aN8JQhQAAAkY"]
[Sun Mar 29 00:05:50.764860 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:22380] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acf8XnNG2YdGm41aN8JQhwAAAkk"]
[Sun Mar 29 00:05:51.195846 2026] [:error] [pid 64861:tid 64956] [client 20.151.113.137:22230] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acf8X-xK22_lUN2kvnXFcAAAAJU"]
[Sun Mar 29 00:05:51.618251 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:22279] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lib.php"] [unique_id "acf8X-xK22_lUN2kvnXFcgAAAJQ"]
[Sun Mar 29 00:05:52.033889 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:22195] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acf8YHNG2YdGm41aN8JQjAAAAkY"]
[Sun Mar 29 00:05:52.444200 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22160] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acf8YHNG2YdGm41aN8JQjgAAAkQ"]
[Sun Mar 29 00:05:52.860503 2026] [:error] [pid 64861:tid 64959] [client 20.151.113.137:22169] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acf8YOxK22_lUN2kvnXFcwAAAJg"]
[Sun Mar 29 00:05:53.278516 2026] [:error] [pid 34631:tid 34667] [client 20.151.113.137:22236] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/n1GiO.php"] [unique_id "acf8YTtzjMMS6kojpeSQaAAAAcc"]
[Sun Mar 29 00:05:53.692674 2026] [:error] [pid 43578:tid 43584] [client 20.151.113.137:22240] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acf8YXNG2YdGm41aN8JQkQAAAkM"]
[Sun Mar 29 00:05:54.119121 2026] [:error] [pid 64861:tid 64939] [client 20.151.113.137:22252] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acf8YuxK22_lUN2kvnXFdwAAAIQ"]
[Sun Mar 29 00:05:54.536385 2026] [:error] [pid 64861:tid 64944] [client 20.151.113.137:22377] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acf8YuxK22_lUN2kvnXFfAAAAIk"]
[Sun Mar 29 00:05:54.949149 2026] [:error] [pid 43578:tid 43591] [client 20.151.113.137:22260] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pLdK1.php"] [unique_id "acf8YnNG2YdGm41aN8JQkgAAAko"]
[Sun Mar 29 00:05:55.363332 2026] [:error] [pid 34631:tid 34672] [client 20.151.113.137:22263] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acf8YztzjMMS6kojpeSQagAAAcw"]
[Sun Mar 29 00:05:55.780788 2026] [:error] [pid 34631:tid 34681] [client 20.151.113.137:22158] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acf8YztzjMMS6kojpeSQbAAAAdU"]
[Sun Mar 29 00:05:56.194823 2026] [:error] [pid 34631:tid 34684] [client 20.151.113.137:22257] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acf8ZDtzjMMS6kojpeSQcQAAAdg"]
[Sun Mar 29 00:05:56.611244 2026] [:error] [pid 34631:tid 34671] [client 20.151.113.137:22231] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/llb1J.php"] [unique_id "acf8ZDtzjMMS6kojpeSQdgAAAcs"]
[Sun Mar 29 00:05:57.035632 2026] [:error] [pid 34631:tid 34664] [client 20.151.113.137:22223] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acf8ZTtzjMMS6kojpeSQegAAAcQ"]
[Sun Mar 29 00:05:57.457128 2026] [:error] [pid 43578:tid 43593] [client 20.151.113.137:22147] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acf8ZXNG2YdGm41aN8JQkwAAAkw"]
[Sun Mar 29 00:05:57.875052 2026] [:error] [pid 34631:tid 34674] [client 20.151.113.137:22156] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acf8ZTtzjMMS6kojpeSQfgAAAc4"]
[Sun Mar 29 00:05:58.289457 2026] [:error] [pid 2877:tid 2898] [client 20.151.113.137:22164] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jeZDu.php"] [unique_id "acf8ZrgM4xL1Xj409YQgAAAAARM"]
[Sun Mar 29 00:05:58.702359 2026] [:error] [pid 34631:tid 34671] [client 20.151.113.137:16337] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acf8ZjtzjMMS6kojpeSQgQAAAcs"]
[Sun Mar 29 00:05:59.114179 2026] [:error] [pid 2877:tid 2901] [client 20.151.113.137:22213] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acf8Z7gM4xL1Xj409YQgAQAAARY"]
[Sun Mar 29 00:05:59.527360 2026] [:error] [pid 2877:tid 2892] [client 20.151.113.137:22144] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acf8Z7gM4xL1Xj409YQgAwAAAQ0"]
[Sun Mar 29 00:05:59.945099 2026] [:error] [pid 43547:tid 43565] [client 20.151.113.137:22199] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gec.php"] [unique_id "acf8Zz4ZEfdetXP-9aAUwAAAAhA"]
[Sun Mar 29 00:06:00.365800 2026] [:error] [pid 64966:tid 64992] [client 20.151.113.137:22196] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acf8aNfSvF5AFfSuKxVKswAAANM"]
[Sun Mar 29 00:06:00.785535 2026] [:error] [pid 64966:tid 64983] [client 20.151.113.137:22180] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acf8aNfSvF5AFfSuKxVKtAAAAMo"]
[Sun Mar 29 00:06:01.198493 2026] [:error] [pid 43578:tid 43588] [client 20.151.113.137:22174] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acf8aXNG2YdGm41aN8JQlQAAAkc"]
[Sun Mar 29 00:06:01.612170 2026] [:error] [pid 64860:tid 64921] [client 20.151.113.137:22246] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bfuKK.php"] [unique_id "acf8aRkU3N0pg_4aEL_DNwAAAE0"]
[Sun Mar 29 00:06:02.032292 2026] [:error] [pid 43579:tid 43611] [client 20.151.113.137:22166] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acf8aiRqN4JVI8gB7AkRAwAAAoM"]
[Sun Mar 29 00:06:02.453181 2026] [:error] [pid 64966:tid 64993] [client 20.151.113.137:22238] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acf8atfSvF5AFfSuKxVKtwAAANQ"]
[Sun Mar 29 00:06:02.869470 2026] [:error] [pid 43547:tid 43559] [client 20.151.113.137:22255] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acf8aj4ZEfdetXP-9aAUxAAAAgo"]
[Sun Mar 29 00:06:03.286096 2026] [:error] [pid 43578:tid 43583] [client 20.151.113.137:22309] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/OpVq6.php"] [unique_id "acf8a3NG2YdGm41aN8JQmQAAAkI"]
[Sun Mar 29 00:06:03.699948 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:22162] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acf8a3NG2YdGm41aN8JQmwAAAkg"]
[Sun Mar 29 00:06:04.113901 2026] [:error] [pid 43578:tid 43601] [client 20.151.113.137:22258] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acf8bHNG2YdGm41aN8JQnwAAAlQ"]
[Sun Mar 29 00:06:04.526480 2026] [:error] [pid 43547:tid 43573] [client 20.151.113.137:22347] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acf8bD4ZEfdetXP-9aAUxQAAAhg"]
[Sun Mar 29 00:06:04.937553 2026] [:error] [pid 64861:tid 64939] [client 20.151.113.137:22207] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Q73BO.php"] [unique_id "acf8bOxK22_lUN2kvnXFhQAAAIQ"]
[Sun Mar 29 00:06:05.367772 2026] [:error] [pid 64861:tid 64942] [client 20.151.113.137:22325] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acf8bexK22_lUN2kvnXFhwAAAIc"]
[Sun Mar 29 00:06:05.779140 2026] [:error] [pid 34631:tid 34676] [client 20.151.113.137:22312] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acf8bTtzjMMS6kojpeSQhwAAAdA"]
[Sun Mar 29 00:06:06.204890 2026] [:error] [pid 64861:tid 64938] [client 20.151.113.137:16344] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acf8buxK22_lUN2kvnXFigAAAIM"]
[Sun Mar 29 00:06:06.685526 2026] [:error] [pid 64861:tid 64956] [client 20.151.113.137:22266] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rmpoa.php"] [unique_id "acf8buxK22_lUN2kvnXFjQAAAJU"]
[Sun Mar 29 00:06:07.170799 2026] [:error] [pid 43547:tid 43560] [client 20.151.113.137:22148] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wgift1.php"] [unique_id "acf8bz4ZEfdetXP-9aAUxwAAAgs"]
[Sun Mar 29 00:06:07.638326 2026] [:error] [pid 43547:tid 43552] [client 20.151.113.137:22225] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wgift1.php"] [unique_id "acf8bz4ZEfdetXP-9aAUyAAAAgM"]
[Sun Mar 29 00:06:08.049740 2026] [:error] [pid 64861:tid 64950] [client 20.151.113.137:16326] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wgift1.php"] [unique_id "acf8cOxK22_lUN2kvnXFlAAAAI8"]
[Sun Mar 29 00:06:08.460402 2026] [:error] [pid 2877:tid 2879] [client 20.151.113.137:22293] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wgift1.php"] [unique_id "acf8cLgM4xL1Xj409YQgCwAAAQA"]
[Sun Mar 29 00:06:08.871565 2026] [:error] [pid 64861:tid 64958] [client 20.151.113.137:22177] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/torsa1.php"] [unique_id "acf8cOxK22_lUN2kvnXFmgAAAJc"]
[Sun Mar 29 00:06:09.282867 2026] [:error] [pid 34631:tid 34678] [client 20.151.113.137:16327] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/torsa1.php"] [unique_id "acf8cTtzjMMS6kojpeSQjAAAAdI"]
[Sun Mar 29 00:06:09.708742 2026] [:error] [pid 34631:tid 34663] [client 20.151.113.137:22245] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/torsa1.php"] [unique_id "acf8cTtzjMMS6kojpeSQjwAAAcM"]
[Sun Mar 29 00:06:10.122382 2026] [:error] [pid 34631:tid 34661] [client 20.151.113.137:22188] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/torsa1.php"] [unique_id "acf8cjtzjMMS6kojpeSQkgAAAcE"]
[Sun Mar 29 00:06:10.548479 2026] [:error] [pid 64859:tid 64884] [client 20.151.113.137:16347] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xper1.php"] [unique_id "acf8cm3qEBHXq3rHdBmDdwAAAAM"]
[Sun Mar 29 00:06:10.960159 2026] [:error] [pid 64859:tid 64885] [client 20.151.113.137:22354] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xper1.php"] [unique_id "acf8cm3qEBHXq3rHdBmDeQAAAAQ"]
[Sun Mar 29 00:06:11.373562 2026] [:error] [pid 64859:tid 64897] [client 20.151.113.137:22187] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xper1.php"] [unique_id "acf8c23qEBHXq3rHdBmDewAAABA"]
[Sun Mar 29 00:06:11.808655 2026] [:error] [pid 43578:tid 43588] [client 20.151.113.137:22155] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xper1.php"] [unique_id "acf8c3NG2YdGm41aN8JQqwAAAkc"]
[Sun Mar 29 00:06:12.303808 2026] [:error] [pid 64861:tid 64958] [client 20.151.113.137:22170] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelio1.php"] [unique_id "acf8dOxK22_lUN2kvnXFowAAAJc"]
[Sun Mar 29 00:06:12.809530 2026] [:error] [pid 64859:tid 64881] [client 20.151.113.137:22374] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelio1.php"] [unique_id "acf8dG3qEBHXq3rHdBmDgQAAAAA"]
[Sun Mar 29 00:06:13.305088 2026] [:error] [pid 43578:tid 43596] [client 20.151.113.137:22168] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelio1.php"] [unique_id "acf8dXNG2YdGm41aN8JQrQAAAk8"]
[Sun Mar 29 00:06:13.777694 2026] [:error] [pid 34631:tid 34670] [client 20.151.113.137:22191] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gelio1.php"] [unique_id "acf8dTtzjMMS6kojpeSQlQAAAco"]
[Sun Mar 29 00:06:14.230512 2026] [:error] [pid 43578:tid 43598] [client 20.151.113.137:22244] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "acf8dnNG2YdGm41aN8JQsAAAAlE"]
[Sun Mar 29 00:06:14.667946 2026] [:error] [pid 43578:tid 43604] [client 20.151.113.137:22233] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "acf8dnNG2YdGm41aN8JQswAAAlc"]
[Sun Mar 29 00:06:15.096314 2026] [:error] [pid 43578:tid 43588] [client 20.151.113.137:22150] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "acf8d3NG2YdGm41aN8JQtgAAAkc"]
[Sun Mar 29 00:06:15.507071 2026] [:error] [pid 64861:tid 64958] [client 20.151.113.137:16331] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v2.php"] [unique_id "acf8d-xK22_lUN2kvnXFqAAAAJc"]
[Sun Mar 29 00:06:15.923824 2026] [:error] [pid 64861:tid 64949] [client 20.151.113.137:22228] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "acf8d-xK22_lUN2kvnXFqwAAAI4"]
[Sun Mar 29 00:06:16.338739 2026] [:error] [pid 64861:tid 64940] [client 20.151.113.137:16343] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "acf8eOxK22_lUN2kvnXFrgAAAIU"]
[Sun Mar 29 00:06:16.753929 2026] [:error] [pid 64861:tid 64950] [client 20.151.113.137:22254] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "acf8eOxK22_lUN2kvnXFsQAAAI8"]
[Sun Mar 29 00:06:17.174144 2026] [:error] [pid 64966:tid 64991] [client 20.151.113.137:16321] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v3.php"] [unique_id "acf8edfSvF5AFfSuKxVKuAAAANI"]
[Sun Mar 29 00:06:17.592634 2026] [:error] [pid 43547:tid 43554] [client 20.151.113.137:16352] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "acf8eT4ZEfdetXP-9aAUywAAAgU"]
[Sun Mar 29 00:06:18.006924 2026] [:error] [pid 64861:tid 64956] [client 20.151.113.137:22387] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "acf8euxK22_lUN2kvnXFtgAAAJU"]
[Sun Mar 29 00:06:18.421312 2026] [:error] [pid 64860:tid 64929] [client 20.151.113.137:22226] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "acf8ehkU3N0pg_4aEL_DPwAAAFU"]
[Sun Mar 29 00:06:18.831421 2026] [:error] [pid 34597:tid 34621] [client 20.151.113.137:22345] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/v4.php"] [unique_id "acf8eoluI7-e5s1cafe6CQAAAVQ"]
[Sun Mar 29 00:06:19.250869 2026] [:error] [pid 43578:tid 43594] [client 20.151.113.137:22200] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "acf8e3NG2YdGm41aN8JQxAAAAk0"]
[Sun Mar 29 00:06:19.662481 2026] [:error] [pid 43579:tid 43632] [client 20.151.113.137:16357] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "acf8eyRqN4JVI8gB7AkRBgAAApg"]
[Sun Mar 29 00:06:20.085585 2026] [:error] [pid 64861:tid 64950] [client 20.151.113.137:16272] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "acf8fOxK22_lUN2kvnXFvAAAAI8"]
[Sun Mar 29 00:06:20.502045 2026] [:error] [pid 43579:tid 43625] [client 20.151.113.137:22159] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ant.php"] [unique_id "acf8fCRqN4JVI8gB7AkRBwAAApE"]
[Sun Mar 29 00:06:20.918315 2026] [:error] [pid 43578:tid 43602] [client 20.151.113.137:22206] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acf8fHNG2YdGm41aN8JQxwAAAlU"]
[Sun Mar 29 00:06:21.331750 2026] [:error] [pid 64861:tid 64938] [client 20.151.113.137:22365] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acf8fexK22_lUN2kvnXFwgAAAIM"]
[Sun Mar 29 00:06:21.777026 2026] [:error] [pid 64861:tid 64951] [client 20.151.113.137:16345] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acf8fexK22_lUN2kvnXFxQAAAJA"]
[Sun Mar 29 00:06:22.194172 2026] [:error] [pid 43578:tid 43582] [client 20.151.113.137:22182] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acf8fnNG2YdGm41aN8JQzQAAAkE"]
[Sun Mar 29 00:06:22.610407 2026] [:error] [pid 34631:tid 34671] [client 20.151.113.137:22151] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc13.php"] [unique_id "acf8fjtzjMMS6kojpeSQmgAAAcs"]
[Sun Mar 29 00:06:23.028613 2026] [:error] [pid 64859:tid 64892] [client 20.151.113.137:22175] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc13.php"] [unique_id "acf8f23qEBHXq3rHdBmDiAAAAAs"]
[Sun Mar 29 00:06:23.439072 2026] [:error] [pid 64859:tid 64896] [client 20.151.113.137:22193] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc13.php"] [unique_id "acf8f23qEBHXq3rHdBmDiwAAAA8"]
[Sun Mar 29 00:06:23.866289 2026] [:error] [pid 64859:tid 64883] [client 20.151.113.137:22167] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cc13.php"] [unique_id "acf8f23qEBHXq3rHdBmDjgAAAAI"]
[Sun Mar 29 00:06:24.286325 2026] [:error] [pid 64859:tid 64890] [client 20.151.113.137:22304] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acf8gG3qEBHXq3rHdBmDkgAAAAk"]
[Sun Mar 29 00:06:24.699367 2026] [:error] [pid 64860:tid 64925] [client 20.151.113.137:22181] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acf8gBkU3N0pg_4aEL_DQQAAAFE"]
[Sun Mar 29 00:06:25.117205 2026] [:error] [pid 43578:tid 43598] [client 20.151.113.137:16323] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acf8gXNG2YdGm41aN8JQ1QAAAlE"]
[Sun Mar 29 00:06:25.531016 2026] [:error] [pid 43578:tid 43603] [client 20.151.113.137:16271] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acf8gXNG2YdGm41aN8JQ2QAAAlY"]
[Sun Mar 29 00:06:25.943495 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:22161] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acf8gXNG2YdGm41aN8JQ3AAAAkY"]
[Sun Mar 29 00:06:26.353825 2026] [:error] [pid 43578:tid 43585] [client 20.151.113.137:22219] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acf8gnNG2YdGm41aN8JQ3wAAAkQ"]
[Sun Mar 29 00:06:26.766433 2026] [:error] [pid 43578:tid 43591] [client 20.151.113.137:16261] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acf8gnNG2YdGm41aN8JQ4QAAAko"]
[Sun Mar 29 00:06:27.179807 2026] [:error] [pid 64859:tid 64891] [client 20.151.113.137:16366] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccs.php"] [unique_id "acf8g23qEBHXq3rHdBmDlgAAAAo"]
[Sun Mar 29 00:06:27.592140 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:22154] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acf8g3NG2YdGm41aN8JQ5QAAAkk"]
[Sun Mar 29 00:06:28.016032 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:22203] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acf8hHNG2YdGm41aN8JQ6AAAAkY"]
[Sun Mar 29 00:06:28.436645 2026] [:error] [pid 43579:tid 43621] [client 20.151.113.137:22157] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acf8hCRqN4JVI8gB7AkRCQAAAo0"]
[Sun Mar 29 00:06:28.857669 2026] [:error] [pid 43579:tid 43612] [client 20.151.113.137:22165] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ccu.php"] [unique_id "acf8hCRqN4JVI8gB7AkRCgAAAoQ"]
[Sun Mar 29 00:06:29.277551 2026] [:error] [pid 2877:tid 2885] [client 20.151.113.137:22329] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acf8hbgM4xL1Xj409YQgDgAAAQY"]
[Sun Mar 29 00:06:29.696693 2026] [:error] [pid 34597:tid 34613] [client 20.151.113.137:22146] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acf8hYluI7-e5s1cafe6EAAAAUw"]
[Sun Mar 29 00:06:30.117424 2026] [:error] [pid 64861:tid 64952] [client 20.151.113.137:16361] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acf8huxK22_lUN2kvnXFyAAAAJE"]
[Sun Mar 29 00:06:30.536411 2026] [:error] [pid 43578:tid 43601] [client 20.151.113.137:22311] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/albin.php"] [unique_id "acf8hnNG2YdGm41aN8JQ8gAAAlQ"]
[Sun Mar 29 00:06:30.949384 2026] [:error] [pid 43578:tid 43591] [client 20.151.113.137:22190] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acf8hnNG2YdGm41aN8JQ9QAAAko"]
[Sun Mar 29 00:06:31.386131 2026] [:error] [pid 64861:tid 64937] [client 20.151.113.137:22336] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acf8h-xK22_lUN2kvnXFyQAAAII"]
[Sun Mar 29 00:06:31.816360 2026] [:error] [pid 43579:tid 43629] [client 20.151.113.137:16342] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acf8hyRqN4JVI8gB7AkRDAAAApU"]
[Sun Mar 29 00:06:32.248370 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22201] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/north1.php"] [unique_id "acf8iHNG2YdGm41aN8JQ9gAAAk4"]
[Sun Mar 29 00:06:32.676492 2026] [:error] [pid 43579:tid 43608] [client 20.151.113.137:22357] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acf8iCRqN4JVI8gB7AkRDgAAAoA"]
[Sun Mar 29 00:06:33.098531 2026] [:error] [pid 43547:tid 43557] [client 20.151.113.137:22340] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acf8iT4ZEfdetXP-9aAUzgAAAgg"]
[Sun Mar 29 00:06:33.511606 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:16379] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acf8iXNG2YdGm41aN8JQ-AAAAkg"]
[Sun Mar 29 00:06:33.933186 2026] [:error] [pid 43578:tid 43596] [client 20.151.113.137:16341] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dragonshell.php"] [unique_id "acf8iXNG2YdGm41aN8JQ-wAAAk8"]
[Sun Mar 29 00:06:34.369543 2026] [:error] [pid 64859:tid 64891] [client 20.151.113.137:16256] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acf8im3qEBHXq3rHdBmDnAAAAAo"]
[Sun Mar 29 00:06:34.794519 2026] [:error] [pid 64859:tid 64892] [client 20.151.113.137:16296] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acf8im3qEBHXq3rHdBmDnwAAAAs"]
[Sun Mar 29 00:06:35.211635 2026] [:error] [pid 64860:tid 64915] [client 20.151.113.137:16356] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acf8ixkU3N0pg_4aEL_DRwAAAEc"]
[Sun Mar 29 00:06:35.624061 2026] [:error] [pid 43579:tid 43613] [client 20.151.113.137:16353] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ggb.php"] [unique_id "acf8iyRqN4JVI8gB7AkREAAAAoU"]
[Sun Mar 29 00:06:36.037558 2026] [:error] [pid 64861:tid 64945] [client 20.151.113.137:22353] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acf8jOxK22_lUN2kvnXFzAAAAIo"]
[Sun Mar 29 00:06:36.457765 2026] [:error] [pid 64861:tid 64958] [client 20.151.113.137:16367] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acf8jOxK22_lUN2kvnXFzQAAAJc"]
[Sun Mar 29 00:06:36.869483 2026] [:error] [pid 43547:tid 43553] [client 20.151.113.137:22189] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acf8jD4ZEfdetXP-9aAUzwAAAgQ"]
[Sun Mar 29 00:06:37.289786 2026] [:error] [pid 64966:tid 64976] [client 20.151.113.137:16346] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/caiij.php"] [unique_id "acf8jdfSvF5AFfSuKxVKvAAAAMM"]
[Sun Mar 29 00:06:37.700870 2026] [:error] [pid 2877:tid 2897] [client 20.151.113.137:16378] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acf8jbgM4xL1Xj409YQgEQAAARI"]
[Sun Mar 29 00:06:38.120223 2026] [:error] [pid 43578:tid 43600] [client 20.151.113.137:22214] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acf8jnNG2YdGm41aN8JQ_AAAAlM"]
[Sun Mar 29 00:06:38.544407 2026] [:error] [pid 34631:tid 34661] [client 20.151.113.137:22172] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acf8jjtzjMMS6kojpeSQogAAAcE"]
[Sun Mar 29 00:06:38.955708 2026] [:error] [pid 2877:tid 2899] [client 20.151.113.137:22204] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gel4y.php"] [unique_id "acf8jrgM4xL1Xj409YQgEgAAARQ"]
[Sun Mar 29 00:06:39.366226 2026] [:error] [pid 64861:tid 64940] [client 20.151.113.137:16370] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acf8j-xK22_lUN2kvnXF0wAAAIU"]
[Sun Mar 29 00:06:39.788379 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:16322] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acf8j3NG2YdGm41aN8JRAAAAAkk"]
[Sun Mar 29 00:06:40.201548 2026] [:error] [pid 43578:tid 43603] [client 20.151.113.137:16354] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acf8kHNG2YdGm41aN8JRAQAAAlY"]
[Sun Mar 29 00:06:40.613878 2026] [:error] [pid 34631:tid 34667] [client 20.151.113.137:16264] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uxijj.php"] [unique_id "acf8kDtzjMMS6kojpeSQpAAAAcc"]
[Sun Mar 29 00:06:41.025356 2026] [:error] [pid 34597:tid 34610] [client 20.151.113.137:16281] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acf8kYluI7-e5s1cafe6GwAAAUk"]
[Sun Mar 29 00:06:41.435992 2026] [:error] [pid 43547:tid 43570] [client 20.151.113.137:16377] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acf8kT4ZEfdetXP-9aAU0gAAAhU"]
[Sun Mar 29 00:06:41.848654 2026] [:error] [pid 34631:tid 34683] [client 20.151.113.137:16195] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acf8kTtzjMMS6kojpeSQpwAAAdc"]
[Sun Mar 29 00:06:42.260749 2026] [:error] [pid 64860:tid 64922] [client 20.151.113.137:22145] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rkiea.php"] [unique_id "acf8khkU3N0pg_4aEL_DTAAAAE4"]
[Sun Mar 29 00:06:42.672389 2026] [:error] [pid 64859:tid 64900] [client 20.151.113.137:16330] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "acf8km3qEBHXq3rHdBmDpQAAABM"]
[Sun Mar 29 00:06:43.083892 2026] [:error] [pid 43547:tid 43550] [client 20.151.113.137:16348] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "acf8kz4ZEfdetXP-9aAU1AAAAgE"]
[Sun Mar 29 00:06:43.499942 2026] [:error] [pid 64966:tid 64988] [client 20.151.113.137:16349] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "acf8k9fSvF5AFfSuKxVKvgAAAM8"]
[Sun Mar 29 00:06:43.914904 2026] [:error] [pid 43547:tid 43567] [client 20.151.113.137:16293] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/resp.php"] [unique_id "acf8kz4ZEfdetXP-9aAU1QAAAhI"]
[Sun Mar 29 00:06:44.327354 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:16369] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanou.php"] [unique_id "acf8lOxK22_lUN2kvnXF3QAAAJQ"]
[Sun Mar 29 00:06:44.744828 2026] [:error] [pid 43547:tid 43571] [client 20.151.113.137:16350] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanou.php"] [unique_id "acf8lD4ZEfdetXP-9aAU2QAAAhY"]
[Sun Mar 29 00:06:45.158812 2026] [:error] [pid 64860:tid 64926] [client 20.151.113.137:16269] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanou.php"] [unique_id "acf8lRkU3N0pg_4aEL_DTwAAAFI"]
[Sun Mar 29 00:06:45.591710 2026] [:error] [pid 64859:tid 64889] [client 20.151.113.137:16265] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lanou.php"] [unique_id "acf8lW3qEBHXq3rHdBmDqQAAAAg"]
[Sun Mar 29 00:06:46.006106 2026] [:error] [pid 64859:tid 64881] [client 20.151.113.137:16320] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/eursi.php"] [unique_id "acf8lm3qEBHXq3rHdBmDqgAAAAA"]
[Sun Mar 29 00:06:46.427374 2026] [:error] [pid 64861:tid 64947] [client 20.151.113.137:16314] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/eursi.php"] [unique_id "acf8luxK22_lUN2kvnXF4QAAAIw"]
[Sun Mar 29 00:06:46.856499 2026] [:error] [pid 64860:tid 64911] [client 20.151.113.137:16193] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/eursi.php"] [unique_id "acf8lhkU3N0pg_4aEL_DVQAAAEM"]
[Sun Mar 29 00:06:47.275791 2026] [:error] [pid 43578:tid 43584] [client 20.151.113.137:16381] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/eursi.php"] [unique_id "acf8l3NG2YdGm41aN8JRAwAAAkM"]
[Sun Mar 29 00:06:47.696390 2026] [:error] [pid 64860:tid 64915] [client 20.151.113.137:22184] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pas2.php"] [unique_id "acf8lxkU3N0pg_4aEL_DWQAAAEc"]
[Sun Mar 29 00:06:48.116778 2026] [:error] [pid 64860:tid 64910] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/pas2.php
[Sun Mar 29 00:06:48.325371 2026] [:error] [pid 64860:tid 64929] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/schal.php
[Sun Mar 29 00:06:48.534070 2026] [:error] [pid 64860:tid 64925] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sun Mar 29 00:06:49.160969 2026] [:error] [pid 64860:tid 64931] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/dtyh.php
[Sun Mar 29 00:06:49.374209 2026] [:error] [pid 64860:tid 64928] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/wta.php
[Sun Mar 29 00:06:49.581530 2026] [:error] [pid 64860:tid 64911] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sun Mar 29 00:06:49.789583 2026] [:error] [pid 64860:tid 64923] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sun Mar 29 00:06:49.996295 2026] [:error] [pid 64860:tid 64917] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Mar 29 00:06:50.206582 2026] [:error] [pid 64860:tid 64912] [client 20.151.113.137:22225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 29 00:06:50.413639 2026] [:error] [pid 64860:tid 64910] [client 20.151.113.137:22225] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acf8mhkU3N0pg_4aEL_DaAAAAEI"]
[Sun Mar 29 00:06:50.830491 2026] [:error] [pid 34597:tid 34603] [client 20.151.113.137:16270] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acf8moluI7-e5s1cafe6KgAAAUI"]
[Sun Mar 29 00:06:51.244396 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:22205] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acf8m-xK22_lUN2kvnXF9wAAAJQ"]
[Sun Mar 29 00:06:51.656265 2026] [:error] [pid 64861:tid 64935] [client 20.151.113.137:16375] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acf8m-xK22_lUN2kvnXF-AAAAIA"]
[Sun Mar 29 00:06:52.067556 2026] [:error] [pid 64861:tid 64958] [client 20.151.113.137:16192] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acf8nOxK22_lUN2kvnXF-wAAAJc"]
[Sun Mar 29 00:06:52.480871 2026] [:error] [pid 34631:tid 34664] [client 20.151.113.137:16382] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acf8nDtzjMMS6kojpeSQqwAAAcQ"]
[Sun Mar 29 00:06:52.897418 2026] [:error] [pid 64859:tid 64888] [client 20.151.113.137:16376] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acf8nG3qEBHXq3rHdBmDuAAAAAc"]
[Sun Mar 29 00:06:53.315604 2026] [:error] [pid 43579:tid 43632] [client 20.151.113.137:16305] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-load.php"] [unique_id "acf8nSRqN4JVI8gB7AkRGwAAApg"]
[Sun Mar 29 00:06:53.734637 2026] [:error] [pid 43578:tid 43582] [client 20.151.113.137:16309] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acf8nXNG2YdGm41aN8JRDgAAAkE"]
[Sun Mar 29 00:06:54.150955 2026] [:error] [pid 34631:tid 34671] [client 20.151.113.137:22192] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acf8njtzjMMS6kojpeSQsAAAAcs"]
[Sun Mar 29 00:06:54.572413 2026] [:error] [pid 64859:tid 64885] [client 20.151.113.137:22197] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acf8nm3qEBHXq3rHdBmDvAAAAAQ"]
[Sun Mar 29 00:06:55.000812 2026] [:error] [pid 64859:tid 64890] [client 20.151.113.137:22179] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gpt-sh.php"] [unique_id "acf8nm3qEBHXq3rHdBmDvQAAAAk"]
[Sun Mar 29 00:06:55.414330 2026] [:error] [pid 64859:tid 64904] [client 20.151.113.137:16372] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acf8n23qEBHXq3rHdBmDvwAAABc"]
[Sun Mar 29 00:06:55.840526 2026] [:error] [pid 43578:tid 43598] [client 20.151.113.137:22185] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acf8n3NG2YdGm41aN8JREAAAAlE"]
[Sun Mar 29 00:06:56.252770 2026] [:error] [pid 64861:tid 64944] [client 20.151.113.137:16286] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acf8oOxK22_lUN2kvnXGAgAAAIk"]
[Sun Mar 29 00:06:56.674559 2026] [:error] [pid 64860:tid 64926] [client 20.151.113.137:22261] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bywaf.php"] [unique_id "acf8oBkU3N0pg_4aEL_DaQAAAFI"]
[Sun Mar 29 00:06:57.094021 2026] [:error] [pid 64861:tid 64942] [client 20.151.113.137:22250] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acf8oexK22_lUN2kvnXGAwAAAIc"]
[Sun Mar 29 00:06:57.514700 2026] [:error] [pid 64859:tid 64898] [client 20.151.113.137:16329] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acf8oW3qEBHXq3rHdBmDwwAAABE"]
[Sun Mar 29 00:06:57.929204 2026] [:error] [pid 64859:tid 64884] [client 20.151.113.137:22178] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acf8oW3qEBHXq3rHdBmDxAAAAAM"]
[Sun Mar 29 00:06:58.340892 2026] [:error] [pid 43579:tid 43615] [client 20.151.113.137:16335] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-true.php"] [unique_id "acf8oiRqN4JVI8gB7AkRHwAAAoc"]
[Sun Mar 29 00:06:58.755090 2026] [:error] [pid 43578:tid 43589] [client 20.151.113.137:16299] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acf8onNG2YdGm41aN8JRFwAAAkg"]
[Sun Mar 29 00:06:59.174742 2026] [:error] [pid 43578:tid 43591] [client 20.151.113.137:16334] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acf8o3NG2YdGm41aN8JRGQAAAko"]
[Sun Mar 29 00:06:59.584444 2026] [:error] [pid 64861:tid 64951] [client 20.151.113.137:16312] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acf8o-xK22_lUN2kvnXGBQAAAJA"]
[Sun Mar 29 00:07:00.032755 2026] [:error] [pid 43578:tid 43599] [client 20.151.113.137:16292] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byp8.php"] [unique_id "acf8pHNG2YdGm41aN8JRHgAAAlI"]
[Sun Mar 29 00:07:00.445257 2026] [:error] [pid 34631:tid 34664] [client 20.151.113.137:16336] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acf8pDtzjMMS6kojpeSQswAAAcQ"]
[Sun Mar 29 00:07:00.865438 2026] [:error] [pid 64861:tid 64943] [client 20.151.113.137:16198] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acf8pOxK22_lUN2kvnXGCQAAAIg"]
[Sun Mar 29 00:07:01.276593 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:16358] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acf8pXNG2YdGm41aN8JRHwAAAk4"]
[Sun Mar 29 00:07:01.688300 2026] [:error] [pid 64861:tid 64939] [client 20.151.113.137:22356] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx88.php"] [unique_id "acf8pexK22_lUN2kvnXGDgAAAIQ"]
[Sun Mar 29 00:07:02.115698 2026] [:error] [pid 43578:tid 43605] [client 20.151.113.137:16383] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acf8pnNG2YdGm41aN8JRJQAAAlg"]
[Sun Mar 29 00:07:02.528926 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:16277] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acf8pnNG2YdGm41aN8JRJwAAAkk"]
[Sun Mar 29 00:07:02.961858 2026] [:error] [pid 34631:tid 34679] [client 20.151.113.137:22198] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acf8pjtzjMMS6kojpeSQtgAAAdM"]
[Sun Mar 29 00:07:03.375102 2026] [:error] [pid 64860:tid 64915] [client 20.151.113.137:16288] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx79.php"] [unique_id "acf8pxkU3N0pg_4aEL_DcAAAAEc"]
[Sun Mar 29 00:07:03.800722 2026] [:error] [pid 64860:tid 64929] [client 20.151.113.137:16298] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acf8pxkU3N0pg_4aEL_DcQAAAFU"]
[Sun Mar 29 00:07:04.214844 2026] [:error] [pid 64859:tid 64903] [client 20.151.113.137:16294] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acf8qG3qEBHXq3rHdBmDygAAABY"]
[Sun Mar 29 00:07:04.627541 2026] [:error] [pid 64860:tid 64918] [client 20.151.113.137:16339] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acf8qBkU3N0pg_4aEL_DdwAAAEo"]
[Sun Mar 29 00:07:05.054759 2026] [:error] [pid 64861:tid 64937] [client 20.151.113.137:16287] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/max.php"] [unique_id "acf8qexK22_lUN2kvnXGEAAAAII"]
[Sun Mar 29 00:07:05.465519 2026] [:error] [pid 43578:tid 43591] [client 20.151.113.137:16307] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acf8qXNG2YdGm41aN8JRKQAAAko"]
[Sun Mar 29 00:07:05.876387 2026] [:error] [pid 43578:tid 43605] [client 20.151.113.137:16355] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acf8qXNG2YdGm41aN8JRLQAAAlg"]
[Sun Mar 29 00:07:06.290400 2026] [:error] [pid 43578:tid 43602] [client 20.151.113.137:22176] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acf8qnNG2YdGm41aN8JRMAAAAlU"]
[Sun Mar 29 00:07:06.713551 2026] [:error] [pid 34597:tid 34606] [client 20.151.113.137:16257] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/z60.php"] [unique_id "acf8qoluI7-e5s1cafe6MAAAAUU"]
[Sun Mar 29 00:07:07.126316 2026] [:error] [pid 64859:tid 64901] [client 20.151.113.137:16274] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/utky.php"] [unique_id "acf8q23qEBHXq3rHdBmDywAAABQ"]
[Sun Mar 29 00:07:07.537183 2026] [:error] [pid 64861:tid 64952] [client 20.151.113.137:16333] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/utky.php"] [unique_id "acf8q-xK22_lUN2kvnXGEgAAAJE"]
[Sun Mar 29 00:07:07.948659 2026] [:error] [pid 64859:tid 64899] [client 20.151.113.137:16304] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/utky.php"] [unique_id "acf8q23qEBHXq3rHdBmD0AAAABI"]
[Sun Mar 29 00:07:08.361597 2026] [:error] [pid 34597:tid 34610] [client 20.151.113.137:22271] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/utky.php"] [unique_id "acf8rIluI7-e5s1cafe6MQAAAUk"]
[Sun Mar 29 00:07:08.773108 2026] [:error] [pid 64859:tid 64892] [client 20.151.113.137:16243] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uang.php"] [unique_id "acf8rG3qEBHXq3rHdBmD0gAAAAs"]
[Sun Mar 29 00:07:09.212397 2026] [:error] [pid 64859:tid 64895] [client 20.151.113.137:16194] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uang.php"] [unique_id "acf8rW3qEBHXq3rHdBmD1AAAAA4"]
[Sun Mar 29 00:07:09.628313 2026] [:error] [pid 2877:tid 2884] [client 20.151.113.137:16196] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uang.php"] [unique_id "acf8rbgM4xL1Xj409YQgGgAAAQU"]
[Sun Mar 29 00:07:10.050942 2026] [:error] [pid 64966:tid 64975] [client 20.151.113.137:16319] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uang.php"] [unique_id "acf8rtfSvF5AFfSuKxVKxwAAAMI"]
[Sun Mar 29 00:07:10.473115 2026] [:error] [pid 34597:tid 34603] [client 20.151.113.137:16246] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp3.php"] [unique_id "acf8roluI7-e5s1cafe6NQAAAUI"]
[Sun Mar 29 00:07:10.890231 2026] [:error] [pid 64966:tid 64996] [client 20.151.113.137:16373] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp3.php"] [unique_id "acf8rtfSvF5AFfSuKxVKyQAAANc"]
[Sun Mar 29 00:07:11.305009 2026] [:error] [pid 34597:tid 34604] [client 20.151.113.137:16204] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp3.php"] [unique_id "acf8r4luI7-e5s1cafe6NgAAAUM"]
[Sun Mar 29 00:07:11.726436 2026] [:error] [pid 64861:tid 64955] [client 20.151.113.137:16316] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp3.php"] [unique_id "acf8r-xK22_lUN2kvnXGGAAAAJQ"]
[Sun Mar 29 00:07:12.138721 2026] [:error] [pid 43547:tid 43562] [client 20.151.113.137:22194] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acf8sD4ZEfdetXP-9aAU6AAAAg0"]
[Sun Mar 29 00:07:12.550809 2026] [:error] [pid 64966:tid 64988] [client 20.151.113.137:16362] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acf8sNfSvF5AFfSuKxVKzAAAAM8"]
[Sun Mar 29 00:07:12.963962 2026] [:error] [pid 43547:tid 43552] [client 20.151.113.137:16332] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acf8sD4ZEfdetXP-9aAU6wAAAgM"]
[Sun Mar 29 00:07:13.376516 2026] [:error] [pid 64859:tid 64889] [client 20.151.113.137:16289] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acf8sW3qEBHXq3rHdBmD1wAAAAg"]
[Sun Mar 29 00:07:13.794434 2026] [:error] [pid 64861:tid 64940] [client 20.151.113.137:16244] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acf8sexK22_lUN2kvnXGGwAAAIU"]
[Sun Mar 29 00:07:14.234353 2026] [:error] [pid 64859:tid 64898] [client 20.151.113.137:16279] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acf8sm3qEBHXq3rHdBmD2QAAABE"]
[Sun Mar 29 00:07:14.651808 2026] [:error] [pid 43578:tid 43595] [client 20.151.113.137:22259] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acf8snNG2YdGm41aN8JROwAAAk4"]
[Sun Mar 29 00:07:15.080276 2026] [:error] [pid 43579:tid 43626] [client 20.151.113.137:16317] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acf8syRqN4JVI8gB7AkRMgAAApI"]
[Sun Mar 29 00:07:15.498616 2026] [:error] [pid 64966:tid 64986] [client 20.151.113.137:16283] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ticket.php"] [unique_id "acf8s9fSvF5AFfSuKxVKzQAAAM0"]
[Sun Mar 29 00:07:15.908956 2026] [:error] [pid 34631:tid 34677] [client 20.151.113.137:16197] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ticket.php"] [unique_id "acf8sztzjMMS6kojpeSQwwAAAdE"]
[Sun Mar 29 00:07:16.330720 2026] [:error] [pid 34597:tid 34605] [client 20.151.113.137:16136] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ticket.php"] [unique_id "acf8tIluI7-e5s1cafe6OAAAAUQ"]
[Sun Mar 29 00:07:16.743311 2026] [:error] [pid 64859:tid 64888] [client 20.151.113.137:16313] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ticket.php"] [unique_id "acf8tG3qEBHXq3rHdBmD2wAAAAc"]
[Sun Mar 29 00:07:17.160500 2026] [:error] [pid 43547:tid 43557] [client 20.151.113.137:16258] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wglum1.php"] [unique_id "acf8tT4ZEfdetXP-9aAU8gAAAgg"]
[Sun Mar 29 00:07:17.573476 2026] [:error] [pid 34597:tid 34622] [client 20.151.113.137:16324] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wglum1.php"] [unique_id "acf8tYluI7-e5s1cafe6OgAAAVU"]
[Sun Mar 29 00:07:17.995020 2026] [:error] [pid 64861:tid 64947] [client 20.151.113.137:16302] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wglum1.php"] [unique_id "acf8texK22_lUN2kvnXGHQAAAIw"]
[Sun Mar 29 00:07:18.412477 2026] [:error] [pid 34631:tid 34663] [client 20.151.113.137:22335] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wglum1.php"] [unique_id "acf8tjtzjMMS6kojpeSQxwAAAcM"]
[Sun Mar 29 00:07:18.826766 2026] [:error] [pid 64860:tid 64922] [client 20.151.113.137:16308] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "acf8thkU3N0pg_4aEL_DhwAAAE4"]
[Sun Mar 29 00:07:19.250873 2026] [:error] [pid 34631:tid 34681] [client 20.151.113.137:16284] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "acf8tztzjMMS6kojpeSQygAAAdU"]
[Sun Mar 29 00:07:19.687773 2026] [:error] [pid 43578:tid 43590] [client 20.151.113.137:16212] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "acf8t3NG2YdGm41aN8JRPwAAAkk"]
[Sun Mar 29 00:07:20.102769 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:16210] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpwer1.php"] [unique_id "acf8uHNG2YdGm41aN8JRQAAAAkY"]
[Sun Mar 29 00:07:20.521184 2026] [:error] [pid 64859:tid 64895] [client 20.151.113.137:16266] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yuzuru1.php"] [unique_id "acf8uG3qEBHXq3rHdBmD3QAAAA4"]
[Sun Mar 29 00:07:20.942423 2026] [:error] [pid 64859:tid 64903] [client 20.151.113.137:22202] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yuzuru1.php"] [unique_id "acf8uG3qEBHXq3rHdBmD3gAAABY"]
[Sun Mar 29 00:07:21.364027 2026] [:error] [pid 34597:tid 34619] [client 20.151.113.137:16340] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yuzuru1.php"] [unique_id "acf8uYluI7-e5s1cafe6PgAAAVI"]
[Sun Mar 29 00:07:21.777288 2026] [:error] [pid 64966:tid 64977] [client 20.151.113.137:16300] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yuzuru1.php"] [unique_id "acf8udfSvF5AFfSuKxVKzwAAAMQ"]
[Sun Mar 29 00:07:22.196897 2026] [:error] [pid 2877:tid 2902] [client 20.151.113.137:16260] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdone1.php"] [unique_id "acf8urgM4xL1Xj409YQgHwAAARc"]
[Sun Mar 29 00:07:22.619538 2026] [:error] [pid 64860:tid 64910] [client 20.151.113.137:16199] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdone1.php"] [unique_id "acf8uhkU3N0pg_4aEL_DiAAAAEI"]
[Sun Mar 29 00:07:23.028940 2026] [:error] [pid 64860:tid 64913] [client 20.151.113.137:16328] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdone1.php"] [unique_id "acf8uxkU3N0pg_4aEL_DigAAAEU"]
[Sun Mar 29 00:07:23.463376 2026] [:error] [pid 64966:tid 64982] [client 20.151.113.137:16252] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wdone1.php"] [unique_id "acf8u9fSvF5AFfSuKxVK1AAAAMk"]
[Sun Mar 29 00:07:23.882980 2026] [:error] [pid 34631:tid 34673] [client 20.151.113.137:16315] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpass.php"] [unique_id "acf8uztzjMMS6kojpeSQzwAAAc0"]
[Sun Mar 29 00:07:24.305086 2026] [:error] [pid 43579:tid 43622] [client 20.151.113.137:16276] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpass.php"] [unique_id "acf8vCRqN4JVI8gB7AkROAAAAo4"]
[Sun Mar 29 00:07:24.717829 2026] [:error] [pid 64860:tid 64921] [client 20.151.113.137:16275] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpass.php"] [unique_id "acf8vBkU3N0pg_4aEL_DjQAAAE0"]
[Sun Mar 29 00:07:25.131558 2026] [:error] [pid 43578:tid 43587] [client 20.151.113.137:16134] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xpass.php"] [unique_id "acf8vXNG2YdGm41aN8JRSQAAAkY"]
[Sun Mar 29 00:07:25.550118 2026] [:error] [pid 2877:tid 2893] [client 20.151.113.137:16227] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acf8vbgM4xL1Xj409YQgIQAAAQ4"]
[Sun Mar 29 00:07:25.964156 2026] [:error] [pid 34597:tid 34602] [client 20.151.113.137:22251] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acf8vYluI7-e5s1cafe6QgAAAUE"]
[Sun Mar 29 00:07:26.376280 2026] [:error] [pid 43578:tid 43604] [client 20.151.113.137:16236] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acf8vnNG2YdGm41aN8JRTAAAAlc"]
[Sun Mar 29 00:07:26.792955 2026] [:error] [pid 64966:tid 64983] [client 20.151.113.137:16282] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ad.php"] [unique_id "acf8vtfSvF5AFfSuKxVK1QAAAMo"]
[Sun Mar 29 00:07:27.203038 2026] [:error] [pid 64966:tid 64988] [client 20.151.113.137:16211] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acf8v9fSvF5AFfSuKxVK2AAAAM8"]
[Sun Mar 29 00:07:27.618192 2026] [:error] [pid 43578:tid 43586] [client 20.151.113.137:16239] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acf8v3NG2YdGm41aN8JRTgAAAkU"]
[Sun Mar 29 00:07:28.040156 2026] [:error] [pid 43578:tid 43599] [client 20.151.113.137:16306] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acf8wHNG2YdGm41aN8JRUAAAAlI"]
[Sun Mar 29 00:07:28.454545 2026] [:error] [pid 43578:tid 43598] [client 20.151.113.137:16360] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h02ugyh.php"] [unique_id "acf8wHNG2YdGm41aN8JRUgAAAlE"]
[Sun Mar 29 01:28:28.220138 2026] [:error] [pid 39514:tid 39530] [client 51.68.102.16:24335] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acgPvCkUyvlQod6qQu2I8wAAAMU"]
[Sun Mar 29 01:28:28.706660 2026] [:error] [pid 39428:tid 39464] [client 51.68.102.16:34145] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acgPvKXMrozFMIaP8nL2FgAAAEU"]
[Sun Mar 29 01:28:29.193233 2026] [:error] [pid 39429:tid 39486] [client 51.68.102.16:20365] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acgPvU8pSj6sqgZaItnVfAAAAIA"]
[Sun Mar 29 01:28:29.680243 2026] [:error] [pid 39429:tid 39502] [client 51.68.102.16:17695] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20slot.aspx"] [unique_id "acgPvU8pSj6sqgZaItnVfgAAAJA"]
[Sun Mar 29 01:28:49.493219 2026] [:error] [pid 39514:tid 39545] [client 51.68.102.16:10077] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acgP0SkUyvlQod6qQu2JKQAAANQ"]
[Sun Mar 29 01:28:49.980292 2026] [:error] [pid 39427:tid 39444] [client 51.68.102.16:14755] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acgP0VvLf0RDUqcYq-Y8EQAAAAw"]
[Sun Mar 29 01:28:50.470581 2026] [:error] [pid 39429:tid 39487] [client 51.68.102.16:36033] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acgP0k8pSj6sqgZaItnVmQAAAIE"]
[Sun Mar 29 01:28:50.956980 2026] [:error] [pid 39429:tid 39499] [client 51.68.102.16:16973] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgslot%20login.aspx"] [unique_id "acgP0k8pSj6sqgZaItnVnQAAAI0"]
[Sun Mar 29 01:28:51.508883 2026] [:error] [pid 39429:tid 39502] [client 51.68.102.16:12051] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acgP008pSj6sqgZaItnVnwAAAJA"]
[Sun Mar 29 01:28:51.999537 2026] [:error] [pid 39429:tid 39493] [client 51.68.102.16:27203] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acgP008pSj6sqgZaItnVoQAAAIc"]
[Sun Mar 29 01:28:52.489745 2026] [:error] [pid 39514:tid 39529] [client 51.68.102.16:10207] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acgP1CkUyvlQod6qQu2JMwAAAMQ"]
[Sun Mar 29 01:28:52.975751 2026] [:error] [pid 39428:tid 39482] [client 51.68.102.16:35675] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "acgP1KXMrozFMIaP8nL2TAAAAFc"]
[Sun Mar 29 01:28:53.519086 2026] [:error] [pid 39514:tid 39535] [client 51.68.102.16:23231] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acgP1SkUyvlQod6qQu2JOAAAAMo"]
[Sun Mar 29 01:28:54.009069 2026] [:error] [pid 39514:tid 39530] [client 51.68.102.16:20271] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acgP1ikUyvlQod6qQu2JOgAAAMU"]
[Sun Mar 29 01:28:54.499886 2026] [:error] [pid 39429:tid 39496] [client 51.68.102.16:20051] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acgP1k8pSj6sqgZaItnVpQAAAIo"]
[Sun Mar 29 01:28:54.991190 2026] [:error] [pid 39514:tid 39541] [client 51.68.102.16:13433] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acgP1ikUyvlQod6qQu2JPwAAANA"]
[Sun Mar 29 01:28:59.525883 2026] [:error] [pid 39427:tid 39435] [client 51.68.102.16:15617] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acgP21vLf0RDUqcYq-Y8IgAAAAM"]
[Sun Mar 29 01:29:00.012910 2026] [:error] [pid 39514:tid 39537] [client 51.68.102.16:9341] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acgP3CkUyvlQod6qQu2JXQAAAMw"]
[Sun Mar 29 01:29:00.503988 2026] [:error] [pid 39514:tid 39533] [client 51.68.102.16:25033] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acgP3CkUyvlQod6qQu2JXgAAAMg"]
[Sun Mar 29 01:29:00.995114 2026] [:error] [pid 39429:tid 39497] [client 51.68.102.16:17103] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acgP3E8pSj6sqgZaItnVqgAAAIs"]
[Sun Mar 29 01:29:01.558888 2026] [:error] [pid 39514:tid 39542] [client 51.68.102.16:14693] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acgP3SkUyvlQod6qQu2JYwAAANE"]
[Sun Mar 29 01:29:02.050720 2026] [:error] [pid 39514:tid 39545] [client 51.68.102.16:15433] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acgP3ikUyvlQod6qQu2JZwAAANQ"]
[Sun Mar 29 01:29:02.540522 2026] [:error] [pid 39514:tid 39527] [client 51.68.102.16:23601] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acgP3ikUyvlQod6qQu2JbAAAAMI"]
[Sun Mar 29 01:29:03.031669 2026] [:error] [pid 39427:tid 39435] [client 51.68.102.16:30147] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acgP31vLf0RDUqcYq-Y8LwAAAAM"]
[Sun Mar 29 01:29:03.565159 2026] [:error] [pid 39427:tid 39441] [client 51.68.102.16:11363] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acgP31vLf0RDUqcYq-Y8MgAAAAk"]
[Sun Mar 29 01:29:04.051870 2026] [:error] [pid 39514:tid 39529] [client 51.68.102.16:28377] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acgP4CkUyvlQod6qQu2JeAAAAMQ"]
[Sun Mar 29 01:29:04.538638 2026] [:error] [pid 39514:tid 39541] [client 51.68.102.16:18501] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acgP4CkUyvlQod6qQu2JewAAANA"]
[Sun Mar 29 01:29:05.028175 2026] [:error] [pid 39514:tid 39535] [client 51.68.102.16:14317] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acgP4SkUyvlQod6qQu2JfgAAAMo"]
[Sun Mar 29 01:29:09.537216 2026] [:error] [pid 39514:tid 39525] [client 51.68.102.16:29169] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acgP5SkUyvlQod6qQu2JiwAAAME"]
[Sun Mar 29 01:29:10.024324 2026] [:error] [pid 39427:tid 39440] [client 51.68.102.16:33257] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acgP5lvLf0RDUqcYq-Y8PgAAAAg"]
[Sun Mar 29 01:29:10.511451 2026] [:error] [pid 39429:tid 39496] [client 51.68.102.16:30277] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acgP5k8pSj6sqgZaItnVuwAAAIo"]
[Sun Mar 29 01:29:11.000047 2026] [:error] [pid 39514:tid 39546] [client 51.68.102.16:22791] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20wallet.aspx"] [unique_id "acgP5ikUyvlQod6qQu2JjQAAANU"]
[Sun Mar 29 01:29:11.549654 2026] [:error] [pid 39429:tid 39499] [client 51.68.102.16:27923] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acgP508pSj6sqgZaItnVvQAAAI0"]
[Sun Mar 29 01:29:12.036562 2026] [:error] [pid 39429:tid 39508] [client 51.68.102.16:31539] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acgP6E8pSj6sqgZaItnVvgAAAJY"]
[Sun Mar 29 01:29:12.526877 2026] [:error] [pid 39428:tid 39469] [client 51.68.102.16:19255] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acgP6KXMrozFMIaP8nL2YQAAAEo"]
[Sun Mar 29 01:29:13.014080 2026] [:error] [pid 39514:tid 39540] [client 51.68.102.16:26371] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spg%20slot.aspx"] [unique_id "acgP6SkUyvlQod6qQu2JlAAAAM8"]
[Sun Mar 29 01:29:13.578745 2026] [:error] [pid 39427:tid 39451] [client 51.68.102.16:13665] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acgP6VvLf0RDUqcYq-Y8QwAAABM"]
[Sun Mar 29 01:29:14.065352 2026] [:error] [pid 39429:tid 39492] [client 51.68.102.16:18917] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acgP6k8pSj6sqgZaItnVxAAAAIY"]
[Sun Mar 29 01:29:14.553265 2026] [:error] [pid 39427:tid 39436] [client 51.68.102.16:19007] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acgP6lvLf0RDUqcYq-Y8RwAAAAQ"]
[Sun Mar 29 01:29:15.043319 2026] [:error] [pid 39428:tid 39464] [client 51.68.102.16:23299] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/spx%20slot.aspx"] [unique_id "acgP66XMrozFMIaP8nL2bgAAAEU"]
[Sun Mar 29 01:29:24.551312 2026] [:error] [pid 39514:tid 39536] [client 51.68.102.16:13319] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acgP9CkUyvlQod6qQu2JtQAAAMs"]
[Sun Mar 29 01:29:25.038471 2026] [:error] [pid 39428:tid 39463] [client 51.68.102.16:30453] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acgP9aXMrozFMIaP8nL2ewAAAEQ"]
[Sun Mar 29 01:29:25.528430 2026] [:error] [pid 39514:tid 39540] [client 51.68.102.16:13575] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acgP9SkUyvlQod6qQu2JuQAAAM8"]
[Sun Mar 29 01:29:26.015291 2026] [:error] [pid 39514:tid 39529] [client 51.68.102.16:24001] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "acgP9ikUyvlQod6qQu2JuwAAAMQ"]
[Sun Mar 29 01:29:26.576307 2026] [:error] [pid 39428:tid 39479] [client 51.68.102.16:24829] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/super%20slot.aspx"] [unique_id "acgP9qXMrozFMIaP8nL2fQAAAFQ"]
[Sun Mar 29 01:32:46.490318 2026] [:error] [pid 39514:tid 39531] [client 51.68.102.16:12873] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acgQvikUyvlQod6qQu2MdQAAAMY"]
[Sun Mar 29 01:32:46.977536 2026] [:error] [pid 39429:tid 39499] [client 51.68.102.16:20307] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acgQvk8pSj6sqgZaItnXdgAAAI0"]
[Sun Mar 29 01:32:47.464150 2026] [:error] [pid 39514:tid 39543] [client 51.68.102.16:9829] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acgQvykUyvlQod6qQu2MeQAAANI"]
[Sun Mar 29 01:32:47.954882 2026] [:error] [pid 39427:tid 39442] [client 51.68.102.16:10883] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acgQv1vLf0RDUqcYq-Y-UAAAAAo"]
[Sun Mar 29 01:32:55.753336 2026] [:error] [pid 39514:tid 39525] [client 51.68.102.16:28441] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acgQxykUyvlQod6qQu2MlwAAAME"]
[Sun Mar 29 01:32:56.239671 2026] [:error] [pid 39427:tid 39456] [client 51.68.102.16:15449] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acgQyFvLf0RDUqcYq-Y-ZwAAABg"]
[Sun Mar 29 01:32:56.727030 2026] [:error] [pid 39427:tid 39444] [client 51.68.102.16:12275] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acgQyFvLf0RDUqcYq-Y-agAAAAw"]
[Sun Mar 29 01:32:57.214079 2026] [:error] [pid 39429:tid 39491] [client 51.68.102.16:18417] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acgQyU8pSj6sqgZaItnXkgAAAIU"]
[Sun Mar 29 01:32:58.807279 2026] [:error] [pid 39429:tid 39492] [client 51.68.102.16:19859] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acgQyk8pSj6sqgZaItnXogAAAIY"]
[Sun Mar 29 01:32:59.293846 2026] [:error] [pid 39427:tid 39438] [client 51.68.102.16:13077] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acgQy1vLf0RDUqcYq-Y-dwAAAAY"]
[Sun Mar 29 01:32:59.780475 2026] [:error] [pid 39427:tid 39449] [client 51.68.102.16:26061] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acgQy1vLf0RDUqcYq-Y-eAAAABE"]
[Sun Mar 29 01:33:00.271894 2026] [:error] [pid 39427:tid 39440] [client 51.68.102.16:20641] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acgQzFvLf0RDUqcYq-Y-fQAAAAg"]
[Sun Mar 29 01:33:08.782769 2026] [:error] [pid 39428:tid 39471] [client 51.68.102.16:28483] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acgQ1KXMrozFMIaP8nL3dgAAAEw"]
[Sun Mar 29 01:33:09.274684 2026] [:error] [pid 39514:tid 39528] [client 51.68.102.16:19995] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acgQ1SkUyvlQod6qQu2MwQAAAMM"]
[Sun Mar 29 01:33:09.761613 2026] [:error] [pid 39514:tid 39539] [client 51.68.102.16:14713] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acgQ1SkUyvlQod6qQu2MxAAAAM4"]
[Sun Mar 29 01:33:10.252864 2026] [:error] [pid 39514:tid 39533] [client 51.68.102.16:30621] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acgQ1ikUyvlQod6qQu2MxgAAAMg"]
[Sun Mar 29 01:33:15.768772 2026] [:error] [pid 39514:tid 39544] [client 51.68.102.16:31429] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acgQ2ykUyvlQod6qQu2M5AAAANM"]
[Sun Mar 29 01:33:16.255710 2026] [:error] [pid 39427:tid 39456] [client 51.68.102.16:13967] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acgQ3FvLf0RDUqcYq-Y-owAAABg"]
[Sun Mar 29 01:33:16.741536 2026] [:error] [pid 39514:tid 39541] [client 51.68.102.16:36467] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acgQ3CkUyvlQod6qQu2M7wAAANA"]
[Sun Mar 29 01:33:17.227557 2026] [:error] [pid 39427:tid 39449] [client 51.68.102.16:29123] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acgQ3VvLf0RDUqcYq-Y-qAAAABE"]
[Sun Mar 29 01:33:18.782031 2026] [:error] [pid 39429:tid 39510] [client 51.68.102.16:29057] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acgQ3k8pSj6sqgZaItnYCQAAAJg"]
[Sun Mar 29 01:33:19.272185 2026] [:error] [pid 39514:tid 39537] [client 51.68.102.16:13431] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acgQ3ykUyvlQod6qQu2NAgAAAMw"]
[Sun Mar 29 01:33:19.762986 2026] [:error] [pid 39514:tid 39530] [client 51.68.102.16:24031] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acgQ3ykUyvlQod6qQu2NBgAAAMU"]
[Sun Mar 29 01:33:20.248563 2026] [:error] [pid 39427:tid 39454] [client 51.68.102.16:10075] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acgQ4FvLf0RDUqcYq-Y-tQAAABY"]
[Sun Mar 29 01:33:25.765046 2026] [:error] [pid 39514:tid 39524] [client 51.68.102.16:21501] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acgQ5SkUyvlQod6qQu2NOQAAAMA"]
[Sun Mar 29 01:33:26.251963 2026] [:error] [pid 39514:tid 39527] [client 51.68.102.16:21435] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acgQ5ikUyvlQod6qQu2NPAAAAMI"]
[Sun Mar 29 01:33:26.738771 2026] [:error] [pid 39514:tid 39543] [client 51.68.102.16:12701] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acgQ5ikUyvlQod6qQu2NQAAAANI"]
[Sun Mar 29 01:33:27.229112 2026] [:error] [pid 39429:tid 39493] [client 51.68.102.16:10835] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acgQ508pSj6sqgZaItnYGgAAAIc"]
[Sun Mar 29 01:33:28.833302 2026] [:error] [pid 39428:tid 39461] [client 51.68.102.16:13929] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acgQ6KXMrozFMIaP8nL3hwAAAEI"]
[Sun Mar 29 01:33:29.324125 2026] [:error] [pid 39428:tid 39480] [client 51.68.102.16:18067] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acgQ6aXMrozFMIaP8nL3iQAAAFU"]
[Sun Mar 29 01:33:29.814177 2026] [:error] [pid 39427:tid 39437] [client 51.68.102.16:23961] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acgQ6VvLf0RDUqcYq-Y-uwAAAAU"]
[Sun Mar 29 01:33:30.300734 2026] [:error] [pid 39429:tid 39487] [client 51.68.102.16:17113] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%207777.aspx"] [unique_id "acgQ6k8pSj6sqgZaItnYIQAAAIE"]
[Sun Mar 29 01:33:36.979188 2026] [:error] [pid 39514:tid 39530] [client 51.68.102.16:15501] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acgQ8CkUyvlQod6qQu2NXwAAAMU"]
[Sun Mar 29 01:33:37.465973 2026] [:error] [pid 39429:tid 39510] [client 51.68.102.16:34929] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acgQ8U8pSj6sqgZaItnYLwAAAJg"]
[Sun Mar 29 01:33:37.952911 2026] [:error] [pid 39514:tid 39542] [client 51.68.102.16:11575] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acgQ8SkUyvlQod6qQu2NYgAAANE"]
[Sun Mar 29 01:33:38.443184 2026] [:error] [pid 39514:tid 39539] [client 51.68.102.16:30709] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acgQ8ikUyvlQod6qQu2NYwAAAM4"]
[Sun Mar 29 01:33:40.045633 2026] [:error] [pid 39514:tid 39537] [client 51.68.102.16:22081] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acgQ9CkUyvlQod6qQu2NcAAAAMw"]
[Sun Mar 29 01:33:40.533019 2026] [:error] [pid 39514:tid 39535] [client 51.68.102.16:14609] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acgQ9CkUyvlQod6qQu2NcwAAAMo"]
[Sun Mar 29 01:33:41.019984 2026] [:error] [pid 39514:tid 39536] [client 51.68.102.16:31991] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acgQ9SkUyvlQod6qQu2NdwAAAMs"]
[Sun Mar 29 01:33:41.510375 2026] [:error] [pid 39427:tid 39442] [client 51.68.102.16:25145] [client 51.68.102.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acgQ9VvLf0RDUqcYq-Y-2wAAAAo"]
[Sun Mar 29 02:30:52.029568 2026] [:error] [pid 39429:tid 39489] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Sun Mar 29 02:30:52.448636 2026] [:error] [pid 39429:tid 39487] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 29 02:30:52.657006 2026] [:error] [pid 39429:tid 39492] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Sun Mar 29 02:30:52.867367 2026] [:error] [pid 39429:tid 39508] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Mar 29 02:30:53.345906 2026] [:error] [pid 39429:tid 39488] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Mar 29 02:30:53.556099 2026] [:error] [pid 39429:tid 39490] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Sun Mar 29 02:30:53.766311 2026] [:error] [pid 39429:tid 39497] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 29 02:30:53.973935 2026] [:error] [pid 39429:tid 39505] [client 20.151.113.137:6350] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Mar 29 02:30:54.227390 2026] [:error] [pid 39429:tid 39507] [client 20.151.113.137:6350] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "acgeXk8pSj6sqgZaItno6AAAAJU"]
[Sun Mar 29 02:30:54.647501 2026] [:error] [pid 39427:tid 39450] [client 20.151.113.137:6365] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "acgeXlvLf0RDUqcYq-ZS5QAAABI"]
[Sun Mar 29 02:30:55.083718 2026] [:error] [pid 39514:tid 39536] [client 20.151.113.137:6757] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "acgeXykUyvlQod6qQu2oiwAAAMs"]
[Sun Mar 29 02:30:55.626047 2026] [:error] [pid 60346:tid 60352] [client 20.151.113.137:37251] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ms.php"] [unique_id "acgeX3VrXSgLxlxLi9BBqwAAAQE"]
[Sun Mar 29 02:30:56.150171 2026] [:error] [pid 60346:tid 60369] [client 20.151.113.137:37291] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "acgeYHVrXSgLxlxLi9BBrwAAARI"]
[Sun Mar 29 02:30:56.605038 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:6381] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "acgeYHVrXSgLxlxLi9BBswAAARQ"]
[Sun Mar 29 02:30:57.127372 2026] [:error] [pid 39427:tid 39441] [client 20.151.113.137:65411] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "acgeYVvLf0RDUqcYq-ZS5wAAAAk"]
[Sun Mar 29 02:30:57.594953 2026] [:error] [pid 39427:tid 39436] [client 20.151.113.137:6755] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/grsiuk.php"] [unique_id "acgeYVvLf0RDUqcYq-ZS6QAAAAQ"]
[Sun Mar 29 02:30:58.170435 2026] [:error] [pid 39429:tid 39491] [client 20.151.113.137:65410] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "acgeYk8pSj6sqgZaItno8AAAAIU"]
[Sun Mar 29 02:30:58.629658 2026] [:error] [pid 39514:tid 39529] [client 20.151.113.137:65459] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "acgeYikUyvlQod6qQu2ojQAAAMQ"]
[Sun Mar 29 02:30:59.258474 2026] [:error] [pid 39427:tid 39435] [client 20.151.113.137:65426] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "acgeY1vLf0RDUqcYq-ZS7gAAAAM"]
[Sun Mar 29 02:30:59.779085 2026] [:error] [pid 39429:tid 39509] [client 20.151.113.137:6342] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jp.php"] [unique_id "acgeY08pSj6sqgZaItno9wAAAJc"]
[Sun Mar 29 02:31:00.426323 2026] [:error] [pid 39514:tid 39537] [client 20.151.113.137:65480] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "acgeZCkUyvlQod6qQu2ojwAAAMw"]
[Sun Mar 29 02:31:00.933730 2026] [:error] [pid 39429:tid 39499] [client 20.151.113.137:6361] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "acgeZE8pSj6sqgZaItno-gAAAI0"]
[Sun Mar 29 02:31:01.445798 2026] [:error] [pid 39428:tid 39459] [client 20.151.113.137:6415] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "acgeZaXMrozFMIaP8nIFwQAAAEA"]
[Sun Mar 29 02:31:01.951030 2026] [:error] [pid 39429:tid 39491] [client 20.151.113.137:6363] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/term.php"] [unique_id "acgeZU8pSj6sqgZaItno_gAAAIU"]
[Sun Mar 29 02:31:02.384839 2026] [:error] [pid 60346:tid 60353] [client 20.151.113.137:65448] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bootstrap.php"] [unique_id "acgeZnVrXSgLxlxLi9BBtQAAAQI"]
[Sun Mar 29 02:31:02.875953 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:65498] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bootstrap.php"] [unique_id "acgeZnVrXSgLxlxLi9BBuAAAAQc"]
[Sun Mar 29 02:31:03.306865 2026] [:error] [pid 39427:tid 39445] [client 20.151.113.137:64663] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bootstrap.php"] [unique_id "acgeZ1vLf0RDUqcYq-ZS8wAAAA0"]
[Sun Mar 29 02:31:03.792730 2026] [:error] [pid 39514:tid 39546] [client 20.151.113.137:6441] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bootstrap.php"] [unique_id "acgeZykUyvlQod6qQu2omAAAANU"]
[Sun Mar 29 02:31:04.333878 2026] [:error] [pid 39514:tid 39538] [client 20.151.113.137:64741] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "acgeaCkUyvlQod6qQu2omwAAAM0"]
[Sun Mar 29 02:31:04.779451 2026] [:error] [pid 60346:tid 60360] [client 20.151.113.137:6451] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "acgeaHVrXSgLxlxLi9BBuwAAAQk"]
[Sun Mar 29 02:31:05.212154 2026] [:error] [pid 60346:tid 60361] [client 20.151.113.137:6992] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "acgeaXVrXSgLxlxLi9BBvgAAAQo"]
[Sun Mar 29 02:31:05.688919 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:65488] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/kj.php"] [unique_id "acgeaSkUyvlQod6qQu2onwAAANM"]
[Sun Mar 29 02:31:06.151187 2026] [:error] [pid 39429:tid 39510] [client 20.151.113.137:65525] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "acgeak8pSj6sqgZaItnpBAAAAJg"]
[Sun Mar 29 02:31:06.569050 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:64709] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "acgeanVrXSgLxlxLi9BBxAAAARQ"]
[Sun Mar 29 02:31:06.980282 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:64712] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "acgeanVrXSgLxlxLi9BBxgAAAQ8"]
[Sun Mar 29 02:31:07.406618 2026] [:error] [pid 60346:tid 60363] [client 20.151.113.137:65472] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/install.php"] [unique_id "acgea3VrXSgLxlxLi9BBygAAAQw"]
[Sun Mar 29 02:31:07.837842 2026] [:error] [pid 60346:tid 60373] [client 20.151.113.137:65520] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buc.php"] [unique_id "acgea3VrXSgLxlxLi9BBywAAARY"]
[Sun Mar 29 02:31:08.310110 2026] [:error] [pid 60346:tid 60362] [client 20.151.113.137:6760] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buc.php"] [unique_id "acgebHVrXSgLxlxLi9BBzQAAAQs"]
[Sun Mar 29 02:31:08.774555 2026] [:error] [pid 39514:tid 39524] [client 20.151.113.137:6352] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buc.php"] [unique_id "acgebCkUyvlQod6qQu2oqAAAAMA"]
[Sun Mar 29 02:31:09.243720 2026] [:error] [pid 39429:tid 39492] [client 20.151.113.137:6739] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/buc.php"] [unique_id "acgebU8pSj6sqgZaItnpCQAAAIY"]
[Sun Mar 29 02:31:09.670799 2026] [:error] [pid 39427:tid 39441] [client 20.151.113.137:6393] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "acgebVvLf0RDUqcYq-ZS9wAAAAk"]
[Sun Mar 29 02:31:10.089752 2026] [:error] [pid 60346:tid 60354] [client 20.151.113.137:6748] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "acgebnVrXSgLxlxLi9BB0QAAAQM"]
[Sun Mar 29 02:31:10.531043 2026] [:error] [pid 39427:tid 39455] [client 20.151.113.137:65513] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "acgeblvLf0RDUqcYq-ZS_gAAABc"]
[Sun Mar 29 02:31:10.957129 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:6982] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/abc.php"] [unique_id "acgeblvLf0RDUqcYq-ZTAAAAAA8"]
[Sun Mar 29 02:31:11.395645 2026] [:error] [pid 39428:tid 39479] [client 20.151.113.137:64706] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blogs.php"] [unique_id "acgeb6XMrozFMIaP8nIFxAAAAFQ"]
[Sun Mar 29 02:31:11.818876 2026] [:error] [pid 39514:tid 39539] [client 20.151.113.137:6439] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blogs.php"] [unique_id "acgebykUyvlQod6qQu2orAAAAM4"]
[Sun Mar 29 02:31:12.233697 2026] [:error] [pid 39429:tid 39490] [client 20.151.113.137:37263] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blogs.php"] [unique_id "acgecE8pSj6sqgZaItnpDAAAAIQ"]
[Sun Mar 29 02:31:12.751117 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:6380] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blogs.php"] [unique_id "acgecCkUyvlQod6qQu2orgAAAMg"]
[Sun Mar 29 02:31:13.196749 2026] [:error] [pid 39429:tid 39501] [client 20.151.113.137:6731] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgecU8pSj6sqgZaItnpDwAAAI8"]
[Sun Mar 29 02:31:13.619476 2026] [:error] [pid 39514:tid 39547] [client 20.151.113.137:37283] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgecSkUyvlQod6qQu2osAAAANY"]
[Sun Mar 29 02:31:14.044682 2026] [:error] [pid 39429:tid 39492] [client 20.151.113.137:6429] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgeck8pSj6sqgZaItnpFwAAAIY"]
[Sun Mar 29 02:31:14.477529 2026] [:error] [pid 39428:tid 39477] [client 20.151.113.137:6432] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgecqXMrozFMIaP8nIFyAAAAFI"]
[Sun Mar 29 02:31:14.895418 2026] [:error] [pid 39429:tid 39504] [client 20.151.113.137:64719] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "acgeck8pSj6sqgZaItnpGgAAAJI"]
[Sun Mar 29 02:31:15.335800 2026] [:error] [pid 60346:tid 60372] [client 20.151.113.137:6345] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "acgec3VrXSgLxlxLi9BB1AAAARU"]
[Sun Mar 29 02:31:15.756584 2026] [:error] [pid 39427:tid 39454] [client 20.151.113.137:37309] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "acgec1vLf0RDUqcYq-ZTBgAAABY"]
[Sun Mar 29 02:31:16.193535 2026] [:error] [pid 39429:tid 39503] [client 20.151.113.137:65444] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bolt.php"] [unique_id "acgedE8pSj6sqgZaItnpHwAAAJE"]
[Sun Mar 29 02:31:16.691343 2026] [:error] [pid 39428:tid 39469] [client 20.151.113.137:7015] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "acgedKXMrozFMIaP8nIFywAAAEo"]
[Sun Mar 29 02:31:17.123937 2026] [:error] [pid 39428:tid 39465] [client 20.151.113.137:37273] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "acgedaXMrozFMIaP8nIFzgAAAEY"]
[Sun Mar 29 02:31:17.546925 2026] [:error] [pid 39428:tid 39474] [client 20.151.113.137:6433] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "acgedaXMrozFMIaP8nIFzwAAAE8"]
[Sun Mar 29 02:31:17.975065 2026] [:error] [pid 39514:tid 39525] [client 20.151.113.137:6379] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/okxh.php"] [unique_id "acgedSkUyvlQod6qQu2osgAAAME"]
[Sun Mar 29 02:31:18.443308 2026] [:error] [pid 60346:tid 60359] [client 20.151.113.137:6770] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/csv.php"] [unique_id "acgednVrXSgLxlxLi9BB3AAAAQg"]
[Sun Mar 29 02:31:18.875123 2026] [:error] [pid 39428:tid 39482] [client 20.151.113.137:7019] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/csv.php"] [unique_id "acgedqXMrozFMIaP8nIF0QAAAFc"]
[Sun Mar 29 02:31:19.310561 2026] [:error] [pid 39429:tid 39489] [client 20.151.113.137:6728] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/csv.php"] [unique_id "acged08pSj6sqgZaItnpIgAAAIM"]
[Sun Mar 29 02:31:19.835065 2026] [:error] [pid 39428:tid 39476] [client 20.151.113.137:37271] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/csv.php"] [unique_id "acged6XMrozFMIaP8nIF0wAAAFE"]
[Sun Mar 29 02:31:20.264575 2026] [:error] [pid 39428:tid 39461] [client 20.151.113.137:37305] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acgeeKXMrozFMIaP8nIF1wAAAEI"]
[Sun Mar 29 02:31:20.738832 2026] [:error] [pid 39428:tid 39469] [client 20.151.113.137:6349] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acgeeKXMrozFMIaP8nIF2gAAAEo"]
[Sun Mar 29 02:31:21.166576 2026] [:error] [pid 39428:tid 39468] [client 20.151.113.137:65471] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acgeeaXMrozFMIaP8nIF3AAAAEk"]
[Sun Mar 29 02:31:21.702633 2026] [:error] [pid 39429:tid 39491] [client 20.151.113.137:65413] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws85.php"] [unique_id "acgeeU8pSj6sqgZaItnpKAAAAIU"]
[Sun Mar 29 02:31:22.191919 2026] [:error] [pid 39514:tid 39532] [client 20.151.113.137:6409] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "acgeeikUyvlQod6qQu2owAAAAMc"]
[Sun Mar 29 02:31:22.731553 2026] [:error] [pid 39514:tid 39528] [client 20.151.113.137:65517] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "acgeeikUyvlQod6qQu2oxAAAAMM"]
[Sun Mar 29 02:31:23.150826 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:6387] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "acgeeykUyvlQod6qQu2oxgAAANM"]
[Sun Mar 29 02:31:23.729337 2026] [:error] [pid 39514:tid 39539] [client 20.151.113.137:64213] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lm15.php"] [unique_id "acgeeykUyvlQod6qQu2oyQAAAM4"]
[Sun Mar 29 02:31:24.222461 2026] [:error] [pid 39427:tid 39443] [client 20.151.113.137:64736] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clss.php"] [unique_id "acgefFvLf0RDUqcYq-ZTCQAAAAs"]
[Sun Mar 29 02:31:24.747923 2026] [:error] [pid 39429:tid 39509] [client 20.151.113.137:65451] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clss.php"] [unique_id "acgefE8pSj6sqgZaItnpLgAAAJc"]
[Sun Mar 29 02:31:25.257987 2026] [:error] [pid 39427:tid 39435] [client 20.151.113.137:6763] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clss.php"] [unique_id "acgefVvLf0RDUqcYq-ZTDAAAAAM"]
[Sun Mar 29 02:31:25.776301 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:65527] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/clss.php"] [unique_id "acgefXVrXSgLxlxLi9BB4QAAAQY"]
[Sun Mar 29 02:31:26.359275 2026] [:error] [pid 60346:tid 60351] [client 20.151.113.137:65455] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acgefnVrXSgLxlxLi9BB5AAAAQA"]
[Sun Mar 29 02:31:26.839098 2026] [:error] [pid 60346:tid 60353] [client 20.151.113.137:65505] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acgefnVrXSgLxlxLi9BB6QAAAQI"]
[Sun Mar 29 02:31:27.282512 2026] [:error] [pid 60346:tid 60362] [client 20.151.113.137:6442] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acgef3VrXSgLxlxLi9BB7AAAAQs"]
[Sun Mar 29 02:31:27.706436 2026] [:error] [pid 39514:tid 39529] [client 20.151.113.137:65479] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/66.php"] [unique_id "acgefykUyvlQod6qQu2o1QAAAMQ"]
[Sun Mar 29 02:31:28.186374 2026] [:error] [pid 39427:tid 39445] [client 20.151.113.137:6754] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/5b9ac.php"] [unique_id "acgegFvLf0RDUqcYq-ZTDgAAAA0"]
[Sun Mar 29 02:31:28.690201 2026] [:error] [pid 39514:tid 39537] [client 20.151.113.137:64738] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/5b9ac.php"] [unique_id "acgegCkUyvlQod6qQu2o1wAAAMw"]
[Sun Mar 29 02:31:29.189728 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:6358] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/5b9ac.php"] [unique_id "acgegSkUyvlQod6qQu2o2QAAAMg"]
[Sun Mar 29 02:31:29.605944 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:65432] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/5b9ac.php"] [unique_id "acgegSkUyvlQod6qQu2o2gAAAMU"]
[Sun Mar 29 02:31:30.148748 2026] [:error] [pid 39427:tid 39440] [client 20.151.113.137:6376] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "acgeglvLf0RDUqcYq-ZTFwAAAAg"]
[Sun Mar 29 02:31:30.654695 2026] [:error] [pid 39429:tid 39486] [client 20.151.113.137:6362] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "acgegk8pSj6sqgZaItnpNwAAAIA"]
[Sun Mar 29 02:31:31.089426 2026] [:error] [pid 39514:tid 39542] [client 20.151.113.137:7022] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "acgegykUyvlQod6qQu2o3AAAANE"]
[Sun Mar 29 02:31:31.510662 2026] [:error] [pid 39514:tid 39541] [client 20.151.113.137:37267] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/domains.php"] [unique_id "acgegykUyvlQod6qQu2o3wAAANA"]
[Sun Mar 29 02:31:31.943420 2026] [:error] [pid 39427:tid 39442] [client 20.151.113.137:6758] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cap.php"] [unique_id "acgeg1vLf0RDUqcYq-ZTGgAAAAo"]
[Sun Mar 29 02:31:32.364010 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:64728] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cap.php"] [unique_id "acgehFvLf0RDUqcYq-ZTGwAAAA8"]
[Sun Mar 29 02:31:32.811461 2026] [:error] [pid 39514:tid 39540] [client 20.151.113.137:6386] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cap.php"] [unique_id "acgehCkUyvlQod6qQu2o4gAAAM8"]
[Sun Mar 29 02:31:33.271930 2026] [:error] [pid 39514:tid 39529] [client 20.151.113.137:64677] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/Cap.php"] [unique_id "acgehSkUyvlQod6qQu2o4wAAAMQ"]
[Sun Mar 29 02:31:33.686030 2026] [:error] [pid 39514:tid 39524] [client 20.151.113.137:7020] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws88.php"] [unique_id "acgehSkUyvlQod6qQu2o5AAAAMA"]
[Sun Mar 29 02:31:34.176630 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:37300] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws88.php"] [unique_id "acgehikUyvlQod6qQu2o5wAAANQ"]
[Sun Mar 29 02:31:34.654940 2026] [:error] [pid 39514:tid 39543] [client 20.151.113.137:6991] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws88.php"] [unique_id "acgehikUyvlQod6qQu2o6QAAANI"]
[Sun Mar 29 02:31:35.074190 2026] [:error] [pid 39429:tid 39489] [client 20.151.113.137:37293] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws88.php"] [unique_id "acgeh08pSj6sqgZaItnpPgAAAIM"]
[Sun Mar 29 02:31:35.545097 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:6751] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "acgeh3VrXSgLxlxLi9BB7wAAAQY"]
[Sun Mar 29 02:31:35.972914 2026] [:error] [pid 60346:tid 60360] [client 20.151.113.137:64705] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "acgeh3VrXSgLxlxLi9BB8gAAAQk"]
[Sun Mar 29 02:31:36.445457 2026] [:error] [pid 60346:tid 60359] [client 20.151.113.137:6452] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "acgeiHVrXSgLxlxLi9BB9gAAAQg"]
[Sun Mar 29 02:31:36.950991 2026] [:error] [pid 39427:tid 39451] [client 20.151.113.137:64707] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/1.php"] [unique_id "acgeiFvLf0RDUqcYq-ZTHwAAABM"]
[Sun Mar 29 02:31:37.451691 2026] [:error] [pid 39514:tid 39540] [client 20.151.113.137:6391] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5e0a.php"] [unique_id "acgeiSkUyvlQod6qQu2o8QAAAM8"]
[Sun Mar 29 02:31:37.877003 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:6753] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5e0a.php"] [unique_id "acgeiSkUyvlQod6qQu2o9QAAANM"]
[Sun Mar 29 02:31:38.419532 2026] [:error] [pid 39514:tid 39527] [client 20.151.113.137:65521] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5e0a.php"] [unique_id "acgeiikUyvlQod6qQu2o-gAAAMI"]
[Sun Mar 29 02:31:38.882999 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:6359] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5e0a.php"] [unique_id "acgeiikUyvlQod6qQu2o_QAAANg"]
[Sun Mar 29 02:31:39.303585 2026] [:error] [pid 60346:tid 60369] [client 20.151.113.137:65424] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "acgei3VrXSgLxlxLi9BB-AAAARI"]
[Sun Mar 29 02:31:39.779504 2026] [:error] [pid 39514:tid 39524] [client 20.151.113.137:65428] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "acgeiykUyvlQod6qQu2pAwAAAMA"]
[Sun Mar 29 02:31:40.204921 2026] [:error] [pid 39514:tid 39537] [client 20.151.113.137:65494] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "acgejCkUyvlQod6qQu2pBgAAAMw"]
[Sun Mar 29 02:31:40.627907 2026] [:error] [pid 39428:tid 39465] [client 20.151.113.137:65465] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/t.php"] [unique_id "acgejKXMrozFMIaP8nIF6QAAAEY"]
[Sun Mar 29 02:31:41.052343 2026] [:error] [pid 39428:tid 39480] [client 20.151.113.137:6367] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgejaXMrozFMIaP8nIF6gAAAFU"]
[Sun Mar 29 02:31:41.465860 2026] [:error] [pid 39429:tid 39498] [client 20.151.113.137:64156] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgejU8pSj6sqgZaItnpQgAAAIw"]
[Sun Mar 29 02:31:41.881458 2026] [:error] [pid 39514:tid 39525] [client 20.151.113.137:6988] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgejSkUyvlQod6qQu2pCQAAAME"]
[Sun Mar 29 02:31:42.331505 2026] [:error] [pid 39514:tid 39538] [client 20.151.113.137:7037] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgejikUyvlQod6qQu2pCwAAAM0"]
[Sun Mar 29 02:31:42.745348 2026] [:error] [pid 39428:tid 39464] [client 20.151.113.137:65519] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgejqXMrozFMIaP8nIF7wAAAEU"]
[Sun Mar 29 02:31:43.179895 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:7032] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgejykUyvlQod6qQu2pDAAAANQ"]
[Sun Mar 29 02:31:43.638568 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:37298] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgejykUyvlQod6qQu2pDQAAAMg"]
[Sun Mar 29 02:31:44.105961 2026] [:error] [pid 60346:tid 60375] [client 20.151.113.137:6338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgekHVrXSgLxlxLi9BB-gAAARg"]
[Sun Mar 29 02:31:44.524186 2026] [:error] [pid 39428:tid 39468] [client 20.151.113.137:65504] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8573.php"] [unique_id "acgekKXMrozFMIaP8nIF8wAAAEk"]
[Sun Mar 29 02:31:44.943315 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:6775] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8573.php"] [unique_id "acgekCkUyvlQod6qQu2pEwAAANg"]
[Sun Mar 29 02:31:45.364885 2026] [:error] [pid 39514:tid 39538] [client 20.151.113.137:63564] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8573.php"] [unique_id "acgekSkUyvlQod6qQu2pFQAAAM0"]
[Sun Mar 29 02:31:45.879418 2026] [:error] [pid 39427:tid 39442] [client 20.151.113.137:65415] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8573.php"] [unique_id "acgekVvLf0RDUqcYq-ZTJAAAAAo"]
[Sun Mar 29 02:31:46.296936 2026] [:error] [pid 39429:tid 39508] [client 20.151.113.137:6725] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ne2026.php"] [unique_id "acgekk8pSj6sqgZaItnpSAAAAJY"]
[Sun Mar 29 02:31:46.723369 2026] [:error] [pid 39514:tid 39534] [client 20.151.113.137:6443] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ne2026.php"] [unique_id "acgekikUyvlQod6qQu2pGAAAAMk"]
[Sun Mar 29 02:31:47.180468 2026] [:error] [pid 39428:tid 39471] [client 20.151.113.137:65526] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ne2026.php"] [unique_id "acgek6XMrozFMIaP8nIF-QAAAEw"]
[Sun Mar 29 02:31:47.768099 2026] [:error] [pid 39427:tid 39456] [client 20.151.113.137:6351] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ne2026.php"] [unique_id "acgek1vLf0RDUqcYq-ZTKQAAABg"]
[Sun Mar 29 02:31:48.304078 2026] [:error] [pid 39427:tid 39433] [client 20.151.113.137:6389] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "acgelFvLf0RDUqcYq-ZTKwAAAAE"]
[Sun Mar 29 02:31:48.761471 2026] [:error] [pid 39514:tid 39525] [client 20.151.113.137:65502] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "acgelCkUyvlQod6qQu2pHgAAAME"]
[Sun Mar 29 02:31:49.197324 2026] [:error] [pid 39427:tid 39438] [client 20.151.113.137:6722] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "acgelVvLf0RDUqcYq-ZTLQAAAAY"]
[Sun Mar 29 02:31:49.621032 2026] [:error] [pid 39428:tid 39472] [client 20.151.113.137:64252] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp5.php"] [unique_id "acgelaXMrozFMIaP8nIF_QAAAE0"]
[Sun Mar 29 02:31:50.072851 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:6752] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "acgelnVrXSgLxlxLi9BB_gAAARQ"]
[Sun Mar 29 02:31:50.504809 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:6425] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "acgelnVrXSgLxlxLi9BB_wAAARA"]
[Sun Mar 29 02:31:50.956622 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:64718] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "acgelnVrXSgLxlxLi9BCAwAAAQc"]
[Sun Mar 29 02:31:51.395188 2026] [:error] [pid 39427:tid 39451] [client 20.151.113.137:65423] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/edit.php"] [unique_id "acgel1vLf0RDUqcYq-ZTLwAAABM"]
[Sun Mar 29 02:31:51.809623 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:64223] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tool.php"] [unique_id "acgelykUyvlQod6qQu2pJwAAANQ"]
[Sun Mar 29 02:31:52.226098 2026] [:error] [pid 39514:tid 39543] [client 20.151.113.137:37295] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tool.php"] [unique_id "acgemCkUyvlQod6qQu2pKAAAANI"]
[Sun Mar 29 02:31:52.663450 2026] [:error] [pid 39514:tid 39529] [client 20.151.113.137:65469] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tool.php"] [unique_id "acgemCkUyvlQod6qQu2pLAAAAMQ"]
[Sun Mar 29 02:31:53.090422 2026] [:error] [pid 39514:tid 39535] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sun Mar 29 02:31:53.326991 2026] [:error] [pid 39514:tid 39524] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sun Mar 29 02:31:53.535323 2026] [:error] [pid 39514:tid 39534] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Mar 29 02:31:53.743879 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sun Mar 29 02:31:54.003546 2026] [:error] [pid 39514:tid 39543] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Mar 29 02:31:54.214480 2026] [:error] [pid 39514:tid 39532] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sun Mar 29 02:31:54.422149 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 29 02:31:54.630419 2026] [:error] [pid 39514:tid 39528] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Mar 29 02:31:54.837971 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Mar 29 02:31:55.046212 2026] [:error] [pid 39514:tid 39531] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Sun Mar 29 02:31:55.257583 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:65435] File does not exist: /usr/local/apache/htdocs/suspended-page/aa21.php
[Sun Mar 29 02:31:55.462062 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:65435] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acgemykUyvlQod6qQu2pRgAAANM"]
[Sun Mar 29 02:31:56.015990 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:7009] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acgenFvLf0RDUqcYq-ZTNAAAAA8"]
[Sun Mar 29 02:31:56.545111 2026] [:error] [pid 39514:tid 39547] [client 20.151.113.137:6997] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acgenCkUyvlQod6qQu2pRwAAANY"]
[Sun Mar 29 02:31:57.097187 2026] [:error] [pid 39427:tid 39453] [client 20.151.113.137:65433] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws81.php"] [unique_id "acgenVvLf0RDUqcYq-ZTOAAAABU"]
[Sun Mar 29 02:31:57.550595 2026] [:error] [pid 39427:tid 39441] [client 20.151.113.137:64148] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "acgenVvLf0RDUqcYq-ZTOgAAAAk"]
[Sun Mar 29 02:31:58.065512 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:37261] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "acgenikUyvlQod6qQu2pTgAAAMU"]
[Sun Mar 29 02:31:58.568893 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:37303] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "acgenikUyvlQod6qQu2pTwAAANM"]
[Sun Mar 29 02:31:59.055084 2026] [:error] [pid 39514:tid 39543] [client 20.151.113.137:65421] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bgymj.php"] [unique_id "acgenykUyvlQod6qQu2pUAAAANI"]
[Sun Mar 29 02:31:59.516878 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:6354] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax.php"] [unique_id "acgenykUyvlQod6qQu2pVQAAANg"]
[Sun Mar 29 02:32:01.432093 2026] [:error] [pid 39427:tid 39455] [client 20.151.113.137:6749] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax.php"] [unique_id "acgeoVvLf0RDUqcYq-ZTQgAAABc"]
[Sun Mar 29 02:32:01.916956 2026] [:error] [pid 39428:tid 39462] [client 20.151.113.137:6447] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax.php"] [unique_id "acgeoaXMrozFMIaP8nIGCAAAAEM"]
[Sun Mar 29 02:32:02.384667 2026] [:error] [pid 60346:tid 60365] [client 20.151.113.137:7031] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ajax.php"] [unique_id "acgeonVrXSgLxlxLi9BCFgAAAQ4"]
[Sun Mar 29 02:32:02.852998 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:6418] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgeonVrXSgLxlxLi9BCGQAAARQ"]
[Sun Mar 29 02:32:03.303486 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:37286] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgeo1vLf0RDUqcYq-ZTQwAAAA8"]
[Sun Mar 29 02:32:03.727864 2026] [:error] [pid 60346:tid 60372] [client 20.151.113.137:6774] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgeo3VrXSgLxlxLi9BCHAAAARU"]
[Sun Mar 29 02:32:04.245499 2026] [:error] [pid 60346:tid 60369] [client 20.151.113.137:64201] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tfm.php"] [unique_id "acgepHVrXSgLxlxLi9BCHwAAARI"]
[Sun Mar 29 02:32:04.759630 2026] [:error] [pid 39427:tid 39454] [client 20.151.113.137:64644] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "acgepFvLf0RDUqcYq-ZTSAAAABY"]
[Sun Mar 29 02:32:05.186541 2026] [:error] [pid 60346:tid 60373] [client 20.151.113.137:63563] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "acgepXVrXSgLxlxLi9BCJwAAARY"]
[Sun Mar 29 02:32:05.651608 2026] [:error] [pid 60346:tid 60359] [client 20.151.113.137:6983] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "acgepXVrXSgLxlxLi9BCKQAAAQg"]
[Sun Mar 29 02:32:06.110502 2026] [:error] [pid 60346:tid 60365] [client 20.151.113.137:64681] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asasx.php"] [unique_id "acgepnVrXSgLxlxLi9BCLQAAAQ4"]
[Sun Mar 29 02:32:06.565546 2026] [:error] [pid 39428:tid 39472] [client 20.151.113.137:65430] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "acgepqXMrozFMIaP8nIGDwAAAE0"]
[Sun Mar 29 02:32:07.097481 2026] [:error] [pid 60346:tid 60355] [client 20.151.113.137:6405] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "acgep3VrXSgLxlxLi9BCMwAAAQQ"]
[Sun Mar 29 02:32:07.568809 2026] [:error] [pid 60346:tid 60373] [client 20.151.113.137:7013] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "acgep3VrXSgLxlxLi9BCNQAAARY"]
[Sun Mar 29 02:32:08.001260 2026] [:error] [pid 39428:tid 39479] [client 20.151.113.137:7004] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/vanda.php"] [unique_id "acgeqKXMrozFMIaP8nIGEQAAAFQ"]
[Sun Mar 29 02:32:08.430151 2026] [:error] [pid 60346:tid 60359] [client 20.151.113.137:64714] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgeqHVrXSgLxlxLi9BCNwAAAQg"]
[Sun Mar 29 02:32:08.901003 2026] [:error] [pid 60346:tid 60374] [client 20.151.113.137:65462] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgeqHVrXSgLxlxLi9BCPQAAARc"]
[Sun Mar 29 02:32:09.370787 2026] [:error] [pid 39428:tid 39475] [client 20.151.113.137:37255] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgeqaXMrozFMIaP8nIGEwAAAFA"]
[Sun Mar 29 02:32:09.788561 2026] [:error] [pid 39428:tid 39481] [client 20.151.113.137:6398] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgeqaXMrozFMIaP8nIGFQAAAFY"]
[Sun Mar 29 02:32:10.260991 2026] [:error] [pid 60346:tid 60372] [client 20.151.113.137:65449] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "acgeqnVrXSgLxlxLi9BCQwAAARU"]
[Sun Mar 29 02:32:10.693712 2026] [:error] [pid 39428:tid 39469] [client 20.151.113.137:65438] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "acgeqqXMrozFMIaP8nIGGgAAAEo"]
[Sun Mar 29 02:32:11.191564 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:37284] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "acgeq3VrXSgLxlxLi9BCRAAAAQc"]
[Sun Mar 29 02:32:11.645134 2026] [:error] [pid 39514:tid 39531] [client 20.151.113.137:6408] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/55b76.php"] [unique_id "acgeqykUyvlQod6qQu2pZQAAAMY"]
[Sun Mar 29 02:32:12.071884 2026] [:error] [pid 39429:tid 39508] [client 20.151.113.137:7001] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/44.php"] [unique_id "acgerE8pSj6sqgZaItnpVQAAAJY"]
[Sun Mar 29 02:32:12.503752 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:6773] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/44.php"] [unique_id "acgerCkUyvlQod6qQu2pZwAAANM"]
[Sun Mar 29 02:32:12.963427 2026] [:error] [pid 60346:tid 60374] [client 20.151.113.137:65487] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/44.php"] [unique_id "acgerHVrXSgLxlxLi9BCSAAAARc"]
[Sun Mar 29 02:32:13.418623 2026] [:error] [pid 39514:tid 39537] [client 20.151.113.137:37266] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/44.php"] [unique_id "acgerSkUyvlQod6qQu2paAAAAMw"]
[Sun Mar 29 02:32:13.889410 2026] [:error] [pid 39428:tid 39483] [client 20.151.113.137:62933] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "acgeraXMrozFMIaP8nIGHQAAAFg"]
[Sun Mar 29 02:32:14.307617 2026] [:error] [pid 60346:tid 60369] [client 20.151.113.137:64651] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "acgernVrXSgLxlxLi9BCSwAAARI"]
[Sun Mar 29 02:32:14.818745 2026] [:error] [pid 60346:tid 60354] [client 20.151.113.137:63593] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "acgernVrXSgLxlxLi9BCTQAAAQM"]
[Sun Mar 29 02:32:15.237765 2026] [:error] [pid 39514:tid 39527] [client 20.151.113.137:6993] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-access.php"] [unique_id "acgerykUyvlQod6qQu2pbgAAAMI"]
[Sun Mar 29 02:32:15.650173 2026] [:error] [pid 39429:tid 39486] [client 20.151.113.137:37289] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5.php"] [unique_id "acger08pSj6sqgZaItnpXgAAAIA"]
[Sun Mar 29 02:32:16.107033 2026] [:error] [pid 39514:tid 39529] [client 20.151.113.137:64717] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5.php"] [unique_id "acgesCkUyvlQod6qQu2pcgAAAMQ"]
[Sun Mar 29 02:32:16.599379 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:37298] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5.php"] [unique_id "acgesFvLf0RDUqcYq-ZTXAAAAA8"]
[Sun Mar 29 02:32:17.071266 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:64729] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a5.php"] [unique_id "acgesSkUyvlQod6qQu2peAAAAMg"]
[Sun Mar 29 02:32:17.491415 2026] [:error] [pid 39428:tid 39472] [client 20.151.113.137:65440] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "acgesaXMrozFMIaP8nIGHwAAAE0"]
[Sun Mar 29 02:32:17.938511 2026] [:error] [pid 39428:tid 39478] [client 20.151.113.137:65485] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "acgesaXMrozFMIaP8nIGIAAAAFM"]
[Sun Mar 29 02:32:18.353396 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:65417] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "acgesnVrXSgLxlxLi9BCVQAAAQc"]
[Sun Mar 29 02:32:18.837710 2026] [:error] [pid 39428:tid 39467] [client 20.151.113.137:6427] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-content/radio.php"] [unique_id "acgesqXMrozFMIaP8nIGIQAAAEg"]
[Sun Mar 29 02:32:19.307503 2026] [:error] [pid 39427:tid 39445] [client 20.151.113.137:65419] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "acges1vLf0RDUqcYq-ZTYQAAAA0"]
[Sun Mar 29 02:32:19.748181 2026] [:error] [pid 39427:tid 39439] [client 20.151.113.137:6979] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "acges1vLf0RDUqcYq-ZTZAAAAAc"]
[Sun Mar 29 02:32:20.277961 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:37282] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "acgetCkUyvlQod6qQu2phgAAAMg"]
[Sun Mar 29 02:32:20.753300 2026] [:error] [pid 60346:tid 60370] [client 20.151.113.137:65427] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/tx78.php"] [unique_id "acgetHVrXSgLxlxLi9BCWgAAARM"]
[Sun Mar 29 02:32:21.179763 2026] [:error] [pid 39514:tid 39532] [client 20.151.113.137:6999] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xfun.php"] [unique_id "acgetSkUyvlQod6qQu2pjQAAAMc"]
[Sun Mar 29 02:32:21.593382 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:6448] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xfun.php"] [unique_id "acgetSkUyvlQod6qQu2pkQAAAMg"]
[Sun Mar 29 02:32:22.081589 2026] [:error] [pid 39429:tid 39500] [client 20.151.113.137:65481] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xfun.php"] [unique_id "acgetk8pSj6sqgZaItnpZAAAAI4"]
[Sun Mar 29 02:32:22.533557 2026] [:error] [pid 39429:tid 39502] [client 20.151.113.137:6347] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xfun.php"] [unique_id "acgetk8pSj6sqgZaItnpZwAAAJA"]
[Sun Mar 29 02:32:22.962303 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:6403] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h2.php"] [unique_id "acgetnVrXSgLxlxLi9BCXwAAAQY"]
[Sun Mar 29 02:32:23.389146 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:64171] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h2.php"] [unique_id "acget3VrXSgLxlxLi9BCYwAAAQc"]
[Sun Mar 29 02:32:23.802260 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:7025] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h2.php"] [unique_id "acgetykUyvlQod6qQu2plwAAANQ"]
[Sun Mar 29 02:32:24.280659 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:6977] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h2.php"] [unique_id "acgeuFvLf0RDUqcYq-ZTbQAAAA8"]
[Sun Mar 29 02:32:24.756003 2026] [:error] [pid 39514:tid 39538] [client 20.151.113.137:64758] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wxfyf.php"] [unique_id "acgeuCkUyvlQod6qQu2pnAAAAM0"]
[Sun Mar 29 02:32:25.198666 2026] [:error] [pid 39514:tid 39537] [client 20.151.113.137:6995] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wxfyf.php"] [unique_id "acgeuSkUyvlQod6qQu2pnwAAAMw"]
[Sun Mar 29 02:32:25.636733 2026] [:error] [pid 39428:tid 39469] [client 20.151.113.137:37292] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wxfyf.php"] [unique_id "acgeuaXMrozFMIaP8nIGJQAAAEo"]
[Sun Mar 29 02:32:26.051301 2026] [:error] [pid 39429:tid 39508] [client 20.151.113.137:6454] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wxfyf.php"] [unique_id "acgeuk8pSj6sqgZaItnpbgAAAJY"]
[Sun Mar 29 02:32:26.501877 2026] [:error] [pid 39429:tid 39504] [client 20.151.113.137:65523] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/drhunthq.php"] [unique_id "acgeuk8pSj6sqgZaItnpcwAAAJI"]
[Sun Mar 29 02:32:26.936925 2026] [:error] [pid 39429:tid 39499] [client 20.151.113.137:6736] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/drhunthq.php"] [unique_id "acgeuk8pSj6sqgZaItnpdAAAAI0"]
[Sun Mar 29 02:32:27.363869 2026] [:error] [pid 39429:tid 39493] [client 20.151.113.137:6371] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/drhunthq.php"] [unique_id "acgeu08pSj6sqgZaItnpeQAAAIc"]
[Sun Mar 29 02:32:27.831986 2026] [:error] [pid 39514:tid 39540] [client 20.151.113.137:65431] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/drhunthq.php"] [unique_id "acgeuykUyvlQod6qQu2ppAAAAM8"]
[Sun Mar 29 02:32:28.340411 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:64251] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acgevHVrXSgLxlxLi9BCaQAAAQY"]
[Sun Mar 29 02:32:28.802007 2026] [:error] [pid 60346:tid 60363] [client 20.151.113.137:6388] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acgevHVrXSgLxlxLi9BCbAAAAQw"]
[Sun Mar 29 02:32:29.282553 2026] [:error] [pid 39428:tid 39471] [client 20.151.113.137:63591] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acgevaXMrozFMIaP8nIGKgAAAEw"]
[Sun Mar 29 02:32:29.732681 2026] [:error] [pid 39427:tid 39432] [client 20.151.113.137:64644] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp9.php"] [unique_id "acgevVvLf0RDUqcYq-ZTcwAAAAA"]
[Sun Mar 29 02:32:30.217123 2026] [:error] [pid 60346:tid 60360] [client 20.151.113.137:64734] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sale.php"] [unique_id "acgevnVrXSgLxlxLi9BCcgAAAQk"]
[Sun Mar 29 02:32:30.678705 2026] [:error] [pid 60346:tid 60370] [client 20.151.113.137:64722] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sale.php"] [unique_id "acgevnVrXSgLxlxLi9BCdAAAARM"]
[Sun Mar 29 02:32:31.090643 2026] [:error] [pid 60346:tid 60375] [client 20.151.113.137:64756] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sale.php"] [unique_id "acgev3VrXSgLxlxLi9BCdgAAARg"]
[Sun Mar 29 02:32:31.514779 2026] [:error] [pid 39428:tid 39474] [client 20.151.113.137:37260] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sale.php"] [unique_id "acgev6XMrozFMIaP8nIGLQAAAE8"]
[Sun Mar 29 02:32:31.947108 2026] [:error] [pid 39428:tid 39480] [client 20.151.113.137:37279] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acgev6XMrozFMIaP8nIGLwAAAFU"]
[Sun Mar 29 02:32:32.382069 2026] [:error] [pid 39429:tid 39499] [client 20.151.113.137:64155] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acgewE8pSj6sqgZaItnpfgAAAI0"]
[Sun Mar 29 02:32:32.834341 2026] [:error] [pid 60346:tid 60356] [client 20.151.113.137:6782] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acgewHVrXSgLxlxLi9BCfgAAAQU"]
[Sun Mar 29 02:32:33.292910 2026] [:error] [pid 39429:tid 39486] [client 20.151.113.137:63548] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ioxi-o.php"] [unique_id "acgewU8pSj6sqgZaItnpgwAAAIA"]
[Sun Mar 29 02:32:33.736681 2026] [:error] [pid 60346:tid 60355] [client 20.151.113.137:65450] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "acgewXVrXSgLxlxLi9BCggAAAQQ"]
[Sun Mar 29 02:32:34.185822 2026] [:error] [pid 60346:tid 60362] [client 20.151.113.137:64661] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "acgewnVrXSgLxlxLi9BChQAAAQs"]
[Sun Mar 29 02:32:34.614704 2026] [:error] [pid 39428:tid 39472] [client 20.151.113.137:6779] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "acgewqXMrozFMIaP8nIGMgAAAE0"]
[Sun Mar 29 02:32:35.031452 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:37272] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/asd.php"] [unique_id "acgew3VrXSgLxlxLi9BCiQAAAQ0"]
[Sun Mar 29 02:32:35.518586 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:65509] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "acgew3VrXSgLxlxLi9BCiwAAARQ"]
[Sun Mar 29 02:32:35.935613 2026] [:error] [pid 60346:tid 60372] [client 20.151.113.137:6780] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "acgew3VrXSgLxlxLi9BCjwAAARU"]
[Sun Mar 29 02:32:36.352270 2026] [:error] [pid 39429:tid 39503] [client 20.151.113.137:65477] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "acgexE8pSj6sqgZaItnpigAAAJE"]
[Sun Mar 29 02:32:36.805885 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:62939] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-act.php"] [unique_id "acgexFvLf0RDUqcYq-ZTdwAAAA8"]
[Sun Mar 29 02:32:37.245513 2026] [:error] [pid 60346:tid 60369] [client 20.151.113.137:6761] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "acgexXVrXSgLxlxLi9BClQAAARI"]
[Sun Mar 29 02:32:37.684464 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:63592] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "acgexXVrXSgLxlxLi9BClwAAAQY"]
[Sun Mar 29 02:32:38.231272 2026] [:error] [pid 39514:tid 39534] [client 20.151.113.137:65452] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "acgexikUyvlQod6qQu2pqwAAAMk"]
[Sun Mar 29 02:32:38.782557 2026] [:error] [pid 39428:tid 39482] [client 20.151.113.137:65460] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bjfl.php"] [unique_id "acgexqXMrozFMIaP8nIGOQAAAFc"]
[Sun Mar 29 02:32:39.221151 2026] [:error] [pid 39514:tid 39536] [client 20.151.113.137:7034] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "acgexykUyvlQod6qQu2psAAAAMs"]
[Sun Mar 29 02:32:39.639927 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:6424] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "acgex3VrXSgLxlxLi9BCnQAAAQ8"]
[Sun Mar 29 02:32:40.096192 2026] [:error] [pid 60346:tid 60363] [client 20.151.113.137:63500] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "acgeyHVrXSgLxlxLi9BCogAAAQw"]
[Sun Mar 29 02:32:40.556390 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:6402] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/d12.php"] [unique_id "acgeyHVrXSgLxlxLi9BCpQAAARQ"]
[Sun Mar 29 02:32:40.980012 2026] [:error] [pid 60346:tid 60355] [client 20.151.113.137:6987] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws84.php"] [unique_id "acgeyHVrXSgLxlxLi9BCpgAAAQQ"]
[Sun Mar 29 02:32:41.396446 2026] [:error] [pid 39428:tid 39475] [client 20.151.113.137:62929] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws84.php"] [unique_id "acgeyaXMrozFMIaP8nIGQwAAAFA"]
[Sun Mar 29 02:32:41.910568 2026] [:error] [pid 60346:tid 60356] [client 20.151.113.137:64194] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws84.php"] [unique_id "acgeyXVrXSgLxlxLi9BCqwAAAQU"]
[Sun Mar 29 02:32:42.371205 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:65466] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws84.php"] [unique_id "acgeynVrXSgLxlxLi9BCrQAAAQc"]
[Sun Mar 29 02:32:42.872346 2026] [:error] [pid 39429:tid 39498] [client 20.151.113.137:64234] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2ksm17n.php"] [unique_id "acgeyk8pSj6sqgZaItnpjgAAAIw"]
[Sun Mar 29 02:32:43.353572 2026] [:error] [pid 60346:tid 60354] [client 20.151.113.137:64135] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2ksm17n.php"] [unique_id "acgey3VrXSgLxlxLi9BCsgAAAQM"]
[Sun Mar 29 02:32:43.831423 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:6407] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2ksm17n.php"] [unique_id "acgey3VrXSgLxlxLi9BCswAAARQ"]
[Sun Mar 29 02:32:44.266518 2026] [:error] [pid 39427:tid 39450] [client 20.151.113.137:64757] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/2ksm17n.php"] [unique_id "acgezFvLf0RDUqcYq-ZTewAAABI"]
[Sun Mar 29 02:32:44.826912 2026] [:error] [pid 39427:tid 39449] [client 20.151.113.137:37265] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a4.php"] [unique_id "acgezFvLf0RDUqcYq-ZTfgAAABE"]
[Sun Mar 29 02:32:45.253811 2026] [:error] [pid 39514:tid 39549] [client 20.151.113.137:64735] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a4.php"] [unique_id "acgezSkUyvlQod6qQu2ptgAAANc"]
[Sun Mar 29 02:32:45.805830 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:63577] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a4.php"] [unique_id "acgezXVrXSgLxlxLi9BCuAAAAQ8"]
[Sun Mar 29 02:32:46.351916 2026] [:error] [pid 60346:tid 60375] [client 20.151.113.137:64198] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/a4.php"] [unique_id "acgeznVrXSgLxlxLi9BCuQAAARg"]
[Sun Mar 29 02:32:46.900385 2026] [:error] [pid 39428:tid 39466] [client 20.151.113.137:6375] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "acgezqXMrozFMIaP8nIGVwAAAEc"]
[Sun Mar 29 02:32:47.485982 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:64222] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "acgez3VrXSgLxlxLi9BCvgAAAQ0"]
[Sun Mar 29 02:32:48.213183 2026] [:error] [pid 39429:tid 39493] [client 20.151.113.137:7011] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "acge0E8pSj6sqgZaItnpkQAAAIc"]
[Sun Mar 29 02:32:48.789716 2026] [:error] [pid 39427:tid 39434] [client 20.151.113.137:6414] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/s.php"] [unique_id "acge0FvLf0RDUqcYq-ZThgAAAAI"]
[Sun Mar 29 02:32:49.363326 2026] [:error] [pid 39429:tid 39488] [client 20.151.113.137:37304] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws77.php"] [unique_id "acge0U8pSj6sqgZaItnplwAAAII"]
[Sun Mar 29 02:32:49.961003 2026] [:error] [pid 39428:tid 39477] [client 20.151.113.137:65493] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws77.php"] [unique_id "acge0aXMrozFMIaP8nIGWgAAAFI"]
[Sun Mar 29 02:32:50.450611 2026] [:error] [pid 39429:tid 39503] [client 20.151.113.137:64688] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws77.php"] [unique_id "acge0k8pSj6sqgZaItnpmAAAAJE"]
[Sun Mar 29 02:32:50.874449 2026] [:error] [pid 39429:tid 39487] [client 20.151.113.137:37297] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws77.php"] [unique_id "acge0k8pSj6sqgZaItnpmwAAAIE"]
[Sun Mar 29 02:32:51.319333 2026] [:error] [pid 60346:tid 60359] [client 20.151.113.137:65508] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rithin.php"] [unique_id "acge03VrXSgLxlxLi9BCwgAAAQg"]
[Sun Mar 29 02:32:51.835007 2026] [:error] [pid 60346:tid 60353] [client 20.151.113.137:37307] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rithin.php"] [unique_id "acge03VrXSgLxlxLi9BCxAAAAQI"]
[Sun Mar 29 02:32:52.377664 2026] [:error] [pid 60346:tid 60363] [client 20.151.113.137:65408] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rithin.php"] [unique_id "acge1HVrXSgLxlxLi9BCxwAAAQw"]
[Sun Mar 29 02:32:52.863779 2026] [:error] [pid 39429:tid 39502] [client 20.151.113.137:6980] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/rithin.php"] [unique_id "acge1E8pSj6sqgZaItnpngAAAJA"]
[Sun Mar 29 02:32:53.327792 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:65422] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amp.php"] [unique_id "acge1SkUyvlQod6qQu2pvQAAANg"]
[Sun Mar 29 02:32:53.812708 2026] [:error] [pid 39427:tid 39441] [client 20.151.113.137:64646] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amp.php"] [unique_id "acge1VvLf0RDUqcYq-ZTkwAAAAk"]
[Sun Mar 29 02:32:54.323218 2026] [:error] [pid 60346:tid 60354] [client 20.151.113.137:64737] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amp.php"] [unique_id "acge1nVrXSgLxlxLi9BCzAAAAQM"]
[Sun Mar 29 02:32:54.801138 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:62896] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/amp.php"] [unique_id "acge1ikUyvlQod6qQu2pwgAAAMU"]
[Sun Mar 29 02:32:55.334528 2026] [:error] [pid 39514:tid 39549] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sun Mar 29 02:32:55.544637 2026] [:error] [pid 39514:tid 39534] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Sun Mar 29 02:32:55.779625 2026] [:error] [pid 39514:tid 39535] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sun Mar 29 02:32:55.988567 2026] [:error] [pid 39514:tid 39536] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Mar 29 02:32:56.197492 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Sun Mar 29 02:32:56.426733 2026] [:error] [pid 39514:tid 39541] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sun Mar 29 02:32:56.662720 2026] [:error] [pid 39514:tid 39525] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 29 02:32:56.889691 2026] [:error] [pid 39514:tid 39542] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 29 02:32:57.121365 2026] [:error] [pid 39514:tid 39540] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sun Mar 29 02:32:57.378914 2026] [:error] [pid 39514:tid 39547] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Sun Mar 29 02:32:57.624074 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:37258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 29 02:32:57.897749 2026] [:error] [pid 39514:tid 39544] [client 20.151.113.137:37258] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "acge2SkUyvlQod6qQu2p1QAAANM"]
[Sun Mar 29 02:32:59.055605 2026] [:error] [pid 39429:tid 39489] [client 20.151.113.137:6994] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "acge208pSj6sqgZaItnpsAAAAIM"]
[Sun Mar 29 02:32:59.557950 2026] [:error] [pid 39514:tid 39531] [client 20.151.113.137:6364] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "acge2ykUyvlQod6qQu2p2AAAAMY"]
[Sun Mar 29 02:33:00.059867 2026] [:error] [pid 39514:tid 39535] [client 20.151.113.137:37259] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/166.php"] [unique_id "acge3CkUyvlQod6qQu2p2gAAAMo"]
[Sun Mar 29 02:33:00.546744 2026] [:error] [pid 39429:tid 39509] [client 20.151.113.137:62967] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "acge3E8pSj6sqgZaItnpsgAAAJc"]
[Sun Mar 29 02:33:00.982185 2026] [:error] [pid 39429:tid 39508] [client 20.151.113.137:64764] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "acge3E8pSj6sqgZaItnpswAAAJY"]
[Sun Mar 29 02:33:01.537566 2026] [:error] [pid 39428:tid 39459] [client 20.151.113.137:63574] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "acge3aXMrozFMIaP8nIGZQAAAEA"]
[Sun Mar 29 02:33:01.951223 2026] [:error] [pid 39429:tid 39505] [client 20.151.113.137:64716] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gettest.php"] [unique_id "acge3U8pSj6sqgZaItnptAAAAJM"]
[Sun Mar 29 02:33:02.437829 2026] [:error] [pid 60346:tid 60365] [client 20.151.113.137:6449] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "acge3nVrXSgLxlxLi9BC1wAAAQ4"]
[Sun Mar 29 02:33:02.854100 2026] [:error] [pid 60346:tid 60351] [client 20.151.113.137:6460] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "acge3nVrXSgLxlxLi9BC2QAAAQA"]
[Sun Mar 29 02:33:03.280958 2026] [:error] [pid 60346:tid 60372] [client 20.151.113.137:6419] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "acge33VrXSgLxlxLi9BC3QAAARU"]
[Sun Mar 29 02:33:03.700307 2026] [:error] [pid 60346:tid 60356] [client 20.151.113.137:62964] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/cu.php"] [unique_id "acge33VrXSgLxlxLi9BC4AAAAQU"]
[Sun Mar 29 02:33:04.126570 2026] [:error] [pid 60346:tid 60370] [client 20.151.113.137:62922] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maul.php"] [unique_id "acge4HVrXSgLxlxLi9BC4QAAARM"]
[Sun Mar 29 02:33:04.610637 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:65499] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maul.php"] [unique_id "acge4HVrXSgLxlxLi9BC4wAAAQ8"]
[Sun Mar 29 02:33:05.235531 2026] [:error] [pid 39514:tid 39534] [client 20.151.113.137:64649] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maul.php"] [unique_id "acge4SkUyvlQod6qQu2p6AAAAMk"]
[Sun Mar 29 02:33:05.675746 2026] [:error] [pid 39514:tid 39545] [client 20.151.113.137:64237] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/maul.php"] [unique_id "acge4SkUyvlQod6qQu2p6gAAANQ"]
[Sun Mar 29 02:33:06.134748 2026] [:error] [pid 39514:tid 39536] [client 20.151.113.137:7030] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxw.php"] [unique_id "acge4ikUyvlQod6qQu2p6wAAAMs"]
[Sun Mar 29 02:33:06.619517 2026] [:error] [pid 39514:tid 39542] [client 20.151.113.137:64232] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxw.php"] [unique_id "acge4ikUyvlQod6qQu2p7AAAANE"]
[Sun Mar 29 02:33:07.054298 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:65512] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxw.php"] [unique_id "acge43VrXSgLxlxLi9BC6AAAARQ"]
[Sun Mar 29 02:33:07.521454 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:7016] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xxw.php"] [unique_id "acge4ykUyvlQod6qQu2p8gAAAMU"]
[Sun Mar 29 02:33:07.957668 2026] [:error] [pid 39514:tid 39543] [client 20.151.113.137:64740] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dass.php"] [unique_id "acge4ykUyvlQod6qQu2p9QAAANI"]
[Sun Mar 29 02:33:08.454747 2026] [:error] [pid 60346:tid 60353] [client 20.151.113.137:6453] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dass.php"] [unique_id "acge5HVrXSgLxlxLi9BC7AAAAQI"]
[Sun Mar 29 02:33:08.975566 2026] [:error] [pid 39429:tid 39506] [client 20.151.113.137:65453] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dass.php"] [unique_id "acge5E8pSj6sqgZaItnpuAAAAJQ"]
[Sun Mar 29 02:33:09.400772 2026] [:error] [pid 60346:tid 60356] [client 20.151.113.137:6343] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dass.php"] [unique_id "acge5XVrXSgLxlxLi9BC7wAAAQU"]
[Sun Mar 29 02:33:09.902378 2026] [:error] [pid 60346:tid 60373] [client 20.151.113.137:6756] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "acge5XVrXSgLxlxLi9BC8gAAARY"]
[Sun Mar 29 02:33:10.554442 2026] [:error] [pid 39428:tid 39475] [client 20.151.113.137:65441] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "acge5qXMrozFMIaP8nIGbAAAAFA"]
[Sun Mar 29 02:33:11.082149 2026] [:error] [pid 39428:tid 39468] [client 20.151.113.137:65518] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "acge56XMrozFMIaP8nIGbgAAAEk"]
[Sun Mar 29 02:33:11.618415 2026] [:error] [pid 60346:tid 60369] [client 20.151.113.137:64238] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/155.php"] [unique_id "acge53VrXSgLxlxLi9BC9gAAARI"]
[Sun Mar 29 02:33:12.362357 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:7000] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hots.php"] [unique_id "acge6HVrXSgLxlxLi9BC-QAAARA"]
[Sun Mar 29 02:33:12.805841 2026] [:error] [pid 60346:tid 60361] [client 20.151.113.137:6339] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hots.php"] [unique_id "acge6HVrXSgLxlxLi9BC_wAAAQo"]
[Sun Mar 29 02:33:13.311934 2026] [:error] [pid 39428:tid 39459] [client 20.151.113.137:6417] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hots.php"] [unique_id "acge6aXMrozFMIaP8nIGcgAAAEA"]
[Sun Mar 29 02:33:14.174392 2026] [:error] [pid 39428:tid 39463] [client 20.151.113.137:37250] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/hots.php"] [unique_id "acge6qXMrozFMIaP8nIGdAAAAEQ"]
[Sun Mar 29 02:33:14.594443 2026] [:error] [pid 39429:tid 39495] [client 20.151.113.137:37270] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "acge6k8pSj6sqgZaItnpvQAAAIk"]
[Sun Mar 29 02:33:15.047785 2026] [:error] [pid 39428:tid 39483] [client 20.151.113.137:64230] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "acge66XMrozFMIaP8nIGeAAAAFg"]
[Sun Mar 29 02:33:15.460752 2026] [:error] [pid 39429:tid 39486] [client 20.151.113.137:37301] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "acge608pSj6sqgZaItnpvwAAAIA"]
[Sun Mar 29 02:33:15.903574 2026] [:error] [pid 39428:tid 39479] [client 20.151.113.137:6721] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/8.php"] [unique_id "acge66XMrozFMIaP8nIGeQAAAFQ"]
[Sun Mar 29 02:33:16.354791 2026] [:error] [pid 39428:tid 39475] [client 20.151.113.137:64754] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "acge7KXMrozFMIaP8nIGegAAAFA"]
[Sun Mar 29 02:33:16.788178 2026] [:error] [pid 39514:tid 39527] [client 20.151.113.137:37276] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "acge7CkUyvlQod6qQu2p_gAAAMI"]
[Sun Mar 29 02:33:17.208780 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:64731] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "acge7XVrXSgLxlxLi9BDBgAAARA"]
[Sun Mar 29 02:33:17.768152 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:64751] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/about.php"] [unique_id "acge7XVrXSgLxlxLi9BDCAAAAQ0"]
[Sun Mar 29 02:33:18.193369 2026] [:error] [pid 60346:tid 60356] [client 20.151.113.137:7039] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "acge7nVrXSgLxlxLi9BDCgAAAQU"]
[Sun Mar 29 02:33:18.706918 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:60184] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "acge7ikUyvlQod6qQu2qAAAAAMg"]
[Sun Mar 29 02:33:19.204320 2026] [:error] [pid 39427:tid 39434] [client 20.151.113.137:64666] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "acge71vLf0RDUqcYq-ZTngAAAAI"]
[Sun Mar 29 02:33:19.951961 2026] [:error] [pid 39428:tid 39471] [client 20.151.113.137:65412] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/wp-blog.php"] [unique_id "acge76XMrozFMIaP8nIGggAAAEw"]
[Sun Mar 29 02:33:20.502878 2026] [:error] [pid 39514:tid 39531] [client 20.151.113.137:6410] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "acge8CkUyvlQod6qQu2qAQAAAMY"]
[Sun Mar 29 02:33:21.054981 2026] [:error] [pid 39514:tid 39535] [client 20.151.113.137:65507] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "acge8SkUyvlQod6qQu2qBAAAAMo"]
[Sun Mar 29 02:33:21.540901 2026] [:error] [pid 39514:tid 39550] [client 20.151.113.137:64653] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "acge8SkUyvlQod6qQu2qBgAAANg"]
[Sun Mar 29 02:33:22.061135 2026] [:error] [pid 39428:tid 39465] [client 20.151.113.137:64241] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ah25.php"] [unique_id "acge8qXMrozFMIaP8nIGigAAAEY"]
[Sun Mar 29 02:33:22.591339 2026] [:error] [pid 39514:tid 39541] [client 20.151.113.137:65491] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acge8ikUyvlQod6qQu2qCAAAANA"]
[Sun Mar 29 02:33:23.034183 2026] [:error] [pid 39429:tid 39507] [client 20.151.113.137:64206] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acge808pSj6sqgZaItnpwgAAAJU"]
[Sun Mar 29 02:33:23.552514 2026] [:error] [pid 39428:tid 39481] [client 20.151.113.137:65482] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acge86XMrozFMIaP8nIGjQAAAFY"]
[Sun Mar 29 02:33:24.351740 2026] [:error] [pid 39428:tid 39477] [client 20.151.113.137:63573] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/bnm.php"] [unique_id "acge9KXMrozFMIaP8nIGkwAAAFI"]
[Sun Mar 29 02:33:24.848220 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:64149] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gptsh.php"] [unique_id "acge9HVrXSgLxlxLi9BDFAAAARQ"]
[Sun Mar 29 02:33:25.407537 2026] [:error] [pid 60346:tid 60361] [client 20.151.113.137:6355] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gptsh.php"] [unique_id "acge9XVrXSgLxlxLi9BDFwAAAQo"]
[Sun Mar 29 02:33:25.821041 2026] [:error] [pid 60346:tid 60352] [client 20.151.113.137:37299] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gptsh.php"] [unique_id "acge9XVrXSgLxlxLi9BDGgAAAQE"]
[Sun Mar 29 02:33:26.266001 2026] [:error] [pid 39427:tid 39439] [client 20.151.113.137:65436] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gptsh.php"] [unique_id "acge9lvLf0RDUqcYq-ZTpwAAAAc"]
[Sun Mar 29 02:33:26.718176 2026] [:error] [pid 39427:tid 39445] [client 20.151.113.137:64759] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acge9lvLf0RDUqcYq-ZTqAAAAA0"]
[Sun Mar 29 02:33:27.232957 2026] [:error] [pid 39514:tid 39540] [client 20.151.113.137:6444] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acge9ykUyvlQod6qQu2qEwAAAM8"]
[Sun Mar 29 02:33:27.721178 2026] [:error] [pid 39514:tid 39541] [client 20.151.113.137:64755] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acge9ykUyvlQod6qQu2qFQAAANA"]
[Sun Mar 29 02:33:28.159925 2026] [:error] [pid 39514:tid 39528] [client 20.151.113.137:63538] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gifclass.php"] [unique_id "acge-CkUyvlQod6qQu2qFwAAAMM"]
[Sun Mar 29 02:33:28.603367 2026] [:error] [pid 39428:tid 39467] [client 20.151.113.137:62963] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "acge-KXMrozFMIaP8nIGlgAAAEg"]
[Sun Mar 29 02:33:29.071829 2026] [:error] [pid 39428:tid 39468] [client 20.151.113.137:65447] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "acge-aXMrozFMIaP8nIGmgAAAEk"]
[Sun Mar 29 02:33:29.490369 2026] [:error] [pid 39514:tid 39540] [client 20.151.113.137:37271] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "acge-SkUyvlQod6qQu2qHAAAAM8"]
[Sun Mar 29 02:33:29.938153 2026] [:error] [pid 39514:tid 39524] [client 20.151.113.137:62883] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws80.php"] [unique_id "acge-SkUyvlQod6qQu2qHgAAAMA"]
[Sun Mar 29 02:33:30.749034 2026] [:error] [pid 60346:tid 60351] [client 20.151.113.137:63601] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acge-nVrXSgLxlxLi9BDJwAAAQA"]
[Sun Mar 29 02:33:31.264748 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:64219] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acge-3VrXSgLxlxLi9BDKQAAARA"]
[Sun Mar 29 02:33:31.716497 2026] [:error] [pid 39429:tid 39502] [client 20.151.113.137:62925] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acge-08pSj6sqgZaItnp1AAAAJA"]
[Sun Mar 29 02:33:32.159836 2026] [:error] [pid 39429:tid 39497] [client 20.151.113.137:6372] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/as.php"] [unique_id "acge_E8pSj6sqgZaItnp1gAAAIs"]
[Sun Mar 29 02:33:32.626598 2026] [:error] [pid 39429:tid 39492] [client 20.151.113.137:65486] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws73.php"] [unique_id "acge_E8pSj6sqgZaItnp3QAAAIY"]
[Sun Mar 29 02:33:33.138567 2026] [:error] [pid 39428:tid 39474] [client 20.151.113.137:64739] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws73.php"] [unique_id "acge_aXMrozFMIaP8nIGnAAAAE8"]
[Sun Mar 29 02:33:33.587644 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:63597] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws73.php"] [unique_id "acge_XVrXSgLxlxLi9BDLgAAAQc"]
[Sun Mar 29 02:33:34.034687 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:64236] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws73.php"] [unique_id "acge_nVrXSgLxlxLi9BDMwAAAQY"]
[Sun Mar 29 02:33:34.458371 2026] [:error] [pid 60346:tid 60374] [client 20.151.113.137:7005] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "acge_nVrXSgLxlxLi9BDNQAAARc"]
[Sun Mar 29 02:33:34.962588 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:64129] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "acge_nVrXSgLxlxLi9BDNwAAARQ"]
[Sun Mar 29 02:33:35.462907 2026] [:error] [pid 39428:tid 39463] [client 20.151.113.137:7024] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "acge_6XMrozFMIaP8nIGngAAAEQ"]
[Sun Mar 29 02:33:35.896781 2026] [:error] [pid 39427:tid 39454] [client 20.151.113.137:6978] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-blog-header.php"] [unique_id "acge_1vLf0RDUqcYq-ZTtwAAABY"]
[Sun Mar 29 02:33:36.334162 2026] [:error] [pid 39427:tid 39435] [client 20.151.113.137:63583] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lowpr.php"] [unique_id "acgfAFvLf0RDUqcYq-ZTugAAAAM"]
[Sun Mar 29 02:33:36.769076 2026] [:error] [pid 39427:tid 39437] [client 20.151.113.137:62916] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lowpr.php"] [unique_id "acgfAFvLf0RDUqcYq-ZTvAAAAAU"]
[Sun Mar 29 02:33:37.184301 2026] [:error] [pid 39427:tid 39456] [client 20.151.113.137:65501] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lowpr.php"] [unique_id "acgfAVvLf0RDUqcYq-ZTwQAAABg"]
[Sun Mar 29 02:33:37.604294 2026] [:error] [pid 39427:tid 39454] [client 20.151.113.137:63502] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/lowpr.php"] [unique_id "acgfAVvLf0RDUqcYq-ZTxAAAABY"]
[Sun Mar 29 02:33:38.048978 2026] [:error] [pid 39427:tid 39434] [client 20.151.113.137:37252] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfd.php"] [unique_id "acgfAlvLf0RDUqcYq-ZTyAAAAAI"]
[Sun Mar 29 02:33:38.476898 2026] [:error] [pid 39429:tid 39507] [client 20.151.113.137:65514] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfd.php"] [unique_id "acgfAk8pSj6sqgZaItnp4QAAAJU"]
[Sun Mar 29 02:33:38.910166 2026] [:error] [pid 39427:tid 39450] [client 20.151.113.137:6383] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfd.php"] [unique_id "acgfAlvLf0RDUqcYq-ZTzAAAABI"]
[Sun Mar 29 02:33:39.342749 2026] [:error] [pid 39429:tid 39497] [client 20.151.113.137:64186] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/gfd.php"] [unique_id "acgfA08pSj6sqgZaItnp4wAAAIs"]
[Sun Mar 29 02:33:39.785730 2026] [:error] [pid 39514:tid 39534] [client 20.151.113.137:63590] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/144.php"] [unique_id "acgfAykUyvlQod6qQu2qLAAAAMk"]
[Sun Mar 29 02:33:40.301189 2026] [:error] [pid 39427:tid 39449] [client 20.151.113.137:64715] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/144.php"] [unique_id "acgfBFvLf0RDUqcYq-ZTzwAAABE"]
[Sun Mar 29 02:33:40.808153 2026] [:error] [pid 39427:tid 39433] [client 20.151.113.137:65429] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/144.php"] [unique_id "acgfBFvLf0RDUqcYq-ZT0AAAAAE"]
[Sun Mar 29 02:33:41.354105 2026] [:error] [pid 60346:tid 60373] [client 20.151.113.137:64207] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/144.php"] [unique_id "acgfBXVrXSgLxlxLi9BDPAAAARY"]
[Sun Mar 29 02:33:41.896366 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:6723] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "acgfBXVrXSgLxlxLi9BDQAAAAQ8"]
[Sun Mar 29 02:33:42.380072 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:64224] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "acgfBnVrXSgLxlxLi9BDRwAAAQ0"]
[Sun Mar 29 02:33:42.800880 2026] [:error] [pid 39428:tid 39468] [client 20.151.113.137:65515] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "acgfBqXMrozFMIaP8nIGpgAAAEk"]
[Sun Mar 29 02:33:43.277847 2026] [:error] [pid 39514:tid 39537] [client 20.151.113.137:6344] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/222.php"] [unique_id "acgfBykUyvlQod6qQu2qMQAAAMw"]
[Sun Mar 29 02:33:43.690882 2026] [:error] [pid 39514:tid 39528] [client 20.151.113.137:63543] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "acgfBykUyvlQod6qQu2qMwAAAMM"]
[Sun Mar 29 02:33:44.245295 2026] [:error] [pid 39514:tid 39527] [client 20.151.113.137:6985] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "acgfCCkUyvlQod6qQu2qNAAAAMI"]
[Sun Mar 29 02:33:44.799216 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:6769] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "acgfCHVrXSgLxlxLi9BDUwAAARA"]
[Sun Mar 29 02:33:45.324485 2026] [:error] [pid 39427:tid 39447] [client 20.151.113.137:62914] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/inputs.php"] [unique_id "acgfCVvLf0RDUqcYq-ZT3AAAAA8"]
[Sun Mar 29 02:33:45.744211 2026] [:error] [pid 39427:tid 39440] [client 20.151.113.137:6462] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "acgfCVvLf0RDUqcYq-ZT3QAAAAg"]
[Sun Mar 29 02:33:46.222872 2026] [:error] [pid 60346:tid 60374] [client 20.151.113.137:64189] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "acgfCnVrXSgLxlxLi9BDWwAAARc"]
[Sun Mar 29 02:33:46.642560 2026] [:error] [pid 60346:tid 60356] [client 20.151.113.137:64247] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "acgfCnVrXSgLxlxLi9BDXQAAAQU"]
[Sun Mar 29 02:33:47.105187 2026] [:error] [pid 39429:tid 39496] [client 20.151.113.137:62880] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wen.php"] [unique_id "acgfC08pSj6sqgZaItnp5wAAAIo"]
[Sun Mar 29 02:33:47.619219 2026] [:error] [pid 39427:tid 39454] [client 20.151.113.137:6990] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baixy.php"] [unique_id "acgfC1vLf0RDUqcYq-ZT4QAAABY"]
[Sun Mar 29 02:33:48.139131 2026] [:error] [pid 60346:tid 60370] [client 20.151.113.137:6734] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baixy.php"] [unique_id "acgfDHVrXSgLxlxLi9BDXwAAARM"]
[Sun Mar 29 02:33:48.621945 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:65473] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baixy.php"] [unique_id "acgfDHVrXSgLxlxLi9BDYQAAAQ0"]
[Sun Mar 29 02:33:49.085351 2026] [:error] [pid 39427:tid 39437] [client 20.151.113.137:6746] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/baixy.php"] [unique_id "acgfDVvLf0RDUqcYq-ZT5gAAAAU"]
[Sun Mar 29 02:33:49.512331 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:65443] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acgfDXVrXSgLxlxLi9BDYwAAARA"]
[Sun Mar 29 02:33:49.961044 2026] [:error] [pid 39427:tid 39441] [client 20.151.113.137:63491] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acgfDVvLf0RDUqcYq-ZT5wAAAAk"]
[Sun Mar 29 02:33:50.487679 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:6357] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acgfDnVrXSgLxlxLi9BDagAAAQ8"]
[Sun Mar 29 02:33:50.957740 2026] [:error] [pid 39514:tid 39543] [client 20.151.113.137:64678] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/uuu.php"] [unique_id "acgfDikUyvlQod6qQu2qQAAAANI"]
[Sun Mar 29 02:33:51.378611 2026] [:error] [pid 39429:tid 39492] [client 20.151.113.137:64713] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xsas.php"] [unique_id "acgfD08pSj6sqgZaItnp6gAAAIY"]
[Sun Mar 29 02:33:51.830280 2026] [:error] [pid 39428:tid 39483] [client 20.151.113.137:63610] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xsas.php"] [unique_id "acgfD6XMrozFMIaP8nIGrQAAAFg"]
[Sun Mar 29 02:33:52.289210 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:37310] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xsas.php"] [unique_id "acgfEHVrXSgLxlxLi9BDbQAAAQ0"]
[Sun Mar 29 02:33:52.732013 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:7035] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xsas.php"] [unique_id "acgfEHVrXSgLxlxLi9BDbgAAARQ"]
[Sun Mar 29 02:33:53.287965 2026] [:error] [pid 60346:tid 60357] [client 20.151.113.137:61801] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/callback.php"] [unique_id "acgfEXVrXSgLxlxLi9BDdAAAAQY"]
[Sun Mar 29 02:33:53.773524 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:63607] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/callback.php"] [unique_id "acgfEXVrXSgLxlxLi9BDdgAAAQc"]
[Sun Mar 29 02:33:54.238224 2026] [:error] [pid 39514:tid 39527] [client 20.151.113.137:6745] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/callback.php"] [unique_id "acgfEikUyvlQod6qQu2qRAAAAMI"]
[Sun Mar 29 02:33:54.659389 2026] [:error] [pid 60346:tid 60370] [client 20.151.113.137:62338] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/callback.php"] [unique_id "acgfEnVrXSgLxlxLi9BDegAAARM"]
[Sun Mar 29 02:33:55.164647 2026] [:error] [pid 39514:tid 39533] [client 20.151.113.137:64732] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "acgfEykUyvlQod6qQu2qRgAAAMg"]
[Sun Mar 29 02:33:55.597763 2026] [:error] [pid 39428:tid 39465] [client 20.151.113.137:37285] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "acgfE6XMrozFMIaP8nIGsQAAAEY"]
[Sun Mar 29 02:33:56.123064 2026] [:error] [pid 60346:tid 60354] [client 20.151.113.137:64140] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "acgfFHVrXSgLxlxLi9BDfgAAAQM"]
[Sun Mar 29 02:33:56.593287 2026] [:error] [pid 60346:tid 60353] [client 20.151.113.137:62868] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/public/vx.php"] [unique_id "acgfFHVrXSgLxlxLi9BDgQAAAQI"]
[Sun Mar 29 02:33:57.023464 2026] [:error] [pid 60346:tid 60368] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Sun Mar 29 02:33:57.241535 2026] [:error] [pid 60346:tid 60355] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Sun Mar 29 02:33:57.478902 2026] [:error] [pid 60346:tid 60351] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sun Mar 29 02:33:57.701136 2026] [:error] [pid 60346:tid 60354] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Sun Mar 29 02:33:57.920804 2026] [:error] [pid 60346:tid 60363] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 29 02:33:58.130595 2026] [:error] [pid 60346:tid 60352] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sun Mar 29 02:33:58.385023 2026] [:error] [pid 60346:tid 60359] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sun Mar 29 02:33:58.594044 2026] [:error] [pid 60346:tid 60365] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Mar 29 02:33:58.804947 2026] [:error] [pid 60346:tid 60362] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Sun Mar 29 02:33:59.020704 2026] [:error] [pid 60346:tid 60366] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sun Mar 29 02:33:59.230261 2026] [:error] [pid 60346:tid 60370] [client 20.151.113.137:64647] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sun Mar 29 02:33:59.464152 2026] [:error] [pid 60346:tid 60351] [client 20.151.113.137:64647] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acgfF3VrXSgLxlxLi9BDmAAAAQA"]
[Sun Mar 29 02:33:59.930066 2026] [:error] [pid 39429:tid 39508] [client 20.151.113.137:64671] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acgfF08pSj6sqgZaItnp7gAAAJY"]
[Sun Mar 29 02:34:00.383940 2026] [:error] [pid 39429:tid 39505] [client 20.151.113.137:64701] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acgfGE8pSj6sqgZaItnp8AAAAJM"]
[Sun Mar 29 02:34:00.835041 2026] [:error] [pid 60346:tid 60365] [client 20.151.113.137:65476] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws86.php"] [unique_id "acgfGHVrXSgLxlxLi9BDnwAAAQ4"]
[Sun Mar 29 02:34:01.430943 2026] [:error] [pid 39429:tid 39499] [client 20.151.113.137:63608] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "acgfGU8pSj6sqgZaItnp8wAAAI0"]
[Sun Mar 29 02:34:01.865110 2026] [:error] [pid 39429:tid 39493] [client 20.151.113.137:64704] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "acgfGU8pSj6sqgZaItnp9gAAAIc"]
[Sun Mar 29 02:34:02.366978 2026] [:error] [pid 60346:tid 60355] [client 20.151.113.137:63567] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "acgfGnVrXSgLxlxLi9BDpAAAAQQ"]
[Sun Mar 29 02:34:02.820115 2026] [:error] [pid 39429:tid 39486] [client 20.151.113.137:64674] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ws75.php"] [unique_id "acgfGk8pSj6sqgZaItnp-QAAAIA"]
[Sun Mar 29 02:34:03.335500 2026] [:error] [pid 60346:tid 60358] [client 20.151.113.137:64698] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgfG3VrXSgLxlxLi9BDpQAAAQc"]
[Sun Mar 29 02:34:03.871684 2026] [:error] [pid 60346:tid 60372] [client 20.151.113.137:61802] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgfG3VrXSgLxlxLi9BDpwAAARU"]
[Sun Mar 29 02:34:04.418050 2026] [:error] [pid 39427:tid 39442] [client 20.151.113.137:62975] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgfHFvLf0RDUqcYq-ZT9gAAAAo"]
[Sun Mar 29 02:34:05.303967 2026] [:error] [pid 39427:tid 39445] [client 20.151.113.137:62886] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/nw.php"] [unique_id "acgfHVvLf0RDUqcYq-ZT-AAAAA0"]
[Sun Mar 29 02:34:06.347300 2026] [:error] [pid 39514:tid 39541] [client 20.151.113.137:62945] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acgfHikUyvlQod6qQu2qTgAAANA"]
[Sun Mar 29 02:34:07.578099 2026] [:error] [pid 39429:tid 39487] [client 20.151.113.137:63552] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acgfH08pSj6sqgZaItnqBAAAAIE"]
[Sun Mar 29 02:34:08.219583 2026] [:error] [pid 39429:tid 39493] [client 20.151.113.137:64182] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acgfIE8pSj6sqgZaItnqBgAAAIc"]
[Sun Mar 29 02:34:09.334165 2026] [:error] [pid 39428:tid 39460] [client 20.151.113.137:64192] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jga.php"] [unique_id "acgfIaXMrozFMIaP8nIGuwAAAEE"]
[Sun Mar 29 02:34:10.222179 2026] [:error] [pid 60346:tid 60367] [client 20.151.113.137:6724] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtiiy.php"] [unique_id "acgfInVrXSgLxlxLi9BDsgAAARA"]
[Sun Mar 29 02:34:11.874756 2026] [:error] [pid 39514:tid 39529] [client 20.151.113.137:65489] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtiiy.php"] [unique_id "acgfIykUyvlQod6qQu2qWAAAAMQ"]
[Sun Mar 29 02:34:13.261177 2026] [:error] [pid 39427:tid 39440] [client 20.151.113.137:62857] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtiiy.php"] [unique_id "acgfJVvLf0RDUqcYq-ZUAgAAAAg"]
[Sun Mar 29 02:34:14.033019 2026] [:error] [pid 39514:tid 39539] [client 20.151.113.137:65464] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wtiiy.php"] [unique_id "acgfJikUyvlQod6qQu2qWgAAAM4"]
[Sun Mar 29 02:34:14.760114 2026] [:error] [pid 39514:tid 39547] [client 20.151.113.137:6757] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byypas.php"] [unique_id "acgfJikUyvlQod6qQu2qXQAAANY"]
[Sun Mar 29 02:34:16.165469 2026] [:error] [pid 39427:tid 39454] [client 20.151.113.137:7017] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byypas.php"] [unique_id "acgfKFvLf0RDUqcYq-ZUBgAAABY"]
[Sun Mar 29 02:34:16.985598 2026] [:error] [pid 39514:tid 39530] [client 20.151.113.137:64762] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byypas.php"] [unique_id "acgfKCkUyvlQod6qQu2qYwAAAMU"]
[Sun Mar 29 02:34:18.191280 2026] [:error] [pid 39514:tid 39525] [client 20.151.113.137:65454] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/byypas.php"] [unique_id "acgfKikUyvlQod6qQu2qZgAAAME"]
[Sun Mar 29 02:34:19.011010 2026] [:error] [pid 60346:tid 60364] [client 20.151.113.137:65418] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-png.php"] [unique_id "acgfK3VrXSgLxlxLi9BDvgAAAQ0"]
[Sun Mar 29 02:34:19.712111 2026] [:error] [pid 39427:tid 39451] [client 20.151.113.137:6456] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-png.php"] [unique_id "acgfK1vLf0RDUqcYq-ZUCAAAABM"]
[Sun Mar 29 02:34:20.234136 2026] [:error] [pid 60346:tid 60371] [client 20.151.113.137:64248] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-png.php"] [unique_id "acgfLHVrXSgLxlxLi9BDwwAAARQ"]
[Sun Mar 29 02:34:20.744762 2026] [:error] [pid 39427:tid 39437] [client 20.151.113.137:64221] [client 20.151.113.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/wp-png.php"] [unique_id "acgfLFvLf0RDUqcYq-ZUCQAAAAU"]
[Sun Mar 29 03:14:46.172389 2026] [:error] [pid 39429:tid 39497] [client 85.155.98.204:53576] [client 85.155.98.204] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/png"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acgopk8pSj6sqgZaItn2ygAAAIs"]
[Sun Mar 29 03:14:46.554272 2026] [:error] [pid 39429:tid 39505] [client 85.155.98.204:53576] [client 85.155.98.204] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||pumpbooking.com|F|2"] [data "TX:0=image/png"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acgopk8pSj6sqgZaItn2zQAAAJM"]
[Sun Mar 29 04:44:16.646093 2026] [:error] [pid 1524:tid 1530] [client 65.108.125.120:7612] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflik.aspx"] [unique_id "acg9oFoaWSl2asqQCh8D3QAAAQI"]
[Sun Mar 29 04:44:18.662926 2026] [:error] [pid 32257:tid 32340] [client 65.108.125.120:3404] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20betflix.aspx"] [unique_id "acg9oiE3TArOFrUtgWoZNgAAAJY"]
[Sun Mar 29 04:44:20.638591 2026] [:error] [pid 1524:tid 1538] [client 65.108.125.120:3410] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/casino%20wallet.aspx"] [unique_id "acg9pFoaWSl2asqQCh8D4wAAAQk"]
[Sun Mar 29 04:44:22.629904 2026] [:error] [pid 32257:tid 32323] [client 65.108.125.120:3420] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acg9piE3TArOFrUtgWoZPwAAAIU"]
[Sun Mar 29 04:44:24.611650 2026] [:error] [pid 1524:tid 1547] [client 65.108.125.120:3432] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/dg%20casino.aspx"] [unique_id "acg9qFoaWSl2asqQCh8D7gAAARA"]
[Sun Mar 29 04:44:26.594455 2026] [:error] [pid 32255:tid 32291] [client 65.108.125.120:3442] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acg9qmnfn-AtRoMbquw_OQAAAEA"]
[Sun Mar 29 04:44:28.582943 2026] [:error] [pid 32257:tid 32327] [client 65.108.125.120:35202] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/h25%20com.aspx"] [unique_id "acg9rCE3TArOFrUtgWoZTAAAAIk"]
[Sun Mar 29 04:44:30.555814 2026] [:error] [pid 32359:tid 32384] [client 65.108.125.120:35204] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/jili%20slot.aspx"] [unique_id "acg9rgMb8G3UzfQP3WjD6wAAANc"]
[Sun Mar 29 04:44:32.392764 2026] [:error] [pid 32257:tid 32327] [client 65.108.125.120:35216] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/joker%20vip.aspx"] [unique_id "acg9sCE3TArOFrUtgWoZVQAAAIk"]
[Sun Mar 29 04:44:34.368298 2026] [:error] [pid 1524:tid 1538] [client 65.108.125.120:35220] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/metal%20slot.aspx"] [unique_id "acg9sloaWSl2asqQCh8D-wAAAQk"]
[Sun Mar 29 04:44:36.202291 2026] [:error] [pid 32257:tid 32320] [client 65.108.125.120:35226] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20168.aspx"] [unique_id "acg9tCE3TArOFrUtgWoZXgAAAII"]
[Sun Mar 29 04:44:38.197591 2026] [:error] [pid 32257:tid 32339] [client 65.108.125.120:20318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20auto.aspx"] [unique_id "acg9tiE3TArOFrUtgWoZZgAAAJU"]
[Sun Mar 29 04:44:40.196644 2026] [:error] [pid 1524:tid 1537] [client 65.108.125.120:20320] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20betflik.aspx"] [unique_id "acg9uFoaWSl2asqQCh8ECgAAAQg"]
[Sun Mar 29 04:44:42.194831 2026] [:error] [pid 32257:tid 32328] [client 65.108.125.120:20334] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "acg9uiE3TArOFrUtgWoZbgAAAIo"]
[Sun Mar 29 04:44:44.181890 2026] [:error] [pid 32257:tid 32321] [client 65.108.125.120:20338] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20game.aspx"] [unique_id "acg9vCE3TArOFrUtgWoZeQAAAIM"]
[Sun Mar 29 04:44:46.020797 2026] [:error] [pid 32257:tid 32320] [client 65.108.125.120:20342] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acg9viE3TArOFrUtgWoZfAAAAII"]
[Sun Mar 29 04:44:48.006620 2026] [:error] [pid 32257:tid 32340] [client 65.108.125.120:48250] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20osaka.aspx"] [unique_id "acg9wCE3TArOFrUtgWoZhQAAAJY"]
[Sun Mar 29 04:44:49.998861 2026] [:error] [pid 32257:tid 32339] [client 65.108.125.120:48264] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "acg9wSE3TArOFrUtgWoZjAAAAJU"]
[Sun Mar 29 04:44:51.995521 2026] [:error] [pid 32257:tid 32339] [client 65.108.125.120:48268] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "acg9wyE3TArOFrUtgWoZlAAAAJU"]
[Sun Mar 29 04:44:53.850092 2026] [:error] [pid 32257:tid 32338] [client 65.108.125.120:48274] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acg9xSE3TArOFrUtgWoZmQAAAJQ"]
[Sun Mar 29 04:44:55.857232 2026] [:error] [pid 32257:tid 32336] [client 65.108.125.120:48282] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acg9xyE3TArOFrUtgWoZpQAAAJI"]
[Sun Mar 29 04:44:57.846077 2026] [:error] [pid 32257:tid 32336] [client 65.108.125.120:19882] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acg9ySE3TArOFrUtgWoZrQAAAJI"]
[Sun Mar 29 04:44:59.844692 2026] [:error] [pid 1524:tid 1535] [client 65.108.125.120:19894] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acg9y1oaWSl2asqQCh8EHQAAAQY"]
[Sun Mar 29 04:45:01.863385 2026] [:error] [pid 1524:tid 1556] [client 65.108.125.120:19902] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acg9zVoaWSl2asqQCh8EIAAAARg"]
[Sun Mar 29 04:45:03.886787 2026] [:error] [pid 32254:tid 32282] [client 65.108.125.120:19916] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acg9z6ug2IHuyGgCTn8H5wAAABI"]
[Sun Mar 29 04:45:05.926760 2026] [:error] [pid 32257:tid 32340] [client 65.108.125.120:19928] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot.aspx"] [unique_id "acg90SE3TArOFrUtgWoZugAAAJY"]
[Sun Mar 29 04:45:07.802719 2026] [:error] [pid 32255:tid 32309] [client 65.108.125.120:16886] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot168.aspx"] [unique_id "acg902nfn-AtRoMbquw_UAAAAFI"]
[Sun Mar 29 04:45:09.801452 2026] [:error] [pid 32359:tid 32379] [client 65.108.125.120:16902] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot99.aspx"] [unique_id "acg91QMb8G3UzfQP3WjEEQAAANI"]
[Sun Mar 29 04:45:11.800031 2026] [:error] [pid 32255:tid 32292] [client 65.108.125.120:16914] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20th.aspx"] [unique_id "acg912nfn-AtRoMbquw_VAAAAEE"]
[Sun Mar 29 04:45:13.791136 2026] [:error] [pid 1524:tid 1548] [client 65.108.125.120:16920] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20world.aspx"] [unique_id "acg92VoaWSl2asqQCh8EKgAAARE"]
[Sun Mar 29 04:45:37.427532 2026] [:error] [pid 32257:tid 32325] [client 65.108.125.120:48322] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "acg98SE3TArOFrUtgWoaAQAAAIc"]
[Sun Mar 29 04:45:39.273412 2026] [:error] [pid 32254:tid 32278] [client 65.108.125.120:21226] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20c4.aspx"] [unique_id "acg986ug2IHuyGgCTn8IBwAAAA4"]
[Sun Mar 29 04:45:41.261854 2026] [:error] [pid 32255:tid 32303] [client 65.108.125.120:21242] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20sa.aspx"] [unique_id "acg99Wnfn-AtRoMbquw_YwAAAEw"]
[Sun Mar 29 04:45:43.258869 2026] [:error] [pid 32254:tid 32283] [client 65.108.125.120:21256] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acg996ug2IHuyGgCTn8ICQAAABM"]
[Sun Mar 29 04:45:45.280250 2026] [:error] [pid 32254:tid 32269] [client 65.108.125.120:21266] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acg9-aug2IHuyGgCTn8IGAAAAAU"]
[Sun Mar 29 04:45:47.278991 2026] [:error] [pid 32359:tid 32362] [client 65.108.125.120:21268] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/w69%20slot.aspx"] [unique_id "acg9-wMb8G3UzfQP3WjEMQAAAME"]
[Sun Mar 29 04:45:49.279985 2026] [:error] [pid 32257:tid 32322] [client 65.108.125.120:28670] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/we88%20slot.aspx"] [unique_id "acg9_SE3TArOFrUtgWoaEgAAAIQ"]
[Sun Mar 29 04:45:51.264335 2026] [:error] [pid 32359:tid 32379] [client 65.108.125.120:28686] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acg9_wMb8G3UzfQP3WjEOgAAANI"]
[Sun Mar 29 04:45:53.104150 2026] [:error] [pid 1524:tid 1552] [client 65.108.125.120:28698] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/xo%20slot.aspx"] [unique_id "acg-AVoaWSl2asqQCh8EgwAAARQ"]
[Sun Mar 29 04:45:55.255978 2026] [:error] [pid 32257:tid 32329] [client 65.108.125.120:28702] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acg-AyE3TArOFrUtgWoaFwAAAIs"]
[Sun Mar 29 04:45:59.143136 2026] [:error] [pid 32254:tid 32266] [client 65.108.125.120:51156] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "acg-B6ug2IHuyGgCTn8IIQAAAAI"]
[Sun Mar 29 06:45:01.439941 2026] [:error] [pid 23167:tid 23188] [client 94.26.106.29:57934] [client 94.26.106.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.29, incrementing brute counter"] [hostname "www.pumpbooking.com"] [uri "/wp-login.php"] [unique_id "achZ7RIAHJCFaHff3_dTWgAAAdI"]
[Sun Mar 29 06:45:01.444695 2026] [:error] [pid 23167:tid 23188] [client 94.26.106.29:57934] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 29 08:00:03.851032 2026] [:error] [pid 23168:tid 23210] [client 43.157.172.39:40990] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "achrg2P8p0yRL8ot_28KFQAAAg0"]
[Sun Mar 29 10:04:42.477582 2026] [:error] [pid 23284:tid 23308] [client 54.36.179.84:53246] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aciIuozBujdPHsq7wySNFgAAApY"]
[Sun Mar 29 10:04:47.450919 2026] [:error] [pid 23284:tid 23294] [client 54.36.179.84:42916] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/robots.txt"] [unique_id "aciIv4zBujdPHsq7wySNHAAAAog"]
[Sun Mar 29 10:05:20.750381 2026] [:error] [pid 32359:tid 32372] [client 54.36.179.84:57698] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aciI4AMb8G3UzfQP3WjtUgAAAMs"]
[Sun Mar 29 10:05:23.246999 2026] [:error] [pid 32255:tid 32300] [client 54.36.179.84:43760] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/riches888%20pg.aspx"] [unique_id "aciI42nfn-AtRoMbquysmAAAAEk"]
[Sun Mar 29 10:05:27.052303 2026] [:error] [pid 23167:tid 23184] [client 54.36.179.84:44984] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/royal%20slot.aspx"] [unique_id "aciI5xIAHJCFaHff3_e13AAAAc4"]
[Sun Mar 29 10:05:29.784857 2026] [:error] [pid 32257:tid 32339] [client 54.36.179.84:44994] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aciI6SE3TArOFrUtgWpt_gAAAJU"]
[Sun Mar 29 10:05:32.849811 2026] [:error] [pid 23284:tid 23302] [client 54.36.179.84:45012] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aciI7IzBujdPHsq7wySNgwAAApA"]
[Sun Mar 29 10:05:36.276747 2026] [:error] [pid 23284:tid 23296] [client 54.36.179.84:52236] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/slot%20777.aspx"] [unique_id "aciI8IzBujdPHsq7wySNjwAAAoo"]
[Sun Mar 29 10:05:39.185021 2026] [:error] [pid 23284:tid 23291] [client 54.36.179.84:52246] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aciI84zBujdPHsq7wySNkwAAAoU"]
[Sun Mar 29 11:12:20.902834 2026] [:error] [pid 32359:tid 32381] [client 49.235.136.28:34044] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aciYlAMb8G3UzfQP3WjyCgAAANQ"]
[Sun Mar 29 13:12:37.556010 2026] [:error] [pid 23250:tid 23258] [client 54.37.252.59:48344] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aci0xZxrpj-dQjy1cvqYmwAAAkY"]
[Sun Mar 29 13:12:39.442813 2026] [:error] [pid 23137:tid 23160] [client 54.37.252.59:46810] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aci0xxaWQa7LdZ_qGFa3NQAAAZU"]
[Sun Mar 29 13:12:41.585092 2026] [:error] [pid 23167:tid 23190] [client 54.37.252.59:46826] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aci0yRIAHJCFaHff3_cIvwAAAdQ"]
[Sun Mar 29 13:12:43.660111 2026] [:error] [pid 23167:tid 23177] [client 54.37.252.59:46836] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aci0yxIAHJCFaHff3_cIyAAAAcc"]
[Sun Mar 29 13:12:45.659342 2026] [:error] [pid 23167:tid 23180] [client 54.37.252.59:40982] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aci0zRIAHJCFaHff3_cIzQAAAco"]
[Sun Mar 29 13:12:47.640014 2026] [:error] [pid 32359:tid 32366] [client 54.37.252.59:40984] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aci0zwMb8G3UzfQP3Wj76gAAAMU"]
[Sun Mar 29 13:12:49.564520 2026] [:error] [pid 32255:tid 32308] [client 54.37.252.59:40998] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aci00Wnfn-AtRoMbquz_LwAAAFE"]
[Sun Mar 29 13:12:51.674061 2026] [:error] [pid 32257:tid 32328] [client 54.37.252.59:41008] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aci00yE3TArOFrUtgWqMRAAAAIo"]
[Sun Mar 29 13:12:53.583615 2026] [:error] [pid 32359:tid 32384] [client 54.37.252.59:41022] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aci01QMb8G3UzfQP3Wj76wAAANc"]
[Sun Mar 29 13:12:55.512179 2026] [:error] [pid 23167:tid 23179] [client 54.37.252.59:54688] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aci01xIAHJCFaHff3_cI5QAAAck"]
[Sun Mar 29 13:12:57.358794 2026] [:error] [pid 32255:tid 32303] [client 54.37.252.59:54700] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aci02Wnfn-AtRoMbquz_QQAAAEw"]
[Sun Mar 29 13:12:59.383165 2026] [:error] [pid 23167:tid 23186] [client 54.37.252.59:54716] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aci02xIAHJCFaHff3_cI8gAAAdA"]
[Sun Mar 29 13:13:01.322952 2026] [:error] [pid 23167:tid 23173] [client 54.37.252.59:54732] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aci03RIAHJCFaHff3_cI-gAAAcM"]
[Sun Mar 29 13:13:03.421737 2026] [:error] [pid 23284:tid 23304] [client 54.37.252.59:54746] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aci034zBujdPHsq7wyTAZQAAApI"]
[Sun Mar 29 13:13:05.337790 2026] [:error] [pid 23168:tid 23220] [client 54.37.252.59:52084] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aci04WP8p0yRL8ot_28zIQAAAhc"]
[Sun Mar 29 13:13:07.316187 2026] [:error] [pid 23167:tid 23194] [client 54.37.252.59:52086] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aci04xIAHJCFaHff3_cJBwAAAdg"]
[Sun Mar 29 13:13:09.290600 2026] [:error] [pid 32255:tid 32313] [client 54.37.252.59:52102] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aci05Wnfn-AtRoMbquz_TQAAAFY"]
[Sun Mar 29 13:13:11.367818 2026] [:error] [pid 23284:tid 23301] [client 54.37.252.59:52114] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aci054zBujdPHsq7wyTAcAAAAo8"]
[Sun Mar 29 13:13:13.323670 2026] [:error] [pid 32255:tid 32304] [client 54.37.252.59:52120] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aci06Wnfn-AtRoMbquz_VQAAAE0"]
[Sun Mar 29 13:13:15.394834 2026] [:error] [pid 32255:tid 32308] [client 54.37.252.59:36330] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aci062nfn-AtRoMbquz_XAAAAFE"]
[Sun Mar 29 13:13:17.509172 2026] [:error] [pid 23167:tid 23192] [client 54.37.252.59:36332] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aci07RIAHJCFaHff3_cJGQAAAdY"]
[Sun Mar 29 13:13:19.586313 2026] [:error] [pid 23167:tid 23178] [client 54.37.252.59:36342] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aci07xIAHJCFaHff3_cJIQAAAcg"]
[Sun Mar 29 13:13:21.806102 2026] [:error] [pid 32255:tid 32307] [client 54.37.252.59:36348] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aci08Wnfn-AtRoMbquz_YgAAAFA"]
[Sun Mar 29 13:13:25.655723 2026] [:error] [pid 32257:tid 32324] [client 54.37.252.59:60222] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aci09SE3TArOFrUtgWqMVgAAAIY"]
[Sun Mar 29 13:13:48.177802 2026] [:error] [pid 23168:tid 23201] [client 54.37.252.59:60040] [client 54.37.252.59] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "40.77.167.14_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "pumpbooking.com"] [uri "/index.html"] [unique_id "aci1CmP8p0yRL8ot_28zSwAAAgQ"]
[Sun Mar 29 13:14:00.163429 2026] [:error] [pid 23168:tid 23217] [client 54.37.252.59:60040] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20joker.aspx"] [unique_id "aci1GGP8p0yRL8ot_28zXQAAAhQ"]
[Sun Mar 29 13:14:02.144717 2026] [:error] [pid 23137:tid 23141] [client 54.37.252.59:51176] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20plus.aspx"] [unique_id "aci1GhaWQa7LdZ_qGFa3dwAAAYI"]
[Sun Mar 29 13:14:04.028223 2026] [:error] [pid 23284:tid 23288] [client 54.37.252.59:51192] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aci1HIzBujdPHsq7wyTAqgAAAoI"]
[Sun Mar 29 13:14:06.112657 2026] [:error] [pid 23168:tid 23214] [client 54.37.252.59:55414] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20soft.aspx"] [unique_id "aci1HmP8p0yRL8ot_28zaAAAAhE"]
[Sun Mar 29 13:14:08.060656 2026] [:error] [pid 32257:tid 32336] [client 54.37.252.59:55424] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20thailand.aspx"] [unique_id "aci1ICE3TArOFrUtgWqMggAAAJI"]
[Sun Mar 29 13:14:09.955719 2026] [:error] [pid 23284:tid 23304] [client 54.37.252.59:55436] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pg%20wallet.aspx"] [unique_id "aci1IYzBujdPHsq7wyTAsAAAApI"]
[Sun Mar 29 13:14:11.817792 2026] [:error] [pid 23167:tid 23174] [client 54.37.252.59:55444] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aci1IxIAHJCFaHff3_cJvwAAAcQ"]
[Sun Mar 29 13:14:13.741157 2026] [:error] [pid 32257:tid 32342] [client 54.37.252.59:55456] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/pp%20slot.aspx"] [unique_id "aci1JSE3TArOFrUtgWqMhwAAAJg"]
[Sun Mar 29 13:14:15.601087 2026] [:error] [pid 23284:tid 23291] [client 54.37.252.59:34364] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/riches777%20pg.aspx"] [unique_id "aci1J4zBujdPHsq7wyTAtgAAAoU"]
[Sun Mar 29 13:14:17.655443 2026] [:error] [pid 32257:tid 32329] [client 54.37.252.59:34376] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sa%20casino.aspx"] [unique_id "aci1KSE3TArOFrUtgWqMigAAAIs"]
[Sun Mar 29 13:14:19.607496 2026] [:error] [pid 23167:tid 23185] [client 54.37.252.59:34388] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aci1KxIAHJCFaHff3_cJ2AAAAc8"]
[Sun Mar 29 13:14:21.392888 2026] [:error] [pid 23137:tid 23150] [client 54.37.252.59:34404] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aci1LRaWQa7LdZ_qGFa3gwAAAYs"]
[Sun Mar 29 13:14:23.383064 2026] [:error] [pid 1524:tid 1535] [client 54.37.252.59:34416] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20joker.aspx"] [unique_id "aci1L1oaWSl2asqQCh9QkAAAAQY"]
[Sun Mar 29 13:14:25.227482 2026] [:error] [pid 23250:tid 23257] [client 54.37.252.59:59268] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aci1MZxrpj-dQjy1cvqY9gAAAkU"]
[Sun Mar 29 13:14:27.132526 2026] [:error] [pid 23168:tid 23218] [client 54.37.252.59:59280] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aci1M2P8p0yRL8ot_28zcgAAAhU"]
[Sun Mar 29 13:14:29.219426 2026] [:error] [pid 32359:tid 32385] [client 54.37.252.59:59288] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aci1NQMb8G3UzfQP3Wj8GgAAANg"]
[Sun Mar 29 13:14:31.185684 2026] [:error] [pid 23137:tid 23150] [client 54.37.252.59:59298] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aci1NxaWQa7LdZ_qGFa3jQAAAYs"]
[Sun Mar 29 13:14:33.121511 2026] [:error] [pid 23284:tid 23309] [client 54.37.252.59:59310] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aci1OYzBujdPHsq7wyTA1QAAApc"]
[Sun Mar 29 13:14:35.033781 2026] [:error] [pid 23284:tid 23296] [client 54.37.252.59:43020] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufa%20vip.aspx"] [unique_id "aci1O4zBujdPHsq7wyTA3gAAAoo"]
[Sun Mar 29 13:14:37.035142 2026] [:error] [pid 1524:tid 1543] [client 54.37.252.59:43024] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%201668.aspx"] [unique_id "aci1PVoaWSl2asqQCh9QlwAAAQw"]
[Sun Mar 29 13:14:39.009364 2026] [:error] [pid 23167:tid 23186] [client 54.37.252.59:43034] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/ufabet%20net.aspx"] [unique_id "aci1PxIAHJCFaHff3_cJ4AAAAdA"]
[Sun Mar 29 13:14:41.080700 2026] [:error] [pid 23284:tid 23286] [client 54.37.252.59:43048] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "pumpbooking.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aci1QYzBujdPHsq7wyTA7AAAAoA"]
[Sun Mar 29 13:14:43.132094 2026] [:error] [pid 32255:tid 32292] [client 54.37.252.59:43058] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aci1Q2nfn-AtRoMbquz_ngAAAEE"]
[Sun Mar 29 13:14:47.099715 2026] [:error] [pid 32255:tid 32294] [client 54.37.252.59:36054] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aci1R2nfn-AtRoMbquz_qwAAAEM"]
[Sun Mar 29 14:01:13.962800 2026] [:error] [pid 23168:tid 23219] [client 217.226.87.111:59099] [client 217.226.87.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.226.87.111, incrementing ddos counter"] [hostname "pumpbooking.com"] [uri "/xmlrpc.php"] [unique_id "acjAKWP8p0yRL8ot_285fwAAAhY"]
[Sun Mar 29 14:01:13.968532 2026] [:error] [pid 23168:tid 23219] [client 217.226.87.111:59099] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 29 15:01:33.408264 2026] [:error] [pid 23137:tid 23141] [client 43.135.145.77:40214] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "acjOTRaWQa7LdZ_qGFbD9gAAAYI"]
[Sun Mar 29 15:08:11.564351 2026] [:error] [pid 23167:tid 23174] [client 43.156.156.96:42110] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pumpbooking.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pumpbooking.com"] [uri "/"] [unique_id "acjP2xIAHJCFaHff3_c7qwAAAcQ"]
[Thu Apr 16 01:43:30.171108 2026] [ssl:warn] [pid 4016:tid 4016] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 01:43:30.171137 2026] [ssl:warn] [pid 4016:tid 4016] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:40.755822 2026] [ssl:warn] [pid 52554:tid 52554] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:40.755851 2026] [ssl:warn] [pid 52554:tid 52554] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:42.729095 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:42.729122 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:07.788788 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:07.788816 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:22.901334 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:22.901362 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:29.859675 2026] [ssl:warn] [pid 53231:tid 53231] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:29.859712 2026] [ssl:warn] [pid 53231:tid 53231] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:31.937078 2026] [ssl:warn] [pid 53237:tid 53237] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:31.937105 2026] [ssl:warn] [pid 53237:tid 53237] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:22.556620 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:22.556650 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:24.558550 2026] [ssl:warn] [pid 26973:tid 26973] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:24.558577 2026] [ssl:warn] [pid 26973:tid 26973] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:47:58.689401 2026] [ssl:warn] [pid 57468:tid 57468] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:47:58.689441 2026] [ssl:warn] [pid 57468:tid 57468] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:48:00.741262 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:48:00.741330 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 00:03:16.725293 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:16.725322 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:40.984050 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:40.984078 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:43.040160 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:43.040187 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.252409 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.252438 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:02.135725 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:02.135751 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:12.954480 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:12.954509 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:14.956943 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:14.956969 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:45.836568 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:45.836597 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:47.850654 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:47.850682 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:46.555583 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:46.555615 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:48.618651 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:48.618694 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 00:02:18.142109 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:18.142138 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.419188 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.419217 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.454900 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.454934 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:55.869276 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:55.869303 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:04.805451 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:04.805476 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:13.601831 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:13.601857 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:15.609271 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:15.609300 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.544319 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.544346 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.547389 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.547416 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:55.777060 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:55.777088 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:57.809369 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:57.809396 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 00:02:31.203990 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:31.204019 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:49.885814 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:49.885842 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:51.989187 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:51.989222 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.450296 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.450373 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.366268 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.366296 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.216774 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.216802 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.287287 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.287314 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:07.698826 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:07.698853 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:09.747078 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:09.747106 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:44.801707 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:44.801737 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:46.856566 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:46.856593 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:51.804318 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:51.804348 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.251911 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.251938 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:11.023198 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:11.023224 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.412344 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.412384 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.292227 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.292286 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.286078 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.286106 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:13.883750 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:13.883777 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:15.910330 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:15.910358 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.416809 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.416838 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.480812 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.480840 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 10:09:52.150455 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:52.150483 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:53.122700 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:53.122729 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.530620 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.530649 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:10.716677 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:10.716704 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:20.606082 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:20.606122 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:26.548905 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:26.548932 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:28.632314 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:28.632348 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:46.853411 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:46.853439 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:48.914414 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:48.914440 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.262276 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.262319 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.395763 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.395790 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:45.254521 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:45.254552 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:47.744728 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:47.744755 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:02.990733 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:02.990772 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:12.535632 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:12.535659 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.454562 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.454591 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:21.548010 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:21.548038 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:30.889570 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:30.889598 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:32.976803 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:32.976830 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:03.072924 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:03.072953 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:05.149586 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:05.149622 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 13:25:48.708711 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:48.708745 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:44.200319 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:44.200348 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.475525 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.475552 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:03.825646 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:03.825673 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:13.124023 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:13.124051 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:27.139464 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:27.139492 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:29.176384 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:29.176412 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:41.613017 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:41.613046 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:43.639413 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:43.639440 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.476132 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.476160 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.457590 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.457622 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 14:48:57.568363 2026] [:error] [pid 46953:tid 46962] [client 84.239.43.30:5370] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA2UnlpdHh-P6wKbr6QQAAAkY"]
[Thu Apr 23 14:48:58.880212 2026] [:error] [pid 42971:tid 43005] [client 84.239.43.30:7219] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA2jEP2_5RswrH8bECfwAAABM"]
[Thu Apr 23 14:49:01.271512 2026] [:error] [pid 64998:tid 65019] [client 84.239.43.30:58323] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA3YV5EysYcTLjmwjXPgAAAdE"]
[Thu Apr 23 14:49:01.728798 2026] [:error] [pid 64998:tid 65008] [client 84.239.43.30:50386] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA3YV5EysYcTLjmwjXPwAAAcY"]
[Thu Apr 23 14:49:04.603654 2026] [:error] [pid 59700:tid 59705] [client 84.239.43.30:5897] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA4JXyGZJFeAIDWtnYjAAAAUM"]
[Thu Apr 23 14:49:05.641899 2026] [:error] [pid 59700:tid 59724] [client 84.239.43.30:30812] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA4ZXyGZJFeAIDWtnYjgAAAVY"]
[Thu Apr 23 14:49:10.450435 2026] [:error] [pid 64998:tid 65017] [client 84.239.43.30:16046] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA5oV5EysYcTLjmwjXSwAAAc8"]
[Thu Apr 23 14:49:10.962265 2026] [:error] [pid 64998:tid 65026] [client 84.239.43.30:62926] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA5oV5EysYcTLjmwjXTQAAAdg"]
[Thu Apr 23 14:49:12.824702 2026] [:error] [pid 42973:tid 43052] [client 84.239.43.30:30030] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA6G6I0QqmmmLTHE2ZAAAAAIk"]
[Thu Apr 23 14:49:13.345332 2026] [:error] [pid 64998:tid 65002] [client 84.239.43.30:56212] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA6YV5EysYcTLjmwjXTwAAAcA"]
[Thu Apr 23 14:49:19.517165 2026] [:error] [pid 42973:tid 43043] [client 84.239.43.30:9973] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA726I0QqmmmLTHE2ZDQAAAIA"]
[Thu Apr 23 14:49:20.860847 2026] [:error] [pid 64967:tid 64980] [client 84.239.43.30:45640] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA8IAV4GfOOdX8QzpQIAAAAYs"]
[Thu Apr 23 14:49:21.621489 2026] [:error] [pid 43083:tid 43100] [client 84.239.43.30:42336] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/robots.txt"] [unique_id "aenA8TC5hrvNXosL83JIEwAAAM8"]
[Thu Apr 23 14:49:22.346733 2026] [:error] [pid 43083:tid 43090] [client 84.239.43.30:48379] [client 84.239.43.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pumpbooking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pumpbooking.com"] [uri "/"] [unique_id "aenA8jC5hrvNXosL83JIFgAAAMU"]
[Fri Apr 24 03:34:44.903488 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:44.903518 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.347926 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.347953 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.432282 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.432322 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.196761 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.196787 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:15.183284 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:15.183314 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.250737 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.250765 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:36.587344 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:36.587372 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:38.687955 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:38.687986 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:33.914155 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:33.914187 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:36.000703 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:36.000746 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:09.571509 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:09.571541 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:38.949202 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:38.949268 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:56.747577 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:56.747605 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:03.601772 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:03.601808 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:14.938132 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:14.938174 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:40.784700 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:40.784728 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.224303 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.224330 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 00:01:48.795101 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:48.795122 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:48.137121 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:48.137149 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.281429 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.281457 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.502966 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.502992 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:14.806338 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:14.806386 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:28.673874 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:28.673902 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:30.670635 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:30.670663 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:01.864698 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:01.864724 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:03.959910 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:03.959937 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:46.859812 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:46.859844 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:48.939617 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:48.939649 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:13.939672 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:13.939702 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:17.518649 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:17.518678 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.495940 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.495969 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:34.631726 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:34.631754 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:45.062732 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:45.062758 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.321829 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.321865 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:01.141671 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:01.141722 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:10.974224 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:10.974284 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:17.811676 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:17.811703 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:19.844465 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:19.844495 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:37.460796 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:37.460827 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:40.075473 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:40.075501 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:16.714060 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:16.714089 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:18.699842 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:18.699869 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:43.049874 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:43.049904 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.317923 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.317952 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:00.632290 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:00.632317 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.296379 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.296406 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:16.059110 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:16.059139 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:18.068225 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:18.068294 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:43.618549 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:43.618580 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:45.666288 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:45.666314 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:14.728321 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:14.728348 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:16.760199 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:16.760287 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:14.687673 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:14.687708 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:29.662933 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:29.662960 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:24.702221 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:24.702281 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 09:00:41.068798 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:41.068872 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:08.972090 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:08.972169 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:33.958955 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:33.958973 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.323654 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.323681 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:09.993984 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:09.994057 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:46.031566 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:46.031594 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.308884 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.308912 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.185591 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.185618 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.375340 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.375360 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:49.371673 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:49.371702 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.524219 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.524277 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.481904 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.481931 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:14.651118 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:14.651144 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:20.909422 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:20.909450 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.250642 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.250672 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:54.178212 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:54.178266 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:56.116003 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:56.116033 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:30.700457 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:30.700484 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:32.622874 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:32.622901 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.449081 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.449113 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.418801 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.418828 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:30.050497 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:30.050524 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:25.673122 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:25.673151 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:45.979191 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:45.979220 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:48.155767 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:48.155794 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:56.990484 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:56.990512 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.287524 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.287550 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:14.064930 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:14.064957 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:16.035337 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:16.035364 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:39.725027 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:39.725060 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:41.669975 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:41.670000 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:16.726581 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:16.726611 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:18.702506 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:18.702534 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:11.890106 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:11.890134 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.294074 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.294101 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.507040 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.507073 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:50.852790 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:50.852821 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:11.305656 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:11.305695 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.484619 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.484663 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:36.826800 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:36.826838 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:06.397390 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:06.397420 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:08.585670 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:08.585697 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:22.773906 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:22.773923 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:31.955436 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:31.955471 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:38.864005 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:38.864034 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:40.816517 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:40.816544 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:06.985751 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:06.985779 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:08.937727 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:08.937756 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:52.061445 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:52.061473 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:54.056972 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:54.057001 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:13.095596 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:13.095636 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:52.599796 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:52.599862 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.265105 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.265140 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:01.804741 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:01.804773 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:50.573754 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:50.573784 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:35.100950 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:35.100979 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:00.081393 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:00.081425 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:35.773325 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:35.773355 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.248027 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.248065 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.535211 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.535280 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.327960 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.327988 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:02.792104 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:02.792131 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.290994 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.291028 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.457512 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.457549 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:06.669374 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:06.669401 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:15.824232 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:15.824291 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:28.748823 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:28.748851 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:30.766701 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:30.766740 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:16.365149 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:16.365197 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:19.160571 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:19.160597 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.305704 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.305732 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.281228 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.281286 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:29:07.145314 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:07.145464 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:16.690176 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:16.690216 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.321768 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.321806 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.433154 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.433196 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:08.796726 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:08.796753 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:17.816023 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:17.816051 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:25.720922 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:25.720951 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:27.609558 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:27.609586 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.229643 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.229671 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:46.140191 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:46.140229 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:04.580152 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:04.580180 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.504670 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.504701 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:54.391067 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:54.391096 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:56.707618 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:56.707647 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:04.589314 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:04.589341 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:14.029969 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:14.030017 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:28.033174 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:28.033201 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:30.031785 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:30.031811 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.197427 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.197456 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.200519 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.200549 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.464945 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.464980 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.485948 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.485973 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:22.737560 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:22.737589 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:53.310592 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:53.310626 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:55.590709 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:55.590752 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.512954 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.512980 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:27.718942 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:27.718971 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.492638 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.492680 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.400684 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.400711 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:31.811445 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:31.811482 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:33.718146 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:33.718174 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.559887 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.559913 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.473184 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.473225 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:24:47.105648 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:47.105679 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.403308 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.403338 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:39.992419 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:39.992445 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:02.043884 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:02.043912 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:17:59.491393 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:17:59.491459 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:15.088190 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:15.088194 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.458448 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.458498 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:23.753900 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:23.753928 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:40.147996 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:40.148024 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:50.973723 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:50.973751 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:04.176568 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:04.176792 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:12.914893 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:12.914919 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.383809 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.383838 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:40.119870 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:40.119906 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:49.122150 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:49.122177 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:51.999527 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:51.999555 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.223164 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.223178 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.462445 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.462473 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.581150 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.581191 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:32.616644 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:32.616745 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:34.684842 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:34.684873 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.374326 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.374353 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.296614 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.296643 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:31.722083 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:31.722112 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:33.604576 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:33.604613 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:44.529522 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:44.529550 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:43.158030 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:43.158058 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.247467 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.247496 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.418817 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.418842 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:12.040248 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:12.040248 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:16.963392 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:16.963445 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:18.840630 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:18.840658 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:28:59.805160 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:28:59.805189 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:01.728502 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:01.728528 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:47.011516 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:47.011549 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:48.932490 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:48.932519 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.554843 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.554873 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:18.729908 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:18.729908 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.271429 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.271457 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:07.022773 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:07.022803 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:51.821600 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:51.821652 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:53.968647 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:53.968675 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.241931 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.241980 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.225174 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.225200 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:25.928147 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:25.928184 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:27.824767 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:27.824797 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:52.733969 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:52.733996 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:54.665081 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:54.665111 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.540242 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.540272 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.443040 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.443065 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:34.850864 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:34.850904 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.398521 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.398549 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.419117 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.419142 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.319057 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.319088 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 14:14:10.676303 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:10.676347 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:37.571829 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:37.571873 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:39.640007 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:39.640034 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:53.726385 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:53.726415 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.524374 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.524400 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.195782 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.195809 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:12.138852 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:12.138888 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:58.915620 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:58.915651 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:00.807324 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:00.807351 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:57.858873 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:57.858900 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:37:00.150312 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:37:00.150345 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:39.482210 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:39.482269 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:41.881765 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:41.881804 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.301387 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.301414 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.545890 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.545918 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.266142 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.266171 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:25.168319 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:25.168359 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.373903 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.373932 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.321311 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.321311 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:48.705830 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:48.705866 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:50.646224 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:50.646284 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.550109 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.550137 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.453836 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.453867 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:43.677483 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:43.677513 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:45.593749 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:45.593792 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:34.365888 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:34.365919 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.536299 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.536326 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:49.074835 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:49.074864 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:50.956673 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:50.956701 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:03.983573 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:03.983600 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:14.874843 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:14.874870 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.357356 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.357384 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.236978 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.237007 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.522815 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.522846 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.456404 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.456431 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:35.027688 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:35.027716 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:36.988881 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:36.988959 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:54.530584 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:54.530614 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:50.642654 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:50.642685 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:01.074445 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:01.074474 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.272591 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.272618 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:19.844907 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:19.844950 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.344072 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.344100 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.382271 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.382312 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.527283 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.527311 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:50.542284 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:50.542321 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:52.805552 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:52.805583 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.326205 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.326265 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:17.000544 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:17.000630 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:30.757152 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:30.757183 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:32.634719 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:32.634745 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.255899 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.255931 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:07.131664 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:07.131692 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:50.030022 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:50.030053 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:51.935858 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:51.935885 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:08:05.226815 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:05.226859 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:36.043599 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:36.043638 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:42.261599 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:42.261630 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.439533 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.439561 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:58.842720 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:58.842745 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:07.771814 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:07.771856 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.483127 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.483154 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.271819 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.271859 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.519455 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.519483 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.342680 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.342708 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.377607 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.377634 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.203909 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.203935 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:42.191916 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:42.191944 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.544753 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.544781 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.582651 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.582680 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:05.796711 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:05.796711 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.536697 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.536720 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.412385 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.412434 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.313944 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.313973 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.203048 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.203078 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:56.930307 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:56.930336 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:58.817863 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:58.817898 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:04.712112 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:04.712142 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:17.985841 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:17.985868 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:37.769107 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:37.769135 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.221579 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.221607 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:50.275356 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:50.275404 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.504049 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.504079 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.512482 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.512509 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:18.032308 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:18.032360 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:31.772802 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:31.772832 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:33.660711 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:33.660739 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:43.100043 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:43.100068 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:44.932414 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:44.932440 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.346385 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.346413 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.183332 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.183360 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:51.610399 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:51.610432 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:53.867406 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:53.867434 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.226491 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.226521 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.265443 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.265472 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:29.024092 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:29.024119 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:30.898678 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:30.898739 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:43.847253 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:43.847291 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:42.136048 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:42.136077 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:43.990356 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:43.990385 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:27.079140 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:27.079171 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:28.928016 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:28.928043 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:00.901741 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:00.901820 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:04.893892 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:04.893940 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:45.925961 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:45.926003 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:48.168703 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:48.168740 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:04.000798 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:04.000841 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:12.600973 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:12.600999 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.330829 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.330858 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:20.170400 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:20.170427 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.483757 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.483786 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.325318 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.325344 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.320541 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.320570 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:05.152934 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:05.152960 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:41.193502 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:41.193530 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.419096 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.419123 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:58.024964 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:58.024990 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:08.851438 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:08.851463 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.585426 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.585452 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.387002 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.387049 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:28.820098 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:28.820125 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.568290 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.568316 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.320038 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.320064 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:51.165695 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:51.165721 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:42.318340 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:42.318369 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.511547 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.511573 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.580041 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.580068 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.275274 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.275331 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:13.907070 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:13.907097 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:15.693137 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:15.693164 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:10.176533 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:10.176573 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:12.011508 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:12.011536 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:55.882327 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:55.882363 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:57.686055 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:57.686081 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:38.844315 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:38.844341 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.345862 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.345893 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:26.946979 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:26.947008 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.290464 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.290500 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:32.640901 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:32.640907 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.321985 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.322012 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.352443 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.352471 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.428446 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.428476 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.249733 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.249772 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:19.610824 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:19.610854 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:41.686264 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:41.686296 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:43.866388 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:43.866415 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.492137 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.492164 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:09.729388 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:09.729429 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.498679 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.498707 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.341929 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.341957 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.236030 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.236057 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:30.078162 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:30.078188 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:28.160855 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:28.160881 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:29.965802 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:29.965829 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:56.435575 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:56.435604 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:58.619499 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:58.619526 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:50.008624 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:50.008652 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:04.124658 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:04.124687 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:17.896421 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:17.896447 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:19.718973 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:19.719001 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.556648 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.556677 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.354417 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.354444 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:57.163139 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:57.163167 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:44.801833 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:44.801862 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:46.643879 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:46.643905 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.285039 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.285051 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:05.360727 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:05.360764 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:10.865034 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:10.865067 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.179443 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.179467 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:03.128319 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:03.128346 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:09.886797 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:09.886824 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:11.660606 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:11.660633 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:53.979963 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:53.979991 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:56.077145 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:56.077171 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:28.848225 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:28.848284 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.618486 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.618512 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:52.664052 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:52.664085 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.259635 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.259663 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:12.639461 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:12.639461 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:26.079102 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:26.079126 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:32.005470 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:32.005505 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:33.787317 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:33.787345 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.213123 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.213232 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.410412 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.410441 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.188178 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.188205 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.414786 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.414812 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.169100 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.169128 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:51.519493 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:51.519526 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.246474 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.246500 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.289476 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.289515 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:14.804135 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:14.804161 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.171905 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.171931 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:22.916071 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:22.916096 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:42.919403 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:42.919432 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:38.725218 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:38.725279 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:32.019090 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:32.019123 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:33.736885 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:33.736920 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:49.767268 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:49.767296 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.517161 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.517199 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:54.936027 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:54.936070 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.440508 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.440535 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:16.126408 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:16.126464 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.574168 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.574205 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.400513 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.400540 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:54.133199 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:54.133224 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:08.057198 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:08.057227 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:29.664430 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:29.664458 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.401623 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.401649 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:14.144483 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:14.144510 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:28.650430 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:28.650472 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.416843 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.416871 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:42.442166 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:42.442198 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.586851 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.586884 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.299917 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.299944 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:50.859136 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:50.859171 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.297734 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.297760 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:40.680524 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:40.680557 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:42.919791 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:42.919819 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.197955 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.197981 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.619952 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.619979 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:51.219687 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.219715 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:52.982130 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:52.982171 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.171863 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.171891 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.377647 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.377672 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.393051 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.393078 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.227653 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.227690 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:46.028380 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:46.028409 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.486712 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.486746 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.184109 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.184134 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.457229 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.457286 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.217264 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.217318 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.168726 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.168753 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:04.886018 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:04.886044 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:14.986396 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:14.986424 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:21.066910 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:21.066937 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.535934 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.535962 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:57.909008 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:57.909060 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:47.247324 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:47.247361 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:51.039724 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:51.039762 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.470593 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.470623 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.376868 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.376894 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.543297 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.543333 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.294173 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.294199 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:50.141046 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:50.141072 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:48.769472 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:48.769499 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.509957 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.510000 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.601924 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.601951 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.350397 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.350432 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:26:00.256105 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:26:00.256161 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:06.912885 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:06.912913 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.327270 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: pumpbooking.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.327300 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: pumpbooking.com:443:0 server certificate does NOT include an ID which matches the server name